From 42bdfa55368f6cac0fafb4b58bef3f322ef729a7 Mon Sep 17 00:00:00 2001
From: doshnid <77081571+doshnid@users.noreply.github.com>
Date: Thu, 30 May 2024 13:40:32 -0700
Subject: [PATCH 001/128] added ent public preview to toc and created pages

---
 mcc-ent-configure-provision-linux.md   | 143 +++++++++++++++++++++++++
 mcc-ent-configure-provision-windows.md | 143 +++++++++++++++++++++++++
 mcc-ent-create-resource-and-cache.md   | 143 +++++++++++++++++++++++++
 mcc-ent-faq.md                         | 143 +++++++++++++++++++++++++
 mcc-ent-manage-cache-using-CLI.md      | 143 +++++++++++++++++++++++++
 mcc-ent-private-preview.md             | 109 +++++++++++++++++++
 mcc-ent-support-and-troubleshooting.md | 143 +++++++++++++++++++++++++
 mcc-ent-unintall-cache-node.md         | 143 +++++++++++++++++++++++++
 mcc-ent-verify-cache-node.md           | 143 +++++++++++++++++++++++++
 windows/deployment/do/TOC.yml          |  32 ++++--
 10 files changed, 1277 insertions(+), 8 deletions(-)
 create mode 100644 mcc-ent-configure-provision-linux.md
 create mode 100644 mcc-ent-configure-provision-windows.md
 create mode 100644 mcc-ent-create-resource-and-cache.md
 create mode 100644 mcc-ent-faq.md
 create mode 100644 mcc-ent-manage-cache-using-CLI.md
 create mode 100644 mcc-ent-private-preview.md
 create mode 100644 mcc-ent-support-and-troubleshooting.md
 create mode 100644 mcc-ent-unintall-cache-node.md
 create mode 100644 mcc-ent-verify-cache-node.md

diff --git a/mcc-ent-configure-provision-linux.md b/mcc-ent-configure-provision-linux.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-configure-provision-linux.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-configure-provision-windows.md b/mcc-ent-configure-provision-windows.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-configure-provision-windows.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-create-resource-and-cache.md b/mcc-ent-create-resource-and-cache.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-create-resource-and-cache.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-faq.md b/mcc-ent-faq.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-faq.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-manage-cache-using-CLI.md b/mcc-ent-manage-cache-using-CLI.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-manage-cache-using-CLI.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-private-preview.md b/mcc-ent-private-preview.md
new file mode 100644
index 0000000000..b2e02240ed
--- /dev/null
+++ b/mcc-ent-private-preview.md
@@ -0,0 +1,109 @@
+---
+title: #Required; "What is <product>?"
+description: #Required; article description that is displayed in search results.
+author: #Required; your GitHub user alias, with correct capitalization.
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: overview #Required; leave this attribute/value as-is.
+ms.date: #Required; mm/dd/yyyy format.
+
+#CustomerIntent: As a <type of user>, I want <what?> so that <why?>.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the 
+main branch.
+
+This template provides the basic structure of a Overview article pattern. See the [instructions - Overview](../level4/article-overview.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+Overview is an article pattern that covers two aspects of a product or service:
+
+* What is it?
+* What is it used for?
+
+An Overview article talks about the product or service from a technical point of view. It's not intended to define the benefits or value proposition. That just duplicates marketing.
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: This is the primary heading at the top of the article.
+
+Use the format "What is <service>?" 
+
+You can also use this in the TOC if your service name doesn’t cause the phrase to wrap.
+
+-->
+
+# What is <product/service>? 
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
+
+Many services add artwork or videos below the Introduction.
+
+-->
+
+[Introductory paragraph]
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info
+directly into the article text.
+
+--->
+
+<!-- 3. H2s (Article body)------------------------------------------------------------ 
+
+Required: The article body should discuss the features that answer the "Why should I care?" question with a bit more depth.
+
+Give each H2 a heading that sets expectations for the content that follows. 
+Follow the H2 headings with a sentence about how the section contributes to the whole.
+Add images, code blocks, or other graphical elements after the information it illustrates.
+
+* Call out any basic requirements and dependencies.
+* Call out limitations or overhead.
+* Don't catalog every feature. Some might only need to be mentioned as available, without any discussion.
+* Give each H2 a heading that sets expectations for the content that follows.
+* Follow the H2 headings with a sentence about how the section contributes to the whole.
+* Images, code blocks, or other graphical elements come after the text block it illustrates.
+Don't number H2s.
+
+-->
+
+## [Section 1 heading]
+TODO: add your content
+
+## [Section 2 heading]
+TODO: add your content
+
+## [Section n heading]
+TODO: add your content
+
+<!-- 4. Next step/Related content ------------------------------------------------------------------------ 
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
diff --git a/mcc-ent-support-and-troubleshooting.md b/mcc-ent-support-and-troubleshooting.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-support-and-troubleshooting.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-unintall-cache-node.md b/mcc-ent-unintall-cache-node.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-unintall-cache-node.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/mcc-ent-verify-cache-node.md b/mcc-ent-verify-cache-node.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/mcc-ent-verify-cache-node.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 933c48b4b8..e24d97a6a3 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -35,14 +35,30 @@
       items:
       - name: MCC for Enterprise and Education Overview
         href: mcc-ent-edu-overview.md
-      - name: Requirements
-        href: mcc-enterprise-prerequisites.md
-      - name: Deploy Microsoft Connected Cache
-        href: mcc-enterprise-deploy.md
-      - name: Update or uninstall MCC
-        href: mcc-enterprise-update-uninstall.md
-      - name: Appendix
-        href: mcc-enterprise-appendix.md
+      - name: How-to guides
+        items:
+        - name: Create MCC resource and cache node
+          href: mcc-ent-create-resource-and-cache.md
+        - name: Configure, provision and deploy cache node
+          items:
+          - name: Configure and provision cache node on Linux
+            href: mcc-ent-configure-provision-linux.md
+          - name: Configure and provision cache node on Windows
+            href: mcc-ent-configure-provision-windows.md
+        - name: Verify cache node functionality
+          href: mcc-ent-verify-cache-node.md
+        - name: Uninstalling cache node
+          href: mcc-ent-unintall-cache-node.md
+        - name: Using CLI to create and manage cache nodes
+          href: mcc-ent-manage-cache-using-CLI.md        
+      - name: Resources
+        items:
+        - name: Frequent Asked Questions
+          href: mcc-ent-faq.md
+        - name: Support and troubleshooting
+          href: mcc-ent-support-and-troubleshooting.md
+      - name: MCC for Enterprise and Education (early preview)
+        href: mcc-ent-private-preview.md
     - name: MCC for ISPs
       items:
       - name: MCC for ISPs Overview

From db178c286e4b31d5cfc8e5aecb65ba4bcc309d50 Mon Sep 17 00:00:00 2001
From: doshnid <77081571+doshnid@users.noreply.github.com>
Date: Thu, 30 May 2024 13:44:07 -0700
Subject: [PATCH 002/128] moved pages under do

---
 .../deployment/do/mcc-ent-configure-provision-linux.md            | 0
 .../deployment/do/mcc-ent-configure-provision-windows.md          | 0
 .../deployment/do/mcc-ent-create-resource-and-cache.md            | 0
 mcc-ent-faq.md => windows/deployment/do/mcc-ent-faq.md            | 0
 .../deployment/do/mcc-ent-manage-cache-using-CLI.md               | 0
 .../deployment/do/mcc-ent-private-preview.md                      | 0
 .../deployment/do/mcc-ent-support-and-troubleshooting.md          | 0
 .../deployment/do/mcc-ent-unintall-cache-node.md                  | 0
 .../deployment/do/mcc-ent-verify-cache-node.md                    | 0
 9 files changed, 0 insertions(+), 0 deletions(-)
 rename mcc-ent-configure-provision-linux.md => windows/deployment/do/mcc-ent-configure-provision-linux.md (100%)
 rename mcc-ent-configure-provision-windows.md => windows/deployment/do/mcc-ent-configure-provision-windows.md (100%)
 rename mcc-ent-create-resource-and-cache.md => windows/deployment/do/mcc-ent-create-resource-and-cache.md (100%)
 rename mcc-ent-faq.md => windows/deployment/do/mcc-ent-faq.md (100%)
 rename mcc-ent-manage-cache-using-CLI.md => windows/deployment/do/mcc-ent-manage-cache-using-CLI.md (100%)
 rename mcc-ent-private-preview.md => windows/deployment/do/mcc-ent-private-preview.md (100%)
 rename mcc-ent-support-and-troubleshooting.md => windows/deployment/do/mcc-ent-support-and-troubleshooting.md (100%)
 rename mcc-ent-unintall-cache-node.md => windows/deployment/do/mcc-ent-unintall-cache-node.md (100%)
 rename mcc-ent-verify-cache-node.md => windows/deployment/do/mcc-ent-verify-cache-node.md (100%)

diff --git a/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
similarity index 100%
rename from mcc-ent-configure-provision-linux.md
rename to windows/deployment/do/mcc-ent-configure-provision-linux.md
diff --git a/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
similarity index 100%
rename from mcc-ent-configure-provision-windows.md
rename to windows/deployment/do/mcc-ent-configure-provision-windows.md
diff --git a/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
similarity index 100%
rename from mcc-ent-create-resource-and-cache.md
rename to windows/deployment/do/mcc-ent-create-resource-and-cache.md
diff --git a/mcc-ent-faq.md b/windows/deployment/do/mcc-ent-faq.md
similarity index 100%
rename from mcc-ent-faq.md
rename to windows/deployment/do/mcc-ent-faq.md
diff --git a/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
similarity index 100%
rename from mcc-ent-manage-cache-using-CLI.md
rename to windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
diff --git a/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
similarity index 100%
rename from mcc-ent-private-preview.md
rename to windows/deployment/do/mcc-ent-private-preview.md
diff --git a/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
similarity index 100%
rename from mcc-ent-support-and-troubleshooting.md
rename to windows/deployment/do/mcc-ent-support-and-troubleshooting.md
diff --git a/mcc-ent-unintall-cache-node.md b/windows/deployment/do/mcc-ent-unintall-cache-node.md
similarity index 100%
rename from mcc-ent-unintall-cache-node.md
rename to windows/deployment/do/mcc-ent-unintall-cache-node.md
diff --git a/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
similarity index 100%
rename from mcc-ent-verify-cache-node.md
rename to windows/deployment/do/mcc-ent-verify-cache-node.md

From 4da2fa446cb7ddec8aa8cf757b47cf5c354d2328 Mon Sep 17 00:00:00 2001
From: doshnid <77081571+doshnid@users.noreply.github.com>
Date: Mon, 3 Jun 2024 11:22:14 -0700
Subject: [PATCH 003/128] mcc ent

---
 windows/deployment/do/TOC.yml                 |  24 +++
 .../do/mcc-ent-configure-provision-linux.md   | 143 ++++++++++++++++++
 .../do/mcc-ent-configure-provision-windows.md | 143 ++++++++++++++++++
 .../do/mcc-ent-create-resource-and-cache.md   | 143 ++++++++++++++++++
 windows/deployment/do/mcc-ent-edu-overview.md |   3 +-
 windows/deployment/do/mcc-ent-faq.md          | 143 ++++++++++++++++++
 .../do/mcc-ent-manage-cache-using-CLI.md      | 143 ++++++++++++++++++
 .../deployment/do/mcc-ent-private-preview.md  | 109 +++++++++++++
 .../do/mcc-ent-support-and-troubleshooting.md | 143 ++++++++++++++++++
 .../do/mcc-ent-unintall-cache-node.md         | 143 ++++++++++++++++++
 .../do/mcc-ent-verify-cache-node.md           | 143 ++++++++++++++++++
 11 files changed, 1278 insertions(+), 2 deletions(-)
 create mode 100644 windows/deployment/do/mcc-ent-configure-provision-linux.md
 create mode 100644 windows/deployment/do/mcc-ent-configure-provision-windows.md
 create mode 100644 windows/deployment/do/mcc-ent-create-resource-and-cache.md
 create mode 100644 windows/deployment/do/mcc-ent-faq.md
 create mode 100644 windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
 create mode 100644 windows/deployment/do/mcc-ent-private-preview.md
 create mode 100644 windows/deployment/do/mcc-ent-support-and-troubleshooting.md
 create mode 100644 windows/deployment/do/mcc-ent-unintall-cache-node.md
 create mode 100644 windows/deployment/do/mcc-ent-verify-cache-node.md

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index f0d64329cb..7d68b35e94 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -45,6 +45,30 @@
         href: mcc-enterprise-update-uninstall.md
       - name: Appendix
         href: mcc-enterprise-appendix.md
+      - name: How-to guides
+        items:
+        - name: Create MCC resource and cache node
+          href: mcc-ent-create-resource-and-cache.md
+        - name: Configure, provision and deploy cache node
+          items:
+          - name: Configure and provision cache node on Linux
+            href: mcc-ent-configure-provision-linux.md
+          - name: Configure and provision cache node on Windows
+            href: mcc-ent-configure-provision-windows.md
+        - name: Verify cache node functionality
+          href: mcc-ent-verify-cache-node.md
+        - name: Uninstalling cache node
+          href: mcc-ent-unintall-cache-node.md
+        - name: Using CLI to create and manage cache nodes
+          href: mcc-ent-manage-cache-using-CLI.md        
+      - name: Resources
+        items:
+        - name: Frequent Asked Questions
+          href: mcc-ent-faq.md
+        - name: Support and troubleshooting
+          href: mcc-ent-support-and-troubleshooting.md
+      - name: MCC for Enterprise and Education (early preview)
+        href: mcc-ent-private-preview.md        
     - name: MCC for ISPs
       items:
       - name: MCC for ISPs Overview
diff --git a/windows/deployment/do/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-configure-provision-linux.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
new file mode 100644
index 0000000000..0a69bc4b60
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-configure-provision-windows.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+ 
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index b17beaa30a..a6b4c0afed 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -13,13 +13,12 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 05/23/2024
+ms.date: 05/09/2023
 ---
 
 # Microsoft Connected Cache for Enterprise and Education Overview
 
 > [!IMPORTANT]
->
 > - Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 > - As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
 
diff --git a/windows/deployment/do/mcc-ent-faq.md b/windows/deployment/do/mcc-ent-faq.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-faq.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
new file mode 100644
index 0000000000..b2e02240ed
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -0,0 +1,109 @@
+---
+title: #Required; "What is <product>?"
+description: #Required; article description that is displayed in search results.
+author: #Required; your GitHub user alias, with correct capitalization.
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: overview #Required; leave this attribute/value as-is.
+ms.date: #Required; mm/dd/yyyy format.
+
+#CustomerIntent: As a <type of user>, I want <what?> so that <why?>.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the 
+main branch.
+
+This template provides the basic structure of a Overview article pattern. See the [instructions - Overview](../level4/article-overview.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+Overview is an article pattern that covers two aspects of a product or service:
+
+* What is it?
+* What is it used for?
+
+An Overview article talks about the product or service from a technical point of view. It's not intended to define the benefits or value proposition. That just duplicates marketing.
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: This is the primary heading at the top of the article.
+
+Use the format "What is <service>?" 
+
+You can also use this in the TOC if your service name doesn’t cause the phrase to wrap.
+
+-->
+
+# What is <product/service>? 
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
+
+Many services add artwork or videos below the Introduction.
+
+-->
+
+[Introductory paragraph]
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info
+directly into the article text.
+
+--->
+
+<!-- 3. H2s (Article body)------------------------------------------------------------ 
+
+Required: The article body should discuss the features that answer the "Why should I care?" question with a bit more depth.
+
+Give each H2 a heading that sets expectations for the content that follows. 
+Follow the H2 headings with a sentence about how the section contributes to the whole.
+Add images, code blocks, or other graphical elements after the information it illustrates.
+
+* Call out any basic requirements and dependencies.
+* Call out limitations or overhead.
+* Don't catalog every feature. Some might only need to be mentioned as available, without any discussion.
+* Give each H2 a heading that sets expectations for the content that follows.
+* Follow the H2 headings with a sentence about how the section contributes to the whole.
+* Images, code blocks, or other graphical elements come after the text block it illustrates.
+Don't number H2s.
+
+-->
+
+## [Section 1 heading]
+TODO: add your content
+
+## [Section 2 heading]
+TODO: add your content
+
+## [Section n heading]
+TODO: add your content
+
+<!-- 4. Next step/Related content ------------------------------------------------------------------------ 
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-unintall-cache-node.md b/windows/deployment/do/mcc-ent-unintall-cache-node.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-unintall-cache-node.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
new file mode 100644
index 0000000000..62ca98f573
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -0,0 +1,143 @@
+---
+title: #Required; "<verb> * <noun>"
+description: #Required; Keep the description within 100- and 165-characters including spaces.
+author: #Required; your GitHub user alias, with correct capitalization
+ms.author: #Required; microsoft alias of author
+ms.service: #Required; use the name-string related to slug in ms.product/ms.service
+ms.topic: how-to #Required; leave this attribute/value as-is
+ms.date: #Required; mm/dd/yyyy format
+
+#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+

From addc94dd21cf2a1e6983d1bf97981f112259721c Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Mon, 3 Jun 2024 11:25:32 -0700
Subject: [PATCH 004/128] Revert "mcc ent public preview toc changes"

---
 windows/deployment/do/TOC.yml                 |  32 +---
 .../do/mcc-ent-configure-provision-linux.md   | 143 ------------------
 .../do/mcc-ent-configure-provision-windows.md | 143 ------------------
 .../do/mcc-ent-create-resource-and-cache.md   | 143 ------------------
 windows/deployment/do/mcc-ent-faq.md          | 143 ------------------
 .../do/mcc-ent-manage-cache-using-CLI.md      | 143 ------------------
 .../deployment/do/mcc-ent-private-preview.md  | 109 -------------
 .../do/mcc-ent-support-and-troubleshooting.md | 143 ------------------
 .../do/mcc-ent-unintall-cache-node.md         | 143 ------------------
 .../do/mcc-ent-verify-cache-node.md           | 143 ------------------
 10 files changed, 8 insertions(+), 1277 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-linux.md
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-windows.md
 delete mode 100644 windows/deployment/do/mcc-ent-create-resource-and-cache.md
 delete mode 100644 windows/deployment/do/mcc-ent-faq.md
 delete mode 100644 windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
 delete mode 100644 windows/deployment/do/mcc-ent-private-preview.md
 delete mode 100644 windows/deployment/do/mcc-ent-support-and-troubleshooting.md
 delete mode 100644 windows/deployment/do/mcc-ent-unintall-cache-node.md
 delete mode 100644 windows/deployment/do/mcc-ent-verify-cache-node.md

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index e24d97a6a3..933c48b4b8 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -35,30 +35,14 @@
       items:
       - name: MCC for Enterprise and Education Overview
         href: mcc-ent-edu-overview.md
-      - name: How-to guides
-        items:
-        - name: Create MCC resource and cache node
-          href: mcc-ent-create-resource-and-cache.md
-        - name: Configure, provision and deploy cache node
-          items:
-          - name: Configure and provision cache node on Linux
-            href: mcc-ent-configure-provision-linux.md
-          - name: Configure and provision cache node on Windows
-            href: mcc-ent-configure-provision-windows.md
-        - name: Verify cache node functionality
-          href: mcc-ent-verify-cache-node.md
-        - name: Uninstalling cache node
-          href: mcc-ent-unintall-cache-node.md
-        - name: Using CLI to create and manage cache nodes
-          href: mcc-ent-manage-cache-using-CLI.md        
-      - name: Resources
-        items:
-        - name: Frequent Asked Questions
-          href: mcc-ent-faq.md
-        - name: Support and troubleshooting
-          href: mcc-ent-support-and-troubleshooting.md
-      - name: MCC for Enterprise and Education (early preview)
-        href: mcc-ent-private-preview.md
+      - name: Requirements
+        href: mcc-enterprise-prerequisites.md
+      - name: Deploy Microsoft Connected Cache
+        href: mcc-enterprise-deploy.md
+      - name: Update or uninstall MCC
+        href: mcc-enterprise-update-uninstall.md
+      - name: Appendix
+        href: mcc-enterprise-appendix.md
     - name: MCC for ISPs
       items:
       - name: MCC for ISPs Overview
diff --git a/windows/deployment/do/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-linux.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-windows.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-faq.md b/windows/deployment/do/mcc-ent-faq.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-faq.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
deleted file mode 100644
index b2e02240ed..0000000000
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ /dev/null
@@ -1,109 +0,0 @@
----
-title: #Required; "What is <product>?"
-description: #Required; article description that is displayed in search results.
-author: #Required; your GitHub user alias, with correct capitalization.
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: overview #Required; leave this attribute/value as-is.
-ms.date: #Required; mm/dd/yyyy format.
-
-#CustomerIntent: As a <type of user>, I want <what?> so that <why?>.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the 
-main branch.
-
-This template provides the basic structure of a Overview article pattern. See the [instructions - Overview](../level4/article-overview.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-Overview is an article pattern that covers two aspects of a product or service:
-
-* What is it?
-* What is it used for?
-
-An Overview article talks about the product or service from a technical point of view. It's not intended to define the benefits or value proposition. That just duplicates marketing.
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: This is the primary heading at the top of the article.
-
-Use the format "What is <service>?" 
-
-You can also use this in the TOC if your service name doesn’t cause the phrase to wrap.
-
--->
-
-# What is <product/service>? 
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
-
-Many services add artwork or videos below the Introduction.
-
--->
-
-[Introductory paragraph]
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info
-directly into the article text.
-
---->
-
-<!-- 3. H2s (Article body)------------------------------------------------------------ 
-
-Required: The article body should discuss the features that answer the "Why should I care?" question with a bit more depth.
-
-Give each H2 a heading that sets expectations for the content that follows. 
-Follow the H2 headings with a sentence about how the section contributes to the whole.
-Add images, code blocks, or other graphical elements after the information it illustrates.
-
-* Call out any basic requirements and dependencies.
-* Call out limitations or overhead.
-* Don't catalog every feature. Some might only need to be mentioned as available, without any discussion.
-* Give each H2 a heading that sets expectations for the content that follows.
-* Follow the H2 headings with a sentence about how the section contributes to the whole.
-* Images, code blocks, or other graphical elements come after the text block it illustrates.
-Don't number H2s.
-
--->
-
-## [Section 1 heading]
-TODO: add your content
-
-## [Section 2 heading]
-TODO: add your content
-
-## [Section n heading]
-TODO: add your content
-
-<!-- 4. Next step/Related content ------------------------------------------------------------------------ 
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-unintall-cache-node.md b/windows/deployment/do/mcc-ent-unintall-cache-node.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-unintall-cache-node.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-

From 04cb25e120968789c268b1cd7414fe296f1b1c30 Mon Sep 17 00:00:00 2001
From: doshnid <77081571+doshnid@users.noreply.github.com>
Date: Mon, 3 Jun 2024 11:41:26 -0700
Subject: [PATCH 005/128] added metadata

---
 .../do/mcc-ent-configure-provision-linux.md   |  24 +--
 .../do/mcc-ent-configure-provision-windows.md |  24 +--
 .../do/mcc-ent-create-resource-and-cache.md   |  24 +--
 windows/deployment/do/mcc-ent-faq.md          | 143 ------------------
 windows/deployment/do/mcc-ent-faq.yml         |  26 ++++
 .../do/mcc-ent-manage-cache-using-CLI.md      |  24 +--
 .../deployment/do/mcc-ent-private-preview.md  |  24 +--
 .../do/mcc-ent-support-and-troubleshooting.md |  24 +--
 .../do/mcc-ent-unintall-cache-node.md         |  24 +--
 .../do/mcc-ent-verify-cache-node.md           |  24 +--
 10 files changed, 146 insertions(+), 215 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-faq.md
 create mode 100644 windows/deployment/do/mcc-ent-faq.yml

diff --git a/windows/deployment/do/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
index 62ca98f573..3c39a7af8f 100644
--- a/windows/deployment/do/mcc-ent-configure-provision-linux.md
+++ b/windows/deployment/do/mcc-ent-configure-provision-linux.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise provision Linux cache node
+description: Microsoft Connected Cache for Enterprise. Learn about how to provision Linux cache node.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
index 0a69bc4b60..d2ea4921a2 100644
--- a/windows/deployment/do/mcc-ent-configure-provision-windows.md
+++ b/windows/deployment/do/mcc-ent-configure-provision-windows.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise provision Windows cache node
+description: Microsoft Connected Cache for Enterprise. Learn about how to provision Windows cache node.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 62ca98f573..3309c1bd6c 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise provision create cache node
+description: Microsoft Connected Cache for Enterprise. Learn about how to create cache node.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-faq.md b/windows/deployment/do/mcc-ent-faq.md
deleted file mode 100644
index 62ca98f573..0000000000
--- a/windows/deployment/do/mcc-ent-faq.md
+++ /dev/null
@@ -1,143 +0,0 @@
----
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
new file mode 100644
index 0000000000..8783a8b66d
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -0,0 +1,26 @@
+---
+title: MCC for Enterprise provision FAQs
+description: Microsoft Connected Cache for Enterprise. Frequently asked questions.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: faq
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
+---
+title: Microsoft Connected Cache Frequently Asked Questions
+summary: |
+  Frequently asked questions about Microsoft Connected Cache
+  
+sections:
+  - name: Ignored
+    questions:
+      - question: Is this product a free service?
+        answer: Yes. Microsoft Connected Cache is a free service.  
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 62ca98f573..5c05115494 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise manage cache nodes using CLI
+description: Microsoft Connected Cache for Enterprise. Learn about managing cache nodes using CLI
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index b2e02240ed..531c39b882 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "What is <product>?"
-description: #Required; article description that is displayed in search results.
-author: #Required; your GitHub user alias, with correct capitalization.
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: overview #Required; leave this attribute/value as-is.
-ms.date: #Required; mm/dd/yyyy format.
-
-#CustomerIntent: As a <type of user>, I want <what?> so that <why?>.
+title: MCC for Enterprise early preview
+description: Microsoft Connected Cache for Enterprise early preview.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index 62ca98f573..8b405f6c51 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise support and troubleshooting
+description: Microsoft Connected Cache for Enterprise. Learn about support and troubleshooting
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-unintall-cache-node.md b/windows/deployment/do/mcc-ent-unintall-cache-node.md
index 62ca98f573..1aa10c6c08 100644
--- a/windows/deployment/do/mcc-ent-unintall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-unintall-cache-node.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise uninstall
+description: Microsoft Connected Cache for Enterprise. Learn about uninstall
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 62ca98f573..be12905760 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -1,13 +1,19 @@
 ---
-title: #Required; "<verb> * <noun>"
-description: #Required; Keep the description within 100- and 165-characters including spaces.
-author: #Required; your GitHub user alias, with correct capitalization
-ms.author: #Required; microsoft alias of author
-ms.service: #Required; use the name-string related to slug in ms.product/ms.service
-ms.topic: how-to #Required; leave this attribute/value as-is
-ms.date: #Required; mm/dd/yyyy format
-
-#CustomerIntent: As a < type of user >, I want < what? > so that < why? >.
+title: MCC for Enterprise verify cache node
+description: Microsoft Connected Cache for Enterprise. Learn about verifying cache node
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
 ---
 
 <!--

From 430b2a7ebcdbbf52c62e97791e5cde032b2f5c6b Mon Sep 17 00:00:00 2001
From: doshnid <77081571+doshnid@users.noreply.github.com>
Date: Mon, 3 Jun 2024 11:50:10 -0700
Subject: [PATCH 006/128] added metadata

---
 windows/deployment/do/mcc-ent-faq.yml | 41 ++++++++++++++-------------
 1 file changed, 21 insertions(+), 20 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 8783a8b66d..690dd4d0c7 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -1,26 +1,27 @@
----
-title: MCC for Enterprise provision FAQs
-description: Microsoft Connected Cache for Enterprise. Frequently asked questions.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: faq
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-title: Microsoft Connected Cache Frequently Asked Questions
+### YamlMime:FAQ
+metadata:
+  title: Microsoft Connected Cache for Enterprise Frequently Asked Questions
+  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise.
+  ms.service: windows-client
+  ms.subservice: itpro-updates
+  ms.topic: faq
+  ms.author: nidos
+  author: doshnid
+  ms.reviewer: mstewart
+  manager: aaroncz
+  ms.collection:
+    - highpri
+    - tier3
+  appliesto: 
+    - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+    - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+  ms.date: 06/03/2024
+title: Microsoft Connected Cache for Enteprise Frequently Asked Questions
 summary: |
-  Frequently asked questions about Microsoft Connected Cache
+  Frequently asked questions about Microsoft Connected Cache for Enterprise
   
 sections:
   - name: Ignored
     questions:
       - question: Is this product a free service?
-        answer: Yes. Microsoft Connected Cache is a free service.  
+        answer: Yes. Microsoft Connected Cache is a free service. 

From 1c4a249480f37d7cef61c5d5ce25017f554a5462 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 4 Sep 2024 10:46:12 -0700
Subject: [PATCH 007/128] added article for release notes

---
 .../deployment/do/mcc-ent-release-notes.md    | 161 ++++++++++++++++++
 1 file changed, 161 insertions(+)
 create mode 100644 windows/deployment/do/mcc-ent-release-notes.md

diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
new file mode 100644
index 0000000000..22407de869
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -0,0 +1,161 @@
+---
+title: MCC for Enterprise and Education Release Notes
+description: Release Notes for Microsoft Connected Cache (MCC) for Enterprise and Education.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: conceptual
+ms.author: nidos
+author: cmknox
+manager: aaroncz
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+ms.date: 09/04/2024
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the  main branch.
+
+This template provides the basic structure of a Concept article pattern. See the [instructions - Concept](../level4/article-concept.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+Concept is an article pattern that defines what something is or explains an abstract idea.
+
+There are several situations that might call for writing a Concept article, including:
+
+* If there's a new idea that's central to a service or product, that idea must be explained so that customers understand the value of the service or product as it relates to their circumstances. A good recent example is the concept of containerization or the concept of scalability.
+* If there's optional information or explanations that are common to several Tutorials or How-to guides, this information can be consolidated and single-sourced in a full-bodied Concept article for you to reference.
+* If a service or product is extensible, advanced users might modify it to better suit their application. It's better that advanced users fully understand the reasoning behind the design choices and everything else "under the hood" so that their variants are more robust, thereby improving their experience.
+
+-->
+
+<!-- 1. H1
+-----------------------------------------------------------------------------
+
+Required. Set expectations for what the content covers, so customers know the content meets their needs. The H1 should NOT begin with a verb.
+
+Reflect the concept that undergirds an action, not the action itself. The H1 must start with:
+
+* "\<noun phrase\> concept(s)", or
+* "What is \<noun\>?", or
+* "\<noun\> overview"
+
+Concept articles are primarily distinguished by what they aren't:
+
+* They aren't procedural articles. They don't show how to complete a task.
+* They don't have specific end states, other than conveying an underlying idea, and don't have concrete, sequential actions for the user to take.
+
+One clear sign of a procedural article would be the use of a numbered list. With rare exception, numbered lists shouldn't appear in Concept articles.
+
+-->
+
+# [\<noun phrase\> concept(s)]
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph
+----------------------------------------------------------
+
+Required. Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
+
+* Answer the fundamental "Why do I want this knowledge?" question.
+* Don't start the article with a bunch of notes or caveats.
+* Don’t link away from the article in the introduction.
+* For definitive concepts, it's better to lead with a sentence in the form, "X is a (type of) Y that does Z."
+
+-->
+
+[Introductory paragraph]
+TODO: Add your introductory paragraph
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Optional: Make **Prerequisites** your first H2 in the article. Use clear and unambiguous
+language and use a unordered list format. 
+
+-->
+
+## Prerequisites
+TODO: [List the prerequisites if appropriate]
+
+<!-- 4. H2s (Article body)
+--------------------------------------------------------------------
+
+Required: In a series of H2 sections, the article body should discuss the ideas that explain how "X is a (type of) Y that does Z":
+
+* Give each H2 a heading that sets expectations for the content that follows.
+* Follow the H2 headings with a sentence about how the section contributes to the whole.
+* Describe the concept's critical features in the context of defining what it is.
+* Provide an example of how it's used where, how it fits into the context, or what it does. If it's complex and new to the user, show at least two examples.
+* Provide a non-example if contrasting it will make it clearer to the user what the concept is.
+* Images, code blocks, or other graphical elements come after the text block it illustrates.
+* Don't number H2s.
+
+-->
+
+## [Section 1 heading]
+TODO: add your content
+
+## [Section 2 heading]
+TODO: add your content
+
+## [Section n heading]
+TODO: add your content
+
+<!-- 5. Next step/Related content ------------------------------------------------------------------------ 
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+
+
+<!-- 6. Next step/Related content ------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related
+content. You don't have to use either, but don't use both. For Next step, provide one link to the
+next step in a sequence. Use the blue box format For Related content provide 1-3 links. Include some
+context so the customer can determine why they would click the link. Add a context sentence for the
+following links.
+
+-->
+
+## Next step
+TODO: Add your next step link(s)
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+TODO: Add your next step link(s)
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the 
+main branch.
+
+-->

From fcb09edfdd0692e9d96c75dd67738d5d24f7d718 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 4 Sep 2024 12:53:26 -0700
Subject: [PATCH 008/128] added monitor node page

---
 .../deployment/do/mcc-ent-monitor-cache.md    | 149 ++++++++++++++++++
 1 file changed, 149 insertions(+)
 create mode 100644 windows/deployment/do/mcc-ent-monitor-cache.md

diff --git a/windows/deployment/do/mcc-ent-monitor-cache.md b/windows/deployment/do/mcc-ent-monitor-cache.md
new file mode 100644
index 0000000000..a8eb213e19
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-monitor-cache.md
@@ -0,0 +1,149 @@
+---
+title: MCC for Enterprise monitor cache nodes
+description: Microsoft Connected Cache for Enterprise. Learn about how to monitor cache node.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 09/04/2024
+---
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+
+This template provides the basic structure of a How-to article pattern. See the
+[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+
+You can provide feedback about this template at: https://aka.ms/patterns-feedback
+
+How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+
+-->
+
+<!-- 1. H1 -----------------------------------------------------------------------------
+
+Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
+
+For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+
+* Include only a single H1 in the article.
+* Don't start with a gerund.
+* Don't include "Tutorial" in the H1.
+
+-->
+
+# "<verb> * <noun>"
+TODO: Add your heading
+
+<!-- 2. Introductory paragraph ----------------------------------------------------------
+
+Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+
+Readers should have a clear idea of what they will do in this article after reading the introduction.
+
+* Introduction immediately follows the H1 text.
+* Introduction section should be between 1-3 paragraphs.
+* Don't use a bulleted list of article H2 sections.
+
+Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+
+-->
+
+TODO: Add your introductory paragraph
+
+<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+
+-->
+
+<!-- 3. Prerequisites --------------------------------------------------------------------
+
+Required: Make Prerequisites the first H2 after the H1. 
+
+* Provide a bulleted list of items that the user needs.
+* Omit any preliminary text to the list.
+* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+
+-->
+
+## Prerequisites
+
+TODO: List the prerequisites
+
+<!-- 4. Task H2s ------------------------------------------------------------------------------
+
+Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+
+For portal-based procedures, minimize bullets and numbering.
+
+* Each H2 should be a major step in the task.
+* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
+* Don't start with a gerund.
+* Don't number the H2s.
+* Begin each H2 with a brief explanation for context.
+* Provide a ordered list of procedural steps.
+* Provide a code block, diagram, or screenshot if appropriate
+* An image, code block, or other graphical element comes after numbered step it illustrates.
+* If necessary, optional groups of steps can be added into a section.
+* If necessary, alternative groups of steps can be added into a section.
+
+-->
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+## "\<verb\> * \<noun\>"
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Next step
+
+TODO: Add your next step link(s)
+
+> [!div class="nextstepaction"]
+> [Write concepts](article-concept.md)
+
+<!-- OR -->
+
+## Related content
+
+TODO: Add your next step link(s)
+
+- [Write concepts](article-concept.md)
+
+<!--
+Remove all the comments in this template before you sign-off or merge to the main branch.
+-->
+

From 86252791df8c0c7029a56cfb0810febb66950a62 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 5 Sep 2024 10:31:16 -0700
Subject: [PATCH 009/128] updated mcc toc

---
 windows/deployment/do/TOC.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 0653d59c3e..83e96d93e7 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -57,6 +57,8 @@
             href: mcc-ent-configure-provision-windows.md
         - name: Verify cache node functionality
           href: mcc-ent-verify-cache-node.md
+        - name: Monitor cache node
+          href: mcc-ent-monitor-cache.md
         - name: Uninstalling cache node
           href: mcc-ent-unintall-cache-node.md
         - name: Using CLI to create and manage cache nodes
@@ -67,8 +69,10 @@
           href: mcc-ent-faq.md
         - name: Support and troubleshooting
           href: mcc-ent-support-and-troubleshooting.md
-      - name: MCC for Enterprise and Education (early preview)
-        href: mcc-ent-private-preview.md        
+        - name: MCC for Enterprise and Education (early preview)
+          href: mcc-ent-private-preview.md
+      - name: Release notes
+        href: mcc-ent-release-notes.md        
     - name: MCC for ISPs
       items:
       - name: MCC for ISPs Overview

From 9e6fcd9b80c244d2b9b6889f3bb3b8dc6c85344e Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 5 Sep 2024 11:09:25 -0700
Subject: [PATCH 010/128] changed toc, removed unwanted pages.

---
 windows/deployment/do/TOC.yml                 |  16 +-
 ...requisites.md => mcc-ent-prerequisites.md} |   0
 ...ode.md => mcc-ent-uninstall-cache-node.md} |   0
 ...e-uninstall.md => mcc-ent-update-cache.md} |   0
 .../deployment/do/mcc-enterprise-appendix.md  | 138 ------
 .../deployment/do/mcc-enterprise-deploy.md    | 418 ------------------
 6 files changed, 6 insertions(+), 566 deletions(-)
 rename windows/deployment/do/{mcc-enterprise-prerequisites.md => mcc-ent-prerequisites.md} (100%)
 rename windows/deployment/do/{mcc-ent-unintall-cache-node.md => mcc-ent-uninstall-cache-node.md} (100%)
 rename windows/deployment/do/{mcc-enterprise-update-uninstall.md => mcc-ent-update-cache.md} (100%)
 delete mode 100644 windows/deployment/do/mcc-enterprise-appendix.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-deploy.md

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 83e96d93e7..9ddf747b89 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -38,13 +38,7 @@
       - name: MCC for Enterprise and Education Overview
         href: mcc-ent-edu-overview.md
       - name: Requirements
-        href: mcc-enterprise-prerequisites.md
-      - name: Deploy Microsoft Connected Cache
-        href: mcc-enterprise-deploy.md
-      - name: Update or uninstall MCC
-        href: mcc-enterprise-update-uninstall.md
-      - name: Appendix
-        href: mcc-enterprise-appendix.md
+        href: mcc-ent-prerequisites.md
       - name: How-to guides
         items:
         - name: Create MCC resource and cache node
@@ -60,13 +54,15 @@
         - name: Monitor cache node
           href: mcc-ent-monitor-cache.md
         - name: Uninstalling cache node
-          href: mcc-ent-unintall-cache-node.md
+          href: mcc-ent-uninstall-cache-node.md
         - name: Using CLI to create and manage cache nodes
-          href: mcc-ent-manage-cache-using-CLI.md        
+          href: mcc-ent-manage-cache-using-CLI.md  
+        - name: Update MCC
+          href: mcc-ent-update-cache.md     
       - name: Resources
         items:
         - name: Frequent Asked Questions
-          href: mcc-ent-faq.md
+          href: mcc-ent-faq.yml
         - name: Support and troubleshooting
           href: mcc-ent-support-and-troubleshooting.md
         - name: MCC for Enterprise and Education (early preview)
diff --git a/windows/deployment/do/mcc-enterprise-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
similarity index 100%
rename from windows/deployment/do/mcc-enterprise-prerequisites.md
rename to windows/deployment/do/mcc-ent-prerequisites.md
diff --git a/windows/deployment/do/mcc-ent-unintall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
similarity index 100%
rename from windows/deployment/do/mcc-ent-unintall-cache-node.md
rename to windows/deployment/do/mcc-ent-uninstall-cache-node.md
diff --git a/windows/deployment/do/mcc-enterprise-update-uninstall.md b/windows/deployment/do/mcc-ent-update-cache.md
similarity index 100%
rename from windows/deployment/do/mcc-enterprise-update-uninstall.md
rename to windows/deployment/do/mcc-ent-update-cache.md
diff --git a/windows/deployment/do/mcc-enterprise-appendix.md b/windows/deployment/do/mcc-enterprise-appendix.md
deleted file mode 100644
index 6264ea32c4..0000000000
--- a/windows/deployment/do/mcc-enterprise-appendix.md
+++ /dev/null
@@ -1,138 +0,0 @@
----
-title: Appendix for MCC for Enterprise and Education
-description: This article contains reference information for Microsoft Connected Cache (MCC) for Enterprise and Education.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: reference
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 05/23/2024
----
-
-# Appendix
-
-## Steps to obtain an Azure subscription ID
-
-<!--Using include file, get-azure-subscription.md, do/mcc-isp.md for shared content-->
-[!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
-
-### Troubleshooting
-
-If you're not able to sign up for a Microsoft Azure subscription with the **Account belongs to a directory that cannot be associated with an Azure subscription. Please sign in with a different account.** error, see the following articles:
-
-- [Can't sign up for a Microsoft Azure subscription](/troubleshoot/azure/general/cannot-sign-up-subscription).
-- [Troubleshoot issues when you sign up for a new account in the Azure portal](/azure/cost-management-billing/manage/troubleshoot-azure-sign-up).
-
-## Hardware specifications
-
-Most customers choose to install their cache node on a Windows Server with a nested Hyper-V VM. If this isn't supported in your network, some customers have also opted to install their cache node using VMware. At this time, a Linux-only solution isn't available and Azure VMs don't support the standalone Microsoft Connected Cache.
-
-### Installing on VMware
-
-Microsoft Connected Cache for Enterprise and Education can be successfully installed on VMware. To do so, there are a couple of additional configurations to be made. Ensure the VM is turned off before making the following configuration changes:
-
-1. Ensure that you're using ESX. In the VM settings, turn on the option **Expose hardware assisted virtualization to the guest OS**.
-1. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**.
-
-### Installing on Hyper-V
-
-To learn more about how to configure Intel and AMD processors to support nested virtualization, see [Run Hyper-V in a Virtual Machine with Nested Virtualization](/virtualization/hyper-v-on-windows/user-guide/nested-virtualization).
-
-## Diagnostics Script
-
-If you're having issues with your MCC, we included a diagnostics script. The script collects all your logs and zips them into a single file. You can then send us these logs via email for the MCC team to debug.
-
-To run this script:
-
-1. Navigate to the following folder in the MCC installation files:
-
-    mccinstaller > Eflow > Diagnostics
-
-1. Run the following commands:
-
-   ```powershell
-   Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-   .\collectMccDiagnostics.ps1
-   ```
-
-1. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\<currentpath\>**\mccdiagnostics\support_bundle_\$timestamp.tar.gz
-
-1. [Email the MCC team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process.
-
-## IoT Edge runtime
-
-The Azure IoT Edge runtime enables custom and cloud logic on IoT Edge devices.
-The runtime sits on the IoT Edge device, and performs management and
-communication operations. The runtime performs several functions:
-
-- Installs and update workloads (Docker containers) on the device.
-- Maintains Azure IoT Edge security standards on the device.
-- Ensures that IoT Edge modules (Docker containers) are always running.
-- Reports module (Docker containers) health to the cloud for remote monitoring.
-- Manages communication between an IoT Edge device and the cloud.
-
-For more information on Azure IoT Edge, see the [Azure IoT Edge documentation](/azure/iot-edge/about-iot-edge).
-
-## Routing local Windows clients to an MCC
-
-### Get the IP address of your MCC using ifconfig
-
-There are multiple methods that can be used to apply a policy to PCs that should participate in downloading from the MCC.
-
-#### Registry key
-
-You can either set your MCC IP address or FQDN using:
-
-1. Registry key (version 1709 and later):  
-    `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization`
-</br>
-    "DOCacheHost"=" "  
-
-    From an elevated command prompt:
-
-    ```powershell
-        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f
-    ```
-
-1. MDM path (version 1809 and later):
-
-    `.Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHost`
-
-1. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the MCC using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your MCC, such as `10.137.187.38`.
-
-   :::image type="content" source="./images/ent-mcc-group-policy-hostname.png" alt-text="Screenshot of the Group Policy editor showing the Cache Server Hostname Group Policy setting." lightbox="./images/ent-mcc-group-policy-hostname.png":::
-
-## Verify content using the DO client
-
-To verify that the Delivery Optimization client can download content using MCC, you can use the following steps:
-
-1. Download a game or application from the Microsoft Store.
-
-   :::image type="content" source="./images/ent-mcc-store-example-download.png" alt-text="Screenshot of the Microsoft Store with the game, Angry Birds 2, selected.":::
-
-1. Verify downloads came from MCC by one of two methods:
-
-    - Using the PowerShell Cmdlet Get-DeliveryOptimizationStatus you should see *BytesFromCacheServer*.
-
-      :::image type="content" source="./images/ent-mcc-get-deliveryoptimizationstatus.png" alt-text="Screenshot of the output of Get-DeliveryOptimization | FT from PowerShell." lightbox="./images/ent-mcc-get-deliveryoptimizationstatus.png":::
-
-    - Using the Delivery Optimization Activity Monitor
-
-      :::image type="content" source="./images/ent-mcc-delivery-optimization-activity.png" alt-text="Screenshot of the Delivery Optimization Activity Monitor.":::
-
-## EFLOW
-
-- [What is Azure IoT Edge for Linux on Windows](/azure/iot-edge/iot-edge-for-linux-on-windows)
-- [Install Azure IoT Edge for Linux on Windows](/azure/iot-edge/how-to-provision-single-device-linux-on-windows-symmetric#install-iot-edge)
-- [PowerShell functions for Azure IoT Edge for Linux on Windows](/azure/iot-edge/reference-iot-edge-for-linux-on-windows-functions)
-- EFLOW FAQ and Support: [Support · Azure/iotedge-eflow Wiki (github.com)](https://github.com/Azure/iotedge-eflow/wiki/Support#how-can-i-apply-updates-to-eflow)
-- [Now ready for Production: Linux IoT Edge Modules on Windows - YouTube](https://www.youtube.com/watch?v=pgqVCg6cxVU&ab_channel=MicrosoftIoTDevelopers)
diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md
deleted file mode 100644
index 5cc7236b51..0000000000
--- a/windows/deployment/do/mcc-enterprise-deploy.md
+++ /dev/null
@@ -1,418 +0,0 @@
----
-title: Deploying your cache node
-description: How to deploy a Microsoft Connected Cache (MCC) for Enterprise and Education cache node from the Azure portal.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-ms.reviewer: mstewart
-manager: aaroncz
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 05/23/2024
----
-
-# Deploy your cache node
-
-This article describes how to deploy a Microsoft Connected Cache (MCC) for Enterprise and Education cache node.
-
-## Steps to deploy MCC
-
-To deploy MCC to your server:
-
-1. [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id)
-1. [Create the MCC Resource in Azure](#create-the-mcc-resource-in-azure)
-1. [Create an MCC Node](#create-an-mcc-node-in-azure)
-1. [Edit Cache Node Information](#edit-cache-node-information)
-1. [Install MCC on a physical server or VM](#install-mcc-on-windows)
-1. [Verify MCC functionality](#verify-mcc-server-functionality)
-1. [Review common Issues](#common-issues) if needed.
-
-### Provide Microsoft with the Azure subscription ID
-
-As part of the MCC preview onboarding process an Azure subscription ID must be provided to Microsoft.
-
-> [!IMPORTANT]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
-
-For information about creating or locating your subscription ID, see [Steps to obtain an Azure subscription ID](mcc-enterprise-appendix.md#steps-to-obtain-an-azure-subscription-id).
-
-### Create the MCC resource in Azure
-
-The MCC Azure management portal is used to create and manage MCC nodes. An Azure subscription ID is used to grant access to the preview and to create the MCC resource in Azure and Cache nodes.
-
-Once you take the survey above and the MCC team adds your subscription ID to the allowlist, you'll be given a link to the Azure portal where you can create the resource described below.
-
-1. In the Azure portal home page, choose **Create a resource**:  
-
-   :::image type="content" source="./images/ent-mcc-create-azure-resource.png" alt-text="Screenshot of the Azure portal. The create a resource option is outlined in red.":::
-
-1. Type **Microsoft Connected Cache** into the search box, and hit **Enter** to show search results.
-
-   > [!NOTE]
-   > You won't see Microsoft Connected Cache in the drop-down list. You'll need to type the string and press enter to see the result.
-
-1. Select **Microsoft Connected Cache Enterprise** and choose **Create** on the next screen to start the process of creating the MCC resource.
-
-   :::image type="content" source="./images/ent-mcc-azure-search-result.png" alt-text="Screenshot of the Azure portal search results for Microsoft Connected Cache.":::
-
-   :::image type="content" source="./images/ent-mcc-azure-marketplace.png" alt-text="Screenshot of Microsoft Connected Cache Enterprise within the Azure Marketplace.":::
-
-1. Fill in the required fields to create the MCC resource.
-
-    - Choose the subscription that you provided to Microsoft.
-    - Azure resource groups are logical groups of resources. Create a new resource group and choose a name for your resource group.
-    - Choose **(US) West US** for the location of the resource. This choice won't impact MCC if the physical location isn't in the West US, it's just a limitation of the preview.
-
-       > [!IMPORTANT]
-       > Your MCC resource will not be created properly if you do not select **(US) West US**
-
-    - Choose a name for the MCC resource.
-      - Your MCC resource must not contain the word **Microsoft** in it.
-
-      :::image type="content" source="./images/ent-mcc-azure-create-connected-cache.png" alt-text="Screenshot of the Create a Connected Cache page within the Azure Marketplace.":::
-
-1. Once all the information has been entered, select the **Review + Create** button. Once validation is complete, select the **Create** button to start the resource creation.
-
-    :::image type="content" source="./images/ent-mcc-azure-cache-created.png" alt-text="Screenshot of the completed cache deployment within the Azure." lightbox="./images/ent-mcc-azure-cache-created.png":::
-
-#### Error: Validation failed
-
-- If you get a Validation failed error message on your portal, it's likely because you selected the **Location** as **US West 2** or some other location that isn't **(US) West US**.
-  - To resolve this error, go to the previous step and choose **(US) West US**.
-
-    :::image type="content" source="./images/ent-mcc-create-cache-failed.png" alt-text="Screenshot of a failed cache deployment due to an incorrect location.":::
-
-### Create an MCC node in Azure
-
-Creating an MCC node is a multi-step process and the first step is to access the MCC early preview management portal.
-
-1. After the successful resource creation, select  **Go to resource**.
-1. Under **Cache Node Management** section on the leftmost panel, select **Cache Nodes**.
-
-    :::image type="content" source="./images/ent-mcc-cache-nodes.png" alt-text="Screenshot of the Cache Node Management section with the navigation link to the Cache Nodes page outlined in red.":::
-
-1. On the **Cache Nodes** blade, select the **Create Cache Node** button.
-
-    :::image type="content" source="./images/ent-mcc-create-cache-node.png" alt-text="Screenshot of the Cache Nodes page with the Create Cache Node option outlined in red.":::
-
-1. Selecting the **Create Cache Node** button will open the **Create Cache Node** page; **Cache Node Name** is the only field required for cache node creation.
-
-   | Field Name | Expected Value | Description |
-   |---|---|---|
-   | **Cache Node Name** | Alphanumeric name that doesn't include any spaces. | The name of the cache node. You may choose names based on location such as `Seattle-1`. This name must be unique and can't be changed later. |
-
-1. Enter the information for the **Cache Node** and select the **Create** button.
-
-   :::image type="content" source="./images/ent-mcc-create-cache-node-name.png" alt-text="Screenshot of the Cache Nodes page displaying the Cache Node Name text entry during the creation process.":::
-
-If there are errors, the form will provide guidance on how to correct the errors.
-
-Once the MCC node has been created, the installer instructions will be exposed. More details on the installer instructions will be addressed later in this article, in the [Install Connected Cache](#install-mcc-on-windows) section.
-
-:::image type="content" source="./images/ent-mcc-connected-cache-installer-download.png" alt-text="Screenshot of the Connected Cache installer download button, installer instructions, and script.":::
-
-#### Edit cache node information
-
-Cache nodes can be deleted here by selecting the check box to the left of a **Cache Node Name** and then selecting the delete toolbar item. Be aware that if a cache node is deleted, there's no way to recover the cache node or any of the information related to the cache node.
-
-:::image type="content" source="./images/ent-mcc-delete-cache-node.png" alt-text="Screenshot of deleting a cache node from the Cache Nodes page.":::
-
-### Install MCC on Windows
-
-Installing MCC on your Windows device is a simple process. A PowerShell script performs the following tasks:
-
-- Installs the Azure CLI
-- Downloads, installs, and deploys EFLOW
-- Enables Microsoft Update so EFLOW can stay up to date
-- Creates a virtual machine
-- Enables the firewall and opens ports 80 and 22 for inbound and outbound traffic. Port 80 is used by MCC, and port 22 is used for SSH communications.
-- Configures Connected Cache tuning settings.
-- Creates the necessary *FREE* Azure resource - IoT Hub/IoT Edge.
-- Deploys the MCC container to server.
-
-#### Run the installer
-
-1. Download and unzip `mccinstaller.zip` from the create cache node page or cache node configuration page, both of which contain the necessary installation files.
-
-   :::image type="content" source="./images/ent-mcc-download-installer.png" alt-text="Screenshot of the download installer option on the Create Cache Node page.":::
-
-   The following files are contained in the `mccinstaller.zip` file:
-
-   - **installmcc.ps1**: Main installer file.
-   - **installEflow.ps1**: Installs the necessary prerequisites such as the Linux VM, IoT Edge runtime, and Docker, and makes necessary host OS settings to optimize caching performance.
-   - **resourceDeploymentForConnectedCache.ps1**: Creates Azure cloud resources required to support MCC control plane.
-   - **mccdeployment.json**: Deployment manifest used by IoT Edge to deploy the MCC container and configure settings on the container, such as cache drive location sizes.
-   - **updatemcc.ps1**: The update script used to upgrade MCC to a particular version.
-   - **mccupdate.json**: Used as part of the update script
-
-1. Open Windows PowerShell as administrator then navigate to the location of these files.
-
-   > [!NOTE]
-   > Ensure that Hyper-V is enabled on your device.
-   > - **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v)
-   > - **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server)'
-   >
-   > Don't use PowerShell ISE, PowerShell 6.x, or PowerShell 7.x. Only Windows PowerShell version 5.x is supported.
-
-1. **If you're installing MCC on a local virtual machine**, turn the virtual machine **off** while you enable nested virtualization and MAC spoofing.
-   1. Enable nested virtualization:
-
-      ```powershell
-      Set-VMProcessor -VMName "VM name" -ExposeVirtualizationExtensions $true
-      ```
-
-   1. Enable MAC spoofing:
-
-      ```powershell
-      Get-VMNetworkAdapter -VMName "VM name" | Set-VMNetworkAdapter -MacAddressSpoofing On
-      ```
-
-1. Set the execution policy.
-
-    ```powershell
-    Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-    ```
-
-    > [!NOTE]
-    > After setting the execution policy, you'll see a warning asking if you wish to change the execution policy. Choose **[A] Yes to All**.
-
-1. Copy the command from the Azure portal and run it in Windows PowerShell.
-
-    :::image type="content" source="./images/ent-mcc-installer-script.png" alt-text="Screenshot of the installer script for the connected cache node.":::
-
-    > [!NOTE]
-    > After running the command, and multiple times throughout the installation process, you'll receive the following notice. Select **[R] Run once** to proceed.
-    > </br>
-    > </br> Security warning
-    > </br> Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your computer. If you trust this script, use the Unblock-File cmdlet to allow the script to run without this warning message. Do you want to run C:\Users\mccinstaller\Eflow\installmcc.ps1?
-    > </br>
-    > </br> [D] Do not run **[R] Run once** [S] Suspend [?] Help (default is "D"):
-
-1. Choose whether you would like to create a new external virtual switch or select an existing external virtual switch.
-
-   If creating a new external virtual switch, name your switch and be sure to choose a Local Area Connection (USB adapters work as well however, we do not recommend using Wi-Fi). A computer restart will be required if you're creating a new switch.
-
-   > [!NOTE]
-   > Restarting your computer after creating a switch is recommended. You'll notice network delays during installation if the computer has not been restarted.
-
-   If you restarted your computer after creating a switch, start from step 2 above and skip to step 5.
-
-   If you opt to use an existing external switch, select the switch from the presented options. Local Area Connection (or USB) is preferable to Wi-Fi.
-
-   :::image type="content" source="./images/ent-mcc-script-new-switch.png" alt-text="Screenshot of the installer script running in PowerShell when a new switch is created." lightbox="./images/ent-mcc-script-new-switch.png":::
-
-1. Rerun the script after the restart. This time, choose **No** when asked to create a new switch. Enter the number corresponding to the switch you previously created.
-
-     :::image type="content" source="./images/ent-mcc-script-existing-switch.png" alt-text="Screenshot of the installer script running in PowerShell when using an existing switch." lightbox="./images/ent-mcc-script-existing-switch.png":::
-
-1. Decide whether you would like to use dynamic or static address for the Eflow VM. If you choose to use a static IP, do not use the IP address of the server. It is a VM, and it will have its own IP.
-
-    :::image type="content" source="./images/ent-mcc-script-dynamic-address.png" alt-text="Screenshot of the installer script running in PowerShell asking if you'd like to use a dynamic address." lightbox="./images/ent-mcc-script-dynamic-address.png":::
-
-    > [!NOTE]
-    > Choosing a dynamic IP address might assign a different IP address when the MCC restarts. A static IP address is recommended so you don't have to change this value in your management solution when MCC restarts.
-
-   The IP address you assign to the EFLOW VM should be within the same subnet as the host server (based on the subnet mask) and not used by any other machine on the network.
-   For example, for host configuration where the server IP Address is 192.168.1.202 and the subnet mask is 255.255.255.0, the static IP can be anything 192.168.1.* except 192.168.1.202.
-   <!-- Insert Image 1 & 2. Remove ent-mcc-script-dynamic-address.png image (it is replaced by image 2) -->
-    :::image type="content" source="./images/external-switch-1.jpg" alt-text="Screenshot of a sample output of ipconfig command showing example of subnet mask." lightbox="./images/external-switch-1.jpg":::
-
-    :::image type="content" source="./images/assigning-ip-2.png" alt-text="Screenshot of multiple installer questions about ipv4 address for Eflow." lightbox="./images/assigning-ip-2.png":::
-
-   If you would like to use your own DNS server instead of Google DNS 8.8.8.8, select **n** and set your own DNS server IP.
-
-   :::image type="content" source="./images/use-custom-dns-3.png" alt-text="Screenshot of multiple installer questions about setting an alternate DNS server." lightbox="./images/use-custom-dns-3.png":::
-
-   If you use a dynamic IP address, the DHCP server will automatically configure the IP address and DNS settings.
-
-1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path.
-
-   <!-- Insert Image 4 -->
-   :::image type="content" source="./images/installation-info-4.png" alt-text="Screenshot of multiple installer questions about memory and storage for EFLOW." lightbox="./images/installation-info-4.png":::
-
-   For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommended values for a Branch Office/Small Enterprise deployment.
-
-   <!-- Insert Image 5 -->
-   :::image type="content" source="./images/memory-storage-5.png" alt-text="Screenshot of multiple installer questions about memory and storage." lightbox="./images/memory-storage-5.png":::
-   <!-- Remove: If this is your first MCC deployment, select **n** so that a new IoT Hub can be created. If you have already configured MCC before, choose **y** so that your MCCs are grouped in the same IoT Hub.
-
-    1. You'll be shown a list of existing IoT Hubs in your Azure subscription. Enter the number corresponding to the IoT Hub to select it. **You'll likely have only 1 IoT Hub in your subscription, in which case you want to enter "1"**
-
-       :::image type="content" source="./images/ent-mcc-script-select-hub.png" alt-text="Screenshot of the installer script running in PowerShell prompting you to select which IoT Hub to use." lightbox="./images/ent-mcc-script-select-hub.png":::
-       -->
-1. When the installation is complete, you should see the following output (the values below will be your own)
-
-    :::image type="content" source="./images/ent-mcc-script-complete.png" alt-text="Screenshot of the installer script displaying the completion summary in PowerShell." lightbox="./images/ent-mcc-script-complete.png":::
-       <!-- Insert Image 7 -->
-
-    :::image type="content" source="./images/installation-complete-7.png" alt-text="Screenshot of expected output when installation is complete." lightbox="./images/installation-complete-7.png":::
-
-1. Your MCC deployment is now complete.
-
-   If you don't see any errors, continue to the next section to validate your MCC deployment. Your VM will not appear in Hyper-V Manager as it is an EFLOW VM.
-   - After validating your MCC is properly functional, review your management solution documentation, such as [Intune](/mem/intune/configuration/delivery-optimization-windows), to set the cache host policy to the IP address of your MCC.
-   - If you had errors during your deployment, see the [Common Issues](#common-issues) section in this article.
-
-## Verify MCC server functionality
-
-#### Verify client side
-
-Connect to the EFLOW VM and check if MCC is properly running:
-
-1. Open PowerShell as an Administrator.
-2. Enter the following commands:
-
-   ```powershell
-   Connect-EflowVm
-   sudo -s
-   iotedge list
-   ```
-
-   :::image type="content" source="./images/ent-mcc-connect-eflowvm.png" alt-text="Screenshot of running connect-EflowVm, sudo -s, and iotedge list from PowerShell." lightbox="./images/ent-mcc-connect-eflowvm.png":::
-
-You should see MCC, edgeAgent, and edgeHub running. If you see edgeAgent or edgeHub but not MCC, try this command in a few minutes. The MCC container can take a few minutes to deploy. If iotedge list times out, you can run docker ps -a to list the running containers.
-If the 3 containers are still not running, run the following commands to check if DNS resolution is working correctly:
-
-```bash
-ping www.microsoft.com
-resolvectl query microsoft.com
-```
-
-See the [common issues](#common-issues) section for more information.
-
-#### Verify server side
-
-To validate that MCC is properly functioning, execute the following command in the EFLOW VM or any device in the network. Replace <CacheServerIP\> with the IP address of the cache server.
-
-```powershell
-wget http://<CacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com
-```
-
-A successful test result will display a status code of 200 along with additional information.
-
-:::image type="content" source="./images/ent-mcc-verify-server-ssh.png" alt-text="Screenshot of a successful wget with an SSH client." lightbox="./images/ent-mcc-verify-server-ssh.png":::
-
-:::image type="content" source="./images/ent-mcc-verify-server-powershell.png" alt-text="Screenshot of a successful wget using PowerShell." lightbox="./images/ent-mcc-verify-server-powershell.png":::
-
-Similarly, enter the following URL from a browser in the network:
-
-`http://<YourCacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com`
-
-If the test fails, see the [common issues](#common-issues) section for more information.
-
-### Intune (or other management software) configuration for MCC
-
-For an [Intune](/mem/intune/) deployment, create a **Configuration Profile** and include the Cache Host eFlow IP Address or FQDN:
-
-:::image type="content" source="./images/ent-mcc-intune-do.png" alt-text="Screenshot of Intune showing the Delivery Optimization cache server host names.":::
-
-## Common Issues
-
-#### PowerShell issues
-
-If you're seeing errors similar to this error: `The term Get-<Something> isn't recognized as the name of a cmdlet, function, script file, or operable program.`
-
-1. Ensure you're running Windows PowerShell version 5.x.
-
-1. Run \$PSVersionTable and ensure you're running version 5.x and *not version 6 or 7*.
-
-1. Ensure you have Hyper-V enabled:
-
-   **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v)
-
-   **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server)
-
-#### Verify Running MCC Container
-
-Connect to the Connected Cache server and check the list of running IoT Edge modules using the following commands:
-
-```bash
-Connect-EflowVm
-sudo iotedge list
-```
-
-:::image type="content" source="./images/ent-mcc-iotedge-list.png" alt-text="Screenshot of the iotedge list command." lightbox="./images/ent-mcc-iotedge-list.png":::
-
-If edgeAgent and edgeHub containers are listed, but not "MCC", you may view the status of the IoT Edge security manager by using the command:
-
-```bash
-sudo journalctl -u iotedge -f
-```
-
-This command will provide the current status of the starting, stopping of a container, or the container pull and start.  
-
-:::image type="content" source="./images/ent-mcc-journalctl.png" alt-text="Screenshot of the output from journalctl -u iotedge -f." lightbox="./images/ent-mcc-journalctl.png":::
-
-> [!NOTE]
-> You should consult the IoT Edge troubleshooting guide ([Common issues and resolutions for Azure IoT Edge](/azure/iot-edge/troubleshoot)) for any issues you may encounter configuring IoT Edge, but we've listed a few issues that we encountered during our internal validation.
-
-
-### DNS needs to be configured
-
-Run the following IoT Edge install state check:
-
-```bash
-sudo iotedge check --verbose
-```
-
-If you see issues with ports 5671, 443, and 8883, your IoT Edge device needs to update the DNS for Docker.
-
-To configure the device to work with your DNS, use the following steps:
-
-1. Use `ifconfig` to find the appropriate NIC adapter name.
-
-   ```bash
-   ifconfig
-   ```
-
-1. Run `nmcli device show <network adapter name>` to show the DNS name for the ethernet adapter. For example, to show DNS information for **eno1**:
-
-   ```bash
-   nmcli device show eno1 
-   ```
-
-   :::image type="content" source="images/mcc-isp-nmcli.png" alt-text="Screenshot of a sample output of nmcli command to show network adapter information." lightbox="./images/mcc-isp-nmcli.png":::
-
-1. Open or create the Docker configuration file used to configure the DNS server.
-
-   ```bash
-   sudo nano /etc/docker/daemon.json
-   ```
-
-1. Paste the following string into the **daemon.json** file, and include the appropriate DNS server address. For example, in the previous screenshot, `IP4.DNS[1]` is `10.50.10.50`.
-
-   ```bash
-   { "dns": ["x.x.x.x"]}
-   ```
-
-1. Save the changes to daemon.json. If you need to change permissions on this file, use the following command:
-
-   ```bash
-   sudo chmod 555 /etc/docker/daemon.json
-   ```
-
-1. Restart Docker to pick up the new DNS setting. Then restart IoT Edge.
-
-   ```bash
-   sudo systemctl restart docker
-   sudo systemctl daemon-reload
-   sudo restart IoTEdge
-   ```
-
-### Resolve DNS issues
-
-Follow these steps if you see a DNS error when trying to resolve hostnames during the provisioning or download of container:
-Run `Get-EflowVmEndpoint` to get interface name
-
-Once you get the name:
-
-```bash
-Set-EflowVmDNSServers -vendpointName "interface name from above" -dnsServers @("DNS_IP_ADDRESS")
-Stop-EflowVm
-Start-EflowVm
-```

From b9caeacf0b6f9a7ceb88ed1a0ae1c2efb83882dc Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 5 Sep 2024 11:18:26 -0700
Subject: [PATCH 011/128] changed toc order

---
 windows/deployment/do/TOC.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 9ddf747b89..0eac0987a8 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -53,12 +53,12 @@
           href: mcc-ent-verify-cache-node.md
         - name: Monitor cache node
           href: mcc-ent-monitor-cache.md
+        - name: Update MCC
+          href: mcc-ent-update-cache.md 
         - name: Uninstalling cache node
           href: mcc-ent-uninstall-cache-node.md
         - name: Using CLI to create and manage cache nodes
-          href: mcc-ent-manage-cache-using-CLI.md  
-        - name: Update MCC
-          href: mcc-ent-update-cache.md     
+          href: mcc-ent-manage-cache-using-CLI.md      
       - name: Resources
         items:
         - name: Frequent Asked Questions

From 1384c3d40750e1a8269f573c206a9ff717a47e74 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 5 Sep 2024 11:27:38 -0700
Subject: [PATCH 012/128] moved bulk manage doc higher up in toc

---
 windows/deployment/do/TOC.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 0eac0987a8..d486ab4862 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -49,6 +49,8 @@
             href: mcc-ent-configure-provision-linux.md
           - name: Configure and provision cache node on Windows
             href: mcc-ent-configure-provision-windows.md
+        - name: Using CLI to create and manage cache nodes
+          href: mcc-ent-manage-cache-using-CLI.md 
         - name: Verify cache node functionality
           href: mcc-ent-verify-cache-node.md
         - name: Monitor cache node
@@ -56,9 +58,7 @@
         - name: Update MCC
           href: mcc-ent-update-cache.md 
         - name: Uninstalling cache node
-          href: mcc-ent-uninstall-cache-node.md
-        - name: Using CLI to create and manage cache nodes
-          href: mcc-ent-manage-cache-using-CLI.md      
+          href: mcc-ent-uninstall-cache-node.md     
       - name: Resources
         items:
         - name: Frequent Asked Questions

From 70038cd3c926f982e57b977337a3aa40ac9b946c Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 19 Sep 2024 11:02:08 -0700
Subject: [PATCH 013/128] mcc ent create content

---
 .../do/mcc-ent-create-resource-and-cache.md   | 289 +++++++++++-------
 1 file changed, 183 insertions(+), 106 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 3309c1bd6c..5981e19584 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -16,134 +16,211 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
+# Create MCC resource and cache nodes
 
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
+This article outlines how to create and configure your Microsoft Connected Cache for Enterprise cache nodes. The creation and configuration of your cache node takes place in Azure portal. The deployment of your cache node requires downloading an installer script that will need to be run on your cache server.
 
 ## Prerequisites
+1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a completely free-of-charge service hosted in Azure. You'll need to have a Pay-As-You-Go subscription in order to onboard to our service. To create a subscription, go to [Pay-As-You-Go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
+2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
+For more information on sizing and OS requirements, please visit [Host OS Requirement]()
 
-TODO: List the prerequisites
+## Create MCC resource
 
-<!-- 4. Task H2s ------------------------------------------------------------------------------
+# [Azure CLI](#tab/cli)
 
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+### Prerequisites
 
-For portal-based procedures, minimize bullets and numbering.
+* An Azure CLI environment:
 
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
+  * Use the Bash environment in [Azure Cloud Shell](../cloud-shell/quickstart.md).
 
--->
+    :::image type:::
 
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
+  * Or, if you prefer to run CLI reference commands locally, [install the Azure CLI](/cli/azure/install-azure-cli)
 
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
+    * Sign in to the Azure CLI by using the [az login](/cli/azure/reference-index#az-login) command.
 
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
+    * Run [az version](/cli/azure/reference-index#az-version) to find the version and dependent libraries that are installed. To upgrade to the latest version, run [az upgrade](/cli/azure/reference-index#az-upgrade).
 
-<!-- 5. Next step/Related content------------------------------------------------------------------------
+    * Install Azure CLI extension **mcc** by following the instructions [here](https://learn.microsoft.com/en-us/cli/azure/azure-cli-extensions-overview#how-to-install-extensions).
 
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+    * Resource group under which an MCC resource can be created. Use the [az group create](https://learn.microsoft.com/en-us/cli/azure/group?view=azure-cli-latest#az-group-create) command to create a new Resource group if you don't already have one.
 
--->
+Replace the following placeholders with your own information:
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<location>*: The Azure region where your Microsoft Connected Cache will be located.
+
+```azurecli-interactive
+az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group <myrg> --location <region>
+```
+
+# [Azure portal](#tab/portal)
+
+1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for "Microsoft Connected Cache for Enterprise and Education".
+
+2. Select Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Also, enter a name for the resource and click Review + Create.
+
+3. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
+
+4. The creation of the resource may take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
+
+---
+
+## Create cache node
+
+# [Azure CLI](#tab/cli)
+
+Use the command below to create a new cache node if you don't already have one.
+
+Replace the following placeholders with your own information:
+ * *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<host-os>*: The OS on which cache node will be provisioned.
+  Accepted values: windows, linux
+
+```azurecli-interactive
+az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg> --host-os <linux>
+```
+<br>
+[!NOTE]
+To ensure cache node has been created successfully, please run the following command before continuing with cache node configuration.
+```azurecli-interactive
+az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
+```
+In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
+If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+
+# [Azure portal](#tab/portal)
+
+  1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.
+  2. Under Cache Node Management, click on Cache Nodes and then on + Create Cache Node.
+  3. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and click create. Please note, cache node names have to be unique under the Microsoft Connected Cache resource.
+  The creation of cache node may take a few minutes. Please click Refresh to see your recently created cache node.
+Once the status changes to Not Configured, you can now configure your cache node.
+
+---
+
+### Configure cache node
+
+# [Azure CLI](#tab/cli)
+
+Use the command below to configure cache node for **Linux** host os
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<physical-path>*: The cache drive path. You can add upto 9 cache drives.
+* *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
+* *\<proxy>*: If proxy needs to be enabled or not.<br>
+  Accepted values: enabled, disabled
+  If proxy is set to enabled, you must provide proxy host and proxy port information
+* *\<proxy-host>*: The proxy host name or ip address
+* *\<proxy-port>*: Proxy port
+* *\<auto-update-ring>*: Update ring the cache node should have.<br>
+  Accepted values: slow, fast.
+  If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
+* *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
+  Accepted values: 1,2,3,4,5,6,7
+* *\<auto-update-time>*: The time of day cache node should be updated in 24 hour format (hh:mm)
+* *\<auto-update-week>*: The week of month cache node should be updated.<br>
+  Accepted values: 1,2,3,4
+
+```azurecli-interactive
+az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>
+--cache-drive "[{physical-path:</physical/path>,size-in-gb:<size of cache drive>},{</physical/path>,size-in-gb:<size of cache drive>}...]"> --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
+```
+
+<br>
+<br>
+
+Use the command below to configure cache node for **Windows** host os
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<physical-path>*: The cache drive path.<br>
+  Accepted value: /var/mcc
+* *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
+* *\<proxy>*: If proxy needs to be enabled or not.<br>
+  Accepted values: enabled, disabled
+  If proxy is set to enabled, you must provide proxy host and proxy port information
+* *\<proxy-host>*: The proxy host name or ip address
+* *\<proxy-port>*: Proxy port
+* *\<auto-update-ring>*: Update ring the cache node should have.<br>
+  Accepted values: slow, fast.
+  If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
+* *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
+  Accepted values: 1,2,3,4,5,6,7
+* *\<auto-update-time>*: The time of day cache node should be updated in 24 hour format (hh:mm)
+* *\<auto-update-week>*: The week of month cache node should be updated.<br>
+  Accepted values: 1,2,3,4
+  
+```azurecli-interactive
+az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>
+--cache-drive "[{physical-path:/var/mcc,size-in-gb:<size of cache drive>}]" --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
+```
+
+# [Azure portal](#tab/portal)
+Please enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
+Don't forget to click save after adding configuration information.
+
+---
 
 ## Next step
+The next step is to provision the cache node on the server.
 
-TODO: Add your next step link(s)
+# [Azure portal](#tab/portal)
+To provision MCC on Windows host machine, please visit: Provision Windows cache node
+To provision MCC on Linux host machine, please visit: Provision Linux cache node
 
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
+# [Azure CLI](#tab/cli/)
+To provision cache node using Azure CLI, please visit: Bulk management of cache nodes
 
-<!-- OR -->
+---
 
-## Related content
+### General configuration fields
 
-TODO: Add your next step link(s)
+| Field Name	|Expected Value	 |Description|
+|---|---|---|
+|**Cache node name** |	Alphanumeric string that contains no spaces|	The name of the cache node. You may choose names based on location like Seattle-1. This name must be unique and can't be changed later|
+|**Host OS** |	Linux or Windows| This is the host operating system that the cache node will be deployed on.|
 
-- [Write concepts](article-concept.md)
+### Storage fields
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
+<br>
 
+ [!Important]
+Cache node for Linux
+All cache drives must have full read/write permissions set or the cache node will not function. For example, in a terminal you can run: sudo chmod 777 /path/to/cachedrivefolder
+<br>
+
+| Field Name	|Expected Value	 |Description|
+|---|---|---|
+|**Cache drive folder**|	File path string	|Up to 9 drive folders accessible by the cache node can be configured for each cache node to configure cache storage. Enter the location of the folder in Ubuntu where the external physical drive is mounted. For example: /dev/sda3/. Each cache drive should have read/write permissions configured. Ensure your disks are mounted and visit Attach a data disk to a Linux VM for more information.|
+|**Cache drive size in gigabytes**|	Integer in GB| 	Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB.|
+
+
+Cache node for Windows
+
+| Field Name	|Expected Value	 |Description|
+|---|---|---|
+|**Cache drive folder**|	File path string /var/mcc|	This is the folder path where content will be cached. You cannot change the folder path.|
+|**Cache drive size in gigabytes**|	Integer in GB|	Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB. |
+
+
+Proxy settings
+You can choose to enable or disable proxy settings on your cache node. 
+<br>
+
+[!IMPORTANT]
+Enabling or disabling the proxy settings after your cache node has been deployed will require running the provisioning script again. This will ensure that proxy changes are in effect on the cache node. 
+
+| Field Name	|Expected Value	 |Description|
+|---|---|---|
+|**Proxy host name**|	String or number|	Proxy host name or address|
+|**Proxy port**|	Integer|	Proxy port

From 761aafa39999086ec00d1a479ed4be1352ec1151 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 19 Sep 2024 12:58:29 -0700
Subject: [PATCH 014/128] added bulk cli content without mardown

---
 .../do/mcc-ent-manage-cache-using-CLI.md      | 170 ++++++++++--------
 1 file changed, 95 insertions(+), 75 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 5c05115494..50354afa08 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -16,117 +16,137 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
+This article outlines how to create, configure and provision your Microsoft Connected Cache for Enterprise cache nodes using Azure CLI. 
+ 
+Please ensure that you have:
+  · How to install the Azure CLI | Microsoft Learn
+  · Installed the MCC extension.
 
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
+The first step is to create a resource group if you don't already have one.
 
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
+Create a Resource group
+An Azure resource group is a logical container into which Azure resources are deployed and managed. 
 
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+To create a resource group, use az group create.
+Open Cloud Shell
+az group create --name myrg --location westus
 
--->
 
-<!-- 1. H1 -----------------------------------------------------------------------------
+Once the resource group is created, you will need to create a Microsoft Connected Cache for Enterprise resource.
 
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
 
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
+Create a MCC resource
+A MCC resource is a resource under which cache nodes can be created.
 
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
+To create a mcc resource, use az mcc ent resource create
+Open Cloud Shell
+az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
 
--->
+In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully started creating MCC resource.
+The next step is to create a cache node under this resource.
 
-# "<verb> * <noun>"
-TODO: Add your heading
 
-<!-- 2. Introductory paragraph ----------------------------------------------------------
+Create a cache node
+To create a cache node, use az mcc ent node create
 
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
+Open Cloud Shell
+az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os linux
 
-Readers should have a clear idea of what they will do in this article after reading the introduction.
+In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully started creating cache node.
 
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
 
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
+Confirm cache node creation
+Before you can start configuring your cache node, you need to confirm that cache node creation has been successful. 
+To confirm cache node creation, use az mcc ent node show
+Open Cloud Shell
+az mcc ent node show --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg  
 
--->
+In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
+If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
 
-TODO: Add your introductory paragraph
+Once the cache node has been created successfully, you can now configure the cache node.
 
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
 
--->
+Configure cache node
+To configure your cache node, use az mcc ent node update
 
-<!-- 3. Prerequisites --------------------------------------------------------------------
+Ex: configure linux cache node, proxy, slow
 
-Required: Make Prerequisites the first H2 after the H1. 
+Open Cloud Shell
+az mcc ent node update --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+--cache-drive "[{physical-path:/cachenode/drive1,size-in-gb:50},{physical-path:/cachenode/drive2,size-in-gb:51}]" --proxy enabled --proxy-host "abc.xyz" --proxy-port 80  --auto-update-day 2 --auto-update-time 15:33 --auto-update-week 3 --auto-update-ring slow
 
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
+Note: If your cache node is a Windows cache node, the physical path of the cache drive must be “C:\mccwsl01”. 
+In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully updated the cache node.
+Please save values for physicalPath, sizeInGb, proxyPort, proxyHostName as these values will be needed to create the provisioning script.
 
--->
+Note: proxy info changes, required to provision cache node.
 
-## Prerequisites
 
-TODO: List the prerequisites
+Get provisioning details for the cache node
+Now that you have configured the cache node, the next step is to provision the cache node on the server. To provision the cache node, you will need to create a provisioning script with relevant information.
+To get the relevant information for provisioning script, use az mcc ent node get-provisioning-details
 
-<!-- 4. Task H2s ------------------------------------------------------------------------------
+Open Cloud Shell
+az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
 
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
+In the output, please save the values for cacheNodeId, customerKey, mccResourceId, registrationKey. These values are needed to create the provisioning script.
 
-For portal-based procedures, minimize bullets and numbering.
+Provisioning cache node
 
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
+Provisioning cache node on Linux host os:
+Before you provision your cache node on Linux machine, please make sure you have completed the requisites listed here: Host machine requirements
 
--->
+Use the link below to download and unzip the provisioning package on the server and run the below script to provision your cache node. 
 
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
+Important
+Note: before you execute the script,  please make sure you change access permissions by running sudo chmod +x provisionmcc.sh
 
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
+Note: Please replace the sample values with the values that you saved in the above steps.
 
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
+Important
+'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
 
-<!-- 5. Next step/Related content------------------------------------------------------------------------
 
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+https://aka.ms/MCC-Ent-InstallScript-Linux
+
+   
+Provisioning script:
+sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="true" proxyurl=http://enter proxy hostname:enter port
+
+
+
+Provisioning cache node on Windows host os:
+
+Before you provision your cache node on Windows, please make sure you have completed the requisites listed here: Host machine requirements
+
+Please download and unzip the provisioning package on the server and run the below script to provision your cache node.
+Note: Please replace the sample values with the values that you saved in the above steps.
+
+Important
+'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+
+
+https://aka.ms/MCC-Ent-InstallScript-WSL
+
+If you are using a gmsa account:
+./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User
+
+
+If you are using local user account or domain user account:
+./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
+
+
+
+
+
+To verify cache node functionality, please see: Verify cache node functionality
+
+
+Sample script:
+Below is a pseudo code that shows how the above can be scripted for bulk creation and configuration of cache node.
+
 
--->
 
 ## Next step
 

From 0bfa6993dc1e13f91d3ec8cd8d77edf8fcccee90 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 19 Sep 2024 16:25:34 -0700
Subject: [PATCH 015/128] added azure interactive to bulk manage page

---
 .../do/mcc-ent-create-resource-and-cache.md   |  3 ++-
 .../do/mcc-ent-manage-cache-using-CLI.md      | 22 +++++++++++++------
 2 files changed, 17 insertions(+), 8 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 5981e19584..bde6cfe7a3 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -214,7 +214,8 @@ Cache node for Windows
 
 
 Proxy settings
-You can choose to enable or disable proxy settings on your cache node. 
+You can choose to enable or disable proxy settings on your cache node.
+
 <br>
 
 [!IMPORTANT]
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 50354afa08..91a1ab714d 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -28,9 +28,10 @@ Create a Resource group
 An Azure resource group is a logical container into which Azure resources are deployed and managed. 
 
 To create a resource group, use az group create.
-Open Cloud Shell
-az group create --name myrg --location westus
 
+```azurecli-interactive
+az group create --name myrg --location westus
+```
 
 Once the resource group is created, you will need to create a Microsoft Connected Cache for Enterprise resource.
 
@@ -39,8 +40,10 @@ Create a MCC resource
 A MCC resource is a resource under which cache nodes can be created.
 
 To create a mcc resource, use az mcc ent resource create
-Open Cloud Shell
+
+```azurecli-interactive
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
+```
 
 In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully started creating MCC resource.
 The next step is to create a cache node under this resource.
@@ -49,8 +52,9 @@ The next step is to create a cache node under this resource.
 Create a cache node
 To create a cache node, use az mcc ent node create
 
-Open Cloud Shell
+```azurecli-interactive
 az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os linux
+```
 
 In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully started creating cache node.
 
@@ -58,8 +62,10 @@ In the output, look for operationStatus. operationStatus = Succeeded indicates t
 Confirm cache node creation
 Before you can start configuring your cache node, you need to confirm that cache node creation has been successful. 
 To confirm cache node creation, use az mcc ent node show
-Open Cloud Shell
+
+```azurecli-interactive
 az mcc ent node show --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg  
+```
 
 In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
 If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
@@ -72,9 +78,10 @@ To configure your cache node, use az mcc ent node update
 
 Ex: configure linux cache node, proxy, slow
 
-Open Cloud Shell
+```azurecli-interactive
 az mcc ent node update --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
 --cache-drive "[{physical-path:/cachenode/drive1,size-in-gb:50},{physical-path:/cachenode/drive2,size-in-gb:51}]" --proxy enabled --proxy-host "abc.xyz" --proxy-port 80  --auto-update-day 2 --auto-update-time 15:33 --auto-update-week 3 --auto-update-ring slow
+```
 
 Note: If your cache node is a Windows cache node, the physical path of the cache drive must be “C:\mccwsl01”. 
 In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully updated the cache node.
@@ -87,8 +94,9 @@ Get provisioning details for the cache node
 Now that you have configured the cache node, the next step is to provision the cache node on the server. To provision the cache node, you will need to create a provisioning script with relevant information.
 To get the relevant information for provisioning script, use az mcc ent node get-provisioning-details
 
-Open Cloud Shell
+```azurecli-interactive
 az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+```
 
 In the output, please save the values for cacheNodeId, customerKey, mccResourceId, registrationKey. These values are needed to create the provisioning script.
 

From 5461a583c57516e614f6eb03859f6037b55bac6d Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Fri, 20 Sep 2024 14:26:42 -0700
Subject: [PATCH 016/128] more content in bulk manage cli

---
 .../do/mcc-ent-manage-cache-using-CLI.md      | 103 ++++++++++++------
 1 file changed, 67 insertions(+), 36 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 91a1ab714d..d40234ef1d 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -16,18 +16,27 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-This article outlines how to create, configure and provision your Microsoft Connected Cache for Enterprise cache nodes using Azure CLI. 
+# Manage cache nodes using CLI
+
+<br>
+
+This article outlines how to create, configure and provision your Microsoft Connected Cache for Enterprise cache nodes using Azure CLI.
+
  
-Please ensure that you have:
-  · How to install the Azure CLI | Microsoft Learn
-  · Installed the MCC extension.
+## Prerequisites:
+1. **Install Azure CLI**: How to install the Azure CLI | Microsoft Learn
+2. **Install MCC extension**: Install the MCC extension.
 
+
+
+
+
+### 1. Create a Resource group
 The first step is to create a resource group if you don't already have one.
-
-Create a Resource group
-An Azure resource group is a logical container into which Azure resources are deployed and managed. 
+An Azure resource group is a logical container into which Azure resources are deployed and managed.
 
 To create a resource group, use az group create.
+<br>
 
 ```azurecli-interactive
 az group create --name myrg --location westus
@@ -36,7 +45,7 @@ az group create --name myrg --location westus
 Once the resource group is created, you will need to create a Microsoft Connected Cache for Enterprise resource.
 
 
-Create a MCC resource
+### 2. Create a MCC resource
 A MCC resource is a resource under which cache nodes can be created.
 
 To create a mcc resource, use az mcc ent resource create
@@ -45,35 +54,45 @@ To create a mcc resource, use az mcc ent resource create
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
 ```
 
-In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully started creating MCC resource.
+<br>
+
+[!IMPORTANT]
+In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating MCC resource.
 The next step is to create a cache node under this resource.
 
 
-Create a cache node
+### 3. Create a cache node
 To create a cache node, use az mcc ent node create
 
 ```azurecli-interactive
 az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os linux
 ```
 
-In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully started creating cache node.
+<br>
+
+[!IMPORTANT]
+In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating cache node.
 
 
-Confirm cache node creation
+### 4. Confirm cache node creation
 Before you can start configuring your cache node, you need to confirm that cache node creation has been successful. 
 To confirm cache node creation, use az mcc ent node show
 
+<br>
+
 ```azurecli-interactive
 az mcc ent node show --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg  
 ```
 
-In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
-If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+[!IMPORTANT]
+In the output look for cacheNodeState. If **cacheNodeState = Not Configured**, you can continue with cache node configuration.
+If **cacheNodeState = Registration in Progress**, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+
 
 Once the cache node has been created successfully, you can now configure the cache node.
 
 
-Configure cache node
+### 5. Configure cache node
 To configure your cache node, use az mcc ent node update
 
 Ex: configure linux cache node, proxy, slow
@@ -83,14 +102,18 @@ az mcc ent node update --cache-node-name mycachenode --mcc-resource-name mymccre
 --cache-drive "[{physical-path:/cachenode/drive1,size-in-gb:50},{physical-path:/cachenode/drive2,size-in-gb:51}]" --proxy enabled --proxy-host "abc.xyz" --proxy-port 80  --auto-update-day 2 --auto-update-time 15:33 --auto-update-week 3 --auto-update-ring slow
 ```
 
-Note: If your cache node is a Windows cache node, the physical path of the cache drive must be “C:\mccwsl01”. 
-In the output, look for operationStatus. operationStatus = Succeeded indicates that our services have successfully updated the cache node.
+[!IMPORTANT]
+If your cache node is a Windows cache node, the physical path of the cache drive must be **“C:\mccwsl01”**.
+In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node.
+
+[!IMPORTANT]
 Please save values for physicalPath, sizeInGb, proxyPort, proxyHostName as these values will be needed to create the provisioning script.
 
-Note: proxy info changes, required to provision cache node.
+[!NOTE]
+Proxy info changes, required to provision cache node.
 
 
-Get provisioning details for the cache node
+### 6. Get provisioning details for the cache node
 Now that you have configured the cache node, the next step is to provision the cache node on the server. To provision the cache node, you will need to create a provisioning script with relevant information.
 To get the relevant information for provisioning script, use az mcc ent node get-provisioning-details
 
@@ -100,31 +123,36 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 
 In the output, please save the values for cacheNodeId, customerKey, mccResourceId, registrationKey. These values are needed to create the provisioning script.
 
-Provisioning cache node
-
-Provisioning cache node on Linux host os:
+### 7. Provisioning cache node
+Now
+#### Provisioning cache node on Linux host os:
 Before you provision your cache node on Linux machine, please make sure you have completed the requisites listed here: Host machine requirements
 
 Use the link below to download and unzip the provisioning package on the server and run the below script to provision your cache node. 
 
-Important
-Note: before you execute the script,  please make sure you change access permissions by running sudo chmod +x provisionmcc.sh
+https://aka.ms/MCC-Ent-InstallScript-Linux
 
-Note: Please replace the sample values with the values that you saved in the above steps.
+[!IMPORTANT]
+Note: before you execute the script,  please make sure you change access permissions by running 
 
-Important
+```azurepowershell-interactive
+sudo chmod +x provisionmcc.sh
+```
+
+[!NOTE]
+Please replace the sample values in the script below with the values that you saved in the step 5 and 6.
+
+[!IMPORTANT]
 'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
 
 
-https://aka.ms/MCC-Ent-InstallScript-Linux
-
-   
 Provisioning script:
+```powershell-interactive
 sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="true" proxyurl=http://enter proxy hostname:enter port
+```
 
 
-
-Provisioning cache node on Windows host os:
+#### Provisioning cache node on Windows host os:
 
 Before you provision your cache node on Windows, please make sure you have completed the requisites listed here: Host machine requirements
 
@@ -137,15 +165,18 @@ Important
 
 https://aka.ms/MCC-Ent-InstallScript-WSL
 
-If you are using a gmsa account:
+If you are using a **gmsa** account:
+
+```powershell-interactive
 ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User
+```
+<br>
 
+If you are using **local user account** or **domain user account**:
 
-If you are using local user account or domain user account:
+```powershell-interactive
 ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
-
-
-
+```
 
 
 To verify cache node functionality, please see: Verify cache node functionality

From 1c402cfffa51e4a25527ff5a7162aa89f6fc1517 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 25 Sep 2024 11:44:50 -0700
Subject: [PATCH 017/128] reopening pr for tabs

---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index bde6cfe7a3..efdef968b3 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -35,7 +35,9 @@ For more information on sizing and OS requirements, please visit [Host OS Requir
 
   * Use the Bash environment in [Azure Cloud Shell](../cloud-shell/quickstart.md).
 
-    :::image type:::
+
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+
 
   * Or, if you prefer to run CLI reference commands locally, [install the Azure CLI](/cli/azure/install-azure-cli)
 

From 8a07a0c05ecf79afe341e4346d5c210f42887bb5 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 25 Sep 2024 11:49:43 -0700
Subject: [PATCH 018/128] comment image

---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index efdef968b3..4b20ff0414 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -35,9 +35,9 @@ For more information on sizing and OS requirements, please visit [Host OS Requir
 
   * Use the Bash environment in [Azure Cloud Shell](../cloud-shell/quickstart.md).
 
-
+<!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
-
+-->
 
   * Or, if you prefer to run CLI reference commands locally, [install the Azure CLI](/cli/azure/install-azure-cli)
 

From a7c0eadf4e9ee4123c22c66a9faf1a210718fc90 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 25 Sep 2024 12:10:37 -0700
Subject: [PATCH 019/128] edits

---
 .../do/mcc-ent-create-resource-and-cache.md   | 44 +++++++++++--------
 1 file changed, 26 insertions(+), 18 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 4b20ff0414..681c659acb 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -62,11 +62,11 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 
 1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for "Microsoft Connected Cache for Enterprise and Education".
 
-2. Select Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Also, enter a name for the resource and click Review + Create.
+1. Select Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Also, enter a name for the resource and click Review + Create.
 
-3. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
+1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
 
-4. The creation of the resource may take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
+1. The creation of the resource may take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
 
 ---
 
@@ -77,7 +77,7 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 Use the command below to create a new cache node if you don't already have one.
 
 Replace the following placeholders with your own information:
- * *\<resource-group>*: An existing resource group in your subscription.
+* *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
 * *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
 * *\<host-os>*: The OS on which cache node will be provisioned.
@@ -86,20 +86,26 @@ Replace the following placeholders with your own information:
 ```azurecli-interactive
 az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg> --host-os <linux>
 ```
+
 <br>
-[!NOTE]
-To ensure cache node has been created successfully, please run the following command before continuing with cache node configuration.
-```azurecli-interactive
-az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
-```
+
+>[!NOTE]
+>To ensure cache node has been created successfully, please run the following command before continuing with cache node configuration.
+>```azurecli-interactive
+>az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
+>```
+
+<!-- `code blah blah`
+-->
+
 In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
 If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
 
 # [Azure portal](#tab/portal)
 
   1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.
-  2. Under Cache Node Management, click on Cache Nodes and then on + Create Cache Node.
-  3. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and click create. Please note, cache node names have to be unique under the Microsoft Connected Cache resource.
+  1. Under Cache Node Management, click on Cache Nodes and then on + Create Cache Node.
+  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and click create. Please note, cache node names have to be unique under the Microsoft Connected Cache resource.
   The creation of cache node may take a few minutes. Please click Refresh to see your recently created cache node.
 Once the status changes to Not Configured, you can now configure your cache node.
 
@@ -177,8 +183,9 @@ Don't forget to click save after adding configuration information.
 The next step is to provision the cache node on the server.
 
 # [Azure portal](#tab/portal)
-To provision MCC on Windows host machine, please visit: Provision Windows cache node
-To provision MCC on Linux host machine, please visit: Provision Linux cache node
+To provision MCC on **Windows** host machine, please visit: Provision Windows cache node
+<br>
+To provision MCC on **Linux** host machine, please visit: Provision Linux cache node
 
 # [Azure CLI](#tab/cli/)
 To provision cache node using Azure CLI, please visit: Bulk management of cache nodes
@@ -196,9 +203,9 @@ To provision cache node using Azure CLI, please visit: Bulk management of cache
 
 <br>
 
- [!Important]
-Cache node for Linux
-All cache drives must have full read/write permissions set or the cache node will not function. For example, in a terminal you can run: sudo chmod 777 /path/to/cachedrivefolder
+ >[!Important]
+>Cache node for Linux
+>All cache drives must have full read/write permissions set or the cache node will not function. For example, in a terminal you can run: sudo chmod 777 /path/to/cachedrivefolder
 <br>
 
 | Field Name	|Expected Value	 |Description|
@@ -220,10 +227,11 @@ You can choose to enable or disable proxy settings on your cache node.
 
 <br>
 
-[!IMPORTANT]
-Enabling or disabling the proxy settings after your cache node has been deployed will require running the provisioning script again. This will ensure that proxy changes are in effect on the cache node. 
+>[!IMPORTANT]
+>Enabling or disabling the proxy settings after your cache node has been deployed will require running the provisioning script again. This will ensure that proxy changes are in effect on the cache node. 
 
 | Field Name	|Expected Value	 |Description|
 |---|---|---|
 |**Proxy host name**|	String or number|	Proxy host name or address|
 |**Proxy port**|	Integer|	Proxy port
+

From ed8167033c9cb6228677092edabc41b69a808667 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 26 Sep 2024 11:35:53 -0700
Subject: [PATCH 020/128] edits to bulk and create pages

---
 .../do/mcc-ent-create-resource-and-cache.md   | 103 ++++++++-----
 .../do/mcc-ent-manage-cache-using-CLI.md      | 142 +++++++++---------
 2 files changed, 137 insertions(+), 108 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 681c659acb..134c756a8d 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -23,21 +23,33 @@ This article outlines how to create and configure your Microsoft Connected Cache
 ## Prerequisites
 1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a completely free-of-charge service hosted in Azure. You'll need to have a Pay-As-You-Go subscription in order to onboard to our service. To create a subscription, go to [Pay-As-You-Go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
 2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-For more information on sizing and OS requirements, please visit [Host OS Requirement]()
+For more information on sizing and OS requirements, please visit [Host OS Requirement](mcc-ent-prerequisites.md)
 
 ## Create MCC resource
 
+# [Azure portal](#tab/portal)
+
+1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for "Microsoft Connected Cache for Enterprise and Education".
+<!--
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+-->
+
+1. Select Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Also, enter a name for the resource and click Review + Create.
+<!--
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+-->
+1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
+
+1. The creation of the resource may take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
+
+
 # [Azure CLI](#tab/cli)
 
 ### Prerequisites
 
 * An Azure CLI environment:
 
-  * Use the Bash environment in [Azure Cloud Shell](../cloud-shell/quickstart.md).
-
-<!--
-    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
--->
+  * Use the Bash environment in [Azure Cloud Shell](/azure/cloud-shell/get-started/classic).
 
   * Or, if you prefer to run CLI reference commands locally, [install the Azure CLI](/cli/azure/install-azure-cli)
 
@@ -45,10 +57,11 @@ For more information on sizing and OS requirements, please visit [Host OS Requir
 
     * Run [az version](/cli/azure/reference-index#az-version) to find the version and dependent libraries that are installed. To upgrade to the latest version, run [az upgrade](/cli/azure/reference-index#az-upgrade).
 
-    * Install Azure CLI extension **mcc** by following the instructions [here](https://learn.microsoft.com/en-us/cli/azure/azure-cli-extensions-overview#how-to-install-extensions).
+    * Install Azure CLI extension **mcc** by following the instructions [here](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions).
 
-    * Resource group under which an MCC resource can be created. Use the [az group create](https://learn.microsoft.com/en-us/cli/azure/group?view=azure-cli-latest#az-group-create) command to create a new Resource group if you don't already have one.
+    * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group?view=azure-cli-latest#az-group-create) command to create a new Resource group if you don't already have one.
 
+#### Create MCC resource
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
@@ -58,20 +71,25 @@ Replace the following placeholders with your own information:
 az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group <myrg> --location <region>
 ```
 
-# [Azure portal](#tab/portal)
-
-1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for "Microsoft Connected Cache for Enterprise and Education".
-
-1. Select Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Also, enter a name for the resource and click Review + Create.
-
-1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
-
-1. The creation of the resource may take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
-
 ---
 
 ## Create cache node
 
+# [Azure portal](#tab/portal)
+
+  1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.
+  1. Under Cache Node Management, click on Cache Nodes and then on + Create Cache Node.
+  <!--
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+    -->
+  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and click create. Please note, cache node names have to be unique under the Microsoft Connected Cache resource.
+  <!--
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+    -->
+  The creation of cache node may take a few minutes. Please click Refresh to see your recently created cache node.
+Once the status changes to **Not Configured**, you can now configure your cache node.
+
+
 # [Azure CLI](#tab/cli)
 
 Use the command below to create a new cache node if you don't already have one.
@@ -94,28 +112,27 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 >```azurecli-interactive
 >az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
 >```
+>In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
+>If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+
 
 <!-- `code blah blah`
 -->
 
-In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
-If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
 
-# [Azure portal](#tab/portal)
-
-  1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.
-  1. Under Cache Node Management, click on Cache Nodes and then on + Create Cache Node.
-  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and click create. Please note, cache node names have to be unique under the Microsoft Connected Cache resource.
-  The creation of cache node may take a few minutes. Please click Refresh to see your recently created cache node.
-Once the status changes to Not Configured, you can now configure your cache node.
 
 ---
 
-### Configure cache node
+## Configure cache node
+
+# [Azure portal](#tab/portal)
+Please enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
+Don't forget to click save after adding configuration information.
+
 
 # [Azure CLI](#tab/cli)
 
-Use the command below to configure cache node for **Linux** host os
+Use the command below to configure cache node for **Linux** host OS
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
@@ -145,7 +162,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 <br>
 
-Use the command below to configure cache node for **Windows** host os
+Use the command below to configure cache node for **Windows** host OS
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
@@ -173,9 +190,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 --cache-drive "[{physical-path:/var/mcc,size-in-gb:<size of cache drive>}]" --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
 ```
 
-# [Azure portal](#tab/portal)
-Please enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
-Don't forget to click save after adding configuration information.
+
 
 ---
 
@@ -183,14 +198,19 @@ Don't forget to click save after adding configuration information.
 The next step is to provision the cache node on the server.
 
 # [Azure portal](#tab/portal)
-To provision MCC on **Windows** host machine, please visit: Provision Windows cache node
+To provision MCC on **Windows** host machine, see [Provision Windows cache node](mcc-ent-configure-provision-windows.md)
+
 <br>
-To provision MCC on **Linux** host machine, please visit: Provision Linux cache node
+
+To provision MCC on **Linux** host machine, see [Provision Linux cache node](mcc-ent-configure-provision-linux.md)
 
 # [Azure CLI](#tab/cli/)
-To provision cache node using Azure CLI, please visit: Bulk management of cache nodes
+To provision cache node using Azure CLI, see [Bulk management of cache nodes](mcc-ent-manage-cache-using-CLI.md)
 
 ---
+<br>
+<br>
+
 
 ### General configuration fields
 
@@ -201,10 +221,10 @@ To provision cache node using Azure CLI, please visit: Bulk management of cache
 
 ### Storage fields
 
-<br>
 
- >[!Important]
->Cache node for Linux
+##### Cache node for Linux
+
+>[!Important]
 >All cache drives must have full read/write permissions set or the cache node will not function. For example, in a terminal you can run: sudo chmod 777 /path/to/cachedrivefolder
 <br>
 
@@ -214,7 +234,7 @@ To provision cache node using Azure CLI, please visit: Bulk management of cache
 |**Cache drive size in gigabytes**|	Integer in GB| 	Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB.|
 
 
-Cache node for Windows
+##### Cache node for Windows
 
 | Field Name	|Expected Value	 |Description|
 |---|---|---|
@@ -222,7 +242,8 @@ Cache node for Windows
 |**Cache drive size in gigabytes**|	Integer in GB|	Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB. |
 
 
-Proxy settings
+#### Proxy settings
+<br>
 You can choose to enable or disable proxy settings on your cache node.
 
 <br>
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index d40234ef1d..834701a68a 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -24,18 +24,17 @@ This article outlines how to create, configure and provision your Microsoft Conn
 
  
 ## Prerequisites:
-1. **Install Azure CLI**: How to install the Azure CLI | Microsoft Learn
-2. **Install MCC extension**: Install the MCC extension.
-
-
-
+1. **Install Azure CLI**: [How to install the Azure CLI](/cli/azure/install-azure-cli)
+1. **Install MCC extension**: [Install the MCC extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
 
+<br>
+<br>
 
 ### 1. Create a Resource group
 The first step is to create a resource group if you don't already have one.
 An Azure resource group is a logical container into which Azure resources are deployed and managed.
 
-To create a resource group, use az group create.
+To create a resource group, use [az group create](/cli/azure/group?view=azure-cli-latest#az-group-create).
 <br>
 
 ```azurecli-interactive
@@ -56,8 +55,11 @@ az mcc ent resource create --mcc-resource-name mymccresource --resource-group my
 
 <br>
 
-[!IMPORTANT]
-In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating MCC resource.
+>[!IMPORTANT]
+>In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating MCC resource.
+
+<br>
+
 The next step is to create a cache node under this resource.
 
 
@@ -70,9 +72,10 @@ az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccre
 
 <br>
 
-[!IMPORTANT]
-In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating cache node.
+>[!IMPORTANT]
+>In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating cache node.
 
+<br>
 
 ### 4. Confirm cache node creation
 Before you can start configuring your cache node, you need to confirm that cache node creation has been successful. 
@@ -84,10 +87,11 @@ To confirm cache node creation, use az mcc ent node show
 az mcc ent node show --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg  
 ```
 
-[!IMPORTANT]
-In the output look for cacheNodeState. If **cacheNodeState = Not Configured**, you can continue with cache node configuration.
-If **cacheNodeState = Registration in Progress**, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+>[!IMPORTANT]
+>In the output look for cacheNodeState. If **cacheNodeState = Not Configured**, you can continue with cache node configuration.
+>If **cacheNodeState = Registration in Progress**, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
 
+<br>
 
 Once the cache node has been created successfully, you can now configure the cache node.
 
@@ -95,23 +99,30 @@ Once the cache node has been created successfully, you can now configure the cac
 ### 5. Configure cache node
 To configure your cache node, use az mcc ent node update
 
-Ex: configure linux cache node, proxy, slow
+The below example configures a Linux cache node with proxy enabled:
 
 ```azurecli-interactive
-az mcc ent node update --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
---cache-drive "[{physical-path:/cachenode/drive1,size-in-gb:50},{physical-path:/cachenode/drive2,size-in-gb:51}]" --proxy enabled --proxy-host "abc.xyz" --proxy-port 80  --auto-update-day 2 --auto-update-time 15:33 --auto-update-week 3 --auto-update-ring slow
+az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>
+--cache-drive "[{physical-path:</physical/path>,size-in-gb:<size of cache drive>},{</physical/path>,size-in-gb:<size of cache drive>}...]"> --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
 ```
 
-[!IMPORTANT]
-If your cache node is a Windows cache node, the physical path of the cache drive must be **“C:\mccwsl01”**.
-In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node.
+>[!Note]
+>For a cache node that is to be deployed on Windows host OS, the physical path of the cache drive must be **/var/mcc**.
+<br>
 
-[!IMPORTANT]
-Please save values for physicalPath, sizeInGb, proxyPort, proxyHostName as these values will be needed to create the provisioning script.
+>[!NOTE]
+>Proxy info changes, required to provision cache node.
+<br>
 
-[!NOTE]
-Proxy info changes, required to provision cache node.
+>[!IMPORTANT]
+>In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node.
+<br>
 
+>[!IMPORTANT]
+>Please save values for physicalPath, sizeInGb, proxyPort, proxyHostName as these values will be needed to create the provisioning script.
+
+
+<br>
 
 ### 6. Get provisioning details for the cache node
 Now that you have configured the cache node, the next step is to provision the cache node on the server. To provision the cache node, you will need to create a provisioning script with relevant information.
@@ -124,85 +135,82 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 In the output, please save the values for cacheNodeId, customerKey, mccResourceId, registrationKey. These values are needed to create the provisioning script.
 
 ### 7. Provisioning cache node
-Now
-#### Provisioning cache node on Linux host os:
+<br>
+
+#### Provisioning cache node on Linux host OS:
 Before you provision your cache node on Linux machine, please make sure you have completed the requisites listed here: Host machine requirements
 
 Use the link below to download and unzip the provisioning package on the server and run the below script to provision your cache node. 
 
-https://aka.ms/MCC-Ent-InstallScript-Linux
+[Download MCC package for Linux host OS](https://aka.ms/MCC-Ent-InstallScript-Linux)
 
-[!IMPORTANT]
-Note: before you execute the script,  please make sure you change access permissions by running 
+<br>
 
-```azurepowershell-interactive
-sudo chmod +x provisionmcc.sh
-```
+>[!IMPORTANT]
+>Note: before you execute the script,  please make sure you change access permissions by running the command below <br>
+>```azurepowershell-interactive
+>sudo chmod +x provisionmcc.sh
+>```
 
-[!NOTE]
-Please replace the sample values in the script below with the values that you saved in the step 5 and 6.
+<br>
 
-[!IMPORTANT]
-'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+>[!NOTE]
+>Please replace the sample values in the script below with the values that you saved in the step 5 and 6.
 
+<br>
 
-Provisioning script:
-```powershell-interactive
+>[!IMPORTANT]
+>'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+
+<br>
+
+Provisioning script:<br>
+`powershell-interactive
 sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="true" proxyurl=http://enter proxy hostname:enter port
-```
+`
+<br>
 
+#### Provisioning cache node on Windows host OS:
 
-#### Provisioning cache node on Windows host os:
-
-Before you provision your cache node on Windows, please make sure you have completed the requisites listed here: Host machine requirements
+Before you provision your cache node on Windows, make sure you have completed the requisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
 
 Please download and unzip the provisioning package on the server and run the below script to provision your cache node.
 Note: Please replace the sample values with the values that you saved in the above steps.
 
-Important
-'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+>[!IMPORTANT]
+>'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+
+<br>
+
+[Download MCC package for Windows host OS](https://aka.ms/MCC-Ent-InstallScript-WSL)
+<br>
 
 
-https://aka.ms/MCC-Ent-InstallScript-WSL
-
-If you are using a **gmsa** account:
+If you are using a **gmsa** account:<br>
 
 ```powershell-interactive
 ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User
 ```
+
 <br>
 
-If you are using **local user account** or **domain user account**:
+If you are using **local user account** or **domain user account**:<br>
 
 ```powershell-interactive
 ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
 ```
 
-
-To verify cache node functionality, please see: Verify cache node functionality
-
-
-Sample script:
-Below is a pseudo code that shows how the above can be scripted for bulk creation and configuration of cache node.
-
+<br>
 
 
 ## Next step
 
-TODO: Add your next step link(s)
+To verify cache node functionality, visit, [Verify cache node functionality](mcc-ent-verify-cache-node.md)
 
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
 
-<!-- OR -->
+<br>
+<br>
 
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
+### Sample script:
+Below is a pseudo code that shows how the above can be scripted for bulk creation and configuration of cache node.
 

From cf70920c97e95dafa743f799a917b1ad8d2fda34 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Thu, 26 Sep 2024 11:43:46 -0700
Subject: [PATCH 021/128] Update
 windows/deployment/do/mcc-ent-create-resource-and-cache.md

dropping view
---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 134c756a8d..d067f2c8dd 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -59,7 +59,7 @@ For more information on sizing and OS requirements, please visit [Host OS Requir
 
     * Install Azure CLI extension **mcc** by following the instructions [here](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions).
 
-    * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group?view=azure-cli-latest#az-group-create) command to create a new Resource group if you don't already have one.
+    * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
 
 #### Create MCC resource
 Replace the following placeholders with your own information:

From 06e1803195284ef68f714afdf93b5ee152042978 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Thu, 26 Sep 2024 11:46:07 -0700
Subject: [PATCH 022/128] Update
 windows/deployment/do/mcc-ent-manage-cache-using-CLI.md

drop view. goes to latest by default anyway
---
 windows/deployment/do/mcc-ent-manage-cache-using-CLI.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 834701a68a..2d913cc50e 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -34,7 +34,7 @@ This article outlines how to create, configure and provision your Microsoft Conn
 The first step is to create a resource group if you don't already have one.
 An Azure resource group is a logical container into which Azure resources are deployed and managed.
 
-To create a resource group, use [az group create](/cli/azure/group?view=azure-cli-latest#az-group-create).
+To create a resource group, use [az group create](/cli/azure/group#az-group-create).
 <br>
 
 ```azurecli-interactive

From 9a15aca345573ff18fcbce8bc2335377569a06bf Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 26 Sep 2024 16:07:12 -0700
Subject: [PATCH 023/128] private preview and support content

---
 .../deployment/do/mcc-ent-prerequisites.md    |  29 -----
 .../deployment/do/mcc-ent-private-preview.md  | 104 +++---------------
 .../do/mcc-ent-support-and-troubleshooting.md |  56 +---------
 3 files changed, 19 insertions(+), 170 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 1e33e85158..4fdb1b5c6c 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -30,32 +30,3 @@ ms.date: 05/23/2024
     The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
 1. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
   
-   > [!NOTE]
-   > Azure VMs are not currently supported. If you'd like to install your cache node on VMWare, see the [Appendix](mcc-enterprise-appendix.md) for a few additional configurations.
-
-    **EFLOW requires Hyper-V support**
-    - On Windows client, enable the Hyper-V feature.
-    - On Windows Server, install the Hyper-V role and create a default network switch.
-    - For more requirements, see [EFLOW requirements](/azure/iot-edge/iot-edge-for-linux-on-windows#prerequisites).
-
-    Disk recommendations:
-    - Using an SSD is recommended as cache read speed of SSD is superior to HDD
-
-    NIC requirements:
-    - Multiple NICs on a single MCC instance aren't supported.
-    - 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
-    - For best performance, NIC and BIOS should support SR-IOV.
-
-    VM networking:
-    -  An external virtual switch to support outbound and inbound network communication (created during the installation process)
-1. **Content endpoints**: If you're using a proxy or firewall, certain endpoints must be allowed through in order for your MCC to cache and serve content. See [Delivery Optimization and Microsoft Connected Cache content type endpoints](delivery-optimization-endpoints.md) for the list of required endpoints. 
-
-## Sizing recommendations
-
-| Component  | Branch Office / Small Enterprise | Large Enterprise |
-| -- | --- | --- |
-| OS|  Windows Server 2019*/2022 <br> Windows 10*/11 (Pro or Enterprise) with Hyper-V Support <br><br>* Windows 10 and Windows Server 2019 build 17763 or later | Same |
-|NIC | 1 Gbps | 5 Gbps |
-|Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
-|Memory | 4 GB | 8 GB |
-|Cores | 4 | 8  |
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index 531c39b882..ed2b2ad8d0 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -16,100 +16,28 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the 
-main branch.
 
-This template provides the basic structure of a Overview article pattern. See the [instructions - Overview](../level4/article-overview.md) in the pattern library.
+# Microsoft Connected Cache for Enterprise and Education (early preview)
 
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
+> [!NOTE]
+> Microsoft Connected Cache for Enterprise and Education is now in public preview.
+> To know more about the program, visit [MCC program overview](mcc-ent-edu-overview.md).
 
-Overview is an article pattern that covers two aspects of a product or service:
+<br>
 
-* What is it?
-* What is it used for?
+Microsoft Connected Cache for Enterprise and Education is now in public preview. To get started, visit [Create MCC resource and cache node](mcc-ent-create-resource-and-cache.md)
 
-An Overview article talks about the product or service from a technical point of view. It's not intended to define the benefits or value proposition. That just duplicates marketing.
+>[!IMPORTANT]
+> If you are using the early preview version on MCC, please uninstall and delete the early preview cache node and the associated MCC resource and create a new one. To create a new MCC resource, visit [Create MCC resource and cache node](mcc-ent-create-resource-and-cache.md)
 
-<!-- 1. H1 -----------------------------------------------------------------------------
+<br>
+## Enterprise requirements for MCC
 
-Required: This is the primary heading at the top of the article.
+1. **Azure subscription**: MCC management portal is hosted within Azure and is used to create the Connected Cache [Azure resource](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management) and IoT Hub resource. Both are free services.
 
-Use the format "What is <service>?" 
+    Your Azure subscription ID is first used to provision MCC services, and enable access to the preview. The MCC server requirement for an Azure subscription costs you nothing. If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
 
-You can also use this in the TOC if your service name doesn’t cause the phrase to wrap.
-
--->
-
-# What is <product/service>? 
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
-
-Many services add artwork or videos below the Introduction.
-
--->
-
-[Introductory paragraph]
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info
-directly into the article text.
-
---->
-
-<!-- 3. H2s (Article body)------------------------------------------------------------ 
-
-Required: The article body should discuss the features that answer the "Why should I care?" question with a bit more depth.
-
-Give each H2 a heading that sets expectations for the content that follows. 
-Follow the H2 headings with a sentence about how the section contributes to the whole.
-Add images, code blocks, or other graphical elements after the information it illustrates.
-
-* Call out any basic requirements and dependencies.
-* Call out limitations or overhead.
-* Don't catalog every feature. Some might only need to be mentioned as available, without any discussion.
-* Give each H2 a heading that sets expectations for the content that follows.
-* Follow the H2 headings with a sentence about how the section contributes to the whole.
-* Images, code blocks, or other graphical elements come after the text block it illustrates.
-Don't number H2s.
-
--->
-
-## [Section 1 heading]
-TODO: add your content
-
-## [Section 2 heading]
-TODO: add your content
-
-## [Section n heading]
-TODO: add your content
-
-<!-- 4. Next step/Related content ------------------------------------------------------------------------ 
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
+    The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
+1. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.<br>
+For more information, visit [Hardware Requirments](mcc-ent-prerequisites.md)
+  
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index 8b405f6c51..e1cc2e0e9f 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -16,64 +16,14 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
 
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
 
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
+## Steps to obtain an Azure subscription ID
 
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
+<!--Using include file, get-azure-subscription.md, do/mcc-isp.md for shared content-->
+[!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
 
--->
 
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
 
 TODO: List the prerequisites
 

From d226b8e8babd0a7dd4e212a5d2c4acf5d7eadbe2 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 27 Sep 2024 13:29:12 -0700
Subject: [PATCH 024/128] lichris-docs-1

---
 windows/deployment/do/TOC.yml                 | 12 ++-
 .../do/mcc-enterprise-deploy-linux.md         | 38 +++++++++
 .../do/mcc-enterprise-deploy-windows.md       | 44 ++++++++++
 .../do/mcc-enterprise-prerequisites.md        | 82 +++++++++++--------
 .../deployment/do/mcc-enterprise-uninstall.md | 35 ++++++++
 .../do/mcc-enterprise-update-uninstall.md     | 55 -------------
 .../do/mcc-enterprise-verify-functionality.md | 46 +++++++++++
 7 files changed, 219 insertions(+), 93 deletions(-)
 create mode 100644 windows/deployment/do/mcc-enterprise-deploy-linux.md
 create mode 100644 windows/deployment/do/mcc-enterprise-deploy-windows.md
 create mode 100644 windows/deployment/do/mcc-enterprise-uninstall.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-update-uninstall.md
 create mode 100644 windows/deployment/do/mcc-enterprise-verify-functionality.md

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index fe1b2a0cf3..1626b529e9 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -39,10 +39,14 @@
         href: mcc-ent-edu-overview.md
       - name: Requirements
         href: mcc-enterprise-prerequisites.md
-      - name: Deploy Microsoft Connected Cache
-        href: mcc-enterprise-deploy.md
-      - name: Update or uninstall MCC
-        href: mcc-enterprise-update-uninstall.md
+      - name: Deploy Microsoft Connected Cache to Windows
+        href: mcc-enterprise-deploy-windows.md
+      - name: Deploy Microsoft Connected Cache to Linux
+        href: mcc-enterprise-deploy-linux.md
+      - name: Verify cache node functionality
+        href: mcc-enterprise-verify-functionality.md
+      - name: Uninstall MCC
+        href: mcc-enterprise-uninstall.md
       - name: Appendix
         href: mcc-enterprise-appendix.md
     - name: MCC for ISPs
diff --git a/windows/deployment/do/mcc-enterprise-deploy-linux.md b/windows/deployment/do/mcc-enterprise-deploy-linux.md
new file mode 100644
index 0000000000..a4c836b19f
--- /dev/null
+++ b/windows/deployment/do/mcc-enterprise-deploy-linux.md
@@ -0,0 +1,38 @@
+---
+title: Deploy cache software to a Linux host machine
+description: How to deploy Microsoft Connected Cache for Enterprise and Education cache software to a Linux host machine.
+author: chrisjlin
+ms.author: lichris
+manager: naengler
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.date: 09/27/2024
+appliesto: 
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+---
+
+# Deploy your Connected Cache to a Linux host machine
+
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Linux host machine.
+
+Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md) and you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+
+## Steps to deploy MCCE to Linux
+
+1. Within the Azure Portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
+1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
+1. Run the provisioning command on the host machine.
+
+## Next step
+
+> [!div class="nextstepaction"]
+> [Verify cache node functionality](mcc-enterprise-verify-functionality.md)
+
+## Related content
+
+- [Deploy to a Windows host machine](mcc-enterprise-deploy-windows.md)
+- [Uninstall MCCE](mcc-enterprise-uninstall.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-enterprise-deploy-windows.md b/windows/deployment/do/mcc-enterprise-deploy-windows.md
new file mode 100644
index 0000000000..e640d0f7c3
--- /dev/null
+++ b/windows/deployment/do/mcc-enterprise-deploy-windows.md
@@ -0,0 +1,44 @@
+---
+title: Deploy cache software to a Windows host machine
+description: How to deploy Microsoft Connected Cache for Enterprise and Education cache software to a Windows host machine.
+author: chrisjlin
+ms.author: lichris
+manager: naengler
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.date: 09/27/2024
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+---
+
+# Deploy your Connected Cache to a Windows host machine
+
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
+
+Deploying MCCE to a Windows host machine relies on [Windows Subsystem for Linux (WSL)](https://learn.microsoft.com/en-us/windows/wsl/about) being installed under a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or [Local User Account](https://support.microsoft.com/en-us/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) to isolate execution of the WSL-Microsoft Connected Cache distribution from the other users on the machine. This helps prevent tampering with both the WSL-MCC process and the cached content that is hosted on the disk.
+
+Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md) and you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+
+## Steps to deploy MCCE to Windows
+
+1. Within the Azure Portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
+1. Open a PowerShell windows *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set the Execution Policy to "Unrestricted" to allow the provisoning scripts to run.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+    - If you are using a Local User account as the MCCE runtime account, you will also need to create a [PS Credential Object](https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0) named `$myLocalAccountCredential`.
+1. Run the provisioning command on the host machine.
+
+## Next step
+
+> [!div class="nextstepaction"]
+> [Verify cache node functionality](mcc-enterprise-verify-functionality.md)
+
+<!-- OR -->
+
+## Related content
+
+- [Deploy to a Linux host machine](mcc-enterprise-deploy-linux.md)
+- [Uninstall MCCE](mcc-enterprise-uninstall.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-enterprise-prerequisites.md b/windows/deployment/do/mcc-enterprise-prerequisites.md
index 1e33e85158..54e924692e 100644
--- a/windows/deployment/do/mcc-enterprise-prerequisites.md
+++ b/windows/deployment/do/mcc-enterprise-prerequisites.md
@@ -1,60 +1,74 @@
 ---
 title: Requirements for MCC for Enterprise and Education
-description: Overview of prerequisites and recommendations for using Microsoft Connected Cache (MCC) for Enterprise and Education.
+description: Overview of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection: tier3
+ms.author: lichris
+author: chrisjlin
+manager: naengler
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 05/23/2024
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
+ms.date: 09/27/2024
 ---
 
-# Requirements of Microsoft Connected Cache for Enterprise and Education (early preview)
+# Microsoft Connected Cache for Enterprise and Education Requirements (Public Preview)
 
-> [!NOTE]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
+This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
 
-## Enterprise requirements for MCC
+## Licensing requirements
 
-1. **Azure subscription**: MCC management portal is hosted within Azure and is used to create the Connected Cache [Azure resource](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management) and IoT Hub resource. Both are free services.
+- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCCE) service, you will need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
 
-    Your Azure subscription ID is first used to provision MCC services, and enable access to the preview. The MCC server requirement for an Azure subscription costs you nothing. If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
+    If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
+
+    The resources used for the public preview and in the future when this product is ready for production will be free to you, like other caching solutions.
+
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from a MCCE cache node.
+
+    - [Windows Enterprise E3 or E5](https://learn.microsoft.com/en-us/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/en-us/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
+    - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/en-us/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
+
+## Cache node host machine requirements
 
-    The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
-1. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-  
    > [!NOTE]
-   > Azure VMs are not currently supported. If you'd like to install your cache node on VMWare, see the [Appendix](mcc-enterprise-appendix.md) for a few additional configurations.
+   > If you'd like to install your cache node on VMWare, see the [Appendix](mcc-enterprise-appendix.md) for a few additional configurations.
 
-    **EFLOW requires Hyper-V support**
-    - On Windows client, enable the Hyper-V feature.
-    - On Windows Server, install the Hyper-V role and create a default network switch.
-    - For more requirements, see [EFLOW requirements](/azure/iot-edge/iot-edge-for-linux-on-windows#prerequisites).
+### General requirements
 
-    Disk recommendations:
-    - Using an SSD is recommended as cache read speed of SSD is superior to HDD
+- Any previous installations of MCC must be [uninstalled](mcc-enterprise-update-uninstall.md) prior to installing the latest version of MCC.
+- [These listed endpoints](delivery-optimization-endpoints.md) must be reachable by the host machine.
+- There must be no other services / applications utilizing port 80 on the host machine (e.g. ConfigManager, Distribution Point)
+- There must be at least 4 GB of free memory on the host machine.
 
-    NIC requirements:
-    - Multiple NICs on a single MCC instance aren't supported.
-    - 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
-    - For best performance, NIC and BIOS should support SR-IOV.
+### Additional requirements for Windows host machines
 
-    VM networking:
-    -  An external virtual switch to support outbound and inbound network communication (created during the installation process)
-1. **Content endpoints**: If you're using a proxy or firewall, certain endpoints must be allowed through in order for your MCC to cache and serve content. See [Delivery Optimization and Microsoft Connected Cache content type endpoints](delivery-optimization-endpoints.md) for the list of required endpoints. 
+- The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
+    - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/en-us/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
+    - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/en-us/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
+- The Windows host machine must support nested virtualization.
+- The Windows host machine must have [WSL2 installed](https://learn.microsoft.com/en-us/windows/wsl/install#install-wsl-command).
 
-## Sizing recommendations
+### Additional requirements for Linux host machines
+
+- The Linux host machine must be using one of the following Operating Systems:
+
+    - Ubuntu 20.04
+    - Red Hat Enterprise Linux 8.* or 9.*
+        - If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)
+
+### Networking recommendations for host machines
+
+- Multiple network interface cards (NICs) on a single MCC instance aren't supported.
+- 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
+- For best performance, NIC and BIOS should support SR-IOV.
+
+### Host machine sizing recommendations
 
 | Component  | Branch Office / Small Enterprise | Large Enterprise |
 | -- | --- | --- |
-| OS|  Windows Server 2019*/2022 <br> Windows 10*/11 (Pro or Enterprise) with Hyper-V Support <br><br>* Windows 10 and Windows Server 2019 build 17763 or later | Same |
+| OS|  Windows Server 2022 <br> Windows 11 (Pro or Enterprise) | Same |
 |NIC | 1 Gbps | 5 Gbps |
 |Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
 |Memory | 4 GB | 8 GB |
diff --git a/windows/deployment/do/mcc-enterprise-uninstall.md b/windows/deployment/do/mcc-enterprise-uninstall.md
new file mode 100644
index 0000000000..3c67da978c
--- /dev/null
+++ b/windows/deployment/do/mcc-enterprise-uninstall.md
@@ -0,0 +1,35 @@
+---
+title: Uninstall MCC for Enterprise and Education
+description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) from a host machine.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.author: lichris
+author: chrisjlin
+manager: naengler
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
+ms.date: 09/27/2024
+---
+
+# Uninstall MCCE caching software from a host machine
+
+This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) caching software from a host machine. This should be done after deleting the cache node in the Azure Portal.
+
+## Steps to uninstall MCCE from a Windows host machine
+
+1. Launch a PowerShell window *as administrator* and navigate to the MCC installation directory (C:\mcconwsl01 by default)
+1. Run the `uninstallmcconwsl.ps1` script
+
+## Steps to uninstall MCCE from a Linux host machine
+
+The `uninstallmcc.sh` script within the provisioning package will uninstall the MCCE caching software and all related components, including:
+
+- IoT Edge
+- Edge Agent
+- Edge Hub
+- MCC
+- Moby CLI
+- Moby engine
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-enterprise-update-uninstall.md b/windows/deployment/do/mcc-enterprise-update-uninstall.md
deleted file mode 100644
index 8ffa3c50c7..0000000000
--- a/windows/deployment/do/mcc-enterprise-update-uninstall.md
+++ /dev/null
@@ -1,55 +0,0 @@
----
-title: Uninstall MCC for Enterprise and Education
-description: Details on how to uninstall Microsoft Connected Cache (MCC) for Enterprise and Education for your environment.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 05/23/2024
----
-
-<!-- Customers will no longer update the private preview and instead install public preview
-# Update or uninstall Microsoft Connected Cache for Enterprise and Education
-
-Throughout the preview phase, we'll send you security and feature updates for MCC. Follow these steps to perform the update.
-
-## Update MCC
-
-Run the following command with the **arguments** we provided in the email to update your MCC:
-
-```powershell
-# .\updatemcc.ps1 version="**\<VERSION\>**" tenantid="**\<TENANTID\>**" customerid="**\<CUSTOMERID\>**" cachenodeid="**\<CACHENODEID\>**" customerkey="**\<CUSTOMERKEY\>**"
-```
-
-For example:
-
-```powershell
-# .\updatemcc.ps1 version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.659" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99a"
-```
--->
-# Uninstall MCC
-
-Contact the MCC Team before uninstalling to let us know if you're facing issues.
-
-This script removes the following items:
-
-1. EFLOW + Linux VM
-1. IoT Edge
-1. Edge Agent
-1. Edge Hub
-1. MCC
-1. Moby CLI
-1. Moby Engine
-
-To delete MCC, go to Control Panel \> Uninstall a program \> Select Azure IoT
-Edge LTS \> Uninstall
diff --git a/windows/deployment/do/mcc-enterprise-verify-functionality.md b/windows/deployment/do/mcc-enterprise-verify-functionality.md
new file mode 100644
index 0000000000..25f9af10ff
--- /dev/null
+++ b/windows/deployment/do/mcc-enterprise-verify-functionality.md
@@ -0,0 +1,46 @@
+---
+title: Verify cache node functionality
+description: How to verify functionality of a Microsoft Connected Cache for Enterprise and Education cache node.
+author: chrisjlin
+ms.author: lichris
+manager: naengler
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.date: 09/27/2024
+appliesto: 
+- ✅ Windows-hosted MCCE cache nodes
+- ✅ Linux-hosted MCCE cache nodes
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+---
+
+# Verify MCCE cache node functionality
+
+This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCCE) cache node is functioning correctly.
+
+This should be done after deploying MCCE caching software to a [Windows](mcc-enterprise-deploy-windows.md) or [Linux](mcc-enterprise-deploy-linux.md) host machine.
+
+## Steps to verify functionality of MCCE cache node
+
+1. To verify that the MCCE container on the host machine is running and reachable, run the following command from the host machine:
+
+    ```powershell
+    wget http://localhost/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com
+    ```
+
+    If successful, there should be an HTTP response with StatusCode 200.
+
+1. To verify that the MCCE cache node can be reached by Windows clients in your network, visit the following address from a web browser on a Windows client device:
+
+    `http://[HostMachine-IP-address]/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com`
+
+    If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
+
+1. To check how much content an individual Windows client has pulled from a MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/en-us/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+
+    You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
+
+## Related content
+
+- [Monitor cache node usage](mcc-enterprise-monitoring.md)
+- [Troubleshoot cache node](mcc-enterprise-support-troubleshoot.md)
\ No newline at end of file

From c5c1082cca1468627e80021d00dd8a5f6559433c Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 27 Sep 2024 13:51:56 -0700
Subject: [PATCH 025/128] Acrolinx improvements

---
 .../deployment/do/mcc-enterprise-deploy-linux.md |  4 ++--
 .../do/mcc-enterprise-deploy-windows.md          | 10 +++++-----
 .../do/mcc-enterprise-prerequisites.md           | 16 ++++++++--------
 .../deployment/do/mcc-enterprise-uninstall.md    | 10 +++++-----
 .../do/mcc-enterprise-verify-functionality.md    |  6 +++---
 5 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/windows/deployment/do/mcc-enterprise-deploy-linux.md b/windows/deployment/do/mcc-enterprise-deploy-linux.md
index a4c836b19f..c15dd8a281 100644
--- a/windows/deployment/do/mcc-enterprise-deploy-linux.md
+++ b/windows/deployment/do/mcc-enterprise-deploy-linux.md
@@ -17,11 +17,11 @@ appliesto:
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Linux host machine.
 
-Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md) and you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
 ## Steps to deploy MCCE to Linux
 
-1. Within the Azure Portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
diff --git a/windows/deployment/do/mcc-enterprise-deploy-windows.md b/windows/deployment/do/mcc-enterprise-deploy-windows.md
index e640d0f7c3..e75da9ca97 100644
--- a/windows/deployment/do/mcc-enterprise-deploy-windows.md
+++ b/windows/deployment/do/mcc-enterprise-deploy-windows.md
@@ -17,18 +17,18 @@ appliesto:
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
 
-Deploying MCCE to a Windows host machine relies on [Windows Subsystem for Linux (WSL)](https://learn.microsoft.com/en-us/windows/wsl/about) being installed under a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or [Local User Account](https://support.microsoft.com/en-us/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) to isolate execution of the WSL-Microsoft Connected Cache distribution from the other users on the machine. This helps prevent tampering with both the WSL-MCC process and the cached content that is hosted on the disk.
+Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/en-us/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
 
-Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md) and you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
 ## Steps to deploy MCCE to Windows
 
-1. Within the Azure Portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
 1. Open a PowerShell windows *as administrator* on the host machine, then change directory to the extracted provisioning package.
-1. Set the Execution Policy to "Unrestricted" to allow the provisoning scripts to run.
+1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you are using a Local User account as the MCCE runtime account, you will also need to create a [PS Credential Object](https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0) named `$myLocalAccountCredential`.
 1. Run the provisioning command on the host machine.
 
 ## Next step
diff --git a/windows/deployment/do/mcc-enterprise-prerequisites.md b/windows/deployment/do/mcc-enterprise-prerequisites.md
index 54e924692e..a53dc8e4a8 100644
--- a/windows/deployment/do/mcc-enterprise-prerequisites.md
+++ b/windows/deployment/do/mcc-enterprise-prerequisites.md
@@ -19,13 +19,13 @@ This article details the requirements and recommendations for using Microsoft Co
 
 ## Licensing requirements
 
-- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCCE) service, you will need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
+- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCCE) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
 
     If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
 
-    The resources used for the public preview and in the future when this product is ready for production will be free to you, like other caching solutions.
+    The Azure resources used for MCCE will be free to you during this public preview.
 
-- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from a MCCE cache node.
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCCE cache node.
 
     - [Windows Enterprise E3 or E5](https://learn.microsoft.com/en-us/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/en-us/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/en-us/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
@@ -37,10 +37,10 @@ This article details the requirements and recommendations for using Microsoft Co
 
 ### General requirements
 
-- Any previous installations of MCC must be [uninstalled](mcc-enterprise-update-uninstall.md) prior to installing the latest version of MCC.
+- Any previous installations of MCC must be [uninstalled](mcc-enterprise-update-uninstall.md) before installing the latest version of MCC.
 - [These listed endpoints](delivery-optimization-endpoints.md) must be reachable by the host machine.
-- There must be no other services / applications utilizing port 80 on the host machine (e.g. ConfigManager, Distribution Point)
-- There must be at least 4 GB of free memory on the host machine.
+- The host machine must have no other services / applications utilizing port 80 (for example, ConfigManager or Distribution Point).
+- The host machine must have at least 4 GB of free memory.
 
 ### Additional requirements for Windows host machines
 
@@ -55,14 +55,14 @@ This article details the requirements and recommendations for using Microsoft Co
 - The Linux host machine must be using one of the following Operating Systems:
 
     - Ubuntu 20.04
-    - Red Hat Enterprise Linux 8.* or 9.*
+    - Red Hat Enterprise Linux (RHEL) 8.* or 9.*
         - If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)
 
 ### Networking recommendations for host machines
 
 - Multiple network interface cards (NICs) on a single MCC instance aren't supported.
 - 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
-- For best performance, NIC and BIOS should support SR-IOV.
+- The NIC and BIOS should support SR-IOV for best performance.
 
 ### Host machine sizing recommendations
 
diff --git a/windows/deployment/do/mcc-enterprise-uninstall.md b/windows/deployment/do/mcc-enterprise-uninstall.md
index 3c67da978c..69eb8b733b 100644
--- a/windows/deployment/do/mcc-enterprise-uninstall.md
+++ b/windows/deployment/do/mcc-enterprise-uninstall.md
@@ -16,7 +16,7 @@ ms.date: 09/27/2024
 
 # Uninstall MCCE caching software from a host machine
 
-This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) caching software from a host machine. This should be done after deleting the cache node in the Azure Portal.
+This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
 
 ## Steps to uninstall MCCE from a Windows host machine
 
@@ -25,11 +25,11 @@ This article describes how to uninstall Microsoft Connected Cache for Enterprise
 
 ## Steps to uninstall MCCE from a Linux host machine
 
-The `uninstallmcc.sh` script within the provisioning package will uninstall the MCCE caching software and all related components, including:
+The `uninstallmcc.sh` script within the provisioning package uninstalls the MCCE caching software and all related components, including:
 
 - IoT Edge
-- Edge Agent
-- Edge Hub
+- IoT Edge Agent
+- IoT Edge Hub
 - MCC
 - Moby CLI
-- Moby engine
\ No newline at end of file
+- Moby engine
diff --git a/windows/deployment/do/mcc-enterprise-verify-functionality.md b/windows/deployment/do/mcc-enterprise-verify-functionality.md
index 25f9af10ff..d782443c2e 100644
--- a/windows/deployment/do/mcc-enterprise-verify-functionality.md
+++ b/windows/deployment/do/mcc-enterprise-verify-functionality.md
@@ -18,7 +18,7 @@ appliesto:
 
 This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCCE) cache node is functioning correctly.
 
-This should be done after deploying MCCE caching software to a [Windows](mcc-enterprise-deploy-windows.md) or [Linux](mcc-enterprise-deploy-linux.md) host machine.
+These steps should be taken after deploying MCCE caching software to a [Windows](mcc-enterprise-deploy-windows.md) or [Linux](mcc-enterprise-deploy-linux.md) host machine.
 
 ## Steps to verify functionality of MCCE cache node
 
@@ -30,13 +30,13 @@ This should be done after deploying MCCE caching software to a [Windows](mcc-ent
 
     If successful, there should be an HTTP response with StatusCode 200.
 
-1. To verify that the MCCE cache node can be reached by Windows clients in your network, visit the following address from a web browser on a Windows client device:
+1. To verify that Windows clients in your network can reach the MCCE cache node, visit the following address from a web browser on a Windows client device:
 
     `http://[HostMachine-IP-address]/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com`
 
     If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
 
-1. To check how much content an individual Windows client has pulled from a MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/en-us/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/en-us/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From 6747a66585f23213a39eaf18b3e53461997a7723 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 27 Sep 2024 15:36:51 -0700
Subject: [PATCH 026/128] additional edits, acrolinx

---
 .../do/mcc-ent-configure-provision-linux.md   | 149 ------------------
 .../do/mcc-ent-configure-provision-windows.md | 149 ------------------
 .../do/mcc-ent-create-resource-and-cache.md   |   8 +-
 ...oy-linux.md => mcc-ent-deploy-to-linux.md} |   4 +-
 ...indows.md => mcc-ent-deploy-to-windows.md} |   4 +-
 .../do/mcc-ent-manage-cache-using-CLI.md      |  98 ++++++------
 6 files changed, 56 insertions(+), 356 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-linux.md
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-windows.md
 rename windows/deployment/do/{mcc-ent-deploy-linux.md => mcc-ent-deploy-to-linux.md} (92%)
 rename windows/deployment/do/{mcc-ent-deploy-windows.md => mcc-ent-deploy-to-windows.md} (95%)

diff --git a/windows/deployment/do/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
deleted file mode 100644
index 3c39a7af8f..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-linux.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise provision Linux cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to provision Linux cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
deleted file mode 100644
index d2ea4921a2..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-windows.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise provision Windows cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to provision Windows cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
- 
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index d067f2c8dd..b1dcf2cc2c 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -195,17 +195,17 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ---
 
 ## Next step
-The next step is to provision the cache node on the server.
+The next step is to deploy the cache node to the host machine.
 
 # [Azure portal](#tab/portal)
-To provision MCC on **Windows** host machine, see [Provision Windows cache node](mcc-ent-configure-provision-windows.md)
+To deploy the cache node to a **Windows** host machine, see [Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
 
 <br>
 
-To provision MCC on **Linux** host machine, see [Provision Linux cache node](mcc-ent-configure-provision-linux.md)
+To deploy the cache node to a **Linux** host machine, see [Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
 
 # [Azure CLI](#tab/cli/)
-To provision cache node using Azure CLI, see [Bulk management of cache nodes](mcc-ent-manage-cache-using-CLI.md)
+To deploy cache nodes using Azure CLI, see [Bulk management of cache nodes](mcc-ent-manage-cache-using-CLI.md)
 
 ---
 <br>
diff --git a/windows/deployment/do/mcc-ent-deploy-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
similarity index 92%
rename from windows/deployment/do/mcc-ent-deploy-linux.md
rename to windows/deployment/do/mcc-ent-deploy-to-linux.md
index c15dd8a281..55acd126ef 100644
--- a/windows/deployment/do/mcc-ent-deploy-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -13,13 +13,13 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Deploy your Connected Cache to a Linux host machine
+# Deploy MCCE cache node to a Linux host machine
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Linux host machine.
 
 Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
-## Steps to deploy MCCE to Linux
+## Steps to deploy MCCE cache node to Linux
 
 1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
diff --git a/windows/deployment/do/mcc-ent-deploy-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
similarity index 95%
rename from windows/deployment/do/mcc-ent-deploy-windows.md
rename to windows/deployment/do/mcc-ent-deploy-to-windows.md
index e75da9ca97..942744942e 100644
--- a/windows/deployment/do/mcc-ent-deploy-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -13,7 +13,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Deploy your Connected Cache to a Windows host machine
+# Deploy MCCE cache node to a Windows host machine
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
 
@@ -21,7 +21,7 @@ Deploying MCCE to a Windows host machine requires designating a [Group Managed S
 
 Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
-## Steps to deploy MCCE to Windows
+## Steps to deploy MCCE cache node to Windows
 
 1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 2d913cc50e..783ed6f8e5 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -20,7 +20,7 @@ ms.date: 06/03/2024
 
 <br>
 
-This article outlines how to create, configure and provision your Microsoft Connected Cache for Enterprise cache nodes using Azure CLI.
+This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCCE) cache nodes using Azure CLI.
 
  
 ## Prerequisites:
@@ -34,20 +34,20 @@ This article outlines how to create, configure and provision your Microsoft Conn
 The first step is to create a resource group if you don't already have one.
 An Azure resource group is a logical container into which Azure resources are deployed and managed.
 
-To create a resource group, use [az group create](/cli/azure/group#az-group-create).
+To create a resource group, use `az group create`. You can find more details on this CLI command [here](/cli/azure/group#az-group-create).
 <br>
 
 ```azurecli-interactive
 az group create --name myrg --location westus
 ```
 
-Once the resource group is created, you will need to create a Microsoft Connected Cache for Enterprise resource.
+Once the resource group is created, you'll need to create a Microsoft Connected Cache for Enterprise resource.
 
 
-### 2. Create a MCC resource
-A MCC resource is a resource under which cache nodes can be created.
+### 2. Create an MCCE Azure resource
+An MCCE Azure resource is a top-level Azure resource under which cache nodes can be created.
 
-To create a mcc resource, use az mcc ent resource create
+To create an MCCE Azure resource, use `az mcc ent resource create`
 
 ```azurecli-interactive
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
@@ -64,7 +64,7 @@ The next step is to create a cache node under this resource.
 
 
 ### 3. Create a cache node
-To create a cache node, use az mcc ent node create
+To create a cache node, use `az mcc ent node create`
 
 ```azurecli-interactive
 az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os linux
@@ -78,8 +78,9 @@ az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccre
 <br>
 
 ### 4. Confirm cache node creation
-Before you can start configuring your cache node, you need to confirm that cache node creation has been successful. 
-To confirm cache node creation, use az mcc ent node show
+Before you can start configuring your cache node, you need to confirm that the cache node was successfully created.
+
+To confirm cache node creation, use `az mcc ent node show`
 
 <br>
 
@@ -93,11 +94,11 @@ az mcc ent node show --cache-node-name mycachenode --mcc-resource-name mymccreso
 
 <br>
 
-Once the cache node has been created successfully, you can now configure the cache node.
+Once successful cache node creation is confirmed, you can proceed to configure the cache node.
 
 
 ### 5. Configure cache node
-To configure your cache node, use az mcc ent node update
+To configure your cache node, use `az mcc ent node update`
 
 The below example configures a Linux cache node with proxy enabled:
 
@@ -125,68 +126,59 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 
 ### 6. Get provisioning details for the cache node
-Now that you have configured the cache node, the next step is to provision the cache node on the server. To provision the cache node, you will need to create a provisioning script with relevant information.
-To get the relevant information for provisioning script, use az mcc ent node get-provisioning-details
+After successfully configuring the cache node, the next step is to deploy the cache node to a host machine. To deploy the cache node, you'll need to create a provisioning script with relevant information.
+
+To get the relevant information for provisioning script, use `az mcc ent node get-provisioning-details`
 
 ```azurecli-interactive
 az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
 ```
 
-In the output, please save the values for cacheNodeId, customerKey, mccResourceId, registrationKey. These values are needed to create the provisioning script.
+Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
 
-### 7. Provisioning cache node
+### 7. Deploy cache node
 <br>
 
-#### Provisioning cache node on Linux host OS:
-Before you provision your cache node on Linux machine, please make sure you have completed the requisites listed here: Host machine requirements
+#### Deploy cache node to Linux host machine
+Before you deploy your cache node to a Linux host machine, make sure you have met the prerequisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
 
-Use the link below to download and unzip the provisioning package on the server and run the below script to provision your cache node. 
+Use the following link to download and extract the Linux-compatible MCCE provisioning package onto the host machine.
 
-[Download MCC package for Linux host OS](https://aka.ms/MCC-Ent-InstallScript-Linux)
+[Download MCCE provisioning package for Linux host machine](https://aka.ms/MCC-Ent-InstallScript-Linux)
 
 <br>
 
 >[!IMPORTANT]
->Note: before you execute the script,  please make sure you change access permissions by running the command below <br>
->```azurepowershell-interactive
->sudo chmod +x provisionmcc.sh
->```
+>Before you execute the provisioning command, make sure you change directory to the extracted provisioning package and set the script execution permissions by running the command below.
+```azurepowershell-interactive
+sudo chmod +x provisionmcc.sh
+```
 
-<br>
+Replace the values in the following provisioning command before running it.<br>
 
->[!NOTE]
->Please replace the sample values in the script below with the values that you saved in the step 5 and 6.
-
-<br>
-
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
-<br>
-
-Provisioning script:<br>
-`powershell-interactive
+```azurepowershell-interactive
 sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="true" proxyurl=http://enter proxy hostname:enter port
-`
+```
 <br>
 
-#### Provisioning cache node on Windows host OS:
-
-Before you provision your cache node on Windows, make sure you have completed the requisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
-
-Please download and unzip the provisioning package on the server and run the below script to provision your cache node.
-Note: Please replace the sample values with the values that you saved in the above steps.
-
 >[!IMPORTANT]
 >'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
 
+#### Deploy cache node to Windows host machine
+
+Before you deploy your cache node to a Windows host machine, make sure you have met the prerequisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
+
+Use the following link to download and extract the Windows-compatible MCCE provisioning package onto the host machine.
+[Download MCCE provisioning package for Windows host machine](https://aka.ms/MCC-Ent-InstallScript-WSL)
 <br>
 
-[Download MCC package for Windows host OS](https://aka.ms/MCC-Ent-InstallScript-WSL)
-<br>
+>[!IMPORTANT]
+>Before you execute the provisioning command, make sure you change directory to the extracted provisioning package and set the script execution permissions by running the command below.
+```azurepowershell-interactive
+Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
+```
 
-
-If you are using a **gmsa** account:<br>
+If you're using a **Group Managed Service Account**, replace the values in the following provisioning command before running it.<br>
 
 ```powershell-interactive
 ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User
@@ -194,7 +186,10 @@ If you are using a **gmsa** account:<br>
 
 <br>
 
-If you are using **local user account** or **domain user account**:<br>
+>[!IMPORTANT]
+>'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+
+If you're using **Local User account** or **Domain User account**, replace the values in the following provisioning command before running it.<br>
 
 ```powershell-interactive
 ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
@@ -202,10 +197,13 @@ If you are using **local user account** or **domain user account**:<br>
 
 <br>
 
+>[!IMPORTANT]
+>'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
+
 
 ## Next step
 
-To verify cache node functionality, visit, [Verify cache node functionality](mcc-ent-verify-cache-node.md)
+To verify cache node functionality, see [Verify cache node functionality](mcc-ent-verify-cache-node.md)
 
 
 <br>

From 34f7ff91815559117452338fe0d98d2cccbdb160 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Mon, 30 Sep 2024 11:03:42 -0700
Subject: [PATCH 027/128] additional changes

---
 .../do/mcc-ent-create-resource-and-cache.md   |  79 ++++------
 .../deployment/do/mcc-ent-deploy-to-linux.md  |  10 +-
 .../do/mcc-ent-deploy-to-windows.md           |  10 +-
 windows/deployment/do/mcc-ent-edu-overview.md |   4 +-
 windows/deployment/do/mcc-ent-faq.yml         |   4 +-
 .../do/mcc-ent-manage-cache-using-CLI.md      |   4 +-
 .../deployment/do/mcc-ent-monitor-cache.md    | 149 ------------------
 windows/deployment/do/mcc-ent-monitoring.md   |  61 +++++++
 .../deployment/do/mcc-ent-prerequisites.md    |   6 +-
 .../deployment/do/mcc-ent-private-preview.md  |   4 +-
 .../deployment/do/mcc-ent-release-notes.md    |   4 +-
 .../do/mcc-ent-support-and-troubleshooting.md |  12 +-
 .../do/mcc-ent-uninstall-cache-node.md        |   2 +-
 .../do/mcc-ent-update-cache-node.md           |  72 ++++-----
 .../do/mcc-ent-verify-cache-node.md           |   8 +-
 15 files changed, 164 insertions(+), 265 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-monitor-cache.md
 create mode 100644 windows/deployment/do/mcc-ent-monitoring.md

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index b1dcf2cc2c..fd199751a9 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -1,31 +1,29 @@
 ---
-title: MCC for Enterprise provision create cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to create cache node.
+title: Create and configure MCCE cache nodes
+description: Details on how to create and configure Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
-manager: aaroncz
+manager: naengler
 ms.author: nidos
 author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
 ms.date: 06/03/2024
 ---
 
-# Create MCC resource and cache nodes
+# Create MCCE Azure resource and cache nodes
 
-This article outlines how to create and configure your Microsoft Connected Cache for Enterprise cache nodes. The creation and configuration of your cache node takes place in Azure portal. The deployment of your cache node requires downloading an installer script that will need to be run on your cache server.
+This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
 
 ## Prerequisites
-1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a completely free-of-charge service hosted in Azure. You'll need to have a Pay-As-You-Go subscription in order to onboard to our service. To create a subscription, go to [Pay-As-You-Go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
+1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a free-of-charge service hosted in Azure. You'll need a pay-as-you-go Azure subscription in order to onboard to our service. To create a subscription, go to [pay-as-you-go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
 2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-For more information on sizing and OS requirements, please visit [Host OS Requirement](mcc-ent-prerequisites.md)
+For more information on sizing and OS requirements, see [the prerequisites for using MCCE](mcc-ent-prerequisites.md).
 
-## Create MCC resource
+## Create MCCE Azure resource
 
 # [Azure portal](#tab/portal)
 
@@ -34,13 +32,13 @@ For more information on sizing and OS requirements, please visit [Host OS Requir
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
 -->
 
-1. Select Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Also, enter a name for the resource and click Review + Create.
+1. Select the Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Then enter a name for the resource and select Review + Create.
 <!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
 -->
 1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
 
-1. The creation of the resource may take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
+1. The creation of the resource might take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
 
 
 # [Azure CLI](#tab/cli)
@@ -61,7 +59,7 @@ For more information on sizing and OS requirements, please visit [Host OS Requir
 
     * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
 
-#### Create MCC resource
+#### Create MCCE Azure resource
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
@@ -73,26 +71,26 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 
 ---
 
-## Create cache node
+## Create MCCE cache node
 
 # [Azure portal](#tab/portal)
 
   1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.
-  1. Under Cache Node Management, click on Cache Nodes and then on + Create Cache Node.
+  1. Under Cache Node Management, select on Cache Nodes and then on + Create Cache Node.
   <!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
     -->
-  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and click create. Please note, cache node names have to be unique under the Microsoft Connected Cache resource.
+  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and select create. Note, cache node names have to be unique under the Microsoft Connected Cache resource.
   <!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
     -->
-  The creation of cache node may take a few minutes. Please click Refresh to see your recently created cache node.
+  The creation of cache node might take a few minutes. Select Refresh to see your recently created cache node.
 Once the status changes to **Not Configured**, you can now configure your cache node.
 
 
 # [Azure CLI](#tab/cli)
 
-Use the command below to create a new cache node if you don't already have one.
+Use the following command to create a new cache node if you don't already have one.
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
@@ -123,22 +121,22 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 
 ---
 
-## Configure cache node
+## Configure MCCE cache node
 
 # [Azure portal](#tab/portal)
-Please enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
-Don't forget to click save after adding configuration information.
+Enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
+Don't forget to select save after adding configuration information.
 
 
 # [Azure CLI](#tab/cli)
 
-Use the command below to configure cache node for **Linux** host OS
+Use the following command to configure cache node for deployment to a **Linux** host machine.
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
 * *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
-* *\<physical-path>*: The cache drive path. You can add upto 9 cache drives.
+* *\<physical-path>*: The cache drive path. You can add upto nine cache drives.
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
   Accepted values: enabled, disabled
@@ -162,7 +160,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 <br>
 
-Use the command below to configure cache node for **Windows** host OS
+Use the following command to configure cache node for deployment to a **Windows** host machine.
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
@@ -190,21 +188,16 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 --cache-drive "[{physical-path:/var/mcc,size-in-gb:<size of cache drive>}]" --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
 ```
 
-
-
 ---
 
 ## Next step
-The next step is to deploy the cache node to the host machine.
 
-# [Azure portal](#tab/portal)
+### [Azure portal](#tab/portal)
 To deploy the cache node to a **Windows** host machine, see [Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
 
-<br>
-
 To deploy the cache node to a **Linux** host machine, see [Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
 
-# [Azure CLI](#tab/cli/)
+### [Azure CLI](#tab/cli/)
 To deploy cache nodes using Azure CLI, see [Bulk management of cache nodes](mcc-ent-manage-cache-using-CLI.md)
 
 ---
@@ -214,33 +207,30 @@ To deploy cache nodes using Azure CLI, see [Bulk management of cache nodes](mcc-
 
 ### General configuration fields
 
-| Field Name	|Expected Value	 |Description|
+| Field Name |Expected Value |Description|
 |---|---|---|
-|**Cache node name** |	Alphanumeric string that contains no spaces|	The name of the cache node. You may choose names based on location like Seattle-1. This name must be unique and can't be changed later|
-|**Host OS** |	Linux or Windows| This is the host operating system that the cache node will be deployed on.|
+|**Cache node name** | Alphanumeric string that contains no spaces| The name of the cache node. You may choose names based on location such as "Seattle-1". This name must be unique and can't be changed later |
+|**Host OS** | Linux or Windows| This is the operating system of the host machine that the cache node will be deployed to.|
 
 ### Storage fields
 
-
 ##### Cache node for Linux
 
 >[!Important]
 >All cache drives must have full read/write permissions set or the cache node will not function. For example, in a terminal you can run: sudo chmod 777 /path/to/cachedrivefolder
 <br>
 
-| Field Name	|Expected Value	 |Description|
+| Field Name |Expected Value |Description|
 |---|---|---|
-|**Cache drive folder**|	File path string	|Up to 9 drive folders accessible by the cache node can be configured for each cache node to configure cache storage. Enter the location of the folder in Ubuntu where the external physical drive is mounted. For example: /dev/sda3/. Each cache drive should have read/write permissions configured. Ensure your disks are mounted and visit Attach a data disk to a Linux VM for more information.|
-|**Cache drive size in gigabytes**|	Integer in GB| 	Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB.|
-
+|**Cache drive folder**| File path string |Up to nine drive folders accessible by the cache node can be configured for each cache node to configure cache storage. Enter the location of the folder in Ubuntu where the external physical drive is mounted. For example: /dev/sda3/. Each cache drive should have read/write permissions configured. Ensure your disks are mounted and visit Attach a data disk to a Linux VM for more information.|
+|**Cache drive size in gigabytes**| Integer in GB| Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB.|
 
 ##### Cache node for Windows
 
-| Field Name	|Expected Value	 |Description|
+| Field Name |Expected Value |Description|
 |---|---|---|
-|**Cache drive folder**|	File path string /var/mcc|	This is the folder path where content will be cached. You cannot change the folder path.|
-|**Cache drive size in gigabytes**|	Integer in GB|	Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB. |
-
+|**Cache drive folder**| File path string /var/mcc| This is the folder path where content is cached. You can't change the folder path.|
+|**Cache drive size in gigabytes**| Integer in GB| Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB. |
 
 #### Proxy settings
 <br>
@@ -255,4 +245,3 @@ You can choose to enable or disable proxy settings on your cache node.
 |---|---|---|
 |**Proxy host name**|	String or number|	Proxy host name or address|
 |**Proxy port**|	Integer|	Proxy port
-
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 55acd126ef..bd3bdbfd47 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -1,6 +1,6 @@
 ---
-title: Deploy cache software to a Linux host machine
-description: How to deploy Microsoft Connected Cache for Enterprise and Education cache software to a Linux host machine.
+title: Deploy MCCE cache software to a Linux host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) cache software to a Linux host machine.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -30,9 +30,9 @@ Before deploying MCCE to a Linux host machine, ensure that the host machine meet
 ## Next step
 
 > [!div class="nextstepaction"]
-> [Verify cache node functionality](mcc-enterprise-verify-functionality.md)
+> [Verify cache node functionality](mcc-ent-verify-cache-node.md)
 
 ## Related content
 
-- [Deploy to a Windows host machine](mcc-enterprise-deploy-windows.md)
-- [Uninstall MCCE](mcc-enterprise-uninstall.md)
\ No newline at end of file
+- [Deploy to a Windows host machine](mcc-ent-deploy-to-windows.md)
+- [Uninstall MCCE](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 942744942e..9bb3a65c10 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -1,6 +1,6 @@
 ---
-title: Deploy cache software to a Windows host machine
-description: How to deploy Microsoft Connected Cache for Enterprise and Education cache software to a Windows host machine.
+title: Deploy MCCE cache software to a Windows host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) cache software to a Windows host machine.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -34,11 +34,11 @@ Before deploying MCCE to a Windows host machine, ensure that the host machine me
 ## Next step
 
 > [!div class="nextstepaction"]
-> [Verify cache node functionality](mcc-enterprise-verify-functionality.md)
+> [Verify cache node functionality](mcc-ent-verify-cache-node.md)
 
 <!-- OR -->
 
 ## Related content
 
-- [Deploy to a Linux host machine](mcc-enterprise-deploy-linux.md)
-- [Uninstall MCCE](mcc-enterprise-uninstall.md)
\ No newline at end of file
+- [Deploy to a Linux host machine](mcc-ent-deploy-to-linux.md)
+- [Uninstall MCCE](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index a6b4c0afed..0060028e14 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -1,6 +1,6 @@
 ---
-title: MCC for Enterprise and Education Overview
-description: Overview, supported scenarios, and content types for Microsoft Connected Cache (MCC) for Enterprise and Education.
+title: MCCE Overview
+description: Overview, supported scenarios, and content types for Microsoft Connected Cache for Enterprise and Education (MCCE).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 690dd4d0c7..2d84c64a34 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -1,7 +1,7 @@
 ### YamlMime:FAQ
 metadata:
-  title: Microsoft Connected Cache for Enterprise Frequently Asked Questions
-  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise.
+  title: MCCE Frequently Asked Questions
+  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise (MCCE).
   ms.service: windows-client
   ms.subservice: itpro-updates
   ms.topic: faq
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 783ed6f8e5..1f28f0bdbf 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -1,6 +1,6 @@
 ---
-title: MCC for Enterprise manage cache nodes using CLI
-description: Microsoft Connected Cache for Enterprise. Learn about managing cache nodes using CLI
+title: Manage MCCE cache nodes using CLI
+description: Details on how to manage Microsoft Connected Cache for Enterprise (MCCE) cache nodes via Azure CLI commands.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
diff --git a/windows/deployment/do/mcc-ent-monitor-cache.md b/windows/deployment/do/mcc-ent-monitor-cache.md
deleted file mode 100644
index a8eb213e19..0000000000
--- a/windows/deployment/do/mcc-ent-monitor-cache.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise monitor cache nodes
-description: Microsoft Connected Cache for Enterprise. Learn about how to monitor cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 09/04/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
new file mode 100644
index 0000000000..c5028f5f26
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -0,0 +1,61 @@
+---
+title: Monitor usage of MCCE cache nodes
+description: Details on how to monitor the usage of Microsoft Connected Cache for Enterprise (MCCE) cache nodes.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: naengler
+ms.author: lichris
+author: chrisjlin
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 09/04/2024
+---
+
+# Monitor MCCE cache node usage
+
+Tracking the status and performance of your MCCE cache node is essential to making sure that you're getting the most out of the service.
+
+<!-- Add standard metrics
+
+      Add scenarios for creating custom metrics -->
+
+## Cache node summary
+
+The Cache Node Summary box on your Azure portal 
+
+| Metric | Description |
+| --- | --- |
+| Healthy nodes | The MCCE service will periodically request heartbeat messages from your MCC node to determine if it is functioning as expected. |
+| Unhealthy nodes | If the cache node does not respond, it will be labeled as unhealthy. |
+| Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic is not dependent on the time filter near the charts. |
+| Max out | The minimum egress (in Mb/sec.) that your node has pushed out at any given time. |
+| Average in | The average ingress (in Mb/sec.) that your node has pulled in over its lifetime. This statistic is not dependent on the time filter near the charts. |
+| Average out | The average egress (in Mb/sec.) that your node has pushed out over its lifetime. |
+| Cache efficiency | The percentage of all requests that your MCC node receives that are ultimately delivered by your MCC node. An effective node is generally expected to have an efficiency >95%. |
+
+## Charts
+
+### Filters
+
+- Will only filter the data shown in the 2 charts, scalable from 1 hour to 30 days
+- Can view data by individual cache nodes or the average of all your active MCC nodes.
+
+### Outbound traffic
+
+- The egress (in Mb/sec) that your MCC node is pushing out at specific time intervals
+
+### Volume by Content Type
+
+- The volume of content that your MCCE cache node is distributing, broken down by the hostname used to download said content
+
+## Additional metrics
+
+### Custom metrics
+
+- Navigate to the "Metrics" tab in the left-hand toolbar
+- Configure chart as desired using the provided metrics
+
+<!-- ### Windows Update for Business (WUfB) reports -->
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index a53dc8e4a8..038c969635 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -1,6 +1,6 @@
 ---
-title: Requirements for MCC for Enterprise and Education
-description: Overview of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
+title: MCCE prerequisites
+description: Details of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -67,7 +67,7 @@ This article details the requirements and recommendations for using Microsoft Co
 ### Host machine sizing recommendations
 
 | Component  | Branch Office / Small Enterprise | Large Enterprise |
-| -- | --- | --- |
+| --- | --- | --- |
 | OS|  Windows Server 2022 <br> Windows 11 (Pro or Enterprise) | Same |
 |NIC | 1 Gbps | 5 Gbps |
 |Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index 531c39b882..67b4688ea2 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -1,6 +1,6 @@
 ---
-title: MCC for Enterprise early preview
-description: Microsoft Connected Cache for Enterprise early preview.
+title: MCCE early preview
+description: Details on Microsoft Connected Cache for Enterprise (MCCE) early preview.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 22407de869..2be902abfa 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -1,6 +1,6 @@
 ---
-title: MCC for Enterprise and Education Release Notes
-description: Release Notes for Microsoft Connected Cache (MCC) for Enterprise and Education.
+title: MCCE Release Notes
+description: Release Notes for Microsoft Connected Cache for Enterprise and Education (MCCE).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index 8b405f6c51..c5cf9b63d6 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -1,19 +1,17 @@
 ---
-title: MCC for Enterprise support and troubleshooting
-description: Microsoft Connected Cache for Enterprise. Learn about support and troubleshooting
+title: MCCE support and troubleshooting
+description: Details on how to troubleshoot and seek support for Microsoft Connected Cache for Enterprise (MCCE).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
-manager: aaroncz
+manager: naengler
 ms.author: nidos
 author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
+ms.date: 09/27/2024
 ---
 
 <!--
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
index 69eb8b733b..70ca441c4f 100644
--- a/windows/deployment/do/mcc-ent-uninstall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -1,5 +1,5 @@
 ---
-title: Uninstall MCC for Enterprise and Education
+title: Uninstall MCCE cache nodes
 description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) from a host machine.
 ms.service: windows-client
 ms.subservice: itpro-updates
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 8ffa3c50c7..8e47945b16 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -1,55 +1,55 @@
 ---
-title: Uninstall MCC for Enterprise and Education
-description: Details on how to uninstall Microsoft Connected Cache (MCC) for Enterprise and Education for your environment.
+title: Update MCCE cache nodes
+description: Details on how Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes are updated by Microsoft.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
+ms.author: andyriv
+author: chrisjlin
+manager: naengler
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 05/23/2024
+ms.date: 09/27/2024
 ---
+# Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCCE)
 
-<!-- Customers will no longer update the private preview and instead install public preview
-# Update or uninstall Microsoft Connected Cache for Enterprise and Education
+Microsoft Connected Cache for Enterprise and Education (MCCE) caching software requires periodic updates to maintain security, performance, and reliability. Microsoft silently deploys MCCE updates to your cache nodes based on the Update Ring setting you configure for each cache node.
 
-Throughout the preview phase, we'll send you security and feature updates for MCC. Follow these steps to perform the update.
+## Update rings
 
-## Update MCC
+MCCE cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node will be silently updated by Microsoft within 5 weeks of the update becoming available.
 
-Run the following command with the **arguments** we provided in the email to update your MCC:
+In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCCE update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCCE update has been applied. This builds confidence that service will not be interrupted when the production cache nodes are updated as part of the Slow ring.
 
-```powershell
-# .\updatemcc.ps1 version="**\<VERSION\>**" tenantid="**\<TENANTID\>**" customerid="**\<CUSTOMERID\>**" cachenodeid="**\<CACHENODEID\>**" customerkey="**\<CUSTOMERKEY\>**"
-```
+### Update ring options
 
-For example:
+#### Fast Ring
+All MCCE cache nodes are configured to update as part of the Fast ring by default. MCCE cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
-```powershell
-# .\updatemcc.ps1 version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.659" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99a"
-```
--->
-# Uninstall MCC
+#### Slow Ring
+Configuring a MCCE cache node to update as part of the Slow ring provides users with the option to delay MCCE software updates until the update can be validated. There are three settings that will control when MCCE updates will be applied to MCCE cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
 
-Contact the MCC Team before uninstalling to let us know if you're facing issues.
+| Setting | Description |
+| --- | --- |
+| Week of the month | 1st to 4th week can be selected. There are three to four months in a year that could have a 5th week. In the event that there is a 5th week, the update could be applied during that 5th week if the day of the week falls near the last day of the month.|
+| Day of the week | Monday through Sunday can be selected. |
+| Time of day | Time of day is based on UTC and a 24 hour clock. |
 
-This script removes the following items:
+## Update process
 
-1. EFLOW + Linux VM
-1. IoT Edge
-1. Edge Agent
-1. Edge Hub
-1. MCC
-1. Moby CLI
-1. Moby Engine
+When Microsoft publishes an MCCE update, the MCCE service attempts to update all MCCE cache nodes based on their Update Ring membership. If a cache node cannot complete the silent MCCE update within 6 hours of starting, an error message is surfaced in the Azure portal.
 
-To delete MCC, go to Control Panel \> Uninstall a program \> Select Azure IoT
-Edge LTS \> Uninstall
+## Update terminology, criteria, and SLA
+
+Microsoft Connected Cache is a container and the container OS and any software component within the container will need to be updated for security vulnerabilities or quality issues, or performance improvements required to successfully operate the caching software.
+
+Microsoft Connected cache updates will not be shipped on a set cadence but will rather release updates periodically based on the need.
+
+| Update type | Criteria and SLA |
+| --- | --- |
+| Security | Security updates are the highest priority and will be released based on the severity rating of the vulnerability. [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 60 days of discovery. [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 120 days |
+| Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates will be released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
+
+For information on all released Microsoft Connected Cache updates see the [MCCE release notes](mcc-ent-release-notes.md).
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index d782443c2e..7ef5d63115 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Verify cache node functionality
-description: How to verify functionality of a Microsoft Connected Cache for Enterprise and Education cache node.
+title: Verify MCCE cache node functionality
+description: Details on how to verify functionality of Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -42,5 +42,5 @@ These steps should be taken after deploying MCCE caching software to a [Windows]
 
 ## Related content
 
-- [Monitor cache node usage](mcc-enterprise-monitoring.md)
-- [Troubleshoot cache node](mcc-enterprise-support-troubleshoot.md)
\ No newline at end of file
+- [Monitor cache node usage](mcc-ent-monitoring.md)
+- [Troubleshoot cache node](mcc-ent-support-and-troubleshooting.md)
\ No newline at end of file

From dda3cc20468d052fb621f5124f59e60822fba058 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Mon, 30 Sep 2024 11:24:44 -0700
Subject: [PATCH 028/128] Changes to updates, acrolinx changes

---
 windows/deployment/do/mcc-ent-monitoring.md    | 10 +++++-----
 .../deployment/do/mcc-ent-update-cache-node.md | 18 +++++++++---------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index c5028f5f26..16d67271c0 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -28,11 +28,11 @@ The Cache Node Summary box on your Azure portal
 
 | Metric | Description |
 | --- | --- |
-| Healthy nodes | The MCCE service will periodically request heartbeat messages from your MCC node to determine if it is functioning as expected. |
-| Unhealthy nodes | If the cache node does not respond, it will be labeled as unhealthy. |
-| Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic is not dependent on the time filter near the charts. |
+| Healthy nodes | The MCCE service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
+| Unhealthy nodes | If the cache node doesn't respond, it is labeled as unhealthy. |
+| Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic isn't dependent on the time filter near the charts. |
 | Max out | The minimum egress (in Mb/sec.) that your node has pushed out at any given time. |
-| Average in | The average ingress (in Mb/sec.) that your node has pulled in over its lifetime. This statistic is not dependent on the time filter near the charts. |
+| Average in | The average ingress (in Mb/sec.) that your node has pulled in over its lifetime. This statistic isn't dependent on the time filter near the charts. |
 | Average out | The average egress (in Mb/sec.) that your node has pushed out over its lifetime. |
 | Cache efficiency | The percentage of all requests that your MCC node receives that are ultimately delivered by your MCC node. An effective node is generally expected to have an efficiency >95%. |
 
@@ -40,7 +40,7 @@ The Cache Node Summary box on your Azure portal
 
 ### Filters
 
-- Will only filter the data shown in the 2 charts, scalable from 1 hour to 30 days
+- Will only filter the data shown in the two charts, scalable from 1 hour to 30 days
 - Can view data by individual cache nodes or the average of all your active MCC nodes.
 
 ### Outbound traffic
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 8e47945b16..b49b6c76d6 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -15,13 +15,15 @@ ms.date: 09/27/2024
 ---
 # Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCCE)
 
-Microsoft Connected Cache for Enterprise and Education (MCCE) caching software requires periodic updates to maintain security, performance, and reliability. Microsoft silently deploys MCCE updates to your cache nodes based on the Update Ring setting you configure for each cache node.
+Microsoft Connected Cache for Enterprise and Education (MCCE) caching software is deployed to host machines as a container. The container OS and any software component within the container will need to be updated for security vulnerabilities or quality issues, or performance improvements required to successfully operate the caching software. These Microsoft-published container updates are called "MCCE updates" in this article.
+
+Microsoft silently deploys MCCE updates to your cache nodes based on the Update Ring setting you configure for each cache node.
 
 ## Update rings
 
-MCCE cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node will be silently updated by Microsoft within 5 weeks of the update becoming available.
+MCCE cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
 
-In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCCE update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCCE update has been applied. This builds confidence that service will not be interrupted when the production cache nodes are updated as part of the Slow ring.
+In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCCE update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCCE update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
 
 ### Update ring options
 
@@ -29,23 +31,21 @@ In other words, configuring cache nodes to update as part of the Slow ring provi
 All MCCE cache nodes are configured to update as part of the Fast ring by default. MCCE cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
 #### Slow Ring
-Configuring a MCCE cache node to update as part of the Slow ring provides users with the option to delay MCCE software updates until the update can be validated. There are three settings that will control when MCCE updates will be applied to MCCE cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
+Configuring an MCCE cache node to update as part of the Slow ring provides users with the option to delay MCCE software updates until the update can be validated. There are three settings that control when MCCE updates will be applied to MCCE cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
 
 | Setting | Description |
 | --- | --- |
-| Week of the month | 1st to 4th week can be selected. There are three to four months in a year that could have a 5th week. In the event that there is a 5th week, the update could be applied during that 5th week if the day of the week falls near the last day of the month.|
+| Week of the month | 1st to 4th week can be selected. There are three to four months in a year that could have a 5th week. If there's a 5th week, the update could be applied during that 5th week if the day of the week falls near the last day of the month.|
 | Day of the week | Monday through Sunday can be selected. |
 | Time of day | Time of day is based on UTC and a 24 hour clock. |
 
 ## Update process
 
-When Microsoft publishes an MCCE update, the MCCE service attempts to update all MCCE cache nodes based on their Update Ring membership. If a cache node cannot complete the silent MCCE update within 6 hours of starting, an error message is surfaced in the Azure portal.
+When Microsoft publishes an MCCE update, the MCCE service attempts to update all MCCE cache nodes based on their Update Ring membership. If a cache node can't complete the silent MCCE update within 6 hours of starting, an error message is surfaced in the Azure portal.
 
 ## Update terminology, criteria, and SLA
 
-Microsoft Connected Cache is a container and the container OS and any software component within the container will need to be updated for security vulnerabilities or quality issues, or performance improvements required to successfully operate the caching software.
-
-Microsoft Connected cache updates will not be shipped on a set cadence but will rather release updates periodically based on the need.
+MCCE updates will be released based on need instead of on a set cadence.
 
 | Update type | Criteria and SLA |
 | --- | --- |

From 38df7f398472cb9d0cbf8a1c2580f705e87faf2e Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Mon, 30 Sep 2024 11:53:05 -0700
Subject: [PATCH 029/128] fixes broken links

---
 .../deployment/do/mcc-ent-deploy-to-linux.md  |   2 +-
 .../do/mcc-ent-deploy-to-windows.md           |   6 +-
 .../deployment/do/mcc-ent-prerequisites.md    |  12 +-
 .../deployment/do/mcc-ent-private-preview.md  | 103 ++----------------
 .../do/mcc-ent-support-and-troubleshooting.md |   2 +-
 5 files changed, 18 insertions(+), 107 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index bd3bdbfd47..09601b0e3e 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -17,7 +17,7 @@ appliesto:
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Linux host machine.
 
-Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
 ## Steps to deploy MCCE cache node to Linux
 
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 9bb3a65c10..7f6e4806b4 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -17,9 +17,9 @@ appliesto:
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
 
-Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/en-us/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
+Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
 
-Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-enterprise-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
 ## Steps to deploy MCCE cache node to Windows
 
@@ -28,7 +28,7 @@ Before deploying MCCE to a Windows host machine, ensure that the host machine me
 1. Open a PowerShell windows *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/en-us/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
 1. Run the provisioning command on the host machine.
 
 ## Next step
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 038c969635..2169c9bb24 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -27,8 +27,8 @@ This article details the requirements and recommendations for using Microsoft Co
 
 - **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCCE cache node.
 
-    - [Windows Enterprise E3 or E5](https://learn.microsoft.com/en-us/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/en-us/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
-    - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/en-us/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
+    - [Windows Enterprise E3 or E5](https://learn.microsoft.com/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
+    - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
 
 ## Cache node host machine requirements
 
@@ -37,7 +37,7 @@ This article details the requirements and recommendations for using Microsoft Co
 
 ### General requirements
 
-- Any previous installations of MCC must be [uninstalled](mcc-enterprise-update-uninstall.md) before installing the latest version of MCC.
+- Any previous installations of MCC must be [uninstalled](mcc-ent-uninstall-cache-node.md) before installing the latest version of MCC.
 - [These listed endpoints](delivery-optimization-endpoints.md) must be reachable by the host machine.
 - The host machine must have no other services / applications utilizing port 80 (for example, ConfigManager or Distribution Point).
 - The host machine must have at least 4 GB of free memory.
@@ -45,10 +45,10 @@ This article details the requirements and recommendations for using Microsoft Co
 ### Additional requirements for Windows host machines
 
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
-    - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/en-us/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
-    - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/en-us/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
+    - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
+    - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
 - The Windows host machine must support nested virtualization.
-- The Windows host machine must have [WSL2 installed](https://learn.microsoft.com/en-us/windows/wsl/install#install-wsl-command).
+- The Windows host machine must have [WSL2 installed](https://learn.microsoft.com/windows/wsl/install#install-wsl-command).
 
 ### Additional requirements for Linux host machines
 
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index 67b4688ea2..9422f8a3f2 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -3,113 +3,24 @@ title: MCCE early preview
 description: Details on Microsoft Connected Cache for Enterprise (MCCE) early preview.
 ms.service: windows-client
 ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
+ms.topic: conceptual
+manager: naengler
 ms.author: nidos
 author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
 appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
 ms.date: 06/03/2024
 ---
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the 
-main branch.
+# Microsoft Connected Cache for Enterprise and Education (MCCE) Private Preview
 
-This template provides the basic structure of a Overview article pattern. See the [instructions - Overview](../level4/article-overview.md) in the pattern library.
+If you participated in the MCCE Private Preview, thank you for your collaboration and feedback.
 
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
+If you would like to continue using MCCE, you will need to upgrade your cache nodes to the Public Preview release. Existing Private Preview cache nodes will continue to function but can no longer be managed or monitored remotely via the MCCE Azure service.
 
-Overview is an article pattern that covers two aspects of a product or service:
-
-* What is it?
-* What is it used for?
-
-An Overview article talks about the product or service from a technical point of view. It's not intended to define the benefits or value proposition. That just duplicates marketing.
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: This is the primary heading at the top of the article.
-
-Use the format "What is <service>?" 
-
-You can also use this in the TOC if your service name doesn’t cause the phrase to wrap.
-
--->
-
-# What is <product/service>? 
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
-
-Many services add artwork or videos below the Introduction.
-
--->
-
-[Introductory paragraph]
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info
-directly into the article text.
-
---->
-
-<!-- 3. H2s (Article body)------------------------------------------------------------ 
-
-Required: The article body should discuss the features that answer the "Why should I care?" question with a bit more depth.
-
-Give each H2 a heading that sets expectations for the content that follows. 
-Follow the H2 headings with a sentence about how the section contributes to the whole.
-Add images, code blocks, or other graphical elements after the information it illustrates.
-
-* Call out any basic requirements and dependencies.
-* Call out limitations or overhead.
-* Don't catalog every feature. Some might only need to be mentioned as available, without any discussion.
-* Give each H2 a heading that sets expectations for the content that follows.
-* Follow the H2 headings with a sentence about how the section contributes to the whole.
-* Images, code blocks, or other graphical elements come after the text block it illustrates.
-Don't number H2s.
-
--->
-
-## [Section 1 heading]
-TODO: add your content
-
-## [Section 2 heading]
-TODO: add your content
-
-## [Section n heading]
-TODO: add your content
-
-<!-- 4. Next step/Related content ------------------------------------------------------------------------ 
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
+As such, we strongly recommend you [recreate your Private Preview cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCCE caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You do not need to re-create your MCC Azure resource.
 
 ## Next step
 
-TODO: Add your next step link(s)
-
 > [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
+> [View documentation for MCCE Public Preview](mcc-ent-edu-overview.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index c5cf9b63d6..2f4b72d936 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -38,7 +38,7 @@ For example: "Migrate data from regular tables to ledger tables" or "Create a ne
 
 -->
 
-# "<verb> * <noun>"
+# "verb * noun"
 TODO: Add your heading
 
 <!-- 2. Introductory paragraph ----------------------------------------------------------

From 7afd1e791fc39b4252262c5e4f64a0ad6bd3d6f2 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Mon, 30 Sep 2024 16:59:39 -0700
Subject: [PATCH 030/128] fixed acrolinx

---
 windows/deployment/do/mcc-ent-private-preview.md | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index 9422f8a3f2..4ce04692bd 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -1,12 +1,12 @@
 ---
-title: MCCE early preview
-description: Details on Microsoft Connected Cache for Enterprise (MCCE) early preview.
+title: MCCE Private Preview
+description: Details on Microsoft Connected Cache for Enterprise (MCCE) Private Preview
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
 manager: naengler
-ms.author: nidos
-author: doshnid
+ms.author: lichris
+author: chrisjlin
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
 ms.date: 06/03/2024
@@ -14,11 +14,11 @@ ms.date: 06/03/2024
 
 # Microsoft Connected Cache for Enterprise and Education (MCCE) Private Preview
 
-If you participated in the MCCE Private Preview, thank you for your collaboration and feedback.
+If you participated in the MCCE early preview, thank you for your collaboration and feedback.
 
-If you would like to continue using MCCE, you will need to upgrade your cache nodes to the Public Preview release. Existing Private Preview cache nodes will continue to function but can no longer be managed or monitored remotely via the MCCE Azure service.
+To continue using MCCE, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCCE Azure service.
 
-As such, we strongly recommend you [recreate your Private Preview cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCCE caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You do not need to re-create your MCC Azure resource.
+As such, we strongly recommend you [recreate your existing cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCCE caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You don't need to re-create your MCC Azure resource.
 
 ## Next step
 

From 10ecdf7e9e4c450d41d0cc117cdc8ca17b6423f0 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Mon, 30 Sep 2024 18:03:49 -0700
Subject: [PATCH 031/128] so many link fixes

---
 windows/deployment/do/TOC.yml                      | 10 +++++-----
 windows/deployment/do/mcc-ent-prerequisites.md     |  3 ---
 windows/deployment/do/mcc-ent-verify-cache-node.md |  4 ++--
 3 files changed, 7 insertions(+), 10 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 560f759c03..0f9b776ed3 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -46,19 +46,19 @@
         - name: Configure, provision and deploy cache node
           items:
           - name: Deploy MCC to Linux
-            href: mcc-ent-deploy-linux.md
+            href: mcc-ent-deploy-to-linux.md
           - name: Deploy MCC to Windows
-            href: mcc-ent-deploy-windows.md
+            href: mcc-ent-deploy-to-windows.md
         - name: Using CLI to create and manage cache nodes
           href: mcc-ent-manage-cache-using-CLI.md 
         - name: Verify cache node functionality
           href: mcc-ent-verify-cache-node.md
         - name: Monitor cache node
-          href: mcc-ent-monitor-cache.md
+          href: mcc-ent-monitoring.md
         - name: Update MCC
-          href: mcc-ent-update-cache.md 
+          href: mcc-ent-update-cache-node.md 
         - name: Uninstall cache node
-          href: mcc-ent-uninstall.md     
+          href: mcc-ent-uninstall-cache-node.md     
       - name: Resources
         items:
         - name: Frequent Asked Questions
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 2169c9bb24..9cfe7c3246 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -32,9 +32,6 @@ This article details the requirements and recommendations for using Microsoft Co
 
 ## Cache node host machine requirements
 
-   > [!NOTE]
-   > If you'd like to install your cache node on VMWare, see the [Appendix](mcc-enterprise-appendix.md) for a few additional configurations.
-
 ### General requirements
 
 - Any previous installations of MCC must be [uninstalled](mcc-ent-uninstall-cache-node.md) before installing the latest version of MCC.
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 7ef5d63115..32cd0edc45 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -18,7 +18,7 @@ appliesto:
 
 This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCCE) cache node is functioning correctly.
 
-These steps should be taken after deploying MCCE caching software to a [Windows](mcc-enterprise-deploy-windows.md) or [Linux](mcc-enterprise-deploy-linux.md) host machine.
+These steps should be taken after deploying MCCE caching software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
 
 ## Steps to verify functionality of MCCE cache node
 
@@ -36,7 +36,7 @@ These steps should be taken after deploying MCCE caching software to a [Windows]
 
     If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
 
-1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/en-us/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From 61a6d006dbe68e19283be70685498f6da30bf6f1 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Mon, 30 Sep 2024 18:37:07 -0700
Subject: [PATCH 032/128] added release notes and troubleshoot content

---
 .../deployment/do/mcc-ent-release-notes.md    | 163 +++---------------
 .../do/mcc-ent-support-and-troubleshooting.md |  75 ++------
 2 files changed, 35 insertions(+), 203 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 2be902abfa..c4b588f9ca 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -4,158 +4,37 @@ description: Release Notes for Microsoft Connected Cache for Enterprise and Educ
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
-ms.author: nidos
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection: tier3
+ms.author: lichris
+author: chrisjlin
+manager: naengler
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 09/04/2024
+ms.date: 09/27/2024
 ---
 
-<!--
-Remove all the comments in this template before you sign-off or merge to the  main branch.
+# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCCE)
 
-This template provides the basic structure of a Concept article pattern. See the [instructions - Concept](../level4/article-concept.md) in the pattern library.
+This article contains details about the latest releases of MCCE. Since MCCE is a Preview service, some releases may contain breaking changes that will be highlighted as such.
 
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
+## Release v0.1.0 (Public Preview launch)
 
-Concept is an article pattern that defines what something is or explains an abstract idea.
+- Released on **10/17/2024**
+- Contains breaking changes
+- Contains service changes
+- Contains client changes
+- Affects Linux, Windows host machines
 
-There are several situations that might call for writing a Concept article, including:
+### Changenotes
 
-* If there's a new idea that's central to a service or product, that idea must be explained so that customers understand the value of the service or product as it relates to their circumstances. A good recent example is the concept of containerization or the concept of scalability.
-* If there's optional information or explanations that are common to several Tutorials or How-to guides, this information can be consolidated and single-sourced in a full-bodied Concept article for you to reference.
-* If a service or product is extensible, advanced users might modify it to better suit their application. It's better that advanced users fully understand the reasoning behind the design choices and everything else "under the hood" so that their variants are more robust, thereby improving their experience.
-
--->
-
-<!-- 1. H1
------------------------------------------------------------------------------
-
-Required. Set expectations for what the content covers, so customers know the content meets their needs. The H1 should NOT begin with a verb.
-
-Reflect the concept that undergirds an action, not the action itself. The H1 must start with:
-
-* "\<noun phrase\> concept(s)", or
-* "What is \<noun\>?", or
-* "\<noun\> overview"
-
-Concept articles are primarily distinguished by what they aren't:
-
-* They aren't procedural articles. They don't show how to complete a task.
-* They don't have specific end states, other than conveying an underlying idea, and don't have concrete, sequential actions for the user to take.
-
-One clear sign of a procedural article would be the use of a numbered list. With rare exception, numbered lists shouldn't appear in Concept articles.
-
--->
-
-# [\<noun phrase\> concept(s)]
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph
-----------------------------------------------------------
-
-Required. Lead with a light intro that describes what the article covers. Answer the fundamental “why would I want to know this?” question. Keep it short.
-
-* Answer the fundamental "Why do I want this knowledge?" question.
-* Don't start the article with a bunch of notes or caveats.
-* Don’t link away from the article in the introduction.
-* For definitive concepts, it's better to lead with a sentence in the form, "X is a (type of) Y that does Z."
-
--->
-
-[Introductory paragraph]
-TODO: Add your introductory paragraph
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Optional: Make **Prerequisites** your first H2 in the article. Use clear and unambiguous
-language and use a unordered list format. 
-
--->
-
-## Prerequisites
-TODO: [List the prerequisites if appropriate]
-
-<!-- 4. H2s (Article body)
---------------------------------------------------------------------
-
-Required: In a series of H2 sections, the article body should discuss the ideas that explain how "X is a (type of) Y that does Z":
-
-* Give each H2 a heading that sets expectations for the content that follows.
-* Follow the H2 headings with a sentence about how the section contributes to the whole.
-* Describe the concept's critical features in the context of defining what it is.
-* Provide an example of how it's used where, how it fits into the context, or what it does. If it's complex and new to the user, show at least two examples.
-* Provide a non-example if contrasting it will make it clearer to the user what the concept is.
-* Images, code blocks, or other graphical elements come after the text block it illustrates.
-* Don't number H2s.
-
--->
-
-## [Section 1 heading]
-TODO: add your content
-
-## [Section 2 heading]
-TODO: add your content
-
-## [Section n heading]
-TODO: add your content
-
-<!-- 5. Next step/Related content ------------------------------------------------------------------------ 
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
+- Added new "Outbound egress" and "Volume by Content type" monitoring charts to Azure portal user interface
+- Added ability to create custom monitoring charts under the Metrics tab in the Azure portal user interface
+- Added support for creating both Windows-hosted and Linux-hosted cache nodes under the same MCC Azure resource
+- Added Azure CLI support for programmatic creation and management of MCC Azure resources and cache nodes
+- Added support for unauthenticated proxy and cloud proxy integration
+- Added ability to set each cache node's Update Ring to govern cadence of MCCE container updates
 
 ## Related content
 
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
-
-<!-- 6. Next step/Related content ------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related
-content. You don't have to use either, but don't use both. For Next step, provide one link to the
-next step in a sequence. Use the blue box format For Related content provide 1-3 links. Include some
-context so the customer can determine why they would click the link. Add a context sentence for the
-following links.
-
--->
-
-## Next step
-TODO: Add your next step link(s)
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-TODO: Add your next step link(s)
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the 
-main branch.
-
--->
+- [Overview of MCCE](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index 2f4b72d936..83c3b59054 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -5,8 +5,8 @@ ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
 manager: naengler
-ms.author: nidos
-author: doshnid
+ms.author: lichris
+author: chrisjlin
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
@@ -38,8 +38,7 @@ For example: "Migrate data from regular tables to ledger tables" or "Create a ne
 
 -->
 
-# "verb * noun"
-TODO: Add your heading
+# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCCE)
 
 <!-- 2. Introductory paragraph ----------------------------------------------------------
 
@@ -55,65 +54,35 @@ Example: In this article, you will migrate your user databases from IBM Db2 to S
 
 -->
 
-TODO: Add your introductory paragraph
+This article contains instructions on how to troubleshoot different issues you may encounter while using MCCE. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache).
 
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
+## Troubleshooting Azure resource creation
 
--->
+MCC Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
 
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
+## Troubleshooting cache node creation
 TODO: Add introduction sentence(s)
 [Include a sentence or two to explain only what is needed to complete the procedure.]
 TODO: Add ordered list of procedure steps
+
 1. Step 1
 1. Step 2
 1. Step 3
 
-## "\<verb\> * \<noun\>"
+## Troubleshooting cache node deployment
 TODO: Add introduction sentence(s)
 [Include a sentence or two to explain only what is needed to complete the procedure.]
 TODO: Add ordered list of procedure steps
+
 1. Step 1
 1. Step 2
 1. Step 3
 
-## "\<verb\> * \<noun\>"
+## Troubleshooting cache node monitoring
 TODO: Add introduction sentence(s)
 [Include a sentence or two to explain only what is needed to complete the procedure.]
 TODO: Add ordered list of procedure steps
+
 1. Step 1
 1. Step 2
 1. Step 3
@@ -126,22 +95,6 @@ Optional: You have two options for manually curated links in this pattern: Next
 
 -->
 
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
+## Filing a support request
 
+TODO: Add steps for filling out a CSS ticket.

From 68652351a11fd09bb2fb30aa50518ab52fe49eed Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Tue, 1 Oct 2024 09:41:07 -0700
Subject: [PATCH 033/128] fixing broken link

---
 windows/deployment/do/mcc-ent-support-and-troubleshooting.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index 83c3b59054..c7bae542e2 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -54,7 +54,7 @@ Example: In this article, you will migrate your user databases from IBM Db2 to S
 
 -->
 
-This article contains instructions on how to troubleshoot different issues you may encounter while using MCCE. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache).
+This article contains instructions on how to troubleshoot different issues you may encounter while using MCCE. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
 
 ## Troubleshooting Azure resource creation
 

From 0b1933df2b319c2fd35b9c29b69327773a3b672f Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Tue, 1 Oct 2024 15:19:55 -0700
Subject: [PATCH 034/128] fix to rel link

---
 windows/deployment/do/mcc-ent-deploy-to-windows.md | 4 ++--
 windows/deployment/do/mcc-ent-prerequisites.md     | 4 ++--
 windows/deployment/do/mcc-ent-verify-cache-node.md | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 7f6e4806b4..f5dae91aaf 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -17,7 +17,7 @@ appliesto:
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
 
-Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
+Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
 
 Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
@@ -28,7 +28,7 @@ Before deploying MCCE to a Windows host machine, ensure that the host machine me
 1. Open a PowerShell windows *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 1. Run the provisioning command on the host machine.
 
 ## Next step
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 9cfe7c3246..348b53caec 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -27,7 +27,7 @@ This article details the requirements and recommendations for using Microsoft Co
 
 - **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCCE cache node.
 
-    - [Windows Enterprise E3 or E5](https://learn.microsoft.com/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
+    - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
 
 ## Cache node host machine requirements
@@ -45,7 +45,7 @@ This article details the requirements and recommendations for using Microsoft Co
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
 - The Windows host machine must support nested virtualization.
-- The Windows host machine must have [WSL2 installed](https://learn.microsoft.com/windows/wsl/install#install-wsl-command).
+- The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
 
 ### Additional requirements for Linux host machines
 
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 32cd0edc45..c1328850c0 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -36,7 +36,7 @@ These steps should be taken after deploying MCCE caching software to a [Windows]
 
     If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
 
-1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From 441b9e925f1b7d901ae3940eed30793404b8b03c Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Tue, 1 Oct 2024 16:05:39 -0700
Subject: [PATCH 035/128] reset head, fix link

---
 windows/deployment/do/mcc-ent-deploy-to-windows.md | 4 ++--
 windows/deployment/do/mcc-ent-prerequisites.md     | 4 ++--
 windows/deployment/do/mcc-ent-verify-cache-node.md | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 7f6e4806b4..f5dae91aaf 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -17,7 +17,7 @@ appliesto:
 
 This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
 
-Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](https://learn.microsoft.com/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
+Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
 
 Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
 
@@ -28,7 +28,7 @@ Before deploying MCCE to a Windows host machine, ensure that the host machine me
 1. Open a PowerShell windows *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 1. Run the provisioning command on the host machine.
 
 ## Next step
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 9cfe7c3246..348b53caec 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -27,7 +27,7 @@ This article details the requirements and recommendations for using Microsoft Co
 
 - **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCCE cache node.
 
-    - [Windows Enterprise E3 or E5](https://learn.microsoft.com/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
+    - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
 
 ## Cache node host machine requirements
@@ -45,7 +45,7 @@ This article details the requirements and recommendations for using Microsoft Co
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
 - The Windows host machine must support nested virtualization.
-- The Windows host machine must have [WSL2 installed](https://learn.microsoft.com/windows/wsl/install#install-wsl-command).
+- The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
 
 ### Additional requirements for Linux host machines
 
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 32cd0edc45..c1328850c0 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -36,7 +36,7 @@ These steps should be taken after deploying MCCE caching software to a [Windows]
 
     If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
 
-1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](https://learn.microsoft.com/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From baf2c9c48928a81a8ab45348fef477ff88aa8ee6 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 2 Oct 2024 15:19:48 -0700
Subject: [PATCH 036/128] add cli to deploy, add script to cli

---
 .../deployment/do/mcc-ent-deploy-to-linux.md  |  20 ++++
 .../do/mcc-ent-deploy-to-windows.md           |  26 ++++-
 .../do/mcc-ent-manage-cache-using-CLI.md      | 106 +++++++-----------
 3 files changed, 82 insertions(+), 70 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 09601b0e3e..94123f7d51 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -21,12 +21,32 @@ Before deploying MCCE to a Linux host machine, ensure that the host machine meet
 
 ## Steps to deploy MCCE cache node to Linux
 
+# [Azure portal](#tab/portal)
+
 1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
 1. Run the provisioning command on the host machine.
 
+# [Azure CLI](#tab/cli)
+
+To deploy a cache node programmatically, you'll need to use Azure CLI to get the cache node's provisioning details and then run the provisioning command on the host machine.
+
+1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`
+    ```azurecli-interactive
+    az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+    ```
+1. Save the resulting output. These values will be passed as parameters within the provisioning command.
+1. Download and extract the [MCCE provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
+1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
+1. Replace the values in the following provisioning command before running it on the host machine.
+
+```azurepowershell-interactive
+sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
+```
+
 ## Next step
 
 > [!div class="nextstepaction"]
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 7f6e4806b4..2af5db8c44 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -23,21 +23,41 @@ Before deploying MCCE to a Windows host machine, ensure that the host machine me
 
 ## Steps to deploy MCCE cache node to Windows
 
+# [Azure portal](#tab/portal)
+
 1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
-1. Open a PowerShell windows *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
     - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
 1. Run the provisioning command on the host machine.
 
+# [Azure CLI](#tab/cli)
+
+To deploy a cache node programmatically, you'll need to use Azure CLI to get the cache node's provisioning details and then run the provisioning command on the host machine.
+
+1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`
+    ```azurecli-interactive
+    az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+    ```
+1. Save the resulting output. These values will be passed as parameters within the provisioning command.
+1. Download and extract the [MCCE provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
+1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
+1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the MCC runtime account.
+
+```powershell-interactive
+./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
+```
+
 ## Next step
 
 > [!div class="nextstepaction"]
 > [Verify cache node functionality](mcc-ent-verify-cache-node.md)
 
-<!-- OR -->
-
 ## Related content
 
 - [Deploy to a Linux host machine](mcc-ent-deploy-to-linux.md)
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 1f28f0bdbf..da312715ed 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -136,79 +136,51 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 
 Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
 
-### 7. Deploy cache node
-<br>
+### Example script:
+Below is a pseudocode example of how to script bulk creation and configuration of an MCC Azure resource and five MCC cache nodes.
 
-#### Deploy cache node to Linux host machine
-Before you deploy your cache node to a Linux host machine, make sure you have met the prerequisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
+<!--# [Bash](#tab/bash)
 
-Use the following link to download and extract the Linux-compatible MCCE provisioning package onto the host machine.
+:::code language="azurecli" source="~/azure_cli_scripts/azure-cli/create-azure-resources-at-scale/bash/create-azure-resources-at-scale.sh" id="step4":::
 
-[Download MCCE provisioning package for Linux host machine](https://aka.ms/MCC-Ent-InstallScript-Linux)
+In your console output, are you missing the last row in your CSV file?  This can be caused by a missing line continuation character after the last line. Add a blank line at the end of your CSV file to fix the issue.
 
-<br>
+# [PowerShell](#tab/powershell)
 
->[!IMPORTANT]
->Before you execute the provisioning command, make sure you change directory to the extracted provisioning package and set the script execution permissions by running the command below.
-```azurepowershell-interactive
-sudo chmod +x provisionmcc.sh
+:::code language="azurecli" source="~/azure_cli_scripts/azure-cli/create-azure-resources-at-scale/powershell/create-azure-resources-at-scale.ps1" id="step4":::
+
+-->
+
+# [PowerShell](#tab/powershell)
+
+```powershell
+#Define variables
+$mccResourceName = "demo-01"
+$cacheNodeName = "demo-node"
+$cacheNodeOperatingSystem = "Windows"
+$resourceGroup = "myRG"
+$resourceLocation = "westus"
+$cacheNodesToCreate = 5
+$proxyHost = "yourProxyHost.com"
+$proxyPort = "8080"
+
+#Create MCC Azure resource
+az mcc ent resource create --mcc-resource-name $mccResourceName --location $resourceLocation --resource-group $resourceGroup
+
+#Create 5 cache nodes
+for ($cacheNodeNumber = 1; $cacheNodeNumber -le $cacheNodesToCreate; $cacheNodeNumber++) {
+    $iteratedCacheNodeName = $cacheNodeName + "-" + $cacheNodeNumber
+    
+    #Create cache node
+    az mcc ent node create --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --host-os $cacheNodeOperatingSystem --resource-group $resourceGroup
+
+    #Configure cache node
+    az mcc ent node update --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --cache-drive  "[{physical-path:/var/mcc,size-in-gb:50}]" --proxy enabled --proxy-host $proxyHost --proxy-port $proxyPort
+}
 ```
 
-Replace the values in the following provisioning command before running it.<br>
-
-```azurepowershell-interactive
-sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="true" proxyurl=http://enter proxy hostname:enter port
-```
-<br>
-
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
-#### Deploy cache node to Windows host machine
-
-Before you deploy your cache node to a Windows host machine, make sure you have met the prerequisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
-
-Use the following link to download and extract the Windows-compatible MCCE provisioning package onto the host machine.
-[Download MCCE provisioning package for Windows host machine](https://aka.ms/MCC-Ent-InstallScript-WSL)
-<br>
-
->[!IMPORTANT]
->Before you execute the provisioning command, make sure you change directory to the extracted provisioning package and set the script execution permissions by running the command below.
-```azurepowershell-interactive
-Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-```
-
-If you're using a **Group Managed Service Account**, replace the values in the following provisioning command before running it.<br>
-
-```powershell-interactive
-./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User
-```
-
-<br>
-
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
-If you're using **Local User account** or **Domain User account**, replace the values in the following provisioning command before running it.<br>
-
-```powershell-interactive
-./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
-```
-
-<br>
-
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
-
 ## Next step
 
-To verify cache node functionality, see [Verify cache node functionality](mcc-ent-verify-cache-node.md)
-
-
-<br>
-<br>
-
-### Sample script:
-Below is a pseudo code that shows how the above can be scripted for bulk creation and configuration of cache node.
-
+> [!div class="nextstepaction"]
+> [Deploy cache node to Linux host machine](mcc-ent-deploy-to-Linux.md)
+> [Deploy cache node to Windows host machine](mcc-ent-deploy-to-Windows.md)

From 0688a615b0de6df18f3da58082d1538d3aa403a8 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 2 Oct 2024 15:34:36 -0700
Subject: [PATCH 037/128] removing "mcce"

---
 .../do/mcc-ent-configure-provision-linux.md   | 149 ------------------
 .../do/mcc-ent-configure-provision-windows.md | 149 ------------------
 .../do/mcc-ent-create-resource-and-cache.md   |  18 +--
 .../deployment/do/mcc-ent-deploy-to-linux.md  |  16 +-
 .../do/mcc-ent-deploy-to-windows.md           |  22 +--
 windows/deployment/do/mcc-ent-edu-overview.md |   4 +-
 windows/deployment/do/mcc-ent-faq.yml         |   4 +-
 .../do/mcc-ent-manage-cache-using-CLI.md      |  12 +-
 windows/deployment/do/mcc-ent-monitoring.md   |  12 +-
 .../deployment/do/mcc-ent-prerequisites.md    |  12 +-
 .../deployment/do/mcc-ent-private-preview.md  |  14 +-
 .../deployment/do/mcc-ent-release-notes.md    |  12 +-
 .../do/mcc-ent-support-and-troubleshooting.md |   8 +-
 .../do/mcc-ent-uninstall-cache-node.md        |  14 +-
 .../do/mcc-ent-update-cache-node.md           |  24 +--
 .../do/mcc-ent-verify-cache-node.md           |  24 +--
 16 files changed, 98 insertions(+), 396 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-linux.md
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-windows.md

diff --git a/windows/deployment/do/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
deleted file mode 100644
index 3c39a7af8f..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-linux.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise provision Linux cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to provision Linux cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
deleted file mode 100644
index d2ea4921a2..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-windows.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise provision Windows cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to provision Windows cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
- 
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index fd199751a9..832412b8a6 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -1,6 +1,6 @@
 ---
-title: Create and configure MCCE cache nodes
-description: Details on how to create and configure Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes.
+title: Create and configure MCC cache nodes
+description: Details on how to create and configure Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -14,16 +14,16 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-# Create MCCE Azure resource and cache nodes
+# Create Microsoft Connected Cache Azure resource and cache nodes
 
-This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
+This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
 
 ## Prerequisites
 1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a free-of-charge service hosted in Azure. You'll need a pay-as-you-go Azure subscription in order to onboard to our service. To create a subscription, go to [pay-as-you-go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
 2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-For more information on sizing and OS requirements, see [the prerequisites for using MCCE](mcc-ent-prerequisites.md).
+For more information on sizing and OS requirements, see [the prerequisites for using MCC](mcc-ent-prerequisites.md).
 
-## Create MCCE Azure resource
+## Create MCC Azure resource
 
 # [Azure portal](#tab/portal)
 
@@ -59,7 +59,7 @@ For more information on sizing and OS requirements, see [the prerequisites for u
 
     * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
 
-#### Create MCCE Azure resource
+#### Create MCC Azure resource
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
@@ -71,7 +71,7 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 
 ---
 
-## Create MCCE cache node
+## Create MCC cache node
 
 # [Azure portal](#tab/portal)
 
@@ -121,7 +121,7 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 
 ---
 
-## Configure MCCE cache node
+## Configure MCC cache node
 
 # [Azure portal](#tab/portal)
 Enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 94123f7d51..3d6b8d06f7 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -1,6 +1,6 @@
 ---
-title: Deploy MCCE cache software to a Linux host machine
-description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) cache software to a Linux host machine.
+title: Deploy MCC cache software to a Linux host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) cache software to a Linux host machine.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -13,13 +13,13 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Deploy MCCE cache node to a Linux host machine
+# Deploy Microsoft Connected Cache caching software to a Linux host machine
 
-This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Linux host machine.
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) caching software to a Linux host machine.
 
-Before deploying MCCE to a Linux host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+Before deploying MCC to a Linux host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource and cache node](mcc-ent-create-resource-and-cache.md).
 
-## Steps to deploy MCCE cache node to Linux
+## Steps to deploy MCC cache node to Linux
 
 # [Azure portal](#tab/portal)
 
@@ -38,7 +38,7 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
     az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
     ```
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
-1. Download and extract the [MCCE provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
+1. Download and extract the [MCC provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
 1. Replace the values in the following provisioning command before running it on the host machine.
@@ -55,4 +55,4 @@ sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter
 ## Related content
 
 - [Deploy to a Windows host machine](mcc-ent-deploy-to-windows.md)
-- [Uninstall MCCE](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
+- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 2db500c760..ddbc940eb7 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -1,6 +1,6 @@
 ---
-title: Deploy MCCE cache software to a Windows host machine
-description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) cache software to a Windows host machine.
+title: Deploy MCC cache software to a Windows host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) cache software to a Windows host machine.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -13,15 +13,15 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Deploy MCCE cache node to a Windows host machine
+# Deploy Microsoft Connected Cache caching software to a Windows host machine
 
-This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCCE) caching software to a Windows host machine.
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) caching software to a Windows host machine.
 
-Deploying MCCE to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCCE runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
+Deploying MCC to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCC runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
 
-Before deploying MCCE to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](https://aka.ms/mccent-create-resources).
+Before deploying MCC to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](mcc-ent-create-resource-and-cache.md).
 
-## Steps to deploy MCCE cache node to Windows
+## Steps to deploy MCC cache node to Windows
 
 # [Azure portal](#tab/portal)
 
@@ -30,7 +30,7 @@ Before deploying MCCE to a Windows host machine, ensure that the host machine me
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 1. Run the provisioning command on the host machine.
 
 # [Azure CLI](#tab/cli)
@@ -42,11 +42,11 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
     az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
     ```
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
-1. Download and extract the [MCCE provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
+1. Download and extract the [MCC provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCCE runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
 1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the MCC runtime account.
 
 ```powershell-interactive
@@ -61,4 +61,4 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 ## Related content
 
 - [Deploy to a Linux host machine](mcc-ent-deploy-to-linux.md)
-- [Uninstall MCCE](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
+- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 0060028e14..a1077b1d53 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -1,6 +1,6 @@
 ---
-title: MCCE Overview
-description: Overview, supported scenarios, and content types for Microsoft Connected Cache for Enterprise and Education (MCCE).
+title: MCC Overview
+description: Overview, supported scenarios, and content types for Microsoft Connected Cache for Enterprise and Education (MCC).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 2d84c64a34..aeb5480a0f 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -1,7 +1,7 @@
 ### YamlMime:FAQ
 metadata:
-  title: MCCE Frequently Asked Questions
-  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise (MCCE).
+  title: MCC Frequently Asked Questions
+  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise (MCC).
   ms.service: windows-client
   ms.subservice: itpro-updates
   ms.topic: faq
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index da312715ed..595083be44 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -1,6 +1,6 @@
 ---
-title: Manage MCCE cache nodes using CLI
-description: Details on how to manage Microsoft Connected Cache for Enterprise (MCCE) cache nodes via Azure CLI commands.
+title: Manage MCC cache nodes using CLI
+description: Details on how to manage Microsoft Connected Cache for Enterprise (MCC) cache nodes via Azure CLI commands.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -20,7 +20,7 @@ ms.date: 06/03/2024
 
 <br>
 
-This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCCE) cache nodes using Azure CLI.
+This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCC) cache nodes using Azure CLI.
 
  
 ## Prerequisites:
@@ -44,10 +44,10 @@ az group create --name myrg --location westus
 Once the resource group is created, you'll need to create a Microsoft Connected Cache for Enterprise resource.
 
 
-### 2. Create an MCCE Azure resource
-An MCCE Azure resource is a top-level Azure resource under which cache nodes can be created.
+### 2. Create an MCC Azure resource
+An MCC Azure resource is a top-level Azure resource under which cache nodes can be created.
 
-To create an MCCE Azure resource, use `az mcc ent resource create`
+To create an MCC Azure resource, use `az mcc ent resource create`
 
 ```azurecli-interactive
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index 16d67271c0..fd1e2c5e51 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -1,6 +1,6 @@
 ---
-title: Monitor usage of MCCE cache nodes
-description: Details on how to monitor the usage of Microsoft Connected Cache for Enterprise (MCCE) cache nodes.
+title: Monitor usage of MCC cache nodes
+description: Details on how to monitor the usage of Microsoft Connected Cache for Enterprise (MCC) cache nodes.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -14,9 +14,9 @@ appliesto:
 ms.date: 09/04/2024
 ---
 
-# Monitor MCCE cache node usage
+# Monitor Microsoft Connected Cache cache node usage
 
-Tracking the status and performance of your MCCE cache node is essential to making sure that you're getting the most out of the service.
+Tracking the status and performance of your MCC cache node is essential to making sure that you're getting the most out of the service.
 
 <!-- Add standard metrics
 
@@ -28,7 +28,7 @@ The Cache Node Summary box on your Azure portal
 
 | Metric | Description |
 | --- | --- |
-| Healthy nodes | The MCCE service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
+| Healthy nodes | The MCC service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
 | Unhealthy nodes | If the cache node doesn't respond, it is labeled as unhealthy. |
 | Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic isn't dependent on the time filter near the charts. |
 | Max out | The minimum egress (in Mb/sec.) that your node has pushed out at any given time. |
@@ -49,7 +49,7 @@ The Cache Node Summary box on your Azure portal
 
 ### Volume by Content Type
 
-- The volume of content that your MCCE cache node is distributing, broken down by the hostname used to download said content
+- The volume of content that your MCC cache node is distributing, broken down by the hostname used to download said content
 
 ## Additional metrics
 
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 348b53caec..888427a4dc 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -1,6 +1,6 @@
 ---
-title: MCCE prerequisites
-description: Details of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
+title: MCC prerequisites
+description: Details of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -15,17 +15,17 @@ ms.date: 09/27/2024
 
 # Microsoft Connected Cache for Enterprise and Education Requirements (Public Preview)
 
-This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
+This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
 
 ## Licensing requirements
 
-- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCCE) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
+- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCC) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
 
     If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
 
-    The Azure resources used for MCCE will be free to you during this public preview.
+    The Azure resources used for MCC will be free to you during this public preview.
 
-- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCCE cache node.
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCC cache node.
 
     - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index a110b25674..bf1846c8a2 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -1,6 +1,6 @@
 ---
-title: MCCE Private Preview
-description: Details on Microsoft Connected Cache for Enterprise (MCCE) Private Preview
+title: MCC Private Preview
+description: Details on Microsoft Connected Cache for Enterprise (MCC) Private Preview
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -12,15 +12,15 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-# Microsoft Connected Cache for Enterprise and Education (MCCE) Private Preview
+# Microsoft Connected Cache for Enterprise and Education (MCC) Private Preview
 
-If you participated in the MCCE early preview, thank you for your collaboration and feedback.
+If you participated in the MCC early preview, thank you for your collaboration and feedback.
 
-To continue using MCCE, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCCE Azure service.
+To continue using MCC, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
 
-As such, we strongly recommend you [recreate your existing cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCCE caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You don't need to re-create your MCC Azure resource.
+As such, we strongly recommend you [recreate your existing cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You don't need to re-create your MCC Azure resource.
 
 ## Next step
 
 > [!div class="nextstepaction"]
-> [View documentation for MCCE Public Preview](mcc-ent-edu-overview.md)
+> [View documentation for MCC Public Preview](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index c4b588f9ca..45efd09f1b 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -1,6 +1,6 @@
 ---
-title: MCCE Release Notes
-description: Release Notes for Microsoft Connected Cache for Enterprise and Education (MCCE).
+title: MCC Release Notes
+description: Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -14,9 +14,9 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCCE)
+# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC)
 
-This article contains details about the latest releases of MCCE. Since MCCE is a Preview service, some releases may contain breaking changes that will be highlighted as such.
+This article contains details about the latest releases of MCC. Since MCC is a Preview service, some releases may contain breaking changes that will be highlighted as such.
 
 ## Release v0.1.0 (Public Preview launch)
 
@@ -33,8 +33,8 @@ This article contains details about the latest releases of MCCE. Since MCCE is a
 - Added support for creating both Windows-hosted and Linux-hosted cache nodes under the same MCC Azure resource
 - Added Azure CLI support for programmatic creation and management of MCC Azure resources and cache nodes
 - Added support for unauthenticated proxy and cloud proxy integration
-- Added ability to set each cache node's Update Ring to govern cadence of MCCE container updates
+- Added ability to set each cache node's Update Ring to govern cadence of MCC container updates
 
 ## Related content
 
-- [Overview of MCCE](mcc-ent-edu-overview.md)
+- [Overview of MCC](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index c7bae542e2..51121ea113 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -1,6 +1,6 @@
 ---
-title: MCCE support and troubleshooting
-description: Details on how to troubleshoot and seek support for Microsoft Connected Cache for Enterprise (MCCE).
+title: MCC support and troubleshooting
+description: Details on how to troubleshoot and seek support for Microsoft Connected Cache for Enterprise (MCC).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -38,7 +38,7 @@ For example: "Migrate data from regular tables to ledger tables" or "Create a ne
 
 -->
 
-# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCCE)
+# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCC)
 
 <!-- 2. Introductory paragraph ----------------------------------------------------------
 
@@ -54,7 +54,7 @@ Example: In this article, you will migrate your user databases from IBM Db2 to S
 
 -->
 
-This article contains instructions on how to troubleshoot different issues you may encounter while using MCCE. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
+This article contains instructions on how to troubleshoot different issues you may encounter while using MCC. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
 
 ## Troubleshooting Azure resource creation
 
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
index 70ca441c4f..3d554c99a0 100644
--- a/windows/deployment/do/mcc-ent-uninstall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Uninstall MCCE cache nodes
-description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) from a host machine.
+title: Uninstall MCC cache nodes
+description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) from a host machine.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -14,18 +14,18 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Uninstall MCCE caching software from a host machine
+# Uninstall MCC caching software from a host machine
 
-This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
+This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
 
-## Steps to uninstall MCCE from a Windows host machine
+## Steps to uninstall MCC from a Windows host machine
 
 1. Launch a PowerShell window *as administrator* and navigate to the MCC installation directory (C:\mcconwsl01 by default)
 1. Run the `uninstallmcconwsl.ps1` script
 
-## Steps to uninstall MCCE from a Linux host machine
+## Steps to uninstall MCC from a Linux host machine
 
-The `uninstallmcc.sh` script within the provisioning package uninstalls the MCCE caching software and all related components, including:
+The `uninstallmcc.sh` script within the provisioning package uninstalls the MCC caching software and all related components, including:
 
 - IoT Edge
 - IoT Edge Agent
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index b49b6c76d6..60cf72137b 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Update MCCE cache nodes
-description: Details on how Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes are updated by Microsoft.
+title: Update MCC cache nodes
+description: Details on how Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes are updated by Microsoft.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -13,25 +13,25 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
 ms.date: 09/27/2024
 ---
-# Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCCE)
+# Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCC)
 
-Microsoft Connected Cache for Enterprise and Education (MCCE) caching software is deployed to host machines as a container. The container OS and any software component within the container will need to be updated for security vulnerabilities or quality issues, or performance improvements required to successfully operate the caching software. These Microsoft-published container updates are called "MCCE updates" in this article.
+Microsoft Connected Cache for Enterprise and Education (MCC) caching software is deployed to host machines as a container. The container OS and any software component within the container will need to be updated for security vulnerabilities or quality issues, or performance improvements required to successfully operate the caching software. These Microsoft-published container updates are called "MCC updates" in this article.
 
-Microsoft silently deploys MCCE updates to your cache nodes based on the Update Ring setting you configure for each cache node.
+Microsoft silently deploys MCC updates to your cache nodes based on the Update Ring setting you configure for each cache node.
 
 ## Update rings
 
-MCCE cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
+MCC cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
 
-In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCCE update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCCE update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
+In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCC update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCC update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
 
 ### Update ring options
 
 #### Fast Ring
-All MCCE cache nodes are configured to update as part of the Fast ring by default. MCCE cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
+All MCC cache nodes are configured to update as part of the Fast ring by default. MCC cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
 #### Slow Ring
-Configuring an MCCE cache node to update as part of the Slow ring provides users with the option to delay MCCE software updates until the update can be validated. There are three settings that control when MCCE updates will be applied to MCCE cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
+Configuring an MCC cache node to update as part of the Slow ring provides users with the option to delay MCC software updates until the update can be validated. There are three settings that control when MCC updates will be applied to MCC cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
 
 | Setting | Description |
 | --- | --- |
@@ -41,15 +41,15 @@ Configuring an MCCE cache node to update as part of the Slow ring provides users
 
 ## Update process
 
-When Microsoft publishes an MCCE update, the MCCE service attempts to update all MCCE cache nodes based on their Update Ring membership. If a cache node can't complete the silent MCCE update within 6 hours of starting, an error message is surfaced in the Azure portal.
+When Microsoft publishes an MCC update, the MCC service attempts to update all MCC cache nodes based on their Update Ring membership. If a cache node can't complete the silent MCC update within 6 hours of starting, an error message is surfaced in the Azure portal.
 
 ## Update terminology, criteria, and SLA
 
-MCCE updates will be released based on need instead of on a set cadence.
+MCC updates will be released based on need instead of on a set cadence.
 
 | Update type | Criteria and SLA |
 | --- | --- |
 | Security | Security updates are the highest priority and will be released based on the severity rating of the vulnerability. [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 60 days of discovery. [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 120 days |
 | Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates will be released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
 
-For information on all released Microsoft Connected Cache updates see the [MCCE release notes](mcc-ent-release-notes.md).
+For information on all released Microsoft Connected Cache updates see the [MCC release notes](mcc-ent-release-notes.md).
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 28bc2764ff..bf7720bce4 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Verify MCCE cache node functionality
-description: Details on how to verify functionality of Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes.
+title: Verify MCC cache node functionality
+description: Details on how to verify functionality of Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -9,20 +9,20 @@ ms.subservice: itpro-updates
 ms.topic: how-to
 ms.date: 09/27/2024
 appliesto: 
-- ✅ Windows-hosted MCCE cache nodes
-- ✅ Linux-hosted MCCE cache nodes
+- ✅ Windows-hosted MCC cache nodes
+- ✅ Linux-hosted MCC cache nodes
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Verify MCCE cache node functionality
+# Verify MCC cache node functionality
 
-This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCCE) cache node is functioning correctly.
+This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCC) cache node is functioning correctly.
 
-These steps should be taken after deploying MCCE caching software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
+These steps should be taken after deploying MCC caching software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
 
-## Steps to verify functionality of MCCE cache node
+## Steps to verify functionality of MCC cache node
 
-1. To verify that the MCCE container on the host machine is running and reachable, run the following command from the host machine:
+1. To verify that the MCC container on the host machine is running and reachable, run the following command from the host machine:
 
     ```powershell
     wget http://localhost/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com
@@ -30,13 +30,13 @@ These steps should be taken after deploying MCCE caching software to a [Windows]
 
     If successful, there should be an HTTP response with StatusCode 200.
 
-1. To verify that Windows clients in your network can reach the MCCE cache node, visit the following address from a web browser on a Windows client device:
+1. To verify that Windows clients in your network can reach the MCC cache node, visit the following address from a web browser on a Windows client device:
 
     `http://[HostMachine-IP-address]/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com`
 
-    If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
+    If successful, the Windows client device should begin to download a small image file from the MCC cache node.
 
-1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an MCC cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From 4cd4f2429a641c4dd55c580ec840cbeb8b1bbb5d Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 2 Oct 2024 15:41:04 -0700
Subject: [PATCH 038/128] edits to create page

---
 .../do/mcc-ent-create-resource-and-cache.md   | 32 ++++++++++---------
 1 file changed, 17 insertions(+), 15 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index fd199751a9..c1584f8b3d 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -14,16 +14,16 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-# Create MCCE Azure resource and cache nodes
+# Create Microsoft Connected Cache Azure resource and cache nodes
 
-This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCCE) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
+This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
 
 ## Prerequisites
 1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a free-of-charge service hosted in Azure. You'll need a pay-as-you-go Azure subscription in order to onboard to our service. To create a subscription, go to [pay-as-you-go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
 2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
 For more information on sizing and OS requirements, see [the prerequisites for using MCCE](mcc-ent-prerequisites.md).
 
-## Create MCCE Azure resource
+## Create MCC Azure resource
 
 # [Azure portal](#tab/portal)
 
@@ -59,7 +59,7 @@ For more information on sizing and OS requirements, see [the prerequisites for u
 
     * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
 
-#### Create MCCE Azure resource
+#### Create MCC Azure resource
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
@@ -71,7 +71,7 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 
 ---
 
-## Create MCCE cache node
+## Create cache node
 
 # [Azure portal](#tab/portal)
 
@@ -110,26 +110,26 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 >```azurecli-interactive
 >az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
 >```
->In the output look for cacheNodeState. If cacheNodeState = Not Configured, you can continue with cache node configuration.
->If cacheNodeState = Registration in Progress, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+>In the output look for cacheNodeState. If ***cacheNodeState = Not Configured***, you can continue with cache node configuration.
+>If ***cacheNodeState = Registration in Progress***, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
 
 
 <!-- `code blah blah`
 -->
 
-
-
 ---
 
-## Configure MCCE cache node
+## Configure cache node
 
 # [Azure portal](#tab/portal)
-Enter required values to configure your cache node. To learn more about the definitions of each field, review the Configuration fields at the bottom of this article.
+Enter required values to configure your cache node. To learn more about the definitions of each field, review the [Configuration](#general-configuration-fields) fields at the bottom of this article.
 Don't forget to select save after adding configuration information.
 
 
 # [Azure CLI](#tab/cli)
 
+# [Linux host OS](#tab/cli/linux)
+
 Use the following command to configure cache node for deployment to a **Linux** host machine.
 
 Replace the following placeholders with your own information:
@@ -139,12 +139,12 @@ Replace the following placeholders with your own information:
 * *\<physical-path>*: The cache drive path. You can add upto nine cache drives.
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
-  Accepted values: enabled, disabled
+  Accepted values: enabled, disabled.<br>
   If proxy is set to enabled, you must provide proxy host and proxy port information
 * *\<proxy-host>*: The proxy host name or ip address
 * *\<proxy-port>*: Proxy port
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
-  Accepted values: slow, fast.
+  Accepted values: slow, fast.<br>
   If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
 * *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
   Accepted values: 1,2,3,4,5,6,7
@@ -160,6 +160,8 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 <br>
 
+# [Windows host OS](#tab/cli/windows)
+
 Use the following command to configure cache node for deployment to a **Windows** host machine.
 
 Replace the following placeholders with your own information:
@@ -170,12 +172,12 @@ Replace the following placeholders with your own information:
   Accepted value: /var/mcc
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
-  Accepted values: enabled, disabled
+  Accepted values: enabled, disabled.<br>
   If proxy is set to enabled, you must provide proxy host and proxy port information
 * *\<proxy-host>*: The proxy host name or ip address
 * *\<proxy-port>*: Proxy port
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
-  Accepted values: slow, fast.
+  Accepted values: slow, fast.<br>
   If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
 * *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
   Accepted values: 1,2,3,4,5,6,7

From 5f7d994b35ee9c80a9da59f1ac7a89f11901de99 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 3 Oct 2024 12:20:33 -0700
Subject: [PATCH 039/128] emoved e from mcce and other changes

---
 .../do/mcc-ent-configure-provision-linux.md   | 149 ------------------
 .../do/mcc-ent-configure-provision-windows.md | 149 ------------------
 .../do/mcc-ent-create-resource-and-cache.md   |  26 ++-
 .../do/mcc-ent-manage-cache-using-CLI.md      |  74 ++-------
 .../deployment/do/mcc-ent-prerequisites.md    |   6 -
 5 files changed, 33 insertions(+), 371 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-linux.md
 delete mode 100644 windows/deployment/do/mcc-ent-configure-provision-windows.md

diff --git a/windows/deployment/do/mcc-ent-configure-provision-linux.md b/windows/deployment/do/mcc-ent-configure-provision-linux.md
deleted file mode 100644
index 3c39a7af8f..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-linux.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise provision Linux cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to provision Linux cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-configure-provision-windows.md b/windows/deployment/do/mcc-ent-configure-provision-windows.md
deleted file mode 100644
index d2ea4921a2..0000000000
--- a/windows/deployment/do/mcc-ent-configure-provision-windows.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise provision Windows cache node
-description: Microsoft Connected Cache for Enterprise. Learn about how to provision Windows cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
- 
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index c1584f8b3d..3e23477196 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -21,7 +21,7 @@ This article outlines how to create and configure your Microsoft Connected Cache
 ## Prerequisites
 1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a free-of-charge service hosted in Azure. You'll need a pay-as-you-go Azure subscription in order to onboard to our service. To create a subscription, go to [pay-as-you-go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
 2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-For more information on sizing and OS requirements, see [the prerequisites for using MCCE](mcc-ent-prerequisites.md).
+For more information on sizing and OS requirements, see [the prerequisites for using MCC for Enterprise and Education](mcc-ent-prerequisites.md).
 
 ## Create MCC Azure resource
 
@@ -60,6 +60,7 @@ For more information on sizing and OS requirements, see [the prerequisites for u
     * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
 
 #### Create MCC Azure resource
+
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
@@ -85,7 +86,8 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
     -->
   The creation of cache node might take a few minutes. Select Refresh to see your recently created cache node.
-Once the status changes to **Not Configured**, you can now configure your cache node.
+Once the cache node state changes to **Not Configured**, you can now configure your cache node.<br>
+To know more about different cache node state, see [Cache node states](#cache-node-states).
 
 
 # [Azure CLI](#tab/cli)
@@ -112,10 +114,7 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 >```
 >In the output look for cacheNodeState. If ***cacheNodeState = Not Configured***, you can continue with cache node configuration.
 >If ***cacheNodeState = Registration in Progress***, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
-
-
-<!-- `code blah blah`
--->
+>To know more about different cache node state, see [Cache node states](#cache-node-states).
 
 ---
 
@@ -200,7 +199,7 @@ To deploy the cache node to a **Windows** host machine, see [Deploy cache node t
 To deploy the cache node to a **Linux** host machine, see [Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
 
 ### [Azure CLI](#tab/cli/)
-To deploy cache nodes using Azure CLI, see [Bulk management of cache nodes](mcc-ent-manage-cache-using-CLI.md)
+To deploy cache nodes using Azure CLI, see [Manage cache nodes using CLI](mcc-ent-manage-cache-using-CLI.md)
 
 ---
 <br>
@@ -247,3 +246,16 @@ You can choose to enable or disable proxy settings on your cache node.
 |---|---|---|
 |**Proxy host name**|	String or number|	Proxy host name or address|
 |**Proxy port**|	Integer|	Proxy port
+
+<br>
+
+##### Cache node states
+| Cache node state |Description|
+|---|---|
+|Creation in progress| Cache node is being created|
+|Registration in progress| Cache node is being registered|
+|Not configured| Cache node is ready to be configured|
+|Not provisioned| Cache node is ready to be provisioned on host machine|
+|Healthy| Cache node phoning home|
+|Unhealthy| Cache node has stopped phoning home|
+|Never phoned home| Cache node has provisioned but has never phoned home|
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 1f28f0bdbf..36acc712de 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -20,7 +20,7 @@ ms.date: 06/03/2024
 
 <br>
 
-This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCCE) cache nodes using Azure CLI.
+This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCC) cache nodes using Azure CLI.
 
  
 ## Prerequisites:
@@ -44,10 +44,10 @@ az group create --name myrg --location westus
 Once the resource group is created, you'll need to create a Microsoft Connected Cache for Enterprise resource.
 
 
-### 2. Create an MCCE Azure resource
-An MCCE Azure resource is a top-level Azure resource under which cache nodes can be created.
+### 2. Create an Azure resource
+An MCC Azure resource is a top-level Azure resource under which cache nodes can be created.
 
-To create an MCCE Azure resource, use `az mcc ent resource create`
+To create an MCC Azure resource, use `az mcc ent resource create`
 
 ```azurecli-interactive
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
@@ -108,19 +108,9 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ```
 
 >[!Note]
->For a cache node that is to be deployed on Windows host OS, the physical path of the cache drive must be **/var/mcc**.
-<br>
-
->[!NOTE]
->Proxy info changes, required to provision cache node.
-<br>
-
->[!IMPORTANT]
->In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node.
-<br>
-
->[!IMPORTANT]
->Please save values for physicalPath, sizeInGb, proxyPort, proxyHostName as these values will be needed to create the provisioning script.
+>* For a cache node that is to be deployed on Windows host OS, the physical path of the cache drive <u>must</u> be **/var/mcc**.<br>
+>* In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node. You will also see that cacheNodeState will show "Not Provisioned". <br>
+>* Please save values for <u>physicalPath, sizeInGb, proxyPort, proxyHostName</u> as these values will be needed to construct the provisioning script.
 
 
 <br>
@@ -136,71 +126,35 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 
 Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
 
-### 7. Deploy cache node
 <br>
 
+### 7. Deploy cache node
+
+
 #### Deploy cache node to Linux host machine
 Before you deploy your cache node to a Linux host machine, make sure you have met the prerequisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
 
 Use the following link to download and extract the Linux-compatible MCCE provisioning package onto the host machine.
 
-[Download MCCE provisioning package for Linux host machine](https://aka.ms/MCC-Ent-InstallScript-Linux)
+[Download MCC provisioning package for Linux host machine](https://aka.ms/MCC-Ent-InstallScript-Linux)
 
 <br>
 
->[!IMPORTANT]
->Before you execute the provisioning command, make sure you change directory to the extracted provisioning package and set the script execution permissions by running the command below.
-```azurepowershell-interactive
-sudo chmod +x provisionmcc.sh
-```
-
-Replace the values in the following provisioning command before running it.<br>
-
-```azurepowershell-interactive
-sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="true" proxyurl=http://enter proxy hostname:enter port
-```
+To deploy the cache node to a **Linux** host machine, see [Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
 <br>
 
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
 #### Deploy cache node to Windows host machine
 
 Before you deploy your cache node to a Windows host machine, make sure you have met the prerequisites listed here: [Host machine requirements](mcc-ent-prerequisites.md)
 
 Use the following link to download and extract the Windows-compatible MCCE provisioning package onto the host machine.
-[Download MCCE provisioning package for Windows host machine](https://aka.ms/MCC-Ent-InstallScript-WSL)
+[Download MCC provisioning package for Windows host machine](https://aka.ms/MCC-Ent-InstallScript-WSL)
 <br>
 
->[!IMPORTANT]
->Before you execute the provisioning command, make sure you change directory to the extracted provisioning package and set the script execution permissions by running the command below.
-```azurepowershell-interactive
-Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-```
-
-If you're using a **Group Managed Service Account**, replace the values in the following provisioning command before running it.<br>
-
-```powershell-interactive
-./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User
-```
+To deploy the cache node to a **Windows** host machine, see [Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
 
 <br>
 
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
-If you're using **Local User account** or **Domain User account**, replace the values in the following provisioning command before running it.<br>
-
-```powershell-interactive
-./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid enter mccResourceId here -cachenodeid enter cacheNodeId here -customerkey enter customerKey here -registrationkey enter registration key -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy $true -proxyurl " http://enter proxy host name:enter port"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
-```
-
-<br>
-
->[!IMPORTANT]
->'shoulduseproxy' parameter is required, whether or not your network uses proxy to access internet.
-
-
 ## Next step
 
 To verify cache node functionality, see [Verify cache node functionality](mcc-ent-verify-cache-node.md)
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index de980b7fa0..348b53caec 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -23,11 +23,6 @@ This article details the requirements and recommendations for using Microsoft Co
 
     If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
 
-<<<<<<< HEAD
-    The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
-1. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-  
-=======
     The Azure resources used for MCCE will be free to you during this public preview.
 
 - **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCCE cache node.
@@ -75,4 +70,3 @@ This article details the requirements and recommendations for using Microsoft Co
 |Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
 |Memory | 4 GB | 8 GB |
 |Cores | 4 | 8  |
->>>>>>> baff7906fe02b76b4a3649d7e6c3acdac9534e66

From 309828f71ac6837186cd48d147ec42472f196788 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 14:19:37 -0700
Subject: [PATCH 040/128] updated example script

---
 .../do/mcc-ent-manage-cache-using-CLI.md      | 28 ++++++++++++++-----
 1 file changed, 21 insertions(+), 7 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 595083be44..36a2f3e93a 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -155,25 +155,39 @@ In your console output, are you missing the last row in your CSV file?  This can
 
 ```powershell
 #Define variables
-$mccResourceName = "demo-01"
+$mccResourceName = "demo-03"
 $cacheNodeName = "demo-node"
 $cacheNodeOperatingSystem = "Windows"
-$resourceGroup = "myRG"
+$resourceGroup = "lichris-test"
 $resourceLocation = "westus"
-$cacheNodesToCreate = 5
-$proxyHost = "yourProxyHost.com"
-$proxyPort = "8080"
+$cacheNodesToCreate = 2
+$proxyHost = "104.42.135.96"
+$proxyPort = "3128"
+$waitTime = 3
 
-#Create MCC Azure resource
+#Create MCC Az resource
 az mcc ent resource create --mcc-resource-name $mccResourceName --location $resourceLocation --resource-group $resourceGroup
 
-#Create 5 cache nodes
+#Loop through $cacheNodesToCreate iterations
 for ($cacheNodeNumber = 1; $cacheNodeNumber -le $cacheNodesToCreate; $cacheNodeNumber++) {
     $iteratedCacheNodeName = $cacheNodeName + "-" + $cacheNodeNumber
     
     #Create cache node
     az mcc ent node create --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --host-os $cacheNodeOperatingSystem --resource-group $resourceGroup
 
+    #Get cache node state
+    $cacheNodeState = $(az mcc ent node show --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --query "cacheNodeState") | ConvertFrom-Json
+
+    $howLong = 0
+    #Wait until cache node state returns "Not Configured"
+    while ($cacheNodeState -ne "Not Configured") {
+        Write-Output "Waiting for cache node creation to complete...$howLong seconds"
+        Start-Sleep -Seconds $waitTime
+        $howLong += $waitTime
+    
+        $cacheNodeState = $(az mcc ent node show --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --query "cacheNodeState") | ConvertFrom-Json
+    }
+
     #Configure cache node
     az mcc ent node update --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --cache-drive  "[{physical-path:/var/mcc,size-in-gb:50}]" --proxy enabled --proxy-host $proxyHost --proxy-port $proxyPort
 }

From 47421700b9a5279eaa59d12e4ab9ccd25ae5dd77 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 14:28:01 -0700
Subject: [PATCH 041/128] added important notice to update page

---
 .../do/mcc-ent-update-cache-node.md           |  3 +
 windows/deployment/do/mcc-ent-update-cache.md | 55 -------------------
 2 files changed, 3 insertions(+), 55 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-update-cache.md

diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 60cf72137b..13e78b9e50 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -27,6 +27,9 @@ In other words, configuring cache nodes to update as part of the Slow ring provi
 
 ### Update ring options
 
+>[!IMPORTANT]
+>In the event of a critical security patch, Microsoft may elect to initiate an MCC update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring).
+
 #### Fast Ring
 All MCC cache nodes are configured to update as part of the Fast ring by default. MCC cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
diff --git a/windows/deployment/do/mcc-ent-update-cache.md b/windows/deployment/do/mcc-ent-update-cache.md
deleted file mode 100644
index 8ffa3c50c7..0000000000
--- a/windows/deployment/do/mcc-ent-update-cache.md
+++ /dev/null
@@ -1,55 +0,0 @@
----
-title: Uninstall MCC for Enterprise and Education
-description: Details on how to uninstall Microsoft Connected Cache (MCC) for Enterprise and Education for your environment.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 05/23/2024
----
-
-<!-- Customers will no longer update the private preview and instead install public preview
-# Update or uninstall Microsoft Connected Cache for Enterprise and Education
-
-Throughout the preview phase, we'll send you security and feature updates for MCC. Follow these steps to perform the update.
-
-## Update MCC
-
-Run the following command with the **arguments** we provided in the email to update your MCC:
-
-```powershell
-# .\updatemcc.ps1 version="**\<VERSION\>**" tenantid="**\<TENANTID\>**" customerid="**\<CUSTOMERID\>**" cachenodeid="**\<CACHENODEID\>**" customerkey="**\<CUSTOMERKEY\>**"
-```
-
-For example:
-
-```powershell
-# .\updatemcc.ps1 version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.659" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99a"
-```
--->
-# Uninstall MCC
-
-Contact the MCC Team before uninstalling to let us know if you're facing issues.
-
-This script removes the following items:
-
-1. EFLOW + Linux VM
-1. IoT Edge
-1. Edge Agent
-1. Edge Hub
-1. MCC
-1. Moby CLI
-1. Moby Engine
-
-To delete MCC, go to Control Panel \> Uninstall a program \> Select Azure IoT
-Edge LTS \> Uninstall

From 8cf273ff6dca660743c0117e8aa6d1a3afe4775f Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 14:30:01 -0700
Subject: [PATCH 042/128] more update page changes

---
 windows/deployment/do/mcc-ent-update-cache-node.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 13e78b9e50..52a3fc8bfd 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -28,7 +28,7 @@ In other words, configuring cache nodes to update as part of the Slow ring provi
 ### Update ring options
 
 >[!IMPORTANT]
->In the event of a critical security patch, Microsoft may elect to initiate an MCC update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring).
+>In the event of a critical security patch, Microsoft may elect to initiate an MCC update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each MCC update.
 
 #### Fast Ring
 All MCC cache nodes are configured to update as part of the Fast ring by default. MCC cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.

From aadb3d97cc3ce252355790a5e2e3ed0a87f069f3 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 14:36:13 -0700
Subject: [PATCH 043/128] clarified how proxy configuration is used

---
 .../do/mcc-ent-create-resource-and-cache.md      | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 832412b8a6..3aa81805ec 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -140,9 +140,9 @@ Replace the following placeholders with your own information:
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
   Accepted values: enabled, disabled
-  If proxy is set to enabled, you must provide proxy host and proxy port information
-* *\<proxy-host>*: The proxy host name or ip address
-* *\<proxy-port>*: Proxy port
+  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+* *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
+* *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
   Accepted values: slow, fast.
   If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
@@ -171,9 +171,9 @@ Replace the following placeholders with your own information:
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
   Accepted values: enabled, disabled
-  If proxy is set to enabled, you must provide proxy host and proxy port information
-* *\<proxy-host>*: The proxy host name or ip address
-* *\<proxy-port>*: Proxy port
+  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+* *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
+* *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
   Accepted values: slow, fast.
   If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
@@ -234,12 +234,12 @@ To deploy cache nodes using Azure CLI, see [Bulk management of cache nodes](mcc-
 
 #### Proxy settings
 <br>
-You can choose to enable or disable proxy settings on your cache node.
+You can choose to enable or disable proxy settings on your cache node. Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
 
 <br>
 
 >[!IMPORTANT]
->Enabling or disabling the proxy settings after your cache node has been deployed will require running the provisioning script again. This will ensure that proxy changes are in effect on the cache node. 
+>Enabling or disabling the proxy settings after your cache node has been deployed will require running the provisioning script on the host machine again. This will ensure that proxy changes are in effect on the cache node. 
 
 | Field Name	|Expected Value	 |Description|
 |---|---|---|

From 5b196287f660ea51162a863b0333ffac7f32496f Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 15:09:54 -0700
Subject: [PATCH 044/128] anonymizing variables in example script

---
 windows/deployment/do/mcc-ent-manage-cache-using-CLI.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 36a2f3e93a..b5328c44fb 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -155,14 +155,14 @@ In your console output, are you missing the last row in your CSV file?  This can
 
 ```powershell
 #Define variables
-$mccResourceName = "demo-03"
+$mccResourceName = "myMCCResource"
 $cacheNodeName = "demo-node"
 $cacheNodeOperatingSystem = "Windows"
-$resourceGroup = "lichris-test"
+$resourceGroup = "myRG"
 $resourceLocation = "westus"
 $cacheNodesToCreate = 2
-$proxyHost = "104.42.135.96"
-$proxyPort = "3128"
+$proxyHost = "myProxy.com
+$proxyPort = "8080"
 $waitTime = 3
 
 #Create MCC Az resource

From a9d0024ab63a3a0d64ccea2421fd1be1ecc5c47c Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 15:24:24 -0700
Subject: [PATCH 045/128] revise example script

---
 windows/deployment/do/mcc-ent-manage-cache-using-CLI.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index b5328c44fb..67c078e27f 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -137,7 +137,7 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
 
 ### Example script:
-Below is a pseudocode example of how to script bulk creation and configuration of an MCC Azure resource and five MCC cache nodes.
+Below is a pseudocode example of how to script bulk creation and configuration of an MCC Azure resource and multiple MCC cache nodes.
 
 <!--# [Bash](#tab/bash)
 
@@ -161,7 +161,7 @@ $cacheNodeOperatingSystem = "Windows"
 $resourceGroup = "myRG"
 $resourceLocation = "westus"
 $cacheNodesToCreate = 2
-$proxyHost = "myProxy.com
+$proxyHost = "myProxy.com"
 $proxyPort = "8080"
 $waitTime = 3
 

From b110c73abf8e65d6c1df94ab60769e500af0b2ac Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 3 Oct 2024 15:37:50 -0700
Subject: [PATCH 046/128] acrolinx fixes to update page

---
 windows/deployment/do/mcc-ent-update-cache-node.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 52a3fc8bfd..604ac96ddd 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -15,7 +15,7 @@ ms.date: 09/27/2024
 ---
 # Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCC)
 
-Microsoft Connected Cache for Enterprise and Education (MCC) caching software is deployed to host machines as a container. The container OS and any software component within the container will need to be updated for security vulnerabilities or quality issues, or performance improvements required to successfully operate the caching software. These Microsoft-published container updates are called "MCC updates" in this article.
+Microsoft Connected Cache for Enterprise and Education (MCC) caching software is deployed to host machines as a container. The container OS and any software component within the container need to be updated to address security vulnerabilities and improve quality and performance. These Microsoft-published container updates are referred to as "MCC updates" in this article.
 
 Microsoft silently deploys MCC updates to your cache nodes based on the Update Ring setting you configure for each cache node.
 
@@ -53,6 +53,6 @@ MCC updates will be released based on need instead of on a set cadence.
 | Update type | Criteria and SLA |
 | --- | --- |
 | Security | Security updates are the highest priority and will be released based on the severity rating of the vulnerability. [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 60 days of discovery. [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 120 days |
-| Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates will be released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
+| Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates are released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
 
-For information on all released Microsoft Connected Cache updates see the [MCC release notes](mcc-ent-release-notes.md).
+For information on all released Microsoft Connected Cache updates, see the [MCC release notes](mcc-ent-release-notes.md).

From 25d08339f677c15fde29c594e659705a492d19c8 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 3 Oct 2024 16:55:44 -0700
Subject: [PATCH 047/128] changes to other pages and content in overview page

---
 windows/deployment/do/mcc-ent-edu-overview.md |  85 ++++++----
 .../do/mcc-ent-manage-cache-using-CLI.md      |  10 +-
 .../deployment/do/mcc-ent-monitor-cache.md    | 149 ------------------
 windows/deployment/do/mcc-ent-monitoring.md   |   8 +-
 .../deployment/do/mcc-ent-prerequisites.md    |   6 +-
 .../deployment/do/mcc-ent-private-preview.md  |  32 +---
 .../deployment/do/mcc-ent-release-notes.md    |   6 +-
 .../do/mcc-ent-support-and-troubleshooting.md |  63 +-------
 .../do/mcc-ent-uninstall-cache-node.md        |  10 +-
 windows/deployment/do/mcc-ent-update-cache.md |  55 -------
 .../do/mcc-ent-verify-cache-node.md           |  10 +-
 11 files changed, 88 insertions(+), 346 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-ent-monitor-cache.md
 delete mode 100644 windows/deployment/do/mcc-ent-update-cache.md

diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 0060028e14..9a7dec5b39 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -20,53 +20,70 @@ ms.date: 05/09/2023
 
 > [!IMPORTANT]
 > - Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
-> - As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be deployed to as many Windows servers, bare-metal servers, or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune.
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.<br>
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
 
-## Supported scenarios
+Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux] (windows/wsl/about) and either a [Group Managed Service Account](windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
 
-Connected Cache (early preview) supports the following scenarios:
+### Supported scenarios and deployments
 
-- Pre-provisioning of devices using Windows Autopilot
-- Cloud-only devices, such as Intune-enrolled devices
+Microsoft Connected Cache for Enterprise and Education (preview) is intended to support the following content delivery scenarios:<br>
+* Pre-provisioning of devices using Windows Autopilot<br>
+* Co-managed clients that get monthly update and Win32 apps from Microsoft Intune. For more information, see Support for Intune Win32 apps.<br>
+* Cloud-only managed devices, such as Intune-enrolled devices without the Configuration Manager client, that get monthly update and Win32 apps from Microsoft Intune. For more information, see Support for cloud-managed devices.<br>
 
-## Supported content types
+Microsoft Connected Cache is built for flexible deployments to support a number of enterprise configurations:
 
+##### Branch office
+Customers may have globally dispersed offices that meet the following parameters:
+* 10 – 50 Windows Clients
+* No dedicated server hardware
+* Internet bandwidth is great to limited (satellite internet)
+* Possibly intermittent connectivity
+<br>
+To support the branch the branch office scenario, customers can deploy to a Windows 11 client (see Host machine requirements) device.
+
+##### Large Enterprise
+Customers may have office spaces, data centers, or Azure deployments that meet the following parameters:  
+* 100's or 1,000's of Windows devices (client or server).
+* Existing hardware – Decommissioned DP, file server, cloud print server
+* Azure VMs and Azure Virtual Desktop
+* Internet bandwidth is great to limited (T1)
+
+
+### Supported content types
 When clients download cloud-managed content, they use Delivery Optimization from the cache server installed on a Windows server or VM. Cloud-managed content includes the following types:
+* Windows updates: Windows feature and quality updates
+* Office Click-to-Run apps: Microsoft 365 Apps and updates
+* Client apps: Intune, store apps, and updates
+* Endpoint protection: Windows Defender definition updates
 
-- Windows updates: Windows feature and quality updates
-- Office Click-to-Run apps: Microsoft 365 Apps and updates
-- Client apps: Intune, store apps, and updates
-- Endpoint protection: Windows Defender definition updates
+For the full list of content endpoints that Microsoft Connected Cache for Enterprise and Education supports, see [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md).<br>
 
-For the full list of content endpoints that Microsoft Connected Cache for Enterprise and Education supports, see [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md).
+### Hardware or VM Requirements
+See [Host machine requirements](mcc-ent-prerequisites.md) for complete details.
+
+|Deployment Scenarios| Download Speed Range | Download Speeds and Content Volume Delivered in 8 Hours | VM/Hardware Recommendation |
+|---|---|---|---|
+|Branch Office|< 1 Gbps Peak| 500 Mbps - 1,800 GB </br></br> 250 Mbps - 900 GB </br></br> 100 Mbps - 360 GB </br></br> 50 Mbps - 180 GB| 4 Cores </br></br> Up to 8 GB Memory with 4 GB of Free </br></br> 100 GB free disk space|
+|Small to Medium Enterprises/Autopilot Provisioning Center - 50 - 500 devices in a single location|1 - 5 Gbps| 5 Gbps - 18,000 GB </br></br>3 Gbps - 10,800 GB </br></br>1 Gbps - 3,600 GB| 8 Cores </br></br> Up to 16 GB Memory with 4 GB of Free </br></br> 500 GB free disk space|
+|Medium to Large Enterprises/Autopilot Provisioning Center - 500 - 5,000 devices|5 - 101 Gbps Peak|   9 Gbps - 32,400 GB </br></br> 5 Gbps - 18,000 GB </br></br>3 Gbps - 10,800 GB| 16 Cores</br></br> 32 GB Memory with 4 GB of Free </br></br> 2 200-500 GB SSDs|
+
+<br>
 
 ## How it works
 
-MCC is a hybrid (mix of on-premises and cloud resources) SaaS solution built as an Azure IoT Edge module and Docker compatible Linux container deployed to your Windows devices. The Delivery Optimization team chose IoT Edge for Linux on Windows (EFLOW) as a secure, reliable container management infrastructure. EFLOW is a Linux virtual machine, based on Microsoft's first party CBL-Mariner operating system. It's built with the IoT Edge runtime and validated as a tier 1 supported environment for IoT Edge workloads. MCC is a Linux IoT Edge module running on the Windows Host OS.  
-
-1. The Azure Management Portal is used to create MCC nodes.
-1. The MCC container is deployed and provisioned to the server using the installer provided in the portal.
-1. Client policy is set in your management solution to point to the IP address or FQDN of the cache server.
-1. Microsoft end-user devices make range requests for content from the MCC node.
-1. The MCC node pulls content from the CDN, seeds its local cache stored on disk, and delivers the content to the client.
-1. Subsequent requests from end-user devices for content will now come from cache.
-1. If the MCC node is unavailable, the client pulls content from CDN to ensure uninterrupted service for your subscribers.
+1. The Azure management portal for Microsoft Connected Cache or CLI are used to create cache nodes, configure deployments, including unauthenticated proxy settings.
+1. Prepare Windows or Linux devices. If deploying to Windows devices, prepare accounts - gMSA, local user account, domain account. Deploy to Windows or Linux devices using scripts.
+1. The Microsoft Connected Cache container is deployed to the device using Azure IoT Edge container management services and the cache server begins reporting status and metrics to Delivery Optimization services.
+1. The DOCacheHost setting is configured using Intune or other MDM, DHCP custom option, or registry key.
+1. Devices request content from the cache server, the cache server forwards the requests to the CDN and fills the cache, the cache server delivers the content requested to the devices, and uses Peer to Peer (depending on DO Download mode settings) for all DO content. 
+1. Devices can fallback to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN )settings to prefer the local cache server.
+Customers can view data regarding Microsoft Connected Cache downloads on management portal and Windows Update for Business reports
 
 The following diagram displays an overview of how MCC functions:
-
+ <!--
 :::image type="content" source="./images/waas-mcc-diag-overview.png" alt-text="Diagram displaying the components of MCC." lightbox="./images/waas-mcc-diag-overview.png":::
-
-## IoT Edge
-
-Even though your MCC scenario isn't related to IoT, Azure IoT Edge is used as a more generic Linux container deployment and management infrastructure. The Azure IoT Edge runtime sits on your designated MCC device and performs management and communication operations. The runtime performs several functions important to manage MCC on your edge device:
-
-1. Installs and updates MCC on your edge device.
-1. Maintains Azure IoT Edge security standards on your edge device.
-1. Ensures that MCC is always running.
-1. Reports MCC health and usage to the cloud for remote monitoring.
-  
-For more information on Azure IoT Edge, see the Azure IoT Edge [documentation](/azure/iot-edge/about-iot-edge).
+ -->
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 36acc712de..9c264dfe33 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -25,7 +25,13 @@ This article outlines how to create, configure, and deploy Microsoft Connected C
  
 ## Prerequisites:
 1. **Install Azure CLI**: [How to install the Azure CLI](/cli/azure/install-azure-cli)
-1. **Install MCC extension**: [Install the MCC extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
+1. **Install MCC extension**: Install MCC extension via the command below
+
+```azurecli-interactive
+az extension add --name mcc
+```
+
+To learn more about installting extensions, visit [Install the MCC extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
 
 <br>
 <br>
@@ -67,7 +73,7 @@ The next step is to create a cache node under this resource.
 To create a cache node, use `az mcc ent node create`
 
 ```azurecli-interactive
-az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os linux
+az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os <linux or windows>
 ```
 
 <br>
diff --git a/windows/deployment/do/mcc-ent-monitor-cache.md b/windows/deployment/do/mcc-ent-monitor-cache.md
deleted file mode 100644
index a8eb213e19..0000000000
--- a/windows/deployment/do/mcc-ent-monitor-cache.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: MCC for Enterprise monitor cache nodes
-description: Microsoft Connected Cache for Enterprise. Learn about how to monitor cache node.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-manager: aaroncz
-ms.author: nidos
-author: doshnid
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 09/04/2024
----
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
-
-This template provides the basic structure of a How-to article pattern. See the
-[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
-
-You can provide feedback about this template at: https://aka.ms/patterns-feedback
-
-How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
-
--->
-
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# "<verb> * <noun>"
-TODO: Add your heading
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-TODO: Add your introductory paragraph
-
-<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
-
--->
-
-<!-- 3. Prerequisites --------------------------------------------------------------------
-
-Required: Make Prerequisites the first H2 after the H1. 
-
-* Provide a bulleted list of items that the user needs.
-* Omit any preliminary text to the list.
-* If there aren't any prerequisites, list "None" in plain text, not as a bulleted item.
-
--->
-
-## Prerequisites
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-## "\<verb\> * \<noun\>"
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
-1. Step 1
-1. Step 2
-1. Step 3
-
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
-
-## Next step
-
-TODO: Add your next step link(s)
-
-> [!div class="nextstepaction"]
-> [Write concepts](article-concept.md)
-
-<!-- OR -->
-
-## Related content
-
-TODO: Add your next step link(s)
-
-- [Write concepts](article-concept.md)
-
-<!--
-Remove all the comments in this template before you sign-off or merge to the main branch.
--->
-
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index 16d67271c0..4201daea40 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -14,9 +14,9 @@ appliesto:
 ms.date: 09/04/2024
 ---
 
-# Monitor MCCE cache node usage
+# Monitor MCC cache node usage
 
-Tracking the status and performance of your MCCE cache node is essential to making sure that you're getting the most out of the service.
+Tracking the status and performance of your MCC cache node is essential to making sure that you're getting the most out of the service.
 
 <!-- Add standard metrics
 
@@ -28,7 +28,7 @@ The Cache Node Summary box on your Azure portal
 
 | Metric | Description |
 | --- | --- |
-| Healthy nodes | The MCCE service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
+| Healthy nodes | The MCC service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
 | Unhealthy nodes | If the cache node doesn't respond, it is labeled as unhealthy. |
 | Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic isn't dependent on the time filter near the charts. |
 | Max out | The minimum egress (in Mb/sec.) that your node has pushed out at any given time. |
@@ -49,7 +49,7 @@ The Cache Node Summary box on your Azure portal
 
 ### Volume by Content Type
 
-- The volume of content that your MCCE cache node is distributing, broken down by the hostname used to download said content
+- The volume of content that your MCC cache node is distributing, broken down by the hostname used to download said content
 
 ## Additional metrics
 
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 348b53caec..80ce1b50df 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -13,13 +13,13 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Microsoft Connected Cache for Enterprise and Education Requirements (Public Preview)
+# Microsoft Connected Cache for Enterprise and Education Requirements
 
-This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCCE).
+This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
 
 ## Licensing requirements
 
-- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCCE) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
+- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCC) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
 
     If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
 
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index bd9dd9b26c..7877e363b7 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -12,43 +12,15 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-<<<<<<< HEAD
-
 # Microsoft Connected Cache for Enterprise and Education (early preview)
 
-> [!NOTE]
-> Microsoft Connected Cache for Enterprise and Education is now in public preview.
-> To know more about the program, visit [MCC program overview](mcc-ent-edu-overview.md).
-
-<br>
-
-Microsoft Connected Cache for Enterprise and Education is now in public preview. To get started, visit [Create MCC resource and cache node](mcc-ent-create-resource-and-cache.md)
-
->[!IMPORTANT]
-> If you are using the early preview version on MCC, please uninstall and delete the early preview cache node and the associated MCC resource and create a new one. To create a new MCC resource, visit [Create MCC resource and cache node](mcc-ent-create-resource-and-cache.md)
-
-<br>
-## Enterprise requirements for MCC
-
-1. **Azure subscription**: MCC management portal is hosted within Azure and is used to create the Connected Cache [Azure resource](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management) and IoT Hub resource. Both are free services.
-
-    Your Azure subscription ID is first used to provision MCC services, and enable access to the preview. The MCC server requirement for an Azure subscription costs you nothing. If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
-
-    The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
-1. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.<br>
-For more information, visit [Hardware Requirments](mcc-ent-prerequisites.md)
-  
-=======
-# Microsoft Connected Cache for Enterprise and Education (MCCE) Private Preview
-
 If you participated in the MCCE early preview, thank you for your collaboration and feedback.
 
-To continue using MCCE, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCCE Azure service.
+To continue using Microsoft Connected Cache for Enterprise and Education (MCC), we strongly recommend that you upgrade your existing cache nodes to the new release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
 
 As such, we strongly recommend you [recreate your existing cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCCE caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You don't need to re-create your MCC Azure resource.
 
 ## Next step
 
 > [!div class="nextstepaction"]
-> [View documentation for MCCE Public Preview](mcc-ent-edu-overview.md)
->>>>>>> baff7906fe02b76b4a3649d7e6c3acdac9534e66
+> [View documentation for MCC Public Preview](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index c4b588f9ca..2dc0e96ae3 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -14,9 +14,9 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCCE)
+# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC)
 
-This article contains details about the latest releases of MCCE. Since MCCE is a Preview service, some releases may contain breaking changes that will be highlighted as such.
+This article contains details about the latest releases of MCC. Since MCC is a Preview service, some releases may contain breaking changes that will be highlighted as such.
 
 ## Release v0.1.0 (Public Preview launch)
 
@@ -37,4 +37,4 @@ This article contains details about the latest releases of MCCE. Since MCCE is a
 
 ## Related content
 
-- [Overview of MCCE](mcc-ent-edu-overview.md)
+- [Overview of MCC](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index 2fa89d1fa7..1e9a88bf71 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -16,73 +16,24 @@ ms.date: 09/27/2024
 
 
 
+
+
+# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCC)
+
+This article contains instructions on how to troubleshoot different issues you may encounter while using MCC. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
+
+
 ## Steps to obtain an Azure subscription ID
 
 <!--Using include file, get-azure-subscription.md, do/mcc-isp.md for shared content-->
 [!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
 
 
-<<<<<<< HEAD
-
-TODO: List the prerequisites
-
-<!-- 4. Task H2s ------------------------------------------------------------------------------
-
-Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
-
-For portal-based procedures, minimize bullets and numbering.
-
-* Each H2 should be a major step in the task.
-* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
-* Don't start with a gerund.
-* Don't number the H2s.
-* Begin each H2 with a brief explanation for context.
-* Provide a ordered list of procedural steps.
-* Provide a code block, diagram, or screenshot if appropriate
-* An image, code block, or other graphical element comes after numbered step it illustrates.
-* If necessary, optional groups of steps can be added into a section.
-* If necessary, alternative groups of steps can be added into a section.
-
--->
-
-## "\<verb\> * \<noun\>"
-=======
-<!-- 1. H1 -----------------------------------------------------------------------------
-
-Required: Use a "<verb> * <noun>" format for your H1. Pick an H1 that clearly conveys the task the user will complete.
-
-For example: "Migrate data from regular tables to ledger tables" or "Create a new Azure SQL Database".
-
-* Include only a single H1 in the article.
-* Don't start with a gerund.
-* Don't include "Tutorial" in the H1.
-
--->
-
-# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCCE)
-
-<!-- 2. Introductory paragraph ----------------------------------------------------------
-
-Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
-
-Readers should have a clear idea of what they will do in this article after reading the introduction.
-
-* Introduction immediately follows the H1 text.
-* Introduction section should be between 1-3 paragraphs.
-* Don't use a bulleted list of article H2 sections.
-
-Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
-
--->
-
-This article contains instructions on how to troubleshoot different issues you may encounter while using MCCE. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
-
 ## Troubleshooting Azure resource creation
 
 MCC Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
 
 ## Troubleshooting cache node creation
->>>>>>> baff7906fe02b76b4a3649d7e6c3acdac9534e66
 TODO: Add introduction sentence(s)
 [Include a sentence or two to explain only what is needed to complete the procedure.]
 TODO: Add ordered list of procedure steps
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
index 70ca441c4f..88ecc4b0aa 100644
--- a/windows/deployment/do/mcc-ent-uninstall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -14,18 +14,18 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Uninstall MCCE caching software from a host machine
+# Uninstall MCC caching software from a host machine
 
-This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCCE) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
+This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
 
-## Steps to uninstall MCCE from a Windows host machine
+## Steps to uninstall MCC from a Windows host machine
 
 1. Launch a PowerShell window *as administrator* and navigate to the MCC installation directory (C:\mcconwsl01 by default)
 1. Run the `uninstallmcconwsl.ps1` script
 
-## Steps to uninstall MCCE from a Linux host machine
+## Steps to uninstall MCC from a Linux host machine
 
-The `uninstallmcc.sh` script within the provisioning package uninstalls the MCCE caching software and all related components, including:
+The `uninstallmcc.sh` script within the provisioning package uninstalls the MCC caching software and all related components, including:
 
 - IoT Edge
 - IoT Edge Agent
diff --git a/windows/deployment/do/mcc-ent-update-cache.md b/windows/deployment/do/mcc-ent-update-cache.md
deleted file mode 100644
index 8ffa3c50c7..0000000000
--- a/windows/deployment/do/mcc-ent-update-cache.md
+++ /dev/null
@@ -1,55 +0,0 @@
----
-title: Uninstall MCC for Enterprise and Education
-description: Details on how to uninstall Microsoft Connected Cache (MCC) for Enterprise and Education for your environment.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 05/23/2024
----
-
-<!-- Customers will no longer update the private preview and instead install public preview
-# Update or uninstall Microsoft Connected Cache for Enterprise and Education
-
-Throughout the preview phase, we'll send you security and feature updates for MCC. Follow these steps to perform the update.
-
-## Update MCC
-
-Run the following command with the **arguments** we provided in the email to update your MCC:
-
-```powershell
-# .\updatemcc.ps1 version="**\<VERSION\>**" tenantid="**\<TENANTID\>**" customerid="**\<CUSTOMERID\>**" cachenodeid="**\<CACHENODEID\>**" customerkey="**\<CUSTOMERKEY\>**"
-```
-
-For example:
-
-```powershell
-# .\updatemcc.ps1 version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.659" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99a"
-```
--->
-# Uninstall MCC
-
-Contact the MCC Team before uninstalling to let us know if you're facing issues.
-
-This script removes the following items:
-
-1. EFLOW + Linux VM
-1. IoT Edge
-1. Edge Agent
-1. Edge Hub
-1. MCC
-1. Moby CLI
-1. Moby Engine
-
-To delete MCC, go to Control Panel \> Uninstall a program \> Select Azure IoT
-Edge LTS \> Uninstall
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 28bc2764ff..0b16356433 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -14,15 +14,15 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Verify MCCE cache node functionality
+# Verify MCC cache node functionality
 
-This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCCE) cache node is functioning correctly.
+This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCC) cache node is functioning correctly.
 
 These steps should be taken after deploying MCCE caching software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
 
 ## Steps to verify functionality of MCCE cache node
 
-1. To verify that the MCCE container on the host machine is running and reachable, run the following command from the host machine:
+1. To verify that the MCC container on the host machine is running and reachable, run the following command from the host machine:
 
     ```powershell
     wget http://localhost/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com
@@ -30,13 +30,13 @@ These steps should be taken after deploying MCCE caching software to a [Windows]
 
     If successful, there should be an HTTP response with StatusCode 200.
 
-1. To verify that Windows clients in your network can reach the MCCE cache node, visit the following address from a web browser on a Windows client device:
+1. To verify that Windows clients in your network can reach the MCC cache node, visit the following address from a web browser on a Windows client device:
 
     `http://[HostMachine-IP-address]/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com`
 
     If successful, the Windows client device should begin to download a small image file from the MCCE cache node.
 
-1. To check how much content an individual Windows client has pulled from an MCCE cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an MCC cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From 8cca40681bbc2ba79b990bccb70b09e984ca4c98 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Mon, 7 Oct 2024 13:59:40 -0600
Subject: [PATCH 048/128] Update mcc-ent-deploy-to-windows.md

---
 windows/deployment/do/mcc-ent-deploy-to-windows.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index ddbc940eb7..31ce8840c6 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -46,7 +46,7 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](https://learn.microsoft.com/dotnet/api/system.management.automation.pscredential?view=powershellsdk-7.4.0&preserve-view=true) named `$myLocalAccountCredential`.
+    - If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the MCC runtime account.
 
 ```powershell-interactive
@@ -61,4 +61,4 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 ## Related content
 
 - [Deploy to a Linux host machine](mcc-ent-deploy-to-linux.md)
-- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
+- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)

From 7b9c14f20599e901784541a55a72383bf4f386f3 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Mon, 7 Oct 2024 14:05:32 -0600
Subject: [PATCH 049/128] Update
 .openpublishing.redirection.windows-deployment.json

---
 .openpublishing.redirection.windows-deployment.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.openpublishing.redirection.windows-deployment.json b/.openpublishing.redirection.windows-deployment.json
index 09479f4eca..06d80855d6 100644
--- a/.openpublishing.redirection.windows-deployment.json
+++ b/.openpublishing.redirection.windows-deployment.json
@@ -125,6 +125,16 @@
       "redirect_url": "/windows/deployment/do/waas-microsoft-connected-cache",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/deployment/do/mcc-ent-configure-provision-linux.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-linux",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/deployment/do/mcc-ent-configure-provision-windows.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-windows",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/deployment/planning/act-technical-reference.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/compatibility/compatibility-administrator-users-guide",

From bf3801a545bc1c3d5f75e3e48a7a3564e8d70e44 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Mon, 7 Oct 2024 14:08:05 -0600
Subject: [PATCH 050/128] Update
 .openpublishing.redirection.windows-deployment.json

---
 .openpublishing.redirection.windows-deployment.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.openpublishing.redirection.windows-deployment.json b/.openpublishing.redirection.windows-deployment.json
index 06d80855d6..a563d3fa34 100644
--- a/.openpublishing.redirection.windows-deployment.json
+++ b/.openpublishing.redirection.windows-deployment.json
@@ -135,6 +135,11 @@
       "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-windows",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/deployment/do/mcc-ent-update-cache.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-uninstall-cache-node",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/deployment/planning/act-technical-reference.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/compatibility/compatibility-administrator-users-guide",

From c4442b90751f4f3c274ecb0799b16fccd32d4f93 Mon Sep 17 00:00:00 2001
From: Gary Moore <5432776+garycentric@users.noreply.github.com>
Date: Mon, 7 Oct 2024 15:36:41 -0700
Subject: [PATCH 051/128] Correct indentation and spacing

---
 .../deployment/do/mcc-ent-deploy-to-linux.md  | 14 ++++++-----
 .../do/mcc-ent-deploy-to-windows.md           | 24 ++++++++++++-------
 2 files changed, 23 insertions(+), 15 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 3d6b8d06f7..2c6895762d 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -34,18 +34,20 @@ Before deploying MCC to a Linux host machine, ensure that the host machine meets
 To deploy a cache node programmatically, you'll need to use Azure CLI to get the cache node's provisioning details and then run the provisioning command on the host machine.
 
 1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`
-    ```azurecli-interactive
-    az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
-    ```
+
+   ```azurecli-interactive
+   az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+   ```
+
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
 1. Download and extract the [MCC provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
 1. Replace the values in the following provisioning command before running it on the host machine.
 
-```azurepowershell-interactive
-sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
-```
+   ```azurepowershell-interactive
+   sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
+   ```
 
 ## Next step
 
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 31ce8840c6..50b3544290 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -30,28 +30,34 @@ Before deploying MCC to a Windows host machine, ensure that the host machine mee
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+
+   If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+
 1. Run the provisioning command on the host machine.
 
 # [Azure CLI](#tab/cli)
 
 To deploy a cache node programmatically, you'll need to use Azure CLI to get the cache node's provisioning details and then run the provisioning command on the host machine.
 
-1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`
-    ```azurecli-interactive
-    az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
-    ```
+1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`.
+
+   ```azurecli-interactive
+   az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+   ```
+
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
 1. Download and extract the [MCC provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
-    - If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+
+   If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+
 1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the MCC runtime account.
 
-```powershell-interactive
-./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential 
-```
+   ```powershell-interactive
+   ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential
+   ```
 
 ## Next step
 

From 9f3acf66226b50583f4d5ae5e4bac870202dc4f7 Mon Sep 17 00:00:00 2001
From: Gary Moore <5432776+garycentric@users.noreply.github.com>
Date: Mon, 7 Oct 2024 15:42:24 -0700
Subject: [PATCH 052/128] Acrolinx: "Enteprise"

---
 windows/deployment/do/mcc-ent-faq.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index aeb5480a0f..e71b65ed36 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -16,7 +16,7 @@ metadata:
     - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
     - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
   ms.date: 06/03/2024
-title: Microsoft Connected Cache for Enteprise Frequently Asked Questions
+title: Microsoft Connected Cache for Enterprise Frequently Asked Questions
 summary: |
   Frequently asked questions about Microsoft Connected Cache for Enterprise
   

From c2ab9a1bc3b7fbbecd5d0f78c421a6d00d207ad9 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Mon, 7 Oct 2024 17:39:27 -0600
Subject: [PATCH 053/128] Update mcc-ent-edu-overview.md

---
 windows/deployment/do/mcc-ent-edu-overview.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index f8a407d843..30e2c0bbb8 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -23,9 +23,9 @@ ms.date: 05/09/2023
 
 Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.<br>
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
 
-Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux] (windows/wsl/about) and either a [Group Managed Service Account](windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
+Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux] (windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
 
 ### Supported scenarios and deployments
 

From e0a2235be1d067408c8e594b04b7d30da77c79b6 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Tue, 8 Oct 2024 12:51:13 -0700
Subject: [PATCH 054/128] added support content and other changes

---
 .../do/images/mcc_ent_publicpreview.png       | Bin 0 -> 262725 bytes
 .../do/mcc-ent-create-resource-and-cache.md   |  24 ++++++++++--------
 windows/deployment/do/mcc-ent-edu-overview.md |  14 +++++++---
 .../do/mcc-ent-manage-cache-using-CLI.md      |  15 ++++++++---
 .../deployment/do/mcc-ent-private-preview.md  |   2 +-
 .../do/mcc-ent-support-and-troubleshooting.md |  22 ++++++++--------
 6 files changed, 47 insertions(+), 30 deletions(-)
 create mode 100644 windows/deployment/do/images/mcc_ent_publicpreview.png

diff --git a/windows/deployment/do/images/mcc_ent_publicpreview.png b/windows/deployment/do/images/mcc_ent_publicpreview.png
new file mode 100644
index 0000000000000000000000000000000000000000..6f6f292d588b54919681dbd431dabbd26ebd19c8
GIT binary patch
literal 262725
zcmaI7cQjmW_dcG8Ji!ozAiB|#XwjnwqeT!&^cF2T5sc9jB}Q*S^k|Wyj}k_S61@{`
zbfV7aM(1}%JfHP`-*>IwA6R3ZIrq8mz4x`Rz4vuOo~kR65YZA{xpIX>MH%w!%9Vd&
zu3W)K6Z`}G$2$F+J@DtM%QGdpD}_DuE5HYQD_J$!D_2UQKqscxfzO1mmGxY%T%lse
z{ajUf#<qFo%6YB|MD_*D7+rh)qoG#yhEJVW{l=76PrS=gYE0A5wmYpx{z&B73~|>3
zVgcftSMl)SNHS5pcaH+EIJ4;z&?Z9N_kHV^D!=Ji?W=3Km9z7lPw&)dxQ$G8>S$qV
z&yIaYWKQGA<Oo;-|9^h5g(scXM?^&I3yFwGv&FSr2qZn>_<#SbrBDq=pM5PU*~*}!
zrR{j~UpL&<Yov{(jv;E~B>I0>g4fCG%E!Xl{%d(QFyVh)XGCbHd@JU^E(?UP{lAwH
zlyI4nsDNYtYctXRvjCJmpG5_7>%TVsKMOP$1`4x<DF4@Ga{sfyXngT|Hgc8!+O_ik
zEP%W<9Q{9gBlw>M%yfX``k%eA{LcdD$CrnfHE3-wWM?h(-D%XujpSANo<u=m-5=+0
zp`2g;d1PMiFCP=q$b7(zuQej9ujP=fH6*03ZWG|p{T0C%Yv-_+Kx<G}GQQ|%WaH#}
zyF|?7#rT5o?QW4BL|W^E9`^2UJi^%7VOoO>ExR%HJ#Ax(d)c4s`Uy1&)c)g`;DxN0
z2V4SL7A6oCc8k!~Ls^gIl2nM~4paH*SUw+qF&b_82RoD{fV6T9nG{2gu7A|Buk7Wn
zFtB>50PWlbBgI~ds@d5zn5U}J4or!##!`Ds9qWfk?WiY37#lej6&954kLaKh@0BNL
zzHqu-9--b9Tl^oc1X&`#Jnq-bw6lkCTF;y^&|gYMMzqG@@qe&=DY@!HvTSmjviL{y
zLtv!u;}|0eF|(2D4v!af4Z?*QB)!u`pWG{@%TsLT2>gtCrHKDoX_~j3kV$)VAmVoq
z=v!8GKcO+~@qha2xYDIbd?;&RWX7Rfbm+A*eNI{_#Fwu1WFz~^9&TtOiJ9ipp{*>^
zxgL_|tgXm_y8)%izdnDi-rSEE1UKGFS0(M@Dlz5iaG0&s!a67x#J^CGjQ>wVhEV+7
z7=)>jP-!nBLDSGlRrCdF^Y$O;#u|H1CqX}fGsj&TmYKkywDp(9hD4qZwxrXamHlZD
zeQe*s8IRSnEr{1q!oK*=2x#W~Ycja;P1HYHBcl4xWNSg^EsXN}-CWMbk_3FlfzDZ)
zlntNrKJM#oV;Y{XL?->hcFhT-?0Mw+B)qWmuq4suBxV1Pkj%RDcL-n5>AT0@Y0-l@
z`keHWQkBgftHrHP-S>r7iFf>OIan}pVxJ!!)3J-34n9W3KDR30i%@?_ap6!|T(ilD
z68>Aa-`edKZ`I*K8{*FL@1rU@1dLToc&41Y#Y-KlCxJHJf0>hV^+dd;?A|Q2oy`;~
zZ(H{*A8qk_>SzZY(${m#cAN;hxJU3K;%|j^u9+VMLsxlni>K;(^WD6nd`oLvv>m>d
zuutotQcSeg%{GdPprpQApPu`A1OSmzT|*hGhl_JB|I1kNB%HAJO)<7ZNEa0=EhdT=
zWq%S?*EL-EzIYs1zX7;(Q$iwYTTM8@=ougXUx+9pGFB+xd!<z#!E3lZ{z2c%+$f$z
zk7~?mR|63?>9&YLgr<p}6bOc467J~6pn`?$YkI{}HOA{}waxfybQ}@&UtH&&X{*$7
zsb*bZ9rVT}?CriLi>gy8D)0Z^fzd#O8ZC>|%RJSXn*Z{h=Prly^QcX1&;D;mmbaWL
z7l#l?;Q#u?)2WwSqB<xpyZh*N1xx4>8m{a*xZ75~Umh2RPUe{3_+-?&XGOfTbl__E
z{f&{v6oKl8pf9^VifQrM!qwFmpyzu1-v@ZQx=LuEW0kEPkK|+^mrvdo4+ST;WzqSk
zY>1}g`@A#`;W;bp2&$UD_x!?9`rT(|v%Xa;;_&48$cypXqWID7LGVb7p}eu+*S5m6
zAy=s}%B!CQyJR*YQy&_p;g18qy~@y7-S$x|&>Fcfguq!-Jn>&^(7=`G5Nq~}R=1(&
zHL;6yx{e}Ecp==*J6@d5*}iMxV7jvW32mo>l8*6Bf{SN|PpPZbjwPh(8yq;q*Pi$$
zP4b7WVdRjno;4Sy7+R00-78yjkJB73k8@AZFk1hpXVIkd0TtRUoRHnug>%tmwoABP
zW|_GiXZX}<XIN{D)hYf5Cpn=H%hs2jZVwl=5Xlv>vnC>gMEy0YTNkkm+4!e7dpFB7
zrRH<vdh&A%QS~tRLjqCwLsMrfjU?(12PscINxS(<+(&fuJjx~Ga9`@@|97dY#T)%M
z4D8SiqO5Z<q|W42G8So84bpXX(30+hvVl@nTG!{i7heI*zAGpLmcfO{5%lZigYv$@
z#x<)qkm3f4FA}tFNY7`@j_I1#e03(TxJ0xJoa03fDREJDOz=17X3+(_Y>11_)=5M;
z2!@s~^)o(TiaKlgs(}4T$6nzoU#>M0r1bdWEO%dgv!%n#I|%on&ZC~QHj-0O*;gZs
z!YW_H%>-EufHvaCj=J=vuCN171{e7k#YA(zlr|)In>c9ja=YNQl%u^U6&9i~j4sFQ
zY8=f*F(9W>cBL)M#i@A;5OAje2JRaWKzew_80~cQ6uUY0W;0rkh<LE~M@m>xk9n<q
zznyRqr4Harpm6+06d|#_>aYoX&9bHE)T1%$z5PBNm~sBym;JVrXU77$!>g3{Ah=y*
zwQ2&nDy+T;n!X6zGz@w>w9r0CM@+ubp+l7RPy{nbq{?OgK#U!S`(W~a4WjtscT#PA
z<~XAtawvpqMCH+H!ux2~(*^MH+QhAtW6NC2cx9Cfyj{L$K{bL3@8!ZQuBgpv#_el5
z35~a&sRty+kLj$GYZrBD<3giM?lP5327Wm4OgYrc1tqpHO5Td9uAGf;emKh`;;oQW
zp!!>_>Mth#6Lr3Uuyr`-5I~yRzB4*}{LV<K>Sy7~ALySPJS6n-JE;?B2@guwL3n)n
zIc}fMm-aOy9qfC=jrH`hHT^pIu%P|;Zm2cOTKZxmiFyQ#y<p1F+$~g$@4}Zb%=lY3
z48CK&D*RG^D*K2ijHh<2FrBglWkoffT7Emh;B#IE?n3gk%Xq{x-xiLjSU9%zS}1t7
z<PrFmlIott<TMS^j+1)KWRVhOV4|a^=LXBUz@z4LysIm<BwEnpd^zMdl_!K@+&&G~
zqH}kQbph|w(<_HwoZ$b_vXbC7KBuxV6a2;z1#(Ucsa6`9z#P;os<EzKE*|6y4fhMW
ziMAn&o-#7AbnoFU>*S;w)e0=OyA^x%t)Fy6gQxgThK{aBMBoLJEMvQL7pX`3ngMEO
zKN=mAj4ei<@RqKnKnV1DMFVqE@~FptkajpI)&2bnT<SXBKxp@G=>7y4iFef|wkw4?
z*4RYH=Jz=31=?S|bdb?*`|humn%_Iq`rgivQL$J^P1B5|e5M}5u^<P}G~v~&8aT7V
zCm;I+j47eMVa`ND(L{|u6v&?)RkN^73S{?Dc^g=kkB?kfPwkSLme7sG=s2BHCkSt3
zx|~w#ISI>AmbU&5a7q}hyyM2faPbgk`+a@ZSdTXa00NXysFKAr;)QaX!K^36^7^Kx
zbuodW7fW9n4SEfhW#9Q75xkW6a7!8Q+4O_J96OHNW3@$zqoOP2+sYSiJWAr7W^AXy
z!&}0|`3H5oXaT9C=ZZ9YR%dkfxNdS^G1I5GpoQ@D1wx`OAGZIOkkH2hwXfw?REgu|
zaiBCK8HHgTw7&hDOsVoO&2`FO-F9Rzki?aQ{ddGL)76!DZ=|<bomc!X(ZGsMjs?_Y
z5!Lvxp+hu|=<T}w8+~$Q#KXD6<AY(Um}(CGcRG600y66we7q%m&)L~72%774^xDpm
zPCT@G!5ir+2ceH)f0d}#RmsJ%i0V{T<woezU0mpsba@KZ1agT!Y1($Zbrj^$g)wi3
z^17qW-?~3Gg5M6RxZozsl0V9hxWBfX2~_s+Dv*VMKeWx!$=$-6_-@CQ%FKx~W}V7q
z5F0g**tm(jRQU?B;kc^uo}ct1DUixvO<Uf50l$b}s~D|;mwdcD4pj1^OG?8~q=j7F
z<eqJ2!I&n+x*5(qyZ?tZcmqUh7^WT7RO{E>Im!<OlZcVkHqw$MpN0e|@BhWHrlH>{
z-9`re^evIK(H0m%{D()IAwlfg`s^bfz|FGw{-tJ|0dIx874#qvV3s=MvK;2dGf6^b
zmQ}gbDu2zqOaPGP3ZyYlaailpm?ecJLwOkI!r1S)9s61L_+jP?2U~Xe*T5l^I>NYu
z0opW_#>gq4Cxo<pmYKpiC|yt-N;{bb!fmANMqzfk;S2l3Cv7g!6^NeIsKWdXx~S;3
zzNv!zk4_vE^mkqsd|7cXcg9BQ^UGw^xyraqLePG!alZr?+tmg^4h^DOyu@L+(+jkw
z`(F711w0fc%h>~Z4;-8SoVciv%eWnJXwpfCi-Bdke;<)>NHn<?SvT&OqQ`bsWtaoG
z8ZQTcG}xfFyoJ^+;38|rJcuukz@lSsQTvkgH+iwPi?{O9CtA5*-s}IiOXv+yKR+OQ
zCu(pPf9LG9a6oWz+#a1?ysh`<-NfI5_12%k99pEKZJp5r-qNV3d>4%WmIw4ON77)|
zCs#!g7feStFZq*ebb;7~n-~dy{i&zR9Nn&u;7SsWBeGxKex}M3d*Sv3{j@+qC1UIL
z)kuJ4gqJ?Uj#?wyt-@$%sOZ`hPd{TiE_*ZmoBD1()k0abYR8WW6DSu!0<R?HOF{o|
zU58>m;L+`CR%!iS;V{C59GG!!z!trj1Y=QXzNt4ddT8!~S#9^Ic%`HTBLJ*M(69Qh
zP11%$Kk}T_bvS<1o@pHQ&|pi-uZ4~U;vt>&GkK;B3rNB*;5_T6Fw8?OAi~hdmRhZ?
ze5X}GGRDHle3#E`0Irp*-Kki70S<fr8b-bD@%QrjdOdrcC*gstAP}B_o&kvyTmJdn
zE!7SkU5SezaG<5_vR$PsD6Qy!(?N?4Td?)QbiSecQPy0TO1~A`K%p{R4(<79h_rlF
zcl(946%N?5_{c5`CW$s)o8nBa4)F0<P3d<U=D6~aLgxI*1-uljP0(*;C7dxJOssP@
zL)Oz)!{b198r_V~g-+82LHC9vk@nBhQQ0?4=W9yH`R?eA(18bXix$R`F+?`FXy3hl
z2}jnf0KEt5)3UYCRHJ`jku$R3IJYb#@sgj8$(q(CpMMADW#HTvQiLCsttM73vfoMM
zWp5g@BlO0<|A1b?-99o+io<Lvyt`zlWpVUy-U8XVd=6?|8a;^Wpd3)gx%0JuPfZaA
ze3M1D$1K%M(H5mWA~i9^OVeB>;bv8=IONN6Z)A+l{T+eb!rId9nTAYm*}g+95o9js
zzqNK<|3NRIQPCQHrlef$=bL%^16NKO&eW)XO-=G*NNBuG%hECP{0$`Mvy?q<g+*#p
z%wm2)nfT;)TtH`0zk@ZOiG%9Dm(|y6StmYWlQjB?vVH<7i*{p@aB+<^61g{0*Zm={
z=09%@mZhcZ2AFsS-RIk*xfI)&P#ufX!g5sr;|l~q4(3n?nD|Bh-c`nt%E^d$?4~~$
z2{S9)c_{a3=5`UQ-o8-FvOi%Jc3AYb<MjOt_b|RRfpYYRM$fhSAI-cOA2+ybX87WO
z0BJGwVxLwl<aGh@;yjN`>UPDzq4f7*;9qWxJjRmSENd2%C>lOFRD{0K9Jc7f8#XR`
zMR0uP)X{vt`{>p7L#WMQW8ISq31TO<nrZ0?ZHDxOzc=*H>i8$+TrKF-&G=oKgb1pK
zCe6VrqNf7U+U6O`Z)_FOUZF%qsTaiPh`YC^@MYMu{j8`FN4jahGm<nNQSeR5=K}oR
z{wFfmQG*w^EqFSfX|J?uVZ}SuFiaz%n7ZT}yjxj;`K@Cs*`=8GD;^2PhD?mM7bgJz
z*9n7?s};Te%)g;FeqyX#DrE{|H4-iVsqGLWdQmib{^Pdys#8>FO!)Z@x~rf3s{csw
z1C}*0==c|V;FKdBI{JOna8ByPamk9bbrZGiDtmcdL5EXZ5Drut^qz~8TwQHV+0f%}
zWpO2Ba<1;HtE>5CWkW<nMES+VeYUo?jd=w9EZ@F;%g@PawzWepnfa=vjoGbrq`h@r
zZA-(8&9_3?up$6R6svd@%xHgcEP|KE(tMRKXNxIO)GHv6df&2i(vmu=x6&?;a<o+K
z_wc7LP`O<XS~|K(yf@Cy&cXPhM@OECH#}mjXsEuC%U7?-xw+@m)J(j;$zYq8`X&^E
z+^B;tX9ka_in-)xX4)~~z2xS)e}4i7HZ)aGP*|60;Tt~)O(z8Z*_>^{e94Y1%~ef&
zPrBhuP%kmRBY?Cpi=>G5CXfJVV9QR8vsi_Nd~Tr<0CaHUCznaySvTcAADiC(gTEo@
zobnvRawGzm=4L)$cdth*rF#_`fl0F((PIdQ`co`|HS%F&2&wFSE-p+Va=p|%Qmkdl
zd#9V1TGsO#+>un~r1*5n?<_CPbwC9>6F@rdvp;Dy_*u<vgoYgtJU3$E=a8)wRq?&3
zZajj0?)Qe@xtC}~qKR*n)J~URh41On>u3G)vJlU+!=*_{gEDK)gH6WVPgxBdzRzrz
zqIxTyE4~8!2Z1KmD=K-e^lGeXz7(@p)Y&ADBl~b;$mOp1zZ5!@v2b-v;7NmT9kaAs
zcn$D2(%IO)^C?qffdnqEF&~^9jnr58oh|uQG?B_oK+&V*(z#lj55$4zz?hu<F_|zE
zGUk#c`*u@&nHgnQRGT^?uM@&t8xkdb)aJXBGCewGmEn+-l%#EBG-*FYLC}B0DYs{n
z__2yg$=T_#L<9WrEiBMF@T2RWc%5-Qt2E2{Q;gH3bA;*A+g55b)7MYjMd8YPbq85=
zBkofkoZhe~*|tgQL~7L7d?|VXAY8*p^pK_=ba<4TuB5toyOS;-$RD<AbPl9Gloz>8
z;Sx^C1NffXVTSdBpe6WhdZPTCuhiQrGr1lYd{cK{liRf<iy<RE!%Uxb`(hCpW1}VJ
zlXFl5*hcMsDr`4^>E!3xX0Qwz3}$&)v(-YU?yan@?&$mkO$0g)xIqdv>&a1xYYb)}
zP=;MMdehF1g!z`oJD@76ylKuU)E_p)w|f!12rO>u=;*NDS?m^ZS$x7Nq6}H3fz1~f
zRt>CIEiuvwzIqZYrveRJzYC7n5*}CW48?Tu>p=(L+!78S@<mZ&<_Jv3Ju&Q0gX<#e
z+0VTEp69av8L3(u^fb!C!KqaGCBMyjYT$(JNPdGv$4eru<<gA=G&$B7p|b~)NK5T^
zJ}H?&k64Zb2&8Y&zkUnSQB+0>_B=GFCcn!V`0aR}>D*f8{IJ(ZS905oH0=RQzxXAO
zey}g?!`Gh-MomgBR1S)-&BC{i{_y#YecmDpxG|8MXl(1XQCm3){8E<;rFM)qr)`at
zXSzu%)aH>wuI{K2@@7&EGFR=fnr8{cezYf4_Gu>2YSX2dx;eX<S~3PbT%h-|b&lyi
z{?;h+XIQ_S5q1F<+?QYhF;$XHJ9RLQF%pvQ<yC~lwpWMnbMpDI_rCJcbaWf<*M&=i
z%<w^Nu*?b9LA9PZ>!})#*+H}IKZz#eXU7{(BZe*!My~w|>X7?)`*>uPWM95COyD)5
zm0tKML9oF`9F>WEyANVPW5=wRkn@oe;^=<1@qf&_4z{ZEmes+xOuK+gV7a8xRxux}
z(0pBQx+G2s(wsvPY&AyMBsl4171>jv%JFB^WrG@(*Zx~u>-%eW9KLE?_R8U8`JH?R
z6$6E-A2w>F8^aC+#?s5e$VC9!&FVyLpst6K(;;N>Bqg|kc55=jPE@(1Dcw4rVFN#5
zmXqB4dCl=E?QBS`3qb@mRm`RwSO%+T+dc0;AE?es8h%vb^rTOM<738tXeMuJn9fbF
zE=a%wA2=WEag1ou2~+P*i~RV@+R+=KZ}e3=#fAp+<~MZrvN1#VI5}HGBw)0)*m1jV
z8y_DJwa1T3O-@&J94AIwJ2C>SbhErq_eKiC14yMuE9}Q^Nl!SA54<8Zr<abZ=+o}n
zcjp#QmL@Q#Wn3FxbclX=++-=}eo7;Ax;yAdd}j@fMlbG|W1^Z3Nf%WaC`hDKPQL~_
z#c8PO@zw4=t0apV{ya2lV%&*{Q?wXwXC))I@EQAfgY#yutN%bdt01OkOK;duC8oB%
zYM{d|%TMtlmQODm8(@f@TL6jfvpLD=8qU}!!)a)Lpg8!w;B8Qmq*mJ`s7ugK{Rn2d
z!O$F7RwhK997$%t<h?0-Fl01Z=YwSMT+W0pCRyowdRC`F$8FT3iGmU4{O4GdQ)Sal
ziLL}blc~9n!9iXS5~`tInR9Omzy@i-gXBu|vo#jdzy=q8xn)ex1~aW=<5}3~K-(u#
zoI}ka6z+so@0S~WHDFH;Ys9D<>|4U`I66yHE%eq2QyarFRaL9wG^EGY>(70U(TLtG
z-Xm7qn)9<`=(Nv%m9N<HrvO9!0hXHChTBwEv<vhtm6&|WD7I<hGR}7M9Gx@DhW0<2
zM>?CX!~W1mnhyof@AB<Efo#suA01KG9|YBIHiD2txl(0$-9L3BX!si=rkDG()1E3y
z`yCBt7&4aa<;1C%1~YoL5xz3TSx&BVcV#e5Cyi<Cxw_b|z1urdj06g^SV7*h^M)Ht
zu5#paB**HrTT87UbvoqUO0EBx&+-h^6fx^v$;+6M^gB!qrxWE}J(N}MTnd2pF%Fo#
zZn!Sudji|nV-T=_fA3AFjKNJw>O^<aUe7>sVg$z2C7dCj8Du1zLc*+~x=VwpDM$0#
zwY0O<a4k@{qsC=gVv$z+R$}*g0U30(Iam8+n1Ps7%s9A^yL?rD5)SI8-U8ohBsZ3X
z)y+(9SJt2M6fXUf)!WHekCwbgW~v-E({Mg3<*7SVKNrenI9g^6`VGIb;Jgr{B+ei9
zYfFjIqnXhQ&5u0U?wm9`0T@BbFY*kg<Exs}298y~2)WRhfV+Xw{#Lh`H<^20r$W;`
zSHD7grS?bPUcF{04!J+>J7$?UHe6sJFB}Hf7`o~l?kRP&oZZtSwnSgaEMq@fYy_bT
zga<SEj{Z^2U^dib#ITS~DUCkLCkQp76LoaW>`wPsyu)eMCyg(J?eYMye}W&YY}S9?
z&Y9tQ{FMCt=GVORH*>ct%zlM_kyE2tg%`_Zc<=qznQe0TT<h@9nNpivpB(xTz6I}r
z$Lsw`cZrf)4MEP2)z#OBb{Vk&a}UkbU*{jDctrfH^xRv0EpTIwY`*10A$kjAm2nTE
z-J!Gzu{P&@-W$eOHyXiW-dz>WZ{8`!DC2j$w>FYxlGGH=l%ciSB}p<r_{^#0ux6*n
z&XK~8m4m<jfJyWIxRs0h)8`}B^D?{uw_u@!K-iMFlV{^yPm0^tf+!I7yEoV?ge%?p
z4RJ)=EAlca;T5-b0X2@{=!5#F0A*J~zVuF?6hQv0>m5@2LFPlw2QE=ohd-?G-b{VT
zFPZ#hj)h@q_SB#HmW_{eKZK2{UJSdA+^Bf?o+haHkq3cbX9AClKR%eOWlnNWx6;uF
zaq!4@#K=93LeH`8@Kxe|<+ShG>Q8>E*;@BLAdnXDuj7ZuuqstQHKtcO$Sm;i@aV?F
z2fyh1evO=j^j60man~<9<C}YpE;g9)@}8Y$koKb~_`L=9-&#6i8tkhI9;r$wGS43I
zHSUo`fS=Wh@%YTHDWs8+Q1KcrPwl*a1d(~_G(BBaRmBs@*(f^gJwGsiTRu%(PHCLD
z?8dwBqf{U47<4X#b39)UF(C<-I&>N@YY!2_WljmvyAy6gQq0`^XTkJu;HsUH1d)3H
zp)fq&#3$-?Y60<aw#-$a91$dRB0`lJVi0547=P61LCin>QR0HbT?R7mWu;Fx<vH>C
z-MvM;>&imJ-i}bn4Nae)?HkG6IjV}%6|(A~AGtZr(XxQ4oOYzrDcPU$DpEL_{Dq{u
zk4Y`jgH9A1DO>{#$pYp#*?d-Qsh;kW{w()Y3P*z-FUQf#gFt)W_pqqGmQi-Rmgu;S
zjWBdR98bc}Fx?39P$DTmg%&(u3DnIKZnqs70ftN^OWq#r%F0H=cr&m!l;bgT-;5YU
zyvE{6NuCt=mhl7WaB9$L3Bmht)_OX}9}T{{*-TYs8GdITVJ=eKKTP~i_tf#t$far?
zZLrk0GWkuECq=s(=V!@`^1(fW<##<APn+Z<PhSHeB<{>fMer0Rz~DBdiCkcq$m5tW
zNq^~Ase~_g0_Hi^4f+*aG0-nEIE`a#c%<e(b%Ty?(^z#hT;m*FjQqSbL2csQ?~&4-
zE+t{BA4t6@zGBsrI#xriy@`1HmXfiPdDf?PbAgq?oWa3~N5+r5f^0FX!HQ%yvdX`2
z)l~hss{Unz|Cht(Hz1E8ckMOc%GYm`U|W-_hMlb0ERvoKQ#HAe@UNT@>WR$8J)?en
z5gU_Xe`BNHYDQL6&gla{`ha5b*xD<icFQd{;_Opbx}l+&dyW1}9kupKP&W5yr^RIV
z=7;&cF?ZEeg8PBX2KWkWd}qZ@#EgpE6~Wh8US4G^x=A(Zb5{sI@wIfiF8CH`2OZxe
zw+~PXgPf4yeF#|c4$F%FY`y=?FIfgX3oBV^Mpy{U=`KDkL8vm!r|chNPW12Q!!Rly
zA|}VH{#2P$%LvgaSay)|`@8;M-aR1WYSt}twgZJ<TOmAG@~cSfu}18(fhSl@hs{FF
zhA1>x<>s%~E{G>H&fYK$^YNbxdTm(mTMN=s`l2MW^pO=U3`yUD^gS55vjwkvnV(IV
zidKEE{P;&BjM<FeJx?uVcp}f6*CVQm$;tcBa8pmwJB(cydRy{`fR#~Fn!x?RNQMMc
z&hY5=aYuB#YgZq!gu|21B>I~65=8p%J8{#k=Jd<5epmkole@8Ec|?NYQ>%^qqOu0A
z$Cw@+&}6!jj(UfCI=!^(<e~Wvx~9YfN*=Z&phx;(an0@d4o`vgNM2D8S#63nKq|-4
zRZU)j$si*7x2<?#iw(batq);lA<Eo8S+z?{o;*~OY}**OD{`CtwMiekC^i>#eO1h|
z<HP2x(NDVI>-#ThWFWkaV<j7Xr~A`RhlhunQsR<uayT*I&fW+e9m!=-Ah_m}Kg$+0
z4?dLK)<>Jxzxe5se`VA@KB$R?KZ;CpGiTdXNNOj^IZqw-jC}h+vcq)UWJoMJ=1*;<
z^x1*AXe+^Y8jZI^gURrPsOOC7TDvYkq^Cxy!^O#{dV4jn*I6+O?Q!mhC;!YM<THMy
z*cn|9JN5JB=?%Hk$_ge)Y#(<zegA6o9;+bwt2+?}*+uJq&VftFQkMyNS?l%uJDq<-
ze{_m!jd9s^pi6>&K__udGjKXx6?AIU5a??y?43B1BVQU88a*`TSkr5vuX8m^uSL{#
zc#IPQUC@$d0?9kNx;MR`#ZMz)%~{8*zrUwUN5zvi--@YlKrL<)@^)~_J*a0_O$a2F
z@Rrh3)@W{O1X-mr5wFF6_^^QOkS#VNy^DWu3dDDG%}0@mjTU@U(_i|g*EP&d@{m)v
z%_~iUd92`PR%K#$zmU!G=ugY#J8vj^LK2<lTdKDHoCe$!zx%nQlFWbZ7q!WRp*ueP
z;sZSO{5RSC$?(93UO?`sBJ<hR`N1nY|FCgXuvc=hW@(^ye`;;<O@421u*(Vp=2F1*
z#qL4MnMYEZ`29hiGYJ+Ij<rwxiR!dTrld9TP8sYvYsuQU9^OBHi%vKr>HZxU{cSCg
zhqKFL?Cj9VvNm7-#3$hd5ZV5_HDr8odoRqTS;KGYY1;k<T8)qla01P&0*xfSKbZKq
zaK^*mnv9s7nu`g}4xS~EOD={F&^DZyVdm#*<LA;Sn)y}{9~p0UCd9_hMa~K<_|ZEz
zldt<tk<RV^^SDe3mPl4eOzz+wrVP`HNyl!wd#!|vRC0WQnRRDJ<|w%~n3Iq%HiG!d
zu3r1+p)A2hYVnrz;rt)@JF`9!X7O|p!>dn>2*=ut72GGBm0S*I#Siywno^wVR#uy>
zD$9F=Ib*7ZZ`-#Ql%tHh5xz|VhIf(k?>jBh%#A;stkHQ?@H*rL=i$1cSmM8xTvlu2
zV06$Q66`F{usqjHniMSR<4yTs1+*;6U1}<0_JwGH6OlGA6l^^gDQbK3*qsE#9=KfF
zOu?%Awk2gY-D}-BtQ+P~ECX74-!$>7lXHAdirc7qs8&h298#kzS+WiC=WKPToLpR`
zTuWt^)yR4I1u^4{4W$)(lamIU3+ZvWPRc&D<GtIj<X}r`(_}0b-PY(^bEb~J+RFF{
zHr$meCg}apR6M)8fbf30?)+5DZkG*&rMc|gwHwtg%1pifrU%uJA!cW#Bb2Swe8x4Z
z3}$y=SMO_*w}<7GEb3c5pYF4!82K<B!YY7S&Lk%X9OQ|Fr!qv@)57$fLyy{t%RO9Z
z^;}AFb{}qvKfd<`F=p}sWwLa8{7>9ATCQ<O*n?h0D0YwCyvIaLtatb`TU}lNS=JJT
zM)+MWE|<A0=}ObyI}tlI4WQs+N7x7akVK8LUtVpUoi1S`R%ve9prX&i@OTq4zGh~k
z?lcKeZx}V%qs_vs0x>bM*{1GjK9(^8>i1Wg(p7v-?qc&AI^Sda+zV#+Z+HT!R3A=&
zl!wSkCW$yCQ#8@cLssb`daPaS{6jg1f4B=t`3Y)_Qrw$5lkI0Vq_<)6+11pEg4h)F
z(6=_hYnHlGM&@+wqNzyP2W~m?F{Y{_3EM~XmytbSWX=?CO01>QO_fUDCZHi)k{$dR
z<=ixgnN_&1ZFt9v?_vz#%JZ+UJo*7Nqn;f6=sFY1`x*3Yr!i*dVQA@3-nc!e`MQY^
z|Hx+_ZAZ5~2LlL&+^*qV2s!tc-jDoE9yY~&lFoAw&MPw!0R-f1#?mEJ8|03oE+MWa
z-dhS`LR-Med<0r>eSdt`3MwmB*%5AQ+Lh710D&*tBnrKbN8^FuByqUW2-l<v+yAaz
zK*VWtHS4O+<LRRZ7U>WLw(+RLZ4^<~3_#OYv6FYCJY5mNY6i=fu@&K^H0ZT)SF&q-
zJh7o{)`N*urlq9j<8n&nlxHUcXFl6$>RoRUtKM|Xc*y7-Cqo;)tOsUhHNDTQ8W@E^
zb$pc+O0OQ0uY5EW&>OkqLd;^b*#Z8Z|GT^Zh@=wE%K~^ZJ^AQDStGBLFfROjd&2ku
zfl|Y3Hvv5pVZI#c%~vt;Yl;SNX?e-58?cQo!QQg$NbwFr>C>Y<1kjcW(g;h@$p7U<
zg(Uy#d)R4GeHzv{r6xOyY@y()e~_D-3q4xNL;6?(+?Hmr6Q4Bsc%y#$H`4|^U$nDt
z{&m>4A~9j8vhP;<sT;uvRgn|{?+r%Sr|%{QHNf!%rdXd&Qnh73`;?yNsXJ&rGN<?V
zSF$Rr$_77G8f5Kza7J*CAg2VMu0ust)sCN9Z2#R2#@EI+9~d<9i9fUQVfnLoVe|?q
zDdGHJCLg5t;r8b2tB=`t?%d(oR+<n$*=#cMD>6b>{5oVDh@chj_?=c!Np(~xI3rtV
zHO1wc4pw3Tlf<`I4@c5`aLkMBC_bD{NJ)>uwUnSTm(GQ1Bw0&l_$}gX2?!&krg>=+
z?UusF?v$!?#3`WB{8doQkfiE;Wl6RuvMehKjgzZXm8}tURzTSvg()8~9<KL0|I+xl
z#@mc%>Y7<sgy__AjVVwd-$a$!#7Qu*yuE%D8+)sgphsGvZUS}~q*wJOm%?24i62nK
z8A-J#p6G41UL)L~*{<H{kuV6fnBU0D@Ew;vT!>o~*SxX1+rd@zLkLbPotmcM0wg9e
z&G%9c{umY>j8U0&3<ChiyslHBx4DuBJ#Uf6v{CfG|8;&HMD?S_Mu+<<8x;X5ffa#D
zIKP{5t!McfXUC@~SZ=q8?_q8PgT!!<4yfl{WW`@&Gy#<i20}glHoBSqW)B6Vh>(Kg
zp=>;vuPm7s(80AH@%xaGk+HFeZ{zXD8+)z~)LEd+8~yLA4Sf&)@RIl_=(c|PwA(`G
z^pKpe<QB_^`BbH;lUmD8Do(jmph0NE?|v`1MDEis<T|2P+HR{VONv!7yjcFGSaZ+A
zd16uCS?Lv`SRz}@H=D5@`Gqf;G12A%dOEab>^qnW9T&`TzL6gifJ=h@^2>bcsAN<-
zCVHn_<f!Qx^3}Iy)}(yl`5osmE)T5AGZYm|5SbKpGoB>5?iJE7ne?0-Hi?6ofJuKL
z&}=_Eku+>X$Iv-Qf=Z3D!48il<kuT2#8`H)lnYQ;N=uxd>|lzUZn}V`jOnd;>Y2IQ
z>d%hWpt!z4FN3560clG*KLI0pD^NFpKu#inIh7u0BROU=HM|!hP^UJ0{SM^gzLJ|*
zT^+2Vu3mxbp{jq(lxir$b$+;_j*3mx9&$4uNI5K%HYZxcNSQkxF`GMa5cd}9f**6=
zjq;VmlnqYM#BrX=F|k$`>kQq?OPw3XwTC2P*bNnx#-AJ#uyipE1nyv)Y4;;P-&iD^
zqmjFHsty;G(I68g53#<s^TE4u#!}&&UuRiD?u0*BMb&tL4$EQYTark*ml>4-n<GT7
zd`_7-X2j2K2)H5fj<|_#v!s>L1yj3Ty*A<dBAjq3@Rt$fGp<SWJER2UTlj^`O^#Xd
zuH}STcX<z<gMI%Ik%TFvnnC(*cO)%14#Oy6_BwfwF8S59L~4Dlw2QeoeDYEnu`KdB
zE*Vg;y42+t%hVe$W4#)h=2AZwy9p$5SEosdjPRy^wA!ivT6SbKA`I|tGQJNpF=Tc!
zG?LW1Ppr1YmN8@idc)pKKv53sx-gc>fXa@pBtgt#ic`fY7S%g;^#=V+GXZu@MNQ2?
zS~TXwpILu~$G?&&Y?Hg%JaAcFS?=k}1}S2*W}xIoCm1+7;}O_=p=hKs{Yj>7_O7qk
zqWzYRMg~<$@b=dmdxT;47$GsUO~FW4SaGwzFAdNUptwgy5h-&9tBg|5_cpk;6~+JP
zir8!*MJi3;!J{b{qPYI1oN8H}Kei$X3%(`bXYI~SeixS{YlEw2V|EwfG^(X7Z$9%2
zR2pD;%dcVnj-cI8YJb8d<rl*u&8e8r(e9Vb_2GOyb6ksV;_ySOAt>yH_t|E%{E*zI
zIZ4U5WgY1_80vcMtbg>#$>EMs-I+@ev!XbbI9na=UjW$TZSg=aA5U5K`_E&u0fXo^
z7J;#Kg#3-%F_r8AV6qB34zjwSVAY|QwI<KY!J*ugZ|L@43ea{)U^czgQUoCRFSwHt
z4{BK&{Ya`hX$FAae!z`?vPkjd%6#-BVPehtU*5wGH)ZB1TFrPiuZ0~*yVA_o5?oUh
zhxjvxEK<LBA-~#|cyf<(ywR7;gtG%oqR2Qa{tK)>4q1I-GMG`2*6EBdIh{V-<3uuT
zyq%L#qv_NfzB#IxE#-j4I5<T9!nri*oIKUhQ5>Jc;~Y#EsDq$~KQPsLE-AR?^l<hy
zRMy&{*yO7@cox*ocThDaJgO1WQyv*>r0*o!)#Ds?7)%mMpaSe(V3FQsqi|%0yB21p
ztAZPx{!1y$q6YeuQ}@KZZ1h5m#6zOpVy<twWOIM$v?yI}S^CEdCL2RxaiMPz53n@2
zkNFW}1MTa)2OXVxkz`+qYT(No=WiOcUrfwhpVGuNw~Q_eq*3!1BO>Ejd-2c>Ku$0P
z%=ulq)UT>=#FcmV(8ifp_Ow?{2uS5#Fu%y>2GiEr()TM^0h7rFJj3)g0EvE-W%N@5
z^mQEnKGyHv@50ms%fmm_J-2Zw>rw%1R@rpTLSlQ({zNGkI>uGyxOI%?m#DpGA)trC
zboGm^@9e61c9K+IJpZ`7n^Cq@&E5Jjx`n5KfQaL^3tnHR1cn)%3uicZ7K*r5OwGC&
z<?Q$rVm8GvWf5GHYTHVpfv7Txw>ig&)yzaMbrn!9K=8n1|GlD>`gWC+q3(g=qirwd
zc8gN%os8Ttj)n195-p-V+$qCvJ~tkGsq>_}^qSrbsYgiLQK2wMo{yC%R}num@tM6J
zACYi~tU5kztgRBU3IgY`{Y?Y;)0;vPP*^g9D0niGDanyD@^NJtr`7nM=LmH5oiXf^
zM-?_v6pY=>!t*++g-h)izuO5lD9vp2XuFU=*j>sQkP+LfiYds#iNe&>wLn(M=tj`2
zKvKR>%hJlpmYB$4oWP{vg`%O!B5@c+m_1-$PaTJuk-b+cZE?etFK_f6pC}=OFZYK>
z@wsaIdae9Fxud285c%hrWz(<2PLOXXiM4R&JJ8d7ZsZ0=a_!vs9f_Wnh4~1j1Zh@f
z9T$SMQfEBz>+cHo%Hh(^)q<RF4UfOm<>yy7gd_kjF!YShBfb^(do+2>A8C*Lz_lsX
zFQx8iDk$X;3a-Tt-3p|aFfYRg%!P>PrSxJYG14;=cB^in0xpNN9)Qa`BJZTHHebWP
zuD4NE{B)riyrlWTEcm8+3F~`EAXpOKlNN0%+TC7pgBno2afR8BQ?plCm{<A48#~-#
zcT=a7BbLLLJNWw5sjT|FqWp2pU)hGsUrsq10lWpIFE1~jQPT3>^Ls&&yH^=8tZ39j
zB~|^Px&$~(L^p;<M5Hy{r)X5F3g^rO{p1M_UyHNf=Z@F$Db{FM)HXqh6z@6OA4-5}
za>r+Z)B9-p723dc2fHNt1{3rrNW|RXYr(j-4Qku2AgA5@%Qq1)*>6!H{cK)|i+TIs
zmn<OE0Uw_k894ye3eX!6K^2<@`0R9x){fVmF47&ZqnyxdPIcu~-z&#WOuAn)-m((n
zc>@G-k0^u<oq1hhedVv-66-(GcH-1InJ(f-^KqhPBO>1_nIin3&p%3<JK@o8f!PvJ
zNV1WzR41chv{jSL-BQtd9z^f+?>xx-9wQCKz^qO5sNie26!?Xw&Htq!uH-O=_{2oi
z{<NPH(1S(*Q|VSJK4W{JW45}7?a8`c@p9J8%VRwcdfJSE4lmnFP>`|#E%GPB?C;+;
zFQE%Zi1M=(EBgSO23pGy+!(C8>o#@IkA`N;FlLV%wf~Fq`1GfR)rnu*%nJ$M7u6u8
z{gYC;lw-FfpES*REL$T2e)?WqVu5}vQ`Yohhq>fhpmSBImT2<r;iTI_de8zreKl3p
zLVlE?WyQU#szkZJN^RX2HT2@uERU<7^2x1N6?>`eVHOGj^RakR{^i3)k9>S;**Q5;
z0I9T}Z49aanwiq(VN^9hvs2fixA(9M(8#^AVrB+ZE(ic|5^>57^tXFej{J{sK$ulq
z9M%0XDhxf-K+a-TpJ*Y~K%mhIJ9T^+i#dN&iW*$b>9>JypggdvI=L0upN507o0`64
z`^QkjYaYB9BrD1CM1<2K7=Dv$E~OA5%KyCLQl-VzW+@s(Ph0P7(>XwWv%9-QQ(~M%
zq+SkYjShJu?h(>1y&p7h5V-52T{l((MqK~(Y9sz*0k`n+mo9sUps|tLujsyaRcI+e
z?lyBa7k-*y%LLSd|7u>c;=X?Wj&Q0!9rj?X1;~WDuB`GZr~)>Nms0<-L`rH6gtYdq
z2AOaIFply8lr!AO-FSLczCuzzVVpb2u@U1nr50^M9+ynlN82CQ-d*ca{8&9L96@nR
z#~>r{`>f=_G*tl~B0pByx*8j*m?QsCmU-J)9u6`1)?N4Qfq~|bwbPRD=){C#N<3<m
z8{cEr>Wy);u}x`6)hmi*d+#{4HdO6mhy8tbv*)!O!bwF=PouNcTtHn^R7pI1!UoT&
z$dflCA3NPj`bG-|$5DU8VQ~6i!3u=a|Hi;)wUp%RImK-QDI`}3Npte7d>pAGR4WHl
z0EBr`aSX^N#-RPp^r#Qd>CQZF0r)-Jw43nZgRVnC9YCHipG3K*o;n8KR4JLRi(Zg4
zw3zHo9q9+Ds7s2!vHmtG%s0Z}XKXfY`CHf0C|kHf^P$|8uOu)^a@zII0Y$IMPYuSM
z4#i0x6172Ox-}0eDc?8xlYrIwYCaC7aT_XePec~aECg}z33SU^+!ry>q9y;h*(_(c
zJ*B#B2$X95aeq;186qGk=+GX^?(^)Cr`Igl3yQUZZXE~_DhrG;3P5r|oQtF5L&=*X
zab#I3gMEE3wY0Rf_4RE5-H*1e?y@nt<G1hM)8Gisulf09D5v_#n-b^;26f&Z2d^u0
z^Ygnx!@|<?e!xk0!t1to_^jc<T^fsDmnFPYUswi{sFh6DL|gd%L@88+Daf_Db+xgk
zI@u}GHcOpJ`@Z-lRr+vxYSPfrQaFN_(iHrVl(i;|wrhJ0oQWF#ATn-HMIyqL*FeZB
zo7v`dGe{wR{XVf<{4a`RSTE?wE`!g3V&+(Btnx?6n#wnJtjGK;qwFHjE;7U4<`5u|
zb^f!{E8{dpcbB_tSKFZGb!KfX@FVFSVf2u9Qa$c1TO5X8!pF5DO;oz|v$y^$gEw%G
z=}}8Mb`XpBjhc^fv9b0?yDREBVnAhip-aL|gx2?f;d2F0u>T|!^?Gx)J}axS@W&hx
z$|}Prwbf1IitIWt@k3m@`S9mrR}!K%=*K!S7zK=yF`oi%mQJ6pyH{+~9gCot&NgpI
z0L3_F*ubfL3}Gc<s=iAivNSvzBmW$&(~BvdCVdino%rgKXs^=Q)c&u?JIB<gM~7@n
znv}ep$yKE$%B2A}*ip4kf5xf5{?-l}(S%*ee*5}eB6(K7Xl_IWTV;cB_tZTambXG)
zxA#mlztmExz1;R$l1f~*lT088X-(JkP@8(}wN7meK+xrjns9Znl+>gL%O3kxn|>UQ
z&C1d3-p6~EoF*>b+Cvk^6W5L{PLq&s<@IE5Elf+dJBK0rTD)J_I{E3CPFoJ?0`HOi
zE@Q0;A<Np4{dh;zG1cJH`CgG9hH9-BnC~LDJGe04z898u@*=xx_rIH*cJR!&oTdAh
z7F8|M>Lj{P`-pn~Fer6hd3HS3>-*~bsOWqZzglX{Z;}C$lW6SO4u~!IBzF7c(_XgG
zHy<1aQmDT+Kkqa-8#voetk>1o*MA7=2buDv3AW~;iZZ56>ltXsB`nCvt?CnF(Sb24
z&|@?u(#d!ZdQSJX8~bQ*&28{Gy0{_6yU8+$q-15Ek7G=0P|yKe4ZM>vL<^&1q5tzc
z*(W;6ddPZko0gSPQ4>GA_yKtBhXO?c8M@|6*$=kTddj(UeB9f8lkYBy1i1QJ&HzBg
zW`I+cWst{^MZ*}d<H3%kInR}r#_wb!ECuvLA2g1q2?%uFnNk5p`4u}Ye@25S-k?7x
zd0@9oZ+ZEd=UP&ZAR`heNW8#-%aWV19)Lg(jngSGz-HcIPj-4y)oyDO$8ZLkO!W5l
zwml%(5wYx`q*k}r=pTfz$suMNg5ZJf-8lUYFbH%z5b6)4jv*7gK}<8#IDY5>C+~?|
zGi=TQI`pWc{f&(y-Cf7~wzQb)F+J=WM=y0?PMzcKud95VV~CBM@k9ebo_jpbs_MOO
z68tSK3~UuEaxE8iAA45R9;+o7iLn3j6@1XH_rnnIT#7p0_H|#u)>tCDG#yRuA7%0n
zJMu*gk`0^?rF0WhQgL`*)a^~yy?R2Lgql(O$tD(9OAiYfcI>lILELL&ki@@lr}h)R
zp05Q4@Y1ZzreRdP#rK?efp-#eM(<_6nUpJk!m;KH9ly(W-xAf%%32gyC*f`wX>{^9
z^3=ySQ|(;x)>&b-y6HyXC<7VZJ|H!LX3i2+Vu8_xu7iWaLD?&Urj{+KJCOx>A<7a^
zbTMm`<N&Tx^#U5WhOnRHtcpK2-<j$7g9iX%1ieckd3BQ5X3F$QOWo1x_f6CO&MyE9
zv`Sb+Z5U6Oo*$mvJl+HOpq2xsYl@p3)6(n>;sgtrMF-y?1bH}RJG<N8BqYW;cvO*h
z_I8#u*3fgc^_KjmE5$@Ns9?jEvJy{^soh6e!*=ZLe9^UhYjj=rSG()DZHvW{_C#*?
zgJ&Gr`oDPTKYg)n{1|q(*1)VHw<BNQ3{b1WC;!b@Kh64pE~68WlCivIs!l>R(VuIo
zy4F)`SW1-{ENAsO;@nJ7_wHMY#jNB5nz3IW482~dlysk0G*;XmstRIdfsAYdov0th
zFFDg;Sq@V*Vn8Gg#6j5b$*>=fFiw7UtV)q(<#r?0#c$D~K}r#$@t@$kb76cfl)`ql
zwrJdZJ>&djiI<Xf1+o!zLzN(@VnY?!-c^*5F0#(P-rF(w)O6-1-HC6qrG<sQy7p(w
zR~)bO^z^zD($XgF0kYZ?O7w<@U9h!>J_X%zsP$>$eBpcvI?7OFWpI^9lal6ptT^I#
z)t-o0m2smcY2~L+&Bj`Am9_6(9h6Ie^t;*dud+Xj;-#$rY4njld>7!8*cN|xbkXw>
zR1zTQEb9;KjBU4&`mIhEZ<+U!ch@K(O;7|?n4D}LphJZM2J(bXL)?MN#D#a%B``wN
zEs>iq)2>bl!zFPE@#)hUW7Msqn+>0U%$NI%z*5n(anCa=M45hng$M*Px?2ZPxZab^
z=dHiJ!p+CRxL)-q!2s=Ef1CyqeKIPH{m|&O2*^N*Gp2}79~pVeKm?E8pZ%(-yjfIs
zJ?u}zwS``>z<b2$t<yEF{L_AL;ktZX(|K_ODaGxWHYN@B9<SLTYP0kkm;xqDE=HQc
zrKsHXOmL>PHxJY^`=HBtm3jkli$3MGLBRY<X2b^uCtkK~576LL9h$gKxuEnKkS%)C
zC)Wcb>g-_zr@nwGN`<-y1_XJK0pM8b=;Fo`L)DJ962TS@<eN=NTVD5{Pzg^+sE@pT
z_1zaEDFr<FmG|2BMEFtm-jRXXQ)Z_8HZ~z+SX;#8&I+|0d`f;ZnRi$?+4^t$3c}f^
z1K`kTZSBh#Dd`<m3A-ns)8=ZT!E&)c>>ff_zi=<5El7S)v>F3cFAhJCe^uD4=Eidt
zJ0r-z(i6osd&34jpq16{MUEv06O6j99QLS>{N`w2SX_>4#@~E6bEWdU7m#DD*W@&T
zre&3TrDf4hE`X*NS(~Kn)l9B53bcAnGklM1cGR?=Li8)_lfEB^-w{LuP77VZPP&^c
ztq5AQk#TbTGC#&*)QcYi(zKM$9B)Yj-KQIOaU&v-i8}xY)t=YfPJ7Q!G`vo>TFr@!
zfSE>Vc9iruAb69hjCwYDQ*43Eo%re>fEPGAa*n(UW`KS~!1hc^%z`9t$bvFEo2J7@
z01R^E(kU$a@PX0`m<~*yhcDqIZ(m)k_Du~SIk*9t$J>vTYc<%RC~@3SZoPKjSYq*`
zxgqViAE2TcJJ^~}E2fG7nzD2f(EOB)I_`n3JLVI2G9G+TfXTO*A8gL@qh?#*@BG!@
zF=<4yu5NnF@4VFwNi_X2QQ<x1UzW!w5f}UI9|<4t<Wu{f&|`LEexFg_vx%F>n4b*5
zOIY7>KXa~!P^vv53RMQAIO>oiN2N%RRb}tn1j|yT0Z=C>pEooS=20+ach60PUv*B?
zsbc0#3!PF{(U=b%Sz(40u^xO<uL<UXoZK)GCn7~|zN8>6h0XgF%Ad$<G?>$DC?N|&
zg8blj^^F?@=A}+3NDEhf{IjH=Q3F}KtPt^hWFg={hN6H)U;CwSmC86Jl}EAdo`_jM
z?%noef8S#sf$3KW!rHtk*IJF#f<v3S`vG;p2GvZSdfNDBy6@KBfT{~R;oK?~m4ege
z@w}1&CJ&DN44FhMK?=Lpe~RHf{8$pORM<e2<ThLiJ8BL+{F5lr&-UZTx&oVAb9ahp
zFJ{FRNV(PfcjHn7sD2Q-U`OiDe)D__&SWGI2F5@xZmbwU(S`<QswHvi;_V@liAK;Q
zitFPb5OH8JE1&VH|25FohxRPLd^%wCAu4VfC@ux`$a%sQP5^*y{DTA(L@1!Kn!L04
ze&0&wI0-c$nu5}OUC`!H)*oi@a~jucr$dYwdv$wgvSb;0uH>o{$g=I?J=WPX%>v(=
z?=UpIiD0t+h#e+%4kZhOyBb^X?5qN6c&NYr4<{eJ-P?Q8dqdBS#6Bo7fqR&jpH2ay
zJA<6uTG%sw#&D;6>`{rS{j|qY8dWQeh9uEpO%2emFYE^9p9wgzZ()=__?dx>Qy+jI
z_JAN9Q^M|nU8Al*^^(V?uOZ(@V^e?+gJI9axxv?KqqpC<@W}9uB=}`G9M_gLVLhN$
zNyn1NZmf?@aBaQENbt@3tF#V_k>YfTlgl+)jg0~M`$_vxl4Gr~vR{+Zw{F!kNOpL@
zgYB-KQI&-3&!{TR(7xJT?q3(ru%lt5x9k4FE1$2jYf5eM&xm|U$BfVF1KXi5A4eRv
zW|AY<I0{X-&{PF~-<$3y+`Ue2v(<QAWUm|O^&MD9cvw_`-m%BEd)AXLt}l@5L08+j
zCF)h49D#H7y*LQ_Z|c5nm4BB)EqO~E57Y&7m~q$vn&j2jp^l6`U-H}II3-E~6xNEZ
z{SO-ar9{n_Qe7f<xEsI!lZnSF6}G-MTwsTNJKM5Wy;kTF2JmTErjf^=_?{hqmwR!g
zGUq2QoVF#!jFftkfwA-NV}qa@-4OlsyIq}~h~sr+Z^%=>^W$j)*lOAJ@pqrzj{-9;
z6XE)(x2<y$J~Do1Ctn(A_j0BC!^KP6dK;zWUKaaKFuNe0Oqph~wgKw5C1COc3RB+Y
z0S|PGPNSRgs2(pfMQT<QIRSq16e6b_HY}4W=)P{4DC5GM+^Xlb)~d_G%;1GCQK#Q?
zNz$R3!l{O`dS?Jcd$W_`O7NbW;Ay0Wk_Ul8mlA%}jGSUtmR{L|NX8Zl=cRDLp4XT(
zA)8n_zwxf6#(h&S>Awy#YPYoK^cdrQ&3$yL*AZbN`TsHX-tkob|NsB1QW?n#A?svj
zB|;n&$4V$=bA;@@H^sr>*otHoGP3tNob0k!Irbjm*n9pSr`PNK`TqXxqRWMIp3leQ
zK5n<`t*X8kh}rz5Fcas;UZw0`O?6fG3j<yVlaMGH39u1lt|jXy?HXmBt+yhP^PQQ!
zWXzvz^qlm(W`8~WSf6HKPgT0$J4D+}qGYJ?@u#TluBONLH=EOq`x(q<Kl~1xnQKF=
z+_bocQx(zRoVh&A0iA~pU19Q>VR~z=LqNy$+sMZwI^>|<aiaC1ZFxvX`b<$LzIQl?
zrpJ8_f1Uci`yt(MdgJO>*cbmFalY#85O(>$@>v+?_XG+O?s^RvBz$7k9%JI4beuxs
z?%I)Kb8s*2=W!$}M~WC^+v`u}9lT+pp)<ck+@PH#=02~nb6IPEi#FDhXB;+X5SN^c
zMrmKsPnwQ+w@d*)HET@eJSO)Mu^k<n)sFrg{n$@*+#&GnuwB|s)IH62Uk5MQi@zJZ
z$@a#<DCz3vY7u5qQiYy}k7RRvyySjwfS31U?axs)j-+8X%dc(`_Wz@nTN&JRcsLg|
z5tl;vYOK=M+A&`U#&#T^<j{6ike}XQB;?79tM;@^(Z;9uSK58{)R2&I*p7^q{n<wh
zBEzH*atxy?{<zV2;H%SB@yL0xh58+#k>ce08CphhS=j7onh$=hB5owe>*P7Q<7sVg
z=tgZR=jwJ?{AO%5(RP1lsq#Q)%=|G7TVtwOic{<^A18oi{zgZW#}IEj@$qo>rs~C-
zVZ4m$aFQ(Qlf9o{nQ`q|HN^o>IvBdl=0!#k;|5o+=}Z-Gd771xbUk(9<M-m$M{TlP
zg)2gD%V`fg<Y<?~c?|P12CcGflhKovv#dX7vi{O&a{eU8V%Vjh&@jZwmXW_#FW<WI
zH%kF5v+{qP!)B1ejT5laU4wkzb&-9nTkH@6W>U_;au-ZuLJQZA|M|wZ9sSYec$v4(
z*{-3!ws5>u+4bNa4B{Z$5<wGh;Su6d?q<>k7bm>eSZ}@Q1DdYu<FgWK+w8=maF0$0
zs;KJ(sgnIadVAfOXw6eS%~087(udPms-n+_UaD1yN#9__C`K(Q2|MyK=|@R|`GK7g
zvmnp7G$AYDYY%SL@9e}TK})2fm4B6j>$fOE8|1<tAEMYDTuqq=+@Uzs@J$E>>M~-$
zL@?m^_^gs#BuAmz{)^<^mF;cFfOD^8Lf^|ak3aV#hYBj{TQ|42;E(-O-Qtlj|Ctm8
z-}L^;UOn&Q2mK{>WWW)-|Gf#i6k2vrMiG_VVBtZ?%4Q(N{<AW>Tm=@k5Ht_VJk{^)
z>M2v8$s7?#vma@{*y<8l6}@LlOTnGdW@F{oa+jT#|HpCgBl}FBGTVOt2Z-e@hlv*Z
znH2ZQKZS7~7LZX{UWg3ZI==9&^&NB^SJW~gBP&JJVI+hi7x%ww-7iC*hQ=!?8i5pE
z=w5K^$G(xU%)}4VXiDOUoJAjW_RuHU9`p(n3%txTu%Kpz*?=1eTJoj7_^`)V47Gyj
zgzOTCj(fNt$~mP@w`5!s{L1ILDVoK*TXvz$%ay?JxP>PTgAshw&s;>&a>s5m9oYPB
zi+e(4Jl9g1yN!V7?yz|7O9+#b?Q6AfFq(;)C+kxfjB+4$`hbIYfDS?_Izvc_<nD*P
zFI<-ufKV`zzCcK|kaLk&`EAFgVf((wW&{@p?*H!fzUIiN;z_81utTw{U$(qPN<Y8-
z@qy{n!%hBa6}hxQ8jPsAd6=S4s&RxjI3aPkPHo%e8`_<Tn1(LDgMpizRxFvja?P?9
zMdnpwKQr91@$)x2t>s`(TS$m_cz=|IuR%{%(XW=??GAF35TE=M8e3bA;nuuE9z!U2
zXloQmMSiQJaD(2Y_l~yS^NmFWc|DQepoc~1Dwdi@6AMgq6ZRq-a&<IRTSYpx0X@6|
z{i~&sEdRf+B4?hPo11^#!k!XLCl(tjTFxIVNJyBz%G!|;Zw)E~3(Zm_5}`#|G_2ZN
z@h2@o$4+MzRVuTqLC&E4qm73Z{BNIX1Bbia5#*xw2!`gkxvV6+QWE~^?-OjSgvHbA
zw5vp|@{CBH$#~ya0it0@){@Nt;&hauaC_MzaP&FBpYdKJr{s%wOfK(*?mSDPA@Zpf
zA5d4Lao|q7didGVSN0+etOkf$Ee+8gCDuZziY2hOJ>)SyQ>E=@!nL(zfub8ovmS}`
z&)-A&fhfX3=IW#(Vh<&+uo~hJd~myo$h8_2SSg~a#c5E&XZ|N+Q{y$Eyt>8Y??UL8
zPHL1rLwPk@^jNm$l*Z4s)4uNeOp1>t7|7Xq1{w(Q3<ha6@6+{(l2YK1Mq{?l46sZO
zxT5xpC#hde7e@J<)z{3gRF0@!IXj6nuN>{a8>fd<j370eS{xe5?2=FVh{>yFS!D=D
z3O^iMo0}I$ZLhr}m!vOz5-B!ISe3wqNrSdD1<F9*QwXpLW0tm<8opQC&3TdTFbQPN
zHIgy4ge_fdwijLss&7+jK52CD9!jcx9*Mb0*8GsPJ(qSVmIHpYg>>(x3|?jFIq+@e
zx!~M>`yrcep+X)!b-Uaqch+CF@xGwo)@1sA$0%8kA-m_!n55i)_gkY(3ul_ofHmms
zGph`4*Y&Q2_y2K={re&|gEO)1Bd@oQV+=d>&`PKxYx?)@_$WpuWnK#s==bg2K{Y*$
z-<i$D*@1f-(>(-h9We75SP0Wx)Nt=i@_DE^1hzfur&%_MS&lFkeiBrUU~TMNh?H0_
zUP|+y^i<uX7nxMp^#aSNF_$YpBUootvC#=mg#MJ>+AbFd{ul0?T+?TiWCZ`n)KQ==
zfWd;0*^WauDI*4nyrukkbw%pNBsxxnaF&2cnlN@vfxI9h<%RUh_wjUr+srMr(DLQD
z&+as)N1NOw$2>@T29u3u3b!oet&Osw)LuRFT~n>+Kwp?4#b0VD2?~?BKLy>!>V{=$
z(E9G147C#?6%YvfO3;uD>{E&{zIeq+E_9x34eH@?DEQ>qngP+RC)MDksmTKdTlL1m
z%Ypgs3?@>7?KW7ghx?6{^m%GN6I#HYN`fmh>vqDVtyv?B-);RvglRurY}E}ntg!mP
z=)2orIpueP+n&DK=K7%h2WU)s?QVvms;E+%fx^wYD@3X~b-Izhhe68612tu^;Thf+
zG`$D<o4Qr?LQ^j1?oSW-wr9oX!CcCP)jn5Xc+<n=r4*T5>o-~GtU(#U%o7pl)T4v%
zSIBJmldP$m<~eFNUZpRv%a|j<qcIaSl09(1jjO{|j*W}+$=n={+JdolunRMj3CVQ^
zTKg4ti_s`|t%a3Ly!`LnrkrF5mHU#)&&Fp}>R41%%+qd<*Vv8z1hhk%cA(w0<h;>a
z4lJ{yhVb61peZeFSA$)YH|y~|-nPGemt%Ftj97JO<CTEcePA^n3#u4JdzOvGA(OQ1
z!gTI0$y-i;f7gxL9KY>Y782bbpY#!Ce=CFN9w8K%Q0lyydztL|C`&4fP1<i(aeeO=
zw{0e03s{_z0BzgEZE|PH-*I2c6O#PV@#N2q`7|G=8xhxkCRc-n{i-sU2q~CA3#DPn
zLi^mF^oppN|Bkv|wj2VceC>NgCSeJ&Y0d9jyP>A7D@82t=OklpUttj#rOT^llDZ2o
zCQhJMzI9^&|K#kOn(r96RisF8<DVL2-@Eo_hGoo>_1%6Kz~x%?@a}r5qR}Ppcv?z^
zII13gNr~a}ZLg<gRf9d-m7_666hFHfl=3R-7UQwfQaR-%bP*yo-)&;ivB!uS$DW4_
z=LQkL7av-HeN_-r1uF`eQl=UABquI<Lq@WBD$+*fC1N+eT)1)V#_i(HKwAAJ=vE6=
zPav(mA>y9DZ@V}XS*O0+h^e6eV9ox_3~A3@%(T70aDcuZ<zoExD7@!J;!kGW-?2v<
z)5?<~&iw~4?Z+<ZlH<&qVdQcQM3_5yOeGdLuh?yhk;q4jx3${v+RVa=WgaGI^A1WX
zo6P5M%A;Hpu7^Ch{}R%dt<U2$HFwaJsb)Ea*I6BZIHe<5rv;O+@dVK8_DH(Gq!Bx>
z^W`Jx7t$pipt?*34=cU@mCztn5dt?-#a{O>g3-;ST=F08|7{J=Y*$3xI)2=c_=)o^
zT}>|mEX^QXCPkv#Eb^IzxqiILY35MJw>^tY@+V*l%j15faWFb`{IgtOwqPh}FX@d`
zMWlQ`>}KlFygVVr&#C3o*FU|-$B(lGs95_MS}h>4m_LhIc6e_q8)NYKba2Fjzv5f|
zy$DmNZAZ=cxPtd+Y{Tx+R=JV&87#?C&l>nYZuP@LV8@ktC&dpbh&;Z<K5D0`K)OAt
zP4`1`>nCgzaKhh!{?B>iC5>xlevR`|a2)P3i3&1=m$&#W*?c49D(>q<|0s!+ZFz|j
z3})54RKRmwT9#vLQ9i>=Gb)faWhcGPOc8th>8$ud1WaLYm2S#56uEqG#U~Vhii)y@
zy(MtG_IZqg&@kkCxOG)GSLJFp&4{$7CN^j28YjO82?<$gs(m<*@eCqgo?%m|Vgj0h
z#nYL1M27)rvp&qe;iygWvD5ZX&Z=tFIWLs8Xe4kz)XUM64I^ekc+rjq@2*ooC@1ed
zVZ9eKwd*nbbSPrV8#+s*bb>XBs+s!7??lj_e@}L8y7t=4wSJVBL-H^%Qelsl(l%Cp
zc&5<7*YT|*(>{_5Oo&||gub(#iwDS6GDNYmK>bh!H&elfVVVHn&iaTkf%~^&=`&Pk
zyqS&($?h#)oiy!C5U^i&9#xRoVwv-bt?WNA5`d&#AFkQjetah^K|w15m-^pSH;#3k
zU5&|uH8<On-BTcQ##y?Yq>W7(jE3IWiXbxQg3U)0O@wThJB*d@A<r{0z!Zm>`ssh#
z?k}d6U;&Z0cE||2-_os~?*Jb!CclhesGEj75*1v#-lC$5Cbu=BtbY;C0dXul01LUA
z10uPm3U%`)6(+T->KsPAx`CB_*OQrjntqkJ;dE)8(}Kca2&wI6p71Re0=V#Pp?&&M
zumIGTuGE07tVo4d-JhKyQlT-hkUdN;{Km{AyS5XgaNFDOh{3Kcv2<24V$J9VU6OOp
zqii|M-4)g$7U;F+g{x0^@A9cJhDck7@`_a~0a~8#h>lH9K?y1=OM)yBTvNZ!=Mo!C
zk>a4KN~+({_+)C%db^b-Cf$?usvH~58XEaNF~yv$A;rp@47(zOJ=#96zo3yYhN-`z
z__Lqb>W0gN)HzzkOzfHElAad+=6EAoTkpiivB%^*`=Vi_MZc^>Vr4D$s;S#tIYe~7
zss{jKy=YH+=5UP<DFW0s4-&1Zp(q_hnz*Y~679^$Foiui`f1a!b?9kUd!6R&aYBfO
z-)0~)Hqkuw59A6gaFuxfBP?h7M4BE+1}&DA)T43=XsJuxWm?cz>rNEnTybTJzJ5Tq
zE6BQG;mkYxVOW#P9CZ0TNhBEp&8)e9+?$$%PS_qj8u5Iw^_Iz(mUJCM{=@Hdj=9bn
zvngvBu53QvuVGS`{ok_t@}bNmP!OL$<Y3#zu~o$mgSIwL-Uwuh((qQ+W%(@81QMAl
ze7pxJz1DfGY$+n*gU15g<p2&xI3s|t&>dRjSmu;I3Y7$+*Y!V@n=f6ToWA^Uen$Y}
zc%}KFyfC>;^$QOD>rAwboGhLLkx7b8E<tJOB$SgO95H_n82_|ly7BkhE{441_Z~cW
zV9dXw(CqDAa^wU_zvKIsr7;dMQyh?qnU7UYc8FeX(8yF^Nw<yTPze){*Qa%IKE@9>
zCR(aAU;%||%^oCopDbIa4!lXr*-TYu%w=9^)xD7}HUIPDQR@x#1~x4;=vtvs#@-`x
zda@am+l&DXZ(x$Ilx$a$1*=jHr|HfsLFccM5Or^9d&WPVg~9bPZT{+SFdj?-iG2H@
zZr$fTnHkixO<SrQ?cB)L*7eGwicKd1b#`VkZ7fyH_71Ov=v1n&X!kxHId@>G-#D9Y
z%6*PsPi0dl;ILXdr<jTRUw_zr)PGaeb+7XJq(GH<!?((k#E9<8h?dM$^T|~U_0*A;
zHF*Y1K@XFmhEWwpmy&LSTh4Bc9TGZu4KoJyX{@+5e8*@rYsM?oSxofBp#k26J+V<a
z#Vn`@!Ti}O{O}{qT7ikO88}s3i7>xR+QJ=|C_V`=>8ClR9yF;UJci?-K6B0JibXm`
zpF<8fb30E_fd@tCDqmrOrx?$jPxKo(z;RO}mvZV#V-oP4YQqb;Dz&I_$P^@uD49Ep
zobUhe{~jO6;e$E(7`Zz%tcPEk+$ij7V`ko!JM_zV`}NRE_`dp-avx%yAZLVsd{DrK
zJ*di<VoBCu@H&mnwJ19`2pdNpmmE#W`<!ZYdT-d!eVBASdZzw6kEqi4kF9cclI6*{
z0P7p6ka>9&1C)RmO<kS1&=xIcZdbmUX+-e}yV=NKKr?NR-je6MPf-}L`@a3rd|-6b
z9?40&$2)d#g#kYz9-dJs1zl)&z3$5HZ@9syS6Q7@g*jaiaJ1JAbQn~^lC%)aj<-`v
zH<8~9@|ty=r`=cToc+g@QwnO!aq-#lX3-48v;Bsdtk`b%KNqh(qJd|*F3GU%ia_dW
zVI82bP`b!5%b<f|Sh~nybo=tNAKb24s-20cF3at6O#d{HPVikOOI;=nF54-_{PV?R
zc}L68_g8oQYh5XcNd~eajDvsQhCg^iC(NU}qqvi5U(dI~webV<qq0p(rX(0m@@L63
zQ42N0b^d{{)wSQlrI7Te7s#b&hJvGY!$Nw1?ia`Rh;PtIh7~tUq}Y#+E)F<_c6Rnw
z(WSi^5l9^~yVxJ<+4kEUqLHxiuu)?}Af#0zZZ};n67A+H#qe`gom=PGx_AYu{II3u
z__VJQn=>TY9ih^wT9gs01K?mUQzSQ4YbG9)VLh3T1l!oa!$>$Ob6N>GgzdB})B~7D
za|+mDBjq-Ym<t^PFcqmVzri^J9><CA6_-;xt$*iR#`MTGfIqu}iu{mt=~BE!n>_)O
z)_dSZ*g%wpD&?;#t#n^8)z5aa9i-Qn?I#-&N>%X7-yW4Mwy(LCE&Ws40yvZDZ!Mon
z#fBmul%vj4tKDu$LFW%f*A$ryB>%5c;t!U)X2;}M@&>~;`_mu4G#Y3)Tzjc^-oNBF
z0krw=d{xqU2|IzHOfO<1jtW%Zq(T6F5laraEP4+=UaUKsZHvDRFdlw2b*yuXxN+xR
zSJcvYbn)RGbne1pSoSVCJGl&Y_k)Tb1sB+`rESf%*D>fey$h1Nl$vQ`l;lK2_rx=~
zeb5o9>mf*SGM1fTV+cnlF|D+cg7#F7&2H4QBbtFTJX<l8u2)8EFRP%1XDQi2^sxW&
zKgM5}DY#>vyD|BfwKtsuw#{PUum?88XOku!KJGBLMJ>G2!ILgmtX6Z$bWR_tYQa#_
zM@MF7lglicOvUlcp`9*iTAO3Es*l>2a2y?{P~M&1>|xJ#yn^>aI0{Xr9={M_wf=ZP
zXp3;z@ogW>K}SWe)JH?#qYlGvcS75pIg{g)e3}$E*x4%-S7(HNTpR4VvJdwFj)dgR
zmRV|6C35=_L}F!dJ4cL4wWRGC`ib|klY1i)Q&lq_N%vumfDCF*Xg^H5HkAY`v(DNm
zX3PaAr<_$3tvU?WQPmXSqj&6EdA1#7yYHVisxx`vYlUKbz$-}clSHZ8cmQy^=PD?x
z%m==cR*3MI^@mca7C(L-n^SIHkh`%Z=G62;^$jM2=;z-4TDFGUk~O>C)ZMo2V~(h@
zX>DatxRLrT>AYUj4V@BS%B35n3b`&N*0#aj^c=lP-8<Wgny3)L;AX5}s)4=^t@fxN
zo%Ak5zS@lS4*l@TRyex)e2F#50<O}JWM5%HJNn+jz58g<$KUpDrx}iYV*Fv42~=dw
z_Mw%DAr^SygVwOe<mB6bS}LT6jT!|ZQGmMhMb^`054+C&FE-1K%IDGM{C(7|iC>4a
zeyd69KsXi8D9Ssi3R46nSgGoLXe=-nTlyz|ux2PF>ZCr8zm;y^6hR^i=jBLq{jJlT
zPEo|0Q?^7xvdkM0VlV9R`0AIyR{NfIli73>ztfVl5Gwnc(M~Wa1I->sQi#4;Px2ob
z+2ZF>B}TlW3cRV=Sy>`!ohnpne<<1|;2wN->Esn+QR0Xhd73B^JG1)7-$|)S=65f-
z-t?|&G1*)BRme-TZK;;tm*CM5z0Z7c7*a>UHhx>wjgSmsodMsq?9(n^+UxZ{-{JS(
z+LS(1(z{J|92;#teoM%&oV4VhcibOE`WyCK+?X#9zeU~-XADp+KboD<x7)O2CJ~$A
z3>teWjjs4XGV@-l?PJ}1<7N5$V+Y&rhHJZmM<?Zkj|r6sr3->=pWJGu3N0}j&*8DO
zys|@gDZ!5@svGD;$4_Rq!sYa&>{Iu57uM4ODn8g(`?a*MTi)3er$}9&n{Vs+Mw}jy
zgzDM8R1aQQXrYbK-H~b1zQxDiRkabjv!*3rQ{nGxY_4;0++rr-f{jGTWm*JKGVvlQ
z{AHf&zA)<b*E7i&q_^>L%TW0dN=Q%np?30<WW*;}hL#iGgKLSTB7WZWl4mbIOzg?$
zPKf7WiQa}A2yZDuVwVe8HaEvEnwii045ES#TDIB*nGR=WVl0L~J*k#|?U=S&>)}m>
zAFbr6O3gD)j;l%Tz3&XXZkSF-#!E`~pe1O-q=28oI8+?n`;dR5ohk_0kfKkfKytPe
zssZ;#4p(h`R^yh2W4v<&<``(+it|Jj{@;iSVUbn+t)B_5Jx}AKcDrE}QVcpl*B0{F
zV(-ZxRS%VZQN|(&zZ(k%P^x`DioVYKx=f7Gy6E;a2ddSQhE?!<f5}<4O+^JQXV&xe
z#)S*#f_jt%oEhCq>W5~K=*f82LxO@o$)Q?0^cwtKd^?8F<8`!}ca!JQIV<1UW2s%)
zVt7gTvAi|&Q8e?}GEFcFm2`sI_Av;wq{5BePx%$Xv~6wM;E`iqUP)l7eD))-<jwhU
zg9$HXF3Dl<ll!)irpOSltE=?-k7W>HA|j_7OKSO2gmKGDe9!d2`J%3^V?W&Uw2E1h
zkwWvl-hZn2VrQP_<j7gicJIJ4KJJ614iTahwGcD}%?dh-kNsfZ9x*y|yghZS5RQpr
zOfhD6+=mgPNQ`!jV`<+5Y@$t74}YaMP5f9h^DFGm)G(F{#*TjN1o<+Qyi7qE&&JPg
z(SSj}o<9)jC{biK7am1qdU^lpq^~<jajLUb4JFZXfBCYy)}tu~#@4Sl<Nn@PO6P}y
z;_M~VW~$gn|6Y_5)PjP<uan3eWlm)@K6|ElH-HTS+1k_;{&JTK(z@+7Ta|P@SS)Jl
z@<5eYfdMl?DErExgYEkyBv!U&k}9|2JVF!hy^KV{B<J?(+C%=JIR0@Jjw)pO-%Ju=
zu{c5c!EF)CyTmu$qy};{bT}Cxltuo&cc-M3CU;0)|Eu;k%+whDRrX*lM9sd$-`6Vp
zus?~E!gAx1p6z<JB>+aZqob3j^|fD*)Lh+<x|+M6VeYoSaN%cM#yGC3mTB>um+Rrz
zo%8{|vM}6wRmWN*HTC}dlE(f(mTpyAES2OZXgr5VC|iHaS1Ha1SH~F1QOO}MQftoB
zH`=IV?iV!5+vZnfOMNS^o8ouAJXruJ^oxHaWPh>WyK_|qyfP}AuL-^+g62rV-EQYx
zv_CvVUOw{9pZ#mCJfgaaS_B!EgISM^{)w9XjgC#=(_8G3V?pkb6T|N!22dO>;1hk}
zPH-QpX&f|yBP@Y2wh*tNp36*CUc+Ul60)EAwL&yKabM~ol&&n#gnh$?b)X-wfR3|L
zLiBcJVcGU_$Nx?22o+4h_#mh|_3})RAt+W?dFLb+t7j73&cgM_J`JCxeW$?7>|C_#
z;3f4<Jt@gn(jHc2XRC2Z6V~>X;Au2F*%C^^9l6Kx@kt8JMhsmNVB7ehss75skbMDE
zU{l5yt6M6Cyl^u50Z)iJ7M(N1Yy6A{<U!DmbPL^`d`hTHhBmZ|^3%8M^)bM;uy0h%
z%aoWZ5Ky5LKFMWq7_rCq4cW?Zu22=4yp#xlP{8F7>CQ4Q+%i^Cp(@7x)wZr8%d1x2
zE`X)oXrZ~qpDN#dHX%R5WkDGOvk$1hLX;-|5vvV(7L6OLs=Mml6IFS=f3(7SLQqE5
zexmjvaBCl`X8Fh{w^Js2Tm+EtJ9ukT{;n#3P#O;dF2P(+qtLgqP|lTNd#=5^&)j%p
zx@7(PtH4rU^;r=wQVXtUS%gF!f*z2pR<e|EiIHr-aUR-17#Y)hH^wpagMwDn|7H?0
zV!zomMvkbkWo#3ww_{kr-o(JF{bpzJoWdLI9E!xo+s~Lb6#wup`vLSzeSJe$By-#v
z0SzMa;^fuF!%^gS=k9V`<=uya+fL$(LG!X7<7sGhy;R@rG1N?Wvh+t?>};vHO-JJl
zI3PiM%enLUO7oAkYc1tr`n9HRB@;*Txo5VHHImi&O+hW*vpe^^7gy=M9Zd>I)e57K
z&-f5oNYR(t4q^1ieDOh7Q?+SSX=wsv(xYjE(PA*{qm{L*5Kc-{;ZYu>`Piz>P_Qn;
zp=X6;DY|LhK;O>2UdO8HYD;>OISh&p2zcQQjnEYeRZOpXoHP7qFuShU+2gL<4ll7R
zQiOnFpt#-i{;trMR{olKN=^i?PHCoGtu_mi<<se+D5eBpz@R?Z#`DL7gx<J{1QP3E
zO$s7%R`NVmu^ECfw5Ri-gV0dORICSUL30b0>*l0!S`S`LSm`j+^zq9XVTm_bIn-57
z|D-ND^;oC?(nG{!+C0Dh*J+$9-y1&l6Ue<*B_EBhFaJn8BM2dDqv?;CTCgaOSI~<5
zzb^|W(q>>_!wDSCCLszmZl=JJlNYg(6en+r{rsU-^VP_iKsw%)Ly<Cit&DE<Y4Y@z
zG;<UoACjfM-(u{-3!Ec@Hc7TBJ;kRS6uEcdiak`h)qSNq#A^*lx%>8KTQZ|I7u#44
ziPxL!R59r~WyM2m{1xP|O?|6vID|KqD$$I3EM@0u3TMyMWGJBu8NWc4f>eHayHsI$
z_HWIRK|`&&`j7BQb!*wm;Sp@OJVV0B8~9sdhICa3jcNk*&$37U=->f{<fXor%wy#J
z@{-@dep)71FgYdJ(%)QMv(^uIxts&&F2~S@+I>kGyo=jEqoP5H>)j7C!@oI=-iIs>
zU1`$Nte4(hJxmlbuMN5Y%&xDVWO4|`7D8AM;8;{&^(F}Wd~{|(sJ1k7@kKU7Tp$DV
zHN8N$Fb{ntmT=4mlxg^SQ3BYt^(S##u*(FcfJ8ag>$fkY)dLQs#T7;P9od$ddi<y#
z41hmGe_pgy8TxDCesmMM`Pdt8;!g2p*ivn}@@K1^+5HcNvhJ9DdBygq4Di#9pEeY~
zrx2MW>!Fye11+h3+9Xi96f$;QpW-J-!OQL=q1%d8Q@??-c?xoivF|s7J-VL=bb;fg
zrpie>|Nn#VL@KYXFfnzG#w7|>+Q)-`Jx$whbQTY`y%~Mq+mUa!<ccTnvU=VA1+dY_
zaWW?hBx7s-(1xGqy>a!!=SL+fl?QLT_m39C&D1iB-wx3Tu;o|h^br%2*e;sufD1-s
z3<GWG2R|55dBH>zGpj@Lj(fiG)~!#vNEH>h3fyJ8DXvNa&g0mm(szEU35$N(LfA;F
zdXYW+RQLUi9P2)ZQ&aQ~OW4{=@H%RluP_lF4BNch4?Zz*|AfDeS$6NtcC&`up&X23
zqhFJB?t5~*rane{UP1eN=QTlM`<Qkn?=H_9q<6%MgG!1hiU_%%uo7-9h4B;?<CWb(
zP0c(jU{G5H+OOYu>jv0^o-e{^5ImD)C`IJ;^1G=>g52EP{UzxOFk@p~DJG*jiaC&@
zHFyK0Nkvrm$cIK}3j$t0Im>O9*g#WBtsO7nM;kJPCwEf-*sW0Iz3&OGY7CF|TM1-|
z`_UkUANHb=2&AlG8Kw_NnQ+G(7JsF2q|KLUXUIo}ky7lEa4SHBOQu3Zimz}j8MTa8
z?+z%ZROys^$|GUhuccZ$1HJCc_irzM`@c(V*O8u{!S<N;t6N9TvsF>y=E!y`;1K=k
zmcb|_+|2(m+H?oQSLHQ9fOjcM#&^_S^ENVVIGZ2g+n-{dSZ*pg+u-y{n_=B;K2Nfl
z54+X*qpNg0IntBW2>MH3Q~%8rJ1w?14YfOU0X#UCNz@t@J_A{GNW}tO?Ki}FamzzZ
zahxnNS8Wr}CfZ^t0@*?2w_2Ml#Y+wQ*YATfQS_~7A7Gy1z@<@%XAy)Fg$B@e%aTdX
zBiLj{XX*pYZ%p#?PRDV!Z=#9l;cVzqEb}BY7np1ksex^5sov%il;(n{Dnv}!tm`)C
z{Ts|u=pZC)giwvpi12B_J3^ThFvm9o4xF>(7g`9aeFBKEZu-e(Pm9jKxRzo(=E3NC
zQ!6n1CBF`=y5akdHI{{q^;+vF)xBqs1$N>&DX(3N;VD9Wf1sX9r-!QzJ=A61nXGo4
z)7O@0TYr1yX7Qk^L^r_oadSSH(Si9YG4DgR*<!CdhaXX^fQjVo|CMVn=Ir#W{_|6>
z)IA28k&JmUbPPy7vk@KZmwm7ntE5vYRcEgM9Pjdih<~Uc6|rz_!0nuBa#o&p&Lyq+
zOZL}=i_FBh%;hu2#{#2nO-X$;z%Xd{HDPJFIg9$vcfG>SdO1Z#{JmW=7zH6epVsDb
z4%j^uSSvT1aj74|4{R<o@ky2I>KVOYcD(-N$~y$+h=1YXp#eiTxnFuvkIB0<NyMq=
zDXw1L$5YBDHN?l_N_+YO9qD%F<j`<J&_Dg~cki5()EIR;o2z1`m^;4SG<s6-a8w-*
zIc)gK-*}z3sclQ!H=Ii;#i#Ce+-s~@<Q6=Cmt25s#RD)-B`CP#$*-pTzd4Om&r<F$
zfY1e`8jE9oR4rJHR@QY9jWi3b{bauyZ;)Q?hA+6(vT6$(&HN2)%vGOOT<i>SoNOSK
z)NGuZ6zv5^cTW;T#unf6^87&YK`J;{@bmn>4&^Xh-n`GrALk_8g{MabZY)j`fa1Yv
z4lKq8O&brHo&ve%Z+_N2ue<*`5q&=%x5+2%TIQyRJs89(Q^JQnfZlw<(uXVsdT)@!
zU(@PgnDt*IyTu{5VVu5YRYR(g^fG3|^H*^@nfKZ5wUY~`2@7c-uQ<N*d)+~0oe>Zg
zb_m4t(odA4DZ5;JlA(n=I^O1D>Mp~YsDKhI7H9SEZv#SE_FKFFpikFBY)|vwnZfaW
z(_ay88>c?2w40Zs!7n0d>O;#YDclSk+9r8bS~_<GobhJBUGjl2Yuq2xntjwey_D$P
zDdsVYi&Kx@s*8QB{K=G>UHSDX)zb1Vo6g<|4Hz*o*o}c*Ypm!-#BQ9q=!k&f+Bsx^
zRE5UR@V6@mJ`GO%dec~t?5*IDQd1P3TeOe2ZUDqz^X3fvKY2RyV%+>a2@{(v#)rbb
z39b5|P#&WS7NsmA6S!BrYaCR8PqOg3q5&S@1(dObkxlH5{BaSPy+gpjg$H1B`}@Ah
z0P4l=N_O_nux*L;p!tIQOe`@mYK@sh9Y+>espBUnN*j}PYh+J_Mv7yVJ`NwYmvZGq
zb^>T__wh?6$!KgZ@(e{DFIMTXWh?=}1~_mI*GK{xdI7O&ebB#dA}M_A$zhZ-?r?@q
z6}BRZj~J{C*}{vVU6Kx!LVv9mYU3+RYKMz0Tg?gsNr{Pb`-_PEDW-|n7ke>#>w6gK
z-$FPHw6yWO;6h%nUTScA$4OtY&f>DV9y<CyO-YCHmi)b9A-GcM>GnD|WX9KJupHv;
zWEA>07D=QGgiY}lWlk93zvy&lE^h7;Jj~i}FVAoUY=4b`M7cl`=ot31rO$qX87TAw
zxJ6bY&j1VAAzj_@U!Qh*lsbIS0$BO~Vv7V{&^Utn%SLUK0#FxDLlY|{G5n`{f76ec
zo>{uqcOQSl7AAkNllJh6qcT44yt|6K@O241t7`X(KO0sM!Cv?{Wk{B>wU(AT=d%>e
z!4(M=wJnuO7HDY3#szi&#QKXIvl}f1QE!IA)V-3fCf&T8+$z(gZ@9uot!~|!NO$!^
zADyK{e3;<!9YXU1FeKHzI6uPybWAxATTJ1#{Rd&!2k>NZ;MXhMdA_3juOMRg#c%Up
z*payhfEHm{$2-~a2H=QA2<!l2^<L>W@d-No4OCA=Q?G1IZ__afSrz5@d4BMc0e9gI
z{s3vRqN<B+2iWu3i*>u99SjuRc$2Agq%zA)@5OoHWp!`xjiiRRg(*KRs4QHNeK_$1
zCiA$~)GLPXFsox_b?d!V@p16A6REN`CZDnv#)Rmh|DO1SPoL;{1O(hM{pX?#y%_*E
zznSa%Zx$O;ijX#uq=Ba@PM#HlkD4fLun8ekbq4QCrFlfL8||~MQnJc}0!}}?2e#qz
z0ej+CR}o)>7=sI|THM~a+0x988kxWS#ctn$>MO|n#KnolL507UNB!AGwg@&aEn5d}
zSGcg`I!?k3;M)lwbUi(F;+|7|kw7ZG_Z<s|oV@X_`1Na8&%`89C(e}S*Qm4d(+V|p
zT2SJE&&uF`Z)9d67=q>Vmd?q;Xe^saswVn#mMCNgl8>(X+n=A^^;Xn7E)8nux9K){
z#5NHb8QZ{f!#-iK-AsH{6ulsbHu9P9>M;K*nz*q8Kt}KX!u<PDMil7u%0{WDxy9FM
z%*QS@SIVK|l0TPEp8sK<Qds-4F>%pj@+W59Xz04&pIV(UK0cxLFk<mu5~4Y7i~RKT
zfX@<zm|7GP#@O(*pd>i>8YkpP3msdkyn+il=oqh|j1`~yn_Rj4^uIHYWdWRdoym8q
z9@o{;tc+R1p~j9E^DpS!MnB#F=ZzW3Tz#B^Id<#r12-iBu#9T`w0RiRzCF}W=hpP&
z1}E`@eZQ%~!uu^>2HSy4N~eAy{#Ttifn;nXL#kbNL@41iWZ}$iX`$%iKRd=M>Kcc6
ze?vv<qgQI>dGc+F531geTtStseH4^fyWVS4esMH^?PMeB?l`Ch?)eV;uD!Fz`Acop
z*B{tsQQw-^@#DlVk26b4ALM<T^~&jQP%2ubfebJTp=@7jMo>l4Ge97*RI&8rvGjn-
zFxghfUzL<4*F(0%YK{4u6x#pczxUz^mh4ZLBb{AI^3~&YD~0KZ2k+%hZ+KfNfxx5s
z4!8L-OY01c-}2#@s-@xDtBa1-PuCC>bZ#xv20JUN@^#DJOSV)C9`0p5IU7cS<d+}t
z)mQgC{YL+(UBF@iWMu){J6>)5Xte`(ocM@;9<tz`x#l5XPad;E-?hTf9jb_SfA!MS
z9TQ{zGsso-&B_J*3sqC?H~!LPd4D0MD9lR>>WW%fJPqQQlJF_}FVc8jeQRZrgwgN6
z0Q@>xcvaLa<ZQOJd%x&Rbo9c@Dv;`<F<twGn$}nx!`j8})NA+dF{3{^HQkdy>yul6
z_e`OYFzve0QQf6bm(_4P7D)HK%I=Yhx-i9vh_zSih|KMkYe}V9<3vou>y5|zB7d)d
zbe?~i8_OmR?~eA}7u;rltn*dgkrJEuwUz4*@;y`wemxYfJ&6X0GTPtwEY?3Je$W&Z
zM*TB$S{pYb7^FoVpmnJ2Ufz>aL~BisdVBTVw^6J~sN-o|=Dj*2&B)GXR9K2-qt}au
zG-*OwLV1A#F01o3-VyDY#W(J>hTa)l20<aCVFjcArvG#fi3rygyXzm&YWyCHY@$Em
z%59n)c}4##-sYZbJLc!NQNBvS>?Wt3Z4)onR$^0HU=H$T^~}rXs<Iu?a2sATuJalw
zoNZb!{S9NY*B@~<kiJ;GSLd6B$n1F_04eyJF`G{E--g~~=(p%-u|})g+UEM|3&%qi
znPJn>eAk8Ulh1DwevQqNQiE~<D&ef3rFYm~wy?I9*rWXCOyxr*d(rP8#??XyC4?}b
z3x6ASmRor{dd4t{LNmr9WzBz!a{XpuF%W+=M)Xpm87tSe{S&}AD~dX8t>LyWTil)D
zkJT`GSaxR-ppm{U*HLRGUs<4BR9Pfsy*7Dt<kr=P)OseytTX(H;ehqeev3p<w@fC!
zH-zD{GSJGvxR$E800{W}d{s4R30TH5NO~9P3s`Vrr8Y$U`QuS;Hb-Ww{T}yUASlw9
zNGav@?gigAjB<hy%{EdOu_1gR+3v1uYWnrp@NkIQ1{Hb0`wfTVtg1$L35-U#ql${k
zp+nPs(Np`hi+XYiqnlfav-AOe-wF$FrVW_>_ksy(bNRn{@lNlf9NX&>v_#^;W0}WR
zEbl85`3@VJdYIA{2yXN|a(S*xVq(ZSFrE8-Y6e<|ViXbU#!ZwzN?_nCqhP*OSD#ut
zC-yo;$FPm)%Ma8;M6Sei>rjq~=Nj^cgs)97sey)#4tor$J0J|C#ANm@{7T(6(W!<b
zqtQ!IJCDAQ-QQm#%1*#ZN%$z%rbr78N-6hG{tW_NZeYnQ#?A$0THrqqU?3~-WMzdI
zQByBy>S`LL+3;0iy0}ZNIjKiTU%FA#*A7rp#{__>m~W!GwZCUYOW~KE7uz4$&2}$r
z!D#g)e6mW6&x?jof!Xiy3%(?B!$(};?aY{qvkhCoe6PU6<_jB+t?+(0Q!}&RxP2?~
zUV!4_$J^%CfE&hTDhep0v+-T#$;5`AIcPfd>ktq8?wa+c+Je3{jS&z0bbk)Z$;)$2
z%L5(mU?jk{Nld@Jvi9R{RQYvgpFYq~Rd#MzYyAuK>2J@;w=7Runy>C&iMrEd?0F!#
z(y}_OA*VUG`?({}@WUg=<>`dM<Q$5Ep3FJymq2y*M*y#1+?eaOz3fsILZyZx)iZc=
z7QA8O4o<p!0h8uQO^Mb|;W=}1lL(ZAi^Dgn_vc~~W3j|5<NDZmLv!<p_LsoyfUEeu
z;+nY{qG$+9@-Ce)?}{)9&K~Le)vDQkO%pt(z<qv;Mx!}ZF=Zy`R{2T?abA9YaZw!4
z+B;7<x3l-ipw{5RQUe&9d4GL$Q+{uLSzUc}Im7C>-i<9%`@%~b?`tFjg0L_1^{RT#
zfhlFw-fxG&oY%<^=nCEN?n7!VeIw3fhX4?8fGGtm*dOtHdNit&eBV*Q8$;StTDYJM
zr_p*)3XT9I{1|(wi}_*qF>wCdUYzz`*Z`V)H4a;H*XL>8CWAZ34j9Fpc4DyjV3gXa
zmQ-RU4G+>8?xFq~7+lD#%VBmDsPwHsJsd@P`~G*|LOf$}6p+@e@lJLzo$UX7UhQ05
z_6{TqAvd17lFU#1)J97?`(%BkR=AaUAgYDsHhHi%t@>?sMiw$lU`s~7!FuZs1-r`q
z0_kDQ5+d)p-{}TH?Q^dl$?31RB<x_HY=0KGs?Ct<>bwadQ>qArM`pT0bizwBK2WXt
z*q@L8-kv#g7>xuGX^!W)mr54P2^OcnsF(~~OkA#_rRh2>9SW*IX}IN!w24c{cm<ur
z0NiVOgez7o`{?v`d$VhsZc^Ngm!qF^(v^)9bfB|n>X8qnq`y18tGKyw)>m2ugdDyV
zLaq~%C`z3^(}u0&(5kmk<u>VPm<DNRX^dut6Eke8mQ0B8LHO5h3UX6Wa5Jrzt$?6Y
z5beiJ89QpcOFcU#>8xyH5?>hFn)<Hy;G0HXvc+y$+F2K$9iGOgDn{m~u;q)l!DA6b
zR5k$BKGDN){n8(x*D6uwugM&&e@z}S=`lyj$pUaTA!G+0%L3@`b9}5z_a$`qD1GH7
z7%Mr?_LKQ-UOB<92TkPI7WX<n@T6eD7x(dI&_N(xZ|GYIG~Z$;0N|D^*6K66vkNe}
zSgDgW6M+4}cw_#(0bxZ5W?}t{!{`|q`iAElD9!QRS}&7^l=}}R`1(R<Ee<kE9472x
zwJL^sD{c4d$|rjgqyG?~JV^e8(x<X1kSdo^DSRE{&Jar0o+h<Vnv*Bz=Yhx|29571
z*s$c&U6g(F1(CfuLTO|Hv`5a+k7V#$X#as_m%8Z>&&FbyDNNh^^li)|qcZPGE;-nB
zdS#CYHV>?2zKGclbj>=|PNzO{kZPMsUfQOs7h;D0OgIRHC@ZWmbds~{Qdy_d0kMPi
zAjHuyj$~E;sDGd`yGS=rtD4!9%>MS2zXI7<MURom<PlVn0lIiH(cMYo+5^@CZK-jM
zUUJ(?u1hD-Q)uhQjpU^zGwZg4D@$=&>2q~;;pZ|iAKdDLRzF(&-BT6p{Q{OzxGA$u
zQa-+_siC2(;`()gMq@NH>M6)Eh8SOgsA&bGfd8)rV~0W#fZ*}{(>l|-3DmdjPaD}M
zaGsLhIIje)z-1kBGt{OD9;;|O|0AYg-8`_mPxGCT`*(MN8SLizv_wtWmUUb`#W9N9
z+M}~C#5~ziKIu4mN&t=hD2r&lE8ut68xp?t`AJ~1=p>-3OtBUT0T<lYgyic}JVj_q
zskK7x%~SFDXjyTC!yA8J&`|i*6#;2DgNTj8y-h&hvt1vr*#~~^eb1zml{-m0D|!3#
z@2LUdJ#5Snv8g}N3Ze_PynNkYC58=O2l!|tqQbbAIIVg}<`;w|9N*MR)@1fcspY!C
zZ<szL?Ut{uJevA2_HeKamy^}!Atm|c7dgi@eu46)uxlsc^`k^jv%^)ZbPVH1D^GP3
z6hPeG!uww!UPi;MH_6jYn2CeG1^$Uq8ZtpsC{Q&3gsgsBb+v{4XB(>}7QQu9mo1!I
zyxF@|=|0Rr-!^o9D{1QZ;hFhmJkeSi_l(w$Z$Q;>Nfxf^+H`5J(L%!YcImet4V-CV
zicE4JNcU~cB0AF~zv|zvar-SgzG0N1ieR^)u_h0I+etFI%KY%~G>sWc2rVD({!!U{
z*>>H+u=QKQh5~`gF@@2>ciNY@ZEl@-1I>+n%VPk7=9g|0*LR<s!x~O?m7RupDf1MT
zb!MAA98S?%6x&%So4?n|m*>9M`Y~g}F28uyOnxzwD)zGL%}9Z?q&S7Ibvs9C(KHgo
zRuk1!lnz_L#5}oH#ZhtJ#=T40Pz_(CP{RpzJ6d)H;oj$|_eGh5Ge<H|#N!|TQkq<}
zw4tznRzP-_0OS#CZs~wkUS57Vx}!m@pqz;L{V1c*T^Tj4P@#fQ#n9N7qpv}7=OWZ*
z^C@w{;4mp`v|vl~T0EVc$Y%Y6u}^wS>k$Yn)#jPYRx9lo80zB)*qYq;UL7*EQeB%n
z(O|oYF<A2rq8(5XotTG)E_Nr;O7U^vxvOK+tDme3OHll^KSC8x;rp-1V?HXN-3S)v
zU55>pV3~j8$Rysa3@8h@HW_FgX#I7%c#&3<_yHrhU30BYnOV(Y3<wB|dpNRd`O>zd
z{EyoKR>N(#@0NrOKud4cCEX^OGY{`}Ah|%&sG;?+Yo6p%ReZsmR5K@<Ho4`a$MS%p
z_f-8!fvrGJMR=?@XQTr~Pt#f4292=yVsxq&S_Ml+2tafrj71CLC3)XK2IJG!i2z@D
z$COTHr_NPeD0>k989*S`1|88^E2n6GP=B@BLfm1}m{zV76jR%!t+z;Uk7mcWUV8L}
zsVnK?jhMy+jftUnm6{4w3l>tDKmn?lcfyEwbuLfi0Riq$2VahbL#o_+rMh<q=7oHK
zA3k7EgUhwAo@!oPoo}TlpqnH~qwN-ps(Dv^S)ho^$z--YN9g#TZhgSnk3J`W@ADLx
z5Lu8*<<+UJ8Ss2m^W61|*A5&r^QY2Fuch^HHJpBlnwscQNO7W(5Qf*;^rbXRa*_S4
z)4QQJjo6n)H{9MJ!vOl|LBnbHxU;6_M$gRn^~s(n9|ch0R|x4=`X~4?CH(0?TvA3Q
zza8%HeQnOLC+%;XMMd%#u~;hvokwclQh_}kBH@ll&R@+mW6k~6Vf8I9KZ^sx;oDF@
zz-0K`MpQJY+BsDzg=@ei9!UWGE^OmjGa<|uYhRt;V4?cTn(~tUC-@t(E}oJDkym;;
zu4BiV$R5N-IoNKE3ixf2)B#+}gu90M;|8g)Xxho6b<|R8^TCa&P@j<FogbWBlg_}L
z@V@ntl9G~LNouSA{_fU{!Xu`(;h2q;*XJcNyGO^4epsQ_5DpSzEuWB+{lTnC#Jvpo
z<j#lkEkwPA>7aS0eRl>g;lk;D6~@)Kz4^q0O^}n4Von?53p}IAgh8A5Y_{4ykAhH0
zrb*9{WBTM|bA*V(>Z-*~%fThjO?tjl{mnaV?4ushqG$1OaVBcgXXQ!CXD0_$_z<W^
zu@?Sb7VT5#`=U#~cJUHJvbyM)UFwqv*WXJ5G=Imw%ha2f&XzNxZ1&eiC>q}!y8wQ1
zDYE;M;6&E5G*i*Yqw&Z)O`yS4fEmYpiZ&D|<a*Em@62OJ;fl`rLEgFfnWcPqDL00>
z554V`bY_~E@{oT}^|lgMl_ItXQ=e#VD4Y`LPIQ?ZwKmiVX!u(!52imfL8NB~kz`>h
z)sCk>6r~R8KWsD=G`1y=F3S0=1YiR~dTXd2q=*G_2_9$6X5BZ5sdb1f619|m8g{D4
zYDa2dFn^p`lYew%R|I)2nBqe|tGFR|4H|k_f6SIUP+^TH<$C*M?J%WxF_@W+Wpl?o
zAWtYHCFHfuwTIBC<y(SBd+RB8zVnVrhdH}y@|VJtUt0Yu)Hv)Vfv@5lsbIRGZ&3Pl
zHRV9Pywc;vwIcSWOJ0J=gWQXJfzI)hd1-TlH}K<<8b8fS-|D*q90aUw*LvC8+J^H0
zb26f{X^+|t9(i1hRpq=fv3#S>*eX7$DjAh9@SCIGdcPK_eVgW-(B5;m&xN5b3)`JI
zlwK<m(Z4RdqI%I!bF7B1$I~U|Xb);TNPdziP6CKpvX;873P=Li90@4u#GQM#x~=Xa
z#b$y+BZ;5RJD+qJkHvPonwgML<Vre_iS5M^*O_|3c8L>)X~PALY|zneV_nAH#!qtV
zcYG@r5;nrgK~hJ+Mkf9$4)RA;exG1ET%UWgIc8VajqhQWVgi6U7to|S1tc6f=>ZV~
zn9kg=Mj<00Iby<{&DzjI36GLe9TEd|wk@{UsBn@AL9oBU%65C{bT?btRX)+9Et>gc
z)I%^}LwE)0A@7-;>Sg78j%PJ{r)|vNZ#?ERY(Te`0MBXl!J{5eU~4NlJKOND!pAlK
zdRL2|bK9i|#VcOT1XEOZ94HALTp@g4X4U~OIzdF2u<`ZCZYO{iZ5-d|pKYO1bFoz+
z@B{Y3RYQrWkN*abL8X8WV>7p|*!RQ@&;7#TS?s&JE)szDoXkSalgw!HUFr#5eYWb~
z7PdcdG1ngDj>!$D+u>ZRr@C`}rOkc~_;w9O8j2|12ApWJ@;^8b3n|?!g+xV3pI5hf
z^l5=45wwJ=;e9~)wj-2WvmE*z?F`RhPs9Iv5LfVbJmaXgm$}HOF~98Z<OUWMLN=c+
zhZ>IxLS$eU<udc+i=0VHCX`^?s3vDj*l979-wlC?NZ!|RO8|I_i?D}ymPY%}t=Vw?
z6K&tON&Ljc!~W%b2y+xQ=Iy#%W@BDhGUxRJ7~*N2rD`S5b%EPG63gs}8evYhnVII<
z{kThHlq+QyC~miLr0`fQErscixO$tLKHRYiuv=fyE=zO-h{q>$`8Ek^&N|5wV%>Hh
zKj6^v)d?&D8!2;g*HV|SKwky>Kc8<(J%Zlvko1<xGJOx@=bb#RM30nl^&bbHNX8$D
z%TZbD3PIhmOBT*?<mE2TK~#D<3g&wn<zB7g!Jbhmn_?&8A##cDIbH-G-v?{Sr5)en
zGnu9CTXz`FrA+jLeN*T>A;C3&BvYH_l5})|6nZW=8}~rOPijWz+R$AtyK5&Or3@0_
zxD^!E>)EZ6T#4If&zR3mo;2)S!w1hGmU|AfKW7jr;`U_1I3aR~Osl-y+{)TftGxVg
zl>r0yPCS&qM(Dq=a_^4x;H2Q__U1aOcN>N98VKe7IEQ9qos?@5EHJd{<b_d&XXyiW
zNh6{NHs)`Uf}2hK-Git#0p~E=-EU4+8!vP;<|oyW>)-MCcABa&h)9bG;3t4qH=zbP
zV)6&<W-5Rd0t-;nCis9<Dt2;BY$4>vR3M(ovJ>V781`#;rdSifO#hELJQ@3l(k{XT
zzWhX+RT>t6x7Xr+Ha{Y~b>;d^m*BqHtG64xx86UQ{~Y<hT}fdf@~X#dv_IDS=deA%
zKa9vZ=#{<+<w+=hLqf~%0wJCyWa1)|+>ORZoT^4YCO5vwwb<0#it;~g4%Ny0+M7c=
z`FNKBE|nh>EXUQ6)yt1Lb@B#zg9U~dKeyjH<~7kygox0{JlYs8)YQYaw+)|3x1e8g
z$b6%QZ(4uI{91V0J7sjJ@`Oub`^Q}aPb3QP>T`t7@vj>W)Mgd<oVN&y)#fJwI|Na=
zc$Go7;W5f_&OTC*jG|fn<x7L9z5_x9VBQX=y8DO|%5*vjQHRK|wg_hJ-rd=#SxPNq
zl?{gNy|yAfe)s6fSi|8g$*_5sY?H!3`+MqJ_5T62cP$(q&4*rTxV`n5n1r)51$d@C
zk8SGS3{_DGB!Pg6+CWAq*X&WL&5kO?b^9Bb=}9J&m^%V&P~qw*qnI;7PX0A7ev<PO
z%ttHp$X=IJ_GD=bjhLOt^qc5y>6zxYSNAjYm#gBB9M%D|7+06&n=(1|%CbG;SykY5
zxzWbe(2Rj3xkT2yyQa_mswao8v<5ooi24qd`cgRlV}E0%PNZP;g9_cy6|y_fm}xL_
zq?O0LeeNH79jCqN+cM$d4Da+)%WMe!R1`<6s!Bw7uOP9gy^Vvyvh_Fda1kPYHNPQD
zvq-yL(Y*`lqE{j5B=|O4&mq}2B{2O)s{GI;HIA0gYA+$Q8i;1+0PP%sWs_0I-cu+i
zd^TcUj>}L$0K!`MLUjA)fkEb3uG?buGg|(l!Y}=}{+6XFl;CNEwo7-H4QB_4mdEPM
z2^rKnz$aRlue986y7;$zclSYlEk@qz#_wgWUd{ZBymc!YgfC5QDt;>}s9XUXqoSOW
z-GF;~r?x?)K1D6-pI!nvDVI~Q$2;WA!BnU@2xPs{eT;6hGC;0Hk|?IGh=bgCt&x<n
zFz=M;Tel)C82qQi0J12Q^$saq*G~Dj*8j)Tc}K(Db#MPpLJ*1G5`7Sa5WN$OE(D3*
zqehSDhUmTbo*<D#?|pQljcC!!5GGm%qu2Mi@8|daVXdr{Wz2BC`<%1)b$u=aZKWU|
zqL<-+gOB4)E87G<F%avPC_v3zazid}+$w0k7LF6TRk3%7Y!L)0)-5DR>3y59h^7tt
z=RM$?iGKR0{1IHNKd1#Xn5=MU-^UkYfc|GHn<60G6@U)2pLOib&l?`oQ5-BI#i*t2
zfL-jbFFXo%<w?cJoPd)nCH<8?kiv^85bF~cE-S7uRVTR@Xd23-69085Z#}BI0js1u
z46Y)M-@PqUvTF<c^eZv4t!zQ9VSy)ABOq6SmF`6*e}8Sl`var=rB!2SKCJMw+Kot~
zcpMOvx{8EkMG;+mxZKQRXTHGldcd(lyJIGKvg;~Yvj7AdJ7+{ZQNDqz_x*Ai)_InQ
z@&xUtmp4`D4g_)ylH*Rg3@x~jZczQR<afqiYvimX2|CW=yY@`nz47}dp2(2(_q2Ot
z`Lv$GNQaOjx^p$gL`H@^y&2knd%z$8h?1J#S7y5Z&Nnw%XeK|bE=SC~b&im|g{_%&
zI7(3^OFV#xPwmf#a1i5Q-Ulew*(XRD*O-_*dbf6r`9`WDt)$xbx5o3w5E7}+<N`5j
z_K~TSUKM#i_n(rh3G3F@IzTiV7K3{W=&znV`>ZFv3kED2TzQ#mSOn0!!66@iEFTkf
zV(z-Ia9*A4f5lO+7a^>0d;&qr$w_?Jb@0q!^n0&uB3G<a@`h^&8PCt!TS2JpVi|-{
z-QN%n^_ZLFt1{H@Zn3knXgvOkkJ9E}^IEI1pYt&NPI}ULxaeUTiTU~F3c`H3788CF
zqzi4uwWi!A+$TKFK}*H@|77-lI%jBmDZibaR=9d{fre1Z1dkTXe`Nc$Ff{3<+thk$
z)Y$3$@99gSJ)b$s1lWf}Ig*WZpYQj|=s7sVOisy_d~fO<`2M!!V@<E*jIpJP(5u-k
zyTP5c&!3NWFGx_O-F^y-SHZ)MReC+{*DWMjmvSNG$sW02U!hw(=l%T4OO#QU5gv@4
zk!#*T<Yvs@WGSDp)u*t;RjVUeRuNY>rE9Dg6lL?t&S2EYtdfS1gknJKk#ZDTb|1n?
z$=Do-Tn}V0Yz6lc#Cc%6gR~Pp9N(z{dG{RD_HC?)5y|rsIsIiZ+ks?uu1he9Zi~{v
zUGu)h^y`Y(*T2lD*_~3I>7!p)7@@~069ns=IX66bTJ8}vA3(*-DHCv~wQ%B?H^Xpr
ziS}hppA+rTX`4}S>Mjq+N8hWPON%KYg^_T;>_F}vx|JUYg3^wGN0&?>nQpb?jCms$
zL<b%lJKyhwkX#0a%jedxZokI<-OqzX$C()pr5hscF1ERS|29O1ERZGtO-*C>MLQE-
z<r8tbi4K238=o5QI`ZB;?`x3s{QfqTv3u}#6a`(}$m2Iexl6SFrOHWAz}rvr<3A*)
z59dB4PEez->nCvWxvZdCl!)%xyn)*P9)U=Sd!{lN)0}7yaG@TX<Fsa*_YtVOnvIyg
z(ENNz9m_@}Ce`UhE5bjy0}KAxNym#z8T@|rQaYUcfz>xK`J;-|u6J(qY@v~QXWiH$
z%EMg$Yb~Tfb}^Y&ZRC<N>eM>c+9{78r9>tuGki0_h#;myYj8*JI^mLs6Y9Jej0_fz
z8np_ha@5|Ph2%IH*d01Vor-!%_f84;8uPD;BSy+?oMq_VNE_fPP3ghNOO5wpM}=4g
z@eGnj=#+-c=woBsW-#GrWp263w(jlV+}8c`m5-U;r>&8~K+$>>nH&BTWx-Pv|Bh16
z34_Jh^?57Rw=_yT6Juh3!)c+&tETf9Lm_(Ht}q=fR|8{Zm)j3l<JgX-gj^R+3-M8t
zM$vV2Jj|1z*Y)1*W||rN2k#^#SNFE2wa?8Y_v7T$q`oYyRN$9FZgN@Kx7zQSq8#Pl
zYsUukIi8f){=RsmGEiLk`|%*xx9aRf(ZQ$Rs>i;27k^vRufbp!GHhwS-Qg}zg$5T2
z2G7osx)%rq=YMH}P$7|STSJO}+E9z^)wX%BW^oMOa+X#sE?7H1ox?U_g%))kQ?4YK
zu%W}lyBCE#(`erPVB{(^5<ii&*pu8wb{;c+TGKTpMAMQ6OQh^BoBC%}=#rDkbl#TF
zCvuFwAdU_UR0W3nK%77*XE`mDs>S>({il@+56-2HZF)H>v7^5c*ljqTFGFMrH3b(<
zJe_;)rKI7Gp2foDf687&{>r=PCFYI0+RwF|c$yuD!_ACn-TYp>5@~cHpU7>l)leRU
z3EmAEUB`2!1}3uK<^Gp;ueik!X1N-96)$^uBuR4^D>?yFcN;)Z-@E2k%KURao_F;-
z__NKjOP}A%?Zb)Ds-XWX!fB+&iuc~6fkn)-@L1JnQteS)>0E@OqqL{ZcZs%=pGMEC
zP5loK{&Xrp)_c;|447_r?LSR%-wy8vQLMjnbky#Hz%!LmtoRBrK!z_jmPYUnZ|qs{
zx(bnj-X>y|IagZFK~|<yaYC>>+EXuOYWqoYcd?TJ=cs7NFg}BSZravaP!XmqGk2{Q
z+pL1){K+B@H`y?h?Jd7S-s@HIsXu&(PfNS85Z`$%m3!N}j0snT*B4j%2eu7<W*8X_
zS=j<o;UI`+wPJd^bx)M>kja4M(CLtdPIr2mHrYeMLFa4?$-^uOTSw#j$~XCRE?LiR
zWGylWWWMQNz<^K3lTnT|!8e_@1c9gQhImB1IaJZ>ZD(&|Yh{>rx1{n@$cG7X2uaDv
z_iCIaw%V=P25T*A16}5K6vBR8HIQaM{ZG|)MU>OzuKU}wr;YB%`@YmQWk0p8Ug=uN
z<&aPD>&DE-Kna=IAa3tJWjov9vQ<)S2Q5zqq!FU3!{V;X@FMw<5@CVC$A2T-IWs>H
z<8R8&of51!KO&Cabq;>6@(L;w{L%1eF=8EwB|TF9(MI8<_D0tevOD<WhjXV4|0>lv
zhQT|&cU6wLI~O`f6JrBYpe26m8HaP#)rMb_<-$Odf1DYSO309poasJIVpU&cDQCzA
z9+*|4T>OY3QtsOt6m~<S1N*3#cL^Sh#=7-dznT30+7ZoiB>RZpCcad!x;F$_aJ7vj
zBf|=4I=lS(Cnz?V_HhX#kWEOCz!{vmndyqf6G-?vXJRtXnhvR}x(Mi!;e+|xxq=j>
z>hxJ=*yO}%Iuxi@YlV~fU!0r}Vz?cMM%{irPDgC3rzI?Y)H0J`vL&vuGV`lNv>r`-
zegP$wSBqqv4h9s<LpLF?$ON1OLiANYpTzj>`Gf6DxH9;~RD5#875@DC!HZ7ox-Gu$
z2dG1>sXsEKr|;oyt>M88{{{>Y-=C_M%W<{4$+Psa(SVcsrYBWyk`L;8DhS9Q^>>O5
z9Il4*qXYmu@}#gk)*gj&^q_{p#=i0!q|wa;{i{jIFKW*>(|tZ`1Yj1oY>VPwO?5Ub
zIpXTec5zWq#OFV4a---!bvv3*<ZXuAs(-3zAJ?{{2+qfoy%oU5NwV;hnZ!t{^=Da@
zv5gL5pk4*FK8ua1+SxvR=)M`qFXpHeN!!TZAFEr}6>A9ZiZyQRiZy8MQagLrk1$HI
z_wY}$eB(|wz1i|^u<U#Fz?ppUPA8l+zk0bj02ZJ-6uUN>fa~k8nj<<HK^?)_fLY*m
zS`@GMq!*WBBVdT`?u;VitO}D$(!DKD1t%4u9HHGrz=eQYFfS(zA31`n(q}B<K%M~R
z&zlWE3i6m}^n@NHkdYoQ-n6y{VlB5BgX>A@RK$bPdzMVzJx|1l%@1km<fA7+TVx6X
zWoT0fSMZ#wsBdM}mduXxAi`JxO#d)ip$p#;w9_lsm0mL3D>}yNyW_$t>?EcFg{ab<
z`!g~ijecXKze4%Dvo=A@xIH5?k5EBGNsjb?J#S{;=Q<_2$ZlfLkbejn`^k>kNoN$>
z{wTd|N2-U5=5k*iWOpCh<v$k}*eAPZ)~U;8-68JlXeV!sQ2ES0F*8t_;(p+KR1lFv
z$#}RsL^WF@6;Bzpd$xR85&phirFos4ld>iJ_sE(s;Du;}wy=w(FXA&5*S((ISRGsN
z`As@5PkhD+xt~b5##n;|{D_B#4g`^k9j*rdt6nizQV#Z^H~ok7b$<h7=k%VR&hhJ(
zH|f;n#J0d(Tf5aZvo&A{2M{xFgU`iN*>09<$!2j(OH15baYHOv`Fwqr(>z`J-!MNE
zbC}LGcJ#|hN&gJWX8$1}ZY7#m{!Tr=RM>2;pGvMH(9oLy#}4b8^VwgUnlMQ(H=~TL
z|B_8|vGPZ9k7OcQ7($+MGJrzXl$kwt*9X~JwJs5QMMdNtNI?;uuLmW%7cRr-g4^t^
z-N6MJwZ$LX>F%+0-)`=AXNHVc(Ykl<httA+n`!GH=3!;_RpfI!@!)HDZEok|+T3=#
z<=niFLg~C&U)iEr5iH%_!#BmYppJ67C?rK&pOu?sv{m}PbaW$t;v3*TcIe<f36rp2
z2?%eedoHaW<q3HauM3g0>l61~iUmv^HL1(@s9V96Km0qeDW`8{B*6qn?r&9u#khZW
z<BwBNJieflm3)f)C+{X5o#7|<X!M)y8M6Bslw=j=DLJ^6XNV}d@JAi)r1>#C7Jql=
z)+18XE3P|{tDQe}4m9|Q*%pO812^8_X`5-3SIaT`_2KC$NZg>RcFlxBjTO)Oq^?Fe
znMWnDnw=Z^5Dfn-W0LW{Jc`ei=d;844~HE&Ag9>woo_1{hH9&ieMKtRU+LKO%6QeZ
z;Bti4%eREMV+Gu#-E8h8u=3yrggvj2Lc*IAp^%Y}Y_9Q`S4v<8scd+@M<Mb~_xq)p
zY1JT8E;e>m#SbD1V6_Fx->LeisWv$+$XY=B`&M=#)D~lCO7@C>dXjJVC;}JPXhCN$
z)~pQ7ux3foWDON=o=QB{MBi@$g=#X-tQwnmg@R-VPF)BvtH<0m#@0i}K6ZzZmQSJO
z^3}E`$)ZkW8+Iy2^jr&?8_*0-b2|^-v!G`IBTt{cH#YiLV?le15sRltB1&o}q^GVT
ze1f(me)b6iNYKUeq<Z`FJ8!eMdw`K3-%^CQS@Xf9IO_%0PUjSp43Ya)3k@r7&Z#z(
ztkVbA>`yQYyBdw?*=3<s0NWQuGP20bZpaXQoOL!OMM|t8C}bu%7HR&eRwE9GYQp^|
zB`sy6o9<d|_Y&B)JA$ln@fQG`8VH7Du)30gI2&6cArQq1A$ZQ2kYD?z-D3+l<hKUo
zFVX?16$Ze@scC5_ioMfV1Oica(}|@tdun_+%LLhz@&!QazY+rl1W5FO%{n%lV&OJ4
ze99xaLmV`4d<<Jp7d$t=70ovypLta7e{%HnV0i)zpUja$1i7A&WYG2L@S;ZR=KpkG
z*QjZ27B{G~cR4q_?DM|}lK{=yzvAL;f3|KcMzXn<qyH+vpmD*3zrifHmR^(Eem#0a
z&|<(>tSKu}kt%A6v%Op?(vu0K{Z50qnlK}tG_WZ-KZ@?L7=v`49P7T4a#IZ@*A^5G
zz`7NTeSIhYxAYkd=gaiNRo?kdNuMrpcwsvMHA#PcF|?4e*dUS@2M2nWqGyky(aH)W
zEZnObrj}7@SkTRf$QsBMI>TCR(!y&$t0nuigSCXlwZjdkS<R9u_0srK49-)PrrwJq
zT%{hUc|NI;USGp)=;vCX^56cEntvZPUeu56R`w!Dn_OVHn$6Ae?dmN?4b}v2xoWFX
zJEZ{pqGK=u&Jp4n4;f#*ZeALS2{+O>D;IloSP1v`Vw&0^yiq!X_$MMg+}GWmY*B$7
za`k0cl|=={iaX>9`lRtd8|BVwS^MCqGt_sh9@0;s*Th63$QAjAbdbP_BsehtrK-zU
zT8M_hQ?@6xExuW_@ORBQyV8l5r(3F7$-vG+rqeH`^q%^}xba^MA{OI9OU0-*5%zBO
z4FExZI0#K6E~U!`=!!0w^N8>}L@I?gJ5)r*_t6<Q;T(7h6D+FA%F5M0CQ@#8x9O$u
zeFPA2xJTTLNY26CJBwZ7-7i9)y!afqn=K0Prll1X6+Mk$kz9Ie@%-IBB_%|_z~WlS
zzUM>ILye>EL6q=^a&ts{#gzhI<`$jb36kp-Bb|w77jf0I`M>|aoJ1%(2#F{3s`?C{
zJy>wWAyBhBivFV(8s2GsmNH(Q^Uoc*zqZwon_wqeLFSc*WP%jPnWeS-{tN_PfUmBn
zg0rV}7ozojSxyG603kxcQnd+|O*S*_WaMozLbIswUbsccW)Fx6|Jmp~MET0>gZt8Q
zBaOl<Q-5mR3V3HMP3n4!wQ!i6Us_){KOhfjrm1Uv-=3&UXbRqXAvQDec-nCQsjF)d
zu5GeZmnH)U*_+e|zSNK{XsiFR40GN`p40<I*X4y534Vo+DuUV#BF}StbN{VNUT@%I
ztWGc!WN<o=C(WLfJSzU~P{W!=COjJI=jd|vGyFI%D^1Q#?P8_HIR~~lft-)XD0BMi
z0Rbf{yKi3Y$ye7EYUI(6)$@|fABGPOoIHfCVJ<Ths+6(+4V;)5s)lmJrT{^~%5{CH
z@+O_>=_b^Gf7@R7**%athtDo(dH6uk!Us-U?Hxu-qjG|mMHz9Mg5v#AP2;Y|i$D^y
z-B{z=F0L!)N#of>YrB1plJ9=U$F)ReyTKh%;c{Me88(Ez^>kp4gt&Kag<EO$o7W8=
zAKU#XbdUMp0@O*r3X5**s(7Z}7_M7sO8-daBBZOUr`QA{qsD0#h`}@Ir7AIM7R)Yr
zO~NilymH9VhF>D9snDGhLCPu`U<Je}%@<#K2f{EwqqnoDz!||>5|49x5)5;rjLt;C
z9(BVemWX9pF`|4ht9E)5*Q~0}Jfc7k`+cN#2AU}LQkNU*MpWWu*rHkgIw%elnIW|c
zRwLPt<*IoOMfZWaAYoqXV&Nwwm+hOo+jGU04vt`2ad9>3B(uJl>Bjm8i}GMZS~H^g
zJ^N+%is&NS@3qzh!F4D!K6}iY@@hMoXInPOv5z3`cK}ZB)WZaNW<(>9lVXBDad`$Z
zh}IA#$ZvBp*(CQ}2|k4uwm0IylQ)krUIpyp2KpM%X~=^^IFKOK7ZIR9dfMDr6h!^^
z%lbBW25M6|r;=0wu)d;G=AMB2A`>%zN|zme0^?6sX^ev%BLo}qq6V&}`nD&~O{PWI
z-`vXLI$uMqFVW>;L;g?6Sq<BslmvYI;EW8r!EBweEABeZ!I6}*&0^0!{R!mfAHIj@
z_eSBgr*0Y}ebcVE$S@+`=Q-&ntZ|46zX>mpODe>>P?ni$=?Z`1ia7&$bMD>o;gs4p
z3veRE_s{s*nY_?C;0c%c_KtaZ$tg`4#klkR%5t6cOSnnA$0f%4v<57HZt7FjRQzV0
zSOyiQ0r*D2)|#Hk;%ey{vq}z5h7h?MBc(AhJ10Y}4s=%Q)i0sxhC&%J?==EcKPiQU
zcas+(3-oiBj(vTSlxo$jtbNYURlgSK@hgj#&)@v~C|!30&IkIy&EUdc6vHBP2Y-Ky
zZJ_<Hn=iMmrCe{n;Ea1T_5z&h@&4JCATwlBhthn|g@j10cVR-}Zb3-;ZW3_dOkE5g
zjC}Wcj*{{&x<icTXdxs^T_t;rh6^ApRilTS&>T7)^dzB*l+n2DHkvqd=W9XiyL=rm
zoYW8hkn4H6Jzd!~%oFQ>b&7f#>y@rjARqJ26_1#m=8WrqOO#Lgp`mOI3i!)lN8;xG
zr6Kr~p@jASm>ov2<~n2kE?r+P<^1UN$$9aA2Y20CR?WHl>V-<<)^j3Ea4?|w%u=)4
zRy4HZh0*+OBq^{G(`hbZ(qYJn@%TAl_o%cEK1w^tR^}QQZ1S@24i*n?0&;NTE$eNw
z?NV7>Zmdre`J(ki>Ss^AYSljMt|XM>%iy2$-J+ubw+oIsd9Dw2sCx0KwR7;=B2NcH
zq=GK?z2`Ju+GVgD);Yr(F`YB$9x}1_FTYFF2`^11G%>0&I6Dj$yQRL?M7J2(oPWvI
zXB7?Zi4&cjv*D4uyCf*yI*<AeUu%r`mF6CXA;>CEA{3KfI2994#eEd5UdR<w$J6|4
zM<_U+oFYEZ;m>z?qz9)>4ZZYs*5kOR&kLnXq-*f<(BcSV<ywv}JK1T;8oHyVb6M*w
zbjm{xQ2yX=&FgFOV|M{!e3N{*<&WFx1SjZkzZcA-KDw{MANSYd;Bpk?i%!=45u*L~
zv=-3`A!2mZrP-Gu!I!^*1QR|ZN$hj7Sa@CWv(Nl3XqSP*6AOgFjg=Tr`R&%u?8vww
zRm0yudJ_*R4%B2+n@+}G8DziyLgZl{*Xcp#Q^mks>8v)*b7W=4IOp%Q7s*!fZVe=8
zHKMX{i7pV+a9DGW`>d@alAaN-G6>BN&pV;(GQe|L1~At5s1WRMX!osfR?T=EI_N||
z*xi$|gQbEG3QuwsacG=BfZ0e%qhF2FYHy4?IHS#N6y^OrGxLa0Y<C)ENi$p-kTV34
zPj*r8f?-hD>p1*R_t&1DN&Ih#THag{LL}#b&$q<?`l`&ot9vj^l1kjO0)IjNL~@<P
zjQ~OHS3n4oO2k&9`3z55oK5<`wyYq>{LzGc6{rL}7;$Vl@{*wbtRf>(sY71tOnI!c
z8z>r>++|tok-iY?p1vp;4lZ1*VWwxM*#6U<B<v#BqKI6eGMeW9H@W*QMC|g>R=TlS
z--0{+mDpR|OwxeeP%{@=LUJhmeIz3=b$GE?+W7a>l>C6pd}_J467`%fc~R^hwZ8^h
zU%CxT@kVdP+t}O~cXUmQ?DHtpDLca@>Pvp^j0P9s=R$BLkfNkd?su&2pa&PeluvN@
zmMxvHkM^7%y_S!8%|Cg^DT#+ZZJJn?*fMi=_uY4c`69<~<8ZEQ1MP+7mcSqW+nFS&
z4jDN7{y>))Q&GtxP-hv<6--XmJG58H=$L@mO0a^3vOT7Ka{!>Mqy|Kgiu%zk=>8JW
zH}-;_csXf>U}$8v_hh7n+djIzHt7+g;GgwBiRY(2bg8tX216=ay@W=x&+y?5<3$l}
zyoW#Lk1!;}_AvLDVSSx-s5m`E`BP9)hqSue(A7+o&cQ2hXpE-Y*iatU1!z1%;p1Xn
z)~|SsvxGuier7x;g>3%kJ@SN6;a3v=Z@M|I!^Y2#%|9Qj%l9hNb1tQ=fe=UPYMYIM
z$&}-Z#tv4#g3oc<eih|`8<&j{h2Wn)XQKL-bBXZUCi$%`({oZK^x#{E67ULWY?QLW
z+3b{nzDcd1PLr%jJqyg|Y?idRob&~KX*sD9eQ9Y2{K%{KyPX|)c>!&c>Yu@^BvG=Q
zHfK89z%b`d-O+Zso>gbob+=xZavO!{KDOk)DeT~uaC&t2oX`H?_0K;=6&m#)cWgZ;
zoQGm%#J;C_Gle|h*#MX0orAc<os{2@;$8J+yh<F?0AEm55n5Q~RNbkh>f)n28=d)=
zKzEL8d8zx}Iw4P><yr7r)1UmP`A!jJqhsr#HmhPKdh7;OOK~WI@N+Xe@hiL!jnu`z
zZtoN`egZC2>?g)d7LUxPbQ}D4J8*I;L)ZPKazWU_l;o_-;M4ksvjvwv+A@cmA-~U$
z4+q;>WE2VJlZ2HYL_@~0kUkkWkA&lRzo`&)-dkyuS-{2rb55XvXNE70t^V=G6e!mO
z9RLu*%S|O^<#!OAMFD_<#iw_#NhMr-MJNSyAU5f&;U?jUHKZ;HmjOh@yA*GnKK}dQ
z5yD<9ji&tz|97tuq{9^s7ftT6{zskhh~sTkh3vx;7e4nPcF8-w6gJ$Q#MiFTBRyK`
z5^HB3Hyy?{_LjsyNj9))<9{t@qfE#_Ux0-cbX`}CP{aeV8_65h+nJ*#(~Ln7pGz9?
zaJkjLb~q1a8?8q*x*+FtInN?rz9n9DTHF$X49C($E)y$Nt4O}^`OT2-{CAHjYoCg?
zKdAMcBK=I5)zrasLYHRNV8L}~U(hcn&+mg$zZxg@es-{z87@(5LLYWuzT&&(JN{nV
z+8!x->Ph0F*02zE-wK_jczz=0D{cdKsJuC}ls@#Lr>AQBs3GV@ck@%}LQNCR&s&pe
zT*W&9=ad|+JIywi29gI5Zhdz!iExM9xldk7bDftzQ@v~1Twg|#u5smLZa_6!>WFN;
zxJSjClJ*wb8wjpHPJ3m7hXqIIXK>W=<C7SnMQ8Q7YT+L;%tAXYeGeiD1roEfw-IZP
z`T6+9Tl<nesHAbZp-9dm4h+j-U{P>si>qIq${9L(Dyn}C1*)TCIw5iK4oc2E@4Z(X
z=vI&*KP=Q#Xw8@=J~lqS;4}Xtf!-1bHmrxEK5k8wd!Q15qTutFFHNpqc}1oHO?$x`
zEnb-IBy~w!W6sZ9$?BJvFHF_cVp~C;6_<p1&smRk*$Xf9xVn@ZKA?t$4*l*Q|0pRT
z)O9h^cp!EHUpG9P<$mcjThpIIxosy?<Qzm@BIUr6qmHKB7EzO`BzALjbacHeI1~^%
zZc)(9w1MTMq^vEjepAeiJ%GK?KSKj-x-&`>PFN~q;>vX?C;ZHmPD9d-B?fJ`9z$<O
z@#RBII(wG5ugQ4a5XXQy_dnds&vblE&g1ElH~OATPfa9LeQh(r+Jz14o;S+mg`H>a
zf0f#?c73xnH4)dOd2MQvM8DAnel6=GA@p0OCQgejGm{Y@qk_@b1Orzena4e<MRN=k
z?GzRnGB_<3lq~D=>2&4UElv3f`kIVRb&Lo&uu8aQi)W<4uK^|1(0j9|;m+j`)WC5q
z{nj!{bb2cJ1>KcThkw}~!9I-k%J3X+RZ<X>0^WZ#J;&HN{Kz%M_ayJ~5m8*{dJppz
z9j^t@ItmQN;K6>k&52TP4tn;HCUmZ7@ZY*INwCqGneF|^qKs?VvE8JmcG&&pEB0=U
zfVCo6E^X1q^D!ecZM|s!moH>`MnY6LqaMifprvS@H@yu#Ff0~|M&e}MpVoU<{j7QK
zmyn|^FF&BoejO^_e0~sgueZ$DO+iuFS-Y2`C|s|5J0%QlyV>J4x(~?%?35-6x0{qP
zv8$8S1@x^YuPb4@xL}J_VK>=Aq)@<;+P?VNpMo8bG~{^o;&8)!GH%I#GnkEBl{6UM
zGZ=~qC8UQ(+1yH2U&7gvHzJ~Wte(4Fw(2V;escpaJ>=NU`W;fLdw#*3NI1o3NdMA$
z9Y<cQKW)itR$5r3o4m{`sGAxG6dHOai+2m8G0@(iEsi5rbIz|!hYrOr`<$Ll{SJq2
zWA~<?31TvqMMG8(O2f89&h9WKH*S`Dh${c@U}{*gQr6$od?cqlM3nGF4d_W@jNbsy
zP2HUw90dzxL-SmKnyPXg%p}?|{DIm(k%@vfoWib-B?m}Mm+fUE@{JkBvRh0@-^hG2
z;JC}pvCJdMnPT|D3whkNK1YF`ubU9c4VfbvZt)~j%L;dsyV+1{OlKUv`PaZ5%3QO(
za%@@y<^4QUhjk6!&O7-fXj>`}s>g`wG*^#$gxid?<e{;67@_CO>yaUjxsO>au%h7e
z&Q-$0k1_MiuET4T>v%gIF^|;O&U^H`vz3w_H$EfetT^v^m%E8tPiVPZxz%}3{m``w
z0pYCpXXs0FA?vFUlZoFE(i9Gj#7B_(Ye{rnO#l4II@=9q!0#_)A#|kZPii_1am)Sj
z`)>5XM9=Xp)K6_kO(k_|-NG-vn`p}7M#iGNXB1r`adQ4=kyVN#F}yHElX%uBgro!`
z*GZnMUOEnf@JK)?yU-e$h0$dI&)RLVLllex6Hu2JdsI!d>SRx>XTyrp0@<BM-grj>
zsBx#7l&xN86TU^s==%;VZKfvU*PKU5tU~4R(gT528r3+P=cma%EtshB!lFwWOcbtP
z8K88RG?wFe$QrOm9n3?)lkECIk_pyOZp*Z$_1KNoWN9k8mU4*5{laiBOJ`hXBEd_-
z8j)>vE1+_@1)xC1K9L8)UR+Hih4@QSPNaD6Hs<?wt88|+?5~Yaaq8|$Mllx_UE!+0
z%Qw`=n8tp(kNFVex};qdaY{~Ix%ShrjM(Ja4XiqSq(9w0t;{c1ihI^`g2}){Q5}$P
zY}~nST<7aErU2h9HoGh}<-6X}@aH^JJTT9$mudQ@Ou)9zGf(BF3zkut@W-?}D9l=4
zWDf=R-BUDnZ{#(Ms##awcmk(DoFc2qoc=c98~IkC9*h9SLp;T+^Ev_IZ_Rj$6`yK)
z5hh71oiialsf+fwN;sTzRw&<W^Er-u?jih2F{DqB9i?B=$xi3VgB5+=R8O*Q6OY8$
zEoS3WDb5ez5D>lu9f+>`h(?N+aa^D+`4vZM2`#nI&VE<NQ&Vvlfv8=nzM#{-V)|<Z
z71B_&7h+X_!Z!?OYyDh8dx=Hg-Hv&zy#1uF*gyZ&IeJNE7B#nlvAkl`Uin70NXot_
zjI{^L`6045D@%K+Tf>rVM0FOk6}4;KX)+jWcJ)rpK(5&H|Bs#j5qeGn28Pf=+i~mJ
zyk5U$XyF}i;IK{V7wrRjof)-9NsbR$I0@1vj@00^{KAml;E^3X`PMzqzVGy<q|m?}
zm24n3zm=kUD87eom2J>K%16tYQYc@JM{*uPUM)u;B?5>Z=rXT2MfW&6rvC^Ev7`8;
z*M2Bu*&WX+fxqEbIp=dLKDWoOEnMj<!2qjM+e?*4V{eRg8J#xyEC-S)7I|tS#Fa*d
zA0KwE2A{>}wgrUfAQ&aoZO*W@a@h)fTc}$qI`V6q>p;P-v!7W(toA<Wh^X?M{S~E{
zte(qx<a!6UCg@ru4Ib=l;$wz|48#P&hVzA1yU+b9v#-n(@~S*<k1v^4rH^=JqbawD
z*)9ZX&~^xg!jHZbCk2OYKkcF~gr|-Lgqk>ql2{knJK$gPfV7-*HWF9b`)q22{4D0o
zmGe)ItbXu6VEx~5_{=#ruG0bzyx;iVkZ;@d-rbAZx8-vUJAjw(>F;&krW1gdw?30G
z;h|5T8ge=#Bx)4q{)6}XJX4Ti=p_M6PIPJNs^4%QC9$b~eXD%v^`dpjrHo=ld4^9*
zoT-BT>{bXl;`8+erQ{U6JY%&|aw-`ml@=`k13zmFBjok2%!H<JXcsl+&y96H>tEJS
z$}@x?dr*6A=-rWk*`vC5<hJWd3*J{|<$m6lvkB((;7w1<F>FWTlV@gDO}N(LDx3Wx
zb$?V$O$?eZ&q+td=TDr~UU)0_TYbtKuukV~O?Bb~!Ia7AT9ZN%!otNSdQEXzVW#M%
z`2&&=pdbOFfYgqp2ZX{j1W?q!HrEI`e9EeM&Qt2~3LA)>Egx}$)liL3UwMTr4ol;u
zE^g6HmR>#acgLlG{-bls#GS97z6rt{EX<s>)JlP;YM2(kXoKC|R10?i+}WF86~RP1
zefW%=zrAmL=#iu7(4#p*--<eE3Hyr7>wdGB=&a4zeI}=eunwTw`{3K?ekV35_qav(
zxg_W9q($!UNx9hOh_y+4CK{CZ;;}gnN|SyOV@`<wDVbhP{S+J)B+01UWG(hkXLS(y
zUAoI<%1GFGe^-58h#rDb{VdY8KZy0VNZRqGxkR7uCG1oZR#6VS-lKz2mzKi}f?#rD
zzL))jMaK}jLmL&7^Rx3xa}Ck?sgB06RQQqE9NSVGWl0;_ZgVad{snPC&zW}szbZWx
zuoX@_SQO(Bo>E*LU#(r;0!t`pC+-(0eI1Qg5@(qQE$Bf)M2fTb(v)AxAL>Pn!{OmE
zY+)9aS%u3-`PXjt(Usvi+}R{ay#`KDw{-kEA4Yp&h;yEKFuJZ^!MXIy1~%-0C-eC@
z``$gJi<mHy6=I-T1_3kC<xbas1NUuQS<Fdt%>)FrDT$K67z)fW!J)^4B7PcYBcAQH
zipjHCHL5ljv3q1=YPh3Cj4jm0iZ_%)Ol|2O;s5UMqt0(SwX&|h0aQL@&XzCBIL~j5
zR?Pk<!QAy)j!)?ii>gJt?T7CVc7GUyVF#JM<%<IR%cJQ;Uype-_Ak;00nukmz^puA
z=Z=QN-at=q^*&fj3pRY6r~VUJ_g*fyayrM-Ejjnql+F8^E7})J6z<k~3khX!rSkC?
zUrLuV(J#h6^Y=_4eoNRf95vu`J2OvH*8$B;uIH}z`L(u=p6rVlfr($bMh<fTOaEbl
z6k6!k^V)p}1v7ZwY2)9PB4$72fjvw83U`zPc^vAt<Vk41o8{X_>oE<$zOE>iZF&M?
z+W+$4CFpV~n8~niM+6t1$SXDzYpu^z2GuJ=L9}QiV_AjC&uTQKuD(XjTAGk9EJ)8N
zs8J#zmL~J<d254RQ?7-h)Hh14?fq{V+S;_|otn7B^tsba!BogkxO{7Q+aUiIj<p2y
zbK*S`mk~FY;)2r?$L*>{*T>h2>E&rT6d@F=1|?N1E9YFF7MFAm?8%$Qad+PR^-C89
zrl(K<bX6F|DwJS{FftfDz11Ir7BgRSZ~oIt=417`>~%kr3GOI<M|Bfu?I2XBxNWXb
zxA4TBPP2Ava20Rb-8;bg<`5goAR6{x$J?_ZoQ3SxURi|Qa9UJ%;h+DSGh!ayLXLan
z_}l{n;16pClqA##Kl6P#zS~y}%*v~9l~nW4Q;Llg!f^g(eqo)3b3dNTSmi5u1xX~@
zxr=5hBb|=VmC#;spx^+2o0N~NB)JOPI6bh(QJOwu7`8`C7TPmy63wFonU%w5rPF3b
zzR4E;*MftKfDM|x|Ad37hL#X(Vp8voQI5a_kf?Fo*35^D<*p1u@Dvf+@>qpT6b|(;
z1^e1771t8|Tt%61V_cch8@$<(s3>4J?Evp+9q98<-1tY1kLj;=an5_V{g7D9J0TON
z|Lu`F?LC~8)n4AIFEaITk+%AJDp@=Z-(Td4c9qebHX8W$fI_JRz>glYpJX+68WL;~
zXEBPd*XZ-HGSuO#^UHP%Fk8wb*8vip{8s0nI;-JF^`>VasYV$}B6FYw0@zXzxeC-m
zj@!SCGnTAh&s_Vx4FW)-Uvmk39@C%DOq|;l1v=;oElJg?HlRRp`a-Gah#jaI^SZ)=
zgwc<vt3_bK;EimnK#lbCSuM!eZ2ptxKS{5|Y)%DHA=Ob8V+z~5DRVntQ|3yS@~`t+
ztN)4n-8AOzUOm&kzGR<n-{(TZ%EQOUr*+?DdpcrAIASN=B|Sq)wl3_U#LzZ!^h5fj
z`8O7~Vx^^P-})wgiO;F>V~UTIE?Y6#3Ys1rr3RlhreIsyS%F$-bR9xc(S3b``^!n-
zv%P<QA{6FIML;h}qb|OO#npPCnGNDe9y>N|JO=3k{yeK~M>IM4UM`}{O3b65mT}&w
zT{T$_QfRq<kg?sI_!jA`nk9;DqM8%xA3gH{|Lil;UWqv*zpHNs#yR><yPO|$NZ4w}
zJ#M^8lN6C0d%p56IfA(xk3__jEtseh_nOe6Uo`c^e(Rd@3&rW4e-0ti?s_rK3HF{S
zE&4_8Ax6t(Z@?nEO|;*l*s$>ziE{b&fc$l^uWyDyX!Jd9<znBjyEre&aog!Dm`T2$
zihQ5VbY|zhfALmf>kWP(M!UD-xqedgARAs9%WAJJ`^oDirjs}i!eyx?sSp0#2mwsa
zJw~WP2%+e!SFh5COs{gRUeb7p(_!ijYVNCrF-I_qGG7peswY;8<9{YWz0kB^Vr8Y)
zo0&<k5+S7|RP93h6d|+W_d;YwC0DoMwkNWA{Nks2Tu*$@cG<ck7$N}rYbWdu7dISa
zB*Tx6{Csy7?wph#ukN+w5Fo3Rlp1W5c)9c}hqGK4->S42_HL)Ru{XHDp3p6226!Ad
zKjUpAs;*Y9{8m9D_u4P{^tSW)ov-(?kPoml$nSSh-tVBVf)IVbOKPmox54rSd+ZSh
z<_|BzzlQhW)QD1#6AsIA7JUzOz(K9Y(JJ*2RKHC12D~&JH_oU8!6Oc$`EiJhlzu2&
zZ2bhWk@V#y8`%yo;;%ywX58@W!N$5?_?OOi?woi-r}6IS#fA0tD=_PE;XHrG#60GM
z6RlWfId;886Iaa2x;h}&-(X?M%Vm@kjX$OPP#IOK+=*SB=-mG{RZgYjwVjspP7~RD
zg(SI9sd^9T9Pb{&kFtqoNMS1I^iQ7d2Mu;PsvOPW5nkmzFJbNVw1NqG`_cJAT{1<=
z(uj17&1>*WN)6ny`n+5pM7ld1x4M@{jG9eV%qxorYZ!O*LYOv@IgyA5cTjSHIxS}D
zP`PJD<E|C?y^wr~-~>h3*zW$2_^UHF3@22}Z2brXaF147tKSSwli%HZzdJHpu}_g%
ztTPZvjqY1*lZx#VVM=uF%6?^7Gn7ce8PU6)im$`E8aUZ+70Y;6?!oHqNPH`Ju-sj~
zbhfNA-6ZpYRk>bS1HOt+6=O3sR%Wth*ngL@V=>zL4_~XzjD3P|#(Fw(8RVE(#g^%(
z2Npm6yo|Fz_)z10w0PA>ZB7JOX}~#%?R@i;F`5(kS3Jr|B}dM~wUxvOI-ii;lk>rE
zW=4rc-9x^9>dBaSe=Eu#xT&e0nf^oZRR7;^cF3+-+09l|iy&i9S`_(EuJss37N>Pa
z)BBoK(|K_Fm0{}y3HcXQ{RWH7r@U<TZ0THvZv1SiB^6caR6{nR9+r^Y#RP1Rk6tSG
zv=|nqq_Go4a-H+2l@x4io;;-FR_T0zuj#Uy{3@G|v)_VN1M63Kfuh$drUZiJHp%e5
ztSElgL_o1v@7suHP6!T{mYHndhOISJ_=_U$Su?Sd4HLKIBDOQWZz+#Hk&b{qT=eov
zaLf%6zNHI~g?#(^^+$5uI94tAQ`Cu+LErr-y!J%@1K*Qw$xufXNf01cMwJ@;l<$>g
z=LEV^FeA;CKRbU(Bv!GDBUe#-*!fYh$=&D)35PFYT>x*fz@0h30>2=$F=ktpX`pcp
ztW0TM;Ee+S#4pQ3(h;e`XAFzsQn}S%R}@K<!sS<w&o#8QLn9;a4PUZDnf~`TNG=)s
zr;Ik$?CymK56mZeDKtb*E4ITp%_IlSo=HJ7(dKC?T1J%^pmO(1R$k5^zx4%NU4QuW
z+6X<177H2#Koi8WkM(3FEvjm?vt()TZJO(46Xcx{%BL^NX3E(jkN*qpj({f|v6U7Z
zu%)aT`uSh#5a&y4k>)c9q&UQtwUTUBNHVg|Lo%ih9m>2iJEG~lI{(VBij7mGb4FR-
zPnb8A3RSAsDX^tk**vjjZ(Lx;J3db%^mh@gyt#<y=G07b2?=s`ajCazLPq5{5?!vw
zEDY<PJrEjJ?6O=<+)c_2+clvN8R@`5zH_S+7R?o}l3m+|;!BUpY;@v8Q*rvxJoJqt
zq{Y5{3-#S0ak5xv6__G>O|JGSJ;muzbNM+hU%$q#pEGiOvCmO1tK4}MJhdgzH%d3V
z^IkDgQKp;CSAT=v6*K(YU-s_uoPNbZ8o|J`&Oj59^!cCC7{!?mHv@h5Zkd-BhQbWA
zuE#nbyGc7QF3B5gOudtSE6N6<GCMFHlkxYfolv~)R9+K&<krWvh-TOV^sdRO4;cyK
z&<kcL*>EI^IOKkq9E*A3o;OK9l<4AET((nH{s`kk<#k!TaI}RwQt5gv%jZ0^e82iS
z^h&K}%G3liufDV@s9t`LG4n3YE#Pc(*<F^lu(swP1t7^;;TMUD3B-DjZ|b$TuvUa-
z#Jg1mun;>nlp6kG$maQ3$)`9~JFr!rGRic*-}p{u2p$t5{vhan*!P&{O|DvVM2bgO
zIe}kOneSOsOePn;nPXp~U_~}HvNw2nKPjWiv#*MVUw)gczrHkU>8Cr3a}L#QUE7SM
zOjOJd`N-S^)PXJln6pCYe<EAj0HULIfm8OQdY<HTgG)jGuI(VFQ4<+(=02hG`c2G4
z3q229aRQ@3&(#<qXYiG2x9ib%P7Aa<_O5C^2Y<}ERee76ffp@LUn&Qo&o!q$Tt%{p
zP!fnda@_b$T{5x-z5zCZM_28)w%tjrj}&`Y?(kJeEJSHK;hwv~8r*Fj`;9Zz{;EQJ
zR5g7lH9$~y{@N<#VKhoGXE4`>Dx;k<!?<>7%cf(s<*UD_HjBRc5y)*{Ub(fg?uM#j
zeU!}9wv!Qx(}!A)9}J6LX$R2ZKX&J{aNn1A7mZ%o%%;3rRtPD7MAt^10)NX)aZ)Kc
z6VySi>@3|@&_>$A#pcbce0$ydTg?<6P8+I@1pjh6$tWa3Y~IsGhJfplX+N{I&vr$9
zmfl+jk5i<wq5Q_L4_8&?*R&5`TP=8<a|{W<<d0v?iwNTPhxiqOqsDGGP4)~EXM~td
zMVn`igQ^2P{i6_@V&@7|V5X-McuS^TW@wvx0BE3Kcd%}~n^J9OGYttc4_ZTS+kYl3
z5lK<))kJw_|3c$(QDp=dvwm5bWoK`&_Iq?hDRAi&+Sc^Q#3FTt;2yKp4wP7kGNfR=
zHk|Y04`(j_AyGH1>SDG~dl3sf2nS~K9a98k{i(jKrHzrQQq41Lp%Im?VLnZl1=J9i
zaxZxFm-{3Lvfz<q@{b39u*YOyE+ylpRfB0@N;T=Qimfd>0=U<FL703W01pQP#~R6v
z$C+3mPU46Pgzk#+g<s!rP`d#HKM3>&)AxTkBv=lnX1G^fCMuSOjiAJkB!L+j8J?&d
zk6i$YrU2p^3P<2ga(%Gx-Le`hHst0FEP9zGg-8FO8xd01z84oLslMfopgCW`#Q)9`
zUG|E5%VPl>+8f2Y%f3Fi0}z6I*5CA(gdS$TArDn07b|yR1P$e?6&4EbG};xJ9mgBD
zBkoq~r?b5CYdg?KyVX>jyUiph@A7r-Go{EE(x83$S=b0X7c_Ab_T~nhH`?zr`9ade
zs;wV!{mF~<pderQFc|jy>#Rlb$?eJAv(k@PD>|t%s|s1XPPjVv5$z9=TLDwpmV{|c
zEz;Ff5p|M5<$E4mpCUxGee_lkF87bz+4FIy(2d`Jgg?_F;T~{NC>z|8`u6h){d1Q-
zxK-8&IxY0pR^$sYcPp>q%9o-d^`jbrQ&VoTd<mKp;<YCs;jeW`%=dryuSblXVo(Jw
zE%S}xU<VZJ#<PY9Fw>YvENO*LzuTZj)3zTs({z40`0`+Y*Jm9wp*deENlRH~>aOK!
z{N?qp<8{;|dxLoPj_fDbZwaEQ%Pzg6$8lwEoKWcw<uz5`xQxv#wT&vo@la1+@IHj<
zaH;mj;Ey{mY?IB4ianT8f6;MhQn<43qV(nW5}^-`_>+jv{BW3bMwfkA=KTWFVcxfj
zY@|vxM9GTDTy0l}<u5`-dsHl(8N}Jy@j%|vvkb<zlOAs8Q8`NFO~O(VM2Y0v;iu=D
zW1piE;#+bvZ&ydL#jA<!@H52#CYrXEaze*>%E^gmG>u5rLbi@FlVpQJKyqs8x^MF^
z^1rhGj8p9BfRZceX@@hx&$`J9oY7Sy1)NxshU>p8GTD|RDx{VYp-;u&;`WybBH3ss
z_lR!JhxZB@w^S-5x}wwu@40aC!8dJneByp3DsIcB@@!RB;dT%?|6J=zk>ypTQ2YIE
zs2wT5Yt~G?xSQnF`1fP~b06C;gC$+tg@bo3mp4B>^t3Z$q@XWp|0Lc<%zbo7#P0L`
zVzR;EeQH9AVW?SYUPL_w#WE(x(N$um-kHner-f9`Tzwr?RsEnUBrAICAG&O3exDy+
z+X-9y)6?3WlJ)1AW>^M^I31gBqo-fJ?ItT%Lb=cS?1E<e7HN{J#$UTR+hv&=H(h<R
z<G%~K)m9IVcIKuW9lHSyTicdA;+4*{`R~%p69g+xB~R&|Ki~J;jQ1A|gYm;ykR=^>
z!q!koSyp=B7VGEb*$DOqdzr)t>Mw;WzihuXSn5A1%Sa3?E-G9O-C%EcWBllEboiWA
z(PWGN>cp-n*tpiZEvj=k9y6~tDY0A8Q^u)vo^~avYEP>B(Dn*RM)XZd)eW4?1pY{c
zS|ReC<%wBFc{GRFBlVRjCdqHMn+g_^YVl2<itx`3k&%%<ziF{v08JI&jM7cSDVO_L
z0`x7+^8t_RACLp>^e&Z1g@yOd#;jeroQzB$X6KP^>N&J3N1wW`wsnYg{eMfKL~6lJ
zjuG)!cCS+!b41*>kq`)uO4I?*_XkRgjM6jS55KfZD4fvmi{<nAvfO!Pd$M2gy8hT1
zPMAiZ3}T|W<|e+{n&gh)rbyaFI>!>@)u!#RnH_IcF{$d*v5>53Vh%ZiU_PhI?`aU2
zjI7UT)@vE3VUY7*PfF85@#Y3i)6#Ql>uIJ42HP89T6@il-_{>h2F+c_(jzvyy+VcC
zUhZ6KKzLUFtlY8{{%rSd;&5ckdf25qI=@77OIBK1jtI@k`D`xIzMyqMQ~k$}XZMV%
zL=$EL4v({7Fxr9YGXJB-g(-1C<;PaiE^{K5(uRD|Gm36b<*lI$d7PF%T$zG}d4!4D
zixlR(9UQ@}>$$!QUs|=Da!V`y(q+vaNyP1M*P${O=pvjLTr>Cash#aF&M#-5u_>kR
zyy5kObXwdJSxG<Maf8%bI-Os7R!jXoP9OSo_WNglJhU&$S)^Hr@>_O}jWL8pQx@wV
zxp4!hR!itu5TT?^mE0@|DC~si85#D`UxqT|`p3#mq^c!R;%}n>ruD;r6?@gWA}<Kl
zhDZ3kK5V&NVz67|pS?Sn<ON4E9sM9<{MEtX58g(7T~pl7iiIk7E6H>Z*0M<4&q?n2
ze(}{GnUoW5<{r$PG_EUvzG#zIEL?||P5UPcEa*^V>^q6^wtmTDIyO6YiF++4p#J;C
z)%PLAwDIPmbW3*ne1|NwNO_RSv0{fMF-gQqSh<`*9trCHK%S(nr>CZ1;=NK;#)0AD
zP~PT^Ki)^~gT*rIy7Km1JeIpdhk&<bVKC{|Iz6RR2#wsf^ZWdBMS$*mS#LM3rMx+>
zN`GVN5smecvOt>-Y>I4aLxoX|NRqhk)*S+}KkNG7U?;h;^9nL^d*fPzp>jt}Y5b?n
z*Mo1|AnR@s!kMrLu9L&6Z&*l_)YJrBS#F?*o%4;ZTf_H}^I7v;)#<vL84vf|o{mhh
ze}?ps(R=1MR84s_gIra2{#Ou<SGzFB@kK%Z*rN}xEt>ON(ZM^GZL_?=mctE>g{Edw
z)90lsEzS?&OYy6*!GkXTM@KWcP2Kn7V$Q97c6P+hv(XB3^|1ROm|^|w6PB`)5>GkL
ziJ$CpozLN>CBgu`*t%tJCtG<Q<FM>9DRgaD<J$EGb>^GnuzEOnB}M1nrr;R0gsEK}
z4*T6gw{u=|c9zeBYGnN1<v6zaNieJA;J5yDXM%~kp73Nv8u4|8{U5_DR_)n$_R(Bi
z&-zFmh~Vrb5kY9*ygS$T#qNAA+u_p+2|A(qZJnxApCV^9W8y|=U3O6OtF~Utq-}1H
zR=szkzO)(=+u=pyZjikNy_<&Icc+eaj+nk%zwk1m`)J1DYjLX^Hui&&$;J66uDMGF
zuU?MR`8=$P>U><#efGSI#4YVXRX5>zN8|9SoGgo`#l@GRNfesv$@AB`j?qiTZwF>)
zAgu42$zL<hi}RAI5a`j{Wb_=g2h${Jkd+Q^*Pk&bvTsa_k#i%QGcHjLK@H~4ms6fT
z_n8LIip&sK@0gZ?iC%;WX#&}X5QedGQFtpIm>O-GYZM}0sW6Dt7ugspLLw;gZ$9``
zp5NKGjJ9<^5#`6s2qR685IJIdKxRq}7$DdP5fn`}5dNJEnp~N8Yw>rq-`WGRi)k#J
zZjo?F+cD;(z4t&Gx(dSGdx2Fa7!Essq(}ThUH}Tw@OF00k-FN86GpdS-p(EYMq*}T
zZuZRUc?8geIL!7`*&TLVwE+9Y(1nJcp5A&bxNc>+nRsuoFp&#7Ek=Vh#~GS&@J@W@
zJ(gf6K)PoKeGqcT{|cPgtWr+_l+m<K$h7@~w+aEtJxPR*_f~2BFPgd5<HabA0(rTd
z@^DnZj`_K6Zv4(0`ihZ8$@2@)Q0)a|zt|a}xdF)*aK{+p&E|;e@cS*<*h<VKPotAd
zWXw^Z5Z8Nydq)@;Y3_LL>P|cP15%G&>?L>yeISFy3}L|ELE`1;=?gNQh58U<-a<>h
zd;~PY9{}NDR#7W5vuU~ZhY!b5A0X@4ANBZfHaqE*>aQ7ozKclfhDWy0%@kc^%tinD
z+nb9DUH)(T5T@~^Z7aQxa{17#@Wik0)~O(!^?P+5%-G9+G{)W=83z}K7QRu*Jp9D;
zsoiP4@zm`&S$|8D*N_M?#=sfX%SnE7zSK)*lF%GlmOA!0W#C|A5yp8i_|HC!Nv5-d
zlPy)V*#-KT1i$3yfuTusai~Rl<J$(wG&6r!G2fkIjo48Fg!LOV_v|})s$f(HvTo+f
zk7K>r7&H1i^_KKFQ)ULGtGFuNY#qFAhH)m1+^Ixwe751jZS<%Ok=b$ql5cH?-Y*Qg
z94gNf&AVn6n*z70VE!5Fyh2JXF6)Aj5$bXiI_r7CEkb6MMk6u)J4GI1M>GPDJs<2*
z*)fxZyh^s~0VapE`-)w4_qV!S-+_Sc`h~?GJG^%yVDF};?JZLD>F;W@cn_T=T<TQs
z>>m0@L*E?;q#@l}rRwhmm<lZFS)@$7xfZLRGVa3dV%(U{D(!G&R3lsbXD>8c{cJc(
z2;Cr50OYc2TstoyUTpEdR2T&8{_inxuE@z?^;mGzDIG~9!?`F?`qVD%7Fhr=1exVD
zFHu*Ez)qx}80PRPUG#85tI}?&>`_E#$ARNQ6B491vEJMrs)tf^jBV*6-)ZJSSDs&k
zoUY*}!_dSJbHD2V?gHBoFeHUBLwtLHx68o8Q)wk}k5oAsbQaR&i6&U&8(@BQ>+{dc
z0p&Nw(4gu4H(LzI9*FLVq6F8GzwN-$8^>kTlzv%7FH-cA(!|%S?h?e^tODF9zveRd
z-##FSwenkcUjhsf{XR={R^JWHHskbrHmn!6+wlLWdds+|zV8iGMWh?0K{^BkhE73Z
z=vKN@nvoHtl<sZ`X;G9?x;qB}rMpI@yW#H9@9%%_ec=oFz&ZQuz4ppyJ&Wx-!%{V^
z_a<+muApT%Zq*gw82n)4TOI4$1tYF=iNHgYDdnC3?9Y!(p?*1=`@C#+d026FpgFMz
zQy}64Xjza?jyh^n$putfJ-uWXjr$q-<f|gqIV#!Wb<bERhVf#rMil6}2Gb#`H+z@j
zyRB&QENiQ)X_AW-sQK3)YngnYu@_cSoO<Q0jok;s&4tt`9w69#w5~a>npq2k6ne?r
zHn=dem)ja)a@jjY|93YqA>_V0wVa8}=C(}V))sGxGly`+>s?1WwLIpgI=inhFzseG
zhk#cEN@>5ARbsO7aD5j);8uPWwOvwc0Tu0bdL&TzTkmz0rVd4W_9ln+vmwk6v<fu?
zrD1&BNSwAW<y{0v$Mx3par*1Qzqwaa(Bn;M`L~L0g>QO`S*|VM;0!j3&Wtt*xA<?t
zwI1+@v3wT3l`0k{)?-6KZ<TCYRqZxh%L$SC9`8ek{U|`dsm}wWLZBnk`B8*x-z|rk
zc&85{MZRk`2wFdD(<WZ21?rZjtlF(Yd5v-_g92F#n}oR=mi&*l9JFb1(P(v&iMJKn
z+&4a`j3HKxUx~9|=P8Qy6XNPxcEu|tZr%6to4Uq1FSay|NzPEIYxl^Ucw!mAyeq7p
zz!lHtcbWkcv7JPgZA37P(UHoX^jJ@1QX%17@#zt?k0J*JRO<$I{1;~WO(JHieXkUh
z3VNGuT&0kQiX8=IrPt^CyA{a%rqKBOCat|oezN{gdH!}JGW^u@?+?~lxVaItmjXxj
zQoyzQ{M0)EO6!kl{A_)tAqV=ui&R1!PQdIYf&X3MOONzx{BekPNZ?K=J`JDD8}}en
z0$OpqRZNVAtiW?e9E@&}g;5ZnTgnnbpll_zk{D|^*w`xYF;qDd(z`QQ|3RI>%@8$E
zi3sm$D87JoYprU7(=2>ATOwNL{ciXyTuUo~;+L&_1Vp>9`vKM_3I5?sxvEhr+Ko8e
z4<A{*b@j!lZqzD~$1*aVH3@rA)Z!v-s9ms<4wxe~nB!ozTP48rR!O2`*7OXY#QSzT
zQey)hc%R*Flk<@haRiqV0k%xT@Yb>B`X1#{#iRxyp!{EG4%t6A7;=aT!Dec=_L3;y
zVKerOnL>{A{}M5$Vvn2bnQM3@v{f<u=)$}!;(n38mlLlTH!&@NY0FmijLO2^b=U-C
z!jf+Hyg+<;Z*O*7x9x4ZTap>6$gxL9bK$Cai>#P!(tFZWKt6Z7NG09EuXqy<n`>+o
zhnX;*O#L{RCCtQEBv!;US2EFLy5#PE<6#(ON8IP<@{47o1A8E=sjBv&(TlBL^?32n
z>fKs@AHikg@kaU0{6S(VVjN%j@w+lVS;kqsUAy9NGsn5mL89;zky=TYA0s{+q5JG@
zru*k{I;)V4*lDeZjZj;Lrq0&})|1`DjAomT4;!+Qm<FNr$=7jxHW8%c;(`bwSxxC$
z(+DhDoY-`I$-yV)_CnZP^F~%l20g9E8X*-o<VljxD|HNmpp_RdtOJgu9Xzy{C5@kj
z8NF(yreZx@6MWE_`tBIwz>y)lJS*UM(&RQJu*_K48{5N*Bp-1Xe`{3}tQEK1NB2?w
zB)Q9G{(bL8@<pvX^xkZ9oQSPU@W5PFufSH41YR=qxZaUKj>^0{b8g*kMxyW$Bx-VD
zT*UU-=+z1=$|zzpKLpBTSlLL3m|YfmWrExi@${{F>|Mq!*s>uLMiQuAz9%0j#L?JS
zvS9-Sl*BXdo1jeC1&BunU^*VK72bbs1rTwD;0?`ta$kDdUZxP{?=HTF^RvmO>30l9
zLNz;fL<j+CyZ=I15+JUjtIEbZxdI8~3}1*htCs9f=6K;rHQp}A>=Nzb@pRQr56Sai
zj8#r44pq$e(1{==Y$9nA#CV2GM*devJz*?L6x*rkDoM`~zExKpA$X9$8`8U=B?A5<
zv@wmn^I(;e-j0syBB}6WejBV)GMC3ZB^59BWXd+DOWkjuB$4@nlkdEkN*YhwVK{6d
zsIsd$gp%)-hA}|w;K^3BM={Z=gEk+PnT`Hi45a*<Cj^qG?^A@o=GIzXuoW}RxY+)1
z^B1qS+c?M$_wB&_Y{$GcDQGiaL2!?N)`)TVPa?E&Tt6b_qG;9K20A56dlH`cKW_%J
zBjT<DJ{96;dmFNvn)*#kT;MPB@E?}CM1BjbLt)f5FCC#02IDb-r<swxCaFCNB31mH
z@xp}uBTtlZcYU!5u$jO=mP)Y(?8ifckicDJ)z_It+(RSXr~udTvCC6;#yH2lj-4`^
zlyJr+clg!#gO$-XilU)evMz#DefQoMXkD09QEIWjysJZD>yxkx*Y}N&Alm1y+wUx6
zgBc?I6>PSurrTE5GKF0pbMR0|Svk~`JsxsRzcv?3tAMS2$Hkq|39yL$Hdt>J%S_q6
z6}I^ZA<+e2PeLyj843(#U0=MD(nFQ$Tp7+LU+cm>P|Yc(Wq%&g(|OQ7>Otjzh$J9T
z>+LS{*5hmS^2-nQMR;`#ay~|QTjfCR)f`+%mi+qKNO+m3<ksOUpM6nucLFJ{QoWgb
zYX3`cO7d9qMf}27`yVO9nNEE9e<q!U5ciWKF1l?QOTM2IDu(y&hsL+0!cD1hO>;6s
zBYd|m=f26^moqIKCf3Ds@-`&6n9i(enKg3x+Z<FOYZwo`Ip~w-6ruKg6PMEy{Y2}Y
z)<6(bf*pN^HiO%4Cai&nG3bEyCkBM2)@b#K&`f)sU7B@gg3Xb1e1{-phMjLEk2|~*
z7vH&o9=2VcL^Jb1|6^?6*&uXD5)joN84#Fj-YFlNJ&B`#8q?RF`{Dh=yf@26f+LeP
zE;+xIZKOr2tQ~8)*WMgVrj4`@K2AyaM1b(<T*=!lFGR07_@S+yzDd^)DPFA1eQ0@u
z;_v*{PbPRo8F6o>3zw;%*08Zce6Cc#>P6opnL35s-p$H$rCK**r2)HuSYLz+rwJn%
zkGcDLZEq-Bq9NtG1zn{h?eNg{Ttlpv1W+ryl~(kowsr0G=d*qP9~nhcmT3}yRK^19
z5wV*|L49D`*;s=ih3xSx-(Z4yiabBBOeS&o4(#lReLOT~sKf-)LTrthYOWD+nd`za
zZ){{&8LuQkU!}gCL%f)3oS<rhkoHCtCCe45*JU^1DP@C<TiQ|jRA<6VIF-t}&W=uF
zUHPs1k||j@X@eO8eYA-bR&+S2EuMtRQ)khuX9KvYBK|%(%$tt41z;|9Q<A1NC&TYG
z%#Nq>6WvwnL^JSHeq9*r=}h^4TXhYd@^`Z)-21{|1R3matgIoab1aY*E%T@J8|mVx
zso|c@Q6+-nRwvKoKCzG|A8wg5#XXj|xU9+=r}N+LsZ-Hr__%4mD7dxpBSm6U!SMLU
zH{%BNG--J^yVP$hUX=?l=NidyS$$~wZ#<m|qkPgrM0It|qMMOaLSD5w-IpN3qmFkb
zYQzKYG7k?A<&!f|UEb$kvBD1#ewQbqd%s$83F&)o8QAM$mJJTH)ksDNRpyV^N01Nz
zP=yS??k!jSFFoZGRTyI;Z?fXz%=#<ja8krq#6^vS+`o`l2j>OvzZuPw+$?3bv6i)g
z$R$DtUCrfjYKEdRR;1axj=ZSjVT^miBI<Y$El=ur4V4NVni<kM{EC^*x)*uY^@KLH
zuKp87Fx9Lnaib98w}r<Hv7bRLNq(27BVs`KVg}!auYy3Ya`*vRd|v(+FYhqlEa3q%
z`R0j9hYyl$zHBCrZCwrl2X=DV4qAG8VE`f0le9d5Kz#8SgzriqV4Z%;qJq`37DbxA
zPQ|TD6=H?VOFn9(P%!`Xk{4M6q{(u{NMY9Gt5;K=Ti*ZWB-&eJvmnPw@80?&&0ZSf
zcoWXC#|!s5<B<0gKC8<s@bY%M?Kf6cz4<U6q{~9kHZ#k@w2FREwLc|skK!?hYgthV
zFAfiKA#^+6UWbeIyT<g%e{AuM?`a*3%j8Sx4otrY1AYdSp6``^T^|!=Mcogp1dRup
z;<DAruyzf?a(>zcv2UNgZ3oe$sF?RjrOd2sj1&x&)fZ-*MQyGzUNCAg5FImL{Iqfi
zMjo5*+7`>6??VfT=ms4t(X}i{&=Y)1{qa+6@*hT!`r{(KBz}EtQqj)io?0>DHkh1{
zZZw8-FP##HZ|wPU*DSt2;*ZrG=ca1ec0PLgl$qGSi13^8t;)^Z15w9VA}<M@)0Z8b
zvanVvZON<da990Tb7%ayprTMM_bv{)L)+@#`07@yU$!~zVWr}uy%iT2EXqu@WNYIW
zeK?arSP}M{ChwDsBha)rP5HYGmjEHsIck^rw77Y(K8a;;y8<FcIrad5RSNVT*z9Jb
zAq7X6h^ur#LBK!#wx_Lrg`MkSRzl=}0^)Y(+e=VDnsi)9k8cmHnoL2Fmp<!`nq$Eh
zEPhkIw5LVrrj}QqQgIP_WphGsa)c@>M$v39Oby4kouqI50KDuODj%UE(z#k>$IV%5
zIE)Jpy<QHSjq2v|cu2fuBmEmNY9yxa6>3c1lu+z~S7UseNPHSzcT^!%+CJyq`FYkZ
zWy@YSmFfaSyFVmdl2fyHBAx5LqA_uJdpwNNEvwg|MpEriT<GrK8m7#T)-(6)ckAsg
zuM5(It88bYOg)qZ16QgGem6&?Q?id=ib<r?Bs$(DP(CC|`PKl!AhnGY$9b_D7mkz=
z<vz^}SAFL(KbH~d4G9GLVS@?#saz`4f#ihkuD1<U)`$f9Q^BM(!Oh;?48g094M%>y
zTU9f?zMs{<@ZWO*38n*xDe@e^fglGQ)+u*g$9h#Z`}f;PK6D?9!J-LQ_%aW|_BqHu
z3XX<sR2k0-Devta;0*k9!>2$5uWTxad8$0eS5%PG?d`3)Sgsu0pT(%LPn~;ITFzHg
z+X$l)xS~vfZgx0?TAS(SdEm3ffyl`EF4RhjpQ%>-qHG5H(Sd_HJo)DY(N_6M3zN^b
z=jE}NhjSTko8?+vx%DtJn!aF#`OIo_x=8oNn?akpwp|g)dH9(`nZ6Ct)WmY|Rjdh}
z_%&tt%i250qpJDH*_Juh0fOi4WFO?qets+KI3{lt)F*a79M^(v;n1s5&);?1e<m5v
zj>4=s<p|QplkaTyypj?LBQlH}M01J6PhB}5VLv^`=zsEJ4`fuiWVP?!TEkMdaid8g
z2E1T(T=-EiKZ=yuKXVO2uMd9_3A{e~gPKBY2AW_6^!K9eaZb)oS7L>r3{%WAwR2E*
z9WwYhMop95NS@`q<(Y&Hm8Q*PW!M(7LQ7O+jW~Rqg%zHn={q1xB4Tt58fXOrf~L4O
z4Q<{7&E}VtbHl!!XU*`Fb@Gpx&{5L_wZ;!%J-e;4cpbtBI;MObPq>hpdHhQrYvS9z
z4l%F?ayAii*v<9lS><?~+P&6{AT^%pe*J~Yxi)v)N73Vm>mo8;#z&&^tBG&sFE3}z
zzd*5|4{y`Oa&|Z&XrnD~Txd<9aCSkiRc`5f+!A(&SMRBjC(2#y#v3Wn_?fkvn?S*&
z#r-yW8#PM&eFYSj;c9|+rDWRbQg%k|>oM=(6VDwTTmw@_zVuqjDn&Me$!oGAWZo!U
z`=3sw#36`B4Hd}ouxznG_QQJG2H!P_=*nL<e&eBQ*-ExBDb6&bXoS*tI*DHJR!WKF
z5Cx;hHVj0_jLnbb9p0ZIR~-a-ffRGYoK4=syHhsUSw+}PAcv4P(nVEppEDU5#{&0{
znRfJjVjeOfhn8RSjn_?lO51djkEeyfj_<1e^Vjp_9$4d+J4N>l&VfV!w1=sFSk>#o
z#UEdy6QKj`#Nk)SM*JDe-J2pRg@Si={Qz=?<`Pv^SvhFc1?tS-vQq%@^GLNFggAU}
z`?hv<%ogtfU6Vu8GY1j5gOI<T7{jg8srdacwDTmzc(gy%zmUgzl`&|OJve^c-@+XS
z_U=v8aVif86l7-2nKYZ^uvLT)%DUSic_LSvFSa3T!<%Q(lg|({9V+*Wp$|u<S36Un
zq?R6BBwI#%lO`aidT_qn73px~Vr;IR`pcErX#vlxtZq@@0U4Ps6L#=>E^Z;GX{+NQ
zzZEZ6THCK-oNIG&FiXqS&z6c}HZ?>k`T4@uAqK18RQ~*#frkJ1el0rkf3c_=Zr%1n
zlgy=$6rFJV#p+<Yu!5x%YFA{dx2k@F+?fD{_>p44srZJJe{9QiQsSpa!up(Yc=n~T
zm9Z-kZNJ$*;!>o${`~$jbF}NlLaFbXJhukJWwkAK_PZ2^=_<&W!zxi#e%gH<Jqp=u
zv9N)A`WMw}cT=NTSo4DCOuX@nvzMao7t0!?>e$O>YCq$7!S@zlH_d4^IW&iQKV)|m
zDI)Jv-k1Sv3JKzhpN#cTWP&w&7cY)kqqC4i^ehm*g*OUkZ<ah#5i~t*)VxzMcOw6_
zn0{t$Z%>$g1^UeX)=Bg*-;_;~R|Q-AW_3$bd26O6z3jlEkAW5{Ow3bNWa<{X_*~7y
z6lcK76fcW2LVCO0c}_GD?`b$mI(nxx41XP_At4}el;%MxV`Uigd_8jQkj*PI@Mfgo
z7RJezN-mf(ui(fm3Qr+{!~pK!7_V5qzyl69LqNtSC{?Cc(M}D4Jjojpp!}?=mcbG4
z={Wm%W`(nOobV4ZjauGT1O1Kw>!asi_$TI!U(M-iE51FT(%hT{{A))k`JW;~GO4Jr
zWo<b3>dTdvHEH)6!Gx-gI?pWMfeC%dVSUQ7|F31CM(c?#+HzZ&^~)sa?vJo{XlsMx
z=P4*rVh4?Npq;?WugGwr5=Esn7#sdGVueMrRLrC3Xr;G(yc;l#Q)K%+Fyi!neG-aU
zy%-eKYmPopbj!hWqDx&7SMsj<q*Bz^dekMH&x+(%>UulNL8^1tZEBJKvJsZh_py%)
zC$F5(D(3CXpT@@TnAj<!mMkOobBS&*YOJa_F(xUJp85<;g(BePTfjToDm*nee6cPf
zYNUzuXqy<U4CRO_SLWWQ8nO9OJZD`b6*Cc2AFv<3l}i}KY1;#*8w+vnlP|4UfX-I)
zU4E%yex5nwXg7JKIMs1oaBAP{RxVY$lkWZ5;CqRjA0x$<pwP<(pDlL<{f4TGq6|<w
z8bL(*s%^T%fvGVG-D2Og%&6#b`ocvod(isMIOXdK9-T`oKmroxIgPC|CFC7FB?cIT
z==-;*51Rpzhw6h-0K$wtqwYI<uBR0>lV@ko39?{)B0D(BZa;fY_f}K|d&<o_V)|~C
zC}TTLmbW!tr?y<K)mFY;LkPF3gQ5y2587`4Rpw2nAN2DAwT>w0WF4#+ruo#^DWU-6
zC9b3Zuit?v(zg;~MX6+**P-~;SE0EF@V4li4@J+##`|`bp+=3>JpfdGkB}Tah4jeo
z5Z@s!`0T{5k$lzaIo;>R*5id{?pn_mrdwD^Ee5~5z+`=$O%?FBfJ*<OZ7}V*4Km#k
z8-Gy@!(APe07o@?FF$%m^xf)XtB{l(oO&KJaIe@>+GmcqZ{E4ZqpQ|aBZG+3sOZak
zYBM+?go$!YGUe6EEcZ$c$Y+@uyE9*Z7rOr{W+-TetQ}GM(RDmtz_ppaaCG)zqomX@
z6b+k7seqm;V(&sSiCJMyHh4IJ<k(09AsIEE0~cvf8^DRSb4ZXCb+l&Cg!?p>5&~cY
zCLgV(Rb6v;P@mbKWQ&-0Jp=G*WGS3#w48a4qoWh%u&OfAy)zaQ(x2VC=+RRdKx!~Z
z%YbsqaUl&ml=a56Vu5Se=||not7l6BHBuAjaT*g|OT&$R)i$0>1iJYb{l6y6y|HZQ
zD;{sZiwjQ5>n=3Mq5l&qB%++c$$QkPAF$*pH2SyFU@w;d<)t$ZKP&<|-iBfAiSL1x
z`{KL6LsBRT$u<u{-4B7=nUJt_`U&G#G%?g7%RUYFzHGSHy-->rst(qtl{#%BQ0e0<
zE-hDtLR-N|dKcN@zmaVjH+w6_2NXGgHontRd$5P3Y?q|x!I039AOo^FJP7SHljL^*
z4tFb{@^%{%m`EeG9XSvD@v{gD6v*a;zFMr71?aKwDJ8)gHiyHHd8f2I!tq%>wr2cd
z_a9Gt<GtNl68XGQi*=ECaHU}a|MR1d8fWRuTv3izO!>h$YlWvXNZ7`R6yu2q#RJK#
z9N_Mld$r)iH-Z4e2N_lJjn$8ixXKJoS~z=piB~*`yuPTd{-6IUYi;7gjM&IAaWJdr
zl6}gI*O6j|%Eah%&OZ^5JgaQ&#V2Nu_bjE3Djr-iy8^Xt8{d?eDrW7ki;MnNQX(@G
zpJUp*`|m~Mc=y;+#6MYbU5k4eHD&O^`EH0aXWPzsLB<y3llAuy3rG)PRW@5_0=6%(
zGqj8mFM>3hhr{T;bkrr((%CLdI-Tm)kj|3WetX*{IC(Wf8s2H0{=3W1*HT)tznwyn
zl_5bz9<lgRTZX5qlg>j74lr={gNqit@V!epI>CDuzlz2zP;3$){iqncUySdVV=-07
zQur3UX9xlr8$+0kfO$ia%SEBZYvE7qpM}ko?(!K%|L`!GluCkfeuLgVx;!+h@~<AL
zi#;Z+R<V-LFqYTC91-7T$q+Kk<ng?|JUhZC2i(WPXPpg=rweKr%<&c?^HZ@dKIE~n
zDahYd6?V@YMOxqf&dj7fa3#WM*(&qN(HG~Ok+W}KV~hJkS&F<Rh;hcAkw#zXG$U9=
zgBWf<Iju_s6!FszERnq_w}Gc1bv_as6}0Rp+=>8{IDQf@f5oLIhVg~vSTjzr9x1*R
za2O|V^O*NSnoobVxA9LRIj&BBdk6|X>C!i#Ok0N-?j^kkLm~v6e8EqnaTh!EM`Z7m
zl&K1`GQ{_SD$-D$$j#+JG}Fpc%S|d;s+QscbCIv8`IbG@&wcY46V8u^oXQ8O(1!!i
zaR&XS%J7C#%)Qy(q?vbUh0i`;73fXyKotRIid)?xp4tSWNcUI*w*UtM4>BHxxi>j=
z&pGx4FkAJf_8$C*gOOm>*eZA1=J-AUp`23|^Y1?!hSi^47Mj=7()Ox>^PK_fUOZ_$
zPLC%O@psZ5hCTfUf;J$UcFHg<8m~TLE7@Hd)~?#y$S$$j9mkcdiC;9k;7zd6jql4m
z)1}$6N*BV8Ia{i;=2N<yOk3vN&|=7vYNc$o9VfQN8|dFt$HZ6w2wi8sw|Pgm3khq6
z%8tI3UHqw^>9HQBiVOK+A;sZC-zX?VaN+)OFjM9^uBy<^%z)+t&E9hUX>DzHjb*HK
zN79tas#Htwv>_`TTo`WPXG_=WL^ma&M^rD`@f{NSjrA33dYmd8rxP&4Wz*XxvSz}o
zIWH0dub&F0kmq(xtW>9_4{|p&;o*&`UyTiB8V^=lq_=42IR-KW@4xVkI3kr`o-vHv
zA2NDkl#QIM!|#wxMV!<jg7K$FoLY|0i{Z+=7q;vY2V$mpuuI#cqE-7#xI@ZLMwBu}
zp{1!FwUgpOnj^Jy&NBD3SB2bt<%iGCKf2k|_>P+d^z`7CZlx<o@nF$sV9duk%{Nj2
z5)eN1NWs+*05|UJ3$(8BpFJvP(&Fq9yHI7(I?+8VG6*CbLdTdC=|xS~p^FvY52H9-
ze<NCW3+c4<UV<45V<;UR5EewO*i_hBSuFwvt}YP#I2Yj6^l%bmXJF8Jw)Q4G`cm5-
zMsCZJkTudiYAiJOGBN#Cxb;f?s~zX&ecS3aFfAxt6x#gqw-#f$CnsXKHVFe_i{S6+
zyxR3-<DL|Bz5qRD0$aXdm{p8eG0Dv98K;`1P^rt@DHC6q@XrYrDiBL3dY>+ZZWx7J
ztishq){+buLK$*F&svcSIjJXVjw=y1YPi*JSjyrGU;J|P#j@ABpnl1F?msg^!%Io*
z+A0_9zu0cbee9y$S3Jw{23ME8Y-gr&97(E1PLro3Nm(0h*bMXf>Q&zfE`d?7LIWrc
zuOdhK;YWqUkne1l&Y%pixzKWxc0}p!oXKh0JX?AI#?VhD@kJ$x$5WTNocT?BF;;Ea
zdu^4n0H(W|`Kh0J_cpJ3P@G+i|6dg;>_Lc3h<~qLls-eqjpi<arD3cW44F3;v{w6d
zm_Bo!@u$_}ugPX!l?NAv6t}Hx&v|CLaYq&Ov+slj?s8i8;L;?}a6{nV*Q(YxerGtQ
zNN|bk<veq|GJjXzGzh)jyn~DHSVbcg+uy3cq=MDpJ9ukpR>Eq$*_}~GxQ1u}LczXd
zozB&+^|I<DwPT~KJAyHp?I5I_YtBKbieid*p2dIuowjv0zoB0NadLB9yp&PS!R@J@
z7krW3*6Fz97v#dH2y2F!n}ILm%?k#4X6uiahcE_;csBx_tY)IfMM>%7&x<l9vV4su
zDqDVKM!_zMD7-qysTmXML)MJY+PAf_1*;P&)Zk)_sVm27IJVFB&L4JVKdk@E$$!9>
zH3j+U7&#G0bD3Vb(dY+oi8?HZKOToh`@Y9nT;7O{cM&-+l_KgTL1v=`hroc&=#1A!
z+Q)0?QZ;_-rSl2E*{us8-Db?QVoAlN=7N`%HX7Y`-%NSPGl(Dt${GxNc4vPWCHki7
zEq?k9Lsri`okX4up`-79FbXB)y5j;r{Xy%ZL}~cv2?#Sbw6<}UiYiKq3Z^FJqZ!Ca
zX{6@oV|V=A2_GfCAjrURW7s`-h=CM&GyE1V#-=U&&=+8vmw~^~1492O@i4(Rba*k5
zzMzN36X12+0IkbAv*WvKIsjrd6sV%sW@g*K!=?*BEM}FGs1Z959<@3Efxy3<V6J4N
z;I9A0z{s4(^>nFikjRGD?N;`TwJY7MV9##ekjqMtrT-uzPi67>wGmm51Bv;<zIb`d
zAA=BN#Ed!CSG#nx!Gzq!_vHD6RTr5(is|htoW;9~&1vYJPUFuRwmdJ^;rH;V!vL~o
z#7JoHdoE_wGyLyZWhG$xm9}IYauMJkcxDy_p!U6+rAr;5@9IAM37jG4wFnY1`J#T-
zDOnh`Ol?3Kh&bk7ofS6M#jqi8yBHh=Vb3AgFh*7G_1UohcqXKu5xY=b^6akn@n*>p
zXoLD+^cwacpyfxVPW11f%fM5hO){jI_<O&$J4r~M@1ptajuh9n95@2t{74v+w_i#k
z4Ygyj1`0{mY1_w#tb}Xu@Lo4PT<E2I=b0){i*TAA;QbWD7aVwDwbzEth*7I<^IKz`
zr(@+a`q^amQrGiz6UMwvCyh%DgvyMQHJaP<3<itU(q{AcrJ_*GAkP7-n-m=0zj1I7
zP0Dd}Pqk0frV<ofx}K~G7Vo$*f|MGCVv_1f%&?&Q+nLJPWT~5KvVn!<R<i5aN|q90
z|7;L3E0%OrYov5JJ(ly*^@!dz)92qFm}jlZVCW*0i@)*%BZoHGjkQ%;MC6D~t1dP@
z&FOBUn%34&ZFe5^?074<L?++2O2!f=f1r42^n_Q)%(x;xTs&1Aj3+rpLsCp9txLaf
zYt1yo7Icm@WhY|y_MDsL5$~WToACJ3B3M!>zgtdCKXBqUXV*hsXKZ3ih9_J<T;IMO
zSkh3s5pmUf&@BmujF_Me`sF=Y-N77|lGFZr{er-pZ{)nlf(YHXV_P$bFghs5a1&Ki
zs9w7HF?O7^eB+y!0OzGh3f-Y@MN5PXcD#|{XT9WvvOlr!aLnjkbfD%zz5((Aac|8=
z`#p=VoWRSLnz`T0QfWn5h`!Xkb#!**iFP$BSkrO!W5R~J$8yC@@a0Ur>qCJ1Bc;iF
z^ih&>l;uL4-zt5jPyCo7wc;YvSO2-ah;!)0>b^%7*=U?E%y)ZWd-%MX4DaIgl2=8U
z!gef$7@qI1A-{5|{YEWp(Y1KhrwCR4N%=3&C*X=tFH%4;zh{6cqFT-P|0)1nxBM&g
z$C8gY*{uMm$e3iO=_ETGH7(e<GjyjV)Zb^4WCE@az@la%U#sa89K(}z?5>JuU_bYm
zi38C_Y)`~M;gpH=G&UZJi{A<>&n7M^XRuQWsi4+-9lnqhs?4@a-y&{T5b(IQ^x-3t
zPTKcE?jH=Xw`o&@Gx-LVSD)Wi^@b>;v23upf6uuns_n&oys;PR>S8p`>mHU)etBJI
zUnd|?Mu4Pw)XEUJkv;Z!i2AAYDf#4lujS&#pjGa!*_l`bZi*O~GZsN_BN3mBmHf?0
z?rCZ?siI)c*2|SV>G4KG#Fhx-{^^uS%1tEcD+JGIIamQ@YH;x0+U}_^&x_>L{Mw~6
ze$%U;>xybNLVFU~bp2TX#vm$WB&1Wt9cYa?6&o}o61M>%PO!c+)eLR34Q(>^$HWZ!
z{xH0A@tB(;Ev9LSQ>Yy!O56%l_O{Ly5=qIMWJtl8*OL|}pan}~+u<}+m|nJHY3L_F
zC8|t?o}Qkr%>Vf7O7qNIZgth29xGt%eXBWUXJmi2oOQ*5ph*flZ7d?d#~z^tR~(UG
z?}TU5#e=pAV1qFR&(y<?L;eQBBZJ>B`Q#GQ6{>|T@CJ^_>HKz^&(1elE#1^knwCHd
zfKJXVKv*aArA@{E7D%U~^VcU#fqqN%=ziS5l3r(iy#6dV$$EvaQMg75<03IeKW4@v
zT-@d%m$07sx@MjukLG<Dty}_!L~$F}>&xpB;kgQz2mpvv>83h3*ab~UM0mIe+fI>G
zVTIUa>rSti3A-1P>@4{~Q*!Udz(ZZO1ov#WH#Gc`^|vFlIIR`l!ZzIzmbGHsIAgCG
zR23oBbCUS9V;?(}#HA$2{1@R-yTbL&_Rkkc2d9zpC9FXr7jvgi7k*uc%~#HHUtBj{
zKV!k0(bS{h_jOD89XUPoGQ{_iQxWRb1Fy=-@^!&56@tkgRUjB49ktFCtX5WWG!%t?
ziJF3b-t0i`!c9-arwJS(C+Q}XJifGb*)(7F-%N2s#<O#>EmNcdujnLOM%w4Ol}GDl
zrHv+~em1TfAt=O6Xvbh<usD5Uo(Z0d*{O+5by~<wkFSw<`SH;Y;9z>d7f4~Miu70`
ze7k)jYS#mNw4AD=aS13&Of|{ImS6Q8bW)q{n5N!hoaC9K(j&Y93A<ZYr`;HPwO&RX
z#|@OG8PKp}d4Oc%EbE3>su=iAvB`WT`-`s$vk6k)N8yKll&lu`sj-jI1~UAfBarNt
z$g)|9q76Sy?)zGC@1went82Q<a=`79Q{$YFn%~c<leV)RJ4b@iw1)&8?H6%v;I6IN
z?m=kRM%ffk$?#Pm8@v}QQQ3XMg@#(6J+^%Ju3+c-8+^4{c3W$EX?*tJ@AeTVjDZ*H
z?xYw-!)Jb0yX2mYv&Bu>zPLz&MP5Cpr6)}=<9jtO(^9Q3p8H-n^j5+RCu1Tp3eyh=
zo$Bn`1hpQ-%sqQy)xNG1J2m`x!%i#^`34z!Wp;AAjN-y)a^hBvrPYJNBulDBNfdhd
zB7SD^Y;iwHdZc;<*SjIA{!3eZzyPe}_=tEaRD8bbyx_;+5I?9#i&WQt8LOr)qHACU
zrMUg5Oj4PzxJgi-TOk4+R0b!;s9fk9edGXfzuQ_E>E#K=-ZL+;ekN-ck0?yQst4Lz
z{ie5gBn`4{X)Q<?0No#PcwvX|$uOAF9+i|tiky-8s{FsbPrUTlo}IFKC}OSR9TO|*
zN#^1+c|R3C7clnv$75jwh_K#G<QGMG72yRjlgW+!PX|rCX6qOj3tMYji^D!wo|SKQ
zKzGv)JAdW?Z*5b^*S>j^r-iM1F>O`{viigL4aRs=rcYD8rSc-bWUu9+SJ`t@B-!*M
zDuQMYAnrqFQuDk&eqz9-^pJ(y&0*Equ&a>6Ldd3*u&I=ZtjY6uU#9~739CfkXUll$
zDiVIfrEJZ}Sv5lf>~`3Bq1hA>o*m9e!Y+N<=B6X0#MRk(+ik-M1;F;!;5;-m4O=)-
z?*x<tW$^?Fid#IM2(~*5^RYKRp#K*%&1YvOgwv#FXN<1Pbl!2&WpHz*dPcuIE1v0q
z1Q6{`RJ>F4RYTuyMDt(Bnt^pK{f^&WYsg1Njc6=8a0&|45pDL3oiO4LoUj<K4w<@*
zE$4t?joAV>)U;z7{lZzsj(!r!t@te^y6e4_C44F(2s`n!fVp=%yS*oeoNm(EjC-2<
zo4Lfj6A`Zu-;JPuVI)1lIk8o9w+~HC!v;c_SNtVK?3g-vrxX*EoFELHME=*~p?jzL
zHBUXkXwP_s<V+RaF!Dg+-vHdv1;Es!AOY61!h1gqg+ZMKX|GdIhK&Z;Z+vTO1>~Ct
zc}**SanSr|KG^2KC;j!KM7tpyt)%%q^z}|)tm{oN#8v*}ZsxeePb*_K($6%5t>#!Y
z!1Tx`MNJz8NF6E)z(hq-qYKSKsE|vqT@-JFe(dI14(<B5fT21^LjoHE-uyq+BNUTy
z%Wl`HkAm!MPDMhPH$7p9cNW*2AZvRilipc+$Q(L%I(Eo;SujJ-$b5a^8-X3F<KB-e
zw-Lm3=t(<Y(f{)bpc_sX)Crbj_Uy^)zG0TgNqXKnf5&M-rj!mqwU}fkp1DLyPUtrD
zP1olery!7ZQJQq)<l*8Ps!Jo>qWoLG&7&}*NCQoDD*)rW>8cNnmySPN$H;PXDDDz&
z@@7!m$kuY$eV%LgyIiS`c?IE?E}XXW^hG>ftSX{<-g2s%ZR6!(dEo#a<7fpyKkFCX
zo)wbBY58R_^mNUr`7=iBT1}HSkJZ!gl7q)VcKZDT1H4Yt{J7*it%K2>qtxI$Mehxo
zEp^DPz)4riVD7FXaaKMjV}Ymlkm`AZ?==#1UYzl?voXy4%0fFmzt}rH?%5O0e|0DO
zlwmB1aW>8%yz(PqfDeaC7<njxAgCxv7gry~C0^ZnpgdLK#DUHw%J8>DC<_7Y(!qcr
z5I)IS&<l?8EdRRp;{j#nc-8??VcKoS;Jj~v?m-laprp`|-t>}&5AiGA@qA_Wx`YK1
z?z?JK^tp%K@l}nLxX@5=62s5L2YCXn4RdMYUVNa6`j!G>llIO6z)@*%M6q1nQ+lmQ
zb4o0Cvp(8a=^hxar|W(t1$u+bt~;zaf|)~=76l|2_@Z8%@1qzg2$uJ@VwZ=g6;g3k
zyFbBTJYLVS60oo2k9q%&^s&SF*F!RND<|sLR2A!A{P$>KK05O#h^E7&{Q0oSUe0lc
z7YN%+kL(_BE1v3m50V(&x^;7?C@Za#%EU;Uxzl4IdyLics(FDnU`iWF0PWhma)wL-
zJ>aF+?%WeYqgQE#Rqe9i><5OMja2NRf70B>q3@w-{nP25h<>nn$Y~@jjCC_{M%Ya9
zK)L8HZDAPKQ^z{efq;@CQe#s6&K-bF&Ii;GH<A)z+OKKbKCfu)b>|r|M&lzdRH}&z
zvn6-1!P_GL`;<2WYci?a#uhRRyle^cH;Yd%_Y#FKi!SIhM<u?EKPi{V)!-LoLrYgZ
z8c9X}aA?18MsJX)!4_o3W7iCx6DE;{zOompv5rSy@jdix&-u{UG>pvF7L>kA<bzzB
zvv1B;A2uIpiZ`3%uqY)%!-?6`+4LQkMrp0Itqd8_<F$#Kyj!iDG)XnT`d+LAo^G>Z
zMEi)n(qN!H=S17_O%GKRQ!W?CCzeZ=X59S96b*>hzmoiC5gv{+5wGME%y%@<`9w8H
zWd#GgL+j%PP=R$G^aC^=5#2qH8~E}$u^tcgOIy5sp@cIst?>|Wet>m%5-b07eIBe~
zMA6yS$ib=1)^keJ^{bL^0kcS~2e6q)hoAZ(pR#PMi{(&v3UwreClmtgSEdZhN6!~e
zWc#xzf0J0(*)7ewtTuOSS-qQr)1t)&>+6eG-)y|Zv^^BDD43=zw$2!2uyIwL(~j`y
zyAS0$&iz3p8~oUcuZbxN^&QXu_Z<&_7tio}f$nAdQC8{_e>hXHjN6^PF+_N+Bb4%Z
z-81W^3!B~`t-oKXRIlO=NU3&#{5=uo-ONbTutx!nnA5-%Gm8+sE=3csTMe*AJ=gEi
zx$kg>GL@4!{nN9eLnW1aw%qK6{WTa6oA2K2yb=l8@esA*dzaQ`X)7cWs4qz>5^o+^
z(hKf2#tW_<SLax1`pzr21xK`*cEJiK$CbdG!gqpITjC)A+`uC=A5D`^Yt?|pws$XD
zXN6jRkTcKjQwk@FL!|9L1N2re85%_(<w;QHJ4q$vVPL_Rpcm6GB3ug2<)~}8foZwa
zq>sGe8>zHJCA;jW6?g-$*S^)^pPx7&?<OlJ7Yri;pO)9Qdq53wW7B8LNK3aIU{Okw
zQ75$TlH43RvhdInc|hZCIeW|yHUBJ#cP4@d{_e;(=Nr2Gs%*ERvJuMW5J?OMSu~0Z
zVbDDu?kFZ2@GwXZ)m(CNdpApa!h7?c>Jjn4P@r<3oFwTp11F1_N%`tzCz}~B+;c|`
z(6Rd9FWnD)#@pp(i<dj|5-iLKH2yc`Le9Uwl7cj7=i~aqv`QU7d*jx4s-MaP>=0H~
z3R&yQm})&CE1C@h7vLsvb92+Hb1yv82Pb8xD)aLvW=O|%_TLTH?85y}o>|#J^*}Pd
zO{JvQX=(vAWp4TOe^+y2L+<AK%F=*=m+|)zLH*J`_eK=d!d?t%RspW1Z1>}Orlr)m
zgx$qX&efz6pA<sY$UlExklw#f|L748IyyRsEh}m+0eB{F)V~-7*R?!&&6G`h-v8#x
zAb?qL+1KZ^?c#JJ6wTEGnQR`PWaRK&FIR(&yk+x6a;5kFfuo~}_IMy6D^&!O*niKG
z>E!-Tj}u}Cmje<cpZz{oPY|)@VW#L|DZg(z9C>K;)9b$4@075dSIWHU_rMOB_Y5}}
zxZQMemO?*#x9XJ1v^wQck&(G`yt5EHIH+<^Cy!btSgWk#@;{qTQdd_82ndq;WFzJr
znI5IZA5Mohx#=U1KoG^?H!sj-MZ-pl-SxPhWvMue*lq7Uf2rEXpmmN1%d041LYX!S
zzPpiRkL7iBlm80Szn%D3wj5E}Etzwgsa^tIXVJgw;>nYsQO~6|Bi~6GhiNy^whh-8
zfx8hbL)5TW1@yQglF5jd2`^{Io$<XD2L1HiB&c?=TGyM~Xgr|23Rshb$%y_w9!!B?
z{O|an*4E4qIQ8BDDr}zafoXkU&5tp1mJ#Z<D__5a?pC>CeKLKis>4Rg`#@?ZA&l;o
zTC2#F77wh9>h1dje+`fgZ$}=aYrz5CR%crv#?sO2tiRVC^`0=I|5Qg&X(=uVs~SH;
zIE7+`$@Df#8;a5S1YAg6-?8<WqRGZ7Jib*Wll!Z74<er`YXlL;BY`Kik?G)x(N9zU
z{P|Ph-?js3hyRmygIg(Y^=n<}MPF?@@+Gh(p8m{!%s#%{ak9|Wu;U-3AVnDq6LaAW
z?32P90D5YqVukh67p&h<q1f`AR>-IS32~lk`zE8G-=3#9u_9Ql8pov=*rK3-fIC;J
zKu6H4-T5a#I6#HDuJ#gjc6Cvt|1BJCGT9cXIR*(Rj9$?Byh)X$esdt|(mgCn*R3wf
zN}jt){qh+bDGj6J+m}OO{H3a2WHn$9u|`-*K7K?EuN?G&f*DM_Ip#o;!V=MM@IM<j
zj9)tKUtA$-f`M?2wEsIAE?gu<@8DqP`OyZi_pzh)ALsTUEM5u{)~KFNERyf6&JVI_
ztFc<PyzWYEBn0KatJjq^!E0IlM%jsqU#fQICsysQ#bXB@5|$7;J+OI*N}&Gw`H9R1
zk!g=I+w^J=L_|c$rToOZV`w5l#u9`vsOxY3@6etxkYcA7e_%_t5c|0J>0`jmN{4NO
zlH2g9%4H=G?H}wTy-YSN?4%LLRF@L#I|l&mu)Du$<fwK81s~g8Qd-(MTBxjgeAu7-
zXlNKbxwG$$K6D_3>nRGkzq>=C{25qg!n~t@s<=~;Q4h~i@nq5Tz*xA+wvxj0I$SnE
zX2d!0&hH*@bDrf`y)@Pg1I4G+*dV(L*JdpI={@sQGoBA;DD{!apXSy1hh{Lwnun2H
zL}Uv1tKgLeg#RFinJ=+90?4aN?oLFj2*EyFzSj<jSIktF%hmWAdrFV4g_ND;6Gd|q
zQ(D?{xPxNd0;k|AtUw2`z`&yfyh*25`)dQ5CMMfPMkocq74#2OFn#x}hCp-w;WEfO
zfi)BRP4;nwGp845eBF94e7;nSb*euhJ4=%qzC~ejSGPqi431tE3ku}{G-B{Yz{s&~
zi`sy1=G{cfpR{O?w&!N<wjgJrmlvJHdw-9@>+exujuf$-=vpFf3pvxgdus|;=0p1-
z^(WJgFDWx{0y}tl6&-yiHcenMcx@wLcd63HDiuAmWmF~%ehc{|gV*xjJzVlP=@8qz
zyu5Z4>jmaW-mVK#RowZ>j;S)k-nYjsms(S(KuPw|KT3!&L5yMxDBG^(;<?2vzbKy6
zPRbiPpNuzj9_w$u$>a)8wJmhf!IfG|B#8Gw3uPLeDZcuXDFxsuutgWC=Qy+Q6wA6d
z%pv4Z0{$QnwnroBLk`e_pW+oju)uH8iOIymBKrJ3>XkVEdPu_rBc=4BKmVrnDd#6Z
z5~zTSq|HLZ8#p0Vq@e|3Cdxta^J`Xx-70RZS`QV`5JygV8~fHUQ$Q&ly!O_Jn@mef
zD=sxP^vM(bVAQ!2NDh{J?pYlE9z&*a7C^&0Pf$8;bW{uZ=kLba{I{{|CD=Na+8G%B
zS;>)**DOo6#-)4)nW1YvoW=L8%MF27X*${Ba(O)=k+?f8PKJ*>8#J;(J%Lb$|Go`9
zjp$2E(B1MBG<G>)6+q+pU;fhAoNIUvV?>R1=lW;P=%?}SH@_%VDs5F5z;-<f<G;)^
zWbpgm*RQtxP^c;q@P!?qS6!c8$a%d~yRo`-kfu$c{`e%=bRQZP6O<L6l$;#g-Y#=D
zQ2Kx}P+w73R~Mm++E|;mmAy2rk4dsgP!DT{sU6TjU<f<;|Gk%HP-Qy)x7^OR;Mzyr
zXvHtp`C%-+H)D+Bvx>w@*m8-1EmEWkm%huxNIYma70v-r7w&zG^rE+Xmfu<QZX9LQ
z#j-_@j*gbwjWDRB^K~U*PXp9WI4JCy&((XJ0;)%yWi@b!k*!`aY34en4-#mMY{0Dd
z$rk^XGjG(ip|F&;zZ_$PTMrQFNv5=|X`h*EogDA^{ampt5o1geRb*o)#S5o%Yp&Sc
z!E3nz_vNx$ozEmYF_O!k))TE>kt{D?!^p^S^?Q3T4)3dNql3c}WRAb{y*1${pn>`p
zF5p6Z8iFgm(Cj<X;_v?#E6R%6gdwaOKwVtfWkm*P=Rd7)OjcMrbZQzIWqQrwHv<jy
zT4MGgSm4)({{W$OCwHIzWZMfW7tg&j_w4@ib$I%z?y&6T*GS#%?VENACC;I)+wQ<a
z2)?@5yV~_pC_Yl@%+IklZw;|<9N2w7%Id`=s}RWiCgrhdjNjGyPY#OC97fQNO}qYk
z7xYtYgu9?5B4A-hip58g4!$}0Ryy#W`C{wa^)`$YT@P-Q5(`V|__td$*rw%_UiYOr
z#r0xhQ`S~u+$e-UD<n`nEQX%X_bBZ8=ja8l3s@-ThQ;$((@80|o=8^s5wIorO>q%T
z;H&o-;vAsd-+=yycj)mR;EZVI;&QODwbr_=yjV|l?PoG%JNiA=lT^3j^Y;=uxB>G9
zx?w32SybEKqG4pZpgg?1;D4r8HnfmKFPcG}(3G~MwLy8`6<LdWS#O&_!Ec*Fj82R(
zb|WOiNm2KsFF_el-{CuCm*0gs9f;cQdZhS>7kU$OQ>O*A48fPGvI=`S@zUzL3u1!8
z@YoWno#$RCjmwchj~hvRurmW+^~<1K^9)x+GcZP0R#s`a24ER7U;jCBL19?JPqvRk
z${*KYLr#)&XFlE$7ZadLB~a}`DWa+`&qT`T;FUpORQD;*^~p-d={)N*y#)5xm#u>>
zKqXtq8u>R0a%ox_e`<85FbbJC9ByD)Oxg|?c6q{=oskf1;(%Ros(}uut9DO6<rXl~
zTO@*e2YF0f6`je@hfrHKQl#z$6jP`*VG@b`Gtvy}i)cSNy`TRk0F{d{0mWqU`Vvf+
z$A}Jyc9mPl2mZ@1F2rg(>A+iKT_&3&-W}t{I(0)b3P?|pioCz^m*;0E{Y=uh?TNP!
z0IG^u{Tqi#+gR)M5@r6C=~Ph@hr2^vdOo$(znO3AoXhNDScAy&nV^=Bk2n}0_du87
zXlsVdVZ4+#F&lMapB25lL@FyQ;}R1so5{dRWjFr0shGFZM9k7Y%T}y@!Ooo|k!}3c
zpVUs(l7H9u*@Hz>9HUcK%VwNmm4R-{9NY9ov#W26W3EG(!Fg*d_3`$et5uwrUaw>7
zXuX{9^-O~lO_R;qq-*M&mBs0kE@aj-#xLb%!s^Y!--BL)@qT#=_6CqPVc_K*sf+k)
zZGvRzfl{0poD=f9^hC8~H~v)(<Npc!vM`TZV7l^r>&Sb@kGuM9ZReF7!Ffjk6EtPg
zCXtPT>=C~r3L-&WEm+;F2l!xaR<`te8{np^^ogOwR3MjUy2)DzOk!}Zv~B_LK)}if
zew_SIdQpc(Z$XMb=rmP{j&={1hanuLC?Ic;Cl^_fs9ocV8CYxYj;5-xA7fcvU(X;e
zMV+yo#6J@OenBRTJmf%i@SRXuQ4)<Z=KcG>k3m`c--C(%IT)z_GIaO#_O^x*F-AcR
zDlE|NynXX8IMg*u;jA*J;IKwr@voBq^bKlNvZW;0W<!6H$sw<q_{OxeP#F)x&vyz(
zuCFe5-Iis+jhym%91no||91!e{uxFP1RC`5tr_Mn#%-V{bl<-4yi~{^eIAW1uZyXW
z0NGvZ_vl4Dl01Jcd<t8AJ^$p}l*vP@t*2GGsPDoTz8L}B06cczAL3FA6B^byC!=UN
z=?y6U-%rV-dHVKg`qPr9ZQ2?{?ewX1hT2zpzO~pexHpemBu2-C?)!;KY#-qTr{yLQ
z=SI=bq>t6Px*lmO@13v*dwRGFnp`!uUQ$!sq&<ruSl8d+eeI*~TrK1gilI!PW3F6D
z5Ndq8wm(2#)a&Y}ypbjV+5{2e1rxJFAS7V&OIHH3a$I({vkB_5$!`2}O8##6SH?8`
zRUEx3=|1$^jIK6Y`;=gb2mMJ}jfZmVCYOz*{%56kht;{;a#)iW>%y5m;TBlg>1JJH
zE6Tg1jEM98oU_+M4)H{O!!fq3dNV84rl+Nyn;T`ONy}^Og{R0vKA-vz)Ruxelx?zg
zI@_NGL6|K-3dnEsBm>$Wa&T}g?s+oBp(G;lA2AQu&j&I;IUr#DT(_&d(yVp#h}ySt
zrPg<jEGDP18^tD~TY{~LtPwfw0lm=o<)oEeaa?{XLDs~98~pqX6IC_$*$ZA2=y>J~
zt5)76SsV3+&5>6Y-Km0mm9tNU{%F4?E~(6c+Maj~YPk^9@f(o+cTR5YI;R}v^iGV8
zx62N=z^|yjaSuKqD<ng&xHP*T^7&IMRaJisk$iPIZ+q_pIkhQR!g6}~cZ-J2<Gmv(
z2#h`R+hJdxd!lr592pOcvw|rHeAi^iD4UoVl^A@Jr_CLnfudIovNQhgDp+K{sO2!~
z<s5L_PxN~SsagCfS7z>eeh+B~)<ua4i4jiK@cEML^ut9im|Yc_B=4k3F2K)FI7-*i
z)8<&%qQ)*aY`vCNF%W6|+b_vehFA$G()?XNE8stoi@szF!KDZQ(eB^W7vbmsyeHWx
z?fV~OhL4&?>^;bmF8Z@v=*UdJhjMS!FJ<N;^T#r{ckhb-^)-K>L1HSE0#5gz+<*PJ
zj7MM8zsNJ!wF1dVNv9d}B~W&#QN?ZiB(vss*Raywytq*F<aXQJ&0FHvFBm7lnRebw
zf`W$s_SL>b)a~1xsZj^b>frOO|M&TsO<otSLz5eBQy(6cGs8X|Y^@}0A=<b|oO^CO
zZs@;Id*eNz)6Y8tNa|(bNqq&e(M$63$~*p+-6I9NneuK+by1@4g+D&>EUng9es06o
zbm+w{`k1@tV}~xl4)OZ~Qr1pP=Nc-&DFjthlef1oIdB5!D)W`+Kc&HoTNN^IxOZD^
z>y@bA$cav4^QtPTcSKg?&w;$4F5z!GzfYZ0ca~V2{9-0jFR8rNybxXB?{5{U7}~fI
zg1eWyv+v$`C{n1%n;rG2TidN`{lb=oEt}FbN~%)5n`|YxkNH>SWb{;nxXm?_|M#g+
z;9ybWZpTxS10mae%PId5^S~?PC*dD#)A!Sy9c%A|H{RMI|Jg#BPM&vsLMugkHOm)s
z{#F4LijTCP<xcwy3QNk(Gl)xEh+Mw!iFK%UTiT6O6+|)6=AYhaZKIYd+BsZYLASQa
z&M#)w%adLHupPFUk7T*OvNdI$_VpWa1K%Y}qB770J%G878u0D(4h;#QvQT!QML$W3
z)>L3L;?Cr|wVrVusd1Lma?chrps9AJ1PPV}b@Oieu@8+k&DYI6y1xtDPiy=c7<|z<
znYP;T)={cbIpD*gVL)FmGZG;e+Wyb`VvuJ)PFmcu-pSx(FuZm3b>i{vetXM1Vh=oX
z<MVr&Vw-m^O>5|uLnZtI=w9Ab5Glo~dlPSS)WF<8%0nd0D@l`Dc6ME<QM~Z3e})|v
zk<BEORzRFBand%*mX&k`NFR@@E;{}?8w7}#C~@YE9jF?S3prDF$I``0cpuxT0Rt9x
zhZ%oIAWbAmo3az}QtH9>r}i|w<X>MuP(M~@?~2SZ+)Eu+QiV&=S*?f{aME0{BHBbp
z&MCQSsV9~)3;nMee<Uqjn`KjVj6X9w=6+mVa2oX?uUu>DcTDKN;8ixNQql?S3pFe{
zUV&5!E;y2$U)FYr1|cf_;;)0C+Fj0C+es&eXA*>i#-Ao<sn*9AnITvWtTeBvfS0DZ
zgh!)Xrh3&MSc6QW^s-8|%_nqIB9`lDPf=tMvzOt$7Rmo%#X{qbu40c5L}-f&J0H+X
zSf1`KkqbJKqfq=PGmZJwtrO$J{=ifDWtFKV>0#^po*pmQulK!5;${6aIwLTcJtGdH
z<?otC;v%{XOeY7XHg0$u@fg!sQWw!93Lh&)m*?p$H^mBN7BWps{qL4Q6?L)Z4bBDq
zMvyv;F^&NJ$JkV{s#=g*Aog4=gp0z^wQV=@{~_xu!=l{6wGEUOB&0z~y1NFYTe?BI
zYZ#<MrCUO}Bt_{)I!9VS$&ngDq(eH+V#oQm=lj7=u376{^~4=^Rc|+QqH;Aq`y-;K
z(win50T0;CM&kQZ^=G$uJiK@3nz=7*)w#0r577o_L5gOHcYZV--s2fyOtQMUmsY~@
z-4PfH97X@X;6Y=oO#iwPliG|tA{D66B^IVvG~(?Hv+<0DO-m3!;&Q<Y;F6>UL#?;R
zER?J4cE5P3z~s&LseSW@@#esTl(F%%ou<owBDRMxO>_B9ybJ$bA+>wB(qoo+W!)tw
z(=V;?ynHF$jAkjUu}(^vOo<w?4P>|^*MAW1q(;$$ZF7(L<Ht(gxyXPaRz9;Xi@^#M
z1A^PRHm#g~qODUFJ}o@ugWr6QZCd}Sa>TrUwRj<kUUqABr&OZca;1>>M>ZprF?y+_
zJW+TgtD94u2|?+9jp)YHxN`dX5u-$CNz&9yZd!ippVCSgabCkm;%mc0VSfa&2yQ_w
zR2^q*aLBQov?i=0Ku5r^bR_SwC@ba<qE$5+zw&b&m(eiA3ig+ou$R<9KUH@N!&b<=
zIauJ?3`EF2!M?nS2S<DWzcj*4*^-outYFCjJ>(#p&<fwo`5l4x>h2O@x`DA0D@~HR
z*}B1_WGuU9tRl#tHeL?aeL!mV2vJ^mcz9ygysL-)IY2Ka_`F4q?VI(%(LW^{si;cc
z#eol?ZP{@=OzO*T)jjf23qqqw(P`}if!kjCM_+H9`Pr)!pv86XoRY4|oT-guFa4%>
zrh#X|2KhlGK-+#z2~&_vsT~Ncw@M~SH68h$Cn#j9fY@902HRfj6Bf98R8`+MX@OyL
zsFH5Yw^4!GXE%6OhK@m{F--S$s%*x_&#qI;)s7F=o!_wsn?E}0Qc7diCF6MQo!{Jh
zFL)HVtdmiD-cf7ZF|2X?_x%YY_h7&Jyg<mJ@nIH+_4YSfiCe(~(|cmW_J`jFtyOjP
zJO}wPm@#)RGKhBbD8=~(Gzj*5e8?`Y;9>z*#@Ali8ZHMxvz&g{N+^<}ib!;7DW4$x
z87Gya_apnRFpb0I1~XAY|0NaZe&E`hwdIk72rf5ep(Bg+K3OmqoZZ`XMosQFIqQv<
zIY{4_0jc!o?(Uq~bE{i<{F)0rBZ`B8wvJ*OAKsfn(nG5gPNth@@dR3<$|X#t<zP>0
z|1K?pcs$5X(;V7~moaxOAcH4V9h=c%nc~R1u|OW=a@e~C(u?N0pHvO!)joT>HSpb^
zhYV4SRXw8=_&c2}nAb6rk1p|@+5IrHOSYqeWgpSvVvvthf)SQ4C+nE^s&E)*_Rh>d
zT-hLSWcF0aLbDEO;i<=pJn~sQ`lSM5;2G{jIVL8i6fqxutD&^u?(S~=cMrkJ=Cwy<
ze9L_d1dlq>tNWE!<1)2&1{-$JI!4x_*2Gz!wY^)Jdb=F>TvFN*@9!8ajJSj9(0p@P
zP?T?jL{tdLBr3L{cL7};Z}1+hmASfTfRDKJg$?X24;JknI&6sf&s$51Yu@`b$j_Kt
z)n8S?YD<#zguSOQYG^9HmN2j$tEc!<MF7SWeQH;d>QUVJ;<j@;rgKjJrU4kWNORw8
zGDZ7aKEfyGKf|H2*|?fDKNf^?m6j4>^Col_o~k^h=LOTi#z#X@H8zd`eK>SFYLLBu
z;11$Iwt%N&5MeNNOsKLqHrnY6!3j{Yp7@^6_D+uJt-PK6zfU+C!PA~Bvj*mUB?8Sy
zGy|E@S!CXe$$rmy@IK6brd;J~wPstBFqXdJN|kGl!_-C{LdYSWTyu^8jJn;%hiCh%
z)fT>~1D>@ztXv%oD>ttIVmE~WB@Yc#dKPQ$!_3;|3!eT8`tPx?K7t~dRC>@cSsZvD
zD9|B;i78Z1V+))P-r}>6eM8G9#%Rjz;z364bu@DyRAlu(uc!F;AY?TBz<23=#k2S6
z%G%`T#9|Jq9cyF^YjK?1i_J_klmu{-6I3ZkoS228a`>qMK)?Ls+O>s7^ZV2DMeoe!
zj5(Nnqp#CJK9;+Z!`nYR+*_!ee$ykOV_>ickFQi{2N8-k`A6=tplsz-HmZ$x*e9nM
zduM~(gVRVp7=3uc-=+-IQdnJ4xzMKGNjbWtf&&59Z5n{x2i^u?D}`oPD+c~-?v5^E
zAXwaMpb-^nMGMfZIrsE6e3+H483avd=6w!gpc-n%C?H}T2qgScK#eN&=D#Hue(RV|
zuyYunlt}G=d01%I-e7iNYsPiIgjM#L*B3-&c*4JrI2P><v3t~%DVW06-|dCIHZ4U4
zjl`&bAots~!|8Bo;?`Djbg$_1*_+8)nmic;sW~TTVJfBZqMsk{B!kqi#%C<zP1vmA
zYw_po{O_<gg<ccL2KseI+|CdvzQzzZvN(Hxef6C3-^Voyj8NiR2yCT9*f7{*Es1n-
zSIW>4{rykkz3v8@1j`BJ0JrbERRO+VpqY_jh;R}Ba_!1YO*h3?&|nyKGT|TE9=vr{
z=7LNO_vS362FL4pG)E^qvcH0Qy2vYD1@DiaBFEfF<PclviF{EZ<Ml8r@#(MK4%pye
ze%o`7o(Y2Rzuz(F(k{<Rou>HBe)FC97HEr&;}5ZB+5;&^#~EEVcl<xioSPow&G^ZC
z$Zi#Ge&_~|&SE7LPp*<cbTT%Et@A}2V@C*`*d9pv7!vmPT`epvsRaZkeK|k`gYBPW
zn5-Mzrp(llhh%*%6_;=0SusLMq7#%{`19bjul=9sF(mFLpN`~q=7Y=|+pd0juf#dc
z6p?~4_W{CRhgLqq%C&-}H=%ly+IF7C9&P`KtTcz4U7YMqRa?id-Yf`9)Ki7s)RDvs
z2U{HhRbI&E$l7&=+M5;BPYXE0J_a=ee|(@@P8_?^x{vps^mrZQhGi~9GuwY}gH#jP
z$DGi`gH?Z5Tvo=vWHVJ^`sAOmORDKL?6ITD(PCyJeIa=|iuwVHc(w*zsi1B_RKE7V
zQSe{$=oWTz<|}k4@6LWA|Cp&{VF-eZ)}z-=&mp^c-jo^RK<ypiKw?1J_C6=4{ieTA
zBQIELrS5;rd6=26pwbcGO!iD(ROzFvmHx>3#Z#qH!}{Oh(<CvKO8{9PbP;KbDS^xD
zETf28bO;Yu)lIG&g!>Zuh4AT!rIRSvaN3LSOcDePk2W=WQ4bU=8OELSGi`+ay%LB)
zI4M=4PWXxsRbBV7kh3}g#z8l-fu@<e6s4*9!h1;#q|WF`<(MdU(C!D`6k}|N=!j58
z0}9BV$J8s73yJG6r!h>`Zz3Tq2sxH96nVDre*)#d&RCeVAoWIb3ndTg7%iS$g!fYA
zu14(62uIH_)?eF&4SQhvrq5ArJ<<!jWpSyfZYno6<B499PwuYw?FD<fIZ#u^YSdVW
z3YUF7{Qb2Sz=;pnn+yJKe+7k^-Vksr@2}PCc{N~^E3v8FkI#K(Dy}?ZpGw9Q9DPp4
z1lAI&O0zZBLKb)*o4fMmhW5>z)9G<hthPUPYalWAzNAQqLR3acJ6ip{C8$@o_fk+%
zq!0dvr=dOUk^`6$GxTBmYPRp8AZ)j(GLX)DGdZAvAHnHuelJ4o?~jC`kPk48K;`Ez
zjDwk3u9q@+eP~3+d_5gyxF}8Us}oF*K3b}TYKLh0?dg&^1sH**@$q`kRMM)(^!lSe
z&OtXGs?lvXJ$<YES9b4MNXas&)>Ff!K?&e)c9ti>O?&8oy77loVsdi27npx8o4P8c
z#I=^wr*2YdCEcl-+8h@znljwy6Ayi3>6bD#YJXRpH}5D2?EfGQv~&7%@!uMgcfZnF
z)L&^%jZlAK@Lte(muZ}+jj=O1wE6F;p;=Mh6j5sU?ogWyJH;{;_l|_Bbc{agd?YzI
zLDJTEC!t=;WNgAbuv~dc{WT6zV(Q3eN4*ef%%e*Ud<-so5Bdwz5IgNZewK9sThsjH
z%=IF!wtv>N_`dXPL@1nKX{ESFaM=zquLw3VJoK-kN;<z|XA+yi+l-77Auw0Rn9Ozm
z3wx{ZQ^OOvo2f4N;k3D*k43vWqg|Q2%#72+1E-E~v4g9&emp7AZv?hGl1hKV+_fXB
zyoB<{wxOVi5h)ek?5W0&+}-^-Bk}aTjYCQiB^bu#X~7qc$$3yHwNd&19~xz~^-nUB
z^p>j!kGq80R1MJk3H{wO8*1-7Q+Z&3(+ZSH(=^_MdMc^aeNXDj2(1kMS@+FxINFBt
zk1rr=ty4(lJi^2!Kumt&fpI%Hm#Jf8J$zT$OY5lss343Qa^kOleJ^=~eS4yu7Ib-j
ztO$1E3|0p&r*k&Z^B9hg57{00D9Md%W*V6aFyQAkq$T%3OF7N!X=?N`LfZg`azg_d
zIoK5l7ttQ&{PV}3)U$^9v&>riIZMyt%vC_H^&V<d6?Z}@w{LVS(EjiH10DOqguUdf
z5xLv`^NuKYog+Lj4|Dfd4Nb!*(xYeJR~{@rPr%q~|9PQ5YqzntJ9S5tx9}DfJF9eX
zRb1M=f5Sc*P#GFkGj-hIaMxUjb@T)$>HI-ckW3N1r5qE6Fvl~n>I}Dd;)%f!w9$fI
zk%+MDPBq*S73{?$a^#z8m4y>Nc2c}|2itcheEK&P8!I1o$RfhZ04Jh_p_j;P#k8Dq
z*Y5tG6SXu*!x>So>sJy)y(WxU#lYxifD@S^tlrh)123O9)3QJ*L{U*vPcQYRY9z>H
zk%Y3l-K<V)ld@tykW@!}99tFC-@A-VuBv|TsptR2UO@oncSAbZ&Dcd8>S~9W#rEc_
z5d1O4hw>~Kx#LURJniM&?h#23RP--8*Q9mRKUBGcnd#nneG4?RF8tfVKYnE1oT<eG
z1jh~##Z<!9R1VTETLGRO^mFX$?wyNzf>V54pYzm=AG_<++dL5OX8}jV+chV|l#;O*
zT0oj%*tyK=<cyU@ZmlI*Z2CJ!emX579A)1BjkN#z<fA63;UjfAX$(7*g;HkIT*0~b
zy0X63kH@R$KjPbV{s0PS+#M#kpnTaLMZ&`g;5ACwkRQGjpt$0Fyd7=a;+?ufJ8yoY
zQBVR5@=B#mrN1O{`afp%R^nIZ360apn6-Aey-lI@>Rg5}<x(gaV6^c*?(|p5Soc@c
zoqT<{QYcD3i$u6fzBym}TzF~9v}#yb(79>vcKfW{wQIu}Q5k9ePvhb58=WHhguJZ}
z!^`DxRLGtHd_pVQy}oaI2Fwfg%R`@U#v2|UPAull>wUCooBwb{t!BYT%=@q%=+U_V
zkDE0sa4GgIFf<W{wyaX~MLaBOu!+gx^%gC|4V+9g|MJ;Y^jPm9C5cB#6tql3$K@2h
zgi#48UM$#jXt?OL$hK89kA3I33{~|NBh`5YVwX-hrsAG%#`h;{`)q`W$!rKq=de=t
z!S26aO8-1W6ydoMZ@qp+=~0t^tLKp-h?qc&7yx%^Z;acI3Sh$~32pkJ+v+QHcDSxl
zB)4RL<O5qBd?qg+4&wo9ZU&lFKWm$@aH9I*mwEf(IITwe$gU#eDo=^q3dlh_{NSm2
zY7yzdvDa?7UXLldIUBru_&06f&ODzeRlsR8?&*p$S#n=F+F}6*#*lkVecO50xy9_1
zz;hMGr$s#lg<JPls2f_SqYOvRdF)Bn&e$G0j7XXvaG5GL_Lbl%|I=Ec`74HTBX~n?
zGG`oH{Ca2~J2py-QD0zl!)Z#`BTq3DL}9E6Z{NPUQQan#b62I|!d!2Eeb?#%sHNDj
z3APO<ATjl&-XQR)--=$D!__<kG}N@Be}@}4i?^Y~!Yeh?YgO_Q@0(3$H;>eoqh=OD
z%ERx_<CgU1m#%o)0XvR{wq{a!g2v}f6oV<=i`5ct=T!vfu#3Vd@>wTIbOEy#GMsu~
z>o8?@K9`~ub-2_U?Hr!>Z!*RSe3`;xB&_6d%avHTEeSFL&jB9(o_&QlPbF>>H*Y(L
z39t(q8i+yHL>e@;b0g?ldzA|AVLr;KsQB6lwihqidpmpM#}T+z_vndGzWyE<ON%0-
zWlUp=A(VTGN!6;c{;7A^jVh$<C9*i2bv7xsNp^M7sXue{)YH@O_SL>Lbx7$;TF7KT
z=gPZjR8-idRltZ+&8qE^e}gz}tjrn`V1G~62F(ViH(n1=ys6LflZl`!+u4j<eXxxj
zh2GP3|7t&6Y$N*LkS~{Z0Y}q(X~Gqj*DgGjfu{Xlkfg&QKNRl5J<pw}vmOI-bW#aM
z0tt0>Jn&v<(ne?C*>;CLv`YPDcR9}-WCJ-7#|TEJS2pv%6^Rrht}Z60VrS-4UquJ}
zmdbp2*nLZ^U<CveB_6;3{kPm(ka@N6A_hX@xP!hW^}$)|@Qgw$s_*yeb(V^I-&|5w
zQ&|aJu2)OYP8?aCt7?)6KiT*I0StGn7d!j~tDYCb5ZmE~<Y~RUgHdxYz3OB6lD{!4
z{{&RRcYLaSJ-zJWP~vlyQK}bpwV~hRm~Bclz$9b<xDHqog#)=Pa)2Td<4H_n)iYat
zjt4|rgR@5%A7LP<OB6qLeu!Q<fk&B%azQTioIn|Go76PesIIi}&8&}u;j_GZ>U6Jh
zReu%t#$CMXOR@X##g_Sy6ER|%Ol2$m`bqulBYAh3_-f}g9?$Ko3q5KK7J~+uFykMe
zyrrvXuh)qgp0}uOHh4#kQN>D>cP3){Mbi5Z5&<~DxVhAvT|d9X(WY>kc5+S2T?ktZ
z67x96SAk|1!=1G=pl@UPQi3p~42FESE^P&&vMS@`Ssi}pB_ldTKdZ#A$b(ux<mDsd
z<dPomRf#4&_V%TdhI`EA;%43|MwVjIsX_A3?}0|jf5e709`05ryJLxF36~w}W*E{2
zVdt`h3m{b1^=-HB&j;bZAcT;RP`AaK50GqamgB^T#(-i2dimtW4GxPGW#D@O0Sc!-
zOvpG*JuDOsoy!nK@WqdX9bl|1W~q5K)Dtdc#d$S2Yf^f%0a|>7mM;HW%dM&FVTfJX
zf|s9(8)dH}d+d6v6Z0S6N=##=ytn;3YpBUPT-bwU76JwqUHv$k^->{v#)DslH@j0o
zU!N4TjCE+^WTHufZzw=!z-`emWxblO6r*b*c`=v+13I4~n&4=`9U}uyltN|#F5)^5
zda9dFobH-&@Vuohr(2HFV4+qjWh=Iy=iJWjv_-e~zbRymbzQ;f?uE5<LqH9mO}T1K
z0hq~c%2<}}{x0VCAi%(;$3-&%Iw()>hU3`+8I>FS1TV%gQH?k}bdF_U_orZz(m)r5
zsh34$WCBG!&PZ3J2F6gcOl9v`K665_8+>=>atr}IcOl9m&W_!z%Bdz<68z)pIa1JS
z@0aklad=G!HuwE%Bqg!NE6Ra^!^1pqwY<5w@QtDppBoHbc5S@Dj7Vvod{vQw-b$#`
zS~wlSjFQUvV57MI<w0HeG&i!YTf3Og|H+jbbe*dJ#em!Mii$iTHkyf<>xb?ifsPM7
zBos!?g~>FJAZ8?R<k}{C7b_m19VVs+S);$9yF38B*qfa5#vW@B<o|+{txx$T=(HE}
zr0E-+m0J4_O^@Q@2pxHy$eiBQ&L*#TfZ~Ovq$?pMsdXlmbwG_20z!jx96bz=GJ1z*
zm-12V&q<>xYARiR#EXrx?5pq<<<x&~lism$uvmGT(p-AyHL-WUCcsVx0St4)4=4N!
zV>IetG@96SgeaWu31k5ox+dJdO6#8)CEl0bn^j2NAHFc-d9ErO`i{=KjFE>#u9W_y
zfy&Ak+h{H1d3Fz3@PCs`o7e`#vu1&|ZVT!k9O3ykU8XPcoQK$+X&2jpz5-~(@e;8{
zAFWX1%%$o?`N%f8%yJTK6K{8B(#|}u7y>iuioZ)q+pUi$?3FZ}r?hwfqw=-d=B_m)
ze{!sQ?QHL7gD66nwO(7iMswG@!8{0ahl5euYhC8wp2J@m;tW~ysh<B-Bpiw1vh!so
z@CcktOyi>1XqNVP&+<n98;mNo)c7KtNk{M2UG3z>*IcZaYuwNDzEUD5OxZ<`y&&<J
zWCD-IaZ`LHy_Q@<D>ifB77o~k8dm*Rmp;Z1KeMs)<kVW8ILO}Pr}I)<#U`ozhRD`q
z`gp&bg~zO@cH}!-m*EMr+qdBpugZ7gKQ~9<^O4_r>-^Ictb|tFVgwQV<jpF2ku8(^
z+y~!^{;C<+kPc2vXRgB;A{AXG8Ht=oesyk@veKuCD4mBkeT8}1R$C1Kfi+I+=k#-F
z20_+O){w1SUJX8pm>$tlQ#)uI)=9oi0dAC(WZBN$c)=Rdgt9(qq2HEnWo2eK2c;gI
z7zjI&Bt?eyu2ARcYTYIc{9^@icI5?=bQd(BsII;z$e=q2v8p4J7Ku^qz)6<!*{-sw
zRKXjNJ#MZLdhn~#Vy!}7ih@YCx55&;y4zF<q2JMsGk)4&?4(XTFIVB{{6VV+8J>Xz
z&hzNXj99n?2h=4u+RByLj<n<*?5<|e0N1{>txUA$*z}sx&Ox>AOTpNd0_5s@_Jm6J
z$FkX7WPc9M9!2sMhhbjR6#fmU!yd2s#KGsDcexwVc|5{p=Yua|01GELH?vy|#B2*G
zzDm<-uT2z*ns1;)K|f7)DNQBS39tA*eGR*ffzuRaB#UOSd}yp^rO?LrZdpPcqNi?G
z6~p+PScX)3+S;gN-}&e>fdQ)|oZCaWpi{@O|Mw4G-uj7FeOf0{yCD(j$|s~T|NVA?
z)5Nv}B{Bu&r03PXDYc*QE_E9Bb{gqDtz2(YMzXZ$Au)Eprub@fZfC_U?weppi(m{#
zc6&Pehc{0Ay(zm)o(%M(;23ABy_yYKOWU`&n2CGyX60&>-9e$)P90qcl2^kw6xycD
z(Ouf*3PpZ3M37pFN25Ez`<4283=SgVbidXpQ9{U1&N65aqJuMqFmW~t0i2;8u{<MP
zXgAU!?E~t66C@~i4lgr64KfUb3i+^bxzv(fr|Cs8EHOr6D4lZj=QhbKFP1$#ZSV>D
z%@e36H+<V0nB1b2Ba0XwE#xT7+yFZyc+ns(b;~)Z94c(>Yy@`*9ukmKFf#UdI_z+;
zI*oP75XfzUzBmyvNzazhF_fkQvgV$Bo_h=ZH2Ru+;D`;f(D5TLl~B{?oQ(p(ur`v`
zSTu$v|9`S%`$Zh>yl?oOz01s4#>n3J!bhpBd7-`fE3JaogPFAZP#xVzl^4lO21TlF
zZ*y?{Y#eSs0v1;3wl@PrQxmvouDJ*!itS!WjUuL%6*k$O+9qA>T=I-f#jLB`964HC
z?>lWUbs6~mu-dEPQm2RrcrEQA#ZGUu71d4Z#?>85Se&>l4_)^r5Hux%OVU>IU%v=L
zrap`;zx<;-rH=<$*HS0xTuo$-`mx-b4vX0PDX2heMZB`8l3<%?{lvG$T9a~Hi&5BR
zS9q;<-ovsu^%y_{z%Zpkvl9guu3Zc%%cvaWu@WlBZzDsf8$G?%A%@#I)nqY>K!H(U
zm4M`-r8RY}rptNM^G5=$qOixh(Ol_>21luZ`s%VAIWw8DyXHnGvo#WjFN`9BQJJB1
zBeDA*?ff7ff5d%hWd4V%8b*D=w|!e%?vxL)cG4pEhw@9vrILBoyIoZ?AR>*oPFK!E
zK#UGPArbmL{|l%(q%7~L*%KvHtYHJUEfYm2r77*0r?lf{AK!c@ZYcbg=zy%tm~{@%
z+5K#ukBN!H>+k=5bL{ap8M5>HU6_7pOWZTBo}(AyQ#0b{Tf=ee2$9}kaDnAbMyNZ;
z|4tLiAoXGvru!qBX<R^cgv8ZBiZL#A-YurepEhKZ$kKL!zu11-U>fZ}p#Ksx1n;Lc
z{*iG5K$DQ7&J%p4q8JI)(5(@)eCqSSz=AV{0ybhp1ToZ%I*jj)?t1HJt0mKKD3E{T
zug~4kW-UG-TU-RCvPxY)=!?fo!0tA0b8>l5M&;@{T<PaXQq0?Jhx(#O^~}XIJhfh+
zMG$u!#whfc3pBut+~hd;!FLx2Kc4L8p#ErM<y-l+{a%oCTR81yzAB^AuE$cVnip~F
zoFn(q&8MX9R{MD8J8|Xv!9+3Stu`Zx(iV8MB&)3i6grDWl$DYa>;FliQeYOfylpQV
zJ(caCqtmR~C<GS3MpAbxy{3h{Lk2?F6Z&BCiT77)Ehb9R<WLbAU5W7NXIM_@e#;1J
zdnx6lvA2c@q0V3(t4C%RNv@lH`|m%ZuYLH3>HAOQpN7HU$95D{K{po|FwDw5O-LZ)
zfmL6{cG3bs^86`r@cFppBEt8%aka~TT~ET?gJ-$~FT$H-4LVl}-*1UHS%eHMkSkJR
z_jQQn!S;qPXa*4)uQRF^(1$u;k0(QYl*KJ4XPoU(V%Ll1y<Bwo{5L~omGyL&&`llV
zQ6(pn7mND{6tu&ItnR0>79_Y~BXA+kqSo~f26`^dVIW&6W}2jQxLB++_~Q*VUkvq!
zu+?9@CE|F_(tS7YAeuK`RGpFZQ9X{wVr2v15AgZ#Tik4guo$!*F8%`T#Z#sXR3=mb
z)y^6uC!CWGZlNj0PmKdEsNU@o=7eW%xioJ!My8BRgCgJk_;v=}S|CSoaT6Jgf6N%N
z=N%m80Ln=0eUS}pPR)XR^I_eyGTbc1N38}dQA(tp=0m;8U9L(^g<Bt=np!&ehIssC
zto=_RBKr070Y`;miE=_qPfrJk6O~gRtxqd0V6$B;><ogGzmlt<A1mdr8=zZQKKOQX
zeZ_|-_}xM|^I31U+F%y!SCDGlaSxrx^{i9*@h@L?IJPw9e6V^kd|5A}T80p1MZMI1
zm!T^2F5zj#jKxL~$SAyIg`B9M`%-!qQ`2e$)<((iOzb}ry?(GA|HpTfG_ei8D+Gy}
z(~PlxLP%;W_1ew4K{Q$7y^SYg*egzE&HSvaAKxGE26l;?+ak#{2D2>gJF4LEoUu0)
z`O*(bYizo6Z>8hWX~~)^Ds-NhsEjhj$o{&N@QI|gYD^!weKFophDbR5b{UDL&ou*W
zNeSJ?IV$`!=gKDl+xxEeN1^F=$LwoxO${Q9!o~fJffZM!b}ixXYbYQ;RV?h_1SFr8
zGTTou2n5?;0YVi8gfvh<H5zcC$09EU-){8y2h;SvnFP4wE6UyDXJHc-l2t?=G5tMS
zcS~QN9g!1ICd%34i4Au-@C#Dm@tBoSCf<ycL<grIbi)o*=YqWANITO|V*8|){4>rW
zsn6ovez%h&xJ8MahgdonMX4kxcH5Ny`*x}kDUHl$8CyPi*b<;b=|r*04QoUQ0m@*8
z9D)lGQNKo*S4E<jj;2O+gUU;I4hg@JS?b0XKzv<XdLD3w&&|UFs98!u67P{1^be9a
z#MEPmtk)LyO_@%ftx2BD6`}66s9;EM_8f~)bp{6}>~?NC3`TlvI49Z=rf79>yH8>d
z^FuG+9#KqU_4hi`x>hiEjGI|T*5`Xc;c^NYCHm*iLk)H&kG3h_MP^j>MpN^l9R0AP
zjq}W?J^u0N&DLipIez0TwO3l`#u_bowEqBA|L(KoE*^z&`aGvM&gva|$&ToKw!;{>
z2rTYxp&(|@%1VrlTI#(VBFrsrzStii$NITD`bmca@Xy+jd+lon-@oMBSR|j`P@;Xy
z$Eh#Yd{B35J#ZH6op*E?%|zy=o&Bk<ZdmWL8NgobEVE4*RC-u{^ZV%tIiW}1dGMwF
zcmax-d4m^D!V!sN8G@*|XB+V`V%EnFc3hEXSEn*W0ner7GT}bB-U~w>L9)pQeZAR5
z%g6!AtOxXeZgaYep%sK|;6&nLN2QkxCDXawdz-5qDQ^=c%DQ}Qp#bb)n};cW%LMEc
zTywq$$^b&0o0D^^prAnJi5eY11NDD;<N4BwzxCAAcc{HFPA*X%L%Kv(_k%w&@UEx7
zHvc}0@X6-hQhr>@4xEJtL+NO^mf+r^L;ewYMiJ=k3+cYhx1__XZ`=<<t;Zhe(7J2C
z)5aH=DmNIWFzAdRR+sz`C+D~z7)vBWhdta|op4a`^C|rW#d4d{e|MWH5=YD2D4vMJ
zSIwp>#^H7M4j~}k+#isf6A{LN9c$Np2^x?PG;I_xsBznxAsjDM?#h=>z$GFIg(7=v
zHyW<5&h2BONpw&jkUs^CP=K;mRabul%HAk}va)U`A_8Xi53kmc6;E9s<ggH6umFWK
zXFq~ie=>}Rn_>9=VF?&K{7)P?;L2UB^6k$~VsJ&14D@wrN|g_Z)n2a1Z`ZS+>Zi&T
z2S<}h+M(4+*<r$`-!`Oi+p6+sWh{3#Us6cY{rAO0>+Dm7JF~$hk^3$K6?p*bf+0PC
z5&++(T<L5WTG>T4FbjJYW*(j>M<928wAHmblwJvRol5}K@P<%0YbgpeE&1R_YvR`=
zWc&{8zyKF|vTK^~PSe=<LEHQbjfr6+!p`rs>R{V-k`N8QhJhQG7fcF<`Xsk|{I-mg
zbUIB7oylsvX)$+_r8&Q>EE+~^x`8T9T=$z>PGqT(1E?0?X9Dc+9|uf+FiiB;x4N)a
z&V{2jvfQ7T^Dw|NhBs$Xr7m<1{vfo9Sv>j|?0eH|m2&7JOV7W!b-$dg$Islb!RrHN
zy)4Nt;8YHgCCYikxV^vr#eH&zjj#K0&^^UQX@&g01O{_pe+wwg^q|2OLdc?R0$4vX
zjB4$I^vW=ldJ2-^<8)F7=X@z|VAEdVd+JKt<GwQ&4R|IA(cPzU4&iQ`<rr;0{im2s
z*T^|_7zyCLv*&+_6F8Dkt_843@RC5pyPh4ThpsI2-`2h_D~nEv6Kk(5F>pD&+!)vp
zh*un-U3yusUEx4gU3SIaa_e1d(kW}xQUz)~)<6g0)=$#+a%Mg|q?z{I#WOIxqW|PQ
zQk$JPHBH=?CvH%#ZOZjdHUhatJa=$aSO&sq_BKEoyYRan*`zqi?xK(nT%d_hC8i}_
zOOaFqNz_e5BR)`tv#rbNKFxLxfTPqq!U4E{&}VohoiyNlcHS;#t8p!h2VQIUoq2Pr
z@@`*WA0sm}H~p4F_#t3>`5q^LUU-ozFWrqSYk)5<&@1cYs!hRFegfz$0;`YGgkBQs
z;QSJV_Pk<6@UoJ<p!^ur791kY?EBqw8#8%&QcG>-D`|&1xJ&yw-~KKbO4Azg(Nrid
zwKaA-t(w{lJa^r0V?&+w>1k(e=A<7Xm-XrSPmzm;-xPaaOSak5TqUkA;_Xv)P@7K)
z@AirVS>}hHtT}?tUZywzi*@dP$P;(+PJIoODCLxurDbI9gWLbPAY)7`FvXbMOb~}r
zfj)|yy!<nLef{dq$XU<J-;?%72f)F~?DwzlPjtuFnV8mz!@K9})_oNBGGlR=@#Wv!
z$Tgb}Me<r1JbY6nmz%2Vm5*1CHPUNoiar+i=FVbThn}aS_U)y*&mf$%?*G7F1f&%F
zHQbYspQ*Lwg{;Z+X&dIrLaYP~fbmi600r*>dW$Fzl>p9~p=9mxtnr)4+sK`24An7-
zl`H+f)l&eM1T?b3rUDau*<+3uMjL!-V+G$1-F5`e^k?X}Dp6KyhVv>Nel9&!A-|zP
z&;ijfn&@k;Cjtb%5)uLd#UJniJGR^fgc_~{uFuo?&LeJ)I4cL-D*^+U(4`8kohgR{
z(e839aX{>>>Z>yA6Sbm|r(q&sAO?MgR3OzcYAzk#_cS-G0(DkIUzJXEpOa;MagQC#
z&>*6;c+Lu60T?7BAl#_QhXW<GI}>4w=hllIz+LHcI%E%r%E3aLu=?ecI8N+H&u>ZH
z2QjlF4#$(I^i07^VbKM<bzS@4|C@hQ26Nm}n%8?R3ofd0kZ%jK64hga1I9pmB670Z
zAPR!b%T<H05Y=QUvqxh(FZ?XI0~z&2DPvPb7;({fnOYA@ov9N14(I1jdb#kJAdopZ
z3Wa<?O2nU|>e@L*=EXujPLBZh(g<LanQopSrOuc}4V3J865j5>k@!Y3xE0IEu!WX9
z6lpa2JC<m{n3kQ<lCc;CY{kZjUg_+Kj7U(ous9l@sp|O>_iUQDx+nT6EyE?y{s`cU
z$GG!EW21b$w1hV4wYj*_#QZOjHOQ=eMfo=IyFjmVmO(?4E%g69GhtI5X!%Bjo^->(
zz)>%RWkv%8m_!0teI3z~FuRr_o9qsl7YOtotej@Hl}YfjsDyXBx&vUqM<z@7m}{ai
zfpCY(c>WXmxRy)jtK$G<)BGuw@43OeundjbFI75AOG^Or-5$v*`cUk035;JFti%JZ
z&*zoh-_ZfGv=VTaNqcw}LgK@$6!IYWHobZYie)GLC6BV9*c9_UkF^ivSo#JL-*S7S
zJEq8okC78`LJbWstV%CyEesJO{StPYfvUlPcPO&i!NP;-vNL69C^E%t`vtP7v*s@>
zp}NauoRSv1MWQv#Zae<ps%iIq0y!RcgFAf|kEKbzYU`Q~q@BG1rf*QgiAI0L9-}-%
zPmq{zQw^xwz*~u!Qk-mi_?c8#J+Xg?%mi<(Z*7FA*NBrc$EAE9*DRKlKa9RU<2a}V
zO{~OH7|^UuMP3OW<0-C9o2^MLRQdra2flN!t=dVtID&{(Ea1x&<$3wt)83z&o$77)
zfKp@C6qXf(+J)g1!(E*RgWYXwL}{(ItXHah-leR)gm+6Fg^$PaOzEa_Sfi%ZLriF^
z-lq5+9$iQn3eaIDA63W9$II3pkB)Y>PFxEW-CEhQVb}ccD#yffpn*X9HN1Civ5>kk
z$wKuTiAS{CO@Q<}2=h1=n%Z$KBD=iQORX(fKW+#;02`l6lqhgADNSDQc<p59%9%V~
zqZ(`W;%S4C45##TOzzgb0ID7EcrTqOz|4oL=rS1f!d46U=<p`Ztsbs1nl%ddlNCuV
zkt?xgCud~%MokGlyqWx?2RD<aBRYXz3$nmM_MgUuADmk(^qT4k#?RLb9%fYCy5bj`
zKV*`Qhn)|RBtj5yG8kr@&Rhd)J}9UoI9UhCofYe=*?OffxuIKcSqH^cUmxwiDE{vQ
z1%HD3NG>*}$gKh;p2nL~a^q;Ru~5cK%@TJ-i<+lmr05Q9VC{eg=H01;t*&mz6;C>L
z9FM4)v*b>A;}3l7CZjz5q*Pd%8aZ!OSgNe=PRv7gr78WG&InvQ%nMIj{nxgr)d?B1
z>NP_*#hN(-RfqmmrFo;*FT;)LfRO!B$O5Kj`WS~q23jc_0GuWF@w+PIf9@U*e;f{o
zoi4!K(CUrONOCBP@{@ir4Lj^AxSi^tAr~ip;KVy#Z-46aE-#2EFNBEb&{im}+ueAI
z1OItIR%jHcWsq>0e}wm&B}AKBQ}yWU!ptp~hP;9qKZ;h4KuZ5xoR@+JAD<39@M2x$
z)Ky>f1RFfgR8JCAB6jb89MTavsm^5Ugs_)knf93CP(}}QVY5As-*k_jYL9>TRKYX{
zoL@t(1k0Ci>I;YNP9~-~(3Pzrl5!n^iNS93523MOADPBML-~L+R;m{5M6=P?3UoyG
zRoBa%_Lm1}>TKD<yMME=uqYP`N6>+70P)yH=qYYypvB8!NMi!fsLhiT604~YbweRW
zOd{yh%)1*H_(Vqo?UzVbwO@{B^WDGuC=vYJWJHHU?L9+?HUja%d@mPY_SSv}Uy{{~
zDo|odx2H>l%~le)^N%6?2)CA~x&GMl=;8_6{fCQv;inD8cZ#1aCi2-z-xlR#qB@SL
zT&1a6rS0zm?JeS}vcWLg<Z~O6&~9IG5D0yBC=xoKoi4lK;4@NsvvNF>Fm4|#?HXiE
z`V4cD9d!?!#FWMxVd!~mna_qU<bl@%%5R3AmNL{KPA=vk3GK;x8x(H?aH4T?oW#7-
zas=|=60D^g1A*S)mFBR@dmGuCTMymp@Y-JG{X@JXUqK8O_RVzL<(bVELYrT3kusT%
zgF|aC8SN?VzQ*!il#%g!e%ynTL`5q|ldO@(S!CyVGLy)_5HL;2JP#`{5$86}o`qD!
z{WsYce$rHZ=?OD_=!Au%l>W?4x}~Ev_id%6vg@;39x;O;O|FLiSjaGcbN9SH)@3nn
z&+Ca|ey8<iHe7gzLxrW{Obn#^c*E{$G+c@+XVgM`0|<Va$uDI-GEHu+BD%X58q9mX
z2j>Q|%V`Hnrb2E;Bop*r%KU~;1Kg#>YLY-wy%|NP0B(SpI>+>ztA0)bPo5WFX#18E
zMQZTDSw3><ihvwLM0YNBT8=|yMAGu4HMjT%0(91V$B=IdPaex@zH#L2&A{viR0Lsc
zWsB?$cVPDW?rEtFVaITuY%JG}JUA~z&QPc7x;KpZKCvD6@BQv3$|w#oQjanSF}VA6
z_?fNrp-osxxZ%+mbz_6O3;Q<dio}jq0f0?Z0RWdr?5a1oJ`-)^no5qAd1oPnjyy_*
z>L)Wi61FMyiC1FfQ-dS5EY<yq1_Yh*_VRROPC(h<W-Ftjf$L1kLE-n(N9t6;a_7(V
z1O$B0XX1(#%}qd&$03uEKtK^kYbiFn(dD#V$#6>i?%I*OfL{Ql2ajG&*Km6N;AQK`
z!iLU+;qH0swREo%W?yCJgioTc(q%2uFGXTS9tHXhoJ=C_EbEY$+Kv9Bodjx4`VusL
zb!#wys8qqbM@W5WU^x`t_1fxzFbnCU!6TE9Q5O;XV$N5f=>~`au<0)iR&TYO92Q?I
zz#jO%wrg(6nZnwyCQpTV-5<fO_u0zH>&TwIzgC59OO#w$uQqT0J2=klH|xljv^~sk
zGPN3eGvSM)RI5{)wobOR%(6Ram9K168dgDvZ15PUBY*XgF78uVx{#Ncs;QHrLB!lF
z`R$t}zngJwdA99p$i;}ic3c@0zGTBGvXR!2s+;ZWmNkwa+*X!hz8;ym;`ve=;zXVl
z%z|nO;9Kyx+7}|TKgVv9tp5IV-*RbqblTI=9b&b^B5Ulm8&qxi@#6c>&m|`*mp$IQ
zzAwZC$I(9HZ_Oul{~N2@s)Qe=-?m;X0@T6=Bjk{KFm5U4O3#OA%LYHG2W0|*2NAs}
zYdMWCJyn8A_K<U<iG<U&NiTbA1FQCS1&Le-O0LiO3p}BdjEZhj?C{2jlbNkTI=!;g
z*|3hm+$LG5f5yyO8THoEQ3Ez`cZ&wx+*8tHAM-?a*<Ol8M^)7yo1U>i`>H{i-Ml`1
zcD2<@2@wiQA9ml<o#Hs+ZxCx8cAUL*IjESK4S(doFlovpzUEW;XwxT)_WsC^AGEN&
zt4=cq`A=_TQ{};D#FKw77-wS|-mQEl+05~>l~$kBUFf{!o{Bx2U@WrzC4Ga%t9N^5
z*5-_?m9GA6Sk1yB^A@;#0?h$H8$kIKNhr(A<q9MD%*xVffQhl!sYx_vtQyv8ufS;s
zOJ%A|GJ3>0pmD)RL_&YtP#kne59_Kj%*0Mao~9nIkI`t>E{^>AZ;(uJ*Z<3lgrAkm
zojEgsgAqtsNegA8jt(EI08k%DIf&EhbfC_P%-bM+&C7_26Z6vatjsl^;A|+GW=(_n
zcaY21m9C24mVA0Lb%({}Mn^t(CzEo!@jF||v*UOTlUH^SbGYi5cRfu?Hd5-O?9Xd5
zSAeKog}|qNIVz{@*+zGlm{YHxXWZle3XAc$ze9FFM`sPk%N(e-NmC=m1L9)KxjzB{
zy;P;tQd=#nxngmZep!DnTp&3=m-<3;{Kasc>p9{GQ)53)gY>DXH12hpk&SU|oiFSC
z^U$@#%V+Y(SDiEt$_I7pWSXP<a(|^H$}x}P<ys%VRVQyR2{ewHUhjDQ#^lo%ENCJ^
z!Q|>8)hgva&3i$cVR^+4*CuB+#`fUL5?5QILyak@N;WSz16>vcHM|#um_Z+h)+CaK
zkQa&<zc97aCk=k-aN?H8Os+_;dcM3Ghx#{AQD(gjyn$D>)js*-(+6G(K`zX--=`9V
z27a+pH5&b3GXH~H6t#=S0(+&e)-+Z9#ni?Fy%$zat;`qS8=OlpC$Xv~T1;&ol##^;
z5*0mqOg-<MPvtzpD4`yChw%ein%{ki_K9!Iw0@hH6O-)cEf2{C24A+P<F<ONymAob
zr!Ft_7n<!^X=twALOhu4!<ug&oHkHPFzP<iz~#ydc0^uHPt@eTvK5Ja4evDfhU&l8
z3x)r3AWFVo+ms;hJ4j8RF!Z<uqy|At-v$1~FyS6yHd0`KJ96VFPPBE#apg#F#<_PJ
zqnh=6=_;&MogDj0+~fuAaZI1|&bxxCBxB3r)G#r+xSRO#i7cjEeog#i$n08&IS+=*
zS&oA!Zz-;b(dPgM#~1=F<a%R|puHS_R+>f_6KeA+V)wup)`j|(GBeShTdl;)ivTN$
z4{7*pL<O1}+9=FTLho-V!iyj9^PTo5Dl@L(ZO6VYEp#>xob-tQMwI78&CEfqpA?lz
zDs1APj#hklJ|UR=5}@@0VY?TJzO?eXRY(qv1GeJMLEHo}jaSQe6cah~LP=;45FRKc
z@ml9@v}NHSik?@uc{hf%g5TE1jTRPEE3$`O=uv&!tcnwYvB8e!v-5hY7Bhob??aLM
zQKDu~#{A4(mFsZ(*s;_2t4e{YbC<as29-whfOV2bUF2n)hK%X5z}C47sKbz$zpL?C
zt@a&%VD(kiO-&B^W*QZ)=jd`&&DP8vao6gxXJ?%&f}3>`O?a&egT<5Gli~+2E9&#-
z!|*9KC%R?Sv|6cfoAZCSxmCQ}DmB>)K5aUmz0PKu4F1RX*Wc+WUhHJVoEH(8B-5#X
zg5@`m#tt!auPquFjqS}+3wioGJp>0Jr(Gj@RmrUIaU)ErjzrMoK_T2#^<!oCd_KkY
zgX`(2X*r`LqEuv|AnZuG<lgy0=hgbprq5G|&|2xg0+=wXH*Nb^bN9JU9s*ik`8fae
zEG`8Jc;{vW2v9MPbkgvwM!5wDuwy?5MQJpDBTS?`j)8u+xW+QJw!AhJW1P*%-dazJ
znoeEpl7wm>VNII4kg(6%TZT^y^ejZ0qW66GWc0E&bv80lGD9=jH4G*oU6(qEwMJle
zgfktlZ&~%WjP%RVve_9s3zDIU_f?w;2PaLZ6Hnmz+Qz*_c@Mq)m@U&;8hX6g&{Wy-
z!HTMPQxG4&rkxbEWmkg$kzVIgwor$~-%ckfx>sfF)A=7LHtk_8ps2=^y<!U9Uk!bk
z?)xAwXlOIx)K#QW+ja>c5CO7+yPl$GD0i$*3u*pJ5_kipm_e_OcQi7<S1&43wrO|E
zY5inGW&I=;{K-tZiSpLo^4WL0o|>V1r-|$nl0Mlfn`k^48D2lpo^;C)5k(Dnq5fv%
z*atV8$|h-$Zn(OOHF5q}fhSci!YyOKArZ3fX(JKiwZQzygnx|h^8+OSCcWbA(K>i+
zYVbE6)rRh3%3>hf)&KFGw{Y<YrGZr{Gl(hH!c*EMv{wYf?{DSYx)s^xA{Z)pT4!N5
z1LvduB@2p0M?*1gFO*5R9^j_Gc9%|g<L7zsm7Iqoj?F@_2#Y=#Hf;m_-R^)8`}IL;
zDMM<oqS0M7CUq@zDe$>zE0~lHcEu4<Bcuo062Ce`P=*KQ5uExdY_{~1(eK(+=*R~|
zn(%DK!OscP#zL_pNI6N0qrw{3dFYmphksmS%v91jTvt8Rk)*YCFf7cTW`b`6w0wrT
zT)FI@2kXT+0u7)^>n6r`y7yzns`&fxAz3qiaDFv?wwU_W#F=zQM~14MMh;*G6g(Lp
zNO=HT-eZiR(oXFpA8%uY){D;;^$nW8nurH3-<dnadKU2d*3+RhKmRp@dC00*@<1>k
zVV(FwXfx87<NwNcWANX~Ie~*zq_tSOQqbV3#NPVjN581ql%5;`F^&>jdrU^o>0pjc
zOBe@Ms#3nQyVy~NZ;OU->#W$_wb;R)7eoYR+om}CEzu&!DnM)&y0V~jQD&__wBS_&
zr}8d9zG)>Pt}OmGC`*93>z{W}MFZ@Ej>~>9R6a_yWwot`^n6DBmo53b{knIngvLYn
zQ9(%0h>owB0C{>>B@;PWI_}YD#Dn@q!glvt=eOu!V_g+BOR8`4<89ah%g3gT^E_{(
z3XhgKLqcNo<iqnXg2~a362)+$pzp_Y9D@`lITY<zcl9!D!f`Ngv&sj~t<zU%krB72
z8=O>Qm_~aqXK8vKagWYuy-1HvAxW~gAee;-?&xxLvF4|TuF^Pt(t^+i>nY{ALcia#
z50ISDTUlXz-!Nx+S!Gw7>e!SUz<+h<)!JvrRD!mYHOkJzkN}Pkc3tWD{#aU7z;G)M
z{p9_X1r8021$5o2tzeG*A^SS=m8%plP2lXb`DB=b@U%5|u>-<$$HgWlRnc+%S?s#T
zDAX1^T<W!ja~t)uVol&X9T5?MkM~zpk10z_k4Lm<{l-z~c5`hru?~D?Nw%eQ?B$@_
zX*oDwGDIvVmjNE~aA{B`vbH2Sb9B!u&+X~jUK40#?Fi0ujs615A~ImUd{K^N$jeL=
zV4(X(i^*T}%<FjG)7?UQasL^~iBY*`#yErWD8tZUk7HidTfLcvz2u{qchQNjtG$2e
z=ST^+y$}x3psVXB`uulhhg!#*ThWJZjjl#K9Us<defQPx-zf9W4#3~1k<Ea+5}QCV
z^p-^kPtw#x-SLZP8xFvq8ig#jU(^^877~!425zZqMHGgn3Or$jI8b*DK29=*v2S3N
zDLxxp8Nh=%0bvnQ!QtS6Gi&6qTBFt6<CuY%`Bi?)*=^FTPBHTs?AG4R?8@{XR(d|y
z1l%ucKeh5#6Ofl<507hV6LQ}b&L|2m-xFi+@``8tbn?vXY#W0%vq9Wg#~!c6>TwwT
zHYMp=Ck3s2eQJlJC>Pg=LpIGD`b);{O|O^}l7h|`jxp(DebXN96=JLf_3+{D8S~oE
zty-R}!YyWjoywt%gJSA688wgHv-jVSwZc}_WU2Jg=jR+VI3U$-J<q%@rjPiAsgNHP
zg{3hO1FTy_l^_1^YN|i8<U4b6MQ%P6I?-!W^5x0+fycy@(V;}#A3=3AtXX4rk)!kE
zs@~eF^k6YjKFZm>ubm{YYSb%}tYER^ytjh7Cr}Z!5LseeEZFp1e-OUYxo^_FI@Kpp
zg&y*8)LEHpcq2Jx9-KRYN`io&nIS+Wy-ShDXqR{K_+!D}eQz3tZ|{Nz`nRIq%8a7K
zYTT-IlbUT~d*>cH@Kc^Kyznt-B%RYuQgmx194OgxuC-U>+Nx#0g#vZjFI7%K&k5#w
zHZv=v6uum%PcrH2ZkM%IFlZ~Y3vz{byOVJ7j4{W_KI+j)8)URs$t4%PmWDK6*#R=2
zrww^I!^TV6xOmZ3o_n)M2XhOTR@$bZ7X{*OQBqYraa9T>S0A3!OvAjP?8RS7nCrf0
z=|q5a>}O&hc$qP)#>>9B?=FBn(9^a`kQ!A(Og0dPt}jUg6)SsAotT{+`|X=1xv1w?
zhk%3Cp&RJ4c8RWOtLwb)C1`yBIZ)pCqT&PEn|eMQd32(j-uA6CCw90rt<gzaR;sLG
z0fj7$Uz^T-e*^=*_<DkEE3-cT)W{(2xqrD*0`{sX11LB*#t)OmN6)1XsM*j@2}Br8
zLk#&j@3w8lMN~6AFcY1^Nq#Wcp5<Ua{7sj(G-U<*rI;#BWjFE?S-p6~zjdIa_!nH1
zrf{*Gktc@Hl+m2gGUYeE@=Q&EOI<7o8WqSp?R>5;!|K8S)piT#MGk46K=NX*DXEn6
zuwd5PVvfy{tP?}U2?v$Ev}_J46Z!n^3aNe$9GcoMvEOo^W_CRDwPG(-*d@O0w$fgx
zNM|rORj|$oW3*!QVr;S6EaS{3;xEz;UWunCV2l$CeF%^6luUS3kO>c=VhX;UAni8!
z^Q<SidWR-3etnLsu`rvld@kz+FlXJHxS%<C^Zg4m_ChPyZ%ig>WaqFx^7uMKBa9E-
zm`CT$Pr;hP8|g}`*1Y9q3vxl1TOuCY-JsG0+)eLSi~FyPAa($O`bM0pe@07NTLCPC
zBNr)CoRW-t4(V+5-Ji{MSd-6PNKBtGfo)%yVWg8(J<v1Df*`JIxzkmzlTsd$gna}n
zs&z6XS&Psg9!{j(jE|xE-N#FhE^eq5QL1+v=9Io)A+P>^KCxP)TK3~RzlX>UZmWy4
znG9b7pR^;7$->)hNkhZon+eBN32n?>S{bw~2%Jjti_8WG)et7Jxrx81fe&H3*TPqJ
zuKsyli;ba-Ruj@e8e=uT!yH6nEy-S?6vl_HsS3Zoo|i`bE5v|LxN&5q{OsfltcGsk
zCb4Po%2tRwlcz<$-%zyghG*uvx_r+m(I1cj8GSYMdyYdhUmLDghn+@5+3Y@^p*Sy@
z4%T2NMV@OE!4f~*fxS!2+!cEMg}izTl$;C$GTgr(XZ>jXbl-}ED?x|W3Ij?%%g2pM
zLjO8#(vxjZm(kmaB2I%gj=#`zuYJn!AgwwYE>k8nfvlaL4v6dUn->*D{e)lIXQ`*Y
z6Jjb<$RSitfXbG#^>Un35g|0Glc76xT_k$$1zFwt6jTnSLX{!|jl-p-B|ADidYtMI
z#yCcOMps4yQZmEX4GkJD{BT!BYU<m2dwWy$&QySZuYrG&s;5983dDtE_FbIl6d03g
zU{2?rdwX!IN%GnG>nji1;+p`(DndpfUru+<!_S*=&Oj@|zPCx~ew3I%Jli`)PRbPh
zR}@0e4sHeJ{$4UM<)h5ja^p2%^>u2Uqo<hPNDWt%SzF2^q@T)I=gEdXM}a(c8~Unr
zQ7HS7$+WOSVdk>+IqB7$RNQje$KEpwoK*@&SyRieq7L8VceALASYN%ApMXS)Jv$I;
z<5GRBJfjw}5n?&<D^@p}$ER?q^Y%L5vAE;k?I^Ch*CM4B-h8j_F1otJ-RWhrnz5Ja
zr=v9Y^>kveBCp@fCK#mzMD<+14zdPg7KM`6-Vbtdw0U)IRy`i9I!!lR&I)evU7z1I
z69gcsfDTfROQqUpPQq_5W_44&L^T*^z0D2txK~Dz7(H-y(DE7Ce|zFH++N3TXWG#s
zTv#EQes3bWuh)VD;H3j6*9cO`gsdL^Agp|_f>j;%#Nj2-Y9H)XmaK-_w#{sn{IIeo
z!?x9_F_~AjXyGgWia>+4FUC|f_rp*Z%P<y$nY5?H*w+kSK$kjT?FX_@K`$Sn{#g@0
z_fgLbykc57OL?;y$}|vIuJAi|m!}I}l0u@;#Vgl|1QmoEA5N)SS&VsnwqCH$E<}n8
z7a+-u#`nH{yR+Fherax>psOCuU~PaGzP2PTQh+r0F$V1ect>NS{~_wDqoQixXf0Gg
zKuKvCW=KWp27y6_p+R~80qF)o8fk~_k`NfWyFqdU1f)}H2<h&+2fyFF_b=DCmdkI>
zIq&<#e)h9>kWsfPQ@$k%l6&7Xpuy@rspl{~R?9|g{^Lg#il;}TlP-9q(y_okTj_X(
z-qK>mwHaTI4NEaaly@p?uq+SmvXx4C=em!>x9wl~;w7q*wT>Sd*#4r=l81JGoLb6G
z=o){F(g|x2ah_w3yk};b&2QZwzPuT(5yI()O1MrgL)V{}%lrdk0r^X?d}KL&20}+F
zTB`r6kO&QDxUhDjbQ`do@pLN~k9qbXUKc9`EglIigSN@{*oF35FIl!~lxF8bFsp=`
z8i5hanT<9sI(T}K$IFd>V6Z9EA=G*CVsPq1Z+bvwLGy|E6eTI=O{xWwJYMi?AO@j9
z*}s|CTrdNpr%_qj6TXp5O>ECAWbtc}?L(7XRTOU0N`33I!>`PsvvMlldBP@P_lar1
z#G1#g<R!a!FmFynMSe((#ZM<<If7Ib_%H3i)ejS09GuUA)-wjCAhZX4wJ`JyuzoxZ
z>=xImFb=&1IjIJp5F&RurLtNmD2EGnuX{LvW_kKoXZvRSMK;hW%bbK4^+hh43-J{E
z{7A=se{CE<7}pmKUdrr)(A4H*ceil#9)~ORx7q+#qA<1U(U2j(WxBmk<Wh`Ovcgy8
zFuQjr#3~e9Lt<;rb^*8*$FZ3#wg!x)9h7ZJDEOrroQ;hp!g^(w{Q_qvdP^infufiy
zO8<e%yS$cuOD63XI;`IBStn>$kL4t0jyWDA9mE%t{|mT-=?mxx_dAc;HTkJ^s3e1b
zDu0fV{?*n4=#K;QXg^cYH}vzPiCD(A@xF&to9bM8iV-t!z?2egi@sIUHZ*aeGUrB%
zL3cH|Td!O6AFtx|u#<CMv=J@Ze@|JSwtjAI)jP|^`DvRPBW|2`bh8+uLsIL2;(q;X
z&d`kCbGcd*9%8g|&Br`Y>A&2Wyp<8Lz=0@fJ^_XIvFS;%w>#nMst5T5eXmpU_>kPY
zIaeptJ8mUY6J{m#E;iE0J!Ol_3cu!?)ki&{(H}g57k|iK;{Cj)t{Jtm_9R$7>r0lk
z{Cu(u$==lZc*CN_#z#Be*IvPn0OkFWKz5uV`vo=%wT80jJI_|r!h!9>+pQ#^cB%UB
zgUS*zM}ZU`Q*r{aNB7zFo0pHme?>qA$f?-!yM`Tt?WTUboVj)p$)?$T(MxR^85nl<
zVQAxEzevm>2&EhJ^FyMjrw1emR=zyQ30$$Z>oF<;V*YnO`K$Lfwuy!EYMnpScN609
zD8Y9RE==_5>?Xf|N*=uW>qLKYGX2$~{N*%>FXwOiWW3G;D??mxLo(gC1C7_qM;A+*
zB4*Fa(@|pNIz|7q9+3FhURyzlslDA9?e~m|Byu|pN(r9FNE2Hmb4t^W8c^P%CfK7t
zhJ0gdjrc0wm=hec$O|Pe`WnsBkneE#EENM~em||})d88y*Xea0P4?qQSC>IATnm|6
z0p1t(;tX3S{A9V4oA-SIQKPdy9H6sC`cA*o5?|jQtTSeV#D!1CW7?@RUz%Yo)m6aC
zp$U@)Nb-LFj%8i|I|sn+-f7U^Gv>3O_`M|n^R!X8<?-i`U))<&7t3=8IAwH`7S%4}
zraff=H3h|`o!V+<-?ImR5o@i*`}Uf2)6`PQp;9~}ro!BdHI2dQbO0@oO#aLS=$rhK
zs<gwr1FTr7Sk(%DOjTKwxf~eN>)gtPa4IMR1S%sb!&wX2iRp=ID}XIF@!`QxxlwNj
zba4aFQDS0ai@RlAP`r8(Y1wnDKGq!!z$6hG23MXzW8NMqS~$P>H`_1UX}}~{c0Nef
zqqc!xSK}n#EXm>6I8Qsv^iO(OEB1diNxG15dJ8$92P0I(w|VswC6G%9UJfRR{6><`
zHz}h;4j(!16Wp7GZ#Eps6!y*ie<Op28_M46Cq2`!=^sF+yQfXwbZo`FU36l4nzGU5
zs&U|#m2r`uA;4KDPx=q@6(GKJ#DqM^yHgGQN|YmuTrQO)Y{`)oAWVHN-N675(JKk~
zBCflm3^;2Q=zf$0t>7KAt|l4qL|*NsT=hQ*`MDdg5%O(-%G=yh;bieF@64D|eaz1K
zRA3cC(K2cUpSAO_W-NI5;Q_9{s=m?BnbN%#eUI|-kN0$1qg)o8@U->Jr($%eer(Z)
z-=tRH#R#5+IVK`MW817GN;^9G{k1=S1QCxn>Vz@x1G&)(Fa-ioez{UE8el9*M!0`f
z>+znA&7@k5ev0H36B{tz@m&rKmwzK@WWsO#9FBbN<|5hKMUt#;;mi|I_?mM(&ooW(
zyR#4tF){HAK#%t^eVltHRO{C0Bb5W0HP2)?B~#k;q~9BA_mP$WGCAAi7MYlcEHCFc
zz48PyXa@5jz#z2^_Kr~9mak;nbP(AbrqCIXG3mdySE=6k6cmvfr>ICp8N*JD%Nz2u
zLkCkXw-Wh`YeDwK>b_%VNxfZa%BPNoLVj&ZT-qfAN(#4P&p+)`ye%ys6$NM#lMQ?R
zlx?*j%NyGSR)4|HKbW;*$G@=rPu1ho^HV)T(l1R59M+NLP$j|5Ykj@40mS9gh0XVa
z3;!yYQqGE=kM>-jp6U*smUc?bjY8g4?yiaAME(2@?P0^6kLV4=dc?BVHsT&l{Z9Im
zP@PG+cfd-*W@@aIkg;HLZXARK5X*~HTSCWGvP6e|Lgyw^lo{3(%&ijw;-m~R$Vr(<
zLgp#A{wtLSiobwWs{}(#IhshY`a`{mEL-;WOWyL}1M&o(i~L9(iXXF<X_1DA6&5Ky
z9+b{t+v7sI$-h<Q#Oc7|F80E885@0DaxaS(<IBhx-*n3NQ^if<-irrkidtIc9dJO;
z`Bo7e5LPE&Xq!Lz1v3wCt)4~$cZ_s%wrTojd1Ir{`~TVvxlqzL7|3ZNX`5SlN&Qc>
zov}jDL&?eydG*5$jNc0BJ-H7EBsGhh=Xv_qV|~KoNV)2v6rGDGY9qb|0?xD~r{dZh
zz<`KHua63@6sM%Iw?XsrQ9@9&MKGmD@&8C_)IRV#7xYVmNspy7az!W9L-3M!zbP;X
z3f3S?E#FCnh4}y#hZU_z<cOOQGVu{o^EuUsdL?3pj|&|WWq4L^Dz?|AZ2jxy;#n!D
zO)@Z$qx#Cb+#0Z)ur&eM|K%jL^qkJ<;buEzA$e=jeulTiKcJb6+&%oFG~Th9_SL2#
z>JCN#UFq_X&6+yZcO!5Kx)m5u-Af)%@U!bk!l88WYb>&odDNo1(}OQwwNiJtaksvv
z7Zh}ig@q$C#ZHNIc%THfYyJ+nu9K&a%=$WrOwQ4YxKG5CIn*H-aFJP?K4KdcfLNFt
zd~b^Yb8Dli36f4%9HF+^YUdT@`@*gbiR?f|ZsE^oKTG7c_qK;BeNHx|ElVq*P1VnT
z!Szst?<Abxg|9*i?#zbDMk8q?UOwo(bDjQ~<yzFu<nD5pWAjd>zWi|ILI8g?(W6Z+
z$0+e6jvDDHE;FyK7HRVP#sNCh7RJV5hK$C#ob4Q(zLi5hr&nnwVaBfp%rz|rPm&L4
zCWlPt%~8~Uq~@9qMyS-f)ah%VQ%AwTbcG8S1vA>xnYhm~!I71(ECu1U&>e*I*4gG_
z$rT`T@#mxcG^}T%q@}po@}QSD)3f{eU2$n})C)fmDz+{30sK7)TAdMIFOcl8TDOPw
zDuBZ`V--tuz~+@Zewqa$r&-skI5T_jM23jj%Inv2w&5`&k9H5w=0p$c?HS7f&$EDm
zv)N5TZUl{2<jI@@%ln3=-@lx|0JZv63unc1i-D0gX0P>jeBG9Ez*`(iA{`qWo39*r
z0G5O^g#m_cu}l?OMW&{visReo+znAMZ0=f5XBIZ<2tS!e5E*b(9LEdnaeSH9WXvci
z(obH=<TGZxH)!;!SqzbDY!J#~KlYiX^Glvb7X4b&+=!2Mp+p|ps|Bl+<ILFZ6a9tf
z=cmb%co)y%|Gh2C^riV-NA%_6XVT~l8NO;WB|+%W?Ir=V9tvz?C46T9uaMc`KWcl8
zIxnGUCy9jlJe{&FPDHx(olY&SEc-x#VKK_tPB}g4KC-Eas`qMit<Z<rw7hU>F_5F=
zGlFgw@ji%J#6b;v!B;o3!$K2>RCnCIwg!e1jzo{~`K2h7JZYILEU}$G8&(r?X$#uU
z0TW8gEL<#24y(OntD*0Br$yNI#IpoBZPF%TXuli#Z0e0}RB^8`v14Y%UTbzWff+hW
zM5egY(9ps5<ZB_rM$7{dOOxu8?O(qeig^UUkuY(Mwi?nvUCdKUWe?(szwOi1cOr(n
z7PfR<mSY*(AcO~LH<waZZIMKT2jkx^ebz5}yKJGiCxXXFjm(p)2C8bD3x9$Hiyt5m
zcT=hLzN7-XmhJpnB!r2z1BIw4o<}j@_u`XMkuf@xajcSbBfksQm^Ds)b74=y`<NoW
zM!`nq-MO=96d<FR#E(emkn*X>T8eTwL=_+SaXFKzy1{7l@_g|#&DwYg7wLK~OA|E`
z)$y7w#zm^))19;!=DIzS{_Z7{l&Bvo{R^7T_U>%`u@fP$rGB&jd%g*!`!C3Uh}>y#
zM+JgQC%3FHPj-@3UhVDozUB>zJK7khXJmW?kem5FZ&URr^AnA^09H>F;h{Gx&Kt?7
zn%rC%66_J;h#?!X6}x?Iwo8r42*qHL=-}NM=ORLB5VFHIq25Lo<1Q%aY@$gXw!)Kp
z@*@#MshiSz(DJ?80o;lQyv7s9*xY<8ZM5Ihr01(wAu(KmQ7~2c#)$WUG}w-R6PY4m
zS~zozO;PKmC}nWeZx^^Z;<WWroZF9Vb+hg>3dQO$zAGz46&<Q-Vm`%%(n+60lI5)A
zt&)#Ju-&)G6SG(%n|W)VuJ8mk2O|gRkWj+5haT6N!?Qu;aQw{EhzC3|pNOTU@BHc_
z>%eV6oxxGdz3~{p=7i6A_XWV=4{UNf$?rg;1C2ZZRwyscwBSyoFQB)C=|B>}6cp4A
ziyfRBY>VF!BEgT-WqjLxuhUcu@SQx0sgU5Iw)IRKS=O#RamxKZ`6FCdl+xOd>E520
zw?-sUdoEG)tNi_r+<8wq@yEEDt$m)Ze}zWDrpSQr`(oj!E$|zQ?Hp6lL2}C9sA62B
zKkDy{7q(&{rl##xQ)44qLKMC03BMRNq8^C26DTrVx#;AbZ_}FpcST>$cZ#h3<^LNi
z1&UzPJ**ZPl$DH90=+`iJ_Xh-euPmAmi~XPyOKEaUKf*@z&DGM=4|%*QiEDyO!*ex
z$+$YG>1a%QqS>QC>twRRL`hNcOHxu&*WOtBv)emepUhIaa8VJwS6D-&1AJ~F&gQqO
zFH)FF)B6{^J6F0QXC7WUX_BWJRRyQ5!o(TfLz_i&9%!qqPaoo{i#_H6MS`P_C4s~T
zb1o`f55Xb;kPYf~&e-{gPgd5naY#nA5q;B7)QZF**|$GoNv>qsG;e^__#`Mtu@vFy
z3_nPwPn+9bon({l^sdDx7!cVa0?E#?X8B#6&SBv0PF&U~XE)L>-Mi<{Awz(ITuev$
z+YDI7SAM6>=kh56qaSl?`&W8ci%n<P9FA1g^H|cO85Q!k%0NA*$;T^yKF?VpZl-No
zioz^_3}8+P_>#RztQ744MM6Q?;xFv#gcH0_4`0i(0iPauTAJ_QKI!51jvZK)4pGl0
z<;IUUMyL^LDU}TSiC<b-VGZ>dd4lN<pCN$^^BVZAZ&eT&=uWpwt(9qZeh2W#+f<Q&
zqz?+?HOyl$n9-@x==_ZI^-573B$!P9IwQ;3Vg*}>BtE!7>LagaAj(3#RVuyyxDW#N
z3NiZc;RANk4ekWGLj%CI=`ap_t5w#>mHw0hFd=IMQv{Pe-yx;HjHhRF{wy}MxNdzN
z_dyg}<gLq3TwFk5;Y)5_6_c8?60fTQyDP8Lc3KM70;YoUiV7tiouU;<;28;}pWZ``
zZnuhx7F%wjxSeL;;7C$6@DWvx|4keYY8N}O%FRxhu4{+8x711eCp{1X%=Ca)<=q9W
zmhV=>XE>uqVRC|F5N|xlkO%$n-s+ykKjF+oA?ZKsi2^Q!iwtt@<5D~5l=ceSco-@;
zPB6eIV|)n#j+qFtiH`X3Hv;(Q=x|FE;CHC@=sCcxNE^wh5*P;@jE^NX*oFhfK}AIo
zs+P5<&%Gp-d27Fx6`#L#rbe#>%F51W@xJvU1BRbfIv9uPXuzGV)b6SfzNqLF0z(~q
zg%bMxXg||$W^Z~bj9$f@VQ(tN!+?O(H%t|0tM$w&`;78Z<Ei+gNEo5?1&C1kFOHMZ
z$iiOPWUZCP!)=O4=C!t&^p!u-?Q;x;?SNk`yVW|eV}Z%}2y+6T(Zgnv3cXhYbYmeK
z5f4PD`Xg(+5Gp|eZl<2K6#oj4k9m9j-W_zCOs~P|v6wsSO(n5Ppt5_&41bB9+ds0J
zn|1LnRz3*`rWBMk!mT#;d)ZVR=+5Bae$@^*3UF0{L<m&q^gD8W`0=Id=;my|OYJ~d
zDGCV{2#0~i9>0{Yc{GflFz9ALmue*WE*T0OK&RB;;rySox@ti^Q@f1}gc<k$|FfBI
z(Ol{~BJ(@uBXpB}rG~icJe*0l$s+?=x~kYBYlRBh|Mw(&sgarquBBRdMzlfyg&yz%
zwhR1$^3Qi^-&nBTN^lYa58;4g$H%YsLTRZMkwS($uH#^Zsb-1@AzTA2yWrrp0}{t~
zySB|afKd)l@y%<mGhBRX0aRGH0|>}_Pl3Sd?cV}DN7v(wGRq)4w2{CmI8p>DdA=6X
zx-a$BlbrOy|NrIAEU)-AeJ{`-7kVW)->U|oEbO%@!9#w`oV$GqSLQBoMvMU1dmujG
z<NV-+Wil&%U;5_Pe|bS1A3xfuE4((sPmL++_|DG<yHRNio1cK)8GpW)RIF}HMgqYi
z?$kE?vZ+cSyM7RUW<1c^0sCrPTwI?tc5S@?XEQKi9?5NV_#n+(g%PX>+8wEN7m@*Z
zK`^j>gb7nr7uh_o4BW1G!uryb$S>k8I0`z{44l3Cpc!*U&pOoO8ob{3bvoEjq`y0C
z?7no*!XsRxWWN~QkCE?kgx&k5-L!hSqZa$U|5-h4;k!WKPCjOSd8hvjhLd^wyH6>$
zuzqiVq``Xn9YLt%<YWdyGr(Gw&wlA^QgB{IhB%(dxKb-UVV>2$^WI9kV*|_W435U#
zJFLx4sU!rlV^2DCoxAJ~(Mh8IXQ%CYg{SrR{@=@GL0Es7RpQ*HOv%dU;44f4@76hL
zkT!EP;t`tt@~pbFYA;VJlpvgNcYy^^^jIH1<D8*GG}-(Yom%hCSB57?_(?h4ab5?0
zV!t=47cfu*p|Z1iB4G_qTZG6F{M&bDx?t<_#wlL<TdpTiIg!8C7d(9aEquF7uKgm7
zV)~FjJu0V*gln4-Z~_U}EA;E}{KU1;d^1SetSg$V;&b}a<5*VgF*U%36HXycUF$yO
zr;#>&2i)XX;)E1uL(ON_)Jf?9RSi}N;NNHarLr@^LL^>hs-Vt-<tmoM?2X6=3^n`Q
z<VoHoas!g$(x&R$l>e?Mc)ruUTK$C*{JEq*xN`Uk1OwxMif@KwUaQ)Fy~jvLmyU!^
zHGD3Cp`2a-p;8>TpwE|=ES`m(a4Tim@;=;Gmk4LKs@vb$4E{_v(NzTScM(rx_BY3m
zQ;d~<E&KBQ#o17dICo3z-d=F5;$(Oj!_0~3R7O4%n(X^dHp|Ggpyw9jV;wQDG|FUP
zG<`fz!2QVCN@K|%Q{{YYNu4Ua+XEIwgRz@#j}sxO{!39+U$=Kgiz{?%`Mx^9M={f2
z*f#fto}VW;R|#cB+fhgTSeB8fnkL|lPp9iBI1U9CAEKTT#@y#)y2osZVU0BY><wM~
z?Rb7(QnzkiC9g)8BH~exgf2SqGe*Hs)pWN{8LT47)5zt&4<;B083^w=q*9<m^*uW3
zTa!$%`yE1r#Y3EsoLk|hxbs`t*paTRBMgFm<?Q(G8Nj`C9!j-An5g?XsO>qrx+dSC
znOd@G3&mWDaLtzS8_Q~mh0!{VSBBz7qFQji%1qSNf(5Yr5VpkgTy*6DT`trIn(-xF
z=)Aj&;?fw&T)1B_YTQ`g>$BPqS5>YBO7Y*L@5dW<GqJF0jez4g7N$x8JaAlkVy%M)
z%e7FmBeG+;g^R1A8wdxzWDj#N-FuTTrZVz59J;`N@xTZFQ9a)V32eHlCTcgR1R9hg
zNOp1WWn^*VB2Ja{Y+P(C9Ve%XD&1K$?6#)b!=NQWRsRYjf!%m#ivg{@HgM6sz?7xI
z1Z%^Cy`d5DUqbJF#Vc?xhg+-5_=VTUwOmiVu2mN>lH6>+1m0(+j=!p26KDV>pDbHM
z<NkI76?Cz=7hX&VxjQP~t<E0fZf>S`dXJgpD{}Z#>#h!Yf1H`+Cm{%*qHPu#ko$?A
z5N4P_jRUH@Z8{*OMj?k{e9;MnZw*=EZofOxtmaeQvn>#j=Q*&zOj8h>k9zYJ23|1O
zHM4&O$nXTe#vfzh4x!$O3X=jW|MgovNulRpw^z@i=n@(EuVGMJkaW-f{9N!EY=Ke_
zIpVdAu*Clk-H(Ni>pI}=9~?v`Cx-x9z30^ZVNt-pF%48YkJInJ2BUZK)Tm1aC&aF~
zu#_!nnnjwP3J!0?@PQztWN~Tbi+zwRXCsP0Zq|<8VVu#M_|!^JrcVWnd4`#TeUUnN
znOoEA`;hM_I}z?1%v(J9rRg{3CRIu8Jty3l7G{BSn|!E!-u*`o6z^3@Sgk`gHhO@N
za4N%Bb$eni5=-V@lg8x+iHSWX0f~X^V6}S1?3gVqhQ_8hm*SBf9$pTKYOx)d$b8iA
z(A)R%gEp{pJFg>!p3|;E9V~q>`Za!E2enlMtRw`f-m4-&K2Ephu3?70{Gd-qC?nB=
zgZwY;<;L8dAo%c&mYohe?G%o>=}!rU0JBia7syX%M)77oe|ri5*S*4}r&xs1ad8ZU
zdC|8a_;>5d?)+TZ`&|7d4P?i(Dg0zYNHtR28&$!bg+G_1<Y%&|5gQfGXs}Pwe&g`7
z!AACV+qpxPmMY<wEXKn8{46)iVXFtAKL)jF{;*dLxh%QZ7qakAr*3`DqVY!Dc!5)#
zBA#W0EEfykY%QgvFWOF+0uz(%N*@;EBktpft3PEXM7FmvlVhZYxOynkc5iH6y;<Nr
zxKCMpP*b!i<*;zwQZ?a6>!IZvk8h?b4T=)KEnR~povQBJl(2M>1)>VhBCW|;u%Xs8
zN#4_eS@TVM7TU2e#C0$n%&ilSa;P)2rP!uQ^yWv)+WJeMr2lud-o0A&+yx2((4HD$
z>Rv4DCRLD(2!ko(5uwQuWR7&l8YGF=D-NjO3^>{7RpeVcaiGZp<jzON#`3K`L-)Tz
z%_%{V59r=#SOSUE8nE8!Q)!tG&n~S<jKwW;leKjfm5)!U%ovCf7vf=1P$ez1?>ynZ
z6b&rKV2Ga-!a-E)*7Ga*T}Ko(qmzmsn)vFTCX(Q*UU6BM<SE&c$B%ZZm+B2GP7=)d
z83Ol<>`M4N`m8fIH+JJ59oJV<<Y7N3nqpgiV2AYEE*fHdsgGp-e%1n!tND}q7rk4c
z%I)l!Lo$#i;+5QG82^Cr_LX%nG(Hp}{N}&$2*sQTUUP4L1HNB_XQcyb5)#mT<#iAd
z!mttXiH(;)UfqH2>Z8(KS-b@YIm>^!^ZSqBlP5ML!H-e9;U&=XftkAJWVGRVz;+GA
zTja>>Zk@lse{No$_aEz>h^1%95uSe~2#nbwSKiSnj#AK&URa@PX(853@+YrZny5+8
z=B>ISA@rTg((7>aQXbv*sZd+`08?CuRh~Ng+KtI5Zl|A(e>4MYCB7}j$@!)|(|)wn
z!psQ&h_yW74+HmSf)iD*;%0Z5{r1!6HRx5{T3W5n*qwvQ<)m%S)hG_@%sMOb9UFxS
z<Lj{<o3zU<QKFwthoQ%==b{WE<8#dy@ASq#H*{glw-dnE63D~Lj(dd)rTIaeKvy{U
zB63zsF%)olX{%XXDggEbXl-7ycCANOO~hNHQ!9Ubw5g|_j<Wjt$69qLKa)f{^r8tk
zqU9`WrK$z+eTU1aVA@DnTW81G@e8(QoX;UYe}wuDy_bx-J&Ul1)>ghySF=xzTB$?b
zwfNGj_L%PgQI!XGgYadSiU{g|p^oWpX?XjHGb9S!Xjll%fCdGJqjOC9UzGR~B75r*
zY!F|q9&UA=Keby0#f{~A*MJ?#3szPcVA!s%KAvt4)O%JE04VYxfZELQuW;V?(Xf3O
zu3%yslJ!TWFLypQAH(^aXtAO)swm|MQG8MB{$%1kR^W8zO8oi8lsyFT$?gZ7QH_V4
z$~<^_8S`3}Me)Rr4HB@AbU4a&Jhx06Sg<w!_1Tz&zCb*hR)rv8R7hU$pjZO0Zp8y1
zf;}$B|8w<XyJE+1hQK;_`sh!5i9Flym7x9Yz-EOmj}-yF$}~^eu48uKzn=)69644(
zlEc^ecN!%_*qT$x(@Oevn(&@mhhGe=gY;TS{yL4c8?L^Zj_5tx=G9Z#2Hdc_PE%<w
zMdt!%KGU?z%zE5@$3Cg1z^+xpA1f@X5T?hi3`3Bi9n!?zt~PrF=Nqi}6Pb?Xt7u!z
zIq1wAKJs9BbBVvD=bRDUOrID37#Ux>dJbQiDI8*4JYvb`X3bg;axAJaarvn4K;>pz
zmRJ0F;Y!Y^)<{FZ`uRwugzjz8jAP9dp%Hr6n$0mH*tQ`t@~=B2qrQH3TKX9EHAo2*
z8Xm3=GMi20gl(Xp8FyG-zgBmkvMZ*?Nj^PwrsB7UBB?ORuv-oBu_A3dKpGe@(anc5
zRZJE_3C71~J)R;*1b`@$eo(4nGH4gP{(ZdQLk2{lV<iv&+VE`ZK_+&mle?om9nA^8
z{`goa1@ay!2Y&HHJ54bMj6Gf=s%CDN{%c*CFo1f->!OxQ>cEnzqV_{oosz}p0`uHH
z=Bm@t4CN|W-W?HTc}rNKYCFC?zf<xv_-hgMfvyg%BZ2Y*_oXoN_v3YT^}n;JqiYOu
zO=ix}@+1?xZA;>pAH}e%vqsZ98eTg(5y+EG4thCcY0VMM9suS#S$xUU^A!U$s93=_
zS06$Jx)=@mYmj!@=boigfhXY;nxXjuWQE5E7d9bzvv>}^+SH$=Lve3v%4M+ybxf52
z3%}wn@8pN0PKdAp%yB>Iq^iHtj<mmX)F||>rPSPbs#UwuO=C5cw(>@V>YC{c!7OP)
z@<g;|cuOJc$py`UuqeEU%~523hP(ld>PP2K9ay!R^Ij!PG<O{+4sp3}wTR|C#)fER
zeSh&F8Ws<0(X(vRmg%)~x%r6L7rV!H_U2i9W7-$ib4LB+K^Dh9G^VF#m$Uo*GT^z~
zx+oD0LV7kI{7hOb7y$2|6OZ!k7V*2}Qy|aUK1fSBVCFvo9SFy)l^iH^DkrW*8n0>W
zlW^4WYFDdSt^NlVVBtDABxtt*{~yrXCh0#;<uXh6yV_YY3Vb=-Ck49d)kbmwsfe>b
zxm5(7EDuASpS!Bcb>wFN=I;x;3+?cyd&hqVGv&ZTfMjVb3@H0w0}!e2%nahas%m<A
zIsk~${%d7Ee0Bk<6%yC5gZ>*%9@qWT1O&t}sBg+-AV`H&h%yJy&ID1NCG@O)VQ~Lh
znrg|ILl}p-vbUD#unF8d$p)zkpG#ErJCm}A`I26ke)-**iHl$VL`_DK>B$5FnbT!<
zaXRDY{!&OSb7i-?$mx6Qf>OJK()n)Pq$>VLHG!BXOV<u*T|fc0(Nko<D7n+Td$h%W
zeQ6k@yW^$hy`<a_#g8BxH!L2%E*{~ZNpSiRvbwlGcv1m}v}z2Bv9}qq7P2{dNIt9M
zY{CbSE=8->Ey|j#9dsrju60-|<bG;~rQEZ*?p(_@XG=T8O2w4Nf5W>_fzleyMzmbl
zD{Yp_F?;8)&-~0EO4YL-y~f|2(RFY0S;g>qsm@RBU2df2Y-_vEWK4x9=l3s&Ic41^
zCz(1wEfAd@K*uMS=9+`%4th^6=dZ6#t)DrWjO00Gzcr{L9?w)C+EtrtIZn+Pd|v%*
zI>?GNJ6=Zo!84#;t^tnG@)zJ3=>x}zNvRuE@DQv&Hpo&twWpI?wClj}n{e&6{;T@!
zr&q|e@J;Zg^YMG?RCulg0X+0^@35!ts$vjutTX_D!_MGg2fOwkTr+RJ+Di;Y0+EYa
z4``v*InC4lmp?8f&bklcR(AtXyHsP7|AnAffjj6+*kfsDbQ;tkJB8o33JdG!))y!!
zMueD)AzHf6CI*1q{QMq30uz9O8R&k~JkOZ{Z{-XqL44o9fcn7B*T4Tajj!r6p6HFm
zWqzx{q&c)hWtd2H6V)a(V)qBL;fK$2284%?6&Xr1UDu?o3fCIVbE2>iq6byXSoukQ
z)GyM&Bl+t|zWjL34t9A_bcG`6U(Pn_?ZL6;EyRXZ0~^6I?-}{@DB&#d2%A18WgnkK
zW93F^?8hQ$KK{MC-0rUKGzOp53ye5=sMp!IABD?!h1|=k?DD@?LBxn-dD^FJrB@qj
z)6dk=N+tKzP82{Hr}ky#FAY8Frp8wpR|={#pVQ5ZCFqQrU(JN=REJ!&@?c6WXK1FS
zX$|CWcuy9lIdSd4HDW~<@6+Y*OmalyYlN)TI8s>4m=})s-xpD9SaqbYiHMk33AF&>
zrf}~PA1b(B;!=V<({LNhped<wD}7Z&Q{twlBHV&_?}LY3wSKv{p^(^0cY5l6rQz&Z
zYL1L&c~r5Xq`9FysyLU_x`0=;aPG`T)iVn8;}v>rEY?E2A*-27?xzAAUI^7}R1px7
zOe0`6uk<0xgluQ?$qZ4mqJcmpGPt&Lx_EFctYK=u@aGO3HJ9&_B71rTBDyY}@SA(Z
zi81;1>a^<_t1hfCIQMYBxme-MrAPt-6n`HUKHUvg82!GAqC$wiz#Dffhyri*9{CR0
z_0Eq$hQ{A*tMocN76X8(E!^e7s{2E`r>8F+@edIAQX#iZx$WTm(Yvr39J7iVV9}DC
z9S&BbV^<kSZXNQuM^&ToVdo2UaX&_ZYACEc8-;@6DWKOu48ZgTXv}m$cAluM=^8@-
z!sc_@OrW?|Qdvn{RaIrnN3}&N42qlz0Pw-TLc~lZuUV8*rUpmo<hsT54_k9cw6KtW
zeATl_=9NmorV14P-Kpk|eM%M%tjw*BYf;~`#V!h~r-U?|dNQ^#zpd*{ha~KN<UhB6
zk)w+pjyAL(-8h*4Nd+lT?&UsfO`icu^iKNBs#W{MxTVnR=V@phnrpLPdG_<#oWT_1
ztwLNZQpg12lHVMobxH_K$2S?7ky6`pJ7FOKDQa|?yWDXpVepXe#q^NpUn^rFr>cG>
zt<I5{D~76YN#h&=QCdvdStT!IETTwtog3ppR%rMs%=`v3d$p+Ofe?w<`st9flMPoD
z?$8@2m{nUAc51g%;*sk?pEix=H%-R1XnoSfw<oWr>jdd@Q^YSj96A}-+QhiUcrIZo
zsO%L488Bx|b#E+1ae9`@cPV=$zP<$Mfb8T^dcO*O;Q1=s8MS~BlcMD6o-ux}pUAZ`
zB1s`f_sOsS%tjldY2y?2zTJVL=GcCNhrGtdKCBJ8TEa{99enV<5n4?o7__4`oeKMd
zLkhbq3_Xjfy<`i}4s?jfTXc`1k>Q)yOo+9eW^EU1)P&e;Gq++)vXF1|Ue2BcI{*(N
z|CO;9_HsAx0S#tqq7(IkL5en#ObGz7M{sHQe;Nt@65;2S6b&ncY9SQA$dTgq2)u}V
zy!-^~X<#NWHa7R9S0iPo$__h#lua@5^K0VSpwFV1To2D84p~sg_(oDtP!%39@A>V*
z6zN(29qQ;=5v{9g2^C|KNTo;%w5vZYYfxSONl$g$H?aRoQjd()uC`d9K^u9uI2bf9
zNsH{@_tQ<%`WpDojHB(da1v9u>Y_O9y{*_aEi8Q6)q0KCHb+IvkUuI#)xBGkC!Ok^
zyS1l?D|R@M$U9>yuFMNQtLbxrN*AyF(h+SVsD{zep))@2=Y{I}(BY|w4a{$gE~~R?
z0>g_nB?D##f}NsQ>S%d>PFsuRGb{2q_4X?}=Z5E7b`V<wrq;@fY+9}YCs|(0hKjA9
zR*LgfeS)v^m?CIs{v2{Iy9J%JykVwA<5n*7?~FPS9gMnC3=n)f_DN<k{h^*?y0NcA
zFr9L7Anl{3-|1mfBn;7VW)q^04~H;T<+F=DCXHl^jQOf*+E%inx>zJha=NvMbLpgn
z<=Ik6xKmOhc7qr9WhFEG)u~tSFS+A%`UTGeryuWdqk^c-6B^CuG@96FX}cD}Day@f
zP8GC#lP;KvS)+hDqBQ_ycC18{`n9)h^h(9<&yV+z9*9-1qwmnvi^yz@1^vllmsp;z
z(l}7%RQums3zisq<Lp*P5hs-Vub*j?^d6_EyYv~blWU5FMg2qqP2}oK-Ph1?b$!TC
zhR;2B%d!{UYn!{zXNb9C-WI~kr?)}@2ZmTBBcrT*Spi@I97Zb|Hk_kC4<KIH3{5zB
zP4|%hYr=u@xZ-*=(LY~edg6?tJ01L&U4($%$+p}^4s?__#gF82s!_9QTj*kXIMG@n
za}VD{%9w^D6U|p-&{<0p(CcMoemBVC^!|enOZ_ZWX|7m`CQE@O&_#BKG(K>O5)@II
z{HT;)=ybU)J3|Rio0o^c3!(EcQ2Ro)mTf?5iU7l2;27GcGRi}2iG*l%{)`*Zf|w);
z@;YL-Uu7t|jtRd1b3g>BohXFyp8at$nT|}K!R+mmc^1CRSTd7uv)3VZj0r)It;QG_
z{lZ!e)DaY|6=t)DF%Df#P@k~V&54^*u@`Z@IGICC^3}w=c;E{phhIQvvv<)+7I5N_
zQ2RDuRI0^HUvw&|rcqV4Y`TaqZsV<76J?xhO})rI-cC4b_j!?{^(K?;d?!la)5$^7
zBS9c3C<5#7to<Xv-UNAVxgJh2bwtp{BluL5#iQ(n6|wHq;o7)>if>_LQroJ%dc1Fn
z0G!ea7qW_XUuExtyEC_#;6{Y~zgtescX@_gV*3<H>|!PjDkC&Y>GZjhXDp<C%J0V^
z7610Uh1u$m1rpqu5m1!LXCO(qDi0WME33-5k|;~<GDhOl2<7IdKtU-|K+F1xW;DGI
zhsuUTl52Tza4H#ANM&CyeCk!u`#!KjBw15i!uz*_yC>%I?HUO_gn1(SiT_>y`+*`C
zXZPgzYz4cH-XN~)u(8Z@xjh>zdID9&h#~GF4%dI%OO^QkhOZ5b7ko8nZ1Yj&J8ynY
zoB8#-Eqn9vxqW6+tSYgk(8H#ouG$u2DJre6<;Vkw9Y3bp{iMAXKY+u};h7b@Sk)>)
z(Ets=gx_>@<85bd(q1u%Z5Eqz&yA#pxT50tBQ)0(4@4rD%5iJ{BszVJCEB4aYl1h4
zoG~!EUYJQ3eiF+jXh+pV?_JK9oeGK`UZsCEa8#8Jl_^NJFlrzydNt`Os;A*&5R9OI
z+)A$nj%q0#V*Jf+ok^b_vbgmlloS=m7mHvYH&YcDd@7SdiA}<GD4j1+^HhjY5`>+8
zuLMgyg&UJTA*;G&*LSCgMS94-m^>lib)^`{!*NOXf3SO;!`6@Yh*422-Y4?y3Z!J;
zOW#qF3eWuSs-{n9`yVE%1M>^kX2P}AotE&=jB?6n=w$v=(@~Zula<(+fEUlcPD821
zi8Z&0(u;D7akg94I>2|nGbhb6$Z=y#9}sBMs4&I@h^1d%X;*&$W<cirz|@maWM`{p
z?wB=FKADe>up8)}fYjfGe{34WM#N%KHGrpvExb%!-dAfWlYYmAflaRu8_GvUusXkR
zRS*8o_kHB|vbP<z>!AmHkDgC}Ui4BLthRXSw&me3sSPGH3fMahnKqXOt%-jHef2@r
z_lJ&?#m`3$x;W1$P}-fP+MWHq(1i38PsV=H_s1^qS*M~=9c_mfE0?^1t=&U*<a1tK
z>-JH_+nn;H*~C~`35$l5V27908A0SS!OI=)o82R`nLbaSWN3o?4K%zvT#^l{%}8J|
zQZcZ1gM{6;fU{NLxQ7MN%hTf-A%y4~NyiyILB%0uKm|7F+e660O{n(pqODUB6yC}W
z58~1Z@9-)nkMLnV&zX-)H#<Es$$|xaKNI~o3HiOeD}I%%&hr%-^a}uVVf}79O@a3x
z;eVKG_5ek?-;O0yR!y7n2Fjw^1RrQ}`J;asimDgt*wXe|C`x2h)x4UBycuQ2V&bq!
z(+>`}ICvy1&?QJ477qSy>umbzU}JT^uy_#bQQ+(0)t4M1T?;FR=)={6xn_x+wJ6^K
zt2OpHk6oR9b<o+g4Q6kxx5`mF21*d#uhPD(I#xf**CAw#kGJZEaGl7e!na))<6Lhd
z`Pgmb<ev0C*v?J%ba<VETZl?8ytZk|)~U<tb2c?CRcyibcwn6jtHZpDDB9==?dpLe
z5>=z(uw~-z>8490J)C=B>@H$Vm9MlK^5Ow74^Ah7M39=_TXRm8z>YP|e>)_B{3H)V
ziAr*(rp@lc&TqZAcJ1GZ5re$s<BAM;5vRSQ_m%C2fAGLi&)n>QDmiilfHhAEAS<d@
z%79;&Y{(yNY!!)*N515@L$&nYh3+cKA33@JgQD@!<?85`Sv6c^qqq5|f$Ua=F$Q+q
zFAV^d&~0c6xY9gww!Y^N$4~ug6!_`TZxlP(#JIJLVw5!7mDjVmRKsyoblb$mYoSpH
z;WX0EqAF=<_IoUSWgVFX{@IEfeL%U~Dx)&FH|MVH;DWyqr@i%lgR(4>@K2Z7v{Ja-
zFW#R7TkLaJ3m%3}s%JmL-H&GCXgF!2n`d0~BX>Txc!VoNznHSOnk1cGO;_SK=WDFc
zjjVxW;SVSrdWqP(RBtG(lBJi+Urh6Q+Hku9$_2w1?(Q}tn&+Kcs~?u|Z>G0p1x5H+
zq?%}e&9(fCD!RMhs?*usFSE>&UK$)anHOJ$4A=}<fXtH6O*_M%$7AxUN&P;&AY|rR
zRCpn&jTJ?6TZeh_O^Ydo5_uuCLtf*L1`rx*kbvsmsN=ypLv@iOL$*$@LnaF1az1es
zOAK)d%@uE_`7m~w7#NmI_Dz$R{Wq@ou)Eb}ZRjLgf!p@vdqjJ;bAc)p1lZ6VIX`uq
zzmw{Dq$+gYhU@%y(!}mYMPZ?tMtEe)cR<KDFwG4={BYf0%I)M`_-xZ)!DpL8{OH5=
zQQQI18zEh{Ep9+xQ3)>%oxc755(<9n@ur`UkPw5EWBEJn3FJ*x9v0KC+A}2sAzpR@
zf-q}sw;55ETeW_`!U|ZV_TF?A!VITwF696`L&HYh^a*DJOE#J#C-aLH_A1f3)5$gi
z2=T<^)jpS;z}kjuzm#Vwi@$jLXPrylor74~0fnKD5;Eau0J=G2N~<q6xKJW@h{3$E
zpE2>MtF{cb>Tpm<d&HbK5+*XNu{Hcj@Cj=NQ_yW;cm;o1mVSbApW)@uE()GTSuWTY
zeq7x3BetWe9{4<+VkM>Xc&+{K+G1o$nqAt_Rrb$>#yQk6qwivOL-ESgKyBDDK%}@?
z;NR~{^nb(ax9S-E^xBlL+nbEgVi1FP<;vivo+@A1Sz%(nSD?DU8VP-&lYk3Wew-TZ
zo^}W??2N(z$X|b3EiNXd3I<J#iz$M(_M5x4R-2>f2v>UU=GCU-5$2tIZTcUNVYU5W
zW2m`1A7?wh7pL@9lbT1(SLnZ%@wfgbvyN?w)VGs&`tR^P{t)<RV(~7I+m`_$V!S9=
z-@BSel*w#`Wn%_PO6=Lm!h!4;i|p>xPEY2V?`NKDx7SJpKKs1Mw-}c8BN@YJySXHt
z{KQw0m|E16N-B)1_4?`}_U)~1Rz6g~ah=%S!9kzrn<T*2AoP=Wki|2Jr>!EC-kDE(
z$G$MwB^W-b<DW{z71@CfwSTLM724f;m07MTb#0=H-L^2{S(m%yv-&scdsnuH+Ri|+
zdQ{LTN0-OKv1`||e#K{x)gUWpWATH1dZz*Zecx$IY0t{TgdNXHDGe@0F|BD*+8o(o
zS`)@uH;dlg-RCzxq59t{JgRd>^NuHDb#w9^+)vW1epDNc{vK?6ScS-^uxGQ~$~`s|
zr|Bo19yw>GVaBh*$;CZMyji`nj3+vqx-Jwp=^VC8GPMM5BYHM<9J(lazLAQc;Ky|0
zF8ISx^8xqPsGq^eZrPrn@N+2nB2)rTM8@)?*fzcuejJLuVvYePm#m)OMHazPy6q>q
z%O&qsb>zm0w(83DIDo%|dNA}#LS=6t6asrW+8hXF`A6h1C9CH%h*iS>5>4|VNBz0g
zK2ByR%?DrJOI|}_0-$DRiyRvrH8j)YH_p!1pIM-PUgr=W1#6_Patn`=&OGTf+-!EX
z44o@M$>uVOi0Jw|yeK<21rk3TOfBU66dN0x>E%nmP6O}ZHNU{7RDEFhEA|*qBdaw`
zRn4okU63M^z^1yLl~F^#{BJGRYguN+gS^rnzby&!AKE%!4imM0pHc-<-Xet7hE>Z)
zjt(w3cunWtv8-3T>iPPIhevB0+dMpE9=xhdVn6x`aeNuk<{7~o28?`0{%o(u7)SDZ
zlHH^}7C74S7vV@n<HgW6m)HQ8v^sFdzP|KBXE>X*dnRofo7my9))eV<xC8FhCoy&$
zfHsNcZr><fw9_29I^DqwpAG4k47YR9aGuEs6U`aQ3uqe#q|3ZM;-?~e(T5Voe2t=g
zGHeaIeD_DgsM;dJ_uSWN@|5xN(ELGcGoSlgVoLfMl@S<a^wm#OxhLG?o?TAXK*Zgn
zZQhQF5FD;LDSUyj1d6XKr)KPyM4PsfcE|yjH*v$CAR-t1_rY(KZ>tRN^s$Am8N*R$
zd+}@v>&<e{?%KvQhUg6b_!EUz$NPkPXtfpS5QOlSWign{+PMEW=(@YsQxV5iuD7d)
zb0znA(tlWCQCkgGLkz3X+xka*i?Q#T+x`-XE;11lu1oy2yNUUVec-<MX~FOtHEX_H
zLRx%y9yap%=Orcs0xIaQ>-#M0bB_r0XIdpR9R5DVrxEaz&?kh`uK;Fy`7CR{5;=eN
z^oYB-@UL%dEZEmU|GS+^){c2Du7^O$_eAhul6-*Q_}FNa7auo5d0SB;=jx+p+4|oc
z=!emtv}&;i-PpK6zou40`+&~ccfU>j1$#X>*X(ydg-l6lL0$Y<N|EZ8{N8U)dF|J%
z-+vt?SsF<3u0AvX6i3*u8_=ghh5Ux9y-VtXd%=>O&aUpwggA4ls=0B7MykNzaL%y#
zVunV4F!_O*nRbkm&@5)QCz-wu@3iai9%L*vC1MT?kQ&rUGy%BqB<CPlX*q?+?2l$a
zl#8WQz>V(b{``+R{-asPqMhN;by>mnjSrHEY|kvVXx!b4)v!USk6b;gziX(ntgT|R
zeq(y!$UcF%AfK)iE<tv9eZsCgt(9!b_OUHP5+e_LV~sE8035IKSIFo1K&k8I{D;xU
zBcP&RS=SE_Y>Jd}p@z3;{`@?@YkBV7tD4w_!9DU?`?nk-==Enf5C|;eb^NhHYn3i?
zsf5rhKpiA3>K^_NAPzHqf(0%J)0lMnGf(X9AkW4?n=9@VD-oLf4DVkePS<qy*4eph
zFZ@G4EqyJ9>#>sA5+x4BZ1HF3U3Nhd@i%FF1HE9(b)X8M$fmJlYanMu9jE%<z|-@t
zahAykS9_dn2t%IYOSz+KHzQ@jeh7q)SvD#mA=f%OIyy2nwK$**5V=%Qg;Di{5i%qG
zaWd|r53UC<4OGSUzN!O{=Dc}QVg6AW*cN=lD%N4~2?ye|T@jtO@VbTRzO!gFV*Q8I
zx5}Q3M@^%UW_?D{@ow{2fd<N*LZ;3-!iJ<fu^@2fQ2NSG<~+N+i;21>&LVm2S0dxJ
z;hT?hMp*I&MP9R->-@~O|DN0BuK=V$5BF3;d}3vALl4q~(R^c3(T@1}HO;}Fu;!WP
zJN8cTQb_#%n~|A4{+TJoFX#4sRvWX=l748$f5)Z*?(KVt-Yj)fD}7n{Dxw_RDt)pY
z>O@~_%>J931W6>Q`Q4>tU9+W8kxY|r;K4fkMJW%Xvf8pgdUDd~P}nIbSs~hjasa!z
zKQR^`lHx2=*Wt8qUdKk$Ao5X9X3NBK^<Vntp9>hxzk0A>0HCLugP3FzVWKux1xBsC
zUuLYHEwdr2Xo?7}MQCI<2`MvAoucvJQsiUQ!5}z_$Ro;p@YRC>>1G92h*lY@jSWEX
zD4jj(A$>uj#jm>hBvfLbp3X=~pSsV1k9JIZRxh&Vldh4cn29*Zki%`Nc)bxn^pSdy
z7*6k4>>g9dGUck!+xl0S1jbg;PM#M{%kBG*K#}wVcLVP9)A>u2t{qC9@~kIQvHzVX
zzwO-$9I8`W^;g#o-9a~2_(hkWD@Y{pNA=|sE9}xj(a+@1I+nZ8PLIY$Mh*SDL$XL>
zH4s_>{+$rAk79P%YGm;*Do_s~`f&i)0$|I2udk<2D<I+d_NuTT;=hD3v37NAZ$(4f
zHL*t_myY<olF$u!;NiZx(ZC~w1M|)L7@>^h+#0tC8~gk-Ck>JzH)U^EHdd984MPe@
zl=|DUjDS&Y-0<-i1558oAhLO*{unI0=T!ypZbH>QjETqQ<JC*H+u2mKe|6WYN~P?i
zjateQ!uszq9HL(Pq-KpZ@>1A%=3zW#d6P0;ySjm0KHcOcHm*qgMemh~;94(tO_5uG
zNx`zqCh0eARZ~04n8fq4Q(Q@+X(c`0f|_^Rg>8wTZ|jdS90)1pJUkWrgxyi*v*)E%
zXPC{~D5AL9n@gp7_b6vHYa&G{@LsgaRv=9fs>-A&UmO`LM?gMn*jJTSmNI>i1iK8h
z`Wb}s@>HfFY5(##9gRh}R!AZ|X-4}_KhSfhLhYrT>08NAN;OZXK&6+U@FbKH2r`zT
z{l97t=pg+V8;cR&6n#ZK5Fr<aL#jqY5L!sSB9qS8>-~c|Agk1S-MfA>c4O<b3K_CS
z%qkR2aTL=JIhf6XAz{FfR7tg1hw}|Nppn-0W6Ow7bK+^0s5{5M^$z;R@5Of`elD!f
zByT)C?O>#A0~dyzbzpTsCU?;!#+Ods(#u;<anZilN0;V}Z!(|yMirT-X-0k&O114_
zl;<52L}-kEKqu8dEX*rHn_K+B(ljb+7qFn_u-H&kC-Yp`b;QHN1EvVJ4S)1s{qJ-z
zy}NF1ei9xsxRSD9RT*e7@2xax9+qLUxIa>AM5QG^P(if6`w5X6^%PN@<<wvU&XU%}
z*ct(GzWq;o#YlZ!s%~_pEqVWVo1?kJ0CyT-VEUNT%9HHs455BvN9;Ytaaq$`65fS4
zy^NzdsG&M3%33~6n0?o^95TJwd=Ph0Sd-)V<W*;_wcN21gHA1ezavz$o#!KE&8K9b
zco&AB0>!5a=C!-r(ba;0bC_*f=zx)yxv1gPc@iuspq**o(b-VCY<=RHU$9)Q3~Jk?
z=v2#x1PxCv9cxg+NWo!kthbB+iv_dZ9@MZT-sw)Z@(g8kG5GHC-7GN_E+i5rCt=nx
zj=+`-$_$Shxs=j-9_1s#>F~x$FN@+@NNYJV?B4~hWdCzFc{##SSHE%=VABz^P5vl5
zqoz5WQz>Ae^soSG4;@oL2(!}5VSn($yDb995J(PGX1F1fIrN69Gb2Ao1Nc(ewmq)#
zQo+Na;nc+pnya?VgE8|<5n^nr-9*;uLI$9_w_6$%w$F>bwOLe6TxB@G6cW$uZhl&l
zT=$K%->A@VGh(?L0&4en8Wr?vb_8~8FaqSwYF(=rJ&eUtEpw+p`wP5fL-$_^D{&Uq
z+Fd+Wuew$@Hh7BBHPlJd)iwgdVO>Xn*>#O*V_I9!Db?KHUdkQbY#_%jwe51xTU`9%
zm(0hJf6B%a`6BWhJhEu%uhRXff|i*MyX2Ps7W}BiVL5>+!KD&M6cH1s9hkG2bT|2e
z0XyD3BDa&3go)hQt9CW2xw|%BZ-a1cQoq42F^W~o&ClWVJg*02<EUhKIDSfxZ;^n~
zz4#WGJztkMc{;bEyg8635!y%X*gnSnkINZka2hucJ2j*E5MC3tgn1Ju<;tW#HYIer
z`Y>3{yHc_DmZ@^lnf^?TP6^ah^<4{ZtCgVaQO?K3s|s$7)hAw&s2nAxvn9iwExVdW
z^5Igd`+nLW?EhXbP3qo7epP<bpq5kt*tYKTN1oK9B4|=V&Ne3-V<fCz#C=DYmzf~@
z;Vmm^wGmqW9j%G$nu=TUNz_6t?Lh$y^|;3c`BCx~MLZK(i~Rs3X(%xp@IQe%uqo&;
z{b6Up8z+Fbj>f=U0WP4%P(fTw!tT3xlJsO55qKAg2RG34C&LDwO#i8Ew4+`iymB03
z4J-beRv7T6(fln(F=dPoWdLe^?3vkLVPVRf9gM**VYSd0js`+0;*d7~+d2fr)Oq*C
zz<sJid~GQg6fVk^fHhK$*LgR-iaVbW2}0g88&P8&OU*~0a~_?ZezI+|DiKi%Zz<+t
zEj#*#r4_ia+6ajuknd}|=^y)0q#}rqDU*ad7jNyEuBJal{G&qrpcQ;2Xe3r+H}%`H
zOI}@i6<DGGVW*V(Y^-6s{LGJG6<b)$1S@CVe_iTu8G`jMjIMdU11qDlfUv3YfAeZe
z#Rus+U_8$;=&xKiiuBN|`Z}$LoGWI7)*usW&0sjd;}-rOs=hib%I%F-ML<D7hmsZ?
zI;3MLC8UuqX{1BCBm@K;Qo2F9ySqVJ3F(sVE~&eRbI$MH`w!3f@F0BO-usQU*IKV%
zbA4Ge6_wI$5-DXoM2L5f`p+=d(4Vu?0VN8V5$N!Uu%k-~HcI!X^!eWz{D=@I75v57
zlTK$(J6e=In)Zovv;rPgpC#XuoB}&qQ>DG*oV^91qkmqMFj?Jh&6<!44($UtxQWFy
z=-wnlgC<~G*WNe&)@J#hknenGim*~A7?NA8tq}JWHSIOD&<-i3jBy!>cm0m^si&jD
z?;14J>7F?6FKj3AAo|l=qa^||xJYWpWl$f0x{AOw%CZ9`O;TChsUR{R@1H9`8TLiv
z?me~wP7#TfGE0(*ReO;%Jzf&K-tw;P)k=i^)dvaECN@F*;(?(~sdC$&?)oUniQl}e
z$m6N0KK$8uoO^y2>EJ;hmh~>l8?I=)K#jdLcKA;AhecV4+z>W4>rVrHl$-k8hjCGk
zqer|cBk6g8+{Mpy6fe%r1Q9JNZGdi!RT1h}C!1In-6SqDF*SjMd-+%5P?h_>-iAhN
zQ9AGr9hP+pQ%Ss=Pjx8f#4RZAMhu>u?Key>JUE<<pTP0<M|7Pehj}E<F0NjGqrl+B
zu!l@%K|i|Kun!mZZ@w>0K6cp@Sh9t{Gq&1?YIc`wqqy<E1OjHRL=I4j0ln?E)bjok
z4t9Y?nQQw6$pA*t(@-L16<&eq24#tKT1BQvaUkOA3W{U1p`xv{xyagj6#C<vy;moK
znj!ia?;hMr7d!tog%at8sVoITm4bwv0Q-av=@Em@3i4pz@>qt5hjkq7VdH<>{@wKB
zaVvty_XYDx=&&nX9|2Q=3GA&t>6Bi*s&79mZPf5Zs%ZjR*H1R4ceBQtvJ_$V?%a`3
z|J@m&e|q#FUZiZv*N$V|CJTjs$WOH{B^R9dz<*Etn}1KdLlGdkz4*dLitlJK|GPjW
zp2v==jEya52$DvOxZ%NB-2d1>@S4y6ncaPJce-yB99#S?z1Gp<C}GEYBOGcwKbK<<
z)Y>`tuxKMfj_?<|P#{cn2zso22`~TinoKZvw@03$XX1cv!<keUxg(ZXIk;ngzG0{a
z=zuo<u0tf~07t>vO9ZCnle}Glm2NMn<s+~L-j@O)<uDI=o$mrq&zVGVd89bts(3%m
z;!cvanEqWRBKhtemw?PyTLj{y@UR_y*$t~?JbP(wA`Xm>c?4g68NQn?4l@j)3Cl<c
zMAdqIY47{g1hI+N7i>Q<pM50=?KDd&zzT|f2-6`5^99N_j#?dxFwKU2_X&45CRtoS
z^+!QY?E?YvaV0o84^#8ONBf6&FD13)l5+&f!oa_gt?satNKKvW{@o(-(qiAjlzo&P
zbsOt9So{rsb9(`rgLepG=P_1gk1zJv@YEP*e8mK4Ra~lwD~t&rkfoNyzQ3^N0gA*_
zJn)Dw>^Z;<U5GA%eM|AQ-svVicrL`XYr>1H2TlY3@KoZK&otyY*e165*xz=27C<Ni
zQiuv$-sF^6|4(X+Y;^A_!o(?<uH3fR8t;u^kX!39iIA*Oh7<71Cj2^*cFw#sW&4{5
zo(AU)&#N%ApZ_)uNgRP7D>5V0D$nj->X%;&_XlgdLX%qP$ly3K>T4(}qo4NI#KXk<
z{ik;LBUleYBa8|v%**<nw-<4eQ*e?hZOI9h?gE8gW$nQTvZxt%{Ur!5H}VK|4^Qno
zi3|(3kFw+pRZnY}@za2qI9v{K5A?K-FtpnTFh#0q!oVP);CI;nZoW5iFOp7GatiDp
z<fpTn&$b+jM~Hif45QUk^#^s6F)i{)PMUIZezTUp>n(jpR$A9*m7T4nF`I<KmUrx<
zfQU}~5i-wFf+1y2rGJZW?NbMK$&7NNV{XH@?;NN6<?B*d(}&c<#KR)r!tJY2W`*_>
zmoGEM3D}||!Cy>4rm{V;<2Yea^;Oc+k`b_^hSNkOB_+)c8^pi1FMgh898V-^y*u5H
zPH@B%Z-3k`u)mj|&TX#Ma#;5$QoM=6RG;d`qb&%RQ#UE!l<14FbF#<wy#T(c25~pj
z<@n=2;G{kk3e_TTaJIF;+$9Yg%Ro}GwXqxeVQ~VR;ow7e`upY9xQR7w!>*0-Z>eZo
zsko4!+q;9)S7b4%bL6TXZJpra6gqmh34DM65iu32FPgD^rq=Eyo!x4GYY+h&(>JlM
z{&<f3o})H?U_;mrOtq|!*X1dPzntpb?Xr7=w04ogUwA&_V(KbK8V94R;pIYlLd7+#
zMmpk3N!lohh+9aht$Q&tYCp4b>88)@d-Pz}AvWt%SDg5y^SK5gWw<?-XYH%Ul0c4_
zIdxlF%CpWXfY1MD(Erv`Uz3S6q{sBI!5WSC$c30MOH9B0QVqHoRxf6hFDa#>IhDz!
z@aO@)Box~<855KyhC(UjMq%R5B99<FL006>vWM=&TR{kg&@V8LPQTR~IZx6*iYJ0f
zCZOgy{kI_a@=`LVWqi1VO8(gSFgoMi*=Zwo9HFWad2#VJMto0xv_CtCWzi{6Mh#yG
zvN3ONKI(B@_Y!ev-3`GKWr>7STZlsF!;d$4lDoHvTZ~Yxe;`BaD<m^rpGj&VcuJ4>
zEo89-rZl}S#Y$mN^s|si&HfoSR&*zfz7B)ZNoQkG7I4BThL&F!w)?>R#b)u|Cvt0j
zXs>A;b9R>I+$Ei}=TA-M^*8(jFXiEu*Y&Aw4R#S5aEAJIhfjV`hePFR&7HGgL(xfj
zUhiQqeO~}27sL#)v0HtGlM6K}!C>>}D*@1k^uRX(8NdyrbtSwhuSy@Wf^E-lt_K~>
zlXh{$U5(u;j4RRAG}c<{&HK+!8q6Aanh8I?%Im6AOnn)4Q`uE;x)pq(?97mbbQiPu
z$+128t=h^^LLnwyr;lRxiH)K!6Nhl5h|_E$go%nu+jx(YH0x2oX$8w&V&E`I8@Op=
z=$~JTtupM8`nt|QjVd{$uXQz2gYsC@>U-;kyzs{j8|P2*;Zm0CoJ?Ym36|=F`1uA&
zm+a)s$3s>$!!X|YZIp_)QC~@a;^QPbn7o32d!gwTDUw&R<jV#Qr>W4thm$>Zh=6S{
zI#47a5}aE$BYX5#yYRgT?QC%49VTUCQyP!`HLaEA1vKoL7N!T7BV-l=O|`tMm6)?S
z3NetoWStEB-Ppxq#64NXGb({~*A2lV_y-(`?tV4GRf-<2x49j8lxUf=vX&F|uuvsx
zWS}_oei{$Oncg4Eb;)aw(igV1X*=B|jR~A3&_JyoTWxJy;yB-J5V8+lDskiiP8X<q
z1q@wvb}HNA#qHQjwvpdhis(n}*7l`2l;!~;1PF+kEk03_67P_74GkSaBwn-~?RJ9y
z8|WLoz5XjM9>xGu7!I;;;u$|Mb>=$*@$-Ax{(F+lexz-E)OxKxGzkM09xuvD(yL~m
zH)E+rD;~-Rjat5tB*nEsrTWe|g8TD}g@+^tL>^iuY)>AewqaK+72bp@sT%*a3)a16
z)oCwF*@c2?80|yt-z9ft4b|2AgWWoXlfLWvOvT%@FAp|aStes$CJMBX0tbR`-8E9_
z+IF8u`%e2Ca<0<9EFZlN4IPj#4ztl(gzWPA@1#FU2WTWy*h5z0<Oml#^=D=~wkK2%
zQDrD5_uB{@LsZk(a`z?ABF5J3x<Dc4ZL3WY_rIi5)D>O^niC-r3J5K%ZQSWsnke7}
zdLjB$G~w-grzJ4qhvD;b6pTeD3!(Ya&hE0f9vszZ&FXT#9MoGvZz--Vqa+Xyj`Et~
z;%i1dC^m-*#Ph^N0-$g4v->4^OXi9&9J)6SmgB3g?+W0Kl~di*XV|3Aqk?(;llI)A
z?6s`OdR@NRTIb1K>bEX#lLilT6$-OO{W#K!MqFfkWhtVbX){<To#$!TFaYak7vr>B
za_gZ{<o6W^aYOpwG0o(FcclL0)={X*uDnQgzUo^0Vi455^2rT6(OoNu#x}v2us#YK
zQjc1kPG$O4HcTIO11>sr26Nk9t*R^zAS<hpfbdkDFKyQB!BP#uLKQ+h74H)3!Q8V5
z!l@9UfeC>yoF>%gO=MND&r0|&JTa&4>RPR`d=h6z{i4l<Y=oZQ>PRvp(zZSx)wE*}
zh~HU>oSuBFvv}VwYp23wGaD)Y<aXea+al4%h5zs2-&^<b*7r-cIB&Wf&ZU+P1-h5_
z1UwI%82;W=RJeN%nM)Bd<GddbsE)dh`l7A&%V|ExLR#>HcSJ<<W1*)2NxG|#zAOyK
zi^Q`Spse=CVV}kcxVuIe9AQkioF`iMSD22(6B7aH@AW@NGra}F0>^7qpC$}Xo&UT!
zYV5poTk^_HmU1puhd=?c@rpiw%;VZZ7Mb*UQt%Lgubh~0*zubOR-{pWSdc<BvyrLx
ziML^RO=Qt!XaktUwhub32>uim-YswE?(stU0PZIK)wVR3;}6LPL|PP-F{P_Su}%dj
zXCcE-Kby&_FC?pxP~y{F5Q*10WzqdxKAA{YxyoEO77^2hw)e4I304oST-;JO4ypD9
z|4`UkaVPd0sv(`X7OY_eTKN^S5T51+4;`tkpT1Zr-8*(Jr05?nu2z$$e{n9@)yP!c
zzGTsOZ!JJ~U8_kp-E+<-Vd7uB@v?MsB1zr&ss{T@;M;T&n59rC_Skxl>?O108TeqQ
z0abv4b~A}H^<R_@rW{O}32MO~89eZgUJ^7o39sY#swzByed!VH-hv^ZM4^2&s?Jxy
z9YQ7<-zqmZ7nIsMqM)TdHMmO)j{;FA*7)Z2id6N)nflSFOMY&)^3vxYluzPtL^->A
zP^$QT6LI}0%HgqztI6NBvS>#}$)N&qfN2i-!)rbXQO)t|w}peuAkpO*(6R6SCigfF
zN!<2+rES>sKUMys*hE&O#@L2yLN&I|umjL!Q;~)Yym52%F}uxB;7v}B1?tX0lSmrN
z0ie*fzFoIys7!l!FnK~#$~{IbC2duSL<A{xwv_eSRBLWubI~D<&xJ~qcEbM<#y}WD
zLk7C2;gy>L`Ln^tXuPBWJzduZWn(`-Ww}<zcf+U6tpr_e?8#CBM_G9R)Bk+lcqQ-f
z>lRP^{O4X6*WZu1E&S<aHkbQHL-ix{<20cj^=Z$iht0-r#@S7}^-Zl`7Pf^@QZt%q
zHLaP7O@Brx%1KEQe7vUVY-p<Qi*l@`yf?GSJ87&fsF5!r3{{1=E^c+$?NXx$$jQ@>
zKN8yi|91aWxiJ=B^1i@D?d^2+$B*(9QPI(aDR_>cW$91iRfQ^iW=6oHdJkSX^6d3V
z5-B<Kuu7DxFW$q`;B)>27J)S%A{eIy*BQ+3=*31P>xMEy!Q{-xMKM(PO93~L;*Vu~
z<&6Inin|K_3ZTT$sDD092WdY;EpJ2FE<-X@h#I9pv|bgdFPuLaKHep6UF-s^-Hp5w
z_dU`$xTgh;aHH^L+K+(80U5mh#(%2x2rOMOYKS}Mw_h5aaHWtiDWAk&_2iVK4=&yp
zJ4}QA9rt6clyPqai{eGyWtgAZw9SOo#L0;De#A`A&Q(s|fzC^aK)AGHt&rbX{xVL(
zs(T5jD-_>GT>qkX?b;n<I-}pzbT(4Jv?7fxT6OEqvCp{_vppA3(RMlWT_Zlro<6s*
zkQ_VpvU5=WT{~JTN4gS6Y$lk$H47|*sx+F)Ev+w0p73#U5~XC0wk;m!$iXtBwuT(?
zPvnL8afH>!j$<iP@tc}-2%_L%(UhVxUpx#vg20oOl-FHY8-}k%aQ`M2;r-L;<oyrE
z0k9HOgrQI(W47Ljp6A)1^=-A~^zSqgIwmGg0mkj`FF@bReb)oU%I%{3p7`7;khBcB
z1@7E<YJBHA0d!Z+D##vu^$(h3RlRVj&4l%@930!8%qsY#4CcyR{MxqVV<AUP*%Lch
z5<_udH#4ahnZb>L3zBf^*))p5p$4Bs&7z&#&j!?~zhlTkpWk&aU`SGHK|9rqV7%}f
z31b&kf6J?dSO!YL^RxI2Rc^qk^(9mY_Vyk2R_Fl?<qNk$BNC2$vLd<f{rpB<BiMG4
z``^_rc4r=Ji;w#qrQx_*$_nf*z}$fYi`9gD`CkhRaGxDCr|fHGGbxGF$odlNENJx9
zCyH+dMRf3EG=8qb^Ru1bdIZiioJ3-Wn`4}+$(0LDztr>E0)R~S%my<@j~4(OZgUY!
zb|v(})8nB1v<r<NEd~BZnaP*u6Bbt<4lF9kRWt|f?wis?`xi6SHkWykAIhfq&8+A!
z4bQACs;0o@o-Om%*T*AR%K0ZfmlS+$<ELIM>S_*IZyT$;pE8J0NC+_^_HYdd=5XkF
zH=?=nz0Zkd{d4*POr<d}u3c_hhinwCD4+l8N4qis>ma~o4-FqdW`JqrKh99cJ>S?y
zYk)OAbPDO|$Se@wl)4}Jw5GumlPg%d({oV0q^30;xS3?nQn0u+GaRZ=k~rSWT4=r^
zze}U;5GjlEzx{m5@@+atiV*QSrfN)p+nN5TLW@+d7-H2HNTe+TPDq{3CPADXME+Js
z?sFt_<7<U0qItu9W74<R6~tIUgKdmHZ2K$Z8s~evHay(g-!T%Z$$Qc=(DT1Gu|tL7
z1a>|u!tZq*^?#g7o^WSkrFc%u$>_^-^FO!K#w-*tXmwAoIAPz#&K&>w#LZl#X(}5f
zTMV8(-8lVcMhF-H)-@^&uyri`fz=dcX7`)TPDWw6d0KgeOS>g|Fg&SlH^`t_w;-C~
zqY=hPa>^6Gw5?vKQLjA1N6pqLk=ad{%1Rl32XXy1*e>0`%z;lk$J70gT<w1-pEcNy
z5Q+WJyBf^qoD0^T>EK<CCQ)4UjXlK>Q@5$pXPzOy4a-<*!JmzOznlkG&4Z5}{0NiH
z!Z<qJ!8HM{M&)P$n%l>>Jjp5Xp}b<oIg2|?d-$=MzquaAxW|5dFP6RJW2Z9qHj($o
zgjE=E02I>!fA1ch@Dk1=f;)`Hz|Mu)<h^gaY6lGy)C-HZfmWVdb;!INy@at+Mfq>e
zc-uy6asf=4$F4f>H_t7fB*~y+h2Z=AlF3*L<p*EdI-IVnvBrK6@%Wuj**e2i$m9o~
zQz|IHW%yU?F}0v&iZ{t&YyP?P1w759?&@e6pTx|fl=&W@Q4f}9^gVBenC4LBHF5Cj
zU?_HX-!!I5TdKyq#U~C`g(0V5SP{k+ox<CX4#F)v2I(9IFG(XjH0z`zzIZr??4Qm$
zWJ)rj2{A7k_x-gc(&knUChgAu8Ig3V7r6^QtVN1vh)aU(uN?eeW19gGWn0=GL+#t@
zY%GR{Q0W9%CW~UWbl0(|VyW>NQ;pWn)=S{32a<}VB_GrL(z4Cbxs+6!4h7FPXMX}O
zY6P`R!@~2ECCvttRE@VLM0a>;NAAHr-tCq@D2$2IZ-;HwOxc>de7Iudha;CR+4>Gf
zcvi?M!?u}p=N2`toE>?Zc+-gm6P1hd!ksT0;|$LSgNE;AJt>xX)tRp-b?~=LQu>FT
ziEZb*X;E9egBg>1r&C@EanRg5%L!8AzK<=y%}&V}#(PAmMTSPvNCz+TDfaRpXeFQU
zvnXys!eO1;Bx>U1|6?m>?vy^a(K>FtN>6(zsxtT7cB#c)*(E|NbAa}E^^k%ih&Vr(
zn?W;J6(FR%gT^8}1~Y<w3jV^4xMSR7Zla#I8PXW0Vh3q^*#4n?dG<N(WEF)Fr{I2t
z?yhdN6JQ;(OB$DX8akcmGLhjiU|%(nwW|B)x@(7MWRi2?$Ys8&Lc`&T8qLz#Ous1n
zY2E`flMzcvAwe8JzU)<EmUa?~@jpVxX%ZPI4b}lkOHu1C6d;c{Q~pf^S>p~d%llvR
zQqU1T><XHfiIyQ(%>0??4{OVMs|7r<>@IX!(n)i%J&IX+n-v5TwdPoa+k;d?Y<}Y-
z_z6{{)MuW3zjuN`YmmriMe6xR&n9B+LW-GbWumI<dOv2$mB?r)DHI-&rD+}X*M>>0
zLWI%4Et#d&nNj%J9sbz1pUA&93Tv7KG8d>spI+2J10mL&ng)DN=9Mb004O3t3_-6e
zUON_ilM;WBuD)_USiwpeLDT5Ltr#Kcg*ION5O*9bx#zr!53&kY^!bk-6Znn5lm!yq
ztVX6z1p=08L&6k3ZOuZXd_;4Ph8U_vri{$SE(}i->s|$xT4*@2B%2($PBkoGe$Vcr
zoLxaAK^#1kGlo7cLVcqJ#Q6hVX*^P*m|1AUZ5+5Z$^S`bh4OKHc~HiOHL_$eQT)RT
z`k!x&a)In7c(KXmYi+QEO6672F>HnxMpRv*V5~-EMU)KJdG$&mJS%ogV974BWzo*%
z@>{6LpAwgu-vd6CwdSWEezz{&S4k>0X`jFtOCHy(2~Dy@a`3<!kh|2}B#~s!9WA0e
z0DndLY3QX)uF*^rl)c^V+gewk;?d~0Z{ANW{+DsAxiw$Ejl+JAZK-C{K-w2No<AMU
zYVJhvcaYZ`%ZRMQ-wu;w6=~11zmA=OS0gZrnlPSkoNH@nbjczWyV5bV&Tm)pe0E<m
z4EsIAQf;!=#<sckHhmnbW33t7&2#x3cEj_D9{h+-71iW7ogIa;%>3LUyL>P}hVZQY
zIqBN)OO@jUPn<m>ZK-Q+R3=zzwCPUe)ww-?$SSv--q>5iuPS#X$)om*_nbB~OoB;^
z;j8IV8RIc3e|Sgw_NRhauS^^XqUqotELIjkaceL~PVZ6somendd9_eTe?@NLaF$@o
zb*wHsW-*vDD$jjFwyP@8kKuUEsu~HI0wMMhdS1$vkJ(7ImS^?^?SYE1IFqben21X&
zd98L*QfRu%l%@c#gH=OmMUG7@mkPDb4_=SS?~n3IYsU&%8s;}~MYq2Z)M*hF?Pqxr
zIJ0xUS3Z=xa<fxu;=~G1ao0btjq_-f#uim}uu_ieSX@%8ZBN}k&P$FmW-zOP%?+*D
z5>SRox<iM*GPvn|a}-<&&Xb!;ogF$FtZ|>;w;2o^1t-|UhTrot11Hze@q{u_AplpZ
z95Z2m`J7mJHcccv<r-l`HMgj#zUQeDf<n+M`{@4v7MNLS+@<7?8vopTt1fWosx)^n
zR~6}m7r%e%ZPw8Ez4z&!J9_?fMe_VB)<rC-erHcD3`|4bI%%k3WIeOxN5-3Zh4QH^
z7>eMfT`LRIA^+Rk?p{Y`f#TYR>i&WcQb~>GnBnI9iVGb;t1*_<wZj#I9y+2kb*jO7
zTRjofT)=E#r|%O#EkJlDwjf8FXNJpKK4)@tRfI}R;i*jY7alCcNYU?4vCCv!S*s94
z6PNobQHEpkf}(_2&2=UqY<l2)Ym=^_x(v-zd+eg2IuGq5!}2$mcxnAlSGG33W@J?n
zr8{Yi2|KT4BLl(l_kJp{k8fP?Wl@t)1GR2h-~WMM_|kOwk-W)o0eaQsqE`Nww05k7
z$N>Y3Z{B8V4eYc_5*ZA;ytfjQti{MiBihdfqciQCQJR=(NJ6`eQbXEXdH6sz`wCO`
zV;Naft)Vpx0J}l~sx=+Eg-UBb@KLhzUHpJJB6X!^NQX4M=v2{jPMAeq00M_lEAAle
zy<?e~pW^B6cBfPT?N*d{zoqcV!ScBUM*-=0>lS5i244iy(y2;rZM2oLkTj(CV)&aq
zA2SS_j9Me@(p%~gK~7PW2u$6Vw43hNzbTdO*IEWhsR7~QE3zkbj{gFL)O4j8fFt{~
zZr`77WXU{g-^JaEV=h)Tm}{+?vDpYORwL+uXTW#*dTa(vdz}f2xNuyua*XfQ;CgFO
zy1;dme*g<D<?r5DtAV)&Sr}BE1i4pg9llI0_r<(2w+x<A`J^q?<*eEDJmw?Q%<ii-
zrKQk5Y3^9V(B3|^y9k|TUE+^{(c<l@o0_4eZh^EK%YP0S)(x=AC-d<detSbtwBQ--
z?grWDG6H=%NY4gynQu!(Nd%`CrxgK=bgIWoFwGR-cJ}+qRoBwpeh4AReA*V+?sBru
zmNX_#P~-5NUI~iN8wooL>g_P5oqB2u&vcv-e49|6a~o}Ya+YZO#SUqfmrn6<+;7`z
zRiRlvZj#V*@eHvpqx{RD%LO9GVa2(AZVQFx62Wkt&`)CK?QNagxk{II&|>WYjt=)T
zeoRc-Y*k|5^M`5dl=m|$V|2#A$juOkzEoo}G?l=NyKb<`i?nJD81c}PcXfM~r#(Wo
z-BL<Wq&aZDfK^oKgfECbZq*|=pZr4+sj*V``Vj{3Pyl$~_q79n2O8k6+m%6#`$)hw
z7c^ePHfOx@Kioqe*n2%vch(^7DP6jaj#bKT4i|d!1o`3FlHgW<o(_}TzH3r@-9}n}
z&1@hE>Czs4f;Bg9iMOwy2vO5yTF-02>Bfmgo10IC1h|#I#%)XxScuTmrV9nF7RX2H
z>e8e4!?vK8$vpo(s^I2nM2qKNBeF>d<is<1At^iiJGlULaceunHyoBFk|VLq_5-%4
z-cPkBl1PK*6m$J#4U~gQM^uI{Dt;G5;ziOCH5@&)ktOeqB?2?B63P!Fuk=o^I=dZ^
zh9e)Qm6$TQCANLp;skbyp`-C4`ZdX*1Ix*?%Ux^ad#U;uPf|?#^2t=z0GG(GrOU)s
z=&*Y_8_}9NEK)V}^2vi<9U63+3fMGCS4m^-laFLX3BHEe;PS%8impoe{gfCaalf(S
z$V$jf8Asa(Jr$S-{Bv1tkLlm%!-HymumzxgcWvCcM6#<ZTPs|T>KejYWv?y##j_Up
zrvfko8+Y!J*V5>;>#3K<2~zQEc|DsYEUA2DBEo8dper-*6ZJWS{%IwIJ$J3x3kK&I
zixF7OiL8~xbomdIe$G$(<((_wO+wu4G-#XfGa>NqJ~Rf>Tdqc-owdMTmg#MkoeviE
zCQs%K0yn*o9KXA7LRk?CrbSf$BUdZikWD`0?nbD!UiX>SOEzWXC+Vtg8^9dz$;=PQ
zq*w;x{(RNqZm&dFaKm)n!cJ*eMn{rIVX|<FHp9t>&4p!JM^fak&~Z-a;UzpmKo{nm
za&XaQ%^&&p(r$AsCSk*0`h0N4O*u?c-{#MOO?(imfPZ(YR7UGGy^?=(IBPrG{`g6z
z**Ujj<NE<5hmr5>Gx{c2e)<8HnZ@PhmM!d6&3e2ROF+YtKDVnfHf?E1CSeVl)>4~E
zvm8-i?Db!INwu@)u53+FS27k9u6?$Br7w#+r=b?iZ_4Q)L;UD`cERVwh*H&K#W(?<
zcLueJYdZN7k7f`Twm+C=Hs;r5iSp87Pv=!m+mxb%^;>n8@VoBo&0(Xm_|cWUvy?_C
z6A(bx5YNXdco)B;ZFMq=)cy6#BvQQPPr8bm@!MQ8)T-_wyeNa{NpP!0?N-cKG`>n6
z$a#Wr%4@^AVN^Vt%SmmB2hOQ5Jhb3TgR-af*=YP!%L^gTroNd);<!%G4$@@+jL4^R
z)o&W($xK!czCaNcy;xa3v1HQ>O!HIF&{+F;a9KbU`;csJD@i*??yx*OgD%L=cmY^G
zrwuNuB%Sujs{dTDH&`K%N`HRjE^7x2IKPJS<0SYhiehZ4VXkrJNK$M4JzqUtB*;^M
zPp>T{nfknP5hcwe_FrCN{d>5{@jNm_)o7L0OKH!#y4D?vFZh?|qBz*lOn~eEd)aan
z7*`c2&57^t(6VBo7lJ8@@Og%Uwvb4_&k|5s_k(feF|*mO9psl5=2aJ;-<dz43j^*o
z2d8Oy-*^Uf`U^V}(CJDyLGu+RPL49vZQ!W;hJ?8oGxn9K6CUTia%s}55Ar-s0<{l|
zrI}jIN2E&jb20}Y@IV{V&({9k_3Jr^XzjIgFygxsYkHXD$XcbvZfr$TQbhX0Ms&Pk
z2!Ueo_2k(u6h?JQ+LojzRfi9*WW9-RVHvCcW^SuHD9`3mSs^YFg4%6z0U(Ed0W%d`
zfn{qee$tS!JhvLmIRQvQuyCzL6oj((yCtrfTHPlx<HaTxb!T1n@rY2D?tx8*?fP0`
zrzhFVzfQe`TQ(r@tyT9f_Y-`yXn%vUZ`!7+<IERhvIr}}LiLLpL+iTDQ7)!;>LWB^
zRm$wUsQ%<jE+?yH`jHwHLq}gAL^oAUN;_nszIvaoFGpCn2XoqmODD~ez#0*um|a$I
z<!fVPpA}ACNXl(2-l|`So*Iqip4cRGRegKN#W(JJa~vNYc+RkM0{J4B3V`gK*P-bv
z>n;qSe=_0uo0tPc!f$}8j+*Yj28!fWcX&7qG*IGcQozk1S4p0g_Q%EKwxn`n8C%Og
z_W*Ul)97z$R43-VqQ$e(x6gMF>nGb=z_qHXUx`?}RKGDKx2f+ACW;giQz^(8a^cHj
zfxQQZ%a8_kuy|GS6l3f)B^<K>F5USyX)mnFPFuaZ`<7M@%1I_j1+~>e2&h8Ms12q?
z?T*i8REXqoSBpP=x{FVbDO>$S(39g|d;O}wRvo^P`_0Eph0ZfJW&EP}zS@CMs^S(#
zz8j4u_vzo{ewZ@uQD-Ybo~!@X&pc<={oWux;$BNR9rhXv!z7|yTt{fkbQF8()Qs8o
zJ|qym_!X@JxUS`@6S1x1GvnO}6OZI7c%WgckihnpxIeeMG5snKPm3Z`m3y?Ty(%R}
zd{Yg$#-4&~+V@vMd9uSUq`R#)M4@+w&ezC4kChgXpGE#OIc8yS7vr35D22)FU^g>l
zD^G+e8Ht(IYVrGzbFN8RNDA4I1=~tPuJ(!R+?}aVEQ{s#$lpAo{J%j=j^bqAr0bor
zYR;8~?EcY`Ixe^-Fl?a@n|m+sOEzFu*QmRk-M@`?JZ*wmBl7p8P4b`M1zJuofLpip
zVpkTP(uxuOgF*bTe-OC&na2ZGOKBMh0$5GSlUFiyZ&M^X&wp3wGjI<#h~yR60d*kq
ztAYM52c&T8>xB<brj<#5_AGjPg^P<ZY@SbIT7;4@(zHK`cn=Lvk%N|^?SCWrSyxN}
zoYuUbHkBNCbQDPf`{UAIun|fUtQFLcI>~XN1Y**8;Z)gEsZAvZf$~Z1J~L*hjz*)o
z7v9`Bnsz%kzO4k#%v3~3RVoV~QZdFHtkia_DBlE_Cvv~HP{frf?(ZM>^EwiEH&D$^
zCB-OQ+vcz@u=MxZckBF*u4N6^pw9;@>-70(w6VA$9(Yin;`t0O6}s3Vp`7wsmw!TU
z0z*D@0MxE9CZZ9ngh=k;P@ndTQhvt|ql*J8oo0{Nv^JSZOpzM%c2%VUl{25M-Ih&M
zS}Kp$Sr<)Yoi4HLF*|k{gg+GA<RcFE!p~aaR7rm<L<3^^Ka7ARA4u-r+wySCC%o4_
zNo0c=&N&^Y_oOle8H?Mnj5uetnGX$&RFDOxo~ps^>E=VY@Rag6*{#@~r&e5E%%By3
z?G2%gTtK#LklE_b64Cds%D9f3zo%?^<l}32K9!;0z@7ViK2{~@Vn7@^$8jsd0W221
zr3A!VC~x`whfZWVKJOSlBM+k)a=x+vi3bZWQm?M3aH?m*5u(fKFH(RMp7@KUAPGU6
z_^2j&h`@F5G1eL`hUFxTZTo)O&+tJ>oI?8L><;;!M&z!d47cCTv%#=+NV|Akhn4Dy
z##4W@K}onUWEE|fn^>k`z(4#*S30XMbb6u6O^3@WWy|A7z1B^_8Nv9x=CNTdhCs>@
zj3DL!W8AaZ>2{ZJ!&80tW$4P_v&4Lw@&oQ;gIZ%Hqlh(T5=*2?9pMq8X&q0@l%X9v
z!J4_%DQ(D12}OvIO^0l*5JU+3KUUH@ailnzCG(;`Tc5HAJN@~^O^_`mX%!`^EXCLq
z|M^mxBtSSvK!OqcU=+R7{!aRSlsNT~<@wlE0LU<8{S4jj)*=lqYycT6Oz0~LR!JIW
ztTK9km_7H=rq{-pm7C`q0_{Y#FU7J9UE|q!2HI?p9&k5(Ac3tNALTQ?y7Fh(L!zca
zhXQ5CM4e(X@wE%1zx8A78uw4=*Vla7y=<g+`KR$BGgf5>QDgDKqvI-D@?b3x<fWtl
zK<3&vb}}N_4ejXwCWMh9z~K>x5J$w~-6{$&+vLKKRQ%I^&gXg2_U)Kz>*sj8rS<!+
zHRivzU6<34B1KPue21V=qVzo-^S(_>eLg(2q}32%{$eD{mP-xS5E~bX^)JQpXOAa;
z<dhHz<~<~bE{wOH7@jyUI`g;^(+UrzFGlT(_5NIQt_74s1mdY3@*m=<#uJSL$Yw&=
zXhCO!EVLW1UD{=Db=T@g`o`o;-Xk%D-F!5qY+`HNIQ0(O8)8tkylFo10x$Q_^1QPF
zyj)q*rFTX#261=cU!(|KO^zOtTmFl3_-r+1F&{f%zwHY}18e4^qmWVdOTV>Olsrnk
zejm__2*FGe0W)<9+*m#}w;8VqEys@Svi#{l68C!gcRcbYr_CwxB6;%NLyo$ifWruX
zxw%(uWs9l*sd=aP9Zgd3iip!*4B6@gQ@#rg%txlEok-PfbazIf+AdZR90qw0G@bvj
zv0$jkU7muuUFHCqN!l<x-wj$=n;z-iUz%K*2-hT&gCEyt;yOEMAT|)9Lh<~qimF6G
zGE}{oZPzEf%Iy*a;8?%R?!o~OPVZEjv?97<Clda@ZDimbvKA8EtktBF;ciYIaS-Z8
zYMjLtTG7}~H7@Xsa{lxxW%#o7{jDJ$7K?lmAFgSZ4^sPWJ6Q8Z-B}-E;%lZJg*weG
z5<1+SU8mI;eY48<l>j<`uC<>ncAvcVO>qo{BH*A8Ej&it)lVqH1^8ltZM$ZH^>f};
z>OeF(W$N*JLhFEa_Fp`D09v#B{T<Uxx?&kDk0y>vCAj~91X#3>uV}luvZL82wVB(h
zJRCG=Z?0{k;(0mch=<A-yX|`S2XbXVr?LOMS+E>ODg?0Z;5Zc4KlUw8S{Ue=NAhMt
zy*fzEQP~^3*H156T=RgBO!cck1o|{I3=BgAUj+oVI(|L{`BOboW9HRMK5bH`lpfJM
zklc$0=vyP{su9UuV$grDokwLs<csP{@GHLj&@%|f)k#S9Pe8F-XOW?j0PVG^7*QEB
z$-8&Gt=SSPOJWf(zTo`F$^6Mf6LxcA6BUjb$+dlq<=DjH`zQ5D0x)Er)6fh7^|)zS
zqwW{W0nXdCI=azGB>QjoLRKdC(<cqj|3+p_KY8mMG@m3NAS#B?DWg5h(`+fz(Dh3h
zw2-(I;t`TKoN7=2kM()&58456>5j#I0T(Hwn~D82;T4-C;~!VA_RGKgz0Gj$Y4?2c
zCS=1rB2bC9gujUqk~@$puAzt?DGElPftD%^$x|Ar(Fm|QjTTYBd;+j$_6{`Pz~CjX
zXZ7^IT6DS|3q1nZ?tiNW*&y4>+wYBpP^vYtaGbli*gkGzOUFr}L{Xu*cD3Qrj-Rpr
z)cR;T-ty+G(kn)MK1G?3wY$gQ>hu`Gz-MM!`HpA!?oOLrC>lG~969R~ZxJQQ&^Aoh
zHj1ctkg?Nl34MS2TnMC-r{!2<Et9><Ls?4nOgjl*rRLtXeBK$5f`+1+Sl=^L!IETb
zMX&zoWOliP<<T<0qvV56jhhP&qMNxD{2ycsitnf3RE5iJfl8qa9Du+orp+yO#m+|6
zSURIvJ-7DwN(+wUMu7DrnbjDnz;7y6TprNJLO*`dgoQ+<b}uR%^Fg#XJZf;<L!#g!
z0p9_o%)oHnu_mL(oOF91Pz+57qH)GS;1q&LW;7QUcJxIA9`r8jySal|gu@^yayC9p
zq56%iMA2BA^TeHs1LWDZDx-v3OBuu0l*2&d?e@_~;s-Hx=)st2ry61;k9fw@&!U*r
z+ZroKl#si3QvlOdh<e`>Zrrt&zIOhg;pba;#mjU&9pY$jb5u%$j@?5eN`;yhEN)V+
z(3G8))AQ9C$e4fyVh_jr?e#=ezLxj`ySsLAK^PF*Sh83Vg!>VpWG<rnPy*_@x$W#{
zB~YhgPY;_1lZkpi4gcT8-r9E&;P5KxW~opL!FnZw=>f7&&_@~i)~<V!(EM2+9Y%(B
zRcb`_aQ9S{paK`SLefr<hup1s*QkC!KB92I(N*2rb=A#6j<vdPBo2#GuWZSX<Z5E6
zf5_jxvb14?yv|>GuN*TDcrl;Ia#dx&FXb8YK9+o6jw`U}O%>J;zAaaYG`+NCC#iH<
zk`!b~ZA#cgZLI#ez3NB7-7uRl2_Xq24*)1}VM(+HQ-p)liNE~U%M>g$tZO^>i<Vz0
zcH6`MH&J`4D|&%M+7^f%xL+yJI)siL5a~Se?dfay2fHPF^xmJJg#L@PDXOXuH7Ocl
zjn6^Y<eW5OZZmK*lzg^YsTU9_-hPL2+{45wNhOUn`qd_DF44_aju)%8(KT)ywUAqS
zvCdL;Z|EIOOFz(ir)^^lVR84CuTkUVfvwuWS}#(GHI1l(ZWk}X#1Z9Z++4tF<jq&<
z^KmOxBa$Y5E*<5Uv&_sGTo}=SoZPbPTAX;(-K7wzzVfl@slflcRIVQ#cwA*@l>RLG
z!dr)qY<!(vB%g6YM^Th0t}Q%hlLP5Z{tY^wPRcG||1Hj-xET<xIba1Zeeg6(>G3sd
zazWG{-m-;6YAUGGCnGM5rk;aR8Tx!2oLKx_tLBi6?*t(<^_%jLjTe*(UI++*zB~{(
z$+NkAEF+}tNp<Ld3qka;wu>CQgF!Gp0Rf_MOknll0rN)ewZ=u`$N6ALM{=NMMEm)#
zmygIXJh8K&!@m@cxs|;CrSmHV35ZFFQi#d{KL0NTdtRlPWezMyFi^@N14k+VWSLY6
zP@dmb=MfKe;nEzm+!X7s#T_7nX<b4ESS2EV4;moH#Kk8zD7=U?Nv4XTMzO-au#%e?
z{*pc9D6Zy#TV=3fhR9vVk&DbniZ!!a^opOx_CYygOC+Ige8$KkA15~5jI)ahOI`PB
z>U)c(zq$#(yhZ*ry7ikm<zpGiN|WYb{nZtMi@0<x8H2#89j{d|<$qUE-AWhU&l<ls
zz2$Yf5%m*cQYFGktY<cvONh8SAIJC!^WbR!{#9Z2&;pAF$Jc~_@f7Uv7;i}|<mu}E
z<wvOh|GTDto1+YY7~P8#-&u42Xq4O1>NIo+8N^y^D;C$FzK{Q9k?UU8Q4~1}l3vr6
z@hlv_ej5RfrhAQ3+@g{hcZ_X~?^#(W-JxV+9v%W_=Ji%(6Hic?%TZ#tcM78InMMj<
zYx)ws8ekBrp3vkYNB~ryLze6Bx$1Bwd5|lU4A=P?(T8LP+P3=8nD?AH%yzV1J*x*X
zj{sHXpMFcAJm9~RDd6TgSb1-3(Or@qILp2e5x5$u=5NFU%&ayJBn9j17Nr?xu*t-y
zQu2Y5(dn~|SeJ~t$t^Q-K5n;jW-z~Q0Mq;H02p5v;_dwaFrjd7UXQLEEG!L!zCZjM
z92|~y;sWoB>j2ihb>2jL{__pegyN3&y7J$jB{TMhnBG=TG*AHupkhP#@Sq+SR20Bb
z^I%NkirmeF*!ZmUB5yM<v+axcoyey0wYoY19+T!*^>QOU;5zxEr{|59mex{n?1TH`
zksnZvM(;(KRhU5~)>sG7f{Lxvhx#e_o<#(98yxN*pSww$1DE~>hwuF|7xFydHD#W_
zgOmB$IEG}`EoV&I?>3RvD}xqg6gI}BkUEh~f|%kdfd5pgi~e(!7Qs%|B&Z%`|GVhg
zn?(VEApE+2tIfbC?~_esv{dJnTQm4>tpse9ipc!S>_1ZN!_4-^Je$N}_8d4#4F_FB
zG8s}(qqZ-PH&IhhPEJaucS?AZ)Ko2S0mCv5k?scHz>iN4751>QkAAva>>r6plLD)P
z(8~MK;`4D@Ux4prg2k)ndhg2zJnI|SzYDeqe$xt_!=CgfAnd*nu}CJ=DE_~1>fYU0
zDrVPXlOPgamB*Rxm#5?}Um|fP4AeOLFHCP|$Pm#<K^1fXGJ|hyLRJ*oxx7d#nSnIW
zycp3(xSzj*td^kL6&^vQDacI_b9G6)8!X|I+hl57(}@C&sk7l8_iZE?{JtukijFbx
zMC=`${ra<n1bY>T`<-#xaHZ*r9bnsCj1yErzJn+=k9D2yqszwra(_S{&K_pph<H!r
zs#xNkjKU*7oy>Xit~80z7ZGE@hec{c^l!inyzdzq4{>pEnG*(b3X8j^(g+)@GoJG+
z`MU#&ODe@Nj|SirBiP1K-=|a4sES=m+JTVhCBhW-n=hac8D=`OQ@z_d3&8LoC5Z6P
zUOFtL`V8sOw_6&E69trgtB8L~^WqqAM0bYrR39)Yg&c*&^4XICI}FC-f9vvGWH1Gh
z#q-7uNG;yNGh$<(pGajH_C=Em2#~6)t8e1VBzb)-7shB&Vq@-kA{}iHQ)FzZvE^!l
zH9idmn&5N;+g}En+JPUPW2Q&W1A8}N_{nkMzEU?%n2lM6`B-K;6OXI^R$v=APO+Hz
zlcZOnzIxeMEfvD6dp5H74g{^!(R02rObe{4z8Y4pERBS!q>Pn){<;}7HKemMmOI(s
zdfV=??i>qt-Mb$u?Fw4FFO)Gp0(~fSz!z5>sD%A)-BtY3;!m|+K1%KDd(}Kcqw%{~
zr}*uxxU6hft=*b6AoZ3YOvuKaEv}sO_0#^6o5;&Q%abuG7%YCfC+xd!^ZgM&ZFn2a
zEEZns5GYUX1T`5CXEFWecqW&0SzJl*faDxpx-_e6q-C_fG_XA|k={T0xvqKqJjH*^
znBjhu_<W-LS5&dJe_92jgyz}`=ywRMKt3t|(xK2QHyL3>Aa(buUhmE7W#miXGK%(9
zgjH5$a>o7dHF01~rQtQ>crxP4%=O<R0v$;yDI!V;GUVflXDAVuEPoZSs>8v@Z(rF|
z^QTRz%qEQm+e7ykrNZ8Zuk#1#kiT+UoJ?4X8sEfW4vy9FL>pxw1T=U;{I(f<X7>~0
zQC=9ukRWkRvU~_65w1evLgJcyRz8BM*p6JE`;$`P?7(GCFo!2kizZC1)X;)gqA$+m
zcOFW4LhcnBa4`iNe9`*TzKu6>XmFnrg@iJt%~xJft+FiV-NcLkosHL58ta)q75AF=
zbf+9XT<Np<du&R~=PVc8Q0la&jeBFwN_=!Vf7^60G3T;IvOV8SMlGB8+SL^nASGE!
zQBT~6g@?#AB8XqL_Pqs2$yor!-3L`{Wg+!f>(KSf@`L3G%>uL%5m!Uk`@2MOvmgGg
z?Ei-U0io7i{REh2a(xInx(VZPW}w24I2D_B`~KE{)D+$!nK(MCln8T>ympm{VY|4v
z*ldc7#Njw)E>&aLjCs?LLb>t<Tho?c>4+zic#rqfX+gaISG7Ww6F2RJLmQ!k_MH?y
z7lqkPimzL1N3{)2?wD`7byN>-8X6kj#&rZx2&9B^u$%B7FgUCsuY&<*M4e%zjjZr$
z8yg$5SYGYeGLa_m&ygLAT;BONGGWjS%`COgr7Kp)@hV^a#}b+>f7i5Zx72S1jwOnZ
zV@h_RCP>L!Sx&`S**##xnqaX=AZZtVQSes7rZ?Abf=vj{?$G>rwrds9UX*BcxzdLr
zYET}xP=#~Sa?!yCkk1~H!xm%Wd}>cXt`u{?0n<$k)=Gho&2Gtq4Zl{?^PWEsaDI#Y
zd}Z>53Id-u#v<na4A|Ma(^ZxewRY5}+mq>EAkAxplrmy=I~?N+@%cqvW2#!2ZJtL0
zS{f`fSqCmVkN>|Rhp#U24iC{w7}9YXv6j=jZ`!CxR#SoHS{UN)5%izT9<?>k&qDfD
z{w&_ew+;aT=wj&vaRHweHh>a_E8J%IDe`+xy`NQaOkd##2I^vb7nw>>_Xh_i=MMR+
zH5TC{C5`ZbA5etB7{h4H&-*eZBB=DXeisJg@;96>yMtljpL;$i^eI5(d!>{4)O$#T
z)Y}bfwzFgsBERT`kn-n6Cvcdnq+9>l0V66|40~}Xy&qAI#&ejDGTTYTFj?ZfbrTrp
zv7BP(U?9mYDpJA!(U5}Q>BdxDsn?F;FuysLFRz@*f$W*dZqOA(^`Pf@BMfdw#i&;D
z`Y}^cbs;xj3w5Q&+VR7W)Rh@_aTfRWqeSRhgwxBSNIWSx@gv@sbX}z%{mv88oZ@=M
zg(=ZhlC+YO<B-<6aquZsNegRR(n)Vt-S}tO?@#rwM&P#e^#=)n$7Obc{^%qyNPg1U
zL*u@F-%PB&<&<N1bb7NG*SP5eZpdAt9=J(_HI&zhV<<Zq-YS8i5xC=$(C{2gK~$h+
z_kM*b(=EsuNs-$>^eXC0Nf%8RHx@H8W^=nDRKA0l*RkM0EG}uFQdP%?zPKjM=2MrZ
z&BY40$5l-p-XG43q$yy{wtP3z@$7#i9XI{cCwXes;#Gp?E{}d1c;0ul#f%3+03Y9V
zy9_m;XkBRl-dxo_I0-U3XS!M4trW*F%^*rqm1g&sfVDJ{auz5mDp@4Q2gDucwRX;c
zb>Gt!03cv6fOIirF;1omKd7W|a#c_V#~FS+F+uzfOz(s-)P|H^{)`%u3uw~9weoY)
ziQEUk{!-_1UjU6tW&InNBS86?#^Rj*g%G^Lc15ys8~A!o(Ky;aX180FRvr_f38P7M
z7JPN@am@8{#5*O?pMN?7l`Eh9N*P+=Ib{K3=#g2gI|Iet-xG0JDV@n10sa6QLoazc
z_aSxI`5uqmYR*noHX&TAa(e5t1eLD$<5-#vd#dr*65(sW@4HogGOywAKm|IS+5pq!
zMU)n2#Jhx10c1?Q-Nn(k3taT*HVpH(4XR9B3)aYjGoh>BMdHhv3Eu?`oJ5}*<vYS@
z9r6PhLA$JhIiKEdMz4G3N#_el1`pqe=a(!ArbPV-6dqCPKHxx7v@QfEx_AHDQ?wZe
zj3^^Sv7i?#?f1ed1)iHA>(RkG(4c5gNn#JO)iWm#{8uzI>(*+PA8_8{NV*<h^1vR8
z;VsgTUmehjVQ#Ef-JTSCaul6md7cX!7~)bY8>w(cXW*u)x-q$S;D4v47er)7oU|dm
zf3suF^I1$BPL}~663okqEjgBG90c@$Et!$RMAt^rPW!RUdi?9cT9sa$v#vB}bP8Ic
z2w+<M`XosTrpQhH7ri5VeL?E{#JaU_ZGmY;f=Afxa#_MK!%IiBbf(NPolTtkoJ0W#
z=sjzd6cy9yf@n<6%~M{Ah2)?MxPRr=K0gqU?eEcBf0WX$!!BR3KK6!KfQgn?g0T->
z*_|8KOUopto}tPr&y8@;ji_Oi4ewc_hC<m@?r#jO9TL9{wN~RR3hmnzUSpYI+FSC?
z7f2*Agmix~;s}=~zUX~97%all8K{6+I-X1iZL|7)jS(*raI}#TZO<2B_Boc7D>*4X
z^is?y7t$wYV5>pgY-=8mJB}&cwI(PoXGgBZ^Wt$#Ze9jXfq=Q6o>^gu7X*G7WLS|`
z;PfHdEQTf1O8G9?ZV`NZu=@L6bjx+{6NE73&5I}p*`O&cFK}hL09*{`Y7rO$`^x4G
zZB2s?E5O8CCK{u1DtqP+#SzCDhq!s<@RF^W?C6rS+5d=_ulb!5wBYq&lo)Yci0#+;
z`HR_v_MY-rpU)Iu7#bVr-yomj?xTJunLYI<^O&g7QlYe=;RO&e6bHeagrQOnhvMNO
zfNi_W{e?9tVK(c%bp{50L(CizS1U;-0NMQdZvoqpK~Gc9wzUry*@}P=l<F&BPTZ#t
zcwM`=@KK<HlWz-@R>3^b4-)<%f3to>@a*P&vE=aHnG@N8Q%bYp^{jEj{JeW1KlpOx
zWNJ#gI+Wts`pvP9FCaKr8Go7~c<oij6n&_DO*gegya?eMu0;5tp*{w4R)4T@*6LDI
zn7UcepqRb}X)|l(OqSn~i?IXwO-<3G+X*#qPY(@ma^60hvJ&zF%HfQ2Gd{wEB@!}D
zsmi`}1uiP}cu;Ge?7R26grUJsqp^5E_2K>9z{$1bDu^I7bf_)rT0QtX7=tlc%K)GV
zSb<Q+YY%2lq(0dMJ@eIg^{>Q15IC;*mDSMVvYM9&y!|5dLMvt7fj7MGRlRg!N;Q}@
z4y*%3jEu6v#jZ+e#i;cl5Xh*zTaX}1X2a%s6$vIP%9H0moh>{;Lonv{Zo3(T^T(b4
zbxS_TzURZ=o`8ugC{`qdS8g`euqIYkwgt#WoCHsei=69!CH~nOev29Ucah$l_UrU=
z>!XFA+=K5?jKPTOxUaMCCoNKJGl0+*n3XidF3ku<(k7ycr})zhFTDD05AO&f<<|hl
z_2j2Cp=tveSSjQ3&VQ52??;GIATvb1j0BUKd%F3}q(?3I*r`ylL4kQCS8P`!Kg7*n
z;$q-*k%CRD`IB<Eoh30c1iQ^J*Aa~0IM{cGO+LwZ`{QaDv77gOJ+ZJQEuGz6o>>tl
z=J{2o$+0?eOF_ebJQ6)vxvtRLPEH6f^tdL-8N?*7IG_%r(ctcV<O%Jed*K00UFCL~
z&Vg4*09569=>uAF@;4YU*+bQ!+f<<{g}?=uKX8QI2#=k%k@;W}bC=jmdtUVESg-#i
zcW@()5{VG^UB^xFAw9TQ@8L1Ii(%h~7D31VEE1g((rGj@&L6vB^ZjWfCN4nMh44Vv
zKJZFz*z0gLn!I&L#%I`i?duZ;0Rk{BYys$0%59cfDi96*#BYnEz5YI|9FeIw?LaUs
z62KfDdU7x@ec9{RClLw<af$<cfyAS)cI5I|`{M#(k3fqi=aBw3SV38QBuhrIdq7A0
zAV%JcqCHh2qjaprSt6V5*Aq&K<oIy^;-DW&*p2+$R7BW+(u<G3K}_}CaDja6RF*Y1
zcgj!+{$AOFU|M$A^;{rH4I{D4H0sMD!lmKqmAsLIUfT`babjX7ECx8D0as1sZF>OL
zJ$t4?2E4J5xv*r~=LKk6OCMOOeI$o5gY*Uk;~2Eb1BgBL&PWQ=`88cSqk@6!9bu^O
zvdwG(O4@6EN=Sa_@bGY?X4-2o!ZL-`zkM%AgpeKBxkDu;08R|dJTWs*XI(C8^yCPw
zh$H<HP*4TOF{C>S+eb<lGHAa;a;LvoX!5?O{IAC2wL_v0b2R?_XE2O_+%9n(OS(PA
zFB2FlWrRpTwPS5OC?xTs<DHJ%SP_$ghs_R`dnPJOBj~o)kS)bLgU5({wc$ALF@hrO
zVc2G$<uk49Qxg5_{fzT^=61=Ff@^3J9|m{x>ghzq|9mII%*}_*Pqn7^0shZDQK3JC
zwuq2>6lh=XATg?fu9ZZukA-w?GQtWr>hmA=o;rd1h?#Ww;s^Vb*vv1bx!N~YVnkYu
zVN8w33YEKHa+$(o3Ke2t>Z%DR9`xzBh^!?+qw?5WrFoGU6Fa@a*Es{mux5-39Z$vh
zkX|1CifH%um9N`-^*Tiu5C&=S#WSvvWweiUv%7DEj$t%_FsQXjLfX)n_Z;{YwO1mI
zj9Ql1oqSfJBo+8SY<+c9lxx?%h;)a7q`=V9N|!Knm!N`zlt_1XOCtzKcb6dDU4oQ^
zbPe5|zkBqY-}`>w`quLN<2pVwb3gmuaqVkgTe0$inF}VEWu6<g8LKNjs`wE?-dOBe
z|4l1wn~=dqL2>3eC!*%5lKHnEx_&!1o#`7|PSjRn?Aq-7SwLN6$&w;n+Lx$25Qp+*
z`>*n(RHAP>FTP{Mn}E5pymjzmR<waq1EM4LkovMo6<rjsn@&ov_YI%@WQv7^bFrFz
znm-qeR`t;?SxWkJ=GBUJlyq_sYm~!;N(=ED!E1Q_DJHkC&pN-|ktg)fiIY{$p5L>{
z5})<VK@?o^ef0VI)GG!w07JDZ#jWUzf1}+lb@UG(j>X@oGc7UKK7$t)OyPibtGB~D
zK)$!!%(sVMt@h?kVcW1UueO^M5<ZydK?CZ%077c@D2*3-SYxfsRI(ixYKoHeKuGgg
zp(}HlGs+Zwrbh=$5$Co%{lP?8MuX?5`P*&nDPZx~ik;vev7COdBC_=*1%AE5kkY@)
z)cHcHx5nLxWH8pwf<Mu!V?7d#H#(_w;~)RYFWN*k*Zj~M?lls38=c)_E&|-gNg0+6
zr=^cxQP~!Pe2hen*!?Z!?VQ&0c~3(v0rWOmogY}RAIq^(<M2czFM59!FQ52Zg}l4+
zRr_j=6S_wY<quFq#|UOZ>-Dt)K1Nu4w&BR=_(MC0{*~E3_v5=LSFWTMobu*Z)zX|Q
zb+`paSHxzXK_oOFI&_>s^C@w^(FG{jo$S4l%3AdOk<C!Wo4HFA+vZ#+OKt6pP7P#)
zK0<Epy7oExXkJoUqY7Ajo^SnKuajIQmt}T585fvBCj2yX#ND$=lX?oE+R^||r?&g8
zR6ccVk7MMr%_dsv>#wEy!Mo6RPwvI~M;ir)<CL$yL+<feC64DholY!cs~fpt)B6_@
z(J|{6R&qcg(B%o=n;9<wshq`V9DHlO(k&mWq{}nWsuNqaiYPU6o?WBdg^0vUbC&iK
zM78}39N**DE)ho~5z$umcLtzpVMrT)x#%-Y1^1Xs7GQ!tC?ur)n_>Uhoqu@yP>fP>
z%Oum29Q2@AJEr9yfF2bbTwCM*0oj7|Yp|=7k)Ad)zR96C6Ieuu2%4X&&EJ|<=3)E(
zRK3y+=KR79oyhRQ>XZt_h}<skPp@2HROh4TH6T&CN*OLzr9UnZnq+McnJxI!$q~AA
zwJS!lIu}W91A5XvPbvdR5=ldpzV3hSM5?j2LTBA6w3mO^ieV0dMfC7oZtq8}zWEZS
zwl0H0l1qso3)U~t!yjM)XE-RO#5$cs0>g6Um)!cPqrOG}Z3MVl3@T=#8jF)%1Gi0E
z_FUhV9P9hZh@PFd0_;d4uaY9%Y!|NjrX2b7JZYN*sTHskiY{4iw&gVa&HGGcZ+SNs
ztsiUIS4ooAQMZ7tc}oGYM>BJs9xNxzE2bCA5*M<nk~9GG&<n0K=*5R4qrH$XNf_jT
ztVha1>`myz%ekYkN1DI{;z2N9jrj+DkcxW)1+Dipb8GZ3mcJ_}bOt9e38?m&JK4GM
zvtA7GY4b2VhGF9OZXk2h*RuosPP}T8!_E}6<0Izux(A=d&3}SW?438p))=ePfv1&B
z`|eQV=Pv^`19G7>gd9$C(kZi{8d~Yd^3^!MEF!bFF7`M%i#ql9X`TknrPi<l!Apk6
zac=QhbD8t;$-Wzb1uAcuJyVgwN}{DZz!;SU1Y57$-WEbI7#0IpWo^h59En@zB%2Fw
zpDu4s&!q9Gd_}$ULo%Y#dA)bB9fbJhqhVOuKZ9!OeijE8e>|;}8-fctLq{}_$PoL`
zKFU?!7rrRae~^4pyDrQ@prkketquVa$30!8Ux;)^yi1Zzqi@^*C49eGf%belbUVZ$
zbO!tP@ptFib1OMU&cbaS{tjA+krnW>R=?dpUO1(HHk(_5THU^5T~C0cp3y>9Lxt9k
zl_|anhCt~)qd7Y}GcYl2?mKn*AkW+OI+&-#4$mom1P!`DOiVWG<?>*@^TS9xH?V0F
zDCq>3vq(e0;^!qw(vXAkjaM~Al!5CqZNCfARZN@rudC|4I=jh;E2qL+Uwo0C5tbO~
zQ%h>z@R?QLcVZj@Gi1SRSTdSB2a|qen9L4^fZho*-SrH|L`>rexEyJa;<;RnTLq%8
zW6Uyh=7_c79pOnK%Npk%+ZY7Dw-amLl}yrqPrQkKk0drcqAG@J$ShE<tAxO99SrCc
zLBS>nLf(4Ey_Z`eU^CXVq?lM6k}Z8XfA9^)>gs9%Q}9C>@(p8nGW*AGx3qb%7tR(#
zIyyr;*ItUJ90-hbdWo+B?&Zz;W*N{XIxa@WucG}uR)a%CLv-{VQzH~Rza0d{r=5zr
zVh`C1@Pnej?Ux6)KMIXcHfe?vg6J6512tpDXUwlesE&~Dgv}`_FNX*}XCye7vfrG*
zl*Iou8}wVhyJzP$t#TRX$9i(Lr5)*~4p+rbRu5EDW}kBsR5PT1DVa9ZiuxxjFqWrf
zufm_yM1lIy!DpJqj2COhWwN=CXH^5P^tr5lcp04NhYq>N<OS3%M{t6QY(g?jVb6W&
zK*;G`C|yK!zZua^NE7Z`yI5$(IfrbPkn5@L)#=XW7qLK27yz9<rmVsX1D5Vjw4bt*
zlE{EgY+m|K&CThjEa0D?9#1BQ{PoX5!Z_~Ok6dWs%b*|lm1fdKp%1g9ysy~Uq8K<1
z8j>nSM0y)+;MR@i^8_{O6L6hc)a4yX?UTK3(%$K<hy$D^V2FGyI^4JjjrjF;S3AMC
zgHEu((HZO$CQk8=7h;jiB1y!MQ%u+|Rg$x6PczWIeQ_UjK%`1iWtJE+<ya_^SnU=K
zyfJcpa4q6~vsE~KO(uLLlO+^eqYn*$H(J}Rr-)y#{Gn~hY%RLR;BQzpauXWX!0Sgp
z(H9AJIW-8&XPQf{7>8ENk%Z<+yEp^~wM{azPk|0n%c^Q=k;Yy*2m!MT1`V77D4D0~
z3kG_=Jv8YOAd+1aLf=0e2`3jQvz!;!2!_6jiH`Qk%F4o6lUmYmi1^Ku_@kio1!Tk@
zco{yB$rCh%qrvM8Tt8gU0Eb6$j%vFN)sD{2{Msle#Gc}oV{Kon$WE93<bzBgf$9AK
z!uo@serB|aP3*i_)i^^f@sA+*w4wQ}{+ljDhYHx&Rw@*%7khjsNJ6db^wDhBiVwFd
zA4KptDA8I_My131X3E;!0fe<0V9o`k;gYJ<8VI?hbq2RBA%F7l`&j+Ae3kd<U*8-o
z3C;*U14~?CknCWlX=t{BKnE?p%$CZMv_eKvV=AxnF-SW1M~cV>1Yc(d7+dVRXyUqU
z$Od=ZBDl|LzO|-3-JLBgh~%Zmr^PD_L&v}vcQ|&A(u&H`WHdB1O#k)`9|&rEw8%Q$
z7Jnw4MTGN6S2G3cmrJ#57{n~IF@R!w&{VmU`Q5u^z!CvD)B|w!|6DGUgQZSlE~C)8
zhrxuzylnUaxl&GG)31Io2ZC?NtP?vc={w>Wu=*t%2rX=|$b#7>@^_Cv2LyKIEcc>4
zK5vU8)IRjMPeGO#UQoBcgE>JvV%|Qg0ou<LWT|1T5*FiNJnwTQMU%*d@Q?7w2qAbh
zwR^aIwA|o>Vzaq_7S_3Gx&7T&)k@;dfHqo7$htRB=Hu-nS=wN*H2^lxHtibFKA|JP
z@HirTs0AS6<12m7xvK}9A(bH@Fcgu!zw_E-w<qMq3@qy(9DI31Q9crM^z^DP#}@@>
z32YcGkj)3{`t0rPcjf}Q<+6lct(Vgi3GtyQ5U-ld?e=#!higz*^aXz`1R97uOtgAL
zO%~(dEetgH4)*jloQ&QHryRo9O$nWXNDmH85*!*36l_Lb>YN2TZ^v2Kw*3axHtri~
zAkr{<sYGMb=a9%o3*yFQcl3t&s#<TA*@0=B;Ueh!li@h2tR<V1kU<DMnz9Y{v=vmW
z83lgAKyhl|aAmUE+P4G!uLzVbV?C?%e|-@YiM<@3A>yBd)5au8qF4c}sZDLH+lqWb
z@Q^MnUo|TUky7Q$h3iOd>R8Ay88*TcLs-Ke#@x`S%q`^Xh2R?bhAV51FDcwK^?m7d
z8jt+Kf5zem57l4x6_QMN{?O25j%wH2K2G1{h2aI(9qFur1+4|1RD67oX=!Qmii>yZ
zfD=mq2S+OO>H^QmnO_)Zs1vq$hy6wWkP%~zR*P2eYi}-#6HJ#eMa`#d!;~C-qnr(=
z5qkyjBf+6@{ynt)rAQ*X9r8@A4-_6KGavZoRTL5+CZ1jDh`yg@YAoFzSrEsA4PH4*
za^j;L9~}X->zK-H(z03c{QOyGhR5(LT?fDKqSS(O9QDlm*?JprcHCK5e_NW^Uv?aT
zO5+CJbLnCn*^0vpI#eP854&%p^*^^erXOJ3R@V};{pizZx7K<7<Q3M$_@wjhj%c&r
z``+KRtWi)gUb19vNV1ZD)DYj0VF__$=oU(D9(q&i)4^__4E-^vC&q?!Gx^6*AS0@I
zb|C~m4t7*hzc$@<Qb7`Y1OfQ)JMRvvoxx-QM?Ann(FF944R)M3L5YM)Hk_euSSC*(
z>1RKk^SXnR<*lBH(Q}eOS&(&;fTgN$34zaQBmI*hEcriXTX)jy{e7xEhW4ZVrQp=P
z(EJAhR~s!~Dp~5Fb&lF}C6tjqTgX}PeM>B|kmN6vSRzghnU0!ye^?*8<cYyA{8^)<
z$x)H;Y4>tpDqKq5hkHfTM|H}aJT>KPxsR5YnGa4k#RP@;Fy0XZ#uhRi&}G>+Glsde
zUAW~*B@#$xTV}j2X<R%~KR%I$cn9H&3&V<1&fJIecF0!T^fYng+w6TmTaW%E6ciLD
z7kL{U(JIha#y9>6KST`+!^F|~buxw;?zFh39ORUstWJ7f(sr@Tkx+4lm3HJ{xjPCh
zZ~gX-^LbLTbk<sXUo1s*nNr@%CmZl+>w}y82kMP(Uu@Z(tuF^nm+k5AayRc#F*R79
zl-wtNjU37lX9vkF^z!z%nBiho3;qlWzy$z@vwy?FXB_!Si~ommR%2{Nhy18U{f}$5
z2{^cBLctzGh*I@sgvTc3){WD&xkX6@U((014n+z@D&s^VT0nYIe-s2N18ot8SG}~@
zLjBHq!b%8P1-uR9$2$s{@rN|`A<@`=Fvu!w95H(A!ev>P<sI=?AGmUIO8m3ucSb|K
z3FlMMZqIXvLuoW7!NT~eUTihrLKPA;G0hPT{9vm}d~8k4SFiG!B9AYk+}bxG*v@gO
zsikY8{MJi;1!7C5wl+4(8XEoq0m!sb)8dJ=BfIj)lgYj*SBD_gz}P6~!D&4Gd#||v
z-YWt_R;{vopc~bCeQ~5$F%=quO71s~we_^c$};e|CGAds9+R$UI;msCkB;XzYM|aC
zbkmb2k%Z<$-y=QxdsqV81c>O`e~TYJ@qTZPhoUYI+*jaEk19q_ieF%?a7#y;xmw@y
zCCkecj>3ZMGoHAmAF)X1mq}!TByrw}f!TTCE<$9~djYMz3O38QJJzgsJ?EI?>37>>
zPaC+|h~|@1L-s%|&|`Y^{RmcFh|Zzw`go19^d)R-Y6%$<!<{y^3Ds!C$Z;VWz+$D9
zbGE1;8KTu6MSGD}NQ-}k`SIh&7>KOAy!tr2bHT~U8JUof{{X+*d3%zB*7^J{BZK-x
z`&R3F<8RB)P}y{7pJ>GFtMytoO~Ap3q;RzzHua?V@{dQN`+IUkpTSDcS{quRiAfzR
zjo{}QJ!CCikFFb}35J>DqBKPB#CUc|5`zn`=$8w?{t*)^CdqB42-)CgHky1EB+&&R
z1+dmMqq`*f*UrvUlHMYzOGZ-u$sB81Z!uo7Olebq)zD>=GX-iX<i|~n1=dU2CWwPy
zl5k)m1Nl{%BlVc6x%|iGV0r^z2G;(Ozfb8vOe}A79Qf!}D?5-$%RaJhEPD1{%f91|
zD_1G?r40<Um!)N8#Vjl=0{<))2!@pX_wB)F8{mCx1eX@vk0uHhTPUmZ?xZUo{ThqY
z6>cWeuY#Z75+<O}Wv$U{pgk4Q9+dUoiBJwgarf{hTElhbF%UVUS#*sWm)>IWqVZ9r
zfd_3=@Ml;`Qx=k;Nn<Uv&853K47y7(J?YSqPQ2>wD>XH>sJOV?tk2^gca$IE1Nauc
z6){`^5)B=>{ZGaLg6DolWHTndH=)yH#?@9OpB8eQ$q|jrbP8UqX!CuZ-Jl;Wu{Y6H
zJtCi-?%lgPmVv%dmuQB7&Cy6S4sq?|h9VfN2jMe1CE=;IQe{HBLA|2QZgGF;(O+@q
zL)?@oN+Oaj{>bU$!gIm(c1`NWyW6YyXC~2oNqn|tAIF)@rYq3|9JZBhpV$&cp9T#5
z2Hox|^WOnO!dIA-p4a6hy#^pH(yFmaC!t8KzP<x6M48bK5;wRuV?9vC+8cA2_qZ}|
z25lVBV1<q}{g2<*EX@zPrgg+}($ee73AH~tk+5}bvH_$CmC17Bu>f70Rrk+Uujb)-
z0Ft;vOd*vd@2*>AR_kKxe)8((IonQR*7Wiz2WWBQHxcRgdC#DdHmbn`8h8bOfx#R_
z&9~QhMgd@MFF<$#Tnz_j+L1Z!VCaaL%XY6ssnehLH5~8<OeufretUgEEa33;3#(4S
zE!%@f*m2*}*W6$yxH5@c4fyMcdtJpGk7b|ebm`3?Lzc&DYd=!&_M#NBABe65c0aCe
zMi<dh^)f}y$pb`#8Gbr)_amJ@jsk4_K}m2P7Zvx@;rZi`z<CD=zxDjTme9$mVGO^K
z$&x>wNd(sPS~^0A58(04z!g8B>VqSca#<1~kEpo0Ujm+!8TT@^*u9=gL;_~77sAPt
z(Z9Hg@Xs0M!`Q-lTVNux9fmgy(a~0hVAZ_<!=;#aPBp^s<^Igk1HC4>KNA4AT#+yh
zKHPUiuf(U|EaSh%iv+`ZZ$DUA+VqL&trG%x*H2SiHW`oChs9@wj|RA$c57ij3pLq}
zcV`9C7Wr>FYqX8qPK55RkDPYCPn20NOM(Iaz&e6pNK~cBpE@Ih;BU+pl=k=c2fKn)
zt2x<JCl-$Hy<utjsj92X$gVY#Q&!Pz=}mg3^rICfEZ+hCYlB_U!6oVdPDYT)MoIhD
z>iSG+P$l;DAA0n4;9j%LLs7k}8Cfj=Ov6q10TtL8ycBs1c1|;}vcj26V@WTPLV}K-
zSg%*N2jUb`Z8N@&2cq2${I|bW_nHR%ww637`D`9so$XmB#RbPo=PD+PIViGz$$k_J
zjh3D!{%aq>f9wN|C_)g0y;ydu!w6aCH5Rj!(^ZALk+u*o5&&bK9IW+$O{!g8HpgtI
zd3w`-Sk5=@-HWt*0|r@ei1P3E1JogRcOk$a1ED=9tG`629t`raWMdfOui}eS5nvCW
z#a#_<(oo<?L<^_dzR;uMHi%pD2RUWQ8ua6|2}oB4bGuW_8gNrXlw_Y;NiCe|y$CW&
zvUoDI?Op7yBPtdH)Nn!Lsz{KDg+)U{x*=9JtHgI)y1w}JbEu~!nEX1iLTzc1plGPd
zM#mZK>D*c7%;2vM>u(WK`*yIy5_?|OQas%~X#}S<TWCGDDoObUIfR4OKDdom(wiU~
z8BchMDrVPuCKQ;@lOW$SG$i%@JvE#!Vt^4?r+>Z&v}*kgYxXY7l_Qh+Y$e08#7rDA
z#{7uRjMA@4fL(uP0d|dQxTU#lYgJh{cg{hLDi&|cJ|F(Bw6LQWKkxvID276pI@bWz
zgk8T2)4u->Lq{qWBdGA+<;BLrmuHlp@L$d-e|3x8`?R}KyRX;u=6fJ&R+X`rCiRbe
z<V~94Cx1(jj|`Do)-99)XmCi4q<6zEqof2I-eP265S5ffR#jDvjETt-E6=(Un9104
zwXxwG86AyEOe_>Wdin^1X^UikxxIG1OBN!MyoMhP*0u{@%q_ablOHZyzX*bmB(?l>
ze_ms4hafzu7x3d@dh%PbK#o5b6ba*zF1Rh5Uz*<&)?we~3oGaT2pcPXK>WnSmKXDJ
zU^VH$g=dD)+~QWKImATRt@*&+QP9WJ4%E58hWSlCd{90L09&<CT+eo6qmUj@p)X#|
zEn4O2?F<-IM9UDefNBGeAUsJ`Ma6q_^CMthjXUZ&@|Qmu@|(K?V*HMyinhVf4FA0d
z*x8z{WH_2)0*(wW^`{jZ0g8mzesajLrH#kgylT@;9#5za;on&X@}<dEP%oToK!(>4
zHMAsm5Uc1pBBGqvtp|TS_*%N{XOAmp9*jxspL~P&&HUE=$UDhYbO+)&;zc~0qGf%a
zKq(1jE`K^)lcfQnKvjr;cZYr^`|`mz^up=gwx44*g4H~vvkr!fj8QW9GWzEpKbcQ%
z6O}(*U!J;)5CRoL>l(rJ>Oy2qtRYSO;Bjf+)3G#eeER!D{GoqtAD%m>;v70r;8Owi
z@A&Im#gRV+YQYy<Xg`~ZR9#Siph@-De+>t|^#{Daz$hB2_cJxtydYOpr$G~oY1=yv
zWsRZc5aeDq*0%OV^o{O6SZXp8Y?Mo+$xnphuP$CKY=AVVk%#n7@Xe>t*9lExxYS`W
zvP3EIFMWn^dfT(bkF2JC3JQwk5(XZw-moSCwL1Q%QM?|U`VF`Qb=VHQ6h%nLarY^m
z;gdLMZgwj5X(S(ltdziNCb(<TmEwSjzHV}>Ef9Op3q1kvSC2CxGz7y3*Kl2oab$$d
zo)xDm=JkQz`^O$myp(L6u(ToJV2CV1s_!0UpW3*TDf*8x-t1;2TxzVuQD205g&GTJ
zO0;wwPJcTra4r917L{vpo;`6Y6_goZ+El?Eoco~2TB;ZlZeMH<jFrb{#r|%g8-}+2
z2GdQwXch$ImbLcxx@M0f36W^7{zhh2-u&xw{cd*WLj&5#_wV1wKuG}M37nu0ZmcrL
z^BTcC>$)gSn5av!4&c%lOib%J)T!(pw#+uTK72qGI`vs!e2<T|#w`9N=<j!UszK~i
zReWq$ceZfwsfqpu0jFNLDtVqt<`@foE+H#Lr(&^hBKd6Bpe2aQwfpYR(}*WOA|$C;
zEk6C{;2w_j#WKeVj?hMX^k0D;V_`~oaBm8C_yZizo%SP&>9n~x-^tLRLxisH#%T_R
zEse3vN*LBL30?!DH~_e`f-6CNG>{@hYC2J(p(<13v|sF&K|!p8?6y!W4Pf<T93*_M
zYIFvZR4KGKa9YC?C{B|0Ex<)UI;5J(JJS9!3lwC9wb4$+Z1D5~o?)z%@k|6<(LGwi
z2LrrK!-Y{UgAAPsBc~^5Xi<M-2A)UlO3j8*MQtZXfPabiY=vu4OUwI(8|noxmo~Do
z-}o$xm{%pYclv`UJZ%v>R#sKb@VNJgl=L?kZ91Z1d0mMrAt7Po{_khv-7gHeZOA9l
zbTN!lp}rUld-g#I>m&K0&Xegsz6U~eK34C2l0=!0dY*=Qt_&s>cnPI%J^@99d#;2x
z#e{!6Ir-T5cs>(kzBV#+@g|AX1ne0G=*9CAu|J0jt~dLNK`=&j$D@Vl7qvBZA5zc@
zBka68?mRt$z8D+FEr~XT@;}=7TYmPhihcaZq?jsPY;oa9#cS15ETQogdYP&TrtG3m
z{qF}?%N2TkNEBE8^8;7f3o^F1&5GVOzSf|!Ugyu0Ub=G@sjylU)A$Y<|0e<Q!JX40
z2ddX$8e!v-UFZ;ZUV$}RaQoWV?_<uH`b!9^ssq7W5ap5(gT;0BG3c8Ors1hjn?%-6
zgisd5TTRpkHZY@*d`EacQ_g#dA?d!@KcCK&1>dVYU1_p;nM@sg5G&nuW<3ZQ4EyiT
zHc;m~h%h(0)|K$@i+K5R;k)6(8s-ww;LJq*!-HhQ)lCoK+nd#g=kpF+eVZ#NhQn|V
zrA2)Z7pj&cuTp*8j4OElMbYG*k>&^Ljb;!2UNAg!r~Cwq1sQwdzQuAPGy30ndZG37
z5ug)dZcUVS1CjnQ7MSE$VfVTM(N7^EYIkSuN&U9FYJcq<z#c@oq<OYZy5C)u`*{U>
ziX0XL`}@b)9U9lZq<3t-JUg;>=d0$;%Io@L?=u!WfPY}MImVckn_GB?(Mmsr-SOpP
z@)Ds8p)45Xxwx)ZPDC*&efS}jJDBXRy$fHrYAPsTF)=ffwlD5*n@{_}$0|BMJ!D{E
zkpQ^h^73`{wX*y_CPE!?$dBVuS0E;nMFfk>q(YZk!+ZVr!%;i&U}B(b;aA3`=eal9
z|2(P#+olf!4F1_2(*xnB530uQg)`jR`~Qt39g9|J4Gm;}+da`25&vFoS%#{*gU_+R
zmNpw~w9F25L~C&Wc#sU<C8EKiqNn!E)Qpw75+moT3-6F#--2|RwMPWQ>kPw7N#2X4
zPo(MZ?_yKTt>E~3W5KOP0rLRA{&xCrZLHe^u(T>aMAgNnvx-Hi(z9pYKQFCrpP2+J
zP@$%F-jzk@c_B95aF#Xrr}PaeY=E6)WAlw<TG4}$?jJWW3{>6IpZ~3sM?NgJ`G2II
z0~tVzQN?2-JTWhP`m!n#r)J!9DTIB?U`Sv48A4#$?+?iGOT1v<6#UqX&(qVd$v_s$
ztXa|lRGwqi0TlSxyB&g3weoLuV$GVRmaC`-8%*YP+E2su#%t4>olauA3Gr%%A>Iw3
z+|outUpdVkT~jKfnw27utaSeh`={6{C@3g1|IIC*%>NMViueo?ihmw23+(Wp$K!p<
zyu5UIm=MHMY3<_G{=EgaRC>fP8j6o~Atk(D?UweA$|~=rs|YIWpXwRdZjyi_HYg6k
z5>S*CDZPJA7?&1&>T7sgfi{ZxB`sPy4h9?gcFO>|`CH;o5Qh>{ff?FpX|y5B6j%|I
zMCU$a+;k6d5eUM=PnazUC3xbHlk#r`2lv7Md0XKLgXN<lx99rXbB%AhlyPVZbXtCq
z=xUY!Y8^z!a;TDnL=oQ1+*%@(WuW(bG5P%!u67SRYMbdfK!`3>;{W(;@Jzh_ex|VF
zt~MZakzhP}>h*(8sB-Z^;1RzX%0S7z+hm+;TAXuJihajm$iNX#s;#pDM_C1OUaUv?
zqkj%z?ANcQmEO<i+Z98&l$31kQ}6~8JTk<9isZxJR_0RaqlwaY5#TQ6e}sVZy<U*=
z9mg`uM?ijb|8C!*se)i`l7lVEPyF~O?!DbhzDU!|CmbmkKL4aMG7=I<+!ixIlapEl
zsUq+GV|FS&|1mpdvhj(D5K(knt=O31dqu^_$PYh~A9xN5%~OFVyJ*Rry)EI!8Oh>&
zGFO16nr{9d!?0RtL3sMEi7b)ZJbE!7>3<uB7FfK1WQY$7OVGi-j?*BoZArEDYF1`g
zz3=&1T8u%E-r3@oR;o~J^UXaob_6=2C%1X-|2$lfBI1%G9&7;~|EO_C^smYNmqpjk
zT7dN))Ivf!vxj$J_IxPR*1jbPeL<w?I8FXgl1LU`rmW3YIW93q>gLefeq1zIoFHB7
z>hIAvDw7@Xzb#q)_Zz$X$CM8=LqZ<0sOsmjY1b%sDMyH&Pep0txM^dBGL5XsFGcF@
zt$nDjQ;(Le;}@Km>mMEzy1jbmENX^U){D6^i4b_5y!Fq;BzQ?l3xVi@$ueGtZQ`WC
zQ}<Jhf6YAQUo(eifR}z~1Y^YmA%wMMb(wu=+eHZPL%cj)K{=Frn+mo^1}9(P%XnpA
zWQsTsaonapw7%;{G>S!(DiRG#JZyKWLMMk0+kvV|RYxZbK3D(-aI_j-zH1Nt^LhWn
zpdyJLKYq+>zZp{(OT|u2Sq&zt5uLepD;^WSDZ+AuF~_)NM+ec$m<|sSq;T!I45i+|
zVkJF)AlxoKlp>IO9{g(U-Zlj~236#L%mCgveEPP5n3UV>Pi*>Q#s6(#R+#oepy)%#
zeV6_$pYWWW^4z$@5u3JD{W4P%oxPv{N`x$YzxCa*A!L#K=J~`BLIBLq<Ly32(;V5i
za2QrLUZ;T>M_CR!?<)-T`pWc&j2!+Y|NQ2WpFh38upoqvj+%>0?f*9Lr92QJva_>4
zGGOA#3}g7?ix@w(c+!Y4se<@4?_R*8kG2!nLYf%NUyf_dL*J*%Oj9L6(n<TEVAHbr
z-N0zuA}-@6WWsxyAzo9fEp;DtQ<0?eQJ9jyrme7lYU}*_MS!Pp>Z7Us@{g_ht%JY*
z3Fb`Une-y-ucBAJ&PQvDAe;7WUu0*chB6irFGlL0SftG$7(BbzT|8}N5QB8Y>~%o<
z)qrF~UXl=jK+a2swq;CJR|Tm|3*X_DPJZJq+KH$)IYX7{xAI@b$&@h?f|?AWE7e1-
z@ZDd)0NS?B`ub!EA3n@a-+@B@btiWJx|1^KR}oKP$q0&K3v=#7YrGd9{3yj^<YJIw
zkhx2t9~iYII}v#ydXH%XS1gr#;LT-FPl81OCP@Svqe>#Nl>UDo>9knZ-0*U#_z4t9
z$p0G;<NEzGr6S&g7!ec^5jZ;4ge?X90oAj=*-A3#zUwY`g~jt)Q$J#P4G}>nc#!_;
z+&wipAHIhtQrAl(*^Iejs>s9bx5^}}&E85!m61vN>A5d{iY?t|8UInu^<jV6X9MXy
zLk+#3=`)RoKqJ5;`ueA2kTh`r#bDGGq;!5noY#odFW-U>cKgT6mWi(eG5~zg2Afj&
zDg1L=*{<iB-*=+hZT-TUznVMKE!P5AzHnLQ%>^vAyB$X)6qJ7sc}EH6O>P%9g16_(
zPN!4GpaSv>X-yGwjp21(PY>Lm)Q@<+HY`P{adx+e<JkhIP&rfd?tcxUVViY7n<ak!
zQ9W?3+Xr{^->Xg=b&lcp;rt=o!)L*FFu})$zBgC`=XR~4sTo*3=YqjAV};ms7+b1)
zcYD(%@qm)SjlyXGLEHUg+-WVrI5IieTsupHVYBIG$8!0rX-O;ipj;-g2kFlzdAbXh
zE-x>!?{wzt><jVf1@}Av%X#@^;+^JVbE?Os$&BaS&8F=FQS&*{pS4-d>&mD5TueVj
z{1z|Y>+6rZ^3l-&QaWzbzuy-Ub?)u5zwqJ&C7{~-w&fA{o~+pa0CG1ddSslzppM$_
zPT(?DmynO35K@O7-rb%xD`Jg4+EAu0w^?3Gw0ya9ayKP_!_HiAbazKkPp3jd;=1>Z
z&|Al${C%*HP;&>dLMZJi{+nlCGf-8Z2E9)wl0d@H_?qGKgh84pl2uj{ii_udHv}s(
zCJ*?1x~t=0ymsZBvS;fEQv|~yGp@#iXAOHBljZu^&H91Z<eU5lj`Qx0L<rObGAnH;
zly16?GuDAuq3?@U5Y2IxAAAm~tlma(Kj<VXA;%_p)*}Jg{XX$_P^+MqflpWyDsgiV
z;c17benDcK9~lgZ_L7H0g_Q-y#07UK=uedB=r|e2vFgN#>!4Cmf0Bn#`AO5+AvfNf
z{yx11OCuC%>?2XB+J4H&NipT19{K1(@N_CZYGl{p;3Lf!+i(4{?;>T~8RT6Kl}!+Z
zMrpepbh1wSRyu8m9A}Cd=uejEv0{-UD{ClZiCiz@nEY4*L4QhyK6yo6RX*u!pW;d;
zghLwzhl0$bUbY8{FC$79-6J_E-q#OZ!mw-cLKqZX(s-9AhKi?PK#fKP<<#>#0Lj%(
zD+*;L=<t~;$K$@okS=uSW6af(kqLIcKInG%ZC+h#_p;IDq@X-}c^W(Fu@t#|%$Dw5
z|GV2I>fp=M9n!ZfEC2&fAqVHkTDJs@$Db?8U^-Y^H(VU^A!eFe1(GvCFrmXnC<C<z
zzumen3b|dRj&<k5!Sf<CUMXSvBre!nX#?tD$P)q?1Db8BRYU57%+?R_O2QW%vp)$r
z&D2q;I(~`MMdOM=2zD3e!MLL9Mt0oHy5XP0Y`9oUWc{`nKx$z%j|XL=@Hk&QooK!t
zZ@ND0-`{-rGk?HQo_{#bYs!bcz|Hgim3D=ZLYI35YyNjFw(G{uyQeVsq3Q3Yvj<u!
zCG$Rq->?lc<uy3Qr&9Pc^{;ASDYkercAF^uG1$~1x8U9L5}+?{oHgGyhTQKrptc^|
z7MM89Euh&<{J_}ko^y%QW?kcP`}NSVWDQBh;&!^sec$C<gxStLcFw6lOHDG789JZy
z)77oO(}n(_i(LM<`@}J^E^-s$ZB}IOO3e~YN~pi6Rq49$dKSA~u-mu&Mj7(v_U*me
zdUrQ1e7T<aY1ydYGka~k^uk1Dn9=J9{(aa&scp_F+Ts@U&7$W!6gNfQQn2o+K95=0
zl&xXE&1mO|wvuwfDHDMV1R+71np6*mk&OWDT=f+HKX#DLWq5J8TBX~1{|zWsGSK~S
z6JO+R{NS12=2v;=b|6t5ifuQd6_v9CJRhdzQrc0hvsbvttrL-oTIt(Hma()Kh{iFv
z+3jSkO}<s25n>^r3d`QA%%-_L>}PY_3IoMQ#o1feo#)j_XB+3;PwrOPJU2qw`V^$>
za8El0hoEX8Ak`j5i|ytlT6`PMl+tuzrD=JPHke1lUn`@~eZaBujRPdorjupq$<AvD
zgAaIjDo2y3VwsZ3PXw)(pjUgIcU$sIn-ALyte3ki6v@`U$&PCh6wwTN_Qfz-+<=+G
zx+8j>#reBiN5|U@4<fh5Vc|iMJ2y>7vU(78e^r^kc~fJh=k)o<g8MY;ZyWh4m^NSB
z#S!c`z>&0_;Z{|-a}P01DuRObb;wTeB>%~n+K$NGMMPmY`xs!E9npM3=JIg}TWqVU
z?1WF1(<yvaSFtQ==lCE_hA6(*a5PxqadVl?LiE!jh@l-9@+rc0h1m1z_xwytn0k~z
zr9uhD(#)5qua@L7r+wHcRe0E%uMdq()+Q&OPiQZfh?rZ<yPw(PiQRtvnUcW9plS0w
zDgcLa_t(|zo=2RGQ0Nn3Pq!~MRWT8qcvI4i$|Cu~?^?HxK?tgKaR%Koo!?7tCC#@k
zq?`sp&rN>~=->>-+U9uV(T9t>KiJ|;{a*$W%ywlmnp2zj=&hRj1qPL0-VN|4VnGIC
z^pBIN?T!sdA3pVyrXVJ=`=Ec$ZbNxKcn<D_IdG?CTMG)~I4zv~#c#fUGz9Qc+0|aN
zC)Y5C>#Y66t7LwA?cBW@>*bj<yyU8ZT6q%QUvd*Ba)HmuC&2%A_vk3?XRUlL=P(+S
zF6PUZ=^@WsTjOUxFDRcyt>@7TrS8e+*j~=L?%4-m=HSo~A&c?T(2~zV-%~;r+4snz
z@S(PbmnEyb=F^qdQ4qlPv-_=ze2X)b4|Q)m>|-wBB3t$fw?2)aavbD?)zq~%0KV0L
z(QgF%4mY`YdU*v=6cO0aY4yBEeKP1UmZ(u2Ef!bLp<C`^VwNx`pUzFz91RN0J{LOZ
zAecSTpU>xCL$K{9btOh0y8>YrcIrEIm^gpk^;o`P$XfL~BBuPWqa5sRscQvy>s?DA
z$zb&R{8ZwqrD$_3|1;<l@ae-m@2*k{dFGZIy2Hu0LQyse)O^0Fbjh(bj_JsS3YDl7
zRK0MP!IS&lg{pT~$^7<0aF{y}R(2p(zgU-sMnG3n>%l(4e&u%I#O7ueK9Q?Ld6v-n
z;K<g*I{ay-!Vl17t<X25)+9hv3pmM3+;?%S$`iQbJ3Mim&~dCa?XVGcbZcsh620X=
zAa8d*;^|^A|1>0&Lx@Z$$u%#bZ914>dp6Gj`g3Ly^}W@Neg8A0gq$ZBr&zz6aeI-Q
zXr+Wo1>KSS>!kU60LlPE_8)GIDd5sVjgntaTXRmuz96-1u&#i)H*u{$$WcrDkgC4#
zE|zPmWj8SL%45nfuGZZVOb=&p2~H@!;V;@iHFD+u=KB*tG56%Lanj;ICSddkAO@f^
z^=;C~pWn8Nwt1!dCh#q>kMYrM;Tw9tXm46CE5V$DX1HyK=<9v4DgyD}PqWl(M++y@
zn*maFa)p*Ct&NlMoV9iZ-<WXNMCsyH_@Y!tr|{MGGXJmkuGmr<Om4p^*ifpyW{LI&
zwZtR^4NX!&#9i=A8}352ughwUnTYAHrxUE}@t#Y;^i}Mr>v`RxZBJUr7PMMjx|OrU
zQwKdl5i+1{J6`LrezneQ&(>EL@`OjQqt&j(zW|f3mqsU&uO=x^oI$$y+n?y|`eyjD
z4dy1UKHBG?Q-3_D0fCBC63vzsOM)v(1%|%w{Ld$qhM{-^ESU70V1rK;uvaTO^lntr
zm?RX~O-1U>Ktfu)%V@5W<IZec1Yd9d@BMN<o?or%CyZ;8sdqEkob@A7A;BHOdrems
zjui2|ty=>p9imGlWjG^im;7ra))dh8gNqd|?<rD0cRe?~FE<xMo(`#K!Z2;bKHqbX
zgL&HcChgG|zR2dMLd(Di)-K&4(3q%T$Tz&x$V2X^^WkN=SkmVGuwdLbq#k4L7BF?a
ztLHN2tZ!yiW{su(u?R4(NL`GR+(|-6=eNJ_rnK_FNQF1U_iEF2NNA!lFkStX%gN>{
zzYzzo53)o_a#eynWW;#5Tmgb5DO;y#Rh8ME669yMb-Xt}PmU-~JFd;Qf%;Wi_%Jx!
zp|A5In{(S)k*dybCn)P4fBk5J^w<x8np8^<!CDF14AN;*ntjjt+aPVIsEJT7JP9a%
zH@yu5YWG@Q?lg9gSmwZDtqrf`V5+|UOt$O>vfVMjQ|4pY%&5z8rjcQtdoK&>R;ok!
zv$iY0r^!r}=m<=3GrZ${NUi)96Xh4*q94J`b2L)D7}&eJOHGLmt)FSFlT_&IMHPe7
z8FNBOloQClOuTndJW&qt#FH=Xqw6N7S{y$nC8^sdzR*~=tMvx(f>dXTtmHStkLX93
zlK6jGM(~OE&Db?u?bd^MbBUf~dOTs$d~<3GoBD1#!7@17&i5W!_0hCF)1i53tp_C<
zo*_t~%>0D18ss4sHh^HTDLJw)p0Fz?#HdW^ks;C%p{v}`jiY*wob}D>bB9MwE9!1y
z;`C+{^7RLs?S%^!YzqU`*#>iSHw$A5hmqOHUxeRl&BkSNhWt|rE9!nL=G4J#Kbs$p
z!_zcWs%W(4Zo3rrkBLz&`TQY%xV?VidKnthXN25LPP-j$bYK1KRAZgHXbS@QJcF|0
zfh#uJTb(vZ`~juD@6+R>o<HdoZcLpno!faWu(9yUJN#DNmeG*<1GV!}pfEv-47*WV
z0PeoLm>>EYs_o&uZp=M;=_&-9cssL@a$G-t>OK?#b{zx4p$||CE4PsYLxGpLDYfiG
zZMJ;Y*xHVmF=Yq1e){vkxJtGw19b&-J>#*n_WBK?aa(<<#Ggg*+yjfO@^9H+j7kja
z4VGb>i+nhIu<^UP^vdnQZ^l&*kooG^VI5Hz`ox$O5k1r6dt@Kr+;%(K>Z&bJqIB*k
z5XX>VcJ7Xg)u~HRLjT?~J_M7RzLRny@I$e#2;qd^v1<blK)!yQk_NaOnTLL0oA2^5
zqBN(S3}`dBWbKKy10oK4G*lU(|G#{Ia0ikK9*!UCE3VsUT{9er4@Te;sOOL(MPYli
z)Eq!~*lENjQ-?M-kG47c0!SnJW)@cOiww+oeO8Mbe(Yyq+uq@9O(XBjFwsrvNj7I!
zC<fl+qn@y&JuEeQmBjv+$yrz0=Q4ICN`7I1qxT4-?d*qsENN)!toC*L6^xs={WAJn
z6Qm=Cjfnvy_&bj9dD=9J11ePp!da(Xz$iz*Hf#P97NWBg;-~qT;p+QlqD)+;{n~<h
zHanF+#;ms$ASr62u_58sDJE<+3-{lAGYH-yR-&Dwq4paztm=(br^AOWh2e45`K3;6
z)W8xLKe%K~E79eN$Rk~nFo+;iN+Ovw`8-hY*?%H{b48s^yyYL3#O@)?-1nng<YI+D
z(~|7>P&U%BuT}WOTUT>QL{tW@p^&U;42r~W74N9MgKW^=ak0rWm5{>LQxSZ3LZq|p
z*67VYnI{x7nvFQQK}e6T&kwE1E+rW#kxgpk-^L_XiSqf_x*(N0md&;O?0UsEt_}5P
zkGj6)!`Y0mUDCQ%SixOgKJxb_ETNPq-t=cE(GJzzjA}wC$(@hmxjHA)KQ;QuoX~_Z
z5@qW8<K#*@h=JyxBF3Ehz_29PsechAl@dVzo+pLxYAIjy_gowp9g0Yn?=Sb@;8It!
zcgeHjY=z3Y?6;!K;ymxx74efoIs1V_k=`U9)XNZV#{-S^kK!PD=T=@nC9d%GnRW6(
ztG*hYWJV-u4IN|0-*@{3?G6{;qX(RDD#pA+P5H_inQx%>3>a<gyW&ld);yaT8?li2
z+%jV!)5I79baQaUP^koo2cVs}CQ#XGU2cR_6)yxo;V?oKqN&~G+KH~1g@jn_V|91b
zT8C+)P2SV9TS3b#F6l0ir2L{<@`ZWZy;p=#I|OMJ45U@tt>NHF3icBqwR1HE*0l&O
zB?!m!v(I|?{G>cu45Z{A^{=D(=Id;rD6sQPbHYq1`2kuEvz(?>t0^A0jbJ6gV6Zf8
z3DE}P223}SLIo0!)->Z$@+9SsQ|C<tkBLur&YmAaP&`Hx4s~*kgP`&I*Ox(=3w*<m
zMq{bQ%iGWSSGX2ZIh>oanhi=DPp2~k^~zZ$5?e!WD?T$}y=S^EZ{L{k+4E0zXZGcZ
za#B3?6=7t~;gH0)@3B`JkL$E~S7m3;92DV{#gfB$#i@hXbF71#!@2X&=0+Hwx(}qi
zQ>d=e&I!_XtX#oVB1<#R0;HZmu<m?^!boVooO57&O1x*W+XL(C@Vb`9>r%?IE1-Ob
zlPP|8Ini84`ox0!9M4c)&Pw&gse<q;v5eaEwrxFiX^l{bg~9q5j4nvumO$()fuyb;
z(}M^hy|xFgoB6rgk3VvL&BW!AAC~}el>c1*4%9ccYf5$Ow`K;H+WQO8M5>wOUU4~D
z*{Ysu9n_I=As%ny5@Koj!LJ5?ukk^q^+t<2EC{y^qzuGo@~;5%=+oe`dYf)~X2Rg4
znJqG&b*r$9_!m|o4S2le5BEiuse`dLW9N@M%`HAo?1@od5=tQ&$#$2M;6Lh4lo%5)
zo57qpensN*SZ-veyS;)S;b9Oq)i?BIzgA~rQbB#am)18U<0|JD4AMEKFYb`8I?@(v
zf|}4nnK7SIhxL3BBR!bluW2@mQV``1E{j^GQFp3>d<tbq`@-_Z!ukhpKO+yGeXE_r
z#vo&mh(nIO>SI1_w#~#Qij0;?VeJy#`uAz<!>^h|7=E9e8q|3t%=JHPjsP)t;uMat
zL6xmpOj0*CAJ|-6Bk85iB^_>Q<`e^OyT3B}mTKaZ`oEJFe*4W8j~Zu%=g|x@4?Oor
zSAQYNKl1Rp11eyXpuE_T)bXQdI<cy-g~K1DM*x%ko$x%tqoxLVC3$r%igZ->?Npyw
z3?a|BAh94Q%LkwKRkC@+b0z4#@fDk4*B}D1b7P;UHB@xKjvz5uTbOA3x6<3!Q!=Ku
zRBE$VU@IK(6YwbN>$^Vbe!dtu+me$tKZHTmC!i>!KPcM9H6%DXD?X}1@nxu?b%w*P
z#pu)6qR`r-jO8!hpEedI?S2_;RnoS#O1<zG2<Mu;a%JyrKxnaL?e5L#6WlW5L}W-+
zitV}>5%F4Vsat&Jm~bi%m3Z|kVH{*OyEV($XF5%0Q=AiMgSJG7r|hchmZ&-MzS^4%
zIw<_B*{R;^PrpSA9{&_C5%DE7kBQP(L*9Hu)0K;IgsjZkbua4^@}VvE@I<RkA4QX*
z9ukT`u0Sq(K4uYn{$^xV2bgHh6>c+>$zG`Vkh4V&885eWX4AYDW;bTKDhg$kyx{Wy
zG&46IgHO;tyW}T{!7-Mu{(UjxL3sd^`xgQ7?}IkDQE^$jk2EXW-n5?W>)ZFURP)jV
z<KgAE#pb`^->=1M741W^;71!;%}EW)b)$Y-vzR6Ccc%YDB3nHD|6d*k`pgDpL)iY|
z%4Mz7(GMOSLUMDV`Mg{^X!&k6H)oU|E_FhYR(V@?L56LXEo?BV7DgbZPB{~j3QEAi
z^?1-QulH1>=hse1j5B^2x~}ev{rE|jE!z+wIlo=cBx7>nuqf<Va#KEkxNYrOx9Az;
zlI_NN$<u@s?{$<kGdnG%6u~J&3cY>0q1{E)V!Nxw`paK$EbaSy(Le9jCsul6qIVFY
zMaz+AZ;9q!L#=RcI^10HOX$Hki7ubRev)*pRDB&NJJl?R{GKvsXO=~^pBPaNq<=1G
zG^C#8^Y5L2F2y?ZIuE6ah&0H&9MRch&ks-Tcdb>8b>B}Gg${ul`l!-Z+Sf{`b`aF#
zd3jsfr3A`N@^q>i)24=fR8aMQlX=c4uc#+(<u8rY6}5X$P()BK-aW>80dwY!cqWN0
z;y}zd3vlBxEPV3Y>&S2KMy56BI?1+9H^=+U`#(hLmaG-Dgt1&5>ixV<-b4|67!#c6
zx;bt+^h5MqO3<ldnG)IQ!@=)^*9i<nr>*6aU$zo=*93{sb-4R{4%Wr{F948MP61oq
ziY6^xFpfVwpx|k$G^RKwrdo;6NI)sp79ncrb|GUPb<wshX=KB=8hUBDVc~NjfAH!c
z6Nl@?O<A!ePE6F@jd4h`?G(=WWvK$AsNo-&bI~!9P{FeKrb;e1%hiP{8tbeZfGgkX
z9h;6v<ZSES87dO(p1cy7S=>h9{U*YRvoew|kJ7|LGU85uU?vvGhDcvKffKzuCxY59
zb0P`F*!Yg2kYoI0^Fe!<zP_K}&GBdnL2_&2BJ9-e>c9v|QmPKYY3w<y=SZW*Rw#~N
zcEWq`2zS+RFyC%S_}Er?&8jw6K4EE)^fRYUt+#{Yau^T4Ehpfv_r!iy<Y!zKR*l+C
zYFja-zOdU*;u$4Y|6(^GAYY*GTJx(R&ZMc(%wXD++v!)Q)*4q5<0fw28)3xC;Ds6G
z+PCy+Zb{7ck8WAL3Mwc5_l-gt!g)Ym)9|uuC5Wc>b^&EkD)^_pYM1|!Gy(E}f|@Xo
zR7(W=m7&;J-}Sz2#Rk0!R$wCxk%x7r$I4@+nQojSz2iqBk7MQlv2!fi0G)hsKWqKK
zkA&qTAzN{I?8P+eB})hPpS;Evs*g{)puuFH@i+t<l&ce_3)#4~RNsbcYHM$=C84i9
zEy46>A~p95W@W^n%S?S16J?s^1GE6oM!rOxa=V>dIf@Tj^RaDyPHd-7bsI77_LT$R
zh>k3JpTsA=m93le<p@W{2R4n~eJ8dr>h&A#@{bsZ7)hlOWv*6|7zrl)-R8AR?Ra{D
zalA@3=gS418jC6g+>8re<C0`coH49B9AfqsozD(C)3tnq@ieSDH;6m2gt4LA0}g79
z&%tGYmoxL49*O7VUCMoSIMjYYB5suI#yDpySuZgXN%GS^f4MT*t!_U`w7DB}XFJ=r
z8(X_ihd};Q5QWQ$8I%0PZaw-i**jt}eA({o_609nC>iFX6fQ0y%cC3VF(X#{#oklQ
z4o+1hRW`v1&Ir6C`aqd#N=xctK1K9;_Lzr9;ak$FqQdquC5W?*eRpd-%`yqaJ~syg
zT}jp2-MY1}QlI(7dt$~YoXm9W;SL#@_1iMIBexnWO*6P-XkW>{Qe(ISDq1`Ol6AJ|
zpG$)uVD_YW5I+?({Z;g%3ayPBh^x&O>15Z>>5Y(+N`?|IPCw6)sjKUi%(*f4Jp%Zu
zvG!wj$F^bn7fuvw7njGQN<#wogATLh%+WMVN@E!VaaAP#tFvIgJy~9&_H{U<Rx-9D
zR@-yGT^Ds9QSQ8mGC@M;5{>3@LX^_%p?+_~lhwr>9?hBqm|%^GQtbOuPAgv}ElwWY
zAVo*X7#+u1``w&RiBfc?^2U&ZH0xg4xEd8Bc+N}ndbjcHtz)Lrt+7R&ul<i7*qK^2
zQ+gH*@{b0XDEw{#VlmAJOIo&Z(7&Ix)zV#=@p+z9XQf~*e&$}erG==Cdm6fG-nXbd
zp#5=ap!ltRx32#&^V8g!7`7Rs8fPQEy`xCjR<!2f2Yr%@ErqXrfSXivj3Q`fmCP<s
z8!VYsDsSJO`U!ZTO3h!(WNlm46>I&2S4qq}K~)m&szjA1K!;7pa7DW=QTKLj?W>ED
zaeOpef~f>4B%<CDN3c@GSo5uOHdki6c&H1yN4VOel)_<}G)dUB&z}|%t6jl<VvPB%
z92NAMiU8rPV8#~q@zSbv@E%VJskA06m7s>rc*G?Ik$7RfB0fuXf6B-8IE1ZfG69Mi
zy?hl6lkKQL!lRgx8@(9d60KS0oo)0aZaVUS*Bk?sF{yd-$br_v!nQ2{mtF#8@^hx6
zoA{l_LGB#qp)lOR&x+gXD(^N<mr-)cg#u*D!g))LQ{8`!;|&dH54pi}f;uIft_mg4
z*qX6FwU^|Z3@~;SLFF)`wleGMsL)9jcAq(I+P+pu9wlnEeb~KL`)tNpDHUnxy~nN5
zX25bq$`IY*n3@t_ChG@i4#*TVIDp_?3H^!hi}OK&y_&NroIMrKr}d}Prn4|wr`b^u
z!ZyOOgf(bRL;yY8QG33`mUi^k*4wsWv!HP1MDOPs9B6(;Zk4=2VDhUdq0sn}$Y;eR
zxurBDUwR(kI>eQT!p8rHsfHvB(_EL?(8TRA1lB}u;dsQWC&R9Lj`RUShMM0;@~9<(
zj^}Nt@cU=7tmo<uNr-Eb8l{ZM_|OSmn}H<0iY1ifBYk!3E;Ny~8PPxmoD7lpxZrQ_
zwyDLE_+alm@%vCc2S1vq8ofiFfl7s6%TBlHzLcJl2}#ynkKcsy>Nn4X+Ny=TSgc-+
zPr?Xb#9=1$4NC1(9{*NOfsD^1H8WtnER*2F^M1xH$~FG*vp7F$=Dk`K*yPH6>|d+E
z8!nAdT#`a5mYgCEFSyB*h@WX9qS@SNE5Dr<$a%@0(G!8cf)JG`zh=JB8f1Gq;h(4<
zDp6&OzhG6b;7BkqpKwUer9?nO&oM=;&}lqgjZ$SeM!AM(xZ*j@mAbr-Dvz^ukSz0x
z!g(c1c3j{7pB(kfXrT8+U;?r~T9jE0kD<l03=wICIMzOqhclL=dIPqhN^b^_u#fHz
zuc4pV`1Nnnp0TAIX${)y?9au2z~-da-H){Pe&L8&(y-uzF(ca6P2oBq#B4LLugl&v
z<kST@eDVh6Jf1^;M%X!gA906)AP0XK&(2C8x__<y*a<lUGhT2b#hZQGX>h?g`A9(`
z=VsrnyTY(0+~XkRT@5Ch;Ls7-pe-T!=?j~Dni4%gFPL>13*HljB?Qza=98u<aLBGV
zbPr@yq+mOj;H)l8E`H!V?XRF8>Jkhr7g{|w%vJ1}Y(1h%zRV9L8}M#&zv8C}HtoK!
zZHoDPi^3US=82qzJj4caExld3lqsL1W4~VYKtKWd1}0dhb>8%~+A?$>!K5GI_w~de
zFG^>Da4nsqf0Q)f_Nrm1MF-hel}GUR+H`4*$z83OC$@dd5r?_|i`pja^8ppM%7@fz
zZL57J{LW7QkFBeYi*k#$*NcLIv;tBxAP6X_#83)DDWQO((jX-bLzhU7pg4qpl)wOj
zbT`sScMU1sB{{@90~q(c_xs(yyv!HpJ7=H0*IsL#!^8}a6`c3qUn}9dc5>WP1!(Kj
zd}=Wm@$bGJg5!~^nlI7V-8s!KMYbP(V#Onu-dI<j6)dO@(wcrCf*F$vM2dJ_GpgJg
zA_6CF;?iEdN%xqhGJ+I3Ut~F%=-0ZXMyKVhOdelUC?I2_mQKnSK6G!jo#-rsd&DI(
zXy@=PZJkH@lC^pfe$3KOnx@|o`Cr73f`8~jCpm1y8`@uIkf5obVY=CK6WV)$W1D4~
ze^i-Rq=;x=4dvG!F6@*~W%{wPd3^jWl_0GMa1^f?aJpYO5N}qvR^5LgFaQB7a<D+P
zauQba<<n{!l(w}nV_pGr@B<HDV|lVGOq$U6<V4U{$L_#q7~t$AXWH)htlq<?hgpq<
z``yIgUcP3+D=Ndjn)>Y@$^0n?&juWPg5`Hy|8n9M#t=3c$Vi8<197hb`$$q()SVIh
z+{vQ128PZ5HV0a~c!k@WC8WaOpGrX;)2jErI){vAAJqV{a-TuM+y0&V>>TXAcb<^o
z=c)@hh6~;%6TVfw2@dfPLT3V(DIxN8AyURrXq@@$nQOfh;X?K<_5lmu?ukUl6us}J
zq}d2YY>bzU@fZ>1&xF6THfWFL5Jb0+ui#l^n@4L_o8lBQ2`M3kJq!#R??ph+c$mt_
z^P<)I(4_15RSAoPqWczuHrYM&Hti*L=GbQMe4{tNR5RJ$i&^FiD}r5{1c6KaVb5O9
zeO9+niw<Jb_0&hZrLUICX_EDM7&w++DwK5Y<qVJ+51Y>kS+H4OU2L)Y$d~kG#)sDN
zi%y9%+E}lN9!B;j(JwTj_hI9E0^>&Qtt*i9=s`NpL=!Gn&v>W#BWf;Ro*I`bD|TZn
zqSyXOL~~S0XY2}qtC{<ZT`fu!X805?V(Qre%I)%$k88MMoR*8;`Y@RND6$;$e#09@
z;Lp(c=?U+!=98wn>VNvUh2Gx6@AF5hsfn9?b3d>rMI0n?^D83FBM5$MS7u@PmUb<~
zOF`QdQ?+upZN$l*wNI{1lh@CT)1zk%CBJ5|6OvTs{u6Q+`G(lRf3|7U`kNf*(no}j
zQr=}+vch~JX%r8O@x^dyG0<n)abYeFAANNBA}M5GwfURyt<g&Z%Oy(peT3WK&H<Ui
z9;G{UNM6>UP8;P7YM8^mW2KX!KkmpSH}f^oHcB}D%q!2w8of!))IQufN6r|2es;aj
z&f$$?IdBw1=)ubrhOL&Z-CpFVh&pAF+2P(^>Sfxkmi+Lon3P3VmuNkQ{6^lw5GZPR
z&&5KvF=V-Lp!I_D!DP04A{2FScHw-MYw^bSDMxYkdV=2D3)6#m{}e4&a6iJUTv$|U
z)PsaBka-p-mL5_h=Qkytto+NrSN?^aH&ac}eTfLzj`sJY>L{B5f^%|=l3zRp3)sX(
zB$eA?jkY--33Ex`R}ymaO@#$`UM3A6ul6n~qA#P-)9RMeGaC|6Xnvd13T0a|WPjgg
zsJcbhoYDO5EQ2mZSvGJdQi%qD58Zq-FQ^=|Ej_Az!%5}&=@SHqy?LuI^ARh!()oAl
z(D|q8zI?*Y@NUDj>wZ68{S7&~@zq?JL0)TOu4{+`rBGDtr2w)G(=ehPI1B9?3m1yo
ztLYPspQLjYBzdjWst&Eapf}D*rYsc_ph(7q6*;<jPw=Yof)5xjTrtjT72MnE0G@=|
zd^0EZIPYMq^TA^;!jmY@5rl=~mJ>H}cF|y6X1bVu)TomVy0K)zOel=jCfbpQ)6O3K
zOcE97awnK^Hv7bB<U1KFGzZbF($dKVvJA+l_(x16G<(7BAFP^Ls=PUhXCa|8pCZv=
z_~oq>GM>BcS;59<LzoS(qNrNx1oplYf6rKy8UTFB-rEdGcgEZ1U^{mo^T2L_GKixT
zldGIy(oNGOjR`eFUzdI3hwywpAxA2bfr_rl)Yjx1v5)70a!b@qq7ywb3H?Fmd%lp{
zGR;Aca)Ynq>WKZsyWqsDOWqD2s*tbd#?&}J^t)LcfPr$h-5*jMrydC(vwlD!JXHod
zKzx|}M})9U;)LL)A`{c&@v<7Hb;o2h`YT=qW0i6VS3WTA{R}Ivz<JQBr~T6jqUHU*
z)+lt{pWs4b0I+d^7k14J<rpXwTu$yTy+77+Ru*Mp08iJlu;`Ky8E%BX=n8MOtll7-
z!igeY43JSktly{LlGWOo5j`46FWY(%+Daf^8H&{1yW?CW`N*L&{M`LFl9#<du5hlQ
z1B1d5ng_6q<Qk{Rnp#*(h*<D#!;5-vic#`dmV;To2xi7nE3%!JQ|5~?STPefV|Z!m
zRy=qmB7PF92NQSQ32~UzR+WsgbUtjwoq2HJ-4X-0iD`vhq~!~3$hh83N+@*mnL)6-
zm3HfN5G|_sSE0r@{o?0b@&;ug7T2D<cpw=b?PD*33YdG1LtrsLZ$$}X0T_?yuR)PR
z0jg6;tC?I)gr<+6Q4VJS0d)4d0n@qoB0zgQrZ7Y}F-K0bk@wS~gEYQ!@2bwhzG;mK
z`35$Uw|WWH!4@O!e;~|s#3AytUp~9~a#u=!ONBsd?e@$~NxzSNdr!$zcROB)0*}IO
zAh^+9M(RnUr0Qo8ZV9e)m8ln`Am?J2x#X}^i~`N(%W=U~GeHUw1f)Y!DcLXIEPP`u
zHHm3j8xTcG=O(4VAm`*zYVWB$jU@-6BI2$wAX%um*$2qLRT146PZkdSU5<_0f$}Qb
z8`zmZI_mRt%!6<cB*<gj_f|`)t)g2RzEr-J<97S7Clney4gP2yG-Xd|VO5OR-_b}`
zr#{cgpM5QV4NMT-6r$MscjWm^uhtRIWl*^D7`A_I8EL|0I)nQ!rmi8m`HQ02kJ;4`
zkn^h3{*aCL<i1bo%dbNaovf6UI7G<jhZ?G`S&ceOmC7ZIT18cS#h+__b6q>WPRgMJ
z@n-GK1*G3&rROP%yrO-CEWMpANn|x`i0(KE;HYg9=7)oeZ$YfHDC!&(4F*Li#O0Af
zuI``|`(w>+(wVBEhm}z9qI0s0A9)N&>sy#zssL^<Gk<hU{_<<)y6;I<KXX5s7vP8h
zT>bv`3LC2|3P@l9aY5|-W7E}A%xru>v4KK#sJ%$>Tw=r`C_mtBdO|#0MEQk<{aC^D
zDt3e}{@s^L%8r_X%g5M_IIv$tAY-)S>ywHnToiR%0MRpNyUX2Z6(ACV8*_m9CXvu(
zdFHWz2+0KC3|^{;A`KH8qUfZIX>HI#5!avZrJOkcgs75YM#V(#$I94&ne)HaE4n>o
zJ?u~c7W#NgiY%BdJ_N*i6vm)^bJ0AX(xf_4F%oZM!xR04LYAPJ$*fm~is%l;u<LMd
zGEkoVO2~oQ*;tccgeg$N$JmVAohGd2KLD6t&U43><MpGXs(39s1CS?FZna(UkK1Sy
z9Tnbh7dR%1JlE=0&tG_~bVBZ_`W6n(nJ99~1_UyLgS0Ey3H7fBWNv0`_oFL8%oZ&U
z;*6)z(OLvpX>oghl8IUT1dp(eqtf2q){ZoZ%p4)5-19WuVPq826vBYAYWzaUy>%9w
zE4yyx#1zRJ`J-eBx8Y~Cq_xj~!1b3-a{lJ41)F!pEE!w|=ix~zLKzxJ<yWTV7~{kg
zB{VHs;ak>bVGQ>@+>06CA~vooGO434_DMi<u1iDXy<IGM{4DRit&~l?&_`~4-FaVD
zInSg`Xv3e4imx|(y0GdcD=TX@;3m7|Z1$@ZuUp;PifV+dCtqeW{>LFj2XY4aK9^yT
zhlQ}S(!*OpPm1x;hvQ*;1KjM3q#38ln&3mq#9`e$@kKII(h<b~GE76EYVyJdkNKV0
zR$5K(>zNyS?9Of^&+pqmMU7tX*$5#L^PRu{XPx0|Pacsf2#sraFdPN>uG~uEIh+U(
zwdIq5D`Hee+!oRb7MDv_Y-xU^`nU&wPyJ`QpwhRpUE7s0j<WFk#pMV?hAp{kQ1j~@
z4(cIPoMvNY6$iF<YR~~0E~$E`(bk*#Y5jml)^X440_ZfgcXr^m6ng5#a7(oIOQI*@
zyIc<&tYwP@C276hAuB!bN(`^z6GH^PFz4&hQHOqy39n~1yolnt^ajQA>b2v3PloGM
zYj~!k;uqozQ%!P|8V*xe421lt1-R3SLf)o)e7A?K!_{18u_t>_QZ4$}>?}U6K*eKA
zaUR7t#4k$~loeM-%G8H3j+56~!?>zjg*KXl=N9`#6R&hw9ALKXFxu!wRB>_&0v1K|
zynYKMGFkfNQsWQwzf12Or}zP|-e0vUtFjGPAX^=Ya#VK9hlS2e{Omu>)6Z;vVtqlN
zbP4C<7EG`la6gSV?NBE~+o2{4!Yp7j)`wIHccP*{?sCH5zoscKQhE~(D0J9H7;8@!
zwbU&52#(vsc6Nz`QC(o`yP)uZ51$l5HQQ`9Qd$(T!rWJ6*Uv{Y2z#kTqFuVbRZwA5
zzjLtSwo>)&pj<{<>a5}ud`3c=DIlkSM~#PRP~$N8=~|hz`UR^~hx%Ujzd{)A7Zz|q
z+~d8yVr|FMS=oBEI1yjx*iu-D=Zt6Eei#gN>Pyk08{%B``1(B(<m!_jNr#E=FnQxs
z{*e8;8p(g3^G4VLVw1D3${QznpB?nn?aHY=IGuW{l_AAG8<lYF=%mI+zS&%Olt`m6
zl3<VgT1Qkyd~+`0d`SKkf2dAHfY7?HpTEHFWRSXWHjO@+5zaIDv#OjIFF2nK=G)*D
zCdSn(G@1LnWF^v^6%v3r8+Hd)XXzU3b+a6ck@fT(GnD>aqm<bUf1t9xFGrPV682Hs
z{s>FKt4F=FQd_rC8qIZ^_k_yY$d(hD7foG71MFzX;A&6-?<stM+X=|m!z;oSp+$$~
zfJ%s6F>&vH6CYqc8@|L0YQYV_>WcKJU54yZBCcfMO1C83nRM!Y%58|3?_eBHSvG@k
zvL^6HJ>%mJs}}{Vx^EO(hu38zoTu+Kp6v@aycu_&vz9ZMpQ%0(A6|uJezX=|lzNf5
zl&M{<=E$F~?J|F!0r7<i^1z;uft4C@mO>`A{*bG&Kl;6sEWbYyRPc>HWd|fU;HP#n
zbjzKatAb!bI~Db+;1W4Ie8z9BHm^E2eu&~K>`4n~w3xmsgp;M1P*6qkZF+0N$jEKP
zo+EU0($kdnB0$5)Sa2rNT3%wrs1@PJsL0%t^*UPw+f6%6_5(R}Wy|xBd5YxE!d4<-
z{sVE#-1m0@c#V!NvzFsGZ<hEd7sg4yB!K$rbeKq6jcZ7Re{0^SEtGGFpWT~eY5ib(
z6!6ycDPyD{^@Y6f&Yn}=2EACgv_7se=V!(_kE-KA_LRQJjfC-5(JE>%k+i!j)Z5X=
zX~eycVYtZS`Q_8+XOhg^G@Z%NNH!0JgeyV>G@D-ic1(qJA};EyrOt0NWZR#&6~mQR
zugM;HAz@{Dtb&*s>H*p;*Az0Hu=Az$B0Nh0rd><b;wAc`B2qb`eQGU1oL;x69wn(=
z(qtA<*MjmVDmak~C7INp*;-hLG3BOV_CHda)QwE6O1grd?`1-xF*hGw@mz8sJBoCZ
zEY*CTL8-)GwAl}Kmb6ZnzO@W`n&LT?00qGykV+40-5BmVnL<eX-w7Qfbg&G(aInX?
z{o(FR$$6o;>Q{m%jXev(6}&LcdvW=Mj@W4j{)!CucS(itX$4eIbV9B!EhVK4NDv6D
zuM>O00Z(;`Z0SkY$)5Nl-YS$sQzP?>_Gv&_`jb6DLP+O6g$+f+<pvZV06sm*^`7e+
zF*H~P`ux`n@6q&-(|z?GUgtm=h*b{^n2)~<?9HEICQSS#VCMHGD=|9((E(2@Xg3g9
zdasB!Ge}zNrqDUBR@!z*kQW`r1E~R4P5_QovDn@K4A+j&oF|V&;`w_qot>0F0;g!0
z3}ov)a07qMNHITLVpkw~FsHDErH~T{OcJrNuw((<fR{>I-pS*MT`U1Tl0mRVn!4=$
z{Bv0VP9JL<3b1&Lj8C^H5c}r?9dWV4hxEc97eh&IVnqgk6kK&Z6KEF(z=14xnE^{5
zJI)uxe(!yIK;*Fqh~v3{Q1lHPrZ#&>F6PT9wnqmYdz$uQs&h~RRJkV~2m8zKe|AmC
z@Hv*q7X@afpzo+eU_<Zed-LS8a-LrVyJ!AfS5ir(HkML|y(x_Q*P!wu0hv$_%U^PO
za{M!<lb?O4GMjCW-D+S6n03`So(;Zd>3_GJxd<D;iCZS%z_jI%BQGK`7~u)1@HAb`
z$OHFsHs}|z<h=erulFz0=;mKkdir%kF!;RS_%78_`>f7^3&-CGN%U*B$};*hFd;Rw
zbiABGkYHRpU?&Vo+4zi#!@+Qw2YRPd#Ol}Ea3g^{(-5f2;k#W9Q{bx-b)1SJaNW~1
z$_9Z}>Lut^BY@88_~E3_|5^3%S4wP`UZuUrv&v|UW&eG*pv{FoG)SEdILdwo0(QRQ
z?}+i|x1E49Zvr|yy!NYFPMD<vbyoa8w+;$nQz>@Z1?W<P<ImaH``RbpkMZp9#dX2H
zegB6ahY9#}pRn0D<Uy<~$~_0S2|HuXuK^hq8k8}MQ=yvq#0-*Hzjf?D`Fj2mftW&w
z-%Z{Ch1(~xD%cx(Ywtm10JW~Dab5;?8TkH#|F7<&eynce8z+E!j&Bd41k>@9tmCgt
zE#h2w88rH^S~j>X&^kOmDV()ADI^1zr@#jWca$dhJyxA6nl9L!DGN->=RnC5^0$VE
zLOREwEg#hM)gvz3>U!iSvj9T>>xL21Kp~S2jH_NjG{Dnwp3(}`iaPbK7!DWbQBfyi
z9FAuKeW3fF)hc9|4wwhRuUUPH!F(e<oo{I`^nl@cZc?;kqlW$XIX-FG<FPqU?DlIC
z$$=pt>Nw@r;<|I)G->&CSN{Jl1a72#!#=1^Oo55_)_3NZ*;u9Dx+L~uAM%r7bNKZZ
z;nJuQEp`;>emw({)c*{?P+MCBUmMUgyu=QKdHF6=>D$vm@c#94FbGcD`Ct%U08z+)
zBv7bKs=Kd(ZRR>_HC%V~h5^q7J5~Q$6ezg}-T|P&GaV|l{9mgNI~tPynb=lvwA&%z
zVg28!ChahOJX64ffM}HMdf*trWAGk}+b}6ar~W^a6Cq=-lKKqWDX`A?6s!XB5yVL&
zZm1e7f;zs#_dgMAu+TF8GM&iK-sXY<Fdwox0?+SDd-9Em9BN9Xfv_H)@&65fL-<IV
zDxcGsJ6<XPpz^h=y;oVm)gh;`oI(nfjg9)lL(>1>uPKUlw$SG2*Jp4{y1zVjoFx<U
z^*t$VFR&zQf~?#aou3BUGAE;X{nzY}W!wQ(<`N(+DeYmO^w(^Bk=J+`ccCNRhl(Qc
z_n_dMu2^%@?+R645%yk0km8eZth&ybeaZP?vrqnH#C>1>TAM(i^;rg5(x>S*3=%<M
zVf%~pFxbgneU1TfM!S*q`bk9oD~6Tt&9g0ZCivx<40M+LXTAgT))`!n%d|rMBhDLg
zzZdggYYXU@-Ux5?>mF<9{tnGyq(%)N=zGguoE8AletG6}QU3{IBrF{Et7^sYWTz(=
zLHP1L-3U^_!W?m2xa|a3_-SrOhuBYveaXK<C)me)?N6!Bb6+Tlcnw;qBLwZzO$Sjc
zrl%|UFY({mQXva$rBgPKU1F!xiRmTDSoFxllhyktVFA>3bx;uTu=_wWu)8!-M?%x&
z@)f4e_zAiK=VB6{Ryrf8e9_);X?12h!iw9V*#5ZI(-&c~CPg>kAI@V6T;#?JPTrM>
zOK$)-M^m_>F<iQ(I5pE|{R7Mw=n)GL-Fe0;#sk?2PB&;IBX_nU%uOctZ1Tr9?ru#P
z#K;6P)+$noV48bfiW{RTHo|BImpKK$EYbHaZ}R5bZa&!7us={<U)Xdzk`Vkc9v_AH
zIT=<z<Z3<a!zdG&yP4;_rbERA|6;Q|G_WUfRO(W$Q+stmIuQI%@E;jRhYF9|_axi<
zZ2?h;?w`pDCbd={-HL0A6*n&(jW292ETLa~oV$Ij^+T4M0Xd8rw}yspQ0p?<eCex#
zXr57-)4)Tw@&;%qnW_&%Kqi3{_2WZUaAgKz+Zy8D!&!#KADT2Km;(b2^h|}*0G+E{
zrfQwj_@>hL47(*GpZ+u3i+WBY1)=KeO&&`f@m8ZJ&%J5bMdGv?_;Ar(a3wdNZ%B*g
zy<jht+I8pZ!ts-1AD&LwwPxJb&4b%`b(`D-?L>|q=kw3Bt-qW3-iI#x<Q-y<M%nYe
z4;K%r#JJJgvc2*@mVi#uhdM^?m{k5tW!2KN)e!6RECTBEY$0aZjBqjkE2E6!tscid
z^|UDkySyVo7ee&PsMDax(Lk50i!Duo|8~_vQlREacAaS6!O@fYaA`NgLnY%pr)A6s
z@L2ifFX-$)=LyWgj5kU~Uqo!Q<>1XPY7_2H)~lv6pFX^zbGLpU9lBymu<GsMU{koX
zkJ?7cfq8~Y+LD6ph>m*lp4U;kej9Xa)g7<@bH&kcuk+8x{n=lLL5(oN)CuBS)DLbt
z5_(;wXotG!FPd#HR@RgZAbG<%@AHO@6=VWY&r*h?on9=IZRd(cZ{}Piohz6*XudsB
zwz`)**;f)br;&d&>;xs9tK!+t<`r#np#$?l@$#I3lS{^`)9LhJtd%ERF7i3Re3(cb
z8I87N>Wu9p$h(T6Ga>95F!i%ZNc$|jz)u&~lP+p0+1U-)1<HbV<&I^nRs4=X`k89C
zGQta=eS|Kw)U^+3xW8O^CiI|Xa4E;G$epbGGq?>`kSrK8)Y(fDhB0MnORks~XqWAQ
zb(dcsS%*1XI!_74FfQ}+p!#T_j-&j%D!FRZ@xrNLECn<<iws~@a6W@Xph2L2sfJYT
zd^iMrh6it6Lcld{JgcWRH9cB6N^MCic(K5io|%tXF)+RR;lb%E>f8p`S4p!QZHa#M
zXq4A^>v?~1|NMzM0}|kUnQ9t>1Z6&npEQa?6w?f)b_s5hpeTP0er_3j^5|ceEqkZ4
zn^K>AecHRXg-%;KgHc5byB1G5{vJk2Zse<s)f-T1%R-mkxg_lcov)-olf#W11Lq^#
zP7`NXehZhDq6H~#AgV^13H(m+jZJe$@A8{VsY@X$FVL4bZYdZifir_nF8Ma^C8S5A
zwimYk7N_Ww^duAGR22A4caQ$|aN3io;Uz+Y<>%UvgXu`&VeXMj88HuB%bFq<AA^5d
z`w89pMq9KZ4z4t~_o`&OZ85f*Fb6L{xQ<q6UfQ@tczL<RG%Nbot=1l+hwbu82!#gU
zvM;HdLDV-=hD+Mc^qLjWnP#OcKO1NBEc1RAAq{LpvH`LTcHjvUpyXUW`V#aN@pH@-
zGboO?Xii9%S>Y7IDDyUjcEHWe*slF>D`{ivD<{(RsOezn<Pizo3Pwg1hT66&3^)uR
z>hRX`tugnL2Th@;v41TL)bk+auyJEM9fh@C2F!}_kzh(}Peo|}50aq7EG!TD^QIHL
zA_n_x6uUFGoV_yph>S_+0H~P_+6ibJLLn`X>E;0Z(o+RNJs`^%S>>~Z?(-h8@F*KC
z%8^?h>={|<ln7*G$^O)t@U^TjA?RRxjcsx4Dc;~=8bPKYR842a)?qLaK9^s+mwcz_
z;jZ2I1dVxKH7$Sl)~lj|gOw~c6P-|bv!n6N8{m5m#@a=@4&vsTn+vOoYPrxkw=-F}
zMd%3sn&Cg<S=6CuU-`CY8@xd#=%d@&xP-C=Tv3kwx#>{_&s13bO9ME6)=@3S9&G3E
z8coN&i$c_>Nds`M06@hhDu)43@D^gN7MGK3SM(!zO)||veNsM9_!#>Rd$tpO`D<S}
zmXa?hpkoPX&G7OByJ@c-WSaJ8j+74<8u@K1AzW6WhSS#t*O9u525DP)Nz6h^TMMH>
zU<$kn1%K1=^tL8Qh%V<a$2d0b{hZU)bY1gWHU}?<og^&Nds_?dwmRl7Z#5Zw9N;}t
zH%y57IAEaZtT$@bnRCwuF_S6>GWIUaPjHfwQ2Q>v_6q$+rcS<5XI(#Xj{JcfgX5O~
z^SH}#3*Vg8lL$FQh3SPV%)iiv<k9t2mghIRB~?J}?7a}(dWtFqnqVi+3%wiTW;QY6
zP#^8E^_+^|@PiAD$ItH51ZdGYyLB<NEe+13_<Uw6pLcJK9;x-T!gXu){spk;013=y
z`Y|;=V?z(@(_p-h3ssQyRWV<=QL}7$(h}t`=>UJ1ZeG_78~eOe{BWM!D%iYGmLEC;
zWEz7_psqFnS-M%Y60Ucx_Ist16a!`}qJepLklpqcgxZbE*UqagIb+gX+6&CHK_M9r
zl*<F4cVn_VRFq{ui&b_=LyptZqMiHNr58`r6n9zFwd)9`;{vBm^r%!Az=7a6X3=f8
zZfw$a`jc?Z^VljPANW~pvof5PV<6>A#+6P%beB2V{Wpt6Vrx(c;xy$32YXV1)5nB&
z#yom~#mBRu(-faRn*n=)I0S6)l2uXwo#+TQBmb)$<EH;N86;q4kDdYJDJ)y}S7Ffe
zkIWt9>tJ$l>ZiX1s~{+be?6#!1zm;X=Bo%UUGI0G)y5<rN#XY^o%LO8fTf%Xd<Aj9
zLG<xs(>EmSq)k>SeeuDcMC|zLoB<k+b2ps!=8}euspF8?zYFv|sRK}%7~t1{#T~c<
z|D=YmUZXxqQ%G-*IAsU}`FB=BEc@Sg5Yln&nu&260kUk`h{b<TCr$J56B$C*KFl#7
zHGr620?SE0O_yH+_p{>y8%O}sfL}=##VMHK+3^14tC1MWW9wa!(~9zWP8}G*#kdc3
z@2Ctk-PCtiTu*1p&kqP?9L63P7H(lB!~5%Pm^58?6VgD+i&X_`{Dx@0-(ym|`~gM^
zbl!4XhnN+#;7X}(5R=^7+6D<wW%)9mmKuq~EQ{D29skDf+6xp7ckhwNF?RL?+@}TW
zKe7Ny@mp43u+=>ypetd?7=><{009AoU5m*6YIXn1)1q1IrR2$d5e^@)1r>nLbAbzR
zW%z@~*n;-glmeg>u>E=g;ESQLOn&^+5?}14)aj4m<dX_9pvuFdu~!+$u~X;t<1u}G
znwAX$%K(6g%s@r@5y41OnJ72fKgiLG{?yht@G0*&!qkezWaPB<r59xICDTDvz}API
zazbG;mfvIk{;t}zs2dMI_5(Z3kXCudfALWx9OY&P>OVQy1Xh@g9o>(&G|NY84t#?$
z73DpSTU2wdD-yP+*RyX>1C|PYVn4=t2neIFUs2`+@rmHa(o{$ndd)L)IQBwmUTmod
z?t4}YXt%KERW}}A^lk2ru(@qAjp80TW;f<gFD65sy!;#y%kh`)fawsRL|pdzl@x^a
zuypna29|m3a{M*^6le3nG6Ajzu`WRW&m9O`e10(S0z9;&!S$%suWtS3?3kE?<+o19
z5%=vESGTFMt%asTgW8$lG1pPQHeiu}+4oz${aX4sf+RC30$3ys<Ri;>2?V<T9&w;+
zPR16<SbGm_>#d}M9FqQFFwvl*FZGbJuOG>*uJ2a9d?tcdHy@nO+#nJusEPdssPnH5
z-+1vJcnH`|EfJ!LnKh<62fxD_0U(H-U&p9Gu2Gi>aDnAD>SX+10Sl|z0H<|o0W36&
zUA?$Q2bAt}&oH%)p^eMFq=)+Tkyc&@Q+2%g7UMdqWv>!$YnIEN-nA#?O1}M?l<ksw
zKqD-L5#&*?89zx!^G`hr{S#=yQ`Jj)r(2_pfp$7wE}Z+uRREJo*MG`eNS)k|7>c}5
zAL*E&ZY6FUA!zP?TQk2|1dy4IcQ42n&_^vcL>VueaF8Yko<;y|YOJly7J$A=`uHhi
z{+bJ<vJ7zng`t`SX6m;<6)TO$q&RnuuL*Yiv=lN-iif9{0Qg7;E+OsWdJ-Y<ra7Rq
z`D>Z8Q%D0qBd6!93Rs0%K#Gr@L$wOrNYL*;Ug!vf9Tp9|t(xyIM_}{U68{d?p()sb
zd95a;LA;H0Ik1_kz<BwB_5t=9EUtlwVA0bt5_(y_R!4QbeO&YLk^lQDz(dt^?3;Tp
z5J&?Zzv?Y4VU!^JxF{qO1z(l!SJY7dAQ&Zp{1GUw{?~%9a@pTmn^>wP*USZGvh@(*
zJfb-e^|9l*79@+>M`FWU2kc*_i31SfB7a~Z6d1_~>TtHp@O0}U4<Yjbn*j>!PXFii
zedIg)FVjG~u@IiYO$nO6p8ZlC@%E-AB^eV8dYs_PDDE?ovH-m8I3{4Ri%`KbF!Qs%
z|2O3GzW~dt3~UHnz(c1&`u`brWzuAY7!fSy{0yLC$9vIf?Dr(I1$2i@FjA_3S*>F!
z%JKi+Tx)Z_=hT_y@hwSqES2Hc3g<)uKIF@#!8|`X{WJ8P*gPM+^bb(m>>h8sDF`yY
zza|J%vrjJY&Q}Ev!92k`n!be~!2kCLafll6>69m5hs2qQWi0=bQ4Cnn(fK$z&~yKv
zyMP}>N&|s+E*AL%CQmxZLjaxq3FOdutdoz(&KM5XVdYk*(k1MyP}Ov<xTRj)eOX97
zOQ%*}2Y}{HL(uUhls&?@Igg;gV{i!9uwa~*id}HQv*6*U>>j1e^j8x$l84lWe&gFH
zL+M|u;uXYZWn@^chANbL{;xF^1X7(LETab-kS<el*8miqLPNs0|2nDB!uJSVcq_X`
zX+K!r3(fPOy#!t3YvRlZz4bi1c1uwRCiv~%nE7<);c7J@pE2IP0@dfJZeAXQLxn-h
zr@ZG5WzR$a!jEN>4DI$LTA7>br7+(C2$714Ghuh#g1?~$fJtpl@9amDUH&ukkK-Az
zIa#3<VwU?f2~zCi=S4w5o0}O6lE30>_PAp)b`M~M>L#blM^$R%UYxk?WCOA{TkjzT
zH0Sj|m603&9@_Yx|Ht`l$I5f${iX%O`hYKz($8L+k#<8<UjjlVFS33%{tK9UwmnZ&
z28@!T^rh%r;1X10N2=y!Jy`3Q!H1@t6#Hu!unAwjb|<r%K(INaX93LATo4b?pdbAb
z+uFu`V0v@A_bK~kO&&WNo3+j6Hypx#(6Nn-RaTvEiWmw``|_m$81~Z|yq$Bp?)X=z
zxYu|o<1`1mXau3zY{<%2`RcN`wnnqGAhZS27M+DGfYtKt@ycTZtB)*dK9o<FNj7Y(
z`3y9W5VWfLlAT8!W(GLib{}GDIb5{?B%Xq8uPq+{vP?#upxK;sqO~gWyccoQ25hbr
zSiEeNj2^U7;$vyAJR~lHV^@O40UgTL^h}Tu2rqZdICpeKF^f62-_GFm-^Zg-eyk4%
zJwsK1-m8^}tbW58J_0&1TZx({iowazJN}sBDy<)Tiki6|So#Wh7McPVISqrFyAgcm
z(dzc&Uio0{qv;M;@wVMM)AgwT3L0U~c3|b2on^?d4D(kxUJ%MYh@WA{?TfRh%xYQ4
zlRP3zkPK~J!qEba7F#fg#qXy&I~ARPdE5{;L{VDXN7~ZM;Q*NUJO_M=D1<WUMpHXN
z4k{eS!d|k-O^&?x>g%UFxpC~~*M)%xU8_kf4H2RjoSYCk(p+!`x&TfnF<U|x*e$(0
zI@q>bN=&>=X>LL!?6u}a%xyY&r;puvKxSC7M0moV#{_7ntrm8CQLBePQq<<Z_w|6r
z`C@v>vK7bz7IOlktQuLi0IY1DAM=T*J~3?zIB_fkRgQt<x|`fbna02NnK^(y<O79%
zi%ZA)HJ|@1O495LoE#(`Rlw|!6q~ezIIXzZD0N-?>>_Bz+SXoC>BpJ_IfebJoh3q(
zPa!?-VtV^A?)#&dqy2gbnf4C#uE&obUyWJ`lcqQe=tbgKq=q=-7U-wd>YKhk8hCGO
zH5H;VSdLj<h<pC3^TUM*1_~_-2K-2Zj}hzGashb$Pq&ha2XCp7>Kn@440T+$nd+*0
ztXTp4@}kzfkuaE|ochdX&cNLvW7quI2fw0>A%yD%a%c{;(y{@etPbK+{MY{DiE)th
z=DF^FM+~2Y6p{`$Ymp9OSv+o*Ma~cG<vTj$?yv7hr7I0n5sYsSgsz|n%}JFrJ)rxv
zIz^iGY>}+*2+R+UfPvCdr|DYb(XDM<sb{5au2q=nBUxhn`=qri%!L8UXrI3C2^w$e
zALg0vP-u)hZcn8(a|zITcVMMYogN*u(xhR@G?|gxySMj%B5HY10qnx+KCTuK%9}Gy
zk;w#XUo!>7UhqO*?OT@Z#BgINeC%n%U}R@n6k`)u%~u^g10r5Une^R4b1C*n*+(_1
zjjp=dw>(vFRd-9{#4l=vF?IkR<6#1uaf)@La>o5#=q1`9UHc8TQrA_AWD%wPm~>Oj
zgja!#4S{0MUu(g>;bmO&Ote#LS>1T7(%+kd0j`l6Fv}*5_%#_C?9$&;a8+SLTWI!M
zUz~Ey^|_n1z@O5qZ`DZyJ`zM5uvvwaEf<1`eBd>&^QV*#qiS}5<@%1|H6_Z1>l6&z
zM(`kKyQkgoIc48jy!;m<0e1$L3VY?HbI=+V=Bb3CU}9}(rf|JZk*MTqPlgA-e!euz
z=vu3TciX64e^N1frQ`NyJ+H_)b^C+Nes5h7;P%AsHGF|Na_qg|eKHNcTlooU*i9uu
z)yGu8texyUfLtFvosXV4i<V8<XnIogiD7&*4DV*4Mq%l#3G-Gz$IAt`-Q<c!QYX+?
zOnYO@3sc8+l~p1hB&_ZxeNFnjZ{rH`!l<=6H5pW~Y@VFnyoYVQQ@3%xu|mm~&2*?9
zrd2y87~D%rllEv}b(Ce?bbXil!R}vqA#%AYsiHj+)Lq2t$2kV~xX59Til&XVN;@&i
z0SSu)>636APq4fpJ_XcU=7N-gv7TVUfvdDzFEDQ_0U55Mtyve>!}|4@!=KDwH7m-?
zR;w<V6|H<ou-+ZE8@1V>in8f_Zo8OO57n042Q;VxERoEmGYg$-q$D{1C0>o0Ke^jp
z7>LV<vI7H2`mz?^;pfMS+wZK7FRLLEwbZw;eu5>^WU@q!S8wHTr~ui=u!B0hLn0l=
z2{0hGLM!%b=X=wPrDz>cY;0&HyGVwaLtuP7cq3HpM=$6e%OAVEHAbgQ4BM%7Jsyq~
z#}fphNqzUdz%+#*_)6+UbGd}J8a@kUApJIT!X=M{cgie-yxMhF|1mEhCc{^))eZ5m
zq$t(s#(n7<`7@<}ng-;C$W7e%+CII^!`VXSH(2sUKB%wJz*b;s@ZZhv-+WV=jf1`l
z{OEH6o5iprxtfK$YFh!hrpDm8nc6X9NUn6mv!_p|=le67%DFfTM__9m>4o~aY@PdD
zUT2r8`lfnKl;(nsg}rJq!66H>*X}KgRvG<cod)cM7S<iifvX)xNOuv%ii1fK?nwWV
z6JcIHu;if^UT)2=0L$eaWvMva%wTI2FJX8`hr!p3X>=t>NcrpYpK<6e`%gmbd0*=#
z={KRb)%%HJFU3HN^?h#veK_Zz$U_<A)!N-?`@xY1hxD!VM^N)y`w^(aW^P6G0PLcC
z!4trl1*)xF#8G9XQo%ShJy;@p*IZJ}GSmtiqMkI@){MeuJBtF=?i;KC(?@L(KSb5*
zp)>>3F$dWqG*xhF-LpHuV3B4Prk%B4ypWDg6(8xtiQ1+15O8zcS~SA$;tP|^7w4-k
zapZasiu5me$lE}!gz5S?cyWF;D;&oKeDTBSxKhq%fOI~1yO~wf2QF`okN;+D7jWmF
zzPonU3VHqT+PQ@&7bV)mM5XB6G)^hb(QL}Ixj4{O0lZePT)psKLO-i^VmCnWE3w+!
zP2LxIv)LCfMQC6_kDm@UsF6HT|9h>3L6vrgJ^?{;V9mN7QP8CN6cOD)zL|0XpimlM
z1b^Z)Umm3B>!u1GF&X>h802mpN2BwoJ@HEyNTzbDOa?xgvPM~@C1vj0l!N#-WK-9C
zAu;!>i3=x%_rxKvI<*5r)MEGm<Vu_<JJXC_sQPs8!bq8u#Pd#<nH_6q(9Bo_d>z~R
z&8Z?_5~}_)obRH?Omy1}r<#J|)ZY<w>?NcWV4Gb4{V@Tc_(jl}_><ZbiPeB=#)~{E
z2L2{+B>Md%@aAuU++t-g*KaRsF6SiW2KFU4yC@$ri!=!^Mb-4FS-)E#tG^DZy@L51
z^vMca71=m$R0PO=p4bPD8li$rQQ!Ah<e0Xa9QOm<J-H-2NtnD99@aXVh*z9{%nu*x
zLMS}H>6DohB|i&D0fq9;&@3*Jem?yxNY*elID3!=na5cMKeA_VxHa{A%R!^0qU^nm
zEzHa_QYKl8I>Net>dxrB6s*ajbzZ%10F4C6#T8<zO2;IRL%Rx06wk|kQIKI$ZPLhB
zTn*+^_VtWi-Y~*DbcBO`W6!v`>qbP2Y`E3|{a`(S2Zru`c1;ACj*7ZXNQCiBLB&BD
zn-i}%Lx|N~shi}R-WS9i5M%4aqOMMj57n((XdP$iRc5-Gnc@Soe+=q|wdZp(3J|)r
z@Ut(yX&{IAf$q#x?T@$tkJU|CgO0zgt@cJsL2Y9%9y&{*nPJPPazfOpaw40yE-|1y
zE*kJfLbe3!-3qjSYLTsl&-Z7=W8`C7=+mdb(Qr$E;F7*0|9#t<BAq$e>aXnB|Jfv7
z^apv@)E^)IQwL+|3w`&+nMvlfesI<&V~b#A`&|NUs4W+qB0T2y(sSsO9^k6%-ueP+
z_FR5u5xC0D=S!JLF=r@fPZf*<rx?uWau{{Q(eveiCN>WPnFI+Rp}Ez5LMAbbQMmMm
z%YzzHnlbn-B~e$=ZerX^9o(q4IO;?G(#|!I5p0+Eo>$C8rd-Z(KgcGipD0ui-V7EL
zjq`9uk*z-#qDCj3-@r&M`n1|Wrv+4Gxq8?18-T$C9RR-%BI(6gp_+u{)}qd3Z!S_@
z9N%@fdR*)RG+%r1CSfoNzS4Su-F3?}E-7aiwKaT-bc&cAZwcSyH48QW)%7KB<+s5I
zWk*=_BLef)opq}+7sgPI3_g)(0b73bVlN-<MDpA9R_CH_g}qeU(24>(=*7N=&&C~7
zQW3BLCG{ESc@N|2nW%+(s4Gj?4YeFS0%vcu2IbmR=Euwn`snKHX#KRHVd22&P-)U?
z?2fv{C{J0>qTdC_yo5{zVA0lOCKAn&$;J=>0TFcog*(=87RnPwijc?e`~h%SVuP2E
zD;ncp{)G-%&q>SQfIjQ8nZ@nX9R+@@uw<=UX9W#h;P=z(e<qUR7z{AarN8N58eh*5
zNp5<!O?R~8!$Y@U3>WJPSI8yw7S9YqN60mAi2K}qe6jMT-&hf;-2I<2nO)H?9SHfF
z3&bq&)C_?3-rkOL{SxpvUb0Bu5yJZ{U}^+b^*NR_+9gZK`TZOjFWI^g-axaL)&bUJ
zST#6cFP`TRn5bHzb^XtFeR3d$MD06{Thrf#On(j#if!d&;T#N8@ihh%XzHmcXrL9b
zIC8=#<A(mf8<a>0aeSb0ox{1NTJHBU*Y1jj28wRan<!Nl%OzL{PZgUMFZdG&o4aJ*
z?(^9VETqM^ouN4Vq{sy6G7ODOQYZ>v-e|Kdj1IfE7;p!^DEh1-xfQX!aX{@|F@tLS
zYqvs*M{(RM=X97l`hukh|3>IxaXemRx8XGa;=q<g<5zf*R!h?I32>U?@zx$VkZ$FQ
zMA6VJz@D`40!?If)J_p~7oA_QD!hBcCH$4BM(`OAcX<m%PvXsS!F`WJSPFEVrX6k-
z#Le*p%3ndiQY0OE<<9ed(GEhmz3yjXiTlsr#0gR0M*4C1D9lORxhjbhwbQLz=p3%>
zYfHp?qm=lHkf^3xa@_EK9=>GAxr`fV&xL9~Xf5OUkJS;>-7NJeAzy*Gu&+M(Qj?c(
z0~PeHjzsU(1T&m_kzy=^L8Wm9bkrb7hwl=GzS9H1x|KD{<E#1OpS%_rpSaAR6RR*X
z39Flpo1c6NHu@-a6IeGZUBgR!^IM!BmA}i3G!}n(E%EZou2mxFMTFP(Yo~+Ib0O?@
z%58g%U1x%vo`~S*f51JK_kUx*0PC2AexQhb=<}VgxZ(;Ib~vYiwa|jZi`)J|&Vn#7
zai?EFI==h)YH5i%L01*{$Ip^;al7u@7i3sSS>)@kA4vOf(5%Aoy9Q{NJr$nt&bt#B
z_Y&IeC@m{9oyXLgeCDBxhYUmE51gz$HW5|Vp>OfI)NtlK1$2D_$M4?!hztyv4YO_)
zNP^@&&m;(=V|`L)pjb$A$9!aHNl@)j_Q&9k0CHBX;>TMy-iN~<(+;cpI%DwA8xQVK
zTBEi8Ik#}O>rDd^Smr)i^ieT~5J!1ksNS3mSrD%mH9e>M#y3Pu-AgV|xi8SB9e7v|
zLs7)d@D}@8iiFfK!bnoI!Pg*Xv~nUZtq`6Dn=!;P>VR6;WM+o*N7!yJUj0iad?t~N
zNW6|$BR7B8qcDIP14t-w)Z@Gpz!aFNkRy&J=W?AwK6LG|->&Qb9&1DcgW0nk?x`n8
zY{Grwr40mmv>Vd6fxduwoFerTul@T2=37xmFx;057IN4rtj)s^g_sn~n`_q7amr^_
z^mMsv(%*j2W<|#p*u>?6Cpc4^wIkS7w42=#D=)>nNy3Zlw8_uWq$3VAq8S}mc*|`L
zd8`kycqU0!k4?LPT}J4`iqHoXx58LQP#1dd^S@zM*|oiwBxo}wxLv)F5L9usV93f3
zT@I4rhy;S>r*3oUHx{%ZS|pYu%@U-km*(G^hEaVu*x4Enkb=wev*LQVyEsj7KYO29
z6v&zvqggLy#x>dt3~=Wg$;+Qs8rP|bfTL}bIb*YXWXerhm8b|~#Phj5r!q*BXE;?2
zeMWqn3Pko@52zn4dYtEyl@W1^9L1WGPd8nR)-2|&Hb~))!Hku!A5cHt+F&we{{>Tm
z?qIPWNQz33!lkc{yIrR=Eg}R=iik!B-uqqpI3jE|P%$^35rhA;;hQNmR1_^&PWtiv
zkg~V@sy$5kgARKLqK2(rU)3KU8WJw()xZb|_Elcjd)SAdzJuf>^rap<Fris2XZMB0
zO^7^UR4i`Y((<W@VP@)qmRHAE6G}qzUiCEEICdGy9kj=`7NJPy`keRjO>91Vy~##=
z!)>oCMoqm7(YCIJJ~JZ;!$mTNUCJn3e_QggoO)oM1MTogYTR+vrjl*5)=}Hq)3y#1
z<FXab#_*$mu`h#4*&d@jwaN4d*!B-Y)y&h`R=k?Xug)NwxE`GhX0$lF-g!S|%is$h
zp%c4g$lM_3h3Zfrm$O~H4ne_p?7||NmFo7&<xs{v+N3O@&^4qqn3{jp0RRXE-8dH+
zKvaH$-MnCACyluBogbG%rxC=1@JTJ!3&fz)^(4UAkyRE4dNe0nhu_dUckSZ}n2BzO
z6Hs`UL=D)lf2t+RG9K}v>Enp8o`0S3+E(h|gn=szM_o1$jIN_ngVfbsvghO3PL{2(
zln>mOtKXWs2)|q~X)CB6jZp5!iR$AUh6f26Ko<@K5=qf|Up>^O&}Xa{I|zKgeb1xW
z@ukIO*1Z=6Y%y9(C-$xHvSmj}Wy+xx+dZ47?B{|Pwz@ApcA}sSd!K8Ru2-n0?SRAD
zr#sn|XjP<N^pXB%qXHHEo_DZKv%sX%;*$iC{lfu551pHrFqNG8yI9}y`7vzuyVPu6
zy_GzOUq7WLt=cdXy%Hch<FzjW_M`_-{^}_J03ryhv*k7E=On+{di38$q}2EJSn)LA
zYTgSl-DjW^384W?TmkOc$#<{uCe%kpLek(CO?9RG$Y<xt*8$3F3&MchmrnW-F;~6O
za(zq2lQ^oRnMI7*)&gTu&waF^UeCA<C*xs8C@4$`B3*te^%t&poQou+S#16)R&P-#
zTR9;DJf+OkJF|)P#sp(>Z1QK&;|k1o7alXiRCj{aN7OF*Szr7(+IPQ@LAXaipA>jn
zBt=@iT>^EyKpswGHHHEXqeou6#cwW`t}hYW%Fs8Fpp=f@5N!gug>2u*?(IZcMG3R4
zTZJy^^$i7bR|aA0QwCJHX`FOKrXj#Mq>y!!Sgmy?$m!Zv<vtAS2KwWNj*19=;+XB+
zAbt#sND0;?`)iO7ook`a!7A6mHietYl=aOga({ND3qL;oC$U|}a=rojZH^_=1Ma9g
zQX0~Wh044xUx&C#J1Hb_(j>rfyDF~*^BK<OZerG=GAUrF&kWq|-HMCV5%*ED@i}&2
zNm&we+$Tj4yo9>BFz1Xe1KolR@-`5KPIJZPgpnzWIDWHp%*g<fhT;a?&cU+HUezlz
zW7}<`BSVn4Z){xfidM8*dj~W^2;3U)m0_U_JERb5HJ<j(W1@2ZNDl891)PuR48k!4
zW}2ED<vVdD-sLoB<K=*-vnl6?FmZ2VM}Vk5$)&1L(8%f0{5`r#3SlUqT(hVfz)HE&
z)6AVJ7wYz4Hrk%qExm?H;~N**oTFjU9n(9dxEUFv<V!)7tl;RqWqu0bO6%kYE@zu+
zq0R*1cuT-<$*#UKx9a?l9GW``oq3e+D;;5my5~V>k7H>jT16B0uyy-?jWv!D;3~+2
zgWl|pr2f;`@~CXMN#v9I?_>9wME<52UDIR4H9`!Pw;@R~m%>Rl8&)U18fQ%r<dypr
z2s}obcVgo)pwKVlA)EEDmDZ{7U7E!=>qH@VJUCgMp@LBTxo72IOtGy#Gf`JTd=$_c
zx7%psD8#g~_Y=1|p&BOa;k=}IV}en0t2f?>Mxn!CSO%}))usW_8Cc3K=!SqD*vDG)
z$6L4NXIHnUFK<-dF>L>4qeXhR7USAV2Q84v>jRGbf`DW(JbItu_7GCz`9^J1#F=uM
zM<21~`s(KC9_BcabWsOkvJ~F1kb}{qgP4a|*Mw}-H&woDG;G?>DTgmTmyC)883_BE
z0LQ9F6EAj+>o%81%1R<45Vqw0o=vv?DY?lO&#N!SFei`hEVhsE6ZD0(Q8tAg{>W}(
zw_fOA;<Qy%kHALZbLZYszu(687C!Ns&To;5Xe9DZj8<zUUe=Y~TtfG`aAZbqOqw^}
zXl-*#n#2g;_hl#x{Av6!O0rtT*T{{7vji3wGU7*{-~5yJS^;FPti31~G!i!cx%zM^
zA8lp}NY^C>_hEu@a^GPO5=-6h!AO#qe97Xv!oK{2e+}w7*Ng=vhtIoB6X@iYuM}?T
zpJ&<NdOIu4R7;t>6sGHG7$W)Znn2JrfX{5Ba+~9;vk;1L9^qfk&{0~>MA;SZKEfXT
zQZf+*%sW~O&r34w$o~YM?Sc#*>sc+Jo#FG=!Qm!VR1N$lsa}l$($<gL62H}N%9p@s
zG`9KB1&`0>P1f|xg9km~3O=HGNs)8Cv8jtb*|>uH0?g2EuBq8?b*pj9VVB-=1I9~j
z`tnT%{dc1kE4P?0`W<AOr4Sr8HWc9Oy)BdvBkdNQigiuq7{uutt&qYK*`yIM`_DHd
z-vph8Jk#{&2YZ`K3T}HrY@$pTV;E$w<KscRlT}Aub7<mIK&8I#pz|a9wqCvT4{M*~
zTDHEho7dmB-JLG(Vp2><{)uT$5_!WEI9d;cfisPH0IM<MC48}JKQM@&(M@TzRC=Zk
zY!3|O4E%Jh9Q*}J<uTP3>e3;9Z4!F`6-))rY0HTLef*RE;R%3OB<BUEP*4fkXJTbu
zfW`AP;<{Jwd%@*GuQd`W<VT;ap8yCbuJq39kPbxT+Dr=C%=x<lFjWoD!pJCjVJCrM
z7c>)X<M-y2^_Hn1j#W|LO1VG9bnC+*Ik%Bg@ZL@V*(5$UT?*oN-}cJIch>6Z3NCS!
zwo|Hvk-^tH*ZkIC!4KQ-U8FS!P^vA~I!*U+9rnPI2%FVxx3~+wU+5d%1r+-ErmDzv
zDLqV{GxtAV+EyULnGqXs_OZ^Sh7Tzjz&WiK;R{;1nRKngNmCmuP8;4ootnSHX70|2
zQO-FtOJKPsQ(NOrQw#5WFKjshHSLsMx#v_1LE|j?46#(D?dw>W8%f__8{HL?OE>%W
z*t#7i9ZTVjc23ij%-k#fJgpWsFm&8)EoCB?ZJ@nZM#(j8Qg|6E%}q9aqn0x9`~Ksd
za?RaoA<mD6eqmCu<+E~`vMI7Ip0xs2^3H9U!$5JYrp<n?uPLErl@FJUSjE|3t?Y-W
zQdrl~PQ9oa=CUMgYC|A6h3QXjSyO$6!INTFoObi%tHGSZ!J$w9S2WJ*2BuT2(@7gC
zvh_fZiWS$v$+&(LfGjGD5`4kW6D%hAHBaD^U6gf0gw1)iud4^I4l{xFF+yG$YBeXF
zF!8BXv6I(fO*AH8mHLK8?v0N*1W{wC8nH0wp$in{5FkG~mVX!q)7n|$*WfQxW6h$O
z(xn1%az})waj`n7XB{(R-q`3gCwr+;#(}G)3bUyrfN9Jpz}!#nU5ok|#vNI}5wF0~
zz^l!0X193y?!HEOT)M~7YwJt-IO$0h>~r%iY@vJNUeExwfKd66fsq2c`8S&`RH(~c
z1TK^Eg-g>`{$jbwvg>-EQ!9-ZBzBGb%5QtN(TA+31+0qnf6Pwci73s^qa5X}9+h$~
z-!Jki08rJ<soxZWIK)~1r<3&BfMgIdpP8BlicCoKhxd@70b;%@<m4qC74Uy_=DRF|
z7PbK+5j%t^H^{%qDj6EBvT+ldWCYN+`zv>h3Y_ctg50rAsG#fQ!q?!{cN2S1%as|a
zdD>ByW`}kES%$z@mlpV(Z;%?XHATo!^xn^Ers5tqEj5%%t=<Cyo7DbRyZ*fc?``CK
z*nUjQz4fS}O4F(Z&!#KN`SPakV~i>^iqbu*n#wvuI{L)zT_*e5^rt7|mHQZ<Maynp
z9g<?VQ99ij2A0Y!Nz#*K!9hk`R_b_Op$0)59!LJ(wU#+9yoxL_d*_?XgG`6j24z#)
zl=H10=E<!B)4zwiY$1r;<%gI38_!{xEQ)fdLO_P_-KlI*?YBUDm6n0cQ~SH%-|#<F
zgPNaoVYI)Usi1_v(z-bX-MKd@$w`9Py-M+JAE;)E5QX7NSIYpGX4$Q|^a~<a<Zxe_
z<BsD`LxZ>4j2*Fspz?it|Ms1<O-(b4j(f%;nkt9IA)6h{Y-w}5eBV#0K`bVay8_#|
zs{3niZ!hCqOxRrDE5v*PP4{EcWev`m@vuo&y*uir4^=)80<wWGT_pka^o{Fo0uBQJ
zMSca&`9}5;2rfRdbcIVIH9V+Tni-+yR$PI{k8c(0F`6WH#p?zI!V_^vuaV54`~yj(
z!;>&6_ffNt+KgAKWUGSLai2V^1P2v8c^VudQ+=?DBtdRKYT4U-{j>GoGcJo8>S8Hw
z#><Y)jjonCA(3_-A(3ufPstgAxB}jbOabR6EC+>*6gZtseA1kAo!D*R5TG-45d9E9
z;aPR~fTQsHp{uHsYQbUCs;MU9DGdlREKy)Kd`yl9=OH{hj>oY5^GSj999&UUvj4Pr
zMuMZ{tTP_>fbO-DrK{|<2X_M74)zBOVv1I#O_G;RzE5mWi~z3hb^5Xw)VN+fOuh|k
z6&)Z&t-!o<1$%ImdyOZWf*rqs4fdc!-F9TacEpkyZB$PaWjkPGKqcy0N?Jcw?lTcD
zMooCGYaq`Q-5W)&f5jBBOY3X3!9>Df_t4EUh(^r{L1S4py4XO<f!>48aSNvJjxJH0
zzBiSZ93!sZYD7h?%e^ZwPtt7;yihfh+L=0oR=~GBo@E9=jFG@Tc1pS<7OjeZ{k<>1
z62?qG!;f`5*JrRgkRB6b>p4FnW(a&#)A=i~)pRQr)K5BGynITFH5`7*(*=aUZPor$
zt+B49sAk0Z5f3eh_T&yG0IP+TVB%Wi!%+*n7kQ!4A<duDKOb$2emikCuZ0)QuZwV^
z6WxUp55jKGSf_sOkN#rjmb$fsR)Ia$=FB440A@9elB=D>)>{%s*%hOQnd)xa6RJ=6
zM!GuE4-K5ypa-midy`FiSOtZQB0kw2B*jfd_}~-U9#J&<-O+MkZP~r@;-7R&i>ZEx
zQ_H$<+e)xn;26NnLzRx5@$B#`t)oBZ4Z_S1sX`o|_m^cE6w~nm?eIWOil8o#E=%=^
zmlVzhUlV^F)^Xq~c?WEKi7j4>QL!yrc=)DP^Nmh_EAcC`H-Z5F2+L3n!$XYT&%V?E
zV-*^gW|U=|ry?e<!N?ZNU3`Hb+W5+6sY1bMK`vg|n`9e;&%VZDPWiHms}B&aYelTD
zprb9SE?lXf1#mx41Al=mQ|Du5O|ybwOzt~czVG_2d+qwJoCaTwT75Q5s!&E|>1QQL
zPZ@o)Y=#hG_wJp@1=FgU|Do%u!=g;T_Rm$p1PKMD6c7ZJ&Y_H<q$CWaK|rOYL`p@3
zAss?OLP<dZ3F#0iX$d8U0qF(-nGr_dJ1?lKyZimI*Y2gu%**>c&w0+d&wbzL=A5&P
z8}G%N&D@?$>$P`E5^Fk~zSduX1-rzC;h+vv3%QnwuxNb0QO&(II%k0r=X>nCE8)C3
z09Gvr;)N}qOkc0Rk`&Zq1R~vu(uH1+lG(l&CPDHSq=M?-fBxce``{=Zz<F-M24sUM
z`zAOe$$EU@%D{9(X27igsY4IFJ9hm$4_B<7(e42++t$i5^2zN*ET5f^2tMk}1xlbp
zMOQc#k&#|L5-ro~LT65GXY+Qz$O~iICt)~;sOk0#R0{2z7rc@^3y6<a_6E}9W6hCB
z#5lB%I$dex5pn4yZ#kor|CL6kI6Uvx=pK^ooLkq5eIX)t0Re}%h#*$Av?)5qzD)4(
zH$3IQUaiZGPr@t8C2kh4%~vw>w5NU3jZ#S10~A2kMPDCPxs|1K1z-SLv0oym;Gkv=
zA!qZM=i|6%c6|<Pe-^3R<cz9(TbOt&Vp^EuRUfq^0tt<MemIATYxR3MP@cxymy(r!
z?gZT-krS^(sLIKWj_z%Hhdx8Y-z0U0hpKAwbN_bxU2J|N`k=Zq2gf9bJUHpYtBd;>
z4B72;$)XH(M@jp92I+;c3YhmrqsFXw7f<u2LZ&Gv>o~bkUg=6FpYZ1P*pK~+*5Mc-
z3xY1Oghjs~XLTfWv1?&oC3ho#8tBGav9Qepq^Ds934>#;1!KDba@Be~l(2Q<K8!+5
zj2L$EOu9`}8?8TcL+{Y|Aj#^;M03G}woSWg!W!j&wWV~&DU<c>D7VPq2SG7kr0v^4
zQ7{8styf}B06E3p2Qy(#04@-_bHk%w7|_@EWJP(LM32IP?@(c%+s~)|?R2Y%vk|J$
zL(<ELH9HGT2|vuzv0)TaW1YIQhrXdtVm0WzFlX=S+Rq(dloG+kfI<2eLsT(c{b#YG
zp~AkHS^zj&vBTt0J0BV;MyrDzn8W}&w2M6zDdlkcORSvy9wveCaF)r&X>bb}YdW@%
zJt1bI`njODDuX_MDDa+KWQC|=o!mUz>#6%~M6#O^u9lq#AP2W&MJG|V2-k6Q2n|)z
zWkmW(+J8(ymNv+Nc+^`2TNv><?!kcj9Pa_IOMF2OIH<d#i|7x3(D-=b#IC0bQFCXv
zD4ro&Oux0`B=bI;ZK!$=n)JTy=MY^4`uqFj?Wx?cCn|-U(CpZOc&hRlhGAb!?xeC&
z5bHkna#2O|@p1NNOD6^#1T1NUu)xcWv7@#9ajYuu9QAwiGn0Hj%AAzWL0z%XWK}aS
z)z*x@vIGt0_}(B1HyK`P;>mr_2D|qq982cGjkr?&_4A$H{P|9SY5yg0U}*6z7ZL{4
z@l0YKL$?whPXw_2wL8~$_$Vv3)UMh!U|-5GSuW<qag;|+l;ou0)7O}=w7=I}<cp5*
z_4fyeI4U5>zQIhDlW((OUy!Vo+Q~KbjbZ0F+IWt=y~oayEZ;Wx%n`{bg&*YKhMzA9
zv=5TBN15F=i3UURj?SMgbDKr12LcE+jPLk{=$pzO-XBQ};tTWz0}hHM-=Kr2yXoyN
z+mStYZe(x8{`aYh2fdSv=g&&&N)QI)o4?7>bCp#Qa3#ao1`0L|iN=Q2v_$?rxLIt{
zQg2=R8%x3jsohQ`PItAcj4*F8%6wTq_S~;}p<iJ$cI5L_hnUBof?61!EQqF=PAD9+
zVy-hz;!}^gB>WggV1mBJZGkK#p5`L$lc`d2MQ_oa>U?`Ju2cz0{Mhd?3J$(}5gPff
z50&3<W>xHIDaZfj{!aXFlM5j0e`xOcF$yjuZ=jM%&)p8x=Vut&7}ukx`r)P@h@e;S
zp2!PDI)|(Vz5z^-8<fESN~kijYK$*lwMszEpB2dNppfwJ^vtOWvd)y7+spU(#CG-e
zM(A;hIhCXF=+(wRE6c%mviWyMFPLw=16rw!YenyX?&8{&D1hb0Y;`F$z;XE%2+={d
zmKd~o9XdLF-l3B8EPudSA_7I`9YGV0UZsz3;E5k5+hj<y8Ytu<1#B-{u%t0?bpvYF
z+%})7ol4oH&b=<=xDvO<tZF1*Wr}L-)R=konUT9!O!<^LRg(NOElfMiTk_!z;7V8a
zZiVY-hj^}C7c_6qemQsNDu>4LpX6+2NqTjb2y)fULq9e1c6YQwQy{u7aQ@6;;FUkM
zzZd50F!XKtDhy&p%_*=|5zQ~jZ9_yOyRf|bEI$)rOmsPd!pZ_21X-#Y9tlrRgL5c}
zF%!^`P+BdH)FZEMzwbF?@wPUP^&~e8cu0*?b7+LxXXftBDjVP_AKXS-TF&_KoIK^v
z!}T2Wlq5zA3IJ=|WctHKwnNlQ3yCNR+jo;Q3cJ6qPG{kO)7r=X&9gm8@o94`+JTzw
z0Stnh*QhsSZ@YP=$HW!6E+4+98=EjO++O=v8`mX%+Uh4-<5CLr``F3yY)|R0#Jlbv
zI~Ofxmq0^gVR8Qost@C%hL^~)&(NwQ!7MuM9$-(NzpybCu(h}eS!^FL5u1V!O;6XC
z3_`3lT+lt*lp;tvfbk2t^>qeH=oRit+rN1kXql6%cB5HWcWu83tg1|!oivyrTGo*7
zJGvZZ_>M$62*8ke+r+n%)r~|6t<8O({?_JU{7bdXeZM=T;mkGkt%xW=yy2nh1vmi@
zIg+jOUA=UDqcM5lo266wjm=`|oBicg|EC#k;$7OI_BM}^N9CeGjo(GyV6Wb33EYF7
z{@^c@tkVZqG`MF}DnkEePYTe6bbxP|p;KTzHz<e*QCK~;p7)4^(<|^8X;)Eg8Hk+8
zHEX_|cKyK;n~{hSUo$A?1OJx_l%x_jxqCnML0<(;)Vuk%QkSL0RVM1mv=-L`Y8=}!
zuG?52`^pWiQg74q6>^Gu5v8EtbYIA#MK@wf4yhoLzWMHA-<R~o#<M&G!@frqf+kAR
z0Q@stzqZNG0`?qSQwlK+N+1Xv=g9*Gh!nVaLzv4M1bm`~*?9GeNXTvi+?JPEsj$^|
z8RH!lgmWQZ?!rc>`5>q4;enNNLZ|GHAxv8Wq*Ap*9_1qHvBaZs4rJ6sddA>wr;|>O
zTm_T;G+&RgIJN<ky9u{g?F{7n7&hbCQ0h7KQI~o&^-fO6>nNE6UXKqx>~hoO|H$zx
zsLWRyMi(P<9o=bejwA*^8$eTZUj2h5Yb;Y;>M44aq$kfcH*G(BGj><VBpJEG6v7#p
z!U*TjFnx)6$M^po%v%bQDB3ltJmm3E%SqSVhW(QFi|EZ7i(Rn@M8GG+5Mdp8@HxqQ
zornJZ;&Qm;?Q$t%_)TgHwH%uc*C||SuYEklQ%I3!s^IJsRXy?f;K|Fdtmk%Re>^7O
zJ)r0z_)R6C>e=gFv}3>54$Y}C?zyv2YzaEsymgl^Pjis^agX`sf-%K|P&5sOoTB~s
zV?Rt#dxP}1PPxCoyOL$LRH<fNk2@;X$!QX%VH*#e-HxHELNlwADYGMbxrZ+l1=d7-
z(>39B_j!Ufd(j>mjQHz2PHY;{CRb_zQ`<aJ8ZpOd6lr6Sg5m5P0Oc}ViF295A>@w{
zq5<5Tu}osG)W&zk3JeBCzgBRS_n};(eM|^~pp>&IvpXQ{y}>kGE=@sPd=r>qM|rMV
zFy#Q%hd!NB2;|6U3RkEK@pis<$Knh@jSNO9LIwS>QTs&D33eOU)&;0nHXp?9i88yo
zE$9%Dj@&gEgsNBK<VbmRv$3?0SS(@N9kjC3_srrF+s>L3MjHKXQRk*m9EBWsCb^J!
zQH<&#)I7JV8zOo{t`oV#;<uAv%0gS5>zsHqEOk5H>+x#-0pii`<+*E!a6*cVWInJ?
zkCroG&5qI9Oi-zIs`%_mn_U#fUX`(Awd;f2=;wk&|6CBC{mgRolhD4R+_m*+Y<lFX
z$CTNR-u0!RM-3rnO$mVyLa%mcpZ`krh>DClR-9fTV3!#?-_kLobEB?qNF8--(R<+8
zw(VqB0Z>2y(oOUe%E}oSo=gC8+cgqlHUn-e>jU}-<<myARWs5BO?64matXPS0M0i?
zRH@4oZB=^m`<SZvAFz6%K`ZkLv<p0m)zI7rQL&K=O9>z%2gixf9oZ_Q*tstMJm{2(
z<HI4FsuOs*D(v}#5|14O0(O`=*nBuO<OmVH#bLbLmw1?88FJ~X^eeHg*T)zoELlyb
z-YWWR!B!x-aNN!Ww!Hi4jx%g#NS~z?`k(=!R^${m#|)ai&4pD5V}Z?uZJVt3Ix8I;
z{{~SzRtM`Uv+p}v-ssDnkeHZbi~~Jhd$RW+*>*O}E_ReU-{U(qVyvsazU&RvchS65
z-eL3EJ)6T)ecc9$+t@GzY#vntYnOc+a&LX)#@W>|74Yc}ooGKs{aol)=Lu)ZMWCW?
zRT1o5?LU8Ox&F|*gW%9-n`P%K2Y(3oN3?>>O1;{QA2<>qlu;+(7xu!8KT}{1=B~kT
zt31!OX#*$VMB=1~eW4NE1R(h507_kD4bFWf07lKiO;|9US<-^3umK`w37DkzkzP3?
zJ%iy##PFA5WAGE#>^zc^)lm`<62tFT?u%4_m{<Qz=NLETvSM@r;&2CDl3Nf~b3mU|
zC}fN1Re(>cV`rBg9u`(ee91~s*Y+l=YiCn7c*1W`e1bi0_ZBP=LQD5ELQY1!FTy9t
z?w#%{vfq-HvU;#{g)2ifqc^^Z*B&UkcmFF0ueyQHX$^3XCaUDGDjVKbWwZ;w4QrZJ
znuQD{Ra;eOiJGUs+Z3*$!6yDDOQoYgMufjxZ-2H)-DP?O#Lvf*#-$7lu<1s}I(Git
zTep6`Ww2`iKSqul$Gt-khpjhQ+lGR|TRu!qwoIB}O!R_&X8;CGzI8#QT`jtu>~CxZ
zwmgory~3auyhZb!u*lGKj{<d6AyERE#HJHCd2UryCipR3tp+Vxo2#UP_@$OUg?h=7
zU+ubWi{ch8#4Zb+)XlrKy6S(F=%k9z!kXl!S`ZP?-#?dNsIrm%s}iR?sziyWsCpeJ
zxFubPguw~a55=8M;AQ1_wnn;xtJJ#O*dQ!^cgAF?5iK7FwLKs9!q&!fcm>{Jh&~E2
zZG!P6h`R9>O+T7-Xm1r5V7kl^qbAs<n9lF!S2NM7ak*0lGpOd`EGi%Dw3a@htSIB0
z`6EwH0I)sbGt}jNY@64sbof4dsRL1hAlMYWeJIykJvZPlGa)NSry(tKPAXFJ_kh0$
z<JG$cH|I;oLW31ii=Fcg`@&FZ!-i!`@;rX`3hkjOTKk~0Oz82)pR5TpJ((>S<sssc
z1?RAu6<ht70VwhNR&MvNum8~bDgHQ@pwdVWV4Q-6wPTh?n0DA^9rq>i-el9W+z0a~
z<r=6nyzZlqJON0|w)jae4<G~f3y<iRXhGdu_k`EL8mQu?pH$BxaSf~cE%qx{9eVlg
zJm2<fg>=VO_lBBIwkMBrTu`otr?{R5-pS((ZqlH;M=p4cPWB&{k0kw92xg#&9@ih<
zB6lu4Y+-1kMOlMa+lXAFfcZsR<H>W%0(vxiBI1R_k(@{rr99H?{AM%HNc&8@uet%E
z<3a}ufsl0asgLsPb~5MgN(4M9#4HU(J+726GST>FL|UHd=>R4JLa9@KxzMKIU<)V(
z&AligP^yW_oYk#fdHlrJ0Rp(gm~H=NQI_=AFt|IP1@S%DeQlzF3ue@0O1d>Gc5z1M
z|M3N&V83^U^OSfgsGxVL<8}xAk0W-UJv;yE5u;NzXX)i*=<IdBVc+)bW8b{C>K}eJ
zLEN0Z-W5B|as#M86!@f&3jm1Ccjfo<3fiQtvGyCjINEe@-*HxMs#r6-1LN;pk}t4@
z?%rGlW#6l&JWmlY0<NRTj<?&7E&jY^e=T~Oczx2W<Q;(!nXZ<GUNCPy7P4*NiZtF&
z^vO_4gBvH3S^AEIDA8gLTmoL_?~xpK%oK=G5#=&aJRI3RZ&p;lgr&n1;Fs)dKUrgX
zG4e(1j{=eFS8z~9hEnUmD3HFBDH?ycDHt9NWDspZ{M#7d@>cTUMmqwChkSL?3&kH<
z*q!%`f@YiAL^y{`{{O9}g+BNXH7%wWT*@{-;@6S;i^H1ew^?ETP?d*5!hsm6&4K~7
zJ!m+=Pv92kKVN$N_(cQ@?6Y9}Q?bt%2-Wb*D_KD`Yo-73%QB+|z@UqP&+s17w#cS0
z`n`*-UEu-99cX_~0+z+_&u>JGQf?P@AS2-+6AG05Lw>xQxU@9ZY@ap*wdawiv>y`)
zKQyL)zbRkIBO;cOpr>nmM8R|m0LguS@ZYywF|~L8P!c6L{ZO|4{Q(Njm2L_n7dIe#
zF!@uTnuB;(2weAdocK@~=T6Y3i(>zerTPq#3_Cxs`#X?>^W$C9%ne8F#ek4m;DmCg
z>JLzfR`}QbH3QZZ6SrTq#)u0Z`du%7;GEXKmIUKK*W~jRN?aYN?f<EuWv8aB1tZY=
zFn6GJjrU(qCyWJE#U#hjETI0UIEE1V@=s5X$F<gwI}xgB)Vg6Gvw-C8Ki<u~zDY2-
z&4YMTZ9I|yhv(<+zdqU!E^_0;QOJ#AVPBnw8v;H1uS}>0vG4rp7EurPyw%F$sE8}U
z6715fK?MG<Z42!6(Vc9EhC^0=*9kwk2~>U#5}?ts<!hHIgEj{~{25p2<q?-fgl^It
zNbB>J?)SA&W^316vMn{Pfre5-?+@YlkB|%nKVn@9!S^bdKO=SgFaHf-%@B}ooC_B5
zgCnh4xZC(6zTJO@h=s@XRc4TPSV3I>(`Y3M0lyJNzQA6G`F^SYdP6r@w~2T12M-DC
zMyxA;zS|L4kAj8aIvo6aJ^``#M8wGt{uLwMN0oyhfCN^Wy4(T(;2qd*sD5n&L8B#f
zXR{0A>E3{Y<mQwAN*>TV+JSRo2~-^dBzARwF7M7^U(%{rQp%w>bpQOhufU!|OfV6*
zhfm2$5nBzmzqeKNDj2#tEX9D%vP2*R{pMc>7D5~NZz5OHDseswfcjtFt(z|lTpIu>
z2x@-Dr!E0^^q<R|RQ|cr9=ve!Atxhokfk6#>px%H^^fV7M2xF<xq_v|EEE{_QDhHa
zQ2guc8M3?7Z2N6n?w*{H-uP~>lW!T7aW$J&g!uJ8g3O(X7;*a)FnXu~Rrt%_p1H@?
zAo$@6o_~Fdcn9LAfcVTV&*3EwP4XgJ>!%AzUj;Ad%fUp|jK$-d(SMzTHuTW*T);~R
zfYKLsi78h@=-l;_4Sy^g4~EBxCya>U+y8AkogF;32P}F2ya0@oh92zPt9zkjWoi5$
z%lqq9As7MlJp*OUw*AN3wnOYle!8w~dS^mQ2?_87AZT=V8BDwCXhG{ZA$hbh0ta~)
zJV4T4{_|a5oHMmtf0o+=9we)phyf@?X_1<hYD+vpH#aG2)l2K|>Z0z7#n3XH*3PLO
zYl<=f9%YU=Y*dZPk@73!O?CshgY)`nP8WV$i|?b>8%|~wt~|aIcz$*7Z>zYsO#xxl
zx*kj@evF~r&wn9~q6OyJH2NuB$e4LZlMw~are(U|-azCY$U+4810aVnOe6ffZ}|fG
z9{(uD-~4du`YnWnLL<2s@c&ofM<fDOS8^`R$4AOZH{M5q`Kz{~qUKBc8)<7ZFElM}
zU=7k5hDdoWM#-0T+dIu#qX98y{aG=z>nq2IwaEoBPU^47{9(y5@%Cuq|GeJ8C>Yuw
zp_uE)A_sNi7*Tpk3zs^loo|DWSAsWliFP2>mBl?hTv$S#L*wDk#PXgU$dh&DPJ=??
zmk9*Ok4&Kp9KC79xI9hg|Fsi|@mxoG`_QNwN4L2vL}lc8{f0;m^NDJ(4*Z)pR6U1A
z%%7Kq8#EB-^y7+DhksmXvgbGN@pO4uey$%${*X~9)*oST0)3-qsPZ>4@5lq}$Z@pe
zG5BhD6R;9eAsAX9ux;U8lROIUaHjVX|Dg!qOjt(hL#+VO1lG-FwvupcGah|pi&AI<
zH@wYy8)4aP+RI20b^l>BbU90Zc3)BulSD6Ao-+88T##Lk_%6VUOlPh~`=$KAJHV58
zWN-=iqJgq|_Wic6>cP2WHc+(xwSL)MZKS*`zI7}eJdWBPBgZXi3JbenYjX-?hmijB
z&uBCPe55=8#(NOsXfWX-1kTyW3jaTEfHDdK!E=>(Y5bomXf1E3M0+bX*5;cXTBV59
za>(EYdvb8KsmISJh@n4kA0KSx0!S)>fGq2OyxX*yV&{2l2&nni_~IVWuf2PTMq1ok
zmok<Yv?oKg0)%1!vGh7Ah!sh0RTurdu+?iM!2K;-V#L7<$M~=!a&7+mwQ12{cHd!v
ziGba|2dG8w7m2S2spW+&J~bgb5IL6_V3!lcYv8%&IHD2(f6;A`Rb~e1-Ww3$iXS2_
zZEef{cz!m%R0xv@6svTz?sxX}h|&i%YVaY=%o82!YzCXsHe_rLOeUCS%>b2R*TM12
z8X80GqP)6=9}sV=CU(})1Z!5r>Iz8{fsBi+DD1$^bG&7MxD37_LO;XSfr8)M30Msx
z1>ZBArdLRkbp;)q75GKKtt`e##<(DprLF-pXiv7xBEx6L-xk>g(JMkzu$QNSSczs;
z0bUclbu*i?<tP4`)Cs8ndXIpAN`7&hv|FlhTUk_)IkVYM*t{&z<<Nj-eaxrL$EJWq
zJa`b4(Fz=Y31D<nJnBtNQcC?&yy6$uyxup}l{MeuGupKMjbY_qB*<p<u9ch^*lsTq
zJS4Q0h5px}H69s#cGhdtHWS=M{;*M6xwis}SA}izJ1EWea<!LEE`sH7$tZepBvH?)
zSG)vRFQ5R>p<1I2xYux{5}`?Ws?J2*U}s)eyeWUde2UfY&UVbMq@Q`jzt4;icFP6X
z;$wO^VgVgk9kAtlvU%~ayyIwxT4g#Q25i8^a!nDdC!kV_IwLba4IzkU<^k&_)o;zb
zBaBPa5=akocLdE_nn;oQQg^?;=ynDNLA<z~bqpIxAGzIi3V7N%sN1x3Imx{F#ZFOd
zrK}o45JDjc-UUf*^v^iW9C;Wc4lU6L6#MUfR%q#mps~m-s+DEJzH3Q!Cn1fe`jF!-
zwu44RIlVytDd6*OhhZn$Jm+qJ6)!S<zKCMVE!ZFI<dXf|MXmd~V`*-#ipeXdi$yBL
za30>-n{Q=-)IBv@`3~*=h1ktRFYU|kA(HRf0t|JvrTn1oeun}vU)#zB7LQr7t|%lS
z=Hq3E#juovJJ=S_dDsCVHvIAjbT6y7-Wi0I;VjAO3pMf$z+fHKMG!!fm^QdJ#!7Z!
z#e|NI&c?~w4ugjKFI*xXpwuD<cRx58-VodVc`}eruaN6+2^5wR==H3fQJTBXn?rKn
za^skBY>_iJ+Z?YKM?1iCNMDYJI!-)TtQI5)(;8!C8|x&VaHci|WJ)G@#iNG(zBbNq
zmd@*<r%;|V;1A#|*>YNygF1zZgN5mEr?yt>`A(1PtpBxnho0NR-GF343{rRV5J&y3
z?ESru76<hhg<K=t*}B{k0T=*X1$Yy^m%TWsYxm1h+#D?=j@ayD4>-P$ofYf0Dw*(D
zjE9&SF2(bDzx`3*Dz#wjhZ%>BS?`O^{4C-A>-&wbn?u#`3RF~oxIZl(qoct%-0WjB
z*3x?N8Y2X~08tifFxflFcTIz0NI`oO+&}m-6-?^NZb{cI^KGd2fny$lihnGzZiw&y
zJFFkkQ$4w<PkjsIgPD=!gf#)_xs055e5wHF)K}yk`UqeKh~-qv_isQMj)|)B602hs
zW~im8YZBd4AG!n7wnLKfcZPOPcccb`6B`nav>eq922H)8EAi)j2Av@FIFI(BA2vNm
z{<>&n@l>H?CU41XwXLP3klZ%lz?>|<gMyKKgQ*O;<|Ty(m^^5UIjchHlnaqvn<L}}
z%<#LUg4Q;U_KBc_u04FoZ#lz9v>)IBKdNR{mi&B7*ae(bNrnzN4W`qQaW75Ufm&5+
zU|$7l-D^56?7r&I?9ZMKMdhUq*jjo=TDde+x*^GpNz-D&f@|8JpWX(l(R+PM4hOzO
z+l-&F`n#gsd}TB7zHDHtQh;l5>h^FoXY_7n?`KONLol5-1wV8;qdITJi#2ErM=Ol?
zfV=`R1fPv{?$16fXjVAi4Rf$??a4}e%})F~nShEN8La{KT_v>in<EZ3UBA)NmiuXT
zdyOF{nJLL3T7Wu!O;EHQu+!@}%UqS31?OHPdE#SesEMH2N9}dh;5TmwoE&Qwg)x4>
zTK2y?B;jLj9ak0=T4+)iM1V}VJ4rDV@diDJRlFn|x><!>3Wl?yxrq>iIVVi?v*<_(
zbPYWJ8?J(-)M<pP3BNenXa!e1Qss)X?dCt?84+6%taZ*IFJuZszLb7MQIQY3IpTtx
zG9Q`efN#|_IHyG(@0sl(NHe*X#!|Q|I{8=!TR7+twTnlKc$5kxyG$paj2EB6FMbx7
z!Z<iVAbt%=Ko5+jnb&ur@EpO)>ppCU``Tz}yw%xEqj+tE^`99Xz=>z1Ek2z>Sd^}h
zTZr4rL=aBTkC68qx;Ss28Ijav);g1|hWbPER6{w{@`(eU0}y|mUYyuIIS-}Pn8s-u
z?89y0^Vy+5Vr-#m1_vifq{i3yL^ob5Kr7j*-1y)+PFf*-`9Y)LX(i{F&&54K^F;Ni
zS+B+iICCA*j)jhlr?<2pyXC80TK}@B8<DKDJ}WxVn`-gN+Kg2tMzTtJ{SL<cd+g+(
z_wJ$a>6|Z%!P2WY{7ox2_GY`MIBK4LIYo$^xV~*L*YEy_0Th@wk$MoZ2PO2`w~7m5
zUNnD^z8(JWgC{vi?sMXA{qy2|*SAw5STV9C2BS}}dF4Kta8Ox+SXR<GAl9kRPLKv;
z0zguS)ECIIMCMnpL)M@M4G>W-fB|cbFu2Z9RLpXy8Uy<`z6dqktKNmar=E&-&W^cj
zD)j^rlFtSczYA1IVO7HM>xiLCSJYiudc9KsHx=uU-|mS!wOg0;nUFNAR3OzAB9J3R
z#S|k^mm2D`e03m;p)by9H>1B(B>^31dul3@xJK~MYZxowJkn$ntk^(^{9lo^+R6z|
zT<E6&)0mgMCvWblGBtH=e`a?ofDDF=rRAqG=UBD!7iPxzXH9=5XmY6Kiw+zyNnIzf
zIO#4`;Pi;jIqTaWA&s2N>H{-AtH`{FKxV1lk2~XydMO*fNiIq^p5Tl>|72zUNQKmF
z<nqc>rvrU)x3i_Dsq5bh^nRb|$;IE+hw(%_IFs5P1>+>2S^gYt8%QTIU#*vL6<Vjy
za!E9D=SmGoK+ES1jNa;tlAlCtQFF~BrmO{&%1#Z}qI}t5pK4{6O~skYC|xCu$Ee>a
z(xU&ZguwV5k@H^U8)UhifV6zJ3W4`N8Afo6uuZ&3Sz`8jH{iASKV}i^L|C%d(-xCY
ziB%Hu!*zJ{UpDP_ffIcmNI9Ne$866*wk)>>#%u2#^*b=L(=@r>;@Svl4pk0wh;4$g
z2l|*p@0+a5N;uEWWYQQCK5T0t(C>X!CrB1MWw`-3S;@4DOHZ8X%=Ybn-Jq<T<qv;{
zbG7%g>V7gBiOr+T_e8vE2$8q)gfn@uOsA00h9|sY=<7GX{`n4qbx#{p*k*QaV_JEo
z)W9FKGj9-?u>m#K=l)b>M*mrDk?Zdt``I_=N!2A}EcF<YpsDmR97F4!bjGB@jlx~e
z#Cltocjpbu;HYyujx5S~55z6)u@3H`>W^#nir3t`1S`P*;$$x!6E7U&FsW}Js+=n0
zZF0%X^-Y}f@3b>}e&6k!nMavmdBZa--n3JA+<V)(kz;i(z}LWM^IbYYvs{@29<arP
zw*=jj`SZPRUgF|RNZ@B?V*~S19Hyz#x>MCy3Z$@i=+hYe=PB~XbrqxP33+NQ12(O~
zhAhaSIb4UC7}@mg46#Ggxn-i+?{M}M9<B*K;FBk1^>~)+<oFU~cO^xS-_@#f^V?9*
zdO0cR?05Dx4N*?&?Dc6GD3)<fc`$#2SM+d0AXz`94V&y0QkPUm5ce%>dD_^qb&3iD
z?OBo@Lqf&}vv*d$`IkDZ-p31aSBop@T==cfkfeo)JFQZ$?3P%5H$;Qm@CjxIqd$e+
zoM;ibZ22&h;Q234R0TWr*En9ccSEI2z9*_vhaca~p>bep3Mhk4Ox@_S7j61?ykkr_
ze`M*wbUn#I!-O3qyR(XE2m6@qj}?~LP<ptw+q=+Uh;c4shYO@Q4!}e;3S72SEm_^$
ztCdN{he=;Js7;q}_8EmDm9tzvqL;-ua5*uv+O-6Fl~cn<a;4rqG(JogEQ)=A>o|0R
zX0(Rh@bK)z6TB?^)y0uJ%U^Y#bPODP&~vtgfYV$Dx6YDP!-}YUbG`o57|Y<5>IEM#
zxK|c$@t-&X)3BSLUeu*irnPZ0yqDY?XTRUNb>K`HS;4qxrf4lW&ZOzf%4hrg;vGdw
zoUY%n1cJYRqe@cAHAyQqDSQvg$*oVHNuWAPC-OLBJZexE(`kf*e4udnPSxJ+K1*L7
zvEU4?vtulp2~G1g1c%jcv;01#81&O+93{;DdBYhrs>0WM-0I%!+8cP*%lUODOh^&>
zck8WMi_sQ#r=-cx(r|SUN>|~r)bw)Hro5LbAHHMU!yu=hlz*OHC1!h<&xw=y<^zMO
z*$yDwDsrpa*yh;!`n<nt0h?bmu1z+zmtQuuxQop{8fPS%+H>ErwcA*SEBalxc>07E
z!=>Wf<x~9~dIRZbb{8+m-pX$XR*ImXCRnxAzQb9cwri0;6no1ieC~RplJo8HEZ?Me
zN<X&^WZ?nQ*NxTmU5@@yFy*IUstNB?#g=+q>SDQrDi8*xsu`pXl`bDDRm!OBMy45u
zy)6`d#LURY{U+ZEpqBU#+{X9I@FwBnC~Q3OZe@!FYF7^RGbiKvQ~CE<2dn=z<74`2
zy1-lywfkz&{dWZESjNU~=agCZ&cK0w%GXsfi#U>l+hFk?>sEm&Kl2RTg47vHgO9~6
z&Lmqss+(2g6k@^Nd+EAKp{cz$D=M0Uq?RurM0SzI<$^x*J=@7Nz3s>CYXkyVSk6}2
zU43-yop^4O{0Yz>OL5RmQ@4fQawW`<?^(nxO?8dBU8OT=Ni8(Ne}?B^k~`7Jcker)
zlWIDl!E(O!WMP>azOML{7niqPWQ*iG!*@3z;eJ?i>Sch-$Z?uU*Om7NP^7Gz4gpe^
zN(=ULuVGY9;9B}m;#$heFBkhSbElbX+;Divq)YsIB$xx^<yL*=&dMk1vE5@WBRN(x
z;UV~$FWiv|md+RPf-?{AnmXwuvb{1_WMWV+ZZxyHp)eUdTR-GJGxSKd<wiP2WF#<m
z(o`nzu&Ip0I5_?OQO;5Bl}r*e4pujSGV7f0jm?6N@}m{2(E%&q&E^9aw3kO>er8U%
z%vWqrO7{6zUKsQRZn>}az^V!NBDrR1HQMVvv3AM-nQS4+N!)af1Cq%gIapqWR%7ng
ze@;G0y+-y@M$aUfuFq0F-mPehiSCjj=peoNqVIo;@2)STTugyaGQajn%<PU!W@G#5
zR!7L^dY%}~8EH`+8&zQ&(d=5GeGsWZZ)Djj5+1d;9=2kU0{<f}hnrQ!BCo#6i@fO(
zA$auUi{v=axn^H?p4Q1JDbvb%8pwsOHw&{ev5A;{7DW7O^6@-t`7Q3`Xi;qcX<W-{
z_)J^@MvEEW(Kl!97771zTgnqFlhB6z+{$DbCsOkMGToe~f}ttGr00TcOH!9FjjFKs
zeuL%s_~a$z`@f*aznHJl$JTClU}TQ_Wj?)`ZgbtBPNtEgnWip#yKp#Ljs3wGnmU2-
zWu@2g^6m9Nr%uIzC<RS3ROoOhEt5$5*igx%_pD=nz^N$>p_m5(&1*#Z5+zTswn8s|
zwjRwL{7^h;Zqi99k<IdUu9el@T$XF8LuIqU`=?7@u%lMXzHKBtTAo?wAQvC@vZ^A5
z-VS|9Oz6n4TG&R==)lLM-H)Qv&nmvOiw3hCrSszaf=A|B057ipnyC2O7Mt$w)0`Ph
zq|rAoCa#xcwzWCQ4_DzggxelnXSHJbm1zL#Ms60L&Pst)f17^4zHTq9X)sp4B70g~
zXhnjZ`i#iw!qFE_YKYmn$qjGihWy06>QpO?27u^$n*=H+mC9;SaZsmC0Tsa<alLz*
zc&pl%isvH}7b*P~v&(TjdeOei@F<nLP`M>}N$FsAW>tLg+s+eLRtCxwnL5%^Sj~r6
zZLTYG<36Q?TWOle$z4)mS3a6Qd9gIB*^;oG;p!?4N!CklAX(y6@a>Z}G6MyiW9Ns~
zqHh6moFDY7Mgfc9?Shn(eWi=h+*W5h5rV*0hjQh$urhmsFW&<`OORBJ&%aq}v2LMi
zVjL4X=FUV+WQ^FroEz#+%GsMrYB&gpCN034P$IF);$bM(D^MBo#7d?~tm!IyYlWyJ
zxmR=)?T_xpnM(BLnc=$Q89wE%O~(zQRy&$6RV^yFvCV`!^6j69Bo1vjkiITXudao)
z(uI+v(~HX@2J&-8i8wO}PePe1-d>lT!k)_Lx?%O}0LPAxHt8T*=9v}2=evHAl7LBB
z@vUzHgPf=ovcl&qQ$N{UvpY4#S{gXOqo?QLiO)Y}QM@*q<L=_p5L~}uM02xsJ}CPQ
zP6@b)zhO^PKdiX(z`0yYx%`Ofuig=C>C-ef!OuFACVUOC&kro+)MJVU(W(lx6=aVs
zG?0{40YtnVaXV@ybW!*Y{G_@Vcv$gHL7g8t>Q-kI!mFK=RJy*0_Wnrtb+E6RNA4?5
zKcXEKJEf5Lds+InZOr<jS6u8rKPxuZN~(~^pXl_<yMvZW7ToT8;n?!wMH1^Z?~R_g
zAP>S>TBY=sm2_(sN%97H{OdqonMahk6u~<OW;s8ukWB2?U)7Zdoj^55cS=-7(Q7v3
zJ9_3ev79Wm32GEyj2qyU+co-il){Fl?@3N>h76}ZrQ;*@6<xU%2(n7rk0REgy%HfT
znLl)A(9s^7<tn2_OOn$)-;&$+O}S!T8AqC~yK6*)shIABY1@Pc-SUq45rx0*NML$O
zhE*WGzW{}9&inWcY0!vLXp$dMVIP|ST9&D-(1GbIa+XzVqi`Bxjn3C`jqQ(p(d79M
z^YD4~z^SLu^-`LyE~ZzDyn=4<AwGQx4V<WU^bjM&8g+31IP~b{OE3GljD%~^)XS^J
zT+Qm_cw%KfA2w^q`SGNR#g`FQR0qF!_qbFb<r}&S9=C=YoNSkdpOqgkDamtj$n%l-
zG}$SWGoj`B(t(pxIWXjI^DEO(FRL4q!F`1Ja4YlHi0_@5aB(qBX(YQ>1gBfi%NFt7
zjcg>hpKWfBEkC(I@#*Dt%7W8!YK7k`mt>yn_Z%9Rd2T7;`uw_c$>O)+7)5*Y;VLWT
zo*<FumagWXpF5Yo<V<)6G53X_(04mN3%=v)y{|KuPo!yP^NhNt-?1T8knJy5Vks~!
z>V6_%fS;hB9?d_^tGSX->ds<dv~l!Tb!y}`VYNG@OifUtW$22y+iHr_O2FGuj0;;@
zQXZV2C&;g<J0qz}*Ki+MAbwf#qg>j_CJEN*ZV$r_J*z(FW%Sbt{hZXb{K|#QCNz@^
z&F%$f#WEW1-o1`!*TWyaa`H6z5kjV-uOyeTpZzV?4;e-AO3BGCfXBS~-<=G~J`%`8
z!RV|tNM`+x1^8yVp621nH*1dW!Enai;EZ($i3L%T3uYGavpRY5WG=WVn@>Fa2p*+G
zk1uyFiF2eIRCv@B+3_R=0}PDz0O+SUy-{orcNzyZ*}eF^ySIOy94gb(x=<dA?_`Kw
z^0fT$w*N+Ps0tUZRxWJLIM$Dt@1#PJ*MHo#d!n5QzeuO#lp8uNjBk3qh&|TP;Blj)
z(c{MWM;lA`3m#Lb4c8}~**?*XhF%vujRm9E-g1cIYQq_--ah5HglAq5#a=BCM!k!Y
zFi~=LNKq=`AQwCTc@{plRK02K{KE^cGaFhrlu75k$V6UE2G6WDw`}~+yd?l`(Bgyh
zlgfEABCl*Rq8YCT3-t^j*Qfu`;JgSt-6#0RpW#r^^!X@0(;%K()=Yjx`$q=074(|u
zcD}6kjKHARUgyVY`<yQ1TJ?$Bo^EJO3nFd2Y1f-c84h+JnR&w4oEVulQF`^f=MqPl
z=BAE@W5ZR>p7$%R>puL!;mWjbX@S(`(%}6(YuSRm{iksChs`1#D_he~D&afujx{kR
zr28tKLzy2FYe>CH$4kWR$NM>a3N1?O?98t;$=4JQ5*9x@cLi9SFEiScqxWTV{bhe!
z{|BFMH2)4t-X~Q6eM5`>wA~>9ecJ$A0<_3i5^1y?|A<~BdmCCqDh!&#F)-;HU3=Ko
z%rUi3aDur1NcTieY|P<>fm)xd_yo<F&j}rR@)DCZ-zqMJZjZ$-8F%1y8?wqOlw!wK
zj%uVg-vp6la!QGI>QH>o&1EIs9TcWj`zl|&Ret+eJX=5NByU~j6ro?M$~UUhQo{T%
zp$%)D1d|sp$CjV=zHQfw&9=38Rt`%xPVgaHhLfnub73MyPQEzLEJk#^)nn>l?98V@
zPvryX9go%0E^9gD=+rK_^-5&Yq_mg}M4h2mmL2$b@)6ZMfAB%F`f4*=v2WyJn9YEV
zKjyyT$HePuq6S!qplTUiov1_eCi7u)hPlyeGUiDmw^&z%?yxC2+nGv;+Rl6_?m=s(
zy(C358n-@~F{-$ErxYhzJ9bt!6=%1s>NpyMpV`nRhM=tV4CFGmJv!Pow`PVDtD1zY
zM)z9rdA}Ch>6|RhDd9H;LN`WQ@baw57Q8c*!{dv?!H$kZk6bIghhZ`m>3I=fit50E
z?pJ~~bU%vxhKBE#==r3YHwb(0M+1_Qo-+x%mx0Hw(_np(j?TMUQt>R!O=w?0uzn9T
zjkb%R8bp2O->Wb$^2U;Zq*FC)xgjZ0)I%5h)%^m&mT68@1l1tx{XxCem3~L*C%c;;
zqj79Cq@rctIkAb7iJ*CvXR}u8yEj@_Me!f~rebHFkle#;Jfr=iSr@%2+*nk!!e?EA
z-5);+&bxX3g6B*=K6kF?AZ~87W$={wzJSyCO4;p353-wD_o9yo?GsmK+UNB-d+n}=
zDsxbQJU(~!OTySe4r<3L0R!f0;bY!R(}rZ~tua0WypBz%2vNyTdh#0SMy0lvPYl{$
zXR7evY9Z$}tNSQn>TmIGqwZkr6m<7)#Jzlop^dxZi+b-YeOlT%l6SnzW`_06w~Er1
zhQ<qJof*!4{)A(9cd-SUxM+@-k_FC|nc;e0<iz#~8@u+K>v(2L_i|k&Sk8{Vo@dQ4
zbL-M~_pAK(A{ZwOBTn1Qt~30^hCiCAjmT^)Kx7M$0vMr;&F#ejN3|2iXSxC?^$J+C
z!1bX+*oNUSJ+do?wx7p9-K?R%#M#DmI-|f6a!1ujg{F!;NIuM2)ydEK!f+!$NL<68
zDtI<`pcj{yJ@+$+30AiHdx>X{7LUdflX9wd9W_pJqlnGrMlEBESD*Dz&J@eZmsm|a
zCgMmrdIJ+Tp7vSlSQwOM`3vlhzPMtkrp=$bj{kPinIcIGH(i(;V^`@>=5dW^Nyk;q
zh@OwI8fVq)mZ`0lIl`olEe>!`5!8IJ%m8X4wFfx6K)#0x*hf8;x=JN1&Os+_Uh9^0
zN!7`|-N%cs(Lagrk^THQGw`<IJ!LN3r*)_AcKK>Aq}|qR^&*Kri&r>eV|isv<rzis
zF5}!&0yh#|XnZZs;svv)W)Ip25E>T5)S3iYJ*;mygz2=(7w$Y55VB}$-k+%5?D1Kn
zJ=~_i)V1i<VD>={{YyBda_lwr@ZX37NQ<6Q^2<F}L-WNUM33?l>)yG26rmA7m#i1;
zv~CR71v|H)khy38tl)sX6|-##TC(yQVX^jaC5K`VUP%kqel$kh8BQ274@oG@fo9Ts
zUO7o=NeDaPz==wPydp*$Yo*T^<Ud&HCP=Ty*>w`%v}5s6gWZ5^^p1ixX@PMu(Sr7+
zZB>cfIFrIJe%nN{Ep<+2bT!HDq!Op5<=D+N$;{P1VC5MlXx1=ZW5mo9MDlsGe6k(q
z4KS8%R22ucr#&+b)NtF5mt3p5%PHP*T9@aE@C)Y<|CHydiirgzJM$7^q|Y7`E=}41
z8HzM~A<s&*!r<aK+f;}A(zi|zdeO+6N$1@P?|5D@=#=Wpkvy$u9})Lh+&4(Y4zF1s
z5xe?MQev{iiC*ZAo9l{_tSeV=d-?^}`f<TSroZYWL{&6aWIx^uMw?d99NwI;zDYk~
zH7I1cZrBF;Vl!w$-X=aoPZ^dPax64Ro{Qv9@){PtkkAxU1%UIMKK~Oj`Id0|u|7!k
zupn4&yV$P6uJM7Y@~nfZw0-`Eg_iHUNxoGIM~9AU$`=X7`l%N9_!I4?H<rIG`i7wD
ztgK%c20U!O_j)&)(*s45CV<=cT9}JpwRti(GFEr^O8)t4Wt#b3xF-r639&bLBaO43
ztar<vO%}*%=h7W}wtE;iIDbUQVIE4Vs?!bBJak-LZq?L|w^gfZtq17OCz&dl@3T{G
zkujjb++Yr%Z!hr<jBI!>KY1}e5*5jVWc19Z`@5Py3YC79&zy_$#L#+zEtbhEi8RO#
zp-%5QbW)R`<v4$dY4&)0>(#K|3XvqS-x|%Z6XAX21J$$Wt2Jl|U&DZP95kP1pxv13
zJmBsun0<<SPsCIEp}v2<FbLo*XFH4Q?^}Bu)u&wN3BP&=ubggqP13XPvI@m*^`j9i
zo|YHDworA=aO#bl^0o@8lzXD*6}*WGp=%kAp<b`7Lbn%Oe9A#yOuQx}-n~AN5Y*!E
z=p4rqcdS5oPsDQj{Fu<)5=(j47xmlbP~MGS-HRylT%R%;r;6N|YJX>x_mD0Bo$0P8
zi8&l06$H!S#2!MU?W`c?ZZ$2c;H=5?wVVh*g8IYBY0R`HTQc3LW`zqUgY`<dWG=5b
z4ZhFOZD7uHU8gW8n7Y9$fQ8BxvQf}qfVy;##Lp=vNQsvIAXpBjl4U3@)OsDlqME{?
zM^k#$*M2ZYOcajgCEAb!MQlLRxd1;YFCtfUDKIE|vf1MX+XZJkrr}AAxa3eZHF<Iw
zrrDnMp`C2liMJK(u-QzNpPh?Th?GGRL0ssASFGXJ$oP4KWO!=jiicA)Qv^s(-$;)}
zu?qCUrLDqyBiK$fDEElB`d0{I#ndv@QTE;@Ir9zC3c5-f&2LUizm>hfztMh7HuX}k
z?^h~?agiIwi5Hx+7fdC(O(0Qvk)Mzds&`GSLG3WV=?jbgCEVEExU;6|u37Ng58kfU
z`~6a{jKVyM;)|*e`<=|@oBn0CU;rg(3bLDgAgG$Z23w3;M6Z|%Hg)p)Ntwf2F9eBG
z$IvhhP4>K^F!sPBD*N{Vr|>mqLZtg^vv74cME<YxJu7P1#?m275Y--~(C@%1Opj%Z
z+~LrFC0Vl~og*ZEc&sJ_A9MCBN^Gpxs3OJyl`X>(I9#A2T%d|FJt^o3Ga>FC(O5OP
zV&ga!S0*d|E@6MJ6&`*=KPin_qq|80ySO-UkNtuiPnxj0ERBCB3)J-!Pk5x7c4aCk
zv~k7N&aM4}<Ej2GS)sMHZzg?=3Nuv&`&$?iYo7*7Td|I@jVm(Q#WksfO-WWYTqeFi
z^(qxI+C}^p+kwz`9Yj^}(18^S`PCLWu_KbZ35%(GP<RDh`F{C@-_n=y8u5lR)Csqd
zYcs@>wJkeva4D<Sr>DtG#@4KzYdN}D_1kSh<3_6kv4f?p1LfuGA70;|4w%2BQRn!&
zBdvVY3GP%zuNER8XX`DmUue^$wLqNpjVAXe7No&8a~4ANQ7D+CxOCKX?e`>EMd?h%
z2U0W^T76LXVwzGq%Jor1&3k-*`dJlE<Ity8CUioUBTv+W2i;xIPm`=#Z{w(qYV)DG
zi&>1$2|yKPv<+r{=MDQVWKNUzU2HVPFe0SP(kXYt9Djju+tC0Ri#Jth!0|f>+}8|^
z$kaJqkurVurrIf%?ysDgG15bUqm1#R^x75gFUnW0W~C8Agnp0Rj9-)m`d}2LsGR`i
z$KPx>X{lMFMhu2Ij-f|E+A4L8P%ofEsMjEk46Ehe;bl4AgFfeA%c9rWcQ>LloAT+J
z%=Cc66^S>}_ETXMK8MeyekY<{vL+wF9-Hwpb$Ca4dJU@-=<HHuGW)hTwS>Zh#e1Qw
zt)nmQM1Nh12(H%J0ubS^dYu}VP|GiGv1aSLpjAwsc3SGVmRWL2BztIHnJfDX%ibR&
zR{EkyIL-N-Y&F=wbUnkC4Or?h=;V6|XAOKUx$*2vzKrwubmMU2jOHNIQmo6n)mQ$J
z=f^+E$#;J>!(9!Aj62r0bFZhpKAM5az#-uzT_ff|Nk#oxk;ER#S?thS!~Vx_^UK|0
zPMXnlZ4_OIR_KouFVasd(=HCh)eS=_mA$NLH*eG9Q7*&VdvOId@KgbP{@}q_4RuQ2
zrQ-+tmIH%s&+g?Ppc!vk@98?78RRiBriv0#VN$<rup#_WKg5jVx3|BW9)pRhwqX1l
zjytzY9W*Z7rH6R6Ed>uXz4m4~{k=u`+Srs(slF*>85mV7)R3Y%pqzSoLiGsF#uP|l
zpVp&5DVIbZJD$Y&Qpdp$|6$^UYf`<(oD`}tO^{%3<h9yzz@@;_HR2ORmDfrz-~SZU
z9<|+z;?L+2`Sj+xn)!)rsnHh~Qau1$v=OoOKt~)17k>SflhF96u7t=XGk#yON+7{{
z9XE2Zpj>nx9~$n5_lFOoudbyTxfiTg%9<Bi1tS1d7jL#jkWB4IPSb_4-J_BEm#xdy
z)n2uha|uq{^6-k{o6Uqt_ocK;gI~&jS{fZ%I~gSNN&iN1iC+6_Ywsd&)fZQ8RbB8L
zX_=G>q_msdOSw81Z98KiEZM&*jBh3r!heiX2^YqGAa+&U59Gnszd1HFk7TmLc04hH
z3C%IOS!wwG30so$@OiwzK9*0FZbOWU7S6h5nlo<`1ZSQl2==YC#r1RJ>XCZ+P4?$L
zov`ry&Jw_M+=(Glu~ZG^;%W(xy2-J+5zL-35{KH*uw?I+>CAsyGfZ2uwCwIIJB7)=
z*%B}x9tEf5su8_PoJ0@Lw6ph`>x8G(%&Y8t+l6y<SgnJCT$3Es+`$~;9nG_g7Z=t=
zihA;SOzG2V_|TCRz7$^p#3)!W#o_Xx1(MMos|!S}J4AI6dUAkv9Af9t1(JHD1#fQN
zeztrn&BWva{22iPfI}U(=(C2#&nico!k`1v)Sb3b@Tji0DTk#SN`5ON*3pu(EU%md
zfv(Bm!)R@BB0v+b2~f73I6bu^aU@!<u5cGUp}t(4ZeNH<4S8YSEqWUIy}^g($Mcid
zIl`>W@&3eDVkyDzi;CK?JfnRNb7nJ47NlEF6u()(wtW9$N^<ui`!tYz8&_NVWNxCJ
zOoM02`OYLy%hk$LsMNDG1s+8Wjf6U~{kmZXy28S|Ej#k-xAEK>$LGxUO|L97l(?5N
zz6iCIsAr!FdY`v+L@3`}iC~L0OS(H86Di><<kC6%tUbOE6{DN4BCGf9J#)T$qJudJ
zDi~cHf`Gr2nR3_dp~&nDJ~%%;MS$u!gAd#NWVLRWdrFe3EN=8p3?~jdXRX^qAXL=)
zh*br<1m4OiWB(oJU|qcd@?;T27<$C#2Cxr)Drp`b_y}$v?;4&ej5}_4uf6(MetEv_
zk(2#~&Z_}e-riE#C0%?@OS{?=>uf7H)Z7tjN^*JCEBhHF1Tm`i34VZ0>hvGhFHTev
zmy?&YpLx8<6B*~P>X=~Y8+Nm2<S2vgDvdcRkQY}OrAn{pDX}g__na!|{j=>G?-Mlf
z{CrOzkbNYQc;`DSUKnA^^oqTfPh<`!sFY%$l=hl_Jqy*>&DOA)LFEGvG561YITPxo
zyJm=fs2RHA;=2x2upp0I#N0?gqH{yOGY6UaRr=$VckRbC@ncRlp<c0e57L(IPPRBX
zzI8Cvn|h;NCO}u_MOAgT^YqvOvV->gRF2gmgBA~p&TAc37X)0xsVlEkxun<g2+LF^
zIaUL5nH+ttDfTPsm#fzmM2T7p{e)YP&1v71DK$36qOc0=4N5(wlb5W|31<WD?b!8r
znTvCFEUT`|@#d76XK#B=9o?l!h4pWp$IUK&>up;vbc(Tnrzo(ty1}dX_}A4Aj63Nm
zu#A0Ujqe3Nr7_l!AGD7&3Yy7<1+~Jp%^}Nf<xcKz(No6rYAbIKGb+i{Dui&q9F0F!
zkY=CSyHm=;v?Tvq+N{$6v(t!|yiNyabk7@JJ)7;E`*T+O$8jOS5n)dq#pPfbSM{Y6
zysp3+y*hS0mX7JGwBD6s3OgHiJ{C%|znC_XgiKuXlQpI3@6*z9{8e|xqdZy5c;MCf
zl?T(899>7I|0nopQDbh{Pt|U`a@BHrf58_IDqN0Qdo#GVGO5#b-UM63Y5y?G^2~2C
zr4$KsRm&HOzV~UQO?|X!TxbkdFF);>D`Vql_$Vnow86KPlC<P_M%&BE*TlH`VRPo9
zRigpFfR`hkrD(Z+)$(vbtJCa*>8?ivYUke~)J@0;fjM%(oP9sDWcSYzr3#Lbz_$bQ
zh+_}su?pS?)#WtDRP8w0nThkJGFI8CvmP69gborhFOeBl+cN7^jz@hKarJn&B;vTP
zrIRzlX5MQm2;4U-t^xizHn#_h(5K&juM=leWR>6IP+@(?<>E}$Jnwh?O9hmfG}0To
zEqI&8yH9OgFV|XCEr+Ma<$Sa#c2C89im1;D%~0iLGaw(#F*}*XYo5OBGEfnb?(v|m
zWx02SSVh`3&#Qyi8jDl}4#*GMzYsQZ`%RGkihz{XS#VWlpEA;n@@3b!NRzgfop0V)
zHan2D*41wS_Us1I_!OR}+`u+g)Ho+>|8XCKsOJOW@52VOzI)eO*ZZfWrzKJ<0;BmG
z^yAly!+iQ97alFU7sSVY*RnTf47bSg>p~GXnu0vOU6q)Z5KNmdaku*PKpVtRA*WIA
zAN&V>-jLmhdEv;`#Ak(LDoKermT?qc%bZ6hp6?q+$<6mNGqshXh^!<e>>^(B>!Fgd
z@afqPPosO*yJ&H{Gg@+Gh~=G`6GUe&HNBpB?vmH7vQ8uC>k1W;p2c806Z)<WZMd_D
zz4iFGB<eK(fix42S(~krWhoB3GZ-ZBZ({Z4m`jjSS%TIFnOuq(c%ac-VVJLkgzU?!
zUw0EiU7ZW?I-PcjhSPc9wO3xkld&t-cRCaQ8em}J`h?}qc<n+9Krhjxq@Sos+{g~5
z?TPi;Fby43S>*};{6r3t?0*tjks+<qU<D>c=r$p|+sj+H<&A`<M!tBVH+a@FaqbO`
zM6Bg;wI|o=Lrsy_!G2sfSuI>Ul=FgByemaPJl;K$>C>W^#kU(Y7GJMshov5oxolY{
z^QoJ{+PVAC7?zHVx_AEm_Kd;Az?tAy-Ro-{<=2;Fu03u)bMBwKRN(PK+>io7BEV^)
zxYtJK?}WeKy0iC~vbtLg^ghZG?M~;t(v#!ZXxURd`r~<CioVJzYNWeXKcAJK*t+hI
z?<+1VBlP1$tSW_`ig>20gmY(1?ltRvF_}0suGh*HjJl;BR~*!ZpTku-S*X_$Tns%e
zR?$&-0XRSIwbLTbZMw~ya-8$ObIm8G6--237O!u%y=>^V<_If1huQ_qx_q@>=@7$(
zrRL2fR;y3W8W5dx(>lhw{Y+0<*0hi2>!#;jKCNRaIM({w;OjR>+0HiW(*#?tnaJ&F
z9zMgf^St^dS*lECd!?@#HcD%c<?F20xBvIn)nG*2skU0dNbdPcyQJkpOGR4{YVvl;
z(t3-?&4#A=vC*EKD!B$8<>y@Xsog7h&&eh>^hjG;tZJ^joYbxP7MIpTr}RHhMLKpQ
zXYEx&w3`}#s60TNmXYzJI)zaxt@z(j(Ot*Tj;u6kuNOJmd0oHP$})#LoXRDa%g<LA
zl<Rr5Ggq&-cvQ(=G`RGiyxRm!p53tA^gu-gB5Kfg89gW}|GNbIM=t$JK}poUUzs%U
zf%K}`!fJLDlhyrorDHbnxDvM&<4#bb{8N_jOH+;jviUH`{0lc0v8&qB=>2@&cPFmp
zUB{LQ+vg!kA0+JGV_m{3?mztZV}4!kGQfQqteORC=o|RBqW4L^!H++ZN2zOz3)IAG
z;S-6^uCvx$A$^kSAf%D(Nl_iz`B%<-uW-i4mk_IPHF~3t=a|^%`;s$G{t{<_z*UZ#
zO0l%|H^t>v`Z7f|rv7{%JBTjg7RlOx8}+)%Pc;|eO8rfo0v6SCXiNaBs@oV>I1LTy
z!d0=-2_c+J4JkzH#IKu0i)Iou*xBG@`Kj#R--L_<{*HdQU#@=la>Go%ocz_+5R^!Q
z1Krb$`LShJ@?%|Lin@tw&K;JLLL;nT^er7U^=Rd;^Ml02gQUKSxx<8rM~<_B?Xfda
zAt)zw+f6@(kaV!%_|@BhM6IvT4$%evXQGCDe<=(cO0fJ7j!VAB@e-YZ5d7>Yz!*_N
z89kI4R}`7(u$s64T9&i2d0OAf+`NxDUc`6IRzUMuym>ty!K!3U)y)STkEb2@{ovl5
z0gk9K%<y)|Vi2+1^@j|8OIVJm=N72sKB&t!X8`v^q^yV1%B_d+sknZdlLsJ*;wk$c
zQDw=>a^f5VgYqSgu*|LVUawZWgw8v_Mc}!0wG~A-Z%P!BZld5ql^q>52|A&#_Ueim
zQAE5t)5;+ap-x?+^FChlw<-`~9oSYP21SV9!5{LXty6&X2x`tpo}x!XBl1mDvxnh!
zB~Rmu8y_YlLU(vgo-!8*_pfNZZMJ{DE5+si7<=omDA%qJben(y41$7`%+S(Em*N0J
zODf$UDczw`Lk>fOgh~s7bb|tt0!l~;NDSTGoO@8;z2E(P-#O<Guf4BpZ|8ZQ`(F85
zzqQs2euDPCB9IgVw$b;pwinKb(S~@$1G{T)lN&ndaw7hD8V)qr>3l1VV0>B6lP@8_
z7yU-ne~C4=n=QD`llD5A2Y#nky{b4_vpz>F+<Y2l+c0@7r^Ig+=+-ET*q`})nou?+
zQm<<(HsO_SVF^%-ky=Bjyk%Kfsg?Z)?#d@A%*)zUTtzISZkxKvQ(a{uDofp~Evcym
zjjJ6xb*pR623~skKNeYCmu!<U_Hx*s)4$uy{?TIlOMS6je8gS`suU`Y@2;~Sqq)&+
zmachPx+GJd$jQ<ph2CaYj)(~Y0%6>V&1scc`ly(aXnHq{E7<EbU~)KY62z>g371mM
zJo-8};WOj#?y+N$$l&x}w}Q4FMP11A{?=wgUPd4(pTTbAz!#^yUs%p!^uhDfF<5c!
zimHs_7keAS7&Xq<VsPj<yVBwRguQ0@!Fa#c;Lj`6Bgq3UnCY5*Ay0~&oqy6S;8bAM
zZY$UkFf01#Z$caJ7T7ceEBz&yS;DHSZ=7uQS<l*5x+>O`?(gG9T_~QyR<hnq9$RAx
z0oYVXVF-UmeO}>vaeBDU@EX6FyT1OVj+d2=N{vu*m8vwSyJH<>3}$>!4Hb!3EdhkS
zG-K}mYFB2bXq@lqUb2BQm7Rm}w;Zf)dlXoCywWavFWb>_x5Z?rwMQo@=yO#(OZ>fA
z9u{`ktVq5U4p#re*hbs1SWlPr*TIDQV;}J13Ov?Ry1s0fpX|NjQmMO2{@vkn7i(B}
z$>YS8g?0`=pCJFS)nX$`HzuprBHA<8<etHnXz^s8%|@%s<56$w;Aj|uL*}Eeepjeo
z*(=rEScuWAra!E9Fc_)6O&!}`6KMf<%Kh%o0Di)t@$%xgw7}A5<6|j4CvLzU|7nrN
zrFjQ>_Ce2F`qQf_FS1`{0geuR4**rlFPt}(H2Lfdul><8hwD)=<jk94MNSStwVkKy
zbvEA6FNr}WBg23s_v1)5UT{oqoxXGYHkBneU?8x^Em?r7WLE&sabXzaG1`fFY=nw^
ztVQ?k$Y;@~fVHJl7Im!Wd)Y?o3*+0ElYu=#4=`i<d%f}FSKpTcS4wrFE@&I~cmWW^
z^eTNMUl)h-82iX~EC2#5gEdHYjeKQ&mab*<)sOhNHL18cMzD|nPWrvf{6H=6=-9Ar
zh4=kZpmXE8)DQri1ux9`N2XSB39A$Z%A1#kfkMYamzBU<JmX*bCP<?fQJ_$t-IHvs
zJmkD1-nL?+)gFM?%(L*gsG2*-lUD7W(Jouglw5h7th0mD$trzd)gsFcCe42uf=ngs
z#4ylf2bT0Gg4i4vqJ%~3|6vBoIP{Rh4X;1`<S#dv3MRIna4N=A@olBNmfqG`R>;@x
zT-1RQ`!3N%q3swD;`eFkscu1&1k3<ga#!>tnNU3WSo*#tph4zXX_-yd06;FJm5EvK
zGd`Q(C_b~`=)!lQ&w?jDJ6#t9gYB<3B5>}W@2S2bPJ~N?C#@QMCHo1)qw?`NkLsP^
zEw<W+?sxoj(|xZ?1Ushh(r(eS-v3!Wd(3x(H>#6<=nI=r@v1|Y!+EXDWqRY;iBpF3
zNUM;F2Sg7$+I7fia7LcvI>hP8&Xa5F$eRtYS5*C29#FQv^&QosuM^*p?_tZDK&q)e
ze2G`R<uAyUj%S2l#aVqk;50#atXWjKI;hq%uj{H54}X4>N^kl)f=NX-a8=K<a@CrX
zx$$t^XC+^3@vfs7d=z%Aq0B(6P+03)(Ipyq?s%hY+tG(t(=nm5-<!$~#TZY{b@t;j
z!L!jcG2EzEWh>He%5!abIZKk{Y&0b`d9JCUUJUXb=Imw*7{j@;LJ>{2o}AE(tgH^O
zTONZFJ9(tH?o!-{gyXJDkfK3WNI0oLivB_ai>&;dO%Zyz;VFgOae(FOPu}Ax`y1yj
za!%Jhx7E0*t{k@JR-|N<Gr1e_<Hd~$GN^0xt|iR-TxZ{w)gmmoee*@xH+TiL5=QKW
zH*=9y2qUep_`B=~<*ovG(>$ix-49o!arKaDI}=wsBoX4S4P5Rx1CP$(lv}3Ru2D%m
za?dlkK~k~i(sYl79L4mi@Cai-r}jnsV*_WK7M%I65bR1@>I5C8P4WR*%V3$d)rB%l
z$7@06olyLo?8$Iv?GLH0qLS<)B!f?uQ9Ifr-sR|n6V|>~XsEI~i&1@{^^@Hu!jY;|
ze0F-p%e?B{jb6jv^LpG1$6U|^6-in{{yI|hM^HcMFO691zrq29h<idLX|YLj#SKYX
zhgPJqO)1jv`9-_;RF9!V&`bG>TV7Ga%wzhrgyLaoCKH87>Q$V66_f;H!&7Qu^$^4>
z*p=K5{VcD|XLv%FQuRhpX~>9_HNsL3?quf&b0dW-2o@!T8;TAu4m|2z6bNQS%2!Z!
z_on1Z(1s2Jfng_a3~99_g9VhdVpyOC_Xsl^$dd{chjE#*<wXJ)DQOfsuU2d5Y~tDB
z?ZPtO<FV6&)0R;?RkyDmZ?qWafpo7t{VFMXwMzE8|1C88%N5mul!nbxCs>UEv(QM1
z*U)Z4qAd8Zb|m~-%PkmD!?zrjtZ7inUC1R7CxQ{tG~F_QL$Mi&kOABtg`+}XTK)bG
zI4mtMctb0N)C2=xDe~oqmwUcSTro*<A%RZ!)}FEDHino4G3}sD-;MGFE~V!BLl3`6
zYJ#0%aB=<~$@x3CC){wwNGYdh$F)CGEXf8oU*DiWM~XjtJdyKI{{qhySs!brL$n@Y
zOSP46Aa^-g!MV3jyiRAB=M0SFO+`*)7j|}U52y`9H>i3ImfK&qg5WJStGXw@>QjHv
z{Y_NGp$%!QK!!$6>>0vAtQN`g<iq{Q$Vg+*D!j028VCs@oD9KUEiO${G6%G>`ymbi
z({_0^6o`KR+sm2vA3A<wB(qMBI4SJv%YVP+@Wh;_{c>-<K!_5Ojg*y}ed%VY4V<Wn
z@DLG2tSKo%pM^~Ke_O`}r?oy1VmUo|&Os8qHu#1nrr#;-rvGSq**REpiRCQ}19XCO
zcsqP)AjHVtMG`(70YTe5Tl+8^J{PfJL3|^;MQ?)6p19@K;f@hPjik1n$CbaMYP{88
zw9oS&(#fV<!}#snw;n(V2?`F5EGfBn{7??(UpK`y=7qD<HmqZ5GW#MqGAYsuA!i8Z
zD%U)UzpW{G2|3_E`XK6+W~lhj){YX_VR!3+-9nuZX=?NmEbQ1J*&k}QYu+s-+|ZgP
zMb3lH{wmbB{fYy6WdM3Wmsb+ZY4-+WY}5OyzYOfQ;DefXf1{Q<L?eb<*}(}23Wm}K
zUu9xH_RY;jOYT{)+xU|D`_KPX_-xqGx$+W=g(w;N3lofplR_^P5y!3<D|WK?(6l>+
zwIh~Q#fMKQ6yZmx=LfC`+|G(0r0oeL#Cds~&exj^I^KDxOP?<nt%Kt%En^X!IEmk)
zewtK+)k%mXM`DH#f@g?G=}EJnYNX}~fiZby)T=TGFRO{$6KN6zp}&0yg4BzfZ|SB6
zrS1<Sh&1_&t*2@F`*cf^8f3cS0fDNKe7E@seNIi8y$z}fT?j1+(YC48Frx24w*DCB
zYkBOYM^ujngc{0bX?IkFV%;?Ocv3?VGtm&HyA{!4Gk`t9l68Dic^!P$&j$ai8>{uF
z?FrmwKRlj`T>SU-d~d`d=m^ju$K+I)O?Oc*wl^xF+IKg7BHD5pIs!(?RpsnWjET<V
zvE3-_WnZ5)X;`oD9XWZ$xKyU)Es(!qxLBzSujH>5GuOn+byw`5PZAL;NW`Az$ms(z
zGG&cRapkwi)AC>VEjRIgviBy)May9A@Zi)6GF|6J&NJKXFP2dAk+kI~SgFaZ(|=?P
zo$7O<VevgLC|+L!3=5;nQcP8kTljP*VQb5A*9l)Q48fmGSlad9rZLK=JE@xp{oQ)d
zB7}mJ=i%lu+E>cBG5>lG?+jjLt(043t(jYn!0T|~o11=H+I_O71<5e29V_&7G_iE2
zYxqf1JPe3M0WUKn*B1T|l@j9Z!_`N2X-RsoC>~yf;;a;-xOtAKqNx-6)M?UWqcoLA
zSKnBjLwK;%)!kB6^iO#~Hn8*HUK>--TxzNcW6w&Xbp-*c5QWgR{j}v(u|xP$L8Csf
zc!|OArcG+^*3BVerNQOip@~Gv{v)bLmzOI_Bf@OyZ?9<Kx*Zq=PT5dLEbTItJE?5`
zG9+*?Of!+S>d7}SEh;y{ac4=xsg0_MwtNd8+;z4C==P5R1ekU(nukA`lEyEd_>afX
zf*<h1pb}hAl1K3Luxj4+sX|5Rp%j-^>(LIG1S(9rcJ~$KT0K@b!4tCi!t5-$Ckc$?
zF3*(H>hN>WdR<090`~h~5=s&r-&B`zmL!gZ(8OeT-*<2lGYq&Xb8p=h4!wBWnyk!x
zGO=|S`PKri(h(rvKeh6KTqNyy9~hzpYUkp-AVzu=&SjHkbP_b|cxQ$VI+6I`6*L$z
z{`0nl5F}v9hydD?xMn!HI<752yIko?VMr=@!8)8V@95d<R4o{hO(SRi>bN-8l<mx8
zJ_ao8@1&tW;CsGb-hJ+O`A6=~)fU!*#mt!~NLvyYGzcR_W4^OGu7^*-e<zTDIu^7I
zw}aV8YKt76@JM#a^pIQZGRDT~TVQR8p`oE_2KO(WZ^}kGs^zyAI<y!Mtm_m_?J3AG
zWkf3vdAOtUM(dSsiya31*lrEkP$&@P^4J&Gs9R>=cUZJvc<E!UMN|B}D;B4vTpfa!
zhF&9~ndfav*Ck2UtWWH*IBM*9ChfEDw%J`|y~@kenS63Fp*9rpov?uXWm8Dl?Y5#d
zWea#u(g&^S<JayM!vb>W0>8<uv7N^Du)NOkgg9n7+9+#{no`@^lArIY`S1#p0ggaZ
zn&+5W+3s@TRM5veBz7ELRFZ7w=WxHlvJgh~@4KLpWud1R4{}~}@oe#~Z$4w|KcZId
zXgDU__Cu7hPG07DujBiCMwxPC_B0|`kor=83^u%bHj&ZS=ea@^<Tp~%V&Hf)oDxcr
zALeIy&!F0N$u{W~&OJ2)7OrXhZNX`?KMI?k2Qddj;);w~@P{hw(vCm}c#-?|0?Q;X
z_x_*}%4B5(3~syw))K~nnW)nC_C;5uD?(8dDkJ+A@L&|`aYi`S)_w_5g3PxL!MJ8t
z?KZlScBjM0C^H(rC`2pEFm2ljb$YAlzB&l#JGuvd=Q;R9+(V4EyGfXxUC}+JYVK~7
zZj|%-GA5sTF~>E1;AT|2%n+3eBBriC!)dy4qp=~M%WPD8$VFc-92QB6&NHH`S6|S)
zZw)+4&>IuA*F&UAPt^Ty#hJe;Z=3!)($9nPzEUkAf2mxw2HE5n-A&|9sJXJ`ao_#o
zfGRAKP?j()z)uzJ{i$DV?j!E&(uvRMQnuGCJGyVawpuKgNaQ=e*b%!%&Q%Z-tpab@
zD3kng2l%4J%sk7q$uB=XyfTq(y3YK>;CTHFhO0rAycAU*5To9$N8y}y?P?Co!-wx$
z^D@iZfh#t)LP(HNDQozrgoiDf1tG%A6t4>Oig&brUn5U{_<C93AR<j7y>r4Jle*TB
z0FfRk5F~5Ce_{R5Rmmx@)QFF1%h~A%2sGJ7eJxE_9CQcdI~ib+0^8e2KUYI)uvdBe
zF^Qh{>9Grs5Ltel--!3&G9R4{Ulh16+nG8q&^v6QN7xPq3NeFO{mLpMWTLm*K!o=3
zE8DeALHlWBA<mZIr?c=qG#KHtbofwQGEjO**Co4hAFDVrJZeAZ{9Dn-q6>)!uIaZp
z=VMn)R3BA2=!>{{*-L2@TfR?}`Kp94gcrr)5)h^Za)gb<M+938SN1dO607LN`HeE-
zy}|S$(mgITsJb>V(p!^hPJg=Rl=hH0r={Q;d%onroxxDNob;7q0<qyLh?p+^R-9O)
z48jT_z;ghCqP`4iYYi%0@v7l4(}v@+-JcJ8>XcqL`NcjSxi%%<kuzvmy+dTE@gej|
z4vUXpjOuOyE_*)J=6JKWg@r(9_JK%Vbj|Rfm@M4B#EZ~JQdNseU0fHhL_~_({=-W3
zu~uu*he(TBTp3Mx&(3ukJXj84QLKMVq}s%1)xm?DdDewN1IJt6GrS5g|8Z~Wxyosh
zVPC!$*-nUSfMGQ(nk9&1H!xa;nd%rU^xK$C^|?7nE*lf8Oebp^TyNyHbGwvnuN8(e
zUKz<s^=1Z?yhk+HMV}THLfSCAxJ}NjVMN_+bl&AN56{UA?Hnn*zkr{^UhZ74vqGh+
z*w73|?8SRvZ)BlSGPL$_Vt8nT%=j1`NnJk7WoIj@`QbxaW4MauU$3qapocH4C=Wd7
zX@RlcnQ$q(QhPV#G$LT*d$f!3d~*hf<CZw?JdmVa3>qLbIR7T2?DPUN<LJ~lR7I{Z
z;OQHkD5+CVB<ah;HBVtGmB|O8HJ_}9c_OyDeR1Kg6q45s$hUSa4awK|J^ROT*0p~G
zS~piM$7NabWzIKpl`KCr?s*9*yRmEFu~Fo;$8F=VMRDvr!TI&uiFu)nR(+W@e|Uww
zN2qrKHu8!475P}g6UBV$z?u#AgmZW_mtj#HwW9!`(z*F58-a!<EEe7>pYrxg2BY2>
z!5q5uK6ZwB?B2|T#eFbNvCrGUk7UPub*$DxM(9gZGg9><(vPnP%;M@>WAnryK-$I0
z5FnZUX&Vzh7GwM|^#Z18|AxKb@;$70d;OT63Z&g@bHS{{o}v{!@Z(G@)jPtygp6Cp
zmWz^SMsyCH+cw^JV7|q-sB!e<2l;)ICUx?2Rjo6V;5nEJYfCm>IdChQ{YWJcz2JH=
zk{%Z6^cit;#L?Wk?<tuFB*E540fJ}o263v*$}vy<tX|ie^5Af(KlVKVbE4+8;_;ch
zU9)jf>-wd*0_ty5R);0q^Qmc%wNg)<<(CJ|MtPS91$3RUS`YiB^%s|5*hxKVaLpRm
z!rKtP*Tt3tY);qT_~H;$83#?$6<tgt`W$jMgoHJbj-H0rKnF~1S4s0zR#q-zy;~3F
z`WGj3oB|#)ch+3vcCz#87%PK9(xbRl130rjTs$ZwBt&HZ9vl{i;Q`rvQ+fpq8m1{C
z>BEPuCwWG1&azAQmYqgb?bb1k?}WyNy>f0XY;2hxe3ND$Ju`A6P_b3a;{?qxnbJi8
zPRUUVWv~23(PW)^_>pM*`Wu$f64f1w!Q9LOA<wxFz0WU_p&2v!M9%V(^d$&h?*I+$
zd(BcA=cU0nYz__!eN158Mre|d3!C0#;zLaiW}TwwD?&*46SjO=zmcU2y(uCdeTy$X
zvE=9XdXKW#ZYj@fR6EYU-MQX7#0k}TI396@7=5s_oLe{fCu0L2bX`wCnXUT6HEcfq
z1O;}YNY5EjOOGB3wF8QI$MAJ6tJAA}pYX^Ns{;wBVy{>8wi*>GnuZI%`<h#H@Agev
zom<XPr9uPkC)3CFdp~Ie?B@{q>xd{wkh07u_LfZG?Nn&2NhZ+(!==(*5@dQ-+fKZ!
za(?9Q?p{~pxnESZ0(ptwKqyH{bI0JFK&X8KvGeB;k`8S#su1&;wPWAsejlgW-AkS7
z!LFBt4(zVm+dBSUjgHQt2;QyhZ5c?v3)pF*PD*z@KaY3f|2r>Gho^5>fA5&$RFwWK
zs+Qii_GsT`Ww%JbQGBT8klJZ9ttM2srvnLR%2+|4MOzpOG@&bqw%EbAr-Ca2xU3a@
z^4@USkFSX@(u6)0uK-&&d{pma>9WBB@y%VLP#O+{TI6F~VdR7SJo0W3B7@N}j|N;D
zPJW%bb}-^E9Hrj>4(|c-Vf1;+ku+%QTi&VkDxKH#Y^PX9tcaGe&qkeRAk5=m!f;L+
zq*?-gNWTbQjwrpaHwa&I5Y4xuVHVNf%B)9>L8fORD0DGHnXX8ZR*t9K>(F`IRZezx
zp=v#8K-VJ-!gTA`QTc`~xE$@-ZTH9A`ZA&qV2C{^Ha!%_wPOfHGzUL&yn}hpGO`hv
zH(sf$tgNE?q(_Xco(rlZljHFV@=6IpARplJ?u~K?2xzeK(a}j9lMTo=RN2YXUZnC%
z0j-@mhnz2^$uGs|k)k&O>S!v7(Q8mJBol7>C7uQZs_OqsMp}E*cnb|8NMO*Z&T`pE
z4;azc%#y~Z>AhKs9RNS!V%2yHpQ++}PkEjoU(2s!L0?8lI0e#HJ4YTV3&CTzb#yG*
zS{c=P`}S?$1D?NAUc-wA0-5jMm7)A1Y8sK#R1j3?6-2~8q|@F9-mpm+Nf^Y%s>J1R
zG4f`_2hoePNK1N7sM}?)hxSa+iR&-<I>8v<J|t~87PoO|01<*6Nz%o9(5gGbKCZq6
zwi`zQ6Z`J;zW=yOX-GMd_y#@@ePj6BXysjyO9SBK2Q~Vye5dr&YnLIBgwa@)Zoog^
z1I7x{z2bY;#g&|VchMByPJR$Dtqea8R`fi^i5|c{Z1e14F<|ev>7mJZuqY_KTgY7U
zeDrCxe)!b2xM8*4&-MHniuShvyU{~ORSzVYlxkdWE{lasxFa%TW0lcnVA6CE5DWnj
z=p1MVD9PpLy@D`30|(dvk$#om6mzSC91BeSl8DFiz_6D6G?V}fFy3X#eLQt-4D@cI
z4V7yMyeW=Y;eaMQl%$nmazdSXtu}55p7ps?X@UU>LGPoAgD?I_Ut7QD>F=q1THL`L
zcCDWu8<Ej`zhscF^_^O-@lcV81)KO?Po(MJ&)h#bT;=vzKLK;R``Aa~b@f5R@Iu_P
zBSlURyH^?%BJPeeb(bz(%JFKbGoW4<8(*UdR2hLp@|}UKL>bXlQfIi^^a(a0$1A)%
zzz-(BJeo0+@uV+KUBG{UZO<wK+nCPdP)VlOym^LTlb}6X?a0n%obS(#I|%l*aK_@c
zb+}j~q6VA`n5dI?Vg&Kt2cctXO#RVD$PpMhoIuUHCR?dNA?ymGN*;?o#4^E-e09X#
z%<{(7#sKf^J56u@bw2Y4QncC^@CGD%%FZd7&vqp*h;4)E&0Uz&zLsC-f<fK`y9LMu
z9kXfa>EG4Aq67&qlKq#c9U`#{AzHyePZJPV6#@2%2Jm;mh&>64`iN>~QO0SD`5p_$
z8hW;>cX|rml)P3?z<XH@K3cx9bNvuWzy`)VMuBPAq=#=_5{5J&jq(3sU1)cuXkVvx
z;kQsg%tp$ru_I7f1`rKqViz-~r;SOH3Ei|4D1iaN3JTCP96|@;m7!uOFP^REx(t7x
z7Rg#jxfk3WZ0hV|A45tJ);~8|F!KEPk^OYfM6BL$%+h+lGH8D01Dl-P^KarnsM^bF
zj!4PK5-OKIe*F05xIuLCg8T#a85tz|r+>X*H^9K|5nayKcZ8UFe)Jh^%%;tQbs*Av
zGEBgXXmFAfhpqkHMxh8d;N#A$t@b~xE%NRhtOpG6%k^GwE_t@6|3a@0qQzmxbJB<w
zG)PjEjbTY(y@{EQW!36Ca9$qH_#Q++k)MA{Aw^igVW@(hXh-^05B{Q{=iY~dh^clU
z{GQkUrEisdXZprdgxf8V{b`mt6d_*mDU^UT!PrNhwu#pBrdFY$KcHxcEtG!CS9vwQ
z%?-s||7BYKntTqXo2q#|aWR>TFaMQ#V9zxFCnFgBWubk+984x$xaA?o{amkZed2um
zPgvEo)FCq3`ihXy`niksQIkID6YdhY!k0AIQ+x@ehpQfni}#6|A2uW5h!cG{SKxnJ
z)yN$Ug5G|E%U4)%Akv4yhatpFk(kXpq9GI945rB+&Ey{sbpJ<DX-uW1rMbX{pzWA5
zWAw}NT>>z*qw`({6*co(ePapJIHBg62h_V#%C;@nwZ;oRT<ubD@Zq`nB8U9gLVs?5
zDrfS!%nyyxZciAXM56Jj0uGYLJ*nf{7K^$iPnBYkerMVY$phcr1`PMie_7{e@P<Ce
z;Ub4()u2d=WKDR()>OPxL;s&66o5)dNy&n6myVfPhEnw(wU_*#EKr(_rNP37ohD&9
zxFugBsn<KIyx`(@8tmg(wKAImagJW1fSqtL2SMRN<2AO{;E%qip8_y*amlyhSTrIl
zSH6CIRBE$C{vAXI|MM&lp+r=uZY5G3)wixeEU@sU&x~}!ms2mT4-usDJ<iw85k*ZT
zN+)%7{c%zEMDvU^3AAfS|LFiHuk3x+qDB)wDM9+>U<e(wk3W-ll%o)P<EEPF4eWcQ
z{(d8CFV26u(tFp4m`GAAS=4J7vu(kmQxy$B2H*dA!9*#6r?##jSlsrYk)$6|)Tjf~
zw!g^E>w6)k;wjJjl%a(4@8SK&`dwf4vD7^Gx2?J4B1NlDjb2NQTMH49qyZHT&-nZI
z8gTG0QZ~Wz2&j$M44PsHxOV{7Z%Fa4%i55GH<<Bz<~RD_H<^iEQ!l*5t@v}3S`=ka
z8}D_#Udr&m{);er-08yar%TbwnP+v{J-hS|D<VvZUOIhzyC!EVY~cd`$?R>>`*-G&
z#C$|I1rhoAD!$;Or~dWP%45(-UVm5bPqU1k&W*DI+T*yzvOjNEJmGDCn5KMf!s3>n
zEMLw(?aiz{FIry<!pKlW<?A!!-;@U6<aRJ?v(G<pJ%ID?xMA{2N;o2%MZF~3{hA^E
z_q5|#dRPNCwru{Fbpl{fj?3y8m+P871}x|`0mNr6vn~pa3fng<x;0O{yxUO~mswLn
z`2CwBqN8c?@bHMp$?t+{0}%;HM$@>RhoRwHxmUdM?;SuX<(-s1*#TxoLbw2os82Zj
zUhCnqKZO$OGx6Y92!ga>qbUkBSVoYA&s8`1I`JPq0();P)Ufap42ZDgbe@n*AgH5k
zsU=|sw2?O>wKcLt_H2Q9L2~}fF)>-fi;6&nSuHKXdmnR4l2+)Kk48%|`Y^uC_TT$x
z^UEc+l1Rs`J44J{H{RIqTbx|@>RFAvXNW;ayBLsxFy&_u(vK7i<8Dt}@4clTe2#TG
znoUC{7?_vJ6J<J?cLdY%%Ab%-%iyj#@&9E&gGy{h1+{Do-vaj>g$2vasnK7Bu52W5
zk%QXdU!qA<`kFuzKb|2o{6wJEbR{Jify;x-Tk(}Sw%Tfli>Lpu6HlXgOIXa$e4Xk(
zoLYd8zEhIU*Pd4UpCXe}AVurh{K>4Kg~~&&p`igZ1JZ+y0x)whdf{NW!p;Z}A3ruC
zf{;#>n?%)GBfL+n?2bi8(@weNfP#D&&N>+(#2hSNUZ|1{MO>DkrGU%d1+Uh+jZv;@
z^_P8&nM=4^B(NQsCtF9mn4>isAIWBkuN}cA+ale0&PAsGq!iO}$rrPFJZoaq9%F@a
znGT3{+;*DQbI9oWc%WSOm~P+sn{DZj8aCe<Jx?DiL>(=TLV8DKNv{3+hT4R=)ui+f
zO7veTfwNOSFP2BEABRac_$#c3h}2C&bLnKGTYp@Z^9dY`PD;x2o^Nr`sU2kg-{dxT
zp*WnEy9r2B|LmJfS8p<MTHv7ZQc+-RCevN@JPtUE;;GBA^(B&#5EH}9t8xZ`mfR1P
zdcm9#6EICY6d@@=TN6}fHS`vrrLOAW+~_NiO-vuyV%{Oz+Z=-qHj_MsHuc;*8kpwe
zZDj<TRa{1xPW0vpeYB}axwV<M0aCM-&(tZo6NA6rlCE-;01kpS_C*0I{1tu7L0^=8
zEpyw2w16Cp#jeus{*0f>Mm<xO$<N5*BExRF%BLqj;X%@CaCn0t$0Q}Sb~uFq6r0<3
zjMjNo6LDs#wnb_{i6)6wgdFE0+^JGl+YiY8Tkr<lBYFP%>vT&R{y_CC?Hhs;nYw;7
z<MeD6fBxVpHo#&5Nz0{p5TmQ<D7IQn7E_i{rXGF}+Y8R#0=wO^2Pk{fZyB3j4Fn}o
zfE5G<p+&t85Fif`e4vljnRQ`OuM*=$iTRCQvVFxb(r!!(={2No%DQi<)-kQU8-~-I
zmCu@NbK)WBhJfvuTQF362l~|1qXt%Z&C|=a?;iHQtdNV!u|BRwRVgkXVldfJ%pd9V
zgxPTvHpUqzy@eq_IVyhcc7fT^+2#x3ltP)JO?QYU;yi$hW<LQ`I>xnADkC_wiT}SM
z<b_2D-qY02YXVDP4;}LdeRbTXbg&4)ES#{Rm8v)=Or}RtaAK26QVVPTXISR8=J411
zk<q|>fevn!-y8>|nRGq0$aPVIC-VF{F2g6iAW^0QWz@drmbn|<LHs>(H&&>`wbi=?
zaO#+Wx2K&uu2P0%d&3r6rN}<3CXQ0=Wzhw1y*Atrr(q&YQz!fkS>5D&A^0@-YpU>`
z6C4UjVgrpm6Dq@K$cf97b;HkG<rA4beD9b@IBw$&NHrXQ`RG4;kZ!<rh5AC;C``i;
ztm%<@<W7@OJ&TK_QESnOYDdEFpA=kzMYb8k+uf5jJ<DXIrO{x%Z3j3hF0(+6;`l2%
zhuorK(CCT78>cV6^^>tCO@@FN7vj*HcK_{HGVezP7eIRK8rzu@m$A9zqbB_FAZoG?
zFdH-!LuD2SU6g06Dqf4T(yTN@L8PlMGrYVm+VnJ*O@rCtm@fF%<I|{XDmV0x_w;>F
zAAo?YbvqEesRe|o#5_Jamy(TSq4d$ILrTx0q0Yzv^KMB*`?i*8WtehtP-+%t!A}<P
zloS>jWDGBQ(QSasyod7KQ}nFRWfe7>@Uo&?A0pw__{mLmxuar(jO#HVqMSP<*j9fI
zJY@F^^QGofI|X@zmgkPg;O}RGrduXz`s7$6v;AizcGN532wb>CFfkff=Jv1*Su;EY
zshzP{7-f?YA)12-PlZMQSQBn<0@U1(6bGcTO?bo?_rPXIge^h^FQh{8xWG-OAnQ}7
zrtB2Xi1c1<C#~@0nANU|#pU%)VzI|y|Hpet;h(ebPs}*BL3KL+MYqZxML@;NZkN5#
zj7~y>ONC;C>`T-;z1FGg;LRsGeJ3nQcl;-GZE_r_0<fQ8H?g5MFS;8F0$s`UMSvvo
ze14kFH>uE;=oPm$?(Rn#zyOW(qHUM<qZfAW&6Kw|uAuJ$#;G6ScEm1#jbh<QJK*f3
z<W!7ajhW;gjBiBivb$K1)03YJ(NoKffj^+F?DUhhr=IfWJMVm(@qF*D1)m+|Rc!fr
z$5%Qpe?)YA-w+OP&U@}#PZI>4m<xj7xNWy)*>qzFq7-s0E9MlRt8{~craZ(<4<*9n
zz?UUm^~!sfrfC#{*Zt`!?9h^GeoCp0h^{Z2_9%<q54PNpk1NyG)@FaOWzMtx@-FrH
zKmO2dx)p7uQuAm*8fBpQ#z+biXWcSAwvLn0Hs{M_`LNlmrARDAnLFn+LALhs8LQ?t
z8r1sI!9GcBB%weUkBtU|TZTd&W0r%m`bxA8Zv5<X0FtT#Pd{x=iO#X??l3uVkoe&T
z!f@~LCJA{v@y%xCi~=y9b>@<eomUrVk;g8LP`lrdT4>{mU`I>?H~?!p7&G?Q*FLEZ
zIsJU?dGD?S^VTRkpYu5TGdby)>(vD9Z$hK00CHpVn;z1D<8iIA31<fk2Xzn>5=YeO
z!#6;}na2br%ID)X=y$8MI`K&fii=D|PRl&~1|?z}3y$iH7j*+5RuNzoZdWtFISvk2
z>-%{k?wo{=E3O+5q(x}g-eE3t0_iVSBth{%<6gn!?0JPBT_d)SUP>*+P3l+&gek-h
z)+^Hq(8bUMDK9{Nzt8!-kD*NBc^om6z(X}Ta6sKaPV^mw&#vdCAlUp$19}FKOUUTp
zv4V2H$PE~p(28RN5rT-X!q3+zmh_T%G+g6WtjQocmn`Vij@dqM2EjXQ{goBGjh<1v
z_}1D(1=Fa}rd+t{%`|M1T4Y#%ywMd(tWnJ^kvxd$CXmUgHi1I}rg9<DR}p&_*pPRf
z;!+Tzz&N`;c}7o?c6B!<d#M~l4<lN?c!1mjD>~Z%z1?K(=O-?(JOMz_QDAOC$I<?#
z$@=7H3-^j6B+_>l?9NgIbE4=}GUd=sP4FNTDsFJ_3D0}3rqmlmM8?=y6ijdjA#OO9
zuLEWcfmOSDHoBA?`u9QJ^=%iNWd$g+WZYw)^s|<+cqgY9#rz3IfLPBjd#*~XSG^J?
z*+|gpr-nl}v@*>G@D;#oI^%N@qHGQIL2?BsO_DH9C}dLL3K81YzUJYPxtk@FHT#*O
zFzlIvFbzQ%<r}E7|5$1I=ed&}^GQ25kIA7wo*tFT7NZ7#$3hTB_9ixWR7$7V=*WEA
zd%%Za`u8yyn}BRqRrmmq{ek<o19^&!xs65dph5aK5AI0JciqFjpiV;_>&b3Dr*Vc=
zImOuRYFBGonViGlhmChG2iPJm(22-1UOR*pXNQX0=&>YQ&ALRV2UTAb(=HD>ozU$Y
zoCuiT5>sd1tyE#&$zesc;74|CcF7D}iYpcwLqEA(SC`1I@@}hAt9|z!sMDg9I+m+G
zIs^3hnW^5RRgdG{m)t<w81C}}D`9~}&A?Mx>rYRrZ@+26iirV$0%tOvi=2BFd?)!>
zjBZzlKEGI6KQ)X9%C&;Ul14IStN@854QB`NtwB~8$a-lgu*QZUAD$kLhl`la7<n1e
z<3+>MKy{T}w%mUfli+6wnGdRX(BpI>Fki?hGBQOOWa6k7PhTLP$P{xpmH|~h^y9Rs
z6uCK3x77W{?bhmU!6q4~7Gq!Y!TotKdDt&7F!!4vSm_rF7JV>ZxNso@M8ZTA6nQI+
z(YBIE69MJZikHDAh9lHIM|M0hRGH1bKw_q;&#nQAYdsXjO#MX$-7~r?ZBVU*NUT_H
zraDaTEg>HIfGq$l=>E~b8hR|Awn2{84H0FcmJ_|JGpiT9a@C6AyZNW(x}QakIuRmJ
zrvx8`Dt5W<vp`|=rZEcf#Kr~AjC1zxE;XxSN%jg})N}QG6m3Yj@Mk~{>U+ACCWUGT
z-rV?eFbQ)Bi+05$ug`PIVy8zcCkKn{PN@(>Z1|r4+Av|zdFjH=r2&nG$3FtSK8xyA
z*gl}VAdYmvTDPvIAk8D;_#KzvKC(IfJLY3wO;Y=g?CRy7n3IP!S;CZLM(NJzRbhy|
zuX*Obly@H}?;Yspq-e#=)DGvD$v5RBX*c)gLpK)={~9MaScL#QyGi9KWFG7RDsoxX
z)hM^onJIaO%Ld-A7+c<3;N=dsykkIJqJ*dbC>?mIDKQld%&xxp4?LigeF<PrnceP#
z{ncq=rl3b#jivL8Tv^2(@jVKo15T;JLYxw1tFke$z#?{(vP>92O@2ww=nH~xd*kt7
zQ$|cj9Qz`*q2QUV0dl06HIiAB)(rd=m6#bEs*8L6iZ_n1$4(xFpd-S0<p&d%(f|@q
zlkk~O1K@ZQm5)XB$3LJ32e9$ww>|9LgA_R99>coBUknym??o8<FE2$kh%H3{>$?Cr
zD&;WRnE6`0x2J;Hv7gMBfl&W>t)uRaxw)sngrVRP5;>>-XF%&ZKoG_NJJ!t@4jl{T
zy*&?hJT3@60D*iINJ-mvmPc6WCLve|^XzccAma9bX{ekSg?s-nN(IxRr<^fVVH`vn
z#j=Z%kM(Gwmwo@@Q0-pBTzcY#-HzH}FC(jyXA19@1R|INv52S5Ki&q^6xu=k!~`t)
zU}jD@^PM2jaRF#Os6Zgg?Y9@yNL1FU??}=DlP?oaEta28W=vP8ILNmI+aWm&^<wz@
zFzyJ@sm0m|GfL+wN2{o3Atu|2_gABdD+>=rE8h=zyD@QU(C2*^4Q!FqjDb3Q&uD!?
zta}US2lh!=LS;jssT}6T)vK#R#VtfCZU9@E6d*;{0DyfHIGGx<Bi(Fy>%fmMl?2xS
z3(o%J$gMZz_~VKG_!@N%X#{Q?HNg0Ke#l9;aZEL_N-}I~M>1m$1~c;yoxOvXg!IWP
z{aP4Rir52zm_+^-lk1+(%i05<Vnc?1e744YxuPod{n0o=MF18sb;=(J-@o%x3O_@}
z-s0U>SqNghTTuxX8%|ZV!ykVCZFJQie(%~jcaRiX5G%{b1RqrYGPJ)O?F<@3bK*#i
zGYcqn5h|xL(7^`v;uDhyQ<&UFF=nLvc_q17bbLG`SPu~c_Eco&h<w4qEh!+j7Xp<h
zP-XyCsxMct;wOf!N7aI&J#a<0(V*g!4hk_uWMnxrL1$z~SAZ|9MnKwxxv+#(&b!#t
zIRXdCw0-%{fnV|mdjRi(YE*3f$$_j6Vrc1KhYrfUc^u#|n=q^@k^=z^m;#x>&$kW3
zmjd4Z_5b6|NYR85V2>&TfZt-ke6rkMkp4eT8x&mQNwB8W8(S!H2d4FmP7W4jNdr$!
z3!qmlrDFSxP>!7a6-0djuLFwD#h@<0)CtZcTKU;;nLguysj5bAE%eJmVK6#YR{2xH
zUM%GE|NU2io#+4?L9n{8aQEa4@cE}|`Vktcp9O*7DwP+mgHvr>|BUpryaT{UO@$=>
zH+36{2)~G<kH~3CP`w5<7*I?$^~Y)|HCFA$?)>Ja{xyNCTZnjc=7#?l>7e(f`sv4d
zzGvcLPGnLdbFC8u&tQIzW@PH#cE_7&<+R_Iz$7A~^SwZi9e@-OAY`@sM~wMj$J0qH
zWH;$t?~6tpMp~npHVc`C;vO<(NCNMH<z@GPJt%a%yz1Chj&+$C8S{TE<=-~x&xZ>H
zrCw-b%GnqZ!!g--XPi*NtdW_g5Ze^fwy{$}%rs(_`eV$azD7huVl?0|Qhg|?e2iBx
z2!?g)zivk=z0T`U#?kQ}xIJ3E|K-zZC2vk>N<H)zVI&AwM0>Q*b{rc;Vd@IolwH=m
znfjele++u1?h%xa;;+Y>PDN%cPChJ(8;}MXDE&Jkvt>=k`a*zy83Q;xwt@}IG*7tz
znSURYHSND%7B$)BNyg9&Dv^Mb?bZh+s-xZ-hq>zo7x@qPsm)@r|GQtr;<YpTUK&*r
zl#Ac4<GUmKjqNb~$$*z~P4058>AFqX$Q=b&b;=KVlaDD?yCsl4>~YF6R{_9uMm|=@
zvW&Z5Ah)o1%@O}dHlEp}AHPB<H<XMWJQct-j4)5Jxq7LsI#P3Tbo7Tv7`9D9+vm&+
z!!Hh3+?5zhN`dn23^MQ?eNg<I{?-|S=hF-zTpu5v`R7)H4#;yr26_MJG2*N~+!n=v
z8TUC=`vt7K;%mVLnYvLzH0)9WyBXOxHe|N&Bx(7urrjFSwsZXYl<M1|;WXa%lQT&j
z1KJF{?Vd(NWF&LcsX~lL0L3GQd&?IhYmo@GgVm^XwX)fDcc5!7zeR^AKZy9&Ee5a&
z`q6;oB$gYp{~!d>9afx7>@pL=&q?JaE@}Yh(gyY$iS&yPUd1`yMULHqT2JtJ(`6OI
z{0Qxj&+H++B=K=EgPLe^GIRO%aDjrw!Ug3CaNw%DUK?Yf#6u;4y@Me5xcfW!_?x3{
z2x_L&SK;Xjcnp}K!ZM{BT}^m)Nu;O7w_%arfDX2Fn<hO@3)Lk}J@$aFZcbTaX@cOS
zT>+c{Tt%P4_b$y>&^KxLgP9+SuS%09sHQK9u2VbTH;iTI7@PK`@P{)w0hs(h4KARN
zgRMO-ECQTpn}CxNm}6IbY-q}mar{J!)_!J_pR)@&eG^pgVNfDN=JV(i@L-22@X2Rv
zNaQU5kur6L@EcUyxxDifWYB2eZWFwX=Tn!{;_YTRd`_b}DlGyiOx$k=Ws7MiA&L6c
zFfu7Xh!&(xiZE-YikpQcA8JqAxzQ|C96cMZJPRSQ{voxKpMhPHGH$ln412vxds7RA
zc6Yl$ZX%9b3Ch*LltaDgX|vMXLrZgd9Odk1p3;VjzYLS2h+y)eE)j{v+BVbQa#iKN
z{VoZ(eNY6<`NNj!28qlOo}1|xJ2xtZ&&kNB8Fn}qv=Zy2_lC9{HlS}8DwcporBb?R
zi|{&M`lU|<SbZw6NJEPrGD);=7lz$`S-$gwVYO2(*4l%>o)}0T?2kd6U&Qic5`<jx
zj{qkrsVkf?lARDeh7_Y&ZXSf9xjEmRPrFNs4vhn@&0Fv|DL4lgj*T;yTZS5dhycIv
z44^;CiH}R8%D4xpqBGO*vls7-t~HA02+cj0)3PLg-=qY@SP}Tb|5!jlK}}GgXH`;C
zij0lT^g+&_CCPW7wNyUhDO5%w@GdLVjVW{s#z>O3(F7bc$dE-{O_P>A8WNTX6QL+s
zU^2j?+0PzLO+YOdBZ7n9&bO(IX<j+ZaNIrK*iTX&szYIKHwB~xXHjaXux80qG%YP{
zD+p*X!1o*k#sjYnf)Qws&s2CvR2oX=(5@xv;7f(k#?qcqC<4T8^O25fll<EDw)MN&
z(4M`ijW2`P10M+!q3;e81Na(n+IRJ_nU>U%)qR9!8RoTLnBX0GNveqP6M<}-sqX7C
zIa$BGh;%i5&zpyV0Cj=ce?G4SycJ>hC*Z&i?BP9cl~9*vGeAzqrGEk;6Bg^YTo%}T
z?nzOvA{sivM2(pYEEK}{tP7bmJj0p(`37dc)e6~uR$30mk7{hED&?(JUj()kgcLyN
z?!Npsb|I(7%ODu+tC!eWDj&`Cq4-B8{g=Yd)3XBH*{4s2cic!ry+cfY0qiE5UKd!8
z2?;8od*p7^%n?1eX?Gl1@od|dA&1)U;9uIeH1-|7CslH}tOzIYbyp_?-XIpU2D2Hm
zPJFMNq+!RnEMoP}>2q|Ssz&{6MBca;;y6K!8(hWjbTb_^A!q<DQ{Iz8aRBh8|8f6j
zz4`5yg)NwMC8_>Ctu9aZJXU(Idohr<r(T>;gNw@DmuBf^vUs>0b`-fhcH|PG=2;4M
zvOEPnc32X495TP$3j%8n)m1Q=>FFG_5OJhG_F}4-6(%hh?3pt9qJ9g#<NBmTP-tj0
z*xe^>WtEry4?m1V6aam1k)%`uyA~BWp_TG_AqZT==&kg&_)0C4nLGh5v+vgucr0&j
z6P3nqfgz9WV7TbE7%w)k0{sG5u6v^V?<f%ql>y=h5hZ0OkdwAs;K!S&qRP_3TUCru
zg4=C{QW>KaX&V!L#XV{gAxn18t1<zver!{*qfcYgg!e+^<6xv;0qL@pzfu<nM6v!V
zS{d7T^DBVA#~p72I&MS&9+DpdGJfRjBM8$>d<mr+Jmt1SUyfpUbF@n+V&!W&w1;ln
zX|AT0%ji2rf=I{ByV<)z5nChA>f5lERZI~3@`V5O@_^rs<)dJIIVRp{W3CmpK`V~F
zkxClIv<lj^AkQIf{9a5@bCsd6lX+^M7)n^=uAou#wFDpz+8~%bP4fi-I3CvFD9hvw
z{Rw4ZXoX}!x)v1mW4-sb=d6A!pDbs~G#V{6jpqkt5EUKfeGh(Zy@~;<7CXxTmmRot
zi)*FhBx%uLW;?=r_zQ9x1BC(*3WbgFS<VAn2OiN0z?-vZpn@I{EhDc{i)z!$C;ly1
zJ^Ae+-&&?8AX2KpZy2Rn!6HR}Iywg|mLczP0yA92f;A{lu7V;V07W4J?pxTi_Wj)b
z__$kpq4rF0`jNzBWK4i(7XkW5WHmJtPiQi+g+6TTA-<(#&OP}-nD+pwG7?@CrViS)
zbjL#ww~V)v<hhJyu<{vDwS&Jc3L0_P9A>)!R^&$*@)3jwcC}NKLe8xq@ifK(&uml`
zd+f6GNX%?o%p=F;cR!!9yL;6U0Hij+%H1}whmO^5-SX`4&a%g75&f@=?Em=y<S8BM
zMiSV1i;nopfmgpP8uU6^SyTTEBwycj!ZHv31CpOf()kMf9*}xR|HAQs%jr`x7diS6
z4Da%EOt)^YCdgb%L`ZfZ|MeVT4|lAIZV#)r_v1%hae5^y0i^%ZO)<ree!QrNubD+&
zBfOHdQD=t#F^nj)#8+LQ4K%7EXYa$^MHjM5ZhJqWl3=u-gaI^fKD$QDABGN%g)n)1
zd_4fbNpal5o1obLC<L*mw@I>C79rzponEA8iG2vMnBv{<mNXNPT~4qM?@u&pXg1N{
zzc4ufFx@FfXTJzfa536_N^Vd0XxxnZ46;OpH$Ie5dVy{<kWZKpkZv6Sk_9f!_m{s)
zIi3AM-OS$a!NuQvbXLU?IIH6PO2S|fAi>E1dDVjDKW-kJ)in71LGb(2*xzs9#b9Ok
zKo>5f0x>@b)!=eycHE|>$=($Jn5a{y#8LhO;4qH<RS^H>pN>}blYW9;KxGEcJlnU}
z_C~B^S%C-G4$|=Sv?f?f4rbPPpdf9wWauKCYwpKqLS*?ba=`EAR{#Xw1q}z0je!Im
z{kbzfX=jKjA$nMfDh4NjGLjcpLcvPpeD5$Yat|fbm(Ka>`T)F>rb+XEzFdJMZSGlC
z#~<Y^kwWGJ*TffLd@n^|Z;?Au_DyD0UbGQu{2>%Ebm4OC3D6aBWa+>762FuaFjUZh
zf!2<#|2{q%{gwZMR|*q@vIbB^tAkhad|F{$(o-FZ2v~H7i$_%EEfxL@c9++EbuR?M
z)Cf@J*1QC6lN}aI!K+<KOx%=9)sX*}2l5x*xN!sKb+Cm7K#;VoY_C|8<A0KFAd~0O
zo%iPJekzxt5$v?h0OGurG24*aV`NaZ;f_P62&Zi#f!{oGTPT_5GFiBnApBX7-o*2>
zH&{I_;@|^`-fDRZdT9TT&kaKW-US!f61?4ig~9y{4?`jpQ9{tpKnhjhT?p_SOMt^&
z;W&k~-3%2?u9er7O{6Jc=tP%ivc!~UozSB`A2E^~^r=E}bQ(DJEmpkeg-<ISQ+#9u
zyAK~%eGyyKcT4HLiDqlf9wIjx-b&yys$%scePccS?OKAc$-B_71jg}Q^1G+Up09=1
zou9eQZQH~a^^=cIR}vhySC13KJV=|Q<unhLOXZbc7CRqtGFUO$m!o0=mR!c}jlKi~
zU09^XKMAF0)}kk~SgYP!1e;P!lf%=qnkmty5AoZ5v6rV$DoKl#rvcz`_Vs5h@W}Sx
z-XlGVxJLnsv$qe@`zZUg+jsL=Ogz*hJT8|;Aiq&!P6}7sj*Z6RZcd5DoYHnivTb(j
zl|!UK6C^j+`5wT5HBp_u=(aFArd-?4pv*N*$#iq8jM)4rmKeVzMZ$M1a`M5mjxhQ0
zn2%<4Y7dyaCyhxWIX)+!@MA#9>bDUA8S#Ip;lK1*yVjjY1xukgvqttm3@UvP?}Ryy
zUaM%~3o#Oe@zbtyK*{p&f|}aC)s8|C>2YTCqMDM;s)nvV?3IhLX1<w(3AR5f%=<bf
zCMc?4(JAr=1WhPUPcM%?_2zuUeDCy0@WnbN|MP;<G^Yw>1=p9G#{0b}GalV<$=gkk
zKlC!+%OrlbQMM<tU+PGHPd7|P{7El$E*3QUZIk{<fj&!$45pO;*0nTVujhqrt3Y_S
zh9Z1bFfR;nl85cHt=okpX{S1U;5{i04}dJOsU3{M%C{?Y{Aso1iZ0QPjCV*Utdz@E
zrjVrX4=PS~Xm}K8-G3=5MSC&bj`K!_Q{am7+cqIGyX+`pi!D=ih|ZB9g60%|p_}hw
zT}Fc}O+BAgxsZE!LQ|bFJVUEtJPuWbAD4qG4X|kte*9lAjm4Id=dgAS_<XEci#Sq>
za1BLnHB~g)kN;G~S~k{z;mjH%;4&XWBX5V5aOj98l&amv_fl?OIN!t5(XlMjE?xVg
zbGmjum+L%HW@9gVH}`EabRTYdQ(Mnc44d*rCERn;)Q|O>mnB|#-^rjlkZG?QRD9=i
zla*wQ6#9Af6dvqX_bf!l0*)Fo0?kTNl}t+_`xPU$PD$Fel4m%?ne)dYc7HhezYwPz
zLVq$~5HbGUrR|0@zUgy%T#hCCfsBo5et!NSkpB{7e%&q*GxjN`=lq-2pw2);&FY66
zys$_b=**q-pQx@D$Y5=ZSHs>H<d*Rd!uhH@^6o5=Us~p+2q#vPXHz0ujBpVCy8W0P
zDwARf+8>#3RhNEhzl}C4K_OJKIwR(LGuwemY_R70-ZN=e-Cv!((0|XS>%8&={i=*V
z{zJ^zzE;L|^Nk+oflF>yt8{KwE{VcL%XxmC!;CzlC^S@lygW><hrKcMz$y9)t7z;w
zn4xiV=)8ry&@tziPOuQL73}{!^8?WT=?6feD2YS2-n;e)FiVTT?t)6tO7SZSil}h_
z<>dshTPgH5kIYP0@?Ef9@-Zh<L0S|cnu^>50ll1o*nE?tV9ndat2w`%4xG&ut3=Oj
zm0(X!4;1)Q;3?pd>M80`E)3Z<GKIU-Rt0+UT4s3)nAN*qqdM$Qy3k|&$^Q$+@$rM1
z$QmIp|2}fp`ot=H7-}i2xN+e58&sP|uevm!U+yCR6};O(7vY4Gm&1Z%gc5y>t9Q_%
zZ||RmD;HsI_2{>rH?Lh!7j{ET&%=0A1(Vii)1Zo!MCR2(^0&iI<z>qEn|W)K=cQ<e
zB<XnEcC->A_%%$s;!~FSXF#0!J5Kx`qH@vJeirc8+jAdxo=O4&4DIS2u=kc<DNGV*
zY<(!Tm@c*$YS;su*cL%|bG`ZF^yR^aM52rmi8RCl>nAk8m4+fN-GIIDj`vYdQ6Oc0
z(3pb$XrL%NWzfyIc)dz*Wll{E6a$%E2&(jM6Ie2Y1zMuqG*ghv>|$SpU?NMBH-=(e
zB&otz-lbTI-OiCijbs?6CT<-0G0qqL^ejWm4Lk%u$xB4fG}A`YNNxIusxq|i&#CbT
z!2w>357vF!ZXB}b>TgXyKr^TmAND=aQgvVWN@89Km5?dfle@z6;UkjvQ~_&)=S6Kj
zn~9x<P#K^G`F{otp^^=_=|>7inD^6QXo3VoQ`|mSJWR*QsdTV4536<GR^~MS`uf3w
zpg9&52j!O>%Ph=ASmbQKc-NwescfnDc1EZ#)0~xhE0Hhrb`EQSVoHJuS((^~B+MzP
z>XF4Rf%1S@5#XYgMzqWLetJLssxqgHX_LYVmBqsh4GWiv0GH3=f1cuE`txx6hhImO
zvpS63JXh&>h8eS-8?W{<(*|9n%X>7SD2{9|v*HFd#2;VhSl#BrY`B=rW$L7`b>{yo
zn&B6y0a!W61!GyX%2)vHAQaKysJ;V>S_2fez2eNYku6{@>%c#{JG+fGZ=mzjv&=k1
zzkW}v*YSA;XouxO!{2LuWR9*pP3W@e9naUxPir}MJoP+ncBKBKl6BzQ=8F^F!`YdV
z{2x@gr`0EgJLLkJnQ313CEm;H;WoWuyyf5#vl!mPk?r#Nftb`~F{cGpQ@Hs3qSFIF
z;d~cgV%$a~09fRW^K5GH+YX3^%bD3A&p*6uq*?8|aTBKeLgM0q#g2ES&k_#vP0*~i
zAYgqU@T#mHc4u^K6TkA=m+B47(lNf&4JSQUjk?5Qy~OY%RJ6*#1Lmw)joSKp$0R{L
zcVj>L<IViQOJN97C2ptTd;2AawoFt<3Oh(Y^B?C0+dCDV(dw3{HWktr(|1TQw34(U
zWruH7-F!lc8yFdmH#$x4Gw@*ae)!RXEJ?C#Y93TI|1ZbQ1ZoUAS2H|zR~C#pPr?`9
zfKf&2XBfgYj(*Dg<Py`)+t_9k!GzE#@jdz`qjJC&RM5QeqYTU#bQ)QoD(n1YUv52;
znNkl@^Dj5XLD5{Te0i)^$YFscsjr!9000@^uiB>W9MyX4zMC~92l-^55$ATSbL7I$
z6cMiJd?AM*M8C0)YV^U!Vw+?4()YL6v|F{szK3B_`0bz$hlP6lmpyit+JwpK9cC4_
zpDYV<{RBpJf!FG;sOp3rXtap~8-*Dh4%b~mj~c}IE3TskBwrdN4^mM)T;4}|xl)zk
zwGjBUEbp{Xcbw-p9X?psoG2XhUVbtWZ&^UHGGNmiE>>r8=s)|Hus0ybB@~cI7X0L0
zu03z}qhu;@7oRF*xzTyDw4v^28OW2(@~I8PJqq--{t6G<(QR}nQL+bQpoD_bviHM<
z&CA0cm-Kd5#|vy)yq^}3gp<bx?Lty;)=rwHK0JGJ>*IRQchqsq;g!XK9Y7*&;B48M
z+8?}?htqO9&1KE=aC^$jcXk!{K-R0}L(l4+DWSsDBdC#*UBN!xyA)a!u;;V-J|Aj#
z#vc!+fQ&?o6=&7*M}YO`&BEGYOMjzMdyEV~V!jZeO2jOEs5$hXH#Il612%2~SyTzB
zKXPj>{$Y=!e(;aL|A(-z42Y^*+qP+8=pGo5k`SaN1O^yNBve48ksLy41Vljwq`L&A
zqz8~rX%Lmpkp`9S9O7H^Jm;MEobSZ*gMTpW*?X<E@B6y1xWCZmjb{!AP708x;Y!IT
zF+=n(`xR)zETECa!6@Bq$0wdQobz3h+&fH(TefTY5itqmoT`CS!;6*7RVp<`R10U$
z8*0BiIkP)kZjPrtZy16Nbm=o#d>L92LM~I{C=_Y!vGyt|I$5V!pDgRh*IhA!gn4ei
z*gaqP)rQC)-(OG{sd$o)*vuN%X5aPMiBM{B{UARb2UUh+ay~tGQh)voH_DRD1O0_O
zO5{KEKVb+qrO-$qm;^(aa>?1yF+uyWTYzMv!`XV#_tu;Nx567@EzXb5+jN{Wet;M4
z`uN3*7f;6yffaxya7-kppva65#9U{RWT)UzzaP<_doA^TOR#mSNego4=Qo|{zG@Oq
zOsOx*=_SR!xLg{bP9DAZ@rGgvXn<Q0g!XKW8Y5?W3B-j@)Q;n8_%KAdidoIW1>MVl
zKz@|&_hl2pHsogAjL*5K9Kl>P5>fqXtuuHBI6f4Z?*Z5$FJ^n}S}J2J@(?;|VAvAu
zCq;t^jC|?SQrhBb<%9un>TtIoAIpp=?`6|#EEi@x=GtWLZJH-lI|B3C<x-sD8gc=%
z3B*lZeIFEXlyx3G>(Yxot>zHo&E&Z;6I&rE>T@C}So4aMv=Yy<4AQAtOQ3qpbFg(h
z59F5b=N;z;#`-ip{`d$?NfSP`ILFxa`u%Dq3|OE0XP_XlO>u(4$VRfS64(2p)GnYe
zPsw_$;=~}{Br7;J&#>2K(?qGPUc#yOBH*AVl_I>KI2EoM7XSpWV3g1qKcXE=f!<3L
zG}kq`C_XabeTr^6)5Z{%@&Re@!=B++Y(~cRvXwNfcq=X5ir&V(@9sSEiI{a`^h2H=
zHnt$guK##r9ykwvd|JIpumQiUA!MC|5v>Q@;j)#`4b6IViElkk`6wYK0NH-fiPJ}~
zgyFV=BfkHHH<h0<`@me35g&)msCrA;*6q9AO=&81JQ1N1TpupSEKad<-wUHng&mM;
z07M)f5Zkl8nCdg|;s+<)s8EZri~ePDhnv#{(dD$*(ih^-Uwaj2qOL$f8q*SBd)Gu_
zFtyVh6?j*Af<BGp+i{rs9CsQE5Yb0HRZr)jpom$RN|5X!L9rjNupYU`wy<ufm<$Pd
z!jAHj)9yh-o>7cy+E%P5Qq~=q?-(<1zmK6W-BYQW6|&4n4ker={$&5}MNt67cN7dI
zKB3|f>hih!Dg1J({k6kpRFvvOuum#nnO2Uhx!X2WyRSIqmCaU1I8y<0gr#ZH;nVi*
zO}$iF<qItY&##bx6XSERbLwiRBv{^vmz}KlS?p&@QM5pslkUs_!yowo8`xev3PH5K
zA${bp%AgXUC5R%_lRYa`ECKrETng;i!$K(JLKQ2|j71VPuomfUcVktbsb&eaHoeHX
z4|xDQf`phOTAw+WL0P`e=&=&Bn3+h6n?_K$d+@eg372;0EbS0-wlBZsj|#Z;p$OVZ
zfQE)sF~40L!;^)x*ZWTF&mVHKv*%(U98L^Imjjr2DNL_@xMF%41E@@X6*EC=pI1I8
z(n`^EQe%r69+gLlgGuszZ188)`^!Lu(`gIA+Yp0u72-h%I#r1tR+Fr>cvX}H98iUG
z=h%XyDwOW_5HisSSUa)2V*XsJ^cx(@qXbo^kDZHH7#}0q$<kgQNK9>@5EEc!qQTj}
zQ|ep40e&7ig_b@!OdEWaDVls84V`*aO#;qmr@~S`@IM9{A3>r(%AIffzRmO?zVz5b
zDFAmLHn#6L+XH(v^kLm8KD)9lkcDGdC4nrQM-A@fu`5S#B&e?l0&QzmXrp!kOO`di
zUx7%V%a5Zs{`fWYYic9E9k6&4!HUJ6bAW!H=(|Mf7yjp-M1$EYuXeWe4E^$k4({17
zP3qV3ipM~r%4E;HY;@s--m~7FkZ$yAN)qhd^~dF{)REgxeC%Kz8nIr_lKt4PC_aJj
zYhw4yd)kHFnC<;41&i%iZlQNL82APC|EKQwvv-TZh<k>`Y)u3^pOCfX;-#9%`W%<n
zYNVJEbLKloGjM)(He+C;b7C;N<Z!uKBPBy4Wsa!-f?ub(b2OAQcGE+BEf7<_H!ljm
zQV6x>%-^D7dr;mv=Pa&YEDg<cFXyhkzB<OLuwKaK^G?I+(WL0RC#uiN3Jn?z!ej=D
z4_?KrkNFlF6WzhT=t1nzDp{&YRy7+S*=TEerMG#$+&s{{P~+FfHQBRb4Z$GHrUx=a
z1RN!jB7D>{V=P^>rFuY&j)6EhF{}^nLnGQnXWfvJ;!?~j?ck)br$~#?x`QIpOQ-JN
zq{7t-gX64vCU+pr;CyL@V|<a45>m#PhxW1~fqV0=gHty>WJV&ekbzB))vC%<l(7fz
zNW^@=0nyYWJ<>{Om1zw)fg&ET^%omG=)8ytSu{H@U+cswdpDlCxOt?C?m_RC3{0&Y
zDqri=^hUES%#7JKQ*JocAFNKV=*jMDc^6e^86VzGdy5>*DIT0!@!+kziVZlBY~-vM
zrC$jGMF!@Lt4Wf_^^rhKiSJ8G6Yr9ui32K!R_}|wojwx>B54sAGI^#zcC1H0NpR%H
zhL7O4mR4z_iqn@3l%B_Aw<l_5nQbIL^X|3F1SA*G1@RWKH9Z);1Aq-Hwh;cjMIYhk
z?*hVBSvJ1wu})IwEN(OQ+QH$;k%{bK=|>&ZDo!NqSnFuIs7e|xSjD8LoP%%1Tl(=>
zKHVfhX8`08y8qbkzKj_+xNu2aBDBelGk7oJQ_~agLQtQ}j`Sn<tM1f(^G&*2_wCFL
ziz&BEmG#tqGwJh)e-xh2!(eW{sM>+bNF8zX^LD7Baxs1<ZS0qliCJ^rJ$Y3)edeZI
zHIAO{-&u3)Su6eAk1Q^{DckdPt#kreTx?v&1b%(wO!U!c90vS`LS##<hk<Zegfi$F
zblBo<g%F?5z;c%4;I_Aq-(NXT<edfR8!<zG4Ujs84!QBMg(@ZU?*)~YF@)(FX;?n8
zyIbOtTqZtW>KQDTFl3!2@N+eupQu-|`urH&qZULKispIJcm8A2(VS1MB2m}hmY>{K
z44FPCrQH71;o=5$XX;p51#Mm@U>N+fxDyBKh9MrZt?e#JDYMuA4mcE|JqlPlAd3Lr
zMR9b|<x3aVlpQ24LGt!;b!~)ZUIvh;y4el_Yf0629PggOh3<zkAA33Em(!jn#ctTt
ziIOX^n^F$=065UmPm*1FTja*%jipBXW^RH0?wtwctZtp0?ji1&Vc|GW*NO7HXmM^8
zX1{_200%zYM^W}^5sG;#FYhPah=5i{Z=iN{JG!zXvzoFIzp>g~)0YOvEe$CM0Mj~X
zw^Nu?@Bwe}ug*V!D=^Mt{8zLM48WQLbv^<=!{TM7O|m&V6WcqXptF*fq8G7^t&OM1
z`P4=kxX+f#*o<;Htq8kS%kHRg`e2>eC7lpqIaCpOX)%m@=QeZ9PDSL`r~YgMLwV7{
zo@MnrYh)rC3^0{=>sPsyeJT!qrRmAh*L4P$6ryfJ-Z4+7^SgTY>IxES@jOlxj5%Y<
zcKKa5;O7xb=%mBMIG73sX#r&a0r3aqaxe>ztbdIPh(Z9!KLPjJTe-D(gV}}!RzV-f
zBX{{aLI=#(-dr!&@a#lc)YIAwc}@{{nw%tP7eBJ(9{m_1%z*WOA$DLbqs;2r1e!Ug
z<MKSA7lwsD#&(}zMBbJK#$30h)QTavxxgLpp>^CmN<lDgk~IoTy%DKh)F|qAw`DJb
z-YvQg<I7q~5G-WwHKoi72y_3jlLPYt5&(&J-$~4O0Bf3udG;9b4+!l;RNg@K`9-SW
zRJv_8CH8CtV0VdmsA$+7oP8aBHu@PqPvm`Ry)-h3-aod=jx|Xc$NoUHw5e#HZwVm5
z<5k<e*xr=+W9*p0<_zO2LeE_l8DO)TCc`t}HBXS&=bVUy$N1(;eWL4A(KtE)++0gA
zGo%mBl8yiVmp2%q{D^SV=Ot=)rc0M#)$gu6Sx74F3Ajvvd-tr<h6$e=drDO{l?R{5
zHKx0Nd6pUZ9s(g4-D}?Sky#hgRlQ>VMFOu>S;KBr>r3O1aq@YkW}13U29UOrD>1Or
z=b?kzsgte;mmB#RF1sZ0iV1s;o`BErQ_kyO)}a&RzZW(&0PXzozpwL;$<gO7N}D0S
zrYodUGeaD*%#nR^-2?uR?jql&nZy@cgUmSaG3@@pw4>V^oA$s$o{;6UXmy}KpT3tO
zsW?YYp56Uv+Cm-klO=<N9aM#L2YxVL1)454%=a(zSb=T|yn*50nVj0iUjS;PhIwK$
z;BtJers9cv4J-brewqB;<*ZAXlxgDltZtQM1H`d;VoD;<^NvtD9IMg{@-N~r+?W%{
zl<5DM&FI4EqhMjjYY8(@Qt^uJ3z%4UCUU?b<Ibu0G(qX6U!j-<xjhO_@#ZC+k6nF&
zg4zY&K33YXEmB4Uz#0IdU17+^IQn!&wNvOX)v-{L0r8)tHJ?@}xv^%l-1Pe&kaQ36
z5f_=Vt@|(o``?(!Wd*gaik+7By#3?K`2PEqkwqDVgHY7dePD_Co!AV%{T}H5oxj9(
z3%M>+E(w{0>e?R3V#?jZb1H#X(;3sko6l8QPBHG;)`O&3h%RqBwuoD1d9RPq{sE|;
zjzkE)^Fc)=<&GN0NWfP7kFcUCyzJWFXiosGVShjEOCZnn%xwN*;t0R~6reX;9jHcK
z`Dmez6!UN?Ka@R+qePxmQf{}RGVWD!WkKI%$?GVKNU8*~os56o!pDAuB_fR-n>H?c
zt`;#1*}kYJv_GDY1B}W4h~WW45zxp2{Q?V21e(Ts=5wGje-ZnR9<{=8>T!1pA=Qq8
z6TL5m5Zp@=Qq0jz;SqGESd7y=?kSqxP}_Q6m5rFMvj3nMCSUfRF0;5K{f5F+R7dX%
zwkOv@;|PLdbnnWW{I7`zID;>O`vOP^dE=WFTPt;%mmndjW4TRWCOt|QW$iC41Cv9-
z2ePud$?0NP&R2xgnY}*+3BNeLStD^GT_d>rq^2~lf_Hiq$ZXf`Y|echmyYN4f;AAa
zd2~7_OA!$_|J(FViQVpx*^u}<NEH3<Bxe}d<zpq_AA=E#!7a36761w?o(-_8sHzI7
z8*&l|68PN%MB>sdiW@?ra)CDr=&0_<txX362lE`WuxO;Eo+eh?nwi1=c+B|!R;>R0
zF^3P*6eB*Fb`QMomBGzLNSr6LE`}n?-`4_vR#-j@7i%F4k4Dw|KXq(f9$A1K_#fvk
z|99(_&P?$Z(qz1|P0xMqk^Hu*a{$v0zC>WDQ$F)o-~KMV)^Y4&-l!G&3Jaw~e^dHe
zt;)G2Sai{lZr;E8<NFYs-{5b((eyS8>gSDE_L6hoqYXH?e`J8L_vf7;`mc8a@cg`k
zm?LW&4)VcX+g-8y+jWn^wCA$AqlLM(0KWs?&=*X>`2{fe|I5VUpBAtpu{4YO!PHG(
z+}yj5W>m=xe2-!3s5iZOoq$sESKsC?oDf=OyuMta43@*n&@tVp#&K_340tvd0QFJv
zf4}Co7*PmQh5ep)4f_Zm@DiRHv_c==hV@_SL0JIyqEs(%s$K-&LiHqxOg<Fw6aKvz
z`C}shwuzUK68op$>!<+4GeG>3a9xf~mGaaEgy<;6A3#naQE~R_3gB`ScLfsBEC7D$
zH^Yd^RY12oZ6&$!(bc?ZaA2Tpjb=^@WJ|?~^Y5EHE@iZ@I`a%5i>CQs=U(#lDFIin
zbuBQr-V-WL*`)_-C^GFWLgkiCwE8{O=<XOkYwhR>*;8MJ>^imqfEq0pRZT^Euh%Fq
zj}#R&+RkkNX<h;#x%7Yu0J`$B)(zRMD-rF_$;rvH6oRe~fY4Lk6|enqD@(wRD+7*d
ze~gxvu3l;eoC|53eE}fJ#Qyx2QgGV8UjQ7Rw!1mgyP|KX=~@qb-hWu|P$U0gQNCG>
zG_ahBEh)L>xi|diK>!Re#Q%Tm88h)eizVDUl2XzmeQ3Sr@$%mI{18}ch}XWr1k3tj
z19cP!2S;~STX1w@qIGVilf_#EU=rLgZGi`CCYnf;8jl&T7F0GJn`@DAswc7lE$H*d
z@D@}uu<0`Tk|2PF5oLro6g{qb*qjX*Puc|!`E16^vem&c88*{RBK356C~y1oWzyVV
zQ$7ciJTO*O({a#WYs-BEZZNh(y)Q3bCMLQ)hSthdQn`OWa$+Bp)7`D4vV|kqAJ2PL
z>fF|bfCD;%WBmtaG(aSN&B$O;0bC-$cPLLcFZ%H4$dV!3rJ>pTN~eHqR0P?a=l^=P
z^4B(E45Z!Fp5RvIq<6%S71$XgKEQ+3iY$^tJ(Vj;aBBeh+4^V(%Q|p&YBW%(L)tTb
zb~?3f88Isa(q`K_G$TQ1w4BXA)@o-5l{6#@mtI1p{`7ll-kHM&n0GAzmkJ(6R#8)z
z>#y!tIZO_5<)nVzbq2ENM-fF@nQva~_A8g!4)cgSNIfm9a-8M|lnscVpI@F)L+y*L
zb{gB->Q^s+nM>#i#A84#f&Qnb8b5_y$V#t5^-7Hajnvj#<QZ^0V@r8MOqVe?maUdh
z_QPGe8Jh_dN!viy==tOaEWjf0zizC{5N?k?nY?lHDnNRwFBoO6`M6=^=?chYe5iF`
zKBjyq>EaSAg_U#6!|W4rGaZM=T5pF_l6a|w2v??!p`)7}do)ZpR0e-F#Z)yiXU);&
z)F|8^gl3*BccaRI-t=@b$;5>yLsMNnRM@)j?p3I|!Y^w=Np%t$!08sT8_|VW?XQmO
z!@`)`62W26!xkZxkrSmr+}(rVRA#aFIa*BMag#p&oylV;@m6|F;D@8ESEoMw(wLPa
z!`f?P2SR}HxiUr_e~TGB=??<R?5?jy(G|Lzc6{!K72Pn0R-ZT~sov#@a219;i~fUG
znWNZ=l_{mQCaV3(WppOp-=hWo@4b=N{oY4Av(ur52n@1az1E_<z*+a19@xfc%*}Cj
z;l0CC`!<q}=<je;`S8Y36;K?sxma4?xXo>VrUl1ws7ld5PM4&IO~nF&hT3b+##p1*
z9pg%tR8H_{PPPG{D&2Fpx_t2}D?usety}kT1X4d#Ey-XPtMH8*Hx?zTS=d=6L4N$Z
zZ6M2C+4xRD3;3<i&QA||fcf06`>)_1uxPPYqmazT_gXra$mM@r2Ac6*pb@zhK(TuG
zobMcO@!mOJR+=ACO=nZ!vB79lc5Ts{X$9@!=A9x3rgOXnhx2&t!Hs77gQO?*X&%Ux
zr}ZPr6Lt}&#cSv9y;8^L-^Lj$fBMr(4K;fUrhgfn@<2;NzE|I&lm+<zDlYb~q|Tmd
za#L-G^AYD+@8%HROoG)Ox<|_UI*u{F#%zk8FahICY-fr_U9O8=8+O~KYIfP{{#62%
zDQe)RG5A3NPh{d32&?ZZLmuvcgmsPw`MOac)M0EX*4@kL+Xo=w$X_%&zGIb{!04a1
z?R0uW-CPV<y_`;ZcId-fa&HuJR@srVR?a#DQe^@K=e=Al!!cQ96A3-$k%F+*7HfVf
zWp9~vcj0BCPMU~jVec^`cox`p1sD_Ga9P&2+c?kzM{&J8)>(J*_{($uFbfmJgCt-t
z|L_e>LR0J8?&VFhZDl=`Byt0#Mn`RB`IC(Yy*rf<l?i;F)3vLR9t96ts8`Sl{X^9$
zl3L|_thB{(Vn$MpUo(}3tH%~G5?!-DAwW>4r39SWftRuxQxl$$d1h5!;C*F`)!t~o
z`XA<#fVK8d$Fi^!T6d#SZGE)@lUH%OI0ev4h;sN~Bq@y#!GXjcOySIz9?TzXciz_4
z-edmG3$exFh*6?hnumO)b=GBH@ZombP=2<e^CWw_E^~38=2&$Ld&a3KKNTbI@A%}c
z+EZ%m#;BIVb#G0XHBoh@k8N$Mo%{kE0Kn}RnWBvP4Bo}V2)59}(xx|%3?d~i)~7f_
zX8p7n8k}2~5^U0S^a;<K1*(8VoNNqeDcyABl;*|XB5)q!fZf&uj^-%y_sudaZ=?@r
zUfWtw<(%7LDvJO&;>+w_NJ%P?kLE7|xhUEeBgixpqbZY@X58fKBQiYwUhXw8K)kEl
z68nmFFR)X$*ie7z*RPKw!HZ$Ef-Orfz5!&tpnJX!*tfInl1ho?$RRjKKz!WZtfHj?
zTnm@%krOnP)6!qwC$tSB55~!i;5b|6(MzY<`7~)SJMnn}Zm}t=no5d=_US{6<lW$u
z(Z$Uo!(7zLA6i0T#U_*kv3(dzD>y4vC>a^6k#{{F8JU<eW&9pQG27co15Kg=+}5?(
za>(B9Zd@#A3V%8fhjRIClFulU_{HxgIuobh_@{GZ>vMy45tcu1(5_0yZtn-5`@uLH
z`W7gDY}Db&v58y+1QZK#=X*M%(%OK+qib?knfnJId119>3EoxSGbobfk64!yh*+!P
zidd^<iLjSuYmRxS7I)A&W~TjGj4_Do)6%FGk1!VDMao=Y_Bi7;Xf&tjqi#v&0GBf`
z)K0dZsa3_7z}Yd!&qO^U(@pbUm#7H!-1)h*@f~8Qu;h1+O`nJW1i_D)0nb{&t`arn
zX#&qV&)kZ1<fuoW38AN#C@Csl4E9X|sm$TsWD&cZaH_N*Erop(i8V~sBevXIr_kc1
z0J4wL=U~wE2=jVxP6pXPJH87H*wmVQPZz)u_DG8~0{9z#!Z}6;|Bf5P=aTQ*1N}JT
zu`0a9m-SjhUvAV1vyo~g{KxybW~|&^TW?d1BwfU3la%GcY$*sW`?P2to2H0up^~#l
zkFy;9-Mh<BZH*kU295Shh6hUL;*a251+xe5>uFpfT!@Nq99#=1z%(E!;|qZM2XL_-
zr!|64*}jM%bVdnQHvrS&<%Yf*VC~Fcq%I1lj5>I=oM$r62hsB8GY}z+0v7d_7EU*6
z2AeG7wQL^xF@3Y}1@1QeQ8=MoG><pwSmQEOK^kZS1sVU|ErEVCt!f5BAa}(yYr4-_
zyKy||-ev7>>U6b+#!uOM$Mf4ma#0^6#$GHtb)-jx)HbYrCz=zp|3KMvPQkqpw6w;^
z+pGT6P>lN|aD$zLUrxjBqilH1QW1op6mRyjsRfSSE2`f7CQ6{1L}#3Jb%AD;6NX>;
z(eM1slUeb#NuZXNM_T5J@FJcS#HRVx)n%Cge&9;unkuiLkPT#eWgc5*A{qFY2%DqL
zS=!DkAAW(s<~N}bf*#MM>;&BlUME|f!_Mu3?J~1R9=!21WMuCv2{7;d?*??598HKq
zC7!`2uhB)~Z^``emW8vgQoJbEdVc~jQauBz_*&t->|+1dScs|pL=LJo-MNK{bI$n*
z`{{P^#|f^O3a~?UJRlXM)fzzJj<SB*zVaK`1o~Y%&B`#o$(?>QQKjWqyms*Z1+z<n
zeOR>|&Z)mR!9q9pW^QG_3u(9CC5GJoXM^&NI@kqkTZMwg@TWoo5Q44WzgZtwkCll%
zxOVpJeq&Ms&&{eE1%3iYjyb;oL-@_#u(mBm9@uI1qkK0^c22?br{6+XI2xisb_w<J
z{Do}KQt;R=a?6;$k~($J<Q||M?31WYi}F+EW;{+4W;`g6s@y2!V`QTA6cVY^WGYk4
z{&+n{t!J@YJLBjhco`g9CToBSKysI9Nu;Zy9|1PtW<8DZ3oU6)2EnW+gZP4%GflSX
zU#>P&B8z!1&*BZvn0nt*&1b15k0J{-@;$P&8On_UdJtI8bKw$RDbmbX;M^PIc_)77
z%T06_llzYkIq#qEz6gC50*HkE*V&49N8idj4OEW%ddbP74saZ3A6D4xl{;oVp*dA~
zxB7r-dClO)MJnQF^rjh4o_CCIeSVG{<*?0^zuuOP?Cm-8(69#wMiGN?1!gtjgCDcQ
z&G`cqy+{SHt4|Imy?C)|)-ycqIg;U%fb2(Pn=|+5jA>BMV7$MqT_@MdS=INg#EAmw
zN8Uz8X)D%~6UgsrAM+v*XgpCT@du_7O+gRD2XZRyptOml-|f%|l?}(PV+F|cs7@^+
zBlOkd?vBltXb?JMdnn6Zg_TZS6JI!Rt*=~P#T5F5RvJq*1g#D?HKC=&ux|PqRv_fW
zGr*+O)iFQxeCPcS+4Yw{2A-#v2j7cdd>lP&e)#`CXcWR<c0Gz`(oMA}tuECdvy;E(
z(}9Dh#4PYI;d^;C0zv!WHsBz{I-W(%zYNe4_jgnsChb(gOxoC%_s2+FVfTh4Z&oYK
z`+m|u{+edRmVILnSIDed@IQBn(xXvgOA>+2+8JGrltv*E)4s)_0+9aU#dl(%hQWxY
z)BP0CqDb3P#@%)*$^;&mkAVzksEhACQx9-p{ZcjUn=&smPp?(|P`BV=QJDtSZ~GJi
z)+ykaBvI}KZy~T(SKe3Yo8-Y)zuxd<`KU^lb8Ii-TZA}4xLv;qk1%i<`+Z^Kdm=Ll
z=O~ln1u5keAyT$?C5)l8%{%3mCLtoqqa|`uwLRw-39eU<x=DZB%vkQNCh2WGl|W{m
zZf{xfPK(Ol{Ixb1Vb<(Z%`~?$CM%_c@e7cY602I8c7l$)U2A#1Y-LYV3GE%;sLFJm
zKk}%roT?9{?XiQm%-^zPnYu~4Hq2V$8{cVz4YgcCD_aQUbhgfK4xhQ5HZJUm+oCl<
z#?kh@d9Nh4D0;jf=|{&CO;3+JnM%X-(EDefw}xO*`?s6V1S?O=8hZCOSiLI_-tQaC
zR&*dFrGSgknZ&~ZE%?Bk7SCLN<7*z~tHi+hW^ar$u<lRWgP_cqMIaLb_C)`5@`}68
zh6o=!N9e9s>e%l8SR7iGc2fZc0|q7ls|o;Uys7*v^~77Oy)cKFl^{^NgM#T!IO2>c
zYe>PkN1=ce(-QgGBsRw51psojKg{2+Bb#UGOKb<j*7Y+|OM8pL5XABP($~X7k0c?>
zkWoc;_0oO7xv)wyB7x)qKcF{?Stq=$GB7IP3~?f%aNv&UMd*(=%|J`w3ap=l=8~0Z
z1wmtj{_69|j|9*|Q!IV<tucYWR;qf&MJeR#aY&Fgh*V&C88i1hc?y;SBP?)=)S2ln
zpw08A*iF2SR7WW4Q@UlIP#MWT44_G9Hx>KxJ5qI9FZ2CZimiRjtC*#JR`;%S(;JKJ
zpD(xyoejRPvwS-E*izAhK%dIU@TX{l{*#_-2eT4-*W^FDYb<v`XKxIfJ85vDT#JbX
z`2F4_#BL-HeGk?208i@t+gOK$hGSe)%i99L0rS2#8i{(j$qTvL<b%F)Y}G*#%3OnK
z3Or$cs2XfePfy0$@XGGXtCEx<(Gw;k^{dJ5uh+G7S|lVp41~RTOM*c(0((<noObUM
z5K%Oz(3AfQ7BUVMJFSJVP6!i5{qEbgHE03}X$$(3)~w1u0a;R9oq#VBMy_-^<6OzI
z9a+!#8?D6M9uWH|VlV<RV1&j+=%9&|8i&7lJlVxYkIv^J2difYmwn1O>Jz<Ax6($Y
z#Pp`r{4Z8=EgYDn8Fy~J#CP?{Hf~idSmXuOc*CgEG!q@<cd3#`15b~mY4)(F+4)u~
z$cT7Gta2#REIKbu%V5C2(-1PsxY7NKUPQZ7#qXpj3s|kz_@tyt`s!W{S;J~uE|k4~
zwxNgV%4F~@34W<tzarx)%%T4fsS$4;gw&a2mDK9>+$~vKnYI&Esk+#&-K394;IrT(
z!uFa<{MmYllr*rI%=|}h1=DVY9w4%d?||wX$1kYx7KHV`GAKdCCW>p#%~32YxqGSh
zv*78BUv-IQpl`YXIL&dL2OkS;mUlmNB_(cO7gaI5p(sBsc5eN5rmD0@p`;rHZg{pk
zf(qasbRvPNqbuFk3|tw^z5t+Qs4O)s*ZEr7&ZPTv9t#lby^}ED6eH8R)$$S89F<x1
zGM`Q!wdhAWQ%2pY_yI(7e4t0u(ixteP?QM9I)ANoTT4Dlo@lx@v6s#G0ZEgFp60j0
zwc`A^A|Z|~+U*%gP1CSYfJ5}@9~y*Zadqt>orIulNpAvmwb<my1UZ7@qt2R#Evyli
zNfd5xYnfPQKE1EgmFl|}Z3i(=4xtEKZ0&Hh^gvirUA(nydDlrKiOk?3awQ%l4)SJ|
z{m8qwP^C4y829<Y5|g3AHM~a;wl1(0Z2kh-D%p-suAU-&#?sd#IuXe-&BH_crjJWr
z@CpcJWt?Ob6FtxiGm}FMC|w(OoCbL)Wuc#&g&>Y4lPRr4YM3_~?1H;)RIoYup6<^x
zw%a;me9K-sARMskqnvvl>M0a|(~6PQ&=J4X3}kZ!lk$DsXShhvY;F#RRJ@}N%LdbY
zSGF^g$(`h>3?t1pG1UDGXicV=03=Vl<9MAEA5=u`3%#4<1D~5}yn1JxJx&<>_bk;8
zNrXTo9>fMhfF{b(T!k7+gXoY&@i|YupPh2<JuhdL$!VSid7UN%Cg}DyOKwhCPjbPF
z@U}S6XmfdMeX5d8qc-eiIm!(*E9-+HEZQgY?vX@cIWI|_R!5L-EGTR(R1U*z8Nktt
zH81i>XYpV)3@6IVHL`orWWvrgm2$|Om(;WJ^ywPgzzFcUSKbz+JNPAMQ=C(TLEoEW
zW2RcG)eLc+{CF0Q3Rqh8os8x6Ce8YicA8g~;x#0VXK(ChT%+H}Kqjzf(0EgW84JIj
zCVummfN|VT!q>I+n56-?OKj1~f5-fR1bNw$2mp>Z?#2Ed^C0k>y;E~B3NEXSKPpe?
zsfi<`ry&~ii`}zG6>Ea~5k(`=7_$Rk`!hSXt1jAXl`_Aj5ag>$&lVLO!w|rJ@qTZ!
z$jjBtt1u$@@0k%Y$;dAi^)Ju6M=FtzsZ?=d@6$<%SEn8TY8@7}8C<Ce`NT5M1)E(_
z6KG%uCv*b9D^&pG3U=U&;kOv<!G-`1-4rM99=DsZuS=a&{>REDzo*WY|AN}(qkRY$
z%v^ydzk1HPw!9woi<N$+O&mt7lrKd`8!K^Y$afwz^qV#GTC>WLD@1V-m(Ro=B$|As
zS6TS;j+I!0VvZOe8~WO{TrKF>!_*T$iINZWrT*_<X)zjH_<X7tpYC^CpT<b{9qQn~
zF~_0x*jcucVx?KM{Y`Ab2i6B!maX@xE|+YSD7NNo>kK~D%{^{ZdH1zn?K|u(HS}Q+
zO$-wx(86mFV_}H6>iOO@cj9RwL;p<A`#Zz<bfLO6z5M)!-hAuP6_9pa;TE^q8a>$@
zF}v}Sysrdx4*;3)sYku<BnIXXnb>#70^#()hO$pxqcn%f?{p>mQIj97%ESJ3NrgU9
z?T^{Sgn1eJ<|YU#*Ke$hP(IkHScyMjAd2-nj6CDIQL9X|NSPx0qX@QjG|1c{R2aKf
zk0+?Xc!_=_7=3)|vM*@{ZA5B6J~>TM3kyBKGYYCP6)Wi4k(;j-Dq2DcNoHk~<6Gy4
zyStv_wF|tj!G-orbvCT-_nu)b#O3Ya5GwJ~ljJkfe3Jky8GMV`m_kc8Otr^GIA;8T
zj?#!7KkMv4_rdL|kaLu-2$CryDn$8-{T70viVZeQS8Y7ek==EhfO{a^NDNBXq<qP{
zD5`9OFOm?-7iGoC6!j=4Ju)GOS*%DvQ<`7%o;b(iG2?x<=@!~3DFD6weNcGyq*|HB
zZ88tnV+^m?Wj#bsZsR6Sksa`?zF&>sSYfXB*--M)XYrgmh7o|<B_#m3U3`Hj>N4bj
zSx9NOUFmYNtsJb0h=j)|vxi=%7qw3e;Q(%6r9h}{ITiF0LQ9()4?yHv-rgP}U?26U
zw_WHKpP^Cn))D{_e~MBqcu3$%5OO6LNYd7tJj1b9#baqiwvXw>G5l5skiV51i>QTF
zi^j9kn!Kx50`O94JFOw-FQ3{55Z;?GPcmTt+`ZY!aMkjjU{07t4RzF)FW*t}w)vkp
z8Ls9nnor!4g34X~09KJCPtMGO^t~T;kj%pARvvtCZe6@uWpiMz??F;Jtto7u@d}|>
zhiu!Qbr!fLsynKiY)d1*O$`m{N%JP^1|e1Xr=4pPWj#j~S~~r#Bdimwv^F}&rgR5a
z1G>vfw1os#pYHwG_9exDXxeF|tHkP>K~XnRY}Fc%#lnA0fsZ&TNofaAL99-1Rgp2q
z-D>$@<J(>JcUE<kq?fMSQ<LRfBA*htoide^WA};Fv;!1sQ02mDQCNOlvKc8R5_BPf
zP$|6L3aHl46IWi2Iv8P|&CgqsX#0-i+tbi6`uu~j5Y!yF4h|~+a%6y>@y^Rzdx_bz
z*~8eczU9<&oa?Q*LO+5!?XW=y;>?4BC5;m@>UOyeoqOn{@%96=isNtX=<bGRcE2>V
zbJg-Gm+cvxEuayM!JRYgO`_kJ_EM8N>wA2;2V9#dSKRJ~xZR1ASbI;!yL)Q1XJk+9
z1OE=fJ%Rt*pA*@;@NH<xV;+}r*5TR>7uz_{#^P!O{Y?}l6$PjNT4R}F^qX4ixlx>`
zh2?;6!hr~Z_enY9hwiB2#J{k<-YVjdP_<7_zv-4Au2oH!{Rmn+S%}fhvK`L19U{r8
z?zvf=qYaF09^kjcx*ff{PCB@3nsN*I1Aun`f2OmN>(GL?$e0;}7?S#jM>o)D|4(br
z+@P#&bvX8SBjA*hLpgVxwWo(s0TeUh{bAglPIGl28P!#2y1&dxh>3GQC_wk&ijP=s
z8a?Z)m|x;GvH+(M`C{ROpxP71;(t)QaD^uHiky?&@4lRwLD);`D6$JqDZUIWN?bM<
z@#cCr-9V#x>xiu|HrbZAREg+HO*<aQj4B6#Oe3aE=LTIzEV*fg5nTEEP;Ag?F#v~f
zA$Z7xJ8}nIOe7Pzhk=W>W_2ass*S$aZki2<ng<Z3MYx(9G_FAcv+QCFmOUgT_rDMA
zlR`*4{j|n3Y}rZSq0OVXXs$wfkWLwPp$y7uZh?C}+oCNUFp=q_TMeOm7-eycxj}wp
zQ0EIOUCy0`SXU-KOQSJ9TYZoEedd+}f*fu*SDhG(;TK^Kc*C20v@1AnhP=r}DO$?|
z3<Anz!yn#1m1_7{bLGtxXGHioEDn!Rmo3bRd|Dq-ThS?#H{sZ%yP=8x_~3Xwu58i`
zv4j@u4x6@*r<cXqv2n+j{EXn%cC^k9)qnnw{}b!KtR9Av$Lqh#6!P7smxjK878xWf
z7?=<-0}ER2)uYs$Pb(~n$&CW0x5e^V0#+E7*tCH8<2Y5*xnF$J_w|O2ud?r$iUR`>
zx<v*edwXDtaU7JJ_<DuHRJ9h2ot6QlD7F9n&W0{<52b6*dXkcB)*iAw^4PH(_|WZ<
zc2j(R6`F~10Zwm8g63~(Pr*>{tB}x5frUL0r^+YQq*V%F20YjB2P_|gxJnlsKry{{
zno<zC^}Kq=?&kQtF4?SmQ*6mI1}e7Yh|8g{TDNCVR>Fu+vi|5IH6q168OrhL1Tc&A
zoy(Gep+qO?015vw{Wam3qz_d;@4#$U+JEz$dhPiGmVVF8l+tOGuwBbrRlU0bgywqa
z27JiHvu|MeJ=i<B9)?^I7@aXV{Jd+^d+l2O-r_++{@Qd~WSOmjRA^hv3PGu6;uMJv
zStFgE@iK6fK<et>!~Wu$`CJcYe-zFJWKO;PqLjO?Z95Q;O|Mx&gRg_eI|y%LBN}8D
zd7BVq{%Oz@kN?Gkg1cFMMb3{iUt)(5yln%=_oh0Zj(`|cJ2A(Y?v?QF9g3Lj<(H@0
z87X`mRF!X4CPbnP6mRs*k#v_K9rNuc6{H<HoQ=0fpC0A=y&Ce_yiDMA@_gKVH#D{0
zsa<I9<VW^RUIa5hTK}XMZAR$6zF3$2B7sT!YGzofULNLN-qiC1kUtA2$^tWnca=(W
z6dbDZ^7X(fW?>u<3=rz}sZs+UQvQ`?xR=hR$p~16ORKsrl3e7X-k&Iu$NrW%pRhAn
zIa_w}xk$i_w=gtJ1)QpJHi%7shT?JE?Pf04(7VUe=Vu=;4Nz!GeK=dkmvU=EL2QM|
zi<5A0@g1h90EjX!^(91^Hjt8usVIJykk+4)o}Pz_M>n!p2CI%U283zeGqIHcJW|2$
zW?`AAEa{JyJ@GuLAoGa5=lN>$N+JkKwmb)kg0uvSzh&f6?teqb_K1r=<XmkPwyfq?
z^98-hrPKb;9LrgfIWG$`8RWA3q(=Pn`kY=daZaq6hv1gh-8(go=Py##o9@iRW#xlz
zLR8+8;NM1FfL<GZFq+fsYR?fE9|zjX?h#art-)<1-BB<p>ca8f^5vk)=_)Y~J?XQm
z5^bI#(6_^s9|a`b?`_9t3>|15@<loBuPA*TMBfnrZ>-6VJ>9;~XY;jE;-VmHyQe(I
zlAV{uP*L7pIqQT`*&WWVyfT^=VaZk^K`3?XT2KEwy=HBV;cC9+eDdSt(MRV7Y=mZQ
z<VsVshk9$Zh<%97K{)c+>Tj*_=PVDX9VOX;tTR3YFt@A&B0)xwVpe5o_x3@hg@iNv
zgK+4*IP;-QW?3^VXy!PUWLQ*}r_bL6$ZV&j%DO*1FSyR?2`mBsTs~w`%LmhZi@swY
zl;|ZWMm6$B%o9MohJ5XJFg7nX_>77bl+PJVxIBc<0FUPFzoL~lo1#6t*Nju-isU1p
zA*sQ?cMtt<YFG8DQ)QB6mj%+@UYb@>4XS68#tYNB=<w>bd2&ozC<6Fj>iPxIngR!y
zZ?CoF07>G3&e(9SmO`4>GWR&JocGnz|NI;*6tz7MFe=B{ToOuIeNXK+lsOC4QcG;P
zuG2SMsILRQQoa%;)s-uGGczVQdO$f6^N>l_(74;Tsl>sa^wlu%{QVS~`;6KS%+O5$
zGl2(YY7C5J_yF_b0h$3ubrx#=2E_aM96YJ;B>`N^_$`3^6wFK8jqp|&g`&P}<Z{WQ
zusCY)!*Ij|fqN=^I@Vc;c{I5{eYaQRG}s#(#d_RnJC}9m(pA{E-98K$7+_<t$G?73
zhNMnfH8r4UtNFiu1(i_D?k0M3uI$z-hse9fx`?Z;FsM#djSxBa$300xK%(*Be|05C
znSs&p!7)H&K+pVXT%fwP7Om{0;mKNJss#U1>u{pqv|gV(Eo=A)ziPa=XvhEuB98uQ
z77ZuP%gV7E)V%%6`h0ie^$Gl+7uE(%{nPKv&yl)Md|dCq`d0jX%K#8u`*RdDzC1?D
z#=q>)uC7behHA{#l=(SdKRts_G$K<NW!-ec8CBz2@pLQ?{B@6PTIH6+0X}eD{QVrH
zSWBn8N5+$#L;q|dnm6cr&i3@zm6_((mFS!2Q|wQ!wRK5<yQ9*T3H_1>#Ly@ZW&Y=c
zxw8UQ{)ER}0r6!#<cT|?g89y3`{6u}X++HnYX+I_7JVpZ0JZ-sDR-zVLn=Z^(jw(c
zaeLWi?b^LjTZ!>_B!_cD?i<H1Pa<A$m}i<<YMbFmxj18sAYdb-_LiDYm(jm^ZQLq7
z4sdJKfFyT_D*+5JaYL)JtD&iPiB(lqwdL@ful9Hz&Ia91h>!(xh$z6l>H-NCgp85G
z0H$X{*Kdayh>kn~6HL#aNmjar&BsvB1xU@WH1DBuZ=8L#Xg+>s(XD9JCNxf}c2EHb
zKHwc?Cv5Wh0+rVcXj6HnU+jbtDuV>UXanQd*GPuUSB*7!Kl)(zZGC`U&bKmk?^Gm>
zlCEh0L(XM*c`Fw$>Oj*M&8LX(EC5_$`o2JxCQ$F4{x-~dkQwa6mwA#}I1=9d$v<qU
zizU^tQ`hL&Bhse<czwhuI3DQ1Tgq;^G8MN5T-a3euvzNAB9{|&h!xWT;g{J@E}v7|
z!l{_&LBa?`pr=(e|Cjj}$t#xwsN3RF+gxL}%X&SB$IoV^{Vk`UWI2@-Y@;R63E%OJ
z=@tLI=fvW`w5EZVJgWR4D6?}6t$=Y;7eiUjp9U_@pXT}@*V;?vdCQF(9}Fq8pVYVa
zJ~_GLA<o8OYB5kQ60{H)+^wCLj!eFzZdH{ES*peP|NVm-OBS`h)b#kvS;-R~SIq1X
zAy^;7V0~N#H4F==VaOCZlsi?wJxsTN24^iz%Q@KZ6iJmImz3X0_D0Ct+q$bS^fUd+
zo=ag9QW9P)vHvty5<_|Yh1x^|M#pS^ZWzISTI!Nh$40I+GjlA5k^lh!gey4y))eqM
z0M=!AB4$>=#PsMoIf}u9Ij2gYUJlh#W(p`u^<bEdQz$aO?xZJB!kSq00;L}>U_gBj
zRXPmOdf-^U^=1Ms?Y(c2^!<7!`c?&V&fK7}G5#pB#b?YxdGvKlS301q<=e5bhO!!&
zT9CgYue_{-T~eTne{CMRCy_$fJMMOo*J|doKhKFN6hwX*xfXF`M%-l0GQkx~H<j5@
z6bBWjP+grk(*Ob`nVGhVvo=46Id;k7y;l(FomPj3T5U(5bjYJP71y7Ztxh)JR2urN
zS<k=}RiZH_8Y*r;XJp81OPhbMkIjD8xdb$G+F*>3#NhU}XB0kweuQyU_E&gog`2;P
zHpva$OfQwGmyyV0N~kZqBOr;9MPeaRGDNj%xKW_=^-+g`shbmL4dlNQYW%{@V3kZ4
zi8n-yLlAm+Q}X~|-T4_fSr|^L<h5k{xZx<c_NmZER90R)dt1gNR>yMWSYg}DEMyy9
z6p9#C!x<d?A3H)9J?&7_u;Yd!h`L)Cim52F8&L$;+BdUBi)KFw>c!qk8{lVq|2gE{
zn{I&YcgNtNyL5uuIbM+~aao3HxBO;%fozx!_%ZGp^1~$1X7#-vC%4~ukdXDEhlrP&
zALH{ukR-5mMW@Krf+*)jt4P4AV)flrE^E|hk(amTuC4UPhsiROuKu_?CU?JVTGk31
zX#NWEdTr2HlK?_;VCo6dRpq!^b|OGBNZawVWP|HH&D)zER#D%_-E3x#^k_zcPhBge
z{x<wJkcQb{cMLO?mL=~nz(Tsz{7Ht9$97Y{)2;5*AiZVoC7WN-1gM_t_G$a)H~R8H
z4SEiM+GFX2u&j^?C6w=y6L)r*d(uQ~#d%zTb-L5m1;bLD9NuPb;;7G6C*sR2zWCs~
zgKR}&07NYD8SzSAe7X*8m)(mlZl{@KC2?liH@b0QkibQN24x#4+4n>5ASn}0SE3VK
ze<@mF-PZ&wZSZM=CUc7;zzq2D>T4VpMWsSU0ZH1$JPR_mquPEd((oWqEfgUn3A4%k
zaH}Fi#zF$qTVL430#WgfI3L=j)`x1rnMsMijIFPt@hX*}GlfqbASx97mj-{Z(y#qU
z=SewWjy~lchbsU3IQ_r?9`aV1I7CN|tLa{9B+ER^Jj=NbErfm@%a@V6^h2^6klmw{
zqMGvT*rlCk%A}&6J-Esqde>|2Zmkqh*#~_4!L?|#E+BSApPdDO=4KjG@iel_e5KCL
ze<S6WmX_M8in}Y~G*D?ciX3<(a;fz=gsS%Y_evClg{KFBXP(we$x_EVQAi@L(eih<
zs?whlMYN`$)3{Ut@UJi@w_sx$hC$J%+IQ+A1%z#Ll`iq&*QsbQJrYa+N$L&X@9o+h
zn8HcdTM2wac?VumuXoOaOzr&Q_JBk{V8oXCp3sd3%J+>!v=CwNXYOFsMrOurHv}J1
zqKr##Ra4n{qj5WYw8H#j`!&P2T;elEB0Pw<Mm0sao!3-|?NgQc2DBG9S07f$tVw_1
zGj{+uAj=D(TU^gETT~l(yq_+I%fTUgzAH;_KnTJ8v7o#URe4cv6Ly7xNvZp{1we7R
z0eBeBpgC1~jtu95m4eLdoxN#Ju#_SWtjy1`LdJHdc2C`Q=%a+UHZp6U4zPybtxW^G
z;nsg3x$vyoQ#ZAw@0ej1*YCX3mO;Rb0Z=IuQCBE9Il5k&nrEB6jTp*h2x2A3j0IYS
zs1i~fL204bL5Ka;F=>rszZ-#y0pH$nZ#*H>8&yD@z?j7<UK$|rcT{;hDp}C?W+q40
z&GQd;>q6YbbT<%n#d(09voI)7H;NAuIJ_5iYf=yMnZs6?RO$KHi~H|(JFK(893bmS
zW(OT-HIlPwYb>|#&XACq0(kqs(HP#j<)cpm;8_B%D*?tJyFM9}VJqRm|8=R&+ZPsH
zNgNOelF_rxO?*V;3E9HQD1g@rhTQq}3p!n8P*=s$`;w}VoZ}7an$yzlSb3=EGij*@
z^1EwVeQdvM51pf`w7WOPw{2l!?kXG3R0+j|VPFayk^IdS!}B}zM%x*mPJ52UG1gg%
zregU~aC{i8L|~_>HyKUc)zR1@@O^yC?P>EXp`Elnej>N-`V!paYYI%z9vr8WAXmZ2
zG=*}{ZyrncmE?JC<Q>R$=!QwGSs9HON20P6d3oKH1~IyD1}1Hl<f{RBYlB91Kc@4X
zeUg5Zht^a7{@B>Li+)Y@)e)Wn?BM@tlnO}ibsPLOYgptn<%G3+d<U(fuE?xkf9MVP
zVWvFw1Qc_ND@Lsg;ZNyUyZeXS`lhLaZVluDeTTO2sscCpaU*5NkSkBUOZjJ!NPC^J
zSxH1#+L`LL2u1-4&RXh!(t7*`_EK|jart)KIC6V4+7=E`+T{gbQb(aDH)gNep%*up
zBiN^!ZC{MLd;T?Mexm$obq=XK9%$;>Nz;O6gxRw~zB+ilm6U7ZEzEjBru!)H>e@oJ
z+Z@y2S0qW3oaB`ecUr-6ic=K)Jb>o=vkYj&uoB#~wgf;pmKKN`t{G>aINa4-oA8F`
zr-<@7?O-8!+~Z`D*RDK@5oD#Z1egzw{I~QYD?a%dF%}(x2(RoN7qzk7nh*PYTz2E+
znh3e-TWF>EsA|h8vhzA7a6aJv2c|pf=Wnb_dFx~A8C)VJdh3h-*ruykQ-&}QC(N<{
z?NblqXgx*A0cfKqHpg=4ly+Q{KP#hlpDN>vv1w%!DN$bGl=<oH;#Ny&RO;H>PxHA&
zO*!WZLQ+{F^n82IJ#1W0Is$bgX)a$La>j9HT2H_B99PT>v+auRF}qVoF&4E_Ydr4$
z6h@DOSi5piurjH_thS(d9rT{wo=m+~!vWbHs10Qyb8i%4=rPWq@*g}I6vBOP@<x?!
zlg1bK@%5oHS^JofKgh2%QSaB1RkyY^HcYkazHw@oZ#^D0i}tmM79HqndQJZ>t1(%c
z*;0M{<G$GYm{?+8WrO<T*Tl?%-xnc><bQ~ZJ_snXqhh9MN&M|DxdJ#&F;o^5m>w4)
zmQDk{_YqW}llhQ*P18@^DT8serTI5eDy=c~L)9>RfBf4GukCW9Xe#@u^hd+A)C5@<
zEj{&udHuim9#xJF%Lj5@fu`<O$p%NDoDz)HMCh-LuIqz&wD0wsd>a-4z_x=;`;6kZ
zfb)k%p@S7%Th1;`Pg|(OX?n+(<YpWlc`DM_0h7f<BXzcT*YD_dVL;oP*dDhAW~pnv
zr|iES{un#boZPGr@ZvkZG8)-=DJA!JhGO8~3ZPT-3N0%S9|*-X(!Q=ZjxTy_Jpvy;
zA+1^DL4YBXk)gDM+u-Bjt{dv6)^Fo(0DN&mAExbqjm9_+y;7_83m_)VD~x}A@L3Z~
zJy>3k1!~EL|8X*h>lh+xcsEFuBb>{xBN?{NIt5z}#x+f=a*=HZ_)|gnXydEHQDAgE
z<XmBP_Z4Uda6YsDr2Uv2cTf1SeJaWw)UR}}9w^4?Gk|C*AEE*b`n(Lw>o-juYeY_b
zxaki;8W0O$K$5pa4}ZnC3}k4?p3|CCmQ8SPI@N+@g3WwGT>RnDKOMjos4EqAoh%%t
z!dLG_o0kW2T+-t6!=RXz{pH@`i`#@#EP2Q%<=hQ*k^kJh!zfL|W?1q<3NK=C+VNam
z>e^iIF}BoR3i{#lO1m3IK$8eECiCN?^fkXxC0!egY10cUOaeyKX3o=tI6l)a)oqpR
zy3=Z@Mxq(%XhO^UmLU>rsPFCoYR`tTYv9H_@RP0FnXogt)8TPi>R7piwcj9Ne10mr
zU}>Dnq>MbBkSuYy!n#Ip^!?8_UWDb(eOl#}mlFpU8hf1#%gwWVB5X2u3+cfbg-cQY
zr#-;~+Z(@8^`c7S%jrw*m1q0=-!WNcqfFZ`emE~lrUL`j<r_;f=dXy9j;q=_ZXgT|
z3)|Y;sr29x!36kFXCYuDTEDC1XmdD}puOlHvDlHbp}KT`#S`lT?Rp1#Q$C|L-sxRN
z4)ads0&_uDR--v4#>^9XVBQ$Rp@B0V|HCWwI<Ntj<9liXzpA7^_7>x0?9h3M^YdPB
z=bo*7?>E5cT9Y`wpYiB%&Y7DAX5aX6m9Hl_u6!}&*xer2N}n2JOr_D9`0~alzffOH
zG1I|nM3ASxyOB$!pVvF-{RwZbl@+w~L%_8{18l<5_}QKCiQ~0Vq~B^P(%WbxeGuE)
zZ_ZeBSyEDILPlSj1&CXp|BG_b9%A$H$I0YFktgqN_qa^)xVud912^#gOG{~}tl)kz
z3eGk)b@jr~x1sU<^BEQkV_bB?FA9mv6BElEz8+eOY~!=l>Pm$~^t!1V#^HPo{(Q*~
z|6xiO|3_lrzf>ENK5kz$rjZW@hb4A^)v7IOJq(eIQbF<Ht0qp6_*Isnfb8=A{l8N8
z0i0CP_F#%z%(w2r7ncs}%+!WGY>{?jkDDhoBzP2_!M~COz)}9c)+ib@xT`KXR((Of
z6P)0(ay;@ah&2Zl5V-Wel#7XbvOclhpJL5!oP<@mO)U?lG)==S>+EB!=EHHf(1Q=w
z-qxXJZyyRQg0uyMfrmKgH~)y7_`BEe|1VAd`^e}%ByaRO_ue;Z+;ed}b9ftjYMLU&
z;2jFS+EtL*@t4<j7oOj57ZiK)^lftS_arf&D#b4+B^qhrGT`YGfvo~eGXIw>8>ckV
zZ2*_B^^LlQ4q(n6gYJ(P<G(-79`Dj!k`mDH;;&y|A-kWP5{h{Ge`m|TI&c0R9SRCT
zNV_9~(N$gFrcJ-prYgc;x$jT0F>$<$UMJ#LMFUcVdWP_ZQM?h+fW>cNC3Z*PZvVHH
z^q)Tw52js_hRHr0J<nZQezw!GL6%a9m~8Z3XaXq?m~{Rw_vhT->ZZSI#BBIUa$e>{
zKZS2U`>Qp@0(-Dl^CZOQG=dQBS?ba;it!!ei1S*FO>S`0O13IEnBa5u+K4?Te#{fq
zUrJ6x!6zsvI7Ac{5)us%_dnElivRAR^!Fz!?kV#me|L;uvGG`0)vxXbFdlJx8+-B-
z3U0CN^380|ibJu-3muN<QC7Z&K)Y26@-=XQq<=a*|EqJ~KUMEvq$|~C(PvtwC~f!0
zbB_%lzlC%Y|CKTjM|uVeT<WiW4=kb~pOhb)?LX}Y!?l*LBL~Nk@mAMBFb8nE1&ZkZ
zsXOLzo8|~?94jn#gy+@q?UNK2ROnBT=&{ddnz4&=sAgnl=F!jtcWU4a1q8c)J1ucJ
zC_~c!F0XJ=R)X^sD+S+QHhSy(8s{1D^{@2D;a{T=>5lPc#^(xo7{2X2YVM<NPd$?%
z-7EjigZS@w#g^j)6#;#%8lhi}N{DY@Bs|ZXZ(F1|tXw6Hxdd#!p1=A4=d%GSPlpy?
z?(N~H+$Z4YSR{MBVso@w6qtbl;nM%!c~QO(ELQVlo_QzmY5(5Q;Nj3(zUO$j4COxC
z<M7OvWs9!*KM&}CbAb3mbh)^ieRI28Gbrm&>>Tl-SG1eNctYt0cz{Gcfp%=jXih9&
zq;ph1IRz6pP@)YHG0FPkCPzTZE|2;jOIStvx&DOan81yuNnY?|*#l*!xdIzsrsNV$
zZ4T$yZ?zFmz3ket+&>i@`KEo?6SnOEJhA_3FBg*reK(AkX=09h^V%J}8qV2nG*0ri
zH+?Anf9!o{Sd&@T?u-@1LJ<%VkkF(z=>nsKCQZ6XlP<jp0Yb4L9g*Ha1*8c`O9+85
zQiV{Y*AS_pCe+a3JfO}v@60#f`}17aIscR^dp~=xw%1yF?R7txLaS<Sg+;tCpVdn#
zU5bpN-UYN}V~NeH>hJ_DI(Vw@-{tr7#$<O~LA2{mDfghC{Fyxu6_m-7#F=_VYR0Hy
z9DQtHn%?I^C*EiS2_8+8_OCo?)c2C$)XHH83sWPfgL+Z3o1Ir96>%@mPB(MZDqB1W
z2g?b7ybAso$)`6&x$5w~@7eR@*ayHdAWFt_2<?0+8os{th?x1##*{kFrOB**(sSM7
z-W92c*F{9RT7UT@4-O;U!h@s2V-`W+sj|WUB4TD%WQqqpZXw$KBD(qT$f#?bP04ln
zoehdhxXCQ&qOFp8Z9bOg1%h*-zv!ruG!-XVG|<u8aa0TdKLkL{{!QJ?tU9ud;s><B
zp)vDI<c}v*O#7_OvWaUe-NIHChSgJJ8HGn(v4!mb>@A~ze?`n>6-dqj0hAR8SO3kD
zkqOlY#{$hLk3jAJ&F}{&nSxt^8euoU9{$@S@`g5k(DWrxH}IPH2(p7y`v!{!!L2P(
zfP#kRxP1!s(JPjJRGx1`0blZeQByOkwrf%Omf$QxQ*ms$^4tza5CBv7-xrpObk;Xs
zggwZIi<*G*H+-sngor?s+Wi0Za~;N&+?_r$CixYSI!sE8cGWsmQR!g`>I!=tG`zr8
zjyZAd8x4Qz9Q{2+WU`uBe5t(JFyN*WE1(0mW#kgh2#eV~d&rCH;az~B@0TA#1pu&O
zI!qzn830C7JOGh-JSWM&%-OcBy!sg@qohMA&*HPxOQ890b^>(Q-ST{|Z9~J{N8fPG
ziE6;9j)>}a%d0Aik^I)J=iknjyKQZ?INp|hLg#&QB}Ut7eX6M8=GHYM>U@rE01@!N
zVBCQeL?am`q{=Dd01Lj7Q#83gCA!x8m=p5t-8Bi*KQxs89-0LtCdF8HXN@n!WJLq$
zgGH0Q^D#rVx8nZ0b;tX%HxOh(-qVGg5;%>mA*dyo=kUz}#3zf=EjH$vY>rG2FmK9z
z4X)_~o>3q7aRu-|{@F()5fG{^RF8uir`?QG^-yIAUViyYAlZ!Cf1zw;N2q;CI}5yd
zyQ`;!^A#9vs*UW|q>5EyO$Ku2A?^47t2xB?^TU%7`gm`FJ4PmoM{|H#PJOhg#p~W_
zGy2w;>U$p@emk%&Q{3KgE@cLQdqK+Pm#+I^06;LX0POdVOe9$ufZ9$q$FK?S_4<@b
zer_cE7ZL9nD?}<Dl~Mc`!_W)TeB8s&p(km`*=zUq0Czh(w)^>iAVL2T1u|Jp*EK%b
zempCfw{2LhEo1}E-}kA05^2Ok!-pW?3aF!in?rU$+I5elo>}2lY+@qN5FS|gk<{Op
z%c7Ue0$%P@T<_Md1L3s}?b0>x*?el~)Y>z2z*JS(V^L}3Ei8ZC$H9c9SKbIHZ%kV4
zo09iS>)J}wurppTVzWu;-auMk{dq%PDoRQk>|#KJ*Zc!Guo+Er08RsFMEw(-#`n9l
zyKSu{S~M(+OL>~xbBXrPnl6C+OmAt9@ZnnL+-UxDUc_ynr|gc&DnRlGy+fe{Z-9({
zymD;#&}M=#nXeJl$S)VN20tJ4I6PE~rZTv+0O{oanf-sF!+iIS%;b4<Orm~`>2FEn
z1KytA-VrmWE`Wu_Ntz_z&{%`r+ledK!Q49alPLuH*mGoC9YGrXp+r$`G`#2qUq4-@
zGXvD!&9r3?mXaRiZ5USjh^(q3oV%n3<hnuKzzclK-dqjNBijwsn|ueQVFGOTKTW9$
zeWlz3&$$=pF>_IoY(Va=qW5|jBHDYg+E4W2ujDp;`8wf>#(zYFf8Ur0|D3@@H@)WO
z^ttyahG;h8c)A{?<;uLpe$h3c`uUFo0cf`#t6BEb9p~M)rtPqV=^k?be4DTQp$d$a
zZEQtz+PmAQ=0sfz4Xf?<I`#jZ9ue7gS}c2*InEn85Hesi06Y@uyB+gk#6`Onc{=d;
ztoqi}`Q0DjG=CWO37=uhZTl(Lyp3vMc_tgPTit1VY>I?)cC1U9Reo?%pgZ-ytX-wP
zuRw4iQi@_3tE8Eo=6-^rL6IdOYlg8sT1JGSm*Dm63#c1tFlqrbxj5#;*77)jqz$yu
zA^9IT@zOkp_p`xCzqt9%rh65{{!m3S<^o$8Mm}tWiRtWPpqKI=r{q8I@fjNE1d^34
zIi0S@4)9W7=tQ_q14`K2JbG`V({xYL?)!0c>?ZsKr1LG#B3bb$GOpny)uVq6GwFz%
zUo!9Ob=ui7qjF&WU^XpN6W^N86SNUj$NH}_KC!fiV$w-pD7|l+Z+BMT>6&B>iBd&+
zWP<4KAt#*&eGlU+AAtM-TKBiJLIV({Ui+V|fD`L}tByW=GPitxl|2u@M2(fIe4t~<
zm^b6Lvg(r{SL%MqfzW)4SOP46ks-&?aZAoDe{A_p>jRZ6EWY(81=Q$oayk)VSeeKh
z5(ZHmDW1uHs=YzG5cylT!A8<m;hp)R4pNI5Mkouw`2+rG0M74UNbO0P02KK5jl5DE
zNbIB7o4F#q^SO24w^mgZhoIp8#TT^QGA?O*WrTn#d2PRM$I!QP`54pb7+dgrgdZ&G
zJhw_E?mhqf=tQW)rWF;P%Q_Ky`7Dd7;o0*&BYj>>cOLpnD7@dVQdUc=xtY+jMiff=
zSE(K#4agM2@wM<RXlCo}UGv&2K)7xypVQ1X`k=06f>UX@b)8bh1=7hy*;f&LMt$f8
z7ySB>RS~}kG^GE-jr<4sIHd>li|m>ObVl4mLe<YGf%7C=VGIt*8-1pj^`1lcZOy0#
z5#JQ)clT3(w3PkUL)=SGoAn)*Z6`vupxKVRe$7Vk9uyy4m44+_#r_8f@IcJ$r{u!l
zMIjU6I-P%>)|$^SdNPOaGZvtCcc*0E<IDjlU))D{PK#8rTCAjr;^$zH0L-%?Z()`D
zePz8seMvo*;3IISu`-^qJr;82;Qa|qxFyoE2T$obfhApSUZoPW?Y&7W?NfPPsdpE^
zCe8)=^`{^C&woXj`mPuP=T-9JT^CbT9#qRpU#n6{-}5dy<(|sDVWJ#c#ixFMVExW=
z?%tDd?T!lysj#9q6T=!}@nS{6_W(ap>siqlno|40d0)HGz2ePNw9;l-;ZMl;aseFR
zZ+`gS75VC?yfPZg&%GBZcKWpu3yr7pwo@IvC8)v$C(hhG`#ebc`TfZT?WYg5>ja9o
zw8OO>XqfqYMAQN=F*0S!TSe0J0&uq9;^e>E+w*nV>s+NzR70y}wjjd8x!pZooW?h9
zxOi7BI8_i`G#3zJUMp@t#h!nc1D81Egkr^sXnKkrqBd1H|Bf7^!0ZNq+xACN<nNZY
z$axy@n>KI^h{Ju_qyf?HBS0g$QCYC}cv*>{#h^2-xLM@|MzxwQCfUHxl`fM<Sdt9@
zD8=7}LT~WnLSl8VLzK2t=fZWbGC*d3WYPY<))u~;PNQh2rUO=Y<6yl3>FyxXc_|R6
z&xcnneNRj?@PZ|H)k+}E=<eO;hSi=Lhdc_vX9ND>v#<A@b-**cSoVv?%CW8L%@$$Q
zy~q#grr_qAv|<(k;ea6D3%W@6KJ^F^4dtVM=<q+!^csj*rRi6KdLJ`3YbdgnJlqvS
zEWCWMor``<#Vs!p3_w+dcn0Jx0^ReNfrj;Q1$t4o=K#<)AbR_oNsDIGe3c&4L?4|s
zq1D9+(jdTXn+86LzMCp@WVTp-{Z`N?QPts8cuk^igtvSHvlt-v`Y`*XW7M|e&1U`M
zW<NerEgfBJ1yixwN-^?Pq-Pov)>bsv5T1E}4|oeI^l<FJ@56<ww+zo*q-A??=5jmR
z-Dtn^3&LZ7DgJx}dOgt)QVO(t7YADK9*jf)=x`xFqr?3;fW1!l*cXnvK0whT?*bIb
z@sYL_7fvz>H|8~o+}H9BH{jlHZjZk+`M&i{Nle_yW|jC)lkDg=@ioi2?(E+7gOz5+
zQm-{DahHhz!|~c;z{Uco)_=3Hihh-;emdQ}@6o4iA9iMcLc2;YMYogE6eoFT@ETQd
zC-7-OQqt2q78n6X;blprB6dAAb|VFL1ok(z{Pu-w@R1wVODg3vNOa#AZtvb`2Esed
zA8juHus#4%?`oJYcqa?}c-vw7+7Jo=BEX`QVMo#%>-}~FGKk{c_pR{hvAfMo!SSQI
z=V%zv0ZcAT5rP@G^RQ;CqI$oNY`c2*!L&8tt8io+=Mtf<Q0#>`1(R(xJgWFbK>2<!
zc}V3CXYlyLWaf8(ZpwS+d9*vpqwZKb*Uf$U-rQqJ(G&_kB+(LD*Lej7o&H|a`t75^
zC8?4bY)(EB_tQK-9exG8vU?oDDW4+!Zt_)Q6*|%-iw|{zURMKU#21e=@py|34~mSb
z#G&}-I~mC1<ymdCAxK@RY6r<C&VP4tzs>%AKp+ql{yF>`naIp;{{Nr;-%NpEK3C!W
zP(ul*Zp|Seyw?bgKtr#4-c<+9eBZ<X;G+*vfoS)XQVNKQ5-O9^c~jU~TN{EHbqV`#
zA((8`ku3d=w3pG#Oc9N#h>CKZUS-{nH2p(1woU*9_?-^aJxxl(vb1iqA^&!pviV|j
z<WyR@|6$zc_iwv#{RX|eK){%{LPSkl(T<4S?^es`KD^5IU5f5rc!7&I8d$=`(*mt~
zH(n_!z#QZB2{r7pCr)IUv?q5L>+&Si2)*k2*c4&uoulUZcv61<Evxv`&Al&@3yK8b
zg$B_t2f)`1C)to)=p}}loB%BBu|7SZOgHe*P){?k0=jVy2!ZyY%WuHa>#v{GZ0ODz
zR^4*{#OPS9Q8nsa5RM>7i<dy*2V|6Ir-<pmbPt_t<`RDUvC)2Djif~*ojgJy{THKZ
zxkxUMslFX0MOHICBv;gaV8l_&1F<Bs{pq3^VpyWr+p$K+uX36io@gm`3D$VCPug<t
z^`dc6>WAw>fiwc0ClNI`fFsm~PCKlxzo|X|R`YQYF>S!(;RyJI*QPw~VvNW+_5nDy
zY>3mGMp5dX^ICfn_NvsQB*DNDqs@r1ed0*A^-yVdnZ5W69xjX{R}3QE(Q%kD*wUO{
z%x_En5CMg_8-}<6t+%!Aaqv`*tt;R7!FM~Cnoge0N_t!zCex#1fZ~|=cO2P!G1sEJ
zH=-G)(FLNMt?XmfZk#&NCi%K?85gghck?t^=k(u)KS6EiQoXi16@<n{N;BIrKy~}e
z9h`#g7@=yq(tEKN@-<ccDmQdDRK=<c#r300F77P3>Tr{yuWJ>h?pWzzXD!jKb;Y&u
z>*crh-?B;k^ZNEXc(CtIbgQcp68a*`V`>?_<b8$fgd<@IwGU;OWOVbRy&S#3L#3s;
z_o(zAW`}YMC<32o@Unwv9J3pdb{}E~zRT0GCErX|Wo+5{xhYwgwL*<vN#M&1_xaDT
zhZR|nB*E2v9(XRfEQz9?G@e^eW)7rxxcNfBZ&;^$>`?w49>u;!Cxw3{X<-7i_oG`M
zna&rJ-nAQux1r+7KR-5<hMlEmfo~osUlvqrPf>iAmlEoMh0#?AEiQgQW+j!bg9j2r
zO7Q2&w8L<u3GpUHKY06G;_~7vH?$U~t~Suw_Yd+*(MO34eBcNYM2SbNI;TmL%F;yj
zOA|kQW;X&$FR-oJ=$Y?TBMo<!B}0k~WR$@Y_mQySGy5J0&R6QLOT&V|$-w&0^sMRN
zu_L#skLg5?kGft)Y>mT#8V=2u=jU&Kl<eR!e|myhQ+NGh2sy`*cta&X4*B|8HAx!a
z2ny`g5qAJdp!4l=zSDi5db)9I%+$nLtW}ueP2}LWZ(pwKeIn12@Oeo}og=&at9K9I
zvme_1p>ab3ZZAX8vgL-xur9rDDg|dLQE}$3{f-xd-;N{apxX&-2#!6HJ=&;MCgy04
z|8bVK;8=B_Kh^&gKmEq2JQT;Wl}KwnAWxT!zz=r^%V@Ew7<=rZ{FWC4u{RDG0#Tqi
zzA3=<jH%%Y%QMW;%6qjnYrpiAN~~>Kl_5hk=H$F-q1;L$jf+jmk0;(chHI2@AX^S%
z9&|l;0lJ~tSoA2;Oka8N*4&#LB+s9M<h%)rl!>c*#k*~(k&uo}KX;VrFk!~K$aKa5
zCq>BXB*d!N7_-H+Sm?lqdr7W*7fFrUTn=n0P1MZ(qFI@plUrS+QIJ347Y|t($uCRs
z_dwlYg$9x`&hA_BCQ-q$;9MppaQ=-L*?piQeoX=bt6-Traqav<-EZLJje3&@Eq(BZ
zb0*&UbHY-j<^x1nXVI*qza%jLm?yNz$mnXF^R!(<XKQFUFL3iAnC+FM!WN^0vDIR}
z|J|Vg@4tKRgEj^yuT7E`Zp}03t|p}Gy0#a-EU|-*q;nnEUX}xA;SAs&eqZO8c@B+0
zniOvXS;+IAt6bWUWd&_Gb~o&Z*qHIryT?X6?r937`BKT4^v<d0z1k?EMqdbe5L-Ny
zRaWby)gg^#%h-SMd@$Cn1Afjr)ecf&V^_lk&SK(uI7mljN>U$J?81j{scD&QFsZOy
z_f~v=i|>ed!mSB`#!bEN<=^};&^vMwJMk$ZWrvd61tJG+ZVq)xSon%{x*l1IbN{A8
z+Z?t+GE!pJ!0)4%8?>;FX3zUsIMk){ZBQMYn>^3&b<117Tri8^>87^id49nF|1<qL
zHd^d#mZhj?FPrP#w)N-41xz_&w;}UJX|y#A(H!jq5M-v85M6J1$i)WE>zJ{v-8VDs
z(M3^x4sKZF#BN}7cT(-ETa*kj*)T~1c<FAW_%Q9^<w(&h1*#Fh{jl{LVGkz_9FrHB
zi}L%puz>pQ++hpac}pFY=sj5GGFjdvo{Jvy7IB<<zhzl!9C7(!r@TT{p0`b5R}>Xa
zw5XCza?*zpW<SPGOf$pNCF^As2xkt+3TAKb*c#uiDsZ4f!j-L&wYi@gU%+=Gc}sVz
zo|GU*;L26Hx<Q5RT*zWO8a-O<K(-s=MsKOys@Ge@LX`y56#mjuOeESY!u4f!x!cmi
zkqXDOu-ZV~e$T(IJ$aKy^d6BlXvPN}k#;#DV|-sTX-!VAT3LkfLJr%!8$Z;~8t1b2
zdMln4)OT4>y!Uc;aKMh2`q~Wfw=>AhyHTvNZ+0%t_4XA~ZQoCLcVf7U_*-)a{s1qo
znmlOKp3M3(o6N(1ZKl82rUz^~Q0(PKH!O~kj63wbU(i4O(%jwZSR_ms+s~aXG#Gl(
z%;=<b_R`0`p7%pUOY~xyx=e-dU`HCv4I^P7WBsaT^Xm%__2x?)q(oWE+ZjWe<5<ff
zx|Ja3a@%=rJ@Vot0Sv?K@vZQc`C<bp->Rjd(#9stlT1oRQgP-yl%EN9nS+NHRvI0B
zMz0@SC?b5~<#*}p<(rRo8rt<aE8<`a5w+8GuD8bU2}1My*Wx{#c3*jz1l{UKWnQ!&
z%HQ!tQ$)?5O}ajB4BlBzvaVAu0NW^qs4|H0+pLv|r%50pYIGZ}`kRbZ6hzpM^cUXo
zT8L5@{$01wVUkc>?u&6O@zwL-OEq#2D?Dh=!0bb>du362u~pb5kSJV*`8end6v48T
zY1moBEfE^b$Q&c+$O>-3-UQCjGG14OF+=hpyNq|6;6`_P*MgZ_g?8FS4d#G%tJ-0|
zoQip3gF?}kMdFuwyV%BD%N$Hf>cruBWQiOlmR+EcYUj5OM&+MFPHX=Tg*z5*Z`oj4
z@k^sEc&_>3Hwh;T^2G&m?Px}-AKd}%chZTp#m(h$;%D6rsQEkwR8WNwQ@JefJzw8?
z-0$g9y44V;c3k$gTZ}X$eLoyIFjJHhVsx2@58vI0cj)I97@0#6)9jlwiYhv*Ha>P1
zEvDN81Tad#IDhs*hZ%dxfi#WS4ajZAum`%*rB&tSH*~9=GF0cWG8~zFv!g>I)Ko)(
zS0@PzVWIXaNRK$doty+?Cl7O(vIQr;RLqx7kwZcs@YizU66H8aeSEP4CueD&5mJI`
zG)!?5MtF1<pqPjG;gqwfD6y=xcD-~wC(T$q^KhfM!-lr0g4@h88wMGHmD`}CX}1$-
zS<3=1RYafMHM-7EYBLq5H+-_05f@)vAJr*-nZZ9b0<~kiyVa*R>S~C<XK3AIZX>y%
zEdQ!pmC<kTn1EgakLyPfA%Yp}hpns$gY@mm!}L7K>_(I|jy(#D2>GF`bU3vNIG=#k
z19jh7b9u(EI+UW#fVL1kvf;pORgy}4P7B=7F(oWC_4N}IFu1B#)>`sQp~BKKPeSbA
za~k8<!P)~YETD0V>aunX;ts*j&Mkw%itzyJCUQ7rU0^Y4j{j&%oGA92rg-es@BQKP
zETad0QE;saAfsJa=wjiGOsB)13af!l0VE7EzE~v<TiMjpX`LmMJ7pY;U_{%io$H~B
zxpll+LF08r1oK9{&5xqB8}tcX95;7w*;#e&@8Lu?^K#CwM$8xZuGg)J?3O5`QA+B3
z(lN2Wzh>p=pP3{ZSa~94=$9Di#uGItvEk0m8(4Nf5gU65L*H=wL$mjap0%=;=h*kg
zY8=;Pt5%ib$EvTEyNuly^-WBA{Cnxkx%i3#HS#=^ze$MV*>=*vSVU}%sTcP*8Xc2L
zUz!cOdZ!-V7M^t<oPQBzi5DWwnG%~A5ANgj?g=LX9@r9lOz_lFk%$7qSM$8hNrQx9
z<gBQaT`p}+J}4S{%Hg*KT_qRpu#!tlcG@iBS3DHZ)M__(cI9fzYewLb<RSX<5V*s_
zs(1d~l-lMHJ7bIUhsJZmGwq||c~<-`spbd99myhj>$eZE1mz&{W}!=-Kqop;2qEz!
zVxb$8QW=bBGSYL2pivN$@s7+|Fn}pa=h(!=uFwk8!0%keRM-U2`lln)trdzoXOaML
zE^>(;0-_nlqd(Dl;H55;=BkfO1!pCSovST?+oSjh)01q~V+NqY#@qENlnPpy`XF)M
z_J$hsbrdb?oQzP2;=yfy)va)E%U)&rVfKXjKcxzA5W1!ec*BFWF{o+eaJdqZ2Hdu*
z$pY##E2WC6c0;`GFP{5!vG$s)JYQ^ZFTBo$3vF+@Q{*&5yfZ)AqN|d=xVrsL)EH80
z-HLN*N*8W3uIpYhaf1XA@z>*<N#!I`4@kN;J?88$Uv~?aavm)y8buV_4Y+C)Puvb5
zjqisp(wRVnbV6lz+Zc9dL`O@ZhV?76HEEQ!`dXrsq2?h_M#u+@iS`s{zU0GOVUS+9
z<8-=uB7$M%>Do5N$iJ=2QI~pP^}01rvYte9jch`P;~Bk0A<njQlspENPQMGE#ny&V
zS{o)`XefGIy<5A&4UsZ+91xike=FB`gNRJ_w7X2_>n_TEQ$T1b&ZLpgE}<}ZYJx2o
z4j$Db(N_C1<wJu_sx7Wf*zFe}1gzlkyHD`3vHjI9zJ|%F0SH-Wf-aYD<h!D28>Vac
zV9PaC!4O4A`Q!0!Qf2woQK-ZdMQ=6VvX6Ul$6EYNnLm)RVO;^MIlsyi<d^dWp!Tl-
zwe#zDM4jG;8~;Y0XA(%hUV6rigsVMeNXt57`ufJyiYZpAnQHj${iv3kG|nCbLu9{4
zp#d%xXR1Gb`dx{rp%YZZ2_`J`Uh*s|<MeaIXJ!6(H*1IIAvr_%2)d;*hY@=$@TkPS
z3nZ#ajgtg5?pbHJ?B-P7%lyzrdx+cXggI1fcS_l9dMw^I{<Va~r0l&TUry3x>Bn?4
zKKJLwMiO|+UKXQl>pP^8x35Q?M~AQ&NsP?T^%x~K?@jZGtWU+*f5MuSs_PYdbdHu;
zhVjq}x28)hsBB*1RqMQ6PmLnlPNeQjLWYNvgd7?y6NZeIhMROl1E@?V;*@z|I!?6?
zP!WfF0WS5a;v()}eqZ%uMRB6kZ;c7Os`dQT>Cg@(AguA2(nfhh?>x+qM2#m^=pD)`
z2z)oJYWR7AvFr3<;AQDxqki6MUN!LQA)^OTf7+$gN;SJOL)1P|%5&nJNUpxu$x|*j
zF`F2qS6Rx;?Y(Ygj3j08rhIplKbuWNc>~<|wofIdCr>L|UzvANfd=9G2IjZg@~Lve
z)Dd&E9qyFPHX+#dWF%!L`)CRcZ+VhzP?ea=X82TseeF3y=v69q(2CEgtSCK0N6CRg
zH#8}Vh{TG!aAF{_KS_W}y!|Q<jV?GJ2oJzn62H7EV`5K#J#|(3%6q_jSJL%VUVM4$
zNp4(RocMUt(ywv0HpRDQNLRWi%-}4>sb3fAcVoOao>-noXODw7m0t)<n)knE>c~Su
zMnu>Rx#`#9cU$bQrV_+(<S&~bhXp(g;&t)rR|yTI=?MEe&s~f4n+Ag3v8t5_BxPzP
zU#IVUY8l2)CZH1o#T!Bh6@(hx^?lae&5@#w1&1jry~-L)b>>(Y%h8eVa%(ajYQNnO
z0(0B<hAg$hbHvzX?Dv*sp{whJ!5HgQM><@mdUbtiiFw+CI<{v>Q3uz%6er}gFWgAI
zZQcLnEzEzQC~Ff38FL%jTH$p}`$7}3dGhS&g?BW3mA}Jy_05nXA0Txk;|$RHi%NBB
zkCn{66vC_47;h6F7#w~&i{GD!uTZYyC5!S@cn_j14h{=uB@yJsTems8C{!;ykO?6e
z2XgjNnesz}3&mwYwXXR~!<C<EBnK|p`rY4qVy2z*3if350S$2pogk@U|ET8$8oh0K
z9pSh3{4_7m4(nNTy$^y^s5$L{u(|vM^u~1xtPjo<mui%5?UUTHnzEcKM&8o-)O$NR
zEY10xTe@f6Ipd`GFFzeYz-bMzcYv9EZWa`xSdrulNIhkaFPBa4##?^NCn1WZbtwj|
zuk=N<awHU_Q-*h0tLof@k|3!;msV!Qf%t52lA3+Svw8pbrU=8N)zwBC!~*%lbg9F$
zYG2Hf#2TI|9BkOBJu=-E5;e~;lkb+zNlo>fk<Ce;IA{`fJO>Z8oKC;J_GDyzJgDfp
z>=&;cDAt{@M39;am|Vgj39e-&o+2Gk2#-)ACzt|!$*TUwnZm?dE$Q0_Uc5dH17Eb%
zJp7q2C7?Fq3sY~mz<l;fY5*aQ=Y#earAc}2tq>0~BP;oxi)TO31pI2n-hN%MAw+*+
z%paRBPPk1YU)Ssg{KIgh^l=oDp(}DN<SZj0crU<de{l#Pycl$=z{G_RG~3jcz6^ay
z&3;B;!Sc75CSGZ>6@as0$c`|@gH-Ya<CzKf=6oHZF5D51!90Z1503!*oS3+@)lyTs
zjdDCpRijUP)9i+&_ffceYke*X$N%Ci*-Yx77Sk=SU)_nBkrE}=#K}mcCADv|<@+!A
z_LM@;LqE|4n^`4x1pgY3Cok5gYoR#KzjJ#H^9!k!=C-x<nyT5F%A`Dg{~VVY<v{J>
zXXbMy!h4QCADAtIDL&{8FxYmuAuxU265uaws-e@~f&b`P$zJqagXQ|^G|7?o??5A0
z&G*v61=v2%O7hiwT72(kB|2&>hAhc&*v1xcS+3hGjj-2|2lAMV7;0M-n1i!UV!RVE
zy)xp4gR1)<7Wr!Iw`_6-fM~wJD4yk)_4y>1rhA-W?!nd^po?Ow!K<uo>ClciVZhP+
zh#Y~H94Iho@W%3M<=If;rZ#tnor@0?uH)mA*E*++wo(l0ioD7iR-GAZcS4bb?h<o!
zf`#2^?p`|8Cc~FmMfMBT(1ElLn_7<<C?0jYr@8A4m_=v=;aDi;i{EUG6t-D>wWiW=
z$*PZk?bN6J3hdr+2vur5qMGzB1?bA%F0B7HI^eT#uAG}_OrSn{Fhelw$!m;W{NYrc
zUOUxp4g}(oqwWRhRAuei9#6;z!?_}Mm4hmKl(pu=T(TEuL~N!|7t3Bhr8VrbT+%dZ
z77`D9ba#}Tz4%~eKrM0AWnu#Vnc03eq1HY{`e1OWc73&R`UC?Z4ZrKk(`gzala4f-
zXlQVC_lqZg$D({oa4iJd>HYZeT^9Efwt%+#bzFyIDR5PUzDf<RL|lhEL2@6D9CbT;
z>wNbG>{_L{!(5^O{`N%BIxQ7Z&^IRQwp&|QKj6C|%705FXC-IwLZOv|JeLE1IO9jh
z_(mh(IBoJ2hmuFlhdK={-5IM+s#y;sUHl!7>A-2m1YC;-XPtkb_89*$XOzSqcS<tg
zuBM@UMo(UhmU=>S;^A&E%mEOCi-&I6z8-z;YNk9u7OTK-4R?>$R}%<o>NH5qsk@_j
zjTR4rgP*7)iE6(dF6JAU)%9U&7K+f09|uqeOV>JQONXuB{=&b~&rl%?z9!WwzC{kH
zW5v39u@Rb$C4+^6&#C)wUKcH6D_Xqvr80`r3dUnF13oQd_i`7Jq_~Ddeq;h;dP*`c
zhTd)_H7t0q=8pT|1*xKxd1vbKTsMda^Qk+<eoM7_dgcX4HHdf=O<=ItIV=_<$t0$I
zb>akiu`pev{bi)(AQ_cmWzxp#Tn>JSv1a)>(y2(9BG88E$_uhrM>gA?zEgq!n%9se
zZ*|)*$N~q01;`)`S4{%V%S4Cz-P*(1OeHgwDgt_z(u%fZF;%9cB7l&I%Yf{1Mxa*D
z!xOraX@w}z!c|a4|I`$wm(I-<S@2bUllcJYZg!jJwe07_8himeqDqdU=h78h37KB?
zsTA^!xkrFoM~>8oK|iDjH5)Z^bDUHBS)X+<$9z1FO(TL8H!BF*;|6$gN?so{y!Sk|
z)PN^f$s8wRQE*N-F3;xfMJ15tsq5}eM!prhkNj9R-hT8`ZKZtNd*)W-v!t=lPrB^R
zRM<K|%BAza%CkjE2R*-eLHX?m^(k?Su{(u5wLNe874)$)?OZR5om8%)CwREa=VMq;
zJv~ht9q?j#R7Kt}+ilA{51i#Jj@(B=hGrcxhJ%$I?Ytr9w5qJDtm*rPn+`YF*wsFy
zNlPvHsr&VJPmDWNeXN1v9>H&4J8@T=CCSx*kR|5&PA=zFh@G_zF%d(>O`0fX-QdhM
z1n+!5I@XM7#%3h3S2tr(YXm%`AuP8f<8qmPd<5MB=RFy_3%|Y+`%Tew<~;f%Mk$Gm
zIX1gY+l-7bXQeD`cMbW09?OfDIOy2r^<KNkg{j59$A}N|YzHc8&ego)b@k7XaDECc
zR+o<>4IT<sbQIBOzN9vK-kK62wm-`}A_ggv+N&t8Vm&2eRMynaAaRr0XeOTDP|z%(
zpl2_<T+XQ)KW5o68JQ3!!x0Z*>A){_bF3@{rWrBa)+K=^p_JD5iG)#`NdMhin+MA+
zvt1sC0@LUbVU}Mxxcx1E;wx7`3*6^Rv@bf~t?E6x-YQifjkt1HS<@@&{^aCK{grGH
zGFwH8s1rno5i2(auZ9D^@t0H`?I0XU0k649nB;JUYU?aq#4)uC$kHwLS~}$-h8}bV
zZ-`BhEVwj`(=L)M0PTh9936T;ds_f)huF(PIqR+k%5=OVys*6<DAggxcMWoK1m?1G
zt*PQe>G;>Cq3aS73t?X4PxVE_kU3a)>ug_3SAp~H6Wnq2jLICK?bbK4P&k1cL@IPA
zaY$%&6>aoz`p9ThS+fzVz4lz#Nw{eRM$cW!JN0WVAGz`{lLTT7*bTZ+C%Le1G9Cav
z4i+^UWZ%HY?WBrgKbDpX8f*<0OmE6eI45*?I1GM`?;b(Ahowl>w<WQRpfHWfHY?8>
z;2@tau}A(n{9|P$Pe7WWJpuGEf)!_0<Tmjjp#$bPqXLnBey@8M9KO7EfNqW`gG%ag
zvnI~$R`JUbg(p&&##SWj&>soulSG!CWdzP}hY6K5AHLOCL%755vvv`J)zC8@2Qw6z
zGv*8T<Rp-~OZD&(6jPTkCPXq4Q0RaZ<cN_&<h>*AhWN|WDJ4H5u&g$=w#1|j_I)|U
zvRX+=Yu;-1M<N8Uy{i=x(*};IHBL!xs~bF<MIWoa8u)EZ#Vl@T95h&6rndzGiSx0c
z$;`d4SwM}ycYBCUIoo>UtlVkQ7b6z>&^s`Do0?a*1>bp!xb&POb%38e-MZACtY16R
zUTCsLeHu2?pVM+jn2t&e(A_q!wwlP>-HuLUqw>bk!lki~OdLg)aSpq!aYes{yZth7
zcCGG=kU(qOsLHik6@5=fHuThTb9aa$UQBJfBh9{!2QH>@!t`m4y@=n|TZ4lL^VFDj
zA<B2{bkpxHK7W=mP7x?|4W<MqI^X@mPNh8m5~O*vNZVVtkvp>-ryZ<#E^0ow9wT{!
z<@eH+N&A-EC}N92W{ku7O}I&K-GE71$$*i8v=%2B_h_`OSJr?EC|ZWyu>aMNaj^2Z
zyI){m)Alq}$pOGsX^>>888FDiNX8tz$GXA8a_p@@+cl97h9jrHdY(}p#|-6X8&F63
zCK@BA%pgT6?&a2z1{1FcZ9<868V)oaBiZHQQ<c@`TNuhRbm<=3!TwFVH-<O3VJo5-
zix&nJt;%hM1@eYu>fAh6<NumtXtW)MkHYnZL}SjH@XL^z9vH`2QR(#TJ`$cY7=xQ5
z=~BZxvqZ>`6w>xrEqo<&RF{U5Qg!`Ed5O}}$VkJ9Ynyak?;}$3gT2F^t`CbIw2vK*
z^Vt(4{cXzppP1gU?}+3p-RwA22lApp0nxk8Vbmfh&;`@VRbhOi6r)X7ou$V_WVkd;
z;j-wwNmfvH(cNZuUqR8`_YQO^5^rjuSRibLosE>?E#6cW+uOtgKv2!WPR6;WP4cNg
zQzJGjmfOyw0wUw_DQN4Lv9V$TA^P`7sEtYPu?ub`2`wtrb90>v1++(u(q<)P8i!*A
z>2M3vK-FFbPt{Lag9LViE6rOZil!fYaK}&i2~M(UU7s?0`;=lc-32{d^JJXQ&@-_;
zo&_X8nP=wF9xDw;ux^ua#EiAn>fzMzDHn?p_Y>NY<c<MjOX&EabRL6IA<u&yaW@L|
zz=q_WGV$w5^9T^;V=i#k{a*SkSjBFLJ><zJd$EZ(%GMAbQ~CQBCU4k|tFXkYvG@jo
zGz}{=2?}DKW2x*6kO<H<ICF93yFFTtbR#VHPT`N_cko>;Ez~rsJ$Zx<yZ5SH>`-Q@
zX3Zb(M_p%i(0p2CqnZ)W+hJB8v~02{TwrNf++?}(#Bd^UY3Xe|4@PLpKw9zmLd(>7
zR_z-9ji|2u8S6Dk2+Unh4hDM)L*;&^cAuN*Z?L#`Lnx5!^}XUb8%y9;3&_TDh8sar
zmXNDfyCWs+EP^{dg%1%IJ4j@&7WqVM>GxF>)VTI)sGYVx&r0j7vWf2);^|%+dPUDc
z|NBOxb6pvGdxx;yhql(#$x$BqguC`imSg9t{WtO9APSH&CwWUokSvzZsc~B@;qv0p
z(y0qp8Cw@OG{qM(pHp2rpo(E1!O%-&VJJg<!>KPb;)%;ji{e)nL$0tFX#>}DWO*=d
z!`ZRPmL7HZuMw|q(g-IDN5DTbXv|IAph3%n?^P>U=p!r2tcEkOTU9BiufW+UgmOk1
zv>=!{6x~YFx^&cLXeirIbxP#GG$mW5Z&cvnTqN;J3;R%q`@&IN?V*lS<9#J=-5ySh
zCtUWQ)`sTz%Rmm+k%W8P<FkZmqKky{?^dJGNM+f)fa`E}P28$fl;Y;?gj!2V{PO<b
z+3=c_F(g5HfJAoLduNm|^t+X63{f*ba%S>5x%{6w`8*D+pmN8!!NFJd+VW^S?}u|0
zHHGVZHRsI-HcD#rJm5jd>kd+M!mg<4Kko$hb2CRzo!*YWOmVENiQ2ULnH^~kvT`%r
zu@2mvrL50_Z{eD2Zy{mup$*@*B4i=INBxq=8-vSGz>sr=C>9_++>h`7$Yt!RJSqlQ
zK+|%vK=apBp_A5QTIvXh6|t!YyX$CXC7&;)U)_T_#LJPe2QFgljxtY%*Fy~n#CLOF
z#-wS5nxyP{fT|gas8Oj*A(LcLw|6IZdwm351CTTIhr6{6_E`axC^Mo~rTx`Ig&QMC
zhm@3TK_E{x${ke+nGkQQ8wM)*kOLpfI!o`gqcftE3|A&(r9l+q<2c}529j2bAhY@y
zK|;ywv7Pjrh6a<tCs2$f7iimUztkfYx!kAcun^7a2zziBY}-A!ZxK(2`{1`}1o4M=
zs&DPZ^R!~QJayj_!n{gePhSc-8Q+w${q>|{QlEyNkq&A=Bc>^&CMHp8!{g8owz>pQ
zdnB+3Bw-*PbrxYWYLym@yx^=2H>(60A-1+u$u~;o&>bYM66a`ws@~gAj(6HgY!}V*
z8DmK3ATJ;DpCV7_hXZl?$Oy;Y%tjXr=tnh9F0XAXd{HjTO9oka%?Iu4;14(83{m8R
zIWFz}-ZySw_53+FtMxcmxyGg=fB4bOIw4U5OloNn-uNuIVb!gT!Id`lf(Z!{6}eP9
zAJ0O5&N6{NV7zr8m@yzvkM$e(_)~j>Pb^rqyAs;l&Rg9PBmcD|aEOZPUG$+$9c3B+
zUbp$^3v5CJ{X)a*p-3q!2xQUOc}A%*U1$`tIn$08=YAFspasKSC&)Vd_#U~?gV1RX
zBVsG3&E&E|ht#W2qU%|$R&G3WUwnjSS92cV^;y!{lsXp!%?NcnbIWn+)KmS-GK+O6
z*HsH-v0F~Vt`&t|J_v*;?<;*df;>xZH4u1__f=)QId6D-YyBs$O?o4XNZ&O&59^dn
zKtIk?Cjn`_b!wx2M*^(SQT{S?h%9i{eUy?s(vkv!16=UMBA7$k&B<DFTxHG2swc2!
z_1*a0e&Z?hx-X@vQ}-afxj%EdoP>w6P`c-H$(c<x@9lSCsg>p4!?)NuOM4mS_#`CT
zrPc<`Q*So3Rkzf5SKYex`pI=Aq3V;JEQQNb)>3<~M<VkytJ;=TCpwP8qNM}#NEhWP
zM0Mq(J1@wh|ISc^OieDpQ1}R{z_Ex0RP&{(V(p|}kkdAhkx=@^&-d>ItH3N>_rY18
zf={TX3~J$0m#ohI3SF;0oMm>Dzcg_I+PEAu{VC9A8=T@dU<9*oyDF;n!Y&it92b9O
z1Z9Lwef%`$Af33B`e?Onv$HH>4Ts3CdQgf6An@c!xP|aF16G%4&1BVgN>fS#*2at=
zV_q=x>3cYP|LJJuOT5;4Og>*9H%G}JAbgNoDB{wyg1gI)VCO(*xqbG9;fq%{XOeCQ
zZ6+NqmN^a~=?iqlb80BnL7j?#sg(nB(uB00u4Dx?k>Am%deC@(!#}PWA}1Dt)AL`m
zgR_hPN#7?p9O!{Xsr{IcE#6nc<0GOz5W&xkBKN0c-X%fo7rwG}=)qr|dgV`?%i(n-
zF`wA=m|L_$kwX^!r>zdOgC%Hdi)r}DNhRIO`?PYB<Kl;lDi%^JCns*Y@};8}83I_w
zTn^ki5zgS#9DKduRjc<zC4)WF{07q0_+7E@CWf-|vdx>TAnc=UW^0=*#FU2gfl3X;
zZ|)Q497Cj+??xM#30hGb`SOP-{xH1xVacmJ%HVwLUzqd=%o5Jpm@HbB(;?9lLQ8T&
zY<Otlr9N$&+Hm=!XAZ`dUx-VC<K36btep3Dw#L1|znuCNd@}yj2tTCAz|4L>Rb1`1
z83Kt=mzuNkve&O33_0P~nH*{2+c*ueiv5}h8E8*mI#oC!1-0*&z07LGw2c#Rvzd8u
zxyl#f+*F(_(br$STVznhEzpzW&PC@kmyI79_3xZ%cLa{WPPYejk((GGpBGWRC<sB(
zP*%Ub^T2e~p(dt*ijT}irlF+8*HPKGBR2{!oe|CuM;5iGX{(;@6_~=RrTcKkYLg7d
z?FKjNW`P@C7jh*!VkW?}qUHr=FbeF`O+GG;7Ref`we+_x5h<TUpdO%3m3d4-w|hX8
z)7}c&A2I>5dCq#$i+$pkF4w~%BQ@~&F8c%vny>(_3|+IjNE=Pk-23e0A|B>Ifo9&>
zGI>}M3mOl`7gPE272Poer7Lk|UF=o_sdgkSSqVm+B|&Rhr|B?QWmo}DEJtU-pk%1N
zA@@lVpF`^oN%$V^#(l-;V3zNtRPU;eDtLhM4b^YHj4fxTGMM7xJ+K+I{L9x3i?0*>
z-9sq(6RFDlaca2PX6Jlnn9us&TF1Fgm6%*gzem6|ia4*;6$gW=UgFZ|-1U0Nfe$Wa
zPZQk*i8~ASo$>83kEZY!yHn+kmV8EAqy{_v25RMZb0?}WDI(&y{RRU^mvPrJ0gx$M
zwOB?{+Ka6QcVvGt+~&m@wg77OE9JIxry})bgCqoO4s$Z9cHN|FnePiQw}{VX5?)kx
zXO|TM#SbC+lTK9v!0}e*D(yWdH&W)38F9Fvn%C(y?zK4@Y3%c<JvXG|xv3L_Rr!r%
z`$PbA1Tr`y7iPbb;#5Vb^YuxM5h2F|*G<;QfnxYB^E+eS_;zSu;Bw=p=k`R{=&H-2
zlrX-Dj?+XTd16e?$bO<7<Is+rR&GHMfKzw3zaU4oqD#+suHn7d9rhH0B#<X$e+tqD
zIj-_#qI<WKTqlu-eNqWqHHV2W%F^$;;ouIFR=<>7c&8jgWfM4km0XUUSlyTH&Ub3Z
zu56#prqix#bpJ39IJhIIY)r@PighT4=3|t=KS}{LjCy08fQ#OJwxbBJk6$>hixm_S
z$ObZ1Q*>3Er*<4FI=VGF*-USDS@-J7czo`{Ak*AKYpQ|Cug!N3zPdDvn>O&6_UC0%
zGKe)1Hfg9><5}v-vPOj>rH73sizM+6*l#iYvZc>DzUI7zWW~PXsC{Kuw~X-hNfzO_
ztfw)sx|!#BW_%qg&=|^AXb{&d+bC$S)Xdd!XR4KW-A^7%zviO;0Kf2%oDjvo`U+ot
zBOC&AoW_T&9A@FH?1rkX!&g)$q^I4f2#uoP+==Q2D7{;G7%9s4gIM(R=Els#c%pf$
zb#!Cfpm-v&N_UTE`?^yWyrE1hTZzaS>ZJz5vMhN~m1TW)k|waGX{iHY;g5={`J*B*
zpjbupxV9@$DXvRqessw4JcZj^dvlE_o^#+VahU^4xtT?+^dVAH(NV`nj5kY&qQ$*B
zvOq2qX21R?OSZ*I;MTCfn;<W@ccf7KEr*G*+Gt@1P5kZR2Pm$NQB6BlE)yI*UTkLH
z*DQk;K&_~x^fh)i`tUWDL~mKGT0L})azMv0hWEPkg`reRuEZ@j&6fhIsk>`+wK!W~
z`;P-!WMnYz*Vi^9lXp=ZV`u{r?7&h?920|Pc1^4<)6>R4akdK@=qvFbItm68&@w`E
zo>Bs1>OXDs&9_>&&9bn9Pw>&sOHYujO5nQ7hV-auJr)q_w`db^V112o9kBQS!{200
zjjjeOmicXwav^qfx%QR$xN6>8n=THI5r?QSOHR${_m#j8yDADuzeghaQGi%YtI1MF
z0TmjH_mjXZKgz%Q<W#rgYXDamaIGf_oGPM$5);71rfw>#X(t-5=s|CSKvLKrM>c^X
zDw;$XAhEDYVi#1@#>_Y6R!PDuiB|b?8}oY7$D@%dU2vdk4L>^eAxX-=b-=!R2n*-1
z&Txw9Jh*emzEvDI5+Kx30bJl$j8TEQUsLleMuZ-FX_YjaQ)3oSCOR$GQ=A-^X{G2`
zK)^ku{zl4Q7P}j7BDP`TFrklyD_I}@&bCrU=0V&R!G{xu(loHHKwX!&oY)xm8<)<Y
zDFZdoH?1<2XV-ev_92gVt<$;FX1I4p#7>uo+V>Kzzy*c3;n1}U30(%T@(?%{KcSPQ
z0E#{;N38vel2$v353w7P$i9hoLd<-p08lm6?z88zF!Ju@hQ!`7xal|HBHl2o-+B#W
zCygWMboRId;;;qXZuvuo@-jd&uBRHI3iP+-;^DoN`S6q?IJ(86bYAr5^LBXBfVUc`
zo^d-qaUcHv{w3+svtr+NN2x{r1)xzgZ#|={BrsEZY%}MzO{J<$CjN<~em=i0y!7}f
zgSCTQ(<@<D|AA~FK4=}$?RYNAZ+Qz#OG}u=;sfaH2o`qWFdS<z0t;$8Q*MX*;Ixpr
zNCX-KTLh#*Uv}m?E)2YnkXr659#-J1wYOwt{jcUHhr;YjbcC!1qXo<_r2)RQeZMl_
zP}s?{LqfieaBC+*N|_7B&3AWbtC<1*GE-rMeX@yFrr?@GV{abJuKo-c7th5^ovh#f
z#s`<1ubssGW1J9zM+QM@5CDu`1OPr@<4%`~qieQjoauyZ%XuD_58lff?DzgV9X4pU
z;};l@jmfhzhg}coZW_dpjb7RZ9M^75Jc4Jwmo?gN`ws)DfPw7C1Ai@ZU(kg@TdzRZ
zB1B_ivH62^#kHo)3gP9aNvR*WxVUUR&`^FI%mUoI^f^&P{it*9RhTj;sy$}wnb6Lu
zdaO^6e6{$f`~|)bHQP;eBDPbCyAP6T`a$GMK-w@L`;!~(^cikgd+tc-F1}WWEQ%$z
zm<#5?RhkuEU5z59KDLr^{`%Y13mWx*7pQqk;BMFd_#!~+?S~KCds^HG3s*tcEr^rF
z*E~YCx%rqk+H!W;(=$U~$a?r-f4BZCi^ju;$s5Sve5SvzWXWP7GR_HMdYq4*|JCAE
zg<b#Pj{Cxg@+_9ysW%c-q)qocq5l2cbW*n3-P?O=@+OteZ;zTqH@%{b5hz;|(z3#q
zSx2^~h<4Tl2|_oR|Nf2k&v5R$-<JF)E2{zMSMOjxcFmkCo)1DR!!n|x7MOO+<(<P=
z^-w&I(Y)Xj&j`JzG<?SP*?>&DOg3?APp)R<3GR;7Kplv?gpu5+Oncx3S?g@jFCj;l
zDZ2Y?<Vrt^j2+}rmgL9j0bn!hn^=GBn9rmt)Nb7X=GxeLFNvPYV+Yy8B}mspG8wVJ
zu9i3}BF~)3V*qQjtX`JzV-z>b0;KJ;kH_do(-&NiD-}Gkv+jGT!fv|RZE9>8Le^@H
zZ1&8tU6;vQK$@gSd10!ypBTIU=T@JFOIs7|6O_h0_aj!@P^Guac2%S&+NZ*4gfm*;
z_Cpi+BvpBn>c<+{Cs<S3jEfi&tcgGmbyh*~O)f0As_n|#6XbITnPK*iCgqiwaYxq+
zx>qy9Yie@~{<NMI6x;D~-!ffix5DwFT;}&~*eP{n$Y963c9%kHBb{X?!`G6mW`)FG
zcg6D=%=8ydrFX4ur{x8k%AXaK>?HP3OtxVot<_Q_`s8(PpPckkao3hF_9Oc4<Vg|R
zod%x*rNL3Fz{lAN&e%Q4l3I<^a=>2t)56&@uJVMvzAqactbLh8$orO1VA8GfN|j67
zR!=^Qlqs|ys?zR%(RgTRU&iR$o4(gkJ91KiCT>JP;i$gw1DUSIdujLnB$54&Pr4Lk
zR%PG)1QLy&KPh>GH#6ukvW%QVP+XfeQ&uEN>XzlY?B%-@LebJAsKPqf@l-c-jo;(3
z2(1%;_!<wxe9$14<KyBaP;uCnG%3hP8<>$4t|IK!oi(U(i8qta#L+2&A?=B}AG<8C
zakZGGd{6|P$Y5oOIpt|twn^0O$PK}`t{+LsBO!a|9p$7SaIE#-zZKD@xpiB*erC($
zYkA#eI@uH<;x}5E1#L(YtopH&qf`01#FPOw)3LE(_$s(_ma(!;A#mK9b8;(|L#x}$
zb(z+;&A^Ej6N7DeJ!J9ZMw!q)f3^DK>o~90*&m_Xk=fDst9*%ug&U_wH4P3|*wq`b
z+>tkk0xDGXqjlu5F!uu0RDPy8>9^bA9o|X*F-y&#w0(0sv$Fy&Uu&7E5aA)CMcZtR
z+Du=<l!;cWvI2Fy=jkM^?7OA5(@rp_grgi5L;y26qBI^Xgh#Id;#3sQ`@<R@(WWo_
zXM(TIbhzK+;^dX-8J-PoLy5XuL1=v&&%?d+J=OiJ&yTay3huxhELJ(x&Z(W34R<j~
zZ`M|@eDcGKIofxw@t<_NpWcNNKTXpYmqF{Wel=x#tSvTa|B*an0>C_lzI}@p_7d7O
zI{<8KUVGxcjheM)*w1X6_`-xOB{?>^8&A8VHB)3F!_&Q5-wNfl#T(?esmU84%(5dG
zMaL{11>cDJ<^1wsr-faYI;IOk7;^yL7$~PE6uJ=3O|n<wI5SCqS|fM^^vA@%Trm*D
zOew{TvYE%QskODTg)<WTcnzv<DQ&pZ`cB`2T<RfBIzJnMZH{ElbTe`d90e>V4-hX?
z^B6u3qv2^C7R#^+zw+Y&$G5NK)BK_0?EFj4n?)Fy9j++V0gLh-UjotkKG$-Q)uEyC
z;y4Y~FMZfnapn4U^3SptEc*iB%DtlqlA`3bzFwiBB_+GclcbdJr3fs?FNX4ZO@H~I
z#xozZd&-eQvzWQi`u1_A+;WLVk6PF}?Wz6x(SA;lD=f+N=Fe<@X9~i)VveJokO!Y<
z3-k(MEir7!Hq|C#6XD7)=y;wUHp`#In27>7|KP{W08uA&0k<C<F*%ig{62wCPoC!I
z-$(t1nyxyIfq@-78~9*s?xgND0&og;%&8Kemw#2a;8VaM>2P%7L<cuot_$1Q&r1>p
zV_RaDmN>L1nh1pIeOTdxw|^Dhi5q_odU>H5KpllbhHoY0wJeWq`3?ha4DcfQuhL0&
z4sZZQj!XdyIVr6tX1GFR9|JL(VKawLLe4)0%9nrM1QX~ln;s}EqwUH0gGd0tvgW^T
zy4b*p(C*nemPRa6^@n)ZZTU8>)55$rZ2!kKMMYm+7#L~W9CHg@feKl%gk!fQQ!;<#
zX1|Gu2CxI<Hy7rTt&@_HQZy9}%}8=zfkS^=60ciKNzFDkfzQC|?4|3$HM*RoKMPi`
z2{1V0+u#nA@2>qP1;(M&p|YhHm!&@<sG1J9M|R7svdf1EwN8NXjj22{nY_I=Gla(=
z>lOa8j9hkrG&0}(q15hfO@j*8Z1kI(^%i5fE1OTKr4rgYvARVM#<eYeQoI1N4ay%b
zoKj_5$9kQY8*aGzvh>Zvq@eZ;$pPKshuJEBu}>F&`Qa=oiG5xKTEtaEO7DG<PL+|d
zo~!~KpPMm%(d?6VQPVqe$BJ_f_&LC_NE&WuJAEq$QtHaPcasc{Y~BwRUt<8ohw)hE
za!)1s)(2jMJ?^?|P|h!DQ0rGiMZ@*ixn<>mx$hj$t@L_G)M5Csay)klt1@*?2`k|A
zoZ;f-z2x-M^uWRMj0w;(_M_tr(6Yr8Q74!sTDl}#+1!4J9cBZlnCoAD|EF+9Q3&n=
zaEtbhq0>sh7_0yIp%OrR$Twx=u>dL(V8i)3Tn^K%RCpXPDz4>cGkP}*45*^g@w#c5
z%AByMcHlQSKWdtUfSjMn5kMCA+6jR_j&s4fv2k&T3!UnJSs#cF5FdkM?fJ{!0fPSF
z&ix=S%W;(R<9|QC^QRm1oe5DY#|!(xlJCF&(_{ZW5d1CH_%Y3Q7ApRc!1=M9mjA!F
z{~-DQi<HyXGJI&yYRNjD@m&!v22W^~MVBrYAIsT0>EqBTfK1=z&D7I~hqs4~_qYB}
zTVEa4)cgOf;)f6!-3=n3bjTPfARr(EK_v!=NJ$PD9V#s?B{>N}5GLK7lB1+yGC;aU
zjOID|{e8YqTn~T1F8(+>*E#q5zTfeRXU5fb8Hq`WA^F6^9Q^n1mz&hPPaSQ|%w5@W
zBmIt2NZA#FcVkWM>{4kF@itzbfK|?}b8*Nnm1Em?UtNZEr3*gXqT=I}#?n=BpS>Kk
z{o$Zk_+uq~MZ;=~ZqQF2ve>#=LMo*&@ZbH0g6sZK@@BP99$?UQ-W*ZX9hCXNWslFe
z9=HdCxwI7hr%zw`9Bq~Yp*;meYsS`W?I>_F`Cb0Bd#w33vyK2I?c)4k6l&5yeRUY#
z=!2gY4mi==n6CWhGcm0ShnLPFCQQZwPa$Sm&k~4a+rv5oV0hV=hG?A4+066Zvji<e
z{RHgRZzP1$o4CbQI$`Dkc{zGE)K9?3zBMsEVI>#o%OOljG!`f?hYPrTZZy41h#5ON
z)m=hgeiUPtIMh2^5NF;xEtT0ke1x1T%=q#gM)Zw(`VrVa2SMDtgK1Wft<+u&#sMy%
z6SdyWLWjb{7P`7|7g+k{AN4|%h<M*=#asv67pMB)H@3`Bql#plDu}<E5Ab5%g^k&@
zIgG=d={G#B>Fbv|ugaPSyn27zAGcI(&;3rS`?mF~rPcPdg@AnWWCiI22;Wr#e&U9J
zp7~}6HMBzE>I6L)t{)%GmN{Tg$<iQ6vhdkF)s84tRe+V3y;@i1@_2DeP2n_d4zOOT
za$6fQ8lC!fPvW>4-?%fi5X$bD1|WjSC&0O1W*qAWE|<+NJG~Frc_<%)A2`n10Me6{
z<nqTY(y#bD){Tg0)FzFc8ZDDey$kNQ`xz>yTn4hAw<I0{?z!Z`)IW)r7XYs=yQ_2b
zl|8p=Br*BK8`UVL<=)4=t|QM;I#*->MNT>v;=cJwJ!WgV(lx;6bS>Ym;(Vam^!u&K
zMt_=<z_2mD*#~wI=R`@?nrZ*jb1NUuBet|k)MV8*KSFcvr~8i>*Wdl6z%e~zo1gK#
z0CX~5-L!o9N3SImaALH%Pp@&{wN*J$gxDBAn!#L-OV@8uAqoQCl^{AO)h4A^(&Jy4
zj12L=PE{CN8YSd%@K_t^{Ng}p!tv6Y0C6HY0b9f==4)r9f4Z|ykB}A)J5~PAw*5Mo
zK5lw$c$f(@-*0rJ&^t}G{u<+d;Ksar#Np#H;5Os>5?XBXJ33@M9xA`aWE;gK>B6c4
zVO`1a$n@J!!?*?Hw4%S3roP!-{FN1m?^d`Rz6;HS<&cHo=Y7zq#v`LM;C7SZ+j~6H
zK{A^nE8w=ch?n@e9sdc*=ond?`ifRttE%;P6ynw5=k{NZdVr=zXs8{FN-mJy)a{Jq
zLy=5~S0AR^3!i=41m0^^{Z7+Nrq8x?nw(G7#@mnbZ^|}%l6W+eCeZ<xt}pU*{Nu0q
zT=_=f)BE`6#YR(rnp~UaBS|H%WA>{(c2v4rLV+fS`cv(vnJXh8j%KYCvCgK;!|(NO
z6E$!Psaq)(VdCLOgm@rq9ikv!xZ;U#N)F%IA6<eeZO<P7hHQy`s0ocTC1j%e>#Jw(
zy+a81nWc;eh{NkMexLg_>}(NjMM-H+O;gKIv(O=S4os$V8;KCwWiwi4`)jE?HTp~O
z`6%*oOgi;j?>B&412jR3;sNgCx*5fDmNU%NCEm4AQ)OZFJnJs<K`eCUYM1=#rP=97
za+zZ_*Qbwz=ZIOgG4^$DQ;NgTzvV*Ek6S9a^VFvXp{*IkwivoWiulwc2U|6aUy<KN
zmeb5~`}eX^&F-ne3z_2FA}h6bkFu!PL|(qNd%2*$IagmT2&)-FaM;e4C$Q$=02gU^
z{aRkyo1#`|XlTd{)~q;gwUAJ9#xM{85y&lC#HwUz#OsKa7lP>Ehlih7DmhnNtU&|H
zg#Gs-23K3e#p;CgW-?w=#i;;pgvuee;kFh-pC7to{P0uaXjzM$hW+Sb)5g<S>6HEJ
zts8b`XQ>yX3K#KxKJB689_0nTUdq;Xrw40;=FuEx@#UJ#OebKSH>4+F>cr{+S7(?x
zF;BDOHu_nP*c5SVNa>G!wUN7nGiFz(6R0^|YW*+&hTGz!+`9xXrdE8uyB*b<-k(K}
zdlZ$%v%##J11!>_PG2LpCe7-Pv|gQv6Gn*|Uu#_*R%1svJU=B^GK>~BC}~+v;m!2S
z?wT$bv#cnf)V{UAk!On6Jp38l%B8#h^h$~A=_L(hfc*{5mS8V4tp1qKW}-|?BTvrW
zcH(FUgGn^c^}rShbtS7mF+r1NU;cYoQGQS#IIDCSFEZ;3`l|1SFLiHqr8h$FH99PP
z)U9%yfXL_=$rok>NOndDH?7{hqnaPXt|0$qKZuY~N&5++$Qk#`KC3i#3)1`ZA2K~`
zky*3<LRQ6bH1$qgFUgbk;{hp*o93HeCGGGR$pu^5VtH-A<dPG35uqT&je4o0!B<^(
zPh0_!EJyyD>ANkzf~><o1)O&Wxb;nb*)Uj8EL{8YkeO*Ls}}N~hb}-gRqJZa%OQvR
z!EK8d|7Gx`QkVnd-FWZsDFWr=y4ZJEK7v*!l4>l!8hLZpI?BAIdZcC4fPTIsP<g=<
z_Wij<<Bj!yZW5+fVonA<W?c{k>(cAw(`Ay0PW++H6r;jF+{3?}Y5>b$U8NUUm-&0&
zmLSely<DK6=L0{m6L|F5=Mjh=Pg=wv&d6L?C%#1&n~fbdaIBO6?OYSb(e?|hi<dfm
z1l+CTOP*iMOg_dVUtJyIF_R{v+f@q@s*~8_2nQ$lfWUpl_DDjyM3J+AB~sSMs(fPE
z3>I$cg_Mr|fm&t@qtcf8Ihbn?V6Wco*GlDF8J-gIlDE;Xyn<^7Kr|#cY(?^Jk>Yu7
z567XwZoXiwDi_rQ)#EvrK0(y=e(zo82lioP9xPMt>0#7K!>_KwffopN@1QkbWSfo0
zYta(UXMn?G2s;G37t?RT+C|yB&zC&d*{*!*oB*Y6f#ie59y}9rTx6b{l4K<dC~bM}
zafwb(GnaofXbLsdaC>Vg6xgWsRN4W=lWUpe-eL}|)lD>HT_Q6J`S^m5TyHB!(W|BW
ze9uOjDM==Mqt6lNlpaQ#G;qGXFBm|&2+^x$<(YBezD=-%W7)M7o}frRkG|LqRp{?|
zhYk0ScQgM{8BMm}i(2;0eB=v<P7~LLsdr2STucPidT#=D&HeTE168O%-zMV+hu#eN
zx!jqQ#q4smK~ia_x?@i?dV4pMNPym~z7}@H-0!*3O8vw%+HCU81!l_fyZ?EL;OtX-
zpZJI_<s0P=DRJHM-bEU*!U>2aO0)5&guz~&@pdyGWmOH;FEo+Yc(J@lUo4I(Af|6|
zDj`EQStQiK(X9LA^j?~`z=xO!t>uTuz9{b5j)ySM9A}Kup>PYD>JWgav$nfX9tTKd
zE}qg&1xcnIEFzKo{x#(21BV2qYQyX$T=6&Yfqbr+2NX11bM)C{9s8fcJH(>K&_(KP
zh5QB6xh?Db0@YrNQBrjqMin-3Wzhp)e19yb1;0K^=YzG^!l*Cknl9qjz1u$Zkl!Ga
z7ADr^`<n{dIP2_+eX}y_k)K)d?-gU*tF*fksz<=SCvZJg(psMxNyXc(9citDYa%XQ
zPLglM;n^#Ljp?SXJNIaP5v|o$@pktxR~MM8CocV#ePxz?vp-B!1xD0!vbxndRa-|H
z$(X(LckM4VR)RzR(Nqz2$=tBnEzKPmE6}5ky2iu`&UP*n5xj6ko~7F<j$Ai43nrny
zduRKJ^)fKjabKY(%xe<Ab&Bf~_V5W(S!l8!dTij#AxgR-)qE1giWt)sVzEw#hZu)+
zOMN`{Ld)T6hP65v7k=?BV4d80+d$gHWa(P0yySb+c~6)pQplxd^TZFw0N`E-7(VEO
zi^rQAeqOb4O1k9EG+30|6c{0X9YlvtdEj95#UdRz(k?KL7j8-HH?XU#IWg{_hgj--
z$QexJUgYuzRNeYL`fa|H^w+g{>?56k<?7sK)+kg#4o;SqXA1A6eT>Ez!D>gsALVCy
z7m^CYRnxW7!NcKdMJK|Pk3A`h7gcgs`|ot*60!RZA%dilveYXg()v0==`OweD81!<
zd(<un&^xWt6so<W8}iiZ0wA5#`@Dd->GIJNk+W^~{xe>{i@x0UXx2<vNhko!S6x>=
zIstyI8XiJ;*|pqwSb9jgp6^t@7kJ++-~#bNE!K%YhJmNqYJkZ@2))P{B#xRrS~7B6
zGExZY&yblAs^1i&50wo)bK4jn==^8-!7HsQ5Y4*P;Kk4H{?FFZcG=*6VlAqz`m<w}
z>~BWdjm>hjJAo8KtG0AXaaf1Io%J{A!$JJ)E(IGL6FW&y8n@e9<%H{2xmG4QcJ!R6
zl2-dyVeM%J{zYW5TA!YkLzCjSX3gG6ML!Yb^5R@W-i!9jLf^B4ysXUF>rnN1`J2tS
zq;^vNzV=|wPm)1MuOMNPsH+J3SArBC#rm|<FqhD>v!!^bJLn}#0OwK`Y&vO7c}Wc?
z;YG(yu4^SKGMFq?o0Jh0c&3W?`Y;Y>S(zgyFK5X<G$<6KT)BJ524CnSSbwpODruyM
zBEp7mI9KV7zrLqT`m_1-ZNHP{<UcvOZg%FK%?f0@$Z=hW3#GNF<t*C&Nc@F672P^z
zZ+pqCCjB^UgnS|sFvoRNki&|D+SFN9OrSDkVHl+<L)jDm4W+yj{iSKb!Z&roubF@3
z(~sQ2FJ}g&)qz2$RlWrCaKL33g;AT~kySwAIFp@z_Z&(qVv-LY%M4cYG@btZURM_G
z)_+$1Uh8<ybuUm~?QBjjZT~$*@PGQJgx$aAj5p`k@W$xy#$tS~e3`&zRgd51czEMx
zL;hg(_{Gd~;zvC<p1M7!QqqfW8kpPJB1BX;$-AYRT#Y|D+AdtHT4`as&o5YT#IwCB
zP=*rG&ZIZ><djXP-OPvgi+0y^F_N8=3O5X00-Nq+b@RnmM_#@CQ&tC&A%@(=Ht7kN
zYn0#eeKR;H=}!)b%0g2y%~BK53?0AfpyUp>;qblOM|zO)Tk({tQKgv^kiE`amWu5Z
zRSrDFTy9}tyqh(P(VDZ=Hpe9oML;i9cgnYA$c#~(_QcO+V+h&sU6}!wUQ%Sp5XObi
zrAjq6lk)gk*HW@pzBPz8r`ysw&TsgMimf`O<9u8fZQ6>d-{H?~Ud+3FTjvu>1@MRs
zg^T~>+dR=h8<hvFo&0QM3Q;0VUnMTj5kNWQj7jL?+q)`u^6MjsEy{p~CV)BRv!j2z
zX_xtqkmGYWH3Dg_M-FcMDW4{jo6jw!2m+mhqaCr42<*vtu4rbv<R-In`_FFPjBlqx
zTyfFiP$ziwl2&&P{;NZ`pXn3CEHZw*rkQP6R9oc(b%L|RqO;F(;tN<PskO#z<2PoU
z_(_N_BP(ON;F4f374C*tjBnr0d9FZ9srsd9>8nRrrrz7V)~J&Wv#WL7SWLjV1+OBI
z>F%Lqd68V>F6`0qcs_z!b}umjA0X1<kp2d8%l?1pVZS=A^$KjqC`P+pQ=`Q%Nhi!C
zkS&PG)h035j+5*1P4K-qrjv~ji`vyAf(vFitt)oa*}wdJ(^3xe_B7N<>0EcbJD76<
zGTtt;?;n(go1Mt&5GJ6kA=-N=`?|21m|RoAMfhmGS6`|t&d!9W)?Z3MuMw0>mgzNa
zXf17hZ%?`Y{Xvk<KVU-~iBsWeX;q1>M>tt#Ri7ghz5s#b=<9M!*)5m@Z|lii>_r`Y
zktYhy*8iPcbJqP~pXt!dl2^WD5XDm2K5tlyacAc%|2VR4h6SzMx4db~!21%Vvombf
zexjC|fAQo*EiIxfNmg;{$EB>Ui-YmgW?eSUTdud2`Bse9NzCMzjohg~y+xUFJ^=Lk
z>!K%e#;JKOF+YJIp?GO)l}&l!WrK~0qO^u|honEptfp|I{+cg4`Gi?O<G1hN(6ZZc
zcj7H7C@x6Nh>pb~kMrk0`wiC4rX59vHeKI)9~;OJ)1oL#EtRgx_;^-l`%%U~L0hWb
zY3s1Iapbbk)DC}Sz-JRx1_p`W))F*z12_I`2VcB!ju00I0@{0jPV%KuQiSx$+XEFN
z&&|^AkJDy~GqKj((V`ULr-?gVe%VWU@=Le@oF8Z{wefd@LZEB7#|Sq;0Y%tq_5NJ;
z&eA@#%0G79rdinmO{zqb`nRrPV$rM?sAQMFpqANt7r&LunLpj5+{D#4Qa9^YQMrk^
z`&dH5npiu^$;nFaw7SY-N3PX>cZ__iZdhu1iB`|PyXicctCx@|LE?uEhn0~r7{n4T
z!ROrjYc+?nU5>G5&<2)XDB*0gtFi+nhy~q<%6IbLPjgg}$RI}Ll&TR#fUaxy9f$CD
zGYEzThJ;Y$%+(O?i$7zSQ(6onBm${KpA;NKR%Ep*^R}bAIE%t`B44&<b;*%bH-{MV
zON=n^FUd&z7mz?c1p((D+cqrPnp-}19o*S^;aIakI8l=Q?w_EHXbLhJCIbP<Hoq`l
z|FT(%j3?M6Ri>z?+sfAOc2$`-{nzdf@(hMWd|jLpwrz7guOFVu)%_tOq7+_<TZ^Ph
z2BU2`;@M1nwkkXPo=W%No+zXTQtw1b%{#B`ZA-jd>;LHP$*!uaipImc@Vrr!R>*mq
z3M#^ASB!m=g-P&%qPIzdXQ`$P;Im!^G&Y_Y-Fqw1qAn7U&dBbjmE8?bI$gAzKo!$i
zci0_xCk02CLLtjeEbYgHwJ<b%MEl@mc+q!f^{~P0;F2XqUSazZ78C#eJWgBXR_C2`
zzW(jk9h|mw*QLC7)<axkaOZzQe*{OK!jax2`x)kspYxcj2Gph0*!`9ufe8arb8dRr
z%O$z_3|ST46tc++7ugPB#BED~970ML1wij0`KpF@IjC7^n({aE#S*Uqd_t5dPWMAl
za5EGsKbHZ`r+oJ|E;^SpQ*AoW{;u$%07=H-e|8JS>DRFYmh@b?F{Inw^`pbfnQl$W
zS@%Irq&XUfs&Tj^A6<9qOF%tW=3$iKtKl*kB;>*A1sq55+$<CaB9}Xez28nEgSo2*
zNI-M->V^Kg-6P4a(zj*50SPccVFc5>GY)!Iy_*CFX^+&n1E?p`^%8fxe#TUWcN!nf
zNJAY<wDCpdLiplxR9R8+GOOKIgx_<XaMiWjqHC^=&nM|miz=!-PzdpOA@<U_yG4^u
zGk6{uEz)rM&yN?E(qMaA&V)iI4QjQ@hFZ*-jK7zjqz~(=*`XXXapc_$anQ^!vddRX
zl9z*fzP;M(j&05}4%N^8>=j_7^DiCV?@#koHbk+45Tp5Oc+Y+UGC}l`X&M`pqI)`A
z7t^fgE`CP6B7cLpo8KCnzN}j~-F$8RT3hgF3gm6g!6Bix@jMTtB*Ge3%xE8StbPpt
zrP?P)=<f`j?~K1!RGZ5#Y!xT(tiA7`6!-S{GT>_Gs@9#d?M5u&tvRcn72_9bsZceP
z!{@@>Go`9`E&238#M_U~DLlf`bako2lnLKb2n}+}ogUx%CmGfk3TrlemZ?0SJFsxU
zn2wfaQU098+Aclp(fgD9DeD%#E|xxsPvUR&DFIHhH+_ZiKE@QoF;?RhW)U5x@?{5f
zACylR_U7Iw8p~XimfQd6&#H1?nSN7DTwr4xyS&&Cc8elX<ikeE(63g0<(yz1;)e1M
zgA`=`Om_wJXq0%PRj<F-J!o?CwqbA)m~9U4BGgu9qH4;aV9Qrl4eW!i{JyAVC!<cc
z&GJ-CA0l4P1V>~Kt!B5zZxGHFK(ygQHSG(XCzlz{gg6+)Zh?x14MHq2Z=2xFdoM#C
zo35P`0A<RNxCI{>dG~oZyylvOH$05mY}oLP#KCc<8-wjq@X+4fCZJcE=&79^UvzIR
zRF*Q@JNuo6+PgS?S>#|eJ-v7*BP$=IAAEJ3X%6`crSOp0HB9;dk~`VCz+=8kys^7D
zJw#<ei82@6G_v;w;3L<&ZHLP3jSkM@y4D!r0fXVD=zU5*hT5GS^!{URHV8`riU^0z
zeH>4PMv7XfW-H%xOFBQCMSc;;#;<ta<U%d82`n-+X4bS6yl3dRouebt``V4BM+Pl_
zRzxjJQ9!I$BVd70lz!+Hhc1isl}c*hXr|l-(+L>F8r<j>=5Md&#OVA!KVMOR_Vx(`
zs?K9QJ<WPK6mC7JOTUYW7`&fhhn2XeND&h`l1K0)6VzvAWuZ&>t0V@(UoI$>z5E<?
zNMP>s>m3oSHYApUwp2C@p3vD~Tm?!H+1h0bViiqZ(c@K>Svnajg~e~5#jBy}w;}ZG
zQ~fGjkz+);-S){v;Yv-=7mmsmsQrbWm3ps{pBo+I6LCp~E<7~0->BwG{EHj}W*act
zOl5-uANS6Ve~cJsVM!jYmCU@DnqV_^@<2~oeDg@ES^no6X)oo-s|OBa6umM@c3d$c
z#C+P|JgvKp@mF61<W4FC-$6QLC>K?cD@N{lRB_HtdRF2ia)Y)5GL-(9=lM;wJ56V>
z6h%K4qCr@+IBDzR;=5)wYhp{~rVCPGF5NCs=J+~sN4ivx*-_IY_<$s_#F!+x!nw0O
zGI5HlfjV%?H-mwG+;@~55s&0yrhWL<{TAB%cZ3r;a5yW0zu}5WGk)vE*)j8B+{{=V
zKHGR_39B>MhVG`9prOe3b*UwAQ;DW*FIE>pcHD(ktt@XUIRygyGDM>LvEJ~8%VD6z
zSObSj*5Bc1c5AEFouf7B)6B)q8XstarFl2z%o1Nd`U^FlZMJa-&X>WdC|TR+Ygliw
zBi%aag@x67FG(KFHmulh<=eHR^>nhip5Dt>yH}IMkJg`GV^NV1un`!#76tiM6CJHK
zi@Plm2G-^lpY~i#31fw$m*gcPZQhD-eZbU?GnZ2`T&P%dOBvbfoSbzc##cWbTf(!m
zX`_Tx4bD`buI6f}!MgcrB@zrBV?DWiC6wS_so3(6-H4L6lvV<AD#s1+ks!{fH+f-a
zA#^#Bs{+^qs|t!7c3Y7f=)CLN203<o)E=|Ro)H@?9P-XAyrvLd!)GJp6!dO3hC(D+
zYYJEU3K<rI9$GduXU7kVuxtg`NNw_NVoemL9MxJc_AwHi<@)1?M3bQelJm|-w)5L8
zBPtTw;OO$Vi~St!*D1GPBm7Ff3zxaYtB0~k&>ii6wg(Qu&vW_&#IT3+K0C#3jUJOO
za%k&znDFE;^)PofhNzIR_QP3r-a2;Ofx}#%n_K~MtSPHucD+iOP^Me|WZU<nHLzFx
z&pC<&YQ6X%U{e(?xs}xDlr7~cr3{MX>US>J)hJfHx~aW}lS9vM%k<4AN6VLow1IcE
ziMQzmiLx#Iz%SpPQ8&ZdBfss+`CYV$FR~D(^pXWM+c1<Bv#aO3VZ$Tzmzh?MH=brt
z6J=Q9?pe|t-Y9?f$u@958p3sosvRr61X~IQXyPyYP6nm=^aCC}%3W2*+y64UiqcD*
zp?EQ|yg$dG*QhNEk94Dg7<^;;8($*SYmv<k6*+|8OM$bl)Ezhpr{4ZN5*EekKrGhk
z(TDf00@7OTwv1yOOB6tuH&FkQiSf-J#V|B&FX8lv04oivZycGaPD|UD_#97OZqP$B
zv!&6hn`Yy2_%_^pyyjGjh6>J-K>J7}U>`J_wrKh`FFij>vxcD}@Ga$5{LtV_Mv--X
zR8$wigh<VOh&U%RZp-Xgo>J41GC3%%RcUzl)j=__Q-$N<9@OOHdfL86v>K6nM{p&u
z3A?kPUykd#wJ<t78T?Yb(QJI+Lzg|!hQVEo|4anpO_P}q=?0yBp~lRYYU&FcMscuZ
zV{@Ssvoqvxa|1pKHM#Kr3AflSS7KptC%#a<Wr9I63_rVqde+Pif*)vRssB$i%YM4C
z=Tv*m=|#+G#D(Pn0w{*3t5F_%h$CuD`E$d~@Sqd9IEuJvrpZBVuV3HXFIJhiG7@)c
zEI0oQL`TXz)l{-}a~ccYma~#AEf_Jmrm(ONgF?RlI_W|5zYpKY9a;Uwr20jL`5!<o
zLSR@~SzIDhjUdI&HuA00HMjsv+--jq@d*{R!`ChkzHm=dfS5mVvfzCPMC&p^aUQ*$
zQDV4VQ}7L2eJ@_7own77Oog+gpE5f1y^`j#^;&V1n<m#gc$>w=_@_Vbvu>_>@9CZ=
z9IT#o0{Q7<h54x-KSuND)khX7DU<@`kJ=NF4N{m;5IOv}nsMF-afN9i<c{IQE*DjX
zGsG`Upg`pg_GY(Dde~A7cUutfU-}Me;XfbH)^4o$-`*;jIx0#xKbW$APzMt>=(I=X
z*sO%4D1;fn&=)Ci8rnDms}E6`7l)BBGGLAF?~4XFVUsB<`+YTjG78)QcRs#as;()M
zWL+Z1acl27R}}IZ9eHIvNbUY~oenD#n()~CQ#L|}kLyG%@PL9x?_^^mrbI8rp_Y<1
z&ZU^$cPh>CB_R+gZQcSPZ1TZ=l#_3JaE43D7p=*Lbh6ljeI+$DAw-eKI%Sd;26^zP
z!TLT|oa(uU1_BKRCp+ifujWLdzM;G`PP>IuXrg}z>3fd;43_K(nfv0tkqg}#p`6*o
z#g*A_e$btP`TA|dk+~bt`EZ&0L+@CLvd()XA{sr4O{87wpBTYg1TCt+=k{yF^Lo?J
z2q#&&EOkGuUHs=OSnYH71j&+efT_HLruvFXfBvQx57(D(i`fq9C<0-w1&+JgZSo|l
zpVpF9GO8=O`K+Bg)U4I5|C~q7Y9FqI#z@T#M0@$Hu8DI9P9ql$>YTLC?rn~C21_Cj
z7B{5UMXi`i&nt!1;M025)bpz!CsUfNQ4VxFVD#aCb3d)U1fW!`BfAM-3wBrN%Z@Vx
z5YbzgUH#&j0|37b{pns);nP1=q6<(ZCVQwSlVgKQea|^eiM0-+Htb9(vWNZxQ-*(i
zE}MDLfIgxNutN5fRYCE7Z{)fTD?ouVGVl0kqNv1UPOIFyrwG=*Uf<fpuu0DmLhDE6
zCq*WX=(?ro3Q1KrMS?Rz<oXDLxphY3B8U|UVkAr3DQyZ^bPJgNkrmGfQ!%g!6KxA8
zBwql$hGk=T$PN5Svj@{^23-nQEdPWAiZlII-qQZ<r0zX#Dpz2Mg)%xHVGZ)dI|XhJ
znp<d(3;v#Wd(Ifu1sV6{wF(`&){(;YguW?@-UP?-!O2;**<p+^EhcPfG=~0`bN~L6
z$qj=1yR5WKV?i@99~SdHoUM(XhU4wjxv2W4IA=vPVusV)P&wSDQv~54LM)k&M{Gzo
z=%v-ENL#-dyO4Fajg%D;Jbj~md2@A%Q}*PneD>uSf8Q0QfA)mhBR-XEn`1DWpM12%
zm2X?Oz~|K;`fbqA4l}fi=P<r|p>@B9H_SXsF=4R5v%}>DRN<mx=0zC(i|?NKS8Y$a
zH3m{^&DUJUl;I7~%v{-bU&CmUyR*4(w~GlsV`LT-Z!42Fy6j3+h9445yf$|12v;{}
zINuZ5O!$`4D>+E=U6V-sjG=fv`AGRDk8DCHvHe255)csIlP?4w^!Djv6zC~QC_EVt
zd#{DSRDZ5;_a4^)O=$#sKG?m@Ls;Ka?@LN*2yLPKeWCKkvUH%Te_C(8`M^%hIgvU{
zX_ybPAGUZk0_eJ|9X)ejSKcVX%+zmQAc$uDKs-x&xckdb+-kGzce$>Kck4+jw36~v
zbT{gJgw9Z5dwrntmigpr_bB;M{h&TjOUicg&({ImZLC}IFVCai8C5(w7a+encb>|#
z|4|*VKr~Fz?Mt5|`D7yIRe>Oe4Udj=74tclYV(D4{|yB6BJ-^0V$^m9!=0PAKjonJ
zBh1dTpH7PTp<y!urZhcxV|p=Q{DFL+ljo_CxJ^1o_`c@gM*jgX+peWf(opgues$zS
z0ruOyWo03Zz|4y0aKt;$T;qAkXPF<E1rlS}@7&|+^ouzCL?84O^e+VFljNB7D@+2{
zNNZ!fkx{pd%nUj5r1X#hGiqwMTPQeH*8xhn`yw^;21|*4i-0&qHOS$fjqLIAkMpo3
zumM+SmwyEo`jg=x_YI9_zUi#Ebc`x}j?biPuxqWyn9b}lnP3iH^XFug9mhM5+&q_8
zdEBG*J~l8eoJz7)&cn#~)ZL+0vShm5A<ox1noJ*u@vm~}&`q0VefG<}iH?S>R%|Ce
zqt`9mn4)*m9P4`ijCE{mys?l;T`ZF~d@mh(+DZZ?3I?P%<l&d0Dl!t6jmOM*MT&?(
zJO`V)Q>{O`jyQuH2PsE?q77Q5_Opg03Y`3o;jU8|Wtu3zlcAvPAF)l|c6fPwezKpz
zw=Cm&p1Zh?M8hEl!wrh^QS-<RzszOtULtmRlp0NhJo11&MEG71m3)%T!34L)qwgyx
zn-_sKozvT<3>wzMJe!{^gVojixr=JU_MZipEdDwHYL*?GjZhnH-}6}Z9=ie-@azsY
zLKv0cl#?+8Ch~@*{CfPXt1FQ)a|llPd!pu)pxdTu8PG7H329{~Z`W=R6^r+Y^T%=s
z<Y&028V_=tOszazT{4-J5pv_xfd=i|N?A_<Q<9h`HZQzXPjsZPs=d2y-1QLbtd7-D
z^c<vXf;S;d<S}GoKR4vH;T=IcrWp&gh~$wnv3g6TH<aOwYW_R9dBC*Y5b9XA(Y;xc
zEI(}#QB5=RPWc7m&SzQcJTV6-F5JW3ieTk;84KgG1DHxKxr%33t2g&6HGnFaVx*7$
zDlUhLCf&I6`N=~Q#hG}2I)w5hFQ?YQ<LsRcB>RhMOD?_I9g;KpOXlO@OM81LEaZaE
ze??9Nleh2peKAHs-ZmsJG(~%sevgX=nQcD6d!e#OY#!;7usq-idVd3t>vQt~B0=Al
z47*NlwzG0pOqv2DO;Bb&J=rgs_+Wd2hcNHGfc&W8O1l?$(=f@gQex4}ng^UTg}z}_
z7gkNI85^$ZXS3Xn<K>|bUv-!rK#=snB;oaGSHTF!*iWEfLHs-AZ^gMb@*afK#+`5G
zXb09!<B<@I;5&T(?8@fi0BLb<MMv-EP_#s(lI7(eAdjG~^Y0XE$V$-;OVBTdEbL0n
zj*VFFrvdTy5XvEnmv6)pWqcx!RW%E{KJz{c6h^gT_xk9DzGj!keORrxbeYff&U6Cr
zd#JLnD2-9lB4BD+!#}>>%gfz=l1;{~D!f0dmF6+38y1bb$zt$liiTJp>k(8_B|rd%
zQ{jv8yij*>e@|Z3>`ZtU<72W(-~Wk=>+|o<LTw3bBKI5HY;lnxye1SY@F=aD|0K0=
zG_ARHHNNnBFRN&JME4u7>?gaO?$(V(K|N$g4-2BXD?qFe31FBdI&xb)hRt{Pq0i;X
zO2)1RugL9*toPB(UQxa+WdUnR9S;RQ%M#$IPdF0euTxwZ+z8%ph|eF&(7D2w^zQ~m
zM~F0c{bWBEoN;N#2%G%f*Mp+U(p;j-?rTSy)3Gg6qBUQ<c!%V9TvKaC47}uc70mr)
z$ar$NKSnkQ{78i?EBeuKelZ0~6L|}F?d&_HDxshbCYS12kB9Ec>;JCn6l_IZ+x>N+
zGtJ(jvtv)n@F_I`lZlF}duM~x%v)uYGh0sVn^iGVw8oDI^jS$5KD7!UaHq@3W^6N#
zxL7A&X|+qs*z3%tdiWs3eGa2hx*XY~@;we@6;DT^WvtVm1+ImF8StJwxQV!K*@zLo
z8(oq?fj_q|cysk0^42A+46+^sC7M_i`JL7+7}_bLlSxH>TYKM@2PIpqaeCb>X(Yy+
z5OStbI&1jJU;KZsWBOC${99^;63A!(ikE`rH>nfWXZ}H*Z2ER(&mP;3#*r<Gqn;T2
zz;S9Eq@6(ICsu~Wx#q-<Lmns-oAb`|BYS-QR^0!;Wek8-h}HhIx1&xaDx(AICnrLE
zM=#HoF*CcJ-1hC;QO{va%`mMeiq`LJyCu{O^iqerBs9*$D49NODz_2)K(064Sb?ZE
z3=Nr2@!oSD>~=mXrzZwcs}h&?f8>2;F+@G_ivaTI59ZF!dCq&I7$x3uC}CtnBRU<b
zO1J@9EW#~xI}et0TtB;ZGWhK7$`cp?i6>p!#}W0s;a;3!dRpNqU1zh5Cia&NZXstc
zR4>WnB@OwGfxdo%1a+9lD{g&=VZiAqa@He!K9J`YMW{1jNR&F0m9GMmN8}9){g)NP
zk0vK&<Bz%7Y>7jnYJrtsfR#obw9DDv8NF^LEjV&_h1%VpcR+-c`yS!&+BtxSc#+(c
z61=>a;Zs`FLi+-?FkWz%h3ugU)l}>4B7LrpNUx4e&0LeCXRp?1AW`Nkt2*ub7gX#C
z+yc*fi}-K}XtO1f2g6OjQ|;_Wavz6ps9!BfA8CA&_w&xaz06x)udQ(5=8-;_MUT8S
zM{*btb6=dp4Hk4FiMrg)*nss$xtZ^FFSZThVmtnULo?PEGekuC;{86<5R&$-g4K=3
zB*Un~WG+pK{p>%oZ0lYJ+EHU>;7G&1%$-eS=i%5B;uA2v^kB#k93K_v14I0LCge}a
z5$=?p*bvyPuy+QGqU(nD{C_C{k<o+^)N9P-*Zy|DA$yzZ&ssokRJL7at=#%ETV@To
zGOAzwGH^7V?N?>)kwW_dAEGAR@|jEZSkH=!Ne>z;<(HZVOOv!qx-X9O#D=TX_Sn;n
zh`o{!ckwff7(U7-Q#FpbQ2ark={ud&a?uP3O4s|~WTW9`xN<XX@#HdbA(oW&ni6ds
zf?M2~p`x?sawXFT^%O>t93}*8zkb+Eq~NnHGoA5LuIum~d$#HBOSYi6hj#*r$lcHC
zk6W*e@%TFR;>!mieLvw%_A7n`1Sf>IWy7~M6AEPqq%PhHx7S|co39#;nPPS*L9ibO
za(Z7RIauI_Y6#yA{RQ>p|DF#T_+UqZhlK|>DjKC#XM&LaF~U%o4-wARco{cvu9XWz
zDjTP}X_;j_p#OGrcTirCQ{Y5i(00}gkh{AxDy5xBn1%ZN4`*TEzkoequFB?|c<PwR
z{jXb}LC@VLM8_REB##Ey3#!gq9IH1?9B$@=Kom@Z`eWdqhRLafH{KIOxiH;#6Ue3o
zN71C8!ve1b?+4pWnuS{41c#K1-6CTf%-^GVpz)TFo$N-s=x`Tv$pi`hOKHR|qV*s8
z8W7p9maXyPw0bErF(CO47b)$zn=|@JlmbCDGL?OuM#|;W;%s1vh!NkdzL$HB5=OTD
zqDpBYhOkB64*?!b<?{ZvG^PF5$oSd@_K=qc`6vQ<B22GTTS^rgc<yo+9<OMSPD5&~
zagQ3jAM)Ju6@3-i43Bhe)Ad)BrD)PmGaI4EU8I<k;xdt4N%aT%Jlf4WpD98+*mJB5
zwF4y{S;*OkVJQ|&eKiLcnKIk2!Zni^Ikv=KiETHkv<F&lKMhw8Qxia_b%$tkZls2S
zqEdqzpk6_XA--z0N<>L+P~Ha3WFb^~O97PVXS<9}$WwXUB$YlLNbu6={qGGUh}mrP
zt1H6j&M1}W`_!@py_0U1glO&nS9FaZH+DV7_utUkek7|J##O^Pt~X8*n(#0|GQo+3
zbR!YG>bB1^-<@pYtGs;(jFG1kCx*%TI5Ci<FFgF@1!jiWq!oZZ-)lj)0buYpvEdNj
z?WO{bMz@{$xlWS3$J5z^i}SM)mimu#awk?>LVVZje4Ckb3nyA*mb7W}by$Inie8vY
zlBuNkGV8@jrkdJ;v1ReLfkl9~YuXb-M9ZJ~tx+!Pv-j@QmUkSuaYDAKV(-Ml9!Rb+
zs+m`qM73w)Vk{~aRuztMF~f(st~d(umYhGmsp(=l?*nH`4)cdU6c4z};HD@`YZzGU
zC%j<&&iajBa-96cX-x~m*N2|%^3P`X%fA3)TB|I$AVyZ8oe$ZlH`6X|TxGwuUhxOK
zkkKyLw6i+HP8_8x%KMBp(dl&0*(^z7F>QbLtMhWt-w0BF7NFl<txX%PZ#%!^K&vM2
z@ENGRh34qX$Zi&lkPgLM>?5x>ar^97$KAP8_=0JflZs;8iPecL(e)2i;Dx&bXI0=m
z_gO%YLo`{ox3p%1*y4eItQH2m?I(+n1o~90|6z!zJZDJ{AL}$abh1!jI8ydGxai(&
zCu5%uF=5_Pd|am7T=kA1PW3lWG7QTEk+>!Tp^{K!2#<{CXIW_F<52z1dBa&gN<T^2
zVq6oZj3i{$*1E~T#K{@?(YixOyU5vFEJ``O#!Y|q^$<8ps8NOBg9m_|0Q-6#XJ~7U
zo%GbYc@t~Sp3bmXPcgPpZAn~bWmTmgzLuZW70IMJ`#LqarQVAO6=Svo!<u}OY+)Ks
zVHpvq?8I|qUNo-09FA2zCsCXC@{})+va#p<@o1qQ2O<tjU&Qx@Dalg!r?0}v<ZiM<
zQaZj}Ri$91Ck~WzlAZc(yyi3ZZNmUm=zMTQMJr*M`LO{qEpFRaICDSoyKm>f*Ow$}
zR`IceizsTccpVj-<^(5OoQFDe!C$MAq?ZdvXPXZCCd~Uo7@Wv=pTUbE1PPihF>i-u
zen|&<a=D{x+?Zg?2Pbj9%9pCSpz!}4D>>Bta*H^-!c*=E7w$i)SWSuYfnigF`5K36
zvRHdC<iU2GzK9+5UbKjd@J-e>Ex8s<n@6z*>jv`C`Kc57Hjfo6#fyY^I7W=x?WiEF
zh8~dtjTw^y6Mj1B6>mFwghBusX~u=#tj;&TMCd`Y+JSt`ROMB3j_`cbh<3oMK)K_2
zwzT?%x5b!ePq}^AmTw_g9IU5@66l*i<_A(IVPb;z-=AKJ=G+VwS`KX{T;V^oHu$Xw
zw4BJxL-@;oI2q_K4OVVOlB(rFgiJD2{H;GT`_P_>P|$+|Q?4r>XIq;7S^hc~q}aft
zXm-Wbjq6FN?NiJq*|&)R52Tz_KLeZll-)38lZPhs8MQQis)aZSp#Q`<_=%)9l6hLd
z|ABgf7Dn8}2<S)C;EeN0)nKVHM^1}BD#;S~Ge^FhDOJB4`9iO_s|pKGdlLV|Cm*P^
z6ZA0x6D!wF63$gHpLQM@hkJ56QH1*IXzQ!Ihn;hzG{Fn;@9NV3J8}d7uVLy0n5K6B
zquGDlFN~$8<JoVQdoiyV!ymg?8q8#wzikgHKr@ihKwg{ka@@-JuqqjOBixvj(FQzZ
zko}RIRdsmLU>45AAaTnJq+ok9n8K7rOkP%^OX*#x4|Rw>I-D)WZp=9yfV*_)7UH9@
zn5ccfNs;Z=^0L~{(4AJvOSX<j;2Xf?n%X=pLTWy~q?1Iw1&)f^`1DSJ?E+Y<j4qEA
zTKtalE`2dyJ2*3ie9!0dN#}<HUSI|15ZMcWTHxy+6xA>y5N(iZl0gSadnCb#M&SW0
zjRP6F%z1L(#PFfv<4oLy&fOr^YQBy~g)U+!t=-&v7UGGFmtOD_Nt25>&DuEr+XZcG
za)af*EL1B^AnZ;7N;8-|N4VbigcXmH2Vt?Y-m(pY)P8iB`Fz^-bT|9}Au#)pH$8sr
zn|pu9wP54c-W+!QPz%oVCH7A}>&Ij1K9j(DbdfJLotRTKl~e99Ma2AJBgm5`*d+qe
zkxU~0M9(y2Yn`vjWcfQMGJjnS*k2>t%6;oo&za?TfsExDc;qKM7Nvb7V7B`o^T_%a
zg)7#9!a28wn>nJhEe#4Eyrqw0uu+$F&DcT01%CRx*310;(O<TM9ZOx#WH5c7cCE>}
zt|F=6@~x8JhTFnhH(Pny^mqqm;*n13TuuC?VXzH>rH1fqvKxJ}{CTCpY-KPXyX;z%
zp%8k{8MODiIhnqj5>FY&u)C3b4MZ|?0r#g+$48AeLID)I63xed(+`#07xMl;Gc(SL
z{K~ed@jebFb=t(7D&7=vY~HJ!QW`NlUm2dM5d~{!K==T<)kv#WF1^CE1+;(4BBCmx
z24lA|f>2rtq>sZM6&8>XlZ!KbYJ4|p7<Nj0gTFlX=|B~=5{uFQbcpOg32Y_Uk)<hC
z;7aRs0t0PD+~Z@`Ys4&f;5o+t(=7}PN=TTx{){<0^C{tb>&9!>Zty==d8j|5awln{
zt#<IEA^e*lu`WHwR-Q(4|EpIg>PH53SC?lN)@CG}Ai@8@zyb1L_VrdR?gzEjbB+!}
z_x>>GbW>94;%vT^-eE>x0>INhq$0O7zRs=udnzVxTi^VlB9O7kP69LHUn5n}#Rz)g
zDge1e6Iw}2OI!P;GMGXV`d?zB&C6fuLuH7++_N4IuF|U^fN-P7%|$hcNMFaC&Etyz
z`qFsrV`?ep$K_p*OsqC1OULUFc6PHhr5QfkwT{1sy;d@;S!LWS+Ceh?(ekG@X(HxI
zo+%XBA%8`1{$BY%zdqIag-!;pz9$uOem|HMa`EyHWDvZ!3V<}L{$L81#a=3n(LS&T
z#GMN*Ld*cjYO(ETo?{mV;0;;*p=xQ#aK2&u?{oRjMZ-QY&JaJA@z^ekOPP^%oj{pX
z0WQ!pr50*YK@Y>$-!?{nnya?#qf2fQO`4c*4hZlp1a9r`2=@QDwZG)e|LQIMOXXDm
z3!?nLxW&M01$u(0U6p@Xo&R%@VP|5=+yIes;iRM_q5Fb@bAM#@|HxeY-+$~r(Y;as
lf4}$Nultw$8<%=To=uarsKkD=>KgF#_>r~>O6leM{{^Cj{b~RJ

literal 0
HcmV?d00001

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 1e356fa5e9..2004d65f59 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -36,9 +36,7 @@ For more information on sizing and OS requirements, see [the prerequisites for u
 -->
 
 1. Select the Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Then enter a name for the resource and select Review + Create.
-<!--
-    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
--->
+
 1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
 
 1. The creation of the resource might take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
@@ -79,11 +77,9 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 
 # [Azure portal](#tab/portal)
 
-  1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.
-  1. Under Cache Node Management, select on Cache Nodes and then on + Create Cache Node.
-  <!--
-    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
-    -->
+  1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.<br>
+  1. Under Cache Node Management, select on Cache Nodes and then on + Create Cache Node.<br>
+  
   1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and select create. Note, cache node names have to be unique under the Microsoft Connected Cache resource.
   <!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
@@ -199,12 +195,18 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ## Next step
 
 ### [Azure portal](#tab/portal)
-To deploy the cache node to a **Windows** host machine, see [Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
+To deploy the cache node to a **Windows** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
 
-To deploy the cache node to a **Linux** host machine, see [Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
+To deploy the cache node to a **Linux** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
 
 ### [Azure CLI](#tab/cli/)
-To deploy cache nodes using Azure CLI, see [Manage cache nodes using CLI](mcc-ent-manage-cache-using-CLI.md)
+To deploy cache nodes using Azure CLI, see 
+>[!div class="nextstepaction"]
+>[Manage cache nodes using CLI](mcc-ent-manage-cache-using-CLI.md)
 
 ---
 <br>
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 30e2c0bbb8..601992fa5b 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -75,6 +75,11 @@ See [Host machine requirements](mcc-ent-prerequisites.md) for complete details.
 
 ## How it works
 
+The following diagram displays an overview of how MCC functions:<br>
+
+:::image type="content" source="./images/mcc_ent_publicpreview.png" alt-text="Diagram displaying the components of MCC." lightbox="./images/mcc_ent_publicpreview.png":::
+
+
 1. The Azure management portal for Microsoft Connected Cache or CLI are used to create cache nodes, configure deployments, including unauthenticated proxy settings.
 1. Prepare Windows or Linux devices. If deploying to Windows devices, prepare accounts - gMSA, local user account, domain account. Deploy to Windows or Linux devices using scripts.
 1. The Microsoft Connected Cache container is deployed to the device using Azure IoT Edge container management services and the cache server begins reporting status and metrics to Delivery Optimization services.
@@ -83,7 +88,8 @@ See [Host machine requirements](mcc-ent-prerequisites.md) for complete details.
 1. Devices can fallback to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN )settings to prefer the local cache server.
 Customers can view data regarding Microsoft Connected Cache downloads on management portal and Windows Update for Business reports
 
-The following diagram displays an overview of how MCC functions:
- <!--
-:::image type="content" source="./images/waas-mcc-diag-overview.png" alt-text="Diagram displaying the components of MCC." lightbox="./images/waas-mcc-diag-overview.png":::
- -->
+
+## Next step
+
+>[!div class="nextstepaction"]
+>[Create MCC Azure resources](mcc-ent-create-resource-and-cache.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
index 6316cd5ee0..c48dd5e04b 100644
--- a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
@@ -135,7 +135,10 @@ To get the relevant information for provisioning script, use `az mcc ent node ge
 az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
 ```
 
-Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
+>[!IMPORTANT]
+>* Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
+>* In the output look for cacheNodeState. If **cacheNodeState = Not Provisioned**, you can continue with cache node provisioning.
+>* If **cacheNodeState = Not Configured**, then the cache node has not been configured. Please configure the cache node before provisioning.
 
 ### Example script:
 
@@ -197,6 +200,10 @@ for ($cacheNodeNumber = 1; $cacheNodeNumber -le $cacheNodesToCreate; $cacheNodeN
 
 ## Next step
 
-> [!div class="nextstepaction"]
-> [Deploy cache node to Linux host machine](mcc-ent-deploy-to-Linux.md)
-> [Deploy cache node to Windows host machine](mcc-ent-deploy-to-Windows.md)
+To deploy the cache node to a **Windows** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
+
+To deploy the cache node to a **Linux** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index bf1846c8a2..03c549f395 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -18,7 +18,7 @@ If you participated in the MCC early preview, thank you for your collaboration a
 
 To continue using MCC, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
 
-As such, we strongly recommend you [recreate your existing cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer. You don't need to re-create your MCC Azure resource.
+As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
 
 ## Next step
 
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
index c9e642b42f..4199588658 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -15,9 +15,6 @@ ms.date: 09/27/2024
 ---
 
 
-
-
-
 # Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCC)
 
 This article contains instructions on how to troubleshoot different issues you may encounter while using MCC. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
@@ -31,14 +28,10 @@ This article contains instructions on how to troubleshoot different issues you m
 
 MCC Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
 
-## Troubleshooting cache node creation
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
+## Troubleshooting cache node issue
+If you are facing issues with your cache node, it could be due to cache node being on the early preview version of MCC. Cache nodes belonging to early preview version will be under MCC resource that will have 'early preview' in its name. Please delete these cache nodes and associated MCC resource and create a new MCC resource on the new version.
+For detailed instructions on creating MCC resource, see [Create MCC Azure resources](mcc-ent-create-resource-and-cache.md)
 
-1. Step 1
-1. Step 2
-1. Step 3
 
 ## Troubleshooting cache node deployment
 TODO: Add introduction sentence(s)
@@ -66,6 +59,15 @@ Optional: You have two options for manually curated links in this pattern: Next
 
 -->
 
+## Diagnose and Solve
+
+If this article isn't resolving the issue you're facing with your cache node, you can use the **Diagnose and solve problems** functionality within your MCC resource to continue troubleshooting. **Diagnose and solve problems** contains solutions to most common problems that users might face as they onboard.
+
+You can find **Diagnose and solve problems** on the left pane within your MCC resource.
+
+Within **Diagnose and solve problems**, select **Troubleshoot** under the type of problem you're facing and follow the prompts that narrow down the solution to the issue.
+
+
 ## Filing a support request
 
 TODO: Add steps for filling out a CSS ticket.

From a57aafbcb22e3f236d812246861472e69da256e9 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Tue, 8 Oct 2024 13:11:33 -0700
Subject: [PATCH 055/128] fixed tabs

---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 2004d65f59..9a8e82b464 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -124,9 +124,7 @@ Enter required values to configure your cache node. To learn more about the defi
 Don't forget to select save after adding configuration information.
 
 
-# [Azure CLI](#tab/cli)
-
-# [Linux host OS](#tab/cli/linux)
+# [Azure CLI for MCC on Linux](#tab/linux)
 
 Use the following command to configure cache node for deployment to a **Linux** host machine.
 
@@ -159,7 +157,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 <br>
 
-# [Windows host OS](#tab/cli/windows)
+# [Azure CLI for MCC on Windows](#tab/windows)
 
 Use the following command to configure cache node for deployment to a **Windows** host machine.
 

From 88a3c7b03a3626382a597dd1f6e81e85be78fea4 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Tue, 8 Oct 2024 13:19:34 -0700
Subject: [PATCH 056/128] fixed tabs

---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 9a8e82b464..71b993ecbe 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -124,8 +124,9 @@ Enter required values to configure your cache node. To learn more about the defi
 Don't forget to select save after adding configuration information.
 
 
-# [Azure CLI for MCC on Linux](#tab/linux)
+# [Azure CLI](#tab/cli)
 
+### Configure Linux MCC
 Use the following command to configure cache node for deployment to a **Linux** host machine.
 
 Replace the following placeholders with your own information:
@@ -157,8 +158,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 <br>
 
-# [Azure CLI for MCC on Windows](#tab/windows)
-
+### Configure Windows MCC
 Use the following command to configure cache node for deployment to a **Windows** host machine.
 
 Replace the following placeholders with your own information:

From 2bc1d4311a3f44775dca215557d34b9a49b28b39 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 10 Oct 2024 13:14:36 -0700
Subject: [PATCH 057/128] content for faq

---
 .../do/mcc-ent-create-resource-and-cache.md   |  2 +-
 windows/deployment/do/mcc-ent-faq.yml         | 37 ++++++++++++++++++-
 2 files changed, 37 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 71b993ecbe..8d79298b6a 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -201,7 +201,7 @@ To deploy the cache node to a **Linux** host machine, see
 >[!div class="nextstepaction"]
 >[Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
 
-### [Azure CLI](#tab/cli/)
+### [Azure CLI](#tab/cli)
 To deploy cache nodes using Azure CLI, see 
 >[!div class="nextstepaction"]
 >[Manage cache nodes using CLI](mcc-ent-manage-cache-using-CLI.md)
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index e71b65ed36..76cf81ed74 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -24,4 +24,39 @@ sections:
   - name: Ignored
     questions:
       - question: Is this product a free service?
-        answer: Yes. Microsoft Connected Cache is a free service. 
+        answer: Yes. Microsoft Connected Cache is a free service.  
+      - question: Is there a non-disclosure agreement to sign?
+        answer: No, a non-disclosure agreement isn't required.
+      - question: What are the prerequisites and hardware requirements?
+        answer:  | 
+         - [Azure pay-as-you-go subscription](https://azure.microsoft.com/offers/ms-azr-0003p/).
+         - [Hardware to host Microsoft Connected Cache](mcc-ent-edu-overview.md)
+         - [Host machine requirements](mcc-ent-prerequisites.md)
+      - question: What host OS do I need to deploy MCC?
+        answer: You can use Linux or Windows OS. Please note, depending on the OS, the provisioning script and certain provisioning steps will be different. 
+      - question: What content is cached by Microsoft Connected Cache?
+        answer: For more information about content cached, see [Delivery Optimization and Microsoft Connected Cache content endpoints - Windows Deployment](delivery-optimization-endpoints.md).
+      - question: Do I need to provide hardware BareMetal server or VM?
+        answer: Microsoft Connected Cache is a software-only caching solution and requires you to provide your own server to host the software.   
+      - question: Can we use hard drives instead of SSDs?
+        answer: We highly recommend using SSDs as Microsoft Connected Cache is a read intensive application. We also recommend using multiple drives to improve performance.
+      - question: Where should we install Microsoft Connected Cache?
+        answer: You are in control of your hardware and you can pick the location based on your traffic and end clients. You can choose the location where you have your routers or where you have dense traffic or any other parameters.   
+      - question: How can I set up a gMSA account?
+        answer: Please see [Learn how to provision a Group Managed Service Account on a Domain Controller](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts#create-group-managed-service-accounts). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
+      - question: How can I set up a local account?
+        answer: Please see Learn how to provision a Local User Account(/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
+      - question: Where can I monitor cache node usage?
+        answer: You can monitor your cache node usage on Azure portal. For more information see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
+      - question: Does Microsoft Connected Cache support Xbox or Teams content?
+        answer: Currently, Microsoft Connected Cache doesn't support Xbox or Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
+      - question: How does Microsoft Connected Cache populate its content?
+        answer: Microsoft Connected Cache is a cold cache warmed by client requests. The client requests content and that is what fills up the cache. There's no off-peak cache fill necessary. Microsoft Connected Cache will reach out to different CDN providers just like a client device would. The traffic flow from Microsoft Connected Cache will vary depending on how you currently transit to each of these CDN providers. The content can come from third party CDNs or from AFD.
+      - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
+        answer: No. It is important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it is necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
+      - question: How do I set up CLI?
+        answer: Please see [How to install the Azure CLI | Microsoft Learn](https://learn.microsoft.com/azure/azure-cli/install).
+      - question: How do I install MCC extension?
+        answer: Please see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
+      - question: What do I do if I have to set up or change existing proxy?
+        answer: You can enable proxy and provide proxy information on Azure portal or use CLI. Don’t forget to re-run the provisioning script after making any proxy changes. Please see [Set up or change existing proxy](mcc-ent-proxy.md).
\ No newline at end of file

From a1fc2766cf32db39b649d43677ef58eb4dfcb730 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 10 Oct 2024 13:27:00 -0700
Subject: [PATCH 058/128] changes to landing page

---
 .../deployment/do/waas-microsoft-connected-cache.md    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/windows/deployment/do/waas-microsoft-connected-cache.md b/windows/deployment/do/waas-microsoft-connected-cache.md
index a1cd9a0ca8..2be96841a2 100644
--- a/windows/deployment/do/waas-microsoft-connected-cache.md
+++ b/windows/deployment/do/waas-microsoft-connected-cache.md
@@ -24,7 +24,7 @@ ms.date: 05/23/2024
 Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. Microsoft Connected Cache has two main offerings:
 
 - Microsoft Connected Cache for Internet Service Providers
-- Microsoft Connected Cache for Enterprise and Education (early preview)
+- Microsoft Connected Cache for Enterprise and Education (preview)
 
 Both products are created and managed in the cloud portal.
 
@@ -35,14 +35,14 @@ Both products are created and managed in the cloud portal.
 
 Microsoft Connected Cache (MCC) for Internet Service Providers is currently in preview. MCC can be deployed to as many bare-metal servers or VMs as needed and is managed from a cloud portal. When deployed, MCC can help to reduce your network bandwidth usage for Microsoft software content and updates. Cache nodes are created in the cloud portal and are configured to deliver traffic to customers by manual CIDR or BGP routing. Learn more at [Microsoft Connected Cache for ISPs Overview](mcc-isp-overview.md).
 
-## Microsoft Connected Cache for Enterprise and Education (early preview)
+## Microsoft Connected Cache for Enterprise and Education (preview)
 
 > [!NOTE]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
+> Microsoft Connected Cache (MCC) for Enterprise and Education is now in public preview. To get started, follow the instructions in the [Create Microsoft Connected Cache Azure resource and cache nodes](mcc-ent-create-resource-and-cache.md) article.
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be deployed to as many Windows servers, bare-metal servers, or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune. Learn more at [Microsoft Connected Cache for Enterprise and Education Overview](mcc-ent-edu-overview.md).
+Microsoft Connected Cache (MCC) for Enterprise and Education is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be deployed to as many Windows servers, bare-metal servers, or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune. Learn more at [Microsoft Connected Cache for Enterprise and Education Overview](mcc-ent-edu-overview.md).
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For Microsoft Connected Cache in Configuration Manager (generally available starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache)
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For Microsoft Connected Cache in Configuration Manager (generally available starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache)
 
 ## Next steps
 

From 8842ede9a2375df2db1e9dacad2e4cc771514354 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Thu, 10 Oct 2024 14:36:35 -0700
Subject: [PATCH 059/128] more content to faqs

---
 windows/deployment/do/mcc-ent-faq.yml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 76cf81ed74..8d397b0061 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -50,8 +50,10 @@ sections:
         answer: You can monitor your cache node usage on Azure portal. For more information see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
       - question: Does Microsoft Connected Cache support Xbox or Teams content?
         answer: Currently, Microsoft Connected Cache doesn't support Xbox or Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
-      - question: How does Microsoft Connected Cache populate its content?
-        answer: Microsoft Connected Cache is a cold cache warmed by client requests. The client requests content and that is what fills up the cache. There's no off-peak cache fill necessary. Microsoft Connected Cache will reach out to different CDN providers just like a client device would. The traffic flow from Microsoft Connected Cache will vary depending on how you currently transit to each of these CDN providers. The content can come from third party CDNs or from AFD.
+      - question: How does Microsoft Connected Cache populate its content? Can I pre-cache content?
+        answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there is no cache fill necessary. "Pre-seeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
+      - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
+        answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content will be in the hot cache path (open handles and such) for 24 hrs, but will reside on disk for 30 days. The drive fills up and nginx will start to delete content based on its own algorithm, probably some combination of least recently used.
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
         answer: No. It is important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it is necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
@@ -59,4 +61,12 @@ sections:
       - question: How do I install MCC extension?
         answer: Please see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
       - question: What do I do if I have to set up or change existing proxy?
-        answer: You can enable proxy and provide proxy information on Azure portal or use CLI. Don’t forget to re-run the provisioning script after making any proxy changes. Please see [Set up or change existing proxy](mcc-ent-proxy.md).
\ No newline at end of file
+        answer: You can enable proxy and provide proxy information on Azure portal or use CLI. Don’t forget to re-run the provisioning script after making any proxy changes. Please see [Set up or change existing proxy](mcc-ent-proxy.md).
+      - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
+        answer: Microsoft Connected Cache is not a service that has dependency on a specific Azure region, and there is not personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions  that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
+      - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?
+        answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability will be top priories for customers. Microsoft has provided guidance on both Active Directory/Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory - Microsoft Entra | Microsoft Learn)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security).
+      - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
+        answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task will remain running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS..
+      - question: What do I do if I need more support and have more questions even after reading this FAQ page?
+        answer: For further support for Microsoft Connected Cache, visit [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
\ No newline at end of file

From 89c60b2a7a1a74130a5e87cc8ce54bebdb480228 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 14 Oct 2024 14:47:48 -0700
Subject: [PATCH 060/128] edits and ren cli file temporarily

---
 windows/deployment/do/mcc-ent-faq.yml         | 24 +++++++++----------
 ...md => mcc-ent-manage-cache-using-cli-2.md} |  0
 2 files changed, 12 insertions(+), 12 deletions(-)
 rename windows/deployment/do/{mcc-ent-manage-cache-using-CLI.md => mcc-ent-manage-cache-using-cli-2.md} (100%)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 8d397b0061..02c5336d3d 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -35,7 +35,7 @@ sections:
       - question: What host OS do I need to deploy MCC?
         answer: You can use Linux or Windows OS. Please note, depending on the OS, the provisioning script and certain provisioning steps will be different. 
       - question: What content is cached by Microsoft Connected Cache?
-        answer: For more information about content cached, see [Delivery Optimization and Microsoft Connected Cache content endpoints - Windows Deployment](delivery-optimization-endpoints.md).
+        answer: For more information about content cached, see [Delivery Optimization and Microsoft Connected Cache content endpoints](delivery-optimization-endpoints.md).
       - question: Do I need to provide hardware BareMetal server or VM?
         answer: Microsoft Connected Cache is a software-only caching solution and requires you to provide your own server to host the software.   
       - question: Can we use hard drives instead of SSDs?
@@ -43,13 +43,13 @@ sections:
       - question: Where should we install Microsoft Connected Cache?
         answer: You are in control of your hardware and you can pick the location based on your traffic and end clients. You can choose the location where you have your routers or where you have dense traffic or any other parameters.   
       - question: How can I set up a gMSA account?
-        answer: Please see [Learn how to provision a Group Managed Service Account on a Domain Controller](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts#create-group-managed-service-accounts). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
+        answer: For more information about gMSA accounts, see [Learn how to provision a Group Managed Service Account on a Domain Controller](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts#create-group-managed-service-accounts). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
       - question: How can I set up a local account?
-        answer: Please see Learn how to provision a Local User Account(/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
+        answer: For more information, see [Learn how to provision a Local User Account](https://support.microsoft.com/topic/104dc19f-6430-4b49-6a2b-e4dbd1dcdf32). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
       - question: Where can I monitor cache node usage?
-        answer: You can monitor your cache node usage on Azure portal. For more information see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
-      - question: Does Microsoft Connected Cache support Xbox or Teams content?
-        answer: Currently, Microsoft Connected Cache doesn't support Xbox or Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
+        answer: You can monitor your cache node usage on Azure portal. For more information, see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
+      - question: Does Microsoft Connected Cache support Xbox or Microsoft Teams content?
+        answer: Currently, Microsoft Connected Cache doesn't support Xbox or Microsoft Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
       - question: How does Microsoft Connected Cache populate its content? Can I pre-cache content?
         answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there is no cache fill necessary. "Pre-seeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
       - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
@@ -57,16 +57,16 @@ sections:
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
         answer: No. It is important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it is necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
-        answer: Please see [How to install the Azure CLI | Microsoft Learn](https://learn.microsoft.com/azure/azure-cli/install).
+        answer: For more information, see [How to install the Azure CLI](https://learn.microsoft.com/azure/azure-cli/install).
       - question: How do I install MCC extension?
-        answer: Please see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
+        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
       - question: What do I do if I have to set up or change existing proxy?
-        answer: You can enable proxy and provide proxy information on Azure portal or use CLI. Don’t forget to re-run the provisioning script after making any proxy changes. Please see [Set up or change existing proxy](mcc-ent-proxy.md).
+        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to re-run the provisioning script after making any proxy changes. Please see [Set up or change existing proxy](mcc-ent-proxy.md).
       - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
-        answer: Microsoft Connected Cache is not a service that has dependency on a specific Azure region, and there is not personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions  that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
+        answer: Microsoft Connected Cache is not a service that has dependency on a specific Azure region, and there is not personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
       - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?
-        answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability will be top priories for customers. Microsoft has provided guidance on both Active Directory/Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory - Microsoft Entra | Microsoft Learn)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security).
+        answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability will be top priories for customers. Microsoft has provided guidance on both Active Directory and Microsoft Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security).
       - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
         answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task will remain running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS..
       - question: What do I do if I need more support and have more questions even after reading this FAQ page?
-        answer: For further support for Microsoft Connected Cache, visit [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
\ No newline at end of file
+        answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-CLI.md b/windows/deployment/do/mcc-ent-manage-cache-using-cli-2.md
similarity index 100%
rename from windows/deployment/do/mcc-ent-manage-cache-using-CLI.md
rename to windows/deployment/do/mcc-ent-manage-cache-using-cli-2.md

From 3e24d90cd1c6044898636ae6e75f49d50f116c01 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 14 Oct 2024 14:55:13 -0700
Subject: [PATCH 061/128] ren file back and edit toc to lowercase

---
 windows/deployment/do/TOC.yml                                   | 2 +-
 ...e-cache-using-cli-2.md => mcc-ent-manage-cache-using-cli.md} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename windows/deployment/do/{mcc-ent-manage-cache-using-cli-2.md => mcc-ent-manage-cache-using-cli.md} (100%)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 0f9b776ed3..5fdeb51d86 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -50,7 +50,7 @@
           - name: Deploy MCC to Windows
             href: mcc-ent-deploy-to-windows.md
         - name: Using CLI to create and manage cache nodes
-          href: mcc-ent-manage-cache-using-CLI.md 
+          href: mcc-ent-manage-cache-using-cli.md 
         - name: Verify cache node functionality
           href: mcc-ent-verify-cache-node.md
         - name: Monitor cache node
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-cli-2.md b/windows/deployment/do/mcc-ent-manage-cache-using-cli.md
similarity index 100%
rename from windows/deployment/do/mcc-ent-manage-cache-using-cli-2.md
rename to windows/deployment/do/mcc-ent-manage-cache-using-cli.md

From 351bd7b18934a48466d64d00c7bc9dff382fa0aa Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 14 Oct 2024 14:56:46 -0700
Subject: [PATCH 062/128] edit

---
 windows/deployment/do/mcc-ent-faq.yml | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 02c5336d3d..5d76891b55 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -25,18 +25,18 @@ sections:
     questions:
       - question: Is this product a free service?
         answer: Yes. Microsoft Connected Cache is a free service.  
-      - question: Is there a non-disclosure agreement to sign?
-        answer: No, a non-disclosure agreement isn't required.
+      - question: Is there a nondisclosure agreement to sign?
+        answer: No, a nondisclosure agreement isn't required.
       - question: What are the prerequisites and hardware requirements?
         answer:  | 
          - [Azure pay-as-you-go subscription](https://azure.microsoft.com/offers/ms-azr-0003p/).
          - [Hardware to host Microsoft Connected Cache](mcc-ent-edu-overview.md)
          - [Host machine requirements](mcc-ent-prerequisites.md)
       - question: What host OS do I need to deploy MCC?
-        answer: You can use Linux or Windows OS. Please note, depending on the OS, the provisioning script and certain provisioning steps will be different. 
+        answer: You can use Linux or Windows OS. Depending on the OS, the provisioning script and certain provisioning steps are different. 
       - question: What content is cached by Microsoft Connected Cache?
         answer: For more information about content cached, see [Delivery Optimization and Microsoft Connected Cache content endpoints](delivery-optimization-endpoints.md).
-      - question: Do I need to provide hardware BareMetal server or VM?
+      - question: Do I need to provide hardware BareMetal server or a virtual machine (VM)?
         answer: Microsoft Connected Cache is a software-only caching solution and requires you to provide your own server to host the software.   
       - question: Can we use hard drives instead of SSDs?
         answer: We highly recommend using SSDs as Microsoft Connected Cache is a read intensive application. We also recommend using multiple drives to improve performance.
@@ -50,23 +50,23 @@ sections:
         answer: You can monitor your cache node usage on Azure portal. For more information, see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
       - question: Does Microsoft Connected Cache support Xbox or Microsoft Teams content?
         answer: Currently, Microsoft Connected Cache doesn't support Xbox or Microsoft Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
-      - question: How does Microsoft Connected Cache populate its content? Can I pre-cache content?
-        answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there is no cache fill necessary. "Pre-seeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
+      - question: How does Microsoft Connected Cache populate its content? Can I precache content?
+        answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there's no cache fill necessary. "Preseeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
       - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
-        answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content will be in the hot cache path (open handles and such) for 24 hrs, but will reside on disk for 30 days. The drive fills up and nginx will start to delete content based on its own algorithm, probably some combination of least recently used.
+        answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content is in the hot cache path (open handles and such) for 24 hrs, but will reside on disk for 30 days. The drive fills up and nginx starts to delete content based on its own algorithm, probably some combination of least recently used.
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
-        answer: No. It is important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it is necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
+        answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
-        answer: For more information, see [How to install the Azure CLI](https://learn.microsoft.com/azure/azure-cli/install).
+        answer: For more information, see [How to install the Azure CLI](/azure/azure-cli/install).
       - question: How do I install MCC extension?
         answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
       - question: What do I do if I have to set up or change existing proxy?
-        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to re-run the provisioning script after making any proxy changes. Please see [Set up or change existing proxy](mcc-ent-proxy.md).
+        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-proxy.md).
       - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
-        answer: Microsoft Connected Cache is not a service that has dependency on a specific Azure region, and there is not personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
+        answer: Microsoft Connected Cache isn't a service that has dependency on a specific Azure region, and there isn't personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
       - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?
-        answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability will be top priories for customers. Microsoft has provided guidance on both Active Directory and Microsoft Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security).
+        answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability are top priories for customers. Microsoft provides guidance on both Active Directory and Microsoft Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security)).
       - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
-        answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task will remain running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS..
+        answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task remains running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS.
       - question: What do I do if I need more support and have more questions even after reading this FAQ page?
         answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
\ No newline at end of file

From 000d7165c95472e3a052f5971b869db622ce6256 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 14 Oct 2024 14:59:50 -0700
Subject: [PATCH 063/128] edit

---
 windows/deployment/do/mcc-ent-faq.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 5d76891b55..cac4ec28ff 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -57,7 +57,7 @@ sections:
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
         answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
-        answer: For more information, see [How to install the Azure CLI](/azure/azure-cli/install).
+        answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
       - question: How do I install MCC extension?
         answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
       - question: What do I do if I have to set up or change existing proxy?

From 53b7a050228c93b0da3c990e5c2979ab63a0b15c Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 14 Oct 2024 15:17:30 -0700
Subject: [PATCH 064/128] edit

---
 windows/deployment/do/mcc-ent-faq.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index cac4ec28ff..390275b4b8 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -55,7 +55,7 @@ sections:
       - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
         answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content is in the hot cache path (open handles and such) for 24 hrs, but will reside on disk for 30 days. The drive fills up and nginx starts to delete content based on its own algorithm, probably some combination of least recently used.
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
-        answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft has validated updates prior to releasing Microsoft releasing to Enterprises Connected Cache updates and will only release updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
+        answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft validates updates prior to releasing Enterprises Connected Cache updates and will only release updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
         answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
       - question: How do I install MCC extension?

From 3dbff05a43dd01b8c6b22de3fda7dc12a636feb1 Mon Sep 17 00:00:00 2001
From: mahi-choudhary <146124087+mahi-choudhary@users.noreply.github.com>
Date: Tue, 15 Oct 2024 17:10:32 -0700
Subject: [PATCH 065/128] Update appcontrol.md

excluding the Smart App Control Enforced Blocks as these were originally blocked by SAC, but some are removed due to app compat issues
---
 .../app-control-for-business/appcontrol.md               | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/windows/security/application-security/application-control/app-control-for-business/appcontrol.md b/windows/security/application-security/application-control/app-control-for-business/appcontrol.md
index 561da483b6..222af15272 100644
--- a/windows/security/application-security/application-control/app-control-for-business/appcontrol.md
+++ b/windows/security/application-security/application-control/app-control-for-business/appcontrol.md
@@ -43,15 +43,6 @@ Smart App Control is only available on clean installation of Windows 11 version
 > [!IMPORTANT]
 > Once you turn Smart App Control off, it can't be turned on without resetting or reinstalling Windows.
 
-### Smart App Control Enforced Blocks
-
-Smart App Control enforces the [Microsoft Recommended Driver Block rules](design/microsoft-recommended-driver-block-rules.md) and the [Microsoft Recommended Block Rules](design/applications-that-can-bypass-appcontrol.md), with a few exceptions for compatibility considerations. The following aren't blocked by Smart App Control:
-
-- Infdefaultinstall.exe
-- Microsoft.Build.dll
-- Microsoft.Build.Framework.dll
-- Wslhost.dll
-
 [!INCLUDE [windows-defender-application-control-wdac](../../../../../includes/licensing/windows-defender-application-control-wdac.md)]
 
 ## Related articles

From ef1c69b439b9e4f35651cf487a01acb8635da6a4 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 17 Oct 2024 11:34:07 -0700
Subject: [PATCH 066/128] Release mcc ent (#1)

* smb adds

* smb adds

* formatting

* private preview and support content

* edit removed and dep

* Fix blocking issues

* Acro-fix

* 24H2 CSP Updates

* Fix link

* fix link in dep page

* edit

* edit index file

* syntax-fix-24h2

* ltsc-edits

* ltsc-edits

* lichris-docs-1

* Acrolinx improvements

* refresh for maxado-8631996

* update link for maxado-8631993

* additional edits, acrolinx

* ltsc-tw

* contentsource-8914508

* contentsource-8914508

* Updates for 1 October release

* Set stale debug to false

* update gp link for 24h2

* additional changes

* Changes to updates, acrolinx changes

* fixes broken links

* Fixed alignment issues

* updates from Rafal

* fixed acrolinx

* so many link fixes

* added release notes and troubleshoot content

* updates

* Update security-compliance-toolkit-10.md

Added Windows 11 24H2

* Update get-support-for-security-baselines.md

Updated for Windows 11 24H2

* bump date

* bump date

* fix pde comment

* fixing broken link

* Fix broken redirections

* fix to rel link

* reset head, fix link

* add cli to deploy, add script to cli

* removing "mcce"

* edits to create page

* Update default and global release policies OS version and dates to latest release values

* emoved e from mcce and other changes

* updated example script

* added important notice to update page

* more update page changes

* clarified how proxy configuration is used

* anonymizing variables in example script

* revise example script

* acrolinx fixes to update page

* changes to other pages and content in overview page

* Update broken link

Update broken link

* Update windows-sandbox-configure-using-wsb-file.md

Update `HostFolder` value description in `MappedFolder`, specifying that the path could be absolute or relative, not only absolute as, instead, is for the `SandboxFolder` value.

* Remove bad link

Removed bad link. There is already a second link referring to content so no need to replace the link.

* docfx update for security book

* Correct TOC entry changing Windows 10 to Windows

* Update whats-new-do.md

- Vpn to VPN
- Minor improvements

* Updated date for freshness reporting

* Add EOS callout

Fix some obvious Acrolinx issues

* Fixed typo added clarity

* Update mcc-ent-deploy-to-windows.md

* Update .openpublishing.redirection.windows-deployment.json

* Update .openpublishing.redirection.windows-deployment.json

* Update policy-csp-localpoliciessecurityoptions.md

* Correct indentation and spacing

* Acrolinx: "Enteprise"

* Update mcc-ent-edu-overview.md

* refresh

* Remove redirection and final bits of store-for-business

store-for-business, AKA /microsoft-store/, is retired, and the content is archived in officearchive-pr. This archival was for ADO task 9268422.

* added support content and other changes

* fixed tabs

* fixed tabs

* Updated device reg policy and group information

* Update delivery-optimization-endpoints.md

Added a line item in MCC table for Outlook *res.cdn.office.net requirement

* freshness review

* Fix broken links

* Minor change

* content for faq

* changes to landing page

* more content to faqs

* pencil edit

* add copilot exps link

* edits and ren cli file temporarily

* ren file back and edit toc to lowercase

* edit

* edit

* edit

* Update windows-autopatch-configure-network.md

Adding a new network endpoint required for the service 'device.autopatch.microsoft.com' @tiaraquan

* Clarify some points and remove data that is confusing to customers.

* fix syntax

* Sentence correction

* Update windows/deployment/do/waas-delivery-optimization-faq.yml

Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com>

* Update windows/deployment/do/waas-delivery-optimization-faq.yml

Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com>

* moved shortcuts under policy settings article

---------

Co-authored-by: Alma Jenks <v-alje@microsoft.com>
Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Co-authored-by: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com>
Co-authored-by: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Co-authored-by: Gary Moore <5432776+garycentric@users.noreply.github.com>
Co-authored-by: Vinay Pamnani (from Dev Box) <vinpa@microsoft.com>
Co-authored-by: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Co-authored-by: Aaron Czechowski <aczechowski@users.noreply.github.com>
Co-authored-by: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com>
Co-authored-by: Daniel H. Brown <32883970+DHB-MSFT@users.noreply.github.com>
Co-authored-by: David Strome <21028455+dstrome@users.noreply.github.com>
Co-authored-by: Padma Jayaraman <v-padmaj@microsoft.com>
Co-authored-by: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Co-authored-by: Rebecca Agiewich <16087112+rjagiewich@users.noreply.github.com>
Co-authored-by: Rick Munck <33725928+jmunck@users.noreply.github.com>
Co-authored-by: Tanaka <Huios@users.noreply.github.com>
Co-authored-by: Tiara Quan <95256667+tiaraquan@users.noreply.github.com>
Co-authored-by: Frank Rojas <45807133+frankroj@users.noreply.github.com>
Co-authored-by: Davide Piccinini <davide.piccinini.95@gmail.com>
Co-authored-by: Phil Garcia <phil@thinkedge.com>
Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com>
Co-authored-by: tiaraquan <tiaraquan@microsoft.com>
Co-authored-by: Caitlin Hart <caithart@microsoft.com>
Co-authored-by: Harman Thind <63820404+hathin@users.noreply.github.com>
Co-authored-by: [cmknox] <[cmknox@gmail.com]>
Co-authored-by: Carmen Forsmann <cmforsmann@live.com>
---
 .github/workflows/Stale.yml                   |    2 +-
 .openpublishing.publish.config.json           |    1 -
 ...ishing.redirection.store-for-business.json |  299 --
 ...ishing.redirection.windows-deployment.json |   15 +
 ...blishing.redirection.windows-security.json | 4633 ++++++++++-------
 education/windows/index.yml                   |   12 +-
 education/windows/windows-11-se-faq.yml       |    6 +-
 education/windows/windows-11-se-overview.md   |    6 +-
 .../windows/windows-11-se-settings-list.md    |    2 +-
 ...ndows-defender-application-control-wdac.md |    6 +-
 store-for-business/breadcrumb/toc.yml         |    7 -
 store-for-business/docfx.json                 |   81 -
 windows/application-management/index.yml      |    2 +-
 .../per-user-services-in-windows.md           |   22 +-
 .../sideload-apps-in-windows.md               |    2 +-
 .../manage-windows-copilot.md                 |    2 +-
 .../mdm/applicationcontrol-csp.md             |    8 +-
 .../mdm/clouddesktop-ddf-file.md              |    6 +-
 .../mdm/configuration-service-provider-ddf.md |    4 +-
 windows/client-management/mdm/defender-csp.md |    6 +-
 windows/client-management/mdm/defender-ddf.md |    6 +-
 windows/client-management/mdm/firewall-csp.md |    4 +-
 windows/client-management/mdm/index.yml       |   10 +-
 windows/client-management/mdm/laps-csp.md     |   16 +-
 .../client-management/mdm/laps-ddf-file.md    |   14 +-
 windows/client-management/mdm/office-csp.md   |    6 +-
 .../mdm/personalization-ddf.md                |    4 +-
 ...es-in-policy-csp-supported-by-hololens2.md |    1 -
 .../mdm/policies-in-preview.md                |  169 +-
 .../policy-configuration-service-provider.md  |    3 +-
 .../mdm/policy-csp-admx-appxpackagemanager.md |    8 +-
 .../mdm/policy-csp-admx-appxruntime.md        |   24 +-
 .../policy-csp-admx-controlpaneldisplay.md    |    4 +-
 .../mdm/policy-csp-admx-deviceguard.md        |    8 +-
 .../mdm/policy-csp-admx-dnsclient.md          |   96 +-
 .../mdm/policy-csp-admx-filesys.md            |    4 +-
 ...icy-csp-admx-microsoftdefenderantivirus.md |   30 +-
 .../mdm/policy-csp-admx-netlogon.md           |    4 +-
 .../mdm/policy-csp-admx-printing.md           |    4 +-
 .../mdm/policy-csp-admx-startmenu.md          |    4 +-
 .../mdm/policy-csp-admx-taskbar.md            |   12 +-
 .../mdm/policy-csp-admx-terminalserver.md     |    4 +-
 .../mdm/policy-csp-admx-thumbnails.md         |   11 +-
 .../mdm/policy-csp-admx-windowsexplorer.md    |   18 +-
 .../mdm/policy-csp-admx-wpn.md                |    4 +-
 .../mdm/policy-csp-appdeviceinventory.md      |  100 +-
 .../mdm/policy-csp-applicationmanagement.md   |   10 +-
 .../mdm/policy-csp-appruntime.md              |    6 +-
 .../mdm/policy-csp-appvirtualization.md       |    5 +-
 .../client-management/mdm/policy-csp-audit.md |    4 +-
 .../mdm/policy-csp-cryptography.md            |   16 +-
 .../mdm/policy-csp-defender.md                |    4 +-
 .../mdm/policy-csp-desktopappinstaller.md     |   74 +-
 .../mdm/policy-csp-devicelock.md              |   22 +-
 .../mdm/policy-csp-experience.md              |   19 +-
 .../mdm/policy-csp-fileexplorer.md            |    4 +-
 .../mdm/policy-csp-humanpresence.md           |   12 +-
 .../mdm/policy-csp-internetexplorer.md        |   25 +-
 .../mdm/policy-csp-lanmanworkstation.md       |    4 +-
 ...policy-csp-localpoliciessecurityoptions.md |   70 +-
 .../client-management/mdm/policy-csp-lsa.md   |    6 +-
 .../mdm/policy-csp-mssecurityguide.md         |    6 +-
 .../mdm/policy-csp-networklistmanager.md      |   16 +-
 .../mdm/policy-csp-notifications.md           |    6 +-
 .../mdm/policy-csp-printers.md                |   34 +-
 .../mdm/policy-csp-privacy.md                 |  203 +-
 .../mdm/policy-csp-remotedesktopservices.md   |   98 +-
 .../mdm/policy-csp-search.md                  |   14 +-
 .../mdm/policy-csp-settingssync.md            |    8 +-
 .../mdm/policy-csp-smartscreen.md             |   57 +-
 .../mdm/policy-csp-speakforme.md              |   79 +
 .../client-management/mdm/policy-csp-sudo.md  |   27 +-
 .../mdm/policy-csp-system.md                  |   20 +-
 .../mdm/policy-csp-systemservices.md          |   36 +-
 .../mdm/policy-csp-tenantrestrictions.md      |    6 +-
 .../mdm/policy-csp-update.md                  |  413 +-
 .../mdm/policy-csp-userrights.md              |   28 +-
 .../mdm/policy-csp-webthreatdefense.md        |    6 +-
 .../mdm/policy-csp-windowsai.md               |   73 +-
 .../mdm/policy-csp-windowslogon.md            |   10 +-
 .../mdm/policy-csp-windowssandbox.md          |   52 +-
 windows/client-management/mdm/toc.yml         |   16 +-
 .../configuration/assigned-access/overview.md |   29 -
 .../assigned-access/policy-settings.md        |   29 +
 .../provision-pcs-with-apps.md                |    2 +-
 windows/deployment/TOC.yml                    |    2 +-
 windows/deployment/do/TOC.yml                 |   38 +-
 .../do/delivery-optimization-endpoints.md     |    1 +
 .../do/images/mcc_ent_publicpreview.png       |  Bin 0 -> 262725 bytes
 .../do/mcc-ent-create-resource-and-cache.md   |  266 +
 .../deployment/do/mcc-ent-deploy-to-linux.md  |   60 +
 .../do/mcc-ent-deploy-to-windows.md           |   70 +
 windows/deployment/do/mcc-ent-edu-overview.md |   92 +-
 windows/deployment/do/mcc-ent-faq.yml         |   72 +
 .../do/mcc-ent-manage-cache-using-cli.md      |  209 +
 windows/deployment/do/mcc-ent-monitoring.md   |   61 +
 .../deployment/do/mcc-ent-prerequisites.md    |   72 +
 .../deployment/do/mcc-ent-private-preview.md  |   26 +
 .../deployment/do/mcc-ent-release-notes.md    |   40 +
 .../do/mcc-ent-support-and-troubleshooting.md |   73 +
 .../do/mcc-ent-uninstall-cache-node.md        |   35 +
 .../do/mcc-ent-update-cache-node.md           |   58 +
 .../do/mcc-ent-verify-cache-node.md           |   46 +
 .../deployment/do/mcc-enterprise-appendix.md  |  138 -
 .../deployment/do/mcc-enterprise-deploy.md    |  418 --
 .../do/mcc-enterprise-prerequisites.md        |   61 -
 .../do/mcc-enterprise-update-uninstall.md     |   55 -
 .../do/waas-delivery-optimization-faq.yml     |    8 +-
 .../waas-delivery-optimization-reference.md   |    8 +-
 .../do/waas-microsoft-connected-cache.md      |   10 +-
 windows/deployment/do/whats-new-do.md         |    4 +-
 .../deployment/update/fod-and-lang-packs.md   |    8 +-
 windows/deployment/update/waas-restart.md     |    4 +-
 .../upgrade/windows-edition-upgrades.md       |    4 +-
 .../usmt-recognized-environment-variables.md  |    4 +-
 ...-autopatch-device-registration-overview.md |    4 +-
 ...topatch-windows-feature-update-policies.md |   32 +-
 ...tch-windows-quality-update-end-user-exp.md |   10 +-
 .../windows-autopatch-configure-network.md    |    2 +-
 .../windows-autopatch-whats-new-2023.md       |    2 +-
 .../windows-enterprise-e3-overview.md         |    1 -
 windows/hub/index.yml                         |   12 +-
 ...ndows-diagnostic-events-and-fields-1809.md |   33 +-
 windows/privacy/index.yml                     |    2 +-
 ...iagnostic-events-fields-windows-11-22H2.md |  204 +-
 ...iagnostic-events-fields-windows-11-24H2.md | 4266 +++++++++++++++
 ...windows-11-diagnostic-events-and-fields.md |   62 +-
 ...-diagnostic-data-events-and-fields-2004.md |   57 +-
 windows/privacy/toc.yml                       |    2 +
 .../appcontrol-appid-tagging-guide.md}        |   15 +-
 ...perational-guide-appid-tagging-policies.md |    9 +-
 .../deploy-appid-tagging-policies.md          |   23 +-
 .../design-create-appid-tagging-policies.md   |  102 +
 .../TOC.yml                                   |  180 +-
 .../appcontrol-and-applocker-overview.md      |   64 +
 .../appcontrol.md}                            |   21 +-
 ...ged-apps-to-existing-applocker-rule-set.md |    2 +-
 .../applocker/administer-applocker.md         |    6 +-
 .../applocker-architecture-and-components.md  |    2 +-
 .../applocker/applocker-functions.md          |    2 +-
 .../applocker/applocker-overview.md           |   10 +-
 .../applocker-policies-deployment-guide.md    |    2 +-
 .../applocker-policies-design-guide.md        |    6 +-
 .../applocker-policy-use-scenarios.md         |    2 +-
 .../applocker-processes-and-interactions.md   |    7 +-
 .../applocker-technical-reference.md          |    2 +-
 ...gure-an-applocker-policy-for-audit-only.md |    2 +-
 ...e-an-applocker-policy-for-enforce-rules.md |    2 +-
 ...figure-exceptions-for-an-applocker-rule.md |    2 +-
 ...onfigure-the-appLocker-reference-device.md |    2 +-
 ...figure-the-application-identity-service.md |    2 +-
 .../create-a-rule-for-packaged-apps.md        |    2 +-
 ...-a-rule-that-uses-a-file-hash-condition.md |    2 +-
 ...reate-a-rule-that-uses-a-path-condition.md |    2 +-
 ...-a-rule-that-uses-a-publisher-condition.md |    2 +-
 .../create-applocker-default-rules.md         |    2 +-
 ...cations-deployed-to-each-business-group.md |    6 +-
 .../create-your-applocker-policies.md         |    4 +-
 .../applocker/create-your-applocker-rules.md  |    2 +-
 .../applocker/delete-an-applocker-rule.md     |    2 +-
 ...cies-by-using-the-enforce-rules-setting.md |    6 +-
 ...oy-the-applocker-policy-into-production.md |    2 +-
 ...p-policy-structure-and-rule-enforcement.md |    4 +-
 ...igitally-signed-on-a-reference-computer.md |    2 +-
 ...-users-try-to-run-a-blocked-application.md |    2 +-
 .../applocker/dll-rules-in-applocker.md       |    2 +-
 ...tructure-and-applocker-rule-enforcement.md |    4 +-
 .../document-your-application-list.md         |    4 +-
 .../document-your-applocker-rules.md          |    2 +-
 .../applocker/edit-an-applocker-policy.md     |    2 +-
 .../applocker/edit-applocker-rules.md         |    2 +-
 .../enable-the-dll-rule-collection.md         |    2 +-
 .../applocker/enforce-applocker-rules.md      |    2 +-
 .../executable-rules-in-applocker.md          |    2 +-
 .../export-an-applocker-policy-from-a-gpo.md  |    2 +-
 ...port-an-applocker-policy-to-an-xml-file.md |    2 +-
 .../applocker/how-applocker-works-techref.md  |    2 +-
 .../images/applocker-plan-inheritance.gif     |  Bin
 .../applocker-plandeploy-quickreference.gif   |  Bin
 .../applocker/images/blockedappmsg.gif        |  Bin
 ...-applocker-policy-from-another-computer.md |    2 +-
 .../import-an-applocker-policy-into-a-gpo.md  |    2 +-
 .../applocker/maintain-applocker-policies.md  |    2 +-
 .../manage-packaged-apps-with-applocker.md    |    2 +-
 ...r-policies-by-using-set-applockerpolicy.md |    4 +-
 .../merge-applocker-policies-manually.md      |    4 +-
 ...onitor-application-usage-with-applocker.md |    2 +-
 .../optimize-applocker-performance.md         |    2 +-
 ...ckaged-app-installer-rules-in-applocker.md |    2 +-
 .../plan-for-applocker-policy-management.md   |    6 +-
 .../applocker/refresh-an-applocker-policy.md  |    2 +-
 ...ements-for-deploying-applocker-policies.md |    2 +-
 .../requirements-to-use-applocker.md          |    2 +-
 .../applocker/rule-collection-extensions.md   |    4 +-
 ...the-automatically-generate-rules-wizard.md |    2 +-
 .../applocker/script-rules-in-applocker.md    |    2 +-
 .../security-considerations-for-applocker.md  |    2 +-
 .../select-types-of-rules-to-create.md        |    2 +-
 ...er-policy-by-using-test-applockerpolicy.md |    2 +-
 .../test-and-update-an-applocker-policy.md    |    2 +-
 .../applocker/tools-to-use-with-applocker.md  |    2 +-
 ...stand-applocker-policy-design-decisions.md |    2 +-
 ...ent-setting-inheritance-in-group-policy.md |    4 +-
 ...the-applocker-policy-deployment-process.md |    2 +-
 ...plocker-allow-and-deny-actions-on-rules.md |    2 +-
 .../understanding-applocker-default-rules.md  |    8 +-
 .../understanding-applocker-rule-behavior.md  |    2 +-
 ...nderstanding-applocker-rule-collections.md |    2 +-
 ...standing-applocker-rule-condition-types.md |    2 +-
 ...understanding-applocker-rule-exceptions.md |    6 +-
 ...e-file-hash-rule-condition-in-applocker.md |    2 +-
 ...ng-the-path-rule-condition-in-applocker.md |    2 +-
 ...e-publisher-rule-condition-in-applocker.md |    2 +-
 ...-create-and-maintain-applocker-policies.md |    2 +-
 ...he-applocker-windows-powershell-cmdlets.md |    2 +-
 .../using-event-viewer-with-applocker.md      |    2 +-
 .../applocker/what-is-applocker.md            |    4 +-
 .../windows-installer-rules-in-applocker.md   |    2 +-
 .../working-with-applocker-policies.md        |    2 +-
 .../applocker/working-with-applocker-rules.md |    2 +-
 .../deployment/appcontrol-deployment-guide.md |   55 +
 .../deployment/audit-appcontrol-policies.md   |   60 +
 ...reate-code-signing-cert-for-appcontrol.md} |   23 +-
 ...-appcontrol-policies-using-group-policy.md |   58 +
 ...deploy-appcontrol-policies-using-intune.md |   89 +
 .../deploy-appcontrol-policies-with-memcm.md  |   81 +
 .../deploy-appcontrol-policies-with-script.md |  104 +
 ...oy-catalog-files-to-support-appcontrol.md} |   43 +-
 .../disable-appcontrol-policies.md}           |   73 +-
 .../enforce-appcontrol-policies.md}           |   33 +-
 .../deployment/merge-appcontrol-policies.md}  |   41 +-
 ...gning-for-better-control-and-protection.md |   23 +-
 ...o-protect-appcontrol-against-tampering.md} |   35 +-
 ...ject-registration-in-appcontrol-policy.md} |   23 +-
 .../design/appcontrol-and-dotnet.md           |   47 +
 .../design/appcontrol-design-guide.md         |   36 +
 .../appcontrol-wizard-create-base-policy.md}  |   55 +-
 ...trol-wizard-create-supplemental-policy.md} |   41 +-
 .../appcontrol-wizard-editing-policy.md       |   56 +
 .../appcontrol-wizard-merging-policies.md     |   20 +
 .../appcontrol-wizard-parsing-event-logs.md   |  115 +
 .../design/appcontrol-wizard.md               |   35 +
 ...pplications-that-can-bypass-appcontrol.md} |   23 +-
 .../design/common-appcontrol-use-cases.md     |   36 +
 ...-apps-deployed-with-a-managed-installer.md |   37 +-
 .../design/create-appcontrol-deny-policy.md}  |   24 +-
 ...ontrol-policy-for-fully-managed-devices.md |  155 +
 ...rol-policy-for-lightly-managed-devices.md} |   43 +-
 ...control-policy-using-reference-computer.md |  124 +
 .../deploy-multiple-appcontrol-policies.md}   |   23 +-
 .../example-appcontrol-base-policies.md}      |   33 +-
 .../manage-packaged-apps-with-appcontrol.md}  |   39 +-
 ...icrosoft-recommended-driver-block-rules.md |   25 +-
 .../design/plan-appcontrol-management.md      |   88 +
 .../design/script-enforcement.md              |   62 +
 .../design/select-types-of-rules-to-create.md |  101 +-
 ...and-appcontrol-policy-design-decisions.md} |   51 +-
 ...nderstanding-appcontrol-policy-settings.md |   72 +
 ...l-specific-plug-ins-add-ins-and-modules.md |   32 +
 ...control-with-intelligent-security-graph.md |   96 +
 .../feature-availability.md                   |   30 +
 .../images/appcontrol-edit-gp.png}            |  Bin
 .../appcontrol-intune-custom-oma-uri.png}     |  Bin
 ...zard-confirm-base-policy-modification.png} |  Bin
 ...rol-wizard-custom-file-attribute-rule.png} |  Bin
 ...control-wizard-custom-manual-pfn-rule.png} |  Bin
 .../appcontrol-wizard-custom-pfn-rule.png}    |  Bin
 ...pcontrol-wizard-custom-publisher-rule.png} |  Bin
 .../appcontrol-wizard-edit-policy-rules.png}  |  Bin
 ...pcontrol-wizard-edit-remove-file-rule.png} |  Bin
 ...ntrol-wizard-event-log-files-expanded.png} |  Bin
 .../appcontrol-wizard-event-log-files.png}    |  Bin
 ...zard-event-log-mde-ah-export-expanded.png} |  Bin
 ...ontrol-wizard-event-log-mde-ah-export.png} |  Bin
 ...ard-event-log-mde-ah-parsing-expanded.png} |  Bin
 ...ntrol-wizard-event-log-mde-ah-parsing.png} |  Bin
 ...trol-wizard-event-log-system-expanded.png} |  Bin
 .../appcontrol-wizard-event-log-system.png}   |  Bin
 ...l-wizard-event-rule-creation-expanded.png} |  Bin
 ...appcontrol-wizard-event-rule-creation.png} |  Bin
 .../images/appcontrol-wizard-merge.png}       |  Bin
 ...rd-rule-options-UI-advanced-collapsed.png} |  Bin
 .../appcontrol-wizard-rule-options-UI.png}    |  Bin
 ...ontrol-wizard-supplemental-expandable.png} |  Bin
 ...pcontrol-wizard-supplemental-not-base.png} |  Bin
 ...d-supplemental-policy-rule-options-UI.png} |  Bin
 .../appcontrol-wizard-template-selection.png} |  Bin
 .../images/appid-appcontrol-wizard-1.png}     |  Bin
 .../images/appid-appcontrol-wizard-2.png}     |  Bin
 .../images/appid-pid-task-mgr.png             |  Bin
 .../images/appid-pid-windbg-token.png         |  Bin
 .../images/appid-pid-windbg.png               |  Bin
 .../images/bit-toggling-keyboard-icon.png     |  Bin
 .../images/calculator-menu-icon.png           |  Bin
 .../images/calculator-with-hex-in-binary.png  |  Bin
 .../images/dg-fig12-verifysigning.png         |  Bin
 .../images/dg-fig13-createnewgpo.png          |  Bin
 .../images/dg-fig14-createnewfile.png         |  Bin
 .../images/dg-fig15-setnewfileprops.png       |  Bin
 .../images/dg-fig16-specifyinfo.png           |  Bin
 .../images/dg-fig17-specifyinfo.png           |  Bin
 .../images/dg-fig18-specifyux.png             |  Bin
 .../images/dg-fig19-customsettings.png        |  Bin
 .../images/dg-fig20-setsoftwareinv.png        |  Bin
 .../images/dg-fig21-pathproperties.png        |  Bin
 .../images/dg-fig23-exceptionstocode.png      |  Bin
 .../images/dg-fig24-creategpo.png             |  Bin
 .../images/dg-fig26-enablecode.png            |  Bin
 .../images/dg-fig27-managecerttemp.png        |  Bin
 .../images/dg-fig29-enableconstraints.png     |  Bin
 .../images/dg-fig30-selectnewcert.png         |  Bin
 .../images/dg-fig31-getmoreinfo.png           |  Bin
 .../images/event-3077.png                     |  Bin
 .../images/event-3089.png                     |  Bin
 .../images/event-3099-options.png             |  Bin
 .../images/hex-icon.png                       |  Bin
 .../images/known-issue-appid-dll-rule-xml.png |  Bin
 .../images/known-issue-appid-dll-rule.png     |  Bin
 .../memcm/memcm-confirm-appcontrol-rule.jpg}  |  Bin
 .../memcm-create-appcontrol-policy-2.jpg}     |  Bin
 .../memcm/memcm-create-appcontrol-policy.jpg} |  Bin
 .../memcm/memcm-create-appcontrol-rule-2.jpg} |  Bin
 .../memcm/memcm-create-appcontrol-rule-3.jpg} |  Bin
 .../memcm/memcm-create-appcontrol-rule.jpg}   |  Bin
 .../memcm/memcm-deploy-appcontrol-2.jpg}      |  Bin
 .../memcm/memcm-deploy-appcontrol-3.jpg}      |  Bin
 .../memcm/memcm-deploy-appcontrol-4.jpg}      |  Bin
 .../images/memcm/memcm-deploy-appcontrol.jpg} |  Bin
 .../images/policyflow.png                     |  Bin
 .../includes/feature-availability-note.md     |    9 +
 .../index.yml                                 |   86 +-
 ...pcontrol-debugging-and-troubleshooting.md} |  119 +-
 .../appcontrol-operational-guide.md           |   26 +
 .../operations/citool-commands.md             |   36 +-
 ...configure-appcontrol-managed-installer.md} |   13 +-
 .../operations/event-id-explanations.md       |  161 +
 .../operations/event-tag-explanations.md      |   20 +-
 .../operations/inbox-appcontrol-policies.md}  |   19 +-
 .../operations/known-issues.md                |  104 +
 ...events-centrally-using-advanced-hunting.md |   34 +-
 ...nd-windows-defender-application-control.md |   43 -
 ...alization-based-security-and-appcontrol.md |   43 +
 .../application-control/toc.yml               |   13 +-
 .../design-create-appid-tagging-policies.md   |  104 -
 .../deployment/audit-wdac-policies.md         |   61 -
 ...deploy-wdac-policies-using-group-policy.md |   59 -
 .../deploy-wdac-policies-using-intune.md      |   90 -
 .../deploy-wdac-policies-with-memcm.md        |   82 -
 .../deploy-wdac-policies-with-script.md       |  105 -
 .../deployment/wdac-deployment-guide.md       |   56 -
 .../design/common-wdac-use-cases.md           |   37 -
 ...e-wdac-policy-for-fully-managed-devices.md |  149 -
 ...te-wdac-policy-using-reference-computer.md |  125 -
 .../design/plan-wdac-management.md            |   89 -
 .../design/script-enforcement.md              |   63 -
 .../understanding-wdac-policy-settings.md     |   72 -
 ...l-specific-plug-ins-add-ins-and-modules.md |   33 -
 ...se-wdac-with-intelligent-security-graph.md |   97 -
 .../design/wdac-and-dotnet.md                 |   47 -
 .../design/wdac-design-guide.md               |   37 -
 .../design/wdac-wizard-editing-policy.md      |   59 -
 .../design/wdac-wizard-merging-policies.md    |   20 -
 .../design/wdac-wizard-parsing-event-logs.md  |  121 -
 .../design/wdac-wizard.md                     |   36 -
 .../feature-availability.md                   |   30 -
 .../operations/event-id-explanations.md       |  161 -
 .../operations/known-issues.md                |  104 -
 .../operations/wdac-operational-guide.md      |   27 -
 .../wdac-and-applocker-overview.md            |   65 -
 ...indows-sandbox-configure-using-wsb-file.md |    2 +-
 windows/security/docfx.json                   |    6 +
 ...tion-based-protection-of-code-integrity.md |   38 +-
 ...-guard-secure-launch-and-smm-protection.md |    6 +-
 .../tpm/tpm-recommendations.md                |    2 +-
 .../hello-for-business/faq.yml                |    2 +-
 .../includes/mdag-edge-deprecation-notice.md  |    2 +-
 .../security/includes/sections/application.md |    4 +-
 .../includes/sections/security-foundations.md |    2 +-
 windows/security/index.yml                    |    2 +-
 .../bitlocker/operations-guide.md             |    3 +
 .../bitlocker/recovery-overview.md            |    1 +
 .../bitlocker/recovery-process.md             |    3 +
 .../get-support-for-security-baselines.md     |    3 +-
 .../security-compliance-toolkit-10.md         |    3 +-
 .../windows-firewall/rules.md                 |    6 +-
 .../available-settings.md                     |    4 +-
 windows/security/threat-protection/index.md   |    2 +-
 ...iew-of-threat-mitigations-in-windows-10.md |    2 +-
 windows/whats-new/TOC.yml                     |    8 +-
 .../deprecated-features-resources.md          |    4 +-
 windows/whats-new/deprecated-features.md      |    6 +-
 windows/whats-new/index.yml                   |    9 +-
 windows/whats-new/ltsc/overview.md            |   21 +-
 .../ltsc/whats-new-windows-11-2024.md         |  174 +
 windows/whats-new/removed-features.md         |    4 +-
 .../whats-new-windows-11-version-24h2.md      |  246 +
 396 files changed, 12665 insertions(+), 7303 deletions(-)
 delete mode 100644 .openpublishing.redirection.store-for-business.json
 delete mode 100644 store-for-business/breadcrumb/toc.yml
 delete mode 100644 store-for-business/docfx.json
 create mode 100644 windows/client-management/mdm/policy-csp-speakforme.md
 create mode 100644 windows/deployment/do/images/mcc_ent_publicpreview.png
 create mode 100644 windows/deployment/do/mcc-ent-create-resource-and-cache.md
 create mode 100644 windows/deployment/do/mcc-ent-deploy-to-linux.md
 create mode 100644 windows/deployment/do/mcc-ent-deploy-to-windows.md
 create mode 100644 windows/deployment/do/mcc-ent-faq.yml
 create mode 100644 windows/deployment/do/mcc-ent-manage-cache-using-cli.md
 create mode 100644 windows/deployment/do/mcc-ent-monitoring.md
 create mode 100644 windows/deployment/do/mcc-ent-prerequisites.md
 create mode 100644 windows/deployment/do/mcc-ent-private-preview.md
 create mode 100644 windows/deployment/do/mcc-ent-release-notes.md
 create mode 100644 windows/deployment/do/mcc-ent-support-and-troubleshooting.md
 create mode 100644 windows/deployment/do/mcc-ent-uninstall-cache-node.md
 create mode 100644 windows/deployment/do/mcc-ent-update-cache-node.md
 create mode 100644 windows/deployment/do/mcc-ent-verify-cache-node.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-appendix.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-deploy.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-prerequisites.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-update-uninstall.md
 create mode 100644 windows/privacy/required-diagnostic-events-fields-windows-11-24H2.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/AppIdTagging/wdac-appid-tagging-guide.md => app-control-for-business/AppIdTagging/appcontrol-appid-tagging-guide.md} (50%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md (73%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/AppIdTagging/deploy-appid-tagging-policies.md (54%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/AppIdTagging/design-create-appid-tagging-policies.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/TOC.yml (70%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/appcontrol-and-applocker-overview.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/wdac.md => app-control-for-business/appcontrol.md} (69%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md (97%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/administer-applocker.md (97%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-architecture-and-components.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-functions.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-overview.md (92%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-policies-deployment-guide.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-policies-design-guide.md (83%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-policy-use-scenarios.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-processes-and-interactions.md (94%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/applocker-technical-reference.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/configure-an-applocker-policy-for-audit-only.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/configure-an-applocker-policy-for-enforce-rules.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/configure-exceptions-for-an-applocker-rule.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/configure-the-appLocker-reference-device.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/configure-the-application-identity-service.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-a-rule-for-packaged-apps.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-a-rule-that-uses-a-file-hash-condition.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-a-rule-that-uses-a-path-condition.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-a-rule-that-uses-a-publisher-condition.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-applocker-default-rules.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-list-of-applications-deployed-to-each-business-group.md (97%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-your-applocker-policies.md (97%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/create-your-applocker-rules.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/delete-an-applocker-rule.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md (92%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/deploy-the-applocker-policy-into-production.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/determine-group-policy-structure-and-rule-enforcement.md (87%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/dll-rules-in-applocker.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md (95%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/document-your-application-list.md (97%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/document-your-applocker-rules.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/edit-an-applocker-policy.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/edit-applocker-rules.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/enable-the-dll-rule-collection.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/enforce-applocker-rules.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/executable-rules-in-applocker.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/export-an-applocker-policy-from-a-gpo.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/export-an-applocker-policy-to-an-xml-file.md (97%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/how-applocker-works-techref.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/images/applocker-plan-inheritance.gif (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/images/applocker-plandeploy-quickreference.gif (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/images/blockedappmsg.gif (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/import-an-applocker-policy-from-another-computer.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/import-an-applocker-policy-into-a-gpo.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/maintain-applocker-policies.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/manage-packaged-apps-with-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md (89%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/merge-applocker-policies-manually.md (79%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/monitor-application-usage-with-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/optimize-applocker-performance.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/plan-for-applocker-policy-management.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/refresh-an-applocker-policy.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/requirements-for-deploying-applocker-policies.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/requirements-to-use-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/rule-collection-extensions.md (86%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/run-the-automatically-generate-rules-wizard.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/script-rules-in-applocker.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/security-considerations-for-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/select-types-of-rules-to-create.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/test-and-update-an-applocker-policy.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/tools-to-use-with-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understand-applocker-policy-design-decisions.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md (93%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understand-the-applocker-policy-deployment-process.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-applocker-default-rules.md (95%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-applocker-rule-behavior.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-applocker-rule-collections.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-applocker-rule-condition-types.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-applocker-rule-exceptions.md (94%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-the-file-hash-rule-condition-in-applocker.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-the-path-rule-condition-in-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/understanding-the-publisher-rule-condition-in-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/use-the-applocker-windows-powershell-cmdlets.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/using-event-viewer-with-applocker.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/what-is-applocker.md (86%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/windows-installer-rules-in-applocker.md (98%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/working-with-applocker-policies.md (99%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/applocker/working-with-applocker-rules.md (99%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/deployment/appcontrol-deployment-guide.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/deployment/audit-appcontrol-policies.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/deployment/create-code-signing-cert-for-wdac.md => app-control-for-business/deployment/create-code-signing-cert-for-appcontrol.md} (77%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-group-policy.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-intune.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-memcm.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-script.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/deployment/deploy-catalog-files-to-support-wdac.md => app-control-for-business/deployment/deploy-catalog-files-to-support-appcontrol.md} (89%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/deployment/disable-wdac-policies.md => app-control-for-business/deployment/disable-appcontrol-policies.md} (50%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/deployment/enforce-wdac-policies.md => app-control-for-business/deployment/enforce-appcontrol-policies.md} (60%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/deployment/merge-wdac-policies.md => app-control-for-business/deployment/merge-appcontrol-policies.md} (57%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/deployment/use-code-signing-for-better-control-and-protection.md (51%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/deployment/use-signed-policies-to-protect-wdac-against-tampering.md => app-control-for-business/deployment/use-signed-policies-to-protect-appcontrol-against-tampering.md} (69%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/allow-com-object-registration-in-wdac-policy.md => app-control-for-business/design/allow-com-object-registration-in-appcontrol-policy.md} (85%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/appcontrol-and-dotnet.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/appcontrol-design-guide.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/wdac-wizard-create-base-policy.md => app-control-for-business/design/appcontrol-wizard-create-base-policy.md} (68%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/wdac-wizard-create-supplemental-policy.md => app-control-for-business/design/appcontrol-wizard-create-supplemental-policy.md} (68%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-editing-policy.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-merging-policies.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-parsing-event-logs.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/applications-that-can-bypass-wdac.md => app-control-for-business/design/applications-that-can-bypass-appcontrol.md} (98%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/common-appcontrol-use-cases.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/design/configure-authorized-apps-deployed-with-a-managed-installer.md (80%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/create-wdac-deny-policy.md => app-control-for-business/design/create-appcontrol-deny-policy.md} (70%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-fully-managed-devices.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/create-wdac-policy-for-lightly-managed-devices.md => app-control-for-business/design/create-appcontrol-policy-for-lightly-managed-devices.md} (68%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-using-reference-computer.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/deploy-multiple-wdac-policies.md => app-control-for-business/design/deploy-multiple-appcontrol-policies.md} (76%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/example-wdac-base-policies.md => app-control-for-business/design/example-appcontrol-base-policies.md} (53%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/manage-packaged-apps-with-wdac.md => app-control-for-business/design/manage-packaged-apps-with-appcontrol.md} (56%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/design/microsoft-recommended-driver-block-rules.md (99%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/plan-appcontrol-management.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/script-enforcement.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/design/select-types-of-rules-to-create.md (60%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/design/understand-wdac-policy-design-decisions.md => app-control-for-business/design/understand-appcontrol-policy-design-decisions.md} (53%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/understanding-appcontrol-policy-settings.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-with-intelligent-security-graph.md
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/feature-availability.md
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-edit-gp.png => app-control-for-business/images/appcontrol-edit-gp.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-intune-custom-oma-uri.png => app-control-for-business/images/appcontrol-intune-custom-oma-uri.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-confirm-base-policy-modification.png => app-control-for-business/images/appcontrol-wizard-confirm-base-policy-modification.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png => app-control-for-business/images/appcontrol-wizard-custom-file-attribute-rule.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-custom-manual-pfn-rule.png => app-control-for-business/images/appcontrol-wizard-custom-manual-pfn-rule.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-custom-pfn-rule.png => app-control-for-business/images/appcontrol-wizard-custom-pfn-rule.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-custom-publisher-rule.png => app-control-for-business/images/appcontrol-wizard-custom-publisher-rule.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png => app-control-for-business/images/appcontrol-wizard-edit-policy-rules.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png => app-control-for-business/images/appcontrol-wizard-edit-remove-file-rule.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-files-expanded.png => app-control-for-business/images/appcontrol-wizard-event-log-files-expanded.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-files.png => app-control-for-business/images/appcontrol-wizard-event-log-files.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-export-expanded.png => app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-export-expanded.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-export.png => app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-export.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-parsing-expanded.png => app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-parsing-expanded.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-parsing.png => app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-parsing.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-system-expanded.png => app-control-for-business/images/appcontrol-wizard-event-log-system-expanded.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-log-system.png => app-control-for-business/images/appcontrol-wizard-event-log-system.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-rule-creation-expanded.png => app-control-for-business/images/appcontrol-wizard-event-rule-creation-expanded.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-event-rule-creation.png => app-control-for-business/images/appcontrol-wizard-event-rule-creation.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-merge.png => app-control-for-business/images/appcontrol-wizard-merge.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-rule-options-UI-advanced-collapsed.png => app-control-for-business/images/appcontrol-wizard-rule-options-UI-advanced-collapsed.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-rule-options-UI.png => app-control-for-business/images/appcontrol-wizard-rule-options-UI.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png => app-control-for-business/images/appcontrol-wizard-supplemental-expandable.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-supplemental-not-base.png => app-control-for-business/images/appcontrol-wizard-supplemental-not-base.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-supplemental-policy-rule-options-UI.png => app-control-for-business/images/appcontrol-wizard-supplemental-policy-rule-options-UI.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/wdac-wizard-template-selection.png => app-control-for-business/images/appcontrol-wizard-template-selection.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/appid-wdac-wizard-1.png => app-control-for-business/images/appid-appcontrol-wizard-1.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/appid-wdac-wizard-2.png => app-control-for-business/images/appid-appcontrol-wizard-2.png} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/appid-pid-task-mgr.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/appid-pid-windbg-token.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/appid-pid-windbg.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/bit-toggling-keyboard-icon.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/calculator-menu-icon.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/calculator-with-hex-in-binary.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig12-verifysigning.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig13-createnewgpo.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig14-createnewfile.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig15-setnewfileprops.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig16-specifyinfo.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig17-specifyinfo.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig18-specifyux.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig19-customsettings.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig20-setsoftwareinv.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig21-pathproperties.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig23-exceptionstocode.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig24-creategpo.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig26-enablecode.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig27-managecerttemp.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig29-enableconstraints.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig30-selectnewcert.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/dg-fig31-getmoreinfo.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/event-3077.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/event-3089.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/event-3099-options.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/hex-icon.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/known-issue-appid-dll-rule-xml.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/known-issue-appid-dll-rule.png (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-confirm-wdac-rule.jpg => app-control-for-business/images/memcm/memcm-confirm-appcontrol-rule.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-create-wdac-policy-2.jpg => app-control-for-business/images/memcm/memcm-create-appcontrol-policy-2.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-create-wdac-policy.jpg => app-control-for-business/images/memcm/memcm-create-appcontrol-policy.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-create-wdac-rule-2.jpg => app-control-for-business/images/memcm/memcm-create-appcontrol-rule-2.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-create-wdac-rule-3.jpg => app-control-for-business/images/memcm/memcm-create-appcontrol-rule-3.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-create-wdac-rule.jpg => app-control-for-business/images/memcm/memcm-create-appcontrol-rule.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-deploy-wdac-2.jpg => app-control-for-business/images/memcm/memcm-deploy-appcontrol-2.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-deploy-wdac-3.jpg => app-control-for-business/images/memcm/memcm-deploy-appcontrol-3.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-deploy-wdac-4.jpg => app-control-for-business/images/memcm/memcm-deploy-appcontrol-4.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/images/memcm/memcm-deploy-wdac.jpg => app-control-for-business/images/memcm/memcm-deploy-appcontrol.jpg} (100%)
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/images/policyflow.png (100%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/includes/feature-availability-note.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/index.yml (51%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/operations/wdac-debugging-and-troubleshooting.md => app-control-for-business/operations/appcontrol-debugging-and-troubleshooting.md} (60%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-operational-guide.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/operations/citool-commands.md (82%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/operations/configure-wdac-managed-installer.md => app-control-for-business/operations/configure-appcontrol-managed-installer.md} (79%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/operations/event-id-explanations.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/operations/event-tag-explanations.md (83%)
 rename windows/security/application-security/application-control/{windows-defender-application-control/operations/inbox-wdac-policies.md => app-control-for-business/operations/inbox-appcontrol-policies.md} (73%)
 create mode 100644 windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
 rename windows/security/application-security/application-control/{windows-defender-application-control => app-control-for-business}/operations/querying-application-control-events-centrally-using-advanced-hunting.md (79%)
 delete mode 100644 windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md
 create mode 100644 windows/security/application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/design-create-appid-tagging-policies.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/deployment/audit-wdac-policies.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-group-policy.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-intune.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-memcm.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/deployment/wdac-deployment-guide.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/common-wdac-use-cases.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-fully-managed-devices.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-using-reference-computer.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/plan-wdac-management.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/script-enforcement.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/understanding-wdac-policy-settings.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/wdac-and-dotnet.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/wdac-design-guide.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-editing-policy.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-merging-policies.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-parsing-event-logs.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/feature-availability.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/operations/event-id-explanations.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/operations/known-issues.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-operational-guide.md
 delete mode 100644 windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview.md
 create mode 100644 windows/whats-new/ltsc/whats-new-windows-11-2024.md
 create mode 100644 windows/whats-new/whats-new-windows-11-version-24h2.md

diff --git a/.github/workflows/Stale.yml b/.github/workflows/Stale.yml
index 101ee8ba9c..82b6875e28 100644
--- a/.github/workflows/Stale.yml
+++ b/.github/workflows/Stale.yml
@@ -13,7 +13,7 @@ jobs:
   stale:
     uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-Stale.yml@workflows-prod
     with:
-      RunDebug: true
+      RunDebug: false
       RepoVisibility: ${{ github.repository_visibility }}
     secrets:
       AccessToken: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json
index 0015a87b88..ca6ed75b69 100644
--- a/.openpublishing.publish.config.json
+++ b/.openpublishing.publish.config.json
@@ -251,7 +251,6 @@
     ".openpublishing.redirection.browsers.json",
     ".openpublishing.redirection.education.json",
     ".openpublishing.redirection.json",
-    ".openpublishing.redirection.store-for-business.json",
     ".openpublishing.redirection.windows-application-management.json",
     ".openpublishing.redirection.windows-client-management.json",
     ".openpublishing.redirection.windows-configuration.json",
diff --git a/.openpublishing.redirection.store-for-business.json b/.openpublishing.redirection.store-for-business.json
deleted file mode 100644
index f825112907..0000000000
--- a/.openpublishing.redirection.store-for-business.json
+++ /dev/null
@@ -1,299 +0,0 @@
-{
-  "redirections": [
-    {
-      "source_path": "store-for-business/acquire-apps-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/acquire-apps-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/add-unsigned-app-to-code-integrity-policy.md",
-      "redirect_url": "/windows/security/threat-protection/windows-defender-application-control/deploy-catalog-files-to-support-windows-defender-application-control",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/app-inventory-managemement-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/app-inventory-management-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/app-inventory-management-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/app-inventory-management-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/apps-in-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/apps-in-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/configure-mdm-provider-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/configure-mdm-provider-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/device-guard-signing-portal.md",
-      "redirect_url": "/windows/security/threat-protection/windows-defender-application-control/use-device-guard-signing-portal-in-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/distribute-apps-to-your-employees-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-apps-windows-store-for-business-overview.md",
-      "redirect_url": "/microsoft-store/manage-apps-microsoft-store-for-business-overview",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-mpsa-software-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-store/index",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-orders-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/manage-orders-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-settings-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/manage-settings-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-users-and-groups-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/manage-users-and-groups-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/prerequisites-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/prerequisites-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/roles-and-permissions-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/roles-and-permissions-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/settings-reference-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/settings-reference-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/sign-code-integrity-policy-with-device-guard-signing.md",
-      "redirect_url": "/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/sign-up-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-store",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/sign-up-windows-store-for-business-overview.md",
-      "redirect_url": "/microsoft-store/sign-up-microsoft-store-for-business-overview",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/sign-up-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/index",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/troubleshoot-windows-store-for-business.md",
-      "redirect_url": "/microsoft-store/troubleshoot-microsoft-store-for-business",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/update-windows-store-for-business-account-settings.md",
-      "redirect_url": "/microsoft-store/update-microsoft-store-for-business-account-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/windows-store-for-business-overview.md",
-      "redirect_url": "/microsoft-store/microsoft-store-for-business-overview",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/work-with-partner-microsoft-store-business.md",
-      "redirect_url": "/microsoft-365/commerce/manage-partners",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/acquire-apps-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/add-profile-to-devices.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/app-inventory-management-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/apps-in-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/assign-apps-to-employees.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/billing-payments-overview.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/billing-profile.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/billing-understand-your-invoice-msfb.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/configure-mdm-provider-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/distribute-apps-from-your-private-store.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/distribute-apps-to-your-employees-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/distribute-apps-with-management-tool.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/distribute-offline-apps.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/find-and-acquire-apps-overview.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/index.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-access-to-private-store.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-apps-microsoft-store-for-business-overview.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-orders-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-private-store-settings.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-settings-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/manage-users-and-groups-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/microsoft-store-for-business-education-powershell-module.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/microsoft-store-for-business-overview.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/notifications-microsoft-store-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/payment-methods.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/prerequisites-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/release-history-microsoft-store-business-education.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/roles-and-permissions-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/settings-reference-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/sfb-change-history.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/sign-up-microsoft-store-for-business-overview.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/troubleshoot-microsoft-store-for-business.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/update-microsoft-store-for-business-account-settings.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/whats-new-microsoft-store-business-education.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "store-for-business/working-with-line-of-business-apps.md",
-      "redirect_url": "/microsoft-365/admin/",
-      "redirect_document_id": false
-    }
-  ]
-}
diff --git a/.openpublishing.redirection.windows-deployment.json b/.openpublishing.redirection.windows-deployment.json
index 09479f4eca..a563d3fa34 100644
--- a/.openpublishing.redirection.windows-deployment.json
+++ b/.openpublishing.redirection.windows-deployment.json
@@ -125,6 +125,21 @@
       "redirect_url": "/windows/deployment/do/waas-microsoft-connected-cache",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/deployment/do/mcc-ent-configure-provision-linux.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-linux",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/deployment/do/mcc-ent-configure-provision-windows.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-windows",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/deployment/do/mcc-ent-update-cache.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-uninstall-cache-node",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/deployment/planning/act-technical-reference.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/compatibility/compatibility-administrator-users-guide",
diff --git a/.openpublishing.redirection.windows-security.json b/.openpublishing.redirection.windows-security.json
index fc3a796e95..25701bb0a1 100644
--- a/.openpublishing.redirection.windows-security.json
+++ b/.openpublishing.redirection.windows-security.json
@@ -1,115 +1,825 @@
 {
   "redirections": [
     {
-      "source_path": "windows/security//information-protection/kernel-dma-protection-for-thunderbolt.md",
+      "source_path": "windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md",
       "redirect_url": "/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md",
+      "source_path": "windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md",
       "redirect_url": "/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md",
+      "source_path": "windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md",
       "redirect_url": "/windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security/threat-protection/override-mitigation-options-for-app-related-security-policies.md",
-      "redirect_url": "/windows/security/operating-system-security/device-management/override-mitigation-options-for-app-related-security-policies",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md",
-      "redirect_url": "/windows/security/operating-system-security/device-management/block-untrusted-fonts-in-enterprise",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md",
-      "redirect_url": "/windows/security/operating-system-security/device-management/use-windows-event-forwarding-to-assist-in-intrusion-detection",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security//threat-protection/mbsa-removal-and-guidance.md",
+      "source_path": "windows/security/threat-protection/mbsa-removal-and-guidance.md",
       "redirect_url": "/windows/security/operating-system-security/device-management/windows-security-configuration-framework/mbsa-removal-and-guidance",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/faq-md-app-guard.yml",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.yml",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/faq-md-app-guard",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/install-md-app-guard.md",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/install-md-app-guard.md",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/install-md-app-guard",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-browser-extension.md",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md",
-      "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/reqs-md-app-guard.md",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/reqs-md-app-guard.md",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/reqs-md-app-guard",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md",
+      "source_path": "windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md",
       "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/test-scenarios-md-app-guard",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/windows-defender-system-guard/how-hardware-based-root-of-trust-helps-protect-windows.md",
+      "source_path": "windows/security/threat-protection/windows-defender-system-guard/how-hardware-based-root-of-trust-helps-protect-windows.md",
       "redirect_url": "/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md",
+      "source_path": "windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md",
       "redirect_url": "/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md",
+      "source_path": "windows/security/threat-protection/windows-security-configuration-framework/get-support-for-security-baselines.md",
       "redirect_url": "/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md",
+      "source_path": "windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10.md",
       "redirect_url": "/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10",
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security//threat-protection/windows-security-configuration-framework/windows-security-baselines.md",
+      "source_path": "windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md",
       "redirect_url": "/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/debugging-operational-guide-appid-tagging-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/deploy-appid-tagging-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/deploy-appid-tagging-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/design-create-appid-tagging-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/design-create-appid-tagging-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/wdac-appid-tagging-guide.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/appcontrol-appid-tagging-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/administer-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/administer-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-architecture-and-components.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-architecture-and-components",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-functions.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-functions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-deployment-guide.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-deployment-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-design-guide.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-design-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policy-use-scenarios.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policy-use-scenarios",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-processes-and-interactions.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-processes-and-interactions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-settings.md",
+      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-technical-reference.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-technical-reference",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-audit-only.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-audit-only",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-enforce-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-enforce-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/configure-exceptions-for-an-applocker-rule",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-application-identity-service.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-application-identity-service",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-appLocker-reference-device.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-appLocker-reference-device",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-for-packaged-apps.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-for-packaged-apps",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-file-hash-condition.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-file-hash-condition",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-path-condition.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-path-condition",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-publisher-condition.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-publisher-condition",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-applocker-default-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-applocker-default-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-list-of-applications-deployed-to-each-business-group.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-list-of-applications-deployed-to-each-business-group",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/delete-an-applocker-rule.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/delete-an-applocker-rule",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-the-applocker-policy-into-production.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/deploy-the-applocker-policy-into-production",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-group-policy-structure-and-rule-enforcement.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/determine-group-policy-structure-and-rule-enforcement",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-your-application-control-objectives.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/appcontrol-and-applocker-overview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/dll-rules-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/dll-rules-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/document-group-policy-structure-and-applocker-rule-enforcement",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-application-list.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/document-your-application-list",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-applocker-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/document-your-applocker-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-an-applocker-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-applocker-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/edit-applocker-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/enable-the-dll-rule-collection.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/enable-the-dll-rule-collection",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/enforce-applocker-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/enforce-applocker-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/executable-rules-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/executable-rules-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-from-a-gpo.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-from-a-gpo",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-to-an-xml-file.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-to-an-xml-file",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/how-applocker-works-techref.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/how-applocker-works-techref",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-from-another-computer.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-from-another-computer",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-into-a-gpo.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-into-a-gpo",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/maintain-applocker-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/maintain-applocker-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/manage-packaged-apps-with-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/manage-packaged-apps-with-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-by-using-set-applockerpolicy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-manually.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-manually",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/monitor-application-usage-with-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/monitor-application-usage-with-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/optimize-applocker-performance.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/optimize-applocker-performance",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/plan-for-applocker-policy-management.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/plan-for-applocker-policy-management",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/refresh-an-applocker-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/refresh-an-applocker-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-for-deploying-applocker-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/requirements-for-deploying-applocker-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-to-use-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/requirements-to-use-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/rule-collection-extensions.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/rule-collection-extensions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/run-the-automatically-generate-rules-wizard.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/run-the-automatically-generate-rules-wizard",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/script-rules-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/script-rules-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/security-considerations-for-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/security-considerations-for-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/select-types-of-rules-to-create.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/select-types-of-rules-to-create",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/test-an-applocker-policy-by-using-test-applockerpolicy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/test-and-update-an-applocker-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/test-and-update-an-applocker-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/tools-to-use-with-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/tools-to-use-with-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-enforcement-settings.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-rules#enforcement-modes",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-policy-design-decisions.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-policy-design-decisions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-the-applocker-policy-deployment-process.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understand-the-applocker-policy-deployment-process",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-allow-and-deny-actions-on-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-default-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-default-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-behavior.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-behavior",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-collections.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-collections",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-condition-types.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-condition-types",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-exceptions.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-exceptions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-file-hash-rule-condition-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-file-hash-rule-condition-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-path-rule-condition-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-publisher-rule-condition-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-publisher-rule-condition-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md",
+      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/wdac",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/use-the-applocker-windows-powershell-cmdlets.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/use-the-applocker-windows-powershell-cmdlets",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/using-event-viewer-with-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/using-event-viewer-with-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/using-software-restriction-policies-and-applocker-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/wdac",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/what-is-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/what-is-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/windows-installer-rules-in-applocker.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/windows-installer-rules-in-applocker",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/audit-wdac-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/audit-appcontrol-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/create-code-signing-cert-for-wdac.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/create-code-signing-cert-for-appcontrol",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-catalog-files-to-support-wdac.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-catalog-files-to-support-appcontrol",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-group-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-group-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-intune.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-intune",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-memcm.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-memcm",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-script",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/disable-wdac-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/disable-appcontrol-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/enforce-wdac-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/enforce-appcontrol-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/LOB-win32-apps-on-s.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/s-mode/wdac-allow-lob-win32-apps",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/merge-wdac-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/merge-appcontrol-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/use-code-signing-for-better-control-and-protection.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/use-code-signing-for-better-control-and-protection",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/use-signed-policies-to-protect-wdac-against-tampering.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/use-signed-policies-to-protect-appcontrol-against-tampering",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/wdac-deployment-guide.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/deployment/appcontrol-deployment-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/allow-com-object-registration-in-wdac-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/allow-com-object-registration-in-appcontrol-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/applications-that-can-bypass-wdac.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/common-wdac-use-cases.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/common-appcontrol-use-cases",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/configure-authorized-apps-deployed-with-a-managed-installer.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/configure-authorized-apps-deployed-with-a-managed-installer",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-deny-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-deny-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-fully-managed-devices.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-fully-managed-devices",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-lightly-managed-devices.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-lightly-managed-devices",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-using-reference-computer.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-using-reference-computer",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/deploy-multiple-wdac-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/deploy-multiple-appcontrol-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/example-wdac-base-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/example-appcontrol-base-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/manage-packaged-apps-with-wdac.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/manage-packaged-apps-with-appcontrol",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-block-rules.md",
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/design/applications-that-can-bypass-wdac",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/plan-wdac-management.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/plan-appcontrol-management",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/script-enforcement.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/script-enforcement",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/select-types-of-rules-to-create.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/understand-wdac-policy-design-decisions.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/understand-appcontrol-policy-design-decisions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/understanding-wdac-policy-settings.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/understanding-appcontrol-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-with-intelligent-security-graph",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-and-dotnet.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-and-dotnet",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-design-guide.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-design-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-base-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-base-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-supplemental-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-supplemental-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-editing-policy.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-editing-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-merging-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-merging-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-parsing-event-logs.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-parsing-event-logs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/feature-availability.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/feature-availability",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/index.yml",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/index",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/citool-commands.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/citool-commands",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/configure-wdac-managed-installer.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/configure-appcontrol-managed-installer",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/event-id-explanations.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/event-id-explanations",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/event-tag-explanations.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/event-tag-explanations",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/inbox-wdac-policies.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/inbox-appcontrol-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/known-issues.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/known-issues",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/querying-application-control-events-centrally-using-advanced-hunting.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/querying-application-control-events-centrally-using-advanced-hunting",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-debugging-and-troubleshooting.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-debugging-and-troubleshooting",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-operational-guide.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-operational-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/appcontrol-and-applocker-overview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/wdac.md",
+      "redirect_url": "/windows/security/application-security/application-control/app-control-for-business/appcontrol",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-browser-extension.md",
+      "redirect_url": "/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/apps.md",
       "redirect_url": "/windows/security/application-security",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/cloud-security/index.md",
+      "redirect_url": "/windows/security/cloud-services",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/cloud.md",
       "redirect_url": "/windows/security",
@@ -260,36 +970,221 @@
       "redirect_url": "/windows/security/operating-system-security/data-protection/configure-s-mime",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-considerations.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard/considerations-known-issues",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-how-it-works.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard/how-it-works",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-known-issues.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard/considerations-known-issues",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-manage.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard/configure",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/credential-guard/credential-guard-not-protected-scenarios.md",
       "redirect_url": "/windows/security/identity-protection/credential-guard/credential-guard-protection-limits",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-protection-limits.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard/how-it-works",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-requirements.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard/index",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/credential-guard/credential-guard-scripts.md",
       "redirect_url": "/windows/security",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/credential-guard/credential-guard.md",
+      "redirect_url": "/windows/security/identity-protection/credential-guard",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/credential-guard/dg-readiness-tool.md",
       "redirect_url": "/windows/security/identity-protection/credential-guard/credential-guard",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/cloud.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/cloud-only",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust-enroll.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-mfa.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-mfa.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-adfs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/deploy/requirements.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/multifactor-unlock",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-aad-join-cloud-only-deploy.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/cloud",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-adequate-domain-controllers.md",
+      "redirect_url": "/windows-server/administration/performance-tuning/role/active-directory-server/capacity-planning-for-active-directory-domain-services",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-and-password-changes.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-deploy-mfa.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-mfa",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-pki",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-cert-trust.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-guide.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-key-trust.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-rdp-certs.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/rdp-sign-in",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-event-300.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-faq.yml",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/faq",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/dual-enrollment",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/pin-reset",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-remote-desktop.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/rdp-sign-in",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works-authentication",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration.md",
       "redirect_url": "/azure/active-directory/devices/device-registration-how-it-works",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-provisioning.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works-provisioning",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso",
@@ -310,11 +1205,31 @@
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-validate-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-ad.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-adfs",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-dir-sync.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust",
@@ -335,6 +1250,16 @@
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust-provision.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works#provisioning",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-trust.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust",
@@ -360,6 +1285,21 @@
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-provision.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-enroll",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-validate-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-pki",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-provision.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust",
@@ -390,16 +1330,76 @@
       "redirect_url": "/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-identity-verification.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-adfs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-validate-ad-prereq.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-mfa",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-validate-pki.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-manage-in-organization.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/policy-settings",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/hello-overview.md",
       "redirect_url": "/windows/security/identity-protection/hello-for-business",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-planning-guide.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-prepare-people-to-use.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/prepare-users",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-videos.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/hello-why-pin-is-better-than-password.md",
+      "redirect_url": "/windows/security/identity-protection/hello-for-business/",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md",
       "redirect_url": "/azure/active-directory/authentication/howto-authentication-passwordless-security-key",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/identity-protection/hello-for-business/passwordless-strategy.md",
+      "redirect_url": "/windows/security/identity-protection/passwordless-strategy/",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/identity-protection/hello-for-business/reset-security-key.md",
       "redirect_url": "/azure/active-directory/authentication/howto-authentication-passwordless-security-key",
@@ -850,11 +1850,41 @@
       "redirect_url": "/windows/security/hardware-security/tpm/trusted-platform-module-top-node",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/app-behavior-with-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/app-behavior-with-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/collect-wip-audit-event-logs.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/collect-wip-audit-event-logs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure",
@@ -865,16 +1895,86 @@
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/deploy-wip-policy-using-intune-azure",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/information-protection/windows-information-protection/deploy-wip-policy-using-intune.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/deploy-wip-policy-using-intune-azure",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/guidance-and-best-practices-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/guidance-and-best-practices-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/how-to-disable-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/how-to-disable-wip",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/information-protection/windows-information-protection/how-wip-works-with-labels.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/guidance-and-best-practices-wip",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/limitations-with-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/limitations-with-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/mandatory-settings-for-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/mandatory-settings-for-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/overview-create-wip-policy-configmgr.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/overview-create-wip-policy-configmgr",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/overview-create-wip-policy.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/overview-create-wip-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/testing-scenarios-for-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/testing-scenarios-for-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/using-owa-with-wip.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/using-owa-with-wip",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/wip-app-enterprise-context.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/wip-app-enterprise-context",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/information-protection/windows-information-protection/wip-learning.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/wip-learning",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/introduction/index.md",
       "redirect_url": "/windows/security/introduction",
@@ -895,21 +1995,61 @@
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-basic-deployment.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-countermeasures.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/countermeasures",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml",
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-deployment-comparison.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure#bitlocker-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-device-encryption-overview-windows-10.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker#device-encryption",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-frequently-asked-questions.yml",
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-group-policy-settings.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure#$bitlocker-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/install-server",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/network-unlock",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-key-management-faq.yml",
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-management-for-enterprises.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-network-unlock-faq.yml",
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
@@ -920,6 +2060,11 @@
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-recovery-guide-plan.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-security-faq.yml",
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
@@ -935,16 +2080,636 @@
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/operations-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/recovery-process#bitlocker-recovery-password-viewer",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-using-with-other-programs-faq.yml",
       "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/faq",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/plan",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/csv-san",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system-security/data-protection/index.md",
       "redirect_url": "/windows/security/operating-system-security/#data-protection",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/configure-pde-in-intune.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/faq-pde.yml",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/faq",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/includes/pde-description.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-arso.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-hibernation.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-memory-dumps.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-password-connected-standby.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-wer.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-enable-pde.md",
+      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall-with-advanced-security-administration-with-windows-powershell.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/add-production-devices-to-the-membership-group-for-a-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717262(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/add-test-devices-to-the-membership-group-for-a-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717263(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770289(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/assign-security-group-filters-to-the-gpo.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717260(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/basic-firewall-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj721530(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/best-practices-configuring.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/boundary-zone-gpos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770729(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/boundary-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725978(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/certificate-based-isolation-policy-design-example.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771822(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/certificate-based-isolation-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731463(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/change-rules-from-request-to-require-mode.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717237(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-basic-firewall-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947845(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-an-isolated-server-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947794(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947848(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-the-boundary-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947836(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-the-encryption-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947800(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-the-isolated-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947783(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-group-policy-objects.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947791(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-inbound-firewall-rules.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947799(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-outbound-firewall-rules.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947827(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947819(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717261(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-certificate-based-isolation-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717238(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-domain-isolation-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717284(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-standalone-server-isolation-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717277(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-authentication-methods.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717279(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-data-protection-quick-mode-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717293(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-group-policy-to-autoenroll-and-deploy-certificates.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-key-exchange-main-mode-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717249(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-the-rules-to-require-encryption.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717270(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-the-windows-firewall-log.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure-logging",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-the-workstation-authentication-certificate-template.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717275(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717278(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/confirm-that-certificates-are-deployed-correctly.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717245(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717246(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-a-group-account-in-active-directory.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717247(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-a-group-policy-object.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717274(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-authentication-exemption-list-rule.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717243(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-authentication-request-rule.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717283(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-inbound-icmp-rule.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-inbound-port-rule.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-inbound-program-or-service-rule.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-outbound-port-rule.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-outbound-program-or-service-rule.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-inbound-rules-to-support-rpc.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-windows-firewall-rules-in-intune.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-wmi-filters-for-the-gpo.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717288(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/determining-the-trusted-state-of-your-devices.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753540(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/documenting-the-zones.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753825(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/domain-isolation-policy-design-example.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732933(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/domain-isolation-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725818(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/enable-predefined-inbound-rules.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717281(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/enable-predefined-outbound-rules.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717259(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/encryption-zone-gpos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770426(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/encryption-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753367(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/exempt-icmp-from-authentication.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717292(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/exemption-list.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732202(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/firewall-gpos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771233(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/firewall-policy-design-example.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731164(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/firewall-settings-lost-on-upgrade.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-information-about-your-active-directory-deployment.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771366(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-information-about-your-current-network-infrastructure.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770899(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-information-about-your-devices.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc726039(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-other-relevant-information.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771791(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-the-information-you-need.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731454(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-boundary.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770565(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-encryption.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754085(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-firewall.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731123(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-isolateddomain-clients.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770836(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-isolateddomain-servers.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731908(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732023(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/implementing-your-windows-firewall-with-advanced-security-design-plan.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717256(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/isolated-domain-gpos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731447(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/isolated-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731788(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/isolating-apps-on-your-network.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831418(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/link-the-gpo-to-the-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717264(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj721532(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717265(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-the-group-policy-management-console-to-ip-security-policies.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717290(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717269(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717266(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-windows-firewall-with-advanced-security.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717254(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-certificate-based-authentication.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc730835(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-domain-isolation-zones.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771044(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-gpo-deployment.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771733(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-group-policy-deployment-for-your-isolation-zones.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732752(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-isolation-groups-for-the-zones.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725693(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-network-access-groups.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771664(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-server-isolation-zones.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732615(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-settings-for-a-basic-firewall-policy.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754986(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-the-gpos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771716(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947826(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-your-windows-firewall-with-advanced-security-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc730841(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/protect-devices-from-unwanted-network-traffic.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc772556(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/require-encryption-when-accessing-sensitive-network-resources.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770865(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/restrict-access-to-only-specified-users-or-devices.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753064(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/restrict-access-to-only-trusted-devices.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725659(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/restrict-server-access-to-members-of-a-group-only.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717267(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831807(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/server-isolation-gpos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732486(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/server-isolation-policy-design-example.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732413(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/server-isolation-policy-design.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj721528(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/turn-on-windows-firewall-and-configure-default-behavior.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717251(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/understanding-the-windows-firewall-with-advanced-security-design-process.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731951(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/verify-that-network-traffic-is-authenticated.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717273(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security-deployment-guide.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717241(v=ws.11)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security-design-guide.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732024(v=ws.10)",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/operating-system.md",
       "redirect_url": "/windows/security/operating-system-security",
@@ -955,6 +2720,11 @@
       "redirect_url": "/windows/security/security-foundations/index",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/security-foundations/msft-security-dev-lifecycle.md",
+      "redirect_url": "/compliance/assurance/assurance-microsoft-security-development-lifecycle",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md",
       "redirect_url": "/windows/security/threat-protection/windows-defender-application-control/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set",
@@ -1385,6 +3155,11 @@
       "redirect_url": "/windows/security/threat-protection/windows-defender-application-control/applocker/working-with-applocker-rules",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md",
+      "redirect_url": "/windows/security/operating-system-security/device-management/block-untrusted-fonts-in-enterprise",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/change-history-for-threat-protection.md",
       "redirect_url": "/windows/security/threat-protection",
@@ -4100,6 +5875,11 @@
       "redirect_url": "/windows/security/security-foundations/msft-security-dev-lifecycle",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/override-mitigation-options-for-app-related-security-policies.md",
+      "redirect_url": "/windows/security/operating-system-security/device-management/override-mitigation-options-for-app-related-security-policies",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md",
       "redirect_url": "/windows/security/operating-system-security/system-security/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices",
@@ -4110,16 +5890,751 @@
       "redirect_url": "/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/access-credential-manager-as-a-trusted-caller.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/access-credential-manager-as-a-trusted-caller",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/access-this-computer-from-the-network.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/access-this-computer-from-the-network",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/account-lockout-duration.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-lockout-duration",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/account-lockout-policy.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-lockout-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/account-lockout-threshold.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-lockout-threshold",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/account-policies.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-administrator-account-status.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-administrator-account-status",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-guest-account-status.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-guest-account-status",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-limit-local-account-use-of-blank-passwords-to-console-logon-only.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-limit-local-account-use-of-blank-passwords-to-console-logon-only",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-rename-administrator-account.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-rename-administrator-account",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-rename-guest-account.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-rename-guest-account",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/act-as-part-of-the-operating-system.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/act-as-part-of-the-operating-system",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/add-workstations-to-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/add-workstations-to-domain",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/adjust-memory-quotas-for-a-process.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/adjust-memory-quotas-for-a-process",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/administer-security-policy-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/administer-security-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/allow-log-on-locally.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/allow-log-on-locally",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/allow-log-on-through-remote-desktop-services.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/allow-log-on-through-remote-desktop-services",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/audit-audit-the-access-of-global-system-objects.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-audit-the-access-of-global-system-objects",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/audit-audit-the-use-of-backup-and-restore-privilege.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-audit-the-use-of-backup-and-restore-privilege",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/audit-force-audit-policy-subcategory-settings-to-override.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-force-audit-policy-subcategory-settings-to-override",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/audit-policy.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/audit-shut-down-system-immediately-if-unable-to-log-security-audits.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-shut-down-system-immediately-if-unable-to-log-security-audits",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/back-up-files-and-directories.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/back-up-files-and-directories",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/bypass-traverse-checking.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/bypass-traverse-checking",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/change-the-system-time.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/change-the-system-time",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/change-the-time-zone.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/change-the-time-zone",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/create-a-pagefile.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-a-pagefile",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/create-a-token-object.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-a-token-object",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/create-global-objects.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-global-objects",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/create-permanent-shared-objects.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-permanent-shared-objects",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/create-symbolic-links.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-symbolic-links",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/debug-programs.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/debug-programs",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/deny-access-to-this-computer-from-the-network.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-access-to-this-computer-from-the-network",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-batch-job.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-as-a-batch-job",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-service.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-as-a-service",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-locally.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-locally",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-through-remote-desktop-services.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-through-remote-desktop-services",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/devices-allow-undock-without-having-to-log-on.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-allow-undock-without-having-to-log-on",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/devices-allowed-to-format-and-eject-removable-media.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-allowed-to-format-and-eject-removable-media",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/devices-prevent-users-from-installing-printer-drivers.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-prevent-users-from-installing-printer-drivers",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-restrict-cd-rom-access-to-locally-logged-on-user-only",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/devices-restrict-floppy-access-to-locally-logged-on-user-only.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-restrict-floppy-access-to-locally-logged-on-user-only",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-allow-server-operators-to-schedule-tasks.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-allow-server-operators-to-schedule-tasks",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-ldap-server-channel-binding-token-requirements.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-ldap-server-channel-binding-token-requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-ldap-server-signing-requirements.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-ldap-server-signing-requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-refuse-machine-account-password-changes.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-refuse-machine-account-password-changes",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-or-sign-secure-channel-data-always",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-secure-channel-data-when-possible.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-secure-channel-data-when-possible",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-digitally-sign-secure-channel-data-when-possible.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-digitally-sign-secure-channel-data-when-possible",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-disable-machine-account-password-changes.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-disable-machine-account-password-changes",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-require-strong-windows-2000-or-later-session-key.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-require-strong-windows-2000-or-later-session-key",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegation.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegation",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/enforce-password-history.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/enforce-password-history",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/enforce-user-logon-restrictions.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/enforce-user-logon-restrictions",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/force-shutdown-from-a-remote-system.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/force-shutdown-from-a-remote-system",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/generate-security-audits.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/generate-security-audits",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/impersonate-a-client-after-authentication.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/impersonate-a-client-after-authentication",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/increase-a-process-working-set.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/increase-a-process-working-set",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/increase-scheduling-priority.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/increase-scheduling-priority",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-display-user-information-when-the-session-is-locked.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-display-user-information-when-the-session-is-locked",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-display-last-user-name.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-do-not-display-last-user-name",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-require-ctrl-alt-del.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-do-not-require-ctrl-alt-del",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-dont-display-username-at-sign-in.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-dont-display-username-at-sign-in",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-machine-account-lockout-threshold.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-machine-account-lockout-threshold",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-message-text-for-users-attempting-to-log-on.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-message-text-for-users-attempting-to-log-on",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-message-title-for-users-attempting-to-log-on.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-message-title-for-users-attempting-to-log-on",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-require-domain-controller-authentication-to-unlock-workstation",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-require-smart-card.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-require-smart-card",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavior.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavior",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/kerberos-policy.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/kerberos-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/load-and-unload-device-drivers.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/load-and-unload-device-drivers",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/lock-pages-in-memory.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/lock-pages-in-memory",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/log-on-as-a-batch-job.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/log-on-as-a-batch-job",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/log-on-as-a-service.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/log-on-as-a-service",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/manage-auditing-and-security-log.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/manage-auditing-and-security-log",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-service-ticket.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-lifetime-for-service-ticket",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-password-age.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-password-age",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-tolerance-for-computer-clock-synchronization.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-tolerance-for-computer-clock-synchronization",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-if-server-agrees.md",
       "redirect_url": "/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-amount-of-idle-time-required-before-suspending-session",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-if-client-agress.md",
       "redirect_url": "/windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-disconnect-clients-when-logon-hours-expire.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-disconnect-clients-when-logon-hours-expire",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-server-spn-target-name-validation-level.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-server-spn-target-name-validation-level",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/minimum-password-age.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/minimum-password-age",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/minimum-password-length.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/minimum-password-length",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/modify-an-object-label.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/modify-an-object-label",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/modify-firmware-environment-values.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/modify-firmware-environment-values",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-allow-anonymous-sidname-translation.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-allow-anonymous-sidname-translation",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-let-everyone-permissions-apply-to-anonymous-users.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-let-everyone-permissions-apply-to-anonymous-users",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-named-pipes-that-can-be-accessed-anonymously.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-named-pipes-that-can-be-accessed-anonymously",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths-and-subpaths.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths-and-subpaths",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-restrict-anonymous-access-to-named-pipes-and-shares.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-restrict-anonymous-access-to-named-pipes-and-shares",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-shares-that-can-be-accessed-anonymously.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-shares-that-can-be-accessed-anonymously",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accounts.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accounts",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-list-manager-policies.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-list-manager-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-allow-local-system-to-use-computer-identity-for-ntlm.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-allow-local-system-to-use-computer-identity-for-ntlm",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-allow-localsystem-null-session-fallback.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-allow-localsystem-null-session-fallback",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-do-not-store-lan-manager-hash-value-on-next-password-change",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-force-logoff-when-logon-hours-expire.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-force-logoff-when-logon-hours-expire",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-ldap-client-signing-requirements.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-ldap-client-signing-requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-server-exceptions-in-this-domain",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-incoming-ntlm-traffic",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-incoming-ntlm-traffic.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-incoming-ntlm-traffic",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-ntlm-authentication-in-this-domain",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/password-policy.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/password-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/perform-volume-maintenance-tasks.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/perform-volume-maintenance-tasks",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/profile-single-process.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/profile-single-process",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/profile-system-performance.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/profile-system-performance",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/recovery-console-allow-automatic-administrative-logon.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/recovery-console-allow-automatic-administrative-logon",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/remove-computer-from-docking-station.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/remove-computer-from-docking-station",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/replace-a-process-level-token.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/replace-a-process-level-token",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/reset-account-lockout-counter-after.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/reset-account-lockout-counter-after",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/restore-files-and-directories.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/restore-files-and-directories",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/secpol-advanced-security-audit-policy-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/secpol-advanced-security-audit-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/security-options.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/security-options",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/security-policy-settings-reference.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/security-policy-settings-reference",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/security-policy-settings.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/security-policy-settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/shut-down-the-system.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/shut-down-the-system",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/shutdown-allow-system-to-be-shut-down-without-having-to-log-on",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/shutdown-clear-virtual-memory-pagefile.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/shutdown-clear-virtual-memory-pagefile",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/security-policy-settings/smbv1-microsoft-network-client-digitally-sign-communications-always.md",
       "redirect_url": "/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always",
@@ -4140,6 +6655,111 @@
       "redirect_url": "/windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/store-passwords-using-reversible-encryption.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/store-passwords-using-reversible-encryption",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/synchronize-directory-service-data.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/synchronize-directory-service-data",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystems.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystems",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/system-settings-optional-subsystems.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-settings-optional-subsystems",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/take-ownership-of-files-or-other-objects.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/take-ownership-of-files-or-other-objects",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-standard-users",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-detect-application-installations-and-prompt-for-elevation.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-detect-application-installations-and-prompt-for-elevation",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-executables-that-are-signed-and-validated.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-only-elevate-executables-that-are-signed-and-validated",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/security-policy-settings/user-rights-assignment.md",
+      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-rights-assignment",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection.md",
+      "redirect_url": "/windows/security/operating-system-security/device-management/use-windows-event-forwarding-to-assist-in-intrusion-detection",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/wannacrypt-ransomware-worm-targets-out-of-date-systems-wdsi.md",
       "redirect_url": "https://www.microsoft.com/security/blog/2017/05/12/wannacrypt-ransomware-worm-targets-out-of-date-systems/",
@@ -4580,11 +7200,6 @@
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-settings",
       "redirect_document_id": false
     },
-    {
-      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-settings.md",
-      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview",
-      "redirect_document_id": false
-    },
     {
       "source_path": "windows/security/threat-protection/windows-defender-application-control/applocker/applocker-technical-reference.md",
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-technical-reference",
@@ -4685,11 +7300,6 @@
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-your-application-control-objectives",
       "redirect_document_id": false
     },
-    {
-      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-your-application-control-objectives.md",
-      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview",
-      "redirect_document_id": false
-    },
     {
       "source_path": "windows/security/threat-protection/windows-defender-application-control/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md",
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application",
@@ -4860,11 +7470,6 @@
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-enforcement-settings",
       "redirect_document_id": false
     },
-    {
-      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-enforcement-settings.md",
-      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules#enforcement-modes",
-      "redirect_document_id": false
-    },
     {
       "source_path": "windows/security/threat-protection/windows-defender-application-control/applocker/understand-applocker-policy-design-decisions.md",
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-policy-design-decisions",
@@ -4935,11 +7540,6 @@
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain",
       "redirect_document_id": false
     },
-    {
-      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/use-applocker-and-software-restriction-policies-in-the-same-domain.md",
-      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/wdac",
-      "redirect_document_id": false
-    },
     {
       "source_path": "windows/security/threat-protection/windows-defender-application-control/applocker/use-the-applocker-windows-powershell-cmdlets.md",
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/use-the-applocker-windows-powershell-cmdlets",
@@ -4955,11 +7555,6 @@
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/using-software-restriction-policies-and-applocker-policies",
       "redirect_document_id": false
     },
-    {
-      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/applocker/using-software-restriction-policies-and-applocker-policies.md",
-      "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/wdac",
-      "redirect_document_id": false
-    },
     {
       "source_path": "windows/security/threat-protection/windows-defender-application-control/applocker/what-is-applocker.md",
       "redirect_url": "/windows/security/application-security/application-control/windows-defender-application-control/applocker/what-is-applocker",
@@ -6975,6 +9570,11 @@
       "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/create-wmi-filters-for-the-gpo",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md",
+      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/security/threat-protection/windows-firewall/determining-the-trusted-state-of-your-devices.md",
       "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/determining-the-trusted-state-of-your-devices",
@@ -7381,1914 +9981,9 @@
       "redirect_document_id": false
     },
     {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-considerations.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard/considerations-known-issues",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-how-it-works.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard/how-it-works",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-known-issues.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard/considerations-known-issues",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-manage.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-protection-limits.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard/how-it-works",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/credential-guard/credential-guard-requirements.md",
-      "redirect_url": "/windows/security/identity-protection/credential-guard/index",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/configure-pde-in-intune.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-arso.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-hibernation.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-memory-dumps.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-password-connected-standby.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-disable-wer.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/intune-enable-pde.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/includes/pde-description.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/personal-data-encryption/faq-pde.yml",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/personal-data-encryption/faq",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-group-policy-settings.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure#$bitlocker-policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-deployment-comparison.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure#bitlocker-policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-countermeasures.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/countermeasures",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-recovery-guide-plan.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/recovery-process#bitlocker-recovery-password-viewer",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/network-unlock",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-basic-deployment.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-management-for-enterprises.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/plan",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/operations-guide",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/csv-san",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker/install-server",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/data-protection/bitlocker/bitlocker-device-encryption-overview-windows-10.md",
-      "redirect_url": "/windows/security/operating-system-security/data-protection/bitlocker#device-encryption",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/basic-firewall-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj721530(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/boundary-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725978(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/boundary-zone-gpos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770729(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/certificate-based-isolation-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731463(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/certificate-based-isolation-policy-design-example.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771822(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/documenting-the-zones.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753825(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/domain-isolation-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725818(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/domain-isolation-policy-design-example.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732933(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/encryption-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753367(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/encryption-zone-gpos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770426(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/exemption-list.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732202(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/firewall-gpos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771233(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/firewall-policy-design-example.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731164(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-boundary.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770565(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-encryption.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754085(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-firewall.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731123(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-isolateddomain-clients.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770836(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gpo-domiso-isolateddomain-servers.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731908(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/isolated-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731788(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/isolated-domain-gpos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731447(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj721532(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-certificate-based-authentication.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc730835(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-domain-isolation-zones.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771044(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-gpo-deployment.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771733(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-group-policy-deployment-for-your-isolation-zones.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732752(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-isolation-groups-for-the-zones.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725693(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-network-access-groups.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771664(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-server-isolation-zones.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732615(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-settings-for-a-basic-firewall-policy.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754986(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-the-gpos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771716(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947826(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/planning-your-windows-firewall-with-advanced-security-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc730841(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/server-isolation-gpos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732486(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/server-isolation-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj721528(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/server-isolation-policy-design-example.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732413(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770289(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-basic-firewall-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947845(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-an-isolated-server-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947794(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947848(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-the-boundary-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947836(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-the-encryption-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947800(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-configuring-rules-for-the-isolated-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947783(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-group-policy-objects.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947791(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-inbound-firewall-rules.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947799(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-outbound-firewall-rules.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947827(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc947819(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717261(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-certificate-based-isolation-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717238(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-domain-isolation-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717284(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/checklist-implementing-a-standalone-server-isolation-policy-design.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717277(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732023(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/implementing-your-windows-firewall-with-advanced-security-design-plan.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717256(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/protect-devices-from-unwanted-network-traffic.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc772556(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/require-encryption-when-accessing-sensitive-network-resources.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770865(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/restrict-access-to-only-specified-users-or-devices.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753064(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/restrict-access-to-only-trusted-devices.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725659(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/understanding-the-windows-firewall-with-advanced-security-design-process.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731951(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security-deployment-guide.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717241(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security-design-guide.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc732024(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/add-production-devices-to-the-membership-group-for-a-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717262(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/add-test-devices-to-the-membership-group-for-a-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717263(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/assign-security-group-filters-to-the-gpo.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717260(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/change-rules-from-request-to-require-mode.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717237(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-authentication-methods.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717279(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-data-protection-quick-mode-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717293(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-group-policy-to-autoenroll-and-deploy-certificates.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-key-exchange-main-mode-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717249(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-the-rules-to-require-encryption.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717270(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-the-workstation-authentication-certificate-template.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717275(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717278(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/confirm-that-certificates-are-deployed-correctly.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717245(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717246(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-a-group-account-in-active-directory.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717247(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-a-group-policy-object.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717274(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-authentication-exemption-list-rule.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717243(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-authentication-request-rule.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717283(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-wmi-filters-for-the-gpo.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717288(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/enable-predefined-inbound-rules.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717281(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/enable-predefined-outbound-rules.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717259(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/exempt-icmp-from-authentication.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717292(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/link-the-gpo-to-the-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717264(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717265(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-the-group-policy-management-console-to-ip-security-policies.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717290(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717269(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717266(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/open-windows-firewall-with-advanced-security.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717254(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/restrict-server-access-to-members-of-a-group-only.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717267(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/turn-on-windows-firewall-and-configure-default-behavior.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717251(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/verify-that-network-traffic-is-authenticated.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717273(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-the-information-you-need.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc731454(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-information-about-your-current-network-infrastructure.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770899(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-information-about-your-active-directory-deployment.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771366(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-information-about-your-devices.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc726039(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/gathering-other-relevant-information.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771791(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/determining-the-trusted-state-of-your-devices.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc753540(v=ws.10)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-inbound-rules-to-support-rpc.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-outbound-program-or-service-rule.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-outbound-port-rule.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-inbound-program-or-service-rule.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-inbound-port-rule.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-an-inbound-icmp-rule.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall-with-advanced-security-administration-with-windows-powershell.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831807(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/best-practices-configuring.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/isolating-apps-on-your-network.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831418(v=ws.11)",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/configure-the-windows-firewall-log.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure-logging",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/create-windows-firewall-rules-in-intune.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall/configure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/operating-system-security/network-security/windows-firewall/firewall-settings-lost-on-upgrade.md",
-      "redirect_url": "/windows/security/operating-system-security/network-security/windows-firewall",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-remote-desktop.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/rdp-sign-in",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-rdp-certs.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/rdp-sign-in",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/security-foundations/msft-security-dev-lifecycle.md",
-      "redirect_url": "/compliance/assurance/assurance-microsoft-security-development-lifecycle",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/pin-reset",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-adequate-domain-controllers.md",
-      "redirect_url": "/windows-server/administration/performance-tuning/role/active-directory-server/capacity-planning-for-active-directory-domain-services",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-cert-trust.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-adfs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-validate-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-deploy-mfa.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-mfa",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-pki",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-key-trust.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-validate-ad-prereq.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-aad-join-cloud-only-deploy.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/cloud",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust-provision.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works#provisioning",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-provision.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-enroll",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-validate-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-pki",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-deployment-guide.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-adfs.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-adfs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-mfa",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-key-trust-validate-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-identity-verification.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/requirements",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-mfa.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-mfa.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-adfs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/requirements.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/feature-multifactor-unlock.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/multifactor-unlock",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-and-password-changes.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works-authentication",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-provisioning.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/how-it-works-provisioning",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-manage-in-organization.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-planning-guide.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-prepare-people-to-use.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/prepare-users",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-why-pin-is-better-than-password.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/passwordless-strategy.md",
-      "redirect_url": "/windows/security/identity-protection/passwordless-strategy/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/cloud.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/cloud-only",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust-enroll.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-videos.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-faq.yml",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/faq",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-pki.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/access-credential-manager-as-a-trusted-caller.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/access-credential-manager-as-a-trusted-caller",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/access-this-computer-from-the-network.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/access-this-computer-from-the-network",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/account-lockout-duration.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-lockout-duration",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/account-lockout-policy.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-lockout-policy",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/account-lockout-threshold.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-lockout-threshold",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/account-policies.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/account-policies",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-administrator-account-status.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-administrator-account-status",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-guest-account-status.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-guest-account-status",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-limit-local-account-use-of-blank-passwords-to-console-logon-only.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-limit-local-account-use-of-blank-passwords-to-console-logon-only",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-rename-administrator-account.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-rename-administrator-account",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/accounts-rename-guest-account.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/accounts-rename-guest-account",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/act-as-part-of-the-operating-system.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/act-as-part-of-the-operating-system",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/add-workstations-to-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/add-workstations-to-domain",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/adjust-memory-quotas-for-a-process.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/adjust-memory-quotas-for-a-process",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/administer-security-policy-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/administer-security-policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/allow-log-on-locally.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/allow-log-on-locally",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/allow-log-on-through-remote-desktop-services.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/allow-log-on-through-remote-desktop-services",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/audit-audit-the-access-of-global-system-objects.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-audit-the-access-of-global-system-objects",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/audit-audit-the-use-of-backup-and-restore-privilege.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-audit-the-use-of-backup-and-restore-privilege",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/audit-force-audit-policy-subcategory-settings-to-override.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-force-audit-policy-subcategory-settings-to-override",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/audit-policy.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-policy",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/audit-shut-down-system-immediately-if-unable-to-log-security-audits.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/audit-shut-down-system-immediately-if-unable-to-log-security-audits",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/back-up-files-and-directories.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/back-up-files-and-directories",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/bypass-traverse-checking.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/bypass-traverse-checking",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/change-the-system-time.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/change-the-system-time",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/change-the-time-zone.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/change-the-time-zone",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/create-a-pagefile.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-a-pagefile",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/create-a-token-object.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-a-token-object",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/create-global-objects.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-global-objects",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/create-permanent-shared-objects.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-permanent-shared-objects",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/create-symbolic-links.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/create-symbolic-links",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/debug-programs.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/debug-programs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/deny-access-to-this-computer-from-the-network.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-access-to-this-computer-from-the-network",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-batch-job.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-as-a-batch-job",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-service.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-as-a-service",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-locally.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-locally",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/deny-log-on-through-remote-desktop-services.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/deny-log-on-through-remote-desktop-services",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/devices-allowed-to-format-and-eject-removable-media.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-allowed-to-format-and-eject-removable-media",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/devices-allow-undock-without-having-to-log-on.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-allow-undock-without-having-to-log-on",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/devices-prevent-users-from-installing-printer-drivers.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-prevent-users-from-installing-printer-drivers",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-restrict-cd-rom-access-to-locally-logged-on-user-only",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/devices-restrict-floppy-access-to-locally-logged-on-user-only.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/devices-restrict-floppy-access-to-locally-logged-on-user-only",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-allow-server-operators-to-schedule-tasks.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-allow-server-operators-to-schedule-tasks",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-ldap-server-channel-binding-token-requirements.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-ldap-server-channel-binding-token-requirements",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-ldap-server-signing-requirements.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-ldap-server-signing-requirements",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-controller-refuse-machine-account-password-changes.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-controller-refuse-machine-account-password-changes",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-or-sign-secure-channel-data-always",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-secure-channel-data-when-possible.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-secure-channel-data-when-possible",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-digitally-sign-secure-channel-data-when-possible.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-digitally-sign-secure-channel-data-when-possible",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-disable-machine-account-password-changes.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-disable-machine-account-password-changes",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/domain-member-require-strong-windows-2000-or-later-session-key.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/domain-member-require-strong-windows-2000-or-later-session-key",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegation.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegation",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/enforce-password-history.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/enforce-password-history",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/enforce-user-logon-restrictions.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/enforce-user-logon-restrictions",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/force-shutdown-from-a-remote-system.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/force-shutdown-from-a-remote-system",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/generate-security-audits.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/generate-security-audits",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/impersonate-a-client-after-authentication.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/impersonate-a-client-after-authentication",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/increase-a-process-working-set.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/increase-a-process-working-set",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/increase-scheduling-priority.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/increase-scheduling-priority",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-display-user-information-when-the-session-is-locked.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-display-user-information-when-the-session-is-locked",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-display-last-user-name.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-do-not-display-last-user-name",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-require-ctrl-alt-del.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-do-not-require-ctrl-alt-del",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-dont-display-username-at-sign-in.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-dont-display-username-at-sign-in",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-machine-account-lockout-threshold.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-machine-account-lockout-threshold",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-message-text-for-users-attempting-to-log-on.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-message-text-for-users-attempting-to-log-on",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-message-title-for-users-attempting-to-log-on.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-message-title-for-users-attempting-to-log-on",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-require-domain-controller-authentication-to-unlock-workstation",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-require-smart-card.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-require-smart-card",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavior.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavior",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/kerberos-policy.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/kerberos-policy",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/load-and-unload-device-drivers.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/load-and-unload-device-drivers",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/lock-pages-in-memory.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/lock-pages-in-memory",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/log-on-as-a-batch-job.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/log-on-as-a-batch-job",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/log-on-as-a-service.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/log-on-as-a-service",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/manage-auditing-and-security-log.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/manage-auditing-and-security-log",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-service-ticket.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-lifetime-for-service-ticket",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-lifetime-for-user-ticket-renewal",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-password-age.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-password-age",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/maximum-tolerance-for-computer-clock-synchronization.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/maximum-tolerance-for-computer-clock-synchronization",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-amount-of-idle-time-required-before-suspending-session",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-attempt-s4u2self-to-obtain-claim-information",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-disconnect-clients-when-logon-hours-expire.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-disconnect-clients-when-logon-hours-expire",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/microsoft-network-server-server-spn-target-name-validation-level.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/microsoft-network-server-server-spn-target-name-validation-level",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/minimum-password-age.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/minimum-password-age",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/minimum-password-length.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/minimum-password-length",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/modify-an-object-label.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/modify-an-object-label",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/modify-firmware-environment-values.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/modify-firmware-environment-values",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-allow-anonymous-sidname-translation.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-allow-anonymous-sidname-translation",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-let-everyone-permissions-apply-to-anonymous-users.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-let-everyone-permissions-apply-to-anonymous-users",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-named-pipes-that-can-be-accessed-anonymously.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-named-pipes-that-can-be-accessed-anonymously",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths-and-subpaths.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths-and-subpaths",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-restrict-anonymous-access-to-named-pipes-and-shares.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-restrict-anonymous-access-to-named-pipes-and-shares",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-shares-that-can-be-accessed-anonymously.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-shares-that-can-be-accessed-anonymously",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accounts.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accounts",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-list-manager-policies.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-list-manager-policies",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-allow-localsystem-null-session-fallback.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-allow-localsystem-null-session-fallback",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-allow-local-system-to-use-computer-identity-for-ntlm.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-allow-local-system-to-use-computer-identity-for-ntlm",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-do-not-store-lan-manager-hash-value-on-next-password-change",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-force-logoff-when-logon-hours-expire.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-force-logoff-when-logon-hours-expire",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-ldap-client-signing-requirements.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-ldap-client-signing-requirements",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-add-server-exceptions-in-this-domain",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-incoming-ntlm-traffic",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-incoming-ntlm-traffic.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-incoming-ntlm-traffic",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-ntlm-authentication-in-this-domain",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/password-policy.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/password-policy",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/perform-volume-maintenance-tasks.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/perform-volume-maintenance-tasks",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/profile-single-process.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/profile-single-process",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/profile-system-performance.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/profile-system-performance",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/recovery-console-allow-automatic-administrative-logon.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/recovery-console-allow-automatic-administrative-logon",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/remove-computer-from-docking-station.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/remove-computer-from-docking-station",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/replace-a-process-level-token.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/replace-a-process-level-token",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/reset-account-lockout-counter-after.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/reset-account-lockout-counter-after",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/restore-files-and-directories.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/restore-files-and-directories",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/secpol-advanced-security-audit-policy-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/secpol-advanced-security-audit-policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/security-options.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/security-options",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/security-policy-settings.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/security-policy-settings",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/security-policy-settings-reference.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/security-policy-settings-reference",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/shutdown-allow-system-to-be-shut-down-without-having-to-log-on",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/shutdown-clear-virtual-memory-pagefile.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/shutdown-clear-virtual-memory-pagefile",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/shut-down-the-system.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/shut-down-the-system",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/store-passwords-using-reversible-encryption.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/store-passwords-using-reversible-encryption",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/synchronize-directory-service-data.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/synchronize-directory-service-data",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystems.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystems",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/system-settings-optional-subsystems.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-settings-optional-subsystems",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/take-ownership-of-files-or-other-objects.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/take-ownership-of-files-or-other-objects",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-standard-users",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-detect-application-installations-and-prompt-for-elevation.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-detect-application-installations-and-prompt-for-elevation",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-executables-that-are-signed-and-validated.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-only-elevate-executables-that-are-signed-and-validated",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/threat-protection/security-policy-settings/user-rights-assignment.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/user-rights-assignment",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/cloud-security/index.md",
-      "redirect_url": "/windows/security/cloud-services",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment.md",
-      "redirect_url": "/windows/security/identity-protection/hello-for-business/dual-enrollment",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/app-behavior-with-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/app-behavior-with-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/collect-wip-audit-event-logs.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/collect-wip-audit-event-logs",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/deploy-wip-policy-using-intune-azure",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/guidance-and-best-practices-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/guidance-and-best-practices-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/how-to-disable-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/how-to-disable-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/limitations-with-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/limitations-with-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/mandatory-settings-for-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/mandatory-settings-for-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/overview-create-wip-policy-configmgr.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/overview-create-wip-policy-configmgr",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/overview-create-wip-policy.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/overview-create-wip-policy",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/recommended-network-definitions-for-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/testing-scenarios-for-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/testing-scenarios-for-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/using-owa-with-wip.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/using-owa-with-wip",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/wip-app-enterprise-context.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/wip-app-enterprise-context",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/information-protection/windows-information-protection/wip-learning.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/security/information-protection/windows-information-protection/wip-learning",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/security/application-security/application-control/windows-defender-application-control/deployment/LOB-win32-apps-on-s.md",
-      "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/s-mode/wdac-allow-lob-win32-apps",
+      "source_path": "windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md",
+      "redirect_url": "/windows/security/application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md",
       "redirect_document_id": false
     }
   ]
-}
+}
\ No newline at end of file
diff --git a/education/windows/index.yml b/education/windows/index.yml
index 4bc8fe8393..981e1d8466 100644
--- a/education/windows/index.yml
+++ b/education/windows/index.yml
@@ -12,22 +12,16 @@ metadata:
   author: paolomatarazzo
   ms.author: paoloma
   manager: aaroncz
-  ms.date: 07/22/2024
+  ms.date: 10/10/2024
 
 highlightedContent:
   items:
-  - title: Get started with Windows 11 SE
-    itemType: get-started
-    url: windows-11-se-overview.md
-  - title: Windows 11, version 23H2
+  - title: Windows 11, version 24H2
     itemType: whats-new
-    url: /windows/whats-new/whats-new-windows-11-version-23h2
+    url: /windows/whats-new/whats-new-windows-11-version-24h2
   - title: Explore all Windows trainings and learning paths for IT pros
     itemType: learn
     url: https://learn.microsoft.com/en-us/training/browse/?products=windows&roles=administrator
-  - title: Deploy applications to Windows 11 SE with Intune
-    itemType: how-to-guide
-    url: /education/windows/tutorial-deploy-apps-winse
 
 productDirectory:
   title: Get started
diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml
index 4a9b022c07..c33dec8686 100644
--- a/education/windows/windows-11-se-faq.yml
+++ b/education/windows/windows-11-se-faq.yml
@@ -1,9 +1,9 @@
 ### YamlMime:FAQ
 metadata:
   title: Windows 11 SE Frequently Asked Questions (FAQ)
-  description: Use these frequently asked questions (FAQ) to learn important details about Windows 11 SE.   
+  description: Use these frequently asked questions (FAQ) to learn important details about Windows 11 SE.
   ms.topic: faq
-  ms.date: 01/16/2024
+  ms.date: 10/10/2024
   appliesto:
     - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 SE</a>
 
@@ -30,7 +30,7 @@ sections:
           - Express yourself and celebrate accomplishments with the *emoji and GIF panel* and *Stickers*
   - name: Deployment
     questions:
-      - question: Can I load Windows 11 SE on any hardware? 
+      - question: Can I load Windows 11 SE on any hardware?
         answer: |
           Windows 11 SE is only available on devices that are built for education. To learn more, see [Windows 11 SE Overview](/education/windows/windows-11-se-overview).
       - question: Can I PXE boot a Windows SE device?
diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md
index e5fd11df2b..3c0a5f8d93 100644
--- a/education/windows/windows-11-se-overview.md
+++ b/education/windows/windows-11-se-overview.md
@@ -2,7 +2,7 @@
 title: Windows 11 SE Overview
 description: Learn about Windows 11 SE, and the apps that are included with the operating system.
 ms.topic: overview
-ms.date: 01/09/2024
+ms.date: 10/10/2024
 appliesto:
   - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 SE</a>
 ms.collection:
@@ -96,9 +96,9 @@ The following applications can also run on Windows 11 SE, and can be deployed us
 | `CKAuthenticator`                         | 3.6+              | `Win32`    | `ContentKeeper`                           |
 | `Class Policy`                            | 116.0.0           | `Win32`    | `Class Policy`                            |
 | `Classroom.cloud`                         | 1.40.0004         | `Win32`    | `NetSupport`                              |
-| `Clipchamp`                               | 2.5.2.            | `Store`  | `Microsoft`                               | 
+| `Clipchamp`                               | 2.5.2.            | `Store`  | `Microsoft`                               |
 | `CoGat Secure Browser`                    | 11.0.0.19         | `Win32`    | `Riverside Insights`                      |
-| `ColorVeil`                               | 4.0.0.175         | `Win32`    | `East-Tec`                                | 
+| `ColorVeil`                               | 4.0.0.175         | `Win32`    | `East-Tec`                                |
 | `ContentKeeper Cloud`                     | 9.01.45           | `Win32`    | `ContentKeeper Technologies`              |
 | `DigiExam`                                | 14.1.0            | `Win32`    | `Digiexam`                                |
 | `Digital Secure testing browser`          | 15.0.0            | `Win32`    | `Digiexam`                                |
diff --git a/education/windows/windows-11-se-settings-list.md b/education/windows/windows-11-se-settings-list.md
index 1c973e2035..5e09c2f2d1 100644
--- a/education/windows/windows-11-se-settings-list.md
+++ b/education/windows/windows-11-se-settings-list.md
@@ -2,7 +2,7 @@
 title: Windows 11 SE settings list
 description: Windows 11 SE automatically configures settings in the operating system. Learn more about the settings you can control and manage, and the settings you can't change.
 ms.topic: reference
-ms.date: 05/06/2024
+ms.date: 10/10/2024
 appliesto:
   - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 SE</a>
 ms.collection:
diff --git a/includes/licensing/windows-defender-application-control-wdac.md b/includes/licensing/windows-defender-application-control-wdac.md
index 52264205ff..87446bab24 100644
--- a/includes/licensing/windows-defender-application-control-wdac.md
+++ b/includes/licensing/windows-defender-application-control-wdac.md
@@ -1,19 +1,19 @@
 ---
 author: paolomatarazzo
 ms.author: paoloma
-ms.date: 09/18/2023
+ms.date: 09/23/2024
 ms.topic: include
 ---
 
 ## Windows edition and licensing requirements
 
-The following table lists the Windows editions that support Windows Defender Application Control (WDAC):
+The following table lists the Windows editions that support App Control for Business:
 
 |Windows Pro|Windows Enterprise|Windows Pro Education/SE|Windows Education|
 |:---:|:---:|:---:|:---:|
 |Yes|Yes|Yes|Yes|
 
-Windows Defender Application Control (WDAC) license entitlements are granted by the following licenses:
+App Control license entitlements are granted by the following licenses:
 
 |Windows Pro/Pro Education/SE|Windows Enterprise E3|Windows Enterprise E5|Windows Education A3|Windows Education A5|
 |:---:|:---:|:---:|:---:|:---:|
diff --git a/store-for-business/breadcrumb/toc.yml b/store-for-business/breadcrumb/toc.yml
deleted file mode 100644
index 4b1853471b..0000000000
--- a/store-for-business/breadcrumb/toc.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-- name: Docs
-  tocHref: /
-  topicHref: /
-  items:
-    - name: Microsoft Store for Business
-      tocHref: /microsoft-store
-      topicHref: /microsoft-store/index
\ No newline at end of file
diff --git a/store-for-business/docfx.json b/store-for-business/docfx.json
deleted file mode 100644
index e29e3bfdae..0000000000
--- a/store-for-business/docfx.json
+++ /dev/null
@@ -1,81 +0,0 @@
-{
-  "build": {
-    "content": [
-      {
-        "files": [
-          "**/*.md",
-          "**/**.yml"
-        ],
-        "exclude": [
-          "**/obj/**",
-          "**/includes/**",
-          "README.md",
-          "LICENSE",
-          "LICENSE-CODE",
-          "ThirdPartyNotices"
-        ]
-      }
-    ],
-    "resource": [
-      {
-        "files": [
-          "**/*.png",
-          "**/*.jpg"
-        ],
-        "exclude": [
-          "**/obj/**",
-          "**/includes/**"
-        ]
-      }
-    ],
-    "overwrite": [],
-    "externalReference": [],
-    "globalMetadata": {
-      "recommendations": true,
-      "adobe-target": true,
-      "ms.collection": [
-        "tier2"
-      ],
-      "breadcrumb_path": "/microsoft-store/breadcrumb/toc.json",
-      "uhfHeaderId": "MSDocsHeader-Archive",
-      "is_archived": true,
-      "is_retired": true,
-      "ROBOTS": "NOINDEX,NOFOLLOW",
-      "ms.author": "trudyha",
-      "audience": "ITPro",
-      "ms.service": "store-for-business",
-      "ms.topic": "article",
-      "ms.date": "05/09/2017",
-      "searchScope": [
-        "Store"
-      ],
-      "feedback_system": "None",
-      "hideEdit": true,
-      "_op_documentIdPathDepotMapping": {
-        "./": {
-          "depot_name": "MSDN.store-for-business",
-          "folder_relative_path_in_docset": "./"
-        }
-      },
-      "contributors_to_exclude": [
-        "dstrome2",
-        "rjagiewich",  
-        "American-Dipper",
-        "claydetels19", 
-        "jborsecnik",
-        "v-stchambers",
-        "shdyas",
-        "Stacyrch140",
-        "garycentric",
-        "dstrome",
-        "alekyaj",
-        "aditisrivastava07",
-        "padmagit77"
-      ]
-    },
-    "fileMetadata": {},
-    "template": [],
-    "dest": "store-for-business",
-    "markdownEngineName": "markdig"
-  }
-}
diff --git a/windows/application-management/index.yml b/windows/application-management/index.yml
index ae406114d7..2fe6bc1844 100644
--- a/windows/application-management/index.yml
+++ b/windows/application-management/index.yml
@@ -9,7 +9,7 @@ metadata:
   author: aczechowski
   ms.author: aaroncz
   manager: aaroncz
-  ms.date: 06/28/2024
+  ms.date: 09/27/2024
   ms.topic: landing-page
   ms.service: windows-client
   ms.subservice: itpro-apps
diff --git a/windows/application-management/per-user-services-in-windows.md b/windows/application-management/per-user-services-in-windows.md
index 9e6cefb8ae..f1cf07572c 100644
--- a/windows/application-management/per-user-services-in-windows.md
+++ b/windows/application-management/per-user-services-in-windows.md
@@ -4,7 +4,7 @@ description: Learn about per-user services, how to change the template service s
 author: aczechowski
 ms.author: aaroncz
 manager: aaroncz
-ms.date: 12/22/2023
+ms.date: 10/01/2024
 ms.topic: how-to
 ms.service: windows-client
 ms.subservice: itpro-apps
@@ -99,7 +99,7 @@ $services = Get-Service
 foreach ( $service in $services ) {
   # For each specific service, check if the service type property includes the 64 bit using the bitwise AND operator (-band).
   # If the result equals the flag value, then the service is a per-user service.
-  if ( ( $service.ServiceType -band $flag ) -eq $flag ) { 
+  if ( ( $service.ServiceType -band $flag ) -eq $flag ) {
     # When a per-user service is found, then add that service object to the results array.
     $serviceList += $service
   }
@@ -229,14 +229,14 @@ If you can't use group policy preferences to manage the per-user services, you c
 
 1. The following example includes multiple commands that disable the specified Windows services by changing their **Start** value in the Windows Registry to `4`:
 
-```cmd
-REG.EXE ADD HKLM\System\CurrentControlSet\Services\CDPUserSvc /v Start /t REG_DWORD /d 4 /f
-REG.EXE ADD HKLM\System\CurrentControlSet\Services\OneSyncSvc /v Start /t REG_DWORD /d 4 /f
-REG.EXE ADD HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc /v Start /t REG_DWORD /d 4 /f
-REG.EXE ADD HKLM\System\CurrentControlSet\Services\UnistoreSvc /v Start /t REG_DWORD /d 4 /f
-REG.EXE ADD HKLM\System\CurrentControlSet\Services\UserDataSvc /v Start /t REG_DWORD /d 4 /f
-REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t REG_DWORD /d 4 /f
-```
+    ```cmd
+    REG.EXE ADD HKLM\System\CurrentControlSet\Services\CDPUserSvc /v Start /t REG_DWORD /d 4 /f
+    REG.EXE ADD HKLM\System\CurrentControlSet\Services\OneSyncSvc /v Start /t REG_DWORD /d 4 /f
+    REG.EXE ADD HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc /v Start /t REG_DWORD /d 4 /f
+    REG.EXE ADD HKLM\System\CurrentControlSet\Services\UnistoreSvc /v Start /t REG_DWORD /d 4 /f
+    REG.EXE ADD HKLM\System\CurrentControlSet\Services\UserDataSvc /v Start /t REG_DWORD /d 4 /f
+    REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t REG_DWORD /d 4 /f
+    ```
 
 #### Example 2: Use the Registry Editor user interface to edit the registry
 
@@ -248,7 +248,7 @@ REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t RE
 
 1. Change the **Value data** to `4`.
 
-:::image type="content" source="media/regedit-change-service-startup-type.png" alt-text="Screenshot of the Registry Editor open to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPSvc and highlighting the Start value set to 4.":::
+    :::image type="content" source="media/regedit-change-service-startup-type.png" alt-text="Screenshot of the Registry Editor open to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPSvc and highlighting the Start value set to 4.":::
 
 #### Example 3: Prevent the creation of per-user services
 
diff --git a/windows/application-management/sideload-apps-in-windows.md b/windows/application-management/sideload-apps-in-windows.md
index 3779938afc..8daf6b4e76 100644
--- a/windows/application-management/sideload-apps-in-windows.md
+++ b/windows/application-management/sideload-apps-in-windows.md
@@ -4,7 +4,7 @@ description: Learn how to sideload line-of-business (LOB) apps in Windows client
 author: aczechowski
 ms.author: aaroncz
 manager: aaroncz
-ms.date: 12/22/2023
+ms.date: 09/27/2024
 ms.topic: how-to
 ms.service: windows-client
 ms.subservice: itpro-apps
diff --git a/windows/client-management/manage-windows-copilot.md b/windows/client-management/manage-windows-copilot.md
index d48ca50d9a..d2904f504a 100644
--- a/windows/client-management/manage-windows-copilot.md
+++ b/windows/client-management/manage-windows-copilot.md
@@ -16,7 +16,7 @@ appliesto:
 # Updated Windows and Microsoft Copilot experience
 <!--8445848, 9294806-->
 
->**Looking for consumer information?** See [Welcome to Copilot in Windows](https://support.microsoft.com/topic/675708af-8c16-4675-afeb-85a5a476ccb0).
+>**Looking for consumer information?** See [Welcome to Copilot in Windows](https://support.microsoft.com/topic/675708af-8c16-4675-afeb-85a5a476ccb0). **Looking for more information on Microsoft Copilot experiences?** See [Understanding the different Microsoft Copilot experiences](https://support.microsoft.com/topic/cfff4791-694a-4d90-9c9c-1eb3fb28e842).
 
 ## Enhanced data protection with enterprise data protection
 
diff --git a/windows/client-management/mdm/applicationcontrol-csp.md b/windows/client-management/mdm/applicationcontrol-csp.md
index dd8f2e1b6b..7d20bc1c4c 100644
--- a/windows/client-management/mdm/applicationcontrol-csp.md
+++ b/windows/client-management/mdm/applicationcontrol-csp.md
@@ -11,9 +11,9 @@ ms.date: 01/31/2024
 
 <!-- ApplicationControl-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-Windows Defender Application Control (WDAC) policies can be managed from an MDM server, or locally by using PowerShell via the WMI Bridge through the ApplicationControl configuration service provider (CSP). The ApplicationControl CSP was added in Windows 10, version 1903. This CSP provides expanded diagnostic capabilities and support for [multiple policies](/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies) (introduced in Windows 10, version 1903). It also provides support for policy deployment (introduced in Windows 10, version 1709) without reboot. Unlike the [AppLocker CSP](applocker-csp.md), the ApplicationControl CSP correctly detects the presence of no-reboot option and consequently doesn't schedule a reboot.
+App Control for Business policies can be managed from an MDM server, or locally by using PowerShell via the WMI Bridge through the ApplicationControl configuration service provider (CSP). The ApplicationControl CSP was added in Windows 10, version 1903. This CSP provides expanded diagnostic capabilities and support for [multiple policies](/windows/security/application-security/application-control/app-control-for-business/design/deploy-multiple-appcontrol-policies) (introduced in Windows 10, version 1903). It also provides support for policy deployment (introduced in Windows 10, version 1709) without reboot. Unlike the [AppLocker CSP](applocker-csp.md), the ApplicationControl CSP correctly detects the presence of no-reboot option and consequently doesn't schedule a reboot.
 
-Existing Windows Defender Application Control (WDAC) policies deployed using the AppLocker CSP's CodeIntegrity node can now be deployed using the ApplicationControl CSP URI. Although WDAC policy deployment using the AppLocker CSP will continue to be supported, all new feature work will be done in the ApplicationControl CSP only.
+Existing App Control for Business policies deployed using the AppLocker CSP's CodeIntegrity node can now be deployed using the ApplicationControl CSP URI. Although App Control policy deployment using the AppLocker CSP will continue to be supported, all new feature work will be done in the ApplicationControl CSP only.
 <!-- ApplicationControl-Editable-End -->
 
 <!-- ApplicationControl-Tree-Begin -->
@@ -861,7 +861,7 @@ The following table provides the result of this policy based on different values
 
 ## Microsoft Intune Usage Guidance
 
-For customers using Intune standalone or hybrid management with Configuration Manager to deploy custom policies via the ApplicationControl CSP, refer to [Deploy Windows Defender Application Control policies by using Microsoft Intune](/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune).
+For customers using Intune standalone or hybrid management with Configuration Manager to deploy custom policies via the ApplicationControl CSP, refer to [Deploy App Control for Business policies by using Microsoft Intune](/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-intune).
 
 ## Generic MDM Server Usage Guidance
 
@@ -1014,7 +1014,7 @@ The ApplicationControl CSP can also be managed locally from PowerShell or via Co
 
 ### Setup for using the WMI Bridge
 
-1. Convert your WDAC policy to Base64.
+1. Convert your App Control policy to Base64.
 2. Open PowerShell in Local System context (through PSExec or something similar).
 3. Use WMI Interface:
 
diff --git a/windows/client-management/mdm/clouddesktop-ddf-file.md b/windows/client-management/mdm/clouddesktop-ddf-file.md
index 07c68d9f04..1cf28badea 100644
--- a/windows/client-management/mdm/clouddesktop-ddf-file.md
+++ b/windows/client-management/mdm/clouddesktop-ddf-file.md
@@ -1,7 +1,7 @@
 ---
 title: CloudDesktop DDF file
 description: View the XML file containing the device description framework (DDF) for the CloudDesktop configuration service provider.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the C
       <MSFT:Applicability>
         <MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
         <MSFT:CspVersion>2.0</MSFT:CspVersion>
-        <MSFT:EditionAllowList>0x4;0x30;0x31;0x7E;0x87;0x88;0x88*;0xA1;0xA2;0xA4;0xA5;0xB4;0xBC;0xBD;0xBF;</MSFT:EditionAllowList>
+        <MSFT:EditionAllowList>0x4;0x30;0x31;0x7E;0x88;0xA1;0xA2;0xA4;0xA5;0xBC;0xBF;0xCD;</MSFT:EditionAllowList>
       </MSFT:Applicability>
     </DFProperties>
     <Node>
@@ -139,7 +139,7 @@ The following XML file contains the device description framework (DDF) for the C
       <MSFT:Applicability>
         <MSFT:OsBuildVersion>10.0.22621.3374</MSFT:OsBuildVersion>
         <MSFT:CspVersion>1.0</MSFT:CspVersion>
-        <MSFT:EditionAllowList>0x4;0x30;0x31;0x7E;0x87;0x88;0x88*;0xA1;0xA2;0xA4;0xA5;0xB4;0xBC;0xBD;0xBF;</MSFT:EditionAllowList>
+        <MSFT:EditionAllowList>0x4;0x30;0x31;0x7E;0x88;0xA1;0xA2;0xA4;0xA5;0xBC;0xBF;0xCD;</MSFT:EditionAllowList>
       </MSFT:Applicability>
     </DFProperties>
     <Node>
diff --git a/windows/client-management/mdm/configuration-service-provider-ddf.md b/windows/client-management/mdm/configuration-service-provider-ddf.md
index 99b94df749..bcb544c636 100644
--- a/windows/client-management/mdm/configuration-service-provider-ddf.md
+++ b/windows/client-management/mdm/configuration-service-provider-ddf.md
@@ -13,7 +13,7 @@ This article lists the OMA DM device description framework (DDF) files for vario
 
 As of December 2022, DDF XML schema was updated to include additional information such as OS build applicability. DDF v2 XML files for Windows 10 and Windows 11 are combined, and provided in a single download:
 
-- [DDF v2 Files, May 2024](https://download.microsoft.com/download/f/6/1/f61445f7-1d38-45f7-bc8c-609b86e4aabc/DDFv2May24.zip)
+- [DDF v2 Files, September 2024](https://download.microsoft.com/download/a/a/a/aaadc008-67d4-4dcd-b864-70c479baf7d6/DDFv2September24.zip)
 
 ## DDF v2 schema
 
@@ -574,7 +574,7 @@ DDF v2 XML schema definition is listed below along with the schema definition fo
 ## Older DDF files
 
 You can download the older DDF files for various CSPs from the links below:
-
+- [Download all the DDF files for Windows 10 and 11 May 2024](https://download.microsoft.com/download/f/6/1/f61445f7-1d38-45f7-bc8c-609b86e4aabc/DDFv2May24.zip)
 - [Download all the DDF files for Windows 10 and 11 September 2023](https://download.microsoft.com/download/0/e/c/0ec027e5-8971-49a2-9230-ec9352bc3ead/DDFv2September2023.zip)
 - [Download all the DDF files for Windows 10 and 11 December 2022](https://download.microsoft.com/download/7/4/c/74c6daca-983e-4f16-964a-eef65b553a37/DDFv2December2022.zip)
 - [Download all the DDF files for Windows 10, version 2004](https://download.microsoft.com/download/4/0/f/40f9ec45-3bea-442c-8afd-21edc1e057d8/Windows10_2004_DDF_download.zip)
diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md
index 198570987e..9841e9f442 100644
--- a/windows/client-management/mdm/defender-csp.md
+++ b/windows/client-management/mdm/defender-csp.md
@@ -1,7 +1,7 @@
 ---
 title: Defender CSP
 description: Learn more about the Defender CSP.
-ms.date: 06/21/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -1289,7 +1289,7 @@ Define data duplication remote location for Device Control. When configuring thi
 
 <!-- Device-Configuration-DaysUntilAggressiveCatchupQuickScan-Description-Begin -->
 <!-- Description-Source-DDF -->
-Configure how many days can pass before an aggressive quick scan is triggered. The valid interval is [7-60] days. If not configured, aggressive quick scans will be disabled. By default, the value is set to 25 days when enabled.
+Configure how many days can pass before an aggressive quick scan is triggered. The valid interval is [7-60] days. If not configured, aggressive quick scans will be disabled. By default, the value is set to 30 days when enabled.
 <!-- Device-Configuration-DaysUntilAggressiveCatchupQuickScan-Description-End -->
 
 <!-- Device-Configuration-DaysUntilAggressiveCatchupQuickScan-Editable-Begin -->
@@ -1304,7 +1304,7 @@ Configure how many days can pass before an aggressive quick scan is triggered. T
 | Format | `int` |
 | Access Type | Add, Delete, Get, Replace |
 | Allowed Values | Range: `[7-60]` |
-| Default Value  | 25 |
+| Default Value  | 30 |
 <!-- Device-Configuration-DaysUntilAggressiveCatchupQuickScan-DFProperties-End -->
 
 <!-- Device-Configuration-DaysUntilAggressiveCatchupQuickScan-Examples-Begin -->
diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md
index f286ba947c..2055d5bdf0 100644
--- a/windows/client-management/mdm/defender-ddf.md
+++ b/windows/client-management/mdm/defender-ddf.md
@@ -1,7 +1,7 @@
 ---
 title: Defender DDF file
 description: View the XML file containing the device description framework (DDF) for the Defender configuration service provider.
-ms.date: 06/28/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -2373,8 +2373,8 @@ The following XML file contains the device description framework (DDF) for the D
             <Get />
             <Replace />
           </AccessType>
-          <DefaultValue>25</DefaultValue>
-          <Description>Configure how many days can pass before an aggressive quick scan is triggered. The valid interval is [7-60] days. If not configured, aggressive quick scans will be disabled. By default, the value is set to 25 days when enabled.</Description>
+          <DefaultValue>30</DefaultValue>
+          <Description>Configure how many days can pass before an aggressive quick scan is triggered. The valid interval is [7-60] days. If not configured, aggressive quick scans will be disabled. By default, the value is set to 30 days when enabled.</Description>
           <DFFormat>
             <int />
           </DFFormat>
diff --git a/windows/client-management/mdm/firewall-csp.md b/windows/client-management/mdm/firewall-csp.md
index e269946643..4d6dc724a9 100644
--- a/windows/client-management/mdm/firewall-csp.md
+++ b/windows/client-management/mdm/firewall-csp.md
@@ -1,7 +1,7 @@
 ---
 title: Firewall CSP
 description: Learn more about the Firewall CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -2221,7 +2221,7 @@ Specifies the friendly name of the firewall rule.
 
 <!-- Device-MdmStore-FirewallRules-{FirewallRuleName}-PolicyAppId-Description-Begin -->
 <!-- Description-Source-DDF -->
-Specifies one WDAC tag. This is a string that can contain any alphanumeric character and any of the characters ":", "/", ""., and "_". A PolicyAppId and ServiceName can't be specified in the same rule.
+Specifies one App Control tag. This is a string that can contain any alphanumeric character and any of the characters ":", "/", ""., and "_". A PolicyAppId and ServiceName can't be specified in the same rule.
 <!-- Device-MdmStore-FirewallRules-{FirewallRuleName}-PolicyAppId-Description-End -->
 
 <!-- Device-MdmStore-FirewallRules-{FirewallRuleName}-PolicyAppId-Editable-Begin -->
diff --git a/windows/client-management/mdm/index.yml b/windows/client-management/mdm/index.yml
index f1b84cf506..632aec5fb8 100644
--- a/windows/client-management/mdm/index.yml
+++ b/windows/client-management/mdm/index.yml
@@ -9,7 +9,7 @@ metadata:
   ms.topic: landing-page
   ms.collection:
     - tier1
-  ms.date: 10/25/2023
+  ms.date: 10/07/2024
   ms.localizationpriority: medium
 
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
@@ -27,8 +27,8 @@ landingContent:
             url: configuration-service-provider-support.md
           - text: Device description framework (DDF) files
             url: configuration-service-provider-ddf.md
-          - text: BitLocker CSP
-            url: bitlocker-csp.md
+          - text: Contribute to CSP reference
+            url: contribute-csp-reference.md
           - text: Declared Configuration protocol
             url: ../declared-configuration.md
 
@@ -42,8 +42,8 @@ landingContent:
             url: policy-configuration-service-provider.md
           - text: Policy DDF file
             url: configuration-service-provider-ddf.md
-          - text: Policy CSP - Start
-            url: policy-csp-start.md
+          - text: Policy CSP - Defender
+            url: policy-csp-defender.md
           - text: Policy CSP - Update
             url: policy-csp-update.md
 
diff --git a/windows/client-management/mdm/laps-csp.md b/windows/client-management/mdm/laps-csp.md
index 0e5e7d5b2d..76508deef5 100644
--- a/windows/client-management/mdm/laps-csp.md
+++ b/windows/client-management/mdm/laps-csp.md
@@ -1,7 +1,7 @@
 ---
 title: LAPS CSP
 description: Learn more about the LAPS CSP.
-ms.date: 06/21/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 06/21/2024
 <!-- LAPS-Begin -->
 # LAPS CSP
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- LAPS-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 The Local Administrator Password Solution (LAPS) configuration service provider (CSP) is used by the enterprise to manage back up of local administrator account passwords. Windows supports a LAPS Group Policy Object that is entirely separate from the LAPS CSP. Many of the various settings are common across both the LAPS GPO and CSP (GPO does not support any of the Action-related settings). As long as at least one LAPS setting is configured via CSP, any GPO-configured settings will be ignored. Also see [Configure policy settings for Windows LAPS](/windows-server/identity/laps/laps-management-policy-settings).
@@ -432,7 +430,7 @@ If the specified user or group account is invalid the device will fallback to us
 <!-- Device-Policies-AutomaticAccountManagementEnableAccount-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Device-Policies-AutomaticAccountManagementEnableAccount-Applicability-End -->
 
 <!-- Device-Policies-AutomaticAccountManagementEnableAccount-OmaUri-Begin -->
@@ -488,7 +486,7 @@ If not specified, this setting defaults to False.
 <!-- Device-Policies-AutomaticAccountManagementEnabled-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Device-Policies-AutomaticAccountManagementEnabled-Applicability-End -->
 
 <!-- Device-Policies-AutomaticAccountManagementEnabled-OmaUri-Begin -->
@@ -543,7 +541,7 @@ If not specified, this setting defaults to False.
 <!-- Device-Policies-AutomaticAccountManagementNameOrPrefix-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Device-Policies-AutomaticAccountManagementNameOrPrefix-Applicability-End -->
 
 <!-- Device-Policies-AutomaticAccountManagementNameOrPrefix-OmaUri-Begin -->
@@ -587,7 +585,7 @@ If not specified, this setting will default to "WLapsAdmin".
 <!-- Device-Policies-AutomaticAccountManagementRandomizeName-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Device-Policies-AutomaticAccountManagementRandomizeName-Applicability-End -->
 
 <!-- Device-Policies-AutomaticAccountManagementRandomizeName-OmaUri-Begin -->
@@ -643,7 +641,7 @@ If not specified, this setting defaults to False.
 <!-- Device-Policies-AutomaticAccountManagementTarget-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Device-Policies-AutomaticAccountManagementTarget-Applicability-End -->
 
 <!-- Device-Policies-AutomaticAccountManagementTarget-OmaUri-Begin -->
@@ -759,7 +757,7 @@ If not specified, this setting will default to 0.
 <!-- Device-Policies-PassphraseLength-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Device-Policies-PassphraseLength-Applicability-End -->
 
 <!-- Device-Policies-PassphraseLength-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/laps-ddf-file.md b/windows/client-management/mdm/laps-ddf-file.md
index 5d06e470a6..d32a646434 100644
--- a/windows/client-management/mdm/laps-ddf-file.md
+++ b/windows/client-management/mdm/laps-ddf-file.md
@@ -1,7 +1,7 @@
 ---
 title: LAPS DDF file
 description: View the XML file containing the device description framework (DDF) for the LAPS configuration service provider.
-ms.date: 06/28/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -327,7 +327,7 @@ This setting has a maximum allowed value of 10 words.</Description>
             <MIME />
           </DFType>
           <MSFT:Applicability>
-            <MSFT:OsBuildVersion>99.9.9999</MSFT:OsBuildVersion>
+            <MSFT:OsBuildVersion>10.0.26100</MSFT:OsBuildVersion>
             <MSFT:CspVersion>1.1</MSFT:CspVersion>
           </MSFT:Applicability>
           <MSFT:AllowedValues ValueType="Range">
@@ -690,7 +690,7 @@ If not specified, this setting defaults to False.</Description>
             <MIME />
           </DFType>
           <MSFT:Applicability>
-            <MSFT:OsBuildVersion>99.9.9999</MSFT:OsBuildVersion>
+            <MSFT:OsBuildVersion>10.0.26100</MSFT:OsBuildVersion>
             <MSFT:CspVersion>1.1</MSFT:CspVersion>
           </MSFT:Applicability>
           <MSFT:AllowedValues ValueType="ENUM">
@@ -736,7 +736,7 @@ If not specified, this setting will default to 1.</Description>
             <MIME />
           </DFType>
           <MSFT:Applicability>
-            <MSFT:OsBuildVersion>99.9.9999</MSFT:OsBuildVersion>
+            <MSFT:OsBuildVersion>10.0.26100</MSFT:OsBuildVersion>
             <MSFT:CspVersion>1.1</MSFT:CspVersion>
           </MSFT:Applicability>
           <MSFT:AllowedValues ValueType="ENUM">
@@ -791,7 +791,7 @@ If not specified, this setting will default to "WLapsAdmin".</Description>
             <MIME />
           </DFType>
           <MSFT:Applicability>
-            <MSFT:OsBuildVersion>99.9.9999</MSFT:OsBuildVersion>
+            <MSFT:OsBuildVersion>10.0.26100</MSFT:OsBuildVersion>
             <MSFT:CspVersion>1.1</MSFT:CspVersion>
           </MSFT:Applicability>
           <MSFT:DependencyBehavior>
@@ -839,7 +839,7 @@ If not specified, this setting defaults to False.</Description>
             <MIME />
           </DFType>
           <MSFT:Applicability>
-            <MSFT:OsBuildVersion>99.9.9999</MSFT:OsBuildVersion>
+            <MSFT:OsBuildVersion>10.0.26100</MSFT:OsBuildVersion>
             <MSFT:CspVersion>1.1</MSFT:CspVersion>
           </MSFT:Applicability>
           <MSFT:AllowedValues ValueType="ENUM">
@@ -897,7 +897,7 @@ If not specified, this setting defaults to False.</Description>
             <MIME />
           </DFType>
           <MSFT:Applicability>
-            <MSFT:OsBuildVersion>99.9.9999</MSFT:OsBuildVersion>
+            <MSFT:OsBuildVersion>10.0.26100</MSFT:OsBuildVersion>
             <MSFT:CspVersion>1.1</MSFT:CspVersion>
           </MSFT:Applicability>
           <MSFT:AllowedValues ValueType="ENUM">
diff --git a/windows/client-management/mdm/office-csp.md b/windows/client-management/mdm/office-csp.md
index 70692efc8b..5dc08b8a09 100644
--- a/windows/client-management/mdm/office-csp.md
+++ b/windows/client-management/mdm/office-csp.md
@@ -1,7 +1,7 @@
 ---
 title: Office CSP
 description: Learn more about the Office CSP.
-ms.date: 01/18/2024
+ms.date: 10/10/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -11,7 +11,7 @@ ms.date: 01/18/2024
 
 <!-- Office-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-The Office configuration service provider (CSP) enables a Microsoft Office client to be installed on a device via the Office Deployment Tool (ODT). For more information, see [Configuration options for the Office Deployment Tool](/deployoffice/office-deployment-tool-configuration-options) and [How to assign Office 365 apps to Windows 10 devices with Microsoft Intune](/intune/apps-add-office365).
+The Office configuration service provider (CSP) enables a Microsoft Office client to be installed on a device via the Office Deployment Tool (ODT). For more information, see [Configuration options for the Office Deployment Tool](/deployoffice/office-deployment-tool-configuration-options) and [Add Microsoft 365 Apps to Windows devices with Microsoft Intune](/mem/intune/apps/apps-add-office365).
 <!-- Office-Editable-End -->
 
 <!-- Office-Tree-Begin -->
@@ -587,7 +587,7 @@ To get the current status of Office 365 on the device.
 | 17001      | ERROR_QUEUE_SCENARIO <br/>Failed to queue installation scenario in C2RClient                                                                                                                                                                                                                                                      | Failure |
 | 17002      | ERROR_COMPLETING_SCENARIO <br>Failed to complete the process. Possible reasons:<li>Installation canceled by user<li>Installation canceled by another installation<li>Out of disk space during installation <li>Unknown language ID                                                                                                | Failure |
 | 17003      | ERROR_ANOTHER_RUNNING_SCENARIO <br>Another scenario is running                                                                                                                                                                                                                                                                    | Failure |
-| 17004      | ERROR_COMPLETING_SCENARIO_NEED_CLEAN_UP<br>Possible reasons:<li>Unknown SKUs<li>Content does't exist on CDN<ul><li>Such as trying to install an unsupported LAP, like zh-sg<li>CDN issue that content is not available</li></ul><li>Signature check issue, such as failed the signature check for Office content<li>User canceled | Failure |
+| 17004      | ERROR_COMPLETING_SCENARIO_NEED_CLEAN_UP<br>Possible reasons:<li>Unknown SKUs<li>Content doesn't exist on CDN<ul><li>Such as trying to install an unsupported LAP, like zh-sg<li>CDN issue that content is not available</li></ul><li>Signature check issue, such as failed the signature check for Office content<li>User canceled | Failure |
 | 17005      | ERROR_SCENARIO_CANCELLED_AS_PLANNED                                                                                                                                                                                                                                                                                               | Failure |
 | 17006      | ERROR_SCENARIO_CANCELLED<br>Blocked update by running apps                                                                                                                                                                                                                                                                        | Failure |
 | 17007      | ERROR_REMOVE_INSTALLATION_NEEDED<br>The client is requesting client clean-up in a "Remove Installation" scenario                                                                                                                                                                                                                  | Failure |
diff --git a/windows/client-management/mdm/personalization-ddf.md b/windows/client-management/mdm/personalization-ddf.md
index 052f60bfcd..6cf4a75b50 100644
--- a/windows/client-management/mdm/personalization-ddf.md
+++ b/windows/client-management/mdm/personalization-ddf.md
@@ -1,7 +1,7 @@
 ---
 title: Personalization DDF file
 description: View the XML file containing the device description framework (DDF) for the Personalization configuration service provider.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the P
       <MSFT:Applicability>
         <MSFT:OsBuildVersion>10.0.16299</MSFT:OsBuildVersion>
         <MSFT:CspVersion>1.0</MSFT:CspVersion>
-        <MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB;</MSFT:EditionAllowList>
+        <MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2;</MSFT:EditionAllowList>
       </MSFT:Applicability>
     </DFProperties>
     <Node>
diff --git a/windows/client-management/mdm/policies-in-policy-csp-supported-by-hololens2.md b/windows/client-management/mdm/policies-in-policy-csp-supported-by-hololens2.md
index c0c0fd2588..826ef1ac3b 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-supported-by-hololens2.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-supported-by-hololens2.md
@@ -137,7 +137,6 @@ ms.date: 02/03/2023
 - [Update/ConfigureDeadlineForFeatureUpdates](policy-csp-update.md#configuredeadlineforfeatureupdates) <sup>11</sup>
 - [Update/ConfigureDeadlineForQualityUpdates](policy-csp-update.md#configuredeadlineforqualityupdates) <sup>11</sup>
 - [Update/ConfigureDeadlineGracePeriod](policy-csp-update.md#configuredeadlinegraceperiod) <sup>11</sup>
-- [Update/ConfigureDeadlineNoAutoReboot](policy-csp-update.md#configuredeadlinenoautoreboot) <sup>11</sup>
 - [Update/DeferFeatureUpdatesPeriodInDays](policy-csp-update.md#deferfeatureupdatesperiodindays)
 - [Update/DeferQualityUpdatesPeriodInDays](policy-csp-update.md#deferqualityupdatesperiodindays)
 - [Update/ManagePreviewBuilds](policy-csp-update.md#managepreviewbuilds)
diff --git a/windows/client-management/mdm/policies-in-preview.md b/windows/client-management/mdm/policies-in-preview.md
index 0ad7b632c3..2c62565783 100644
--- a/windows/client-management/mdm/policies-in-preview.md
+++ b/windows/client-management/mdm/policies-in-preview.md
@@ -1,7 +1,7 @@
 ---
 title: Configuration service provider preview policies
 description: Learn more about configuration service provider (CSP) policies that are available for Windows Insider Preview.
-ms.date: 09/11/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -17,6 +17,7 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [TurnOffInstallTracing](policy-csp-appdeviceinventory.md#turnoffinstalltracing)
 - [TurnOffAPISamping](policy-csp-appdeviceinventory.md#turnoffapisamping)
 - [TurnOffApplicationFootprint](policy-csp-appdeviceinventory.md#turnoffapplicationfootprint)
+- [TurnOffWin32AppBackup](policy-csp-appdeviceinventory.md#turnoffwin32appbackup)
 
 ## ClientCertificateInstall CSP
 
@@ -28,15 +29,6 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [EnablePhysicalDeviceAccessOnErrorScreens](clouddesktop-csp.md#userenablephysicaldeviceaccessonerrorscreens)
 - [EnableBootToCloudSharedPCMode](clouddesktop-csp.md#deviceenableboottocloudsharedpcmode)
 
-## Cryptography
-
-- [ConfigureEllipticCurveCryptography](policy-csp-cryptography.md#configureellipticcurvecryptography)
-- [ConfigureSystemCryptographyForceStrongKeyProtection](policy-csp-cryptography.md#configuresystemcryptographyforcestrongkeyprotection)
-- [OverrideMinimumEnabledTLSVersionClient](policy-csp-cryptography.md#overrideminimumenabledtlsversionclient)
-- [OverrideMinimumEnabledTLSVersionServer](policy-csp-cryptography.md#overrideminimumenabledtlsversionserver)
-- [OverrideMinimumEnabledDTLSVersionClient](policy-csp-cryptography.md#overrideminimumenableddtlsversionclient)
-- [OverrideMinimumEnabledDTLSVersionServer](policy-csp-cryptography.md#overrideminimumenableddtlsversionserver)
-
 ## DeclaredConfiguration CSP
 
 - [Document](declaredconfiguration-csp.md#hostcompletedocumentsdociddocument)
@@ -47,23 +39,6 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [DODisallowCacheServerDownloadsOnVPN](policy-csp-deliveryoptimization.md#dodisallowcacheserverdownloadsonvpn)
 - [DOVpnKeywords](policy-csp-deliveryoptimization.md#dovpnkeywords)
 
-## DesktopAppInstaller
-
-- [EnableWindowsPackageManagerCommandLineInterfaces](policy-csp-desktopappinstaller.md#enablewindowspackagemanagercommandlineinterfaces)
-- [EnableWindowsPackageManagerConfiguration](policy-csp-desktopappinstaller.md#enablewindowspackagemanagerconfiguration)
-
-## DeviceLock
-
-- [MaximumPasswordAge](policy-csp-devicelock.md#maximumpasswordage)
-- [ClearTextPassword](policy-csp-devicelock.md#cleartextpassword)
-- [PasswordComplexity](policy-csp-devicelock.md#passwordcomplexity)
-- [PasswordHistorySize](policy-csp-devicelock.md#passwordhistorysize)
-- [AccountLockoutPolicy](policy-csp-devicelock.md#accountlockoutpolicy)
-- [AllowAdministratorLockout](policy-csp-devicelock.md#allowadministratorlockout)
-- [MinimumPasswordLength](policy-csp-devicelock.md#minimumpasswordlength)
-- [MinimumPasswordLengthAudit](policy-csp-devicelock.md#minimumpasswordlengthaudit)
-- [RelaxMinimumPasswordLengthLimits](policy-csp-devicelock.md#relaxminimumpasswordlengthlimits)
-
 ## DevicePreparation CSP
 
 - [PageEnabled](devicepreparation-csp.md#pageenabled)
@@ -84,12 +59,6 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [Cadence](dmclient-csp.md#deviceproviderprovideridconfigrefreshcadence)
 - [PausePeriod](dmclient-csp.md#deviceproviderprovideridconfigrefreshpauseperiod)
 
-## Experience
-
-- [AllowScreenRecorder](policy-csp-experience.md#allowscreenrecorder)
-- [EnableOrganizationalMessages](policy-csp-experience.md#enableorganizationalmessages)
-- [DisableTextTranslation](policy-csp-experience.md#disabletexttranslation)
-
 ## FileSystem
 
 - [EnableDevDrive](policy-csp-filesystem.md#enabledevdrive)
@@ -99,13 +68,6 @@ This article lists the policies that are applicable for Windows Insider Preview
 
 - [AttestErrorMessage](healthattestation-csp.md#attesterrormessage)
 
-## HumanPresence
-
-- [ForceDisableWakeWhenBatterySaverOn](policy-csp-humanpresence.md#forcedisablewakewhenbatterysaveron)
-- [ForceAllowWakeWhenExternalDisplayConnected](policy-csp-humanpresence.md#forceallowwakewhenexternaldisplayconnected)
-- [ForceAllowLockWhenExternalDisplayConnected](policy-csp-humanpresence.md#forceallowlockwhenexternaldisplayconnected)
-- [ForceAllowDimWhenExternalDisplayConnected](policy-csp-humanpresence.md#forceallowdimwhenexternaldisplayconnected)
-
 ## InternetExplorer
 
 - [AllowLegacyURLFields](policy-csp-internetexplorer.md#allowlegacyurlfields)
@@ -121,49 +83,8 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [StartInstallation](language-pack-management-csp.md#installlanguage-idstartinstallation)
 - [SystemPreferredUILanguages](language-pack-management-csp.md#languagesettingssystempreferreduilanguages)
 
-## LAPS CSP
-
-- [PassphraseLength](laps-csp.md#policiespassphraselength)
-- [AutomaticAccountManagementEnabled](laps-csp.md#policiesautomaticaccountmanagementenabled)
-- [AutomaticAccountManagementTarget](laps-csp.md#policiesautomaticaccountmanagementtarget)
-- [AutomaticAccountManagementNameOrPrefix](laps-csp.md#policiesautomaticaccountmanagementnameorprefix)
-- [AutomaticAccountManagementEnableAccount](laps-csp.md#policiesautomaticaccountmanagementenableaccount)
-- [AutomaticAccountManagementRandomizeName](laps-csp.md#policiesautomaticaccountmanagementrandomizename)
-
 ## LocalPoliciesSecurityOptions
 
-- [Audit_AuditTheUseOfBackupAndRestoreprivilege](policy-csp-localpoliciessecurityoptions.md#audit_audittheuseofbackupandrestoreprivilege)
-- [Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettings](policy-csp-localpoliciessecurityoptions.md#audit_forceauditpolicysubcategorysettingstooverrideauditpolicycategorysettings)
-- [Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAudits](policy-csp-localpoliciessecurityoptions.md#audit_shutdownsystemimmediatelyifunabletologsecurityaudits)
-- [Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnly](policy-csp-localpoliciessecurityoptions.md#devices_restrictfloppyaccesstolocallyloggedonuseronly)
-- [DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways](policy-csp-localpoliciessecurityoptions.md#domainmember_digitallyencryptorsignsecurechanneldataalways)
-- [DomainMember_DigitallyEncryptSecureChannelDataWhenPossible](policy-csp-localpoliciessecurityoptions.md#domainmember_digitallyencryptsecurechanneldatawhenpossible)
-- [DomainMember_DigitallySignSecureChannelDataWhenPossible](policy-csp-localpoliciessecurityoptions.md#domainmember_digitallysignsecurechanneldatawhenpossible)
-- [DomainMember_DisableMachineAccountPasswordChanges](policy-csp-localpoliciessecurityoptions.md#domainmember_disablemachineaccountpasswordchanges)
-- [DomainMember_MaximumMachineAccountPasswordAge](policy-csp-localpoliciessecurityoptions.md#domainmember_maximummachineaccountpasswordage)
-- [DomainMember_RequireStrongSessionKey](policy-csp-localpoliciessecurityoptions.md#domainmember_requirestrongsessionkey)
-- [InteractiveLogon_MachineAccountLockoutThreshold](policy-csp-localpoliciessecurityoptions.md#interactivelogon_machineaccountlockoutthreshold)
-- [InteractiveLogon_NumberOfPreviousLogonsToCache](policy-csp-localpoliciessecurityoptions.md#interactivelogon_numberofpreviouslogonstocache)
-- [InteractiveLogon_PromptUserToChangePasswordBeforeExpiration](policy-csp-localpoliciessecurityoptions.md#interactivelogon_promptusertochangepasswordbeforeexpiration)
-- [MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession](policy-csp-localpoliciessecurityoptions.md#microsoftnetworkserver_amountofidletimerequiredbeforesuspendingsession)
-- [MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire](policy-csp-localpoliciessecurityoptions.md#microsoftnetworkserver_disconnectclientswhenlogonhoursexpire)
-- [MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel](policy-csp-localpoliciessecurityoptions.md#microsoftnetworkserver_serverspntargetnamevalidationlevel)
-- [NetworkAccess_AllowAnonymousSIDOrNameTranslation](policy-csp-localpoliciessecurityoptions.md#networkaccess_allowanonymoussidornametranslation)
-- [NetworkAccess_DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication](policy-csp-localpoliciessecurityoptions.md#networkaccess_donotallowstorageofpasswordsandcredentialsfornetworkauthentication)
-- [NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers](policy-csp-localpoliciessecurityoptions.md#networkaccess_leteveryonepermissionsapplytoanonymoususers)
-- [NetworkAccess_NamedPipesThatCanBeAccessedAnonymously](policy-csp-localpoliciessecurityoptions.md#networkaccess_namedpipesthatcanbeaccessedanonymously)
-- [NetworkAccess_RemotelyAccessibleRegistryPaths](policy-csp-localpoliciessecurityoptions.md#networkaccess_remotelyaccessibleregistrypaths)
-- [NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths](policy-csp-localpoliciessecurityoptions.md#networkaccess_remotelyaccessibleregistrypathsandsubpaths)
-- [NetworkAccess_SharesThatCanBeAccessedAnonymously](policy-csp-localpoliciessecurityoptions.md#networkaccess_sharesthatcanbeaccessedanonymously)
-- [NetworkAccess_SharingAndSecurityModelForLocalAccounts](policy-csp-localpoliciessecurityoptions.md#networkaccess_sharingandsecuritymodelforlocalaccounts)
-- [NetworkSecurity_AllowLocalSystemNULLSessionFallback](policy-csp-localpoliciessecurityoptions.md#networksecurity_allowlocalsystemnullsessionfallback)
-- [NetworkSecurity_ForceLogoffWhenLogonHoursExpire](policy-csp-localpoliciessecurityoptions.md#networksecurity_forcelogoffwhenlogonhoursexpire)
-- [NetworkSecurity_LDAPClientSigningRequirements](policy-csp-localpoliciessecurityoptions.md#networksecurity_ldapclientsigningrequirements)
-- [RecoveryConsole_AllowAutomaticAdministrativeLogon](policy-csp-localpoliciessecurityoptions.md#recoveryconsole_allowautomaticadministrativelogon)
-- [RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders](policy-csp-localpoliciessecurityoptions.md#recoveryconsole_allowfloppycopyandaccesstoalldrivesandallfolders)
-- [SystemCryptography_ForceStrongKeyProtection](policy-csp-localpoliciessecurityoptions.md#systemcryptography_forcestrongkeyprotection)
-- [SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems](policy-csp-localpoliciessecurityoptions.md#systemobjects_requirecaseinsensitivityfornonwindowssubsystems)
-- [SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects](policy-csp-localpoliciessecurityoptions.md#systemobjects_strengthendefaultpermissionsofinternalsystemobjects)
 - [UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtection](policy-csp-localpoliciessecurityoptions.md#useraccountcontrol_behavioroftheelevationpromptforadministratorprotection)
 - [UserAccountControl_TypeOfAdminApprovalMode](policy-csp-localpoliciessecurityoptions.md#useraccountcontrol_typeofadminapprovalmode)
 
@@ -174,23 +95,6 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [ConfigureDeviceStandbyAction](policy-csp-mixedreality.md#configuredevicestandbyaction)
 - [ConfigureDeviceStandbyActionTimeout](policy-csp-mixedreality.md#configuredevicestandbyactiontimeout)
 
-## MSSecurityGuide
-
-- [NetBTNodeTypeConfiguration](policy-csp-mssecurityguide.md#netbtnodetypeconfiguration)
-
-## NetworkListManager
-
-- [AllNetworks_NetworkIcon](policy-csp-networklistmanager.md#allnetworks_networkicon)
-- [AllNetworks_NetworkLocation](policy-csp-networklistmanager.md#allnetworks_networklocation)
-- [AllNetworks_NetworkName](policy-csp-networklistmanager.md#allnetworks_networkname)
-- [IdentifyingNetworks_LocationType](policy-csp-networklistmanager.md#identifyingnetworks_locationtype)
-- [UnidentifiedNetworks_LocationType](policy-csp-networklistmanager.md#unidentifiednetworks_locationtype)
-- [UnidentifiedNetworks_UserPermissions](policy-csp-networklistmanager.md#unidentifiednetworks_userpermissions)
-
-## Notifications
-
-- [DisableAccountNotifications](policy-csp-notifications.md#disableaccountnotifications)
-
 ## PassportForWork CSP
 
 - [EnableWindowsHelloProvisioningForSecurityKeys](passportforwork-csp.md#devicetenantidpoliciesenablewindowshelloprovisioningforsecuritykeys)
@@ -202,77 +106,15 @@ This article lists the policies that are applicable for Windows Insider Preview
 
 ## RemoteDesktopServices
 
-- [LimitServerToClientClipboardRedirection](policy-csp-remotedesktopservices.md#limitservertoclientclipboardredirection)
-- [LimitClientToServerClipboardRedirection](policy-csp-remotedesktopservices.md#limitclienttoserverclipboardredirection)
-- [DisconnectOnLockLegacyAuthn](policy-csp-remotedesktopservices.md#disconnectonlocklegacyauthn)
-- [DisconnectOnLockMicrosoftIdentityAuthn](policy-csp-remotedesktopservices.md#disconnectonlockmicrosoftidentityauthn)
 - [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-remotedesktopservices.md#ts_server_remoteapp_use_shellappruntime)
 
-## Search
-
-- [ConfigureSearchOnTaskbarMode](policy-csp-search.md#configuresearchontaskbarmode)
-
-## SettingsSync
-
-- [DisableAccessibilitySettingSync](policy-csp-settingssync.md#disableaccessibilitysettingsync)
-- [DisableLanguageSettingSync](policy-csp-settingssync.md#disablelanguagesettingsync)
-
-## Sudo
-
-- [EnableSudo](policy-csp-sudo.md#enablesudo)
-
 ## SurfaceHub CSP
 
 - [ExchangeModernAuthEnabled](surfacehub-csp.md#deviceaccountexchangemodernauthenabled)
 
-## System
-
-- [HideUnsupportedHardwareNotifications](policy-csp-system.md#hideunsupportedhardwarenotifications)
-
-## SystemServices
-
-- [ConfigureComputerBrowserServiceStartupMode](policy-csp-systemservices.md#configurecomputerbrowserservicestartupmode)
-- [ConfigureIISAdminServiceStartupMode](policy-csp-systemservices.md#configureiisadminservicestartupmode)
-- [ConfigureInfraredMonitorServiceStartupMode](policy-csp-systemservices.md#configureinfraredmonitorservicestartupmode)
-- [ConfigureInternetConnectionSharingServiceStartupMode](policy-csp-systemservices.md#configureinternetconnectionsharingservicestartupmode)
-- [ConfigureLxssManagerServiceStartupMode](policy-csp-systemservices.md#configurelxssmanagerservicestartupmode)
-- [ConfigureMicrosoftFTPServiceStartupMode](policy-csp-systemservices.md#configuremicrosoftftpservicestartupmode)
-- [ConfigureRemoteProcedureCallLocatorServiceStartupMode](policy-csp-systemservices.md#configureremoteprocedurecalllocatorservicestartupmode)
-- [ConfigureRoutingAndRemoteAccessServiceStartupMode](policy-csp-systemservices.md#configureroutingandremoteaccessservicestartupmode)
-- [ConfigureSimpleTCPIPServicesStartupMode](policy-csp-systemservices.md#configuresimpletcpipservicesstartupmode)
-- [ConfigureSpecialAdministrationConsoleHelperServiceStartupMode](policy-csp-systemservices.md#configurespecialadministrationconsolehelperservicestartupmode)
-- [ConfigureSSDPDiscoveryServiceStartupMode](policy-csp-systemservices.md#configuressdpdiscoveryservicestartupmode)
-- [ConfigureUPnPDeviceHostServiceStartupMode](policy-csp-systemservices.md#configureupnpdevicehostservicestartupmode)
-- [ConfigureWebManagementServiceStartupMode](policy-csp-systemservices.md#configurewebmanagementservicestartupmode)
-- [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode](policy-csp-systemservices.md#configurewindowsmediaplayernetworksharingservicestartupmode)
-- [ConfigureWindowsMobileHotspotServiceStartupMode](policy-csp-systemservices.md#configurewindowsmobilehotspotservicestartupmode)
-- [ConfigureWorldWideWebPublishingServiceStartupMode](policy-csp-systemservices.md#configureworldwidewebpublishingservicestartupmode)
-
 ## Update
 
 - [AllowTemporaryEnterpriseFeatureControl](policy-csp-update.md#allowtemporaryenterprisefeaturecontrol)
-- [ConfigureDeadlineNoAutoRebootForFeatureUpdates](policy-csp-update.md#configuredeadlinenoautorebootforfeatureupdates)
-- [ConfigureDeadlineNoAutoRebootForQualityUpdates](policy-csp-update.md#configuredeadlinenoautorebootforqualityupdates)
-- [AlwaysAutoRebootAtScheduledTimeMinutes](policy-csp-update.md#alwaysautorebootatscheduledtimeminutes)
-
-## UserRights
-
-- [BypassTraverseChecking](policy-csp-userrights.md#bypasstraversechecking)
-- [ReplaceProcessLevelToken](policy-csp-userrights.md#replaceprocessleveltoken)
-- [ChangeTimeZone](policy-csp-userrights.md#changetimezone)
-- [ShutDownTheSystem](policy-csp-userrights.md#shutdownthesystem)
-- [LogOnAsBatchJob](policy-csp-userrights.md#logonasbatchjob)
-- [ProfileSystemPerformance](policy-csp-userrights.md#profilesystemperformance)
-- [DenyLogOnAsBatchJob](policy-csp-userrights.md#denylogonasbatchjob)
-- [LogOnAsService](policy-csp-userrights.md#logonasservice)
-- [IncreaseProcessWorkingSet](policy-csp-userrights.md#increaseprocessworkingset)
-- [DenyLogOnAsService](policy-csp-userrights.md#denylogonasservice)
-- [AdjustMemoryQuotasForProcess](policy-csp-userrights.md#adjustmemoryquotasforprocess)
-- [AllowLogOnThroughRemoteDesktop](policy-csp-userrights.md#allowlogonthroughremotedesktop)
-
-## WebThreatDefense
-
-- [AutomaticDataCollection](policy-csp-webthreatdefense.md#automaticdatacollection)
 
 ## Wifi
 
@@ -281,7 +123,7 @@ This article lists the policies that are applicable for Windows Insider Preview
 
 ## WindowsAI
 
-- [DisableAIDataAnalysis](policy-csp-windowsai.md#disableaidataanalysis)
+- [SetCopilotHardwareKey](policy-csp-windowsai.md#setcopilothardwarekey)
 - [DisableImageCreator](policy-csp-windowsai.md#disableimagecreator)
 - [DisableCocreator](policy-csp-windowsai.md#disablecocreator)
 
@@ -294,11 +136,6 @@ This article lists the policies that are applicable for Windows Insider Preview
 - [DisableSubscription](windowslicensing-csp.md#subscriptionsdisablesubscription)
 - [RemoveSubscription](windowslicensing-csp.md#subscriptionsremovesubscription)
 
-## WindowsSandbox
-
-- [AllowMappedFolders](policy-csp-windowssandbox.md#allowmappedfolders)
-- [AllowWriteToMappedFolders](policy-csp-windowssandbox.md#allowwritetomappedfolders)
-
 ## Related articles
 
 [Policy configuration service provider](policy-configuration-service-provider.md)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index 0fa200d984..1823ce5450 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -1,7 +1,7 @@
 ---
 title: Policy CSP
 description: Learn more about the Policy CSP.
-ms.date: 08/07/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -1152,6 +1152,7 @@ Specifies the name/value pair used in the policy. See the individual Area DDFs f
 - [Settings](policy-csp-settings.md)
 - [SettingsSync](policy-csp-settingssync.md)
 - [SmartScreen](policy-csp-smartscreen.md)
+- [SpeakForMe](policy-csp-speakforme.md)
 - [Speech](policy-csp-speech.md)
 - [Start](policy-csp-start.md)
 - [Stickers](policy-csp-stickers.md)
diff --git a/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md b/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md
index 0cdd78d66b..3f48213786 100644
--- a/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md
+++ b/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_AppxPackageManager Policy CSP
 description: Learn more about the ADMX_AppxPackageManager Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -32,7 +32,7 @@ ms.date: 08/06/2024
 
 <!-- AllowDeploymentInSpecialProfiles-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting allows you to manage the deployment of Windows Store apps when the user is signed in using a special profile. Special profiles are the following user profiles, where changes are discarded after the user signs off:
+This policy setting allows you to manage the deployment of packaged Microsoft Store apps when the user is signed in using a special profile. Special profiles are the following user profiles, where changes are discarded after the user signs off:
 
 Roaming user profiles to which the "Delete cached copies of roaming profiles" Group Policy setting applies.
 
@@ -42,9 +42,9 @@ Temporary user profiles, which are created when an error prevents the correct pr
 
 User profiles for the Guest account and members of the Guests group.
 
-- If you enable this policy setting, Group Policy allows deployment operations (adding, registering, staging, updating, or removing an app package) of Windows Store apps when using a special profile.
+- If you enable this policy setting, Group Policy allows deployment operations (adding, registering, staging, updating, or removing an app package) of packaged Microsoft Store apps when using a special profile.
 
-- If you disable or don't configure this policy setting, Group Policy blocks deployment operations of Windows Store apps when using a special profile.
+- If you disable or don't configure this policy setting, Group Policy blocks deployment operations of packaged Microsoft Store apps when using a special profile.
 <!-- AllowDeploymentInSpecialProfiles-Description-End -->
 
 <!-- AllowDeploymentInSpecialProfiles-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-admx-appxruntime.md b/windows/client-management/mdm/policy-csp-admx-appxruntime.md
index 540235107e..1cc79f97a0 100644
--- a/windows/client-management/mdm/policy-csp-admx-appxruntime.md
+++ b/windows/client-management/mdm/policy-csp-admx-appxruntime.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_AppXRuntime Policy CSP
 description: Learn more about the ADMX_AppXRuntime Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -32,11 +32,11 @@ ms.date: 08/06/2024
 
 <!-- AppxRuntimeApplicationContentUriRules-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting lets you turn on Content URI Rules to supplement the static Content URI Rules that were defined as part of the app manifest and apply to all Windows Store apps that use the enterpriseAuthentication capability on a computer.
+This policy setting lets you turn on Content URI Rules to supplement the static Content URI Rules that were defined as part of the app manifest and apply to all packaged Microsoft Store apps that use the enterpriseAuthentication capability on a computer.
 
-- If you enable this policy setting, you can define additional Content URI Rules that all Windows Store apps that use the enterpriseAuthentication capability on a computer can use.
+- If you enable this policy setting, you can define additional Content URI Rules that all packaged Microsoft Store apps that use the enterpriseAuthentication capability on a computer can use.
 
-- If you disable or don't set this policy setting, Windows Store apps will only use the static Content URI Rules.
+- If you disable or don't set this policy setting, packaged Microsoft Store apps will only use the static Content URI Rules.
 <!-- AppxRuntimeApplicationContentUriRules-Description-End -->
 
 <!-- AppxRuntimeApplicationContentUriRules-Editable-Begin -->
@@ -60,7 +60,7 @@ This policy setting lets you turn on Content URI Rules to supplement the static
 | Name | Value |
 |:--|:--|
 | Name | AppxRuntimeApplicationContentUriRules |
-| Friendly Name | Turn on dynamic Content URI Rules for Windows store apps |
+| Friendly Name | Turn on dynamic Content URI Rules for packaged Microsoft Store apps |
 | Location | Computer Configuration |
 | Path | Windows Components > App runtime |
 | Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Packages\Applications |
@@ -95,11 +95,11 @@ This policy setting lets you turn on Content URI Rules to supplement the static
 
 <!-- AppxRuntimeBlockFileElevation-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting lets you control whether Windows Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a Windows Store app might compromise the system by opening a file in the default desktop app for a file type.
+This policy setting lets you control whether packaged Microsoft Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than packaged Microsoft Store apps, there is a risk that a packaged Microsoft Store app might compromise the system by opening a file in the default desktop app for a file type.
 
-- If you enable this policy setting, Windows Store apps can't open files in the default desktop app for a file type; they can open files only in other Windows Store apps.
+- If you enable this policy setting, packaged Microsoft Store apps can't open files in the default desktop app for a file type; they can open files only in other packaged Microsoft Store apps.
 
-- If you disable or don't configure this policy setting, Windows Store apps can open files in the default desktop app for a file type.
+- If you disable or don't configure this policy setting, packaged Microsoft Store apps can open files in the default desktop app for a file type.
 <!-- AppxRuntimeBlockFileElevation-Description-End -->
 
 <!-- AppxRuntimeBlockFileElevation-Editable-Begin -->
@@ -219,14 +219,14 @@ This policy shouldn't be enabled unless recommended by Microsoft as a security r
 
 <!-- AppxRuntimeBlockProtocolElevation-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app.
+This policy setting lets you control whether packaged Microsoft Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than packaged Microsoft Store apps, there is a risk that a URI scheme launched by a packaged Microsoft Store app might compromise the system by launching a desktop app.
 
-- If you enable this policy setting, Windows Store apps can't open URIs in the default desktop app for a URI scheme; they can open URIs only in other Windows Store apps.
+- If you enable this policy setting, packaged Microsoft Store apps can't open URIs in the default desktop app for a URI scheme; they can open URIs only in other packaged Microsoft Store apps.
 
-- If you disable or don't configure this policy setting, Windows Store apps can open URIs in the default desktop app for a URI scheme.
+- If you disable or don't configure this policy setting, packaged Microsoft Store apps can open URIs in the default desktop app for a URI scheme.
 
 > [!NOTE]
-> Enabling this policy setting doesn't block Windows Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk.
+> Enabling this policy setting doesn't block packaged Microsoft Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk.
 <!-- AppxRuntimeBlockProtocolElevation-Description-End -->
 
 <!-- AppxRuntimeBlockProtocolElevation-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md b/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md
index af2f85b62d..fa0478440b 100644
--- a/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md
+++ b/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_ControlPanelDisplay Policy CSP
 description: Learn more about the ADMX_ControlPanelDisplay Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -1351,7 +1351,7 @@ Specifies which theme file is applied to the computer the first time a user logs
 |:--|:--|
 | Name | CPL_Personalization_SetTheme |
 | Friendly Name | Load a specific theme |
-| Location | User Configuration |
+| Location | Computer and User Configuration |
 | Path | Control Panel > Personalization |
 | Registry Key Name | Software\Policies\Microsoft\Windows\Personalization |
 | ADMX File Name | ControlPanelDisplay.admx |
diff --git a/windows/client-management/mdm/policy-csp-admx-deviceguard.md b/windows/client-management/mdm/policy-csp-admx-deviceguard.md
index 94711a96ae..2a743d498c 100644
--- a/windows/client-management/mdm/policy-csp-admx-deviceguard.md
+++ b/windows/client-management/mdm/policy-csp-admx-deviceguard.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_DeviceGuard Policy CSP
 description: Learn more about the ADMX_DeviceGuard Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -14,7 +14,7 @@ ms.date: 08/06/2024
 <!-- ADMX_DeviceGuard-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 > [!WARNING]
-> Group Policy-based deployment of Windows Defender Application Control policies only supports single-policy format WDAC policies. To use WDAC on devices running Windows 10 1903 and greater, or Windows 11, we recommend using an alternative method for [policy deployment](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide).
+> Group Policy-based deployment of App Control for Business policies only supports single-policy format WDAC policies. To use WDAC on devices running Windows 10 1903 and greater, or Windows 11, we recommend using an alternative method for [policy deployment](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide).
 <!-- ADMX_DeviceGuard-Editable-End -->
 
 <!-- ConfigCIPolicy-Begin -->
@@ -34,7 +34,7 @@ ms.date: 08/06/2024
 
 <!-- ConfigCIPolicy-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Deploy Windows Defender Application Control.
+Deploy App Control for Business.
 
 This policy setting lets you deploy a Code Integrity Policy to a machine to control what's allowed to run on that machine.
 
@@ -69,7 +69,7 @@ If using a signed and protected policy then disabling this policy setting doesn'
 | Name | Value |
 |:--|:--|
 | Name | ConfigCIPolicy |
-| Friendly Name | Deploy Windows Defender Application Control |
+| Friendly Name | Deploy App Control for Business |
 | Location | Computer Configuration |
 | Path | System > Device Guard |
 | Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeviceGuard |
diff --git a/windows/client-management/mdm/policy-csp-admx-dnsclient.md b/windows/client-management/mdm/policy-csp-admx-dnsclient.md
index 2f447009b6..dc1ec2aa56 100644
--- a/windows/client-management/mdm/policy-csp-admx-dnsclient.md
+++ b/windows/client-management/mdm/policy-csp-admx-dnsclient.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_DnsClient Policy CSP
 description: Learn more about the ADMX_DnsClient Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -91,7 +91,7 @@ Specifies that NetBIOS over TCP/IP (NetBT) queries are issued for fully qualifie
 
 <!-- DNS_AppendToMultiLabelName-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies that computers may attach suffixes to an unqualified multi-label name before sending subsequent DNS queries if the original name query fails.
+Specifies that the DNS client may attach suffixes to an unqualified multi-label name before sending subsequent DNS queries if the original name query fails.
 
 A name containing dots, but not dot-terminated, is called an unqualified multi-label name, for example "server.corp" is an unqualified multi-label name. The name "server.corp.contoso.com" is an example of a fully qualified name because it contains a terminating dot.
 
@@ -103,7 +103,7 @@ If attaching suffixes is allowed, and a DNS client with a primary domain suffix
 
 - If you disable this policy setting, no suffixes are appended to unqualified multi-label name queries if the original name query fails.
 
-- If you don't configure this policy setting, computers will use their local DNS client settings to determine the query behavior for unqualified multi-label names.
+- If you don't configure this policy setting, the DNS client will use its local settings to determine the query behavior for unqualified multi-label names.
 <!-- DNS_AppendToMultiLabelName-Description-End -->
 
 <!-- DNS_AppendToMultiLabelName-Editable-Begin -->
@@ -162,9 +162,9 @@ Specifies a connection-specific DNS suffix. This policy setting supersedes local
 
 To use this policy setting, click Enabled, and then enter a string value representing the DNS suffix.
 
-- If you enable this policy setting, the DNS suffix that you enter will be applied to all network connections used by computers that receive this policy setting.
+- If you enable this policy setting, the DNS suffix that you enter will be applied to all network connections used by the DNS client.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers will use the local or DHCP supplied connection specific DNS suffix, if configured.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client will use the local or DHCP supplied connection specific DNS suffix, if configured.
 <!-- DNS_Domain-Description-End -->
 
 <!-- DNS_Domain-Editable-Begin -->
@@ -234,7 +234,7 @@ Each connection-specific DNS suffix, assigned either through DHCP or specified i
 
 For example, when a user submits a query for a single-label name such as "example," the DNS client attaches a suffix such as "microsoft.com" resulting in the query "example.microsoft.com," before sending the query to a DNS server.
 
-If a DNS suffix search list isn't specified, the DNS client attaches the primary DNS suffix to a single-label name. If this query fails, the connection-specific DNS suffix is attached for a new query. If none of these queries are resolved, the client devolves the primary DNS suffix of the computer (drops the leftmost label of the primary DNS suffix), attaches this devolved primary DNS suffix to the single-label name, and submits this new query to a DNS server.
+If a DNS suffix search list isn't specified, the DNS client attaches the primary DNS suffix to a single-label name. If this query fails, the connection-specific DNS suffix is attached for a new query. If none of these queries are resolved, the client devolves the primary DNS suffix of the DNS client (drops the leftmost label of the primary DNS suffix), attaches this devolved primary DNS suffix to the single-label name, and submits this new query to a DNS server.
 
 For example, if the primary DNS suffix ooo.aaa.microsoft.com is attached to the non-dot-terminated single-label name "example," and the DNS query for example.ooo.aaa.microsoft.com fails, the DNS client devolves the primary DNS suffix (drops the leftmost label) till the specified devolution level, and submits a query for example.aaa.microsoft.com. If this query fails, the primary DNS suffix is devolved further if it's under specified devolution level and the query example.microsoft.com is submitted. If this query fails, devolution continues if it's under specified devolution level and the query example.microsoft.com is submitted, corresponding to a devolution level of two. The primary DNS suffix can't be devolved beyond a devolution level of two. The devolution level can be configured using this policy setting. The default devolution level is two.
 
@@ -295,11 +295,11 @@ For example, if the primary DNS suffix ooo.aaa.microsoft.com is attached to the
 
 <!-- DNS_IdnEncoding-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies whether the DNS client should convert internationalized domain names (IDNs) to Punycode when the computer is on non-domain networks with no WINS servers configured.
+Specifies whether the DNS client should convert internationalized domain names (IDNs) to Punycode when the DNS client is on non-domain networks with no WINS servers configured.
 
 - If this policy setting is enabled, IDNs aren't converted to Punycode.
 
-- If this policy setting is disabled, or if this policy setting isn't configured, IDNs are converted to Punycode when the computer is on non-domain networks with no WINS servers configured.
+- If this policy setting is disabled, or if this policy setting isn't configured, IDNs are converted to Punycode when the DNS client is on non-domain networks with no WINS servers configured.
 <!-- DNS_IdnEncoding-Description-End -->
 
 <!-- DNS_IdnEncoding-Editable-Begin -->
@@ -413,13 +413,13 @@ Specifies whether the DNS client should convert internationalized domain names (
 
 <!-- DNS_NameServer-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Defines the DNS servers to which a computer sends queries when it attempts to resolve names. This policy setting supersedes the list of DNS servers configured locally and those configured using DHCP.
+Defines the DNS servers to which the DNS client sends queries when it attempts to resolve names. This policy setting supersedes the list of DNS servers configured locally and those configured using DHCP.
 
 To use this policy setting, click Enabled, and then enter a space-delimited list of IP addresses in the available field. To use this policy setting, you must enter at least one IP address.
 
-- If you enable this policy setting, the list of DNS servers is applied to all network connections used by computers that receive this policy setting.
+- If you enable this policy setting, the list of DNS servers is applied to all network connections used by the DNS client.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers will use the local or DHCP supplied list of DNS servers, if configured.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client will use the local or DHCP supplied list of DNS servers, if configured.
 <!-- DNS_NameServer-Description-End -->
 
 <!-- DNS_NameServer-Editable-Begin -->
@@ -535,18 +535,18 @@ Specifies that responses from link local name resolution protocols received over
 
 <!-- DNS_PrimaryDnsSuffix-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution.
+Specifies the primary DNS suffix used by the DNS client in DNS name registration and DNS name resolution.
 
 To use this policy setting, click Enabled and enter the entire primary DNS suffix you want to assign. For example: microsoft.com.
 
 > [!IMPORTANT]
-> In order for changes to this policy setting to be applied on computers that receive it, you must restart Windows.
+> In order for changes to this policy setting to be applied on the DNS client, you must restart Windows.
 
 - If you enable this policy setting, it supersedes the primary DNS suffix configured in the DNS Suffix and NetBIOS Computer Name dialog box using the System control panel.
 
 You can use this policy setting to prevent users, including local administrators, from changing the primary DNS suffix.
 
-- If you disable this policy setting, or if you don't configure this policy setting, each computer uses its local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it's joined.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client uses the local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it's joined.
 <!-- DNS_PrimaryDnsSuffix-Description-End -->
 
 <!-- DNS_PrimaryDnsSuffix-Editable-Begin -->
@@ -600,18 +600,18 @@ You can use this policy setting to prevent users, including local administrators
 
 <!-- DNS_RegisterAdapterName-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies if a computer performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its computer name and the primary DNS suffix.
+Specifies if the DNS client performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its computer name and the primary DNS suffix.
 
 By default, a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its computer name and the primary DNS suffix. For example, a computer name of mycomputer and a primary DNS suffix of microsoft.com will be registered as: mycomputer.microsoft.com.
 
-- If you enable this policy setting, a computer will register A and PTR resource records with its connection-specific DNS suffix, in addition to the primary DNS suffix. This applies to all network connections used by computers that receive this policy setting.
+- If you enable this policy setting, the DNS client will register A and PTR resource records with its connection-specific DNS suffix, in addition to the primary DNS suffix. This applies to all network connections used by the DNS client.
 
-For example, with a computer name of mycomputer, a primary DNS suffix of microsoft.com, and a connection specific DNS suffix of VPNconnection, a computer will register A and PTR resource records for mycomputer. VPNconnection and mycomputer.microsoft.com when this policy setting is enabled.
+For example, with a computer name of mycomputer, a primary DNS suffix of microsoft.com, and a connection specific DNS suffix of VPNconnection, the DNS client will register A and PTR resource records for mycomputer. VPNconnection and mycomputer.microsoft.com when this policy setting is enabled.
 
 > [!IMPORTANT]
-> This policy setting is ignored on a DNS client computer if dynamic DNS registration is disabled.
+> This policy setting is ignored by the DNS client if dynamic DNS registration is disabled.
 
-- If you disable this policy setting, or if you don't configure this policy setting, a DNS client computer won't register any A and PTR resource records using a connection-specific DNS suffix.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client won't register any A and PTR resource records using a connection-specific DNS suffix.
 <!-- DNS_RegisterAdapterName-Description-End -->
 
 <!-- DNS_RegisterAdapterName-Editable-Begin -->
@@ -666,7 +666,7 @@ For example, with a computer name of mycomputer, a primary DNS suffix of microso
 
 <!-- DNS_RegisterReverseLookup-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies if DNS client computers will register PTR resource records.
+Specifies if the DNS client will register PTR resource records.
 
 By default, DNS clients configured to perform dynamic DNS registration will attempt to register PTR resource record only if they successfully registered the corresponding A resource record.
 
@@ -674,13 +674,13 @@ By default, DNS clients configured to perform dynamic DNS registration will atte
 
 To use this policy setting, click Enabled, and then select one of the following options from the drop-down list:
 
-Don't register: Computers won't attempt to register PTR resource records.
+Don't register: the DNS client won't attempt to register PTR resource records.
 
-Register: Computers will attempt to register PTR resource records even if registration of the corresponding A records wasn't successful.
+Register: the DNS client will attempt to register PTR resource records even if registration of the corresponding A records wasn't successful.
 
-Register only if A record registration succeeds: Computers will attempt to register PTR resource records only if registration of the corresponding A records was successful.
+Register only if A record registration succeeds: the DNS client will attempt to register PTR resource records only if registration of the corresponding A records was successful.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers will use locally configured settings.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client will use locally configured settings.
 <!-- DNS_RegisterReverseLookup-Description-End -->
 
 <!-- DNS_RegisterReverseLookup-Editable-Begin -->
@@ -734,11 +734,11 @@ Register only if A record registration succeeds: Computers will attempt to regis
 
 <!-- DNS_RegistrationEnabled-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server.
+Specifies if DNS dynamic update is enabled. DNS clients configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server.
 
-- If you enable this policy setting, or you don't configure this policy setting, computers will attempt to use dynamic DNS registration on all network connections that have connection-specific dynamic DNS registration enabled. For a dynamic DNS registration to be enabled on a network connection, the connection-specific configuration must allow dynamic DNS registration, and this policy setting mustn't be disabled.
+- If you enable this policy setting, or you don't configure this policy setting, the DNS client will attempt to use dynamic DNS registration on all network connections that have connection-specific dynamic DNS registration enabled. For a dynamic DNS registration to be enabled on a network connection, the connection-specific configuration must allow dynamic DNS registration, and this policy setting mustn't be disabled.
 
-- If you disable this policy setting, computers may not use dynamic DNS registration for any of their network connections, regardless of the configuration for individual network connections.
+- If you disable this policy setting, the DNS client may not use dynamic DNS registration for any of their network connections, regardless of the configuration for individual network connections.
 <!-- DNS_RegistrationEnabled-Description-End -->
 
 <!-- DNS_RegistrationEnabled-Editable-Begin -->
@@ -795,7 +795,7 @@ Specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic
 <!-- Description-Source-ADMX -->
 Specifies whether dynamic updates should overwrite existing resource records that contain conflicting IP addresses.
 
-This policy setting is designed for computers that register address (A) resource records in DNS zones that don't use Secure Dynamic Updates. Secure Dynamic Update preserves ownership of resource records and doesn't allow a DNS client to overwrite records that are registered by other computers.
+This policy setting is designed for DNS clients that register address (A) resource records in DNS zones that don't use Secure Dynamic Updates. Secure Dynamic Update preserves ownership of resource records and doesn't allow a DNS client to overwrite records that are registered by other DNS clients.
 
 During dynamic update of resource records in a zone that doesn't use Secure Dynamic Updates, an A resource record might exist that associates the client's host name with an IP address different than the one currently in use by the client. By default, the DNS client attempts to replace the existing A resource record with an A resource record that has the client's current IP address.
 
@@ -856,18 +856,18 @@ During dynamic update of resource records in a zone that doesn't use Secure Dyna
 
 <!-- DNS_RegistrationRefreshInterval-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies the interval used by DNS clients to refresh registration of A and PTR resource. This policy setting only applies to computers performing dynamic DNS updates.
+Specifies the interval used by DNS clients to refresh registration of A and PTR resource. This policy setting only applies DNS clients performing dynamic DNS updates.
 
-Computers configured to perform dynamic DNS registration of A and PTR resource records periodically reregister their records with DNS servers, even if the record hasn't changed. This reregistration is required to indicate to DNS servers that records are current and shouldn't be automatically removed (scavenged) when a DNS server is configured to delete stale records.
+DNS clients configured to perform dynamic DNS registration of A and PTR resource records periodically reregister their records with DNS servers, even if the record hasn't changed. This reregistration is required to indicate to DNS servers that records are current and shouldn't be automatically removed (scavenged) when a DNS server is configured to delete stale records.
 
 > [!WARNING]
 > If record scavenging is enabled on the zone, the value of this policy setting should never be longer than the value of the DNS zone refresh interval. Configuring the registration refresh interval to be longer than the refresh interval of the DNS zone might result in the undesired deletion of A and PTR resource records.
 
 To specify the registration refresh interval, click Enabled and then enter a value of 1800 or greater. The value that you specify is the number of seconds to use for the registration refresh interval. For example, 1800 seconds is 30 minutes.
 
-- If you enable this policy setting, registration refresh interval that you specify will be applied to all network connections used by computers that receive this policy setting.
+- If you enable this policy setting, registration refresh interval that you specify will be applied to all network connections used by DNS clients that receive this policy setting.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers will use the local or DHCP supplied setting. By default, client computers configured with a static IP address attempt to update their DNS resource records once every 24 hours and DHCP clients will attempt to update their DNS resource records when a DHCP lease is granted or renewed.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client will use the local or DHCP supplied setting. By default, DNS clients configured with a static IP address attempt to update their DNS resource records once every 24 hours and DHCP clients will attempt to update their DNS resource records when a DHCP lease is granted or renewed.
 <!-- DNS_RegistrationRefreshInterval-Description-End -->
 
 <!-- DNS_RegistrationRefreshInterval-Editable-Begin -->
@@ -921,13 +921,13 @@ To specify the registration refresh interval, click Enabled and then enter a val
 
 <!-- DNS_RegistrationTtl-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies the value of the time to live (TTL) field in A and PTR resource records that are registered by computers to which this policy setting is applied.
+Specifies the value of the time to live (TTL) field in A and PTR resource records that are registered by the DNS client to which this policy setting is applied.
 
 To specify the TTL, click Enabled and then enter a value in seconds (for example, 900 is 15 minutes).
 
-- If you enable this policy setting, the TTL value that you specify will be applied to DNS resource records registered for all network connections used by computers that receive this policy setting.
+- If you enable this policy setting, the TTL value that you specify will be applied to DNS resource records registered for all network connections used by the DNS client.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers will use the TTL settings specified in DNS. By default, the TTL is 1200 seconds (20 minutes).
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client will use the TTL settings specified in DNS. By default, the TTL is 1200 seconds (20 minutes).
 <!-- DNS_RegistrationTtl-Description-End -->
 
 <!-- DNS_RegistrationTtl-Editable-Begin -->
@@ -985,7 +985,7 @@ Specifies the DNS suffixes to attach to an unqualified single-label name before
 
 An unqualified single-label name contains no dots. The name "example" is a single-label name. This is different from a fully qualified domain name such as "example.microsoft.com".
 
-Client computers that receive this policy setting will attach one or more suffixes to DNS queries for a single-label name. For example, a DNS query for the single-label name "example" will be modified to "example.microsoft.com" before sending the query to a DNS server if this policy setting is enabled with a suffix of "microsoft.com".
+DNS clients that receive this policy setting will attach one or more suffixes to DNS queries for a single-label name. For example, a DNS query for the single-label name "example" will be modified to "example.microsoft.com" before sending the query to a DNS server if this policy setting is enabled with a suffix of "microsoft.com".
 
 To use this policy setting, click Enabled, and then enter a string value representing the DNS suffixes that should be appended to single-label names. You must specify at least one suffix. Use a comma-delimited string, such as "microsoft.com,serverua.microsoft.com,office.microsoft.com" to specify multiple suffixes.
 
@@ -1170,15 +1170,15 @@ Specifies the security level for dynamic DNS updates.
 
 To use this policy setting, click Enabled and then select one of the following values:
 
-Unsecure followed by secure - computers send secure dynamic updates only when nonsecure dynamic updates are refused.
+Unsecure followed by secure - the DNS client sends secure dynamic updates only when nonsecure dynamic updates are refused.
 
-Only unsecure - computers send only nonsecure dynamic updates.
+Only unsecure - the DNS client sends only nonsecure dynamic updates.
 
-Only secure - computers send only secure dynamic updates.
+Only secure - The DNS client sends only secure dynamic updates.
 
-- If you enable this policy setting, computers that attempt to send dynamic DNS updates will use the security level that you specify in this policy setting.
+- If you enable this policy setting, DNS clients that attempt to send dynamic DNS updates will use the security level that you specify in this policy setting.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers will use local settings. By default, DNS clients attempt to use unsecured dynamic update first. If an unsecured update is refused, clients try to use secure update.
+- If you disable this policy setting, or if you don't configure this policy setting, DNS clients will use local settings. By default, DNS clients attempt to use unsecured dynamic update first. If an unsecured update is refused, clients try to use secure update.
 <!-- DNS_UpdateSecurityLevel-Description-End -->
 
 <!-- DNS_UpdateSecurityLevel-Editable-Begin -->
@@ -1232,13 +1232,13 @@ Only secure - computers send only secure dynamic updates.
 
 <!-- DNS_UpdateTopLevelDomainZones-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies if computers may send dynamic updates to zones with a single label name. These zones are also known as top-level domain zones, for example: "com".
+Specifies if the DNS client may send dynamic updates to zones with a single label name. These zones are also known as top-level domain zones, for example: "com".
 
 By default, a DNS client that's configured to perform dynamic DNS update will update the DNS zone that's authoritative for its DNS resource records unless the authoritative zone is a top-level domain or root zone.
 
-- If you enable this policy setting, computers send dynamic updates to any zone that's authoritative for the resource records that the computer needs to update, except the root zone.
+- If you enable this policy setting, the DNS client sends dynamic updates to any zone that's authoritative for the resource records that the DNS client needs to update, except the root zone.
 
-- If you disable this policy setting, or if you don't configure this policy setting, computers don't send dynamic updates to the root zone or top-level domain zones that are authoritative for the resource records that the computer needs to update.
+- If you disable this policy setting, or if you don't configure this policy setting, the DNS client doesn't send dynamic updates to the root zone or top-level domain zones that are authoritative for the resource records that the DNS client needs to update.
 <!-- DNS_UpdateTopLevelDomainZones-Description-End -->
 
 <!-- DNS_UpdateTopLevelDomainZones-Editable-Begin -->
@@ -1309,7 +1309,7 @@ Each connection-specific DNS suffix, assigned either through DHCP or specified i
 
 For example, when a user submits a query for a single-label name such as "example," the DNS client attaches a suffix such as "microsoft.com" resulting in the query "example.microsoft.com," before sending the query to a DNS server.
 
-If a DNS suffix search list isn't specified, the DNS client attaches the primary DNS suffix to a single-label name. If this query fails, the connection-specific DNS suffix is attached for a new query. If none of these queries are resolved, the client devolves the primary DNS suffix of the computer (drops the leftmost label of the primary DNS suffix), attaches this devolved primary DNS suffix to the single-label name, and submits this new query to a DNS server.
+If a DNS suffix search list isn't specified, the DNS client attaches the primary DNS suffix to a single-label name. If this query fails, the connection-specific DNS suffix is attached for a new query. If none of these queries are resolved, the client devolves the primary DNS suffix of the DNS client (drops the leftmost label of the primary DNS suffix), attaches this devolved primary DNS suffix to the single-label name, and submits this new query to a DNS server.
 
 For example, if the primary DNS suffix ooo.aaa.microsoft.com is attached to the non-dot-terminated single-label name "example," and the DNS query for example.ooo.aaa.microsoft.com fails, the DNS client devolves the primary DNS suffix (drops the leftmost label) till the specified devolution level, and submits a query for example.aaa.microsoft.com. If this query fails, the primary DNS suffix is devolved further if it's under specified devolution level and the query example.microsoft.com is submitted. If this query fails, devolution continues if it's under specified devolution level and the query example.microsoft.com is submitted, corresponding to a devolution level of two. The primary DNS suffix can't be devolved beyond a devolution level of two. The devolution level can be configured using the primary DNS suffix devolution level policy setting. The default devolution level is two.
 
@@ -1370,11 +1370,11 @@ For example, if the primary DNS suffix ooo.aaa.microsoft.com is attached to the
 
 <!-- Turn_Off_Multicast-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Specifies that link local multicast name resolution (LLMNR) is disabled on client computers.
+Specifies that link local multicast name resolution (LLMNR) is disabled on the DNS client.
 
-LLMNR is a secondary name resolution protocol. With LLMNR, queries are sent using multicast over a local network link on a single subnet from a client computer to another client computer on the same subnet that also has LLMNR enabled. LLMNR doesn't require a DNS server or DNS client configuration, and provides name resolution in scenarios in which conventional DNS name resolution isn't possible.
+LLMNR is a secondary name resolution protocol. With LLMNR, queries are sent using multicast over a local network link on a single subnet from a DNS client to another DNS client on the same subnet that also has LLMNR enabled. LLMNR doesn't require a DNS server or DNS client configuration, and provides name resolution in scenarios in which conventional DNS name resolution isn't possible.
 
-- If you enable this policy setting, LLMNR will be disabled on all available network adapters on the client computer.
+- If you enable this policy setting, LLMNR will be disabled on all available network adapters on the DNS client.
 
 - If you disable this policy setting, or you don't configure this policy setting, LLMNR will be enabled on all available network adapters.
 <!-- Turn_Off_Multicast-Description-End -->
diff --git a/windows/client-management/mdm/policy-csp-admx-filesys.md b/windows/client-management/mdm/policy-csp-admx-filesys.md
index 03c6eabd47..1b08f87864 100644
--- a/windows/client-management/mdm/policy-csp-admx-filesys.md
+++ b/windows/client-management/mdm/policy-csp-admx-filesys.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_FileSys Policy CSP
 description: Learn more about the ADMX_FileSys Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -260,7 +260,7 @@ Encrypting the page file prevents malicious users from reading data that has bee
 
 <!-- LongPathsEnabled-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Enabling Win32 long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 character limit. Enabling this setting will cause the long paths to be accessible within the process.
+Enabling Win32 long paths will allow manifested win32 applications and packaged Microsoft Store applications to access paths beyond the normal 260 character limit. Enabling this setting will cause the long paths to be accessible within the process.
 <!-- LongPathsEnabled-Description-End -->
 
 <!-- LongPathsEnabled-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md
index 124f07bbb0..2664598272 100644
--- a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md
+++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_MicrosoftDefenderAntivirus Policy CSP
 description: Learn more about the ADMX_MicrosoftDefenderAntivirus Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -1523,11 +1523,13 @@ This policy setting defines the number of days items should be kept in the Quara
 
 <!-- RandomizeScheduleTaskTimes-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting allows you to configure the scheduled scan, and the scheduled security intelligence update, start time window in hours.
+This policy setting allows you to configure the randomization of the scheduled scan start time and the scheduled definition update start time.
 
-- If you disable or don't configure this setting, scheduled tasks will begin at a random time within 4 hours after the time specified in Task Scheduler.
+- If you enable or don't configure this policy setting, and didn't set a randomization window in the Configure scheduled task time randomization window setting , then randomization will be added between 0-4 hours.
 
-- If you enable this setting, you can widen, or narrow, this randomization period. Specify a randomization window of between 1 and 23 hours.
+- If you enable or don't configure this policy setting, and set a randomization window in the Configure scheduled task time randomization window setting, the configured randomization window will be used.
+
+- If you disable this policy setting, but configured the scheduled task time randomization window, randomization won't be done.
 <!-- RandomizeScheduleTaskTimes-Description-End -->
 
 <!-- RandomizeScheduleTaskTimes-Editable-Begin -->
@@ -3528,11 +3530,11 @@ This policy setting allows you to configure scanning mapped network drives.
 
 <!-- Scan_DisableScanningNetworkFiles-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting allows you to configure scanning for network files. It's recommended that you don't enable this setting.
+This policy setting allows the scanning of network files using on access protection. The default is enabled. Recommended to remain enabled in most cases.
 
-- If you enable this setting, network files will be scanned.
+- If you enable or don't configure this setting, network files will be scanned.
 
-- If you disable or don't configure this setting, network files won't be scanned.
+- If you disable this setting, network files won't be scanned.
 <!-- Scan_DisableScanningNetworkFiles-Description-End -->
 
 <!-- Scan_DisableScanningNetworkFiles-Editable-Begin -->
@@ -3556,7 +3558,7 @@ This policy setting allows you to configure scanning for network files. It's rec
 | Name | Value |
 |:--|:--|
 | Name | Scan_DisableScanningNetworkFiles |
-| Friendly Name | Scan network files |
+| Friendly Name | Configure scanning of network files |
 | Location | Computer Configuration |
 | Path | Windows Components > Microsoft Defender Antivirus > Scan |
 | Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
@@ -5436,12 +5438,7 @@ Valid remediation action values are:
 <!-- UX_Configuration_CustomDefaultActionToastString-OmaUri-End -->
 
 <!-- UX_Configuration_CustomDefaultActionToastString-Description-Begin -->
-<!-- Description-Source-ADMX -->
-This policy setting allows you to configure whether or not to display additional text to clients when they need to perform an action. The text displayed is a custom administrator-defined string. For example, the phone number to call the company help desk. The client interface will only display a maximum of 1024 characters. Longer strings will be truncated before display.
-
-- If you enable this setting, the additional text specified will be displayed.
-
-- If you disable or don't configure this setting, there will be no additional text displayed.
+<!-- Description-Source-Not-Found -->
 <!-- UX_Configuration_CustomDefaultActionToastString-Description-End -->
 
 <!-- UX_Configuration_CustomDefaultActionToastString-Editable-Begin -->
@@ -5458,6 +5455,7 @@ This policy setting allows you to configure whether or not to display additional
 <!-- UX_Configuration_CustomDefaultActionToastString-DFProperties-End -->
 
 <!-- UX_Configuration_CustomDefaultActionToastString-AdmxBacked-Begin -->
+<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -5465,10 +5463,6 @@ This policy setting allows you to configure whether or not to display additional
 | Name | Value |
 |:--|:--|
 | Name | UX_Configuration_CustomDefaultActionToastString |
-| Friendly Name | Display additional text to clients when they need to perform an action |
-| Location | Computer Configuration |
-| Path | Windows Components > Microsoft Defender Antivirus > Client Interface |
-| Registry Key Name | Software\Policies\Microsoft\Windows Defender\UX Configuration |
 | ADMX File Name | WindowsDefender.admx |
 <!-- UX_Configuration_CustomDefaultActionToastString-AdmxBacked-End -->
 
diff --git a/windows/client-management/mdm/policy-csp-admx-netlogon.md b/windows/client-management/mdm/policy-csp-admx-netlogon.md
index 6603256c75..3cad268ba1 100644
--- a/windows/client-management/mdm/policy-csp-admx-netlogon.md
+++ b/windows/client-management/mdm/policy-csp-admx-netlogon.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_Netlogon Policy CSP
 description: Learn more about the ADMX_Netlogon Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -420,6 +420,8 @@ Note that this policy setting doesn't affect NetBIOS-based discovery for DC loca
 - If you enable or don't configure this policy setting, the DC location algorithm doesn't use NetBIOS-based discovery as a fallback mechanism when DNS-based discovery fails. This is the default behavior.
 
 - If you disable this policy setting, the DC location algorithm can use NetBIOS-based discovery as a fallback mechanism when DNS based discovery fails.
+
+This setting has no effect unless the BlockNetbiosDiscovery setting is disabled. NetBIOS-based discovery is considered unsecure, has many limitations, and will be deprecated in a future release. For these reasons, NetBIOS-based discovery isn't recommended. See <https://aka.ms/dclocatornetbiosdeprecation> for more information.
 <!-- Netlogon_AvoidFallbackNetbiosDiscovery-Description-End -->
 
 <!-- Netlogon_AvoidFallbackNetbiosDiscovery-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-admx-printing.md b/windows/client-management/mdm/policy-csp-admx-printing.md
index d610c2f9e8..3d3913d0a5 100644
--- a/windows/client-management/mdm/policy-csp-admx-printing.md
+++ b/windows/client-management/mdm/policy-csp-admx-printing.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_Printing Policy CSP
 description: Learn more about the ADMX_Printing Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -749,7 +749,7 @@ This preference allows you to change default printer management.
 
 <!-- MXDWUseLegacyOutputFormatMSXPS-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Microsoft XPS Document Writer (MXDW) generates OpenXPS (*.oxps) files by default in Windows 10, Windows 10 and Windows Server 2022.
+Microsoft XPS Document Writer (MXDW) generates OpenXPS (*.oxps) files by default in Windows 10, Windows 10 and Windows Server 2025.
 
 - If you enable this group policy setting, the default MXDW output format is the legacy Microsoft XPS (*.xps).
 
diff --git a/windows/client-management/mdm/policy-csp-admx-startmenu.md b/windows/client-management/mdm/policy-csp-admx-startmenu.md
index e43437afce..7c490ba91b 100644
--- a/windows/client-management/mdm/policy-csp-admx-startmenu.md
+++ b/windows/client-management/mdm/policy-csp-admx-startmenu.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_StartMenu Policy CSP
 description: Learn more about the ADMX_StartMenu Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -997,7 +997,7 @@ This policy setting allows you to prevent users from changing their Start screen
 |:--|:--|
 | Name | NoChangeStartMenu |
 | Friendly Name | Prevent users from customizing their Start Screen |
-| Location | User Configuration |
+| Location | Computer and User Configuration |
 | Path | Start Menu and Taskbar |
 | Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
 | Registry Value Name | NoChangeStartMenu |
diff --git a/windows/client-management/mdm/policy-csp-admx-taskbar.md b/windows/client-management/mdm/policy-csp-admx-taskbar.md
index 15a624d898..f2d2086000 100644
--- a/windows/client-management/mdm/policy-csp-admx-taskbar.md
+++ b/windows/client-management/mdm/policy-csp-admx-taskbar.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_Taskbar Policy CSP
 description: Learn more about the ADMX_Taskbar Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -69,7 +69,7 @@ A reboot is required for this policy setting to take effect.
 |:--|:--|
 | Name | DisableNotificationCenter |
 | Friendly Name | Remove Notifications and Action Center |
-| Location | User Configuration |
+| Location | Computer and User Configuration |
 | Path | Start Menu and Taskbar |
 | Registry Key Name | Software\Policies\Microsoft\Windows\Explorer |
 | Registry Value Name | DisableNotificationCenter |
@@ -748,11 +748,11 @@ This policy setting allows you to turn off automatic promotion of notification i
 
 <!-- ShowWindowsStoreAppsOnTaskbar-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting allows users to see Windows Store apps on the taskbar.
+This policy setting allows users to see packaged Microsoft Store apps on the taskbar.
 
-- If you enable this policy setting, users will see Windows Store apps on the taskbar.
+- If you enable this policy setting, users will see packaged Microsoft Store apps on the taskbar.
 
-- If you disable this policy setting, users won't see Windows Store apps on the taskbar.
+- If you disable this policy setting, users won't see packaged Microsoft Store apps on the taskbar.
 
 - If you don't configure this policy setting, the default setting for the user's device will be used, and the user can choose to change it.
 <!-- ShowWindowsStoreAppsOnTaskbar-Description-End -->
@@ -778,7 +778,7 @@ This policy setting allows users to see Windows Store apps on the taskbar.
 | Name | Value |
 |:--|:--|
 | Name | ShowWindowsStoreAppsOnTaskbar |
-| Friendly Name | Show Windows Store apps on the taskbar |
+| Friendly Name | Show packaged Microsoft Store apps on the taskbar |
 | Location | User Configuration |
 | Path | Start Menu and Taskbar |
 | Registry Key Name | Software\Policies\Microsoft\Windows\Explorer |
diff --git a/windows/client-management/mdm/policy-csp-admx-terminalserver.md b/windows/client-management/mdm/policy-csp-admx-terminalserver.md
index c4f588506a..d6d10aed92 100644
--- a/windows/client-management/mdm/policy-csp-admx-terminalserver.md
+++ b/windows/client-management/mdm/policy-csp-admx-terminalserver.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_TerminalServer Policy CSP
 description: Learn more about the ADMX_TerminalServer Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -3585,7 +3585,7 @@ This policy setting allows you to specify which protocols can be used for Remote
 
 - If you enable this policy setting, you must specify if you would like RDP to use UDP.
 
-You can select one of the following options: "Use both UDP and TCP", "Use only TCP" or "Use either UDP or TCP (default)".
+You can select one of the following options: "Use either UDP or TCP (default)" or "Use only TCP".
 
 If you select "Use either UDP or TCP" and the UDP connection is successful, most of the RDP traffic will use UDP.
 
diff --git a/windows/client-management/mdm/policy-csp-admx-thumbnails.md b/windows/client-management/mdm/policy-csp-admx-thumbnails.md
index 7095179c9c..bc47c28b99 100644
--- a/windows/client-management/mdm/policy-csp-admx-thumbnails.md
+++ b/windows/client-management/mdm/policy-csp-admx-thumbnails.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_Thumbnails Policy CSP
 description: Learn more about the ADMX_Thumbnails Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -95,11 +95,14 @@ File Explorer displays thumbnail images by default.
 <!-- Description-Source-ADMX -->
 This policy setting allows you to configure how File Explorer displays thumbnail images or icons on network folders.
 
-File Explorer displays thumbnail images on network folders by default.
+File Explorer displays only icons and never displays thumbnail images on network folders by default.
 
-- If you enable this policy setting, File Explorer displays only icons and never displays thumbnail images on network folders.
+- If you disable this policy setting, File Explorer displays thumbnail images on network folders.
 
-- If you disable or don't configure this policy setting, File Explorer displays only thumbnail images on network folders.
+- If you enable or don't configure this policy setting, File Explorer displays only icons and never displays thumbnail images on network folders.
+
+> [!NOTE]
+> Allowing the use of thumbnail images from network folders can expose the users' computers to security risks.
 <!-- DisableThumbnailsOnNetworkFolders-Description-End -->
 
 <!-- DisableThumbnailsOnNetworkFolders-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md b/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md
index 44d542de9d..9100a4bbb3 100644
--- a/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md
+++ b/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_WindowsExplorer Policy CSP
 description: Learn more about the ADMX_WindowsExplorer Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -472,7 +472,15 @@ You can specify a known folder using its known folder id or using its canonical
 <!-- DisableMotWOnInsecurePathCopy-OmaUri-End -->
 
 <!-- DisableMotWOnInsecurePathCopy-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting determines the application of the Mark of the Web tag to files sourced from insecure locations.
+
+- If you enable this policy setting, files copied from unsecure sources won't be tagged with the Mark of the Web.
+
+- If you disable or don't configure this policy setting, files copied from unsecure sources will be tagged with the appropriate Mark of the Web.
+
+> [!NOTE]
+> Failure to tag files from unsecure sources with the Mark of the Web can expose users' computers to security risks.
 <!-- DisableMotWOnInsecurePathCopy-Description-End -->
 
 <!-- DisableMotWOnInsecurePathCopy-Editable-Begin -->
@@ -489,7 +497,6 @@ You can specify a known folder using its known folder id or using its canonical
 <!-- DisableMotWOnInsecurePathCopy-DFProperties-End -->
 
 <!-- DisableMotWOnInsecurePathCopy-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -497,6 +504,11 @@ You can specify a known folder using its known folder id or using its canonical
 | Name | Value |
 |:--|:--|
 | Name | DisableMotWOnInsecurePathCopy |
+| Friendly Name | Do not apply the Mark of the Web tag to files copied from insecure sources |
+| Location | Computer Configuration |
+| Path | WindowsComponents > File Explorer |
+| Registry Key Name | Software\Policies\Microsoft\Windows\Explorer |
+| Registry Value Name | DisableMotWOnInsecurePathCopy |
 | ADMX File Name | WindowsExplorer.admx |
 <!-- DisableMotWOnInsecurePathCopy-AdmxBacked-End -->
 
diff --git a/windows/client-management/mdm/policy-csp-admx-wpn.md b/windows/client-management/mdm/policy-csp-admx-wpn.md
index bfddc2641c..b1b7b3fd75 100644
--- a/windows/client-management/mdm/policy-csp-admx-wpn.md
+++ b/windows/client-management/mdm/policy-csp-admx-wpn.md
@@ -1,7 +1,7 @@
 ---
 title: ADMX_WPN Policy CSP
 description: Learn more about the ADMX_WPN Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -254,7 +254,7 @@ No reboots or service restarts are required for this policy setting to take effe
 |:--|:--|
 | Name | NoToastNotification |
 | Friendly Name | Turn off toast notifications |
-| Location | User Configuration |
+| Location | Computer and User Configuration |
 | Path | Start Menu and Taskbar > Notifications |
 | Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications |
 | Registry Value Name | NoToastApplicationNotification |
diff --git a/windows/client-management/mdm/policy-csp-appdeviceinventory.md b/windows/client-management/mdm/policy-csp-appdeviceinventory.md
index 7e0fb8176b..aa8f597ae9 100644
--- a/windows/client-management/mdm/policy-csp-appdeviceinventory.md
+++ b/windows/client-management/mdm/policy-csp-appdeviceinventory.md
@@ -1,7 +1,7 @@
 ---
 title: AppDeviceInventory Policy CSP
 description: Learn more about the AppDeviceInventory Area in Policy CSP.
-ms.date: 08/07/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -33,7 +33,12 @@ ms.date: 08/07/2024
 <!-- TurnOffAPISamping-OmaUri-End -->
 
 <!-- TurnOffAPISamping-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy controls the state of API Sampling. API Sampling monitors the sampled collection of application programming interfaces used during system runtime to help diagnose compatibility problems.
+
+- If you enable this policy, API Sampling won't be run.
+
+- If you disable or don't configure this policy, API Sampling will be turned on.
 <!-- TurnOffAPISamping-Description-End -->
 
 <!-- TurnOffAPISamping-Editable-Begin -->
@@ -50,7 +55,6 @@ ms.date: 08/07/2024
 <!-- TurnOffAPISamping-DFProperties-End -->
 
 <!-- TurnOffAPISamping-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -58,6 +62,11 @@ ms.date: 08/07/2024
 | Name | Value |
 |:--|:--|
 | Name | TurnOffAPISamping |
+| Friendly Name | Turn off API Sampling |
+| Location | Computer Configuration |
+| Path | Windows Components > App and Device Inventory |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppCompat |
+| Registry Value Name | DisableAPISamping |
 | ADMX File Name | AppDeviceInventory.admx |
 <!-- TurnOffAPISamping-AdmxBacked-End -->
 
@@ -83,7 +92,12 @@ ms.date: 08/07/2024
 <!-- TurnOffApplicationFootprint-OmaUri-End -->
 
 <!-- TurnOffApplicationFootprint-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy controls the state of Application Footprint. Application Footprint monitors the sampled collection of registry and file usage to help diagnose compatibility problems.
+
+- If you enable this policy, Application Footprint won't be run.
+
+- If you disable or don't configure this policy, Application Footprint will be turned on.
 <!-- TurnOffApplicationFootprint-Description-End -->
 
 <!-- TurnOffApplicationFootprint-Editable-Begin -->
@@ -100,7 +114,6 @@ ms.date: 08/07/2024
 <!-- TurnOffApplicationFootprint-DFProperties-End -->
 
 <!-- TurnOffApplicationFootprint-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -108,6 +121,11 @@ ms.date: 08/07/2024
 | Name | Value |
 |:--|:--|
 | Name | TurnOffApplicationFootprint |
+| Friendly Name | Turn off Application Footprint |
+| Location | Computer Configuration |
+| Path | Windows Components > App and Device Inventory |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppCompat |
+| Registry Value Name | DisableApplicationFootprint |
 | ADMX File Name | AppDeviceInventory.admx |
 <!-- TurnOffApplicationFootprint-AdmxBacked-End -->
 
@@ -133,7 +151,12 @@ ms.date: 08/07/2024
 <!-- TurnOffInstallTracing-OmaUri-End -->
 
 <!-- TurnOffInstallTracing-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy controls the state of Install Tracing. Install Tracing is a mechanism that tracks application installs to help diagnose compatibility problems.
+
+- If you enable this policy, Install Tracing won't be run.
+
+- If you disable or don't configure this policy, Install Tracing will be turned on.
 <!-- TurnOffInstallTracing-Description-End -->
 
 <!-- TurnOffInstallTracing-Editable-Begin -->
@@ -150,7 +173,6 @@ ms.date: 08/07/2024
 <!-- TurnOffInstallTracing-DFProperties-End -->
 
 <!-- TurnOffInstallTracing-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -158,6 +180,11 @@ ms.date: 08/07/2024
 | Name | Value |
 |:--|:--|
 | Name | TurnOffInstallTracing |
+| Friendly Name | Turn off Install Tracing |
+| Location | Computer Configuration |
+| Path | Windows Components > App and Device Inventory |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppCompat |
+| Registry Value Name | DisableInstallTracing |
 | ADMX File Name | AppDeviceInventory.admx |
 <!-- TurnOffInstallTracing-AdmxBacked-End -->
 
@@ -167,6 +194,65 @@ ms.date: 08/07/2024
 
 <!-- TurnOffInstallTracing-End -->
 
+<!-- TurnOffWin32AppBackup-Begin -->
+## TurnOffWin32AppBackup
+
+<!-- TurnOffWin32AppBackup-Applicability-Begin -->
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+<!-- TurnOffWin32AppBackup-Applicability-End -->
+
+<!-- TurnOffWin32AppBackup-OmaUri-Begin -->
+```Device
+./Device/Vendor/MSFT/Policy/Config/AppDeviceInventory/TurnOffWin32AppBackup
+```
+<!-- TurnOffWin32AppBackup-OmaUri-End -->
+
+<!-- TurnOffWin32AppBackup-Description-Begin -->
+<!-- Description-Source-ADMX -->
+This policy controls the state of the compatibility scan for backed up applications. The compatibility scan for backed up applications evaluates for compatibility problems in installed applications.
+
+- If you enable this policy, the compatibility scan for backed up applications won't be run.
+
+- If you disable or don't configure this policy, the compatibility scan for backed up applications will be run.
+<!-- TurnOffWin32AppBackup-Description-End -->
+
+<!-- TurnOffWin32AppBackup-Editable-Begin -->
+<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+<!-- TurnOffWin32AppBackup-Editable-End -->
+
+<!-- TurnOffWin32AppBackup-DFProperties-Begin -->
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | `chr` (string) |
+| Access Type | Add, Delete, Get, Replace |
+<!-- TurnOffWin32AppBackup-DFProperties-End -->
+
+<!-- TurnOffWin32AppBackup-AdmxBacked-Begin -->
+[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
+
+**ADMX mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | TurnOffWin32AppBackup |
+| Friendly Name | Turn off compatibility scan for backed up applications |
+| Location | Computer Configuration |
+| Path | Windows Components > App and Device Inventory |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppCompat |
+| Registry Value Name | DisableWin32AppBackup |
+| ADMX File Name | AppDeviceInventory.admx |
+<!-- TurnOffWin32AppBackup-AdmxBacked-End -->
+
+<!-- TurnOffWin32AppBackup-Examples-Begin -->
+<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
+<!-- TurnOffWin32AppBackup-Examples-End -->
+
+<!-- TurnOffWin32AppBackup-End -->
+
 <!-- AppDeviceInventory-CspMoreInfo-Begin -->
 <!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
 <!-- AppDeviceInventory-CspMoreInfo-End -->
diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md
index 7b1698c462..885f96e31a 100644
--- a/windows/client-management/mdm/policy-csp-applicationmanagement.md
+++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md
@@ -1,7 +1,7 @@
 ---
 title: ApplicationManagement Policy CSP
 description: Learn more about the ApplicationManagement Area in Policy CSP.
-ms.date: 04/10/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -30,11 +30,11 @@ ms.date: 04/10/2024
 
 <!-- AllowAllTrustedApps-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed Windows Store apps.
+This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed packaged Microsoft Store apps.
 
-- If you enable this policy setting, you can install any LOB or developer-signed Windows Store app (which must be signed with a certificate chain that can be successfully validated by the local computer).
+- If you enable this policy setting, you can install any LOB or developer-signed packaged Microsoft Store app (which must be signed with a certificate chain that can be successfully validated by the local computer).
 
-- If you disable or don't configure this policy setting, you can't install LOB or developer-signed Windows Store apps.
+- If you disable or don't configure this policy setting, you can't install LOB or developer-signed packaged Microsoft Store apps.
 <!-- AllowAllTrustedApps-Description-End -->
 
 <!-- AllowAllTrustedApps-Editable-Begin -->
@@ -269,7 +269,7 @@ Allows or denies development of Microsoft Store applications and installing them
 | Name | Value |
 |:--|:--|
 | Name | AllowDevelopmentWithoutDevLicense |
-| Friendly Name | Allows development of Windows Store apps and installing them from an integrated development environment (IDE) |
+| Friendly Name | Allows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE) |
 | Location | Computer Configuration |
 | Path | Windows Components > App Package Deployment |
 | Registry Key Name | Software\Policies\Microsoft\Windows\Appx |
diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md
index 20cddfc183..2b19c52a8c 100644
--- a/windows/client-management/mdm/policy-csp-appruntime.md
+++ b/windows/client-management/mdm/policy-csp-appruntime.md
@@ -1,7 +1,7 @@
 ---
 title: AppRuntime Policy CSP
 description: Learn more about the AppRuntime Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -32,9 +32,9 @@ ms.date: 01/18/2024
 
 <!-- AllowMicrosoftAccountsToBeOptional-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it.
+This policy setting lets you control whether Microsoft accounts are optional for packaged Microsoft Store apps that require an account to sign in. This policy only affects packaged Microsoft Store apps that support it.
 
-- If you enable this policy setting, Windows Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead.
+- If you enable this policy setting, packaged Microsoft Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead.
 
 - If you disable or don't configure this policy setting, users will need to sign in with a Microsoft account.
 <!-- AllowMicrosoftAccountsToBeOptional-Description-End -->
diff --git a/windows/client-management/mdm/policy-csp-appvirtualization.md b/windows/client-management/mdm/policy-csp-appvirtualization.md
index 6e677aa3b7..220712712a 100644
--- a/windows/client-management/mdm/policy-csp-appvirtualization.md
+++ b/windows/client-management/mdm/policy-csp-appvirtualization.md
@@ -1,7 +1,7 @@
 ---
 title: AppVirtualization Policy CSP
 description: Learn more about the AppVirtualization Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -33,6 +33,9 @@ ms.date: 01/18/2024
 <!-- AllowAppVClient-Description-Begin -->
 <!-- Description-Source-ADMX -->
 This policy setting allows you to enable or disable Microsoft Application Virtualization (App-V) feature. Reboot is needed for disable to take effect.
+
+> [!NOTE]
+> Application Virtualization (App-V) will reach end-of-life April 2026. After that time, the App-V client will be excluded from new versions of the Windows operating system. See aka.ms/AppVDeprecation for more information.
 <!-- AllowAppVClient-Description-End -->
 
 <!-- AllowAppVClient-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-audit.md b/windows/client-management/mdm/policy-csp-audit.md
index 3e7b9cbfee..a3a20cf60a 100644
--- a/windows/client-management/mdm/policy-csp-audit.md
+++ b/windows/client-management/mdm/policy-csp-audit.md
@@ -1,7 +1,7 @@
 ---
 title: Audit Policy CSP
 description: Learn more about the Audit Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 10/10/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -846,7 +846,7 @@ Volume: Low.
 
 <!-- AccountLogonLogoff_AuditSpecialLogon-Description-Begin -->
 <!-- Description-Source-DDF -->
-This policy setting allows you to audit events generated by special logons such as the following: The use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level. A logon by a member of a Special Group. Special Groups enable you to audit events generated when a member of a certain group has logged-on to your network. You can configure a list of group security identifiers (SIDs) in the registry. If any of those SIDs are added to a token during logon and the subcategory is enabled, an event is logged. For more information about this feature, see [article 947223 in the Microsoft Knowledge Base](https://go.microsoft.com/fwlink/?LinkId=121697).
+This policy setting allows you to audit events generated by special logons such as the following: The use of a special logon, which is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level. A logon by a member of a Special Group. Special Groups enable you to audit events generated when a member of a certain group has logged-on to your network. You can configure a list of group security identifiers (SIDs) in the registry. If any of those SIDs are added to a token during logon and the subcategory is enabled, an event is logged.
 <!-- AccountLogonLogoff_AuditSpecialLogon-Description-End -->
 
 <!-- AccountLogonLogoff_AuditSpecialLogon-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-cryptography.md b/windows/client-management/mdm/policy-csp-cryptography.md
index 27aae04079..11bf016054 100644
--- a/windows/client-management/mdm/policy-csp-cryptography.md
+++ b/windows/client-management/mdm/policy-csp-cryptography.md
@@ -1,7 +1,7 @@
 ---
 title: Cryptography Policy CSP
 description: Learn more about the Cryptography Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 01/18/2024
 <!-- Cryptography-Begin -->
 # Policy CSP - Cryptography
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- Cryptography-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- Cryptography-Editable-End -->
@@ -79,7 +77,7 @@ Allows or disallows the Federal Information Processing Standard (FIPS) policy.
 <!-- ConfigureEllipticCurveCryptography-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureEllipticCurveCryptography-Applicability-End -->
 
 <!-- ConfigureEllipticCurveCryptography-OmaUri-Begin -->
@@ -146,7 +144,7 @@ CertUtil.exe -DisplayEccCurve.
 <!-- ConfigureSystemCryptographyForceStrongKeyProtection-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureSystemCryptographyForceStrongKeyProtection-Applicability-End -->
 
 <!-- ConfigureSystemCryptographyForceStrongKeyProtection-OmaUri-Begin -->
@@ -196,7 +194,7 @@ System cryptography: Force strong key protection for user keys stored on the com
 <!-- OverrideMinimumEnabledDTLSVersionClient-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- OverrideMinimumEnabledDTLSVersionClient-Applicability-End -->
 
 <!-- OverrideMinimumEnabledDTLSVersionClient-OmaUri-Begin -->
@@ -235,7 +233,7 @@ Override minimal enabled TLS version for client role. Last write wins.
 <!-- OverrideMinimumEnabledDTLSVersionServer-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- OverrideMinimumEnabledDTLSVersionServer-Applicability-End -->
 
 <!-- OverrideMinimumEnabledDTLSVersionServer-OmaUri-Begin -->
@@ -274,7 +272,7 @@ Override minimal enabled TLS version for server role. Last write wins.
 <!-- OverrideMinimumEnabledTLSVersionClient-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- OverrideMinimumEnabledTLSVersionClient-Applicability-End -->
 
 <!-- OverrideMinimumEnabledTLSVersionClient-OmaUri-Begin -->
@@ -313,7 +311,7 @@ Override minimal enabled TLS version for client role. Last write wins.
 <!-- OverrideMinimumEnabledTLSVersionServer-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- OverrideMinimumEnabledTLSVersionServer-Applicability-End -->
 
 <!-- OverrideMinimumEnabledTLSVersionServer-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md
index a790f24a26..2eef54311e 100644
--- a/windows/client-management/mdm/policy-csp-defender.md
+++ b/windows/client-management/mdm/policy-csp-defender.md
@@ -1,7 +1,7 @@
 ---
 title: Defender Policy CSP
 description: Learn more about the Defender Area in Policy CSP.
-ms.date: 06/28/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -745,7 +745,7 @@ This policy setting allows you to configure scheduled scans and on-demand (manua
 | Name | Value |
 |:--|:--|
 | Name | Scan_DisableScanningNetworkFiles |
-| Friendly Name | Scan network files |
+| Friendly Name | Configure scanning of network files |
 | Location | Computer Configuration |
 | Path | Windows Components > Microsoft Defender Antivirus > Scan |
 | Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index 2b3fea16a4..c1806d30f7 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -1,7 +1,7 @@
 ---
 title: DesktopAppInstaller Policy CSP
 description: Learn more about the DesktopAppInstaller Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -11,8 +11,6 @@ ms.date: 01/18/2024
 
 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- DesktopAppInstaller-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- DesktopAppInstaller-Editable-End -->
@@ -215,7 +213,14 @@ Users will still be able to execute the *winget* command. The default help will
 <!-- EnableBypassCertificatePinningForMicrosoftStore-OmaUri-End -->
 
 <!-- EnableBypassCertificatePinningForMicrosoftStore-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy controls whether the [Windows Package Manager](/windows/package-manager/) will validate the Microsoft Store certificate hash matches to a known Microsoft Store certificate when initiating a connection to the Microsoft Store Source.
+
+- If you enable this policy, the [Windows Package Manager](/windows/package-manager/) will bypass the Microsoft Store certificate validation.
+
+- If you disable this policy, the [Windows Package Manager](/windows/package-manager/) will validate the Microsoft Store certificate used is valid and belongs to the Microsoft Store before communicating with the Microsoft Store source.
+
+- If you don't configure this policy, the [Windows Package Manager](/windows/package-manager/) administrator settings will be adhered to.
 <!-- EnableBypassCertificatePinningForMicrosoftStore-Description-End -->
 
 <!-- EnableBypassCertificatePinningForMicrosoftStore-Editable-Begin -->
@@ -232,7 +237,6 @@ Users will still be able to execute the *winget* command. The default help will
 <!-- EnableBypassCertificatePinningForMicrosoftStore-DFProperties-End -->
 
 <!-- EnableBypassCertificatePinningForMicrosoftStore-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -240,6 +244,11 @@ Users will still be able to execute the *winget* command. The default help will
 | Name | Value |
 |:--|:--|
 | Name | EnableBypassCertificatePinningForMicrosoftStore |
+| Friendly Name | Enable App Installer Microsoft Store Source Certificate Validation Bypass |
+| Location | Computer Configuration |
+| Path | Windows Components > Desktop App Installer |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppInstaller |
+| Registry Value Name | EnableBypassCertificatePinningForMicrosoftStore |
 | ADMX File Name | DesktopAppInstaller.admx |
 <!-- EnableBypassCertificatePinningForMicrosoftStore-AdmxBacked-End -->
 
@@ -445,7 +454,14 @@ This policy controls whether or not the [Windows Package Manager](/windows/packa
 <!-- EnableLocalArchiveMalwareScanOverride-OmaUri-End -->
 
 <!-- EnableLocalArchiveMalwareScanOverride-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy controls the ability to override malware vulnerability scans when installing an archive file using a local manifest using the command line arguments.
+
+- If you enable this policy, users can override the malware scan when performing a local manifest install of an archive file.
+
+- If you disable this policy, users will be unable to override the malware scan of an archive file when installing using a local manifest.
+
+- If you don't configure this policy, the [Windows Package Manager](/windows/package-manager/) administrator settings will be adhered to.
 <!-- EnableLocalArchiveMalwareScanOverride-Description-End -->
 
 <!-- EnableLocalArchiveMalwareScanOverride-Editable-Begin -->
@@ -462,7 +478,6 @@ This policy controls whether or not the [Windows Package Manager](/windows/packa
 <!-- EnableLocalArchiveMalwareScanOverride-DFProperties-End -->
 
 <!-- EnableLocalArchiveMalwareScanOverride-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -470,6 +485,11 @@ This policy controls whether or not the [Windows Package Manager](/windows/packa
 | Name | Value |
 |:--|:--|
 | Name | EnableLocalArchiveMalwareScanOverride |
+| Friendly Name | Enable App Installer Local Archive Malware Scan Override |
+| Location | Computer Configuration |
+| Path | Windows Components > Desktop App Installer |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppInstaller |
+| Registry Value Name | EnableLocalArchiveMalwareScanOverride |
 | ADMX File Name | DesktopAppInstaller.admx |
 <!-- EnableLocalArchiveMalwareScanOverride-AdmxBacked-End -->
 
@@ -618,9 +638,9 @@ This policy controls the Microsoft Store source included with the [Windows Packa
 <!-- Description-Source-ADMX -->
 This policy controls whether users can install packages from a website that's using the ms-appinstaller protocol.
 
-- If you enable or don't configure this setting, users will be able to install packages from websites that use this protocol.
+- If you enable this setting, users will be able to install packages from websites that use this protocol.
 
-- If you disable this setting, users won't be able to install packages from websites that use this protocol.
+- If you disable or don't configure this setting, users won't be able to install packages from websites that use this protocol.
 <!-- EnableMSAppInstallerProtocol-Description-End -->
 
 <!-- EnableMSAppInstallerProtocol-Editable-Begin -->
@@ -724,7 +744,7 @@ The settings are stored inside of a .json file on the user’s system. It may be
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-Applicability-End -->
 
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-OmaUri-Begin -->
@@ -734,7 +754,14 @@ The settings are stored inside of a .json file on the user’s system. It may be
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-OmaUri-End -->
 
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy determines if a user can perform an action using the [Windows Package Manager](/windows/package-manager/) through a command line interface (WinGet CLI, or WinGet PowerShell).
+
+If you disable this policy, users won't be able execute the [Windows Package Manager](/windows/package-manager/) CLI, and PowerShell cmdlets.
+
+If you enable, or don't configuring this policy, users will be able to execute the [Windows Package Manager](/windows/package-manager/) CLI commands, and PowerShell cmdlets. (Provided "Enable App Installer" policy isn't disabled).
+
+This policy doesn't override the "Enable App Installer" policy.
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-Description-End -->
 
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-Editable-Begin -->
@@ -751,7 +778,6 @@ The settings are stored inside of a .json file on the user’s system. It may be
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-DFProperties-End -->
 
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -759,6 +785,11 @@ The settings are stored inside of a .json file on the user’s system. It may be
 | Name | Value |
 |:--|:--|
 | Name | EnableWindowsPackageManagerCommandLineInterfaces |
+| Friendly Name | Enable Windows Package Manager command line interfaces |
+| Location | Computer Configuration |
+| Path | Windows Components > Desktop App Installer |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppInstaller |
+| Registry Value Name | EnableWindowsPackageManagerCommandLineInterfaces |
 | ADMX File Name | DesktopAppInstaller.admx |
 <!-- EnableWindowsPackageManagerCommandLineInterfaces-AdmxBacked-End -->
 
@@ -774,7 +805,7 @@ The settings are stored inside of a .json file on the user’s system. It may be
 <!-- EnableWindowsPackageManagerConfiguration-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- EnableWindowsPackageManagerConfiguration-Applicability-End -->
 
 <!-- EnableWindowsPackageManagerConfiguration-OmaUri-Begin -->
@@ -784,7 +815,12 @@ The settings are stored inside of a .json file on the user’s system. It may be
 <!-- EnableWindowsPackageManagerConfiguration-OmaUri-End -->
 
 <!-- EnableWindowsPackageManagerConfiguration-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy controls whether the [Windows Package Manager](/windows/package-manager/) configuration feature can be used by users.
+
+- If you enable or don't configure this setting, users will be able to use the [Windows Package Manager](/windows/package-manager/) configuration feature.
+
+- If you disable this setting, users won't be able to use the [Windows Package Manager](/windows/package-manager/) configuration feature.
 <!-- EnableWindowsPackageManagerConfiguration-Description-End -->
 
 <!-- EnableWindowsPackageManagerConfiguration-Editable-Begin -->
@@ -801,7 +837,6 @@ The settings are stored inside of a .json file on the user’s system. It may be
 <!-- EnableWindowsPackageManagerConfiguration-DFProperties-End -->
 
 <!-- EnableWindowsPackageManagerConfiguration-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -809,6 +844,11 @@ The settings are stored inside of a .json file on the user’s system. It may be
 | Name | Value |
 |:--|:--|
 | Name | EnableWindowsPackageManagerConfiguration |
+| Friendly Name | Enable Windows Package Manager Configuration |
+| Location | Computer Configuration |
+| Path | Windows Components > Desktop App Installer |
+| Registry Key Name | Software\Policies\Microsoft\Windows\AppInstaller |
+| Registry Value Name | EnableWindowsPackageManagerConfiguration |
 | ADMX File Name | DesktopAppInstaller.admx |
 <!-- EnableWindowsPackageManagerConfiguration-AdmxBacked-End -->
 
@@ -835,9 +875,9 @@ The settings are stored inside of a .json file on the user’s system. It may be
 
 <!-- SourceAutoUpdateInterval-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy controls the auto update interval for package-based sources.
+This policy controls the auto-update interval for package-based sources. The default source for [Windows Package Manager](/windows/package-manager/) is configured such that an index of the packages is cached on the local machine. The index is downloaded when a user invokes a command, and the interval has passed.
 
-- If you disable or don't configure this setting, the default interval or the value specified in settings will be used by the [Windows Package Manager](/windows/package-manager/).
+- If you disable or don't configure this setting, the default interval or the value specified in the [Windows Package Manager](/windows/package-manager/) settings will be used.
 
 - If you enable this setting, the number of minutes specified will be used by the [Windows Package Manager](/windows/package-manager/).
 <!-- SourceAutoUpdateInterval-Description-End -->
diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md
index 259d88a891..c294633d53 100644
--- a/windows/client-management/mdm/policy-csp-devicelock.md
+++ b/windows/client-management/mdm/policy-csp-devicelock.md
@@ -1,7 +1,7 @@
 ---
 title: DeviceLock Policy CSP
 description: Learn more about the DeviceLock Area in Policy CSP.
-ms.date: 08/05/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -11,8 +11,6 @@ ms.date: 08/05/2024
 
 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- DeviceLock-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 > [!IMPORTANT]
@@ -25,7 +23,7 @@ ms.date: 08/05/2024
 <!-- AccountLockoutPolicy-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AccountLockoutPolicy-Applicability-End -->
 
 <!-- AccountLockoutPolicy-OmaUri-Begin -->
@@ -64,7 +62,7 @@ Account lockout threshold - This security setting determines the number of faile
 <!-- AllowAdministratorLockout-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllowAdministratorLockout-Applicability-End -->
 
 <!-- AllowAdministratorLockout-OmaUri-Begin -->
@@ -329,7 +327,7 @@ Determines the type of PIN or password required. This policy only applies if the
 <!-- ClearTextPassword-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ClearTextPassword-Applicability-End -->
 
 <!-- ClearTextPassword-OmaUri-Begin -->
@@ -685,7 +683,7 @@ The number of authentication failures allowed before the device will be wiped. A
 <!-- MaximumPasswordAge-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- MaximumPasswordAge-Applicability-End -->
 
 <!-- MaximumPasswordAge-OmaUri-Begin -->
@@ -1025,7 +1023,7 @@ This security setting determines the period of time (in days) that a password mu
 <!-- MinimumPasswordLength-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- MinimumPasswordLength-Applicability-End -->
 
 <!-- MinimumPasswordLength-OmaUri-Begin -->
@@ -1078,7 +1076,7 @@ This security setting determines the least number of characters that a password
 <!-- MinimumPasswordLengthAudit-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- MinimumPasswordLengthAudit-Applicability-End -->
 
 <!-- MinimumPasswordLengthAudit-OmaUri-Begin -->
@@ -1128,7 +1126,7 @@ This security setting determines the minimum password length for which password
 <!-- PasswordComplexity-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- PasswordComplexity-Applicability-End -->
 
 <!-- PasswordComplexity-OmaUri-Begin -->
@@ -1188,7 +1186,7 @@ Complexity requirements are enforced when passwords are changed or created.
 <!-- PasswordHistorySize-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- PasswordHistorySize-Applicability-End -->
 
 <!-- PasswordHistorySize-OmaUri-Begin -->
@@ -1360,7 +1358,7 @@ If you enable this setting, users will no longer be able to modify slide show se
 <!-- RelaxMinimumPasswordLengthLimits-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- RelaxMinimumPasswordLengthLimits-Applicability-End -->
 
 <!-- RelaxMinimumPasswordLengthLimits-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md
index f0831810bd..d6932eb1ca 100644
--- a/windows/client-management/mdm/policy-csp-experience.md
+++ b/windows/client-management/mdm/policy-csp-experience.md
@@ -1,7 +1,7 @@
 ---
 title: Experience Policy CSP
 description: Learn more about the Experience Area in Policy CSP.
-ms.date: 08/07/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 08/07/2024
 <!-- Experience-Begin -->
 # Policy CSP - Experience
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- Experience-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- Experience-Editable-End -->
@@ -484,7 +482,7 @@ Allow screen capture.
 <!-- AllowScreenRecorder-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ❌ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ❌ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllowScreenRecorder-Applicability-End -->
 
 <!-- AllowScreenRecorder-OmaUri-Begin -->
@@ -494,7 +492,7 @@ Allow screen capture.
 <!-- AllowScreenRecorder-OmaUri-End -->
 
 <!-- AllowScreenRecorder-Description-Begin -->
-<!-- Description-Source-DDF -->
+<!-- Description-Source-ADMX -->
 This policy setting allows you to control whether screen recording functionality is available in the Windows Snipping Tool app.
 
 - If you disable this policy setting, screen recording functionality won't be accessible in the Windows Snipping Tool app.
@@ -531,7 +529,12 @@ This policy setting allows you to control whether screen recording functionality
 | Name | Value |
 |:--|:--|
 | Name | AllowScreenRecorder |
-| Path | Programs > AT > WindowsComponents > SnippingTool |
+| Friendly Name | Allow Screen Recorder |
+| Location | User Configuration |
+| Path | Windows Components > Snipping Tool |
+| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\SnippingTool |
+| Registry Value Name | AllowScreenRecorder |
+| ADMX File Name | Programs.admx |
 <!-- AllowScreenRecorder-GpMapping-End -->
 
 <!-- AllowScreenRecorder-Examples-Begin -->
@@ -1681,7 +1684,7 @@ This policy setting lets you turn off cloud consumer account state content in al
 <!-- DisableTextTranslation-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisableTextTranslation-Applicability-End -->
 
 <!-- DisableTextTranslation-OmaUri-Begin -->
@@ -1887,7 +1890,7 @@ _**Turn syncing off by default but don’t disable**_
 <!-- EnableOrganizationalMessages-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ❌ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.4828] and later <br> ✅ Windows 11, version 22H2 with [KB5020044](https://support.microsoft.com/help/5020044) [10.0.22621.900] and later <br> ✅ Windows Insider Preview |
+| ❌ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 22H2 with [KB5041582](https://support.microsoft.com/help/5041582) [10.0.19045.4842] and later <br> ✅ Windows 11, version 22H2 with [KB5020044](https://support.microsoft.com/help/5020044) [10.0.22621.900] and later <br> ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- EnableOrganizationalMessages-Applicability-End -->
 
 <!-- EnableOrganizationalMessages-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-fileexplorer.md b/windows/client-management/mdm/policy-csp-fileexplorer.md
index fb55df7a5d..73f6d2a6de 100644
--- a/windows/client-management/mdm/policy-csp-fileexplorer.md
+++ b/windows/client-management/mdm/policy-csp-fileexplorer.md
@@ -1,7 +1,7 @@
 ---
 title: FileExplorer Policy CSP
 description: Learn more about the FileExplorer Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -138,7 +138,7 @@ When This PC location is restricted, give the user the option to enumerate and n
 
 <!-- DisableGraphRecentItems-Description-Begin -->
 <!-- Description-Source-ADMX -->
-Turning off this setting will prevent File Explorer from requesting cloud file metadata and displaying it in the homepage and other views in File Explorer. Any insights and files available based on account activity will be stopped in views such as Recent, Recommended, Favorites, etc.
+Turning off this setting will prevent File Explorer from requesting cloud file metadata and displaying it in the homepage and other views in File Explorer. Any insights and files available based on account activity will be stopped in views such as Recent, Recommended, Favorites, Details pane, etc.
 <!-- DisableGraphRecentItems-Description-End -->
 
 <!-- DisableGraphRecentItems-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-humanpresence.md b/windows/client-management/mdm/policy-csp-humanpresence.md
index 3ef891ed68..1cf592ddff 100644
--- a/windows/client-management/mdm/policy-csp-humanpresence.md
+++ b/windows/client-management/mdm/policy-csp-humanpresence.md
@@ -1,7 +1,7 @@
 ---
 title: HumanPresence Policy CSP
 description: Learn more about the HumanPresence Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 01/18/2024
 <!-- HumanPresence-Begin -->
 # Policy CSP - HumanPresence
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- HumanPresence-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- HumanPresence-Editable-End -->
@@ -21,7 +19,7 @@ ms.date: 01/18/2024
 <!-- ForceAllowDimWhenExternalDisplayConnected-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ForceAllowDimWhenExternalDisplayConnected-Applicability-End -->
 
 <!-- ForceAllowDimWhenExternalDisplayConnected-OmaUri-Begin -->
@@ -85,7 +83,7 @@ Determines whether Allow Adaptive Dimming When Battery Saver On checkbox is forc
 <!-- ForceAllowLockWhenExternalDisplayConnected-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ForceAllowLockWhenExternalDisplayConnected-Applicability-End -->
 
 <!-- ForceAllowLockWhenExternalDisplayConnected-OmaUri-Begin -->
@@ -149,7 +147,7 @@ Determines whether Allow Lock on Leave When Battery Saver On checkbox is forced
 <!-- ForceAllowWakeWhenExternalDisplayConnected-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ForceAllowWakeWhenExternalDisplayConnected-Applicability-End -->
 
 <!-- ForceAllowWakeWhenExternalDisplayConnected-OmaUri-Begin -->
@@ -213,7 +211,7 @@ Determines whether Allow Wake on Approach When External Display Connected checkb
 <!-- ForceDisableWakeWhenBatterySaverOn-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ForceDisableWakeWhenBatterySaverOn-Applicability-End -->
 
 <!-- ForceDisableWakeWhenBatterySaverOn-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md
index 5e218fe45c..bfcf5c6f27 100644
--- a/windows/client-management/mdm/policy-csp-internetexplorer.md
+++ b/windows/client-management/mdm/policy-csp-internetexplorer.md
@@ -1,7 +1,7 @@
 ---
 title: InternetExplorer Policy CSP
 description: Learn more about the InternetExplorer Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -1005,7 +1005,12 @@ Note. It's recommended to configure template policy settings in one Group Policy
 <!-- AllowLegacyURLFields-OmaUri-End -->
 
 <!-- AllowLegacyURLFields-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting allows the use of some disabled functionality, such as WorkingDirectory field or pluggable protocol handling, in Internet Shortcut files.
+
+If you enable this policy, disabled functionality for Internet Shortcut files will be re-enabled.
+
+If you disable, or don't configure this policy, some functionality for Internet Shortcut files, such as WorkingDirectory field or pluggable protocol handling, will be disabled.
 <!-- AllowLegacyURLFields-Description-End -->
 
 <!-- AllowLegacyURLFields-Editable-Begin -->
@@ -1022,7 +1027,6 @@ Note. It's recommended to configure template policy settings in one Group Policy
 <!-- AllowLegacyURLFields-DFProperties-End -->
 
 <!-- AllowLegacyURLFields-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -1030,6 +1034,11 @@ Note. It's recommended to configure template policy settings in one Group Policy
 | Name | Value |
 |:--|:--|
 | Name | AllowLegacyURLFields |
+| Friendly Name | Allow legacy functionality for Internet Shortcut files |
+| Location | Computer and User Configuration |
+| Path | Windows Components > Internet Explorer |
+| Registry Key Name | Software\Policies\Microsoft\Internet Explorer\Main |
+| Registry Value Name | AllowLegacyURLFields |
 | ADMX File Name | inetres.admx |
 <!-- AllowLegacyURLFields-AdmxBacked-End -->
 
@@ -7923,13 +7932,11 @@ This policy setting allows you to manage the opening of windows and frames and a
 
 <!-- JScriptReplacement-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting specifies whether JScript or JScript9Legacy is loaded for MSHTML/WebOC/MSXML/Cscript based invocations.
+This policy setting specifies whether JScript or JScript9Legacy is loaded.
 
-- If you enable this policy setting, JScript9Legacy will be loaded in situations where JScript is instantiated.
+- If you enable this policy setting or not configured, JScript9Legacy will be loaded in situations where JScript is instantiated.
 
 - If you disable this policy, then JScript will be utilized.
-
-- If this policy is left unconfigured, then MSHTML will use JScript9Legacy and MSXML/Cscript will use JScript.
 <!-- JScriptReplacement-Description-End -->
 
 <!-- JScriptReplacement-Editable-Begin -->
@@ -7953,7 +7960,7 @@ This policy setting specifies whether JScript or JScript9Legacy is loaded for MS
 | Name | Value |
 |:--|:--|
 | Name | JScriptReplacement |
-| Friendly Name | Replace JScript by loading JScript9Legacy in place of JScript via MSHTML/WebOC. |
+| Friendly Name | Replace JScript by loading JScript9Legacy in place of JScript. |
 | Location | Computer and User Configuration |
 | Path | Windows Components > Internet Explorer |
 | Registry Key Name | Software\Policies\Microsoft\Internet Explorer\Main |
@@ -13407,7 +13414,7 @@ If you enable this policy, the zoom of an HTML dialog in Internet Explorer mode
 
 If you disable, or don't configure this policy, the zoom of an HTML dialog in Internet Explorer mode will be set based on the zoom of it's parent page.
 
-For more information, see <https://go.microsoft.com/fwlink/?linkid=2102115>
+For more information, see <https://go.microsoft.com/fwlink/?linkid=2220107>
 <!-- ResetZoomForDialogInIEMode-Description-End -->
 
 <!-- ResetZoomForDialogInIEMode-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-lanmanworkstation.md
index b3e44fe44d..b80bf2d206 100644
--- a/windows/client-management/mdm/policy-csp-lanmanworkstation.md
+++ b/windows/client-management/mdm/policy-csp-lanmanworkstation.md
@@ -1,7 +1,7 @@
 ---
 title: LanmanWorkstation Policy CSP
 description: Learn more about the LanmanWorkstation Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -36,6 +36,8 @@ This policy setting determines if the SMB client will allow insecure guest logon
 
 - If you disable this policy setting, the SMB client will reject insecure guest logons.
 
+If you enable signing, the SMB client will reject insecure guest logons.
+
 Insecure guest logons are used by file servers to allow unauthenticated access to shared folders. While uncommon in an enterprise environment, insecure guest logons are frequently used by consumer Network Attached Storage (NAS) appliances acting as file servers. Windows file servers require authentication and don't use insecure guest logons by default. Since insecure guest logons are unauthenticated, important security features such as SMB Signing and SMB Encryption are disabled. As a result, clients that allow insecure guest logons are vulnerable to a variety of man-in-the-middle attacks that can result in data loss, data corruption, and exposure to malware. Additionally, any data written to a file server using an insecure guest logon is potentially accessible to anyone on the network. Microsoft recommends disabling insecure guest logons and configuring file servers to require authenticated access".
 <!-- EnableInsecureGuestLogons-Description-End -->
 
diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md
index 8caa34c334..031f151e0e 100644
--- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md
+++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md
@@ -1,7 +1,7 @@
 ---
 title: LocalPoliciesSecurityOptions Policy CSP
 description: Learn more about the LocalPoliciesSecurityOptions Area in Policy CSP.
-ms.date: 09/11/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -360,7 +360,7 @@ Accounts: Rename guest account This security setting determines whether a differ
 <!-- Audit_AuditTheUseOfBackupAndRestoreprivilege-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Audit_AuditTheUseOfBackupAndRestoreprivilege-Applicability-End -->
 
 <!-- Audit_AuditTheUseOfBackupAndRestoreprivilege-OmaUri-Begin -->
@@ -404,7 +404,7 @@ Audit: Audit the use of Backup and Restore privilege This security setting deter
 <!-- Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettings-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettings-Applicability-End -->
 
 <!-- Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettings-OmaUri-Begin -->
@@ -445,7 +445,7 @@ Audit: Force audit policy subcategory settings (Windows Vista or later) to overr
 <!-- Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAudits-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAudits-Applicability-End -->
 
 <!-- Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAudits-OmaUri-Begin -->
@@ -718,7 +718,7 @@ Devices: Restrict CD-ROM access to locally logged-on user only This security set
 <!-- Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnly-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnly-Applicability-End -->
 
 <!-- Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnly-OmaUri-Begin -->
@@ -771,7 +771,7 @@ Devices: Restrict floppy access to locally logged-on user only This security set
 <!-- DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways-Applicability-End -->
 
 <!-- DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways-OmaUri-Begin -->
@@ -825,7 +825,7 @@ Domain member: Digitally encrypt or sign secure channel data (always) This secur
 <!-- DomainMember_DigitallyEncryptSecureChannelDataWhenPossible-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DomainMember_DigitallyEncryptSecureChannelDataWhenPossible-Applicability-End -->
 
 <!-- DomainMember_DigitallyEncryptSecureChannelDataWhenPossible-OmaUri-Begin -->
@@ -878,7 +878,7 @@ Domain member: Digitally encrypt secure channel data (when possible) This securi
 <!-- DomainMember_DigitallySignSecureChannelDataWhenPossible-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DomainMember_DigitallySignSecureChannelDataWhenPossible-Applicability-End -->
 
 <!-- DomainMember_DigitallySignSecureChannelDataWhenPossible-OmaUri-Begin -->
@@ -928,7 +928,7 @@ Domain member: Digitally sign secure channel data (when possible) This security
 <!-- DomainMember_DisableMachineAccountPasswordChanges-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DomainMember_DisableMachineAccountPasswordChanges-Applicability-End -->
 
 <!-- DomainMember_DisableMachineAccountPasswordChanges-OmaUri-Begin -->
@@ -982,7 +982,7 @@ Domain member: Disable machine account password changes Determines whether a dom
 <!-- DomainMember_MaximumMachineAccountPasswordAge-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DomainMember_MaximumMachineAccountPasswordAge-Applicability-End -->
 
 <!-- DomainMember_MaximumMachineAccountPasswordAge-OmaUri-Begin -->
@@ -1035,7 +1035,7 @@ Domain member: Maximum machine account password age This security setting determ
 <!-- DomainMember_RequireStrongSessionKey-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DomainMember_RequireStrongSessionKey-Applicability-End -->
 
 <!-- DomainMember_RequireStrongSessionKey-OmaUri-Begin -->
@@ -1335,7 +1335,7 @@ Interactive logon: Don't require CTRL+ALT+DEL This security setting determines w
 <!-- InteractiveLogon_MachineAccountLockoutThreshold-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- InteractiveLogon_MachineAccountLockoutThreshold-Applicability-End -->
 
 <!-- InteractiveLogon_MachineAccountLockoutThreshold-OmaUri-Begin -->
@@ -1454,6 +1454,8 @@ Interactive logon: Message text for users attempting to log on This security set
 
 <!-- InteractiveLogon_MessageTextForUsersAttemptingToLogOn-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+> [!IMPORTANT]
+> Windows Autopilot pre-provisioning doesn't work when this policy setting is enabled. For more information, see [Windows Autopilot troubleshooting FAQ](/autopilot/troubleshooting-faq#troubleshooting-policy-conflicts-with-windows-autopilot).
 <!-- InteractiveLogon_MessageTextForUsersAttemptingToLogOn-Editable-End -->
 
 <!-- InteractiveLogon_MessageTextForUsersAttemptingToLogOn-DFProperties-Begin -->
@@ -1503,6 +1505,8 @@ Interactive logon: Message title for users attempting to log on This security se
 
 <!-- InteractiveLogon_MessageTitleForUsersAttemptingToLogOn-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+> [!IMPORTANT]
+> Windows Autopilot pre-provisioning doesn't work when this policy setting is enabled. For more information, see [Windows Autopilot troubleshooting FAQ](/autopilot/troubleshooting-faq#troubleshooting-policy-conflicts-with-windows-autopilot).
 <!-- InteractiveLogon_MessageTitleForUsersAttemptingToLogOn-Editable-End -->
 
 <!-- InteractiveLogon_MessageTitleForUsersAttemptingToLogOn-DFProperties-Begin -->
@@ -1535,7 +1539,7 @@ Interactive logon: Message title for users attempting to log on This security se
 <!-- InteractiveLogon_NumberOfPreviousLogonsToCache-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- InteractiveLogon_NumberOfPreviousLogonsToCache-Applicability-End -->
 
 <!-- InteractiveLogon_NumberOfPreviousLogonsToCache-OmaUri-Begin -->
@@ -1575,7 +1579,7 @@ Interactive logon: Number of previous logons to cache (in case domain controller
 <!-- InteractiveLogon_PromptUserToChangePasswordBeforeExpiration-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- InteractiveLogon_PromptUserToChangePasswordBeforeExpiration-Applicability-End -->
 
 <!-- InteractiveLogon_PromptUserToChangePasswordBeforeExpiration-OmaUri-Begin -->
@@ -1864,7 +1868,7 @@ Microsoft network client: Send unencrypted password to connect to third-party SM
 <!-- MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession-Applicability-End -->
 
 <!-- MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession-OmaUri-Begin -->
@@ -2047,7 +2051,7 @@ Microsoft network server: Digitally sign communications (if client agrees) This
 <!-- MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire-Applicability-End -->
 
 <!-- MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire-OmaUri-Begin -->
@@ -2090,7 +2094,7 @@ Microsoft network server: Disconnect clients when logon hours expire This securi
 <!-- MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel-Applicability-End -->
 
 <!-- MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel-OmaUri-Begin -->
@@ -2131,7 +2135,7 @@ Microsoft network server: Server SPN target name validation level This policy se
 <!-- NetworkAccess_AllowAnonymousSIDOrNameTranslation-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_AllowAnonymousSIDOrNameTranslation-Applicability-End -->
 
 <!-- NetworkAccess_AllowAnonymousSIDOrNameTranslation-OmaUri-Begin -->
@@ -2312,7 +2316,7 @@ Network access: Don't allow anonymous enumeration of SAM accounts and shares Thi
 <!-- NetworkAccess_DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication-Applicability-End -->
 
 <!-- NetworkAccess_DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication-OmaUri-Begin -->
@@ -2360,7 +2364,7 @@ Network access: Don't allow storage of passwords and credentials for network aut
 <!-- NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers-Applicability-End -->
 
 <!-- NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers-OmaUri-Begin -->
@@ -2412,7 +2416,7 @@ Network access: Let Everyone permissions apply to anonymous users This security
 <!-- NetworkAccess_NamedPipesThatCanBeAccessedAnonymously-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_NamedPipesThatCanBeAccessedAnonymously-Applicability-End -->
 
 <!-- NetworkAccess_NamedPipesThatCanBeAccessedAnonymously-OmaUri-Begin -->
@@ -2452,7 +2456,7 @@ Network access: Named pipes that can be accessed anonymously This security setti
 <!-- NetworkAccess_RemotelyAccessibleRegistryPaths-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_RemotelyAccessibleRegistryPaths-Applicability-End -->
 
 <!-- NetworkAccess_RemotelyAccessibleRegistryPaths-OmaUri-Begin -->
@@ -2495,7 +2499,7 @@ Network access: Remotely accessible registry paths This security setting determi
 <!-- NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths-Applicability-End -->
 
 <!-- NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths-OmaUri-Begin -->
@@ -2644,7 +2648,7 @@ Network access: Restrict clients allowed to make remote calls to SAM This policy
 <!-- NetworkAccess_SharesThatCanBeAccessedAnonymously-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_SharesThatCanBeAccessedAnonymously-Applicability-End -->
 
 <!-- NetworkAccess_SharesThatCanBeAccessedAnonymously-OmaUri-Begin -->
@@ -2684,7 +2688,7 @@ Network access: Shares that can be accessed anonymously This security setting de
 <!-- NetworkAccess_SharingAndSecurityModelForLocalAccounts-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkAccess_SharingAndSecurityModelForLocalAccounts-Applicability-End -->
 
 <!-- NetworkAccess_SharingAndSecurityModelForLocalAccounts-OmaUri-Begin -->
@@ -2728,7 +2732,7 @@ Network access: Sharing and security model for local accounts This security sett
 <!-- NetworkSecurity_AllowLocalSystemNULLSessionFallback-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkSecurity_AllowLocalSystemNULLSessionFallback-Applicability-End -->
 
 <!-- NetworkSecurity_AllowLocalSystemNULLSessionFallback-OmaUri-Begin -->
@@ -2958,7 +2962,7 @@ Network security: Don't store LAN Manager hash value on next password change Thi
 <!-- NetworkSecurity_ForceLogoffWhenLogonHoursExpire-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkSecurity_ForceLogoffWhenLogonHoursExpire-Applicability-End -->
 
 <!-- NetworkSecurity_ForceLogoffWhenLogonHoursExpire-OmaUri-Begin -->
@@ -3083,7 +3087,7 @@ Network security LAN Manager authentication level This security setting determin
 <!-- NetworkSecurity_LDAPClientSigningRequirements-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetworkSecurity_LDAPClientSigningRequirements-Applicability-End -->
 
 <!-- NetworkSecurity_LDAPClientSigningRequirements-OmaUri-Begin -->
@@ -3489,7 +3493,7 @@ Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers This po
 <!-- RecoveryConsole_AllowAutomaticAdministrativeLogon-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- RecoveryConsole_AllowAutomaticAdministrativeLogon-Applicability-End -->
 
 <!-- RecoveryConsole_AllowAutomaticAdministrativeLogon-OmaUri-Begin -->
@@ -3539,7 +3543,7 @@ Recovery console: Allow automatic administrative logon This security setting det
 <!-- RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders-Applicability-End -->
 
 <!-- RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders-OmaUri-Begin -->
@@ -3696,7 +3700,7 @@ Shutdown: Clear virtual memory pagefile This security setting determines whether
 <!-- SystemCryptography_ForceStrongKeyProtection-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- SystemCryptography_ForceStrongKeyProtection-Applicability-End -->
 
 <!-- SystemCryptography_ForceStrongKeyProtection-OmaUri-Begin -->
@@ -3737,7 +3741,7 @@ System Cryptography: Force strong key protection for user keys stored on the com
 <!-- SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems-Applicability-End -->
 
 <!-- SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems-OmaUri-Begin -->
@@ -3787,7 +3791,7 @@ System objects: Require case insensitivity for non-Windows subsystems This secur
 <!-- SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects-Applicability-End -->
 
 <!-- SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-lsa.md b/windows/client-management/mdm/policy-csp-lsa.md
index d4773d4c5d..d29d14edd8 100644
--- a/windows/client-management/mdm/policy-csp-lsa.md
+++ b/windows/client-management/mdm/policy-csp-lsa.md
@@ -1,7 +1,7 @@
 ---
 title: LocalSecurityAuthority Policy CSP
 description: Learn more about the LocalSecurityAuthority Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -93,7 +93,7 @@ This policy controls the configuration under which LSASS loads custom SSPs and A
 <!-- Description-Source-ADMX -->
 This policy controls the configuration under which LSASS is run.
 
-- If you don't configure this policy and there is no current setting in the registry, LSA will run as protected process for clean installed, HVCI capable, client SKUs that are domain or cloud domain joined devices. This configuration isn't UEFI locked. This can be overridden if the policy is configured.
+- If you don't configure this policy and there is no current setting in the registry, LSA will run as protected process for all clean installed, HVCI capable, client SKUs. This configuration isn't UEFI locked. This can be overridden if the policy is configured.
 
 - If you configure and set this policy setting to "Disabled", LSA won't run as a protected process.
 
@@ -135,7 +135,7 @@ This policy controls the configuration under which LSASS is run.
 | Friendly Name | Configures LSASS to run as a protected process |
 | Location | Computer Configuration |
 | Path | System > Local Security Authority |
-| Registry Key Name | System\CurrentControlSet\Control\Lsa |
+| Registry Key Name | Software\Policies\Microsoft\Windows\System |
 | ADMX File Name | LocalSecurityAuthority.admx |
 <!-- ConfigureLsaProtectedProcess-GpMapping-End -->
 
diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md
index da47e000cd..75b88b507b 100644
--- a/windows/client-management/mdm/policy-csp-mssecurityguide.md
+++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md
@@ -1,7 +1,7 @@
 ---
 title: MSSecurityGuide Policy CSP
 description: Learn more about the MSSecurityGuide Area in Policy CSP.
-ms.date: 01/31/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -11,8 +11,6 @@ ms.date: 01/31/2024
 
 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- MSSecurityGuide-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- MSSecurityGuide-Editable-End -->
@@ -223,7 +221,7 @@ ms.date: 01/31/2024
 <!-- NetBTNodeTypeConfiguration-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- NetBTNodeTypeConfiguration-Applicability-End -->
 
 <!-- NetBTNodeTypeConfiguration-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-networklistmanager.md b/windows/client-management/mdm/policy-csp-networklistmanager.md
index 5864c486c1..a8158e010d 100644
--- a/windows/client-management/mdm/policy-csp-networklistmanager.md
+++ b/windows/client-management/mdm/policy-csp-networklistmanager.md
@@ -1,7 +1,7 @@
 ---
 title: NetworkListManager Policy CSP
 description: Learn more about the NetworkListManager Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 08/06/2024
 <!-- NetworkListManager-Begin -->
 # Policy CSP - NetworkListManager
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- NetworkListManager-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- NetworkListManager-Editable-End -->
@@ -21,7 +19,7 @@ ms.date: 08/06/2024
 <!-- AllNetworks_NetworkIcon-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllNetworks_NetworkIcon-Applicability-End -->
 
 <!-- AllNetworks_NetworkIcon-OmaUri-Begin -->
@@ -70,7 +68,7 @@ This policy setting allows you to specify whether users can change the network i
 <!-- AllNetworks_NetworkLocation-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllNetworks_NetworkLocation-Applicability-End -->
 
 <!-- AllNetworks_NetworkLocation-OmaUri-Begin -->
@@ -119,7 +117,7 @@ This policy setting allows you to specify whether users can change the network l
 <!-- AllNetworks_NetworkName-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllNetworks_NetworkName-Applicability-End -->
 
 <!-- AllNetworks_NetworkName-OmaUri-Begin -->
@@ -262,7 +260,7 @@ This policy setting provides the string that names a network. If this setting is
 <!-- IdentifyingNetworks_LocationType-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- IdentifyingNetworks_LocationType-Applicability-End -->
 
 <!-- IdentifyingNetworks_LocationType-OmaUri-Begin -->
@@ -311,7 +309,7 @@ This policy setting allows you to configure the Network Location for networks th
 <!-- UnidentifiedNetworks_LocationType-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- UnidentifiedNetworks_LocationType-Applicability-End -->
 
 <!-- UnidentifiedNetworks_LocationType-OmaUri-Begin -->
@@ -360,7 +358,7 @@ This policy setting allows you to configure the Network Location type for networ
 <!-- UnidentifiedNetworks_UserPermissions-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- UnidentifiedNetworks_UserPermissions-Applicability-End -->
 
 <!-- UnidentifiedNetworks_UserPermissions-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-notifications.md b/windows/client-management/mdm/policy-csp-notifications.md
index 65d5cb42bc..8c03b26633 100644
--- a/windows/client-management/mdm/policy-csp-notifications.md
+++ b/windows/client-management/mdm/policy-csp-notifications.md
@@ -1,7 +1,7 @@
 ---
 title: Notifications Policy CSP
 description: Learn more about the Notifications Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 01/18/2024
 <!-- Notifications-Begin -->
 # Policy CSP - Notifications
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- Notifications-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- Notifications-Editable-End -->
@@ -21,7 +19,7 @@ ms.date: 01/18/2024
 <!-- DisableAccountNotifications-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisableAccountNotifications-Applicability-End -->
 
 <!-- DisableAccountNotifications-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-printers.md b/windows/client-management/mdm/policy-csp-printers.md
index fa423988bf..098733446d 100644
--- a/windows/client-management/mdm/policy-csp-printers.md
+++ b/windows/client-management/mdm/policy-csp-printers.md
@@ -1,7 +1,7 @@
 ---
 title: Printers Policy CSP
 description: Learn more about the Printers Area in Policy CSP.
-ms.date: 01/31/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -369,7 +369,7 @@ Determines whether Redirection Guard is enabled for the print spooler.
 
 You can enable this setting to configure the Redirection Guard policy being applied to spooler.
 
-- If you disable or don't configure this policy setting, Redirection Guard will default to being 'enabled'.
+- If you disable or don't configure this policy setting, Redirection Guard will default to being 'Enabled'.
 
 - If you enable this setting you may select the following options:
 
@@ -435,7 +435,12 @@ The following are the supported values:
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-OmaUri-End -->
 
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting controls whether packet level privacy is enabled for RPC for incoming connections.
+
+By default packet level privacy is enabled for RPC for incoming connections.
+
+If you enable or don't configure this policy setting, packet level privacy is enabled for RPC for incoming connections.
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-Description-End -->
 
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-Editable-Begin -->
@@ -452,7 +457,6 @@ The following are the supported values:
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-DFProperties-End -->
 
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -460,6 +464,11 @@ The following are the supported values:
 | Name | Value |
 |:--|:--|
 | Name | ConfigureRpcAuthnLevelPrivacyEnabled |
+| Friendly Name | Configure RPC packet level privacy setting for incoming connections |
+| Location | Computer Configuration |
+| Path | Printers |
+| Registry Key Name | System\CurrentControlSet\Control\Print |
+| Registry Value Name | RpcAuthnLevelPrivacyEnabled |
 | ADMX File Name | Printing.admx |
 <!-- ConfigureRpcAuthnLevelPrivacyEnabled-AdmxBacked-End -->
 
@@ -685,7 +694,16 @@ If you disable or don't configure this policy setting, dynamic TCP ports are use
 <!-- ConfigureWindowsProtectedPrint-OmaUri-End -->
 
 <!-- ConfigureWindowsProtectedPrint-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+Determines whether Windows protected print is enabled on this computer.
+
+By default, Windows protected print isn't enabled and there aren't any restrictions on the print drivers that can be installed or print functionality.
+
+- If you enable this setting, the computer will operate in Windows protected print mode which only allows printing to printers that support a subset of inbox Windows print drivers.
+
+- If you disable this setting or don't configure it, there aren't any restrictions on the print drivers that can be installed or print functionality.
+
+For more information, please see [insert link to web page with WPP info]
 <!-- ConfigureWindowsProtectedPrint-Description-End -->
 
 <!-- ConfigureWindowsProtectedPrint-Editable-Begin -->
@@ -702,7 +720,6 @@ If you disable or don't configure this policy setting, dynamic TCP ports are use
 <!-- ConfigureWindowsProtectedPrint-DFProperties-End -->
 
 <!-- ConfigureWindowsProtectedPrint-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -710,6 +727,11 @@ If you disable or don't configure this policy setting, dynamic TCP ports are use
 | Name | Value |
 |:--|:--|
 | Name | ConfigureWindowsProtectedPrint |
+| Friendly Name | Configure Windows protected print |
+| Location | Computer Configuration |
+| Path | Printers |
+| Registry Key Name | Software\Policies\Microsoft\Windows NT\Printers\WPP |
+| Registry Value Name | WindowsProtectedPrintGroupPolicyState |
 | ADMX File Name | Printing.admx |
 <!-- ConfigureWindowsProtectedPrint-AdmxBacked-End -->
 
diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md
index 895ee8c286..35949bfb98 100644
--- a/windows/client-management/mdm/policy-csp-privacy.md
+++ b/windows/client-management/mdm/policy-csp-privacy.md
@@ -1,7 +1,7 @@
 ---
 title: Privacy Policy CSP
 description: Learn more about the Privacy Area in Policy CSP.
-ms.date: 09/11/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -2398,207 +2398,6 @@ List of semi-colon delimited Package Family Names of Windows Store Apps. The use
 
 <!-- LetAppsAccessGazeInput_UserInControlOfTheseApps-End -->
 
-<!-- LetAppsAccessGenerativeAI-Begin -->
-## LetAppsAccessGenerativeAI
-
-<!-- LetAppsAccessGenerativeAI-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later |
-<!-- LetAppsAccessGenerativeAI-Applicability-End -->
-
-<!-- LetAppsAccessGenerativeAI-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI
-```
-<!-- LetAppsAccessGenerativeAI-OmaUri-End -->
-
-<!-- LetAppsAccessGenerativeAI-Description-Begin -->
-<!-- Description-Source-DDF -->
-This policy setting specifies whether Windows apps can use generative AI features of Windows.
-<!-- LetAppsAccessGenerativeAI-Description-End -->
-
-<!-- LetAppsAccessGenerativeAI-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI-Editable-End -->
-
-<!-- LetAppsAccessGenerativeAI-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `int` |
-| Access Type | Add, Delete, Get, Replace |
-| Allowed Values | Range: `[0-2]` |
-| Default Value  | 0 |
-<!-- LetAppsAccessGenerativeAI-DFProperties-End -->
-
-<!-- LetAppsAccessGenerativeAI-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | LetAppsAccessGenerativeAI |
-| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy |
-| Element Name | LetAppsAccessGenerativeAI_Enum |
-<!-- LetAppsAccessGenerativeAI-GpMapping-End -->
-
-<!-- LetAppsAccessGenerativeAI-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI-Examples-End -->
-
-<!-- LetAppsAccessGenerativeAI-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Begin -->
-## LetAppsAccessGenerativeAI_ForceAllowTheseApps
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later |
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Applicability-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI_ForceAllowTheseApps
-```
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-OmaUri-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Description-Begin -->
-<!-- Description-Source-DDF -->
-List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to use generative AI features of Windows. This setting overrides the default LetAppsAccessGenerativeAI policy setting for the specified apps.
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Description-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Editable-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `chr` (string) |
-| Access Type | Add, Delete, Get, Replace |
-| Allowed Values | List (Delimiter: `;`) |
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-DFProperties-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | LetAppsAccessGenerativeAI |
-| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy |
-| Element Name | LetAppsAccessGenerativeAI_ForceAllowTheseApps_List |
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-GpMapping-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-Examples-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceAllowTheseApps-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Begin -->
-## LetAppsAccessGenerativeAI_ForceDenyTheseApps
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later |
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Applicability-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI_ForceDenyTheseApps
-```
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-OmaUri-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Description-Begin -->
-<!-- Description-Source-DDF -->
-List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the use generative AI features of Windows. This setting overrides the default LetAppsAccessGenerativeAI policy setting for the specified apps.
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Description-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Editable-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `chr` (string) |
-| Access Type | Add, Delete, Get, Replace |
-| Allowed Values | List (Delimiter: `;`) |
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-DFProperties-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | LetAppsAccessGenerativeAI |
-| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy |
-| Element Name | LetAppsAccessGenerativeAI_ForceDenyTheseApps_List |
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-GpMapping-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-Examples-End -->
-
-<!-- LetAppsAccessGenerativeAI_ForceDenyTheseApps-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Begin -->
-## LetAppsAccessGenerativeAI_UserInControlOfTheseApps
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later |
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Applicability-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI_UserInControlOfTheseApps
-```
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-OmaUri-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Description-Begin -->
-<!-- Description-Source-DDF -->
-List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the generative AI setting for the listed apps. This setting overrides the default LetAppsAccessGenerativeAI policy setting for the specified apps.
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Description-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Editable-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `chr` (string) |
-| Access Type | Add, Delete, Get, Replace |
-| Allowed Values | List (Delimiter: `;`) |
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-DFProperties-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | LetAppsAccessGenerativeAI |
-| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy |
-| Element Name | LetAppsAccessGenerativeAI_UserInControlOfTheseApps_List |
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-GpMapping-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-Examples-End -->
-
-<!-- LetAppsAccessGenerativeAI_UserInControlOfTheseApps-End -->
-
 <!-- LetAppsAccessGraphicsCaptureProgrammatic-Begin -->
 ## LetAppsAccessGraphicsCaptureProgrammatic
 
diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md
index 68895bc0f7..70acc4ac5e 100644
--- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md
+++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md
@@ -1,7 +1,7 @@
 ---
 title: RemoteDesktopServices Policy CSP
 description: Learn more about the RemoteDesktopServices Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -156,7 +156,7 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 <!-- DisconnectOnLockLegacyAuthn-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisconnectOnLockLegacyAuthn-Applicability-End -->
 
 <!-- DisconnectOnLockLegacyAuthn-OmaUri-Begin -->
@@ -166,7 +166,14 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 <!-- DisconnectOnLockLegacyAuthn-OmaUri-End -->
 
 <!-- DisconnectOnLockLegacyAuthn-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting allows you to configure the user experience when the Remote Desktop session is locked by the user or by a policy. You can specify whether the remote session will show the remote lock screen or disconnect when the remote session is locked. Disconnecting the remote session ensures that a remote session can't be left on the lock screen and can't reconnect automatically due to loss of network connectivity.
+
+This policy applies only when using legacy authentication to authenticate to the remote PC. Legacy authentication is limited to username and password, or certificates like smartcards. Legacy authentication doesn't leverage the Microsoft identity platform, such as Microsoft Entra ID. Legacy authentication includes the NTLM, CredSSP, RDSTLS, TLS, and RDP basic authentication protocols.
+
+- If you enable this policy setting, Remote Desktop connections using legacy authentication will disconnect the remote session when the remote session is locked. Users can reconnect when they're ready and re-enter their credentials when prompted.
+
+- If you disable or don't configure this policy setting, Remote Desktop connections using legacy authentication will show the remote lock screen when the remote session is locked. Users can unlock the remote session using their username and password, or certificates.
 <!-- DisconnectOnLockLegacyAuthn-Description-End -->
 
 <!-- DisconnectOnLockLegacyAuthn-Editable-Begin -->
@@ -183,7 +190,6 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 <!-- DisconnectOnLockLegacyAuthn-DFProperties-End -->
 
 <!-- DisconnectOnLockLegacyAuthn-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -191,7 +197,12 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 | Name | Value |
 |:--|:--|
 | Name | TS_DISCONNECT_ON_LOCK_POLICY |
-| ADMX File Name | terminalserver.admx |
+| Friendly Name |  Disconnect remote session on lock for legacy authentication |
+| Location | Computer Configuration |
+| Path | Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services |
+| Registry Value Name | fDisconnectOnLockLegacy |
+| ADMX File Name | TerminalServer.admx |
 <!-- DisconnectOnLockLegacyAuthn-AdmxBacked-End -->
 
 <!-- DisconnectOnLockLegacyAuthn-Examples-Begin -->
@@ -206,7 +217,7 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-Applicability-End -->
 
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-OmaUri-Begin -->
@@ -216,7 +227,14 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-OmaUri-End -->
 
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting allows you to configure the user experience when the Remote Desktop session is locked by the user or by a policy. You can specify whether the remote session will show the remote lock screen or disconnect when the remote session is locked. Disconnecting the remote session ensures that a remote session can't be left on the lock screen and can't reconnect automatically due to loss of network connectivity.
+
+This policy applies only when using an identity provider that uses the Microsoft identity platform, such as Microsoft Entra ID, to authenticate to the remote PC. This policy doesn't apply when using Legacy authentication which includes the NTLM, CredSSP, RDSTLS, TLS, and RDP basic authentication protocols.
+
+- If you enable or don't configure this policy setting, Remote Desktop connections using the Microsoft identity platform will disconnect the remote session when the remote session is locked. Users can reconnect when they're ready and can use passwordless authentication if configured.
+
+- If you disable this policy setting, Remote Desktop connections using the Microsoft identity platform will show the remote lock screen when the remote session is locked. Users can unlock the remote session using their username and password, or certificates.
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-Description-End -->
 
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-Editable-Begin -->
@@ -233,7 +251,6 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-DFProperties-End -->
 
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -241,7 +258,12 @@ FIPS compliance can be configured through the System cryptography. Use FIPS comp
 | Name | Value |
 |:--|:--|
 | Name | TS_DISCONNECT_ON_LOCK_AAD_POLICY |
-| ADMX File Name | terminalserver.admx |
+| Friendly Name | Disconnect remote session on lock for Microsoft identity platform authentication |
+| Location | Computer Configuration |
+| Path | Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services |
+| Registry Value Name | fDisconnectOnLockMicrosoftIdentity |
+| ADMX File Name | TerminalServer.admx |
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-AdmxBacked-End -->
 
 <!-- DisconnectOnLockMicrosoftIdentityAuthn-Examples-Begin -->
@@ -439,7 +461,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 <!-- LimitClientToServerClipboardRedirection-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2523] and later <br> ✅ [10.0.25398.946] and later <br> ✅ Windows 11, version 21H2 [10.0.22000.3014] and later <br> ✅ Windows 11, version 22H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22621.3672] and later <br> ✅ Windows 11, version 23H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22631.3672] and later <br> ✅ Windows Insider Preview |
+| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2523] and later <br> ✅ [10.0.25398.946] and later <br> ✅ Windows 11, version 21H2 [10.0.22000.3014] and later <br> ✅ Windows 11, version 22H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22621.3672] and later <br> ✅ Windows 11, version 23H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22631.3672] and later <br> ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- LimitClientToServerClipboardRedirection-Applicability-End -->
 
 <!-- LimitClientToServerClipboardRedirection-OmaUri-Begin -->
@@ -453,7 +475,25 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 <!-- LimitClientToServerClipboardRedirection-OmaUri-End -->
 
 <!-- LimitClientToServerClipboardRedirection-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting allows you to restrict clipboard data transfers from client to server.
+
+- If you enable this policy setting, you must choose from the following behaviors:
+
+- Disable clipboard transfers from client to server.
+
+- Allow plain text copying from client to server.
+
+- Allow plain text and images copying from client to server.
+
+- Allow plain text, images and Rich Text Format copying from client to server.
+
+- Allow plain text, images, Rich Text Format and HTML copying from client to server.
+
+- If you disable or don't configure this policy setting, users can copy arbitrary contents from client to server if clipboard redirection is enabled.
+
+> [!NOTE]
+> This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.
 <!-- LimitClientToServerClipboardRedirection-Description-End -->
 
 <!-- LimitClientToServerClipboardRedirection-Editable-Begin -->
@@ -470,7 +510,6 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 <!-- LimitClientToServerClipboardRedirection-DFProperties-End -->
 
 <!-- LimitClientToServerClipboardRedirection-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -478,7 +517,11 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 | Name | Value |
 |:--|:--|
 | Name | TS_CLIENT_CLIPBOARDRESTRICTION_CS |
-| ADMX File Name | terminalserver.admx |
+| Friendly Name | Restrict clipboard transfer from client to server |
+| Location | Computer and User Configuration |
+| Path | Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services |
+| ADMX File Name | TerminalServer.admx |
 <!-- LimitClientToServerClipboardRedirection-AdmxBacked-End -->
 
 <!-- LimitClientToServerClipboardRedirection-Examples-Begin -->
@@ -493,7 +536,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 <!-- LimitServerToClientClipboardRedirection-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2523] and later <br> ✅ [10.0.25398.946] and later <br> ✅ Windows 11, version 21H2 [10.0.22000.3014] and later <br> ✅ Windows 11, version 22H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22621.3672] and later <br> ✅ Windows 11, version 23H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22631.3672] and later <br> ✅ Windows Insider Preview |
+| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2523] and later <br> ✅ [10.0.25398.946] and later <br> ✅ Windows 11, version 21H2 [10.0.22000.3014] and later <br> ✅ Windows 11, version 22H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22621.3672] and later <br> ✅ Windows 11, version 23H2 with [KB5037853](https://support.microsoft.com/help/5037853) [10.0.22631.3672] and later <br> ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- LimitServerToClientClipboardRedirection-Applicability-End -->
 
 <!-- LimitServerToClientClipboardRedirection-OmaUri-Begin -->
@@ -507,7 +550,25 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 <!-- LimitServerToClientClipboardRedirection-OmaUri-End -->
 
 <!-- LimitServerToClientClipboardRedirection-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting allows you to restrict clipboard data transfers from server to client.
+
+- If you enable this policy setting, you must choose from the following behaviors:
+
+- Disable clipboard transfers from server to client.
+
+- Allow plain text copying from server to client.
+
+- Allow plain text and images copying from server to client.
+
+- Allow plain text, images and Rich Text Format copying from server to client.
+
+- Allow plain text, images, Rich Text Format and HTML copying from server to client.
+
+- If you disable or don't configure this policy setting, users can copy arbitrary contents from server to client if clipboard redirection is enabled.
+
+> [!NOTE]
+> This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.
 <!-- LimitServerToClientClipboardRedirection-Description-End -->
 
 <!-- LimitServerToClientClipboardRedirection-Editable-Begin -->
@@ -524,7 +585,6 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 <!-- LimitServerToClientClipboardRedirection-DFProperties-End -->
 
 <!-- LimitServerToClientClipboardRedirection-AdmxBacked-Begin -->
-<!-- ADMX-Not-Found -->
 [!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
 
 **ADMX mapping**:
@@ -532,7 +592,11 @@ By default, Remote Desktop allows redirection of WebAuthn requests.
 | Name | Value |
 |:--|:--|
 | Name | TS_CLIENT_CLIPBOARDRESTRICTION_SC |
-| ADMX File Name | terminalserver.admx |
+| Friendly Name | Restrict clipboard transfer from server to client |
+| Location | Computer and User Configuration |
+| Path | Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services |
+| ADMX File Name | TerminalServer.admx |
 <!-- LimitServerToClientClipboardRedirection-AdmxBacked-End -->
 
 <!-- LimitServerToClientClipboardRedirection-Examples-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md
index 005ef18357..fc7b78d250 100644
--- a/windows/client-management/mdm/policy-csp-search.md
+++ b/windows/client-management/mdm/policy-csp-search.md
@@ -1,7 +1,7 @@
 ---
 title: Search Policy CSP
 description: Learn more about the Search Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 08/06/2024
 <!-- Search-Begin -->
 # Policy CSP - Search
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- Search-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- Search-Editable-End -->
@@ -648,7 +646,7 @@ The most restrictive value is `0` to now allow automatic language detection.
 <!-- ConfigureSearchOnTaskbarMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureSearchOnTaskbarMode-Applicability-End -->
 
 <!-- ConfigureSearchOnTaskbarMode-OmaUri-Begin -->
@@ -930,13 +928,13 @@ This policy setting configures whether or not locations on removable drives can
 
 <!-- DoNotUseWebResults-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy setting allows you to control whether or not Search can perform queries on the web, if web results are displayed in Search, and if search highlights are shown in the search box and in search home.
+This policy setting allows you to control whether or not Search can perform queries on the web, and if the web results are displayed in Search.
 
-- If you enable this policy setting, queries won't be performed on the web, web results won't be displayed when a user performs a query in Search, and search highlights won't be shown in the search box and in search home.
+- If you enable this policy setting, queries won't be performed on the web and web results won't be displayed when a user performs a query in Search.
 
-- If you disable this policy setting, queries will be performed on the web, web results will be displayed when a user performs a query in Search, and search highlights will be shown in the search box and in search home.
+- If you disable this policy setting, queries will be performed on the web and web results will be displayed when a user performs a query in Search.
 
-- If you don't configure this policy setting, a user can choose whether or not Search can perform queries on the web, and if the web results are displayed in Search, and if search highlights are shown in the search box and in search home.
+- If you don't configure this policy setting, a user can choose whether or not Search can perform queries on the web, and if the web results are displayed in Search.
 <!-- DoNotUseWebResults-Description-End -->
 
 <!-- DoNotUseWebResults-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-settingssync.md b/windows/client-management/mdm/policy-csp-settingssync.md
index 39e032a8b4..e8025d4898 100644
--- a/windows/client-management/mdm/policy-csp-settingssync.md
+++ b/windows/client-management/mdm/policy-csp-settingssync.md
@@ -1,7 +1,7 @@
 ---
 title: SettingsSync Policy CSP
 description: Learn more about the SettingsSync Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -11,8 +11,6 @@ ms.date: 01/18/2024
 
 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- SettingsSync-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- SettingsSync-Editable-End -->
@@ -23,7 +21,7 @@ ms.date: 01/18/2024
 <!-- DisableAccessibilitySettingSync-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisableAccessibilitySettingSync-Applicability-End -->
 
 <!-- DisableAccessibilitySettingSync-OmaUri-Begin -->
@@ -84,7 +82,7 @@ If you don't set or disable this setting, syncing of the "accessibility" group i
 <!-- DisableLanguageSettingSync-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisableLanguageSettingSync-Applicability-End -->
 
 <!-- DisableLanguageSettingSync-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-smartscreen.md b/windows/client-management/mdm/policy-csp-smartscreen.md
index 6e99e05ccb..166eacb4b4 100644
--- a/windows/client-management/mdm/policy-csp-smartscreen.md
+++ b/windows/client-management/mdm/policy-csp-smartscreen.md
@@ -1,7 +1,7 @@
 ---
 title: SmartScreen Policy CSP
 description: Learn more about the SmartScreen Area in Policy CSP.
-ms.date: 01/31/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -29,20 +29,11 @@ ms.date: 01/31/2024
 <!-- EnableAppInstallControl-OmaUri-End -->
 
 <!-- EnableAppInstallControl-Description-Begin -->
-<!-- Description-Source-ADMX -->
-App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly.
+<!-- Description-Source-DDF-Forced -->
+Allows IT Admins to control whether users are allowed to install apps from places other than the Store.
 
-- If you enable this setting, you must choose from the following behaviors:
-
-- Turn off app recommendations.
-
-- Show me app recommendations.
-
-- Warn me before installing apps from outside the Store.
-
-- Allow apps from Store only.
-
-- If you disable or don't configure this setting, users will be able to install apps from anywhere, including files downloaded from the Internet.
+> [!NOTE]
+> This policy will block installation only while the device is online. To block offline installation too, SmartScreen/PreventOverrideForFilesInShell and SmartScreen/EnableSmartScreenInShell policies should also be enabled. This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.
 <!-- EnableAppInstallControl-Description-End -->
 
 <!-- EnableAppInstallControl-Editable-Begin -->
@@ -110,23 +101,8 @@ App Install Control is a feature of Windows Defender SmartScreen that helps prot
 <!-- EnableSmartScreenInShell-OmaUri-End -->
 
 <!-- EnableSmartScreenInShell-Description-Begin -->
-<!-- Description-Source-ADMX -->
-This policy allows you to turn Windows Defender SmartScreen on or off. SmartScreen helps protect PCs by warning users before running potentially malicious programs downloaded from the Internet. This warning is presented as an interstitial dialog shown before running an app that has been downloaded from the Internet and is unrecognized or known to be malicious. No dialog is shown for apps that don't appear to be suspicious.
-
-Some information is sent to Microsoft about files and programs run on PCs with this feature enabled.
-
-- If you enable this policy, SmartScreen will be turned on for all users. Its behavior can be controlled by the following options:
-
-- Warn and prevent bypass
-- Warn.
-
-- If you enable this policy with the "Warn and prevent bypass" option, SmartScreen's dialogs won't present the user with the option to disregard the warning and run the app. SmartScreen will continue to show the warning on subsequent attempts to run the app.
-
-- If you enable this policy with the "Warn" option, SmartScreen's dialogs will warn the user that the app appears suspicious, but will permit the user to disregard the warning and run the app anyway. SmartScreen won't warn the user again for that app if the user tells SmartScreen to run the app.
-
-- If you disable this policy, SmartScreen will be turned off for all users. Users won't be warned if they try to run suspicious apps from the Internet.
-
-- If you don't configure this policy, SmartScreen will be enabled by default, but users may change their settings.
+<!-- Description-Source-DDF-Forced -->
+Allows IT Admins to configure SmartScreen for Windows.
 <!-- EnableSmartScreenInShell-Description-End -->
 
 <!-- EnableSmartScreenInShell-Editable-Begin -->
@@ -188,23 +164,8 @@ Some information is sent to Microsoft about files and programs run on PCs with t
 <!-- PreventOverrideForFilesInShell-OmaUri-End -->
 
 <!-- PreventOverrideForFilesInShell-Description-Begin -->
-<!-- Description-Source-ADMX -->
-This policy allows you to turn Windows Defender SmartScreen on or off. SmartScreen helps protect PCs by warning users before running potentially malicious programs downloaded from the Internet. This warning is presented as an interstitial dialog shown before running an app that has been downloaded from the Internet and is unrecognized or known to be malicious. No dialog is shown for apps that don't appear to be suspicious.
-
-Some information is sent to Microsoft about files and programs run on PCs with this feature enabled.
-
-- If you enable this policy, SmartScreen will be turned on for all users. Its behavior can be controlled by the following options:
-
-- Warn and prevent bypass
-- Warn.
-
-- If you enable this policy with the "Warn and prevent bypass" option, SmartScreen's dialogs won't present the user with the option to disregard the warning and run the app. SmartScreen will continue to show the warning on subsequent attempts to run the app.
-
-- If you enable this policy with the "Warn" option, SmartScreen's dialogs will warn the user that the app appears suspicious, but will permit the user to disregard the warning and run the app anyway. SmartScreen won't warn the user again for that app if the user tells SmartScreen to run the app.
-
-- If you disable this policy, SmartScreen will be turned off for all users. Users won't be warned if they try to run suspicious apps from the Internet.
-
-- If you don't configure this policy, SmartScreen will be enabled by default, but users may change their settings.
+<!-- Description-Source-DDF-Forced -->
+Allows IT Admins to control whether users can ignore SmartScreen warnings and run malicious files.
 <!-- PreventOverrideForFilesInShell-Description-End -->
 
 <!-- PreventOverrideForFilesInShell-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-speakforme.md b/windows/client-management/mdm/policy-csp-speakforme.md
new file mode 100644
index 0000000000..b1be7a5fa4
--- /dev/null
+++ b/windows/client-management/mdm/policy-csp-speakforme.md
@@ -0,0 +1,79 @@
+---
+title: SpeakForMe Policy CSP
+description: Learn more about the SpeakForMe Area in Policy CSP.
+ms.date: 09/27/2024
+---
+
+<!-- Auto-Generated CSP Document -->
+
+<!-- SpeakForMe-Begin -->
+# Policy CSP - SpeakForMe
+
+<!-- SpeakForMe-Editable-Begin -->
+<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+<!-- SpeakForMe-Editable-End -->
+
+<!-- EnableSpeakForMe-Begin -->
+## EnableSpeakForMe
+
+<!-- EnableSpeakForMe-Applicability-Begin -->
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
+<!-- EnableSpeakForMe-Applicability-End -->
+
+<!-- EnableSpeakForMe-OmaUri-Begin -->
+```User
+./User/Vendor/MSFT/Policy/Config/SpeakForMe/EnableSpeakForMe
+```
+<!-- EnableSpeakForMe-OmaUri-End -->
+
+<!-- EnableSpeakForMe-Description-Begin -->
+<!-- Description-Source-DDF -->
+This policy setting controls whether to allow the creation of personal voices with SpeakForMe Accessibility Windows Application.
+
+- If you enable this policy setting, then user can create their personal voice models.
+
+- If you disable this policy setting, then user can't create their personal voice models with SpeakForMe.
+
+- If you don't configure this policy setting (default), then users can launch the training flow and create their personal voice model through SpeakForMe.
+<!-- EnableSpeakForMe-Description-End -->
+
+<!-- EnableSpeakForMe-Editable-Begin -->
+<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+<!-- EnableSpeakForMe-Editable-End -->
+
+<!-- EnableSpeakForMe-DFProperties-Begin -->
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | `int` |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value  | 1 |
+<!-- EnableSpeakForMe-DFProperties-End -->
+
+<!-- EnableSpeakForMe-AllowedValues-Begin -->
+**Allowed values**:
+
+| Value | Description |
+|:--|:--|
+| 0 | Not allowed. |
+| 1 (Default) | Allowed. |
+<!-- EnableSpeakForMe-AllowedValues-End -->
+
+<!-- EnableSpeakForMe-Examples-Begin -->
+<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
+<!-- EnableSpeakForMe-Examples-End -->
+
+<!-- EnableSpeakForMe-End -->
+
+<!-- SpeakForMe-CspMoreInfo-Begin -->
+<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
+<!-- SpeakForMe-CspMoreInfo-End -->
+
+<!-- SpeakForMe-End -->
+
+## Related articles
+
+[Policy configuration service provider](policy-configuration-service-provider.md)
diff --git a/windows/client-management/mdm/policy-csp-sudo.md b/windows/client-management/mdm/policy-csp-sudo.md
index 09a4e3c938..dbcd21af22 100644
--- a/windows/client-management/mdm/policy-csp-sudo.md
+++ b/windows/client-management/mdm/policy-csp-sudo.md
@@ -1,7 +1,7 @@
 ---
 title: Sudo Policy CSP
 description: Learn more about the Sudo Area in Policy CSP.
-ms.date: 04/10/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 04/10/2024
 <!-- Sudo-Begin -->
 # Policy CSP - Sudo
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- Sudo-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- Sudo-Editable-End -->
@@ -21,7 +19,7 @@ ms.date: 04/10/2024
 <!-- EnableSudo-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ❌ Pro <br> ❌ Enterprise <br> ❌ Education <br> ❌ Windows SE <br> ❌ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ❌ Pro <br> ❌ Enterprise <br> ❌ Education <br> ❌ Windows SE <br> ❌ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- EnableSudo-Applicability-End -->
 
 <!-- EnableSudo-OmaUri-Begin -->
@@ -31,7 +29,20 @@ ms.date: 04/10/2024
 <!-- EnableSudo-OmaUri-End -->
 
 <!-- EnableSudo-Description-Begin -->
-<!-- Description-Source-Not-Found -->
+<!-- Description-Source-ADMX -->
+This policy setting controls use of the sudo.exe command line tool.
+
+- If you enable this policy setting, then you may set a maximum allowed mode to run sudo in. This restricts the ways in which users may interact with command-line applications run with sudo. You may pick one of the following modes to allow sudo to run in:
+
+"Disabled": sudo is entirely disabled on this machine. When the user tries to run sudo, sudo will print an error message and exit.
+
+"Force new window": When sudo launches a command line application, it will launch that app in a new console window.
+
+"Disable input": When sudo launches a command line application, it will launch the app in the current console window, but the user won't be able to type input to the command line app. The user may also choose to run sudo in "Force new window" mode.
+
+"Normal": When sudo launches a command line application, it will launch the app in the current console window. The user may also choose to run sudo in "Force new window" or "Disable input" mode.
+
+- If you disable this policy or don't configure it, the user will be able to run sudo.exe normally (after enabling the setting in the Settings app).
 <!-- EnableSudo-Description-End -->
 
 <!-- EnableSudo-Editable-Begin -->
@@ -65,7 +76,11 @@ ms.date: 04/10/2024
 | Name | Value |
 |:--|:--|
 | Name | EnableSudo |
-| Path | Sudo > AT > System |
+| Friendly Name | Configure the behavior of the sudo command |
+| Location | Computer Configuration |
+| Path | System |
+| Registry Key Name | Software\Policies\Microsoft\Windows\Sudo |
+| ADMX File Name | Sudo.admx |
 <!-- EnableSudo-GpMapping-End -->
 
 <!-- EnableSudo-Examples-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md
index 57739476b7..1f4fbbaa1e 100644
--- a/windows/client-management/mdm/policy-csp-system.md
+++ b/windows/client-management/mdm/policy-csp-system.md
@@ -1,7 +1,7 @@
 ---
 title: System Policy CSP
 description: Learn more about the System Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -11,8 +11,6 @@ ms.date: 08/06/2024
 
 [!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- System-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- System-Editable-End -->
@@ -431,7 +429,7 @@ This policy setting determines whether Windows is allowed to download fonts and
 
 - If you enable this policy setting, Windows periodically queries an online font provider to determine whether a new font catalog is available. Windows may also download font data if needed to format or render text.
 
-- If you disable this policy setting, Windows doesn't connect to an online font provider and only enumerates locally installed fonts.
+- If you disable this policy setting, Windows doesn't connect to an online font provider and only enumerates locally-installed fonts.
 
 - If you don't configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot.
 <!-- AllowFontProviders-Description-End -->
@@ -569,7 +567,7 @@ Specifies whether to allow app access to the Location service. Most restricted v
 This policy is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows.
 This policy setting configures a Microsoft Entra joined device so that Microsoft is the processor of the Windows diagnostic data collected from the device, subject to the Product Terms at< https://go.microsoft.com/fwlink/?linkid=2185086>.
 For customers who enroll into the Microsoft Managed Desktop service, enabling this policy is required to allow Microsoft to process data for operational and analytic needs. See <https://go.microsoft.com/fwlink/?linkid=2184944> for more information.
-When these policies are configured, Windows diagnostic data collected from the device will be subject to Microsoft processor commitments.
+hen these policies are configured, Windows diagnostic data collected from the device will be subject to Microsoft processor commitments.
 This setting has no effect on devices unless they're properly enrolled in Microsoft Managed Desktop. If you disable this policy setting, devices may not appear in Microsoft Managed Desktop.
 <!-- AllowMicrosoftManagedDesktopProcessing-Description-End -->
 
@@ -888,7 +886,7 @@ To enable this behavior:
 
 When these policies are configured, Windows diagnostic data collected from the device will be subject to Microsoft processor commitments.
 
-If you disable or don't configure this policy setting, devices enrolled to Windows Autopatch won't be able to take advantage of some deployment service features.
+If you disable or don't configure this policy setting, devices enrolled to the Windows Update for Business deployment service won't be able to take advantage of some deployment service features.
 <!-- AllowWUfBCloudProcessing-Description-End -->
 
 <!-- AllowWUfBCloudProcessing-Editable-Begin -->
@@ -1471,7 +1469,7 @@ This policy setting lets you prevent apps and features from working with files o
 
 * Users can't access OneDrive from the OneDrive app and file picker.
 
-* Windows Store apps can't access OneDrive using the WinRT API.
+* Packaged Microsoft Store apps can't access OneDrive using the WinRT API.
 
 * OneDrive doesn't appear in the navigation pane in File Explorer.
 
@@ -1739,7 +1737,7 @@ This policy setting controls whether Windows records attempts to connect with th
 
 <!-- FeedbackHubAlwaysSaveDiagnosticsLocally-Description-Begin -->
 <!-- Description-Source-DDF -->
-Diagnostic files created when feedback is filed in the Feedback Hub app will always be saved locally. If this policy isn't present or set to false, users will be presented with the option to save locally. The default is to not save locally.
+Diagnostic files created when a feedback is filed in the Feedback Hub app will always be saved locally. If this policy isn't present or set to false, users will be presented with the option to save locally. The default is to not save locally.
 <!-- FeedbackHubAlwaysSaveDiagnosticsLocally-Description-End -->
 
 <!-- FeedbackHubAlwaysSaveDiagnosticsLocally-Editable-Begin -->
@@ -1761,8 +1759,8 @@ Diagnostic files created when feedback is filed in the Feedback Hub app will alw
 
 | Value | Description |
 |:--|:--|
-| 0 (Default) | False. The Feedback Hub won't always save a local copy of diagnostics that may be created when feedback is submitted. The user will have the option to do so. |
-| 1 | True. The Feedback Hub should always save a local copy of diagnostics that may be created when feedback is submitted. |
+| 0 (Default) | False. The Feedback Hub won't always save a local copy of diagnostics that may be created when a feedback is submitted. The user will have the option to do so. |
+| 1 | True. The Feedback Hub should always save a local copy of diagnostics that may be created when a feedback is submitted. |
 <!-- FeedbackHubAlwaysSaveDiagnosticsLocally-AllowedValues-End -->
 
 <!-- FeedbackHubAlwaysSaveDiagnosticsLocally-Examples-Begin -->
@@ -1777,7 +1775,7 @@ Diagnostic files created when feedback is filed in the Feedback Hub app will alw
 <!-- HideUnsupportedHardwareNotifications-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- HideUnsupportedHardwareNotifications-Applicability-End -->
 
 <!-- HideUnsupportedHardwareNotifications-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-systemservices.md b/windows/client-management/mdm/policy-csp-systemservices.md
index 2d9c9595f5..10d548c65f 100644
--- a/windows/client-management/mdm/policy-csp-systemservices.md
+++ b/windows/client-management/mdm/policy-csp-systemservices.md
@@ -1,7 +1,7 @@
 ---
 title: SystemServices Policy CSP
 description: Learn more about the SystemServices Area in Policy CSP.
-ms.date: 04/10/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 04/10/2024
 <!-- SystemServices-Begin -->
 # Policy CSP - SystemServices
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- SystemServices-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- SystemServices-Editable-End -->
@@ -21,7 +19,7 @@ ms.date: 04/10/2024
 <!-- ConfigureComputerBrowserServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureComputerBrowserServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureComputerBrowserServiceStartupMode-OmaUri-Begin -->
@@ -171,7 +169,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureIISAdminServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureIISAdminServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureIISAdminServiceStartupMode-OmaUri-Begin -->
@@ -221,7 +219,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureInfraredMonitorServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureInfraredMonitorServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureInfraredMonitorServiceStartupMode-OmaUri-Begin -->
@@ -271,7 +269,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureInternetConnectionSharingServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureInternetConnectionSharingServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureInternetConnectionSharingServiceStartupMode-OmaUri-Begin -->
@@ -321,7 +319,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureLxssManagerServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureLxssManagerServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureLxssManagerServiceStartupMode-OmaUri-Begin -->
@@ -371,7 +369,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureMicrosoftFTPServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureMicrosoftFTPServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureMicrosoftFTPServiceStartupMode-OmaUri-Begin -->
@@ -421,7 +419,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureRemoteProcedureCallLocatorServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureRemoteProcedureCallLocatorServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureRemoteProcedureCallLocatorServiceStartupMode-OmaUri-Begin -->
@@ -471,7 +469,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureRoutingAndRemoteAccessServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureRoutingAndRemoteAccessServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureRoutingAndRemoteAccessServiceStartupMode-OmaUri-Begin -->
@@ -521,7 +519,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureSimpleTCPIPServicesStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureSimpleTCPIPServicesStartupMode-Applicability-End -->
 
 <!-- ConfigureSimpleTCPIPServicesStartupMode-OmaUri-Begin -->
@@ -571,7 +569,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureSpecialAdministrationConsoleHelperServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureSpecialAdministrationConsoleHelperServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureSpecialAdministrationConsoleHelperServiceStartupMode-OmaUri-Begin -->
@@ -621,7 +619,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureSSDPDiscoveryServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureSSDPDiscoveryServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureSSDPDiscoveryServiceStartupMode-OmaUri-Begin -->
@@ -671,7 +669,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureUPnPDeviceHostServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureUPnPDeviceHostServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureUPnPDeviceHostServiceStartupMode-OmaUri-Begin -->
@@ -721,7 +719,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureWebManagementServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureWebManagementServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureWebManagementServiceStartupMode-OmaUri-Begin -->
@@ -771,7 +769,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode-OmaUri-Begin -->
@@ -821,7 +819,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureWindowsMobileHotspotServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureWindowsMobileHotspotServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureWindowsMobileHotspotServiceStartupMode-OmaUri-Begin -->
@@ -871,7 +869,7 @@ This setting determines whether the service's start type is Automatic(2), Manual
 <!-- ConfigureWorldWideWebPublishingServiceStartupMode-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ConfigureWorldWideWebPublishingServiceStartupMode-Applicability-End -->
 
 <!-- ConfigureWorldWideWebPublishingServiceStartupMode-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-tenantrestrictions.md b/windows/client-management/mdm/policy-csp-tenantrestrictions.md
index 484f4c88ad..536b1b741f 100644
--- a/windows/client-management/mdm/policy-csp-tenantrestrictions.md
+++ b/windows/client-management/mdm/policy-csp-tenantrestrictions.md
@@ -1,7 +1,7 @@
 ---
 title: TenantRestrictions Policy CSP
 description: Learn more about the TenantRestrictions Area in Policy CSP.
-ms.date: 08/06/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -41,9 +41,9 @@ When you enable this setting, compliant applications will be prevented from acce
 
 <https://go.microsoft.com/fwlink/?linkid=2148762>
 
-Before enabling firewall protection, ensure that a Windows Defender Application Control (WDAC) policy that correctly tags applications has been applied to the target devices. Enabling firewall protection without a corresponding WDAC policy will prevent all applications from reaching Microsoft endpoints. This firewall setting isn't supported on all versions of Windows - see the following link for more information.
+Before enabling firewall protection, ensure that an App Control for Business policy that correctly tags applications has been applied to the target devices. Enabling firewall protection without a corresponding App Control for Business policy will prevent all applications from reaching Microsoft endpoints. This firewall setting isn't supported on all versions of Windows - see the following link for more information.
 
-For details about setting up WDAC with tenant restrictions, see <https://go.microsoft.com/fwlink/?linkid=2155230>
+For details about setting up App Control with tenant restrictions, see <https://go.microsoft.com/fwlink/?linkid=2155230>
 <!-- ConfigureTenantRestrictions-Description-End -->
 
 <!-- ConfigureTenantRestrictions-Editable-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md
index 9ecb6a207c..a77f87712f 100644
--- a/windows/client-management/mdm/policy-csp-update.md
+++ b/windows/client-management/mdm/policy-csp-update.md
@@ -1,7 +1,7 @@
 ---
 title: Update Policy CSP
 description: Learn more about the Update Area in Policy CSP.
-ms.date: 09/11/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,18 +9,12 @@ ms.date: 09/11/2024
 <!-- Update-Begin -->
 # Policy CSP - Update
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- Update-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- Update-Editable-End -->
 
 Update CSP policies are listed below based on the group policy area:
 
-- [Windows Insider Preview](#windows-insider-preview)
-  - [AlwaysAutoRebootAtScheduledTimeMinutes](#alwaysautorebootatscheduledtimeminutes)
-  - [ConfigureDeadlineNoAutoRebootForFeatureUpdates](#configuredeadlinenoautorebootforfeatureupdates)
-  - [ConfigureDeadlineNoAutoRebootForQualityUpdates](#configuredeadlinenoautorebootforqualityupdates)
 - [Manage updates offered from Windows Update](#manage-updates-offered-from-windows-update)
   - [AllowNonMicrosoftSignedUpdate](#allownonmicrosoftsignedupdate)
   - [AllowOptionalContent](#allowoptionalcontent)
@@ -61,7 +55,8 @@ Update CSP policies are listed below based on the group policy area:
   - [ConfigureDeadlineForQualityUpdates](#configuredeadlineforqualityupdates)
   - [ConfigureDeadlineGracePeriod](#configuredeadlinegraceperiod)
   - [ConfigureDeadlineGracePeriodForFeatureUpdates](#configuredeadlinegraceperiodforfeatureupdates)
-  - [ConfigureDeadlineNoAutoReboot](#configuredeadlinenoautoreboot)
+  - [ConfigureDeadlineNoAutoRebootForFeatureUpdates](#configuredeadlinenoautorebootforfeatureupdates)
+  - [ConfigureDeadlineNoAutoRebootForQualityUpdates](#configuredeadlinenoautorebootforqualityupdates)
   - [ConfigureFeatureUpdateUninstallPeriod](#configurefeatureupdateuninstallperiod)
   - [NoUpdateNotificationsDuringActiveHours](#noupdatenotificationsduringactivehours)
   - [ScheduledInstallDay](#scheduledinstallday)
@@ -76,6 +71,7 @@ Update CSP policies are listed below based on the group policy area:
   - [SetEDURestart](#setedurestart)
   - [UpdateNotificationLevel](#updatenotificationlevel)
 - [Legacy Policies](#legacy-policies)
+  - [AlwaysAutoRebootAtScheduledTimeMinutes](#alwaysautorebootatscheduledtimeminutes)
   - [AutoRestartDeadlinePeriodInDays](#autorestartdeadlineperiodindays)
   - [AutoRestartDeadlinePeriodInDaysForFeatureUpdates](#autorestartdeadlineperiodindaysforfeatureupdates)
   - [AutoRestartNotificationSchedule](#autorestartnotificationschedule)
@@ -99,188 +95,6 @@ Update CSP policies are listed below based on the group policy area:
   - [ScheduleRestartWarning](#schedulerestartwarning)
   - [SetAutoRestartNotificationDisable](#setautorestartnotificationdisable)
 
-## Windows Insider Preview
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Begin -->
-### AlwaysAutoRebootAtScheduledTimeMinutes
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Applicability-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Update/AlwaysAutoRebootAtScheduledTimeMinutes
-```
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-OmaUri-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Description-Begin -->
-<!-- Description-Source-ADMX -->
-
-- If you enable this policy, a restart timer will always begin immediately after Windows Update installs important updates, instead of first notifying users on the login screen for at least two days.
-
-The restart timer can be configured to start with any value from 15 to 180 minutes. When the timer runs out, the restart will proceed even if the PC has signed-in users.
-
-- If you disable or don't configure this policy, Windows Update won't alter its restart behavior.
-
-If the "No auto-restart with logged-on users for scheduled automatic updates installations" policy is enabled, then this policy has no effect.
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Description-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Editable-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `int` |
-| Access Type | Add, Delete, Get, Replace |
-| Allowed Values | Range: `[15-180]` |
-| Default Value  | 15 |
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-DFProperties-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | AlwaysAutoRebootAtScheduledTime |
-| Friendly Name | Always automatically restart at the scheduled time |
-| Element Name | work (minutes) |
-| Location | Computer Configuration |
-| Path | Windows Components > Windows Update > Manage end user experience |
-| Registry Key Name | Software\Policies\Microsoft\Windows\WindowsUpdate\AU |
-| ADMX File Name | WindowsUpdate.admx |
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-GpMapping-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Examples-End -->
-
-<!-- AlwaysAutoRebootAtScheduledTimeMinutes-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Begin -->
-### ConfigureDeadlineNoAutoRebootForFeatureUpdates
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Applicability-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Update/ConfigureDeadlineNoAutoRebootForFeatureUpdates
-```
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-OmaUri-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Description-Begin -->
-<!-- Description-Source-DDF -->
-When enabled, devices won't automatically restart outside of active hours until the deadline and grace period have expired for feature updates, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForFeatureUpdates is configured.
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Description-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Editable-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `int` |
-| Access Type | Add, Delete, Get, Replace |
-| Default Value  | 0 |
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-DFProperties-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-AllowedValues-Begin -->
-**Allowed values**:
-
-| Value | Description |
-|:--|:--|
-| 0 (Default) | Disabled. |
-| 1 | Enabled. |
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-AllowedValues-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | ConfigureDeadlineNoAutoRebootForFeatureUpdates |
-| Path | WindowsUpdate > AT > WindowsComponents > WindowsUpdateCat |
-| Element Name | ConfigureDeadlineNoAutoRebootForFeatureUpdates |
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-GpMapping-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Examples-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Begin -->
-### ConfigureDeadlineNoAutoRebootForQualityUpdates
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Applicability-Begin -->
-| Scope | Editions | Applicable OS |
-|:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Applicability-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-OmaUri-Begin -->
-```Device
-./Device/Vendor/MSFT/Policy/Config/Update/ConfigureDeadlineNoAutoRebootForQualityUpdates
-```
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-OmaUri-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Description-Begin -->
-<!-- Description-Source-DDF -->
-When enabled, devices won't automatically restart outside of active hours until the deadline and grace period have expired for quality updates, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForQualityUpdates is configured.
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Description-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Editable-Begin -->
-<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Editable-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-DFProperties-Begin -->
-**Description framework properties**:
-
-| Property name | Property value |
-|:--|:--|
-| Format | `int` |
-| Access Type | Add, Delete, Get, Replace |
-| Default Value  | 0 |
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-DFProperties-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-AllowedValues-Begin -->
-**Allowed values**:
-
-| Value | Description |
-|:--|:--|
-| 0 (Default) | Disabled. |
-| 1 | Enabled. |
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-AllowedValues-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-GpMapping-Begin -->
-**Group policy mapping**:
-
-| Name | Value |
-|:--|:--|
-| Name | ConfigureDeadlineNoAutoRebootForQualityUpdates |
-| Path | WindowsUpdate > AT > WindowsComponents > WindowsUpdateCat |
-| Element Name | ConfigureDeadlineNoAutoRebootForQualityUpdates |
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-GpMapping-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Examples-Begin -->
-<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Examples-End -->
-
-<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-End -->
-
 ## Manage updates offered from Windows Update
 
 <!-- AllowNonMicrosoftSignedUpdate-Begin -->
@@ -2518,8 +2332,8 @@ Number of days before feature updates are installed on devices automatically reg
 
 | Name | Value |
 |:--|:--|
-| Name | ComplianceDeadline |
-| Friendly Name | Specify deadlines for automatic updates and restarts |
+| Name | ComplianceDeadlineForFU |
+| Friendly Name | Specify deadline for automatic updates and restarts for feature update |
 | Element Name | Deadline (days) |
 | Location | Computer Configuration |
 | Path | Windows Components > Windows Update > Manage end user experience |
@@ -2578,7 +2392,7 @@ Number of days before quality updates are installed on devices automatically reg
 | Name | Value |
 |:--|:--|
 | Name | ComplianceDeadline |
-| Friendly Name | Specify deadlines for automatic updates and restarts |
+| Friendly Name | Specify deadline for automatic updates and restarts for quality update |
 | Element Name | Deadline (days) |
 | Location | Computer Configuration |
 | Path | Windows Components > Windows Update > Manage end user experience |
@@ -2633,7 +2447,7 @@ Minimum number of days from update installation until restarts occur automatical
 | Name | Value |
 |:--|:--|
 | Name | ComplianceDeadline |
-| Friendly Name | Specify deadlines for automatic updates and restarts |
+| Friendly Name | Specify deadline for automatic updates and restarts for quality update |
 | Element Name | Grace period (days) |
 | Location | Computer Configuration |
 | Path | Windows Components > Windows Update > Manage end user experience |
@@ -2687,8 +2501,8 @@ Minimum number of days from update installation until restarts occur automatical
 
 | Name | Value |
 |:--|:--|
-| Name | ComplianceDeadline |
-| Friendly Name | Specify deadlines for automatic updates and restarts |
+| Name | ComplianceDeadlineForFU |
+| Friendly Name | Specify deadline for automatic updates and restarts for feature update |
 | Element Name | Grace Period (days) |
 | Location | Computer Configuration |
 | Path | Windows Components > Windows Update > Manage end user experience |
@@ -2702,31 +2516,47 @@ Minimum number of days from update installation until restarts occur automatical
 
 <!-- ConfigureDeadlineGracePeriodForFeatureUpdates-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-Begin -->
-### ConfigureDeadlineNoAutoReboot
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Begin -->
+### ConfigureDeadlineNoAutoRebootForFeatureUpdates
 
-<!-- ConfigureDeadlineNoAutoReboot-Applicability-Begin -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1903 [10.0.18362] and later |
-<!-- ConfigureDeadlineNoAutoReboot-Applicability-End -->
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Applicability-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-OmaUri-Begin -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-OmaUri-Begin -->
 ```Device
-./Device/Vendor/MSFT/Policy/Config/Update/ConfigureDeadlineNoAutoReboot
+./Device/Vendor/MSFT/Policy/Config/Update/ConfigureDeadlineNoAutoRebootForFeatureUpdates
 ```
-<!-- ConfigureDeadlineNoAutoReboot-OmaUri-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-OmaUri-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-Description-Begin -->
-<!-- Description-Source-DDF-Forced -->
-When enabled, devices won't automatically restart outside of active hours until the deadline and grace period have expired, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForQualityUpdates or Update/ConfigureDeadlineForFeatureUpdates is configured.
-<!-- ConfigureDeadlineNoAutoReboot-Description-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Description-Begin -->
+<!-- Description-Source-ADMX -->
+This policy lets you specify the number of days before feature updates are installed on devices automatically, and a grace period after which required restarts occur automatically.
 
-<!-- ConfigureDeadlineNoAutoReboot-Editable-Begin -->
+Set deadlines for feature updates and quality updates to meet your compliance goals. Updates will be downloaded and installed as soon as they're offered and automatic restarts will be attempted outside of active hours. Once the deadline has passed, restarts will occur regardless of active hours, and users won't be able to reschedule. If the deadline is set to 0 days, the update will be installed immediately upon offering, but might not finish within the day due to device availability and network connectivity.
+
+Set a grace period for feature updates to guarantee users a minimum time to manage their restarts once updates are installed. Users will be able to schedule restarts during the grace period and Windows can still automatically restart outside of active hours if users choose not to schedule restarts. The grace period might not take effect if users already have more than the number of days set as grace period to manage their restart, based on deadline configurations.
+
+You can set the device to delay restarting until both the deadline and grace period have expired.
+
+If you disable or don't configure this policy, devices will get updates and will restart according to the default schedule.
+
+This policy will override the following policies:
+
+1. Specify deadline before auto restart for update installation
+1. Specify Engaged restart transition and notification schedule for updates.
+
+1. Always automatically restart at the scheduled time
+1. Configure Automatic Updates.
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Description-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-<!-- ConfigureDeadlineNoAutoReboot-Editable-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Editable-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-DFProperties-Begin -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-DFProperties-Begin -->
 **Description framework properties**:
 
 | Property name | Property value |
@@ -2734,36 +2564,115 @@ When enabled, devices won't automatically restart outside of active hours until
 | Format | `int` |
 | Access Type | Add, Delete, Get, Replace |
 | Default Value  | 0 |
-<!-- ConfigureDeadlineNoAutoReboot-DFProperties-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-DFProperties-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-AllowedValues-Begin -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-AllowedValues-Begin -->
 **Allowed values**:
 
 | Value | Description |
 |:--|:--|
 | 0 (Default) | Disabled. |
 | 1 | Enabled. |
-<!-- ConfigureDeadlineNoAutoReboot-AllowedValues-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-AllowedValues-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-GpMapping-Begin -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-GpMapping-Begin -->
 **Group policy mapping**:
 
 | Name | Value |
 |:--|:--|
-| Name | ComplianceDeadline |
-| Friendly Name | Specify deadlines for automatic updates and restarts |
+| Name | ComplianceDeadlineForFU |
+| Friendly Name | Specify deadline for automatic updates and restarts for feature update |
 | Element Name | Don't auto-restart until end of grace period. |
 | Location | Computer Configuration |
 | Path | Windows Components > Windows Update > Manage end user experience |
 | Registry Key Name | Software\Policies\Microsoft\Windows\WindowsUpdate |
 | ADMX File Name | WindowsUpdate.admx |
-<!-- ConfigureDeadlineNoAutoReboot-GpMapping-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-GpMapping-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-Examples-Begin -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Examples-Begin -->
 <!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
-<!-- ConfigureDeadlineNoAutoReboot-Examples-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-Examples-End -->
 
-<!-- ConfigureDeadlineNoAutoReboot-End -->
+<!-- ConfigureDeadlineNoAutoRebootForFeatureUpdates-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Begin -->
+### ConfigureDeadlineNoAutoRebootForQualityUpdates
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Applicability-Begin -->
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Applicability-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-OmaUri-Begin -->
+```Device
+./Device/Vendor/MSFT/Policy/Config/Update/ConfigureDeadlineNoAutoRebootForQualityUpdates
+```
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-OmaUri-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Description-Begin -->
+<!-- Description-Source-ADMX -->
+This policy lets you specify the number of days before quality updates are installed on devices automatically, and a grace period after which required restarts occur automatically.
+
+Set deadlines for quality updates to meet your compliance goals. Updates will be downloaded and installed as soon as they're offered and automatic restarts will be attempted outside of active hours. Once the deadline has passed, restarts will occur regardless of active hours, and users won't be able to reschedule. If the deadline is set to 0 days, the update will be installed immediately upon offering, but might not finish within the day due to device availability and network connectivity.
+
+Set a grace period for quality updates to guarantee users a minimum time to manage their restarts once updates are installed. Users will be able to schedule restarts during the grace period and Windows can still automatically restart outside of active hours if users choose not to schedule restarts. The grace period might not take effect if users already have more than the number of days set as grace period to manage their restart, based on deadline configurations.
+
+You can set the device to delay restarting until both the deadline and grace period have expired.
+
+If you disable or don't configure this policy, devices will get updates and will restart according to the default schedule.
+
+This policy will override the following policies:
+
+1. Specify deadline before auto restart for update installation
+1. Specify Engaged restart transition and notification schedule for updates.
+
+1. Always automatically restart at the scheduled time
+1. Configure Automatic Updates.
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Description-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Editable-Begin -->
+<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Editable-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-DFProperties-Begin -->
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | `int` |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value  | 0 |
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-DFProperties-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-AllowedValues-Begin -->
+**Allowed values**:
+
+| Value | Description |
+|:--|:--|
+| 0 (Default) | Disabled. |
+| 1 | Enabled. |
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-AllowedValues-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-GpMapping-Begin -->
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | ComplianceDeadline |
+| Friendly Name | Specify deadline for automatic updates and restarts for quality update |
+| Element Name | Don't auto-restart until end of grace period. |
+| Location | Computer Configuration |
+| Path | Windows Components > Windows Update > Manage end user experience |
+| Registry Key Name | Software\Policies\Microsoft\Windows\WindowsUpdate |
+| ADMX File Name | WindowsUpdate.admx |
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-GpMapping-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Examples-Begin -->
+<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-Examples-End -->
+
+<!-- ConfigureDeadlineNoAutoRebootForQualityUpdates-End -->
 
 <!-- ConfigureFeatureUpdateUninstallPeriod-Begin -->
 ### ConfigureFeatureUpdateUninstallPeriod
@@ -3647,6 +3556,68 @@ If you select "Apply only during active hours" in conjunction with Option 1 or 2
 
 ## Legacy Policies
 
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Begin -->
+### AlwaysAutoRebootAtScheduledTimeMinutes
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Applicability-Begin -->
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621] and later |
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Applicability-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-OmaUri-Begin -->
+```Device
+./Device/Vendor/MSFT/Policy/Config/Update/AlwaysAutoRebootAtScheduledTimeMinutes
+```
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-OmaUri-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Description-Begin -->
+<!-- Description-Source-ADMX -->
+
+- If you enable this policy, a restart timer will always begin immediately after Windows Update installs important updates, instead of first notifying users on the login screen for at least two days.
+
+The restart timer can be configured to start with any value from 15 to 180 minutes. When the timer runs out, the restart will proceed even if the PC has signed-in users.
+
+- If you disable or don't configure this policy, Windows Update won't alter its restart behavior.
+
+If the "No auto-restart with logged-on users for scheduled automatic updates installations" policy is enabled, then this policy has no effect.
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Description-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Editable-Begin -->
+<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Editable-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-DFProperties-Begin -->
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | `int` |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[15-180]` |
+| Default Value  | 15 |
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-DFProperties-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-GpMapping-Begin -->
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | AlwaysAutoRebootAtScheduledTime |
+| Friendly Name | Always automatically restart at the scheduled time |
+| Element Name | work (minutes) |
+| Location | Computer Configuration |
+| Path | Windows Components > Windows Update > Legacy Policies |
+| Registry Key Name | Software\Policies\Microsoft\Windows\WindowsUpdate\AU |
+| ADMX File Name | WindowsUpdate.admx |
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-GpMapping-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Examples-Begin -->
+<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-Examples-End -->
+
+<!-- AlwaysAutoRebootAtScheduledTimeMinutes-End -->
+
 <!-- AutoRestartDeadlinePeriodInDays-Begin -->
 ### AutoRestartDeadlinePeriodInDays
 
diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md
index dc226ea336..68db80419e 100644
--- a/windows/client-management/mdm/policy-csp-userrights.md
+++ b/windows/client-management/mdm/policy-csp-userrights.md
@@ -1,7 +1,7 @@
 ---
 title: UserRights Policy CSP
 description: Learn more about the UserRights Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 01/18/2024
 <!-- UserRights-Begin -->
 # Policy CSP - UserRights
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- UserRights-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 User rights are assigned for user accounts or groups. The name of the policy defines the user right in question, and the values are always users or groups. Values can be represented as Security Identifiers (SID) or strings. For more information, see [Well-known SID structures](/openspecs/windows_protocols/ms-dtyp/81d92bba-d22b-4a8c-908a-554ab29148ab).
@@ -258,7 +256,7 @@ This user right allows a process to impersonate any user without authentication.
 <!-- AdjustMemoryQuotasForProcess-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AdjustMemoryQuotasForProcess-Applicability-End -->
 
 <!-- AdjustMemoryQuotasForProcess-OmaUri-Begin -->
@@ -359,7 +357,7 @@ This user right determines which users can log on to the computer.
 <!-- AllowLogOnThroughRemoteDesktop-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllowLogOnThroughRemoteDesktop-Applicability-End -->
 
 <!-- AllowLogOnThroughRemoteDesktop-OmaUri-Begin -->
@@ -460,7 +458,7 @@ This user right determines which users can bypass file, directory, registry, and
 <!-- BypassTraverseChecking-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- BypassTraverseChecking-Applicability-End -->
 
 <!-- BypassTraverseChecking-OmaUri-Begin -->
@@ -567,7 +565,7 @@ This user right determines which users and groups can change the time and date o
 <!-- ChangeTimeZone-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ChangeTimeZone-Applicability-End -->
 
 <!-- ChangeTimeZone-OmaUri-Begin -->
@@ -1027,7 +1025,7 @@ This security setting determines which service accounts are prevented from regis
 <!-- DenyLogOnAsBatchJob-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DenyLogOnAsBatchJob-Applicability-End -->
 
 <!-- DenyLogOnAsBatchJob-OmaUri-Begin -->
@@ -1076,7 +1074,7 @@ This security setting determines which accounts are prevented from being able to
 <!-- DenyLogOnAsService-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DenyLogOnAsService-Applicability-End -->
 
 <!-- DenyLogOnAsService-OmaUri-Begin -->
@@ -1336,7 +1334,7 @@ Assigning this user right to a user allows programs running on behalf of that us
 <!-- IncreaseProcessWorkingSet-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- IncreaseProcessWorkingSet-Applicability-End -->
 
 <!-- IncreaseProcessWorkingSet-OmaUri-Begin -->
@@ -1543,7 +1541,7 @@ This user right determines which accounts can use a process to keep data in phys
 <!-- LogOnAsBatchJob-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- LogOnAsBatchJob-Applicability-End -->
 
 <!-- LogOnAsBatchJob-OmaUri-Begin -->
@@ -1592,7 +1590,7 @@ This security setting allows a user to be logged-on by means of a batch-queue fa
 <!-- LogOnAsService-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- LogOnAsService-Applicability-End -->
 
 <!-- LogOnAsService-OmaUri-Begin -->
@@ -1889,7 +1887,7 @@ This user right determines which users can use performance monitoring tools to m
 <!-- ProfileSystemPerformance-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ProfileSystemPerformance-Applicability-End -->
 
 <!-- ProfileSystemPerformance-OmaUri-Begin -->
@@ -1987,7 +1985,7 @@ This user right determines which users are allowed to shut down a computer from
 <!-- ReplaceProcessLevelToken-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ReplaceProcessLevelToken-Applicability-End -->
 
 <!-- ReplaceProcessLevelToken-OmaUri-Begin -->
@@ -2088,7 +2086,7 @@ This user right determines which users can bypass file, directory, registry, and
 <!-- ShutDownTheSystem-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- ShutDownTheSystem-Applicability-End -->
 
 <!-- ShutDownTheSystem-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-webthreatdefense.md b/windows/client-management/mdm/policy-csp-webthreatdefense.md
index 0b01461d1e..96d9296b8a 100644
--- a/windows/client-management/mdm/policy-csp-webthreatdefense.md
+++ b/windows/client-management/mdm/policy-csp-webthreatdefense.md
@@ -1,7 +1,7 @@
 ---
 title: WebThreatDefense Policy CSP
 description: Learn more about the WebThreatDefense Area in Policy CSP.
-ms.date: 01/31/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 01/31/2024
 <!-- WebThreatDefense-Begin -->
 # Policy CSP - WebThreatDefense
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- WebThreatDefense-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 > [!NOTE]
@@ -23,7 +21,7 @@ ms.date: 01/31/2024
 <!-- AutomaticDataCollection-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AutomaticDataCollection-Applicability-End -->
 
 <!-- AutomaticDataCollection-OmaUri-Begin -->
diff --git a/windows/client-management/mdm/policy-csp-windowsai.md b/windows/client-management/mdm/policy-csp-windowsai.md
index 1d1a1691af..642e2df000 100644
--- a/windows/client-management/mdm/policy-csp-windowsai.md
+++ b/windows/client-management/mdm/policy-csp-windowsai.md
@@ -1,7 +1,7 @@
 ---
 title: WindowsAI Policy CSP
 description: Learn more about the WindowsAI Area in Policy CSP.
-ms.date: 09/11/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -21,7 +21,7 @@ ms.date: 09/11/2024
 <!-- DisableAIDataAnalysis-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- DisableAIDataAnalysis-Applicability-End -->
 
 <!-- DisableAIDataAnalysis-OmaUri-Begin -->
@@ -31,14 +31,12 @@ ms.date: 09/11/2024
 <!-- DisableAIDataAnalysis-OmaUri-End -->
 
 <!-- DisableAIDataAnalysis-Description-Begin -->
-<!-- Description-Source-DDF -->
-This policy setting allows you to determine whether end users have the option to allow snapshots to be saved on their PCs.
+<!-- Description-Source-ADMX -->
+This policy setting allows you to control whether Windows saves snapshots of the screen and analyzes the user's activity on their device.
 
-- If disabled, end users will have a choice to save snapshots of their screen on their PC and then use Recall to find things they've seen.
+- If you enable this policy setting, Windows won't be able to save snapshots and users won't be able to search for or browse through their historical device activity using Recall.
 
-- If the policy is enabled, end users won't be able to save snapshots on their PC.
-
-- If the policy isn't configured, end users may or may not be able to save snapshots on their PC-depending on other policy configurations.
+- If you disable or don't configure this policy setting, Windows will save snapshots of the screen and users will be able to search for or browse through a timeline of their past activities using Recall.
 <!-- DisableAIDataAnalysis-Description-End -->
 
 <!-- DisableAIDataAnalysis-Editable-Begin -->
@@ -70,7 +68,12 @@ This policy setting allows you to determine whether end users have the option to
 | Name | Value |
 |:--|:--|
 | Name | DisableAIDataAnalysis |
-| Path | WindowsAI > AT > WindowsComponents > WindowsAI |
+| Friendly Name | Turn off Saving Snapshots for Windows |
+| Location | User Configuration |
+| Path | Windows Components > Windows AI |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
+| Registry Value Name | DisableAIDataAnalysis |
+| ADMX File Name | WindowsCopilot.admx |
 <!-- DisableAIDataAnalysis-GpMapping-End -->
 
 <!-- DisableAIDataAnalysis-Examples-Begin -->
@@ -203,6 +206,58 @@ This policy setting allows you to control whether Image Creator functionality is
 
 <!-- DisableImageCreator-End -->
 
+<!-- SetCopilotHardwareKey-Begin -->
+## SetCopilotHardwareKey
+
+<!-- SetCopilotHardwareKey-Applicability-Begin -->
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+<!-- SetCopilotHardwareKey-Applicability-End -->
+
+<!-- SetCopilotHardwareKey-OmaUri-Begin -->
+```User
+./User/Vendor/MSFT/Policy/Config/WindowsAI/SetCopilotHardwareKey
+```
+<!-- SetCopilotHardwareKey-OmaUri-End -->
+
+<!-- SetCopilotHardwareKey-Description-Begin -->
+<!-- Description-Source-DDF -->
+This policy setting determines which app opens when the user presses the Copilot key on their keyboard.
+
+- If the policy is enabled, the specified app will open when the user presses the Copilot key. Users can change the key assignment in Settings.
+
+- If the policy isn't configured, Copilot will open if it's available in that country or region.
+<!-- SetCopilotHardwareKey-Description-End -->
+
+<!-- SetCopilotHardwareKey-Editable-Begin -->
+<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
+<!-- SetCopilotHardwareKey-Editable-End -->
+
+<!-- SetCopilotHardwareKey-DFProperties-Begin -->
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | `chr` (string) |
+| Access Type | Add, Delete, Get, Replace |
+<!-- SetCopilotHardwareKey-DFProperties-End -->
+
+<!-- SetCopilotHardwareKey-GpMapping-Begin -->
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | SetCopilotHardwareKey |
+| Path | WindowsCopilot > AT > WindowsComponents > WindowsCopilot |
+<!-- SetCopilotHardwareKey-GpMapping-End -->
+
+<!-- SetCopilotHardwareKey-Examples-Begin -->
+<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
+<!-- SetCopilotHardwareKey-Examples-End -->
+
+<!-- SetCopilotHardwareKey-End -->
+
 <!-- TurnOffWindowsCopilot-Begin -->
 ## TurnOffWindowsCopilot
 
diff --git a/windows/client-management/mdm/policy-csp-windowslogon.md b/windows/client-management/mdm/policy-csp-windowslogon.md
index d9c4d40da1..c7a7fe256c 100644
--- a/windows/client-management/mdm/policy-csp-windowslogon.md
+++ b/windows/client-management/mdm/policy-csp-windowslogon.md
@@ -1,7 +1,7 @@
 ---
 title: WindowsLogon Policy CSP
 description: Learn more about the WindowsLogon Area in Policy CSP.
-ms.date: 04/10/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -380,11 +380,11 @@ This policy setting allows you to control whether users see the first sign-in an
 
 <!-- EnableMPRNotifications-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy controls the configuration under which winlogon sends MPR notifications in the system.
+This policy controls whether the user's password is included in the content of MPR notifications sent by winlogon in the system.
 
-- If you enable this setting or don't configure it, winlogon sends MPR notifications if a credential manager is configured.
+- If you disable this setting or don't configure it, winlogon sends MPR notifications with empty password fields of the user's authentication info.
 
-- If you disable this setting, winlogon doesn't send MPR notifications.
+- If you enable this setting, winlogon sends MPR notifications containing the user's password in the authentication info.
 <!-- EnableMPRNotifications-Description-End -->
 
 <!-- EnableMPRNotifications-Editable-Begin -->
@@ -415,7 +415,7 @@ This policy controls the configuration under which winlogon sends MPR notificati
 | Name | Value |
 |:--|:--|
 | Name | EnableMPRNotifications |
-| Friendly Name | Enable MPR notifications for the system |
+| Friendly Name | Configure the transmission of the user's password in the content of MPR notifications sent by winlogon. |
 | Location | Computer Configuration |
 | Path | Windows Components > Windows Logon Options |
 | Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\System |
diff --git a/windows/client-management/mdm/policy-csp-windowssandbox.md b/windows/client-management/mdm/policy-csp-windowssandbox.md
index ffa94e847a..a22172669f 100644
--- a/windows/client-management/mdm/policy-csp-windowssandbox.md
+++ b/windows/client-management/mdm/policy-csp-windowssandbox.md
@@ -1,7 +1,7 @@
 ---
 title: WindowsSandbox Policy CSP
 description: Learn more about the WindowsSandbox Area in Policy CSP.
-ms.date: 01/18/2024
+ms.date: 09/27/2024
 ---
 
 <!-- Auto-Generated CSP Document -->
@@ -9,8 +9,6 @@ ms.date: 01/18/2024
 <!-- WindowsSandbox-Begin -->
 # Policy CSP - WindowsSandbox
 
-[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
-
 <!-- WindowsSandbox-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 <!-- WindowsSandbox-Editable-End -->
@@ -149,7 +147,7 @@ This policy setting enables or disables clipboard sharing with the sandbox.
 <!-- AllowMappedFolders-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllowMappedFolders-Applicability-End -->
 
 <!-- AllowMappedFolders-OmaUri-Begin -->
@@ -159,8 +157,18 @@ This policy setting enables or disables clipboard sharing with the sandbox.
 <!-- AllowMappedFolders-OmaUri-End -->
 
 <!-- AllowMappedFolders-Description-Begin -->
-<!-- Description-Source-DDF -->
-Allow mapping folders into Windows Sandbox.
+<!-- Description-Source-ADMX -->
+This policy setting enables or disables mapping folders into sandbox.
+
+- If you enable this policy setting, mapping folders from the host into Sandbox will be permitted.
+
+- If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files.
+
+- If you disable this policy setting, mapping folders from the host into Sandbox won't be permitted.
+
+- If you don't configure this policy setting, mapped folders will be enabled.
+
+Note that there may be security implications of exposing folders from the host into the container.
 <!-- AllowMappedFolders-Description-End -->
 
 <!-- AllowMappedFolders-Editable-Begin -->
@@ -184,7 +192,12 @@ Allow mapping folders into Windows Sandbox.
 | Name | Value |
 |:--|:--|
 | Name | AllowMappedFolders |
-| Path | WindowsSandbox > AT > WindowsComponents > WindowsSandboxCat |
+| Friendly Name | Allow mapping folders into Windows Sandbox |
+| Location | Computer Configuration |
+| Path | Windows Components > Windows Sandbox |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Sandbox |
+| Registry Value Name | AllowMappedFolders |
+| ADMX File Name | WindowsSandbox.admx |
 <!-- AllowMappedFolders-GpMapping-End -->
 
 <!-- AllowMappedFolders-Examples-Begin -->
@@ -457,7 +470,7 @@ Note that there may be security implications of exposing host video input to the
 <!-- AllowWriteToMappedFolders-Applicability-Begin -->
 | Scope | Editions | Applicable OS |
 |:--|:--|:--|
-| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
+| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
 <!-- AllowWriteToMappedFolders-Applicability-End -->
 
 <!-- AllowWriteToMappedFolders-OmaUri-Begin -->
@@ -467,8 +480,18 @@ Note that there may be security implications of exposing host video input to the
 <!-- AllowWriteToMappedFolders-OmaUri-End -->
 
 <!-- AllowWriteToMappedFolders-Description-Begin -->
-<!-- Description-Source-DDF -->
-Allow Sandbox to write to mapped folders.
+<!-- Description-Source-ADMX -->
+This policy setting enables or disables mapping folders into sandbox.
+
+- If you enable this policy setting, mapping folders from the host into Sandbox will be permitted.
+
+- If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files.
+
+- If you disable this policy setting, mapping folders from the host into Sandbox won't be permitted.
+
+- If you don't configure this policy setting, mapped folders will be enabled.
+
+Note that there may be security implications of exposing folders from the host into the container.
 <!-- AllowWriteToMappedFolders-Description-End -->
 
 <!-- AllowWriteToMappedFolders-Editable-Begin -->
@@ -492,8 +515,13 @@ Allow Sandbox to write to mapped folders.
 
 | Name | Value |
 |:--|:--|
-| Name | AllowWriteToMappedFolders |
-| Path | WindowsSandbox > AT > WindowsComponents > WindowsSandboxCat |
+| Name | AllowMappedFolders |
+| Friendly Name | Allow mapping folders into Windows Sandbox |
+| Location | Computer Configuration |
+| Path | Windows Components > Windows Sandbox |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Sandbox |
+| Registry Value Name | AllowMappedFolders |
+| ADMX File Name | WindowsSandbox.admx |
 <!-- AllowWriteToMappedFolders-GpMapping-End -->
 
 <!-- AllowWriteToMappedFolders-Examples-Begin -->
diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml
index eba37a1745..3011ad91da 100644
--- a/windows/client-management/mdm/toc.yml
+++ b/windows/client-management/mdm/toc.yml
@@ -48,12 +48,12 @@ items:
     - name: Protocol
       expanded: true
       items:
-        - name: Overview
-          href: ../declared-configuration.md
-        - name: Discovery
-          href: ../declared-configuration-discovery.md
-        - name: Enrollment
-          href: ../declared-configuration-enrollment.md
+      - name: Overview
+        href: ../declared-configuration.md
+      - name: Discovery
+        href: ../declared-configuration-discovery.md
+      - name: Enrollment
+        href: ../declared-configuration-enrollment.md
     - name: Extensibility
       href: ../declared-configuration-extensibility.md
     - name: Resource access
@@ -387,7 +387,7 @@ items:
           href: policy-csp-authentication.md
         - name: Autoplay
           href: policy-csp-autoplay.md
-        - name: BitLocker
+        - name: Bitlocker
           href: policy-csp-bitlocker.md
         - name: BITS
           href: policy-csp-bits.md
@@ -537,6 +537,8 @@ items:
           href: policy-csp-settingssync.md
         - name: SmartScreen
           href: policy-csp-smartscreen.md
+        - name: SpeakForMe
+          href: policy-csp-speakforme.md
         - name: Speech
           href: policy-csp-speech.md
         - name: Start
diff --git a/windows/configuration/assigned-access/overview.md b/windows/configuration/assigned-access/overview.md
index 12ed03cf42..29d6b948b2 100644
--- a/windows/configuration/assigned-access/overview.md
+++ b/windows/configuration/assigned-access/overview.md
@@ -298,35 +298,6 @@ To change the default time for Assigned Access to resume, add *IdleTimeOut* (DWO
 
 The Breakout Sequence of <kbd>Ctrl</kbd> + <kbd>Alt</kbd> + <kbd>Del</kbd> is the default, but this sequence can be configured to be a different sequence of keys. The breakout sequence uses the format **modifiers + keys**. An example breakout sequence is <kbd>CTRL</kbd> + <kbd>ALT</kbd> + <kbd>A</kbd>, where <kbd>CTRL</kbd> + <kbd>ALT</kbd> are the modifiers, and <kbd>A</kbd> is the key value. To learn more, see [Create an Assigned Access configuration XML file](configuration-file.md).
 
-### Keyboard shortcuts
-
-The following keyboard shortcuts are blocked for the user accounts with Assigned Access:
-
-| Keyboard shortcut                                    | Action                                                                                        |
-|------------------------------------------------------|-----------------------------------------------------------------------------------------------|
-| <kbd>Ctrl</kbd> + <kbd>Shift</kbd>  + <kbd>Esc</kbd> | Open Task Manager                                                                             |
-| <kbd>WIN</kbd> + <kbd>,</kbd> (comma)                | Temporarily peek at the desktop                                                               |
-| <kbd>WIN</kbd> + <kbd>A</kbd>                        | Open Action center                                                                            |
-| <kbd>WIN</kbd> + <kbd>Alt</kbd>  + <kbd> D</kbd>     | Display and hide the date and time on the desktop                                             |
-| <kbd>WIN</kbd> + <kbd>Ctrl</kbd>  + <kbd> F</kbd>    | Find computer objects in Active Directory                                                     |
-| <kbd>WIN</kbd> + <kbd>D</kbd>                        | Display and hide the desktop                                                                  |
-| <kbd>WIN</kbd> + <kbd>E</kbd>                        | Open File Explorer                                                                            |
-| <kbd>WIN</kbd> + <kbd>F</kbd>                        | Open Feedback Hub                                                                             |
-| <kbd>WIN</kbd> + <kbd>G</kbd>                        | Open Game bar when a game is open                                                             |
-| <kbd>WIN</kbd> + <kbd>I</kbd>                        | Open Settings                                                                                 |
-| <kbd>WIN</kbd> + <kbd>J</kbd>                        | Set focus to a Windows tip when one is available                                              |
-| <kbd>WIN</kbd> + <kbd>O</kbd>                        | Lock device orientation                                                                       |
-| <kbd>WIN</kbd> + <kbd>Q</kbd>                        | Open search                                                                                   |
-| <kbd>WIN</kbd> + <kbd>R</kbd>                        | Open the Run dialog box                                                                       |
-| <kbd>WIN</kbd> + <kbd>S</kbd>                        | Open search                                                                                   |
-| <kbd>WIN</kbd> + <kbd>Shift</kbd>  + <kbd> C</kbd>   | Open Cortana in listening mode                                                                |
-| <kbd>WIN</kbd> + <kbd>X</kbd>                        | Open the Quick Link menu                                                                      |
-| <kbd>LaunchApp1</kbd>                                | Open the app that is assigned to this key                                                     |
-| <kbd>LaunchApp2</kbd>                                | Open the app that is assigned to this key. On many Microsoft keyboards, the app is Calculator |
-| <kbd>LaunchMail</kbd>                                | Open the default mail client                                                                  |
-
-For information on how to customize keyboard shortcuts, see [Assigned Access recommendations](recommendations.md#keyboard-shortcuts).
-
 ## Remove Assigned Access
 
 Deleting the restricted user experience removes the policy settings associated with the users, but it can't revert all the configurations. For example, the Start menu configuration is maintained.
diff --git a/windows/configuration/assigned-access/policy-settings.md b/windows/configuration/assigned-access/policy-settings.md
index 0bf8a93e30..9e9794304b 100644
--- a/windows/configuration/assigned-access/policy-settings.md
+++ b/windows/configuration/assigned-access/policy-settings.md
@@ -112,3 +112,32 @@ The deny list is used to prevent the user from accessing the apps, which are cur
 1. The default rule is to allow all users to launch the desktop programs signed with *Microsoft Certificate* for the system to boot and function. The rule also allows the admin user group to launch all desktop programs.
 1. There's a predefined inbox desktop app deny list for the Assigned Access user account, which is updated based on the *desktop app allow list* that you defined in the Assigned Access configuration
 1. Enterprise-defined allowed desktop apps are added in the AppLocker allow list
+
+## Keyboard shortcuts
+
+The following keyboard shortcuts are blocked for the user accounts with Assigned Access:
+
+| Keyboard shortcut                                    | Action                                                                                        |
+|------------------------------------------------------|-----------------------------------------------------------------------------------------------|
+| <kbd>Ctrl</kbd> + <kbd>Shift</kbd>  + <kbd>Esc</kbd> | Open Task Manager                                                                             |
+| <kbd>WIN</kbd> + <kbd>,</kbd> (comma)                | Temporarily peek at the desktop                                                               |
+| <kbd>WIN</kbd> + <kbd>A</kbd>                        | Open Action center                                                                            |
+| <kbd>WIN</kbd> + <kbd>Alt</kbd>  + <kbd> D</kbd>     | Display and hide the date and time on the desktop                                             |
+| <kbd>WIN</kbd> + <kbd>Ctrl</kbd>  + <kbd> F</kbd>    | Find computer objects in Active Directory                                                     |
+| <kbd>WIN</kbd> + <kbd>D</kbd>                        | Display and hide the desktop                                                                  |
+| <kbd>WIN</kbd> + <kbd>E</kbd>                        | Open File Explorer                                                                            |
+| <kbd>WIN</kbd> + <kbd>F</kbd>                        | Open Feedback Hub                                                                             |
+| <kbd>WIN</kbd> + <kbd>G</kbd>                        | Open Game bar when a game is open                                                             |
+| <kbd>WIN</kbd> + <kbd>I</kbd>                        | Open Settings                                                                                 |
+| <kbd>WIN</kbd> + <kbd>J</kbd>                        | Set focus to a Windows tip when one is available                                              |
+| <kbd>WIN</kbd> + <kbd>O</kbd>                        | Lock device orientation                                                                       |
+| <kbd>WIN</kbd> + <kbd>Q</kbd>                        | Open search                                                                                   |
+| <kbd>WIN</kbd> + <kbd>R</kbd>                        | Open the Run dialog box                                                                       |
+| <kbd>WIN</kbd> + <kbd>S</kbd>                        | Open search                                                                                   |
+| <kbd>WIN</kbd> + <kbd>Shift</kbd>  + <kbd> C</kbd>   | Open Cortana in listening mode                                                                |
+| <kbd>WIN</kbd> + <kbd>X</kbd>                        | Open the Quick Link menu                                                                      |
+| <kbd>LaunchApp1</kbd>                                | Open the app that is assigned to this key                                                     |
+| <kbd>LaunchApp2</kbd>                                | Open the app that is assigned to this key. On many Microsoft keyboards, the app is Calculator |
+| <kbd>LaunchMail</kbd>                                | Open the default mail client                                                                  |
+
+For information on how to customize keyboard shortcuts, see [Assigned Access recommendations](recommendations.md#keyboard-shortcuts).
diff --git a/windows/configuration/provisioning-packages/provision-pcs-with-apps.md b/windows/configuration/provisioning-packages/provision-pcs-with-apps.md
index 3ffeaa9b73..97c7612c30 100644
--- a/windows/configuration/provisioning-packages/provision-pcs-with-apps.md
+++ b/windows/configuration/provisioning-packages/provision-pcs-with-apps.md
@@ -12,7 +12,7 @@ You can install multiple Universal Windows Platform (UWP) apps and Windows deskt
 When you add an app in a Windows Configuration Designer wizard, the appropriate settings are displayed based on the app that you select. For instructions on adding an app using the advanced editor in Windows Configuration Designer, see [Add an app using advanced editor](#add-a-windows-desktop-application-using-advanced-editor).
 
 > [!IMPORTANT]
-> If you plan to use Intune to manage your devices, we recommend using Intune to install Microsoft 365 Apps for enterprise. Apps that are installed using a provisioning package cannot be managed or modified using Intune. [Learn how to add Microsoft 365 Apps to Windows devices with Microsoft Intune.](/intune/apps-add-office365)
+> If you plan to use Intune to manage your devices, we recommend using Intune to install Microsoft 365 Apps for enterprise. Apps that are installed using a provisioning package cannot be managed or modified using Intune. [Learn how to add Microsoft 365 Apps to Windows devices with Microsoft Intune.](/mem/intune/apps/apps-add-office365)
 
 ## Settings for UWP apps
 
diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml
index 99c636d922..e816d252d7 100644
--- a/windows/deployment/TOC.yml
+++ b/windows/deployment/TOC.yml
@@ -317,7 +317,7 @@ items:
           href: configure-a-pxe-server-to-load-windows-pe.md
         - name: Windows Deployment Services (WDS) boot.wim support
           href: wds-boot-support.md
-        - name: Windows ADK for Windows 10 scenarios for IT Pros
+        - name: Windows ADK for Windows scenarios for IT Pros
           href: windows-adk-scenarios-for-it-pros.md
         - name: User State Migration Tool (USMT) technical reference
           items:
diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index fe1b2a0cf3..5fdeb51d86 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -38,13 +38,37 @@
       - name: MCC for Enterprise and Education Overview
         href: mcc-ent-edu-overview.md
       - name: Requirements
-        href: mcc-enterprise-prerequisites.md
-      - name: Deploy Microsoft Connected Cache
-        href: mcc-enterprise-deploy.md
-      - name: Update or uninstall MCC
-        href: mcc-enterprise-update-uninstall.md
-      - name: Appendix
-        href: mcc-enterprise-appendix.md
+        href: mcc-ent-prerequisites.md
+      - name: How-to guides
+        items:
+        - name: Create MCC resource and cache node
+          href: mcc-ent-create-resource-and-cache.md
+        - name: Configure, provision and deploy cache node
+          items:
+          - name: Deploy MCC to Linux
+            href: mcc-ent-deploy-to-linux.md
+          - name: Deploy MCC to Windows
+            href: mcc-ent-deploy-to-windows.md
+        - name: Using CLI to create and manage cache nodes
+          href: mcc-ent-manage-cache-using-cli.md 
+        - name: Verify cache node functionality
+          href: mcc-ent-verify-cache-node.md
+        - name: Monitor cache node
+          href: mcc-ent-monitoring.md
+        - name: Update MCC
+          href: mcc-ent-update-cache-node.md 
+        - name: Uninstall cache node
+          href: mcc-ent-uninstall-cache-node.md     
+      - name: Resources
+        items:
+        - name: Frequent Asked Questions
+          href: mcc-ent-faq.yml
+        - name: Support and troubleshooting
+          href: mcc-ent-support-and-troubleshooting.md
+        - name: MCC for Enterprise and Education (early preview)
+          href: mcc-ent-private-preview.md
+      - name: Release notes
+        href: mcc-ent-release-notes.md        
     - name: MCC for ISPs
       items:
       - name: MCC for ISPs Overview
diff --git a/windows/deployment/do/delivery-optimization-endpoints.md b/windows/deployment/do/delivery-optimization-endpoints.md
index aa1c2a6abf..79e8211757 100644
--- a/windows/deployment/do/delivery-optimization-endpoints.md
+++ b/windows/deployment/do/delivery-optimization-endpoints.md
@@ -32,6 +32,7 @@ Use the table below to reference any particular content types or services endpoi
 | *.officecdn.microsoft.com.edgesuite.net, *.officecdn.microsoft.com, *.cdn.office.net |  HTTP / 80  | Office CDN updates | [Complete list](/office365/enterprise/office-365-endpoints) of endpoints for Office CDN updates. | Both |
 | *.manage.microsoft.com, *.swda01.manage.microsoft.com, *.swda02.manage.microsoft.com, *.swdb01.manage.microsoft.com, *.swdb02.manage.microsoft.com, *.swdc01.manage.microsoft.com, *.swdc02.manage.microsoft.com, *.swdd01.manage.microsoft.com, *.swdd02.manage.microsoft.com, *.swda01-mscdn.manage.microsoft.com, *.swda02-mscdn.manage.microsoft.com, *.swdb01-mscdn.manage.microsoft.com, *.swdb02-mscdn.manage.microsoft.com, *.swdc01-mscdn.manage.microsoft.com, *.swdc02-mscdn.manage.microsoft.com, *.swdd01-mscdn.manage.microsoft.com, *.swdd02-mscdn.manage.microsoft.com |  HTTP / 80 </br> HTTPs / 443  | Intune Win32 Apps | [Complete list](/mem/intune/fundamentals/intune-endpoints) of endpoints for Intune Win32 Apps updates. | Both |
 | *.statics.teams.cdn.office.net |  HTTP / 80 </br> HTTPs / 443  | Teams | Future support is planned for peering and Connected Cache | TBD |
+| *.res.cdn.office.net |  HTTP / 80 </br> HTTPs / 443  | Outlook | Future support is planned for peering and Connected Cache | TBD |
 | *.assets1.xboxlive.com, *.assets2.xboxlive.com, *.dlassets.xboxlive.com, *.dlassets2.xboxlive.com, *.d1.xboxlive.com, *.d2.xboxlive.com, *.assets.xbox.com, *.xbl-dlassets-origin.xboxlive.com, *.assets-origin.xboxlive.com, *.xvcb1.xboxlive.com, *.xvcb2.xboxlive.com, *.xvcf1.xboxlive.com, *.xvcf2.xboxlive.com |  HTTP / 80 | Xbox | | Both |
 | *.tlu.dl.adu.microsoft.com, *.nlu.dl.adu.microsoft.com, *.dcsfe.prod.adu.microsoft.com |  HTTP / 80 | Device Update | [Complete list](/azure/iot-hub-device-update/) of endpoints for Device Update updates.  |  Both |
 | *.do.dsp.mp.microsoft.com |  HTTP / 80 </br> HTTPs / 443 | Microsoft Connected Cache -> Delivery Optimization Services communication | [Complete list](../do/waas-delivery-optimization-faq.yml) of endpoints for Delivery Optimization only.  | Connected Cache Managed in Azure |
diff --git a/windows/deployment/do/images/mcc_ent_publicpreview.png b/windows/deployment/do/images/mcc_ent_publicpreview.png
new file mode 100644
index 0000000000000000000000000000000000000000..6f6f292d588b54919681dbd431dabbd26ebd19c8
GIT binary patch
literal 262725
zcmaI7cQjmW_dcG8Ji!ozAiB|#XwjnwqeT!&^cF2T5sc9jB}Q*S^k|Wyj}k_S61@{`
zbfV7aM(1}%JfHP`-*>IwA6R3ZIrq8mz4x`Rz4vuOo~kR65YZA{xpIX>MH%w!%9Vd&
zu3W)K6Z`}G$2$F+J@DtM%QGdpD}_DuE5HYQD_J$!D_2UQKqscxfzO1mmGxY%T%lse
z{ajUf#<qFo%6YB|MD_*D7+rh)qoG#yhEJVW{l=76PrS=gYE0A5wmYpx{z&B73~|>3
zVgcftSMl)SNHS5pcaH+EIJ4;z&?Z9N_kHV^D!=Ji?W=3Km9z7lPw&)dxQ$G8>S$qV
z&yIaYWKQGA<Oo;-|9^h5g(scXM?^&I3yFwGv&FSr2qZn>_<#SbrBDq=pM5PU*~*}!
zrR{j~UpL&<Yov{(jv;E~B>I0>g4fCG%E!Xl{%d(QFyVh)XGCbHd@JU^E(?UP{lAwH
zlyI4nsDNYtYctXRvjCJmpG5_7>%TVsKMOP$1`4x<DF4@Ga{sfyXngT|Hgc8!+O_ik
zEP%W<9Q{9gBlw>M%yfX``k%eA{LcdD$CrnfHE3-wWM?h(-D%XujpSANo<u=m-5=+0
zp`2g;d1PMiFCP=q$b7(zuQej9ujP=fH6*03ZWG|p{T0C%Yv-_+Kx<G}GQQ|%WaH#}
zyF|?7#rT5o?QW4BL|W^E9`^2UJi^%7VOoO>ExR%HJ#Ax(d)c4s`Uy1&)c)g`;DxN0
z2V4SL7A6oCc8k!~Ls^gIl2nM~4paH*SUw+qF&b_82RoD{fV6T9nG{2gu7A|Buk7Wn
zFtB>50PWlbBgI~ds@d5zn5U}J4or!##!`Ds9qWfk?WiY37#lej6&954kLaKh@0BNL
zzHqu-9--b9Tl^oc1X&`#Jnq-bw6lkCTF;y^&|gYMMzqG@@qe&=DY@!HvTSmjviL{y
zLtv!u;}|0eF|(2D4v!af4Z?*QB)!u`pWG{@%TsLT2>gtCrHKDoX_~j3kV$)VAmVoq
z=v!8GKcO+~@qha2xYDIbd?;&RWX7Rfbm+A*eNI{_#Fwu1WFz~^9&TtOiJ9ipp{*>^
zxgL_|tgXm_y8)%izdnDi-rSEE1UKGFS0(M@Dlz5iaG0&s!a67x#J^CGjQ>wVhEV+7
z7=)>jP-!nBLDSGlRrCdF^Y$O;#u|H1CqX}fGsj&TmYKkywDp(9hD4qZwxrXamHlZD
zeQe*s8IRSnEr{1q!oK*=2x#W~Ycja;P1HYHBcl4xWNSg^EsXN}-CWMbk_3FlfzDZ)
zlntNrKJM#oV;Y{XL?->hcFhT-?0Mw+B)qWmuq4suBxV1Pkj%RDcL-n5>AT0@Y0-l@
z`keHWQkBgftHrHP-S>r7iFf>OIan}pVxJ!!)3J-34n9W3KDR30i%@?_ap6!|T(ilD
z68>Aa-`edKZ`I*K8{*FL@1rU@1dLToc&41Y#Y-KlCxJHJf0>hV^+dd;?A|Q2oy`;~
zZ(H{*A8qk_>SzZY(${m#cAN;hxJU3K;%|j^u9+VMLsxlni>K;(^WD6nd`oLvv>m>d
zuutotQcSeg%{GdPprpQApPu`A1OSmzT|*hGhl_JB|I1kNB%HAJO)<7ZNEa0=EhdT=
zWq%S?*EL-EzIYs1zX7;(Q$iwYTTM8@=ougXUx+9pGFB+xd!<z#!E3lZ{z2c%+$f$z
zk7~?mR|63?>9&YLgr<p}6bOc467J~6pn`?$YkI{}HOA{}waxfybQ}@&UtH&&X{*$7
zsb*bZ9rVT}?CriLi>gy8D)0Z^fzd#O8ZC>|%RJSXn*Z{h=Prly^QcX1&;D;mmbaWL
z7l#l?;Q#u?)2WwSqB<xpyZh*N1xx4>8m{a*xZ75~Umh2RPUe{3_+-?&XGOfTbl__E
z{f&{v6oKl8pf9^VifQrM!qwFmpyzu1-v@ZQx=LuEW0kEPkK|+^mrvdo4+ST;WzqSk
zY>1}g`@A#`;W;bp2&$UD_x!?9`rT(|v%Xa;;_&48$cypXqWID7LGVb7p}eu+*S5m6
zAy=s}%B!CQyJR*YQy&_p;g18qy~@y7-S$x|&>Fcfguq!-Jn>&^(7=`G5Nq~}R=1(&
zHL;6yx{e}Ecp==*J6@d5*}iMxV7jvW32mo>l8*6Bf{SN|PpPZbjwPh(8yq;q*Pi$$
zP4b7WVdRjno;4Sy7+R00-78yjkJB73k8@AZFk1hpXVIkd0TtRUoRHnug>%tmwoABP
zW|_GiXZX}<XIN{D)hYf5Cpn=H%hs2jZVwl=5Xlv>vnC>gMEy0YTNkkm+4!e7dpFB7
zrRH<vdh&A%QS~tRLjqCwLsMrfjU?(12PscINxS(<+(&fuJjx~Ga9`@@|97dY#T)%M
z4D8SiqO5Z<q|W42G8So84bpXX(30+hvVl@nTG!{i7heI*zAGpLmcfO{5%lZigYv$@
z#x<)qkm3f4FA}tFNY7`@j_I1#e03(TxJ0xJoa03fDREJDOz=17X3+(_Y>11_)=5M;
z2!@s~^)o(TiaKlgs(}4T$6nzoU#>M0r1bdWEO%dgv!%n#I|%on&ZC~QHj-0O*;gZs
z!YW_H%>-EufHvaCj=J=vuCN171{e7k#YA(zlr|)In>c9ja=YNQl%u^U6&9i~j4sFQ
zY8=f*F(9W>cBL)M#i@A;5OAje2JRaWKzew_80~cQ6uUY0W;0rkh<LE~M@m>xk9n<q
zznyRqr4Harpm6+06d|#_>aYoX&9bHE)T1%$z5PBNm~sBym;JVrXU77$!>g3{Ah=y*
zwQ2&nDy+T;n!X6zGz@w>w9r0CM@+ubp+l7RPy{nbq{?OgK#U!S`(W~a4WjtscT#PA
z<~XAtawvpqMCH+H!ux2~(*^MH+QhAtW6NC2cx9Cfyj{L$K{bL3@8!ZQuBgpv#_el5
z35~a&sRty+kLj$GYZrBD<3giM?lP5327Wm4OgYrc1tqpHO5Td9uAGf;emKh`;;oQW
zp!!>_>Mth#6Lr3Uuyr`-5I~yRzB4*}{LV<K>Sy7~ALySPJS6n-JE;?B2@guwL3n)n
zIc}fMm-aOy9qfC=jrH`hHT^pIu%P|;Zm2cOTKZxmiFyQ#y<p1F+$~g$@4}Zb%=lY3
z48CK&D*RG^D*K2ijHh<2FrBglWkoffT7Emh;B#IE?n3gk%Xq{x-xiLjSU9%zS}1t7
z<PrFmlIott<TMS^j+1)KWRVhOV4|a^=LXBUz@z4LysIm<BwEnpd^zMdl_!K@+&&G~
zqH}kQbph|w(<_HwoZ$b_vXbC7KBuxV6a2;z1#(Ucsa6`9z#P;os<EzKE*|6y4fhMW
ziMAn&o-#7AbnoFU>*S;w)e0=OyA^x%t)Fy6gQxgThK{aBMBoLJEMvQL7pX`3ngMEO
zKN=mAj4ei<@RqKnKnV1DMFVqE@~FptkajpI)&2bnT<SXBKxp@G=>7y4iFef|wkw4?
z*4RYH=Jz=31=?S|bdb?*`|humn%_Iq`rgivQL$J^P1B5|e5M}5u^<P}G~v~&8aT7V
zCm;I+j47eMVa`ND(L{|u6v&?)RkN^73S{?Dc^g=kkB?kfPwkSLme7sG=s2BHCkSt3
zx|~w#ISI>AmbU&5a7q}hyyM2faPbgk`+a@ZSdTXa00NXysFKAr;)QaX!K^36^7^Kx
zbuodW7fW9n4SEfhW#9Q75xkW6a7!8Q+4O_J96OHNW3@$zqoOP2+sYSiJWAr7W^AXy
z!&}0|`3H5oXaT9C=ZZ9YR%dkfxNdS^G1I5GpoQ@D1wx`OAGZIOkkH2hwXfw?REgu|
zaiBCK8HHgTw7&hDOsVoO&2`FO-F9Rzki?aQ{ddGL)76!DZ=|<bomc!X(ZGsMjs?_Y
z5!Lvxp+hu|=<T}w8+~$Q#KXD6<AY(Um}(CGcRG600y66we7q%m&)L~72%774^xDpm
zPCT@G!5ir+2ceH)f0d}#RmsJ%i0V{T<woezU0mpsba@KZ1agT!Y1($Zbrj^$g)wi3
z^17qW-?~3Gg5M6RxZozsl0V9hxWBfX2~_s+Dv*VMKeWx!$=$-6_-@CQ%FKx~W}V7q
z5F0g**tm(jRQU?B;kc^uo}ct1DUixvO<Uf50l$b}s~D|;mwdcD4pj1^OG?8~q=j7F
z<eqJ2!I&n+x*5(qyZ?tZcmqUh7^WT7RO{E>Im!<OlZcVkHqw$MpN0e|@BhWHrlH>{
z-9`re^evIK(H0m%{D()IAwlfg`s^bfz|FGw{-tJ|0dIx874#qvV3s=MvK;2dGf6^b
zmQ}gbDu2zqOaPGP3ZyYlaailpm?ecJLwOkI!r1S)9s61L_+jP?2U~Xe*T5l^I>NYu
z0opW_#>gq4Cxo<pmYKpiC|yt-N;{bb!fmANMqzfk;S2l3Cv7g!6^NeIsKWdXx~S;3
zzNv!zk4_vE^mkqsd|7cXcg9BQ^UGw^xyraqLePG!alZr?+tmg^4h^DOyu@L+(+jkw
z`(F711w0fc%h>~Z4;-8SoVciv%eWnJXwpfCi-Bdke;<)>NHn<?SvT&OqQ`bsWtaoG
z8ZQTcG}xfFyoJ^+;38|rJcuukz@lSsQTvkgH+iwPi?{O9CtA5*-s}IiOXv+yKR+OQ
zCu(pPf9LG9a6oWz+#a1?ysh`<-NfI5_12%k99pEKZJp5r-qNV3d>4%WmIw4ON77)|
zCs#!g7feStFZq*ebb;7~n-~dy{i&zR9Nn&u;7SsWBeGxKex}M3d*Sv3{j@+qC1UIL
z)kuJ4gqJ?Uj#?wyt-@$%sOZ`hPd{TiE_*ZmoBD1()k0abYR8WW6DSu!0<R?HOF{o|
zU58>m;L+`CR%!iS;V{C59GG!!z!trj1Y=QXzNt4ddT8!~S#9^Ic%`HTBLJ*M(69Qh
zP11%$Kk}T_bvS<1o@pHQ&|pi-uZ4~U;vt>&GkK;B3rNB*;5_T6Fw8?OAi~hdmRhZ?
ze5X}GGRDHle3#E`0Irp*-Kki70S<fr8b-bD@%QrjdOdrcC*gstAP}B_o&kvyTmJdn
zE!7SkU5SezaG<5_vR$PsD6Qy!(?N?4Td?)QbiSecQPy0TO1~A`K%p{R4(<79h_rlF
zcl(946%N?5_{c5`CW$s)o8nBa4)F0<P3d<U=D6~aLgxI*1-uljP0(*;C7dxJOssP@
zL)Oz)!{b198r_V~g-+82LHC9vk@nBhQQ0?4=W9yH`R?eA(18bXix$R`F+?`FXy3hl
z2}jnf0KEt5)3UYCRHJ`jku$R3IJYb#@sgj8$(q(CpMMADW#HTvQiLCsttM73vfoMM
zWp5g@BlO0<|A1b?-99o+io<Lvyt`zlWpVUy-U8XVd=6?|8a;^Wpd3)gx%0JuPfZaA
ze3M1D$1K%M(H5mWA~i9^OVeB>;bv8=IONN6Z)A+l{T+eb!rId9nTAYm*}g+95o9js
zzqNK<|3NRIQPCQHrlef$=bL%^16NKO&eW)XO-=G*NNBuG%hECP{0$`Mvy?q<g+*#p
z%wm2)nfT;)TtH`0zk@ZOiG%9Dm(|y6StmYWlQjB?vVH<7i*{p@aB+<^61g{0*Zm={
z=09%@mZhcZ2AFsS-RIk*xfI)&P#ufX!g5sr;|l~q4(3n?nD|Bh-c`nt%E^d$?4~~$
z2{S9)c_{a3=5`UQ-o8-FvOi%Jc3AYb<MjOt_b|RRfpYYRM$fhSAI-cOA2+ybX87WO
z0BJGwVxLwl<aGh@;yjN`>UPDzq4f7*;9qWxJjRmSENd2%C>lOFRD{0K9Jc7f8#XR`
zMR0uP)X{vt`{>p7L#WMQW8ISq31TO<nrZ0?ZHDxOzc=*H>i8$+TrKF-&G=oKgb1pK
zCe6VrqNf7U+U6O`Z)_FOUZF%qsTaiPh`YC^@MYMu{j8`FN4jahGm<nNQSeR5=K}oR
z{wFfmQG*w^EqFSfX|J?uVZ}SuFiaz%n7ZT}yjxj;`K@Cs*`=8GD;^2PhD?mM7bgJz
z*9n7?s};Te%)g;FeqyX#DrE{|H4-iVsqGLWdQmib{^Pdys#8>FO!)Z@x~rf3s{csw
z1C}*0==c|V;FKdBI{JOna8ByPamk9bbrZGiDtmcdL5EXZ5Drut^qz~8TwQHV+0f%}
zWpO2Ba<1;HtE>5CWkW<nMES+VeYUo?jd=w9EZ@F;%g@PawzWepnfa=vjoGbrq`h@r
zZA-(8&9_3?up$6R6svd@%xHgcEP|KE(tMRKXNxIO)GHv6df&2i(vmu=x6&?;a<o+K
z_wc7LP`O<XS~|K(yf@Cy&cXPhM@OECH#}mjXsEuC%U7?-xw+@m)J(j;$zYq8`X&^E
z+^B;tX9ka_in-)xX4)~~z2xS)e}4i7HZ)aGP*|60;Tt~)O(z8Z*_>^{e94Y1%~ef&
zPrBhuP%kmRBY?Cpi=>G5CXfJVV9QR8vsi_Nd~Tr<0CaHUCznaySvTcAADiC(gTEo@
zobnvRawGzm=4L)$cdth*rF#_`fl0F((PIdQ`co`|HS%F&2&wFSE-p+Va=p|%Qmkdl
zd#9V1TGsO#+>un~r1*5n?<_CPbwC9>6F@rdvp;Dy_*u<vgoYgtJU3$E=a8)wRq?&3
zZajj0?)Qe@xtC}~qKR*n)J~URh41On>u3G)vJlU+!=*_{gEDK)gH6WVPgxBdzRzrz
zqIxTyE4~8!2Z1KmD=K-e^lGeXz7(@p)Y&ADBl~b;$mOp1zZ5!@v2b-v;7NmT9kaAs
zcn$D2(%IO)^C?qffdnqEF&~^9jnr58oh|uQG?B_oK+&V*(z#lj55$4zz?hu<F_|zE
zGUk#c`*u@&nHgnQRGT^?uM@&t8xkdb)aJXBGCewGmEn+-l%#EBG-*FYLC}B0DYs{n
z__2yg$=T_#L<9WrEiBMF@T2RWc%5-Qt2E2{Q;gH3bA;*A+g55b)7MYjMd8YPbq85=
zBkofkoZhe~*|tgQL~7L7d?|VXAY8*p^pK_=ba<4TuB5toyOS;-$RD<AbPl9Gloz>8
z;Sx^C1NffXVTSdBpe6WhdZPTCuhiQrGr1lYd{cK{liRf<iy<RE!%Uxb`(hCpW1}VJ
zlXFl5*hcMsDr`4^>E!3xX0Qwz3}$&)v(-YU?yan@?&$mkO$0g)xIqdv>&a1xYYb)}
zP=;MMdehF1g!z`oJD@76ylKuU)E_p)w|f!12rO>u=;*NDS?m^ZS$x7Nq6}H3fz1~f
zRt>CIEiuvwzIqZYrveRJzYC7n5*}CW48?Tu>p=(L+!78S@<mZ&<_Jv3Ju&Q0gX<#e
z+0VTEp69av8L3(u^fb!C!KqaGCBMyjYT$(JNPdGv$4eru<<gA=G&$B7p|b~)NK5T^
zJ}H?&k64Zb2&8Y&zkUnSQB+0>_B=GFCcn!V`0aR}>D*f8{IJ(ZS905oH0=RQzxXAO
zey}g?!`Gh-MomgBR1S)-&BC{i{_y#YecmDpxG|8MXl(1XQCm3){8E<;rFM)qr)`at
zXSzu%)aH>wuI{K2@@7&EGFR=fnr8{cezYf4_Gu>2YSX2dx;eX<S~3PbT%h-|b&lyi
z{?;h+XIQ_S5q1F<+?QYhF;$XHJ9RLQF%pvQ<yC~lwpWMnbMpDI_rCJcbaWf<*M&=i
z%<w^Nu*?b9LA9PZ>!})#*+H}IKZz#eXU7{(BZe*!My~w|>X7?)`*>uPWM95COyD)5
zm0tKML9oF`9F>WEyANVPW5=wRkn@oe;^=<1@qf&_4z{ZEmes+xOuK+gV7a8xRxux}
z(0pBQx+G2s(wsvPY&AyMBsl4171>jv%JFB^WrG@(*Zx~u>-%eW9KLE?_R8U8`JH?R
z6$6E-A2w>F8^aC+#?s5e$VC9!&FVyLpst6K(;;N>Bqg|kc55=jPE@(1Dcw4rVFN#5
zmXqB4dCl=E?QBS`3qb@mRm`RwSO%+T+dc0;AE?es8h%vb^rTOM<738tXeMuJn9fbF
zE=a%wA2=WEag1ou2~+P*i~RV@+R+=KZ}e3=#fAp+<~MZrvN1#VI5}HGBw)0)*m1jV
z8y_DJwa1T3O-@&J94AIwJ2C>SbhErq_eKiC14yMuE9}Q^Nl!SA54<8Zr<abZ=+o}n
zcjp#QmL@Q#Wn3FxbclX=++-=}eo7;Ax;yAdd}j@fMlbG|W1^Z3Nf%WaC`hDKPQL~_
z#c8PO@zw4=t0apV{ya2lV%&*{Q?wXwXC))I@EQAfgY#yutN%bdt01OkOK;duC8oB%
zYM{d|%TMtlmQODm8(@f@TL6jfvpLD=8qU}!!)a)Lpg8!w;B8Qmq*mJ`s7ugK{Rn2d
z!O$F7RwhK997$%t<h?0-Fl01Z=YwSMT+W0pCRyowdRC`F$8FT3iGmU4{O4GdQ)Sal
ziLL}blc~9n!9iXS5~`tInR9Omzy@i-gXBu|vo#jdzy=q8xn)ex1~aW=<5}3~K-(u#
zoI}ka6z+so@0S~WHDFH;Ys9D<>|4U`I66yHE%eq2QyarFRaL9wG^EGY>(70U(TLtG
z-Xm7qn)9<`=(Nv%m9N<HrvO9!0hXHChTBwEv<vhtm6&|WD7I<hGR}7M9Gx@DhW0<2
zM>?CX!~W1mnhyof@AB<Efo#suA01KG9|YBIHiD2txl(0$-9L3BX!si=rkDG()1E3y
z`yCBt7&4aa<;1C%1~YoL5xz3TSx&BVcV#e5Cyi<Cxw_b|z1urdj06g^SV7*h^M)Ht
zu5#paB**HrTT87UbvoqUO0EBx&+-h^6fx^v$;+6M^gB!qrxWE}J(N}MTnd2pF%Fo#
zZn!Sudji|nV-T=_fA3AFjKNJw>O^<aUe7>sVg$z2C7dCj8Du1zLc*+~x=VwpDM$0#
zwY0O<a4k@{qsC=gVv$z+R$}*g0U30(Iam8+n1Ps7%s9A^yL?rD5)SI8-U8ohBsZ3X
z)y+(9SJt2M6fXUf)!WHekCwbgW~v-E({Mg3<*7SVKNrenI9g^6`VGIb;Jgr{B+ei9
zYfFjIqnXhQ&5u0U?wm9`0T@BbFY*kg<Exs}298y~2)WRhfV+Xw{#Lh`H<^20r$W;`
zSHD7grS?bPUcF{04!J+>J7$?UHe6sJFB}Hf7`o~l?kRP&oZZtSwnSgaEMq@fYy_bT
zga<SEj{Z^2U^dib#ITS~DUCkLCkQp76LoaW>`wPsyu)eMCyg(J?eYMye}W&YY}S9?
z&Y9tQ{FMCt=GVORH*>ct%zlM_kyE2tg%`_Zc<=qznQe0TT<h@9nNpivpB(xTz6I}r
z$Lsw`cZrf)4MEP2)z#OBb{Vk&a}UkbU*{jDctrfH^xRv0EpTIwY`*10A$kjAm2nTE
z-J!Gzu{P&@-W$eOHyXiW-dz>WZ{8`!DC2j$w>FYxlGGH=l%ciSB}p<r_{^#0ux6*n
z&XK~8m4m<jfJyWIxRs0h)8`}B^D?{uw_u@!K-iMFlV{^yPm0^tf+!I7yEoV?ge%?p
z4RJ)=EAlca;T5-b0X2@{=!5#F0A*J~zVuF?6hQv0>m5@2LFPlw2QE=ohd-?G-b{VT
zFPZ#hj)h@q_SB#HmW_{eKZK2{UJSdA+^Bf?o+haHkq3cbX9AClKR%eOWlnNWx6;uF
zaq!4@#K=93LeH`8@Kxe|<+ShG>Q8>E*;@BLAdnXDuj7ZuuqstQHKtcO$Sm;i@aV?F
z2fyh1evO=j^j60man~<9<C}YpE;g9)@}8Y$koKb~_`L=9-&#6i8tkhI9;r$wGS43I
zHSUo`fS=Wh@%YTHDWs8+Q1KcrPwl*a1d(~_G(BBaRmBs@*(f^gJwGsiTRu%(PHCLD
z?8dwBqf{U47<4X#b39)UF(C<-I&>N@YY!2_WljmvyAy6gQq0`^XTkJu;HsUH1d)3H
zp)fq&#3$-?Y60<aw#-$a91$dRB0`lJVi0547=P61LCin>QR0HbT?R7mWu;Fx<vH>C
z-MvM;>&imJ-i}bn4Nae)?HkG6IjV}%6|(A~AGtZr(XxQ4oOYzrDcPU$DpEL_{Dq{u
zk4Y`jgH9A1DO>{#$pYp#*?d-Qsh;kW{w()Y3P*z-FUQf#gFt)W_pqqGmQi-Rmgu;S
zjWBdR98bc}Fx?39P$DTmg%&(u3DnIKZnqs70ftN^OWq#r%F0H=cr&m!l;bgT-;5YU
zyvE{6NuCt=mhl7WaB9$L3Bmht)_OX}9}T{{*-TYs8GdITVJ=eKKTP~i_tf#t$far?
zZLrk0GWkuECq=s(=V!@`^1(fW<##<APn+Z<PhSHeB<{>fMer0Rz~DBdiCkcq$m5tW
zNq^~Ase~_g0_Hi^4f+*aG0-nEIE`a#c%<e(b%Ty?(^z#hT;m*FjQqSbL2csQ?~&4-
zE+t{BA4t6@zGBsrI#xriy@`1HmXfiPdDf?PbAgq?oWa3~N5+r5f^0FX!HQ%yvdX`2
z)l~hss{Unz|Cht(Hz1E8ckMOc%GYm`U|W-_hMlb0ERvoKQ#HAe@UNT@>WR$8J)?en
z5gU_Xe`BNHYDQL6&gla{`ha5b*xD<icFQd{;_Opbx}l+&dyW1}9kupKP&W5yr^RIV
z=7;&cF?ZEeg8PBX2KWkWd}qZ@#EgpE6~Wh8US4G^x=A(Zb5{sI@wIfiF8CH`2OZxe
zw+~PXgPf4yeF#|c4$F%FY`y=?FIfgX3oBV^Mpy{U=`KDkL8vm!r|chNPW12Q!!Rly
zA|}VH{#2P$%LvgaSay)|`@8;M-aR1WYSt}twgZJ<TOmAG@~cSfu}18(fhSl@hs{FF
zhA1>x<>s%~E{G>H&fYK$^YNbxdTm(mTMN=s`l2MW^pO=U3`yUD^gS55vjwkvnV(IV
zidKEE{P;&BjM<FeJx?uVcp}f6*CVQm$;tcBa8pmwJB(cydRy{`fR#~Fn!x?RNQMMc
z&hY5=aYuB#YgZq!gu|21B>I~65=8p%J8{#k=Jd<5epmkole@8Ec|?NYQ>%^qqOu0A
z$Cw@+&}6!jj(UfCI=!^(<e~Wvx~9YfN*=Z&phx;(an0@d4o`vgNM2D8S#63nKq|-4
zRZU)j$si*7x2<?#iw(batq);lA<Eo8S+z?{o;*~OY}**OD{`CtwMiekC^i>#eO1h|
z<HP2x(NDVI>-#ThWFWkaV<j7Xr~A`RhlhunQsR<uayT*I&fW+e9m!=-Ah_m}Kg$+0
z4?dLK)<>Jxzxe5se`VA@KB$R?KZ;CpGiTdXNNOj^IZqw-jC}h+vcq)UWJoMJ=1*;<
z^x1*AXe+^Y8jZI^gURrPsOOC7TDvYkq^Cxy!^O#{dV4jn*I6+O?Q!mhC;!YM<THMy
z*cn|9JN5JB=?%Hk$_ge)Y#(<zegA6o9;+bwt2+?}*+uJq&VftFQkMyNS?l%uJDq<-
ze{_m!jd9s^pi6>&K__udGjKXx6?AIU5a??y?43B1BVQU88a*`TSkr5vuX8m^uSL{#
zc#IPQUC@$d0?9kNx;MR`#ZMz)%~{8*zrUwUN5zvi--@YlKrL<)@^)~_J*a0_O$a2F
z@Rrh3)@W{O1X-mr5wFF6_^^QOkS#VNy^DWu3dDDG%}0@mjTU@U(_i|g*EP&d@{m)v
z%_~iUd92`PR%K#$zmU!G=ugY#J8vj^LK2<lTdKDHoCe$!zx%nQlFWbZ7q!WRp*ueP
z;sZSO{5RSC$?(93UO?`sBJ<hR`N1nY|FCgXuvc=hW@(^ye`;;<O@421u*(Vp=2F1*
z#qL4MnMYEZ`29hiGYJ+Ij<rwxiR!dTrld9TP8sYvYsuQU9^OBHi%vKr>HZxU{cSCg
zhqKFL?Cj9VvNm7-#3$hd5ZV5_HDr8odoRqTS;KGYY1;k<T8)qla01P&0*xfSKbZKq
zaK^*mnv9s7nu`g}4xS~EOD={F&^DZyVdm#*<LA;Sn)y}{9~p0UCd9_hMa~K<_|ZEz
zldt<tk<RV^^SDe3mPl4eOzz+wrVP`HNyl!wd#!|vRC0WQnRRDJ<|w%~n3Iq%HiG!d
zu3r1+p)A2hYVnrz;rt)@JF`9!X7O|p!>dn>2*=ut72GGBm0S*I#Siywno^wVR#uy>
zD$9F=Ib*7ZZ`-#Ql%tHh5xz|VhIf(k?>jBh%#A;stkHQ?@H*rL=i$1cSmM8xTvlu2
zV06$Q66`F{usqjHniMSR<4yTs1+*;6U1}<0_JwGH6OlGA6l^^gDQbK3*qsE#9=KfF
zOu?%Awk2gY-D}-BtQ+P~ECX74-!$>7lXHAdirc7qs8&h298#kzS+WiC=WKPToLpR`
zTuWt^)yR4I1u^4{4W$)(lamIU3+ZvWPRc&D<GtIj<X}r`(_}0b-PY(^bEb~J+RFF{
zHr$meCg}apR6M)8fbf30?)+5DZkG*&rMc|gwHwtg%1pifrU%uJA!cW#Bb2Swe8x4Z
z3}$y=SMO_*w}<7GEb3c5pYF4!82K<B!YY7S&Lk%X9OQ|Fr!qv@)57$fLyy{t%RO9Z
z^;}AFb{}qvKfd<`F=p}sWwLa8{7>9ATCQ<O*n?h0D0YwCyvIaLtatb`TU}lNS=JJT
zM)+MWE|<A0=}ObyI}tlI4WQs+N7x7akVK8LUtVpUoi1S`R%ve9prX&i@OTq4zGh~k
z?lcKeZx}V%qs_vs0x>bM*{1GjK9(^8>i1Wg(p7v-?qc&AI^Sda+zV#+Z+HT!R3A=&
zl!wSkCW$yCQ#8@cLssb`daPaS{6jg1f4B=t`3Y)_Qrw$5lkI0Vq_<)6+11pEg4h)F
z(6=_hYnHlGM&@+wqNzyP2W~m?F{Y{_3EM~XmytbSWX=?CO01>QO_fUDCZHi)k{$dR
z<=ixgnN_&1ZFt9v?_vz#%JZ+UJo*7Nqn;f6=sFY1`x*3Yr!i*dVQA@3-nc!e`MQY^
z|Hx+_ZAZ5~2LlL&+^*qV2s!tc-jDoE9yY~&lFoAw&MPw!0R-f1#?mEJ8|03oE+MWa
z-dhS`LR-Med<0r>eSdt`3MwmB*%5AQ+Lh710D&*tBnrKbN8^FuByqUW2-l<v+yAaz
zK*VWtHS4O+<LRRZ7U>WLw(+RLZ4^<~3_#OYv6FYCJY5mNY6i=fu@&K^H0ZT)SF&q-
zJh7o{)`N*urlq9j<8n&nlxHUcXFl6$>RoRUtKM|Xc*y7-Cqo;)tOsUhHNDTQ8W@E^
zb$pc+O0OQ0uY5EW&>OkqLd;^b*#Z8Z|GT^Zh@=wE%K~^ZJ^AQDStGBLFfROjd&2ku
zfl|Y3Hvv5pVZI#c%~vt;Yl;SNX?e-58?cQo!QQg$NbwFr>C>Y<1kjcW(g;h@$p7U<
zg(Uy#d)R4GeHzv{r6xOyY@y()e~_D-3q4xNL;6?(+?Hmr6Q4Bsc%y#$H`4|^U$nDt
z{&m>4A~9j8vhP;<sT;uvRgn|{?+r%Sr|%{QHNf!%rdXd&Qnh73`;?yNsXJ&rGN<?V
zSF$Rr$_77G8f5Kza7J*CAg2VMu0ust)sCN9Z2#R2#@EI+9~d<9i9fUQVfnLoVe|?q
zDdGHJCLg5t;r8b2tB=`t?%d(oR+<n$*=#cMD>6b>{5oVDh@chj_?=c!Np(~xI3rtV
zHO1wc4pw3Tlf<`I4@c5`aLkMBC_bD{NJ)>uwUnSTm(GQ1Bw0&l_$}gX2?!&krg>=+
z?UusF?v$!?#3`WB{8doQkfiE;Wl6RuvMehKjgzZXm8}tURzTSvg()8~9<KL0|I+xl
z#@mc%>Y7<sgy__AjVVwd-$a$!#7Qu*yuE%D8+)sgphsGvZUS}~q*wJOm%?24i62nK
z8A-J#p6G41UL)L~*{<H{kuV6fnBU0D@Ew;vT!>o~*SxX1+rd@zLkLbPotmcM0wg9e
z&G%9c{umY>j8U0&3<ChiyslHBx4DuBJ#Uf6v{CfG|8;&HMD?S_Mu+<<8x;X5ffa#D
zIKP{5t!McfXUC@~SZ=q8?_q8PgT!!<4yfl{WW`@&Gy#<i20}glHoBSqW)B6Vh>(Kg
zp=>;vuPm7s(80AH@%xaGk+HFeZ{zXD8+)z~)LEd+8~yLA4Sf&)@RIl_=(c|PwA(`G
z^pKpe<QB_^`BbH;lUmD8Do(jmph0NE?|v`1MDEis<T|2P+HR{VONv!7yjcFGSaZ+A
zd16uCS?Lv`SRz}@H=D5@`Gqf;G12A%dOEab>^qnW9T&`TzL6gifJ=h@^2>bcsAN<-
zCVHn_<f!Qx^3}Iy)}(yl`5osmE)T5AGZYm|5SbKpGoB>5?iJE7ne?0-Hi?6ofJuKL
z&}=_Eku+>X$Iv-Qf=Z3D!48il<kuT2#8`H)lnYQ;N=uxd>|lzUZn}V`jOnd;>Y2IQ
z>d%hWpt!z4FN3560clG*KLI0pD^NFpKu#inIh7u0BROU=HM|!hP^UJ0{SM^gzLJ|*
zT^+2Vu3mxbp{jq(lxir$b$+;_j*3mx9&$4uNI5K%HYZxcNSQkxF`GMa5cd}9f**6=
zjq;VmlnqYM#BrX=F|k$`>kQq?OPw3XwTC2P*bNnx#-AJ#uyipE1nyv)Y4;;P-&iD^
zqmjFHsty;G(I68g53#<s^TE4u#!}&&UuRiD?u0*BMb&tL4$EQYTark*ml>4-n<GT7
zd`_7-X2j2K2)H5fj<|_#v!s>L1yj3Ty*A<dBAjq3@Rt$fGp<SWJER2UTlj^`O^#Xd
zuH}STcX<z<gMI%Ik%TFvnnC(*cO)%14#Oy6_BwfwF8S59L~4Dlw2QeoeDYEnu`KdB
zE*Vg;y42+t%hVe$W4#)h=2AZwy9p$5SEosdjPRy^wA!ivT6SbKA`I|tGQJNpF=Tc!
zG?LW1Ppr1YmN8@idc)pKKv53sx-gc>fXa@pBtgt#ic`fY7S%g;^#=V+GXZu@MNQ2?
zS~TXwpILu~$G?&&Y?Hg%JaAcFS?=k}1}S2*W}xIoCm1+7;}O_=p=hKs{Yj>7_O7qk
zqWzYRMg~<$@b=dmdxT;47$GsUO~FW4SaGwzFAdNUptwgy5h-&9tBg|5_cpk;6~+JP
zir8!*MJi3;!J{b{qPYI1oN8H}Kei$X3%(`bXYI~SeixS{YlEw2V|EwfG^(X7Z$9%2
zR2pD;%dcVnj-cI8YJb8d<rl*u&8e8r(e9Vb_2GOyb6ksV;_ySOAt>yH_t|E%{E*zI
zIZ4U5WgY1_80vcMtbg>#$>EMs-I+@ev!XbbI9na=UjW$TZSg=aA5U5K`_E&u0fXo^
z7J;#Kg#3-%F_r8AV6qB34zjwSVAY|QwI<KY!J*ugZ|L@43ea{)U^czgQUoCRFSwHt
z4{BK&{Ya`hX$FAae!z`?vPkjd%6#-BVPehtU*5wGH)ZB1TFrPiuZ0~*yVA_o5?oUh
zhxjvxEK<LBA-~#|cyf<(ywR7;gtG%oqR2Qa{tK)>4q1I-GMG`2*6EBdIh{V-<3uuT
zyq%L#qv_NfzB#IxE#-j4I5<T9!nri*oIKUhQ5>Jc;~Y#EsDq$~KQPsLE-AR?^l<hy
zRMy&{*yO7@cox*ocThDaJgO1WQyv*>r0*o!)#Ds?7)%mMpaSe(V3FQsqi|%0yB21p
ztAZPx{!1y$q6YeuQ}@KZZ1h5m#6zOpVy<twWOIM$v?yI}S^CEdCL2RxaiMPz53n@2
zkNFW}1MTa)2OXVxkz`+qYT(No=WiOcUrfwhpVGuNw~Q_eq*3!1BO>Ejd-2c>Ku$0P
z%=ulq)UT>=#FcmV(8ifp_Ow?{2uS5#Fu%y>2GiEr()TM^0h7rFJj3)g0EvE-W%N@5
z^mQEnKGyHv@50ms%fmm_J-2Zw>rw%1R@rpTLSlQ({zNGkI>uGyxOI%?m#DpGA)trC
zboGm^@9e61c9K+IJpZ`7n^Cq@&E5Jjx`n5KfQaL^3tnHR1cn)%3uicZ7K*r5OwGC&
z<?Q$rVm8GvWf5GHYTHVpfv7Txw>ig&)yzaMbrn!9K=8n1|GlD>`gWC+q3(g=qirwd
zc8gN%os8Ttj)n195-p-V+$qCvJ~tkGsq>_}^qSrbsYgiLQK2wMo{yC%R}num@tM6J
zACYi~tU5kztgRBU3IgY`{Y?Y;)0;vPP*^g9D0niGDanyD@^NJtr`7nM=LmH5oiXf^
zM-?_v6pY=>!t*++g-h)izuO5lD9vp2XuFU=*j>sQkP+LfiYds#iNe&>wLn(M=tj`2
zKvKR>%hJlpmYB$4oWP{vg`%O!B5@c+m_1-$PaTJuk-b+cZE?etFK_f6pC}=OFZYK>
z@wsaIdae9Fxud285c%hrWz(<2PLOXXiM4R&JJ8d7ZsZ0=a_!vs9f_Wnh4~1j1Zh@f
z9T$SMQfEBz>+cHo%Hh(^)q<RF4UfOm<>yy7gd_kjF!YShBfb^(do+2>A8C*Lz_lsX
zFQx8iDk$X;3a-Tt-3p|aFfYRg%!P>PrSxJYG14;=cB^in0xpNN9)Qa`BJZTHHebWP
zuD4NE{B)riyrlWTEcm8+3F~`EAXpOKlNN0%+TC7pgBno2afR8BQ?plCm{<A48#~-#
zcT=a7BbLLLJNWw5sjT|FqWp2pU)hGsUrsq10lWpIFE1~jQPT3>^Ls&&yH^=8tZ39j
zB~|^Px&$~(L^p;<M5Hy{r)X5F3g^rO{p1M_UyHNf=Z@F$Db{FM)HXqh6z@6OA4-5}
za>r+Z)B9-p723dc2fHNt1{3rrNW|RXYr(j-4Qku2AgA5@%Qq1)*>6!H{cK)|i+TIs
zmn<OE0Uw_k894ye3eX!6K^2<@`0R9x){fVmF47&ZqnyxdPIcu~-z&#WOuAn)-m((n
zc>@G-k0^u<oq1hhedVv-66-(GcH-1InJ(f-^KqhPBO>1_nIin3&p%3<JK@o8f!PvJ
zNV1WzR41chv{jSL-BQtd9z^f+?>xx-9wQCKz^qO5sNie26!?Xw&Htq!uH-O=_{2oi
z{<NPH(1S(*Q|VSJK4W{JW45}7?a8`c@p9J8%VRwcdfJSE4lmnFP>`|#E%GPB?C;+;
zFQE%Zi1M=(EBgSO23pGy+!(C8>o#@IkA`N;FlLV%wf~Fq`1GfR)rnu*%nJ$M7u6u8
z{gYC;lw-FfpES*REL$T2e)?WqVu5}vQ`Yohhq>fhpmSBImT2<r;iTI_de8zreKl3p
zLVlE?WyQU#szkZJN^RX2HT2@uERU<7^2x1N6?>`eVHOGj^RakR{^i3)k9>S;**Q5;
z0I9T}Z49aanwiq(VN^9hvs2fixA(9M(8#^AVrB+ZE(ic|5^>57^tXFej{J{sK$ulq
z9M%0XDhxf-K+a-TpJ*Y~K%mhIJ9T^+i#dN&iW*$b>9>JypggdvI=L0upN507o0`64
z`^QkjYaYB9BrD1CM1<2K7=Dv$E~OA5%KyCLQl-VzW+@s(Ph0P7(>XwWv%9-QQ(~M%
zq+SkYjShJu?h(>1y&p7h5V-52T{l((MqK~(Y9sz*0k`n+mo9sUps|tLujsyaRcI+e
z?lyBa7k-*y%LLSd|7u>c;=X?Wj&Q0!9rj?X1;~WDuB`GZr~)>Nms0<-L`rH6gtYdq
z2AOaIFply8lr!AO-FSLczCuzzVVpb2u@U1nr50^M9+ynlN82CQ-d*ca{8&9L96@nR
z#~>r{`>f=_G*tl~B0pByx*8j*m?QsCmU-J)9u6`1)?N4Qfq~|bwbPRD=){C#N<3<m
z8{cEr>Wy);u}x`6)hmi*d+#{4HdO6mhy8tbv*)!O!bwF=PouNcTtHn^R7pI1!UoT&
z$dflCA3NPj`bG-|$5DU8VQ~6i!3u=a|Hi;)wUp%RImK-QDI`}3Npte7d>pAGR4WHl
z0EBr`aSX^N#-RPp^r#Qd>CQZF0r)-Jw43nZgRVnC9YCHipG3K*o;n8KR4JLRi(Zg4
zw3zHo9q9+Ds7s2!vHmtG%s0Z}XKXfY`CHf0C|kHf^P$|8uOu)^a@zII0Y$IMPYuSM
z4#i0x6172Ox-}0eDc?8xlYrIwYCaC7aT_XePec~aECg}z33SU^+!ry>q9y;h*(_(c
zJ*B#B2$X95aeq;186qGk=+GX^?(^)Cr`Igl3yQUZZXE~_DhrG;3P5r|oQtF5L&=*X
zab#I3gMEE3wY0Rf_4RE5-H*1e?y@nt<G1hM)8Gisulf09D5v_#n-b^;26f&Z2d^u0
z^Ygnx!@|<?e!xk0!t1to_^jc<T^fsDmnFPYUswi{sFh6DL|gd%L@88+Daf_Db+xgk
zI@u}GHcOpJ`@Z-lRr+vxYSPfrQaFN_(iHrVl(i;|wrhJ0oQWF#ATn-HMIyqL*FeZB
zo7v`dGe{wR{XVf<{4a`RSTE?wE`!g3V&+(Btnx?6n#wnJtjGK;qwFHjE;7U4<`5u|
zb^f!{E8{dpcbB_tSKFZGb!KfX@FVFSVf2u9Qa$c1TO5X8!pF5DO;oz|v$y^$gEw%G
z=}}8Mb`XpBjhc^fv9b0?yDREBVnAhip-aL|gx2?f;d2F0u>T|!^?Gx)J}axS@W&hx
z$|}Prwbf1IitIWt@k3m@`S9mrR}!K%=*K!S7zK=yF`oi%mQJ6pyH{+~9gCot&NgpI
z0L3_F*ubfL3}Gc<s=iAivNSvzBmW$&(~BvdCVdino%rgKXs^=Q)c&u?JIB<gM~7@n
znv}ep$yKE$%B2A}*ip4kf5xf5{?-l}(S%*ee*5}eB6(K7Xl_IWTV;cB_tZTambXG)
zxA#mlztmExz1;R$l1f~*lT088X-(JkP@8(}wN7meK+xrjns9Znl+>gL%O3kxn|>UQ
z&C1d3-p6~EoF*>b+Cvk^6W5L{PLq&s<@IE5Elf+dJBK0rTD)J_I{E3CPFoJ?0`HOi
zE@Q0;A<Np4{dh;zG1cJH`CgG9hH9-BnC~LDJGe04z898u@*=xx_rIH*cJR!&oTdAh
z7F8|M>Lj{P`-pn~Fer6hd3HS3>-*~bsOWqZzglX{Z;}C$lW6SO4u~!IBzF7c(_XgG
zHy<1aQmDT+Kkqa-8#voetk>1o*MA7=2buDv3AW~;iZZ56>ltXsB`nCvt?CnF(Sb24
z&|@?u(#d!ZdQSJX8~bQ*&28{Gy0{_6yU8+$q-15Ek7G=0P|yKe4ZM>vL<^&1q5tzc
z*(W;6ddPZko0gSPQ4>GA_yKtBhXO?c8M@|6*$=kTddj(UeB9f8lkYBy1i1QJ&HzBg
zW`I+cWst{^MZ*}d<H3%kInR}r#_wb!ECuvLA2g1q2?%uFnNk5p`4u}Ye@25S-k?7x
zd0@9oZ+ZEd=UP&ZAR`heNW8#-%aWV19)Lg(jngSGz-HcIPj-4y)oyDO$8ZLkO!W5l
zwml%(5wYx`q*k}r=pTfz$suMNg5ZJf-8lUYFbH%z5b6)4jv*7gK}<8#IDY5>C+~?|
zGi=TQI`pWc{f&(y-Cf7~wzQb)F+J=WM=y0?PMzcKud95VV~CBM@k9ebo_jpbs_MOO
z68tSK3~UuEaxE8iAA45R9;+o7iLn3j6@1XH_rnnIT#7p0_H|#u)>tCDG#yRuA7%0n
zJMu*gk`0^?rF0WhQgL`*)a^~yy?R2Lgql(O$tD(9OAiYfcI>lILELL&ki@@lr}h)R
zp05Q4@Y1ZzreRdP#rK?efp-#eM(<_6nUpJk!m;KH9ly(W-xAf%%32gyC*f`wX>{^9
z^3=ySQ|(;x)>&b-y6HyXC<7VZJ|H!LX3i2+Vu8_xu7iWaLD?&Urj{+KJCOx>A<7a^
zbTMm`<N&Tx^#U5WhOnRHtcpK2-<j$7g9iX%1ieckd3BQ5X3F$QOWo1x_f6CO&MyE9
zv`Sb+Z5U6Oo*$mvJl+HOpq2xsYl@p3)6(n>;sgtrMF-y?1bH}RJG<N8BqYW;cvO*h
z_I8#u*3fgc^_KjmE5$@Ns9?jEvJy{^soh6e!*=ZLe9^UhYjj=rSG()DZHvW{_C#*?
zgJ&Gr`oDPTKYg)n{1|q(*1)VHw<BNQ3{b1WC;!b@Kh64pE~68WlCivIs!l>R(VuIo
zy4F)`SW1-{ENAsO;@nJ7_wHMY#jNB5nz3IW482~dlysk0G*;XmstRIdfsAYdov0th
zFFDg;Sq@V*Vn8Gg#6j5b$*>=fFiw7UtV)q(<#r?0#c$D~K}r#$@t@$kb76cfl)`ql
zwrJdZJ>&djiI<Xf1+o!zLzN(@VnY?!-c^*5F0#(P-rF(w)O6-1-HC6qrG<sQy7p(w
zR~)bO^z^zD($XgF0kYZ?O7w<@U9h!>J_X%zsP$>$eBpcvI?7OFWpI^9lal6ptT^I#
z)t-o0m2smcY2~L+&Bj`Am9_6(9h6Ie^t;*dud+Xj;-#$rY4njld>7!8*cN|xbkXw>
zR1zTQEb9;KjBU4&`mIhEZ<+U!ch@K(O;7|?n4D}LphJZM2J(bXL)?MN#D#a%B``wN
zEs>iq)2>bl!zFPE@#)hUW7Msqn+>0U%$NI%z*5n(anCa=M45hng$M*Px?2ZPxZab^
z=dHiJ!p+CRxL)-q!2s=Ef1CyqeKIPH{m|&O2*^N*Gp2}79~pVeKm?E8pZ%(-yjfIs
zJ?u}zwS``>z<b2$t<yEF{L_AL;ktZX(|K_ODaGxWHYN@B9<SLTYP0kkm;xqDE=HQc
zrKsHXOmL>PHxJY^`=HBtm3jkli$3MGLBRY<X2b^uCtkK~576LL9h$gKxuEnKkS%)C
zC)Wcb>g-_zr@nwGN`<-y1_XJK0pM8b=;Fo`L)DJ962TS@<eN=NTVD5{Pzg^+sE@pT
z_1zaEDFr<FmG|2BMEFtm-jRXXQ)Z_8HZ~z+SX;#8&I+|0d`f;ZnRi$?+4^t$3c}f^
z1K`kTZSBh#Dd`<m3A-ns)8=ZT!E&)c>>ff_zi=<5El7S)v>F3cFAhJCe^uD4=Eidt
zJ0r-z(i6osd&34jpq16{MUEv06O6j99QLS>{N`w2SX_>4#@~E6bEWdU7m#DD*W@&T
zre&3TrDf4hE`X*NS(~Kn)l9B53bcAnGklM1cGR?=Li8)_lfEB^-w{LuP77VZPP&^c
ztq5AQk#TbTGC#&*)QcYi(zKM$9B)Yj-KQIOaU&v-i8}xY)t=YfPJ7Q!G`vo>TFr@!
zfSE>Vc9iruAb69hjCwYDQ*43Eo%re>fEPGAa*n(UW`KS~!1hc^%z`9t$bvFEo2J7@
z01R^E(kU$a@PX0`m<~*yhcDqIZ(m)k_Du~SIk*9t$J>vTYc<%RC~@3SZoPKjSYq*`
zxgqViAE2TcJJ^~}E2fG7nzD2f(EOB)I_`n3JLVI2G9G+TfXTO*A8gL@qh?#*@BG!@
zF=<4yu5NnF@4VFwNi_X2QQ<x1UzW!w5f}UI9|<4t<Wu{f&|`LEexFg_vx%F>n4b*5
zOIY7>KXa~!P^vv53RMQAIO>oiN2N%RRb}tn1j|yT0Z=C>pEooS=20+ach60PUv*B?
zsbc0#3!PF{(U=b%Sz(40u^xO<uL<UXoZK)GCn7~|zN8>6h0XgF%Ad$<G?>$DC?N|&
zg8blj^^F?@=A}+3NDEhf{IjH=Q3F}KtPt^hWFg={hN6H)U;CwSmC86Jl}EAdo`_jM
z?%noef8S#sf$3KW!rHtk*IJF#f<v3S`vG;p2GvZSdfNDBy6@KBfT{~R;oK?~m4ege
z@w}1&CJ&DN44FhMK?=Lpe~RHf{8$pORM<e2<ThLiJ8BL+{F5lr&-UZTx&oVAb9ahp
zFJ{FRNV(PfcjHn7sD2Q-U`OiDe)D__&SWGI2F5@xZmbwU(S`<QswHvi;_V@liAK;Q
zitFPb5OH8JE1&VH|25FohxRPLd^%wCAu4VfC@ux`$a%sQP5^*y{DTA(L@1!Kn!L04
ze&0&wI0-c$nu5}OUC`!H)*oi@a~jucr$dYwdv$wgvSb;0uH>o{$g=I?J=WPX%>v(=
z?=UpIiD0t+h#e+%4kZhOyBb^X?5qN6c&NYr4<{eJ-P?Q8dqdBS#6Bo7fqR&jpH2ay
zJA<6uTG%sw#&D;6>`{rS{j|qY8dWQeh9uEpO%2emFYE^9p9wgzZ()=__?dx>Qy+jI
z_JAN9Q^M|nU8Al*^^(V?uOZ(@V^e?+gJI9axxv?KqqpC<@W}9uB=}`G9M_gLVLhN$
zNyn1NZmf?@aBaQENbt@3tF#V_k>YfTlgl+)jg0~M`$_vxl4Gr~vR{+Zw{F!kNOpL@
zgYB-KQI&-3&!{TR(7xJT?q3(ru%lt5x9k4FE1$2jYf5eM&xm|U$BfVF1KXi5A4eRv
zW|AY<I0{X-&{PF~-<$3y+`Ue2v(<QAWUm|O^&MD9cvw_`-m%BEd)AXLt}l@5L08+j
zCF)h49D#H7y*LQ_Z|c5nm4BB)EqO~E57Y&7m~q$vn&j2jp^l6`U-H}II3-E~6xNEZ
z{SO-ar9{n_Qe7f<xEsI!lZnSF6}G-MTwsTNJKM5Wy;kTF2JmTErjf^=_?{hqmwR!g
zGUq2QoVF#!jFftkfwA-NV}qa@-4OlsyIq}~h~sr+Z^%=>^W$j)*lOAJ@pqrzj{-9;
z6XE)(x2<y$J~Do1Ctn(A_j0BC!^KP6dK;zWUKaaKFuNe0Oqph~wgKw5C1COc3RB+Y
z0S|PGPNSRgs2(pfMQT<QIRSq16e6b_HY}4W=)P{4DC5GM+^Xlb)~d_G%;1GCQK#Q?
zNz$R3!l{O`dS?Jcd$W_`O7NbW;Ay0Wk_Ul8mlA%}jGSUtmR{L|NX8Zl=cRDLp4XT(
zA)8n_zwxf6#(h&S>Awy#YPYoK^cdrQ&3$yL*AZbN`TsHX-tkob|NsB1QW?n#A?svj
zB|;n&$4V$=bA;@@H^sr>*otHoGP3tNob0k!Irbjm*n9pSr`PNK`TqXxqRWMIp3leQ
zK5n<`t*X8kh}rz5Fcas;UZw0`O?6fG3j<yVlaMGH39u1lt|jXy?HXmBt+yhP^PQQ!
zWXzvz^qlm(W`8~WSf6HKPgT0$J4D+}qGYJ?@u#TluBONLH=EOq`x(q<Kl~1xnQKF=
z+_bocQx(zRoVh&A0iA~pU19Q>VR~z=LqNy$+sMZwI^>|<aiaC1ZFxvX`b<$LzIQl?
zrpJ8_f1Uci`yt(MdgJO>*cbmFalY#85O(>$@>v+?_XG+O?s^RvBz$7k9%JI4beuxs
z?%I)Kb8s*2=W!$}M~WC^+v`u}9lT+pp)<ck+@PH#=02~nb6IPEi#FDhXB;+X5SN^c
zMrmKsPnwQ+w@d*)HET@eJSO)Mu^k<n)sFrg{n$@*+#&GnuwB|s)IH62Uk5MQi@zJZ
z$@a#<DCz3vY7u5qQiYy}k7RRvyySjwfS31U?axs)j-+8X%dc(`_Wz@nTN&JRcsLg|
z5tl;vYOK=M+A&`U#&#T^<j{6ike}XQB;?79tM;@^(Z;9uSK58{)R2&I*p7^q{n<wh
zBEzH*atxy?{<zV2;H%SB@yL0xh58+#k>ce08CphhS=j7onh$=hB5owe>*P7Q<7sVg
z=tgZR=jwJ?{AO%5(RP1lsq#Q)%=|G7TVtwOic{<^A18oi{zgZW#}IEj@$qo>rs~C-
zVZ4m$aFQ(Qlf9o{nQ`q|HN^o>IvBdl=0!#k;|5o+=}Z-Gd771xbUk(9<M-m$M{TlP
zg)2gD%V`fg<Y<?~c?|P12CcGflhKovv#dX7vi{O&a{eU8V%Vjh&@jZwmXW_#FW<WI
zH%kF5v+{qP!)B1ejT5laU4wkzb&-9nTkH@6W>U_;au-ZuLJQZA|M|wZ9sSYec$v4(
z*{-3!ws5>u+4bNa4B{Z$5<wGh;Su6d?q<>k7bm>eSZ}@Q1DdYu<FgWK+w8=maF0$0
zs;KJ(sgnIadVAfOXw6eS%~087(udPms-n+_UaD1yN#9__C`K(Q2|MyK=|@R|`GK7g
zvmnp7G$AYDYY%SL@9e}TK})2fm4B6j>$fOE8|1<tAEMYDTuqq=+@Uzs@J$E>>M~-$
zL@?m^_^gs#BuAmz{)^<^mF;cFfOD^8Lf^|ak3aV#hYBj{TQ|42;E(-O-Qtlj|Ctm8
z-}L^;UOn&Q2mK{>WWW)-|Gf#i6k2vrMiG_VVBtZ?%4Q(N{<AW>Tm=@k5Ht_VJk{^)
z>M2v8$s7?#vma@{*y<8l6}@LlOTnGdW@F{oa+jT#|HpCgBl}FBGTVOt2Z-e@hlv*Z
znH2ZQKZS7~7LZX{UWg3ZI==9&^&NB^SJW~gBP&JJVI+hi7x%ww-7iC*hQ=!?8i5pE
z=w5K^$G(xU%)}4VXiDOUoJAjW_RuHU9`p(n3%txTu%Kpz*?=1eTJoj7_^`)V47Gyj
zgzOTCj(fNt$~mP@w`5!s{L1ILDVoK*TXvz$%ay?JxP>PTgAshw&s;>&a>s5m9oYPB
zi+e(4Jl9g1yN!V7?yz|7O9+#b?Q6AfFq(;)C+kxfjB+4$`hbIYfDS?_Izvc_<nD*P
zFI<-ufKV`zzCcK|kaLk&`EAFgVf((wW&{@p?*H!fzUIiN;z_81utTw{U$(qPN<Y8-
z@qy{n!%hBa6}hxQ8jPsAd6=S4s&RxjI3aPkPHo%e8`_<Tn1(LDgMpizRxFvja?P?9
zMdnpwKQr91@$)x2t>s`(TS$m_cz=|IuR%{%(XW=??GAF35TE=M8e3bA;nuuE9z!U2
zXloQmMSiQJaD(2Y_l~yS^NmFWc|DQepoc~1Dwdi@6AMgq6ZRq-a&<IRTSYpx0X@6|
z{i~&sEdRf+B4?hPo11^#!k!XLCl(tjTFxIVNJyBz%G!|;Zw)E~3(Zm_5}`#|G_2ZN
z@h2@o$4+MzRVuTqLC&E4qm73Z{BNIX1Bbia5#*xw2!`gkxvV6+QWE~^?-OjSgvHbA
zw5vp|@{CBH$#~ya0it0@){@Nt;&hauaC_MzaP&FBpYdKJr{s%wOfK(*?mSDPA@Zpf
zA5d4Lao|q7didGVSN0+etOkf$Ee+8gCDuZziY2hOJ>)SyQ>E=@!nL(zfub8ovmS}`
z&)-A&fhfX3=IW#(Vh<&+uo~hJd~myo$h8_2SSg~a#c5E&XZ|N+Q{y$Eyt>8Y??UL8
zPHL1rLwPk@^jNm$l*Z4s)4uNeOp1>t7|7Xq1{w(Q3<ha6@6+{(l2YK1Mq{?l46sZO
zxT5xpC#hde7e@J<)z{3gRF0@!IXj6nuN>{a8>fd<j370eS{xe5?2=FVh{>yFS!D=D
z3O^iMo0}I$ZLhr}m!vOz5-B!ISe3wqNrSdD1<F9*QwXpLW0tm<8opQC&3TdTFbQPN
zHIgy4ge_fdwijLss&7+jK52CD9!jcx9*Mb0*8GsPJ(qSVmIHpYg>>(x3|?jFIq+@e
zx!~M>`yrcep+X)!b-Uaqch+CF@xGwo)@1sA$0%8kA-m_!n55i)_gkY(3ul_ofHmms
zGph`4*Y&Q2_y2K={re&|gEO)1Bd@oQV+=d>&`PKxYx?)@_$WpuWnK#s==bg2K{Y*$
z-<i$D*@1f-(>(-h9We75SP0Wx)Nt=i@_DE^1hzfur&%_MS&lFkeiBrUU~TMNh?H0_
zUP|+y^i<uX7nxMp^#aSNF_$YpBUootvC#=mg#MJ>+AbFd{ul0?T+?TiWCZ`n)KQ==
zfWd;0*^WauDI*4nyrukkbw%pNBsxxnaF&2cnlN@vfxI9h<%RUh_wjUr+srMr(DLQD
z&+as)N1NOw$2>@T29u3u3b!oet&Osw)LuRFT~n>+Kwp?4#b0VD2?~?BKLy>!>V{=$
z(E9G147C#?6%YvfO3;uD>{E&{zIeq+E_9x34eH@?DEQ>qngP+RC)MDksmTKdTlL1m
z%Ypgs3?@>7?KW7ghx?6{^m%GN6I#HYN`fmh>vqDVtyv?B-);RvglRurY}E}ntg!mP
z=)2orIpueP+n&DK=K7%h2WU)s?QVvms;E+%fx^wYD@3X~b-Izhhe68612tu^;Thf+
zG`$D<o4Qr?LQ^j1?oSW-wr9oX!CcCP)jn5Xc+<n=r4*T5>o-~GtU(#U%o7pl)T4v%
zSIBJmldP$m<~eFNUZpRv%a|j<qcIaSl09(1jjO{|j*W}+$=n={+JdolunRMj3CVQ^
zTKg4ti_s`|t%a3Ly!`LnrkrF5mHU#)&&Fp}>R41%%+qd<*Vv8z1hhk%cA(w0<h;>a
z4lJ{yhVb61peZeFSA$)YH|y~|-nPGemt%Ftj97JO<CTEcePA^n3#u4JdzOvGA(OQ1
z!gTI0$y-i;f7gxL9KY>Y782bbpY#!Ce=CFN9w8K%Q0lyydztL|C`&4fP1<i(aeeO=
zw{0e03s{_z0BzgEZE|PH-*I2c6O#PV@#N2q`7|G=8xhxkCRc-n{i-sU2q~CA3#DPn
zLi^mF^oppN|Bkv|wj2VceC>NgCSeJ&Y0d9jyP>A7D@82t=OklpUttj#rOT^llDZ2o
zCQhJMzI9^&|K#kOn(r96RisF8<DVL2-@Eo_hGoo>_1%6Kz~x%?@a}r5qR}Ppcv?z^
zII13gNr~a}ZLg<gRf9d-m7_666hFHfl=3R-7UQwfQaR-%bP*yo-)&;ivB!uS$DW4_
z=LQkL7av-HeN_-r1uF`eQl=UABquI<Lq@WBD$+*fC1N+eT)1)V#_i(HKwAAJ=vE6=
zPav(mA>y9DZ@V}XS*O0+h^e6eV9ox_3~A3@%(T70aDcuZ<zoExD7@!J;!kGW-?2v<
z)5?<~&iw~4?Z+<ZlH<&qVdQcQM3_5yOeGdLuh?yhk;q4jx3${v+RVa=WgaGI^A1WX
zo6P5M%A;Hpu7^Ch{}R%dt<U2$HFwaJsb)Ea*I6BZIHe<5rv;O+@dVK8_DH(Gq!Bx>
z^W`Jx7t$pipt?*34=cU@mCztn5dt?-#a{O>g3-;ST=F08|7{J=Y*$3xI)2=c_=)o^
zT}>|mEX^QXCPkv#Eb^IzxqiILY35MJw>^tY@+V*l%j15faWFb`{IgtOwqPh}FX@d`
zMWlQ`>}KlFygVVr&#C3o*FU|-$B(lGs95_MS}h>4m_LhIc6e_q8)NYKba2Fjzv5f|
zy$DmNZAZ=cxPtd+Y{Tx+R=JV&87#?C&l>nYZuP@LV8@ktC&dpbh&;Z<K5D0`K)OAt
zP4`1`>nCgzaKhh!{?B>iC5>xlevR`|a2)P3i3&1=m$&#W*?c49D(>q<|0s!+ZFz|j
z3})54RKRmwT9#vLQ9i>=Gb)faWhcGPOc8th>8$ud1WaLYm2S#56uEqG#U~Vhii)y@
zy(MtG_IZqg&@kkCxOG)GSLJFp&4{$7CN^j28YjO82?<$gs(m<*@eCqgo?%m|Vgj0h
z#nYL1M27)rvp&qe;iygWvD5ZX&Z=tFIWLs8Xe4kz)XUM64I^ekc+rjq@2*ooC@1ed
zVZ9eKwd*nbbSPrV8#+s*bb>XBs+s!7??lj_e@}L8y7t=4wSJVBL-H^%Qelsl(l%Cp
zc&5<7*YT|*(>{_5Oo&||gub(#iwDS6GDNYmK>bh!H&elfVVVHn&iaTkf%~^&=`&Pk
zyqS&($?h#)oiy!C5U^i&9#xRoVwv-bt?WNA5`d&#AFkQjetah^K|w15m-^pSH;#3k
zU5&|uH8<On-BTcQ##y?Yq>W7(jE3IWiXbxQg3U)0O@wThJB*d@A<r{0z!Zm>`ssh#
z?k}d6U;&Z0cE||2-_os~?*Jb!CclhesGEj75*1v#-lC$5Cbu=BtbY;C0dXul01LUA
z10uPm3U%`)6(+T->KsPAx`CB_*OQrjntqkJ;dE)8(}Kca2&wI6p71Re0=V#Pp?&&M
zumIGTuGE07tVo4d-JhKyQlT-hkUdN;{Km{AyS5XgaNFDOh{3Kcv2<24V$J9VU6OOp
zqii|M-4)g$7U;F+g{x0^@A9cJhDck7@`_a~0a~8#h>lH9K?y1=OM)yBTvNZ!=Mo!C
zk>a4KN~+({_+)C%db^b-Cf$?usvH~58XEaNF~yv$A;rp@47(zOJ=#96zo3yYhN-`z
z__Lqb>W0gN)HzzkOzfHElAad+=6EAoTkpiivB%^*`=Vi_MZc^>Vr4D$s;S#tIYe~7
zss{jKy=YH+=5UP<DFW0s4-&1Zp(q_hnz*Y~679^$Foiui`f1a!b?9kUd!6R&aYBfO
z-)0~)Hqkuw59A6gaFuxfBP?h7M4BE+1}&DA)T43=XsJuxWm?cz>rNEnTybTJzJ5Tq
zE6BQG;mkYxVOW#P9CZ0TNhBEp&8)e9+?$$%PS_qj8u5Iw^_Iz(mUJCM{=@Hdj=9bn
zvngvBu53QvuVGS`{ok_t@}bNmP!OL$<Y3#zu~o$mgSIwL-Uwuh((qQ+W%(@81QMAl
ze7pxJz1DfGY$+n*gU15g<p2&xI3s|t&>dRjSmu;I3Y7$+*Y!V@n=f6ToWA^Uen$Y}
zc%}KFyfC>;^$QOD>rAwboGhLLkx7b8E<tJOB$SgO95H_n82_|ly7BkhE{441_Z~cW
zV9dXw(CqDAa^wU_zvKIsr7;dMQyh?qnU7UYc8FeX(8yF^Nw<yTPze){*Qa%IKE@9>
zCR(aAU;%||%^oCopDbIa4!lXr*-TYu%w=9^)xD7}HUIPDQR@x#1~x4;=vtvs#@-`x
zda@am+l&DXZ(x$Ilx$a$1*=jHr|HfsLFccM5Or^9d&WPVg~9bPZT{+SFdj?-iG2H@
zZr$fTnHkixO<SrQ?cB)L*7eGwicKd1b#`VkZ7fyH_71Ov=v1n&X!kxHId@>G-#D9Y
z%6*PsPi0dl;ILXdr<jTRUw_zr)PGaeb+7XJq(GH<!?((k#E9<8h?dM$^T|~U_0*A;
zHF*Y1K@XFmhEWwpmy&LSTh4Bc9TGZu4KoJyX{@+5e8*@rYsM?oSxofBp#k26J+V<a
z#Vn`@!Ti}O{O}{qT7ikO88}s3i7>xR+QJ=|C_V`=>8ClR9yF;UJci?-K6B0JibXm`
zpF<8fb30E_fd@tCDqmrOrx?$jPxKo(z;RO}mvZV#V-oP4YQqb;Dz&I_$P^@uD49Ep
zobUhe{~jO6;e$E(7`Zz%tcPEk+$ij7V`ko!JM_zV`}NRE_`dp-avx%yAZLVsd{DrK
zJ*di<VoBCu@H&mnwJ19`2pdNpmmE#W`<!ZYdT-d!eVBASdZzw6kEqi4kF9cclI6*{
z0P7p6ka>9&1C)RmO<kS1&=xIcZdbmUX+-e}yV=NKKr?NR-je6MPf-}L`@a3rd|-6b
z9?40&$2)d#g#kYz9-dJs1zl)&z3$5HZ@9syS6Q7@g*jaiaJ1JAbQn~^lC%)aj<-`v
zH<8~9@|ty=r`=cToc+g@QwnO!aq-#lX3-48v;Bsdtk`b%KNqh(qJd|*F3GU%ia_dW
zVI82bP`b!5%b<f|Sh~nybo=tNAKb24s-20cF3at6O#d{HPVikOOI;=nF54-_{PV?R
zc}L68_g8oQYh5XcNd~eajDvsQhCg^iC(NU}qqvi5U(dI~webV<qq0p(rX(0m@@L63
zQ42N0b^d{{)wSQlrI7Te7s#b&hJvGY!$Nw1?ia`Rh;PtIh7~tUq}Y#+E)F<_c6Rnw
z(WSi^5l9^~yVxJ<+4kEUqLHxiuu)?}Af#0zZZ};n67A+H#qe`gom=PGx_AYu{II3u
z__VJQn=>TY9ih^wT9gs01K?mUQzSQ4YbG9)VLh3T1l!oa!$>$Ob6N>GgzdB})B~7D
za|+mDBjq-Ym<t^PFcqmVzri^J9><CA6_-;xt$*iR#`MTGfIqu}iu{mt=~BE!n>_)O
z)_dSZ*g%wpD&?;#t#n^8)z5aa9i-Qn?I#-&N>%X7-yW4Mwy(LCE&Ws40yvZDZ!Mon
z#fBmul%vj4tKDu$LFW%f*A$ryB>%5c;t!U)X2;}M@&>~;`_mu4G#Y3)Tzjc^-oNBF
z0krw=d{xqU2|IzHOfO<1jtW%Zq(T6F5laraEP4+=UaUKsZHvDRFdlw2b*yuXxN+xR
zSJcvYbn)RGbne1pSoSVCJGl&Y_k)Tb1sB+`rESf%*D>fey$h1Nl$vQ`l;lK2_rx=~
zeb5o9>mf*SGM1fTV+cnlF|D+cg7#F7&2H4QBbtFTJX<l8u2)8EFRP%1XDQi2^sxW&
zKgM5}DY#>vyD|BfwKtsuw#{PUum?88XOku!KJGBLMJ>G2!ILgmtX6Z$bWR_tYQa#_
zM@MF7lglicOvUlcp`9*iTAO3Es*l>2a2y?{P~M&1>|xJ#yn^>aI0{Xr9={M_wf=ZP
zXp3;z@ogW>K}SWe)JH?#qYlGvcS75pIg{g)e3}$E*x4%-S7(HNTpR4VvJdwFj)dgR
zmRV|6C35=_L}F!dJ4cL4wWRGC`ib|klY1i)Q&lq_N%vumfDCF*Xg^H5HkAY`v(DNm
zX3PaAr<_$3tvU?WQPmXSqj&6EdA1#7yYHVisxx`vYlUKbz$-}clSHZ8cmQy^=PD?x
z%m==cR*3MI^@mca7C(L-n^SIHkh`%Z=G62;^$jM2=;z-4TDFGUk~O>C)ZMo2V~(h@
zX>DatxRLrT>AYUj4V@BS%B35n3b`&N*0#aj^c=lP-8<Wgny3)L;AX5}s)4=^t@fxN
zo%Ak5zS@lS4*l@TRyex)e2F#50<O}JWM5%HJNn+jz58g<$KUpDrx}iYV*Fv42~=dw
z_Mw%DAr^SygVwOe<mB6bS}LT6jT!|ZQGmMhMb^`054+C&FE-1K%IDGM{C(7|iC>4a
zeyd69KsXi8D9Ssi3R46nSgGoLXe=-nTlyz|ux2PF>ZCr8zm;y^6hR^i=jBLq{jJlT
zPEo|0Q?^7xvdkM0VlV9R`0AIyR{NfIli73>ztfVl5Gwnc(M~Wa1I->sQi#4;Px2ob
z+2ZF>B}TlW3cRV=Sy>`!ohnpne<<1|;2wN->Esn+QR0Xhd73B^JG1)7-$|)S=65f-
z-t?|&G1*)BRme-TZK;;tm*CM5z0Z7c7*a>UHhx>wjgSmsodMsq?9(n^+UxZ{-{JS(
z+LS(1(z{J|92;#teoM%&oV4VhcibOE`WyCK+?X#9zeU~-XADp+KboD<x7)O2CJ~$A
z3>teWjjs4XGV@-l?PJ}1<7N5$V+Y&rhHJZmM<?Zkj|r6sr3->=pWJGu3N0}j&*8DO
zys|@gDZ!5@svGD;$4_Rq!sYa&>{Iu57uM4ODn8g(`?a*MTi)3er$}9&n{Vs+Mw}jy
zgzDM8R1aQQXrYbK-H~b1zQxDiRkabjv!*3rQ{nGxY_4;0++rr-f{jGTWm*JKGVvlQ
z{AHf&zA)<b*E7i&q_^>L%TW0dN=Q%np?30<WW*;}hL#iGgKLSTB7WZWl4mbIOzg?$
zPKf7WiQa}A2yZDuVwVe8HaEvEnwii045ES#TDIB*nGR=WVl0L~J*k#|?U=S&>)}m>
zAFbr6O3gD)j;l%Tz3&XXZkSF-#!E`~pe1O-q=28oI8+?n`;dR5ohk_0kfKkfKytPe
zssZ;#4p(h`R^yh2W4v<&<``(+it|Jj{@;iSVUbn+t)B_5Jx}AKcDrE}QVcpl*B0{F
zV(-ZxRS%VZQN|(&zZ(k%P^x`DioVYKx=f7Gy6E;a2ddSQhE?!<f5}<4O+^JQXV&xe
z#)S*#f_jt%oEhCq>W5~K=*f82LxO@o$)Q?0^cwtKd^?8F<8`!}ca!JQIV<1UW2s%)
zVt7gTvAi|&Q8e?}GEFcFm2`sI_Av;wq{5BePx%$Xv~6wM;E`iqUP)l7eD))-<jwhU
zg9$HXF3Dl<ll!)irpOSltE=?-k7W>HA|j_7OKSO2gmKGDe9!d2`J%3^V?W&Uw2E1h
zkwWvl-hZn2VrQP_<j7gicJIJ4KJJ614iTahwGcD}%?dh-kNsfZ9x*y|yghZS5RQpr
zOfhD6+=mgPNQ`!jV`<+5Y@$t74}YaMP5f9h^DFGm)G(F{#*TjN1o<+Qyi7qE&&JPg
z(SSj}o<9)jC{biK7am1qdU^lpq^~<jajLUb4JFZXfBCYy)}tu~#@4Sl<Nn@PO6P}y
z;_M~VW~$gn|6Y_5)PjP<uan3eWlm)@K6|ElH-HTS+1k_;{&JTK(z@+7Ta|P@SS)Jl
z@<5eYfdMl?DErExgYEkyBv!U&k}9|2JVF!hy^KV{B<J?(+C%=JIR0@Jjw)pO-%Ju=
zu{c5c!EF)CyTmu$qy};{bT}Cxltuo&cc-M3CU;0)|Eu;k%+whDRrX*lM9sd$-`6Vp
zus?~E!gAx1p6z<JB>+aZqob3j^|fD*)Lh+<x|+M6VeYoSaN%cM#yGC3mTB>um+Rrz
zo%8{|vM}6wRmWN*HTC}dlE(f(mTpyAES2OZXgr5VC|iHaS1Ha1SH~F1QOO}MQftoB
zH`=IV?iV!5+vZnfOMNS^o8ouAJXruJ^oxHaWPh>WyK_|qyfP}AuL-^+g62rV-EQYx
zv_CvVUOw{9pZ#mCJfgaaS_B!EgISM^{)w9XjgC#=(_8G3V?pkb6T|N!22dO>;1hk}
zPH-QpX&f|yBP@Y2wh*tNp36*CUc+Ul60)EAwL&yKabM~ol&&n#gnh$?b)X-wfR3|L
zLiBcJVcGU_$Nx?22o+4h_#mh|_3})RAt+W?dFLb+t7j73&cgM_J`JCxeW$?7>|C_#
z;3f4<Jt@gn(jHc2XRC2Z6V~>X;Au2F*%C^^9l6Kx@kt8JMhsmNVB7ehss75skbMDE
zU{l5yt6M6Cyl^u50Z)iJ7M(N1Yy6A{<U!DmbPL^`d`hTHhBmZ|^3%8M^)bM;uy0h%
z%aoWZ5Ky5LKFMWq7_rCq4cW?Zu22=4yp#xlP{8F7>CQ4Q+%i^Cp(@7x)wZr8%d1x2
zE`X)oXrZ~qpDN#dHX%R5WkDGOvk$1hLX;-|5vvV(7L6OLs=Mml6IFS=f3(7SLQqE5
zexmjvaBCl`X8Fh{w^Js2Tm+EtJ9ukT{;n#3P#O;dF2P(+qtLgqP|lTNd#=5^&)j%p
zx@7(PtH4rU^;r=wQVXtUS%gF!f*z2pR<e|EiIHr-aUR-17#Y)hH^wpagMwDn|7H?0
zV!zomMvkbkWo#3ww_{kr-o(JF{bpzJoWdLI9E!xo+s~Lb6#wup`vLSzeSJe$By-#v
z0SzMa;^fuF!%^gS=k9V`<=uya+fL$(LG!X7<7sGhy;R@rG1N?Wvh+t?>};vHO-JJl
zI3PiM%enLUO7oAkYc1tr`n9HRB@;*Txo5VHHImi&O+hW*vpe^^7gy=M9Zd>I)e57K
z&-f5oNYR(t4q^1ieDOh7Q?+SSX=wsv(xYjE(PA*{qm{L*5Kc-{;ZYu>`Piz>P_Qn;
zp=X6;DY|LhK;O>2UdO8HYD;>OISh&p2zcQQjnEYeRZOpXoHP7qFuShU+2gL<4ll7R
zQiOnFpt#-i{;trMR{olKN=^i?PHCoGtu_mi<<se+D5eBpz@R?Z#`DL7gx<J{1QP3E
zO$s7%R`NVmu^ECfw5Ri-gV0dORICSUL30b0>*l0!S`S`LSm`j+^zq9XVTm_bIn-57
z|D-ND^;oC?(nG{!+C0Dh*J+$9-y1&l6Ue<*B_EBhFaJn8BM2dDqv?;CTCgaOSI~<5
zzb^|W(q>>_!wDSCCLszmZl=JJlNYg(6en+r{rsU-^VP_iKsw%)Ly<Cit&DE<Y4Y@z
zG;<UoACjfM-(u{-3!Ec@Hc7TBJ;kRS6uEcdiak`h)qSNq#A^*lx%>8KTQZ|I7u#44
ziPxL!R59r~WyM2m{1xP|O?|6vID|KqD$$I3EM@0u3TMyMWGJBu8NWc4f>eHayHsI$
z_HWIRK|`&&`j7BQb!*wm;Sp@OJVV0B8~9sdhICa3jcNk*&$37U=->f{<fXor%wy#J
z@{-@dep)71FgYdJ(%)QMv(^uIxts&&F2~S@+I>kGyo=jEqoP5H>)j7C!@oI=-iIs>
zU1`$Nte4(hJxmlbuMN5Y%&xDVWO4|`7D8AM;8;{&^(F}Wd~{|(sJ1k7@kKU7Tp$DV
zHN8N$Fb{ntmT=4mlxg^SQ3BYt^(S##u*(FcfJ8ag>$fkY)dLQs#T7;P9od$ddi<y#
z41hmGe_pgy8TxDCesmMM`Pdt8;!g2p*ivn}@@K1^+5HcNvhJ9DdBygq4Di#9pEeY~
zrx2MW>!Fye11+h3+9Xi96f$;QpW-J-!OQL=q1%d8Q@??-c?xoivF|s7J-VL=bb;fg
zrpie>|Nn#VL@KYXFfnzG#w7|>+Q)-`Jx$whbQTY`y%~Mq+mUa!<ccTnvU=VA1+dY_
zaWW?hBx7s-(1xGqy>a!!=SL+fl?QLT_m39C&D1iB-wx3Tu;o|h^br%2*e;sufD1-s
z3<GWG2R|55dBH>zGpj@Lj(fiG)~!#vNEH>h3fyJ8DXvNa&g0mm(szEU35$N(LfA;F
zdXYW+RQLUi9P2)ZQ&aQ~OW4{=@H%RluP_lF4BNch4?Zz*|AfDeS$6NtcC&`up&X23
zqhFJB?t5~*rane{UP1eN=QTlM`<Qkn?=H_9q<6%MgG!1hiU_%%uo7-9h4B;?<CWb(
zP0c(jU{G5H+OOYu>jv0^o-e{^5ImD)C`IJ;^1G=>g52EP{UzxOFk@p~DJG*jiaC&@
zHFyK0Nkvrm$cIK}3j$t0Im>O9*g#WBtsO7nM;kJPCwEf-*sW0Iz3&OGY7CF|TM1-|
z`_UkUANHb=2&AlG8Kw_NnQ+G(7JsF2q|KLUXUIo}ky7lEa4SHBOQu3Zimz}j8MTa8
z?+z%ZROys^$|GUhuccZ$1HJCc_irzM`@c(V*O8u{!S<N;t6N9TvsF>y=E!y`;1K=k
zmcb|_+|2(m+H?oQSLHQ9fOjcM#&^_S^ENVVIGZ2g+n-{dSZ*pg+u-y{n_=B;K2Nfl
z54+X*qpNg0IntBW2>MH3Q~%8rJ1w?14YfOU0X#UCNz@t@J_A{GNW}tO?Ki}FamzzZ
zahxnNS8Wr}CfZ^t0@*?2w_2Ml#Y+wQ*YATfQS_~7A7Gy1z@<@%XAy)Fg$B@e%aTdX
zBiLj{XX*pYZ%p#?PRDV!Z=#9l;cVzqEb}BY7np1ksex^5sov%il;(n{Dnv}!tm`)C
z{Ts|u=pZC)giwvpi12B_J3^ThFvm9o4xF>(7g`9aeFBKEZu-e(Pm9jKxRzo(=E3NC
zQ!6n1CBF`=y5akdHI{{q^;+vF)xBqs1$N>&DX(3N;VD9Wf1sX9r-!QzJ=A61nXGo4
z)7O@0TYr1yX7Qk^L^r_oadSSH(Si9YG4DgR*<!CdhaXX^fQjVo|CMVn=Ir#W{_|6>
z)IA28k&JmUbPPy7vk@KZmwm7ntE5vYRcEgM9Pjdih<~Uc6|rz_!0nuBa#o&p&Lyq+
zOZL}=i_FBh%;hu2#{#2nO-X$;z%Xd{HDPJFIg9$vcfG>SdO1Z#{JmW=7zH6epVsDb
z4%j^uSSvT1aj74|4{R<o@ky2I>KVOYcD(-N$~y$+h=1YXp#eiTxnFuvkIB0<NyMq=
zDXw1L$5YBDHN?l_N_+YO9qD%F<j`<J&_Dg~cki5()EIR;o2z1`m^;4SG<s6-a8w-*
zIc)gK-*}z3sclQ!H=Ii;#i#Ce+-s~@<Q6=Cmt25s#RD)-B`CP#$*-pTzd4Om&r<F$
zfY1e`8jE9oR4rJHR@QY9jWi3b{bauyZ;)Q?hA+6(vT6$(&HN2)%vGOOT<i>SoNOSK
z)NGuZ6zv5^cTW;T#unf6^87&YK`J;{@bmn>4&^Xh-n`GrALk_8g{MabZY)j`fa1Yv
z4lKq8O&brHo&ve%Z+_N2ue<*`5q&=%x5+2%TIQyRJs89(Q^JQnfZlw<(uXVsdT)@!
zU(@PgnDt*IyTu{5VVu5YRYR(g^fG3|^H*^@nfKZ5wUY~`2@7c-uQ<N*d)+~0oe>Zg
zb_m4t(odA4DZ5;JlA(n=I^O1D>Mp~YsDKhI7H9SEZv#SE_FKFFpikFBY)|vwnZfaW
z(_ay88>c?2w40Zs!7n0d>O;#YDclSk+9r8bS~_<GobhJBUGjl2Yuq2xntjwey_D$P
zDdsVYi&Kx@s*8QB{K=G>UHSDX)zb1Vo6g<|4Hz*o*o}c*Ypm!-#BQ9q=!k&f+Bsx^
zRE5UR@V6@mJ`GO%dec~t?5*IDQd1P3TeOe2ZUDqz^X3fvKY2RyV%+>a2@{(v#)rbb
z39b5|P#&WS7NsmA6S!BrYaCR8PqOg3q5&S@1(dObkxlH5{BaSPy+gpjg$H1B`}@Ah
z0P4l=N_O_nux*L;p!tIQOe`@mYK@sh9Y+>espBUnN*j}PYh+J_Mv7yVJ`NwYmvZGq
zb^>T__wh?6$!KgZ@(e{DFIMTXWh?=}1~_mI*GK{xdI7O&ebB#dA}M_A$zhZ-?r?@q
z6}BRZj~J{C*}{vVU6Kx!LVv9mYU3+RYKMz0Tg?gsNr{Pb`-_PEDW-|n7ke>#>w6gK
z-$FPHw6yWO;6h%nUTScA$4OtY&f>DV9y<CyO-YCHmi)b9A-GcM>GnD|WX9KJupHv;
zWEA>07D=QGgiY}lWlk93zvy&lE^h7;Jj~i}FVAoUY=4b`M7cl`=ot31rO$qX87TAw
zxJ6bY&j1VAAzj_@U!Qh*lsbIS0$BO~Vv7V{&^Utn%SLUK0#FxDLlY|{G5n`{f76ec
zo>{uqcOQSl7AAkNllJh6qcT44yt|6K@O241t7`X(KO0sM!Cv?{Wk{B>wU(AT=d%>e
z!4(M=wJnuO7HDY3#szi&#QKXIvl}f1QE!IA)V-3fCf&T8+$z(gZ@9uot!~|!NO$!^
zADyK{e3;<!9YXU1FeKHzI6uPybWAxATTJ1#{Rd&!2k>NZ;MXhMdA_3juOMRg#c%Up
z*payhfEHm{$2-~a2H=QA2<!l2^<L>W@d-No4OCA=Q?G1IZ__afSrz5@d4BMc0e9gI
z{s3vRqN<B+2iWu3i*>u99SjuRc$2Agq%zA)@5OoHWp!`xjiiRRg(*KRs4QHNeK_$1
zCiA$~)GLPXFsox_b?d!V@p16A6REN`CZDnv#)Rmh|DO1SPoL;{1O(hM{pX?#y%_*E
zznSa%Zx$O;ijX#uq=Ba@PM#HlkD4fLun8ekbq4QCrFlfL8||~MQnJc}0!}}?2e#qz
z0ej+CR}o)>7=sI|THM~a+0x988kxWS#ctn$>MO|n#KnolL507UNB!AGwg@&aEn5d}
zSGcg`I!?k3;M)lwbUi(F;+|7|kw7ZG_Z<s|oV@X_`1Na8&%`89C(e}S*Qm4d(+V|p
zT2SJE&&uF`Z)9d67=q>Vmd?q;Xe^saswVn#mMCNgl8>(X+n=A^^;Xn7E)8nux9K){
z#5NHb8QZ{f!#-iK-AsH{6ulsbHu9P9>M;K*nz*q8Kt}KX!u<PDMil7u%0{WDxy9FM
z%*QS@SIVK|l0TPEp8sK<Qds-4F>%pj@+W59Xz04&pIV(UK0cxLFk<mu5~4Y7i~RKT
zfX@<zm|7GP#@O(*pd>i>8YkpP3msdkyn+il=oqh|j1`~yn_Rj4^uIHYWdWRdoym8q
z9@o{;tc+R1p~j9E^DpS!MnB#F=ZzW3Tz#B^Id<#r12-iBu#9T`w0RiRzCF}W=hpP&
z1}E`@eZQ%~!uu^>2HSy4N~eAy{#Ttifn;nXL#kbNL@41iWZ}$iX`$%iKRd=M>Kcc6
ze?vv<qgQI>dGc+F531geTtStseH4^fyWVS4esMH^?PMeB?l`Ch?)eV;uD!Fz`Acop
z*B{tsQQw-^@#DlVk26b4ALM<T^~&jQP%2ubfebJTp=@7jMo>l4Ge97*RI&8rvGjn-
zFxghfUzL<4*F(0%YK{4u6x#pczxUz^mh4ZLBb{AI^3~&YD~0KZ2k+%hZ+KfNfxx5s
z4!8L-OY01c-}2#@s-@xDtBa1-PuCC>bZ#xv20JUN@^#DJOSV)C9`0p5IU7cS<d+}t
z)mQgC{YL+(UBF@iWMu){J6>)5Xte`(ocM@;9<tz`x#l5XPad;E-?hTf9jb_SfA!MS
z9TQ{zGsso-&B_J*3sqC?H~!LPd4D0MD9lR>>WW%fJPqQQlJF_}FVc8jeQRZrgwgN6
z0Q@>xcvaLa<ZQOJd%x&Rbo9c@Dv;`<F<twGn$}nx!`j8})NA+dF{3{^HQkdy>yul6
z_e`OYFzve0QQf6bm(_4P7D)HK%I=Yhx-i9vh_zSih|KMkYe}V9<3vou>y5|zB7d)d
zbe?~i8_OmR?~eA}7u;rltn*dgkrJEuwUz4*@;y`wemxYfJ&6X0GTPtwEY?3Je$W&Z
zM*TB$S{pYb7^FoVpmnJ2Ufz>aL~BisdVBTVw^6J~sN-o|=Dj*2&B)GXR9K2-qt}au
zG-*OwLV1A#F01o3-VyDY#W(J>hTa)l20<aCVFjcArvG#fi3rygyXzm&YWyCHY@$Em
z%59n)c}4##-sYZbJLc!NQNBvS>?Wt3Z4)onR$^0HU=H$T^~}rXs<Iu?a2sATuJalw
zoNZb!{S9NY*B@~<kiJ;GSLd6B$n1F_04eyJF`G{E--g~~=(p%-u|})g+UEM|3&%qi
znPJn>eAk8Ulh1DwevQqNQiE~<D&ef3rFYm~wy?I9*rWXCOyxr*d(rP8#??XyC4?}b
z3x6ASmRor{dd4t{LNmr9WzBz!a{XpuF%W+=M)Xpm87tSe{S&}AD~dX8t>LyWTil)D
zkJT`GSaxR-ppm{U*HLRGUs<4BR9Pfsy*7Dt<kr=P)OseytTX(H;ehqeev3p<w@fC!
zH-zD{GSJGvxR$E800{W}d{s4R30TH5NO~9P3s`Vrr8Y$U`QuS;Hb-Ww{T}yUASlw9
zNGav@?gigAjB<hy%{EdOu_1gR+3v1uYWnrp@NkIQ1{Hb0`wfTVtg1$L35-U#ql${k
zp+nPs(Np`hi+XYiqnlfav-AOe-wF$FrVW_>_ksy(bNRn{@lNlf9NX&>v_#^;W0}WR
zEbl85`3@VJdYIA{2yXN|a(S*xVq(ZSFrE8-Y6e<|ViXbU#!ZwzN?_nCqhP*OSD#ut
zC-yo;$FPm)%Ma8;M6Sei>rjq~=Nj^cgs)97sey)#4tor$J0J|C#ANm@{7T(6(W!<b
zqtQ!IJCDAQ-QQm#%1*#ZN%$z%rbr78N-6hG{tW_NZeYnQ#?A$0THrqqU?3~-WMzdI
zQByBy>S`LL+3;0iy0}ZNIjKiTU%FA#*A7rp#{__>m~W!GwZCUYOW~KE7uz4$&2}$r
z!D#g)e6mW6&x?jof!Xiy3%(?B!$(};?aY{qvkhCoe6PU6<_jB+t?+(0Q!}&RxP2?~
zUV!4_$J^%CfE&hTDhep0v+-T#$;5`AIcPfd>ktq8?wa+c+Je3{jS&z0bbk)Z$;)$2
z%L5(mU?jk{Nld@Jvi9R{RQYvgpFYq~Rd#MzYyAuK>2J@;w=7Runy>C&iMrEd?0F!#
z(y}_OA*VUG`?({}@WUg=<>`dM<Q$5Ep3FJymq2y*M*y#1+?eaOz3fsILZyZx)iZc=
z7QA8O4o<p!0h8uQO^Mb|;W=}1lL(ZAi^Dgn_vc~~W3j|5<NDZmLv!<p_LsoyfUEeu
z;+nY{qG$+9@-Ce)?}{)9&K~Le)vDQkO%pt(z<qv;Mx!}ZF=Zy`R{2T?abA9YaZw!4
z+B;7<x3l-ipw{5RQUe&9d4GL$Q+{uLSzUc}Im7C>-i<9%`@%~b?`tFjg0L_1^{RT#
zfhlFw-fxG&oY%<^=nCEN?n7!VeIw3fhX4?8fGGtm*dOtHdNit&eBV*Q8$;StTDYJM
zr_p*)3XT9I{1|(wi}_*qF>wCdUYzz`*Z`V)H4a;H*XL>8CWAZ34j9Fpc4DyjV3gXa
zmQ-RU4G+>8?xFq~7+lD#%VBmDsPwHsJsd@P`~G*|LOf$}6p+@e@lJLzo$UX7UhQ05
z_6{TqAvd17lFU#1)J97?`(%BkR=AaUAgYDsHhHi%t@>?sMiw$lU`s~7!FuZs1-r`q
z0_kDQ5+d)p-{}TH?Q^dl$?31RB<x_HY=0KGs?Ct<>bwadQ>qArM`pT0bizwBK2WXt
z*q@L8-kv#g7>xuGX^!W)mr54P2^OcnsF(~~OkA#_rRh2>9SW*IX}IN!w24c{cm<ur
z0NiVOgez7o`{?v`d$VhsZc^Ngm!qF^(v^)9bfB|n>X8qnq`y18tGKyw)>m2ugdDyV
zLaq~%C`z3^(}u0&(5kmk<u>VPm<DNRX^dut6Eke8mQ0B8LHO5h3UX6Wa5Jrzt$?6Y
z5beiJ89QpcOFcU#>8xyH5?>hFn)<Hy;G0HXvc+y$+F2K$9iGOgDn{m~u;q)l!DA6b
zR5k$BKGDN){n8(x*D6uwugM&&e@z}S=`lyj$pUaTA!G+0%L3@`b9}5z_a$`qD1GH7
z7%Mr?_LKQ-UOB<92TkPI7WX<n@T6eD7x(dI&_N(xZ|GYIG~Z$;0N|D^*6K66vkNe}
zSgDgW6M+4}cw_#(0bxZ5W?}t{!{`|q`iAElD9!QRS}&7^l=}}R`1(R<Ee<kE9472x
zwJL^sD{c4d$|rjgqyG?~JV^e8(x<X1kSdo^DSRE{&Jar0o+h<Vnv*Bz=Yhx|29571
z*s$c&U6g(F1(CfuLTO|Hv`5a+k7V#$X#as_m%8Z>&&FbyDNNh^^li)|qcZPGE;-nB
zdS#CYHV>?2zKGclbj>=|PNzO{kZPMsUfQOs7h;D0OgIRHC@ZWmbds~{Qdy_d0kMPi
zAjHuyj$~E;sDGd`yGS=rtD4!9%>MS2zXI7<MURom<PlVn0lIiH(cMYo+5^@CZK-jM
zUUJ(?u1hD-Q)uhQjpU^zGwZg4D@$=&>2q~;;pZ|iAKdDLRzF(&-BT6p{Q{OzxGA$u
zQa-+_siC2(;`()gMq@NH>M6)Eh8SOgsA&bGfd8)rV~0W#fZ*}{(>l|-3DmdjPaD}M
zaGsLhIIje)z-1kBGt{OD9;;|O|0AYg-8`_mPxGCT`*(MN8SLizv_wtWmUUb`#W9N9
z+M}~C#5~ziKIu4mN&t=hD2r&lE8ut68xp?t`AJ~1=p>-3OtBUT0T<lYgyic}JVj_q
zskK7x%~SFDXjyTC!yA8J&`|i*6#;2DgNTj8y-h&hvt1vr*#~~^eb1zml{-m0D|!3#
z@2LUdJ#5Snv8g}N3Ze_PynNkYC58=O2l!|tqQbbAIIVg}<`;w|9N*MR)@1fcspY!C
zZ<szL?Ut{uJevA2_HeKamy^}!Atm|c7dgi@eu46)uxlsc^`k^jv%^)ZbPVH1D^GP3
z6hPeG!uww!UPi;MH_6jYn2CeG1^$Uq8ZtpsC{Q&3gsgsBb+v{4XB(>}7QQu9mo1!I
zyxF@|=|0Rr-!^o9D{1QZ;hFhmJkeSi_l(w$Z$Q;>Nfxf^+H`5J(L%!YcImet4V-CV
zicE4JNcU~cB0AF~zv|zvar-SgzG0N1ieR^)u_h0I+etFI%KY%~G>sWc2rVD({!!U{
z*>>H+u=QKQh5~`gF@@2>ciNY@ZEl@-1I>+n%VPk7=9g|0*LR<s!x~O?m7RupDf1MT
zb!MAA98S?%6x&%So4?n|m*>9M`Y~g}F28uyOnxzwD)zGL%}9Z?q&S7Ibvs9C(KHgo
zRuk1!lnz_L#5}oH#ZhtJ#=T40Pz_(CP{RpzJ6d)H;oj$|_eGh5Ge<H|#N!|TQkq<}
zw4tznRzP-_0OS#CZs~wkUS57Vx}!m@pqz;L{V1c*T^Tj4P@#fQ#n9N7qpv}7=OWZ*
z^C@w{;4mp`v|vl~T0EVc$Y%Y6u}^wS>k$Yn)#jPYRx9lo80zB)*qYq;UL7*EQeB%n
z(O|oYF<A2rq8(5XotTG)E_Nr;O7U^vxvOK+tDme3OHll^KSC8x;rp-1V?HXN-3S)v
zU55>pV3~j8$Rysa3@8h@HW_FgX#I7%c#&3<_yHrhU30BYnOV(Y3<wB|dpNRd`O>zd
z{EyoKR>N(#@0NrOKud4cCEX^OGY{`}Ah|%&sG;?+Yo6p%ReZsmR5K@<Ho4`a$MS%p
z_f-8!fvrGJMR=?@XQTr~Pt#f4292=yVsxq&S_Ml+2tafrj71CLC3)XK2IJG!i2z@D
z$COTHr_NPeD0>k989*S`1|88^E2n6GP=B@BLfm1}m{zV76jR%!t+z;Uk7mcWUV8L}
zsVnK?jhMy+jftUnm6{4w3l>tDKmn?lcfyEwbuLfi0Riq$2VahbL#o_+rMh<q=7oHK
zA3k7EgUhwAo@!oPoo}TlpqnH~qwN-ps(Dv^S)ho^$z--YN9g#TZhgSnk3J`W@ADLx
z5Lu8*<<+UJ8Ss2m^W61|*A5&r^QY2Fuch^HHJpBlnwscQNO7W(5Qf*;^rbXRa*_S4
z)4QQJjo6n)H{9MJ!vOl|LBnbHxU;6_M$gRn^~s(n9|ch0R|x4=`X~4?CH(0?TvA3Q
zza8%HeQnOLC+%;XMMd%#u~;hvokwclQh_}kBH@ll&R@+mW6k~6Vf8I9KZ^sx;oDF@
zz-0K`MpQJY+BsDzg=@ei9!UWGE^OmjGa<|uYhRt;V4?cTn(~tUC-@t(E}oJDkym;;
zu4BiV$R5N-IoNKE3ixf2)B#+}gu90M;|8g)Xxho6b<|R8^TCa&P@j<FogbWBlg_}L
z@V@ntl9G~LNouSA{_fU{!Xu`(;h2q;*XJcNyGO^4epsQ_5DpSzEuWB+{lTnC#Jvpo
z<j#lkEkwPA>7aS0eRl>g;lk;D6~@)Kz4^q0O^}n4Von?53p}IAgh8A5Y_{4ykAhH0
zrb*9{WBTM|bA*V(>Z-*~%fThjO?tjl{mnaV?4ushqG$1OaVBcgXXQ!CXD0_$_z<W^
zu@?Sb7VT5#`=U#~cJUHJvbyM)UFwqv*WXJ5G=Imw%ha2f&XzNxZ1&eiC>q}!y8wQ1
zDYE;M;6&E5G*i*Yqw&Z)O`yS4fEmYpiZ&D|<a*Em@62OJ;fl`rLEgFfnWcPqDL00>
z554V`bY_~E@{oT}^|lgMl_ItXQ=e#VD4Y`LPIQ?ZwKmiVX!u(!52imfL8NB~kz`>h
z)sCk>6r~R8KWsD=G`1y=F3S0=1YiR~dTXd2q=*G_2_9$6X5BZ5sdb1f619|m8g{D4
zYDa2dFn^p`lYew%R|I)2nBqe|tGFR|4H|k_f6SIUP+^TH<$C*M?J%WxF_@W+Wpl?o
zAWtYHCFHfuwTIBC<y(SBd+RB8zVnVrhdH}y@|VJtUt0Yu)Hv)Vfv@5lsbIRGZ&3Pl
zHRV9Pywc;vwIcSWOJ0J=gWQXJfzI)hd1-TlH}K<<8b8fS-|D*q90aUw*LvC8+J^H0
zb26f{X^+|t9(i1hRpq=fv3#S>*eX7$DjAh9@SCIGdcPK_eVgW-(B5;m&xN5b3)`JI
zlwK<m(Z4RdqI%I!bF7B1$I~U|Xb);TNPdziP6CKpvX;873P=Li90@4u#GQM#x~=Xa
z#b$y+BZ;5RJD+qJkHvPonwgML<Vre_iS5M^*O_|3c8L>)X~PALY|zneV_nAH#!qtV
zcYG@r5;nrgK~hJ+Mkf9$4)RA;exG1ET%UWgIc8VajqhQWVgi6U7to|S1tc6f=>ZV~
zn9kg=Mj<00Iby<{&DzjI36GLe9TEd|wk@{UsBn@AL9oBU%65C{bT?btRX)+9Et>gc
z)I%^}LwE)0A@7-;>Sg78j%PJ{r)|vNZ#?ERY(Te`0MBXl!J{5eU~4NlJKOND!pAlK
zdRL2|bK9i|#VcOT1XEOZ94HALTp@g4X4U~OIzdF2u<`ZCZYO{iZ5-d|pKYO1bFoz+
z@B{Y3RYQrWkN*abL8X8WV>7p|*!RQ@&;7#TS?s&JE)szDoXkSalgw!HUFr#5eYWb~
z7PdcdG1ngDj>!$D+u>ZRr@C`}rOkc~_;w9O8j2|12ApWJ@;^8b3n|?!g+xV3pI5hf
z^l5=45wwJ=;e9~)wj-2WvmE*z?F`RhPs9Iv5LfVbJmaXgm$}HOF~98Z<OUWMLN=c+
zhZ>IxLS$eU<udc+i=0VHCX`^?s3vDj*l979-wlC?NZ!|RO8|I_i?D}ymPY%}t=Vw?
z6K&tON&Ljc!~W%b2y+xQ=Iy#%W@BDhGUxRJ7~*N2rD`S5b%EPG63gs}8evYhnVII<
z{kThHlq+QyC~miLr0`fQErscixO$tLKHRYiuv=fyE=zO-h{q>$`8Ek^&N|5wV%>Hh
zKj6^v)d?&D8!2;g*HV|SKwky>Kc8<(J%Zlvko1<xGJOx@=bb#RM30nl^&bbHNX8$D
z%TZbD3PIhmOBT*?<mE2TK~#D<3g&wn<zB7g!Jbhmn_?&8A##cDIbH-G-v?{Sr5)en
zGnu9CTXz`FrA+jLeN*T>A;C3&BvYH_l5})|6nZW=8}~rOPijWz+R$AtyK5&Or3@0_
zxD^!E>)EZ6T#4If&zR3mo;2)S!w1hGmU|AfKW7jr;`U_1I3aR~Osl-y+{)TftGxVg
zl>r0yPCS&qM(Dq=a_^4x;H2Q__U1aOcN>N98VKe7IEQ9qos?@5EHJd{<b_d&XXyiW
zNh6{NHs)`Uf}2hK-Git#0p~E=-EU4+8!vP;<|oyW>)-MCcABa&h)9bG;3t4qH=zbP
zV)6&<W-5Rd0t-;nCis9<Dt2;BY$4>vR3M(ovJ>V781`#;rdSifO#hELJQ@3l(k{XT
zzWhX+RT>t6x7Xr+Ha{Y~b>;d^m*BqHtG64xx86UQ{~Y<hT}fdf@~X#dv_IDS=deA%
zKa9vZ=#{<+<w+=hLqf~%0wJCyWa1)|+>ORZoT^4YCO5vwwb<0#it;~g4%Ny0+M7c=
z`FNKBE|nh>EXUQ6)yt1Lb@B#zg9U~dKeyjH<~7kygox0{JlYs8)YQYaw+)|3x1e8g
z$b6%QZ(4uI{91V0J7sjJ@`Oub`^Q}aPb3QP>T`t7@vj>W)Mgd<oVN&y)#fJwI|Na=
zc$Go7;W5f_&OTC*jG|fn<x7L9z5_x9VBQX=y8DO|%5*vjQHRK|wg_hJ-rd=#SxPNq
zl?{gNy|yAfe)s6fSi|8g$*_5sY?H!3`+MqJ_5T62cP$(q&4*rTxV`n5n1r)51$d@C
zk8SGS3{_DGB!Pg6+CWAq*X&WL&5kO?b^9Bb=}9J&m^%V&P~qw*qnI;7PX0A7ev<PO
z%ttHp$X=IJ_GD=bjhLOt^qc5y>6zxYSNAjYm#gBB9M%D|7+06&n=(1|%CbG;SykY5
zxzWbe(2Rj3xkT2yyQa_mswao8v<5ooi24qd`cgRlV}E0%PNZP;g9_cy6|y_fm}xL_
zq?O0LeeNH79jCqN+cM$d4Da+)%WMe!R1`<6s!Bw7uOP9gy^Vvyvh_Fda1kPYHNPQD
zvq-yL(Y*`lqE{j5B=|O4&mq}2B{2O)s{GI;HIA0gYA+$Q8i;1+0PP%sWs_0I-cu+i
zd^TcUj>}L$0K!`MLUjA)fkEb3uG?buGg|(l!Y}=}{+6XFl;CNEwo7-H4QB_4mdEPM
z2^rKnz$aRlue986y7;$zclSYlEk@qz#_wgWUd{ZBymc!YgfC5QDt;>}s9XUXqoSOW
z-GF;~r?x?)K1D6-pI!nvDVI~Q$2;WA!BnU@2xPs{eT;6hGC;0Hk|?IGh=bgCt&x<n
zFz=M;Tel)C82qQi0J12Q^$saq*G~Dj*8j)Tc}K(Db#MPpLJ*1G5`7Sa5WN$OE(D3*
zqehSDhUmTbo*<D#?|pQljcC!!5GGm%qu2Mi@8|daVXdr{Wz2BC`<%1)b$u=aZKWU|
zqL<-+gOB4)E87G<F%avPC_v3zazid}+$w0k7LF6TRk3%7Y!L)0)-5DR>3y59h^7tt
z=RM$?iGKR0{1IHNKd1#Xn5=MU-^UkYfc|GHn<60G6@U)2pLOib&l?`oQ5-BI#i*t2
zfL-jbFFXo%<w?cJoPd)nCH<8?kiv^85bF~cE-S7uRVTR@Xd23-69085Z#}BI0js1u
z46Y)M-@PqUvTF<c^eZv4t!zQ9VSy)ABOq6SmF`6*e}8Sl`var=rB!2SKCJMw+Kot~
zcpMOvx{8EkMG;+mxZKQRXTHGldcd(lyJIGKvg;~Yvj7AdJ7+{ZQNDqz_x*Ai)_InQ
z@&xUtmp4`D4g_)ylH*Rg3@x~jZczQR<afqiYvimX2|CW=yY@`nz47}dp2(2(_q2Ot
z`Lv$GNQaOjx^p$gL`H@^y&2knd%z$8h?1J#S7y5Z&Nnw%XeK|bE=SC~b&im|g{_%&
zI7(3^OFV#xPwmf#a1i5Q-Ulew*(XRD*O-_*dbf6r`9`WDt)$xbx5o3w5E7}+<N`5j
z_K~TSUKM#i_n(rh3G3F@IzTiV7K3{W=&znV`>ZFv3kED2TzQ#mSOn0!!66@iEFTkf
zV(z-Ia9*A4f5lO+7a^>0d;&qr$w_?Jb@0q!^n0&uB3G<a@`h^&8PCt!TS2JpVi|-{
z-QN%n^_ZLFt1{H@Zn3knXgvOkkJ9E}^IEI1pYt&NPI}ULxaeUTiTU~F3c`H3788CF
zqzi4uwWi!A+$TKFK}*H@|77-lI%jBmDZibaR=9d{fre1Z1dkTXe`Nc$Ff{3<+thk$
z)Y$3$@99gSJ)b$s1lWf}Ig*WZpYQj|=s7sVOisy_d~fO<`2M!!V@<E*jIpJP(5u-k
zyTP5c&!3NWFGx_O-F^y-SHZ)MReC+{*DWMjmvSNG$sW02U!hw(=l%T4OO#QU5gv@4
zk!#*T<Yvs@WGSDp)u*t;RjVUeRuNY>rE9Dg6lL?t&S2EYtdfS1gknJKk#ZDTb|1n?
z$=Do-Tn}V0Yz6lc#Cc%6gR~Pp9N(z{dG{RD_HC?)5y|rsIsIiZ+ks?uu1he9Zi~{v
zUGu)h^y`Y(*T2lD*_~3I>7!p)7@@~069ns=IX66bTJ8}vA3(*-DHCv~wQ%B?H^Xpr
ziS}hppA+rTX`4}S>Mjq+N8hWPON%KYg^_T;>_F}vx|JUYg3^wGN0&?>nQpb?jCms$
zL<b%lJKyhwkX#0a%jedxZokI<-OqzX$C()pr5hscF1ERS|29O1ERZGtO-*C>MLQE-
z<r8tbi4K238=o5QI`ZB;?`x3s{QfqTv3u}#6a`(}$m2Iexl6SFrOHWAz}rvr<3A*)
z59dB4PEez->nCvWxvZdCl!)%xyn)*P9)U=Sd!{lN)0}7yaG@TX<Fsa*_YtVOnvIyg
z(ENNz9m_@}Ce`UhE5bjy0}KAxNym#z8T@|rQaYUcfz>xK`J;-|u6J(qY@v~QXWiH$
z%EMg$Yb~Tfb}^Y&ZRC<N>eM>c+9{78r9>tuGki0_h#;myYj8*JI^mLs6Y9Jej0_fz
z8np_ha@5|Ph2%IH*d01Vor-!%_f84;8uPD;BSy+?oMq_VNE_fPP3ghNOO5wpM}=4g
z@eGnj=#+-c=woBsW-#GrWp263w(jlV+}8c`m5-U;r>&8~K+$>>nH&BTWx-Pv|Bh16
z34_Jh^?57Rw=_yT6Juh3!)c+&tETf9Lm_(Ht}q=fR|8{Zm)j3l<JgX-gj^R+3-M8t
zM$vV2Jj|1z*Y)1*W||rN2k#^#SNFE2wa?8Y_v7T$q`oYyRN$9FZgN@Kx7zQSq8#Pl
zYsUukIi8f){=RsmGEiLk`|%*xx9aRf(ZQ$Rs>i;27k^vRufbp!GHhwS-Qg}zg$5T2
z2G7osx)%rq=YMH}P$7|STSJO}+E9z^)wX%BW^oMOa+X#sE?7H1ox?U_g%))kQ?4YK
zu%W}lyBCE#(`erPVB{(^5<ii&*pu8wb{;c+TGKTpMAMQ6OQh^BoBC%}=#rDkbl#TF
zCvuFwAdU_UR0W3nK%77*XE`mDs>S>({il@+56-2HZF)H>v7^5c*ljqTFGFMrH3b(<
zJe_;)rKI7Gp2foDf687&{>r=PCFYI0+RwF|c$yuD!_ACn-TYp>5@~cHpU7>l)leRU
z3EmAEUB`2!1}3uK<^Gp;ueik!X1N-96)$^uBuR4^D>?yFcN;)Z-@E2k%KURao_F;-
z__NKjOP}A%?Zb)Ds-XWX!fB+&iuc~6fkn)-@L1JnQteS)>0E@OqqL{ZcZs%=pGMEC
zP5loK{&Xrp)_c;|447_r?LSR%-wy8vQLMjnbky#Hz%!LmtoRBrK!z_jmPYUnZ|qs{
zx(bnj-X>y|IagZFK~|<yaYC>>+EXuOYWqoYcd?TJ=cs7NFg}BSZravaP!XmqGk2{Q
z+pL1){K+B@H`y?h?Jd7S-s@HIsXu&(PfNS85Z`$%m3!N}j0snT*B4j%2eu7<W*8X_
zS=j<o;UI`+wPJd^bx)M>kja4M(CLtdPIr2mHrYeMLFa4?$-^uOTSw#j$~XCRE?LiR
zWGylWWWMQNz<^K3lTnT|!8e_@1c9gQhImB1IaJZ>ZD(&|Yh{>rx1{n@$cG7X2uaDv
z_iCIaw%V=P25T*A16}5K6vBR8HIQaM{ZG|)MU>OzuKU}wr;YB%`@YmQWk0p8Ug=uN
z<&aPD>&DE-Kna=IAa3tJWjov9vQ<)S2Q5zqq!FU3!{V;X@FMw<5@CVC$A2T-IWs>H
z<8R8&of51!KO&Cabq;>6@(L;w{L%1eF=8EwB|TF9(MI8<_D0tevOD<WhjXV4|0>lv
zhQT|&cU6wLI~O`f6JrBYpe26m8HaP#)rMb_<-$Odf1DYSO309poasJIVpU&cDQCzA
z9+*|4T>OY3QtsOt6m~<S1N*3#cL^Sh#=7-dznT30+7ZoiB>RZpCcad!x;F$_aJ7vj
zBf|=4I=lS(Cnz?V_HhX#kWEOCz!{vmndyqf6G-?vXJRtXnhvR}x(Mi!;e+|xxq=j>
z>hxJ=*yO}%Iuxi@YlV~fU!0r}Vz?cMM%{irPDgC3rzI?Y)H0J`vL&vuGV`lNv>r`-
zegP$wSBqqv4h9s<LpLF?$ON1OLiANYpTzj>`Gf6DxH9;~RD5#875@DC!HZ7ox-Gu$
z2dG1>sXsEKr|;oyt>M88{{{>Y-=C_M%W<{4$+Psa(SVcsrYBWyk`L;8DhS9Q^>>O5
z9Il4*qXYmu@}#gk)*gj&^q_{p#=i0!q|wa;{i{jIFKW*>(|tZ`1Yj1oY>VPwO?5Ub
zIpXTec5zWq#OFV4a---!bvv3*<ZXuAs(-3zAJ?{{2+qfoy%oU5NwV;hnZ!t{^=Da@
zv5gL5pk4*FK8ua1+SxvR=)M`qFXpHeN!!TZAFEr}6>A9ZiZyQRiZy8MQagLrk1$HI
z_wY}$eB(|wz1i|^u<U#Fz?ppUPA8l+zk0bj02ZJ-6uUN>fa~k8nj<<HK^?)_fLY*m
zS`@GMq!*WBBVdT`?u;VitO}D$(!DKD1t%4u9HHGrz=eQYFfS(zA31`n(q}B<K%M~R
z&zlWE3i6m}^n@NHkdYoQ-n6y{VlB5BgX>A@RK$bPdzMVzJx|1l%@1km<fA7+TVx6X
zWoT0fSMZ#wsBdM}mduXxAi`JxO#d)ip$p#;w9_lsm0mL3D>}yNyW_$t>?EcFg{ab<
z`!g~ijecXKze4%Dvo=A@xIH5?k5EBGNsjb?J#S{;=Q<_2$ZlfLkbejn`^k>kNoN$>
z{wTd|N2-U5=5k*iWOpCh<v$k}*eAPZ)~U;8-68JlXeV!sQ2ES0F*8t_;(p+KR1lFv
z$#}RsL^WF@6;Bzpd$xR85&phirFos4ld>iJ_sE(s;Du;}wy=w(FXA&5*S((ISRGsN
z`As@5PkhD+xt~b5##n;|{D_B#4g`^k9j*rdt6nizQV#Z^H~ok7b$<h7=k%VR&hhJ(
zH|f;n#J0d(Tf5aZvo&A{2M{xFgU`iN*>09<$!2j(OH15baYHOv`Fwqr(>z`J-!MNE
zbC}LGcJ#|hN&gJWX8$1}ZY7#m{!Tr=RM>2;pGvMH(9oLy#}4b8^VwgUnlMQ(H=~TL
z|B_8|vGPZ9k7OcQ7($+MGJrzXl$kwt*9X~JwJs5QMMdNtNI?;uuLmW%7cRr-g4^t^
z-N6MJwZ$LX>F%+0-)`=AXNHVc(Ykl<httA+n`!GH=3!;_RpfI!@!)HDZEok|+T3=#
z<=niFLg~C&U)iEr5iH%_!#BmYppJ67C?rK&pOu?sv{m}PbaW$t;v3*TcIe<f36rp2
z2?%eedoHaW<q3HauM3g0>l61~iUmv^HL1(@s9V96Km0qeDW`8{B*6qn?r&9u#khZW
z<BwBNJieflm3)f)C+{X5o#7|<X!M)y8M6Bslw=j=DLJ^6XNV}d@JAi)r1>#C7Jql=
z)+18XE3P|{tDQe}4m9|Q*%pO812^8_X`5-3SIaT`_2KC$NZg>RcFlxBjTO)Oq^?Fe
znMWnDnw=Z^5Dfn-W0LW{Jc`ei=d;844~HE&Ag9>woo_1{hH9&ieMKtRU+LKO%6QeZ
z;Bti4%eREMV+Gu#-E8h8u=3yrggvj2Lc*IAp^%Y}Y_9Q`S4v<8scd+@M<Mb~_xq)p
zY1JT8E;e>m#SbD1V6_Fx->LeisWv$+$XY=B`&M=#)D~lCO7@C>dXjJVC;}JPXhCN$
z)~pQ7ux3foWDON=o=QB{MBi@$g=#X-tQwnmg@R-VPF)BvtH<0m#@0i}K6ZzZmQSJO
z^3}E`$)ZkW8+Iy2^jr&?8_*0-b2|^-v!G`IBTt{cH#YiLV?le15sRltB1&o}q^GVT
ze1f(me)b6iNYKUeq<Z`FJ8!eMdw`K3-%^CQS@Xf9IO_%0PUjSp43Ya)3k@r7&Z#z(
ztkVbA>`yQYyBdw?*=3<s0NWQuGP20bZpaXQoOL!OMM|t8C}bu%7HR&eRwE9GYQp^|
zB`sy6o9<d|_Y&B)JA$ln@fQG`8VH7Du)30gI2&6cArQq1A$ZQ2kYD?z-D3+l<hKUo
zFVX?16$Ze@scC5_ioMfV1Oica(}|@tdun_+%LLhz@&!QazY+rl1W5FO%{n%lV&OJ4
ze99xaLmV`4d<<Jp7d$t=70ovypLta7e{%HnV0i)zpUja$1i7A&WYG2L@S;ZR=KpkG
z*QjZ27B{G~cR4q_?DM|}lK{=yzvAL;f3|KcMzXn<qyH+vpmD*3zrifHmR^(Eem#0a
z&|<(>tSKu}kt%A6v%Op?(vu0K{Z50qnlK}tG_WZ-KZ@?L7=v`49P7T4a#IZ@*A^5G
zz`7NTeSIhYxAYkd=gaiNRo?kdNuMrpcwsvMHA#PcF|?4e*dUS@2M2nWqGyky(aH)W
zEZnObrj}7@SkTRf$QsBMI>TCR(!y&$t0nuigSCXlwZjdkS<R9u_0srK49-)PrrwJq
zT%{hUc|NI;USGp)=;vCX^56cEntvZPUeu56R`w!Dn_OVHn$6Ae?dmN?4b}v2xoWFX
zJEZ{pqGK=u&Jp4n4;f#*ZeALS2{+O>D;IloSP1v`Vw&0^yiq!X_$MMg+}GWmY*B$7
za`k0cl|=={iaX>9`lRtd8|BVwS^MCqGt_sh9@0;s*Th63$QAjAbdbP_BsehtrK-zU
zT8M_hQ?@6xExuW_@ORBQyV8l5r(3F7$-vG+rqeH`^q%^}xba^MA{OI9OU0-*5%zBO
z4FExZI0#K6E~U!`=!!0w^N8>}L@I?gJ5)r*_t6<Q;T(7h6D+FA%F5M0CQ@#8x9O$u
zeFPA2xJTTLNY26CJBwZ7-7i9)y!afqn=K0Prll1X6+Mk$kz9Ie@%-IBB_%|_z~WlS
zzUM>ILye>EL6q=^a&ts{#gzhI<`$jb36kp-Bb|w77jf0I`M>|aoJ1%(2#F{3s`?C{
zJy>wWAyBhBivFV(8s2GsmNH(Q^Uoc*zqZwon_wqeLFSc*WP%jPnWeS-{tN_PfUmBn
zg0rV}7ozojSxyG603kxcQnd+|O*S*_WaMozLbIswUbsccW)Fx6|Jmp~MET0>gZt8Q
zBaOl<Q-5mR3V3HMP3n4!wQ!i6Us_){KOhfjrm1Uv-=3&UXbRqXAvQDec-nCQsjF)d
zu5GeZmnH)U*_+e|zSNK{XsiFR40GN`p40<I*X4y534Vo+DuUV#BF}StbN{VNUT@%I
ztWGc!WN<o=C(WLfJSzU~P{W!=COjJI=jd|vGyFI%D^1Q#?P8_HIR~~lft-)XD0BMi
z0Rbf{yKi3Y$ye7EYUI(6)$@|fABGPOoIHfCVJ<Ths+6(+4V;)5s)lmJrT{^~%5{CH
z@+O_>=_b^Gf7@R7**%athtDo(dH6uk!Us-U?Hxu-qjG|mMHz9Mg5v#AP2;Y|i$D^y
z-B{z=F0L!)N#of>YrB1plJ9=U$F)ReyTKh%;c{Me88(Ez^>kp4gt&Kag<EO$o7W8=
zAKU#XbdUMp0@O*r3X5**s(7Z}7_M7sO8-daBBZOUr`QA{qsD0#h`}@Ir7AIM7R)Yr
zO~NilymH9VhF>D9snDGhLCPu`U<Je}%@<#K2f{EwqqnoDz!||>5|49x5)5;rjLt;C
z9(BVemWX9pF`|4ht9E)5*Q~0}Jfc7k`+cN#2AU}LQkNU*MpWWu*rHkgIw%elnIW|c
zRwLPt<*IoOMfZWaAYoqXV&Nwwm+hOo+jGU04vt`2ad9>3B(uJl>Bjm8i}GMZS~H^g
zJ^N+%is&NS@3qzh!F4D!K6}iY@@hMoXInPOv5z3`cK}ZB)WZaNW<(>9lVXBDad`$Z
zh}IA#$ZvBp*(CQ}2|k4uwm0IylQ)krUIpyp2KpM%X~=^^IFKOK7ZIR9dfMDr6h!^^
z%lbBW25M6|r;=0wu)d;G=AMB2A`>%zN|zme0^?6sX^ev%BLo}qq6V&}`nD&~O{PWI
z-`vXLI$uMqFVW>;L;g?6Sq<BslmvYI;EW8r!EBweEABeZ!I6}*&0^0!{R!mfAHIj@
z_eSBgr*0Y}ebcVE$S@+`=Q-&ntZ|46zX>mpODe>>P?ni$=?Z`1ia7&$bMD>o;gs4p
z3veRE_s{s*nY_?C;0c%c_KtaZ$tg`4#klkR%5t6cOSnnA$0f%4v<57HZt7FjRQzV0
zSOyiQ0r*D2)|#Hk;%ey{vq}z5h7h?MBc(AhJ10Y}4s=%Q)i0sxhC&%J?==EcKPiQU
zcas+(3-oiBj(vTSlxo$jtbNYURlgSK@hgj#&)@v~C|!30&IkIy&EUdc6vHBP2Y-Ky
zZJ_<Hn=iMmrCe{n;Ea1T_5z&h@&4JCATwlBhthn|g@j10cVR-}Zb3-;ZW3_dOkE5g
zjC}Wcj*{{&x<icTXdxs^T_t;rh6^ApRilTS&>T7)^dzB*l+n2DHkvqd=W9XiyL=rm
zoYW8hkn4H6Jzd!~%oFQ>b&7f#>y@rjARqJ26_1#m=8WrqOO#Lgp`mOI3i!)lN8;xG
zr6Kr~p@jASm>ov2<~n2kE?r+P<^1UN$$9aA2Y20CR?WHl>V-<<)^j3Ea4?|w%u=)4
zRy4HZh0*+OBq^{G(`hbZ(qYJn@%TAl_o%cEK1w^tR^}QQZ1S@24i*n?0&;NTE$eNw
z?NV7>Zmdre`J(ki>Ss^AYSljMt|XM>%iy2$-J+ubw+oIsd9Dw2sCx0KwR7;=B2NcH
zq=GK?z2`Ju+GVgD);Yr(F`YB$9x}1_FTYFF2`^11G%>0&I6Dj$yQRL?M7J2(oPWvI
zXB7?Zi4&cjv*D4uyCf*yI*<AeUu%r`mF6CXA;>CEA{3KfI2994#eEd5UdR<w$J6|4
zM<_U+oFYEZ;m>z?qz9)>4ZZYs*5kOR&kLnXq-*f<(BcSV<ywv}JK1T;8oHyVb6M*w
zbjm{xQ2yX=&FgFOV|M{!e3N{*<&WFx1SjZkzZcA-KDw{MANSYd;Bpk?i%!=45u*L~
zv=-3`A!2mZrP-Gu!I!^*1QR|ZN$hj7Sa@CWv(Nl3XqSP*6AOgFjg=Tr`R&%u?8vww
zRm0yudJ_*R4%B2+n@+}G8DziyLgZl{*Xcp#Q^mks>8v)*b7W=4IOp%Q7s*!fZVe=8
zHKMX{i7pV+a9DGW`>d@alAaN-G6>BN&pV;(GQe|L1~At5s1WRMX!osfR?T=EI_N||
z*xi$|gQbEG3QuwsacG=BfZ0e%qhF2FYHy4?IHS#N6y^OrGxLa0Y<C)ENi$p-kTV34
zPj*r8f?-hD>p1*R_t&1DN&Ih#THag{LL}#b&$q<?`l`&ot9vj^l1kjO0)IjNL~@<P
zjQ~OHS3n4oO2k&9`3z55oK5<`wyYq>{LzGc6{rL}7;$Vl@{*wbtRf>(sY71tOnI!c
z8z>r>++|tok-iY?p1vp;4lZ1*VWwxM*#6U<B<v#BqKI6eGMeW9H@W*QMC|g>R=TlS
z--0{+mDpR|OwxeeP%{@=LUJhmeIz3=b$GE?+W7a>l>C6pd}_J467`%fc~R^hwZ8^h
zU%CxT@kVdP+t}O~cXUmQ?DHtpDLca@>Pvp^j0P9s=R$BLkfNkd?su&2pa&PeluvN@
zmMxvHkM^7%y_S!8%|Cg^DT#+ZZJJn?*fMi=_uY4c`69<~<8ZEQ1MP+7mcSqW+nFS&
z4jDN7{y>))Q&GtxP-hv<6--XmJG58H=$L@mO0a^3vOT7Ka{!>Mqy|Kgiu%zk=>8JW
zH}-;_csXf>U}$8v_hh7n+djIzHt7+g;GgwBiRY(2bg8tX216=ay@W=x&+y?5<3$l}
zyoW#Lk1!;}_AvLDVSSx-s5m`E`BP9)hqSue(A7+o&cQ2hXpE-Y*iatU1!z1%;p1Xn
z)~|SsvxGuier7x;g>3%kJ@SN6;a3v=Z@M|I!^Y2#%|9Qj%l9hNb1tQ=fe=UPYMYIM
z$&}-Z#tv4#g3oc<eih|`8<&j{h2Wn)XQKL-bBXZUCi$%`({oZK^x#{E67ULWY?QLW
z+3b{nzDcd1PLr%jJqyg|Y?idRob&~KX*sD9eQ9Y2{K%{KyPX|)c>!&c>Yu@^BvG=Q
zHfK89z%b`d-O+Zso>gbob+=xZavO!{KDOk)DeT~uaC&t2oX`H?_0K;=6&m#)cWgZ;
zoQGm%#J;C_Gle|h*#MX0orAc<os{2@;$8J+yh<F?0AEm55n5Q~RNbkh>f)n28=d)=
zKzEL8d8zx}Iw4P><yr7r)1UmP`A!jJqhsr#HmhPKdh7;OOK~WI@N+Xe@hiL!jnu`z
zZtoN`egZC2>?g)d7LUxPbQ}D4J8*I;L)ZPKazWU_l;o_-;M4ksvjvwv+A@cmA-~U$
z4+q;>WE2VJlZ2HYL_@~0kUkkWkA&lRzo`&)-dkyuS-{2rb55XvXNE70t^V=G6e!mO
z9RLu*%S|O^<#!OAMFD_<#iw_#NhMr-MJNSyAU5f&;U?jUHKZ;HmjOh@yA*GnKK}dQ
z5yD<9ji&tz|97tuq{9^s7ftT6{zskhh~sTkh3vx;7e4nPcF8-w6gJ$Q#MiFTBRyK`
z5^HB3Hyy?{_LjsyNj9))<9{t@qfE#_Ux0-cbX`}CP{aeV8_65h+nJ*#(~Ln7pGz9?
zaJkjLb~q1a8?8q*x*+FtInN?rz9n9DTHF$X49C($E)y$Nt4O}^`OT2-{CAHjYoCg?
zKdAMcBK=I5)zrasLYHRNV8L}~U(hcn&+mg$zZxg@es-{z87@(5LLYWuzT&&(JN{nV
z+8!x->Ph0F*02zE-wK_jczz=0D{cdKsJuC}ls@#Lr>AQBs3GV@ck@%}LQNCR&s&pe
zT*W&9=ad|+JIywi29gI5Zhdz!iExM9xldk7bDftzQ@v~1Twg|#u5smLZa_6!>WFN;
zxJSjClJ*wb8wjpHPJ3m7hXqIIXK>W=<C7SnMQ8Q7YT+L;%tAXYeGeiD1roEfw-IZP
z`T6+9Tl<nesHAbZp-9dm4h+j-U{P>si>qIq${9L(Dyn}C1*)TCIw5iK4oc2E@4Z(X
z=vI&*KP=Q#Xw8@=J~lqS;4}Xtf!-1bHmrxEK5k8wd!Q15qTutFFHNpqc}1oHO?$x`
zEnb-IBy~w!W6sZ9$?BJvFHF_cVp~C;6_<p1&smRk*$Xf9xVn@ZKA?t$4*l*Q|0pRT
z)O9h^cp!EHUpG9P<$mcjThpIIxosy?<Qzm@BIUr6qmHKB7EzO`BzALjbacHeI1~^%
zZc)(9w1MTMq^vEjepAeiJ%GK?KSKj-x-&`>PFN~q;>vX?C;ZHmPD9d-B?fJ`9z$<O
z@#RBII(wG5ugQ4a5XXQy_dnds&vblE&g1ElH~OATPfa9LeQh(r+Jz14o;S+mg`H>a
zf0f#?c73xnH4)dOd2MQvM8DAnel6=GA@p0OCQgejGm{Y@qk_@b1Orzena4e<MRN=k
z?GzRnGB_<3lq~D=>2&4UElv3f`kIVRb&Lo&uu8aQi)W<4uK^|1(0j9|;m+j`)WC5q
z{nj!{bb2cJ1>KcThkw}~!9I-k%J3X+RZ<X>0^WZ#J;&HN{Kz%M_ayJ~5m8*{dJppz
z9j^t@ItmQN;K6>k&52TP4tn;HCUmZ7@ZY*INwCqGneF|^qKs?VvE8JmcG&&pEB0=U
zfVCo6E^X1q^D!ecZM|s!moH>`MnY6LqaMifprvS@H@yu#Ff0~|M&e}MpVoU<{j7QK
zmyn|^FF&BoejO^_e0~sgueZ$DO+iuFS-Y2`C|s|5J0%QlyV>J4x(~?%?35-6x0{qP
zv8$8S1@x^YuPb4@xL}J_VK>=Aq)@<;+P?VNpMo8bG~{^o;&8)!GH%I#GnkEBl{6UM
zGZ=~qC8UQ(+1yH2U&7gvHzJ~Wte(4Fw(2V;escpaJ>=NU`W;fLdw#*3NI1o3NdMA$
z9Y<cQKW)itR$5r3o4m{`sGAxG6dHOai+2m8G0@(iEsi5rbIz|!hYrOr`<$Ll{SJq2
zWA~<?31TvqMMG8(O2f89&h9WKH*S`Dh${c@U}{*gQr6$od?cqlM3nGF4d_W@jNbsy
zP2HUw90dzxL-SmKnyPXg%p}?|{DIm(k%@vfoWib-B?m}Mm+fUE@{JkBvRh0@-^hG2
z;JC}pvCJdMnPT|D3whkNK1YF`ubU9c4VfbvZt)~j%L;dsyV+1{OlKUv`PaZ5%3QO(
za%@@y<^4QUhjk6!&O7-fXj>`}s>g`wG*^#$gxid?<e{;67@_CO>yaUjxsO>au%h7e
z&Q-$0k1_MiuET4T>v%gIF^|;O&U^H`vz3w_H$EfetT^v^m%E8tPiVPZxz%}3{m``w
z0pYCpXXs0FA?vFUlZoFE(i9Gj#7B_(Ye{rnO#l4II@=9q!0#_)A#|kZPii_1am)Sj
z`)>5XM9=Xp)K6_kO(k_|-NG-vn`p}7M#iGNXB1r`adQ4=kyVN#F}yHElX%uBgro!`
z*GZnMUOEnf@JK)?yU-e$h0$dI&)RLVLllex6Hu2JdsI!d>SRx>XTyrp0@<BM-grj>
zsBx#7l&xN86TU^s==%;VZKfvU*PKU5tU~4R(gT528r3+P=cma%EtshB!lFwWOcbtP
z8K88RG?wFe$QrOm9n3?)lkECIk_pyOZp*Z$_1KNoWN9k8mU4*5{laiBOJ`hXBEd_-
z8j)>vE1+_@1)xC1K9L8)UR+Hih4@QSPNaD6Hs<?wt88|+?5~Yaaq8|$Mllx_UE!+0
z%Qw`=n8tp(kNFVex};qdaY{~Ix%ShrjM(Ja4XiqSq(9w0t;{c1ihI^`g2}){Q5}$P
zY}~nST<7aErU2h9HoGh}<-6X}@aH^JJTT9$mudQ@Ou)9zGf(BF3zkut@W-?}D9l=4
zWDf=R-BUDnZ{#(Ms##awcmk(DoFc2qoc=c98~IkC9*h9SLp;T+^Ev_IZ_Rj$6`yK)
z5hh71oiialsf+fwN;sTzRw&<W^Er-u?jih2F{DqB9i?B=$xi3VgB5+=R8O*Q6OY8$
zEoS3WDb5ez5D>lu9f+>`h(?N+aa^D+`4vZM2`#nI&VE<NQ&Vvlfv8=nzM#{-V)|<Z
z71B_&7h+X_!Z!?OYyDh8dx=Hg-Hv&zy#1uF*gyZ&IeJNE7B#nlvAkl`Uin70NXot_
zjI{^L`6045D@%K+Tf>rVM0FOk6}4;KX)+jWcJ)rpK(5&H|Bs#j5qeGn28Pf=+i~mJ
zyk5U$XyF}i;IK{V7wrRjof)-9NsbR$I0@1vj@00^{KAml;E^3X`PMzqzVGy<q|m?}
zm24n3zm=kUD87eom2J>K%16tYQYc@JM{*uPUM)u;B?5>Z=rXT2MfW&6rvC^Ev7`8;
z*M2Bu*&WX+fxqEbIp=dLKDWoOEnMj<!2qjM+e?*4V{eRg8J#xyEC-S)7I|tS#Fa*d
zA0KwE2A{>}wgrUfAQ&aoZO*W@a@h)fTc}$qI`V6q>p;P-v!7W(toA<Wh^X?M{S~E{
zte(qx<a!6UCg@ru4Ib=l;$wz|48#P&hVzA1yU+b9v#-n(@~S*<k1v^4rH^=JqbawD
z*)9ZX&~^xg!jHZbCk2OYKkcF~gr|-Lgqk>ql2{knJK$gPfV7-*HWF9b`)q22{4D0o
zmGe)ItbXu6VEx~5_{=#ruG0bzyx;iVkZ;@d-rbAZx8-vUJAjw(>F;&krW1gdw?30G
z;h|5T8ge=#Bx)4q{)6}XJX4Ti=p_M6PIPJNs^4%QC9$b~eXD%v^`dpjrHo=ld4^9*
zoT-BT>{bXl;`8+erQ{U6JY%&|aw-`ml@=`k13zmFBjok2%!H<JXcsl+&y96H>tEJS
z$}@x?dr*6A=-rWk*`vC5<hJWd3*J{|<$m6lvkB((;7w1<F>FWTlV@gDO}N(LDx3Wx
zb$?V$O$?eZ&q+td=TDr~UU)0_TYbtKuukV~O?Bb~!Ia7AT9ZN%!otNSdQEXzVW#M%
z`2&&=pdbOFfYgqp2ZX{j1W?q!HrEI`e9EeM&Qt2~3LA)>Egx}$)liL3UwMTr4ol;u
zE^g6HmR>#acgLlG{-bls#GS97z6rt{EX<s>)JlP;YM2(kXoKC|R10?i+}WF86~RP1
zefW%=zrAmL=#iu7(4#p*--<eE3Hyr7>wdGB=&a4zeI}=eunwTw`{3K?ekV35_qav(
zxg_W9q($!UNx9hOh_y+4CK{CZ;;}gnN|SyOV@`<wDVbhP{S+J)B+01UWG(hkXLS(y
zUAoI<%1GFGe^-58h#rDb{VdY8KZy0VNZRqGxkR7uCG1oZR#6VS-lKz2mzKi}f?#rD
zzL))jMaK}jLmL&7^Rx3xa}Ck?sgB06RQQqE9NSVGWl0;_ZgVad{snPC&zW}szbZWx
zuoX@_SQO(Bo>E*LU#(r;0!t`pC+-(0eI1Qg5@(qQE$Bf)M2fTb(v)AxAL>Pn!{OmE
zY+)9aS%u3-`PXjt(Usvi+}R{ay#`KDw{-kEA4Yp&h;yEKFuJZ^!MXIy1~%-0C-eC@
z``$gJi<mHy6=I-T1_3kC<xbas1NUuQS<Fdt%>)FrDT$K67z)fW!J)^4B7PcYBcAQH
zipjHCHL5ljv3q1=YPh3Cj4jm0iZ_%)Ol|2O;s5UMqt0(SwX&|h0aQL@&XzCBIL~j5
zR?Pk<!QAy)j!)?ii>gJt?T7CVc7GUyVF#JM<%<IR%cJQ;Uype-_Ak;00nukmz^puA
z=Z=QN-at=q^*&fj3pRY6r~VUJ_g*fyayrM-Ejjnql+F8^E7})J6z<k~3khX!rSkC?
zUrLuV(J#h6^Y=_4eoNRf95vu`J2OvH*8$B;uIH}z`L(u=p6rVlfr($bMh<fTOaEbl
z6k6!k^V)p}1v7ZwY2)9PB4$72fjvw83U`zPc^vAt<Vk41o8{X_>oE<$zOE>iZF&M?
z+W+$4CFpV~n8~niM+6t1$SXDzYpu^z2GuJ=L9}QiV_AjC&uTQKuD(XjTAGk9EJ)8N
zs8J#zmL~J<d254RQ?7-h)Hh14?fq{V+S;_|otn7B^tsba!BogkxO{7Q+aUiIj<p2y
zbK*S`mk~FY;)2r?$L*>{*T>h2>E&rT6d@F=1|?N1E9YFF7MFAm?8%$Qad+PR^-C89
zrl(K<bX6F|DwJS{FftfDz11Ir7BgRSZ~oIt=417`>~%kr3GOI<M|Bfu?I2XBxNWXb
zxA4TBPP2Ava20Rb-8;bg<`5goAR6{x$J?_ZoQ3SxURi|Qa9UJ%;h+DSGh!ayLXLan
z_}l{n;16pClqA##Kl6P#zS~y}%*v~9l~nW4Q;Llg!f^g(eqo)3b3dNTSmi5u1xX~@
zxr=5hBb|=VmC#;spx^+2o0N~NB)JOPI6bh(QJOwu7`8`C7TPmy63wFonU%w5rPF3b
zzR4E;*MftKfDM|x|Ad37hL#X(Vp8voQI5a_kf?Fo*35^D<*p1u@Dvf+@>qpT6b|(;
z1^e1771t8|Tt%61V_cch8@$<(s3>4J?Evp+9q98<-1tY1kLj;=an5_V{g7D9J0TON
z|Lu`F?LC~8)n4AIFEaITk+%AJDp@=Z-(Td4c9qebHX8W$fI_JRz>glYpJX+68WL;~
zXEBPd*XZ-HGSuO#^UHP%Fk8wb*8vip{8s0nI;-JF^`>VasYV$}B6FYw0@zXzxeC-m
zj@!SCGnTAh&s_Vx4FW)-Uvmk39@C%DOq|;l1v=;oElJg?HlRRp`a-Gah#jaI^SZ)=
zgwc<vt3_bK;EimnK#lbCSuM!eZ2ptxKS{5|Y)%DHA=Ob8V+z~5DRVntQ|3yS@~`t+
ztN)4n-8AOzUOm&kzGR<n-{(TZ%EQOUr*+?DdpcrAIASN=B|Sq)wl3_U#LzZ!^h5fj
z`8O7~Vx^^P-})wgiO;F>V~UTIE?Y6#3Ys1rr3RlhreIsyS%F$-bR9xc(S3b``^!n-
zv%P<QA{6FIML;h}qb|OO#npPCnGNDe9y>N|JO=3k{yeK~M>IM4UM`}{O3b65mT}&w
zT{T$_QfRq<kg?sI_!jA`nk9;DqM8%xA3gH{|Lil;UWqv*zpHNs#yR><yPO|$NZ4w}
zJ#M^8lN6C0d%p56IfA(xk3__jEtseh_nOe6Uo`c^e(Rd@3&rW4e-0ti?s_rK3HF{S
zE&4_8Ax6t(Z@?nEO|;*l*s$>ziE{b&fc$l^uWyDyX!Jd9<znBjyEre&aog!Dm`T2$
zihQ5VbY|zhfALmf>kWP(M!UD-xqedgARAs9%WAJJ`^oDirjs}i!eyx?sSp0#2mwsa
zJw~WP2%+e!SFh5COs{gRUeb7p(_!ijYVNCrF-I_qGG7peswY;8<9{YWz0kB^Vr8Y)
zo0&<k5+S7|RP93h6d|+W_d;YwC0DoMwkNWA{Nks2Tu*$@cG<ck7$N}rYbWdu7dISa
zB*Tx6{Csy7?wph#ukN+w5Fo3Rlp1W5c)9c}hqGK4->S42_HL)Ru{XHDp3p6226!Ad
zKjUpAs;*Y9{8m9D_u4P{^tSW)ov-(?kPoml$nSSh-tVBVf)IVbOKPmox54rSd+ZSh
z<_|BzzlQhW)QD1#6AsIA7JUzOz(K9Y(JJ*2RKHC12D~&JH_oU8!6Oc$`EiJhlzu2&
zZ2bhWk@V#y8`%yo;;%ywX58@W!N$5?_?OOi?woi-r}6IS#fA0tD=_PE;XHrG#60GM
z6RlWfId;886Iaa2x;h}&-(X?M%Vm@kjX$OPP#IOK+=*SB=-mG{RZgYjwVjspP7~RD
zg(SI9sd^9T9Pb{&kFtqoNMS1I^iQ7d2Mu;PsvOPW5nkmzFJbNVw1NqG`_cJAT{1<=
z(uj17&1>*WN)6ny`n+5pM7ld1x4M@{jG9eV%qxorYZ!O*LYOv@IgyA5cTjSHIxS}D
zP`PJD<E|C?y^wr~-~>h3*zW$2_^UHF3@22}Z2brXaF147tKSSwli%HZzdJHpu}_g%
ztTPZvjqY1*lZx#VVM=uF%6?^7Gn7ce8PU6)im$`E8aUZ+70Y;6?!oHqNPH`Ju-sj~
zbhfNA-6ZpYRk>bS1HOt+6=O3sR%Wth*ngL@V=>zL4_~XzjD3P|#(Fw(8RVE(#g^%(
z2Npm6yo|Fz_)z10w0PA>ZB7JOX}~#%?R@i;F`5(kS3Jr|B}dM~wUxvOI-ii;lk>rE
zW=4rc-9x^9>dBaSe=Eu#xT&e0nf^oZRR7;^cF3+-+09l|iy&i9S`_(EuJss37N>Pa
z)BBoK(|K_Fm0{}y3HcXQ{RWH7r@U<TZ0THvZv1SiB^6caR6{nR9+r^Y#RP1Rk6tSG
zv=|nqq_Go4a-H+2l@x4io;;-FR_T0zuj#Uy{3@G|v)_VN1M63Kfuh$drUZiJHp%e5
ztSElgL_o1v@7suHP6!T{mYHndhOISJ_=_U$Su?Sd4HLKIBDOQWZz+#Hk&b{qT=eov
zaLf%6zNHI~g?#(^^+$5uI94tAQ`Cu+LErr-y!J%@1K*Qw$xufXNf01cMwJ@;l<$>g
z=LEV^FeA;CKRbU(Bv!GDBUe#-*!fYh$=&D)35PFYT>x*fz@0h30>2=$F=ktpX`pcp
ztW0TM;Ee+S#4pQ3(h;e`XAFzsQn}S%R}@K<!sS<w&o#8QLn9;a4PUZDnf~`TNG=)s
zr;Ik$?CymK56mZeDKtb*E4ITp%_IlSo=HJ7(dKC?T1J%^pmO(1R$k5^zx4%NU4QuW
z+6X<177H2#Koi8WkM(3FEvjm?vt()TZJO(46Xcx{%BL^NX3E(jkN*qpj({f|v6U7Z
zu%)aT`uSh#5a&y4k>)c9q&UQtwUTUBNHVg|Lo%ih9m>2iJEG~lI{(VBij7mGb4FR-
zPnb8A3RSAsDX^tk**vjjZ(Lx;J3db%^mh@gyt#<y=G07b2?=s`ajCazLPq5{5?!vw
zEDY<PJrEjJ?6O=<+)c_2+clvN8R@`5zH_S+7R?o}l3m+|;!BUpY;@v8Q*rvxJoJqt
zq{Y5{3-#S0ak5xv6__G>O|JGSJ;muzbNM+hU%$q#pEGiOvCmO1tK4}MJhdgzH%d3V
z^IkDgQKp;CSAT=v6*K(YU-s_uoPNbZ8o|J`&Oj59^!cCC7{!?mHv@h5Zkd-BhQbWA
zuE#nbyGc7QF3B5gOudtSE6N6<GCMFHlkxYfolv~)R9+K&<krWvh-TOV^sdRO4;cyK
z&<kcL*>EI^IOKkq9E*A3o;OK9l<4AET((nH{s`kk<#k!TaI}RwQt5gv%jZ0^e82iS
z^h&K}%G3liufDV@s9t`LG4n3YE#Pc(*<F^lu(swP1t7^;;TMUD3B-DjZ|b$TuvUa-
z#Jg1mun;>nlp6kG$maQ3$)`9~JFr!rGRic*-}p{u2p$t5{vhan*!P&{O|DvVM2bgO
zIe}kOneSOsOePn;nPXp~U_~}HvNw2nKPjWiv#*MVUw)gczrHkU>8Cr3a}L#QUE7SM
zOjOJd`N-S^)PXJln6pCYe<EAj0HULIfm8OQdY<HTgG)jGuI(VFQ4<+(=02hG`c2G4
z3q229aRQ@3&(#<qXYiG2x9ib%P7Aa<_O5C^2Y<}ERee76ffp@LUn&Qo&o!q$Tt%{p
zP!fnda@_b$T{5x-z5zCZM_28)w%tjrj}&`Y?(kJeEJSHK;hwv~8r*Fj`;9Zz{;EQJ
zR5g7lH9$~y{@N<#VKhoGXE4`>Dx;k<!?<>7%cf(s<*UD_HjBRc5y)*{Ub(fg?uM#j
zeU!}9wv!Qx(}!A)9}J6LX$R2ZKX&J{aNn1A7mZ%o%%;3rRtPD7MAt^10)NX)aZ)Kc
z6VySi>@3|@&_>$A#pcbce0$ydTg?<6P8+I@1pjh6$tWa3Y~IsGhJfplX+N{I&vr$9
zmfl+jk5i<wq5Q_L4_8&?*R&5`TP=8<a|{W<<d0v?iwNTPhxiqOqsDGGP4)~EXM~td
zMVn`igQ^2P{i6_@V&@7|V5X-McuS^TW@wvx0BE3Kcd%}~n^J9OGYttc4_ZTS+kYl3
z5lK<))kJw_|3c$(QDp=dvwm5bWoK`&_Iq?hDRAi&+Sc^Q#3FTt;2yKp4wP7kGNfR=
zHk|Y04`(j_AyGH1>SDG~dl3sf2nS~K9a98k{i(jKrHzrQQq41Lp%Im?VLnZl1=J9i
zaxZxFm-{3Lvfz<q@{b39u*YOyE+ylpRfB0@N;T=Qimfd>0=U<FL703W01pQP#~R6v
z$C+3mPU46Pgzk#+g<s!rP`d#HKM3>&)AxTkBv=lnX1G^fCMuSOjiAJkB!L+j8J?&d
zk6i$YrU2p^3P<2ga(%Gx-Le`hHst0FEP9zGg-8FO8xd01z84oLslMfopgCW`#Q)9`
zUG|E5%VPl>+8f2Y%f3Fi0}z6I*5CA(gdS$TArDn07b|yR1P$e?6&4EbG};xJ9mgBD
zBkoq~r?b5CYdg?KyVX>jyUiph@A7r-Go{EE(x83$S=b0X7c_Ab_T~nhH`?zr`9ade
zs;wV!{mF~<pderQFc|jy>#Rlb$?eJAv(k@PD>|t%s|s1XPPjVv5$z9=TLDwpmV{|c
zEz;Ff5p|M5<$E4mpCUxGee_lkF87bz+4FIy(2d`Jgg?_F;T~{NC>z|8`u6h){d1Q-
zxK-8&IxY0pR^$sYcPp>q%9o-d^`jbrQ&VoTd<mKp;<YCs;jeW`%=dryuSblXVo(Jw
zE%S}xU<VZJ#<PY9Fw>YvENO*LzuTZj)3zTs({z40`0`+Y*Jm9wp*deENlRH~>aOK!
z{N?qp<8{;|dxLoPj_fDbZwaEQ%Pzg6$8lwEoKWcw<uz5`xQxv#wT&vo@la1+@IHj<
zaH;mj;Ey{mY?IB4ianT8f6;MhQn<43qV(nW5}^-`_>+jv{BW3bMwfkA=KTWFVcxfj
zY@|vxM9GTDTy0l}<u5`-dsHl(8N}Jy@j%|vvkb<zlOAs8Q8`NFO~O(VM2Y0v;iu=D
zW1piE;#+bvZ&ydL#jA<!@H52#CYrXEaze*>%E^gmG>u5rLbi@FlVpQJKyqs8x^MF^
z^1rhGj8p9BfRZceX@@hx&$`J9oY7Sy1)NxshU>p8GTD|RDx{VYp-;u&;`WybBH3ss
z_lR!JhxZB@w^S-5x}wwu@40aC!8dJneByp3DsIcB@@!RB;dT%?|6J=zk>ypTQ2YIE
zs2wT5Yt~G?xSQnF`1fP~b06C;gC$+tg@bo3mp4B>^t3Z$q@XWp|0Lc<%zbo7#P0L`
zVzR;EeQH9AVW?SYUPL_w#WE(x(N$um-kHner-f9`Tzwr?RsEnUBrAICAG&O3exDy+
z+X-9y)6?3WlJ)1AW>^M^I31gBqo-fJ?ItT%Lb=cS?1E<e7HN{J#$UTR+hv&=H(h<R
z<G%~K)m9IVcIKuW9lHSyTicdA;+4*{`R~%p69g+xB~R&|Ki~J;jQ1A|gYm;ykR=^>
z!q!koSyp=B7VGEb*$DOqdzr)t>Mw;WzihuXSn5A1%Sa3?E-G9O-C%EcWBllEboiWA
z(PWGN>cp-n*tpiZEvj=k9y6~tDY0A8Q^u)vo^~avYEP>B(Dn*RM)XZd)eW4?1pY{c
zS|ReC<%wBFc{GRFBlVRjCdqHMn+g_^YVl2<itx`3k&%%<ziF{v08JI&jM7cSDVO_L
z0`x7+^8t_RACLp>^e&Z1g@yOd#;jeroQzB$X6KP^>N&J3N1wW`wsnYg{eMfKL~6lJ
zjuG)!cCS+!b41*>kq`)uO4I?*_XkRgjM6jS55KfZD4fvmi{<nAvfO!Pd$M2gy8hT1
zPMAiZ3}T|W<|e+{n&gh)rbyaFI>!>@)u!#RnH_IcF{$d*v5>53Vh%ZiU_PhI?`aU2
zjI7UT)@vE3VUY7*PfF85@#Y3i)6#Ql>uIJ42HP89T6@il-_{>h2F+c_(jzvyy+VcC
zUhZ6KKzLUFtlY8{{%rSd;&5ckdf25qI=@77OIBK1jtI@k`D`xIzMyqMQ~k$}XZMV%
zL=$EL4v({7Fxr9YGXJB-g(-1C<;PaiE^{K5(uRD|Gm36b<*lI$d7PF%T$zG}d4!4D
zixlR(9UQ@}>$$!QUs|=Da!V`y(q+vaNyP1M*P${O=pvjLTr>Cash#aF&M#-5u_>kR
zyy5kObXwdJSxG<Maf8%bI-Os7R!jXoP9OSo_WNglJhU&$S)^Hr@>_O}jWL8pQx@wV
zxp4!hR!itu5TT?^mE0@|DC~si85#D`UxqT|`p3#mq^c!R;%}n>ruD;r6?@gWA}<Kl
zhDZ3kK5V&NVz67|pS?Sn<ON4E9sM9<{MEtX58g(7T~pl7iiIk7E6H>Z*0M<4&q?n2
ze(}{GnUoW5<{r$PG_EUvzG#zIEL?||P5UPcEa*^V>^q6^wtmTDIyO6YiF++4p#J;C
z)%PLAwDIPmbW3*ne1|NwNO_RSv0{fMF-gQqSh<`*9trCHK%S(nr>CZ1;=NK;#)0AD
zP~PT^Ki)^~gT*rIy7Km1JeIpdhk&<bVKC{|Iz6RR2#wsf^ZWdBMS$*mS#LM3rMx+>
zN`GVN5smecvOt>-Y>I4aLxoX|NRqhk)*S+}KkNG7U?;h;^9nL^d*fPzp>jt}Y5b?n
z*Mo1|AnR@s!kMrLu9L&6Z&*l_)YJrBS#F?*o%4;ZTf_H}^I7v;)#<vL84vf|o{mhh
ze}?ps(R=1MR84s_gIra2{#Ou<SGzFB@kK%Z*rN}xEt>ON(ZM^GZL_?=mctE>g{Edw
z)90lsEzS?&OYy6*!GkXTM@KWcP2Kn7V$Q97c6P+hv(XB3^|1ROm|^|w6PB`)5>GkL
ziJ$CpozLN>CBgu`*t%tJCtG<Q<FM>9DRgaD<J$EGb>^GnuzEOnB}M1nrr;R0gsEK}
z4*T6gw{u=|c9zeBYGnN1<v6zaNieJA;J5yDXM%~kp73Nv8u4|8{U5_DR_)n$_R(Bi
z&-zFmh~Vrb5kY9*ygS$T#qNAA+u_p+2|A(qZJnxApCV^9W8y|=U3O6OtF~Utq-}1H
zR=szkzO)(=+u=pyZjikNy_<&Icc+eaj+nk%zwk1m`)J1DYjLX^Hui&&$;J66uDMGF
zuU?MR`8=$P>U><#efGSI#4YVXRX5>zN8|9SoGgo`#l@GRNfesv$@AB`j?qiTZwF>)
zAgu42$zL<hi}RAI5a`j{Wb_=g2h${Jkd+Q^*Pk&bvTsa_k#i%QGcHjLK@H~4ms6fT
z_n8LIip&sK@0gZ?iC%;WX#&}X5QedGQFtpIm>O-GYZM}0sW6Dt7ugspLLw;gZ$9``
zp5NKGjJ9<^5#`6s2qR685IJIdKxRq}7$DdP5fn`}5dNJEnp~N8Yw>rq-`WGRi)k#J
zZjo?F+cD;(z4t&Gx(dSGdx2Fa7!Essq(}ThUH}Tw@OF00k-FN86GpdS-p(EYMq*}T
zZuZRUc?8geIL!7`*&TLVwE+9Y(1nJcp5A&bxNc>+nRsuoFp&#7Ek=Vh#~GS&@J@W@
zJ(gf6K)PoKeGqcT{|cPgtWr+_l+m<K$h7@~w+aEtJxPR*_f~2BFPgd5<HabA0(rTd
z@^DnZj`_K6Zv4(0`ihZ8$@2@)Q0)a|zt|a}xdF)*aK{+p&E|;e@cS*<*h<VKPotAd
zWXw^Z5Z8Nydq)@;Y3_LL>P|cP15%G&>?L>yeISFy3}L|ELE`1;=?gNQh58U<-a<>h
zd;~PY9{}NDR#7W5vuU~ZhY!b5A0X@4ANBZfHaqE*>aQ7ozKclfhDWy0%@kc^%tinD
z+nb9DUH)(T5T@~^Z7aQxa{17#@Wik0)~O(!^?P+5%-G9+G{)W=83z}K7QRu*Jp9D;
zsoiP4@zm`&S$|8D*N_M?#=sfX%SnE7zSK)*lF%GlmOA!0W#C|A5yp8i_|HC!Nv5-d
zlPy)V*#-KT1i$3yfuTusai~Rl<J$(wG&6r!G2fkIjo48Fg!LOV_v|})s$f(HvTo+f
zk7K>r7&H1i^_KKFQ)ULGtGFuNY#qFAhH)m1+^Ixwe751jZS<%Ok=b$ql5cH?-Y*Qg
z94gNf&AVn6n*z70VE!5Fyh2JXF6)Aj5$bXiI_r7CEkb6MMk6u)J4GI1M>GPDJs<2*
z*)fxZyh^s~0VapE`-)w4_qV!S-+_Sc`h~?GJG^%yVDF};?JZLD>F;W@cn_T=T<TQs
z>>m0@L*E?;q#@l}rRwhmm<lZFS)@$7xfZLRGVa3dV%(U{D(!G&R3lsbXD>8c{cJc(
z2;Cr50OYc2TstoyUTpEdR2T&8{_inxuE@z?^;mGzDIG~9!?`F?`qVD%7Fhr=1exVD
zFHu*Ez)qx}80PRPUG#85tI}?&>`_E#$ARNQ6B491vEJMrs)tf^jBV*6-)ZJSSDs&k
zoUY*}!_dSJbHD2V?gHBoFeHUBLwtLHx68o8Q)wk}k5oAsbQaR&i6&U&8(@BQ>+{dc
z0p&Nw(4gu4H(LzI9*FLVq6F8GzwN-$8^>kTlzv%7FH-cA(!|%S?h?e^tODF9zveRd
z-##FSwenkcUjhsf{XR={R^JWHHskbrHmn!6+wlLWdds+|zV8iGMWh?0K{^BkhE73Z
z=vKN@nvoHtl<sZ`X;G9?x;qB}rMpI@yW#H9@9%%_ec=oFz&ZQuz4ppyJ&Wx-!%{V^
z_a<+muApT%Zq*gw82n)4TOI4$1tYF=iNHgYDdnC3?9Y!(p?*1=`@C#+d026FpgFMz
zQy}64Xjza?jyh^n$putfJ-uWXjr$q-<f|gqIV#!Wb<bERhVf#rMil6}2Gb#`H+z@j
zyRB&QENiQ)X_AW-sQK3)YngnYu@_cSoO<Q0jok;s&4tt`9w69#w5~a>npq2k6ne?r
zHn=dem)ja)a@jjY|93YqA>_V0wVa8}=C(}V))sGxGly`+>s?1WwLIpgI=inhFzseG
zhk#cEN@>5ARbsO7aD5j);8uPWwOvwc0Tu0bdL&TzTkmz0rVd4W_9ln+vmwk6v<fu?
zrD1&BNSwAW<y{0v$Mx3par*1Qzqwaa(Bn;M`L~L0g>QO`S*|VM;0!j3&Wtt*xA<?t
zwI1+@v3wT3l`0k{)?-6KZ<TCYRqZxh%L$SC9`8ek{U|`dsm}wWLZBnk`B8*x-z|rk
zc&85{MZRk`2wFdD(<WZ21?rZjtlF(Yd5v-_g92F#n}oR=mi&*l9JFb1(P(v&iMJKn
z+&4a`j3HKxUx~9|=P8Qy6XNPxcEu|tZr%6to4Uq1FSay|NzPEIYxl^Ucw!mAyeq7p
zz!lHtcbWkcv7JPgZA37P(UHoX^jJ@1QX%17@#zt?k0J*JRO<$I{1;~WO(JHieXkUh
z3VNGuT&0kQiX8=IrPt^CyA{a%rqKBOCat|oezN{gdH!}JGW^u@?+?~lxVaItmjXxj
zQoyzQ{M0)EO6!kl{A_)tAqV=ui&R1!PQdIYf&X3MOONzx{BekPNZ?K=J`JDD8}}en
z0$OpqRZNVAtiW?e9E@&}g;5ZnTgnnbpll_zk{D|^*w`xYF;qDd(z`QQ|3RI>%@8$E
zi3sm$D87JoYprU7(=2>ATOwNL{ciXyTuUo~;+L&_1Vp>9`vKM_3I5?sxvEhr+Ko8e
z4<A{*b@j!lZqzD~$1*aVH3@rA)Z!v-s9ms<4wxe~nB!ozTP48rR!O2`*7OXY#QSzT
zQey)hc%R*Flk<@haRiqV0k%xT@Yb>B`X1#{#iRxyp!{EG4%t6A7;=aT!Dec=_L3;y
zVKerOnL>{A{}M5$Vvn2bnQM3@v{f<u=)$}!;(n38mlLlTH!&@NY0FmijLO2^b=U-C
z!jf+Hyg+<;Z*O*7x9x4ZTap>6$gxL9bK$Cai>#P!(tFZWKt6Z7NG09EuXqy<n`>+o
zhnX;*O#L{RCCtQEBv!;US2EFLy5#PE<6#(ON8IP<@{47o1A8E=sjBv&(TlBL^?32n
z>fKs@AHikg@kaU0{6S(VVjN%j@w+lVS;kqsUAy9NGsn5mL89;zky=TYA0s{+q5JG@
zru*k{I;)V4*lDeZjZj;Lrq0&})|1`DjAomT4;!+Qm<FNr$=7jxHW8%c;(`bwSxxC$
z(+DhDoY-`I$-yV)_CnZP^F~%l20g9E8X*-o<VljxD|HNmpp_RdtOJgu9Xzy{C5@kj
z8NF(yreZx@6MWE_`tBIwz>y)lJS*UM(&RQJu*_K48{5N*Bp-1Xe`{3}tQEK1NB2?w
zB)Q9G{(bL8@<pvX^xkZ9oQSPU@W5PFufSH41YR=qxZaUKj>^0{b8g*kMxyW$Bx-VD
zT*UU-=+z1=$|zzpKLpBTSlLL3m|YfmWrExi@${{F>|Mq!*s>uLMiQuAz9%0j#L?JS
zvS9-Sl*BXdo1jeC1&BunU^*VK72bbs1rTwD;0?`ta$kDdUZxP{?=HTF^RvmO>30l9
zLNz;fL<j+CyZ=I15+JUjtIEbZxdI8~3}1*htCs9f=6K;rHQp}A>=Nzb@pRQr56Sai
zj8#r44pq$e(1{==Y$9nA#CV2GM*devJz*?L6x*rkDoM`~zExKpA$X9$8`8U=B?A5<
zv@wmn^I(;e-j0syBB}6WejBV)GMC3ZB^59BWXd+DOWkjuB$4@nlkdEkN*YhwVK{6d
zsIsd$gp%)-hA}|w;K^3BM={Z=gEk+PnT`Hi45a*<Cj^qG?^A@o=GIzXuoW}RxY+)1
z^B1qS+c?M$_wB&_Y{$GcDQGiaL2!?N)`)TVPa?E&Tt6b_qG;9K20A56dlH`cKW_%J
zBjT<DJ{96;dmFNvn)*#kT;MPB@E?}CM1BjbLt)f5FCC#02IDb-r<swxCaFCNB31mH
z@xp}uBTtlZcYU!5u$jO=mP)Y(?8ifckicDJ)z_It+(RSXr~udTvCC6;#yH2lj-4`^
zlyJr+clg!#gO$-XilU)evMz#DefQoMXkD09QEIWjysJZD>yxkx*Y}N&Alm1y+wUx6
zgBc?I6>PSurrTE5GKF0pbMR0|Svk~`JsxsRzcv?3tAMS2$Hkq|39yL$Hdt>J%S_q6
z6}I^ZA<+e2PeLyj843(#U0=MD(nFQ$Tp7+LU+cm>P|Yc(Wq%&g(|OQ7>Otjzh$J9T
z>+LS{*5hmS^2-nQMR;`#ay~|QTjfCR)f`+%mi+qKNO+m3<ksOUpM6nucLFJ{QoWgb
zYX3`cO7d9qMf}27`yVO9nNEE9e<q!U5ciWKF1l?QOTM2IDu(y&hsL+0!cD1hO>;6s
zBYd|m=f26^moqIKCf3Ds@-`&6n9i(enKg3x+Z<FOYZwo`Ip~w-6ruKg6PMEy{Y2}Y
z)<6(bf*pN^HiO%4Cai&nG3bEyCkBM2)@b#K&`f)sU7B@gg3Xb1e1{-phMjLEk2|~*
z7vH&o9=2VcL^Jb1|6^?6*&uXD5)joN84#Fj-YFlNJ&B`#8q?RF`{Dh=yf@26f+LeP
zE;+xIZKOr2tQ~8)*WMgVrj4`@K2AyaM1b(<T*=!lFGR07_@S+yzDd^)DPFA1eQ0@u
z;_v*{PbPRo8F6o>3zw;%*08Zce6Cc#>P6opnL35s-p$H$rCK**r2)HuSYLz+rwJn%
zkGcDLZEq-Bq9NtG1zn{h?eNg{Ttlpv1W+ryl~(kowsr0G=d*qP9~nhcmT3}yRK^19
z5wV*|L49D`*;s=ih3xSx-(Z4yiabBBOeS&o4(#lReLOT~sKf-)LTrthYOWD+nd`za
zZ){{&8LuQkU!}gCL%f)3oS<rhkoHCtCCe45*JU^1DP@C<TiQ|jRA<6VIF-t}&W=uF
zUHPs1k||j@X@eO8eYA-bR&+S2EuMtRQ)khuX9KvYBK|%(%$tt41z;|9Q<A1NC&TYG
z%#Nq>6WvwnL^JSHeq9*r=}h^4TXhYd@^`Z)-21{|1R3matgIoab1aY*E%T@J8|mVx
zso|c@Q6+-nRwvKoKCzG|A8wg5#XXj|xU9+=r}N+LsZ-Hr__%4mD7dxpBSm6U!SMLU
zH{%BNG--J^yVP$hUX=?l=NidyS$$~wZ#<m|qkPgrM0It|qMMOaLSD5w-IpN3qmFkb
zYQzKYG7k?A<&!f|UEb$kvBD1#ewQbqd%s$83F&)o8QAM$mJJTH)ksDNRpyV^N01Nz
zP=yS??k!jSFFoZGRTyI;Z?fXz%=#<ja8krq#6^vS+`o`l2j>OvzZuPw+$?3bv6i)g
z$R$DtUCrfjYKEdRR;1axj=ZSjVT^miBI<Y$El=ur4V4NVni<kM{EC^*x)*uY^@KLH
zuKp87Fx9Lnaib98w}r<Hv7bRLNq(27BVs`KVg}!auYy3Ya`*vRd|v(+FYhqlEa3q%
z`R0j9hYyl$zHBCrZCwrl2X=DV4qAG8VE`f0le9d5Kz#8SgzriqV4Z%;qJq`37DbxA
zPQ|TD6=H?VOFn9(P%!`Xk{4M6q{(u{NMY9Gt5;K=Ti*ZWB-&eJvmnPw@80?&&0ZSf
zcoWXC#|!s5<B<0gKC8<s@bY%M?Kf6cz4<U6q{~9kHZ#k@w2FREwLc|skK!?hYgthV
zFAfiKA#^+6UWbeIyT<g%e{AuM?`a*3%j8Sx4otrY1AYdSp6``^T^|!=Mcogp1dRup
z;<DAruyzf?a(>zcv2UNgZ3oe$sF?RjrOd2sj1&x&)fZ-*MQyGzUNCAg5FImL{Iqfi
zMjo5*+7`>6??VfT=ms4t(X}i{&=Y)1{qa+6@*hT!`r{(KBz}EtQqj)io?0>DHkh1{
zZZw8-FP##HZ|wPU*DSt2;*ZrG=ca1ec0PLgl$qGSi13^8t;)^Z15w9VA}<M@)0Z8b
zvanVvZON<da990Tb7%ayprTMM_bv{)L)+@#`07@yU$!~zVWr}uy%iT2EXqu@WNYIW
zeK?arSP}M{ChwDsBha)rP5HYGmjEHsIck^rw77Y(K8a;;y8<FcIrad5RSNVT*z9Jb
zAq7X6h^ur#LBK!#wx_Lrg`MkSRzl=}0^)Y(+e=VDnsi)9k8cmHnoL2Fmp<!`nq$Eh
zEPhkIw5LVrrj}QqQgIP_WphGsa)c@>M$v39Oby4kouqI50KDuODj%UE(z#k>$IV%5
zIE)Jpy<QHSjq2v|cu2fuBmEmNY9yxa6>3c1lu+z~S7UseNPHSzcT^!%+CJyq`FYkZ
zWy@YSmFfaSyFVmdl2fyHBAx5LqA_uJdpwNNEvwg|MpEriT<GrK8m7#T)-(6)ckAsg
zuM5(It88bYOg)qZ16QgGem6&?Q?id=ib<r?Bs$(DP(CC|`PKl!AhnGY$9b_D7mkz=
z<vz^}SAFL(KbH~d4G9GLVS@?#saz`4f#ihkuD1<U)`$f9Q^BM(!Oh;?48g094M%>y
zTU9f?zMs{<@ZWO*38n*xDe@e^fglGQ)+u*g$9h#Z`}f;PK6D?9!J-LQ_%aW|_BqHu
z3XX<sR2k0-Devta;0*k9!>2$5uWTxad8$0eS5%PG?d`3)Sgsu0pT(%LPn~;ITFzHg
z+X$l)xS~vfZgx0?TAS(SdEm3ffyl`EF4RhjpQ%>-qHG5H(Sd_HJo)DY(N_6M3zN^b
z=jE}NhjSTko8?+vx%DtJn!aF#`OIo_x=8oNn?akpwp|g)dH9(`nZ6Ct)WmY|Rjdh}
z_%&tt%i250qpJDH*_Juh0fOi4WFO?qets+KI3{lt)F*a79M^(v;n1s5&);?1e<m5v
zj>4=s<p|QplkaTyypj?LBQlH}M01J6PhB}5VLv^`=zsEJ4`fuiWVP?!TEkMdaid8g
z2E1T(T=-EiKZ=yuKXVO2uMd9_3A{e~gPKBY2AW_6^!K9eaZb)oS7L>r3{%WAwR2E*
z9WwYhMop95NS@`q<(Y&Hm8Q*PW!M(7LQ7O+jW~Rqg%zHn={q1xB4Tt58fXOrf~L4O
z4Q<{7&E}VtbHl!!XU*`Fb@Gpx&{5L_wZ;!%J-e;4cpbtBI;MObPq>hpdHhQrYvS9z
z4l%F?ayAii*v<9lS><?~+P&6{AT^%pe*J~Yxi)v)N73Vm>mo8;#z&&^tBG&sFE3}z
zzd*5|4{y`Oa&|Z&XrnD~Txd<9aCSkiRc`5f+!A(&SMRBjC(2#y#v3Wn_?fkvn?S*&
z#r-yW8#PM&eFYSj;c9|+rDWRbQg%k|>oM=(6VDwTTmw@_zVuqjDn&Me$!oGAWZo!U
z`=3sw#36`B4Hd}ouxznG_QQJG2H!P_=*nL<e&eBQ*-ExBDb6&bXoS*tI*DHJR!WKF
z5Cx;hHVj0_jLnbb9p0ZIR~-a-ffRGYoK4=syHhsUSw+}PAcv4P(nVEppEDU5#{&0{
znRfJjVjeOfhn8RSjn_?lO51djkEeyfj_<1e^Vjp_9$4d+J4N>l&VfV!w1=sFSk>#o
z#UEdy6QKj`#Nk)SM*JDe-J2pRg@Si={Qz=?<`Pv^SvhFc1?tS-vQq%@^GLNFggAU}
z`?hv<%ogtfU6Vu8GY1j5gOI<T7{jg8srdacwDTmzc(gy%zmUgzl`&|OJve^c-@+XS
z_U=v8aVif86l7-2nKYZ^uvLT)%DUSic_LSvFSa3T!<%Q(lg|({9V+*Wp$|u<S36Un
zq?R6BBwI#%lO`aidT_qn73px~Vr;IR`pcErX#vlxtZq@@0U4Ps6L#=>E^Z;GX{+NQ
zzZEZ6THCK-oNIG&FiXqS&z6c}HZ?>k`T4@uAqK18RQ~*#frkJ1el0rkf3c_=Zr%1n
zlgy=$6rFJV#p+<Yu!5x%YFA{dx2k@F+?fD{_>p44srZJJe{9QiQsSpa!up(Yc=n~T
zm9Z-kZNJ$*;!>o${`~$jbF}NlLaFbXJhukJWwkAK_PZ2^=_<&W!zxi#e%gH<Jqp=u
zv9N)A`WMw}cT=NTSo4DCOuX@nvzMao7t0!?>e$O>YCq$7!S@zlH_d4^IW&iQKV)|m
zDI)Jv-k1Sv3JKzhpN#cTWP&w&7cY)kqqC4i^ehm*g*OUkZ<ah#5i~t*)VxzMcOw6_
zn0{t$Z%>$g1^UeX)=Bg*-;_;~R|Q-AW_3$bd26O6z3jlEkAW5{Ow3bNWa<{X_*~7y
z6lcK76fcW2LVCO0c}_GD?`b$mI(nxx41XP_At4}el;%MxV`Uigd_8jQkj*PI@Mfgo
z7RJezN-mf(ui(fm3Qr+{!~pK!7_V5qzyl69LqNtSC{?Cc(M}D4Jjojpp!}?=mcbG4
z={Wm%W`(nOobV4ZjauGT1O1Kw>!asi_$TI!U(M-iE51FT(%hT{{A))k`JW;~GO4Jr
zWo<b3>dTdvHEH)6!Gx-gI?pWMfeC%dVSUQ7|F31CM(c?#+HzZ&^~)sa?vJo{XlsMx
z=P4*rVh4?Npq;?WugGwr5=Esn7#sdGVueMrRLrC3Xr;G(yc;l#Q)K%+Fyi!neG-aU
zy%-eKYmPopbj!hWqDx&7SMsj<q*Bz^dekMH&x+(%>UulNL8^1tZEBJKvJsZh_py%)
zC$F5(D(3CXpT@@TnAj<!mMkOobBS&*YOJa_F(xUJp85<;g(BePTfjToDm*nee6cPf
zYNUzuXqy<U4CRO_SLWWQ8nO9OJZD`b6*Cc2AFv<3l}i}KY1;#*8w+vnlP|4UfX-I)
zU4E%yex5nwXg7JKIMs1oaBAP{RxVY$lkWZ5;CqRjA0x$<pwP<(pDlL<{f4TGq6|<w
z8bL(*s%^T%fvGVG-D2Og%&6#b`ocvod(isMIOXdK9-T`oKmroxIgPC|CFC7FB?cIT
z==-;*51Rpzhw6h-0K$wtqwYI<uBR0>lV@ko39?{)B0D(BZa;fY_f}K|d&<o_V)|~C
zC}TTLmbW!tr?y<K)mFY;LkPF3gQ5y2587`4Rpw2nAN2DAwT>w0WF4#+ruo#^DWU-6
zC9b3Zuit?v(zg;~MX6+**P-~;SE0EF@V4li4@J+##`|`bp+=3>JpfdGkB}Tah4jeo
z5Z@s!`0T{5k$lzaIo;>R*5id{?pn_mrdwD^Ee5~5z+`=$O%?FBfJ*<OZ7}V*4Km#k
z8-Gy@!(APe07o@?FF$%m^xf)XtB{l(oO&KJaIe@>+GmcqZ{E4ZqpQ|aBZG+3sOZak
zYBM+?go$!YGUe6EEcZ$c$Y+@uyE9*Z7rOr{W+-TetQ}GM(RDmtz_ppaaCG)zqomX@
z6b+k7seqm;V(&sSiCJMyHh4IJ<k(09AsIEE0~cvf8^DRSb4ZXCb+l&Cg!?p>5&~cY
zCLgV(Rb6v;P@mbKWQ&-0Jp=G*WGS3#w48a4qoWh%u&OfAy)zaQ(x2VC=+RRdKx!~Z
z%YbsqaUl&ml=a56Vu5Se=||not7l6BHBuAjaT*g|OT&$R)i$0>1iJYb{l6y6y|HZQ
zD;{sZiwjQ5>n=3Mq5l&qB%++c$$QkPAF$*pH2SyFU@w;d<)t$ZKP&<|-iBfAiSL1x
z`{KL6LsBRT$u<u{-4B7=nUJt_`U&G#G%?g7%RUYFzHGSHy-->rst(qtl{#%BQ0e0<
zE-hDtLR-N|dKcN@zmaVjH+w6_2NXGgHontRd$5P3Y?q|x!I039AOo^FJP7SHljL^*
z4tFb{@^%{%m`EeG9XSvD@v{gD6v*a;zFMr71?aKwDJ8)gHiyHHd8f2I!tq%>wr2cd
z_a9Gt<GtNl68XGQi*=ECaHU}a|MR1d8fWRuTv3izO!>h$YlWvXNZ7`R6yu2q#RJK#
z9N_Mld$r)iH-Z4e2N_lJjn$8ixXKJoS~z=piB~*`yuPTd{-6IUYi;7gjM&IAaWJdr
zl6}gI*O6j|%Eah%&OZ^5JgaQ&#V2Nu_bjE3Djr-iy8^Xt8{d?eDrW7ki;MnNQX(@G
zpJUp*`|m~Mc=y;+#6MYbU5k4eHD&O^`EH0aXWPzsLB<y3llAuy3rG)PRW@5_0=6%(
zGqj8mFM>3hhr{T;bkrr((%CLdI-Tm)kj|3WetX*{IC(Wf8s2H0{=3W1*HT)tznwyn
zl_5bz9<lgRTZX5qlg>j74lr={gNqit@V!epI>CDuzlz2zP;3$){iqncUySdVV=-07
zQur3UX9xlr8$+0kfO$ia%SEBZYvE7qpM}ko?(!K%|L`!GluCkfeuLgVx;!+h@~<AL
zi#;Z+R<V-LFqYTC91-7T$q+Kk<ng?|JUhZC2i(WPXPpg=rweKr%<&c?^HZ@dKIE~n
zDahYd6?V@YMOxqf&dj7fa3#WM*(&qN(HG~Ok+W}KV~hJkS&F<Rh;hcAkw#zXG$U9=
zgBWf<Iju_s6!FszERnq_w}Gc1bv_as6}0Rp+=>8{IDQf@f5oLIhVg~vSTjzr9x1*R
za2O|V^O*NSnoobVxA9LRIj&BBdk6|X>C!i#Ok0N-?j^kkLm~v6e8EqnaTh!EM`Z7m
zl&K1`GQ{_SD$-D$$j#+JG}Fpc%S|d;s+QscbCIv8`IbG@&wcY46V8u^oXQ8O(1!!i
zaR&XS%J7C#%)Qy(q?vbUh0i`;73fXyKotRIid)?xp4tSWNcUI*w*UtM4>BHxxi>j=
z&pGx4FkAJf_8$C*gOOm>*eZA1=J-AUp`23|^Y1?!hSi^47Mj=7()Ox>^PK_fUOZ_$
zPLC%O@psZ5hCTfUf;J$UcFHg<8m~TLE7@Hd)~?#y$S$$j9mkcdiC;9k;7zd6jql4m
z)1}$6N*BV8Ia{i;=2N<yOk3vN&|=7vYNc$o9VfQN8|dFt$HZ6w2wi8sw|Pgm3khq6
z%8tI3UHqw^>9HQBiVOK+A;sZC-zX?VaN+)OFjM9^uBy<^%z)+t&E9hUX>DzHjb*HK
zN79tas#Htwv>_`TTo`WPXG_=WL^ma&M^rD`@f{NSjrA33dYmd8rxP&4Wz*XxvSz}o
zIWH0dub&F0kmq(xtW>9_4{|p&;o*&`UyTiB8V^=lq_=42IR-KW@4xVkI3kr`o-vHv
zA2NDkl#QIM!|#wxMV!<jg7K$FoLY|0i{Z+=7q;vY2V$mpuuI#cqE-7#xI@ZLMwBu}
zp{1!FwUgpOnj^Jy&NBD3SB2bt<%iGCKf2k|_>P+d^z`7CZlx<o@nF$sV9duk%{Nj2
z5)eN1NWs+*05|UJ3$(8BpFJvP(&Fq9yHI7(I?+8VG6*CbLdTdC=|xS~p^FvY52H9-
ze<NCW3+c4<UV<45V<;UR5EewO*i_hBSuFwvt}YP#I2Yj6^l%bmXJF8Jw)Q4G`cm5-
zMsCZJkTudiYAiJOGBN#Cxb;f?s~zX&ecS3aFfAxt6x#gqw-#f$CnsXKHVFe_i{S6+
zyxR3-<DL|Bz5qRD0$aXdm{p8eG0Dv98K;`1P^rt@DHC6q@XrYrDiBL3dY>+ZZWx7J
ztishq){+buLK$*F&svcSIjJXVjw=y1YPi*JSjyrGU;J|P#j@ABpnl1F?msg^!%Io*
z+A0_9zu0cbee9y$S3Jw{23ME8Y-gr&97(E1PLro3Nm(0h*bMXf>Q&zfE`d?7LIWrc
zuOdhK;YWqUkne1l&Y%pixzKWxc0}p!oXKh0JX?AI#?VhD@kJ$x$5WTNocT?BF;;Ea
zdu^4n0H(W|`Kh0J_cpJ3P@G+i|6dg;>_Lc3h<~qLls-eqjpi<arD3cW44F3;v{w6d
zm_Bo!@u$_}ugPX!l?NAv6t}Hx&v|CLaYq&Ov+slj?s8i8;L;?}a6{nV*Q(YxerGtQ
zNN|bk<veq|GJjXzGzh)jyn~DHSVbcg+uy3cq=MDpJ9ukpR>Eq$*_}~GxQ1u}LczXd
zozB&+^|I<DwPT~KJAyHp?I5I_YtBKbieid*p2dIuowjv0zoB0NadLB9yp&PS!R@J@
z7krW3*6Fz97v#dH2y2F!n}ILm%?k#4X6uiahcE_;csBx_tY)IfMM>%7&x<l9vV4su
zDqDVKM!_zMD7-qysTmXML)MJY+PAf_1*;P&)Zk)_sVm27IJVFB&L4JVKdk@E$$!9>
zH3j+U7&#G0bD3Vb(dY+oi8?HZKOToh`@Y9nT;7O{cM&-+l_KgTL1v=`hroc&=#1A!
z+Q)0?QZ;_-rSl2E*{us8-Db?QVoAlN=7N`%HX7Y`-%NSPGl(Dt${GxNc4vPWCHki7
zEq?k9Lsri`okX4up`-79FbXB)y5j;r{Xy%ZL}~cv2?#Sbw6<}UiYiKq3Z^FJqZ!Ca
zX{6@oV|V=A2_GfCAjrURW7s`-h=CM&GyE1V#-=U&&=+8vmw~^~1492O@i4(Rba*k5
zzMzN36X12+0IkbAv*WvKIsjrd6sV%sW@g*K!=?*BEM}FGs1Z959<@3Efxy3<V6J4N
z;I9A0z{s4(^>nFikjRGD?N;`TwJY7MV9##ekjqMtrT-uzPi67>wGmm51Bv;<zIb`d
zAA=BN#Ed!CSG#nx!Gzq!_vHD6RTr5(is|htoW;9~&1vYJPUFuRwmdJ^;rH;V!vL~o
z#7JoHdoE_wGyLyZWhG$xm9}IYauMJkcxDy_p!U6+rAr;5@9IAM37jG4wFnY1`J#T-
zDOnh`Ol?3Kh&bk7ofS6M#jqi8yBHh=Vb3AgFh*7G_1UohcqXKu5xY=b^6akn@n*>p
zXoLD+^cwacpyfxVPW11f%fM5hO){jI_<O&$J4r~M@1ptajuh9n95@2t{74v+w_i#k
z4Ygyj1`0{mY1_w#tb}Xu@Lo4PT<E2I=b0){i*TAA;QbWD7aVwDwbzEth*7I<^IKz`
zr(@+a`q^amQrGiz6UMwvCyh%DgvyMQHJaP<3<itU(q{AcrJ_*GAkP7-n-m=0zj1I7
zP0Dd}Pqk0frV<ofx}K~G7Vo$*f|MGCVv_1f%&?&Q+nLJPWT~5KvVn!<R<i5aN|q90
z|7;L3E0%OrYov5JJ(ly*^@!dz)92qFm}jlZVCW*0i@)*%BZoHGjkQ%;MC6D~t1dP@
z&FOBUn%34&ZFe5^?074<L?++2O2!f=f1r42^n_Q)%(x;xTs&1Aj3+rpLsCp9txLaf
zYt1yo7Icm@WhY|y_MDsL5$~WToACJ3B3M!>zgtdCKXBqUXV*hsXKZ3ih9_J<T;IMO
zSkh3s5pmUf&@BmujF_Me`sF=Y-N77|lGFZr{er-pZ{)nlf(YHXV_P$bFghs5a1&Ki
zs9w7HF?O7^eB+y!0OzGh3f-Y@MN5PXcD#|{XT9WvvOlr!aLnjkbfD%zz5((Aac|8=
z`#p=VoWRSLnz`T0QfWn5h`!Xkb#!**iFP$BSkrO!W5R~J$8yC@@a0Ur>qCJ1Bc;iF
z^ih&>l;uL4-zt5jPyCo7wc;YvSO2-ah;!)0>b^%7*=U?E%y)ZWd-%MX4DaIgl2=8U
z!gef$7@qI1A-{5|{YEWp(Y1KhrwCR4N%=3&C*X=tFH%4;zh{6cqFT-P|0)1nxBM&g
z$C8gY*{uMm$e3iO=_ETGH7(e<GjyjV)Zb^4WCE@az@la%U#sa89K(}z?5>JuU_bYm
zi38C_Y)`~M;gpH=G&UZJi{A<>&n7M^XRuQWsi4+-9lnqhs?4@a-y&{T5b(IQ^x-3t
zPTKcE?jH=Xw`o&@Gx-LVSD)Wi^@b>;v23upf6uuns_n&oys;PR>S8p`>mHU)etBJI
zUnd|?Mu4Pw)XEUJkv;Z!i2AAYDf#4lujS&#pjGa!*_l`bZi*O~GZsN_BN3mBmHf?0
z?rCZ?siI)c*2|SV>G4KG#Fhx-{^^uS%1tEcD+JGIIamQ@YH;x0+U}_^&x_>L{Mw~6
ze$%U;>xybNLVFU~bp2TX#vm$WB&1Wt9cYa?6&o}o61M>%PO!c+)eLR34Q(>^$HWZ!
z{xH0A@tB(;Ev9LSQ>Yy!O56%l_O{Ly5=qIMWJtl8*OL|}pan}~+u<}+m|nJHY3L_F
zC8|t?o}Qkr%>Vf7O7qNIZgth29xGt%eXBWUXJmi2oOQ*5ph*flZ7d?d#~z^tR~(UG
z?}TU5#e=pAV1qFR&(y<?L;eQBBZJ>B`Q#GQ6{>|T@CJ^_>HKz^&(1elE#1^knwCHd
zfKJXVKv*aArA@{E7D%U~^VcU#fqqN%=ziS5l3r(iy#6dV$$EvaQMg75<03IeKW4@v
zT-@d%m$07sx@MjukLG<Dty}_!L~$F}>&xpB;kgQz2mpvv>83h3*ab~UM0mIe+fI>G
zVTIUa>rSti3A-1P>@4{~Q*!Udz(ZZO1ov#WH#Gc`^|vFlIIR`l!ZzIzmbGHsIAgCG
zR23oBbCUS9V;?(}#HA$2{1@R-yTbL&_Rkkc2d9zpC9FXr7jvgi7k*uc%~#HHUtBj{
zKV!k0(bS{h_jOD89XUPoGQ{_iQxWRb1Fy=-@^!&56@tkgRUjB49ktFCtX5WWG!%t?
ziJF3b-t0i`!c9-arwJS(C+Q}XJifGb*)(7F-%N2s#<O#>EmNcdujnLOM%w4Ol}GDl
zrHv+~em1TfAt=O6Xvbh<usD5Uo(Z0d*{O+5by~<wkFSw<`SH;Y;9z>d7f4~Miu70`
ze7k)jYS#mNw4AD=aS13&Of|{ImS6Q8bW)q{n5N!hoaC9K(j&Y93A<ZYr`;HPwO&RX
z#|@OG8PKp}d4Oc%EbE3>su=iAvB`WT`-`s$vk6k)N8yKll&lu`sj-jI1~UAfBarNt
z$g)|9q76Sy?)zGC@1went82Q<a=`79Q{$YFn%~c<leV)RJ4b@iw1)&8?H6%v;I6IN
z?m=kRM%ffk$?#Pm8@v}QQQ3XMg@#(6J+^%Ju3+c-8+^4{c3W$EX?*tJ@AeTVjDZ*H
z?xYw-!)Jb0yX2mYv&Bu>zPLz&MP5Cpr6)}=<9jtO(^9Q3p8H-n^j5+RCu1Tp3eyh=
zo$Bn`1hpQ-%sqQy)xNG1J2m`x!%i#^`34z!Wp;AAjN-y)a^hBvrPYJNBulDBNfdhd
zB7SD^Y;iwHdZc;<*SjIA{!3eZzyPe}_=tEaRD8bbyx_;+5I?9#i&WQt8LOr)qHACU
zrMUg5Oj4PzxJgi-TOk4+R0b!;s9fk9edGXfzuQ_E>E#K=-ZL+;ekN-ck0?yQst4Lz
z{ie5gBn`4{X)Q<?0No#PcwvX|$uOAF9+i|tiky-8s{FsbPrUTlo}IFKC}OSR9TO|*
zN#^1+c|R3C7clnv$75jwh_K#G<QGMG72yRjlgW+!PX|rCX6qOj3tMYji^D!wo|SKQ
zKzGv)JAdW?Z*5b^*S>j^r-iM1F>O`{viigL4aRs=rcYD8rSc-bWUu9+SJ`t@B-!*M
zDuQMYAnrqFQuDk&eqz9-^pJ(y&0*Equ&a>6Ldd3*u&I=ZtjY6uU#9~739CfkXUll$
zDiVIfrEJZ}Sv5lf>~`3Bq1hA>o*m9e!Y+N<=B6X0#MRk(+ik-M1;F;!;5;-m4O=)-
z?*x<tW$^?Fid#IM2(~*5^RYKRp#K*%&1YvOgwv#FXN<1Pbl!2&WpHz*dPcuIE1v0q
z1Q6{`RJ>F4RYTuyMDt(Bnt^pK{f^&WYsg1Njc6=8a0&|45pDL3oiO4LoUj<K4w<@*
zE$4t?joAV>)U;z7{lZzsj(!r!t@te^y6e4_C44F(2s`n!fVp=%yS*oeoNm(EjC-2<
zo4Lfj6A`Zu-;JPuVI)1lIk8o9w+~HC!v;c_SNtVK?3g-vrxX*EoFELHME=*~p?jzL
zHBUXkXwP_s<V+RaF!Dg+-vHdv1;Es!AOY61!h1gqg+ZMKX|GdIhK&Z;Z+vTO1>~Ct
zc}**SanSr|KG^2KC;j!KM7tpyt)%%q^z}|)tm{oN#8v*}ZsxeePb*_K($6%5t>#!Y
z!1Tx`MNJz8NF6E)z(hq-qYKSKsE|vqT@-JFe(dI14(<B5fT21^LjoHE-uyq+BNUTy
z%Wl`HkAm!MPDMhPH$7p9cNW*2AZvRilipc+$Q(L%I(Eo;SujJ-$b5a^8-X3F<KB-e
zw-Lm3=t(<Y(f{)bpc_sX)Crbj_Uy^)zG0TgNqXKnf5&M-rj!mqwU}fkp1DLyPUtrD
zP1olery!7ZQJQq)<l*8Ps!Jo>qWoLG&7&}*NCQoDD*)rW>8cNnmySPN$H;PXDDDz&
z@@7!m$kuY$eV%LgyIiS`c?IE?E}XXW^hG>ftSX{<-g2s%ZR6!(dEo#a<7fpyKkFCX
zo)wbBY58R_^mNUr`7=iBT1}HSkJZ!gl7q)VcKZDT1H4Yt{J7*it%K2>qtxI$Mehxo
zEp^DPz)4riVD7FXaaKMjV}Ymlkm`AZ?==#1UYzl?voXy4%0fFmzt}rH?%5O0e|0DO
zlwmB1aW>8%yz(PqfDeaC7<njxAgCxv7gry~C0^ZnpgdLK#DUHw%J8>DC<_7Y(!qcr
z5I)IS&<l?8EdRRp;{j#nc-8??VcKoS;Jj~v?m-laprp`|-t>}&5AiGA@qA_Wx`YK1
z?z?JK^tp%K@l}nLxX@5=62s5L2YCXn4RdMYUVNa6`j!G>llIO6z)@*%M6q1nQ+lmQ
zb4o0Cvp(8a=^hxar|W(t1$u+bt~;zaf|)~=76l|2_@Z8%@1qzg2$uJ@VwZ=g6;g3k
zyFbBTJYLVS60oo2k9q%&^s&SF*F!RND<|sLR2A!A{P$>KK05O#h^E7&{Q0oSUe0lc
z7YN%+kL(_BE1v3m50V(&x^;7?C@Za#%EU;Uxzl4IdyLics(FDnU`iWF0PWhma)wL-
zJ>aF+?%WeYqgQE#Rqe9i><5OMja2NRf70B>q3@w-{nP25h<>nn$Y~@jjCC_{M%Ya9
zK)L8HZDAPKQ^z{efq;@CQe#s6&K-bF&Ii;GH<A)z+OKKbKCfu)b>|r|M&lzdRH}&z
zvn6-1!P_GL`;<2WYci?a#uhRRyle^cH;Yd%_Y#FKi!SIhM<u?EKPi{V)!-LoLrYgZ
z8c9X}aA?18MsJX)!4_o3W7iCx6DE;{zOompv5rSy@jdix&-u{UG>pvF7L>kA<bzzB
zvv1B;A2uIpiZ`3%uqY)%!-?6`+4LQkMrp0Itqd8_<F$#Kyj!iDG)XnT`d+LAo^G>Z
zMEi)n(qN!H=S17_O%GKRQ!W?CCzeZ=X59S96b*>hzmoiC5gv{+5wGME%y%@<`9w8H
zWd#GgL+j%PP=R$G^aC^=5#2qH8~E}$u^tcgOIy5sp@cIst?>|Wet>m%5-b07eIBe~
zMA6yS$ib=1)^keJ^{bL^0kcS~2e6q)hoAZ(pR#PMi{(&v3UwreClmtgSEdZhN6!~e
zWc#xzf0J0(*)7ewtTuOSS-qQr)1t)&>+6eG-)y|Zv^^BDD43=zw$2!2uyIwL(~j`y
zyAS0$&iz3p8~oUcuZbxN^&QXu_Z<&_7tio}f$nAdQC8{_e>hXHjN6^PF+_N+Bb4%Z
z-81W^3!B~`t-oKXRIlO=NU3&#{5=uo-ONbTutx!nnA5-%Gm8+sE=3csTMe*AJ=gEi
zx$kg>GL@4!{nN9eLnW1aw%qK6{WTa6oA2K2yb=l8@esA*dzaQ`X)7cWs4qz>5^o+^
z(hKf2#tW_<SLax1`pzr21xK`*cEJiK$CbdG!gqpITjC)A+`uC=A5D`^Yt?|pws$XD
zXN6jRkTcKjQwk@FL!|9L1N2re85%_(<w;QHJ4q$vVPL_Rpcm6GB3ug2<)~}8foZwa
zq>sGe8>zHJCA;jW6?g-$*S^)^pPx7&?<OlJ7Yri;pO)9Qdq53wW7B8LNK3aIU{Okw
zQ75$TlH43RvhdInc|hZCIeW|yHUBJ#cP4@d{_e;(=Nr2Gs%*ERvJuMW5J?OMSu~0Z
zVbDDu?kFZ2@GwXZ)m(CNdpApa!h7?c>Jjn4P@r<3oFwTp11F1_N%`tzCz}~B+;c|`
z(6Rd9FWnD)#@pp(i<dj|5-iLKH2yc`Le9Uwl7cj7=i~aqv`QU7d*jx4s-MaP>=0H~
z3R&yQm})&CE1C@h7vLsvb92+Hb1yv82Pb8xD)aLvW=O|%_TLTH?85y}o>|#J^*}Pd
zO{JvQX=(vAWp4TOe^+y2L+<AK%F=*=m+|)zLH*J`_eK=d!d?t%RspW1Z1>}Orlr)m
zgx$qX&efz6pA<sY$UlExklw#f|L748IyyRsEh}m+0eB{F)V~-7*R?!&&6G`h-v8#x
zAb?qL+1KZ^?c#JJ6wTEGnQR`PWaRK&FIR(&yk+x6a;5kFfuo~}_IMy6D^&!O*niKG
z>E!-Tj}u}Cmje<cpZz{oPY|)@VW#L|DZg(z9C>K;)9b$4@075dSIWHU_rMOB_Y5}}
zxZQMemO?*#x9XJ1v^wQck&(G`yt5EHIH+<^Cy!btSgWk#@;{qTQdd_82ndq;WFzJr
znI5IZA5Mohx#=U1KoG^?H!sj-MZ-pl-SxPhWvMue*lq7Uf2rEXpmmN1%d041LYX!S
zzPpiRkL7iBlm80Szn%D3wj5E}Etzwgsa^tIXVJgw;>nYsQO~6|Bi~6GhiNy^whh-8
zfx8hbL)5TW1@yQglF5jd2`^{Io$<XD2L1HiB&c?=TGyM~Xgr|23Rshb$%y_w9!!B?
z{O|an*4E4qIQ8BDDr}zafoXkU&5tp1mJ#Z<D__5a?pC>CeKLKis>4Rg`#@?ZA&l;o
zTC2#F77wh9>h1dje+`fgZ$}=aYrz5CR%crv#?sO2tiRVC^`0=I|5Qg&X(=uVs~SH;
zIE7+`$@Df#8;a5S1YAg6-?8<WqRGZ7Jib*Wll!Z74<er`YXlL;BY`Kik?G)x(N9zU
z{P|Ph-?js3hyRmygIg(Y^=n<}MPF?@@+Gh(p8m{!%s#%{ak9|Wu;U-3AVnDq6LaAW
z?32P90D5YqVukh67p&h<q1f`AR>-IS32~lk`zE8G-=3#9u_9Ql8pov=*rK3-fIC;J
zKu6H4-T5a#I6#HDuJ#gjc6Cvt|1BJCGT9cXIR*(Rj9$?Byh)X$esdt|(mgCn*R3wf
zN}jt){qh+bDGj6J+m}OO{H3a2WHn$9u|`-*K7K?EuN?G&f*DM_Ip#o;!V=MM@IM<j
zj9)tKUtA$-f`M?2wEsIAE?gu<@8DqP`OyZi_pzh)ALsTUEM5u{)~KFNERyf6&JVI_
ztFc<PyzWYEBn0KatJjq^!E0IlM%jsqU#fQICsysQ#bXB@5|$7;J+OI*N}&Gw`H9R1
zk!g=I+w^J=L_|c$rToOZV`w5l#u9`vsOxY3@6etxkYcA7e_%_t5c|0J>0`jmN{4NO
zlH2g9%4H=G?H}wTy-YSN?4%LLRF@L#I|l&mu)Du$<fwK81s~g8Qd-(MTBxjgeAu7-
zXlNKbxwG$$K6D_3>nRGkzq>=C{25qg!n~t@s<=~;Q4h~i@nq5Tz*xA+wvxj0I$SnE
zX2d!0&hH*@bDrf`y)@Pg1I4G+*dV(L*JdpI={@sQGoBA;DD{!apXSy1hh{Lwnun2H
zL}Uv1tKgLeg#RFinJ=+90?4aN?oLFj2*EyFzSj<jSIktF%hmWAdrFV4g_ND;6Gd|q
zQ(D?{xPxNd0;k|AtUw2`z`&yfyh*25`)dQ5CMMfPMkocq74#2OFn#x}hCp-w;WEfO
zfi)BRP4;nwGp845eBF94e7;nSb*euhJ4=%qzC~ejSGPqi431tE3ku}{G-B{Yz{s&~
zi`sy1=G{cfpR{O?w&!N<wjgJrmlvJHdw-9@>+exujuf$-=vpFf3pvxgdus|;=0p1-
z^(WJgFDWx{0y}tl6&-yiHcenMcx@wLcd63HDiuAmWmF~%ehc{|gV*xjJzVlP=@8qz
zyu5Z4>jmaW-mVK#RowZ>j;S)k-nYjsms(S(KuPw|KT3!&L5yMxDBG^(;<?2vzbKy6
zPRbiPpNuzj9_w$u$>a)8wJmhf!IfG|B#8Gw3uPLeDZcuXDFxsuutgWC=Qy+Q6wA6d
z%pv4Z0{$QnwnroBLk`e_pW+oju)uH8iOIymBKrJ3>XkVEdPu_rBc=4BKmVrnDd#6Z
z5~zTSq|HLZ8#p0Vq@e|3Cdxta^J`Xx-70RZS`QV`5JygV8~fHUQ$Q&ly!O_Jn@mef
zD=sxP^vM(bVAQ!2NDh{J?pYlE9z&*a7C^&0Pf$8;bW{uZ=kLba{I{{|CD=Na+8G%B
zS;>)**DOo6#-)4)nW1YvoW=L8%MF27X*${Ba(O)=k+?f8PKJ*>8#J;(J%Lb$|Go`9
zjp$2E(B1MBG<G>)6+q+pU;fhAoNIUvV?>R1=lW;P=%?}SH@_%VDs5F5z;-<f<G;)^
zWbpgm*RQtxP^c;q@P!?qS6!c8$a%d~yRo`-kfu$c{`e%=bRQZP6O<L6l$;#g-Y#=D
zQ2Kx}P+w73R~Mm++E|;mmAy2rk4dsgP!DT{sU6TjU<f<;|Gk%HP-Qy)x7^OR;Mzyr
zXvHtp`C%-+H)D+Bvx>w@*m8-1EmEWkm%huxNIYma70v-r7w&zG^rE+Xmfu<QZX9LQ
z#j-_@j*gbwjWDRB^K~U*PXp9WI4JCy&((XJ0;)%yWi@b!k*!`aY34en4-#mMY{0Dd
z$rk^XGjG(ip|F&;zZ_$PTMrQFNv5=|X`h*EogDA^{ampt5o1geRb*o)#S5o%Yp&Sc
z!E3nz_vNx$ozEmYF_O!k))TE>kt{D?!^p^S^?Q3T4)3dNql3c}WRAb{y*1${pn>`p
zF5p6Z8iFgm(Cj<X;_v?#E6R%6gdwaOKwVtfWkm*P=Rd7)OjcMrbZQzIWqQrwHv<jy
zT4MGgSm4)({{W$OCwHIzWZMfW7tg&j_w4@ib$I%z?y&6T*GS#%?VENACC;I)+wQ<a
z2)?@5yV~_pC_Yl@%+IklZw;|<9N2w7%Id`=s}RWiCgrhdjNjGyPY#OC97fQNO}qYk
z7xYtYgu9?5B4A-hip58g4!$}0Ryy#W`C{wa^)`$YT@P-Q5(`V|__td$*rw%_UiYOr
z#r0xhQ`S~u+$e-UD<n`nEQX%X_bBZ8=ja8l3s@-ThQ;$((@80|o=8^s5wIorO>q%T
z;H&o-;vAsd-+=yycj)mR;EZVI;&QODwbr_=yjV|l?PoG%JNiA=lT^3j^Y;=uxB>G9
zx?w32SybEKqG4pZpgg?1;D4r8HnfmKFPcG}(3G~MwLy8`6<LdWS#O&_!Ec*Fj82R(
zb|WOiNm2KsFF_el-{CuCm*0gs9f;cQdZhS>7kU$OQ>O*A48fPGvI=`S@zUzL3u1!8
z@YoWno#$RCjmwchj~hvRurmW+^~<1K^9)x+GcZP0R#s`a24ER7U;jCBL19?JPqvRk
z${*KYLr#)&XFlE$7ZadLB~a}`DWa+`&qT`T;FUpORQD;*^~p-d={)N*y#)5xm#u>>
zKqXtq8u>R0a%ox_e`<85FbbJC9ByD)Oxg|?c6q{=oskf1;(%Ros(}uut9DO6<rXl~
zTO@*e2YF0f6`je@hfrHKQl#z$6jP`*VG@b`Gtvy}i)cSNy`TRk0F{d{0mWqU`Vvf+
z$A}Jyc9mPl2mZ@1F2rg(>A+iKT_&3&-W}t{I(0)b3P?|pioCz^m*;0E{Y=uh?TNP!
z0IG^u{Tqi#+gR)M5@r6C=~Ph@hr2^vdOo$(znO3AoXhNDScAy&nV^=Bk2n}0_du87
zXlsVdVZ4+#F&lMapB25lL@FyQ;}R1so5{dRWjFr0shGFZM9k7Y%T}y@!Ooo|k!}3c
zpVUs(l7H9u*@Hz>9HUcK%VwNmm4R-{9NY9ov#W26W3EG(!Fg*d_3`$et5uwrUaw>7
zXuX{9^-O~lO_R;qq-*M&mBs0kE@aj-#xLb%!s^Y!--BL)@qT#=_6CqPVc_K*sf+k)
zZGvRzfl{0poD=f9^hC8~H~v)(<Npc!vM`TZV7l^r>&Sb@kGuM9ZReF7!Ffjk6EtPg
zCXtPT>=C~r3L-&WEm+;F2l!xaR<`te8{np^^ogOwR3MjUy2)DzOk!}Zv~B_LK)}if
zew_SIdQpc(Z$XMb=rmP{j&={1hanuLC?Ic;Cl^_fs9ocV8CYxYj;5-xA7fcvU(X;e
zMV+yo#6J@OenBRTJmf%i@SRXuQ4)<Z=KcG>k3m`c--C(%IT)z_GIaO#_O^x*F-AcR
zDlE|NynXX8IMg*u;jA*J;IKwr@voBq^bKlNvZW;0W<!6H$sw<q_{OxeP#F)x&vyz(
zuCFe5-Iis+jhym%91no||91!e{uxFP1RC`5tr_Mn#%-V{bl<-4yi~{^eIAW1uZyXW
z0NGvZ_vl4Dl01Jcd<t8AJ^$p}l*vP@t*2GGsPDoTz8L}B06cczAL3FA6B^byC!=UN
z=?y6U-%rV-dHVKg`qPr9ZQ2?{?ewX1hT2zpzO~pexHpemBu2-C?)!;KY#-qTr{yLQ
z=SI=bq>t6Px*lmO@13v*dwRGFnp`!uUQ$!sq&<ruSl8d+eeI*~TrK1gilI!PW3F6D
z5Ndq8wm(2#)a&Y}ypbjV+5{2e1rxJFAS7V&OIHH3a$I({vkB_5$!`2}O8##6SH?8`
zRUEx3=|1$^jIK6Y`;=gb2mMJ}jfZmVCYOz*{%56kht;{;a#)iW>%y5m;TBlg>1JJH
zE6Tg1jEM98oU_+M4)H{O!!fq3dNV84rl+Nyn;T`ONy}^Og{R0vKA-vz)Ruxelx?zg
zI@_NGL6|K-3dnEsBm>$Wa&T}g?s+oBp(G;lA2AQu&j&I;IUr#DT(_&d(yVp#h}ySt
zrPg<jEGDP18^tD~TY{~LtPwfw0lm=o<)oEeaa?{XLDs~98~pqX6IC_$*$ZA2=y>J~
zt5)76SsV3+&5>6Y-Km0mm9tNU{%F4?E~(6c+Maj~YPk^9@f(o+cTR5YI;R}v^iGV8
zx62N=z^|yjaSuKqD<ng&xHP*T^7&IMRaJisk$iPIZ+q_pIkhQR!g6}~cZ-J2<Gmv(
z2#h`R+hJdxd!lr592pOcvw|rHeAi^iD4UoVl^A@Jr_CLnfudIovNQhgDp+K{sO2!~
z<s5L_PxN~SsagCfS7z>eeh+B~)<ua4i4jiK@cEML^ut9im|Yc_B=4k3F2K)FI7-*i
z)8<&%qQ)*aY`vCNF%W6|+b_vehFA$G()?XNE8stoi@szF!KDZQ(eB^W7vbmsyeHWx
z?fV~OhL4&?>^;bmF8Z@v=*UdJhjMS!FJ<N;^T#r{ckhb-^)-K>L1HSE0#5gz+<*PJ
zj7MM8zsNJ!wF1dVNv9d}B~W&#QN?ZiB(vss*Raywytq*F<aXQJ&0FHvFBm7lnRebw
zf`W$s_SL>b)a~1xsZj^b>frOO|M&TsO<otSLz5eBQy(6cGs8X|Y^@}0A=<b|oO^CO
zZs@;Id*eNz)6Y8tNa|(bNqq&e(M$63$~*p+-6I9NneuK+by1@4g+D&>EUng9es06o
zbm+w{`k1@tV}~xl4)OZ~Qr1pP=Nc-&DFjthlef1oIdB5!D)W`+Kc&HoTNN^IxOZD^
z>y@bA$cav4^QtPTcSKg?&w;$4F5z!GzfYZ0ca~V2{9-0jFR8rNybxXB?{5{U7}~fI
zg1eWyv+v$`C{n1%n;rG2TidN`{lb=oEt}FbN~%)5n`|YxkNH>SWb{;nxXm?_|M#g+
z;9ybWZpTxS10mae%PId5^S~?PC*dD#)A!Sy9c%A|H{RMI|Jg#BPM&vsLMugkHOm)s
z{#F4LijTCP<xcwy3QNk(Gl)xEh+Mw!iFK%UTiT6O6+|)6=AYhaZKIYd+BsZYLASQa
z&M#)w%adLHupPFUk7T*OvNdI$_VpWa1K%Y}qB770J%G878u0D(4h;#QvQT!QML$W3
z)>L3L;?Cr|wVrVusd1Lma?chrps9AJ1PPV}b@Oieu@8+k&DYI6y1xtDPiy=c7<|z<
znYP;T)={cbIpD*gVL)FmGZG;e+Wyb`VvuJ)PFmcu-pSx(FuZm3b>i{vetXM1Vh=oX
z<MVr&Vw-m^O>5|uLnZtI=w9Ab5Glo~dlPSS)WF<8%0nd0D@l`Dc6ME<QM~Z3e})|v
zk<BEORzRFBand%*mX&k`NFR@@E;{}?8w7}#C~@YE9jF?S3prDF$I``0cpuxT0Rt9x
zhZ%oIAWbAmo3az}QtH9>r}i|w<X>MuP(M~@?~2SZ+)Eu+QiV&=S*?f{aME0{BHBbp
z&MCQSsV9~)3;nMee<Uqjn`KjVj6X9w=6+mVa2oX?uUu>DcTDKN;8ixNQql?S3pFe{
zUV&5!E;y2$U)FYr1|cf_;;)0C+Fj0C+es&eXA*>i#-Ao<sn*9AnITvWtTeBvfS0DZ
zgh!)Xrh3&MSc6QW^s-8|%_nqIB9`lDPf=tMvzOt$7Rmo%#X{qbu40c5L}-f&J0H+X
zSf1`KkqbJKqfq=PGmZJwtrO$J{=ifDWtFKV>0#^po*pmQulK!5;${6aIwLTcJtGdH
z<?otC;v%{XOeY7XHg0$u@fg!sQWw!93Lh&)m*?p$H^mBN7BWps{qL4Q6?L)Z4bBDq
zMvyv;F^&NJ$JkV{s#=g*Aog4=gp0z^wQV=@{~_xu!=l{6wGEUOB&0z~y1NFYTe?BI
zYZ#<MrCUO}Bt_{)I!9VS$&ngDq(eH+V#oQm=lj7=u376{^~4=^Rc|+QqH;Aq`y-;K
z(win50T0;CM&kQZ^=G$uJiK@3nz=7*)w#0r577o_L5gOHcYZV--s2fyOtQMUmsY~@
z-4PfH97X@X;6Y=oO#iwPliG|tA{D66B^IVvG~(?Hv+<0DO-m3!;&Q<Y;F6>UL#?;R
zER?J4cE5P3z~s&LseSW@@#esTl(F%%ou<owBDRMxO>_B9ybJ$bA+>wB(qoo+W!)tw
z(=V;?ynHF$jAkjUu}(^vOo<w?4P>|^*MAW1q(;$$ZF7(L<Ht(gxyXPaRz9;Xi@^#M
z1A^PRHm#g~qODUFJ}o@ugWr6QZCd}Sa>TrUwRj<kUUqABr&OZca;1>>M>ZprF?y+_
zJW+TgtD94u2|?+9jp)YHxN`dX5u-$CNz&9yZd!ippVCSgabCkm;%mc0VSfa&2yQ_w
zR2^q*aLBQov?i=0Ku5r^bR_SwC@ba<qE$5+zw&b&m(eiA3ig+ou$R<9KUH@N!&b<=
zIauJ?3`EF2!M?nS2S<DWzcj*4*^-outYFCjJ>(#p&<fwo`5l4x>h2O@x`DA0D@~HR
z*}B1_WGuU9tRl#tHeL?aeL!mV2vJ^mcz9ygysL-)IY2Ka_`F4q?VI(%(LW^{si;cc
z#eol?ZP{@=OzO*T)jjf23qqqw(P`}if!kjCM_+H9`Pr)!pv86XoRY4|oT-guFa4%>
zrh#X|2KhlGK-+#z2~&_vsT~Ncw@M~SH68h$Cn#j9fY@902HRfj6Bf98R8`+MX@OyL
zsFH5Yw^4!GXE%6OhK@m{F--S$s%*x_&#qI;)s7F=o!_wsn?E}0Qc7diCF6MQo!{Jh
zFL)HVtdmiD-cf7ZF|2X?_x%YY_h7&Jyg<mJ@nIH+_4YSfiCe(~(|cmW_J`jFtyOjP
zJO}wPm@#)RGKhBbD8=~(Gzj*5e8?`Y;9>z*#@Ali8ZHMxvz&g{N+^<}ib!;7DW4$x
z87Gya_apnRFpb0I1~XAY|0NaZe&E`hwdIk72rf5ep(Bg+K3OmqoZZ`XMosQFIqQv<
zIY{4_0jc!o?(Uq~bE{i<{F)0rBZ`B8wvJ*OAKsfn(nG5gPNth@@dR3<$|X#t<zP>0
z|1K?pcs$5X(;V7~moaxOAcH4V9h=c%nc~R1u|OW=a@e~C(u?N0pHvO!)joT>HSpb^
zhYV4SRXw8=_&c2}nAb6rk1p|@+5IrHOSYqeWgpSvVvvthf)SQ4C+nE^s&E)*_Rh>d
zT-hLSWcF0aLbDEO;i<=pJn~sQ`lSM5;2G{jIVL8i6fqxutD&^u?(S~=cMrkJ=Cwy<
ze9L_d1dlq>tNWE!<1)2&1{-$JI!4x_*2Gz!wY^)Jdb=F>TvFN*@9!8ajJSj9(0p@P
zP?T?jL{tdLBr3L{cL7};Z}1+hmASfTfRDKJg$?X24;JknI&6sf&s$51Yu@`b$j_Kt
z)n8S?YD<#zguSOQYG^9HmN2j$tEc!<MF7SWeQH;d>QUVJ;<j@;rgKjJrU4kWNORw8
zGDZ7aKEfyGKf|H2*|?fDKNf^?m6j4>^Col_o~k^h=LOTi#z#X@H8zd`eK>SFYLLBu
z;11$Iwt%N&5MeNNOsKLqHrnY6!3j{Yp7@^6_D+uJt-PK6zfU+C!PA~Bvj*mUB?8Sy
zGy|E@S!CXe$$rmy@IK6brd;J~wPstBFqXdJN|kGl!_-C{LdYSWTyu^8jJn;%hiCh%
z)fT>~1D>@ztXv%oD>ttIVmE~WB@Yc#dKPQ$!_3;|3!eT8`tPx?K7t~dRC>@cSsZvD
zD9|B;i78Z1V+))P-r}>6eM8G9#%Rjz;z364bu@DyRAlu(uc!F;AY?TBz<23=#k2S6
z%G%`T#9|Jq9cyF^YjK?1i_J_klmu{-6I3ZkoS228a`>qMK)?Ls+O>s7^ZV2DMeoe!
zj5(Nnqp#CJK9;+Z!`nYR+*_!ee$ykOV_>ickFQi{2N8-k`A6=tplsz-HmZ$x*e9nM
zduM~(gVRVp7=3uc-=+-IQdnJ4xzMKGNjbWtf&&59Z5n{x2i^u?D}`oPD+c~-?v5^E
zAXwaMpb-^nMGMfZIrsE6e3+H483avd=6w!gpc-n%C?H}T2qgScK#eN&=D#Hue(RV|
zuyYunlt}G=d01%I-e7iNYsPiIgjM#L*B3-&c*4JrI2P><v3t~%DVW06-|dCIHZ4U4
zjl`&bAots~!|8Bo;?`Djbg$_1*_+8)nmic;sW~TTVJfBZqMsk{B!kqi#%C<zP1vmA
zYw_po{O_<gg<ccL2KseI+|CdvzQzzZvN(Hxef6C3-^Voyj8NiR2yCT9*f7{*Es1n-
zSIW>4{rykkz3v8@1j`BJ0JrbERRO+VpqY_jh;R}Ba_!1YO*h3?&|nyKGT|TE9=vr{
z=7LNO_vS362FL4pG)E^qvcH0Qy2vYD1@DiaBFEfF<PclviF{EZ<Ml8r@#(MK4%pye
ze%o`7o(Y2Rzuz(F(k{<Rou>HBe)FC97HEr&;}5ZB+5;&^#~EEVcl<xioSPow&G^ZC
z$Zi#Ge&_~|&SE7LPp*<cbTT%Et@A}2V@C*`*d9pv7!vmPT`epvsRaZkeK|k`gYBPW
zn5-Mzrp(llhh%*%6_;=0SusLMq7#%{`19bjul=9sF(mFLpN`~q=7Y=|+pd0juf#dc
z6p?~4_W{CRhgLqq%C&-}H=%ly+IF7C9&P`KtTcz4U7YMqRa?id-Yf`9)Ki7s)RDvs
z2U{HhRbI&E$l7&=+M5;BPYXE0J_a=ee|(@@P8_?^x{vps^mrZQhGi~9GuwY}gH#jP
z$DGi`gH?Z5Tvo=vWHVJ^`sAOmORDKL?6ITD(PCyJeIa=|iuwVHc(w*zsi1B_RKE7V
zQSe{$=oWTz<|}k4@6LWA|Cp&{VF-eZ)}z-=&mp^c-jo^RK<ypiKw?1J_C6=4{ieTA
zBQIELrS5;rd6=26pwbcGO!iD(ROzFvmHx>3#Z#qH!}{Oh(<CvKO8{9PbP;KbDS^xD
zETf28bO;Yu)lIG&g!>Zuh4AT!rIRSvaN3LSOcDePk2W=WQ4bU=8OELSGi`+ay%LB)
zI4M=4PWXxsRbBV7kh3}g#z8l-fu@<e6s4*9!h1;#q|WF`<(MdU(C!D`6k}|N=!j58
z0}9BV$J8s73yJG6r!h>`Zz3Tq2sxH96nVDre*)#d&RCeVAoWIb3ndTg7%iS$g!fYA
zu14(62uIH_)?eF&4SQhvrq5ArJ<<!jWpSyfZYno6<B499PwuYw?FD<fIZ#u^YSdVW
z3YUF7{Qb2Sz=;pnn+yJKe+7k^-Vksr@2}PCc{N~^E3v8FkI#K(Dy}?ZpGw9Q9DPp4
z1lAI&O0zZBLKb)*o4fMmhW5>z)9G<hthPUPYalWAzNAQqLR3acJ6ip{C8$@o_fk+%
zq!0dvr=dOUk^`6$GxTBmYPRp8AZ)j(GLX)DGdZAvAHnHuelJ4o?~jC`kPk48K;`Ez
zjDwk3u9q@+eP~3+d_5gyxF}8Us}oF*K3b}TYKLh0?dg&^1sH**@$q`kRMM)(^!lSe
z&OtXGs?lvXJ$<YES9b4MNXas&)>Ff!K?&e)c9ti>O?&8oy77loVsdi27npx8o4P8c
z#I=^wr*2YdCEcl-+8h@znljwy6Ayi3>6bD#YJXRpH}5D2?EfGQv~&7%@!uMgcfZnF
z)L&^%jZlAK@Lte(muZ}+jj=O1wE6F;p;=Mh6j5sU?ogWyJH;{;_l|_Bbc{agd?YzI
zLDJTEC!t=;WNgAbuv~dc{WT6zV(Q3eN4*ef%%e*Ud<-so5Bdwz5IgNZewK9sThsjH
z%=IF!wtv>N_`dXPL@1nKX{ESFaM=zquLw3VJoK-kN;<z|XA+yi+l-77Auw0Rn9Ozm
z3wx{ZQ^OOvo2f4N;k3D*k43vWqg|Q2%#72+1E-E~v4g9&emp7AZv?hGl1hKV+_fXB
zyoB<{wxOVi5h)ek?5W0&+}-^-Bk}aTjYCQiB^bu#X~7qc$$3yHwNd&19~xz~^-nUB
z^p>j!kGq80R1MJk3H{wO8*1-7Q+Z&3(+ZSH(=^_MdMc^aeNXDj2(1kMS@+FxINFBt
zk1rr=ty4(lJi^2!Kumt&fpI%Hm#Jf8J$zT$OY5lss343Qa^kOleJ^=~eS4yu7Ib-j
ztO$1E3|0p&r*k&Z^B9hg57{00D9Md%W*V6aFyQAkq$T%3OF7N!X=?N`LfZg`azg_d
zIoK5l7ttQ&{PV}3)U$^9v&>riIZMyt%vC_H^&V<d6?Z}@w{LVS(EjiH10DOqguUdf
z5xLv`^NuKYog+Lj4|Dfd4Nb!*(xYeJR~{@rPr%q~|9PQ5YqzntJ9S5tx9}DfJF9eX
zRb1M=f5Sc*P#GFkGj-hIaMxUjb@T)$>HI-ckW3N1r5qE6Fvl~n>I}Dd;)%f!w9$fI
zk%+MDPBq*S73{?$a^#z8m4y>Nc2c}|2itcheEK&P8!I1o$RfhZ04Jh_p_j;P#k8Dq
z*Y5tG6SXu*!x>So>sJy)y(WxU#lYxifD@S^tlrh)123O9)3QJ*L{U*vPcQYRY9z>H
zk%Y3l-K<V)ld@tykW@!}99tFC-@A-VuBv|TsptR2UO@oncSAbZ&Dcd8>S~9W#rEc_
z5d1O4hw>~Kx#LURJniM&?h#23RP--8*Q9mRKUBGcnd#nneG4?RF8tfVKYnE1oT<eG
z1jh~##Z<!9R1VTETLGRO^mFX$?wyNzf>V54pYzm=AG_<++dL5OX8}jV+chV|l#;O*
zT0oj%*tyK=<cyU@ZmlI*Z2CJ!emX579A)1BjkN#z<fA63;UjfAX$(7*g;HkIT*0~b
zy0X63kH@R$KjPbV{s0PS+#M#kpnTaLMZ&`g;5ACwkRQGjpt$0Fyd7=a;+?ufJ8yoY
zQBVR5@=B#mrN1O{`afp%R^nIZ360apn6-Aey-lI@>Rg5}<x(gaV6^c*?(|p5Soc@c
zoqT<{QYcD3i$u6fzBym}TzF~9v}#yb(79>vcKfW{wQIu}Q5k9ePvhb58=WHhguJZ}
z!^`DxRLGtHd_pVQy}oaI2Fwfg%R`@U#v2|UPAull>wUCooBwb{t!BYT%=@q%=+U_V
zkDE0sa4GgIFf<W{wyaX~MLaBOu!+gx^%gC|4V+9g|MJ;Y^jPm9C5cB#6tql3$K@2h
zgi#48UM$#jXt?OL$hK89kA3I33{~|NBh`5YVwX-hrsAG%#`h;{`)q`W$!rKq=de=t
z!S26aO8-1W6ydoMZ@qp+=~0t^tLKp-h?qc&7yx%^Z;acI3Sh$~32pkJ+v+QHcDSxl
zB)4RL<O5qBd?qg+4&wo9ZU&lFKWm$@aH9I*mwEf(IITwe$gU#eDo=^q3dlh_{NSm2
zY7yzdvDa?7UXLldIUBru_&06f&ODzeRlsR8?&*p$S#n=F+F}6*#*lkVecO50xy9_1
zz;hMGr$s#lg<JPls2f_SqYOvRdF)Bn&e$G0j7XXvaG5GL_Lbl%|I=Ec`74HTBX~n?
zGG`oH{Ca2~J2py-QD0zl!)Z#`BTq3DL}9E6Z{NPUQQan#b62I|!d!2Eeb?#%sHNDj
z3APO<ATjl&-XQR)--=$D!__<kG}N@Be}@}4i?^Y~!Yeh?YgO_Q@0(3$H;>eoqh=OD
z%ERx_<CgU1m#%o)0XvR{wq{a!g2v}f6oV<=i`5ct=T!vfu#3Vd@>wTIbOEy#GMsu~
z>o8?@K9`~ub-2_U?Hr!>Z!*RSe3`;xB&_6d%avHTEeSFL&jB9(o_&QlPbF>>H*Y(L
z39t(q8i+yHL>e@;b0g?ldzA|AVLr;KsQB6lwihqidpmpM#}T+z_vndGzWyE<ON%0-
zWlUp=A(VTGN!6;c{;7A^jVh$<C9*i2bv7xsNp^M7sXue{)YH@O_SL>Lbx7$;TF7KT
z=gPZjR8-idRltZ+&8qE^e}gz}tjrn`V1G~62F(ViH(n1=ys6LflZl`!+u4j<eXxxj
zh2GP3|7t&6Y$N*LkS~{Z0Y}q(X~Gqj*DgGjfu{Xlkfg&QKNRl5J<pw}vmOI-bW#aM
z0tt0>Jn&v<(ne?C*>;CLv`YPDcR9}-WCJ-7#|TEJS2pv%6^Rrht}Z60VrS-4UquJ}
zmdbp2*nLZ^U<CveB_6;3{kPm(ka@N6A_hX@xP!hW^}$)|@Qgw$s_*yeb(V^I-&|5w
zQ&|aJu2)OYP8?aCt7?)6KiT*I0StGn7d!j~tDYCb5ZmE~<Y~RUgHdxYz3OB6lD{!4
z{{&RRcYLaSJ-zJWP~vlyQK}bpwV~hRm~Bclz$9b<xDHqog#)=Pa)2Td<4H_n)iYat
zjt4|rgR@5%A7LP<OB6qLeu!Q<fk&B%azQTioIn|Go76PesIIi}&8&}u;j_GZ>U6Jh
zReu%t#$CMXOR@X##g_Sy6ER|%Ol2$m`bqulBYAh3_-f}g9?$Ko3q5KK7J~+uFykMe
zyrrvXuh)qgp0}uOHh4#kQN>D>cP3){Mbi5Z5&<~DxVhAvT|d9X(WY>kc5+S2T?ktZ
z67x96SAk|1!=1G=pl@UPQi3p~42FESE^P&&vMS@`Ssi}pB_ldTKdZ#A$b(ux<mDsd
z<dPomRf#4&_V%TdhI`EA;%43|MwVjIsX_A3?}0|jf5e709`05ryJLxF36~w}W*E{2
zVdt`h3m{b1^=-HB&j;bZAcT;RP`AaK50GqamgB^T#(-i2dimtW4GxPGW#D@O0Sc!-
zOvpG*JuDOsoy!nK@WqdX9bl|1W~q5K)Dtdc#d$S2Yf^f%0a|>7mM;HW%dM&FVTfJX
zf|s9(8)dH}d+d6v6Z0S6N=##=ytn;3YpBUPT-bwU76JwqUHv$k^->{v#)DslH@j0o
zU!N4TjCE+^WTHufZzw=!z-`emWxblO6r*b*c`=v+13I4~n&4=`9U}uyltN|#F5)^5
zda9dFobH-&@Vuohr(2HFV4+qjWh=Iy=iJWjv_-e~zbRymbzQ;f?uE5<LqH9mO}T1K
z0hq~c%2<}}{x0VCAi%(;$3-&%Iw()>hU3`+8I>FS1TV%gQH?k}bdF_U_orZz(m)r5
zsh34$WCBG!&PZ3J2F6gcOl9v`K665_8+>=>atr}IcOl9m&W_!z%Bdz<68z)pIa1JS
z@0aklad=G!HuwE%Bqg!NE6Ra^!^1pqwY<5w@QtDppBoHbc5S@Dj7Vvod{vQw-b$#`
zS~wlSjFQUvV57MI<w0HeG&i!YTf3Og|H+jbbe*dJ#em!Mii$iTHkyf<>xb?ifsPM7
zBos!?g~>FJAZ8?R<k}{C7b_m19VVs+S);$9yF38B*qfa5#vW@B<o|+{txx$T=(HE}
zr0E-+m0J4_O^@Q@2pxHy$eiBQ&L*#TfZ~Ovq$?pMsdXlmbwG_20z!jx96bz=GJ1z*
zm-12V&q<>xYARiR#EXrx?5pq<<<x&~lism$uvmGT(p-AyHL-WUCcsVx0St4)4=4N!
zV>IetG@96SgeaWu31k5ox+dJdO6#8)CEl0bn^j2NAHFc-d9ErO`i{=KjFE>#u9W_y
zfy&Ak+h{H1d3Fz3@PCs`o7e`#vu1&|ZVT!k9O3ykU8XPcoQK$+X&2jpz5-~(@e;8{
zAFWX1%%$o?`N%f8%yJTK6K{8B(#|}u7y>iuioZ)q+pUi$?3FZ}r?hwfqw=-d=B_m)
ze{!sQ?QHL7gD66nwO(7iMswG@!8{0ahl5euYhC8wp2J@m;tW~ysh<B-Bpiw1vh!so
z@CcktOyi>1XqNVP&+<n98;mNo)c7KtNk{M2UG3z>*IcZaYuwNDzEUD5OxZ<`y&&<J
zWCD-IaZ`LHy_Q@<D>ifB77o~k8dm*Rmp;Z1KeMs)<kVW8ILO}Pr}I)<#U`ozhRD`q
z`gp&bg~zO@cH}!-m*EMr+qdBpugZ7gKQ~9<^O4_r>-^Ictb|tFVgwQV<jpF2ku8(^
z+y~!^{;C<+kPc2vXRgB;A{AXG8Ht=oesyk@veKuCD4mBkeT8}1R$C1Kfi+I+=k#-F
z20_+O){w1SUJX8pm>$tlQ#)uI)=9oi0dAC(WZBN$c)=Rdgt9(qq2HEnWo2eK2c;gI
z7zjI&Bt?eyu2ARcYTYIc{9^@icI5?=bQd(BsII;z$e=q2v8p4J7Ku^qz)6<!*{-sw
zRKXjNJ#MZLdhn~#Vy!}7ih@YCx55&;y4zF<q2JMsGk)4&?4(XTFIVB{{6VV+8J>Xz
z&hzNXj99n?2h=4u+RByLj<n<*?5<|e0N1{>txUA$*z}sx&Ox>AOTpNd0_5s@_Jm6J
z$FkX7WPc9M9!2sMhhbjR6#fmU!yd2s#KGsDcexwVc|5{p=Yua|01GELH?vy|#B2*G
zzDm<-uT2z*ns1;)K|f7)DNQBS39tA*eGR*ffzuRaB#UOSd}yp^rO?LrZdpPcqNi?G
z6~p+PScX)3+S;gN-}&e>fdQ)|oZCaWpi{@O|Mw4G-uj7FeOf0{yCD(j$|s~T|NVA?
z)5Nv}B{Bu&r03PXDYc*QE_E9Bb{gqDtz2(YMzXZ$Au)Eprub@fZfC_U?weppi(m{#
zc6&Pehc{0Ay(zm)o(%M(;23ABy_yYKOWU`&n2CGyX60&>-9e$)P90qcl2^kw6xycD
z(Ouf*3PpZ3M37pFN25Ez`<4283=SgVbidXpQ9{U1&N65aqJuMqFmW~t0i2;8u{<MP
zXgAU!?E~t66C@~i4lgr64KfUb3i+^bxzv(fr|Cs8EHOr6D4lZj=QhbKFP1$#ZSV>D
z%@e36H+<V0nB1b2Ba0XwE#xT7+yFZyc+ns(b;~)Z94c(>Yy@`*9ukmKFf#UdI_z+;
zI*oP75XfzUzBmyvNzazhF_fkQvgV$Bo_h=ZH2Ru+;D`;f(D5TLl~B{?oQ(p(ur`v`
zSTu$v|9`S%`$Zh>yl?oOz01s4#>n3J!bhpBd7-`fE3JaogPFAZP#xVzl^4lO21TlF
zZ*y?{Y#eSs0v1;3wl@PrQxmvouDJ*!itS!WjUuL%6*k$O+9qA>T=I-f#jLB`964HC
z?>lWUbs6~mu-dEPQm2RrcrEQA#ZGUu71d4Z#?>85Se&>l4_)^r5Hux%OVU>IU%v=L
zrap`;zx<;-rH=<$*HS0xTuo$-`mx-b4vX0PDX2heMZB`8l3<%?{lvG$T9a~Hi&5BR
zS9q;<-ovsu^%y_{z%Zpkvl9guu3Zc%%cvaWu@WlBZzDsf8$G?%A%@#I)nqY>K!H(U
zm4M`-r8RY}rptNM^G5=$qOixh(Ol_>21luZ`s%VAIWw8DyXHnGvo#WjFN`9BQJJB1
zBeDA*?ff7ff5d%hWd4V%8b*D=w|!e%?vxL)cG4pEhw@9vrILBoyIoZ?AR>*oPFK!E
zK#UGPArbmL{|l%(q%7~L*%KvHtYHJUEfYm2r77*0r?lf{AK!c@ZYcbg=zy%tm~{@%
z+5K#ukBN!H>+k=5bL{ap8M5>HU6_7pOWZTBo}(AyQ#0b{Tf=ee2$9}kaDnAbMyNZ;
z|4tLiAoXGvru!qBX<R^cgv8ZBiZL#A-YurepEhKZ$kKL!zu11-U>fZ}p#Ksx1n;Lc
z{*iG5K$DQ7&J%p4q8JI)(5(@)eCqSSz=AV{0ybhp1ToZ%I*jj)?t1HJt0mKKD3E{T
zug~4kW-UG-TU-RCvPxY)=!?fo!0tA0b8>l5M&;@{T<PaXQq0?Jhx(#O^~}XIJhfh+
zMG$u!#whfc3pBut+~hd;!FLx2Kc4L8p#ErM<y-l+{a%oCTR81yzAB^AuE$cVnip~F
zoFn(q&8MX9R{MD8J8|Xv!9+3Stu`Zx(iV8MB&)3i6grDWl$DYa>;FliQeYOfylpQV
zJ(caCqtmR~C<GS3MpAbxy{3h{Lk2?F6Z&BCiT77)Ehb9R<WLbAU5W7NXIM_@e#;1J
zdnx6lvA2c@q0V3(t4C%RNv@lH`|m%ZuYLH3>HAOQpN7HU$95D{K{po|FwDw5O-LZ)
zfmL6{cG3bs^86`r@cFppBEt8%aka~TT~ET?gJ-$~FT$H-4LVl}-*1UHS%eHMkSkJR
z_jQQn!S;qPXa*4)uQRF^(1$u;k0(QYl*KJ4XPoU(V%Ll1y<Bwo{5L~omGyL&&`llV
zQ6(pn7mND{6tu&ItnR0>79_Y~BXA+kqSo~f26`^dVIW&6W}2jQxLB++_~Q*VUkvq!
zu+?9@CE|F_(tS7YAeuK`RGpFZQ9X{wVr2v15AgZ#Tik4guo$!*F8%`T#Z#sXR3=mb
z)y^6uC!CWGZlNj0PmKdEsNU@o=7eW%xioJ!My8BRgCgJk_;v=}S|CSoaT6Jgf6N%N
z=N%m80Ln=0eUS}pPR)XR^I_eyGTbc1N38}dQA(tp=0m;8U9L(^g<Bt=np!&ehIssC
zto=_RBKr070Y`;miE=_qPfrJk6O~gRtxqd0V6$B;><ogGzmlt<A1mdr8=zZQKKOQX
zeZ_|-_}xM|^I31U+F%y!SCDGlaSxrx^{i9*@h@L?IJPw9e6V^kd|5A}T80p1MZMI1
zm!T^2F5zj#jKxL~$SAyIg`B9M`%-!qQ`2e$)<((iOzb}ry?(GA|HpTfG_ei8D+Gy}
z(~PlxLP%;W_1ew4K{Q$7y^SYg*egzE&HSvaAKxGE26l;?+ak#{2D2>gJF4LEoUu0)
z`O*(bYizo6Z>8hWX~~)^Ds-NhsEjhj$o{&N@QI|gYD^!weKFophDbR5b{UDL&ou*W
zNeSJ?IV$`!=gKDl+xxEeN1^F=$LwoxO${Q9!o~fJffZM!b}ixXYbYQ;RV?h_1SFr8
zGTTou2n5?;0YVi8gfvh<H5zcC$09EU-){8y2h;SvnFP4wE6UyDXJHc-l2t?=G5tMS
zcS~QN9g!1ICd%34i4Au-@C#Dm@tBoSCf<ycL<grIbi)o*=YqWANITO|V*8|){4>rW
zsn6ovez%h&xJ8MahgdonMX4kxcH5Ny`*x}kDUHl$8CyPi*b<;b=|r*04QoUQ0m@*8
z9D)lGQNKo*S4E<jj;2O+gUU;I4hg@JS?b0XKzv<XdLD3w&&|UFs98!u67P{1^be9a
z#MEPmtk)LyO_@%ftx2BD6`}66s9;EM_8f~)bp{6}>~?NC3`TlvI49Z=rf79>yH8>d
z^FuG+9#KqU_4hi`x>hiEjGI|T*5`Xc;c^NYCHm*iLk)H&kG3h_MP^j>MpN^l9R0AP
zjq}W?J^u0N&DLipIez0TwO3l`#u_bowEqBA|L(KoE*^z&`aGvM&gva|$&ToKw!;{>
z2rTYxp&(|@%1VrlTI#(VBFrsrzStii$NITD`bmca@Xy+jd+lon-@oMBSR|j`P@;Xy
z$Eh#Yd{B35J#ZH6op*E?%|zy=o&Bk<ZdmWL8NgobEVE4*RC-u{^ZV%tIiW}1dGMwF
zcmax-d4m^D!V!sN8G@*|XB+V`V%EnFc3hEXSEn*W0ner7GT}bB-U~w>L9)pQeZAR5
z%g6!AtOxXeZgaYep%sK|;6&nLN2QkxCDXawdz-5qDQ^=c%DQ}Qp#bb)n};cW%LMEc
zTywq$$^b&0o0D^^prAnJi5eY11NDD;<N4BwzxCAAcc{HFPA*X%L%Kv(_k%w&@UEx7
zHvc}0@X6-hQhr>@4xEJtL+NO^mf+r^L;ewYMiJ=k3+cYhx1__XZ`=<<t;Zhe(7J2C
z)5aH=DmNIWFzAdRR+sz`C+D~z7)vBWhdta|op4a`^C|rW#d4d{e|MWH5=YD2D4vMJ
zSIwp>#^H7M4j~}k+#isf6A{LN9c$Np2^x?PG;I_xsBznxAsjDM?#h=>z$GFIg(7=v
zHyW<5&h2BONpw&jkUs^CP=K;mRabul%HAk}va)U`A_8Xi53kmc6;E9s<ggH6umFWK
zXFq~ie=>}Rn_>9=VF?&K{7)P?;L2UB^6k$~VsJ&14D@wrN|g_Z)n2a1Z`ZS+>Zi&T
z2S<}h+M(4+*<r$`-!`Oi+p6+sWh{3#Us6cY{rAO0>+Dm7JF~$hk^3$K6?p*bf+0PC
z5&++(T<L5WTG>T4FbjJYW*(j>M<928wAHmblwJvRol5}K@P<%0YbgpeE&1R_YvR`=
zWc&{8zyKF|vTK^~PSe=<LEHQbjfr6+!p`rs>R{V-k`N8QhJhQG7fcF<`Xsk|{I-mg
zbUIB7oylsvX)$+_r8&Q>EE+~^x`8T9T=$z>PGqT(1E?0?X9Dc+9|uf+FiiB;x4N)a
z&V{2jvfQ7T^Dw|NhBs$Xr7m<1{vfo9Sv>j|?0eH|m2&7JOV7W!b-$dg$Islb!RrHN
zy)4Nt;8YHgCCYikxV^vr#eH&zjj#K0&^^UQX@&g01O{_pe+wwg^q|2OLdc?R0$4vX
zjB4$I^vW=ldJ2-^<8)F7=X@z|VAEdVd+JKt<GwQ&4R|IA(cPzU4&iQ`<rr;0{im2s
z*T^|_7zyCLv*&+_6F8Dkt_843@RC5pyPh4ThpsI2-`2h_D~nEv6Kk(5F>pD&+!)vp
zh*un-U3yusUEx4gU3SIaa_e1d(kW}xQUz)~)<6g0)=$#+a%Mg|q?z{I#WOIxqW|PQ
zQk$JPHBH=?CvH%#ZOZjdHUhatJa=$aSO&sq_BKEoyYRan*`zqi?xK(nT%d_hC8i}_
zOOaFqNz_e5BR)`tv#rbNKFxLxfTPqq!U4E{&}VohoiyNlcHS;#t8p!h2VQIUoq2Pr
z@@`*WA0sm}H~p4F_#t3>`5q^LUU-ozFWrqSYk)5<&@1cYs!hRFegfz$0;`YGgkBQs
z;QSJV_Pk<6@UoJ<p!^ur791kY?EBqw8#8%&QcG>-D`|&1xJ&yw-~KKbO4Azg(Nrid
zwKaA-t(w{lJa^r0V?&+w>1k(e=A<7Xm-XrSPmzm;-xPaaOSak5TqUkA;_Xv)P@7K)
z@AirVS>}hHtT}?tUZywzi*@dP$P;(+PJIoODCLxurDbI9gWLbPAY)7`FvXbMOb~}r
zfj)|yy!<nLef{dq$XU<J-;?%72f)F~?DwzlPjtuFnV8mz!@K9})_oNBGGlR=@#Wv!
z$Tgb}Me<r1JbY6nmz%2Vm5*1CHPUNoiar+i=FVbThn}aS_U)y*&mf$%?*G7F1f&%F
zHQbYspQ*Lwg{;Z+X&dIrLaYP~fbmi600r*>dW$Fzl>p9~p=9mxtnr)4+sK`24An7-
zl`H+f)l&eM1T?b3rUDau*<+3uMjL!-V+G$1-F5`e^k?X}Dp6KyhVv>Nel9&!A-|zP
z&;ijfn&@k;Cjtb%5)uLd#UJniJGR^fgc_~{uFuo?&LeJ)I4cL-D*^+U(4`8kohgR{
z(e839aX{>>>Z>yA6Sbm|r(q&sAO?MgR3OzcYAzk#_cS-G0(DkIUzJXEpOa;MagQC#
z&>*6;c+Lu60T?7BAl#_QhXW<GI}>4w=hllIz+LHcI%E%r%E3aLu=?ecI8N+H&u>ZH
z2QjlF4#$(I^i07^VbKM<bzS@4|C@hQ26Nm}n%8?R3ofd0kZ%jK64hga1I9pmB670Z
zAPR!b%T<H05Y=QUvqxh(FZ?XI0~z&2DPvPb7;({fnOYA@ov9N14(I1jdb#kJAdopZ
z3Wa<?O2nU|>e@L*=EXujPLBZh(g<LanQopSrOuc}4V3J865j5>k@!Y3xE0IEu!WX9
z6lpa2JC<m{n3kQ<lCc;CY{kZjUg_+Kj7U(ous9l@sp|O>_iUQDx+nT6EyE?y{s`cU
z$GG!EW21b$w1hV4wYj*_#QZOjHOQ=eMfo=IyFjmVmO(?4E%g69GhtI5X!%Bjo^->(
zz)>%RWkv%8m_!0teI3z~FuRr_o9qsl7YOtotej@Hl}YfjsDyXBx&vUqM<z@7m}{ai
zfpCY(c>WXmxRy)jtK$G<)BGuw@43OeundjbFI75AOG^Or-5$v*`cUk035;JFti%JZ
z&*zoh-_ZfGv=VTaNqcw}LgK@$6!IYWHobZYie)GLC6BV9*c9_UkF^ivSo#JL-*S7S
zJEq8okC78`LJbWstV%CyEesJO{StPYfvUlPcPO&i!NP;-vNL69C^E%t`vtP7v*s@>
zp}NauoRSv1MWQv#Zae<ps%iIq0y!RcgFAf|kEKbzYU`Q~q@BG1rf*QgiAI0L9-}-%
zPmq{zQw^xwz*~u!Qk-mi_?c8#J+Xg?%mi<(Z*7FA*NBrc$EAE9*DRKlKa9RU<2a}V
zO{~OH7|^UuMP3OW<0-C9o2^MLRQdra2flN!t=dVtID&{(Ea1x&<$3wt)83z&o$77)
zfKp@C6qXf(+J)g1!(E*RgWYXwL}{(ItXHah-leR)gm+6Fg^$PaOzEa_Sfi%ZLriF^
z-lq5+9$iQn3eaIDA63W9$II3pkB)Y>PFxEW-CEhQVb}ccD#yffpn*X9HN1Civ5>kk
z$wKuTiAS{CO@Q<}2=h1=n%Z$KBD=iQORX(fKW+#;02`l6lqhgADNSDQc<p59%9%V~
zqZ(`W;%S4C45##TOzzgb0ID7EcrTqOz|4oL=rS1f!d46U=<p`Ztsbs1nl%ddlNCuV
zkt?xgCud~%MokGlyqWx?2RD<aBRYXz3$nmM_MgUuADmk(^qT4k#?RLb9%fYCy5bj`
zKV*`Qhn)|RBtj5yG8kr@&Rhd)J}9UoI9UhCofYe=*?OffxuIKcSqH^cUmxwiDE{vQ
z1%HD3NG>*}$gKh;p2nL~a^q;Ru~5cK%@TJ-i<+lmr05Q9VC{eg=H01;t*&mz6;C>L
z9FM4)v*b>A;}3l7CZjz5q*Pd%8aZ!OSgNe=PRv7gr78WG&InvQ%nMIj{nxgr)d?B1
z>NP_*#hN(-RfqmmrFo;*FT;)LfRO!B$O5Kj`WS~q23jc_0GuWF@w+PIf9@U*e;f{o
zoi4!K(CUrONOCBP@{@ir4Lj^AxSi^tAr~ip;KVy#Z-46aE-#2EFNBEb&{im}+ueAI
z1OItIR%jHcWsq>0e}wm&B}AKBQ}yWU!ptp~hP;9qKZ;h4KuZ5xoR@+JAD<39@M2x$
z)Ky>f1RFfgR8JCAB6jb89MTavsm^5Ugs_)knf93CP(}}QVY5As-*k_jYL9>TRKYX{
zoL@t(1k0Ci>I;YNP9~-~(3Pzrl5!n^iNS93523MOADPBML-~L+R;m{5M6=P?3UoyG
zRoBa%_Lm1}>TKD<yMME=uqYP`N6>+70P)yH=qYYypvB8!NMi!fsLhiT604~YbweRW
zOd{yh%)1*H_(Vqo?UzVbwO@{B^WDGuC=vYJWJHHU?L9+?HUja%d@mPY_SSv}Uy{{~
zDo|odx2H>l%~le)^N%6?2)CA~x&GMl=;8_6{fCQv;inD8cZ#1aCi2-z-xlR#qB@SL
zT&1a6rS0zm?JeS}vcWLg<Z~O6&~9IG5D0yBC=xoKoi4lK;4@NsvvNF>Fm4|#?HXiE
z`V4cD9d!?!#FWMxVd!~mna_qU<bl@%%5R3AmNL{KPA=vk3GK;x8x(H?aH4T?oW#7-
zas=|=60D^g1A*S)mFBR@dmGuCTMymp@Y-JG{X@JXUqK8O_RVzL<(bVELYrT3kusT%
zgF|aC8SN?VzQ*!il#%g!e%ynTL`5q|ldO@(S!CyVGLy)_5HL;2JP#`{5$86}o`qD!
z{WsYce$rHZ=?OD_=!Au%l>W?4x}~Ev_id%6vg@;39x;O;O|FLiSjaGcbN9SH)@3nn
z&+Ca|ey8<iHe7gzLxrW{Obn#^c*E{$G+c@+XVgM`0|<Va$uDI-GEHu+BD%X58q9mX
z2j>Q|%V`Hnrb2E;Bop*r%KU~;1Kg#>YLY-wy%|NP0B(SpI>+>ztA0)bPo5WFX#18E
zMQZTDSw3><ihvwLM0YNBT8=|yMAGu4HMjT%0(91V$B=IdPaex@zH#L2&A{viR0Lsc
zWsB?$cVPDW?rEtFVaITuY%JG}JUA~z&QPc7x;KpZKCvD6@BQv3$|w#oQjanSF}VA6
z_?fNrp-osxxZ%+mbz_6O3;Q<dio}jq0f0?Z0RWdr?5a1oJ`-)^no5qAd1oPnjyy_*
z>L)Wi61FMyiC1FfQ-dS5EY<yq1_Yh*_VRROPC(h<W-Ftjf$L1kLE-n(N9t6;a_7(V
z1O$B0XX1(#%}qd&$03uEKtK^kYbiFn(dD#V$#6>i?%I*OfL{Ql2ajG&*Km6N;AQK`
z!iLU+;qH0swREo%W?yCJgioTc(q%2uFGXTS9tHXhoJ=C_EbEY$+Kv9Bodjx4`VusL
zb!#wys8qqbM@W5WU^x`t_1fxzFbnCU!6TE9Q5O;XV$N5f=>~`au<0)iR&TYO92Q?I
zz#jO%wrg(6nZnwyCQpTV-5<fO_u0zH>&TwIzgC59OO#w$uQqT0J2=klH|xljv^~sk
zGPN3eGvSM)RI5{)wobOR%(6Ram9K168dgDvZ15PUBY*XgF78uVx{#Ncs;QHrLB!lF
z`R$t}zngJwdA99p$i;}ic3c@0zGTBGvXR!2s+;ZWmNkwa+*X!hz8;ym;`ve=;zXVl
z%z|nO;9Kyx+7}|TKgVv9tp5IV-*RbqblTI=9b&b^B5Ulm8&qxi@#6c>&m|`*mp$IQ
zzAwZC$I(9HZ_Oul{~N2@s)Qe=-?m;X0@T6=Bjk{KFm5U4O3#OA%LYHG2W0|*2NAs}
zYdMWCJyn8A_K<U<iG<U&NiTbA1FQCS1&Le-O0LiO3p}BdjEZhj?C{2jlbNkTI=!;g
z*|3hm+$LG5f5yyO8THoEQ3Ez`cZ&wx+*8tHAM-?a*<Ol8M^)7yo1U>i`>H{i-Ml`1
zcD2<@2@wiQA9ml<o#Hs+ZxCx8cAUL*IjESK4S(doFlovpzUEW;XwxT)_WsC^AGEN&
zt4=cq`A=_TQ{};D#FKw77-wS|-mQEl+05~>l~$kBUFf{!o{Bx2U@WrzC4Ga%t9N^5
z*5-_?m9GA6Sk1yB^A@;#0?h$H8$kIKNhr(A<q9MD%*xVffQhl!sYx_vtQyv8ufS;s
zOJ%A|GJ3>0pmD)RL_&YtP#kne59_Kj%*0Mao~9nIkI`t>E{^>AZ;(uJ*Z<3lgrAkm
zojEgsgAqtsNegA8jt(EI08k%DIf&EhbfC_P%-bM+&C7_26Z6vatjsl^;A|+GW=(_n
zcaY21m9C24mVA0Lb%({}Mn^t(CzEo!@jF||v*UOTlUH^SbGYi5cRfu?Hd5-O?9Xd5
zSAeKog}|qNIVz{@*+zGlm{YHxXWZle3XAc$ze9FFM`sPk%N(e-NmC=m1L9)KxjzB{
zy;P;tQd=#nxngmZep!DnTp&3=m-<3;{Kasc>p9{GQ)53)gY>DXH12hpk&SU|oiFSC
z^U$@#%V+Y(SDiEt$_I7pWSXP<a(|^H$}x}P<ys%VRVQyR2{ewHUhjDQ#^lo%ENCJ^
z!Q|>8)hgva&3i$cVR^+4*CuB+#`fUL5?5QILyak@N;WSz16>vcHM|#um_Z+h)+CaK
zkQa&<zc97aCk=k-aN?H8Os+_;dcM3Ghx#{AQD(gjyn$D>)js*-(+6G(K`zX--=`9V
z27a+pH5&b3GXH~H6t#=S0(+&e)-+Z9#ni?Fy%$zat;`qS8=OlpC$Xv~T1;&ol##^;
z5*0mqOg-<MPvtzpD4`yChw%ein%{ki_K9!Iw0@hH6O-)cEf2{C24A+P<F<ONymAob
zr!Ft_7n<!^X=twALOhu4!<ug&oHkHPFzP<iz~#ydc0^uHPt@eTvK5Ja4evDfhU&l8
z3x)r3AWFVo+ms;hJ4j8RF!Z<uqy|At-v$1~FyS6yHd0`KJ96VFPPBE#apg#F#<_PJ
zqnh=6=_;&MogDj0+~fuAaZI1|&bxxCBxB3r)G#r+xSRO#i7cjEeog#i$n08&IS+=*
zS&oA!Zz-;b(dPgM#~1=F<a%R|puHS_R+>f_6KeA+V)wup)`j|(GBeShTdl;)ivTN$
z4{7*pL<O1}+9=FTLho-V!iyj9^PTo5Dl@L(ZO6VYEp#>xob-tQMwI78&CEfqpA?lz
zDs1APj#hklJ|UR=5}@@0VY?TJzO?eXRY(qv1GeJMLEHo}jaSQe6cah~LP=;45FRKc
z@ml9@v}NHSik?@uc{hf%g5TE1jTRPEE3$`O=uv&!tcnwYvB8e!v-5hY7Bhob??aLM
zQKDu~#{A4(mFsZ(*s;_2t4e{YbC<as29-whfOV2bUF2n)hK%X5z}C47sKbz$zpL?C
zt@a&%VD(kiO-&B^W*QZ)=jd`&&DP8vao6gxXJ?%&f}3>`O?a&egT<5Gli~+2E9&#-
z!|*9KC%R?Sv|6cfoAZCSxmCQ}DmB>)K5aUmz0PKu4F1RX*Wc+WUhHJVoEH(8B-5#X
zg5@`m#tt!auPquFjqS}+3wioGJp>0Jr(Gj@RmrUIaU)ErjzrMoK_T2#^<!oCd_KkY
zgX`(2X*r`LqEuv|AnZuG<lgy0=hgbprq5G|&|2xg0+=wXH*Nb^bN9JU9s*ik`8fae
zEG`8Jc;{vW2v9MPbkgvwM!5wDuwy?5MQJpDBTS?`j)8u+xW+QJw!AhJW1P*%-dazJ
znoeEpl7wm>VNII4kg(6%TZT^y^ejZ0qW66GWc0E&bv80lGD9=jH4G*oU6(qEwMJle
zgfktlZ&~%WjP%RVve_9s3zDIU_f?w;2PaLZ6Hnmz+Qz*_c@Mq)m@U&;8hX6g&{Wy-
z!HTMPQxG4&rkxbEWmkg$kzVIgwor$~-%ckfx>sfF)A=7LHtk_8ps2=^y<!U9Uk!bk
z?)xAwXlOIx)K#QW+ja>c5CO7+yPl$GD0i$*3u*pJ5_kipm_e_OcQi7<S1&43wrO|E
zY5inGW&I=;{K-tZiSpLo^4WL0o|>V1r-|$nl0Mlfn`k^48D2lpo^;C)5k(Dnq5fv%
z*atV8$|h-$Zn(OOHF5q}fhSci!YyOKArZ3fX(JKiwZQzygnx|h^8+OSCcWbA(K>i+
zYVbE6)rRh3%3>hf)&KFGw{Y<YrGZr{Gl(hH!c*EMv{wYf?{DSYx)s^xA{Z)pT4!N5
z1LvduB@2p0M?*1gFO*5R9^j_Gc9%|g<L7zsm7Iqoj?F@_2#Y=#Hf;m_-R^)8`}IL;
zDMM<oqS0M7CUq@zDe$>zE0~lHcEu4<Bcuo062Ce`P=*KQ5uExdY_{~1(eK(+=*R~|
zn(%DK!OscP#zL_pNI6N0qrw{3dFYmphksmS%v91jTvt8Rk)*YCFf7cTW`b`6w0wrT
zT)FI@2kXT+0u7)^>n6r`y7yzns`&fxAz3qiaDFv?wwU_W#F=zQM~14MMh;*G6g(Lp
zNO=HT-eZiR(oXFpA8%uY){D;;^$nW8nurH3-<dnadKU2d*3+RhKmRp@dC00*@<1>k
zVV(FwXfx87<NwNcWANX~Ie~*zq_tSOQqbV3#NPVjN581ql%5;`F^&>jdrU^o>0pjc
zOBe@Ms#3nQyVy~NZ;OU->#W$_wb;R)7eoYR+om}CEzu&!DnM)&y0V~jQD&__wBS_&
zr}8d9zG)>Pt}OmGC`*93>z{W}MFZ@Ej>~>9R6a_yWwot`^n6DBmo53b{knIngvLYn
zQ9(%0h>owB0C{>>B@;PWI_}YD#Dn@q!glvt=eOu!V_g+BOR8`4<89ah%g3gT^E_{(
z3XhgKLqcNo<iqnXg2~a362)+$pzp_Y9D@`lITY<zcl9!D!f`Ngv&sj~t<zU%krB72
z8=O>Qm_~aqXK8vKagWYuy-1HvAxW~gAee;-?&xxLvF4|TuF^Pt(t^+i>nY{ALcia#
z50ISDTUlXz-!Nx+S!Gw7>e!SUz<+h<)!JvrRD!mYHOkJzkN}Pkc3tWD{#aU7z;G)M
z{p9_X1r8021$5o2tzeG*A^SS=m8%plP2lXb`DB=b@U%5|u>-<$$HgWlRnc+%S?s#T
zDAX1^T<W!ja~t)uVol&X9T5?MkM~zpk10z_k4Lm<{l-z~c5`hru?~D?Nw%eQ?B$@_
zX*oDwGDIvVmjNE~aA{B`vbH2Sb9B!u&+X~jUK40#?Fi0ujs615A~ImUd{K^N$jeL=
zV4(X(i^*T}%<FjG)7?UQasL^~iBY*`#yErWD8tZUk7HidTfLcvz2u{qchQNjtG$2e
z=ST^+y$}x3psVXB`uulhhg!#*ThWJZjjl#K9Us<defQPx-zf9W4#3~1k<Ea+5}QCV
z^p-^kPtw#x-SLZP8xFvq8ig#jU(^^877~!425zZqMHGgn3Or$jI8b*DK29=*v2S3N
zDLxxp8Nh=%0bvnQ!QtS6Gi&6qTBFt6<CuY%`Bi?)*=^FTPBHTs?AG4R?8@{XR(d|y
z1l%ucKeh5#6Ofl<507hV6LQ}b&L|2m-xFi+@``8tbn?vXY#W0%vq9Wg#~!c6>TwwT
zHYMp=Ck3s2eQJlJC>Pg=LpIGD`b);{O|O^}l7h|`jxp(DebXN96=JLf_3+{D8S~oE
zty-R}!YyWjoywt%gJSA688wgHv-jVSwZc}_WU2Jg=jR+VI3U$-J<q%@rjPiAsgNHP
zg{3hO1FTy_l^_1^YN|i8<U4b6MQ%P6I?-!W^5x0+fycy@(V;}#A3=3AtXX4rk)!kE
zs@~eF^k6YjKFZm>ubm{YYSb%}tYER^ytjh7Cr}Z!5LseeEZFp1e-OUYxo^_FI@Kpp
zg&y*8)LEHpcq2Jx9-KRYN`io&nIS+Wy-ShDXqR{K_+!D}eQz3tZ|{Nz`nRIq%8a7K
zYTT-IlbUT~d*>cH@Kc^Kyznt-B%RYuQgmx194OgxuC-U>+Nx#0g#vZjFI7%K&k5#w
zHZv=v6uum%PcrH2ZkM%IFlZ~Y3vz{byOVJ7j4{W_KI+j)8)URs$t4%PmWDK6*#R=2
zrww^I!^TV6xOmZ3o_n)M2XhOTR@$bZ7X{*OQBqYraa9T>S0A3!OvAjP?8RS7nCrf0
z=|q5a>}O&hc$qP)#>>9B?=FBn(9^a`kQ!A(Og0dPt}jUg6)SsAotT{+`|X=1xv1w?
zhk%3Cp&RJ4c8RWOtLwb)C1`yBIZ)pCqT&PEn|eMQd32(j-uA6CCw90rt<gzaR;sLG
z0fj7$Uz^T-e*^=*_<DkEE3-cT)W{(2xqrD*0`{sX11LB*#t)OmN6)1XsM*j@2}Br8
zLk#&j@3w8lMN~6AFcY1^Nq#Wcp5<Ua{7sj(G-U<*rI;#BWjFE?S-p6~zjdIa_!nH1
zrf{*Gktc@Hl+m2gGUYeE@=Q&EOI<7o8WqSp?R>5;!|K8S)piT#MGk46K=NX*DXEn6
zuwd5PVvfy{tP?}U2?v$Ev}_J46Z!n^3aNe$9GcoMvEOo^W_CRDwPG(-*d@O0w$fgx
zNM|rORj|$oW3*!QVr;S6EaS{3;xEz;UWunCV2l$CeF%^6luUS3kO>c=VhX;UAni8!
z^Q<SidWR-3etnLsu`rvld@kz+FlXJHxS%<C^Zg4m_ChPyZ%ig>WaqFx^7uMKBa9E-
zm`CT$Pr;hP8|g}`*1Y9q3vxl1TOuCY-JsG0+)eLSi~FyPAa($O`bM0pe@07NTLCPC
zBNr)CoRW-t4(V+5-Ji{MSd-6PNKBtGfo)%yVWg8(J<v1Df*`JIxzkmzlTsd$gna}n
zs&z6XS&Psg9!{j(jE|xE-N#FhE^eq5QL1+v=9Io)A+P>^KCxP)TK3~RzlX>UZmWy4
znG9b7pR^;7$->)hNkhZon+eBN32n?>S{bw~2%Jjti_8WG)et7Jxrx81fe&H3*TPqJ
zuKsyli;ba-Ruj@e8e=uT!yH6nEy-S?6vl_HsS3Zoo|i`bE5v|LxN&5q{OsfltcGsk
zCb4Po%2tRwlcz<$-%zyghG*uvx_r+m(I1cj8GSYMdyYdhUmLDghn+@5+3Y@^p*Sy@
z4%T2NMV@OE!4f~*fxS!2+!cEMg}izTl$;C$GTgr(XZ>jXbl-}ED?x|W3Ij?%%g2pM
zLjO8#(vxjZm(kmaB2I%gj=#`zuYJn!AgwwYE>k8nfvlaL4v6dUn->*D{e)lIXQ`*Y
z6Jjb<$RSitfXbG#^>Un35g|0Glc76xT_k$$1zFwt6jTnSLX{!|jl-p-B|ADidYtMI
z#yCcOMps4yQZmEX4GkJD{BT!BYU<m2dwWy$&QySZuYrG&s;5983dDtE_FbIl6d03g
zU{2?rdwX!IN%GnG>nji1;+p`(DndpfUru+<!_S*=&Oj@|zPCx~ew3I%Jli`)PRbPh
zR}@0e4sHeJ{$4UM<)h5ja^p2%^>u2Uqo<hPNDWt%SzF2^q@T)I=gEdXM}a(c8~Unr
zQ7HS7$+WOSVdk>+IqB7$RNQje$KEpwoK*@&SyRieq7L8VceALASYN%ApMXS)Jv$I;
z<5GRBJfjw}5n?&<D^@p}$ER?q^Y%L5vAE;k?I^Ch*CM4B-h8j_F1otJ-RWhrnz5Ja
zr=v9Y^>kveBCp@fCK#mzMD<+14zdPg7KM`6-Vbtdw0U)IRy`i9I!!lR&I)evU7z1I
z69gcsfDTfROQqUpPQq_5W_44&L^T*^z0D2txK~Dz7(H-y(DE7Ce|zFH++N3TXWG#s
zTv#EQes3bWuh)VD;H3j6*9cO`gsdL^Agp|_f>j;%#Nj2-Y9H)XmaK-_w#{sn{IIeo
z!?x9_F_~AjXyGgWia>+4FUC|f_rp*Z%P<y$nY5?H*w+kSK$kjT?FX_@K`$Sn{#g@0
z_fgLbykc57OL?;y$}|vIuJAi|m!}I}l0u@;#Vgl|1QmoEA5N)SS&VsnwqCH$E<}n8
z7a+-u#`nH{yR+Fherax>psOCuU~PaGzP2PTQh+r0F$V1ect>NS{~_wDqoQixXf0Gg
zKuKvCW=KWp27y6_p+R~80qF)o8fk~_k`NfWyFqdU1f)}H2<h&+2fyFF_b=DCmdkI>
zIq&<#e)h9>kWsfPQ@$k%l6&7Xpuy@rspl{~R?9|g{^Lg#il;}TlP-9q(y_okTj_X(
z-qK>mwHaTI4NEaaly@p?uq+SmvXx4C=em!>x9wl~;w7q*wT>Sd*#4r=l81JGoLb6G
z=o){F(g|x2ah_w3yk};b&2QZwzPuT(5yI()O1MrgL)V{}%lrdk0r^X?d}KL&20}+F
zTB`r6kO&QDxUhDjbQ`do@pLN~k9qbXUKc9`EglIigSN@{*oF35FIl!~lxF8bFsp=`
z8i5hanT<9sI(T}K$IFd>V6Z9EA=G*CVsPq1Z+bvwLGy|E6eTI=O{xWwJYMi?AO@j9
z*}s|CTrdNpr%_qj6TXp5O>ECAWbtc}?L(7XRTOU0N`33I!>`PsvvMlldBP@P_lar1
z#G1#g<R!a!FmFynMSe((#ZM<<If7Ib_%H3i)ejS09GuUA)-wjCAhZX4wJ`JyuzoxZ
z>=xImFb=&1IjIJp5F&RurLtNmD2EGnuX{LvW_kKoXZvRSMK;hW%bbK4^+hh43-J{E
z{7A=se{CE<7}pmKUdrr)(A4H*ceil#9)~ORx7q+#qA<1U(U2j(WxBmk<Wh`Ovcgy8
zFuQjr#3~e9Lt<;rb^*8*$FZ3#wg!x)9h7ZJDEOrroQ;hp!g^(w{Q_qvdP^infufiy
zO8<e%yS$cuOD63XI;`IBStn>$kL4t0jyWDA9mE%t{|mT-=?mxx_dAc;HTkJ^s3e1b
zDu0fV{?*n4=#K;QXg^cYH}vzPiCD(A@xF&to9bM8iV-t!z?2egi@sIUHZ*aeGUrB%
zL3cH|Td!O6AFtx|u#<CMv=J@Ze@|JSwtjAI)jP|^`DvRPBW|2`bh8+uLsIL2;(q;X
z&d`kCbGcd*9%8g|&Br`Y>A&2Wyp<8Lz=0@fJ^_XIvFS;%w>#nMst5T5eXmpU_>kPY
zIaeptJ8mUY6J{m#E;iE0J!Ol_3cu!?)ki&{(H}g57k|iK;{Cj)t{Jtm_9R$7>r0lk
z{Cu(u$==lZc*CN_#z#Be*IvPn0OkFWKz5uV`vo=%wT80jJI_|r!h!9>+pQ#^cB%UB
zgUS*zM}ZU`Q*r{aNB7zFo0pHme?>qA$f?-!yM`Tt?WTUboVj)p$)?$T(MxR^85nl<
zVQAxEzevm>2&EhJ^FyMjrw1emR=zyQ30$$Z>oF<;V*YnO`K$Lfwuy!EYMnpScN609
zD8Y9RE==_5>?Xf|N*=uW>qLKYGX2$~{N*%>FXwOiWW3G;D??mxLo(gC1C7_qM;A+*
zB4*Fa(@|pNIz|7q9+3FhURyzlslDA9?e~m|Byu|pN(r9FNE2Hmb4t^W8c^P%CfK7t
zhJ0gdjrc0wm=hec$O|Pe`WnsBkneE#EENM~em||})d88y*Xea0P4?qQSC>IATnm|6
z0p1t(;tX3S{A9V4oA-SIQKPdy9H6sC`cA*o5?|jQtTSeV#D!1CW7?@RUz%Yo)m6aC
zp$U@)Nb-LFj%8i|I|sn+-f7U^Gv>3O_`M|n^R!X8<?-i`U))<&7t3=8IAwH`7S%4}
zraff=H3h|`o!V+<-?ImR5o@i*`}Uf2)6`PQp;9~}ro!BdHI2dQbO0@oO#aLS=$rhK
zs<gwr1FTr7Sk(%DOjTKwxf~eN>)gtPa4IMR1S%sb!&wX2iRp=ID}XIF@!`QxxlwNj
zba4aFQDS0ai@RlAP`r8(Y1wnDKGq!!z$6hG23MXzW8NMqS~$P>H`_1UX}}~{c0Nef
zqqc!xSK}n#EXm>6I8Qsv^iO(OEB1diNxG15dJ8$92P0I(w|VswC6G%9UJfRR{6><`
zHz}h;4j(!16Wp7GZ#Eps6!y*ie<Op28_M46Cq2`!=^sF+yQfXwbZo`FU36l4nzGU5
zs&U|#m2r`uA;4KDPx=q@6(GKJ#DqM^yHgGQN|YmuTrQO)Y{`)oAWVHN-N675(JKk~
zBCflm3^;2Q=zf$0t>7KAt|l4qL|*NsT=hQ*`MDdg5%O(-%G=yh;bieF@64D|eaz1K
zRA3cC(K2cUpSAO_W-NI5;Q_9{s=m?BnbN%#eUI|-kN0$1qg)o8@U->Jr($%eer(Z)
z-=tRH#R#5+IVK`MW817GN;^9G{k1=S1QCxn>Vz@x1G&)(Fa-ioez{UE8el9*M!0`f
z>+znA&7@k5ev0H36B{tz@m&rKmwzK@WWsO#9FBbN<|5hKMUt#;;mi|I_?mM(&ooW(
zyR#4tF){HAK#%t^eVltHRO{C0Bb5W0HP2)?B~#k;q~9BA_mP$WGCAAi7MYlcEHCFc
zz48PyXa@5jz#z2^_Kr~9mak;nbP(AbrqCIXG3mdySE=6k6cmvfr>ICp8N*JD%Nz2u
zLkCkXw-Wh`YeDwK>b_%VNxfZa%BPNoLVj&ZT-qfAN(#4P&p+)`ye%ys6$NM#lMQ?R
zlx?*j%NyGSR)4|HKbW;*$G@=rPu1ho^HV)T(l1R59M+NLP$j|5Ykj@40mS9gh0XVa
z3;!yYQqGE=kM>-jp6U*smUc?bjY8g4?yiaAME(2@?P0^6kLV4=dc?BVHsT&l{Z9Im
zP@PG+cfd-*W@@aIkg;HLZXARK5X*~HTSCWGvP6e|Lgyw^lo{3(%&ijw;-m~R$Vr(<
zLgp#A{wtLSiobwWs{}(#IhshY`a`{mEL-;WOWyL}1M&o(i~L9(iXXF<X_1DA6&5Ky
z9+b{t+v7sI$-h<Q#Oc7|F80E885@0DaxaS(<IBhx-*n3NQ^if<-irrkidtIc9dJO;
z`Bo7e5LPE&Xq!Lz1v3wCt)4~$cZ_s%wrTojd1Ir{`~TVvxlqzL7|3ZNX`5SlN&Qc>
zov}jDL&?eydG*5$jNc0BJ-H7EBsGhh=Xv_qV|~KoNV)2v6rGDGY9qb|0?xD~r{dZh
zz<`KHua63@6sM%Iw?XsrQ9@9&MKGmD@&8C_)IRV#7xYVmNspy7az!W9L-3M!zbP;X
z3f3S?E#FCnh4}y#hZU_z<cOOQGVu{o^EuUsdL?3pj|&|WWq4L^Dz?|AZ2jxy;#n!D
zO)@Z$qx#Cb+#0Z)ur&eM|K%jL^qkJ<;buEzA$e=jeulTiKcJb6+&%oFG~Th9_SL2#
z>JCN#UFq_X&6+yZcO!5Kx)m5u-Af)%@U!bk!l88WYb>&odDNo1(}OQwwNiJtaksvv
z7Zh}ig@q$C#ZHNIc%THfYyJ+nu9K&a%=$WrOwQ4YxKG5CIn*H-aFJP?K4KdcfLNFt
zd~b^Yb8Dli36f4%9HF+^YUdT@`@*gbiR?f|ZsE^oKTG7c_qK;BeNHx|ElVq*P1VnT
z!Szst?<Abxg|9*i?#zbDMk8q?UOwo(bDjQ~<yzFu<nD5pWAjd>zWi|ILI8g?(W6Z+
z$0+e6jvDDHE;FyK7HRVP#sNCh7RJV5hK$C#ob4Q(zLi5hr&nnwVaBfp%rz|rPm&L4
zCWlPt%~8~Uq~@9qMyS-f)ah%VQ%AwTbcG8S1vA>xnYhm~!I71(ECu1U&>e*I*4gG_
z$rT`T@#mxcG^}T%q@}po@}QSD)3f{eU2$n})C)fmDz+{30sK7)TAdMIFOcl8TDOPw
zDuBZ`V--tuz~+@Zewqa$r&-skI5T_jM23jj%Inv2w&5`&k9H5w=0p$c?HS7f&$EDm
zv)N5TZUl{2<jI@@%ln3=-@lx|0JZv63unc1i-D0gX0P>jeBG9Ez*`(iA{`qWo39*r
z0G5O^g#m_cu}l?OMW&{visReo+znAMZ0=f5XBIZ<2tS!e5E*b(9LEdnaeSH9WXvci
z(obH=<TGZxH)!;!SqzbDY!J#~KlYiX^Glvb7X4b&+=!2Mp+p|ps|Bl+<ILFZ6a9tf
z=cmb%co)y%|Gh2C^riV-NA%_6XVT~l8NO;WB|+%W?Ir=V9tvz?C46T9uaMc`KWcl8
zIxnGUCy9jlJe{&FPDHx(olY&SEc-x#VKK_tPB}g4KC-Eas`qMit<Z<rw7hU>F_5F=
zGlFgw@ji%J#6b;v!B;o3!$K2>RCnCIwg!e1jzo{~`K2h7JZYILEU}$G8&(r?X$#uU
z0TW8gEL<#24y(OntD*0Br$yNI#IpoBZPF%TXuli#Z0e0}RB^8`v14Y%UTbzWff+hW
zM5egY(9ps5<ZB_rM$7{dOOxu8?O(qeig^UUkuY(Mwi?nvUCdKUWe?(szwOi1cOr(n
z7PfR<mSY*(AcO~LH<waZZIMKT2jkx^ebz5}yKJGiCxXXFjm(p)2C8bD3x9$Hiyt5m
zcT=hLzN7-XmhJpnB!r2z1BIw4o<}j@_u`XMkuf@xajcSbBfksQm^Ds)b74=y`<NoW
zM!`nq-MO=96d<FR#E(emkn*X>T8eTwL=_+SaXFKzy1{7l@_g|#&DwYg7wLK~OA|E`
z)$y7w#zm^))19;!=DIzS{_Z7{l&Bvo{R^7T_U>%`u@fP$rGB&jd%g*!`!C3Uh}>y#
zM+JgQC%3FHPj-@3UhVDozUB>zJK7khXJmW?kem5FZ&URr^AnA^09H>F;h{Gx&Kt?7
zn%rC%66_J;h#?!X6}x?Iwo8r42*qHL=-}NM=ORLB5VFHIq25Lo<1Q%aY@$gXw!)Kp
z@*@#MshiSz(DJ?80o;lQyv7s9*xY<8ZM5Ihr01(wAu(KmQ7~2c#)$WUG}w-R6PY4m
zS~zozO;PKmC}nWeZx^^Z;<WWroZF9Vb+hg>3dQO$zAGz46&<Q-Vm`%%(n+60lI5)A
zt&)#Ju-&)G6SG(%n|W)VuJ8mk2O|gRkWj+5haT6N!?Qu;aQw{EhzC3|pNOTU@BHc_
z>%eV6oxxGdz3~{p=7i6A_XWV=4{UNf$?rg;1C2ZZRwyscwBSyoFQB)C=|B>}6cp4A
ziyfRBY>VF!BEgT-WqjLxuhUcu@SQx0sgU5Iw)IRKS=O#RamxKZ`6FCdl+xOd>E520
zw?-sUdoEG)tNi_r+<8wq@yEEDt$m)Ze}zWDrpSQr`(oj!E$|zQ?Hp6lL2}C9sA62B
zKkDy{7q(&{rl##xQ)44qLKMC03BMRNq8^C26DTrVx#;AbZ_}FpcST>$cZ#h3<^LNi
z1&UzPJ**ZPl$DH90=+`iJ_Xh-euPmAmi~XPyOKEaUKf*@z&DGM=4|%*QiEDyO!*ex
z$+$YG>1a%QqS>QC>twRRL`hNcOHxu&*WOtBv)emepUhIaa8VJwS6D-&1AJ~F&gQqO
zFH)FF)B6{^J6F0QXC7WUX_BWJRRyQ5!o(TfLz_i&9%!qqPaoo{i#_H6MS`P_C4s~T
zb1o`f55Xb;kPYf~&e-{gPgd5naY#nA5q;B7)QZF**|$GoNv>qsG;e^__#`Mtu@vFy
z3_nPwPn+9bon({l^sdDx7!cVa0?E#?X8B#6&SBv0PF&U~XE)L>-Mi<{Awz(ITuev$
z+YDI7SAM6>=kh56qaSl?`&W8ci%n<P9FA1g^H|cO85Q!k%0NA*$;T^yKF?VpZl-No
zioz^_3}8+P_>#RztQ744MM6Q?;xFv#gcH0_4`0i(0iPauTAJ_QKI!51jvZK)4pGl0
z<;IUUMyL^LDU}TSiC<b-VGZ>dd4lN<pCN$^^BVZAZ&eT&=uWpwt(9qZeh2W#+f<Q&
zqz?+?HOyl$n9-@x==_ZI^-573B$!P9IwQ;3Vg*}>BtE!7>LagaAj(3#RVuyyxDW#N
z3NiZc;RANk4ekWGLj%CI=`ap_t5w#>mHw0hFd=IMQv{Pe-yx;HjHhRF{wy}MxNdzN
z_dyg}<gLq3TwFk5;Y)5_6_c8?60fTQyDP8Lc3KM70;YoUiV7tiouU;<;28;}pWZ``
zZnuhx7F%wjxSeL;;7C$6@DWvx|4keYY8N}O%FRxhu4{+8x711eCp{1X%=Ca)<=q9W
zmhV=>XE>uqVRC|F5N|xlkO%$n-s+ykKjF+oA?ZKsi2^Q!iwtt@<5D~5l=ceSco-@;
zPB6eIV|)n#j+qFtiH`X3Hv;(Q=x|FE;CHC@=sCcxNE^wh5*P;@jE^NX*oFhfK}AIo
zs+P5<&%Gp-d27Fx6`#L#rbe#>%F51W@xJvU1BRbfIv9uPXuzGV)b6SfzNqLF0z(~q
zg%bMxXg||$W^Z~bj9$f@VQ(tN!+?O(H%t|0tM$w&`;78Z<Ei+gNEo5?1&C1kFOHMZ
z$iiOPWUZCP!)=O4=C!t&^p!u-?Q;x;?SNk`yVW|eV}Z%}2y+6T(Zgnv3cXhYbYmeK
z5f4PD`Xg(+5Gp|eZl<2K6#oj4k9m9j-W_zCOs~P|v6wsSO(n5Ppt5_&41bB9+ds0J
zn|1LnRz3*`rWBMk!mT#;d)ZVR=+5Bae$@^*3UF0{L<m&q^gD8W`0=Id=;my|OYJ~d
zDGCV{2#0~i9>0{Yc{GflFz9ALmue*WE*T0OK&RB;;rySox@ti^Q@f1}gc<k$|FfBI
z(Ol{~BJ(@uBXpB}rG~icJe*0l$s+?=x~kYBYlRBh|Mw(&sgarquBBRdMzlfyg&yz%
zwhR1$^3Qi^-&nBTN^lYa58;4g$H%YsLTRZMkwS($uH#^Zsb-1@AzTA2yWrrp0}{t~
zySB|afKd)l@y%<mGhBRX0aRGH0|>}_Pl3Sd?cV}DN7v(wGRq)4w2{CmI8p>DdA=6X
zx-a$BlbrOy|NrIAEU)-AeJ{`-7kVW)->U|oEbO%@!9#w`oV$GqSLQBoMvMU1dmujG
z<NV-+Wil&%U;5_Pe|bS1A3xfuE4((sPmL++_|DG<yHRNio1cK)8GpW)RIF}HMgqYi
z?$kE?vZ+cSyM7RUW<1c^0sCrPTwI?tc5S@?XEQKi9?5NV_#n+(g%PX>+8wEN7m@*Z
zK`^j>gb7nr7uh_o4BW1G!uryb$S>k8I0`z{44l3Cpc!*U&pOoO8ob{3bvoEjq`y0C
z?7no*!XsRxWWN~QkCE?kgx&k5-L!hSqZa$U|5-h4;k!WKPCjOSd8hvjhLd^wyH6>$
zuzqiVq``Xn9YLt%<YWdyGr(Gw&wlA^QgB{IhB%(dxKb-UVV>2$^WI9kV*|_W435U#
zJFLx4sU!rlV^2DCoxAJ~(Mh8IXQ%CYg{SrR{@=@GL0Es7RpQ*HOv%dU;44f4@76hL
zkT!EP;t`tt@~pbFYA;VJlpvgNcYy^^^jIH1<D8*GG}-(Yom%hCSB57?_(?h4ab5?0
zV!t=47cfu*p|Z1iB4G_qTZG6F{M&bDx?t<_#wlL<TdpTiIg!8C7d(9aEquF7uKgm7
zV)~FjJu0V*gln4-Z~_U}EA;E}{KU1;d^1SetSg$V;&b}a<5*VgF*U%36HXycUF$yO
zr;#>&2i)XX;)E1uL(ON_)Jf?9RSi}N;NNHarLr@^LL^>hs-Vt-<tmoM?2X6=3^n`Q
z<VoHoas!g$(x&R$l>e?Mc)ruUTK$C*{JEq*xN`Uk1OwxMif@KwUaQ)Fy~jvLmyU!^
zHGD3Cp`2a-p;8>TpwE|=ES`m(a4Tim@;=;Gmk4LKs@vb$4E{_v(NzTScM(rx_BY3m
zQ;d~<E&KBQ#o17dICo3z-d=F5;$(Oj!_0~3R7O4%n(X^dHp|Ggpyw9jV;wQDG|FUP
zG<`fz!2QVCN@K|%Q{{YYNu4Ua+XEIwgRz@#j}sxO{!39+U$=Kgiz{?%`Mx^9M={f2
z*f#fto}VW;R|#cB+fhgTSeB8fnkL|lPp9iBI1U9CAEKTT#@y#)y2osZVU0BY><wM~
z?Rb7(QnzkiC9g)8BH~exgf2SqGe*Hs)pWN{8LT47)5zt&4<;B083^w=q*9<m^*uW3
zTa!$%`yE1r#Y3EsoLk|hxbs`t*paTRBMgFm<?Q(G8Nj`C9!j-An5g?XsO>qrx+dSC
znOd@G3&mWDaLtzS8_Q~mh0!{VSBBz7qFQji%1qSNf(5Yr5VpkgTy*6DT`trIn(-xF
z=)Aj&;?fw&T)1B_YTQ`g>$BPqS5>YBO7Y*L@5dW<GqJF0jez4g7N$x8JaAlkVy%M)
z%e7FmBeG+;g^R1A8wdxzWDj#N-FuTTrZVz59J;`N@xTZFQ9a)V32eHlCTcgR1R9hg
zNOp1WWn^*VB2Ja{Y+P(C9Ve%XD&1K$?6#)b!=NQWRsRYjf!%m#ivg{@HgM6sz?7xI
z1Z%^Cy`d5DUqbJF#Vc?xhg+-5_=VTUwOmiVu2mN>lH6>+1m0(+j=!p26KDV>pDbHM
z<NkI76?Cz=7hX&VxjQP~t<E0fZf>S`dXJgpD{}Z#>#h!Yf1H`+Cm{%*qHPu#ko$?A
z5N4P_jRUH@Z8{*OMj?k{e9;MnZw*=EZofOxtmaeQvn>#j=Q*&zOj8h>k9zYJ23|1O
zHM4&O$nXTe#vfzh4x!$O3X=jW|MgovNulRpw^z@i=n@(EuVGMJkaW-f{9N!EY=Ke_
zIpVdAu*Clk-H(Ni>pI}=9~?v`Cx-x9z30^ZVNt-pF%48YkJInJ2BUZK)Tm1aC&aF~
zu#_!nnnjwP3J!0?@PQztWN~Tbi+zwRXCsP0Zq|<8VVu#M_|!^JrcVWnd4`#TeUUnN
znOoEA`;hM_I}z?1%v(J9rRg{3CRIu8Jty3l7G{BSn|!E!-u*`o6z^3@Sgk`gHhO@N
za4N%Bb$eni5=-V@lg8x+iHSWX0f~X^V6}S1?3gVqhQ_8hm*SBf9$pTKYOx)d$b8iA
z(A)R%gEp{pJFg>!p3|;E9V~q>`Za!E2enlMtRw`f-m4-&K2Ephu3?70{Gd-qC?nB=
zgZwY;<;L8dAo%c&mYohe?G%o>=}!rU0JBia7syX%M)77oe|ri5*S*4}r&xs1ad8ZU
zdC|8a_;>5d?)+TZ`&|7d4P?i(Dg0zYNHtR28&$!bg+G_1<Y%&|5gQfGXs}Pwe&g`7
z!AACV+qpxPmMY<wEXKn8{46)iVXFtAKL)jF{;*dLxh%QZ7qakAr*3`DqVY!Dc!5)#
zBA#W0EEfykY%QgvFWOF+0uz(%N*@;EBktpft3PEXM7FmvlVhZYxOynkc5iH6y;<Nr
zxKCMpP*b!i<*;zwQZ?a6>!IZvk8h?b4T=)KEnR~povQBJl(2M>1)>VhBCW|;u%Xs8
zN#4_eS@TVM7TU2e#C0$n%&ilSa;P)2rP!uQ^yWv)+WJeMr2lud-o0A&+yx2((4HD$
z>Rv4DCRLD(2!ko(5uwQuWR7&l8YGF=D-NjO3^>{7RpeVcaiGZp<jzON#`3K`L-)Tz
z%_%{V59r=#SOSUE8nE8!Q)!tG&n~S<jKwW;leKjfm5)!U%ovCf7vf=1P$ez1?>ynZ
z6b&rKV2Ga-!a-E)*7Ga*T}Ko(qmzmsn)vFTCX(Q*UU6BM<SE&c$B%ZZm+B2GP7=)d
z83Ol<>`M4N`m8fIH+JJ59oJV<<Y7N3nqpgiV2AYEE*fHdsgGp-e%1n!tND}q7rk4c
z%I)l!Lo$#i;+5QG82^Cr_LX%nG(Hp}{N}&$2*sQTUUP4L1HNB_XQcyb5)#mT<#iAd
z!mttXiH(;)UfqH2>Z8(KS-b@YIm>^!^ZSqBlP5ML!H-e9;U&=XftkAJWVGRVz;+GA
zTja>>Zk@lse{No$_aEz>h^1%95uSe~2#nbwSKiSnj#AK&URa@PX(853@+YrZny5+8
z=B>ISA@rTg((7>aQXbv*sZd+`08?CuRh~Ng+KtI5Zl|A(e>4MYCB7}j$@!)|(|)wn
z!psQ&h_yW74+HmSf)iD*;%0Z5{r1!6HRx5{T3W5n*qwvQ<)m%S)hG_@%sMOb9UFxS
z<Lj{<o3zU<QKFwthoQ%==b{WE<8#dy@ASq#H*{glw-dnE63D~Lj(dd)rTIaeKvy{U
zB63zsF%)olX{%XXDggEbXl-7ycCANOO~hNHQ!9Ubw5g|_j<Wjt$69qLKa)f{^r8tk
zqU9`WrK$z+eTU1aVA@DnTW81G@e8(QoX;UYe}wuDy_bx-J&Ul1)>ghySF=xzTB$?b
zwfNGj_L%PgQI!XGgYadSiU{g|p^oWpX?XjHGb9S!Xjll%fCdGJqjOC9UzGR~B75r*
zY!F|q9&UA=Keby0#f{~A*MJ?#3szPcVA!s%KAvt4)O%JE04VYxfZELQuW;V?(Xf3O
zu3%yslJ!TWFLypQAH(^aXtAO)swm|MQG8MB{$%1kR^W8zO8oi8lsyFT$?gZ7QH_V4
z$~<^_8S`3}Me)Rr4HB@AbU4a&Jhx06Sg<w!_1Tz&zCb*hR)rv8R7hU$pjZO0Zp8y1
zf;}$B|8w<XyJE+1hQK;_`sh!5i9Flym7x9Yz-EOmj}-yF$}~^eu48uKzn=)69644(
zlEc^ecN!%_*qT$x(@Oevn(&@mhhGe=gY;TS{yL4c8?L^Zj_5tx=G9Z#2Hdc_PE%<w
zMdt!%KGU?z%zE5@$3Cg1z^+xpA1f@X5T?hi3`3Bi9n!?zt~PrF=Nqi}6Pb?Xt7u!z
zIq1wAKJs9BbBVvD=bRDUOrID37#Ux>dJbQiDI8*4JYvb`X3bg;axAJaarvn4K;>pz
zmRJ0F;Y!Y^)<{FZ`uRwugzjz8jAP9dp%Hr6n$0mH*tQ`t@~=B2qrQH3TKX9EHAo2*
z8Xm3=GMi20gl(Xp8FyG-zgBmkvMZ*?Nj^PwrsB7UBB?ORuv-oBu_A3dKpGe@(anc5
zRZJE_3C71~J)R;*1b`@$eo(4nGH4gP{(ZdQLk2{lV<iv&+VE`ZK_+&mle?om9nA^8
z{`goa1@ay!2Y&HHJ54bMj6Gf=s%CDN{%c*CFo1f->!OxQ>cEnzqV_{oosz}p0`uHH
z=Bm@t4CN|W-W?HTc}rNKYCFC?zf<xv_-hgMfvyg%BZ2Y*_oXoN_v3YT^}n;JqiYOu
zO=ix}@+1?xZA;>pAH}e%vqsZ98eTg(5y+EG4thCcY0VMM9suS#S$xUU^A!U$s93=_
zS06$Jx)=@mYmj!@=boigfhXY;nxXjuWQE5E7d9bzvv>}^+SH$=Lve3v%4M+ybxf52
z3%}wn@8pN0PKdAp%yB>Iq^iHtj<mmX)F||>rPSPbs#UwuO=C5cw(>@V>YC{c!7OP)
z@<g;|cuOJc$py`UuqeEU%~523hP(ld>PP2K9ay!R^Ij!PG<O{+4sp3}wTR|C#)fER
zeSh&F8Ws<0(X(vRmg%)~x%r6L7rV!H_U2i9W7-$ib4LB+K^Dh9G^VF#m$Uo*GT^z~
zx+oD0LV7kI{7hOb7y$2|6OZ!k7V*2}Qy|aUK1fSBVCFvo9SFy)l^iH^DkrW*8n0>W
zlW^4WYFDdSt^NlVVBtDABxtt*{~yrXCh0#;<uXh6yV_YY3Vb=-Ck49d)kbmwsfe>b
zxm5(7EDuASpS!Bcb>wFN=I;x;3+?cyd&hqVGv&ZTfMjVb3@H0w0}!e2%nahas%m<A
zIsk~${%d7Ee0Bk<6%yC5gZ>*%9@qWT1O&t}sBg+-AV`H&h%yJy&ID1NCG@O)VQ~Lh
znrg|ILl}p-vbUD#unF8d$p)zkpG#ErJCm}A`I26ke)-**iHl$VL`_DK>B$5FnbT!<
zaXRDY{!&OSb7i-?$mx6Qf>OJK()n)Pq$>VLHG!BXOV<u*T|fc0(Nko<D7n+Td$h%W
zeQ6k@yW^$hy`<a_#g8BxH!L2%E*{~ZNpSiRvbwlGcv1m}v}z2Bv9}qq7P2{dNIt9M
zY{CbSE=8->Ey|j#9dsrju60-|<bG;~rQEZ*?p(_@XG=T8O2w4Nf5W>_fzleyMzmbl
zD{Yp_F?;8)&-~0EO4YL-y~f|2(RFY0S;g>qsm@RBU2df2Y-_vEWK4x9=l3s&Ic41^
zCz(1wEfAd@K*uMS=9+`%4th^6=dZ6#t)DrWjO00Gzcr{L9?w)C+EtrtIZn+Pd|v%*
zI>?GNJ6=Zo!84#;t^tnG@)zJ3=>x}zNvRuE@DQv&Hpo&twWpI?wClj}n{e&6{;T@!
zr&q|e@J;Zg^YMG?RCulg0X+0^@35!ts$vjutTX_D!_MGg2fOwkTr+RJ+Di;Y0+EYa
z4``v*InC4lmp?8f&bklcR(AtXyHsP7|AnAffjj6+*kfsDbQ;tkJB8o33JdG!))y!!
zMueD)AzHf6CI*1q{QMq30uz9O8R&k~JkOZ{Z{-XqL44o9fcn7B*T4Tajj!r6p6HFm
zWqzx{q&c)hWtd2H6V)a(V)qBL;fK$2284%?6&Xr1UDu?o3fCIVbE2>iq6byXSoukQ
z)GyM&Bl+t|zWjL34t9A_bcG`6U(Pn_?ZL6;EyRXZ0~^6I?-}{@DB&#d2%A18WgnkK
zW93F^?8hQ$KK{MC-0rUKGzOp53ye5=sMp!IABD?!h1|=k?DD@?LBxn-dD^FJrB@qj
z)6dk=N+tKzP82{Hr}ky#FAY8Frp8wpR|={#pVQ5ZCFqQrU(JN=REJ!&@?c6WXK1FS
zX$|CWcuy9lIdSd4HDW~<@6+Y*OmalyYlN)TI8s>4m=})s-xpD9SaqbYiHMk33AF&>
zrf}~PA1b(B;!=V<({LNhped<wD}7Z&Q{twlBHV&_?}LY3wSKv{p^(^0cY5l6rQz&Z
zYL1L&c~r5Xq`9FysyLU_x`0=;aPG`T)iVn8;}v>rEY?E2A*-27?xzAAUI^7}R1px7
zOe0`6uk<0xgluQ?$qZ4mqJcmpGPt&Lx_EFctYK=u@aGO3HJ9&_B71rTBDyY}@SA(Z
zi81;1>a^<_t1hfCIQMYBxme-MrAPt-6n`HUKHUvg82!GAqC$wiz#Dffhyri*9{CR0
z_0Eq$hQ{A*tMocN76X8(E!^e7s{2E`r>8F+@edIAQX#iZx$WTm(Yvr39J7iVV9}DC
z9S&BbV^<kSZXNQuM^&ToVdo2UaX&_ZYACEc8-;@6DWKOu48ZgTXv}m$cAluM=^8@-
z!sc_@OrW?|Qdvn{RaIrnN3}&N42qlz0Pw-TLc~lZuUV8*rUpmo<hsT54_k9cw6KtW
zeATl_=9NmorV14P-Kpk|eM%M%tjw*BYf;~`#V!h~r-U?|dNQ^#zpd*{ha~KN<UhB6
zk)w+pjyAL(-8h*4Nd+lT?&UsfO`icu^iKNBs#W{MxTVnR=V@phnrpLPdG_<#oWT_1
ztwLNZQpg12lHVMobxH_K$2S?7ky6`pJ7FOKDQa|?yWDXpVepXe#q^NpUn^rFr>cG>
zt<I5{D~76YN#h&=QCdvdStT!IETTwtog3ppR%rMs%=`v3d$p+Ofe?w<`st9flMPoD
z?$8@2m{nUAc51g%;*sk?pEix=H%-R1XnoSfw<oWr>jdd@Q^YSj96A}-+QhiUcrIZo
zsO%L488Bx|b#E+1ae9`@cPV=$zP<$Mfb8T^dcO*O;Q1=s8MS~BlcMD6o-ux}pUAZ`
zB1s`f_sOsS%tjldY2y?2zTJVL=GcCNhrGtdKCBJ8TEa{99enV<5n4?o7__4`oeKMd
zLkhbq3_Xjfy<`i}4s?jfTXc`1k>Q)yOo+9eW^EU1)P&e;Gq++)vXF1|Ue2BcI{*(N
z|CO;9_HsAx0S#tqq7(IkL5en#ObGz7M{sHQe;Nt@65;2S6b&ncY9SQA$dTgq2)u}V
zy!-^~X<#NWHa7R9S0iPo$__h#lua@5^K0VSpwFV1To2D84p~sg_(oDtP!%39@A>V*
z6zN(29qQ;=5v{9g2^C|KNTo;%w5vZYYfxSONl$g$H?aRoQjd()uC`d9K^u9uI2bf9
zNsH{@_tQ<%`WpDojHB(da1v9u>Y_O9y{*_aEi8Q6)q0KCHb+IvkUuI#)xBGkC!Ok^
zyS1l?D|R@M$U9>yuFMNQtLbxrN*AyF(h+SVsD{zep))@2=Y{I}(BY|w4a{$gE~~R?
z0>g_nB?D##f}NsQ>S%d>PFsuRGb{2q_4X?}=Z5E7b`V<wrq;@fY+9}YCs|(0hKjA9
zR*LgfeS)v^m?CIs{v2{Iy9J%JykVwA<5n*7?~FPS9gMnC3=n)f_DN<k{h^*?y0NcA
zFr9L7Anl{3-|1mfBn;7VW)q^04~H;T<+F=DCXHl^jQOf*+E%inx>zJha=NvMbLpgn
z<=Ik6xKmOhc7qr9WhFEG)u~tSFS+A%`UTGeryuWdqk^c-6B^CuG@96FX}cD}Day@f
zP8GC#lP;KvS)+hDqBQ_ycC18{`n9)h^h(9<&yV+z9*9-1qwmnvi^yz@1^vllmsp;z
z(l}7%RQums3zisq<Lp*P5hs-Vub*j?^d6_EyYv~blWU5FMg2qqP2}oK-Ph1?b$!TC
zhR;2B%d!{UYn!{zXNb9C-WI~kr?)}@2ZmTBBcrT*Spi@I97Zb|Hk_kC4<KIH3{5zB
zP4|%hYr=u@xZ-*=(LY~edg6?tJ01L&U4($%$+p}^4s?__#gF82s!_9QTj*kXIMG@n
za}VD{%9w^D6U|p-&{<0p(CcMoemBVC^!|enOZ_ZWX|7m`CQE@O&_#BKG(K>O5)@II
z{HT;)=ybU)J3|Rio0o^c3!(EcQ2Ro)mTf?5iU7l2;27GcGRi}2iG*l%{)`*Zf|w);
z@;YL-Uu7t|jtRd1b3g>BohXFyp8at$nT|}K!R+mmc^1CRSTd7uv)3VZj0r)It;QG_
z{lZ!e)DaY|6=t)DF%Df#P@k~V&54^*u@`Z@IGICC^3}w=c;E{phhIQvvv<)+7I5N_
zQ2RDuRI0^HUvw&|rcqV4Y`TaqZsV<76J?xhO})rI-cC4b_j!?{^(K?;d?!la)5$^7
zBS9c3C<5#7to<Xv-UNAVxgJh2bwtp{BluL5#iQ(n6|wHq;o7)>if>_LQroJ%dc1Fn
z0G!ea7qW_XUuExtyEC_#;6{Y~zgtescX@_gV*3<H>|!PjDkC&Y>GZjhXDp<C%J0V^
z7610Uh1u$m1rpqu5m1!LXCO(qDi0WME33-5k|;~<GDhOl2<7IdKtU-|K+F1xW;DGI
zhsuUTl52Tza4H#ANM&CyeCk!u`#!KjBw15i!uz*_yC>%I?HUO_gn1(SiT_>y`+*`C
zXZPgzYz4cH-XN~)u(8Z@xjh>zdID9&h#~GF4%dI%OO^QkhOZ5b7ko8nZ1Yj&J8ynY
zoB8#-Eqn9vxqW6+tSYgk(8H#ouG$u2DJre6<;Vkw9Y3bp{iMAXKY+u};h7b@Sk)>)
z(Ets=gx_>@<85bd(q1u%Z5Eqz&yA#pxT50tBQ)0(4@4rD%5iJ{BszVJCEB4aYl1h4
zoG~!EUYJQ3eiF+jXh+pV?_JK9oeGK`UZsCEa8#8Jl_^NJFlrzydNt`Os;A*&5R9OI
z+)A$nj%q0#V*Jf+ok^b_vbgmlloS=m7mHvYH&YcDd@7SdiA}<GD4j1+^HhjY5`>+8
zuLMgyg&UJTA*;G&*LSCgMS94-m^>lib)^`{!*NOXf3SO;!`6@Yh*422-Y4?y3Z!J;
zOW#qF3eWuSs-{n9`yVE%1M>^kX2P}AotE&=jB?6n=w$v=(@~Zula<(+fEUlcPD821
zi8Z&0(u;D7akg94I>2|nGbhb6$Z=y#9}sBMs4&I@h^1d%X;*&$W<cirz|@maWM`{p
z?wB=FKADe>up8)}fYjfGe{34WM#N%KHGrpvExb%!-dAfWlYYmAflaRu8_GvUusXkR
zRS*8o_kHB|vbP<z>!AmHkDgC}Ui4BLthRXSw&me3sSPGH3fMahnKqXOt%-jHef2@r
z_lJ&?#m`3$x;W1$P}-fP+MWHq(1i38PsV=H_s1^qS*M~=9c_mfE0?^1t=&U*<a1tK
z>-JH_+nn;H*~C~`35$l5V27908A0SS!OI=)o82R`nLbaSWN3o?4K%zvT#^l{%}8J|
zQZcZ1gM{6;fU{NLxQ7MN%hTf-A%y4~NyiyILB%0uKm|7F+e660O{n(pqODUB6yC}W
z58~1Z@9-)nkMLnV&zX-)H#<Es$$|xaKNI~o3HiOeD}I%%&hr%-^a}uVVf}79O@a3x
z;eVKG_5ek?-;O0yR!y7n2Fjw^1RrQ}`J;asimDgt*wXe|C`x2h)x4UBycuQ2V&bq!
z(+>`}ICvy1&?QJ477qSy>umbzU}JT^uy_#bQQ+(0)t4M1T?;FR=)={6xn_x+wJ6^K
zt2OpHk6oR9b<o+g4Q6kxx5`mF21*d#uhPD(I#xf**CAw#kGJZEaGl7e!na))<6Lhd
z`Pgmb<ev0C*v?J%ba<VETZl?8ytZk|)~U<tb2c?CRcyibcwn6jtHZpDDB9==?dpLe
z5>=z(uw~-z>8490J)C=B>@H$Vm9MlK^5Ow74^Ah7M39=_TXRm8z>YP|e>)_B{3H)V
ziAr*(rp@lc&TqZAcJ1GZ5re$s<BAM;5vRSQ_m%C2fAGLi&)n>QDmiilfHhAEAS<d@
z%79;&Y{(yNY!!)*N515@L$&nYh3+cKA33@JgQD@!<?85`Sv6c^qqq5|f$Ua=F$Q+q
zFAV^d&~0c6xY9gww!Y^N$4~ug6!_`TZxlP(#JIJLVw5!7mDjVmRKsyoblb$mYoSpH
z;WX0EqAF=<_IoUSWgVFX{@IEfeL%U~Dx)&FH|MVH;DWyqr@i%lgR(4>@K2Z7v{Ja-
zFW#R7TkLaJ3m%3}s%JmL-H&GCXgF!2n`d0~BX>Txc!VoNznHSOnk1cGO;_SK=WDFc
zjjVxW;SVSrdWqP(RBtG(lBJi+Urh6Q+Hku9$_2w1?(Q}tn&+Kcs~?u|Z>G0p1x5H+
zq?%}e&9(fCD!RMhs?*usFSE>&UK$)anHOJ$4A=}<fXtH6O*_M%$7AxUN&P;&AY|rR
zRCpn&jTJ?6TZeh_O^Ydo5_uuCLtf*L1`rx*kbvsmsN=ypLv@iOL$*$@LnaF1az1es
zOAK)d%@uE_`7m~w7#NmI_Dz$R{Wq@ou)Eb}ZRjLgf!p@vdqjJ;bAc)p1lZ6VIX`uq
zzmw{Dq$+gYhU@%y(!}mYMPZ?tMtEe)cR<KDFwG4={BYf0%I)M`_-xZ)!DpL8{OH5=
zQQQI18zEh{Ep9+xQ3)>%oxc755(<9n@ur`UkPw5EWBEJn3FJ*x9v0KC+A}2sAzpR@
zf-q}sw;55ETeW_`!U|ZV_TF?A!VITwF696`L&HYh^a*DJOE#J#C-aLH_A1f3)5$gi
z2=T<^)jpS;z}kjuzm#Vwi@$jLXPrylor74~0fnKD5;Eau0J=G2N~<q6xKJW@h{3$E
zpE2>MtF{cb>Tpm<d&HbK5+*XNu{Hcj@Cj=NQ_yW;cm;o1mVSbApW)@uE()GTSuWTY
zeq7x3BetWe9{4<+VkM>Xc&+{K+G1o$nqAt_Rrb$>#yQk6qwivOL-ESgKyBDDK%}@?
z;NR~{^nb(ax9S-E^xBlL+nbEgVi1FP<;vivo+@A1Sz%(nSD?DU8VP-&lYk3Wew-TZ
zo^}W??2N(z$X|b3EiNXd3I<J#iz$M(_M5x4R-2>f2v>UU=GCU-5$2tIZTcUNVYU5W
zW2m`1A7?wh7pL@9lbT1(SLnZ%@wfgbvyN?w)VGs&`tR^P{t)<RV(~7I+m`_$V!S9=
z-@BSel*w#`Wn%_PO6=Lm!h!4;i|p>xPEY2V?`NKDx7SJpKKs1Mw-}c8BN@YJySXHt
z{KQw0m|E16N-B)1_4?`}_U)~1Rz6g~ah=%S!9kzrn<T*2AoP=Wki|2Jr>!EC-kDE(
z$G$MwB^W-b<DW{z71@CfwSTLM724f;m07MTb#0=H-L^2{S(m%yv-&scdsnuH+Ri|+
zdQ{LTN0-OKv1`||e#K{x)gUWpWATH1dZz*Zecx$IY0t{TgdNXHDGe@0F|BD*+8o(o
zS`)@uH;dlg-RCzxq59t{JgRd>^NuHDb#w9^+)vW1epDNc{vK?6ScS-^uxGQ~$~`s|
zr|Bo19yw>GVaBh*$;CZMyji`nj3+vqx-Jwp=^VC8GPMM5BYHM<9J(lazLAQc;Ky|0
zF8ISx^8xqPsGq^eZrPrn@N+2nB2)rTM8@)?*fzcuejJLuVvYePm#m)OMHazPy6q>q
z%O&qsb>zm0w(83DIDo%|dNA}#LS=6t6asrW+8hXF`A6h1C9CH%h*iS>5>4|VNBz0g
zK2ByR%?DrJOI|}_0-$DRiyRvrH8j)YH_p!1pIM-PUgr=W1#6_Patn`=&OGTf+-!EX
z44o@M$>uVOi0Jw|yeK<21rk3TOfBU66dN0x>E%nmP6O}ZHNU{7RDEFhEA|*qBdaw`
zRn4okU63M^z^1yLl~F^#{BJGRYguN+gS^rnzby&!AKE%!4imM0pHc-<-Xet7hE>Z)
zjt(w3cunWtv8-3T>iPPIhevB0+dMpE9=xhdVn6x`aeNuk<{7~o28?`0{%o(u7)SDZ
zlHH^}7C74S7vV@n<HgW6m)HQ8v^sFdzP|KBXE>X*dnRofo7my9))eV<xC8FhCoy&$
zfHsNcZr><fw9_29I^DqwpAG4k47YR9aGuEs6U`aQ3uqe#q|3ZM;-?~e(T5Voe2t=g
zGHeaIeD_DgsM;dJ_uSWN@|5xN(ELGcGoSlgVoLfMl@S<a^wm#OxhLG?o?TAXK*Zgn
zZQhQF5FD;LDSUyj1d6XKr)KPyM4PsfcE|yjH*v$CAR-t1_rY(KZ>tRN^s$Am8N*R$
zd+}@v>&<e{?%KvQhUg6b_!EUz$NPkPXtfpS5QOlSWign{+PMEW=(@YsQxV5iuD7d)
zb0znA(tlWCQCkgGLkz3X+xka*i?Q#T+x`-XE;11lu1oy2yNUUVec-<MX~FOtHEX_H
zLRx%y9yap%=Orcs0xIaQ>-#M0bB_r0XIdpR9R5DVrxEaz&?kh`uK;Fy`7CR{5;=eN
z^oYB-@UL%dEZEmU|GS+^){c2Du7^O$_eAhul6-*Q_}FNa7auo5d0SB;=jx+p+4|oc
z=!emtv}&;i-PpK6zou40`+&~ccfU>j1$#X>*X(ydg-l6lL0$Y<N|EZ8{N8U)dF|J%
z-+vt?SsF<3u0AvX6i3*u8_=ghh5Ux9y-VtXd%=>O&aUpwggA4ls=0B7MykNzaL%y#
zVunV4F!_O*nRbkm&@5)QCz-wu@3iai9%L*vC1MT?kQ&rUGy%BqB<CPlX*q?+?2l$a
zl#8WQz>V(b{``+R{-asPqMhN;by>mnjSrHEY|kvVXx!b4)v!USk6b;gziX(ntgT|R
zeq(y!$UcF%AfK)iE<tv9eZsCgt(9!b_OUHP5+e_LV~sE8035IKSIFo1K&k8I{D;xU
zBcP&RS=SE_Y>Jd}p@z3;{`@?@YkBV7tD4w_!9DU?`?nk-==Enf5C|;eb^NhHYn3i?
zsf5rhKpiA3>K^_NAPzHqf(0%J)0lMnGf(X9AkW4?n=9@VD-oLf4DVkePS<qy*4eph
zFZ@G4EqyJ9>#>sA5+x4BZ1HF3U3Nhd@i%FF1HE9(b)X8M$fmJlYanMu9jE%<z|-@t
zahAykS9_dn2t%IYOSz+KHzQ@jeh7q)SvD#mA=f%OIyy2nwK$**5V=%Qg;Di{5i%qG
zaWd|r53UC<4OGSUzN!O{=Dc}QVg6AW*cN=lD%N4~2?ye|T@jtO@VbTRzO!gFV*Q8I
zx5}Q3M@^%UW_?D{@ow{2fd<N*LZ;3-!iJ<fu^@2fQ2NSG<~+N+i;21>&LVm2S0dxJ
z;hT?hMp*I&MP9R->-@~O|DN0BuK=V$5BF3;d}3vALl4q~(R^c3(T@1}HO;}Fu;!WP
zJN8cTQb_#%n~|A4{+TJoFX#4sRvWX=l748$f5)Z*?(KVt-Yj)fD}7n{Dxw_RDt)pY
z>O@~_%>J931W6>Q`Q4>tU9+W8kxY|r;K4fkMJW%Xvf8pgdUDd~P}nIbSs~hjasa!z
zKQR^`lHx2=*Wt8qUdKk$Ao5X9X3NBK^<Vntp9>hxzk0A>0HCLugP3FzVWKux1xBsC
zUuLYHEwdr2Xo?7}MQCI<2`MvAoucvJQsiUQ!5}z_$Ro;p@YRC>>1G92h*lY@jSWEX
zD4jj(A$>uj#jm>hBvfLbp3X=~pSsV1k9JIZRxh&Vldh4cn29*Zki%`Nc)bxn^pSdy
z7*6k4>>g9dGUck!+xl0S1jbg;PM#M{%kBG*K#}wVcLVP9)A>u2t{qC9@~kIQvHzVX
zzwO-$9I8`W^;g#o-9a~2_(hkWD@Y{pNA=|sE9}xj(a+@1I+nZ8PLIY$Mh*SDL$XL>
zH4s_>{+$rAk79P%YGm;*Do_s~`f&i)0$|I2udk<2D<I+d_NuTT;=hD3v37NAZ$(4f
zHL*t_myY<olF$u!;NiZx(ZC~w1M|)L7@>^h+#0tC8~gk-Ck>JzH)U^EHdd984MPe@
zl=|DUjDS&Y-0<-i1558oAhLO*{unI0=T!ypZbH>QjETqQ<JC*H+u2mKe|6WYN~P?i
zjateQ!uszq9HL(Pq-KpZ@>1A%=3zW#d6P0;ySjm0KHcOcHm*qgMemh~;94(tO_5uG
zNx`zqCh0eARZ~04n8fq4Q(Q@+X(c`0f|_^Rg>8wTZ|jdS90)1pJUkWrgxyi*v*)E%
zXPC{~D5AL9n@gp7_b6vHYa&G{@LsgaRv=9fs>-A&UmO`LM?gMn*jJTSmNI>i1iK8h
z`Wb}s@>HfFY5(##9gRh}R!AZ|X-4}_KhSfhLhYrT>08NAN;OZXK&6+U@FbKH2r`zT
z{l97t=pg+V8;cR&6n#ZK5Fr<aL#jqY5L!sSB9qS8>-~c|Agk1S-MfA>c4O<b3K_CS
z%qkR2aTL=JIhf6XAz{FfR7tg1hw}|Nppn-0W6Ow7bK+^0s5{5M^$z;R@5Of`elD!f
zByT)C?O>#A0~dyzbzpTsCU?;!#+Ods(#u;<anZilN0;V}Z!(|yMirT-X-0k&O114_
zl;<52L}-kEKqu8dEX*rHn_K+B(ljb+7qFn_u-H&kC-Yp`b;QHN1EvVJ4S)1s{qJ-z
zy}NF1ei9xsxRSD9RT*e7@2xax9+qLUxIa>AM5QG^P(if6`w5X6^%PN@<<wvU&XU%}
z*ct(GzWq;o#YlZ!s%~_pEqVWVo1?kJ0CyT-VEUNT%9HHs455BvN9;Ytaaq$`65fS4
zy^NzdsG&M3%33~6n0?o^95TJwd=Ph0Sd-)V<W*;_wcN21gHA1ezavz$o#!KE&8K9b
zco&AB0>!5a=C!-r(ba;0bC_*f=zx)yxv1gPc@iuspq**o(b-VCY<=RHU$9)Q3~Jk?
z=v2#x1PxCv9cxg+NWo!kthbB+iv_dZ9@MZT-sw)Z@(g8kG5GHC-7GN_E+i5rCt=nx
zj=+`-$_$Shxs=j-9_1s#>F~x$FN@+@NNYJV?B4~hWdCzFc{##SSHE%=VABz^P5vl5
zqoz5WQz>Ae^soSG4;@oL2(!}5VSn($yDb995J(PGX1F1fIrN69Gb2Ao1Nc(ewmq)#
zQo+Na;nc+pnya?VgE8|<5n^nr-9*;uLI$9_w_6$%w$F>bwOLe6TxB@G6cW$uZhl&l
zT=$K%->A@VGh(?L0&4en8Wr?vb_8~8FaqSwYF(=rJ&eUtEpw+p`wP5fL-$_^D{&Uq
z+Fd+Wuew$@Hh7BBHPlJd)iwgdVO>Xn*>#O*V_I9!Db?KHUdkQbY#_%jwe51xTU`9%
zm(0hJf6B%a`6BWhJhEu%uhRXff|i*MyX2Ps7W}BiVL5>+!KD&M6cH1s9hkG2bT|2e
z0XyD3BDa&3go)hQt9CW2xw|%BZ-a1cQoq42F^W~o&ClWVJg*02<EUhKIDSfxZ;^n~
zz4#WGJztkMc{;bEyg8635!y%X*gnSnkINZka2hucJ2j*E5MC3tgn1Ju<;tW#HYIer
z`Y>3{yHc_DmZ@^lnf^?TP6^ah^<4{ZtCgVaQO?K3s|s$7)hAw&s2nAxvn9iwExVdW
z^5Igd`+nLW?EhXbP3qo7epP<bpq5kt*tYKTN1oK9B4|=V&Ne3-V<fCz#C=DYmzf~@
z;Vmm^wGmqW9j%G$nu=TUNz_6t?Lh$y^|;3c`BCx~MLZK(i~Rs3X(%xp@IQe%uqo&;
z{b6Up8z+Fbj>f=U0WP4%P(fTw!tT3xlJsO55qKAg2RG34C&LDwO#i8Ew4+`iymB03
z4J-beRv7T6(fln(F=dPoWdLe^?3vkLVPVRf9gM**VYSd0js`+0;*d7~+d2fr)Oq*C
zz<sJid~GQg6fVk^fHhK$*LgR-iaVbW2}0g88&P8&OU*~0a~_?ZezI+|DiKi%Zz<+t
zEj#*#r4_ia+6ajuknd}|=^y)0q#}rqDU*ad7jNyEuBJal{G&qrpcQ;2Xe3r+H}%`H
zOI}@i6<DGGVW*V(Y^-6s{LGJG6<b)$1S@CVe_iTu8G`jMjIMdU11qDlfUv3YfAeZe
z#Rus+U_8$;=&xKiiuBN|`Z}$LoGWI7)*usW&0sjd;}-rOs=hib%I%F-ML<D7hmsZ?
zI;3MLC8UuqX{1BCBm@K;Qo2F9ySqVJ3F(sVE~&eRbI$MH`w!3f@F0BO-usQU*IKV%
zbA4Ge6_wI$5-DXoM2L5f`p+=d(4Vu?0VN8V5$N!Uu%k-~HcI!X^!eWz{D=@I75v57
zlTK$(J6e=In)Zovv;rPgpC#XuoB}&qQ>DG*oV^91qkmqMFj?Jh&6<!44($UtxQWFy
z=-wnlgC<~G*WNe&)@J#hknenGim*~A7?NA8tq}JWHSIOD&<-i3jBy!>cm0m^si&jD
z?;14J>7F?6FKj3AAo|l=qa^||xJYWpWl$f0x{AOw%CZ9`O;TChsUR{R@1H9`8TLiv
z?me~wP7#TfGE0(*ReO;%Jzf&K-tw;P)k=i^)dvaECN@F*;(?(~sdC$&?)oUniQl}e
z$m6N0KK$8uoO^y2>EJ;hmh~>l8?I=)K#jdLcKA;AhecV4+z>W4>rVrHl$-k8hjCGk
zqer|cBk6g8+{Mpy6fe%r1Q9JNZGdi!RT1h}C!1In-6SqDF*SjMd-+%5P?h_>-iAhN
zQ9AGr9hP+pQ%Ss=Pjx8f#4RZAMhu>u?Key>JUE<<pTP0<M|7Pehj}E<F0NjGqrl+B
zu!l@%K|i|Kun!mZZ@w>0K6cp@Sh9t{Gq&1?YIc`wqqy<E1OjHRL=I4j0ln?E)bjok
z4t9Y?nQQw6$pA*t(@-L16<&eq24#tKT1BQvaUkOA3W{U1p`xv{xyagj6#C<vy;moK
znj!ia?;hMr7d!tog%at8sVoITm4bwv0Q-av=@Em@3i4pz@>qt5hjkq7VdH<>{@wKB
zaVvty_XYDx=&&nX9|2Q=3GA&t>6Bi*s&79mZPf5Zs%ZjR*H1R4ceBQtvJ_$V?%a`3
z|J@m&e|q#FUZiZv*N$V|CJTjs$WOH{B^R9dz<*Etn}1KdLlGdkz4*dLitlJK|GPjW
zp2v==jEya52$DvOxZ%NB-2d1>@S4y6ncaPJce-yB99#S?z1Gp<C}GEYBOGcwKbK<<
z)Y>`tuxKMfj_?<|P#{cn2zso22`~TinoKZvw@03$XX1cv!<keUxg(ZXIk;ngzG0{a
z=zuo<u0tf~07t>vO9ZCnle}Glm2NMn<s+~L-j@O)<uDI=o$mrq&zVGVd89bts(3%m
z;!cvanEqWRBKhtemw?PyTLj{y@UR_y*$t~?JbP(wA`Xm>c?4g68NQn?4l@j)3Cl<c
zMAdqIY47{g1hI+N7i>Q<pM50=?KDd&zzT|f2-6`5^99N_j#?dxFwKU2_X&45CRtoS
z^+!QY?E?YvaV0o84^#8ONBf6&FD13)l5+&f!oa_gt?satNKKvW{@o(-(qiAjlzo&P
zbsOt9So{rsb9(`rgLepG=P_1gk1zJv@YEP*e8mK4Ra~lwD~t&rkfoNyzQ3^N0gA*_
zJn)Dw>^Z;<U5GA%eM|AQ-svVicrL`XYr>1H2TlY3@KoZK&otyY*e165*xz=27C<Ni
zQiuv$-sF^6|4(X+Y;^A_!o(?<uH3fR8t;u^kX!39iIA*Oh7<71Cj2^*cFw#sW&4{5
zo(AU)&#N%ApZ_)uNgRP7D>5V0D$nj->X%;&_XlgdLX%qP$ly3K>T4(}qo4NI#KXk<
z{ik;LBUleYBa8|v%**<nw-<4eQ*e?hZOI9h?gE8gW$nQTvZxt%{Ur!5H}VK|4^Qno
zi3|(3kFw+pRZnY}@za2qI9v{K5A?K-FtpnTFh#0q!oVP);CI;nZoW5iFOp7GatiDp
z<fpTn&$b+jM~Hif45QUk^#^s6F)i{)PMUIZezTUp>n(jpR$A9*m7T4nF`I<KmUrx<
zfQU}~5i-wFf+1y2rGJZW?NbMK$&7NNV{XH@?;NN6<?B*d(}&c<#KR)r!tJY2W`*_>
zmoGEM3D}||!Cy>4rm{V;<2Yea^;Oc+k`b_^hSNkOB_+)c8^pi1FMgh898V-^y*u5H
zPH@B%Z-3k`u)mj|&TX#Ma#;5$QoM=6RG;d`qb&%RQ#UE!l<14FbF#<wy#T(c25~pj
z<@n=2;G{kk3e_TTaJIF;+$9Yg%Ro}GwXqxeVQ~VR;ow7e`upY9xQR7w!>*0-Z>eZo
zsko4!+q;9)S7b4%bL6TXZJpra6gqmh34DM65iu32FPgD^rq=Eyo!x4GYY+h&(>JlM
z{&<f3o})H?U_;mrOtq|!*X1dPzntpb?Xr7=w04ogUwA&_V(KbK8V94R;pIYlLd7+#
zMmpk3N!lohh+9aht$Q&tYCp4b>88)@d-Pz}AvWt%SDg5y^SK5gWw<?-XYH%Ul0c4_
zIdxlF%CpWXfY1MD(Erv`Uz3S6q{sBI!5WSC$c30MOH9B0QVqHoRxf6hFDa#>IhDz!
z@aO@)Box~<855KyhC(UjMq%R5B99<FL006>vWM=&TR{kg&@V8LPQTR~IZx6*iYJ0f
zCZOgy{kI_a@=`LVWqi1VO8(gSFgoMi*=Zwo9HFWad2#VJMto0xv_CtCWzi{6Mh#yG
zvN3ONKI(B@_Y!ev-3`GKWr>7STZlsF!;d$4lDoHvTZ~Yxe;`BaD<m^rpGj&VcuJ4>
zEo89-rZl}S#Y$mN^s|si&HfoSR&*zfz7B)ZNoQkG7I4BThL&F!w)?>R#b)u|Cvt0j
zXs>A;b9R>I+$Ei}=TA-M^*8(jFXiEu*Y&Aw4R#S5aEAJIhfjV`hePFR&7HGgL(xfj
zUhiQqeO~}27sL#)v0HtGlM6K}!C>>}D*@1k^uRX(8NdyrbtSwhuSy@Wf^E-lt_K~>
zlXh{$U5(u;j4RRAG}c<{&HK+!8q6Aanh8I?%Im6AOnn)4Q`uE;x)pq(?97mbbQiPu
z$+128t=h^^LLnwyr;lRxiH)K!6Nhl5h|_E$go%nu+jx(YH0x2oX$8w&V&E`I8@Op=
z=$~JTtupM8`nt|QjVd{$uXQz2gYsC@>U-;kyzs{j8|P2*;Zm0CoJ?Ym36|=F`1uA&
zm+a)s$3s>$!!X|YZIp_)QC~@a;^QPbn7o32d!gwTDUw&R<jV#Qr>W4thm$>Zh=6S{
zI#47a5}aE$BYX5#yYRgT?QC%49VTUCQyP!`HLaEA1vKoL7N!T7BV-l=O|`tMm6)?S
z3NetoWStEB-Ppxq#64NXGb({~*A2lV_y-(`?tV4GRf-<2x49j8lxUf=vX&F|uuvsx
zWS}_oei{$Oncg4Eb;)aw(igV1X*=B|jR~A3&_JyoTWxJy;yB-J5V8+lDskiiP8X<q
z1q@wvb}HNA#qHQjwvpdhis(n}*7l`2l;!~;1PF+kEk03_67P_74GkSaBwn-~?RJ9y
z8|WLoz5XjM9>xGu7!I;;;u$|Mb>=$*@$-Ax{(F+lexz-E)OxKxGzkM09xuvD(yL~m
zH)E+rD;~-Rjat5tB*nEsrTWe|g8TD}g@+^tL>^iuY)>AewqaK+72bp@sT%*a3)a16
z)oCwF*@c2?80|yt-z9ft4b|2AgWWoXlfLWvOvT%@FAp|aStes$CJMBX0tbR`-8E9_
z+IF8u`%e2Ca<0<9EFZlN4IPj#4ztl(gzWPA@1#FU2WTWy*h5z0<Oml#^=D=~wkK2%
zQDrD5_uB{@LsZk(a`z?ABF5J3x<Dc4ZL3WY_rIi5)D>O^niC-r3J5K%ZQSWsnke7}
zdLjB$G~w-grzJ4qhvD;b6pTeD3!(Ya&hE0f9vszZ&FXT#9MoGvZz--Vqa+Xyj`Et~
z;%i1dC^m-*#Ph^N0-$g4v->4^OXi9&9J)6SmgB3g?+W0Kl~di*XV|3Aqk?(;llI)A
z?6s`OdR@NRTIb1K>bEX#lLilT6$-OO{W#K!MqFfkWhtVbX){<To#$!TFaYak7vr>B
za_gZ{<o6W^aYOpwG0o(FcclL0)={X*uDnQgzUo^0Vi455^2rT6(OoNu#x}v2us#YK
zQjc1kPG$O4HcTIO11>sr26Nk9t*R^zAS<hpfbdkDFKyQB!BP#uLKQ+h74H)3!Q8V5
z!l@9UfeC>yoF>%gO=MND&r0|&JTa&4>RPR`d=h6z{i4l<Y=oZQ>PRvp(zZSx)wE*}
zh~HU>oSuBFvv}VwYp23wGaD)Y<aXea+al4%h5zs2-&^<b*7r-cIB&Wf&ZU+P1-h5_
z1UwI%82;W=RJeN%nM)Bd<GddbsE)dh`l7A&%V|ExLR#>HcSJ<<W1*)2NxG|#zAOyK
zi^Q`Spse=CVV}kcxVuIe9AQkioF`iMSD22(6B7aH@AW@NGra}F0>^7qpC$}Xo&UT!
zYV5poTk^_HmU1puhd=?c@rpiw%;VZZ7Mb*UQt%Lgubh~0*zubOR-{pWSdc<BvyrLx
ziML^RO=Qt!XaktUwhub32>uim-YswE?(stU0PZIK)wVR3;}6LPL|PP-F{P_Su}%dj
zXCcE-Kby&_FC?pxP~y{F5Q*10WzqdxKAA{YxyoEO77^2hw)e4I304oST-;JO4ypD9
z|4`UkaVPd0sv(`X7OY_eTKN^S5T51+4;`tkpT1Zr-8*(Jr05?nu2z$$e{n9@)yP!c
zzGTsOZ!JJ~U8_kp-E+<-Vd7uB@v?MsB1zr&ss{T@;M;T&n59rC_Skxl>?O108TeqQ
z0abv4b~A}H^<R_@rW{O}32MO~89eZgUJ^7o39sY#swzByed!VH-hv^ZM4^2&s?Jxy
z9YQ7<-zqmZ7nIsMqM)TdHMmO)j{;FA*7)Z2id6N)nflSFOMY&)^3vxYluzPtL^->A
zP^$QT6LI}0%HgqztI6NBvS>#}$)N&qfN2i-!)rbXQO)t|w}peuAkpO*(6R6SCigfF
zN!<2+rES>sKUMys*hE&O#@L2yLN&I|umjL!Q;~)Yym52%F}uxB;7v}B1?tX0lSmrN
z0ie*fzFoIys7!l!FnK~#$~{IbC2duSL<A{xwv_eSRBLWubI~D<&xJ~qcEbM<#y}WD
zLk7C2;gy>L`Ln^tXuPBWJzduZWn(`-Ww}<zcf+U6tpr_e?8#CBM_G9R)Bk+lcqQ-f
z>lRP^{O4X6*WZu1E&S<aHkbQHL-ix{<20cj^=Z$iht0-r#@S7}^-Zl`7Pf^@QZt%q
zHLaP7O@Brx%1KEQe7vUVY-p<Qi*l@`yf?GSJ87&fsF5!r3{{1=E^c+$?NXx$$jQ@>
zKN8yi|91aWxiJ=B^1i@D?d^2+$B*(9QPI(aDR_>cW$91iRfQ^iW=6oHdJkSX^6d3V
z5-B<Kuu7DxFW$q`;B)>27J)S%A{eIy*BQ+3=*31P>xMEy!Q{-xMKM(PO93~L;*Vu~
z<&6Inin|K_3ZTT$sDD092WdY;EpJ2FE<-X@h#I9pv|bgdFPuLaKHep6UF-s^-Hp5w
z_dU`$xTgh;aHH^L+K+(80U5mh#(%2x2rOMOYKS}Mw_h5aaHWtiDWAk&_2iVK4=&yp
zJ4}QA9rt6clyPqai{eGyWtgAZw9SOo#L0;De#A`A&Q(s|fzC^aK)AGHt&rbX{xVL(
zs(T5jD-_>GT>qkX?b;n<I-}pzbT(4Jv?7fxT6OEqvCp{_vppA3(RMlWT_Zlro<6s*
zkQ_VpvU5=WT{~JTN4gS6Y$lk$H47|*sx+F)Ev+w0p73#U5~XC0wk;m!$iXtBwuT(?
zPvnL8afH>!j$<iP@tc}-2%_L%(UhVxUpx#vg20oOl-FHY8-}k%aQ`M2;r-L;<oyrE
z0k9HOgrQI(W47Ljp6A)1^=-A~^zSqgIwmGg0mkj`FF@bReb)oU%I%{3p7`7;khBcB
z1@7E<YJBHA0d!Z+D##vu^$(h3RlRVj&4l%@930!8%qsY#4CcyR{MxqVV<AUP*%Lch
z5<_udH#4ahnZb>L3zBf^*))p5p$4Bs&7z&#&j!?~zhlTkpWk&aU`SGHK|9rqV7%}f
z31b&kf6J?dSO!YL^RxI2Rc^qk^(9mY_Vyk2R_Fl?<qNk$BNC2$vLd<f{rpB<BiMG4
z``^_rc4r=Ji;w#qrQx_*$_nf*z}$fYi`9gD`CkhRaGxDCr|fHGGbxGF$odlNENJx9
zCyH+dMRf3EG=8qb^Ru1bdIZiioJ3-Wn`4}+$(0LDztr>E0)R~S%my<@j~4(OZgUY!
zb|v(})8nB1v<r<NEd~BZnaP*u6Bbt<4lF9kRWt|f?wis?`xi6SHkWykAIhfq&8+A!
z4bQACs;0o@o-Om%*T*AR%K0ZfmlS+$<ELIM>S_*IZyT$;pE8J0NC+_^_HYdd=5XkF
zH=?=nz0Zkd{d4*POr<d}u3c_hhinwCD4+l8N4qis>ma~o4-FqdW`JqrKh99cJ>S?y
zYk)OAbPDO|$Se@wl)4}Jw5GumlPg%d({oV0q^30;xS3?nQn0u+GaRZ=k~rSWT4=r^
zze}U;5GjlEzx{m5@@+atiV*QSrfN)p+nN5TLW@+d7-H2HNTe+TPDq{3CPADXME+Js
z?sFt_<7<U0qItu9W74<R6~tIUgKdmHZ2K$Z8s~evHay(g-!T%Z$$Qc=(DT1Gu|tL7
z1a>|u!tZq*^?#g7o^WSkrFc%u$>_^-^FO!K#w-*tXmwAoIAPz#&K&>w#LZl#X(}5f
zTMV8(-8lVcMhF-H)-@^&uyri`fz=dcX7`)TPDWw6d0KgeOS>g|Fg&SlH^`t_w;-C~
zqY=hPa>^6Gw5?vKQLjA1N6pqLk=ad{%1Rl32XXy1*e>0`%z;lk$J70gT<w1-pEcNy
z5Q+WJyBf^qoD0^T>EK<CCQ)4UjXlK>Q@5$pXPzOy4a-<*!JmzOznlkG&4Z5}{0NiH
z!Z<qJ!8HM{M&)P$n%l>>Jjp5Xp}b<oIg2|?d-$=MzquaAxW|5dFP6RJW2Z9qHj($o
zgjE=E02I>!fA1ch@Dk1=f;)`Hz|Mu)<h^gaY6lGy)C-HZfmWVdb;!INy@at+Mfq>e
zc-uy6asf=4$F4f>H_t7fB*~y+h2Z=AlF3*L<p*EdI-IVnvBrK6@%Wuj**e2i$m9o~
zQz|IHW%yU?F}0v&iZ{t&YyP?P1w759?&@e6pTx|fl=&W@Q4f}9^gVBenC4LBHF5Cj
zU?_HX-!!I5TdKyq#U~C`g(0V5SP{k+ox<CX4#F)v2I(9IFG(XjH0z`zzIZr??4Qm$
zWJ)rj2{A7k_x-gc(&knUChgAu8Ig3V7r6^QtVN1vh)aU(uN?eeW19gGWn0=GL+#t@
zY%GR{Q0W9%CW~UWbl0(|VyW>NQ;pWn)=S{32a<}VB_GrL(z4Cbxs+6!4h7FPXMX}O
zY6P`R!@~2ECCvttRE@VLM0a>;NAAHr-tCq@D2$2IZ-;HwOxc>de7Iudha;CR+4>Gf
zcvi?M!?u}p=N2`toE>?Zc+-gm6P1hd!ksT0;|$LSgNE;AJt>xX)tRp-b?~=LQu>FT
ziEZb*X;E9egBg>1r&C@EanRg5%L!8AzK<=y%}&V}#(PAmMTSPvNCz+TDfaRpXeFQU
zvnXys!eO1;Bx>U1|6?m>?vy^a(K>FtN>6(zsxtT7cB#c)*(E|NbAa}E^^k%ih&Vr(
zn?W;J6(FR%gT^8}1~Y<w3jV^4xMSR7Zla#I8PXW0Vh3q^*#4n?dG<N(WEF)Fr{I2t
z?yhdN6JQ;(OB$DX8akcmGLhjiU|%(nwW|B)x@(7MWRi2?$Ys8&Lc`&T8qLz#Ous1n
zY2E`flMzcvAwe8JzU)<EmUa?~@jpVxX%ZPI4b}lkOHu1C6d;c{Q~pf^S>p~d%llvR
zQqU1T><XHfiIyQ(%>0??4{OVMs|7r<>@IX!(n)i%J&IX+n-v5TwdPoa+k;d?Y<}Y-
z_z6{{)MuW3zjuN`YmmriMe6xR&n9B+LW-GbWumI<dOv2$mB?r)DHI-&rD+}X*M>>0
zLWI%4Et#d&nNj%J9sbz1pUA&93Tv7KG8d>spI+2J10mL&ng)DN=9Mb004O3t3_-6e
zUON_ilM;WBuD)_USiwpeLDT5Ltr#Kcg*ION5O*9bx#zr!53&kY^!bk-6Znn5lm!yq
ztVX6z1p=08L&6k3ZOuZXd_;4Ph8U_vri{$SE(}i->s|$xT4*@2B%2($PBkoGe$Vcr
zoLxaAK^#1kGlo7cLVcqJ#Q6hVX*^P*m|1AUZ5+5Z$^S`bh4OKHc~HiOHL_$eQT)RT
z`k!x&a)In7c(KXmYi+QEO6672F>HnxMpRv*V5~-EMU)KJdG$&mJS%ogV974BWzo*%
z@>{6LpAwgu-vd6CwdSWEezz{&S4k>0X`jFtOCHy(2~Dy@a`3<!kh|2}B#~s!9WA0e
z0DndLY3QX)uF*^rl)c^V+gewk;?d~0Z{ANW{+DsAxiw$Ejl+JAZK-C{K-w2No<AMU
zYVJhvcaYZ`%ZRMQ-wu;w6=~11zmA=OS0gZrnlPSkoNH@nbjczWyV5bV&Tm)pe0E<m
z4EsIAQf;!=#<sckHhmnbW33t7&2#x3cEj_D9{h+-71iW7ogIa;%>3LUyL>P}hVZQY
zIqBN)OO@jUPn<m>ZK-Q+R3=zzwCPUe)ww-?$SSv--q>5iuPS#X$)om*_nbB~OoB;^
z;j8IV8RIc3e|Sgw_NRhauS^^XqUqotELIjkaceL~PVZ6somendd9_eTe?@NLaF$@o
zb*wHsW-*vDD$jjFwyP@8kKuUEsu~HI0wMMhdS1$vkJ(7ImS^?^?SYE1IFqben21X&
zd98L*QfRu%l%@c#gH=OmMUG7@mkPDb4_=SS?~n3IYsU&%8s;}~MYq2Z)M*hF?Pqxr
zIJ0xUS3Z=xa<fxu;=~G1ao0btjq_-f#uim}uu_ieSX@%8ZBN}k&P$FmW-zOP%?+*D
z5>SRox<iM*GPvn|a}-<&&Xb!;ogF$FtZ|>;w;2o^1t-|UhTrot11Hze@q{u_AplpZ
z95Z2m`J7mJHcccv<r-l`HMgj#zUQeDf<n+M`{@4v7MNLS+@<7?8vopTt1fWosx)^n
zR~6}m7r%e%ZPw8Ez4z&!J9_?fMe_VB)<rC-erHcD3`|4bI%%k3WIeOxN5-3Zh4QH^
z7>eMfT`LRIA^+Rk?p{Y`f#TYR>i&WcQb~>GnBnI9iVGb;t1*_<wZj#I9y+2kb*jO7
zTRjofT)=E#r|%O#EkJlDwjf8FXNJpKK4)@tRfI}R;i*jY7alCcNYU?4vCCv!S*s94
z6PNobQHEpkf}(_2&2=UqY<l2)Ym=^_x(v-zd+eg2IuGq5!}2$mcxnAlSGG33W@J?n
zr8{Yi2|KT4BLl(l_kJp{k8fP?Wl@t)1GR2h-~WMM_|kOwk-W)o0eaQsqE`Nww05k7
z$N>Y3Z{B8V4eYc_5*ZA;ytfjQti{MiBihdfqciQCQJR=(NJ6`eQbXEXdH6sz`wCO`
zV;Naft)Vpx0J}l~sx=+Eg-UBb@KLhzUHpJJB6X!^NQX4M=v2{jPMAeq00M_lEAAle
zy<?e~pW^B6cBfPT?N*d{zoqcV!ScBUM*-=0>lS5i244iy(y2;rZM2oLkTj(CV)&aq
zA2SS_j9Me@(p%~gK~7PW2u$6Vw43hNzbTdO*IEWhsR7~QE3zkbj{gFL)O4j8fFt{~
zZr`77WXU{g-^JaEV=h)Tm}{+?vDpYORwL+uXTW#*dTa(vdz}f2xNuyua*XfQ;CgFO
zy1;dme*g<D<?r5DtAV)&Sr}BE1i4pg9llI0_r<(2w+x<A`J^q?<*eEDJmw?Q%<ii-
zrKQk5Y3^9V(B3|^y9k|TUE+^{(c<l@o0_4eZh^EK%YP0S)(x=AC-d<detSbtwBQ--
z?grWDG6H=%NY4gynQu!(Nd%`CrxgK=bgIWoFwGR-cJ}+qRoBwpeh4AReA*V+?sBru
zmNX_#P~-5NUI~iN8wooL>g_P5oqB2u&vcv-e49|6a~o}Ya+YZO#SUqfmrn6<+;7`z
zRiRlvZj#V*@eHvpqx{RD%LO9GVa2(AZVQFx62Wkt&`)CK?QNagxk{II&|>WYjt=)T
zeoRc-Y*k|5^M`5dl=m|$V|2#A$juOkzEoo}G?l=NyKb<`i?nJD81c}PcXfM~r#(Wo
z-BL<Wq&aZDfK^oKgfECbZq*|=pZr4+sj*V``Vj{3Pyl$~_q79n2O8k6+m%6#`$)hw
z7c^ePHfOx@Kioqe*n2%vch(^7DP6jaj#bKT4i|d!1o`3FlHgW<o(_}TzH3r@-9}n}
z&1@hE>Czs4f;Bg9iMOwy2vO5yTF-02>Bfmgo10IC1h|#I#%)XxScuTmrV9nF7RX2H
z>e8e4!?vK8$vpo(s^I2nM2qKNBeF>d<is<1At^iiJGlULaceunHyoBFk|VLq_5-%4
z-cPkBl1PK*6m$J#4U~gQM^uI{Dt;G5;ziOCH5@&)ktOeqB?2?B63P!Fuk=o^I=dZ^
zh9e)Qm6$TQCANLp;skbyp`-C4`ZdX*1Ix*?%Ux^ad#U;uPf|?#^2t=z0GG(GrOU)s
z=&*Y_8_}9NEK)V}^2vi<9U63+3fMGCS4m^-laFLX3BHEe;PS%8impoe{gfCaalf(S
z$V$jf8Asa(Jr$S-{Bv1tkLlm%!-HymumzxgcWvCcM6#<ZTPs|T>KejYWv?y##j_Up
zrvfko8+Y!J*V5>;>#3K<2~zQEc|DsYEUA2DBEo8dper-*6ZJWS{%IwIJ$J3x3kK&I
zixF7OiL8~xbomdIe$G$(<((_wO+wu4G-#XfGa>NqJ~Rf>Tdqc-owdMTmg#MkoeviE
zCQs%K0yn*o9KXA7LRk?CrbSf$BUdZikWD`0?nbD!UiX>SOEzWXC+Vtg8^9dz$;=PQ
zq*w;x{(RNqZm&dFaKm)n!cJ*eMn{rIVX|<FHp9t>&4p!JM^fak&~Z-a;UzpmKo{nm
za&XaQ%^&&p(r$AsCSk*0`h0N4O*u?c-{#MOO?(imfPZ(YR7UGGy^?=(IBPrG{`g6z
z**Ujj<NE<5hmr5>Gx{c2e)<8HnZ@PhmM!d6&3e2ROF+YtKDVnfHf?E1CSeVl)>4~E
zvm8-i?Db!INwu@)u53+FS27k9u6?$Br7w#+r=b?iZ_4Q)L;UD`cERVwh*H&K#W(?<
zcLueJYdZN7k7f`Twm+C=Hs;r5iSp87Pv=!m+mxb%^;>n8@VoBo&0(Xm_|cWUvy?_C
z6A(bx5YNXdco)B;ZFMq=)cy6#BvQQPPr8bm@!MQ8)T-_wyeNa{NpP!0?N-cKG`>n6
z$a#Wr%4@^AVN^Vt%SmmB2hOQ5Jhb3TgR-af*=YP!%L^gTroNd);<!%G4$@@+jL4^R
z)o&W($xK!czCaNcy;xa3v1HQ>O!HIF&{+F;a9KbU`;csJD@i*??yx*OgD%L=cmY^G
zrwuNuB%Sujs{dTDH&`K%N`HRjE^7x2IKPJS<0SYhiehZ4VXkrJNK$M4JzqUtB*;^M
zPp>T{nfknP5hcwe_FrCN{d>5{@jNm_)o7L0OKH!#y4D?vFZh?|qBz*lOn~eEd)aan
z7*`c2&57^t(6VBo7lJ8@@Og%Uwvb4_&k|5s_k(feF|*mO9psl5=2aJ;-<dz43j^*o
z2d8Oy-*^Uf`U^V}(CJDyLGu+RPL49vZQ!W;hJ?8oGxn9K6CUTia%s}55Ar-s0<{l|
zrI}jIN2E&jb20}Y@IV{V&({9k_3Jr^XzjIgFygxsYkHXD$XcbvZfr$TQbhX0Ms&Pk
z2!Ueo_2k(u6h?JQ+LojzRfi9*WW9-RVHvCcW^SuHD9`3mSs^YFg4%6z0U(Ed0W%d`
zfn{qee$tS!JhvLmIRQvQuyCzL6oj((yCtrfTHPlx<HaTxb!T1n@rY2D?tx8*?fP0`
zrzhFVzfQe`TQ(r@tyT9f_Y-`yXn%vUZ`!7+<IERhvIr}}LiLLpL+iTDQ7)!;>LWB^
zRm$wUsQ%<jE+?yH`jHwHLq}gAL^oAUN;_nszIvaoFGpCn2XoqmODD~ez#0*um|a$I
z<!fVPpA}ACNXl(2-l|`So*Iqip4cRGRegKN#W(JJa~vNYc+RkM0{J4B3V`gK*P-bv
z>n;qSe=_0uo0tPc!f$}8j+*Yj28!fWcX&7qG*IGcQozk1S4p0g_Q%EKwxn`n8C%Og
z_W*Ul)97z$R43-VqQ$e(x6gMF>nGb=z_qHXUx`?}RKGDKx2f+ACW;giQz^(8a^cHj
zfxQQZ%a8_kuy|GS6l3f)B^<K>F5USyX)mnFPFuaZ`<7M@%1I_j1+~>e2&h8Ms12q?
z?T*i8REXqoSBpP=x{FVbDO>$S(39g|d;O}wRvo^P`_0Eph0ZfJW&EP}zS@CMs^S(#
zz8j4u_vzo{ewZ@uQD-Ybo~!@X&pc<={oWux;$BNR9rhXv!z7|yTt{fkbQF8()Qs8o
zJ|qym_!X@JxUS`@6S1x1GvnO}6OZI7c%WgckihnpxIeeMG5snKPm3Z`m3y?Ty(%R}
zd{Yg$#-4&~+V@vMd9uSUq`R#)M4@+w&ezC4kChgXpGE#OIc8yS7vr35D22)FU^g>l
zD^G+e8Ht(IYVrGzbFN8RNDA4I1=~tPuJ(!R+?}aVEQ{s#$lpAo{J%j=j^bqAr0bor
zYR;8~?EcY`Ixe^-Fl?a@n|m+sOEzFu*QmRk-M@`?JZ*wmBl7p8P4b`M1zJuofLpip
zVpkTP(uxuOgF*bTe-OC&na2ZGOKBMh0$5GSlUFiyZ&M^X&wp3wGjI<#h~yR60d*kq
ztAYM52c&T8>xB<brj<#5_AGjPg^P<ZY@SbIT7;4@(zHK`cn=Lvk%N|^?SCWrSyxN}
zoYuUbHkBNCbQDPf`{UAIun|fUtQFLcI>~XN1Y**8;Z)gEsZAvZf$~Z1J~L*hjz*)o
z7v9`Bnsz%kzO4k#%v3~3RVoV~QZdFHtkia_DBlE_Cvv~HP{frf?(ZM>^EwiEH&D$^
zCB-OQ+vcz@u=MxZckBF*u4N6^pw9;@>-70(w6VA$9(Yin;`t0O6}s3Vp`7wsmw!TU
z0z*D@0MxE9CZZ9ngh=k;P@ndTQhvt|ql*J8oo0{Nv^JSZOpzM%c2%VUl{25M-Ih&M
zS}Kp$Sr<)Yoi4HLF*|k{gg+GA<RcFE!p~aaR7rm<L<3^^Ka7ARA4u-r+wySCC%o4_
zNo0c=&N&^Y_oOle8H?Mnj5uetnGX$&RFDOxo~ps^>E=VY@Rag6*{#@~r&e5E%%By3
z?G2%gTtK#LklE_b64Cds%D9f3zo%?^<l}32K9!;0z@7ViK2{~@Vn7@^$8jsd0W221
zr3A!VC~x`whfZWVKJOSlBM+k)a=x+vi3bZWQm?M3aH?m*5u(fKFH(RMp7@KUAPGU6
z_^2j&h`@F5G1eL`hUFxTZTo)O&+tJ>oI?8L><;;!M&z!d47cCTv%#=+NV|Akhn4Dy
z##4W@K}onUWEE|fn^>k`z(4#*S30XMbb6u6O^3@WWy|A7z1B^_8Nv9x=CNTdhCs>@
zj3DL!W8AaZ>2{ZJ!&80tW$4P_v&4Lw@&oQ;gIZ%Hqlh(T5=*2?9pMq8X&q0@l%X9v
z!J4_%DQ(D12}OvIO^0l*5JU+3KUUH@ailnzCG(;`Tc5HAJN@~^O^_`mX%!`^EXCLq
z|M^mxBtSSvK!OqcU=+R7{!aRSlsNT~<@wlE0LU<8{S4jj)*=lqYycT6Oz0~LR!JIW
ztTK9km_7H=rq{-pm7C`q0_{Y#FU7J9UE|q!2HI?p9&k5(Ac3tNALTQ?y7Fh(L!zca
zhXQ5CM4e(X@wE%1zx8A78uw4=*Vla7y=<g+`KR$BGgf5>QDgDKqvI-D@?b3x<fWtl
zK<3&vb}}N_4ejXwCWMh9z~K>x5J$w~-6{$&+vLKKRQ%I^&gXg2_U)Kz>*sj8rS<!+
zHRivzU6<34B1KPue21V=qVzo-^S(_>eLg(2q}32%{$eD{mP-xS5E~bX^)JQpXOAa;
z<dhHz<~<~bE{wOH7@jyUI`g;^(+UrzFGlT(_5NIQt_74s1mdY3@*m=<#uJSL$Yw&=
zXhCO!EVLW1UD{=Db=T@g`o`o;-Xk%D-F!5qY+`HNIQ0(O8)8tkylFo10x$Q_^1QPF
zyj)q*rFTX#261=cU!(|KO^zOtTmFl3_-r+1F&{f%zwHY}18e4^qmWVdOTV>Olsrnk
zejm__2*FGe0W)<9+*m#}w;8VqEys@Svi#{l68C!gcRcbYr_CwxB6;%NLyo$ifWruX
zxw%(uWs9l*sd=aP9Zgd3iip!*4B6@gQ@#rg%txlEok-PfbazIf+AdZR90qw0G@bvj
zv0$jkU7muuUFHCqN!l<x-wj$=n;z-iUz%K*2-hT&gCEyt;yOEMAT|)9Lh<~qimF6G
zGE}{oZPzEf%Iy*a;8?%R?!o~OPVZEjv?97<Clda@ZDimbvKA8EtktBF;ciYIaS-Z8
zYMjLtTG7}~H7@Xsa{lxxW%#o7{jDJ$7K?lmAFgSZ4^sPWJ6Q8Z-B}-E;%lZJg*weG
z5<1+SU8mI;eY48<l>j<`uC<>ncAvcVO>qo{BH*A8Ej&it)lVqH1^8ltZM$ZH^>f};
z>OeF(W$N*JLhFEa_Fp`D09v#B{T<Uxx?&kDk0y>vCAj~91X#3>uV}luvZL82wVB(h
zJRCG=Z?0{k;(0mch=<A-yX|`S2XbXVr?LOMS+E>ODg?0Z;5Zc4KlUw8S{Ue=NAhMt
zy*fzEQP~^3*H156T=RgBO!cck1o|{I3=BgAUj+oVI(|L{`BOboW9HRMK5bH`lpfJM
zklc$0=vyP{su9UuV$grDokwLs<csP{@GHLj&@%|f)k#S9Pe8F-XOW?j0PVG^7*QEB
z$-8&Gt=SSPOJWf(zTo`F$^6Mf6LxcA6BUjb$+dlq<=DjH`zQ5D0x)Er)6fh7^|)zS
zqwW{W0nXdCI=azGB>QjoLRKdC(<cqj|3+p_KY8mMG@m3NAS#B?DWg5h(`+fz(Dh3h
zw2-(I;t`TKoN7=2kM()&58456>5j#I0T(Hwn~D82;T4-C;~!VA_RGKgz0Gj$Y4?2c
zCS=1rB2bC9gujUqk~@$puAzt?DGElPftD%^$x|Ar(Fm|QjTTYBd;+j$_6{`Pz~CjX
zXZ7^IT6DS|3q1nZ?tiNW*&y4>+wYBpP^vYtaGbli*gkGzOUFr}L{Xu*cD3Qrj-Rpr
z)cR;T-ty+G(kn)MK1G?3wY$gQ>hu`Gz-MM!`HpA!?oOLrC>lG~969R~ZxJQQ&^Aoh
zHj1ctkg?Nl34MS2TnMC-r{!2<Et9><Ls?4nOgjl*rRLtXeBK$5f`+1+Sl=^L!IETb
zMX&zoWOliP<<T<0qvV56jhhP&qMNxD{2ycsitnf3RE5iJfl8qa9Du+orp+yO#m+|6
zSURIvJ-7DwN(+wUMu7DrnbjDnz;7y6TprNJLO*`dgoQ+<b}uR%^Fg#XJZf;<L!#g!
z0p9_o%)oHnu_mL(oOF91Pz+57qH)GS;1q&LW;7QUcJxIA9`r8jySal|gu@^yayC9p
zq56%iMA2BA^TeHs1LWDZDx-v3OBuu0l*2&d?e@_~;s-Hx=)st2ry61;k9fw@&!U*r
z+ZroKl#si3QvlOdh<e`>Zrrt&zIOhg;pba;#mjU&9pY$jb5u%$j@?5eN`;yhEN)V+
z(3G8))AQ9C$e4fyVh_jr?e#=ezLxj`ySsLAK^PF*Sh83Vg!>VpWG<rnPy*_@x$W#{
zB~YhgPY;_1lZkpi4gcT8-r9E&;P5KxW~opL!FnZw=>f7&&_@~i)~<V!(EM2+9Y%(B
zRcb`_aQ9S{paK`SLefr<hup1s*QkC!KB92I(N*2rb=A#6j<vdPBo2#GuWZSX<Z5E6
zf5_jxvb14?yv|>GuN*TDcrl;Ia#dx&FXb8YK9+o6jw`U}O%>J;zAaaYG`+NCC#iH<
zk`!b~ZA#cgZLI#ez3NB7-7uRl2_Xq24*)1}VM(+HQ-p)liNE~U%M>g$tZO^>i<Vz0
zcH6`MH&J`4D|&%M+7^f%xL+yJI)siL5a~Se?dfay2fHPF^xmJJg#L@PDXOXuH7Ocl
zjn6^Y<eW5OZZmK*lzg^YsTU9_-hPL2+{45wNhOUn`qd_DF44_aju)%8(KT)ywUAqS
zvCdL;Z|EIOOFz(ir)^^lVR84CuTkUVfvwuWS}#(GHI1l(ZWk}X#1Z9Z++4tF<jq&<
z^KmOxBa$Y5E*<5Uv&_sGTo}=SoZPbPTAX;(-K7wzzVfl@slflcRIVQ#cwA*@l>RLG
z!dr)qY<!(vB%g6YM^Th0t}Q%hlLP5Z{tY^wPRcG||1Hj-xET<xIba1Zeeg6(>G3sd
zazWG{-m-;6YAUGGCnGM5rk;aR8Tx!2oLKx_tLBi6?*t(<^_%jLjTe*(UI++*zB~{(
z$+NkAEF+}tNp<Ld3qka;wu>CQgF!Gp0Rf_MOknll0rN)ewZ=u`$N6ALM{=NMMEm)#
zmygIXJh8K&!@m@cxs|;CrSmHV35ZFFQi#d{KL0NTdtRlPWezMyFi^@N14k+VWSLY6
zP@dmb=MfKe;nEzm+!X7s#T_7nX<b4ESS2EV4;moH#Kk8zD7=U?Nv4XTMzO-au#%e?
z{*pc9D6Zy#TV=3fhR9vVk&DbniZ!!a^opOx_CYygOC+Ige8$KkA15~5jI)ahOI`PB
z>U)c(zq$#(yhZ*ry7ikm<zpGiN|WYb{nZtMi@0<x8H2#89j{d|<$qUE-AWhU&l<ls
zz2$Yf5%m*cQYFGktY<cvONh8SAIJC!^WbR!{#9Z2&;pAF$Jc~_@f7Uv7;i}|<mu}E
z<wvOh|GTDto1+YY7~P8#-&u42Xq4O1>NIo+8N^y^D;C$FzK{Q9k?UU8Q4~1}l3vr6
z@hlv_ej5RfrhAQ3+@g{hcZ_X~?^#(W-JxV+9v%W_=Ji%(6Hic?%TZ#tcM78InMMj<
zYx)ws8ekBrp3vkYNB~ryLze6Bx$1Bwd5|lU4A=P?(T8LP+P3=8nD?AH%yzV1J*x*X
zj{sHXpMFcAJm9~RDd6TgSb1-3(Or@qILp2e5x5$u=5NFU%&ayJBn9j17Nr?xu*t-y
zQu2Y5(dn~|SeJ~t$t^Q-K5n;jW-z~Q0Mq;H02p5v;_dwaFrjd7UXQLEEG!L!zCZjM
z92|~y;sWoB>j2ihb>2jL{__pegyN3&y7J$jB{TMhnBG=TG*AHupkhP#@Sq+SR20Bb
z^I%NkirmeF*!ZmUB5yM<v+axcoyey0wYoY19+T!*^>QOU;5zxEr{|59mex{n?1TH`
zksnZvM(;(KRhU5~)>sG7f{Lxvhx#e_o<#(98yxN*pSww$1DE~>hwuF|7xFydHD#W_
zgOmB$IEG}`EoV&I?>3RvD}xqg6gI}BkUEh~f|%kdfd5pgi~e(!7Qs%|B&Z%`|GVhg
zn?(VEApE+2tIfbC?~_esv{dJnTQm4>tpse9ipc!S>_1ZN!_4-^Je$N}_8d4#4F_FB
zG8s}(qqZ-PH&IhhPEJaucS?AZ)Ko2S0mCv5k?scHz>iN4751>QkAAva>>r6plLD)P
z(8~MK;`4D@Ux4prg2k)ndhg2zJnI|SzYDeqe$xt_!=CgfAnd*nu}CJ=DE_~1>fYU0
zDrVPXlOPgamB*Rxm#5?}Um|fP4AeOLFHCP|$Pm#<K^1fXGJ|hyLRJ*oxx7d#nSnIW
zycp3(xSzj*td^kL6&^vQDacI_b9G6)8!X|I+hl57(}@C&sk7l8_iZE?{JtukijFbx
zMC=`${ra<n1bY>T`<-#xaHZ*r9bnsCj1yErzJn+=k9D2yqszwra(_S{&K_pph<H!r
zs#xNkjKU*7oy>Xit~80z7ZGE@hec{c^l!inyzdzq4{>pEnG*(b3X8j^(g+)@GoJG+
z`MU#&ODe@Nj|SirBiP1K-=|a4sES=m+JTVhCBhW-n=hac8D=`OQ@z_d3&8LoC5Z6P
zUOFtL`V8sOw_6&E69trgtB8L~^WqqAM0bYrR39)Yg&c*&^4XICI}FC-f9vvGWH1Gh
z#q-7uNG;yNGh$<(pGajH_C=Em2#~6)t8e1VBzb)-7shB&Vq@-kA{}iHQ)FzZvE^!l
zH9idmn&5N;+g}En+JPUPW2Q&W1A8}N_{nkMzEU?%n2lM6`B-K;6OXI^R$v=APO+Hz
zlcZOnzIxeMEfvD6dp5H74g{^!(R02rObe{4z8Y4pERBS!q>Pn){<;}7HKemMmOI(s
zdfV=??i>qt-Mb$u?Fw4FFO)Gp0(~fSz!z5>sD%A)-BtY3;!m|+K1%KDd(}Kcqw%{~
zr}*uxxU6hft=*b6AoZ3YOvuKaEv}sO_0#^6o5;&Q%abuG7%YCfC+xd!^ZgM&ZFn2a
zEEZns5GYUX1T`5CXEFWecqW&0SzJl*faDxpx-_e6q-C_fG_XA|k={T0xvqKqJjH*^
znBjhu_<W-LS5&dJe_92jgyz}`=ywRMKt3t|(xK2QHyL3>Aa(buUhmE7W#miXGK%(9
zgjH5$a>o7dHF01~rQtQ>crxP4%=O<R0v$;yDI!V;GUVflXDAVuEPoZSs>8v@Z(rF|
z^QTRz%qEQm+e7ykrNZ8Zuk#1#kiT+UoJ?4X8sEfW4vy9FL>pxw1T=U;{I(f<X7>~0
zQC=9ukRWkRvU~_65w1evLgJcyRz8BM*p6JE`;$`P?7(GCFo!2kizZC1)X;)gqA$+m
zcOFW4LhcnBa4`iNe9`*TzKu6>XmFnrg@iJt%~xJft+FiV-NcLkosHL58ta)q75AF=
zbf+9XT<Np<du&R~=PVc8Q0la&jeBFwN_=!Vf7^60G3T;IvOV8SMlGB8+SL^nASGE!
zQBT~6g@?#AB8XqL_Pqs2$yor!-3L`{Wg+!f>(KSf@`L3G%>uL%5m!Uk`@2MOvmgGg
z?Ei-U0io7i{REh2a(xInx(VZPW}w24I2D_B`~KE{)D+$!nK(MCln8T>ympm{VY|4v
z*ldc7#Njw)E>&aLjCs?LLb>t<Tho?c>4+zic#rqfX+gaISG7Ww6F2RJLmQ!k_MH?y
z7lqkPimzL1N3{)2?wD`7byN>-8X6kj#&rZx2&9B^u$%B7FgUCsuY&<*M4e%zjjZr$
z8yg$5SYGYeGLa_m&ygLAT;BONGGWjS%`COgr7Kp)@hV^a#}b+>f7i5Zx72S1jwOnZ
zV@h_RCP>L!Sx&`S**##xnqaX=AZZtVQSes7rZ?Abf=vj{?$G>rwrds9UX*BcxzdLr
zYET}xP=#~Sa?!yCkk1~H!xm%Wd}>cXt`u{?0n<$k)=Gho&2Gtq4Zl{?^PWEsaDI#Y
zd}Z>53Id-u#v<na4A|Ma(^ZxewRY5}+mq>EAkAxplrmy=I~?N+@%cqvW2#!2ZJtL0
zS{f`fSqCmVkN>|Rhp#U24iC{w7}9YXv6j=jZ`!CxR#SoHS{UN)5%izT9<?>k&qDfD
z{w&_ew+;aT=wj&vaRHweHh>a_E8J%IDe`+xy`NQaOkd##2I^vb7nw>>_Xh_i=MMR+
zH5TC{C5`ZbA5etB7{h4H&-*eZBB=DXeisJg@;96>yMtljpL;$i^eI5(d!>{4)O$#T
z)Y}bfwzFgsBERT`kn-n6Cvcdnq+9>l0V66|40~}Xy&qAI#&ejDGTTYTFj?ZfbrTrp
zv7BP(U?9mYDpJA!(U5}Q>BdxDsn?F;FuysLFRz@*f$W*dZqOA(^`Pf@BMfdw#i&;D
z`Y}^cbs;xj3w5Q&+VR7W)Rh@_aTfRWqeSRhgwxBSNIWSx@gv@sbX}z%{mv88oZ@=M
zg(=ZhlC+YO<B-<6aquZsNegRR(n)Vt-S}tO?@#rwM&P#e^#=)n$7Obc{^%qyNPg1U
zL*u@F-%PB&<&<N1bb7NG*SP5eZpdAt9=J(_HI&zhV<<Zq-YS8i5xC=$(C{2gK~$h+
z_kM*b(=EsuNs-$>^eXC0Nf%8RHx@H8W^=nDRKA0l*RkM0EG}uFQdP%?zPKjM=2MrZ
z&BY40$5l-p-XG43q$yy{wtP3z@$7#i9XI{cCwXes;#Gp?E{}d1c;0ul#f%3+03Y9V
zy9_m;XkBRl-dxo_I0-U3XS!M4trW*F%^*rqm1g&sfVDJ{auz5mDp@4Q2gDucwRX;c
zb>Gt!03cv6fOIirF;1omKd7W|a#c_V#~FS+F+uzfOz(s-)P|H^{)`%u3uw~9weoY)
ziQEUk{!-_1UjU6tW&InNBS86?#^Rj*g%G^Lc15ys8~A!o(Ky;aX180FRvr_f38P7M
z7JPN@am@8{#5*O?pMN?7l`Eh9N*P+=Ib{K3=#g2gI|Iet-xG0JDV@n10sa6QLoazc
z_aSxI`5uqmYR*noHX&TAa(e5t1eLD$<5-#vd#dr*65(sW@4HogGOywAKm|IS+5pq!
zMU)n2#Jhx10c1?Q-Nn(k3taT*HVpH(4XR9B3)aYjGoh>BMdHhv3Eu?`oJ5}*<vYS@
z9r6PhLA$JhIiKEdMz4G3N#_el1`pqe=a(!ArbPV-6dqCPKHxx7v@QfEx_AHDQ?wZe
zj3^^Sv7i?#?f1ed1)iHA>(RkG(4c5gNn#JO)iWm#{8uzI>(*+PA8_8{NV*<h^1vR8
z;VsgTUmehjVQ#Ef-JTSCaul6md7cX!7~)bY8>w(cXW*u)x-q$S;D4v47er)7oU|dm
zf3suF^I1$BPL}~663okqEjgBG90c@$Et!$RMAt^rPW!RUdi?9cT9sa$v#vB}bP8Ic
z2w+<M`XosTrpQhH7ri5VeL?E{#JaU_ZGmY;f=Afxa#_MK!%IiBbf(NPolTtkoJ0W#
z=sjzd6cy9yf@n<6%~M{Ah2)?MxPRr=K0gqU?eEcBf0WX$!!BR3KK6!KfQgn?g0T->
z*_|8KOUopto}tPr&y8@;ji_Oi4ewc_hC<m@?r#jO9TL9{wN~RR3hmnzUSpYI+FSC?
z7f2*Agmix~;s}=~zUX~97%all8K{6+I-X1iZL|7)jS(*raI}#TZO<2B_Boc7D>*4X
z^is?y7t$wYV5>pgY-=8mJB}&cwI(PoXGgBZ^Wt$#Ze9jXfq=Q6o>^gu7X*G7WLS|`
z;PfHdEQTf1O8G9?ZV`NZu=@L6bjx+{6NE73&5I}p*`O&cFK}hL09*{`Y7rO$`^x4G
zZB2s?E5O8CCK{u1DtqP+#SzCDhq!s<@RF^W?C6rS+5d=_ulb!5wBYq&lo)Yci0#+;
z`HR_v_MY-rpU)Iu7#bVr-yomj?xTJunLYI<^O&g7QlYe=;RO&e6bHeagrQOnhvMNO
zfNi_W{e?9tVK(c%bp{50L(CizS1U;-0NMQdZvoqpK~Gc9wzUry*@}P=l<F&BPTZ#t
zcwM`=@KK<HlWz-@R>3^b4-)<%f3to>@a*P&vE=aHnG@N8Q%bYp^{jEj{JeW1KlpOx
zWNJ#gI+Wts`pvP9FCaKr8Go7~c<oij6n&_DO*gegya?eMu0;5tp*{w4R)4T@*6LDI
zn7UcepqRb}X)|l(OqSn~i?IXwO-<3G+X*#qPY(@ma^60hvJ&zF%HfQ2Gd{wEB@!}D
zsmi`}1uiP}cu;Ge?7R26grUJsqp^5E_2K>9z{$1bDu^I7bf_)rT0QtX7=tlc%K)GV
zSb<Q+YY%2lq(0dMJ@eIg^{>Q15IC;*mDSMVvYM9&y!|5dLMvt7fj7MGRlRg!N;Q}@
z4y*%3jEu6v#jZ+e#i;cl5Xh*zTaX}1X2a%s6$vIP%9H0moh>{;Lonv{Zo3(T^T(b4
zbxS_TzURZ=o`8ugC{`qdS8g`euqIYkwgt#WoCHsei=69!CH~nOev29Ucah$l_UrU=
z>!XFA+=K5?jKPTOxUaMCCoNKJGl0+*n3XidF3ku<(k7ycr})zhFTDD05AO&f<<|hl
z_2j2Cp=tveSSjQ3&VQ52??;GIATvb1j0BUKd%F3}q(?3I*r`ylL4kQCS8P`!Kg7*n
z;$q-*k%CRD`IB<Eoh30c1iQ^J*Aa~0IM{cGO+LwZ`{QaDv77gOJ+ZJQEuGz6o>>tl
z=J{2o$+0?eOF_ebJQ6)vxvtRLPEH6f^tdL-8N?*7IG_%r(ctcV<O%Jed*K00UFCL~
z&Vg4*09569=>uAF@;4YU*+bQ!+f<<{g}?=uKX8QI2#=k%k@;W}bC=jmdtUVESg-#i
zcW@()5{VG^UB^xFAw9TQ@8L1Ii(%h~7D31VEE1g((rGj@&L6vB^ZjWfCN4nMh44Vv
zKJZFz*z0gLn!I&L#%I`i?duZ;0Rk{BYys$0%59cfDi96*#BYnEz5YI|9FeIw?LaUs
z62KfDdU7x@ec9{RClLw<af$<cfyAS)cI5I|`{M#(k3fqi=aBw3SV38QBuhrIdq7A0
zAV%JcqCHh2qjaprSt6V5*Aq&K<oIy^;-DW&*p2+$R7BW+(u<G3K}_}CaDja6RF*Y1
zcgj!+{$AOFU|M$A^;{rH4I{D4H0sMD!lmKqmAsLIUfT`babjX7ECx8D0as1sZF>OL
zJ$t4?2E4J5xv*r~=LKk6OCMOOeI$o5gY*Uk;~2Eb1BgBL&PWQ=`88cSqk@6!9bu^O
zvdwG(O4@6EN=Sa_@bGY?X4-2o!ZL-`zkM%AgpeKBxkDu;08R|dJTWs*XI(C8^yCPw
zh$H<HP*4TOF{C>S+eb<lGHAa;a;LvoX!5?O{IAC2wL_v0b2R?_XE2O_+%9n(OS(PA
zFB2FlWrRpTwPS5OC?xTs<DHJ%SP_$ghs_R`dnPJOBj~o)kS)bLgU5({wc$ALF@hrO
zVc2G$<uk49Qxg5_{fzT^=61=Ff@^3J9|m{x>ghzq|9mII%*}_*Pqn7^0shZDQK3JC
zwuq2>6lh=XATg?fu9ZZukA-w?GQtWr>hmA=o;rd1h?#Ww;s^Vb*vv1bx!N~YVnkYu
zVN8w33YEKHa+$(o3Ke2t>Z%DR9`xzBh^!?+qw?5WrFoGU6Fa@a*Es{mux5-39Z$vh
zkX|1CifH%um9N`-^*Tiu5C&=S#WSvvWweiUv%7DEj$t%_FsQXjLfX)n_Z;{YwO1mI
zj9Ql1oqSfJBo+8SY<+c9lxx?%h;)a7q`=V9N|!Knm!N`zlt_1XOCtzKcb6dDU4oQ^
zbPe5|zkBqY-}`>w`quLN<2pVwb3gmuaqVkgTe0$inF}VEWu6<g8LKNjs`wE?-dOBe
z|4l1wn~=dqL2>3eC!*%5lKHnEx_&!1o#`7|PSjRn?Aq-7SwLN6$&w;n+Lx$25Qp+*
z`>*n(RHAP>FTP{Mn}E5pymjzmR<waq1EM4LkovMo6<rjsn@&ov_YI%@WQv7^bFrFz
znm-qeR`t;?SxWkJ=GBUJlyq_sYm~!;N(=ED!E1Q_DJHkC&pN-|ktg)fiIY{$p5L>{
z5})<VK@?o^ef0VI)GG!w07JDZ#jWUzf1}+lb@UG(j>X@oGc7UKK7$t)OyPibtGB~D
zK)$!!%(sVMt@h?kVcW1UueO^M5<ZydK?CZ%077c@D2*3-SYxfsRI(ixYKoHeKuGgg
zp(}HlGs+Zwrbh=$5$Co%{lP?8MuX?5`P*&nDPZx~ik;vev7COdBC_=*1%AE5kkY@)
z)cHcHx5nLxWH8pwf<Mu!V?7d#H#(_w;~)RYFWN*k*Zj~M?lls38=c)_E&|-gNg0+6
zr=^cxQP~!Pe2hen*!?Z!?VQ&0c~3(v0rWOmogY}RAIq^(<M2czFM59!FQ52Zg}l4+
zRr_j=6S_wY<quFq#|UOZ>-Dt)K1Nu4w&BR=_(MC0{*~E3_v5=LSFWTMobu*Z)zX|Q
zb+`paSHxzXK_oOFI&_>s^C@w^(FG{jo$S4l%3AdOk<C!Wo4HFA+vZ#+OKt6pP7P#)
zK0<Epy7oExXkJoUqY7Ajo^SnKuajIQmt}T585fvBCj2yX#ND$=lX?oE+R^||r?&g8
zR6ccVk7MMr%_dsv>#wEy!Mo6RPwvI~M;ir)<CL$yL+<feC64DholY!cs~fpt)B6_@
z(J|{6R&qcg(B%o=n;9<wshq`V9DHlO(k&mWq{}nWsuNqaiYPU6o?WBdg^0vUbC&iK
zM78}39N**DE)ho~5z$umcLtzpVMrT)x#%-Y1^1Xs7GQ!tC?ur)n_>Uhoqu@yP>fP>
z%Oum29Q2@AJEr9yfF2bbTwCM*0oj7|Yp|=7k)Ad)zR96C6Ieuu2%4X&&EJ|<=3)E(
zRK3y+=KR79oyhRQ>XZt_h}<skPp@2HROh4TH6T&CN*OLzr9UnZnq+McnJxI!$q~AA
zwJS!lIu}W91A5XvPbvdR5=ldpzV3hSM5?j2LTBA6w3mO^ieV0dMfC7oZtq8}zWEZS
zwl0H0l1qso3)U~t!yjM)XE-RO#5$cs0>g6Um)!cPqrOG}Z3MVl3@T=#8jF)%1Gi0E
z_FUhV9P9hZh@PFd0_;d4uaY9%Y!|NjrX2b7JZYN*sTHskiY{4iw&gVa&HGGcZ+SNs
ztsiUIS4ooAQMZ7tc}oGYM>BJs9xNxzE2bCA5*M<nk~9GG&<n0K=*5R4qrH$XNf_jT
ztVha1>`myz%ekYkN1DI{;z2N9jrj+DkcxW)1+Dipb8GZ3mcJ_}bOt9e38?m&JK4GM
zvtA7GY4b2VhGF9OZXk2h*RuosPP}T8!_E}6<0Izux(A=d&3}SW?438p))=ePfv1&B
z`|eQV=Pv^`19G7>gd9$C(kZi{8d~Yd^3^!MEF!bFF7`M%i#ql9X`TknrPi<l!Apk6
zac=QhbD8t;$-Wzb1uAcuJyVgwN}{DZz!;SU1Y57$-WEbI7#0IpWo^h59En@zB%2Fw
zpDu4s&!q9Gd_}$ULo%Y#dA)bB9fbJhqhVOuKZ9!OeijE8e>|;}8-fctLq{}_$PoL`
zKFU?!7rrRae~^4pyDrQ@prkketquVa$30!8Ux;)^yi1Zzqi@^*C49eGf%belbUVZ$
zbO!tP@ptFib1OMU&cbaS{tjA+krnW>R=?dpUO1(HHk(_5THU^5T~C0cp3y>9Lxt9k
zl_|anhCt~)qd7Y}GcYl2?mKn*AkW+OI+&-#4$mom1P!`DOiVWG<?>*@^TS9xH?V0F
zDCq>3vq(e0;^!qw(vXAkjaM~Al!5CqZNCfARZN@rudC|4I=jh;E2qL+Uwo0C5tbO~
zQ%h>z@R?QLcVZj@Gi1SRSTdSB2a|qen9L4^fZho*-SrH|L`>rexEyJa;<;RnTLq%8
zW6Uyh=7_c79pOnK%Npk%+ZY7Dw-amLl}yrqPrQkKk0drcqAG@J$ShE<tAxO99SrCc
zLBS>nLf(4Ey_Z`eU^CXVq?lM6k}Z8XfA9^)>gs9%Q}9C>@(p8nGW*AGx3qb%7tR(#
zIyyr;*ItUJ90-hbdWo+B?&Zz;W*N{XIxa@WucG}uR)a%CLv-{VQzH~Rza0d{r=5zr
zVh`C1@Pnej?Ux6)KMIXcHfe?vg6J6512tpDXUwlesE&~Dgv}`_FNX*}XCye7vfrG*
zl*Iou8}wVhyJzP$t#TRX$9i(Lr5)*~4p+rbRu5EDW}kBsR5PT1DVa9ZiuxxjFqWrf
zufm_yM1lIy!DpJqj2COhWwN=CXH^5P^tr5lcp04NhYq>N<OS3%M{t6QY(g?jVb6W&
zK*;G`C|yK!zZua^NE7Z`yI5$(IfrbPkn5@L)#=XW7qLK27yz9<rmVsX1D5Vjw4bt*
zlE{EgY+m|K&CThjEa0D?9#1BQ{PoX5!Z_~Ok6dWs%b*|lm1fdKp%1g9ysy~Uq8K<1
z8j>nSM0y)+;MR@i^8_{O6L6hc)a4yX?UTK3(%$K<hy$D^V2FGyI^4JjjrjF;S3AMC
zgHEu((HZO$CQk8=7h;jiB1y!MQ%u+|Rg$x6PczWIeQ_UjK%`1iWtJE+<ya_^SnU=K
zyfJcpa4q6~vsE~KO(uLLlO+^eqYn*$H(J}Rr-)y#{Gn~hY%RLR;BQzpauXWX!0Sgp
z(H9AJIW-8&XPQf{7>8ENk%Z<+yEp^~wM{azPk|0n%c^Q=k;Yy*2m!MT1`V77D4D0~
z3kG_=Jv8YOAd+1aLf=0e2`3jQvz!;!2!_6jiH`Qk%F4o6lUmYmi1^Ku_@kio1!Tk@
zco{yB$rCh%qrvM8Tt8gU0Eb6$j%vFN)sD{2{Msle#Gc}oV{Kon$WE93<bzBgf$9AK
z!uo@serB|aP3*i_)i^^f@sA+*w4wQ}{+ljDhYHx&Rw@*%7khjsNJ6db^wDhBiVwFd
zA4KptDA8I_My131X3E;!0fe<0V9o`k;gYJ<8VI?hbq2RBA%F7l`&j+Ae3kd<U*8-o
z3C;*U14~?CknCWlX=t{BKnE?p%$CZMv_eKvV=AxnF-SW1M~cV>1Yc(d7+dVRXyUqU
z$Od=ZBDl|LzO|-3-JLBgh~%Zmr^PD_L&v}vcQ|&A(u&H`WHdB1O#k)`9|&rEw8%Q$
z7Jnw4MTGN6S2G3cmrJ#57{n~IF@R!w&{VmU`Q5u^z!CvD)B|w!|6DGUgQZSlE~C)8
zhrxuzylnUaxl&GG)31Io2ZC?NtP?vc={w>Wu=*t%2rX=|$b#7>@^_Cv2LyKIEcc>4
zK5vU8)IRjMPeGO#UQoBcgE>JvV%|Qg0ou<LWT|1T5*FiNJnwTQMU%*d@Q?7w2qAbh
zwR^aIwA|o>Vzaq_7S_3Gx&7T&)k@;dfHqo7$htRB=Hu-nS=wN*H2^lxHtibFKA|JP
z@HirTs0AS6<12m7xvK}9A(bH@Fcgu!zw_E-w<qMq3@qy(9DI31Q9crM^z^DP#}@@>
z32YcGkj)3{`t0rPcjf}Q<+6lct(Vgi3GtyQ5U-ld?e=#!higz*^aXz`1R97uOtgAL
zO%~(dEetgH4)*jloQ&QHryRo9O$nWXNDmH85*!*36l_Lb>YN2TZ^v2Kw*3axHtri~
zAkr{<sYGMb=a9%o3*yFQcl3t&s#<TA*@0=B;Ueh!li@h2tR<V1kU<DMnz9Y{v=vmW
z83lgAKyhl|aAmUE+P4G!uLzVbV?C?%e|-@YiM<@3A>yBd)5au8qF4c}sZDLH+lqWb
z@Q^MnUo|TUky7Q$h3iOd>R8Ay88*TcLs-Ke#@x`S%q`^Xh2R?bhAV51FDcwK^?m7d
z8jt+Kf5zem57l4x6_QMN{?O25j%wH2K2G1{h2aI(9qFur1+4|1RD67oX=!Qmii>yZ
zfD=mq2S+OO>H^QmnO_)Zs1vq$hy6wWkP%~zR*P2eYi}-#6HJ#eMa`#d!;~C-qnr(=
z5qkyjBf+6@{ynt)rAQ*X9r8@A4-_6KGavZoRTL5+CZ1jDh`yg@YAoFzSrEsA4PH4*
za^j;L9~}X->zK-H(z03c{QOyGhR5(LT?fDKqSS(O9QDlm*?JprcHCK5e_NW^Uv?aT
zO5+CJbLnCn*^0vpI#eP854&%p^*^^erXOJ3R@V};{pizZx7K<7<Q3M$_@wjhj%c&r
z``+KRtWi)gUb19vNV1ZD)DYj0VF__$=oU(D9(q&i)4^__4E-^vC&q?!Gx^6*AS0@I
zb|C~m4t7*hzc$@<Qb7`Y1OfQ)JMRvvoxx-QM?Ann(FF944R)M3L5YM)Hk_euSSC*(
z>1RKk^SXnR<*lBH(Q}eOS&(&;fTgN$34zaQBmI*hEcriXTX)jy{e7xEhW4ZVrQp=P
z(EJAhR~s!~Dp~5Fb&lF}C6tjqTgX}PeM>B|kmN6vSRzghnU0!ye^?*8<cYyA{8^)<
z$x)H;Y4>tpDqKq5hkHfTM|H}aJT>KPxsR5YnGa4k#RP@;Fy0XZ#uhRi&}G>+Glsde
zUAW~*B@#$xTV}j2X<R%~KR%I$cn9H&3&V<1&fJIecF0!T^fYng+w6TmTaW%E6ciLD
z7kL{U(JIha#y9>6KST`+!^F|~buxw;?zFh39ORUstWJ7f(sr@Tkx+4lm3HJ{xjPCh
zZ~gX-^LbLTbk<sXUo1s*nNr@%CmZl+>w}y82kMP(Uu@Z(tuF^nm+k5AayRc#F*R79
zl-wtNjU37lX9vkF^z!z%nBiho3;qlWzy$z@vwy?FXB_!Si~ommR%2{Nhy18U{f}$5
z2{^cBLctzGh*I@sgvTc3){WD&xkX6@U((014n+z@D&s^VT0nYIe-s2N18ot8SG}~@
zLjBHq!b%8P1-uR9$2$s{@rN|`A<@`=Fvu!w95H(A!ev>P<sI=?AGmUIO8m3ucSb|K
z3FlMMZqIXvLuoW7!NT~eUTihrLKPA;G0hPT{9vm}d~8k4SFiG!B9AYk+}bxG*v@gO
zsikY8{MJi;1!7C5wl+4(8XEoq0m!sb)8dJ=BfIj)lgYj*SBD_gz}P6~!D&4Gd#||v
z-YWt_R;{vopc~bCeQ~5$F%=quO71s~we_^c$};e|CGAds9+R$UI;msCkB;XzYM|aC
zbkmb2k%Z<$-y=QxdsqV81c>O`e~TYJ@qTZPhoUYI+*jaEk19q_ieF%?a7#y;xmw@y
zCCkecj>3ZMGoHAmAF)X1mq}!TByrw}f!TTCE<$9~djYMz3O38QJJzgsJ?EI?>37>>
zPaC+|h~|@1L-s%|&|`Y^{RmcFh|Zzw`go19^d)R-Y6%$<!<{y^3Ds!C$Z;VWz+$D9
zbGE1;8KTu6MSGD}NQ-}k`SIh&7>KOAy!tr2bHT~U8JUof{{X+*d3%zB*7^J{BZK-x
z`&R3F<8RB)P}y{7pJ>GFtMytoO~Ap3q;RzzHua?V@{dQN`+IUkpTSDcS{quRiAfzR
zjo{}QJ!CCikFFb}35J>DqBKPB#CUc|5`zn`=$8w?{t*)^CdqB42-)CgHky1EB+&&R
z1+dmMqq`*f*UrvUlHMYzOGZ-u$sB81Z!uo7Olebq)zD>=GX-iX<i|~n1=dU2CWwPy
zl5k)m1Nl{%BlVc6x%|iGV0r^z2G;(Ozfb8vOe}A79Qf!}D?5-$%RaJhEPD1{%f91|
zD_1G?r40<Um!)N8#Vjl=0{<))2!@pX_wB)F8{mCx1eX@vk0uHhTPUmZ?xZUo{ThqY
z6>cWeuY#Z75+<O}Wv$U{pgk4Q9+dUoiBJwgarf{hTElhbF%UVUS#*sWm)>IWqVZ9r
zfd_3=@Ml;`Qx=k;Nn<Uv&853K47y7(J?YSqPQ2>wD>XH>sJOV?tk2^gca$IE1Nauc
z6){`^5)B=>{ZGaLg6DolWHTndH=)yH#?@9OpB8eQ$q|jrbP8UqX!CuZ-Jl;Wu{Y6H
zJtCi-?%lgPmVv%dmuQB7&Cy6S4sq?|h9VfN2jMe1CE=;IQe{HBLA|2QZgGF;(O+@q
zL)?@oN+Oaj{>bU$!gIm(c1`NWyW6YyXC~2oNqn|tAIF)@rYq3|9JZBhpV$&cp9T#5
z2Hox|^WOnO!dIA-p4a6hy#^pH(yFmaC!t8KzP<x6M48bK5;wRuV?9vC+8cA2_qZ}|
z25lVBV1<q}{g2<*EX@zPrgg+}($ee73AH~tk+5}bvH_$CmC17Bu>f70Rrk+Uujb)-
z0Ft;vOd*vd@2*>AR_kKxe)8((IonQR*7Wiz2WWBQHxcRgdC#DdHmbn`8h8bOfx#R_
z&9~QhMgd@MFF<$#Tnz_j+L1Z!VCaaL%XY6ssnehLH5~8<OeufretUgEEa33;3#(4S
zE!%@f*m2*}*W6$yxH5@c4fyMcdtJpGk7b|ebm`3?Lzc&DYd=!&_M#NBABe65c0aCe
zMi<dh^)f}y$pb`#8Gbr)_amJ@jsk4_K}m2P7Zvx@;rZi`z<CD=zxDjTme9$mVGO^K
z$&x>wNd(sPS~^0A58(04z!g8B>VqSca#<1~kEpo0Ujm+!8TT@^*u9=gL;_~77sAPt
z(Z9Hg@Xs0M!`Q-lTVNux9fmgy(a~0hVAZ_<!=;#aPBp^s<^Igk1HC4>KNA4AT#+yh
zKHPUiuf(U|EaSh%iv+`ZZ$DUA+VqL&trG%x*H2SiHW`oChs9@wj|RA$c57ij3pLq}
zcV`9C7Wr>FYqX8qPK55RkDPYCPn20NOM(Iaz&e6pNK~cBpE@Ih;BU+pl=k=c2fKn)
zt2x<JCl-$Hy<utjsj92X$gVY#Q&!Pz=}mg3^rICfEZ+hCYlB_U!6oVdPDYT)MoIhD
z>iSG+P$l;DAA0n4;9j%LLs7k}8Cfj=Ov6q10TtL8ycBs1c1|;}vcj26V@WTPLV}K-
zSg%*N2jUb`Z8N@&2cq2${I|bW_nHR%ww637`D`9so$XmB#RbPo=PD+PIViGz$$k_J
zjh3D!{%aq>f9wN|C_)g0y;ydu!w6aCH5Rj!(^ZALk+u*o5&&bK9IW+$O{!g8HpgtI
zd3w`-Sk5=@-HWt*0|r@ei1P3E1JogRcOk$a1ED=9tG`629t`raWMdfOui}eS5nvCW
z#a#_<(oo<?L<^_dzR;uMHi%pD2RUWQ8ua6|2}oB4bGuW_8gNrXlw_Y;NiCe|y$CW&
zvUoDI?Op7yBPtdH)Nn!Lsz{KDg+)U{x*=9JtHgI)y1w}JbEu~!nEX1iLTzc1plGPd
zM#mZK>D*c7%;2vM>u(WK`*yIy5_?|OQas%~X#}S<TWCGDDoObUIfR4OKDdom(wiU~
z8BchMDrVPuCKQ;@lOW$SG$i%@JvE#!Vt^4?r+>Z&v}*kgYxXY7l_Qh+Y$e08#7rDA
z#{7uRjMA@4fL(uP0d|dQxTU#lYgJh{cg{hLDi&|cJ|F(Bw6LQWKkxvID276pI@bWz
zgk8T2)4u->Lq{qWBdGA+<;BLrmuHlp@L$d-e|3x8`?R}KyRX;u=6fJ&R+X`rCiRbe
z<V~94Cx1(jj|`Do)-99)XmCi4q<6zEqof2I-eP265S5ffR#jDvjETt-E6=(Un9104
zwXxwG86AyEOe_>Wdin^1X^UikxxIG1OBN!MyoMhP*0u{@%q_ablOHZyzX*bmB(?l>
ze_ms4hafzu7x3d@dh%PbK#o5b6ba*zF1Rh5Uz*<&)?we~3oGaT2pcPXK>WnSmKXDJ
zU^VH$g=dD)+~QWKImATRt@*&+QP9WJ4%E58hWSlCd{90L09&<CT+eo6qmUj@p)X#|
zEn4O2?F<-IM9UDefNBGeAUsJ`Ma6q_^CMthjXUZ&@|Qmu@|(K?V*HMyinhVf4FA0d
z*x8z{WH_2)0*(wW^`{jZ0g8mzesajLrH#kgylT@;9#5za;on&X@}<dEP%oToK!(>4
zHMAsm5Uc1pBBGqvtp|TS_*%N{XOAmp9*jxspL~P&&HUE=$UDhYbO+)&;zc~0qGf%a
zKq(1jE`K^)lcfQnKvjr;cZYr^`|`mz^up=gwx44*g4H~vvkr!fj8QW9GWzEpKbcQ%
z6O}(*U!J;)5CRoL>l(rJ>Oy2qtRYSO;Bjf+)3G#eeER!D{GoqtAD%m>;v70r;8Owi
z@A&Im#gRV+YQYy<Xg`~ZR9#Siph@-De+>t|^#{Daz$hB2_cJxtydYOpr$G~oY1=yv
zWsRZc5aeDq*0%OV^o{O6SZXp8Y?Mo+$xnphuP$CKY=AVVk%#n7@Xe>t*9lExxYS`W
zvP3EIFMWn^dfT(bkF2JC3JQwk5(XZw-moSCwL1Q%QM?|U`VF`Qb=VHQ6h%nLarY^m
z;gdLMZgwj5X(S(ltdziNCb(<TmEwSjzHV}>Ef9Op3q1kvSC2CxGz7y3*Kl2oab$$d
zo)xDm=JkQz`^O$myp(L6u(ToJV2CV1s_!0UpW3*TDf*8x-t1;2TxzVuQD205g&GTJ
zO0;wwPJcTra4r917L{vpo;`6Y6_goZ+El?Eoco~2TB;ZlZeMH<jFrb{#r|%g8-}+2
z2GdQwXch$ImbLcxx@M0f36W^7{zhh2-u&xw{cd*WLj&5#_wV1wKuG}M37nu0ZmcrL
z^BTcC>$)gSn5av!4&c%lOib%J)T!(pw#+uTK72qGI`vs!e2<T|#w`9N=<j!UszK~i
zReWq$ceZfwsfqpu0jFNLDtVqt<`@foE+H#Lr(&^hBKd6Bpe2aQwfpYR(}*WOA|$C;
zEk6C{;2w_j#WKeVj?hMX^k0D;V_`~oaBm8C_yZizo%SP&>9n~x-^tLRLxisH#%T_R
zEse3vN*LBL30?!DH~_e`f-6CNG>{@hYC2J(p(<13v|sF&K|!p8?6y!W4Pf<T93*_M
zYIFvZR4KGKa9YC?C{B|0Ex<)UI;5J(JJS9!3lwC9wb4$+Z1D5~o?)z%@k|6<(LGwi
z2LrrK!-Y{UgAAPsBc~^5Xi<M-2A)UlO3j8*MQtZXfPabiY=vu4OUwI(8|noxmo~Do
z-}o$xm{%pYclv`UJZ%v>R#sKb@VNJgl=L?kZ91Z1d0mMrAt7Po{_khv-7gHeZOA9l
zbTN!lp}rUld-g#I>m&K0&Xegsz6U~eK34C2l0=!0dY*=Qt_&s>cnPI%J^@99d#;2x
z#e{!6Ir-T5cs>(kzBV#+@g|AX1ne0G=*9CAu|J0jt~dLNK`=&j$D@Vl7qvBZA5zc@
zBka68?mRt$z8D+FEr~XT@;}=7TYmPhihcaZq?jsPY;oa9#cS15ETQogdYP&TrtG3m
z{qF}?%N2TkNEBE8^8;7f3o^F1&5GVOzSf|!Ugyu0Ub=G@sjylU)A$Y<|0e<Q!JX40
z2ddX$8e!v-UFZ;ZUV$}RaQoWV?_<uH`b!9^ssq7W5ap5(gT;0BG3c8Ors1hjn?%-6
zgisd5TTRpkHZY@*d`EacQ_g#dA?d!@KcCK&1>dVYU1_p;nM@sg5G&nuW<3ZQ4EyiT
zHc;m~h%h(0)|K$@i+K5R;k)6(8s-ww;LJq*!-HhQ)lCoK+nd#g=kpF+eVZ#NhQn|V
zrA2)Z7pj&cuTp*8j4OElMbYG*k>&^Ljb;!2UNAg!r~Cwq1sQwdzQuAPGy30ndZG37
z5ug)dZcUVS1CjnQ7MSE$VfVTM(N7^EYIkSuN&U9FYJcq<z#c@oq<OYZy5C)u`*{U>
ziX0XL`}@b)9U9lZq<3t-JUg;>=d0$;%Io@L?=u!WfPY}MImVckn_GB?(Mmsr-SOpP
z@)Ds8p)45Xxwx)ZPDC*&efS}jJDBXRy$fHrYAPsTF)=ffwlD5*n@{_}$0|BMJ!D{E
zkpQ^h^73`{wX*y_CPE!?$dBVuS0E;nMFfk>q(YZk!+ZVr!%;i&U}B(b;aA3`=eal9
z|2(P#+olf!4F1_2(*xnB530uQg)`jR`~Qt39g9|J4Gm;}+da`25&vFoS%#{*gU_+R
zmNpw~w9F25L~C&Wc#sU<C8EKiqNn!E)Qpw75+moT3-6F#--2|RwMPWQ>kPw7N#2X4
zPo(MZ?_yKTt>E~3W5KOP0rLRA{&xCrZLHe^u(T>aMAgNnvx-Hi(z9pYKQFCrpP2+J
zP@$%F-jzk@c_B95aF#Xrr}PaeY=E6)WAlw<TG4}$?jJWW3{>6IpZ~3sM?NgJ`G2II
z0~tVzQN?2-JTWhP`m!n#r)J!9DTIB?U`Sv48A4#$?+?iGOT1v<6#UqX&(qVd$v_s$
ztXa|lRGwqi0TlSxyB&g3weoLuV$GVRmaC`-8%*YP+E2su#%t4>olauA3Gr%%A>Iw3
z+|outUpdVkT~jKfnw27utaSeh`={6{C@3g1|IIC*%>NMViueo?ihmw23+(Wp$K!p<
zyu5UIm=MHMY3<_G{=EgaRC>fP8j6o~Atk(D?UweA$|~=rs|YIWpXwRdZjyi_HYg6k
z5>S*CDZPJA7?&1&>T7sgfi{ZxB`sPy4h9?gcFO>|`CH;o5Qh>{ff?FpX|y5B6j%|I
zMCU$a+;k6d5eUM=PnazUC3xbHlk#r`2lv7Md0XKLgXN<lx99rXbB%AhlyPVZbXtCq
z=xUY!Y8^z!a;TDnL=oQ1+*%@(WuW(bG5P%!u67SRYMbdfK!`3>;{W(;@Jzh_ex|VF
zt~MZakzhP}>h*(8sB-Z^;1RzX%0S7z+hm+;TAXuJihajm$iNX#s;#pDM_C1OUaUv?
zqkj%z?ANcQmEO<i+Z98&l$31kQ}6~8JTk<9isZxJR_0RaqlwaY5#TQ6e}sVZy<U*=
z9mg`uM?ijb|8C!*se)i`l7lVEPyF~O?!DbhzDU!|CmbmkKL4aMG7=I<+!ixIlapEl
zsUq+GV|FS&|1mpdvhj(D5K(knt=O31dqu^_$PYh~A9xN5%~OFVyJ*Rry)EI!8Oh>&
zGFO16nr{9d!?0RtL3sMEi7b)ZJbE!7>3<uB7FfK1WQY$7OVGi-j?*BoZArEDYF1`g
zz3=&1T8u%E-r3@oR;o~J^UXaob_6=2C%1X-|2$lfBI1%G9&7;~|EO_C^smYNmqpjk
zT7dN))Ivf!vxj$J_IxPR*1jbPeL<w?I8FXgl1LU`rmW3YIW93q>gLefeq1zIoFHB7
z>hIAvDw7@Xzb#q)_Zz$X$CM8=LqZ<0sOsmjY1b%sDMyH&Pep0txM^dBGL5XsFGcF@
zt$nDjQ;(Le;}@Km>mMEzy1jbmENX^U){D6^i4b_5y!Fq;BzQ?l3xVi@$ueGtZQ`WC
zQ}<Jhf6YAQUo(eifR}z~1Y^YmA%wMMb(wu=+eHZPL%cj)K{=Frn+mo^1}9(P%XnpA
zWQsTsaonapw7%;{G>S!(DiRG#JZyKWLMMk0+kvV|RYxZbK3D(-aI_j-zH1Nt^LhWn
zpdyJLKYq+>zZp{(OT|u2Sq&zt5uLepD;^WSDZ+AuF~_)NM+ec$m<|sSq;T!I45i+|
zVkJF)AlxoKlp>IO9{g(U-Zlj~236#L%mCgveEPP5n3UV>Pi*>Q#s6(#R+#oepy)%#
zeV6_$pYWWW^4z$@5u3JD{W4P%oxPv{N`x$YzxCa*A!L#K=J~`BLIBLq<Ly32(;V5i
za2QrLUZ;T>M_CR!?<)-T`pWc&j2!+Y|NQ2WpFh38upoqvj+%>0?f*9Lr92QJva_>4
zGGOA#3}g7?ix@w(c+!Y4se<@4?_R*8kG2!nLYf%NUyf_dL*J*%Oj9L6(n<TEVAHbr
z-N0zuA}-@6WWsxyAzo9fEp;DtQ<0?eQJ9jyrme7lYU}*_MS!Pp>Z7Us@{g_ht%JY*
z3Fb`Une-y-ucBAJ&PQvDAe;7WUu0*chB6irFGlL0SftG$7(BbzT|8}N5QB8Y>~%o<
z)qrF~UXl=jK+a2swq;CJR|Tm|3*X_DPJZJq+KH$)IYX7{xAI@b$&@h?f|?AWE7e1-
z@ZDd)0NS?B`ub!EA3n@a-+@B@btiWJx|1^KR}oKP$q0&K3v=#7YrGd9{3yj^<YJIw
zkhx2t9~iYII}v#ydXH%XS1gr#;LT-FPl81OCP@Svqe>#Nl>UDo>9knZ-0*U#_z4t9
z$p0G;<NEzGr6S&g7!ec^5jZ;4ge?X90oAj=*-A3#zUwY`g~jt)Q$J#P4G}>nc#!_;
z+&wipAHIhtQrAl(*^Iejs>s9bx5^}}&E85!m61vN>A5d{iY?t|8UInu^<jV6X9MXy
zLk+#3=`)RoKqJ5;`ueA2kTh`r#bDGGq;!5noY#odFW-U>cKgT6mWi(eG5~zg2Afj&
zDg1L=*{<iB-*=+hZT-TUznVMKE!P5AzHnLQ%>^vAyB$X)6qJ7sc}EH6O>P%9g16_(
zPN!4GpaSv>X-yGwjp21(PY>Lm)Q@<+HY`P{adx+e<JkhIP&rfd?tcxUVViY7n<ak!
zQ9W?3+Xr{^->Xg=b&lcp;rt=o!)L*FFu})$zBgC`=XR~4sTo*3=YqjAV};ms7+b1)
zcYD(%@qm)SjlyXGLEHUg+-WVrI5IieTsupHVYBIG$8!0rX-O;ipj;-g2kFlzdAbXh
zE-x>!?{wzt><jVf1@}Av%X#@^;+^JVbE?Os$&BaS&8F=FQS&*{pS4-d>&mD5TueVj
z{1z|Y>+6rZ^3l-&QaWzbzuy-Ub?)u5zwqJ&C7{~-w&fA{o~+pa0CG1ddSslzppM$_
zPT(?DmynO35K@O7-rb%xD`Jg4+EAu0w^?3Gw0ya9ayKP_!_HiAbazKkPp3jd;=1>Z
z&|Al${C%*HP;&>dLMZJi{+nlCGf-8Z2E9)wl0d@H_?qGKgh84pl2uj{ii_udHv}s(
zCJ*?1x~t=0ymsZBvS;fEQv|~yGp@#iXAOHBljZu^&H91Z<eU5lj`Qx0L<rObGAnH;
zly16?GuDAuq3?@U5Y2IxAAAm~tlma(Kj<VXA;%_p)*}Jg{XX$_P^+MqflpWyDsgiV
z;c17benDcK9~lgZ_L7H0g_Q-y#07UK=uedB=r|e2vFgN#>!4Cmf0Bn#`AO5+AvfNf
z{yx11OCuC%>?2XB+J4H&NipT19{K1(@N_CZYGl{p;3Lf!+i(4{?;>T~8RT6Kl}!+Z
zMrpepbh1wSRyu8m9A}Cd=uejEv0{-UD{ClZiCiz@nEY4*L4QhyK6yo6RX*u!pW;d;
zghLwzhl0$bUbY8{FC$79-6J_E-q#OZ!mw-cLKqZX(s-9AhKi?PK#fKP<<#>#0Lj%(
zD+*;L=<t~;$K$@okS=uSW6af(kqLIcKInG%ZC+h#_p;IDq@X-}c^W(Fu@t#|%$Dw5
z|GV2I>fp=M9n!ZfEC2&fAqVHkTDJs@$Db?8U^-Y^H(VU^A!eFe1(GvCFrmXnC<C<z
zzumen3b|dRj&<k5!Sf<CUMXSvBre!nX#?tD$P)q?1Db8BRYU57%+?R_O2QW%vp)$r
z&D2q;I(~`MMdOM=2zD3e!MLL9Mt0oHy5XP0Y`9oUWc{`nKx$z%j|XL=@Hk&QooK!t
zZ@ND0-`{-rGk?HQo_{#bYs!bcz|Hgim3D=ZLYI35YyNjFw(G{uyQeVsq3Q3Yvj<u!
zCG$Rq->?lc<uy3Qr&9Pc^{;ASDYkercAF^uG1$~1x8U9L5}+?{oHgGyhTQKrptc^|
z7MM89Euh&<{J_}ko^y%QW?kcP`}NSVWDQBh;&!^sec$C<gxStLcFw6lOHDG789JZy
z)77oO(}n(_i(LM<`@}J^E^-s$ZB}IOO3e~YN~pi6Rq49$dKSA~u-mu&Mj7(v_U*me
zdUrQ1e7T<aY1ydYGka~k^uk1Dn9=J9{(aa&scp_F+Ts@U&7$W!6gNfQQn2o+K95=0
zl&xXE&1mO|wvuwfDHDMV1R+71np6*mk&OWDT=f+HKX#DLWq5J8TBX~1{|zWsGSK~S
z6JO+R{NS12=2v;=b|6t5ifuQd6_v9CJRhdzQrc0hvsbvttrL-oTIt(Hma()Kh{iFv
z+3jSkO}<s25n>^r3d`QA%%-_L>}PY_3IoMQ#o1feo#)j_XB+3;PwrOPJU2qw`V^$>
za8El0hoEX8Ak`j5i|ytlT6`PMl+tuzrD=JPHke1lUn`@~eZaBujRPdorjupq$<AvD
zgAaIjDo2y3VwsZ3PXw)(pjUgIcU$sIn-ALyte3ki6v@`U$&PCh6wwTN_Qfz-+<=+G
zx+8j>#reBiN5|U@4<fh5Vc|iMJ2y>7vU(78e^r^kc~fJh=k)o<g8MY;ZyWh4m^NSB
z#S!c`z>&0_;Z{|-a}P01DuRObb;wTeB>%~n+K$NGMMPmY`xs!E9npM3=JIg}TWqVU
z?1WF1(<yvaSFtQ==lCE_hA6(*a5PxqadVl?LiE!jh@l-9@+rc0h1m1z_xwytn0k~z
zr9uhD(#)5qua@L7r+wHcRe0E%uMdq()+Q&OPiQZfh?rZ<yPw(PiQRtvnUcW9plS0w
zDgcLa_t(|zo=2RGQ0Nn3Pq!~MRWT8qcvI4i$|Cu~?^?HxK?tgKaR%Koo!?7tCC#@k
zq?`sp&rN>~=->>-+U9uV(T9t>KiJ|;{a*$W%ywlmnp2zj=&hRj1qPL0-VN|4VnGIC
z^pBIN?T!sdA3pVyrXVJ=`=Ec$ZbNxKcn<D_IdG?CTMG)~I4zv~#c#fUGz9Qc+0|aN
zC)Y5C>#Y66t7LwA?cBW@>*bj<yyU8ZT6q%QUvd*Ba)HmuC&2%A_vk3?XRUlL=P(+S
zF6PUZ=^@WsTjOUxFDRcyt>@7TrS8e+*j~=L?%4-m=HSo~A&c?T(2~zV-%~;r+4snz
z@S(PbmnEyb=F^qdQ4qlPv-_=ze2X)b4|Q)m>|-wBB3t$fw?2)aavbD?)zq~%0KV0L
z(QgF%4mY`YdU*v=6cO0aY4yBEeKP1UmZ(u2Ef!bLp<C`^VwNx`pUzFz91RN0J{LOZ
zAecSTpU>xCL$K{9btOh0y8>YrcIrEIm^gpk^;o`P$XfL~BBuPWqa5sRscQvy>s?DA
z$zb&R{8ZwqrD$_3|1;<l@ae-m@2*k{dFGZIy2Hu0LQyse)O^0Fbjh(bj_JsS3YDl7
zRK0MP!IS&lg{pT~$^7<0aF{y}R(2p(zgU-sMnG3n>%l(4e&u%I#O7ueK9Q?Ld6v-n
z;K<g*I{ay-!Vl17t<X25)+9hv3pmM3+;?%S$`iQbJ3Mim&~dCa?XVGcbZcsh620X=
zAa8d*;^|^A|1>0&Lx@Z$$u%#bZ914>dp6Gj`g3Ly^}W@Neg8A0gq$ZBr&zz6aeI-Q
zXr+Wo1>KSS>!kU60LlPE_8)GIDd5sVjgntaTXRmuz96-1u&#i)H*u{$$WcrDkgC4#
zE|zPmWj8SL%45nfuGZZVOb=&p2~H@!;V;@iHFD+u=KB*tG56%Lanj;ICSddkAO@f^
z^=;C~pWn8Nwt1!dCh#q>kMYrM;Tw9tXm46CE5V$DX1HyK=<9v4DgyD}PqWl(M++y@
zn*maFa)p*Ct&NlMoV9iZ-<WXNMCsyH_@Y!tr|{MGGXJmkuGmr<Om4p^*ifpyW{LI&
zwZtR^4NX!&#9i=A8}352ughwUnTYAHrxUE}@t#Y;^i}Mr>v`RxZBJUr7PMMjx|OrU
zQwKdl5i+1{J6`LrezneQ&(>EL@`OjQqt&j(zW|f3mqsU&uO=x^oI$$y+n?y|`eyjD
z4dy1UKHBG?Q-3_D0fCBC63vzsOM)v(1%|%w{Ld$qhM{-^ESU70V1rK;uvaTO^lntr
zm?RX~O-1U>Ktfu)%V@5W<IZec1Yd9d@BMN<o?or%CyZ;8sdqEkob@A7A;BHOdrems
zjui2|ty=>p9imGlWjG^im;7ra))dh8gNqd|?<rD0cRe?~FE<xMo(`#K!Z2;bKHqbX
zgL&HcChgG|zR2dMLd(Di)-K&4(3q%T$Tz&x$V2X^^WkN=SkmVGuwdLbq#k4L7BF?a
ztLHN2tZ!yiW{su(u?R4(NL`GR+(|-6=eNJ_rnK_FNQF1U_iEF2NNA!lFkStX%gN>{
zzYzzo53)o_a#eynWW;#5Tmgb5DO;y#Rh8ME669yMb-Xt}PmU-~JFd;Qf%;Wi_%Jx!
zp|A5In{(S)k*dybCn)P4fBk5J^w<x8np8^<!CDF14AN;*ntjjt+aPVIsEJT7JP9a%
zH@yu5YWG@Q?lg9gSmwZDtqrf`V5+|UOt$O>vfVMjQ|4pY%&5z8rjcQtdoK&>R;ok!
zv$iY0r^!r}=m<=3GrZ${NUi)96Xh4*q94J`b2L)D7}&eJOHGLmt)FSFlT_&IMHPe7
z8FNBOloQClOuTndJW&qt#FH=Xqw6N7S{y$nC8^sdzR*~=tMvx(f>dXTtmHStkLX93
zlK6jGM(~OE&Db?u?bd^MbBUf~dOTs$d~<3GoBD1#!7@17&i5W!_0hCF)1i53tp_C<
zo*_t~%>0D18ss4sHh^HTDLJw)p0Fz?#HdW^ks;C%p{v}`jiY*wob}D>bB9MwE9!1y
z;`C+{^7RLs?S%^!YzqU`*#>iSHw$A5hmqOHUxeRl&BkSNhWt|rE9!nL=G4J#Kbs$p
z!_zcWs%W(4Zo3rrkBLz&`TQY%xV?VidKnthXN25LPP-j$bYK1KRAZgHXbS@QJcF|0
zfh#uJTb(vZ`~juD@6+R>o<HdoZcLpno!faWu(9yUJN#DNmeG*<1GV!}pfEv-47*WV
z0PeoLm>>EYs_o&uZp=M;=_&-9cssL@a$G-t>OK?#b{zx4p$||CE4PsYLxGpLDYfiG
zZMJ;Y*xHVmF=Yq1e){vkxJtGw19b&-J>#*n_WBK?aa(<<#Ggg*+yjfO@^9H+j7kja
z4VGb>i+nhIu<^UP^vdnQZ^l&*kooG^VI5Hz`ox$O5k1r6dt@Kr+;%(K>Z&bJqIB*k
z5XX>VcJ7Xg)u~HRLjT?~J_M7RzLRny@I$e#2;qd^v1<blK)!yQk_NaOnTLL0oA2^5
zqBN(S3}`dBWbKKy10oK4G*lU(|G#{Ia0ikK9*!UCE3VsUT{9er4@Te;sOOL(MPYli
z)Eq!~*lENjQ-?M-kG47c0!SnJW)@cOiww+oeO8Mbe(Yyq+uq@9O(XBjFwsrvNj7I!
zC<fl+qn@y&JuEeQmBjv+$yrz0=Q4ICN`7I1qxT4-?d*qsENN)!toC*L6^xs={WAJn
z6Qm=Cjfnvy_&bj9dD=9J11ePp!da(Xz$iz*Hf#P97NWBg;-~qT;p+QlqD)+;{n~<h
zHanF+#;ms$ASr62u_58sDJE<+3-{lAGYH-yR-&Dwq4paztm=(br^AOWh2e45`K3;6
z)W8xLKe%K~E79eN$Rk~nFo+;iN+Ovw`8-hY*?%H{b48s^yyYL3#O@)?-1nng<YI+D
z(~|7>P&U%BuT}WOTUT>QL{tW@p^&U;42r~W74N9MgKW^=ak0rWm5{>LQxSZ3LZq|p
z*67VYnI{x7nvFQQK}e6T&kwE1E+rW#kxgpk-^L_XiSqf_x*(N0md&;O?0UsEt_}5P
zkGj6)!`Y0mUDCQ%SixOgKJxb_ETNPq-t=cE(GJzzjA}wC$(@hmxjHA)KQ;QuoX~_Z
z5@qW8<K#*@h=JyxBF3Ehz_29PsechAl@dVzo+pLxYAIjy_gowp9g0Yn?=Sb@;8It!
zcgeHjY=z3Y?6;!K;ymxx74efoIs1V_k=`U9)XNZV#{-S^kK!PD=T=@nC9d%GnRW6(
ztG*hYWJV-u4IN|0-*@{3?G6{;qX(RDD#pA+P5H_inQx%>3>a<gyW&ld);yaT8?li2
z+%jV!)5I79baQaUP^koo2cVs}CQ#XGU2cR_6)yxo;V?oKqN&~G+KH~1g@jn_V|91b
zT8C+)P2SV9TS3b#F6l0ir2L{<@`ZWZy;p=#I|OMJ45U@tt>NHF3icBqwR1HE*0l&O
zB?!m!v(I|?{G>cu45Z{A^{=D(=Id;rD6sQPbHYq1`2kuEvz(?>t0^A0jbJ6gV6Zf8
z3DE}P223}SLIo0!)->Z$@+9SsQ|C<tkBLur&YmAaP&`Hx4s~*kgP`&I*Ox(=3w*<m
zMq{bQ%iGWSSGX2ZIh>oanhi=DPp2~k^~zZ$5?e!WD?T$}y=S^EZ{L{k+4E0zXZGcZ
za#B3?6=7t~;gH0)@3B`JkL$E~S7m3;92DV{#gfB$#i@hXbF71#!@2X&=0+Hwx(}qi
zQ>d=e&I!_XtX#oVB1<#R0;HZmu<m?^!boVooO57&O1x*W+XL(C@Vb`9>r%?IE1-Ob
zlPP|8Ini84`ox0!9M4c)&Pw&gse<q;v5eaEwrxFiX^l{bg~9q5j4nvumO$()fuyb;
z(}M^hy|xFgoB6rgk3VvL&BW!AAC~}el>c1*4%9ccYf5$Ow`K;H+WQO8M5>wOUU4~D
z*{Ysu9n_I=As%ny5@Koj!LJ5?ukk^q^+t<2EC{y^qzuGo@~;5%=+oe`dYf)~X2Rg4
znJqG&b*r$9_!m|o4S2le5BEiuse`dLW9N@M%`HAo?1@od5=tQ&$#$2M;6Lh4lo%5)
zo57qpensN*SZ-veyS;)S;b9Oq)i?BIzgA~rQbB#am)18U<0|JD4AMEKFYb`8I?@(v
zf|}4nnK7SIhxL3BBR!bluW2@mQV``1E{j^GQFp3>d<tbq`@-_Z!ukhpKO+yGeXE_r
z#vo&mh(nIO>SI1_w#~#Qij0;?VeJy#`uAz<!>^h|7=E9e8q|3t%=JHPjsP)t;uMat
zL6xmpOj0*CAJ|-6Bk85iB^_>Q<`e^OyT3B}mTKaZ`oEJFe*4W8j~Zu%=g|x@4?Oor
zSAQYNKl1Rp11eyXpuE_T)bXQdI<cy-g~K1DM*x%ko$x%tqoxLVC3$r%igZ->?Npyw
z3?a|BAh94Q%LkwKRkC@+b0z4#@fDk4*B}D1b7P;UHB@xKjvz5uTbOA3x6<3!Q!=Ku
zRBE$VU@IK(6YwbN>$^Vbe!dtu+me$tKZHTmC!i>!KPcM9H6%DXD?X}1@nxu?b%w*P
z#pu)6qR`r-jO8!hpEedI?S2_;RnoS#O1<zG2<Mu;a%JyrKxnaL?e5L#6WlW5L}W-+
zitV}>5%F4Vsat&Jm~bi%m3Z|kVH{*OyEV($XF5%0Q=AiMgSJG7r|hchmZ&-MzS^4%
zIw<_B*{R;^PrpSA9{&_C5%DE7kBQP(L*9Hu)0K;IgsjZkbua4^@}VvE@I<RkA4QX*
z9ukT`u0Sq(K4uYn{$^xV2bgHh6>c+>$zG`Vkh4V&885eWX4AYDW;bTKDhg$kyx{Wy
zG&46IgHO;tyW}T{!7-Mu{(UjxL3sd^`xgQ7?}IkDQE^$jk2EXW-n5?W>)ZFURP)jV
z<KgAE#pb`^->=1M741W^;71!;%}EW)b)$Y-vzR6Ccc%YDB3nHD|6d*k`pgDpL)iY|
z%4Mz7(GMOSLUMDV`Mg{^X!&k6H)oU|E_FhYR(V@?L56LXEo?BV7DgbZPB{~j3QEAi
z^?1-QulH1>=hse1j5B^2x~}ev{rE|jE!z+wIlo=cBx7>nuqf<Va#KEkxNYrOx9Az;
zlI_NN$<u@s?{$<kGdnG%6u~J&3cY>0q1{E)V!Nxw`paK$EbaSy(Le9jCsul6qIVFY
zMaz+AZ;9q!L#=RcI^10HOX$Hki7ubRev)*pRDB&NJJl?R{GKvsXO=~^pBPaNq<=1G
zG^C#8^Y5L2F2y?ZIuE6ah&0H&9MRch&ks-Tcdb>8b>B}Gg${ul`l!-Z+Sf{`b`aF#
zd3jsfr3A`N@^q>i)24=fR8aMQlX=c4uc#+(<u8rY6}5X$P()BK-aW>80dwY!cqWN0
z;y}zd3vlBxEPV3Y>&S2KMy56BI?1+9H^=+U`#(hLmaG-Dgt1&5>ixV<-b4|67!#c6
zx;bt+^h5MqO3<ldnG)IQ!@=)^*9i<nr>*6aU$zo=*93{sb-4R{4%Wr{F948MP61oq
ziY6^xFpfVwpx|k$G^RKwrdo;6NI)sp79ncrb|GUPb<wshX=KB=8hUBDVc~NjfAH!c
z6Nl@?O<A!ePE6F@jd4h`?G(=WWvK$AsNo-&bI~!9P{FeKrb;e1%hiP{8tbeZfGgkX
z9h;6v<ZSES87dO(p1cy7S=>h9{U*YRvoew|kJ7|LGU85uU?vvGhDcvKffKzuCxY59
zb0P`F*!Yg2kYoI0^Fe!<zP_K}&GBdnL2_&2BJ9-e>c9v|QmPKYY3w<y=SZW*Rw#~N
zcEWq`2zS+RFyC%S_}Er?&8jw6K4EE)^fRYUt+#{Yau^T4Ehpfv_r!iy<Y!zKR*l+C
zYFja-zOdU*;u$4Y|6(^GAYY*GTJx(R&ZMc(%wXD++v!)Q)*4q5<0fw28)3xC;Ds6G
z+PCy+Zb{7ck8WAL3Mwc5_l-gt!g)Ym)9|uuC5Wc>b^&EkD)^_pYM1|!Gy(E}f|@Xo
zR7(W=m7&;J-}Sz2#Rk0!R$wCxk%x7r$I4@+nQojSz2iqBk7MQlv2!fi0G)hsKWqKK
zkA&qTAzN{I?8P+eB})hPpS;Evs*g{)puuFH@i+t<l&ce_3)#4~RNsbcYHM$=C84i9
zEy46>A~p95W@W^n%S?S16J?s^1GE6oM!rOxa=V>dIf@Tj^RaDyPHd-7bsI77_LT$R
zh>k3JpTsA=m93le<p@W{2R4n~eJ8dr>h&A#@{bsZ7)hlOWv*6|7zrl)-R8AR?Ra{D
zalA@3=gS418jC6g+>8re<C0`coH49B9AfqsozD(C)3tnq@ieSDH;6m2gt4LA0}g79
z&%tGYmoxL49*O7VUCMoSIMjYYB5suI#yDpySuZgXN%GS^f4MT*t!_U`w7DB}XFJ=r
z8(X_ihd};Q5QWQ$8I%0PZaw-i**jt}eA({o_609nC>iFX6fQ0y%cC3VF(X#{#oklQ
z4o+1hRW`v1&Ir6C`aqd#N=xctK1K9;_Lzr9;ak$FqQdquC5W?*eRpd-%`yqaJ~syg
zT}jp2-MY1}QlI(7dt$~YoXm9W;SL#@_1iMIBexnWO*6P-XkW>{Qe(ISDq1`Ol6AJ|
zpG$)uVD_YW5I+?({Z;g%3ayPBh^x&O>15Z>>5Y(+N`?|IPCw6)sjKUi%(*f4Jp%Zu
zvG!wj$F^bn7fuvw7njGQN<#wogATLh%+WMVN@E!VaaAP#tFvIgJy~9&_H{U<Rx-9D
zR@-yGT^Ds9QSQ8mGC@M;5{>3@LX^_%p?+_~lhwr>9?hBqm|%^GQtbOuPAgv}ElwWY
zAVo*X7#+u1``w&RiBfc?^2U&ZH0xg4xEd8Bc+N}ndbjcHtz)Lrt+7R&ul<i7*qK^2
zQ+gH*@{b0XDEw{#VlmAJOIo&Z(7&Ix)zV#=@p+z9XQf~*e&$}erG==Cdm6fG-nXbd
zp#5=ap!ltRx32#&^V8g!7`7Rs8fPQEy`xCjR<!2f2Yr%@ErqXrfSXivj3Q`fmCP<s
z8!VYsDsSJO`U!ZTO3h!(WNlm46>I&2S4qq}K~)m&szjA1K!;7pa7DW=QTKLj?W>ED
zaeOpef~f>4B%<CDN3c@GSo5uOHdki6c&H1yN4VOel)_<}G)dUB&z}|%t6jl<VvPB%
z92NAMiU8rPV8#~q@zSbv@E%VJskA06m7s>rc*G?Ik$7RfB0fuXf6B-8IE1ZfG69Mi
zy?hl6lkKQL!lRgx8@(9d60KS0oo)0aZaVUS*Bk?sF{yd-$br_v!nQ2{mtF#8@^hx6
zoA{l_LGB#qp)lOR&x+gXD(^N<mr-)cg#u*D!g))LQ{8`!;|&dH54pi}f;uIft_mg4
z*qX6FwU^|Z3@~;SLFF)`wleGMsL)9jcAq(I+P+pu9wlnEeb~KL`)tNpDHUnxy~nN5
zX25bq$`IY*n3@t_ChG@i4#*TVIDp_?3H^!hi}OK&y_&NroIMrKr}d}Prn4|wr`b^u
z!ZyOOgf(bRL;yY8QG33`mUi^k*4wsWv!HP1MDOPs9B6(;Zk4=2VDhUdq0sn}$Y;eR
zxurBDUwR(kI>eQT!p8rHsfHvB(_EL?(8TRA1lB}u;dsQWC&R9Lj`RUShMM0;@~9<(
zj^}Nt@cU=7tmo<uNr-Eb8l{ZM_|OSmn}H<0iY1ifBYk!3E;Ny~8PPxmoD7lpxZrQ_
zwyDLE_+alm@%vCc2S1vq8ofiFfl7s6%TBlHzLcJl2}#ynkKcsy>Nn4X+Ny=TSgc-+
zPr?Xb#9=1$4NC1(9{*NOfsD^1H8WtnER*2F^M1xH$~FG*vp7F$=Dk`K*yPH6>|d+E
z8!nAdT#`a5mYgCEFSyB*h@WX9qS@SNE5Dr<$a%@0(G!8cf)JG`zh=JB8f1Gq;h(4<
zDp6&OzhG6b;7BkqpKwUer9?nO&oM=;&}lqgjZ$SeM!AM(xZ*j@mAbr-Dvz^ukSz0x
z!g(c1c3j{7pB(kfXrT8+U;?r~T9jE0kD<l03=wICIMzOqhclL=dIPqhN^b^_u#fHz
zuc4pV`1Nnnp0TAIX${)y?9au2z~-da-H){Pe&L8&(y-uzF(ca6P2oBq#B4LLugl&v
z<kST@eDVh6Jf1^;M%X!gA906)AP0XK&(2C8x__<y*a<lUGhT2b#hZQGX>h?g`A9(`
z=VsrnyTY(0+~XkRT@5Ch;Ls7-pe-T!=?j~Dni4%gFPL>13*HljB?Qza=98u<aLBGV
zbPr@yq+mOj;H)l8E`H!V?XRF8>Jkhr7g{|w%vJ1}Y(1h%zRV9L8}M#&zv8C}HtoK!
zZHoDPi^3US=82qzJj4caExld3lqsL1W4~VYKtKWd1}0dhb>8%~+A?$>!K5GI_w~de
zFG^>Da4nsqf0Q)f_Nrm1MF-hel}GUR+H`4*$z83OC$@dd5r?_|i`pja^8ppM%7@fz
zZL57J{LW7QkFBeYi*k#$*NcLIv;tBxAP6X_#83)DDWQO((jX-bLzhU7pg4qpl)wOj
zbT`sScMU1sB{{@90~q(c_xs(yyv!HpJ7=H0*IsL#!^8}a6`c3qUn}9dc5>WP1!(Kj
zd}=Wm@$bGJg5!~^nlI7V-8s!KMYbP(V#Onu-dI<j6)dO@(wcrCf*F$vM2dJ_GpgJg
zA_6CF;?iEdN%xqhGJ+I3Ut~F%=-0ZXMyKVhOdelUC?I2_mQKnSK6G!jo#-rsd&DI(
zXy@=PZJkH@lC^pfe$3KOnx@|o`Cr73f`8~jCpm1y8`@uIkf5obVY=CK6WV)$W1D4~
ze^i-Rq=;x=4dvG!F6@*~W%{wPd3^jWl_0GMa1^f?aJpYO5N}qvR^5LgFaQB7a<D+P
zauQba<<n{!l(w}nV_pGr@B<HDV|lVGOq$U6<V4U{$L_#q7~t$AXWH)htlq<?hgpq<
z``yIgUcP3+D=Ndjn)>Y@$^0n?&juWPg5`Hy|8n9M#t=3c$Vi8<197hb`$$q()SVIh
z+{vQ128PZ5HV0a~c!k@WC8WaOpGrX;)2jErI){vAAJqV{a-TuM+y0&V>>TXAcb<^o
z=c)@hh6~;%6TVfw2@dfPLT3V(DIxN8AyURrXq@@$nQOfh;X?K<_5lmu?ukUl6us}J
zq}d2YY>bzU@fZ>1&xF6THfWFL5Jb0+ui#l^n@4L_o8lBQ2`M3kJq!#R??ph+c$mt_
z^P<)I(4_15RSAoPqWczuHrYM&Hti*L=GbQMe4{tNR5RJ$i&^FiD}r5{1c6KaVb5O9
zeO9+niw<Jb_0&hZrLUICX_EDM7&w++DwK5Y<qVJ+51Y>kS+H4OU2L)Y$d~kG#)sDN
zi%y9%+E}lN9!B;j(JwTj_hI9E0^>&Qtt*i9=s`NpL=!Gn&v>W#BWf;Ro*I`bD|TZn
zqSyXOL~~S0XY2}qtC{<ZT`fu!X805?V(Qre%I)%$k88MMoR*8;`Y@RND6$;$e#09@
z;Lp(c=?U+!=98wn>VNvUh2Gx6@AF5hsfn9?b3d>rMI0n?^D83FBM5$MS7u@PmUb<~
zOF`QdQ?+upZN$l*wNI{1lh@CT)1zk%CBJ5|6OvTs{u6Q+`G(lRf3|7U`kNf*(no}j
zQr=}+vch~JX%r8O@x^dyG0<n)abYeFAANNBA}M5GwfURyt<g&Z%Oy(peT3WK&H<Ui
z9;G{UNM6>UP8;P7YM8^mW2KX!KkmpSH}f^oHcB}D%q!2w8of!))IQufN6r|2es;aj
z&f$$?IdBw1=)ubrhOL&Z-CpFVh&pAF+2P(^>Sfxkmi+Lon3P3VmuNkQ{6^lw5GZPR
z&&5KvF=V-Lp!I_D!DP04A{2FScHw-MYw^bSDMxYkdV=2D3)6#m{}e4&a6iJUTv$|U
z)PsaBka-p-mL5_h=Qkytto+NrSN?^aH&ac}eTfLzj`sJY>L{B5f^%|=l3zRp3)sX(
zB$eA?jkY--33Ex`R}ymaO@#$`UM3A6ul6n~qA#P-)9RMeGaC|6Xnvd13T0a|WPjgg
zsJcbhoYDO5EQ2mZSvGJdQi%qD58Zq-FQ^=|Ej_Az!%5}&=@SHqy?LuI^ARh!()oAl
z(D|q8zI?*Y@NUDj>wZ68{S7&~@zq?JL0)TOu4{+`rBGDtr2w)G(=ehPI1B9?3m1yo
ztLYPspQLjYBzdjWst&Eapf}D*rYsc_ph(7q6*;<jPw=Yof)5xjTrtjT72MnE0G@=|
zd^0EZIPYMq^TA^;!jmY@5rl=~mJ>H}cF|y6X1bVu)TomVy0K)zOel=jCfbpQ)6O3K
zOcE97awnK^Hv7bB<U1KFGzZbF($dKVvJA+l_(x16G<(7BAFP^Ls=PUhXCa|8pCZv=
z_~oq>GM>BcS;59<LzoS(qNrNx1oplYf6rKy8UTFB-rEdGcgEZ1U^{mo^T2L_GKixT
zldGIy(oNGOjR`eFUzdI3hwywpAxA2bfr_rl)Yjx1v5)70a!b@qq7ywb3H?Fmd%lp{
zGR;Aca)Ynq>WKZsyWqsDOWqD2s*tbd#?&}J^t)LcfPr$h-5*jMrydC(vwlD!JXHod
zKzx|}M})9U;)LL)A`{c&@v<7Hb;o2h`YT=qW0i6VS3WTA{R}Ivz<JQBr~T6jqUHU*
z)+lt{pWs4b0I+d^7k14J<rpXwTu$yTy+77+Ru*Mp08iJlu;`Ky8E%BX=n8MOtll7-
z!igeY43JSktly{LlGWOo5j`46FWY(%+Daf^8H&{1yW?CW`N*L&{M`LFl9#<du5hlQ
z1B1d5ng_6q<Qk{Rnp#*(h*<D#!;5-vic#`dmV;To2xi7nE3%!JQ|5~?STPefV|Z!m
zRy=qmB7PF92NQSQ32~UzR+WsgbUtjwoq2HJ-4X-0iD`vhq~!~3$hh83N+@*mnL)6-
zm3HfN5G|_sSE0r@{o?0b@&;ug7T2D<cpw=b?PD*33YdG1LtrsLZ$$}X0T_?yuR)PR
z0jg6;tC?I)gr<+6Q4VJS0d)4d0n@qoB0zgQrZ7Y}F-K0bk@wS~gEYQ!@2bwhzG;mK
z`35$Uw|WWH!4@O!e;~|s#3AytUp~9~a#u=!ONBsd?e@$~NxzSNdr!$zcROB)0*}IO
zAh^+9M(RnUr0Qo8ZV9e)m8ln`Am?J2x#X}^i~`N(%W=U~GeHUw1f)Y!DcLXIEPP`u
zHHm3j8xTcG=O(4VAm`*zYVWB$jU@-6BI2$wAX%um*$2qLRT146PZkdSU5<_0f$}Qb
z8`zmZI_mRt%!6<cB*<gj_f|`)t)g2RzEr-J<97S7Clney4gP2yG-Xd|VO5OR-_b}`
zr#{cgpM5QV4NMT-6r$MscjWm^uhtRIWl*^D7`A_I8EL|0I)nQ!rmi8m`HQ02kJ;4`
zkn^h3{*aCL<i1bo%dbNaovf6UI7G<jhZ?G`S&ceOmC7ZIT18cS#h+__b6q>WPRgMJ
z@n-GK1*G3&rROP%yrO-CEWMpANn|x`i0(KE;HYg9=7)oeZ$YfHDC!&(4F*Li#O0Af
zuI``|`(w>+(wVBEhm}z9qI0s0A9)N&>sy#zssL^<Gk<hU{_<<)y6;I<KXX5s7vP8h
zT>bv`3LC2|3P@l9aY5|-W7E}A%xru>v4KK#sJ%$>Tw=r`C_mtBdO|#0MEQk<{aC^D
zDt3e}{@s^L%8r_X%g5M_IIv$tAY-)S>ywHnToiR%0MRpNyUX2Z6(ACV8*_m9CXvu(
zdFHWz2+0KC3|^{;A`KH8qUfZIX>HI#5!avZrJOkcgs75YM#V(#$I94&ne)HaE4n>o
zJ?u~c7W#NgiY%BdJ_N*i6vm)^bJ0AX(xf_4F%oZM!xR04LYAPJ$*fm~is%l;u<LMd
zGEkoVO2~oQ*;tccgeg$N$JmVAohGd2KLD6t&U43><MpGXs(39s1CS?FZna(UkK1Sy
z9Tnbh7dR%1JlE=0&tG_~bVBZ_`W6n(nJ99~1_UyLgS0Ey3H7fBWNv0`_oFL8%oZ&U
z;*6)z(OLvpX>oghl8IUT1dp(eqtf2q){ZoZ%p4)5-19WuVPq826vBYAYWzaUy>%9w
zE4yyx#1zRJ`J-eBx8Y~Cq_xj~!1b3-a{lJ41)F!pEE!w|=ix~zLKzxJ<yWTV7~{kg
zB{VHs;ak>bVGQ>@+>06CA~vooGO434_DMi<u1iDXy<IGM{4DRit&~l?&_`~4-FaVD
zInSg`Xv3e4imx|(y0GdcD=TX@;3m7|Z1$@ZuUp;PifV+dCtqeW{>LFj2XY4aK9^yT
zhlQ}S(!*OpPm1x;hvQ*;1KjM3q#38ln&3mq#9`e$@kKII(h<b~GE76EYVyJdkNKV0
zR$5K(>zNyS?9Of^&+pqmMU7tX*$5#L^PRu{XPx0|Pacsf2#sraFdPN>uG~uEIh+U(
zwdIq5D`Hee+!oRb7MDv_Y-xU^`nU&wPyJ`QpwhRpUE7s0j<WFk#pMV?hAp{kQ1j~@
z4(cIPoMvNY6$iF<YR~~0E~$E`(bk*#Y5jml)^X440_ZfgcXr^m6ng5#a7(oIOQI*@
zyIc<&tYwP@C276hAuB!bN(`^z6GH^PFz4&hQHOqy39n~1yolnt^ajQA>b2v3PloGM
zYj~!k;uqozQ%!P|8V*xe421lt1-R3SLf)o)e7A?K!_{18u_t>_QZ4$}>?}U6K*eKA
zaUR7t#4k$~loeM-%G8H3j+56~!?>zjg*KXl=N9`#6R&hw9ALKXFxu!wRB>_&0v1K|
zynYKMGFkfNQsWQwzf12Or}zP|-e0vUtFjGPAX^=Ya#VK9hlS2e{Omu>)6Z;vVtqlN
zbP4C<7EG`la6gSV?NBE~+o2{4!Yp7j)`wIHccP*{?sCH5zoscKQhE~(D0J9H7;8@!
zwbU&52#(vsc6Nz`QC(o`yP)uZ51$l5HQQ`9Qd$(T!rWJ6*Uv{Y2z#kTqFuVbRZwA5
zzjLtSwo>)&pj<{<>a5}ud`3c=DIlkSM~#PRP~$N8=~|hz`UR^~hx%Ujzd{)A7Zz|q
z+~d8yVr|FMS=oBEI1yjx*iu-D=Zt6Eei#gN>Pyk08{%B``1(B(<m!_jNr#E=FnQxs
z{*e8;8p(g3^G4VLVw1D3${QznpB?nn?aHY=IGuW{l_AAG8<lYF=%mI+zS&%Olt`m6
zl3<VgT1Qkyd~+`0d`SKkf2dAHfY7?HpTEHFWRSXWHjO@+5zaIDv#OjIFF2nK=G)*D
zCdSn(G@1LnWF^v^6%v3r8+Hd)XXzU3b+a6ck@fT(GnD>aqm<bUf1t9xFGrPV682Hs
z{s>FKt4F=FQd_rC8qIZ^_k_yY$d(hD7foG71MFzX;A&6-?<stM+X=|m!z;oSp+$$~
zfJ%s6F>&vH6CYqc8@|L0YQYV_>WcKJU54yZBCcfMO1C83nRM!Y%58|3?_eBHSvG@k
zvL^6HJ>%mJs}}{Vx^EO(hu38zoTu+Kp6v@aycu_&vz9ZMpQ%0(A6|uJezX=|lzNf5
zl&M{<=E$F~?J|F!0r7<i^1z;uft4C@mO>`A{*bG&Kl;6sEWbYyRPc>HWd|fU;HP#n
zbjzKatAb!bI~Db+;1W4Ie8z9BHm^E2eu&~K>`4n~w3xmsgp;M1P*6qkZF+0N$jEKP
zo+EU0($kdnB0$5)Sa2rNT3%wrs1@PJsL0%t^*UPw+f6%6_5(R}Wy|xBd5YxE!d4<-
z{sVE#-1m0@c#V!NvzFsGZ<hEd7sg4yB!K$rbeKq6jcZ7Re{0^SEtGGFpWT~eY5ib(
z6!6ycDPyD{^@Y6f&Yn}=2EACgv_7se=V!(_kE-KA_LRQJjfC-5(JE>%k+i!j)Z5X=
zX~eycVYtZS`Q_8+XOhg^G@Z%NNH!0JgeyV>G@D-ic1(qJA};EyrOt0NWZR#&6~mQR
zugM;HAz@{Dtb&*s>H*p;*Az0Hu=Az$B0Nh0rd><b;wAc`B2qb`eQGU1oL;x69wn(=
z(qtA<*MjmVDmak~C7INp*;-hLG3BOV_CHda)QwE6O1grd?`1-xF*hGw@mz8sJBoCZ
zEY*CTL8-)GwAl}Kmb6ZnzO@W`n&LT?00qGykV+40-5BmVnL<eX-w7Qfbg&G(aInX?
z{o(FR$$6o;>Q{m%jXev(6}&LcdvW=Mj@W4j{)!CucS(itX$4eIbV9B!EhVK4NDv6D
zuM>O00Z(;`Z0SkY$)5Nl-YS$sQzP?>_Gv&_`jb6DLP+O6g$+f+<pvZV06sm*^`7e+
zF*H~P`ux`n@6q&-(|z?GUgtm=h*b{^n2)~<?9HEICQSS#VCMHGD=|9((E(2@Xg3g9
zdasB!Ge}zNrqDUBR@!z*kQW`r1E~R4P5_QovDn@K4A+j&oF|V&;`w_qot>0F0;g!0
z3}ov)a07qMNHITLVpkw~FsHDErH~T{OcJrNuw((<fR{>I-pS*MT`U1Tl0mRVn!4=$
z{Bv0VP9JL<3b1&Lj8C^H5c}r?9dWV4hxEc97eh&IVnqgk6kK&Z6KEF(z=14xnE^{5
zJI)uxe(!yIK;*Fqh~v3{Q1lHPrZ#&>F6PT9wnqmYdz$uQs&h~RRJkV~2m8zKe|AmC
z@Hv*q7X@afpzo+eU_<Zed-LS8a-LrVyJ!AfS5ir(HkML|y(x_Q*P!wu0hv$_%U^PO
za{M!<lb?O4GMjCW-D+S6n03`So(;Zd>3_GJxd<D;iCZS%z_jI%BQGK`7~u)1@HAb`
z$OHFsHs}|z<h=erulFz0=;mKkdir%kF!;RS_%78_`>f7^3&-CGN%U*B$};*hFd;Rw
zbiABGkYHRpU?&Vo+4zi#!@+Qw2YRPd#Ol}Ea3g^{(-5f2;k#W9Q{bx-b)1SJaNW~1
z$_9Z}>Lut^BY@88_~E3_|5^3%S4wP`UZuUrv&v|UW&eG*pv{FoG)SEdILdwo0(QRQ
z?}+i|x1E49Zvr|yy!NYFPMD<vbyoa8w+;$nQz>@Z1?W<P<ImaH``RbpkMZp9#dX2H
zegB6ahY9#}pRn0D<Uy<~$~_0S2|HuXuK^hq8k8}MQ=yvq#0-*Hzjf?D`Fj2mftW&w
z-%Z{Ch1(~xD%cx(Ywtm10JW~Dab5;?8TkH#|F7<&eynce8z+E!j&Bd41k>@9tmCgt
zE#h2w88rH^S~j>X&^kOmDV()ADI^1zr@#jWca$dhJyxA6nl9L!DGN->=RnC5^0$VE
zLOREwEg#hM)gvz3>U!iSvj9T>>xL21Kp~S2jH_NjG{Dnwp3(}`iaPbK7!DWbQBfyi
z9FAuKeW3fF)hc9|4wwhRuUUPH!F(e<oo{I`^nl@cZc?;kqlW$XIX-FG<FPqU?DlIC
z$$=pt>Nw@r;<|I)G->&CSN{Jl1a72#!#=1^Oo55_)_3NZ*;u9Dx+L~uAM%r7bNKZZ
z;nJuQEp`;>emw({)c*{?P+MCBUmMUgyu=QKdHF6=>D$vm@c#94FbGcD`Ct%U08z+)
zBv7bKs=Kd(ZRR>_HC%V~h5^q7J5~Q$6ezg}-T|P&GaV|l{9mgNI~tPynb=lvwA&%z
zVg28!ChahOJX64ffM}HMdf*trWAGk}+b}6ar~W^a6Cq=-lKKqWDX`A?6s!XB5yVL&
zZm1e7f;zs#_dgMAu+TF8GM&iK-sXY<Fdwox0?+SDd-9Em9BN9Xfv_H)@&65fL-<IV
zDxcGsJ6<XPpz^h=y;oVm)gh;`oI(nfjg9)lL(>1>uPKUlw$SG2*Jp4{y1zVjoFx<U
z^*t$VFR&zQf~?#aou3BUGAE;X{nzY}W!wQ(<`N(+DeYmO^w(^Bk=J+`ccCNRhl(Qc
z_n_dMu2^%@?+R645%yk0km8eZth&ybeaZP?vrqnH#C>1>TAM(i^;rg5(x>S*3=%<M
zVf%~pFxbgneU1TfM!S*q`bk9oD~6Tt&9g0ZCivx<40M+LXTAgT))`!n%d|rMBhDLg
zzZdggYYXU@-Ux5?>mF<9{tnGyq(%)N=zGguoE8AletG6}QU3{IBrF{Et7^sYWTz(=
zLHP1L-3U^_!W?m2xa|a3_-SrOhuBYveaXK<C)me)?N6!Bb6+Tlcnw;qBLwZzO$Sjc
zrl%|UFY({mQXva$rBgPKU1F!xiRmTDSoFxllhyktVFA>3bx;uTu=_wWu)8!-M?%x&
z@)f4e_zAiK=VB6{Ryrf8e9_);X?12h!iw9V*#5ZI(-&c~CPg>kAI@V6T;#?JPTrM>
zOK$)-M^m_>F<iQ(I5pE|{R7Mw=n)GL-Fe0;#sk?2PB&;IBX_nU%uOctZ1Tr9?ru#P
z#K;6P)+$noV48bfiW{RTHo|BImpKK$EYbHaZ}R5bZa&!7us={<U)Xdzk`Vkc9v_AH
zIT=<z<Z3<a!zdG&yP4;_rbERA|6;Q|G_WUfRO(W$Q+stmIuQI%@E;jRhYF9|_axi<
zZ2?h;?w`pDCbd={-HL0A6*n&(jW292ETLa~oV$Ij^+T4M0Xd8rw}yspQ0p?<eCex#
zXr57-)4)Tw@&;%qnW_&%Kqi3{_2WZUaAgKz+Zy8D!&!#KADT2Km;(b2^h|}*0G+E{
zrfQwj_@>hL47(*GpZ+u3i+WBY1)=KeO&&`f@m8ZJ&%J5bMdGv?_;Ar(a3wdNZ%B*g
zy<jht+I8pZ!ts-1AD&LwwPxJb&4b%`b(`D-?L>|q=kw3Bt-qW3-iI#x<Q-y<M%nYe
z4;K%r#JJJgvc2*@mVi#uhdM^?m{k5tW!2KN)e!6RECTBEY$0aZjBqjkE2E6!tscid
z^|UDkySyVo7ee&PsMDax(Lk50i!Duo|8~_vQlREacAaS6!O@fYaA`NgLnY%pr)A6s
z@L2ifFX-$)=LyWgj5kU~Uqo!Q<>1XPY7_2H)~lv6pFX^zbGLpU9lBymu<GsMU{koX
zkJ?7cfq8~Y+LD6ph>m*lp4U;kej9Xa)g7<@bH&kcuk+8x{n=lLL5(oN)CuBS)DLbt
z5_(;wXotG!FPd#HR@RgZAbG<%@AHO@6=VWY&r*h?on9=IZRd(cZ{}Piohz6*XudsB
zwz`)**;f)br;&d&>;xs9tK!+t<`r#np#$?l@$#I3lS{^`)9LhJtd%ERF7i3Re3(cb
z8I87N>Wu9p$h(T6Ga>95F!i%ZNc$|jz)u&~lP+p0+1U-)1<HbV<&I^nRs4=X`k89C
zGQta=eS|Kw)U^+3xW8O^CiI|Xa4E;G$epbGGq?>`kSrK8)Y(fDhB0MnORks~XqWAQ
zb(dcsS%*1XI!_74FfQ}+p!#T_j-&j%D!FRZ@xrNLECn<<iws~@a6W@Xph2L2sfJYT
zd^iMrh6it6Lcld{JgcWRH9cB6N^MCic(K5io|%tXF)+RR;lb%E>f8p`S4p!QZHa#M
zXq4A^>v?~1|NMzM0}|kUnQ9t>1Z6&npEQa?6w?f)b_s5hpeTP0er_3j^5|ceEqkZ4
zn^K>AecHRXg-%;KgHc5byB1G5{vJk2Zse<s)f-T1%R-mkxg_lcov)-olf#W11Lq^#
zP7`NXehZhDq6H~#AgV^13H(m+jZJe$@A8{VsY@X$FVL4bZYdZifir_nF8Ma^C8S5A
zwimYk7N_Ww^duAGR22A4caQ$|aN3io;Uz+Y<>%UvgXu`&VeXMj88HuB%bFq<AA^5d
z`w89pMq9KZ4z4t~_o`&OZ85f*Fb6L{xQ<q6UfQ@tczL<RG%Nbot=1l+hwbu82!#gU
zvM;HdLDV-=hD+Mc^qLjWnP#OcKO1NBEc1RAAq{LpvH`LTcHjvUpyXUW`V#aN@pH@-
zGboO?Xii9%S>Y7IDDyUjcEHWe*slF>D`{ivD<{(RsOezn<Pizo3Pwg1hT66&3^)uR
z>hRX`tugnL2Th@;v41TL)bk+auyJEM9fh@C2F!}_kzh(}Peo|}50aq7EG!TD^QIHL
zA_n_x6uUFGoV_yph>S_+0H~P_+6ibJLLn`X>E;0Z(o+RNJs`^%S>>~Z?(-h8@F*KC
z%8^?h>={|<ln7*G$^O)t@U^TjA?RRxjcsx4Dc;~=8bPKYR842a)?qLaK9^s+mwcz_
z;jZ2I1dVxKH7$Sl)~lj|gOw~c6P-|bv!n6N8{m5m#@a=@4&vsTn+vOoYPrxkw=-F}
zMd%3sn&Cg<S=6CuU-`CY8@xd#=%d@&xP-C=Tv3kwx#>{_&s13bO9ME6)=@3S9&G3E
z8coN&i$c_>Nds`M06@hhDu)43@D^gN7MGK3SM(!zO)||veNsM9_!#>Rd$tpO`D<S}
zmXa?hpkoPX&G7OByJ@c-WSaJ8j+74<8u@K1AzW6WhSS#t*O9u525DP)Nz6h^TMMH>
zU<$kn1%K1=^tL8Qh%V<a$2d0b{hZU)bY1gWHU}?<og^&Nds_?dwmRl7Z#5Zw9N;}t
zH%y57IAEaZtT$@bnRCwuF_S6>GWIUaPjHfwQ2Q>v_6q$+rcS<5XI(#Xj{JcfgX5O~
z^SH}#3*Vg8lL$FQh3SPV%)iiv<k9t2mghIRB~?J}?7a}(dWtFqnqVi+3%wiTW;QY6
zP#^8E^_+^|@PiAD$ItH51ZdGYyLB<NEe+13_<Uw6pLcJK9;x-T!gXu){spk;013=y
z`Y|;=V?z(@(_p-h3ssQyRWV<=QL}7$(h}t`=>UJ1ZeG_78~eOe{BWM!D%iYGmLEC;
zWEz7_psqFnS-M%Y60Ucx_Ist16a!`}qJepLklpqcgxZbE*UqagIb+gX+6&CHK_M9r
zl*<F4cVn_VRFq{ui&b_=LyptZqMiHNr58`r6n9zFwd)9`;{vBm^r%!Az=7a6X3=f8
zZfw$a`jc?Z^VljPANW~pvof5PV<6>A#+6P%beB2V{Wpt6Vrx(c;xy$32YXV1)5nB&
z#yom~#mBRu(-faRn*n=)I0S6)l2uXwo#+TQBmb)$<EH;N86;q4kDdYJDJ)y}S7Ffe
zkIWt9>tJ$l>ZiX1s~{+be?6#!1zm;X=Bo%UUGI0G)y5<rN#XY^o%LO8fTf%Xd<Aj9
zLG<xs(>EmSq)k>SeeuDcMC|zLoB<k+b2ps!=8}euspF8?zYFv|sRK}%7~t1{#T~c<
z|D=YmUZXxqQ%G-*IAsU}`FB=BEc@Sg5Yln&nu&260kUk`h{b<TCr$J56B$C*KFl#7
zHGr620?SE0O_yH+_p{>y8%O}sfL}=##VMHK+3^14tC1MWW9wa!(~9zWP8}G*#kdc3
z@2Ctk-PCtiTu*1p&kqP?9L63P7H(lB!~5%Pm^58?6VgD+i&X_`{Dx@0-(ym|`~gM^
zbl!4XhnN+#;7X}(5R=^7+6D<wW%)9mmKuq~EQ{D29skDf+6xp7ckhwNF?RL?+@}TW
zKe7Ny@mp43u+=>ypetd?7=><{009AoU5m*6YIXn1)1q1IrR2$d5e^@)1r>nLbAbzR
zW%z@~*n;-glmeg>u>E=g;ESQLOn&^+5?}14)aj4m<dX_9pvuFdu~!+$u~X;t<1u}G
znwAX$%K(6g%s@r@5y41OnJ72fKgiLG{?yht@G0*&!qkezWaPB<r59xICDTDvz}API
zazbG;mfvIk{;t}zs2dMI_5(Z3kXCudfALWx9OY&P>OVQy1Xh@g9o>(&G|NY84t#?$
z73DpSTU2wdD-yP+*RyX>1C|PYVn4=t2neIFUs2`+@rmHa(o{$ndd)L)IQBwmUTmod
z?t4}YXt%KERW}}A^lk2ru(@qAjp80TW;f<gFD65sy!;#y%kh`)fawsRL|pdzl@x^a
zuypna29|m3a{M*^6le3nG6Ajzu`WRW&m9O`e10(S0z9;&!S$%suWtS3?3kE?<+o19
z5%=vESGTFMt%asTgW8$lG1pPQHeiu}+4oz${aX4sf+RC30$3ys<Ri;>2?V<T9&w;+
zPR16<SbGm_>#d}M9FqQFFwvl*FZGbJuOG>*uJ2a9d?tcdHy@nO+#nJusEPdssPnH5
z-+1vJcnH`|EfJ!LnKh<62fxD_0U(H-U&p9Gu2Gi>aDnAD>SX+10Sl|z0H<|o0W36&
zUA?$Q2bAt}&oH%)p^eMFq=)+Tkyc&@Q+2%g7UMdqWv>!$YnIEN-nA#?O1}M?l<ksw
zKqD-L5#&*?89zx!^G`hr{S#=yQ`Jj)r(2_pfp$7wE}Z+uRREJo*MG`eNS)k|7>c}5
zAL*E&ZY6FUA!zP?TQk2|1dy4IcQ42n&_^vcL>VueaF8Yko<;y|YOJly7J$A=`uHhi
z{+bJ<vJ7zng`t`SX6m;<6)TO$q&RnuuL*Yiv=lN-iif9{0Qg7;E+OsWdJ-Y<ra7Rq
z`D>Z8Q%D0qBd6!93Rs0%K#Gr@L$wOrNYL*;Ug!vf9Tp9|t(xyIM_}{U68{d?p()sb
zd95a;LA;H0Ik1_kz<BwB_5t=9EUtlwVA0bt5_(y_R!4QbeO&YLk^lQDz(dt^?3;Tp
z5J&?Zzv?Y4VU!^JxF{qO1z(l!SJY7dAQ&Zp{1GUw{?~%9a@pTmn^>wP*USZGvh@(*
zJfb-e^|9l*79@+>M`FWU2kc*_i31SfB7a~Z6d1_~>TtHp@O0}U4<Yjbn*j>!PXFii
zedIg)FVjG~u@IiYO$nO6p8ZlC@%E-AB^eV8dYs_PDDE?ovH-m8I3{4Ri%`KbF!Qs%
z|2O3GzW~dt3~UHnz(c1&`u`brWzuAY7!fSy{0yLC$9vIf?Dr(I1$2i@FjA_3S*>F!
z%JKi+Tx)Z_=hT_y@hwSqES2Hc3g<)uKIF@#!8|`X{WJ8P*gPM+^bb(m>>h8sDF`yY
zza|J%vrjJY&Q}Ev!92k`n!be~!2kCLafll6>69m5hs2qQWi0=bQ4Cnn(fK$z&~yKv
zyMP}>N&|s+E*AL%CQmxZLjaxq3FOdutdoz(&KM5XVdYk*(k1MyP}Ov<xTRj)eOX97
zOQ%*}2Y}{HL(uUhls&?@Igg;gV{i!9uwa~*id}HQv*6*U>>j1e^j8x$l84lWe&gFH
zL+M|u;uXYZWn@^chANbL{;xF^1X7(LETab-kS<el*8miqLPNs0|2nDB!uJSVcq_X`
zX+K!r3(fPOy#!t3YvRlZz4bi1c1uwRCiv~%nE7<);c7J@pE2IP0@dfJZeAXQLxn-h
zr@ZG5WzR$a!jEN>4DI$LTA7>br7+(C2$714Ghuh#g1?~$fJtpl@9amDUH&ukkK-Az
zIa#3<VwU?f2~zCi=S4w5o0}O6lE30>_PAp)b`M~M>L#blM^$R%UYxk?WCOA{TkjzT
zH0Sj|m603&9@_Yx|Ht`l$I5f${iX%O`hYKz($8L+k#<8<UjjlVFS33%{tK9UwmnZ&
z28@!T^rh%r;1X10N2=y!Jy`3Q!H1@t6#Hu!unAwjb|<r%K(INaX93LATo4b?pdbAb
z+uFu`V0v@A_bK~kO&&WNo3+j6Hypx#(6Nn-RaTvEiWmw``|_m$81~Z|yq$Bp?)X=z
zxYu|o<1`1mXau3zY{<%2`RcN`wnnqGAhZS27M+DGfYtKt@ycTZtB)*dK9o<FNj7Y(
z`3y9W5VWfLlAT8!W(GLib{}GDIb5{?B%Xq8uPq+{vP?#upxK;sqO~gWyccoQ25hbr
zSiEeNj2^U7;$vyAJR~lHV^@O40UgTL^h}Tu2rqZdICpeKF^f62-_GFm-^Zg-eyk4%
zJwsK1-m8^}tbW58J_0&1TZx({iowazJN}sBDy<)Tiki6|So#Wh7McPVISqrFyAgcm
z(dzc&Uio0{qv;M;@wVMM)AgwT3L0U~c3|b2on^?d4D(kxUJ%MYh@WA{?TfRh%xYQ4
zlRP3zkPK~J!qEba7F#fg#qXy&I~ARPdE5{;L{VDXN7~ZM;Q*NUJO_M=D1<WUMpHXN
z4k{eS!d|k-O^&?x>g%UFxpC~~*M)%xU8_kf4H2RjoSYCk(p+!`x&TfnF<U|x*e$(0
zI@q>bN=&>=X>LL!?6u}a%xyY&r;puvKxSC7M0moV#{_7ntrm8CQLBePQq<<Z_w|6r
z`C@v>vK7bz7IOlktQuLi0IY1DAM=T*J~3?zIB_fkRgQt<x|`fbna02NnK^(y<O79%
zi%ZA)HJ|@1O495LoE#(`Rlw|!6q~ezIIXzZD0N-?>>_Bz+SXoC>BpJ_IfebJoh3q(
zPa!?-VtV^A?)#&dqy2gbnf4C#uE&obUyWJ`lcqQe=tbgKq=q=-7U-wd>YKhk8hCGO
zH5H;VSdLj<h<pC3^TUM*1_~_-2K-2Zj}hzGashb$Pq&ha2XCp7>Kn@440T+$nd+*0
ztXTp4@}kzfkuaE|ochdX&cNLvW7quI2fw0>A%yD%a%c{;(y{@etPbK+{MY{DiE)th
z=DF^FM+~2Y6p{`$Ymp9OSv+o*Ma~cG<vTj$?yv7hr7I0n5sYsSgsz|n%}JFrJ)rxv
zIz^iGY>}+*2+R+UfPvCdr|DYb(XDM<sb{5au2q=nBUxhn`=qri%!L8UXrI3C2^w$e
zALg0vP-u)hZcn8(a|zITcVMMYogN*u(xhR@G?|gxySMj%B5HY10qnx+KCTuK%9}Gy
zk;w#XUo!>7UhqO*?OT@Z#BgINeC%n%U}R@n6k`)u%~u^g10r5Une^R4b1C*n*+(_1
zjjp=dw>(vFRd-9{#4l=vF?IkR<6#1uaf)@La>o5#=q1`9UHc8TQrA_AWD%wPm~>Oj
zgja!#4S{0MUu(g>;bmO&Ote#LS>1T7(%+kd0j`l6Fv}*5_%#_C?9$&;a8+SLTWI!M
zUz~Ey^|_n1z@O5qZ`DZyJ`zM5uvvwaEf<1`eBd>&^QV*#qiS}5<@%1|H6_Z1>l6&z
zM(`kKyQkgoIc48jy!;m<0e1$L3VY?HbI=+V=Bb3CU}9}(rf|JZk*MTqPlgA-e!euz
z=vu3TciX64e^N1frQ`NyJ+H_)b^C+Nes5h7;P%AsHGF|Na_qg|eKHNcTlooU*i9uu
z)yGu8texyUfLtFvosXV4i<V8<XnIogiD7&*4DV*4Mq%l#3G-Gz$IAt`-Q<c!QYX+?
zOnYO@3sc8+l~p1hB&_ZxeNFnjZ{rH`!l<=6H5pW~Y@VFnyoYVQQ@3%xu|mm~&2*?9
zrd2y87~D%rllEv}b(Ce?bbXil!R}vqA#%AYsiHj+)Lq2t$2kV~xX59Til&XVN;@&i
z0SSu)>636APq4fpJ_XcU=7N-gv7TVUfvdDzFEDQ_0U55Mtyve>!}|4@!=KDwH7m-?
zR;w<V6|H<ou-+ZE8@1V>in8f_Zo8OO57n042Q;VxERoEmGYg$-q$D{1C0>o0Ke^jp
z7>LV<vI7H2`mz?^;pfMS+wZK7FRLLEwbZw;eu5>^WU@q!S8wHTr~ui=u!B0hLn0l=
z2{0hGLM!%b=X=wPrDz>cY;0&HyGVwaLtuP7cq3HpM=$6e%OAVEHAbgQ4BM%7Jsyq~
z#}fphNqzUdz%+#*_)6+UbGd}J8a@kUApJIT!X=M{cgie-yxMhF|1mEhCc{^))eZ5m
zq$t(s#(n7<`7@<}ng-;C$W7e%+CII^!`VXSH(2sUKB%wJz*b;s@ZZhv-+WV=jf1`l
z{OEH6o5iprxtfK$YFh!hrpDm8nc6X9NUn6mv!_p|=le67%DFfTM__9m>4o~aY@PdD
zUT2r8`lfnKl;(nsg}rJq!66H>*X}KgRvG<cod)cM7S<iifvX)xNOuv%ii1fK?nwWV
z6JcIHu;if^UT)2=0L$eaWvMva%wTI2FJX8`hr!p3X>=t>NcrpYpK<6e`%gmbd0*=#
z={KRb)%%HJFU3HN^?h#veK_Zz$U_<A)!N-?`@xY1hxD!VM^N)y`w^(aW^P6G0PLcC
z!4trl1*)xF#8G9XQo%ShJy;@p*IZJ}GSmtiqMkI@){MeuJBtF=?i;KC(?@L(KSb5*
zp)>>3F$dWqG*xhF-LpHuV3B4Prk%B4ypWDg6(8xtiQ1+15O8zcS~SA$;tP|^7w4-k
zapZasiu5me$lE}!gz5S?cyWF;D;&oKeDTBSxKhq%fOI~1yO~wf2QF`okN;+D7jWmF
zzPonU3VHqT+PQ@&7bV)mM5XB6G)^hb(QL}Ixj4{O0lZePT)psKLO-i^VmCnWE3w+!
zP2LxIv)LCfMQC6_kDm@UsF6HT|9h>3L6vrgJ^?{;V9mN7QP8CN6cOD)zL|0XpimlM
z1b^Z)Umm3B>!u1GF&X>h802mpN2BwoJ@HEyNTzbDOa?xgvPM~@C1vj0l!N#-WK-9C
zAu;!>i3=x%_rxKvI<*5r)MEGm<Vu_<JJXC_sQPs8!bq8u#Pd#<nH_6q(9Bo_d>z~R
z&8Z?_5~}_)obRH?Omy1}r<#J|)ZY<w>?NcWV4Gb4{V@Tc_(jl}_><ZbiPeB=#)~{E
z2L2{+B>Md%@aAuU++t-g*KaRsF6SiW2KFU4yC@$ri!=!^Mb-4FS-)E#tG^DZy@L51
z^vMca71=m$R0PO=p4bPD8li$rQQ!Ah<e0Xa9QOm<J-H-2NtnD99@aXVh*z9{%nu*x
zLMS}H>6DohB|i&D0fq9;&@3*Jem?yxNY*elID3!=na5cMKeA_VxHa{A%R!^0qU^nm
zEzHa_QYKl8I>Net>dxrB6s*ajbzZ%10F4C6#T8<zO2;IRL%Rx06wk|kQIKI$ZPLhB
zTn*+^_VtWi-Y~*DbcBO`W6!v`>qbP2Y`E3|{a`(S2Zru`c1;ACj*7ZXNQCiBLB&BD
zn-i}%Lx|N~shi}R-WS9i5M%4aqOMMj57n((XdP$iRc5-Gnc@Soe+=q|wdZp(3J|)r
z@Ut(yX&{IAf$q#x?T@$tkJU|CgO0zgt@cJsL2Y9%9y&{*nPJPPazfOpaw40yE-|1y
zE*kJfLbe3!-3qjSYLTsl&-Z7=W8`C7=+mdb(Qr$E;F7*0|9#t<BAq$e>aXnB|Jfv7
z^apv@)E^)IQwL+|3w`&+nMvlfesI<&V~b#A`&|NUs4W+qB0T2y(sSsO9^k6%-ueP+
z_FR5u5xC0D=S!JLF=r@fPZf*<rx?uWau{{Q(eveiCN>WPnFI+Rp}Ez5LMAbbQMmMm
z%YzzHnlbn-B~e$=ZerX^9o(q4IO;?G(#|!I5p0+Eo>$C8rd-Z(KgcGipD0ui-V7EL
zjq`9uk*z-#qDCj3-@r&M`n1|Wrv+4Gxq8?18-T$C9RR-%BI(6gp_+u{)}qd3Z!S_@
z9N%@fdR*)RG+%r1CSfoNzS4Su-F3?}E-7aiwKaT-bc&cAZwcSyH48QW)%7KB<+s5I
zWk*=_BLef)opq}+7sgPI3_g)(0b73bVlN-<MDpA9R_CH_g}qeU(24>(=*7N=&&C~7
zQW3BLCG{ESc@N|2nW%+(s4Gj?4YeFS0%vcu2IbmR=Euwn`snKHX#KRHVd22&P-)U?
z?2fv{C{J0>qTdC_yo5{zVA0lOCKAn&$;J=>0TFcog*(=87RnPwijc?e`~h%SVuP2E
zD;ncp{)G-%&q>SQfIjQ8nZ@nX9R+@@uw<=UX9W#h;P=z(e<qUR7z{AarN8N58eh*5
zNp5<!O?R~8!$Y@U3>WJPSI8yw7S9YqN60mAi2K}qe6jMT-&hf;-2I<2nO)H?9SHfF
z3&bq&)C_?3-rkOL{SxpvUb0Bu5yJZ{U}^+b^*NR_+9gZK`TZOjFWI^g-axaL)&bUJ
zST#6cFP`TRn5bHzb^XtFeR3d$MD06{Thrf#On(j#if!d&;T#N8@ihh%XzHmcXrL9b
zIC8=#<A(mf8<a>0aeSb0ox{1NTJHBU*Y1jj28wRan<!Nl%OzL{PZgUMFZdG&o4aJ*
z?(^9VETqM^ouN4Vq{sy6G7ODOQYZ>v-e|Kdj1IfE7;p!^DEh1-xfQX!aX{@|F@tLS
zYqvs*M{(RM=X97l`hukh|3>IxaXemRx8XGa;=q<g<5zf*R!h?I32>U?@zx$VkZ$FQ
zMA6VJz@D`40!?If)J_p~7oA_QD!hBcCH$4BM(`OAcX<m%PvXsS!F`WJSPFEVrX6k-
z#Le*p%3ndiQY0OE<<9ed(GEhmz3yjXiTlsr#0gR0M*4C1D9lORxhjbhwbQLz=p3%>
zYfHp?qm=lHkf^3xa@_EK9=>GAxr`fV&xL9~Xf5OUkJS;>-7NJeAzy*Gu&+M(Qj?c(
z0~PeHjzsU(1T&m_kzy=^L8Wm9bkrb7hwl=GzS9H1x|KD{<E#1OpS%_rpSaAR6RR*X
z39Flpo1c6NHu@-a6IeGZUBgR!^IM!BmA}i3G!}n(E%EZou2mxFMTFP(Yo~+Ib0O?@
z%58g%U1x%vo`~S*f51JK_kUx*0PC2AexQhb=<}VgxZ(;Ib~vYiwa|jZi`)J|&Vn#7
zai?EFI==h)YH5i%L01*{$Ip^;al7u@7i3sSS>)@kA4vOf(5%Aoy9Q{NJr$nt&bt#B
z_Y&IeC@m{9oyXLgeCDBxhYUmE51gz$HW5|Vp>OfI)NtlK1$2D_$M4?!hztyv4YO_)
zNP^@&&m;(=V|`L)pjb$A$9!aHNl@)j_Q&9k0CHBX;>TMy-iN~<(+;cpI%DwA8xQVK
zTBEi8Ik#}O>rDd^Smr)i^ieT~5J!1ksNS3mSrD%mH9e>M#y3Pu-AgV|xi8SB9e7v|
zLs7)d@D}@8iiFfK!bnoI!Pg*Xv~nUZtq`6Dn=!;P>VR6;WM+o*N7!yJUj0iad?t~N
zNW6|$BR7B8qcDIP14t-w)Z@Gpz!aFNkRy&J=W?AwK6LG|->&Qb9&1DcgW0nk?x`n8
zY{Grwr40mmv>Vd6fxduwoFerTul@T2=37xmFx;057IN4rtj)s^g_sn~n`_q7amr^_
z^mMsv(%*j2W<|#p*u>?6Cpc4^wIkS7w42=#D=)>nNy3Zlw8_uWq$3VAq8S}mc*|`L
zd8`kycqU0!k4?LPT}J4`iqHoXx58LQP#1dd^S@zM*|oiwBxo}wxLv)F5L9usV93f3
zT@I4rhy;S>r*3oUHx{%ZS|pYu%@U-km*(G^hEaVu*x4Enkb=wev*LQVyEsj7KYO29
z6v&zvqggLy#x>dt3~=Wg$;+Qs8rP|bfTL}bIb*YXWXerhm8b|~#Phj5r!q*BXE;?2
zeMWqn3Pko@52zn4dYtEyl@W1^9L1WGPd8nR)-2|&Hb~))!Hku!A5cHt+F&we{{>Tm
z?qIPWNQz33!lkc{yIrR=Eg}R=iik!B-uqqpI3jE|P%$^35rhA;;hQNmR1_^&PWtiv
zkg~V@sy$5kgARKLqK2(rU)3KU8WJw()xZb|_Elcjd)SAdzJuf>^rap<Fris2XZMB0
zO^7^UR4i`Y((<W@VP@)qmRHAE6G}qzUiCEEICdGy9kj=`7NJPy`keRjO>91Vy~##=
z!)>oCMoqm7(YCIJJ~JZ;!$mTNUCJn3e_QggoO)oM1MTogYTR+vrjl*5)=}Hq)3y#1
z<FXab#_*$mu`h#4*&d@jwaN4d*!B-Y)y&h`R=k?Xug)NwxE`GhX0$lF-g!S|%is$h
zp%c4g$lM_3h3Zfrm$O~H4ne_p?7||NmFo7&<xs{v+N3O@&^4qqn3{jp0RRXE-8dH+
zKvaH$-MnCACyluBogbG%rxC=1@JTJ!3&fz)^(4UAkyRE4dNe0nhu_dUckSZ}n2BzO
z6Hs`UL=D)lf2t+RG9K}v>Enp8o`0S3+E(h|gn=szM_o1$jIN_ngVfbsvghO3PL{2(
zln>mOtKXWs2)|q~X)CB6jZp5!iR$AUh6f26Ko<@K5=qf|Up>^O&}Xa{I|zKgeb1xW
z@ukIO*1Z=6Y%y9(C-$xHvSmj}Wy+xx+dZ47?B{|Pwz@ApcA}sSd!K8Ru2-n0?SRAD
zr#sn|XjP<N^pXB%qXHHEo_DZKv%sX%;*$iC{lfu551pHrFqNG8yI9}y`7vzuyVPu6
zy_GzOUq7WLt=cdXy%Hch<FzjW_M`_-{^}_J03ryhv*k7E=On+{di38$q}2EJSn)LA
zYTgSl-DjW^384W?TmkOc$#<{uCe%kpLek(CO?9RG$Y<xt*8$3F3&MchmrnW-F;~6O
za(zq2lQ^oRnMI7*)&gTu&waF^UeCA<C*xs8C@4$`B3*te^%t&poQou+S#16)R&P-#
zTR9;DJf+OkJF|)P#sp(>Z1QK&;|k1o7alXiRCj{aN7OF*Szr7(+IPQ@LAXaipA>jn
zBt=@iT>^EyKpswGHHHEXqeou6#cwW`t}hYW%Fs8Fpp=f@5N!gug>2u*?(IZcMG3R4
zTZJy^^$i7bR|aA0QwCJHX`FOKrXj#Mq>y!!Sgmy?$m!Zv<vtAS2KwWNj*19=;+XB+
zAbt#sND0;?`)iO7ook`a!7A6mHietYl=aOga({ND3qL;oC$U|}a=rojZH^_=1Ma9g
zQX0~Wh044xUx&C#J1Hb_(j>rfyDF~*^BK<OZerG=GAUrF&kWq|-HMCV5%*ED@i}&2
zNm&we+$Tj4yo9>BFz1Xe1KolR@-`5KPIJZPgpnzWIDWHp%*g<fhT;a?&cU+HUezlz
zW7}<`BSVn4Z){xfidM8*dj~W^2;3U)m0_U_JERb5HJ<j(W1@2ZNDl891)PuR48k!4
zW}2ED<vVdD-sLoB<K=*-vnl6?FmZ2VM}Vk5$)&1L(8%f0{5`r#3SlUqT(hVfz)HE&
z)6AVJ7wYz4Hrk%qExm?H;~N**oTFjU9n(9dxEUFv<V!)7tl;RqWqu0bO6%kYE@zu+
zq0R*1cuT-<$*#UKx9a?l9GW``oq3e+D;;5my5~V>k7H>jT16B0uyy-?jWv!D;3~+2
zgWl|pr2f;`@~CXMN#v9I?_>9wME<52UDIR4H9`!Pw;@R~m%>Rl8&)U18fQ%r<dypr
z2s}obcVgo)pwKVlA)EEDmDZ{7U7E!=>qH@VJUCgMp@LBTxo72IOtGy#Gf`JTd=$_c
zx7%psD8#g~_Y=1|p&BOa;k=}IV}en0t2f?>Mxn!CSO%}))usW_8Cc3K=!SqD*vDG)
z$6L4NXIHnUFK<-dF>L>4qeXhR7USAV2Q84v>jRGbf`DW(JbItu_7GCz`9^J1#F=uM
zM<21~`s(KC9_BcabWsOkvJ~F1kb}{qgP4a|*Mw}-H&woDG;G?>DTgmTmyC)883_BE
z0LQ9F6EAj+>o%81%1R<45Vqw0o=vv?DY?lO&#N!SFei`hEVhsE6ZD0(Q8tAg{>W}(
zw_fOA;<Qy%kHALZbLZYszu(687C!Ns&To;5Xe9DZj8<zUUe=Y~TtfG`aAZbqOqw^}
zXl-*#n#2g;_hl#x{Av6!O0rtT*T{{7vji3wGU7*{-~5yJS^;FPti31~G!i!cx%zM^
zA8lp}NY^C>_hEu@a^GPO5=-6h!AO#qe97Xv!oK{2e+}w7*Ng=vhtIoB6X@iYuM}?T
zpJ&<NdOIu4R7;t>6sGHG7$W)Znn2JrfX{5Ba+~9;vk;1L9^qfk&{0~>MA;SZKEfXT
zQZf+*%sW~O&r34w$o~YM?Sc#*>sc+Jo#FG=!Qm!VR1N$lsa}l$($<gL62H}N%9p@s
zG`9KB1&`0>P1f|xg9km~3O=HGNs)8Cv8jtb*|>uH0?g2EuBq8?b*pj9VVB-=1I9~j
z`tnT%{dc1kE4P?0`W<AOr4Sr8HWc9Oy)BdvBkdNQigiuq7{uutt&qYK*`yIM`_DHd
z-vph8Jk#{&2YZ`K3T}HrY@$pTV;E$w<KscRlT}Aub7<mIK&8I#pz|a9wqCvT4{M*~
zTDHEho7dmB-JLG(Vp2><{)uT$5_!WEI9d;cfisPH0IM<MC48}JKQM@&(M@TzRC=Zk
zY!3|O4E%Jh9Q*}J<uTP3>e3;9Z4!F`6-))rY0HTLef*RE;R%3OB<BUEP*4fkXJTbu
zfW`AP;<{Jwd%@*GuQd`W<VT;ap8yCbuJq39kPbxT+Dr=C%=x<lFjWoD!pJCjVJCrM
z7c>)X<M-y2^_Hn1j#W|LO1VG9bnC+*Ik%Bg@ZL@V*(5$UT?*oN-}cJIch>6Z3NCS!
zwo|Hvk-^tH*ZkIC!4KQ-U8FS!P^vA~I!*U+9rnPI2%FVxx3~+wU+5d%1r+-ErmDzv
zDLqV{GxtAV+EyULnGqXs_OZ^Sh7Tzjz&WiK;R{;1nRKngNmCmuP8;4ootnSHX70|2
zQO-FtOJKPsQ(NOrQw#5WFKjshHSLsMx#v_1LE|j?46#(D?dw>W8%f__8{HL?OE>%W
z*t#7i9ZTVjc23ij%-k#fJgpWsFm&8)EoCB?ZJ@nZM#(j8Qg|6E%}q9aqn0x9`~Ksd
za?RaoA<mD6eqmCu<+E~`vMI7Ip0xs2^3H9U!$5JYrp<n?uPLErl@FJUSjE|3t?Y-W
zQdrl~PQ9oa=CUMgYC|A6h3QXjSyO$6!INTFoObi%tHGSZ!J$w9S2WJ*2BuT2(@7gC
zvh_fZiWS$v$+&(LfGjGD5`4kW6D%hAHBaD^U6gf0gw1)iud4^I4l{xFF+yG$YBeXF
zF!8BXv6I(fO*AH8mHLK8?v0N*1W{wC8nH0wp$in{5FkG~mVX!q)7n|$*WfQxW6h$O
z(xn1%az})waj`n7XB{(R-q`3gCwr+;#(}G)3bUyrfN9Jpz}!#nU5ok|#vNI}5wF0~
zz^l!0X193y?!HEOT)M~7YwJt-IO$0h>~r%iY@vJNUeExwfKd66fsq2c`8S&`RH(~c
z1TK^Eg-g>`{$jbwvg>-EQ!9-ZBzBGb%5QtN(TA+31+0qnf6Pwci73s^qa5X}9+h$~
z-!Jki08rJ<soxZWIK)~1r<3&BfMgIdpP8BlicCoKhxd@70b;%@<m4qC74Uy_=DRF|
z7PbK+5j%t^H^{%qDj6EBvT+ldWCYN+`zv>h3Y_ctg50rAsG#fQ!q?!{cN2S1%as|a
zdD>ByW`}kES%$z@mlpV(Z;%?XHATo!^xn^Ers5tqEj5%%t=<Cyo7DbRyZ*fc?``CK
z*nUjQz4fS}O4F(Z&!#KN`SPakV~i>^iqbu*n#wvuI{L)zT_*e5^rt7|mHQZ<Maynp
z9g<?VQ99ij2A0Y!Nz#*K!9hk`R_b_Op$0)59!LJ(wU#+9yoxL_d*_?XgG`6j24z#)
zl=H10=E<!B)4zwiY$1r;<%gI38_!{xEQ)fdLO_P_-KlI*?YBUDm6n0cQ~SH%-|#<F
zgPNaoVYI)Usi1_v(z-bX-MKd@$w`9Py-M+JAE;)E5QX7NSIYpGX4$Q|^a~<a<Zxe_
z<BsD`LxZ>4j2*Fspz?it|Ms1<O-(b4j(f%;nkt9IA)6h{Y-w}5eBV#0K`bVay8_#|
zs{3niZ!hCqOxRrDE5v*PP4{EcWev`m@vuo&y*uir4^=)80<wWGT_pka^o{Fo0uBQJ
zMSca&`9}5;2rfRdbcIVIH9V+Tni-+yR$PI{k8c(0F`6WH#p?zI!V_^vuaV54`~yj(
z!;>&6_ffNt+KgAKWUGSLai2V^1P2v8c^VudQ+=?DBtdRKYT4U-{j>GoGcJo8>S8Hw
z#><Y)jjonCA(3_-A(3ufPstgAxB}jbOabR6EC+>*6gZtseA1kAo!D*R5TG-45d9E9
z;aPR~fTQsHp{uHsYQbUCs;MU9DGdlREKy)Kd`yl9=OH{hj>oY5^GSj999&UUvj4Pr
zMuMZ{tTP_>fbO-DrK{|<2X_M74)zBOVv1I#O_G;RzE5mWi~z3hb^5Xw)VN+fOuh|k
z6&)Z&t-!o<1$%ImdyOZWf*rqs4fdc!-F9TacEpkyZB$PaWjkPGKqcy0N?Jcw?lTcD
zMooCGYaq`Q-5W)&f5jBBOY3X3!9>Df_t4EUh(^r{L1S4py4XO<f!>48aSNvJjxJH0
zzBiSZ93!sZYD7h?%e^ZwPtt7;yihfh+L=0oR=~GBo@E9=jFG@Tc1pS<7OjeZ{k<>1
z62?qG!;f`5*JrRgkRB6b>p4FnW(a&#)A=i~)pRQr)K5BGynITFH5`7*(*=aUZPor$
zt+B49sAk0Z5f3eh_T&yG0IP+TVB%Wi!%+*n7kQ!4A<duDKOb$2emikCuZ0)QuZwV^
z6WxUp55jKGSf_sOkN#rjmb$fsR)Ia$=FB440A@9elB=D>)>{%s*%hOQnd)xa6RJ=6
zM!GuE4-K5ypa-midy`FiSOtZQB0kw2B*jfd_}~-U9#J&<-O+MkZP~r@;-7R&i>ZEx
zQ_H$<+e)xn;26NnLzRx5@$B#`t)oBZ4Z_S1sX`o|_m^cE6w~nm?eIWOil8o#E=%=^
zmlVzhUlV^F)^Xq~c?WEKi7j4>QL!yrc=)DP^Nmh_EAcC`H-Z5F2+L3n!$XYT&%V?E
zV-*^gW|U=|ry?e<!N?ZNU3`Hb+W5+6sY1bMK`vg|n`9e;&%VZDPWiHms}B&aYelTD
zprb9SE?lXf1#mx41Al=mQ|Du5O|ybwOzt~czVG_2d+qwJoCaTwT75Q5s!&E|>1QQL
zPZ@o)Y=#hG_wJp@1=FgU|Do%u!=g;T_Rm$p1PKMD6c7ZJ&Y_H<q$CWaK|rOYL`p@3
zAss?OLP<dZ3F#0iX$d8U0qF(-nGr_dJ1?lKyZimI*Y2gu%**>c&w0+d&wbzL=A5&P
z8}G%N&D@?$>$P`E5^Fk~zSduX1-rzC;h+vv3%QnwuxNb0QO&(II%k0r=X>nCE8)C3
z09Gvr;)N}qOkc0Rk`&Zq1R~vu(uH1+lG(l&CPDHSq=M?-fBxce``{=Zz<F-M24sUM
z`zAOe$$EU@%D{9(X27igsY4IFJ9hm$4_B<7(e42++t$i5^2zN*ET5f^2tMk}1xlbp
zMOQc#k&#|L5-ro~LT65GXY+Qz$O~iICt)~;sOk0#R0{2z7rc@^3y6<a_6E}9W6hCB
z#5lB%I$dex5pn4yZ#kor|CL6kI6Uvx=pK^ooLkq5eIX)t0Re}%h#*$Av?)5qzD)4(
zH$3IQUaiZGPr@t8C2kh4%~vw>w5NU3jZ#S10~A2kMPDCPxs|1K1z-SLv0oym;Gkv=
zA!qZM=i|6%c6|<Pe-^3R<cz9(TbOt&Vp^EuRUfq^0tt<MemIATYxR3MP@cxymy(r!
z?gZT-krS^(sLIKWj_z%Hhdx8Y-z0U0hpKAwbN_bxU2J|N`k=Zq2gf9bJUHpYtBd;>
z4B72;$)XH(M@jp92I+;c3YhmrqsFXw7f<u2LZ&Gv>o~bkUg=6FpYZ1P*pK~+*5Mc-
z3xY1Oghjs~XLTfWv1?&oC3ho#8tBGav9Qepq^Ds934>#;1!KDba@Be~l(2Q<K8!+5
zj2L$EOu9`}8?8TcL+{Y|Aj#^;M03G}woSWg!W!j&wWV~&DU<c>D7VPq2SG7kr0v^4
zQ7{8styf}B06E3p2Qy(#04@-_bHk%w7|_@EWJP(LM32IP?@(c%+s~)|?R2Y%vk|J$
zL(<ELH9HGT2|vuzv0)TaW1YIQhrXdtVm0WzFlX=S+Rq(dloG+kfI<2eLsT(c{b#YG
zp~AkHS^zj&vBTt0J0BV;MyrDzn8W}&w2M6zDdlkcORSvy9wveCaF)r&X>bb}YdW@%
zJt1bI`njODDuX_MDDa+KWQC|=o!mUz>#6%~M6#O^u9lq#AP2W&MJG|V2-k6Q2n|)z
zWkmW(+J8(ymNv+Nc+^`2TNv><?!kcj9Pa_IOMF2OIH<d#i|7x3(D-=b#IC0bQFCXv
zD4ro&Oux0`B=bI;ZK!$=n)JTy=MY^4`uqFj?Wx?cCn|-U(CpZOc&hRlhGAb!?xeC&
z5bHkna#2O|@p1NNOD6^#1T1NUu)xcWv7@#9ajYuu9QAwiGn0Hj%AAzWL0z%XWK}aS
z)z*x@vIGt0_}(B1HyK`P;>mr_2D|qq982cGjkr?&_4A$H{P|9SY5yg0U}*6z7ZL{4
z@l0YKL$?whPXw_2wL8~$_$Vv3)UMh!U|-5GSuW<qag;|+l;ou0)7O}=w7=I}<cp5*
z_4fyeI4U5>zQIhDlW((OUy!Vo+Q~KbjbZ0F+IWt=y~oayEZ;Wx%n`{bg&*YKhMzA9
zv=5TBN15F=i3UURj?SMgbDKr12LcE+jPLk{=$pzO-XBQ};tTWz0}hHM-=Kr2yXoyN
z+mStYZe(x8{`aYh2fdSv=g&&&N)QI)o4?7>bCp#Qa3#ao1`0L|iN=Q2v_$?rxLIt{
zQg2=R8%x3jsohQ`PItAcj4*F8%6wTq_S~;}p<iJ$cI5L_hnUBof?61!EQqF=PAD9+
zVy-hz;!}^gB>WggV1mBJZGkK#p5`L$lc`d2MQ_oa>U?`Ju2cz0{Mhd?3J$(}5gPff
z50&3<W>xHIDaZfj{!aXFlM5j0e`xOcF$yjuZ=jM%&)p8x=Vut&7}ukx`r)P@h@e;S
zp2!PDI)|(Vz5z^-8<fESN~kijYK$*lwMszEpB2dNppfwJ^vtOWvd)y7+spU(#CG-e
zM(A;hIhCXF=+(wRE6c%mviWyMFPLw=16rw!YenyX?&8{&D1hb0Y;`F$z;XE%2+={d
zmKd~o9XdLF-l3B8EPudSA_7I`9YGV0UZsz3;E5k5+hj<y8Ytu<1#B-{u%t0?bpvYF
z+%})7ol4oH&b=<=xDvO<tZF1*Wr}L-)R=konUT9!O!<^LRg(NOElfMiTk_!z;7V8a
zZiVY-hj^}C7c_6qemQsNDu>4LpX6+2NqTjb2y)fULq9e1c6YQwQy{u7aQ@6;;FUkM
zzZd50F!XKtDhy&p%_*=|5zQ~jZ9_yOyRf|bEI$)rOmsPd!pZ_21X-#Y9tlrRgL5c}
zF%!^`P+BdH)FZEMzwbF?@wPUP^&~e8cu0*?b7+LxXXftBDjVP_AKXS-TF&_KoIK^v
z!}T2Wlq5zA3IJ=|WctHKwnNlQ3yCNR+jo;Q3cJ6qPG{kO)7r=X&9gm8@o94`+JTzw
z0Stnh*QhsSZ@YP=$HW!6E+4+98=EjO++O=v8`mX%+Uh4-<5CLr``F3yY)|R0#Jlbv
zI~Ofxmq0^gVR8Qost@C%hL^~)&(NwQ!7MuM9$-(NzpybCu(h}eS!^FL5u1V!O;6XC
z3_`3lT+lt*lp;tvfbk2t^>qeH=oRit+rN1kXql6%cB5HWcWu83tg1|!oivyrTGo*7
zJGvZZ_>M$62*8ke+r+n%)r~|6t<8O({?_JU{7bdXeZM=T;mkGkt%xW=yy2nh1vmi@
zIg+jOUA=UDqcM5lo266wjm=`|oBicg|EC#k;$7OI_BM}^N9CeGjo(GyV6Wb33EYF7
z{@^c@tkVZqG`MF}DnkEePYTe6bbxP|p;KTzHz<e*QCK~;p7)4^(<|^8X;)Eg8Hk+8
zHEX_|cKyK;n~{hSUo$A?1OJx_l%x_jxqCnML0<(;)Vuk%QkSL0RVM1mv=-L`Y8=}!
zuG?52`^pWiQg74q6>^Gu5v8EtbYIA#MK@wf4yhoLzWMHA-<R~o#<M&G!@frqf+kAR
z0Q@stzqZNG0`?qSQwlK+N+1Xv=g9*Gh!nVaLzv4M1bm`~*?9GeNXTvi+?JPEsj$^|
z8RH!lgmWQZ?!rc>`5>q4;enNNLZ|GHAxv8Wq*Ap*9_1qHvBaZs4rJ6sddA>wr;|>O
zTm_T;G+&RgIJN<ky9u{g?F{7n7&hbCQ0h7KQI~o&^-fO6>nNE6UXKqx>~hoO|H$zx
zsLWRyMi(P<9o=bejwA*^8$eTZUj2h5Yb;Y;>M44aq$kfcH*G(BGj><VBpJEG6v7#p
z!U*TjFnx)6$M^po%v%bQDB3ltJmm3E%SqSVhW(QFi|EZ7i(Rn@M8GG+5Mdp8@HxqQ
zornJZ;&Qm;?Q$t%_)TgHwH%uc*C||SuYEklQ%I3!s^IJsRXy?f;K|Fdtmk%Re>^7O
zJ)r0z_)R6C>e=gFv}3>54$Y}C?zyv2YzaEsymgl^Pjis^agX`sf-%K|P&5sOoTB~s
zV?Rt#dxP}1PPxCoyOL$LRH<fNk2@;X$!QX%VH*#e-HxHELNlwADYGMbxrZ+l1=d7-
z(>39B_j!Ufd(j>mjQHz2PHY;{CRb_zQ`<aJ8ZpOd6lr6Sg5m5P0Oc}ViF295A>@w{
zq5<5Tu}osG)W&zk3JeBCzgBRS_n};(eM|^~pp>&IvpXQ{y}>kGE=@sPd=r>qM|rMV
zFy#Q%hd!NB2;|6U3RkEK@pis<$Knh@jSNO9LIwS>QTs&D33eOU)&;0nHXp?9i88yo
zE$9%Dj@&gEgsNBK<VbmRv$3?0SS(@N9kjC3_srrF+s>L3MjHKXQRk*m9EBWsCb^J!
zQH<&#)I7JV8zOo{t`oV#;<uAv%0gS5>zsHqEOk5H>+x#-0pii`<+*E!a6*cVWInJ?
zkCroG&5qI9Oi-zIs`%_mn_U#fUX`(Awd;f2=;wk&|6CBC{mgRolhD4R+_m*+Y<lFX
z$CTNR-u0!RM-3rnO$mVyLa%mcpZ`krh>DClR-9fTV3!#?-_kLobEB?qNF8--(R<+8
zw(VqB0Z>2y(oOUe%E}oSo=gC8+cgqlHUn-e>jU}-<<myARWs5BO?64matXPS0M0i?
zRH@4oZB=^m`<SZvAFz6%K`ZkLv<p0m)zI7rQL&K=O9>z%2gixf9oZ_Q*tstMJm{2(
z<HI4FsuOs*D(v}#5|14O0(O`=*nBuO<OmVH#bLbLmw1?88FJ~X^eeHg*T)zoELlyb
z-YWWR!B!x-aNN!Ww!Hi4jx%g#NS~z?`k(=!R^${m#|)ai&4pD5V}Z?uZJVt3Ix8I;
z{{~SzRtM`Uv+p}v-ssDnkeHZbi~~Jhd$RW+*>*O}E_ReU-{U(qVyvsazU&RvchS65
z-eL3EJ)6T)ecc9$+t@GzY#vntYnOc+a&LX)#@W>|74Yc}ooGKs{aol)=Lu)ZMWCW?
zRT1o5?LU8Ox&F|*gW%9-n`P%K2Y(3oN3?>>O1;{QA2<>qlu;+(7xu!8KT}{1=B~kT
zt31!OX#*$VMB=1~eW4NE1R(h507_kD4bFWf07lKiO;|9US<-^3umK`w37DkzkzP3?
zJ%iy##PFA5WAGE#>^zc^)lm`<62tFT?u%4_m{<Qz=NLETvSM@r;&2CDl3Nf~b3mU|
zC}fN1Re(>cV`rBg9u`(ee91~s*Y+l=YiCn7c*1W`e1bi0_ZBP=LQD5ELQY1!FTy9t
z?w#%{vfq-HvU;#{g)2ifqc^^Z*B&UkcmFF0ueyQHX$^3XCaUDGDjVKbWwZ;w4QrZJ
znuQD{Ra;eOiJGUs+Z3*$!6yDDOQoYgMufjxZ-2H)-DP?O#Lvf*#-$7lu<1s}I(Git
zTep6`Ww2`iKSqul$Gt-khpjhQ+lGR|TRu!qwoIB}O!R_&X8;CGzI8#QT`jtu>~CxZ
zwmgory~3auyhZb!u*lGKj{<d6AyERE#HJHCd2UryCipR3tp+Vxo2#UP_@$OUg?h=7
zU+ubWi{ch8#4Zb+)XlrKy6S(F=%k9z!kXl!S`ZP?-#?dNsIrm%s}iR?sziyWsCpeJ
zxFubPguw~a55=8M;AQ1_wnn;xtJJ#O*dQ!^cgAF?5iK7FwLKs9!q&!fcm>{Jh&~E2
zZG!P6h`R9>O+T7-Xm1r5V7kl^qbAs<n9lF!S2NM7ak*0lGpOd`EGi%Dw3a@htSIB0
z`6EwH0I)sbGt}jNY@64sbof4dsRL1hAlMYWeJIykJvZPlGa)NSry(tKPAXFJ_kh0$
z<JG$cH|I;oLW31ii=Fcg`@&FZ!-i!`@;rX`3hkjOTKk~0Oz82)pR5TpJ((>S<sssc
z1?RAu6<ht70VwhNR&MvNum8~bDgHQ@pwdVWV4Q-6wPTh?n0DA^9rq>i-el9W+z0a~
z<r=6nyzZlqJON0|w)jae4<G~f3y<iRXhGdu_k`EL8mQu?pH$BxaSf~cE%qx{9eVlg
zJm2<fg>=VO_lBBIwkMBrTu`otr?{R5-pS((ZqlH;M=p4cPWB&{k0kw92xg#&9@ih<
zB6lu4Y+-1kMOlMa+lXAFfcZsR<H>W%0(vxiBI1R_k(@{rr99H?{AM%HNc&8@uet%E
z<3a}ufsl0asgLsPb~5MgN(4M9#4HU(J+726GST>FL|UHd=>R4JLa9@KxzMKIU<)V(
z&AligP^yW_oYk#fdHlrJ0Rp(gm~H=NQI_=AFt|IP1@S%DeQlzF3ue@0O1d>Gc5z1M
z|M3N&V83^U^OSfgsGxVL<8}xAk0W-UJv;yE5u;NzXX)i*=<IdBVc+)bW8b{C>K}eJ
zLEN0Z-W5B|as#M86!@f&3jm1Ccjfo<3fiQtvGyCjINEe@-*HxMs#r6-1LN;pk}t4@
z?%rGlW#6l&JWmlY0<NRTj<?&7E&jY^e=T~Oczx2W<Q;(!nXZ<GUNCPy7P4*NiZtF&
z^vO_4gBvH3S^AEIDA8gLTmoL_?~xpK%oK=G5#=&aJRI3RZ&p;lgr&n1;Fs)dKUrgX
zG4e(1j{=eFS8z~9hEnUmD3HFBDH?ycDHt9NWDspZ{M#7d@>cTUMmqwChkSL?3&kH<
z*q!%`f@YiAL^y{`{{O9}g+BNXH7%wWT*@{-;@6S;i^H1ew^?ETP?d*5!hsm6&4K~7
zJ!m+=Pv92kKVN$N_(cQ@?6Y9}Q?bt%2-Wb*D_KD`Yo-73%QB+|z@UqP&+s17w#cS0
z`n`*-UEu-99cX_~0+z+_&u>JGQf?P@AS2-+6AG05Lw>xQxU@9ZY@ap*wdawiv>y`)
zKQyL)zbRkIBO;cOpr>nmM8R|m0LguS@ZYywF|~L8P!c6L{ZO|4{Q(Njm2L_n7dIe#
zF!@uTnuB;(2weAdocK@~=T6Y3i(>zerTPq#3_Cxs`#X?>^W$C9%ne8F#ek4m;DmCg
z>JLzfR`}QbH3QZZ6SrTq#)u0Z`du%7;GEXKmIUKK*W~jRN?aYN?f<EuWv8aB1tZY=
zFn6GJjrU(qCyWJE#U#hjETI0UIEE1V@=s5X$F<gwI}xgB)Vg6Gvw-C8Ki<u~zDY2-
z&4YMTZ9I|yhv(<+zdqU!E^_0;QOJ#AVPBnw8v;H1uS}>0vG4rp7EurPyw%F$sE8}U
z6715fK?MG<Z42!6(Vc9EhC^0=*9kwk2~>U#5}?ts<!hHIgEj{~{25p2<q?-fgl^It
zNbB>J?)SA&W^316vMn{Pfre5-?+@YlkB|%nKVn@9!S^bdKO=SgFaHf-%@B}ooC_B5
zgCnh4xZC(6zTJO@h=s@XRc4TPSV3I>(`Y3M0lyJNzQA6G`F^SYdP6r@w~2T12M-DC
zMyxA;zS|L4kAj8aIvo6aJ^``#M8wGt{uLwMN0oyhfCN^Wy4(T(;2qd*sD5n&L8B#f
zXR{0A>E3{Y<mQwAN*>TV+JSRo2~-^dBzARwF7M7^U(%{rQp%w>bpQOhufU!|OfV6*
zhfm2$5nBzmzqeKNDj2#tEX9D%vP2*R{pMc>7D5~NZz5OHDseswfcjtFt(z|lTpIu>
z2x@-Dr!E0^^q<R|RQ|cr9=ve!Atxhokfk6#>px%H^^fV7M2xF<xq_v|EEE{_QDhHa
zQ2guc8M3?7Z2N6n?w*{H-uP~>lW!T7aW$J&g!uJ8g3O(X7;*a)FnXu~Rrt%_p1H@?
zAo$@6o_~Fdcn9LAfcVTV&*3EwP4XgJ>!%AzUj;Ad%fUp|jK$-d(SMzTHuTW*T);~R
zfYKLsi78h@=-l;_4Sy^g4~EBxCya>U+y8AkogF;32P}F2ya0@oh92zPt9zkjWoi5$
z%lqq9As7MlJp*OUw*AN3wnOYle!8w~dS^mQ2?_87AZT=V8BDwCXhG{ZA$hbh0ta~)
zJV4T4{_|a5oHMmtf0o+=9we)phyf@?X_1<hYD+vpH#aG2)l2K|>Z0z7#n3XH*3PLO
zYl<=f9%YU=Y*dZPk@73!O?CshgY)`nP8WV$i|?b>8%|~wt~|aIcz$*7Z>zYsO#xxl
zx*kj@evF~r&wn9~q6OyJH2NuB$e4LZlMw~are(U|-azCY$U+4810aVnOe6ffZ}|fG
z9{(uD-~4du`YnWnLL<2s@c&ofM<fDOS8^`R$4AOZH{M5q`Kz{~qUKBc8)<7ZFElM}
zU=7k5hDdoWM#-0T+dIu#qX98y{aG=z>nq2IwaEoBPU^47{9(y5@%Cuq|GeJ8C>Yuw
zp_uE)A_sNi7*Tpk3zs^loo|DWSAsWliFP2>mBl?hTv$S#L*wDk#PXgU$dh&DPJ=??
zmk9*Ok4&Kp9KC79xI9hg|Fsi|@mxoG`_QNwN4L2vL}lc8{f0;m^NDJ(4*Z)pR6U1A
z%%7Kq8#EB-^y7+DhksmXvgbGN@pO4uey$%${*X~9)*oST0)3-qsPZ>4@5lq}$Z@pe
zG5BhD6R;9eAsAX9ux;U8lROIUaHjVX|Dg!qOjt(hL#+VO1lG-FwvupcGah|pi&AI<
zH@wYy8)4aP+RI20b^l>BbU90Zc3)BulSD6Ao-+88T##Lk_%6VUOlPh~`=$KAJHV58
zWN-=iqJgq|_Wic6>cP2WHc+(xwSL)MZKS*`zI7}eJdWBPBgZXi3JbenYjX-?hmijB
z&uBCPe55=8#(NOsXfWX-1kTyW3jaTEfHDdK!E=>(Y5bomXf1E3M0+bX*5;cXTBV59
za>(EYdvb8KsmISJh@n4kA0KSx0!S)>fGq2OyxX*yV&{2l2&nni_~IVWuf2PTMq1ok
zmok<Yv?oKg0)%1!vGh7Ah!sh0RTurdu+?iM!2K;-V#L7<$M~=!a&7+mwQ12{cHd!v
ziGba|2dG8w7m2S2spW+&J~bgb5IL6_V3!lcYv8%&IHD2(f6;A`Rb~e1-Ww3$iXS2_
zZEef{cz!m%R0xv@6svTz?sxX}h|&i%YVaY=%o82!YzCXsHe_rLOeUCS%>b2R*TM12
z8X80GqP)6=9}sV=CU(})1Z!5r>Iz8{fsBi+DD1$^bG&7MxD37_LO;XSfr8)M30Msx
z1>ZBArdLRkbp;)q75GKKtt`e##<(DprLF-pXiv7xBEx6L-xk>g(JMkzu$QNSSczs;
z0bUclbu*i?<tP4`)Cs8ndXIpAN`7&hv|FlhTUk_)IkVYM*t{&z<<Nj-eaxrL$EJWq
zJa`b4(Fz=Y31D<nJnBtNQcC?&yy6$uyxup}l{MeuGupKMjbY_qB*<p<u9ch^*lsTq
zJS4Q0h5px}H69s#cGhdtHWS=M{;*M6xwis}SA}izJ1EWea<!LEE`sH7$tZepBvH?)
zSG)vRFQ5R>p<1I2xYux{5}`?Ws?J2*U}s)eyeWUde2UfY&UVbMq@Q`jzt4;icFP6X
z;$wO^VgVgk9kAtlvU%~ayyIwxT4g#Q25i8^a!nDdC!kV_IwLba4IzkU<^k&_)o;zb
zBaBPa5=akocLdE_nn;oQQg^?;=ynDNLA<z~bqpIxAGzIi3V7N%sN1x3Imx{F#ZFOd
zrK}o45JDjc-UUf*^v^iW9C;Wc4lU6L6#MUfR%q#mps~m-s+DEJzH3Q!Cn1fe`jF!-
zwu44RIlVytDd6*OhhZn$Jm+qJ6)!S<zKCMVE!ZFI<dXf|MXmd~V`*-#ipeXdi$yBL
za30>-n{Q=-)IBv@`3~*=h1ktRFYU|kA(HRf0t|JvrTn1oeun}vU)#zB7LQr7t|%lS
z=Hq3E#juovJJ=S_dDsCVHvIAjbT6y7-Wi0I;VjAO3pMf$z+fHKMG!!fm^QdJ#!7Z!
z#e|NI&c?~w4ugjKFI*xXpwuD<cRx58-VodVc`}eruaN6+2^5wR==H3fQJTBXn?rKn
za^skBY>_iJ+Z?YKM?1iCNMDYJI!-)TtQI5)(;8!C8|x&VaHci|WJ)G@#iNG(zBbNq
zmd@*<r%;|V;1A#|*>YNygF1zZgN5mEr?yt>`A(1PtpBxnho0NR-GF343{rRV5J&y3
z?ESru76<hhg<K=t*}B{k0T=*X1$Yy^m%TWsYxm1h+#D?=j@ayD4>-P$ofYf0Dw*(D
zjE9&SF2(bDzx`3*Dz#wjhZ%>BS?`O^{4C-A>-&wbn?u#`3RF~oxIZl(qoct%-0WjB
z*3x?N8Y2X~08tifFxflFcTIz0NI`oO+&}m-6-?^NZb{cI^KGd2fny$lihnGzZiw&y
zJFFkkQ$4w<PkjsIgPD=!gf#)_xs055e5wHF)K}yk`UqeKh~-qv_isQMj)|)B602hs
zW~im8YZBd4AG!n7wnLKfcZPOPcccb`6B`nav>eq922H)8EAi)j2Av@FIFI(BA2vNm
z{<>&n@l>H?CU41XwXLP3klZ%lz?>|<gMyKKgQ*O;<|Ty(m^^5UIjchHlnaqvn<L}}
z%<#LUg4Q;U_KBc_u04FoZ#lz9v>)IBKdNR{mi&B7*ae(bNrnzN4W`qQaW75Ufm&5+
zU|$7l-D^56?7r&I?9ZMKMdhUq*jjo=TDde+x*^GpNz-D&f@|8JpWX(l(R+PM4hOzO
z+l-&F`n#gsd}TB7zHDHtQh;l5>h^FoXY_7n?`KONLol5-1wV8;qdITJi#2ErM=Ol?
zfV=`R1fPv{?$16fXjVAi4Rf$??a4}e%})F~nShEN8La{KT_v>in<EZ3UBA)NmiuXT
zdyOF{nJLL3T7Wu!O;EHQu+!@}%UqS31?OHPdE#SesEMH2N9}dh;5TmwoE&Qwg)x4>
zTK2y?B;jLj9ak0=T4+)iM1V}VJ4rDV@diDJRlFn|x><!>3Wl?yxrq>iIVVi?v*<_(
zbPYWJ8?J(-)M<pP3BNenXa!e1Qss)X?dCt?84+6%taZ*IFJuZszLb7MQIQY3IpTtx
zG9Q`efN#|_IHyG(@0sl(NHe*X#!|Q|I{8=!TR7+twTnlKc$5kxyG$paj2EB6FMbx7
z!Z<iVAbt%=Ko5+jnb&ur@EpO)>ppCU``Tz}yw%xEqj+tE^`99Xz=>z1Ek2z>Sd^}h
zTZr4rL=aBTkC68qx;Ss28Ijav);g1|hWbPER6{w{@`(eU0}y|mUYyuIIS-}Pn8s-u
z?89y0^Vy+5Vr-#m1_vifq{i3yL^ob5Kr7j*-1y)+PFf*-`9Y)LX(i{F&&54K^F;Ni
zS+B+iICCA*j)jhlr?<2pyXC80TK}@B8<DKDJ}WxVn`-gN+Kg2tMzTtJ{SL<cd+g+(
z_wJ$a>6|Z%!P2WY{7ox2_GY`MIBK4LIYo$^xV~*L*YEy_0Th@wk$MoZ2PO2`w~7m5
zUNnD^z8(JWgC{vi?sMXA{qy2|*SAw5STV9C2BS}}dF4Kta8Ox+SXR<GAl9kRPLKv;
z0zguS)ECIIMCMnpL)M@M4G>W-fB|cbFu2Z9RLpXy8Uy<`z6dqktKNmar=E&-&W^cj
zD)j^rlFtSczYA1IVO7HM>xiLCSJYiudc9KsHx=uU-|mS!wOg0;nUFNAR3OzAB9J3R
z#S|k^mm2D`e03m;p)by9H>1B(B>^31dul3@xJK~MYZxowJkn$ntk^(^{9lo^+R6z|
zT<E6&)0mgMCvWblGBtH=e`a?ofDDF=rRAqG=UBD!7iPxzXH9=5XmY6Kiw+zyNnIzf
zIO#4`;Pi;jIqTaWA&s2N>H{-AtH`{FKxV1lk2~XydMO*fNiIq^p5Tl>|72zUNQKmF
z<nqc>rvrU)x3i_Dsq5bh^nRb|$;IE+hw(%_IFs5P1>+>2S^gYt8%QTIU#*vL6<Vjy
za!E9D=SmGoK+ES1jNa;tlAlCtQFF~BrmO{&%1#Z}qI}t5pK4{6O~skYC|xCu$Ee>a
z(xU&ZguwV5k@H^U8)UhifV6zJ3W4`N8Afo6uuZ&3Sz`8jH{iASKV}i^L|C%d(-xCY
ziB%Hu!*zJ{UpDP_ffIcmNI9Ne$866*wk)>>#%u2#^*b=L(=@r>;@Svl4pk0wh;4$g
z2l|*p@0+a5N;uEWWYQQCK5T0t(C>X!CrB1MWw`-3S;@4DOHZ8X%=Ybn-Jq<T<qv;{
zbG7%g>V7gBiOr+T_e8vE2$8q)gfn@uOsA00h9|sY=<7GX{`n4qbx#{p*k*QaV_JEo
z)W9FKGj9-?u>m#K=l)b>M*mrDk?Zdt``I_=N!2A}EcF<YpsDmR97F4!bjGB@jlx~e
z#Cltocjpbu;HYyujx5S~55z6)u@3H`>W^#nir3t`1S`P*;$$x!6E7U&FsW}Js+=n0
zZF0%X^-Y}f@3b>}e&6k!nMavmdBZa--n3JA+<V)(kz;i(z}LWM^IbYYvs{@29<arP
zw*=jj`SZPRUgF|RNZ@B?V*~S19Hyz#x>MCy3Z$@i=+hYe=PB~XbrqxP33+NQ12(O~
zhAhaSIb4UC7}@mg46#Ggxn-i+?{M}M9<B*K;FBk1^>~)+<oFU~cO^xS-_@#f^V?9*
zdO0cR?05Dx4N*?&?Dc6GD3)<fc`$#2SM+d0AXz`94V&y0QkPUm5ce%>dD_^qb&3iD
z?OBo@Lqf&}vv*d$`IkDZ-p31aSBop@T==cfkfeo)JFQZ$?3P%5H$;Qm@CjxIqd$e+
zoM;ibZ22&h;Q234R0TWr*En9ccSEI2z9*_vhaca~p>bep3Mhk4Ox@_S7j61?ykkr_
ze`M*wbUn#I!-O3qyR(XE2m6@qj}?~LP<ptw+q=+Uh;c4shYO@Q4!}e;3S72SEm_^$
ztCdN{he=;Js7;q}_8EmDm9tzvqL;-ua5*uv+O-6Fl~cn<a;4rqG(JogEQ)=A>o|0R
zX0(Rh@bK)z6TB?^)y0uJ%U^Y#bPODP&~vtgfYV$Dx6YDP!-}YUbG`o57|Y<5>IEM#
zxK|c$@t-&X)3BSLUeu*irnPZ0yqDY?XTRUNb>K`HS;4qxrf4lW&ZOzf%4hrg;vGdw
zoUY%n1cJYRqe@cAHAyQqDSQvg$*oVHNuWAPC-OLBJZexE(`kf*e4udnPSxJ+K1*L7
zvEU4?vtulp2~G1g1c%jcv;01#81&O+93{;DdBYhrs>0WM-0I%!+8cP*%lUODOh^&>
zck8WMi_sQ#r=-cx(r|SUN>|~r)bw)Hro5LbAHHMU!yu=hlz*OHC1!h<&xw=y<^zMO
z*$yDwDsrpa*yh;!`n<nt0h?bmu1z+zmtQuuxQop{8fPS%+H>ErwcA*SEBalxc>07E
z!=>Wf<x~9~dIRZbb{8+m-pX$XR*ImXCRnxAzQb9cwri0;6no1ieC~RplJo8HEZ?Me
zN<X&^WZ?nQ*NxTmU5@@yFy*IUstNB?#g=+q>SDQrDi8*xsu`pXl`bDDRm!OBMy45u
zy)6`d#LURY{U+ZEpqBU#+{X9I@FwBnC~Q3OZe@!FYF7^RGbiKvQ~CE<2dn=z<74`2
zy1-lywfkz&{dWZESjNU~=agCZ&cK0w%GXsfi#U>l+hFk?>sEm&Kl2RTg47vHgO9~6
z&Lmqss+(2g6k@^Nd+EAKp{cz$D=M0Uq?RurM0SzI<$^x*J=@7Nz3s>CYXkyVSk6}2
zU43-yop^4O{0Yz>OL5RmQ@4fQawW`<?^(nxO?8dBU8OT=Ni8(Ne}?B^k~`7Jcker)
zlWIDl!E(O!WMP>azOML{7niqPWQ*iG!*@3z;eJ?i>Sch-$Z?uU*Om7NP^7Gz4gpe^
zN(=ULuVGY9;9B}m;#$heFBkhSbElbX+;Divq)YsIB$xx^<yL*=&dMk1vE5@WBRN(x
z;UV~$FWiv|md+RPf-?{AnmXwuvb{1_WMWV+ZZxyHp)eUdTR-GJGxSKd<wiP2WF#<m
z(o`nzu&Ip0I5_?OQO;5Bl}r*e4pujSGV7f0jm?6N@}m{2(E%&q&E^9aw3kO>er8U%
z%vWqrO7{6zUKsQRZn>}az^V!NBDrR1HQMVvv3AM-nQS4+N!)af1Cq%gIapqWR%7ng
ze@;G0y+-y@M$aUfuFq0F-mPehiSCjj=peoNqVIo;@2)STTugyaGQajn%<PU!W@G#5
zR!7L^dY%}~8EH`+8&zQ&(d=5GeGsWZZ)Djj5+1d;9=2kU0{<f}hnrQ!BCo#6i@fO(
zA$auUi{v=axn^H?p4Q1JDbvb%8pwsOHw&{ev5A;{7DW7O^6@-t`7Q3`Xi;qcX<W-{
z_)J^@MvEEW(Kl!97771zTgnqFlhB6z+{$DbCsOkMGToe~f}ttGr00TcOH!9FjjFKs
zeuL%s_~a$z`@f*aznHJl$JTClU}TQ_Wj?)`ZgbtBPNtEgnWip#yKp#Ljs3wGnmU2-
zWu@2g^6m9Nr%uIzC<RS3ROoOhEt5$5*igx%_pD=nz^N$>p_m5(&1*#Z5+zTswn8s|
zwjRwL{7^h;Zqi99k<IdUu9el@T$XF8LuIqU`=?7@u%lMXzHKBtTAo?wAQvC@vZ^A5
z-VS|9Oz6n4TG&R==)lLM-H)Qv&nmvOiw3hCrSszaf=A|B057ipnyC2O7Mt$w)0`Ph
zq|rAoCa#xcwzWCQ4_DzggxelnXSHJbm1zL#Ms60L&Pst)f17^4zHTq9X)sp4B70g~
zXhnjZ`i#iw!qFE_YKYmn$qjGihWy06>QpO?27u^$n*=H+mC9;SaZsmC0Tsa<alLz*
zc&pl%isvH}7b*P~v&(TjdeOei@F<nLP`M>}N$FsAW>tLg+s+eLRtCxwnL5%^Sj~r6
zZLTYG<36Q?TWOle$z4)mS3a6Qd9gIB*^;oG;p!?4N!CklAX(y6@a>Z}G6MyiW9Ns~
zqHh6moFDY7Mgfc9?Shn(eWi=h+*W5h5rV*0hjQh$urhmsFW&<`OORBJ&%aq}v2LMi
zVjL4X=FUV+WQ^FroEz#+%GsMrYB&gpCN034P$IF);$bM(D^MBo#7d?~tm!IyYlWyJ
zxmR=)?T_xpnM(BLnc=$Q89wE%O~(zQRy&$6RV^yFvCV`!^6j69Bo1vjkiITXudao)
z(uI+v(~HX@2J&-8i8wO}PePe1-d>lT!k)_Lx?%O}0LPAxHt8T*=9v}2=evHAl7LBB
z@vUzHgPf=ovcl&qQ$N{UvpY4#S{gXOqo?QLiO)Y}QM@*q<L=_p5L~}uM02xsJ}CPQ
zP6@b)zhO^PKdiX(z`0yYx%`Ofuig=C>C-ef!OuFACVUOC&kro+)MJVU(W(lx6=aVs
zG?0{40YtnVaXV@ybW!*Y{G_@Vcv$gHL7g8t>Q-kI!mFK=RJy*0_Wnrtb+E6RNA4?5
zKcXEKJEf5Lds+InZOr<jS6u8rKPxuZN~(~^pXl_<yMvZW7ToT8;n?!wMH1^Z?~R_g
zAP>S>TBY=sm2_(sN%97H{OdqonMahk6u~<OW;s8ukWB2?U)7Zdoj^55cS=-7(Q7v3
zJ9_3ev79Wm32GEyj2qyU+co-il){Fl?@3N>h76}ZrQ;*@6<xU%2(n7rk0REgy%HfT
znLl)A(9s^7<tn2_OOn$)-;&$+O}S!T8AqC~yK6*)shIABY1@Pc-SUq45rx0*NML$O
zhE*WGzW{}9&inWcY0!vLXp$dMVIP|ST9&D-(1GbIa+XzVqi`Bxjn3C`jqQ(p(d79M
z^YD4~z^SLu^-`LyE~ZzDyn=4<AwGQx4V<WU^bjM&8g+31IP~b{OE3GljD%~^)XS^J
zT+Qm_cw%KfA2w^q`SGNR#g`FQR0qF!_qbFb<r}&S9=C=YoNSkdpOqgkDamtj$n%l-
zG}$SWGoj`B(t(pxIWXjI^DEO(FRL4q!F`1Ja4YlHi0_@5aB(qBX(YQ>1gBfi%NFt7
zjcg>hpKWfBEkC(I@#*Dt%7W8!YK7k`mt>yn_Z%9Rd2T7;`uw_c$>O)+7)5*Y;VLWT
zo*<FumagWXpF5Yo<V<)6G53X_(04mN3%=v)y{|KuPo!yP^NhNt-?1T8knJy5Vks~!
z>V6_%fS;hB9?d_^tGSX->ds<dv~l!Tb!y}`VYNG@OifUtW$22y+iHr_O2FGuj0;;@
zQXZV2C&;g<J0qz}*Ki+MAbwf#qg>j_CJEN*ZV$r_J*z(FW%Sbt{hZXb{K|#QCNz@^
z&F%$f#WEW1-o1`!*TWyaa`H6z5kjV-uOyeTpZzV?4;e-AO3BGCfXBS~-<=G~J`%`8
z!RV|tNM`+x1^8yVp621nH*1dW!Enai;EZ($i3L%T3uYGavpRY5WG=WVn@>Fa2p*+G
zk1uyFiF2eIRCv@B+3_R=0}PDz0O+SUy-{orcNzyZ*}eF^ySIOy94gb(x=<dA?_`Kw
z^0fT$w*N+Ps0tUZRxWJLIM$Dt@1#PJ*MHo#d!n5QzeuO#lp8uNjBk3qh&|TP;Blj)
z(c{MWM;lA`3m#Lb4c8}~**?*XhF%vujRm9E-g1cIYQq_--ah5HglAq5#a=BCM!k!Y
zFi~=LNKq=`AQwCTc@{plRK02K{KE^cGaFhrlu75k$V6UE2G6WDw`}~+yd?l`(Bgyh
zlgfEABCl*Rq8YCT3-t^j*Qfu`;JgSt-6#0RpW#r^^!X@0(;%K()=Yjx`$q=074(|u
zcD}6kjKHARUgyVY`<yQ1TJ?$Bo^EJO3nFd2Y1f-c84h+JnR&w4oEVulQF`^f=MqPl
z=BAE@W5ZR>p7$%R>puL!;mWjbX@S(`(%}6(YuSRm{iksChs`1#D_he~D&afujx{kR
zr28tKLzy2FYe>CH$4kWR$NM>a3N1?O?98t;$=4JQ5*9x@cLi9SFEiScqxWTV{bhe!
z{|BFMH2)4t-X~Q6eM5`>wA~>9ecJ$A0<_3i5^1y?|A<~BdmCCqDh!&#F)-;HU3=Ko
z%rUi3aDur1NcTieY|P<>fm)xd_yo<F&j}rR@)DCZ-zqMJZjZ$-8F%1y8?wqOlw!wK
zj%uVg-vp6la!QGI>QH>o&1EIs9TcWj`zl|&Ret+eJX=5NByU~j6ro?M$~UUhQo{T%
zp$%)D1d|sp$CjV=zHQfw&9=38Rt`%xPVgaHhLfnub73MyPQEzLEJk#^)nn>l?98V@
zPvryX9go%0E^9gD=+rK_^-5&Yq_mg}M4h2mmL2$b@)6ZMfAB%F`f4*=v2WyJn9YEV
zKjyyT$HePuq6S!qplTUiov1_eCi7u)hPlyeGUiDmw^&z%?yxC2+nGv;+Rl6_?m=s(
zy(C358n-@~F{-$ErxYhzJ9bt!6=%1s>NpyMpV`nRhM=tV4CFGmJv!Pow`PVDtD1zY
zM)z9rdA}Ch>6|RhDd9H;LN`WQ@baw57Q8c*!{dv?!H$kZk6bIghhZ`m>3I=fit50E
z?pJ~~bU%vxhKBE#==r3YHwb(0M+1_Qo-+x%mx0Hw(_np(j?TMUQt>R!O=w?0uzn9T
zjkb%R8bp2O->Wb$^2U;Zq*FC)xgjZ0)I%5h)%^m&mT68@1l1tx{XxCem3~L*C%c;;
zqj79Cq@rctIkAb7iJ*CvXR}u8yEj@_Me!f~rebHFkle#;Jfr=iSr@%2+*nk!!e?EA
z-5);+&bxX3g6B*=K6kF?AZ~87W$={wzJSyCO4;p353-wD_o9yo?GsmK+UNB-d+n}=
zDsxbQJU(~!OTySe4r<3L0R!f0;bY!R(}rZ~tua0WypBz%2vNyTdh#0SMy0lvPYl{$
zXR7evY9Z$}tNSQn>TmIGqwZkr6m<7)#Jzlop^dxZi+b-YeOlT%l6SnzW`_06w~Er1
zhQ<qJof*!4{)A(9cd-SUxM+@-k_FC|nc;e0<iz#~8@u+K>v(2L_i|k&Sk8{Vo@dQ4
zbL-M~_pAK(A{ZwOBTn1Qt~30^hCiCAjmT^)Kx7M$0vMr;&F#ejN3|2iXSxC?^$J+C
z!1bX+*oNUSJ+do?wx7p9-K?R%#M#DmI-|f6a!1ujg{F!;NIuM2)ydEK!f+!$NL<68
zDtI<`pcj{yJ@+$+30AiHdx>X{7LUdflX9wd9W_pJqlnGrMlEBESD*Dz&J@eZmsm|a
zCgMmrdIJ+Tp7vSlSQwOM`3vlhzPMtkrp=$bj{kPinIcIGH(i(;V^`@>=5dW^Nyk;q
zh@OwI8fVq)mZ`0lIl`olEe>!`5!8IJ%m8X4wFfx6K)#0x*hf8;x=JN1&Os+_Uh9^0
zN!7`|-N%cs(Lagrk^THQGw`<IJ!LN3r*)_AcKK>Aq}|qR^&*Kri&r>eV|isv<rzis
zF5}!&0yh#|XnZZs;svv)W)Ip25E>T5)S3iYJ*;mygz2=(7w$Y55VB}$-k+%5?D1Kn
zJ=~_i)V1i<VD>={{YyBda_lwr@ZX37NQ<6Q^2<F}L-WNUM33?l>)yG26rmA7m#i1;
zv~CR71v|H)khy38tl)sX6|-##TC(yQVX^jaC5K`VUP%kqel$kh8BQ274@oG@fo9Ts
zUO7o=NeDaPz==wPydp*$Yo*T^<Ud&HCP=Ty*>w`%v}5s6gWZ5^^p1ixX@PMu(Sr7+
zZB>cfIFrIJe%nN{Ep<+2bT!HDq!Op5<=D+N$;{P1VC5MlXx1=ZW5mo9MDlsGe6k(q
z4KS8%R22ucr#&+b)NtF5mt3p5%PHP*T9@aE@C)Y<|CHydiirgzJM$7^q|Y7`E=}41
z8HzM~A<s&*!r<aK+f;}A(zi|zdeO+6N$1@P?|5D@=#=Wpkvy$u9})Lh+&4(Y4zF1s
z5xe?MQev{iiC*ZAo9l{_tSeV=d-?^}`f<TSroZYWL{&6aWIx^uMw?d99NwI;zDYk~
zH7I1cZrBF;Vl!w$-X=aoPZ^dPax64Ro{Qv9@){PtkkAxU1%UIMKK~Oj`Id0|u|7!k
zupn4&yV$P6uJM7Y@~nfZw0-`Eg_iHUNxoGIM~9AU$`=X7`l%N9_!I4?H<rIG`i7wD
ztgK%c20U!O_j)&)(*s45CV<=cT9}JpwRti(GFEr^O8)t4Wt#b3xF-r639&bLBaO43
ztar<vO%}*%=h7W}wtE;iIDbUQVIE4Vs?!bBJak-LZq?L|w^gfZtq17OCz&dl@3T{G
zkujjb++Yr%Z!hr<jBI!>KY1}e5*5jVWc19Z`@5Py3YC79&zy_$#L#+zEtbhEi8RO#
zp-%5QbW)R`<v4$dY4&)0>(#K|3XvqS-x|%Z6XAX21J$$Wt2Jl|U&DZP95kP1pxv13
zJmBsun0<<SPsCIEp}v2<FbLo*XFH4Q?^}Bu)u&wN3BP&=ubggqP13XPvI@m*^`j9i
zo|YHDworA=aO#bl^0o@8lzXD*6}*WGp=%kAp<b`7Lbn%Oe9A#yOuQx}-n~AN5Y*!E
z=p4rqcdS5oPsDQj{Fu<)5=(j47xmlbP~MGS-HRylT%R%;r;6N|YJX>x_mD0Bo$0P8
zi8&l06$H!S#2!MU?W`c?ZZ$2c;H=5?wVVh*g8IYBY0R`HTQc3LW`zqUgY`<dWG=5b
z4ZhFOZD7uHU8gW8n7Y9$fQ8BxvQf}qfVy;##Lp=vNQsvIAXpBjl4U3@)OsDlqME{?
zM^k#$*M2ZYOcajgCEAb!MQlLRxd1;YFCtfUDKIE|vf1MX+XZJkrr}AAxa3eZHF<Iw
zrrDnMp`C2liMJK(u-QzNpPh?Th?GGRL0ssASFGXJ$oP4KWO!=jiicA)Qv^s(-$;)}
zu?qCUrLDqyBiK$fDEElB`d0{I#ndv@QTE;@Ir9zC3c5-f&2LUizm>hfztMh7HuX}k
z?^h~?agiIwi5Hx+7fdC(O(0Qvk)Mzds&`GSLG3WV=?jbgCEVEExU;6|u37Ng58kfU
z`~6a{jKVyM;)|*e`<=|@oBn0CU;rg(3bLDgAgG$Z23w3;M6Z|%Hg)p)Ntwf2F9eBG
z$IvhhP4>K^F!sPBD*N{Vr|>mqLZtg^vv74cME<YxJu7P1#?m275Y--~(C@%1Opj%Z
z+~LrFC0Vl~og*ZEc&sJ_A9MCBN^Gpxs3OJyl`X>(I9#A2T%d|FJt^o3Ga>FC(O5OP
zV&ga!S0*d|E@6MJ6&`*=KPin_qq|80ySO-UkNtuiPnxj0ERBCB3)J-!Pk5x7c4aCk
zv~k7N&aM4}<Ej2GS)sMHZzg?=3Nuv&`&$?iYo7*7Td|I@jVm(Q#WksfO-WWYTqeFi
z^(qxI+C}^p+kwz`9Yj^}(18^S`PCLWu_KbZ35%(GP<RDh`F{C@-_n=y8u5lR)Csqd
zYcs@>wJkeva4D<Sr>DtG#@4KzYdN}D_1kSh<3_6kv4f?p1LfuGA70;|4w%2BQRn!&
zBdvVY3GP%zuNER8XX`DmUue^$wLqNpjVAXe7No&8a~4ANQ7D+CxOCKX?e`>EMd?h%
z2U0W^T76LXVwzGq%Jor1&3k-*`dJlE<Ity8CUioUBTv+W2i;xIPm`=#Z{w(qYV)DG
zi&>1$2|yKPv<+r{=MDQVWKNUzU2HVPFe0SP(kXYt9Djju+tC0Ri#Jth!0|f>+}8|^
z$kaJqkurVurrIf%?ysDgG15bUqm1#R^x75gFUnW0W~C8Agnp0Rj9-)m`d}2LsGR`i
z$KPx>X{lMFMhu2Ij-f|E+A4L8P%ofEsMjEk46Ehe;bl4AgFfeA%c9rWcQ>LloAT+J
z%=Cc66^S>}_ETXMK8MeyekY<{vL+wF9-Hwpb$Ca4dJU@-=<HHuGW)hTwS>Zh#e1Qw
zt)nmQM1Nh12(H%J0ubS^dYu}VP|GiGv1aSLpjAwsc3SGVmRWL2BztIHnJfDX%ibR&
zR{EkyIL-N-Y&F=wbUnkC4Or?h=;V6|XAOKUx$*2vzKrwubmMU2jOHNIQmo6n)mQ$J
z=f^+E$#;J>!(9!Aj62r0bFZhpKAM5az#-uzT_ff|Nk#oxk;ER#S?thS!~Vx_^UK|0
zPMXnlZ4_OIR_KouFVasd(=HCh)eS=_mA$NLH*eG9Q7*&VdvOId@KgbP{@}q_4RuQ2
zrQ-+tmIH%s&+g?Ppc!vk@98?78RRiBriv0#VN$<rup#_WKg5jVx3|BW9)pRhwqX1l
zjytzY9W*Z7rH6R6Ed>uXz4m4~{k=u`+Srs(slF*>85mV7)R3Y%pqzSoLiGsF#uP|l
zpVp&5DVIbZJD$Y&Qpdp$|6$^UYf`<(oD`}tO^{%3<h9yzz@@;_HR2ORmDfrz-~SZU
z9<|+z;?L+2`Sj+xn)!)rsnHh~Qau1$v=OoOKt~)17k>SflhF96u7t=XGk#yON+7{{
z9XE2Zpj>nx9~$n5_lFOoudbyTxfiTg%9<Bi1tS1d7jL#jkWB4IPSb_4-J_BEm#xdy
z)n2uha|uq{^6-k{o6Uqt_ocK;gI~&jS{fZ%I~gSNN&iN1iC+6_Ywsd&)fZQ8RbB8L
zX_=G>q_msdOSw81Z98KiEZM&*jBh3r!heiX2^YqGAa+&U59Gnszd1HFk7TmLc04hH
z3C%IOS!wwG30so$@OiwzK9*0FZbOWU7S6h5nlo<`1ZSQl2==YC#r1RJ>XCZ+P4?$L
zov`ry&Jw_M+=(Glu~ZG^;%W(xy2-J+5zL-35{KH*uw?I+>CAsyGfZ2uwCwIIJB7)=
z*%B}x9tEf5su8_PoJ0@Lw6ph`>x8G(%&Y8t+l6y<SgnJCT$3Es+`$~;9nG_g7Z=t=
zihA;SOzG2V_|TCRz7$^p#3)!W#o_Xx1(MMos|!S}J4AI6dUAkv9Af9t1(JHD1#fQN
zeztrn&BWva{22iPfI}U(=(C2#&nico!k`1v)Sb3b@Tji0DTk#SN`5ON*3pu(EU%md
zfv(Bm!)R@BB0v+b2~f73I6bu^aU@!<u5cGUp}t(4ZeNH<4S8YSEqWUIy}^g($Mcid
zIl`>W@&3eDVkyDzi;CK?JfnRNb7nJ47NlEF6u()(wtW9$N^<ui`!tYz8&_NVWNxCJ
zOoM02`OYLy%hk$LsMNDG1s+8Wjf6U~{kmZXy28S|Ej#k-xAEK>$LGxUO|L97l(?5N
zz6iCIsAr!FdY`v+L@3`}iC~L0OS(H86Di><<kC6%tUbOE6{DN4BCGf9J#)T$qJudJ
zDi~cHf`Gr2nR3_dp~&nDJ~%%;MS$u!gAd#NWVLRWdrFe3EN=8p3?~jdXRX^qAXL=)
zh*br<1m4OiWB(oJU|qcd@?;T27<$C#2Cxr)Drp`b_y}$v?;4&ej5}_4uf6(MetEv_
zk(2#~&Z_}e-riE#C0%?@OS{?=>uf7H)Z7tjN^*JCEBhHF1Tm`i34VZ0>hvGhFHTev
zmy?&YpLx8<6B*~P>X=~Y8+Nm2<S2vgDvdcRkQY}OrAn{pDX}g__na!|{j=>G?-Mlf
z{CrOzkbNYQc;`DSUKnA^^oqTfPh<`!sFY%$l=hl_Jqy*>&DOA)LFEGvG561YITPxo
zyJm=fs2RHA;=2x2upp0I#N0?gqH{yOGY6UaRr=$VckRbC@ncRlp<c0e57L(IPPRBX
zzI8Cvn|h;NCO}u_MOAgT^YqvOvV->gRF2gmgBA~p&TAc37X)0xsVlEkxun<g2+LF^
zIaUL5nH+ttDfTPsm#fzmM2T7p{e)YP&1v71DK$36qOc0=4N5(wlb5W|31<WD?b!8r
znTvCFEUT`|@#d76XK#B=9o?l!h4pWp$IUK&>up;vbc(Tnrzo(ty1}dX_}A4Aj63Nm
zu#A0Ujqe3Nr7_l!AGD7&3Yy7<1+~Jp%^}Nf<xcKz(No6rYAbIKGb+i{Dui&q9F0F!
zkY=CSyHm=;v?Tvq+N{$6v(t!|yiNyabk7@JJ)7;E`*T+O$8jOS5n)dq#pPfbSM{Y6
zysp3+y*hS0mX7JGwBD6s3OgHiJ{C%|znC_XgiKuXlQpI3@6*z9{8e|xqdZy5c;MCf
zl?T(899>7I|0nopQDbh{Pt|U`a@BHrf58_IDqN0Qdo#GVGO5#b-UM63Y5y?G^2~2C
zr4$KsRm&HOzV~UQO?|X!TxbkdFF);>D`Vql_$Vnow86KPlC<P_M%&BE*TlH`VRPo9
zRigpFfR`hkrD(Z+)$(vbtJCa*>8?ivYUke~)J@0;fjM%(oP9sDWcSYzr3#Lbz_$bQ
zh+_}su?pS?)#WtDRP8w0nThkJGFI8CvmP69gborhFOeBl+cN7^jz@hKarJn&B;vTP
zrIRzlX5MQm2;4U-t^xizHn#_h(5K&juM=leWR>6IP+@(?<>E}$Jnwh?O9hmfG}0To
zEqI&8yH9OgFV|XCEr+Ma<$Sa#c2C89im1;D%~0iLGaw(#F*}*XYo5OBGEfnb?(v|m
zWx02SSVh`3&#Qyi8jDl}4#*GMzYsQZ`%RGkihz{XS#VWlpEA;n@@3b!NRzgfop0V)
zHan2D*41wS_Us1I_!OR}+`u+g)Ho+>|8XCKsOJOW@52VOzI)eO*ZZfWrzKJ<0;BmG
z^yAly!+iQ97alFU7sSVY*RnTf47bSg>p~GXnu0vOU6q)Z5KNmdaku*PKpVtRA*WIA
zAN&V>-jLmhdEv;`#Ak(LDoKermT?qc%bZ6hp6?q+$<6mNGqshXh^!<e>>^(B>!Fgd
z@afqPPosO*yJ&H{Gg@+Gh~=G`6GUe&HNBpB?vmH7vQ8uC>k1W;p2c806Z)<WZMd_D
zz4iFGB<eK(fix42S(~krWhoB3GZ-ZBZ({Z4m`jjSS%TIFnOuq(c%ac-VVJLkgzU?!
zUw0EiU7ZW?I-PcjhSPc9wO3xkld&t-cRCaQ8em}J`h?}qc<n+9Krhjxq@Sos+{g~5
z?TPi;Fby43S>*};{6r3t?0*tjks+<qU<D>c=r$p|+sj+H<&A`<M!tBVH+a@FaqbO`
zM6Bg;wI|o=Lrsy_!G2sfSuI>Ul=FgByemaPJl;K$>C>W^#kU(Y7GJMshov5oxolY{
z^QoJ{+PVAC7?zHVx_AEm_Kd;Az?tAy-Ro-{<=2;Fu03u)bMBwKRN(PK+>io7BEV^)
zxYtJK?}WeKy0iC~vbtLg^ghZG?M~;t(v#!ZXxURd`r~<CioVJzYNWeXKcAJK*t+hI
z?<+1VBlP1$tSW_`ig>20gmY(1?ltRvF_}0suGh*HjJl;BR~*!ZpTku-S*X_$Tns%e
zR?$&-0XRSIwbLTbZMw~ya-8$ObIm8G6--237O!u%y=>^V<_If1huQ_qx_q@>=@7$(
zrRL2fR;y3W8W5dx(>lhw{Y+0<*0hi2>!#;jKCNRaIM({w;OjR>+0HiW(*#?tnaJ&F
z9zMgf^St^dS*lECd!?@#HcD%c<?F20xBvIn)nG*2skU0dNbdPcyQJkpOGR4{YVvl;
z(t3-?&4#A=vC*EKD!B$8<>y@Xsog7h&&eh>^hjG;tZJ^joYbxP7MIpTr}RHhMLKpQ
zXYEx&w3`}#s60TNmXYzJI)zaxt@z(j(Ot*Tj;u6kuNOJmd0oHP$})#LoXRDa%g<LA
zl<Rr5Ggq&-cvQ(=G`RGiyxRm!p53tA^gu-gB5Kfg89gW}|GNbIM=t$JK}poUUzs%U
zf%K}`!fJLDlhyrorDHbnxDvM&<4#bb{8N_jOH+;jviUH`{0lc0v8&qB=>2@&cPFmp
zUB{LQ+vg!kA0+JGV_m{3?mztZV}4!kGQfQqteORC=o|RBqW4L^!H++ZN2zOz3)IAG
z;S-6^uCvx$A$^kSAf%D(Nl_iz`B%<-uW-i4mk_IPHF~3t=a|^%`;s$G{t{<_z*UZ#
zO0l%|H^t>v`Z7f|rv7{%JBTjg7RlOx8}+)%Pc;|eO8rfo0v6SCXiNaBs@oV>I1LTy
z!d0=-2_c+J4JkzH#IKu0i)Iou*xBG@`Kj#R--L_<{*HdQU#@=la>Go%ocz_+5R^!Q
z1Krb$`LShJ@?%|Lin@tw&K;JLLL;nT^er7U^=Rd;^Ml02gQUKSxx<8rM~<_B?Xfda
zAt)zw+f6@(kaV!%_|@BhM6IvT4$%evXQGCDe<=(cO0fJ7j!VAB@e-YZ5d7>Yz!*_N
z89kI4R}`7(u$s64T9&i2d0OAf+`NxDUc`6IRzUMuym>ty!K!3U)y)STkEb2@{ovl5
z0gk9K%<y)|Vi2+1^@j|8OIVJm=N72sKB&t!X8`v^q^yV1%B_d+sknZdlLsJ*;wk$c
zQDw=>a^f5VgYqSgu*|LVUawZWgw8v_Mc}!0wG~A-Z%P!BZld5ql^q>52|A&#_Ueim
zQAE5t)5;+ap-x?+^FChlw<-`~9oSYP21SV9!5{LXty6&X2x`tpo}x!XBl1mDvxnh!
zB~Rmu8y_YlLU(vgo-!8*_pfNZZMJ{DE5+si7<=omDA%qJben(y41$7`%+S(Em*N0J
zODf$UDczw`Lk>fOgh~s7bb|tt0!l~;NDSTGoO@8;z2E(P-#O<Guf4BpZ|8ZQ`(F85
zzqQs2euDPCB9IgVw$b;pwinKb(S~@$1G{T)lN&ndaw7hD8V)qr>3l1VV0>B6lP@8_
z7yU-ne~C4=n=QD`llD5A2Y#nky{b4_vpz>F+<Y2l+c0@7r^Ig+=+-ET*q`})nou?+
zQm<<(HsO_SVF^%-ky=Bjyk%Kfsg?Z)?#d@A%*)zUTtzISZkxKvQ(a{uDofp~Evcym
zjjJ6xb*pR623~skKNeYCmu!<U_Hx*s)4$uy{?TIlOMS6je8gS`suU`Y@2;~Sqq)&+
zmachPx+GJd$jQ<ph2CaYj)(~Y0%6>V&1scc`ly(aXnHq{E7<EbU~)KY62z>g371mM
zJo-8};WOj#?y+N$$l&x}w}Q4FMP11A{?=wgUPd4(pTTbAz!#^yUs%p!^uhDfF<5c!
zimHs_7keAS7&Xq<VsPj<yVBwRguQ0@!Fa#c;Lj`6Bgq3UnCY5*Ay0~&oqy6S;8bAM
zZY$UkFf01#Z$caJ7T7ceEBz&yS;DHSZ=7uQS<l*5x+>O`?(gG9T_~QyR<hnq9$RAx
z0oYVXVF-UmeO}>vaeBDU@EX6FyT1OVj+d2=N{vu*m8vwSyJH<>3}$>!4Hb!3EdhkS
zG-K}mYFB2bXq@lqUb2BQm7Rm}w;Zf)dlXoCywWavFWb>_x5Z?rwMQo@=yO#(OZ>fA
z9u{`ktVq5U4p#re*hbs1SWlPr*TIDQV;}J13Ov?Ry1s0fpX|NjQmMO2{@vkn7i(B}
z$>YS8g?0`=pCJFS)nX$`HzuprBHA<8<etHnXz^s8%|@%s<56$w;Aj|uL*}Eeepjeo
z*(=rEScuWAra!E9Fc_)6O&!}`6KMf<%Kh%o0Di)t@$%xgw7}A5<6|j4CvLzU|7nrN
zrFjQ>_Ce2F`qQf_FS1`{0geuR4**rlFPt}(H2Lfdul><8hwD)=<jk94MNSStwVkKy
zbvEA6FNr}WBg23s_v1)5UT{oqoxXGYHkBneU?8x^Em?r7WLE&sabXzaG1`fFY=nw^
ztVQ?k$Y;@~fVHJl7Im!Wd)Y?o3*+0ElYu=#4=`i<d%f}FSKpTcS4wrFE@&I~cmWW^
z^eTNMUl)h-82iX~EC2#5gEdHYjeKQ&mab*<)sOhNHL18cMzD|nPWrvf{6H=6=-9Ar
zh4=kZpmXE8)DQri1ux9`N2XSB39A$Z%A1#kfkMYamzBU<JmX*bCP<?fQJ_$t-IHvs
zJmkD1-nL?+)gFM?%(L*gsG2*-lUD7W(Jouglw5h7th0mD$trzd)gsFcCe42uf=ngs
z#4ylf2bT0Gg4i4vqJ%~3|6vBoIP{Rh4X;1`<S#dv3MRIna4N=A@olBNmfqG`R>;@x
zT-1RQ`!3N%q3swD;`eFkscu1&1k3<ga#!>tnNU3WSo*#tph4zXX_-yd06;FJm5EvK
zGd`Q(C_b~`=)!lQ&w?jDJ6#t9gYB<3B5>}W@2S2bPJ~N?C#@QMCHo1)qw?`NkLsP^
zEw<W+?sxoj(|xZ?1Ushh(r(eS-v3!Wd(3x(H>#6<=nI=r@v1|Y!+EXDWqRY;iBpF3
zNUM;F2Sg7$+I7fia7LcvI>hP8&Xa5F$eRtYS5*C29#FQv^&QosuM^*p?_tZDK&q)e
ze2G`R<uAyUj%S2l#aVqk;50#atXWjKI;hq%uj{H54}X4>N^kl)f=NX-a8=K<a@CrX
zx$$t^XC+^3@vfs7d=z%Aq0B(6P+03)(Ipyq?s%hY+tG(t(=nm5-<!$~#TZY{b@t;j
z!L!jcG2EzEWh>He%5!abIZKk{Y&0b`d9JCUUJUXb=Imw*7{j@;LJ>{2o}AE(tgH^O
zTONZFJ9(tH?o!-{gyXJDkfK3WNI0oLivB_ai>&;dO%Zyz;VFgOae(FOPu}Ax`y1yj
za!%Jhx7E0*t{k@JR-|N<Gr1e_<Hd~$GN^0xt|iR-TxZ{w)gmmoee*@xH+TiL5=QKW
zH*=9y2qUep_`B=~<*ovG(>$ix-49o!arKaDI}=wsBoX4S4P5Rx1CP$(lv}3Ru2D%m
za?dlkK~k~i(sYl79L4mi@Cai-r}jnsV*_WK7M%I65bR1@>I5C8P4WR*%V3$d)rB%l
z$7@06olyLo?8$Iv?GLH0qLS<)B!f?uQ9Ifr-sR|n6V|>~XsEI~i&1@{^^@Hu!jY;|
ze0F-p%e?B{jb6jv^LpG1$6U|^6-in{{yI|hM^HcMFO691zrq29h<idLX|YLj#SKYX
zhgPJqO)1jv`9-_;RF9!V&`bG>TV7Ga%wzhrgyLaoCKH87>Q$V66_f;H!&7Qu^$^4>
z*p=K5{VcD|XLv%FQuRhpX~>9_HNsL3?quf&b0dW-2o@!T8;TAu4m|2z6bNQS%2!Z!
z_on1Z(1s2Jfng_a3~99_g9VhdVpyOC_Xsl^$dd{chjE#*<wXJ)DQOfsuU2d5Y~tDB
z?ZPtO<FV6&)0R;?RkyDmZ?qWafpo7t{VFMXwMzE8|1C88%N5mul!nbxCs>UEv(QM1
z*U)Z4qAd8Zb|m~-%PkmD!?zrjtZ7inUC1R7CxQ{tG~F_QL$Mi&kOABtg`+}XTK)bG
zI4mtMctb0N)C2=xDe~oqmwUcSTro*<A%RZ!)}FEDHino4G3}sD-;MGFE~V!BLl3`6
zYJ#0%aB=<~$@x3CC){wwNGYdh$F)CGEXf8oU*DiWM~XjtJdyKI{{qhySs!brL$n@Y
zOSP46Aa^-g!MV3jyiRAB=M0SFO+`*)7j|}U52y`9H>i3ImfK&qg5WJStGXw@>QjHv
z{Y_NGp$%!QK!!$6>>0vAtQN`g<iq{Q$Vg+*D!j028VCs@oD9KUEiO${G6%G>`ymbi
z({_0^6o`KR+sm2vA3A<wB(qMBI4SJv%YVP+@Wh;_{c>-<K!_5Ojg*y}ed%VY4V<Wn
z@DLG2tSKo%pM^~Ke_O`}r?oy1VmUo|&Os8qHu#1nrr#;-rvGSq**REpiRCQ}19XCO
zcsqP)AjHVtMG`(70YTe5Tl+8^J{PfJL3|^;MQ?)6p19@K;f@hPjik1n$CbaMYP{88
zw9oS&(#fV<!}#snw;n(V2?`F5EGfBn{7??(UpK`y=7qD<HmqZ5GW#MqGAYsuA!i8Z
zD%U)UzpW{G2|3_E`XK6+W~lhj){YX_VR!3+-9nuZX=?NmEbQ1J*&k}QYu+s-+|ZgP
zMb3lH{wmbB{fYy6WdM3Wmsb+ZY4-+WY}5OyzYOfQ;DefXf1{Q<L?eb<*}(}23Wm}K
zUu9xH_RY;jOYT{)+xU|D`_KPX_-xqGx$+W=g(w;N3lofplR_^P5y!3<D|WK?(6l>+
zwIh~Q#fMKQ6yZmx=LfC`+|G(0r0oeL#Cds~&exj^I^KDxOP?<nt%Kt%En^X!IEmk)
zewtK+)k%mXM`DH#f@g?G=}EJnYNX}~fiZby)T=TGFRO{$6KN6zp}&0yg4BzfZ|SB6
zrS1<Sh&1_&t*2@F`*cf^8f3cS0fDNKe7E@seNIi8y$z}fT?j1+(YC48Frx24w*DCB
zYkBOYM^ujngc{0bX?IkFV%;?Ocv3?VGtm&HyA{!4Gk`t9l68Dic^!P$&j$ai8>{uF
z?FrmwKRlj`T>SU-d~d`d=m^ju$K+I)O?Oc*wl^xF+IKg7BHD5pIs!(?RpsnWjET<V
zvE3-_WnZ5)X;`oD9XWZ$xKyU)Es(!qxLBzSujH>5GuOn+byw`5PZAL;NW`Az$ms(z
zGG&cRapkwi)AC>VEjRIgviBy)May9A@Zi)6GF|6J&NJKXFP2dAk+kI~SgFaZ(|=?P
zo$7O<VevgLC|+L!3=5;nQcP8kTljP*VQb5A*9l)Q48fmGSlad9rZLK=JE@xp{oQ)d
zB7}mJ=i%lu+E>cBG5>lG?+jjLt(043t(jYn!0T|~o11=H+I_O71<5e29V_&7G_iE2
zYxqf1JPe3M0WUKn*B1T|l@j9Z!_`N2X-RsoC>~yf;;a;-xOtAKqNx-6)M?UWqcoLA
zSKnBjLwK;%)!kB6^iO#~Hn8*HUK>--TxzNcW6w&Xbp-*c5QWgR{j}v(u|xP$L8Csf
zc!|OArcG+^*3BVerNQOip@~Gv{v)bLmzOI_Bf@OyZ?9<Kx*Zq=PT5dLEbTItJE?5`
zG9+*?Of!+S>d7}SEh;y{ac4=xsg0_MwtNd8+;z4C==P5R1ekU(nukA`lEyEd_>afX
zf*<h1pb}hAl1K3Luxj4+sX|5Rp%j-^>(LIG1S(9rcJ~$KT0K@b!4tCi!t5-$Ckc$?
zF3*(H>hN>WdR<090`~h~5=s&r-&B`zmL!gZ(8OeT-*<2lGYq&Xb8p=h4!wBWnyk!x
zGO=|S`PKri(h(rvKeh6KTqNyy9~hzpYUkp-AVzu=&SjHkbP_b|cxQ$VI+6I`6*L$z
z{`0nl5F}v9hydD?xMn!HI<752yIko?VMr=@!8)8V@95d<R4o{hO(SRi>bN-8l<mx8
zJ_ao8@1&tW;CsGb-hJ+O`A6=~)fU!*#mt!~NLvyYGzcR_W4^OGu7^*-e<zTDIu^7I
zw}aV8YKt76@JM#a^pIQZGRDT~TVQR8p`oE_2KO(WZ^}kGs^zyAI<y!Mtm_m_?J3AG
zWkf3vdAOtUM(dSsiya31*lrEkP$&@P^4J&Gs9R>=cUZJvc<E!UMN|B}D;B4vTpfa!
zhF&9~ndfav*Ck2UtWWH*IBM*9ChfEDw%J`|y~@kenS63Fp*9rpov?uXWm8Dl?Y5#d
zWea#u(g&^S<JayM!vb>W0>8<uv7N^Du)NOkgg9n7+9+#{no`@^lArIY`S1#p0ggaZ
zn&+5W+3s@TRM5veBz7ELRFZ7w=WxHlvJgh~@4KLpWud1R4{}~}@oe#~Z$4w|KcZId
zXgDU__Cu7hPG07DujBiCMwxPC_B0|`kor=83^u%bHj&ZS=ea@^<Tp~%V&Hf)oDxcr
zALeIy&!F0N$u{W~&OJ2)7OrXhZNX`?KMI?k2Qddj;);w~@P{hw(vCm}c#-?|0?Q;X
z_x_*}%4B5(3~syw))K~nnW)nC_C;5uD?(8dDkJ+A@L&|`aYi`S)_w_5g3PxL!MJ8t
z?KZlScBjM0C^H(rC`2pEFm2ljb$YAlzB&l#JGuvd=Q;R9+(V4EyGfXxUC}+JYVK~7
zZj|%-GA5sTF~>E1;AT|2%n+3eBBriC!)dy4qp=~M%WPD8$VFc-92QB6&NHH`S6|S)
zZw)+4&>IuA*F&UAPt^Ty#hJe;Z=3!)($9nPzEUkAf2mxw2HE5n-A&|9sJXJ`ao_#o
zfGRAKP?j()z)uzJ{i$DV?j!E&(uvRMQnuGCJGyVawpuKgNaQ=e*b%!%&Q%Z-tpab@
zD3kng2l%4J%sk7q$uB=XyfTq(y3YK>;CTHFhO0rAycAU*5To9$N8y}y?P?Co!-wx$
z^D@iZfh#t)LP(HNDQozrgoiDf1tG%A6t4>Oig&brUn5U{_<C93AR<j7y>r4Jle*TB
z0FfRk5F~5Ce_{R5Rmmx@)QFF1%h~A%2sGJ7eJxE_9CQcdI~ib+0^8e2KUYI)uvdBe
zF^Qh{>9Grs5Ltel--!3&G9R4{Ulh16+nG8q&^v6QN7xPq3NeFO{mLpMWTLm*K!o=3
zE8DeALHlWBA<mZIr?c=qG#KHtbofwQGEjO**Co4hAFDVrJZeAZ{9Dn-q6>)!uIaZp
z=VMn)R3BA2=!>{{*-L2@TfR?}`Kp94gcrr)5)h^Za)gb<M+938SN1dO607LN`HeE-
zy}|S$(mgITsJb>V(p!^hPJg=Rl=hH0r={Q;d%onroxxDNob;7q0<qyLh?p+^R-9O)
z48jT_z;ghCqP`4iYYi%0@v7l4(}v@+-JcJ8>XcqL`NcjSxi%%<kuzvmy+dTE@gej|
z4vUXpjOuOyE_*)J=6JKWg@r(9_JK%Vbj|Rfm@M4B#EZ~JQdNseU0fHhL_~_({=-W3
zu~uu*he(TBTp3Mx&(3ukJXj84QLKMVq}s%1)xm?DdDewN1IJt6GrS5g|8Z~Wxyosh
zVPC!$*-nUSfMGQ(nk9&1H!xa;nd%rU^xK$C^|?7nE*lf8Oebp^TyNyHbGwvnuN8(e
zUKz<s^=1Z?yhk+HMV}THLfSCAxJ}NjVMN_+bl&AN56{UA?Hnn*zkr{^UhZ74vqGh+
z*w73|?8SRvZ)BlSGPL$_Vt8nT%=j1`NnJk7WoIj@`QbxaW4MauU$3qapocH4C=Wd7
zX@RlcnQ$q(QhPV#G$LT*d$f!3d~*hf<CZw?JdmVa3>qLbIR7T2?DPUN<LJ~lR7I{Z
z;OQHkD5+CVB<ah;HBVtGmB|O8HJ_}9c_OyDeR1Kg6q45s$hUSa4awK|J^ROT*0p~G
zS~piM$7NabWzIKpl`KCr?s*9*yRmEFu~Fo;$8F=VMRDvr!TI&uiFu)nR(+W@e|Uww
zN2qrKHu8!475P}g6UBV$z?u#AgmZW_mtj#HwW9!`(z*F58-a!<EEe7>pYrxg2BY2>
z!5q5uK6ZwB?B2|T#eFbNvCrGUk7UPub*$DxM(9gZGg9><(vPnP%;M@>WAnryK-$I0
z5FnZUX&Vzh7GwM|^#Z18|AxKb@;$70d;OT63Z&g@bHS{{o}v{!@Z(G@)jPtygp6Cp
zmWz^SMsyCH+cw^JV7|q-sB!e<2l;)ICUx?2Rjo6V;5nEJYfCm>IdChQ{YWJcz2JH=
zk{%Z6^cit;#L?Wk?<tuFB*E540fJ}o263v*$}vy<tX|ie^5Af(KlVKVbE4+8;_;ch
zU9)jf>-wd*0_ty5R);0q^Qmc%wNg)<<(CJ|MtPS91$3RUS`YiB^%s|5*hxKVaLpRm
z!rKtP*Tt3tY);qT_~H;$83#?$6<tgt`W$jMgoHJbj-H0rKnF~1S4s0zR#q-zy;~3F
z`WGj3oB|#)ch+3vcCz#87%PK9(xbRl130rjTs$ZwBt&HZ9vl{i;Q`rvQ+fpq8m1{C
z>BEPuCwWG1&azAQmYqgb?bb1k?}WyNy>f0XY;2hxe3ND$Ju`A6P_b3a;{?qxnbJi8
zPRUUVWv~23(PW)^_>pM*`Wu$f64f1w!Q9LOA<wxFz0WU_p&2v!M9%V(^d$&h?*I+$
zd(BcA=cU0nYz__!eN158Mre|d3!C0#;zLaiW}TwwD?&*46SjO=zmcU2y(uCdeTy$X
zvE=9XdXKW#ZYj@fR6EYU-MQX7#0k}TI396@7=5s_oLe{fCu0L2bX`wCnXUT6HEcfq
z1O;}YNY5EjOOGB3wF8QI$MAJ6tJAA}pYX^Ns{;wBVy{>8wi*>GnuZI%`<h#H@Agev
zom<XPr9uPkC)3CFdp~Ie?B@{q>xd{wkh07u_LfZG?Nn&2NhZ+(!==(*5@dQ-+fKZ!
za(?9Q?p{~pxnESZ0(ptwKqyH{bI0JFK&X8KvGeB;k`8S#su1&;wPWAsejlgW-AkS7
z!LFBt4(zVm+dBSUjgHQt2;QyhZ5c?v3)pF*PD*z@KaY3f|2r>Gho^5>fA5&$RFwWK
zs+Qii_GsT`Ww%JbQGBT8klJZ9ttM2srvnLR%2+|4MOzpOG@&bqw%EbAr-Ca2xU3a@
z^4@USkFSX@(u6)0uK-&&d{pma>9WBB@y%VLP#O+{TI6F~VdR7SJo0W3B7@N}j|N;D
zPJW%bb}-^E9Hrj>4(|c-Vf1;+ku+%QTi&VkDxKH#Y^PX9tcaGe&qkeRAk5=m!f;L+
zq*?-gNWTbQjwrpaHwa&I5Y4xuVHVNf%B)9>L8fORD0DGHnXX8ZR*t9K>(F`IRZezx
zp=v#8K-VJ-!gTA`QTc`~xE$@-ZTH9A`ZA&qV2C{^Ha!%_wPOfHGzUL&yn}hpGO`hv
zH(sf$tgNE?q(_Xco(rlZljHFV@=6IpARplJ?u~K?2xzeK(a}j9lMTo=RN2YXUZnC%
z0j-@mhnz2^$uGs|k)k&O>S!v7(Q8mJBol7>C7uQZs_OqsMp}E*cnb|8NMO*Z&T`pE
z4;azc%#y~Z>AhKs9RNS!V%2yHpQ++}PkEjoU(2s!L0?8lI0e#HJ4YTV3&CTzb#yG*
zS{c=P`}S?$1D?NAUc-wA0-5jMm7)A1Y8sK#R1j3?6-2~8q|@F9-mpm+Nf^Y%s>J1R
zG4f`_2hoePNK1N7sM}?)hxSa+iR&-<I>8v<J|t~87PoO|01<*6Nz%o9(5gGbKCZq6
zwi`zQ6Z`J;zW=yOX-GMd_y#@@ePj6BXysjyO9SBK2Q~Vye5dr&YnLIBgwa@)Zoog^
z1I7x{z2bY;#g&|VchMByPJR$Dtqea8R`fi^i5|c{Z1e14F<|ev>7mJZuqY_KTgY7U
zeDrCxe)!b2xM8*4&-MHniuShvyU{~ORSzVYlxkdWE{lasxFa%TW0lcnVA6CE5DWnj
z=p1MVD9PpLy@D`30|(dvk$#om6mzSC91BeSl8DFiz_6D6G?V}fFy3X#eLQt-4D@cI
z4V7yMyeW=Y;eaMQl%$nmazdSXtu}55p7ps?X@UU>LGPoAgD?I_Ut7QD>F=q1THL`L
zcCDWu8<Ej`zhscF^_^O-@lcV81)KO?Po(MJ&)h#bT;=vzKLK;R``Aa~b@f5R@Iu_P
zBSlURyH^?%BJPeeb(bz(%JFKbGoW4<8(*UdR2hLp@|}UKL>bXlQfIi^^a(a0$1A)%
zzz-(BJeo0+@uV+KUBG{UZO<wK+nCPdP)VlOym^LTlb}6X?a0n%obS(#I|%l*aK_@c
zb+}j~q6VA`n5dI?Vg&Kt2cctXO#RVD$PpMhoIuUHCR?dNA?ymGN*;?o#4^E-e09X#
z%<{(7#sKf^J56u@bw2Y4QncC^@CGD%%FZd7&vqp*h;4)E&0Uz&zLsC-f<fK`y9LMu
z9kXfa>EG4Aq67&qlKq#c9U`#{AzHyePZJPV6#@2%2Jm;mh&>64`iN>~QO0SD`5p_$
z8hW;>cX|rml)P3?z<XH@K3cx9bNvuWzy`)VMuBPAq=#=_5{5J&jq(3sU1)cuXkVvx
z;kQsg%tp$ru_I7f1`rKqViz-~r;SOH3Ei|4D1iaN3JTCP96|@;m7!uOFP^REx(t7x
z7Rg#jxfk3WZ0hV|A45tJ);~8|F!KEPk^OYfM6BL$%+h+lGH8D01Dl-P^KarnsM^bF
zj!4PK5-OKIe*F05xIuLCg8T#a85tz|r+>X*H^9K|5nayKcZ8UFe)Jh^%%;tQbs*Av
zGEBgXXmFAfhpqkHMxh8d;N#A$t@b~xE%NRhtOpG6%k^GwE_t@6|3a@0qQzmxbJB<w
zG)PjEjbTY(y@{EQW!36Ca9$qH_#Q++k)MA{Aw^igVW@(hXh-^05B{Q{=iY~dh^clU
z{GQkUrEisdXZprdgxf8V{b`mt6d_*mDU^UT!PrNhwu#pBrdFY$KcHxcEtG!CS9vwQ
z%?-s||7BYKntTqXo2q#|aWR>TFaMQ#V9zxFCnFgBWubk+984x$xaA?o{amkZed2um
zPgvEo)FCq3`ihXy`niksQIkID6YdhY!k0AIQ+x@ehpQfni}#6|A2uW5h!cG{SKxnJ
z)yN$Ug5G|E%U4)%Akv4yhatpFk(kXpq9GI945rB+&Ey{sbpJ<DX-uW1rMbX{pzWA5
zWAw}NT>>z*qw`({6*co(ePapJIHBg62h_V#%C;@nwZ;oRT<ubD@Zq`nB8U9gLVs?5
zDrfS!%nyyxZciAXM56Jj0uGYLJ*nf{7K^$iPnBYkerMVY$phcr1`PMie_7{e@P<Ce
z;Ub4()u2d=WKDR()>OPxL;s&66o5)dNy&n6myVfPhEnw(wU_*#EKr(_rNP37ohD&9
zxFugBsn<KIyx`(@8tmg(wKAImagJW1fSqtL2SMRN<2AO{;E%qip8_y*amlyhSTrIl
zSH6CIRBE$C{vAXI|MM&lp+r=uZY5G3)wixeEU@sU&x~}!ms2mT4-usDJ<iw85k*ZT
zN+)%7{c%zEMDvU^3AAfS|LFiHuk3x+qDB)wDM9+>U<e(wk3W-ll%o)P<EEPF4eWcQ
z{(d8CFV26u(tFp4m`GAAS=4J7vu(kmQxy$B2H*dA!9*#6r?##jSlsrYk)$6|)Tjf~
zw!g^E>w6)k;wjJjl%a(4@8SK&`dwf4vD7^Gx2?J4B1NlDjb2NQTMH49qyZHT&-nZI
z8gTG0QZ~Wz2&j$M44PsHxOV{7Z%Fa4%i55GH<<Bz<~RD_H<^iEQ!l*5t@v}3S`=ka
z8}D_#Udr&m{);er-08yar%TbwnP+v{J-hS|D<VvZUOIhzyC!EVY~cd`$?R>>`*-G&
z#C$|I1rhoAD!$;Or~dWP%45(-UVm5bPqU1k&W*DI+T*yzvOjNEJmGDCn5KMf!s3>n
zEMLw(?aiz{FIry<!pKlW<?A!!-;@U6<aRJ?v(G<pJ%ID?xMA{2N;o2%MZF~3{hA^E
z_q5|#dRPNCwru{Fbpl{fj?3y8m+P871}x|`0mNr6vn~pa3fng<x;0O{yxUO~mswLn
z`2CwBqN8c?@bHMp$?t+{0}%;HM$@>RhoRwHxmUdM?;SuX<(-s1*#TxoLbw2os82Zj
zUhCnqKZO$OGx6Y92!ga>qbUkBSVoYA&s8`1I`JPq0();P)Ufap42ZDgbe@n*AgH5k
zsU=|sw2?O>wKcLt_H2Q9L2~}fF)>-fi;6&nSuHKXdmnR4l2+)Kk48%|`Y^uC_TT$x
z^UEc+l1Rs`J44J{H{RIqTbx|@>RFAvXNW;ayBLsxFy&_u(vK7i<8Dt}@4clTe2#TG
znoUC{7?_vJ6J<J?cLdY%%Ab%-%iyj#@&9E&gGy{h1+{Do-vaj>g$2vasnK7Bu52W5
zk%QXdU!qA<`kFuzKb|2o{6wJEbR{Jify;x-Tk(}Sw%Tfli>Lpu6HlXgOIXa$e4Xk(
zoLYd8zEhIU*Pd4UpCXe}AVurh{K>4Kg~~&&p`igZ1JZ+y0x)whdf{NW!p;Z}A3ruC
zf{;#>n?%)GBfL+n?2bi8(@weNfP#D&&N>+(#2hSNUZ|1{MO>DkrGU%d1+Uh+jZv;@
z^_P8&nM=4^B(NQsCtF9mn4>isAIWBkuN}cA+ale0&PAsGq!iO}$rrPFJZoaq9%F@a
znGT3{+;*DQbI9oWc%WSOm~P+sn{DZj8aCe<Jx?DiL>(=TLV8DKNv{3+hT4R=)ui+f
zO7veTfwNOSFP2BEABRac_$#c3h}2C&bLnKGTYp@Z^9dY`PD;x2o^Nr`sU2kg-{dxT
zp*WnEy9r2B|LmJfS8p<MTHv7ZQc+-RCevN@JPtUE;;GBA^(B&#5EH}9t8xZ`mfR1P
zdcm9#6EICY6d@@=TN6}fHS`vrrLOAW+~_NiO-vuyV%{Oz+Z=-qHj_MsHuc;*8kpwe
zZDj<TRa{1xPW0vpeYB}axwV<M0aCM-&(tZo6NA6rlCE-;01kpS_C*0I{1tu7L0^=8
zEpyw2w16Cp#jeus{*0f>Mm<xO$<N5*BExRF%BLqj;X%@CaCn0t$0Q}Sb~uFq6r0<3
zjMjNo6LDs#wnb_{i6)6wgdFE0+^JGl+YiY8Tkr<lBYFP%>vT&R{y_CC?Hhs;nYw;7
z<MeD6fBxVpHo#&5Nz0{p5TmQ<D7IQn7E_i{rXGF}+Y8R#0=wO^2Pk{fZyB3j4Fn}o
zfE5G<p+&t85Fif`e4vljnRQ`OuM*=$iTRCQvVFxb(r!!(={2No%DQi<)-kQU8-~-I
zmCu@NbK)WBhJfvuTQF362l~|1qXt%Z&C|=a?;iHQtdNV!u|BRwRVgkXVldfJ%pd9V
zgxPTvHpUqzy@eq_IVyhcc7fT^+2#x3ltP)JO?QYU;yi$hW<LQ`I>xnADkC_wiT}SM
z<b_2D-qY02YXVDP4;}LdeRbTXbg&4)ES#{Rm8v)=Or}RtaAK26QVVPTXISR8=J411
zk<q|>fevn!-y8>|nRGq0$aPVIC-VF{F2g6iAW^0QWz@drmbn|<LHs>(H&&>`wbi=?
zaO#+Wx2K&uu2P0%d&3r6rN}<3CXQ0=Wzhw1y*Atrr(q&YQz!fkS>5D&A^0@-YpU>`
z6C4UjVgrpm6Dq@K$cf97b;HkG<rA4beD9b@IBw$&NHrXQ`RG4;kZ!<rh5AC;C``i;
ztm%<@<W7@OJ&TK_QESnOYDdEFpA=kzMYb8k+uf5jJ<DXIrO{x%Z3j3hF0(+6;`l2%
zhuorK(CCT78>cV6^^>tCO@@FN7vj*HcK_{HGVezP7eIRK8rzu@m$A9zqbB_FAZoG?
zFdH-!LuD2SU6g06Dqf4T(yTN@L8PlMGrYVm+VnJ*O@rCtm@fF%<I|{XDmV0x_w;>F
zAAo?YbvqEesRe|o#5_Jamy(TSq4d$ILrTx0q0Yzv^KMB*`?i*8WtehtP-+%t!A}<P
zloS>jWDGBQ(QSasyod7KQ}nFRWfe7>@Uo&?A0pw__{mLmxuar(jO#HVqMSP<*j9fI
zJY@F^^QGofI|X@zmgkPg;O}RGrduXz`s7$6v;AizcGN532wb>CFfkff=Jv1*Su;EY
zshzP{7-f?YA)12-PlZMQSQBn<0@U1(6bGcTO?bo?_rPXIge^h^FQh{8xWG-OAnQ}7
zrtB2Xi1c1<C#~@0nANU|#pU%)VzI|y|Hpet;h(ebPs}*BL3KL+MYqZxML@;NZkN5#
zj7~y>ONC;C>`T-;z1FGg;LRsGeJ3nQcl;-GZE_r_0<fQ8H?g5MFS;8F0$s`UMSvvo
ze14kFH>uE;=oPm$?(Rn#zyOW(qHUM<qZfAW&6Kw|uAuJ$#;G6ScEm1#jbh<QJK*f3
z<W!7ajhW;gjBiBivb$K1)03YJ(NoKffj^+F?DUhhr=IfWJMVm(@qF*D1)m+|Rc!fr
z$5%Qpe?)YA-w+OP&U@}#PZI>4m<xj7xNWy)*>qzFq7-s0E9MlRt8{~craZ(<4<*9n
zz?UUm^~!sfrfC#{*Zt`!?9h^GeoCp0h^{Z2_9%<q54PNpk1NyG)@FaOWzMtx@-FrH
zKmO2dx)p7uQuAm*8fBpQ#z+biXWcSAwvLn0Hs{M_`LNlmrARDAnLFn+LALhs8LQ?t
z8r1sI!9GcBB%weUkBtU|TZTd&W0r%m`bxA8Zv5<X0FtT#Pd{x=iO#X??l3uVkoe&T
z!f@~LCJA{v@y%xCi~=y9b>@<eomUrVk;g8LP`lrdT4>{mU`I>?H~?!p7&G?Q*FLEZ
zIsJU?dGD?S^VTRkpYu5TGdby)>(vD9Z$hK00CHpVn;z1D<8iIA31<fk2Xzn>5=YeO
z!#6;}na2br%ID)X=y$8MI`K&fii=D|PRl&~1|?z}3y$iH7j*+5RuNzoZdWtFISvk2
z>-%{k?wo{=E3O+5q(x}g-eE3t0_iVSBth{%<6gn!?0JPBT_d)SUP>*+P3l+&gek-h
z)+^Hq(8bUMDK9{Nzt8!-kD*NBc^om6z(X}Ta6sKaPV^mw&#vdCAlUp$19}FKOUUTp
zv4V2H$PE~p(28RN5rT-X!q3+zmh_T%G+g6WtjQocmn`Vij@dqM2EjXQ{goBGjh<1v
z_}1D(1=Fa}rd+t{%`|M1T4Y#%ywMd(tWnJ^kvxd$CXmUgHi1I}rg9<DR}p&_*pPRf
z;!+Tzz&N`;c}7o?c6B!<d#M~l4<lN?c!1mjD>~Z%z1?K(=O-?(JOMz_QDAOC$I<?#
z$@=7H3-^j6B+_>l?9NgIbE4=}GUd=sP4FNTDsFJ_3D0}3rqmlmM8?=y6ijdjA#OO9
zuLEWcfmOSDHoBA?`u9QJ^=%iNWd$g+WZYw)^s|<+cqgY9#rz3IfLPBjd#*~XSG^J?
z*+|gpr-nl}v@*>G@D;#oI^%N@qHGQIL2?BsO_DH9C}dLL3K81YzUJYPxtk@FHT#*O
zFzlIvFbzQ%<r}E7|5$1I=ed&}^GQ25kIA7wo*tFT7NZ7#$3hTB_9ixWR7$7V=*WEA
zd%%Za`u8yyn}BRqRrmmq{ek<o19^&!xs65dph5aK5AI0JciqFjpiV;_>&b3Dr*Vc=
zImOuRYFBGonViGlhmChG2iPJm(22-1UOR*pXNQX0=&>YQ&ALRV2UTAb(=HD>ozU$Y
zoCuiT5>sd1tyE#&$zesc;74|CcF7D}iYpcwLqEA(SC`1I@@}hAt9|z!sMDg9I+m+G
zIs^3hnW^5RRgdG{m)t<w81C}}D`9~}&A?Mx>rYRrZ@+26iirV$0%tOvi=2BFd?)!>
zjBZzlKEGI6KQ)X9%C&;Ul14IStN@854QB`NtwB~8$a-lgu*QZUAD$kLhl`la7<n1e
z<3+>MKy{T}w%mUfli+6wnGdRX(BpI>Fki?hGBQOOWa6k7PhTLP$P{xpmH|~h^y9Rs
z6uCK3x77W{?bhmU!6q4~7Gq!Y!TotKdDt&7F!!4vSm_rF7JV>ZxNso@M8ZTA6nQI+
z(YBIE69MJZikHDAh9lHIM|M0hRGH1bKw_q;&#nQAYdsXjO#MX$-7~r?ZBVU*NUT_H
zraDaTEg>HIfGq$l=>E~b8hR|Awn2{84H0FcmJ_|JGpiT9a@C6AyZNW(x}QakIuRmJ
zrvx8`Dt5W<vp`|=rZEcf#Kr~AjC1zxE;XxSN%jg})N}QG6m3Yj@Mk~{>U+ACCWUGT
z-rV?eFbQ)Bi+05$ug`PIVy8zcCkKn{PN@(>Z1|r4+Av|zdFjH=r2&nG$3FtSK8xyA
z*gl}VAdYmvTDPvIAk8D;_#KzvKC(IfJLY3wO;Y=g?CRy7n3IP!S;CZLM(NJzRbhy|
zuX*Obly@H}?;Yspq-e#=)DGvD$v5RBX*c)gLpK)={~9MaScL#QyGi9KWFG7RDsoxX
z)hM^onJIaO%Ld-A7+c<3;N=dsykkIJqJ*dbC>?mIDKQld%&xxp4?LigeF<PrnceP#
z{ncq=rl3b#jivL8Tv^2(@jVKo15T;JLYxw1tFke$z#?{(vP>92O@2ww=nH~xd*kt7
zQ$|cj9Qz`*q2QUV0dl06HIiAB)(rd=m6#bEs*8L6iZ_n1$4(xFpd-S0<p&d%(f|@q
zlkk~O1K@ZQm5)XB$3LJ32e9$ww>|9LgA_R99>coBUknym??o8<FE2$kh%H3{>$?Cr
zD&;WRnE6`0x2J;Hv7gMBfl&W>t)uRaxw)sngrVRP5;>>-XF%&ZKoG_NJJ!t@4jl{T
zy*&?hJT3@60D*iINJ-mvmPc6WCLve|^XzccAma9bX{ekSg?s-nN(IxRr<^fVVH`vn
z#j=Z%kM(Gwmwo@@Q0-pBTzcY#-HzH}FC(jyXA19@1R|INv52S5Ki&q^6xu=k!~`t)
zU}jD@^PM2jaRF#Os6Zgg?Y9@yNL1FU??}=DlP?oaEta28W=vP8ILNmI+aWm&^<wz@
zFzyJ@sm0m|GfL+wN2{o3Atu|2_gABdD+>=rE8h=zyD@QU(C2*^4Q!FqjDb3Q&uD!?
zta}US2lh!=LS;jssT}6T)vK#R#VtfCZU9@E6d*;{0DyfHIGGx<Bi(Fy>%fmMl?2xS
z3(o%J$gMZz_~VKG_!@N%X#{Q?HNg0Ke#l9;aZEL_N-}I~M>1m$1~c;yoxOvXg!IWP
z{aP4Rir52zm_+^-lk1+(%i05<Vnc?1e744YxuPod{n0o=MF18sb;=(J-@o%x3O_@}
z-s0U>SqNghTTuxX8%|ZV!ykVCZFJQie(%~jcaRiX5G%{b1RqrYGPJ)O?F<@3bK*#i
zGYcqn5h|xL(7^`v;uDhyQ<&UFF=nLvc_q17bbLG`SPu~c_Eco&h<w4qEh!+j7Xp<h
zP-XyCsxMct;wOf!N7aI&J#a<0(V*g!4hk_uWMnxrL1$z~SAZ|9MnKwxxv+#(&b!#t
zIRXdCw0-%{fnV|mdjRi(YE*3f$$_j6Vrc1KhYrfUc^u#|n=q^@k^=z^m;#x>&$kW3
zmjd4Z_5b6|NYR85V2>&TfZt-ke6rkMkp4eT8x&mQNwB8W8(S!H2d4FmP7W4jNdr$!
z3!qmlrDFSxP>!7a6-0djuLFwD#h@<0)CtZcTKU;;nLguysj5bAE%eJmVK6#YR{2xH
zUM%GE|NU2io#+4?L9n{8aQEa4@cE}|`Vktcp9O*7DwP+mgHvr>|BUpryaT{UO@$=>
zH+36{2)~G<kH~3CP`w5<7*I?$^~Y)|HCFA$?)>Ja{xyNCTZnjc=7#?l>7e(f`sv4d
zzGvcLPGnLdbFC8u&tQIzW@PH#cE_7&<+R_Iz$7A~^SwZi9e@-OAY`@sM~wMj$J0qH
zWH;$t?~6tpMp~npHVc`C;vO<(NCNMH<z@GPJt%a%yz1Chj&+$C8S{TE<=-~x&xZ>H
zrCw-b%GnqZ!!g--XPi*NtdW_g5Ze^fwy{$}%rs(_`eV$azD7huVl?0|Qhg|?e2iBx
z2!?g)zivk=z0T`U#?kQ}xIJ3E|K-zZC2vk>N<H)zVI&AwM0>Q*b{rc;Vd@IolwH=m
znfjele++u1?h%xa;;+Y>PDN%cPChJ(8;}MXDE&Jkvt>=k`a*zy83Q;xwt@}IG*7tz
znSURYHSND%7B$)BNyg9&Dv^Mb?bZh+s-xZ-hq>zo7x@qPsm)@r|GQtr;<YpTUK&*r
zl#Ac4<GUmKjqNb~$$*z~P4058>AFqX$Q=b&b;=KVlaDD?yCsl4>~YF6R{_9uMm|=@
zvW&Z5Ah)o1%@O}dHlEp}AHPB<H<XMWJQct-j4)5Jxq7LsI#P3Tbo7Tv7`9D9+vm&+
z!!Hh3+?5zhN`dn23^MQ?eNg<I{?-|S=hF-zTpu5v`R7)H4#;yr26_MJG2*N~+!n=v
z8TUC=`vt7K;%mVLnYvLzH0)9WyBXOxHe|N&Bx(7urrjFSwsZXYl<M1|;WXa%lQT&j
z1KJF{?Vd(NWF&LcsX~lL0L3GQd&?IhYmo@GgVm^XwX)fDcc5!7zeR^AKZy9&Ee5a&
z`q6;oB$gYp{~!d>9afx7>@pL=&q?JaE@}Yh(gyY$iS&yPUd1`yMULHqT2JtJ(`6OI
z{0Qxj&+H++B=K=EgPLe^GIRO%aDjrw!Ug3CaNw%DUK?Yf#6u;4y@Me5xcfW!_?x3{
z2x_L&SK;Xjcnp}K!ZM{BT}^m)Nu;O7w_%arfDX2Fn<hO@3)Lk}J@$aFZcbTaX@cOS
zT>+c{Tt%P4_b$y>&^KxLgP9+SuS%09sHQK9u2VbTH;iTI7@PK`@P{)w0hs(h4KARN
zgRMO-ECQTpn}CxNm}6IbY-q}mar{J!)_!J_pR)@&eG^pgVNfDN=JV(i@L-22@X2Rv
zNaQU5kur6L@EcUyxxDifWYB2eZWFwX=Tn!{;_YTRd`_b}DlGyiOx$k=Ws7MiA&L6c
zFfu7Xh!&(xiZE-YikpQcA8JqAxzQ|C96cMZJPRSQ{voxKpMhPHGH$ln412vxds7RA
zc6Yl$ZX%9b3Ch*LltaDgX|vMXLrZgd9Odk1p3;VjzYLS2h+y)eE)j{v+BVbQa#iKN
z{VoZ(eNY6<`NNj!28qlOo}1|xJ2xtZ&&kNB8Fn}qv=Zy2_lC9{HlS}8DwcporBb?R
zi|{&M`lU|<SbZw6NJEPrGD);=7lz$`S-$gwVYO2(*4l%>o)}0T?2kd6U&Qic5`<jx
zj{qkrsVkf?lARDeh7_Y&ZXSf9xjEmRPrFNs4vhn@&0Fv|DL4lgj*T;yTZS5dhycIv
z44^;CiH}R8%D4xpqBGO*vls7-t~HA02+cj0)3PLg-=qY@SP}Tb|5!jlK}}GgXH`;C
zij0lT^g+&_CCPW7wNyUhDO5%w@GdLVjVW{s#z>O3(F7bc$dE-{O_P>A8WNTX6QL+s
zU^2j?+0PzLO+YOdBZ7n9&bO(IX<j+ZaNIrK*iTX&szYIKHwB~xXHjaXux80qG%YP{
zD+p*X!1o*k#sjYnf)Qws&s2CvR2oX=(5@xv;7f(k#?qcqC<4T8^O25fll<EDw)MN&
z(4M`ijW2`P10M+!q3;e81Na(n+IRJ_nU>U%)qR9!8RoTLnBX0GNveqP6M<}-sqX7C
zIa$BGh;%i5&zpyV0Cj=ce?G4SycJ>hC*Z&i?BP9cl~9*vGeAzqrGEk;6Bg^YTo%}T
z?nzOvA{sivM2(pYEEK}{tP7bmJj0p(`37dc)e6~uR$30mk7{hED&?(JUj()kgcLyN
z?!Npsb|I(7%ODu+tC!eWDj&`Cq4-B8{g=Yd)3XBH*{4s2cic!ry+cfY0qiE5UKd!8
z2?;8od*p7^%n?1eX?Gl1@od|dA&1)U;9uIeH1-|7CslH}tOzIYbyp_?-XIpU2D2Hm
zPJFMNq+!RnEMoP}>2q|Ssz&{6MBca;;y6K!8(hWjbTb_^A!q<DQ{Iz8aRBh8|8f6j
zz4`5yg)NwMC8_>Ctu9aZJXU(Idohr<r(T>;gNw@DmuBf^vUs>0b`-fhcH|PG=2;4M
zvOEPnc32X495TP$3j%8n)m1Q=>FFG_5OJhG_F}4-6(%hh?3pt9qJ9g#<NBmTP-tj0
z*xe^>WtEry4?m1V6aam1k)%`uyA~BWp_TG_AqZT==&kg&_)0C4nLGh5v+vgucr0&j
z6P3nqfgz9WV7TbE7%w)k0{sG5u6v^V?<f%ql>y=h5hZ0OkdwAs;K!S&qRP_3TUCru
zg4=C{QW>KaX&V!L#XV{gAxn18t1<zver!{*qfcYgg!e+^<6xv;0qL@pzfu<nM6v!V
zS{d7T^DBVA#~p72I&MS&9+DpdGJfRjBM8$>d<mr+Jmt1SUyfpUbF@n+V&!W&w1;ln
zX|AT0%ji2rf=I{ByV<)z5nChA>f5lERZI~3@`V5O@_^rs<)dJIIVRp{W3CmpK`V~F
zkxClIv<lj^AkQIf{9a5@bCsd6lX+^M7)n^=uAou#wFDpz+8~%bP4fi-I3CvFD9hvw
z{Rw4ZXoX}!x)v1mW4-sb=d6A!pDbs~G#V{6jpqkt5EUKfeGh(Zy@~;<7CXxTmmRot
zi)*FhBx%uLW;?=r_zQ9x1BC(*3WbgFS<VAn2OiN0z?-vZpn@I{EhDc{i)z!$C;ly1
zJ^Ae+-&&?8AX2KpZy2Rn!6HR}Iywg|mLczP0yA92f;A{lu7V;V07W4J?pxTi_Wj)b
z__$kpq4rF0`jNzBWK4i(7XkW5WHmJtPiQi+g+6TTA-<(#&OP}-nD+pwG7?@CrViS)
zbjL#ww~V)v<hhJyu<{vDwS&Jc3L0_P9A>)!R^&$*@)3jwcC}NKLe8xq@ifK(&uml`
zd+f6GNX%?o%p=F;cR!!9yL;6U0Hij+%H1}whmO^5-SX`4&a%g75&f@=?Em=y<S8BM
zMiSV1i;nopfmgpP8uU6^SyTTEBwycj!ZHv31CpOf()kMf9*}xR|HAQs%jr`x7diS6
z4Da%EOt)^YCdgb%L`ZfZ|MeVT4|lAIZV#)r_v1%hae5^y0i^%ZO)<ree!QrNubD+&
zBfOHdQD=t#F^nj)#8+LQ4K%7EXYa$^MHjM5ZhJqWl3=u-gaI^fKD$QDABGN%g)n)1
zd_4fbNpal5o1obLC<L*mw@I>C79rzponEA8iG2vMnBv{<mNXNPT~4qM?@u&pXg1N{
zzc4ufFx@FfXTJzfa536_N^Vd0XxxnZ46;OpH$Ie5dVy{<kWZKpkZv6Sk_9f!_m{s)
zIi3AM-OS$a!NuQvbXLU?IIH6PO2S|fAi>E1dDVjDKW-kJ)in71LGb(2*xzs9#b9Ok
zKo>5f0x>@b)!=eycHE|>$=($Jn5a{y#8LhO;4qH<RS^H>pN>}blYW9;KxGEcJlnU}
z_C~B^S%C-G4$|=Sv?f?f4rbPPpdf9wWauKCYwpKqLS*?ba=`EAR{#Xw1q}z0je!Im
z{kbzfX=jKjA$nMfDh4NjGLjcpLcvPpeD5$Yat|fbm(Ka>`T)F>rb+XEzFdJMZSGlC
z#~<Y^kwWGJ*TffLd@n^|Z;?Au_DyD0UbGQu{2>%Ebm4OC3D6aBWa+>762FuaFjUZh
zf!2<#|2{q%{gwZMR|*q@vIbB^tAkhad|F{$(o-FZ2v~H7i$_%EEfxL@c9++EbuR?M
z)Cf@J*1QC6lN}aI!K+<KOx%=9)sX*}2l5x*xN!sKb+Cm7K#;VoY_C|8<A0KFAd~0O
zo%iPJekzxt5$v?h0OGurG24*aV`NaZ;f_P62&Zi#f!{oGTPT_5GFiBnApBX7-o*2>
zH&{I_;@|^`-fDRZdT9TT&kaKW-US!f61?4ig~9y{4?`jpQ9{tpKnhjhT?p_SOMt^&
z;W&k~-3%2?u9er7O{6Jc=tP%ivc!~UozSB`A2E^~^r=E}bQ(DJEmpkeg-<ISQ+#9u
zyAK~%eGyyKcT4HLiDqlf9wIjx-b&yys$%scePccS?OKAc$-B_71jg}Q^1G+Up09=1
zou9eQZQH~a^^=cIR}vhySC13KJV=|Q<unhLOXZbc7CRqtGFUO$m!o0=mR!c}jlKi~
zU09^XKMAF0)}kk~SgYP!1e;P!lf%=qnkmty5AoZ5v6rV$DoKl#rvcz`_Vs5h@W}Sx
z-XlGVxJLnsv$qe@`zZUg+jsL=Ogz*hJT8|;Aiq&!P6}7sj*Z6RZcd5DoYHnivTb(j
zl|!UK6C^j+`5wT5HBp_u=(aFArd-?4pv*N*$#iq8jM)4rmKeVzMZ$M1a`M5mjxhQ0
zn2%<4Y7dyaCyhxWIX)+!@MA#9>bDUA8S#Ip;lK1*yVjjY1xukgvqttm3@UvP?}Ryy
zUaM%~3o#Oe@zbtyK*{p&f|}aC)s8|C>2YTCqMDM;s)nvV?3IhLX1<w(3AR5f%=<bf
zCMc?4(JAr=1WhPUPcM%?_2zuUeDCy0@WnbN|MP;<G^Yw>1=p9G#{0b}GalV<$=gkk
zKlC!+%OrlbQMM<tU+PGHPd7|P{7El$E*3QUZIk{<fj&!$45pO;*0nTVujhqrt3Y_S
zh9Z1bFfR;nl85cHt=okpX{S1U;5{i04}dJOsU3{M%C{?Y{Aso1iZ0QPjCV*Utdz@E
zrjVrX4=PS~Xm}K8-G3=5MSC&bj`K!_Q{am7+cqIGyX+`pi!D=ih|ZB9g60%|p_}hw
zT}Fc}O+BAgxsZE!LQ|bFJVUEtJPuWbAD4qG4X|kte*9lAjm4Id=dgAS_<XEci#Sq>
za1BLnHB~g)kN;G~S~k{z;mjH%;4&XWBX5V5aOj98l&amv_fl?OIN!t5(XlMjE?xVg
zbGmjum+L%HW@9gVH}`EabRTYdQ(Mnc44d*rCERn;)Q|O>mnB|#-^rjlkZG?QRD9=i
zla*wQ6#9Af6dvqX_bf!l0*)Fo0?kTNl}t+_`xPU$PD$Fel4m%?ne)dYc7HhezYwPz
zLVq$~5HbGUrR|0@zUgy%T#hCCfsBo5et!NSkpB{7e%&q*GxjN`=lq-2pw2);&FY66
zys$_b=**q-pQx@D$Y5=ZSHs>H<d*Rd!uhH@^6o5=Us~p+2q#vPXHz0ujBpVCy8W0P
zDwARf+8>#3RhNEhzl}C4K_OJKIwR(LGuwemY_R70-ZN=e-Cv!((0|XS>%8&={i=*V
z{zJ^zzE;L|^Nk+oflF>yt8{KwE{VcL%XxmC!;CzlC^S@lygW><hrKcMz$y9)t7z;w
zn4xiV=)8ry&@tziPOuQL73}{!^8?WT=?6feD2YS2-n;e)FiVTT?t)6tO7SZSil}h_
z<>dshTPgH5kIYP0@?Ef9@-Zh<L0S|cnu^>50ll1o*nE?tV9ndat2w`%4xG&ut3=Oj
zm0(X!4;1)Q;3?pd>M80`E)3Z<GKIU-Rt0+UT4s3)nAN*qqdM$Qy3k|&$^Q$+@$rM1
z$QmIp|2}fp`ot=H7-}i2xN+e58&sP|uevm!U+yCR6};O(7vY4Gm&1Z%gc5y>t9Q_%
zZ||RmD;HsI_2{>rH?Lh!7j{ET&%=0A1(Vii)1Zo!MCR2(^0&iI<z>qEn|W)K=cQ<e
zB<XnEcC->A_%%$s;!~FSXF#0!J5Kx`qH@vJeirc8+jAdxo=O4&4DIS2u=kc<DNGV*
zY<(!Tm@c*$YS;su*cL%|bG`ZF^yR^aM52rmi8RCl>nAk8m4+fN-GIIDj`vYdQ6Oc0
z(3pb$XrL%NWzfyIc)dz*Wll{E6a$%E2&(jM6Ie2Y1zMuqG*ghv>|$SpU?NMBH-=(e
zB&otz-lbTI-OiCijbs?6CT<-0G0qqL^ejWm4Lk%u$xB4fG}A`YNNxIusxq|i&#CbT
z!2w>357vF!ZXB}b>TgXyKr^TmAND=aQgvVWN@89Km5?dfle@z6;UkjvQ~_&)=S6Kj
zn~9x<P#K^G`F{otp^^=_=|>7inD^6QXo3VoQ`|mSJWR*QsdTV4536<GR^~MS`uf3w
zpg9&52j!O>%Ph=ASmbQKc-NwescfnDc1EZ#)0~xhE0Hhrb`EQSVoHJuS((^~B+MzP
z>XF4Rf%1S@5#XYgMzqWLetJLssxqgHX_LYVmBqsh4GWiv0GH3=f1cuE`txx6hhImO
zvpS63JXh&>h8eS-8?W{<(*|9n%X>7SD2{9|v*HFd#2;VhSl#BrY`B=rW$L7`b>{yo
zn&B6y0a!W61!GyX%2)vHAQaKysJ;V>S_2fez2eNYku6{@>%c#{JG+fGZ=mzjv&=k1
zzkW}v*YSA;XouxO!{2LuWR9*pP3W@e9naUxPir}MJoP+ncBKBKl6BzQ=8F^F!`YdV
z{2x@gr`0EgJLLkJnQ313CEm;H;WoWuyyf5#vl!mPk?r#Nftb`~F{cGpQ@Hs3qSFIF
z;d~cgV%$a~09fRW^K5GH+YX3^%bD3A&p*6uq*?8|aTBKeLgM0q#g2ES&k_#vP0*~i
zAYgqU@T#mHc4u^K6TkA=m+B47(lNf&4JSQUjk?5Qy~OY%RJ6*#1Lmw)joSKp$0R{L
zcVj>L<IViQOJN97C2ptTd;2AawoFt<3Oh(Y^B?C0+dCDV(dw3{HWktr(|1TQw34(U
zWruH7-F!lc8yFdmH#$x4Gw@*ae)!RXEJ?C#Y93TI|1ZbQ1ZoUAS2H|zR~C#pPr?`9
zfKf&2XBfgYj(*Dg<Py`)+t_9k!GzE#@jdz`qjJC&RM5QeqYTU#bQ)QoD(n1YUv52;
znNkl@^Dj5XLD5{Te0i)^$YFscsjr!9000@^uiB>W9MyX4zMC~92l-^55$ATSbL7I$
z6cMiJd?AM*M8C0)YV^U!Vw+?4()YL6v|F{szK3B_`0bz$hlP6lmpyit+JwpK9cC4_
zpDYV<{RBpJf!FG;sOp3rXtap~8-*Dh4%b~mj~c}IE3TskBwrdN4^mM)T;4}|xl)zk
zwGjBUEbp{Xcbw-p9X?psoG2XhUVbtWZ&^UHGGNmiE>>r8=s)|Hus0ybB@~cI7X0L0
zu03z}qhu;@7oRF*xzTyDw4v^28OW2(@~I8PJqq--{t6G<(QR}nQL+bQpoD_bviHM<
z&CA0cm-Kd5#|vy)yq^}3gp<bx?Lty;)=rwHK0JGJ>*IRQchqsq;g!XK9Y7*&;B48M
z+8?}?htqO9&1KE=aC^$jcXk!{K-R0}L(l4+DWSsDBdC#*UBN!xyA)a!u;;V-J|Aj#
z#vc!+fQ&?o6=&7*M}YO`&BEGYOMjzMdyEV~V!jZeO2jOEs5$hXH#Il612%2~SyTzB
zKXPj>{$Y=!e(;aL|A(-z42Y^*+qP+8=pGo5k`SaN1O^yNBve48ksLy41Vljwq`L&A
zqz8~rX%Lmpkp`9S9O7H^Jm;MEobSZ*gMTpW*?X<E@B6y1xWCZmjb{!AP708x;Y!IT
zF+=n(`xR)zETECa!6@Bq$0wdQobz3h+&fH(TefTY5itqmoT`CS!;6*7RVp<`R10U$
z8*0BiIkP)kZjPrtZy16Nbm=o#d>L92LM~I{C=_Y!vGyt|I$5V!pDgRh*IhA!gn4ei
z*gaqP)rQC)-(OG{sd$o)*vuN%X5aPMiBM{B{UARb2UUh+ay~tGQh)voH_DRD1O0_O
zO5{KEKVb+qrO-$qm;^(aa>?1yF+uyWTYzMv!`XV#_tu;Nx567@EzXb5+jN{Wet;M4
z`uN3*7f;6yffaxya7-kppva65#9U{RWT)UzzaP<_doA^TOR#mSNego4=Qo|{zG@Oq
zOsOx*=_SR!xLg{bP9DAZ@rGgvXn<Q0g!XKW8Y5?W3B-j@)Q;n8_%KAdidoIW1>MVl
zKz@|&_hl2pHsogAjL*5K9Kl>P5>fqXtuuHBI6f4Z?*Z5$FJ^n}S}J2J@(?;|VAvAu
zCq;t^jC|?SQrhBb<%9un>TtIoAIpp=?`6|#EEi@x=GtWLZJH-lI|B3C<x-sD8gc=%
z3B*lZeIFEXlyx3G>(Yxot>zHo&E&Z;6I&rE>T@C}So4aMv=Yy<4AQAtOQ3qpbFg(h
z59F5b=N;z;#`-ip{`d$?NfSP`ILFxa`u%Dq3|OE0XP_XlO>u(4$VRfS64(2p)GnYe
zPsw_$;=~}{Br7;J&#>2K(?qGPUc#yOBH*AVl_I>KI2EoM7XSpWV3g1qKcXE=f!<3L
zG}kq`C_XabeTr^6)5Z{%@&Re@!=B++Y(~cRvXwNfcq=X5ir&V(@9sSEiI{a`^h2H=
zHnt$guK##r9ykwvd|JIpumQiUA!MC|5v>Q@;j)#`4b6IViElkk`6wYK0NH-fiPJ}~
zgyFV=BfkHHH<h0<`@me35g&)msCrA;*6q9AO=&81JQ1N1TpupSEKad<-wUHng&mM;
z07M)f5Zkl8nCdg|;s+<)s8EZri~ePDhnv#{(dD$*(ih^-Uwaj2qOL$f8q*SBd)Gu_
zFtyVh6?j*Af<BGp+i{rs9CsQE5Yb0HRZr)jpom$RN|5X!L9rjNupYU`wy<ufm<$Pd
z!jAHj)9yh-o>7cy+E%P5Qq~=q?-(<1zmK6W-BYQW6|&4n4ker={$&5}MNt67cN7dI
zKB3|f>hih!Dg1J({k6kpRFvvOuum#nnO2Uhx!X2WyRSIqmCaU1I8y<0gr#ZH;nVi*
zO}$iF<qItY&##bx6XSERbLwiRBv{^vmz}KlS?p&@QM5pslkUs_!yowo8`xev3PH5K
zA${bp%AgXUC5R%_lRYa`ECKrETng;i!$K(JLKQ2|j71VPuomfUcVktbsb&eaHoeHX
z4|xDQf`phOTAw+WL0P`e=&=&Bn3+h6n?_K$d+@eg372;0EbS0-wlBZsj|#Z;p$OVZ
zfQE)sF~40L!;^)x*ZWTF&mVHKv*%(U98L^Imjjr2DNL_@xMF%41E@@X6*EC=pI1I8
z(n`^EQe%r69+gLlgGuszZ188)`^!Lu(`gIA+Yp0u72-h%I#r1tR+Fr>cvX}H98iUG
z=h%XyDwOW_5HisSSUa)2V*XsJ^cx(@qXbo^kDZHH7#}0q$<kgQNK9>@5EEc!qQTj}
zQ|ep40e&7ig_b@!OdEWaDVls84V`*aO#;qmr@~S`@IM9{A3>r(%AIffzRmO?zVz5b
zDFAmLHn#6L+XH(v^kLm8KD)9lkcDGdC4nrQM-A@fu`5S#B&e?l0&QzmXrp!kOO`di
zUx7%V%a5Zs{`fWYYic9E9k6&4!HUJ6bAW!H=(|Mf7yjp-M1$EYuXeWe4E^$k4({17
zP3qV3ipM~r%4E;HY;@s--m~7FkZ$yAN)qhd^~dF{)REgxeC%Kz8nIr_lKt4PC_aJj
zYhw4yd)kHFnC<;41&i%iZlQNL82APC|EKQwvv-TZh<k>`Y)u3^pOCfX;-#9%`W%<n
zYNVJEbLKloGjM)(He+C;b7C;N<Z!uKBPBy4Wsa!-f?ub(b2OAQcGE+BEf7<_H!ljm
zQV6x>%-^D7dr;mv=Pa&YEDg<cFXyhkzB<OLuwKaK^G?I+(WL0RC#uiN3Jn?z!ej=D
z4_?KrkNFlF6WzhT=t1nzDp{&YRy7+S*=TEerMG#$+&s{{P~+FfHQBRb4Z$GHrUx=a
z1RN!jB7D>{V=P^>rFuY&j)6EhF{}^nLnGQnXWfvJ;!?~j?ck)br$~#?x`QIpOQ-JN
zq{7t-gX64vCU+pr;CyL@V|<a45>m#PhxW1~fqV0=gHty>WJV&ekbzB))vC%<l(7fz
zNW^@=0nyYWJ<>{Om1zw)fg&ET^%omG=)8ytSu{H@U+cswdpDlCxOt?C?m_RC3{0&Y
zDqri=^hUES%#7JKQ*JocAFNKV=*jMDc^6e^86VzGdy5>*DIT0!@!+kziVZlBY~-vM
zrC$jGMF!@Lt4Wf_^^rhKiSJ8G6Yr9ui32K!R_}|wojwx>B54sAGI^#zcC1H0NpR%H
zhL7O4mR4z_iqn@3l%B_Aw<l_5nQbIL^X|3F1SA*G1@RWKH9Z);1Aq-Hwh;cjMIYhk
z?*hVBSvJ1wu})IwEN(OQ+QH$;k%{bK=|>&ZDo!NqSnFuIs7e|xSjD8LoP%%1Tl(=>
zKHVfhX8`08y8qbkzKj_+xNu2aBDBelGk7oJQ_~agLQtQ}j`Sn<tM1f(^G&*2_wCFL
ziz&BEmG#tqGwJh)e-xh2!(eW{sM>+bNF8zX^LD7Baxs1<ZS0qliCJ^rJ$Y3)edeZI
zHIAO{-&u3)Su6eAk1Q^{DckdPt#kreTx?v&1b%(wO!U!c90vS`LS##<hk<Zegfi$F
zblBo<g%F?5z;c%4;I_Aq-(NXT<edfR8!<zG4Ujs84!QBMg(@ZU?*)~YF@)(FX;?n8
zyIbOtTqZtW>KQDTFl3!2@N+eupQu-|`urH&qZULKispIJcm8A2(VS1MB2m}hmY>{K
z44FPCrQH71;o=5$XX;p51#Mm@U>N+fxDyBKh9MrZt?e#JDYMuA4mcE|JqlPlAd3Lr
zMR9b|<x3aVlpQ24LGt!;b!~)ZUIvh;y4el_Yf0629PggOh3<zkAA33Em(!jn#ctTt
ziIOX^n^F$=065UmPm*1FTja*%jipBXW^RH0?wtwctZtp0?ji1&Vc|GW*NO7HXmM^8
zX1{_200%zYM^W}^5sG;#FYhPah=5i{Z=iN{JG!zXvzoFIzp>g~)0YOvEe$CM0Mj~X
zw^Nu?@Bwe}ug*V!D=^Mt{8zLM48WQLbv^<=!{TM7O|m&V6WcqXptF*fq8G7^t&OM1
z`P4=kxX+f#*o<;Htq8kS%kHRg`e2>eC7lpqIaCpOX)%m@=QeZ9PDSL`r~YgMLwV7{
zo@MnrYh)rC3^0{=>sPsyeJT!qrRmAh*L4P$6ryfJ-Z4+7^SgTY>IxES@jOlxj5%Y<
zcKKa5;O7xb=%mBMIG73sX#r&a0r3aqaxe>ztbdIPh(Z9!KLPjJTe-D(gV}}!RzV-f
zBX{{aLI=#(-dr!&@a#lc)YIAwc}@{{nw%tP7eBJ(9{m_1%z*WOA$DLbqs;2r1e!Ug
z<MKSA7lwsD#&(}zMBbJK#$30h)QTavxxgLpp>^CmN<lDgk~IoTy%DKh)F|qAw`DJb
z-YvQg<I7q~5G-WwHKoi72y_3jlLPYt5&(&J-$~4O0Bf3udG;9b4+!l;RNg@K`9-SW
zRJv_8CH8CtV0VdmsA$+7oP8aBHu@PqPvm`Ry)-h3-aod=jx|Xc$NoUHw5e#HZwVm5
z<5k<e*xr=+W9*p0<_zO2LeE_l8DO)TCc`t}HBXS&=bVUy$N1(;eWL4A(KtE)++0gA
zGo%mBl8yiVmp2%q{D^SV=Ot=)rc0M#)$gu6Sx74F3Ajvvd-tr<h6$e=drDO{l?R{5
zHKx0Nd6pUZ9s(g4-D}?Sky#hgRlQ>VMFOu>S;KBr>r3O1aq@YkW}13U29UOrD>1Or
z=b?kzsgte;mmB#RF1sZ0iV1s;o`BErQ_kyO)}a&RzZW(&0PXzozpwL;$<gO7N}D0S
zrYodUGeaD*%#nR^-2?uR?jql&nZy@cgUmSaG3@@pw4>V^oA$s$o{;6UXmy}KpT3tO
zsW?YYp56Uv+Cm-klO=<N9aM#L2YxVL1)454%=a(zSb=T|yn*50nVj0iUjS;PhIwK$
z;BtJers9cv4J-brewqB;<*ZAXlxgDltZtQM1H`d;VoD;<^NvtD9IMg{@-N~r+?W%{
zl<5DM&FI4EqhMjjYY8(@Qt^uJ3z%4UCUU?b<Ibu0G(qX6U!j-<xjhO_@#ZC+k6nF&
zg4zY&K33YXEmB4Uz#0IdU17+^IQn!&wNvOX)v-{L0r8)tHJ?@}xv^%l-1Pe&kaQ36
z5f_=Vt@|(o``?(!Wd*gaik+7By#3?K`2PEqkwqDVgHY7dePD_Co!AV%{T}H5oxj9(
z3%M>+E(w{0>e?R3V#?jZb1H#X(;3sko6l8QPBHG;)`O&3h%RqBwuoD1d9RPq{sE|;
zjzkE)^Fc)=<&GN0NWfP7kFcUCyzJWFXiosGVShjEOCZnn%xwN*;t0R~6reX;9jHcK
z`Dmez6!UN?Ka@R+qePxmQf{}RGVWD!WkKI%$?GVKNU8*~os56o!pDAuB_fR-n>H?c
zt`;#1*}kYJv_GDY1B}W4h~WW45zxp2{Q?V21e(Ts=5wGje-ZnR9<{=8>T!1pA=Qq8
z6TL5m5Zp@=Qq0jz;SqGESd7y=?kSqxP}_Q6m5rFMvj3nMCSUfRF0;5K{f5F+R7dX%
zwkOv@;|PLdbnnWW{I7`zID;>O`vOP^dE=WFTPt;%mmndjW4TRWCOt|QW$iC41Cv9-
z2ePud$?0NP&R2xgnY}*+3BNeLStD^GT_d>rq^2~lf_Hiq$ZXf`Y|echmyYN4f;AAa
zd2~7_OA!$_|J(FViQVpx*^u}<NEH3<Bxe}d<zpq_AA=E#!7a36761w?o(-_8sHzI7
z8*&l|68PN%MB>sdiW@?ra)CDr=&0_<txX362lE`WuxO;Eo+eh?nwi1=c+B|!R;>R0
zF^3P*6eB*Fb`QMomBGzLNSr6LE`}n?-`4_vR#-j@7i%F4k4Dw|KXq(f9$A1K_#fvk
z|99(_&P?$Z(qz1|P0xMqk^Hu*a{$v0zC>WDQ$F)o-~KMV)^Y4&-l!G&3Jaw~e^dHe
zt;)G2Sai{lZr;E8<NFYs-{5b((eyS8>gSDE_L6hoqYXH?e`J8L_vf7;`mc8a@cg`k
zm?LW&4)VcX+g-8y+jWn^wCA$AqlLM(0KWs?&=*X>`2{fe|I5VUpBAtpu{4YO!PHG(
z+}yj5W>m=xe2-!3s5iZOoq$sESKsC?oDf=OyuMta43@*n&@tVp#&K_340tvd0QFJv
zf4}Co7*PmQh5ep)4f_Zm@DiRHv_c==hV@_SL0JIyqEs(%s$K-&LiHqxOg<Fw6aKvz
z`C}shwuzUK68op$>!<+4GeG>3a9xf~mGaaEgy<;6A3#naQE~R_3gB`ScLfsBEC7D$
zH^Yd^RY12oZ6&$!(bc?ZaA2Tpjb=^@WJ|?~^Y5EHE@iZ@I`a%5i>CQs=U(#lDFIin
zbuBQr-V-WL*`)_-C^GFWLgkiCwE8{O=<XOkYwhR>*;8MJ>^imqfEq0pRZT^Euh%Fq
zj}#R&+RkkNX<h;#x%7Yu0J`$B)(zRMD-rF_$;rvH6oRe~fY4Lk6|enqD@(wRD+7*d
ze~gxvu3l;eoC|53eE}fJ#Qyx2QgGV8UjQ7Rw!1mgyP|KX=~@qb-hWu|P$U0gQNCG>
zG_ahBEh)L>xi|diK>!Re#Q%Tm88h)eizVDUl2XzmeQ3Sr@$%mI{18}ch}XWr1k3tj
z19cP!2S;~STX1w@qIGVilf_#EU=rLgZGi`CCYnf;8jl&T7F0GJn`@DAswc7lE$H*d
z@D@}uu<0`Tk|2PF5oLro6g{qb*qjX*Puc|!`E16^vem&c88*{RBK356C~y1oWzyVV
zQ$7ciJTO*O({a#WYs-BEZZNh(y)Q3bCMLQ)hSthdQn`OWa$+Bp)7`D4vV|kqAJ2PL
z>fF|bfCD;%WBmtaG(aSN&B$O;0bC-$cPLLcFZ%H4$dV!3rJ>pTN~eHqR0P?a=l^=P
z^4B(E45Z!Fp5RvIq<6%S71$XgKEQ+3iY$^tJ(Vj;aBBeh+4^V(%Q|p&YBW%(L)tTb
zb~?3f88Isa(q`K_G$TQ1w4BXA)@o-5l{6#@mtI1p{`7ll-kHM&n0GAzmkJ(6R#8)z
z>#y!tIZO_5<)nVzbq2ENM-fF@nQva~_A8g!4)cgSNIfm9a-8M|lnscVpI@F)L+y*L
zb{gB->Q^s+nM>#i#A84#f&Qnb8b5_y$V#t5^-7Hajnvj#<QZ^0V@r8MOqVe?maUdh
z_QPGe8Jh_dN!viy==tOaEWjf0zizC{5N?k?nY?lHDnNRwFBoO6`M6=^=?chYe5iF`
zKBjyq>EaSAg_U#6!|W4rGaZM=T5pF_l6a|w2v??!p`)7}do)ZpR0e-F#Z)yiXU);&
z)F|8^gl3*BccaRI-t=@b$;5>yLsMNnRM@)j?p3I|!Y^w=Np%t$!08sT8_|VW?XQmO
z!@`)`62W26!xkZxkrSmr+}(rVRA#aFIa*BMag#p&oylV;@m6|F;D@8ESEoMw(wLPa
z!`f?P2SR}HxiUr_e~TGB=??<R?5?jy(G|Lzc6{!K72Pn0R-ZT~sov#@a219;i~fUG
znWNZ=l_{mQCaV3(WppOp-=hWo@4b=N{oY4Av(ur52n@1az1E_<z*+a19@xfc%*}Cj
z;l0CC`!<q}=<je;`S8Y36;K?sxma4?xXo>VrUl1ws7ld5PM4&IO~nF&hT3b+##p1*
z9pg%tR8H_{PPPG{D&2Fpx_t2}D?usety}kT1X4d#Ey-XPtMH8*Hx?zTS=d=6L4N$Z
zZ6M2C+4xRD3;3<i&QA||fcf06`>)_1uxPPYqmazT_gXra$mM@r2Ac6*pb@zhK(TuG
zobMcO@!mOJR+=ACO=nZ!vB79lc5Ts{X$9@!=A9x3rgOXnhx2&t!Hs77gQO?*X&%Ux
zr}ZPr6Lt}&#cSv9y;8^L-^Lj$fBMr(4K;fUrhgfn@<2;NzE|I&lm+<zDlYb~q|Tmd
za#L-G^AYD+@8%HROoG)Ox<|_UI*u{F#%zk8FahICY-fr_U9O8=8+O~KYIfP{{#62%
zDQe)RG5A3NPh{d32&?ZZLmuvcgmsPw`MOac)M0EX*4@kL+Xo=w$X_%&zGIb{!04a1
z?R0uW-CPV<y_`;ZcId-fa&HuJR@srVR?a#DQe^@K=e=Al!!cQ96A3-$k%F+*7HfVf
zWp9~vcj0BCPMU~jVec^`cox`p1sD_Ga9P&2+c?kzM{&J8)>(J*_{($uFbfmJgCt-t
z|L_e>LR0J8?&VFhZDl=`Byt0#Mn`RB`IC(Yy*rf<l?i;F)3vLR9t96ts8`Sl{X^9$
zl3L|_thB{(Vn$MpUo(}3tH%~G5?!-DAwW>4r39SWftRuxQxl$$d1h5!;C*F`)!t~o
z`XA<#fVK8d$Fi^!T6d#SZGE)@lUH%OI0ev4h;sN~Bq@y#!GXjcOySIz9?TzXciz_4
z-edmG3$exFh*6?hnumO)b=GBH@ZombP=2<e^CWw_E^~38=2&$Ld&a3KKNTbI@A%}c
z+EZ%m#;BIVb#G0XHBoh@k8N$Mo%{kE0Kn}RnWBvP4Bo}V2)59}(xx|%3?d~i)~7f_
zX8p7n8k}2~5^U0S^a;<K1*(8VoNNqeDcyABl;*|XB5)q!fZf&uj^-%y_sudaZ=?@r
zUfWtw<(%7LDvJO&;>+w_NJ%P?kLE7|xhUEeBgixpqbZY@X58fKBQiYwUhXw8K)kEl
z68nmFFR)X$*ie7z*RPKw!HZ$Ef-Orfz5!&tpnJX!*tfInl1ho?$RRjKKz!WZtfHj?
zTnm@%krOnP)6!qwC$tSB55~!i;5b|6(MzY<`7~)SJMnn}Zm}t=no5d=_US{6<lW$u
z(Z$Uo!(7zLA6i0T#U_*kv3(dzD>y4vC>a^6k#{{F8JU<eW&9pQG27co15Kg=+}5?(
za>(B9Zd@#A3V%8fhjRIClFulU_{HxgIuobh_@{GZ>vMy45tcu1(5_0yZtn-5`@uLH
z`W7gDY}Db&v58y+1QZK#=X*M%(%OK+qib?knfnJId119>3EoxSGbobfk64!yh*+!P
zidd^<iLjSuYmRxS7I)A&W~TjGj4_Do)6%FGk1!VDMao=Y_Bi7;Xf&tjqi#v&0GBf`
z)K0dZsa3_7z}Yd!&qO^U(@pbUm#7H!-1)h*@f~8Qu;h1+O`nJW1i_D)0nb{&t`arn
zX#&qV&)kZ1<fuoW38AN#C@Csl4E9X|sm$TsWD&cZaH_N*Erop(i8V~sBevXIr_kc1
z0J4wL=U~wE2=jVxP6pXPJH87H*wmVQPZz)u_DG8~0{9z#!Z}6;|Bf5P=aTQ*1N}JT
zu`0a9m-SjhUvAV1vyo~g{KxybW~|&^TW?d1BwfU3la%GcY$*sW`?P2to2H0up^~#l
zkFy;9-Mh<BZH*kU295Shh6hUL;*a251+xe5>uFpfT!@Nq99#=1z%(E!;|qZM2XL_-
zr!|64*}jM%bVdnQHvrS&<%Yf*VC~Fcq%I1lj5>I=oM$r62hsB8GY}z+0v7d_7EU*6
z2AeG7wQL^xF@3Y}1@1QeQ8=MoG><pwSmQEOK^kZS1sVU|ErEVCt!f5BAa}(yYr4-_
zyKy||-ev7>>U6b+#!uOM$Mf4ma#0^6#$GHtb)-jx)HbYrCz=zp|3KMvPQkqpw6w;^
z+pGT6P>lN|aD$zLUrxjBqilH1QW1op6mRyjsRfSSE2`f7CQ6{1L}#3Jb%AD;6NX>;
z(eM1slUeb#NuZXNM_T5J@FJcS#HRVx)n%Cge&9;unkuiLkPT#eWgc5*A{qFY2%DqL
zS=!DkAAW(s<~N}bf*#MM>;&BlUME|f!_Mu3?J~1R9=!21WMuCv2{7;d?*??598HKq
zC7!`2uhB)~Z^``emW8vgQoJbEdVc~jQauBz_*&t->|+1dScs|pL=LJo-MNK{bI$n*
z`{{P^#|f^O3a~?UJRlXM)fzzJj<SB*zVaK`1o~Y%&B`#o$(?>QQKjWqyms*Z1+z<n
zeOR>|&Z)mR!9q9pW^QG_3u(9CC5GJoXM^&NI@kqkTZMwg@TWoo5Q44WzgZtwkCll%
zxOVpJeq&Ms&&{eE1%3iYjyb;oL-@_#u(mBm9@uI1qkK0^c22?br{6+XI2xisb_w<J
z{Do}KQt;R=a?6;$k~($J<Q||M?31WYi}F+EW;{+4W;`g6s@y2!V`QTA6cVY^WGYk4
z{&+n{t!J@YJLBjhco`g9CToBSKysI9Nu;Zy9|1PtW<8DZ3oU6)2EnW+gZP4%GflSX
zU#>P&B8z!1&*BZvn0nt*&1b15k0J{-@;$P&8On_UdJtI8bKw$RDbmbX;M^PIc_)77
z%T06_llzYkIq#qEz6gC50*HkE*V&49N8idj4OEW%ddbP74saZ3A6D4xl{;oVp*dA~
zxB7r-dClO)MJnQF^rjh4o_CCIeSVG{<*?0^zuuOP?Cm-8(69#wMiGN?1!gtjgCDcQ
z&G`cqy+{SHt4|Imy?C)|)-ycqIg;U%fb2(Pn=|+5jA>BMV7$MqT_@MdS=INg#EAmw
zN8Uz8X)D%~6UgsrAM+v*XgpCT@du_7O+gRD2XZRyptOml-|f%|l?}(PV+F|cs7@^+
zBlOkd?vBltXb?JMdnn6Zg_TZS6JI!Rt*=~P#T5F5RvJq*1g#D?HKC=&ux|PqRv_fW
zGr*+O)iFQxeCPcS+4Yw{2A-#v2j7cdd>lP&e)#`CXcWR<c0Gz`(oMA}tuECdvy;E(
z(}9Dh#4PYI;d^;C0zv!WHsBz{I-W(%zYNe4_jgnsChb(gOxoC%_s2+FVfTh4Z&oYK
z`+m|u{+edRmVILnSIDed@IQBn(xXvgOA>+2+8JGrltv*E)4s)_0+9aU#dl(%hQWxY
z)BP0CqDb3P#@%)*$^;&mkAVzksEhACQx9-p{ZcjUn=&smPp?(|P`BV=QJDtSZ~GJi
z)+ykaBvI}KZy~T(SKe3Yo8-Y)zuxd<`KU^lb8Ii-TZA}4xLv;qk1%i<`+Z^Kdm=Ll
z=O~ln1u5keAyT$?C5)l8%{%3mCLtoqqa|`uwLRw-39eU<x=DZB%vkQNCh2WGl|W{m
zZf{xfPK(Ol{Ixb1Vb<(Z%`~?$CM%_c@e7cY602I8c7l$)U2A#1Y-LYV3GE%;sLFJm
zKk}%roT?9{?XiQm%-^zPnYu~4Hq2V$8{cVz4YgcCD_aQUbhgfK4xhQ5HZJUm+oCl<
z#?kh@d9Nh4D0;jf=|{&CO;3+JnM%X-(EDefw}xO*`?s6V1S?O=8hZCOSiLI_-tQaC
zR&*dFrGSgknZ&~ZE%?Bk7SCLN<7*z~tHi+hW^ar$u<lRWgP_cqMIaLb_C)`5@`}68
zh6o=!N9e9s>e%l8SR7iGc2fZc0|q7ls|o;Uys7*v^~77Oy)cKFl^{^NgM#T!IO2>c
zYe>PkN1=ce(-QgGBsRw51psojKg{2+Bb#UGOKb<j*7Y+|OM8pL5XABP($~X7k0c?>
zkWoc;_0oO7xv)wyB7x)qKcF{?Stq=$GB7IP3~?f%aNv&UMd*(=%|J`w3ap=l=8~0Z
z1wmtj{_69|j|9*|Q!IV<tucYWR;qf&MJeR#aY&Fgh*V&C88i1hc?y;SBP?)=)S2ln
zpw08A*iF2SR7WW4Q@UlIP#MWT44_G9Hx>KxJ5qI9FZ2CZimiRjtC*#JR`;%S(;JKJ
zpD(xyoejRPvwS-E*izAhK%dIU@TX{l{*#_-2eT4-*W^FDYb<v`XKxIfJ85vDT#JbX
z`2F4_#BL-HeGk?208i@t+gOK$hGSe)%i99L0rS2#8i{(j$qTvL<b%F)Y}G*#%3OnK
z3Or$cs2XfePfy0$@XGGXtCEx<(Gw;k^{dJ5uh+G7S|lVp41~RTOM*c(0((<noObUM
z5K%Oz(3AfQ7BUVMJFSJVP6!i5{qEbgHE03}X$$(3)~w1u0a;R9oq#VBMy_-^<6OzI
z9a+!#8?D6M9uWH|VlV<RV1&j+=%9&|8i&7lJlVxYkIv^J2difYmwn1O>Jz<Ax6($Y
z#Pp`r{4Z8=EgYDn8Fy~J#CP?{Hf~idSmXuOc*CgEG!q@<cd3#`15b~mY4)(F+4)u~
z$cT7Gta2#REIKbu%V5C2(-1PsxY7NKUPQZ7#qXpj3s|kz_@tyt`s!W{S;J~uE|k4~
zwxNgV%4F~@34W<tzarx)%%T4fsS$4;gw&a2mDK9>+$~vKnYI&Esk+#&-K394;IrT(
z!uFa<{MmYllr*rI%=|}h1=DVY9w4%d?||wX$1kYx7KHV`GAKdCCW>p#%~32YxqGSh
zv*78BUv-IQpl`YXIL&dL2OkS;mUlmNB_(cO7gaI5p(sBsc5eN5rmD0@p`;rHZg{pk
zf(qasbRvPNqbuFk3|tw^z5t+Qs4O)s*ZEr7&ZPTv9t#lby^}ED6eH8R)$$S89F<x1
zGM`Q!wdhAWQ%2pY_yI(7e4t0u(ixteP?QM9I)ANoTT4Dlo@lx@v6s#G0ZEgFp60j0
zwc`A^A|Z|~+U*%gP1CSYfJ5}@9~y*Zadqt>orIulNpAvmwb<my1UZ7@qt2R#Evyli
zNfd5xYnfPQKE1EgmFl|}Z3i(=4xtEKZ0&Hh^gvirUA(nydDlrKiOk?3awQ%l4)SJ|
z{m8qwP^C4y829<Y5|g3AHM~a;wl1(0Z2kh-D%p-suAU-&#?sd#IuXe-&BH_crjJWr
z@CpcJWt?Ob6FtxiGm}FMC|w(OoCbL)Wuc#&g&>Y4lPRr4YM3_~?1H;)RIoYup6<^x
zw%a;me9K-sARMskqnvvl>M0a|(~6PQ&=J4X3}kZ!lk$DsXShhvY;F#RRJ@}N%LdbY
zSGF^g$(`h>3?t1pG1UDGXicV=03=Vl<9MAEA5=u`3%#4<1D~5}yn1JxJx&<>_bk;8
zNrXTo9>fMhfF{b(T!k7+gXoY&@i|YupPh2<JuhdL$!VSid7UN%Cg}DyOKwhCPjbPF
z@U}S6XmfdMeX5d8qc-eiIm!(*E9-+HEZQgY?vX@cIWI|_R!5L-EGTR(R1U*z8Nktt
zH81i>XYpV)3@6IVHL`orWWvrgm2$|Om(;WJ^ywPgzzFcUSKbz+JNPAMQ=C(TLEoEW
zW2RcG)eLc+{CF0Q3Rqh8os8x6Ce8YicA8g~;x#0VXK(ChT%+H}Kqjzf(0EgW84JIj
zCVummfN|VT!q>I+n56-?OKj1~f5-fR1bNw$2mp>Z?#2Ed^C0k>y;E~B3NEXSKPpe?
zsfi<`ry&~ii`}zG6>Ea~5k(`=7_$Rk`!hSXt1jAXl`_Aj5ag>$&lVLO!w|rJ@qTZ!
z$jjBtt1u$@@0k%Y$;dAi^)Ju6M=FtzsZ?=d@6$<%SEn8TY8@7}8C<Ce`NT5M1)E(_
z6KG%uCv*b9D^&pG3U=U&;kOv<!G-`1-4rM99=DsZuS=a&{>REDzo*WY|AN}(qkRY$
z%v^ydzk1HPw!9woi<N$+O&mt7lrKd`8!K^Y$afwz^qV#GTC>WLD@1V-m(Ro=B$|As
zS6TS;j+I!0VvZOe8~WO{TrKF>!_*T$iINZWrT*_<X)zjH_<X7tpYC^CpT<b{9qQn~
zF~_0x*jcucVx?KM{Y`Ab2i6B!maX@xE|+YSD7NNo>kK~D%{^{ZdH1zn?K|u(HS}Q+
zO$-wx(86mFV_}H6>iOO@cj9RwL;p<A`#Zz<bfLO6z5M)!-hAuP6_9pa;TE^q8a>$@
zF}v}Sysrdx4*;3)sYku<BnIXXnb>#70^#()hO$pxqcn%f?{p>mQIj97%ESJ3NrgU9
z?T^{Sgn1eJ<|YU#*Ke$hP(IkHScyMjAd2-nj6CDIQL9X|NSPx0qX@QjG|1c{R2aKf
zk0+?Xc!_=_7=3)|vM*@{ZA5B6J~>TM3kyBKGYYCP6)Wi4k(;j-Dq2DcNoHk~<6Gy4
zyStv_wF|tj!G-orbvCT-_nu)b#O3Ya5GwJ~ljJkfe3Jky8GMV`m_kc8Otr^GIA;8T
zj?#!7KkMv4_rdL|kaLu-2$CryDn$8-{T70viVZeQS8Y7ek==EhfO{a^NDNBXq<qP{
zD5`9OFOm?-7iGoC6!j=4Ju)GOS*%DvQ<`7%o;b(iG2?x<=@!~3DFD6weNcGyq*|HB
zZ88tnV+^m?Wj#bsZsR6Sksa`?zF&>sSYfXB*--M)XYrgmh7o|<B_#m3U3`Hj>N4bj
zSx9NOUFmYNtsJb0h=j)|vxi=%7qw3e;Q(%6r9h}{ITiF0LQ9()4?yHv-rgP}U?26U
zw_WHKpP^Cn))D{_e~MBqcu3$%5OO6LNYd7tJj1b9#baqiwvXw>G5l5skiV51i>QTF
zi^j9kn!Kx50`O94JFOw-FQ3{55Z;?GPcmTt+`ZY!aMkjjU{07t4RzF)FW*t}w)vkp
z8Ls9nnor!4g34X~09KJCPtMGO^t~T;kj%pARvvtCZe6@uWpiMz??F;Jtto7u@d}|>
zhiu!Qbr!fLsynKiY)d1*O$`m{N%JP^1|e1Xr=4pPWj#j~S~~r#Bdimwv^F}&rgR5a
z1G>vfw1os#pYHwG_9exDXxeF|tHkP>K~XnRY}Fc%#lnA0fsZ&TNofaAL99-1Rgp2q
z-D>$@<J(>JcUE<kq?fMSQ<LRfBA*htoide^WA};Fv;!1sQ02mDQCNOlvKc8R5_BPf
zP$|6L3aHl46IWi2Iv8P|&CgqsX#0-i+tbi6`uu~j5Y!yF4h|~+a%6y>@y^Rzdx_bz
z*~8eczU9<&oa?Q*LO+5!?XW=y;>?4BC5;m@>UOyeoqOn{@%96=isNtX=<bGRcE2>V
zbJg-Gm+cvxEuayM!JRYgO`_kJ_EM8N>wA2;2V9#dSKRJ~xZR1ASbI;!yL)Q1XJk+9
z1OE=fJ%Rt*pA*@;@NH<xV;+}r*5TR>7uz_{#^P!O{Y?}l6$PjNT4R}F^qX4ixlx>`
zh2?;6!hr~Z_enY9hwiB2#J{k<-YVjdP_<7_zv-4Au2oH!{Rmn+S%}fhvK`L19U{r8
z?zvf=qYaF09^kjcx*ff{PCB@3nsN*I1Aun`f2OmN>(GL?$e0;}7?S#jM>o)D|4(br
z+@P#&bvX8SBjA*hLpgVxwWo(s0TeUh{bAglPIGl28P!#2y1&dxh>3GQC_wk&ijP=s
z8a?Z)m|x;GvH+(M`C{ROpxP71;(t)QaD^uHiky?&@4lRwLD);`D6$JqDZUIWN?bM<
z@#cCr-9V#x>xiu|HrbZAREg+HO*<aQj4B6#Oe3aE=LTIzEV*fg5nTEEP;Ag?F#v~f
zA$Z7xJ8}nIOe7Pzhk=W>W_2ass*S$aZki2<ng<Z3MYx(9G_FAcv+QCFmOUgT_rDMA
zlR`*4{j|n3Y}rZSq0OVXXs$wfkWLwPp$y7uZh?C}+oCNUFp=q_TMeOm7-eycxj}wp
zQ0EIOUCy0`SXU-KOQSJ9TYZoEedd+}f*fu*SDhG(;TK^Kc*C20v@1AnhP=r}DO$?|
z3<Anz!yn#1m1_7{bLGtxXGHioEDn!Rmo3bRd|Dq-ThS?#H{sZ%yP=8x_~3Xwu58i`
zv4j@u4x6@*r<cXqv2n+j{EXn%cC^k9)qnnw{}b!KtR9Av$Lqh#6!P7smxjK878xWf
z7?=<-0}ER2)uYs$Pb(~n$&CW0x5e^V0#+E7*tCH8<2Y5*xnF$J_w|O2ud?r$iUR`>
zx<v*edwXDtaU7JJ_<DuHRJ9h2ot6QlD7F9n&W0{<52b6*dXkcB)*iAw^4PH(_|WZ<
zc2j(R6`F~10Zwm8g63~(Pr*>{tB}x5frUL0r^+YQq*V%F20YjB2P_|gxJnlsKry{{
zno<zC^}Kq=?&kQtF4?SmQ*6mI1}e7Yh|8g{TDNCVR>Fu+vi|5IH6q168OrhL1Tc&A
zoy(Gep+qO?015vw{Wam3qz_d;@4#$U+JEz$dhPiGmVVF8l+tOGuwBbrRlU0bgywqa
z27JiHvu|MeJ=i<B9)?^I7@aXV{Jd+^d+l2O-r_++{@Qd~WSOmjRA^hv3PGu6;uMJv
zStFgE@iK6fK<et>!~Wu$`CJcYe-zFJWKO;PqLjO?Z95Q;O|Mx&gRg_eI|y%LBN}8D
zd7BVq{%Oz@kN?Gkg1cFMMb3{iUt)(5yln%=_oh0Zj(`|cJ2A(Y?v?QF9g3Lj<(H@0
z87X`mRF!X4CPbnP6mRs*k#v_K9rNuc6{H<HoQ=0fpC0A=y&Ce_yiDMA@_gKVH#D{0
zsa<I9<VW^RUIa5hTK}XMZAR$6zF3$2B7sT!YGzofULNLN-qiC1kUtA2$^tWnca=(W
z6dbDZ^7X(fW?>u<3=rz}sZs+UQvQ`?xR=hR$p~16ORKsrl3e7X-k&Iu$NrW%pRhAn
zIa_w}xk$i_w=gtJ1)QpJHi%7shT?JE?Pf04(7VUe=Vu=;4Nz!GeK=dkmvU=EL2QM|
zi<5A0@g1h90EjX!^(91^Hjt8usVIJykk+4)o}Pz_M>n!p2CI%U283zeGqIHcJW|2$
zW?`AAEa{JyJ@GuLAoGa5=lN>$N+JkKwmb)kg0uvSzh&f6?teqb_K1r=<XmkPwyfq?
z^98-hrPKb;9LrgfIWG$`8RWA3q(=Pn`kY=daZaq6hv1gh-8(go=Py##o9@iRW#xlz
zLR8+8;NM1FfL<GZFq+fsYR?fE9|zjX?h#art-)<1-BB<p>ca8f^5vk)=_)Y~J?XQm
z5^bI#(6_^s9|a`b?`_9t3>|15@<loBuPA*TMBfnrZ>-6VJ>9;~XY;jE;-VmHyQe(I
zlAV{uP*L7pIqQT`*&WWVyfT^=VaZk^K`3?XT2KEwy=HBV;cC9+eDdSt(MRV7Y=mZQ
z<VsVshk9$Zh<%97K{)c+>Tj*_=PVDX9VOX;tTR3YFt@A&B0)xwVpe5o_x3@hg@iNv
zgK+4*IP;-QW?3^VXy!PUWLQ*}r_bL6$ZV&j%DO*1FSyR?2`mBsTs~w`%LmhZi@swY
zl;|ZWMm6$B%o9MohJ5XJFg7nX_>77bl+PJVxIBc<0FUPFzoL~lo1#6t*Nju-isU1p
zA*sQ?cMtt<YFG8DQ)QB6mj%+@UYb@>4XS68#tYNB=<w>bd2&ozC<6Fj>iPxIngR!y
zZ?CoF07>G3&e(9SmO`4>GWR&JocGnz|NI;*6tz7MFe=B{ToOuIeNXK+lsOC4QcG;P
zuG2SMsILRQQoa%;)s-uGGczVQdO$f6^N>l_(74;Tsl>sa^wlu%{QVS~`;6KS%+O5$
zGl2(YY7C5J_yF_b0h$3ubrx#=2E_aM96YJ;B>`N^_$`3^6wFK8jqp|&g`&P}<Z{WQ
zusCY)!*Ij|fqN=^I@Vc;c{I5{eYaQRG}s#(#d_RnJC}9m(pA{E-98K$7+_<t$G?73
zhNMnfH8r4UtNFiu1(i_D?k0M3uI$z-hse9fx`?Z;FsM#djSxBa$300xK%(*Be|05C
znSs&p!7)H&K+pVXT%fwP7Om{0;mKNJss#U1>u{pqv|gV(Eo=A)ziPa=XvhEuB98uQ
z77ZuP%gV7E)V%%6`h0ie^$Gl+7uE(%{nPKv&yl)Md|dCq`d0jX%K#8u`*RdDzC1?D
z#=q>)uC7behHA{#l=(SdKRts_G$K<NW!-ec8CBz2@pLQ?{B@6PTIH6+0X}eD{QVrH
zSWBn8N5+$#L;q|dnm6cr&i3@zm6_((mFS!2Q|wQ!wRK5<yQ9*T3H_1>#Ly@ZW&Y=c
zxw8UQ{)ER}0r6!#<cT|?g89y3`{6u}X++HnYX+I_7JVpZ0JZ-sDR-zVLn=Z^(jw(c
zaeLWi?b^LjTZ!>_B!_cD?i<H1Pa<A$m}i<<YMbFmxj18sAYdb-_LiDYm(jm^ZQLq7
z4sdJKfFyT_D*+5JaYL)JtD&iPiB(lqwdL@ful9Hz&Ia91h>!(xh$z6l>H-NCgp85G
z0H$X{*Kdayh>kn~6HL#aNmjar&BsvB1xU@WH1DBuZ=8L#Xg+>s(XD9JCNxf}c2EHb
zKHwc?Cv5Wh0+rVcXj6HnU+jbtDuV>UXanQd*GPuUSB*7!Kl)(zZGC`U&bKmk?^Gm>
zlCEh0L(XM*c`Fw$>Oj*M&8LX(EC5_$`o2JxCQ$F4{x-~dkQwa6mwA#}I1=9d$v<qU
zizU^tQ`hL&Bhse<czwhuI3DQ1Tgq;^G8MN5T-a3euvzNAB9{|&h!xWT;g{J@E}v7|
z!l{_&LBa?`pr=(e|Cjj}$t#xwsN3RF+gxL}%X&SB$IoV^{Vk`UWI2@-Y@;R63E%OJ
z=@tLI=fvW`w5EZVJgWR4D6?}6t$=Y;7eiUjp9U_@pXT}@*V;?vdCQF(9}Fq8pVYVa
zJ~_GLA<o8OYB5kQ60{H)+^wCLj!eFzZdH{ES*peP|NVm-OBS`h)b#kvS;-R~SIq1X
zAy^;7V0~N#H4F==VaOCZlsi?wJxsTN24^iz%Q@KZ6iJmImz3X0_D0Ct+q$bS^fUd+
zo=ag9QW9P)vHvty5<_|Yh1x^|M#pS^ZWzISTI!Nh$40I+GjlA5k^lh!gey4y))eqM
z0M=!AB4$>=#PsMoIf}u9Ij2gYUJlh#W(p`u^<bEdQz$aO?xZJB!kSq00;L}>U_gBj
zRXPmOdf-^U^=1Ms?Y(c2^!<7!`c?&V&fK7}G5#pB#b?YxdGvKlS301q<=e5bhO!!&
zT9CgYue_{-T~eTne{CMRCy_$fJMMOo*J|doKhKFN6hwX*xfXF`M%-l0GQkx~H<j5@
z6bBWjP+grk(*Ob`nVGhVvo=46Id;k7y;l(FomPj3T5U(5bjYJP71y7Ztxh)JR2urN
zS<k=}RiZH_8Y*r;XJp81OPhbMkIjD8xdb$G+F*>3#NhU}XB0kweuQyU_E&gog`2;P
zHpva$OfQwGmyyV0N~kZqBOr;9MPeaRGDNj%xKW_=^-+g`shbmL4dlNQYW%{@V3kZ4
zi8n-yLlAm+Q}X~|-T4_fSr|^L<h5k{xZx<c_NmZER90R)dt1gNR>yMWSYg}DEMyy9
z6p9#C!x<d?A3H)9J?&7_u;Yd!h`L)Cim52F8&L$;+BdUBi)KFw>c!qk8{lVq|2gE{
zn{I&YcgNtNyL5uuIbM+~aao3HxBO;%fozx!_%ZGp^1~$1X7#-vC%4~ukdXDEhlrP&
zALH{ukR-5mMW@Krf+*)jt4P4AV)flrE^E|hk(amTuC4UPhsiROuKu_?CU?JVTGk31
zX#NWEdTr2HlK?_;VCo6dRpq!^b|OGBNZawVWP|HH&D)zER#D%_-E3x#^k_zcPhBge
z{x<wJkcQb{cMLO?mL=~nz(Tsz{7Ht9$97Y{)2;5*AiZVoC7WN-1gM_t_G$a)H~R8H
z4SEiM+GFX2u&j^?C6w=y6L)r*d(uQ~#d%zTb-L5m1;bLD9NuPb;;7G6C*sR2zWCs~
zgKR}&07NYD8SzSAe7X*8m)(mlZl{@KC2?liH@b0QkibQN24x#4+4n>5ASn}0SE3VK
ze<@mF-PZ&wZSZM=CUc7;zzq2D>T4VpMWsSU0ZH1$JPR_mquPEd((oWqEfgUn3A4%k
zaH}Fi#zF$qTVL430#WgfI3L=j)`x1rnMsMijIFPt@hX*}GlfqbASx97mj-{Z(y#qU
z=SewWjy~lchbsU3IQ_r?9`aV1I7CN|tLa{9B+ER^Jj=NbErfm@%a@V6^h2^6klmw{
zqMGvT*rlCk%A}&6J-Esqde>|2Zmkqh*#~_4!L?|#E+BSApPdDO=4KjG@iel_e5KCL
ze<S6WmX_M8in}Y~G*D?ciX3<(a;fz=gsS%Y_evClg{KFBXP(we$x_EVQAi@L(eih<
zs?whlMYN`$)3{Ut@UJi@w_sx$hC$J%+IQ+A1%z#Ll`iq&*QsbQJrYa+N$L&X@9o+h
zn8HcdTM2wac?VumuXoOaOzr&Q_JBk{V8oXCp3sd3%J+>!v=CwNXYOFsMrOurHv}J1
zqKr##Ra4n{qj5WYw8H#j`!&P2T;elEB0Pw<Mm0sao!3-|?NgQc2DBG9S07f$tVw_1
zGj{+uAj=D(TU^gETT~l(yq_+I%fTUgzAH;_KnTJ8v7o#URe4cv6Ly7xNvZp{1we7R
z0eBeBpgC1~jtu95m4eLdoxN#Ju#_SWtjy1`LdJHdc2C`Q=%a+UHZp6U4zPybtxW^G
z;nsg3x$vyoQ#ZAw@0ej1*YCX3mO;Rb0Z=IuQCBE9Il5k&nrEB6jTp*h2x2A3j0IYS
zs1i~fL204bL5Ka;F=>rszZ-#y0pH$nZ#*H>8&yD@z?j7<UK$|rcT{;hDp}C?W+q40
z&GQd;>q6YbbT<%n#d(09voI)7H;NAuIJ_5iYf=yMnZs6?RO$KHi~H|(JFK(893bmS
zW(OT-HIlPwYb>|#&XACq0(kqs(HP#j<)cpm;8_B%D*?tJyFM9}VJqRm|8=R&+ZPsH
zNgNOelF_rxO?*V;3E9HQD1g@rhTQq}3p!n8P*=s$`;w}VoZ}7an$yzlSb3=EGij*@
z^1EwVeQdvM51pf`w7WOPw{2l!?kXG3R0+j|VPFayk^IdS!}B}zM%x*mPJ52UG1gg%
zregU~aC{i8L|~_>HyKUc)zR1@@O^yC?P>EXp`Elnej>N-`V!paYYI%z9vr8WAXmZ2
zG=*}{ZyrncmE?JC<Q>R$=!QwGSs9HON20P6d3oKH1~IyD1}1Hl<f{RBYlB91Kc@4X
zeUg5Zht^a7{@B>Li+)Y@)e)Wn?BM@tlnO}ibsPLOYgptn<%G3+d<U(fuE?xkf9MVP
zVWvFw1Qc_ND@Lsg;ZNyUyZeXS`lhLaZVluDeTTO2sscCpaU*5NkSkBUOZjJ!NPC^J
zSxH1#+L`LL2u1-4&RXh!(t7*`_EK|jart)KIC6V4+7=E`+T{gbQb(aDH)gNep%*up
zBiN^!ZC{MLd;T?Mexm$obq=XK9%$;>Nz;O6gxRw~zB+ilm6U7ZEzEjBru!)H>e@oJ
z+Z@y2S0qW3oaB`ecUr-6ic=K)Jb>o=vkYj&uoB#~wgf;pmKKN`t{G>aINa4-oA8F`
zr-<@7?O-8!+~Z`D*RDK@5oD#Z1egzw{I~QYD?a%dF%}(x2(RoN7qzk7nh*PYTz2E+
znh3e-TWF>EsA|h8vhzA7a6aJv2c|pf=Wnb_dFx~A8C)VJdh3h-*ruykQ-&}QC(N<{
z?NblqXgx*A0cfKqHpg=4ly+Q{KP#hlpDN>vv1w%!DN$bGl=<oH;#Ny&RO;H>PxHA&
zO*!WZLQ+{F^n82IJ#1W0Is$bgX)a$La>j9HT2H_B99PT>v+auRF}qVoF&4E_Ydr4$
z6h@DOSi5piurjH_thS(d9rT{wo=m+~!vWbHs10Qyb8i%4=rPWq@*g}I6vBOP@<x?!
zlg1bK@%5oHS^JofKgh2%QSaB1RkyY^HcYkazHw@oZ#^D0i}tmM79HqndQJZ>t1(%c
z*;0M{<G$GYm{?+8WrO<T*Tl?%-xnc><bQ~ZJ_snXqhh9MN&M|DxdJ#&F;o^5m>w4)
zmQDk{_YqW}llhQ*P18@^DT8serTI5eDy=c~L)9>RfBf4GukCW9Xe#@u^hd+A)C5@<
zEj{&udHuim9#xJF%Lj5@fu`<O$p%NDoDz)HMCh-LuIqz&wD0wsd>a-4z_x=;`;6kZ
zfb)k%p@S7%Th1;`Pg|(OX?n+(<YpWlc`DM_0h7f<BXzcT*YD_dVL;oP*dDhAW~pnv
zr|iES{un#boZPGr@ZvkZG8)-=DJA!JhGO8~3ZPT-3N0%S9|*-X(!Q=ZjxTy_Jpvy;
zA+1^DL4YBXk)gDM+u-Bjt{dv6)^Fo(0DN&mAExbqjm9_+y;7_83m_)VD~x}A@L3Z~
zJy>3k1!~EL|8X*h>lh+xcsEFuBb>{xBN?{NIt5z}#x+f=a*=HZ_)|gnXydEHQDAgE
z<XmBP_Z4Uda6YsDr2Uv2cTf1SeJaWw)UR}}9w^4?Gk|C*AEE*b`n(Lw>o-juYeY_b
zxaki;8W0O$K$5pa4}ZnC3}k4?p3|CCmQ8SPI@N+@g3WwGT>RnDKOMjos4EqAoh%%t
z!dLG_o0kW2T+-t6!=RXz{pH@`i`#@#EP2Q%<=hQ*k^kJh!zfL|W?1q<3NK=C+VNam
z>e^iIF}BoR3i{#lO1m3IK$8eECiCN?^fkXxC0!egY10cUOaeyKX3o=tI6l)a)oqpR
zy3=Z@Mxq(%XhO^UmLU>rsPFCoYR`tTYv9H_@RP0FnXogt)8TPi>R7piwcj9Ne10mr
zU}>Dnq>MbBkSuYy!n#Ip^!?8_UWDb(eOl#}mlFpU8hf1#%gwWVB5X2u3+cfbg-cQY
zr#-;~+Z(@8^`c7S%jrw*m1q0=-!WNcqfFZ`emE~lrUL`j<r_;f=dXy9j;q=_ZXgT|
z3)|Y;sr29x!36kFXCYuDTEDC1XmdD}puOlHvDlHbp}KT`#S`lT?Rp1#Q$C|L-sxRN
z4)ads0&_uDR--v4#>^9XVBQ$Rp@B0V|HCWwI<Ntj<9liXzpA7^_7>x0?9h3M^YdPB
z=bo*7?>E5cT9Y`wpYiB%&Y7DAX5aX6m9Hl_u6!}&*xer2N}n2JOr_D9`0~alzffOH
zG1I|nM3ASxyOB$!pVvF-{RwZbl@+w~L%_8{18l<5_}QKCiQ~0Vq~B^P(%WbxeGuE)
zZ_ZeBSyEDILPlSj1&CXp|BG_b9%A$H$I0YFktgqN_qa^)xVud912^#gOG{~}tl)kz
z3eGk)b@jr~x1sU<^BEQkV_bB?FA9mv6BElEz8+eOY~!=l>Pm$~^t!1V#^HPo{(Q*~
z|6xiO|3_lrzf>ENK5kz$rjZW@hb4A^)v7IOJq(eIQbF<Ht0qp6_*Isnfb8=A{l8N8
z0i0CP_F#%z%(w2r7ncs}%+!WGY>{?jkDDhoBzP2_!M~COz)}9c)+ib@xT`KXR((Of
z6P)0(ay;@ah&2Zl5V-Wel#7XbvOclhpJL5!oP<@mO)U?lG)==S>+EB!=EHHf(1Q=w
z-qxXJZyyRQg0uyMfrmKgH~)y7_`BEe|1VAd`^e}%ByaRO_ue;Z+;ed}b9ftjYMLU&
z;2jFS+EtL*@t4<j7oOj57ZiK)^lftS_arf&D#b4+B^qhrGT`YGfvo~eGXIw>8>ckV
zZ2*_B^^LlQ4q(n6gYJ(P<G(-79`Dj!k`mDH;;&y|A-kWP5{h{Ge`m|TI&c0R9SRCT
zNV_9~(N$gFrcJ-prYgc;x$jT0F>$<$UMJ#LMFUcVdWP_ZQM?h+fW>cNC3Z*PZvVHH
z^q)Tw52js_hRHr0J<nZQezw!GL6%a9m~8Z3XaXq?m~{Rw_vhT->ZZSI#BBIUa$e>{
zKZS2U`>Qp@0(-Dl^CZOQG=dQBS?ba;it!!ei1S*FO>S`0O13IEnBa5u+K4?Te#{fq
zUrJ6x!6zsvI7Ac{5)us%_dnElivRAR^!Fz!?kV#me|L;uvGG`0)vxXbFdlJx8+-B-
z3U0CN^380|ibJu-3muN<QC7Z&K)Y26@-=XQq<=a*|EqJ~KUMEvq$|~C(PvtwC~f!0
zbB_%lzlC%Y|CKTjM|uVeT<WiW4=kb~pOhb)?LX}Y!?l*LBL~Nk@mAMBFb8nE1&ZkZ
zsXOLzo8|~?94jn#gy+@q?UNK2ROnBT=&{ddnz4&=sAgnl=F!jtcWU4a1q8c)J1ucJ
zC_~c!F0XJ=R)X^sD+S+QHhSy(8s{1D^{@2D;a{T=>5lPc#^(xo7{2X2YVM<NPd$?%
z-7EjigZS@w#g^j)6#;#%8lhi}N{DY@Bs|ZXZ(F1|tXw6Hxdd#!p1=A4=d%GSPlpy?
z?(N~H+$Z4YSR{MBVso@w6qtbl;nM%!c~QO(ELQVlo_QzmY5(5Q;Nj3(zUO$j4COxC
z<M7OvWs9!*KM&}CbAb3mbh)^ieRI28Gbrm&>>Tl-SG1eNctYt0cz{Gcfp%=jXih9&
zq;ph1IRz6pP@)YHG0FPkCPzTZE|2;jOIStvx&DOan81yuNnY?|*#l*!xdIzsrsNV$
zZ4T$yZ?zFmz3ket+&>i@`KEo?6SnOEJhA_3FBg*reK(AkX=09h^V%J}8qV2nG*0ri
zH+?Anf9!o{Sd&@T?u-@1LJ<%VkkF(z=>nsKCQZ6XlP<jp0Yb4L9g*Ha1*8c`O9+85
zQiV{Y*AS_pCe+a3JfO}v@60#f`}17aIscR^dp~=xw%1yF?R7txLaS<Sg+;tCpVdn#
zU5bpN-UYN}V~NeH>hJ_DI(Vw@-{tr7#$<O~LA2{mDfghC{Fyxu6_m-7#F=_VYR0Hy
z9DQtHn%?I^C*EiS2_8+8_OCo?)c2C$)XHH83sWPfgL+Z3o1Ir96>%@mPB(MZDqB1W
z2g?b7ybAso$)`6&x$5w~@7eR@*ayHdAWFt_2<?0+8os{th?x1##*{kFrOB**(sSM7
z-W92c*F{9RT7UT@4-O;U!h@s2V-`W+sj|WUB4TD%WQqqpZXw$KBD(qT$f#?bP04ln
zoehdhxXCQ&qOFp8Z9bOg1%h*-zv!ruG!-XVG|<u8aa0TdKLkL{{!QJ?tU9ud;s><B
zp)vDI<c}v*O#7_OvWaUe-NIHChSgJJ8HGn(v4!mb>@A~ze?`n>6-dqj0hAR8SO3kD
zkqOlY#{$hLk3jAJ&F}{&nSxt^8euoU9{$@S@`g5k(DWrxH}IPH2(p7y`v!{!!L2P(
zfP#kRxP1!s(JPjJRGx1`0blZeQByOkwrf%Omf$QxQ*ms$^4tza5CBv7-xrpObk;Xs
zggwZIi<*G*H+-sngor?s+Wi0Za~;N&+?_r$CixYSI!sE8cGWsmQR!g`>I!=tG`zr8
zjyZAd8x4Qz9Q{2+WU`uBe5t(JFyN*WE1(0mW#kgh2#eV~d&rCH;az~B@0TA#1pu&O
zI!qzn830C7JOGh-JSWM&%-OcBy!sg@qohMA&*HPxOQ890b^>(Q-ST{|Z9~J{N8fPG
ziE6;9j)>}a%d0Aik^I)J=iknjyKQZ?INp|hLg#&QB}Ut7eX6M8=GHYM>U@rE01@!N
zVBCQeL?am`q{=Dd01Lj7Q#83gCA!x8m=p5t-8Bi*KQxs89-0LtCdF8HXN@n!WJLq$
zgGH0Q^D#rVx8nZ0b;tX%HxOh(-qVGg5;%>mA*dyo=kUz}#3zf=EjH$vY>rG2FmK9z
z4X)_~o>3q7aRu-|{@F()5fG{^RF8uir`?QG^-yIAUViyYAlZ!Cf1zw;N2q;CI}5yd
zyQ`;!^A#9vs*UW|q>5EyO$Ku2A?^47t2xB?^TU%7`gm`FJ4PmoM{|H#PJOhg#p~W_
zGy2w;>U$p@emk%&Q{3KgE@cLQdqK+Pm#+I^06;LX0POdVOe9$ufZ9$q$FK?S_4<@b
zer_cE7ZL9nD?}<Dl~Mc`!_W)TeB8s&p(km`*=zUq0Czh(w)^>iAVL2T1u|Jp*EK%b
zempCfw{2LhEo1}E-}kA05^2Ok!-pW?3aF!in?rU$+I5elo>}2lY+@qN5FS|gk<{Op
z%c7Ue0$%P@T<_Md1L3s}?b0>x*?el~)Y>z2z*JS(V^L}3Ei8ZC$H9c9SKbIHZ%kV4
zo09iS>)J}wurppTVzWu;-auMk{dq%PDoRQk>|#KJ*Zc!Guo+Er08RsFMEw(-#`n9l
zyKSu{S~M(+OL>~xbBXrPnl6C+OmAt9@ZnnL+-UxDUc_ynr|gc&DnRlGy+fe{Z-9({
zymD;#&}M=#nXeJl$S)VN20tJ4I6PE~rZTv+0O{oanf-sF!+iIS%;b4<Orm~`>2FEn
z1KytA-VrmWE`Wu_Ntz_z&{%`r+ledK!Q49alPLuH*mGoC9YGrXp+r$`G`#2qUq4-@
zGXvD!&9r3?mXaRiZ5USjh^(q3oV%n3<hnuKzzclK-dqjNBijwsn|ueQVFGOTKTW9$
zeWlz3&$$=pF>_IoY(Va=qW5|jBHDYg+E4W2ujDp;`8wf>#(zYFf8Ur0|D3@@H@)WO
z^ttyahG;h8c)A{?<;uLpe$h3c`uUFo0cf`#t6BEb9p~M)rtPqV=^k?be4DTQp$d$a
zZEQtz+PmAQ=0sfz4Xf?<I`#jZ9ue7gS}c2*InEn85Hesi06Y@uyB+gk#6`Onc{=d;
ztoqi}`Q0DjG=CWO37=uhZTl(Lyp3vMc_tgPTit1VY>I?)cC1U9Reo?%pgZ-ytX-wP
zuRw4iQi@_3tE8Eo=6-^rL6IdOYlg8sT1JGSm*Dm63#c1tFlqrbxj5#;*77)jqz$yu
zA^9IT@zOkp_p`xCzqt9%rh65{{!m3S<^o$8Mm}tWiRtWPpqKI=r{q8I@fjNE1d^34
zIi0S@4)9W7=tQ_q14`K2JbG`V({xYL?)!0c>?ZsKr1LG#B3bb$GOpny)uVq6GwFz%
zUo!9Ob=ui7qjF&WU^XpN6W^N86SNUj$NH}_KC!fiV$w-pD7|l+Z+BMT>6&B>iBd&+
zWP<4KAt#*&eGlU+AAtM-TKBiJLIV({Ui+V|fD`L}tByW=GPitxl|2u@M2(fIe4t~<
zm^b6Lvg(r{SL%MqfzW)4SOP46ks-&?aZAoDe{A_p>jRZ6EWY(81=Q$oayk)VSeeKh
z5(ZHmDW1uHs=YzG5cylT!A8<m;hp)R4pNI5Mkouw`2+rG0M74UNbO0P02KK5jl5DE
zNbIB7o4F#q^SO24w^mgZhoIp8#TT^QGA?O*WrTn#d2PRM$I!QP`54pb7+dgrgdZ&G
zJhw_E?mhqf=tQW)rWF;P%Q_Ky`7Dd7;o0*&BYj>>cOLpnD7@dVQdUc=xtY+jMiff=
zSE(K#4agM2@wM<RXlCo}UGv&2K)7xypVQ1X`k=06f>UX@b)8bh1=7hy*;f&LMt$f8
z7ySB>RS~}kG^GE-jr<4sIHd>li|m>ObVl4mLe<YGf%7C=VGIt*8-1pj^`1lcZOy0#
z5#JQ)clT3(w3PkUL)=SGoAn)*Z6`vupxKVRe$7Vk9uyy4m44+_#r_8f@IcJ$r{u!l
zMIjU6I-P%>)|$^SdNPOaGZvtCcc*0E<IDjlU))D{PK#8rTCAjr;^$zH0L-%?Z()`D
zePz8seMvo*;3IISu`-^qJr;82;Qa|qxFyoE2T$obfhApSUZoPW?Y&7W?NfPPsdpE^
zCe8)=^`{^C&woXj`mPuP=T-9JT^CbT9#qRpU#n6{-}5dy<(|sDVWJ#c#ixFMVExW=
z?%tDd?T!lysj#9q6T=!}@nS{6_W(ap>siqlno|40d0)HGz2ePNw9;l-;ZMl;aseFR
zZ+`gS75VC?yfPZg&%GBZcKWpu3yr7pwo@IvC8)v$C(hhG`#ebc`TfZT?WYg5>ja9o
zw8OO>XqfqYMAQN=F*0S!TSe0J0&uq9;^e>E+w*nV>s+NzR70y}wjjd8x!pZooW?h9
zxOi7BI8_i`G#3zJUMp@t#h!nc1D81Egkr^sXnKkrqBd1H|Bf7^!0ZNq+xACN<nNZY
z$axy@n>KI^h{Ju_qyf?HBS0g$QCYC}cv*>{#h^2-xLM@|MzxwQCfUHxl`fM<Sdt9@
zD8=7}LT~WnLSl8VLzK2t=fZWbGC*d3WYPY<))u~;PNQh2rUO=Y<6yl3>FyxXc_|R6
z&xcnneNRj?@PZ|H)k+}E=<eO;hSi=Lhdc_vX9ND>v#<A@b-**cSoVv?%CW8L%@$$Q
zy~q#grr_qAv|<(k;ea6D3%W@6KJ^F^4dtVM=<q+!^csj*rRi6KdLJ`3YbdgnJlqvS
zEWCWMor``<#Vs!p3_w+dcn0Jx0^ReNfrj;Q1$t4o=K#<)AbR_oNsDIGe3c&4L?4|s
zq1D9+(jdTXn+86LzMCp@WVTp-{Z`N?QPts8cuk^igtvSHvlt-v`Y`*XW7M|e&1U`M
zW<NerEgfBJ1yixwN-^?Pq-Pov)>bsv5T1E}4|oeI^l<FJ@56<ww+zo*q-A??=5jmR
z-Dtn^3&LZ7DgJx}dOgt)QVO(t7YADK9*jf)=x`xFqr?3;fW1!l*cXnvK0whT?*bIb
z@sYL_7fvz>H|8~o+}H9BH{jlHZjZk+`M&i{Nle_yW|jC)lkDg=@ioi2?(E+7gOz5+
zQm-{DahHhz!|~c;z{Uco)_=3Hihh-;emdQ}@6o4iA9iMcLc2;YMYogE6eoFT@ETQd
zC-7-OQqt2q78n6X;blprB6dAAb|VFL1ok(z{Pu-w@R1wVODg3vNOa#AZtvb`2Esed
zA8juHus#4%?`oJYcqa?}c-vw7+7Jo=BEX`QVMo#%>-}~FGKk{c_pR{hvAfMo!SSQI
z=V%zv0ZcAT5rP@G^RQ;CqI$oNY`c2*!L&8tt8io+=Mtf<Q0#>`1(R(xJgWFbK>2<!
zc}V3CXYlyLWaf8(ZpwS+d9*vpqwZKb*Uf$U-rQqJ(G&_kB+(LD*Lej7o&H|a`t75^
zC8?4bY)(EB_tQK-9exG8vU?oDDW4+!Zt_)Q6*|%-iw|{zURMKU#21e=@py|34~mSb
z#G&}-I~mC1<ymdCAxK@RY6r<C&VP4tzs>%AKp+ql{yF>`naIp;{{Nr;-%NpEK3C!W
zP(ul*Zp|Seyw?bgKtr#4-c<+9eBZ<X;G+*vfoS)XQVNKQ5-O9^c~jU~TN{EHbqV`#
zA((8`ku3d=w3pG#Oc9N#h>CKZUS-{nH2p(1woU*9_?-^aJxxl(vb1iqA^&!pviV|j
z<WyR@|6$zc_iwv#{RX|eK){%{LPSkl(T<4S?^es`KD^5IU5f5rc!7&I8d$=`(*mt~
zH(n_!z#QZB2{r7pCr)IUv?q5L>+&Si2)*k2*c4&uoulUZcv61<Evxv`&Al&@3yK8b
zg$B_t2f)`1C)to)=p}}loB%BBu|7SZOgHe*P){?k0=jVy2!ZyY%WuHa>#v{GZ0ODz
zR^4*{#OPS9Q8nsa5RM>7i<dy*2V|6Ir-<pmbPt_t<`RDUvC)2Djif~*ojgJy{THKZ
zxkxUMslFX0MOHICBv;gaV8l_&1F<Bs{pq3^VpyWr+p$K+uX36io@gm`3D$VCPug<t
z^`dc6>WAw>fiwc0ClNI`fFsm~PCKlxzo|X|R`YQYF>S!(;RyJI*QPw~VvNW+_5nDy
zY>3mGMp5dX^ICfn_NvsQB*DNDqs@r1ed0*A^-yVdnZ5W69xjX{R}3QE(Q%kD*wUO{
z%x_En5CMg_8-}<6t+%!Aaqv`*tt;R7!FM~Cnoge0N_t!zCex#1fZ~|=cO2P!G1sEJ
zH=-G)(FLNMt?XmfZk#&NCi%K?85gghck?t^=k(u)KS6EiQoXi16@<n{N;BIrKy~}e
z9h`#g7@=yq(tEKN@-<ccDmQdDRK=<c#r300F77P3>Tr{yuWJ>h?pWzzXD!jKb;Y&u
z>*crh-?B;k^ZNEXc(CtIbgQcp68a*`V`>?_<b8$fgd<@IwGU;OWOVbRy&S#3L#3s;
z_o(zAW`}YMC<32o@Unwv9J3pdb{}E~zRT0GCErX|Wo+5{xhYwgwL*<vN#M&1_xaDT
zhZR|nB*E2v9(XRfEQz9?G@e^eW)7rxxcNfBZ&;^$>`?w49>u;!Cxw3{X<-7i_oG`M
zna&rJ-nAQux1r+7KR-5<hMlEmfo~osUlvqrPf>iAmlEoMh0#?AEiQgQW+j!bg9j2r
zO7Q2&w8L<u3GpUHKY06G;_~7vH?$U~t~Suw_Yd+*(MO34eBcNYM2SbNI;TmL%F;yj
zOA|kQW;X&$FR-oJ=$Y?TBMo<!B}0k~WR$@Y_mQySGy5J0&R6QLOT&V|$-w&0^sMRN
zu_L#skLg5?kGft)Y>mT#8V=2u=jU&Kl<eR!e|myhQ+NGh2sy`*cta&X4*B|8HAx!a
z2ny`g5qAJdp!4l=zSDi5db)9I%+$nLtW}ueP2}LWZ(pwKeIn12@Oeo}og=&at9K9I
zvme_1p>ab3ZZAX8vgL-xur9rDDg|dLQE}$3{f-xd-;N{apxX&-2#!6HJ=&;MCgy04
z|8bVK;8=B_Kh^&gKmEq2JQT;Wl}KwnAWxT!zz=r^%V@Ew7<=rZ{FWC4u{RDG0#Tqi
zzA3=<jH%%Y%QMW;%6qjnYrpiAN~~>Kl_5hk=H$F-q1;L$jf+jmk0;(chHI2@AX^S%
z9&|l;0lJ~tSoA2;Oka8N*4&#LB+s9M<h%)rl!>c*#k*~(k&uo}KX;VrFk!~K$aKa5
zCq>BXB*d!N7_-H+Sm?lqdr7W*7fFrUTn=n0P1MZ(qFI@plUrS+QIJ347Y|t($uCRs
z_dwlYg$9x`&hA_BCQ-q$;9MppaQ=-L*?piQeoX=bt6-Traqav<-EZLJje3&@Eq(BZ
zb0*&UbHY-j<^x1nXVI*qza%jLm?yNz$mnXF^R!(<XKQFUFL3iAnC+FM!WN^0vDIR}
z|J|Vg@4tKRgEj^yuT7E`Zp}03t|p}Gy0#a-EU|-*q;nnEUX}xA;SAs&eqZO8c@B+0
zniOvXS;+IAt6bWUWd&_Gb~o&Z*qHIryT?X6?r937`BKT4^v<d0z1k?EMqdbe5L-Ny
zRaWby)gg^#%h-SMd@$Cn1Afjr)ecf&V^_lk&SK(uI7mljN>U$J?81j{scD&QFsZOy
z_f~v=i|>ed!mSB`#!bEN<=^};&^vMwJMk$ZWrvd61tJG+ZVq)xSon%{x*l1IbN{A8
z+Z?t+GE!pJ!0)4%8?>;FX3zUsIMk){ZBQMYn>^3&b<117Tri8^>87^id49nF|1<qL
zHd^d#mZhj?FPrP#w)N-41xz_&w;}UJX|y#A(H!jq5M-v85M6J1$i)WE>zJ{v-8VDs
z(M3^x4sKZF#BN}7cT(-ETa*kj*)T~1c<FAW_%Q9^<w(&h1*#Fh{jl{LVGkz_9FrHB
zi}L%puz>pQ++hpac}pFY=sj5GGFjdvo{Jvy7IB<<zhzl!9C7(!r@TT{p0`b5R}>Xa
zw5XCza?*zpW<SPGOf$pNCF^As2xkt+3TAKb*c#uiDsZ4f!j-L&wYi@gU%+=Gc}sVz
zo|GU*;L26Hx<Q5RT*zWO8a-O<K(-s=MsKOys@Ge@LX`y56#mjuOeESY!u4f!x!cmi
zkqXDOu-ZV~e$T(IJ$aKy^d6BlXvPN}k#;#DV|-sTX-!VAT3LkfLJr%!8$Z;~8t1b2
zdMln4)OT4>y!Uc;aKMh2`q~Wfw=>AhyHTvNZ+0%t_4XA~ZQoCLcVf7U_*-)a{s1qo
znmlOKp3M3(o6N(1ZKl82rUz^~Q0(PKH!O~kj63wbU(i4O(%jwZSR_ms+s~aXG#Gl(
z%;=<b_R`0`p7%pUOY~xyx=e-dU`HCv4I^P7WBsaT^Xm%__2x?)q(oWE+ZjWe<5<ff
zx|Ja3a@%=rJ@Vot0Sv?K@vZQc`C<bp->Rjd(#9stlT1oRQgP-yl%EN9nS+NHRvI0B
zMz0@SC?b5~<#*}p<(rRo8rt<aE8<`a5w+8GuD8bU2}1My*Wx{#c3*jz1l{UKWnQ!&
z%HQ!tQ$)?5O}ajB4BlBzvaVAu0NW^qs4|H0+pLv|r%50pYIGZ}`kRbZ6hzpM^cUXo
zT8L5@{$01wVUkc>?u&6O@zwL-OEq#2D?Dh=!0bb>du362u~pb5kSJV*`8end6v48T
zY1moBEfE^b$Q&c+$O>-3-UQCjGG14OF+=hpyNq|6;6`_P*MgZ_g?8FS4d#G%tJ-0|
zoQip3gF?}kMdFuwyV%BD%N$Hf>cruBWQiOlmR+EcYUj5OM&+MFPHX=Tg*z5*Z`oj4
z@k^sEc&_>3Hwh;T^2G&m?Px}-AKd}%chZTp#m(h$;%D6rsQEkwR8WNwQ@JefJzw8?
z-0$g9y44V;c3k$gTZ}X$eLoyIFjJHhVsx2@58vI0cj)I97@0#6)9jlwiYhv*Ha>P1
zEvDN81Tad#IDhs*hZ%dxfi#WS4ajZAum`%*rB&tSH*~9=GF0cWG8~zFv!g>I)Ko)(
zS0@PzVWIXaNRK$doty+?Cl7O(vIQr;RLqx7kwZcs@YizU66H8aeSEP4CueD&5mJI`
zG)!?5MtF1<pqPjG;gqwfD6y=xcD-~wC(T$q^KhfM!-lr0g4@h88wMGHmD`}CX}1$-
zS<3=1RYafMHM-7EYBLq5H+-_05f@)vAJr*-nZZ9b0<~kiyVa*R>S~C<XK3AIZX>y%
zEdQ!pmC<kTn1EgakLyPfA%Yp}hpns$gY@mm!}L7K>_(I|jy(#D2>GF`bU3vNIG=#k
z19jh7b9u(EI+UW#fVL1kvf;pORgy}4P7B=7F(oWC_4N}IFu1B#)>`sQp~BKKPeSbA
za~k8<!P)~YETD0V>aunX;ts*j&Mkw%itzyJCUQ7rU0^Y4j{j&%oGA92rg-es@BQKP
zETad0QE;saAfsJa=wjiGOsB)13af!l0VE7EzE~v<TiMjpX`LmMJ7pY;U_{%io$H~B
zxpll+LF08r1oK9{&5xqB8}tcX95;7w*;#e&@8Lu?^K#CwM$8xZuGg)J?3O5`QA+B3
z(lN2Wzh>p=pP3{ZSa~94=$9Di#uGItvEk0m8(4Nf5gU65L*H=wL$mjap0%=;=h*kg
zY8=;Pt5%ib$EvTEyNuly^-WBA{Cnxkx%i3#HS#=^ze$MV*>=*vSVU}%sTcP*8Xc2L
zUz!cOdZ!-V7M^t<oPQBzi5DWwnG%~A5ANgj?g=LX9@r9lOz_lFk%$7qSM$8hNrQx9
z<gBQaT`p}+J}4S{%Hg*KT_qRpu#!tlcG@iBS3DHZ)M__(cI9fzYewLb<RSX<5V*s_
zs(1d~l-lMHJ7bIUhsJZmGwq||c~<-`spbd99myhj>$eZE1mz&{W}!=-Kqop;2qEz!
zVxb$8QW=bBGSYL2pivN$@s7+|Fn}pa=h(!=uFwk8!0%keRM-U2`lln)trdzoXOaML
zE^>(;0-_nlqd(Dl;H55;=BkfO1!pCSovST?+oSjh)01q~V+NqY#@qENlnPpy`XF)M
z_J$hsbrdb?oQzP2;=yfy)va)E%U)&rVfKXjKcxzA5W1!ec*BFWF{o+eaJdqZ2Hdu*
z$pY##E2WC6c0;`GFP{5!vG$s)JYQ^ZFTBo$3vF+@Q{*&5yfZ)AqN|d=xVrsL)EH80
z-HLN*N*8W3uIpYhaf1XA@z>*<N#!I`4@kN;J?88$Uv~?aavm)y8buV_4Y+C)Puvb5
zjqisp(wRVnbV6lz+Zc9dL`O@ZhV?76HEEQ!`dXrsq2?h_M#u+@iS`s{zU0GOVUS+9
z<8-=uB7$M%>Do5N$iJ=2QI~pP^}01rvYte9jch`P;~Bk0A<njQlspENPQMGE#ny&V
zS{o)`XefGIy<5A&4UsZ+91xike=FB`gNRJ_w7X2_>n_TEQ$T1b&ZLpgE}<}ZYJx2o
z4j$Db(N_C1<wJu_sx7Wf*zFe}1gzlkyHD`3vHjI9zJ|%F0SH-Wf-aYD<h!D28>Vac
zV9PaC!4O4A`Q!0!Qf2woQK-ZdMQ=6VvX6Ul$6EYNnLm)RVO;^MIlsyi<d^dWp!Tl-
zwe#zDM4jG;8~;Y0XA(%hUV6rigsVMeNXt57`ufJyiYZpAnQHj${iv3kG|nCbLu9{4
zp#d%xXR1Gb`dx{rp%YZZ2_`J`Uh*s|<MeaIXJ!6(H*1IIAvr_%2)d;*hY@=$@TkPS
z3nZ#ajgtg5?pbHJ?B-P7%lyzrdx+cXggI1fcS_l9dMw^I{<Va~r0l&TUry3x>Bn?4
zKKJLwMiO|+UKXQl>pP^8x35Q?M~AQ&NsP?T^%x~K?@jZGtWU+*f5MuSs_PYdbdHu;
zhVjq}x28)hsBB*1RqMQ6PmLnlPNeQjLWYNvgd7?y6NZeIhMROl1E@?V;*@z|I!?6?
zP!WfF0WS5a;v()}eqZ%uMRB6kZ;c7Os`dQT>Cg@(AguA2(nfhh?>x+qM2#m^=pD)`
z2z)oJYWR7AvFr3<;AQDxqki6MUN!LQA)^OTf7+$gN;SJOL)1P|%5&nJNUpxu$x|*j
zF`F2qS6Rx;?Y(Ygj3j08rhIplKbuWNc>~<|wofIdCr>L|UzvANfd=9G2IjZg@~Lve
z)Dd&E9qyFPHX+#dWF%!L`)CRcZ+VhzP?ea=X82TseeF3y=v69q(2CEgtSCK0N6CRg
zH#8}Vh{TG!aAF{_KS_W}y!|Q<jV?GJ2oJzn62H7EV`5K#J#|(3%6q_jSJL%VUVM4$
zNp4(RocMUt(ywv0HpRDQNLRWi%-}4>sb3fAcVoOao>-noXODw7m0t)<n)knE>c~Su
zMnu>Rx#`#9cU$bQrV_+(<S&~bhXp(g;&t)rR|yTI=?MEe&s~f4n+Ag3v8t5_BxPzP
zU#IVUY8l2)CZH1o#T!Bh6@(hx^?lae&5@#w1&1jry~-L)b>>(Y%h8eVa%(ajYQNnO
z0(0B<hAg$hbHvzX?Dv*sp{whJ!5HgQM><@mdUbtiiFw+CI<{v>Q3uz%6er}gFWgAI
zZQcLnEzEzQC~Ff38FL%jTH$p}`$7}3dGhS&g?BW3mA}Jy_05nXA0Txk;|$RHi%NBB
zkCn{66vC_47;h6F7#w~&i{GD!uTZYyC5!S@cn_j14h{=uB@yJsTems8C{!;ykO?6e
z2XgjNnesz}3&mwYwXXR~!<C<EBnK|p`rY4qVy2z*3if350S$2pogk@U|ET8$8oh0K
z9pSh3{4_7m4(nNTy$^y^s5$L{u(|vM^u~1xtPjo<mui%5?UUTHnzEcKM&8o-)O$NR
zEY10xTe@f6Ipd`GFFzeYz-bMzcYv9EZWa`xSdrulNIhkaFPBa4##?^NCn1WZbtwj|
zuk=N<awHU_Q-*h0tLof@k|3!;msV!Qf%t52lA3+Svw8pbrU=8N)zwBC!~*%lbg9F$
zYG2Hf#2TI|9BkOBJu=-E5;e~;lkb+zNlo>fk<Ce;IA{`fJO>Z8oKC;J_GDyzJgDfp
z>=&;cDAt{@M39;am|Vgj39e-&o+2Gk2#-)ACzt|!$*TUwnZm?dE$Q0_Uc5dH17Eb%
zJp7q2C7?Fq3sY~mz<l;fY5*aQ=Y#earAc}2tq>0~BP;oxi)TO31pI2n-hN%MAw+*+
z%paRBPPk1YU)Ssg{KIgh^l=oDp(}DN<SZj0crU<de{l#Pycl$=z{G_RG~3jcz6^ay
z&3;B;!Sc75CSGZ>6@as0$c`|@gH-Ya<CzKf=6oHZF5D51!90Z1503!*oS3+@)lyTs
zjdDCpRijUP)9i+&_ffceYke*X$N%Ci*-Yx77Sk=SU)_nBkrE}=#K}mcCADv|<@+!A
z_LM@;LqE|4n^`4x1pgY3Cok5gYoR#KzjJ#H^9!k!=C-x<nyT5F%A`Dg{~VVY<v{J>
zXXbMy!h4QCADAtIDL&{8FxYmuAuxU265uaws-e@~f&b`P$zJqagXQ|^G|7?o??5A0
z&G*v61=v2%O7hiwT72(kB|2&>hAhc&*v1xcS+3hGjj-2|2lAMV7;0M-n1i!UV!RVE
zy)xp4gR1)<7Wr!Iw`_6-fM~wJD4yk)_4y>1rhA-W?!nd^po?Ow!K<uo>ClciVZhP+
zh#Y~H94Iho@W%3M<=If;rZ#tnor@0?uH)mA*E*++wo(l0ioD7iR-GAZcS4bb?h<o!
zf`#2^?p`|8Cc~FmMfMBT(1ElLn_7<<C?0jYr@8A4m_=v=;aDi;i{EUG6t-D>wWiW=
z$*PZk?bN6J3hdr+2vur5qMGzB1?bA%F0B7HI^eT#uAG}_OrSn{Fhelw$!m;W{NYrc
zUOUxp4g}(oqwWRhRAuei9#6;z!?_}Mm4hmKl(pu=T(TEuL~N!|7t3Bhr8VrbT+%dZ
z77`D9ba#}Tz4%~eKrM0AWnu#Vnc03eq1HY{`e1OWc73&R`UC?Z4ZrKk(`gzala4f-
zXlQVC_lqZg$D({oa4iJd>HYZeT^9Efwt%+#bzFyIDR5PUzDf<RL|lhEL2@6D9CbT;
z>wNbG>{_L{!(5^O{`N%BIxQ7Z&^IRQwp&|QKj6C|%705FXC-IwLZOv|JeLE1IO9jh
z_(mh(IBoJ2hmuFlhdK={-5IM+s#y;sUHl!7>A-2m1YC;-XPtkb_89*$XOzSqcS<tg
zuBM@UMo(UhmU=>S;^A&E%mEOCi-&I6z8-z;YNk9u7OTK-4R?>$R}%<o>NH5qsk@_j
zjTR4rgP*7)iE6(dF6JAU)%9U&7K+f09|uqeOV>JQONXuB{=&b~&rl%?z9!WwzC{kH
zW5v39u@Rb$C4+^6&#C)wUKcH6D_Xqvr80`r3dUnF13oQd_i`7Jq_~Ddeq;h;dP*`c
zhTd)_H7t0q=8pT|1*xKxd1vbKTsMda^Qk+<eoM7_dgcX4HHdf=O<=ItIV=_<$t0$I
zb>akiu`pev{bi)(AQ_cmWzxp#Tn>JSv1a)>(y2(9BG88E$_uhrM>gA?zEgq!n%9se
zZ*|)*$N~q01;`)`S4{%V%S4Cz-P*(1OeHgwDgt_z(u%fZF;%9cB7l&I%Yf{1Mxa*D
z!xOraX@w}z!c|a4|I`$wm(I-<S@2bUllcJYZg!jJwe07_8himeqDqdU=h78h37KB?
zsTA^!xkrFoM~>8oK|iDjH5)Z^bDUHBS)X+<$9z1FO(TL8H!BF*;|6$gN?so{y!Sk|
z)PN^f$s8wRQE*N-F3;xfMJ15tsq5}eM!prhkNj9R-hT8`ZKZtNd*)W-v!t=lPrB^R
zRM<K|%BAza%CkjE2R*-eLHX?m^(k?Su{(u5wLNe874)$)?OZR5om8%)CwREa=VMq;
zJv~ht9q?j#R7Kt}+ilA{51i#Jj@(B=hGrcxhJ%$I?Ytr9w5qJDtm*rPn+`YF*wsFy
zNlPvHsr&VJPmDWNeXN1v9>H&4J8@T=CCSx*kR|5&PA=zFh@G_zF%d(>O`0fX-QdhM
z1n+!5I@XM7#%3h3S2tr(YXm%`AuP8f<8qmPd<5MB=RFy_3%|Y+`%Tew<~;f%Mk$Gm
zIX1gY+l-7bXQeD`cMbW09?OfDIOy2r^<KNkg{j59$A}N|YzHc8&ego)b@k7XaDECc
zR+o<>4IT<sbQIBOzN9vK-kK62wm-`}A_ggv+N&t8Vm&2eRMynaAaRr0XeOTDP|z%(
zpl2_<T+XQ)KW5o68JQ3!!x0Z*>A){_bF3@{rWrBa)+K=^p_JD5iG)#`NdMhin+MA+
zvt1sC0@LUbVU}Mxxcx1E;wx7`3*6^Rv@bf~t?E6x-YQifjkt1HS<@@&{^aCK{grGH
zGFwH8s1rno5i2(auZ9D^@t0H`?I0XU0k649nB;JUYU?aq#4)uC$kHwLS~}$-h8}bV
zZ-`BhEVwj`(=L)M0PTh9936T;ds_f)huF(PIqR+k%5=OVys*6<DAggxcMWoK1m?1G
zt*PQe>G;>Cq3aS73t?X4PxVE_kU3a)>ug_3SAp~H6Wnq2jLICK?bbK4P&k1cL@IPA
zaY$%&6>aoz`p9ThS+fzVz4lz#Nw{eRM$cW!JN0WVAGz`{lLTT7*bTZ+C%Le1G9Cav
z4i+^UWZ%HY?WBrgKbDpX8f*<0OmE6eI45*?I1GM`?;b(Ahowl>w<WQRpfHWfHY?8>
z;2@tau}A(n{9|P$Pe7WWJpuGEf)!_0<Tmjjp#$bPqXLnBey@8M9KO7EfNqW`gG%ag
zvnI~$R`JUbg(p&&##SWj&>soulSG!CWdzP}hY6K5AHLOCL%755vvv`J)zC8@2Qw6z
zGv*8T<Rp-~OZD&(6jPTkCPXq4Q0RaZ<cN_&<h>*AhWN|WDJ4H5u&g$=w#1|j_I)|U
zvRX+=Yu;-1M<N8Uy{i=x(*};IHBL!xs~bF<MIWoa8u)EZ#Vl@T95h&6rndzGiSx0c
z$;`d4SwM}ycYBCUIoo>UtlVkQ7b6z>&^s`Do0?a*1>bp!xb&POb%38e-MZACtY16R
zUTCsLeHu2?pVM+jn2t&e(A_q!wwlP>-HuLUqw>bk!lki~OdLg)aSpq!aYes{yZth7
zcCGG=kU(qOsLHik6@5=fHuThTb9aa$UQBJfBh9{!2QH>@!t`m4y@=n|TZ4lL^VFDj
zA<B2{bkpxHK7W=mP7x?|4W<MqI^X@mPNh8m5~O*vNZVVtkvp>-ryZ<#E^0ow9wT{!
z<@eH+N&A-EC}N92W{ku7O}I&K-GE71$$*i8v=%2B_h_`OSJr?EC|ZWyu>aMNaj^2Z
zyI){m)Alq}$pOGsX^>>888FDiNX8tz$GXA8a_p@@+cl97h9jrHdY(}p#|-6X8&F63
zCK@BA%pgT6?&a2z1{1FcZ9<868V)oaBiZHQQ<c@`TNuhRbm<=3!TwFVH-<O3VJo5-
zix&nJt;%hM1@eYu>fAh6<NumtXtW)MkHYnZL}SjH@XL^z9vH`2QR(#TJ`$cY7=xQ5
z=~BZxvqZ>`6w>xrEqo<&RF{U5Qg!`Ed5O}}$VkJ9Ynyak?;}$3gT2F^t`CbIw2vK*
z^Vt(4{cXzppP1gU?}+3p-RwA22lApp0nxk8Vbmfh&;`@VRbhOi6r)X7ou$V_WVkd;
z;j-wwNmfvH(cNZuUqR8`_YQO^5^rjuSRibLosE>?E#6cW+uOtgKv2!WPR6;WP4cNg
zQzJGjmfOyw0wUw_DQN4Lv9V$TA^P`7sEtYPu?ub`2`wtrb90>v1++(u(q<)P8i!*A
z>2M3vK-FFbPt{Lag9LViE6rOZil!fYaK}&i2~M(UU7s?0`;=lc-32{d^JJXQ&@-_;
zo&_X8nP=wF9xDw;ux^ua#EiAn>fzMzDHn?p_Y>NY<c<MjOX&EabRL6IA<u&yaW@L|
zz=q_WGV$w5^9T^;V=i#k{a*SkSjBFLJ><zJd$EZ(%GMAbQ~CQBCU4k|tFXkYvG@jo
zGz}{=2?}DKW2x*6kO<H<ICF93yFFTtbR#VHPT`N_cko>;Ez~rsJ$Zx<yZ5SH>`-Q@
zX3Zb(M_p%i(0p2CqnZ)W+hJB8v~02{TwrNf++?}(#Bd^UY3Xe|4@PLpKw9zmLd(>7
zR_z-9ji|2u8S6Dk2+Unh4hDM)L*;&^cAuN*Z?L#`Lnx5!^}XUb8%y9;3&_TDh8sar
zmXNDfyCWs+EP^{dg%1%IJ4j@&7WqVM>GxF>)VTI)sGYVx&r0j7vWf2);^|%+dPUDc
z|NBOxb6pvGdxx;yhql(#$x$BqguC`imSg9t{WtO9APSH&CwWUokSvzZsc~B@;qv0p
z(y0qp8Cw@OG{qM(pHp2rpo(E1!O%-&VJJg<!>KPb;)%;ji{e)nL$0tFX#>}DWO*=d
z!`ZRPmL7HZuMw|q(g-IDN5DTbXv|IAph3%n?^P>U=p!r2tcEkOTU9BiufW+UgmOk1
zv>=!{6x~YFx^&cLXeirIbxP#GG$mW5Z&cvnTqN;J3;R%q`@&IN?V*lS<9#J=-5ySh
zCtUWQ)`sTz%Rmm+k%W8P<FkZmqKky{?^dJGNM+f)fa`E}P28$fl;Y;?gj!2V{PO<b
z+3=c_F(g5HfJAoLduNm|^t+X63{f*ba%S>5x%{6w`8*D+pmN8!!NFJd+VW^S?}u|0
zHHGVZHRsI-HcD#rJm5jd>kd+M!mg<4Kko$hb2CRzo!*YWOmVENiQ2ULnH^~kvT`%r
zu@2mvrL50_Z{eD2Zy{mup$*@*B4i=INBxq=8-vSGz>sr=C>9_++>h`7$Yt!RJSqlQ
zK+|%vK=apBp_A5QTIvXh6|t!YyX$CXC7&;)U)_T_#LJPe2QFgljxtY%*Fy~n#CLOF
z#-wS5nxyP{fT|gas8Oj*A(LcLw|6IZdwm351CTTIhr6{6_E`axC^Mo~rTx`Ig&QMC
zhm@3TK_E{x${ke+nGkQQ8wM)*kOLpfI!o`gqcftE3|A&(r9l+q<2c}529j2bAhY@y
zK|;ywv7Pjrh6a<tCs2$f7iimUztkfYx!kAcun^7a2zziBY}-A!ZxK(2`{1`}1o4M=
zs&DPZ^R!~QJayj_!n{gePhSc-8Q+w${q>|{QlEyNkq&A=Bc>^&CMHp8!{g8owz>pQ
zdnB+3Bw-*PbrxYWYLym@yx^=2H>(60A-1+u$u~;o&>bYM66a`ws@~gAj(6HgY!}V*
z8DmK3ATJ;DpCV7_hXZl?$Oy;Y%tjXr=tnh9F0XAXd{HjTO9oka%?Iu4;14(83{m8R
zIWFz}-ZySw_53+FtMxcmxyGg=fB4bOIw4U5OloNn-uNuIVb!gT!Id`lf(Z!{6}eP9
zAJ0O5&N6{NV7zr8m@yzvkM$e(_)~j>Pb^rqyAs;l&Rg9PBmcD|aEOZPUG$+$9c3B+
zUbp$^3v5CJ{X)a*p-3q!2xQUOc}A%*U1$`tIn$08=YAFspasKSC&)Vd_#U~?gV1RX
zBVsG3&E&E|ht#W2qU%|$R&G3WUwnjSS92cV^;y!{lsXp!%?NcnbIWn+)KmS-GK+O6
z*HsH-v0F~Vt`&t|J_v*;?<;*df;>xZH4u1__f=)QId6D-YyBs$O?o4XNZ&O&59^dn
zKtIk?Cjn`_b!wx2M*^(SQT{S?h%9i{eUy?s(vkv!16=UMBA7$k&B<DFTxHG2swc2!
z_1*a0e&Z?hx-X@vQ}-afxj%EdoP>w6P`c-H$(c<x@9lSCsg>p4!?)NuOM4mS_#`CT
zrPc<`Q*So3Rkzf5SKYex`pI=Aq3V;JEQQNb)>3<~M<VkytJ;=TCpwP8qNM}#NEhWP
zM0Mq(J1@wh|ISc^OieDpQ1}R{z_Ex0RP&{(V(p|}kkdAhkx=@^&-d>ItH3N>_rY18
zf={TX3~J$0m#ohI3SF;0oMm>Dzcg_I+PEAu{VC9A8=T@dU<9*oyDF;n!Y&it92b9O
z1Z9Lwef%`$Af33B`e?Onv$HH>4Ts3CdQgf6An@c!xP|aF16G%4&1BVgN>fS#*2at=
zV_q=x>3cYP|LJJuOT5;4Og>*9H%G}JAbgNoDB{wyg1gI)VCO(*xqbG9;fq%{XOeCQ
zZ6+NqmN^a~=?iqlb80BnL7j?#sg(nB(uB00u4Dx?k>Am%deC@(!#}PWA}1Dt)AL`m
zgR_hPN#7?p9O!{Xsr{IcE#6nc<0GOz5W&xkBKN0c-X%fo7rwG}=)qr|dgV`?%i(n-
zF`wA=m|L_$kwX^!r>zdOgC%Hdi)r}DNhRIO`?PYB<Kl;lDi%^JCns*Y@};8}83I_w
zTn^ki5zgS#9DKduRjc<zC4)WF{07q0_+7E@CWf-|vdx>TAnc=UW^0=*#FU2gfl3X;
zZ|)Q497Cj+??xM#30hGb`SOP-{xH1xVacmJ%HVwLUzqd=%o5Jpm@HbB(;?9lLQ8T&
zY<Otlr9N$&+Hm=!XAZ`dUx-VC<K36btep3Dw#L1|znuCNd@}yj2tTCAz|4L>Rb1`1
z83Kt=mzuNkve&O33_0P~nH*{2+c*ueiv5}h8E8*mI#oC!1-0*&z07LGw2c#Rvzd8u
zxyl#f+*F(_(br$STVznhEzpzW&PC@kmyI79_3xZ%cLa{WPPYejk((GGpBGWRC<sB(
zP*%Ub^T2e~p(dt*ijT}irlF+8*HPKGBR2{!oe|CuM;5iGX{(;@6_~=RrTcKkYLg7d
z?FKjNW`P@C7jh*!VkW?}qUHr=FbeF`O+GG;7Ref`we+_x5h<TUpdO%3m3d4-w|hX8
z)7}c&A2I>5dCq#$i+$pkF4w~%BQ@~&F8c%vny>(_3|+IjNE=Pk-23e0A|B>Ifo9&>
zGI>}M3mOl`7gPE272Poer7Lk|UF=o_sdgkSSqVm+B|&Rhr|B?QWmo}DEJtU-pk%1N
zA@@lVpF`^oN%$V^#(l-;V3zNtRPU;eDtLhM4b^YHj4fxTGMM7xJ+K+I{L9x3i?0*>
z-9sq(6RFDlaca2PX6Jlnn9us&TF1Fgm6%*gzem6|ia4*;6$gW=UgFZ|-1U0Nfe$Wa
zPZQk*i8~ASo$>83kEZY!yHn+kmV8EAqy{_v25RMZb0?}WDI(&y{RRU^mvPrJ0gx$M
zwOB?{+Ka6QcVvGt+~&m@wg77OE9JIxry})bgCqoO4s$Z9cHN|FnePiQw}{VX5?)kx
zXO|TM#SbC+lTK9v!0}e*D(yWdH&W)38F9Fvn%C(y?zK4@Y3%c<JvXG|xv3L_Rr!r%
z`$PbA1Tr`y7iPbb;#5Vb^YuxM5h2F|*G<;QfnxYB^E+eS_;zSu;Bw=p=k`R{=&H-2
zlrX-Dj?+XTd16e?$bO<7<Is+rR&GHMfKzw3zaU4oqD#+suHn7d9rhH0B#<X$e+tqD
zIj-_#qI<WKTqlu-eNqWqHHV2W%F^$;;ouIFR=<>7c&8jgWfM4km0XUUSlyTH&Ub3Z
zu56#prqix#bpJ39IJhIIY)r@PighT4=3|t=KS}{LjCy08fQ#OJwxbBJk6$>hixm_S
z$ObZ1Q*>3Er*<4FI=VGF*-USDS@-J7czo`{Ak*AKYpQ|Cug!N3zPdDvn>O&6_UC0%
zGKe)1Hfg9><5}v-vPOj>rH73sizM+6*l#iYvZc>DzUI7zWW~PXsC{Kuw~X-hNfzO_
ztfw)sx|!#BW_%qg&=|^AXb{&d+bC$S)Xdd!XR4KW-A^7%zviO;0Kf2%oDjvo`U+ot
zBOC&AoW_T&9A@FH?1rkX!&g)$q^I4f2#uoP+==Q2D7{;G7%9s4gIM(R=Els#c%pf$
zb#!Cfpm-v&N_UTE`?^yWyrE1hTZzaS>ZJz5vMhN~m1TW)k|waGX{iHY;g5={`J*B*
zpjbupxV9@$DXvRqessw4JcZj^dvlE_o^#+VahU^4xtT?+^dVAH(NV`nj5kY&qQ$*B
zvOq2qX21R?OSZ*I;MTCfn;<W@ccf7KEr*G*+Gt@1P5kZR2Pm$NQB6BlE)yI*UTkLH
z*DQk;K&_~x^fh)i`tUWDL~mKGT0L})azMv0hWEPkg`reRuEZ@j&6fhIsk>`+wK!W~
z`;P-!WMnYz*Vi^9lXp=ZV`u{r?7&h?920|Pc1^4<)6>R4akdK@=qvFbItm68&@w`E
zo>Bs1>OXDs&9_>&&9bn9Pw>&sOHYujO5nQ7hV-auJr)q_w`db^V112o9kBQS!{200
zjjjeOmicXwav^qfx%QR$xN6>8n=THI5r?QSOHR${_m#j8yDADuzeghaQGi%YtI1MF
z0TmjH_mjXZKgz%Q<W#rgYXDamaIGf_oGPM$5);71rfw>#X(t-5=s|CSKvLKrM>c^X
zDw;$XAhEDYVi#1@#>_Y6R!PDuiB|b?8}oY7$D@%dU2vdk4L>^eAxX-=b-=!R2n*-1
z&Txw9Jh*emzEvDI5+Kx30bJl$j8TEQUsLleMuZ-FX_YjaQ)3oSCOR$GQ=A-^X{G2`
zK)^ku{zl4Q7P}j7BDP`TFrklyD_I}@&bCrU=0V&R!G{xu(loHHKwX!&oY)xm8<)<Y
zDFZdoH?1<2XV-ev_92gVt<$;FX1I4p#7>uo+V>Kzzy*c3;n1}U30(%T@(?%{KcSPQ
z0E#{;N38vel2$v353w7P$i9hoLd<-p08lm6?z88zF!Ju@hQ!`7xal|HBHl2o-+B#W
zCygWMboRId;;;qXZuvuo@-jd&uBRHI3iP+-;^DoN`S6q?IJ(86bYAr5^LBXBfVUc`
zo^d-qaUcHv{w3+svtr+NN2x{r1)xzgZ#|={BrsEZY%}MzO{J<$CjN<~em=i0y!7}f
zgSCTQ(<@<D|AA~FK4=}$?RYNAZ+Qz#OG}u=;sfaH2o`qWFdS<z0t;$8Q*MX*;Ixpr
zNCX-KTLh#*Uv}m?E)2YnkXr659#-J1wYOwt{jcUHhr;YjbcC!1qXo<_r2)RQeZMl_
zP}s?{LqfieaBC+*N|_7B&3AWbtC<1*GE-rMeX@yFrr?@GV{abJuKo-c7th5^ovh#f
z#s`<1ubssGW1J9zM+QM@5CDu`1OPr@<4%`~qieQjoauyZ%XuD_58lff?DzgV9X4pU
z;};l@jmfhzhg}coZW_dpjb7RZ9M^75Jc4Jwmo?gN`ws)DfPw7C1Ai@ZU(kg@TdzRZ
zB1B_ivH62^#kHo)3gP9aNvR*WxVUUR&`^FI%mUoI^f^&P{it*9RhTj;sy$}wnb6Lu
zdaO^6e6{$f`~|)bHQP;eBDPbCyAP6T`a$GMK-w@L`;!~(^cikgd+tc-F1}WWEQ%$z
zm<#5?RhkuEU5z59KDLr^{`%Y13mWx*7pQqk;BMFd_#!~+?S~KCds^HG3s*tcEr^rF
z*E~YCx%rqk+H!W;(=$U~$a?r-f4BZCi^ju;$s5Sve5SvzWXWP7GR_HMdYq4*|JCAE
zg<b#Pj{Cxg@+_9ysW%c-q)qocq5l2cbW*n3-P?O=@+OteZ;zTqH@%{b5hz;|(z3#q
zSx2^~h<4Tl2|_oR|Nf2k&v5R$-<JF)E2{zMSMOjxcFmkCo)1DR!!n|x7MOO+<(<P=
z^-w&I(Y)Xj&j`JzG<?SP*?>&DOg3?APp)R<3GR;7Kplv?gpu5+Oncx3S?g@jFCj;l
zDZ2Y?<Vrt^j2+}rmgL9j0bn!hn^=GBn9rmt)Nb7X=GxeLFNvPYV+Yy8B}mspG8wVJ
zu9i3}BF~)3V*qQjtX`JzV-z>b0;KJ;kH_do(-&NiD-}Gkv+jGT!fv|RZE9>8Le^@H
zZ1&8tU6;vQK$@gSd10!ypBTIU=T@JFOIs7|6O_h0_aj!@P^Guac2%S&+NZ*4gfm*;
z_Cpi+BvpBn>c<+{Cs<S3jEfi&tcgGmbyh*~O)f0As_n|#6XbITnPK*iCgqiwaYxq+
zx>qy9Yie@~{<NMI6x;D~-!ffix5DwFT;}&~*eP{n$Y963c9%kHBb{X?!`G6mW`)FG
zcg6D=%=8ydrFX4ur{x8k%AXaK>?HP3OtxVot<_Q_`s8(PpPckkao3hF_9Oc4<Vg|R
zod%x*rNL3Fz{lAN&e%Q4l3I<^a=>2t)56&@uJVMvzAqactbLh8$orO1VA8GfN|j67
zR!=^Qlqs|ys?zR%(RgTRU&iR$o4(gkJ91KiCT>JP;i$gw1DUSIdujLnB$54&Pr4Lk
zR%PG)1QLy&KPh>GH#6ukvW%QVP+XfeQ&uEN>XzlY?B%-@LebJAsKPqf@l-c-jo;(3
z2(1%;_!<wxe9$14<KyBaP;uCnG%3hP8<>$4t|IK!oi(U(i8qta#L+2&A?=B}AG<8C
zakZGGd{6|P$Y5oOIpt|twn^0O$PK}`t{+LsBO!a|9p$7SaIE#-zZKD@xpiB*erC($
zYkA#eI@uH<;x}5E1#L(YtopH&qf`01#FPOw)3LE(_$s(_ma(!;A#mK9b8;(|L#x}$
zb(z+;&A^Ej6N7DeJ!J9ZMw!q)f3^DK>o~90*&m_Xk=fDst9*%ug&U_wH4P3|*wq`b
z+>tkk0xDGXqjlu5F!uu0RDPy8>9^bA9o|X*F-y&#w0(0sv$Fy&Uu&7E5aA)CMcZtR
z+Du=<l!;cWvI2Fy=jkM^?7OA5(@rp_grgi5L;y26qBI^Xgh#Id;#3sQ`@<R@(WWo_
zXM(TIbhzK+;^dX-8J-PoLy5XuL1=v&&%?d+J=OiJ&yTay3huxhELJ(x&Z(W34R<j~
zZ`M|@eDcGKIofxw@t<_NpWcNNKTXpYmqF{Wel=x#tSvTa|B*an0>C_lzI}@p_7d7O
zI{<8KUVGxcjheM)*w1X6_`-xOB{?>^8&A8VHB)3F!_&Q5-wNfl#T(?esmU84%(5dG
zMaL{11>cDJ<^1wsr-faYI;IOk7;^yL7$~PE6uJ=3O|n<wI5SCqS|fM^^vA@%Trm*D
zOew{TvYE%QskODTg)<WTcnzv<DQ&pZ`cB`2T<RfBIzJnMZH{ElbTe`d90e>V4-hX?
z^B6u3qv2^C7R#^+zw+Y&$G5NK)BK_0?EFj4n?)Fy9j++V0gLh-UjotkKG$-Q)uEyC
z;y4Y~FMZfnapn4U^3SptEc*iB%DtlqlA`3bzFwiBB_+GclcbdJr3fs?FNX4ZO@H~I
z#xozZd&-eQvzWQi`u1_A+;WLVk6PF}?Wz6x(SA;lD=f+N=Fe<@X9~i)VveJokO!Y<
z3-k(MEir7!Hq|C#6XD7)=y;wUHp`#In27>7|KP{W08uA&0k<C<F*%ig{62wCPoC!I
z-$(t1nyxyIfq@-78~9*s?xgND0&og;%&8Kemw#2a;8VaM>2P%7L<cuot_$1Q&r1>p
zV_RaDmN>L1nh1pIeOTdxw|^Dhi5q_odU>H5KpllbhHoY0wJeWq`3?ha4DcfQuhL0&
z4sZZQj!XdyIVr6tX1GFR9|JL(VKawLLe4)0%9nrM1QX~ln;s}EqwUH0gGd0tvgW^T
zy4b*p(C*nemPRa6^@n)ZZTU8>)55$rZ2!kKMMYm+7#L~W9CHg@feKl%gk!fQQ!;<#
zX1|Gu2CxI<Hy7rTt&@_HQZy9}%}8=zfkS^=60ciKNzFDkfzQC|?4|3$HM*RoKMPi`
z2{1V0+u#nA@2>qP1;(M&p|YhHm!&@<sG1J9M|R7svdf1EwN8NXjj22{nY_I=Gla(=
z>lOa8j9hkrG&0}(q15hfO@j*8Z1kI(^%i5fE1OTKr4rgYvARVM#<eYeQoI1N4ay%b
zoKj_5$9kQY8*aGzvh>Zvq@eZ;$pPKshuJEBu}>F&`Qa=oiG5xKTEtaEO7DG<PL+|d
zo~!~KpPMm%(d?6VQPVqe$BJ_f_&LC_NE&WuJAEq$QtHaPcasc{Y~BwRUt<8ohw)hE
za!)1s)(2jMJ?^?|P|h!DQ0rGiMZ@*ixn<>mx$hj$t@L_G)M5Csay)klt1@*?2`k|A
zoZ;f-z2x-M^uWRMj0w;(_M_tr(6Yr8Q74!sTDl}#+1!4J9cBZlnCoAD|EF+9Q3&n=
zaEtbhq0>sh7_0yIp%OrR$Twx=u>dL(V8i)3Tn^K%RCpXPDz4>cGkP}*45*^g@w#c5
z%AByMcHlQSKWdtUfSjMn5kMCA+6jR_j&s4fv2k&T3!UnJSs#cF5FdkM?fJ{!0fPSF
z&ix=S%W;(R<9|QC^QRm1oe5DY#|!(xlJCF&(_{ZW5d1CH_%Y3Q7ApRc!1=M9mjA!F
z{~-DQi<HyXGJI&yYRNjD@m&!v22W^~MVBrYAIsT0>EqBTfK1=z&D7I~hqs4~_qYB}
zTVEa4)cgOf;)f6!-3=n3bjTPfARr(EK_v!=NJ$PD9V#s?B{>N}5GLK7lB1+yGC;aU
zjOID|{e8YqTn~T1F8(+>*E#q5zTfeRXU5fb8Hq`WA^F6^9Q^n1mz&hPPaSQ|%w5@W
zBmIt2NZA#FcVkWM>{4kF@itzbfK|?}b8*Nnm1Em?UtNZEr3*gXqT=I}#?n=BpS>Kk
z{o$Zk_+uq~MZ;=~ZqQF2ve>#=LMo*&@ZbH0g6sZK@@BP99$?UQ-W*ZX9hCXNWslFe
z9=HdCxwI7hr%zw`9Bq~Yp*;meYsS`W?I>_F`Cb0Bd#w33vyK2I?c)4k6l&5yeRUY#
z=!2gY4mi==n6CWhGcm0ShnLPFCQQZwPa$Sm&k~4a+rv5oV0hV=hG?A4+066Zvji<e
z{RHgRZzP1$o4CbQI$`Dkc{zGE)K9?3zBMsEVI>#o%OOljG!`f?hYPrTZZy41h#5ON
z)m=hgeiUPtIMh2^5NF;xEtT0ke1x1T%=q#gM)Zw(`VrVa2SMDtgK1Wft<+u&#sMy%
z6SdyWLWjb{7P`7|7g+k{AN4|%h<M*=#asv67pMB)H@3`Bql#plDu}<E5Ab5%g^k&@
zIgG=d={G#B>Fbv|ugaPSyn27zAGcI(&;3rS`?mF~rPcPdg@AnWWCiI22;Wr#e&U9J
zp7~}6HMBzE>I6L)t{)%GmN{Tg$<iQ6vhdkF)s84tRe+V3y;@i1@_2DeP2n_d4zOOT
za$6fQ8lC!fPvW>4-?%fi5X$bD1|WjSC&0O1W*qAWE|<+NJG~Frc_<%)A2`n10Me6{
z<nqTY(y#bD){Tg0)FzFc8ZDDey$kNQ`xz>yTn4hAw<I0{?z!Z`)IW)r7XYs=yQ_2b
zl|8p=Br*BK8`UVL<=)4=t|QM;I#*->MNT>v;=cJwJ!WgV(lx;6bS>Ym;(Vam^!u&K
zMt_=<z_2mD*#~wI=R`@?nrZ*jb1NUuBet|k)MV8*KSFcvr~8i>*Wdl6z%e~zo1gK#
z0CX~5-L!o9N3SImaALH%Pp@&{wN*J$gxDBAn!#L-OV@8uAqoQCl^{AO)h4A^(&Jy4
zj12L=PE{CN8YSd%@K_t^{Ng}p!tv6Y0C6HY0b9f==4)r9f4Z|ykB}A)J5~PAw*5Mo
zK5lw$c$f(@-*0rJ&^t}G{u<+d;Ksar#Np#H;5Os>5?XBXJ33@M9xA`aWE;gK>B6c4
zVO`1a$n@J!!?*?Hw4%S3roP!-{FN1m?^d`Rz6;HS<&cHo=Y7zq#v`LM;C7SZ+j~6H
zK{A^nE8w=ch?n@e9sdc*=ond?`ifRttE%;P6ynw5=k{NZdVr=zXs8{FN-mJy)a{Jq
zLy=5~S0AR^3!i=41m0^^{Z7+Nrq8x?nw(G7#@mnbZ^|}%l6W+eCeZ<xt}pU*{Nu0q
zT=_=f)BE`6#YR(rnp~UaBS|H%WA>{(c2v4rLV+fS`cv(vnJXh8j%KYCvCgK;!|(NO
z6E$!Psaq)(VdCLOgm@rq9ikv!xZ;U#N)F%IA6<eeZO<P7hHQy`s0ocTC1j%e>#Jw(
zy+a81nWc;eh{NkMexLg_>}(NjMM-H+O;gKIv(O=S4os$V8;KCwWiwi4`)jE?HTp~O
z`6%*oOgi;j?>B&412jR3;sNgCx*5fDmNU%NCEm4AQ)OZFJnJs<K`eCUYM1=#rP=97
za+zZ_*Qbwz=ZIOgG4^$DQ;NgTzvV*Ek6S9a^VFvXp{*IkwivoWiulwc2U|6aUy<KN
zmeb5~`}eX^&F-ne3z_2FA}h6bkFu!PL|(qNd%2*$IagmT2&)-FaM;e4C$Q$=02gU^
z{aRkyo1#`|XlTd{)~q;gwUAJ9#xM{85y&lC#HwUz#OsKa7lP>Ehlih7DmhnNtU&|H
zg#Gs-23K3e#p;CgW-?w=#i;;pgvuee;kFh-pC7to{P0uaXjzM$hW+Sb)5g<S>6HEJ
zts8b`XQ>yX3K#KxKJB689_0nTUdq;Xrw40;=FuEx@#UJ#OebKSH>4+F>cr{+S7(?x
zF;BDOHu_nP*c5SVNa>G!wUN7nGiFz(6R0^|YW*+&hTGz!+`9xXrdE8uyB*b<-k(K}
zdlZ$%v%##J11!>_PG2LpCe7-Pv|gQv6Gn*|Uu#_*R%1svJU=B^GK>~BC}~+v;m!2S
z?wT$bv#cnf)V{UAk!On6Jp38l%B8#h^h$~A=_L(hfc*{5mS8V4tp1qKW}-|?BTvrW
zcH(FUgGn^c^}rShbtS7mF+r1NU;cYoQGQS#IIDCSFEZ;3`l|1SFLiHqr8h$FH99PP
z)U9%yfXL_=$rok>NOndDH?7{hqnaPXt|0$qKZuY~N&5++$Qk#`KC3i#3)1`ZA2K~`
zky*3<LRQ6bH1$qgFUgbk;{hp*o93HeCGGGR$pu^5VtH-A<dPG35uqT&je4o0!B<^(
zPh0_!EJyyD>ANkzf~><o1)O&Wxb;nb*)Uj8EL{8YkeO*Ls}}N~hb}-gRqJZa%OQvR
z!EK8d|7Gx`QkVnd-FWZsDFWr=y4ZJEK7v*!l4>l!8hLZpI?BAIdZcC4fPTIsP<g=<
z_Wij<<Bj!yZW5+fVonA<W?c{k>(cAw(`Ay0PW++H6r;jF+{3?}Y5>b$U8NUUm-&0&
zmLSely<DK6=L0{m6L|F5=Mjh=Pg=wv&d6L?C%#1&n~fbdaIBO6?OYSb(e?|hi<dfm
z1l+CTOP*iMOg_dVUtJyIF_R{v+f@q@s*~8_2nQ$lfWUpl_DDjyM3J+AB~sSMs(fPE
z3>I$cg_Mr|fm&t@qtcf8Ihbn?V6Wco*GlDF8J-gIlDE;Xyn<^7Kr|#cY(?^Jk>Yu7
z567XwZoXiwDi_rQ)#EvrK0(y=e(zo82lioP9xPMt>0#7K!>_KwffopN@1QkbWSfo0
zYta(UXMn?G2s;G37t?RT+C|yB&zC&d*{*!*oB*Y6f#ie59y}9rTx6b{l4K<dC~bM}
zafwb(GnaofXbLsdaC>Vg6xgWsRN4W=lWUpe-eL}|)lD>HT_Q6J`S^m5TyHB!(W|BW
ze9uOjDM==Mqt6lNlpaQ#G;qGXFBm|&2+^x$<(YBezD=-%W7)M7o}frRkG|LqRp{?|
zhYk0ScQgM{8BMm}i(2;0eB=v<P7~LLsdr2STucPidT#=D&HeTE168O%-zMV+hu#eN
zx!jqQ#q4smK~ia_x?@i?dV4pMNPym~z7}@H-0!*3O8vw%+HCU81!l_fyZ?EL;OtX-
zpZJI_<s0P=DRJHM-bEU*!U>2aO0)5&guz~&@pdyGWmOH;FEo+Yc(J@lUo4I(Af|6|
zDj`EQStQiK(X9LA^j?~`z=xO!t>uTuz9{b5j)ySM9A}Kup>PYD>JWgav$nfX9tTKd
zE}qg&1xcnIEFzKo{x#(21BV2qYQyX$T=6&Yfqbr+2NX11bM)C{9s8fcJH(>K&_(KP
zh5QB6xh?Db0@YrNQBrjqMin-3Wzhp)e19yb1;0K^=YzG^!l*Cknl9qjz1u$Zkl!Ga
z7ADr^`<n{dIP2_+eX}y_k)K)d?-gU*tF*fksz<=SCvZJg(psMxNyXc(9citDYa%XQ
zPLglM;n^#Ljp?SXJNIaP5v|o$@pktxR~MM8CocV#ePxz?vp-B!1xD0!vbxndRa-|H
z$(X(LckM4VR)RzR(Nqz2$=tBnEzKPmE6}5ky2iu`&UP*n5xj6ko~7F<j$Ai43nrny
zduRKJ^)fKjabKY(%xe<Ab&Bf~_V5W(S!l8!dTij#AxgR-)qE1giWt)sVzEw#hZu)+
zOMN`{Ld)T6hP65v7k=?BV4d80+d$gHWa(P0yySb+c~6)pQplxd^TZFw0N`E-7(VEO
zi^rQAeqOb4O1k9EG+30|6c{0X9YlvtdEj95#UdRz(k?KL7j8-HH?XU#IWg{_hgj--
z$QexJUgYuzRNeYL`fa|H^w+g{>?56k<?7sK)+kg#4o;SqXA1A6eT>Ez!D>gsALVCy
z7m^CYRnxW7!NcKdMJK|Pk3A`h7gcgs`|ot*60!RZA%dilveYXg()v0==`OweD81!<
zd(<un&^xWt6so<W8}iiZ0wA5#`@Dd->GIJNk+W^~{xe>{i@x0UXx2<vNhko!S6x>=
zIstyI8XiJ;*|pqwSb9jgp6^t@7kJ++-~#bNE!K%YhJmNqYJkZ@2))P{B#xRrS~7B6
zGExZY&yblAs^1i&50wo)bK4jn==^8-!7HsQ5Y4*P;Kk4H{?FFZcG=*6VlAqz`m<w}
z>~BWdjm>hjJAo8KtG0AXaaf1Io%J{A!$JJ)E(IGL6FW&y8n@e9<%H{2xmG4QcJ!R6
zl2-dyVeM%J{zYW5TA!YkLzCjSX3gG6ML!Yb^5R@W-i!9jLf^B4ysXUF>rnN1`J2tS
zq;^vNzV=|wPm)1MuOMNPsH+J3SArBC#rm|<FqhD>v!!^bJLn}#0OwK`Y&vO7c}Wc?
z;YG(yu4^SKGMFq?o0Jh0c&3W?`Y;Y>S(zgyFK5X<G$<6KT)BJ524CnSSbwpODruyM
zBEp7mI9KV7zrLqT`m_1-ZNHP{<UcvOZg%FK%?f0@$Z=hW3#GNF<t*C&Nc@F672P^z
zZ+pqCCjB^UgnS|sFvoRNki&|D+SFN9OrSDkVHl+<L)jDm4W+yj{iSKb!Z&roubF@3
z(~sQ2FJ}g&)qz2$RlWrCaKL33g;AT~kySwAIFp@z_Z&(qVv-LY%M4cYG@btZURM_G
z)_+$1Uh8<ybuUm~?QBjjZT~$*@PGQJgx$aAj5p`k@W$xy#$tS~e3`&zRgd51czEMx
zL;hg(_{Gd~;zvC<p1M7!QqqfW8kpPJB1BX;$-AYRT#Y|D+AdtHT4`as&o5YT#IwCB
zP=*rG&ZIZ><djXP-OPvgi+0y^F_N8=3O5X00-Nq+b@RnmM_#@CQ&tC&A%@(=Ht7kN
zYn0#eeKR;H=}!)b%0g2y%~BK53?0AfpyUp>;qblOM|zO)Tk({tQKgv^kiE`amWu5Z
zRSrDFTy9}tyqh(P(VDZ=Hpe9oML;i9cgnYA$c#~(_QcO+V+h&sU6}!wUQ%Sp5XObi
zrAjq6lk)gk*HW@pzBPz8r`ysw&TsgMimf`O<9u8fZQ6>d-{H?~Ud+3FTjvu>1@MRs
zg^T~>+dR=h8<hvFo&0QM3Q;0VUnMTj5kNWQj7jL?+q)`u^6MjsEy{p~CV)BRv!j2z
zX_xtqkmGYWH3Dg_M-FcMDW4{jo6jw!2m+mhqaCr42<*vtu4rbv<R-In`_FFPjBlqx
zTyfFiP$ziwl2&&P{;NZ`pXn3CEHZw*rkQP6R9oc(b%L|RqO;F(;tN<PskO#z<2PoU
z_(_N_BP(ON;F4f374C*tjBnr0d9FZ9srsd9>8nRrrrz7V)~J&Wv#WL7SWLjV1+OBI
z>F%Lqd68V>F6`0qcs_z!b}umjA0X1<kp2d8%l?1pVZS=A^$KjqC`P+pQ=`Q%Nhi!C
zkS&PG)h035j+5*1P4K-qrjv~ji`vyAf(vFitt)oa*}wdJ(^3xe_B7N<>0EcbJD76<
zGTtt;?;n(go1Mt&5GJ6kA=-N=`?|21m|RoAMfhmGS6`|t&d!9W)?Z3MuMw0>mgzNa
zXf17hZ%?`Y{Xvk<KVU-~iBsWeX;q1>M>tt#Ri7ghz5s#b=<9M!*)5m@Z|lii>_r`Y
zktYhy*8iPcbJqP~pXt!dl2^WD5XDm2K5tlyacAc%|2VR4h6SzMx4db~!21%Vvombf
zexjC|fAQo*EiIxfNmg;{$EB>Ui-YmgW?eSUTdud2`Bse9NzCMzjohg~y+xUFJ^=Lk
z>!K%e#;JKOF+YJIp?GO)l}&l!WrK~0qO^u|honEptfp|I{+cg4`Gi?O<G1hN(6ZZc
zcj7H7C@x6Nh>pb~kMrk0`wiC4rX59vHeKI)9~;OJ)1oL#EtRgx_;^-l`%%U~L0hWb
zY3s1Iapbbk)DC}Sz-JRx1_p`W))F*z12_I`2VcB!ju00I0@{0jPV%KuQiSx$+XEFN
z&&|^AkJDy~GqKj((V`ULr-?gVe%VWU@=Le@oF8Z{wefd@LZEB7#|Sq;0Y%tq_5NJ;
z&eA@#%0G79rdinmO{zqb`nRrPV$rM?sAQMFpqANt7r&LunLpj5+{D#4Qa9^YQMrk^
z`&dH5npiu^$;nFaw7SY-N3PX>cZ__iZdhu1iB`|PyXicctCx@|LE?uEhn0~r7{n4T
z!ROrjYc+?nU5>G5&<2)XDB*0gtFi+nhy~q<%6IbLPjgg}$RI}Ll&TR#fUaxy9f$CD
zGYEzThJ;Y$%+(O?i$7zSQ(6onBm${KpA;NKR%Ep*^R}bAIE%t`B44&<b;*%bH-{MV
zON=n^FUd&z7mz?c1p((D+cqrPnp-}19o*S^;aIakI8l=Q?w_EHXbLhJCIbP<Hoq`l
z|FT(%j3?M6Ri>z?+sfAOc2$`-{nzdf@(hMWd|jLpwrz7guOFVu)%_tOq7+_<TZ^Ph
z2BU2`;@M1nwkkXPo=W%No+zXTQtw1b%{#B`ZA-jd>;LHP$*!uaipImc@Vrr!R>*mq
z3M#^ASB!m=g-P&%qPIzdXQ`$P;Im!^G&Y_Y-Fqw1qAn7U&dBbjmE8?bI$gAzKo!$i
zci0_xCk02CLLtjeEbYgHwJ<b%MEl@mc+q!f^{~P0;F2XqUSazZ78C#eJWgBXR_C2`
zzW(jk9h|mw*QLC7)<axkaOZzQe*{OK!jax2`x)kspYxcj2Gph0*!`9ufe8arb8dRr
z%O$z_3|ST46tc++7ugPB#BED~970ML1wij0`KpF@IjC7^n({aE#S*Uqd_t5dPWMAl
za5EGsKbHZ`r+oJ|E;^SpQ*AoW{;u$%07=H-e|8JS>DRFYmh@b?F{Inw^`pbfnQl$W
zS@%Irq&XUfs&Tj^A6<9qOF%tW=3$iKtKl*kB;>*A1sq55+$<CaB9}Xez28nEgSo2*
zNI-M->V^Kg-6P4a(zj*50SPccVFc5>GY)!Iy_*CFX^+&n1E?p`^%8fxe#TUWcN!nf
zNJAY<wDCpdLiplxR9R8+GOOKIgx_<XaMiWjqHC^=&nM|miz=!-PzdpOA@<U_yG4^u
zGk6{uEz)rM&yN?E(qMaA&V)iI4QjQ@hFZ*-jK7zjqz~(=*`XXXapc_$anQ^!vddRX
zl9z*fzP;M(j&05}4%N^8>=j_7^DiCV?@#koHbk+45Tp5Oc+Y+UGC}l`X&M`pqI)`A
z7t^fgE`CP6B7cLpo8KCnzN}j~-F$8RT3hgF3gm6g!6Bix@jMTtB*Ge3%xE8StbPpt
zrP?P)=<f`j?~K1!RGZ5#Y!xT(tiA7`6!-S{GT>_Gs@9#d?M5u&tvRcn72_9bsZceP
z!{@@>Go`9`E&238#M_U~DLlf`bako2lnLKb2n}+}ogUx%CmGfk3TrlemZ?0SJFsxU
zn2wfaQU098+Aclp(fgD9DeD%#E|xxsPvUR&DFIHhH+_ZiKE@QoF;?RhW)U5x@?{5f
zACylR_U7Iw8p~XimfQd6&#H1?nSN7DTwr4xyS&&Cc8elX<ikeE(63g0<(yz1;)e1M
zgA`=`Om_wJXq0%PRj<F-J!o?CwqbA)m~9U4BGgu9qH4;aV9Qrl4eW!i{JyAVC!<cc
z&GJ-CA0l4P1V>~Kt!B5zZxGHFK(ygQHSG(XCzlz{gg6+)Zh?x14MHq2Z=2xFdoM#C
zo35P`0A<RNxCI{>dG~oZyylvOH$05mY}oLP#KCc<8-wjq@X+4fCZJcE=&79^UvzIR
zRF*Q@JNuo6+PgS?S>#|eJ-v7*BP$=IAAEJ3X%6`crSOp0HB9;dk~`VCz+=8kys^7D
zJw#<ei82@6G_v;w;3L<&ZHLP3jSkM@y4D!r0fXVD=zU5*hT5GS^!{URHV8`riU^0z
zeH>4PMv7XfW-H%xOFBQCMSc;;#;<ta<U%d82`n-+X4bS6yl3dRouebt``V4BM+Pl_
zRzxjJQ9!I$BVd70lz!+Hhc1isl}c*hXr|l-(+L>F8r<j>=5Md&#OVA!KVMOR_Vx(`
zs?K9QJ<WPK6mC7JOTUYW7`&fhhn2XeND&h`l1K0)6VzvAWuZ&>t0V@(UoI$>z5E<?
zNMP>s>m3oSHYApUwp2C@p3vD~Tm?!H+1h0bViiqZ(c@K>Svnajg~e~5#jBy}w;}ZG
zQ~fGjkz+);-S){v;Yv-=7mmsmsQrbWm3ps{pBo+I6LCp~E<7~0->BwG{EHj}W*act
zOl5-uANS6Ve~cJsVM!jYmCU@DnqV_^@<2~oeDg@ES^no6X)oo-s|OBa6umM@c3d$c
z#C+P|JgvKp@mF61<W4FC-$6QLC>K?cD@N{lRB_HtdRF2ia)Y)5GL-(9=lM;wJ56V>
z6h%K4qCr@+IBDzR;=5)wYhp{~rVCPGF5NCs=J+~sN4ivx*-_IY_<$s_#F!+x!nw0O
zGI5HlfjV%?H-mwG+;@~55s&0yrhWL<{TAB%cZ3r;a5yW0zu}5WGk)vE*)j8B+{{=V
zKHGR_39B>MhVG`9prOe3b*UwAQ;DW*FIE>pcHD(ktt@XUIRygyGDM>LvEJ~8%VD6z
zSObSj*5Bc1c5AEFouf7B)6B)q8XstarFl2z%o1Nd`U^FlZMJa-&X>WdC|TR+Ygliw
zBi%aag@x67FG(KFHmulh<=eHR^>nhip5Dt>yH}IMkJg`GV^NV1un`!#76tiM6CJHK
zi@Plm2G-^lpY~i#31fw$m*gcPZQhD-eZbU?GnZ2`T&P%dOBvbfoSbzc##cWbTf(!m
zX`_Tx4bD`buI6f}!MgcrB@zrBV?DWiC6wS_so3(6-H4L6lvV<AD#s1+ks!{fH+f-a
zA#^#Bs{+^qs|t!7c3Y7f=)CLN203<o)E=|Ro)H@?9P-XAyrvLd!)GJp6!dO3hC(D+
zYYJEU3K<rI9$GduXU7kVuxtg`NNw_NVoemL9MxJc_AwHi<@)1?M3bQelJm|-w)5L8
zBPtTw;OO$Vi~St!*D1GPBm7Ff3zxaYtB0~k&>ii6wg(Qu&vW_&#IT3+K0C#3jUJOO
za%k&znDFE;^)PofhNzIR_QP3r-a2;Ofx}#%n_K~MtSPHucD+iOP^Me|WZU<nHLzFx
z&pC<&YQ6X%U{e(?xs}xDlr7~cr3{MX>US>J)hJfHx~aW}lS9vM%k<4AN6VLow1IcE
ziMQzmiLx#Iz%SpPQ8&ZdBfss+`CYV$FR~D(^pXWM+c1<Bv#aO3VZ$Tzmzh?MH=brt
z6J=Q9?pe|t-Y9?f$u@958p3sosvRr61X~IQXyPyYP6nm=^aCC}%3W2*+y64UiqcD*
zp?EQ|yg$dG*QhNEk94Dg7<^;;8($*SYmv<k6*+|8OM$bl)Ezhpr{4ZN5*EekKrGhk
z(TDf00@7OTwv1yOOB6tuH&FkQiSf-J#V|B&FX8lv04oivZycGaPD|UD_#97OZqP$B
zv!&6hn`Yy2_%_^pyyjGjh6>J-K>J7}U>`J_wrKh`FFij>vxcD}@Ga$5{LtV_Mv--X
zR8$wigh<VOh&U%RZp-Xgo>J41GC3%%RcUzl)j=__Q-$N<9@OOHdfL86v>K6nM{p&u
z3A?kPUykd#wJ<t78T?Yb(QJI+Lzg|!hQVEo|4anpO_P}q=?0yBp~lRYYU&FcMscuZ
zV{@Ssvoqvxa|1pKHM#Kr3AflSS7KptC%#a<Wr9I63_rVqde+Pif*)vRssB$i%YM4C
z=Tv*m=|#+G#D(Pn0w{*3t5F_%h$CuD`E$d~@Sqd9IEuJvrpZBVuV3HXFIJhiG7@)c
zEI0oQL`TXz)l{-}a~ccYma~#AEf_Jmrm(ONgF?RlI_W|5zYpKY9a;Uwr20jL`5!<o
zLSR@~SzIDhjUdI&HuA00HMjsv+--jq@d*{R!`ChkzHm=dfS5mVvfzCPMC&p^aUQ*$
zQDV4VQ}7L2eJ@_7own77Oog+gpE5f1y^`j#^;&V1n<m#gc$>w=_@_Vbvu>_>@9CZ=
z9IT#o0{Q7<h54x-KSuND)khX7DU<@`kJ=NF4N{m;5IOv}nsMF-afN9i<c{IQE*DjX
zGsG`Upg`pg_GY(Dde~A7cUutfU-}Me;XfbH)^4o$-`*;jIx0#xKbW$APzMt>=(I=X
z*sO%4D1;fn&=)Ci8rnDms}E6`7l)BBGGLAF?~4XFVUsB<`+YTjG78)QcRs#as;()M
zWL+Z1acl27R}}IZ9eHIvNbUY~oenD#n()~CQ#L|}kLyG%@PL9x?_^^mrbI8rp_Y<1
z&ZU^$cPh>CB_R+gZQcSPZ1TZ=l#_3JaE43D7p=*Lbh6ljeI+$DAw-eKI%Sd;26^zP
z!TLT|oa(uU1_BKRCp+ifujWLdzM;G`PP>IuXrg}z>3fd;43_K(nfv0tkqg}#p`6*o
z#g*A_e$btP`TA|dk+~bt`EZ&0L+@CLvd()XA{sr4O{87wpBTYg1TCt+=k{yF^Lo?J
z2q#&&EOkGuUHs=OSnYH71j&+efT_HLruvFXfBvQx57(D(i`fq9C<0-w1&+JgZSo|l
zpVpF9GO8=O`K+Bg)U4I5|C~q7Y9FqI#z@T#M0@$Hu8DI9P9ql$>YTLC?rn~C21_Cj
z7B{5UMXi`i&nt!1;M025)bpz!CsUfNQ4VxFVD#aCb3d)U1fW!`BfAM-3wBrN%Z@Vx
z5YbzgUH#&j0|37b{pns);nP1=q6<(ZCVQwSlVgKQea|^eiM0-+Htb9(vWNZxQ-*(i
zE}MDLfIgxNutN5fRYCE7Z{)fTD?ouVGVl0kqNv1UPOIFyrwG=*Uf<fpuu0DmLhDE6
zCq*WX=(?ro3Q1KrMS?Rz<oXDLxphY3B8U|UVkAr3DQyZ^bPJgNkrmGfQ!%g!6KxA8
zBwql$hGk=T$PN5Svj@{^23-nQEdPWAiZlII-qQZ<r0zX#Dpz2Mg)%xHVGZ)dI|XhJ
znp<d(3;v#Wd(Ifu1sV6{wF(`&){(;YguW?@-UP?-!O2;**<p+^EhcPfG=~0`bN~L6
z$qj=1yR5WKV?i@99~SdHoUM(XhU4wjxv2W4IA=vPVusV)P&wSDQv~54LM)k&M{Gzo
z=%v-ENL#-dyO4Fajg%D;Jbj~md2@A%Q}*PneD>uSf8Q0QfA)mhBR-XEn`1DWpM12%
zm2X?Oz~|K;`fbqA4l}fi=P<r|p>@B9H_SXsF=4R5v%}>DRN<mx=0zC(i|?NKS8Y$a
zH3m{^&DUJUl;I7~%v{-bU&CmUyR*4(w~GlsV`LT-Z!42Fy6j3+h9445yf$|12v;{}
zINuZ5O!$`4D>+E=U6V-sjG=fv`AGRDk8DCHvHe255)csIlP?4w^!Djv6zC~QC_EVt
zd#{DSRDZ5;_a4^)O=$#sKG?m@Ls;Ka?@LN*2yLPKeWCKkvUH%Te_C(8`M^%hIgvU{
zX_ybPAGUZk0_eJ|9X)ejSKcVX%+zmQAc$uDKs-x&xckdb+-kGzce$>Kck4+jw36~v
zbT{gJgw9Z5dwrntmigpr_bB;M{h&TjOUicg&({ImZLC}IFVCai8C5(w7a+encb>|#
z|4|*VKr~Fz?Mt5|`D7yIRe>Oe4Udj=74tclYV(D4{|yB6BJ-^0V$^m9!=0PAKjonJ
zBh1dTpH7PTp<y!urZhcxV|p=Q{DFL+ljo_CxJ^1o_`c@gM*jgX+peWf(opgues$zS
z0ruOyWo03Zz|4y0aKt;$T;qAkXPF<E1rlS}@7&|+^ouzCL?84O^e+VFljNB7D@+2{
zNNZ!fkx{pd%nUj5r1X#hGiqwMTPQeH*8xhn`yw^;21|*4i-0&qHOS$fjqLIAkMpo3
zumM+SmwyEo`jg=x_YI9_zUi#Ebc`x}j?biPuxqWyn9b}lnP3iH^XFug9mhM5+&q_8
zdEBG*J~l8eoJz7)&cn#~)ZL+0vShm5A<ox1noJ*u@vm~}&`q0VefG<}iH?S>R%|Ce
zqt`9mn4)*m9P4`ijCE{mys?l;T`ZF~d@mh(+DZZ?3I?P%<l&d0Dl!t6jmOM*MT&?(
zJO`V)Q>{O`jyQuH2PsE?q77Q5_Opg03Y`3o;jU8|Wtu3zlcAvPAF)l|c6fPwezKpz
zw=Cm&p1Zh?M8hEl!wrh^QS-<RzszOtULtmRlp0NhJo11&MEG71m3)%T!34L)qwgyx
zn-_sKozvT<3>wzMJe!{^gVojixr=JU_MZipEdDwHYL*?GjZhnH-}6}Z9=ie-@azsY
zLKv0cl#?+8Ch~@*{CfPXt1FQ)a|llPd!pu)pxdTu8PG7H329{~Z`W=R6^r+Y^T%=s
z<Y&028V_=tOszazT{4-J5pv_xfd=i|N?A_<Q<9h`HZQzXPjsZPs=d2y-1QLbtd7-D
z^c<vXf;S;d<S}GoKR4vH;T=IcrWp&gh~$wnv3g6TH<aOwYW_R9dBC*Y5b9XA(Y;xc
zEI(}#QB5=RPWc7m&SzQcJTV6-F5JW3ieTk;84KgG1DHxKxr%33t2g&6HGnFaVx*7$
zDlUhLCf&I6`N=~Q#hG}2I)w5hFQ?YQ<LsRcB>RhMOD?_I9g;KpOXlO@OM81LEaZaE
ze??9Nleh2peKAHs-ZmsJG(~%sevgX=nQcD6d!e#OY#!;7usq-idVd3t>vQt~B0=Al
z47*NlwzG0pOqv2DO;Bb&J=rgs_+Wd2hcNHGfc&W8O1l?$(=f@gQex4}ng^UTg}z}_
z7gkNI85^$ZXS3Xn<K>|bUv-!rK#=snB;oaGSHTF!*iWEfLHs-AZ^gMb@*afK#+`5G
zXb09!<B<@I;5&T(?8@fi0BLb<MMv-EP_#s(lI7(eAdjG~^Y0XE$V$-;OVBTdEbL0n
zj*VFFrvdTy5XvEnmv6)pWqcx!RW%E{KJz{c6h^gT_xk9DzGj!keORrxbeYff&U6Cr
zd#JLnD2-9lB4BD+!#}>>%gfz=l1;{~D!f0dmF6+38y1bb$zt$liiTJp>k(8_B|rd%
zQ{jv8yij*>e@|Z3>`ZtU<72W(-~Wk=>+|o<LTw3bBKI5HY;lnxye1SY@F=aD|0K0=
zG_ARHHNNnBFRN&JME4u7>?gaO?$(V(K|N$g4-2BXD?qFe31FBdI&xb)hRt{Pq0i;X
zO2)1RugL9*toPB(UQxa+WdUnR9S;RQ%M#$IPdF0euTxwZ+z8%ph|eF&(7D2w^zQ~m
zM~F0c{bWBEoN;N#2%G%f*Mp+U(p;j-?rTSy)3Gg6qBUQ<c!%V9TvKaC47}uc70mr)
z$ar$NKSnkQ{78i?EBeuKelZ0~6L|}F?d&_HDxshbCYS12kB9Ec>;JCn6l_IZ+x>N+
zGtJ(jvtv)n@F_I`lZlF}duM~x%v)uYGh0sVn^iGVw8oDI^jS$5KD7!UaHq@3W^6N#
zxL7A&X|+qs*z3%tdiWs3eGa2hx*XY~@;we@6;DT^WvtVm1+ImF8StJwxQV!K*@zLo
z8(oq?fj_q|cysk0^42A+46+^sC7M_i`JL7+7}_bLlSxH>TYKM@2PIpqaeCb>X(Yy+
z5OStbI&1jJU;KZsWBOC${99^;63A!(ikE`rH>nfWXZ}H*Z2ER(&mP;3#*r<Gqn;T2
zz;S9Eq@6(ICsu~Wx#q-<Lmns-oAb`|BYS-QR^0!;Wek8-h}HhIx1&xaDx(AICnrLE
zM=#HoF*CcJ-1hC;QO{va%`mMeiq`LJyCu{O^iqerBs9*$D49NODz_2)K(064Sb?ZE
z3=Nr2@!oSD>~=mXrzZwcs}h&?f8>2;F+@G_ivaTI59ZF!dCq&I7$x3uC}CtnBRU<b
zO1J@9EW#~xI}et0TtB;ZGWhK7$`cp?i6>p!#}W0s;a;3!dRpNqU1zh5Cia&NZXstc
zR4>WnB@OwGfxdo%1a+9lD{g&=VZiAqa@He!K9J`YMW{1jNR&F0m9GMmN8}9){g)NP
zk0vK&<Bz%7Y>7jnYJrtsfR#obw9DDv8NF^LEjV&_h1%VpcR+-c`yS!&+BtxSc#+(c
z61=>a;Zs`FLi+-?FkWz%h3ugU)l}>4B7LrpNUx4e&0LeCXRp?1AW`Nkt2*ub7gX#C
z+yc*fi}-K}XtO1f2g6OjQ|;_Wavz6ps9!BfA8CA&_w&xaz06x)udQ(5=8-;_MUT8S
zM{*btb6=dp4Hk4FiMrg)*nss$xtZ^FFSZThVmtnULo?PEGekuC;{86<5R&$-g4K=3
zB*Un~WG+pK{p>%oZ0lYJ+EHU>;7G&1%$-eS=i%5B;uA2v^kB#k93K_v14I0LCge}a
z5$=?p*bvyPuy+QGqU(nD{C_C{k<o+^)N9P-*Zy|DA$yzZ&ssokRJL7at=#%ETV@To
zGOAzwGH^7V?N?>)kwW_dAEGAR@|jEZSkH=!Ne>z;<(HZVOOv!qx-X9O#D=TX_Sn;n
zh`o{!ckwff7(U7-Q#FpbQ2ark={ud&a?uP3O4s|~WTW9`xN<XX@#HdbA(oW&ni6ds
zf?M2~p`x?sawXFT^%O>t93}*8zkb+Eq~NnHGoA5LuIum~d$#HBOSYi6hj#*r$lcHC
zk6W*e@%TFR;>!mieLvw%_A7n`1Sf>IWy7~M6AEPqq%PhHx7S|co39#;nPPS*L9ibO
za(Z7RIauI_Y6#yA{RQ>p|DF#T_+UqZhlK|>DjKC#XM&LaF~U%o4-wARco{cvu9XWz
zDjTP}X_;j_p#OGrcTirCQ{Y5i(00}gkh{AxDy5xBn1%ZN4`*TEzkoequFB?|c<PwR
z{jXb}LC@VLM8_REB##Ey3#!gq9IH1?9B$@=Kom@Z`eWdqhRLafH{KIOxiH;#6Ue3o
zN71C8!ve1b?+4pWnuS{41c#K1-6CTf%-^GVpz)TFo$N-s=x`Tv$pi`hOKHR|qV*s8
z8W7p9maXyPw0bErF(CO47b)$zn=|@JlmbCDGL?OuM#|;W;%s1vh!NkdzL$HB5=OTD
zqDpBYhOkB64*?!b<?{ZvG^PF5$oSd@_K=qc`6vQ<B22GTTS^rgc<yo+9<OMSPD5&~
zagQ3jAM)Ju6@3-i43Bhe)Ad)BrD)PmGaI4EU8I<k;xdt4N%aT%Jlf4WpD98+*mJB5
zwF4y{S;*OkVJQ|&eKiLcnKIk2!Zni^Ikv=KiETHkv<F&lKMhw8Qxia_b%$tkZls2S
zqEdqzpk6_XA--z0N<>L+P~Ha3WFb^~O97PVXS<9}$WwXUB$YlLNbu6={qGGUh}mrP
zt1H6j&M1}W`_!@py_0U1glO&nS9FaZH+DV7_utUkek7|J##O^Pt~X8*n(#0|GQo+3
zbR!YG>bB1^-<@pYtGs;(jFG1kCx*%TI5Ci<FFgF@1!jiWq!oZZ-)lj)0buYpvEdNj
z?WO{bMz@{$xlWS3$J5z^i}SM)mimu#awk?>LVVZje4Ckb3nyA*mb7W}by$Inie8vY
zlBuNkGV8@jrkdJ;v1ReLfkl9~YuXb-M9ZJ~tx+!Pv-j@QmUkSuaYDAKV(-Ml9!Rb+
zs+m`qM73w)Vk{~aRuztMF~f(st~d(umYhGmsp(=l?*nH`4)cdU6c4z};HD@`YZzGU
zC%j<&&iajBa-96cX-x~m*N2|%^3P`X%fA3)TB|I$AVyZ8oe$ZlH`6X|TxGwuUhxOK
zkkKyLw6i+HP8_8x%KMBp(dl&0*(^z7F>QbLtMhWt-w0BF7NFl<txX%PZ#%!^K&vM2
z@ENGRh34qX$Zi&lkPgLM>?5x>ar^97$KAP8_=0JflZs;8iPecL(e)2i;Dx&bXI0=m
z_gO%YLo`{ox3p%1*y4eItQH2m?I(+n1o~90|6z!zJZDJ{AL}$abh1!jI8ydGxai(&
zCu5%uF=5_Pd|am7T=kA1PW3lWG7QTEk+>!Tp^{K!2#<{CXIW_F<52z1dBa&gN<T^2
zVq6oZj3i{$*1E~T#K{@?(YixOyU5vFEJ``O#!Y|q^$<8ps8NOBg9m_|0Q-6#XJ~7U
zo%GbYc@t~Sp3bmXPcgPpZAn~bWmTmgzLuZW70IMJ`#LqarQVAO6=Svo!<u}OY+)Ks
zVHpvq?8I|qUNo-09FA2zCsCXC@{})+va#p<@o1qQ2O<tjU&Qx@Dalg!r?0}v<ZiM<
zQaZj}Ri$91Ck~WzlAZc(yyi3ZZNmUm=zMTQMJr*M`LO{qEpFRaICDSoyKm>f*Ow$}
zR`IceizsTccpVj-<^(5OoQFDe!C$MAq?ZdvXPXZCCd~Uo7@Wv=pTUbE1PPihF>i-u
zen|&<a=D{x+?Zg?2Pbj9%9pCSpz!}4D>>Bta*H^-!c*=E7w$i)SWSuYfnigF`5K36
zvRHdC<iU2GzK9+5UbKjd@J-e>Ex8s<n@6z*>jv`C`Kc57Hjfo6#fyY^I7W=x?WiEF
zh8~dtjTw^y6Mj1B6>mFwghBusX~u=#tj;&TMCd`Y+JSt`ROMB3j_`cbh<3oMK)K_2
zwzT?%x5b!ePq}^AmTw_g9IU5@66l*i<_A(IVPb;z-=AKJ=G+VwS`KX{T;V^oHu$Xw
zw4BJxL-@;oI2q_K4OVVOlB(rFgiJD2{H;GT`_P_>P|$+|Q?4r>XIq;7S^hc~q}aft
zXm-Wbjq6FN?NiJq*|&)R52Tz_KLeZll-)38lZPhs8MQQis)aZSp#Q`<_=%)9l6hLd
z|ABgf7Dn8}2<S)C;EeN0)nKVHM^1}BD#;S~Ge^FhDOJB4`9iO_s|pKGdlLV|Cm*P^
z6ZA0x6D!wF63$gHpLQM@hkJ56QH1*IXzQ!Ihn;hzG{Fn;@9NV3J8}d7uVLy0n5K6B
zquGDlFN~$8<JoVQdoiyV!ymg?8q8#wzikgHKr@ihKwg{ka@@-JuqqjOBixvj(FQzZ
zko}RIRdsmLU>45AAaTnJq+ok9n8K7rOkP%^OX*#x4|Rw>I-D)WZp=9yfV*_)7UH9@
zn5ccfNs;Z=^0L~{(4AJvOSX<j;2Xf?n%X=pLTWy~q?1Iw1&)f^`1DSJ?E+Y<j4qEA
zTKtalE`2dyJ2*3ie9!0dN#}<HUSI|15ZMcWTHxy+6xA>y5N(iZl0gSadnCb#M&SW0
zjRP6F%z1L(#PFfv<4oLy&fOr^YQBy~g)U+!t=-&v7UGGFmtOD_Nt25>&DuEr+XZcG
za)af*EL1B^AnZ;7N;8-|N4VbigcXmH2Vt?Y-m(pY)P8iB`Fz^-bT|9}Au#)pH$8sr
zn|pu9wP54c-W+!QPz%oVCH7A}>&Ij1K9j(DbdfJLotRTKl~e99Ma2AJBgm5`*d+qe
zkxU~0M9(y2Yn`vjWcfQMGJjnS*k2>t%6;oo&za?TfsExDc;qKM7Nvb7V7B`o^T_%a
zg)7#9!a28wn>nJhEe#4Eyrqw0uu+$F&DcT01%CRx*310;(O<TM9ZOx#WH5c7cCE>}
zt|F=6@~x8JhTFnhH(Pny^mqqm;*n13TuuC?VXzH>rH1fqvKxJ}{CTCpY-KPXyX;z%
zp%8k{8MODiIhnqj5>FY&u)C3b4MZ|?0r#g+$48AeLID)I63xed(+`#07xMl;Gc(SL
z{K~ed@jebFb=t(7D&7=vY~HJ!QW`NlUm2dM5d~{!K==T<)kv#WF1^CE1+;(4BBCmx
z24lA|f>2rtq>sZM6&8>XlZ!KbYJ4|p7<Nj0gTFlX=|B~=5{uFQbcpOg32Y_Uk)<hC
z;7aRs0t0PD+~Z@`Ys4&f;5o+t(=7}PN=TTx{){<0^C{tb>&9!>Zty==d8j|5awln{
zt#<IEA^e*lu`WHwR-Q(4|EpIg>PH53SC?lN)@CG}Ai@8@zyb1L_VrdR?gzEjbB+!}
z_x>>GbW>94;%vT^-eE>x0>INhq$0O7zRs=udnzVxTi^VlB9O7kP69LHUn5n}#Rz)g
zDge1e6Iw}2OI!P;GMGXV`d?zB&C6fuLuH7++_N4IuF|U^fN-P7%|$hcNMFaC&Etyz
z`qFsrV`?ep$K_p*OsqC1OULUFc6PHhr5QfkwT{1sy;d@;S!LWS+Ceh?(ekG@X(HxI
zo+%XBA%8`1{$BY%zdqIag-!;pz9$uOem|HMa`EyHWDvZ!3V<}L{$L81#a=3n(LS&T
z#GMN*Ld*cjYO(ETo?{mV;0;;*p=xQ#aK2&u?{oRjMZ-QY&JaJA@z^ekOPP^%oj{pX
z0WQ!pr50*YK@Y>$-!?{nnya?#qf2fQO`4c*4hZlp1a9r`2=@QDwZG)e|LQIMOXXDm
z3!?nLxW&M01$u(0U6p@Xo&R%@VP|5=+yIes;iRM_q5Fb@bAM#@|HxeY-+$~r(Y;as
lf4}$Nultw$8<%=To=uarsKkD=>KgF#_>r~>O6leM{{^Cj{b~RJ

literal 0
HcmV?d00001

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
new file mode 100644
index 0000000000..8d79298b6a
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -0,0 +1,266 @@
+---
+title: Create and configure MCC cache nodes
+description: Details on how to create and configure Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: naengler
+ms.author: nidos
+author: doshnid
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
+---
+
+# Create Microsoft Connected Cache Azure resource and cache nodes
+
+This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
+
+## Prerequisites
+
+1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a free-of-charge service hosted in Azure. You'll need a pay-as-you-go Azure subscription in order to onboard to our service. To create a subscription, go to [pay-as-you-go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
+2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
+
+For more information on sizing and OS requirements, see [the prerequisites for using MCC](mcc-ent-prerequisites.md).
+
+
+## Create MCC Azure resource
+
+# [Azure portal](#tab/portal)
+
+1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for "Microsoft Connected Cache for Enterprise and Education".
+<!--
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+-->
+
+1. Select the Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Then enter a name for the resource and select Review + Create.
+
+1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
+
+1. The creation of the resource might take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
+
+
+# [Azure CLI](#tab/cli)
+
+### Prerequisites
+
+* An Azure CLI environment:
+
+  * Use the Bash environment in [Azure Cloud Shell](/azure/cloud-shell/get-started/classic).
+
+  * Or, if you prefer to run CLI reference commands locally, [install the Azure CLI](/cli/azure/install-azure-cli)
+
+    * Sign in to the Azure CLI by using the [az login](/cli/azure/reference-index#az-login) command.
+
+    * Run [az version](/cli/azure/reference-index#az-version) to find the version and dependent libraries that are installed. To upgrade to the latest version, run [az upgrade](/cli/azure/reference-index#az-upgrade).
+
+    * Install Azure CLI extension **mcc** by following the instructions [here](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions).
+
+    * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
+
+#### Create MCC Azure resource
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<location>*: The Azure region where your Microsoft Connected Cache will be located.
+
+```azurecli-interactive
+az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group <myrg> --location <region>
+```
+
+---
+
+## Create MCC cache node
+
+# [Azure portal](#tab/portal)
+
+  1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.<br>
+  1. Under Cache Node Management, select on Cache Nodes and then on + Create Cache Node.<br>
+  
+  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and select create. Note, cache node names have to be unique under the Microsoft Connected Cache resource.
+  <!--
+    :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
+    -->
+  The creation of cache node might take a few minutes. Select Refresh to see your recently created cache node.
+Once the cache node state changes to **Not Configured**, you can now configure your cache node.<br>
+To know more about different cache node state, see [Cache node states](#cache-node-states).
+
+
+# [Azure CLI](#tab/cli)
+
+Use the following command to create a new cache node if you don't already have one.
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<host-os>*: The OS on which cache node will be provisioned.
+  Accepted values: windows, linux
+
+```azurecli-interactive
+az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg> --host-os <linux>
+```
+
+<br>
+
+>[!NOTE]
+>To ensure cache node has been created successfully, please run the following command before continuing with cache node configuration.
+>```azurecli-interactive
+>az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
+>```
+>In the output look for cacheNodeState. If ***cacheNodeState = Not Configured***, you can continue with cache node configuration.
+>If ***cacheNodeState = Registration in Progress***, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+>To know more about different cache node state, see [Cache node states](#cache-node-states).
+
+---
+
+## Configure MCC cache node
+
+# [Azure portal](#tab/portal)
+Enter required values to configure your cache node. To learn more about the definitions of each field, review the [Configuration](#general-configuration-fields) fields at the bottom of this article.
+Don't forget to select save after adding configuration information.
+
+
+# [Azure CLI](#tab/cli)
+
+### Configure Linux MCC
+Use the following command to configure cache node for deployment to a **Linux** host machine.
+
+Replace the following placeholders with your own information:
+
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<physical-path>*: The cache drive path. You can add upto nine cache drives.
+* *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
+* *\<proxy>*: If proxy needs to be enabled or not.<br>
+  Accepted values: enabled, disabled<br>
+  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+* *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
+* *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
+* *\<auto-update-ring>*: Update ring the cache node should have.<br>
+  Accepted values: slow, fast.<br>
+  If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
+* *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
+  Accepted values: 1,2,3,4,5,6,7
+* *\<auto-update-time>*: The time of day cache node should be updated in 24 hour format (hh:mm)
+* *\<auto-update-week>*: The week of month cache node should be updated.<br>
+  Accepted values: 1,2,3,4
+
+```azurecli-interactive
+az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>
+--cache-drive "[{physical-path:</physical/path>,size-in-gb:<size of cache drive>},{</physical/path>,size-in-gb:<size of cache drive>}...]"> --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
+```
+
+<br>
+<br>
+
+### Configure Windows MCC
+Use the following command to configure cache node for deployment to a **Windows** host machine.
+
+Replace the following placeholders with your own information:
+  
+* *\<resource-group>*: An existing resource group in your subscription.
+* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<physical-path>*: The cache drive path.<br>
+  Accepted value: /var/mcc
+* *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
+* *\<proxy>*: If proxy needs to be enabled or not.<br>
+  Accepted values: enabled, disabled<br>
+  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+* *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
+* *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
+* *\<auto-update-ring>*: Update ring the cache node should have.<br>
+  Accepted values: slow, fast.<br>
+  If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
+* *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
+  Accepted values: 1,2,3,4,5,6,7
+* *\<auto-update-time>*: The time of day cache node should be updated in 24 hour format (hh:mm)
+* *\<auto-update-week>*: The week of month cache node should be updated.<br>
+  Accepted values: 1,2,3,4
+  
+```azurecli-interactive
+az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>
+--cache-drive "[{physical-path:/var/mcc,size-in-gb:<size of cache drive>}]" --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
+```
+
+---
+
+## Next step
+
+### [Azure portal](#tab/portal)
+To deploy the cache node to a **Windows** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
+
+To deploy the cache node to a **Linux** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
+
+### [Azure CLI](#tab/cli)
+To deploy cache nodes using Azure CLI, see 
+>[!div class="nextstepaction"]
+>[Manage cache nodes using CLI](mcc-ent-manage-cache-using-CLI.md)
+
+---
+<br>
+<br>
+
+
+### General configuration fields
+
+| Field Name |Expected Value |Description|
+|---|---|---|
+|**Cache node name** | Alphanumeric string that contains no spaces| The name of the cache node. You may choose names based on location such as "Seattle-1". This name must be unique and can't be changed later |
+|**Host OS** | Linux or Windows| This is the operating system of the host machine that the cache node will be deployed to.|
+
+### Storage fields
+
+##### Cache node for Linux
+
+>[!Important]
+>All cache drives must have full read/write permissions set or the cache node will not function. For example, in a terminal you can run: sudo chmod 777 /path/to/cachedrivefolder
+<br>
+
+| Field Name |Expected Value |Description|
+|---|---|---|
+|**Cache drive folder**| File path string |Up to nine drive folders accessible by the cache node can be configured for each cache node to configure cache storage. Enter the location of the folder in Ubuntu where the external physical drive is mounted. For example: /dev/sda3/. Each cache drive should have read/write permissions configured. Ensure your disks are mounted and visit Attach a data disk to a Linux VM for more information.|
+|**Cache drive size in gigabytes**| Integer in GB| Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB.|
+
+##### Cache node for Windows
+
+| Field Name |Expected Value |Description|
+|---|---|---|
+|**Cache drive folder**| File path string /var/mcc| This is the folder path where content is cached. You can't change the folder path.|
+|**Cache drive size in gigabytes**| Integer in GB| Set the size of each drive configured for the cache node. Minimum cache drive size is 50 GB. |
+
+#### Proxy settings
+<br>
+You can choose to enable or disable proxy settings on your cache node. Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+
+<br>
+
+>[!IMPORTANT]
+>Enabling or disabling the proxy settings after your cache node has been deployed will require running the provisioning script on the host machine again. This will ensure that proxy changes are in effect on the cache node. 
+
+| Field Name	|Expected Value	 |Description|
+|---|---|---|
+|**Proxy host name**|	String or number|	Proxy host name or address|
+|**Proxy port**|	Integer|	Proxy port
+
+<br>
+
+##### Cache node states
+| Cache node state |Description|
+|---|---|
+|Creation in progress| Cache node is being created|
+|Registration in progress| Cache node is being registered|
+|Not configured| Cache node is ready to be configured|
+|Not provisioned| Cache node is ready to be provisioned on host machine|
+|Healthy| Cache node phoning home|
+|Unhealthy| Cache node has stopped phoning home|
+|Never phoned home| Cache node has provisioned but has never phoned home|
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
new file mode 100644
index 0000000000..2c6895762d
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -0,0 +1,60 @@
+---
+title: Deploy MCC cache software to a Linux host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) cache software to a Linux host machine.
+author: chrisjlin
+ms.author: lichris
+manager: naengler
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.date: 09/27/2024
+appliesto: 
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+---
+
+# Deploy Microsoft Connected Cache caching software to a Linux host machine
+
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) caching software to a Linux host machine.
+
+Before deploying MCC to a Linux host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource and cache node](mcc-ent-create-resource-and-cache.md).
+
+## Steps to deploy MCC cache node to Linux
+
+# [Azure portal](#tab/portal)
+
+1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
+1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
+1. Run the provisioning command on the host machine.
+
+# [Azure CLI](#tab/cli)
+
+To deploy a cache node programmatically, you'll need to use Azure CLI to get the cache node's provisioning details and then run the provisioning command on the host machine.
+
+1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`
+
+   ```azurecli-interactive
+   az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+   ```
+
+1. Save the resulting output. These values will be passed as parameters within the provisioning command.
+1. Download and extract the [MCC provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
+1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
+1. Replace the values in the following provisioning command before running it on the host machine.
+
+   ```azurepowershell-interactive
+   sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
+   ```
+
+## Next step
+
+> [!div class="nextstepaction"]
+> [Verify cache node functionality](mcc-ent-verify-cache-node.md)
+
+## Related content
+
+- [Deploy to a Windows host machine](mcc-ent-deploy-to-windows.md)
+- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
new file mode 100644
index 0000000000..50b3544290
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -0,0 +1,70 @@
+---
+title: Deploy MCC cache software to a Windows host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) cache software to a Windows host machine.
+author: chrisjlin
+ms.author: lichris
+manager: naengler
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.date: 09/27/2024
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+---
+
+# Deploy Microsoft Connected Cache caching software to a Windows host machine
+
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) caching software to a Windows host machine.
+
+Deploying MCC to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCC runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
+
+Before deploying MCC to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](mcc-ent-create-resource-and-cache.md).
+
+## Steps to deploy MCC cache node to Windows
+
+# [Azure portal](#tab/portal)
+
+1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
+1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+
+   If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+
+1. Run the provisioning command on the host machine.
+
+# [Azure CLI](#tab/cli)
+
+To deploy a cache node programmatically, you'll need to use Azure CLI to get the cache node's provisioning details and then run the provisioning command on the host machine.
+
+1. To get the cache node's provisioning details, use `az mcc ent node get-provisioning-details`.
+
+   ```azurecli-interactive
+   az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+   ```
+
+1. Save the resulting output. These values will be passed as parameters within the provisioning command.
+1. Download and extract the [MCC provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
+1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
+1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+
+   If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+
+1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the MCC runtime account.
+
+   ```powershell-interactive
+   ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential
+   ```
+
+## Next step
+
+> [!div class="nextstepaction"]
+> [Verify cache node functionality](mcc-ent-verify-cache-node.md)
+
+## Related content
+
+- [Deploy to a Linux host machine](mcc-ent-deploy-to-linux.md)
+- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index b17beaa30a..601992fa5b 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -1,6 +1,6 @@
 ---
-title: MCC for Enterprise and Education Overview
-description: Overview, supported scenarios, and content types for Microsoft Connected Cache (MCC) for Enterprise and Education.
+title: MCC Overview
+description: Overview, supported scenarios, and content types for Microsoft Connected Cache for Enterprise and Education (MCC).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -13,61 +13,83 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 05/23/2024
+ms.date: 05/09/2023
 ---
 
 # Microsoft Connected Cache for Enterprise and Education Overview
 
 > [!IMPORTANT]
->
 > - Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
-> - As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be deployed to as many Windows servers, bare-metal servers, or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune.
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.<br>
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
 
-## Supported scenarios
+Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux] (windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
 
-Connected Cache (early preview) supports the following scenarios:
+### Supported scenarios and deployments
 
-- Pre-provisioning of devices using Windows Autopilot
-- Cloud-only devices, such as Intune-enrolled devices
+Microsoft Connected Cache for Enterprise and Education (preview) is intended to support the following content delivery scenarios:<br>
+* Pre-provisioning of devices using Windows Autopilot<br>
+* Co-managed clients that get monthly update and Win32 apps from Microsoft Intune. For more information, see Support for Intune Win32 apps.<br>
+* Cloud-only managed devices, such as Intune-enrolled devices without the Configuration Manager client, that get monthly update and Win32 apps from Microsoft Intune. For more information, see Support for cloud-managed devices.<br>
 
-## Supported content types
+Microsoft Connected Cache is built for flexible deployments to support a number of enterprise configurations:
 
+##### Branch office
+Customers may have globally dispersed offices that meet the following parameters:
+* 10 – 50 Windows Clients
+* No dedicated server hardware
+* Internet bandwidth is great to limited (satellite internet)
+* Possibly intermittent connectivity
+<br>
+To support the branch the branch office scenario, customers can deploy to a Windows 11 client (see Host machine requirements) device.
+
+##### Large Enterprise
+Customers may have office spaces, data centers, or Azure deployments that meet the following parameters:  
+* 100's or 1,000's of Windows devices (client or server).
+* Existing hardware – Decommissioned DP, file server, cloud print server
+* Azure VMs and Azure Virtual Desktop
+* Internet bandwidth is great to limited (T1)
+
+
+### Supported content types
 When clients download cloud-managed content, they use Delivery Optimization from the cache server installed on a Windows server or VM. Cloud-managed content includes the following types:
+* Windows updates: Windows feature and quality updates
+* Office Click-to-Run apps: Microsoft 365 Apps and updates
+* Client apps: Intune, store apps, and updates
+* Endpoint protection: Windows Defender definition updates
 
-- Windows updates: Windows feature and quality updates
-- Office Click-to-Run apps: Microsoft 365 Apps and updates
-- Client apps: Intune, store apps, and updates
-- Endpoint protection: Windows Defender definition updates
+For the full list of content endpoints that Microsoft Connected Cache for Enterprise and Education supports, see [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md).<br>
 
-For the full list of content endpoints that Microsoft Connected Cache for Enterprise and Education supports, see [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md).
+### Hardware or VM Requirements
+See [Host machine requirements](mcc-ent-prerequisites.md) for complete details.
+
+|Deployment Scenarios| Download Speed Range | Download Speeds and Content Volume Delivered in 8 Hours | VM/Hardware Recommendation |
+|---|---|---|---|
+|Branch Office|< 1 Gbps Peak| 500 Mbps - 1,800 GB </br></br> 250 Mbps - 900 GB </br></br> 100 Mbps - 360 GB </br></br> 50 Mbps - 180 GB| 4 Cores </br></br> Up to 8 GB Memory with 4 GB of Free </br></br> 100 GB free disk space|
+|Small to Medium Enterprises/Autopilot Provisioning Center - 50 - 500 devices in a single location|1 - 5 Gbps| 5 Gbps - 18,000 GB </br></br>3 Gbps - 10,800 GB </br></br>1 Gbps - 3,600 GB| 8 Cores </br></br> Up to 16 GB Memory with 4 GB of Free </br></br> 500 GB free disk space|
+|Medium to Large Enterprises/Autopilot Provisioning Center - 500 - 5,000 devices|5 - 101 Gbps Peak|   9 Gbps - 32,400 GB </br></br> 5 Gbps - 18,000 GB </br></br>3 Gbps - 10,800 GB| 16 Cores</br></br> 32 GB Memory with 4 GB of Free </br></br> 2 200-500 GB SSDs|
+
+<br>
 
 ## How it works
 
-MCC is a hybrid (mix of on-premises and cloud resources) SaaS solution built as an Azure IoT Edge module and Docker compatible Linux container deployed to your Windows devices. The Delivery Optimization team chose IoT Edge for Linux on Windows (EFLOW) as a secure, reliable container management infrastructure. EFLOW is a Linux virtual machine, based on Microsoft's first party CBL-Mariner operating system. It's built with the IoT Edge runtime and validated as a tier 1 supported environment for IoT Edge workloads. MCC is a Linux IoT Edge module running on the Windows Host OS.  
+The following diagram displays an overview of how MCC functions:<br>
 
-1. The Azure Management Portal is used to create MCC nodes.
-1. The MCC container is deployed and provisioned to the server using the installer provided in the portal.
-1. Client policy is set in your management solution to point to the IP address or FQDN of the cache server.
-1. Microsoft end-user devices make range requests for content from the MCC node.
-1. The MCC node pulls content from the CDN, seeds its local cache stored on disk, and delivers the content to the client.
-1. Subsequent requests from end-user devices for content will now come from cache.
-1. If the MCC node is unavailable, the client pulls content from CDN to ensure uninterrupted service for your subscribers.
+:::image type="content" source="./images/mcc_ent_publicpreview.png" alt-text="Diagram displaying the components of MCC." lightbox="./images/mcc_ent_publicpreview.png":::
 
-The following diagram displays an overview of how MCC functions:
 
-:::image type="content" source="./images/waas-mcc-diag-overview.png" alt-text="Diagram displaying the components of MCC." lightbox="./images/waas-mcc-diag-overview.png":::
+1. The Azure management portal for Microsoft Connected Cache or CLI are used to create cache nodes, configure deployments, including unauthenticated proxy settings.
+1. Prepare Windows or Linux devices. If deploying to Windows devices, prepare accounts - gMSA, local user account, domain account. Deploy to Windows or Linux devices using scripts.
+1. The Microsoft Connected Cache container is deployed to the device using Azure IoT Edge container management services and the cache server begins reporting status and metrics to Delivery Optimization services.
+1. The DOCacheHost setting is configured using Intune or other MDM, DHCP custom option, or registry key.
+1. Devices request content from the cache server, the cache server forwards the requests to the CDN and fills the cache, the cache server delivers the content requested to the devices, and uses Peer to Peer (depending on DO Download mode settings) for all DO content. 
+1. Devices can fallback to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN )settings to prefer the local cache server.
+Customers can view data regarding Microsoft Connected Cache downloads on management portal and Windows Update for Business reports
 
-## IoT Edge
 
-Even though your MCC scenario isn't related to IoT, Azure IoT Edge is used as a more generic Linux container deployment and management infrastructure. The Azure IoT Edge runtime sits on your designated MCC device and performs management and communication operations. The runtime performs several functions important to manage MCC on your edge device:
+## Next step
 
-1. Installs and updates MCC on your edge device.
-1. Maintains Azure IoT Edge security standards on your edge device.
-1. Ensures that MCC is always running.
-1. Reports MCC health and usage to the cloud for remote monitoring.
-  
-For more information on Azure IoT Edge, see the Azure IoT Edge [documentation](/azure/iot-edge/about-iot-edge).
+>[!div class="nextstepaction"]
+>[Create MCC Azure resources](mcc-ent-create-resource-and-cache.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
new file mode 100644
index 0000000000..390275b4b8
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -0,0 +1,72 @@
+### YamlMime:FAQ
+metadata:
+  title: MCC Frequently Asked Questions
+  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise (MCC).
+  ms.service: windows-client
+  ms.subservice: itpro-updates
+  ms.topic: faq
+  ms.author: nidos
+  author: doshnid
+  ms.reviewer: mstewart
+  manager: aaroncz
+  ms.collection:
+    - highpri
+    - tier3
+  appliesto: 
+    - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+    - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+  ms.date: 06/03/2024
+title: Microsoft Connected Cache for Enterprise Frequently Asked Questions
+summary: |
+  Frequently asked questions about Microsoft Connected Cache for Enterprise
+  
+sections:
+  - name: Ignored
+    questions:
+      - question: Is this product a free service?
+        answer: Yes. Microsoft Connected Cache is a free service.  
+      - question: Is there a nondisclosure agreement to sign?
+        answer: No, a nondisclosure agreement isn't required.
+      - question: What are the prerequisites and hardware requirements?
+        answer:  | 
+         - [Azure pay-as-you-go subscription](https://azure.microsoft.com/offers/ms-azr-0003p/).
+         - [Hardware to host Microsoft Connected Cache](mcc-ent-edu-overview.md)
+         - [Host machine requirements](mcc-ent-prerequisites.md)
+      - question: What host OS do I need to deploy MCC?
+        answer: You can use Linux or Windows OS. Depending on the OS, the provisioning script and certain provisioning steps are different. 
+      - question: What content is cached by Microsoft Connected Cache?
+        answer: For more information about content cached, see [Delivery Optimization and Microsoft Connected Cache content endpoints](delivery-optimization-endpoints.md).
+      - question: Do I need to provide hardware BareMetal server or a virtual machine (VM)?
+        answer: Microsoft Connected Cache is a software-only caching solution and requires you to provide your own server to host the software.   
+      - question: Can we use hard drives instead of SSDs?
+        answer: We highly recommend using SSDs as Microsoft Connected Cache is a read intensive application. We also recommend using multiple drives to improve performance.
+      - question: Where should we install Microsoft Connected Cache?
+        answer: You are in control of your hardware and you can pick the location based on your traffic and end clients. You can choose the location where you have your routers or where you have dense traffic or any other parameters.   
+      - question: How can I set up a gMSA account?
+        answer: For more information about gMSA accounts, see [Learn how to provision a Group Managed Service Account on a Domain Controller](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts#create-group-managed-service-accounts). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
+      - question: How can I set up a local account?
+        answer: For more information, see [Learn how to provision a Local User Account](https://support.microsoft.com/topic/104dc19f-6430-4b49-6a2b-e4dbd1dcdf32). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
+      - question: Where can I monitor cache node usage?
+        answer: You can monitor your cache node usage on Azure portal. For more information, see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
+      - question: Does Microsoft Connected Cache support Xbox or Microsoft Teams content?
+        answer: Currently, Microsoft Connected Cache doesn't support Xbox or Microsoft Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
+      - question: How does Microsoft Connected Cache populate its content? Can I precache content?
+        answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there's no cache fill necessary. "Preseeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
+      - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
+        answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content is in the hot cache path (open handles and such) for 24 hrs, but will reside on disk for 30 days. The drive fills up and nginx starts to delete content based on its own algorithm, probably some combination of least recently used.
+      - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
+        answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft validates updates prior to releasing Enterprises Connected Cache updates and will only release updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
+      - question: How do I set up CLI?
+        answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
+      - question: How do I install MCC extension?
+        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
+      - question: What do I do if I have to set up or change existing proxy?
+        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-proxy.md).
+      - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
+        answer: Microsoft Connected Cache isn't a service that has dependency on a specific Azure region, and there isn't personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
+      - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?
+        answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability are top priories for customers. Microsoft provides guidance on both Active Directory and Microsoft Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security)).
+      - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
+        answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task remains running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS.
+      - question: What do I do if I need more support and have more questions even after reading this FAQ page?
+        answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-cli.md b/windows/deployment/do/mcc-ent-manage-cache-using-cli.md
new file mode 100644
index 0000000000..c48dd5e04b
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-manage-cache-using-cli.md
@@ -0,0 +1,209 @@
+---
+title: Manage MCC cache nodes using CLI
+description: Details on how to manage Microsoft Connected Cache for Enterprise (MCC) cache nodes via Azure CLI commands.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: aaroncz
+ms.author: nidos
+author: doshnid
+ms.reviewer: mstewart
+ms.collection: tier3
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
+---
+
+# Manage cache nodes using CLI
+
+<br>
+
+This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCC) cache nodes using Azure CLI.
+
+ 
+## Prerequisites:
+1. **Install Azure CLI**: [How to install the Azure CLI](/cli/azure/install-azure-cli)
+1. **Install MCC extension**: Install MCC extension via the command below
+
+```azurecli-interactive
+az extension add --name mcc
+```
+
+To learn more about installting extensions, visit [Install the MCC extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
+
+<br>
+<br>
+
+### 1. Create a Resource group
+
+The first step is to create a resource group if you don't already have one.
+An Azure resource group is a logical container into which Azure resources are deployed and managed.
+
+To create a resource group, use `az group create`. You can find more details on this CLI command [here](/cli/azure/group#az-group-create).
+<br>
+
+```azurecli-interactive
+az group create --name myrg --location westus
+```
+
+Once the resource group is created, you'll need to create a Microsoft Connected Cache for Enterprise resource.
+
+### 2. Create an MCC Azure resource
+
+An MCC Azure resource is a top-level Azure resource under which cache nodes can be created.
+
+To create an MCC Azure resource, use `az mcc ent resource create`
+
+```azurecli-interactive
+az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
+```
+
+<br>
+
+>[!IMPORTANT]
+>In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating MCC resource.
+
+<br>
+
+The next step is to create a cache node under this resource.
+
+
+### 3. Create a cache node
+
+To create a cache node, use `az mcc ent node create`
+
+```azurecli-interactive
+az mcc ent node create --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg --host-os <linux or windows>
+```
+
+<br>
+
+>[!IMPORTANT]
+>In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating cache node.
+
+<br>
+
+### 4. Confirm cache node creation
+
+Before you can start configuring your cache node, you need to confirm that the cache node was successfully created.
+
+To confirm cache node creation, use `az mcc ent node show`
+
+<br>
+
+```azurecli-interactive
+az mcc ent node show --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg  
+```
+
+>[!IMPORTANT]
+>In the output look for cacheNodeState. If **cacheNodeState = Not Configured**, you can continue with cache node configuration.
+>If **cacheNodeState = Registration in Progress**, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+
+<br>
+
+Once successful cache node creation is confirmed, you can proceed to configure the cache node.
+
+
+### 5. Configure cache node
+
+To configure your cache node, use `az mcc ent node update`
+
+The below example configures a Linux cache node with proxy enabled:
+
+```azurecli-interactive
+az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>
+--cache-drive "[{physical-path:</physical/path>,size-in-gb:<size of cache drive>},{</physical/path>,size-in-gb:<size of cache drive>}...]"> --proxy <enabled> --proxy-host <"proxy host name"> --proxy-port <proxy port>  --auto-update-day <day of week> --auto-update-time <time of day> --auto-update-week <week of month> --auto-update-ring <update ring>
+```
+
+>[!Note]
+>* For a cache node that is to be deployed on Windows host OS, the physical path of the cache drive <u>must</u> be **/var/mcc**.<br>
+>* In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node. You will also see that cacheNodeState will show "Not Provisioned". <br>
+>* Please save values for <u>physicalPath, sizeInGb, proxyPort, proxyHostName</u> as these values will be needed to construct the provisioning script.
+
+
+<br>
+
+### 6. Get provisioning details for the cache node
+
+After successfully configuring the cache node, the next step is to deploy the cache node to a host machine. To deploy the cache node, you'll need to create a provisioning script with relevant information.
+
+To get the relevant information for provisioning script, use `az mcc ent node get-provisioning-details`
+
+```azurecli-interactive
+az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-resource-name mymccresource --resource-group myrg
+```
+
+>[!IMPORTANT]
+>* Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
+>* In the output look for cacheNodeState. If **cacheNodeState = Not Provisioned**, you can continue with cache node provisioning.
+>* If **cacheNodeState = Not Configured**, then the cache node has not been configured. Please configure the cache node before provisioning.
+
+### Example script:
+
+Below is a pseudocode example of how to script bulk creation and configuration of an MCC Azure resource and multiple MCC cache nodes.
+
+<!--# [Bash](#tab/bash)
+
+:::code language="azurecli" source="~/azure_cli_scripts/azure-cli/create-azure-resources-at-scale/bash/create-azure-resources-at-scale.sh" id="step4":::
+
+In your console output, are you missing the last row in your CSV file?  This can be caused by a missing line continuation character after the last line. Add a blank line at the end of your CSV file to fix the issue.
+
+# [PowerShell](#tab/powershell)
+
+:::code language="azurecli" source="~/azure_cli_scripts/azure-cli/create-azure-resources-at-scale/powershell/create-azure-resources-at-scale.ps1" id="step4":::
+
+-->
+
+# [PowerShell](#tab/powershell)
+
+```powershell
+#Define variables
+$mccResourceName = "myMCCResource"
+$cacheNodeName = "demo-node"
+$cacheNodeOperatingSystem = "Windows"
+$resourceGroup = "myRG"
+$resourceLocation = "westus"
+$cacheNodesToCreate = 2
+$proxyHost = "myProxy.com"
+$proxyPort = "8080"
+$waitTime = 3
+
+#Create MCC Az resource
+az mcc ent resource create --mcc-resource-name $mccResourceName --location $resourceLocation --resource-group $resourceGroup
+
+#Loop through $cacheNodesToCreate iterations
+for ($cacheNodeNumber = 1; $cacheNodeNumber -le $cacheNodesToCreate; $cacheNodeNumber++) {
+    $iteratedCacheNodeName = $cacheNodeName + "-" + $cacheNodeNumber
+    
+    #Create cache node
+    az mcc ent node create --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --host-os $cacheNodeOperatingSystem --resource-group $resourceGroup
+
+    #Get cache node state
+    $cacheNodeState = $(az mcc ent node show --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --query "cacheNodeState") | ConvertFrom-Json
+
+    $howLong = 0
+    #Wait until cache node state returns "Not Configured"
+    while ($cacheNodeState -ne "Not Configured") {
+        Write-Output "Waiting for cache node creation to complete...$howLong seconds"
+        Start-Sleep -Seconds $waitTime
+        $howLong += $waitTime
+    
+        $cacheNodeState = $(az mcc ent node show --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --query "cacheNodeState") | ConvertFrom-Json
+    }
+
+    #Configure cache node
+    az mcc ent node update --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --cache-drive  "[{physical-path:/var/mcc,size-in-gb:50}]" --proxy enabled --proxy-host $proxyHost --proxy-port $proxyPort
+}
+```
+
+## Next step
+
+To deploy the cache node to a **Windows** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Windows](mcc-ent-deploy-to-windows.md)
+
+To deploy the cache node to a **Linux** host machine, see 
+>[!div class="nextstepaction"]
+>[Deploy cache node to Linux](mcc-ent-deploy-to-linux.md)
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
new file mode 100644
index 0000000000..fd1e2c5e51
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -0,0 +1,61 @@
+---
+title: Monitor usage of MCC cache nodes
+description: Details on how to monitor the usage of Microsoft Connected Cache for Enterprise (MCC) cache nodes.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: naengler
+ms.author: lichris
+author: chrisjlin
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 09/04/2024
+---
+
+# Monitor Microsoft Connected Cache cache node usage
+
+Tracking the status and performance of your MCC cache node is essential to making sure that you're getting the most out of the service.
+
+<!-- Add standard metrics
+
+      Add scenarios for creating custom metrics -->
+
+## Cache node summary
+
+The Cache Node Summary box on your Azure portal 
+
+| Metric | Description |
+| --- | --- |
+| Healthy nodes | The MCC service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
+| Unhealthy nodes | If the cache node doesn't respond, it is labeled as unhealthy. |
+| Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic isn't dependent on the time filter near the charts. |
+| Max out | The minimum egress (in Mb/sec.) that your node has pushed out at any given time. |
+| Average in | The average ingress (in Mb/sec.) that your node has pulled in over its lifetime. This statistic isn't dependent on the time filter near the charts. |
+| Average out | The average egress (in Mb/sec.) that your node has pushed out over its lifetime. |
+| Cache efficiency | The percentage of all requests that your MCC node receives that are ultimately delivered by your MCC node. An effective node is generally expected to have an efficiency >95%. |
+
+## Charts
+
+### Filters
+
+- Will only filter the data shown in the two charts, scalable from 1 hour to 30 days
+- Can view data by individual cache nodes or the average of all your active MCC nodes.
+
+### Outbound traffic
+
+- The egress (in Mb/sec) that your MCC node is pushing out at specific time intervals
+
+### Volume by Content Type
+
+- The volume of content that your MCC cache node is distributing, broken down by the hostname used to download said content
+
+## Additional metrics
+
+### Custom metrics
+
+- Navigate to the "Metrics" tab in the left-hand toolbar
+- Configure chart as desired using the provided metrics
+
+<!-- ### Windows Update for Business (WUfB) reports -->
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
new file mode 100644
index 0000000000..f95d8fb53d
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -0,0 +1,72 @@
+---
+title: MCC prerequisites
+description: Details of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: conceptual
+ms.author: lichris
+author: chrisjlin
+manager: naengler
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
+ms.date: 09/27/2024
+---
+
+# Microsoft Connected Cache for Enterprise and Education Requirements
+
+This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
+
+## Licensing requirements
+
+- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCC) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
+
+    If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
+
+    The Azure resources used for MCC will be free to you during this public preview.
+
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCC cache node.
+
+    - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
+    - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
+
+## Cache node host machine requirements
+
+### General requirements
+
+- Any previous installations of MCC must be [uninstalled](mcc-ent-uninstall-cache-node.md) before installing the latest version of MCC.
+- [These listed endpoints](delivery-optimization-endpoints.md) must be reachable by the host machine.
+- The host machine must have no other services / applications utilizing port 80 (for example, ConfigManager or Distribution Point).
+- The host machine must have at least 4 GB of free memory.
+
+### Additional requirements for Windows host machines
+
+- The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
+    - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
+    - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
+- The Windows host machine must support nested virtualization.
+- The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
+
+### Additional requirements for Linux host machines
+
+- The Linux host machine must be using one of the following Operating Systems:
+
+    - Ubuntu 20.04
+    - Red Hat Enterprise Linux (RHEL) 8.* or 9.*
+        - If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)
+
+### Networking recommendations for host machines
+
+- Multiple network interface cards (NICs) on a single MCC instance aren't supported.
+- 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
+- The NIC and BIOS should support SR-IOV for best performance.
+
+### Host machine sizing recommendations
+
+| Component  | Branch Office / Small Enterprise | Large Enterprise |
+| --- | --- | --- |
+| OS|  Windows Server 2022 <br> Windows 11 (Pro or Enterprise) | Same |
+|NIC | 1 Gbps | 5 Gbps |
+|Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
+|Memory | 4 GB | 8 GB |
+|Cores | 4 | 8  |
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
new file mode 100644
index 0000000000..03c549f395
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -0,0 +1,26 @@
+---
+title: MCC Private Preview
+description: Details on Microsoft Connected Cache for Enterprise (MCC) Private Preview
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: conceptual
+manager: naengler
+ms.author: lichris
+author: chrisjlin
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 06/03/2024
+---
+
+# Microsoft Connected Cache for Enterprise and Education (MCC) Private Preview
+
+If you participated in the MCC early preview, thank you for your collaboration and feedback.
+
+To continue using MCC, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
+
+As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
+
+## Next step
+
+> [!div class="nextstepaction"]
+> [View documentation for MCC Public Preview](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
new file mode 100644
index 0000000000..45efd09f1b
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -0,0 +1,40 @@
+---
+title: MCC Release Notes
+description: Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC).
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: conceptual
+ms.author: lichris
+author: chrisjlin
+manager: naengler
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+ms.date: 09/27/2024
+---
+
+# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC)
+
+This article contains details about the latest releases of MCC. Since MCC is a Preview service, some releases may contain breaking changes that will be highlighted as such.
+
+## Release v0.1.0 (Public Preview launch)
+
+- Released on **10/17/2024**
+- Contains breaking changes
+- Contains service changes
+- Contains client changes
+- Affects Linux, Windows host machines
+
+### Changenotes
+
+- Added new "Outbound egress" and "Volume by Content type" monitoring charts to Azure portal user interface
+- Added ability to create custom monitoring charts under the Metrics tab in the Azure portal user interface
+- Added support for creating both Windows-hosted and Linux-hosted cache nodes under the same MCC Azure resource
+- Added Azure CLI support for programmatic creation and management of MCC Azure resources and cache nodes
+- Added support for unauthenticated proxy and cloud proxy integration
+- Added ability to set each cache node's Update Ring to govern cadence of MCC container updates
+
+## Related content
+
+- [Overview of MCC](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
new file mode 100644
index 0000000000..4199588658
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
@@ -0,0 +1,73 @@
+---
+title: MCC support and troubleshooting
+description: Details on how to troubleshoot and seek support for Microsoft Connected Cache for Enterprise (MCC).
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+manager: naengler
+ms.author: lichris
+author: chrisjlin
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
+ms.date: 09/27/2024
+---
+
+
+# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCC)
+
+This article contains instructions on how to troubleshoot different issues you may encounter while using MCC. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
+
+## Steps to obtain an Azure subscription ID
+
+<!--Using include file, get-azure-subscription.md, do/mcc-isp.md for shared content-->
+[!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
+
+## Troubleshooting Azure resource creation
+
+MCC Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
+
+## Troubleshooting cache node issue
+If you are facing issues with your cache node, it could be due to cache node being on the early preview version of MCC. Cache nodes belonging to early preview version will be under MCC resource that will have 'early preview' in its name. Please delete these cache nodes and associated MCC resource and create a new MCC resource on the new version.
+For detailed instructions on creating MCC resource, see [Create MCC Azure resources](mcc-ent-create-resource-and-cache.md)
+
+
+## Troubleshooting cache node deployment
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+
+1. Step 1
+1. Step 2
+1. Step 3
+
+## Troubleshooting cache node monitoring
+TODO: Add introduction sentence(s)
+[Include a sentence or two to explain only what is needed to complete the procedure.]
+TODO: Add ordered list of procedure steps
+
+1. Step 1
+1. Step 2
+1. Step 3
+
+<!-- 5. Next step/Related content------------------------------------------------------------------------
+
+Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
+  - For Next step, provide one link to the next step in a sequence. Use the blue box format
+  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
+
+-->
+
+## Diagnose and Solve
+
+If this article isn't resolving the issue you're facing with your cache node, you can use the **Diagnose and solve problems** functionality within your MCC resource to continue troubleshooting. **Diagnose and solve problems** contains solutions to most common problems that users might face as they onboard.
+
+You can find **Diagnose and solve problems** on the left pane within your MCC resource.
+
+Within **Diagnose and solve problems**, select **Troubleshoot** under the type of problem you're facing and follow the prompts that narrow down the solution to the issue.
+
+
+## Filing a support request
+
+TODO: Add steps for filling out a CSS ticket.
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
new file mode 100644
index 0000000000..3d554c99a0
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -0,0 +1,35 @@
+---
+title: Uninstall MCC cache nodes
+description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) from a host machine.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.author: lichris
+author: chrisjlin
+manager: naengler
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
+ms.date: 09/27/2024
+---
+
+# Uninstall MCC caching software from a host machine
+
+This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
+
+## Steps to uninstall MCC from a Windows host machine
+
+1. Launch a PowerShell window *as administrator* and navigate to the MCC installation directory (C:\mcconwsl01 by default)
+1. Run the `uninstallmcconwsl.ps1` script
+
+## Steps to uninstall MCC from a Linux host machine
+
+The `uninstallmcc.sh` script within the provisioning package uninstalls the MCC caching software and all related components, including:
+
+- IoT Edge
+- IoT Edge Agent
+- IoT Edge Hub
+- MCC
+- Moby CLI
+- Moby engine
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
new file mode 100644
index 0000000000..604ac96ddd
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -0,0 +1,58 @@
+---
+title: Update MCC cache nodes
+description: Details on how Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes are updated by Microsoft.
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.author: andyriv
+author: chrisjlin
+manager: naengler
+appliesto: 
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
+- ✅ Supported Linux distributions
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
+ms.date: 09/27/2024
+---
+# Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCC)
+
+Microsoft Connected Cache for Enterprise and Education (MCC) caching software is deployed to host machines as a container. The container OS and any software component within the container need to be updated to address security vulnerabilities and improve quality and performance. These Microsoft-published container updates are referred to as "MCC updates" in this article.
+
+Microsoft silently deploys MCC updates to your cache nodes based on the Update Ring setting you configure for each cache node.
+
+## Update rings
+
+MCC cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
+
+In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCC update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCC update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
+
+### Update ring options
+
+>[!IMPORTANT]
+>In the event of a critical security patch, Microsoft may elect to initiate an MCC update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each MCC update.
+
+#### Fast Ring
+All MCC cache nodes are configured to update as part of the Fast ring by default. MCC cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
+
+#### Slow Ring
+Configuring an MCC cache node to update as part of the Slow ring provides users with the option to delay MCC software updates until the update can be validated. There are three settings that control when MCC updates will be applied to MCC cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
+
+| Setting | Description |
+| --- | --- |
+| Week of the month | 1st to 4th week can be selected. There are three to four months in a year that could have a 5th week. If there's a 5th week, the update could be applied during that 5th week if the day of the week falls near the last day of the month.|
+| Day of the week | Monday through Sunday can be selected. |
+| Time of day | Time of day is based on UTC and a 24 hour clock. |
+
+## Update process
+
+When Microsoft publishes an MCC update, the MCC service attempts to update all MCC cache nodes based on their Update Ring membership. If a cache node can't complete the silent MCC update within 6 hours of starting, an error message is surfaced in the Azure portal.
+
+## Update terminology, criteria, and SLA
+
+MCC updates will be released based on need instead of on a set cadence.
+
+| Update type | Criteria and SLA |
+| --- | --- |
+| Security | Security updates are the highest priority and will be released based on the severity rating of the vulnerability. [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 60 days of discovery. [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 120 days |
+| Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates are released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
+
+For information on all released Microsoft Connected Cache updates, see the [MCC release notes](mcc-ent-release-notes.md).
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
new file mode 100644
index 0000000000..bf7720bce4
--- /dev/null
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -0,0 +1,46 @@
+---
+title: Verify MCC cache node functionality
+description: Details on how to verify functionality of Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes.
+author: chrisjlin
+ms.author: lichris
+manager: naengler
+ms.service: windows-client
+ms.subservice: itpro-updates
+ms.topic: how-to
+ms.date: 09/27/2024
+appliesto: 
+- ✅ Windows-hosted MCC cache nodes
+- ✅ Linux-hosted MCC cache nodes
+- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
+---
+
+# Verify MCC cache node functionality
+
+This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCC) cache node is functioning correctly.
+
+These steps should be taken after deploying MCC caching software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
+
+## Steps to verify functionality of MCC cache node
+
+1. To verify that the MCC container on the host machine is running and reachable, run the following command from the host machine:
+
+    ```powershell
+    wget http://localhost/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com
+    ```
+
+    If successful, there should be an HTTP response with StatusCode 200.
+
+1. To verify that Windows clients in your network can reach the MCC cache node, visit the following address from a web browser on a Windows client device:
+
+    `http://[HostMachine-IP-address]/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com`
+
+    If successful, the Windows client device should begin to download a small image file from the MCC cache node.
+
+1. To check how much content an individual Windows client has pulled from an MCC cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+
+    You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
+
+## Related content
+
+- [Monitor cache node usage](mcc-ent-monitoring.md)
+- [Troubleshoot cache node](mcc-ent-support-and-troubleshooting.md)
diff --git a/windows/deployment/do/mcc-enterprise-appendix.md b/windows/deployment/do/mcc-enterprise-appendix.md
deleted file mode 100644
index 6264ea32c4..0000000000
--- a/windows/deployment/do/mcc-enterprise-appendix.md
+++ /dev/null
@@ -1,138 +0,0 @@
----
-title: Appendix for MCC for Enterprise and Education
-description: This article contains reference information for Microsoft Connected Cache (MCC) for Enterprise and Education.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: reference
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 05/23/2024
----
-
-# Appendix
-
-## Steps to obtain an Azure subscription ID
-
-<!--Using include file, get-azure-subscription.md, do/mcc-isp.md for shared content-->
-[!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
-
-### Troubleshooting
-
-If you're not able to sign up for a Microsoft Azure subscription with the **Account belongs to a directory that cannot be associated with an Azure subscription. Please sign in with a different account.** error, see the following articles:
-
-- [Can't sign up for a Microsoft Azure subscription](/troubleshoot/azure/general/cannot-sign-up-subscription).
-- [Troubleshoot issues when you sign up for a new account in the Azure portal](/azure/cost-management-billing/manage/troubleshoot-azure-sign-up).
-
-## Hardware specifications
-
-Most customers choose to install their cache node on a Windows Server with a nested Hyper-V VM. If this isn't supported in your network, some customers have also opted to install their cache node using VMware. At this time, a Linux-only solution isn't available and Azure VMs don't support the standalone Microsoft Connected Cache.
-
-### Installing on VMware
-
-Microsoft Connected Cache for Enterprise and Education can be successfully installed on VMware. To do so, there are a couple of additional configurations to be made. Ensure the VM is turned off before making the following configuration changes:
-
-1. Ensure that you're using ESX. In the VM settings, turn on the option **Expose hardware assisted virtualization to the guest OS**.
-1. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**.
-
-### Installing on Hyper-V
-
-To learn more about how to configure Intel and AMD processors to support nested virtualization, see [Run Hyper-V in a Virtual Machine with Nested Virtualization](/virtualization/hyper-v-on-windows/user-guide/nested-virtualization).
-
-## Diagnostics Script
-
-If you're having issues with your MCC, we included a diagnostics script. The script collects all your logs and zips them into a single file. You can then send us these logs via email for the MCC team to debug.
-
-To run this script:
-
-1. Navigate to the following folder in the MCC installation files:
-
-    mccinstaller > Eflow > Diagnostics
-
-1. Run the following commands:
-
-   ```powershell
-   Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-   .\collectMccDiagnostics.ps1
-   ```
-
-1. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\<currentpath\>**\mccdiagnostics\support_bundle_\$timestamp.tar.gz
-
-1. [Email the MCC team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process.
-
-## IoT Edge runtime
-
-The Azure IoT Edge runtime enables custom and cloud logic on IoT Edge devices.
-The runtime sits on the IoT Edge device, and performs management and
-communication operations. The runtime performs several functions:
-
-- Installs and update workloads (Docker containers) on the device.
-- Maintains Azure IoT Edge security standards on the device.
-- Ensures that IoT Edge modules (Docker containers) are always running.
-- Reports module (Docker containers) health to the cloud for remote monitoring.
-- Manages communication between an IoT Edge device and the cloud.
-
-For more information on Azure IoT Edge, see the [Azure IoT Edge documentation](/azure/iot-edge/about-iot-edge).
-
-## Routing local Windows clients to an MCC
-
-### Get the IP address of your MCC using ifconfig
-
-There are multiple methods that can be used to apply a policy to PCs that should participate in downloading from the MCC.
-
-#### Registry key
-
-You can either set your MCC IP address or FQDN using:
-
-1. Registry key (version 1709 and later):  
-    `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization`
-</br>
-    "DOCacheHost"=" "  
-
-    From an elevated command prompt:
-
-    ```powershell
-        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f
-    ```
-
-1. MDM path (version 1809 and later):
-
-    `.Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHost`
-
-1. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the MCC using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your MCC, such as `10.137.187.38`.
-
-   :::image type="content" source="./images/ent-mcc-group-policy-hostname.png" alt-text="Screenshot of the Group Policy editor showing the Cache Server Hostname Group Policy setting." lightbox="./images/ent-mcc-group-policy-hostname.png":::
-
-## Verify content using the DO client
-
-To verify that the Delivery Optimization client can download content using MCC, you can use the following steps:
-
-1. Download a game or application from the Microsoft Store.
-
-   :::image type="content" source="./images/ent-mcc-store-example-download.png" alt-text="Screenshot of the Microsoft Store with the game, Angry Birds 2, selected.":::
-
-1. Verify downloads came from MCC by one of two methods:
-
-    - Using the PowerShell Cmdlet Get-DeliveryOptimizationStatus you should see *BytesFromCacheServer*.
-
-      :::image type="content" source="./images/ent-mcc-get-deliveryoptimizationstatus.png" alt-text="Screenshot of the output of Get-DeliveryOptimization | FT from PowerShell." lightbox="./images/ent-mcc-get-deliveryoptimizationstatus.png":::
-
-    - Using the Delivery Optimization Activity Monitor
-
-      :::image type="content" source="./images/ent-mcc-delivery-optimization-activity.png" alt-text="Screenshot of the Delivery Optimization Activity Monitor.":::
-
-## EFLOW
-
-- [What is Azure IoT Edge for Linux on Windows](/azure/iot-edge/iot-edge-for-linux-on-windows)
-- [Install Azure IoT Edge for Linux on Windows](/azure/iot-edge/how-to-provision-single-device-linux-on-windows-symmetric#install-iot-edge)
-- [PowerShell functions for Azure IoT Edge for Linux on Windows](/azure/iot-edge/reference-iot-edge-for-linux-on-windows-functions)
-- EFLOW FAQ and Support: [Support · Azure/iotedge-eflow Wiki (github.com)](https://github.com/Azure/iotedge-eflow/wiki/Support#how-can-i-apply-updates-to-eflow)
-- [Now ready for Production: Linux IoT Edge Modules on Windows - YouTube](https://www.youtube.com/watch?v=pgqVCg6cxVU&ab_channel=MicrosoftIoTDevelopers)
diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md
deleted file mode 100644
index 5cc7236b51..0000000000
--- a/windows/deployment/do/mcc-enterprise-deploy.md
+++ /dev/null
@@ -1,418 +0,0 @@
----
-title: Deploying your cache node
-description: How to deploy a Microsoft Connected Cache (MCC) for Enterprise and Education cache node from the Azure portal.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-ms.reviewer: mstewart
-manager: aaroncz
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 05/23/2024
----
-
-# Deploy your cache node
-
-This article describes how to deploy a Microsoft Connected Cache (MCC) for Enterprise and Education cache node.
-
-## Steps to deploy MCC
-
-To deploy MCC to your server:
-
-1. [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id)
-1. [Create the MCC Resource in Azure](#create-the-mcc-resource-in-azure)
-1. [Create an MCC Node](#create-an-mcc-node-in-azure)
-1. [Edit Cache Node Information](#edit-cache-node-information)
-1. [Install MCC on a physical server or VM](#install-mcc-on-windows)
-1. [Verify MCC functionality](#verify-mcc-server-functionality)
-1. [Review common Issues](#common-issues) if needed.
-
-### Provide Microsoft with the Azure subscription ID
-
-As part of the MCC preview onboarding process an Azure subscription ID must be provided to Microsoft.
-
-> [!IMPORTANT]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
-
-For information about creating or locating your subscription ID, see [Steps to obtain an Azure subscription ID](mcc-enterprise-appendix.md#steps-to-obtain-an-azure-subscription-id).
-
-### Create the MCC resource in Azure
-
-The MCC Azure management portal is used to create and manage MCC nodes. An Azure subscription ID is used to grant access to the preview and to create the MCC resource in Azure and Cache nodes.
-
-Once you take the survey above and the MCC team adds your subscription ID to the allowlist, you'll be given a link to the Azure portal where you can create the resource described below.
-
-1. In the Azure portal home page, choose **Create a resource**:  
-
-   :::image type="content" source="./images/ent-mcc-create-azure-resource.png" alt-text="Screenshot of the Azure portal. The create a resource option is outlined in red.":::
-
-1. Type **Microsoft Connected Cache** into the search box, and hit **Enter** to show search results.
-
-   > [!NOTE]
-   > You won't see Microsoft Connected Cache in the drop-down list. You'll need to type the string and press enter to see the result.
-
-1. Select **Microsoft Connected Cache Enterprise** and choose **Create** on the next screen to start the process of creating the MCC resource.
-
-   :::image type="content" source="./images/ent-mcc-azure-search-result.png" alt-text="Screenshot of the Azure portal search results for Microsoft Connected Cache.":::
-
-   :::image type="content" source="./images/ent-mcc-azure-marketplace.png" alt-text="Screenshot of Microsoft Connected Cache Enterprise within the Azure Marketplace.":::
-
-1. Fill in the required fields to create the MCC resource.
-
-    - Choose the subscription that you provided to Microsoft.
-    - Azure resource groups are logical groups of resources. Create a new resource group and choose a name for your resource group.
-    - Choose **(US) West US** for the location of the resource. This choice won't impact MCC if the physical location isn't in the West US, it's just a limitation of the preview.
-
-       > [!IMPORTANT]
-       > Your MCC resource will not be created properly if you do not select **(US) West US**
-
-    - Choose a name for the MCC resource.
-      - Your MCC resource must not contain the word **Microsoft** in it.
-
-      :::image type="content" source="./images/ent-mcc-azure-create-connected-cache.png" alt-text="Screenshot of the Create a Connected Cache page within the Azure Marketplace.":::
-
-1. Once all the information has been entered, select the **Review + Create** button. Once validation is complete, select the **Create** button to start the resource creation.
-
-    :::image type="content" source="./images/ent-mcc-azure-cache-created.png" alt-text="Screenshot of the completed cache deployment within the Azure." lightbox="./images/ent-mcc-azure-cache-created.png":::
-
-#### Error: Validation failed
-
-- If you get a Validation failed error message on your portal, it's likely because you selected the **Location** as **US West 2** or some other location that isn't **(US) West US**.
-  - To resolve this error, go to the previous step and choose **(US) West US**.
-
-    :::image type="content" source="./images/ent-mcc-create-cache-failed.png" alt-text="Screenshot of a failed cache deployment due to an incorrect location.":::
-
-### Create an MCC node in Azure
-
-Creating an MCC node is a multi-step process and the first step is to access the MCC early preview management portal.
-
-1. After the successful resource creation, select  **Go to resource**.
-1. Under **Cache Node Management** section on the leftmost panel, select **Cache Nodes**.
-
-    :::image type="content" source="./images/ent-mcc-cache-nodes.png" alt-text="Screenshot of the Cache Node Management section with the navigation link to the Cache Nodes page outlined in red.":::
-
-1. On the **Cache Nodes** blade, select the **Create Cache Node** button.
-
-    :::image type="content" source="./images/ent-mcc-create-cache-node.png" alt-text="Screenshot of the Cache Nodes page with the Create Cache Node option outlined in red.":::
-
-1. Selecting the **Create Cache Node** button will open the **Create Cache Node** page; **Cache Node Name** is the only field required for cache node creation.
-
-   | Field Name | Expected Value | Description |
-   |---|---|---|
-   | **Cache Node Name** | Alphanumeric name that doesn't include any spaces. | The name of the cache node. You may choose names based on location such as `Seattle-1`. This name must be unique and can't be changed later. |
-
-1. Enter the information for the **Cache Node** and select the **Create** button.
-
-   :::image type="content" source="./images/ent-mcc-create-cache-node-name.png" alt-text="Screenshot of the Cache Nodes page displaying the Cache Node Name text entry during the creation process.":::
-
-If there are errors, the form will provide guidance on how to correct the errors.
-
-Once the MCC node has been created, the installer instructions will be exposed. More details on the installer instructions will be addressed later in this article, in the [Install Connected Cache](#install-mcc-on-windows) section.
-
-:::image type="content" source="./images/ent-mcc-connected-cache-installer-download.png" alt-text="Screenshot of the Connected Cache installer download button, installer instructions, and script.":::
-
-#### Edit cache node information
-
-Cache nodes can be deleted here by selecting the check box to the left of a **Cache Node Name** and then selecting the delete toolbar item. Be aware that if a cache node is deleted, there's no way to recover the cache node or any of the information related to the cache node.
-
-:::image type="content" source="./images/ent-mcc-delete-cache-node.png" alt-text="Screenshot of deleting a cache node from the Cache Nodes page.":::
-
-### Install MCC on Windows
-
-Installing MCC on your Windows device is a simple process. A PowerShell script performs the following tasks:
-
-- Installs the Azure CLI
-- Downloads, installs, and deploys EFLOW
-- Enables Microsoft Update so EFLOW can stay up to date
-- Creates a virtual machine
-- Enables the firewall and opens ports 80 and 22 for inbound and outbound traffic. Port 80 is used by MCC, and port 22 is used for SSH communications.
-- Configures Connected Cache tuning settings.
-- Creates the necessary *FREE* Azure resource - IoT Hub/IoT Edge.
-- Deploys the MCC container to server.
-
-#### Run the installer
-
-1. Download and unzip `mccinstaller.zip` from the create cache node page or cache node configuration page, both of which contain the necessary installation files.
-
-   :::image type="content" source="./images/ent-mcc-download-installer.png" alt-text="Screenshot of the download installer option on the Create Cache Node page.":::
-
-   The following files are contained in the `mccinstaller.zip` file:
-
-   - **installmcc.ps1**: Main installer file.
-   - **installEflow.ps1**: Installs the necessary prerequisites such as the Linux VM, IoT Edge runtime, and Docker, and makes necessary host OS settings to optimize caching performance.
-   - **resourceDeploymentForConnectedCache.ps1**: Creates Azure cloud resources required to support MCC control plane.
-   - **mccdeployment.json**: Deployment manifest used by IoT Edge to deploy the MCC container and configure settings on the container, such as cache drive location sizes.
-   - **updatemcc.ps1**: The update script used to upgrade MCC to a particular version.
-   - **mccupdate.json**: Used as part of the update script
-
-1. Open Windows PowerShell as administrator then navigate to the location of these files.
-
-   > [!NOTE]
-   > Ensure that Hyper-V is enabled on your device.
-   > - **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v)
-   > - **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server)'
-   >
-   > Don't use PowerShell ISE, PowerShell 6.x, or PowerShell 7.x. Only Windows PowerShell version 5.x is supported.
-
-1. **If you're installing MCC on a local virtual machine**, turn the virtual machine **off** while you enable nested virtualization and MAC spoofing.
-   1. Enable nested virtualization:
-
-      ```powershell
-      Set-VMProcessor -VMName "VM name" -ExposeVirtualizationExtensions $true
-      ```
-
-   1. Enable MAC spoofing:
-
-      ```powershell
-      Get-VMNetworkAdapter -VMName "VM name" | Set-VMNetworkAdapter -MacAddressSpoofing On
-      ```
-
-1. Set the execution policy.
-
-    ```powershell
-    Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-    ```
-
-    > [!NOTE]
-    > After setting the execution policy, you'll see a warning asking if you wish to change the execution policy. Choose **[A] Yes to All**.
-
-1. Copy the command from the Azure portal and run it in Windows PowerShell.
-
-    :::image type="content" source="./images/ent-mcc-installer-script.png" alt-text="Screenshot of the installer script for the connected cache node.":::
-
-    > [!NOTE]
-    > After running the command, and multiple times throughout the installation process, you'll receive the following notice. Select **[R] Run once** to proceed.
-    > </br>
-    > </br> Security warning
-    > </br> Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your computer. If you trust this script, use the Unblock-File cmdlet to allow the script to run without this warning message. Do you want to run C:\Users\mccinstaller\Eflow\installmcc.ps1?
-    > </br>
-    > </br> [D] Do not run **[R] Run once** [S] Suspend [?] Help (default is "D"):
-
-1. Choose whether you would like to create a new external virtual switch or select an existing external virtual switch.
-
-   If creating a new external virtual switch, name your switch and be sure to choose a Local Area Connection (USB adapters work as well however, we do not recommend using Wi-Fi). A computer restart will be required if you're creating a new switch.
-
-   > [!NOTE]
-   > Restarting your computer after creating a switch is recommended. You'll notice network delays during installation if the computer has not been restarted.
-
-   If you restarted your computer after creating a switch, start from step 2 above and skip to step 5.
-
-   If you opt to use an existing external switch, select the switch from the presented options. Local Area Connection (or USB) is preferable to Wi-Fi.
-
-   :::image type="content" source="./images/ent-mcc-script-new-switch.png" alt-text="Screenshot of the installer script running in PowerShell when a new switch is created." lightbox="./images/ent-mcc-script-new-switch.png":::
-
-1. Rerun the script after the restart. This time, choose **No** when asked to create a new switch. Enter the number corresponding to the switch you previously created.
-
-     :::image type="content" source="./images/ent-mcc-script-existing-switch.png" alt-text="Screenshot of the installer script running in PowerShell when using an existing switch." lightbox="./images/ent-mcc-script-existing-switch.png":::
-
-1. Decide whether you would like to use dynamic or static address for the Eflow VM. If you choose to use a static IP, do not use the IP address of the server. It is a VM, and it will have its own IP.
-
-    :::image type="content" source="./images/ent-mcc-script-dynamic-address.png" alt-text="Screenshot of the installer script running in PowerShell asking if you'd like to use a dynamic address." lightbox="./images/ent-mcc-script-dynamic-address.png":::
-
-    > [!NOTE]
-    > Choosing a dynamic IP address might assign a different IP address when the MCC restarts. A static IP address is recommended so you don't have to change this value in your management solution when MCC restarts.
-
-   The IP address you assign to the EFLOW VM should be within the same subnet as the host server (based on the subnet mask) and not used by any other machine on the network.
-   For example, for host configuration where the server IP Address is 192.168.1.202 and the subnet mask is 255.255.255.0, the static IP can be anything 192.168.1.* except 192.168.1.202.
-   <!-- Insert Image 1 & 2. Remove ent-mcc-script-dynamic-address.png image (it is replaced by image 2) -->
-    :::image type="content" source="./images/external-switch-1.jpg" alt-text="Screenshot of a sample output of ipconfig command showing example of subnet mask." lightbox="./images/external-switch-1.jpg":::
-
-    :::image type="content" source="./images/assigning-ip-2.png" alt-text="Screenshot of multiple installer questions about ipv4 address for Eflow." lightbox="./images/assigning-ip-2.png":::
-
-   If you would like to use your own DNS server instead of Google DNS 8.8.8.8, select **n** and set your own DNS server IP.
-
-   :::image type="content" source="./images/use-custom-dns-3.png" alt-text="Screenshot of multiple installer questions about setting an alternate DNS server." lightbox="./images/use-custom-dns-3.png":::
-
-   If you use a dynamic IP address, the DHCP server will automatically configure the IP address and DNS settings.
-
-1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path.
-
-   <!-- Insert Image 4 -->
-   :::image type="content" source="./images/installation-info-4.png" alt-text="Screenshot of multiple installer questions about memory and storage for EFLOW." lightbox="./images/installation-info-4.png":::
-
-   For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommended values for a Branch Office/Small Enterprise deployment.
-
-   <!-- Insert Image 5 -->
-   :::image type="content" source="./images/memory-storage-5.png" alt-text="Screenshot of multiple installer questions about memory and storage." lightbox="./images/memory-storage-5.png":::
-   <!-- Remove: If this is your first MCC deployment, select **n** so that a new IoT Hub can be created. If you have already configured MCC before, choose **y** so that your MCCs are grouped in the same IoT Hub.
-
-    1. You'll be shown a list of existing IoT Hubs in your Azure subscription. Enter the number corresponding to the IoT Hub to select it. **You'll likely have only 1 IoT Hub in your subscription, in which case you want to enter "1"**
-
-       :::image type="content" source="./images/ent-mcc-script-select-hub.png" alt-text="Screenshot of the installer script running in PowerShell prompting you to select which IoT Hub to use." lightbox="./images/ent-mcc-script-select-hub.png":::
-       -->
-1. When the installation is complete, you should see the following output (the values below will be your own)
-
-    :::image type="content" source="./images/ent-mcc-script-complete.png" alt-text="Screenshot of the installer script displaying the completion summary in PowerShell." lightbox="./images/ent-mcc-script-complete.png":::
-       <!-- Insert Image 7 -->
-
-    :::image type="content" source="./images/installation-complete-7.png" alt-text="Screenshot of expected output when installation is complete." lightbox="./images/installation-complete-7.png":::
-
-1. Your MCC deployment is now complete.
-
-   If you don't see any errors, continue to the next section to validate your MCC deployment. Your VM will not appear in Hyper-V Manager as it is an EFLOW VM.
-   - After validating your MCC is properly functional, review your management solution documentation, such as [Intune](/mem/intune/configuration/delivery-optimization-windows), to set the cache host policy to the IP address of your MCC.
-   - If you had errors during your deployment, see the [Common Issues](#common-issues) section in this article.
-
-## Verify MCC server functionality
-
-#### Verify client side
-
-Connect to the EFLOW VM and check if MCC is properly running:
-
-1. Open PowerShell as an Administrator.
-2. Enter the following commands:
-
-   ```powershell
-   Connect-EflowVm
-   sudo -s
-   iotedge list
-   ```
-
-   :::image type="content" source="./images/ent-mcc-connect-eflowvm.png" alt-text="Screenshot of running connect-EflowVm, sudo -s, and iotedge list from PowerShell." lightbox="./images/ent-mcc-connect-eflowvm.png":::
-
-You should see MCC, edgeAgent, and edgeHub running. If you see edgeAgent or edgeHub but not MCC, try this command in a few minutes. The MCC container can take a few minutes to deploy. If iotedge list times out, you can run docker ps -a to list the running containers.
-If the 3 containers are still not running, run the following commands to check if DNS resolution is working correctly:
-
-```bash
-ping www.microsoft.com
-resolvectl query microsoft.com
-```
-
-See the [common issues](#common-issues) section for more information.
-
-#### Verify server side
-
-To validate that MCC is properly functioning, execute the following command in the EFLOW VM or any device in the network. Replace <CacheServerIP\> with the IP address of the cache server.
-
-```powershell
-wget http://<CacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com
-```
-
-A successful test result will display a status code of 200 along with additional information.
-
-:::image type="content" source="./images/ent-mcc-verify-server-ssh.png" alt-text="Screenshot of a successful wget with an SSH client." lightbox="./images/ent-mcc-verify-server-ssh.png":::
-
-:::image type="content" source="./images/ent-mcc-verify-server-powershell.png" alt-text="Screenshot of a successful wget using PowerShell." lightbox="./images/ent-mcc-verify-server-powershell.png":::
-
-Similarly, enter the following URL from a browser in the network:
-
-`http://<YourCacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com`
-
-If the test fails, see the [common issues](#common-issues) section for more information.
-
-### Intune (or other management software) configuration for MCC
-
-For an [Intune](/mem/intune/) deployment, create a **Configuration Profile** and include the Cache Host eFlow IP Address or FQDN:
-
-:::image type="content" source="./images/ent-mcc-intune-do.png" alt-text="Screenshot of Intune showing the Delivery Optimization cache server host names.":::
-
-## Common Issues
-
-#### PowerShell issues
-
-If you're seeing errors similar to this error: `The term Get-<Something> isn't recognized as the name of a cmdlet, function, script file, or operable program.`
-
-1. Ensure you're running Windows PowerShell version 5.x.
-
-1. Run \$PSVersionTable and ensure you're running version 5.x and *not version 6 or 7*.
-
-1. Ensure you have Hyper-V enabled:
-
-   **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v)
-
-   **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server)
-
-#### Verify Running MCC Container
-
-Connect to the Connected Cache server and check the list of running IoT Edge modules using the following commands:
-
-```bash
-Connect-EflowVm
-sudo iotedge list
-```
-
-:::image type="content" source="./images/ent-mcc-iotedge-list.png" alt-text="Screenshot of the iotedge list command." lightbox="./images/ent-mcc-iotedge-list.png":::
-
-If edgeAgent and edgeHub containers are listed, but not "MCC", you may view the status of the IoT Edge security manager by using the command:
-
-```bash
-sudo journalctl -u iotedge -f
-```
-
-This command will provide the current status of the starting, stopping of a container, or the container pull and start.  
-
-:::image type="content" source="./images/ent-mcc-journalctl.png" alt-text="Screenshot of the output from journalctl -u iotedge -f." lightbox="./images/ent-mcc-journalctl.png":::
-
-> [!NOTE]
-> You should consult the IoT Edge troubleshooting guide ([Common issues and resolutions for Azure IoT Edge](/azure/iot-edge/troubleshoot)) for any issues you may encounter configuring IoT Edge, but we've listed a few issues that we encountered during our internal validation.
-
-
-### DNS needs to be configured
-
-Run the following IoT Edge install state check:
-
-```bash
-sudo iotedge check --verbose
-```
-
-If you see issues with ports 5671, 443, and 8883, your IoT Edge device needs to update the DNS for Docker.
-
-To configure the device to work with your DNS, use the following steps:
-
-1. Use `ifconfig` to find the appropriate NIC adapter name.
-
-   ```bash
-   ifconfig
-   ```
-
-1. Run `nmcli device show <network adapter name>` to show the DNS name for the ethernet adapter. For example, to show DNS information for **eno1**:
-
-   ```bash
-   nmcli device show eno1 
-   ```
-
-   :::image type="content" source="images/mcc-isp-nmcli.png" alt-text="Screenshot of a sample output of nmcli command to show network adapter information." lightbox="./images/mcc-isp-nmcli.png":::
-
-1. Open or create the Docker configuration file used to configure the DNS server.
-
-   ```bash
-   sudo nano /etc/docker/daemon.json
-   ```
-
-1. Paste the following string into the **daemon.json** file, and include the appropriate DNS server address. For example, in the previous screenshot, `IP4.DNS[1]` is `10.50.10.50`.
-
-   ```bash
-   { "dns": ["x.x.x.x"]}
-   ```
-
-1. Save the changes to daemon.json. If you need to change permissions on this file, use the following command:
-
-   ```bash
-   sudo chmod 555 /etc/docker/daemon.json
-   ```
-
-1. Restart Docker to pick up the new DNS setting. Then restart IoT Edge.
-
-   ```bash
-   sudo systemctl restart docker
-   sudo systemctl daemon-reload
-   sudo restart IoTEdge
-   ```
-
-### Resolve DNS issues
-
-Follow these steps if you see a DNS error when trying to resolve hostnames during the provisioning or download of container:
-Run `Get-EflowVmEndpoint` to get interface name
-
-Once you get the name:
-
-```bash
-Set-EflowVmDNSServers -vendpointName "interface name from above" -dnsServers @("DNS_IP_ADDRESS")
-Stop-EflowVm
-Start-EflowVm
-```
diff --git a/windows/deployment/do/mcc-enterprise-prerequisites.md b/windows/deployment/do/mcc-enterprise-prerequisites.md
deleted file mode 100644
index 1e33e85158..0000000000
--- a/windows/deployment/do/mcc-enterprise-prerequisites.md
+++ /dev/null
@@ -1,61 +0,0 @@
----
-title: Requirements for MCC for Enterprise and Education
-description: Overview of prerequisites and recommendations for using Microsoft Connected Cache (MCC) for Enterprise and Education.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: conceptual
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 05/23/2024
----
-
-# Requirements of Microsoft Connected Cache for Enterprise and Education (early preview)
-
-> [!NOTE]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
-
-## Enterprise requirements for MCC
-
-1. **Azure subscription**: MCC management portal is hosted within Azure and is used to create the Connected Cache [Azure resource](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management) and IoT Hub resource. Both are free services.
-
-    Your Azure subscription ID is first used to provision MCC services, and enable access to the preview. The MCC server requirement for an Azure subscription costs you nothing. If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
-
-    The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
-1. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-  
-   > [!NOTE]
-   > Azure VMs are not currently supported. If you'd like to install your cache node on VMWare, see the [Appendix](mcc-enterprise-appendix.md) for a few additional configurations.
-
-    **EFLOW requires Hyper-V support**
-    - On Windows client, enable the Hyper-V feature.
-    - On Windows Server, install the Hyper-V role and create a default network switch.
-    - For more requirements, see [EFLOW requirements](/azure/iot-edge/iot-edge-for-linux-on-windows#prerequisites).
-
-    Disk recommendations:
-    - Using an SSD is recommended as cache read speed of SSD is superior to HDD
-
-    NIC requirements:
-    - Multiple NICs on a single MCC instance aren't supported.
-    - 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
-    - For best performance, NIC and BIOS should support SR-IOV.
-
-    VM networking:
-    -  An external virtual switch to support outbound and inbound network communication (created during the installation process)
-1. **Content endpoints**: If you're using a proxy or firewall, certain endpoints must be allowed through in order for your MCC to cache and serve content. See [Delivery Optimization and Microsoft Connected Cache content type endpoints](delivery-optimization-endpoints.md) for the list of required endpoints. 
-
-## Sizing recommendations
-
-| Component  | Branch Office / Small Enterprise | Large Enterprise |
-| -- | --- | --- |
-| OS|  Windows Server 2019*/2022 <br> Windows 10*/11 (Pro or Enterprise) with Hyper-V Support <br><br>* Windows 10 and Windows Server 2019 build 17763 or later | Same |
-|NIC | 1 Gbps | 5 Gbps |
-|Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
-|Memory | 4 GB | 8 GB |
-|Cores | 4 | 8  |
diff --git a/windows/deployment/do/mcc-enterprise-update-uninstall.md b/windows/deployment/do/mcc-enterprise-update-uninstall.md
deleted file mode 100644
index 8ffa3c50c7..0000000000
--- a/windows/deployment/do/mcc-enterprise-update-uninstall.md
+++ /dev/null
@@ -1,55 +0,0 @@
----
-title: Uninstall MCC for Enterprise and Education
-description: Details on how to uninstall Microsoft Connected Cache (MCC) for Enterprise and Education for your environment.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 05/23/2024
----
-
-<!-- Customers will no longer update the private preview and instead install public preview
-# Update or uninstall Microsoft Connected Cache for Enterprise and Education
-
-Throughout the preview phase, we'll send you security and feature updates for MCC. Follow these steps to perform the update.
-
-## Update MCC
-
-Run the following command with the **arguments** we provided in the email to update your MCC:
-
-```powershell
-# .\updatemcc.ps1 version="**\<VERSION\>**" tenantid="**\<TENANTID\>**" customerid="**\<CUSTOMERID\>**" cachenodeid="**\<CACHENODEID\>**" customerkey="**\<CUSTOMERKEY\>**"
-```
-
-For example:
-
-```powershell
-# .\updatemcc.ps1 version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.659" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99a"
-```
--->
-# Uninstall MCC
-
-Contact the MCC Team before uninstalling to let us know if you're facing issues.
-
-This script removes the following items:
-
-1. EFLOW + Linux VM
-1. IoT Edge
-1. Edge Agent
-1. Edge Hub
-1. MCC
-1. Moby CLI
-1. Moby Engine
-
-To delete MCC, go to Control Panel \> Uninstall a program \> Select Azure IoT
-Edge LTS \> Uninstall
diff --git a/windows/deployment/do/waas-delivery-optimization-faq.yml b/windows/deployment/do/waas-delivery-optimization-faq.yml
index 1f78efa270..cda14c3e5e 100644
--- a/windows/deployment/do/waas-delivery-optimization-faq.yml
+++ b/windows/deployment/do/waas-delivery-optimization-faq.yml
@@ -17,7 +17,7 @@ metadata:
     - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
     - ✅ <a href=https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info target=_blank>Windows Server 2019, and later</a>
     - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-delivery-optimization target=_blank>Delivery Optimization</a>	
-  ms.date: 09/10/2024
+  ms.date: 10/15/2024
 title: Frequently Asked Questions about Delivery Optimization
 summary: |
   This article answers frequently asked questions about Delivery Optimization.
@@ -42,6 +42,7 @@ summary: |
    **Peer-to-peer related questions**: 
 
   - [How does Delivery Optimization determine which content is available for peering?](#how-does-delivery-optimization-determine-which-content-is-available-for-peering)
+  - [Where does Delivery Optimization get content from first?](#where-does-delivery-optimization-get-content-from-first)
   - [Does Delivery Optimization use multicast?](#does-delivery-optimization-use-multicast)
   - [How does Delivery Optimization deal with congestion on the router from peer-to-peer activity on the LAN?](#how-does-delivery-optimization-deal-with-congestion-on-the-router-from-peer-to-peer-activity-on-the-lan)
   - [How does Delivery Optimization handle VPNs?](#how-does-delivery-optimization-handle-vpns)
@@ -128,6 +129,11 @@ sections:
       - question: How does Delivery Optimization determine which content is available for peering?
         answer: |
           Delivery Optimization uses the cache content on the device to determine what's available for peering. For the upload source device, there's a limited number (4) of slots for cached content that's available for peering at a given time. Delivery Optimization contains logic that rotates the cached content in those slots.
+      - question: Where does Delivery Optimization get content from first?
+        answer: |
+          When Delivery Optimization client is configured to use peers and Microsoft Connected Cache (MCC), the client connects to both MCC and peers in parallel. There is no prioritization between the two. Once downloading starts in parallel, Delivery Optimization 
+          will taper off requests to the HTTP source (CDN or MCC) when the peer connections are able to reach the target download speed. For background downloads, Delivery Optimization will drop HTTP connections if peers are meeting the minimum QoS speed. To manage delaying the default behavior
+          there are a collection of policies that can be used. For more information, see [Delivery Optimization delay policies](waas-delivery-optimization-reference.md#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources).
       - question: Does Delivery Optimization use multicast?
         answer: |
          No. It relies on the cloud service for peer discovery, resulting in a list of peers and their IP addresses. Client devices then connect to their peers to obtain download files over TCP/IP.    
diff --git a/windows/deployment/do/waas-delivery-optimization-reference.md b/windows/deployment/do/waas-delivery-optimization-reference.md
index f43982a7c5..a8f8a4b517 100644
--- a/windows/deployment/do/waas-delivery-optimization-reference.md
+++ b/windows/deployment/do/waas-delivery-optimization-reference.md
@@ -14,7 +14,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-delivery-optimization target=_blank>Delivery Optimization</a>
-ms.date: 05/23/2024
+ms.date: 10/15/2024
 ---
 
 # Delivery Optimization reference
@@ -106,7 +106,7 @@ When Delivery Optimization client is configured to use peers and Microsoft Conne
 ##### Microsoft Connected Cache (MCC) delay fallback settings
 
 - [Delay foreground download cache server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use a cache server.
-- [Delay background download from HTTP (in secs)](#delay-background-download-from-http-in-secs) allows you to delay the use of an HTTP source in a background  download that is allowed to use a cache server.
+- [Delay background download cache server fallback (in secs)](#delay-background-download-cache-server-fallback-in-secs) allows you to delay the use of an HTTP source in a background  download that is allowed to use a cache server.
 
 **If both peer-to-peer and MCC are configured, the peer-to-peer delay settings will take precedence over the cache server delay settings.** This setting allows Delivery Optimization to discover peers first then recognize the fallback setting for the MCC cache server.
 
@@ -245,13 +245,13 @@ The default behaviors differ between Windows 10 and Windows 11. In Windows 10, t
 
 MDM Setting: **DODelayForegroundDownloadFromHttp**
 
-Starting in Windows 10, version 1803, allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use peer-to-peer. The maximum value is 4294967295 seconds. **By default, this policy isn't configured.**
+Starting in Windows 10, version 1803, allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use peer-to-peer. **By default, this policy isn't configured.**
 
 ### Delay background download from HTTP (in secs)
 
 MDM Setting: **DODelayBackgroundDownloadFromHttp**
 
-Starting in Windows 10, version 1803, this allows you to delay the use of an HTTP source in a background download that is allowed to use peer-to-peer. The maximum value is 4294967295 seconds. **By default, this policy isn't configured.**
+Starting in Windows 10, version 1803, this allows you to delay the use of an HTTP source in a background download that is allowed to use peer-to-peer. **By default, this policy isn't configured.**
 
 ### Delay foreground download cache server fallback (in secs)
 
diff --git a/windows/deployment/do/waas-microsoft-connected-cache.md b/windows/deployment/do/waas-microsoft-connected-cache.md
index a1cd9a0ca8..2be96841a2 100644
--- a/windows/deployment/do/waas-microsoft-connected-cache.md
+++ b/windows/deployment/do/waas-microsoft-connected-cache.md
@@ -24,7 +24,7 @@ ms.date: 05/23/2024
 Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. Microsoft Connected Cache has two main offerings:
 
 - Microsoft Connected Cache for Internet Service Providers
-- Microsoft Connected Cache for Enterprise and Education (early preview)
+- Microsoft Connected Cache for Enterprise and Education (preview)
 
 Both products are created and managed in the cloud portal.
 
@@ -35,14 +35,14 @@ Both products are created and managed in the cloud portal.
 
 Microsoft Connected Cache (MCC) for Internet Service Providers is currently in preview. MCC can be deployed to as many bare-metal servers or VMs as needed and is managed from a cloud portal. When deployed, MCC can help to reduce your network bandwidth usage for Microsoft software content and updates. Cache nodes are created in the cloud portal and are configured to deliver traffic to customers by manual CIDR or BGP routing. Learn more at [Microsoft Connected Cache for ISPs Overview](mcc-isp-overview.md).
 
-## Microsoft Connected Cache for Enterprise and Education (early preview)
+## Microsoft Connected Cache for Enterprise and Education (preview)
 
 > [!NOTE]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
+> Microsoft Connected Cache (MCC) for Enterprise and Education is now in public preview. To get started, follow the instructions in the [Create Microsoft Connected Cache Azure resource and cache nodes](mcc-ent-create-resource-and-cache.md) article.
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be deployed to as many Windows servers, bare-metal servers, or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune. Learn more at [Microsoft Connected Cache for Enterprise and Education Overview](mcc-ent-edu-overview.md).
+Microsoft Connected Cache (MCC) for Enterprise and Education is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be deployed to as many Windows servers, bare-metal servers, or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune. Learn more at [Microsoft Connected Cache for Enterprise and Education Overview](mcc-ent-edu-overview.md).
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (early preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For Microsoft Connected Cache in Configuration Manager (generally available starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache)
+Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For Microsoft Connected Cache in Configuration Manager (generally available starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache)
 
 ## Next steps
 
diff --git a/windows/deployment/do/whats-new-do.md b/windows/deployment/do/whats-new-do.md
index 0b167097fa..496d1240c1 100644
--- a/windows/deployment/do/whats-new-do.md
+++ b/windows/deployment/do/whats-new-do.md
@@ -43,8 +43,8 @@ There are two different versions:
 
 ### Windows 11 22H2
 
-- New setting: Customize vpn detection by choosing custom keywords. Now, you don't have to rely on Delivery Optimization keywords to detect your Vpn. By using the new VpnKeywords configuration you can add keywords for Delivery Optimization to use when detecting a Vpn when in use. You can find this configuration **[VPN Keywords](waas-delivery-optimization-reference.md#vpn-keywords)** in Group Policy or MDM under **DOVpnKeywords**.
-- New setting: Use the disallow downloads from a connected cache server, when a Vpn is detected and you want to prevent the download from the connected cache server. You can find this configuration **[Disallow download from MCC over VPN](waas-delivery-optimization-reference.md#disallow-cache-server-downloads-on-vpn) in Group Policy or MDM under **DODisallowCacheServerDownloadsOnVPN**.
+- New setting: Customize VPN detection by choosing custom keywords. Now, you don't have to rely on Delivery Optimization keywords to detect your VPN. By using the new VpnKeywords setting, you can add keywords for Delivery Optimization to use to detect when a VPN is in use. You can find this configuration **[VPN Keywords](waas-delivery-optimization-reference.md#vpn-keywords)** in Group Policy or MDM under **DOVpnKeywords**.
+- New setting: Use the disallow downloads from a connected cache server, when a VPN is detected and you want to prevent the download from the connected cache server. You can find this configuration **[Disallow download from MCC over VPN](waas-delivery-optimization-reference.md#disallow-cache-server-downloads-on-vpn)** in Group Policy or MDM under **DODisallowCacheServerDownloadsOnVPN**.
 - Delivery Optimization introduced support for receiver side ledbat (rLEDBAT).
 - New setting: Local Peer Discovery, a new option for **[Restrict Peer Selection By](waas-delivery-optimization-reference.md#select-a-method-to-restrict-peer-selection)** in Group Policy or MDM **DORestrictPeerSelectionBy**. This option restricts the discovery of local peers using the DNS-SD protocol. When you set Option 2, Delivery Optimization restricts peer selection to peers that are locally discovered (using DNS-SD).
 
diff --git a/windows/deployment/update/fod-and-lang-packs.md b/windows/deployment/update/fod-and-lang-packs.md
index 87d5304815..f9ece8c2d3 100644
--- a/windows/deployment/update/fod-and-lang-packs.md
+++ b/windows/deployment/update/fod-and-lang-packs.md
@@ -13,7 +13,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/mem/configmgr/ > Microsoft Configuration Manager</a>
 - ✅ <a href=https://learn.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus > WSUS </a>
-ms.date: 04/22/2024
+ms.date: 10/01/2024
 ---
 
 # How to make Features on Demand and language packs available when you're using WSUS or Configuration Manager
@@ -31,11 +31,13 @@ Due to these changes, the **Specify settings for optional component installation
 
 The introduction of the **Specify source service for specific classes of Windows Updates** ([SetPolicyDrivenUpdateSourceFor<UpdateClass\>](/windows/client-management/mdm/policy-csp-update#setpolicydrivenupdatesourceforfeatureupdates)) policy in Windows 10, version 2004 further complicated configuring settings for FoD and language pack content. 
 
-Starting in Windows 11, version 22H2, on-premises Unified Update Platform (UUP) updates were introduced. FoDs and language packs are available from WSUS again. It's no longer necessary to use the **Specify settings for optional component installation and component repair** policy for FoD and language pack content.  
+Starting in Windows 11, version 22H2, on-premises Unified Update Platform (UUP) updates were introduced. FoDs and language packs are available from WSUS again. It's no longer necessary to use the **Specify settings for optional component installation and component repair** policy for FoD and language pack content. This policy was modified starting in Windows 11, version 24H2 and the following options were removed:<!--8914508-->
+- Never attempt to download payload from Windows Update
+- Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS)
 
 ## Version specific information for Features on Demand and language packs
 
-Windows 11, version 22H2, and later clients use on-premises Unified Update Platform (UUP) updates with WSUS and Microsoft Configuration Manager. These clients don't need to use **Specify settings for optional component installation and component repair** for FoDs and language packs since the content is available in WSUS due to on-premises UUP.
+Windows 11, version 22H2, and later clients use on-premises Unified Update Platform (UUP) updates with WSUS and Microsoft Configuration Manager. These clients don't need to use **Specify settings for optional component installation and component repair** for FoDs and language packs since the content is available in WSUS due to on-premises UUP. The policy was modified starting in Windows 11, version 24H2 to remove the unneeded options.<!--8914508--> 
 
 For Windows 10, version 2004 through Windows 11, version 21H2, clients can't download FoDs or language packs when **Specify settings for optional component installation and component repair** is set to Windows Update and **Specify source service for specific classes of Windows Updates** ([SetPolicyDrivenUpdateSourceFor<FeatureUpdates/QualityUpdates>](/windows/client-management/mdm/policy-csp-update#setpolicydrivenupdatesourceforfeatureupdates)) for either feature or quality updates is set to WSUS. If you need this content, you can set **Specify settings for optional component installation and component repair** to Windows Update and then either:
 - Change the source selection for feature and quality updates to Windows Update 
diff --git a/windows/deployment/update/waas-restart.md b/windows/deployment/update/waas-restart.md
index 9d859d31c3..46c69eb5b6 100644
--- a/windows/deployment/update/waas-restart.md
+++ b/windows/deployment/update/waas-restart.md
@@ -14,7 +14,7 @@ ms.localizationpriority: medium
 appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-ms.date: 10/10/2023
+ms.date: 10/04/2024
 ---
 
 # Manage device restarts after updates
@@ -215,4 +215,4 @@ There are three different registry combinations for controlling restart behavior
 - [Configure Windows Update for Business](waas-configure-wufb.md)
 - [Integrate Windows Update for Business with management solutions](waas-integrate-wufb.md)
 - [Walkthrough: use Group Policy to configure Windows Update for Business](waas-wufb-group-policy.md)
-- [Walkthrough: use Intune to configure Windows Update for Business](/intune/windows-update-for-business-configure)
\ No newline at end of file
+- [Manage Windows 10 and Windows 11 software updates in Intune](/mem/intune/protect/windows-update-for-business-configure)
diff --git a/windows/deployment/upgrade/windows-edition-upgrades.md b/windows/deployment/upgrade/windows-edition-upgrades.md
index f09b8e67cc..b1fc50c67b 100644
--- a/windows/deployment/upgrade/windows-edition-upgrades.md
+++ b/windows/deployment/upgrade/windows-edition-upgrades.md
@@ -11,7 +11,7 @@ ms.collection:
   - highpri
   - tier2
 ms.subservice: itpro-deploy
-ms.date: 10/02/2023
+ms.date: 10/04/2024
 appliesto:
   - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
   - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11</a>
@@ -56,7 +56,7 @@ The following table shows the methods and paths available to change the edition
 >
 > - Each desktop edition in the table also has an N and KN SKU. These editions have had media-related functionality removed. Devices with N or KN SKUs installed can be upgraded to corresponding N or KN SKUs using the same methods.
 >
-> - Edition upgrades via Microsoft Store for Business are no longer available with the retirement of the Microsoft Store for Business. For more information, see [Microsoft Store for Business and Education retiring March 31, 2023](/lifecycle/announcements/microsoft-store-for-business-education-retiring) and [Microsoft Store for Business and Microsoft Store for Education overview](/microsoft-store/microsoft-store-for-business-overview).
+> - Edition upgrades via Microsoft Store for Business are no longer available with the retirement of the Microsoft Store for Business. For more information, see [Microsoft Store for Business and Education retiring March 31, 2023](/lifecycle/announcements/microsoft-store-for-business-education-retiring).
 
 > [!TIP]
 > Edition upgrade is also possible using edition upgrade policy in Microsoft Configuration Manager. For more information, see [Upgrade Windows devices to a new edition with Configuration Manager](/mem/configmgr/compliance/deploy-use/upgrade-windows-version).
diff --git a/windows/deployment/usmt/usmt-recognized-environment-variables.md b/windows/deployment/usmt/usmt-recognized-environment-variables.md
index be9096cf54..0d2153bbaa 100644
--- a/windows/deployment/usmt/usmt-recognized-environment-variables.md
+++ b/windows/deployment/usmt/usmt-recognized-environment-variables.md
@@ -66,8 +66,8 @@ These variables can be used within sections in the **.xml** files with `context=
 |*CSIDL_DEFAULT_TEMPLATES*|Refers to the Templates folder inside `%DEFAULTUSERPROFILE%`.|
 |*CSIDL_DEFAULT_QUICKLAUNCH*|Refers to the Quick Launch folder inside `%DEFAULTUSERPROFILE%`.|
 |*CSIDL_FONTS*|A virtual folder containing fonts. A typical path is `C:\Windows\Fonts`.|
-|*CSIDL_PROGRAM_FILESX86*|The Program Files folder on 64-bit systems. A typical path is `C:\Program Files(86)`.|
-|*CSIDL_PROGRAM_FILES_COMMONX86*|A folder for components that are shared across applications on 64-bit systems. A typical path is `C:\Program Files(86)\Common`.|
+|*CSIDL_PROGRAM_FILESX86*|The Program Files folder on 64-bit systems. A typical path is `C:\Program Files (x86)`.|
+|*CSIDL_PROGRAM_FILES_COMMONX86*|A folder for components that are shared across applications on 64-bit systems. A typical path is `C:\Program Files (x86)\Common`.|
 |*CSIDL_PROGRAM_FILES*|The Program Files folder. A typical path is `C:\Program Files`.|
 |*CSIDL_PROGRAM_FILES_COMMON*|A folder for components that are shared across applications. A typical path is `C:\Program Files\Common`.|
 |*CSIDL_RESOURCES*|The file-system directory that contains resource data. A typical path is `C:\Windows\Resources`.|
diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-device-registration-overview.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-device-registration-overview.md
index b484ef3547..b65c4701ea 100644
--- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-device-registration-overview.md
+++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-device-registration-overview.md
@@ -41,7 +41,7 @@ The overall device registration process is as follows:
 :::image type="content" source="../media/windows-autopatch-device-registration-overview.png" alt-text="Overview of the device registration process" lightbox="../media/windows-autopatch-device-registration-overview.png":::
 
 1. IT admin reviews [Windows Autopatch device registration prerequisites](#prerequisites-for-device-registration) before registering devices with Windows Autopatch.
-2. IT admin identifies and adds devices or nests other Microsoft Entra device groups into any Microsoft Entra group used with an Autopatch group, imported (WUfB) policies, or direct membership to the **Modern Workplace Devices-Windows-Autopatch-X-groups**.
+2. IT admin identifies and adds devices, or nests other Microsoft Entra device groups when you [create an Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md#create-an-autopatch-group), [edit an Autopatch group](../manage/windows-autopatch-manage-autopatch-groups.md#edit-an-autopatch-group), or import Windows Update for Business (WUfB) policies.
 3. Windows Autopatch then:
     1. Performs device readiness prior registration (prerequisite checks).
     2. Calculates the deployment ring distribution.
@@ -77,7 +77,7 @@ The deployment ring distribution is designed to release software update deployme
 
 ### Device record and deployment ring assignment
 
-Registering your devices with Windows Autopatch does the following:
+When you register your devices, Windows Autopatch:
 
 1. Makes a record of devices in the service.
 2. Assign devices to the [deployment ring set](#default-deployment-ring-calculation-logic) and other groups required for software update management.
diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-policies.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-policies.md
index 37b1203eff..47810fe194 100644
--- a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-policies.md
+++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-policies.md
@@ -42,12 +42,12 @@ These policies control the minimum target version of Windows that a device is me
 
 You can see the following default policies created by the service in the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431):
 
-| Policy name | Phase mapping | Feature update version | Rollout options | First deployment ring availability | Final deployment ring availability | Day between deployment rings | Support end date |
-| ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- |
-| Windows Autopatch - DSS Policy [Test] | Phase 1 | Windows 10 21H2 | Make update available as soon as possible | May 9, 2023  | N/A | N/A | June 11, 2024 |
-| Windows Autopatch - DSS Policy [First] | Phase 2 | Windows 10 21H2 | Make update available as soon as possible | May 16, 2023  | N/A | N/A | June 11, 2024 |
-| Windows Autopatch - DSS Policy [Fast] | Phase 3 | Windows 10 21H2 | Make update available as soon as possible | May 23, 2023  | N/A | N/A | June 11, 2024 |
-| Windows Autopatch - DSS Policy [Broad] | Phase 4 | Windows 10 21H2 | Make update available as soon as possible | May 30, 2023  | N/A | N/A | June 11, 2024 |
+| Policy name | Phase mapping | Feature update version | Rollout options | Support end date |
+| ----- | ----- | ----- | ----- | ----- |
+| Windows Autopatch - DSS Policy [Test] | Phase 1 | Windows 10 22H2 | Make update available as soon as possible | October 14, 2025 |
+| Windows Autopatch - DSS Policy [First] | Phase 2 | Windows 10 22H2 | Make update available as soon as possible | October 14, 2025 |
+| Windows Autopatch - DSS Policy [Fast] | Phase 3 | Windows 10 22H2 | Make update available as soon as possible | October 14, 2025 |
+| Windows Autopatch - DSS Policy [Broad] | Phase 4 | Windows 10 22H2 | Make update available as soon as possible | October 14, 2025 |
 
 > [!NOTE]
 > Gradual rollout settings aren't configured in the default Windows Update feature policy. If the date of the final group availability is changed to a past date, all remaining devices are offered the update as soon as possible. For more information, see [rollout options for Windows Updates in Microsoft Intune](/mem/intune/protect/windows-update-rollout-options#make-updates-available-gradually).
@@ -56,9 +56,9 @@ You can see the following default policies created by the service in the [Micros
 
 Windows Autopatch configures the values for its global Windows feature update policy. See the following default policies created by the service in the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431):
 
-| Policy name | Feature update version | Rollout options | First deployment ring availability | Final deployment ring availability | Day between deployment rings | Support end date |
-| ----- | ----- | ----- | ----- | ----- | ----- | ----- |
-| Windows Autopatch - Global DSS Policy [Test] | Windows 10 21H2 | Make update available as soon as possible | N/A  | N/A | N/A | June 11, 2024 |
+| Policy name | Feature update version | Rollout options | Support end date |
+| ----- | ----- | ----- | ----- |
+| Windows Autopatch - Global DSS Policy [Test] | Windows 10 22H2 | Make update available as soon as possible | October 14, 2025 |
 
 > [!NOTE]
 > Gradual rollout settings aren't configured in the default Windows Update feature policy. If the date of the final group availability is changed to be a past date, all remaining devices are offered the update as soon as possible. For more information, see [rollout options for Windows Updates in Microsoft Intune](/mem/intune/protect/windows-update-rollout-options#make-updates-available-gradually).
@@ -101,11 +101,11 @@ These policies can be viewed in the [Microsoft Intune admin center](https://go.m
 
 The following table is an example of the Windows feature update policies that were created for phases within a release:
 
-| Policy name | Feature update version | Rollout options | First deployment date| Final deployment date availability | Day between groups | Support end date |
-| ----- | ----- | ----- | ----- | ----- | ----- | ----- |
-| Windows Autopatch - DSS Policy - My feature update release - Phase 1  | Windows 10 21H2 | Make update available as soon as possible | April 24, 2023 | April 24, 2023 | N/A | June 11, 2024 |
-| Windows Autopatch - DSS Policy - My feature update release - Phase 2  | Windows 10 21H2 | Make update available as soon as possible | June 26, 2023 | July 17, 2023 | 7 | June 11, 2024 |
-| Windows Autopatch - DSS Policy - My feature update release - Phase 3 | Windows 10 21H2 | Make update available as soon as possible | July 24, 2023 | August 14, 2023 | 7 | June 11, 2024 |
-| Windows Autopatch - DSS Policy - My feature update release - Phase 4  | Windows 10 21H2 | Make update available as soon as possible | August 28, 2023 | September 10, 2023 | 7 | June 11, 2024 |
-| Windows Autopatch - DSS Policy - My feature update release - Phase 5  | Windows 10 21H2 | Make update available as soon as possible | September 25, 2023 | October 16, 2023 | 7 | June 11, 2024 |
+| Policy name | Feature update version | Rollout options| Day between groups | Support end date |
+| ----- | ----- | ----- | ----- | ----- |
+| Windows Autopatch - DSS Policy - My feature update release - Phase 1  | Windows 10 22H2 | Make update available as soon as possible| N/A | October 14, 2025 |
+| Windows Autopatch - DSS Policy - My feature update release - Phase 2  | Windows 10 22H2 | Make update available as soon as possible | 7 | October 14, 2025 |
+| Windows Autopatch - DSS Policy - My feature update release - Phase 3  | Windows 10 22H2 | Make update available as soon as possible | 7 | October 14, 2025 |
+| Windows Autopatch - DSS Policy - My feature update release - Phase 4  | Windows 10 22H2 | Make update available as soon as possible | 7 | October 14, 2025 |
+| Windows Autopatch - DSS Policy - My feature update release - Phase 5  | Windows 10 22H2 | Make update available as soon as possible | 7 | October 14, 2025 |
 
diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-end-user-exp.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-end-user-exp.md
index 665fc298c0..8e56b5f267 100644
--- a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-end-user-exp.md
+++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-end-user-exp.md
@@ -1,7 +1,7 @@
 ---
 title: Windows quality update end user experience
 description: This article explains the Windows quality update end user experience
-ms.date: 09/16/2024
+ms.date: 10/07/2024
 ms.service: windows-client
 ms.subservice: autopatch
 ms.topic: conceptual
@@ -32,9 +32,7 @@ In this section we review what an end user would see in the following three scen
 
 ### Typical update experience
 
-The Windows quality update is published and devices in the Broad ring have a deferral period of nine days. Devices wait nine days before downloading the latest quality update.
-
-In the following example, the user:
+In the following example, the Windows quality update is published and devices in the Broad ring have a deferral period of seven days. Devices wait seven days before downloading the latest quality update.
 
 | Day | Description |
 | --- | --- |
@@ -46,7 +44,7 @@ In the following example, the user:
 
 ### Quality update deadline forces an update
 
-In the following example, the user:
+In the following example:
 
 | Day | Description |
 | --- | --- |
@@ -58,7 +56,7 @@ In the following example, the user:
 
 ### Quality update grace period
 
-In the following example, the user:
+In the following example:
 
 | Day | Description |
 | --- | --- |
diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md
index 6666b1fe35..8ba74fe797 100644
--- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md
+++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md
@@ -63,7 +63,7 @@ The following URLs must be on the allowed list of your proxy and firewall so tha
 
 | Microsoft service | URLs required on allowlist |
 | ----- | ----- |
-| Windows Autopatch | <ul><li>mmdcustomer.microsoft.com</li><li>mmdls.microsoft.com</li><li>logcollection.mmd.microsoft.com</li><li>support.mmd.microsoft.com</li><li>devicelistenerprod.microsoft.com</li><li>login.windows.net</li><li>payloadprod*.blob.core.windows.net</li></ul>|
+| Windows Autopatch | <ul><li>mmdcustomer.microsoft.com</li><li>mmdls.microsoft.com</li><li>logcollection.mmd.microsoft.com</li><li>support.mmd.microsoft.com</li><li>devicelistenerprod.microsoft.com</li><li>login.windows.net</li><li>payloadprod*.blob.core.windows.net</li><li>device.autopatch.microsoft.com</li></ul>|
 
 ## Delivery Optimization
 
diff --git a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md
index 5492f63c14..c4cac7212b 100644
--- a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md
+++ b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md
@@ -1,7 +1,7 @@
 ---
 title: What's new 2023
 description: This article lists the 2023 feature releases and any corresponding Message center post numbers.
-ms.date: 12/14/2023
+ms.date: 10/07/2024
 ms.service: windows-client
 ms.subservice: autopatch
 ms.topic: whats-new
diff --git a/windows/deployment/windows-enterprise-e3-overview.md b/windows/deployment/windows-enterprise-e3-overview.md
index 5d58a929ec..7be5082ac3 100644
--- a/windows/deployment/windows-enterprise-e3-overview.md
+++ b/windows/deployment/windows-enterprise-e3-overview.md
@@ -105,7 +105,6 @@ For more information about implementing Credential Guard, see the following reso
 - [Security considerations for Original Equipment Manufacturers](/windows-hardware/design/device-experiences/oem-security-considerations)
 - [Device Guard and Credential Guard hardware readiness tool](https://www.microsoft.com/download/details.aspx?id=53337)
 
-
 ### AppLocker management
 
 AppLocker in Windows Enterprise can be managed by using Group Policy. Group Policy requires having AD DS and that the Windows Enterprise devices are joined to an AD DS domain. AppLocker rules can be created by using Group Policy. The AppLocker rules can then be targeted to the appropriate devices.
diff --git a/windows/hub/index.yml b/windows/hub/index.yml
index 6fbeb4df3b..a20075e2cf 100644
--- a/windows/hub/index.yml
+++ b/windows/hub/index.yml
@@ -15,7 +15,7 @@ metadata:
   author: aczechowski
   ms.author: aaroncz
   manager: aaroncz
-  ms.date: 08/27/2024
+  ms.date: 10/01/2024
 
 highlightedContent:
 # itemType: architecture | concept | deploy | download | get-started | how-to-guide | training | overview | quickstart | reference | sample | tutorial | video | whats-new
@@ -25,13 +25,13 @@ highlightedContent:
     itemType: get-started
     url: /windows/whats-new/windows-11-overview
 
-  - title: Windows 11, version 23H2
+  - title: Windows 11, version 24H2
     itemType: whats-new
-    url: /windows/whats-new/whats-new-windows-11-version-23h2
+    url: /windows/whats-new/whats-new-windows-11-version-24h2
 
-  - title: Windows 11, version 23H2 group policy settings reference
+  - title: Windows 11, version 24H2 group policy settings reference
     itemType: download
-    url: https://www.microsoft.com/download/details.aspx?id=105668
+    url: https://www.microsoft.com/download/details.aspx?id=106255
 
   - title: Windows administrative tools
     itemType: concept
@@ -73,7 +73,7 @@ conceptualContent:
 
     - title: Privacy in Windows
       links:
-      - url: /windows/privacy/required-diagnostic-events-fields-windows-11-22h2
+      - url: /windows/privacy/required-diagnostic-events-fields-windows-11-24h2
         itemType: reference
         text: Windows 11 required diagnostic data
       - url: /windows/privacy/configure-windows-diagnostic-data-in-your-organization
diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md
index 92ce858c06..da212c5802 100644
--- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md
+++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md
@@ -7,7 +7,7 @@ ms.localizationpriority: high
 author: DHB-MSFT
 ms.author: danbrown
 manager: laurawi
-ms.date: 04/24/2024
+ms.date: 10/01/2024
 ms.topic: reference
 ms.collection: privacy-windows
 ---
@@ -27,6 +27,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
 
 You can learn more about Windows functional and diagnostic data through these articles:
 
+- [Required diagnostic events and fields for Windows 11, version 24H2](required-diagnostic-events-fields-windows-11-24H2.md)
 - [Required diagnostic events and fields for Windows 11, versions 23H2 and 22H2](required-diagnostic-events-fields-windows-11-22H2.md)
 - [Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
 - [Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
@@ -903,7 +904,7 @@ The following fields are available:
 - **DriverAvailableInbox**  Is a driver included with the operating system for this PNP device?
 - **DriverAvailableOnline**  Is there a driver for this PNP device on Windows Update?
 - **DriverAvailableUplevel**  Is there a driver on Windows Update or included with the operating system for this PNP device?
-- **DriverBlockOverridden**  Is there's a driver block on the device that has been overridden?
+- **DriverBlockOverridden**  Is there a driver block on the device that has been overridden?
 - **NeedsDismissAction**  Will the user would need to dismiss a warning during Setup for this device?
 - **NotRegressed**  Does the device have a problem code on the source OS that is no better than the one it would have on the target OS?
 - **SdbDeviceBlockUpgrade**  Is there an SDB block on the PNP device that blocks upgrade?
@@ -949,7 +950,6 @@ The following fields are available:
 - **DriverShouldNotMigrate**  Should the driver package be migrated during upgrade?
 - **SdbDriverBlockOverridden**  Does the driver package have an SDB block that blocks it from migrating, but that block has been overridden?
 
-
 ### Microsoft.Windows.Appraiser.General.DecisionDriverPackageRemove
 
 This event indicates that the DecisionDriverPackage object represented by the objectInstanceId is no longer present. This event is used to make compatibility decisions about driver packages to help keep Windows up to date.
@@ -1763,7 +1763,6 @@ The following fields are available:
 
 The SystemProcessorPopCntStartSync event indicates that a new set of SystemProcessorPopCntAdd events will be sent. This event is used to understand if the system supports the PopCnt CPU requirement for newer versions of Windows.
 
-
 This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
 
 The following fields are available:
@@ -2186,7 +2185,7 @@ The following fields are available:
 - **IsMDMEnrolled**  Whether the device has been MDM Enrolled or not.
 - **MPNId**  Returns the Partner ID/MPN ID from Regkey. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\DeployID
 - **SCCMClientId**  This ID correlate systems that send data to Compat Analytics (OMS) and other OMS based systems with systems in an enterprise Configuration Manager environment.
-- **ServerFeatures**  Represents the features installed on a Windows Server. This can be used by developers and administrators who need to automate the process of determining the features installed on a set of server computers.
+- **ServerFeatures**  Represents the features installed on a Windows Server. This can be used by developers and administrators who need to automate the process of determining the features installed on a set of server computers.
 - **SystemCenterID**  The Configuration Manager ID is an anonymized one-way hash of the Active Directory Organization identifier
 
 
@@ -2626,7 +2625,7 @@ Fires when the compatibility check completes. Gives the results from the check.
 The following fields are available:
 
 - **IsRecommended**  Denotes whether all compatibility checks have passed and, if so, returns true. Otherwise returns false.
-- **Issues**  If compatibility checks failed, provides bit indexed indicators of issues detected. Table located here: [Check results of HVCI default enablement](/windows-hardware/design/device-experiences/oem-hvci-enablement#check-results-of-hvci-default-enablement).
+- **Issues**  If compatibility checks failed, provides bit indexed indicators of issues detected. Table located here: [Check results of HVCI default enablement](/windows-hardware/design/device-experiences/oem-hvci-enablement#check-results-of-memory-integrity-default-enablement).
 
 
 ### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.Enabled
@@ -4759,6 +4758,7 @@ The following fields are available:
 
 - **InventoryVersion**  The version of the inventory file generating the events.
 
+
 ### Microsoft.Windows.Inventory.Core.InventoryDeviceInterfaceAdd
 
 This event retrieves information about what sensor interfaces are available on the device. The data collected with this event is used to keep Windows performing properly.
@@ -5375,7 +5375,7 @@ This Ping event sends a detailed inventory of software and hardware information
 The following fields are available:
 
 - **appAp**  Any additional parameters for the specified application. Default: ''.
-- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute. Please see the wiki for additional information. Default: undefined.
+- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute. Default: undefined.
 - **appBrandCode**  The brand code under which the product was installed, if any. A brand code is a short (4-character) string used to identify installations that took place as a result of partner deals or website promotions. Default: ''.
 - **appChannel**  An integer indicating the channel of the installation (i.e. Canary or Dev).
 - **appClientId**  A generalized form of the brand code that can accept a wider range of values and is used for similar purposes. Default: ''.
@@ -5383,11 +5383,11 @@ The following fields are available:
 - **appCohortHint**  A machine-readable enum indicating that the client has a desire to switch to a different release cohort. The exact legal values are app-specific and should be shared between the server and app implementations. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
 - **appCohortName**  A stable non-localized human-readable enum indicating which (if any) set of messages the app should display to the user. For example, an app with a cohort Name of 'beta' might display beta-specific branding to the user. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
 - **appConsentState**  Bit flags describing the diagnostic data disclosure and response flow where 1 indicates the affirmative and 0 indicates the negative or unspecified data. Bit 1 indicates consent was given, bit 2 indicates data originated from the download page, bit 18 indicates choice for sending data about how the browser is used, and bit 19 indicates choice for sending data about websites visited.
-- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (e.g. send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known. Please see the wiki for additional information. Default: '-2'.
+- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (e.g. send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known. Default: '-2'.
 - **appExperiments**  A key/value list of experiment identifiers. Experiment labels are used to track membership in different experimental groups, and may be set at install or update time. The experiments string is formatted as a semicolon-delimited concatenation of experiment label strings. An experiment label string is an experiment Name, followed by the '=' character, followed by an experimental label value. For example: 'crdiff=got_bsdiff;optimized=O3'. The client shouldn't transmit the expiration date of any experiments it has, even if the server previously specified a specific expiration date. Default: ''.
 - **appInstallTimeDiffSec**  The difference between the current time and the install date in seconds. '0' if unknown. Default: '-1'.
 - **appLang**  The language of the product install, in IETF BCP 47 representation. Default: ''.
-- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation. Please see the wiki for additional information. Default: '0.0.0.0'.
+- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation. Default: '0.0.0.0'.
 - **appPingEventAppSize**  The total number of bytes of all downloaded packages. Default: '0'.
 - **appPingEventDownloadMetricsDownloadedBytes**  For events representing a download, the number of bytes expected to be downloaded. For events representing an entire update flow, the sum of all such expected bytes over the course of the update flow. Default: '0'.
 - **appPingEventDownloadMetricsDownloader**  A string identifying the download algorithm and/or stack. Example values include: 'bits', 'direct', 'winhttp', 'p2p'. Sent in events that have an event type of '14' only. Default: ''.
@@ -5398,8 +5398,8 @@ The following fields are available:
 - **appPingEventDownloadMetricsUrl**  For events representing a download, the CDN URL provided by the update server for the client to download the update, the URL is controlled by Microsoft servers and always maps back to either *.delivery.mp.microsoft.com or msedgesetup.azureedge.net. Default: ''.
 - **appPingEventDownloadTimeMs**  For events representing a download, the time elapsed between the start of the download and the end of the download, in milliseconds. For events representing an entire update flow, the sum of all such download times over the course of the update flow. Sent in events that have an event type of '1', '2', '3', and '14' only. Default: '0'.
 - **appPingEventErrorCode**  The error code (if any) of the operation, encoded as a signed, base-10 integer. Default: '0'.
-- **appPingEventEventResult**  An enum indicating the result of the event. Please see the wiki for additional information. Default: '0'.
-- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. Please see the wiki for additional information.
+- **appPingEventEventResult**  An enum indicating the result of the event. Default: '0'.
+- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. 
 - **appPingEventExtraCode1**  Additional numeric information about the operation's result, encoded as a signed, base-10 integer. Default: '0'.
 - **appPingEventInstallTimeMs**  For events representing an install, the time elapsed between the start of the install and the end of the install, in milliseconds. For events representing an entire update flow, the sum of all such durations. Sent in events that have an event type of '2' and '3' only. Default: '0'.
 - **appPingEventNumBytesDownloaded**  The number of bytes downloaded for the specified application. Default: '0'.
@@ -5409,9 +5409,9 @@ The following fields are available:
 - **appUpdateCheckIsUpdateDisabled**  The state of whether app updates are restricted by group policy. True if updates have been restricted by group policy or false if they haven't.
 - **appUpdateCheckTargetVersionPrefix**  A component-wise prefix of a version number, or a complete version number suffixed with the $ character. The server shouldn't return an update instruction to a version number that doesn't match the prefix or complete version number. The prefix is interpreted a dotted-tuple that specifies the exactly-matching elements; it isn't a lexical prefix (for example, '1.2.3' must match '1.2.3.4' but must not match '1.2.34'). Default: ''.
 - **appUpdateCheckTtToken**  An opaque access token that can be used to identify the requesting client as a member of a trusted-tester group. If non-empty, the request should be sent over SSL or another secure protocol. Default: ''.
-- **appVersion**  The version of the product install. Please see the wiki for additional information. Default: '0.0.0.0'.
+- **appVersion**  The version of the product install. Default: '0.0.0.0'.
 - **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
-- **eventType**  A string indicating the type of the event. Please see the wiki for additional information.
+- **eventType**  A string indicating the type of the event. 
 - **hwHasAvx**  '1' if the client's hardware supports the AVX instruction set. '0' if the client's hardware doesn't support the AVX instruction set. '-1' if unknown. Default: '-1'.
 - **hwHasSse**  '1' if the client's hardware supports the SSE instruction set. '0' if the client's hardware doesn't support the SSE instruction set. '-1' if unknown. Default: '-1'.
 - **hwHasSse2**  '1' if the client's hardware supports the SSE2 instruction set. '0' if the client's hardware doesn't support the SSE2 instruction set. '-1' if unknown. Default: '-1'.
@@ -9069,7 +9069,7 @@ The following fields are available:
 
 ### Microsoft.Windows.Update.Orchestrator.BlockedByActiveHours
 
-This event indicates that update activity was blocked because it is within the active hours window. The data collected with this event is used to help keep Windows secure and up to date.
+This event indicates that update activity was blocked because it's within the active hours window. The data collected with this event is used to help keep Windows secure and up to date.
 
 The following fields are available:
 
@@ -10231,7 +10231,4 @@ The following fields are available:
 - **LicenseType**  The type of licensed used to authorize the app (0 - Unknown, 1 - User, 2 - Subscription, 3 - Offline, 4 - Disc).
 - **LicenseXuid**  If the license type is 1 (User), this field contains the XUID (Xbox User ID) of the registered owner of the license.
 - **ProductGuid**  The Xbox product GUID (Globally-Unique ID) of the application.
-- **UserId**  The XUID (Xbox User ID) of the current user.
-
-
-
+- **UserId**  The XUID (Xbox User ID) of the current user.
\ No newline at end of file
diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml
index f06366e02f..3f854c689e 100644
--- a/windows/privacy/index.yml
+++ b/windows/privacy/index.yml
@@ -39,7 +39,7 @@ productDirectory:
     - title: Windows 11 required diagnostic data
       imageSrc: /media/common/i_extend.svg
       summary: Learn more about basic Windows diagnostic data events and fields collected.
-      url: required-diagnostic-events-fields-windows-11-22H2.md
+      url: required-diagnostic-events-fields-windows-11-24H2.md
     - title: Windows 10 required diagnostic data
       imageSrc: /media/common/i_build.svg
       summary: See what changes Windows is making to align to the new data collection taxonomy
diff --git a/windows/privacy/required-diagnostic-events-fields-windows-11-22H2.md b/windows/privacy/required-diagnostic-events-fields-windows-11-22H2.md
index 97d13f6d72..446a29e39a 100644
--- a/windows/privacy/required-diagnostic-events-fields-windows-11-22H2.md
+++ b/windows/privacy/required-diagnostic-events-fields-windows-11-22H2.md
@@ -8,7 +8,7 @@ ms.localizationpriority: high
 author: DHB-MSFT
 ms.author: danbrown
 manager: laurawi
-ms.date: 02/29/2024
+ms.date: 10/01/2024
 ms.topic: reference
 ms.collection: privacy-windows
 ---
@@ -28,6 +28,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
 
 You can learn more about Windows functional and diagnostic data through these articles:
 
+- [Required diagnostic events and fields for Windows 11, version 24H2](required-diagnostic-events-fields-windows-11-24H2.md)
 - [Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
 - [Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
 - [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
@@ -128,6 +129,7 @@ The following fields are available:
 
 - **AppraiserVersion**  The version of the appraiser binary generating the events.
 
+
 ### Microsoft.Windows.Appraiser.General.DatasourceApplicationFileRemove
 
 This event indicates that the DatasourceApplicationFile object is no longer present. The data collected with this event is used to help keep Windows up to date.
@@ -780,6 +782,7 @@ The following fields are available:
 
 - **AppraiserVersion**  Appraiser version.
 
+
 ### Microsoft.Windows.Appraiser.General.SystemProcessorPrefetchWAdd
 
 This event sends data indicating whether the system supports the PrefetchW CPU requirement, to help keep Windows up to date.
@@ -1309,7 +1312,6 @@ The following fields are available:
 - **uts**  A bit field, with 2 bits being assigned to each user ID listed in xid. This field is omitted if all users are retail accounts.
 - **xid**  A list of base10-encoded XBOX User IDs.
 
-
 ## Common data fields
 
 ### Ms.Device.DeviceInventoryChange
@@ -1725,7 +1727,7 @@ The following fields are available:
 
 ### Microsoft.Windows.HangReporting.AppHangEvent
 
-This event sends data about hangs for both native and managed applications, to help keep Windows up to date. It doesn't contain any Watson bucketing information. The bucketing information is recorded in a Windows Error Reporting (WER) event that is generated when the WER client reports the hang to the Watson service, and the WER event will contain the same ReportID (see field 13 of hang event, field 19 of WER event) as the hang event for the hang being reported. AppHang is reported only on PC devices. It handles classic Win32 hangs and is emitted only once per report. Some behaviors that may be perceived by a user as a hang are reported by app managers (e.g. PLM/RM/EM) as Watson Generics and will not produce AppHang events.
+This event sends data about hangs for both native and managed applications, to help keep Windows up to date. It doesn't contain any Watson bucketing information. The bucketing information is recorded in a Windows Error Reporting (WER) event that is generated when the WER client reports the hang to the Watson service, and the WER event will contain the same ReportID (see field 13 of hang event, field 19 of WER event) as the hang event for the hang being reported. AppHang is reported only on PC devices. It handles classic Win32 hangs and is emitted only once per report. Some behaviors that may be perceived by a user as a hang are reported by app managers (e.g. PLM/RM/EM) as Watson Generics and won't produce AppHang events.
 
 The following fields are available:
 
@@ -1751,31 +1753,6 @@ The following fields are available:
 
 ## Holographic events
 
-### Microsoft.Windows.Analog.HydrogenCompositor.ExclusiveMode_Entered
-
-This event sends data indicating the start of augmented reality application experience. The data collected with this event is used to keep Windows performing properly.
-
-The following fields are available:
-
-- **SessionID**  Unique value for each attempt.
-- **TargetAsId**  The sequence number for the process.
-- **windowInstanceId**  Unique value for each window instance.
-
-
-### Microsoft.Windows.Analog.HydrogenCompositor.ExclusiveMode_Leave
-
-This event sends data indicating the end of augmented reality application experience. The data collected with this event is used to keep Windows performing properly.
-
-The following fields are available:
-
-- **EventHistory**  Unique number of event history.
-- **ExternalComponentState**  State of external component.
-- **LastEvent**  Unique number of last event.
-- **SessionID**  Unique value for each attempt.
-- **TargetAsId**  The sequence number for the process.
-- **windowInstanceId**  Unique value for each window instance.
-
-
 ### Microsoft.Windows.Analog.Spectrum.TelemetryHolographicSpaceCreated
 
 This event indicates the state of Windows holographic scene. The data collected with this event is used to keep Windows performing properly.
@@ -2247,6 +2224,22 @@ The following fields are available:
 - **requestUid**  A randomly-generated (uniformly distributed) GUID, corresponding to the Omaha user. Each request attempt SHOULD have (with high probability) a unique request id. Default: ''.
 
 
+### Microsoft.Edge.Crashpad.HangEvent
+
+This event sends simple Product and Service Performance data on a hanging/frozen Microsoft Edge browser process to help mitigate future instances of the hang.
+
+The following fields are available:
+
+- **app_name**  The name of the hanging process.
+- **app_session_guid**  Encodes the boot session, process, and process start time.
+- **app_version**  The version of the hanging process.
+- **client_id_hash**  Hash of the browser client id to help identify the installation.
+- **etag**  Identifier to help identify running browser experiments.
+- **hang_source**  Identifies how the hang was detected.
+- **process_type**  The type of the hanging browser process, for example, gpu-process, renderer, etc.
+- **stack_hash**  A hash of the hanging stack. Currently not used or set to zero.
+
+
 ## OneSettings events
 
 ### Microsoft.Windows.OneSettingsClient.Status
@@ -2273,105 +2266,29 @@ The following fields are available:
 
 ## Other events
 
-### Microsoft.Edge.Crashpad.HangEvent
+### Microsoft.Windows.Analog.HydrogenCompositor.ExclusiveMode_Entered
 
-This event sends simple Product and Service Performance data on a hanging/frozen Microsoft Edge browser process to help mitigate future instances of the hang.
+This event sends data indicating the start of augmented reality application experience. The data collected with this event is used to keep Windows performing properly.
 
 The following fields are available:
 
-- **app_name**  The name of the hanging process.
-- **app_session_guid**  Encodes the boot session, process, and process start time.
-- **app_version**  The version of the hanging process.
-- **client_id_hash**  Hash of the browser client id to help identify the installation.
-- **etag**  Identifier to help identify running browser experiments.
-- **hang_source**  Identifies how the hang was detected.
-- **process_type**  The type of the hanging browser process, for example, gpu-process, renderer, etc.
-- **stack_hash**  A hash of the hanging stack. Currently not used or set to zero.
+- **SessionID**  Unique value for each attempt.
+- **TargetAsId**  The sequence number for the process.
+- **windowInstanceId**  Unique value for each window instance.
 
 
-### Microsoft.Gaming.Critical.Error
+### Microsoft.Windows.Analog.HydrogenCompositor.ExclusiveMode_Leave
 
-Common error event used by the Gaming Telemetry Library to provide centralized monitoring for critical errors logged by callers using the library.
+This event sends data indicating the end of augmented reality application experience. The data collected with this event is used to keep Windows performing properly.
 
 The following fields are available:
 
-- **callStack**  List of active subroutines running during error occurrence.
-- **componentName**  Friendly name meant to represent what feature area this error should be attributed to. Used for aggregations and pivots of data.
-- **customAttributes**  List of custom attributes.
-- **errorCode**  Error code.
-- **extendedData**  JSON blob representing additional, provider-level properties common to the component.
-- **featureName**  Friendly name meant to represent which feature this should be attributed to.
-- **identifier**  Error identifier.
-- **message**  Error message.
-- **properties**  List of properties attributed to the error.
-
-### Microsoft.Gaming.Critical.ProviderRegistered
-
-Indicates that a telemetry provider has been registered with the Gaming Telemetry Library.
-
-The following fields are available:
-
-- **providerNamespace**  The telemetry Namespace for the registered provider.
-
-### Microsoft.Gaming.OOBE.HDDBackup
-
-This event describes whether an External HDD back up has been found.
-
-The following fields are available:
-
-- **backupVersion**  version number of backup.
-- **extendedData**  JSON blob representing additional, provider-level properties common to the component.
-- **hasConsoleSettings**  Indicates whether the console settings stored.
-- **hasUserSettings**  Indicates whether the user settings stored.
-- **hasWirelessProfile**  Indicates whether the wireless profile stored.
-- **hddBackupFound**  Indicates whether hdd backup is found.
-- **osVersion**  Operating system version.
-
-### Microsoft.Gaming.OOBE.OobeComplete
-
-This event is triggered when OOBE activation is complete.
-
-The following fields are available:
-
-- **allowAutoUpdate**  Allows auto update.
-- **allowAutoUpdateApps**  Allows auto update for apps.
-- **appliedTransferToken**  Applied transfer token.
-- **connectionType**  Connection type.
-- **curSessionId**  Current session id.
-- **extendedData**  JSON blob representing additional, provider-level properties common to the component.
-- **instantOn**  Instant on.
-- **moobeAcceptedState**  Moobe accepted state.
-- **phaseOneElapsedTimeMs**  Total elapsed time in milliseconds for phase 1.
-- **phaseOneVersion**  Version of phase 1.
-- **phaseTwoElapsedTimeMs**  Total elapsed time in milliseconds for phase 2.
-- **phaseTwoVersion**  Version of phase 2.
-- **systemUpdateRequired**  Indicates whether a system update required.
-- **totalElapsedTimeMs**  Total elapsed time in milliseconds of all phases.
-- **usedCloudBackup**  Indicates whether cloud backup is used.
-- **usedHDDBackup**  Indicates whether HDD backup is used.
-- **usedOffConsole**  Indicates whether off console is used.
-
-
-### Microsoft.Gaming.OOBE.SessionStarted
-
-This event is sent at the start of OOBE session.
-
-The following fields are available:
-
-- **customAttributes**  customAttributes.
-- **extendedData**  extendedData.
-
-### Microsoft.Surface.Mcu.Prod.CriticalLog
-
-Error information from Surface device firmware.
-
-The following fields are available:
-
-- **CrashLog**  MCU crash log
-- **criticalLogSize** Log size
-- **CUtility::GetTargetNameA(target)**  Product identifier.
-- **productId**  Product identifier
-- **uniqueId**  Correlation ID that can be used with Watson to get more details about the failure.
+- **EventHistory**  Unique number of event history.
+- **ExternalComponentState**  State of external component.
+- **LastEvent**  Unique number of last event.
+- **SessionID**  Unique value for each attempt.
+- **TargetAsId**  The sequence number for the process.
+- **windowInstanceId**  Unique value for each window instance.
 
 
 ### Microsoft.Windows.Defender.Engine.Maps.Heartbeat
@@ -2409,6 +2326,7 @@ The following fields are available:
 - **Action**  Action string indicating place of failure
 - **hr**  Return HRESULT code
 
+
 ### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateStarted
 
 Event that indicates secure boot update has started.
@@ -2419,22 +2337,6 @@ The following fields are available:
 - **SecureBootUpdateCaller**  Enum value indicating if this is a servicing or an upgrade.
 
 
-### Microsoft.Windows.UpdateAssistantApp.UpdateAssistantStartState
-
-This event marks the start of an Update Assistant State. The data collected with this event is used to help keep Windows up to date.
-
-The following fields are available:
-
-- **CV**  The correlation vector.
-- **GlobalEventCounter**  The global event counter for all telemetry on the device.
-- **UpdateAssistantStateDownloading**  True at the start Downloading.
-- **UpdateAssistantStateInitializingApplication**  True at the start of the state InitializingApplication.
-- **UpdateAssistantStateInitializingStates**  True at the start of InitializingStates.
-- **UpdateAssistantStateInstalling**  True at the start of Installing.
-- **UpdateAssistantStatePostInstall**  True at the start of PostInstall.
-- **UpdateAssistantVersion**  Current package version of UpdateAssistant.
-
-
 ### MicrosoftWindowsCodeIntegrityTraceLoggingProvider.CodeIntegrityHvciSysprepHvciAlreadyEnabled
 
 This event fires when HVCI is already enabled so no need to continue auto-enablement.
@@ -2670,6 +2572,19 @@ The following fields are available:
 - **Ver**  Schema version.
 
 
+### Microsoft.Surface.Mcu.Prod.CriticalLog
+
+Error information from Surface device firmware.
+
+The following fields are available:
+
+- **CrashLog**  MCU crash log
+- **criticalLogSize** Log size
+- **CUtility::GetTargetNameA(target)**  Product identifier.
+- **productId**  Product identifier
+- **uniqueId**  Correlation ID that can be used with Watson to get more details about the failure.
+
+
 ### Microsoft.Surface.SystemReset.Prod.ResetCauseEventV2
 
 This event sends reason for SAM, PCH and SoC reset. The data collected with this event is used to keep Windows performing properly.
@@ -2710,6 +2625,24 @@ The following fields are available:
 - **UpdateAttempted**  Indicates if installation of the current update has been attempted before.
 
 
+## Update Assistant events
+
+### Microsoft.Windows.UpdateAssistantApp.UpdateAssistantStartState
+
+This event marks the start of an Update Assistant State. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **CV**  The correlation vector.
+- **GlobalEventCounter**  The global event counter for all telemetry on the device.
+- **UpdateAssistantStateDownloading**  True at the start Downloading.
+- **UpdateAssistantStateInitializingApplication**  True at the start of the state InitializingApplication.
+- **UpdateAssistantStateInitializingStates**  True at the start of InitializingStates.
+- **UpdateAssistantStateInstalling**  True at the start of Installing.
+- **UpdateAssistantStatePostInstall**  True at the start of PostInstall.
+- **UpdateAssistantVersion**  Current package version of UpdateAssistant.
+
+
 ## Update events
 
 ### Update360Telemetry.FellBackToDownloadingAllPackageFiles
@@ -3574,7 +3507,7 @@ The following fields are available:
 - **flightMetadata**  Contains the FlightId and the build being flighted.
 - **objectId**  Unique value for each Update Agent mode.
 - **relatedCV**  Correlation vector value generated from the latest USO scan.
-- **result**  Result of the initialize phase of the update. 0 = Succeeded, 1 = Failed, 2 = Cancelled, 3 = Blocked, 4 = BlockCancelled.
+- **result**  Result of the initialize phase of the update. 0 = Succeeded, 1 = Failed, 2 = Canceled, 3 = Blocked, 4 = BlockCancelled.
 - **scenarioId**  The scenario ID. Example: MobileUpdate, DesktopLanguagePack, DesktopFeatureOnDemand, or DesktopDriverUpdate.
 - **sessionData**  Contains instructions to update agent for processing FODs and DUICs (Null for other scenarios).
 - **sessionId**  Unique value for each Update Agent mode attempt.
@@ -3758,6 +3691,3 @@ The following fields are available:
 - **SessionId**  The UpdateAgent “SessionId” value.
 - **UpdateId**  Unique identifier for the Update.
 - **WuId**  Unique identifier for the Windows Update client.
-
-
-
diff --git a/windows/privacy/required-diagnostic-events-fields-windows-11-24H2.md b/windows/privacy/required-diagnostic-events-fields-windows-11-24H2.md
new file mode 100644
index 0000000000..cf3ffdba05
--- /dev/null
+++ b/windows/privacy/required-diagnostic-events-fields-windows-11-24H2.md
@@ -0,0 +1,4266 @@
+---
+description: Learn more about the diagnostic data gathered for Windows 11, version 24H2.
+title: Required diagnostic events and fields for Windows 11, version 24H2
+keywords: privacy, telemetry
+ms.service: windows-client
+ms.subservice: itpro-privacy
+ms.localizationpriority: high
+author: DHB-MSFT
+ms.author: danbrown
+manager: laurawi
+ms.date: 10/01/2024
+ms.topic: reference
+ms.collection: privacy-windows
+---
+
+# Required diagnostic events and fields for Windows 11, version 24H2
+
+**Applies to**
+
+- Windows 11, version 24H2
+
+Required diagnostic data gathers a limited set of information that is critical for understanding the device and its configuration including: basic device information, quality-related information, app compatibility, and Microsoft Store.
+
+Required diagnostic data helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version. This helps Microsoft fix operating system or app problems.
+
+Use this article to learn about diagnostic events, grouped by event area, and the fields within each event. A brief description is provided for each field. Every event generated includes common data, which collects device data.
+
+You can learn more about Windows functional and diagnostic data through these articles:
+
+- [Required diagnostic events and fields for Windows 11, versions 23H2 and 22H2](required-diagnostic-events-fields-windows-11-22H2.md)
+- [Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
+- [Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
+- [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
+- [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
+- [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md)
+
+
+## Appraiser events
+
+### Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
+
+This event lists the types of objects and how many of each exist on the client device. This allows for a quick way to ensure that the records present on the server match what is present on the client. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **DatasourceApplicationFile_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceApplicationFile_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceApplicationFile_NI22H2**  The count of the number of this particular object type present on this device.
+- **DatasourceApplicationFile_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceApplicationFile_RS1**  The total number of objects of this type present on this device.
+- **DatasourceApplicationFile_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DatasourceApplicationFile_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DatasourceApplicationFile_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceApplicationFileBackup**  The count of the number of this particular object type present on this device.
+- **DatasourceBackupApplicationRestore**  The count of the number of this particular object type present on this device.
+- **DatasourceDevicePnp_20H1Setup**  The total number of objects of this type present on this device.
+- **DatasourceDevicePnp_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceDevicePnp_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceDevicePnp_NI22H2**  The count of the number of this particular object type present on this device.
+- **DatasourceDevicePnp_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceDevicePnp_RS1**  The total DataSourceDevicePnp objects targeting Windows 10 version 1607 on this device.
+- **DatasourceDevicePnp_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DatasourceDevicePnp_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DatasourceDevicePnp_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceDriverPackage_20H1Setup**  The total number of objects of this type present on this device.
+- **DatasourceDriverPackage_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceDriverPackage_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceDriverPackage_NI22H2**  The count of the number of this particular object type present on this device.
+- **DatasourceDriverPackage_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceDriverPackage_RS1**  The total number of objects of this type present on this device.
+- **DatasourceDriverPackage_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DatasourceDriverPackage_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DatasourceDriverPackage_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoBlock_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoBlock_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoBlock_NI22H2**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoBlock_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoBlock_RS1**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoBlock_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoBlock_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoBlock_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPassive_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoPassive_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPassive_NI22H2**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPassive_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoPassive_RS1**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoPassive_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPassive_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPassive_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_NI22H2**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_RS1**  The total number of objects of this type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DataSourceMatchingInfoPostUpgrade_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceSystemBios_20H1Setup**  The total number of objects of this type present on this device.
+- **DatasourceSystemBios_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceSystemBios_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DatasourceSystemBios_NI22H2**  The count of the number of this particular object type present on this device.
+- **DatasourceSystemBios_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DatasourceSystemBios_RS1**  The total DatasourceSystemBios objects targeting Windows 10 version 1607 present on this device.
+- **DatasourceSystemBios_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DatasourceSystemBios_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DatasourceSystemBios_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionApplicationFile_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionApplicationFile_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionApplicationFile_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionApplicationFile_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionApplicationFile_RS1**  The total number of objects of this type present on this device.
+- **DecisionApplicationFile_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionApplicationFile_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionApplicationFile_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionDevicePnp_20H1Setup**  The total number of objects of this type present on this device.
+- **DecisionDevicePnp_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionDevicePnp_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionDevicePnp_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionDevicePnp_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionDevicePnp_RS1**  The total number of objects of this type present on this device.
+- **DecisionDevicePnp_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionDevicePnp_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionDevicePnp_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionDriverPackage_20H1Setup**  The total number of objects of this type present on this device.
+- **DecisionDriverPackage_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionDriverPackage_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionDriverPackage_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionDriverPackage_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionDriverPackage_RS1**  The total number of objects of this type present on this device.
+- **DecisionDriverPackage_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionDriverPackage_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionDriverPackage_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoBlock_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoBlock_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoBlock_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoBlock_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoBlock_RS1**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoBlock_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoBlock_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoBlock_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPassive_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoPassive_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPassive_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPassive_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoPassive_RS1**  The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device.
+- **DecisionMatchingInfoPassive_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPassive_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPassive_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPostUpgrade_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoPostUpgrade_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPostUpgrade_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPostUpgrade_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMatchingInfoPostUpgrade_RS1**  The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device.
+- **DecisionMatchingInfoPostUpgrade_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPostUpgrade_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionMatchingInfoPostUpgrade_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMediaCenter_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMediaCenter_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionMediaCenter_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionMediaCenter_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionMediaCenter_RS1**  The total number of objects of this type present on this device.
+- **DecisionMediaCenter_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionMediaCenter_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionMediaCenter_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSModeState_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSModeState_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSModeState_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionSModeState_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSModeState_RS1**  The total number of objects of this type present on this device.
+- **DecisionSModeState_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionSModeState_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionSModeState_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemBios_20H1Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemBios_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemBios_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemBios_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemBios_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemBios_RS1**  The total number of objects of this type present on this device.
+- **DecisionSystemBios_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemBios_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionSystemBios_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemDiskSize_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemDiskSize_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemDiskSize_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemDiskSize_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemDiskSize_RS1**  The total number of objects of this type present on this device.
+- **DecisionSystemDiskSize_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemDiskSize_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionSystemDiskSize_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemMemory_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemMemory_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemMemory_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemMemory_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemMemory_RS1**  The total number of objects of this type present on this device.
+- **DecisionSystemMemory_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemMemory_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionSystemMemory_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuCores_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorCpuCores_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuCores_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuCores_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorCpuCores_RS1**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorCpuCores_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuCores_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuCores_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuModel_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorCpuModel_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuModel_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuModel_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorCpuModel_RS1**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorCpuModel_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuModel_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuModel_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionSystemProcessorCpuSpeed_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionSystemProcessorPopCnt**  The count of the number of this particular object type present on this device.
+- **DecisionTest_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionTest_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionTest_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionTest_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionTest_RS1**  The total number of objects of this type present on this device.
+- **DecisionTest_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionTest_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionTest_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionTpmVersion_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionTpmVersion_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionTpmVersion_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionTpmVersion_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionTpmVersion_RS1**  The total number of objects of this type present on this device.
+- **DecisionTpmVersion_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionTpmVersion_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionTpmVersion_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionUefiSecureBoot_CO21H2Setup**  The total number of objects of this type present on this device.
+- **DecisionUefiSecureBoot_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **DecisionUefiSecureBoot_NI22H2**  The count of the number of this particular object type present on this device.
+- **DecisionUefiSecureBoot_NI22H2Setup**  The total number of objects of this type present on this device.
+- **DecisionUefiSecureBoot_RS1**  The total number of objects of this type present on this device.
+- **DecisionUefiSecureBoot_ZN23H2**  The count of the number of this particular object type present on this device.
+- **DecisionUefiSecureBoot_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **DecisionUefiSecureBoot_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **InventoryApplicationFile**  The count of the number of this particular object type present on this device.
+- **InventoryLanguagePack**  The count of the number of this particular object type present on this device.
+- **InventoryMediaCenter**  The count of the number of this particular object type present on this device.
+- **InventorySystemBios**  The count of the number of this particular object type present on this device.
+- **InventoryTest**  The count of the number of this particular object type present on this device.
+- **InventoryUplevelDriverPackage**  The count of the number of this particular object type present on this device.
+- **PCFP**  The count of the number of this particular object type present on this device.
+- **SystemMemory**  The count of the number of this particular object type present on this device.
+- **SystemProcessorCompareExchange**  The count of the number of this particular object type present on this device.
+- **SystemProcessorLahfSahf**  The count of the number of this particular object type present on this device.
+- **SystemProcessorNx**  The total number of objects of this type present on this device.
+- **SystemProcessorPopCnt**  The count of the number of this particular object type present on this device.
+- **SystemProcessorPopCnt_NI22H2**  The count of the number of this particular object type present on this device.
+- **SystemProcessorPopCnt_RS1**  The count of the number of this particular object type present on this device.
+- **SystemProcessorPopCnt_ZN23H2**  The count of the number of this particular object type present on this device.
+- **SystemProcessorPopCnt_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **SystemProcessorPopCnt_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+- **SystemProcessorPrefetchW**  The total number of objects of this type present on this device.
+- **SystemProcessorSse2**  The total number of objects of this type present on this device.
+- **SystemTouch**  The count of the number of this particular object type present on this device.
+- **SystemWim**  The total number of objects of this type present on this device.
+- **SystemWindowsActivationStatus**  The count of the number of this particular object type present on this device.
+- **SystemWlan**  The total number of objects of this type present on this device.
+- **Wmdrm_CO21H2Setup**  The total number of objects of this type present on this device.
+- **Wmdrm_CU23H2Setup**  The count of the number of this particular object type present on this device.
+- **Wmdrm_NI22H2**  The count of the number of this particular object type present on this device.
+- **Wmdrm_NI22H2Setup**  The total number of objects of this type present on this device.
+- **Wmdrm_RS1**  The total number of objects of this type present on this device.
+- **Wmdrm_ZN23H2**  The count of the number of this particular object type present on this device.
+- **Wmdrm_ZN23H2Exp**  The count of the number of this particular object type present on this device.
+- **Wmdrm_ZN23H2Setup**  The count of the number of this particular object type present on this device.
+
+
+### Microsoft.Windows.Appraiser.General.DatasourceApplicationFileRemove
+
+This event indicates that the DatasourceApplicationFile object is no longer present. The data collected with this event is used to help keep Windows up to date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the Appraiser file that is generating the events.
+
+
+### Microsoft.Windows.Appraiser.General.DatasourceBackupApplicationRestoreAdd
+
+Represents the basic metadata about the interesting backed up applications to be restored on the system. This event describes whether the backed up applications are incompatible with upcoming Windows Feature updates. Microsoft uses this information to understand and address problems with computers receiving updates.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the appraiser file that is generating the events.
+- **BackupLabel**  Indicates compatibility information about the application found on the backup device.
+- **CatalogSource**  The type of application.
+- **CreatePlaceholder**  Represents the decision regarding if the application should be restored.
+- **Name**  Name of the application.
+- **ProgramId**  A hash of the Name, Version, Publisher, and Language of an application used to identify it.
+- **SdbEntryGuid**  Indicates the SDB entry that applies to this file.
+- **SdbRestoreAction**  Indicates compatibility information about the application found on the backup device.
+
+### Microsoft.Windows.Appraiser.General.DatasourceBackupApplicationRestoreStartSync
+
+This event indicates that a new set of DatasourceBackupApplicationRestoreAdd events will be sent.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the appraiser binary generating the events.
+
+
+### Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPassiveRemove
+
+This event indicates that the DataSourceMatchingInfoPassive object is no longer present. The data collected with this event is used to help keep Windows up to date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the Appraiser file that is generating the events.
+
+
+### Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPassiveStartSync
+
+This event indicates that a new set of DataSourceMatchingInfoPassiveAdd events will be sent. This event is used to make compatibility decisions about files to help keep Windows up to date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the Appraiser file that is generating the events.
+
+
+### Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPassiveAdd
+
+This event sends compatibility decision data about non-blocking entries on the system that aren't keyed by either applications or devices, to help keep Windows up to date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the Appraiser file that is generating the events.
+- **BlockingApplication**  Are there any application issues that interfere with upgrade due to matching info blocks?
+- **DisplayGenericMessageGated**  Indicates whether a generic offer block message will be shown due to matching info blocks.
+- **MigApplication**  Is there a matching info block with a mig for the current mode of upgrade?
+
+
+### Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPassiveStartSync
+
+This event indicates that a new set of DecisionMatchingInfoPassiveAdd events will be sent. The data collected with this event is used to help keep Windows up to date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  The version of the Appraiser file that is generating the events.
+
+
+### Microsoft.Windows.Appraiser.General.RestoreContext
+
+This event indicates the result of the restore appraisal.
+
+The following fields are available:
+
+- **AppraiserBranch**  The source branch in which the currently-running version of appraiser was built.
+- **AppraiserVersion**  The version of the appraiser binary generating the events.
+- **Context**  Indicates what mode appraiser is running in, this should be Restore.
+- **PCFP**  An ID for the system, calculated by hashing hardware identifiers.
+- **Result**  HRESULT indicating the result of the restore appraisal.
+- **Time**  The client time of the event.
+
+
+### Microsoft.Windows.Appraiser.General.SystemProcessorPopCntAdd
+
+This event sends data indicating whether the system supports the PopCnt CPU requirement for newer versions of Windows, to help keep Windows up-to-date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  Appraiser version
+- **Blocking**  Is the upgrade blocked due to the processor missing the PopCnt instruction?
+- **PopCntPassed**  Whether the machine passes the latest OS hardware requirements or not for the PopCnt instruction.
+
+
+### Microsoft.Windows.Appraiser.General.SystemProcessorPopCntStartSync
+
+The SystemProcessorPopCntStartSync event indicates that a new set of SystemProcessorPopCntAdd events will be sent. This event is used to understand if the system supports the PopCnt CPU requirement for newer versions of Windows.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AppraiserVersion**  Appraiser version.
+
+
+## Census events
+
+### Census.Xbox
+
+This event sends data about the Xbox Console, such as Serial Number and DeviceId, to help keep Windows up to date.
+
+The following fields are available:
+
+- **XboxConsolePreferredLanguage**  Retrieves the preferred language selected by the user on Xbox console.
+- **XboxConsoleSerialNumber**  Retrieves the serial number of the Xbox console.
+- **XboxLiveDeviceId**  Retrieves the unique device ID of the console.
+- **XboxLiveSandboxId**  Retrieves the developer sandbox ID if the device is internal to Microsoft.
+
+## Code Integrity events
+
+### Microsoft.Windows.Security.CodeIntegrity.Driver.AggregatedBlock
+
+AggregatedBlock is an event with non-PII details on drivers blocked by code integrity. Fires no more than once per 25 days per driver.
+
+The following fields are available:
+
+- **CertificateInfo**  Non-PII details about the digital signature(s) and digital countersignatures on driver binary files which was blocked from loading.
+- **DriverInfo**  Non-PII details about the driver binary file and its digital signature(s) and digital countersignature.
+- **EventVersion**  The version of the schema used in the DriverInfo field.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.AutoEnablementIsBlocked
+
+Indicates if OEM attempted to block autoenablement via regkey.
+
+The following fields are available:
+
+- **BlockHvciAutoenablement**  True if auto-enablement was successfully blocked, false otherwise.
+- **BlockRequested**  Whether an autoenablement block was requested.
+- **Scenario**  Used to differentiate VBS and HVCI paths.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.Compatibility
+
+Fires when the compatibility check completes. Gives the results from the check.
+
+The following fields are available:
+
+- **IsRecommended**  Denotes whether all compatibility checks have passed and, if so, returns true. Otherwise returns false.
+- **Issues**  If compatibility checks failed, provides bit indexed indicators of issues detected. Table located here: [Check results of HVCI default enablement](/windows-hardware/design/device-experiences/oem-hvci-enablement#check-results-of-memory-integrity-default-enablement)
+- **Scenario**  Denotes whether SysPrep is attempting to enable HVCI (0) or VBS (1).
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.Enabled
+
+Fires when auto-enablement is successful and HVCI is being enabled on the device.
+
+The following fields are available:
+
+- **Error**  Error code if there was an issue during enablement
+- **Scenario**  Indicates whether enablement was for VBS vs HVCI
+- **SuccessfullyEnabled**  Indicates whether enablement was successful
+- **Upgrade**  Indicates whether the event was fired during upgrade (rather than clean install)
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HVCIActivity
+
+Fires at the beginning and end of the HVCI auto-enablement process in sysprep.
+
+The following fields are available:
+
+- **wilActivity**  Contains the thread ID used to match the begin and end events, and for the end event also a HResult indicating success or failure.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciAlreadyEnabled
+
+Fires when HVCI is already enabled so no need to continue auto-enablement.
+
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciScanGetResultFailed
+
+Fires when driver scanning fails to get results.
+
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciScanningDriverInSdbError
+
+Fires when there's an error checking the SDB for a particular driver.
+
+The following fields are available:
+
+- **DriverPath**  Path to the driver that was being checked in the SDB when checking encountered an error.
+- **Error**  Error encountered during checking the SDB.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciScanningDriverNonCompliantError
+
+Fires when a driver is discovered that is non-compliant with HVCI.
+
+The following fields are available:
+
+- **DriverPath**  Path to driver.
+- **NonComplianceMask**  Error code indicating driver violation.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.IsRegionDisabledLanguage
+
+Fires when an incompatible language pack is detected.
+
+The following fields are available:
+
+- **Language**  String containing the incompatible language pack detected.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.KcetHvciDisabled
+
+This event indicates that kernel-mode Control-flow Enforcement Technology (CET), which is a CPU-based security feature that protects against return address hijacking attacks from malicious software, was unable to be enabled because HVCI (a dependent security feature) wasn't also enabled.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.State.DefenderSwitchedNWOff
+
+This event tracks when Defender turns off Smart App Control via the Cloud.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.State.DefenderSwitchedNWOffIgnored
+
+This event indicates that a request to switch Smart App Control off by Defender from the cloud was ignored as the device was still within the grace period after OOBE.
+
+The following fields are available:
+
+- **Count**  Count of events in the aggregation window.
+- **CurrentTimeMax**  Time of latest event.
+- **CurrentTimeMin**  Time of first event.
+- **NightsWatchDesktopIgnoreAutoOptOut**  Value of NightsWatchDesktopIgnoreAutoOptOut in registry.
+- **OOBECompleteTime**  Value of OOBECompleteTime in registry.
+- **OOBESafetyTime**  Start of timer set by Smart App Control if OOBECompleteTime wasn't set.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.State.SwitchedNWOff
+
+This event tracks when Smart App Control is turned off.
+
+
+### Microsoft.Windows.Security.CodeIntegrity.State.SwitchedNWToEnforcementMode
+
+This event tracks when Smart App Control is changed from evaluation to enforcement mode.
+
+
+
+## Common data extensions
+
+### Common Data Extensions.app
+
+Describes the properties of the running application. This extension could be populated by a client app or a web app.
+
+The following fields are available:
+
+- **asId**  An integer value that represents the app session. This value starts at 0 on the first app launch and increments after each subsequent app launch per boot session.
+- **env**  The environment from which the event was logged.
+- **expId**  Associates a flight, such as an OS flight, or an experiment, such as a web site UX experiment, with an event.
+- **id**  Represents a unique identifier of the client application currently loaded in the process producing the event; and is used to group events together and understand usage pattern, errors by application.
+- **locale**  The locale of the app.
+- **name**  The name of the app.
+- **userId**  The userID as known by the application.
+- **ver**  Represents the version number of the application. Used to understand errors by Version, Usage by Version across an app.
+
+
+### Common Data Extensions.container
+
+Describes the properties of the container for events logged within a container.
+
+The following fields are available:
+
+- **epoch**  An ID that's incremented for each SDK initialization.
+- **localId**  The device ID as known by the client.
+- **osVer**  The operating system version.
+- **seq**  An ID that's incremented for each event.
+- **type**  The container type. Examples: Process or VMHost
+
+
+### Common Data Extensions.device
+
+Describes the device-related fields.
+
+The following fields are available:
+
+- **deviceClass**  The device classification. For example, Desktop, Server, or Mobile.
+- **localId**  A locally-defined unique ID for the device. This isn't the human-readable device name. Most likely equal to the value stored at HKLM\Software\Microsoft\SQMClient\MachineId
+- **make**  Device manufacturer.
+- **model**  Device model.
+
+
+### Common Data Extensions.Envelope
+
+Represents an envelope that contains all of the common data extensions.
+
+The following fields are available:
+
+- **data**  Represents the optional unique diagnostic data for a particular event schema.
+- **ext_app**  Describes the properties of the running application. This extension could be populated by either a client app or a web app. See [Common Data Extensions.app](#common-data-extensionsapp).
+- **ext_container**  Describes the properties of the container for events logged within a container. See [Common Data Extensions.container](#common-data-extensionscontainer).
+- **ext_device**  Describes the device-related fields. See [Common Data Extensions.device](#common-data-extensionsdevice).
+- **ext_mscv**  Describes the correlation vector-related fields. See [Common Data Extensions.mscv](#common-data-extensionsmscv).
+- **ext_os**  Describes the operating system properties that would be populated by the client. See [Common Data Extensions.os](#common-data-extensionsos).
+- **ext_sdk**  Describes the fields related to a platform library required for a specific SDK. See [Common Data Extensions.sdk](#common-data-extensionssdk).
+- **ext_user**  Describes the fields related to a user. See [Common Data Extensions.user](#common-data-extensionsuser).
+- **ext_utc**  Describes the fields that might be populated by a logging library on Windows. See [Common Data Extensions.utc](#common-data-extensionsutc).
+- **ext_xbl**  Describes the fields related to XBOX Live. See [Common Data Extensions.xbl](#common-data-extensionsxbl).
+- **iKey**  Represents an ID for applications or other logical groupings of events.
+- **name**  Represents the uniquely qualified name for the event.
+- **time**  Represents the event date time in Coordinated Universal Time (UTC) when the event was generated on the client. This should be in ISO 8601 format.
+- **ver**  Represents the major and minor version of the extension.
+
+
+### Common Data Extensions.mscv
+
+Describes the correlation vector-related fields.
+
+The following fields are available:
+
+- **cV**  Represents the Correlation Vector: A single field for tracking partial order of related events across component boundaries.
+
+
+### Common Data Extensions.os
+
+Describes some properties of the operating system.
+
+The following fields are available:
+
+- **bootId**  An integer value that represents the boot session. This value starts at 0 on first boot after OS install and increments after every reboot.
+- **expId**  Represents the experiment ID. The standard for associating a flight, such as an OS flight (pre-release build), or an experiment, such as a web site UX experiment, with an event is to record the flight / experiment IDs in Part A of the common schema.
+- **locale**  Represents the locale of the operating system.
+- **name**  Represents the operating system name.
+- **ver**  Represents the major and minor version of the extension.
+
+
+### Common Data Extensions.sdk
+
+Used by platform specific libraries to record fields that are required for a specific SDK.
+
+The following fields are available:
+
+- **epoch**  An ID that is incremented for each SDK initialization.
+- **installId**  An ID that's created during the initialization of the SDK for the first time.
+- **libVer**  The SDK version.
+- **seq**  An ID that is incremented for each event.
+- **ver**  The version of the logging SDK.
+
+
+### Common Data Extensions.user
+
+Describes the fields related to a user.
+
+The following fields are available:
+
+- **authId**  This is an ID of the user associated with this event that is deduced from a token such as a Microsoft Account ticket or an XBOX token.
+- **locale**  The language and region.
+- **localId**  Represents a unique user identity that is created locally and added by the client. This isn't the user's account ID.
+
+
+### Common Data Extensions.utc
+
+Describes the properties that could be populated by a logging library on Windows.
+
+The following fields are available:
+
+- **aId**  Represents the ETW ActivityId. Logged via TraceLogging or directly via ETW.
+- **bSeq**  Upload buffer sequence number in the format: buffer identifier:sequence number
+- **cat**  Represents a bitmask of the ETW Keywords associated with the event.
+- **cpId**  The composer ID, such as Reference, Desktop, Phone, Holographic, Hub, IoT Composer.
+- **epoch**  Represents the epoch and seqNum fields, which help track how many events were fired and how many events were uploaded, and enables identification of data lost during upload and de-duplication of events on the ingress server.
+- **eventFlags**  Represents a collection of bits that describe how the event should be processed by the Connected User Experience and Telemetry component pipeline. The lowest-order byte is the event persistence. The next byte is the event latency.
+- **flags**  Represents the bitmap that captures various Windows specific flags.
+- **loggingBinary**  The binary (executable, library, driver, etc.) that fired the event.
+- **mon**  Combined monitor and event sequence numbers in the format: monitor sequence : event sequence
+- **op**  Represents the ETW Op Code.
+- **pgName**  The short form of the provider group name associated with the event.
+- **popSample**  Represents the effective sample rate for this event at the time it was generated by a client.
+- **providerGuid**  The ETW provider ID associated with the provider name.
+- **raId**  Represents the ETW Related ActivityId. Logged via TraceLogging or directly via ETW.
+- **seq**  Represents the sequence field used to track absolute order of uploaded events. It's an incrementing identifier for each event added to the upload queue.  The Sequence helps track how many events were fired and how many events were uploaded and enables identification of data lost during upload and de-duplication of events on the ingress server.
+- **sqmId**  The Windows SQM (Software Quality Metrics—a precursor of Windows 10 Diagnostic Data collection) device identifier.
+- **stId**  Represents the Scenario Entry Point ID. This is a unique GUID for each event in a diagnostic scenario. This used to be Scenario Trigger ID.
+- **wcmp**  The Windows Shell Composer ID.
+- **wPId**  The Windows Core OS product ID.
+- **wsId**  The Windows Core OS session ID.
+
+
+### Common Data Extensions.xbl
+
+Describes the fields that are related to XBOX Live.
+
+The following fields are available:
+
+- **claims**  Any additional claims whose short claim name hasn't been added to this structure.
+- **did**  XBOX device ID
+- **dty**  XBOX device type
+- **dvr**  The version of the operating system on the device.
+- **eid**  A unique ID that represents the developer entity.
+- **exp**  Expiration time
+- **ip**  The IP address of the client device.
+- **nbf**  Not before time
+- **pid**  A comma separated list of PUIDs listed as base10 numbers.
+- **sbx**  XBOX sandbox identifier
+- **sid**  The service instance ID.
+- **sty**  The service type.
+- **tid**  The XBOX Live title ID.
+- **tvr**  The XBOX Live title version.
+- **uts**  A bit field, with 2 bits being assigned to each user ID listed in xid. This field is omitted if all users are retail accounts.
+- **xid**  A list of base10-encoded XBOX User IDs.
+
+
+## Common data fields
+
+### Ms.Device.DeviceInventoryChange
+
+Describes the installation state for all hardware and software components available on a particular device.
+
+The following fields are available:
+
+- **action**  The change that was invoked on a device inventory object.
+- **inventoryId**  Device ID used for Compatibility testing
+- **objectInstanceId**  Object identity which is unique within the device scope.
+- **objectType**  Indicates the object type that the event applies to.
+- **syncId**  A string used to group StartSync, EndSync, Add, and Remove operations that belong together. This field is unique by Sync period and is used to disambiguate in situations where multiple agents perform overlapping inventories for the same object.
+- 
+
+## Component-based servicing events
+
+### CbsServicingProvider.CbsCapabilityEnumeration
+
+This event reports on the results of scanning for optional Windows content on Windows Update to keep Windows up to date.
+
+The following fields are available:
+
+- **architecture**  Indicates the scan was limited to the specified architecture.
+- **capabilityCount**  The number of optional content packages found during the scan.
+- **clientId**  The name of the application requesting the optional content.
+- **duration**  The amount of time it took to complete the scan.
+- **hrStatus**  The HReturn code of the scan.
+- **language**  Indicates the scan was limited to the specified language.
+- **majorVersion**  Indicates the scan was limited to the specified major version.
+- **minorVersion**  Indicates the scan was limited to the specified minor version.
+- **namespace**  Indicates the scan was limited to packages in the specified namespace.
+- **sourceFilter**  A bitmask indicating the scan checked for locally available optional content.
+- **stackBuild**  The build number of the servicing stack.
+- **stackMajorVersion**  The major version number of the servicing stack.
+- **stackMinorVersion**  The minor version number of the servicing stack.
+- **stackRevision**  The revision number of the servicing stack.
+
+
+### CbsServicingProvider.CbsCapabilitySessionFinalize
+
+This event provides information about the results of installing or uninstalling optional Windows content from Windows Update. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **capabilities**  The names of the optional content packages that were installed.
+- **clientId**  The name of the application requesting the optional content.
+- **currentID**  The ID of the current install session.
+- **downloadSource**  The source of the download.
+- **highestState**  The highest final install state of the optional content.
+- **hrLCUReservicingStatus**  Indicates whether the optional content was updated to the latest available version.
+- **hrStatus**  The HReturn code of the install operation.
+- **rebootCount**  The number of reboots required to complete the install.
+- **retryID**  The session ID that will be used to retry a failed operation.
+- **retryStatus**  Indicates whether the install will be retried in the event of failure.
+- **stackBuild**  The build number of the servicing stack.
+- **stackMajorVersion**  The major version number of the servicing stack.
+- **stackMinorVersion**  The minor version number of the servicing stack.
+- **stackRevision**  The revision number of the servicing stack.
+
+
+### CbsServicingProvider.CbsCapabilitySessionPended
+
+This event provides information about the results of installing optional Windows content that requires a reboot to keep Windows up to date.
+
+The following fields are available:
+
+- **clientId**  The name of the application requesting the optional content.
+- **pendingDecision**  Indicates the cause of reboot, if applicable.
+
+
+### CbsServicingProvider.CbsFodInventory
+
+This event reports on the state of the current optional Windows content obtained from Windows Update.
+
+The following fields are available:
+
+- **capabilities**  A bitmask with each position indicating if each type of optional Windows content is currently enabled.
+- **initiatedOffline**  A true or false value indicating if the inventory describes an offline WIM file.
+- **stackBuild**  The build number of the servicing stack.
+- **stackMajorVersion**  The major version number of the servicing stack.
+- **stackMinorVersion**  The minor version number of the servicing stack.
+- **stackRevision**  The revision number of the servicing stack.
+
+### CbsServicingProvider.CbsLateAcquisition
+
+This event sends data to indicate if some Operating System packages couldn't be updated as part of an upgrade, to help keep Windows up to date.
+
+The following fields are available:
+
+- **Features**  The list of feature packages that couldn't be updated.
+- **RetryID**  The ID identifying the retry attempt to update the listed packages.
+
+
+### CbsServicingProvider.CbsPackageRemoval
+
+This event provides information about the results of uninstalling a Windows Cumulative Security Update to help keep Windows up to date.
+
+The following fields are available:
+
+- **buildVersion**  The build number of the security update being uninstalled.
+- **clientId**  The name of the application requesting the uninstall.
+- **currentStateEnd**  The final state of the update after the operation.
+- **failureDetails**  Information about the cause of a failure, if applicable.
+- **failureSourceEnd**  The stage during the uninstall where the failure occurred.
+- **hrStatusEnd**  The overall exit code of the operation.
+- **initiatedOffline**  Indicates if the uninstall was initiated for a mounted Windows image.
+- **majorVersion**  The major version number of the security update being uninstalled.
+- **minorVersion**  The minor version number of the security update being uninstalled.
+- **originalState**  The starting state of the update before the operation.
+- **pendingDecision**  Indicates the cause of reboot, if applicable.
+- **primitiveExecutionContext**  The state during system startup when the uninstall was completed.
+- **revisionVersion**  The revision number of the security update being uninstalled.
+- **transactionCanceled**  Indicates whether the uninstall was canceled.
+
+
+### CbsServicingProvider.CbsPostponedReserveInstallDecision
+
+This event reports on the scheduling of installs for Windows cumulative security updates.
+
+The following fields are available:
+
+- **hardReserveSize**  The size of the disk space reserve used to update Windows OS content.
+- **hardReserveUsedSpace**  The disk space currently in use in the reserve used to update Windows OS content.
+- **postponed**  A boolean indicating if updating processing has been delayed to shutdown due to low disk space.
+- **userFreeSpace**  The amount of free disk space available on the OS volume.
+- **usingReserves**  A boolean indicating whether disk space reserves are being used to install the update.
+
+
+### CbsServicingProvider.CbsQualityUpdateInstall
+
+This event reports on the performance and reliability results of installing Servicing content from Windows Update to keep Windows up to date.
+
+The following fields are available:
+
+- **buildVersion**  The build version number of the update package.
+- **clientId**  The name of the application requesting the optional content.
+- **corruptionHistoryFlags**  A bitmask of the types of component store corruption that have caused update failures on the device.
+- **corruptionType**  An enumeration listing the type of data corruption responsible for the current update failure.
+- **currentStateEnd**  The final state of the package after the operation has completed.
+- **doqTimeSeconds**  The time in seconds spent updating drivers.
+- **executeTimeSeconds**  The number of seconds required to execute the install.
+- **failureDetails**  The driver or installer that caused the update to fail.
+- **failureSourceEnd**  An enumeration indicating at what phase of the update a failure occurred.
+- **hrStatusEnd**  The return code of the install operation.
+- **initiatedOffline**  A true or false value indicating whether the package was installed into an offline Windows Imaging Format (WIM) file.
+- **majorVersion**  The major version number of the update package.
+- **minorVersion**  The minor version number of the update package.
+- **originalState**  The starting state of the package.
+- **overallTimeSeconds**  The time (in seconds) to perform the overall servicing operation.
+- **planTimeSeconds**  The time in seconds required to plan the update operations.
+- **poqTimeSeconds**  The time in seconds processing file and registry operations.
+- **postRebootTimeSeconds**  The time (in seconds) to do startup processing for the update.
+- **preRebootTimeSeconds**  The time (in seconds) between execution of the installation and the reboot.
+- **primitiveExecutionContext**  An enumeration indicating at what phase of shutdown or startup the update was installed.
+- **rebootCount**  The number of reboots required to install the update.
+- **rebootTimeSeconds**  The time (in seconds) before startup processing begins for the update.
+- **resolveTimeSeconds**  The time in seconds required to resolve the packages that are part of the update.
+- **revisionVersion**  The revision version number of the update package.
+- **rptTimeSeconds**  The time in seconds spent executing installer plugins.
+- **shutdownTimeSeconds**  The time (in seconds) required to do shutdown processing for the update.
+- **stackRevision**  The revision number of the servicing stack.
+- **stageTimeSeconds**  The time (in seconds) required to stage all files that are part of the update.
+
+
+### CbsServicingProvider.CbsSelectableUpdateChangeV2
+
+This event reports the results of enabling or disabling optional Windows Content to keep Windows up to date.
+
+The following fields are available:
+
+- **applicableUpdateState**  Indicates the highest applicable state of the optional content.
+- **buildVersion**  The build version of the package being installed.
+- **clientId**  The name of the application requesting the optional content change.
+- **downloadSource**  Indicates if optional content was obtained from Windows Update or a locally accessible file.
+- **downloadtimeInSeconds**  Indicates if optional content was obtained from Windows Update or a locally accessible file.
+- **executionID**  A unique ID used to identify events associated with a single servicing operation and not reused for future operations.
+- **executionSequence**  A counter that tracks the number of servicing operations attempted on the device.
+- **firstMergedExecutionSequence**  The value of a pervious executionSequence counter that is being merged with the current operation, if applicable.
+- **firstMergedID**  A unique ID of a pervious servicing operation that is being merged with this operation, if applicable.
+- **hrDownloadResult**  The return code of the download operation.
+- **hrStatusUpdate**  The return code of the servicing operation.
+- **identityHash**  A pseudonymized (hashed) identifier for the Windows Package that is being installed or uninstalled.
+- **initiatedOffline**  Indicates whether the operation was performed against an offline Windows image file or a running instance of Windows.
+- **majorVersion**  The major version of the package being installed.
+- **minorVersion**  The minor version of the package being installed.
+- **packageArchitecture**  The architecture of the package being installed.
+- **packageLanguage**  The language of the package being installed.
+- **packageName**  The name of the package being installed.
+- **rebootRequired**  Indicates whether a reboot is required to complete the operation.
+- **revisionVersion**  The revision number of the package being installed.
+- **stackBuild**  The build number of the servicing stack binary performing the installation.
+- **stackMajorVersion**  The major version number of the servicing stack binary performing the installation.
+- **stackMinorVersion**  The minor version number of the servicing stack binary performing the installation.
+- **stackRevision**  The revision number of the servicing stack binary performing the installation.
+- **updateName**  The name of the optional Windows Operation System feature being enabled or disabled.
+- **updateStartState**  A value indicating the state of the optional content before the operation started.
+- **updateTargetState**  A value indicating the desired state of the optional content.
+
+
+### CbsServicingProvider.CbsUpdateDeferred
+
+This event reports the results of deferring Windows Content to keep Windows up to date.
+
+
+
+## Deployment events
+
+### Microsoft.Windows.Deployment.Imaging.AppExit
+
+This event is sent on imaging application exit. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **hr**  HResult returned from app exit.
+- **totalTimeInMs**  Total time taken in Ms.
+
+
+### Microsoft.Windows.Deployment.Imaging.AppInvoked
+
+This event is sent when the app for image creation is invoked. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **branch**  Corresponding branch for the image.
+- **isInDbg**  Whether the app is in debug mode or not.
+- **isWSK**  Whether the app is building images using WSK or not.
+
+
+## DISM events
+
+### Microsoft.Windows.StartRepairCore.DISMPendingInstall
+
+The DISM Pending Install event sends information to report pending package installation found. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **dismPendingInstallPackageName**  The name of the pending package.
+
+
+### Microsoft.Windows.StartRepairCore.DISMRevertPendingActions
+
+The DISM Pending Install event sends information to report pending package installation found. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **errorCode**  The result code returned by the event.
+
+
+### Microsoft.Windows.StartRepairCore.SRTRepairActionEnd
+
+The SRT Repair Action End event sends information to report repair operation ended for given plug-in. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **errorCode**  The result code returned by the event.
+- **failedUninstallCount**  The number of driver updates that failed to uninstall.
+- **failedUninstallFlightIds**  The Flight IDs (identifiers of beta releases) of driver updates that failed to uninstall.
+- **foundDriverUpdateCount**  The number of found driver updates.
+- **srtRepairAction**  The scenario name for a repair.
+- **successfulUninstallCount**  The number of successfully uninstalled driver updates.
+- **successfulUninstallFlightIds**  The Flight IDs (identifiers of beta releases) of successfully uninstalled driver updates.
+
+
+### Microsoft.Windows.StartRepairCore.SRTRepairActionStart
+
+The SRT Repair Action Start event sends information to report repair operation started for given plug-in. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **srtRepairAction**  The scenario name for a repair.
+
+
+### Microsoft.Windows.StartRepairCore.SRTRootCauseDiagEnd
+
+The SRT Root Cause Diagnosis End event sends information to report diagnosis operation completed for given plug-in. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **errorCode**  The result code returned by the event.
+- **flightIds**  The Flight IDs (identifier of the beta release) of found driver updates.
+- **foundDriverUpdateCount**  The number of found driver updates.
+- **srtRootCauseDiag**  The scenario name for a diagnosis event.
+
+
+### Microsoft.Windows.StartRepairCore.SRTRootCauseDiagStart
+
+The SRT Root Cause Diagnosis Start event sends information to report diagnosis operation started for given plug-in. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **srtRootCauseDiag**  The scenario name for a diagnosis event.
+
+
+## DxgKernelTelemetry events
+
+### DxgKrnlTelemetry.GPUAdapterInventoryV2
+
+This event sends basic GPU and display driver information to keep Windows and display drivers up-to-date.
+
+The following fields are available:
+
+- **AdapterTypeValue**  The numeric value indicating the type of Graphics adapter.
+- **aiSeqId**  The event sequence ID.
+- **bootId**  The system boot ID.
+- **BrightnessVersionViaDDI**  The version of the Display Brightness Interface.
+- **ComputePreemptionLevel**  The maximum preemption level supported by GPU for compute payload.
+- **DDIInterfaceVersion**  The device driver interface version.
+- **DedicatedSystemMemoryB**  The amount of system memory dedicated for GPU use (in bytes).
+- **DedicatedVideoMemoryB**  The amount of dedicated VRAM of the GPU (in bytes).
+- **Display1UMDFilePath**  The file path to the location of the Display User Mode Driver in the Driver Store.
+- **DisplayAdapterLuid**  The display adapter LUID.
+- **DriverDate**  The date of the display driver.
+- **DriverRank**  The rank of the display driver.
+- **DriverVersion**  The display driver version.
+- **DriverWorkarounds**  Numeric value indicating the driver workarounds that are enabled for this device.
+- **DX10UMDFilePath**  The file path to the location of the DirectX 10 Display User Mode Driver in the Driver Store.
+- **DX11UMDFilePath**  The file path to the location of the DirectX 11 Display User Mode Driver in the Driver Store.
+- **DX12UMDFilePath**  The file path to the location of the DirectX 12 Display User Mode Driver in the Driver Store.
+- **DX9UMDFilePath**  The file path to the location of the DirectX 9 Display User Mode Driver in the Driver Store.
+- **DxDbCurrentVersion**  Version of the DirectX Database on the device.
+- **DxDbVersionCheckStatus**  Numeric value indicating the result of the last check on the DirectX Database version for the device.
+- **GPUDeviceID**  The GPU device ID.
+- **GPUPreemptionLevel**  The maximum preemption level supported by GPU for graphics payload.
+- **GPURevisionID**  The GPU revision ID.
+- **GPUVendorID**  The GPU vendor ID.
+- **HwFlipQueueSupportState**  Numeric value indicating the adapter's support for hardware flip queues.
+- **HwSchSupportState**  Numeric value indicating the adapter's support for hardware scheduling.
+- **IddPairedRenderAdapterLuid**  Identifier for the render adapter paired with this display adapter.
+- **InterfaceFuncPointersProvided1**  Number of device driver interface function pointers provided.
+- **InterfaceFuncPointersProvided2**  Number of device driver interface function pointers provided.
+- **InterfaceFuncPointersProvided3**  Number of device driver interface function pointers provided.
+- **InterfaceId**  The GPU interface ID.
+- **IsCrossAdapterScanOutSupported**  Boolean value indicating whether the adapter supports cross-adapter scanout optimization.
+- **IsDisplayDevice**  Does the GPU have displaying capabilities?
+- **IsHwFlipQueueEnabled**  Boolean value indicating whether hardware flip queues are enabled.
+- **IsHwSchEnabled**  Boolean value indicating whether hardware scheduling is enabled.
+- **IsHybridDiscrete**  Does the GPU have discrete GPU capabilities in a hybrid device?
+- **IsHybridIntegrated**  Does the GPU have integrated GPU capabilities in a hybrid device?
+- **IsLDA**  Is the GPU comprised of Linked Display Adapters?
+- **IsMiracastSupported**  Does the GPU support Miracast?
+- **IsMismatchLDA**  Is at least one device in the Linked Display Adapters chain from a different vendor?
+- **IsMPOSupported**  Does the GPU support Multi-Plane Overlays?
+- **IsMsMiracastSupported**  Are the GPU Miracast capabilities driven by a Microsoft solution?
+- **IsPostAdapter**  Is this GPU the POST GPU in the device?
+- **IsRemovable**  TRUE if the adapter supports being disabled or removed.
+- **IsRenderDevice**  Does the GPU have rendering capabilities?
+- **IsSoftwareDevice**  Is this a software implementation of the GPU?
+- **IsVirtualRefreshRateSupported**  Boolean value indicating whether the adapter supports virtual refresh rates.
+- **KMDFilePath**  The file path to the location of the Display Kernel Mode Driver in the Driver Store.
+- **MdmSupportStatus**  Numeric value indicating support for Microsoft Display Mux.
+- **MeasureEnabled**  Is the device listening to MICROSOFT_KEYWORD_MEASURES?
+- **NodeTypes** Types of execution nodes comprising the graphics adapter.
+- **NumExecutionNodes**  Number of execution nodes comprising the graphics adapter.
+- **NumNonVidPnTargets**  Number of display targets.
+- **NumPhysicalAdapters** Number of physical graphics adapters.
+- **NumVidPnSources**  The number of supported display output sources.
+- **NumVidPnTargets**  The number of supported display output targets.
+- **SharedSystemMemoryB**  The amount of system memory shared by GPU and CPU (in bytes).
+- **SubSystemID**  The subsystem ID.
+- **SubVendorID**  The GPU sub vendor ID.
+- **TelemetryEnabled**  Is the device listening to MICROSOFT_KEYWORD_TELEMETRY?
+- **TelInvEvntTrigger**  What triggered this event to be logged?  Example: 0 (GPU enumeration) or 1 (DxgKrnlTelemetry provider toggling)
+- **version**  The event version.
+- **WDDMVersion**  The Windows Display Driver Model version.
+
+
+### DxgKrnlTelemetry.GPUStartAdapter
+
+This event records information about an attempt to start a graphics adapter.
+
+The following fields are available:
+
+- **DDIInterfaceVersion**  Version of the display driver interface (DDI).
+- **DriverDate**  Date of the display driver.
+- **DriverRank**  Rank for the display driver.
+- **DriverVersion**  Version of the display driver.
+- **FailureReason**  Numeric value indicating the stage in which the startup attempt failed.
+- **GPUDeviceID**  Device identifier for the graphics adapter.
+- **GPURevisionID**  Revision identifier for the graphics adapter.
+- **GPUVendorID**  Vendor identifier for the graphics adapter.
+- **IsSoftwareDevice**  Boolean value indicating whether the graphics adapter is implemented in software only.
+- **StartAdapterFailedSequenceId**  Numeric value indicating the graphics adapter startup attempt count.
+- **Status**  Numeric value indicating the status of the graphics adapter startup attempt.
+- **SubSystemID**  Subsystem identifier for the graphics adapter.
+- **SubVendorID**  Subsystem vendor identifier for the graphics identifier.
+- **version**  Version of the schema for the event.
+
+
+## Failover Clustering events
+
+### Microsoft.Windows.Server.FailoverClusteringCritical.ClusterSummary2
+
+This event returns information about how many resources and of what type are in the server cluster. This data is collected to keep Windows Server safe, secure, and up to date. The data includes information about whether hardware is configured correctly, if the software is patched correctly, and assists in preventing crashes by attributing issues (like fatal errors) to workloads and system configurations.
+
+The following fields are available:
+
+- **autoAssignSite**  The cluster parameter: auto site.
+- **autoBalancerLevel**  The cluster parameter: auto balancer level.
+- **autoBalancerMode**  The cluster parameter: auto balancer mode.
+- **blockCacheSize**  The configured size of the block cache.
+- **ClusterAdConfiguration**  The ad configuration of the cluster.
+- **clusterAdType**  The cluster parameter: mgmt_point_type.
+- **clusterDumpPolicy**  The cluster configured dump policy.
+- **clusterFunctionalLevel**  The current cluster functional level.
+- **clusterGuid**  The unique identifier for the cluster.
+- **clusterWitnessType**  The witness type the cluster is configured for.
+- **countNodesInSite**  The number of nodes in the cluster.
+- **crossSiteDelay**  The cluster parameter: CrossSiteDelay.
+- **crossSiteThreshold**  The cluster parameter: CrossSiteThreshold.
+- **crossSubnetDelay**  The cluster parameter: CrossSubnetDelay.
+- **crossSubnetThreshold**  The cluster parameter: CrossSubnetThreshold.
+- **csvCompatibleFilters**  The cluster parameter: ClusterCsvCompatibleFilters.
+- **csvIncompatibleFilters**  The cluster parameter: ClusterCsvIncompatibleFilters.
+- **csvResourceCount**  The number of resources in the cluster.
+- **currentNodeSite**  The name configured for the current site for the cluster.
+- **dasModeBusType**  The direct storage bus type of the storage spaces.
+- **downLevelNodeCount**  The number of nodes in the cluster that are running down-level.
+- **drainOnShutdown**  Specifies whether a node should be drained when it's shut down.
+- **dynamicQuorumEnabled**  Specifies whether dynamic Quorum has been enabled.
+- **enforcedAntiAffinity**  The cluster parameter: enforced anti affinity.
+- **genAppNames**  The Win32 service name of a clustered service.
+- **genSvcNames**  The command line of a clustered genapp.
+- **hangRecoveryAction**  The cluster parameter: hang recovery action.
+- **hangTimeOut**  Specifies the “hang time out” parameter for the cluster.
+- **isCalabria**  Specifies whether storage spaces direct is enabled.
+- **isMixedMode**  Identifies if the cluster is running with different version of OS for nodes.
+- **isRunningDownLevel**  Identifies if the current node is running down-level.
+- **logLevel**  Specifies the granularity that is logged in the cluster log.
+- **logSize**  Specifies the size of the cluster log.
+- **lowerQuorumPriorityNodeId**  The cluster parameter: lower quorum priority node ID.
+- **minNeverPreempt**  The cluster parameter: minimum never preempt.
+- **minPreemptor**  The cluster parameter: minimum preemptor priority.
+- **netftIpsecEnabled**  The parameter: netftIpsecEnabled.
+- **NodeCount**  The number of nodes in the cluster.
+- **nodeId**  The current node number in the cluster.
+- **nodeResourceCounts**  Specifies the number of node resources.
+- **nodeResourceOnlineCounts**  Specifies the number of node resources that are online.
+- **numberOfSites**  The number of different sites.
+- **numNodesInNoSite**  The number of nodes not belonging to a site.
+- **plumbAllCrossSubnetRoutes**  The cluster parameter: plumb all cross subnet routes.
+- **preferredSite**  The preferred site location.
+- **privateCloudWitness**  Specifies whether a private cloud witness exists for this cluster.
+- **quarantineDuration**  The quarantine duration.
+- **quarantineThreshold**  The quarantine threshold.
+- **quorumArbitrationTimeout**  In the event of an arbitration event, this specifies the quorum timeout period.
+- **rdmaConnectionsForStorage**  This specifies the rdma connections for storage.
+- **resiliencyLevel**  Specifies the level of resiliency.
+- **resourceCounts**  Specifies the number of resources.
+- **resourceTypeCounts**  Specifies the number of resource types in the cluster.
+- **resourceTypes**  Data representative of each resource type.
+- **resourceTypesPath**  Data representative of the DLL path for each resource type.
+- **sameSubnetDelay**  The cluster parameter: same subnet delay.
+- **sameSubnetThreshold**  The cluster parameter: same subnet threshold.
+- **secondsInMixedMode**  The amount of time (in seconds) that the cluster has been in mixed mode (nodes with different operating system versions in the same cluster).
+- **securityLevel**  The cluster parameter: security level.
+- **securityLevelForStorage**  The cluster parameter: security level for storage.
+- **sharedVolumeBlockCacheSize**  Specifies the block cache size for shared for shared volumes.
+- **shutdownTimeoutMinutes**  Specifies the amount of time it takes to time out when shutting down.
+- **upNodeCount**  Specifies the number of nodes that are up (online).
+- **useClientAccessNetworksForCsv**  The cluster parameter: use client access networks for CSV.
+- **useRdmaForStorage**  The cluster parameter to use rdma for storage.
+- **vmIsolationTime**  The cluster parameter: VM isolation time.
+- **witnessDatabaseWriteTimeout**  Specifies the timeout period for writing to the quorum witness database.
+
+
+## Fault Reporting events
+
+### Microsoft.Windows.FaultReporting.AppCrashEvent
+
+This event sends data about crashes for both native and managed applications, to help keep Windows up to date. The data includes information about the crashing process and a summary of its exception record. It doesn't contain any Watson bucketing information. The bucketing information is recorded in a Windows Error Reporting (WER) event that is generated when the WER client reports the crash to the Watson service, and the WER event will contain the same ReportID (see field 14 of crash event, field 19 of WER event) as the crash event for the crash being reported. AppCrash is emitted once for each crash handled by WER (for example, from an unhandled exception or FailFast or ReportException). Note that Generic Watson event types (for example, from PLM) that may be considered crashes\" by a user DO NOT emit this event.
+
+The following fields are available:
+
+- **AppName**  The name of the app that has crashed.
+- **AppSessionGuid**  GUID made up of process ID and is used as a correlation vector for process instances in the telemetry backend.
+- **AppTimeStamp**  The date/time stamp of the app.
+- **AppVersion**  The version of the app that has crashed.
+- **ExceptionCode**  The exception code returned by the process that has crashed.
+- **ExceptionOffset**  The address where the exception had occurred.
+- **Flags**  Flags indicating how reporting is done. For example, queue the report, don't offer JIT debugging, or don't terminate the process after reporting.
+- **FriendlyAppName**  The description of the app that has crashed, if different from the AppName. Otherwise, the process name.
+- **IsFatal**  True/False to indicate whether the crash resulted in process termination.
+- **ModName**  Exception module name (for example, bar.dll).
+- **ModTimeStamp**  The date/time stamp of the module.
+- **ModVersion**  The version of the module that has crashed.
+- **PackageFullName**  Store application identity.
+- **PackageRelativeAppId**  Store application identity.
+- **ProcessArchitecture**  Architecture of the crashing process, as one of the PROCESSOR_ARCHITECTURE_* constants: 0: PROCESSOR_ARCHITECTURE_INTEL. 5: PROCESSOR_ARCHITECTURE_ARM. 9: PROCESSOR_ARCHITECTURE_AMD64. 12: PROCESSOR_ARCHITECTURE_ARM64.
+- **ProcessCreateTime**  The time of creation of the process that has crashed.
+- **ProcessId**  The ID of the process that has crashed.
+- **ReportId**  A GUID used to identify the report. This can used to track the report across Watson.
+- **TargetAppId**  The kernel reported AppId of the application being reported.
+- **TargetAppVer**  The specific version of the application being reported
+- **TargetAsId**  The sequence number for the hanging process.
+
+
+## Feature quality events
+
+### Microsoft.Windows.FeatureQuality.Heartbeat
+
+This event indicates the feature status heartbeat. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **Features**  Array of features.
+
+
+### Microsoft.Windows.FeatureQuality.StateChange
+
+This event indicates the change of feature state. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **flightId**  Flight ID.
+- **state**  New state.
+
+
+### Microsoft.Windows.FeatureQuality.Status
+
+This event indicates the feature status. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **featureId**  Feature ID.
+- **flightId**  Flight ID.
+- **time**  Time of status change.
+- **variantId**  Variant ID.
+
+
+## Feature update events
+
+### Microsoft.Windows.Upgrade.Uninstall.UninstallFailed
+
+This event sends diagnostic data about failures when uninstalling a feature update, to help resolve any issues preventing customers from reverting to a known state. The data collected with this event is used to help keep Windows up to date and performing properly.
+
+The following fields are available:
+
+- **failureReason**  Provides data about the uninstall initialization operation failure.
+- **hr**  Provides the Win32 error code for the operation failure.
+
+
+### Microsoft.Windows.Upgrade.Uninstall.UninstallFinalizedAndRebootTriggered
+
+This event indicates that the uninstall was properly configured and that a system reboot was initiated. The data collected with this event is used to help keep Windows up to date and performing properly.
+
+
+
+## Hang Reporting events
+
+### Microsoft.Windows.HangReporting.AppHangEvent
+
+This event sends data about hangs for both native and managed applications, to help keep Windows up to date. It doesn't contain any Watson bucketing information. The bucketing information is recorded in a Windows Error Reporting (WER) event that is generated when the WER client reports the hang to the Watson service, and the WER event will contain the same ReportID (see field 13 of hang event, field 19 of WER event) as the hang event for the hang being reported. AppHang is reported only on PC devices. It handles classic Win32 hangs and is emitted only once per report. Some behaviors that may be perceived by a user as a hang are reported by app managers (for example, PLM/RM/EM) as Watson Generics and won't produce AppHang events.
+
+The following fields are available:
+
+- **AppName**  The name of the app that has hung.
+- **AppSessionGuid**  GUID made up of process ID used as a correlation vector for process instances in the telemetry backend.
+- **AppVersion**  The version of the app that has hung.
+- **IsFatal**  True/False based on whether the hung application caused the creation of a Fatal Hang Report.
+- **PackageFullName**  Store application identity.
+- **PackageRelativeAppId**  Store application identity.
+- **ProcessArchitecture**  Architecture of the hung process, as one of the PROCESSOR_ARCHITECTURE_* constants: 0: PROCESSOR_ARCHITECTURE_INTEL. 5: PROCESSOR_ARCHITECTURE_ARM. 9: PROCESSOR_ARCHITECTURE_AMD64. 12: PROCESSOR_ARCHITECTURE_ARM64.
+- **ProcessCreateTime**  The time of creation of the process that has hung.
+- **ProcessId**  The ID of the process that has hung.
+- **ReportId**  A GUID used to identify the report. This can used to track the report across Watson.
+- **TargetAppId**  The kernel reported AppId of the application being reported.
+- **TargetAppVer**  The specific version of the application being reported.
+- **TargetAsId**  The sequence number for the hanging process.
+- **TypeCode**  Bitmap describing the hang type.
+- **WaitingOnAppName**  If this is a cross process hang waiting for an application, this has the name of the application.
+- **WaitingOnAppVersion**  If this is a cross process hang, this has the version of the application for which it's waiting.
+- **WaitingOnPackageFullName**  If this is a cross process hang waiting for a package, this has the full name of the package for which it's waiting.
+- **WaitingOnPackageRelativeAppId**  If this is a cross process hang waiting for a package, this has the relative application ID of the package.
+
+
+## Holographic events
+
+### Microsoft.Windows.Analog.Spectrum.TelemetryHolographicDeviceAdded
+
+This event indicates Windows Mixed Reality device state. This event is also used to count WMR device. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **ClassGuid**  Windows Mixed Reality device class GUID.
+- **DeviceInterfaceId**  Windows Mixed Reality device interface ID.
+- **DriverVersion**  Windows Mixed Reality device driver version.
+- **FirmwareVersion**  Windows Mixed Reality firmware version.
+- **Manufacturer**  Windows Mixed Reality device manufacturer.
+- **ModelName**  Windows Mixed Reality device model name.
+- **SerialNumber**  Windows Mixed Reality device serial number.
+
+
+### Microsoft.Windows.Analog.Spectrum.TelemetryHolographicDeviceRemoved
+
+This event indicates Windows Mixed Reality device state. The data collected with this event is used to keep Windows and Windows Mixed Reality performing properly.
+
+The following fields are available:
+
+- **DeviceInterfaceId**  Device Interface ID.
+
+
+### Microsoft.Windows.Analog.Spectrum.TelemetryHolographicSpaceCreated
+
+This event indicates the state of Windows holographic scene. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **AppSessionGuid**  GUID made up of process ID and is used as a correlation vector for process instances in the telemetry backend.
+- **IsForCompositor**  True/False to indicate whether the holographic space is for compositor process.
+- **Source**  An enumeration indicating the source of the log.
+- **WindowInstanceId**  Unique value for each window instance.
+
+
+### Microsoft.Windows.Holographic.Coordinator.HoloShellStateUpdated
+
+This event indicates Windows Mixed Reality HoloShell State. This event is also used to count WMR device. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **HmdState**  Windows Mixed Reality Headset HMD state.
+- **NewHoloShellState**  Windows Mixed Reality HoloShell state.
+- **PriorHoloShellState**  Windows Mixed Reality state prior to entering to HoloShell.
+- **SimulationEnabled**  Windows Mixed Reality Simulation state.
+
+
+### Microsoft.Windows.Shell.HolographicFirstRun.AppActivated
+
+This event indicates Windows Mixed Reality Portal app activation state. This event also used to count WMR device. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **IsDemoMode**  Windows Mixed Reality Portal app state of demo mode.
+- **IsDeviceSetupComplete**  Windows Mixed Reality Portal app state of device setup completion.
+- **PackageVersion**  Windows Mixed Reality Portal app package version.
+- **PreviousExecutionState**  Windows Mixed Reality Portal app prior execution state.
+- **wilActivity**  Windows Mixed Reality Portal app wilActivity ID.
+
+
+### Microsoft.Windows.Shell.HolographicFirstRun.SomethingWentWrong
+
+This event is emitted when something went wrong error occurs. The data collected with this event is used to keep Windows and Windows Mixed Reality performing properly.
+
+The following fields are available:
+
+- **ErrorSource**  Source of error, obsoleted always 0.
+- **StartupContext**  Start up state.
+- **StatusCode**  Error status code.
+- **SubstatusCode**  Error sub status code.
+
+
+### TraceLoggingHoloLensSensorsProvider.OnDeviceAdd
+
+This event provides Windows Mixed Reality device state with new process that hosts the driver. The data collected with this event is used to keep Windows and Windows Mixed Reality performing properly.
+
+The following fields are available:
+
+- **Process**  Process ID.
+- **Thread**  Thread ID.
+
+
+### TraceLoggingOasisUsbHostApiProvider.DeviceInformation
+
+This event provides Windows Mixed Reality device information. This event is also used to count WMR device and device type. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **BootloaderMajorVer**  Windows Mixed Reality device boot loader major version.
+- **BootloaderMinorVer**  Windows Mixed Reality device boot loader minor version.
+- **BootloaderRevisionNumber**  Windows Mixed Reality device boot loader revision number.
+- **BTHFWMajorVer**  Windows Mixed Reality device BTHFW major version. This event also used to count WMR device.
+- **BTHFWMinorVer**  Windows Mixed Reality device BTHFW minor version. This event also used to count WMR device.
+- **BTHFWRevisionNumber**  Windows Mixed Reality device BTHFW revision number.
+- **CalibrationBlobSize**  Windows Mixed Reality device calibration blob size.
+- **CalibrationFwMajorVer**  Windows Mixed Reality device calibration firmware major version.
+- **CalibrationFwMinorVer**  Windows Mixed Reality device calibration firmware minor version.
+- **CalibrationFwRevNum**  Windows Mixed Reality device calibration firmware revision number.
+- **DeviceInfoFlags**  Windows Mixed Reality device info flags.
+- **DeviceReleaseNumber**  Windows Mixed Reality device release number.
+- **FirmwareMajorVer**  Windows Mixed Reality device firmware major version.
+- **FirmwareMinorVer**  Windows Mixed Reality device firmware minor version.
+- **FirmwareRevisionNumber**  Windows Mixed Reality device calibration firmware revision number.
+- **FpgaFwMajorVer**  Windows Mixed Reality device FPGA firmware major version.
+- **FpgaFwMinorVer**  Windows Mixed Reality device FPGA firmware minor version.
+- **FpgaFwRevisionNumber**  Windows Mixed Reality device FPGA firmware revision number.
+- **FriendlyName**  Windows Mixed Reality device friendly name.
+- **HashedSerialNumber**  Windows Mixed Reality device hashed serial number.
+- **HeaderSize**  Windows Mixed Reality device header size.
+- **HeaderVersion**  Windows Mixed Reality device header version.
+- **LicenseKey**  Windows Mixed Reality device header license key.
+- **Make**  Windows Mixed Reality device make.
+- **ManufacturingDate**  Windows Mixed Reality device manufacturing date.
+- **Model**  Windows Mixed Reality device model.
+- **PresenceSensorHidVendorPage**  Windows Mixed Reality device presence sensor HID vendor page.
+- **PresenceSensorHidVendorUsage**  Windows Mixed Reality device presence sensor HID vendor usage.
+- **PresenceSensorUsbVid**  Windows Mixed Reality device presence sensor USB VId.
+- **ProductBoardRevision**  Windows Mixed Reality device product board revision number.
+- **SerialNumber**  Windows Mixed Reality device serial number.
+
+
+## Inventory events
+
+### Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
+
+This event sends basic metadata about an application on the system. The data collected with this event is used to keep Windows performing properly and up to date.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **AndroidPackageId**  A unique identifier for an Android app.
+- **HiddenArp**  Indicates whether a program hides itself from showing up in ARP.
+- **InstallDate**  The date the application was installed (a best guess based on folder creation date heuristics).
+- **InstallDateArpLastModified**  The date of the registry ARP key for a given application. Hints at install date but not always accurate. Passed as an array. Example: 4/11/2015  00:00:00
+- **InstallDateFromLinkFile**  The estimated date of install based on the links to the files.  Passed as an array.
+- **InstallDateMsi**  The install date if the application was installed via Microsoft Installer (MSI). Passed as an array.
+- **InventoryVersion**  The version of the inventory file generating the events.
+- **Language**  The language code of the program.
+- **MsiInstallDate**  The install date recorded in the program's MSI package.
+- **MsiPackageCode**  A GUID that describes the MSI Package. Multiple 'Products' (apps) can make up an MsiPackage.
+- **MsiProductCode**  A GUID that describe the MSI Product.
+- **Name**  The name of the application.
+- **OSVersionAtInstallTime**  The four octets from the OS version at the time of the application's install.
+- **PackageFullName**  The package full name for a Store application.
+- **ProgramInstanceId**  A hash of the file IDs in an app.
+- **Publisher**  The Publisher of the application. Location pulled from depends on the 'Source' field.
+- **RootDirPath**  The path to the root directory where the program was installed.
+- **Source**  How the program was installed (for example, ARP, MSI, Appx).
+- **SparkId**  Unique ID that represents a Win32 app installed from the Microsoft Store.
+- **StoreAppType**  A sub-classification for the type of Microsoft Store app, such as UWP or Win8StoreApp.
+- **Type**  One of ("Application", "Hotfix", "BOE", "Service", "Unknown"). Application indicates Win32 or Appx app, Hotfix indicates app updates (KBs), BOE indicates it's an app with no ARP or MSI entry, Service indicates that it's a service. Application and BOE are the ones most likely seen.
+- **Version**  The version number of the program.
+
+
+### Microsoft.Windows.Inventory.Core.InventoryApplicationKbStartSync
+
+This event represents the basic metadata about an application updates (KBs) installed on the system. This event is used to understand the applications on a machine to determine if there will be compatibility issues when upgrading Windows.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **InventoryVersion**  The version of the inventory components.
+
+
+### Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
+
+This event indicates that a new set of InventoryDevicePnpAdd events will be sent. The data collected with this event is used to keep Windows performing properly.
+
+This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
+
+The following fields are available:
+
+- **InventoryVersion**  The version of the inventory file generating the events.
+
+
+## Kernel events
+
+### Microsoft.Windows.Kernel.PnP.AggregateSetDevNodeProblem
+
+This event is sent when a new problem code is assigned to a device. The data collected with this event is used to help keep Windows up to date and performing properly.
+
+The following fields are available:
+
+- **Count**  The total number of events.
+- **DeviceInstanceId**  The unique identifier of the device in the system.
+- **LastProblem**  The previous problem code that was set on the device.
+- **LastProblemStatus**  The previous NTSTATUS value that was set on the device.
+- **Problem**  The new problem code that was set on the device.
+- **ProblemStatus**  The new NTSTATUS value that was set on the device.
+- **ServiceName**  The driver or service name that is attached to the device.
+
+
+### Microsoft.Windows.Kernel.Power.AbnormalShutdown
+
+This event provides diagnostic information of the most recent abnormal shutdown.
+
+The following fields are available:
+
+- **BootEnvironment**  Errors from boot environment.
+- **BootStatValid**  Status of bootstat file.
+- **Bugcheck**  Bugcheck information.
+- **CrashDump**  Crash dump information.
+- **CurrentBootId**  ID of this boot.
+- **FirmwareReset**  System reset by firmware.
+- **LastShutdownBootId**  BootID of last shutdown.
+- **LongPowerButtonHold**  Long power button hold information.
+- **SystemStateTransition**  State transition information.
+- **Watchdog**  Watchdog information.
+- **WheaBootErrorCount**  Whea boot error information.
+
+
+### Microsoft.Windows.Kernel.Power.PreviousShutdownWasThermalShutdown
+
+This event sends Product and Service Performance data on which area of the device exceeded safe temperature limits and caused the device to shutdown. This information is used to ensure devices are behaving as they're expected to. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **temperature**  Contains the actual temperature measurement, in tenths of degrees Kelvin, for the area that exceeded the limit.
+- **thermalZone**  Contains an identifier that specifies which area it was that exceeded temperature limits.
+- **TotalUpTimeMs** Contains the total system up time in milliseconds.
+
+
+## Microsoft Edge events
+
+### Aria.160f0649efde47b7832f05ed000fc453.Microsoft.WebBrowser.SystemInfo.Config
+
+This config event sends basic device connectivity and configuration information from Microsoft Edge about the current data collection consent, app version, and installation state to keep Microsoft Edge up to date and secure.
+
+The following fields are available:
+
+- **account_type**  A number representing the type of the signed in user account, where 0 indicates None, 1 indicates Microsoft Account, 2 indicates Azure Active Directory, 3 indicates On-Prem Active Directory and 4 indicates Azure Active Directory (Degraded). This field is currently only supported on mobile platforms and so the value is set to -1 on non-mobile platforms.
+- **app_sample_rate**  A number representing how often the client sends telemetry, expressed as a percentage. Low values indicate that said client sends more events and high values indicate that said client sends fewer events.
+- **app_version**  The internal Microsoft Edge build version string, taken from the UMA metrics field system_profile.app_version.
+- **appConsentState**  Bit flags describing consent for data collection on the machine or zero if the state wasn't retrieved. The following are true when the associated bit is set: consent was granted (0x1), consent was communicated at install (0x2), diagnostic data consent granted (0x20000), browsing data consent granted (0x40000).
+- **AppSessionGuid**  An identifier of a particular application session starting at process creation time and persisting until process end.
+- **brandCode**  Contains the 4 character brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **Channel**  An integer indicating the channel of the installation (Canary or Dev).
+- **client_id**  A unique identifier with which all other diagnostic client data is associated, taken from the UMA metrics provider. This ID is effectively unique per device, per OS user profile, per release channel (for example, Canary/Dev/Beta/Stable). client_id isn't durable, based on user preferences. client_id is initialized on the first application launch under each OS user profile. client_id is linkable, but not unique across devices or OS user profiles. client_id is reset whenever UMA data collection is disabled, or when the application is uninstalled.
+- **ConnectionType**  The first reported type of network connection currently connected. This can be one of Unknown, Ethernet, WiFi, 2G, 3G, 4G, None, or Bluetooth.
+- **container_client_id**  The client ID of the container, if in WDAG mode. This will be different from the UMA log client ID, which is the client ID of the host in WDAG mode.
+- **container_session_id**  The session ID of the container, if in WDAG mode. This will be different from the UMA log session ID, which is the session ID of the host in WDAG mode.
+- **device_sample_rate**  A number representing how often the device sends telemetry, expressed as a percentage. Low values indicate that device sends more events and high values indicate that device sends fewer events. The value is rounded to five significant figures for privacy reasons and if an error is hit in getting the device sample number value from the registry then this will be -1; and if client isn't on a UTC-enabled platform, then this value won't be set.
+- **Etag**  Etag is an identifier representing all service applied configurations and experiments for the current browser session. This field is left empty when Windows diagnostic level is set to Basic or lower or when consent for diagnostic data has been denied.
+- **EventInfo.Level**  The minimum Windows diagnostic data level required for the event, where 1 is basic, 2 is enhanced, and 3 is full.
+- **experimentation_mode**  A number representing the value set for the ExperimentationAndConfigurationServiceControl group policy. See [Microsoft Edge - Policies](/DeployEdge/microsoft-edge-policies#experimentationandconfigurationservicecontrol) for more details on this policy.
+- **install_date**  The date and time of the most recent installation in seconds since midnight on January 1, 1970 UTC, rounded down to the nearest hour.
+- **installSourceName**  A string representation of the installation source.
+- **PayloadClass**  The base class used to serialize and deserialize the Protobuf binary payload.
+- **PayloadGUID**  A random identifier generated for each original monolithic Protobuf payload, before the payload is potentially broken up into manageably-sized chunks for transmission.
+- **PayloadLogType**  The log type for the event correlating with 0 for unknown, 1 for stability, 2 for on-going, 3 for independent, 4 for UKM, or 5 for instance level.
+- **pop_sample**  A value indicating how the device's data is being sampled.
+- **reactivationBrandCode**  Contains the 4 character reactivation brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **session_id**  An identifier that is incremented each time the user launches the application, irrespective of any client_id changes. session_id is seeded during the initial installation of the application. session_id is effectively unique per client_id value. Several other internal identifier values, such as window or tab IDs, are only meaningful within a particular session. The session_id value is forgotten when the application is uninstalled, but not during an upgrade.
+- **utc_flags**  Event Tracing for Windows (ETW) flags required for the event as part of the data collection process.
+
+
+### Aria.29e24d069f27450385c7acaa2f07e277.Microsoft.WebBrowser.SystemInfo.Config
+
+This config event sends basic device connectivity and configuration information from Microsoft Edge about the current data collection consent, app version, and installation state to keep Microsoft Edge up to date and secure.
+
+The following fields are available:
+
+- **account_type**  A number representing the type of the signed in user account, where 0 indicates None, 1 indicates Microsoft Account, 2 indicates Azure Active Directory, 3 indicates On-Prem Active Directory and 4 indicates Azure Active Directory (Degraded). This field is currently only supported on mobile platforms and so the value is set to -1 on non-mobile platforms.
+- **app_sample_rate**  A number representing how often the client sends telemetry, expressed as a percentage. Low values indicate that said client sends more events and high values indicate that said client sends fewer events.
+- **app_version**  The internal Microsoft Edge build version string, taken from the UMA metrics field system_profile.app_version.
+- **appConsentState**  Bit flags describing consent for data collection on the machine or zero if the state wasn't retrieved. The following are true when the associated bit is set: consent was granted (0x1), consent was communicated at install (0x2), diagnostic data consent granted (0x20000), browsing data consent granted (0x40000).
+- **AppSessionGuid**  An identifier of a particular application session starting at process creation time and persisting until process end.
+- **brandCode**  Contains the 4 character brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **Channel**  An integer indicating the channel of the installation (Canary or Dev).
+- **client_id**  A unique identifier with which all other diagnostic client data is associated, taken from the UMA metrics provider. This ID is effectively unique per device, per OS user profile, per release channel (for example, Canary/Dev/Beta/Stable). client_id isn't durable, based on user preferences. client_id is initialized on the first application launch under each OS user profile. client_id is linkable, but not unique across devices or OS user profiles. client_id is reset whenever UMA data collection is disabled, or when the application is uninstalled.
+- **ConnectionType**  The first reported type of network connection currently connected. This can be one of Unknown, Ethernet, WiFi, 2G, 3G, 4G, None, or Bluetooth.
+- **container_client_id**  The client ID of the container, if in WDAG mode. This will be different from the UMA log client ID, which is the client ID of the host in WDAG mode.
+- **container_session_id**  The session ID of the container, if in WDAG mode. This will be different from the UMA log session ID, which is the session ID of the host in WDAG mode.
+- **device_sample_rate**  A number representing how often the device sends telemetry, expressed as a percentage. Low values indicate that device sends more events and high values indicate that device sends fewer events. The value is rounded to five significant figures for privacy reasons and if an error is hit in getting the device sample number value from the registry then this will be -1; and if client isn't on a UTC-enabled platform, then this value won't be set.
+- **Etag**  Etag is an identifier representing all service applied configurations and experiments for the current browser session. This field is left empty when Windows diagnostic level is set to Basic or lower or when consent for diagnostic data has been denied.
+- **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
+- **experimentation_mode**  A number representing the value set for the ExperimentationAndConfigurationServiceControl group policy. See [Microsoft Edge - Policies](/DeployEdge/microsoft-edge-policies#experimentationandconfigurationservicecontrol) for more details on this policy.
+- **install_date**  The date and time of the most recent installation in seconds since midnight on January 1, 1970 UTC, rounded down to the nearest hour.
+- **installSourceName**  A string representation of the installation source.
+- **PayloadClass**  The base class used to serialize and deserialize the Protobuf binary payload.
+- **PayloadGUID**  A random identifier generated for each original monolithic Protobuf payload, before the payload is potentially broken up into manageably-sized chunks for transmission.
+- **PayloadLogType**  The log type for the event correlating with 0 for unknown, 1 for stability, 2 for on-going, 3 for independent, 4 for UKM, or 5 for instance level.
+- **pop_sample**  A value indicating how the device's data is being sampled.
+- **reactivationBrandCode**  Contains the 4 character reactivation brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **session_id**  An identifier that is incremented each time the user launches the application, irrespective of any client_id changes. session_id is seeded during the initial installation of the application. session_id is effectively unique per client_id value. Several other internal identifier values, such as window or tab IDs, are only meaningful within a particular session. The session_id value is forgotten when the application is uninstalled, but not during an upgrade.
+- **utc_flags**  Event Tracing for Windows (ETW) flags required for the event as part of the data collection process.
+
+
+### Aria.7005b72804a64fa4b2138faab88f877b.Microsoft.WebBrowser.SystemInfo.Config
+
+This config event sends basic device connectivity and configuration information from Microsoft Edge about the current data collection consent, app version, and installation state to keep Microsoft Edge up to date and secure.
+
+The following fields are available:
+
+- **account_type**  Aria.7005b72804a64fa4b2138faab88f877b.Microsoft.WebBrowser.SystemInfo.Config
+- **app_sample_rate**  A number representing how often the client sends telemetry, expressed as a percentage. Low values indicate that said client sends more events and high values indicate that said client sends fewer events.
+- **app_version**  The internal Microsoft Edge build version string, taken from the UMA metrics field system_profile.app_version.
+- **appConsentState**  Bit flags describing consent for data collection on the machine or zero if the state wasn't retrieved. The following are true when the associated bit is set: consent was granted (0x1), consent was communicated at install (0x2), diagnostic data consent granted (0x20000), browsing data consent granted (0x40000).
+- **AppSessionGuid**  An identifier of a particular application session starting at process creation time and persisting until process end.
+- **brandCode**  Contains the 4 character brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **Channel**  An integer indicating the channel of the installation (Canary or Dev).
+- **client_id**  A unique identifier with which all other diagnostic client data is associated, taken from the UMA metrics provider. This ID is effectively unique per device, per OS user profile, per release channel (for example, Canary/Dev/Beta/Stable). client_id isn't durable, based on user preferences. client_id is initialized on the first application launch under each OS user profile. client_id is linkable, but not unique across devices or OS user profiles. client_id is reset whenever UMA data collection is disabled, or when the application is uninstalled.
+- **ConnectionType**  The first reported type of network connection currently connected. This can be one of Unknown, Ethernet, WiFi, 2G, 3G, 4G, None, or Bluetooth.
+- **container_client_id**  The client ID of the container, if in WDAG mode. This will be different from the UMA log client ID, which is the client ID of the host in WDAG mode.
+- **container_session_id**  The session ID of the container, if in WDAG mode. This will be different from the UMA log session ID, which is the session ID of the host in WDAG mode.
+- **device_sample_rate**  A number representing how often the device sends telemetry, expressed as a percentage. Low values indicate that device sends more events and high values indicate that device sends fewer events. The value is rounded to five significant figures for privacy reasons and if an error is hit in getting the device sample number value from the registry then this will be -1; and if client isn't on a UTC-enabled platform, then this value won't be set.
+- **Etag**  Etag is an identifier representing all service applied configurations and experiments for the current browser session. This field is left empty when Windows diagnostic level is set to Basic or lower or when consent for diagnostic data has been denied.
+- **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
+- **experimentation_mode**  A number representing the value set for the ExperimentationAndConfigurationServiceControl group policy. See [Microsoft Edge - Policies](/DeployEdge/microsoft-edge-policies#experimentationandconfigurationservicecontrol) for more details on this policy.
+- **install_date**  The date and time of the most recent installation in seconds since midnight on January 1, 1970 UTC, rounded down to the nearest hour.
+- **installSourceName**  A string representation of the installation source.
+- **PayloadClass**  The base class used to serialize and deserialize the Protobuf binary payload.
+- **PayloadGUID**  A random identifier generated for each original monolithic Protobuf payload, before the payload is potentially broken up into manageably-sized chunks for transmission.
+- **PayloadLogType**  The log type for the event correlating with 0 for unknown, 1 for stability, 2 for on-going, 3 for independent, 4 for UKM, or 5 for instance level.
+- **pop_sample**  A value indicating how the device's data is being sampled.
+- **reactivationBrandCode**  Contains the 4 character reactivation brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **session_id**  An identifier that is incremented each time the user launches the application, irrespective of any client_id changes. session_id is seeded during the initial installation of the application. session_id is effectively unique per client_id value. Several other internal identifier values, such as window or tab IDs, are only meaningful within a particular session. The session_id value is forgotten when the application is uninstalled, but not during an upgrade.
+- **utc_flags**  Event Tracing for Windows (ETW) flags required for the event as part of the data collection process.
+
+
+### Aria.754de735ccd546b28d0bfca8ac52c3de.Microsoft.WebBrowser.SystemInfo.Config
+
+This config event sends basic device connectivity and configuration information from Microsoft Edge about the current data collection consent, app version, and installation state to keep Microsoft Edge up to date and secure.
+
+The following fields are available:
+
+- **account_type**  A number representing the type of the signed in user account, where 0 indicates None, 1 indicates Microsoft Account, 2 indicates Azure Active Directory, 3 indicates On-Prem Active Directory and 4 indicates Azure Active Directory (Degraded). This field is currently only supported on mobile platforms and so the value is set to -1 on non-mobile platforms.
+- **app_sample_rate**  A number representing how often the client sends telemetry, expressed as a percentage. Low values indicate that said client sends more events and high values indicate that said client sends fewer events.
+- **app_version**  The internal Microsoft Edge build version string, taken from the UMA metrics field system_profile.app_version.
+- **appConsentState**  Bit flags describing consent for data collection on the machine or zero if the state wasn't retrieved. The following are true when the associated bit is set: consent was granted (0x1), consent was communicated at install (0x2), diagnostic data consent granted (0x20000), browsing data consent granted (0x40000).
+- **AppSessionGuid**  An identifier of a particular application session starting at process creation time and persisting until process end.
+- **brandCode**  Contains the 4 character brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **Channel**  An integer indicating the channel of the installation (Canary or Dev).
+- **client_id**  A unique identifier with which all other diagnostic client data is associated, taken from the UMA metrics provider. This ID is effectively unique per device, per OS user profile, per release channel (for example, Canary/Dev/Beta/Stable). client_id isn't durable, based on user preferences. client_id is initialized on the first application launch under each OS user profile. client_id is linkable, but not unique across devices or OS user profiles. client_id is reset whenever UMA data collection is disabled, or when the application is uninstalled.
+- **ConnectionType**  The first reported type of network connection currently connected. This can be one of Unknown, Ethernet, WiFi, 2G, 3G, 4G, None, or Bluetooth.
+- **container_client_id**  The client ID of the container, if in WDAG mode. This will be different from the UMA log client ID, which is the client ID of the host in WDAG mode.
+- **container_session_id**  The session ID of the container, if in WDAG mode. This will be different from the UMA log session ID, which is the session ID of the host in WDAG mode.
+- **device_sample_rate**  A number representing how often the device sends telemetry, expressed as a percentage. Low values indicate that device sends more events and high values indicate that device sends fewer events. The value is rounded to five significant figures for privacy reasons and if an error is hit in getting the device sample number value from the registry then this will be -1; and if client isn't on a UTC-enabled platform, then this value won't be set.
+- **Etag**  Etag is an identifier representing all service applied configurations and experiments for the current browser session. This field is left empty when Windows diagnostic level is set to Basic or lower or when consent for diagnostic data has been denied.
+- **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
+- **experimentation_mode**  A number representing the value set for the ExperimentationAndConfigurationServiceControl group policy. See [Microsoft Edge - Policies](/DeployEdge/microsoft-edge-policies#experimentationandconfigurationservicecontrol) for more details on this policy.
+- **install_date**  The date and time of the most recent installation in seconds since midnight on January 1, 1970 UTC, rounded down to the nearest hour.
+- **installSourceName**  A string representation of the installation source.
+- **PayloadClass**  The base class used to serialize and deserialize the Protobuf binary payload.
+- **PayloadGUID**  A random identifier generated for each original monolithic Protobuf payload, before the payload is potentially broken up into manageably-sized chunks for transmission.
+- **PayloadLogType**  The log type for the event correlating with 0 for unknown, 1 for stability, 2 for on-going, 3 for independent, 4 for UKM, or 5 for instance level.
+- **pop_sample**  A value indicating how the device's data is being sampled.
+- **reactivationBrandCode**  Contains the 4 character reactivation brand code or distribution tag that has been assigned to a partner. Not every Windows install will have a brand code.
+- **session_id**  An identifier that is incremented each time the user launches the application, irrespective of any client_id changes. session_id is seeded during the initial installation of the application. session_id is effectively unique per client_id value. Several other internal identifier values, such as window or tab IDs, are only meaningful within a particular session. The session_id value is forgotten when the application is uninstalled, but not during an upgrade.
+- **utc_flags**  Event Tracing for Windows (ETW) flags required for the event as part of the data collection process.
+
+
+### Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
+
+This Ping event sends a detailed inventory of software and hardware information about the EdgeUpdate service, Microsoft Edge applications, and the current system environment including app configuration, update configuration, and hardware capabilities. This event contains Device Connectivity and Configuration, Product and Service Performance, and Software Setup and Inventory data. One or more events is sent each time any installation, update, or uninstallation occurs with the EdgeUpdate service or with Microsoft Edge applications. This event is used to measure the reliability and performance of the EdgeUpdate service and if Microsoft Edge applications are up to date. This is an indication that the event is designed to keep Windows secure and up to date.
+
+The following fields are available:
+
+- **appAp**  Any additional parameters for the specified application. Default: ''.
+- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute. Default: undefined.
+- **appBrandCode**  The brand code under which the product was installed, if any. A brand code is a short (4-character) string used to identify installations that took place as a result of partner deals or website promotions. Default: ''.
+- **appChannel**  An integer indicating the channel of the installation (that is, Canary or Dev).
+- **appClientId**  A generalized form of the brand code that can accept a wider range of values and is used for similar purposes. Default: ''.
+- **appCohort**  A machine-readable string identifying the release cohort (channel) that the app belongs to. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
+- **appCohortHint**  A machine-readable enum indicating that the client has a desire to switch to a different release cohort. The exact legal values are app-specific and should be shared between the server and app implementations. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
+- **appCohortName**  A stable non-localized human-readable enum indicating which (if any) set of messages the app should display to the user. For example, an app with a cohort Name of 'beta' might display beta-specific branding to the user. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
+- **appConsentState**  Bit flags describing the diagnostic data disclosure and response flow where 1 indicates the affirmative and 0 indicates the negative or unspecified data. Bit 1 indicates consent was given, bit 2 indicates data originated from the download page, bit 18 indicates choice for sending data about how the browser is used, and bit 19 indicates choice for sending data about websites visited.
+- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (for example, send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known. Default: '-2'.
+- **appEdgePreviewDisenrollReason**  Reason why Preview was unenrolled.
+- **appEdgePreviewPreviousValuesV2**  Previous values of the Microsoft Edge Preview.
+- **appEdgePreviewState**  Specifies if Microsoft Edge is in the preview state.
+- **appExperiments**  A key/value list of experiment identifiers. Experiment labels are used to track membership in different experimental groups, and may be set at install or update time. The experiments string is formatted as a semicolon-delimited concatenation of experiment label strings. An experiment label string is an experiment Name, followed by the '=' character, followed by an experimental label value. For example: 'crdiff=got_bsdiff;optimized=O3'. The client shouldn't transmit the expiration date of any experiments it has, even if the server previously specified a specific expiration date. Default: ''.
+- **appFirstFRESeenTime**  The earliest time the Microsoft Edge First Run Experience was seen by any user on the device in Windows FILETIME units / 10. Default: undefined.
+- **appFirstFRESeenVersion**  The earliest Microsoft Edge First Run Experience version that was seen by any user on the device (for example '1.2.3.4'). Default: undefined.
+- **appInactivityBadgeApplied**  Specifies that the inactivity badge has been applied.
+- **appInactivityBadgeCleared**  Specifies that the inactivity badge has been cleared.
+- **appInactivityBadgeDuration**  The duration of the inactivity badge.
+- **appInstallTime**  The product install time in seconds. '0' if unknown. Default: '-1'.
+- **appInstallTimeDiffSec**  The difference between the current time and the install date in seconds. '0' if unknown. Default: '-1'.
+- **appIsPinnedSystem**  Specifies is the app is pinned.
+- **appLang**  The language of the product install, in IETF BCP 47 representation. Default: ''.
+- **appLastLaunchCount**  Number of times the app launched last.
+- **appLastLaunchTime**  The time when browser was last launched.
+- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation. Default: '0.0.0.0'.
+- **appOOBEInstallTime**  The time of first recorded successful OOBE Microsoft Edge install in Windows FILETIME units / 10 (that is, the install time of any fully completed OOBE install achieved before OOBE finishes), as recorded by setup.exe. Default: undefined.
+- **appPingEventAppSize**  The total number of bytes of all downloaded packages. Default: '0'.
+- **appPingEventDoneBeforeOOBEComplete**  Indicates whether the install or update was completed before Windows Out of the Box Experience ends. 1 means event completed before OOBE finishes; 0 means event wasn't completed before OOBE finishes; -1 means the field doesn't apply.
+- **appPingEventDownloadMetricsCdnAzureRefOriginShield**  Provides a unique reference string that identifies a request served by Azure Front Door. It's used to search access logs and is critical for troubleshooting. For example, Ref A: E172B39D19774147B0EFCC8E3E823D9D Ref B: BL2EDGE0215 Ref C: 2021-05-11T22:25:48Z.
+- **appPingEventDownloadMetricsCdnCache**  Corresponds to the result, whether the proxy has served the result from cache (HIT for yes, and MISS for no) For example, HIT from proxy.domain.tld, MISS from proxy.local.
+- **appPingEventDownloadMetricsCdnCCC**  ISO 2 character country code that matches to the country updated binaries are delivered from. for example: US.
+- **appPingEventDownloadMetricsCdnCID**  Numeric value used to internally track the origins of the updated binaries. For example, 2.
+- **appPingEventDownloadMetricsCdnMSEdgeRef**  Used to help correlate client-to-AFD (Azure Front Door) conversations. For example, Ref A: E2476A9592DF426A934098C0C2EAD3AB Ref B: DM2EDGE0307 Ref C: 2022-01-13T22:08:31Z.
+- **appPingEventDownloadMetricsCdnP3P**  Electronic privacy statement: CAO = collects contact-and-other, PSA = for pseudo-analysis, OUR = data received by us only. Helps identify the existence of transparent intermediaries (proxies) that can create noise in legitimate error detection. For example, CP=\"CAO PSA OUR\".
+- **appPingEventDownloadMetricsDownloadedBytes**  For events representing a download, the number of bytes expected to be downloaded. For events representing an entire update flow, the sum of all such expected bytes over the course of the update flow. Default: '0'.
+- **appPingEventDownloadMetricsDownloader**  A string identifying the download algorithm and/or stack. Example values include: 'bits', 'direct', 'winhttp', 'p2p'. Sent in events that have an event type of '14' only. Default: ''.
+- **appPingEventDownloadMetricsDownloadTimeMs**  For events representing a download, the time elapsed between the start of the download and the end of the download, in milliseconds. For events representing an entire update flow, the sum of all such download times over the course of the update flow. Sent in events that have an event type of '1', '2', '3', and '14' only. Default: '0'.
+- **appPingEventDownloadMetricsError**  The error code (if any) of the operation, encoded as a signed base-10 integer. Default: '0'.
+- **appPingEventDownloadMetricsServerIpHint**  For events representing a download, the CDN Host IP address that corresponds to the update file server. The CDN host is controlled by Microsoft servers and always maps to IP addresses hosting *.delivery.mp.microsoft.com or msedgesetup.azureedge.net. Default: ''.
+- **appPingEventDownloadMetricsTotalBytes**  For events representing a download, the number of bytes expected to be downloaded. For events representing an entire update flow, the sum of all such expected bytes over the course of the update flow. Default: '0'.
+- **appPingEventDownloadMetricsUrl**  For events representing a download, the CDN URL provided by the update server for the client to download the update, the URL is controlled by Microsoft servers and always maps back to either *.delivery.mp.microsoft.com or msedgesetup.azureedge.net. Default: ''.
+- **appPingEventDownloadTimeMs**  For events representing a download, the time elapsed between the start of the download and the end of the download, in milliseconds. For events representing an entire update flow, the sum of all such download times over the course of the update flow. Sent in events that have an event type of '1', '2', '3', and '14' only. Default: '0'.
+- **appPingEventErrorCode**  The error code (if any) of the operation, encoded as a signed, base-10 integer. Default: '0'.
+- **appPingEventEventResult**  An enum indicating the result of the event. Default: '0'.
+- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. 
+- **appPingEventExtraCode1**  Additional numeric information about the operation's result, encoded as a signed, base-10 integer. Default: '0'.
+- **appPingEventInstallTimeMs**  For events representing an install, the time elapsed between the start of the install and the end of the install, in milliseconds. For events representing an entire update flow, the sum of all such durations. Sent in events that have an event type of '2' and '3' only. Default: '0'.
+- **appPingEventNumBytesDownloaded**  The number of bytes downloaded for the specified application. Default: '0'.
+- **appPingEventPackageCacheResult**  Whether there's an existing package cached in the system to update or install. 1 means that there's a cache hit under the expected key, 2 means there's a cache hit under a different key, 0 means that there's a cache miss. -1 means the field doesn't apply.
+- **appPingEventSequenceId**  An ID that uniquely identifies particular events within one requestId. Since a request can contain multiple ping events, this field is necessary to uniquely identify each possible event.
+- **appPingEventSourceUrlIndex**  For events representing a download, the position of the download URL in the list of URLs supplied by the server in a "urls" tag.
+- **appPingEventSystemUptimeTicks**  Number of ticks that the system has been up.
+- **appPingEventUpdateCheckTimeMs**  For events representing an entire update flow, the time elapsed between the start of the update check and the end of the update check, in milliseconds. Sent in events that have an event type of '2' and '3' only. Default: '0'.
+- **appReferralHash**  The hash of the referral code used to install the product. '0' if unknown. Default: '0'.
+- **appUpdateCheckIsRollbackAllowed**  Check for status showing whether or not rollback is allowed.
+- **appUpdateCheckIsUpdateDisabled**  The state of whether app updates are restricted by group policy. True if updates have been restricted by group policy or false if they haven't.
+- **appUpdateCheckTargetChannel**  Check for status showing the target release channel.
+- **appUpdateCheckTargetVersionPrefix**  A component-wise prefix of a version number, or a complete version number suffixed with the $ character. The server shouldn't return an update instruction to a version number that doesn't match the prefix or complete version number. The prefix is interpreted a dotted-tuple that specifies the exactly-matching elements; it's not a lexical prefix (for example, '1.2.3' must match '1.2.3.4' but must not match '1.2.34'). Default: ''.
+- **appUpdateCheckTtToken**  An opaque access token that can be used to identify the requesting client as a member of a trusted-tester group. If non-empty, the request should be sent over SSL or another secure protocol. Default: ''.
+- **appUpdateCount** A running total of successful updates recorded by setup.exe. This is used for continuity checking of the Ping data spanning consecutive updates.
+- **appUpdatesAllowedForMeteredNetworks**  Specifies if the device can receive updates with on a metered network.
+- **appVersion**  The version of the product install. shouldn't Default: '0.0.0.0'.
+- **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
+- **eventType**  A string indicating the type of the event. shouldn't
+- **expETag**  An identifier representing all service applied configurations and experiments when current update happens. Used for testing only.
+- **hwDiskType**  Device’s hardware disk type.
+- **hwHasAvx**  '1' if the client's hardware supports the AVX instruction set. '0' if the client's hardware doesn't support the AVX instruction set. '-1' if unknown. Default: '-1'.
+- **hwHasSse**  '1' if the client's hardware supports the SSE instruction set. '0' if the client's hardware doesn't support the SSE instruction set. '-1' if unknown. Default: '-1'.
+- **hwHasSse2**  '1' if the client's hardware supports the SSE2 instruction set. '0' if the client's hardware doesn't support the SSE2 instruction set. '-1' if unknown. Default: '-1'.
+- **hwHasSse3**  '1' if the client's hardware supports the SSE3 instruction set. '0' if the client's hardware doesn't support the SSE3 instruction set. '-1' if unknown. Default: '-1'.
+- **hwHasSse41**  '1' if the client's hardware supports the SSE4.1 instruction set. '0' if the client's hardware doesn't support the SSE4.1 instruction set. '-1' if unknown. Default: '-1'.
+- **hwHasSse42**  '1' if the client's hardware supports the SSE4.2 instruction set. '0' if the client's hardware doesn't support the SSE4.2 instruction set. '-1' if unknown. Default: '-1'.
+- **hwHasSsse3**  '1' if the client's hardware supports the SSSE3 instruction set. '0' if the client's hardware doesn't support the SSSE3 instruction set. '-1' if unknown. Default: '-1'.
+- **hwLogicalCpus**  Number of logical CPUs of the device.
+- **hwPhysmemory**  The physical memory available to the client, truncated down to the nearest gibibyte. '-1' if unknown. This value is intended to reflect the maximum theoretical storage capacity of the client, not including any hard drive or paging to a hard drive or peripheral. Default: '-1'.
+- **isCTADevice**  Specifies if the device is CTA.
+- **isMsftDomainJoined**  '1' if the client is a member of a Microsoft domain. '0' otherwise. Default: '0'.
+- **oemProductManufacturer**  The device manufacturer name.
+- **oemProductName**  The product name of the device defined by device manufacturer.
+- **osArch**  The architecture of the operating system (for example, 'x86', 'x64', 'arm'). '' if unknown. Default: ''.
+- **osIsDefaultNetworkConnectionMetered**  States if the default network connection is metered.
+- **osIsInLockdownMode**  Is the OS in lockdown mode.
+- **osIsWIP**  Whether the OS is in preview.
+- **osPlatform**  The operating system family that the within which the Omaha client is running (for example 'win', 'mac', 'linux', 'ios', 'android'). '' if unknown. The operating system Name should be transmitted in lowercase with minimal formatting. Default: ''.
+- **osProductType**  Type associated with the operating system.
+- **osServicePack**  The secondary version of the operating system. '' if unknown. Default: ''.
+- **osVersion**  The primary version of the operating system. '' if unknown. Default: ''.
+- **osWIPBranch**  WIP branch of the operating system.
+- **requestCheckPeriodSec**  The update interval in seconds. The value is read from the registry. Default: '-1'.
+- **requestDlpref**  A comma-separated list of values specifying the preferred download URL behavior. The first value is the highest priority, further values reflect secondary, tertiary, et cetera priorities. Legal values are '' (in which case the entire list must be empty, indicating unknown or no-preference) or 'cacheable' (the server should prioritize sending URLs that are easily cacheable). Default: ''.
+- **requestDomainJoined**  '1' if the machine is part of a managed enterprise domain. Otherwise '0'.
+- **requestInstallSource**  A string specifying the cause of the update flow. For example: 'ondemand', or 'scheduledtask'. Default: ''.
+- **requestIsMachine**  '1' if the client is known to be installed with system-level or administrator privileges. '0' otherwise. Default: '0'.
+- **requestOmahaShellVersion**  The version of the Omaha installation folder. Default: ''.
+- **requestOmahaVersion**  The version of the Omaha updater itself (the entity sending this request). Default: '0.0.0.0'.
+- **requestProtocolVersion**  The version of the Omaha protocol. Compatible clients MUST provide a value of '3.0'. Compatible clients must always transmit this attribute. Default: undefined.
+- **requestRequestId**  A randomly-generated (uniformly distributed) GUID, corresponding to the Omaha request. Each request attempt should have (with high probability) a unique request id. Default: ''.
+- **requestSessionCorrelationVectorBase**  A client generated random MS Correlation Vector base code used to correlate the update session with update and CDN servers. Default: ''.
+- **requestSessionId**  A randomly-generated (uniformly distributed) GUID. Each single update flow (for example, update check, update application, event ping sequence) should have (with high probability) a single unique session ID. Default: ''.
+- **requestTestSource**  Either '', 'dev', 'qa', 'prober', 'auto', or 'ossdev'. Any value except '' indicates that the request is a test and shouldn't be counted toward normal metrics. Default: ''.
+- **requestUid**  A randomly-generated (uniformly distributed) GUID, corresponding to the Omaha user. Each request attempt SHOULD have (with high probability) a unique request id. Default: ''.
+
+
+### Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.PingXml
+
+The PingXml event sends detailed information pertaining to a specific instance of an update process in MicrosoftEdgeUpdate. This event contains Device Connectivity and Configuration, Product and Service Performance, and Software Setup and Inventory data. Each PingXml event can contain update logs from multiple different applications, and each application node in the XML payload can contain multiple different ping events. This event is sent whenever an update process occurs in the MicrosoftEdgeUpdate, regardless of the exit status. This event is used to track the reliability and performance of the MicrosoftEdgeUpdate process. The payload of this event is defined in the protocol definition header file.
+
+The following fields are available:
+
+- **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
+- **Xml**  XML-encoded string representing the request payload of the ping event. The request payload includes data and metadata for four nodes: the request itself, the hardware of the device, the OS of the device, and each updated application. Each application node includes additional nodes for individual ping events.
+
+
+## Migration events
+
+### Microsoft.Windows.MigrationCore.MigObjectCountDLSys
+
+This event is used to indicate object count for system paths during different phases of Windows feature update.
+
+The following fields are available:
+
+- **migDiagSession->CString**  Indicates the phase of the update.
+- **objectCount**  Number of files being tracked for the corresponding phase of the update.
+- **sfInfo.Name**  This indicates well know folder location path (Ex: PUBLIC_downloads etc.)
+
+
+### Microsoft.Windows.MigrationCore.MigObjectCountDLUsr
+
+This event returns data to track the count of the migration objects across various phases during feature update. The data collected with this event is used to help keep Windows secure and to track data loss scenarios.
+
+The following fields are available:
+
+- **currentSid**  Indicates the user SID for which the migration is being performed.
+- **migDiagSession->CString**  The phase of the upgrade where migration occurs. (for example: Validate tracked content)
+- **objectCount**  The count for the number of objects that are being transferred.
+- **sfInfo.Name**  This event identifies the phase of the upgrade where migration happens.
+
+
+### Microsoft.Windows.MigrationCore.MigObjectCountKFSys
+
+This event returns data about the count of the migration objects across various phases during feature update. The data collected with this event is used to help keep Windows secure and to track data loss scenarios.
+
+The following fields are available:
+
+- **migDiagSession->CString**  Identifies the phase of the upgrade where migration happens.
+- **objectCount**  The count of the number of objects that are being transferred.
+- **sfInfo.Name**  The predefined folder path locations. For example, FOLDERID_PublicDownloads
+
+
+### Microsoft.Windows.MigrationCore.MigObjectCountKFUsr
+
+This event returns data to track the count of the migration objects across various phases during feature update. The data collected with this event is used to help keep Windows secure and to track data loss scenarios.
+
+The following fields are available:
+
+- **currentSid**  Indicates the user SID for which the migration is being performed.
+- **migDiagSession->CString**  The phase of the upgrade where the migration occurs. (For example, Validate tracked content.)
+- **objectCount**  The number of objects that are being transferred.
+- **sfInfo.Name**  The predefined folder path locations. For example, FOLDERID_PublicDownloads.
+
+
+## OneSettings events
+
+### Microsoft.Windows.OneSettingsClient.Heartbeat
+
+This event indicates the config state heartbeat. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **Configs**  Array of configs.
+
+
+### Microsoft.Windows.OneSettingsClient.StateChange
+
+This event indicates the change in config state. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **flightId**  Flight id.
+- **state**  New state.
+
+
+### Microsoft.Windows.OneSettingsClient.Status
+
+This event indicates the config usage of status update. The data collected with this event is used to help keep Windows up to date, secure, and performing properly.
+
+The following fields are available:
+
+- **flightId**  Flight id.
+- **time**  Time.
+
+
+## OOBE events
+
+### Microsoft.Windows.Shell.Oobe.ExpeditedUpdate.ExpeditedUpdateNthLogonDisplayStatus
+
+NthLogon NDUP evaluated whether it should launch or not.
+
+The following fields are available:
+
+- **nthSkippedReasonFlag**  Flag indicating skip reason.
+- **reason**  Skip reason string.
+
+
+### Microsoft.Windows.Shell.Oobe.ExpeditedUpdate.ExpeditedUpdatePageSkipped
+
+This event provides information about skipping expedited update page. The data collected with this event is used to help keep Windows secure, up to date, and performing properly.
+
+The following fields are available:
+
+- **reason**  Reason for skip.
+- **skippedReasonFlag**  Flag representing reason for skip.
+
+
+### Microsoft.Windows.Shell.Oobe.ExpeditedUpdate.ExpeditedUpdateStatusResult
+
+This event provides status of expedited update. The data collected with this event is used to help keep Windows secure, up to date, and performing properly.
+
+The following fields are available:
+
+- **oobeExpeditedUpdateStatus**  Expedited update status.
+- **reason**  Reason for the status.
+- **resultCode**  HR result of operation.
+
+
+## Other events
+
+### Microsoft.Windows.Analog.HolographicDriverClient.TelemetryUserPresenceChanged
+
+This event sends data indicating the state detected by user presence sensor. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **correlationGuid**  Unique correlation Guid Id.
+- **isPresent**  State detected by user presence sensor.
+
+
+### Microsoft.Windows.Analog.HydrogenCompositor.ExclusiveMode_Entered
+
+This event sends data indicating the start of augmented reality application experience. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **SessionID**  Unique value for each attempt.
+- **TargetAsId**  The sequence number for the process.
+- **windowInstanceId**  Unique value for each window instance.
+
+
+### Microsoft.Windows.Analog.HydrogenCompositor.ExclusiveMode_Leave
+
+This event sends data indicating the end of augmented reality application experience. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **EventHistory**  Unique number of event history.
+- **ExternalComponentState**  State of external component.
+- **LastEvent**  Unique number of last event.
+- **SessionID**  Unique value for each attempt.
+- **TargetAsId**  The sequence number for the process.
+- **windowInstanceId**  Unique value for each window instance.
+
+
+### Microsoft.Windows.Security.NGC.KspSvc.NgcUserIdKeyFinalize
+
+This event traces Windows Hello key creation finalize.
+
+
+The following fields are available:
+
+- **accountType**  The account type of the user.
+- **cacheType**  The cache type of the key.
+- **finalizeStatus**  Returned status code after the finalize operation.
+- **gestureRequired**  The operation requires a gesture.
+- **isIsoContainer**  Indicates if it's using IsoContainer.
+- **isVsm**  Indicates if Container is in Vsm.
+- **keyAccountId**  Key account ID.
+- **keyAlgId**  Key Algorithm ID.
+- **keyDomain**  Key domain name.
+- **keyImplType**  Key implementation type.
+- **keyTenant**  Key tenant name.
+- **keyType**  Key type.
+- **signStatus**  Returned status code after the finalize operation.
+- **silentByCaller**  Indicates whether the caller wanted to finalize silently.
+- **silentByProperty**  Indicates whether the key property specified to finalize silently.
+
+
+### Microsoft.Windows.Security.NGC.KspSvc.NgcUserIdKeySignHash
+
+This event traces Windows Hello key signing details.
+
+The following fields are available:
+
+- **accountType**  The account type of the user.
+- **cacheType**  The cache type of the key.
+- **callerCmdLine**  Caller process command line string.
+- **didPrompt**  Whether a UI prompt was triggered.
+- **gestureRequired**  The operation requires a gesture.
+- **isCacheWithTimedCounterEnabled**  New caching mechanism is enabled.
+- **isCallerProcessQueryLimited**  Indicates if caller process failed to be opened with PROCESS_VM_READ privilege.
+- **isUnlockTimeSet**  We have a valid unlock time to use.
+- **keyAccountId**  Hashed key account ID.
+- **keyDomain**  Hashed key domain name.
+- **keyImplType**  The implementation type of the key.
+- **keyTenant**  Hashed key tenant name.
+- **keyType**  Key type.
+- **numSignatures**  Number of signatures made since logon or unlock.
+- **persistedInPinCache**  The PIN was persisted in the cache.
+- **protectionLevel**  Specifies whether the caller process is a PPL and at what level.
+- **sessionGuid**  Unique identifier for the current user session.
+- **signStatus**  Returned status code after the sign operation.
+- **silentByCaller**  Indicates whether the caller wanted to sign silently.
+- **silentByProperty**  Indicates whether the key property specified to sign silently.
+- **timeSinceUnlockMs**  Time since logon or unlock in milliseconds.
+- **usedPinCache**  The PIN cache was used to attempt to sign.
+- **validTicket**  The provided ticket doesn't match the default or invalid auth ticket.
+
+### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateFailed
+
+Event that indicates that an attempt to apply secure boot updates failed
+
+The following fields are available:
+
+- **Action**  Action string when error occurred
+- **hr**  Error code in HRESULT
+- **IsRejectedByFirmware**  Bool value to indicate if firmware has rejected the update.
+- **IsResealNeeded**  BOOL value to indicate if TPM Reseal was needed
+- **RevokedBootmanager**  BOOL value to indicate if current bootmgr is revoked.
+- **SecureBootUpdateCaller**  Scenario in which function was called. Could be Update or Upgrade
+- **UpdateType**  Indicates if it's DB or DBX update
+- **WillResealSucceed**  Indicates if TPM reseal operation is expected to succeed
+
+
+### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateStarted
+
+Event that indicates secure boot update has started.
+
+The following fields are available:
+
+- **AvailableUpdates**  Number of available secure boot updates.
+- **SecureBootUpdateCaller**  Enum value indicating if this is a servicing or an upgrade.
+
+
+### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateSucceeded
+
+This event indicates if the Secure Boot Update succeded.
+
+The following fields are available:
+
+- **Action**  Indicates the stage for success.
+- **IsRebootRequiredBeforeUpdate**  Indicates if reboot is required for before re-attempting the update.
+- **IsResealNeeded**  Indicates if BitLocker reseal is needed.
+- **RevokedBootmanager**  Indicates if there's a revoked bootmgr on the machine.
+- **SecureBootUpdateCaller**  Info about the caller of the update.
+- **UpdateType**  VariableMask like DB, DBX.
+- **WillResealSucceed**  Inform if reseal will succeed.
+
+
+### Microsoft.Windows.Security.SBServicingCore.ApplySecureBootUpdateCompleted
+
+This event logs when the installer completes Secureboot update.
+
+The following fields are available:
+
+- **Action**  String that tells us the failure stage if any.
+- **hr**  error code.
+- **IsResealNeeded**  Is BitLocker reseal was needed on this machine.
+- **sbServicingFailureReason**  Enum containing failure details.
+- **SecureBootUpdateCaller**  Caller of the update like Secureboot AI, tpmtask or dbupdater.
+- **UpdateType**  Update type DB or DBX.
+- **WillResealSucceed**  If BitLocker reseal will succeed on this machine.
+
+
+### Microsoft.Windows.Security.SBServicingCore.ApplySecureBootUpdateStarted
+
+This event logs when Secureboot updating containing DB/DBX payload starts.
+
+The following fields are available:
+
+- **SecureBootUpdateCaller**  Caller of the update like Secureboot AI, TPMTask or DBUpdater.
+- **UpdateType**  Update type like DB or DBX.
+
+
+### Microsoft.Windows.Security.SBServicingCore.SBServicingCoreFunctionFailed
+
+This event logs when some core function of Secureboot AI fails.
+
+The following fields are available:
+
+- **Action**  stage at which the failure occurred.
+- **Function**  name of the function where the failure occurred.
+- **hr**  error code.
+
+
+### Microsoft.Windows.Shell.CortanaSearch.WebView2ProcessFailed
+
+This event tracks if the WebView2 process failed.
+
+The following fields are available:
+
+- **ExitCode**  WebView2 exit code.
+- **ProcessFailedKind**  WebView2 process failure kind.
+- **Reason**  WebView2 process failure reason.
+- **SessionId**  WebView2 sessionId.
+
+
+### Microsoft.Windows.Shell.SystemSettings.SettingsAppActivity.GetUserAccountState
+
+This event keeps track of if the user's account is in a good state upon loading the Settings Accounts L1 page.
+
+The following fields are available:
+
+- **CassService**  Version of the Cass service.
+- **componentName**  Name of the Settings component.
+- **correlationVector**  Identifier for correlating events.
+- **currentPageGroupId**  Identifier for the current page group.
+- **currentPageId**  Identifier for the current page.
+- **experienceId**  Identifier for the Settings experience.
+- **experienceVersion**  Version of the experience.
+- **isExperienceInbox**  Is the experience present by default (Comes with the system).
+- **pageId**  Identifier for the Setting page.
+- **pageSessionId**  Identifier for the page session.
+- **processSessionId**  Identifier for the process.
+- **state**  State that determines if the account has required backup proofs (eg. email and phone)
+
+
+### Microsoft.Windows.WinRE.Agent.CreateWinRePartitionFailed
+
+This event emits failure of the Creation of the WinRE partition operation.
+
+The following fields are available:
+
+- **ErrorCode**  Error code.
+
+
+### Microsoft.Windows.WinRE.Agent.ExtendOsPartitionSucceed
+
+This event emits success for the extending OS Partition operation.
+
+
+### Microsoft.Windows.WinRE.Agent.ShrinkOsPartitionFailed
+
+This event captures OS partition shrink operation failures during the WinRE servicing.
+
+The following fields are available:
+
+- **HRESULT**  Error code.
+
+
+### Microsoft.Windows.WinRE.Agent.WinreFormatPartition
+
+This event fires when WinRE partition is formatted.
+
+
+
+### Microsoft.Windows.WinRE.Agent.WinreFormatPartitionSucceed
+
+This vvent fires when WinRE partition attempts to format and succeeds.
+
+
+## Privacy consent logging events
+
+### Microsoft.Windows.Shell.PrivacyConsentLogging.PrivacyConsentCompleted
+
+This event is used to determine whether the user successfully completed the privacy consent experience. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **presentationVersion**  Which display version of the privacy consent experience the user completed
+- **privacyConsentState**  The current state of the privacy consent experience
+- **settingsVersion**  Which setting version of the privacy consent experience the user completed
+- **userOobeExitReason**  The exit reason of the privacy consent experience
+
+
+### Microsoft.Windows.Shell.PrivacyConsentLogging.PrivacyConsentStatus
+
+This event provides the effectiveness of new privacy experience. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **isAdmin**  whether the person who is logging in is an admin
+- **isExistingUser**  whether the account existed in a downlevel OS
+- **isLaunching**  Whether or not the privacy consent experience will be launched
+- **isSilentElevation**  whether the user has most restrictive UAC controls
+- **privacyConsentState**  whether the user has completed privacy experience
+- **userRegionCode**  The current user's region setting
+
+
+## Setup events
+
+### Microsoft.Windows.Setup.WinSetupMon.ProtectionViolation
+
+This event provides information about move or deletion of a file or a directory which is being monitored for data safety during feature updates. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **Mode**  The kind of monitoring mode enforced for the given path (this is one of a fixed set of strings).
+- **Path**  Path to the file or the directory which is being moved or deleted.
+- **Process**  Path to the process which is requesting the move or the deletion.
+- **SessionId**   Identifier to correlate this component's telemetry with that of others.
+- **TargetPath**  (Optional) If the operation is a move, the target path to which the file or directory is being moved.
+
+
+### Microsoft.Windows.Setup.WinSetupMon.TraceError
+
+Provides details about error in the functioning of upgrade data safety monitoring filter driver.
+
+The following fields are available:
+
+- **Message**  Text string describing the error condition.
+- **SessionId** Identifier to correlate this component's telemetry with that of others.
+- **Status**  	NTSTATUS code related to the error.
+
+
+### Microsoft.Windows.Setup.WinSetupMon.TraceErrorVolume
+
+Provides details about error in the functioning of upgrade data safety monitoring filter driver, related to a specific volume (drive).
+
+The following fields are available:
+
+- **Message**  Text string describing the error condition.
+- **SessionId**  Identifier to correlate this component's telemetry with that of others.
+- **Status**  NTSTATUS code related to the error.
+- **Volume**  Path of the volume on which the error occurs
+
+
+## Surface events
+
+### Microsoft.Surface.Battery.Prod.BatteryInfoEvent
+
+This event includes the hardware level data about battery performance. The data collected with this event is used to help keep Windows products and services performing properly.
+
+The following fields are available:
+
+- **batteryData**  Battery Performance data.
+- **batteryData.data()**  Battery performance data.
+- **BatteryDataSize:**  Size of the battery performance data.
+- **batteryInfo.data()**  Battery performance data.
+- **BatteryInfoSize:**  Size of the battery performance data.
+
+
+### Microsoft.Surface.Battery.Prod.BatteryInfoEventV2_BPM
+
+This event includes the hardware level data about battery performance.  The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **BPMCurrentlyEngaged**  Instantaneous snapshot if BPM is engaged on device.
+- **BPMExitCriteria**  What is the BPM exit criteria - 20%SOC or 50%SOC?
+- **BPMHvtCountA**  Current HVT count for BPM counter A.
+- **BPMHvtCountB**  Current HVT count for BPM counter B.
+- **bpmOptOutLifetimeCount**  BPM OptOut Lifetime Count.
+- **BPMRsocBucketsHighTemp_Values**  Time in temperature range 46°C -60°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMRsocBucketsLowTemp_Values**  Time in temperature range 0°C -20°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMRsocBucketsMediumHighTemp_Values**  Time in temperature range 36°C -45°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMRsocBucketsMediumLowTemp_Values**  Time in temperature range 21°C-35°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMTotalEngagedMinutes**  Total time that BPM was engaged.
+- **BPMTotalEntryEvents**  Total number of times entering BPM.
+- **BPMv4CurrentlyEngaged**  Instantaneous snapshot if BPM is engaged on device.
+- **BPMv4ExitCriteria**  What is the BPM exit criteria - 20%SOC or 50%SOC?.
+- **BPMv4HvtCountA**  Current HVT count for BPM counter A.
+- **BPMv4HvtCountB**  Current HVT count for BPM counter B.
+- **BPMv4RsocBucketsHighTemp_Values**  Time in temperature range 46°C -60°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMv4RsocBucketsLowTemp_Values**  Time in temperature range 0°C -20°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMv4RsocBucketsMediumHighTemp_Values**  Time in temperature range 36°C -45°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMv4RsocBucketsMediumLowTemp_Values**  Time in temperature range 21°C-35°C and in the following true RSOC ranges: 0%-49%; 50%-79%; 80%-89%; 90%-94%; 95%-100%.
+- **BPMv4TotalEngagedMinutes**  Total time that BPM was engaged.
+- **BPMv4TotalEntryEvents**  Total number of times entering BPM.
+- **ComponentId**  Component ID.
+- **FwVersion**  FW version that created this log.
+- **LogClass**  Log Class.
+- **LogInstance**  Log instance within class (1..n).
+- **LogVersion**  Log MGR version.
+- **MCUInstance**  Instance ID used to identify multiple MCUs in a product.
+- **ProductId**  Product ID.
+- **SeqNum**  Sequence Number.
+- **TimeStamp**  UTC seconds when log was created.
+- **Ver**  Schema version.
+
+
+### Microsoft.Surface.Battery.Prod.BatteryInfoEventV2_CTT
+
+This event includes the hardware level data about battery performance. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **batteryPresent**  Battery present on device.
+- **BPMKioskModeStartDateInSeconds**  First time Battery Limit was turned on.
+- **BPMKioskModeTotalEngagedMinutes**  Total time Battery Limit was on (SOC value at 50%).
+- **ComponentId**  Component ID.
+- **CTTEqvTimeat35C**  Poll time every minute. Add to lifetime counter based on temperature. Only count time above 80% SOC.
+- **CTTEqvTimeat35CinBPM**  Poll time every minute. Add to lifetime counter based on temperature. Only count time above 55% SOC and when device is in BPM. Round up.
+- **CTTMinSOC1day**  Rolling 1 day minimum SOC. Value set to 0 initially.
+- **CTTMinSOC28day**  Rolling 28 day minimum SOC. Value set to 0 initially.
+- **CTTMinSOC3day**  Rolling 3 day minimum SOC. Value set to 0 initially.
+- **CTTMinSOC7day**  Rolling 7 day minimum SOC. Value set to 0 initially.
+- **CTTReduction**  Current CTT reduction in mV	
+- **CTTStartDateInSeconds**  Start date from when device was starting to be used.
+- **currentAuthenticationState**  Current Authentication State.
+- **FwVersion**  FW version that created this log.
+- **LogClass**  LOG CLASS.
+- **LogInstance**  Log instance within class (1..n).
+- **LogVersion**  LOG MGR VERSION.
+- **MCUInstance**  Instance ID used to identify multiple MCUs in a product.
+- **newSnFruUpdateCount**  New Sn FRU Update Count.
+- **newSnUpdateCount**  New Sn Update Count.
+- **ProductId**  Product ID.
+- **ProtectionPolicy**  Battery limit engaged. True (0 False).
+- **SeqNum**  Sequence Number.
+- **TimeStamp**  UTC seconds when log was created.
+- **Ver**  Schema version.
+- **VoltageOptimization**  Current CTT reduction in mV.
+
+
+### Microsoft.Surface.Battery.Prod.BatteryInfoEventV2_GG
+
+This event includes the hardware level data about battery performance. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **cbTimeCell_Values**  cb time for different cells.
+- **ComponentId**  Component ID.
+- **cycleCount**  Cycle Count.
+- **deltaVoltage**  Delta voltage.
+- **eocChargeVoltage_Values**  EOC Charge voltage values.
+- **fullChargeCapacity**  Full Charge Capacity.
+- **FwVersion**  FW version that created this log.
+- **lastCovEvent**  Last Cov event.
+- **lastCuvEvent**  Last Cuv event.
+- **LogClass**  LOG_CLASS.
+- **LogInstance**  Log instance within class (1..n).
+- **LogVersion**  LOG_MGR_VERSION.
+- **manufacturerName**  Manufacturer name.
+- **maxChargeCurrent**  Max charge current.
+- **maxDeltaCellVoltage**  Max delta cell voltage.
+- **maxDischargeCurrent**  Max discharge current.
+- **maxTempCell**  Max temp cell.
+- **maxVoltage_Values**  Max voltage values.
+- **MCUInstance**  Instance ID used to identify multiple MCUs in a product.
+- **minTempCell**  Min temp cell.
+- **minVoltage_Values**  Min voltage values.
+- **numberOfCovEvents**  Number of Cov events.
+- **numberOfCuvEvents**  Number of Cuv events.
+- **numberOfOCD1Events**  Number of OCD1 events.
+- **numberOfOCD2Events**  Number of OCD2 events.
+- **numberOfQmaxUpdates**  Number of Qmax updates.
+- **numberOfRaUpdates**  Number of Ra updates.
+- **numberOfShutdowns**  Number of shutdowns.
+- **pfStatus_Values**  pf status values.
+- **ProductId**  Product ID.
+- **qmax_Values**  Qmax values for different cells.
+- **SeqNum**  Sequence Number.
+- **TimeStamp**  UTC seconds when log was created.
+- **Ver**  Schema version.
+
+
+### Microsoft.Surface.Battery.Prod.BatteryInfoEventV2_GGExt
+
+This event includes the hardware level data about battery performance. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **avgCurrLastRun**  Average current last run.
+- **avgPowLastRun**  Average power last run.
+- **batteryMSPN**  BatteryMSPN
+- **batteryMSSN**  BatteryMSSN.
+- **cell0Ra3**  Cell0Ra3.
+- **cell1Ra3**  Cell1Ra3.
+- **cell2Ra3**  Cell2Ra3.
+- **cell3Ra3**  Cell3Ra3.
+- **ComponentId**  Component ID.
+- **currentAtEoc**  Current at Eoc.
+- **firstPFstatusA**  First PF status-A.
+- **firstPFstatusB**  First PF status-B.
+- **firstPFstatusC**  First PF status-C.
+- **firstPFstatusD**  First PF status-D.
+- **FwVersion**  FW version that created this log.
+- **lastQmaxUpdate**  Last Qmax update.
+- **lastRaDisable**  Last Ra disable.
+- **lastRaUpdate**  Last Ra update.
+- **lastValidChargeTerm**  Last valid charge term.
+- **LogClass**  LOG CLASS.
+- **LogInstance**  Log instance within class (1..n).
+- **LogVersion**  LOG MGR VERSION.
+- **maxAvgCurrLastRun**  Max average current last run.
+- **maxAvgPowLastRun**  Max average power last run.
+- **MCUInstance**  Instance ID used to identify multiple MCUs in a product.
+- **mfgInfoBlockB01**  MFG info Block B01.
+- **mfgInfoBlockB02**  MFG info Block B02.
+- **mfgInfoBlockB03**  MFG info Block B03.
+- **mfgInfoBlockB04**  MFG info Block B04.
+- **numOfRaDisable**  Number of Ra disable.
+- **numOfValidChargeTerm**  Number of valid charge term.
+- **ProductId**  Product ID.
+- **qmaxCycleCount**  Qmax cycle count.
+- **SeqNum**  Sequence Number.
+- **stateOfHealthEnergy**  State of health energy.
+- **stateOfHealthFcc**  State of health Fcc.
+- **stateOfHealthPercent**  State of health percent.
+- **TimeStamp**  UTC seconds when log was created.
+- **totalFwRuntime**  Total FW runtime.
+- **updateStatus**  Update status.
+- **Ver**  Schema version.
+
+
+### Microsoft.Surface.Battery.Prod.BatteryInfoEventV3
+
+Hardware level data about battery performance.
+
+The following fields are available:
+
+- **BatteryTelemetry**  Hardware Level Data about battery performance.
+- **ComponentId**  Component ID.
+- **FwVersion**  FW version that created this log.
+- **LogClass**  LOG CLASS.
+- **LogInstance**  Log instance within class (1..n).
+- **LogVersion**  LOG MGR VERSION.
+- **MCUInstance**  Instance ID used to identify multiple MCUs in a product.
+- **ProductId**  ProductId ID.
+- **SeqNum**  Sequence Number.
+- **TimeStamp**  UTC seconds when log was created.
+- **Ver**  Schema version.
+
+
+## Update Assistant events
+
+### Microsoft.Windows.RecommendedTroubleshootingService.MitigationFailed
+
+This event is raised after an executable delivered by Mitigation Service has run and failed. Data from this event is used to measure the health of mitigations used by engineers to solve in-market problems on internal, insider, and retail devices. Failure data will also be used for root-cause investigation by feature teams, as signal to halt mitigation rollout and, possible follow-up action on specific devices still impacted by the problem because the mitigation failed (that is, reoffer it to impacted devices). The data collected with this event is used to help keep Windows up to date and performing properly.
+
+The following fields are available:
+
+- **activeProcesses**  Number of active processes.
+- **atleastOneMitigationSucceeded**  Bool flag indicating if at least one mitigation succeeded.
+- **callerId**  Identifier (GUID) of the caller requesting a system initiated troubleshooter.
+- **contactTSServiceAttempts**  Number of attempts made by TroubleshootingSvc in a single Scanner session to get Troubleshooter metadata from the Troubleshooting cloud service.
+- **countDownloadedPayload**  Count instances of payload downloaded.
+- **description**  Description of failure.
+- **devicePreference**  Recommended Troubleshooting Setting on the device.
+- **downloadBinaryAttempts**  Number of attempts made by TroubleshootingSvc in a single Scanner session to download Troubleshooter Exe.
+- **downloadCabAttempts**  Number of attempts made by TroubleshootingSvc in a single Scanner session to download PrivilegedActions Cab.
+- **executionHR**  HR code of the execution of the mitigation.
+- **executionPreference**  Current Execution level Preference. This may not be same as devicePreference, for example, when executing Critical troubleshooters, the executionPreference is set to the Silent option.
+- **exitCode**  Exit code of the execution of the mitigation.
+- **experimentFeatureId**  Experiment feature ID.
+- **experimentFeatureState**  Config state of the experiment.
+- **hr**  HRESULT for error code.
+- **isActiveSessionPresent**  If an active user session is present on the device.
+- **isCriticalMitigationAvailable**  If a critical mitigation is available to this device.
+- **isFilteringSuccessful**  If the filtering operation was successful.
+- **isReApply**  reApply status for the mitigation.
+- **mitigationId**  ID value of the mitigation.
+- **mitigationProcessCycleTime**  Process cycle time used by the mitigation.
+- **mitigationRequestWithCompressionFailed**  Boolean flag indicating if HTTP request with compression failed for this device.
+- **mitigationServiceResultFetched**  Boolean flag indicating if mitigation details were fetched from the admin service.
+- **mitigationVersion**  String indicating version of the mitigation.
+- **oneSettingsMetadataParsed**  If OneSettings metadata was parsed successfully.
+- **oneSettingsSchemaVersion**  Schema version used by the OneSettings parser.
+- **onlyNoOptMitigationsPresent**  Checks if all mitigations were no opt.
+- **parsedOneSettingsFile**  Indicates if OneSettings parsing was successful.
+- **sessionAttempts**  Number of Scanner sessions attempted so far by TroubleshootingSvc for this troubleshooter.
+- **SessionId**  Random GUID used for grouping events in a session.
+- **subType**  Error type.
+- **totalKernelTime**  Total kernel time used by the mitigation.
+- **totalNumberOfApplicableMitigations**  Total number of applicable mitigations.
+- **totalProcesses**  Total number of processes assigned to the job object.
+- **totalTerminatedProcesses**  Total number of processes in terminated state assigned to the job object.
+- **totalUserTime**  Total user mode time used by the job object.
+
+
+### Microsoft.Windows.RecommendedTroubleshootingService.MitigationSucceeded
+
+This event is raised after an executable delivered by Mitigation Service has successfully run. Data from this event is used to measure the health of mitigations used by engineers to solve in-market problems on internal, insider, and retail devices. The data collected with this event is used to keep Windows performing properly.
+
+The following fields are available:
+
+- **activeProcesses**  Number of active processes.
+- **callerId**  Identifier (GUID) of the caller requesting a system initiated troubleshooter.
+- **contactTSServiceAttempts**  Number of attempts made by TroubleshootingSvc in a single Scanner session to get Troubleshooter metadata from the Troubleshooting cloud service.
+- **devicePreference**  Recommended troubleshooting setting on the device.
+- **downloadBinaryAttempts**  Number of attempts made by TroubleshootingSvc in a single Scanner session to download Troubleshooter Exe.
+- **downloadCabAttempts**  Number of attempts made by TroubleshootingSvc in a single Scanner session to download PrivilegedActions Cab.
+- **executionPreference**  Current Execution level Preference. This may not be same as devicePreference, for example, when executing Critical troubleshooters, the executionPreference is set to the Silent option.
+- **exitCode**  Exit code of the execution of the mitigation.
+- **exitCodeDefinition**  String describing the meaning of the exit code returned by the mitigation (that is, ProblemNotFound).
+- **experimentFeatureId**  Experiment feature ID.
+- **experimentFeatureState**  Feature state for the experiment.
+- **mitigationId**  ID value of the mitigation.
+- **mitigationProcessCycleTime**  Process cycle time used by the mitigation.
+- **mitigationVersion**  String indicating version of the mitigation.
+- **sessionAttempts**  Number of Scanner sessions attempted so far by TroubleshootingSvc for this troubleshooter.
+- **SessionId**  Random GUID used for grouping events in a session.
+- **totalKernelTime**  Total kernel time used by the mitigation.
+- **totalProcesses**  Total number of processes assigned to the job object.
+- **totalTerminatedProcesses**  Total number of processes in terminated state assigned to the job object.
+- **totalUserTime**  Total user mode time used by the job object.
+
+
+## Update events
+
+### Update360Telemetry.FellBackToDownloadingAllPackageFiles
+
+This event indicates whether a failure occurred during Missing File List generation and is applicable to Quality Update downloads.
+
+The following fields are available:
+
+- **ErrorCode**  Error code returned during Missing File List generation.
+- **FlightId**  Unique ID for each flight.
+- **ObjectId**  Unique ID for each flight.
+- **Package**  Name of the package for which Missing File List generation failed and we fell back to downloading all package files.
+- **RelatedCV**  Correlation vector value generated from the latest USO scan.
+- **ScenarioId**  Indicates the update scenario.
+- **SessionId**  Unique value for each attempt (same value for initialize, download, install commit phases).
+- **UpdateId**  Unique ID for each Update.
+
+
+### Update360Telemetry.UpdateAgentCommit
+
+This event collects information regarding the commit phase of the new Unified Update Platform (UUP) update scenario, which is leveraged by both Mobile and Desktop. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **CancelRequested**  Boolean that indicates whether cancel was requested.
+- **ErrorCode**  The error code returned for the current install phase.
+- **FlightId**  Unique ID for each flight.
+- **ObjectId**  Unique value for each Update Agent mode.
+- **RelatedCV**  Correlation vector value generated from the latest USO scan.
+- **Result**  Outcome of the install phase of the update.
+- **ScenarioId**  Indicates the update scenario.
+- **SessionId**  Unique value for each update attempt.
+- **UpdateId**  Unique ID for each update.
+
+
+### Update360Telemetry.UpdateAgentPostRebootResult
+
+This event collects information for both Mobile and Desktop regarding the post reboot phase of the new Unified Update Platform (UUP) update scenario. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **ErrorCode**  The error code returned for the current post reboot phase.
+- **FlightId**  The specific ID of the Windows Insider build the device is getting.
+- **ObjectId**  Unique value for each Update Agent mode.
+- **PostRebootResult**  Indicates the Hresult.
+- **RelatedCV**  Correlation vector value generated from the latest USO scan.
+- **RollbackFailureReason**  Indicates the cause of the rollback.
+- **ScenarioId**  The scenario ID. Example: MobileUpdate, DesktopLanguagePack, DesktopFeatureOnDemand, or DesktopDriverUpdate.
+- **SessionId**  Unique value for each update attempt.
+- **UpdateId**  Unique ID for each update.
+- **UpdateOutputState**  A numeric value indicating the state of the update at the time of reboot.
+
+
+## Windows Error Reporting events
+
+### Microsoft.Windows.WERVertical.OSCrash
+
+This event sends binary data from the collected dump file whenever a bug check occurs, to help keep Windows up to date. This is the OneCore version of this event.
+
+The following fields are available:
+
+- **BootId**  Uint32 identifying the boot number for this device.
+- **BugCheckCode**  Uint64 "bugcheck code" that identifies a proximate cause of the bug check.
+- **BugCheckParameter1**  Uint64 parameter providing additional information.
+- **BugCheckParameter2**  Uint64 parameter providing additional information.
+- **BugCheckParameter3**  Uint64 parameter providing additional information.
+- **BugCheckParameter4**  Uint64 parameter providing additional information.
+- **DumpFileAttributes**  Codes that identify the type of data contained in the dump file
+- **DumpFileSize**  Size of the dump file
+- **IsValidDumpFile**  True if the dump file is valid for the debugger, false otherwise
+- **ReportId**  WER Report Id associated with this bug check (used for finding the corresponding report archive in Watson).
+
+
+## Windows Hardware Error Architecture events
+
+### WheaProvider.WheaDriverErrorExternal
+
+This event is sent when a common platform hardware error is recorded by an external WHEA error source driver. The data collected with this event is used to help keep Windows up to date and performing properly.
+
+The following fields are available:
+
+- **creatorId**  A GUID that identifies the entity that created the error record.
+- **errorFlags**  Flags set on the error record.
+- **notifyType**  A GUID that identifies the notification mechanism by which an error condition is reported to the operating system.
+- **partitionId**  A GUID that identifies the partition on which the hardware error occurred.
+- **platformId**  A GUID that identifies the platform on which the hardware error occurred.
+- **record**  A binary blob containing the full error record. Due to the nature of common platform error records we have no way of fully parsing this blob for any given record.
+- **recordId**  The identifier of the error record. This identifier is unique only on the system that created the error record.
+- **sectionFlags**  The flags for each section recorded in the error record.
+- **sectionTypes**  A GUID that represents the type of sections contained in the error record.
+- **severityCount**  The severity of each individual section.
+- **timeStamp**  Error time stamp as recorded in the error record.
+
+
+### WheaProvider.WheaDriverExternalLogginLimitReached
+
+This event indicates that WHEA has reached the logging limit for critical events from external drivers. The data collected with this event is used to help keep Windows up to date and performing properly.
+
+The following fields are available:
+
+- **timeStamp**  Time at which the logging limit was reached.
+
+
+## Windows Store events
+
+### Microsoft.Windows.StoreAgent.Telemetry.AbortedInstallation
+
+This event is sent when an installation or update is canceled by a user or the system and is used to help keep Windows Apps up to date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The names of all packages to be downloaded and installed.
+- **AttemptNumber**  Number of retry attempts before it was canceled.
+- **BundleId**  The Item Bundle ID.
+- **CategoryId**  The Item Category ID.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **HResult**  The result code of the last action performed before this operation.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Was this requested by a user?
+- **IsMandatory**  Was this a mandatory update?
+- **IsRemediation**  Was this a remediation install?
+- **IsRestore**  Is this automatically restoring a previously acquired product?
+- **IsUpdate**  Flag indicating if this is an update.
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  The product family name of the product being installed.
+- **ProductId**  The identity of the package or packages being installed.
+- **SystemAttemptNumber**  The total number of automatic attempts at installation before it was canceled.
+- **UserAttemptNumber**  The total number of user attempts at installation before it was canceled.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.BeginAcquireLicense
+
+During App Installs and updates, a license is acquired to ensure the app/machine has an entitlement to the app.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The name(s) of all packages to be downloaded and installed.
+- **AttemptNumber**  Total number of install attempts before this operation.
+- **BundleId**  The identity of the flight associated with this product.
+- **CategoryId**  The identity of the package(s) being installed.
+- **ClientAppId**  Client App Id (different in case of auto updates or interactive updates from the app).
+- **IsBundle**  The identity of the app that initiated this operation.
+- **IsInteractive**  True if this operation was requested by a user.
+- **IsMandatory**  True if this is a mandatory update.
+- **IsRemediation**  True if this install is repairing a previous install.
+- **IsRestore**  True when automatically restoring a previously acquired product.
+- **IsUpdate**  True if this is a product update.
+- **ParentBundleId**  The Product ID of the parent if this product is part of a bundle.
+- **PFN**  Product Family Name of this product being installed.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  Total number of automatic attempts to install before cancellation.
+- **UserAttemptNumber**  Total number of user attempts to install before cancellation.
+- **WUContentId**  Licensing identity of this package.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.BeginDownload
+
+This event is fired during the app update or install process when actual bits are being downloaded, this particular event is fired at the beginning of the process to indicate a state change to "Downloading". StoreAgent events are needed to help keep Windows pre-installed 1st party apps up to date and secure such as the mail and calendar apps. App update failure can be unique across devices and without this data from every device we won't be able to track the success/failure and fix any future vulnerabilities related to these built-in Windows Apps.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The name(s) of all packages to be downloaded and installed.
+- **AttemptNumber**  Total number of install attempts before this operation.
+- **BundleId**  The identity of the flight associated with this product.
+- **CategoryId**  The identity of the package(s) being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **IsBundle**  True if this is a bundle.
+- **IsInteractive**  True if this operation was requested by a user.
+- **IsMandatory**  True if this is a mandatory update.
+- **IsRemediation**  True if this install is repairing a previous install.
+- **IsRestore**  True when automatically restoring a previously acquired product.
+- **IsUpdate**  True if this is a product update.
+- **ParentBundleId**  The product ID of the parent if this product is part of a bundle.
+- **PFN**  Product Family Name of app being downloaded.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  Total number of automatic attempts to install before cancellation.
+- **UserAttemptNumber**  Total number of user attempts to install before cancellation.
+- **WUContentId**  NLicensing identity of this package.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.BeginGetFreeEntitlement
+
+Tracks the beginning of the call to get a free app entitlement.
+
+The following fields are available:
+
+- **CampaignId**  Marketing Campaign Identifier.
+- **StoreId**  App Store Catalog Id.
+- **UseDeviceId**  Boolean value to select whether the entitlement should be a device versus a user entitlement.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.BeginInstall
+
+This event is fired near the end stage of a new app install or update after the bits have been downloaded. StoreAgent events are needed to help keep Windows pre-installed 1st party apps up to date and secure such as the mail and calendar apps. App update failure can be unique across devices and without this data from every device we won't be able to track the success/failure and fix any future vulnerabilities related to these built-in Windows Apps.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The name(s) of all packages to be downloaded and installed.
+- **AttemptNumber** Total number of install attempts before this operation.
+- **BundleId**  The identity of the flight associated with this product.
+- **CategoryId**  The identity of the package(s) being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **IsBundle**  True if this is a bundle.
+- **IsInteractive**  True if this operation was requested by a user.
+- **IsMandatory**  True if this is a mandatory update.
+- **IsRemediation**  True if this install is repairing a previous install.
+- **IsRestore**  True when automatically restoring a previously acquired product.
+- **IsUpdate**  True if this is a product update.
+- **ParentBundleId**  The product ID of the parent if this product is part of a bundle.
+- **PFN**  The name(s) of the package(s) requested for install.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  Total number of automatic attempts to install.
+- **UserAttemptNumber**  Total number of user attempts to install.
+- **WUContentId**  Licensing identity of this package.
+
+### Microsoft.Windows.StoreAgent.Telemetry.BeginSearchUpdatePackages
+
+This event is fired when looking for app updates.
+
+The following fields are available:
+
+- **AttemptNumber**  Total number of install attempts before this operation.
+- **BundleId**  The identity of the flight associated with this product.
+- **CategoryId**  The identity of the package(s) being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **IsBundle**  True if this is a bundle.
+- **IsInteractive**  True if this operation was requested by a user.
+- **IsMandatory**  True if this is a mandatory update.
+- **IsRemediation**  True if this install is repairing a previous install.
+- **IsRestore**  True when automatically restoring a previously acquired product.
+- **IsUpdate**  True if this is a product update.
+- **ParentBundleId**  The product ID of the parent if this product is part of a bundle.
+- **PFN**  The name(s) of the package(s) requested for install.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  Total number of automatic attempts to install.
+- **UserAttemptNumber**  Total number of user attempts to install.
+- **WUContentId**  Licensing identity of this package.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.BlockLowPriorityWorkItems
+
+This event is fired when the BlockLowPriorityWorkItems method is called, stopping the queue from installing LowPriority work items.
+
+The following fields are available:
+
+- **ClientId**  Client ID of the caller.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.CancelInstallation
+
+This event is sent when an app update or installation is canceled while in interactive mode. This can be canceled by the user or the system. It's used to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The names of all package or packages to be downloaded and installed.
+- **AttemptNumber**  Total number of installation attempts.
+- **BundleId**  The identity of the Windows Insider build that is associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Was this requested by a user?
+- **IsMandatory**  Is this a mandatory update?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this an automatic restore of a previously acquired product?
+- **IsUpdate**  Is this a product update?
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  The name of all packages to be downloaded and installed.
+- **PreviousHResult**  The previous HResult code.
+- **PreviousInstallState**  Previous installation state before it was canceled.
+- **ProductId**  The name of the package or packages requested for installation.
+- **RelatedCV**  Correlation Vector of a previous performed action on this product.
+- **SystemAttemptNumber**  Total number of automatic attempts to install before it was canceled.
+- **UserAttemptNumber**  Total number of user attempts to install before it was canceled.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndAcquireLicense
+
+This event is sent after the license is acquired when a product is being installed. It's used to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  Includes a set of package full names for each app that is part of an atomic set.
+- **AttemptNumber**  The total number of attempts to acquire this product.
+- **BundleId**  The bundle ID
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **HResult**  HResult code to show the result of the operation (success/failure).
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Did the user initiate the installation?
+- **IsMandatory**  Is this a mandatory update?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this happening after a device restore?
+- **IsUpdate**  Is this an update?
+- **ParentBundleId**  The parent bundle ID (if it's part of a bundle).
+- **PFN**  Product Family Name of the product being installed.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  The number of attempts by the system to acquire this product.
+- **UserAttemptNumber**  The number of attempts by the user to acquire this product
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndDownload
+
+This event is sent after an app is downloaded to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The name of all packages to be downloaded and installed.
+- **AttemptNumber**  Number of retry attempts before it was canceled.
+- **BundleId**  The identity of the Windows Insider build associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **DownloadSize**  The total size of the download.
+- **ExtendedHResult**  Any extended HResult error codes.
+- **HResult**  The result code of the last action performed.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Is this initiated by the user?
+- **IsMandatory**  Is this a mandatory installation?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this a restore of a previously acquired product?
+- **IsUpdate**  Is this an update?
+- **ParentBundleId**  The parent bundle ID (if it's part of a bundle).
+- **PFN**  The Product Family Name of the app being download.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  The number of attempts by the system to download.
+- **UserAttemptNumber**  The number of attempts by the user to download.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndFrameworkUpdate
+
+This event is sent when an app update requires an updated Framework package and the process starts to download it. It's used to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **HResult**  The result code of the last action performed before this operation.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndGetFreeEntitlement
+
+Telemetry is fired at the end of the call to request a free app entitlement, which will make a server call to get the entitlement.
+
+The following fields are available:
+
+- **CampaignId**  Campaign marketing Id.
+- **HResult**  Error result.
+- **StoreId**  Store Catalog Id of item requesting ownership.
+- **UseDeviceId**  Boolean value to select whether the entitlement should be a device versus a user entitlement.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndInstall
+
+This event is sent after a product has been installed to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The names of all packages to be downloaded and installed.
+- **AttemptNumber**  The number of retry attempts before it was canceled.
+- **BundleId**  The identity of the build associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **ExtendedHResult**  The extended HResult error code.
+- **HResult**  The result code of the last action performed.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Is this an interactive installation?
+- **IsMandatory**  Is this a mandatory installation?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this automatically restoring a previously acquired product?
+- **IsUpdate**  Is this an update?
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  Product Family Name of the product being installed.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  The total number of system attempts.
+- **UserAttemptNumber**  The total number of user attempts.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndScanForUpdates
+
+This event is sent after a scan for product updates to determine if there are packages to install. It's used to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AutoUpdateWorkScheduledWithUOTime**  The time when work was first scheduled with UO. Value deleted when UO calls UnblockLowPriorityWorkItems.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **HResult**  The result code of the last action performed.
+- **IsApplicability**  Is this request to only check if there are any applicable packages to install?
+- **IsInteractive**  Is this user requested?
+- **IsOnline**  Is the request doing an online check?
+- **NumberOfApplicableUpdates**  The number of packages returned by this operation.
+- **PFN**  The PackageFullName of the app currently installed on the machine. This operation is scanning for an update for this app. Value will be empty if operation is scanning for updates for more than one app.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndSearchUpdatePackages
+
+This event is sent after searching for update packages to install. It's used to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The names of all packages to be downloaded and installed.
+- **AttemptNumber**  The total number of retry attempts before it was canceled.
+- **BundleId**  The identity of the build associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **HResult**  The result code of the last action performed.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Is this user requested?
+- **IsMandatory**  Is this a mandatory update?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this restoring previously acquired content?
+- **IsUpdate**  Is this an update?
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  The name of the package or packages requested for install.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  The total number of system attempts.
+- **UserAttemptNumber**  The total number of user attempts.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.EndStageUserData
+
+This event is sent after restoring user data (if any) that needs to be restored following a product install. It's used to keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The name of all packages to be downloaded and installed.
+- **AttemptNumber**  The total number of retry attempts before it was canceled.
+- **BundleId**  The identity of the build associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **HResult**  The result code of the last action performed.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Is this user requested?
+- **IsMandatory**  Is this a mandatory update?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this restoring previously acquired content?
+- **IsUpdate**  Is this an update?
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  The name of the package or packages requested for install.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SystemAttemptNumber**  The total number of system attempts.
+- **UserAttemptNumber**  The total number of system attempts.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.FulfillmentComplete
+
+This event is sent at the end of an app install or update to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **CatalogId**  The name of the product catalog from which this app was chosen.
+- **FailedRetry**  Indicates whether the installation or update retry was successful.
+- **HResult**  The HResult code of the operation.
+- **PFN**  The Package Family Name of the app that is being installed or updated.
+- **ProductId**  The product ID of the app that is being updated or installed.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.FulfillmentInitiate
+
+This event is sent at the beginning of an app install or update to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **CatalogId**  The name of the product catalog from which this app was chosen.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **FulfillmentPluginId**  The ID of the plugin needed to install the package type of the product.
+- **InstalledPFuN**  Package Full Name of the app that is installed and will be updated.
+- **PFN**  The Package Family Name of the app that is being installed or updated.
+- **PluginTelemetryData**  Diagnostic information specific to the package-type plug-in.
+- **PluginWorkCreationHr**  Resulting HResult error/success code from plugin work creation.	
+- **ProductId**  The product ID of the app that is being updated or installed.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.InstallOperationRequest
+
+This event is sent when a product install or update is initiated, to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **BundleId**  The identity of the build associated with this product.
+- **CatalogId**  If this product is from a private catalog, the Store Product ID for the product being installed.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SkuId**  Specific edition ID being installed.
+- **VolumePath**  The disk path of the installation.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.InstallRequestReceived
+
+This event is sent when a product install request is received by AppInstallManager.
+
+The following fields are available:
+
+- **ClientId**  Client ID of the caller.
+- **StoreId**  The Store ID for the product being installed.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.PauseInstallation
+
+This event is sent when a product install or update is paused (either by a user or the system), to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The names of all packages to be downloaded and installed.
+- **AttemptNumber**  The total number of retry attempts before it was canceled.
+- **BundleId**  The identity of the build associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Is this user requested?
+- **IsMandatory**  Is this a mandatory update?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this restoring previously acquired content?
+- **IsUpdate**  Is this an update?
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  The Product Full Name.
+- **PreviousHResult**  The result code of the last action performed before this operation.
+- **PreviousInstallState**  Previous state before the installation or update was paused.
+- **ProductId**  The Store Product ID for the product being installed.
+- **RelatedCV**  Correlation Vector of a previous performed action on this product.
+- **SystemAttemptNumber**  The total number of system attempts.
+- **UserAttemptNumber**  The total number of user attempts.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.QueueStuckError
+
+This event indicates that the Install Queue is in a stuck state.
+
+The following fields are available:
+
+- **ItemLifetimeInSeconds**  The amount of time elapsed since the item had been created in seconds at the time of the error.
+- **OpenSlots**  The number of open slots in the queue at the time of the error.
+- **PendingItems**  The number of pending items in the queue at the time of the error.
+- **QueueItems**  The number of items in the queue at the time of the error.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.RestoreDeviceMetrics
+
+This event provides an informational summary of the apps returned from the restorable apps data store.
+
+The following fields are available:
+
+- **DeferredAppIds**  The number of backed-up apps that will be auto-installed at an optimal time for the machine, determined by the policies of a Windows component called the Universal Orchestrator.
+- **DelayedAppIds**  The number of backed-up apps that will be auto-installed one hour after device setup.
+- **NumBackupApps**  The number of apps returned from the restorable apps data store.
+- **NumCompatibleApps**  The number of backed-up apps reported by compatibility service to be compatible.
+- **NumIncompatibleApps**  The number of backed-up apps reported by compatibility service to be incompatible.
+- **NumProcessedBackupApps**  The number of backed-up apps for which we have instructed AppRestore Service to create a placeholder.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.RestoreError
+
+This event indicates a blocking error occurred during the restore compatibility check.
+
+The following fields are available:
+
+- **ErrorCode**  The error code associated with the error.
+- **ErrorLocation**  The location of the error.
+- **ErrorMessage**  The message associated with the error.
+- **ErrorMethod**  The method the error occurred in.
+- **ErrorName**  The name of the error.
+- **ErrorType**  The type of the error.
+- **LineNumber**  The line number the error occurred on.
+- **Severity**  The severity level of the error.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.ResumeInstallation
+
+This event is sent when a product install or update is resumed (either by a user or the system), to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **AggregatedPackageFullNames**  The names of all packages to be downloaded and installed.
+- **AttemptNumber**  The number of retry attempts before it was canceled.
+- **BundleId**  The identity of the build associated with this product.
+- **CategoryId**  The identity of the package or packages being installed.
+- **ClientAppId**  The identity of the app that initiated this operation.
+- **HResult**  The result code of the last action performed before this operation.
+- **IsBundle**  Is this a bundle?
+- **IsInteractive**  Is this user requested?
+- **IsMandatory**  Is this a mandatory update?
+- **IsRemediation**  Is this repairing a previous installation?
+- **IsRestore**  Is this restoring previously acquired content?
+- **IsUpdate**  Is this an update?
+- **IsUserRetry**  Did the user initiate the retry?
+- **ParentBundleId**  The product ID of the parent (if this product is part of a bundle).
+- **PFN**  The name of the package or packages requested for install.
+- **PreviousHResult**  The previous HResult error code.
+- **PreviousInstallState**  Previous state before the installation was paused.
+- **ProductId**  The Store Product ID for the product being installed.
+- **RelatedCV**  Correlation Vector for the original install before it was resumed.
+- **ResumeClientId**  The ID of the app that initiated the resume operation.
+- **SystemAttemptNumber**  The total number of system attempts.
+- **UserAttemptNumber**  The total number of user attempts.
+- **WUContentId**  The Windows Update content ID.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.ResumeOperationRequest
+
+This event is sent when a product install or update is resumed by a user or on installation retries, to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **ProductId**  The Store Product ID for the product being installed.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.ScheduleWorkWithUO
+
+This event is fired when we schedule installs and/or updates with UO.
+
+The following fields are available:
+
+- **ClientId**  Client ID of the caller.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.SearchForUpdateOperationRequest
+
+This event is sent when searching for update packages to install, to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **CatalogId**  The Store Catalog ID for the product being installed.
+- **ProductId**  The Store Product ID for the product being installed.
+- **SkuId**  Specific edition of the app being updated.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.StateTransition
+
+Products in the process of being fulfilled (installed or updated) are maintained in a list. This event is sent any time there's a change in a product's fulfillment status (pending, working, paused, canceled, or complete), to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **CatalogId**  The ID for the product being installed if the product is from a private catalog, such as the Enterprise catalog.
+- **FulfillmentPluginId**  The ID of the plugin needed to install the package type of the product.
+- **HResult**  The resulting HResult error/success code of this operation.
+- **NewState**  The current fulfillment state of this product.
+- **PFN**  The Package Family Name of the app that is being installed or updated.
+- **PluginLastStage**  The most recent product fulfillment step that the plug-in has reported (different than its state).
+- **PluginTelemetryData**  Diagnostic information specific to the package-type plug-in.
+- **Prevstate**  The previous fulfillment state of this product.
+- **ProductId**  Product ID of the app that is being updated or installed.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.UnblockLowPriorityWorkItems
+
+This event is fired when the UnblockLowPriorityWorkItems method is called, changing the state of all LowPriority work items to working if AutoUpdateState is enabled.
+
+The following fields are available:
+
+- **ClientId**  Client ID of the caller.
+
+
+### Microsoft.Windows.StoreAgent.Telemetry.UpdateAppOperationRequest
+
+This event occurs when an update is requested for an app, to help keep Windows up-to-date and secure.
+
+The following fields are available:
+
+- **PFamN**  The name of the app that is requested for update.
+
+
+## Windows Update Delivery Optimization events
+
+### Microsoft.OSG.DU.DeliveryOptClient.DownloadCanceled
+
+This event describes when a download was canceled with Delivery Optimization. It's used to understand and address problems regarding downloads. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **background**  Is the download being done in the background?
+- **bytesFromCacheServer**  Bytes received from a cache host.
+- **bytesFromCDN**  The number of bytes received from a CDN source.
+- **bytesFromGroupPeers**  The number of bytes received from a peer in the same group.
+- **bytesFromIntPeers**  The number of bytes received from peers not in the same LAN or in the same group.
+- **bytesFromLedbat**  The number of bytes received from a source using an Ledbat enabled connection.
+- **bytesFromLinkLocalPeers**  The number of bytes received from local peers.
+- **bytesFromLocalCache**  Bytes copied over from local (on disk) cache.
+- **bytesFromPeers**  The number of bytes received from a peer in the same LAN.
+- **cdnErrorCodes**  A list of CDN connection errors since the last FailureCDNCommunication event.
+- **cdnErrorCounts**  The number of times each error in cdnErrorCodes was encountered.
+- **cdnIp**  The IP Address of the source CDN (Content Delivery Network).
+- **cdnUrl**  The URL of the source CDN (Content Delivery Network).
+- **dataSourcesTotal**  Bytes received per source type, accumulated for the whole session.
+- **errorCode**  The error code that was returned.
+- **experimentId**  When running a test, this is used to correlate events that are part of the same test.
+- **fileID**  The ID of the file being downloaded.
+- **isVpn**  Is the device connected to a Virtual Private Network?
+- **jobID**  Identifier for the Windows Update job.
+- **predefinedCallerName**  The name of the API Caller.
+- **reasonCode**  Reason the action or event occurred.
+- **routeToCacheServer**  The cache server setting, source, and value.
+- **sessionID**  The ID of the file download session.
+- **sessionTimeMs**  The duration of the download session, spanning multiple jobs, in milliseconds.
+- **totalTimeMs**  The duration of the download, in milliseconds.
+- **updateID**  The ID of the update being downloaded.
+
+
+### Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
+
+This event describes when a download has completed with Delivery Optimization. It's used to understand and address problems regarding downloads. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **background**  Is the download a background download?
+- **bytesFromCacheServer**  Bytes received from a cache host.
+- **bytesFromCDN**  The number of bytes received from a CDN source.
+- **bytesFromGroupPeers**  The number of bytes received from a peer in the same domain group.
+- **bytesFromIntPeers**  The number of bytes received from peers not in the same LAN or in the same domain group.
+- **bytesFromLedbat**  The number of bytes received from source using an Ledbat enabled connection.
+- **bytesFromLinkLocalPeers**  The number of bytes received from local peers.
+- **bytesFromLocalCache**  Bytes copied over from local (on disk) cache.
+- **bytesFromPeers**  The number of bytes received from a peer in the same LAN.
+- **bytesRequested**  The total number of bytes requested for download.
+- **cacheServerConnectionCount**  Number of connections made to cache hosts.
+- **cdnConnectionCount**  The total number of connections made to the CDN.
+- **cdnErrorCodes**  A list of CDN connection errors since the last FailureCDNCommunication event.
+- **cdnErrorCounts**  The number of times each error in cdnErrorCodes was encountered.
+- **cdnIp**  The IP address of the source CDN.
+- **cdnUrl**  Url of the source Content Distribution Network (CDN).
+- **congestionPrevention**  Indicates a download may have been suspended to prevent network congestion.
+- **dataSourcesTotal**  Bytes received per source type, accumulated for the whole session.
+- **downlinkBps**  The maximum measured available download bandwidth (in bytes per second).
+- **downlinkUsageBps**  The download speed (in bytes per second).
+- **downloadMode**  The download mode used for this file download session.
+- **downloadModeReason**  Reason for the download.
+- **downloadModeSrc**  Source of the DownloadMode setting.
+- **experimentId**  When running a test, this is used to correlate with other events that are part of the same test.
+- **expiresAt**  The time when the content will expire from the Delivery Optimization Cache.
+- **fileID**  The ID of the file being downloaded.
+- **fileSize**  The size of the file being downloaded.
+- **groupConnectionCount**  The total number of connections made to peers in the same group.
+- **groupID**  A GUID representing a custom group of devices.
+- **internetConnectionCount**  The total number of connections made to peers not in the same LAN or the same group.
+- **isEncrypted**  TRUE if the file is encrypted and will be decrypted after download.
+- **isThrottled**  Event Rate throttled (event represents aggregated data).
+- **isVpn**  Is the device connected to a Virtual Private Network?
+- **jobID**  Identifier for the Windows Update job.
+- **lanConnectionCount**  The total number of connections made to peers in the same LAN.
+- **linkLocalConnectionCount**  The number of connections made to peers in the same Link-local network.
+- **numPeers**  The total number of peers used for this download.
+- **numPeersLocal**  The total number of local peers used for this download.
+- **predefinedCallerName**  The name of the API Caller.
+- **restrictedUpload**  Is the upload restricted?
+- **routeToCacheServer**  The cache server setting, source, and value.
+- **rttMs**  Min, Max, Avg round-trip time to the source.
+- **rttRLedbatMs**  Min, Max, Avg round-trip time to a Ledbat enabled source.
+- **sessionID**  The ID of the download session.
+- **sessionTimeMs**  The duration of the session, in milliseconds.
+- **totalTimeMs**  Duration of the download (in seconds).
+- **updateID**  The ID of the update being downloaded.
+- **uplinkBps**  The maximum measured available upload bandwidth (in bytes per second).
+- **uplinkUsageBps**  The upload speed (in bytes per second).
+
+
+### Microsoft.OSG.DU.DeliveryOptClient.DownloadPaused
+
+This event represents a temporary suspension of a download with Delivery Optimization. It's used to understand and address problems regarding downloads. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **background**  Is the download a background download?
+- **cdnUrl**  The URL of the source CDN (Content Delivery Network).
+- **errorCode**  The error code that was returned.
+- **experimentId**  When running a test, this is used to correlate with other events that are part of the same test.
+- **fileID**  The ID of the file being paused.
+- **isVpn**  Is the device connected to a Virtual Private Network?
+- **jobID**  Identifier for the Windows Update job.
+- **predefinedCallerName**  The name of the API Caller object.
+- **reasonCode**  The reason for pausing the download.
+- **routeToCacheServer**  The cache server setting, source, and value.
+- **sessionID**  The ID of the download session.
+- **sessionTimeMs**  The duration of the download session, spanning multiple jobs, in milliseconds.
+- **totalTimeMs**  The duration of the download, in milliseconds.
+- **updateID**  The ID of the update being paused.
+
+
+### Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
+
+This event sends data describing the start of a new download to enable Delivery Optimization. It's used to understand and address problems regarding downloads. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **background**  Indicates whether the download is happening in the background.
+- **bytesRequested**  Number of bytes requested for the download.
+- **callerAppPackageName**  The caller app package name.
+- **cdnUrl**  The URL of the source Content Distribution Network (CDN).
+- **costFlags**  A set of flags representing network cost.
+- **deviceProfile**  Identifies the usage or form factor (such as Desktop, Xbox, or VM).
+- **diceRoll**  Random number used for determining if a client will use peering.
+- **doClientVersion**  The version of the Delivery Optimization client.
+- **downloadMode**  The download mode used for this file download session (CdnOnly = 0, Lan = 1, Group = 2, Internet = 3, Simple = 99, Bypass = 100).
+- **downloadModeReason**  Reason for the download.
+- **downloadModeSrc**  Source of the DownloadMode setting (KvsProvider = 0, GeoProvider = 1, GeoVerProvider = 2, CpProvider = 3, DiscoveryProvider = 4, RegistryProvider = 5, GroupPolicyProvider = 6, MdmProvider = 7, SettingsProvider = 8, InvalidProviderType = 9).
+- **errorCode**  The error code that was returned.
+- **experimentId**  ID used to correlate client/services calls that are part of the same test during A/B testing.
+- **fileID**  The ID of the file being downloaded.
+- **filePath**  The path to where the downloaded file will be written.
+- **fileSize**  Total file size of the file that was downloaded.
+- **fileSizeCaller**  Value for total file size provided by our caller.
+- **groupID**  ID for the group.
+- **isEncrypted**  Indicates whether the download is encrypted.
+- **isThrottled**  Indicates the Event Rate was throttled (event represent aggregated data).
+- **isVpn**  Indicates whether the device is connected to a Virtual Private Network.
+- **jobID**  The ID of the Windows Update job.
+- **peerID**  The ID for this delivery optimization client.
+- **predefinedCallerName**  Name of the API caller.
+- **routeToCacheServer**  Cache server setting, source, and value.
+- **sessionID**  The ID for the file download session.
+- **setConfigs**  A JSON representation of the configurations that have been set, and their sources.
+- **updateID**  The ID of the update being downloaded.
+- **UusVersion**  The version of the undocked update stack.
+
+
+### Microsoft.OSG.DU.DeliveryOptClient.FailureCdnCommunication
+
+This event represents a failure to download from a CDN with Delivery Optimization. It's used to understand and address problems regarding downloads. The data collected with this event is used to help keep Windows up to date.
+
+The following fields are available:
+
+- **cdnHeaders**  The HTTP headers returned by the CDN.
+- **cdnIp**  The IP address of the CDN.
+- **cdnUrl**  The URL of the CDN.
+- **errorCode**  The error code that was returned.
+- **errorCount**  The total number of times this error code was seen since the last FailureCdnCommunication event was encountered.
+- **experimentId**  When running a test, this is used to correlate with other events that are part of the same test.
+- **fileID**  The ID of the file being downloaded.
+- **httpStatusCode**  The HTTP status code returned by the CDN.
+- **isHeadRequest**  The type of  HTTP request that was sent to the CDN. Example: HEAD or GET
+- **peerType**  The type of peer (LAN, Group, Internet, CDN, Cache Host, etc.).
+- **requestOffset**  The byte offset within the file in the sent request.
+- **requestSize**  The size of the range requested from the CDN.
+- **responseSize**  The size of the range response received from the CDN.
+- **sessionID**  The ID of the download session.
+
+
+## Windows Update events
+
+### Microsoft.Windows.Update.Aggregator.UusCoreHealth.HealthAggregatorSummary
+
+This event is a summary of UUS health indicators.
+
+The following fields are available:
+
+- **Fallback**  Failover information.
+- **FlightId**  Payload that is being sent.
+- **IsStable**  Boolean if the payload is in image.
+- **Lock**  Lock identifier.
+- **UpdateId**  Update identifier.
+- **UusVersion**  Version of the undocked payload.
+- **VersionActivationsSinceLastBoot**  Number of activations since last reboot.
+
+
+### Microsoft.Windows.Update.DeviceUpdateAgent.UpdateAgentInitialize
+
+This event sends data for initializing a new update session for the new device manifest UUP (Unified Update Platform) update scenario, which is used to install a device manifest describing a set of driver packages. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **errorCode**  The error code returned for the current session initialization.
+- **flightId**  The unique identifier for each flight.
+- **flightMetadata**  Contains the FlightId and the build being flighted.
+- **objectId**  Unique value for each Update Agent mode.
+- **relatedCV**  Correlation vector value generated from the latest USO scan.
+- **result**  Result of the initialize phase of the update. 0 = Succeeded, 1 = Failed, 2 = Cancelled, 3 = Blocked, 4 = BlockCancelled.
+- **scenarioId**  The scenario ID. Example: MobileUpdate, DesktopLanguagePack, DesktopFeatureOnDemand, or DesktopDriverUpdate.
+- **sessionData**  Contains instructions to update agent for processing FODs and DUICs (Null for other scenarios).
+- **sessionId**  Unique value for each Update Agent mode attempt.
+- **updateId**  Unique ID for each update.
+
+
+### Microsoft.Windows.Update.Orchestrator.Client.AppUpdateInstallResult
+
+This event reports installation result details of expedited apps.
+
+The following fields are available:
+
+- **Completed**  Whether the installation completed.
+- **DeploymentAttempted**  Whether the deployment was attempted.
+- **DeploymentErrorCode**  The error code resulting from the deployment attempt.
+- **DeploymentExtendedErrorCode**  The extended error code resulting from the deployment attempt.
+- **InstallFailureReason**  On failure, the InstallFailureReason reported.
+- **OperationStatus**  OperationStatus result reported by the installation attempt.
+- **Succeeded**  Whether the installation succeeded.
+- **updaterId**  The UpdaterId associated with this expedited app.
+- **UusVersion**  The version of the UUS stack currently active.
+- **VelocityEnabled**  Whether the velocity tag for the expedited app is enabled.
+
+
+### Microsoft.Windows.Update.Orchestrator.Client.BizCriticalStoreAppInstallAlreadyRunning
+
+This event indicates that another instance is currently attempting to install business critical store updates.
+
+The following fields are available:
+
+- **UusVersion**  The version of the UUS Stack currently active.
+
+
+### Microsoft.Windows.Update.Orchestrator.Client.BizCriticalStoreAppInstallResult
+
+This event returns the result after installing a business critical store application. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **AppInstallState**  The application installation state.
+- **HRESULT**  The result code (HResult) of the install.
+- **PFN**  The package family name of the package being installed.
+- **updaterId**  The Id of the updater.
+- **UusVersion**  The version of the UUS stack currently active.
+
+
+### Microsoft.Windows.Update.Orchestrator.Client.EdgeUpdateResult
+
+This event sends data indicating the result of invoking the edge updater. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **ExitCode**  The exit code that was returned.
+- **HRESULT**  The result code (HResult) of the operation.
+- **UusVersion**  The version of the UUS stack currently active.
+- **VelocityEnabled**  A flag that indicates if velocity is enabled.
+- **WorkCompleted**  A flag that indicates if work is completed.
+
+
+### Microsoft.Windows.Update.Orchestrator.Client.MACUpdateInstallResult
+
+This event reports the installation result details of the MACUpdate expedited application.
+
+The following fields are available:
+
+- **Completed**  Indicates whether the installation is complete.
+- **DeploymentAttempted**  Whether the deployment was attempted.
+- **DeploymentErrorCode**  The error code resulting from the deployment attempt.
+- **DeploymentExtendedErrorCode**  The extended error code resulting from the deployment attempt.
+- **InstallFailureReason**  Indicates the reason an install failed.
+- **IsRetriableError**  Indications whether the error is retriable.
+- **OperationStatus**  Returns the operation status result reported by the installation attempt.
+- **Succeeded**  Indicates whether the installation succeeded.
+- **UusVersion**  The version of the UUS stack currently active.
+- **VelocityEnabled**  Indicates whether the velocity tag for MACUpdate is enabled.
+
+
+### Microsoft.Windows.Update.Orchestrator.UpdatePolicyCacheRefresh
+
+This event sends data on whether Update Management Policies were enabled on a device, to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **configuredPoliciescount**  Number of policies on the device.
+- **policiesNamevaluesource**  Policy name and source of policy (group policy, MDM, or flight).
+- **updateInstalluxsetting**  Indicates whether a user has set policies via a user experience option.
+- **UusVersion**  Active version of UUS.
+
+
+### Microsoft.Windows.Update.Orchestrator.Worker.EulaAccepted
+
+Indicates that EULA for an update has been accepted.
+
+The following fields are available:
+
+- **HRESULT**  Was the EULA acceptance successful.
+- **publisherIntent**  Publisher Intent ID associated with the update.
+- **reason**  Reason for EULA acceptance.
+- **update**  Update for which EULA has been accepted.
+- **UusVersion**  The version of the UUS stack currently active.
+
+
+### Microsoft.Windows.Update.Orchestrator.Worker.OobeUpdateApproved
+
+This event signifies an update being approved around the OOBE time period. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **approved**  Flag to determine if it's approved or not.
+- **provider**  The provider related to which the update is approved.
+- **publisherIntent**  The publisher intent of the Update.
+- **update**  Additional information about the Update.
+- **UusVersion**  The version of the UUS Stack currently active.
+
+
+### Microsoft.Windows.Update.Orchestrator.Worker.SetIpuMode
+
+This event indicates that a provider is setting the inplace upgrade mode.
+
+The following fields are available:
+
+- **flightId**  Flight Identifier.
+- **mode**  The value being set.
+- **provider**  The provider that is getting the value.
+- **reason**  The reason the value is being set.
+- **uniqueId**  Update Identifier.
+- **UusVersion**  The version of the UUS Stack currently active.
+
+
+### Microsoft.Windows.Update.Orchestrator.Worker.UpdateActionCritical
+
+This event informs the update related action being performed around the OOBE timeframe. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **action**  The type of action being performed (Install or download etc.).
+- **connectivity**  Informs if the device is connected to network while this action is performed.
+- **freeDiskSpaceInMB**  Amount of free disk space.
+- **freeDiskSpaceInMBDelta**  Amount of free disk space.
+- **interactive**  Informs if this action is caused due to user interaction.
+- **nextAction**  Next action to be performed.
+- **priority**  The CPU and IO priority this action is being performed on.
+- **provider**  The provider that is being invoked to perform this action (WU, Legacy UO Provider etc.).
+- **publisherIntent**  ID for the metadata associated with the update.
+- **scenario**  The result of the action being performed.
+- **update**  Update related metadata including UpdateId.
+- **uptimeMinutes**  Duration USO for up for in the current boot session.
+- **uptimeMinutesDelta**  The change in device uptime while this action was performed.
+- **UusVersion**  The version of the UUS stack currently active.
+- **wilActivity**  Wil Activity related information.
+
+### Microsoft.Windows.Update.SIHClient.CheckForUpdatesStarted
+
+Scan event for Server Initiated Healing client.
+
+The following fields are available:
+
+- **CallerApplicationName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EventInstanceID**  A globally unique identifier for event instance.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **TargetMetadataVersion**  The detected version of the self healing engine that is currently downloading or downloaded.
+- **UusVersion**  UUS version.
+- **WUDeviceID**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+
+
+### Microsoft.Windows.Update.SIHClient.CheckForUpdatesSucceeded
+
+Scan event for Server Initiated Healing client
+
+The following fields are available:
+
+- **ApplicableUpdateInfo**  Metadata for the updates which were detected as applicable.
+- **CachedEngineVersion**  The engine DLL version that is being used.
+- **CallerApplicationName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EventInstanceID**  A globally unique identifier for event instance.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Launch event for Server Initiated Healing client.
+- **TargetMetadataVersion**  The detected version of the self healing engine that is currently downloading or downloaded.
+- **UusVersion**  Active UUS Version.
+- **WUDeviceID**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+
+
+### Microsoft.Windows.Update.SIHClient.DownloadSucceeded
+
+Download process event for target update on SIH Client.
+
+The following fields are available:
+
+- **CachedEngineVersion**  Version of the Cache Engine.
+- **CallerApplicationName**  Name of application making the Windows Update request. Used to identify context of request.
+- **DownloadType**  Type of Download.
+- **EventInstanceID**  ID of the Event Instance being fired.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **TargetMetadataVersion**  Version of the Metadata which is being targeted for an update.
+- **UpdateID**  Identifier associated with the specific piece of content.
+- **UusVersion**  The version of the Update Undocked Stack.
+- **WUDeviceID**  Global Device ID utilized to identify Device.
+
+
+### Microsoft.Windows.Update.SIHClient.TaskRunCompleted
+
+This event is a launch event for Server Initiated Healing client.
+
+The following fields are available:
+
+- **CallerApplicationName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **CmdLineArgs**  Command line arguments passed in by the caller.
+- **EventInstanceID**  A globally unique identifier for event instance.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UusVersion**  The version of the Update Undocked Stack.
+- **WUDeviceID**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+
+
+### Microsoft.Windows.Update.SIHClient.TaskRunStarted
+
+This event is a launch event for Server Initiated Healing client.
+
+The following fields are available:
+
+- **CallerApplicationName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **CmdLineArgs**  Command line arguments passed in by the caller.
+- **EventInstanceID**  A globally unique identifier for event instance.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UusVersion**  The version of the Update Undocked Stack.
+- **WUDeviceID**  Unique device ID controlled by the software distribution client.
+
+
+### Microsoft.Windows.Update.Undocked.Brain.ActiveVersionUpdated
+
+This event gets fired when the active version of the Undocked Update Stack is being updated/
+
+The following fields are available:
+
+- **Fallback**  Initiated Process.
+- **FlightID**  FlightID associated.
+- **Lock**  Lock Group Name.
+- **MinutesSinceInstall**  Time to complete process.
+- **Stable**  Is VersionActive from stable.
+- **UpdateID**  Update identifier.
+- **VersionActive**  The now active version of the UUS stack.
+- **VersionPrevious**  The previous active version of the UUS stack.
+
+
+### Microsoft.Windows.Update.Undocked.Brain.FailoverVersionExcluded
+
+This event indicates Failover tried to exclude an UUS Version.
+
+The following fields are available:
+
+- **AlreadyExcluded**  Boolean.
+- **Exception**  The exception encountered during exclusion.
+- **ExclusionReason**  Reason for the exclusion.
+- **Success**  Success or failure indicator.
+- **VerFailover**  The actual UUS Version that failover was running for.
+
+
+### Microsoft.Windows.Update.Undocked.UpdateAgent.DownloadRequest
+
+Download request for undocked update agent
+
+The following fields are available:
+
+- **errorCode**  Error code.
+- **flightId**  FlightID of the package.
+- **rangeRequestState**  State of request for download range.
+- **relatedCV**  CV for telemetry mapping.
+- **result**  Result code.
+- **sessionId**  Logging identification.
+- **updateId**  Identifier for payload.
+- **uusVersion**  Version of the UUS stack being installed.
+
+
+### Microsoft.Windows.Update.Undocked.UpdateAgent.Initialize
+
+Initialization event of undocked update agent.
+
+The following fields are available:
+
+- **errorCode**  Error code.
+- **flightId**  FlightID of the package.
+- **flightMetadata**  Metadata.
+- **relatedCV**  CV for telemetry mapping.
+- **result**  Result code.
+- **sessionData**  Additional logging.
+- **sessionId**  Logging identification.
+- **updateId**  Identifier for payload.
+- **uusVersion**  Version of the UUS stack being installed.
+
+
+### Microsoft.Windows.Update.Undocked.UpdateAgent.Install
+
+Install event of undocked update agent.
+
+The following fields are available:
+
+- **errorCode**  Error code.
+- **flightId**  FlightID of the package.
+- **folderExists**  Boolean.
+- **packageNewer**  version of newer package.
+- **relatedCV**  CV for telemetry mapping.
+- **result**  Result code.
+- **retryCount**  result count.
+- **sessionId**  Logging identification.
+- **updateId**  Identifier for payload.
+- **uusVersion**  Version of the UUS stack being installed.
+
+
+### Microsoft.Windows.Update.Undocked.UpdateAgent.ModeStart
+
+Undocked update agent mode start event.
+
+The following fields are available:
+
+- **flightId**  FlightID of the package.
+- **mode**  Install or Download mode.
+- **relatedCV**  CV for telemetry mapping.
+- **sessionId**  Logging identification.
+- **updateId**  Identifier for payload.
+- **uusVersion**  Version of the UUS stack being installed.
+
+
+### Microsoft.Windows.Update.Undocked.UpdateAgent.Payload
+
+Payload event of undocked update agent.
+
+The following fields are available:
+
+- **errorCode**  Error code.
+- **fileCount**  Number of files to download.
+- **flightId**  FlightID of the package.
+- **mode**  Install or Download mode.
+- **relatedCV**  CV for telemetry mapping.
+- **result**  Result code.
+- **sessionId**  Logging identification.
+- **updateId**  Identifier for payload.
+- **uusVersion**  Version of the UUS stack being installed.
+
+
+### Microsoft.Windows.Update.WUClient.CheckForUpdatesCanceled
+
+This event checks for updates canceled on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **AADDeviceTicketResult**  Identifies result of AAD Device Token Acquisition.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce.
+- **NumFailedAudienceMetadataSignatures**  Number of audience Publisher Intent metadata signatures checks which failed for new metadata synced.
+- **NumFailedMetadataSignatures**  Number of metadata signatures checks which failed for new metadata synced download.
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **ServiceUrl**  Environment URL for which a device is configured to scan.
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **SyncType**  Describes the type of scan for this event (1-Full Sync, 2-Delta Sync, 3-Full CatScan Sync, 4-Delta CatScan Sync).
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.CheckForUpdatesFailed
+
+This event checks for failed updates on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **AADDeviceTicketResult**  Identifies result of AAD Device Token Acquisition.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **FailedUpdateInfo**  Information about the update failure.
+- **HandlerInfo**  Blob of Handler related information.
+- **HandlerType**  Name of Handler.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce.
+- **NumFailedAudienceMetadataSignatures**  Number of audience PublisherIntent metadata signatures checks which failed for new metadata synced.
+- **NumFailedMetadataSignatures**  Number of metadata signatures checks which failed for new metadata synced download.
+- **Props**  A bitmask for additional flags associated with the Windows Update request (IsInteractive, IsSeeker, AllowCachedResults, DriverSyncPassPerformed, IPv4, IPv6, Online, ExtendedMetadataIncl, WUfb).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **ServiceUrl**  Environment URL for which a device is configured to scan.
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult.).
+- **SyncType**  Describes the type of scan for this event (1-Full Sync, 2-Delta Sync, 3-Full CatScan Sync, 4-Delta CatScan Sync).
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UusVersion**  Active UUSVersion.
+
+
+### Microsoft.Windows.Update.WUClient.CheckForUpdatesRetry
+
+This event checks for update retries on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **ServiceUrl**  Environment URL for which a device is configured to scan.
+- **SyncType**  Describes the type of scan for this event (1-Full Sync, 2-Delta Sync, 3-Full CatScan Sync, 4-Delta CatScan Sync).
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClient.CheckForUpdatesScanInitFailed
+
+This event checks for failed update initializations on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **AADDeviceTicketResult**  Identifies result of AAD Device Token Acquisition.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce.
+- **NumFailedAudienceMetadataSignatures**  Number of audience PublisherIntent metadata signatures checks which failed for new metadata synced.
+- **NumFailedMetadataSignatures**  Number of metadata signatures checks which failed for new metadata synced download.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **ServiceUrl**  Environment URL for which a device is configured to scan.
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **SyncType**  Describes the type of scan the event was.
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UusVersion**  Active UUS version.
+
+### Microsoft.Windows.Update.WUClient.CheckForUpdatesServiceRegistrationFailed
+
+This event checks for updates for failed service registrations the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **AADDeviceTicketResult**  Identifies result of AAD Device Token Acquisition.
+- **CallerName**  For drivers targeted to a specific device model, this is the version release of the drivers being distributed to the device.
+- **Context**  Context of failure.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce.
+- **NumFailedAudienceMetadataSignatures**  Number of audience Publisher Intent metadata signatures checks which failed for new metadata synced.
+- **NumFailedMetadataSignatures**  Number of audience Publisher Intent metadata signatures checks which failed for new metadata synced download.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **ServiceUrl**  Environment URL for which a device is configured to scan.
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **SyncType**  Describes the type of scan the event was.
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.CheckForUpdatesSucceeded
+
+This event checks for successful updates on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **AADDeviceTicketInfo**  Identifies result of AAD Device Token Acquisition.
+- **AADDeviceTicketResult**  Identifies result of AAD Device Token Acquisition.
+- **ApplicableUpdateInfo**  Metadata for the updates which were detected as applicable.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **HandlerInfo**  HandlerInfo Blob.
+- **HandlerType**  HandlerType blob.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce.
+- **NumberOfApplicableUpdates**  Number of updates which were ultimately deemed applicable to the system after detection process is complete.
+- **NumFailedAudienceMetadataSignatures**  Number of audience PublisherIntent metadata signatures checks which failed for new metadata synced.
+- **NumFailedMetadataSignatures**  Number of metadata signatures checks which failed for new metadata synced download.
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **ServiceUrl**  Environment URL for which a device is configured to scan.
+- **SyncType**  Describes the type of scan for this event (1-Full Sync, 2-Delta Sync, 3-Full CatScan Sync, 4-Delta CatScan Sync).
+- **UusVersion**  Active UUS version.
+- **WUFBInfo**  WufBinfoBlob.
+
+
+### Microsoft.Windows.Update.WUClient.CommitFailed
+
+This event checks for failed commits on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Indicates the purpose of the event - whether because scan started, succeeded, failed, etc.
+- **ExtendedStatusCode**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.CommitStarted
+
+This event tracks the commit started event on the Windows Update client. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Current active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.CommitSucceeded
+
+This event is used to track the commit succeeded process, after the update installation, when the software update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Indicates the purpose of the event - whether scan started, succeeded, failed, etc.
+- **FlightId**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **HandlerType**  The specific ID of the flight the device is getting.
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.DownloadCanceled
+
+This event tracks the download canceled event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Name of application making the Windows Update request. Used to identify context of request.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **DownloadPriority**  Indicates the priority of the download activity.
+- **DownloadStartTimeUTC**  Download start time to measure the length of the session.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerInfo**  HandlerInfo Blob.
+- **HandlerType**  HandlerType Blob.
+- **HostName**  Identifies the hostname.
+- **NetworkCost**  Identifies the network cost.
+- **NetworkRestrictionStatus**  When download is done, identifies whether network switch happened to restricted.
+- **Props**  A bitmask for additional flags associated with the download request.
+- **Reason** Cancel reason information.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.DownloadFailed
+
+This event tracks the download failed event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Name of application making the Windows Update request. Used to identify context of request.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Provides context about distribution stack for reporting.
+- **DownloadPriority**  Indicates the priority of the download activity.
+- **DownloadStartTimeUTC**  Start time to measure length of session.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerInfo**  HandlerInfo Blob.
+- **HandlerType**  HandlerType Blob.
+- **HostName**  Identifies the hostname.
+- **NetworkCost**  Identifies the network cost.
+- **NetworkRestrictionStatus**  When download is done, identifies whether network switch happened to restricted.
+- **Props**  Commit Props (MergedUpdate).
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.DownloadPaused
+
+This event is fired when the Download stage is paused.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **DownloadPriority**  Indicates the priority of the download activity.
+- **EventType**  Indicates the purpose of the event - whether because scan started, succeeded, failed, etc.
+- **FlightId**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **HandlerInfo**  Blob of Handler related information.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Commit Props (MergedUpdate)
+- **RegulationResult**  The result code (HResult) of the last attempt to contact the regulation web service for download regulation of update content.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClient.DownloadQueued
+
+This event tracks the download queued event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **DownloadPriority**  Indicates the priority of the download activity.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerInfo**  Blob of Handler related information.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Commit Props (MergedUpdate)
+- **QueuedReason**  The reason in which a download has been queued.
+- **RegulationResult**  The result code (HResult) of the last attempt to contact the regulation web service for download regulation of update content.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClient.DownloadResumed
+
+This event is fired when the Download of content is continued from a pause state.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **DownloadPriority**  Indicates the priority of the download activity.
+- **EventType**  Indicates the purpose of the event - whether because scan started, succeeded, failed, etc.
+- **FlightId**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **HandlerInfo**  Blob of Handler related information.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Commit Props (MergedUpdate)
+- **RegulationResult**  The result code (HResult) of the last attempt to contact the regulation web service for download regulation of update content.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClient.InstallCanceled
+
+This event tracks the install canceled event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Install props (UsedSystemVolume, MergedUpdate, IsSuccessFailurePostReboot, isInteractive)
+- **Reason**  Install canceled reason.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.InstallFailed
+
+This event tracks the install failed event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerInfo**  Handler specific information.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Install props (UsedSystemVolume, MergedUpdate, IsSuccessFailurePostReboot, isInteractive)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UndockedComponents**  Information about the undocked components.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.InstallRebootPending
+
+This event tracks the install reboot pending event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of application making the Windows Update request. Used to identify context of request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props** Install props (UsedSystemVolume, MergedUpdate, IsSuccessFailurePostReboot, isInteractive)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+### Microsoft.Windows.Update.WUClient.InstallStarted
+
+The event tracks the install started event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props** Install props (UsedSystemVolume, MergedUpdate, IsSuccessFailurePostReboot, isInteractive)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.InstallSucceeded
+
+The event tracks the successful install event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerInfo**  Handler specific datapoints.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props** Install props (UsedSystemVolume, MergedUpdate, IsSuccessFailurePostReboot, isInteractive)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UndockedComponents**  Information about the undocked components.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.RevertFailed
+
+This event tracks the revert failed event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Commit Props (MergedUpdate)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClient.RevertStarted
+
+This event tracks the revert started event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Revert props (MergedUpdate)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClient.RevertSucceeded
+
+The event tracks the successful revert event when the update client is trying to update the device. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BundleId**  Identifier associated with the specific content bundle; shouldn't be all zeros if the bundleID was found.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ClassificationId**  Classification identifier of the update content.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **HandlerType**  Indicates the kind of content (app, driver, windows patch, etc.).
+- **Props**  Revert props (MergedUpdate)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **UndockedComponents**  Information consisting of Id, HR, ModuleVer, LoadProps, Path relating to the Undocked component.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClientExt.DownloadCheckpoint
+
+This is a checkpoint event between the Windows Update download phases for UUP content. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **FileId**  Unique identifier for the downloaded file.
+- **FileName**  Name of the downloaded file.
+- **FlightId**  The specific ID of the flight the device is getting.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClientExt.DownloadHeartbeat
+
+This event allows tracking of ongoing downloads and contains data to explain the current state of the download. The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **BytesTotal**  Total bytes to transfer for this content.
+- **BytesTransferred**  Total bytes transferred for this content at the time of heartbeat.
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **ConnectionStatus**  Indicates the connectivity state of the device at the time of heartbeat.
+- **CurrentError**  Last (transient) error encountered by the active download.
+- **DownloadHBFlags**  Flags indicating if power state is ignored.
+- **DownloadState**  Current state of the active download for this content (queued, suspended, progressing).
+- **EventType**  Possible values are "Child", "Bundle", "Release" or "Driver".
+- **FlightId**  The specific ID of the flight the device is getting.
+- **MOAppDownloadLimit**  Mobile operator cap on size of application downloads, if any.
+- **MOUpdateDownloadLimit**  Mobile operator cap on size of OS update downloads, if any.
+- **PowerState**  Indicates the power state of the device at the time of heartbeart (DC, AC, Battery Saver, Connected Standby).
+- **Props**  Commit Props (MergedUpdate)
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **ResumeCount**  Number of times this active download has resumed from a suspended state.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **SuspendCount**  Number of times this active download has entered a suspended state.
+- **SuspendReason**  Last reason for which this active download has entered suspended state.
+- **UpdateId**  Identifier associated with the specific piece of content.
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClientExt.UpdateMetadataIntegrityFragmentSigning
+
+This event helps to identify whether update content has been tampered with and protects against man-in-the-middle attack. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EndpointUrl**  URL of the endpoint where client obtains update metadata. Used to identify test vs staging vs production environments.
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **LeafCertId**  IntegralIDfrom the FragmentSigning data for certificate which failed.
+- **ListOfSHA256OfIntermediateCerData**  List of Base64 string of hash of intermediate cert data.
+- **MetadataIntegrityMode**  Base64 string of the signature associated with the update metadata (specified by revision id).
+- **RawMode**  Raw unparsed mode string from the SLS response. Null if not applicable.
+- **RawValidityWindowInDays**  Raw unparsed string of validity window in effect when verifying the timestamp.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **SHA256OfLeafCerData**  Base64 string of hash of the leaf cert data.
+- **SLSPrograms**  A test program a machine may be opted in. Examples include "Canary" and "Insider Fast".
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **UusVersion**  Active UUS version.
+
+
+### Microsoft.Windows.Update.WUClientExt.UpdateMetadataIntegrityGeneral
+
+Ensures Windows Updates are secure and complete. Event helps to identify whether update content has been tampered with and protects against man-in-the-middle attack.
+
+The following fields are available:
+
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EndpointUrl**  Ensures Windows Updates are secure and complete. Event helps to identify whether update content has been tampered with and protects against man-in-the-middle attack.
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce
+- **RawMode**  Raw unparsed mode string from the SLS response. May be null if not applicable.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.)
+- **SLSPrograms**  A test program a machine may be opted in. Examples include "Canary" and "Insider Fast".
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult)
+- **UusVersion**  The version of the Update Undocked Stack
+
+
+### Microsoft.Windows.Update.WUClientExt.UpdateMetadataIntegritySignature
+
+This event helps to identify whether update content has been tampered with and protects against man-in-the-middle attack. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EndpointUrl**  URL of the endpoint where client obtains update metadata. Used to identify test vs staging vs production environments.
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **LeafCertId**  IntegralIDfrom the FragmentSigning data for certificate which failed.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce.
+- **MetadataSignature**  Base64 string of the signature associated with the update metadata (specified by revision id).
+- **RawMode**  Raw unparsed mode string from the SLS response. Null if not applicable.
+- **RevisionId**  Identifies the revision of this specific piece of content.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **SHA256OfLeafCertPublicKey**  Base64 string of hash of the leaf cert public key.
+- **SHA256OfTimestampToken**  Base64 string of hash of the timestamp token blob.
+- **SignatureAlgorithm**  Hash algorithm for the metadata signature.
+- **SLSPrograms**  A test program a machine may be opted in. Examples include "Canary" and "Insider Fast".
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **TimestampTokenId**  Created time encoded in the timestamp blob. This will be zeroed if the token is malformed and decoding failed.
+- **UpdateID**  String of update ID and version number.
+- **UusVersion**  The version of the Update Undocked Stack.
+
+
+### Microsoft.Windows.Update.WUClientExt.UpdateMetadataIntegrityTimestamp
+
+This event helps to identify whether update content has been tampered with and protects against man-in-the-middle attack. The data collected with this event is used to help keep Windows secure and up to date.
+
+The following fields are available:
+
+- **CallerName**  Name of the application making the Windows Update Request. Used to identify context of the request.
+- **EndpointUrl**  URL of the endpoint where client obtains update metadata. Used to identify test vs staging vs production environments.
+- **ExtendedStatusCode**  Secondary status code for certain scenarios where StatusCode wasn't specific enough.
+- **MetadataIntegrityMode**  Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce
+- **RawMode**  Raw unparsed mode string from the SLS response. Null if not applicable.
+- **ServiceGuid**  Identifier for the service to which the software distribution client is connecting (Windows Update, Windows Store, etc.).
+- **SHA256OfTimestampToken**  Base64 string of hash of the timestamp token blob.
+- **SLSPrograms**  A test program a machine may be opted in. Examples include "Canary" and "Insider Fast".
+- **StatusCode**  Result code of the event (success, cancellation, failure code HResult).
+- **TimestampTokenId**  Created time encoded in the timestamp blob. This will be zeroed if the token is itself malformed and decoding failed.
+- **UusVersion**  Active UUS Version.
+- **ValidityWindowInDays**  Validity window in effect when verifying the timestamp.
+
+
+### Microsoft.Windows.Update.WUClientExt.UUSLoadModuleFailed
+
+This is the UUSLoadModule failed event and is used to track the failure of loading an undocked component.  The data collected with this event is used to help keep Windows up to date and secure.
+
+The following fields are available:
+
+- **ModulePath**  Path of the undocked module.
+- **ModuleVersion**  Version of the undocked module.
+- **Props**  A bitmask for flags associated with loading the undocked module.
+- **RelatedCV**  The previous correlation vector that was used by the client, before swapping with a new one.
+- **StatusCode**  Result of the undocked module loading operation.
+- **UusSessionID**  Unique ID used to create the UUS session.
+- **UusVersion**  Active UUS version.
+
+
+## Winlogon events
+
+### Microsoft.Windows.Security.Winlogon.SetupCompleteLogon
+
+This event signals the completion of the setup process. It happens only once during the first logon.
\ No newline at end of file
diff --git a/windows/privacy/required-windows-11-diagnostic-events-and-fields.md b/windows/privacy/required-windows-11-diagnostic-events-and-fields.md
index 15649caaf5..dc34bef60a 100644
--- a/windows/privacy/required-windows-11-diagnostic-events-and-fields.md
+++ b/windows/privacy/required-windows-11-diagnostic-events-and-fields.md
@@ -7,7 +7,7 @@ ms.localizationpriority: high
 author: DHB-MSFT
 ms.author: danbrown
 manager: laurawi
-ms.date: 04/24/2024
+ms.date: 10/08/2024
 ms.collection: privacy-windows
 ms.topic: reference
 ---
@@ -19,6 +19,8 @@ ms.topic: reference
 
 - Windows 11, version 21H2
 
+> [!IMPORTANT]
+> This version of Windows 11 has reached its end of servicing date. For more information, see [Microsoft Product Lifecyle](/lifecycle/products).
 
 Required diagnostic data gathers a limited set of information that is critical for understanding the device and its configuration including: basic device information, quality-related information, app compatibility, and Microsoft Store.
 
@@ -28,6 +30,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
 
 You can learn more about Windows functional and diagnostic data through these articles:
 
+- [Required diagnostic events and fields for Windows 11, version 24H2](required-diagnostic-events-fields-windows-11-24H2.md)
 - [Required diagnostic events and fields for Windows 11, versions 23H2 and 22H2](required-diagnostic-events-fields-windows-11-22H2.md)
 - [Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
 - [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
@@ -167,7 +170,6 @@ The following fields are available:
 
 - **AppraiserVersion**  The version of the appraiser binary generating the events.
 
-
 ### Microsoft.Windows.Appraiser.General.DatasourceApplicationFileRemove
 
 This event indicates that the DatasourceApplicationFile object is no longer present. The data collected with this event is used to help keep Windows up to date.
@@ -438,7 +440,7 @@ The following fields are available:
 - **DriverAvailableInbox**  Is a driver included with the operating system for this PNP device?
 - **DriverAvailableOnline**  Is there a driver for this PNP device on Windows Update?
 - **DriverAvailableUplevel**  Is there a driver on Windows Update or included with the operating system for this PNP device?
-- **DriverBlockOverridden**  Is there's a driver block on the device that has been overridden?
+- **DriverBlockOverridden**  Is there a driver block on the device that has been overridden?
 - **NeedsDismissAction**  Will the user would need to dismiss a warning during Setup for this device?
 - **NotRegressed**  Does the device have a problem code on the source OS that is no better than the one it would have on the target OS?
 - **SdbDeviceBlockUpgrade**  Is there an SDB block on the PNP device that blocks upgrade?
@@ -1475,7 +1477,7 @@ The following fields are available:
 - **AzureOSIDPresent**  Represents the field used to identify an Azure machine.
 - **AzureVMType**  Represents whether the instance is Azure VM PAAS, Azure VM IAAS or any other VMs.
 - **CDJType**  Represents the type of cloud domain joined for the machine.
-- **CommercialId**  Represents the GUID for the commercial entity that the device is a member of.  Will be used to reflect insights back to customers.
+- **CommercialId**  Represents the GUID for the commercial entity that the device is a member of. Will be used to reflect insights back to customers.
 - **ContainerType**  The type of container, such as process or virtual machine hosted.
 - **EnrollmentType**  Defines the type of MDM enrollment on the device.
 - **HashedDomain**  The hashed representation of the user domain used for login.
@@ -1490,7 +1492,6 @@ The following fields are available:
 - **ServerFeatures**  Represents the features installed on a Windows Server. This can be used by developers and administrators who need to automate the process of determining the features installed on a set of server computers.
 - **SystemCenterID**  The Configuration Manager ID is an anonymized one-way hash of the Active Directory Organization identifier
 
-
 ### Census.Firmware
 
 This event sends data about the BIOS and startup embedded in the device. The data collected with this event is used to help keep Windows secure and up to date.
@@ -1948,7 +1949,7 @@ Fires at the beginning and end of the HVCI auto-enablement process in sysprep.
 
 The following fields are available:
 
-- **wilActivity**  Contains the thread ID used to match the begin and end events, and for the end event also a HResult indicating sucess or failure.
+- **wilActivity**  Contains the thread ID used to match the begin and end events, and for the end event also a HResult indicating success or failure.
 
 
 ### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciAlreadyEnabled
@@ -1956,6 +1957,7 @@ The following fields are available:
 Fires when HVCI is already enabled so no need to continue auto-enablement.
 
 
+
 ### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciScanGetResultFailed
 
 Fires when driver scanning fails to get results.
@@ -2197,6 +2199,7 @@ The following fields are available:
 - **uts**  A bit field, with 2 bits being assigned to each user ID listed in xid. This field is omitted if all users are retail accounts.
 - **xid**  A list of base10-encoded XBOX User IDs.
 
+
 ## Common data fields
 
 ### Ms.Device.DeviceInventoryChange
@@ -2212,6 +2215,7 @@ The following fields are available:
 - **syncId**  A string used to group StartSync, EndSync, Add, and Remove operations that belong together. This field is unique by Sync period and is used to disambiguate in situations where multiple agents perform overlapping inventories for the same object.
 
 
+
 ## Component-based servicing events
 
 ### CbsServicingProvider.CbsCapabilityEnumeration
@@ -2985,6 +2989,7 @@ The following fields are available:
 - **PreviousExecutionState**  Windows Mixed Reality Portal app prior execution state.
 - **wilActivity**  Windows Mixed Reality Portal app wilActivity ID.
 
+
 ### Microsoft.Windows.Shell.HolographicFirstRun.AppLifecycleService_Resuming
 
 This event indicates Windows Mixed Reality Portal app resuming. This event is also used to count WMR device. The data collected with this event is used to keep Windows performing properly.
@@ -3570,7 +3575,7 @@ This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedevic
 
 ### Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
 
-This event provides data on Unified Update Platform (UUP) products and what version they are at. The data collected with this event is used to keep Windows performing properly.
+This event provides data on Unified Update Platform (UUP) products and what version they're at. The data collected with this event is used to keep Windows performing properly.
 
 This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
 
@@ -3753,7 +3758,7 @@ This Ping event sends a detailed inventory of software and hardware information
 The following fields are available:
 
 - **appAp**  Any additional parameters for the specified application. Default: ''.
-- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute. See the wiki for additional information. Default: undefined.
+- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute.  Default: undefined.
 - **appBrandCode**  The brand code under which the product was installed, if any. A brand code is a short (4-character) string used to identify installations that took place as a result of partner deals or website promotions. Default: ''.
 - **appChannel**  An integer indicating the channel of the installation (i.e. Canary or Dev).
 - **appClientId**  A generalized form of the brand code that can accept a wider range of values and is used for similar purposes. Default: ''.
@@ -3761,13 +3766,13 @@ The following fields are available:
 - **appCohortHint**  A machine-readable enum indicating that the client has a desire to switch to a different release cohort. The exact legal values are app-specific and should be shared between the server and app implementations. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
 - **appCohortName**  A stable non-localized human-readable enum indicating which (if any) set of messages the app should display to the user. For example, an app with a cohort Name of 'beta' might display beta-specific branding to the user. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
 - **appConsentState**  Bit flags describing the diagnostic data disclosure and response flow where 1 indicates the affirmative and 0 indicates the negative or unspecified data. Bit 1 indicates consent was given, bit 2 indicates data originated from the download page, bit 18 indicates choice for sending data about how the browser is used, and bit 19 indicates choice for sending data about websites visited.
-- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (e.g. send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known. See the wiki for additional information. Default: '-2'.
+- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (e.g. send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known.  Default: '-2'.
 - **appExperiments**  A key/value list of experiment identifiers. Experiment labels are used to track membership in different experimental groups, and may be set at install or update time. The experiments string is formatted as a semicolon-delimited concatenation of experiment label strings. An experiment label string is an experiment Name, followed by the '=' character, followed by an experimental label value. For example: 'crdiff=got_bsdiff;optimized=O3'. The client shouldn't transmit the expiration date of any experiments it has, even if the server previously specified a specific expiration date. Default: ''.
 - **appInstallTime**  The product install time in seconds. '0' if unknown. Default: '-1'.
 - **appInstallTimeDiffSec**  The difference between the current time and the install date in seconds. '0' if unknown. Default: '-1'.
 - **appLang**  The language of the product install, in IETF BCP 47 representation. Default: ''.
 - **appLastLaunchTime**  The time when browser was last launched.
-- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation. See the wiki for additional information. Default: '0.0.0.0'.
+- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation.  Default: '0.0.0.0'.
 - **appPingEventAppSize**  The total number of bytes of all downloaded packages. Default: '0'.
 - **appPingEventDoneBeforeOOBEComplete**  Indicates whether the install or update was completed before Windows Out of the Box Experience ends. 1 means event completed before OOBE finishes; 0 means event wasn't completed before OOBE finishes; -1 means the field doesn't apply.
 - **appPingEventDownloadMetricsCdnCCC**  ISO 2 character country or region code that matches to the country or region updated binaries are delivered from. E.g.: US.
@@ -3781,8 +3786,8 @@ The following fields are available:
 - **appPingEventDownloadMetricsUrl**  For events representing a download, the CDN URL provided by the update server for the client to download the update, the URL is controlled by Microsoft servers and always maps back to either *.delivery.mp.microsoft.com or msedgesetup.azureedge.net. Default: ''.
 - **appPingEventDownloadTimeMs**  For events representing a download, the time elapsed between the start of the download and the end of the download, in milliseconds. For events representing an entire update flow, the sum of all such download times over the course of the update flow. Sent in events that have an event type of '1', '2', '3', and '14' only. Default: '0'.
 - **appPingEventErrorCode**  The error code (if any) of the operation, encoded as a signed, base-10 integer. Default: '0'.
-- **appPingEventEventResult**  An enum indicating the result of the event. See the wiki for additional information. Default: '0'.
-- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. See the wiki for additional information.
+- **appPingEventEventResult**  An enum indicating the result of the event.  Default: '0'.
+- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. 
 - **appPingEventExtraCode1**  Additional numeric information about the operation's result, encoded as a signed, base-10 integer. Default: '0'.
 - **appPingEventInstallTimeMs**  For events representing an install, the time elapsed between the start of the install and the end of the install, in milliseconds. For events representing an entire update flow, the sum of all such durations. Sent in events that have an event type of '2' and '3' only. Default: '0'.
 - **appPingEventNumBytesDownloaded**  The number of bytes downloaded for the specified application. Default: '0'.
@@ -3794,9 +3799,9 @@ The following fields are available:
 - **appUpdateCheckIsUpdateDisabled**  The state of whether app updates are restricted by group policy. True if updates have been restricted by group policy or false if they haven't.
 - **appUpdateCheckTargetVersionPrefix**  A component-wise prefix of a version number, or a complete version number suffixed with the $ character. The server shouldn't return an update instruction to a version number that doesn't match the prefix or complete version number. The prefix is interpreted a dotted-tuple that specifies the exactly-matching elements; it isn't a lexical prefix (for example, '1.2.3' must match '1.2.3.4' but must not match '1.2.34'). Default: ''.
 - **appUpdateCheckTtToken**  An opaque access token that can be used to identify the requesting client as a member of a trusted-tester group. If non-empty, the request should be sent over SSL or another secure protocol. Default: ''.
-- **appVersion**  The version of the product install. See the wiki for additional information. Default: '0.0.0.0'.
+- **appVersion**  The version of the product install.  Default: '0.0.0.0'.
 - **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
-- **eventType**  A string indicating the type of the event. See the wiki for additional information.
+- **eventType**  A string indicating the type of the event. 
 - **expETag**  An identifier representing all service applied configurations and experiments when current update happens. Used for testing only.
 - **hwDiskType**  Device’s hardware disk type.
 - **hwHasAvx**  '1' if the client's hardware supports the AVX instruction set. '0' if the client's hardware doesn't support the AVX instruction set. '-1' if unknown. Default: '-1'.
@@ -3996,7 +4001,6 @@ The following fields are available:
 - **extendedData**  GTL extended data section for each app to add its own extensions.
 - **timeToActionMs**  Time in MS for this Page Action.
 
-
 ### Microsoft.Surface.Mcu.Prod.CriticalLog
 
 Error information from Surface device firmware.
@@ -4312,7 +4316,7 @@ The following fields are available:
 - **DownloadState**  Current state of the active download for this content (queued, suspended, or progressing)
 - **EventType**  Possible values are "Child", "Bundle", or "Driver"
 - **FlightId**  The unique identifier for each flight
-- **IsNetworkMetered**  Indicates whether Windows considered the current network to be metered"
+- **IsNetworkMetered**  Indicates whether Windows considered the current network to be "metered"
 - **MOAppDownloadLimit**  Mobile operator cap on size of application downloads, if any
 - **MOUpdateDownloadLimit**  Mobile operator cap on size of operating system update downloads, if any
 - **PowerState**  Indicates the power state of the device at the time of heartbeart (DC, AC, Battery Saver, or Connected Standby)
@@ -5185,7 +5189,7 @@ The following fields are available:
 
 ### Update360Telemetry.UpdateAgentMitigationSummary
 
-This event sends a summary of all the update agent mitigations available for an this update. The data collected with this event is used to help keep Windows secure and up to date.
+This event sends a summary of all the update agent mitigations available for an update. The data collected with this event is used to help keep Windows secure and up to date.
 
 The following fields are available:
 
@@ -5618,7 +5622,7 @@ The following fields are available:
 - **ReportId**  With Windows Update, this is the updateID that is passed to Setup. In media setup, this is the GUID for the install.wim.
 - **Setup360Extended**  Detailed information about the phase/action when the potential failure occurred.
 - **Setup360Mode**  The phase of Setup360. Example: Predownload, Install, Finalize, Rollback.
-- **Setup360Result**  The result of Setup360. This is an HRESULT error code that can be used used to diagnose errors.
+- **Setup360Result**  The result of Setup360. This is an HRESULT error code that can be used to diagnose errors.
 - **Setup360Scenario**  The Setup360 flow type. Example: Boot, Media, Update, MCT.
 - **SetupVersionBuildNumber**  The build number of Setup360 (build number of target OS).
 - **State**  The exit state of a Setup360 run. Example: succeeded, failed, blocked, canceled.
@@ -5665,7 +5669,7 @@ The following fields are available:
 - **pluginFailureCount**  The number of plugins that have failed.
 - **pluginsCount**  The number of plugins.
 - **qualityAssessmentImpact**  WaaS Assessment impact for quality updates.
-- **remediationSummary**  Result of each operation performed on a device to fix an invalid state or configuration that's preventing the device from getting updates. For example, if Windows Update service is turned off, the fix is to turn the it back on.
+- **remediationSummary**  Result of each operation performed on a device to fix an invalid state or configuration that's preventing the device from getting updates. For example, if Windows Update service is turned off, the fix is to turn it back on.
 - **usingBackupFeatureAssessment**  Relying on backup feature assessment.
 - **usingBackupQualityAssessment**  Relying on backup quality assessment.
 - **usingCachedFeatureAssessment**  WaaS Medic run didn't get OS build age from the network on the previous run.
@@ -5678,7 +5682,7 @@ The following fields are available:
 
 ### Microsoft.Windows.WERVertical.OSCrash
 
-This event sends binary data from the collected dump file whenever a bug check occurs, to help keep Windows up to date. The is the OneCore version of this event.
+This event sends binary data from the collected dump file whenever a bug check occurs, to help keep Windows up to date. This is the OneCore version of this event.
 
 The following fields are available:
 
@@ -6108,7 +6112,7 @@ The following fields are available:
 
 - **CatalogId**  The Store Catalog ID for the product being installed.
 - **ProductId**  The Store Product ID for the product being installed.
-- **SkuId**  Specfic edition of the app being updated.
+- **SkuId**  Specific edition of the app being updated.
 
 
 ### Microsoft.Windows.StoreAgent.Telemetry.StateTransition
@@ -6355,7 +6359,7 @@ The following fields are available:
 - **flightMetadata**  Contains the FlightId and the build being flighted.
 - **objectId**  Unique value for each Update Agent mode.
 - **relatedCV**  Correlation vector value generated from the latest USO scan.
-- **result**  Result of the initialize phase of the update. 0 = Succeeded, 1 = Failed, 2 = Cancelled, 3 = Blocked, 4 = BlockCancelled.
+- **result**  Result of the initialize phase of the update. 0 = Succeeded, 1 = Failed, 2 = Canceled, 3 = Blocked, 4 = BlockCancelled.
 - **scenarioId**  The scenario ID. Example: MobileUpdate, DesktopLanguagePack, DesktopFeatureOnDemand, or DesktopDriverUpdate.
 - **sessionData**  Contains instructions to update agent for processing FODs and DUICs (Null for other scenarios).
 - **sessionId**  Unique value for each Update Agent mode attempt.
@@ -6589,6 +6593,15 @@ The following fields are available:
 - **WasPresented**  True if the user interaction campaign is displayed to the user.
 
 
+### Microsoft.Windows.WindowsUpdate.RUXIM.IHExit
+
+This event is generated when the RUXIM Interaction Handler (RUXIMIH.EXE) exits. The data collected with this event is used to help keep Windows up to date and performing properly.
+
+The following fields are available:
+
+- **InteractionCampaignID**  GUID identifying the interaction campaign that RUXIMIH processed.
+
+
 ## Windows Update mitigation events
 
 ### Microsoft.Windows.Mitigations.AllowInPlaceUpgrade.ApplyTroubleshootingComplete
@@ -6840,7 +6853,4 @@ The following fields are available:
 - **Disposition**  The parameter for the hard reserve adjustment function.
 - **Flags**  The flags passed to the hard reserve adjustment function.
 - **PendingHardReserveAdjustment**  The final change to the hard reserve size.
-- **UpdateType**  Indicates whether the change is an increase or decrease in the size of the hard reserve.
-
-
-
+- **UpdateType**  Indicates whether the change is an increase or decrease in the size of the hard reserve.
\ No newline at end of file
diff --git a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md
index 4fb9beb260..e008b7598b 100644
--- a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md
+++ b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md
@@ -7,7 +7,7 @@ ms.localizationpriority: high
 author: DHB-MSFT
 ms.author: danbrown
 manager: laurawi
-ms.date: 04/24/2024
+ms.date: 10/01/2024
 ms.collection: privacy-windows
 ms.topic: reference
 ---
@@ -31,6 +31,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
 
 You can learn more about Windows functional and diagnostic data through these articles:
 
+- [Required diagnostic events and fields for Windows 11, version 24H2](required-diagnostic-events-fields-windows-11-24H2.md)
 - [Required diagnostic events and fields for Windows 11, versions 23H2 and 22H2](required-diagnostic-events-fields-windows-11-22H2.md)
 - [Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
 - [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
@@ -873,7 +874,7 @@ The following fields are available:
 - **DriverAvailableInbox**  Is a driver included with the operating system for this PNP device?
 - **DriverAvailableOnline**  Is there a driver for this PNP device on Windows Update?
 - **DriverAvailableUplevel**  Is there a driver on Windows Update or included with the operating system for this PNP device?
-- **DriverBlockOverridden**  Is there's a driver block on the device that has been overridden?
+- **DriverBlockOverridden**  Is there a driver block on the device that has been overridden?
 - **NeedsDismissAction**  Will the user would need to dismiss a warning during Setup for this device?
 - **NotRegressed**  Does the device have a problem code on the source OS that is no better than the one it would have on the target OS?
 - **SdbDeviceBlockUpgrade**  Is there an SDB block on the PNP device that blocks upgrade?
@@ -2476,7 +2477,8 @@ Fires when the compatibility check completes. Gives the results from the check.
 The following fields are available:
 
 - **IsRecommended**  Denotes whether all compatibility checks have passed and, if so, returns true. Otherwise returns false.
-- **Issues**  If compatibility checks failed, provides bit indexed indicators of issues detected. Table located here: [Check results of HVCI default enablement](/windows-hardware/design/device-experiences/oem-hvci-enablement#check-results-of-hvci-default-enablement).
+- **Issues**  If compatibility checks failed, provides bit indexed indicators of issues detected. Table located here: [Check results of HVCI default enablement](/windows-hardware/design/device-experiences/oem-hvci-enablement#check-results-of-memory-integrity-default-enablement).
+
 
 ### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.Enabled
 
@@ -4334,6 +4336,7 @@ The following fields are available:
 
 - **InventoryVersion**  The version of the inventory binary generating the events.
 
+
 ### Microsoft.Windows.Inventory.Core.InventoryAcpiPhatHealthRecordAdd
 
 This event sends basic metadata about ACPI PHAT Health Record structure on the machine. The data collected with this event is used to help keep Windows up to date.
@@ -4608,6 +4611,7 @@ The following fields are available:
 
 - **InventoryVersion**  The version of the inventory file generating the events.
 
+
 ### Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
 
 This event sends basic metadata about a PNP device and its associated driver to help keep Windows up to date. This information is used to assess if the PNP device and driver will remain compatible when upgrading Windows.
@@ -4858,7 +4862,7 @@ This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedevic
 
 ### Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
 
-This event provides data on Unified Update Platform (UUP) products and what version they are at. The data collected with this event is used to keep Windows performing properly.
+This event provides data on Unified Update Platform (UUP) products and what version they're at. The data collected with this event is used to keep Windows performing properly.
 
 This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
 
@@ -5148,7 +5152,7 @@ This Ping event sends a detailed inventory of software and hardware information
 The following fields are available:
 
 - **appAp**  Any additional parameters for the specified application. Default: ''.
-- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute. Please see the wiki for additional information. Default: undefined.
+- **appAppId**  The GUID that identifies the product. Compatible clients must transmit this attribute.  Default: undefined.
 - **appBrandCode**  The brand code under which the product was installed, if any. A brand code is a short (4-character) string used to identify installations that took place as a result of partner deals or website promotions. Default: ''.
 - **appChannel**  An integer indicating the channel of the installation (i.e. Canary or Dev).
 - **appClientId**  A generalized form of the brand code that can accept a wider range of values and is used for similar purposes. Default: ''.
@@ -5156,13 +5160,13 @@ The following fields are available:
 - **appCohortHint**  A machine-readable enum indicating that the client has a desire to switch to a different release cohort. The exact legal values are app-specific and should be shared between the server and app implementations. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
 - **appCohortName**  A stable non-localized human-readable enum indicating which (if any) set of messages the app should display to the user. For example, an app with a cohort Name of 'beta' might display beta-specific branding to the user. Limited to ASCII characters 32 to 127 (inclusive) and a maximum length of 1024 characters. Default: ''.
 - **appConsentState**  Bit flags describing the diagnostic data disclosure and response flow where 1 indicates the affirmative and 0 indicates the negative or unspecified data. Bit 1 indicates consent was given, bit 2 indicates data originated from the download page, bit 18 indicates choice for sending data about how the browser is used, and bit 19 indicates choice for sending data about websites visited.
-- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (e.g. send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known. Please see the wiki for additional information. Default: '-2'.
+- **appDayOfInstall**  The date-based counting equivalent of appInstallTimeDiffSec (the numeric calendar day that the app was installed on). This value is provided by the server in the response to the first request in the installation flow. The client MAY fuzz this value to the week granularity (e.g. send '0' for 0 through 6, '7' for 7 through 13, etc.). The first communication to the server should use a special value of '-1'. A value of '-2' indicates that this value isn't known.  Default: '-2'.
 - **appExperiments**  A key/value list of experiment identifiers. Experiment labels are used to track membership in different experimental groups, and may be set at install or update time. The experiments string is formatted as a semicolon-delimited concatenation of experiment label strings. An experiment label string is an experiment Name, followed by the '=' character, followed by an experimental label value. For example: 'crdiff=got_bsdiff;optimized=O3'. The client shouldn't transmit the expiration date of any experiments it has, even if the server previously specified a specific expiration date. Default: ''.
 - **appInstallTime**  The product install time in seconds. '0' if unknown. Default: '-1'.
 - **appInstallTimeDiffSec**  The difference between the current time and the install date in seconds. '0' if unknown. Default: '-1'.
 - **appLang**  The language of the product install, in IETF BCP 47 representation. Default: ''.
 - **appLastLaunchTime**  The time when browser was last launched.
-- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation. Please see the wiki for additional information. Default: '0.0.0.0'.
+- **appNextVersion**  The version of the app that the update flow to which this event belongs attempted to reach, regardless of the success or failure of the update operation.  Default: '0.0.0.0'.
 - **appPingEventAppSize**  The total number of bytes of all downloaded packages. Default: '0'.
 - **appPingEventDoneBeforeOOBEComplete**  Indicates whether the install or update was completed before Windows Out of the Box Experience ends. 1 means event completed before OOBE finishes; 0 means event wasn't completed before OOBE finishes; -1 means the field doesn't apply.
 - **appPingEventDownloadMetricsCdnAzureRefOriginShield**  Provides a unique reference string that identifies a request served by Azure Front Door. It's used to search access logs and is critical for troubleshooting. For example, Ref A: E172B39D19774147B0EFCC8E3E823D9D Ref B: BL2EDGE0215 Ref C: 2021-05-11T22:25:48Z.
@@ -5180,8 +5184,8 @@ The following fields are available:
 - **appPingEventDownloadMetricsUrl**  For events representing a download, the CDN URL provided by the update server for the client to download the update, the URL is controlled by Microsoft servers and always maps back to either *.delivery.mp.microsoft.com or msedgesetup.azureedge.net. Default: ''.
 - **appPingEventDownloadTimeMs**  For events representing a download, the time elapsed between the start of the download and the end of the download, in milliseconds. For events representing an entire update flow, the sum of all such download times over the course of the update flow. Sent in events that have an event type of '1', '2', '3', and '14' only. Default: '0'.
 - **appPingEventErrorCode**  The error code (if any) of the operation, encoded as a signed, base-10 integer. Default: '0'.
-- **appPingEventEventResult**  An enum indicating the result of the event. Please see the wiki for additional information. Default: '0'.
-- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. Please see the wiki for additional information.
+- **appPingEventEventResult**  An enum indicating the result of the event.  Default: '0'.
+- **appPingEventEventType**  An enum indicating the type of the event. Compatible clients MUST transmit this attribute. 
 - **appPingEventExtraCode1**  Additional numeric information about the operation's result, encoded as a signed, base-10 integer. Default: '0'.
 - **appPingEventInstallTimeMs**  For events representing an install, the time elapsed between the start of the install and the end of the install, in milliseconds. For events representing an entire update flow, the sum of all such durations. Sent in events that have an event type of '2' and '3' only. Default: '0'.
 - **appPingEventNumBytesDownloaded**  The number of bytes downloaded for the specified application. Default: '0'.
@@ -5195,9 +5199,9 @@ The following fields are available:
 - **appUpdateCheckTargetChannel**  Check for status showing the target release channel.
 - **appUpdateCheckTargetVersionPrefix**  A component-wise prefix of a version number, or a complete version number suffixed with the $ character. The server shouldn't return an update instruction to a version number that doesn't match the prefix or complete version number. The prefix is interpreted a dotted-tuple that specifies the exactly-matching elements; it isn't a lexical prefix (for example, '1.2.3' must match '1.2.3.4' but must not match '1.2.34'). Default: ''.
 - **appUpdateCheckTtToken**  An opaque access token that can be used to identify the requesting client as a member of a trusted-tester group. If non-empty, the request should be sent over SSL or another secure protocol. Default: ''.
-- **appVersion**  The version of the product install. Please see the wiki for additional information. Default: '0.0.0.0'.
+- **appVersion**  The version of the product install.  Default: '0.0.0.0'.
 - **EventInfo.Level**  The minimum Windows diagnostic data level required for the event where 1 is basic, 2 is enhanced, and 3 is full.
-- **eventType**  A string indicating the type of the event. Please see the wiki for additional information.
+- **eventType**  A string indicating the type of the event. 
 - **expDeviceId**  A non-unique resettable device ID to identify a device in experimentation.
 - **expEtag**  An identifier representing all service applied configurations and experiments when current update happens. Used for testing only.
 - **expETag**  An identifier representing all service applied configurations and experiments when current update happens. Used for testing only.
@@ -5618,6 +5622,7 @@ The following fields are available:
 - **criticalLogSize** Log size
 - **CUtility::GetTargetNameA(target)**  Product identifier.
 - **productId**  Product identifier
+- **SurfaceTelemetry_EventType**  Required vs. Optional event
 - **uniqueId**  Correlation ID that can be used with Watson to get more details about the failure.
 
 
@@ -5639,6 +5644,7 @@ This event sends information about the Operating System image name to Microsoft.
 
 The following fields are available:
 
+- **SurfaceTelemetry_EventType**  Required vs. Optional event
 - **szOsImageName**  This is the image name that is running on the device.
 
 
@@ -5691,6 +5697,7 @@ The following fields are available:
 - **UpdateType**  Indicates if it's DB or DBX update
 - **WillResealSucceed**  Indicates if TPM reseal operation is expected to succeed
 
+
 ### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateStarted
 
 Event that indicates secure boot update has started.
@@ -5746,9 +5753,7 @@ The following fields are available:
 - **touchKeyboardDesktop**  Touch keyboard desktop
 - **touchKeyboardTablet**  Touch keyboard tablet
 - **triggerType**  Trigger type
-- **usePowershell**  Use PowerShell
-
-
+- **usePowershell**  Use PowerShell.
 
 ## Privacy consent logging events
 
@@ -6558,8 +6563,9 @@ The following fields are available:
 - **CUtility::GetTargetNameA(Target)**  Sub component name.
 - **HealthLog**  Health indicator log.
 - **healthLogSize**  4KB.
+- **PartA_PrivacyProduct**  Product tag
 - **productId**  Identifier for product model.
-
+- **SurfaceTelemetry_EventType**  Required vs. Optional event
 
 ### Microsoft.Surface.SystemReset.Prod.ResetCauseEventV2
 
@@ -6568,9 +6574,25 @@ This event sends reason for SAM, PCH and SoC reset. The data collected with this
 The following fields are available:
 
 - **ControllerResetCause**  The cause for the controller reset.
+- **EcResetCause**  EC reset cause.
+- **FaultReset1Cause**  Fault 1 reset cause.
+- **FaultReset2Cause**  Fault 2 reset cause.
 - **HostResetCause**  Host reset cause.
+- **OffResetCause**  Off reset cause.
+- **OnResetCause**  On reset cause.
+- **PartA_PrivacyProduct**  Product tag
 - **PchResetCause**  PCH reset cause.
+- **PoffResetCause**  Power Off reset cause.
+- **PonResetCause**  Power On reset cause.
+- **S3ResetCause**  S3 reset cause.
 - **SamResetCause**  SAM reset cause.
+- **SamResetCauseExtBacklightState**  SAM Reset Display Backlight state.
+- **SamResetCauseExtLastPowerButtonTime**  SAM Reset Last Power Button time.
+- **SamResetCauseExtLastSshCommunicationTime**  SAM Reset Last SSH Communication time.
+- **SamResetCauseExtPostureStateReason**  SAM Reset Last Posture State reason.
+- **SamResetCauseExtRestartReason**  SAM Reset Extended Restart reason.
+- **SurfaceTelemetry_EventType**  Required vs. Optional event.
+- **WarmResetCause**  Warm reset cause.
 
 
 ## Update Assistant events
@@ -10018,7 +10040,4 @@ The following fields are available:
 - **videoResolution**  Video resolution to use.
 - **virtualMachineName**  VM name.
 - **waitForClientConnection**  True if we should wait for client connection.
-- **wp81NetworkStackDisabled**  WP 8.1 networking stack disabled.
-
-
-
+- **wp81NetworkStackDisabled**  WP 8.1 networking stack disabled.
\ No newline at end of file
diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml
index 9c47130eca..e177a03cd3 100644
--- a/windows/privacy/toc.yml
+++ b/windows/privacy/toc.yml
@@ -13,6 +13,8 @@
           href: diagnostic-data-viewer-powershell.md
     - name: Required Windows diagnostic data events and fields
       items: 
+        - name: Windows 11, version 24H2
+          href: required-diagnostic-events-fields-windows-11-24H2.md
         - name: Windows 11, versions 23H2 and 22H2
           href: required-diagnostic-events-fields-windows-11-22H2.md
         - name: Windows 11, version 21H2
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/wdac-appid-tagging-guide.md b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/appcontrol-appid-tagging-guide.md
similarity index 50%
rename from windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/wdac-appid-tagging-guide.md
rename to windows/security/application-security/application-control/app-control-for-business/AppIdTagging/appcontrol-appid-tagging-guide.md
index 4dc0da5aba..8ea04f6820 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/wdac-appid-tagging-guide.md
+++ b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/appcontrol-appid-tagging-guide.md
@@ -1,23 +1,22 @@
 ---
-title: Designing, creating, managing, and troubleshooting Windows Defender Application Control AppId Tagging policies
-description: How to design, create, manage, and troubleshoot your WDAC AppId Tagging policies
+title: Designing, creating, managing, and troubleshooting App Control for Business AppId Tagging policies
+description: How to design, create, manage, and troubleshoot your App Control AppId Tagging policies
 ms.localizationpriority: medium
-ms.date: 04/27/2022
+ms.date: 09/11/2024
 ms.topic: conceptual
 ---
 
-# WDAC Application ID (AppId) Tagging guide
+# App Control Application ID (AppId) Tagging guide
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
 ## AppId Tagging Feature Overview
 
-The Application ID (AppId) Tagging Policy feature, while based off Windows Defender Application Control (WDAC), doesn't control whether applications run. AppId Tagging policies can be used to mark the processes of the running application with a customizable tag defined in the policy. Application processes that pass the AppId policy receive the tag while failing applications don't.
+The Application ID (AppId) Tagging Policy feature, while based off App Control for Business, doesn't control whether applications run. AppId Tagging policies can be used to mark the processes of the running application with a customizable tag defined in the policy. Application processes that pass the AppId policy receive the tag while failing applications don't.
 
 ## AppId Tagging Feature Availability
 
-The WDAC AppId Tagging feature is available on the following versions of the Windows platform:
+The App Control AppId Tagging feature is available on the following versions of the Windows platform:
 
 Client:
 - Windows 10 20H1, 20H2, and 21H1 versions only
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md
similarity index 73%
rename from windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md
index 1507fc348c..e62a226d9b 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/debugging-operational-guide-appid-tagging-policies.md
@@ -2,20 +2,19 @@
 title: Testing and Debugging AppId Tagging Policies
 description: Testing and Debugging AppId Tagging Policies to ensure your policies are deployed successfully.
 ms.localizationpriority: medium
-ms.date: 04/29/2022
+ms.date: 09/11/2024
 ms.topic: troubleshooting
 ---
 
 # Testing and Debugging AppId Tagging Policies
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-After deployment of the WDAC AppId Tagging policy, WDAC will log a 3099 policy deployed event in the [Event Viewer logs](../operations/event-id-explanations.md). You first should ensure that the policy has been successfully deployed onto the system by verifying the presence of the 3099 event.
+After deployment of the App Control AppId Tagging policy, App Control will log a 3099 policy deployed event in the [Event Viewer logs](../operations/event-id-explanations.md). You first should ensure that the policy has been successfully deployed onto the system by verifying the presence of the 3099 event.
 
 ## Verifying Tags on Running Processes
 
-After verifying the policy has been deployed, the next step is to verify that the application processes you expect to pass the AppId Tagging policy have your tag set. Note that processes running at the time of policy deployment will need to be restarted since Windows Defender Application Control (WDAC) can only tag processes created after the policy has been deployed.
+After verifying the policy has been deployed, the next step is to verify that the application processes you expect to pass the AppId Tagging policy have your tag set. Note that processes running at the time of policy deployment will need to be restarted since App Control for Business can only tag processes created after the policy has been deployed.
 
 1. Download and Install the Windows Debugger
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/deploy-appid-tagging-policies.md b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/deploy-appid-tagging-policies.md
similarity index 54%
rename from windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/deploy-appid-tagging-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/AppIdTagging/deploy-appid-tagging-policies.md
index 7f0824cace..82fbcd6156 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/deploy-appid-tagging-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/deploy-appid-tagging-policies.md
@@ -1,17 +1,16 @@
 ---
-title: Deploying Windows Defender Application Control AppId tagging policies
-description: How to deploy your WDAC AppId tagging policies locally and globally within your managed environment.
+title: Deploying App Control for Business AppId tagging policies
+description: How to deploy your App Control AppId tagging policies locally and globally within your managed environment.
 ms.localizationpriority: medium
-ms.date: 04/29/2022
+ms.date: 09/11/2024
 ms.topic: conceptual
 ---
 
-# Deploying Windows Defender Application Control AppId tagging policies
+# Deploying App Control for Business AppId tagging policies
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. For more information, see [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-Similar to Windows Defender Application Control (WDAC) policies, WDAC AppId tagging policies can be deployed locally and to your managed endpoints several ways. Once you've created your AppId tagging policy, use one of the following methods to deploy:
+Similar to App Control for Business policies, App Control AppId tagging policies can be deployed locally and to your managed endpoints several ways. Once you've created your AppId tagging policy, use one of the following methods to deploy:
 
 1. [Deploy AppId tagging policies with MDM](#deploy-appid-tagging-policies-with-mdm)
 1. [Deploy policies with Configuration Manager](#deploy-appid-tagging-policies-with-configuration-manager)
@@ -20,23 +19,23 @@ Similar to Windows Defender Application Control (WDAC) policies, WDAC AppId tagg
 
 ## Deploy AppId tagging policies with MDM
 
-Custom AppId tagging policies can be deployed to endpoints using [the OMA-URI feature in MDM](../deployment/deploy-wdac-policies-using-intune.md#deploy-wdac-policies-with-custom-oma-uri).
+Custom AppId tagging policies can be deployed to endpoints using [the OMA-URI feature in MDM](../deployment/deploy-appcontrol-policies-using-intune.md#deploy-app-control-policies-with-custom-oma-uri).
 
 ## Deploy AppId tagging policies with Configuration Manager
 
-Custom AppId tagging policies can be deployed via Configuration Manager using the [deployment task sequences](../deployment/deploy-wdac-policies-with-memcm.md#deploy-custom-wdac-policies-using-packagesprograms-or-task-sequences), policies can be deployed to your managed endpoints and users.
+Custom AppId tagging policies can be deployed via Configuration Manager using the [deployment task sequences](../deployment/deploy-appcontrol-policies-with-memcm.md#deploy-custom-app-control-policies-using-packagesprograms-or-task-sequences), policies can be deployed to your managed endpoints and users.
 
 ### Deploy AppId tagging Policies via Scripting
 
-Scripting hosts can be used to deploy AppId tagging policies as well. This approach is often best suited for local deployment, but works for deployment to managed endpoints and users too. For more information on how to deploy WDAC AppId tagging policies via scripting, see [Deploy WDAC policies using script](../deployment/deploy-wdac-policies-with-script.md). For AppId tagging policies, the only applicable method is deploying to version 1903 or later.
+Scripting hosts can be used to deploy AppId tagging policies as well. This approach is often best suited for local deployment, but works for deployment to managed endpoints and users too. For more information on how to deploy App Control AppId tagging policies via scripting, see [Deploy App Control policies using script](../deployment/deploy-appcontrol-policies-with-script.md). For AppId tagging policies, the only applicable method is deploying to version 1903 or later.
 
 ### Deploying policies via the ApplicationControl CSP
 
-Multiple WDAC policies can be managed from an MDM server through ApplicationControl configuration service provider (CSP). The CSP also provides support for rebootless policy deployment.
+Multiple App Control policies can be managed from an MDM server through ApplicationControl configuration service provider (CSP). The CSP also provides support for rebootless policy deployment.
 
 However, when policies are unenrolled from an MDM server, the CSP will attempt to remove every policy from devices, not just the policies added by the CSP. The reason for this is that the ApplicationControl CSP doesn't track enrollment sources for individual policies, even though it will query all policies on a device, regardless if they were deployed by the CSP.
 
 For more information, see [ApplicationControl CSP](/windows/client-management/mdm/applicationcontrol-csp) to deploy multiple policies, and optionally use Microsoft Intune's Custom OMA-URI capability.
 
 > [!NOTE]
-> WMI and GP don't currently support multiple policies. If you can't directly access the MDM stack, use the [ApplicationControl CSP via the MDM Bridge WMI Provider](/windows/client-management/mdm/applicationcontrol-csp#powershell-and-wmi-bridge-usage-guidance) to manage multiple policy format Windows Defender Application Control policies.
+> WMI and GP don't currently support multiple policies. If you can't directly access the MDM stack, use the [ApplicationControl CSP via the MDM Bridge WMI Provider](/windows/client-management/mdm/applicationcontrol-csp#powershell-and-wmi-bridge-usage-guidance) to manage multiple policy format App Control for Business policies.
diff --git a/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/design-create-appid-tagging-policies.md b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/design-create-appid-tagging-policies.md
new file mode 100644
index 0000000000..363d4b5dd8
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/AppIdTagging/design-create-appid-tagging-policies.md
@@ -0,0 +1,102 @@
+---
+title: Create your App Control for Business AppId Tagging Policies
+description: Create your App Control for Business AppId tagging policies for Windows devices.
+ms.localizationpriority: medium
+ms.date: 09/23/2024
+ms.topic: conceptual
+---
+
+# Creating your App Control AppId Tagging Policies
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+## Create the policy using the App Control Wizard
+
+You can use the App Control for Business Wizard and the PowerShell commands to create an App Control policy and convert it to an AppIdTagging policy. The App Control Wizard is available for download at the [App Control Wizard Installer site](https://aka.ms/wdacwizard). These PowerShell commands are only available on the supported platforms listed in [AppId Tagging Guide](appcontrol-appid-tagging-guide.md).
+
+1. Create a new base policy using the templates:
+
+    Start with the Policy Creator task and select Multiple Policy Format and Base Policy. Select the Base Template to use for the policy. The following example shows beginning with the [Default Windows Mode](../design/appcontrol-wizard-create-base-policy.md#template-base-policies) template and build on top of these rules.
+
+    :::image type="content" alt-text="Configuring the policy base and template." source="../images/appid-appcontrol-wizard-1.png" lightbox="../images/appid-appcontrol-wizard-1.png":::
+
+    > [!NOTE]
+    > If your AppId Tagging Policy does build off the base templates or does not allow Windows in-box processes, you will notice significant performance regressions, especially during boot. For this reason, it is strongly recommended to build off the base templates. For more information on the issue, see the [AppId Tagging Known Issue](../operations/known-issues.md#slow-boot-and-performance-with-custom-policies).
+
+2. Set the following rule-options using the Wizard toggles:
+
+    :::image type="content" alt-text="Configuring the policy rule-options." source="../images/appid-appcontrol-wizard-2.png":::
+
+3. Create custom rules:
+
+    Selecting the `+ Custom Rules` button opens the Custom Rules panel. The Wizard supports five types of file rules:
+
+    - Publisher rules: Create a rule based off the signing certificate hierarchy. Additionally, the original filename and version can be combined with the signing certificate for added security.
+    - Path rules: Create a rule based off the path to a file or a parent folder path. Path rules support wildcards.
+    - File attribute rules: Create a rule based off a file's immutable properties like the original filename, file description, product name or internal name.
+    - Package app name rules: Create a rule based off the package family name of an appx/msix.
+    - Hash rules: Create a rule based off the PE Authenticode hash of a file.
+
+    For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](../design/appcontrol-wizard-create-base-policy.md#creating-custom-file-rules).
+
+4. Convert to AppId Tagging Policy:
+
+    After the Wizard builds the policy file, open the file in a text editor and remove the entire "Value=131" SigningScenario text block. The only remaining signing scenario should be "Value=12" which is the user mode application section. Next, open PowerShell in an elevated prompt and run the following command. Replace the AppIdTagging Key-Value pair for your scenario:
+
+    ```powershell
+    Set-CIPolicyIdInfo -ResetPolicyID -FilePath .\AppIdPolicy.xml -AppIdTaggingPolicy -AppIdTaggingKey "MyKey" -AppIdTaggingValue "MyValue"
+    ```
+    The policyID GUID is returned by the PowerShell command if successful.
+
+## Create the policy using PowerShell
+
+Using this method, you create an AppId Tagging policy directly using the App Control PowerShell commands. These PowerShell commands are only available on the supported platforms listed in [AppId Tagging Guide](appcontrol-appid-tagging-guide.md). In an elevate PowerShell instance:
+
+1. Create an AppId rule for the policy based on a combination of the signing certificate chain and version of the application. In the example below, the level has been set to SignedVersion. Any of the [App Control File Rule Levels](../design/select-types-of-rules-to-create.md#table-2-app-control-for-business-policy---file-rule-levels) can be used in AppId rules:
+
+    ```powershell
+    $rule = New-CiPolicyRule -Level SignedVersion -DriverFilePath <path_to_application>
+    ```
+2. Create the AppId Tagging Policy. Replace the AppIdTagging Key-Value pair for your scenario:
+
+    ```powershell
+    New-CIPolicy -rules $rule -FilePath .\AppIdPolicy.xml -AppIdTaggingPolicy -AppIdTaggingKey "MyKey" -AppIdTaggingValue "MyValue"
+    ```
+3. Set the rule-options for the policy:
+
+    ```powershell
+    Set-RuleOption -Option 0 .\AppIdPolicy.xml  # Usermode Code Integrity (UMCI)
+    Set-RuleOption -Option 16 .\AppIdPolicy.xml # Refresh Policy no Reboot
+    Set-RuleOption -Option 18 .\AppIdPolicy.xml # (Optional) Disable FilePath Rule Protection
+    ```
+
+    If you're using filepath rules, you may want to set option 18. Otherwise, there's no need.
+
+4. Set the name and ID on the policy, which is helpful for future debugging:
+
+    ```powershell
+    Set-CIPolicyIdInfo -ResetPolicyId -PolicyName "MyPolicyName" -PolicyId "MyPolicyId" -AppIdTaggingPolicy -FilePath ".\AppIdPolicy.xml"
+    ```
+    The policyID GUID is returned by the PowerShell command if successful.
+
+## Deploy for Local Testing
+
+After creating your AppId Tagging policy in the above steps, you can deploy the policy to your local machine for testing before broadly deploying the policy to your endpoints:
+
+1. Depending on your deployment method, convert the xml to binary:
+
+    ```powershell
+    Convertfrom-CIPolicy .\policy.xml ".\{PolicyIDGUID}.cip"
+    ```
+
+2. Optionally, deploy it for local testing:
+
+    ```powershell
+    copy ".\{Policy ID}.cip" c:\windows\system32\codeintegrity\CiPolicies\Active\
+    ./RefreshPolicy.exe
+    ```
+
+    RefreshPolicy.exe is available for download from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=102925).
+
+## Next Steps
+For more information on debugging and broad deployment of the AppId Tagging policy, see [Debugging AppId policies](debugging-operational-guide-appid-tagging-policies.md) and [Deploying AppId policies](deploy-appid-tagging-policies.md).
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/TOC.yml b/windows/security/application-security/application-control/app-control-for-business/TOC.yml
similarity index 70%
rename from windows/security/application-security/application-control/windows-defender-application-control/TOC.yml
rename to windows/security/application-security/application-control/app-control-for-business/TOC.yml
index 91cc8b46d0..b5ff7c1588 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/TOC.yml
+++ b/windows/security/application-security/application-control/app-control-for-business/TOC.yml
@@ -1,126 +1,126 @@
 - name: Application Control for Windows
   href: index.yml
 - name: About application control for Windows
-  href: wdac.md
+  href: appcontrol.md
   expanded: true
   items:
-    - name: WDAC and AppLocker Overview
-      href: wdac-and-applocker-overview.md
-    - name: WDAC and AppLocker Feature Availability
+    - name: App Control and AppLocker Overview
+      href: appcontrol-and-applocker-overview.md
+    - name: App Control and AppLocker Feature Availability
       href: feature-availability.md
     - name: Virtualization-based protection of code integrity
-      href: ../introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md
-- name: WDAC design guide
-  href: design/wdac-design-guide.md
+      href: ../introduction-to-virtualization-based-security-and-appcontrol.md
+- name: Design guide
+  href: design/appcontrol-design-guide.md
   items:
-    - name: Plan for WDAC policy lifecycle management
-      href: design/plan-wdac-management.md
-    - name: Design your WDAC policy
+    - name: Plan for App Control policy lifecycle management
+      href: design/plan-appcontrol-management.md
+    - name: Design your App Control policy
       items:
-        - name: Understand WDAC policy design decisions
-          href: design/understand-wdac-policy-design-decisions.md
-        - name: Understand WDAC policy rules and file rules
+        - name: Understand App Control policy design decisions
+          href: design/understand-appcontrol-policy-design-decisions.md
+        - name: Understand App Control policy rules and file rules
           href: design/select-types-of-rules-to-create.md
           items:
             - name: Allow apps installed by a managed installer
               href: design/configure-authorized-apps-deployed-with-a-managed-installer.md
             - name: Allow reputable apps with Intelligent Security Graph (ISG)
-              href: design/use-wdac-with-intelligent-security-graph.md
+              href: design/use-appcontrol-with-intelligent-security-graph.md
             - name: Allow COM object registration
-              href: design/allow-com-object-registration-in-wdac-policy.md
-            - name: Use WDAC with .NET hardening
-              href: design/wdac-and-dotnet.md
-            - name: Script enforcement with Windows Defender Application Control
+              href: design/allow-com-object-registration-in-appcontrol-policy.md
+            - name: Use App Control with .NET hardening
+              href: design/appcontrol-and-dotnet.md
+            - name: Script enforcement with App Control for Business
               href: design/script-enforcement.md
-            - name: Manage packaged apps with WDAC
-              href: design/manage-packaged-apps-with-wdac.md
-            - name: Use WDAC to control specific plug-ins, add-ins, and modules
-              href: design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md
-            - name: Understand WDAC policy settings
-              href: design/understanding-wdac-policy-settings.md
-        - name: Use multiple WDAC policies
-          href: design/deploy-multiple-wdac-policies.md
-    - name: Create your WDAC policy
+            - name: Manage packaged apps with App Control
+              href: design/manage-packaged-apps-with-appcontrol.md
+            - name: Use App Control to control specific plug-ins, add-ins, and modules
+              href: design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md
+            - name: Understand App Control policy settings
+              href: design/understanding-appcontrol-policy-settings.md
+        - name: Use multiple App Control policies
+          href: design/deploy-multiple-appcontrol-policies.md
+    - name: Create your App Control policy
       items:
-        - name: Example WDAC base policies
-          href: design/example-wdac-base-policies.md
-        - name: Policy creation for common WDAC usage scenarios
-          href: design/common-wdac-use-cases.md
+        - name: Example App Control base policies
+          href: design/example-appcontrol-base-policies.md
+        - name: Policy creation for common App Control usage scenarios
+          href: design/common-appcontrol-use-cases.md
           items:
-            - name: Create a WDAC policy for lightly managed devices
-              href: design/create-wdac-policy-for-lightly-managed-devices.md
-            - name: Create a WDAC policy for fully managed devices
-              href: design/create-wdac-policy-for-fully-managed-devices.md
-            - name: Create a WDAC policy for fixed-workload devices
-              href: design/create-wdac-policy-using-reference-computer.md
-            - name: Create a WDAC deny list policy
-              href: design/create-wdac-deny-policy.md
-            - name: Applications that can bypass WDAC and how to block them
-              href: design/applications-that-can-bypass-wdac.md
+            - name: Create an App Control policy for lightly managed devices
+              href: design/create-appcontrol-policy-for-lightly-managed-devices.md
+            - name: Create an App Control policy for fully managed devices
+              href: design/create-appcontrol-policy-for-fully-managed-devices.md
+            - name: Create an App Control policy for fixed-workload devices
+              href: design/create-appcontrol-policy-using-reference-computer.md
+            - name: Create an App Control deny list policy
+              href: design/create-appcontrol-deny-policy.md
+            - name: Applications that can bypass App Control and how to block them
+              href: design/applications-that-can-bypass-appcontrol.md
             - name: Microsoft recommended driver block rules
               href: design/microsoft-recommended-driver-block-rules.md
-        - name: Use the WDAC Wizard tool
-          href: design/wdac-wizard.md
+        - name: Use the App Control Wizard tool
+          href: design/appcontrol-wizard.md
           items:
-            - name: Create a base WDAC policy with the Wizard
-              href: design/wdac-wizard-create-base-policy.md
-            - name: Create a supplemental WDAC policy with the Wizard
-              href: design/wdac-wizard-create-supplemental-policy.md
-            - name: Editing a WDAC policy with the Wizard
-              href: design/wdac-wizard-editing-policy.md
-            - name: Creating WDAC Policy Rules from WDAC Events
-              href: design/wdac-wizard-parsing-event-logs.md
-            - name: Merging multiple WDAC policies with the Wizard
-              href: design/wdac-wizard-merging-policies.md
-- name: WDAC deployment guide
-  href: deployment/wdac-deployment-guide.md
+            - name: Create a base App Control policy with the Wizard
+              href: design/appcontrol-wizard-create-base-policy.md
+            - name: Create a supplemental App Control policy with the Wizard
+              href: design/appcontrol-wizard-create-supplemental-policy.md
+            - name: Editing an App Control policy with the Wizard
+              href: design/appcontrol-wizard-editing-policy.md
+            - name: Creating App Control Policy Rules from App Control Events
+              href: design/appcontrol-wizard-parsing-event-logs.md
+            - name: Merging multiple App Control policies with the Wizard
+              href: design/appcontrol-wizard-merging-policies.md
+- name: Deployment guide
+  href: deployment/appcontrol-deployment-guide.md
   items:
-    - name: Deploy WDAC policies with MDM
-      href: deployment/deploy-wdac-policies-using-intune.md
-    - name: Deploy WDAC policies with Configuration Manager
-      href: deployment/deploy-wdac-policies-with-memcm.md
-    - name: Deploy WDAC policies with script
-      href: deployment/deploy-wdac-policies-with-script.md
-    - name: Deploy WDAC policies with group policy
-      href: deployment/deploy-wdac-policies-using-group-policy.md
-    - name: Audit WDAC policies
-      href: deployment/audit-wdac-policies.md
-    - name: Merge WDAC policies
-      href: deployment/merge-wdac-policies.md
-    - name: Enforce WDAC policies
-      href: deployment/enforce-wdac-policies.md
-    - name: Use code signing for added control and protection with WDAC
+    - name: Deploy App Control policies with MDM
+      href: deployment/deploy-appcontrol-policies-using-intune.md
+    - name: Deploy App Control policies with Configuration Manager
+      href: deployment/deploy-appcontrol-policies-with-memcm.md
+    - name: Deploy App Control policies with script
+      href: deployment/deploy-appcontrol-policies-with-script.md
+    - name: Deploy App Control policies with group policy
+      href: deployment/deploy-appcontrol-policies-using-group-policy.md
+    - name: Audit App Control policies
+      href: deployment/audit-appcontrol-policies.md
+    - name: Merge App Control policies
+      href: deployment/merge-appcontrol-policies.md
+    - name: Enforce App Control policies
+      href: deployment/enforce-appcontrol-policies.md
+    - name: Use code signing for added control and protection with App Control
       href: deployment/use-code-signing-for-better-control-and-protection.md
       items:
-        - name: Deploy catalog files to support WDAC
-          href: deployment/deploy-catalog-files-to-support-wdac.md
-        - name: Use signed policies to protect Windows Defender Application Control against tampering
-          href: deployment/use-signed-policies-to-protect-wdac-against-tampering.md
-        - name: "Optional: Create a code signing cert for WDAC"
-          href: deployment/create-code-signing-cert-for-wdac.md
-    - name: Disable WDAC policies
-      href: deployment/disable-wdac-policies.md
-- name: WDAC operational guide
-  href: operations/wdac-operational-guide.md
+        - name: Deploy catalog files to support App Control
+          href: deployment/deploy-catalog-files-to-support-appcontrol.md
+        - name: Use signed policies to protect App Control for Business against tampering
+          href: deployment/use-signed-policies-to-protect-appcontrol-against-tampering.md
+        - name: "Optional: Create a code signing cert for App Control"
+          href: deployment/create-code-signing-cert-for-appcontrol.md
+    - name: Disable App Control policies
+      href: deployment/disable-appcontrol-policies.md
+- name: Operational guide
+  href: operations/appcontrol-operational-guide.md
   items:
-    - name: WDAC debugging and troubleshooting
-      href: operations/wdac-debugging-and-troubleshooting.md
-    - name: Understanding Application Control event IDs
+    - name: App Control debugging and troubleshooting
+      href: operations/appcontrol-debugging-and-troubleshooting.md
+    - name: Understanding App Control event IDs
       href: operations/event-id-explanations.md
-    - name: Understanding Application Control event tags
+    - name: Understanding App Control event tags
       href: operations/event-tag-explanations.md
-    - name: Query WDAC events with Advanced hunting
+    - name: Query App Control events with Advanced hunting
       href: operations/querying-application-control-events-centrally-using-advanced-hunting.md
     - name: Known Issues
       href: operations/known-issues.md
     - name: Managed installer and ISG technical reference and troubleshooting guide
-      href: operations/configure-wdac-managed-installer.md
+      href: operations/configure-appcontrol-managed-installer.md
     - name: CITool.exe technical reference
       href: operations/citool-commands.md
-    - name: Inbox WDAC policies
-      href: operations/inbox-wdac-policies.md
-- name: WDAC AppId Tagging guide
-  href: AppIdTagging/wdac-appid-tagging-guide.md
+    - name: Inbox App Control policies
+      href: operations/inbox-appcontrol-policies.md
+- name: AppId Tagging guide
+  href: AppIdTagging/appcontrol-appid-tagging-guide.md
   items:
     - name: Creating AppId Tagging Policies
       href: AppIdTagging/design-create-appid-tagging-policies.md
diff --git a/windows/security/application-security/application-control/app-control-for-business/appcontrol-and-applocker-overview.md b/windows/security/application-security/application-control/app-control-for-business/appcontrol-and-applocker-overview.md
new file mode 100644
index 0000000000..5520d9161c
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/appcontrol-and-applocker-overview.md
@@ -0,0 +1,64 @@
+---
+title: App Control and AppLocker Overview
+description: Compare Windows application control technologies.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: conceptual
+---
+
+# App Control for Business and AppLocker Overview
+
+[!INCLUDE [Feature availability note](includes/feature-availability-note.md)]
+
+Windows 10 and Windows 11 include two technologies that can be used for application control, depending on your organization's specific scenarios and requirements: App Control for Business and AppLocker.
+
+## App Control for Business
+
+App Control was introduced with Windows 10 and allows organizations to control which drivers and applications are allowed to run on their Windows clients. It was designed as a security feature under the [servicing criteria](https://www.microsoft.com/msrc/windows-security-servicing-criteria), defined by the Microsoft Security Response Center (MSRC).
+
+App Control policies apply to the managed computer as a whole and affects all users of the device. App Control rules can be defined based on:
+
+- Attributes of the codesigning certificate(s) used to sign an app and its binaries
+- Attributes of the app's binaries that come from the signed metadata for the files, such as Original Filename and version, or the hash of the file
+- The reputation of the app as determined by Microsoft's [Intelligent Security Graph](design/use-appcontrol-with-intelligent-security-graph.md)
+- The identity of the process that initiated the installation of the app and its binaries ([managed installer](design/configure-authorized-apps-deployed-with-a-managed-installer.md))
+- The [path from which the app or file is launched](design/select-types-of-rules-to-create.md#more-information-about-filepath-rules) (beginning with Windows 10 version 1903)
+- The process that launched the app or binary
+
+> [!NOTE]
+> App Control was originally released as part of Device Guard and called configurable code integrity. Device Guard and configurable code integrity are no longer used except to find where to deploy App Control policy via Group Policy.
+
+### App Control System Requirements
+
+App Control policies can be created and applied on any client edition of Windows 10 or Windows 11, or on Windows Server 2016 and higher. App Control policies can be deployed via a Mobile Device Management (MDM) solution, for example, Intune; a management interface such as Configuration Manager; or a script host such as PowerShell. Group Policy can also be used to deploy App Control policies, but is limited to single-policy format policies that work on Windows Server 2016 and 2019.
+
+For more information on which individual App Control features are available on specific App Control builds, see [App Control feature availability](feature-availability.md).
+
+## AppLocker
+
+AppLocker was introduced with Windows 7, and allows organizations to control which applications are allowed to run on their Windows clients. AppLocker helps to prevent end-users from running unapproved software on their computers but doesn't meet the servicing criteria for being a security feature.
+
+AppLocker policies can apply to all users on a computer, or to individual users and groups. AppLocker rules can be defined based on:
+
+- Attributes of the codesigning certificate(s) used to sign an app and its binaries.
+- Attributes of the app's binaries that come from the signed metadata for the files, such as Original Filename and version, or the hash of the file.
+- The path from which the app or file is launched.
+
+AppLocker is also used by some features of App Control, including [managed installer](design/configure-authorized-apps-deployed-with-a-managed-installer.md) and the [Intelligent Security Graph](design/use-appcontrol-with-intelligent-security-graph.md).
+
+### AppLocker System Requirements
+
+AppLocker policies can only be configured on and applied to devices that are running on the supported versions and editions of the Windows operating system. For more info, see [Requirements to Use AppLocker](applocker/requirements-to-use-applocker.md).
+AppLocker policies can be deployed using Group Policy or MDM.
+
+## Choose when to use App Control or AppLocker
+
+Generally, customers who are able to implement application control using App Control, rather than AppLocker, should do so. App Control is undergoing continual improvements, and is getting added support from Microsoft management platforms. Although AppLocker continues to receive security fixes, it isn't getting new feature improvements.
+
+However, in some cases, AppLocker might be the more appropriate technology for your organization. AppLocker is best when:
+
+- You have a mixed Windows operating system (OS) environment and need to apply the same policy controls to Windows 10 and earlier versions of the OS.
+- You need to apply different policies for different users or groups on shared computers.
+- You don't want to enforce application control on application files such as DLLs or drivers.
+
+AppLocker can also be deployed as a complement to App Control to add user or group-specific rules for shared device scenarios, where it's important to prevent some users from running specific apps. As a best practice, you should enforce App Control at the most restrictive level possible for your organization, and then you can use AppLocker to further fine-tune the restrictions.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/wdac.md b/windows/security/application-security/application-control/app-control-for-business/appcontrol.md
similarity index 69%
rename from windows/security/application-security/application-control/windows-defender-application-control/wdac.md
rename to windows/security/application-security/application-control/app-control-for-business/appcontrol.md
index 2d0145d3bc..561da483b6 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/wdac.md
+++ b/windows/security/application-security/application-control/app-control-for-business/appcontrol.md
@@ -4,14 +4,13 @@ description: Application Control restricts which applications users are allowed
 ms.localizationpriority: medium
 ms.collection:
 - tier3
-ms.date: 08/30/2023
+ms.date: 09/11/2024
 ms.topic: overview
 ---
 
 # Application Control for Windows
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](feature-availability.md).
+[!INCLUDE [Feature availability note](includes/feature-availability-note.md)]
 
 With thousands of new malicious files created every day, using traditional methods like antivirus solutions-signature-based detection to fight against malware-provides an inadequate defense against new attacks.
 
@@ -26,14 +25,14 @@ Application control is a crucial line of defense for protecting enterprises give
 
 Windows 10 and Windows 11 include two technologies that can be used for application control depending on your organization's specific scenarios and requirements:
 
-- **Windows Defender Application Control (WDAC)**; and
+- **App Control for Business**; and
 - **AppLocker**
 
-## WDAC and Smart App Control
+## App Control and Smart App Control
 
-Starting in Windows 11 version 22H2, [Smart App Control](https://support.microsoft.com/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003) provides application control for consumers. Smart App Control is based on WDAC, allowing enterprise customers to create a policy that offers the same security and compatibility with the ability to customize it to run line-of-business (LOB) apps. To make it easier to implement this policy, an [example policy](design/example-wdac-base-policies.md) is provided. The example policy includes **Enabled:Conditional Windows Lockdown Policy** option that isn't supported for WDAC enterprise policies. This rule must be removed before you use the example policy. To use this example policy as a starting point for creating your own policy, see [Create a custom base policy using an example WDAC base policy](design/create-wdac-policy-for-lightly-managed-devices.md#create-a-custom-base-policy-using-an-example-wdac-base-policy).
+Starting in Windows 11 version 22H2, [Smart App Control](https://support.microsoft.com/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003) provides application control for consumers. Smart App Control is based on App Control, allowing enterprise customers to create a policy that offers the same security and compatibility with the ability to customize it to run line-of-business (LOB) apps. To make it easier to implement this policy, an [example policy](design/example-appcontrol-base-policies.md) is provided. The example policy includes **Enabled:Conditional Windows Lockdown Policy** option that isn't supported for App Control enterprise policies. This rule must be removed before you use the example policy. To use this example policy as a starting point for creating your own policy, see [Create a custom base policy using an example App Control base policy](design/create-appcontrol-policy-for-lightly-managed-devices.md#create-a-custom-base-policy-using-an-example-app-control-base-policy).
 
-Smart App Control is only available on clean installation of Windows 11 version 22H2 or later, and starts in evaluation mode. Smart App Control is automatically turned off for enterprise managed devices unless the user has turned it on first. To turn off Smart App Control across your organization's endpoints, you can set the **VerifiedAndReputablePolicyState** (DWORD) registry value under `HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy` as shown in the following table. After you change the registry value, you must either restart the device or use [CiTool.exe -r](/windows/security/threat-protection/windows-defender-application-control/operations/citool-commands#refresh-the-wdac-policies-on-the-system) for the change to take effect.
+Smart App Control is only available on clean installation of Windows 11 version 22H2 or later, and starts in evaluation mode. Smart App Control is automatically turned off for enterprise managed devices unless the user has turned it on first. To turn off Smart App Control across your organization's endpoints, you can set the **VerifiedAndReputablePolicyState** (DWORD) registry value under `HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy` as shown in the following table. After you change the registry value, you must either restart the device or use [CiTool.exe -r](operations/citool-commands.md#refresh-the-app-control-policies-on-the-system) for the change to take effect.
 
 | Value | Description |
 |-------|-------------|
@@ -46,7 +45,7 @@ Smart App Control is only available on clean installation of Windows 11 version
 
 ### Smart App Control Enforced Blocks
 
-Smart App Control enforces the [Microsoft Recommended Driver Block rules](design/microsoft-recommended-driver-block-rules.md) and the [Microsoft Recommended Block Rules](design/applications-that-can-bypass-wdac.md), with a few exceptions for compatibility considerations. The following aren't blocked by Smart App Control:
+Smart App Control enforces the [Microsoft Recommended Driver Block rules](design/microsoft-recommended-driver-block-rules.md) and the [Microsoft Recommended Block Rules](design/applications-that-can-bypass-appcontrol.md), with a few exceptions for compatibility considerations. The following aren't blocked by Smart App Control:
 
 - Infdefaultinstall.exe
 - Microsoft.Build.dll
@@ -57,7 +56,7 @@ Smart App Control enforces the [Microsoft Recommended Driver Block rules](design
 
 ## Related articles
 
-- [WDAC design guide](design/wdac-design-guide.md)
-- [WDAC deployment guide](deployment/wdac-deployment-guide.md)
-- [WDAC operational guide](operations/wdac-operational-guide.md)
+- [App Control design guide](design/appcontrol-design-guide.md)
+- [App Control deployment guide](deployment/appcontrol-deployment-guide.md)
+- [App Control operational guide](operations/appcontrol-operational-guide.md)
 - [AppLocker overview](applocker/applocker-overview.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md b/windows/security/application-security/application-control/app-control-for-business/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md
similarity index 97%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md
index 76569e20e6..64ec3acfbf 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/add-rules-for-packaged-apps-to-existing-applocker-rule-set.md
@@ -3,7 +3,7 @@ title: Add rules for packaged apps to existing AppLocker rule-set
 description: This article for IT professionals describes how to update your existing AppLocker policies for packaged apps using the Remote Server Administration Toolkit (RSAT).
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Add rules for packaged apps to existing AppLocker rule-set
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/administer-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/administer-applocker.md
similarity index 97%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/administer-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/administer-applocker.md
index a095fd7246..d2e0c1da1e 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/administer-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/administer-applocker.md
@@ -3,7 +3,7 @@ title: Administer AppLocker
 description: This article for IT professionals provides links to specific procedures to use when administering AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Administer AppLocker
@@ -27,11 +27,11 @@ AppLocker helps administrators control how users can access and use files, such
 | [Edit an AppLocker policy](edit-an-applocker-policy.md) | This article for IT professionals describes the steps required to modify an AppLocker policy. |
 | [Test and update an AppLocker policy](test-and-update-an-applocker-policy.md) | This article discusses the steps required to test an AppLocker policy prior to deployment. |
 | [Deploy AppLocker policies by using the enforce rules setting](deploy-applocker-policies-by-using-the-enforce-rules-setting.md) | This article for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method. |
-| [Use the AppLocker Windows PowerShell cmdlets](use-the-applocker-windows-powershell-cmdlets.md) | This article for IT professionals describes how each AppLocker Windows PowerShell cmdlet can help you administer your AppLocker application control policies. |
+| [Use the AppLocker Windows PowerShell cmdlets](use-the-applocker-windows-powershell-cmdlets.md) | This article for IT professionals describes how each AppLocker Windows PowerShell cmdlet can help you administer your AppLocker policies. |
 | [Optimize AppLocker performance](optimize-applocker-performance.md) | This article for IT professionals describes how to optimize AppLocker policy enforcement. |
 | [Monitor app usage with AppLocker](monitor-application-usage-with-applocker.md) | This article for IT professionals describes how to monitor app usage when AppLocker policies are applied. |
 | [Manage packaged apps with AppLocker](manage-packaged-apps-with-applocker.md) | This article for IT professionals describes concepts and lists procedures to help you manage Packaged apps with AppLocker as part of your overall application control strategy. |
-| [Working with AppLocker rules](working-with-applocker-rules.md) | This article for IT professionals describes AppLocker rule types and how to work with them for your application control policies. |
+| [Working with AppLocker rules](working-with-applocker-rules.md) | This article for IT professionals describes AppLocker rule types and how to work with them for your policies. |
 | [Working with AppLocker policies](working-with-applocker-policies.md) | This article for IT professionals provides links to procedural articles about creating, maintaining, and testing AppLocker policies. |
 
 ## Using the MMC snap-ins to administer AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-architecture-and-components.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-architecture-and-components.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-architecture-and-components.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-architecture-and-components.md
index 763fd8e86d..7314cce2f9 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-architecture-and-components.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-architecture-and-components.md
@@ -3,7 +3,7 @@ title: AppLocker architecture and components
 description: This article for IT professional describes AppLocker’s basic architecture and its major components.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker architecture and components
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-functions.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-functions.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-functions.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-functions.md
index 8ab68a0205..2ce3ad5532 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-functions.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-functions.md
@@ -3,7 +3,7 @@ title: AppLocker functions
 description: This article for the IT professional lists the functions and security levels for AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker functions
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview.md
similarity index 92%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview.md
index 654b172dca..1af7a371bb 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview.md
@@ -1,23 +1,23 @@
 ---
 title: AppLocker
-description: This article provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker application control policies.
+description: This article provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker policies.
 ms.collection:
 - tier3
 - must-keep
 ms.topic: conceptual
 ms.localizationpriority: medium
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # AppLocker
 
-This article provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker application control policies. AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers. AppLocker is also used by some features of Windows Defender Application Control.
+This article provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker policies. AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers. AppLocker is also used by some features of App Control for Business.
 
 > [!NOTE]
-> AppLocker is a defense-in-depth security feature and not considered a defensible Windows [security feature](https://www.microsoft.com/msrc/windows-security-servicing-criteria). [Windows Defender Application Control](/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview) should be used when the goal is to provide robust protection against a threat and there are expected to be no by-design limitations that would prevent the security feature from achieving this goal.
+> AppLocker is a defense-in-depth security feature and not considered a defensible Windows [security feature](https://www.microsoft.com/msrc/windows-security-servicing-criteria). [App Control for Business](../appcontrol-and-applocker-overview.md) should be used when the goal is to provide robust protection against a threat and there are expected to be no by-design limitations that would prevent the security feature from achieving this goal.
 
 > [!NOTE]
-> By default, AppLocker policy only applies to code launched in a user's context. On Windows 10, Windows 11, and Windows Server 2016 or later, you can apply AppLocker policy to non-user processes, including those running as SYSTEM. For more information, see [AppLocker rule collection extensions](/windows/security/application-security/application-control/windows-defender-application-control/applocker/rule-collection-extensions#services-enforcement).
+> By default, AppLocker policy only applies to code launched in a user's context. On Windows 10, Windows 11, and Windows Server 2016 or later, you can apply AppLocker policy to non-user processes, including those running as SYSTEM. For more information, see [AppLocker rule collection extensions](rule-collection-extensions.md#services-enforcement).
 
 AppLocker can help you:
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-deployment-guide.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-deployment-guide.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-deployment-guide.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-deployment-guide.md
index cb437f92b7..8520621d36 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-deployment-guide.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-deployment-guide.md
@@ -3,7 +3,7 @@ title: AppLocker deployment guide
 description: This article for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker deployment guide
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-design-guide.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-design-guide.md
similarity index 83%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-design-guide.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-design-guide.md
index 0299b53b2a..174ed4907c 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policies-design-guide.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policies-design-guide.md
@@ -3,7 +3,7 @@ title: AppLocker design guide
 description: This article for the IT professional introduces the design and planning steps required to deploy application control policies by using AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker design guide
@@ -12,14 +12,14 @@ This article for the IT professional introduces the design and planning steps re
 
 This guide provides important designing and planning information for deploying application control policies by using AppLocker. Through a sequential and iterative process, you can create an AppLocker policy deployment plan for your organization that addresses your specific application control requirements by department, organizational unit, or business group.
 
-To understand if AppLocker is the correct application control solution for your organization, see [Windows Defender Application Control and AppLocker overview](/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview).
+To understand if AppLocker is the correct application control solution for your organization, see [App Control for Business and AppLocker overview](../appcontrol-and-applocker-overview.md).
 
 ## In this section
 
 | Article | Description |
 | --- | --- |
 | [Understand AppLocker policy design decisions](understand-applocker-policy-design-decisions.md) | This article describes AppLocker design questions, possible answers, and other considerations when you plan a deployment of application control policies by using AppLocker. |
-| [Determine your application control objectives](determine-your-application-control-objectives.md) | This article helps you with the decisions you need to make to determine what applications to control and how to control them using AppLocker. |
+| [Determine your application control objectives](../appcontrol-and-applocker-overview.md) | This article helps you with the decisions you need to make to determine what applications to control and how to control them using AppLocker. |
 | [Create a list of apps deployed to each business group](create-list-of-applications-deployed-to-each-business-group.md) | This article describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker. |
 | [Select the types of rules to create](select-types-of-rules-to-create.md) | This article lists resources you can use when selecting your application control policy rules by using AppLocker. |
 | [Determine the Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md) | This overview article describes the process to follow when you're planning to deploy AppLocker rules. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policy-use-scenarios.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policy-use-scenarios.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policy-use-scenarios.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policy-use-scenarios.md
index a2776beaac..0d11e182ca 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-policy-use-scenarios.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-policy-use-scenarios.md
@@ -3,7 +3,7 @@ title: AppLocker policy use scenarios
 description: This article for the IT professional lists the various application control scenarios in which AppLocker policies can be effectively implemented.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker policy use scenarios
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-processes-and-interactions.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-processes-and-interactions.md
similarity index 94%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-processes-and-interactions.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-processes-and-interactions.md
index 36cd302f29..4bc0bd0949 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-processes-and-interactions.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-processes-and-interactions.md
@@ -3,13 +3,12 @@ title: AppLocker processes and interactions
 description: This article for the IT professional describes the process dependencies and interactions when AppLocker evaluates and enforces rules.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker processes and interactions
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
 This article for the IT professional describes the process dependencies and interactions when AppLocker evaluates and enforces rules.
 
@@ -77,7 +76,7 @@ There are three different types of conditions that can be applied to rules:
 
 An AppLocker policy is a set of rule collections and their corresponding configured enforcement mode settings applied to one or more computers.
 
-- [Understand AppLocker enforcement settings](understand-applocker-enforcement-settings.md)
+- [Understand AppLocker enforcement settings](working-with-applocker-rules.md#enforcement-modes)
 
     Rule enforcement is applied only to collections of rules, not individual rules. AppLocker divides the rules into four collections: executable files, Windows Installer files, scripts, and DLL files. The options for rule enforcement are **Not configured**, **Enforce rules**, or **Audit only**. Together, all AppLocker rule collections compose the application control policy, or AppLocker policy. By default, if enforcement isn't configured and rules are present in a rule collection, those rules are enforced.
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-technical-reference.md b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-technical-reference.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-technical-reference.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/applocker-technical-reference.md
index 0952a3d433..5dd3820526 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-technical-reference.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-technical-reference.md
@@ -3,7 +3,7 @@ title: AppLocker technical reference
 description: This overview article for IT professionals provides links to the articles in the technical reference.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # AppLocker technical reference
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-audit-only.md b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-audit-only.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-audit-only.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-audit-only.md
index b6654f9688..422f3a9acd 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-audit-only.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-audit-only.md
@@ -3,7 +3,7 @@ title: Configure an AppLocker policy for audit only
 description: This article for IT professionals describes how to set AppLocker policies to Audit only within your IT environment by using AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Configure an AppLocker policy for audit only
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-enforce-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-enforce-rules.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-enforce-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-enforce-rules.md
index 5762b9c128..07c51af5bb 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-an-applocker-policy-for-enforce-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-an-applocker-policy-for-enforce-rules.md
@@ -3,7 +3,7 @@ title: Configure an AppLocker policy for enforce rules
 description: This article for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Configure an AppLocker policy for enforce rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule.md b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-exceptions-for-an-applocker-rule.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/configure-exceptions-for-an-applocker-rule.md
index 3e1a1dcca4..11900e02c0 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-exceptions-for-an-applocker-rule.md
@@ -3,7 +3,7 @@ title: Add exceptions for an AppLocker rule
 description: This article for IT professionals describes the steps to specify which apps can or can't run as exceptions to an AppLocker rule.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Add exceptions for an AppLocker rule
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-appLocker-reference-device.md b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-appLocker-reference-device.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-appLocker-reference-device.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-appLocker-reference-device.md
index 9ad52b4cd3..f6acca16ba 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-appLocker-reference-device.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-appLocker-reference-device.md
@@ -3,7 +3,7 @@ title: Configure the AppLocker reference device
 description: This article for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Configure the AppLocker reference device
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-application-identity-service.md b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-application-identity-service.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-application-identity-service.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-application-identity-service.md
index b31f8f059d..c4156e9b57 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-the-application-identity-service.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/configure-the-application-identity-service.md
@@ -3,7 +3,7 @@ title: Configure the Application Identity service
 description: This article for IT professionals shows how to configure the Application Identity service to start automatically or manually.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Configure the Application Identity service
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-for-packaged-apps.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-for-packaged-apps.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-for-packaged-apps.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-for-packaged-apps.md
index 6f06404070..07fd6f2866 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-for-packaged-apps.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-for-packaged-apps.md
@@ -3,7 +3,7 @@ title: Create a rule for packaged apps
 description: This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Create a rule for packaged apps
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-file-hash-condition.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-file-hash-condition.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-file-hash-condition.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-file-hash-condition.md
index a486b03055..b764bb0493 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-file-hash-condition.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-file-hash-condition.md
@@ -3,7 +3,7 @@ title: Create a rule that uses a file hash condition
 description: This article for IT professionals shows how to create an AppLocker rule with a file hash condition.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Create a rule that uses a file hash condition
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-path-condition.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-path-condition.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-path-condition.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-path-condition.md
index c90bf8fe32..fe26c1ee6a 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-path-condition.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-path-condition.md
@@ -3,7 +3,7 @@ title: Create a rule that uses a path condition
 description: This article for IT professionals shows how to create an AppLocker rule with a path condition.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Create a rule that uses a path condition
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-publisher-condition.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-publisher-condition.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-publisher-condition.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-publisher-condition.md
index 8da8f1de23..9b07438ec7 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-a-rule-that-uses-a-publisher-condition.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-a-rule-that-uses-a-publisher-condition.md
@@ -3,7 +3,7 @@ title: Create a rule that uses a publisher condition
 description: This article for IT professionals shows how to create an AppLocker rule with a publisher condition.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Create a rule that uses a publisher condition
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-applocker-default-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-applocker-default-rules.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-applocker-default-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-applocker-default-rules.md
index b6ddfb364e..fd2aa8e292 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-applocker-default-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-applocker-default-rules.md
@@ -3,7 +3,7 @@ title: Create AppLocker default rules
 description: This article for IT professionals describes the steps to create a standard set of AppLocker rules that allow Windows system files to run.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Create AppLocker default rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-list-of-applications-deployed-to-each-business-group.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-list-of-applications-deployed-to-each-business-group.md
similarity index 97%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-list-of-applications-deployed-to-each-business-group.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-list-of-applications-deployed-to-each-business-group.md
index de0b5c522f..f015e79882 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-list-of-applications-deployed-to-each-business-group.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-list-of-applications-deployed-to-each-business-group.md
@@ -3,7 +3,7 @@ title: Create a list of apps deployed to each business group
 description: This article describes the process of gathering app usage requirements from each business group to implement application control policies by using AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Gathering app usage requirements
@@ -30,7 +30,7 @@ Using the Automatically Generate Rules wizard quickly creates rules for the appl
 Using the **Audit only** enforcement method permits you to view the logs because it collects information about every process on the computers receiving the Group Policy Object (GPO). Therefore, you can evaluate the possible effects of enforcement on computers in a business group. AppLocker includes Windows PowerShell cmdlets that you can use to analyze the events from the event log and cmdlets to create rules. However, when you use Group Policy to deploy to several computers, a means to collect events in a central location is important for manageability. Because AppLocker logs information about files that users or other processes start on a computer, you could miss creating some rules initially. Therefore, you should continue your evaluation until you can verify that all required applications that are allowed to run are accessed successfully.
 
 > [!TIP]
-> If you run Application Verifier against a custom application with any AppLocker policies enabled, it might prevent the application from running. You should either disable Application Verifier or AppLocker.  
+> If you run Application Verifier against a custom application with any AppLocker policies enabled, it might prevent the application from running. You should either disable Application Verifier or AppLocker.
 
 You can create an inventory of Packaged apps on a device by using two methods: the **Get-AppxPackage** Windows PowerShell cmdlet or the AppLocker console.
 
@@ -44,7 +44,7 @@ The following articles describe how to perform each method:
 Identify the business group and each organizational unit (OU) within that group for application control policies. In addition, you should identify whether or not AppLocker is the most appropriate solution for these policies. For info about these steps, see the following articles:
 
 - [Understand AppLocker policy design decisions](understand-applocker-policy-design-decisions.md)
-- [Determine your application control objectives](determine-your-application-control-objectives.md)
+- [Determine your application control objectives](../appcontrol-and-applocker-overview.md)
 
 ## Next steps
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-policies.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-policies.md
similarity index 97%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-policies.md
index 1b14478169..69119137f4 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-policies.md
@@ -3,7 +3,7 @@ title: Create Your AppLocker policies
 description: This overview article for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Create Your AppLocker policies
@@ -18,7 +18,7 @@ You can develop an application control policy plan to guide you in making succes
 
 1. [Understand the AppLocker policy deployment process](understand-the-applocker-policy-deployment-process.md)
 2. [Understand AppLocker policy design decisions](understand-applocker-policy-design-decisions.md)
-3. [Determine your application control objectives](determine-your-application-control-objectives.md)
+3. [Determine your application control objectives](../appcontrol-and-applocker-overview.md)
 4. [Create a list of apps deployed to each business group](create-list-of-applications-deployed-to-each-business-group.md)
 5. [Select the types of rules to create](select-types-of-rules-to-create.md)
 6. [Determine the Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-rules.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-rules.md
index e04367462f..415e9582f8 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/create-your-applocker-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/create-your-applocker-rules.md
@@ -3,7 +3,7 @@ title: Create Your AppLocker rules
 description: This article for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Create Your AppLocker rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/delete-an-applocker-rule.md b/windows/security/application-security/application-control/app-control-for-business/applocker/delete-an-applocker-rule.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/delete-an-applocker-rule.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/delete-an-applocker-rule.md
index 0c7ba5799c..95836e5b28 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/delete-an-applocker-rule.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/delete-an-applocker-rule.md
@@ -3,7 +3,7 @@ title: Delete an AppLocker rule
 description: This article for IT professionals describes the steps to delete an AppLocker rule.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Delete an AppLocker rule
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md b/windows/security/application-security/application-control/app-control-for-business/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md
similarity index 92%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md
index e974fdf194..83e603b364 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/deploy-applocker-policies-by-using-the-enforce-rules-setting.md
@@ -3,7 +3,7 @@ title: Deploy AppLocker policies by using the enforce rules setting
 description: This article for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Deploy AppLocker policies by using the enforce rules setting
@@ -14,7 +14,7 @@ This article for IT professionals describes the steps to deploy AppLocker polici
 
 These procedures assume that your AppLocker policies are deployed with the enforcement mode set to **Audit only**, and you have been collecting data through the AppLocker event logs and other channels to determine what effect these policies have on your environment and the policy's adherence to your application control design.
 
-For info about the AppLocker policy enforcement setting, see [Understand AppLocker enforcement settings](understand-applocker-enforcement-settings.md).
+For info about the AppLocker policy enforcement setting, see [Understand AppLocker enforcement settings](working-with-applocker-rules.md#enforcement-modes).
 
 For info about how to plan an AppLocker policy deployment, see [AppLocker Design Guide](applocker-policies-design-guide.md).
 
@@ -24,7 +24,7 @@ Updating an AppLocker policy that is currently enforced in your production envir
 
 ## Step 2: Alter the enforcement setting
 
-Rule enforcement is applied to all rules within a rule collection, not to individual rules. AppLocker divides the rules into collections: executable files, Windows Installer files, packaged apps, scripts, and DLL files. For information about the enforcement mode setting, see [Understand AppLocker Enforcement Settings](understand-applocker-enforcement-settings.md). For the procedure to alter the enforcement mode setting, see [Configure an AppLocker policy for audit only](configure-an-applocker-policy-for-audit-only.md).
+Rule enforcement is applied to all rules within a rule collection, not to individual rules. AppLocker divides the rules into collections: executable files, Windows Installer files, packaged apps, scripts, and DLL files. For information about the enforcement mode setting, see [Understand AppLocker Enforcement Settings](working-with-applocker-rules.md#enforcement-modes). For the procedure to alter the enforcement mode setting, see [Configure an AppLocker policy for audit only](configure-an-applocker-policy-for-audit-only.md).
 
 ## Step 3: Update the policy
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-the-applocker-policy-into-production.md b/windows/security/application-security/application-control/app-control-for-business/applocker/deploy-the-applocker-policy-into-production.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-the-applocker-policy-into-production.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/deploy-the-applocker-policy-into-production.md
index d2ef52adad..941a047e99 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/deploy-the-applocker-policy-into-production.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/deploy-the-applocker-policy-into-production.md
@@ -3,7 +3,7 @@ title: Deploy the AppLocker policy into production
 description: This article for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Deploy the AppLocker policy into production
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-group-policy-structure-and-rule-enforcement.md b/windows/security/application-security/application-control/app-control-for-business/applocker/determine-group-policy-structure-and-rule-enforcement.md
similarity index 87%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-group-policy-structure-and-rule-enforcement.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/determine-group-policy-structure-and-rule-enforcement.md
index fb13e22d88..29380fe1e1 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-group-policy-structure-and-rule-enforcement.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/determine-group-policy-structure-and-rule-enforcement.md
@@ -3,7 +3,7 @@ title: Determine the Group Policy structure and rule enforcement
 description: This overview article describes the process to follow when you're planning to deploy AppLocker rules.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Determine the Group Policy structure and rule enforcement
@@ -14,7 +14,7 @@ This overview article describes the process to follow when you're planning to de
 
 | Article | Description |
 | --- | --- |
-| [Understand AppLocker enforcement settings](understand-applocker-enforcement-settings.md) | This article describes the AppLocker enforcement settings for rule collections. |
+| [Understand AppLocker enforcement settings](working-with-applocker-rules.md#enforcement-modes) | This article describes the AppLocker enforcement settings for rule collections. |
 | [Understand AppLocker rules and enforcement setting inheritance in Group Policy](understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md) | This article for the IT professional describes how application control policies configured in AppLocker are applied through Group Policy.|
 | [Document the Group Policy structure and AppLocker rule enforcement](document-group-policy-structure-and-applocker-rule-enforcement.md) | This planning article describes what you need to investigate, determine, and document for your policy plan when you use AppLocker. |
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md b/windows/security/application-security/application-control/app-control-for-business/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md
index 56fef83f74..e1c6c88c0a 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/determine-which-applications-are-digitally-signed-on-a-reference-computer.md
@@ -3,7 +3,7 @@ title: Find digitally signed apps on a reference device
 description: This article for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Determine which apps are digitally signed on a reference device
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md b/windows/security/application-security/application-control/app-control-for-business/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md
index 64307b01ba..bf1a962a76 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/display-a-custom-url-message-when-users-try-to-run-a-blocked-application.md
@@ -3,7 +3,7 @@ title: Display a custom URL message when users try to run a blocked app
 description: This article for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy blocks an app.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Display a custom URL message when users try to run a blocked app
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/dll-rules-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/dll-rules-in-applocker.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/dll-rules-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/dll-rules-in-applocker.md
index 36da65e276..054c18fb61 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/dll-rules-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/dll-rules-in-applocker.md
@@ -3,7 +3,7 @@ title: DLL rules in AppLocker
 description: This article describes the file formats and available default rules for the DLL rule collection.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # DLL rules in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md b/windows/security/application-security/application-control/app-control-for-business/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md
similarity index 95%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md
index 294689bc28..b440a69b68 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/document-group-policy-structure-and-applocker-rule-enforcement.md
@@ -3,7 +3,7 @@ title: Document Group Policy structure & AppLocker rule enforcement
 description: This planning article describes what you need to include in your plan when you use AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Document the Group Policy structure and AppLocker rule enforcement
@@ -14,7 +14,7 @@ This planning article describes what you should include in your plan when you us
 
 To complete this AppLocker planning document, you should first complete the following steps:
 
-1. [Determine your application control objectives](determine-your-application-control-objectives.md)
+1. [Determine your application control objectives](../appcontrol-and-applocker-overview.md)
 2. [Create a list of apps deployed to each business group](create-list-of-applications-deployed-to-each-business-group.md)
 3. [Select the types of rules to create](select-types-of-rules-to-create.md)
 4. [Determine the Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-application-list.md b/windows/security/application-security/application-control/app-control-for-business/applocker/document-your-application-list.md
similarity index 97%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-application-list.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/document-your-application-list.md
index f42d12d410..00e357875d 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-application-list.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/document-your-application-list.md
@@ -3,7 +3,7 @@ title: Document your app list
 description: This planning article describes the app information that you should document when you create a list of apps for AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Document your app list
@@ -14,7 +14,7 @@ This planning article describes the app information that you should document whe
 
 ### Apps
 
-Record the name of the app, its publisher information (if digitally signed), and its importance to the business. 
+Record the name of the app, its publisher information (if digitally signed), and its importance to the business.
 
 ### Installation path
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-applocker-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/document-your-applocker-rules.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-applocker-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/document-your-applocker-rules.md
index 1d5ff7d78e..efd0c0211f 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/document-your-applocker-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/document-your-applocker-rules.md
@@ -3,7 +3,7 @@ title: Document your AppLocker rules
 description: Learn how to document your AppLocker rules and associate rule conditions with files, permissions, rule source, and implementation.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Document your AppLocker rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-an-applocker-policy.md b/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-an-applocker-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy.md
index fe3ac2062b..3ebf404dc6 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-an-applocker-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy.md
@@ -3,7 +3,7 @@ title: Edit an AppLocker policy
 description: This article for IT professionals describes the steps required to modify an AppLocker policy.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Edit an AppLocker policy
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-applocker-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/edit-applocker-rules.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-applocker-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/edit-applocker-rules.md
index 111678d496..7ae6e91083 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/edit-applocker-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/edit-applocker-rules.md
@@ -3,7 +3,7 @@ title: Edit AppLocker rules
 description: This article for IT professionals describes the steps to edit a publisher rule, path rule, and file hash rule in AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Edit AppLocker rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/enable-the-dll-rule-collection.md b/windows/security/application-security/application-control/app-control-for-business/applocker/enable-the-dll-rule-collection.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/enable-the-dll-rule-collection.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/enable-the-dll-rule-collection.md
index d48deeaad8..c2569a0918 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/enable-the-dll-rule-collection.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/enable-the-dll-rule-collection.md
@@ -3,7 +3,7 @@ title: Enable the DLL rule collection
 description: This article for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Enable the DLL rule collection
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/enforce-applocker-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/enforce-applocker-rules.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/enforce-applocker-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/enforce-applocker-rules.md
index 757d76eb6c..2abb621ddc 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/enforce-applocker-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/enforce-applocker-rules.md
@@ -3,7 +3,7 @@ title: Enforce AppLocker rules
 description: This article for IT professionals describes how to enforce application control rules by using AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Enforce AppLocker rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/executable-rules-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/executable-rules-in-applocker.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/executable-rules-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/executable-rules-in-applocker.md
index e90dc2b98e..99ffe04a6d 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/executable-rules-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/executable-rules-in-applocker.md
@@ -3,7 +3,7 @@ title: Executable rules in AppLocker
 description: This article describes the file formats and available default rules for the executable rule collection.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Executable rules in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-from-a-gpo.md b/windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-from-a-gpo.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-from-a-gpo.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-from-a-gpo.md
index b4150f2544..c9fe560838 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-from-a-gpo.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-from-a-gpo.md
@@ -3,7 +3,7 @@ title: Export an AppLocker policy from a GPO
 description: This article for IT professionals describes the steps to export an AppLocker policy from a Group Policy Object (GPO) so that it can be modified.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Export an AppLocker policy from a GPO
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-to-an-xml-file.md b/windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-to-an-xml-file.md
similarity index 97%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-to-an-xml-file.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-to-an-xml-file.md
index 9612096a6e..106a4d836e 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-to-an-xml-file.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/export-an-applocker-policy-to-an-xml-file.md
@@ -3,7 +3,7 @@ title: Export an AppLocker policy to an XML file
 description: This article for IT professionals describes the steps to export an AppLocker policy to an XML file for review or testing.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Export an AppLocker policy to an XML file
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/how-applocker-works-techref.md b/windows/security/application-security/application-control/app-control-for-business/applocker/how-applocker-works-techref.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/how-applocker-works-techref.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/how-applocker-works-techref.md
index b2f3e10097..c704a9e977 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/how-applocker-works-techref.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/how-applocker-works-techref.md
@@ -3,7 +3,7 @@ title: How AppLocker works
 description: This article for the IT professional provides links to articles about AppLocker architecture and components, processes and interactions, rules and policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # How AppLocker works
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/images/applocker-plan-inheritance.gif b/windows/security/application-security/application-control/app-control-for-business/applocker/images/applocker-plan-inheritance.gif
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/images/applocker-plan-inheritance.gif
rename to windows/security/application-security/application-control/app-control-for-business/applocker/images/applocker-plan-inheritance.gif
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/images/applocker-plandeploy-quickreference.gif b/windows/security/application-security/application-control/app-control-for-business/applocker/images/applocker-plandeploy-quickreference.gif
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/images/applocker-plandeploy-quickreference.gif
rename to windows/security/application-security/application-control/app-control-for-business/applocker/images/applocker-plandeploy-quickreference.gif
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/images/blockedappmsg.gif b/windows/security/application-security/application-control/app-control-for-business/applocker/images/blockedappmsg.gif
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/images/blockedappmsg.gif
rename to windows/security/application-security/application-control/app-control-for-business/applocker/images/blockedappmsg.gif
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-from-another-computer.md b/windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-from-another-computer.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-from-another-computer.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-from-another-computer.md
index 6998942c9b..2472b7892c 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-from-another-computer.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-from-another-computer.md
@@ -3,7 +3,7 @@ title: Import an AppLocker policy from another computer
 description: This article for IT professionals describes how to import an AppLocker policy.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Import an AppLocker policy from another computer
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-into-a-gpo.md b/windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-into-a-gpo.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-into-a-gpo.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-into-a-gpo.md
index cf00b805b3..039d978649 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/import-an-applocker-policy-into-a-gpo.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/import-an-applocker-policy-into-a-gpo.md
@@ -3,7 +3,7 @@ title: Import an AppLocker policy into a GPO
 description: This article for IT professionals describes the steps to import an AppLocker policy into a Group Policy Object (GPO).
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Import an AppLocker policy into a GPO
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/maintain-applocker-policies.md b/windows/security/application-security/application-control/app-control-for-business/applocker/maintain-applocker-policies.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/maintain-applocker-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/maintain-applocker-policies.md
index 75f6df943a..a4926c5f73 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/maintain-applocker-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/maintain-applocker-policies.md
@@ -3,7 +3,7 @@ title: Maintain AppLocker policies
 description: Learn how to maintain rules within AppLocker policies. View common AppLocker maintenance scenarios and see the methods to use to maintain AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Maintain AppLocker policies
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/manage-packaged-apps-with-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/manage-packaged-apps-with-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/manage-packaged-apps-with-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/manage-packaged-apps-with-applocker.md
index f190ea35b7..b3e041a0f1 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/manage-packaged-apps-with-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/manage-packaged-apps-with-applocker.md
@@ -3,7 +3,7 @@ title: Manage packaged apps with AppLocker
 description: Learn concepts and lists procedures to help you manage packaged apps with AppLocker as part of your overall application control strategy.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/20/2023
+ms.date: 09/11/2024
 ---
 
 # Manage packaged apps with AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md b/windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md
similarity index 89%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md
index 2489e8b738..4df24222a0 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-by-using-set-applockerpolicy.md
@@ -3,14 +3,14 @@ title: Merge AppLocker policies by using Set-ApplockerPolicy
 description: This article for IT professionals describes the steps to merge AppLocker policies by using Windows PowerShell.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Merge AppLocker policies by using Set-ApplockerPolicy
 
 This article for IT professionals describes the steps to merge AppLocker policies by using Windows PowerShell.
 
-The **Set-AppLockerPolicy** cmdlet sets the specified Group Policy Object (GPO) to contain the specified AppLocker policy. If no Lightweight Directory Access Protocol (LDAP) is specified, the local policy is used. When the Merge parameter is used, rules in the specified AppLocker policy are merged with the AppLocker rules in the target GPO specified in the LDAP path. Merging policies removes rules with duplicate rule IDs, and the enforcement mode setting is chosen as described in [Working with AppLocker rules](/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules#enforcement-modes). If the Merge parameter isn't specified, then the new policy overwrites the existing policy.
+The **Set-AppLockerPolicy** cmdlet sets the specified Group Policy Object (GPO) to contain the specified AppLocker policy. If no Lightweight Directory Access Protocol (LDAP) is specified, the local policy is used. When the Merge parameter is used, rules in the specified AppLocker policy are merged with the AppLocker rules in the target GPO specified in the LDAP path. Merging policies removes rules with duplicate rule IDs, and the enforcement mode setting is chosen as described in [Working with AppLocker rules](working-with-applocker-rules.md#enforcement-modes). If the Merge parameter isn't specified, then the new policy overwrites the existing policy.
 
 For info about using **Set-AppLockerPolicy**, including syntax descriptions and parameters, see [Set-AppLockerPolicy](/powershell/module/applocker/set-applockerpolicy).
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-manually.md b/windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-manually.md
similarity index 79%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-manually.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-manually.md
index a17f0dbc2f..324bef3248 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/merge-applocker-policies-manually.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/merge-applocker-policies-manually.md
@@ -3,7 +3,7 @@ title: Merge AppLocker policies manually
 description: This article for IT professionals describes the steps to manually merge AppLocker policies to update the Group Policy Object (GPO).
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Merge AppLocker policies manually
@@ -12,7 +12,7 @@ This article for IT professionals describes the steps to manually merge AppLocke
 
 If you need to merge multiple AppLocker policies into a single one, you can either manually merge the policies or use the Windows PowerShell cmdlets for AppLocker. You can't automatically merge policies by using the AppLocker console. For info about merging policies by using Windows PowerShell, see [Merge AppLocker policies by using Set-ApplockerPolicy](merge-applocker-policies-by-using-set-applockerpolicy.md).
 
-The AppLocker policy is stored in XML format, and an exported policy can be edited with any text or XML editor. To export an AppLocker policy, see [Export an AppLocker policy to an XML file](/windows/security/application-security/application-control/windows-defender-application-control/applocker/export-an-applocker-policy-to-an-xml-file). Before making changes to an AppLocker policy manually, review [Working with AppLocker rules](/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules).
+The AppLocker policy is stored in XML format, and an exported policy can be edited with any text or XML editor. To export an AppLocker policy, see [Export an AppLocker policy to an XML file](export-an-applocker-policy-to-an-xml-file.md). Before making changes to an AppLocker policy manually, review [Working with AppLocker rules](working-with-applocker-rules.md).
 
 Membership in the local **Administrators** group, or equivalent, is the minimum required to complete this procedure.
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/monitor-application-usage-with-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/monitor-application-usage-with-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/monitor-application-usage-with-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/monitor-application-usage-with-applocker.md
index 984bdf95d2..14b704afe3 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/monitor-application-usage-with-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/monitor-application-usage-with-applocker.md
@@ -3,7 +3,7 @@ title: Monitor app usage with AppLocker
 description: This article for IT professionals describes how to monitor app usage when AppLocker policies are applied.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/19/2023
+ms.date: 09/11/2024
 ---
 
 # Monitor app usage with AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/optimize-applocker-performance.md b/windows/security/application-security/application-control/app-control-for-business/applocker/optimize-applocker-performance.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/optimize-applocker-performance.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/optimize-applocker-performance.md
index 63277272b1..f160bda367 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/optimize-applocker-performance.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/optimize-applocker-performance.md
@@ -3,7 +3,7 @@ title: Optimize AppLocker performance
 description: This article for IT professionals describes how to optimize AppLocker policy enforcement.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Optimize AppLocker performance
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md
index d084a76681..7085567383 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker.md
@@ -3,7 +3,7 @@ title: Packaged apps and packaged app installer rules in AppLocker
 description: This article explains the AppLocker rule collection for packaged app installers and packaged apps.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Packaged apps and packaged app installer rules in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/plan-for-applocker-policy-management.md b/windows/security/application-security/application-control/app-control-for-business/applocker/plan-for-applocker-policy-management.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/plan-for-applocker-policy-management.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/plan-for-applocker-policy-management.md
index d82b85d412..51f30ea841 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/plan-for-applocker-policy-management.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/plan-for-applocker-policy-management.md
@@ -3,7 +3,7 @@ title: Plan for AppLocker policy management
 description: This article describes the decisions you need to make to establish the processes for managing and maintaining AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Plan for AppLocker policy management
@@ -58,7 +58,7 @@ AppLocker event log is located in the following path: **Applications and Service
 2. **MSI and Script**. Contains events for all files affected by the Windows Installer and script rule collections (.msi, .msp, .ps1, .bat, .cmd, .vbs, and .js).
 3. **Packaged app-Deployment** or **Packaged app-Execution**, contains events for all Universal Windows apps affected by the packaged app and packed app installer rule collection (.appx).
 
-Collecting these events in a central location can help you maintain your AppLocker policy and troubleshoot rule configuration problems. 
+Collecting these events in a central location can help you maintain your AppLocker policy and troubleshoot rule configuration problems.
 
 ### Policy maintenance
 
@@ -101,7 +101,7 @@ Before editing the rule collection, first determine what rule is preventing the
 
 To complete this AppLocker planning document, you should first complete the following steps:
 
-1. [Determine your application control objectives](determine-your-application-control-objectives.md)
+1. [Determine your application control objectives](../appcontrol-and-applocker-overview.md)
 2. [Create a list of apps deployed to each business group](create-list-of-applications-deployed-to-each-business-group.md)
 3. [Select the types of rules to create](select-types-of-rules-to-create.md)
 4. [Determine the Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/refresh-an-applocker-policy.md b/windows/security/application-security/application-control/app-control-for-business/applocker/refresh-an-applocker-policy.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/refresh-an-applocker-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/refresh-an-applocker-policy.md
index 4dcd7f89ab..5d2df1f250 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/refresh-an-applocker-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/refresh-an-applocker-policy.md
@@ -3,7 +3,7 @@ title: Refresh an AppLocker policy
 description: This article for IT professionals describes the steps to force an update for an AppLocker policy.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Refresh an AppLocker policy
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-for-deploying-applocker-policies.md b/windows/security/application-security/application-control/app-control-for-business/applocker/requirements-for-deploying-applocker-policies.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-for-deploying-applocker-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/requirements-for-deploying-applocker-policies.md
index eb55e89166..2caf917483 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-for-deploying-applocker-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/requirements-for-deploying-applocker-policies.md
@@ -3,7 +3,7 @@ title: Requirements for deploying AppLocker policies
 description: This deployment article for the IT professional lists the requirements that you need to consider before you deploy AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Requirements for deploying AppLocker policies
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-to-use-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/requirements-to-use-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-to-use-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/requirements-to-use-applocker.md
index 3d5dcd1008..7bb94f1197 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/requirements-to-use-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/requirements-to-use-applocker.md
@@ -3,7 +3,7 @@ title: Requirements to use AppLocker
 description: This article for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Requirements to use AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/rule-collection-extensions.md b/windows/security/application-security/application-control/app-control-for-business/applocker/rule-collection-extensions.md
similarity index 86%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/rule-collection-extensions.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/rule-collection-extensions.md
index f8756d82ac..e4481ab2c7 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/rule-collection-extensions.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/rule-collection-extensions.md
@@ -6,7 +6,7 @@ ms.collection:
 - must-keep
 ms.topic: conceptual
 ms.localizationpriority: medium
-ms.date: 06/07/2024
+ms.date: 09/11/2024
 ---
 
 # AppLocker rule collection extensions
@@ -29,7 +29,7 @@ This article describes the rule collection extensions added in Windows 10 and la
 
 ## Services enforcement
 
-By default, AppLocker policy only applies to code running in a user's context. On Windows 10, Windows 11, and Windows Server 2016 or later, you can apply AppLocker policy to nonuser processes, including services running as SYSTEM. You must enable services enforcement when using AppLocker with Windows Defender Application Control's (WDAC) [managed installer](/windows/security/application-security/application-control/windows-defender-application-control/design/configure-authorized-apps-deployed-with-a-managed-installer) feature.
+By default, AppLocker policy only applies to code running in a user's context. On Windows 10, Windows 11, and Windows Server 2016 or later, you can apply AppLocker policy to nonuser processes, including services running as SYSTEM. You must enable services enforcement when using AppLocker with App Control for Business's [managed installer](../design/configure-authorized-apps-deployed-with-a-managed-installer.md) feature.
 
 To apply AppLocker policy to nonuser processes, set ``<Services EnforcementMode="Enabled"/>`` in the ``<ThresholdExtensions>`` section as shown in the preceding XML fragment.
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/run-the-automatically-generate-rules-wizard.md b/windows/security/application-security/application-control/app-control-for-business/applocker/run-the-automatically-generate-rules-wizard.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/run-the-automatically-generate-rules-wizard.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/run-the-automatically-generate-rules-wizard.md
index d4d62202c4..3108458c0f 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/run-the-automatically-generate-rules-wizard.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/run-the-automatically-generate-rules-wizard.md
@@ -3,7 +3,7 @@ title: Run the Automatically Generate Rules wizard
 description: This article for IT professionals describes steps to run the wizard to create AppLocker rules on a reference device.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Run the Automatically Generate Rules wizard
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/script-rules-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/script-rules-in-applocker.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/script-rules-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/script-rules-in-applocker.md
index 0343d4d644..bc342eba8b 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/script-rules-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/script-rules-in-applocker.md
@@ -3,7 +3,7 @@ title: Script rules in AppLocker
 description: This article describes the file formats and available default rules for the script rule collection.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Script rules in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/security-considerations-for-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/security-considerations-for-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/security-considerations-for-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/security-considerations-for-applocker.md
index 0422c26a4d..6a11796ca7 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/security-considerations-for-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/security-considerations-for-applocker.md
@@ -3,7 +3,7 @@ title: Security considerations for AppLocker
 description: This article for the IT professional describes the security considerations you need to address when implementing AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Security considerations for AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/select-types-of-rules-to-create.md b/windows/security/application-security/application-control/app-control-for-business/applocker/select-types-of-rules-to-create.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/select-types-of-rules-to-create.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/select-types-of-rules-to-create.md
index 6c5dde6cc8..8000ce41d4 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/select-types-of-rules-to-create.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/select-types-of-rules-to-create.md
@@ -3,7 +3,7 @@ title: Select the types of rules to create
 description: This article lists resources you can use when selecting your application control policy rules by using AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Select the types of rules to create
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md b/windows/security/application-security/application-control/app-control-for-business/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md
index 180145ef77..c7042db13e 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/test-an-applocker-policy-by-using-test-applockerpolicy.md
@@ -3,7 +3,7 @@ title: Test an AppLocker policy by using Test-AppLockerPolicy
 description: This article for IT professionals describes the steps to test an AppLocker policy prior to importing it into a Group Policy Object (GPO) or another computer.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Test an AppLocker policy by using Test-AppLockerPolicy
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/test-and-update-an-applocker-policy.md b/windows/security/application-security/application-control/app-control-for-business/applocker/test-and-update-an-applocker-policy.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/test-and-update-an-applocker-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/test-and-update-an-applocker-policy.md
index e47477a31a..00e03f5081 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/test-and-update-an-applocker-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/test-and-update-an-applocker-policy.md
@@ -3,7 +3,7 @@ title: Test and update an AppLocker policy
 description: This article discusses the steps required to test an AppLocker policy prior to deployment.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Test and update an AppLocker policy
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/tools-to-use-with-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/tools-to-use-with-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/tools-to-use-with-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/tools-to-use-with-applocker.md
index 38354ddb98..5b1ed0083d 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/tools-to-use-with-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/tools-to-use-with-applocker.md
@@ -3,7 +3,7 @@ title: Tools to use with AppLocker
 description: This article for the IT professional describes the tools available to create and administer AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Tools to use with AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-policy-design-decisions.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-policy-design-decisions.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-policy-design-decisions.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-policy-design-decisions.md
index 898b41da58..3cc00fdf6e 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-policy-design-decisions.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-policy-design-decisions.md
@@ -3,7 +3,7 @@ title: Understand AppLocker policy design decisions
 description: Review some common considerations while you're planning to use AppLocker to deploy application control policies within a Windows environment.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Understand AppLocker policy design decisions
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md
similarity index 93%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md
index e2740a5bf6..89f62e0cb9 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understand-applocker-rules-and-enforcement-setting-inheritance-in-group-policy.md
@@ -3,14 +3,14 @@ title: Understand AppLocker rules and enforcement setting inheritance in Group P
 description: This article for the IT professional describes how application control policies configured in AppLocker are applied through Group Policy.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Understand AppLocker rules and enforcement setting inheritance in Group Policy
 
 This article for the IT professional describes how application control policies configured in AppLocker are applied through Group Policy.
 
-Rule enforcement is applied only to collections of rules, not individual rules. For more info on rule collections, see [AppLocker rule collections](/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules#rule-collections).
+Rule enforcement is applied only to collections of rules, not individual rules. For more info on rule collections, see [AppLocker rule collections](working-with-applocker-rules.md#rule-collections).
 
 Group Policy merges AppLocker policy in two ways:
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-the-applocker-policy-deployment-process.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understand-the-applocker-policy-deployment-process.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-the-applocker-policy-deployment-process.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understand-the-applocker-policy-deployment-process.md
index 3340e10f44..43e63220e5 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understand-the-applocker-policy-deployment-process.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understand-the-applocker-policy-deployment-process.md
@@ -3,7 +3,7 @@ title: Understand the AppLocker policy deployment process
 description: This planning and deployment article for the IT professional describes the process for using AppLocker when deploying application control policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Understand the AppLocker policy deployment process
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md
index bd84599f4e..86c795601f 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-allow-and-deny-actions-on-rules.md
@@ -3,7 +3,7 @@ title: Understanding AppLocker allow and deny actions on rules
 description: This article explains the differences between allow and deny actions on AppLocker rules.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding AppLocker allow and deny actions on rules
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-default-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-default-rules.md
similarity index 95%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-default-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-default-rules.md
index b70374af0f..67b52608e3 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-default-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-default-rules.md
@@ -3,7 +3,7 @@ title: Understanding AppLocker default rules
 description: This article for IT professional describes the set of rules that can be used to ensure that required Windows system files continue to run when the policy is applied.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding AppLocker default rules
@@ -29,9 +29,9 @@ These permissions settings are applied to this folder for app compatibility. How
 | --- | --- |
 | [Executable rules in AppLocker](executable-rules-in-applocker.md) | This article describes the file formats and available default rules for the executable rule collection. |
 | [Windows Installer rules in AppLocker](windows-installer-rules-in-applocker.md) | This article describes the file formats and available default rules for the Windows Installer rule collection.|
-| [Script rules in AppLocker](script-rules-in-applocker.md) | This article describes the file formats and available default rules for the script rule collection.| 
-| [DLL rules in AppLocker](dll-rules-in-applocker.md) | This article describes the file formats and available default rules for the DLL rule collection.| 
-| [Packaged apps and packaged app installer rules in AppLocker](packaged-apps-and-packaged-app-installer-rules-in-applocker.md) | This article explains the AppLocker rule collection for packaged app installers and packaged apps.| 
+| [Script rules in AppLocker](script-rules-in-applocker.md) | This article describes the file formats and available default rules for the script rule collection.|
+| [DLL rules in AppLocker](dll-rules-in-applocker.md) | This article describes the file formats and available default rules for the DLL rule collection.|
+| [Packaged apps and packaged app installer rules in AppLocker](packaged-apps-and-packaged-app-installer-rules-in-applocker.md) | This article explains the AppLocker rule collection for packaged app installers and packaged apps.|
 
 ## Related articles
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-behavior.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-behavior.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-behavior.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-behavior.md
index e97d2e0962..0d9b08e51c 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-behavior.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-behavior.md
@@ -3,7 +3,7 @@ title: Understanding AppLocker rule behavior
 description: This article describes how AppLocker rules are enforced by using the allow and deny options in AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding AppLocker rule behavior
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-collections.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-collections.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-collections.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-collections.md
index bd418d4ce7..8ee9ed92d5 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-collections.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-collections.md
@@ -3,7 +3,7 @@ title: Understanding AppLocker rule collections
 description: This article explains the five different types of AppLocker rule collections used to enforce AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding AppLocker rule collections
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-condition-types.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-condition-types.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-condition-types.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-condition-types.md
index 2c4967a466..1bbbc6329c 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-condition-types.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-condition-types.md
@@ -3,7 +3,7 @@ title: Understanding AppLocker rule condition types
 description: This article for the IT professional describes the three types of AppLocker rule conditions.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding AppLocker rule condition types
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-exceptions.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-exceptions.md
similarity index 94%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-exceptions.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-exceptions.md
index 2df99102d0..b95fadae6e 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-applocker-rule-exceptions.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-applocker-rule-exceptions.md
@@ -3,7 +3,7 @@ title: Understanding AppLocker rule exceptions
 description: This article describes the result of applying AppLocker rule exceptions to rule collections.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding AppLocker rule exceptions
@@ -14,8 +14,8 @@ This article describes the result of applying AppLocker rule exceptions to rule
 
 You can apply AppLocker rules to individual users or a group of users. If you apply a rule to a group of users, the rule affects all users in that group. If you need to allow a subset of a user group to use an app, you can create a special rule for that subset.
 
-For example, the rule "Allow Everyone to run Windows except Registry Editor" allows Everyone to run Windows binaries, but doesn't allow anyone to run Registry Editor (by adding %WINDIR%\regedit.exe as a Path Exception for the rule).  
-The effect of this rule would prevent users such as Helpdesk personnel from running the Registry Editor, a program that is necessary for their support tasks.  
+For example, the rule "Allow Everyone to run Windows except Registry Editor" allows Everyone to run Windows binaries, but doesn't allow anyone to run Registry Editor (by adding %WINDIR%\regedit.exe as a Path Exception for the rule).
+The effect of this rule would prevent users such as Helpdesk personnel from running the Registry Editor, a program that is necessary for their support tasks.
 To resolve this problem, create a second rule that applies to the Helpdesk user group: "Allow Helpdesk to run Registry Editor" and add %WINDIR%\regedit.exe as an allowed path. If you create a deny rule that blocks Registry Editor for all users, the deny rule overrides the second rule that allows the Helpdesk user group to run Registry Editor.
 
 ## Related articles
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-file-hash-rule-condition-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-file-hash-rule-condition-in-applocker.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-file-hash-rule-condition-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-file-hash-rule-condition-in-applocker.md
index 9937009a5e..b9460ff54a 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-file-hash-rule-condition-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-file-hash-rule-condition-in-applocker.md
@@ -3,7 +3,7 @@ title: Understanding the file hash rule condition in AppLocker
 description: This article explains how to use the AppLocker file hash rule condition and its advantages and disadvantages.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding the file hash rule condition in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-path-rule-condition-in-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-path-rule-condition-in-applocker.md
index 2d1d4b9cae..4175eba0ef 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-path-rule-condition-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-path-rule-condition-in-applocker.md
@@ -3,7 +3,7 @@ title: Understanding the path rule condition in AppLocker
 description: This article explains how to apply the AppLocker path rule condition and its advantages and disadvantages.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding the path rule condition in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-publisher-rule-condition-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-publisher-rule-condition-in-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-publisher-rule-condition-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-publisher-rule-condition-in-applocker.md
index 171ef6e3f1..be3c3767d4 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/understanding-the-publisher-rule-condition-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/understanding-the-publisher-rule-condition-in-applocker.md
@@ -3,7 +3,7 @@ title: Understanding the publisher rule condition in AppLocker
 description: This article explains how to apply the AppLocker publisher rule condition and what controls are available.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # Understanding the publisher rule condition in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md b/windows/security/application-security/application-control/app-control-for-business/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md
index 47b1b1388d..8bc76ea93a 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/use-a-reference-computer-to-create-and-maintain-applocker-policies.md
@@ -3,7 +3,7 @@ title: Use a reference device to create and maintain AppLocker policies
 description: This article for the IT professional describes the steps to create and maintain AppLocker policies by using a reference computer.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/22/2023
+ms.date: 09/11/2024
 ---
 
 # Use a reference device to create and maintain AppLocker policies
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/use-the-applocker-windows-powershell-cmdlets.md b/windows/security/application-security/application-control/app-control-for-business/applocker/use-the-applocker-windows-powershell-cmdlets.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/use-the-applocker-windows-powershell-cmdlets.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/use-the-applocker-windows-powershell-cmdlets.md
index 0678fb60b9..574c33a03b 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/use-the-applocker-windows-powershell-cmdlets.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/use-the-applocker-windows-powershell-cmdlets.md
@@ -3,7 +3,7 @@ title: Use the AppLocker Windows PowerShell cmdlets
 description: This article for IT professionals describes how each AppLocker Windows PowerShell cmdlet can help you administer your AppLocker application control policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 01/03/2024
+ms.date: 09/11/2024
 ---
 
 # Use the AppLocker Windows PowerShell cmdlets
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/using-event-viewer-with-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/using-event-viewer-with-applocker.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/using-event-viewer-with-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/using-event-viewer-with-applocker.md
index 19b2256345..65fa1be015 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/using-event-viewer-with-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/using-event-viewer-with-applocker.md
@@ -3,7 +3,7 @@ title: Using Event Viewer with AppLocker
 description: This article lists AppLocker events and describes how to use Event Viewer with AppLocker.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 <!-- NOTE to reviewers. This article might fail Acrolinx checks because the Events documented are poorly worded... -->
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/what-is-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/what-is-applocker.md
similarity index 86%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/what-is-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/what-is-applocker.md
index 256c416dbf..9fa362969d 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/what-is-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/what-is-applocker.md
@@ -3,14 +3,14 @@ title: What Is AppLocker
 description: This article for the IT professional describes what AppLocker is.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/23/2023
+ms.date: 09/11/2024
 ---
 
 # What Is AppLocker?
 
 This article for the IT professional describes what AppLocker is.
 
-Windows includes two technologies that can be used for application control, depending on your organization's specific scenarios and requirements: Windows Defender Application Control (WDAC) and AppLocker. For information to help you choose when to use WDAC or AppLocker, see [WDAC and AppLocker overview](/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview).
+Windows includes two technologies that can be used for application control, depending on your organization's specific scenarios and requirements: App Control for Business and AppLocker. For information to help you choose when to use App Control or AppLocker, see [App Control and AppLocker overview](../appcontrol-and-applocker-overview.md).
 
 AppLocker helps you create rules to allow or deny apps from running based on information about the apps' files. You can also use AppLocker to control which users or groups can run those apps.
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/windows-installer-rules-in-applocker.md b/windows/security/application-security/application-control/app-control-for-business/applocker/windows-installer-rules-in-applocker.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/windows-installer-rules-in-applocker.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/windows-installer-rules-in-applocker.md
index e64e6e97ff..cfc1ce02c6 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/windows-installer-rules-in-applocker.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/windows-installer-rules-in-applocker.md
@@ -3,7 +3,7 @@ title: Windows Installer rules in AppLocker
 description: This article describes the file formats and available default rules for the Windows Installer rule collection.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/24/2023
+ms.date: 09/11/2024
 ---
 
 # Windows Installer rules in AppLocker
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-policies.md b/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-policies.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-policies.md
index 189d8f1654..2a7f5153ec 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-policies.md
@@ -3,7 +3,7 @@ title: Working with AppLocker policies
 description: This article for IT professionals provides links to procedural articles about creating, maintaining, and testing AppLocker policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ---
 
 # Working with AppLocker policies
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules.md b/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-rules.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-rules.md
index e06ef57ede..c827358a61 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/applocker/working-with-applocker-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/applocker/working-with-applocker-rules.md
@@ -3,7 +3,7 @@ title: Working with AppLocker rules
 description: This article for IT professionals describes AppLocker rule types and how to work with them for your application control policies.
 ms.localizationpriority: medium
 msauthor: jsuther
-ms.date: 12/21/2023
+ms.date: 09/11/2024
 ms.topic: conceptual
 ---
 
diff --git a/windows/security/application-security/application-control/app-control-for-business/deployment/appcontrol-deployment-guide.md b/windows/security/application-security/application-control/app-control-for-business/deployment/appcontrol-deployment-guide.md
new file mode 100644
index 0000000000..4ee7ef2757
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/appcontrol-deployment-guide.md
@@ -0,0 +1,55 @@
+---
+title: Deploying App Control for Business policies
+description: Learn how to plan and implement an App Control deployment.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: overview
+---
+
+# Deploying App Control for Business policies
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+You should now have one or more App Control for Business policies ready to deploy. If you haven't yet completed the steps described in the [App Control Design Guide](../design/appcontrol-design-guide.md), do so now before proceeding.
+
+## Convert your App Control policy XML to binary
+
+Before you deploy your App Control policies, you must first convert the XML to its binary form. You can do this using the following PowerShell example. You must set the $AppControlPolicyXMLFile variable to point to your App Control policy XML file.
+
+```powershell
+## Update the path to your App Control policy XML
+$AppControlPolicyXMLFile = $env:USERPROFILE + "\Desktop\MyAppControlPolicy.xml"
+[xml]$AppControlPolicy = Get-Content -Path $AppControlPolicyXMLFile
+if (($AppControlPolicy.SiPolicy.PolicyID) -ne $null) ## Multiple policy format (For Windows builds 1903+ only, including Server 2022)
+{
+    $PolicyID = $AppControlPolicy.SiPolicy.PolicyID
+    $PolicyBinary = $PolicyID+".cip"
+}
+else ## Single policy format (Windows Server 2016 and 2019, and Windows 10 1809 LTSC)
+{
+    $PolicyBinary = "SiPolicy.p7b"
+}
+
+## Binary file will be written to your desktop
+ConvertFrom-CIPolicy -XmlFilePath $AppControlPolicyXMLFile -BinaryFilePath $env:USERPROFILE\Desktop\$PolicyBinary
+```
+
+## Plan your deployment
+
+As with any significant change to your environment, implementing App Control can have unintended consequences. To ensure the best chance for success, you should follow safe deployment practices and plan your deployment carefully. Identify the devices you'll manage with App Control and split them into deployment rings. This way, you can control the speed and scale of the deployment and respond if anything goes wrong. Define the success criteria that will determine when it's safe to continue from one ring to the next.
+
+All App Control for Business policy changes should be deployed in audit mode before proceeding to enforcement. Carefully monitor events from devices where the policy has been deployed to ensure the block events you observe match your expectation before broadening the deployment to other deployment rings. If your organization uses Microsoft Defender for Endpoint, you can use the Advanced Hunting feature to centrally monitor App Control-related events. Otherwise, we recommend using an event log forwarding solution to collect relevant events from your managed endpoints.
+
+## Choose how to deploy App Control policies
+
+> [!IMPORTANT]
+> Due to a known issue, you should always activate new **signed** App Control Base policies with a reboot on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. We recommend [deploying via script](deploy-appcontrol-policies-with-script.md) in this case.
+>
+> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
+
+There are several options to deploy App Control for Business policies to managed endpoints, including:
+
+- [Deploy using a Mobile Device Management (MDM) solution](deploy-appcontrol-policies-using-intune.md), such as Microsoft Intune
+- [Deploy using Microsoft Configuration Manager](deploy-appcontrol-policies-with-memcm.md)
+- [Deploy via script](deploy-appcontrol-policies-with-script.md)
+- [Deploy via group policy](deploy-appcontrol-policies-using-group-policy.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/deployment/audit-appcontrol-policies.md b/windows/security/application-security/application-control/app-control-for-business/deployment/audit-appcontrol-policies.md
new file mode 100644
index 0000000000..6f8919e77d
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/audit-appcontrol-policies.md
@@ -0,0 +1,60 @@
+---
+title: Use audit events to create App Control policy rules
+description: Audits allow admins to discover apps, binaries, and scripts that should be added to the App Control policy.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: conceptual
+---
+
+# Use audit events to create App Control policy rules
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+Running App Control in audit mode lets you discover applications, binaries, and scripts that are missing from your App Control policy but should be included.
+
+While an App Control policy is running in audit mode, any binary that runs but would have been denied is logged in the **Applications and Services Logs\\Microsoft\\Windows\\CodeIntegrity\\Operational** event log. Script and MSI are logged in the **Applications and Services Logs\\Microsoft\\Windows\\AppLocker\\MSI and Script** event log. These events can be used to generate a new App Control policy that can be merged with the original Base policy or deployed as a separate Supplemental policy, if allowed.
+
+## Overview of the process to create App Control policy to allow apps using audit events
+
+> [!Note]
+> You must have already deployed an App Control audit mode policy to use this process. If you have not already done so, see [Deploying App Control for Business policies](appcontrol-deployment-guide.md).
+
+To familiarize yourself with creating App Control rules from audit events, follow these steps on a device with an App Control audit mode policy.
+
+1. Install and run an application not allowed by the App Control policy but that you want to allow.
+
+2. Review the **CodeIntegrity - Operational** and **AppLocker - MSI and Script** event logs to confirm events, like those shown in Figure 1, are generated related to the application. For information about the types of events you should see, refer to [Understanding App Control events](../operations/event-id-explanations.md).
+
+   **Figure 1. Exceptions to the deployed App Control policy**<br>
+   :::image type="content" alt-text="Event showing exception to App Control policy." source="../images/dg-fig23-exceptionstocode.png":::
+
+3. In an elevated PowerShell session, run the following commands to initialize variables used by this procedure. This procedure builds upon the **Lamna_FullyManagedClients_Audit.xml** policy introduced in [Create an App Control policy for fully managed devices](../design/create-appcontrol-policy-for-fully-managed-devices.md) and will produce a new policy called **EventsPolicy.xml**.
+
+   ```powershell
+   $PolicyName= "Lamna_FullyManagedClients_Audit"
+   $LamnaPolicy=$env:userprofile+"\Desktop\"+$PolicyName+".xml"
+   $EventsPolicy=$env:userprofile+"\Desktop\EventsPolicy.xml"
+   $EventsPolicyWarnings=$env:userprofile+"\Desktop\EventsPolicyWarnings.txt"
+   ```
+
+4. Use [New-CIPolicy](/powershell/module/configci/new-cipolicy) to generate a new App Control policy from logged audit events. This example uses a **FilePublisher** file rule level and a **Hash** fallback level. Warning messages are redirected to a text file **EventsPolicyWarnings.txt**.
+
+   ```powershell
+   New-CIPolicy -FilePath $EventsPolicy -Audit -Level FilePublisher -Fallback SignedVersion,FilePublisher,Hash -UserPEs -MultiplePolicyFormat 3> $EventsPolicyWarnings
+   ```
+
+   > [!NOTE]
+   > When you create policies from audit events, you should carefully consider the file rule level that you select to trust. The preceding example uses the **FilePublisher** rule level with a fallback level of  **Hash**, which may be more specific than desired. You can re-run the above command using different **-Level** and **-Fallback** options to meet your needs. For more information about App Control rule levels, see [Understand App Control policy rules and file rules](../design/select-types-of-rules-to-create.md).
+
+5. Find and review the App Control policy file **EventsPolicy.xml** that should be found on your desktop. Ensure that it only includes file and signer rules for applications, binaries, and scripts you wish to allow. You can remove rules by manually editing the policy XML or use the App Control Policy Wizard tool (see [Editing existing base and supplemental App Control policies with the Wizard](../design/appcontrol-wizard-editing-policy.md)).
+
+6. Find and review the text file **EventsPolicyWarnings.txt** that should be found on your desktop. This file will include a warning for any files that App Control couldn't create a rule for at either the specified rule level or fallback rule level.
+
+   > [!NOTE]
+   > New-CIPolicy only creates rules for files that can still be found on disk. Files which are no longer present on the system will not have a rule created to allow them. However, the event log should have sufficient information to allow these files by manually editing the policy XML to add rules. You can use an existing rule as a template and verify your results against the App Control policy schema definition found at **%windir%\schemas\CodeIntegrity\cipolicy.xsd**.
+
+7. Merge **EventsPolicy.xml** with the Base policy **Lamna_FullyManagedClients_Audit.xml** or convert it to a supplemental policy.
+
+    For information on merging policies, refer to [Merge App Control for Business policies](merge-appcontrol-policies.md) and for information on supplemental policies see [Use multiple App Control for Business Policies](../design/deploy-multiple-appcontrol-policies.md).
+
+8. Convert the Base or Supplemental policy to binary and deploy using your preferred method.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/create-code-signing-cert-for-wdac.md b/windows/security/application-security/application-control/app-control-for-business/deployment/create-code-signing-cert-for-appcontrol.md
similarity index 77%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/create-code-signing-cert-for-wdac.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/create-code-signing-cert-for-appcontrol.md
index 7c3eabc52d..773daf6a82 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/create-code-signing-cert-for-wdac.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/create-code-signing-cert-for-appcontrol.md
@@ -1,22 +1,21 @@
 ---
-title: Create a code signing cert for Windows Defender Application Control
-description: Learn how to set up a publicly issued code signing certificate, so you can sign catalog files or WDAC policies internally.
+title: Create a code signing cert for App Control for Business
+description: Learn how to set up a publicly issued code signing certificate, so you can sign catalog files or App Control policies internally.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 12/01/2022
+ms.date: 09/11/2024
 ---
 
-# Optional: Create a code signing cert for Windows Defender Application Control  
+# Optional: Create a code signing cert for App Control for Business
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-As you deploy Windows Defender Application Control (WDAC), you might need to sign catalog files or WDAC policies internally. To do this signing, you'll either need to use [Microsoft's Trusted Signing service](/azure/trusted-signing/), a publicly issued code signing certificate or an internal CA. If you've purchased a code signing certificate, you can skip this article, and instead follow other articles listed in the [Windows Defender Application Control Deployment Guide](wdac-deployment-guide.md).
+As you deploy App Control for Business, you might need to sign catalog files or App Control policies internally. To do this signing, you'll either need to use [Microsoft's Trusted Signing service](/azure/trusted-signing/), a publicly issued code signing certificate or an internal CA. If you've purchased a code signing certificate, you can skip this article, and instead follow other articles listed in the [App Control for Business Deployment Guide](appcontrol-deployment-guide.md).
 
 If you have an internal CA, complete these steps to create a code signing certificate.
 
 > [!WARNING]
-> When creating signing certificates for WDAC policy signing, Boot failure (blue screen) may occur if your signing certificate does not follow these rules:
+> When creating signing certificates for App Control policy signing, Boot failure (blue screen) may occur if your signing certificate does not follow these rules:
 >
 > - All policies, including base and supplemental, must be signed according to the [PKCS 7 Standard](https://datatracker.ietf.org/doc/html/rfc5652).
 > - Use RSA keys with 2K, 3K, or 4K key size only. ECDSA isn't supported.
@@ -34,7 +33,7 @@ If you have an internal CA, complete these steps to create a code signing certif
 
 4. On the **Compatibility** tab, clear the **Show resulting changes** check box. Select **Windows Server 2012** from the **Certification Authority** list, and then select **Windows 8 / Windows Server 2012** from the **Certificate recipient** list.
 
-5. On the **General** tab, specify the **Template display name** and **Template name**. This example uses the name **WDAC Catalog Signing Certificate**.
+5. On the **General** tab, specify the **Template display name** and **Template name**. This example uses the name **App Control Catalog Signing Certificate**.
 
 6. On the **Request Handling** tab, select the **Allow private key to be exported** check box.
 
@@ -64,7 +63,7 @@ When this certificate template has been created, you must publish it to the CA p
 
     A list of available templates to issue appears, including the template you created.
 
-2. Select the WDAC Catalog signing certificate, and then select **OK**.
+2. Select the App Control Catalog signing certificate, and then select **OK**.
 
 Now that the template is available to be issued, you must request one from the computer running Windows 10 or Windows 11 on which you create and sign catalog files. To begin, open the MMC, and then complete the following steps:
 
@@ -76,7 +75,7 @@ Now that the template is available to be issued, you must request one from the c
 
 4. In the **Request Certificate** list, select your newly created code signing certificate, and then select the blue text that requests additional information, as shown in Figure 4.
 
-    ![Request Certificates: more information required.](../images/dg-fig31-getmoreinfo.png)
+    :::image type="content" alt-text="Request Certificates: more information required." source="../images/dg-fig31-getmoreinfo.png":::
 
     Figure 4. Get more information for your code signing certificate
 
@@ -95,6 +94,6 @@ This certificate must be installed in the user's personal store on the computer
 
 3. Choose the default settings, and then select **Export all extended properties**.
 
-4. Set a password, select an export path, and then select **WDACCatSigningCert.pfx** as the file name.
+4. Set a password, select an export path, and then select **AppControlCatSigningCert.pfx** as the file name.
 
 When the certificate has been exported, import it into the personal store for the user who will be signing the catalog files or code integrity policies on the specific computer that will be signing them.
diff --git a/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-group-policy.md b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-group-policy.md
new file mode 100644
index 0000000000..5efe8cdcdb
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-group-policy.md
@@ -0,0 +1,58 @@
+---
+title: Deploy App Control policies via Group Policy
+description: App Control for Business policies can easily be deployed and managed with Group Policy. Learn how by following this step-by-step guide.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: how-to
+---
+
+# Deploy App Control for Business policies by using Group Policy
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+> [!IMPORTANT]
+> Due to a known issue, you should always activate new **signed** App Control Base policies *with a reboot* on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. Instead of Group Policy, deploy new signed App Control Base policies [via script](deploy-appcontrol-policies-with-script.md#deploying-signed-policies) and activate the policy with a system restart.
+>
+> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
+
+Single-policy format App Control for Business policies (pre-1903 policy schema) can be easily deployed and managed with Group Policy.
+
+> [!IMPORTANT]
+> Group Policy-based deployment of App Control for Business policies only supports single-policy format App Control policies. To use App Control on devices running Windows 10 1903 and greater, or Windows 11, we recommend using an alternative method for policy deployment.
+
+You should now have an App Control policy converted into binary form. If not, follow the steps described in [Deploying App Control for Business policies](appcontrol-deployment-guide.md).
+
+The following procedure walks you through how to deploy an App Control policy called **SiPolicy.p7b** to a test OU called *App Control Enabled PCs* by using a GPO called **Contoso GPO Test**.
+
+To deploy and manage an App Control for Business policy with Group Policy:
+
+1. On a client computer on which RSAT is installed, open the GPMC by running **GPMC.MSC**
+
+2. Create a new GPO: right-click an OU and then select **Create a GPO in this domain, and Link it here**.
+
+   > [!NOTE]
+   > You can use any OU name. Also, security group filtering is an option when you consider different ways of combining App Control policies (or keeping them separate), as discussed in [Plan for App Control for Business lifecycle policy management](../design/plan-appcontrol-management.md).
+
+   :::image type="content" alt-text="Group Policy Management, create a GPO." source="../images/dg-fig24-creategpo.png":::
+
+3. Name the new GPO. You can choose any name.
+
+4. Open the Group Policy Management Editor: right-click the new GPO, and then select **Edit**.
+
+5. In the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Right-click **Deploy App Control for Business** and then select **Edit**.
+
+    ![Edit the Group Policy for App Control for Business.](../images/appcontrol-edit-gp.png)
+
+6. In the **Deploy App Control for Business** dialog box, select the **Enabled** option, and then specify the App Control policy deployment path.
+
+    In this policy setting, you specify either the local path where the policy will exist on each client computer or a Universal Naming Convention (UNC) path that the client computers will look to retrieve the latest version of the policy. For example, the path to SiPolicy.p7b using the steps described in [Deploying App Control for Business policies](appcontrol-deployment-guide.md) would be %USERPROFILE%\Desktop\SiPolicy.p7b.
+
+    > [!NOTE]
+    > This policy file does not need to be copied to every computer. You can instead copy the App Control policies to a file share to which all computer accounts have access. Any policy selected here is converted to SIPolicy.p7b when it is deployed to the individual client computers.
+
+    :::image type="content" alt-text="Group Policy called Deploy App Control for Business." source="../images/dg-fig26-enablecode.png":::
+
+    > [!NOTE]
+    > You may have noticed that the GPO setting references a .p7b file, but the file extension and name of the policy binary do not matter. Regardless of what you name your policy binary, they are all converted to SIPolicy.p7b when applied to the client computers running Windows 10. If you are deploying different App Control policies to different sets of devices, you may want to give each of your App Control policies a friendly name and allow the system to convert the policy names for you to ensure that the policies are easily distinguishable when viewed in a share or any other central repository.
+
+7. Close the Group Policy Management Editor, and then restart the Windows test computer. Restarting the computer updates the App Control policy.
diff --git a/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-intune.md b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-intune.md
new file mode 100644
index 0000000000..472b039866
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-using-intune.md
@@ -0,0 +1,89 @@
+---
+title: Deploy App Control policies using Mobile Device Management (MDM)
+description: You can use an MDM like Microsoft Intune to configure App Control for Business. Learn how with this step-by-step guide.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: how-to
+---
+
+# Deploy App Control policies using Mobile Device Management (MDM)
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+You can use a Mobile Device Management (MDM) solution, like Microsoft Intune, to configure App Control for Business on client machines. Intune includes native support for App Control, which can be a helpful starting point, but customers may find the available circle-of-trust options too limiting. To deploy a custom policy through Intune and define your own circle of trust, you can configure a profile using Custom OMA-URI. If your organization uses another MDM solution, check with your solution provider for App Control policy deployment steps.
+
+> [!IMPORTANT]
+> Due to a known issue, you should always activate new **signed** App Control Base policies *with a reboot* on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. Instead of Mobile Device Management (MDM), deploy new signed App Control Base policies [via script](deploy-appcontrol-policies-with-script.md) and activate the policy with a system restart.
+>
+> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
+
+## Use Intune's built-in policies
+
+Intune's built-in App Control for Business support allows you to configure Windows client computers to only run:
+
+- Windows components
+- Third-party hardware and software kernel drivers
+- Microsoft Store-signed apps
+- [Optional] Reputable apps as defined by the Intelligent Security Graph (ISG)
+
+> [!NOTE]
+> Intune's built-in policies use the pre-1903 single-policy format version of the DefaultWindows policy. Use the [improved Intune App Control experience](/mem/intune/protect/endpoint-security-app-control-policy), currently in public preview, to create and deploy multiple-policy format files. Or, you can use Intune's custom OMA-URI feature to deploy your own multiple-policy format App Control policies and leverage features available on Windows 10 1903+ or Windows 11 as described later in this topic.
+
+> [!NOTE]
+> Intune currently uses the AppLocker CSP to deploy its built-in policies. The AppLocker CSP always requests a device restart when it applies App Control policies. Use the [improved Intune App Control experience](/mem/intune/protect/endpoint-security-app-control-policy), currently in public preview, to deploy your own App Control policies without a restart. Or, you can use Intune's custom OMA-URI feature with the ApplicationControl CSP.
+
+To use Intune's built-in App Control policies, configure [Endpoint Protection for Windows 10 (and later)](/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json).
+
+## Deploy App Control policies with custom OMA-URI
+
+> [!NOTE]
+> Policies deployed through Intune custom OMA-URI are subject to a 350,000 byte limit. Customers should create App Control for Business policies that use signature-based rules, the Intelligent Security Graph, and managed installers where practical. Customers whose devices are running 1903+ builds of Windows are also encouraged to use [multiple policies](../design/deploy-multiple-appcontrol-policies.md) which allow more granular policy.
+
+You should now have one or more App Control policies converted into binary form. If not, follow the steps described in [Deploying App Control for Business policies](appcontrol-deployment-guide.md).
+
+### Deploy custom App Control policies on Windows 10 1903+
+
+Beginning with Windows 10 1903, custom OMA-URI policy deployment can use the [ApplicationControl CSP](/windows/client-management/mdm/applicationcontrol-csp), which has support for multiple policies and rebootless policies.
+
+> [!NOTE]
+> You must convert your custom policy XML to binary form before deploying with OMA-URI.
+
+The steps to use Intune's custom OMA-URI functionality are:
+
+1. Open the Microsoft Intune portal and [create a profile with custom settings](/mem/intune/configuration/custom-settings-windows-10).
+
+2. Specify a **Name** and **Description** and use the following values for the remaining custom OMA-URI settings:
+    - **OMA-URI**: `./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy`
+    - **Data type**: Base64 (file)
+    - **Certificate file**: Upload your binary format policy file. To do this, change your {GUID}.cip file to {GUID}.bin. You don't need to upload a Base64 file, as Intune converts the uploaded .bin file to Base64 on your behalf.
+
+    :::image type="content" alt-text="Configure custom App Control." source="../images/appcontrol-intune-custom-oma-uri.png" lightbox="../images/appcontrol-intune-custom-oma-uri.png":::
+
+> [!NOTE]
+> For the _Policy GUID_ value, do not include the curly brackets.
+
+### Remove App Control policies on Windows 10 1903+
+
+Upon deletion, policies deployed through Intune via the ApplicationControl CSP are removed from the system but stay in effect until the next reboot. In order to disable App Control for Business enforcement, first replace the existing policy with a new version of the policy that will "Allow *", like the rules in the example  policy at %windir%\schemas\CodeIntegrity\ExamplePolicies\AllowAll.xml. Once the updated policy is deployed, you can then delete the policy from the Intune portal. This deletion will prevent anything from being blocked and fully remove the App Control policy on the next reboot.
+
+### For pre-1903 systems
+
+#### Deploying policies
+
+The steps to use Intune's Custom OMA-URI functionality to apply the [AppLocker CSP](/windows/client-management/mdm/applocker-csp) and deploy a custom App Control policy to pre-1903 systems are:
+
+1. Convert the policy XML to binary format using the [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) cmdlet in order to be deployed. The binary policy may be signed or unsigned.
+
+2. Open the Microsoft Intune portal and [create a profile with custom settings](/mem/intune/configuration/custom-settings-windows-10).
+
+3. Specify a **Name** and **Description** and use the following values for the remaining custom OMA-URI settings:
+    - **OMA-URI**: `./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/_Grouping_/CodeIntegrity/Policy`
+    - **Data type**: Base64 (file)
+    - **Certificate file**: upload your binary format policy file
+
+   > [!NOTE]
+   > Deploying policies via the AppLocker CSP will force a reboot during OOBE.
+
+#### Removing policies
+
+Policies deployed through Intune via the AppLocker CSP can't be deleted through the Intune console. In order to disable App Control for Business policy enforcement, either deploy an audit-mode policy or use a script to delete the existing policy.
diff --git a/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-memcm.md b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-memcm.md
new file mode 100644
index 0000000000..5baec955a9
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-memcm.md
@@ -0,0 +1,81 @@
+---
+title: Deploy App Control for Business policies with Configuration Manager
+description: You can use Microsoft Configuration Manager to configure App Control for Business. Learn how with this step-by-step guide.
+ms.date: 09/11/2024
+ms.topic: how-to
+ms.localizationpriority: medium
+---
+
+# Deploy App Control policies by using Microsoft Configuration Manager
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+You can use Microsoft Configuration Manager to configure App Control for Business on client machines.
+
+## Use Configuration Manager's built-in policies
+
+Configuration Manager includes native support for App Control, which allows you to configure Windows 10 and Windows 11 client computers with a policy that will only allow:
+
+- Windows components
+- Microsoft Store apps
+- Apps installed by Configuration Manager (Configuration Manager self-configured as a managed installer)
+- (Optional) Reputable apps as defined by the Intelligent Security Graph (ISG)
+- (Optional) Apps and executables already installed in admin-definable folder locations that Configuration Manager will allow through a one-time scan during policy creation on managed endpoints.
+
+Configuration Manager doesn't remove policies once deployed. To stop enforcement, you should switch the policy to audit mode, which will produce the same effect. If you want to disable App Control for Business altogether (including audit mode), you can deploy a script to delete the policy file from disk, and either trigger a reboot or wait for the next reboot.
+
+### Create an App Control Policy in Configuration Manager
+
+1. Select **Asset and Compliance** > **Endpoint Protection** > **App Control for Business** > **Create Application Control Policy**
+
+   :::image type="content" alt-text="Create an App Control policy in Configuration Manager." source="../images/memcm/memcm-create-appcontrol-policy.jpg":::
+
+2. Enter the name of the policy > **Next**
+3. Enable **Enforce a restart of devices so that this policy can be enforced for all processes**
+4. Select the mode that you want the policy to run (Enforcement enabled / Audit Only)
+5. Select **Next**
+
+   :::image type="content" alt-text="Create an enforced App Control policy in Configuration Manager." source="../images/memcm/memcm-create-appcontrol-policy-2.jpg":::
+
+6. Select **Add** to begin creating rules for trusted software
+
+   :::image type="content" alt-text="Create an App Control path rule in Configuration Manager." source="../images/memcm/memcm-create-appcontrol-rule.jpg":::
+
+7. Select **File** or **Folder** to create a path rule > **Browse**
+
+   :::image type="content" alt-text="Select a file or folder to create a path rule." source="../images/memcm/memcm-create-appcontrol-rule-2.jpg":::
+
+8. Select the executable or folder for your path rule > **OK**
+
+   :::image type="content" alt-text="Select the executable file or folder." source="../images/memcm/memcm-create-appcontrol-rule-3.jpg":::
+
+9. Select **OK** to add the rule to the table of trusted files or folder
+10. Select **Next** to navigate to the summary page > **Close**
+
+    :::image type="content" alt-text="Confirm the App Control path rule in Configuration Manager." source="../images/memcm/memcm-confirm-appcontrol-rule.jpg":::
+
+### Deploy the App Control policy in Configuration Manager
+
+1. Right-click the newly created policy > **Deploy Application Control Policy**
+
+   :::image type="content" alt-text="Deploy App Control via Configuration Manager." source="../images/memcm/memcm-deploy-appcontrol.jpg":::
+
+2. Select **Browse**
+
+   :::image type="content" alt-text="Select Browse." source="../images/memcm/memcm-deploy-appcontrol-2.jpg":::
+
+3. Select the Device Collection you created earlier > **OK**
+
+   :::image type="content" alt-text="Select the device collection." source="../images/memcm/memcm-deploy-appcontrol-3.jpg":::
+
+4. Change the schedule > **OK**
+
+   :::image type="content" alt-text="Change the App Control deployment schedule." source="../images/memcm/memcm-deploy-appcontrol-4.jpg":::
+
+For more information on using Configuration Manager's native App Control policies, see [App Control for Business management with Configuration Manager](/mem/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager).
+
+Download the entire [App Control in Configuration Manager lab paper](https://download.microsoft.com/download/c/f/d/cfd6227c-8ec4-442d-8c50-825550d412f6/WDAC-Deploy-WDAC-using-MEMCM.pdf).
+
+## Deploy custom App Control policies using Packages/Programs or Task Sequences
+
+Using Configuration Manager's built-in policies can be a helpful starting point, but customers may find the circle-of-trust options available in Configuration Manager too limiting. To define your own circle-of-trust, you can use Configuration Manager to deploy custom App Control policies using [script-based deployment](deploy-appcontrol-policies-with-script.md) via Software Distribution Packages and Programs or Operating System Deployment Task Sequences.
diff --git a/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-script.md b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-script.md
new file mode 100644
index 0000000000..369252b993
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-appcontrol-policies-with-script.md
@@ -0,0 +1,104 @@
+---
+title: Deploy App Control for Business policies using script
+description: Use scripts to deploy App Control for Business policies. Learn how with this step-by-step guide.
+ms.manager: jsuther
+ms.date: 09/11/2024
+ms.topic: how-to
+ms.localizationpriority: medium
+---
+
+# Deploy App Control policies using script
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+This article describes how to deploy App Control for Business policies using script. The following instructions use PowerShell but can work with any scripting host.
+
+You should now have one or more App Control policies converted into binary form. If not, follow the steps described in [Deploying App Control for Business policies](appcontrol-deployment-guide.md).
+
+> [!IMPORTANT]
+> Due to a known issue, you should always activate new **signed** App Control Base policies with a reboot on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. Skip all steps below that use CiTool, RefreshPolicy.exe, or WMI to initiate a policy activation. Instead, copy the policy binary to the correct system32 and EFI locations and then activate the policy with a system restart.
+>
+> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
+
+## Deploying policies for Windows 11 22H2 and above
+
+You can use the inbox [CiTool](../operations/citool-commands.md) to apply policies on Windows 11 22H2 with the following commands. Be sure to replace **&lt;Path to policy binary file to deploy&gt;** in the following example with the actual path to your App Control policy binary file.
+
+```powershell
+# Policy binary files should be named as {GUID}.cip for multiple policy format files (where {GUID} = <PolicyId> from the Policy XML)
+$PolicyBinary = "<Path to policy binary file to deploy>"
+CiTool --update-policy $PolicyBinary [-json]
+```
+
+## Deploying policies for Windows 11, Windows 10 version 1903 and above, and Windows Server 2022 and above
+
+To use this procedure, download and distribute the [App Control policy refresh tool](https://aka.ms/refreshpolicy) to all managed endpoints. Ensure your App Control policies allow the App Control policy refresh tool or use a managed installer to distribute the tool.
+
+1. Initialize the variables to be used by the script.
+
+    ```powershell
+    # Policy binary files should be named as {GUID}.cip for multiple policy format files (where {GUID} = <PolicyId> from the Policy XML)
+    $PolicyBinary = "<Path to policy binary file to deploy>"
+    $DestinationFolder = $env:windir+"\System32\CodeIntegrity\CIPolicies\Active\"
+    $RefreshPolicyTool = "<Path where RefreshPolicy.exe can be found from managed endpoints>"
+    ```
+
+2. Copy App Control for Business policy binary to the destination folder.
+
+   ```powershell
+   Copy-Item -Path $PolicyBinary -Destination $DestinationFolder -Force
+   ```
+
+3. Repeat steps 1-2 as appropriate to deploy more App Control policies.
+4. Run RefreshPolicy.exe to activate and refresh all App Control policies on the managed endpoint.
+
+   ```powershell
+   & $RefreshPolicyTool
+   ```
+
+## Deploying policies for all other versions of Windows and Windows Server
+
+Use WMI to apply policies on all other versions of Windows and Windows Server.
+
+1. Initialize the variables to be used by the script.
+
+    ```powershell
+    # Policy binary files should be named as SiPolicy.p7b for Windows 10 versions earlier than 1903
+    $PolicyBinary = "<Path to policy binary file to deploy>"
+    $DestinationBinary = $env:windir+"\System32\CodeIntegrity\SiPolicy.p7b"
+    ```
+
+2. Copy App Control for Business policy binary to the destination.
+
+   ```powershell
+   Copy-Item  -Path $PolicyBinary -Destination $DestinationBinary -Force
+   ```
+
+3. Refresh and activate App Control policy using WMI
+
+   ```powershell
+   Invoke-CimMethod -Namespace root\Microsoft\Windows\CI -ClassName PS_UpdateAndCompareCIPolicy -MethodName Update -Arguments @{FilePath = $DestinationBinary}
+   ```
+
+## Deploying signed policies
+
+If you're using [signed App Control policies](use-signed-policies-to-protect-appcontrol-against-tampering.md), the policies must be deployed into your device's EFI partition in addition to the locations outlined in the earlier sections. Unsigned App Control policies don't need to be present in the EFI partition.
+
+1. Mount the EFI volume and make the directory, if it doesn't exist, in an elevated PowerShell prompt:
+
+    ```powershell
+   $MountPoint = 'C:\EFIMount'
+   $EFIDestinationFolder = "$MountPoint\EFI\Microsoft\Boot\CiPolicies\Active"
+   $EFIPartition = (Get-Partition | Where-Object IsSystem).AccessPaths[0]
+   if (-Not (Test-Path $MountPoint)) { New-Item -Path $MountPoint -Type Directory -Force }
+   mountvol $MountPoint $EFIPartition
+   if (-Not (Test-Path $EFIDestinationFolder)) { New-Item -Path $EFIDestinationFolder -Type Directory -Force }
+    ```
+
+2. Copy the signed policy to the created folder:
+
+    ```powershell
+   Copy-Item -Path $PolicyBinary -Destination $EFIDestinationFolder -Force
+    ```
+
+3. Restart the system.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-catalog-files-to-support-wdac.md b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-catalog-files-to-support-appcontrol.md
similarity index 89%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-catalog-files-to-support-wdac.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/deploy-catalog-files-to-support-appcontrol.md
index 2265945d4e..ff49b5a9fe 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-catalog-files-to-support-wdac.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/deploy-catalog-files-to-support-appcontrol.md
@@ -1,21 +1,20 @@
 ---
-title: Deploy catalog files to support Windows Defender Application Control
-description: Catalog files simplify running unsigned applications in the presence of a Windows Defender Application Control (WDAC) policy.
+title: Deploy catalog files to support App Control for Business
+description: Catalog files simplify running unsigned applications in the presence of an App Control for Business policy.
 ms.localizationpriority: medium
 ms.topic: how-to
-ms.date: 11/30/2022
+ms.date: 09/11/2024
 ---
 
-# Deploy catalog files to support Windows Defender Application Control
+# Deploy catalog files to support App Control for Business
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. For more information, see [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-*Catalog files* can be important in your deployment of Windows Defender Application Control (WDAC) if you have unsigned line-of-business (LOB) applications for which the process of signing is difficult. You can also use catalog files to add your own signature to apps you get from independent software vendors (ISV) when you don't want to trust all code signed by that ISV. In this way, catalog files provide a convenient way for you to "bless" apps for use in your WDAC-managed environment. And, you can create catalog files for existing apps without requiring access to the original source code or needing any expensive repackaging.
+*Catalog files* can be important in your deployment of App Control for Business if you have unsigned line-of-business (LOB) applications for which the process of signing is difficult. You can also use catalog files to add your own signature to apps you get from independent software vendors (ISV) when you don't want to trust all code signed by that ISV. In this way, catalog files provide a convenient way for you to "bless" apps for use in your App Control-managed environment. And, you can create catalog files for existing apps without requiring access to the original source code or needing any expensive repackaging.
 
 You need to [obtain a code signing certificate for your own use](use-code-signing-for-better-control-and-protection.md#obtain-code-signing-certificates-for-your-own-use) and use it to sign the catalog file. Then, distribute the signed catalog file using your preferred content deployment mechanism.
 
-Finally, add a signer rule to your WDAC policy for your signing certificate. Then, any apps covered by your signed catalog files are able to run, even if the apps were previously unsigned. With this foundation, you can more easily build a WDAC policy that blocks all unsigned code, because most malware is unsigned.
+Finally, add a signer rule to your App Control policy for your signing certificate. Then, any apps covered by your signed catalog files are able to run, even if the apps were previously unsigned. With this foundation, you can more easily build an App Control policy that blocks all unsigned code, because most malware is unsigned.
 
 ## Create catalog files using Package Inspector
 
@@ -34,7 +33,7 @@ To create a catalog file for an existing app, you can use a tool called **Packag
     $PolicyBinary = $env:USERPROFILE+"\Desktop\"+$PolicyId.substring(11)+".cip"
     ```
 
-    Then apply the policy as described in [Deploy Windows Defender Application Control policies with script](deploy-wdac-policies-with-script.md).
+    Then apply the policy as described in [Deploy App Control for Business policies with script](deploy-appcontrol-policies-with-script.md).
 
 2. Start Package Inspector to monitor file creation on a **local drive** where you install the app, for example, drive C:
 
@@ -92,15 +91,15 @@ For the code signing certificate that you use to sign the catalog file, import i
 1. Initialize the variables to use. Replace the `$ExamplePath` and `$CatFileName` variables as needed:
 
    ```powershell
-    $ExamplePath=$env:userprofile+"\Desktop"
-    $CatFileName=$ExamplePath+"\LOBApp-Contoso.cat"
-    ```
+   $ExamplePath=$env:userprofile+"\Desktop"
+   $CatFileName=$ExamplePath+"\LOBApp-Contoso.cat"
+   ```
 
 2. Sign the catalog file with Signtool.exe:
 
    ```powershell
-    <path to signtool.exe> sign /n "ContosoSigningCert" /fd sha256 /v $CatFileName
-    ```
+   <path to signtool.exe> sign /n "ContosoSigningCert" /fd sha256 /v $CatFileName
+   ```
 
    > [!NOTE]
    > The `<Path to signtool.exe>` variable should be the full path to the Signtool.exe utility. `ContosoSigningCert` represents the subject name of the certificate that you use to sign the catalog file. This certificate should be imported to your personal certificate store on the computer on which you are attempting to sign the catalog file.
@@ -109,7 +108,7 @@ For the code signing certificate that you use to sign the catalog file, import i
 
 3. Verify the catalog file's digital signature. Right-click the catalog file, and then select **Properties**. On the **Digital Signatures** tab, verify that your signing certificate exists with a **sha256** algorithm, as shown in Figure 1.
 
-   ![Digital Signature list in file Properties.](../images/dg-fig12-verifysigning.png)
+   :::image type="content" alt-text="Digital Signature list in file Properties." source="../images/dg-fig12-verifysigning.png":::
 
    Figure 1. Verify that the signing certificate exists.
 
@@ -123,16 +122,16 @@ For testing purposes, you can manually copy signed catalog files to this folder.
 
 To simplify the management of catalog files, you can use group policy preferences to deploy catalog files to the appropriate computers in your organization.
 
-The following process walks you through the deployment of a signed catalog file called **LOBApp-Contoso.cat** to a test OU called **WDAC Enabled PCs** with a GPO called **Contoso Catalog File GPO Test**.
+The following process walks you through the deployment of a signed catalog file called **LOBApp-Contoso.cat** to a test OU called **App Control Enabled PCs** with a GPO called **Contoso Catalog File GPO Test**.
 
 1. From either a domain controller or a client computer that has Remote Server Administration Tools installed, open the Group Policy Management Console by running **GPMC.MSC** or by searching for Group Policy Management.
 
-2. Create a new GPO: right-click an OU, for example, the **WDAC Enabled PCs OU**, and then select **Create a GPO in this domain, and Link it here**, as shown in Figure 2.
+2. Create a new GPO: right-click an OU, for example, the **App Control Enabled PCs OU**, and then select **Create a GPO in this domain, and Link it here**, as shown in Figure 2.
 
    > [!NOTE]
-   > You can use any OU name. Also, security group filtering is an option when you consider different ways of combining WDAC policies.
+   > You can use any OU name. Also, security group filtering is an option when you consider different ways of combining App Control policies.
 
-   ![Group Policy Management, create a GPO.](../images/dg-fig13-createnewgpo.png)
+   :::image type="content" alt-text="Group Policy Management, create a GPO." source="../images/dg-fig13-createnewgpo.png":::
 
    Figure 2. Create a new GPO.
 
@@ -142,7 +141,7 @@ The following process walks you through the deployment of a signed catalog file
 
 5. Within the selected GPO, navigate to **Computer Configuration\\Preferences\\Windows Settings\\Files**. Right-click **Files**, point to **New**, and then select **File**, as shown in Figure 3.
 
-   ![Group Policy Management Editor, New File.](../images/dg-fig14-createnewfile.png)
+   :::image type="content" alt-text="Group Policy Management Editor, New File." source="../images/dg-fig14-createnewfile.png":::
 
    Figure 3. Create a new file.
 
@@ -299,9 +298,9 @@ At the time of the next software inventory cycle, when the targeted clients rece
 > [!NOTE]
 > If nothing is displayed in this view, navigate to Software\\Last Software Scan in Resource Explorer to verify that the client has recently completed a software inventory scan.
 
-## Allow apps signed by your catalog signing certificate in your WDAC policy
+## Allow apps signed by your catalog signing certificate in your App Control policy
 
-Now that you have your signed catalog file, you can add a signer rule to your policy that allows anything signed with that certificate. If you haven't yet created a WDAC policy, see the [Windows Defender Application Control design guide](../design/wdac-design-guide.md).
+Now that you have your signed catalog file, you can add a signer rule to your policy that allows anything signed with that certificate. If you haven't yet created an App Control policy, see the [App Control for Business design guide](../design/appcontrol-design-guide.md).
 
 On a computer where the signed catalog file has been deployed, you can use [New-CiPolicyRule](/powershell/module/configci/new-cipolicyrule) to create a signer rule from any file included in that catalog. Then use [Merge-CiPolicy](/powershell/module/configci/merge-cipolicy) to add the rule to your policy XML. Be sure to replace the path values in the following sample:
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/disable-wdac-policies.md b/windows/security/application-security/application-control/app-control-for-business/deployment/disable-appcontrol-policies.md
similarity index 50%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/disable-wdac-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/disable-appcontrol-policies.md
index 2685a6db1d..c2434abfb4 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/disable-wdac-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/disable-appcontrol-policies.md
@@ -1,24 +1,23 @@
 ---
-title: Remove Windows Defender Application Control policies
-description: Learn how to disable both signed and unsigned Windows Defender Application Control policies, within Windows and within the BIOS.
+title: Remove App Control for Business policies
+description: Learn how to disable both signed and unsigned App Control for Business policies, within Windows and within the BIOS.
 ms.localizationpriority: medium
-ms.date: 11/04/2022
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
-# Remove Windows Defender Application Control (WDAC) policies
+# Remove App Control for Business policies
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-## Removing WDAC policies
+## Removing App Control policies
 
-There may come a time when you want to remove one or more WDAC policies, or remove all WDAC policies you've deployed. This article describes the various ways to remove WDAC policies.
+There may come a time when you want to remove one or more App Control policies, or remove all App Control policies you've deployed. This article describes the various ways to remove App Control policies.
 
 > [!IMPORTANT]
-> **Signed WDAC policy**
+> **Signed App Control policy**
 >
-> If the policy you are trying to remove is a signed WDAC policy, you must first deploy a signed replacement policy that includes option **6 Enabled:Unsigned System Integrity Policy**.
+> If the policy you are trying to remove is a signed App Control policy, you must first deploy a signed replacement policy that includes option **6 Enabled:Unsigned System Integrity Policy**.
 >
 > The replacement policy must have the same PolicyId as the one it's replacing and a version that's equal to or greater than the existing policy. The replacement policy must also include \<UpdatePolicySigners\>.
 >
@@ -33,66 +32,48 @@ To make a policy effectively inactive before removing it, you can first replace
 1. Replace the policy rules with "Allow *" rules;
 2. Set option **3 Enabled:Audit Mode** to change the policy to audit mode only;
 3. Set option **11 Disabled:Script Enforcement**;
-4. Allow all COM objects. See [Allow COM object registration in a WDAC policy](/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy#examples);
+4. Allow all COM objects. See [Allow COM object registration in an App Control policy](../design/allow-com-object-registration-in-appcontrol-policy.md#examples);
 5. If applicable, remove option **0 Enabled:UMCI** to convert the policy to kernel mode only.
 
 > [!IMPORTANT]
-> After you remove a policy, restart the computer for it to take effect. You can't remove WDAC policies without restarting the device.
+> After you remove a policy, restart the computer for it to take effect. You can't remove App Control policies without restarting the device.
 
-### Remove WDAC policies using CiTool.exe
+### Remove App Control policies using CiTool.exe
 
-Beginning with the Windows 11 2022 Update, you can remove WDAC policies using CiTool.exe. From an elevated command window, run the following command. Be sure to replace the text *PolicyId GUID* with the actual PolicyId of the WDAC policy you want to remove:
+Beginning with the Windows 11 2022 Update, you can remove App Control policies using CiTool.exe. From an elevated command window, run the following command. Be sure to replace the text *PolicyId GUID* with the actual PolicyId of the App Control policy you want to remove:
 
 ```powershell
-    CiTool.exe -rp "{PolicyId GUID}" -json
+CiTool.exe -rp "{PolicyId GUID}" -json
 ```
 
 Then restart the computer.
 
-### Remove WDAC policies using MDM solutions like Intune
+### Remove App Control policies using MDM solutions like Intune
 
-You can use a Mobile Device Management (MDM) solution, like Microsoft Intune, to remove WDAC policies from client machines using the [ApplicationControl CSP](/windows/client-management/mdm/applicationcontrol-csp).
-
-<!-- Waiting for information from Intune team on specific steps...
-
-The steps to use Intune's custom OMA-URI functionality to remove a WDAC policy are:
-
-1. Open the Microsoft Intune portal and [create a profile with custom settings](/mem/intune/configuration/custom-settings-windows-10).
-
-2. Specify a **Name** and **Description** and use the following values for the remaining custom OMA-URI settings:
-    - **OMA-URI**: `./Vendor/MSFT/ApplicationControl/Policies/_PolicyId GUID_/Policy`
-    - **Data type**: Base64 (file)
-    - **Certificate file**: upload your binary format policy file. You don't need to upload a Base64 file, as Intune will convert the uploaded .bin file to Base64 on your behalf.
-
-    > [!div class="mx-imgBorder"]
-    > ![Configure custom WDAC.](../images/wdac-intune-custom-oma-uri.png)
-
-> [!NOTE]
-> For the _Policy GUID_ value, do not include the curly brackets.
--->
+You can use a Mobile Device Management (MDM) solution, like Microsoft Intune, to remove App Control policies from client machines using the [ApplicationControl CSP](/windows/client-management/mdm/applicationcontrol-csp).
 
 Consult your MDM solution provider for specific information on using the ApplicationControl CSP.
 
 Then restart the computer.
 
-### Remove WDAC policies using script
+### Remove App Control policies using script
 
-To remove WDAC policies using script, your script must delete the policy file(s) from the computer. For **multiple policy format (1903+) WDAC policies**, look for the policy files in the following locations. Be sure to replace the *PolicyId GUID* with the actual PolicyId of the WDAC policy you want to remove.
+To remove App Control policies using script, your script must delete the policy file(s) from the computer. For **multiple policy format (1903+) App Control policies**, look for the policy files in the following locations. Be sure to replace the *PolicyId GUID* with the actual PolicyId of the App Control policy you want to remove.
 
 - &lt;EFI System Partition&gt;\\Microsoft\\Boot\\CiPolicies\Active\\*\{PolicyId GUID\}*.cip
 - &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\CiPolicies\Active\\*\{PolicyId GUID\}*.cip
 
-For **single policy format WDAC policies**, in addition to the two locations above, also look for a file called SiPolicy.p7b that may be found in the following locations:
+For **single policy format App Control policies**, in addition to the two locations above, also look for a file called SiPolicy.p7b that may be found in the following locations:
 
 - &lt;EFI System Partition&gt;\\Microsoft\\Boot\\SiPolicy.p7b
 - &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\SiPolicy.p7b
 
 Then restart the computer.
 
-#### Sample script to delete a single WDAC policy
+#### Sample script to delete a single App Control policy
 
 ```powershell
-# Set PolicyId GUID to the PolicyId from your WDAC policy XML
+# Set PolicyId GUID to the PolicyId from your App Control policy XML
 $PolicyId = "{PolicyId GUID}"
 
 # Initialize variables
@@ -138,17 +119,17 @@ mountvol $MountPoint /D
 ```
 
 > [!NOTE]
-> You must run the script as administrator to remove WDAC policies on your computer.
+> You must run the script as administrator to remove App Control policies on your computer.
 
-## Remove WDAC policies causing boot stop failures
+## Remove App Control policies causing boot stop failures
 
-A WDAC policy that blocks boot critical drivers can cause a boot stop failure (BSOD) to occur, though this can be mitigated by setting option **10 Enabled:Boot Audit On Failure** in your policies. Additionally, signed WDAC policies protect the policy from administrative manipulation and malware that has gained administrative-level access to the system. For this reason, signed WDAC policies are intentionally more difficult to remove than unsigned policies even for administrators. Tampering with or removing a signed WDAC policy will cause a BSOD to occur.
+An App Control policy that blocks boot critical drivers can cause a boot stop failure (BSOD) to occur, though this can be mitigated by setting option **10 Enabled:Boot Audit On Failure** in your policies. Additionally, signed App Control policies protect the policy from administrative manipulation and malware that has gained administrative-level access to the system. For this reason, signed App Control policies are intentionally more difficult to remove than unsigned policies even for administrators. Tampering with or removing a signed App Control policy will cause a BSOD to occur.
 
 To remove a policy that is causing boot stop failures:
 
-1. If the policy is a **signed** WDAC policy, turn off Secure Boot from your [UEFI BIOS menu](/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-bios-mode). For help with locating where to turn off Secure Boot within your BIOS menu, consult with your original equipment manufacturer (OEM).
-2. Access the Advanced Boot Options menu on your computer and choose the option to **Disable Driver Signature Enforcement**. For instructions on accessing the Advanced Boot Options menu during startup, consult with your OEM. This option will suspend all code integrity checks, including WDAC, for a single boot session.
-3. Start Windows normally and sign in. Then, [remove WDAC policies using script](#remove-wdac-policies-using-script).
+1. If the policy is a **signed** App Control policy, turn off Secure Boot from your [UEFI BIOS menu](/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-bios-mode). For help with locating where to turn off Secure Boot within your BIOS menu, consult with your original equipment manufacturer (OEM).
+2. Access the Advanced Boot Options menu on your computer and choose the option to **Disable Driver Signature Enforcement**. For instructions on accessing the Advanced Boot Options menu during startup, consult with your OEM. This option will suspend all code integrity checks, including App Control, for a single boot session.
+3. Start Windows normally and sign in. Then, [remove App Control policies using script](#remove-app-control-policies-using-script).
 4. If you turned off Secure Boot in step 1 above and your drive is protected by BitLocker, [suspend BitLocker protection](/troubleshoot/windows-client/windows-security/suspend-bitlocker-protection-non-microsoft-updates) then turn on Secure Boot from your UEFI BIOS menu.
 5. Restart the computer.
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/enforce-wdac-policies.md b/windows/security/application-security/application-control/app-control-for-business/deployment/enforce-appcontrol-policies.md
similarity index 60%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/enforce-wdac-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/enforce-appcontrol-policies.md
index 07bc66c51a..41a77beb33 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/enforce-wdac-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/enforce-appcontrol-policies.md
@@ -1,29 +1,28 @@
 ---
-title: Enforce Windows Defender Application Control (WDAC) policies
-description: Learn how to switch a WDAC policy from audit to enforced mode.
+title: Enforce App Control for Business policies
+description: Learn how to switch an App Control policy from audit to enforced mode.
 ms.manager: jsuther
-ms.date: 04/22/2021
+ms.date: 09/11/2024
 ms.topic: how-to
 ms.localizationpriority: medium
 ---
 
-# Enforce Windows Defender Application Control (WDAC) policies
+# Enforce App Control for Business policies
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-You should now have one or more Windows Defender Application Control policies broadly deployed in audit mode. You have analyzed events collected from the devices with those policies and you're ready to enforce. Use this procedure to prepare and deploy your WDAC policies in enforcement mode.
+You should now have one or more App Control for Business policies broadly deployed in audit mode. You have analyzed events collected from the devices with those policies and you're ready to enforce. Use this procedure to prepare and deploy your App Control policies in enforcement mode.
 
 > [!NOTE]
-> Some of the steps described in this article only apply to Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's WDAC policies, consider whether your managed clients can use all or some of these features. Evaluate the impact for any features that may be unavailable on your clients running earlier versions of Windows 10 and Windows Server. You may need to adapt this guidance to meet your specific organization's needs.
+> Some of the steps described in this article only apply to Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's App Control policies, consider whether your managed clients can use all or some of these features. Evaluate the impact for any features that may be unavailable on your clients running earlier versions of Windows 10 and Windows Server. You may need to adapt this guidance to meet your specific organization's needs.
 
-## Convert WDAC **base** policy from audit to enforced
+## Convert App Control **base** policy from audit to enforced
 
-As described in [common Windows Defender Application Control deployment scenarios](../design/common-wdac-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of application control to prevent unwanted or unauthorized applications from running on their managed devices.
+As described in [common App Control for Business deployment scenarios](../design/common-appcontrol-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of App Control to prevent unwanted or unauthorized applications from running on their managed devices.
 
-**Alice Pena** is the IT team lead responsible for Lamna's WDAC rollout.
+**Alice Pena** is the IT team lead responsible for Lamna's App Control rollout.
 
-Alice previously created and deployed a policy for the organization's [fully managed devices](../design/create-wdac-policy-for-fully-managed-devices.md). They updated the policy based on audit event data as described in [Use audit events to create WDAC policy rules](audit-wdac-policies.md) and redeployed it. All remaining audit events are as expected and Alice is ready to switch to enforcement mode.
+Alice previously created and deployed a policy for the organization's [fully managed devices](../design/create-appcontrol-policy-for-fully-managed-devices.md). They updated the policy based on audit event data as described in [Use audit events to create App Control policy rules](audit-appcontrol-policies.md) and redeployed it. All remaining audit events are as expected and Alice is ready to switch to enforcement mode.
 
 1. Initialize the variables that will be used and create the enforced policy by copying the audit version.
 
@@ -34,14 +33,14 @@ Alice previously created and deployed a policy for the organization's [fully man
    cp $AuditPolicyXML $EnforcedPolicyXML
    ```
 
-2. Use [Set-CIPolicyIdInfo](/powershell/module/configci/set-cipolicyidinfo) to give the new policy a unique ID, and descriptive name. Changing the ID and name lets you deploy the enforced policy side by side with the audit policy. Do this step if you plan to harden your WDAC policy over time. If you prefer to replace the audit policy in-place, you can skip this step.
+2. Use [Set-CIPolicyIdInfo](/powershell/module/configci/set-cipolicyidinfo) to give the new policy a unique ID, and descriptive name. Changing the ID and name lets you deploy the enforced policy side by side with the audit policy. Do this step if you plan to harden your App Control policy over time. If you prefer to replace the audit policy in-place, you can skip this step.
 
    ```powershell
    $EnforcedPolicyID = Set-CIPolicyIdInfo -FilePath $EnforcedPolicyXML -PolicyName $EnforcedPolicyName -ResetPolicyID
    $EnforcedPolicyID = $EnforcedPolicyID.Substring(11)
    ```
 
-3. *[Optionally]* Use [Set-RuleOption](/powershell/module/configci/set-ruleoption) to enable rule options 9 ("Advanced Boot Options Menu") and 10 ("Boot Audit on Failure"). Option 9 allows users to disable WDAC enforcement for a single boot session from a pre-boot menu. Option 10 instructs Windows to switch the policy from enforcement to audit only if a boot critical kernel-mode driver is blocked. We strongly recommend these options when deploying a new enforced policy to your first deployment ring. Then, if no issues are found, you can remove the options and restart your deployment.
+3. *[Optionally]* Use [Set-RuleOption](/powershell/module/configci/set-ruleoption) to enable rule options 9 ("Advanced Boot Options Menu") and 10 ("Boot Audit on Failure"). Option 9 allows users to disable App Control enforcement for a single boot session from a pre-boot menu. Option 10 instructs Windows to switch the policy from enforcement to audit only if a boot critical kernel-mode driver is blocked. We strongly recommend these options when deploying a new enforced policy to your first deployment ring. Then, if no issues are found, you can remove the options and restart your deployment.
 
    ```powershell
    Set-RuleOption -FilePath $EnforcedPolicyXML -Option 9
@@ -54,7 +53,7 @@ Alice previously created and deployed a policy for the organization's [fully man
    Set-RuleOption -FilePath $EnforcedPolicyXML -Option 3 -Delete
    ```
 
-5. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the new WDAC policy to binary:
+5. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the new App Control policy to binary:
 
    > [!NOTE]
    > If you did not use -ResetPolicyID in Step 2 above, then you must replace $EnforcedPolicyID in the following command with the *PolicyID* attribute found in your base policy XML.
@@ -86,7 +85,7 @@ Since the enforced policy was given a unique PolicyID in the previous procedure,
    > [!NOTE]
    > If Set-CIPolicyIdInfo does not output the new PolicyID value on your Windows 10 version, you will need to obtain the *PolicyId* value from the XML directly.
 
-3. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the new Windows Defender Application Control supplemental policy to binary:
+3. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the new App Control for Business supplemental policy to binary:
 
    ```powershell
    $EnforcedSuppPolicyBinary = $env:USERPROFILE+"\Desktop\"+$SupplementalPolicyName+"_"+$SupplementalPolicyID+".xml"
@@ -96,4 +95,4 @@ Since the enforced policy was given a unique PolicyID in the previous procedure,
 
 ## Deploy your enforced policy and supplemental policies
 
-Now that your base policy is in enforced mode, you can begin to deploy it to your managed endpoints. For information about deploying policies, see [Deploying Windows Defender Application Control (WDAC) policies](wdac-deployment-guide.md).
+Now that your base policy is in enforced mode, you can begin to deploy it to your managed endpoints. For information about deploying policies, see [Deploying App Control for Business policies](appcontrol-deployment-guide.md).
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/merge-wdac-policies.md b/windows/security/application-security/application-control/app-control-for-business/deployment/merge-appcontrol-policies.md
similarity index 57%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/merge-wdac-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/merge-appcontrol-policies.md
index d1b96ca2d6..e17a4dfdd6 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/merge-wdac-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/merge-appcontrol-policies.md
@@ -1,25 +1,24 @@
 ---
-title: Merge Windows Defender Application Control policies (WDAC)
-description: Learn how to merge WDAC policies as part of your policy lifecycle management.
+title: Merge App Control for Business policies (App Control)
+description: Learn how to merge App Control policies as part of your policy lifecycle management.
 ms.manager: jsuther
-ms.date: 04/22/2021
+ms.date: 09/11/2024
 ms.topic: how-to
 ms.localizationpriority: medium
 ---
 
-# Merge Windows Defender Application Control (WDAC) policies
+# Merge App Control for Business policies
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-This article shows how to merge multiple policy XML files together and how to merge rules directly into a policy. Windows Defender Application Control deployments often include a few base policies and optional supplemental policies for specific use cases.
+This article shows how to merge multiple policy XML files together and how to merge rules directly into a policy. App Control for Business deployments often include a few base policies and optional supplemental policies for specific use cases.
 
 > [!NOTE]
-> Prior to Windows version 1903, including Windows Server 2019 and earlier, only one Windows Defender Application Control policy can be active on a system at a time. If you need to use WDAC on systems running these earlier versions of Windows, you must merge all policies before deploying.
+> Prior to Windows version 1903, including Windows Server 2019 and earlier, only one App Control for Business policy can be active on a system at a time. If you need to use App Control on systems running these earlier versions of Windows, you must merge all policies before deploying.
 
-## Merge multiple WDAC policy XML files together
+## Merge multiple App Control policy XML files together
 
-There are many scenarios where you may want to merge two or more policy files together. For example, if you [use audit events to create Windows Defender Application Control policy rules](audit-wdac-policies.md), you can merge those rules with your existing WDAC base policy. To merge the two WDAC policies referenced in that article, complete the following steps in an elevated Windows PowerShell session.
+There are many scenarios where you may want to merge two or more policy files together. For example, if you [use audit events to create App Control for Business policy rules](audit-appcontrol-policies.md), you can merge those rules with your existing App Control base policy. To merge the two App Control policies referenced in that article, complete the following steps in an elevated Windows PowerShell session.
 
 1. Initialize the variables that will be used:
 
@@ -30,7 +29,7 @@ There are many scenarios where you may want to merge two or more policy files to
    $MergedPolicy=$env:userprofile+"\Desktop\"+$PolicyName+"_Merged.xml"
    ```
 
-2. Use [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) to merge two policies and create a new Windows Defender Application Control policy:
+2. Use [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) to merge two policies and create a new App Control for Business policy:
 
    ```powershell
    Merge-CIPolicy -PolicyPaths $LamnaPolicy,$EventsPolicy -OutputFilePath $MergedPolicy
@@ -39,16 +38,16 @@ There are many scenarios where you may want to merge two or more policy files to
    > [!NOTE]
    > You can merge additional policies with the Merge-CIPolicy step above by adding them to the -PolicyPaths parameter separated by commas. The new policy file specified by -OutputFilePath will have the Policy information from the first policy in the list. For example, in the above example, the $MergedPolicy will inherit the policy type, ID, name, and version information from $LamnaPolicy. To change any of those values, use [Set-CIPolicyIdInfo](/powershell/module/configci/set-cipolicyidinfo) and [Set-CIPolicyVersion](/powershell/module/configci/set-cipolicyversion).
 
-## Merge WDAC rules directly into a policy XML
+## Merge App Control rules directly into a policy XML
 
-Besides merging multiple policy XML files, you can also merge rules created with the New-CIPolicyRule cmdlet directly into an existing WDAC policy XML file. Directly merging rules is a convenient way to update your policy without creating extra policy XML files. For example, to add rules that allow the WDAC Wizard and the WDAC RefreshPolicy.exe tool, follow these steps:
+Besides merging multiple policy XML files, you can also merge rules created with the New-CIPolicyRule cmdlet directly into an existing App Control policy XML file. Directly merging rules is a convenient way to update your policy without creating extra policy XML files. For example, to add rules that allow the App Control Wizard and the App Control RefreshPolicy.exe tool, follow these steps:
 
-1. Install the [WDAC Wizard](../design/wdac-wizard.md) packaged MSIX app.
+1. Install the [App Control Wizard](../design/appcontrol-wizard.md) packaged MSIX app.
 2. Download the [Refresh Policy tool](https://aka.ms/refreshpolicy) for your processor architecture and save it to your desktop as RefreshPolicy.exe.
-3. From a PowerShell session, run the following commands to create packaged app allow rules for the WDAC Wizard:
+3. From a PowerShell session, run the following commands to create packaged app allow rules for the App Control Wizard:
 
    ```powershell
-   $PackageInfo = Get-AppxPackage -Name Microsoft.WDAC.WDACWizard
+   $PackageInfo = Get-AppxPackage -Name Microsoft.App Control.WDACWizard
    $Rules = New-CIPolicyRule -Package $PackageInfo
    ```
 
@@ -68,16 +67,16 @@ Besides merging multiple policy XML files, you can also merge rules created with
 
 Now that you have your new, merged policy, you can convert and deploy the policy binary to your managed endpoints.
 
-1. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the WDAC policy to a binary format:
+1. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the App Control policy to a binary format:
 
    ```powershell
-   $WDACPolicyBin=$env:userprofile+"\Desktop\"+$PolicyName+"_{InsertPolicyID}.bin"
-   ConvertFrom-CIPolicy -XMLFilePath $MergedPolicy -BinaryFilePath $WDACPolicyBin
+   $AppControlPolicyBin=$env:userprofile+"\Desktop\"+$PolicyName+"_{InsertPolicyID}.bin"
+   ConvertFrom-CIPolicy -XMLFilePath $MergedPolicy -BinaryFilePath $AppControlPolicyBin
    ```
 
    > [!NOTE]
    > In the sample commands above, for policies targeting Windows 10 version 1903+ or Windows 11, replace the string "{InsertPolicyID}" with the actual PolicyID GUID (including braces **{ }**) found in your policy XML file. For Windows 10 versions prior to 1903, use the name SiPolicy.p7b for the binary file name.
 
-2. Upload your merged policy XML and the associated binary to the source control solution you are using for your Windows Defender Application Control policies. such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration).
+2. Upload your merged policy XML and the associated binary to the source control solution you are using for your App Control for Business policies. such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration).
 
-3. Deploy the merged policy using your preferred deployment solution. See [Deploying Windows Defender Application Control (WDAC) policies](wdac-deployment-guide.md)
+3. Deploy the merged policy using your preferred deployment solution. See [Deploying App Control for Business policies](appcontrol-deployment-guide.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/use-code-signing-for-better-control-and-protection.md b/windows/security/application-security/application-control/app-control-for-business/deployment/use-code-signing-for-better-control-and-protection.md
similarity index 51%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/use-code-signing-for-better-control-and-protection.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/use-code-signing-for-better-control-and-protection.md
index 7e9e07b044..69735b11bd 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/use-code-signing-for-better-control-and-protection.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/use-code-signing-for-better-control-and-protection.md
@@ -1,19 +1,18 @@
 ---
-title: Use code signing for added control and protection with WDAC
-description: Code signing can be used to better control Win32 app authorization and add protection for your Windows Defender Application Control (WDAC) policies.
+title: Use code signing for added control and protection with App Control
+description: Code signing can be used to better control Win32 app authorization and add protection for your App Control for Business policies.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 11/29/2022
+ms.date: 09/11/2024
 ---
 
-# Use code signing for added control and protection with Windows Defender Application Control
+# Use code signing for added control and protection with App Control for Business
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. For more information, see [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
 ## What is code signing and why is it important?
 
-Code signing provides some important benefits to application security features like Windows Defender Application Control (WDAC). First, it allows the system to cryptographically verify that a file hasn't been tampered with since it was signed and before any code is allowed to run. Second, it associates the file with a real-world identity, such as a company or an individual developer. This identity can make your policy trust decisions easier and allows for real-world consequences when code signing is abused or used maliciously. Although Windows doesn't require software developers to digitally sign their code, most major independent software vendors (ISV) do use code signing for much of their code. And metadata that a developer includes in a file's resource header (.RSRC), such as OriginalFileName or ProductName, can be combined with the file's signing certificate to limit the scope of trust decisions. For example, instead of allowing everything signed by Microsoft, you can choose to allow only files signed by Microsoft where ProductName is "Microsoft Teams". Then use other rules to authorize any other files that need to run.
+Code signing provides some important benefits to application security features like App Control for Business. First, it allows the system to cryptographically verify that a file hasn't been tampered with since it was signed and before any code is allowed to run. Second, it associates the file with a real-world identity, such as a company or an individual developer. This identity can make your policy trust decisions easier and allows for real-world consequences when code signing is abused or used maliciously. Although Windows doesn't require software developers to digitally sign their code, most major independent software vendors (ISV) do use code signing for much of their code. And metadata that a developer includes in a file's resource header (.RSRC), such as OriginalFileName or ProductName, can be combined with the file's signing certificate to limit the scope of trust decisions. For example, instead of allowing everything signed by Microsoft, you can choose to allow only files signed by Microsoft where ProductName is "Microsoft Teams". Then use other rules to authorize any other files that need to run.
 
 Wherever possible, you should require all app binaries and scripts are code signed as part of your app acceptance criteria. And, you should ensure that internal line-of-business (LOB) app developers have access to code signing certificates controlled by your organization.
 
@@ -26,13 +25,13 @@ You can use catalog files to easily add a signature to an existing application w
 > [!NOTE]
 > Since catalogs identify the files they sign by hash, any change to the file may invalidate its signature. You will need to deploy updated catalog signatures any time the application is updated. Integrating code signing with your app development or app deployment processes is generally the best approach. Be aware of self-updating apps, as their app binaries may change without your knowledge.
 
-To learn how to create and manage catalog files for existing apps, see [Deploy catalog files to support Windows Defender Application Control](deploy-catalog-files-to-support-wdac.md).
+To learn how to create and manage catalog files for existing apps, see [Deploy catalog files to support App Control for Business](deploy-catalog-files-to-support-appcontrol.md).
 
-## Signed WDAC policies
+## Signed App Control policies
 
-While a WDAC policy begins as an XML document, it's then converted into a binary-encoded file before deployment. This binary version of your policy can be code signed like any other application binary, offering many of the same benefits as described above for signed code. Additionally, signed policies are treated specially by WDAC and help protect against tampering or removal of a policy even by an admin user.
+While an App Control policy begins as an XML document, it's then converted into a binary-encoded file before deployment. This binary version of your policy can be code signed like any other application binary, offering many of the same benefits as described above for signed code. Additionally, signed policies are treated specially by App Control and help protect against tampering or removal of a policy even by an admin user.
 
-For more information on using signed policies, see [Use signed policies to protect Windows Defender Application Control against tampering](/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering)
+For more information on using signed policies, see [Use signed policies to protect App Control for Business against tampering](use-signed-policies-to-protect-appcontrol-against-tampering.md)
 
 ## Obtain code signing certificates for your own use
 
@@ -40,4 +39,4 @@ Some ways to obtain code signing certificates for your own use, include:
 
 - Use Microsoft's [Trusted Signing service](/azure/trusted-signing/).
 - Purchase a code signing certificate from one of the [Microsoft Trusted Root Program participants](/security/trusted-root/participants-list).
-- To use your own digital certificate or public key infrastructure (PKI) to issue code signing certificates, see [Optional: Create a code signing certificate for Windows Defender Application Control](create-code-signing-cert-for-wdac.md).
\ No newline at end of file
+- To use your own digital certificate or public key infrastructure (PKI) to issue code signing certificates, see [Optional: Create a code signing certificate for App Control for Business](create-code-signing-cert-for-appcontrol.md).
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/use-signed-policies-to-protect-wdac-against-tampering.md b/windows/security/application-security/application-control/app-control-for-business/deployment/use-signed-policies-to-protect-appcontrol-against-tampering.md
similarity index 69%
rename from windows/security/application-security/application-control/windows-defender-application-control/deployment/use-signed-policies-to-protect-wdac-against-tampering.md
rename to windows/security/application-security/application-control/app-control-for-business/deployment/use-signed-policies-to-protect-appcontrol-against-tampering.md
index a7f4170ab2..6aa667b28a 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/use-signed-policies-to-protect-wdac-against-tampering.md
+++ b/windows/security/application-security/application-control/app-control-for-business/deployment/use-signed-policies-to-protect-appcontrol-against-tampering.md
@@ -1,17 +1,16 @@
 ---
-title: Use signed policies to protect Windows Defender Application Control against tampering
-description: Signed Windows Defender Application Control (WDAC) policies give organizations the highest level of malware protection available in Windows 10 and Windows 11.
+title: Use signed policies to protect App Control for Business against tampering
+description: Signed App Control for Business policies give organizations the highest level of malware protection available in Windows 10 and Windows 11.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 11/04/2022
+ms.date: 09/11/2024
 ---
 
-# Use signed policies to protect Windows Defender Application Control against tampering
+# Use signed policies to protect App Control for Business against tampering
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. For more information, see [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-Signed Windows Defender Application Control (WDAC) policies give organizations the highest level of protection available in Windows. These policies are designed to detect administrative tampering of the policy, such as by malware running as admin, and will result in a boot failure or blue screen. With this goal in mind, it's much more difficult to remove signed WDAC policies. SecureBoot must be enabled in order to provide this protection for signed WDAC policies.
+Signed App Control for Business policies give organizations the highest level of protection available in Windows. These policies are designed to detect administrative tampering of the policy, such as by malware running as admin, and will result in a boot failure or blue screen. With this goal in mind, it's much more difficult to remove signed App Control policies. SecureBoot must be enabled in order to provide this protection for signed App Control policies.
 
 If you don't currently have a code signing certificate you can use to sign your policies, see [Obtain code signing certificates for your own use](use-code-signing-for-better-control-and-protection.md#obtain-code-signing-certificates-for-your-own-use).
 
@@ -22,12 +21,12 @@ If you don't currently have a code signing certificate you can use to sign your
 > - Use RSA keys with 2K, 3K, or 4K key size only. ECDSA isn't supported.
 > - You can use SHA-256, SHA-384, or SHA-512 as the digest algorithm on Windows 11, as well as Windows 10 and Windows Server 2019 and above after applying the November 2022 cumulative security update. All other devices only support SHA-256.
 
-Before you attempt to deploy a signed policy, you should first deploy an unsigned version of the policy to uncover any issues with the policy rules. We also recommend you enable rule options **9 - Enabled:Advanced Boot Options Menu** and **10 - Enabled:Boot Audit on Failure** to leave troubleshooting options available to administrators. To ensure that a rule option is enabled, you can run a command such as `Set-RuleOption -FilePath <PathAndFilename> -Option 9`, even if you're not sure whether the option is already enabled. If so, the command has no effect. When validated and ready for enterprise deployment, you can remove these options. For more information about rule options, see [Windows Defender Application Control policy rules](../design/select-types-of-rules-to-create.md).
+Before you attempt to deploy a signed policy, you should first deploy an unsigned version of the policy to uncover any issues with the policy rules. We also recommend you enable rule options **9 - Enabled:Advanced Boot Options Menu** and **10 - Enabled:Boot Audit on Failure** to leave troubleshooting options available to administrators. To ensure that a rule option is enabled, you can run a command such as `Set-RuleOption -FilePath <PathAndFilename> -Option 9`, even if you're not sure whether the option is already enabled. If so, the command has no effect. When validated and ready for enterprise deployment, you can remove these options. For more information about rule options, see [App Control for Business policy rules](../design/select-types-of-rules-to-create.md).
 
 > [!NOTE]
 > When signing a Base policy that has existing Supplemental policies, you must also switch to signed policy for all of the Supplementals. Authorize the signed supplemental policies by adding a `<SupplementalPolicySigner>` rule to the Base policy.
 
-## Prepare your WDAC policy for signing
+## Prepare your App Control policy for signing
 
 1. Open an elevated Windows PowerShell session and initialize the variables to use:
 
@@ -38,7 +37,7 @@ Before you attempt to deploy a signed policy, you should first deploy an unsigne
    ```
 
    > [!NOTE]
-   > This example uses an enforced version of the WDAC policy that you created in [Create a Windows Defender Application Control policy from a reference computer](../design/create-wdac-policy-using-reference-computer.md) article. If you sign another policy, be sure to update the **$PolicyPath** and **$PolicyName** variables with the correct information.
+   > This example uses an enforced version of the App Control policy that you created in [Create an App Control for Business policy from a reference computer](../design/create-appcontrol-policy-using-reference-computer.md) article. If you sign another policy, be sure to update the **$PolicyPath** and **$PolicyName** variables with the correct information.
 
 2. Navigate to your desktop as the working directory:
 
@@ -46,7 +45,7 @@ Before you attempt to deploy a signed policy, you should first deploy an unsigne
     cd $PolicyPath
     ```
 
-3. If your WDAC policy doesn't already include an `<UpdatePolicySigner>` rule for your policy signing certificate, you must add it. At least one `<UpdatePolicySigner>` rule must exist to convert your policy XML with [ConvertFrom-CiPolicy](/powershell/module/configci/convertfrom-cipolicy).
+3. If your App Control policy doesn't already include an `<UpdatePolicySigner>` rule for your policy signing certificate, you must add it. At least one `<UpdatePolicySigner>` rule must exist to convert your policy XML with [ConvertFrom-CiPolicy](/powershell/module/configci/convertfrom-cipolicy).
 
     Use [Add-SignerRule](/powershell/module/configci/add-signerrule) and create an `<UpdatePolicySigner>` rule from your certificate file (.cer). If you purchased a code signing certificate or issued one from your own public key infrastructure (PKI), you can export the certificate file.
 
@@ -58,7 +57,7 @@ Before you attempt to deploy a signed policy, you should first deploy an unsigne
     ```
 
     > [!IMPORTANT]
-    > Failing to perform this step will leave you unable to modify or disable this policy and will lead to boot failure. For more information about how to disable signed policies causing boot failure, see [Remove Windows Defender Application Control policies causing boot stop failures](disable-wdac-policies.md#remove-wdac-policies-causing-boot-stop-failures).
+    > Failing to perform this step will leave you unable to modify or disable this policy and will lead to boot failure. For more information about how to disable signed policies causing boot failure, see [Remove App Control for Business policies causing boot stop failures](disable-appcontrol-policies.md#remove-app-control-policies-causing-boot-stop-failures).
 
 4. Use [Set-RuleOption](/powershell/module/configci/set-ruleoption) to remove the unsigned policy rule option:
 
@@ -86,11 +85,11 @@ Before you attempt to deploy a signed policy, you should first deploy an unsigne
 
 ### Policy signing with signtool.exe
 
-If you purchased a code signing certificate or issued one from your own PKI, you can use [SignTool.exe](/windows/win32/seccrypto/signtool) to sign your WDAC policy files:
+If you purchased a code signing certificate or issued one from your own PKI, you can use [SignTool.exe](/windows/win32/seccrypto/signtool) to sign your App Control policy files:
 
-1. Import the .pfx code signing certificate into the user's personal store on the computer where the signing will happen. In this example, you use the certificate that was created in [Optional: Create a code signing certificate for Windows Defender Application Control](create-code-signing-cert-for-wdac.md).
+1. Import the .pfx code signing certificate into the user's personal store on the computer where the signing will happen. In this example, you use the certificate that was created in [Optional: Create a code signing certificate for App Control for Business](create-code-signing-cert-for-appcontrol.md).
 
-2. Sign the WDAC policy by using SignTool.exe:
+2. Sign the App Control policy by using SignTool.exe:
 
    ```powershell
    <Path to signtool.exe> sign -v -n "ContosoSigningCert" -p7 . -p7co 1.3.6.1.4.1.311.79.1 -fd sha256 $CIPolicyBin
@@ -99,7 +98,7 @@ If you purchased a code signing certificate or issued one from your own PKI, you
    > [!NOTE]
    > The *&lt;Path to signtool.exe&gt;* variable should be the full path to the SignTool.exe utility. **ContosoSigningCert** is the subject name of the certificate that will be used to sign the policy. You should import this certificate to your personal certificate store on the computer you use to sign the policy.
 
-When complete, the commands should output a signed policy file with a `.p7` extension. You must rename the file to `{GUID}.cip` where "{GUID}" is the &lt;PolicyId&gt; from your original WDAC policy XML.
+When complete, the commands should output a signed policy file with a `.p7` extension. You must rename the file to `{GUID}.cip` where "{GUID}" is the &lt;PolicyId&gt; from your original App Control policy XML.
 
 ## Verify and deploy the signed policy
 
@@ -117,9 +116,9 @@ $SignedCryptoMsgSyntax.Decode([System.IO.File]::ReadAllBytes($CIPolicyBin))
 $SignedCryptoMsgSyntax.Certificates | Format-List -Property *
 ```
 
-Thoroughly test the signed policy on a representative set of computers before proceeding with deployment. Be sure to reboot the test computers at least twice after applying the signed WDAC policy to ensure you don't encounter a boot failure.
+Thoroughly test the signed policy on a representative set of computers before proceeding with deployment. Be sure to reboot the test computers at least twice after applying the signed App Control policy to ensure you don't encounter a boot failure.
 
-Once you've verified the signed policy, deploy it using your preferred deployment method. For more information about deploying policies, see [Deploying Windows Defender Application Control policies](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide).
+Once you've verified the signed policy, deploy it using your preferred deployment method. For more information about deploying policies, see [Deploying App Control for Business policies](appcontrol-deployment-guide.md).
 
 > [!NOTE]
 > Anti-tampering protection for signed policies takes effect after the first reboot once the signed policy is applied to a computer. This protection only applies to computers with UEFI Secure Boot enabled.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/allow-com-object-registration-in-wdac-policy.md b/windows/security/application-security/application-control/app-control-for-business/design/allow-com-object-registration-in-appcontrol-policy.md
similarity index 85%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/allow-com-object-registration-in-wdac-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/design/allow-com-object-registration-in-appcontrol-policy.md
index fc9395851d..7968a8fb46 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/allow-com-object-registration-in-wdac-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/allow-com-object-registration-in-appcontrol-policy.md
@@ -1,21 +1,20 @@
 ---
-title: Allow COM object registration in a WDAC policy
-description: You can allow COM object registration in a Windows Defender Application Control policy.
+title: Allow COM object registration in an App Control policy
+description: You can allow COM object registration in an App Control for Business policy.
 ms.localizationpriority: medium
-ms.date: 04/05/2023
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
-# Allow COM object registration in a Windows Defender Application Control policy
+# Allow COM object registration in an App Control for Business policy
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
 The [Microsoft Component Object Model (COM)](/windows/desktop/com/the-component-object-model) is a platform-independent, distributed, object-oriented system for creating binary software components that can interact. COM specifies an object model and programming requirements that enable COM objects to interact with other objects.
 
-## COM object configurability in WDAC policy
+## COM object configurability in App Control policy
 
-Windows Defender Application Control (WDAC) enforces a built-in allowlist for COM object registration. While this list works for most common application usage scenarios, you may need to allow more COM objects to support the apps used in your organization. You can specify allowed COM objects via their GUID in your WDAC policy as described in this article.
+App Control for Business enforces a built-in allowlist for COM object registration. While this list works for most common application usage scenarios, you may need to allow more COM objects to support the apps used in your organization. You can specify allowed COM objects via their GUID in your App Control policy as described in this article.
 
 > [!NOTE]
 > To add this functionality to other versions of Windows 10, you can install the following or later updates.
@@ -46,7 +45,7 @@ One attribute:
 
 ### Multiple policy considerations
 
-Similar to executable files, COM objects must pass all enforced WDAC policies on the system to run. For example, if the COM object under evaluation passes most but not all of your WDAC policies, the COM object is blocked. If you're using a combination of base and supplemental policies, the COM object just needs to be allowlisted in either the base policy or one of the supplemental policies.
+Similar to executable files, COM objects must pass all enforced App Control policies on the system to run. For example, if the COM object under evaluation passes most but not all of your App Control policies, the COM object is blocked. If you're using a combination of base and supplemental policies, the COM object just needs to be allowlisted in either the base policy or one of the supplemental policies.
 
 ### Examples
 
@@ -126,10 +125,10 @@ To add this CLSID to the existing policy, follow these steps:
 
 1. Open PowerShell ISE with Administrative privileges.
 
-2. Copy and edit this command, then run it from the admin PowerShell ISE. Consider the policy name to be `WDAC_policy.xml`.
+2. Copy and edit this command, then run it from the admin PowerShell ISE. Consider the policy name to be `AppControl_policy.xml`.
 
     ```PowerShell
-    PS C:\WINDOWS\system32> Set-CIPolicySetting -FilePath <path to policy xml>\WDAC_policy.xml -Key "{f8d253d9-89a4-4daa-87b6-1168369f0b21}" -Provider WSH -Value true -ValueName EnterpriseDefinedClsId -ValueType Boolean
+    PS C:\WINDOWS\system32> Set-CIPolicySetting -FilePath <path to policy xml>\AppControl_policy.xml -Key "{f8d253d9-89a4-4daa-87b6-1168369f0b21}" -Provider WSH -Value true -ValueName EnterpriseDefinedClsId -ValueType Boolean
     ```
 
     Once the command has run, find the following section added to the policy XML.
@@ -145,7 +144,7 @@ To add this CLSID to the existing policy, follow these steps:
 
 ### Default COM Object allowlist
 
-The table that follows describes the list of COM objects that are inherently trusted in Windows Defender Application Control. Objects in this list don't need to be allowlisted in your WDAC policies. They can be denied by creating explicit deny rules in your WDAC policy.
+The table that follows describes the list of COM objects that are inherently trusted in App Control for Business. Objects in this list don't need to be allowlisted in your App Control policies. They can be denied by creating explicit deny rules in your App Control policy.
 
 | File Name | CLSID |
 |--------|-----------|
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-and-dotnet.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-and-dotnet.md
new file mode 100644
index 0000000000..6e31a5e523
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-and-dotnet.md
@@ -0,0 +1,47 @@
+---
+title: App Control for Business and .NET
+description: Understand how App Control and .NET work together and use Dynamic Code Security to verify code loaded by .NET at runtime.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: conceptual
+---
+
+# App Control for Business and .NET
+
+.NET apps (as written in a high-level language like C#) are compiled to an Intermediate Language (IL). IL is a compact code format that can be supported on any operating system or architecture. Most .NET apps use APIs that are supported in multiple environments, requiring only the .NET runtime to run. IL needs to be compiled to native code in order to execute on a CPU, for example Arm64 or x64. When .NET compiles IL to native image (NI) on a device with an App Control user mode policy, it first checks whether the original IL file passes the current App Control policies. If so, .NET sets an NTFS extended attribute (EA) on the generated NI file so that App Control knows to trust it as well. When the .NET app runs, App Control sees the EA on the NI file and allows it.
+
+The EA set on the NI file only applies to the currently active App Control policies. If one of the active App Control policies is updated or a new policy is applied, the EA on the NI file is invalidated. The next time the app runs, App Control will block the NI file. .NET handles the block gracefully and falls back to the original IL code. If the IL still passes the latest App Control policies, then the app runs without any functional impact. Since the IL is now being compiled at runtime, you might notice a slight impact to performance of the app. When .NET must fall back to IL, .NET will also schedule a process to run at the next maintenance window to regenerate all NI files, thus reestablishing the App Control EA for all code that passes the latest App Control policies.
+
+In some cases, if an NI file is blocked, you might see a "false positive" block event in the *CodeIntegrity - Operational* event log as described in [App Control Admin Tips & Known Issues](../operations/known-issues.md#net-native-images-may-generate-false-positive-block-events).
+
+To mitigate any performance impact caused when the App Control EA isn't valid or missing:
+
+- Avoid updating the App Control policies often.
+- Run `ngen update` (on all machine architectures) to force .NET to regenerate all NI files immediately after applying changes to your App Control policies.
+- Migrate applications to .NET Core (.NET 6 or greater).
+
+## App Control and .NET hardening
+
+Security researchers found that some .NET capabilities that allow apps to load libraries from external sources or generate new code at runtime can be used to circumvent App Control controls.
+To address this potential vulnerability, App Control includes an option called *Dynamic Code Security* that works with .NET to verify code loaded at runtime.
+
+When the Dynamic Code Security option is enabled, the App Control policy is applied to libraries that .NET loads from external sources. For example, any remote sources, such as the internet or a network share.
+
+> [!IMPORTANT]
+> .Net dynamic code security hardening is *turned on and enforced* if any App Control policy with UMCI enabled has set option **19 Enabled:Dynamic Code Security**. There is no audit mode for this feature. You should test your apps with this option set before turning it on across large numbers of devices.
+
+Additionally, it detects tampering in code generated to disk by .NET and blocks loading code that was tampered with.
+
+Dynamic Code Security isn't enabled by default because existing policies might not account for externally loaded libraries.
+Additionally, a few .NET loading features, including loading unsigned assemblies built with System.Reflection.Emit, aren't currently supported with Dynamic Code Security enabled.
+Microsoft recommends testing Dynamic Code Security in audit mode before enforcing it to discover whether any new libraries should be included in the policy.
+
+Additionally, customers can precompile for deployment only to prevent an allowed executable from being terminated because it tries to load unsigned dynamically generated code. See the "Precompiling for Deployment Only" section in the [ASP.NET Precompilation Overview](/previous-versions/aspnet/bb398860(v=vs.100)) document for how to fix that.
+
+To enable Dynamic Code Security, add the following option to the `<Rules>` section of your App Control policy:
+
+```xml
+<Rule>
+    <Option>Enabled:Dynamic Code Security</Option>
+</Rule>
+```
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-design-guide.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-design-guide.md
new file mode 100644
index 0000000000..73bbde562c
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-design-guide.md
@@ -0,0 +1,36 @@
+---
+title: App Control for Business design guide
+description: Microsoft App Control for Business allows organizations to control what apps and drivers will run on their managed Windows devices.
+ms.localizationpriority: medium
+ms.topic: conceptual
+ms.date: 09/11/2024
+---
+
+# App Control for Business design guide
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+This guide covers design and planning for App Control for Business. It's intended to help security architects, security administrators, and system administrators create a plan that addresses specific App Control requirements for different departments or business groups within an organization.
+
+## Plan for success
+
+A common refrain you may hear about App Control is that it is "too hard." While it's true that App Control isn't as simple as flipping a switch, organizations can be successful, if they're methodical when carefully planning their approach. In reality, the issues that lead to failure with App Control often arise from business issues rather than technology challenges. Organizations that have successfully deployed App Control have ensured the following before starting their planning:
+
+-   Executive sponsorship and organizational buy-in is in place.
+-   There's a clear **business** objective for using App Control, and it's not being planned as a purely technical problem from IT.
+-   The organization has a plan to handle potential helpdesk support requests for users who are blocked from running some apps.
+-   The organization has considered where App Control can be most useful (for example, securing sensitive workloads or business functions) and also where it may be difficult to achieve (for example, developer workstations).
+
+Once these business factors are in place, you're ready to begin planning your App Control for Business deployment. The following topics can help guide you through your planning process.
+
+## In this section
+
+| Topic | Description |
+| - | - |
+| [Plan for App Control policy management](plan-appcontrol-management.md) | This topic describes the decisions you need to make to establish the processes for managing and maintaining App Control policies. |
+| [Understand App Control policy design decisions](understand-appcontrol-policy-design-decisions.md) | This topic lists the design questions, possible answers, and ramifications of the decisions, when you plan a deployment of App Control policies. |
+| [Understand App Control policy rules and file rules](select-types-of-rules-to-create.md) | This topic lists resources you can use when selecting your policy rules by using App Control. |
+| [Policy creation for common App Control usage scenarios](common-appcontrol-use-cases.md) | This set of topics outlines common use case scenarios, and helps you begin to develop a plan for deploying App Control in your organization. |
+| [Policy creation using the App Control Wizard tool](appcontrol-wizard.md) | This set of topics describes how to use the App Control Wizard desktop app to easily create, edit, and merge App Control policies. |
+
+After planning is complete, the next step is to deploy App Control. The [App Control for Business Deployment Guide](../deployment/appcontrol-deployment-guide.md) covers creating and testing policies, deploying the enforcement setting, and managing and maintaining policies.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-base-policy.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-base-policy.md
similarity index 68%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-base-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-base-policy.md
index 38dd2726e4..5de28ef21c 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-base-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-base-policy.md
@@ -1,35 +1,34 @@
 ---
-title: Windows Defender Application Control Wizard Base Policy Creation
-description: Creating new base application control policies with the Microsoft Windows Defender Application (WDAC) Wizard.
+title: App Control for Business Wizard Base Policy Creation
+description: Creating new base App Control policies with the App Control Wizard.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 06/07/2023
+ms.date: 09/11/2024
 ---
 
 # Creating a new Base Policy with the Wizard
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-When creating policies for use with Windows Defender Application Control (WDAC), it's recommended to start with a template policy, and then add or remove rules to suit your application control scenario. For this reason, the WDAC Wizard offers three template policies to start from and customize during the base policy creation workflow. Prerequisite information about application control can be accessed through the [WDAC design guide](wdac-design-guide.md). This page outlines the steps to create a new application control policy from a template, configure the policy options, and the signer and file rules.
+When creating policies for use with App Control for Business, it's recommended to start with a template policy, and then add or remove rules to suit your App Control scenario. For this reason, the App Control Wizard offers three template policies to start from and customize during the base policy creation workflow. Prerequisite information about App Control can be accessed through the [App Control design guide](appcontrol-design-guide.md). This page outlines the steps to create a new App Control policy from a template, configure the policy options, and the signer and file rules.
 
 ## Template Base Policies
 
-Each of the template policies has a unique set of policy allowlist rules that affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy trusts fewer application publishers and signers than the Signed and Reputable mode policy. The Default Windows policy has a smaller circle-of-trust with better security than the Signed and Reputable policy, but at the expense of compatibility.  
+Each of the template policies has a unique set of policy allowlist rules that affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy trusts fewer application publishers and signers than the Signed and Reputable mode policy. The Default Windows policy has a smaller circle-of-trust with better security than the Signed and Reputable policy, but at the expense of compatibility.
 
 | Template Base Policy | Description |
 |---------------------------------|-------------------------------------------------------------------|
 | **Default Windows Mode**      | Default Windows mode authorizes the following components: </br><ul><li>Windows operating components - any binary installed by a fresh install of Windows</li><li>Apps installed from the Microsoft Store</li><li>Microsoft Office365 apps, OneDrive, and Microsoft Teams</li><li>Third-party [Windows Hardware Compatible drivers](/windows-hardware/drivers/install/whql-release-signature)</li></ul>|
 | **Allow Microsoft Mode**      | Allow mode authorizes the following components: </br><ul><li>Windows operating components - any binary installed by a fresh install of Windows</li><li>Apps installed from the Microsoft Store</li><li>Microsoft Office365 apps, OneDrive, and Microsoft Teams</li><li>Third-party [Windows Hardware Compatible drivers](/windows-hardware/drivers/install/whql-release-signature)</li><li>*All Microsoft-signed software*</li></ul>|
-| **Signed and Reputable Mode** | Signed and Reputable mode authorizes the following components: </br><ul><li>Windows operating components - any binary installed by a fresh install of Windows</li><li>Apps installed from the Microsoft Store</li><li>Microsoft Office365 apps, OneDrive, and Microsoft Teams</li><li>Third-party [Windows Hardware Compatible drivers](/windows-hardware/drivers/install/whql-release-signature)</li><li>All Microsoft-signed software</li><li>*Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-wdac-with-intelligent-security-graph.md)*</li></ul>|
+| **Signed and Reputable Mode** | Signed and Reputable mode authorizes the following components: </br><ul><li>Windows operating components - any binary installed by a fresh install of Windows</li><li>Apps installed from the Microsoft Store</li><li>Microsoft Office365 apps, OneDrive, and Microsoft Teams</li><li>Third-party [Windows Hardware Compatible drivers](/windows-hardware/drivers/install/whql-release-signature)</li><li>All Microsoft-signed software</li><li>*Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-appcontrol-with-intelligent-security-graph.md)*</li></ul>|
 
 *Italicized content denotes the changes in the current policy with respect to the policy prior.*
 
-More information about the Default Windows Mode and Allow Microsoft Mode policies can be accessed through the [Example Windows Defender Application Control base policies article](example-wdac-base-policies.md).
+More information about the Default Windows Mode and Allow Microsoft Mode policies can be accessed through the [Example App Control for Business base policies article](example-appcontrol-base-policies.md).
 
-![Selecting a base template for the policy.](../images/wdac-wizard-template-selection.png)
+![Selecting a base template for the policy.](../images/appcontrol-wizard-template-selection.png)
 
-Once the base template is selected, give the policy a name and choose where to save the application control policy on disk.
+Once the base template is selected, give the policy a name and choose where to save the App Control policy on disk.
 
 ## Configuring Policy Rules
 
@@ -37,23 +36,23 @@ Upon page launch, policy rules are automatically enabled/disabled depending on t
 
 ### Policy Rules Description
 
-The following table has a description of each policy rule, beginning with the left-most column. The [Policy rules article](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules) provides a fuller description of each policy rule.
+The following table has a description of each policy rule, beginning with the left-most column. The [Policy rules article](select-types-of-rules-to-create.md#app-control-for-business-policy-rules) provides a fuller description of each policy rule.
 
 | Rule option | Description |
 |------------ | ----------- |
-| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all Windows Defender Application Control policies. Setting this rule option allows the F8 menu to appear to physically present users. |
+| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all App Control for Business policies. Setting this rule option allows the F8 menu to appear to physically present users. |
 | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. |
 | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is required to run HTA files, and is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 isn't supported and may have unintended results. |
 |**[Hypervisor-protected code integrity (HVCI)](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.|
 | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by the Microsoft Intelligent Security Graph (ISG). |
 | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Configuration Manager, that has been defined as a managed installer. |
 | **Require WHQL** | By default, legacy drivers that aren't Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Henceforth, every new Windows-compatible driver must be WHQL certified. |
-| **Update Policy without Rebooting** | Use this option to allow future Windows Defender Application Control policy updates to apply without requiring a system reboot. |
+| **Update Policy without Rebooting** | Use this option to allow future App Control for Business policy updates to apply without requiring a system reboot. |
 | **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. |
-| **User Mode Code Integrity** | Windows Defender Application Control policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. |
+| **User Mode Code Integrity** | App Control for Business policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. |
 
 > [!div class="mx-imgBorder"]
-> ![Rule options UI for Windows Allowed mode policy.](../images/wdac-wizard-rule-options-UI-advanced-collapsed.png)
+> ![Rule options UI for Windows Allowed mode policy.](../images/appcontrol-wizard-rule-options-UI-advanced-collapsed.png)
 
 ### Advanced Policy Rules Description
 
@@ -61,34 +60,34 @@ Selecting the **+ Advanced Options** label shows another column of policy rules,
 
 | Rule option | Description |
 |------------ | ----------- |
-| **Boot Audit on Failure** | Used when the Windows Defender Application Control (WDAC) policy is in enforcement mode. When a driver fails during startup, the WDAC policy is placed in audit mode so that Windows loads. Administrators can validate the reason for the failure in the CodeIntegrity event log. |
-| **Disable Flight Signing** | If enabled, WDAC policies block flightroot-signed binaries. This option would be used in the scenario in which organizations only want to run released binaries, not flight/preview-signed builds. |
+| **Boot Audit on Failure** | Used when the App Control for Business policy is in enforcement mode. When a driver fails during startup, the App Control policy is placed in audit mode so that Windows loads. Administrators can validate the reason for the failure in the CodeIntegrity event log. |
+| **Disable Flight Signing** | If enabled, App Control policies block flightroot-signed binaries. This option would be used in the scenario in which organizations only want to run released binaries, not flight/preview-signed builds. |
 | **Disable Runtime FilePath Rule Protection** | This option disables the default runtime check that only allows FilePath rules for paths that are only writable by an administrator. |
 | **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries (DLLs). |
-| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option causes WDAC to periodically revalidate the reputation for files authorized by the ISG.|
+| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, App Control sets an extended file attribute that indicates that the file was authorized to run. This option causes App Control to periodically revalidate the reputation for files authorized by the ISG.|
 | **Require EV Signers** | This option isn't currently supported. |
 
-![Rule options UI for Windows Allowed mode.](../images/wdac-wizard-rule-options-UI.png)
+![Rule options UI for Windows Allowed mode.](../images/appcontrol-wizard-rule-options-UI.png)
 
 > [!NOTE]
-> We recommend that you **enable Audit Mode** initially because it allows you to test new Windows Defender Application Control policies before you enforce them. With audit mode, no application is blocked-instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default.
+> We recommend that you **enable Audit Mode** initially because it allows you to test new App Control for Business policies before you enforce them. With audit mode, no application is blocked-instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default.
 
 ## Creating custom file rules
 
-[File rules](select-types-of-rules-to-create.md#windows-defender-application-control-file-rule-levels) in an application control policy specify the level at which applications are identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting **+ Custom Rules** opens the custom file rule conditions panel to create custom file rules for your policy. The Wizard supports four types of file rules:
+[File rules](select-types-of-rules-to-create.md#app-control-for-business-file-rule-levels) in an App Control policy specify the level at which applications are identified and trusted. File rules are the main mechanism for defining trust in the App Control policy. Selecting **+ Custom Rules** opens the custom file rule conditions panel to create custom file rules for your policy. The Wizard supports four types of file rules:
 
 ### Publisher Rules
 
-The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule.  The following table shows the relationship between the slider placement, the corresponding Windows Defender Application Control (WDAC) rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule.
+The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule.  The following table shows the relationship between the slider placement, the corresponding App Control for Business rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule.
 
-| Rule Condition | WDAC Rule Level | Description |
+| Rule Condition | App Control Rule Level | Description |
 |------------ | ----------- | ----------- |
 | **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This certificate is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate is affected. |
 | **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example, a device driver corp, is affected. |
 | **File version** | SignedVersion | This rule is a combination of PCACertificate, publisher, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. |
 | **File name** | FilePublisher | Most specific. Combination of the file name, publisher, and PCA certificate and a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. |
 
-![Custom filepublisher file rule creation.](../images/wdac-wizard-custom-publisher-rule.png)
+![Custom filepublisher file rule creation.](../images/appcontrol-wizard-custom-publisher-rule.png)
 
 ### Filepath Rules
 
@@ -106,16 +105,16 @@ The Wizard supports the creation of [file name rules](select-types-of-rules-to-c
 | **Internal name** | Specifies the internal name of the binary. |
 
 > [!div class="mx-imgBorder"]
-> ![Custom file attributes rule.](../images/wdac-wizard-custom-file-attribute-rule.png)
+> ![Custom file attributes rule.](../images/appcontrol-wizard-custom-file-attribute-rule.png)
 
 ### File Hash Rules
 
 Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause extra administrative overhead to maintain the current product version's hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard uses file hash as the fallback in case a file rule can't be created using the specified file rule level.
 
 #### Deleting Signing Rules
-  
+
 The policy signing rules list table on the left of the page documents the allow and deny rules in the template, and any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. You're then prompted for another confirmation. Select `Yes` to remove the rule from the policy and the rules table.
 
 ## Up next
 
-- [Editing a Windows Defender Application Control (WDAC) policy using the Wizard](wdac-wizard-editing-policy.md)
+- [Editing an App Control for Business policy using the Wizard](appcontrol-wizard-editing-policy.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-supplemental-policy.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-supplemental-policy.md
similarity index 68%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-supplemental-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-supplemental-policy.md
index 2d1d9a8c91..3cd72d3fcd 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-create-supplemental-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-create-supplemental-policy.md
@@ -1,33 +1,32 @@
 ---
-title: Windows Defender Application Control Wizard Supplemental Policy Creation
-description: Creating supplemental application control policies with the WDAC Wizard.
+title: App Control for Business Wizard Supplemental Policy Creation
+description: Creating supplemental App Control policies with the App Control Wizard.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 06/07/2023
+ms.date: 09/11/2024
 ---
 
 # Creating a new Supplemental Policy with the Wizard
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-Beginning in Windows 10 version 1903, Windows Defender Application Control (WDAC) supports the creation of multiple active policies on a device. One or more supplemental policies allow customers to expand a [WDAC base policy](wdac-wizard-create-base-policy.md) to increase the circle of trust of the policy. A supplemental policy can expand only one base policy, but multiple supplementals can expand the same base policy. When supplemental policies are used, applications allowed by the base or any of its supplemental policies are allowed to run.
+Beginning in Windows 10 version 1903, App Control for Business supports the creation of multiple active policies on a device. One or more supplemental policies allow customers to expand a [App Control base policy](appcontrol-wizard-create-base-policy.md) to increase the circle of trust of the policy. A supplemental policy can expand only one base policy, but multiple supplementals can expand the same base policy. When supplemental policies are used, applications allowed by the base or any of its supplemental policies are allowed to run.
 
-Prerequisite information about application control can be accessed through the [WDAC design guide](wdac-design-guide.md). This page outlines the steps to create a supplemental application control policy, configure the policy options, and the signer and file rules.
+Prerequisite information about App Control can be accessed through the [App Control design guide](appcontrol-design-guide.md). This page outlines the steps to create a supplemental App Control policy, configure the policy options, and the signer and file rules.
 
 ## Expanding a Base Policy
 
-Once the Supplemental Policy type is chosen on the New Policy page, policy name and file dialog fields can be used to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard verifies if the base policy allows supplementals and shows the following confirmation.
+Once the Supplemental Policy type is chosen on the New Policy page, policy name and file dialog fields can be used to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The App Control Wizard verifies if the base policy allows supplementals and shows the following confirmation.
 
-![Base policy allows supplemental policies.](../images/wdac-wizard-supplemental-expandable.png)
+![Base policy allows supplemental policies.](../images/appcontrol-wizard-supplemental-expandable.png)
 
-If the base policy isn't configured for supplemental policies, the Wizard attempts to convert the policy to one that can be supplemented. Once successful, the Wizard shows a dialog demonstrating that the addition of the Allow Supplemental Policy rule was completed.  
+If the base policy isn't configured for supplemental policies, the Wizard attempts to convert the policy to one that can be supplemented. Once successful, the Wizard shows a dialog demonstrating that the addition of the Allow Supplemental Policy rule was completed.
 
-![Wizard confirms modification of base policy.](../images/wdac-wizard-confirm-base-policy-modification.png)
+:::image type="content" alt-text="Wizard confirms modification of base policy." source="../images/appcontrol-wizard-confirm-base-policy-modification.png":::
 
-Policies that can't be supplemented, for instance another supplemental policy, are detected by the Wizard and show the following error. Only a base policy can be supplemented. More information on supplemental policies can be found on our [Multiple Policies article](deploy-multiple-wdac-policies.md).
+Policies that can't be supplemented, for instance another supplemental policy, are detected by the Wizard and show the following error. Only a base policy can be supplemented. More information on supplemental policies can be found on our [Multiple Policies article](deploy-multiple-appcontrol-policies.md).
 
-![Wizard detects a bad base policy.](../images/wdac-wizard-supplemental-not-base.png)
+:::image type="content" alt-text="Wizard detects a bad base policy." source="../images/appcontrol-wizard-supplemental-not-base.png":::
 
 ## Configuring Policy Rules
 
@@ -45,24 +44,24 @@ Supplemental policies can only configure three policy rules. The following table
 | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Configuration Manager, that has been defined as a managed installer. |
 | **Disable Runtime FilePath Rule Protection** | This option disables the default runtime check that only allows FilePath rules for paths that are only writable by an administrator. |
 
-![Rule options UI for Windows Allowed mode.](../images/wdac-wizard-supplemental-policy-rule-options-UI.png)
+:::image type="content" alt-text="Rule options UI for Windows Allowed mode." source="../images/appcontrol-wizard-supplemental-policy-rule-options-UI.png":::
 
 ## Creating custom file rules
 
-File rules in an application control policy specify the level at which applications are identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting **+ Custom Rules** opens the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports four types of file rules:
+File rules in an App Control policy specify the level at which applications are identified and trusted. File rules are the main mechanism for defining trust in the App Control policy. Selecting **+ Custom Rules** opens the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports four types of file rules:
 
 ### Publisher Rules
 
-The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule.  The following table shows the relationship between the slider placement, the corresponding Windows Defender Application Control (WDAC) rule level, and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule.
+The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule.  The following table shows the relationship between the slider placement, the corresponding App Control for Business rule level, and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule.
 
-| Rule Condition | WDAC Rule Level | Description |
+| Rule Condition | App Control Rule Level | Description |
 |------------ | ----------- | ----------- |
 | **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This certificate is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate is affected. |
 | **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example, a device driver publisher, is affected. |
 | **File version** | SignedVersion | This rule is a combination of the PCACertificate and Publisher rule, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. |
 | **File name** | FilePublisher | Most specific. Combination of the file name, publisher, and PCA certificate and a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. |
 
-![Custom filepublisher file rule creation.](../images/wdac-wizard-custom-publisher-rule.png)
+![Custom filepublisher file rule creation.](../images/appcontrol-wizard-custom-publisher-rule.png)
 
 ### Filepath Rules
 
@@ -79,16 +78,16 @@ The Wizard supports the creation of [file name rules](select-types-of-rules-to-c
 | **Product name** | Specifies the name of the product with which the binary ships. |
 | **Internal name** | Specifies the internal name of the binary. |
 
-![Custom file attributes rule.](../images/wdac-wizard-custom-file-attribute-rule.png)
+:::image type="content" alt-text="Custom file attributes rule." source="../images/appcontrol-wizard-custom-file-attribute-rule.png":::
 
 ### File Hash Rules
 
 Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause extra administrative overhead to maintain the current product versions' hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard uses file hash as the fallback in case a file rule can't be created using the specified file rule level.
 
 #### Deleting Signing Rules
-  
+
 The table on the left of the page documents the allow and deny rules in the template, and any custom rules you create. Rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. You're again prompted for another confirmation. Select `Yes` to remove the rule from the policy and the rules table.
 
 ## Up next
 
-- [Editing a Windows Defender Application Control (WDAC) policy using the Wizard](wdac-wizard-editing-policy.md)
+- [Editing an App Control for Business policy using the Wizard](appcontrol-wizard-editing-policy.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-editing-policy.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-editing-policy.md
new file mode 100644
index 0000000000..8818dc5ae7
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-editing-policy.md
@@ -0,0 +1,56 @@
+---
+title: Editing App Control for Business Policies with the Wizard
+description: Editing existing base and supplemental policies with the Microsoft App Control Wizard.
+ms.localizationpriority: medium
+ms.topic: conceptual
+ms.date: 09/11/2024
+---
+
+# Editing existing base and supplemental App Control policies with the Wizard
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+The App Control for Business Wizard makes editing and viewing App Control policies easier than the PowerShell cmdlets or manually. The Wizard currently supports the following editing capabilities:
+
+- Configuring policy rules
+- Adding new allow or block file rules to existing policies
+- Removing allow or block file rules on existing policies
+
+## Configuring Policy Rules
+
+The `Policy Rules` page loads with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button reveals the advanced policy rule options panel. This grouping of rules contains other policy rule options that are less common to most users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#adding-file-rules).
+
+![Configuring the policy rules.](../images/appcontrol-wizard-edit-policy-rules.png)
+
+A description of the policy rule is shown at the bottom of the page when the cursor is placed over the rule title. For a complete list of the policy rules and their capabilities, see the [App Control for Business policy rules table](select-types-of-rules-to-create.md#app-control-for-business-policy-rules).
+
+## Adding File Rules
+
+The App Control for Business Wizard allows users to add rules to their existing policy seamlessly. Previously, this rule-adding task would have involved creating a new policy with the new rules and merging it with the existing policy.
+
+Selecting the `+ Custom Rules` button opens the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](appcontrol-wizard-create-base-policy.md#creating-custom-file-rules).
+
+## Removing File Rules
+
+The App Control Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule, or a hash rule, select the rule in the `Policy Signing Rules List` table on the left-hand side of the page. Selecting the rule highlights the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard prompts for user confirmation before removing the file rule. Once removed, the rule no longer appears in the policy or the table.
+
+:::image type="content" alt-text="Removing file rule from policy during edit." source="../images/appcontrol-wizard-edit-remove-file-rule.png":::
+
+> [!NOTE]
+> Removing a publisher rule will also remove the associated File Attribute rules. For instance, in the xml block below, removing ID_SIGNER_CONTOSO_PUBLISHER would also remove the rules ID_FILEATTRIB_LOB_APP_1 and ID_FILEATTRIB_LOB_APP_2.
+
+```xml
+<Signer ID="ID_SIGNER_CONTOSO_PUBLISHER" Name="Contoso LOB Publisher CA">
+  <CertRoot Type="TBS" Value="0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF" />
+  <CertPublisher Value="Contoso IT Dept App Publisher" />
+  <FileAttribRef RuleID="ID_FILEATTRIB_LOB_APP_1" />
+  <FileAttribRef RuleID="ID_FILEATTRIB_LOB_APP_2" />
+```
+
+### Policy Creation
+
+Once the policy is created, the new policy is written to the same path as the in-edit policy. The new policy file name has the policy version appended to the end of the file name. For instance, if the in-edit policy is saved at `MyDocuments\BasePolicy.xml`, after edit, the new policy will be saved at `MyDocuments\BasePolicy_v10.0.0.1.xml`.
+
+## Up next
+
+- [Merging App Control for Business policies using the Wizard](appcontrol-wizard-merging-policies.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-merging-policies.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-merging-policies.md
new file mode 100644
index 0000000000..a0c8c1e69a
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-merging-policies.md
@@ -0,0 +1,20 @@
+---
+title: App Control for Business Wizard Policy Merging Operation
+description: Merging multiple policies into a single App Control policy with the App Control Wizard.
+ms.localizationpriority: medium
+ms.topic: conceptual
+ms.date: 09/11/2024
+---
+
+# Merging existing policies with the App Control Wizard
+
+Beginning in Windows 10 version 1903, App Control for Business supports multiple policies. Before version 1903, however, Windows 10 could only have one App Control policy. So, users were required to merge multiple App Control policies into one. The App Control Wizard has a simple to use user interface to allow users to merge multiple App Control policies. The Wizard can support up to 15 policy files as input during the merge workflow.
+
+Select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, if accidentally added, highlight the policy row and select the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table.
+
+> [!NOTE]
+> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple App Control for Business Policies page](deploy-multiple-appcontrol-policies.md).
+
+Lastly, select a filepath save location for the final merged policy using the `Browse` button. If a minimum of two policies are selected, and the save location is specified, select the `Next` button to build the policy.
+
+:::image type="content" alt-text="Merging App Control policies into a final App Control policy." source="../images/appcontrol-wizard-merge.png":::
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-parsing-event-logs.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-parsing-event-logs.md
new file mode 100644
index 0000000000..5e2b4e4017
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard-parsing-event-logs.md
@@ -0,0 +1,115 @@
+---
+title: App Control for Business Wizard App Control Event Parsing
+description: Creating App Control policy rules from the App Control event logs and the MDE Advanced Hunting App Control events.
+ms.localizationpriority: medium
+ms.topic: conceptual
+ms.date: 09/11/2024
+---
+
+# Creating App Control Policy Rules from App Control Events in the Wizard
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+As of [version 2.2.0.0](https://webapp-wdac-wizard.azurewebsites.net/archives.html), the App Control Wizard supports creating App Control policy rules from the following event log types:
+
+1. [App Control event log events on the system](#app-control-event-viewer-log-parsing)
+2. [Exported App Control events (EVTX files) from any system](#app-control-event-log-file-parsing)
+3. [Exported App Control events from MDE Advanced Hunting](#mde-advanced-hunting-app-control-event-parsing)
+
+## App Control Event Viewer Log Parsing
+
+To create rules from the App Control event logs on the system:
+
+1. Select **Policy Editor** from the main page.
+2. Select **Convert Event Log to an App Control Policy**.
+3. Select the **Parse Event Logs** button under the **Parse Event Logs from the System Event Viewer to Policy** header.
+
+   The Wizard parses the relevant audit and block events from the CodeIntegrity (App Control) Operational and AppLocker MSI and Script logs. You see a notification when the Wizard successfully finishes reading the events.
+
+   :::image type="content" alt-text="Parse App Control and AppLocker event log system events." source="../images/appcontrol-wizard-event-log-system.png" lightbox="../images/appcontrol-wizard-event-log-system.png":::
+
+4. Select the Next button to view the audit and block events and create rules.
+5. [Generate rules from the events](#creating-policy-rules-from-the-events).
+
+## App Control Event Log File Parsing
+
+To create rules from the App Control `.EVTX` event logs files on the system:
+
+1. Select **Policy Editor** from the main page.
+2. Select **Convert Event Log to an App Control Policy**.
+3. Select the **Parse Log File(s)** button under the **Parse Event Log evtx Files to Policy** header.
+4. Select the App Control CodeIntegrity Event log EVTX file(s) from the disk to parse.
+
+   The Wizard parses the relevant audit and block events from the selected log files. You see a notification when the Wizard successfully finishes reading the events.
+
+   :::image type="content" alt-text="Parse evtx file App Control events" source="../images/appcontrol-wizard-event-log-files.png" lightbox="../images/appcontrol-wizard-event-log-files.png":::
+
+5. Select the Next button to view the audit and block events and create rules.
+6. [Generate rules from the events](#creating-policy-rules-from-the-events).
+
+## MDE Advanced Hunting App Control Event Parsing
+
+To create rules from the App Control events in [MDE Advanced Hunting](../operations/querying-application-control-events-centrally-using-advanced-hunting.md):
+
+1. Navigate to the Advanced Hunting section within the MDE console and query the App Control events. **The Wizard requires the following fields** in the Advanced Hunting csv file export:
+
+   ```kusto
+   | project-keep Timestamp, DeviceId, DeviceName, ActionType, FileName, FolderPath, SHA1, SHA256, IssuerName, IssuerTBSHash, PublisherName, PublisherTBSHash, AuthenticodeHash, PolicyId, PolicyName
+   ```
+
+   The following Advanced Hunting query is recommended:
+
+   ```kusto
+   DeviceEvents
+   // Take only App Control events
+   | where ActionType startswith 'AppControlCodeIntegrity'
+   // SigningInfo Fields
+   | extend IssuerName = parsejson(AdditionalFields).IssuerName
+   | extend IssuerTBSHash = parsejson(AdditionalFields).IssuerTBSHash
+   | extend PublisherName = parsejson(AdditionalFields).PublisherName
+   | extend PublisherTBSHash = parsejson(AdditionalFields).PublisherTBSHash
+   // Audit/Block Fields
+   | extend AuthenticodeHash = parsejson(AdditionalFields).AuthenticodeHash
+   | extend PolicyId = parsejson(AdditionalFields).PolicyID
+   | extend PolicyName = parsejson(AdditionalFields).PolicyName
+   // Keep only required fields for the App Control Wizard
+   | project-keep Timestamp,DeviceId,DeviceName,ActionType,FileName,FolderPath,SHA1,SHA256,IssuerName,IssuerTBSHash,PublisherName,PublisherTBSHash,AuthenticodeHash,PolicyId,PolicyName
+   ```
+
+2. Export the App Control event results by selecting the **Export** button in the results view.
+
+   :::image type="content" alt-text="Export the MDE Advanced Hunting results to CSV" source="../images/appcontrol-wizard-event-log-mde-ah-export.png" lightbox="../images/appcontrol-wizard-event-log-mde-ah-export.png":::
+
+3. Select **Policy Editor** from the main page.
+4. Select **Convert Event Log to an App Control Policy**.
+5. Select the **Parse Log File(s)** button under the "Parse MDE Advanced Hunting Events to Policy" header.
+6. Select the App Control MDE Advanced Hunting export CSV files from the disk to parse.
+
+   The Wizard will parse the relevant audit and block events from the selected Advanced Hunting log files. You see a notification when the Wizard successfully finishes reading the events.
+
+   :::image type="content" alt-text="Parse the Advanced Hunting CSV App Control event files." source="../images/appcontrol-wizard-event-log-mde-ah-parsing.png" lightbox="../images/appcontrol-wizard-event-log-mde-ah-parsing.png":::
+
+7. Select the Next button to view the audit and block events and create rules.
+8. [Generate rules from the events](#creating-policy-rules-from-the-events).
+
+## Creating Policy Rules from the Events
+
+On the "Configure Event Log Rules" page, the unique App Control log events are shown in the table. Event Ids, filenames, product names, the policy name that audited or blocked the file, and the file publisher are all shown in the table. The table can be sorted alphabetically by clicking on any of the headers.
+
+To create a rule and add it to the App Control policy:
+
+1. Select an audit or block event in the table by selecting the row of interest.
+2. Select a rule type from the dropdown. The Wizard supports creating Publisher, Path, File Attribute, Packaged App and Hash rules.
+3. Select the attributes and fields that should be added to the policy rules using the checkboxes provided for the rule type.
+4. Select the **Add Allow Rule** button to add the configured rule to the policy generated by the Wizard. The "Added to policy" label is shown in the selected row confirming that the rule will be generated.
+
+   :::image type="content" alt-text="Adding a publisher rule to the App Control policy" source="../images/appcontrol-wizard-event-rule-creation.png" lightbox="../images/appcontrol-wizard-event-rule-creation.png":::
+
+5. Select the **Next** button to output the policy. Once generated, the event log policy should be merged with your base or supplemental policies.
+
+> [!WARNING]
+> It is not recommended to deploy the event log policy on its own, as it likely lacks rules to authorize Windows and may cause blue screens.
+
+## Up next
+
+- [Merging App Control for Business policies using the Wizard](appcontrol-wizard-merging-policies.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard.md b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard.md
new file mode 100644
index 0000000000..5fab393481
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/appcontrol-wizard.md
@@ -0,0 +1,35 @@
+---
+title: App Control for Business Wizard
+description: The App Control for Business policy wizard tool allows you to create, edit, and merge App Control policies in a simple to use Windows application.
+ms.localizationpriority: medium
+ms.topic: conceptual
+ms.date: 09/11/2024
+---
+
+# App Control for Business Wizard
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+The App Control for Business policy wizard is an open-source Windows desktop application written in C# and bundled as an MSIX package. It was built to provide security architects with security, and system administrators with a more user-friendly means to create, edit, and merge App Control policies. This tool uses the [ConfigCI PowerShell cmdlets](/powershell/module/configci) in the backend so the output policy of the tool and PowerShell cmdlets is identical.
+
+## Downloading the application
+
+Download the tool from the official [App Control for Business Policy Wizard website](https://webapp-wdac-wizard.azurewebsites.net/) as an MSIX packaged application. The tool's source code is available as part of Microsoft's Open Source Software offerings on GitHub at the [App Control for Business Policy Wizard repository](https://github.com/MicrosoftDocs/WDAC-Toolkit).
+
+### Supported clients
+
+As the tool uses the cmdlets in the background, it's functional on clients only where the cmdlets are supported. For more information, see [App Control feature availability](../feature-availability.md). Specifically, the tool verifies that the client meets one of the following requirements:
+
+- Windows 10, version 1909 or later
+- For pre-1909 builds, the Enterprise SKU of Windows is installed
+
+If neither requirement is satisfied, it throws an error as the cmdlets aren't available.
+
+## Resources to learn more
+
+| Article | Description |
+| - | - |
+| [Creating a new base policy](appcontrol-wizard-create-base-policy.md) | This article describes how to create a new base policy using one of the supplied policy templates. |
+| [Creating a new supplemental policy](appcontrol-wizard-create-supplemental-policy.md) | This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. |
+| [Editing a base or supplemental policy](appcontrol-wizard-editing-policy.md) | This article demonstrates how to modify an existing policy and the tool's editing capabilities. |
+| [Merging policies](appcontrol-wizard-merging-policies.md) | This article describes how to merge policies into a single App Control policy. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/applications-that-can-bypass-wdac.md b/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md
similarity index 98%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/applications-that-can-bypass-wdac.md
rename to windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md
index 13ff7f41f2..23d40c8440 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/applications-that-can-bypass-wdac.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/applications-that-can-bypass-appcontrol.md
@@ -1,19 +1,18 @@
 ---
-title: Applications that can bypass WDAC and how to block them
+title: Applications that can bypass App Control and how to block them
 description: View a list of recommended block rules, based on knowledge shared between Microsoft and the wider security community.
 ms.localizationpriority: medium
-ms.date: 06/14/2023
+ms.date: 09/11/2024
 ms.topic: reference
 ---
 
-# Applications that can bypass WDAC and how to block them
+# Applications that can bypass App Control and how to block them
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [WDAC feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-Members of the security community<sup>*</sup> continuously collaborate with Microsoft to help protect customers. With the help of their valuable reports, Microsoft has identified a list of valid applications that an attacker could also potentially use to bypass WDAC.
+Members of the security community<sup>*</sup> continuously collaborate with Microsoft to help protect customers. With the help of their valuable reports, Microsoft has identified a list of valid applications that an attacker could also potentially use to bypass App Control.
 
-Unless your use scenarios explicitly require them, Microsoft recommends that you block the following applications. An attacker can use these applications or files to circumvent application allow policies, including WDAC:
+Unless your use scenarios explicitly require them, Microsoft recommends that you block the following applications. An attacker can use these applications or files to circumvent application allow policies, including App Control:
 
 - addinprocess.exe
 - addinprocess32.exe
@@ -88,9 +87,9 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you
 > [!NOTE]
 > This application list will be updated with the latest vendor information as application vulnerabilities are resolved and new issues are discovered.
 
-Certain software applications may allow other code to run by design. Unless these applications are business critical, you should block them in your WDAC policy. In addition, when an application version is upgraded to fix a security vulnerability or potential WDAC bypass, add *deny* rules to your application control policies for that application's previous, less secure versions.
+Certain software applications may allow other code to run by design. Unless these applications are business critical, you should block them in your App Control policy. In addition, when an application version is upgraded to fix a security vulnerability or potential App Control bypass, add *deny* rules to your App Control policies for that application's previous, less secure versions.
 
-Microsoft recommends that you install the latest security updates. For example, updates help resolve several issues in PowerShell modules that allowed an attacker to bypass WDAC. These modules can be blocked by their corresponding hashes.
+Microsoft recommends that you install the latest security updates. For example, updates help resolve several issues in PowerShell modules that allowed an attacker to bypass App Control. These modules can be blocked by their corresponding hashes.
 
 As of October 2017, system.management.automation.dll is updated to revoke earlier versions by hash values, instead of version rules.
 
@@ -100,9 +99,9 @@ If you wish to use this blocklist policy on Windows Server 2016, locate the deny
 - msxml6.dll
 - jscript9.dll
 
-The blocklist policy that follows includes "Allow all" rules for both kernel and user mode that make it safe to deploy as a standalone WDAC policy. On Windows versions 1903 and above, Microsoft recommends converting this policy to multiple policy format using the *Set-CiPolicyIdInfo* cmdlet with the *-ResetPolicyId* switch. Then, you can deploy it as a Base policy side-by-side with any other policies in your environment. To instead add these rules to an existing Base policy, you can merge the policy that follows using the *Merge-CIPolicy* cmdlet. If merging into an existing policy that includes an explicit allowlist, you should first remove the two "Allow all" rules and their corresponding FileRuleRefs from the blocklist policy.
+The blocklist policy that follows includes "Allow all" rules for both kernel and user mode that make it safe to deploy as a standalone App Control policy. On Windows versions 1903 and above, Microsoft recommends converting this policy to multiple policy format using the *Set-CiPolicyIdInfo* cmdlet with the *-ResetPolicyId* switch. Then, you can deploy it as a Base policy side-by-side with any other policies in your environment. To instead add these rules to an existing Base policy, you can merge the policy that follows using the *Merge-CIPolicy* cmdlet. If merging into an existing policy that includes an explicit allowlist, you should first remove the two "Allow all" rules and their corresponding FileRuleRefs from the blocklist policy.
 
-**WDAC policy XML**:
+**App Control policy XML**:
 
 ```xml
 <?xml version="1.0" encoding="utf-8"?>
@@ -1531,4 +1530,4 @@ The blocklist policy that follows includes "Allow all" rules for both kernel and
 
 ## More information
 
-- [Merge WDAC policies](../deployment/merge-wdac-policies.md)
+- [Merge App Control policies](../deployment/merge-appcontrol-policies.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/common-appcontrol-use-cases.md b/windows/security/application-security/application-control/app-control-for-business/design/common-appcontrol-use-cases.md
new file mode 100644
index 0000000000..4ba40200b3
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/common-appcontrol-use-cases.md
@@ -0,0 +1,36 @@
+---
+title: Policy creation for common App Control usage scenarios
+description: Develop a plan for deploying App Control for Business in your organization based on these common scenarios.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: conceptual
+---
+
+# App Control for Business deployment in different scenarios: types of devices
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+Typically, deployment of App Control for Business happens best in phases, rather than being a feature that you simply "turn on." The choice and sequence of phases depends on the way various computers and other devices are used in your organization, and to what degree IT manages those devices. The following table can help you begin to develop a plan for deploying App Control in your organization. It's common for organizations to have device use cases across each of the categories described.
+
+## Types of devices
+
+|  Type of device                 | How App Control relates to this type of device  |
+|------------------------------------|------------------------------------------------------|
+| **Lightly managed devices**: Company-owned, but users are free to install software.<br>Devices are required to run organization's antivirus solution and client management tools. | App Control for Business can be used to help protect the kernel, and to monitor (audit) for problem applications rather than limiting the applications that can be run. |
+| **Fully managed devices**: Allowed software is restricted by IT department.<br>Users can request for more software, or install from a list of applications provided by IT department.<br>Examples: locked-down, company-owned desktops and laptops. | An initial baseline App Control for Business policy can be established and enforced. Whenever the IT department approves more applications, it updates the App Control policy and (for unsigned LOB applications) the catalog. |
+| **Fixed-workload devices**: Perform same tasks every day.<br>Lists of approved applications rarely change.<br>Examples: kiosks, point-of-sale systems, call center computers. | App Control for Business can be deployed fully, and deployment and ongoing administration are relatively straightforward.<br>After App Control for Business deployment, only approved applications can run. This rule is because of protections offered by App Control. |
+| **Bring Your Own Device**: Employees are allowed to bring their own devices, and also use those devices away from work. | In most cases, App Control for Business doesn't apply. Instead, you can explore other hardening and security features with MDM-based conditional access solutions, such as Microsoft Intune. However, you may choose to deploy an audit-mode policy to these devices or employ a blocklist only policy to prevent specific apps or binaries that are considered malicious or vulnerable by your organization. |
+
+## An introduction to Lamna Healthcare Company
+
+In the next set of articles, we'll explore each of the above scenarios using a fictional organization called Lamna Healthcare Company.
+
+Lamna Healthcare Company (Lamna) is a large healthcare provider operating in the United States. Lamna employs thousands of people, from doctors and nurses to accountants, in-house lawyers, and IT technicians. Their device use cases are varied and include single-user workstations for their professional staff, shared kiosks used by doctors and nurses to access patient records, dedicated medical devices such as MRI scanners, and many others. Additionally, Lamna has a relaxed, bring-your-own-device policy for many of their professional staff.
+
+Lamna uses [Microsoft Intune](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager) in hybrid mode with both Configuration Manager and Intune. Although they use Microsoft Intune to deploy many applications, Lamna has always had relaxed application usage practices: individual teams and employees have been able to install and use any applications they deem necessary for their role on their own workstations. Lamna also recently started to use [Microsoft Defender for Endpoint](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp) for better endpoint detection and response.
+
+Recently, Lamna experienced a ransomware event that required an expensive recovery process and may have included data exfiltration by the unknown attacker. Part of the attack included installing and running malicious binaries that evaded detection by Lamna's antivirus solution but would have been blocked by an App Control policy. In response, Lamna's executive board has authorized many new security IT responses, including tightening policies for application use and introducing App Control.
+
+## Up next
+
+- [Create an App Control for Business policy for lightly managed devices](create-appcontrol-policy-for-lightly-managed-devices.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/configure-authorized-apps-deployed-with-a-managed-installer.md b/windows/security/application-security/application-control/app-control-for-business/design/configure-authorized-apps-deployed-with-a-managed-installer.md
similarity index 80%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/configure-authorized-apps-deployed-with-a-managed-installer.md
rename to windows/security/application-security/application-control/app-control-for-business/design/configure-authorized-apps-deployed-with-a-managed-installer.md
index ff3b5d8fa8..4e7dac4f2e 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/configure-authorized-apps-deployed-with-a-managed-installer.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/configure-authorized-apps-deployed-with-a-managed-installer.md
@@ -1,43 +1,42 @@
 ---
-title: Allow apps deployed with a WDAC managed installer
+title: Allow apps deployed with an App Control managed installer
 description: Explains how to configure a custom Managed Installer.
 ms.localizationpriority: medium
-ms.date: 02/02/2023
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
-# Automatically allow apps deployed by a managed installer with Windows Defender Application Control
+# Automatically allow apps deployed by a managed installer with App Control for Business
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-Windows Defender Application Control (WDAC) includes an option called **managed installer** that helps balance security and manageability when enforcing application control policies. This option lets you automatically allow applications installed by a designated software distribution solution, such as Microsoft Configuration Manager (MEMCM) or Microsoft Intune.
+App Control for Business includes an option called **managed installer** that helps balance security and manageability when enforcing App Control policies. This option lets you automatically allow applications installed by a designated software distribution solution, such as Microsoft Configuration Manager (MEMCM) or Microsoft Intune.
 
 ## How does a managed installer work?
 
 Managed installer uses a special rule collection in **AppLocker** to designate binaries that are trusted by your organization as an authorized source for application installation. When one of these trusted binaries runs, Windows monitors the binary's process (and any child processes it launches) and watches for files being written to disk. As files are written, they're tagged as originating from a managed installer.
 
-You can then configure WDAC to trust files that are installed by a managed installer by adding the "Enabled:Managed Installer" option to your WDAC policy. When that option is set, WDAC will check for managed installer origin information when determining whether or not to allow a binary to run. As long as there are no deny rules for the binary, WDAC will allow it to run based purely on its managed installer origin.
+You can then configure App Control to trust files that are installed by a managed installer by adding the "Enabled:Managed Installer" option to your App Control policy. When that option is set, App Control will check for managed installer origin information when determining whether or not to allow a binary to run. As long as there are no deny rules for the binary, App Control will allow it to run based purely on its managed installer origin.
 
 ## Security considerations with managed installer
 
 Since managed installer is a heuristic-based mechanism, it doesn't provide the same security guarantees as explicit allow or deny rules do. Managed installer is best suited where users operate as standard user, and where all software is deployed and installed by a software distribution solution such as MEMCM.
 
-Users with administrator privileges, or malware running as an administrator user on the system, may be able to circumvent the intent of your WDAC policies when the managed installer option is allowed.
+Users with administrator privileges, or malware running as an administrator user on the system, may be able to circumvent the intent of your App Control policies when the managed installer option is allowed.
 
-If a managed installer process runs in the context of a user with standard privileges, then it's possible that standard users or malware running as standard user may be able to circumvent the intent of your WDAC policies.
+If a managed installer process runs in the context of a user with standard privileges, then it's possible that standard users or malware running as standard user may be able to circumvent the intent of your App Control policies.
 
 Some application installers may automatically run the application at the end of the installation process. If the application runs automatically, and the installer was run by a managed installer, then the managed installer's heuristic tracking and authorization will extend to all files that are created during the first run of the application. This extension could result in unintentional authorization of an executable. To avoid that, ensure that the method of application deployment that is used as a managed installer limits running applications as part of installation.
 
 ## Known limitations with managed installer
 
-- Application control, based on managed installer, doesn't support applications that self-update. If an application that was deployed by a managed installer later updates itself, the updated application files won't include the origin information from the managed installer, and they might not be able to run. When you rely on managed installers, you must deploy and install all application updates by using a managed installer, or include rules to authorize the app in the WDAC policy. In some cases, it may be possible to also designate an application binary that performs self-updates as a managed installer. Proper review for functionality and security should be performed for the application before using this method.
+- App Control, based on managed installer, doesn't support applications that self-update. If an application that was deployed by a managed installer later updates itself, the updated application files won't include the origin information from the managed installer, and they might not be able to run. When you rely on managed installers, you must deploy and install all application updates by using a managed installer, or include rules to authorize the app in the App Control policy. In some cases, it may be possible to also designate an application binary that performs self-updates as a managed installer. Proper review for functionality and security should be performed for the application before using this method.
 
 - Some applications or installers may extract, download, or generate binaries and immediately attempt to run them. Files run by such a process may not be allowed by the managed installer heuristic. In some cases, it may be possible to also designate an application binary that performs such an operation as a managed installer. Proper review for functionality and security should be performed for the application before using this method.
 
-- The managed installer heuristic doesn't authorize kernel drivers. The WDAC policy must have rules that allow the necessary drivers to run.
+- The managed installer heuristic doesn't authorize kernel drivers. The App Control policy must have rules that allow the necessary drivers to run.
 
-## Configure managed installer tracking with AppLocker and WDAC
+## Configure managed installer tracking with AppLocker and App Control
 
 To turn on managed installer tracking, you must:
 
@@ -48,7 +47,7 @@ To turn on managed installer tracking, you must:
 > The managed installer AppLocker policy below is designed to be safely merged with any pre-existing AppLocker policies and won't change the behavior of those policies. However, if applied on a device that doesn't currently have any AppLocker policy, you will see a large increase in warning events generated in the *AppLocker - EXE and DLL* event log. If you're using an event forwarding and collection service, like LogAnalytics, you may want to adjust the configuration for that event log to only collect Error events or stop collecting events from that log altogether.
 
 > [!NOTE]
-> MEMCM will automatically configure itself as a managed installer, and enable the required AppLocker components, if you deploy one of its inbox WDAC policies. If you are configuring MEMCM as a managed installer using any other method, additional setup is required. Use the [**ManagedInstaller** cmdline switch in your ccmsetup.exe setup](/mem/configmgr/core/clients/deploy/about-client-installation-properties#managedinstaller). Or you can deploy one of the MEMCM inbox audit mode policies alongside your custom policy.
+> MEMCM will automatically configure itself as a managed installer, and enable the required AppLocker components, if you deploy one of its inbox App Control policies. If you are configuring MEMCM as a managed installer using any other method, additional setup is required. Use the [**ManagedInstaller** cmdline switch in your ccmsetup.exe setup](/mem/configmgr/core/clients/deploy/about-client-installation-properties#managedinstaller). Or you can deploy one of the MEMCM inbox audit mode policies alongside your custom policy.
 
 ### Create and deploy an AppLocker policy that defines your managed installer rules and enables services enforcement for executables and DLLs
 
@@ -189,12 +188,12 @@ The AppLocker policy creation UI in GPO Editor and the AppLocker PowerShell cmdl
 > [!NOTE]
 > Managed installer tracking will start the next time a process runs that matches your managed installer rules. If an intended process is already running, you must restart it.
 
-## Enable the managed installer option in WDAC policy
+## Enable the managed installer option in App Control policy
 
-In order to enable trust for the binaries laid down by managed installers, the "Enabled: Managed Installer" option must be specified in your WDAC policy.
+In order to enable trust for the binaries laid down by managed installers, the "Enabled: Managed Installer" option must be specified in your App Control policy.
 This setting can be defined by using the [Set-RuleOption cmdlet](/powershell/module/configci/set-ruleoption) with Option 13.
 
-Below are steps to create a WDAC policy that allows Windows to boot and enables the managed installer option.
+Below are steps to create an App Control policy that allows Windows to boot and enables the managed installer option.
 
 1. Copy the DefaultWindows_Audit policy into your working folder from "C:\Windows\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_Audit.xml"
 
@@ -212,10 +211,10 @@ Below are steps to create a WDAC policy that allows Windows to boot and enables
     Set-RuleOption -FilePath <XML filepath> -Option 13
     ```
 
-4. Deploy your WDAC policy. See [Deploying Windows Defender Application Control (WDAC) policies](../deployment/wdac-deployment-guide.md).
+4. Deploy your App Control policy. See [Deploying App Control for Business policies](../deployment/appcontrol-deployment-guide.md).
 
 > [!NOTE]
-> Your WDAC policy must include rules for all system/boot components, kernel drivers, and any other authorized applications that can't be deployed through a managed installer.
+> Your App Control policy must include rules for all system/boot components, kernel drivers, and any other authorized applications that can't be deployed through a managed installer.
 
 ## Remove Managed Installer feature
 
@@ -223,4 +222,4 @@ To remove the Managed Installer feature from the device, you'll need to remove t
 
 ## Related articles
 
-- [Managed installer and ISG technical reference and troubleshooting guide](../operations/configure-wdac-managed-installer.md)
+- [Managed installer and ISG technical reference and troubleshooting guide](../operations/configure-appcontrol-managed-installer.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-deny-policy.md b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-deny-policy.md
similarity index 70%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-deny-policy.md
rename to windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-deny-policy.md
index 3e76a698d2..0e52f30f3d 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-deny-policy.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-deny-policy.md
@@ -1,18 +1,18 @@
 ---
-title: Create WDAC Deny Policy
-description: Explains how to create WDAC deny policies
+title: Create App Control Deny Policy
+description: Explains how to create App Control deny policies
 ms.localizationpriority: medium
-ms.date: 12/31/2017
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
-# Guidance on Creating WDAC Deny Policies
+# Guidance on Creating App Control Deny Policies
 
-With Windows Defender Application Control (WDAC), you can create policies to explicitly deny specific drivers and applications. To create effective Windows Defender Application Control deny policies, you should [understand the order of rule precedence](/windows/security/threat-protection/windows-defender-application-control/operations/known-issues#file-rule-precedence-order) WDAC applies as it evaluates files against the active policies.
+With App Control for Business, you can create policies to explicitly deny specific drivers and applications. To create effective App Control for Business deny policies, you should [understand the order of rule precedence](../operations/known-issues.md#file-rule-precedence-order) App Control applies as it evaluates files against the active policies.
 
 ## Standalone Deny policy
 
-When creating a policy that consists solely of deny rules, you must include "Allow All" rules in both the kernel and user mode sections of the policy in addition to your explicit deny rules. The "Allow All" rules ensure that anything not explicitly denied by your policy is allowed to run. If you fail to add "Allow All" rules to a deny-only policy, then you risk blocking everything. This outcome happens because some code is *explicitly* denied and all other code is *implicitly* denied, because there are no rules to authorize it. We recommend using the [AllowAll policy template](/windows/security/threat-protection/windows-defender-application-control/example-wdac-base-policies) when creating your standalone deny policies.
+When creating a policy that consists solely of deny rules, you must include "Allow All" rules in both the kernel and user mode sections of the policy in addition to your explicit deny rules. The "Allow All" rules ensure that anything not explicitly denied by your policy is allowed to run. If you fail to add "Allow All" rules to a deny-only policy, then you risk blocking everything. This outcome happens because some code is *explicitly* denied and all other code is *implicitly* denied, because there are no rules to authorize it. We recommend using the [AllowAll policy template](example-appcontrol-base-policies.md) when creating your standalone deny policies.
 
 ```xml
 <FileRules>
@@ -37,7 +37,7 @@ When creating a policy that consists solely of deny rules, you must include "All
 </SigningScenarios>
 ```
 
-Adding the preceding "Allow All" rules don't affect any other WDAC policies you've deployed that apply an explicit allowlist. To illustrate, consider the following example:
+Adding the preceding "Allow All" rules don't affect any other App Control policies you've deployed that apply an explicit allowlist. To illustrate, consider the following example:
 
 Policy1 is an allowlist for Windows- and Microsoft-signed applications.
 
@@ -50,7 +50,7 @@ Policy2 is our new deny policy, which blocks MaliciousApp.exe and also the Windo
 
 ## Mixed Allow and Deny policy considerations
 
-If the set of deny rules is to be added into an existing policy that includes explicit allow rules, then don't include the preceding "Allow All" rules. Instead, the deny rules should be merged with the existing WDAC policy via the [WDAC Wizard](wdac-wizard-merging-policies.md) or using the following PowerShell command:
+If the set of deny rules is to be added into an existing policy that includes explicit allow rules, then don't include the preceding "Allow All" rules. Instead, the deny rules should be merged with the existing App Control policy via the [App Control Wizard](appcontrol-wizard-merging-policies.md) or using the following PowerShell command:
 
 ```PowerShell
 $DenyPolicy = <path_to_deny_policy>
@@ -60,13 +60,13 @@ Merge-CIPolicy -PolicyPaths $ DenyPolicy, $ExistingPolicy -OutputFilePath $Exist
 
 ## Best Practices
 
-1. **Test first in Audit mode** - as with all new policies, we recommend rolling out your new deny policy in Audit Mode and monitoring the [3076 audit block events](../operations/event-id-explanations.md) to ensure only the applications you intended to block are blocked. More information on monitoring block events via the Event Viewer logs and Advanced Hunting: [Managing and troubleshooting Windows Defender Application Control policies](../operations/wdac-operational-guide.md)
+1. **Test first in Audit mode** - as with all new policies, we recommend rolling out your new deny policy in Audit Mode and monitoring the [3076 audit block events](../operations/event-id-explanations.md) to ensure only the applications you intended to block are blocked. More information on monitoring block events via the Event Viewer logs and Advanced Hunting: [Managing and troubleshooting App Control for Business policies](../operations/appcontrol-operational-guide.md)
 
-2. **Recommended Deny Rules Types** - signer and file attribute rules are recommended from a security, manageability, and performance perspective. Hash rules should only be used if necessary. Since the hash of a file changes with any change to the file, it's hard to keep up with a hash-based block policy where the attacker can trivially update the file. While WDAC has optimized parsing of hash rules, some devices may see performance impacts at runtime evaluation if policies have tens of thousands or more hash rules.
+2. **Recommended Deny Rules Types** - signer and file attribute rules are recommended from a security, manageability, and performance perspective. Hash rules should only be used if necessary. Since the hash of a file changes with any change to the file, it's hard to keep up with a hash-based block policy where the attacker can trivially update the file. While App Control has optimized parsing of hash rules, some devices may see performance impacts at runtime evaluation if policies have tens of thousands or more hash rules.
 
 ## Creating a Deny policy tutorial
 
-Deny rules and policies can be created using the PowerShell cmdlets or the [WDAC Wizard](https://webapp-wdac-wizard.azurewebsites.net/). We recommend creating signer rules (PCACertificate, Publisher, and FilePublisher) wherever possible. In the cases of unsigned binaries, rules must be created on attributes of the file, such as the original filename, or the hash.
+Deny rules and policies can be created using the PowerShell cmdlets or the [App Control Wizard](https://webapp-wdac-wizard.azurewebsites.net/). We recommend creating signer rules (PCACertificate, Publisher, and FilePublisher) wherever possible. In the cases of unsigned binaries, rules must be created on attributes of the file, such as the original filename, or the hash.
 
 ### Software Publisher-based deny rule
 
@@ -99,4 +99,4 @@ Set-CiPolicyIdInfo -FilePath $DenyPolicy -PolicyName "My Deny Policy" -ResetPoli
 
 ### Deploy the Deny Policy
 
-You should now have a deny policy prepared to deploy. See the [WDAC Deployment Guide](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide) to deploy your policy to your managed endpoints.
+You should now have a deny policy prepared to deploy. See the [App Control Deployment Guide](../deployment/appcontrol-deployment-guide.md) to deploy your policy to your managed endpoints.
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-fully-managed-devices.md b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-fully-managed-devices.md
new file mode 100644
index 0000000000..1563a69a95
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-fully-managed-devices.md
@@ -0,0 +1,155 @@
+---
+title: Create an App Control policy for fully managed devices
+description: App Control for Business restricts which applications users are allowed to run and the code that runs in system core.
+ms.topic: conceptual
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+---
+
+# Create an App Control policy for fully managed devices
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+This section outlines the process to create an App Control for Business policy for **fully managed devices** within an organization. The key difference between this scenario and [lightly managed devices](create-appcontrol-policy-for-lightly-managed-devices.md) is that all software deployed to a fully managed device is managed by IT and users of the device can't install arbitrary apps. Ideally, all apps are deployed using a software distribution solution, such as Microsoft Intune. Additionally, users on fully managed devices should ideally run as standard user and only authorized IT pros have administrative access.
+
+> [!NOTE]
+> Some of the App Control for Business options described in this topic are only available on Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's App Control policies, consider whether your managed clients can use all or some of these features and assess the impact for any features that may be unavailable on your clients. You may need to adapt this guidance to meet your specific organization's needs.
+
+As described in [common App Control for Business deployment scenarios](common-appcontrol-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of App Control to prevent unwanted or unauthorized applications from running on their managed devices.
+
+**Alice Pena** is the IT team lead tasked with the rollout of App Control.
+
+Alice previously created a policy for the organization's lightly managed devices. Some devices, however, are more tightly managed and can benefit from a more constrained policy. In particular, certain job functions such as administrative staff and firstline workers aren't granted administrator level access to their devices. Similarly, shared kiosks are configured only with a managed set of apps and all users of the device except IT run as standard user. On these devices, all apps are deployed and installed by IT.
+
+## Define the "circle-of-trust" for fully managed devices
+
+Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully managed devices:
+
+- All clients are running Windows 10 version 1903 or above or Windows 11;
+- All clients are managed by Configuration Manager or with Intune;
+- Most, but not all, apps are deployed using Configuration Manager;
+- Sometimes, IT staff install apps directly to these devices without using Configuration Manager;
+- All users except IT are standard users on these devices.
+
+Alice's team develops a simple console application, called *LamnaITInstaller.exe*, which will become the authorized way for IT staff to install apps directly to devices. *LamnaITInstaller.exe* allows the IT pro to launch another process, such as an app installer. Alice will configure *LamnaITInstaller.exe* as an extra managed installer for App Control and allows her to remove the need for filepath rules.
+
+Based on the above, Alice defines the pseudo-rules for the policy:
+
+1. **"Windows works"** rules that authorize:
+   - Windows
+   - WHQL (third-party kernel drivers)
+   - Windows Store signed apps
+
+2. **"ConfigMgr works"** rules that include signer and hash rules for Configuration Manager components to properly function.
+3. **Allow Managed Installer** (Configuration Manager and *LamnaITInstaller.exe* configured as a managed installer)
+
+The critical differences between this set of pseudo-rules and those pseudo-rules defined for Lamna's [lightly managed devices](create-appcontrol-policy-for-lightly-managed-devices.md#define-the-circle-of-trust-for-lightly-managed-devices) are:
+
+- Removal of the Intelligent Security Graph (ISG) option; and
+- Removal of filepath rules.
+
+## Create a custom base policy using an example App Control base policy
+
+Having defined the "circle-of-trust", Alice is ready to generate the initial policy for Lamna's fully managed devices and decides to use Configuration Manager to create the initial base policy and then customize it to meet Lamna's needs.
+
+Alice follows these steps to complete this task:
+
+> [!NOTE]
+> If you do not use Configuration Manager or prefer to use a different [example App Control for Business base policy](example-appcontrol-base-policies.md) for your own policy, skip to step 2 and substitute the Configuration Manager policy path with your preferred example base policy.
+
+1. [Use Configuration Manager to create and deploy an audit policy](/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager) to a client device running Windows 10 version 1903 or above, or Windows 11.
+
+2. On the client device, run the following commands in an elevated Windows PowerShell session to initialize variables:
+
+   ```powershell
+   $PolicyPath=$env:userprofile+"\Desktop\"
+   $PolicyName= "Lamna_FullyManagedClients_Audit"
+   $LamnaPolicy=$PolicyPath+$PolicyName+".xml"
+   $ConfigMgrPolicy=$env:windir+"\CCM\DeviceGuard\MergedPolicy_Audit_ISG.xml"
+   ```
+
+3. Copy the policy created by Configuration Manager to the desktop:
+
+   ```powershell
+   cp $ConfigMgrPolicy $LamnaPolicy
+   ```
+
+4. Give the new policy a unique ID, descriptive name, and initial version number:
+
+   ```powershell
+   Set-CIPolicyIdInfo -FilePath $LamnaPolicy -PolicyName $PolicyName -ResetPolicyID
+   Set-CIPolicyVersion -FilePath $LamnaPolicy -Version "1.0.0.0"
+   ```
+
+5. Modify the copied policy to set policy rules:
+
+   ```powershell
+   Set-RuleOption -FilePath $LamnaPolicy -Option 3 # Audit Mode
+   Set-RuleOption -FilePath $LamnaPolicy -Option 6 # Unsigned Policy
+   Set-RuleOption -FilePath $LamnaPolicy -Option 9 # Advanced Boot Menu
+   Set-RuleOption -FilePath $LamnaPolicy -Option 12 # Enforce Store Apps
+   Set-RuleOption -FilePath $LamnaPolicy -Option 13 # Managed Installer
+   Set-RuleOption -FilePath $LamnaPolicy -Option 16 # No Reboot
+   Set-RuleOption -FilePath $LamnaPolicy -Option 17 # Allow Supplemental
+   Set-RuleOption -FilePath $LamnaPolicy -Option 19 # Dynamic Code Security
+   ```
+
+6. If appropriate, add more signer or file rules to further customize the policy for your organization.
+
+7. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the App Control for Business policy to a binary format:
+
+   ```powershell
+   [xml]$PolicyXML = Get-Content $LamnaPolicy
+   $LamnaPolicyBin = Join-Path $PolicyPath "$($PolicyXML.SiPolicy.PolicyID).cip"
+   ConvertFrom-CIPolicy $LamnaPolicy $LamnaPolicyBin
+   ```
+
+8. Upload your base policy XML and the associated binary to a source control solution such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration).
+
+At this point, Alice now has an initial policy that is ready to deploy in audit mode to the managed clients within Lamna.
+
+## Security considerations of this fully managed policy
+
+Alice has defined a policy for Lamna's fully managed devices that makes some trade-offs between security and manageability for apps. Some of the trade-offs include:
+
+- **Users with administrative access**
+
+  Although applying to fewer users, Lamna still allows some IT staff to sign in to its fully managed devices as administrator. This privilege allows these users (or malware running with the user's privileges) to modify or remove altogether the App Control policy applied on the device. Additionally, administrators can configure any app they wish to operate as a managed installer that would allow them to gain persistent app authorization for whatever apps or binaries they wish.
+
+  Possible mitigations:
+  - Use signed App Control policies and UEFI BIOS access protection to prevent tampering of App Control policies.
+  - Create and deploy signed catalog files as part of the app deployment process in order to remove the requirement for managed installer.
+  - Use device attestation to detect the configuration state of App Control at boot time and use that information to condition access to sensitive corporate resources.
+
+- **Unsigned policies**
+
+  Unsigned policies can be replaced or removed without consequence by any process running as administrator. Unsigned base policies that also enable supplemental policies can have their "circle-of-trust" altered by any unsigned supplemental policy.
+
+  Existing mitigations applied:
+  - Limit who can elevate to administrator on the device.
+
+  Possible mitigations:
+  - Use signed App Control policies and UEFI BIOS access protection to prevent tampering of App Control policies.
+
+- **Managed installer**
+
+  See [security considerations with managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md#security-considerations-with-managed-installer)
+
+  Existing mitigations applied:
+  - Limit who can elevate to administrator on the device.
+
+  Possible mitigations:
+  - Create and deploy signed catalog files as part of the app deployment process in order to remove the requirement for managed installer.
+
+- **Supplemental policies**<br>
+
+  Supplemental policies are designed to relax the associated base policy. Additionally allowing unsigned policies allows any administrator process to expand the "circle-of-trust" defined by the base policy without restriction.
+
+  Possible mitigations:
+  - Use signed App Control policies that allow authorized signed supplemental policies only.
+  - Use a restrictive audit mode policy to audit app usage and augment vulnerability detection.
+
+## Up next
+
+- [Create an App Control for Business policy for fixed-workload devices using a reference computer](create-appcontrol-policy-using-reference-computer.md)
+- [Prepare to deploy App Control for Business policies](../deployment/appcontrol-deployment-guide.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-lightly-managed-devices.md b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-lightly-managed-devices.md
similarity index 68%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-lightly-managed-devices.md
rename to windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-lightly-managed-devices.md
index d4b6d3f256..b7c6837954 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-lightly-managed-devices.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-for-lightly-managed-devices.md
@@ -1,24 +1,23 @@
 ---
-title: Create a WDAC policy for lightly managed devices
-description: Windows Defender Application Control restricts which applications users are allowed to run and the code that runs in the system core.
+title: Create an App Control policy for lightly managed devices
+description: App Control for Business restricts which applications users are allowed to run and the code that runs in the system core.
 ms.topic: conceptual
 ms.localizationpriority: medium
-ms.date: 11/07/2022
+ms.date: 09/11/2024
 ---
 
-# Create a WDAC policy for lightly managed devices
+# Create an App Control policy for lightly managed devices
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-This section outlines the process to create a Windows Defender Application Control (WDAC) policy for **lightly managed devices** within an organization. Typically, organizations that are new to application control will be most successful if they start with a permissive policy like the one described in this article. Organizations can choose to harden the policy over time to achieve a stronger overall security posture on their WDAC-managed devices as described in later articles.
+This section outlines the process to create an App Control for Business policy for **lightly managed devices** within an organization. Typically, organizations that are new to App Control will be most successful if they start with a permissive policy like the one described in this article. Organizations can choose to harden the policy over time to achieve a stronger overall security posture on their App Control-managed devices as described in later articles.
 
 > [!NOTE]
-> Some of the Windows Defender Application Control options described in this topic are only available on Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's WDAC policies, consider whether your managed clients can use all or some of these features and assess the impact for any features that may be unavailable on your clients. You may need to adapt this guidance to meet your specific organization's needs.
+> Some of the App Control for Business options described in this topic are only available on Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's App Control policies, consider whether your managed clients can use all or some of these features and assess the impact for any features that may be unavailable on your clients. You may need to adapt this guidance to meet your specific organization's needs.
 
-As in [Windows Defender Application Control deployment in different scenarios: types of devices](common-wdac-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of application control to prevent unwanted or unauthorized applications from running on their managed devices.
+As in [App Control for Business deployment in different scenarios: types of devices](common-appcontrol-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of App Control to prevent unwanted or unauthorized applications from running on their managed devices.
 
-**Alice Pena** is the IT team lead tasked with the rollout of WDAC. Lamna currently has loose application usage policies and a culture of maximum app flexibility for users. So, Alice knows she'll need to take an incremental approach to application control and use different policies for different workloads.
+**Alice Pena** is the IT team lead tasked with the rollout of App Control. Lamna currently has loose application usage policies and a culture of maximum app flexibility for users. So, Alice knows she'll need to take an incremental approach to App Control and use different policies for different workloads.
 
 For most users and devices, Alice wants to create an initial policy that is as relaxed as possible in order to minimize user productivity impact, while still providing security value.
 
@@ -52,7 +51,7 @@ Based on the above, Alice defines the pseudo-rules for the policy:
    - C:\Program Files (x86)\*
    - %windir%\*
 
-## Create a custom base policy using an example WDAC base policy
+## Create a custom base policy using an example App Control base policy
 
 Having defined the "circle-of-trust", Alice is ready to generate the initial policy for Lamna's lightly managed devices. Alice decides to use the example `SmartAppControl.xml` to create the initial base policy and then customize it to meet Lamna's needs.
 
@@ -61,7 +60,7 @@ Alice follows these steps to complete this task:
 1. On a client device, run the following commands in an elevated Windows PowerShell session to initialize variables:
 
     > [!NOTE]
-    > If you prefer to use a different [example Windows Defender Application Control base policy](example-wdac-base-policies.md), substitute the example policy path with your preferred base policy in this step.
+    > If you prefer to use a different [example App Control for Business base policy](example-appcontrol-base-policies.md), substitute the example policy path with your preferred base policy in this step.
 
     ```powershell
     $PolicyPath = $env:userprofile+"\Desktop\"
@@ -79,7 +78,7 @@ Alice follows these steps to complete this task:
 1. Modify the policy to remove unsupported rule:
 
     > [!NOTE]
-    > `SmartAppControl.xml` is available on Windows 11 version 22H2 and later. This policy includes "Enabled:Conditional Windows Lockdown Policy" rule that is unsupported for enterprise WDAC policies and must be removed. For more information, see [WDAC and Smart App Control](../wdac.md#wdac-and-smart-app-control). If you are using an example policy other than `SmartAppControl.xml`, skip this step.
+    > `SmartAppControl.xml` is available on Windows 11 version 22H2 and later. This policy includes "Enabled:Conditional Windows Lockdown Policy" rule that is unsupported for enterprise App Control policies and must be removed. For more information, see [App Control and Smart App Control](../appcontrol.md#app-control-and-smart-app-control). If you are using an example policy other than `SmartAppControl.xml`, skip this step.
 
     ```powershell
     [xml]$xml = Get-Content $LamnaPolicy
@@ -127,7 +126,7 @@ Alice follows these steps to complete this task:
 
 1. If appropriate, add more signer or file rules to further customize the policy for your organization.
 
-1. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the Windows Defender Application Control policy to a binary format:
+1. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the App Control for Business policy to a binary format:
 
     ```powershell
     [xml]$PolicyXML = Get-Content $LamnaPolicy
@@ -145,13 +144,13 @@ In order to minimize user productivity impact, Alice has defined a policy that m
 
 - **Users with administrative access**
 
-  This trade-off is the most impactful security trade-off. It allows the device user, or malware running with the user's privileges, to modify or remove the WDAC policy on the device. Additionally, administrators can configure any app to act as a managed installer, which would allow them to gain persistent app authorization for whatever apps or binaries they wish.
+  This trade-off is the most impactful security trade-off. It allows the device user, or malware running with the user's privileges, to modify or remove the App Control policy on the device. Additionally, administrators can configure any app to act as a managed installer, which would allow them to gain persistent app authorization for whatever apps or binaries they wish.
 
   Possible mitigations:
 
-  - Use signed WDAC policies and UEFI BIOS access protection to prevent tampering of WDAC policies.
+  - Use signed App Control policies and UEFI BIOS access protection to prevent tampering of App Control policies.
   - To remove the requirement for managed installer, create and deploy signed catalog files as part of the app deployment process.
-  - Use device attestation to detect the configuration state of WDAC at boot time and use that information to condition access to sensitive corporate resources.
+  - Use device attestation to detect the configuration state of App Control at boot time and use that information to condition access to sensitive corporate resources.
 
 - **Unsigned policies**
 
@@ -159,7 +158,7 @@ In order to minimize user productivity impact, Alice has defined a policy that m
 
   Possible mitigations:
 
-  - Use signed WDAC policies and UEFI BIOS access protection to prevent tampering of WDAC policies.
+  - Use signed App Control policies and UEFI BIOS access protection to prevent tampering of App Control policies.
   - Limit who can elevate to administrator on the device.
 
 - **Managed installer**
@@ -173,7 +172,7 @@ In order to minimize user productivity impact, Alice has defined a policy that m
 
 - **Intelligent Security Graph (ISG)**
 
-  See [security considerations with the Intelligent Security Graph](use-wdac-with-intelligent-security-graph.md#security-considerations-with-the-isg-option)
+  See [security considerations with the Intelligent Security Graph](use-appcontrol-with-intelligent-security-graph.md#security-considerations-with-the-isg-option)
 
   Possible mitigations:
 
@@ -186,7 +185,7 @@ In order to minimize user productivity impact, Alice has defined a policy that m
 
   Possible mitigations:
 
-  - Use signed WDAC policies that allow authorized signed supplemental policies only.
+  - Use signed App Control policies that allow authorized signed supplemental policies only.
   - Use a restrictive audit mode policy to audit app usage and augment vulnerability detection.
 
 - **FilePath rules**
@@ -208,5 +207,5 @@ In order to minimize user productivity impact, Alice has defined a policy that m
 
 ## Up next
 
-- [Create a Windows Defender Application Control policy for fully managed devices](create-wdac-policy-for-fully-managed-devices.md)
-- [Prepare to deploy Windows Defender Application Control policies](../deployment/wdac-deployment-guide.md)
+- [Create an App Control for Business policy for fully managed devices](create-appcontrol-policy-for-fully-managed-devices.md)
+- [Prepare to deploy App Control for Business policies](../deployment/appcontrol-deployment-guide.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-using-reference-computer.md b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-using-reference-computer.md
new file mode 100644
index 0000000000..0b066ce364
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/create-appcontrol-policy-using-reference-computer.md
@@ -0,0 +1,124 @@
+---
+title: Create an App Control policy using a reference computer
+description: To create an App Control for Business policy that allows all code installed on a reference computer within your organization, follow this guide.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: how-to
+---
+
+# Create an App Control policy using a reference computer
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+This section outlines the process to create an App Control for Business policy **using a reference computer** that is already configured with the software you want to allow. You can use this approach for fixed-workload devices that are dedicated to a specific functional purpose and share common configuration attributes with other devices servicing the same functional role. Examples of fixed-workload devices may include Active Directory Domain Controllers, Secure Admin Workstations, pharmaceutical drug-mixing equipment, manufacturing devices, cash registers, ATMs, etc. This approach can also be used to turn on App Control on systems "in the wild" and you want to minimize the potential impact on users' productivity.
+
+> [!NOTE]
+> Some of the App Control for Business options described in this topic are only available on Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's App Control policies, consider whether your managed clients can use all or some of these features and assess the impact for any features that may be unavailable on your clients. You may need to adapt this guidance to meet your specific organization's needs.
+
+As described in [common App Control for Business deployment scenarios](common-appcontrol-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of App Control to prevent unwanted or unauthorized applications from running on their managed devices.
+
+**Alice Pena** is the IT team lead tasked with the rollout of App Control.
+
+## Create a custom base policy using a reference device
+
+Alice previously created a policy for the organization's fully managed end-user devices. She now wants to use App Control to protect Lamna's critical infrastructure servers. Lamna's imaging practice for infrastructure systems is to establish a "golden" image as a reference for what an ideal system should look like, and then use that image to clone more company assets. Alice decides to use these same "golden" image systems to create the App Control policies, which will result in separate custom base policies for each type of infrastructure server. As with imaging, she'll have to create policies from multiple golden computers based on model, department, application set, and so on.
+
+> [!NOTE]
+> Make sure the reference computer is virus and malware-free, and install any software you want to be scanned before creating the App Control policy. <br><br> Each installed software application should be validated as trustworthy before you create a policy. <br><br> We recommend that you review the reference computer for software that can load arbitrary DLLs and run code or scripts that could render the PC more vulnerable. Examples include software aimed at development or scripting such as msbuild.exe (part of Visual Studio and the .NET Framework) which can be removed if you don't want to run scripts. You can remove or disable such software on the reference computer.
+
+Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's critical infrastructure servers:
+
+- All devices are running Windows Server 2019 or above;
+- All apps are centrally managed and deployed;
+- No interactive users.
+
+Based on the above, Alice defines the pseudo-rules for the policy:
+
+1. **"Windows works"** rules that authorize:
+   - Windows
+   - WHQL (third-party kernel drivers)
+   - Windows Store signed apps
+
+2. Rules for **scanned files** that authorize all pre-existing app binaries found on the device
+
+To create the App Control policy, Alice runs each of the following commands in an elevated Windows PowerShell session, in order:
+
+1. Initialize variables.
+
+   ```powershell
+   $PolicyPath=$env:userprofile+"\Desktop\"
+   $PolicyName="FixedWorkloadPolicy_Audit"
+   $LamnaServerPolicy=$PolicyPath+$PolicyName+".xml"
+   $DefaultWindowsPolicy=$env:windir+"\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_Audit.xml"
+   ```
+
+2. Use [New-CIPolicy](/powershell/module/configci/new-cipolicy) to create a new App Control policy by scanning the system for installed applications:
+
+   ```powershell
+   New-CIPolicy -FilePath $LamnaServerPolicy -Level SignedVersion -Fallback FilePublisher,FileName,Hash -ScanPath c:\ -UserPEs -MultiplePolicyFormat -OmitPaths c:\Windows,'C:\Program Files\WindowsApps\',c:\windows.old\,c:\users\ 3> CIPolicyLog.txt
+   ```
+
+   > [!Note]
+   >
+   > - You can add the **-Fallback** parameter to catch any applications not discovered using the primary file rule level specified by the **-Level** parameter. For more information about file rule level options, see [App Control for Business file rule levels](select-types-of-rules-to-create.md).
+   > - To specify that the App Control policy scan only a specific drive, include the **-ScanPath** parameter followed by a path. Without this parameter, the tool will scan the C-drive by default.
+   > - When you specify the **-UserPEs** parameter (to include user mode executables in the scan), rule option **0 Enabled:UMCI** is automatically added to the App Control policy. If you do not specify **-UserPEs**, the policy will be empty of user mode executables and will only have rules for kernel mode binaries like drivers. In other words, the allow list will not include applications. If you create such a policy and later add rule option **0 Enabled:UMCI**, all attempts to start applications will cause a response from App Control for Business. In audit mode, the response is logging an event, and in enforced mode, the response is blocking the application.
+   > - To create a policy for Windows 10 1903 and above, including support for supplemental policies, use **-MultiplePolicyFormat**.
+   > - To specify a list of paths to exclude from the scan, use the **-OmitPaths** option and supply a comma-delimited list of paths.
+   > - The preceding example includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**.
+
+3. Merge the new policy with the WindowsDefault_Audit policy to ensure all Windows binaries and kernel drivers will load.
+
+      ```powershell
+      Merge-CIPolicy -OutputFilePath $LamnaServerPolicy -PolicyPaths $LamnaServerPolicy,$DefaultWindowsPolicy
+      ```
+
+4. Give the new policy a descriptive name, and initial version number:
+
+      ```powershell
+      Set-CIPolicyIdInfo -FilePath $LamnaServerPolicy -PolicyName $PolicyName
+      Set-CIPolicyVersion -FilePath $LamnaServerPolicy -Version "1.0.0.0"
+      ```
+
+5. Modify the merged policy to set policy rules:
+
+      ```powershell
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 3 # Audit Mode
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 6 # Unsigned Policy
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 9 # Advanced Boot Menu
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 12 # Enforce Store Apps
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 16 # No Reboot
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 17 # Allow Supplemental
+      Set-RuleOption -FilePath $LamnaServerPolicy -Option 19 # Dynamic Code Security
+      ```
+
+6. If appropriate, add more signer or file rules to further customize the policy for your organization.
+
+7. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the App Control policy to a binary format:
+
+   ```powershell
+   [xml]$LamnaServerPolicyXML = Get-Content $LamnaServerPolicy
+   $PolicyId = $LamnaServerPolicyXML.SiPolicy.PolicyId
+   $LamnaServerPolicyBin = $PolicyPath+$PolicyId+".cip"
+   ConvertFrom-CIPolicy $LamnaServerPolicy $LamnaServerPolicyBin
+   ```
+
+8. Upload the base policy XML and the associated binary to a source control solution such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration).
+
+Alice now has an initial policy for Lamna's critical infrastructure servers that is ready to deploy in audit mode.
+
+## Create a custom base policy to minimize user impact on in-use client devices
+
+Alice previously created a policy for the organization's fully managed devices. Alice has included the fully managed device policy as part of Lamna's device build process so all new devices now begin with App Control enabled. She's preparing to deploy the policy to systems that are already in use, but is worried about causing disruption to users' productivity. To minimize that risk, Alice decides to take a different approach for those systems. She'll continue to deploy the fully managed device policy in audit mode to those devices, but for enforcement mode she'll merge the fully managed device policy rules with a policy created by scanning the device for all previously installed software. In this way, each device is treated as its own "golden" system.
+
+Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully managed in-use devices:
+
+- Everything described for Lamna's [Fully Managed Devices](create-appcontrol-policy-for-fully-managed-devices.md);
+- Users have installed apps that they need to continue to run.
+
+Based on the above, Alice defines the pseudo-rules for the policy:
+
+1. Everything included in the Fully Managed Devices policy
+2. Rules for **scanned files** that authorize all pre-existing app binaries found on the device
+
+For Lamna's existing, in-use devices, Alice deploys a script along with the Fully Managed Devices policy XML (not the converted App Control policy binary). The script then generates a custom policy locally on the client as described in the previous section, but instead of merging with the DefaultWindows policy, the script merges with Lamna's Fully Managed Devices policy. Alice also modifies the steps above to match the requirements of this different use case.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/deploy-multiple-wdac-policies.md b/windows/security/application-security/application-control/app-control-for-business/design/deploy-multiple-appcontrol-policies.md
similarity index 76%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/deploy-multiple-wdac-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/design/deploy-multiple-appcontrol-policies.md
index 621718eb69..add9351935 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/deploy-multiple-wdac-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/deploy-multiple-appcontrol-policies.md
@@ -1,17 +1,16 @@
 ---
-title: Use multiple Windows Defender Application Control Policies
-description: Windows Defender Application Control supports multiple code integrity policies for one device.
+title: Use multiple App Control for Business Policies
+description: App Control for Business supports multiple code integrity policies for one device.
 ms.localizationpriority: medium
-ms.date: 04/15/2024
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
-# Use multiple Windows Defender Application Control Policies
+# Use multiple App Control for Business Policies
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-Beginning with Windows 10 version 1903 and Windows Server 2022, you can deploy multiple Windows Defender Application Control (WDAC) policies side-by-side on a device. To allow more than 32 active policies, install the Windows security update released on, or after, April 9, 2024 and then restart the device. With these updates, there's no limit for the number of policies you can deploy at once to a given device. Until you install the Windows security update released on or after April 9, 2024, your device is limited to 32 active policies and you must not exceed that number.
+Beginning with Windows 10 version 1903 and Windows Server 2022, you can deploy multiple App Control for Business policies side-by-side on a device. To allow more than 32 active policies, install the Windows security update released on, or after, April 9, 2024 and then restart the device. With these updates, there's no limit for the number of policies you can deploy at once to a given device. Until you install the Windows security update released on or after April 9, 2024, your device is limited to 32 active policies and you must not exceed that number.
 
 >[!NOTE]
 >The policy limit was not removed on Windows 11 21H2 and will remain limited to 32 policies.
@@ -29,7 +28,7 @@ Here are some common scenarios where multiple side-by-side policies are useful:
     - For supplemental policies, applications allowed by either the base policy or its supplemental policy/policies run
 
 > [!NOTE]
-> Pre-1903 systems do not support the use of Multiple Policy Format WDAC policies.
+> Pre-1903 systems do not support the use of Multiple Policy Format App Control policies.
 
 ## Base and supplemental policy interaction
 
@@ -38,7 +37,7 @@ Here are some common scenarios where multiple side-by-side policies are useful:
 - Base + supplemental policy: union
   - Files allowed by either the base policy or the supplemental policy run
 
-## Creating WDAC policies in Multiple Policy Format
+## Creating App Control policies in Multiple Policy Format
 
 In order to allow multiple policies to exist and take effect on a single system, policies must be created using the new Multiple Policy Format. The "MultiplePolicyFormat" switch in [New-CIPolicy](/powershell/module/configci/new-cipolicy?preserve-view=true&view=win10-ps) results in 1) unique values generated for the policy ID and 2) the policy type set as a Base policy. The below example describes the process of creating a new policy in the multiple policy format.
 
@@ -75,7 +74,7 @@ When you're merging policies, the policy type and ID of the leftmost/first polic
 
 ## Deploying multiple policies
 
-In order to deploy multiple Windows Defender Application Control policies, you must either deploy them locally by copying the `*.cip` policy files into the proper folder or by using the ApplicationControl CSP.
+In order to deploy multiple App Control for Business policies, you must either deploy them locally by copying the `*.cip` policy files into the proper folder or by using the ApplicationControl CSP.
 
 ### Deploying multiple policies locally
 
@@ -89,11 +88,11 @@ To deploy policies locally using the new multiple policy format, follow these st
 
 ### Deploying multiple policies via ApplicationControl CSP
 
-Multiple Windows Defender Application Control policies can be managed from an MDM server through ApplicationControl configuration service provider (CSP). The CSP also provides support for rebootless policy deployment.<br>
+Multiple App Control for Business policies can be managed from an MDM server through ApplicationControl configuration service provider (CSP). The CSP also provides support for rebootless policy deployment.<br>
 
 However, when policies are unenrolled from an MDM server, the CSP attempts to remove every policy not actively deployed, not just the policies added by the CSP. This behavior happens because the system doesn't know what deployment methods were used to apply individual policies.
 
 For more information on deploying multiple policies, optionally using Microsoft Intune's custom OMA-URI capability, see [ApplicationControl CSP](/windows/client-management/mdm/applicationcontrol-csp).
 
 > [!NOTE]
-> WMI and GP do not currently support multiple policies. Instead, customers who cannot directly access the MDM stack should use the [ApplicationControl CSP via the MDM Bridge WMI Provider](/windows/client-management/mdm/applicationcontrol-csp#powershell-and-wmi-bridge-usage-guidance) to manage Multiple Policy Format Windows Defender Application Control policies.
+> WMI and GP do not currently support multiple policies. Instead, customers who cannot directly access the MDM stack should use the [ApplicationControl CSP via the MDM Bridge WMI Provider](/windows/client-management/mdm/applicationcontrol-csp#powershell-and-wmi-bridge-usage-guidance) to manage Multiple Policy Format App Control for Business policies.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/example-wdac-base-policies.md b/windows/security/application-security/application-control/app-control-for-business/design/example-appcontrol-base-policies.md
similarity index 53%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/example-wdac-base-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/design/example-appcontrol-base-policies.md
index e186ea2bb6..fcc507dc75 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/example-wdac-base-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/example-appcontrol-base-policies.md
@@ -1,32 +1,31 @@
 ---
-title: Example Windows Defender Application Control base policies
-description: When creating a Windows Defender Application Control (WDAC) policy for an organization, start from one of the many available example base policies.
+title: Example App Control for Business base policies
+description: When creating an App Control for Business policy for an organization, start from one of the many available example base policies.
 ms.topic: reference
 ms.localizationpriority: medium
-ms.date: 03/31/2023
+ms.date: 09/11/2024
 ---
 
-# Windows Defender Application Control example base policies
+# App Control for Business example base policies
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. For more information, see [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-When you create policies for use with Windows Defender Application Control (WDAC), start from an existing base policy and then add or remove rules to build your own custom policy. Windows includes several example policies that you can use. These example policies are provided "as-is". You should thoroughly test the policies you deploy using safe deployment methods.
+When you create policies for use with App Control for Business, start from an existing base policy and then add or remove rules to build your own custom policy. Windows includes several example policies that you can use. These example policies are provided "as-is". You should thoroughly test the policies you deploy using safe deployment methods.
 
-| **Example Base Policy** | **Description** | **Where it can be found** |
+| Example Base Policy | Description | Where it can be found |
 |-------------------------|---------------------------------------------------------------|--------|
-| **DefaultWindows_\*.xml** | This example policy is available in both audit and enforced mode. It includes rules to allow Windows, third-party hardware and software kernel drivers, and Windows Store apps. Used as the basis for the [Microsoft Intune product family](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune) policies. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_\*.xml <br> %ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\DefaultWindows_Audit.xml |
-| **AllowMicrosoft.xml** | This example policy includes the rules from DefaultWindows and adds rules to trust apps signed by the Microsoft product root certificate. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\AllowMicrosoft.xml <br> %ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\AllowMicrosoft.xml |
+| **DefaultWindows_\*.xml** | This example policy is available in both audit and enforced mode. It includes rules to allow Windows, third-party hardware and software kernel drivers, and Windows Store apps. Used as the basis for the [Microsoft Intune product family](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune) policies. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_\*.xml <br> %ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\DefaultWindows_Audit.xml |
+| **AllowMicrosoft.xml** | This example policy includes the rules from DefaultWindows and adds rules to trust apps signed by the Microsoft product root certificate. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\AllowMicrosoft.xml <br> %ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\AllowMicrosoft.xml |
 | **AllowAll.xml** | This example policy is useful when creating a blocklist. All block policies should include rules allowing all other code to run and then add the DENY rules for your organization's needs. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\AllowAll.xml |
-| **AllowAll_EnableHVCI.xml** | This example policy can be used to enable [memory integrity](https://support.microsoft.com/windows/core-isolation-e30ed737-17d8-42f3-a2a9-87521df09b78) (also known as hypervisor-protected code integrity) using WDAC. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\AllowAll_EnableHVCI.xml |
+| **AllowAll_EnableHVCI.xml** | This example policy can be used to enable [memory integrity](https://support.microsoft.com/windows/core-isolation-e30ed737-17d8-42f3-a2a9-87521df09b78) (also known as hypervisor-protected code integrity) using App Control. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\AllowAll_EnableHVCI.xml |
 | **DenyAllAudit.xml** | ***Warning: Will cause boot issues on Windows Server 2019 and earlier. Do not use on those operating systems.*** Only deploy this example policy in audit mode to track all binaries running on critical systems or to meet regulatory requirements. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\DenyAllAudit.xml |
-| **Microsoft Configuration Manager** | Customers who use Configuration Manager can deploy a policy with Configuration Manager's built-in WDAC integration, and then use the generated policy XML as an example base policy. | %OSDrive%\Windows\CCM\DeviceGuard on a managed endpoint |
-| **SmartAppControl.xml** | This example policy includes rules based on [Smart App Control](https://support.microsoft.com/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003) that are well-suited for lightly managed systems. This policy includes a rule that is unsupported for enterprise WDAC policies and must be removed. For more information about using this example policy, see [Create a custom base policy using an example base policy](create-wdac-policy-for-lightly-managed-devices.md#create-a-custom-base-policy-using-an-example-wdac-base-policy). | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\SmartAppControl.xml <br>%ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\SignedReputable.xml |
+| **Microsoft Configuration Manager** | Customers who use Configuration Manager can deploy a policy with Configuration Manager's built-in App Control integration, and then use the generated policy XML as an example base policy. | %OSDrive%\Windows\CCM\DeviceGuard on a managed endpoint |
+| **SmartAppControl.xml** | This example policy includes rules based on [Smart App Control](https://support.microsoft.com/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003) that are well-suited for lightly managed systems. This policy includes a rule that is unsupported for enterprise App Control policies and must be removed. For more information about using this example policy, see [Create a custom base policy using an example base policy](create-appcontrol-policy-for-lightly-managed-devices.md#create-a-custom-base-policy-using-an-example-app-control-base-policy). | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\SmartAppControl.xml <br>%ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\SignedReputable.xml |
 | **Example supplemental policy** | This example policy shows how to use supplemental policy to expand the DefaultWindows_Audit.xml allow a single Microsoft-signed file. | %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_Supplemental.xml |
-| **Microsoft Recommended Block List** | This policy includes a list of Windows and Microsoft-signed code that Microsoft recommends blocking when using WDAC, if possible. | [Microsoft recommended block rules](/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules) <br> %ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\Recommended_UserMode_Blocklist.xml |
-| **Microsoft recommended driver blocklist** | This policy includes rules to block known vulnerable or malicious kernel drivers. | [Microsoft recommended driver block rules](/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules) <br> %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\RecommendedDriverBlock_Enforced.xml <br> %ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\Recommended_Driver_Blocklist.xml |
-| **Windows S mode** | This policy includes the rules used to enforce [Windows S mode](https://support.microsoft.com/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85). | %ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\WinSiPolicy.xml.xml |
-| **Windows 11 SE** | This policy includes the rules used to enforce [Windows 11 SE](/education/windows/windows-11-se-overview), a version of Windows built for use in schools. | %ProgramFiles%\WindowsApps\Microsoft.WDAC.WDACWizard*\WinSEPolicy.xml.xml |
+| **Microsoft Recommended Block List** | This policy includes a list of Windows and Microsoft-signed code that Microsoft recommends blocking when using App Control, if possible. | [Microsoft recommended block rules](applications-that-can-bypass-appcontrol.md) <br> %ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\Recommended_UserMode_Blocklist.xml |
+| **Microsoft recommended driver blocklist** | This policy includes rules to block known vulnerable or malicious kernel drivers. | [Microsoft recommended driver block rules](microsoft-recommended-driver-block-rules.md) <br> %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies\RecommendedDriverBlock_Enforced.xml <br> %ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\Recommended_Driver_Blocklist.xml |
+| **Windows S mode** | This policy includes the rules used to enforce [Windows S mode](https://support.microsoft.com/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85). | %ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\WinSiPolicy.xml.xml |
+| **Windows 11 SE** | This policy includes the rules used to enforce [Windows 11 SE](/education/windows/windows-11-se-overview), a version of Windows built for use in schools. | %ProgramFiles%\WindowsApps\Microsoft.App Control.WDACWizard*\WinSEPolicy.xml.xml |
 
 > [!NOTE]
 > Not all policies shown available at %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies can be found on all versions of Windows.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/manage-packaged-apps-with-wdac.md b/windows/security/application-security/application-control/app-control-for-business/design/manage-packaged-apps-with-appcontrol.md
similarity index 56%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/manage-packaged-apps-with-wdac.md
rename to windows/security/application-security/application-control/app-control-for-business/design/manage-packaged-apps-with-appcontrol.md
index d136e3824b..ce393a2e65 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/manage-packaged-apps-with-wdac.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/manage-packaged-apps-with-appcontrol.md
@@ -1,28 +1,27 @@
 ---
-title: Manage packaged apps with WDAC
-description: Packaged apps, also known as Universal Windows apps, allow you to control the entire app by using a single Windows Defender Application Control (WDAC) rule.
+title: Manage packaged apps with App Control
+description: Packaged apps, also known as Universal Windows apps, allow you to control the entire app by using a single App Control for Business rule.
 ms.localizationpriority: medium
-ms.date: 03/01/2023
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
-# Manage Packaged Apps with Windows Defender Application Control
+# Manage Packaged Apps with App Control for Business
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [WDAC feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-This article for IT professionals describes concepts and lists procedures to help you manage packaged apps with Windows Defender Application Control (WDAC) as part of your overall application control strategy.
+This article for IT professionals describes concepts and lists procedures to help you manage packaged apps with App Control for Business as part of your overall App Control strategy.
 
 ## Comparing classic Windows Apps and Packaged Apps
 
-The biggest challenge in adopting application control is the lack of a strong app identity for classic Windows apps, also known as win32 apps. A typical win32 app consists of multiple components, including the installer that is used to install the app, and one or more exes, dlls, or scripts. An app can consist of hundreds or even thousands of individual binaries that work together to deliver the functionality that your users understand as the app. Some of that code may be signed by the software publisher, some may be signed by other companies, and some of it may not be signed at all. Much of the code may be written to disk by a common set of installers, but some may already be installed and some downloaded on demand. Some of the binaries have common resource header metadata, such as product name and product version, but other files won't share that information. So while you want to be able to express rules like "allow app Foo", that isn't something Windows inherently understands for classic Windows apps. Instead, you may have to create many WDAC rules to allow all the files that comprise the app.
+The biggest challenge in adopting App Control is the lack of a strong app identity for classic Windows apps, also known as win32 apps. A typical win32 app consists of multiple components, including the installer that is used to install the app, and one or more exes, dlls, or scripts. An app can consist of hundreds or even thousands of individual binaries that work together to deliver the functionality that your users understand as the app. Some of that code may be signed by the software publisher, some may be signed by other companies, and some of it may not be signed at all. Much of the code may be written to disk by a common set of installers, but some may already be installed and some downloaded on demand. Some of the binaries have common resource header metadata, such as product name and product version, but other files won't share that information. So while you want to be able to express rules like "allow app Foo", that isn't something Windows inherently understands for classic Windows apps. Instead, you may have to create many App Control rules to allow all the files that comprise the app.
 
-Packaged apps on the other hand, also known as [MSIX](/windows/msix/overview), ensure that all the files that make up an app share the same identity and have a common signature. Therefore, with packaged apps, it's possible to control the entire app with a single WDAC rule.
+Packaged apps on the other hand, also known as [MSIX](/windows/msix/overview), ensure that all the files that make up an app share the same identity and have a common signature. Therefore, with packaged apps, it's possible to control the entire app with a single App Control rule.
 
-## Using WDAC to Manage Packaged Apps
+## Using App Control to Manage Packaged Apps
 
 > [!IMPORTANT]
-> When controlling packaged apps, you must choose between signer rules or Package Family Name (PFN) rules. If **any** Package Family Name (PFN) rule is used in your WDAC base policy or one of its supplemental policies, then **all** packaged apps must be controlled exclusively using PFN rules. You can't mix-and-match PFN rules with signature-based rules within a given base policy's scope. This will affect many inbox system apps like the Start menu. You can use wildcards in PFN rules on Windows 11 to simplify the rule creation.
+> When controlling packaged apps, you must choose between signer rules or Package Family Name (PFN) rules. If **any** Package Family Name (PFN) rule is used in your App Control base policy or one of its supplemental policies, then **all** packaged apps must be controlled exclusively using PFN rules. You can't mix-and-match PFN rules with signature-based rules within a given base policy's scope. This will affect many inbox system apps like the Start menu. You can use wildcards in PFN rules on Windows 11 to simplify the rule creation.
 
 ### Creating signature-based rules for Packaged Apps
 
@@ -35,16 +34,16 @@ $FilePath = $env:USERPROFILE+'\Downloads\WDACWizard_2.1.0.1_x64_8wekyb3d8bbwe.MS
 $Rules = New-CIPolicyRule -DriverFilePath $FilePath -Level Publisher
 ```
 
-Then use the [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) PowerShell cmdlet to merge your new rule into your existing WDAC policy XML.
+Then use the [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) PowerShell cmdlet to merge your new rule into your existing App Control policy XML.
 
 #### Create signer rule from AppxSignature.p7x
 
 ```powershell
-$FilePath = $env:ProgramFiles+'\WindowsApps\Microsoft.WDAC.WDACWizard_2.1.0.1_x64__8wekyb3d8bbwe\AppxSignature.p7x'
+$FilePath = $env:ProgramFiles+'\WindowsApps\Microsoft.App Control.WDACWizard_2.1.0.1_x64__8wekyb3d8bbwe\AppxSignature.p7x'
 $Rules = New-CIPolicyRule -DriverFilePath $FilePath -Level Publisher
 ```
 
-Then use the [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) PowerShell cmdlet to merge your new rule into your existing WDAC policy XML.
+Then use the [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) PowerShell cmdlet to merge your new rule into your existing App Control policy XML.
 
 ### Creating PackageFamilyName rules for Packaged Apps
 
@@ -61,15 +60,15 @@ foreach ($Package in $Packages)
 }
 ```
 
-Then use the [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) PowerShell cmdlet to merge your new rule(s) into your existing WDAC policy XML.
+Then use the [Merge-CIPolicy](/powershell/module/configci/merge-cipolicy) PowerShell cmdlet to merge your new rule(s) into your existing App Control policy XML.
 
-#### Create PFN rules using the WDAC Wizard
+#### Create PFN rules using the App Control Wizard
 
 ##### Create PFN rule from an installed MSIX app
 
-Use the following steps to create a WDAC PFN rule for an app that is installed on the system:
+Use the following steps to create an App Control PFN rule for an app that is installed on the system:
 
-1. From the **Policy Signing Rules** page of the [WDAC Wizard](https://aka.ms/wdacwizard), select **Add Custom Rule**.
+1. From the **Policy Signing Rules** page of the [App Control Wizard](https://aka.ms/wdacwizard), select **Add Custom Rule**.
 2. Check **Usermode Rule** as the Rule Scope, if not checked.
 3. Select either **Allow** or **Deny** for your Rule Action.
 4. Select **Packaged App** for your Rule Type.
@@ -78,7 +77,7 @@ Use the following steps to create a WDAC PFN rule for an app that is installed o
 7. Select **Create Rule**.
 8. Create any other rules desired, then complete the Wizard.
 
-![Create PFN rule from WDAC Wizard](../images/wdac-wizard-custom-pfn-rule.png)
+![Create PFN rule from App Control Wizard](../images/appcontrol-wizard-custom-pfn-rule.png)
 
 ##### Create a PFN rule using a custom string
 
@@ -91,4 +90,4 @@ Use the following steps to create a PFN rule with a custom string value:
 5. Select **Create Rule**.
 6. Create any other rules desired, then complete the Wizard.
 
-![Create PFN rule with custom string from WDAC Wizard](../images/wdac-wizard-custom-manual-pfn-rule.png)
+![Create PFN rule with custom string from App Control Wizard](../images/appcontrol-wizard-custom-manual-pfn-rule.png)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules.md b/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules.md
similarity index 99%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules.md
rename to windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules.md
index 040d3f9949..3ce08b2022 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules.md
@@ -5,14 +5,13 @@ ms.localizationpriority: medium
 ms.collection:
 - tier3
 - must-keep
-ms.date: 01/24/2024
+ms.date: 09/11/2024
 ms.topic: how-to
 ---
 
 # Microsoft recommended driver block rules
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
 Microsoft has strict requirements for code running in kernel. So, malicious actors are turning to exploit vulnerabilities in legitimate and signed kernel drivers to run malware in kernel. One of the many strengths of the Windows platform is our strong collaboration with independent hardware vendors (IHVs) and OEMs. Microsoft works closely with our IHVs and security community to ensure the highest level of driver security for our customers. When vulnerabilities in drivers are found, we work with our partners to ensure they're quickly patched and rolled out to the ecosystem. The vulnerable driver blocklist is designed to help harden systems against non-Microsoft-developed drivers across the Windows ecosystem with any of the following attributes:
 
@@ -39,24 +38,24 @@ With Windows 11 2022 update, the vulnerable driver blocklist  is enabled by defa
 
 The blocklist is updated with each new major release of Windows, typically 1-2 times per year, including most recently with the Windows 11 2022 update released in September 2022. The most current blocklist is now also available for Windows 10 20H2 and Windows 11 21H2 users as an optional update from Windows Update. Microsoft will occasionally publish future updates through regular Windows servicing.
 
-Customers who always want the most up-to-date driver blocklist can also use Windows Defender Application Control (WDAC) to apply the latest recommended driver blocklist contained in this article. For your convenience, we provide a download of the most up-to-date vulnerable driver blocklist along with instructions to apply it on your computer at the end of this article. Otherwise, use the following XML to create your own custom WDAC policies.
+Customers who always want the most up-to-date driver blocklist can also use App Control for Business to apply the latest recommended driver blocklist contained in this article. For your convenience, we provide a download of the most up-to-date vulnerable driver blocklist along with instructions to apply it on your computer at the end of this article. Otherwise, use the following XML to create your own custom App Control policies.
 
-## Blocking vulnerable drivers using WDAC
+## Blocking vulnerable drivers using App Control
 
-Microsoft recommends enabling [HVCI](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) or S mode to protect your devices against security threats. If this setting isn't possible, Microsoft recommends blocking [this list of drivers](#vulnerable-driver-blocklist-xml) within your existing Windows Defender Application Control policy. Blocking kernel drivers without sufficient testing can cause devices or software to malfunction, and in rare cases, blue screen. It's recommended to first validate this policy in [audit mode](/windows/security/threat-protection/windows-defender-application-control/audit-windows-defender-application-control-policies) and review the audit block events.
+Microsoft recommends enabling [HVCI](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) or S mode to protect your devices against security threats. If this setting isn't possible, Microsoft recommends blocking [this list of drivers](#vulnerable-driver-blocklist-xml) within your existing App Control for Business policy. Blocking kernel drivers without sufficient testing can cause devices or software to malfunction, and in rare cases, blue screen. It's recommended to first validate this policy in [audit mode](../deployment/audit-appcontrol-policies.md) and review the audit block events.
 
 > [!IMPORTANT]
-> Microsoft also recommends enabling Attack Surface Reduction (ASR) rule [**Block abuse of exploited vulnerable signed drivers**](/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference#block-abuse-of-exploited-vulnerable-signed-drivers) to prevent an application from writing a vulnerable signed driver to disk. The ASR rule doesn't block a driver already existing on the system from loading, however enabling **Microsoft vulnerable driver blocklist** or applying this WDAC policy will prevent the existing driver from loading.
+> Microsoft also recommends enabling Attack Surface Reduction (ASR) rule [**Block abuse of exploited vulnerable signed drivers**](/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference#block-abuse-of-exploited-vulnerable-signed-drivers) to prevent an application from writing a vulnerable signed driver to disk. The ASR rule doesn't block a driver already existing on the system from loading, however enabling **Microsoft vulnerable driver blocklist** or applying this App Control policy will prevent the existing driver from loading.
 
 ## Steps to download and apply the vulnerable driver blocklist binary
 
 If you prefer to apply the [vulnerable driver blocklist](#vulnerable-driver-blocklist-xml) exactly as shown, follow these steps:
 
-1. Download the [WDAC policy refresh tool](https://aka.ms/refreshpolicy)
+1. Download the [App Control policy refresh tool](https://aka.ms/refreshpolicy)
 2. Download and extract the [vulnerable driver blocklist binaries](https://aka.ms/VulnerableDriverBlockList)
 3. Select either the audit only version or the enforced version and rename the file to SiPolicy.p7b
 4. Copy SiPolicy.p7b to %windir%\system32\CodeIntegrity
-5. Run the WDAC policy refresh tool you downloaded in Step 1 above to activate and refresh all WDAC policies on your computer
+5. Run the App Control policy refresh tool you downloaded in Step 1 above to activate and refresh all App Control policies on your computer
 
 To check that the policy was successfully applied on your computer:
 
@@ -64,15 +63,15 @@ To check that the policy was successfully applied on your computer:
 2. Browse to **Applications and Services Logs - Microsoft - Windows - CodeIntegrity - Operational**
 3. Select **Filter Current Log...**
 4. Replace "&lt;All Event IDs&gt;" with "3099" and select OK.
-5. Look for a 3099 event where the PolicyNameBuffer and PolicyIdBuffer match the Name and Id PolicyInfo settings found at the bottom of the blocklist WDAC Policy XML in this article. NOTE: Your computer may have more than one 3099 event if other WDAC policies are also present.
+5. Look for a 3099 event where the PolicyNameBuffer and PolicyIdBuffer match the Name and Id PolicyInfo settings found at the bottom of the blocklist App Control Policy XML in this article. NOTE: Your computer may have more than one 3099 event if other App Control policies are also present.
 
 > [!NOTE]
-> If any vulnerable drivers are already running that would be blocked by the policy, you must reboot your computer for those drivers to be blocked. Running processes aren't shutdown when activating a new WDAC policy without reboot.
+> If any vulnerable drivers are already running that would be blocked by the policy, you must reboot your computer for those drivers to be blocked. Running processes aren't shutdown when activating a new App Control policy without reboot.
 
 ## Vulnerable driver blocklist XML
 
 > [!IMPORTANT]
-> The following policy contains **Allow All** rules. If your version of Windows supports WDAC multiple policies, we recommend deploying this policy alongside any existing WDAC policies. If you do plan to merge this policy with another policy, you may need to remove the **Allow All** rules before merging it if the other policy applies an explicit allow list. For more information, see [Create a WDAC Deny Policy](/windows/security/threat-protection/windows-defender-application-control/create-wdac-deny-policy#single-policy-considerations).
+> The following policy contains **Allow All** rules. If your version of Windows supports App Control multiple policies, we recommend deploying this policy alongside any existing App Control policies. If you do plan to merge this policy with another policy, you may need to remove the **Allow All** rules before merging it if the other policy applies an explicit allow list. For more information, see [Create an App Control Deny Policy](create-appcontrol-deny-policy.md#guidance-on-creating-app-control-deny-policies).
 
 > [!NOTE]
 > To use this policy with Windows Server 2016, you must convert the policy XML on a device running a newer operating system.
@@ -4756,4 +4755,4 @@ The following recommended blocklist xml policy file can also be downloaded from
 
 ## More information
 
-- [Merge Windows Defender Application Control policies](/windows/security/threat-protection/windows-defender-application-control/merge-windows-defender-application-control-policies)
+- [Merge App Control for Business policies](../deployment/merge-appcontrol-policies.md)
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/plan-appcontrol-management.md b/windows/security/application-security/application-control/app-control-for-business/design/plan-appcontrol-management.md
new file mode 100644
index 0000000000..ff41a98da8
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/plan-appcontrol-management.md
@@ -0,0 +1,88 @@
+---
+title: Plan for App Control policy management
+description: Learn about the decisions you need to make to establish the processes for managing and maintaining App Control for Business policies.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: conceptual
+---
+
+# Plan for App Control for Business lifecycle policy management
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+This article describes the decisions you need to make to establish the processes for managing and maintaining App Control for Business policies.
+
+## Policy XML lifecycle management
+
+The first step in implementing App Control is to consider how your policies will be managed and maintained over time. Developing a process for managing App Control for Business policies helps ensure that App Control continues to effectively control how applications are allowed to run in your organization.
+
+Most App Control for Business policies will evolve over time and proceed through a set of identifiable phases during their lifetime. Typically, these phases include:
+
+1. [Define (or refine) the "circle-of-trust"](understand-appcontrol-policy-design-decisions.md) for the policy and build an audit mode version of the policy XML. In audit mode, block events are generated but files aren't prevented from executing.
+2. [Deploy the audit mode policy](../deployment/audit-appcontrol-policies.md) to intended devices.
+3. [Monitor audit block events](../operations/event-id-explanations.md) from the intended devices and add/edit/delete rules as needed to address unexpected/unwanted blocks.
+4. Repeat steps 2-3 until the remaining block events meet expectations.
+5. [Generate the enforced mode version](../deployment/enforce-appcontrol-policies.md) of the policy. In enforced mode, files that the policy doesn't allow are prevented from running and corresponding block events are generated.
+6. [Deploy the enforced mode policy](../deployment/appcontrol-deployment-guide.md) to intended devices. We recommend using staged rollouts for enforced policies to detect and respond to issues before deploying the policy broadly.
+7. Repeat steps 1-6 anytime the desired "circle-of-trust" changes.
+
+![Recommended App Control policy deployment process.](../images/policyflow.png)
+
+### Keep App Control policies in a source control or document management solution
+
+To effectively manage App Control for Business policies, you should store and maintain your policy XML documents in a central repository that is accessible to everyone responsible for App Control policy management. We recommend a source control solution such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration), which provide version control and allow you to specify metadata about the XML documents.
+
+### Set PolicyName, PolicyID, and Version metadata for each policy
+
+Use the [Set-CIPolicyIDInfo](/powershell/module/configci/set-cipolicyidinfo) cmdlet to give each policy a descriptive name and set a unique policy ID. These unique attributes help you differentiate each policy when reviewing App Control for Business events or when viewing the policy XML document. Although you can specify a string value for PolicyId, for policies using the multiple policy format we recommend using the -ResetPolicyId switch to let the system autogenerate a unique ID for the policy.
+
+> [!NOTE]
+> PolicyID only applies to policies using the [multiple policy format](deploy-multiple-appcontrol-policies.md) on computers running Windows 10, version 1903 and above, or Windows 11. Running -ResetPolicyId on a policy created for pre-1903 computers will convert it to multiple policy format and prevent it from running on those earlier versions of Windows 10.
+> PolicyID should be set only once per policy and use different PolicyID's for the audit and enforced mode versions of each policy.
+
+In addition, we recommend using the [Set-CIPolicyVersion](/powershell/module/configci/set-cipolicyversion) cmdlet to increment the policy's internal version number when you make changes to the policy. The version must be defined as a standard four-part version string (for example, "1.0.0.0").
+
+### Policy rule updates
+
+You might need to revise your policy when new apps are deployed or existing apps are updated by the software publisher to ensure that apps run correctly. Whether policy rule updates are required will depend significantly on the types of rules your policy includes. Rules based on codesigning certificates provide the most resiliency against app changes while rules based on file attributes or hash are most likely to require updates when apps change. Alternatively, if you use App Control [managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md) functionality and consistently deploy all apps and their updates through your managed installer, then you're less likely to need policy updates.
+
+## App Control event management
+
+Each time that App Control blocks a process, events are written to either the CodeIntegrity\Operational or the AppLocker\MSI and Script Windows event logs. The event describes the file that tried to run, the attributes of that file and its signatures, and the process that attempted to run the blocked file.
+
+Collecting these events in a central location can help you maintain your App Control for Business policy and troubleshoot rule configuration problems. You can [use the Azure Monitor Agent](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) to automatically collect your App Control events for analysis.
+
+Additionally, [Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint) collects App Control events which can be queried using the [advanced hunting](../operations/querying-application-control-events-centrally-using-advanced-hunting.md) feature.
+
+## Application and user support policy
+
+Considerations include:
+
+- What type of end-user support is provided for blocked applications?
+- How are new rules added to the policy?
+- How are existing rules updated?
+- Are events forwarded for review?
+
+### Help desk support
+
+If your organization has an established help desk support department in place, consider the following points when deploying App Control for Business policies:
+
+- What documentation does your support department require for new policy deployments?
+- What are the critical processes in each business group both in work flow and timing that will be affected by App Control policies and how could they affect your support department's workload?
+- Who are the contacts in the support department?
+- How will the support department resolve App Control issues between the end user and those resources who maintain the App Control for Business rules?
+
+### End-user support
+
+Because App Control for Business is preventing unapproved apps from running, it's important that your organization carefully plans how to provide end-user support. Considerations include:
+
+- Do you want to use an intranet site as a frontline of support for users who try to run a blocked app?
+- How do you want to support exceptions to the policy? Will you allow users to run a script to temporarily allow access to a blocked app?
+
+## Document your plan
+
+After deciding how your organization will manage your App Control for Business policy, record your findings.
+
+- **End-user support policy.** Document the process that you'll use for handling calls from users who have attempted to run a blocked app, and ensure that support personnel have clear escalation steps so that the administrator can update the App Control for Business policy, if necessary.
+- **Event processing.** Document whether events will be collected in a central location called a store, how that store will be archived, and whether the events will be processed for analysis.
+- **Policy management.** Detail what policies are planned, how they'll be managed, and how rules will be maintained over time.
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/script-enforcement.md b/windows/security/application-security/application-control/app-control-for-business/design/script-enforcement.md
new file mode 100644
index 0000000000..16b4739600
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/script-enforcement.md
@@ -0,0 +1,62 @@
+---
+title: Understand App Control script enforcement
+description: App Control script enforcement
+ms.manager: jsuther
+ms.date: 09/11/2024
+ms.topic: conceptual
+ms.localizationpriority: medium
+---
+
+# Script enforcement with App Control for Business
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+> [!IMPORTANT]
+> Option **11 Disabled:Script Enforcement** is not supported on **Windows Server 2016** or on **Windows 10 1607 LTSB** and should not be used on those platforms. Doing so will result in unexpected script enforcement behaviors.
+
+## Script enforcement overview
+
+By default, script enforcement is enabled for all App Control policies unless the option **11 Disabled:Script Enforcement** is set in the policy. App Control script enforcement involves a handshake between an enlightened script host, such as PowerShell, and App Control. However, the script host handles the actual enforcement behavior. Some script hosts, like the Microsoft HTML Application Host (mshta.exe), block all code execution if any App Control UMCI policy is active. Most script hosts first ask App Control whether a script should be allowed to run based on the App Control policies currently active. The script host then either blocks, allows, or changes *how* the script is run to best protect the user and the device.
+
+Validation for signed scripts is done using the [WinVerifyTrust API](/windows/win32/api/wintrust/nf-wintrust-winverifytrust). To pass validation, the signature root must be present in the trusted root store on the device and your App Control policy must allow it. This behavior is different from App Control validation for executable files, which doesn't require installation of the root certificate.
+
+App Control shares the *AppLocker - MSI and Script* event log for all script enforcement events. Whenever a script host asks App Control if a script should be allowed, an event is logged with the answer App Control returned to the script host. For more information on App Control script enforcement events, see [Understanding App Control events](../operations/event-id-explanations.md#app-control-block-events-for-packaged-apps-msi-installers-scripts-and-com-objects).
+
+> [!NOTE]
+> When a script runs that is not allowed by policy, App Control raises an event indicating that the script was "blocked." However, the actual script enforcement behavior is handled by the script host and may not actually completely block the file from running.
+>
+> Also be aware that some script hosts may change how they behave even if an App Control policy is in audit mode only. You should review the script host specific information in this article and test thoroughly within your environment to ensure the scripts you need to run are working properly.
+
+## Enlightened script hosts that are part of Windows
+
+### PowerShell
+
+Your App Control policies must allow all PowerShell scripts (.ps1), modules (.psm1), and manifests (.psd1) for them to run with Full Language rights.
+
+Your App Control policies must also allow any **dependent modules** that are loaded by an allowed module, and module functions must be exported explicitly by name when App Control is enforced. Modules that don't specify any exported functions (no export name list) still load but no module functions are accessible. Modules that use wildcards (\*) in their name will fail to load.
+
+Any PowerShell script that isn't allowed by App Control policy still runs, but only in Constrained Language Mode.
+
+PowerShell **dot-sourcing** isn't recommended. Instead, scripts should use PowerShell modules to provide common functionality. If an allowed script file does try to run dot-sourced script files, those script files must also pass the policy.
+
+App Control puts **interactive PowerShell** into Constrained Language Mode if any App Control UMCI policy is enforced and *any* active App Control policy enables script enforcement, even if that policy is in audit mode. To run interactive PowerShell with Full Language rights, you must disable script enforcement for *all* policies.
+
+For more information, see [About Language Modes](/powershell/module/microsoft.powershell.core/about/about_language_modes) and [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/).
+
+### VBscript, cscript, and jscript
+
+Your App Control policies must allow all scripts run using the Windows Based Script Host (wscript.exe) or the Microsoft Console Based Script Host (cscript.exe). If not, the script is blocked.
+
+### Microsoft HTML Application Host (MSHTA) and MSXML
+
+All code execution using MSHTA or MSXML is blocked if any App Control policy with script enforcement is active, even if that policy is in audit mode.
+
+### COM objects
+
+App Control additionally enforces a restricted allowlist for COM objects that your App Control policy can expand or further restrict. COM object enforcement **isn't** affected by option **11 Disabled:Script Enforcement**. For more information on how to allow or deny COM objects, see [Allow COM object registration](allow-com-object-registration-in-appcontrol-policy.md).
+
+## Scripts that aren't directly controlled by App Control
+
+App Control doesn't directly control code run via the Windows Command Processor (cmd.exe), including .bat/.cmd script files. However, anything that such a batch script tries to run is subject to App Control control. If you don't need to run cmd.exe, it's recommended to block it outright or allow it only by exception based on the calling process. See [Use an App Control for Business policy to control specific plug-ins, add-ins, and modules](use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md).
+
+App Control doesn't control scripts run through an unenlightened script host, such as many 3rd-party Java or Python engines. If your App Control policy allows an unenlightened script host to run, then you implicitly allow all scripts run through that host. For non-Microsoft script hosts, you should check with the software vendor whether their script hosts are enlightened to App Control policy.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/select-types-of-rules-to-create.md b/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md
similarity index 60%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/select-types-of-rules-to-create.md
rename to windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md
index ce2f7e2e2f..8cdfe418ba 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/select-types-of-rules-to-create.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/select-types-of-rules-to-create.md
@@ -1,66 +1,65 @@
 ---
-title: Understand Windows Defender Application Control (WDAC) policy rules and file rules
-description: Learn how WDAC policy rules and file rules can control your Windows 10 and Windows 11 computers.
+title: Understand App Control for Business policy rules and file rules
+description: Learn how App Control policy rules and file rules can control your Windows 10 and Windows 11 computers.
 ms.localizationpriority: medium
-ms.date: 11/22/2023
+ms.date: 09/11/2024
 ms.topic: conceptual
 ---
 
-# Understand Windows Defender Application Control (WDAC) policy rules and file rules
+# Understand App Control for Business policy rules and file rules
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+App Control for Business can control what runs on your Windows devices by setting policies that specify whether a driver or application is trusted. A policy includes *policy rules* that control options such as audit mode, and *file rules* (or *file rule levels*) that specify how to identify applications your organization trusts.
+
+## App Control for Business policy rules
+
+To modify the policy rule options of an existing App Control policy XML, use the [App Control Policy Wizard](appcontrol-wizard.md) or the [Set-RuleOption](/powershell/module/configci/set-ruleoption) PowerShell cmdlet.
+
+You can set several rule options within an App Control policy. Table 1 describes each rule option, and whether supplemental policies can set them. Some rule options are reserved for future work or not supported.
 
 > [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [WDAC feature availability](../feature-availability.md).
-
-Windows Defender Application Control (WDAC) can control what runs on your Windows devices by setting policies that specify whether a driver or application is trusted. A policy includes *policy rules* that control options such as audit mode, and *file rules* (or *file rule levels*) that specify how to identify applications your organization trusts.
-
-## Windows Defender Application Control policy rules
-
-To modify the policy rule options of an existing WDAC policy XML, use the [WDAC Policy Wizard](/windows/security/threat-protection/windows-defender-application-control/wdac-wizard) or the [Set-RuleOption](/powershell/module/configci/set-ruleoption) PowerShell cmdlet.
-
-You can set several rule options within a WDAC policy. Table 1 describes each rule option, and whether supplemental policies can set them. Some rule options are reserved for future work or not supported.
-
-> [!NOTE]
-> We recommend that you use **Enabled:Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, applications run normally but WDAC logs events whenever a file runs that isn't allowed by the policy. To allow these files, you can capture the policy information from the event log, and then merge that information into the existing policy. When the **Enabled:Audit Mode** is deleted, the policy runs in enforced mode.
+> We recommend that you use **Enabled:Audit Mode** initially because it allows you to test new App Control policies before you enforce them. With audit mode, applications run normally but App Control logs events whenever a file runs that isn't allowed by the policy. To allow these files, you can capture the policy information from the event log, and then merge that information into the existing policy. When the **Enabled:Audit Mode** is deleted, the policy runs in enforced mode.
 >
-> Some apps may behave differently even when your policy is in audit mode. When an option may change behaviors in audit mode, that is noted in Table 1. You should always test your apps thoroughly when deploying significant updates to your WDAC policies.
+> Some apps may behave differently even when your policy is in audit mode. When an option may change behaviors in audit mode, that is noted in Table 1. You should always test your apps thoroughly when deploying significant updates to your App Control policies.
 
-### Table 1. Windows Defender Application Control policy - policy rule options
+### Table 1. App Control for Business policy - policy rule options
 
 | Rule option | Description | Valid supplemental option |
 |------------ | ----------- | ----------- |
-| **0 Enabled:UMCI** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | No |
+| **0 Enabled:UMCI** | App Control policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | No |
 | **1 Enabled:Boot Menu Protection** | This option isn't currently supported. | No |
 | **2 Required:WHQL** | By default, kernel drivers that aren't Windows Hardware Quality Labs (WHQL) signed are allowed to run. Enabling this rule requires that every driver is WHQL signed and removes legacy driver support. Kernel drivers built for Windows 10 should be WHQL certified. | No |
-| **3 Enabled:Audit Mode (Default)** | Instructs WDAC to log information about applications, binaries, and scripts that would have been blocked, if the policy was enforced. You can use this option to identify the potential impact of your WDAC policy, and use the audit events to refine the policy before enforcement. To enforce a WDAC policy, delete this option. | No |
+| **3 Enabled:Audit Mode (Default)** | Instructs App Control to log information about applications, binaries, and scripts that would have been blocked, if the policy was enforced. You can use this option to identify the potential impact of your App Control policy, and use the audit events to refine the policy before enforcement. To enforce an App Control policy, delete this option. | No |
 | **4 Disabled:Flight Signing** | If enabled, binaries from Windows Insider builds aren't trusted. This option is useful for organizations that only want to run released binaries, not prerelease Windows builds. | No |
 | **5 Enabled:Inherit Default Policy** | This option is reserved for future use and currently has no effect. | Yes |
 | **6 Enabled:Unsigned System Integrity Policy (Default)** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and any supplemental policies must also be signed. The certificates that are trusted for future policy updates must be identified in the UpdatePolicySigners section. Certificates that are trusted for supplemental policies must be identified in the SupplementalPolicySigners section. | Yes |
 | **7 Allowed:Debug Policy Augmented** | This option isn't currently supported. | Yes |
 | **8 Required:EV Signers** | This option isn't currently supported. | No |
-| **9 Enabled:Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | No |
-| **10 Enabled:Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a boot-critical driver fails during startup, the WDAC policy is placed in audit mode so that Windows loads. Administrators can validate the reason for the failure in the CodeIntegrity event log. | No |
-| **11 Disabled:Script Enforcement** | This option disables script enforcement options, covering PowerShell, Windows Based Script Host (wscript.exe), Windows Console Based Script Host (cscript.exe), HTA files run in Microsoft HTML Application Host (mshta.exe), and MSXML. Some script hosts may behave differently even when your policy is in audit mode. For more information on script enforcement, see [Script enforcement with WDAC](/windows/security/threat-protection/windows-defender-application-control/design/script-enforcement). <br/> NOTE: This option isn't supported on Windows Server 2016 or Windows 10 1607 LTSB and shouldn't be used on those operating systems. | No |
-| **12 Required:Enforce Store Applications** | If this rule option is enabled, WDAC policies also apply to Universal Windows applications. | No |
-| **13 Enabled:Managed Installer** | Use this option to automatically allow applications installed by a managed installer. For more information, see [Authorize apps deployed with a WDAC managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md) | Yes |
+| **9 Enabled:Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all App Control policies. Setting this rule option allows the F8 menu to appear to physically present users. | No |
+| **10 Enabled:Boot Audit on Failure** | Used when the App Control policy is in enforcement mode. When a boot-critical driver fails during startup, the App Control policy is placed in audit mode so that Windows loads. Administrators can validate the reason for the failure in the CodeIntegrity event log. | No |
+| **11 Disabled:Script Enforcement** | This option disables script enforcement options, covering PowerShell, Windows Based Script Host (wscript.exe), Windows Console Based Script Host (cscript.exe), HTA files run in Microsoft HTML Application Host (mshta.exe), and MSXML. Some script hosts may behave differently even when your policy is in audit mode. For more information on script enforcement, see [Script enforcement with App Control](script-enforcement.md). <br/> NOTE: This option isn't supported on Windows Server 2016 or Windows 10 1607 LTSB and shouldn't be used on those operating systems. | No |
+| **12 Required:Enforce Store Applications** | If this rule option is enabled, App Control policies also apply to Universal Windows applications. | No |
+| **13 Enabled:Managed Installer** | Use this option to automatically allow applications installed by a managed installer. For more information, see [Authorize apps deployed with an App Control managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md) | Yes |
 | **14 Enabled:Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft's Intelligent Security Graph (ISG). | Yes |
-| **15 Enabled:Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option causes WDAC to periodically revalidate the reputation for files previously authorized by the ISG.| No |
-| **16 Enabled:Update Policy No Reboot** | Use this option to allow future WDAC policy updates to apply without requiring a system reboot.<br/> NOTE: This option is only supported on Windows 10, version 1709 and later, or Windows Server 2019 and later.| No |
+| **15 Enabled:Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, App Control sets an extended file attribute that indicates that the file was authorized to run. This option causes App Control to periodically revalidate the reputation for files previously authorized by the ISG.| No |
+| **16 Enabled:Update Policy No Reboot** | Use this option to allow future App Control policy updates to apply without requiring a system reboot.<br/> NOTE: This option is only supported on Windows 10, version 1709 and later, or Windows Server 2019 and later.| No |
 | **17 Enabled:Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it.<br/> NOTE: This option is only supported on Windows 10, version 1903 and later, or Windows Server 2022 and later. | No |
 | **18 Disabled:Runtime FilePath Rule Protection** | This option disables the default runtime check that only allows FilePath rules for paths that are only writable by an administrator.<br/> NOTE: This option is only supported on Windows 10, version 1903 and later, or Windows Server 2022 and later. | Yes |
-| **19 Enabled:Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries.<br/> NOTE: This option is only supported on Windows 10, version 1803 and later, or Windows Server 2019 and later.<br/> NOTE: This option is always enforced if *any* WDAC UMCI policy enables it. There's no audit mode for .NET dynamic code security hardening. | No |
+| **19 Enabled:Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries.<br/> NOTE: This option is only supported on Windows 10, version 1803 and later, or Windows Server 2019 and later.<br/> NOTE: This option is always enforced if *any* App Control UMCI policy enables it. There's no audit mode for .NET dynamic code security hardening. | No |
 | **20 Enabled:Revoked Expired As Unsigned** | Use this option to treat binaries signed with revoked certificates, or expired certificates with the Lifetime Signing EKU on the signature, as "Unsigned binaries" for user-mode process/components, under enterprise signing scenarios. | No |
 | **Enabled:Developer Mode Dynamic Code Trust** | Use this option to trust UWP apps that are [debugged in Visual Studio](/visualstudio/debugger/run-windows-store-apps-on-a-remote-machine) or deployed through device portal when Developer Mode is enabled on the system. | No |
 
-## Windows Defender Application Control file rule levels
+## App Control for Business file rule levels
 
-File rule levels allow administrators to specify the level at which they want to trust their applications. This level of trust could be as granular as the hash of each binary, or as general as a CA certificate. You specify file rule levels when using the WDAC Wizard or WDAC PowerShell cmdlets to create and modify policies.
+File rule levels allow administrators to specify the level at which they want to trust their applications. This level of trust could be as granular as the hash of each binary, or as general as a CA certificate. You specify file rule levels when using the App Control Wizard or App Control PowerShell cmdlets to create and modify policies.
 
-Each file rule level has advantages and disadvantages. Use Table 2 to select the appropriate protection level for your available administrative resources and WDAC deployment scenario.
+Each file rule level has advantages and disadvantages. Use Table 2 to select the appropriate protection level for your available administrative resources and App Control deployment scenario.
 
 > [!NOTE]
-> WDAC signer-based rules only work with RSA cryptography with a maximum key length of 4096 bits. ECC algorithms, such as ECDSA, aren't supported. If you try to allow files by signature based on ECC signatures, you'll see VerificationError = 23 on the corresponding 3089 signature information events. Files can be allowed instead by hash or file attribute rules, or using other signer rules if the file is also signed with signatures using RSA.
+> App Control signer-based rules only work with RSA cryptography with a maximum key length of 4096 bits. ECC algorithms, such as ECDSA, aren't supported. If you try to allow files by signature based on ECC signatures, you'll see VerificationError = 23 on the corresponding 3089 signature information events. Files can be allowed instead by hash or file attribute rules, or using other signer rules if the file is also signed with signatures using RSA.
 
-### Table 2. Windows Defender Application Control policy - file rule levels
+### Table 2. App Control for Business policy - file rule levels
 
 | Rule level | Description |
 |----------- | ----------- |
@@ -70,7 +69,7 @@ Each file rule level has advantages and disadvantages. Use Table 2 to select the
 | **SignedVersion** | This level combines the publisher rule with a version number. It allows anything to run from the specified publisher with a version at or above the specified version number. |
 | **Publisher** | This level combines the PcaCertificate level (typically one certificate below the root) and the common name (CN) of the leaf certificate. You can use this rule level to trust a certificate issued by a particular CA and issued to a specific company you trust (such as Intel, for device drivers). |
 | **FilePublisher** | This level combines the "FileName" attribute of the signed file, plus "Publisher" (PCA certificate with CN of leaf), plus a minimum version number. This option trusts specific files from the specified publisher, with a version at or above the specified version number. By default, this level uses the OriginalFileName attribute of the file's resource header. Use [-SpecificFileNameLevel](#use--specificfilenamelevel-with-filename-filepublisher-or-whqlfilepublisher-level-rules) to choose an alternative attribute, such as ProductName. |
-| **LeafCertificate** | Adds trusted signers at the individual signing certificate level. The benefit of using this level versus the individual hash level is that new versions of the product have different hash values but typically the same signing certificate. When this level is used, no policy update would be needed to run the new version of the application. However, leaf certificates typically have shorter validity periods than other certificate levels, so the WDAC policy must be updated whenever these certificates change. |
+| **LeafCertificate** | Adds trusted signers at the individual signing certificate level. The benefit of using this level versus the individual hash level is that new versions of the product have different hash values but typically the same signing certificate. When this level is used, no policy update would be needed to run the new version of the application. However, leaf certificates typically have shorter validity periods than other certificate levels, so the App Control policy must be updated whenever these certificates change. |
 | **PcaCertificate** | Adds the highest available certificate in the provided certificate chain to signers. This level is typically one certificate below the root because the scan doesn't resolve the complete certificate chain via the local root stores or with an online check. |
 | **RootCertificate** | Not supported. |
 | **WHQL** | Only trusts binaries that were submitted to Microsoft and signed by the Windows Hardware Qualification Lab (WHQL). This level is primarily for kernel binaries. |
@@ -78,7 +77,7 @@ Each file rule level has advantages and disadvantages. Use Table 2 to select the
 | **WHQLFilePublisher** | This level combines the "FileName" attribute of the signed file, plus "WHQLPublisher", plus a minimum version number. This level is primarily for kernel binaries. By default, this level uses the OriginalFileName attribute of the file's resource header. Use [-SpecificFileNameLevel](#use--specificfilenamelevel-with-filename-filepublisher-or-whqlfilepublisher-level-rules) to choose an alternative attribute, such as ProductName. |
 
 > [!NOTE]
-> When you create WDAC policies with [New-CIPolicy](/powershell/module/configci/new-cipolicy), you can specify a primary file rule level, by including the **-Level** parameter. For discovered binaries that cannot be trusted based on the primary file rule criteria, use the **-Fallback** parameter. For example, if the primary file rule level is PCACertificate, but you would like to trust the unsigned applications as well, using the Hash rule level as a fallback adds the hash values of binaries that did not have a signing certificate.
+> When you create App Control policies with [New-CIPolicy](/powershell/module/configci/new-cipolicy), you can specify a primary file rule level, by including the **-Level** parameter. For discovered binaries that cannot be trusted based on the primary file rule criteria, use the **-Fallback** parameter. For example, if the primary file rule level is PCACertificate, but you would like to trust the unsigned applications as well, using the Hash rule level as a fallback adds the hash values of binaries that did not have a signing certificate.
 
 > [!NOTE]
 > When applicable, minimum and maximum version numbers in a file rule are referenced as MinimumFileVersion and MaximumFileVersion respectively in the policy XML.
@@ -91,16 +90,16 @@ Each file rule level has advantages and disadvantages. Use Table 2 to select the
 
 For example, consider an IT professional in a department that runs many servers. They only want to run software signed by the companies that provide their hardware, operating system, antivirus, and other important software. They know that their servers also run an internally written application that is unsigned but is rarely updated. They want to allow this application to run.
 
-To create the WDAC policy, they build a reference server on their standard hardware, and install all of the software that their servers are known to run. Then they run [New-CIPolicy](/powershell/module/configci/new-cipolicy) with **-Level Publisher** (to allow software from their software providers, the "Publishers") and **-Fallback Hash** (to allow the internal, unsigned application). They deploy the policy in auditing mode to determine the potential impact from enforcing the policy. With the help of the audit data, they update their WDAC policies to include any other software they want to run. Then they enable the WDAC policy in enforced mode for their servers.
+To create the App Control policy, they build a reference server on their standard hardware, and install all of the software that their servers are known to run. Then they run [New-CIPolicy](/powershell/module/configci/new-cipolicy) with **-Level Publisher** (to allow software from their software providers, the "Publishers") and **-Fallback Hash** (to allow the internal, unsigned application). They deploy the policy in auditing mode to determine the potential impact from enforcing the policy. With the help of the audit data, they update their App Control policies to include any other software they want to run. Then they enable the App Control policy in enforced mode for their servers.
 
-As part of normal operations, they'll eventually install software updates, or perhaps add software from the same software providers. Because the "Publisher" remains the same on those updates and software, they don't need to update their WDAC policy. If the unsigned, internal application is updated, they must also update the WDAC policy to allow the new version.
+As part of normal operations, they'll eventually install software updates, or perhaps add software from the same software providers. Because the "Publisher" remains the same on those updates and software, they don't need to update their App Control policy. If the unsigned, internal application is updated, they must also update the App Control policy to allow the new version.
 
 ## File rule precedence order
 
-WDAC has a built-in file rule conflict logic that translates to precedence order. It first processes all explicit deny rules it finds. Then, it processes any explicit allow rules. If no deny or allow rule exists, WDAC checks for a [Managed Installer claim](../deployment/deploy-wdac-policies-with-memcm.md) if allowed by the policy. Lastly, WDAC falls back to the [ISG](use-wdac-with-intelligent-security-graph.md) if allowed by the policy.
+App Control has a built-in file rule conflict logic that translates to precedence order. It first processes all explicit deny rules it finds. Then, it processes any explicit allow rules. If no deny or allow rule exists, App Control checks for a [Managed Installer claim](../deployment/deploy-appcontrol-policies-with-memcm.md) if allowed by the policy. Lastly, App Control falls back to the [ISG](use-appcontrol-with-intelligent-security-graph.md) if allowed by the policy.
 
 > [!NOTE]
-> To make it easier to reason over your WDAC policies, we recommend maintaining separate ALLOW and DENY policies on Windows versions that support [multiple WDAC policies](/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies).
+> To make it easier to reason over your App Control policies, we recommend maintaining separate ALLOW and DENY policies on Windows versions that support [multiple App Control policies](deploy-multiple-appcontrol-policies.md).
 
 ## Use -SpecificFileNameLevel with FileName, FilePublisher, or WHQLFilePublisher level rules
 
@@ -125,19 +124,19 @@ Filepath rules don't provide the same security guarantees that explicit signer r
 
 ### User-writable filepaths
 
-By default, WDAC performs a user-writeability check at runtime that ensures that the current permissions on the specified filepath only allow write access for admin users.
+By default, App Control performs a user-writeability check at runtime that ensures that the current permissions on the specified filepath only allow write access for admin users.
 
-There's a defined list of SIDs that WDAC recognizes as admins. If a filepath allows write permissions for any SID not in this list, the filepath is considered to be user-writeable, even if the SID is associated to a custom admin user. To handle these special cases, you can override WDAC's runtime admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option described earlier.
+There's a defined list of SIDs that App Control recognizes as admins. If a filepath allows write permissions for any SID not in this list, the filepath is considered to be user-writeable, even if the SID is associated to a custom admin user. To handle these special cases, you can override App Control's runtime admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option described earlier.
 
-WDAC's list of well-known admin SIDs are:
+App Control's list of well-known admin SIDs are:
 
 S-1-3-0; S-1-5-18; S-1-5-19; S-1-5-20; S-1-5-32-544; S-1-5-32-549; S-1-5-32-550; S-1-5-32-551; S-1-5-32-577; S-1-5-32-559; S-1-5-32-568; S-1-15-2-1430448594-2639229838-973813799-439329657-1197984847-4069167804-1277922394; S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523.
 
 When filepath rules are generated using [New-CIPolicy](/powershell/module/configci/new-cipolicy), a unique, fully qualified path rule is generated for every file discovered in the scanned path(s). To create rules that instead allow all files under a specified folder path, use [New-CIPolicyRule](/powershell/module/configci/new-cipolicyrule) to define rules containing wildcards, using the [-FilePathRules](/powershell/module/configci/new-cipolicyrule#parameters) switch.
 
-### Using wildcards in WDAC filepath rules
+### Using wildcards in App Control filepath rules
 
-The following wildcards can be used in WDAC filepath rules:
+The following wildcards can be used in App Control filepath rules:
 
 | Wildcard character | Meaning | Supported operating systems |
 |------------ | ----------- | ----------- |
@@ -157,30 +156,30 @@ You can also use the following macros when the exact volume may vary: `%OSDRIVE%
 |------------ | ----------- | ----------- |
 | **C:\\Windows\\\*** <br> **D:\\EnterpriseApps\\MyApp\\\*** <br> **%OSDRIVE%\\Windows\\\*** | Wildcards placed at the end of a path authorize all files in the immediate path and its subdirectories recursively. | Windows 11, Windows 10, and Windows Server 2022 |
 | **\*\\bar.exe** | Wildcards placed at the beginning of a path allow the exact specified filename in any location. | Windows 11, Windows 10, and Windows Server 2022 |
-| **C:\\\*\\CCMCACHE\\\*\\7z????-x64.exe** <br> **%OSDRIVE%\\\*\\CCMCACHE\\\*\\7z????-x64.exe** | Wildcards used in the middle of a path allow all files that match that pattern. Consider carefully all the possible matches, particularly if your policy disables the admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option. In this example, both of these hypothetical paths would match: <br> *`C:\WINDOWS\CCMCACHE\12345\7zabcd-x64.exe`* <br> *`C:\USERS\WDACUSER\Downloads\Malware\CCMCACHE\Pwned\7zhaha-x64.exe`* | Windows 11 only |
+| **C:\\\*\\CCMCACHE\\\*\\7z????-x64.exe** <br> **%OSDRIVE%\\\*\\CCMCACHE\\\*\\7z????-x64.exe** | Wildcards used in the middle of a path allow all files that match that pattern. Consider carefully all the possible matches, particularly if your policy disables the admin-writeable check with the **Disabled:Runtime FilePath Rule Protection** option. In this example, both of these hypothetical paths would match: <br> *`C:\WINDOWS\CCMCACHE\12345\7zabcd-x64.exe`* <br> *`C:\USERS\AppControlUSER\Downloads\Malware\CCMCACHE\Pwned\7zhaha-x64.exe`* | Windows 11 only |
 
 Without a wildcard, the filepath rule allows only a specific file (ex. `C:\foo\bar.exe`).
 
 > [!NOTE]
-> When authoring WDAC policies with Configuration Manager, there is an option to create rules for specified files and folders. These rules **aren't** WDAC filepath rules. Rather, Configuration Manager performs a one-time scan of the specified files and folders and builds rules for any binaries found in those locations at the time of that scan. File changes to those specified files and folders after that scan won't be allowed unless the Configuration Manager policy is reapplied.
+> When authoring App Control policies with Configuration Manager, there is an option to create rules for specified files and folders. These rules **aren't** App Control filepath rules. Rather, Configuration Manager performs a one-time scan of the specified files and folders and builds rules for any binaries found in those locations at the time of that scan. File changes to those specified files and folders after that scan won't be allowed unless the Configuration Manager policy is reapplied.
 
 ## More information about hashes
 
-WDAC uses the [Authenticode/PE image hash algorithm](https://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/Authenticode_PE.docx) when calculating the hash of a file. Unlike the more commonly known [flat file hash](/powershell/module/microsoft.powershell.utility/get-filehash), the Authenticode hash calculation omits the file's checksum, the Certificate Table, and the Attribute Certificate Table. Therefore, the Authenticode hash of a file doesn't change when the file's signatures and timestamps are altered, or when a digital signature is removed from the file. With the help of the Authenticode hash, WDAC provides added security and less management overhead so customers don't need to revise the policy hash rules when the digital signature on the file is updated.
+App Control uses the [Authenticode/PE image hash algorithm](https://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/Authenticode_PE.docx) when calculating the hash of a file. Unlike the more commonly known [flat file hash](/powershell/module/microsoft.powershell.utility/get-filehash), the Authenticode hash calculation omits the file's checksum, the Certificate Table, and the Attribute Certificate Table. Therefore, the Authenticode hash of a file doesn't change when the file's signatures and timestamps are altered, or when a digital signature is removed from the file. With the help of the Authenticode hash, App Control provides added security and less management overhead so customers don't need to revise the policy hash rules when the digital signature on the file is updated.
 
 The Authenticode/PE image hash can be calculated for digitally signed and unsigned files.
 
 ### Why does scan create four hash rules per XML file?
 
 The PowerShell cmdlet produces an Authenticode Sha1 Hash, Sha256 Hash, Sha1 Page Hash, Sha256 Page Hash.
-During validation, WDAC selects which hashes are calculated based on how the file is signed and the scenario in which the file is used.  For example, if the file is page-hash signed, WDAC validates each page of the file and avoids loading the entire file in memory to calculate the full sha256 authenticode hash.
+During validation, App Control selects which hashes are calculated based on how the file is signed and the scenario in which the file is used.  For example, if the file is page-hash signed, App Control validates each page of the file and avoids loading the entire file in memory to calculate the full sha256 authenticode hash.
 
-In the cmdlets, rather than try to predict which hash will be used, we precalculate and use the four hashes (sha1/sha2 authenticode, and sha1/sha2 of first page).  This method is also resilient to changes in how the file is signed since your WDAC policy has more than one hash available for the file already.
+In the cmdlets, rather than try to predict which hash will be used, we precalculate and use the four hashes (sha1/sha2 authenticode, and sha1/sha2 of first page).  This method is also resilient to changes in how the file is signed since your App Control policy has more than one hash available for the file already.
 
 ### Why does scan create eight hash rules for certain files?
 
 Separate rules are created for UMCI and KMCI. If the cmdlets can't determine that a file only runs in user-mode or in the kernel, then rules are created for both signing scenarios out of an abundance of caution. If you know that a particular file only loads in either user-mode or kernel, then you can safely remove the extra rules.
 
-### When does WDAC use the flat file hash value?
+### When does App Control use the flat file hash value?
 
-There are some rare cases where a file's format doesn't conform to the Authenticode spec and so WDAC falls back to use the flat file hash. This behavior can occur for many reasons, such as if changes are made to the in-memory version of the file at runtime. In such cases, you'll see that the hash shown in the correlated 3089 signature information event matches the flat file hash from the 3076/3077 block event. To create rules for files with an invalid format, you can add hash rules to the policy for the flat file hash using the WDAC Wizard or by editing the policy XML directly.
+There are some rare cases where a file's format doesn't conform to the Authenticode spec and so App Control falls back to use the flat file hash. This behavior can occur for many reasons, such as if changes are made to the in-memory version of the file at runtime. In such cases, you'll see that the hash shown in the correlated 3089 signature information event matches the flat file hash from the 3076/3077 block event. To create rules for files with an invalid format, you can add hash rules to the policy for the flat file hash using the App Control Wizard or by editing the policy XML directly.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/understand-wdac-policy-design-decisions.md b/windows/security/application-security/application-control/app-control-for-business/design/understand-appcontrol-policy-design-decisions.md
similarity index 53%
rename from windows/security/application-security/application-control/windows-defender-application-control/design/understand-wdac-policy-design-decisions.md
rename to windows/security/application-security/application-control/app-control-for-business/design/understand-appcontrol-policy-design-decisions.md
index abaeda5f34..f808763724 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/understand-wdac-policy-design-decisions.md
+++ b/windows/security/application-security/application-control/app-control-for-business/design/understand-appcontrol-policy-design-decisions.md
@@ -1,21 +1,20 @@
 ---
-title: Understand Windows Defender Application Control policy design decisions
-description: Understand Windows Defender Application Control policy design decisions.
+title: Understand App Control for Business policy design decisions
+description: Understand App Control for Business policy design decisions.
 ms.localizationpriority: medium
-ms.date: 02/08/2018
+ms.date: 09/11/2024
 ms.topic: conceptual
 ---
 
-# Understand Windows Defender Application Control policy design decisions
+# Understand App Control for Business policy design decisions
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-This article is for the IT professional. It lists the design questions, possible answers, and ramifications for decisions made, when planning application control policies deployment using Windows Defender Application Control (WDAC), within a Windows operating system environment.
+This article is for the IT professional. It lists the design questions, possible answers, and ramifications for decisions made, when planning App Control policies deployment using App Control for Business, within a Windows operating system environment.
 
-When you begin the design and planning process, you should consider the ramifications of your design choices. The resulting decisions will affect your policy deployment scheme and subsequent application control policy maintenance.
+When you begin the design and planning process, you should consider the ramifications of your design choices. The resulting decisions will affect your policy deployment scheme and subsequent App Control policy maintenance.
 
-You should consider using Windows Defender Application Control as part of your organization's application control policies if the following are true:
+You should consider using App Control for Business as part of your organization's App Control policies if the following are true:
 
 -   You have deployed or plan to deploy the supported versions of Windows in your organization.
 -   You need improved control over the access to your organization's applications and the data your users access.
@@ -26,28 +25,28 @@ You should consider using Windows Defender Application Control as part of your o
 
 ## Decide what policies to create
 
-Beginning with Windows 10, version 1903, Windows Defender Application Control allows [multiple simultaneous policies](deploy-multiple-wdac-policies.md) to be applied to each device. This concurrent application opens up many new use cases for organizations, but your policy management can easily become unwieldy without a well-thought-out plan for the number and types of policies to create.
+Beginning with Windows 10, version 1903, App Control for Business allows [multiple simultaneous policies](deploy-multiple-appcontrol-policies.md) to be applied to each device. This concurrent application opens up many new use cases for organizations, but your policy management can easily become unwieldy without a well-thought-out plan for the number and types of policies to create.
 
-The first step is to define the desired "circle-of-trust" for your WDAC policies. By "circle-of-trust," we mean a description of the business intent of the policy expressed in natural language. This "circle-of-trust" definition will guide you as you create the actual policy rules for your policy XML.
+The first step is to define the desired "circle-of-trust" for your App Control policies. By "circle-of-trust," we mean a description of the business intent of the policy expressed in natural language. This "circle-of-trust" definition will guide you as you create the actual policy rules for your policy XML.
 
 For example, the DefaultWindows policy, which can be found under %OSDrive%\Windows\schemas\CodeIntegrity\ExamplePolicies, establishes a "circle-of-trust" that allows Windows, 3rd-party hardware and software kernel drivers, and applications from the Microsoft Store.
 
-Configuration Manager uses the DefaultWindows policy as the basis for its policy but then modifies the policy rules to allow Configuration Manager and its dependencies, sets the managed installer policy rule, and additionally configures Configuration Manager as a managed installer. It also can optionally authorize apps with positive reputation and perform a one-time scan of folder paths specified by the Configuration Manager administrator, which adds rules for any apps found in the specified paths on the managed endpoint. This process establishes the "circle-of-trust" for Configuration Manager's native WDAC integration.
+Configuration Manager uses the DefaultWindows policy as the basis for its policy but then modifies the policy rules to allow Configuration Manager and its dependencies, sets the managed installer policy rule, and additionally configures Configuration Manager as a managed installer. It also can optionally authorize apps with positive reputation and perform a one-time scan of folder paths specified by the Configuration Manager administrator, which adds rules for any apps found in the specified paths on the managed endpoint. This process establishes the "circle-of-trust" for Configuration Manager's native App Control integration.
 
-The following questions can help you plan your Windows Defender Application Control deployment and determine the right "circle-of-trust" for your policies. They aren't in priority or sequential order, and aren't meant to be an exhaustive set of design considerations.
+The following questions can help you plan your App Control for Business deployment and determine the right "circle-of-trust" for your policies. They aren't in priority or sequential order, and aren't meant to be an exhaustive set of design considerations.
 
-## WDAC design considerations
+## App Control design considerations
 
 ### How are apps managed and deployed in your organization?
 
-Organizations with well-defined, centrally managed app management and deployment processes can create more restrictive, more secure policies. Other organizations may be able to deploy Windows Defender Application Control with more relaxed rules, or may choose to deploy WDAC in audit mode to gain better visibility to the apps being used in their organization.
+Organizations with well-defined, centrally managed app management and deployment processes can create more restrictive, more secure policies. Other organizations may be able to deploy App Control for Business with more relaxed rules, or may choose to deploy App Control in audit mode to gain better visibility to the apps being used in their organization.
 
 | Possible answers | Design considerations|
 | - | - |
-| All apps are centrally managed and deployed using endpoint management tools like [Microsoft Intune](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager). | Organizations that centrally manage all apps are best-suited for application control. Windows Defender Application Control options like [managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md) can make it easy to authorize apps that are deployed by the organization's app distribution management solution. |
-| Some apps are centrally managed and deployed, but teams can install other apps for their members. | [Supplemental policies](deploy-multiple-wdac-policies.md) can be used to allow team-specific exceptions to your core organization-wide Windows Defender Application Control policy. Alternatively, teams can use managed installers to install their team-specific apps, or admin-only file path rules can be used to allow apps installed by admin users. |
-| Users and teams are free to download and install apps but the organization wants to restrict that right to prevalent and reputable apps only. | Windows Defender Application Control can integrate with Microsoft's [Intelligent Security Graph](use-wdac-with-intelligent-security-graph.md) (the same source of intelligence that powers Microsoft Defender Antivirus and Windows Defender SmartScreen) to allow only apps and binaries that have positive reputation. |
-| Users and teams are free to download and install apps without restriction. | Windows Defender Application Control policies can be deployed in audit mode to gain insight into the apps and binaries running in your organization without impacting user and team productivity.|
+| All apps are centrally managed and deployed using endpoint management tools like [Microsoft Intune](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager). | Organizations that centrally manage all apps are best-suited for App Control. App Control for Business options like [managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md) can make it easy to authorize apps that are deployed by the organization's app distribution management solution. |
+| Some apps are centrally managed and deployed, but teams can install other apps for their members. | [Supplemental policies](deploy-multiple-appcontrol-policies.md) can be used to allow team-specific exceptions to your core organization-wide App Control for Business policy. Alternatively, teams can use managed installers to install their team-specific apps, or admin-only file path rules can be used to allow apps installed by admin users. |
+| Users and teams are free to download and install apps but the organization wants to restrict that right to prevalent and reputable apps only. | App Control for Business can integrate with Microsoft's [Intelligent Security Graph](use-appcontrol-with-intelligent-security-graph.md) (the same source of intelligence that powers Microsoft Defender Antivirus and Windows Defender SmartScreen) to allow only apps and binaries that have positive reputation. |
+| Users and teams are free to download and install apps without restriction. | App Control for Business policies can be deployed in audit mode to gain insight into the apps and binaries running in your organization without impacting user and team productivity.|
 
 ### Are internally developed line-of-business (LOB) apps and apps developed by third-party companies digitally signed?
 
@@ -55,17 +54,17 @@ Traditional Win32 apps on Windows can run without being digitally signed. This p
 
 | Possible answers | Design considerations |
 | - | - |
-| All apps used in your organization must be signed. | Organizations that enforce [codesigning](../deployment/use-code-signing-for-better-control-and-protection.md) for all executable code are best-positioned to protect their Windows computers from malicious code execution. Windows Defender Application Control rules can be created to authorize apps and binaries from the organization's internal development teams and from trusted independent software vendors (ISV). |
-| Apps used in your organization don't need to meet any codesigning requirements. | Organizations can  [use built-in Windows tools](../deployment/deploy-catalog-files-to-support-wdac.md) to add organization-specific App Catalog signatures to existing apps as a part of the app deployment process, which can be used to authorize code execution. Solutions like Microsoft Intune offer multiple ways to distribute signed App Catalogs. |
+| All apps used in your organization must be signed. | Organizations that enforce [codesigning](../deployment/use-code-signing-for-better-control-and-protection.md) for all executable code are best-positioned to protect their Windows computers from malicious code execution. App Control for Business rules can be created to authorize apps and binaries from the organization's internal development teams and from trusted independent software vendors (ISV). |
+| Apps used in your organization don't need to meet any codesigning requirements. | Organizations can  [use built-in Windows tools](../deployment/deploy-catalog-files-to-support-appcontrol.md) to add organization-specific App Catalog signatures to existing apps as a part of the app deployment process, which can be used to authorize code execution. Solutions like Microsoft Intune offer multiple ways to distribute signed App Catalogs. |
 
-### Are there specific groups in your organization that need customized application control policies?
+### Are there specific groups in your organization that need customized App Control policies?
 
-Most business teams or departments have specific security requirements that pertain to data access and the applications used to access that data. Consider the scope of the project for each group and the group's priorities before you deploy application control policies for the entire organization. There's overhead in managing policies that might lead you to choose between broad, organization-wide policies and multiple team-specific policies.
+Most business teams or departments have specific security requirements that pertain to data access and the applications used to access that data. Consider the scope of the project for each group and the group's priorities before you deploy App Control policies for the entire organization. There's overhead in managing policies that might lead you to choose between broad, organization-wide policies and multiple team-specific policies.
 
 | Possible answers | Design considerations |
 | - | - |
-| Yes | WDAC policies can be created unique per team, or team-specific supplemental policies can be used to expand what is allowed by a common, centrally defined base policy.|
-| No | WDAC policies can be applied globally to applications that are installed on PCs running Windows 10 and Windows 11. Depending on the number of apps you need to control, managing all the rules and exceptions might be challenging.|
+| Yes | App Control policies can be created unique per team, or team-specific supplemental policies can be used to expand what is allowed by a common, centrally defined base policy.|
+| No | App Control policies can be applied globally to applications that are installed on PCs running Windows 10 and Windows 11. Depending on the number of apps you need to control, managing all the rules and exceptions might be challenging.|
 
 ### Does your IT department have resources to analyze application usage, and to design and manage the policies?
 
@@ -73,7 +72,7 @@ The time and resources that are available to you to perform the research and ana
 
 | Possible answers | Design considerations |
 | - | - |
-| Yes | Invest the time to analyze your organization's application control requirements, and plan a complete deployment that uses rules that are constructed as possible.|
+| Yes | Invest the time to analyze your organization's App Control requirements, and plan a complete deployment that uses rules that are constructed as possible.|
 | No | Consider a focused and phased deployment for specific groups by using few rules. As you apply controls to applications in a specific group, learn from that deployment to plan your next deployment. Alternatively, you can create a policy with a broad trust profile to authorize as many apps as possible. |
 
 ### Does your organization have Help Desk support?
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/understanding-appcontrol-policy-settings.md b/windows/security/application-security/application-control/app-control-for-business/design/understanding-appcontrol-policy-settings.md
new file mode 100644
index 0000000000..995deda446
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/understanding-appcontrol-policy-settings.md
@@ -0,0 +1,72 @@
+---
+title: Understanding App Control for Business secure settings
+description: Learn about secure settings in App Control for Business.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: conceptual
+---
+
+# Understanding App Control Policy Settings
+
+App Control for Business policies expose a Settings section where policy authors can define arbitrary secure settings. Secure Settings provide local admin tamper-free settings for secure boot enabled systems, with policy signing enabled. Settings consist of a Provider, Key, ValueName, and a setting value. Setting values can be of type boolean, ulong, binary, and string. Applications can query for policy settings using WldpQuerySecurityPolicy.
+
+An example settings section of an App Control for Business policy:
+
+```xml
+<Settings>
+  <Setting Provider="Contoso" Key="FooApplication" ValueName="DisableMacroExecution">
+    <Value>
+      <Boolean>true</Boolean>
+    </Value>
+  </Setting>
+</Settings>
+```
+
+## Example Scenario
+
+An application that may want to restrict its capabilities, when used on a system with an active App Control for Business policy. Application authors can define an App Control policy, setting their application queries, in order to disable certain features. For example, if Contoso's Foo Application wants to disable a risky feature, such as macro execution, they can define an App Control policy setting, and query for it at runtime. Contoso can then instruct IT administrators to configure the setting in their App Control policy, if they don't want Foo Application to execute macros on a system with an App Control policy.
+
+## WldpQuerySecurityPolicy
+
+API that queries the secure settings of an App Control for Business policy.
+
+### Syntax
+
+``` C++
+HRESULT WINAPI WldpQuerySecurityPolicy(
+    _In_ const UNICODE_STRING * Provider,
+    _In_ const UNICODE_STRING * Key,
+    _In_ const UNICODE_STRING * ValueName,
+    _Out_ PWLDP_SECURE_SETTING_VALUE_TYPE ValueType,
+    _Out_writes_bytes_opt_(*ValueSize) PVOID Value,
+    _Inout_ PULONG ValueSize)
+```
+
+### Parameters
+
+Provider [in]
+Setting Provider name.
+
+#### Key [in]
+
+Key name of the Key-Value pair under Setting Provider "Provider".
+
+#### ValueName [in]
+
+The value name of the "Key-Value" pair.
+
+#### ValueType [in, out]
+
+Pointer to receive the value type.
+
+#### Value [in, out]
+
+Pointer to a buffer to receive the value. The buffer should be of size "ValueSize". If this value is NULL, this function returns the required buffer size for Value.
+
+#### ValueSize [in, out]
+
+On input, it indicates the buffer size of "Value". On successful return, it indicates the size of data written to Value buffer.
+
+#### Return Value
+
+This method returns S_OK if successful or a failure code otherwise.
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md b/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md
new file mode 100644
index 0000000000..d6fdc8e670
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md
@@ -0,0 +1,32 @@
+---
+title: Use an App Control for Business policy to control specific plug-ins, add-ins, and modules
+description: App Control policies can be used not only to control applications, but also to control whether specific plug-ins, add-ins, and modules can run from specific apps.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: how-to
+---
+
+# Use an App Control for Business policy to control specific plug-ins, add-ins, and modules
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+You can use App Control for Business policies to control applications and also to control whether specific plug-ins, add-ins, and modules can run from specific apps (such as a line-of-business application or a browser):
+
+| Approach | Guideline |
+|---|---|
+| You can work from a list of plug-ins, add-ins, or modules that you want only a specific application to be able to run. Other applications would be blocked from running them. | Use `New-CIPolicyRule` with the `-AppID` option. |
+| In addition, you can work  from a list of plug-ins, add-ins, or modules that you want to block in a specific application. Other applications would be allowed to run them. | Use `New-CIPolicyRule` with the `-AppID` and `-Deny` options. |
+
+For example, to add rules to an App Control policy called "Lamna_FullyManagedClients_Audit.xml" that allow **addin1.dll** and **addin2.dll** to be run by **ERP1.exe**, Lamna's enterprise resource planning (ERP) application, run the following commands. In the second command, **+=** is used to add a second rule to the **$rule** variable:
+
+```powershell
+$rule = New-CIPolicyRule -DriverFilePath '.\temp\addin1.dll' -Level FileName -AppID '.\ERP1.exe'
+$rule += New-CIPolicyRule -DriverFilePath '.\temp\addin2.dll' -Level FileName -AppID '.\ERP1.exe'
+```
+
+As another example, to create an App Control for Business policy that blocks **addin3.dll** from running in Microsoft Word, run the following command. You must include the `-Deny` option to block the specified add-ins in the specified application. Once you have all the rules you want, you can merge them into an existing App Control policy using the Merge-CIPolicy cmdlet as shown here:
+
+```powershell
+$rule += New-CIPolicyRule -DriverFilePath '.\temp\addin3.dll' -Level FileName -Deny -AppID '.\winword.exe'
+Merge-CIPolicy -OutputFilePath .\Lamna_FullyManagedClients_Audit.xml -PolicyPaths .\Lamna_FullyManagedClients_Audit.xml -Rules $rule
+```
diff --git a/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-with-intelligent-security-graph.md b/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-with-intelligent-security-graph.md
new file mode 100644
index 0000000000..14ebfd9259
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-with-intelligent-security-graph.md
@@ -0,0 +1,96 @@
+---
+title: Authorize reputable apps with the Intelligent Security Graph (ISG)
+description: Automatically authorize applications that Microsoft's ISG recognizes as having known good reputation.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: how-to
+---
+
+# Authorize reputable apps with the Intelligent Security Graph (ISG)
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+App Control can be difficult to implement in organizations that don't deploy and manage applications through an IT-managed system. In such environments, users can acquire the applications they want to use for work, making it hard to build an effective App Control policy.
+
+To reduce end-user friction and helpdesk calls, you can set App Control for Business to automatically allow applications that Microsoft's Intelligent Security Graph (ISG) recognizes as having known good reputation. The ISG option helps organizations begin to implement App Control even when the organization has limited control over their app ecosystem. To learn more about the ISG, see the Security section in [Major services and features in Microsoft Graph](/graph/overview-major-services).
+
+> [!WARNING]
+> Binaries that are critical to boot the system must be allowed using explicit rules in your App Control policy. Do not rely on the ISG to authorize these files.
+>
+> The ISG option is not the recommended way to allow apps that are business critical. You should always authorize business critical apps using explicit allow rules or by installing them with a [managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md).
+
+## How does App Control work with the ISG?
+
+The ISG isn't a "list" of apps. Rather, it uses the same vast security intelligence and machine learning analytics that power Microsoft Defender SmartScreen and Microsoft Defender Antivirus to help classify applications as having "known good", "known bad", or "unknown" reputation. This cloud-based AI is based on trillions of signals collected from Windows endpoints and other data sources, and processed every 24 hours. As a result, the decision from the cloud can change.
+
+App Control only checks the ISG for binaries that aren't explicitly allowed or denied by your policy, and that weren't installed by a managed installer. When such a binary runs on a system with App Control enabled with the ISG option, App Control will check the file's reputation by sending its hash and signing information to the cloud. If the ISG reports that the file has a "known good" reputation, then the file will be allowed to run. Otherwise, it will be blocked by App Control.
+
+If the file with good reputation is an application installer, the installer's reputation will pass along to any files that it writes to disk. This way, all the files needed to install and run an app inherit the positive reputation data from the installer. Files authorized based on the installer's reputation will have the $KERNEL.SMARTLOCKER.ORIGINCLAIM kernel Extended Attribute (EA) written to the file.
+
+App Control periodically requeries the reputation data on a file. Additionally, enterprises can specify that any cached reputation results are flushed on reboot by using the **Enabled:Invalidate EAs on Reboot** option.
+
+## Configuring ISG authorization for your App Control policy
+
+Setting up the ISG is easy using any management solution you wish. Configuring the ISG option involves these basic steps:
+
+- [Ensure that the **Enabled:Intelligent Security Graph authorization** option is set in the App Control policy XML](#ensure-that-the-isg-option-is-set-in-the-app-control-policy-xml)
+- [Enable the necessary services to allow App Control to use the ISG correctly on the client](#enable-the-necessary-services-to-allow-app-control-to-use-the-isg-correctly-on-the-client)
+
+### Ensure that the ISG option is set in the App Control policy XML
+
+To allow apps and binaries based on the Microsoft Intelligent Security Graph, the **Enabled:Intelligent Security Graph authorization** option must be specified in the App Control policy. This step can be done with the Set-RuleOption cmdlet. You should also set the **Enabled:Invalidate EAs on Reboot** option so that ISG results are verified again after each reboot. The ISG option isn't recommended for devices that don't have regular access to the internet. The following example shows both options set.
+
+```xml
+<Rules>
+    <Rule>
+      <Option>Enabled:Unsigned System Integrity Policy</Option>
+    </Rule>
+    <Rule>
+      <Option>Enabled:Advanced Boot Options Menu</Option>
+    </Rule>
+    <Rule>
+      <Option>Required:Enforce Store Applications</Option>
+    </Rule>
+    <Rule>
+      <Option>Enabled:UMCI</Option>
+    </Rule>
+    <Rule>
+      <Option>Enabled:Managed Installer</Option>
+    </Rule>
+    <Rule>
+      <Option>Enabled:Intelligent Security Graph Authorization</Option>
+    </Rule>
+    <Rule>
+      <Option>Enabled:Invalidate EAs on Reboot</Option>
+    </Rule>
+</Rules>
+```
+
+### Enable the necessary services to allow App Control to use the ISG correctly on the client
+
+In order for the heuristics used by the ISG to function properly, other components in Windows must be enabled. You can configure these components by running the appidtel executable in `c:\windows\system32`.
+
+```console
+appidtel start
+```
+
+This step isn't required for App Control policies deployed over MDM, as the CSP will enable the necessary components. This step is also not required when the ISG is configured using Configuration Manager's App Control integration.
+
+## Security considerations with the ISG option
+
+Since the ISG is a heuristic-based mechanism, it doesn't provide the same security guarantees as explicit allow or deny rules. It's best suited where users operate with standard user rights and where a security monitoring solution like Microsoft Defender for Endpoint is used.
+
+Processes running with kernel privileges can circumvent App Control by setting the ISG extended file attribute to make a binary appear to have known good reputation.
+
+Also, since the ISG option passes along reputation from app installers to the binaries they write to disk, it can over-authorize files in some cases. For example, if the installer launches the app upon completion, any files the app writes during that first run will also be allowed.
+
+## Known limitations with using the ISG
+
+Since the ISG only allows binaries that are "known good", there are cases where the ISG may be unable to predict whether legitimate software is safe to run. If that happens, the software will be blocked by App Control. In this case, you need to allow the software with a rule in your App Control policy, deploy a catalog signed by a certificate trusted in the App Control policy, or install the software from an App Control managed installer. Installers or applications that dynamically create binaries at runtime, and self-updating applications, may exhibit this symptom.
+
+Packaged apps aren't supported with the ISG and will need to be separately authorized in your App Control policy. Since packaged apps have a strong app identity and must be signed, it's straightforward to [authorize packaged apps](manage-packaged-apps-with-appcontrol.md) with your App Control policy.
+
+The ISG doesn't authorize kernel mode drivers. The App Control policy must have rules that allow the necessary drivers to run.
+
+> [!NOTE]
+> A rule that explicitly denies or allows a file will take precedence over that file's reputation data. Microsoft Intune's built-in App Control support includes the option to trust apps with good reputation via the ISG, but it has no option to add explicit allow or deny rules. In most cases, customers using App Control will need to deploy a custom App Control policy (which can include the ISG option if desired) using [Intune's OMA-URI functionality](../deployment/deploy-appcontrol-policies-using-intune.md#deploy-app-control-policies-with-custom-oma-uri).
diff --git a/windows/security/application-security/application-control/app-control-for-business/feature-availability.md b/windows/security/application-security/application-control/app-control-for-business/feature-availability.md
new file mode 100644
index 0000000000..378c52a9d2
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/feature-availability.md
@@ -0,0 +1,30 @@
+---
+title: App Control for Business feature availability
+description: Compare App Control for Business and AppLocker feature availability.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: overview
+---
+
+# App Control for Business and AppLocker feature availability
+
+> [!NOTE]
+> Some capabilities of App Control for Business are only available on specific Windows versions. Review the following table to learn more.
+
+| Capability  | App Control for Business | AppLocker   |
+|-------------|------|-------------|
+| Platform support    | Available on Windows 10, Windows 11, and Windows Server 2016 or later.  | Available on Windows 8 or later.   |
+| Edition availability     | Available on Windows 10, Windows 11, and Windows Server 2016 or later. <br> App Control PowerShell cmdlets aren't available on Home edition, but policies are effective on all editions. | Policies are supported on all editions Windows 10 version 2004 and newer with [KB 5024351](https://support.microsoft.com/help/5024351).<br><br>Windows versions older than version 2004, including Windows Server 2019:<br><ul><li>Policies deployed through GP are only supported on Enterprise and Server editions.</li><li>Policies deployed through MDM are supported on all editions.</li></ul>|
+| Management solutions   | <ul><li>[Intune](deployment/deploy-appcontrol-policies-using-intune.md)</li><li>[Microsoft Configuration Manager](/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager) (limited built-in policies or custom policy deployment via software distribution)</li><li>[Group policy](deployment/deploy-appcontrol-policies-using-group-policy.md) </li><li>[Script](deployment/deploy-appcontrol-policies-with-script.md)</li></ul>  | <ul><li>[Intune](/windows/client-management/mdm/applocker-csp) (custom policy deployment via OMA-URI only)</li><li>Configuration Manager (custom policy deployment via software distribution only)</li><li>[Group Policy](applocker/determine-group-policy-structure-and-rule-enforcement.md)</li><li>PowerShell</li><ul> |
+| Per-user and Per-user group rules | Not available (policies are device-wide).  | Available on Windows 8+.  |
+| Kernel mode policies  | Available on Windows 10, Windows 11, and Windows Server 2016 or later. | Not available. |
+| [Rule option 11 - Disabled:Script Enforcement](design/script-enforcement.md)  | Available on all versions of Windows 10 except 1607 LTSB, Windows 11, and Windows Server 2019 and above. **Disabled:Script Enforcement** isn't supported on **Windows Server 2016** or on **Windows 10 1607 LTSB** and shouldn't be used on those platforms. Doing so results in unexpected script enforcement behaviors. | MSI and Script rule collection is separately configurable. |
+| [Per-app rules](design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md)  | Available on Windows 10, Windows 11, and Windows Server 2019 or later.  | Not available. |
+| [Managed Installer (MI)](design/configure-authorized-apps-deployed-with-a-managed-installer.md)  | Available on Windows 10, Windows 11, and Windows Server 2019 or later. | Not available. |
+| [Reputation-Based intelligence](design/use-appcontrol-with-intelligent-security-graph.md)     | Available on Windows 10, Windows 11, and Windows Server 2019 or later.  | Not available. |
+| [Multiple policy support](design/deploy-multiple-appcontrol-policies.md) | Available on Windows 10, version 1903 and above, Windows 11, and Windows Server 2022.  | Not available.  |
+| [Path-based rules](design/select-types-of-rules-to-create.md) | Available on Windows 10, version 1903 and above, Windows 11, and Windows Server 2022 or later. Exclusions aren't supported. Runtime user-writeability checks enforced by default.  | Available on Windows 8+. Exclusions are supported. No runtime user-writeability check. |
+| [COM object allowlisting](design/allow-com-object-registration-in-appcontrol-policy.md) | Available on Windows 10, Windows 11, and Windows Server 2019 or later. | Not available. |
+| [Packaged app rules](design/manage-packaged-apps-with-appcontrol.md) | Available on Windows 10, Windows 11, and Windows Server 2019 or later.  | Available on Windows 8+. |
+| Enforceable file types | <ul><li>Driver files: .sys</li><li>Executable files: .exe and .com</li><li>DLLs: .dll, .rll and .ocx</li><li>Windows Installer files: .msi, .mst, and .msp</li><li>Scripts: .ps1, .vbs, and .js</li><li>Packaged apps and packaged app installers: .appx</li></ul>| <ul><li>Executable files: .exe and .com</li><li>[Optional] DLLs: .dll, .rll and .ocx</li><li>Windows Installer files: .msi, .mst, and .msp</li><li>Scripts: .ps1, .bat, .cmd, .vbs, and .js</li><li>Packaged apps and packaged app installers: .appx</li></ul>|
+| [Application ID (AppId) Tagging](AppIdTagging/appcontrol-appid-tagging-guide.md) | Available on Windows 10, version 20H1 and later, and Windows 11. | Not available. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-edit-gp.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-edit-gp.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-edit-gp.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-edit-gp.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-intune-custom-oma-uri.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-intune-custom-oma-uri.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-intune-custom-oma-uri.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-intune-custom-oma-uri.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-confirm-base-policy-modification.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-confirm-base-policy-modification.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-confirm-base-policy-modification.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-confirm-base-policy-modification.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-file-attribute-rule.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-file-attribute-rule.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-manual-pfn-rule.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-manual-pfn-rule.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-manual-pfn-rule.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-manual-pfn-rule.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-pfn-rule.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-pfn-rule.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-pfn-rule.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-pfn-rule.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-publisher-rule.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-publisher-rule.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-custom-publisher-rule.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-custom-publisher-rule.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-edit-policy-rules.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-edit-policy-rules.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-edit-remove-file-rule.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-edit-remove-file-rule.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-files-expanded.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-files-expanded.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-files-expanded.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-files-expanded.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-files.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-files.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-files.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-files.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-export-expanded.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-export-expanded.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-export-expanded.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-export-expanded.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-export.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-export.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-export.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-export.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-parsing-expanded.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-parsing-expanded.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-parsing-expanded.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-parsing-expanded.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-parsing.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-parsing.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-mde-ah-parsing.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-mde-ah-parsing.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-system-expanded.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-system-expanded.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-system-expanded.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-system-expanded.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-system.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-system.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-log-system.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-log-system.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-rule-creation-expanded.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-rule-creation-expanded.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-rule-creation-expanded.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-rule-creation-expanded.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-rule-creation.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-rule-creation.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-event-rule-creation.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-event-rule-creation.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-merge.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-merge.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-merge.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-merge.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-rule-options-UI-advanced-collapsed.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-rule-options-UI-advanced-collapsed.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-rule-options-UI-advanced-collapsed.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-rule-options-UI-advanced-collapsed.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-rule-options-UI.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-rule-options-UI.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-rule-options-UI.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-rule-options-UI.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-supplemental-expandable.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-supplemental-expandable.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-supplemental-not-base.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-supplemental-not-base.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-supplemental-not-base.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-supplemental-not-base.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-supplemental-policy-rule-options-UI.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-supplemental-policy-rule-options-UI.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-supplemental-policy-rule-options-UI.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-supplemental-policy-rule-options-UI.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-template-selection.png b/windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-template-selection.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/wdac-wizard-template-selection.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appcontrol-wizard-template-selection.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/appid-wdac-wizard-1.png b/windows/security/application-security/application-control/app-control-for-business/images/appid-appcontrol-wizard-1.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/appid-wdac-wizard-1.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appid-appcontrol-wizard-1.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/appid-wdac-wizard-2.png b/windows/security/application-security/application-control/app-control-for-business/images/appid-appcontrol-wizard-2.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/appid-wdac-wizard-2.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appid-appcontrol-wizard-2.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/appid-pid-task-mgr.png b/windows/security/application-security/application-control/app-control-for-business/images/appid-pid-task-mgr.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/appid-pid-task-mgr.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appid-pid-task-mgr.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/appid-pid-windbg-token.png b/windows/security/application-security/application-control/app-control-for-business/images/appid-pid-windbg-token.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/appid-pid-windbg-token.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appid-pid-windbg-token.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/appid-pid-windbg.png b/windows/security/application-security/application-control/app-control-for-business/images/appid-pid-windbg.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/appid-pid-windbg.png
rename to windows/security/application-security/application-control/app-control-for-business/images/appid-pid-windbg.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/bit-toggling-keyboard-icon.png b/windows/security/application-security/application-control/app-control-for-business/images/bit-toggling-keyboard-icon.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/bit-toggling-keyboard-icon.png
rename to windows/security/application-security/application-control/app-control-for-business/images/bit-toggling-keyboard-icon.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/calculator-menu-icon.png b/windows/security/application-security/application-control/app-control-for-business/images/calculator-menu-icon.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/calculator-menu-icon.png
rename to windows/security/application-security/application-control/app-control-for-business/images/calculator-menu-icon.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/calculator-with-hex-in-binary.png b/windows/security/application-security/application-control/app-control-for-business/images/calculator-with-hex-in-binary.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/calculator-with-hex-in-binary.png
rename to windows/security/application-security/application-control/app-control-for-business/images/calculator-with-hex-in-binary.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig12-verifysigning.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig12-verifysigning.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig12-verifysigning.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig12-verifysigning.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig13-createnewgpo.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig13-createnewgpo.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig13-createnewgpo.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig13-createnewgpo.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig14-createnewfile.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig14-createnewfile.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig14-createnewfile.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig14-createnewfile.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig15-setnewfileprops.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig15-setnewfileprops.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig15-setnewfileprops.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig15-setnewfileprops.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig16-specifyinfo.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig16-specifyinfo.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig16-specifyinfo.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig16-specifyinfo.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig17-specifyinfo.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig17-specifyinfo.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig17-specifyinfo.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig17-specifyinfo.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig18-specifyux.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig18-specifyux.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig18-specifyux.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig18-specifyux.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig19-customsettings.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig19-customsettings.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig19-customsettings.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig19-customsettings.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig20-setsoftwareinv.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig20-setsoftwareinv.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig20-setsoftwareinv.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig20-setsoftwareinv.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig21-pathproperties.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig21-pathproperties.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig21-pathproperties.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig21-pathproperties.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig23-exceptionstocode.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig23-exceptionstocode.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig23-exceptionstocode.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig23-exceptionstocode.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig24-creategpo.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig24-creategpo.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig24-creategpo.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig24-creategpo.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig26-enablecode.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig26-enablecode.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig26-enablecode.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig26-enablecode.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig27-managecerttemp.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig27-managecerttemp.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig27-managecerttemp.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig27-managecerttemp.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig29-enableconstraints.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig29-enableconstraints.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig29-enableconstraints.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig29-enableconstraints.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig30-selectnewcert.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig30-selectnewcert.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig30-selectnewcert.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig30-selectnewcert.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig31-getmoreinfo.png b/windows/security/application-security/application-control/app-control-for-business/images/dg-fig31-getmoreinfo.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/dg-fig31-getmoreinfo.png
rename to windows/security/application-security/application-control/app-control-for-business/images/dg-fig31-getmoreinfo.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/event-3077.png b/windows/security/application-security/application-control/app-control-for-business/images/event-3077.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/event-3077.png
rename to windows/security/application-security/application-control/app-control-for-business/images/event-3077.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/event-3089.png b/windows/security/application-security/application-control/app-control-for-business/images/event-3089.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/event-3089.png
rename to windows/security/application-security/application-control/app-control-for-business/images/event-3089.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/event-3099-options.png b/windows/security/application-security/application-control/app-control-for-business/images/event-3099-options.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/event-3099-options.png
rename to windows/security/application-security/application-control/app-control-for-business/images/event-3099-options.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/hex-icon.png b/windows/security/application-security/application-control/app-control-for-business/images/hex-icon.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/hex-icon.png
rename to windows/security/application-security/application-control/app-control-for-business/images/hex-icon.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/known-issue-appid-dll-rule-xml.png b/windows/security/application-security/application-control/app-control-for-business/images/known-issue-appid-dll-rule-xml.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/known-issue-appid-dll-rule-xml.png
rename to windows/security/application-security/application-control/app-control-for-business/images/known-issue-appid-dll-rule-xml.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/known-issue-appid-dll-rule.png b/windows/security/application-security/application-control/app-control-for-business/images/known-issue-appid-dll-rule.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/known-issue-appid-dll-rule.png
rename to windows/security/application-security/application-control/app-control-for-business/images/known-issue-appid-dll-rule.png
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-confirm-wdac-rule.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-confirm-appcontrol-rule.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-confirm-wdac-rule.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-confirm-appcontrol-rule.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-policy-2.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-policy-2.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-policy-2.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-policy-2.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-policy.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-policy.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-policy.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-policy.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-rule-2.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-rule-2.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-rule-2.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-rule-2.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-rule-3.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-rule-3.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-rule-3.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-rule-3.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-rule.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-rule.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-create-wdac-rule.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-create-appcontrol-rule.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac-2.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol-2.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac-2.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol-2.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac-3.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol-3.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac-3.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol-3.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac-4.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol-4.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac-4.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol-4.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac.jpg b/windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol.jpg
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/memcm/memcm-deploy-wdac.jpg
rename to windows/security/application-security/application-control/app-control-for-business/images/memcm/memcm-deploy-appcontrol.jpg
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/images/policyflow.png b/windows/security/application-security/application-control/app-control-for-business/images/policyflow.png
similarity index 100%
rename from windows/security/application-security/application-control/windows-defender-application-control/images/policyflow.png
rename to windows/security/application-security/application-control/app-control-for-business/images/policyflow.png
diff --git a/windows/security/application-security/application-control/app-control-for-business/includes/feature-availability-note.md b/windows/security/application-security/application-control/app-control-for-business/includes/feature-availability-note.md
new file mode 100644
index 0000000000..52d0be397b
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/includes/feature-availability-note.md
@@ -0,0 +1,9 @@
+---
+author: vinaypamnani-msft
+ms.author: vinpa
+ms.topic: include
+ms.date: 09/11/2024
+---
+
+> [!NOTE]
+> Some capabilities of App Control for Business are only available on specific Windows versions. Learn more about [App Control feature availability](../feature-availability.md).
\ No newline at end of file
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/index.yml b/windows/security/application-security/application-control/app-control-for-business/index.yml
similarity index 51%
rename from windows/security/application-security/application-control/windows-defender-application-control/index.yml
rename to windows/security/application-security/application-control/app-control-for-business/index.yml
index 04252abe74..576efefff8 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/index.yml
+++ b/windows/security/application-security/application-control/app-control-for-business/index.yml
@@ -3,12 +3,12 @@
 title: Application Control for Windows
 metadata:
   title: Application Control for Windows
-  description: Landing page for Windows Defender Application Control
+  description: Landing page for App Control for Business
   ms.topic: landing-page
   author: vinaypamnani-msft
   ms.author: vinpa
   manager: aaroncz
-  ms.date: 08/14/2024
+  ms.date: 09/11/2024
 # linkListType: overview | how-to-guide | tutorial | video
 landingContent:
 # Cards and links should be based on top customer tasks or top subjects
@@ -19,45 +19,43 @@ landingContent:
       - linkListType: overview
         links:
           - text: What is Application Control?
-            url: wdac.md
-          - text: What is Windows Defender Application Control (WDAC)?
-            url: wdac-and-applocker-overview.md
+            url: appcontrol.md
           - text: What is AppLocker?
             url: applocker\applocker-overview.md
-          - text: WDAC and AppLocker feature availability
-            url: feature-availability.md
+          - text: App Control and AppLocker overview
+            url: appcontrol-and-applocker-overview.md
   # Card
   - title: Learn about Policy Design
     linkLists:
       - linkListType: overview
         links:
-          - text: Using code signing to simplify application control
+          - text: Using code signing to simplify app control
             url: deployment/use-code-signing-for-better-control-and-protection.md
-          - text: Applications that can bypass WDAC and how to block them
-            url: design/applications-that-can-bypass-wdac.md
+          - text: Applications that can bypass App Control and how to block them
+            url: design/applications-that-can-bypass-appcontrol.md
           - text: Microsoft's Recommended Driver Blocklist
             url: design/microsoft-recommended-driver-block-rules.md
-          - text: Example WDAC policies
-            url: design/example-wdac-base-policies.md
+          - text: Example App Control policies
+            url: design/example-appcontrol-base-policies.md
           - text: Managing multiple policies
-            url: design/deploy-multiple-wdac-policies.md
+            url: design/deploy-multiple-appcontrol-policies.md
       - linkListType: how-to-guide
         links:
-          - text: Create a WDAC policy for a lightly managed device
-            url: design/create-wdac-policy-for-lightly-managed-devices.md
-          - text: Create a WDAC policy for a fully managed device
-            url: design/create-wdac-policy-for-fully-managed-devices.md
-          - text: Create a WDAC policy for a fixed-workload
-            url: design/create-wdac-policy-using-reference-computer.md
-          - text: Create a WDAC blocklist policy
-            url: design/create-wdac-deny-policy.md
-          - text: Deploying catalog files for WDAC management
-            url: deployment/deploy-catalog-files-to-support-wdac.md
-          - text: Using the WDAC Wizard
-            url: design/wdac-wizard.md
+          - text: Create an App Control policy for a lightly managed device
+            url: design/create-appcontrol-policy-for-lightly-managed-devices.md
+          - text: Create an App Control policy for a fully managed device
+            url: design/create-appcontrol-policy-for-fully-managed-devices.md
+          - text: Create an App Control policy for a fixed-workload
+            url: design/create-appcontrol-policy-using-reference-computer.md
+          - text: Create an App Control blocklist policy
+            url: design/create-appcontrol-deny-policy.md
+          - text: Deploying catalog files for App Control management
+            url: deployment/deploy-catalog-files-to-support-appcontrol.md
+          - text: Using the App Control Wizard
+            url: design/appcontrol-wizard.md
       #- linkListType: Tutorial (videos)
       #  links:
-      #    - text: Using the WDAC Wizard
+      #    - text: Using the App Control Wizard
       #      url:  video md
       #    - text: Specifying custom values
       #      url:  video md
@@ -68,50 +66,50 @@ landingContent:
         links:
           - text: Understanding policy and file rules
             url: design/select-types-of-rules-to-create.md
-          - text: Understanding WDAC secure settings
-            url: design/understanding-wdac-policy-settings.md
+          - text: Understanding App Control secure settings
+            url: design/understanding-appcontrol-policy-settings.md
       - linkListType: how-to-guide
         links:
           - text: Allow managed installer and configure managed installer rules
             url: design/configure-authorized-apps-deployed-with-a-managed-installer.md
           - text: Allow reputable apps with ISG
-            url: design/use-wdac-with-intelligent-security-graph.md
+            url: design/use-appcontrol-with-intelligent-security-graph.md
           - text: Managed MSIX and Appx Packaged Apps
-            url: design/manage-packaged-apps-with-wdac.md
+            url: design/manage-packaged-apps-with-appcontrol.md
           - text: Allow com object registration
-            url: design/allow-com-object-registration-in-wdac-policy.md
+            url: design/allow-com-object-registration-in-appcontrol-policy.md
           - text: Manage plug-ins, add-ins, and modules
-            url: design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md
+            url: design/use-appcontrol-policy-to-control-specific-plug-ins-add-ins-and-modules.md
   # Card
-  - title: Learn how to deploy WDAC Policies
+  - title: Learn how to deploy App Control Policies
     linkLists:
       - linkListType: overview
         links:
           - text: Using signed policies to protect against tampering
-            url: deployment/use-signed-policies-to-protect-wdac-against-tampering.md
+            url: deployment/use-signed-policies-to-protect-appcontrol-against-tampering.md
           - text: Audit mode policies
-            url: deployment/audit-wdac-policies.md
+            url: deployment/audit-appcontrol-policies.md
           - text: Enforcement mode policies
-            url: deployment/enforce-wdac-policies.md
-          - text: Disabling WDAC policies
-            url: deployment/disable-wdac-policies.md
+            url: deployment/enforce-appcontrol-policies.md
+          - text: Disabling App Control policies
+            url: deployment/disable-appcontrol-policies.md
       - linkListType: tutorial
         links:
           - text: Deployment with MDM
-            url: deployment/deploy-wdac-policies-using-intune.md
+            url: deployment/deploy-appcontrol-policies-using-intune.md
           - text: Deployment with Configuration Manager
-            url: deployment/deploy-wdac-policies-with-memcm.md
+            url: deployment/deploy-appcontrol-policies-with-memcm.md
           - text: Deployment with script and refresh policy
-            url: deployment/deploy-wdac-policies-with-script.md
+            url: deployment/deploy-appcontrol-policies-with-script.md
           - text: Deployment with group policy
-            url: deployment/deploy-wdac-policies-using-group-policy.md
+            url: deployment/deploy-appcontrol-policies-using-group-policy.md
   # Card
-  - title: Learn how to troubleshoot and debug WDAC events
+  - title: Learn how to troubleshoot and debug App Control events
     linkLists:
       - linkListType: overview
         links:
           - text: Debugging and troubleshooting
-            url: operations/wdac-debugging-and-troubleshooting.md
+            url: operations/appcontrol-debugging-and-troubleshooting.md
           - text: Understanding event IDs
             url: operations/event-id-explanations.md
           - text: Understanding event Tags
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-debugging-and-troubleshooting.md b/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-debugging-and-troubleshooting.md
similarity index 60%
rename from windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-debugging-and-troubleshooting.md
rename to windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-debugging-and-troubleshooting.md
index dc6c98cb9b..d83c66d961 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-debugging-and-troubleshooting.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-debugging-and-troubleshooting.md
@@ -1,24 +1,23 @@
 ---
-title: WDAC debugging and troubleshooting guide
-description: Learn how to debug and troubleshoot app and script failures when using WDAC
+title: App Control debugging and troubleshooting guide
+description: Learn how to debug and troubleshoot app and script failures when using App Control
 ms.topic: how-to
-ms.date: 04/06/2023
+ms.date: 09/11/2024
 ---
 
-# WDAC debugging and troubleshooting
+# App Control debugging and troubleshooting
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-This article describes how to debug and troubleshoot app and script failures when using Windows Defender Application Control (WDAC).
+This article describes how to debug and troubleshoot app and script failures when using App Control for Business.
 
-## 1 - Gather WDAC diagnostic data
+## 1 - Gather App Control diagnostic data
 
-Before debugging and troubleshooting WDAC issues, you must collect information from a device exhibiting the problem behavior.
+Before debugging and troubleshooting App Control issues, you must collect information from a device exhibiting the problem behavior.
 
 Run the following commands from an elevated PowerShell window to collect the diagnostic information you may need:
 
-1. Gather general WDAC diagnostic data and copy it to %userprofile%\AppData\Local\Temp\DiagOutputDir\CiDiag:
+1. Gather general App Control diagnostic data and copy it to %userprofile%\AppData\Local\Temp\DiagOutputDir\CiDiag:
 
     ```powershell
     cidiag.exe /stop
@@ -26,9 +25,9 @@ Run the following commands from an elevated PowerShell window to collect the dia
 
     If CiDiag.exe isn't present in your version of Windows, gather this information manually:
 
-    - WDAC policy binaries from the [Windows and EFI system partitions](known-issues.md#wdac-policy-file-locations)
-    - [WDAC event logs](#core-wdac-event-logs)
-    - [AppLocker event logs](#core-wdac-event-logs)
+    - App Control policy binaries from the [Windows and EFI system partitions](known-issues.md#app-control-policy-file-locations)
+    - [App Control event logs](#core-app-control-event-logs)
+    - [AppLocker event logs](#core-app-control-event-logs)
     - [Other event logs that may contain useful information](#other-windows-event-logs-that-may-be-useful) from other Windows apps and services
 
 2. Save the device's System Information to the CiDiag folder:
@@ -37,7 +36,7 @@ Run the following commands from an elevated PowerShell window to collect the dia
     msinfo32.exe /report $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\SystemInformation.txt
     ```
 
-3. Use [CiTool.exe](citool-commands.md) to inventory the list of WDAC policies on the device. Skip this step if CiTool.exe isn't present in your version of Windows.
+3. Use [CiTool.exe](citool-commands.md) to inventory the list of App Control policies on the device. Skip this step if CiTool.exe isn't present in your version of Windows.
 
     ```powershell
     citool.exe -lp -json > $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\CiToolOutput.json
@@ -76,9 +75,9 @@ Run the following commands from an elevated PowerShell window to collect the dia
     sc.exe query appid > $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLockerServices.txt; sc.exe query appidsvc >> $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLockerServices.txt; sc.exe query applockerfltr >> $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLockerServices.txt
     ```
 
-### Core WDAC event logs
+### Core App Control event logs
 
-WDAC events are generated under two locations:
+App Control events are generated under two locations:
 
 - Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational
 - Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script
@@ -87,7 +86,7 @@ Within the CiDiag output directory, these event logs are called CIOperational.ev
 
 ### Other Windows event logs that may be useful
 
-Sometimes, you may be able to supplement the information contained in the core WDAC event logs with information found in these other event logs. CIDiag.exe doesn't collect the ones shown in *italics*.
+Sometimes, you may be able to supplement the information contained in the core App Control event logs with information found in these other event logs. CIDiag.exe doesn't collect the ones shown in *italics*.
 
 - Applications and Services logs - Microsoft - Windows - CodeIntegrity - Verbose
 - Applications and Services logs - Microsoft - Windows - AppLocker - EXE and DLL
@@ -104,61 +103,61 @@ Sometimes, you may be able to supplement the information contained in the core W
 
 Having gathered the necessary diagnostic information from a device, you're ready to begin your analysis of the diagnostic data collected in the previous section.
 
-1. Verify the set of WDAC policies that are active and enforced. Confirm that only those policies you expect to be active are currently active. Be aware of the [Windows inbox policies](inbox-wdac-policies.md) that may also be active. You can use either of these methods:
+1. Verify the set of App Control policies that are active and enforced. Confirm that only those policies you expect to be active are currently active. Be aware of the [Windows inbox policies](inbox-appcontrol-policies.md) that may also be active. You can use either of these methods:
 
     - Review the output from *CiTool.exe -lp*, if applicable, which was saved to the CIDiag output directory as CiToolOutput.json. See [use Microsoft Edge to view the formatted json file](/microsoft-edge/devtools-guide-chromium/json-viewer/json-viewer).
-    - Review all [policy activation events](/windows/security/threat-protection/windows-defender-application-control/event-id-explanations#wdac-policy-activation-events) from the core WDAC event log found at  **Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational**. Within the CIDiag output directory, this event log is called CIOperational.evtx.
+    - Review all [policy activation events](event-id-explanations.md#app-control-policy-activation-events) from the core App Control event log found at  **Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational**. Within the CIDiag output directory, this event log is called CIOperational.evtx.
 
-2. Review any [block events for executables, dlls, and drivers](/windows/security/threat-protection/windows-defender-application-control/event-id-explanations#wdac-block-events-for-executables-dlls-and-drivers) from the core WDAC event log found at  **Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational**. Within the CIDiag output directory, this event log is called CIOperational.evtx. Use information from the block events and their correlated 3089 signature details event(s) to investigate any blocks that are unexplained or unexpected. See the blocked executable example described later in this article for reference.
-3. Review any [block events for packaged apps, MSI installers, scripts, and COM objects](/windows/security/threat-protection/windows-defender-application-control/event-id-explanations#wdac-block-events-for-packaged-apps-msi-installers-scripts-and-com-objects) from the core script enforcement event log found at  **Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script**. Within the CIDiag output directory, this event log is called ALMsiAndScript.evtx. Use information from the block events and their correlated 8038 signature details event(s) to investigate any blocks that are unexplained or unexpected.
+2. Review any [block events for executables, dlls, and drivers](event-id-explanations.md#app-control-block-events-for-executables-dlls-and-drivers) from the core App Control event log found at  **Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational**. Within the CIDiag output directory, this event log is called CIOperational.evtx. Use information from the block events and their correlated 3089 signature details event(s) to investigate any blocks that are unexplained or unexpected. See the blocked executable example described later in this article for reference.
+3. Review any [block events for packaged apps, MSI installers, scripts, and COM objects](event-id-explanations.md#app-control-block-events-for-packaged-apps-msi-installers-scripts-and-com-objects) from the core script enforcement event log found at  **Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script**. Within the CIDiag output directory, this event log is called ALMsiAndScript.evtx. Use information from the block events and their correlated 8038 signature details event(s) to investigate any blocks that are unexplained or unexpected.
 
-Most WDAC-related issues, including app and script failures, can be diagnosed using the preceding steps.
+Most App Control-related issues, including app and script failures, can be diagnosed using the preceding steps.
 
 ### Event analysis for an example blocked executable
 
-Here's an example of detailed EventData from a typical WDAC enforcement mode block event 3077, and one of its correlated 3089 signature information events. The tables that follow each event screenshot describe some of the elements contained in the events. Following the event descriptions is a step-by-step walkthrough explaining how to use the events to understand why the block occurred.
+Here's an example of detailed EventData from a typical App Control enforcement mode block event 3077, and one of its correlated 3089 signature information events. The tables that follow each event screenshot describe some of the elements contained in the events. Following the event descriptions is a step-by-step walkthrough explaining how to use the events to understand why the block occurred.
 
-#### Event 3077 - WDAC enforcement block event
+#### Event 3077 - App Control enforcement block event
 
 ![Example 3077 block event for PowerShell.exe.](../images/event-3077.png)
 
 | Element name | Description |
 | ----- | ----- |
-| System - Correlation - \[ActivityID\] | **Not shown in screenshot** <br> Use the correlation ActivityID to match a WDAC block event with one or more 3089 signature events. |
-| File Name | The file's path and name on disk that was blocked from running. Since the name on disk is mutable, this value **isn't** the one used when creating WDAC file rules with `-Level FileName`. Instead, see the OriginalFileName element later in this table. |
+| System - Correlation - \[ActivityID\] | **Not shown in screenshot** <br> Use the correlation ActivityID to match an App Control block event with one or more 3089 signature events. |
+| File Name | The file's path and name on disk that was blocked from running. Since the name on disk is mutable, this value **isn't** the one used when creating App Control file rules with `-Level FileName`. Instead, see the OriginalFileName element later in this table. |
 | Process Name | The path and name of the file that attempted to run the blocked file. Also called the parent process. |
-| Requested Signing Level | The Windows signing authorization level the code needed to pass in order to run. See [Requested and validated signing level](/windows/security/threat-protection/windows-defender-application-control/event-tag-explanations#requested-and-validated-signing-level). |
-| Validated Signing Level | The Windows signing authorization level the code was given. See [Requested and validated signing level](/windows/security/threat-protection/windows-defender-application-control/event-tag-explanations#requested-and-validated-signing-level). |
+| Requested Signing Level | The Windows signing authorization level the code needed to pass in order to run. See [Requested and validated signing level](event-tag-explanations.md#requested-and-validated-signing-level). |
+| Validated Signing Level | The Windows signing authorization level the code was given. See [Requested and validated signing level](event-tag-explanations.md#requested-and-validated-signing-level). |
 | Status | Windows NT status code. You can use `certutil.exe -error <status>` to look up the meaning of the status code. |
 | SHA1 Hash | The SHA1 Authenticode hash for the blocked file. |
 | SHA256 Hash | The SHA256 Authenticode hash for the blocked file. |
 | SHA1 Flat Hash | The SHA1 flat file hash for the blocked file. |
 | SHA256 Flat Hash | The SHA256 flat file hash for the blocked file. |
-| PolicyName | The friendly name of the WDAC policy that caused the block event. A separate 3077 block event (or 3076 audit block event) is shown for each policy that blocks the file from running. |
-| PolicyId | The friendly ID value of the WDAC policy that caused the block event. |
-| PolicyHash | The SHA256 Authenticode hash of the WDAC policy binary that caused the block event. |
-| OriginalFileName | The immutable file name set by the developer in the blocked file's resource header. This value is the one used when creating WDAC file rules with `-Level FileName`. |
+| PolicyName | The friendly name of the App Control policy that caused the block event. A separate 3077 block event (or 3076 audit block event) is shown for each policy that blocks the file from running. |
+| PolicyId | The friendly ID value of the App Control policy that caused the block event. |
+| PolicyHash | The SHA256 Authenticode hash of the App Control policy binary that caused the block event. |
+| OriginalFileName | The immutable file name set by the developer in the blocked file's resource header. This value is the one used when creating App Control file rules with `-Level FileName`. |
 | InternalName | Another immutable value set by the developer in the blocked file's resource header. You can substitute this value for the OriginalFileName in file rules with `-Level FileName -SpecificFileNameLevel InternalName`. |
 | FileDescription | Another immutable value set by the developer in the blocked file's resource header. You can substitute this value for the OriginalFileName in file rules with `-Level FileName -SpecificFileNameLevel FileDescription`. |
 | ProductName | Another immutable value set by the developer in the blocked file's resource header. You can substitute this value for the OriginalFileName in file rules with `-Level FileName -SpecificFileNameLevel ProductName`. |
 | FileVersion | The policy's VersionEx value used to enforce version control over signed policies. |
-| PolicyGUID | The PolicyId of the WDAC policy that caused the block event. |
+| PolicyGUID | The PolicyId of the App Control policy that caused the block event. |
 | UserWriteable | A boolean value indicating if the file was in a user-writeable location. This information is useful for diagnosing issues when allowing by FilePath rules. |
 | PackageFamilyName | The Package Family Name for the packaged app (MSIX) that includes the blocked file. |
 
-#### Event 3089 - WDAC signature information event
+#### Event 3089 - App Control signature information event
 
 ![Example 3089 signature information event for PowerShell.exe.](../images/event-3089.png)
 
 | Element name | Description |
 | ----- | ----- |
-| System - Correlation - \[ActivityID\] | Use the correlation ActivityID to match a WDAC signature event with its block event. |
+| System - Correlation - \[ActivityID\] | Use the correlation ActivityID to match an App Control signature event with its block event. |
 | TotalSignatureCount | The total number of signatures detected for the blocked file. |
 | Signature | The index count, starting at 0, of the current signature shown in this 3089 event. If the file had multiple signatures, you'll find other 3089 events for the other signatures. |
-| Hash | The hash value that WDAC used to match the file. This value should match one of the four hashes shown on the 3077 or 3076 block event. If no signatures were found for the file (TotalSignatureCount = 0), then only the hash value is shown. |
-| SignatureType | The [type of signature](/windows/security/threat-protection/windows-defender-application-control/event-tag-explanations#signaturetype). |
-| ValidatedSigningLevel | The Windows signing authorization level the signature met. See [Requested and validated signing level](/windows/security/threat-protection/windows-defender-application-control/event-tag-explanations#requested-and-validated-signing-level). |
-| VerificationError | The reason this particular signature failed to pass the WDAC policy. See [VerificationError](/windows/security/threat-protection/windows-defender-application-control/event-tag-explanations#verificationerror). |
+| Hash | The hash value that App Control used to match the file. This value should match one of the four hashes shown on the 3077 or 3076 block event. If no signatures were found for the file (TotalSignatureCount = 0), then only the hash value is shown. |
+| SignatureType | The [type of signature](event-tag-explanations.md#signaturetype). |
+| ValidatedSigningLevel | The Windows signing authorization level the signature met. See [Requested and validated signing level](event-tag-explanations.md#requested-and-validated-signing-level). |
+| VerificationError | The reason this particular signature failed to pass the App Control policy. See [VerificationError](event-tag-explanations.md#verificationerror). |
 | PublisherName | The common name (CN) value from the leaf certificate. |
 | IssuerName | The CN value from the highest available certificate in the certificate chain. This level is typically one certificate below the root. |
 | PublisherTBSHash | The TBS hash of the leaf certificate. |
@@ -166,7 +165,7 @@ Here's an example of detailed EventData from a typical WDAC enforcement mode blo
 
 #### Step-by-step walkthrough of the example 3077 and 3089 events
 
-Now let's walk through how to use the event data in the example 3077 and 3089 events to understand why the WDAC policy blocked this file.
+Now let's walk through how to use the event data in the example 3077 and 3089 events to understand why the App Control policy blocked this file.
 
 ##### Understand what file is being blocked and the block context
 
@@ -174,11 +173,11 @@ Referring to the 3077 event, locate the information that identifies the policy,
 
 In the example, the file being blocked is PowerShell.exe, which is part of Windows and would normally be expected to run. However, in this case, the policy was based off of the Windows in S mode policy template, which doesn't allow script hosts to run as a way to limit the attack surface. For S mode, this block event is a success. But let's assume the policy author was unaware of that constraint when they chose the template, and treat this block as unexpected.
 
-##### Determine why WDAC rejected the file
+##### Determine why App Control rejected the file
 
-Again referring to the 3077 event, we see the Requested Signing Level of 2 means the code must pass the WDAC policy. But the Validated Signing Level of 1 means the code was treated as though unsigned. "Unsigned" could mean the file was truly unsigned, signed but with an invalid certificate, or signed but without any certificates allowed by the WDAC policy.
+Again referring to the 3077 event, we see the Requested Signing Level of 2 means the code must pass the App Control policy. But the Validated Signing Level of 1 means the code was treated as though unsigned. "Unsigned" could mean the file was truly unsigned, signed but with an invalid certificate, or signed but without any certificates allowed by the App Control policy.
 
-Now, let's inspect the correlated 3089 event(s) for the blocked file. In the example, we're looking at only the first signature (Signature index 0) found on a file that had multiple signatures. For this signature, the ValidatedSigningLevel is 12, meaning it has a Microsoft Windows product signature. The VerificationError of 21 means that the signature didn't pass the WDAC policy.
+Now, let's inspect the correlated 3089 event(s) for the blocked file. In the example, we're looking at only the first signature (Signature index 0) found on a file that had multiple signatures. For this signature, the ValidatedSigningLevel is 12, meaning it has a Microsoft Windows product signature. The VerificationError of 21 means that the signature didn't pass the App Control policy.
 
 It's important to review the information for each correlated 3089 event as each signature may have a different ValidatedSigningLevel and VerificationError.
 
@@ -191,11 +190,11 @@ It's important to review the information for each correlated 3089 event as each
 
 ## 3 - Resolve common problems
 
-Having analyzed the WDAC diagnostic data, you can take steps to resolve the issue or do more debugging steps. Following are some common problems and steps you can try to resolve or further isolate the root issue:
+Having analyzed the App Control diagnostic data, you can take steps to resolve the issue or do more debugging steps. Following are some common problems and steps you can try to resolve or further isolate the root issue:
 
 ### Issue: A file was blocked that you want to allow
 
-- Use data from the core WDAC event logs to add rules to allow the blocked file.
+- Use data from the core App Control event logs to add rules to allow the blocked file.
 - Redeploy the file or app using a managed installer if your policy trusts managed installers.
 
 ### Issue: A policy is active that is unexpected
@@ -208,51 +207,51 @@ This condition may exist if:
 - A policy was incorrectly deployed to the device.
 - An attacker with administrator access has applied a policy to cause denial of service for some critical processes.
 
-To resolve such an issue, follow the instructions to [Remove WDAC policies](/windows/security/threat-protection/windows-defender-application-control/disable-windows-defender-application-control-policies) for the identified policy.
+To resolve such an issue, follow the instructions to [Remove App Control policies](../deployment/disable-appcontrol-policies.md) for the identified policy.
 
-### Issue: An unhandled app failure is occurring and no WDAC events are observed
+### Issue: An unhandled app failure is occurring and no App Control events are observed
 
-Some apps alter their behavior when a user mode WDAC policy is active, which can result in unexpected failures. It can also be a side-effect of script enforcement for apps that don't properly handle the enforcement behaviors implemented by the script hosts.
+Some apps alter their behavior when a user mode App Control policy is active, which can result in unexpected failures. It can also be a side-effect of script enforcement for apps that don't properly handle the enforcement behaviors implemented by the script hosts.
 
 Try to isolate the root cause by doing the following actions:
 
 - Check the other event logs listed in section 1 of this article for events corresponding with the unexpected app failures.
-- Temporarily replace the WDAC policy with another policy that [disables script enforcement](/windows/security/threat-protection/windows-defender-application-control/design/script-enforcement) and retest.
-- Temporarily replace the WDAC policy with another policy that [allows all COM objects](/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy) and retest.
-- Temporarily replace the WDAC policy with another policy that relaxes other [policy rules](/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create#windows-defender-application-control-policy-rules) and retest.
+- Temporarily replace the App Control policy with another policy that [disables script enforcement](../design/script-enforcement.md) and retest.
+- Temporarily replace the App Control policy with another policy that [allows all COM objects](../design/allow-com-object-registration-in-appcontrol-policy.md) and retest.
+- Temporarily replace the App Control policy with another policy that relaxes other [policy rules](../design/select-types-of-rules-to-create.md#app-control-for-business-policy-rules) and retest.
 
 ### Issue: An app deployed by a managed installer isn't working
 
 To debug issues using managed installer, try these steps:
 
-- Check that the WDAC policy that is blocking the app includes the option to enable managed installer.
-- Check that the effective AppLocker policy $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLocker.xml is correct as described in [Automatically allow apps deployed by a managed installer](/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer#create-and-deploy-an-applocker-policy-that-defines-your-managed-installer-rules-and-enables-services-enforcement-for-executables-and-dlls).
+- Check that the App Control policy that is blocking the app includes the option to enable managed installer.
+- Check that the effective AppLocker policy $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLocker.xml is correct as described in [Automatically allow apps deployed by a managed installer](../design/configure-authorized-apps-deployed-with-a-managed-installer.md#create-and-deploy-an-applocker-policy-that-defines-your-managed-installer-rules-and-enables-services-enforcement-for-executables-and-dlls).
 - Check that the AppLocker services are running. This information is found in $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLockerServices.txt created in section 1 of this article.
 - Check that an AppLocker file exists called MANAGEDINSTALLER.APPLOCKER exists in the CiDiag folder created earlier. If not, repeat the steps to deploy and enable the managed installer AppLocker configuration.
 - Restart the managed installer process and check that an 8002 event is observed in the **AppLocker - EXE and DLL** event log for the managed installer process with PolicyName = MANAGEDINSTALLER. If instead you see an event with 8003 or 8004 with PolicyName = MANAGEDINSTALLER, then check the ManagedInstaller rules in the AppLocker policy XML and ensure a rule matches the managed installer process.
-- [Use fsutil.exe](/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer#using-fsutil-to-query-extended-attributes-for-managed-installer-mi) to verify files written by the managed installer process have the managed installer origin extended attribute. If not, redeploy the files with the managed installer and check again.
+- [Use fsutil.exe](configure-appcontrol-managed-installer.md#using-fsutil-to-query-extended-attributes-for-managed-installer-mi) to verify files written by the managed installer process have the managed installer origin extended attribute. If not, redeploy the files with the managed installer and check again.
 - Test installation of a different app using the managed installer.
 - Add another managed installer to your AppLocker policy and test installation using the other managed installer.
-- Check if the app is encountering a [known limitation with managed installer](/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer#known-limitations-with-managed-installer). If so, you must authorize the app using other means.
+- Check if the app is encountering a [known limitation with managed installer](../design/configure-authorized-apps-deployed-with-a-managed-installer.md#known-limitations-with-managed-installer). If so, you must authorize the app using other means.
 
 ### Issue: An app you expected the Intelligent Security Graph (ISG) to allow isn't working
 
 To debug issues using ISG, try these steps:
 
-- Check that the WDAC policy that is blocking the app includes the option to enable the intelligent security graph.
+- Check that the App Control policy that is blocking the app includes the option to enable the intelligent security graph.
 - Check that the AppLocker services are running. This information is found in $env:USERPROFILE\AppData\Local\Temp\DiagOutputDir\CiDiag\AppLockerServices.txt created in section 1 of this article.
-- [Use fsutil.exe](/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer#using-fsutil-to-query-extended-attributes-for-intelligent-security-graph-isg) to verify files have the ISG origin extended attribute. If not, redeploy the files with the managed installer and check again.
-- Check if the app is encountering a [known limitation with ISG](/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph#known-limitations-with-using-the-isg).
+- [Use fsutil.exe](configure-appcontrol-managed-installer.md#using-fsutil-to-query-extended-attributes-for-intelligent-security-graph-isg) to verify files have the ISG origin extended attribute. If not, redeploy the files with the managed installer and check again.
+- Check if the app is encountering a [known limitation with ISG](../design/use-appcontrol-with-intelligent-security-graph.md#known-limitations-with-using-the-isg).
 
 ## 4 - Report issues to Microsoft, if appropriate
 
 If after following the guidance covered by this article you believe you've identified a product issue, report the issue to Microsoft.
 
 - Customers with Microsoft Premier Support should log a service request through normal channels.
-- All other customers can report issues directly to the WDAC product team via the Windows [Feedback Hub](feedback-hub:?contextid=790&tabid=2&newFeedback=true). Select the category **Security & Privacy - Application Control** to ensure the issue is properly routed to the WDAC product team.
+- All other customers can report issues directly to the App Control product team via the Windows [Feedback Hub](feedback-hub:?contextid=790&tabid=2&newFeedback=true). Select the category **Security & Privacy - Application Control** to ensure the issue is properly routed to the App Control product team.
 
 When reporting issues, be sure to provide the following information:
 
-- All [WDAC diagnostic data](#1---gather-wdac-diagnostic-data) described earlier.
+- All [App Control diagnostic data](#1---gather-app-control-diagnostic-data) described earlier.
 - If possible, the blocked file(s).
 - Clear instructions to reproduce the problem.
diff --git a/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-operational-guide.md b/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-operational-guide.md
new file mode 100644
index 0000000000..755488b5a3
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/appcontrol-operational-guide.md
@@ -0,0 +1,26 @@
+---
+title: Managing and troubleshooting App Control for Business policies
+description: Gather information about how your deployed App Control for Business policies are behaving.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: how-to
+---
+
+# App Control for Business operational guide
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+You now understand how to design and deploy your App Control for Business policies. This guide explains how to understand the effects your policies have and how to troubleshoot when they aren't behaving as expected. It contains information on where to find events and what they mean, and also querying these events with Microsoft Defender for Endpoint Advanced Hunting feature.
+
+## In this section
+
+| Article | Description |
+| - | - |
+| [Debugging and troubleshooting](appcontrol-debugging-and-troubleshooting.md) | This article explains how to debug app and script failures with App Control. |
+| [Understanding App Control event IDs](event-id-explanations.md) | This article explains the meaning of different App Control event IDs. |
+| [Understanding App Control event tags](event-tag-explanations.md) | This article explains the meaning of different App Control event tags. |
+| [Query App Control events with Advanced hunting](querying-application-control-events-centrally-using-advanced-hunting.md) | This article covers how to view App Control events centrally from all systems that are connected to Microsoft Defender for Endpoint. |
+| [Admin Tips & Known Issues](known-issues.md) | This article describes some App Control Admin Tips & Known Issues. |
+| [Managed installer and ISG technical reference and troubleshooting guide](configure-appcontrol-managed-installer.md) | This article provides technical details and debugging steps for managed installer and ISG. |
+| [CITool.exe technical reference](citool-commands.md) | This article explains how to use CITool.exe. |
+| [Inbox App Control policies](inbox-appcontrol-policies.md) | This article describes the App Control policies that ship with Windows and when they're active. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/citool-commands.md b/windows/security/application-security/application-control/app-control-for-business/operations/citool-commands.md
similarity index 82%
rename from windows/security/application-security/application-control/windows-defender-application-control/operations/citool-commands.md
rename to windows/security/application-security/application-control/app-control-for-business/operations/citool-commands.md
index 729ecd07ee..c8bb39fb47 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/citool-commands.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/citool-commands.md
@@ -2,14 +2,14 @@
 title: Managing CI policies and tokens with CiTool
 description: Learn how to use policy commands, token commands, and miscellaneous commands in CiTool
 ms.topic: reference
-ms.date: 10/02/2023
+ms.date: 09/11/2024
 appliesto:
 - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11</a>
 ---
 
 # CiTool technical reference
 
-CiTool makes Windows Defender Application Control (WDAC) policy management easier for IT admins. You can use this tool to manage Windows Defender Application Control policies and CI tokens. This article describes how to use CiTool to update and manage policies. It's currently included as part of the Windows image in Windows 11, version 22H2.
+CiTool makes App Control for Business policy management easier for IT admins. You can use this tool to manage App Control for Business policies and CI tokens. This article describes how to use CiTool to update and manage policies. It's currently included as part of the Windows image in Windows 11, version 22H2.
 
 ## Policy commands
 
@@ -35,24 +35,24 @@ CiTool makes Windows Defender Application Control (WDAC) policy management easie
 | Command | Description | Alias |
 |--------|---------|---------|
 | `--device-id` | Dump the code integrity device ID. | `-id` |
-| `--refresh` | Attempt to refresh WDAC policies. | `-r` |
+| `--refresh` | Attempt to refresh App Control policies. | `-r` |
 | `--help` | Display the tool's help menu. | `-h` |
 
 ## Output attributes and descriptions
 
 ### List policies (`--list-policies`)
 
-```output
-    Policy ID: d2bda982-ccf6-4344-ac5b-0b44427b6816
-    Base Policy ID: d2bda982-ccf6-4344-ac5b-0b44427b6816
-    Friendly Name: Microsoft Windows Driver Policy
-    Version: 2814751463178240
-    Platform Policy: true
-    Policy is Signed: true
-    Has File on Disk: false
-    Is Currently Enforced: true
-    Is Authorized: true
-    Status: 0
+```console
+Policy ID: d2bda982-ccf6-4344-ac5b-0b44427b6816
+Base Policy ID: d2bda982-ccf6-4344-ac5b-0b44427b6816
+Friendly Name: Microsoft Windows Driver Policy
+Version: 2814751463178240
+Platform Policy: true
+Policy is Signed: true
+Has File on Disk: false
+Is Currently Enforced: true
+Is Authorized: true
+Status: 0
 ```
 
 | Attribute | Description | Example value |
@@ -69,25 +69,25 @@ CiTool makes Windows Defender Application Control (WDAC) policy management easie
 
 ## Examples
 
-### Deploy a WDAC policy
+### Deploy an App Control policy
 
 ```powershell
 CiTool --update-policy "\Windows\Temp\{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip"
 ```
 
-### Refresh the WDAC policies on the system
+### Refresh the App Control policies on the system
 
 ```powershell
 CiTool --refresh
 ```
 
-### Remove a specific WDAC policy by its policy ID
+### Remove a specific App Control policy by its policy ID
 
 ```powershell
 CiTool --remove-policy "{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}"
 ```
 
-### List the actively enforced WDAC policies on the system
+### List the actively enforced App Control policies on the system
 
 ```powershell
 # Check each policy's IsEnforced state and return only the enforced policies
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/configure-wdac-managed-installer.md b/windows/security/application-security/application-control/app-control-for-business/operations/configure-appcontrol-managed-installer.md
similarity index 79%
rename from windows/security/application-security/application-control/windows-defender-application-control/operations/configure-wdac-managed-installer.md
rename to windows/security/application-security/application-control/app-control-for-business/operations/configure-appcontrol-managed-installer.md
index 98e2c42da8..d75a2df983 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/configure-wdac-managed-installer.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/configure-appcontrol-managed-installer.md
@@ -2,22 +2,21 @@
 title: Managed installer and ISG technical reference and troubleshooting guide
 description: A technical reference and troubleshooting guide for managed installer and Intelligent Security Graph (ISG).
 ms.localizationpriority: medium
-ms.date: 11/11/2022
+ms.date: 09/11/2024
 ms.topic: troubleshooting
 ---
 
 # Managed installer and ISG technical reference and troubleshooting guide
 
->[!NOTE]
->Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Application Control feature availability](../feature-availability.md).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
 ## Enabling managed installer and Intelligent Security Graph (ISG) logging events
 
-Refer to [Understanding Application Control Events](event-id-explanations.md#diagnostic-events-for-intelligent-security-graph-isg-and-managed-installer-mi) for information on enabling optional managed installer diagnostic events.
+Refer to [Understanding App Control Events](event-id-explanations.md#diagnostic-events-for-intelligent-security-graph-isg-and-managed-installer-mi) for information on enabling optional managed installer diagnostic events.
 
 ## Using fsutil to query extended attributes for Managed Installer (MI)
 
-Customers using Windows Defender Application Control (WDAC) with Managed Installer (MI) enabled can use fsutil.exe to determine whether a file was created by a managed installer process. This verification is done by querying the Extended Attributes (EAs) on a file using fsutil.exe and looking for the KERNEL.SMARTLOCKER.ORIGINCLAIM EA. Then, you can use the data from the first row of output to identify if the file was created by a managed installer. For example, let's look at the fsutil.exe output for a file called application.exe:
+Customers using App Control for Business with Managed Installer (MI) enabled can use fsutil.exe to determine whether a file was created by a managed installer process. This verification is done by querying the Extended Attributes (EAs) on a file using fsutil.exe and looking for the KERNEL.SMARTLOCKER.ORIGINCLAIM EA. Then, you can use the data from the first row of output to identify if the file was created by a managed installer. For example, let's look at the fsutil.exe output for a file called application.exe:
 
 **Example:**
 
@@ -47,7 +46,7 @@ If there is "00" in the fifth position of the output (the start of the second UL
 
 0000: 01 00 00 00 **`00` 00 00 00** 00 00 00 00 01 00 00 00
 
-Finally, the two-character set in the ninth position of the output (the start of the third ULONG) indicates whether the file was created by a process running as managed installer. A value of "00" means the file was directly written by a managed installer process and will run if your WDAC policy trusts managed installers.
+Finally, the two-character set in the ninth position of the output (the start of the third ULONG) indicates whether the file was created by a process running as managed installer. A value of "00" means the file was directly written by a managed installer process and will run if your App Control policy trusts managed installers.
 
 0000: 01 00 00 00 00 00 00 00 **`00` 00 00 00** 01 00 00 00
 
@@ -98,4 +97,4 @@ Both managed installer and the ISG depend on AppLocker to provide some functiona
    Get-AppLockerPolicy -Effective -XML > $env:USERPROFILE\Desktop\AppLocker.xml
    ```
 
-   Then open the XML file created and confirm it contains the rules you expect. In particular, the policy should include at least one rule for each of the EXE, DLL, and MANAGEDINSTALLER RuleCollections. The RuleCollections can either be set to AuditOnly or Enabled. Additionally, the EXE and DLL RuleCollections must include the RuleCollectionExtensions configuration as shown in [Automatically allow apps deployed by a managed installer with Windows Defender Application Control](/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer#create-and-deploy-an-applocker-policy-that-defines-your-managed-installer-rules-and-enables-services-enforcement-for-executables-and-dlls).
+   Then open the XML file created and confirm it contains the rules you expect. In particular, the policy should include at least one rule for each of the EXE, DLL, and MANAGEDINSTALLER RuleCollections. The RuleCollections can either be set to AuditOnly or Enabled. Additionally, the EXE and DLL RuleCollections must include the RuleCollectionExtensions configuration as shown in [Automatically allow apps deployed by a managed installer with App Control for Business](../design/configure-authorized-apps-deployed-with-a-managed-installer.md#create-and-deploy-an-applocker-policy-that-defines-your-managed-installer-rules-and-enables-services-enforcement-for-executables-and-dlls).
diff --git a/windows/security/application-security/application-control/app-control-for-business/operations/event-id-explanations.md b/windows/security/application-security/application-control/app-control-for-business/operations/event-id-explanations.md
new file mode 100644
index 0000000000..ceaac2953b
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/event-id-explanations.md
@@ -0,0 +1,161 @@
+---
+title: Understanding App Control event IDs
+description: Learn what different App Control for Business event IDs signify.
+ms.localizationpriority: medium
+ms.date: 09/11/2024
+ms.topic: reference
+---
+
+# Understanding App Control events
+
+## App Control Events Overview
+
+App Control logs events when a policy is loaded, when a file is blocked, or when a file would be blocked if in audit mode. These block events include information that identifies the policy and gives more details about the block. App Control doesn't generate events when a binary is allowed. However, you can turn on allow audit events for files authorized by a managed installer or the Intelligent Security Graph (ISG) as described later in this article.
+
+### Core App Control event logs
+
+App Control events are generated under two locations in the Windows Event Viewer:
+
+- **Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational** includes events about App Control policy activation and the control of executables, dlls, and drivers.
+- **Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script** includes events about the control of MSI installers, scripts, and COM objects.
+
+Most app and script failures that occur when App Control is active can be diagnosed using these two event logs. This article describes in greater detail the events that exist in these logs. To understand the meaning of different data elements, or tags, found in the details of these events, see [Understanding App Control event tags](event-tag-explanations.md).
+
+> [!NOTE]
+> **Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script** events are not included on Windows Server Core edition.
+
+## App Control block events for executables, dlls, and drivers
+
+These events are found in the **CodeIntegrity - Operational** event log.
+
+| Event ID | Explanation |
+|--------|-----------|
+| 3004 | This event isn't common and may occur with or without an App Control policy present. It typically indicates a kernel driver tried to load with an invalid signature. For example, the file may not be WHQL-signed on a system where WHQL is required. <br><br> This event is also seen for kernel- or user-mode code that the developer opted-in to [/INTEGRITYCHECK](/cpp/build/reference/integritycheck-require-signature-check) but isn't signed correctly. |
+| 3033 | This event may occur with or without an App Control policy present and should occur alongside a 3077 event if caused by App Control policy. It often means the file's signature is revoked or a signature with the Lifetime Signing EKU has expired. Presence of the Lifetime Signing EKU is the only case where App Control blocks files due to an expired signature. Try using option `20 Enabled:Revoked Expired As Unsigned` in your policy along with a rule (for example, hash) that doesn't rely on the revoked or expired cert. <br><br> This event also occurs if code compiled with [Code Integrity Guard (CIG)](/microsoft-365/security/defender-endpoint/exploit-protection-reference#code-integrity-guard) tries to load other code that doesn't meet the CIG requirements. |
+| 3034 | This event isn't common. It's the audit mode equivalent of event 3033. |
+| 3076 | This event is the main App Control block event for audit mode policies. It indicates that the file would have been blocked if the policy was enforced. |
+| 3077 | This event is the main App Control block event for enforced policies. It indicates that the file didn't pass your policy and was blocked. |
+| 3089 | This event contains signature information for files that were blocked or audit blocked by App Control. One of these events is created for each signature of a file. Each event shows the total number of signatures found and an index value to identify the current signature. Unsigned files generate a single one of these events with TotalSignatureCount of 0. These events are correlated with 3004, 3033, 3034, 3076 and 3077 events. You can match the events using the `Correlation ActivityID` found in the **System** portion of the event. |
+
+## App Control block events for packaged apps, MSI installers, scripts, and COM objects
+
+These events are found in the **AppLocker - MSI and Script** event log.
+
+| Event ID | Explanation |
+|--------|-----------|
+| 8028 | This event indicates that a script host, such as PowerShell, queried App Control about a file the script host was about to run. Since the policy was in audit mode, the script or MSI file should have run, but wouldn't have passed the App Control policy if it was enforced. Some script hosts may have additional information in their logs. Note: Most third-party script hosts don't integrate with App Control. Consider the risks from unverified scripts when choosing which script hosts you allow to run. |
+| 8029 | This event is the enforcement mode equivalent of event 8028. Note: While this event says that a script was blocked, the script hosts control the actual script enforcement behavior. The script host may allow the file to run with restrictions and not block the file outright. For example, PowerShell runs script not allowed by your App Control policy in [Constrained Language Mode](/powershell/module/microsoft.powershell.core/about/about_language_modes). |
+| 8036| COM object was blocked. To learn more about COM object authorization, see [Allow COM object registration in an App Control for Business policy](../design/allow-com-object-registration-in-appcontrol-policy.md). |
+| 8037 | This event indicates that a script host checked whether to allow a script to run, and the file passed the App Control policy. |
+| 8038 | Signing information event correlated with either an 8028 or 8029 event. One 8038 event is generated for each signature of a script file. Contains the total number of signatures on a script file and an index as to which signature it is. Unsigned script files generate a single 8038 event with TotalSignatureCount 0. These events are correlated with 8028 and 8029 events and can be matched using the `Correlation ActivityID` found in the **System** portion of the event. |
+| 8039 | This event indicates that a packaged app (MSIX/AppX) was allowed to install or run because the App Control policy is in audit mode. But, it would have been blocked if the policy was enforced. |
+| 8040 | This event indicates that a packaged app was prevented from installing or running due to the App Control policy. |
+
+## App Control policy activation events
+
+These events are found in the **CodeIntegrity - Operational** event log.
+
+| Event ID | Explanation |
+|--------|-----------|
+| 3095 | The App Control policy can't be refreshed and must be rebooted instead. |
+| 3096 | The App Control policy wasn't refreshed since it's already up-to-date. This event's Details includes useful information about the policy, such as its policy options. |
+| 3097 | The App Control policy can't be refreshed. |
+| 3099 | Indicates that a policy has been loaded. This event's Details includes useful information about the App Control policy, such as its policy options. |
+| 3100 | The App Control policy was refreshed but was unsuccessfully activated. Retry. |
+| 3101 | App Control policy refresh started for *N* policies. |
+| 3102 | App Control policy refresh finished for *N* policies. |
+| 3103 | The system is ignoring the App Control policy refresh. For example, an inbox Windows policy that doesn't meet the conditions for activation. |
+| 3105 | The system is attempting to refresh the App Control policy with the specified ID. |
+
+## Diagnostic events for Intelligent Security Graph (ISG) and Managed Installer (MI)
+
+> [!NOTE]
+> When Managed Installer is enabled, customers using LogAnalytics should be aware that Managed Installer may fire many 3091 events.  Customers may need to filter out these events to avoid high LogAnalytics costs.
+
+The following events provide helpful diagnostic information when an App Control policy includes the ISG or MI option. These events can help you debug why something was allowed/denied based on managed installer or ISG. Events 3090, 3091, and 3092 don't necessarily indicate a problem but should be reviewed in context with other events like 3076 or 3077.
+
+Unless otherwise noted, these events are found in either the **CodeIntegrity - Operational** event log or the **CodeIntegrity - Verbose** event log depending on your version of Windows.
+
+| Event ID | Explanation |
+|--------|---------|
+| 3090 | *Optional* This event indicates that a file was allowed to run based purely on ISG or managed installer. |
+| 3091 | This event indicates that a file didn't have ISG or managed installer authorization and the App Control policy is in audit mode. |
+| 3092 | This event is the enforcement mode equivalent of 3091. |
+| 8002 | This event is found in the **AppLocker - EXE and DLL** event log. When a process launches that matches a managed installer rule, this event is raised with PolicyName = MANAGEDINSTALLER found in the event Details. Events with PolicyName = EXE or DLL aren't related to App Control. |
+
+Events 3090, 3091, and 3092 are reported per active policy on the system, so you may see multiple events for the same file.
+
+### ISG and MI diagnostic event details
+
+The following information is found in the details for 3090, 3091, and 3092 events.
+
+| Name | Explanation |
+|------|------|
+| ManagedInstallerEnabled | Indicates whether the specified policy enables managed installer trust |
+| PassesManagedInstaller | Indicates whether the file originated from a MI |
+| SmartlockerEnabled | Indicates whether the specified policy enables ISG trust |
+| PassesSmartlocker | Indicates whether the file had positive reputation according to the ISG |
+| AuditEnabled | True if the App Control policy is in audit mode, otherwise it is in enforce mode |
+| PolicyName | The name of the App Control policy to which the event applies |
+
+### Enabling ISG and MI diagnostic events
+
+To enable 3090 allow events, create a TestFlags regkey with a value of 0x300 as shown in the following PowerShell command. Then restart your computer.
+
+```powershell
+reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x300
+```
+
+Events 3091 and 3092 are inactive on some versions of Windows and are turned on by the preceding command.
+
+## Appendix
+
+A list of other relevant event IDs and their corresponding description.
+
+| Event ID | Description |
+|-------|------|
+| 3001 | An unsigned driver was attempted to load on the system. |
+| 3002 | Code Integrity couldn't verify the boot image as the page hash couldn't be found. |
+| 3004 | Code Integrity couldn't verify the file as the page hash couldn't be found. |
+| 3010 | The catalog containing the signature for the file under validation is invalid. |
+| 3011 | Code Integrity finished loading the signature catalog. |
+| 3012 | Code Integrity started loading the signature catalog. |
+| 3023 | The driver file under validation didn't meet the requirements to pass the App Control policy. |
+| 3024 | Windows App Control was unable to refresh the boot catalog file. |
+| 3026 | Microsoft or the certificate issuing authority revoked the certificate that signed the catalog. |
+| 3032 | The file under validation is revoked or the file has a signature that is revoked.
+| 3033 | The file under validation didn't meet the requirements to pass the App Control policy. |
+| 3034 | The file under validation wouldn't meet the requirements to pass the App Control policy if it was enforced. The file was allowed since the policy is in audit mode. |
+| 3036 | Microsoft or the certificate issuing authority revoked the certificate that signed the file being validated. |
+| 3064 | If the App Control policy was enforced, a user mode DLL under validation wouldn't meet the requirements to pass the App Control policy. The DLL was allowed since the policy is in audit mode. |
+| 3065 | If the App Control policy was enforced, a user mode DLL under validation wouldn't meet the requirements to pass the App Control policy. |
+| 3074 | Page hash failure while hypervisor-protected code integrity was enabled. |
+| 3075 | This event measures the performance of the App Control policy check during file validation. |
+| 3076 | This event is the main App Control block event for audit mode policies. It indicates that the file would have been blocked if the policy was enforced. |
+| 3077 | This event is the main App Control block event for enforced policies. It indicates that the file didn't pass your policy and was blocked. |
+| 3079 | The file under validation didn't meet the requirements to pass the App Control policy. |
+| 3080 | If the App Control policy was in enforced mode, the file under validation wouldn't have met the requirements to pass the App Control policy. |
+| 3081 | The file under validation didn't meet the requirements to pass the App Control policy. |
+| 3082 | If the App Control policy was enforced, the policy would have blocked this non-WHQL driver. |
+| 3084 | Code Integrity is enforcing WHQL driver signing requirements on this boot session. |
+| 3085 | Code Integrity isn't enforcing WHQL driver signing requirements on this boot session. |
+| 3086 | The file under validation doesn't meet the signing requirements for an isolated user mode (IUM) process. |
+| 3089 | This event contains signature information for files that were blocked or audit blocked by App Control. One 3089 event is created for each signature of a file. |
+| 3090 | *Optional* This event indicates that a file was allowed to run based purely on ISG or managed installer. |
+| 3091 | This event indicates that a file didn't have ISG or managed installer authorization and the App Control policy is in audit mode. |
+| 3092 | This event is the enforcement mode equivalent of 3091. |
+| 3095 | The App Control policy can't be refreshed and must be rebooted instead. |
+| 3096 | The App Control policy wasn't refreshed since it's already up-to-date. |
+| 3097 | The App Control policy can't be refreshed. |
+| 3099 | Indicates that a policy has been loaded. This event also includes information about the options set by the App Control policy.  |
+| 3100 | The App Control policy was refreshed but was unsuccessfully activated. Retry. |
+| 3101 | The system started refreshing the App Control policy. |
+| 3102 | The system finished refreshing the App Control policy. |
+| 3103 | The system is ignoring the App Control policy refresh. |
+| 3104 | The file under validation doesn't meet the signing requirements for a PPL (protected process light) process. |
+| 3105 | The system is attempting to refresh the App Control policy. |
+| 3108 | Windows mode change event was successful. |
+| 3110 | Windows mode change event was unsuccessful. |
+| 3111 | The file under validation didn't meet the hypervisor-protected code integrity (HVCI) policy. |
+| 3112 | Windows has revoked the certificate that signed the file being validated. |
+| 3114 | Dynamic Code Security opted the .NET app or DLL into App Control policy validation. The file under validation didn't pass your policy and was blocked. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/event-tag-explanations.md b/windows/security/application-security/application-control/app-control-for-business/operations/event-tag-explanations.md
similarity index 83%
rename from windows/security/application-security/application-control/windows-defender-application-control/operations/event-tag-explanations.md
rename to windows/security/application-security/application-control/app-control-for-business/operations/event-tag-explanations.md
index 298b965229..0f5513efc4 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/event-tag-explanations.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/event-tag-explanations.md
@@ -1,14 +1,14 @@
 ---
-title: Understanding Application Control event tags
-description: Learn what different Windows Defender Application Control event tags signify.
+title: Understanding App Control event tags
+description: Learn what different App Control for Business event tags signify.
 ms.localizationpriority: medium
-ms.date: 05/09/2023
+ms.date: 09/11/2024
 ms.topic: conceptual
 ---
 
-# Understanding Application Control event tags
+# Understanding App Control event tags
 
-Windows Defender Application Control (WDAC) events include many fields, which provide helpful troubleshooting information to figure out exactly what an event means. This article describes the values and meanings for a few useful event tags.
+App Control for Business events include many fields, which provide helpful troubleshooting information to figure out exactly what an event means. This article describes the values and meanings for a few useful event tags.
 
 ## SignatureType
 
@@ -33,7 +33,7 @@ Represents the signature level at which the code was verified.
 |---|----------|
 | 0 | Signing level hasn't yet been checked |
 | 1 | File is unsigned or has no signature that passes the active policies |
-| 2 | Trusted by Windows Defender Application Control policy |
+| 2 | Trusted by App Control for Business policy |
 | 3 | Developer signed code |
 | 4 | Authenticode signed |
 | 5 | Microsoft Store signed app PPL (Protected Process Light) |
@@ -71,7 +71,7 @@ Represents why verification failed, or if it succeeded.
 | 18 | Custom signing level not met; returned if signature fails to match `CISigners` in UMCI. |
 | 19 | Binary is revoked based on its file hash. |
 | 20 | SHA1 cert hash's timestamp is missing or after valid cutoff as defined by Weak Crypto Policy. |
-| 21 | Failed to pass Windows Defender Application Control policy. |
+| 21 | Failed to pass App Control for Business policy. |
 | 22 | Not Isolated User Mode (IUM)) signed; indicates an attempt to load a standard Windows binary into a virtualization-based security (VBS) trustlet. |
 | 23 | Invalid image hash. This error can indicate file corruption or a problem with the file's signature. Signatures using elliptic curve cryptography (ECC), such as ECDSA, return this VerificationError. |
 | 24 | Flight root not allowed; indicates trying to run flight-signed code on production OS. |
@@ -82,7 +82,7 @@ Represents why verification failed, or if it succeeded.
 
 ## Policy activation event Options
 
-The Application Control policy rule option values can be derived from the "Options" field in the Details section for successful [policy activation events](event-id-explanations.md#wdac-policy-activation-events). To parse the values, first convert the hex value to binary. To derive and parse these values, follow the below workflow.
+The App Control policy rule option values can be derived from the "Options" field in the Details section for successful [policy activation events](event-id-explanations.md#app-control-policy-activation-events). To parse the values, first convert the hex value to binary. To derive and parse these values, follow the below workflow.
 
 - Access Event Viewer.
 - Access the Code integrity 3099 event.
@@ -105,7 +105,7 @@ For a simple solution for converting hex to binary, follow these steps:
 
 This view provides the hex code in binary form, with each bit address shown separately.  The bit addresses start at 0 in the bottom right.  Each bit address correlates to a specific event policy-rule option.  If the bit address holds a value of 1, the setting is in the policy.
 
-Next, use the bit addresses and their values from the following table to determine the state of each [policy rule-option](../design/select-types-of-rules-to-create.md#table-1-windows-defender-application-control-policy---policy-rule-options). For example, if the bit address of 16 holds a value of 1, then the **Enabled: Audit Mode (Default)** option is in the policy. This setting means that the policy is in audit mode.
+Next, use the bit addresses and their values from the following table to determine the state of each [policy rule-option](../design/select-types-of-rules-to-create.md#table-1-app-control-for-business-policy---policy-rule-options). For example, if the bit address of 16 holds a value of 1, then the **Enabled: Audit Mode (Default)** option is in the policy. This setting means that the policy is in audit mode.
 
 | Bit Address | Policy Rule Option |
 |-------|------|
@@ -157,7 +157,7 @@ The rule means trust anything signed by a certificate that chains to this root C
 | 18 | Microsoft ECC Product Root CA 2018 |
 | 19 | Microsoft ECC Devices Root CA 2017 |
 
-For well-known roots, the TBS hashes for the certificates are baked into the code for Windows Defender Application Control. For example, they don't need to be listed as TBS hashes in the policy file.
+For well-known roots, the TBS hashes for the certificates are baked into the code for App Control for Business. For example, they don't need to be listed as TBS hashes in the policy file.
 
 ## Status values
 
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/inbox-wdac-policies.md b/windows/security/application-security/application-control/app-control-for-business/operations/inbox-appcontrol-policies.md
similarity index 73%
rename from windows/security/application-security/application-control/windows-defender-application-control/operations/inbox-wdac-policies.md
rename to windows/security/application-security/application-control/app-control-for-business/operations/inbox-appcontrol-policies.md
index c8432d0129..f62b037cb4 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/inbox-wdac-policies.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/inbox-appcontrol-policies.md
@@ -1,24 +1,23 @@
 ---
-title: Inbox WDAC policies
-description: This article describes the inbox WDAC policies that may be active on a device.
+title: Inbox App Control policies
+description: This article describes the inbox App Control policies that may be active on a device.
 ms.manager: jsuther
-ms.date: 03/10/2023
+ms.date: 09/11/2024
 ms.topic: conceptual
 ms.localizationpriority: medium
 ---
 
-# Inbox WDAC policies
+# Inbox App Control policies
 
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
 
-This article describes the Windows Defender Application Control (WDAC) policies that ship inbox with Windows and may be active on your devices. To see which policies are active on your device, use [citool.exe](/windows/security/threat-protection/windows-defender-application-control/operations/citool-commands) or check the *CodeIntegrity - Operational* event log for 3099 policy activation events.
+This article describes the App Control for Business policies that ship inbox with Windows and may be active on your devices. To see which policies are active on your device, use [citool.exe](citool-commands.md) or check the *CodeIntegrity - Operational* event log for 3099 policy activation events.
 
-## Inbox WDAC Policies
+## Inbox App Control Policies
 
-| **Policy Name** | **Policy ID** | **Policy Type** | **Description** |
+| Policy Name | Policy ID | Policy Type | Description |
 |-----------|-----------|-----------|-----------|
-| **Microsoft Windows Driver Policy** | {d2bda982-ccf6-4344-ac5b-0b44427b6816} | Kernel-only Base policy | This policy blocks known [vulnerable or malicious kernel drivers](/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules). It's active by default on Windows 11 22H2, [Windows in S mode](https://support.microsoft.com/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85), [Windows 11 SE](/education/windows/windows-11-se-overview), and anywhere [memory integrity](https://support.microsoft.com/windows/core-isolation-e30ed737-17d8-42f3-a2a9-87521df09b78) (also known as hypervisor-protected code integrity (HVCI)) is on. Its policy binary file is found at `%windir%\System32\CodeIntegrity\driversipolicy.p7b` and in the EFI system partition at `<EFI System Partition>\Microsoft\Boot\driversipolicy.p7b`. |
+| **Microsoft Windows Driver Policy** | {d2bda982-ccf6-4344-ac5b-0b44427b6816} | Kernel-only Base policy | This policy blocks known [vulnerable or malicious kernel drivers](../design/microsoft-recommended-driver-block-rules.md). It's active by default on Windows 11 22H2, [Windows in S mode](https://support.microsoft.com/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85), [Windows 11 SE](/education/windows/windows-11-se-overview), and anywhere [memory integrity](https://support.microsoft.com/windows/core-isolation-e30ed737-17d8-42f3-a2a9-87521df09b78) (also known as hypervisor-protected code integrity (HVCI)) is on. Its policy binary file is found at `%windir%\System32\CodeIntegrity\driversipolicy.p7b` and in the EFI system partition at `<EFI System Partition>\Microsoft\Boot\driversipolicy.p7b`. |
 | **Windows10S_Lockdown_Policy_Supplementable** | {5951a96a-e0b5-4d3d-8fb8-3e5b61030784} | Base policy | This policy is active on devices running [Windows in S mode](https://support.microsoft.com/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85). Its policy binary file is found in the EFI system partition at `<EFI System Partition>\Microsoft\Boot\winsipolicy.p7b`. |
 | **WindowsE_Lockdown_Policy** | {82443e1e-8a39-4b4a-96a8-f40ddc00b9f3} | Base policy | This policy is active on devices running [Windows 11 SE](/education/windows/windows-11-se-overview). Its policy binary file is found in the EFI system partition at `<EFI System Partition>\Microsoft\Boot\CIPolicies\Active\{82443e1e-8a39-4b4a-96a8-f40ddc00b9f3}.cip`. |
 | **WindowsE_Lockdown_Flight_Policy_Supplemental** | {5dac656c-21ad-4a02-ab49-649917162e70} | Supplemental policy | This policy is active on devices running [Windows 11 SE](/education/windows/windows-11-se-overview) that are enrolled in the [Windows Insider](https://insider.windows.com) program. Its policy binary file is found in the EFI system partition at `<EFI System Partition>\Microsoft\Boot\CIPolicies\Active\{5dac656c-21ad-4a02-ab49-649917162e70}.cip`. |
diff --git a/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md b/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
new file mode 100644
index 0000000000..4181691e76
--- /dev/null
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/known-issues.md
@@ -0,0 +1,104 @@
+---
+title: App Control Admin Tips & Known Issues
+description: App Control Known Issues
+ms.manager: jsuther
+ms.date: 09/11/2024
+ms.topic: troubleshooting
+ms.localizationpriority: medium
+---
+
+# App Control Admin Tips & Known Issues
+
+[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
+
+This article covers tips and tricks for admins and known issues with App Control for Business. Test this configuration in your lab before enabling it in production.
+
+## App Control policy file locations
+
+**Multiple policy format App Control policies** are found in the following locations depending on whether the policy is signed or not, and the method of policy deployment that was used.
+
+- &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\CiPolicies\Active\\*\{PolicyId GUID\}*.cip
+- &lt;EFI System Partition&gt;\\Microsoft\\Boot\\CiPolicies\Active\\*\{PolicyId GUID\}*.cip
+
+The *\{PolicyId GUID\}* value is unique by policy and defined in the policy XML with the &lt;PolicyId&gt; element.
+
+For **single policy format App Control policies**, in addition to the two preceding locations, also look for a file called SiPolicy.p7b in the following locations:
+
+- &lt;EFI System Partition&gt;\\Microsoft\\Boot\\SiPolicy.p7b
+- &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\SiPolicy.p7b
+
+> [!NOTE]
+> A multiple policy format App Control policy using the single policy format GUID `{A244370E-44C9-4C06-B551-F6016E563076}` may exist under any of the policy file locations.
+
+## File Rule Precedence Order
+
+When the App Control engine evaluates files against the active set of policies on the device, rules are applied in the following order. Once a file encounters a match, App Control stops further processing.
+
+1. Explicit deny rules - a file is blocked if any explicit deny rule exists for it, even if other rules are created to try to allow it. Deny rules can use any [rule level](../design/select-types-of-rules-to-create.md#app-control-for-business-file-rule-levels). Use the most specific rule level practical when creating deny rules to avoid blocking more than you intend.
+
+2. Explicit allow rules - if any explicit allow rule exists for the file, the file runs.
+
+3. App Control then checks for the [Managed Installer extended attribute (EA)](../design/configure-authorized-apps-deployed-with-a-managed-installer.md) or the [Intelligent Security Graph (ISG) EA](../design/use-appcontrol-with-intelligent-security-graph.md) on the file. If either EA exists and the policy enables the corresponding option, then the file is allowed.
+
+4. Lastly, App Control makes a cloud call to the ISG to get reputation about the file, if the policy enables the ISG option.
+
+5. Any file not allowed by an explicit rule or based on ISG or MI is blocked implicitly.
+
+## Known issues
+
+### Boot stop failure (blue screen) occurs if more than 32 policies are active
+
+Until you apply the Windows security update released on or after April 9, 2024, your device is limited to 32 active policies. If the maximum number of policies is exceeded, the device bluescreens referencing ci.dll with a bug check value of 0x0000003b. Consider this maximum policy count limit when planning your App Control policies. Any [Windows inbox policies](inbox-appcontrol-policies.md) that are active on the device also count towards this limit. To remove the maximum policy limit, install the Windows security update released on, or after, April 9, 2024 and then restart the device. Otherwise, reduce the number of policies on the device to remain below 32 policies.
+
+> [!NOTE]
+> The policy limit was not removed on Windows 11 21H2, and will remain limited to 32 policies.
+
+### Audit mode policies can change the behavior for some apps or cause app crashes
+
+Although App Control audit mode is designed to avoid impact to apps, some features are always on/always enforced with any App Control policy that turns on user mode code integrity (UMCI) with the option **0 Enabled:UMCI**. Here's a list of known system changes in audit mode:
+
+- Some script hosts might block code or run code with fewer privileges even in audit mode. See [Script enforcement with App Control](../design/script-enforcement.md) for information about individual script host behaviors.
+- Option **19 Enabled:Dynamic Code Security** is always enforced if any UMCI policy includes that option. See [App Control and .NET](../design/appcontrol-and-dotnet.md#app-control-and-net-hardening).
+
+### .NET native images may generate false positive block events
+
+In some cases, the code integrity logs where App Control for Business errors and warnings are written include error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image falls back to its corresponding assembly and .NET regenerates the native image at its next scheduled maintenance window.
+
+### Signatures using elliptical curve cryptography (ECC) aren't supported
+
+App Control signer-based rules only work with RSA cryptography. ECC algorithms, such as ECDSA, aren't supported. If App Control blocks a file based on ECC signatures, the corresponding 3089 signature information events show VerificationError = 23. You can authorize the files instead by hash or file attribute rules, or using other signer rules if the file is also signed with signatures using RSA.
+
+### MSI installers are treated as user writeable on Windows 10 when allowed by FilePath rule
+
+MSI installer files are always detected as user writeable on Windows 10, and on Windows Server 2022 and earlier. If you need to allow MSI files using FilePath rules, you must set option **18 Disabled:Runtime FilePath Rule Protection** in your App Control policy.
+
+### MSI Installations launched directly from the internet are blocked by App Control
+
+Installing .msi files directly from the internet to a computer protected by App Control fails.
+For example, this command fails:
+
+```cmd
+msiexec -i https://download.microsoft.com/download/2/E/3/2E3A1E42-8F50-4396-9E7E-76209EA4F429/Windows10_Version_1511_ADMX.msi
+```
+
+As a workaround, download the MSI file and run it locally:
+
+```cmd
+msiexec -i c:\temp\Windows10_Version_1511_ADMX.msi
+```
+
+### Slow boot and performance with custom policies
+
+App Control evaluates all processes that run, including inbox Windows processes. You can cause slower boot times, degraded performance, and possibly boot issues if your policies don't build upon the App Control templates or don't trust the Windows signers. For these reasons, you should use the [App Control base templates](../design/example-appcontrol-base-policies.md) whenever possible to create your policies.
+
+#### AppId Tagging policy considerations
+
+AppId Tagging policies that aren't built upon the App Control base templates or don't allow the Windows in-box signers might cause a significant increase in boot times (~2 minutes).
+
+If you can't allowlist the Windows signers or build off the App Control base templates, add the following rule to your policies to improve the performance:
+
+:::image type="content" source="../images/known-issue-appid-dll-rule.png" alt-text="Allow all dlls in the policy.":::
+
+:::image type="content" source="../images/known-issue-appid-dll-rule-xml.png" alt-text="Allow all dll files in the xml policy.":::
+
+Since AppId Tagging policies evaluate but can't tag dll files, this rule short circuits dll evaluation and improve evaluation performance.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/querying-application-control-events-centrally-using-advanced-hunting.md b/windows/security/application-security/application-control/app-control-for-business/operations/querying-application-control-events-centrally-using-advanced-hunting.md
similarity index 79%
rename from windows/security/application-security/application-control/windows-defender-application-control/operations/querying-application-control-events-centrally-using-advanced-hunting.md
rename to windows/security/application-security/application-control/app-control-for-business/operations/querying-application-control-events-centrally-using-advanced-hunting.md
index c17adb2b1c..d39105c4a1 100644
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/querying-application-control-events-centrally-using-advanced-hunting.md
+++ b/windows/security/application-security/application-control/app-control-for-business/operations/querying-application-control-events-centrally-using-advanced-hunting.md
@@ -1,29 +1,29 @@
 ---
-title: Query Application Control events with Advanced Hunting
-description: Learn how to query Windows Defender Application Control events across your entire organization by using Advanced Hunting.
+title: Query App Control events with Advanced Hunting
+description: Learn how to query App Control for Business events across your entire organization by using Advanced Hunting.
 ms.localizationpriority: medium
-ms.date: 03/01/2022
+ms.date: 09/11/2024
 ms.topic: troubleshooting
 ---
 
-# Querying Application Control events centrally using Advanced hunting
+# Querying App Control events centrally using Advanced hunting
 
-A Windows Defender Application Control (WDAC) policy logs events locally in Windows Event Viewer in either enforced or audit mode.
+An App Control for Business policy logs events locally in Windows Event Viewer in either enforced or audit mode.
 While Event Viewer helps to see the impact on a single system, IT Pros want to gauge it across many systems.
 
-In November 2018, we added functionality in Microsoft Defender for Endpoint that makes it easy to view WDAC events centrally from all connected systems.
+In November 2018, we added functionality in Microsoft Defender for Endpoint that makes it easy to view App Control events centrally from all connected systems.
 
-Advanced hunting in Microsoft Defender for Endpoint allows customers to query data using a rich set of capabilities. WDAC events can be queried with using an ActionType that starts with "AppControl".
+Advanced hunting in Microsoft Defender for Endpoint allows customers to query data using a rich set of capabilities. App Control events can be queried with using an ActionType that starts with "AppControl".
 This capability is supported beginning with Windows version 1607.
 
 ## Action Types
 
 | ActionType Name | ETW Source Event ID | Description |
 | - | - | - |
-| AppControlCodeIntegrityDriverRevoked | 3023 | The driver file under validation didn't meet the requirements to pass the application control policy. |
+| AppControlCodeIntegrityDriverRevoked | 3023 | The driver file under validation didn't meet the requirements to pass the App Control policy. |
 | AppControlCodeIntegrityImageRevoked | 3036 | The signed file under validation is signed by a code signing certificate that has been revoked by Microsoft or the certificate issuing authority. |
-| AppControlCodeIntegrityPolicyAudited | 3076 | This event is the main Windows Defender Application Control block event for audit mode policies. It indicates the file would have been blocked if the WDAC policy was enforced. |
-| AppControlCodeIntegrityPolicyBlocked | 3077 | This event is the main Windows Defender Application Control block event for enforced policies. It indicates the file didn't pass your WDAC policy and was blocked. |
+| AppControlCodeIntegrityPolicyAudited | 3076 | This event is the main App Control for Business block event for audit mode policies. It indicates the file would have been blocked if the App Control policy was enforced. |
+| AppControlCodeIntegrityPolicyBlocked | 3077 | This event is the main App Control for Business block event for enforced policies. It indicates the file didn't pass your App Control policy and was blocked. |
 | AppControlExecutableAudited | 8003 | Applied only when the Audit only enforcement mode is enabled. Specifies the .exe or .dll file would be blocked if the Enforce rules enforcement mode were enabled. |
 | AppControlExecutableBlocked | 8004 | The .exe or .dll file can't run. |
 | AppControlPackagedAppAudited | 8021 | Applied only when the Audit only enforcement mode is enabled. Specifies the packaged app would be blocked if the Enforce rules enforcement mode were enabled. |
@@ -39,15 +39,15 @@ This capability is supported beginning with Windows version 1607.
 | AppControlCodeIntegritySigningInformation | 3089 | Signing information event correlated with either a 3076 or 3077 event. One 3089 event is generated for each signature of a file. |
 | AppControlPolicyApplied | 8001 | Indicates the AppLocker policy was successfully applied to the computer. |
 
-Learn more about the [Understanding Application Control event IDs (Windows)](event-id-explanations.md)
+Learn more about the [Understanding App Control event IDs (Windows)](event-id-explanations.md)
 
-## Example Advanced Hunting Application Control Queries
+## Example Advanced Hunting App Control Queries
 
-Query Example 1: Query the application control action types summarized by type for past seven days
+Query Example 1: Query the App Control action types summarized by type for past seven days
 
-Here's a simple example query that shows all the Windows Defender Application Control events generated in the last seven days from machines being monitored by Microsoft Defender for Endpoint:
+Here's a simple example query that shows all the App Control for Business events generated in the last seven days from machines being monitored by Microsoft Defender for Endpoint:
 
-```
+```kusto
 DeviceEvents
 | where Timestamp > ago(7d) and
 ActionType startswith "AppControl"
@@ -55,7 +55,7 @@ ActionType startswith "AppControl"
 | order by Machines desc
 ```
 
-The query results can be used for several important functions related to managing Windows Defender Application Control including:
+The query results can be used for several important functions related to managing App Control for Business including:
 
 - Assessing the impact of deploying policies in audit mode
   Since applications still run in audit mode, it's an ideal way to see the impact and correctness of the rules included in the policy. Integrating the generated events with Advanced Hunting makes it much easier to have broad deployments of audit mode policies and see how the included rules would influence those systems in real world usage. This audit mode data will help streamline the transition to using policies in enforced mode.
@@ -64,7 +64,7 @@ The query results can be used for several important functions related to managin
 
 Query Example #2: Query to determine audit blocks in the past seven days
 
-```
+```kusto
 DeviceEvents
 | where ActionType startswith "AppControlExecutableAudited"
 | where Timestamp > ago(7d)
diff --git a/windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md b/windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md
deleted file mode 100644
index 239ddd052c..0000000000
--- a/windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md
+++ /dev/null
@@ -1,43 +0,0 @@
----
-title: Windows Defender Application Control and virtualization-based code integrity
-description: Hardware and software system integrity-hardening capabilities that can be deployed separately or in combination with Windows Defender Application Control (WDAC).
-ms.localizationpriority: medium
-author: vinaypamnani-msft
-ms.author: vinpa
-manager: aaroncz
-ms.date: 03/26/2024
-ms.topic: conceptual
-appliesto:
-- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>
-- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>
-- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>
-- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>
-- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>
----
-
-# Windows Defender Application Control and virtualization-based protection of code integrity
-
-Windows includes a set of hardware and OS technologies that, when configured together, allow enterprises to "lock down" Windows systems so they behave more like kiosk devices. In this configuration, [**Windows Defender Application Control (WDAC)**](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control) is used to restrict devices to run only approved apps, while the OS is hardened against kernel memory attacks using [**memory integrity**](../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md).
-
-> [!NOTE]
-> Memory integrity is sometimes referred to as *hypervisor-protected code integrity (HVCI)* or *hypervisor enforced code integrity*, and was originally released as part of *Device Guard*. Device Guard is no longer used except to locate memory integrity and VBS settings in Group Policy or the Windows registry.
-
-WDAC policies and memory integrity are powerful protections that can be used separately. However, when these two technologies are configured to work together, they present a strong protection capability for Windows devices. Using WDAC to restrict devices to only authorized apps has these advantages over other solutions:
-
-1. The Windows kernel handles enforcement of WDAC policy and requires no other services or agents.
-1. The WDAC policy takes effect early in the boot sequence before nearly all other OS code and before traditional antivirus solutions run.
-1. WDAC lets you set application control policy for any code that runs on Windows, including kernel mode drivers and even code that runs as part of Windows.
-1. Customers can protect the WDAC policy even from local administrator tampering by digitally signing the policy. Changing signed policy requires both administrative privilege and access to the organization's digital signing process. Using signed policies makes it difficult for an attacker, including one who manages to gain administrative privilege, to tamper with WDAC policy.
-1. You can protect the entire WDAC enforcement mechanism with memory integrity. Even if a vulnerability exists in kernel mode code, memory integrity greatly reduces the likelihood that an attacker could successfully exploit it. Without memory integrity, an attacker who compromises the kernel could normally disable most system defenses, including application control policies enforced by WDAC or any other application control solution.
-
-There are no direct dependencies between WDAC and memory integrity. You can deploy them individually or together and there's no order in which they must be deployed.
-
-Memory integrity relies on Windows Virtualization-based security, and has hardware, firmware, and kernel driver compatibility requirements that some older systems can't meet.
-
-WDAC has no specific hardware or software requirements.
-
-## Related articles
-
-- [Windows Defender Application Control](windows-defender-application-control/wdac.md)
-- [Memory integrity](../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md)
-- [Driver compatibility with memory integrity](https://techcommunity.microsoft.com/t5/windows-hardware-certification/driver-compatibility-with-device-guard-in-windows-10/ba-p/364865)
diff --git a/windows/security/application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md b/windows/security/application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md
new file mode 100644
index 0000000000..ce8d6225a0
--- /dev/null
+++ b/windows/security/application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md
@@ -0,0 +1,43 @@
+---
+title: App Control for Business and virtualization-based code integrity
+description: Hardware and software system integrity-hardening capabilities that can be deployed separately or in combination with App Control for Business.
+ms.localizationpriority: medium
+author: vinaypamnani-msft
+ms.author: vinpa
+manager: aaroncz
+ms.date: 09/11/2024
+ms.topic: conceptual
+appliesto:
+- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>
+- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>
+- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>
+- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>
+- ✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>
+---
+
+# App Control and virtualization-based protection of code integrity
+
+Windows includes a set of hardware and OS technologies that, when configured together, allow enterprises to "lock down" Windows systems so they behave more like kiosk devices. In this configuration, [**App Control for Business**](app-control-for-business/appcontrol.md) is used to restrict devices to run only approved apps, while the OS is hardened against kernel memory attacks using [**memory integrity**](../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md).
+
+> [!NOTE]
+> Memory integrity is sometimes referred to as **hypervisor-protected code integrity (HVCI)** or **hypervisor enforced code integrity**, and was originally released as part of **Device Guard**. Device Guard is no longer used except to locate memory integrity and VBS settings in Group Policy or the Windows registry.
+
+App Control policies and memory integrity are powerful protections that can be used separately. However, when these two technologies are configured to work together, they present a strong protection capability for Windows devices. Using App Control to restrict devices to only authorized apps has these advantages over other solutions:
+
+1. The Windows kernel handles enforcement of App Control policy and requires no other services or agents.
+1. The App Control policy takes effect early in the boot sequence before nearly all other OS code and before traditional antivirus solutions run.
+1. App Control lets you set application control policy for any code that runs on Windows, including kernel mode drivers and even code that runs as part of Windows.
+1. Customers can protect the App Control policy even from local administrator tampering by digitally signing the policy. Changing signed policy requires both administrative privilege and access to the organization's digital signing process. Using signed policies makes it difficult for an attacker, including one who manages to gain administrative privilege, to tamper with App Control policy.
+1. You can protect the entire App Control enforcement mechanism with memory integrity. Even if a vulnerability exists in kernel mode code, memory integrity greatly reduces the likelihood that an attacker could successfully exploit it. Without memory integrity, an attacker who compromises the kernel could normally disable most system defenses, including application control policies enforced by App Control or any other application control solution.
+
+There are no direct dependencies between App Control and memory integrity. You can deploy them individually or together and there's no order in which they must be deployed.
+
+Memory integrity relies on Windows Virtualization-based security, and has hardware, firmware, and kernel driver compatibility requirements that some older systems can't meet.
+
+App Control has no specific hardware or software requirements.
+
+## Related articles
+
+- [App Control for Business](app-control-for-business/appcontrol.md)
+- [Memory integrity](../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md)
+- [Driver compatibility with memory integrity](https://techcommunity.microsoft.com/t5/windows-hardware-certification/driver-compatibility-with-device-guard-in-windows-10/ba-p/364865)
diff --git a/windows/security/application-security/application-control/toc.yml b/windows/security/application-security/application-control/toc.yml
index f8b2ebf7a8..3a7a1fa706 100644
--- a/windows/security/application-security/application-control/toc.yml
+++ b/windows/security/application-security/application-control/toc.yml
@@ -1,10 +1,10 @@
 items:
 - name: Smart App Control
-  href: windows-defender-application-control/wdac.md
-- name: Windows Defender Application Control
-  href: windows-defender-application-control/wdac.md
-- name: Windows Defender Application Control and virtualization-based protection of code integrity
-  href: introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md
+  href: app-control-for-business/appcontrol.md
+- name: App Control for Business
+  href: app-control-for-business/appcontrol.md
+- name: App Control for Business and virtualization-based protection of code integrity
+  href: introduction-to-virtualization-based-security-and-appcontrol.md
 - name: User Account Control (UAC)
   items:
   - name: Overview
@@ -14,5 +14,4 @@ items:
   - name: UAC settings and configuration
     href: user-account-control/settings-and-configuration.md
 - name: Microsoft Vulnerable Driver Blocklist
-  href: windows-defender-application-control/design/microsoft-recommended-driver-block-rules.md
-  
+  href: app-control-for-business/design/microsoft-recommended-driver-block-rules.md
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/design-create-appid-tagging-policies.md b/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/design-create-appid-tagging-policies.md
deleted file mode 100644
index 4b7e1e6b2f..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/AppIdTagging/design-create-appid-tagging-policies.md
+++ /dev/null
@@ -1,104 +0,0 @@
----
-title: Create your Windows Defender Application Control AppId Tagging Policies
-description: Create your Windows Defender Application Control AppId tagging policies for Windows devices.
-ms.localizationpriority: medium
-ms.date: 04/29/2022
-ms.topic: conceptual
----
-
-# Creating your WDAC AppId Tagging Policies
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-## Create the policy using the WDAC Wizard
-
-You can use the Windows Defender Application Control (WDAC) Wizard and the PowerShell commands to create an application control policy and convert it to an AppIdTagging policy. The WDAC Wizard is available for download at the [WDAC Wizard Installer site](https://aka.ms/wdacwizard). These PowerShell commands are only available on the supported platforms listed in [AppId Tagging Guide](wdac-appid-tagging-guide.md).
-
-1. Create a new base policy using the templates:
-
-	Start with the Policy Creator task and select Multiple Policy Format and Base Policy. Select the Base Template to use for the policy. The following example shows beginning with the [Default Windows Mode](../design/wdac-wizard-create-base-policy.md#template-base-policies) template and build on top of these rules.
-
-	![Configuring the policy base and template.](../images/appid-wdac-wizard-1.png)
-
-	> [!NOTE]
-	> If your AppId Tagging Policy does build off the base templates or does not allow Windows in-box processes, you will notice significant performance regressions, especially during boot. For this reason, it is strongly recommended to build off the base templates.
-	For more information on the issue, see the [AppId Tagging Known Issue](../operations/known-issues.md#slow-boot-and-performance-with-custom-policies).
-
-2. 	Set the following rule-options using the Wizard toggles:
-
-	![Configuring the policy rule-options.](../images/appid-wdac-wizard-2.png)
-
-3. Create custom rules:
-
-	Selecting the `+ Custom Rules` button opens the Custom Rules panel. The Wizard supports five types of file rules:
-
-	- Publisher rules: Create a rule based off the signing certificate hierarchy. Additionally, the original filename and version can be combined with the signing certificate for added security.
-	- Path rules: Create a rule based off the path to a file or a parent folder path. Path rules support wildcards.
-	- File attribute rules: Create a rule based off a file's immutable properties like the original filename, file description, product name or internal name.
-	- Package app name rules: Create a rule based off the package family name of an appx/msix.
-	- Hash rules: Create a rule based off the PE Authenticode hash of a file.
-
-	For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](../design/wdac-wizard-create-base-policy.md#creating-custom-file-rules).
-
-4. Convert to AppId Tagging Policy:
-
-	After the Wizard builds the policy file, open the file in a text editor and remove the entire "Value=131" SigningScenario text block. The only remaining signing scenario should be "Value=12" which is the user mode application section. Next, open PowerShell in an elevated prompt and run the following command. Replace the AppIdTagging Key-Value pair for your scenario:
-
-	```powershell
-	Set-CIPolicyIdInfo -ResetPolicyID -FilePath .\AppIdPolicy.xml -AppIdTaggingPolicy -AppIdTaggingKey "MyKey" -AppIdTaggingValue "MyValue"
-	```
-	The policyID GUID is returned by the PowerShell command if successful.
-
-## Create the policy using PowerShell
-
-Using this method, you create an AppId Tagging policy directly using the WDAC PowerShell commands. These PowerShell commands are only available on the supported platforms listed in [AppId Tagging Guide](wdac-appid-tagging-guide.md). In an elevate PowerShell instance:
-
-1. Create an AppId rule for the policy based on a combination of the signing certificate chain and version of the application. In the example below, the level has been set to SignedVersion. Any of the [WDAC File Rule Levels](../design/select-types-of-rules-to-create.md#table-2-windows-defender-application-control-policy---file-rule-levels) can be used in AppId rules:
-
-	```powershell
-	$rule = New-CiPolicyRule -Level SignedVersion -DriverFilePath <path_to_application>
-	```
-2. Create the AppId Tagging Policy. Replace the AppIdTagging Key-Value pair for your scenario:
-
-	```powershell
-	New-CIPolicy -rules $rule -FilePath .\AppIdPolicy.xml -AppIdTaggingPolicy -AppIdTaggingKey "MyKey" -AppIdTaggingValue "MyValue"
-	```
-3. Set the rule-options for the policy:
-
-	```powershell
-	Set-RuleOption -Option 0 .\AppIdPolicy.xml  # Usermode Code Integrity (UMCI)
-	Set-RuleOption -Option 16 .\AppIdPolicy.xml # Refresh Policy no Reboot
-	Set-RuleOption -Option 18 .\AppIdPolicy.xml # (Optional) Disable FilePath Rule Protection
-	```
-
-	If you're using filepath rules, you may want to set option 18. Otherwise, there's no need.
-
-4. Set the name and ID on the policy, which is helpful for future debugging:
-
-	```powershell
-	Set-CIPolicyIdInfo -ResetPolicyId -PolicyName "MyPolicyName" -PolicyId "MyPolicyId" -AppIdTaggingPolicy -FilePath ".\AppIdPolicy.xml"
-	```
-	The policyID GUID is returned by the PowerShell command if successful.
-
-## Deploy for Local Testing
-
-After creating your AppId Tagging policy in the above steps, you can deploy the policy to your local machine for testing before broadly deploying the policy to your endpoints:
-
-1. Depending on your deployment method, convert the xml to binary:
-
-	```powershell
-	Convertfrom-CIPolicy .\policy.xml ".\{PolicyIDGUID}.cip"
-	```
-
-2. Optionally, deploy it for local testing:
-
-	```powershell
-		copy ".\{Policy ID}.cip" c:\windows\system32\codeintegrity\CiPolicies\Active\
-		./RefreshPolicy.exe
-	```
-
-	RefreshPolicy.exe is available for download from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=102925).
-
-## Next Steps
-For more information on debugging and broad deployment of the AppId Tagging policy, see [Debugging AppId policies](debugging-operational-guide-appid-tagging-policies.md) and [Deploying AppId policies](deploy-appid-tagging-policies.md).
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/audit-wdac-policies.md b/windows/security/application-security/application-control/windows-defender-application-control/deployment/audit-wdac-policies.md
deleted file mode 100644
index fa463a999a..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/audit-wdac-policies.md
+++ /dev/null
@@ -1,61 +0,0 @@
----
-title: Use audit events to create WDAC policy rules
-description: Audits allow admins to discover apps, binaries, and scripts that should be added to the WDAC policy.
-ms.localizationpriority: medium
-ms.date: 05/03/2018
-ms.topic: conceptual
----
-
-# Use audit events to create WDAC policy rules
-
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Application Control feature availability](../feature-availability.md).
-
-Running Application Control in audit mode lets you discover applications, binaries, and scripts that are missing from your WDAC policy but should be included.
-
-While a WDAC policy is running in audit mode, any binary that runs but would have been denied is logged in the **Applications and Services Logs\\Microsoft\\Windows\\CodeIntegrity\\Operational** event log. Script and MSI are logged in the **Applications and Services Logs\\Microsoft\\Windows\\AppLocker\\MSI and Script** event log. These events can be used to generate a new WDAC policy that can be merged with the original Base policy or deployed as a separate Supplemental policy, if allowed.
-
-## Overview of the process to create WDAC policy to allow apps using audit events
-
-> [!Note]
-> You must have already deployed a WDAC audit mode policy to use this process. If you have not already done so, see [Deploying Windows Defender Application Control policies](wdac-deployment-guide.md).
-
-To familiarize yourself with creating WDAC rules from audit events, follow these steps on a device with a WDAC audit mode policy.
-
-1. Install and run an application not allowed by the WDAC policy but that you want to allow.
-
-2. Review the **CodeIntegrity - Operational** and **AppLocker - MSI and Script** event logs to confirm events, like those shown in Figure 1, are generated related to the application. For information about the types of events you should see, refer to [Understanding Application Control events](../operations/event-id-explanations.md).
-
-   **Figure 1. Exceptions to the deployed WDAC policy**
-   ![Event showing exception to WDAC policy.](../images/dg-fig23-exceptionstocode.png)
-
-3. In an elevated PowerShell session, run the following commands to initialize variables used by this procedure. This procedure builds upon the **Lamna_FullyManagedClients_Audit.xml** policy introduced in [Create a WDAC policy for fully managed devices](../design/create-wdac-policy-for-fully-managed-devices.md) and will produce a new policy called **EventsPolicy.xml**.
-
-   ```powershell
-   $PolicyName= "Lamna_FullyManagedClients_Audit"
-   $LamnaPolicy=$env:userprofile+"\Desktop\"+$PolicyName+".xml"
-   $EventsPolicy=$env:userprofile+"\Desktop\EventsPolicy.xml"
-   $EventsPolicyWarnings=$env:userprofile+"\Desktop\EventsPolicyWarnings.txt"
-   ```
-
-4. Use [New-CIPolicy](/powershell/module/configci/new-cipolicy) to generate a new WDAC policy from logged audit events. This example uses a **FilePublisher** file rule level and a **Hash** fallback level. Warning messages are redirected to a text file **EventsPolicyWarnings.txt**.
-
-   ```powershell
-   New-CIPolicy -FilePath $EventsPolicy -Audit -Level FilePublisher -Fallback SignedVersion,FilePublisher,Hash -UserPEs -MultiplePolicyFormat 3> $EventsPolicyWarnings
-   ```
-
-   > [!NOTE]
-   > When you create policies from audit events, you should carefully consider the file rule level that you select to trust. The preceding example uses the **FilePublisher** rule level with a fallback level of  **Hash**, which may be more specific than desired. You can re-run the above command using different **-Level** and **-Fallback** options to meet your needs. For more information about WDAC rule levels, see [Understand WDAC policy rules and file rules](../design/select-types-of-rules-to-create.md).
-
-5. Find and review the WDAC policy file **EventsPolicy.xml** that should be found on your desktop. Ensure that it only includes file and signer rules for applications, binaries, and scripts you wish to allow. You can remove rules by manually editing the policy XML or use the WDAC Policy Wizard tool (see [Editing existing base and supplemental WDAC policies with the Wizard](../design/wdac-wizard-editing-policy.md)).
-
-6. Find and review the text file **EventsPolicyWarnings.txt** that should be found on your desktop. This file will include a warning for any files that WDAC couldn't create a rule for at either the specified rule level or fallback rule level.
-
-   > [!NOTE]
-   > New-CIPolicy only creates rules for files that can still be found on disk. Files which are no longer present on the system will not have a rule created to allow them. However, the event log should have sufficient information to allow these files by manually editing the policy XML to add rules. You can use an existing rule as a template and verify your results against the WDAC policy schema definition found at **%windir%\schemas\CodeIntegrity\cipolicy.xsd**.
-
-7. Merge **EventsPolicy.xml** with the Base policy **Lamna_FullyManagedClients_Audit.xml** or convert it to a supplemental policy.
-
-    For information on merging policies, refer to [Merge Windows Defender Application Control policies](merge-wdac-policies.md) and for information on supplemental policies see [Use multiple Windows Defender Application Control Policies](../design/deploy-multiple-wdac-policies.md).
-
-8. Convert the Base or Supplemental policy to binary and deploy using your preferred method.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-group-policy.md b/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-group-policy.md
deleted file mode 100644
index 78a686dada..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-group-policy.md
+++ /dev/null
@@ -1,59 +0,0 @@
----
-title: Deploy WDAC policies via Group Policy
-description: Windows Defender Application Control (WDAC) policies can easily be deployed and managed with Group Policy. Learn how by following this step-by-step guide.
-ms.localizationpriority: medium
-ms.date: 01/23/2023
-ms.topic: how-to
----
-
-# Deploy Windows Defender Application Control policies by using Group Policy
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-> [!IMPORTANT]
-> Due to a known issue, you should always activate new **signed** WDAC Base policies *with a reboot* on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. Instead of Group Policy, deploy new signed WDAC Base policies [via script](/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script#deploying-signed-policies) and activate the policy with a system restart.
->
-> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
-
-Single-policy format Windows Defender Application Control policies (pre-1903 policy schema) can be easily deployed and managed with Group Policy.
-
-> [!IMPORTANT]
-> Group Policy-based deployment of Windows Defender Application Control policies only supports single-policy format WDAC policies. To use WDAC on devices running Windows 10 1903 and greater, or Windows 11, we recommend using an alternative method for policy deployment.
-
-You should now have a WDAC policy converted into binary form. If not, follow the steps described in [Deploying Windows Defender Application Control (WDAC) policies](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide).
-
-The following procedure walks you through how to deploy a WDAC policy called **SiPolicy.p7b** to a test OU called *WDAC Enabled PCs* by using a GPO called **Contoso GPO Test**.
-
-To deploy and manage a Windows Defender Application Control policy with Group Policy:
-
-1. On a client computer on which RSAT is installed, open the GPMC by running **GPMC.MSC**
-
-2. Create a new GPO: right-click an OU and then select **Create a GPO in this domain, and Link it here**.
-
-   > [!NOTE]
-   > You can use any OU name. Also, security group filtering is an option when you consider different ways of combining WDAC policies (or keeping them separate), as discussed in [Plan for Windows Defender Application Control lifecycle policy management](../design/plan-wdac-management.md).
-
-   ![Group Policy Management, create a GPO.](../images/dg-fig24-creategpo.png)
-
-3. Name the new GPO. You can choose any name.
-
-4. Open the Group Policy Management Editor: right-click the new GPO, and then select **Edit**.
-
-5. In the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Right-click **Deploy Windows Defender Application Control** and then select **Edit**.
-
-    ![Edit the Group Policy for Windows Defender Application Control.](../images/wdac-edit-gp.png)
-
-6. In the **Deploy Windows Defender Application Control** dialog box, select the **Enabled** option, and then specify the WDAC policy deployment path.
-
-    In this policy setting, you specify either the local path where the policy will exist on each client computer or a Universal Naming Convention (UNC) path that the client computers will look to retrieve the latest version of the policy. For example, the path to SiPolicy.p7b using the steps described in [Deploying Windows Defender Application Control (WDAC) policies](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide) would be %USERPROFILE%\Desktop\SiPolicy.p7b.
-
-    > [!NOTE]
-    > This policy file does not need to be copied to every computer. You can instead copy the WDAC policies to a file share to which all computer accounts have access. Any policy selected here is converted to SIPolicy.p7b when it is deployed to the individual client computers.
-
-    ![Group Policy called Deploy Windows Defender Application Control.](../images/dg-fig26-enablecode.png)
-
-    > [!NOTE]
-    > You may have noticed that the GPO setting references a .p7b file, but the file extension and name of the policy binary do not matter. Regardless of what you name your policy binary, they are all converted to SIPolicy.p7b when applied to the client computers running Windows 10. If you are deploying different WDAC policies to different sets of devices, you may want to give each of your WDAC policies a friendly name and allow the system to convert the policy names for you to ensure that the policies are easily distinguishable when viewed in a share or any other central repository.
-
-7. Close the Group Policy Management Editor, and then restart the Windows test computer. Restarting the computer updates the WDAC policy.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-intune.md b/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-intune.md
deleted file mode 100644
index c7086b6b5e..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-intune.md
+++ /dev/null
@@ -1,90 +0,0 @@
----
-title: Deploy WDAC policies using Mobile Device Management (MDM)
-description: You can use an MDM like Microsoft Intune to configure Windows Defender Application Control (WDAC). Learn how with this step-by-step guide.
-ms.localizationpriority: medium
-ms.date: 08/30/2023
-ms.topic: how-to
----
-
-# Deploy WDAC policies using Mobile Device Management (MDM)
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-You can use a Mobile Device Management (MDM) solution, like Microsoft Intune, to configure Windows Defender Application Control (WDAC) on client machines. Intune includes native support for WDAC, which can be a helpful starting point, but customers may find the available circle-of-trust options too limiting. To deploy a custom policy through Intune and define your own circle of trust, you can configure a profile using Custom OMA-URI. If your organization uses another MDM solution, check with your solution provider for WDAC policy deployment steps.
-
-> [!IMPORTANT]
-> Due to a known issue, you should always activate new **signed** WDAC Base policies *with a reboot* on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. Instead of Mobile Device Management (MDM), deploy new signed WDAC Base policies [via script](deploy-wdac-policies-with-script.md) and activate the policy with a system restart.
->
-> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
-
-## Use Intune's built-in policies
-
-Intune's built-in Windows Defender Application Control support allows you to configure Windows client computers to only run:
-
-- Windows components
-- Third-party hardware and software kernel drivers
-- Microsoft Store-signed apps
-- [Optional] Reputable apps as defined by the Intelligent Security Graph (ISG)
-
-> [!NOTE]
-> Intune's built-in policies use the pre-1903 single-policy format version of the DefaultWindows policy. Use the [improved Intune WDAC experience](/mem/intune/protect/endpoint-security-app-control-policy), currently in public preview, to create and deploy multiple-policy format files. Or, you can use Intune's custom OMA-URI feature to deploy your own multiple-policy format WDAC policies and leverage features available on Windows 10 1903+ or Windows 11 as described later in this topic.
-
-> [!NOTE]
-> Intune currently uses the AppLocker CSP to deploy its built-in policies. The AppLocker CSP always requests a device restart when it applies WDAC policies. Use the [improved Intune WDAC experience](/mem/intune/protect/endpoint-security-app-control-policy), currently in public preview, to deploy your own WDAC policies without a restart. Or, you can use Intune's custom OMA-URI feature with the ApplicationControl CSP.
-
-To use Intune's built-in WDAC policies, configure [Endpoint Protection for Windows 10 (and later)](/mem/intune/protect/endpoint-protection-windows-10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json).
-
-## Deploy WDAC policies with custom OMA-URI
-
-> [!NOTE]
-> Policies deployed through Intune custom OMA-URI are subject to a 350,000 byte limit. Customers should create Windows Defender Application Control policies that use signature-based rules, the Intelligent Security Graph, and managed installers where practical. Customers whose devices are running 1903+ builds of Windows are also encouraged to use [multiple policies](../design/deploy-multiple-wdac-policies.md) which allow more granular policy.
-
-You should now have one or more WDAC policies converted into binary form. If not, follow the steps described in [Deploying Windows Defender Application Control (WDAC) policies](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide).
-
-### Deploy custom WDAC policies on Windows 10 1903+
-
-Beginning with Windows 10 1903, custom OMA-URI policy deployment can use the [ApplicationControl CSP](/windows/client-management/mdm/applicationcontrol-csp), which has support for multiple policies and rebootless policies.
-
-> [!NOTE]
-> You must convert your custom policy XML to binary form before deploying with OMA-URI.
-
-The steps to use Intune's custom OMA-URI functionality are:
-
-1. Open the Microsoft Intune portal and [create a profile with custom settings](/mem/intune/configuration/custom-settings-windows-10).
-
-2. Specify a **Name** and **Description** and use the following values for the remaining custom OMA-URI settings:
-    - **OMA-URI**: `./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy`
-    - **Data type**: Base64 (file)
-    - **Certificate file**: Upload your binary format policy file. To do this, change your {GUID}.cip file to {GUID}.bin. You don't need to upload a Base64 file, as Intune converts the uploaded .bin file to Base64 on your behalf.
-
-    :::image type="content" alt-text="Configure custom WDAC." source="../images/wdac-intune-custom-oma-uri.png" lightbox="../images/wdac-intune-custom-oma-uri.png":::
-
-> [!NOTE]
-> For the _Policy GUID_ value, do not include the curly brackets.
-
-### Remove WDAC policies on Windows 10 1903+
-
-Upon deletion, policies deployed through Intune via the ApplicationControl CSP are removed from the system but stay in effect until the next reboot. In order to disable Windows Defender Application Control enforcement, first replace the existing policy with a new version of the policy that will "Allow *", like the rules in the example  policy at %windir%\schemas\CodeIntegrity\ExamplePolicies\AllowAll.xml. Once the updated policy is deployed, you can then delete the policy from the Intune portal. This deletion will prevent anything from being blocked and fully remove the WDAC policy on the next reboot.
-
-### For pre-1903 systems
-
-#### Deploying policies
-
-The steps to use Intune's Custom OMA-URI functionality to apply the [AppLocker CSP](/windows/client-management/mdm/applocker-csp) and deploy a custom WDAC policy to pre-1903 systems are:
-
-1. Convert the policy XML to binary format using the [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) cmdlet in order to be deployed. The binary policy may be signed or unsigned.
-
-2. Open the Microsoft Intune portal and [create a profile with custom settings](/mem/intune/configuration/custom-settings-windows-10).
-
-3. Specify a **Name** and **Description** and use the following values for the remaining custom OMA-URI settings:
-    - **OMA-URI**: `./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/_Grouping_/CodeIntegrity/Policy`
-    - **Data type**: Base64 (file)
-    - **Certificate file**: upload your binary format policy file
-
-   > [!NOTE]
-   > Deploying policies via the AppLocker CSP will force a reboot during OOBE.
-
-#### Removing policies
-
-Policies deployed through Intune via the AppLocker CSP can't be deleted through the Intune console. In order to disable Windows Defender Application Control policy enforcement, either deploy an audit-mode policy or use a script to delete the existing policy.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-memcm.md b/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-memcm.md
deleted file mode 100644
index d4135733c2..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-memcm.md
+++ /dev/null
@@ -1,82 +0,0 @@
----
-title: Deploy Windows Defender Application Control policies with Configuration Manager
-description: You can use Microsoft Configuration Manager to configure Windows Defender Application Control (WDAC). Learn how with this step-by-step guide.
-ms.date: 06/27/2022
-ms.topic: how-to
-ms.localizationpriority: medium
----
-
-# Deploy WDAC policies by using Microsoft Configuration Manager
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Application Control feature availability](../feature-availability.md).
-
-You can use Microsoft Configuration Manager to configure Windows Defender Application Control (WDAC) on client machines.
-
-## Use Configuration Manager's built-in policies
-
-Configuration Manager includes native support for WDAC, which allows you to configure Windows 10 and Windows 11 client computers with a policy that will only allow:
-
-- Windows components
-- Microsoft Store apps
-- Apps installed by Configuration Manager (Configuration Manager self-configured as a managed installer)
-- (Optional) Reputable apps as defined by the Intelligent Security Graph (ISG)
-- (Optional) Apps and executables already installed in admin-definable folder locations that Configuration Manager will allow through a one-time scan during policy creation on managed endpoints.
-
-Configuration Manager doesn't remove policies once deployed. To stop enforcement, you should switch the policy to audit mode, which will produce the same effect. If you want to disable Windows Defender Application Control (WDAC) altogether (including audit mode), you can deploy a script to delete the policy file from disk, and either trigger a reboot or wait for the next reboot.
-
-### Create a WDAC Policy in Configuration Manager
-
-1. Select **Asset and Compliance** > **Endpoint Protection** > **Windows Defender Application Control** > **Create Application Control Policy**
-
-    ![Create a WDAC policy in Configuration Manager.](../images/memcm/memcm-create-wdac-policy.jpg)
-
-2. Enter the name of the policy > **Next**
-3. Enable **Enforce a restart of devices so that this policy can be enforced for all processes**
-4. Select the mode that you want the policy to run (Enforcement enabled / Audit Only)
-5. Select **Next**
-
-    ![Create an enforced WDAC policy in Configuration Manager.](../images/memcm/memcm-create-wdac-policy-2.jpg)
-
-6. Select **Add** to begin creating rules for trusted software
-
-    ![Create a WDAC path rule in Configuration Manager.](../images/memcm/memcm-create-wdac-rule.jpg)
-
-7. Select **File** or **Folder** to create a path rule > **Browse**
-
-    ![Select a file or folder to create a path rule.](../images/memcm/memcm-create-wdac-rule-2.jpg)
-
-8. Select the executable or folder for your path rule > **OK**
-
-    ![Select the executable file or folder.](../images/memcm/memcm-create-wdac-rule-3.jpg)
-
-9. Select **OK** to add the rule to the table of trusted files or folder
-10. Select **Next** to navigate to the summary page > **Close**
-
-    ![Confirm the WDAC path rule in Configuration Manager.](../images/memcm/memcm-confirm-wdac-rule.jpg)
-
-### Deploy the WDAC policy in Configuration Manager
-
-1. Right-click the newly created policy > **Deploy Application Control Policy**
-
-    ![Deploy WDAC via Configuration Manager.](../images/memcm/memcm-deploy-wdac.jpg)
-
-2. Select **Browse**
-
-    ![Select Browse.](../images/memcm/memcm-deploy-wdac-2.jpg)
-
-3. Select the Device Collection you created earlier > **OK**
-
-    ![Select the device collection.](../images/memcm/memcm-deploy-wdac-3.jpg)
-
-4. Change the schedule > **OK**
-
-    ![Change the WDAC deployment schedule.](../images/memcm/memcm-deploy-wdac-4.jpg)
-
-For more information on using Configuration Manager's native WDAC policies, see [Windows Defender Application Control management with Configuration Manager](/mem/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager).
-
-Download the entire [WDAC in Configuration Manager lab paper](https://download.microsoft.com/download/c/f/d/cfd6227c-8ec4-442d-8c50-825550d412f6/WDAC-Deploy-WDAC-using-MEMCM.pdf).
-
-## Deploy custom WDAC policies using Packages/Programs or Task Sequences
-
-Using Configuration Manager's built-in policies can be a helpful starting point, but customers may find the circle-of-trust options available in Configuration Manager too limiting. To define your own circle-of-trust, you can use Configuration Manager to deploy custom WDAC policies using [script-based deployment](deploy-wdac-policies-with-script.md) via Software Distribution Packages and Programs or Operating System Deployment Task Sequences.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md b/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md
deleted file mode 100644
index 6910b03b04..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md
+++ /dev/null
@@ -1,105 +0,0 @@
----
-title: Deploy Windows Defender Application Control (WDAC) policies using script
-description: Use scripts to deploy Windows Defender Application Control (WDAC) policies. Learn how with this step-by-step guide.
-ms.manager: jsuther
-ms.date: 01/23/2023
-ms.topic: how-to
-ms.localizationpriority: medium
----
-
-# Deploy WDAC policies using script
-
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
-
-This article describes how to deploy Windows Defender Application Control (WDAC) policies using script. The following instructions use PowerShell but can work with any scripting host.
-
-You should now have one or more WDAC policies converted into binary form. If not, follow the steps described in [Deploying Windows Defender Application Control (WDAC) policies](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide).
-
-> [!IMPORTANT]
-> Due to a known issue, you should always activate new **signed** WDAC Base policies with a reboot on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. Skip all steps below that use CiTool, RefreshPolicy.exe, or WMI to initiate a policy activation. Instead, copy the policy binary to the correct system32 and EFI locations and then activate the policy with a system restart.
->
-> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
-
-## Deploying policies for Windows 11 22H2 and above
-
-You can use the inbox [CiTool](/windows/security/threat-protection/windows-defender-application-control/operations/citool-commands) to apply policies on Windows 11 22H2 with the following commands. Be sure to replace **&lt;Path to policy binary file to deploy&gt;** in the following example with the actual path to your WDAC policy binary file.
-
-```powershell
-# Policy binary files should be named as {GUID}.cip for multiple policy format files (where {GUID} = <PolicyId> from the Policy XML)
-$PolicyBinary = "<Path to policy binary file to deploy>"
-CiTool --update-policy $PolicyBinary [-json]
-```
-
-## Deploying policies for Windows 11, Windows 10 version 1903 and above, and Windows Server 2022 and above
-
-To use this procedure, download and distribute the [WDAC policy refresh tool](https://aka.ms/refreshpolicy) to all managed endpoints. Ensure your WDAC policies allow the WDAC policy refresh tool or use a managed installer to distribute the tool.
-
-1. Initialize the variables to be used by the script.
-
-    ```powershell
-    # Policy binary files should be named as {GUID}.cip for multiple policy format files (where {GUID} = <PolicyId> from the Policy XML)
-    $PolicyBinary = "<Path to policy binary file to deploy>"
-    $DestinationFolder = $env:windir+"\System32\CodeIntegrity\CIPolicies\Active\"
-    $RefreshPolicyTool = "<Path where RefreshPolicy.exe can be found from managed endpoints>"
-    ```
-
-2. Copy Windows Defender Application Control (WDAC) policy binary to the destination folder.
-
-   ```powershell
-   Copy-Item -Path $PolicyBinary -Destination $DestinationFolder -Force
-   ```
-
-3. Repeat steps 1-2 as appropriate to deploy more WDAC policies.
-4. Run RefreshPolicy.exe to activate and refresh all WDAC policies on the managed endpoint.
-
-   ```powershell
-   & $RefreshPolicyTool
-   ```
-
-## Deploying policies for all other versions of Windows and Windows Server
-
-Use WMI to apply policies on all other versions of Windows and Windows Server.
-
-1. Initialize the variables to be used by the script.
-
-    ```powershell
-    # Policy binary files should be named as SiPolicy.p7b for Windows 10 versions earlier than 1903
-    $PolicyBinary = "<Path to policy binary file to deploy>"
-    $DestinationBinary = $env:windir+"\System32\CodeIntegrity\SiPolicy.p7b"
-    ```
-
-2. Copy Windows Defender Application Control (WDAC) policy binary to the destination.
-
-   ```powershell
-   Copy-Item  -Path $PolicyBinary -Destination $DestinationBinary -Force
-   ```
-
-3. Refresh and activate WDAC policy using WMI
-
-   ```powershell
-   Invoke-CimMethod -Namespace root\Microsoft\Windows\CI -ClassName PS_UpdateAndCompareCIPolicy -MethodName Update -Arguments @{FilePath = $DestinationBinary}
-   ```
-
-## Deploying signed policies
-
-If you're using [signed WDAC policies](/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering), the policies must be deployed into your device's EFI partition in addition to the locations outlined in the earlier sections. Unsigned WDAC policies don't need to be present in the EFI partition. <!-- Deploying your policy via [Microsoft Intune](/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune) or the Application Control CSP will handle this step automatically. -->
-
-1. Mount the EFI volume and make the directory, if it doesn't exist, in an elevated PowerShell prompt:
-
-    ```powershell
-   $MountPoint = 'C:\EFIMount'
-   $EFIDestinationFolder = "$MountPoint\EFI\Microsoft\Boot\CiPolicies\Active"
-   $EFIPartition = (Get-Partition | Where-Object IsSystem).AccessPaths[0]
-   if (-Not (Test-Path $MountPoint)) { New-Item -Path $MountPoint -Type Directory -Force }
-   mountvol $MountPoint $EFIPartition
-   if (-Not (Test-Path $EFIDestinationFolder)) { New-Item -Path $EFIDestinationFolder -Type Directory -Force }
-    ```
-
-2. Copy the signed policy to the created folder:
-
-    ```powershell
-   Copy-Item -Path $PolicyBinary -Destination $EFIDestinationFolder -Force
-    ```
-
-3. Restart the system.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/deployment/wdac-deployment-guide.md b/windows/security/application-security/application-control/windows-defender-application-control/deployment/wdac-deployment-guide.md
deleted file mode 100644
index 46d07c19a7..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/deployment/wdac-deployment-guide.md
+++ /dev/null
@@ -1,56 +0,0 @@
----
-title: Deploying Windows Defender Application Control (WDAC) policies
-description: Learn how to plan and implement a WDAC deployment.
-ms.localizationpriority: medium
-ms.date: 01/23/2023
-ms.topic: overview
----
-
-# Deploying Windows Defender Application Control (WDAC) policies
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-You should now have one or more Windows Defender Application Control (WDAC) policies ready to deploy. If you haven't yet completed the steps described in the [WDAC Design Guide](../design/wdac-design-guide.md), do so now before proceeding.
-
-## Convert your WDAC policy XML to binary
-
-Before you deploy your WDAC policies, you must first convert the XML to its binary form. You can do this using the following PowerShell example. You must set the $WDACPolicyXMLFile variable to point to your WDAC policy XML file.
-
-   ```powershell
-    ## Update the path to your WDAC policy XML
-    $WDACPolicyXMLFile = $env:USERPROFILE + "\Desktop\MyWDACPolicy.xml"
-    [xml]$WDACPolicy = Get-Content -Path $WDACPolicyXMLFile
-    if (($WDACPolicy.SiPolicy.PolicyID) -ne $null) ## Multiple policy format (For Windows builds 1903+ only, including Server 2022)
-    {
-        $PolicyID = $WDACPolicy.SiPolicy.PolicyID
-        $PolicyBinary = $PolicyID+".cip"
-    }
-    else ## Single policy format (Windows Server 2016 and 2019, and Windows 10 1809 LTSC)
-    {
-        $PolicyBinary = "SiPolicy.p7b"
-    }
-
-    ## Binary file will be written to your desktop
-    ConvertFrom-CIPolicy -XmlFilePath $WDACPolicyXMLFile -BinaryFilePath $env:USERPROFILE\Desktop\$PolicyBinary
-   ```
-
-## Plan your deployment
-
-As with any significant change to your environment, implementing application control can have unintended consequences. To ensure the best chance for success, you should follow safe deployment practices and plan your deployment carefully. Identify the devices you'll manage with WDAC and split them into deployment rings. This way, you can control the speed and scale of the deployment and respond if anything goes wrong. Define the success criteria that will determine when it's safe to continue from one ring to the next.
-
-All Windows Defender Application Control policy changes should be deployed in audit mode before proceeding to enforcement. Carefully monitor events from devices where the policy has been deployed to ensure the block events you observe match your expectation before broadening the deployment to other deployment rings. If your organization uses Microsoft Defender for Endpoint, you can use the Advanced Hunting feature to centrally monitor WDAC-related events. Otherwise, we recommend using an event log forwarding solution to collect relevant events from your managed endpoints.
-
-## Choose how to deploy WDAC policies
-
-> [!IMPORTANT]
-> Due to a known issue, you should always activate new **signed** WDAC Base policies with a reboot on systems with [**memory integrity**](../../../../hardware-security/enable-virtualization-based-protection-of-code-integrity.md) enabled. We recommend [deploying via script](deploy-wdac-policies-with-script.md) in this case.
->
-> This issue does not affect updates to signed Base policies that are already active on the system, deployment of unsigned policies, or deployment of supplemental policies (signed or unsigned). It also does not affect deployments to systems that are not running memory integrity.
-
-There are several options to deploy Windows Defender Application Control policies to managed endpoints, including:
-
-- [Deploy using a Mobile Device Management (MDM) solution](deploy-wdac-policies-using-intune.md), such as Microsoft Intune
-- [Deploy using Microsoft Configuration Manager](deploy-wdac-policies-with-memcm.md)
-- [Deploy via script](deploy-wdac-policies-with-script.md)
-- [Deploy via group policy](deploy-wdac-policies-using-group-policy.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/common-wdac-use-cases.md b/windows/security/application-security/application-control/windows-defender-application-control/design/common-wdac-use-cases.md
deleted file mode 100644
index 7f203efaf7..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/common-wdac-use-cases.md
+++ /dev/null
@@ -1,37 +0,0 @@
----
-title: Policy creation for common WDAC usage scenarios
-description: Develop a plan for deploying Windows Defender Application Control (WDAC) in your organization based on these common scenarios.
-ms.localizationpriority: medium
-ms.date: 04/05/2023
-ms.topic: conceptual
----
-
-# Windows Defender Application Control deployment in different scenarios: types of devices
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-Typically, deployment of Windows Defender Application Control (WDAC) happens best in phases, rather than being a feature that you simply "turn on." The choice and sequence of phases depends on the way various computers and other devices are used in your organization, and to what degree IT manages those devices. The following table can help you begin to develop a plan for deploying WDAC in your organization. It's common for organizations to have device use cases across each of the categories described.
-
-## Types of devices
-
-|  Type of device                 | How WDAC relates to this type of device  |
-|------------------------------------|------------------------------------------------------|
-| **Lightly managed devices**: Company-owned, but users are free to install software.<br>Devices are required to run organization's antivirus solution and client management tools. | Windows Defender Application Control can be used to help protect the kernel, and to monitor (audit) for problem applications rather than limiting the applications that can be run. |
-| **Fully managed devices**: Allowed software is restricted by IT department.<br>Users can request for more software, or install from a list of applications provided by IT department.<br>Examples: locked-down, company-owned desktops and laptops. | An initial baseline Windows Defender Application Control policy can be established and enforced. Whenever the IT department approves more applications, it updates the WDAC policy and (for unsigned LOB applications) the catalog. |
-| **Fixed-workload devices**: Perform same tasks every day.<br>Lists of approved applications rarely change.<br>Examples: kiosks, point-of-sale systems, call center computers. | Windows Defender Application Control can be deployed fully, and deployment and ongoing administration are relatively straightforward.<br>After Windows Defender Application Control deployment, only approved applications can run. This rule is because of protections offered by WDAC. |
-| **Bring Your Own Device**: Employees are allowed to bring their own devices, and also use those devices away from work. | In most cases, Windows Defender Application Control doesn't apply. Instead, you can explore other hardening and security features with MDM-based conditional access solutions, such as Microsoft Intune. However, you may choose to deploy an audit-mode policy to these devices or employ a blocklist only policy to prevent specific apps or binaries that are considered malicious or vulnerable by your organization. |
-
-## An introduction to Lamna Healthcare Company
-
-In the next set of articles, we'll explore each of the above scenarios using a fictional organization called Lamna Healthcare Company.
-
-Lamna Healthcare Company (Lamna) is a large healthcare provider operating in the United States. Lamna employs thousands of people, from doctors and nurses to accountants, in-house lawyers, and IT technicians. Their device use cases are varied and include single-user workstations for their professional staff, shared kiosks used by doctors and nurses to access patient records, dedicated medical devices such as MRI scanners, and many others. Additionally, Lamna has a relaxed, bring-your-own-device policy for many of their professional staff.
-
-Lamna uses [Microsoft Intune](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager) in hybrid mode with both Configuration Manager and Intune. Although they use Microsoft Intune to deploy many applications, Lamna has always had relaxed application usage practices: individual teams and employees have been able to install and use any applications they deem necessary for their role on their own workstations. Lamna also recently started to use [Microsoft Defender for Endpoint](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp) for better endpoint detection and response.
-
-Recently, Lamna experienced a ransomware event that required an expensive recovery process and may have included data exfiltration by the unknown attacker. Part of the attack included installing and running malicious binaries that evaded detection by Lamna's antivirus solution but would have been blocked by an application control policy. In response, Lamna's executive board has authorized many new security IT responses, including tightening policies for application use and introducing application control.
-
-## Up next
-
-- [Create a Windows Defender Application Control policy for lightly managed devices](create-wdac-policy-for-lightly-managed-devices.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-fully-managed-devices.md b/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-fully-managed-devices.md
deleted file mode 100644
index 76720b9535..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-for-fully-managed-devices.md
+++ /dev/null
@@ -1,149 +0,0 @@
----
-title: Create a WDAC policy for fully managed devices
-description: Windows Defender Application Control restricts which applications users are allowed to run and the code that runs in system core.
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 11/07/2022
----
-
-# Create a WDAC policy for fully managed devices
-
->[!NOTE]
->Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-This section outlines the process to create a Windows Defender Application Control (WDAC) policy for **fully managed devices** within an organization. The key difference between this scenario and [lightly managed devices](create-wdac-policy-for-lightly-managed-devices.md) is that all software deployed to a fully managed device is managed by IT and users of the device can't install arbitrary apps. Ideally, all apps are deployed using a software distribution solution, such as Microsoft Intune. Additionally, users on fully managed devices should ideally run as standard user and only authorized IT pros have administrative access.
-
-> [!NOTE]
-> Some of the Windows Defender Application Control options described in this topic are only available on Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's WDAC policies, consider whether your managed clients can use all or some of these features and assess the impact for any features that may be unavailable on your clients. You may need to adapt this guidance to meet your specific organization's needs.
-
-As described in [common Windows Defender Application Control deployment scenarios](common-wdac-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of application control to prevent unwanted or unauthorized applications from running on their managed devices.
-
-**Alice Pena** is the IT team lead tasked with the rollout of WDAC.
-
-Alice previously created a policy for the organization's lightly managed devices. Some devices, however, are more tightly managed and can benefit from a more constrained policy. In particular, certain job functions such as administrative staff and firstline workers aren't granted administrator level access to their devices. Similarly, shared kiosks are configured only with a managed set of apps and all users of the device except IT run as standard user. On these devices, all apps are deployed and installed by IT.
-
-## Define the "circle-of-trust" for fully managed devices
-
-Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully managed devices:
-
-- All clients are running Windows 10 version 1903 or above or Windows 11;
-- All clients are managed by Configuration Manager or with Intune;
-- Most, but not all, apps are deployed using Configuration Manager;
-- Sometimes, IT staff install apps directly to these devices without using Configuration Manager;
-- All users except IT are standard users on these devices.
-
-Alice's team develops a simple console application, called *LamnaITInstaller.exe*, which will become the authorized way for IT staff to install apps directly to devices. *LamnaITInstaller.exe* allows the IT pro to launch another process, such as an app installer. Alice will configure *LamnaITInstaller.exe* as an extra managed installer for WDAC and allows her to remove the need for filepath rules.
-
-Based on the above, Alice defines the pseudo-rules for the policy:
-
-1. **"Windows works"** rules that authorize:
-   - Windows
-   - WHQL (third-party kernel drivers)
-   - Windows Store signed apps
-
-2. **"ConfigMgr works"** rules that include signer and hash rules for Configuration Manager components to properly function.
-3. **Allow Managed Installer** (Configuration Manager and *LamnaITInstaller.exe* configured as a managed installer)
-
-The critical differences between this set of pseudo-rules and those pseudo-rules defined for Lamna's [lightly managed devices](create-wdac-policy-for-lightly-managed-devices.md#define-the-circle-of-trust-for-lightly-managed-devices) are:
-
-- Removal of the Intelligent Security Graph (ISG) option; and
-- Removal of filepath rules.
-
-## Create a custom base policy using an example WDAC base policy
-
-Having defined the "circle-of-trust", Alice is ready to generate the initial policy for Lamna's fully managed devices and decides to use Configuration Manager to create the initial base policy and then customize it to meet Lamna's needs.
-
-Alice follows these steps to complete this task:
-
-> [!NOTE]
-> If you do not use Configuration Manager or prefer to use a different [example Windows Defender Application Control base policy](example-wdac-base-policies.md) for your own policy, skip to step 2 and substitute the Configuration Manager policy path with your preferred example base policy.
-
-1. [Use Configuration Manager to create and deploy an audit policy](/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager) to a client device running Windows 10 version 1903 or above, or Windows 11.
-
-2. On the client device, run the following commands in an elevated Windows PowerShell session to initialize variables:
-
-      ```powershell
-      $PolicyPath=$env:userprofile+"\Desktop\"
-      $PolicyName= "Lamna_FullyManagedClients_Audit"
-      $LamnaPolicy=$PolicyPath+$PolicyName+".xml"
-      $ConfigMgrPolicy=$env:windir+"\CCM\DeviceGuard\MergedPolicy_Audit_ISG.xml"
-      ```
-
-3. Copy the policy created by Configuration Manager to the desktop:
-
-      ```powershell
-      cp $ConfigMgrPolicy $LamnaPolicy
-      ```
-
-4. Give the new policy a unique ID, descriptive name, and initial version number:
-
-      ```powershell
-      Set-CIPolicyIdInfo -FilePath $LamnaPolicy -PolicyName $PolicyName -ResetPolicyID
-      Set-CIPolicyVersion -FilePath $LamnaPolicy -Version "1.0.0.0"
-      ```
-
-5. Modify the copied policy to set policy rules:
-
-      ```powershell
-      Set-RuleOption -FilePath $LamnaPolicy -Option 3 # Audit Mode
-      Set-RuleOption -FilePath $LamnaPolicy -Option 6 # Unsigned Policy
-      Set-RuleOption -FilePath $LamnaPolicy -Option 9 # Advanced Boot Menu
-      Set-RuleOption -FilePath $LamnaPolicy -Option 12 # Enforce Store Apps
-      Set-RuleOption -FilePath $LamnaPolicy -Option 13 # Managed Installer
-      Set-RuleOption -FilePath $LamnaPolicy -Option 16 # No Reboot
-      Set-RuleOption -FilePath $LamnaPolicy -Option 17 # Allow Supplemental
-      Set-RuleOption -FilePath $LamnaPolicy -Option 19 # Dynamic Code Security
-      ```
-
-6. If appropriate, add more signer or file rules to further customize the policy for your organization.
-
-7. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the Windows Defender Application Control policy to a binary format:
-
-   ```powershell
-    [xml]$PolicyXML = Get-Content $LamnaPolicy
-    $LamnaPolicyBin = Join-Path $PolicyPath "$($PolicyXML.SiPolicy.PolicyID).cip"
-    ConvertFrom-CIPolicy $LamnaPolicy $LamnaPolicyBin
-   ```
-
-8. Upload your base policy XML and the associated binary to a source control solution such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration).
-
-At this point, Alice now has an initial policy that is ready to deploy in audit mode to the managed clients within Lamna.
-
-## Security considerations of this fully managed policy
-
-Alice has defined a policy for Lamna's fully managed devices that makes some trade-offs between security and manageability for apps. Some of the trade-offs include:
-
-- **Users with administrative access**<br>
-    Although applying to fewer users, Lamna still allows some IT staff to sign in to its fully managed devices as administrator. This privilege allows these users (or malware running with the user's privileges) to modify or remove altogether the WDAC policy applied on the device. Additionally, administrators can configure any app they wish to operate as a managed installer that would allow them to gain persistent app authorization for whatever apps or binaries they wish.
-
-   Possible mitigations:
-  - Use signed WDAC policies and UEFI BIOS access protection to prevent tampering of WDAC policies.
-  - Create and deploy signed catalog files as part of the app deployment process in order to remove the requirement for managed installer.
-  - Use device attestation to detect the configuration state of WDAC at boot time and use that information to condition access to sensitive corporate resources.
-- **Unsigned policies**<br>
-    Unsigned policies can be replaced or removed without consequence by any process running as administrator. Unsigned base policies that also enable supplemental policies can have their "circle-of-trust" altered by any unsigned supplemental policy.
-
-   Existing mitigations applied:
-  - Limit who can elevate to administrator on the device.
-
-   Possible mitigations:
-  - Use signed WDAC policies and UEFI BIOS access protection to prevent tampering of WDAC policies.
-- **Managed installer**<br>
-    See [security considerations with managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md#security-considerations-with-managed-installer)
-
-   Existing mitigations applied:
-  - Limit who can elevate to administrator on the device.
-
-   Possible mitigations:
-  - Create and deploy signed catalog files as part of the app deployment process in order to remove the requirement for managed installer.
-- **Supplemental policies**<br>
-    Supplemental policies are designed to relax the associated base policy. Additionally allowing unsigned policies allows any administrator process to expand the "circle-of-trust" defined by the base policy without restriction.
-
-   Possible mitigations:
-  - Use signed WDAC policies that allow authorized signed supplemental policies only.
-  - Use a restrictive audit mode policy to audit app usage and augment vulnerability detection.
-
-## Up next
-
-- [Create a Windows Defender Application Control policy for fixed-workload devices using a reference computer](create-wdac-policy-using-reference-computer.md)
-- [Prepare to deploy Windows Defender Application Control policies](../deployment/wdac-deployment-guide.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-using-reference-computer.md b/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-using-reference-computer.md
deleted file mode 100644
index 4b7a2f317b..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/create-wdac-policy-using-reference-computer.md
+++ /dev/null
@@ -1,125 +0,0 @@
----
-title: Create a WDAC policy using a reference computer
-description: To create a Windows Defender Application Control (WDAC) policy that allows all code installed on a reference computer within your organization, follow this guide.
-ms.localizationpriority: medium
-ms.date: 08/08/2022
-ms.topic: how-to
----
-
-# Create a WDAC policy using a reference computer
-
->[!NOTE]
->Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-This section outlines the process to create a Windows Defender Application Control (WDAC) policy **using a reference computer** that is already configured with the software you want to allow. You can use this approach for fixed-workload devices that are dedicated to a specific functional purpose and share common configuration attributes with other devices servicing the same functional role. Examples of fixed-workload devices may include Active Directory Domain Controllers, Secure Admin Workstations, pharmaceutical drug-mixing equipment, manufacturing devices, cash registers, ATMs, etc. This approach can also be used to turn on WDAC on systems "in the wild" and you want to minimize the potential impact on users' productivity.
-
-> [!NOTE]
-> Some of the Windows Defender Application Control options described in this topic are only available on Windows 10 version 1903 and above, or Windows 11. When using this topic to plan your own organization's WDAC policies, consider whether your managed clients can use all or some of these features and assess the impact for any features that may be unavailable on your clients. You may need to adapt this guidance to meet your specific organization's needs.
-
-As described in [common Windows Defender Application Control deployment scenarios](common-wdac-use-cases.md), we'll use the example of **Lamna Healthcare Company (Lamna)** to illustrate this scenario. Lamna is attempting to adopt stronger application policies, including the use of application control to prevent unwanted or unauthorized applications from running on their managed devices.
-
-**Alice Pena** is the IT team lead tasked with the rollout of WDAC.
-
-## Create a custom base policy using a reference device
-
-Alice previously created a policy for the organization's fully managed end-user devices. She now wants to use WDAC to protect Lamna's critical infrastructure servers. Lamna's imaging practice for infrastructure systems is to establish a "golden" image as a reference for what an ideal system should look like, and then use that image to clone more company assets. Alice decides to use these same "golden" image systems to create the WDAC policies, which will result in separate custom base policies for each type of infrastructure server. As with imaging, she'll have to create policies from multiple golden computers based on model, department, application set, and so on.
-
-> [!NOTE]
-> Make sure the reference computer is virus and malware-free, and install any software you want to be scanned before creating the WDAC policy. <br><br> Each installed software application should be validated as trustworthy before you create a policy. <br><br> We recommend that you review the reference computer for software that can load arbitrary DLLs and run code or scripts that could render the PC more vulnerable. Examples include software aimed at development or scripting such as msbuild.exe (part of Visual Studio and the .NET Framework) which can be removed if you don't want to run scripts. You can remove or disable such software on the reference computer.
-
-Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's critical infrastructure servers:
-
-- All devices are running Windows Server 2019 or above;
-- All apps are centrally managed and deployed;
-- No interactive users.
-
-Based on the above, Alice defines the pseudo-rules for the policy:
-
-1. **"Windows works"** rules that authorize:
-   - Windows
-   - WHQL (third-party kernel drivers)
-   - Windows Store signed apps
-
-2. Rules for **scanned files** that authorize all pre-existing app binaries found on the device
-
-To create the WDAC policy, Alice runs each of the following commands in an elevated Windows PowerShell session, in order:
-
-1. Initialize variables.
-
-   ```powershell
-   $PolicyPath=$env:userprofile+"\Desktop\"
-   $PolicyName="FixedWorkloadPolicy_Audit"
-   $LamnaServerPolicy=$PolicyPath+$PolicyName+".xml"
-   $DefaultWindowsPolicy=$env:windir+"\schemas\CodeIntegrity\ExamplePolicies\DefaultWindows_Audit.xml"
-   ```
-
-2. Use [New-CIPolicy](/powershell/module/configci/new-cipolicy) to create a new WDAC policy by scanning the system for installed applications:
-
-   ```powershell
-   New-CIPolicy -FilePath $LamnaServerPolicy -Level SignedVersion -Fallback FilePublisher,FileName,Hash -ScanPath c:\ -UserPEs -MultiplePolicyFormat -OmitPaths c:\Windows,'C:\Program Files\WindowsApps\',c:\windows.old\,c:\users\ 3> CIPolicyLog.txt
-   ```
-
-   > [!Note]
-   >
-   > - You can add the **-Fallback** parameter to catch any applications not discovered using the primary file rule level specified by the **-Level** parameter. For more information about file rule level options, see [Windows Defender Application Control file rule levels](select-types-of-rules-to-create.md).
-   > - To specify that the WDAC policy scan only a specific drive, include the **-ScanPath** parameter followed by a path. Without this parameter, the tool will scan the C-drive by default.
-   > - When you specify the **-UserPEs** parameter (to include user mode executables in the scan), rule option **0 Enabled:UMCI** is automatically added to the WDAC policy. If you do not specify **-UserPEs**, the policy will be empty of user mode executables and will only have rules for kernel mode binaries like drivers. In other words, the allow list will not include applications. If you create such a policy and later add rule option **0 Enabled:UMCI**, all attempts to start applications will cause a response from Windows Defender Application Control. In audit mode, the response is logging an event, and in enforced mode, the response is blocking the application.
-   > - To create a policy for Windows 10 1903 and above, including support for supplemental policies, use **-MultiplePolicyFormat**.
-   > - To specify a list of paths to exclude from the scan, use the **-OmitPaths** option and supply a comma-delimited list of paths.
-   > - The preceding example includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**.
-
-3. Merge the new policy with the WindowsDefault_Audit policy to ensure all Windows binaries and kernel drivers will load.
-
-      ```powershell
-      Merge-CIPolicy -OutputFilePath $LamnaServerPolicy -PolicyPaths $LamnaServerPolicy,$DefaultWindowsPolicy
-      ```
-
-4. Give the new policy a descriptive name, and initial version number:
-
-      ```powershell
-      Set-CIPolicyIdInfo -FilePath $LamnaServerPolicy -PolicyName $PolicyName
-      Set-CIPolicyVersion -FilePath $LamnaServerPolicy -Version "1.0.0.0"
-      ```
-
-5. Modify the merged policy to set policy rules:
-
-      ```powershell
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 3 # Audit Mode
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 6 # Unsigned Policy
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 9 # Advanced Boot Menu
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 12 # Enforce Store Apps
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 16 # No Reboot
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 17 # Allow Supplemental
-      Set-RuleOption -FilePath $LamnaServerPolicy -Option 19 # Dynamic Code Security
-      ```
-
-6. If appropriate, add more signer or file rules to further customize the policy for your organization.
-
-7. Use [ConvertFrom-CIPolicy](/powershell/module/configci/convertfrom-cipolicy) to convert the WDAC policy to a binary format:
-
-   ```powershell
-   [xml]$LamnaServerPolicyXML = Get-Content $LamnaServerPolicy
-   $PolicyId = $LamnaServerPolicyXML.SiPolicy.PolicyId
-   $LamnaServerPolicyBin = $PolicyPath+$PolicyId+".cip"
-   ConvertFrom-CIPolicy $LamnaServerPolicy $LamnaServerPolicyBin
-   ```
-
-8. Upload the base policy XML and the associated binary to a source control solution such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration).
-
-Alice now has an initial policy for Lamna's critical infrastructure servers that is ready to deploy in audit mode.
-
-## Create a custom base policy to minimize user impact on in-use client devices
-
-Alice previously created a policy for the organization's fully managed devices. Alice has included the fully managed device policy as part of Lamna's device build process so all new devices now begin with WDAC enabled. She's preparing to deploy the policy to systems that are already in use, but is worried about causing disruption to users' productivity. To minimize that risk, Alice decides to take a different approach for those systems. She'll continue to deploy the fully managed device policy in audit mode to those devices, but for enforcement mode she'll merge the fully managed device policy rules with a policy created by scanning the device for all previously installed software. In this way, each device is treated as its own "golden" system.
-
-Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully managed in-use devices:
-
-- Everything described for Lamna's [Fully Managed Devices](create-wdac-policy-for-fully-managed-devices.md);
-- Users have installed apps that they need to continue to run.
-
-Based on the above, Alice defines the pseudo-rules for the policy:
-
-1. Everything included in the Fully Managed Devices policy
-2. Rules for **scanned files** that authorize all pre-existing app binaries found on the device
-
-For Lamna's existing, in-use devices, Alice deploys a script along with the Fully Managed Devices policy XML (not the converted WDAC policy binary). The script then generates a custom policy locally on the client as described in the previous section, but instead of merging with the DefaultWindows policy, the script merges with Lamna's Fully Managed Devices policy. Alice also modifies the steps above to match the requirements of this different use case.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/plan-wdac-management.md b/windows/security/application-security/application-control/windows-defender-application-control/design/plan-wdac-management.md
deleted file mode 100644
index caebc2c6c3..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/plan-wdac-management.md
+++ /dev/null
@@ -1,89 +0,0 @@
----
-title: Plan for WDAC policy management
-description: Learn about the decisions you need to make to establish the processes for managing and maintaining Windows Defender Application Control policies.
-ms.localizationpriority: medium
-ms.date: 11/22/2023
-ms.topic: conceptual
----
-
-# Plan for Windows Defender Application Control lifecycle policy management
-
->[!NOTE]
->Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-This article describes the decisions you need to make to establish the processes for managing and maintaining Windows Defender Application Control (WDAC) policies.
-
-## Policy XML lifecycle management
-
-The first step in implementing application control is to consider how your policies will be managed and maintained over time. Developing a process for managing Windows Defender Application Control policies helps ensure that WDAC continues to effectively control how applications are allowed to run in your organization.
-
-Most Windows Defender Application Control policies will evolve over time and proceed through a set of identifiable phases during their lifetime. Typically, these phases include:
-
-1. [Define (or refine) the "circle-of-trust"](understand-wdac-policy-design-decisions.md) for the policy and build an audit mode version of the policy XML. In audit mode, block events are generated but files aren't prevented from executing.
-2. [Deploy the audit mode policy](/windows/security/threat-protection/windows-defender-application-control/audit-windows-defender-application-control-policies) to intended devices.
-3. [Monitor audit block events](/windows/security/threat-protection/windows-defender-application-control/event-id-explanations) from the intended devices and add/edit/delete rules as needed to address unexpected/unwanted blocks.
-4. Repeat steps 2-3 until the remaining block events meet expectations.
-5. [Generate the enforced mode version](/windows/security/threat-protection/windows-defender-application-control/enforce-windows-defender-application-control-policies) of the policy. In enforced mode, files that the policy doesn't allow are prevented from running and corresponding block events are generated.
-6. [Deploy the enforced mode policy](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-deployment-guide) to intended devices. We recommend using staged rollouts for enforced policies to detect and respond to issues before deploying the policy broadly.
-7. Repeat steps 1-6 anytime the desired "circle-of-trust" changes.
-
-![Recommended WDAC policy deployment process.](../images/policyflow.png)
-
-### Keep WDAC policies in a source control or document management solution
-
-To effectively manage Windows Defender Application Control policies, you should store and maintain your policy XML documents in a central repository that is accessible to everyone responsible for WDAC policy management. We recommend a source control solution such as [GitHub](https://github.com/) or a document management solution such as [Office 365 SharePoint](https://products.office.com/sharepoint/collaboration), which provide version control and allow you to specify metadata about the XML documents.
-
-### Set PolicyName, PolicyID, and Version metadata for each policy
-
-Use the [Set-CIPolicyIDInfo](/powershell/module/configci/set-cipolicyidinfo) cmdlet to give each policy a descriptive name and set a unique policy ID. These unique attributes help you differentiate each policy when reviewing Windows Defender Application Control events or when viewing the policy XML document. Although you can specify a string value for PolicyId, for policies using the multiple policy format we recommend using the -ResetPolicyId switch to let the system autogenerate a unique ID for the policy.
-
-> [!NOTE]
-> PolicyID only applies to policies using the [multiple policy format](deploy-multiple-wdac-policies.md) on computers running Windows 10, version 1903 and above, or Windows 11. Running -ResetPolicyId on a policy created for pre-1903 computers will convert it to multiple policy format and prevent it from running on those earlier versions of Windows 10.
-> PolicyID should be set only once per policy and use different PolicyID's for the audit and enforced mode versions of each policy.
-
-In addition, we recommend using the [Set-CIPolicyVersion](/powershell/module/configci/set-cipolicyversion) cmdlet to increment the policy's internal version number when you make changes to the policy. The version must be defined as a standard four-part version string (for example, "1.0.0.0").
-
-### Policy rule updates
-
-You might need to revise your policy when new apps are deployed or existing apps are updated by the software publisher to ensure that apps run correctly. Whether policy rule updates are required will depend significantly on the types of rules your policy includes. Rules based on codesigning certificates provide the most resiliency against app changes while rules based on file attributes or hash are most likely to require updates when apps change. Alternatively, if you use WDAC [managed installer](configure-authorized-apps-deployed-with-a-managed-installer.md) functionality and consistently deploy all apps and their updates through your managed installer, then you're less likely to need policy updates.
-
-## WDAC event management
-
-Each time that WDAC blocks a process, events are written to either the CodeIntegrity\Operational or the AppLocker\MSI and Script Windows event logs. The event describes the file that tried to run, the attributes of that file and its signatures, and the process that attempted to run the blocked file.
-
-Collecting these events in a central location can help you maintain your Windows Defender Application Control policy and troubleshoot rule configuration problems. You can [use the Azure Monitor Agent](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) to automatically collect your WDAC events for analysis.
-
-Additionally, [Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint) collects WDAC events which can be queried using the [advanced hunting](../operations/querying-application-control-events-centrally-using-advanced-hunting.md) feature.
-
-## Application and user support policy
-
-Considerations include:
-
-- What type of end-user support is provided for blocked applications?
-- How are new rules added to the policy?
-- How are existing rules updated?
-- Are events forwarded for review?
-
-### Help desk support
-
-If your organization has an established help desk support department in place, consider the following points when deploying Windows Defender Application Control policies:
-
-- What documentation does your support department require for new policy deployments?
-- What are the critical processes in each business group both in work flow and timing that will be affected by application control policies and how could they affect your support department's workload?
-- Who are the contacts in the support department?
-- How will the support department resolve application control issues between the end user and those resources who maintain the Windows Defender Application Control rules?
-
-### End-user support
-
-Because Windows Defender Application Control is preventing unapproved apps from running, it's important that your organization carefully plans how to provide end-user support. Considerations include:
-
-- Do you want to use an intranet site as a frontline of support for users who try to run a blocked app?
-- How do you want to support exceptions to the policy? Will you allow users to run a script to temporarily allow access to a blocked app?
-
-## Document your plan
-
-After deciding how your organization will manage your Windows Defender Application Control policy, record your findings.
-
-- **End-user support policy.** Document the process that you'll use for handling calls from users who have attempted to run a blocked app, and ensure that support personnel have clear escalation steps so that the administrator can update the Windows Defender Application Control policy, if necessary.
-- **Event processing.** Document whether events will be collected in a central location called a store, how that store will be archived, and whether the events will be processed for analysis.
-- **Policy management.** Detail what policies are planned, how they'll be managed, and how rules will be maintained over time.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/script-enforcement.md b/windows/security/application-security/application-control/windows-defender-application-control/design/script-enforcement.md
deleted file mode 100644
index 8ebfc6ca57..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/script-enforcement.md
+++ /dev/null
@@ -1,63 +0,0 @@
----
-title: Understand WDAC script enforcement
-description: WDAC script enforcement
-ms.manager: jsuther
-ms.date: 05/26/2023
-ms.topic: conceptual
-ms.localizationpriority: medium
----
-
-# Script enforcement with Windows Defender Application Control (WDAC)
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
-
-> [!IMPORTANT]
-> Option **11 Disabled:Script Enforcement** is not supported on **Windows Server 2016** or on **Windows 10 1607 LTSB** and should not be used on those platforms. Doing so will result in unexpected script enforcement behaviors.
-
-## Script enforcement overview
-
-By default, script enforcement is enabled for all WDAC policies unless the option **11 Disabled:Script Enforcement** is set in the policy. WDAC script enforcement involves a handshake between an enlightened script host, such as PowerShell, and WDAC. However, the script host handles the actual enforcement behavior. Some script hosts, like the Microsoft HTML Application Host (mshta.exe), block all code execution if any WDAC UMCI policy is active. Most script hosts first ask WDAC whether a script should be allowed to run based on the WDAC policies currently active. The script host then either blocks, allows, or changes *how* the script is run to best protect the user and the device.
-
-Validation for signed scripts is done using the [WinVerifyTrust API](/windows/win32/api/wintrust/nf-wintrust-winverifytrust). To pass validation, the signature root must be present in the trusted root store on the device and your WDAC policy must allow it. This behavior is different from WDAC validation for executable files, which doesn't require installation of the root certificate.
-
-WDAC shares the *AppLocker - MSI and Script* event log for all script enforcement events. Whenever a script host asks WDAC if a script should be allowed, an event is logged with the answer WDAC returned to the script host. For more information on WDAC script enforcement events, see [Understanding Application Control events](/windows/security/threat-protection/windows-defender-application-control/event-id-explanations#windows-applocker-msi-and-script-log).
-
-> [!NOTE]
-> When a script runs that is not allowed by policy, WDAC raises an event indicating that the script was "blocked." However, the actual script enforcement behavior is handled by the script host and may not actually completely block the file from running.
->
-> Also be aware that some script hosts may change how they behave even if a WDAC policy is in audit mode only. You should review the script host specific information in this article and test thoroughly within your environment to ensure the scripts you need to run are working properly.
-
-## Enlightened script hosts that are part of Windows
-
-### PowerShell
-
-Your WDAC policies must allow all PowerShell scripts (.ps1), modules (.psm1), and manifests (.psd1) for them to run with Full Language rights.
-
-Your WDAC policies must also allow any **dependent modules** that are loaded by an allowed module, and module functions must be exported explicitly by name when WDAC is enforced. Modules that don't specify any exported functions (no export name list) still load but no module functions are accessible. Modules that use wildcards (\*) in their name will fail to load.
-
-Any PowerShell script that isn't allowed by WDAC policy still runs, but only in Constrained Language Mode.
-
-PowerShell **dot-sourcing** isn't recommended. Instead, scripts should use PowerShell modules to provide common functionality. If an allowed script file does try to run dot-sourced script files, those script files must also pass the policy.
-
-WDAC puts **interactive PowerShell** into Constrained Language Mode if any WDAC UMCI policy is enforced and *any* active WDAC policy enables script enforcement, even if that policy is in audit mode. To run interactive PowerShell with Full Language rights, you must disable script enforcement for *all* policies.
-
-For more information, see [About Language Modes](/powershell/module/microsoft.powershell.core/about/about_language_modes) and [Constrained Language Mode](https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/).
-
-### VBscript, cscript, and jscript
-
-Your WDAC policies must allow all scripts run using the Windows Based Script Host (wscript.exe) or the Microsoft Console Based Script Host (cscript.exe). If not, the script is blocked.
-
-### Microsoft HTML Application Host (MSHTA) and MSXML
-
-All code execution using MSHTA or MSXML is blocked if any WDAC policy with script enforcement is active, even if that policy is in audit mode.
-
-### COM objects
-
-WDAC additionally enforces a restricted allowlist for COM objects that your WDAC policy can expand or further restrict. COM object enforcement **isn't** affected by option **11 Disabled:Script Enforcement**. For more information on how to allow or deny COM objects, see [Allow COM object registration](/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy).
-
-## Scripts that aren't directly controlled by WDAC
-
-WDAC doesn't directly control code run via the Windows Command Processor (cmd.exe), including .bat/.cmd script files. However, anything that such a batch script tries to run is subject to WDAC control. If you don't need to run cmd.exe, it's recommended to block it outright or allow it only by exception based on the calling process. See [Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules](/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules).
-
-WDAC doesn't control scripts run through an unenlightened script host, such as many 3rd-party Java or Python engines. If your WDAC policy allows an unenlightened script host to run, then you implicitly allow all scripts run through that host. For non-Microsoft script hosts, you should check with the software vendor whether their script hosts are enlightened to WDAC policy.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/understanding-wdac-policy-settings.md b/windows/security/application-security/application-control/windows-defender-application-control/design/understanding-wdac-policy-settings.md
deleted file mode 100644
index 6f2f154463..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/understanding-wdac-policy-settings.md
+++ /dev/null
@@ -1,72 +0,0 @@
----
-title: Understanding Windows Defender Application Control (WDAC) secure settings
-description: Learn about secure settings in Windows Defender Application Control.
-ms.localizationpriority: medium
-ms.date: 04/05/2023
-ms.topic: conceptual
----
-
-# Understanding WDAC Policy Settings
-
-Windows Defender Application Control (WDAC) policies expose a Settings section where policy authors can define arbitrary secure settings. Secure Settings provide local admin tamper-free settings for secure boot enabled systems, with policy signing enabled. Settings consist of a Provider, Key, ValueName, and a setting value. Setting values can be of type boolean, ulong, binary, and string. Applications can query for policy settings using WldpQuerySecurityPolicy.
-
-An example settings section of a Windows Defender Application Control policy:
-
-```xml
-<Settings>
-  <Setting Provider="Contoso" Key="FooApplication" ValueName="DisableMacroExecution">
-    <Value>
-      <Boolean>true</Boolean>
-    </Value>
-  </Setting>
-</Settings>
-```
-
-## Example Scenario
-
-An application that may want to restrict its capabilities, when used on a system with an active Windows Defender Application Control policy. Application authors can define a WDAC policy, setting their application queries, in order to disable certain features. For example, if Contoso's Foo Application wants to disable a risky feature, such as macro execution, they can define a WDAC policy setting, and query for it at runtime. Contoso can then instruct IT administrators to configure the setting in their WDAC policy, if they don't want Foo Application to execute macros on a system with a WDAC policy.
-
-## WldpQuerySecurityPolicy
-
-API that queries the secure settings of a Windows Defender Application Control policy.
-
-### Syntax
-
-``` C++
-HRESULT WINAPI WldpQuerySecurityPolicy(
-    _In_ const UNICODE_STRING * Provider,
-    _In_ const UNICODE_STRING * Key,
-    _In_ const UNICODE_STRING * ValueName,
-    _Out_ PWLDP_SECURE_SETTING_VALUE_TYPE ValueType,
-    _Out_writes_bytes_opt_(*ValueSize) PVOID Value,
-    _Inout_ PULONG ValueSize)
-```
-
-### Parameters
-
-Provider [in]
-Setting Provider name.
-
-#### Key [in]
-
-Key name of the Key-Value pair under Setting Provider "Provider".
-
-#### ValueName [in]
-
-The value name of the "Key-Value" pair.
-
-#### ValueType [in, out]
-
-Pointer to receive the value type.
-
-#### Value [in, out]
-
-Pointer to a buffer to receive the value. The buffer should be of size "ValueSize". If this value is NULL, this function returns the required buffer size for Value.
-
-#### ValueSize [in, out]
-
-On input, it indicates the buffer size of "Value". On successful return, it indicates the size of data written to Value buffer.
-
-#### Return Value
-
-This method returns S_OK if successful or a failure code otherwise.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md b/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md
deleted file mode 100644
index d46c2de5a6..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-policy-to-control-specific-plug-ins-add-ins-and-modules.md
+++ /dev/null
@@ -1,33 +0,0 @@
----
-title: Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules
-description: WDAC policies can be used not only to control applications, but also to control whether specific plug-ins, add-ins, and modules can run from specific apps.
-ms.localizationpriority: medium
-ms.date: 11/02/2022
-ms.topic: how-to
----
-
-# Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-You can use Windows Defender Application Control (WDAC) policies to control applications and also to control whether specific plug-ins, add-ins, and modules can run from specific apps (such as a line-of-business application or a browser):
-
-| Approach | Guideline |
-|---|---|
-| You can work from a list of plug-ins, add-ins, or modules that you want only a specific application to be able to run. Other applications would be blocked from running them. | Use `New-CIPolicyRule` with the `-AppID` option. |
-| In addition, you can work  from a list of plug-ins, add-ins, or modules that you want to block in a specific application. Other applications would be allowed to run them. | Use `New-CIPolicyRule` with the `-AppID` and `-Deny` options. |
-
-For example, to add rules to a WDAC policy called "Lamna_FullyManagedClients_Audit.xml" that allow **addin1.dll** and **addin2.dll** to be run by **ERP1.exe**, Lamna's enterprise resource planning (ERP) application, run the following commands. In the second command, **+=** is used to add a second rule to the **$rule** variable:
-
-```powershell
-$rule = New-CIPolicyRule -DriverFilePath '.\temp\addin1.dll' -Level FileName -AppID '.\ERP1.exe'
-$rule += New-CIPolicyRule -DriverFilePath '.\temp\addin2.dll' -Level FileName -AppID '.\ERP1.exe'
-```
-
-As another example, to create a Windows Defender Application Control policy that blocks **addin3.dll** from running in Microsoft Word, run the following command. You must include the `-Deny` option to block the specified add-ins in the specified application. Once you have all the rules you want, you can merge them into an existing WDAC policy using the Merge-CIPolicy cmdlet as shown here:
-
-```powershell
-$rule += New-CIPolicyRule -DriverFilePath '.\temp\addin3.dll' -Level FileName -Deny -AppID '.\winword.exe'
-Merge-CIPolicy -OutputFilePath .\Lamna_FullyManagedClients_Audit.xml -PolicyPaths .\Lamna_FullyManagedClients_Audit.xml -Rules $rule
-```
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph.md b/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph.md
deleted file mode 100644
index 02cd2f93cd..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph.md
+++ /dev/null
@@ -1,97 +0,0 @@
----
-title: Authorize reputable apps with the Intelligent Security Graph (ISG)
-description: Automatically authorize applications that Microsoft's ISG recognizes as having known good reputation.
-ms.localizationpriority: medium
-ms.date: 12/31/2017
-ms.topic: how-to
----
-
-# Authorize reputable apps with the Intelligent Security Graph (ISG)
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-Application control can be difficult to implement in organizations that don't deploy and manage applications through an IT-managed system. In such environments, users can acquire the applications they want to use for work, making it hard to build an effective application control policy.
-
-To reduce end-user friction and helpdesk calls, you can set Windows Defender Application Control (WDAC) to automatically allow applications that Microsoft's Intelligent Security Graph (ISG) recognizes as having known good reputation. The ISG option helps organizations begin to implement application control even when the organization has limited control over their app ecosystem. To learn more about the ISG, see the Security section in [Major services and features in Microsoft Graph](/graph/overview-major-services).
-
-> [!WARNING]
-> Binaries that are critical to boot the system must be allowed using explicit rules in your WDAC policy. Do not rely on the ISG to authorize these files.
->
-> The ISG option is not the recommended way to allow apps that are business critical. You should always authorize business critical apps using explicit allow rules or by installing them with a [managed installer](/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer).
-
-## How does WDAC work with the ISG?
-
-The ISG isn't a "list" of apps. Rather, it uses the same vast security intelligence and machine learning analytics that power Microsoft Defender SmartScreen and Microsoft Defender Antivirus to help classify applications as having "known good", "known bad", or "unknown" reputation. This cloud-based AI is based on trillions of signals collected from Windows endpoints and other data sources, and processed every 24 hours. As a result, the decision from the cloud can change.
-
-WDAC only checks the ISG for binaries that aren't explicitly allowed or denied by your policy, and that weren't installed by a managed installer. When such a binary runs on a system with WDAC enabled with the ISG option, WDAC will check the file's reputation by sending its hash and signing information to the cloud. If the ISG reports that the file has a "known good" reputation, then the file will be allowed to run. Otherwise, it will be blocked by WDAC.
-
-If the file with good reputation is an application installer, the installer's reputation will pass along to any files that it writes to disk. This way, all the files needed to install and run an app inherit the positive reputation data from the installer. Files authorized based on the installer's reputation will have the $KERNEL.SMARTLOCKER.ORIGINCLAIM kernel Extended Attribute (EA) written to the file.
-
-WDAC periodically requeries the reputation data on a file. Additionally, enterprises can specify that any cached reputation results are flushed on reboot by using the **Enabled:Invalidate EAs on Reboot** option.
-
-## Configuring ISG authorization for your WDAC policy
-
-Setting up the ISG is easy using any management solution you wish. Configuring the ISG option involves these basic steps:
-
-- [Ensure that the **Enabled:Intelligent Security Graph authorization** option is set in the WDAC policy XML](#ensure-that-the-isg-option-is-set-in-the-wdac-policy-xml)
-- [Enable the necessary services to allow WDAC to use the ISG correctly on the client](#enable-the-necessary-services-to-allow-wdac-to-use-the-isg-correctly-on-the-client)
-
-### Ensure that the ISG option is set in the WDAC policy XML
-
-To allow apps and binaries based on the Microsoft Intelligent Security Graph, the **Enabled:Intelligent Security Graph authorization** option must be specified in the WDAC policy. This step can be done with the Set-RuleOption cmdlet. You should also set the **Enabled:Invalidate EAs on Reboot** option so that ISG results are verified again after each reboot. The ISG option isn't recommended for devices that don't have regular access to the internet. The following example shows both options set.
-
-```xml
-<Rules>
-    <Rule>
-      <Option>Enabled:Unsigned System Integrity Policy</Option>
-    </Rule>
-    <Rule>
-      <Option>Enabled:Advanced Boot Options Menu</Option>
-    </Rule>
-    <Rule>
-      <Option>Required:Enforce Store Applications</Option>
-    </Rule>
-    <Rule>
-      <Option>Enabled:UMCI</Option>
-    </Rule>
-    <Rule>
-      <Option>Enabled:Managed Installer</Option>
-    </Rule>
-    <Rule>
-      <Option>Enabled:Intelligent Security Graph Authorization</Option>
-    </Rule>
-    <Rule>
-      <Option>Enabled:Invalidate EAs on Reboot</Option>
-    </Rule>
-</Rules>
-```
-
-### Enable the necessary services to allow WDAC to use the ISG correctly on the client
-
-In order for the heuristics used by the ISG to function properly, other components in Windows must be enabled. You can configure these components by running the appidtel executable in `c:\windows\system32`.
-
-```console
-appidtel start
-```
-
-This step isn't required for WDAC policies deployed over MDM, as the CSP will enable the necessary components. This step is also not required when the ISG is configured using Configuration Manager's WDAC integration.
-
-## Security considerations with the ISG option
-
-Since the ISG is a heuristic-based mechanism, it doesn't provide the same security guarantees as explicit allow or deny rules. It's best suited where users operate with standard user rights and where a security monitoring solution like Microsoft Defender for Endpoint is used.
-
-Processes running with kernel privileges can circumvent WDAC by setting the ISG extended file attribute to make a binary appear to have known good reputation.
-
-Also, since the ISG option passes along reputation from app installers to the binaries they write to disk, it can over-authorize files in some cases. For example, if the installer launches the app upon completion, any files the app writes during that first run will also be allowed.
-
-## Known limitations with using the ISG
-
-Since the ISG only allows binaries that are "known good", there are cases where the ISG may be unable to predict whether legitimate software is safe to run. If that happens, the software will be blocked by WDAC. In this case, you need to allow the software with a rule in your WDAC policy, deploy a catalog signed by a certificate trusted in the WDAC policy, or install the software from a WDAC managed installer. Installers or applications that dynamically create binaries at runtime, and self-updating applications, may exhibit this symptom.
-
-Packaged apps aren't supported with the ISG and will need to be separately authorized in your WDAC policy. Since packaged apps have a strong app identity and must be signed, it's straightforward to [authorize packaged apps](/windows/security/threat-protection/windows-defender-application-control/manage-packaged-apps-with-windows-defender-application-control) with your WDAC policy.
-
-The ISG doesn't authorize kernel mode drivers. The WDAC policy must have rules that allow the necessary drivers to run.
-
-> [!NOTE]
-> A rule that explicitly denies or allows a file will take precedence over that file's reputation data. Microsoft Intune's built-in WDAC support includes the option to trust apps with good reputation via the ISG, but it has no option to add explicit allow or deny rules. In most cases, customers using application control will need to deploy a custom WDAC policy (which can include the ISG option if desired) using [Intune's OMA-URI functionality](../deployment/deploy-wdac-policies-using-intune.md#deploy-wdac-policies-with-custom-oma-uri).
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-and-dotnet.md b/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-and-dotnet.md
deleted file mode 100644
index f99639f8fd..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-and-dotnet.md
+++ /dev/null
@@ -1,47 +0,0 @@
----
-title: Windows Defender Application Control and .NET
-description: Understand how WDAC and .NET work together and use Dynamic Code Security to verify code loaded by .NET at runtime.
-ms.localizationpriority: medium
-ms.date: 11/22/2023
-ms.topic: conceptual
----
-
-# Windows Defender Application Control (WDAC) and .NET
-
-.NET apps (as written in a high-level language like C#) are compiled to an Intermediate Language (IL). IL is a compact code format that can be supported on any operating system or architecture. Most .NET apps use APIs that are supported in multiple environments, requiring only the .NET runtime to run. IL needs to be compiled to native code in order to execute on a CPU, for example Arm64 or x64. When .NET compiles IL to native image (NI) on a device with a WDAC user mode policy, it first checks whether the original IL file passes the current WDAC policies. If so, .NET sets an NTFS extended attribute (EA) on the generated NI file so that WDAC knows to trust it as well. When the .NET app runs, WDAC sees the EA on the NI file and allows it.
-
-The EA set on the NI file only applies to the currently active WDAC policies. If one of the active WDAC policies is updated or a new policy is applied, the EA on the NI file is invalidated. The next time the app runs, WDAC will block the NI file. .NET handles the block gracefully and falls back to the original IL code. If the IL still passes the latest WDAC policies, then the app runs without any functional impact. Since the IL is now being compiled at runtime, you might notice a slight impact to performance of the app. When .NET must fall back to IL, .NET will also schedule a process to run at the next maintenance window to regenerate all NI files, thus reestablishing the WDAC EA for all code that passes the latest WDAC policies.
-
-In some cases, if an NI file is blocked, you might see a "false positive" block event in the *CodeIntegrity - Operational* event log as described in [WDAC Admin Tips & Known Issues](/windows/security/threat-protection/windows-defender-application-control/operations/known-issues#net-native-images-may-generate-false-positive-block-events).
-
-To mitigate any performance impact caused when the WDAC EA isn't valid or missing:
-
-- Avoid updating the WDAC policies often.
-- Run `ngen update` (on all machine architectures) to force .NET to regenerate all NI files immediately after applying changes to your WDAC policies.
-- Migrate applications to .NET Core (.NET 6 or greater).
-
-## WDAC and .NET hardening
-
-Security researchers found that some .NET capabilities that allow apps to load libraries from external sources or generate new code at runtime can be used to circumvent WDAC controls.
-To address this potential vulnerability, WDAC includes an option called *Dynamic Code Security* that works with .NET to verify code loaded at runtime.
-
-When the Dynamic Code Security option is enabled, Application Control policy is applied to libraries that .NET loads from external sources. For example, any remote sources, such as the internet or a network share.
-
-> [!IMPORTANT]
-> .Net dynamic code security hardening is *turned on and enforced* if any WDAC policy with UMCI enabled has set option **19 Enabled:Dynamic Code Security**. There is no audit mode for this feature. You should test your apps with this option set before turning it on across large numbers of devices.
-
-Additionally, it detects tampering in code generated to disk by .NET and blocks loading code that was tampered with.
-
-Dynamic Code Security isn't enabled by default because existing policies might not account for externally loaded libraries.
-Additionally, a few .NET loading features, including loading unsigned assemblies built with System.Reflection.Emit, aren't currently supported with Dynamic Code Security enabled.
-Microsoft recommends testing Dynamic Code Security in audit mode before enforcing it to discover whether any new libraries should be included in the policy.
-
-Additionally, customers can precompile for deployment only to prevent an allowed executable from being terminated because it tries to load unsigned dynamically generated code. See the "Precompiling for Deployment Only" section in the [ASP.NET Precompilation Overview](/previous-versions/aspnet/bb398860(v=vs.100)) document for how to fix that.
-
-To enable Dynamic Code Security, add the following option to the `<Rules>` section of your WDAC policy:
-
-```xml
-<Rule>
-    <Option>Enabled:Dynamic Code Security</Option>
-</Rule>
-```
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-design-guide.md b/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-design-guide.md
deleted file mode 100644
index 84a5e4839a..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-design-guide.md
+++ /dev/null
@@ -1,37 +0,0 @@
----
-title: Windows Defender Application Control design guide
-description: Microsoft Windows Defender Application Control allows organizations to control what apps and drivers will run on their managed Windows devices.
-ms.localizationpriority: medium
-ms.topic: conceptual
-ms.date: 02/20/2018
----
-
-# Windows Defender Application Control design guide
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-This guide covers design and planning for Windows Defender Application Control (WDAC). It's intended to help security architects, security administrators, and system administrators create a plan that addresses specific application control requirements for different departments or business groups within an organization.
-
-## Plan for success
-
-A common refrain you may hear about application control is that it is "too hard." While it's true that application control isn't as simple as flipping a switch, organizations can be successful, if they're methodical when carefully planning their approach. In reality, the issues that lead to failure with application control often arise from business issues rather than technology challenges. Organizations that have successfully deployed application control have ensured the following before starting their planning:
-
--   Executive sponsorship and organizational buy-in is in place.
--   There's a clear **business** objective for using application control, and it's not being planned as a purely technical problem from IT.
--   The organization has a plan to handle potential helpdesk support requests for users who are blocked from running some apps.
--   The organization has considered where application control can be most useful (for example, securing sensitive workloads or business functions) and also where it may be difficult to achieve (for example, developer workstations).
-
-Once these business factors are in place, you're ready to begin planning your Windows Defender Application Control (WDAC) deployment. The following topics can help guide you through your planning process.
-
-## In this section
-
-| Topic | Description |
-| - | - |
-| [Plan for WDAC policy management](plan-wdac-management.md) | This topic describes the decisions you need to make to establish the processes for managing and maintaining WDAC policies. |
-| [Understand WDAC policy design decisions](understand-wdac-policy-design-decisions.md) | This topic lists the design questions, possible answers, and ramifications of the decisions, when you plan a deployment of application control policies. |
-| [Understand WDAC policy rules and file rules](select-types-of-rules-to-create.md) | This topic lists resources you can use when selecting your application control policy rules by using WDAC. |
-| [Policy creation for common WDAC usage scenarios](common-wdac-use-cases.md) | This set of topics outlines common use case scenarios, and helps you begin to develop a plan for deploying WDAC in your organization. |
-| [Policy creation using the WDAC Wizard tool](wdac-wizard.md) | This set of topics describes how to use the WDAC Wizard desktop app to easily create, edit, and merge WDAC policies. |
-
-After planning is complete, the next step is to deploy WDAC. The [Windows Defender Application Control Deployment Guide](../deployment/wdac-deployment-guide.md) covers creating and testing policies, deploying the enforcement setting, and managing and maintaining policies.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-editing-policy.md b/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-editing-policy.md
deleted file mode 100644
index 95692365fc..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-editing-policy.md
+++ /dev/null
@@ -1,59 +0,0 @@
----
-title: Editing Windows Defender Application Control Policies with the Wizard
-description: Editing existing base and supplemental policies with the Microsoft WDAC Wizard.
-ms.localizationpriority: medium
-ms.topic: conceptual
-ms.date: 10/14/2020
----
-
-# Editing existing base and supplemental WDAC policies with the Wizard
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-The Windows Defender Application Control Wizard makes editing and viewing WDAC policies easier than the PowerShell cmdlets or manually. The Wizard currently supports the following editing capabilities: 
-<ul>
-    <li><a href="#configuring-policy-rules">Configuring policy rules</a></li>
-    <li><a href="#adding-file-rules">Adding new allow or block file rules to existing policies</a></li>
-    <li><a href="#removing-file-rules">Removing allow or block file rules on existing policies</a></li>
-</ul>
-
-## Configuring Policy Rules
-
-The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains other policy rule options that are less common to most users. To edit any of the rules, flip the corresponding policy rule state.  For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#adding-file-rules).
-
-![Configuring the policy rules.](../images/wdac-wizard-edit-policy-rules.png)
-
-A description of the policy rule is shown at the bottom of the page when the cursor is placed over the rule title. For a complete list of the policy rules and their capabilities, see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules).
-
-## Adding File Rules
-
-The Windows Defender Application Control Wizard allows users to add rules to their existing policy seamlessly. Previously, this rule-adding task would have involved creating a new policy with the new rules and merging it with the existing policy. 
-
-Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#creating-custom-file-rules).
-
-## Removing File Rules
-
-The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule, or a hash rule, select the rule in the `Policy Signing Rules List` table on the left-hand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. 
-
-![Removing file rule from policy during edit.](../images/wdac-wizard-edit-remove-file-rule.png)
-
-**Note:** removing a publisher rule will also remove the associated File Attribute rules. For instance, in the xml block below, removing ID_SIGNER_CONTOSO_PUBLISHER would also remove the rules ID_FILEATTRIB_LOB_APP_1 and ID_FILEATTRIB_LOB_APP_2. 
-
-```xml
-    <Signer ID="ID_SIGNER_CONTOSO_PUBLISHER" Name="Contoso LOB Publisher CA">
-      <CertRoot Type="TBS" Value="0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF" />
-      <CertPublisher Value="Contoso IT Dept App Publisher" />
-      <FileAttribRef RuleID="ID_FILEATTRIB_LOB_APP_1" />
-      <FileAttribRef RuleID="ID_FILEATTRIB_LOB_APP_2" />
-```
-
-[comment]: <> (## Editing File Rules Coming soon!)
-
-### Policy Creation
-
-Once the policy is created, the new policy will be written to the same path as the in-edit policy. The new policy file name will have the policy version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. 
-
-## Up next
-
-- [Merging Windows Defender Application Control (WDAC) policies using the Wizard](wdac-wizard-merging-policies.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-merging-policies.md b/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-merging-policies.md
deleted file mode 100644
index 2db7264ca4..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-merging-policies.md
+++ /dev/null
@@ -1,20 +0,0 @@
----
-title: Windows Defender Application Control Wizard Policy Merging Operation
-description: Merging multiple policies into a single application control policy with the Microsoft WDAC Wizard.
-ms.localizationpriority: medium
-ms.topic: conceptual
-ms.date: 10/14/2020
----
-
-# Merging existing policies with the WDAC Wizard
-
-Beginning in Windows 10 version 1903, Windows Defender Application Control (WDAC) supports multiple policies. Before version 1903, however, Windows 10 could only have one WDAC policy. So, users were required to merge multiple WDAC policies into one. The WDAC Wizard has a simple to use user interface to allow users to merge multiple WDAC policies. The Wizard can support up to 15 policy files as input during the merge workflow.  
-
-Select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, if accidentally added, highlight the policy row and select the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. 
-
-> [!NOTE]
-> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple Windows Defender Application Control (WDAC) Policies page](deploy-multiple-wdac-policies.md).
-
-Lastly, select a filepath save location for the final merged policy using the `Browse` button. If a minimum of two policies are selected, and the save location is specified, select the `Next` button to build the policy. 
-
-![Merging WDAC policies into a final WDAC policy.](../images/wdac-wizard-merge.png)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-parsing-event-logs.md b/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-parsing-event-logs.md
deleted file mode 100644
index 5fb5ff24d3..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard-parsing-event-logs.md
+++ /dev/null
@@ -1,121 +0,0 @@
----
-title: Windows Defender Application Control Wizard WDAC Event Parsing
-description: Creating WDAC policy rules from the WDAC event logs and the MDE Advanced Hunting WDAC events.
-ms.localizationpriority: medium
-ms.topic: conceptual
-ms.date: 01/24/2024
----
-
-# Creating WDAC Policy Rules from WDAC Events in the Wizard
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-As of [version 2.2.0.0](https://webapp-wdac-wizard.azurewebsites.net/archives.html), the WDAC Wizard supports creating WDAC policy rules from the following event log types: 
-
-1. [WDAC event log events on the system](#wdac-event-viewer-log-parsing)
-2. [Exported WDAC events (EVTX files) from any system](#wdac-event-log-file-parsing)
-3. [Exported WDAC events from MDE Advanced Hunting](#mde-advanced-hunting-wdac-event-parsing)
-
-## WDAC Event Viewer Log Parsing
-
-To create rules from the WDAC event logs on the system:
-
-1. Select **Policy Editor** from the main page.
-2. Select **Convert Event Log to a WDAC Policy**.
-3. Select the **Parse Event Logs** button under the **Parse Event Logs from the System Event Viewer to Policy** header.
-
-   The Wizard parses the relevant audit and block events from the CodeIntegrity (WDAC) Operational and AppLocker MSI and Script logs. You see a notification when the Wizard successfully finishes reading the events. 
-
-   > [!div class="mx-imgBorder"]
-   > [![Parse WDAC and AppLocker event log system events](../images/wdac-wizard-event-log-system.png)](../images/wdac-wizard-event-log-system-expanded.png)
-
-4. Select the Next button to view the audit and block events and create rules.
-5. [Generate rules from the events](#creating-policy-rules-from-the-events).
-
-## WDAC Event Log File Parsing
-
-To create rules from the WDAC `.EVTX` event logs files on the system:
-
-1. Select **Policy Editor** from the main page.
-2. Select **Convert Event Log to a WDAC Policy**.
-3. Select the **Parse Log File(s)** button under the **Parse Event Log evtx Files to Policy** header.
-4. Select the WDAC CodeIntegrity Event log EVTX file(s) from the disk to parse.
-
-   The Wizard parses the relevant audit and block events from the selected log files. You see a notification when the Wizard successfully finishes reading the events. 
-
-   > [!div class="mx-imgBorder"]
-   > [![Parse evtx file WDAC events](../images/wdac-wizard-event-log-files.png)](../images/wdac-wizard-event-log-files-expanded.png)
-
-5. Select the Next button to view the audit and block events and create rules.
-6. [Generate rules from the events](#creating-policy-rules-from-the-events).
-
-## MDE Advanced Hunting WDAC Event Parsing
-
-To create rules from the WDAC events in [MDE Advanced Hunting](../operations/querying-application-control-events-centrally-using-advanced-hunting.md):
-
-1. Navigate to the Advanced Hunting section within the MDE console and query the WDAC events. **The Wizard requires the following fields** in the Advanced Hunting csv file export: 
-
-   ```KQL
-   | project-keep Timestamp, DeviceId, DeviceName, ActionType, FileName, FolderPath, SHA1, SHA256, IssuerName, IssuerTBSHash, PublisherName, PublisherTBSHash, AuthenticodeHash, PolicyId, PolicyName
-   ```
-
-   The following Advanced Hunting query is recommended:
-
-   ```KQL
-   DeviceEvents 
-   // Take only WDAC events
-   | where ActionType startswith 'AppControlCodeIntegrity' 
-   // SigningInfo Fields
-   | extend IssuerName = parsejson(AdditionalFields).IssuerName
-   | extend IssuerTBSHash = parsejson(AdditionalFields).IssuerTBSHash
-   | extend PublisherName = parsejson(AdditionalFields).PublisherName
-   | extend PublisherTBSHash = parsejson(AdditionalFields).PublisherTBSHash
-   // Audit/Block Fields
-   | extend AuthenticodeHash = parsejson(AdditionalFields).AuthenticodeHash
-   | extend PolicyId = parsejson(AdditionalFields).PolicyID
-   | extend PolicyName = parsejson(AdditionalFields).PolicyName
-   // Keep only required fields for the WDAC Wizard
-   | project-keep Timestamp,DeviceId,DeviceName,ActionType,FileName,FolderPath,SHA1,SHA256,IssuerName,IssuerTBSHash,PublisherName,PublisherTBSHash,AuthenticodeHash,PolicyId,PolicyName
-   ```
-
-2. Export the WDAC event results by selecting the **Export** button in the results view.
-
-   > [!div class="mx-imgBorder"]
-   > [![Export the MDE Advanced Hunting results to CSV](../images/wdac-wizard-event-log-mde-ah-export.png)](../images/wdac-wizard-event-log-mde-ah-export-expanded.png)
-
-3. Select **Policy Editor** from the main page.
-4. Select **Convert Event Log to a WDAC Policy**.
-5. Select the **Parse Log File(s)** button under the "Parse MDE Advanced Hunting Events to Policy" header.
-6. Select the WDAC MDE Advanced Hunting export CSV files from the disk to parse.
-
-   The Wizard will parse the relevant audit and block events from the selected Advanced Hunting log files. You see a notification when the Wizard successfully finishes reading the events. 
-
-   > [!div class="mx-imgBorder"]
-   > [![Parse the Advanced Hunting CSV WDAC event files](../images/wdac-wizard-event-log-mde-ah-parsing.png)](../images/wdac-wizard-event-log-mde-ah-parsing-expanded.png)
-
-7. Select the Next button to view the audit and block events and create rules.
-8. [Generate rules from the events](#creating-policy-rules-from-the-events).
-
-## Creating Policy Rules from the Events
-
-On the "Configure Event Log Rules" page, the unique WDAC log events are shown in the table. Event Ids, filenames, product names, the policy name that audited or blocked the file, and the file publisher are all shown in the table. The table can be sorted alphabetically by clicking on any of the headers. 
-
-To create a rule and add it to the WDAC policy: 
-
-1. Select an audit or block event in the table by selecting the row of interest.
-2. Select a rule type from the dropdown. The Wizard supports creating Publisher, Path, File Attribute, Packaged App and Hash rules.
-3. Select the attributes and fields that should be added to the policy rules using the checkboxes provided for the rule type.
-4. Select the **Add Allow Rule** button to add the configured rule to the policy generated by the Wizard. The "Added to policy" label is shown in the selected row confirming that the rule will be generated.
-
-   > [!div class="mx-imgBorder"]
-   > [![Adding a publisher rule to the WDAC policy](../images/wdac-wizard-event-rule-creation.png)](../images/wdac-wizard-event-rule-creation-expanded.png)
-
-5. Select the **Next** button to output the policy. Once generated, the event log policy should be merged with your base or supplemental policies. 
-
-> [!WARNING]
-> It is not recommended to deploy the event log policy on its own, as it likely lacks rules to authorize Windows and may cause blue screens.
-
-## Up next
-
-- [Merging Windows Defender Application Control (WDAC) policies using the Wizard](wdac-wizard-merging-policies.md)
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard.md b/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard.md
deleted file mode 100644
index 2f67ee3ad7..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-wizard.md
+++ /dev/null
@@ -1,36 +0,0 @@
----
-title: Windows Defender Application Control Wizard
-description: The Windows Defender Application Control policy wizard tool allows you to create, edit, and merge application control policies in a simple to use Windows application.
-ms.localizationpriority: medium
-ms.topic: conceptual
-ms.date: 05/24/2022
----
-
-# Windows Defender Application Control Wizard
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-The Windows Defender Application Control policy wizard is an open-source Windows desktop application written in C# and bundled as an MSIX package. It was built to provide security architects with security, and system administrators with a more user-friendly means to create, edit, and merge Application Control policies. This tool uses the [ConfigCI PowerShell cmdlets](/powershell/module/configci) in the backend so the output policy of the tool and PowerShell cmdlets is identical.
-
-## Downloading the application
-
-Download the tool from the official [Windows Defender Application Control Policy Wizard website](https://webapp-wdac-wizard.azurewebsites.net/) as an MSIX packaged application. The tool's source code is available as part of Microsoft's Open Source Software offerings on GitHub at the [Windows Defender Application Control (WDAC) Policy Wizard repository](https://github.com/MicrosoftDocs/WDAC-Toolkit).
-
-### Supported clients
-
-As the tool uses the cmdlets in the background, it's functional on clients only where the cmdlets are supported. For more information, see [Application Control feature availability](../feature-availability.md). Specifically, the tool verifies that the client meets one of the following requirements:
-
-- Windows 10, version 1909 or later
-- For pre-1909 builds, the Enterprise SKU of Windows is installed
-
-If neither requirement is satisfied, it throws an error as the cmdlets aren't available.
-
-## Resources to learn more
-
-| Article | Description |
-| - | - |
-| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This article describes how to create a new base policy using one of the supplied policy templates. |
-| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. |
-| [Editing a base or supplemental policy](wdac-wizard-editing-policy.md) | This article demonstrates how to modify an existing policy and the tool's editing capabilities. |
-| [Merging policies](wdac-wizard-merging-policies.md) | This article describes how to merge policies into a single application control policy. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/feature-availability.md b/windows/security/application-security/application-control/windows-defender-application-control/feature-availability.md
deleted file mode 100644
index 264f3589f8..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/feature-availability.md
+++ /dev/null
@@ -1,30 +0,0 @@
----
-title: Windows Defender Application Control feature availability
-description: Compare Windows Defender Application Control (WDAC) and AppLocker feature availability.
-ms.localizationpriority: medium
-ms.date: 12/21/2023
-ms.topic: overview
----
-
-# Windows Defender Application Control and AppLocker feature availability
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Review the following table to learn more.
-
-| Capability  | Windows Defender Application Control | AppLocker   |
-|-------------|------|-------------|
-| Platform support    | Available on Windows 10, Windows 11, and Windows Server 2016 or later.  | Available on Windows 8 or later.   |
-| Edition availability     | Available on Windows 10, Windows 11, and Windows Server 2016 or later. <br> WDAC PowerShell cmdlets aren't available on Home edition, but policies are effective on all editions. | Policies are supported on all editions Windows 10 version 2004 and newer with [KB 5024351](https://support.microsoft.com/help/5024351).<br><br>Windows versions older than version 2004, including Windows Server 2019:<br><ul><li>Policies deployed through GP are only supported on Enterprise and Server editions.</li><li>Policies deployed through MDM are supported on all editions.</li></ul>|
-| Management solutions   | <ul><li>[Intune](deployment/deploy-wdac-policies-using-intune.md)</li><li>[Microsoft Configuration Manager](/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager) (limited built-in policies or custom policy deployment via software distribution)</li><li>[Group policy](deployment/deploy-wdac-policies-using-group-policy.md) </li><li>[Script](/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script)</li></ul>  | <ul><li>[Intune](/windows/client-management/mdm/applocker-csp) (custom policy deployment via OMA-URI only)</li><li>Configuration Manager (custom policy deployment via software distribution only)</li><li>[Group Policy](applocker/determine-group-policy-structure-and-rule-enforcement.md)</li><li>PowerShell</li><ul> |
-| Per-user and Per-user group rules | Not available (policies are device-wide).  | Available on Windows 8+.  |
-| Kernel mode policies  | Available on Windows 10, Windows 11, and Windows Server 2016 or later. | Not available. |
-| [Rule option 11 - Disabled:Script Enforcement](/windows/security/threat-protection/windows-defender-application-control/design/script-enforcement)  | Available on all versions of Windows 10 except 1607 LTSB, Windows 11, and Windows Server 2019 and above. **Disabled:Script Enforcement** isn't supported on **Windows Server 2016** or on **Windows 10 1607 LTSB** and shouldn't be used on those platforms. Doing so results in unexpected script enforcement behaviors. | MSI and Script rule collection is separately configurable. |
-| [Per-app rules](/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules)  | Available on Windows 10, Windows 11, and Windows Server 2019 or later.  | Not available. |
-| [Managed Installer (MI)](/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer)  | Available on Windows 10, Windows 11, and Windows Server 2019 or later. | Not available. |
-| [Reputation-Based intelligence](/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph)     | Available on Windows 10, Windows 11, and Windows Server 2019 or later.  | Not available. |
-| [Multiple policy support](/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies) | Available on Windows 10, version 1903 and above, Windows 11, and Windows Server 2022.  | Not available.  |
-| [Path-based rules](/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create) | Available on Windows 10, version 1903 and above, Windows 11, and Windows Server 2022 or later. Exclusions aren't supported. Runtime user-writeability checks enforced by default.  | Available on Windows 8+. Exclusions are supported. No runtime user-writeability check. |
-| [COM object allowlisting](/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy) | Available on Windows 10, Windows 11, and Windows Server 2019 or later. | Not available. |
-| [Packaged app rules](/windows/security/threat-protection/windows-defender-application-control/manage-packaged-apps-with-windows-defender-application-control) | Available on Windows 10, Windows 11, and Windows Server 2019 or later.  | Available on Windows 8+. |
-| Enforceable file types | <ul><li>Driver files: .sys</li><li>Executable files: .exe and .com</li><li>DLLs: .dll, .rll and .ocx</li><li>Windows Installer files: .msi, .mst, and .msp</li><li>Scripts: .ps1, .vbs, and .js</li><li>Packaged apps and packaged app installers: .appx</li></ul>| <ul><li>Executable files: .exe and .com</li><li>[Optional] DLLs: .dll, .rll and .ocx</li><li>Windows Installer files: .msi, .mst, and .msp</li><li>Scripts: .ps1, .bat, .cmd, .vbs, and .js</li><li>Packaged apps and packaged app installers: .appx</li></ul>|
-| [Application ID (AppId) Tagging](/windows/security/threat-protection/windows-defender-application-control/AppIdTagging/windows-defender-application-control-appid-tagging-guide) | Available on Windows 10, version 20H1 and later, and Windows 11. | Not available. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/event-id-explanations.md b/windows/security/application-security/application-control/windows-defender-application-control/operations/event-id-explanations.md
deleted file mode 100644
index a100e1a2c0..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/event-id-explanations.md
+++ /dev/null
@@ -1,161 +0,0 @@
----
-title: Understanding Application Control event IDs
-description: Learn what different Windows Defender Application Control event IDs signify.
-ms.localizationpriority: medium
-ms.date: 03/24/2023
-ms.topic: reference
----
-
-# Understanding Application Control events
-
-## WDAC Events Overview
-
-WDAC logs events when a policy is loaded, when a file is blocked, or when a file would be blocked if in audit mode. These block events include information that identifies the policy and gives more details about the block. WDAC doesn't generate events when a binary is allowed. However, you can turn on allow audit events for files authorized by a managed installer or the Intelligent Security Graph (ISG) as described later in this article.
-
-### Core WDAC event logs
-
-WDAC events are generated under two locations in the Windows Event Viewer:
-
-- **Applications and Services logs - Microsoft - Windows - CodeIntegrity - Operational** includes events about Application Control policy activation and the control of executables, dlls, and drivers.
-- **Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script** includes events about the control of MSI installers, scripts, and COM objects.
-
-Most app and script failures that occur when WDAC is active can be diagnosed using these two event logs. This article describes in greater detail the events that exist in these logs. To understand the meaning of different data elements, or tags, found in the details of these events, see [Understanding Application Control event tags](event-tag-explanations.md).
-
-> [!NOTE]
-> **Applications and Services logs - Microsoft - Windows - AppLocker - MSI and Script** events are not included on Windows Server Core edition.
-
-## WDAC block events for executables, dlls, and drivers
-
-These events are found in the **CodeIntegrity - Operational** event log.
-
-| Event ID | Explanation |
-|--------|-----------|
-| 3004 | This event isn't common and may occur with or without an Application Control policy present. It typically indicates a kernel driver tried to load with an invalid signature. For example, the file may not be WHQL-signed on a system where WHQL is required. <br><br> This event is also seen for kernel- or user-mode code that the developer opted-in to [/INTEGRITYCHECK](/cpp/build/reference/integritycheck-require-signature-check) but isn't signed correctly. |
-| 3033 | This event may occur with or without an Application Control policy present and should occur alongside a 3077 event if caused by WDAC policy. It often means the file's signature is revoked or a signature with the Lifetime Signing EKU has expired. Presence of the Lifetime Signing EKU is the only case where WDAC blocks files due to an expired signature. Try using option `20 Enabled:Revoked Expired As Unsigned` in your policy along with a rule (for example, hash) that doesn't rely on the revoked or expired cert. <br><br> This event also occurs if code compiled with [Code Integrity Guard (CIG)](/microsoft-365/security/defender-endpoint/exploit-protection-reference#code-integrity-guard) tries to load other code that doesn't meet the CIG requirements. |
-| 3034 | This event isn't common. It's the audit mode equivalent of event 3033. |
-| 3076 | This event is the main Application Control block event for audit mode policies. It indicates that the file would have been blocked if the policy was enforced. |
-| 3077 | This event is the main Application Control block event for enforced policies. It indicates that the file didn't pass your policy and was blocked. |
-| 3089 | This event contains signature information for files that were blocked or audit blocked by Application Control. One of these events is created for each signature of a file. Each event shows the total number of signatures found and an index value to identify the current signature. Unsigned files generate a single one of these events with TotalSignatureCount of 0. These events are correlated with 3004, 3033, 3034, 3076 and 3077 events. You can match the events using the `Correlation ActivityID` found in the **System** portion of the event. |
-
-## WDAC block events for packaged apps, MSI installers, scripts, and COM objects
-
-These events are found in the **AppLocker - MSI and Script** event log.
-
-| Event ID | Explanation |
-|--------|-----------|
-| 8028 | This event indicates that a script host, such as PowerShell, queried Application Control about a file the script host was about to run. Since the policy was in audit mode, the script or MSI file should have run, but wouldn't have passed the WDAC policy if it was enforced. Some script hosts may have additional information in their logs. Note: Most third-party script hosts don't integrate with Application Control. Consider the risks from unverified scripts when choosing which script hosts you allow to run. |
-| 8029 | This event is the enforcement mode equivalent of event 8028. Note: While this event says that a script was blocked, the script hosts control the actual script enforcement behavior. The script host may allow the file to run with restrictions and not block the file outright. For example, PowerShell runs script not allowed by your WDAC policy in [Constrained Language Mode](/powershell/module/microsoft.powershell.core/about/about_language_modes). |
-| 8036| COM object was blocked. To learn more about COM object authorization, see [Allow COM object registration in a Windows Defender Application Control policy](../design/allow-com-object-registration-in-wdac-policy.md). |
-| 8037 | This event indicates that a script host checked whether to allow a script to run, and the file passed the WDAC policy. |
-| 8038 | Signing information event correlated with either an 8028 or 8029 event. One 8038 event is generated for each signature of a script file. Contains the total number of signatures on a script file and an index as to which signature it is. Unsigned script files generate a single 8038 event with TotalSignatureCount 0. These events are correlated with 8028 and 8029 events and can be matched using the `Correlation ActivityID` found in the **System** portion of the event. |
-| 8039 | This event indicates that a packaged app (MSIX/AppX) was allowed to install or run because the WDAC policy is in audit mode. But, it would have been blocked if the policy was enforced. |
-| 8040 | This event indicates that a packaged app was prevented from installing or running due to the WDAC policy. |
-
-## WDAC policy activation events
-
-These events are found in the **CodeIntegrity - Operational** event log.
-
-| Event ID | Explanation |
-|--------|-----------|
-| 3095 | The Application Control policy can't be refreshed and must be rebooted instead. |
-| 3096 | The Application Control policy wasn't refreshed since it's already up-to-date. This event's Details includes useful information about the policy, such as its policy options. |
-| 3097 | The Application Control policy can't be refreshed. |
-| 3099 | Indicates that a policy has been loaded. This event's Details includes useful information about the Application Control policy, such as its policy options. |
-| 3100 | The application control policy was refreshed but was unsuccessfully activated. Retry. |
-| 3101 | Application Control policy refresh started for *N* policies. |
-| 3102 | Application Control policy refresh finished for *N* policies. |
-| 3103 | The system is ignoring the Application Control policy refresh. For example, an inbox Windows policy that doesn't meet the conditions for activation. |
-| 3105 | The system is attempting to refresh the Application Control policy with the specified ID. |
-
-## Diagnostic events for Intelligent Security Graph (ISG) and Managed Installer (MI)
-
-> [!NOTE]
-> When Managed Installer is enabled, customers using LogAnalytics should be aware that Managed Installer may fire many 3091 events.  Customers may need to filter out these events to avoid high LogAnalytics costs.
-
-The following events provide helpful diagnostic information when a WDAC policy includes the ISG or MI option. These events can help you debug why something was allowed/denied based on managed installer or ISG. Events 3090, 3091, and 3092 don't necessarily indicate a problem but should be reviewed in context with other events like 3076 or 3077.
-
-Unless otherwise noted, these events are found in either the **CodeIntegrity - Operational** event log or the **CodeIntegrity - Verbose** event log depending on your version of Windows.
-
-| Event ID | Explanation |
-|--------|---------|
-| 3090 | *Optional* This event indicates that a file was allowed to run based purely on ISG or managed installer. |
-| 3091 | This event indicates that a file didn't have ISG or managed installer authorization and the Application Control policy is in audit mode. |
-| 3092 | This event is the enforcement mode equivalent of 3091. |
-| 8002 | This event is found in the **AppLocker - EXE and DLL** event log. When a process launches that matches a managed installer rule, this event is raised with PolicyName = MANAGEDINSTALLER found in the event Details. Events with PolicyName = EXE or DLL aren't related to WDAC. |
-
-Events 3090, 3091, and 3092 are reported per active policy on the system, so you may see multiple events for the same file.
-
-### ISG and MI diagnostic event details
-
-The following information is found in the details for 3090, 3091, and 3092 events.
-
-| Name | Explanation |
-|------|------|
-| ManagedInstallerEnabled | Indicates whether the specified policy enables managed installer trust |
-| PassesManagedInstaller | Indicates whether the file originated from a MI |
-| SmartlockerEnabled | Indicates whether the specified policy enables ISG trust |
-| PassesSmartlocker | Indicates whether the file had positive reputation according to the ISG |
-| AuditEnabled | True if the Application Control policy is in audit mode, otherwise it is in enforce mode |
-| PolicyName | The name of the Application Control policy to which the event applies |
-
-### Enabling ISG and MI diagnostic events
-
-To enable 3090 allow events, create a TestFlags regkey with a value of 0x300 as shown in the following PowerShell command. Then restart your computer.
-
-```powershell
-reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x300
-```
-
-Events 3091 and 3092 are inactive on some versions of Windows and are turned on by the preceding command.
-
-## Appendix
-
-A list of other relevant event IDs and their corresponding description.
-
-| Event ID | Description |
-|-------|------|
-| 3001 | An unsigned driver was attempted to load on the system. |
-| 3002 | Code Integrity couldn't verify the boot image as the page hash couldn't be found. |
-| 3004 | Code Integrity couldn't verify the file as the page hash couldn't be found. |
-| 3010 | The catalog containing the signature for the file under validation is invalid. |
-| 3011 | Code Integrity finished loading the signature catalog. |
-| 3012 | Code Integrity started loading the signature catalog. |
-| 3023 | The driver file under validation didn't meet the requirements to pass the application control policy. |
-| 3024 | Windows application control was unable to refresh the boot catalog file. |
-| 3026 | Microsoft or the certificate issuing authority revoked the certificate that signed the catalog. |
-| 3032 | The file under validation is revoked or the file has a signature that is revoked.
-| 3033 | The file under validation didn't meet the requirements to pass the application control policy. |
-| 3034 | The file under validation wouldn't meet the requirements to pass the Application Control policy if it was enforced. The file was allowed since the policy is in audit mode. |
-| 3036 | Microsoft or the certificate issuing authority revoked the certificate that signed the file being validated. |
-| 3064 | If the Application Control policy was enforced, a user mode DLL under validation wouldn't meet the requirements to pass the application control policy. The DLL was allowed since the policy is in audit mode. |
-| 3065 | If the Application Control policy was enforced, a user mode DLL under validation wouldn't meet the requirements to pass the application control policy. |
-| 3074 | Page hash failure while hypervisor-protected code integrity was enabled. |
-| 3075 | This event measures the performance of the Application Control policy check during file validation. |
-| 3076 | This event is the main Application Control block event for audit mode policies. It indicates that the file would have been blocked if the policy was enforced. |
-| 3077 | This event is the main Application Control block event for enforced policies. It indicates that the file didn't pass your policy and was blocked. |
-| 3079 | The file under validation didn't meet the requirements to pass the application control policy. |
-| 3080 | If the Application Control policy was in enforced mode, the file under validation wouldn't have met the requirements to pass the application control policy. |
-| 3081 | The file under validation didn't meet the requirements to pass the application control policy. |
-| 3082 | If the Application Control policy was enforced, the policy would have blocked this non-WHQL driver. |
-| 3084 | Code Integrity is enforcing WHQL driver signing requirements on this boot session. |
-| 3085 | Code Integrity isn't enforcing WHQL driver signing requirements on this boot session. |
-| 3086 | The file under validation doesn't meet the signing requirements for an isolated user mode (IUM) process. |
-| 3089 | This event contains signature information for files that were blocked or audit blocked by Application Control. One 3089 event is created for each signature of a file. |
-| 3090 | *Optional* This event indicates that a file was allowed to run based purely on ISG or managed installer. |
-| 3091 | This event indicates that a file didn't have ISG or managed installer authorization and the Application Control policy is in audit mode. |
-| 3092 | This event is the enforcement mode equivalent of 3091. |
-| 3095 | The Application Control policy can't be refreshed and must be rebooted instead. |
-| 3096 | The Application Control policy wasn't refreshed since it's already up-to-date. |
-| 3097 | The Application Control policy can't be refreshed. |
-| 3099 | Indicates that a policy has been loaded. This event also includes information about the options set by the Application Control policy.  |
-| 3100 | The application control policy was refreshed but was unsuccessfully activated. Retry. |
-| 3101 | The system started refreshing the Application Control policy. |
-| 3102 | The system finished refreshing the Application Control policy. |
-| 3103 | The system is ignoring the Application Control policy refresh. |
-| 3104 | The file under validation doesn't meet the signing requirements for a PPL (protected process light) process. |
-| 3105 | The system is attempting to refresh the Application Control policy. |
-| 3108 | Windows mode change event was successful. |
-| 3110 | Windows mode change event was unsuccessful. |
-| 3111 | The file under validation didn't meet the hypervisor-protected code integrity (HVCI) policy. |
-| 3112 | Windows has revoked the certificate that signed the file being validated. |
-| 3114 | Dynamic Code Security opted the .NET app or DLL into Application Control policy validation. The file under validation didn't pass your policy and was blocked. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/known-issues.md b/windows/security/application-security/application-control/windows-defender-application-control/operations/known-issues.md
deleted file mode 100644
index f33e99121c..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/known-issues.md
+++ /dev/null
@@ -1,104 +0,0 @@
----
-title: WDAC Admin Tips & Known Issues
-description: WDAC Known Issues
-ms.manager: jsuther
-ms.date: 04/15/2024
-ms.topic: troubleshooting
-ms.localizationpriority: medium
----
-
-# WDAC Admin Tips & Known Issues
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
-
-This article covers tips and tricks for admins and known issues with Windows Defender Application Control (WDAC). Test this configuration in your lab before enabling it in production.
-
-## WDAC policy file locations
-
-**Multiple policy format WDAC policies** are found in the following locations depending on whether the policy is signed or not, and the method of policy deployment that was used.
-
-- &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\CiPolicies\Active\\*\{PolicyId GUID\}*.cip
-- &lt;EFI System Partition&gt;\\Microsoft\\Boot\\CiPolicies\Active\\*\{PolicyId GUID\}*.cip
-
-The *\{PolicyId GUID\}* value is unique by policy and defined in the policy XML with the &lt;PolicyId&gt; element.
-
-For **single policy format WDAC policies**, in addition to the two preceding locations, also look for a file called SiPolicy.p7b in the following locations:
-
-- &lt;EFI System Partition&gt;\\Microsoft\\Boot\\SiPolicy.p7b
-- &lt;OS Volume&gt;\\Windows\\System32\\CodeIntegrity\\SiPolicy.p7b
-
-> [!NOTE]
-> A multiple policy format WDAC policy using the single policy format GUID `{A244370E-44C9-4C06-B551-F6016E563076}` may exist under any of the policy file locations.
-
-## File Rule Precedence Order
-
-When the WDAC engine evaluates files against the active set of policies on the device, rules are applied in the following order. Once a file encounters a match, WDAC stops further processing.
-
-1. Explicit deny rules - a file is blocked if any explicit deny rule exists for it, even if other rules are created to try to allow it. Deny rules can use any [rule level](/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create#windows-defender-application-control-file-rule-levels). Use the most specific rule level practical when creating deny rules to avoid blocking more than you intend.
-
-2. Explicit allow rules - if any explicit allow rule exists for the file, the file runs.
-
-3. WDAC then checks for the [Managed Installer extended attribute (EA)](/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer) or the [Intelligent Security Graph (ISG) EA](/windows/security/threat-protection/windows-defender-application-control/use-windows-defender-application-control-with-intelligent-security-graph) on the file. If either EA exists and the policy enables the corresponding option, then the file is allowed.
-
-4. Lastly, WDAC makes a cloud call to the ISG to get reputation about the file, if the policy enables the ISG option.
-
-5. Any file not allowed by an explicit rule or based on ISG or MI is blocked implicitly.
-
-## Known issues
-
-### Boot stop failure (blue screen) occurs if more than 32 policies are active
-
-Until you apply the Windows security update released on or after April 9, 2024, your device is limited to 32 active policies. If the maximum number of policies is exceeded, the device bluescreens referencing ci.dll with a bug check value of 0x0000003b. Consider this maximum policy count limit when planning your WDAC policies. Any [Windows inbox policies](/windows/security/threat-protection/windows-defender-application-control/operations/inbox-wdac-policies) that are active on the device also count towards this limit. To remove the maximum policy limit, install the Windows security update released on, or after, April 9, 2024 and then restart the device. Otherwise, reduce the number of policies on the device to remain below 32 policies.
-
-**Note:** The policy limit was not removed on Windows 11 21H2, and will remain limited to 32 policies.
-
-### Audit mode policies can change the behavior for some apps or cause app crashes
-
-Although WDAC audit mode is designed to avoid impact to apps, some features are always on/always enforced with any WDAC policy that turns on user mode code integrity (UMCI) with the option **0 Enabled:UMCI**. Here's a list of known system changes in audit mode:
-
-- Some script hosts might block code or run code with fewer privileges even in audit mode. See [Script enforcement with WDAC](/windows/security/application-security/application-control/windows-defender-application-control/design/script-enforcement) for information about individual script host behaviors.
-- Option **19 Enabled:Dynamic Code Security** is always enforced if any UMCI policy includes that option. See [WDAC and .NET](/windows/security/application-security/application-control/windows-defender-application-control/design/wdac-and-dotnet#wdac-and-net-hardening).
-
-### .NET native images may generate false positive block events
-
-In some cases, the code integrity logs where Windows Defender Application Control errors and warnings are written include error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image falls back to its corresponding assembly and .NET regenerates the native image at its next scheduled maintenance window.
-
-### Signatures using elliptical curve cryptography (ECC) aren't supported
-
-WDAC signer-based rules only work with RSA cryptography. ECC algorithms, such as ECDSA, aren't supported. If WDAC blocks a file based on ECC signatures, the corresponding 3089 signature information events show VerificationError = 23. You can authorize the files instead by hash or file attribute rules, or using other signer rules if the file is also signed with signatures using RSA.
-
-### MSI installers are treated as user writeable on Windows 10 when allowed by FilePath rule
-
-MSI installer files are always detected as user writeable on Windows 10, and on Windows Server 2022 and earlier. If you need to allow MSI files using FilePath rules, you must set option **18 Disabled:Runtime FilePath Rule Protection** in your WDAC policy.
-
-### MSI Installations launched directly from the internet are blocked by WDAC
-
-Installing .msi files directly from the internet to a computer protected by WDAC fails.
-For example, this command fails:
-
-```console
-msiexec -i https://download.microsoft.com/download/2/E/3/2E3A1E42-8F50-4396-9E7E-76209EA4F429/Windows10_Version_1511_ADMX.msi
-```
-
-As a workaround, download the MSI file and run it locally:
-
-```console
-msiexec -i c:\temp\Windows10_Version_1511_ADMX.msi
-```
-
-### Slow boot and performance with custom policies
-
-WDAC evaluates all processes that run, including inbox Windows processes. You can cause slower boot times, degraded performance, and possibly boot issues if your policies don't build upon the WDAC templates or don't trust the Windows signers. For these reasons, you should use the [WDAC base templates](../design/example-wdac-base-policies.md) whenever possible to create your policies.
-
-#### AppId Tagging policy considerations
-
-AppId Tagging policies that aren't built upon the WDAC base templates or don't allow the Windows in-box signers might cause a significant increase in boot times (~2 minutes).
-
-If you can't allowlist the Windows signers or build off the WDAC base templates, add the following rule to your policies to improve the performance:
-
-:::image type="content" source="../images/known-issue-appid-dll-rule.png" alt-text="Allow all dlls in the policy.":::
-
-:::image type="content" source="../images/known-issue-appid-dll-rule-xml.png" alt-text="Allow all dll files in the xml policy.":::
-
-Since AppId Tagging policies evaluate but can't tag dll files, this rule short circuits dll evaluation and improve evaluation performance.
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-operational-guide.md b/windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-operational-guide.md
deleted file mode 100644
index 71c48fb256..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/operations/wdac-operational-guide.md
+++ /dev/null
@@ -1,27 +0,0 @@
----
-title: Managing and troubleshooting Windows Defender Application Control policies
-description: Gather information about how your deployed Windows Defender Application Control policies are behaving.
-ms.localizationpriority: medium
-ms.date: 03/30/2023
-ms.topic: how-to
----
-
-# Windows Defender Application Control operational guide
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](../feature-availability.md).
-
-You now understand how to design and deploy your Windows Defender Application Control (WDAC) policies. This guide explains how to understand the effects your policies have and how to troubleshoot when they aren't behaving as expected. It contains information on where to find events and what they mean, and also querying these events with Microsoft Defender for Endpoint Advanced Hunting feature.
-
-## In this section
-
-| Article | Description |
-| - | - |
-| [Debugging and troubleshooting](/windows/security/threat-protection/windows-defender-application-control/operations/wdac-debugging-and-troubleshooting) | This article explains how to debug app and script failures with WDAC. |
-| [Understanding Application Control event IDs](/windows/security/threat-protection/windows-defender-application-control/event-id-explanations) | This article explains the meaning of different WDAC event IDs. |
-| [Understanding Application Control event tags](/windows/security/threat-protection/windows-defender-application-control/event-tag-explanations) | This article explains the meaning of different WDAC event tags. |
-| [Query WDAC events with Advanced hunting](/windows/security/threat-protection/windows-defender-application-control/querying-application-control-events-centrally-using-advanced-hunting) | This article covers how to view WDAC events centrally from all systems that are connected to Microsoft Defender for Endpoint. |
-| [Admin Tips & Known Issues](/windows/security/threat-protection/windows-defender-application-control/operations/known-issues) | This article describes some WDAC Admin Tips & Known Issues. |
-| [Managed installer and ISG technical reference and troubleshooting guide](/windows/security/threat-protection/windows-defender-application-control/configure-wdac-managed-installer) | This article provides technical details and debugging steps for managed installer and ISG. |
-| [CITool.exe technical reference](/windows/security/threat-protection/windows-defender-application-control/operations/citool-commands) | This article explains how to use CITool.exe. |
-| [Inbox WDAC policies](/windows/security/threat-protection/windows-defender-application-control/operations/inbox-wdac-policies) | This article describes the WDAC policies that ship with Windows and when they're active. |
diff --git a/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview.md b/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview.md
deleted file mode 100644
index 81042f2926..0000000000
--- a/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview.md
+++ /dev/null
@@ -1,65 +0,0 @@
----
-title: WDAC and AppLocker Overview
-description: Compare Windows application control technologies.
-ms.localizationpriority: medium
-ms.date: 01/03/2024
-ms.topic: conceptual
----
-
-# Windows Defender Application Control and AppLocker Overview
-
-> [!NOTE]
-> Some capabilities of Windows Defender Application Control (WDAC) are only available on specific Windows versions. Learn more about the [WDAC feature availability](feature-availability.md).
-
-Windows 10 and Windows 11 include two technologies that can be used for application control, depending on your organization's specific scenarios and requirements: Windows Defender Application Control (WDAC) and AppLocker.
-
-## Windows Defender Application Control
-
-WDAC was introduced with Windows 10 and allows organizations to control which drivers and applications are allowed to run on their Windows clients. It was designed as a security feature under the [servicing criteria](https://www.microsoft.com/msrc/windows-security-servicing-criteria), defined by the Microsoft Security Response Center (MSRC).
-
-WDAC policies apply to the managed computer as a whole and affects all users of the device. WDAC rules can be defined based on:
-
-- Attributes of the codesigning certificate(s) used to sign an app and its binaries
-- Attributes of the app's binaries that come from the signed metadata for the files, such as Original Filename and version, or the hash of the file
-- The reputation of the app as determined by Microsoft's [Intelligent Security Graph](design/use-wdac-with-intelligent-security-graph.md)
-- The identity of the process that initiated the installation of the app and its binaries ([managed installer](design/configure-authorized-apps-deployed-with-a-managed-installer.md))
-- The [path from which the app or file is launched](design/select-types-of-rules-to-create.md#more-information-about-filepath-rules) (beginning with Windows 10 version 1903)
-- The process that launched the app or binary
-
-> [!NOTE]
-> WDAC was originally released as part of Device Guard and called configurable code integrity. Device Guard and configurable code integrity are no longer used except to find where to deploy WDAC policy via Group Policy.
-
-### WDAC System Requirements
-
-WDAC policies can be created and applied on any client edition of Windows 10 or Windows 11, or on Windows Server 2016 and higher. WDAC policies can be deployed via a Mobile Device Management (MDM) solution, for example, Intune; a management interface such as Configuration Manager; or a script host such as PowerShell. Group Policy can also be used to deploy WDAC policies, but is limited to single-policy format policies that work on Windows Server 2016 and 2019.
-
-For more information on which individual WDAC features are available on specific WDAC builds, see [WDAC feature availability](feature-availability.md).
-
-## AppLocker
-
-AppLocker was introduced with Windows 7, and allows organizations to control which applications are allowed to run on their Windows clients. AppLocker helps to prevent end-users from running unapproved software on their computers but doesn't meet the servicing criteria for being a security feature.
-
-AppLocker policies can apply to all users on a computer, or to individual users and groups. AppLocker rules can be defined based on:
-
-- Attributes of the codesigning certificate(s) used to sign an app and its binaries.
-- Attributes of the app's binaries that come from the signed metadata for the files, such as Original Filename and version, or the hash of the file.
-- The path from which the app or file is launched.
-
-AppLocker is also used by some features of WDAC, including [managed installer](/windows/security/application-security/application-control/windows-defender-application-control/design/configure-authorized-apps-deployed-with-a-managed-installer) and the [Intelligent Security Graph](/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph).
-
-### AppLocker System Requirements
-
-AppLocker policies can only be configured on and applied to devices that are running on the supported versions and editions of the Windows operating system. For more info, see [Requirements to Use AppLocker](applocker/requirements-to-use-applocker.md).
-AppLocker policies can be deployed using Group Policy or MDM.
-
-## Choose when to use WDAC or AppLocker
-
-Generally, customers who are able to implement application control using WDAC, rather than AppLocker, should do so. WDAC is undergoing continual improvements, and is getting added support from Microsoft management platforms. Although AppLocker continues to receive security fixes, it isn't getting new feature improvements.
-
-However, in some cases, AppLocker might be the more appropriate technology for your organization. AppLocker is best when:
-
-- You have a mixed Windows operating system (OS) environment and need to apply the same policy controls to Windows 10 and earlier versions of the OS.
-- You need to apply different policies for different users or groups on shared computers.
-- You don't want to enforce application control on application files such as DLLs or drivers.
-
-AppLocker can also be deployed as a complement to WDAC to add user or group-specific rules for shared device scenarios, where it's important to prevent some users from running specific apps. As a best practice, you should enforce WDAC at the most restrictive level possible for your organization, and then you can use AppLocker to further fine-tune the restrictions.
diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md
index 29d6d96ecb..0de253e2e9 100644
--- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md
+++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md
@@ -87,7 +87,7 @@ An array of folders, each representing a location on the host machine that is sh
 ```xml
 <MappedFolders>
   <MappedFolder>
-    <HostFolder>absolute path to the host folder</HostFolder>
+    <HostFolder>absolute or relative path to the host folder</HostFolder>
     <SandboxFolder>absolute path to the sandbox folder</SandboxFolder>
     <ReadOnly>value</ReadOnly>
   </MappedFolder>
diff --git a/windows/security/docfx.json b/windows/security/docfx.json
index 1a7808e2b1..b2eefb6943 100644
--- a/windows/security/docfx.json
+++ b/windows/security/docfx.json
@@ -101,6 +101,12 @@
         "security-foundations/certification/**/*.md": "mike-grimm",
         "security-foundations/certification/**/*.yml": "mike-grimm"
       },
+      "feedback_system": {
+        "book/*.md": "none"
+      },
+      "hideEdit": {
+        "book/*.md": "true"
+      },
       "ms.author": {
         "application-security//**/*.md": "vinpa",
         "application-security//**/*.yml": "vinpa",
diff --git a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
index b686fb205c..22b8f3245f 100644
--- a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
+++ b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
@@ -54,7 +54,9 @@ Use the **Virtualization Based Technology** > **Hypervisor Enforced Code Integri
 1. Navigate to **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard**.
 1. Double-click **Turn on Virtualization Based Security**.
 1. Select **Enabled** and under **Virtualization Based Protection of Code Integrity**, select **Enabled without UEFI lock**. Only select **Enabled with UEFI lock** if you want to prevent memory integrity from being disabled remotely or by policy update. Once enabled with UEFI lock, you must have access to the UEFI BIOS menu to turn off Secure Boot if you want to turn off memory integrity.
+
    ![Enable memory integrity using Group Policy.](images/enable-hvci-gp.png)
+
 1. Select **Ok** to close the editor.
 
 To apply the new policy on a domain-joined computer, either restart or run `gpupdate /force` in an elevated Command Prompt.
@@ -73,7 +75,7 @@ Set the following registry keys to enable memory integrity. These keys provide s
 
 Recommended settings (to enable memory integrity without UEFI Lock):
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /t REG_DWORD /d 1 /f
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 1 /f
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 0 /f
@@ -85,55 +87,55 @@ If you want to customize the preceding recommended settings, use the following r
 
 **To enable VBS only (no memory integrity)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /t REG_DWORD /d 1 /f
 ```
 
 **To enable VBS and require Secure boot only (value 1)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 1 /f
 ```
 
 **To enable VBS with Secure Boot and DMA protection (value 3)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 3 /f
 ```
 
 **To enable VBS without UEFI lock (value 0)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 0 /f
 ```
 
 **To enable VBS with UEFI lock (value 1)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 1 /f
 ```
 
 **To enable memory integrity**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 1 /f
 ```
 
 **To enable memory integrity without UEFI lock (value 0)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Locked" /t REG_DWORD /d 0 /f
 ```
 
 **To enable memory integrity with UEFI lock (value 1)**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Locked" /t REG_DWORD /d 1 /f
 ```
 
 **To enable VBS (and memory integrity) in mandatory mode**
 
-```console
+```cmd
 reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Mandatory" /t REG_DWORD /d 1 /f
 ```
 
@@ -143,25 +145,25 @@ The **Mandatory** setting prevents the OS loader from continuing to boot in case
 > Special care should be used before enabling this mode, since, in case of any failure of the virtualization modules, the system will refuse to boot.
 
 **To gray out the memory integrity UI and display the message "This setting is managed by your administrator"**
-```console
+```cmd
 reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /f
 ```
 
 **To let memory integrity UI behave normally (Not grayed out)**
-```console
+```cmd
 reg add HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /t REG_DWORD /d 2 /f
 ```
 
-### Enable memory integrity using Windows Defender Application Control (WDAC)
+### Enable memory integrity using App Control for Business
 
-You can use WDAC policy to turn on memory integrity using any of the following techniques:
+You can use App Control policy to turn on memory integrity using any of the following techniques:
 
-1. Use the [WDAC Wizard](https://aka.ms/wdacwizard) to create or edit your WDAC policy and select the option **Hypervisor-protected Code Integrity** on the **Policy Rules** page of the Wizard.
+1. Use the [App Control Wizard](https://aka.ms/wdacwizard) to create or edit your App Control policy and select the option **Hypervisor-protected Code Integrity** on the **Policy Rules** page of the Wizard.
 2. Use the [Set-HVCIOptions](/powershell/module/configci/set-hvcioptions) PowerShell cmdlet.
-3. Edit your WDAC policy XML and modify the value set for the `<HVCIOptions>` element.
+3. Edit your App Control policy XML and modify the value set for the `<HVCIOptions>` element.
 
 > [!NOTE]
-> If your WDAC policy is set to turn memory integrity on, it will be turned on even if the policy is in audit mode.
+> If your App Control policy is set to turn memory integrity on, it will be turned on even if the policy is in audit mode.
 
 ### Validate enabled VBS and memory integrity features
 
@@ -269,7 +271,7 @@ Another method to determine the available and enabled VBS features is to run msi
     2. Then, boot to Windows RE on the affected computer, see [Windows RE Technical Reference](/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference).
     3. After logging in to Windows RE, set the memory integrity registry key to off:
 
-        ```console
+        ```cmd
         reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 0 /f
         ```
 
diff --git a/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md b/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md
index 153871eba2..af01702227 100644
--- a/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md
+++ b/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md
@@ -30,7 +30,7 @@ System Guard Secure Launch can be configured for Mobile Device Management (MDM)
 1. Select **Start** > type and then select **Edit group policy**.
 1. Select **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard** > **Turn On Virtualization Based Security** > **Secure Launch Configuration**.
 
-    ![Secure Launch Configuration.](images/secure-launch-group-policy.png)
+   :::image type="content" alt-text="Secure Launch Configuration." source="images/secure-launch-group-policy.png" lightbox="images/secure-launch-group-policy.png":::
 
 ### Windows Security
 
@@ -52,10 +52,10 @@ Select **Start** > **Settings** > **Update & Security** > **Windows Security** >
 
 To verify that Secure Launch is running, use System Information (MSInfo32). Select **Start**, search for **System Information**, and look under **Virtualization-based Security Services Running** and **Virtualization-based Security Services Configured**.
 
-![Verifying Secure Launch is running in the Windows Security settings.](images/secure-launch-msinfo.png)
+:::image type="content" alt-text="Verifying Secure Launch is running in the Windows Security settings." source="images/secure-launch-msinfo.png" lightbox="images/secure-launch-msinfo.png":::
 
 > [!NOTE]
-> To enable System Guard Secure launch, the platform must meet all the baseline requirements for [System Guard](how-hardware-based-root-of-trust-helps-protect-windows.md), [Device Guard](../application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md), [Credential Guard](../identity-protection/credential-guard/index.md), and [Virtualization Based Security](/windows-hardware/design/device-experiences/oem-vbs).
+> To enable System Guard Secure launch, the platform must meet all the baseline requirements for [System Guard](how-hardware-based-root-of-trust-helps-protect-windows.md), [Device Guard](../application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md), [Credential Guard](../identity-protection/credential-guard/index.md), and [Virtualization Based Security](/windows-hardware/design/device-experiences/oem-vbs).
 
 > [!NOTE]
 > For more information around AMD processors, see [Microsoft Security Blog: Force firmware code to be measured and attested by Secure Launch on Windows 10](https://www.microsoft.com/security/blog/2020/09/01/force-firmware-code-to-be-measured-and-attested-by-secure-launch-on-windows-10/).
diff --git a/windows/security/hardware-security/tpm/tpm-recommendations.md b/windows/security/hardware-security/tpm/tpm-recommendations.md
index ae731d1f10..ff2f368320 100644
--- a/windows/security/hardware-security/tpm/tpm-recommendations.md
+++ b/windows/security/hardware-security/tpm/tpm-recommendations.md
@@ -87,7 +87,7 @@ The following table defines which Windows features require TPM support.
 | Measured Boot | Yes | Yes | Yes | Measured Boot requires TPM 1.2 or 2.0 and UEFI Secure Boot. TPM 2.0 is recommended since it supports newer cryptographic algorithms. TPM 1.2 only supports the SHA-1 algorithm, which is being deprecated. |
 | BitLocker | No | Yes | Yes | TPM 1.2 or 2.0 are supported but TPM 2.0 is recommended. [Device Encryption requires Modern Standby](../../operating-system-security/data-protection/bitlocker/index.md#device-encryption) including TPM 2.0 support |
 | Device Encryption | Yes | N/A | Yes | Device Encryption requires Modern Standby/Connected Standby certification, which requires TPM 2.0. |
-| Windows Defender Application Control (Device Guard) | No | Yes | Yes |
+| App Control for Business | No | Yes | Yes |
 | System Guard (DRTM) | Yes | No | Yes | TPM 2.0 and UEFI firmware is required. |
 | Credential Guard | No | Yes | Yes | Windows 10, version 1507 (End of Life as of May 2017) only supported TPM 2.0 for Credential Guard. Beginning with Windows 10, version 1511, TPM 1.2 and 2.0 are supported. Paired with System Guard, TPM 2.0 provides enhanced security for Credential Guard. Windows 11 requires TPM 2.0 by default to facilitate easier enablement of this enhanced security for customers. |
 | Device Health Attestation | Yes | Yes | Yes | TPM 2.0 is recommended since it supports newer cryptographic algorithms. TPM 1.2 only supports the SHA-1 algorithm, which is being deprecated. |
diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml
index c17a99f819..9a2ac25742 100644
--- a/windows/security/identity-protection/hello-for-business/faq.yml
+++ b/windows/security/identity-protection/hello-for-business/faq.yml
@@ -5,7 +5,7 @@ metadata:
   author: paolomatarazzo
   ms.author: paoloma
   ms.topic: faq
-  ms.date: 01/03/2024
+  ms.date: 10/10/2024
 
 title: Common questions about Windows Hello for Business
 summary: Windows Hello for Business replaces password sign-in with strong authentication, using an asymmetric key pair. This Frequently Asked Questions (FAQ) article is intended to help you learn more about Windows Hello for Business.
diff --git a/windows/security/includes/mdag-edge-deprecation-notice.md b/windows/security/includes/mdag-edge-deprecation-notice.md
index 150cffe43f..69454f1d18 100644
--- a/windows/security/includes/mdag-edge-deprecation-notice.md
+++ b/windows/security/includes/mdag-edge-deprecation-notice.md
@@ -6,5 +6,5 @@ ms.topic: include
 ---
 
 > [!NOTE]
-> - Microsoft Defender Application Guard, including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), will be deprecated for Microsoft Edge for Business and [will no longer be updated](/windows/whats-new/feature-lifecycle). Please download the [Microsoft Edge For Business Security Whitepaper](https://edgestatic.azureedge.net/shared/cms/pdfs/Microsoft_Edge_Security_Whitepaper_v2.pdf) to learn more about Edge for Business security capabilities.
+> - Microsoft Defender Application Guard, including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), will be deprecated for Microsoft Edge for Business and [will no longer be updated](/windows/whats-new/feature-lifecycle). To learn more about Microsoft Edge security capabilities, see [Microsoft Edge For Business Security](/deployedge/ms-edge-security-for-business).
 > - Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding browser extensions and associated Windows Store app are no longer available. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard).<!--8932292-->
\ No newline at end of file
diff --git a/windows/security/includes/sections/application.md b/windows/security/includes/sections/application.md
index 8b6b510ef4..75e29b9470 100644
--- a/windows/security/includes/sections/application.md
+++ b/windows/security/includes/sections/application.md
@@ -9,8 +9,8 @@ ms.topic: include
 
 | Feature name | Description |
 |:---|:---|
-| **[Smart App Control](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control)** | Smart App Control prevents users from running malicious applications on Windows devices by blocking untrusted or unsigned applications. Smart App Control goes beyond previous built-in browser protections, by adding another layer of security that is woven directly into the core of the OS at the process level. Using AI, our new Smart App Control only allows processes to run that are predicted to be safe based on existing and new intelligence processed daily. Smart App Control builds on top of the same cloud-based AI used in Windows Defender Application Control (WDAC) to predict the safety of an application, so people can be confident they're using safe and reliable applications on their new Windows 11 devices, or Windows 11 devices that have been reset. |
-| **[Windows Defender Application Control (WDAC)](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control)** | Your organization is only as secure as the applications that run on your devices. With application control, apps must earn trust to run, in contrast to an application trust model where all code is assumed trustworthy. By helping prevent unwanted or malicious code from running, application control is an important part of an effective security strategy. Many organizations cite application control as one of the most effective means for addressing the threat of executable file-based malware.<br><br>Windows 10 and above include Windows Defender Application Control (WDAC) and AppLocker. WDAC is the next generation app control solution for Windows and provides powerful control over what runs in your environment. Customers who were using AppLocker on previous versions of Windows can continue to use the feature as they consider whether to switch to WDAC for the stronger protection. |
+| **[Smart App Control](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control)** | Smart App Control prevents users from running malicious applications on Windows devices by blocking untrusted or unsigned applications. Smart App Control goes beyond previous built-in browser protections, by adding another layer of security that is woven directly into the core of the OS at the process level. Using AI, our new Smart App Control only allows processes to run that are predicted to be safe based on existing and new intelligence processed daily. Smart App Control builds on top of the same cloud-based AI used in App Control for Business to predict the safety of an application, so people can be confident they're using safe and reliable applications on their new Windows 11 devices, or Windows 11 devices that have been reset. |
+| **[App Control for Business](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control)** | Your organization is only as secure as the applications that run on your devices. With application control, apps must earn trust to run, in contrast to an application trust model where all code is assumed trustworthy. By helping prevent unwanted or malicious code from running, application control is an important part of an effective security strategy. Many organizations cite application control as one of the most effective means for addressing the threat of executable file-based malware.<br><br>Windows 10 and above include App Control for Business and AppLocker. App Control is the next generation app control solution for Windows and provides powerful control over what runs in your environment. Customers who were using AppLocker on previous versions of Windows can continue to use the feature as they consider whether to switch to App Control for the stronger protection. |
 | **[AppLocker](/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview)** |  |
 | **[User Account Control (UAC)](/windows/security/application-security/application-control/user-account-control/)** | User Account Control (UAC) helps prevent malware from damaging a device. With UAC, apps and tasks always run in the security context of a non-administrator account, unless an administrator authorizes administrator-level access to the system. UAC can block the automatic installation of unauthorized apps and prevents inadvertent changes to system settings. Enabling UAC helps to prevent malware from altering device settings and potentially gaining access to networks and sensitive data. UAC can also block the automatic installation of unauthorized apps and prevent inadvertent changes to system settings. |
 | **[Microsoft vulnerable driver blocklist](/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules)** | The Windows kernel is the most privileged software and is therefore a compelling target for malware authors. Since Windows has strict requirements for code running in the kernel, cybercriminals commonly exploit vulnerabilities in kernel drivers to get access. Microsoft works with the ecosystem partners to constantly identify and respond to potentially vulnerable kernel drivers.<br><br>Prior to Windows 11, version 22H2, the operating system enforced a block policy when HVCI is enabled to prevent vulnerable versions of drivers from running. Starting in Windows 11, version 22H2, the block policy is enabled by default for all new Windows devices, and users can opt-in to enforce the policy from the Windows Security app. |
diff --git a/windows/security/includes/sections/security-foundations.md b/windows/security/includes/sections/security-foundations.md
index 7a85af0543..905fb63998 100644
--- a/windows/security/includes/sections/security-foundations.md
+++ b/windows/security/includes/sections/security-foundations.md
@@ -25,5 +25,5 @@ ms.topic: include
 | Feature name | Description |
 |:---|:---|
 | **Software Bill of Materials (SBOM)** | SBOMs are leveraged to provide the transparency and provenance of the content as it moves through various stages of the Windows supply chain. This enables trust between each supply chain segment, ensures that tampering has not taken place during ingestion and along the way, and provides a provable chain of custody for the product that we ship to customers. |
-| **[Azure Code Signing](/windows/security/application-security/application-control/windows-defender-application-control/deployment/use-code-signing-for-better-control-and-protection)** | Windows Defender Application Control (WDAC) enables customers to define policies for controlling what is allowed to run on their devices. WDAC policies can be remotely applied to devices using an MDM solution like Microsoft Intune. <br><br>To simplify WDAC enablement, organizations can take advantage of Azure Code Signing, a secure and fully managed service for signing WDAC policies and apps. <br><br>Azure Code Signing minimizes the complexity of code signing with a turnkey service backed by a Microsoft managed certificate authority, eliminating the need to procure and self-manage any signing certificates. The service is managed just as any other Azure resource and integrates easily with the leading development and CI/CD toolsets.  |
+| **[Azure Code Signing](/windows/security/application-security/application-control/windows-defender-application-control/deployment/use-code-signing-for-better-control-and-protection)** | App Control for Business enables customers to define policies for controlling what is allowed to run on their devices. App Control policies can be remotely applied to devices using an MDM solution like Microsoft Intune. <br><br>To simplify App Control enablement, organizations can take advantage of Azure Code Signing, a secure and fully managed service for signing App Control policies and apps. <br><br>Azure Code Signing minimizes the complexity of code signing with a turnkey service backed by a Microsoft managed certificate authority, eliminating the need to procure and self-manage any signing certificates. The service is managed just as any other Azure resource and integrates easily with the leading development and CI/CD toolsets.  |
 | **[Windows application software development kit (SDK)](https://developer.microsoft.com/windows/downloads/windows-sdk/)** | Developers have an opportunity to design highly secure applications that benefit from the latest Windows safeguards. The Windows App SDK provides a unified set of APIs and tools for developing secure desktop apps for Windows. To help create apps that are up-to-date and protected, the SDK follows the same security standards, protocols, and compliance as the core Windows operating system.  |
diff --git a/windows/security/index.yml b/windows/security/index.yml
index 9553388f93..9738ace595 100644
--- a/windows/security/index.yml
+++ b/windows/security/index.yml
@@ -101,7 +101,7 @@ landingContent:
     linkLists:
       - linkListType: overview
         links:
-          - text: Windows Defender Application Control (WDAC)
+          - text: App Control for Business
             url: /windows/security/application-security/application-control/windows-defender-application-control/
           - text: User Account Control (UAC)
             url: /windows/security/application-security/application-control/user-account-control
diff --git a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md
index 7bf6e12c5a..645cf45add 100644
--- a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md
+++ b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md
@@ -462,6 +462,9 @@ From the **BitLocker Drive Encryption** Control Panel applet, select the OS driv
 
 ### Resume BitLocker
 
+> [!NOTE]
+> Resuming protection only works on devices that have accepted the Windows EULA.
+
 #### [:::image type="icon" source="images/powershell.svg"::: **PowerShell**](#tab/powershell)
 
 ```powershell
diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md
index 4625b2f5e0..808550018a 100644
--- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md
+++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md
@@ -21,6 +21,7 @@ The following list provides examples of common events that cause a device to ent
 - Docking or undocking a portable computer
 - Changes to the NTFS partition table on the disk
 - Changes to the boot manager
+- Using PXE boot
 - Turning off, disabling, deactivating, or clearing the TPM
 - TPM self-test failure
 - Upgrading the motherboard to a new one with a new TPM
diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md
index 4b1498edf5..a3cded5a34 100644
--- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md
+++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md
@@ -180,6 +180,9 @@ When a volume is unlocked using a recovery password:
 
 After the volume is unlocked, BitLocker behaves the same way, regardless of how the access was granted.
 
+> [!NOTE]
+> If you move an OS volume with a TPM protector to a different device and unlock it using a recovery protector, BitLocker will bind to the new TPM. Returning the volume to the original device will prompt for the recovery protector due to the TPM mismatch. Once unlocked using recovery protector again, the volume will re-bind to the original device.
+
 If a device experiences multiple recovery password events, an administrator should perform post-recovery analysis to determine the root cause of the recovery. Then, refresh the BitLocker platform validation to prevent entering a recovery password each time that the device starts up.
 
 ### Determine the root cause of the recovery
diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md
index c652900182..05f61ccf78 100644
--- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md
+++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md
@@ -3,7 +3,7 @@ title: Get support for security baselines
 description: Find answers to frequently asked question on how to get support for baselines, the Security Compliance Toolkit (SCT), and related articles.
 ms.localizationpriority: medium
 ms.topic: conceptual
-ms.date: 07/10/2024
+ms.date: 10/01/2024
 ---
 
 # Get Support
@@ -47,6 +47,7 @@ No. SCM supported only SCAP 1.0, which wasn't updated as SCAP evolved. The new t
 
 | Name | Build | Baseline release date | Security tools |
 |--|--|--|--|
+| Windows 11 | [24H2](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-24h2-security-baseline/ba-p/4252801) <br> | October 2024<br> | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) |
 | Windows 11 | [23H2](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-23h2-security-baseline/ba-p/3967618) <br> | October 2023<br> | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) |
 | Windows 11 | [22H2](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-22h2-security-baseline/ba-p/3632520) <br> | September 2022<br> | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) |
 | Windows 10 | [22H2](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-10-version-22h2-security-baseline/ba-p/3655724) <br> [21H2](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-windows-10-version-21h2/ba-p/3042703) <br> [20H2](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-and-windows-server/ba-p/1999393) <br> [1809](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1809-and-windows-server/ba-p/701082) <br> [1607](/archive/blogs/secguide/security-baseline-for-windows-10-v1607-anniversary-edition-and-windows-server-2016) <br>[1507](/archive/blogs/secguide/security-baseline-for-windows-10-v1507-build-10240-th1-ltsb-update) | October 2022<br>December 2021<br>December 2020<br>October 2018<br>October 2016 <br>January 2016 | [SCT 1.0](https://www.microsoft.com/download/details.aspx?id=55319) |
diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md
index a1a1d93059..ced5288d21 100644
--- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md
+++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md
@@ -2,7 +2,7 @@
 title: Microsoft Security Compliance Toolkit Guide
 description: This article describes how to use Security Compliance Toolkit in your organization.
 ms.topic: conceptual
-ms.date: 07/10/2024
+ms.date: 10/01/2024
 ---
 
 # Microsoft Security Compliance Toolkit - How to use
@@ -16,6 +16,7 @@ The SCT enables administrators to effectively manage their enterprise's Group Po
 The Security Compliance Toolkit consists of:
 
 - Windows 11 security baseline
+  - Windows 11, version 24H2
   - Windows 11, version 23H2
   - Windows 11, version 22H2
   - Windows 11, version 21H2
diff --git a/windows/security/operating-system-security/network-security/windows-firewall/rules.md b/windows/security/operating-system-security/network-security/windows-firewall/rules.md
index 4729ae6e10..3daf29314e 100644
--- a/windows/security/operating-system-security/network-security/windows-firewall/rules.md
+++ b/windows/security/operating-system-security/network-security/windows-firewall/rules.md
@@ -46,11 +46,11 @@ In either of these scenarios, once the rules are added, they must be deleted to
 > [!NOTE]
 > The firewall's default settings are designed for security. Allowing all inbound connections by default introduces the network to various threats. Therefore, creating exceptions for inbound connections from non-Microsoft software should be determined by trusted app developers, the user, or the admin on behalf of the user.
 
-### WDAC tagging policies
+### App Control tagging policies
 
-Windows Firewall supports the use of Windows Defender Application Control (WDAC) Application ID (AppID) tags in firewall rules. With this capability, Windows Firewall rules can be scoped to an application or a group of applications by referencing process tags, without using absolute path or sacrificing security. There are two steps for this configuration:
+Windows Firewall supports the use of App Control for Business Application ID (AppID) tags in firewall rules. With this capability, Windows Firewall rules can be scoped to an application or a group of applications by referencing process tags, without using absolute path or sacrificing security. There are two steps for this configuration:
 
-1. Deploy *WDAC AppId tagging policies*: a Windows Defender Application Control policy must be deployed, which specifies individual applications or groups of applications to apply a *PolicyAppId tag* to the process token(s). Then, the admin can define firewall rules that are scoped to all processes tagged with the matching *PolicyAppId*. For more information, see the [WDAC AppId tagging guide](../../../application-security/application-control/windows-defender-application-control/AppIdTagging/wdac-appid-tagging-guide.md) to create, deploy, and test an AppID policy to tag applications.
+1. Deploy *App Control AppId tagging policies*: an App Control for Business policy must be deployed, which specifies individual applications or groups of applications to apply a *PolicyAppId tag* to the process token(s). Then, the admin can define firewall rules that are scoped to all processes tagged with the matching *PolicyAppId*. For more information, see the [App Control AppId tagging guide](../../../application-security/application-control/app-control-for-business/AppIdTagging/appcontrol-appid-tagging-guide.md) to create, deploy, and test an AppID policy to tag applications.
 1. Configure firewall rules using *PolicyAppId tags* using one of the two methods:
     - Using the [PolicyAppId node of the Firewall CSP](/windows/client-management/mdm/firewall-csp#mdmstorefirewallrulesfirewallrulenamepolicyappid) with an MDM solution like Microsoft Intune. If you use Microsoft Intune, you can deploy the rules from Microsoft Intune Admin center, under the path **Endpoint security** > **Firewall** > **Create policy** > **Windows 10, Windows 11, and Windows Server** > **Windows Firewall Rules**. When creating the rules, provide the *AppId tag* in the **Policy App ID** setting
     - Create local firewall rules with PowerShell: use the [`New-NetFirewallRule`](/powershell/module/netsecurity/new-netfirewallrule) cmdlet and specify the `-PolicyAppId` parameter. You can specify one tag at a time while creating firewall rules. Multiple User Ids are supported
diff --git a/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/available-settings.md b/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/available-settings.md
index d53d8c5dc7..9824baf8c1 100644
--- a/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/available-settings.md
+++ b/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/available-settings.md
@@ -1,7 +1,7 @@
 ---
 title: Available Microsoft Defender SmartScreen settings
 description: A list of all available settings for Microsoft Defender SmartScreen using Group Policy and mobile device management (MDM) settings.
-ms.date: 07/10/2024
+ms.date: 10/10/2024
 ms.topic: reference
 ---
 
@@ -9,7 +9,7 @@ ms.topic: reference
 
 Microsoft Defender SmartScreen works with Intune, Group Policy, and mobile device management (MDM) settings to help you manage your organization's computer settings. Based on how you set up Microsoft Defender SmartScreen, you can show users a warning page and let them continue to the site, or you can block the site entirely.
 
-See [Windows settings to protect devices using Intune](/intune/endpoint-protection-windows-10#windows-defender-smartscreen-settings) for the controls you can use in Intune.
+See [Windows settings to protect devices using Intune](/mem/intune/protect/endpoint-protection-windows-10#microsoft-defender-smartscreen-settings) for the controls you can use in Intune.
 
 > [!NOTE]
 > For a list of settings available for Enhanced phishing protection, see [Enhanced phishing protection](enhanced-phishing-protection.md#configure-enhanced-phishing-protection-for-your-organization).
diff --git a/windows/security/threat-protection/index.md b/windows/security/threat-protection/index.md
index 5dd0c7c3f0..68fce9d079 100644
--- a/windows/security/threat-protection/index.md
+++ b/windows/security/threat-protection/index.md
@@ -19,7 +19,7 @@ See the following articles to learn more about the different areas of Windows th
 - [Controlled Folder Access](/microsoft-365/security/defender-endpoint/controlled-folders)
 - [Exploit Protection](/microsoft-365/security/defender-endpoint/exploit-protection)
 - [Microsoft Defender Application Guard](../application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview.md)
-- [Microsoft Defender Device Guard](../application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md)
+- [Microsoft Defender Device Guard](../application-security/application-control/introduction-to-virtualization-based-security-and-appcontrol.md)
 - [Microsoft Defender SmartScreen](/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/)
 - [Network Protection](/microsoft-365/security/defender-endpoint/network-protection)
 - [Virtualization-Based Protection of Code Integrity](../hardware-security/enable-virtualization-based-protection-of-code-integrity.md)
diff --git a/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md b/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md
index 564b83b498..5b5fb3e06e 100644
--- a/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md
+++ b/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10.md
@@ -386,7 +386,7 @@ Examples:
     Set-ProcessMitigation -Name notepad.exe -Enable SEHOP -Disable MandatoryASLR,DEPATL
     ```
 
-- **Convert Attack surface reduction (ASR) settings to a Code Integrity policy file**: If the input file contains any settings for EMET's Attack surface reduction (ASR) mitigation, the converter will also create a Code Integrity policy file. In this case, you can complete the merging, auditing, and deployment process for the Code Integrity policy. For more information, see [Deploying Windows Defender Application Control (WDAC) policies](../application-security/application-control/windows-defender-application-control/deployment/wdac-deployment-guide.md). This completion will enable protections on Windows 10 equivalent to EMET's ASR protections.
+- **Convert Attack surface reduction (ASR) settings to a Code Integrity policy file**: If the input file contains any settings for EMET's Attack surface reduction (ASR) mitigation, the converter will also create a Code Integrity policy file. In this case, you can complete the merging, auditing, and deployment process for the Code Integrity policy. For more information, see [Deploying App Control for Business policies](../application-security/application-control/app-control-for-business/deployment/appcontrol-deployment-guide.md). This completion will enable protections on Windows 10 equivalent to EMET's ASR protections.
 
 - **Convert Certificate Trust settings to enterprise certificate pinning rules**: If you have an EMET "Certificate Trust" XML file (pinning rules file), you can also use ConvertTo-ProcessMitigationPolicy to convert the pinning rules file into an enterprise certificate pinning rules file. Then you can finish enabling that file as described in [Enterprise Certificate Pinning](/windows/access-protection/enterprise-certificate-pinning). For example:
 
diff --git a/windows/whats-new/TOC.yml b/windows/whats-new/TOC.yml
index 408873ec0b..f7564e0af6 100644
--- a/windows/whats-new/TOC.yml
+++ b/windows/whats-new/TOC.yml
@@ -13,6 +13,8 @@
       href: windows-11-prepare.md
     - name: Windows 11 enterprise feature control
       href: temporary-enterprise-feature-control.md
+    - name: What's new in Windows 11, version 24H2
+      href: whats-new-windows-11-version-24h2.md      
     - name: What's new in Windows 11, version 23H2
       href: whats-new-windows-11-version-23h2.md
     - name: What's new in Windows 11, version 22H2
@@ -24,11 +26,13 @@
       href: extended-security-updates.md
     - name: What's new in Windows 10, version 22H2
       href: whats-new-windows-10-version-22H2.md
-- name: Windows 10 Enterprise LTSC
+- name: Windows Enterprise LTSC
   expanded: false
   items:
-  - name: Windows 10 Enterprise LTSC overview
+  - name: Windows Enterprise LTSC overview
     href: ltsc/overview.md
+  - name: What's new in Windows 11 Enterprise LTSC 2024
+    href: ltsc/whats-new-windows-11-2024.md      
   - name: What's new in Windows 10 Enterprise LTSC 2021
     href: ltsc/whats-new-windows-10-2021.md
   - name: What's new in Windows 10 Enterprise LTSC 2019
diff --git a/windows/whats-new/deprecated-features-resources.md b/windows/whats-new/deprecated-features-resources.md
index 00fab61fd6..7c53798b03 100644
--- a/windows/whats-new/deprecated-features-resources.md
+++ b/windows/whats-new/deprecated-features-resources.md
@@ -1,7 +1,7 @@
 ---
 title: Resources for deprecated features in the Windows client
 description: Resources and details for deprecated features in the Windows client.
-ms.date: 08/12/2024
+ms.date: 08/14/2024
 ms.service: windows-client
 ms.subservice: itpro-fundamentals
 ms.localizationpriority: medium
@@ -38,7 +38,7 @@ Negotiate's built-in fallback to NTLM is preserved to mitigate compatibility iss
 
 ## WordPad
 
-WordPad will be removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. As a result, Windows will no longer have a built-in, default RTF reader. We recommend Microsoft Word for rich text documents like .doc and .rtf and Notepad for plain text documents like .txt. The following binaries will be removed as a result of WordPad removal:
+WordPad is removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. As a result, Windows will no longer have a built-in, default RTF reader. We recommend Microsoft Word for rich text documents like .doc and .rtf and Notepad for plain text documents like .txt. The following binaries will be removed as a result of WordPad removal:
 
 - wordpad.exe
 - wordpadfilter.dll
diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md
index e1ee7cbf06..a12c5b5eb4 100644
--- a/windows/whats-new/deprecated-features.md
+++ b/windows/whats-new/deprecated-features.md
@@ -1,7 +1,7 @@
 ---
 title: Deprecated features in the Windows client
 description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11.
-ms.date: 09/11/2024
+ms.date: 10/01/2024
 ms.service: windows-client
 ms.subservice: itpro-fundamentals
 ms.localizationpriority: medium
@@ -57,7 +57,7 @@ The features in this article are no longer being actively developed, and might b
 | TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits <!--8644149-->| Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows. </br></br> TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024|
 | Test Base <!--8790681--> | [Test Base for Microsoft 365](/microsoft-365/test-base/overview), an Azure cloud service for application testing, is deprecated. The service will be retired in the future and will be no longer available for use after retirement. | March 2024 |
 | Windows Mixed Reality <!--8412877--> | [Windows Mixed Reality](/windows/mixed-reality/enthusiast-guide/before-you-start) is deprecated and will be removed in Windows 11, version 24H2. This deprecation includes the [Mixed Reality Portal](/windows/mixed-reality/enthusiast-guide/install-windows-mixed-reality) app, [Windows Mixed Reality for SteamVR](/windows/mixed-reality/enthusiast-guide/using-steamvr-with-windows-mixed-reality), and Steam VR Beta. Existing Windows Mixed Reality devices will continue to work with Steam through November 2026, if users remain on their current released version of Windows 11, version 23H2. After November 2026, Windows Mixed Reality will no longer receive security updates, nonsecurity updates, bug fixes, technical support, or online technical content updates.</br> </br>This deprecation doesn't affect HoloLens. We remain committed to HoloLens and our enterprise customers. | December 2023 |
-| Microsoft Defender Application Guard for Edge <!--8591267-->| [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). Please download the [Microsoft Edge For Business Security Whitepaper](https://edgestatic.azureedge.net/shared/cms/pdfs/Microsoft_Edge_Security_Whitepaper_v2.pdf) to learn more about Edge for Business security capabilities. </br></br> **[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated Windows Store app will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). <!--8932292-->| December 2023 |
+| Microsoft Defender Application Guard for Edge <!--8591267-->| [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). To learn more about Edge for Business security capabilities, see [Microsoft Edge security for your business](/deployedge/ms-edge-security-for-business). </br></br> **[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated Windows Store app will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). <!--8932292-->| December 2023 |
 | Legacy console mode <!-- 8577271 -->| The [legacy console mode](/windows/console/legacymode) is deprecated and no longer being updated. In future Windows releases, it will be available as an optional [Feature on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). This feature won't be installed by default. | December 2023 |
 | Windows speech recognition <!--8396142-->| [Windows speech recognition](https://support.microsoft.com/windows/83ff75bd-63eb-0b6c-18d4-6fae94050571) is  deprecated and is no longer being developed. This feature is being replaced with [voice access](https://support.microsoft.com/topic/4dcd23ee-f1b9-4fd1-bacc-862ab611f55d). Voice access is available for Windows 11, version 22H2, or later devices. Currently, voice access supports five English locales: English - US, English - UK, English - India, English - New Zealand, English - Canada, and English - Australia. For more information, see [Setup voice access](https://support.microsoft.com/topic/set-up-voice-access-9fc44e29-12bf-4d86-bc4e-e9bb69df9a0e). | December 2023 |
 | Microsoft Defender Application Guard for Office <!--8396036-->| [Microsoft Defender Application Guard for Office](/microsoft-365/security/office-365-security/app-guard-for-office-install), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated and will no longer be updated. We recommend transitioning to Microsoft Defender for Endpoint [attack surface reduction rules](/microsoft-365/security/defender-endpoint/overview-attack-surface-reduction) along with [Protected View](/microsoft-365/security/office-365-security/recommended-settings-for-eop-and-office365#global-settings-for-safe-attachments) and [Windows Defender Application Control](/windows/security/application-security/application-control/windows-defender-application-control/wdac).  | November 2023 |
@@ -68,7 +68,7 @@ The features in this article are no longer being actively developed, and might b
 | Remote Mailslots <!--8454244-->| Remote Mailslots are deprecated. The Remote Mailslot protocol is a dated, simple, unreliable, insecure IPC method first introduced in MS DOS. This protocol was first disabled by default in [Windows 11 Insider Preview Build ](https://blogs.windows.com/windows-insider/2023/03/08/announcing-windows-11-insider-preview-build-25314/). For more information on Remote Mailslots, see [About Mailslots](/windows/win32/ipc/about-mailslots) and [[MS-MAIL]: Remote Mailslot Protocol](/openspecs/windows_protocols/ms-mail/8ea19aa4-6e5a-4aed-b628-0b5cd75a1ab9).| November 2023 |
 | Timeline for Microsoft Entra accounts <!--8396095--> | Cross-device syncing of Microsoft Entra user activity history will stop starting in January 2024. Microsoft will stop storing this data in the cloud, aligning with [the previous change for Microsoft accounts (MSA)](https://blogs.windows.com/windows-insider/2021/04/14/announcing-windows-10-insider-preview-build-21359) in 2021. The timeline user experience was retired in Windows 11, although it remains in Windows 10. The timeline user experience and all your local activity history still remains on Windows 10 devices. Users can access web history using their browser and access recent files through OneDrive and Office. | October 2023 |
 | VBScript <!--7954828--> | VBScript is deprecated. In future releases of Windows, VBScript will be available as a feature on demand before its removal from the operating system. For more information, see [Resources for deprecated features](deprecated-features-resources.md#vbscript). | October 2023 |
-| WordPad | WordPad is no longer being updated and will be removed in a future release of Windows. We recommend Microsoft Word for rich text documents like .doc and .rtf and Windows Notepad for plain text documents like .txt. </br></br> **[Update - March 2024]**: WordPad will be removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. If you're a developer and need information about the affected binaries, see [Resources for deprecated features](deprecated-features-resources.md#wordpad). | September 1, 2023 |
+| WordPad <!--8254696-->| WordPad is no longer being updated and will be removed in a future release of Windows. We recommend Microsoft Word for rich text documents like .doc and .rtf and Windows Notepad for plain text documents like .txt. </br></br> **[Update - March 2024]**: WordPad will be removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. If you're a developer and need information about the affected binaries, see [Resources for deprecated features](deprecated-features-resources.md#wordpad). | September 1, 2023 |
 | AllJoyn |  Microsoft's implementation of AllJoyn, which included the [Windows.Devices.AllJoyn API namespace](/uwp/api/windows.devices.alljoyn), a [Win32 API](/windows/win32/api/_alljoyn/), a [management configuration service provider (CSP)](/windows/client-management/mdm/alljoynmanagement-csp), and an [Alljoyn Router Service](/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server#alljoyn-router-service) is deprecated. [AllJoyn](https://openconnectivity.org/technology/reference-implementation/alljoyn/), sponsored by AllSeen Alliance, was an open source discovery and communication protocol for Internet of Things scenarios such as turning on/off lights or reading temperatures.AllSeen Alliance promoted the AllJoyn project from 2013 until 2016 when it merged with the Open Connectivity Foundation (OCF), the sponsors of [Iotivity.org](https://iotivity.org/), another protocol for Internet of Things scenarios. Customers should refer to the [Iotivity.org](https://iotivity.org/) website for alternatives such as [Iotivity Lite](https://github.com/iotivity/iotivity-lite) or [Iotivity](https://github.com/iotivity/iotivity).  | August 17, 2023 |
 | TLS 1.0 and 1.1 | Over the past several years, internet standards and regulatory bodies have [deprecated or disallowed](https://www.ietf.org/rfc/rfc8996.html) TLS versions 1.0 and 1.1 due to various security issues. Starting in Windows 11 Insider Preview builds for September 2023 and continuing in future Windows OS releases, TLS 1.0 and 1.1 will be disabled by default. This change increases the security posture of Windows customers and encourages modern protocol adoption. For organizations that need to use these versions, there's an option to re-enable TLS 1.0 or TLS 1.1. For more information, see [Resources for deprecated features](deprecated-features-resources.md). | August 1, 2023|
 | Cortana in Windows <!--7987543--> | Cortana in Windows as a standalone app is deprecated. This change only impacts Cortana in Windows, and your productivity assistant, Cortana, will continue to be available in Outlook mobile, Teams mobile, Microsoft Teams display, and Microsoft Teams rooms. | June 2023 |
diff --git a/windows/whats-new/index.yml b/windows/whats-new/index.yml
index f19e236cd4..9d6a27a7f2 100644
--- a/windows/whats-new/index.yml
+++ b/windows/whats-new/index.yml
@@ -41,6 +41,8 @@ landingContent:
     linkLists:
       - linkListType: whats-new
         links:
+          - text: What's new in Windows 11, version 24H2
+            url: whats-new-windows-11-version-24h2.md        
           - text: What's new in Windows 11, version 23H2
             url: whats-new-windows-11-version-23h2.md
           - text: What's new in Windows 11, version 22H2
@@ -55,12 +57,14 @@ landingContent:
           - text: What's new in Windows 10, version 22H2
             url: whats-new-windows-10-version-22h2.md
 
-  - title: Windows 10 Enterprise LTSC
+  - title: Windows Enterprise LTSC
     linkLists:
       - linkListType: whats-new
         links:
-          - text: Windows 10 Enterprise LTSC overview
+          - text: Windows Enterprise LTSC overview
             url: ltsc/overview.md
+          - text: What's new in Windows 11 Enterprise LTSC 2024
+            url: ltsc/whats-new-windows-11-2024.md                
           - text: What's new in Windows 10 Enterprise LTSC 2021
             url: ltsc/whats-new-windows-10-2021.md
           - text: What's new in Windows 10 Enterprise LTSC 2019
@@ -69,6 +73,7 @@ landingContent:
             url: ltsc/whats-new-windows-10-2016.md
           - text: What's new in Windows 10 Enterprise LTSC 2015
             url: ltsc/whats-new-windows-10-2015.md
+      
 
   - title: Deprecated features
     linkLists:
diff --git a/windows/whats-new/ltsc/overview.md b/windows/whats-new/ltsc/overview.md
index 5fb5127bcf..1ac5c31aeb 100644
--- a/windows/whats-new/ltsc/overview.md
+++ b/windows/whats-new/ltsc/overview.md
@@ -1,6 +1,6 @@
 ---
-title: Windows 10 Enterprise LTSC overview
-description: An overview of the Windows 10 long-term servicing channel (LTSC).
+title: Windows Enterprise LTSC overview
+description: An overview of the Windows long-term servicing channel (LTSC).
 ms.service: windows-client
 author: mestew
 ms.author: mstewart
@@ -8,15 +8,17 @@ manager: aaroncz
 ms.localizationpriority: low
 ms.topic: overview
 ms.subservice: itpro-fundamentals
-ms.date: 07/09/2024
+ms.date: 10/01/2024
 appliesto:
   - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10 Enterprise LTSC</a>
+  - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 Enterprise LTSC</a>
 ---
 
-# Windows 10 Enterprise LTSC
+# Windows Enterprise LTSC
 
-This article provides general information about the Windows 10 Enterprise long-term servicing channel (LTSC). For more information about the features in each available version of the Windows 10 LTSC, see the following articles:
+This article provides general information about the Windows Enterprise long-term servicing channel (LTSC). For more information about the features in each available version of the Windows LTSC, see the following articles:
 
+- [What's New in Windows 11 Enterprise LTSC 2024](whats-new-windows-11-2024.md)
 - [What's New in Windows 10 Enterprise LTSC 2021](whats-new-windows-10-2021.md)
 - [What's New in Windows 10 Enterprise LTSC 2019](whats-new-windows-10-2019.md)
 - [What's New in Windows 10 Enterprise LTSC 2016](whats-new-windows-10-2016.md)
@@ -24,10 +26,11 @@ This article provides general information about the Windows 10 Enterprise long-t
 
 ## The long-term servicing channel (LTSC)
 
-The following table summarizes equivalent feature update versions of Windows 10 LTSC and general availability channel (GA channel) releases:
+The following table summarizes equivalent feature update versions of Windows LTSC and general availability channel (GA channel) releases:
 
 | LTSC release | Equivalent GA channel release | Availability date |
 | --- | --- | --- |
+| Windows 11 Enterprise LTSC 2024  | Windows 11, Version 24H2 | 10/01/2024 |
 | Windows 10 Enterprise LTSC 2021  | Windows 10, Version 21H2 | 11/16/2021 |
 | Windows 10 Enterprise LTSC 2019  | Windows 10, Version 1809 | 11/13/2018 |
 | Windows 10 Enterprise LTSC 2016  | Windows 10, Version 1607 | 8/2/2016 |
@@ -36,10 +39,10 @@ The following table summarizes equivalent feature update versions of Windows 10
 > [!NOTE]
 > The long-term servicing channel was previously called the long-term servicing branch (LTSB). All references to LTSB are changed in this article to LTSC for consistency, even though the name of previous versions might still be displayed as LTSB.
 
-With the LTSC servicing model, you can delay receiving *feature* updates and instead only receive monthly *quality* updates on devices. Features from Windows 10 that could be updated with new functionality, including Microsoft Edge and in-box Windows apps, are also not included. Feature updates are offered in new LTSC releases every several years instead of every few months. You can choose to install them as in-place upgrades, or even skip releases, what's best for your business requirements. Microsoft is committed to providing bug fixes and security patches for each LTSC release during the extended LTSC servicing lifecycle. Always check your individual LTSC release to verify its servicing lifecycle. For more information, see [release information](/windows/release-health/release-information), or search the [product lifecycle information](/lifecycle/products/) page.
+With the LTSC servicing model, you can delay receiving *feature* updates and instead only receive monthly *quality* updates on devices. Features from Windows 10 and 11 that could be updated with new functionality, including Microsoft Edge and in-box Windows apps, are also not included. Feature updates are offered in new LTSC releases every several years instead of every few months. You can choose to install them as in-place upgrades, or even skip releases, what's best for your business requirements. Microsoft is committed to providing bug fixes and security patches for each LTSC release during the extended LTSC servicing lifecycle. Always check your individual LTSC release to verify its servicing lifecycle. For more information, see [release information](/windows/release-health/release-information), or search the [product lifecycle information](/lifecycle/products/) page.
 
 > [!IMPORTANT]
-> The long-term servicing channel isn't intended for deployment on most or all the PCs in an organization. The LTSC edition of Windows 10 provides a deployment option for special-purpose devices and environments. These devices typically do a single important task and don't need feature updates as frequently as other devices in the organization. These devices are also typically not heavily dependent on support from external apps and tools. Since the feature set for LTSC doesn't change for the lifetime of the release, over time there might be some external tools that don't continue to provide legacy support. For more information, see [LTSC: What is it, and when it should be used](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/LTSC-What-is-it-and-when-should-it-be-used/ba-p/293181).
+> The long-term servicing channel isn't intended for deployment on most or all the PCs in an organization. The LTSC edition of Windows provides a deployment option for special-purpose devices and environments. These devices typically do a single important task and don't need feature updates as frequently as other devices in the organization. These devices are also typically not heavily dependent on support from external apps and tools. Since the feature set for LTSC doesn't change for the lifetime of the release, over time there might be some external tools that don't continue to provide legacy support. For more information, see [LTSC: What is it, and when it should be used](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/LTSC-What-is-it-and-when-should-it-be-used/ba-p/293181).
 
 For more information about Windows 10 servicing, see [Overview of Windows as a service](/windows/deployment/update/waas-overview).
 
@@ -47,4 +50,4 @@ For more information about Windows 10 servicing, see [Overview of Windows as a s
 
 - [What's new in Windows](../index.yml): See what's new in other versions of Windows.
 
-- [Windows 10 release information](/windows/release-health/release-information): Windows 10 current versions by servicing option.
+- [Windows release information](/windows/release-health/release-information): Current versions of Windows by servicing option.
diff --git a/windows/whats-new/ltsc/whats-new-windows-11-2024.md b/windows/whats-new/ltsc/whats-new-windows-11-2024.md
new file mode 100644
index 0000000000..3fbb4a3529
--- /dev/null
+++ b/windows/whats-new/ltsc/whats-new-windows-11-2024.md
@@ -0,0 +1,174 @@
+---
+title: What's new in Windows 11 Enterprise long-term servicing channel (LTSC) 2024
+manager: aaroncz
+ms.author: mstewart
+description: New and updated IT Pro content about new features in Windows 11 Enterprise long-term servicing channel (LTSC) 2024.
+ms.service: windows-client
+author: mestew
+ms.localizationpriority: high
+ms.topic: reference
+ms.subservice: itpro-fundamentals
+ms.date: 10/01/2024
+appliesto:
+  - ✅ <a href="https://learn.microsoft.com/windows/release-health/" target="_blank">Windows 11 Enterprise LTSC 2024</a>
+---
+
+# What's new in Windows 11 Enterprise LTSC 2024
+
+This article lists some of the new and updated features and content that is of interest to IT Pros for Windows 11 Enterprise long-term servicing channel (LTSC) 2024, compared to Windows 10 Enterprise LTSC 2021. For a brief description of the LTSC servicing channel and associated support, see [Windows Enterprise LTSC](overview.md). <!--8891336-->
+
+
+Windows 11 Enterprise LTSC 2024 builds on Windows 10 Enterprise LTSC 2021, adding premium features such as advanced protection against modern security threats and comprehensive device management, app management, and control capabilities. 
+
+The Windows 11 Enterprise LTSC 2024 release includes the cumulative enhancements provided in Windows 11 versions 21H2, 22H2, 23H2, and 24H2. Details about these enhancements are provided below.
+
+## Lifecycle
+
+Windows 11 Enterprise LTSC 2024 was first available on October 1, 2024. Features in Windows 11 Enterprise LTSC 2024 are similar to Windows 11, version 24H2.The LTSC release is [intended for special use devices](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/LTSC-What-is-it-and-when-should-it-be-used/ba-p/293181). Support for LTSC by apps and tools, such as in-box apps and Microsoft Store, that are designed for the general availability channel release of Windows might be limited.
+
+> [!IMPORTANT]
+> Windows 11 Enterprise LTSC 2024 has a 5 year lifecycle. ([IoT Enterprise LTSC](/windows/iot/iot-enterprise/whats-new/windows-iot-enterprise-ltsc) continues to have a [10 year lifecycle](/lifecycle/products/windows-11-iot-enterprise-ltsc-2024)). Windows 11 Enterprise LTSC 2024 follows the [Fixed Lifecycle Policy](/lifecycle/policies/fixed).
+
+<!--For more information about the lifecycle for this release, see [The next Windows 10 long-term servicing channel (LTSC) release](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-next-windows-10-long-term-servicing-channel-ltsc-release/ba-p/2147232). -->
+
+
+
+## Accessibility
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+| **Windows accessibility** </br> [22H2][22H2] | Improvements for people with disabilities: system-wide live captions, Focus sessions, voice access, and more natural voices for Narrator.</br> For more information, see:</br>&nbsp;&nbsp;• [New accessibility features coming to Windows 11](https://blogs.windows.com/windowsexperience/2022/05/10/new-accessibility-features-coming-to-windows-11/)</br>&nbsp;&nbsp;• [How inclusion drives innovation in Windows 11](https://blogs.windows.com/windowsexperience/?p=177554)</br>&nbsp;&nbsp;• [Accessibility information for IT professionals](/windows/configuration/windows-10-accessibility-for-itpros). |
+| **Braille displays**  </br> [23H2][23H2] <!--7579823-->        | Braille displays work seamlessly and reliably across multiple screen readers, improving the end user experience. We also added support for new braille displays and new braille input and output languages in Narrator. For more information, see [Accessibility information for IT professionals](/windows/configuration/windows-accessibility-for-ITPros). |
+| **Narrator improvements**  </br> [23H2][23H2] <!--kb5019509--> | Scripting functionality was added to Narrator. Narrator includes more natural voices. For more information, see [Complete guide to Narrator](https://support.microsoft.com/topic/e4397a0d-ef4f-b386-d8ae-c172f109bdb1).<!--8138352, 8138357--> |
+| **Bluetooth &#174; LE audio support for assistive devices** </br> [24H2][24H2] | Windows has taken a significant step forward in accessibility by supporting the use of assistive hearing devices equipped with the latest Bluetooth &#174; Low Energy Audio technology. For more information, see [Using hearing devices with your Windows 11 PC](https://support.microsoft.com/topic/fcb566e7-13c3-491a-ad5b-8219b098d647). |
+|  **Remote Desktop Connection improvements** </br> [24H2][24H2] | The Remote Desktop Connection setup window (mstsc.exe) follows the text scaling settings under **Settings** > **Accessibility** > **Text size**. Remote Desktop Connection supports zoom options of 350, 400, 450, and 500%. |
+
+
+## Applications
+
+
+| Feature </br> [Release]| Description |
+| --- | --- |
+| **Internet Explorer** | Internet Explorer (IE) is no longer available in Windows 11 Enterprise LTSC 2024. However, you can use IE Mode if a website needs Internet Explorer. For more information, see [Internet Explorer (IE) Mode](/deployedge/edge-ie-mode) |
+| **Microsoft Edge** </br> [21H2][21H2] | The Microsoft Edge browser is the default browser. For information about configuring Microsoft Edge on Windows, see [Configure Microsoft Edge policy settings on Windows devices](/deployedge/configure-microsoft-edge). |
+| **File Explorer** </br> [23H2][23H2]/[24H2][24H2] <!--kb5019509--> | **Tabs**: </br> File Explorer includes tabs to help you organize your File Explorer sessions. </br> **Context menu**: </br> Support for creating 7-zip and TAR archives.  </br> **Compress to** > **Additional options** allows you to compress individual files with gzip, BZip2, xz, or Zstandard </br>Labels were added to the context menu icons for actions like copy, paste, delete, and rename.|
+| **Registry Editor** </br> Search </br> [24H2][24H2] | The Registry Editor supports limiting a search to the currently selected key and its descendants |
+| **Remote Desktop** </br> Connection improvements </br> [24H2][24H2] | The Remote Desktop Connection setup window (mstsc.exe) follows the text scaling settings under **Settings** > **Accessibility** > **Text size**, provides zoom options of 350, 400, 450, and 500%, and improves the connection bar design |
+| **Sudo for Windows** </br> [24H2][24H2] | Sudo for Windows is a new way for users to run elevated commands (as an administrator) directly from an unelevated console session. For more information, see [Sudo for Windows](/windows/sudo/). |
+
+## Developer
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+| **Arm64EC (Emulation Compatible)** | Code built as Arm64EC is interoperable with x64 code running under emulation within the same process. The Arm64EC code in the process runs with native performance, while any x64 code runs using emulation that comes built-in with Windows 11. For more information, see [Arm64EC - Build and port apps for native performance on Arm](/windows/arm/arm64ec)|
+| **Power Grid Forecast** </br> [24H2][24H2] | The [Power Grid Forecast API](/uwp/api/windows.devices.power.powergridforecast) was introduced. App developers can minimize environmental impact by shifting background workloads to times when renewable energy is available to the local grid. Forecast data isn't available globally and quality of data varies by region. |
+| **Energy saver notification callback** </br> [24H2][24H2] | Added an energy saver notification callback setting GUID to represent the new energy saver experience. Apps can subscribe to the energy saver status and can implement different behaviors to optimize energy or performance depending on the current energy saver status. For more information, see [Power Setting GUIDs](/windows/win32/power/power-setting-guids) |
+| **Effective Power Mode** </br> [24H2][24H2] | Extended the [Effective Power Mode API](/windows/win32/api/powersetting/ne-powersetting-effective_power_mode) to interpret the new energy saver levels when determining the returned effective power mode. |
+
+## Management
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+| **Microsoft Intune** </br> [21H2][21H2] | Microsoft Intune is a mobile application management (MAM) and mobile device management (MDM) provider. It helps manage devices, and manage apps on devices in your organization. You configure policies, and then deploy these policies to users and groups. You can create and deploy policies that install apps, configure device features, enforce PIN requirements, block compromised devices, and more. </br></br>  If you use Group Policy to manage your Windows 10 devices, then you can also use Group Policy to manage Windows 11 devices. In Intune, there are [administrative templates](/mem/intune/configuration/administrative-templates-windows) and the [settings catalog](/mem/intune/configuration/settings-catalog) that include many of the same policies. [Group Policy analytics](/mem/intune/configuration/group-policy-analytics) analyze your on-premises group policy objects. |
+| **Control Windows Update notifications** </br> [22H2][22H2] | You can now block user notifications for Windows Updates during active hours. This setting is especially useful for organizations that want to prevent Windows Update notifications from occurring during business hours. For more information, see [Control restart notifications](/windows/deployment/update/waas-restart#control-restart-notifications).|
+| **Organization name in update notifications** </br> [22H2][22H2] |The organization name now appears in the Windows Update notifications when Windows clients are associated with a Microsoft Entra ID tenant. For more information, see [Display organization name in Windows Update notifications](/windows/deployment/update/waas-wu-settings#bkmk_display-name). |
+| **Start menu layout** </br> [22H2][22H2] | New Configuration Service Providers (CSPs) for customizing the start menu layout. These CSPs allow you to hide the app list and disable context menus. For more information, see [Supported configuration service provider (CSP) policies for Windows 11 Start menu](/windows/configuration/supported-csp-start-menu-layout-windows#existing-windows-csp-policies-that-windows-11-supports). |
+| **Restricted User Experience** </br> [23H2][23H2] <!--6444738--> | Restricted User Experience (formerly Multi-App Kiosk Mode) supports the creation of a controlled user experience while maintaining the familiar look and feel of the Windows 11 desktop. Ideal for shared devices that require access to more than one app, admins can configure a curated experience to limit distractions and potential tampering points while focusing the experience around the device's dedicated purpose. |
+| **Declared configuration protocol** </br> [23H2][23H2] <!--7771694 --> | Declared configuration protocol is a new protocol for device configuration management based on a desired state model and uses OMA-DM SyncML protocol. It allows the server to provide the device with a collection of settings for a specific scenario, and the device to handle the configuration request and maintain its state. For more information, see [What is the declared configuration protocol](/windows/client-management/declared-configuration).|
+| **Control File Explorer Home Recommended section** </br> [23H2][23H2] <!--8092554, DisableGraphRecentItems, WIP.23475, WIP.23403-->|  Configure the Recommended section added to File Explorer Home for users signed into Windows with a Microsoft Entra ID account. For more information, see [DisableGraphRecentItems](/windows/client-management/mdm/policy-csp-fileexplorer#disablegraphrecentitems).</br> To configure using Local Group Policy Editor, see `Computer Configuration\Administrative Templates\Windows Components\File Explorer\Turn off files from Office.com in Quick Access View`.|
+| **Taskbar Button Policies**  </br> [23H2][23H2] <!--07525381, 8092554, WIP.25252--> | Policies to customize taskbar buttons were added to provide you with more control over the taskbar search experience across your organization. For more information, see [Supported taskbar CSPs](/windows/configuration/supported-csp-taskbar-windows).|
+| **Control Start Menu Recommended section**  </br> [23H2][23H2] <!--8092554, WIP.23475-->| Configure the Recommended section of the Start Menu, which displays personalized website recommendations. For more information, see [HideRecoPersonalizedSites](/windows/client-management/mdm/policy-csp-start). </br>To configure using Local Group Policy Editor, see `Computer Configuration\Administrative Templates\Start Menu and Taskbar\Remove Personalized Website Recommendations from the Recommended section in the Start Menu`.|
+| **Sudo for Windows** </br> [24H2][24H2] | Sudo for Windows is a new way for users to run elevated commands (as an administrator) directly from an unelevated console session. For more information, see [Sudo for Windows](/windows/sudo/). |
+
+## Networking
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+| **Wi-Fi 7 consumer access points** </br> [24H2][24H2] | Support for Wi-Fi 7 consumer access points offers unprecedented speed, reliability, and efficiency for wireless devices.  For more information, see the Wi-Fi 7 announcements from [Wi-Fi Alliance](https://www.wi-fi.org/discover-wi-fi/wi-fi-certified-7) and the [Windows Insider](https://blogs.windows.com/windows-insider/2024/02/22/announcing-windows-11-insider-preview-build-26063-canary-channel/). |
+| **Windows location improvements** </br> [24H2][24H2] | New controls were added to help manage which apps have access to the list of Wi-Fi networks around you, which could be used to determine your location. You can view and modify which apps can access the list of Wi-Fi networks from **Settings** > **Privacy & security** > **Location**. A new prompt appears the first time an app attempts to access your location or Wi-Fi information. Developers can use the [Changes to API behavior for Wi-Fi access and location](/windows/win32/nativewifi/wi-fi-access-location-changes) article to learn about API surfaces impacted by this change. |
+
+## Security
+
+The security and privacy features in Windows 11 are similar to Windows 10. Security for your devices starts with the hardware, and includes OS security, application security, and user & identity security. There are features available in the Windows OS to help in these areas. For a more comprehensive view, including Zero Trust, see [Windows security](/windows/security/).
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+| **Windows Security app** </br> [21H2][21H2] | Windows Security app is an easy-to-use interface, and combines commonly used security features. For example, your get access to virus & threat protection, firewall & network protection, account protection, and more. For more information, see [the Windows Security app](/windows/security/threat-protection/windows-defender-security-center/windows-defender-security-center). |
+| **Security baselines** </br> [21H2][21H2] | Security baselines include security settings that are already configured, and ready to be deployed to your devices. If you don't know where to start, or it's too time consuming to go through all the settings, then you should look at Security Baselines. For more information, see [Windows security baselines](/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines). |
+| **Microsoft Defender Antivirus** </br> [21H2][21H2] | Microsoft Defender Antivirus helps protect devices using next-generation security. When used with Microsoft Defender for Endpoint, your organization gets strong endpoint protection, and advanced endpoint protection & response. If you use Intune to manage devices, then you can create policies based on threat levels in Microsoft Defender for Endpoint. For more information, see:</br>&nbsp;&nbsp;• [Microsoft Defender Antivirus](/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows)</br>&nbsp;&nbsp;• [Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint)</br>&nbsp;&nbsp;• [Enforce compliance for Microsoft Defender for Endpoint](/mem/intune/protect/advanced-threat-protection) |
+| **Application Security** </br> [21H2][21H2] | The Application Security features help prevent unwanted or malicious code from running, isolate untrusted websites & untrusted Office files, protect against phishing or malware websites, and more. For more information, see  [Windows application security](/windows/security/apps). |
+| **Microsoft Pluton** </br> [22H2][22H2] | Pluton, designed by Microsoft and built by silicon partners,  is a secure crypto-processor built into the CPU. Pluton provides security at the core to ensure code integrity and the latest protection with updates delivered by Microsoft through Windows Update. Pluton protects credentials, identities, personal data, and encryption keys. Information is harder to be removed even if an attacker installed malware or has complete physical possession. For more information, see [Microsoft Pluton security processor](/windows/security/information-protection/pluton/microsoft-pluton-security-processor). |
+| **Enhanced Phishing Protection** </br> [22H2][22H2] | Enhanced Phishing Protection in Microsoft Defender SmartScreen helps protect Microsoft passwords against phishing and unsafe usage. Enhanced Phishing Protection works alongside Windows security protections to help protect sign-in passwords. For more information, see:</br>&nbsp;&nbsp;• [Enhanced Phishing Protection in Microsoft Defender SmartScreen](/windows/security/threat-protection/microsoft-defender-smartscreen/phishing-protection-microsoft-defender-smartscreen)</br>&nbsp;&nbsp;• [Protect passwords with enhanced phishing protection](https://aka.ms/EnhancedPhishingProtectionBlog) in the Windows IT Pro blog. |
+| **Smart App Control** </br> [22H2][22H2] | Smart App Control adds significant protection from malware, including new and emerging threats, by blocking apps that are malicious or untrusted. Smart App Control helps block unwanted apps that affect performance, display unexpected ads, offer extra software you didn't want, and other things you don't expect. For more information, see [Smart App Control](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control#wdac-and-smart-app-control). |
+| **Credential Guard** </br> [22H2][22H2] | Credential Guard, enabled by default, uses Virtualization-based security (VBS) to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks like pass the hash and pass the ticket. For more information, see [Configure Credential Guard](/windows/security/identity-protection/credential-guard/configure).|
+| **Malicious and vulnerable driver blocking** </br> [22H2][22H2] | The vulnerable driver blocklist is automatically enabled on devices when Smart App Control is enabled and for clean installs of Windows. For more information, see [recommended block rules](/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules#microsoft-vulnerable-driver-blocklist).|
+| **Security hardening and threat protection** </br> [22H2][22H2] | Enhanced support with Local Security Authority (LSA) to prevent code injection that could compromise credentials. For more information, see [Configuring Additional LSA Protection](/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection?toc=/windows/security/toc.json&bc=/windows/security/breadcrumb/toc.json). |
+| **Personal Data Encryption (PDE)** </br> [22H2][22H2] | [Personal Data Encryption (PDE)](/windows/security/operating-system-security/data-protection/personal-data-encryption/) is a security feature that provides file-based data encryption capabilities to Windows. PDE utilizes Windows Hello for Business to link data encryption keys with user credentials. When a user signs in to a device using Windows Hello for Business, decryption keys are released, and encrypted data is accessible to the user. |
+| **Passkeys in Windows** </br> [23H2][23H2] <!--8138341--> | Windows provides a native experience for passkey management. You can use the Settings app to view and manage passkeys saved for apps or websites. For more information, see [Support for passkeys in Windows](/windows/security/identity-protection/passkeys). |
+| **Windows passwordless experience** </br> [23H2][23H2] <!--8138336--> | Windows passwordless experience is a security policy that promotes a user experience without passwords on [Microsoft Entra](https://www.microsoft.com/security/business/microsoft-entra?ef_id=_k_910ee369e9a812f6048b86296a6a402c_k_&OCID=AIDcmmdamuj0pc_SEM__k_910ee369e9a812f6048b86296a6a402c_k_&msclkid=910ee369e9a812f6048b86296a6a402c) joined devices. </br>When the policy is enabled, certain Windows authentication scenarios don't offer users the option to use a password, helping organizations and preparing users to gradually move away from passwords. For more information, see [Windows passwordless experience](/windows/security/identity-protection/passwordless-experience/). |
+| **Web sign-in for Windows** </br> [23H2][23H2] <!--8344016--> | You can enable a web-based sign-in experience on [Microsoft Entra](https://www.microsoft.com/security/business/microsoft-entra?ef_id=_k_910ee369e9a812f6048b86296a6a402c_k_&OCID=AIDcmmdamuj0pc_SEM__k_910ee369e9a812f6048b86296a6a402c_k_&msclkid=910ee369e9a812f6048b86296a6a402c) joined devices, unlocking new sign-in options, and capabilities. For more information, see [Web sign-in for Windows](/windows/security/identity-protection/web-sign-in). |
+| **Federated sign-in** </br> [23H2][23H2] <!--7593916, 7593946--> | Federated sign-in is a great way to simplify the sign-in process for your users: instead of having to remember a username and password defined in [Microsoft Entra](https://www.microsoft.com/security/business/microsoft-entra?ef_id=_k_910ee369e9a812f6048b86296a6a402c_k_&OCID=AIDcmmdamuj0pc_SEM__k_910ee369e9a812f6048b86296a6a402c_k_&msclkid=910ee369e9a812f6048b86296a6a402c) ID, they can sign-in using their existing credentials from the federated identity provider. For more information, see [Configure federated sign-in for Windows devices](/education/windows/federated-sign-in). |
+| **Windows Hello for Business authentication improvement** </br> [23H2][23H2] <!--7771685--> | Peripheral face and fingerprint sensors can be used for Windows Hello for Business authentication on devices where Enhanced Sign-in Security (Secure Biometrics) enabled at the factory. For more information, see [Common questions about Windows Hello for Business](/windows/security/identity-protection/hello-for-business/hello-faq). |
+| **App Control for Business** </br> [24H2][24H2]<!--8223790--> | Customers can now use App Control for Business (formerly called Windows Defender Application Control) and its next-generation capabilities to protect their digital property from malicious code. With App Control for Business, IT teams can configure what runs in a business environment through Microsoft Intune or other MDMs in the admin console, including setting up Intune as a managed installer. For more information, see [Application Control for Windows](/windows/security/application-security/application-control/app-control-for-business/appcontrol).|
+| **Local Security Authority (LSA) protection enablement** </br> [24H2][24H2]| An audit occurs for incompatibilities with [LSA protection](/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection) for a period of time, starting with this upgrade. If incompatibilities aren't detected, LSA protection is automatically enabled. You can check and change the enablement state of LSA protection in the Windows Security application under the **Device Security** > **Core Isolation** page. In the event log, [LSA protection logs](/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection#identify-plug-ins-and-drivers-that-lsassexe-fails-to-load) whether programs are blocked from loading into LSA. |
+| **Rust in the Windows kernel** </br> [24H2][24H2] | There's a new implementation of [GDI region](/windows/win32/gdi/regions) in `win32kbase_rs.sys`. Since Rust offers advantages in reliability and security over traditional programs written in C/C++, you'll continue to see more use of it in the kernel. |
+| **SHA-3 support** </br> [24H2][24H2] | Support for the SHA-3 family of hash functions and SHA-3 derived functions (SHAKE, cSHAKE, KMAC) was added. The SHA-3 family of algorithms is the latest standardized hash functions by the National Institute of Standards and Technology (NIST). Support for these functions is enabled through the Windows [CNG](/windows/win32/seccng/cng-portal) library. | 
+| **Windows Local Admin Password Solution (LAPS)** </br> [24H2][24H2] | Windows Local Administrator Password Solution (Windows LAPS) is a Windows feature that automatically manages and backs up the password of a local administrator account on your Microsoft Entra joined or Windows Server Active Directory-joined devices. Windows LAPS is the successor for the now deprecated legacy Microsoft LAPS product. For more information, see [What is Windows LAPS?](/windows-server/identity/laps/laps-overview)|
+| **Windows&nbsp;LAPS** </br> Automatic account management </br> [24H2][24H2] | [Windows Local Administrator Password Solution (LAPS)](/windows-server/identity/laps/laps-overview) has a new automatic account management feature. Admins can configure Windows LAPS to:</br>&nbsp;&nbsp;• Automatically create the managed local account</br>&nbsp;&nbsp;• Configure name of account</br>&nbsp;&nbsp;• Enable or disable the account</br>&nbsp;&nbsp;• Randomize the name of the account |
+| **Windows&nbsp;LAPS** </br> Policy improvements </br> [24H2][24H2]| &nbsp;&nbsp;• Added passphrase settings for the [PasswordComplexity](/windows/client-management/mdm/laps-csp#policiespasswordcomplexity) policy </br> &nbsp;&nbsp;• Use [PassphraseLength](/windows/client-management/mdm/laps-csp#policiespassphraselength) to control the number of words in a new passphrase </br> &nbsp;&nbsp;• Added an improved readability setting for the [PasswordComplexity](/windows/client-management/mdm/laps-csp#policiespasswordcomplexity) policy, which generates passwords without using characters that are easily confused with another character. For example, the number <kbd>0</kbd> and the letter <kbd>O</kbd> aren't used in the password since the characters can be confused. </br>&nbsp;&nbsp;• Added the `Reset the password, logoff the managed account, and terminate any remaining processes` setting to the [PostAuthenticationActions](/windows/client-management/mdm/laps-csp#policiespostauthenticationactions) policy. The event logging messages that are emitted during post-authentication-action execution were also expanded, to give insights into exactly what was done during the operation. |
+| **Windows&nbsp;LAPS** </br> Image rollback detection </br> [24H2][24H2] | Image rollback detection was introduced for LAPS. LAPS can detect when a device was rolled back to a previous image. When a device is rolled back, the password in Active Directory might not match the password on the device that was rolled back. This new feature adds an Active Directory attribute, `msLAPS-CurrentPasswordVersion`, to the [Windows LAPS schema](/windows-server/identity/laps/laps-technical-reference#mslaps-currentpasswordversion). This attribute contains a random GUID that Windows LAPS writes every time a new password is persisted in Active Directory, followed by saving a local copy. During every processing cycle, the GUID stored in `msLAPS-CurrentPasswordVersion` is queried and compared to the locally persisted copy. If the GUIDs are different, the password is immediately rotated. To enable this feature, you need to run the latest version of the [Update-LapsADSchema PowerShell cmdlet](/powershell/module/laps/update-lapsadschema). |
+| **Windows protected print mode** </br> [24H2][24H2] | Windows protected print mode (WPP) enables a modern print stack which is designed to work exclusively with [Mopria certified printers](https://mopria.org/certified-products). For more information, see [What is Windows protected print mode (WPP)](https://techcommunity.microsoft.com/t5/security-compliance-and-identity/a-new-modern-and-secure-print-experience-from-windows/ba-p/4002645) and [Windows Insider WPP announcement](https://blogs.windows.com/windows-insider/2023/12/13/announcing-windows-11-insider-preview-build-26016-canary-channel/). |
+| **SMB signing requirement changes** </br> [24H2][24H2] | [SMB signing is now required](/windows-server/storage/file-server/smb-signing) by default for all connections. SMB signing ensures every message contains a signature generated using session key and cipher suite. The client puts a hash of the entire message into the signature field of the SMB header. If anyone changes the message itself later on the wire, the hash won't match and SMB knows that someone tampered with the data. It also confirms to sender and receiver that they are who they say they are, breaking relay attacks. For more information about SMB signing being required by default, see [https://aka.ms/SMBSigningOBD](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704). |
+| **SMB client encryption** </br> [24H2][24H2] | SMB now supports [requiring encryption](/windows-server/storage/file-server/configure-smb-client-require-encryption) on all outbound SMB client connections. Encryption of all outbound SMB client connections enforces the highest level of network security and brings management parity to SMB signing, which allows both client and server requirements. With this new option, administrators can mandate that all destination servers use SMB 3 and encryption, and if missing those capabilities, the client won't connect. For more information about this change, see [https://aka.ms/SmbClientEncrypt](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-client-encryption-mandate-now-supported-in-windows-insider/ba-p/3964037). |
+| **SMB signing and encryption auditing** </br> [24H2][24H2] | Administrators can now [enable auditing](/windows-server/storage/file-server/smb-signing-overview#smb-signing-and-encryption-auditing) of the SMB server and client for support of SMB signing and encryption. This shows if a third-party client or server doesn't support SMB encryption or signing. The SMB signing and encryption auditing settings can be modified in Group Policy or through PowerShell. |
+| **SMB alternative client and server ports** </br> [24H2][24H2] | The SMB client now supports connecting to an SMB server over TCP, QUIC, or RDMA using [alternative network ports](/windows-server/storage/file-server/smb-ports) to the hardcoded defaults. However, you can only connect to alternative ports if the SMB server is configured to support listening on that port. Starting in [Windows Server Insider build 26040](https://techcommunity.microsoft.com/t5/windows-server-insiders/announcing-windows-server-preview-build-26040/m-p/4040858), the SMB server now supports listening on an alternative network port for SMB over QUIC. Windows Server doesn't support configuring alternative SMB server TCP ports, but some third parties do. For more information about this change, see [https://aka.ms/SMBAlternativePorts](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-alternative-ports-now-supported-in-windows-insider/ba-p/3974509). |
+| **SMB NTLM blocking exception list** </br> [24H2][24H2] |The SMB client now supports [blocking NTLM](/windows-server/storage/file-server/smb-ntlm-blocking) for remote outbound connections. With this new option, administrators can intentionally block Windows from offering NTLM via SMB and specify exceptions for NTLM usage. An attacker who tricks a user or application into sending NTLM challenge responses to a malicious server will no longer receive any NTLM data and can't brute force, crack, or pass hashes. This change adds a new level of protection for enterprises without a requirement to entirely disable NTLM usage in the OS. For more information about this change, see [https://aka.ms/SmbNtlmBlock](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-ntlm-blocking-now-supported-in-windows-insider/ba-p/3916206). |
+| **SMB dialect management** </br> [24H2][24H2] | The SMB server now supports controlling which [SMB 2 and 3 dialects](/windows-server/storage/file-server/manage-smb-dialects) it negotiates. With this new option, an administrator can remove specific SMB protocols from use in the organization, blocking older, less secure, and less capable Windows devices and third parties from connecting. For example, admins can specify to only use SMB 3.1.1, the most secure dialect of the protocol. For more information about this change, see [https://aka.ms/SmbDialectManage](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-dialect-management-now-supported-in-windows-insider/ba-p/3916368).| 
+| **SMB over QUIC client access control** </br> [24H2][24H2] | [SMB over QUIC](/windows-server/storage/file-server/smb-over-quic), which introduced an alternative to TCP and RDMA, supplies secure connectivity to edge file servers over untrusted networks like the Internet. QUIC has significant advantages, the largest being mandatory certificate-based encryption instead of relying on passwords. SMB over QUIC [client access control](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control) improves the existing SMB over QUIC feature. Administrators now have more options for SMB over QUIC such as: </br>&nbsp;&nbsp;• [Specifying which clients](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control#grant-individual-clients) can access SMB over QUIC servers. This gives organizations more protection but doesn't change the Windows authentication used to make the SMB connection or the end user experience. </br>&nbsp;&nbsp;• [Disabling SMB over QUIC](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control#disable-smb-over-quic) for client with Group Policy and PowerShell </br>&nbsp;&nbsp;• [Auditing client connection events](/windows-server/storage/file-server/smb-over-quic#smb-over-quic-client-auditing) for SMB over QUIC </br></br> For more information about these changes, see [https://aka.ms/SmbOverQUICCAC](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control). |
+| **SMB firewall rule changes** </br> [24H2][24H2] | The Windows Firewall [default behavior has changed](/windows-server/storage/file-server/smb-secure-traffic#updated-firewall-rules-preview). Previously, creating an SMB share automatically configured the firewall to enable the rules in the **File and Printer Sharing** group for the given firewall profiles. Now, Windows automatically configures the new **File and Printer Sharing (Restrictive)** group, which no longer contains inbound NetBIOS ports 137-139. </br></br> This change enforces a higher degree of default of network security and brings SMB firewall rules closer to the Windows Server **File Server** role behavior, which only opens the minimum ports needed to connect and manage sharing. Administrators can still configure the **File and Printer Sharing** group if necessary as well as modify this new firewall group, these are just default behaviors. For more information about this change, see [https://aka.ms/SMBfirewall](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-firewall-rule-changes-in-windows-insider/ba-p/3974496). For more information about SMB network security, see [Secure SMB Traffic in Windows Server](/windows-server/storage/file-server/smb-secure-traffic). |
+
+## Servicing
+
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+| **Windows Updates and Delivery optimization** </br> [21H2][21H2] | Delivery optimization helps reduce bandwidth consumption. It shares the work of downloading the update packages with multiple devices in your deployment. Windows 11 updates are smaller, as they only pull down source files that are different. You can create policies that configure delivery optimization settings. For example, set the maximum upload and download bandwidth, set caching sizes, and more. For more information, see:</br>&nbsp;&nbsp;• [Delivery Optimization for Windows updates](/windows/deployment/update/waas-delivery-optimization)</br>&nbsp;&nbsp;• [Installation & updates](https://support.microsoft.com/topic/2f9c1819-310d-48a7-ac12-25191269903c#PickTab=Windows_11)</br>&nbsp;&nbsp;• [Manage updates in Windows](https://support.microsoft.com/topic/643e9ea7-3cf6-7da6-a25c-95d4f7f099fe)|
+| **Control Windows Update notifications** </br> [22H2][22H2] | You can now block user notifications for Windows Updates during active hours. This setting is especially useful for organizations that want to prevent Windows Update notifications from occurring during business hours. For more information, see [Control restart notifications](/windows/deployment/update/waas-restart#control-restart-notifications).|
+| **Organization name in update notifications** |The organization name now appears in the Windows Update notifications when Windows clients are associated with a Microsoft Entra ID tenant. For more information, see [Display organization name in Windows Update notifications](/windows/deployment/update/waas-wu-settings#bkmk_display-name). |
+| **Checkpoint cumulative updates** </br> [24H2][24H2] | Windows quality updates are provided as cumulative updates throughout the life cycle of a Windows release. Checkpoint cumulative updates introduce periodic baselines that reduce the size of future cumulative updates making the distribution of monthly quality updates more efficient. For more information, see [https://aka.ms/CheckpointCumulativeUpdates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/introducing-windows-11-checkpoint-cumulative-updates/ba-p/4182552). |
+
+## User Experience
+
+| Feature </br> [Release] | Description |
+| --- | --- |
+|  **High Efficiency Video Coding (HEVC) support**  </br> [22H2] | HEVC is designed to take advantage of hardware capabilities on some newer devices to support 4K and Ultra HD content. For devices that don't have hardware support for HEVC videos, software support is provided, but the playback experience might vary based on the video resolution and your devices performance. |
+| **Task Manager**  </br> [22H2][22H2]/[23H2][23H2] | A new command bar was added to each page to give access to common actions. Task Manager matches the system wide theme configured in Windows Settings. Added an efficiency mode that allows you to limit the resource usage of a process. </br> <!--kb5019509--> Process filtering, theme settings, and the ability to opt out of efficiency mode notification were added to Task Manager. |
+| **Taskbar overflow menu**  </br> [23H2][23H2] | The taskbar offers an entry point to a menu that shows all of your overflowed apps in one spot.<!--kb5019509--> |
+| **Taskbar Optimize for touch**  </br> [23H2][23H2] | Taskbar touch optimization is available for devices that can be used as a tablet. Once enabled, the user can switch between a collapsed taskbar, saving screen space, and an expanded taskbar, optimized for touch. The taskbar changes to this optimized version when you disconnect or fold back the keyboard on a 2-in-1 device. To enable or disable this feature on a tablet capable device, go to Settings > Personalization > Taskbar > Taskbar behaviors. See also [February 28, 2023 - KB5022913](https://support.microsoft.com/kb/5022913)  |
+| **Windows Ink as input** </br> [23H2][23H2] | Windows Ink allows users to handwrite directly onto most editable fields <!--8092554, WIP.23481-->|
+| **Uninstall Win32 app** </br> [23H2][23H2] | Selecting Uninstall for a Win32 app from the right-click menu uses the Installed Apps page in Settings rather than Programs and Features in Control Panel.<!--[February 28, 2023 - KB5022913](https://support.microsoft.com/topic/3e38c0d9-924d-4f3f-b0b6-3bd49b2657b9) --> For more information, see [September 2023 - KB5030310](https://support.microsoft.com/kb/5030310)  |
+| **Dev Drive** </br> [23H2][23H2] | Dev Drive is a new form of storage volume available to improve performance for key developer workloads. For more information, see [Set up a Dev Drive on Windows 11](/windows/dev-drive/) and [September 2023 - KB5030310](https://support.microsoft.com/kb/5030310). |
+
+
+## Features Removed
+
+Each version of Windows client adds new features and functionality. Occasionally, [features and functionality are removed](/windows/whats-new/removed-features), often because a newer option was added. For a list of features no longer in active development that might be removed in a future release, see [deprecated features](/windows/whats-new/deprecated-features). The following features are removed in Windows 11 Enterprise LTSC 2024: 
+
+| Feature | Description |
+|---------|-------------|
+| **WordPad** </br> [24H2][24H2]| WordPad is removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. <!--8254696, 8494641--> |
+| **Alljoyn** </br> [24H2][24H2] | Microsoft's implementation of AllJoyn, which included the [Windows.Devices.AllJoyn API namespace](/uwp/api/windows.devices.alljoyn), a [Win32 API](/windows/win32/api/_alljoyn/), a [management configuration service provider (CSP)](/windows/client-management/mdm/alljoynmanagement-csp), and an [Alljoyn Router Service](/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server#alljoyn-router-service) is retired.<!--8396030--> |
+
+## Related links
+
+- [Windows Enterprise LTSC overview](overview.md)
+- [Windows 11 requirements](/windows/whats-new/windows-11-requirements)
+- [Plan for Windows 11](/windows/whats-new/windows-11-plan)
+- [Prepare for Windows 11](/windows/whats-new/windows-11-prepare)
+- [Release information](/windows/release-health/windows11-release-information)
+
+
+[21H2]: ..\windows-11-overview.md
+[22H2]: ..\whats-new-windows-11-version-22H2.md
+[23H2]: ..\whats-new-windows-11-version-23h2.md 
+[24H2]: ..\whats-new-windows-11-version-24H2.md
diff --git a/windows/whats-new/removed-features.md b/windows/whats-new/removed-features.md
index d7f6ed956b..7d8297fb4a 100644
--- a/windows/whats-new/removed-features.md
+++ b/windows/whats-new/removed-features.md
@@ -8,7 +8,7 @@ ms.author: mstewart
 manager: aaroncz
 ms.topic: reference
 ms.subservice: itpro-fundamentals
-ms.date: 03/11/2024
+ms.date: 08/23/2024
 ms.collection: 
   - highpri
   - tier1
@@ -38,6 +38,8 @@ The following features and functionalities have been removed from the installed
 
 |Feature    |  Details and mitigation  | Support removed |
 | ----------- | --------------------- | ------ |
+| WordPad <!--8254696, 8494641--> |  WordPad is removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. We recommend Microsoft Word for rich text documents like .doc and .rtf and Windows Notepad for plain text documents like .txt.  If you're a developer and need information about the affected binaries, see [Resources for deprecated features](deprecated-features-resources.md#wordpad). | October 1, 2024 |
+| Alljoyn <!--8396030-->| Microsoft's implementation of AllJoyn, which included the [Windows.Devices.AllJoyn API namespace](/uwp/api/windows.devices.alljoyn), a [Win32 API](/windows/win32/api/_alljoyn/), a [management configuration service provider (CSP)](/windows/client-management/mdm/alljoynmanagement-csp), and an [Alljoyn Router Service](/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server#alljoyn-router-service) is retired. [AllJoyn](https://openconnectivity.org/technology/reference-implementation/alljoyn/), sponsored by AllSeen Alliance, was an open source discovery and communication protocol for Internet of Things scenarios such as turning on/off lights or reading temperatures. AllSeen Alliance promoted the AllJoyn project from 2013 until 2016 when it merged with the Open Connectivity Foundation (OCF), the sponsors of [Iotivity.org](https://iotivity.org/), another protocol for Internet of Things scenarios. Customers should refer to the [Iotivity.org](https://iotivity.org/) website for alternatives such as [Iotivity Lite](https://github.com/iotivity/iotivity-lite) or [Iotivity](https://github.com/iotivity/iotivity). | October 1, 2024 |
 | Update Compliance | Update Compliance, a cloud-based service for the Windows client, is retired. This service has been replaced with [Windows Update for Business reports](/windows/deployment/update/wufb-reports-overview), which provides reporting on client compliance with Microsoft updates from the Azure portal.<!--7748874--> | March 31, 2023 |
 | Store uploader tool <!--7297297-->| Support has been removed for the store uploader tool. This tool is included in the Windows SDK only. The endpoint for the tool has been removed from service and the files will be removed from the SDK in the next release. | November 2022 |
 | Internet Explorer 11 | The Internet Explorer 11 desktop application is [retired and out of support](https://aka.ms/IEJune15Blog) as of June 15, 2022 for certain versions of Windows 10. You can still access older, legacy sites that require Internet Explorer with Internet Explorer mode in Microsoft Edge. [Learn how](https://aka.ms/IEmodewebsite). The Internet Explorer 11 desktop application will progressively redirect to the faster, more secure Microsoft Edge browser, and will ultimately be disabled via Windows Update. [Disable IE today](/deployedge/edge-ie-disable-ie11). | June 15, 2022 |
diff --git a/windows/whats-new/whats-new-windows-11-version-24h2.md b/windows/whats-new/whats-new-windows-11-version-24h2.md
new file mode 100644
index 0000000000..5c492a24d8
--- /dev/null
+++ b/windows/whats-new/whats-new-windows-11-version-24h2.md
@@ -0,0 +1,246 @@
+---
+title: What's new in Windows 11, version 24H2 for IT pros
+description: Learn more about what's new in Windows 11 version 24H2, including servicing updates, Windows Subsystem for Linux, the latest CSPs, and more.
+manager: aaroncz
+ms.service: windows-client
+ms.author: mstewart
+author: mestew
+ms.localizationpriority: medium
+ms.topic: reference
+ms.collection:
+  - highpri
+  - tier2
+ms.subservice: itpro-fundamentals
+ms.date: 07/09/2024
+appliesto:
+  - ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11, version 24H2</a>
+---
+
+# What's new in Windows 11, version 24H2
+<!--8631988-->
+Windows 11, version 24H2 is a feature update for Windows 11. It includes all features and fixes in previous cumulative updates to Windows 11, version 23H2. This article lists the new and updated features IT Pros should know. 
+
+>**Looking for consumer information?** See [Windows 11 2024 update](https://support.microsoft.com/topic/93c5c27c-f96e-43c2-a08e-5812d92f220d#windowsupdate=26100).
+
+Windows 11, version 24H2 follows the [Windows 11 servicing timeline](/lifecycle/faq/windows#windows-11):
+
+- **Windows 11 Pro**: Serviced for 24 months from the release date.
+- **Windows 11 Enterprise**: Serviced for 36 months from the release date.
+
+<!--<isEnablementPackage> Devices updating from Windows 11, version 23H2 use an enablement package. Most the files for the 24H2 update already exist on Windows 11, version 23H2 devices that have a recent monthly security update installed. Many of the new features are already enabled on Windows 11, version 23H2 clients. However, some features are just in an inactive and dormant state because they are under [temporary enterprise feature control](temporary-enterprise-feature-control.md). These new features remain dormant until they're turned on through the enablement package, a small, quick-to-install switch that activates all of the Windows 11, version 24H2 features. -->
+
+Devices must be running Windows 11, version 23H2 or 22H2 with the May 2024 nonsecurity preview update, or a later update, installed in order to update to version 24H2. Windows 11, version 24H2 is a full OS swap so it isn't available as an enablement package. Windows 10 devices can be upgraded to to Windows 11, version 24H2 using the same familiar processes, policies, and management solutions you used to originally deploy Windows 10.
+
+Windows 11, version 24H2 is available through Windows Server Update Services (including Configuration Manager), Windows Update for Business, and the Volume Licensing Service Center (VLSC). For more information, see [How to get the Windows 11, version 24H2 update](https://aka.ms/how-to-get-24H2). Review the [Windows 11, version 24H2 Windows IT Pro blog post](https://aka.ms/new-in-24H2) to discover information about available deployment resources such as the [Windows Assessment  and Deployment Kit (Windows ADK)](/windows-hardware/get-started/adk-install).
+
+
+To learn more about the status of the update rollout, known issues, and new information, see [Windows release health](/windows/release-health/).
+
+## Features no longer under temporary enterprise control
+
+[Temporary enterprise feature control](temporary-enterprise-feature-control.md) temporarily turns off certain features that were introduced during monthly cumulative updates for managed Windows 11 devices. For the purposes of temporary enterprise control, a system is considered managed if it's configured to get updates from Windows Update for Business or [Windows Server Update Services (WSUS)](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus). Clients that get updates from Microsoft Configuration Manager and Microsoft Intune are considered managed since their updates ultimately come from WSUS or Windows Updates for Business.
+
+There aren't any features under temporary enterprise control between Windows 11, version 23H2 and Windows 11, version 24H2. For a list of features that were under temporary enterprise control between Windows 11, version 22H2 and Windows 11, version 23H2, see, [Windows 11 features behind temporary enterprise feature control](temporary-enterprise-feature-control.md).
+<!--
+| Feature | KB article where the feature was introduced | 
+|---|---|
+| PLACEHOLDER | [February 28, 2023 - KB5022913](https://support.microsoft.com/kb/5022913)  | 
+-->
+
+
+## Checkpoint cumulative updates
+<!--8769182--> 
+Microsoft is introducing checkpoint cumulative updates, a new servicing model that enables devices running Windows 11, version 24H2 or later to save time, bandwidth and hard drive space when getting features and security enhancements via the latest cumulative update. Previously, the cumulative updates contained all changes to the binaries since the last release to manufacturing (RTM) version. The size of the cumulative updates could grow large over time since RTM was used as the baseline for each update.
+
+With checkpoint cumulative updates, the update file level differentials are based on a previous cumulative update instead of the RTM release. Cumulative updates that serve as a checkpoint will be released periodically. Using a checkpoint rather than RTM means the subsequent update packages are smaller, which makes downloads and installations faster. Using a checkpoint also means that in order for a device to install the latest cumulative update, the installation of a prerequisite cumulative update might be required. For more information about checkpoint cumulative updates, see [https://aka.ms/CheckpointCumulativeUpdates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/introducing-windows-11-checkpoint-cumulative-updates/ba-p/4182552).
+
+## Features exclusive to Copilot+ PCs in 24H2
+
+Copilot+ PCs are a new class of Windows 11 AI PCs that are powered by a neural processing unit (NPU) that can perform more than 40 trillion operations per second (TOPS). The following features are exclusive to [Copilot+ PCs](https://www.microsoft.com/windows/copilot-plus-pcs) in Windows 11, version 24H2: 
+
+- Live Captions allow you to translate audio and video content into English subtitles from 44 languages. For more information, see [Use live captions to better understand audio](https://support.microsoft.com/topic/b52da59c-14b8-4031-aeeb-f6a47e6055df).
+- Windows Studio Effects is the collective name of AI-powered video call and audio effects that are available on Copilot+ PCs and select Windows 11 devices with compatible NPUs. Windows Studio Effects automatically improves lighting and cancels noises during video calls. For more information, see [Windows Studio Effects](https://support.microsoft.com/topic/273c1fa8-2b3f-41b1-a587-7cc7a24b62d8).
+- Cocreator in Paint allows you to create amazing artwork with the help of AI. Enter a text prompt, start drawing in Paint, and Cocreator generates artwork based on what you're drawing. For more information, see [Cocreator in Paint](https://support.microsoft.com/topic/53857513-e36c-472d-8d4a-adbcd14b2e54)
+- Auto Super Resolution (Auto SR) is the first AI-powered super resolution solution built into an operating system, making games automatically play smoother with higher resolution details. For more information, see [Automatic Super Resolution](https://support.microsoft.com/topic/5d6d95fa-cc02-4673-b62c-2c50f06385aa).
+- Image Creator and Restyle Image in the Microsoft Photos app lets you reimagine your photos or create new images with the assistance of AI. For more information, see [Microsoft Photos Restyle Image and Image Creator](https://support.microsoft.com/topic/6c352e99-d954-49c9-84cd-b7cacd018868).
+
+## Features added to Windows 11 since version 23H2
+
+New features and enhancements were introduced to Windows 11, version 23H2 periodically to provide continuous innovation for Windows 11. These features and enhancements use the normal update servicing channels you're already familiar with. At first, new features are introduced with an optional nonsecurity preview release and gradually rolled out to clients. These new features are released later as part of a monthly security update release. For more information about continuous innovation, see [Update release cycle for Windows clients](/windows/deployment/update/release-cycle#continuous-innovation-for-windows-11).
+
+Some of the features were released within the past year's continuous innovation updates and carry forward into the 24H2 annual feature update include:
+
+### Server Message Block (SMB) protocol changes
+
+#### SMB signing and encryption
+
+The following changes were made for SMB signing and encryption:
+
+- **SMB signing requirement changes**: In Windows 11, version 24H2 on the Home, Pro, Education, and Enterprise editions, [SMB signing is now required](/windows-server/storage/file-server/smb-signing) by default for all connections. SMB signing ensures every message contains a signature generated using session key and cipher suite. The client puts a hash of the entire message into the signature field of the SMB header. If anyone changes the message itself later on the wire, the hash won't match and SMB knows that someone tampered with the data. It also confirms to sender and receiver that they are who they say they are, breaking relay attacks. For more information about SMB signing being required by default, see [https://aka.ms/SMBSigningOBD](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704).
+
+- **SMB client encryption**: SMB now supports [requiring encryption](/windows-server/storage/file-server/configure-smb-client-require-encryption) on all outbound SMB client connections. Encryption of all outbound SMB client connections enforces the highest level of network security and brings management parity to SMB signing, which allows both client and server requirements. With this new option, administrators can mandate that all destination servers use SMB 3 and encryption, and if missing those capabilities, the client won't connect. For more information about this change, see [https://aka.ms/SmbClientEncrypt](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-client-encryption-mandate-now-supported-in-windows-insider/ba-p/3964037).
+
+- **SMB signing and encryption auditing**: Administrators can now [enable auditing](/windows-server/storage/file-server/smb-signing-overview#smb-signing-and-encryption-auditing) of the SMB server and client for support of SMB signing and encryption. This shows if a third-party client or server doesn't support SMB encryption or signing. The SMB signing and encryption auditing settings can be modified in Group Policy or through PowerShell. 
+
+#### SMB alternative client and server ports
+
+The SMB client now supports connecting to an SMB server over TCP, QUIC, or RDMA using [alternative network ports](/windows-server/storage/file-server/smb-ports) to the hardcoded defaults. However, you can only connect to alternative ports if the SMB server is configured to support listening on that port. Starting in [Windows Server Insider build 26040](https://techcommunity.microsoft.com/t5/windows-server-insiders/announcing-windows-server-preview-build-26040/m-p/4040858), the SMB server now supports listening on an alternative network port for SMB over QUIC. Windows Server doesn't support configuring alternative SMB server TCP ports, but some third parties do. For more information about this change, see [https://aka.ms/SMBAlternativePorts](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-alternative-ports-now-supported-in-windows-insider/ba-p/3974509).
+
+
+#### SMB NTLM blocking exception list
+
+The SMB client now supports [blocking NTLM](/windows-server/storage/file-server/smb-ntlm-blocking) for remote outbound connections. With this new option, administrators can intentionally block Windows from offering NTLM via SMB and specify exceptions for NTLM usage. An attacker who tricks a user or application into sending NTLM challenge responses to a malicious server will no longer receive any NTLM data and can't brute force, crack, or pass hashes. This change adds a new level of protection for enterprises without a requirement to entirely disable NTLM usage in the OS.
+
+For more information about this change, see [https://aka.ms/SmbNtlmBlock](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-ntlm-blocking-now-supported-in-windows-insider/ba-p/3916206).
+
+#### SMB dialect management
+
+The SMB server now supports controlling which [SMB 2 and 3 dialects](/windows-server/storage/file-server/manage-smb-dialects) it negotiates. With this new option, an administrator can remove specific SMB protocols from use in the organization, blocking older, less secure, and less capable Windows devices and third parties from connecting. For example, admins can specify to only use SMB 3.1.1, the most secure dialect of the protocol.
+
+For more information about this change, see [https://aka.ms/SmbDialectManage](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-dialect-management-now-supported-in-windows-insider/ba-p/3916368).
+
+
+#### SMB over QUIC
+
+[SMB over QUIC](/windows-server/storage/file-server/smb-over-quic), which introduced an alternative to TCP and RDMA, supplies secure connectivity to edge file servers over untrusted networks like the Internet. QUIC has significant advantages, the largest being mandatory certificate-based encryption instead of relying on passwords. SMB over QUIC [client access control](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control) improves the existing SMB over QUIC feature.
+
+Administrators now have more options for SMB over QUIC such as: 
+
+- [Specifying which clients](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control#grant-individual-clients) can access SMB over QUIC servers. This gives organizations more protection but doesn't change the Windows authentication used to make the SMB connection or the end user experience.
+- [Disabling SMB over QUIC](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control#disable-smb-over-quic) for client with Group Policy and PowerShell
+- [Auditing client connection events](/windows-server/storage/file-server/smb-over-quic#smb-over-quic-client-auditing) for SMB over QUIC
+
+For more information about these changes, see [https://aka.ms/SmbOverQUICCAC](/windows-server/storage/file-server/configure-smb-over-quic-client-access-control).
+
+#### SMB firewall rule changes
+
+The Windows Firewall [default behavior has changed](/windows-server/storage/file-server/smb-secure-traffic#updated-firewall-rules-preview). Previously, creating an SMB share automatically configured the firewall to enable the rules in the **File and Printer Sharing** group for the given firewall profiles. Now, Windows automatically configures the new **File and Printer Sharing (Restrictive)** group, which no longer contains inbound NetBIOS ports 137-139.
+
+This change enforces a higher degree of default of network security and brings SMB firewall rules closer to the Windows Server **File Server** role behavior, which only opens the minimum ports needed to connect and manage sharing. Administrators can still configure the **File and Printer Sharing** group if necessary as well as modify this new firewall group, these are just default behaviors.
+
+For more information about this change, see [https://aka.ms/SMBfirewall](https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-firewall-rule-changes-in-windows-insider/ba-p/3974496). For more information about SMB network security, see [Secure SMB Traffic in Windows Server](/windows-server/storage/file-server/smb-secure-traffic).
+
+### Local Security Authority (LSA) protection enablement on upgrade
+
+[LSA protection](/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection) helps protect against theft of secrets and credentials used for logon by preventing unauthorized code from running in the LSA process and by preventing dumping of process memory. An audit occurs for incompatibilities with LSA protection for a period of time, starting with this upgrade. If incompatibilities aren't detected, LSA protection is automatically enabled. You can check and change the enablement state of LSA protection in the Windows Security application under the **Device Security** > **Core Isolation** page. In the event log, LSA protection records whether programs are blocked from loading into LSA. If you would like to check if something was blocked, review the [logging](/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection#identify-plug-ins-and-drivers-that-lsassexe-fails-to-load).
+
+ 
+### Remote Mailslot protocol disabled by default
+
+[Remote Mailslot protocol](/openspecs/windows_protocols/ms-mail/47ac910f-1dec-4791-8486-9b3e8fd542da) was [deprecated](deprecated-features.md#deprecated-features) in November 2023 and is now disabled by default starting in Windows 11, version 24H2. For more information on Remote Mailslots, see [About Mailslots](/windows/win32/ipc/about-mailslots).
+
+### Local Administrator Password Solution (LAPS) improvements
+
+[LAPS](/windows-server/identity/laps/laps-overview) has a new automatic account management feature. IT admins can configure Windows LAPS to:
+- Automatically create the managed local account
+- Configure name of account
+- Enable or disable the account
+- Randomize the name of the account
+
+LAPS has the following policy improvements:
+
+- Added passphrase settings for the [PasswordComplexity](/windows/client-management/mdm/laps-csp#policiespasswordcomplexity) policy
+   - Use [PassphraseLength](/windows/client-management/mdm/laps-csp#policiespassphraselength) to control the number of words in a new passphrase
+- Added an improved readability setting for the [PasswordComplexity](/windows/client-management/mdm/laps-csp#policiespasswordcomplexity) policy, which generates passwords without using characters that are easily confused with another character. For example, the zero and the letter O aren't used in the password since the characters can be confused.
+- Added the `Reset the password, logoff the managed account, and terminate any remaining processes` setting to the [PostAuthenticationActions](/windows/client-management/mdm/laps-csp#policiespostauthenticationactions) policy. The event logging messages that are emitted during post-authentication-action execution were also expanded, to give insights into exactly what was done during the operation.
+
+Image rollback detection was introduced for LAPS. LAPS can detect when a device was rolled back to a previous image. When a device is rolled back, the password in Active Directory might not match the password on the device that was rolled back. This new feature adds an Active Directory attribute, `msLAPS-CurrentPasswordVersion`, to the [Windows LAPS schema](/windows-server/identity/laps/laps-technical-reference#mslaps-currentpasswordversion). This attribute contains a random GUID that Windows LAPS writes every time a new password is persisted in Active Directory, followed by saving a local copy. During every processing cycle, the GUID stored in `msLAPS-CurrentPasswordVersion` is queried and compared to the locally persisted copy. If the GUIDs are different, the password is immediately rotated. To enable this feature, you need to run the latest version of the [Update-LapsADSchema PowerShell cmdlet](/powershell/module/laps/update-lapsadschema). 
+
+### Rust in the Windows kernel
+
+There's a new implementation of [GDI region](/windows/win32/gdi/regions) in `win32kbase_rs.sys`. Since Rust offers advantages in reliability and security over traditional programs written in C/C++, you'll continue to see more use of it in the kernel.
+
+### Personal Data Encryption (PDE) for folders
+
+PDE for folders is a security feature where the contents of the known Windows folders (Documents, Desktop and Pictures) are protected using a user authenticated encryption mechanism. Windows Hello is the user authentication used to provide the keys for encrypting user data in the folders. PDE for folders can be [enabled from a policy in Intune](/mem/intune/protect/endpoint-security-disk-encryption-policy). IT admins can select all of the folders, or a subset, then apply the policy to a group of users in their organization.
+PDE for Folders settings is available on Intune under **Endpoint Security** > **Disk encryption**.
+
+For more information about PDE, see [PDE overview](/windows/security/operating-system-security/data-protection/personal-data-encryption)
+
+
+### Windows protected print mode
+
+Windows protected print mode enables devices to print using only the Windows modern print stack, which is designed for [Morpia certified printers](https://mopria.org/certified-products). With Morpia certified printers, there's no longer a need to rely on third-party software installers. To enable Windows protected print mode:
+- Go to **Settings** > **Bluetooth & Devices** > **Printers & scanners**, then choose **Setup** under **Windows protected print mode**
+- Enable the **Configure Windows protected print** policy in Group Policy under **Computer Configuration** > **Administrative Templates** > **Printers**
+
+### SHA-3 support
+
+Support for the SHA-3 family of hash functions and SHA-3 derived functions (SHAKE, cSHAKE, KMAC) was added. The SHA-3 family of algorithms are the latest standardized hash functions by the National Institute of Standards and Technology (NIST). Support for these functions is enabled through the Windows [CNG](/windows/win32/seccng/cng-portal) library.
+
+- **Supported SHA-3 hash functions**: SHA3-256, SHA3-384, SHA3-512 (SHA3-224 isn't supported)
+
+- **Supported SHA-3 HMAC algorithms**: HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512
+
+- **Supported SHA-3 derived algorithms**: extendable-output functions (XOF) (SHAKE128, SHAKE256), customizable XOFs (cSHAKE128, cSHAKE256), and KMAC (KMAC128, KMAC256, KMACXOF128, KMACXOF256).
+
+### App Control for Business
+<!--8223790-->
+Customers can now use App Control for Business (formerly called Windows Defender Application Control) and its next-generation capabilities to protect their digital property from malicious code. With App Control for Business, IT teams can configure what runs in a business environment through Microsoft Intune or other MDMs in the admin console, including setting up Intune as a managed installer. For more information, see [Application Control for Windows](/windows/security/application-security/application-control/app-control-for-business/appcontrol).
+
+### Wi-Fi 7 support
+<!--8850300-->
+Support  for Wi-Fi 7 was added for consumer access points. Wi-Fi 7, also known as IEEE 802.11be Extremely High Throughput (EHT) is the latest Wi-Fi technology that offers unprecedented speed, reliability, and efficiency for your wireless devices. For more information about Wi-Fi 7, see the [Wi-Fi Alliance announcement](https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-introduces-wi-fi-certified-7).
+
+### Bluetooth &#174; LE audio support for assistive devices
+
+Customers who use these assistive hearing devices are now able to directly pair, stream audio, take calls, and control audio presets when they use an LE Audio-compatible PC. Users who have Bluetooth LE Audio capable assistive hearing devices can determine if their PC is LE Audio-compatible, set up, and manage their devices via **Settings** > **Accessibility** > **Hearing devices**. For more information, see [Using hearing devices with your Windows 11 PC](https://support.microsoft.com/topic/fcb566e7-13c3-491a-ad5b-8219b098d647).  
+
+### Windows location improvements
+
+New controls were added to help manage which apps have access to the list of Wi-Fi networks around you, which could be used to determine your location.
+- You can view and modify which apps can access the list of Wi-Fi networks from **Settings** > **Privacy & security** > **Location**.
+- A new prompt appears the first time an app attempts to access your location or Wi-Fi information.
+   - The prompt also notifies when an app unexpectedly requests access to location services so that you can deny it.
+   - If you grant permission, apps that use location or Wi-Fi information now appear in **Recent activity** on the **Location** settings page, and the location icon is displayed in the taskbar while the app is in-use.
+   - To hide these prompts when location has been turned off, turn off **Notify when apps request location** on the **Location** settings page.
+- Developers can use the [Changes to API behavior for Wi-Fi access and location](/windows/win32/nativewifi/wi-fi-access-location-changes) article to learn about API surfaces impacted by this change.
+
+### Sudo for Windows
+
+Sudo for Windows is a new way for users to run elevated commands (as an administrator) directly from an unelevated console session. The sudo command can be configured to run in three different modes:
+
+- **In a new window**: The elevated command runs in a new window. This mode is similar to the behavior of the `runas /user:admin` command.
+- **With input disabled**: Runs the elevated process in the current window, but with the input handle closed. This means that the elevated process won't be able to receive input from the current console window.
+- **Inline**: Runs the elevated process in the current window and the process is able to receive input from the current console session. This mode is most similar to the sudo experience on other platforms.
+
+It's recommended that you review the security considerations for each mode here before [enabling the sudo command](/windows/sudo/#how-to-enable-sudo-for-windows) on your machine. For more information, see [Sudo for Windows](/windows/sudo/).
+
+### Enable optional updates
+<!--7991583-->
+In addition to the monthly cumulative update, optional updates are available to provide new features and nonsecurity changes. Most optional updates are released on the fourth Tuesday of the month, known as optional nonsecurity preview releases. Optional updates can also include features that are gradually rolled out, known as controlled feature rollouts (CFRs). Installation of optional updates isn't enabled by default for devices that receive updates using Windows Update for Business. However, you can enable optional updates for devices by using the **Enable optional updates** policy. For more information about optional content, see [Enable optional updates](/windows/deployment/update/waas-configure-wufb#enable-optional-updates).
+
+### Remote Desktop Connection improvements
+
+Remote Desktop Connection has the following improvements:
+- The Remote Desktop Connection setup window (mstsc.exe) follows the text scaling settings under **Settings** > **Accessibility** > **Text size**. 
+- Remote Desktop Connection supports zoom options of 350, 400, 450, and 500%
+- Improvements to the connection bar design
+
+
+### Additional features
+<!--notable UX items for IT pros from other updates-->
+
+- **File Explorer**: The following changes were made to File Explorer context menu:
+  - Support for creating 7-zip and TAR archives
+  - **Compress to** > **Additional options** allows you to compress individual files with gzip, BZip2, xz, or Zstandard 
+  - Labels were added to the context menu icons for actions like copy, paste, delete, and rename
+- **OOBE improvement**: when you need to connect to a network and there's no Wi-Fi drivers, you're given an *Install drivers* option to install drivers that are already downloaded
+- **Registry Editor**: The Registry Editor supports limiting a search to the currently selected key and its descendants
+- **Task Manager**: The Task Manager settings page has [Mica material](/windows/apps/design/style/mica) and a redesigned icon 
+
+
+### Developer APIs
+
+The following developer APIs were added or updated:
+
+- Introduced the [Power Grid Forecast API](/uwp/api/windows.devices.power.powergridforecast). App developers can minimize environmental impact by shifting background workloads to times when renewable energy is available to the local grid. Forecast data isn't available globally and quality of data may vary by region.
+- Added an energy saver notification callback setting GUID to represent the new energy saver experience. Apps can subscribe to the energy saver status by passing the appropriate GUID to the PowerSettingRegisterNotification API and can implement different behaviors to optimize energy or performance depending on the current energy saver status. For more information, see [Power Setting GUIDs](/windows/win32/power/power-setting-guids)
+- Extended the [Effective Power Mode API](/windows/win32/api/powersetting/ne-powersetting-effective_power_mode) to interpret the new energy saver levels when determining the returned effective power mode.
+
+## Features removed in Windows 11, version 24H2
+
+The following [deprecated features](deprecated-features.md) are [removed](removed-features.md) in Windows 11, version 24H2:
+
+- **WordPad**: WordPad is removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. <!--8254696, 8494641-->
+- **Alljoyn**: Microsoft's implementation of AllJoyn, which included the [Windows.Devices.AllJoyn API namespace](/uwp/api/windows.devices.alljoyn), a [Win32 API](/windows/win32/api/_alljoyn/), a [management configuration service provider (CSP)](/windows/client-management/mdm/alljoynmanagement-csp), and an [Alljoyn Router Service](/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server#alljoyn-router-service) is retired.<!--8396030-->

From 0e137e5009cbd85abbb3a2c1708a515c1bcacaaf Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 17 Oct 2024 11:56:17 -0700
Subject: [PATCH 067/128] Update mcc-ent-prerequisites.md

Adding note about not using "Trusted launch" for Windows Azure VMs
---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index f95d8fb53d..2f532cb9c2 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -44,7 +44,7 @@ This article details the requirements and recommendations for using Microsoft Co
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
-- The Windows host machine must support nested virtualization.
+- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch-portal?tabs=portal%2Cportal3%2Cportal2).
 - The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
 
 ### Additional requirements for Linux host machines

From af8859b0f9abdb68f042f7dff8854b2efe840b6d Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Tue, 22 Oct 2024 15:17:49 -0700
Subject: [PATCH 068/128] changes to faq,overview,create pages

---
 .../do/mcc-ent-create-resource-and-cache.md   | 104 ++++++++++++++++--
 windows/deployment/do/mcc-ent-edu-overview.md |   2 +-
 windows/deployment/do/mcc-ent-faq.yml         |  14 ++-
 3 files changed, 104 insertions(+), 16 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 8d79298b6a..f1bb077c2b 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -63,7 +63,7 @@ For more information on sizing and OS requirements, see [the prerequisites for u
 #### Create MCC Azure resource
 
 Replace the following placeholders with your own information:
-* *\<resource-group>*: An existing resource group in your subscription.
+* *\<resource-group>*: Name of an existing resource group in your subscription.
 * *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
 * *\<location>*: The Azure region where your Microsoft Connected Cache will be located.
 
@@ -94,9 +94,9 @@ To know more about different cache node state, see [Cache node states](#cache-no
 Use the following command to create a new cache node if you don't already have one.
 
 Replace the following placeholders with your own information:
-* *\<resource-group>*: An existing resource group in your subscription.
-* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
-* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<resource-group>*: Name of existing resource group in your subscription.
+* *\<mcc-resource-name>*: Name of the Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: A name for your Microsoft Connected Cache node.
 * *\<host-os>*: The OS on which cache node will be provisioned.
   Accepted values: windows, linux
 
@@ -131,9 +131,9 @@ Use the following command to configure cache node for deployment to a **Linux**
 
 Replace the following placeholders with your own information:
 
-* *\<resource-group>*: An existing resource group in your subscription.
-* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
-* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<resource-group>*: Name of the resource group in your subscription.
+* *\<mcc-resource-name>*: Name of your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: Name for your Microsoft Connected Cache node.
 * *\<physical-path>*: The cache drive path. You can add upto nine cache drives.
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
@@ -163,9 +163,9 @@ Use the following command to configure cache node for deployment to a **Windows*
 
 Replace the following placeholders with your own information:
   
-* *\<resource-group>*: An existing resource group in your subscription.
-* *\<mcc-resource-name>*: A name for your Microsoft Connected Cache for Enterprise resource.
-* *\<cache-node-name>*: The Azure region where your Microsoft Connected Cache will be located.
+* *\<resource-group>*: Name of the resource group in your subscription.
+* *\<mcc-resource-name>*: Name of your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: Name for your Microsoft Connected Cache node.
 * *\<physical-path>*: The cache drive path.<br>
   Accepted value: /var/mcc
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
@@ -252,12 +252,94 @@ You can choose to enable or disable proxy settings on your cache node. Proxy sho
 |**Proxy host name**|	String or number|	Proxy host name or address|
 |**Proxy port**|	Integer|	Proxy port
 
+<br>
+<br>
+
+## Other operations on resource and cache nodes
+<br>
+
+### List all MCC resource
+
+# [Azure portal](#tab/portal)
+Navigate to the resource group under which you would like to see the MCC resources.
+
+
+# [Azure CLI](#tab/cli)
+Use the following command to list all the MCC resources under the resource group. 
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: An existing resource group in your subscription.
+
+
+```azurecli-interactive
+az mcc ent resource list  --resource-group <myrg>
+```
+---
+
+### List all cache nodes
+
+# [Azure portal](#tab/portal)
+On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the MCC resource.
+
+
+# [Azure CLI](#tab/cli)
+Use the following command to list all the cache nodes under the resource. 
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: Name of the resource group in your subscription.
+* *\<mcc-resource-name>*: Name of your Microsoft Connected Cache for Enterprise resource.
+
+```azurecli-interactive
+az mcc ent node list --mcc-resource-name <mymccresource> --resource-group <myrg>
+```
+
+---
+<br>
+
+### Delete MCC resource
+
+# [Azure portal](#tab/portal)
+Navigate to the MCC resource to delete and click on the delete button on top.
+
+
+# [Azure CLI](#tab/cli)
+Use the following command to delete the MCC resource. 
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: Name of the resource group in your subscription.
+* *\<mcc-resource-name>*: Name of your Microsoft Connected Cache for Enterprise resource.
+* *\<cache-node-name>*: The name for your Microsoft Connected Cache node.
+
+
+```azurecli-interactive
+az mcc ent node delete --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg> 
+```
+---
+
+### Delete cache node
+
+# [Azure portal](#tab/portal)
+On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the MCC resource. Select the cache node you wish to delete and click delete button on top of the page.
+
+
+# [Azure CLI](#tab/cli)
+Use the following command to delete the cache node under the resource. 
+
+Replace the following placeholders with your own information:
+* *\<resource-group>*: Name of the resource group in your subscription.
+* *\<mcc-resource-name>*: Name of your Microsoft Connected Cache for Enterprise resource.
+
+```azurecli-interactive
+az mcc ent node delete --mcc-resource-name <mymccresource> --resource-group <myrg>
+```
+
+---
 <br>
 
 ##### Cache node states
 | Cache node state |Description|
 |---|---|
-|Creation in progress| Cache node is being created|
+|Operation in progress| An operation is being done on the cache node|
 |Registration in progress| Cache node is being registered|
 |Not configured| Cache node is ready to be configured|
 |Not provisioned| Cache node is ready to be provisioned on host machine|
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 601992fa5b..244fbf6b01 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -25,7 +25,7 @@ Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a soft
 
 Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
 
-Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux] (windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
+Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux](/windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
 
 ### Supported scenarios and deployments
 
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 390275b4b8..e69f236fa3 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -23,10 +23,18 @@ summary: |
 sections:
   - name: Ignored
     questions:
-      - question: Is this product a free service?
-        answer: Yes. Microsoft Connected Cache is a free service.  
+      - question: What are the licesning requirement?
+        answer: Microsoft Connected Cache for Enterprise and Education is available to all Windows E3, E5 and F3 and Education A3 and A5 customers.
+      - question: Will I be charged to create MCC resources and cache node on Azure?
+        answer: No. You will not be charged to create MCC resource and cache nodes on Azure. However, you will need an Azure pay-as-you-go subscription to create the resources but there is no charge for the resource itself.
       - question: Is there a nondisclosure agreement to sign?
         answer: No, a nondisclosure agreement isn't required.
+      - question: What will Microsoft Connected Cache for Enterprise and Education do for me? 
+        answer: "[Delivery Optimization](waas-delivery-optimization-reference.md) and Microsoft Connected Cache are Microsoft’s comprehensive solutions for minimizing enterprises’ internet bandwidth consumption, with Delivery Optimization acting as the distributed content source and Connected Cache as a dedicated content source. Microsoft customers have benefited from these solutions, seeing savings of more than 90% of bandwidth when managing Windows 11 upgrades, Autopilot device provisioning, Intune application installations, and monthly update deployments."
+      - question: Can I deploy Connected Cache to a production environment?
+        answer: The core caching engine of Microsoft Connected Cache is deployed to hundreds of ISPs globally and has been reliably delivering Microsoft content to customers. Connected Cache relies on production Azure services for the deployment and management of Connected Cache nodes and for Windows installations Windows Subsystem for Linux. Microsoft support has been fully onboarded to support your organization whether you deploy Connected Cache in a lab for testing or in production.
+      - question: When will Microsoft Connected Cache for Enterprise and Education be made generally available (GA)?
+        answer: "[Delivery Optimization](waas-delivery-optimization-reference.md) and Microsoft Connected Cache are Microsoft’s comprehensive solutions for minimizing enterprises’ internet bandwidth consumption. Microsoft is committed to making Connected Cache generally available soon. Additionally, Microsoft support has been fully onboarded to support your organization in whatever capacity you have deployed Connected Cache."
       - question: What are the prerequisites and hardware requirements?
         answer:  | 
          - [Azure pay-as-you-go subscription](https://azure.microsoft.com/offers/ms-azr-0003p/).
@@ -48,8 +56,6 @@ sections:
         answer: For more information, see [Learn how to provision a Local User Account](https://support.microsoft.com/topic/104dc19f-6430-4b49-6a2b-e4dbd1dcdf32). Make sure that your gMSA has been granted permissions to "Log on as batch job" within the host machine's [local security policies](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings).
       - question: Where can I monitor cache node usage?
         answer: You can monitor your cache node usage on Azure portal. For more information, see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
-      - question: Does Microsoft Connected Cache support Xbox or Microsoft Teams content?
-        answer: Currently, Microsoft Connected Cache doesn't support Xbox or Microsoft Teams content. However, supporting Xbox content is of high priority, and we expect this feature soon. We'll let you know as soon as it becomes available!
       - question: How does Microsoft Connected Cache populate its content? Can I precache content?
         answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there's no cache fill necessary. "Preseeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
       - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?

From 9cb68356de95aa7a1a55ffb6f74b9a79bd447f49 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Tue, 22 Oct 2024 15:32:36 -0700
Subject: [PATCH 069/128] fixed faq links

---
 windows/deployment/do/mcc-ent-faq.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index e69f236fa3..576c5dedf9 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -65,9 +65,9 @@ sections:
       - question: How do I set up CLI?
         answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
       - question: How do I install MCC extension?
-        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-install-extension.md).
+        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-manage-cache-using-cli.md#Prerequisites).
       - question: What do I do if I have to set up or change existing proxy?
-        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-proxy.md).
+        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-create-resource-and-cache.md#Proxy-settings).
       - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
         answer: Microsoft Connected Cache isn't a service that has dependency on a specific Azure region, and there isn't personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
       - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?

From f3fac671521c3c3040f16e9e7986bc969962b60d Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 23 Oct 2024 11:44:08 -0700
Subject: [PATCH 070/128] Update mcc-ent-faq.yml

---
 windows/deployment/do/mcc-ent-faq.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 576c5dedf9..240355e9e7 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -65,9 +65,9 @@ sections:
       - question: How do I set up CLI?
         answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
       - question: How do I install MCC extension?
-        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-manage-cache-using-cli.md#Prerequisites).
+        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-manage-cache-using-cli.md#prerequisites).
       - question: What do I do if I have to set up or change existing proxy?
-        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-create-resource-and-cache.md#Proxy-settings).
+        answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-create-resource-and-cache.md#proxy-settings).
       - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
         answer: Microsoft Connected Cache isn't a service that has dependency on a specific Azure region, and there isn't personal or organizational identifiable information stored in the resource that necessitates data residency. The three regions that the Connected Cache resource can be deployed to are (Europe) North Europe, (Asia Pacific) Korea Central, and (US) West US.
       - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?
@@ -75,4 +75,4 @@ sections:
       - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
         answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task remains running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS.
       - question: What do I do if I need more support and have more questions even after reading this FAQ page?
-        answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
\ No newline at end of file
+        answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.

From 691aa67454ae146d7a4aadb01559a1da0874212a Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Wed, 23 Oct 2024 12:32:18 -0700
Subject: [PATCH 071/128] Update mcc-ent-faq.yml

tweaks
---
 windows/deployment/do/mcc-ent-faq.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 240355e9e7..653c5676a0 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -25,16 +25,16 @@ sections:
     questions:
       - question: What are the licesning requirement?
         answer: Microsoft Connected Cache for Enterprise and Education is available to all Windows E3, E5 and F3 and Education A3 and A5 customers.
-      - question: Will I be charged to create MCC resources and cache node on Azure?
-        answer: No. You will not be charged to create MCC resource and cache nodes on Azure. However, you will need an Azure pay-as-you-go subscription to create the resources but there is no charge for the resource itself.
+      - question: Is there a charge to create MCC resources and cache node on Azure?
+        answer: No. You won't be charged to create MCC resource and cache nodes on Azure. However, you need an Azure pay-as-you-go subscription to create the resources but there is no charge for the resource itself.
       - question: Is there a nondisclosure agreement to sign?
         answer: No, a nondisclosure agreement isn't required.
       - question: What will Microsoft Connected Cache for Enterprise and Education do for me? 
         answer: "[Delivery Optimization](waas-delivery-optimization-reference.md) and Microsoft Connected Cache are Microsoft’s comprehensive solutions for minimizing enterprises’ internet bandwidth consumption, with Delivery Optimization acting as the distributed content source and Connected Cache as a dedicated content source. Microsoft customers have benefited from these solutions, seeing savings of more than 90% of bandwidth when managing Windows 11 upgrades, Autopilot device provisioning, Intune application installations, and monthly update deployments."
       - question: Can I deploy Connected Cache to a production environment?
-        answer: The core caching engine of Microsoft Connected Cache is deployed to hundreds of ISPs globally and has been reliably delivering Microsoft content to customers. Connected Cache relies on production Azure services for the deployment and management of Connected Cache nodes and for Windows installations Windows Subsystem for Linux. Microsoft support has been fully onboarded to support your organization whether you deploy Connected Cache in a lab for testing or in production.
+        answer: The core caching engine of Microsoft Connected Cache is deployed to hundreds of ISPs globally and has been reliably delivering Microsoft content to customers. Connected Cache relies on production Azure services for the deployment and management of Connected Cache nodes and for Windows installations Windows Subsystem for Linux. Microsoft support is fully onboarded to support your organization whether you deploy Connected Cache in a lab for testing or in production.
       - question: When will Microsoft Connected Cache for Enterprise and Education be made generally available (GA)?
-        answer: "[Delivery Optimization](waas-delivery-optimization-reference.md) and Microsoft Connected Cache are Microsoft’s comprehensive solutions for minimizing enterprises’ internet bandwidth consumption. Microsoft is committed to making Connected Cache generally available soon. Additionally, Microsoft support has been fully onboarded to support your organization in whatever capacity you have deployed Connected Cache."
+        answer: "[Delivery Optimization](waas-delivery-optimization-reference.md) and Microsoft Connected Cache are Microsoft’s comprehensive solutions for minimizing enterprises’ internet bandwidth consumption. Microsoft is committed to making Connected Cache generally available soon. Additionally, Microsoft support is fully onboarded to support your organization in whatever capacity you deploy Connected Cache."
       - question: What are the prerequisites and hardware requirements?
         answer:  | 
          - [Azure pay-as-you-go subscription](https://azure.microsoft.com/offers/ms-azr-0003p/).
@@ -59,9 +59,9 @@ sections:
       - question: How does Microsoft Connected Cache populate its content? Can I precache content?
         answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there's no cache fill necessary. "Preseeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
       - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
-        answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content is in the hot cache path (open handles and such) for 24 hrs, but will reside on disk for 30 days. The drive fills up and nginx starts to delete content based on its own algorithm, probably some combination of least recently used.
+        answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content is in the hot cache path (open handles and such) for 24 hrs, but resides on disk for 30 days. The drive fills up and nginx starts to delete content based on its own algorithm, probably some combination of least recently used.
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
-        answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft validates updates prior to releasing Enterprises Connected Cache updates and will only release updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
+        answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft validates updates prior to releasing Enterprises Connected Cache updates and only releases updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
         answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
       - question: How do I install MCC extension?
@@ -73,6 +73,6 @@ sections:
       - question: Should I use a gMSA, local user, or domain account to deploy Microsoft Connected Cache to Windows?
         answer: There are pros and cons to the account options available to customers. We anticipate that security and manageability are top priories for customers. Microsoft provides guidance on both Active Directory and Microsoft Entra-based service accounts ([Introduction to Active Directory service accounts - Choose the right type of service account](/entra/architecture/service-accounts-on-premises#types-of-on-premises-service-accounts)) and user-based service accounts ([Secure user-based service accounts in Active Directory)](/entra/architecture/service-accounts-user-on-premises#assess-on-premises-user-account-security)).
       - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
-        answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the schedule task remains running. On Linux Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS.
+        answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the scheduled task remains running. On Linux, Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS.
       - question: What do I do if I need more support and have more questions even after reading this FAQ page?
         answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.

From d05cff6fc792a4a23dc4c615116b3000c0d0e089 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 23 Oct 2024 16:32:52 -0700
Subject: [PATCH 072/128] Edits to MCC monitoring page

---
 windows/deployment/do/mcc-ent-monitoring.md   |  83 ++++++++++++------
 .../images/mcc-ent-cache-node-summary.png     | Bin 0 -> 11749 bytes
 .../images/mcc-ent-key-metric-charts.png      | Bin 0 -> 51903 bytes
 3 files changed, 57 insertions(+), 26 deletions(-)
 create mode 100644 windows/deployment/images/mcc-ent-cache-node-summary.png
 create mode 100644 windows/deployment/images/mcc-ent-key-metric-charts.png

diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index fd1e2c5e51..356df8fdeb 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -14,48 +14,79 @@ appliesto:
 ms.date: 09/04/2024
 ---
 
-# Monitor Microsoft Connected Cache cache node usage
+# Monitor cache node usage
 
-Tracking the status and performance of your MCC cache node is essential to making sure that you're getting the most out of the service.
+Tracking the status of your MCC node is essential to making sure you are getting the most out of the service.
 
-<!-- Add standard metrics
+For basic monitoring, navigate to the "Overview" tab. Here you will be able to view a cache node summary dashboard and charts for key metrics. No additional work is necessary, all the monitoring in this section will function right after your MCC node has been installed.
 
-      Add scenarios for creating custom metrics -->
+For advanced monitoring, navigate to the "Metrics" section under the "Monitoring" tab. Here you will be able to access more sampled metrics (hits, misses, inbound traffic) and specify different aggregations (count, avg, min, max, sum). You can then use this data to create customized dashboards and configure alerts. Overall, this section is designed to cater to your specific monitoring needs and preferences.
 
-## Cache node summary
+Between the two monitoring sections, you will be able to gather essential insights into the health, performance, and efficiency of your MCC nodes.
 
-The Cache Node Summary box on your Azure portal 
+## Basic Monitoring
+
+### Cache node summary
+
+The preset monitoring data for MCC is displayed on the Overview page in the Azure portal. Below are the metrics you will find in the "Cache Node Summary" dashboard, along with their descriptions. Please take note that this dashboard only reflects data from all cache nodes the last 24 hours. The filters that are displayed below the dashboard only affect the data shown in the "Key Metrics" charts.
+
+<!-- Add Cache node summary picture here -->
+![Screenshot of cache node summary in the Azure portal interface.](../images/mcc-ent-cache-node-summary.png)
 
 | Metric | Description |
 | --- | --- |
-| Healthy nodes | The MCC service will periodically request heartbeat messages from your MCC node to determine if it's functioning as expected. |
-| Unhealthy nodes | If the cache node doesn't respond, it is labeled as unhealthy. |
-| Max in | The maximum egress (in Mb/sec.) that your node has pulled in at any given time. This statistic isn't dependent on the time filter near the charts. |
-| Max out | The minimum egress (in Mb/sec.) that your node has pushed out at any given time. |
-| Average in | The average ingress (in Mb/sec.) that your node has pulled in over its lifetime. This statistic isn't dependent on the time filter near the charts. |
-| Average out | The average egress (in Mb/sec.) that your node has pushed out over its lifetime. |
-| Cache efficiency | The percentage of all requests that your MCC node receives that are ultimately delivered by your MCC node. An effective node is generally expected to have an efficiency >95%. |
+| Healthy nodes | Your MCC node will frequently send heartbeat messages to our backend. If your node has responded in the last 24 hours, it will be labeled as healthy. |
+| Unhealthy nodes | If your node has not sent a heartbeat message in the last 24 hours, it will be labeled as unhealthy. |
+| Max in | The maximum ingress in Mbps (Megabits per second) that your node has pulled from CDN in the last 24 hours. |
+| Max out | The minimum egress in Mbps that your node has pushed out to devices in your network over the last 24 hours. |
+| Average in | The average ingress in Mbps that your node has pulled from CDN in the last 24 hours. |
+| Average out | The average egress in Mbps that your node has pushed out to devices in your network over the last 24 hours. |
+| Cache efficiency | The percentage of all content requests your MCC node receives that are ultimately delivered by your MCC node. An well-performing node should have an efficiency > 90%. |
 
-## Charts
+### Key Metrics
 
-### Filters
+The two monitoring charts on the Overview page more visually represent the usage of your MCC node, as well as the types cached content delivered by your node over various time intervals.
 
-- Will only filter the data shown in the two charts, scalable from 1 hour to 30 days
-- Can view data by individual cache nodes or the average of all your active MCC nodes.
+<!-- Add Charts picture here -->
+![Screenshot of key metric charts in the Azure portal interface.](../images/mcc-ent-key-metric-charts.png)
 
-### Outbound traffic
+#### Filters
 
-- The egress (in Mb/sec) that your MCC node is pushing out at specific time intervals
+Both filters displayed will only impact the data shown in the 2 charts below.
 
-### Volume by Content Type
+      - By time: View data from the last 1 hour to 30 days
+      - By cache node: View data from individual cache nodes or the sum of all your active MCC nodes.
 
-- The volume of content that your MCC cache node is distributing, broken down by the hostname used to download said content
+#### Outbound Traffic Chart
 
-## Additional metrics
+This chart displays the egress in Mbps that your MCC node was delivering at specific timestamps. The value in the chart's key represents the average egress over the specified time period.  
 
-### Custom metrics
+#### Volume by Content Type
 
-- Navigate to the "Metrics" tab in the left-hand toolbar
-- Configure chart as desired using the provided metrics
+This chart displays the amount (in GB) of each supported content type that your MCC node is delivering at specific timestamps. You can find the complete list of supported content types here: [Microsoft Connected Cache content and services endpoints | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/delivery-optimization-endpoints)
 
-<!-- ### Windows Update for Business (WUfB) reports -->
\ No newline at end of file
+The content types in the key are sorted from highest to lowest volume an each have a distinct color. The bar chart is stacked such that you can visually compare total volume being delivered at different timestamps
+
+## Advanced Monitoring
+
+To expand upon the metrics shown in the Overview tab, navigate to the "Metrics" tab in the left side toolbar of Azure Portal.
+
+Listed below are the additional metrics you can access in this section:
+
+| Metric | Description |
+| --- | --- |
+| Inbound | The number of content requests your MCC node receives over a specified period of time. |
+| Hits | The number of times your MCC node fulfills a content request by pulling from its cache. |
+| Misses | The number of times your MCC node is not able to fulfill a content request by pulling from its cache |
+
+### Customizable Dashboards
+
+Once you select the charts you would like to track, you can save them over to a personalized dashboard. This dashboard enables you to configure the chart title, filters, range, legend, and more. You can also use this personalized dashboard to set up alerts that will notify you if your MCC dips in performance.
+
+Some scenarios where you would want to set up these alerts:
+      • My MCC node is being shown as unhealthy and I want to know exactly when it stopped egressing last.
+A new Xbox update just released last night and I want to know if my MCC node is helping deliver this content to my client machines.
+
+## Additional Metrics
+
+Once the content has left the MCC to be delivered, the node cannot track whether the content has successfully been delivered. To access client-side data, you can refer to this page: [Monitor Delivery Optimization | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/waas-delivery-optimization-monitor)
\ No newline at end of file
diff --git a/windows/deployment/images/mcc-ent-cache-node-summary.png b/windows/deployment/images/mcc-ent-cache-node-summary.png
new file mode 100644
index 0000000000000000000000000000000000000000..596b382728342dae1cbc9637de2c4aa8aa0d6d92
GIT binary patch
literal 11749
zcmd_QS6Gux+b#?$@CYJSRH_O{2c<|eK}EXKduR%Xbfij2q6i`&AYHmh2@oI<2ps|<
zAiehz0U<z0A|(kB0)Kqo_dkxcvDU`gSv%jx%;dUr&)n1JJkPnJ4D>YFS-Dsl7#P^K
zwVoI;Fq}rwe;@pFiXI1QN37EmMqeY%#|#yNJR5Z5jPs*sj~E!L;@OU#Gtup{-ddKv
z3=Et?e*>eok>DQ&2FYOUCyz|t*y0z?hMG()oNT9`RXK#AfQR<eFC4WU6JP;LE*A^}
z1mE^y%9+~PD<#hUqXo*HtQ7%$H@b?79xk1R{WP0#x!_XbadP|A*^rwTL~Y7y${xQw
zM*9wBhY<Sb&nA6-cnL_HYPKh2s{|7IvqA`z9ACl@e%6RkdZid77^%>|>2C*m)D|0h
zj-Fiqk8zX#G~Ljc#~?&RL@J4lbYsHO$|?ga%~-g)q7lnAbD93=A<6G(e_LkNq05|Z
zF)$xor^k1HcGKgxkATed<lN3ZdTej95Nho+c~S>Beh)f=VsIR()3Wq3-|CpELoxVq
z=T_AgLtM<5D=w_vpygzx?>b+Z=@8@!J*$=h`vJI4jh}fi>s)Gb_+YO2NzT5+oAseZ
zB|iG!#Scy8_;ZgWOpKPtmZlG<C<yc{$KTqfz@pby9(pvb?jIc(+$|3C`O1m^Td!h2
zdIr0(+gHwai;481r%*Nge+N-)sIafQ{SpQZB;^7<^;0X3({Rud7h0qFRO6xY2}-mT
z#C*sFGaV7(pjSKN_az#nvmL|43cV(xgs?4dm(M#-VMa7gLPRDHs^4Yf5a(0(aq<!_
zzEm^~0^p{9L8Q8LpL$jJcx{f-dNO~F{5fi+JG5zXmLo_^s#tu<f*_}-s-{Tqv$jG%
z(VcB{{DBZB&btg6zg#UqR;wC3Qu$+PXwxwEs}GAF-_Oc9OE1%!EA2LaWN3gyDpXfz
z9F1-LXEwf5vAN}4>sT4h1<XQ!rQT6W9oV{QbrN(n29J?V{m4^ngWEbApK!T5eiFD%
zvGT!Y6glG*8nd7#%6@MiX^aWq@4k^`6U1tV!%$Klhy3lGH0wg_ioq}?t%V)YvQcWU
zMSD7Tu$yN^N~~~M^u`boz(D2Y385HB2I4rpM)g-y-oOpO?l%uevwF2-xppDeM!T-3
zC;Qr!^vTyfGuci3;uYa(k~4~f5WAk9C$97!jW*gi*dGf!6h5(px67mE7J~figiq7%
zuz22>{;K!BKzi^D`M6@KLH6b8<AAS&=}Fo?*uzw3*C`G>AYhq;dXneW6n_koHojvP
z){I!fMRcYLfR3rzx%^0exLireaStY_Q07!sW;5y~2Dm+#ATX&yUAcL}Nc}rmth0It
zx=$o3NK>@U7fs3}UC*P#5`-K@p}7n5ZKXtd;j2`$N{E>D?H&5yj&-YP2C~F&nZ$OZ
zHqRi?8)frB>k%CM;Dez<a@)|c_nNh3B*>j_`%i9>yHZw2Q}6tDjNi}sZmXZX@RX@b
zBj4PuGO8hN=*foInP5HmMcf|G)QgMwA93*3mS3>}yL=%N)sLo{!`&jxxP6oExO%1q
zu{?g6jcW~wL6rsWdUqUC9H-HQgrjMPz@Jb;)s2b(x1f<ZTd;q!ZA!B|Y-uJabLTP5
zHb~to6ZM=Npv>)3JN%%ptd>&aLZ}i!-XH|hXNEzG$qOJb<h$M8Yqf?Ij(vKQdkSWk
z1UD(D{mmYYlakvzJ<vl8m^?4toqI6wsTyiUPCLyH&dCb6^SL1PfiJlkRkPFCU|;@l
z=03`CC6SV$I^E*3RUJJQ>WAeo|1hP%3{iCd9qd+A(8A)cyPKf;)Wxk+54zqW44E(=
zYVho=Hsg|lY>=NXb@G8pAb|%g?tA+)Lm5wRTuREB@Qr^8v1{>uz0IbrA5p!vCajDm
zuM=a&m7$g=k*f1A2TVkFdlEM$k<cx4aaxiSs-WV1V@0sw((|h<Fle%<xLEM+u^kv@
zIjhowr@q%zo;%sDKJoHi%3EFzbVT($gDlNYAws<In!#)WxlV`xQg|evYkHlcJ{q$;
z;gz$$I3|XmZ-OS8S99Z4Rd{9_<?6Rr6FJs|vk$Ec;cLA5lU`RYa?&7nz2#!JPn<AO
zL-F8?=SpM9zcCIh`o}BMu&oFwtB$>K$M_hAq)7Ci@Ej-=5b!DKZcEjWTVvr2eNqT4
zjAwsFV{p;|b!&dm;)$wwN`%h+wW9*TkY-YG#*EL<aR=YQG`8=}Ml3=-7CAfwCRJSl
z%z$4^qA}J2Y*$+E`#a?FpK~c{{U>N6LUr>Mp!J}EpPvKP|9g=Gwb+9A*+~5PX7v|m
z&p^*vcA#gTxll=?9p1zjZT7C3#+#Gwh|+ML55dY4sE7W>eCg$N!&dJ}XF6@mL)g?J
zr_iQ8xl=Cmt>z)gpj~OL`rGiVr4SRhE>Q9xniH{v#(!MBXbNl1+S-=wI({4d6Q-Yo
z`u<wv`W{oc>MEt~`^OKXF|TEyXsn{W^V>(&k(?V!>Qu`7`1TzzMtA4g1{pDUK&I{E
z$PeEmP8=zGX9vhfTG}?wU2#ZntUq*YyyjbZ1dz0+C=K@ZffXI5$mATn!c2n6?gBwS
zyeR9FtG)a~zdoI7AOaAW0?(0MK3)n(1&uVpLE2H4q%ZAaJ~2i9YsX3!KDH4yaDWAk
zdQg>gnAeh<ebSL2z2`wu9iKiM^^?Tib6boP?#;8a!CybzXD2u@8nj+cip*zLvM{fu
z>FWYozpW2Y@ePR~fK$bhAJV;woj)kO&ve)@<lLoX7~Uo{^C>r@zgl)*$z@F>q%GEw
zD#1e-;n0I@B({)`eDo?Y(T>=7IF%y+5c?Ru(u0}x8=n0fXpQgwfZq7*JS%Ant$#(z
z6ei#n=5yHStCQW-8weyx%Rhb0kve?wU>v<QPu_3Jg$DM#26H#B=d!4pw{NRvP|GdK
zWRQo#znf}<)IE&4##CR)H5gxW=J8(t6K06ulbA(!yL8j=2nCDy;<X{1`MC)P52vcB
zo#wepQZc4DuWh@;kW+PkQ1%ceRMrgabTPD5l{c@e?$wQCQGlmG0yZ$^-LeEc_ERj`
zV1M>H7F?1rX_o0(J#IEvreU3nc(eF9*KAzhN-KFtT3gqn6exp5y;y+gQzMLXsHQmL
zM#5iEFk!-^na&)0G--b}<Y)Mk-*EH`3M%*b@d+aN4EQ7{#We^&jUcd>`#mvRs$W$|
z9Bnn#l=j^=;<Gf|Tbs%@WPR2O4j#>yG~!E7Ls7K>*o8#BU~TBwt<2h^y`lG+@XpqQ
zU8|DqE*8h;qxN{xi{1#xv_&lP`W`<yoa^3^S(2#Dp0V$owB<oPSB!)-?N}Ngn=E;>
z#G$fY7;>})a8_}EiVLhJgg^s9Y_u<jd37DTGDpV+6*Cz9-l`AKc{>XAvR6%7iv=<Q
zy}tybSfcGlAS0qfWQSYA3?*<()9RupS?=#j5u6!US-yJZik$2C&m663)$=TAG!q*y
zVah6|k)0NJqQ3yIFcdw?ls=|~Mg^4*2vn4t_r>MGfE;`$pg-czTqjBp&LVi>iYhY)
z>V88GDsj2f%!DbEU;m)<*J-hmIazv#mcCu-j)xT%&RjlQ{ENJTkYjh$s~D@YD~}7D
z+`NYzd~b}yd0RI!+p)@d-nbZNh^KEAq@QDlk<x!NS4H!S1$$JtnX`-^yS~IHpOl({
zXq_D6-iL@tM~N-$Q84e{mYBA$i2s<!OdZc@H(lH=ZOk*w9-OGtDC^?3d)@7u8Asc#
z$vG&5Z#Gj*Gz4&GKOyL4w{<r4({o{+pGE^-PuhulzcZjxR-Cs&cIGeJjU#v|*T(2?
zz3nyI{ueD4xBhS7;^+9kr}F#%6_6J1qd9h{YVTyRc+3Mm)^JbVvzt*tP~`*led7CZ
zy&VoTD(~3%hcu1cHskxqtrp>lZ~HjsHBMO>_zQzBnNOlQjQ;ycWvLU)&|iF8D*YdL
zntZ?Y+f()t`jdxOO(rdLssDo3|4l9a1B?I9IQM^S7O2P-BvC_5L_|whw^~?i9Es13
ze}nrBNO*hbe~S1ZBiL<>nJi~;AW~R-_}_55m&?sX^)E^I#FZK!-wFwg?8(&G64hPY
z2l2njKPQZ^8u`wm{1Q8JSxP8VxQ=)4&@f~(aYm*V|F$mv48DZ*rZ^8ZQqhK`*l|^~
z@T%dT<&@j;_=Ypf_!p};`SpUWxEl%!<MT|+uZSk)<id_?`fThUcY3ium3H>H<D>x{
zArNP+o@eB2NEsq&OA)dFyFtq~ngmRuXJ8l51*IaPg^}i_OY--dO^rm$<w`#*GWD12
z0{UE=!|*RA*MecCz$w`k9+~k|IUJVMv=+u4M%%bzW7IGt^tn+$UqU5Z!j1oW;~lL}
z^*$vTlr=7&FhSxfp*!%{-Ub3`uaHkVK3uoiMf_22IaP=P%7r{i06bS|yh#C2Jsb9u
z_^mV0Tkr0yD(!8ZIC@1!x&4kw1wA_6@;ao+RKMz|rA`uRUJeqG<Q{K>Y2<A=HR*=K
zjSs54Bn^|2&sG2xMH}hQm*0q4cktWP7pyY7tqqcfesiGvWLG9#7mDmB!-}tRN@i8p
zhCd9wVWJ@_8TmwSU#&BOMGas#Bt6VT#7Aa=s$2S8v%>J7y^plsU#r70>BZLcx%R9z
zP`g44rtT|{I$IYrlV^L=WEEaUD2>(51U|pTZ)fSqPiQLWZX^xW)Sj1o=pXo|BU-Jc
zd$W1M{m(ifB+a8>p<>zHuC|@`%<6h3_tvC%c`X3kQ#e2UqxITk=$~=#S%Tcx!1v!z
zYwppq(rwCBT8jer&@My5k+%n#>m)$g4{kNZ<g90;fP;f8{2Qm=toP@|mZvAKbni*p
zwjNi?UzMy8Fa4rjt2hDEZv;f>!b?*|jrKuxUVPv`Bq{i7*4lE%-Dr|zcYLE{PsV04
zAg{e9i?V8K)Rinserj5oiLhLoIFH0&n_MPFpOKT*_5J|YN8rwv+S}?!cd9nxy)(iW
zcwO(|f0PO@_fYiQGiUo2wyT`mX~99@*6S0OZzbIW09^r?xf;=<O~Ns-T03D#rbUpW
zwQ4TM`L*&5n?6l6qItV6IH&JE_YpZxsKc`oX0W=B+=DnW`aZe(U;zH$OS(^t>zmJM
z^$pbOkT7^;AxsIkO@&;uR5aa=*{qJ4RneI-p}?DRh4e>cos1Pe++J4SirXOACQDY`
zaiEsPSJ<UuoPT+cla)XJ7?2Zz2cJeFPggJCpJt|3;B)0GvN1~DUtGnkkH*b!NGWZO
ze2LcLtVC;y3hxw;HSip70$4LwUp-$^qE=iJy;W`Q^y$WEf6n>2FPX+CB@zqMTRpj1
zqu=c;EVe4DB7z&H6{W(C`^%z8{yZasWz87htuLU>*)dKuk&-}79&Va=j#cvws45<<
zaK3#p#aJhzB>6T6s)%#c|0~a7;W-M#6E|Zjus0>VyMU?^u&8(N+H3wN$4TC{JwUhh
z-m3NUJgVTMpM7|@tK8iwHDy~;Zq5y*#wA)qKzV{^h}hN<i#|@jEya6WxN`mH+83mU
zMpXTZ0m|(3?)Ip#=cHX?t9B!b-v9&Oh_8oqy`r^vS_PX?0^Omcig?)Slhlo_4o<I-
zJdCLsY|#fSb8TMU!}e9F1lpG-J76B4oPA3)AKf&e6EFz6<JfK1O+0TGdJ-^Uv-23O
z-vJhJO^S=PbMi=R3bY_kFX9fRr*`@0wyRM>WV4=&g~UX@Mizrq{(GMJ{r%jkV$F%o
z2_@#UO8U<(gW7b`iI#i?NAA;;#zWRLzwXtBi{N(c8^(_8<)>N-r@aO?ik!Qy40bKB
z6sWMD%Uf<<ZEEZ^8{WQOGPOGuLA~IliOa{r9eP%T@dvopZNj*Ing2gSyu0g1BgSJ`
z{ID!_xcIeFc&OwDN0M)EJW$U$pcVuRzw*f@UA&AaLM*9?HB$(L&C6qk`0we7jV2EG
z`i41}edzll9CZaJqna$QMQZZc6q#b21JwryD%_jifGq?LHP`s28gDBLJ0Op}HEY$f
zHI*2rxVSFzf*e<1*Zc;ywrsL%xgK;~l{WEe#R)!}qvq$Fz$qnoL@l`1In~$E^6*Cz
z$=NIA067&N>1{CEhw#yHX;!PQ^OQZ7koQ;sO80!%+btI^ktJ3}7pf$5i^3O~K-EUw
zpZ-|B!@jvBU%l{F#Sf~L{Fw;SORBB}hO0CQYPvVLyRIeX9A5s&Q@UhWyDIr<R@I2#
z&n(u>McQIuqD?~nj}ySLn?4sNb{(h!ek#UwH)Q>Ll1@#Dd*3a(dduqTKsXQl42aj8
zz1)^#tmzhY0y)u>zL04}5jdBTmTy<=W>!m38_6t~x|6lIRIE7a(KYXlh;)_g>*xBW
z+bn@`Dqjde;*w5JHg{#Kz|&F}CZd4Fw#}>-%?I1P?>Fv{H?7GRK#Jw4nX?aLpRdc`
zEDht_zTab+iE{HBR+<AZiu4Vo`^BIh&hr|FV?tnq*-5`eSNZCqeSC9|y6=1Tq{$3a
z6pf!vsfaLnzFr+P7{;{nfq1ky9|_<XIv;gKSzplU6IU+e6_wF6I8t(vGwD@C2Exr>
zN$jM)yUqIn3hQ-Z*>Z8iW$>UNi)Aw+MB+rl{k>V;4RH-#F1T7xfxTZHl4olUP`i?j
zYN&ErTvGsCRkn{{tIRLl^$T*l)RzkVT4xq#pzC+9mdrJ_uq1__<P|LauKRcNa++_7
zh79h%QGh+wF-lv;KKZTaG|^-qX?YR)1_VE+YA9X}1I!g=Ot0O~T}AQF{2m^j=L6>@
z)+on4@kE#q2VK;D8?Y0RHpq}n;IQ1ly7i&0osIP)mdxeT5rZX}^TDchrbOY2xbnQJ
z@_)|yL}w6Q>HZOs$}~|C>NHKXs__CF#9i2KQa=wtQnTRitncr?Jrk_mq4W;ss2962
zRevgo{M+_pV9;llEas@pCe<eD<0ZxO!i-wK0l0IM%@<}0IPsox>QjV$HZT{WPI)j+
zwEM#Zz|66i2T?IJnv6?&@?fwBO-V<Om5AA80s52+(Vks34l7ub(SuLFqplr-HwAT{
zT^d?8XI3Yr{uA}xkVfQ8s>N&>V(mqQgl42_cH)%#n_blEJMQv1k0Z18JKYM|+_Dmv
z0i5?yEuJpoP?yNUuz!0KV9LnFku5utqUiDOPMCV2i}!3?wV`QdvDe-nz|)UmlVI+2
zpxT#~uUd88oj9?PvU^%&npVI}s*O*#ID2G?$SPs3WKpber!?cYVtJElR%SAvsP_Bd
z<JY5l{@Wpt_9Gt-J&JH(pL>$9v!RiBmtRfis{Bh4Q>6OM!t$m8eVaYkG=&-6xpiGq
zheFe(w2u-=;w<I3M^7p?O(K?SSV2;ED`kMhotsP3%588Z73pQG{yApye5<?K>(`6X
z!`U{M*_HWNE}6cjdVLI@qN>ioiEjvBCIte*5`5A7dABw@Of)qEmAgB~XqVWo^+yAC
z)26p|<~k2SAex_MNQL~1yn0RIA9b&k!f$%v^9urpym$+ltuS_bWm^f$%0FQaYPvJ+
z*)2D#M&s(mYLmNE<mLj!KTe^7SAEAD&UHk|6>{tj|K=g~@36D^yi5i@w6j1rKgYy7
z_SSkbVH%E)1B1_(-ne+c+S{#tgXRDg>|8JcA%oN#=Hd$jxDzLc3QB=PN_S<7@+GAJ
z;UX%bLOLVgx3a#n-kxljwZba6-CtYVstWu?-=W8256Zvg?{?3q<vSv3kIm&zrMRaE
zHH-nqM-LYrsLq#{EctG8ss5g}TO>P(=H??$qi>KFL|q*4w|LGP0KVvcaE|0q0(G(5
zm5LL_$&%UIG}lkRdXpwkEvghfxHreA>rq!_8GD-#Eeg-rE}EIT^pnvG+{buUGf1#_
z?CoM^F7(*%DSsH1^}c_2EupwIrd2n%zh@v_cH833!_f5N=V`W6SP#n!6_-|pG%Ai#
zCzhRDRc)sIj4LF5C5z0UzY9bGCM8x~_jX}>Amh%R@6V?`^9FT}W0xIcS}L{&E~?az
zT`0yxkbFi8d7aD?3gs5_EOSpHRisRUstHe$QbKHV1J|#yb;wS9+zn1IOfek_!&|a9
zvQ0A~H2imk198M$fWN8pkPQF4{J;&21PEtUt~mp&@&2|bmSXFw!(?r|sQGw)#s7Cv
zFk{)7yC4c40^W9^(`+2WJT<I^8L7F@>J=}weHJI@*6lVmw4Se^P20&>@Vs~r3Vs<^
z{d|BK4NxGd!(?Y!+haldcEi52K*$c3ID1;((5WY=R{rg1tKuxFB`w`NX!x0^{-)AO
z?fp0p)yZde1PtP%+A1+@AuxH7#HoJYWuO3U#p{7&RO4>0x2bci$JS8^>19#8dpkKQ
zMLdzSd_4KspIGBwd0R8=%D`bq^B4U~g`brx{b$?0T;`Y%xxlx$`(tpeL`F9b6R6ty
zBtFXPzG64v=gzW6wiKyS?2^&QKpnzD29<lI)?vkbgE8%0a;;v}Ch5q3DS{m<Z01R5
zU2jE^-`We++_CnXDBrv2Hu+`4ZwUS@v^CX|*K9N8Cv!b~6>>UJW4)#A+-tp>n*1wQ
zt#np+GbZZ)5$CAU*0uAa=$<Z%xC)z$Rhm#Z$}?RWo$#<ZSuIR8CDMtEU5jvCaq!S#
zgCy;VzqnJ#UZgRC(pKD}##WO)>^d`5mf{z~)4OF@n>qjG3h<kD_KBy-Wr+MLN2d!&
z498!pXFWi3+X8jff{(f3Hl~uL<ryHIK8+VY-p2D|t%gdYjI0)l;YH-w1CfMQBG-E(
zt7?;#EMq#$PK4hLTG14OIPn>f8k%w#8R~s5tcg90B7qq5$?*kt=j0<co15t9cVpL8
zOaBG~L)6MobH+WV%qZ)fb0(L`6MN<+ns*I)#yvZM5u0UWWxVFS#NniWwSyHI>)gM*
z-}=94GXMYaZt8z5XaA4(@&B^<9rT;Wt)>K4R@Twc(XA*}lsgqGu&C^)FZdOb-KG*>
zv^ZPy4!~{#)DbPE2L{37vZ_?_zqgac=?C?WyTA8p`u}qO4Kc^Q>DrAXg_LPyr~I7E
zoJkE&TerLMwf~9)MaLrJPjPG8>FZ3(<&_QrIsPZ>xWGUW;>!+D@qYQc4HxrKSgB5e
zRP=WAt1Xye&7XHHiz4Mwa$ZN}1k{GU{Nil5L~bf@jpH8eC4u)5p=l~eC@EeS`o)KB
zia9EgSW%`wa@$REw=o#9kE@Oud+*f@axDzLXG&0i4QwptXg7VbV)oO=H_hlkko2@6
zsP!7wlHeoGZE)Cn`s)>W8Ge47&rNXsT&un*{#s{~TiGx1KXZLRi2ze(pS#x~?nk9Z
zVKypLs!6Ix6~)mgI#*?u_Ds{<W!s?>xay9H7u)Z?H-c@EYkeLEr=LA&-L@*9yV7rU
zA%!`bbI=lG#H4@MH7>S6sicKkX4Tk}Q!zMx>twB}DsPO=d*{Ipz)|(ro|`e?4wx-l
zTFt!uz$ejZv6(%HCmgV<ZW~DMO(KUQh2T^AqgebOtIUMS!{IF^b#nMKu~^DhQ)S7J
zDqUTGI{EaSJu2Em)SqISeL7tD*c0U2Xt`VaiMw@|1-HYt;|v`mN?Uya)E!6!?UhFo
z#ZX3)fhi$|f|<(vHhRBAg<(3MTN<d}{t6j<(G{NyA7E(p!SOrm8QM_rUd4eKD%7u|
zHs^3``gqfZelm84vXO-a*nZ~7D}=@gbN?ZC43I7{^p-NOtr+}^G-g%^N&o;Qabhjy
z+2Z()%|h2Xmpc?%4@cYvh$rPZNv0?~o-wwGLkmOdVZ^nL7SUqKE&Gp~QawItT>|+O
zWp9oNFXTM#oI|?%ceTh8H;@6T&L7}G*6QO^^5RVg8BUXgng5Cn2~42xGXg%nl*edz
znYPy<Pe+bHllD@(!BGETsTKX8>wBtFPkS54UJ0IIrku@lq|Dpb*}9<cF5&t=J7!Ea
z?mHBnF%DTytZto8PIe4AO@<;B5;E{I2`wr?j{~j&ZWRJT?;63LpSH7Ip3%E?-pk^3
zF~x%Rs=7VDi8wKVoY72_Ii#@iNJzwqOziaVxXOQplgj9rfsKR5P+AVxuPfWM$;6PX
z#@^p;)H&YQEMOTI=dnWv?}?fwE2$x)8+AVZFMHkvwS8yO?|BNh>-S^T4CpKEy6Og5
z%glr<S)nZ#;a-M-O+p74+D=PggEPHQ=`?AXaeM3Q-RNOIRD8NQCc0K{LPGN*7<T0m
z^yTD_!!e)5I@m;Q`5QEL`d-~Q3g(fkOlPnwV>ZQu-Rr@9gV?bTz*dV%VF|l+D91Wp
z@UiiIiI+QxX-3aEy(y<O$<w7CpCileR5?@5m~-grC!tDc;x+?yX*-uB=Bp5<)U}c4
zIJzj&kj$NFL6M%{5=N-Fp8TwO|5Vg8z5ZE_C-)>QSy^1OMB%2m%3Y8`wafo6cBsBs
z+U0*xuF7bhiwf?GiE|GCnqobI!I~3asNoMZn!mqX(<JTS(kl{u+n28m*mNC><ED1@
zgfS{r9<I^{tem_`x043r9ImQ{yp1JAZ=&W&DG(7?bEA+*k_1I1+RAj?n<+gxHjTaM
zmjXdw&t*wE*}x68@ae|YIum{yv;=ynZEj1{PS||aUffDi({-)*jU>*iwcGR8XI4A%
z*KZLsI0BFF4gHsIxxTKgI+VN^d>P<XnrY~dMFCwm%OvP1a~vwxx0x66^{<|QaixQk
zxa)O>(!X}`0}GSpFFgk~?#Rzp^k4N+Mc@2O>z6z&ON>lcQsqxptE-*2YH^w+F(C*X
z+FDw5bJ)Use*40IMULkGh#V5&CAQJ-yqZ0AikIDH#l!OakEP4HmQZ-RgEf14X+nqT
zv$<5@wj*r@M4D_2sTiu@x_58Cc{i1GOVH~`1i<y=W!%&9pw6uq+Be5?D{&^>$rgsl
zAWuC5UL9#oQB$_{LAM4EC<<Q<sMgVDplcijS~aYD5CFPuVg7oqm_43(J}>hJ&rT{`
zK_ES?u{Fuvp{xNz)t>zG>Vf<ACZD*B={w@~QUPy6&c$25-R=p(F+0{FPZNH8oq@~9
zsAv{&&M3&H?TzQYb(8xz{a0}ap=&g%gismehY@2$TAj3PV6zXR#onJ2dqyM5czQm<
zb&Bo%7KgD|q<=cURqlk%Tu~fSEH+$B`{0OJ=_+aSx}k4cvw?CB)QpdSnEQXJzk{|v
zpgrrqCT#cPD<3gjQ@WqX+dwPa(ivLK3DE|FH+eS>s^HP?DIZ_mip%>}KDKNhYiisS
zA6m)+D%gsam1?-6XOxyP>2?h#=eszdO2`|WLB1b@W*iQFDFpajw`8==%HXsvGkFao
zxVQ#uLSY<JDGy9qUNXJ%N9Lr<KjAOPWanFODz~+$@e>0=cixX}X<U)@%=?d`8JYPn
zWvoJ(UevtbD3|Ksy^*hb+T+f;RsW`?=POc74<iJ0z#QwJx$Rui%eF(b8z;PkWvdM(
zXI^!k>x%se88cfFl%;*_*x>xc^~<nsNOy_d%xgv|JiPmj9AVxP=y84NVG*#u;M4Jv
ztw~^%DdVip=d`@!O{T2DnSxJ-m$<UV`q&a<Ei=#(wj9XIt@*4$J!?I9zPaswE8-LG
zK4r$t%e!JeI(MyeJ2!Z5*}e;eZVjHThG->$eVr6P)@!`~m^!GT5h`<Q;^C`-eyu-}
zCdRK>GfU;No=!Sd+Po<A8O~<dv5eJMt)abjReM&D=ohc57rIw@C?>2}_-*V0)wE_b
zKuBo>xdz88nOlg+TWpp7mQ-9gKRH<VK~BqiY9+6{^OL8nnbzKv(i@{n^C7_yMr`<_
zT<&`A0^R3$<IOEMSNlX~UzGcY<FeYdnsn8}sguCL4(xZy)w8W<-imC;J)cM^V1+F`
zqI7SpvBU0<3$T<~5q}9c4M~ERU)n?!z}Rg-J~v&h)7JJll+#$R@{5#ZCw{|O*4Zze
zUpQTy=0%xqYAh{3m&0wpk=(RKt#UvVe#n;HNHyANl+}{T>eoq{Z7l>#8{I7Q(8WEx
z+3-O4Yw*bepnRBq5G;ua8~q8u72P?A>)M-fUzL<sp6R_nAA_zM-ursmB_7$$HWKg~
zTV(o4AMJWNDVBJ5w}}091%Iq59qJfTHM?p*tCN9&8A@LEN2f5NA&*bv90K*etRN4&
z@zjKIVS$sLYjutbVB(&Mo$<W!u&a8&?@V&2kI0=!m#AyC7Acn6josKEI)3Ixk8^{|
zduyt-gf^bw6-{&_2g|(3#Ven(Qs;?T$VSlR<*3;YFW+MzRYc-<4>I5HCr&me^Hf^Q
zcV4a_x~h@_oId*&M!)}=$kVgyf_u%`wTN3Y`g09~gg9V!b6B^LR)22F_Z(H?P0cX#
zS*c03GDu@SU<&IywPCb^%W+dGuF;bn;PaWQa<sVJ{fSMd^<F0}dPk}^&_hRbXmrWF
zCoH1ce8bT!<4s4#YW_4gaCyB5m-2p+bn~{R0p8-Y-6XAcvq)nqJX6?<d)oMX+tNsn
z&%>5;h2yf^o$<U;M!b`N6Ga#2z2X-w+fFma<1Fi0%(`tzLfQd^horRoovHc-i=ReS
z#kp#trqR2n7`D1U1FG^!8}^Ss4IM`3AFzQ;m`tO4;eyhBx6_6z9CtCl8cMx6hKQ?s
z@=Na?u5DfnA~qh}j4Q^QM^*<Yq>{t0(**!kAynPg))LOtF<X7R!idQr`U&NaYx~A7
z5+)F0C=^s?DYIybkS74Y67)4&3|+Gco}Udgop5obLSC}~Kqxr=z)3`@c#o2aF%wVA
zM}*kq!kWl?8K%S|ou*FRIMd(@pvC>yOUx_zyPEp!=5d<Wq$<1Hda5;4p{08PG6x^c
zo`R)n5thDPZmI4$4}4bZvd)16Og$AdwD8U2u4YQg(5z#p+y1|5jw7E@q?<S@2okr2
z%pT8$2bzBvT9#51otRtsG&pWoxA^O?lEF#8@5tXP?iDc;sOlyK<#b#(d9L>>^eG$S
zAQ<MP=jn6aozw|0%U|wub-vyr7F*S^ZZod5yE~Li=1~_*pF3E0jP&t1u$`(Obq8G1
z27dFtlX}5S7IH=n<tYXJ{%QP@nb3--g?z+7sf)8>#3n6b1buCz_@j=DR7v~y{H)GY
zri=Kps4blj*it`%?=?+Dyxd-Ck!-fPFmYR(uG^TV8xcg4mD0;zv#)61)Y-7>9qDDy
zAMeNh>;oJuvTv8Zo)O}1E`~Tf39C<8af0_=L^6uVi}Huq?m1K>edcQ3ZIst*xs$;T
z386#lLDQSI=DO1?XWiZj2i(`6@GVTWKI*;c3|Y9hLi(v^37K9F`m0@-i_}HCY0J3P
zLV&V|*TRhEpj-sx)_po;hMgQ9?TiHLKFGb=$tCcG53z$+xaks3x@5TW1V`d~6Z}*Y
zXZnGU8{O;5>puVeB<$FJ?ms$*s@|Df_eN;Of}9gx+(4Q^p2xGLSI$S2Rgpquo2&C)
zLFoJ4z`;@Od3W!)EZ9b@Wp4V)r_%9;M>_T!X*^14(VLmH#yojFucmpamk;CIKgbTY
zn{urrDvm09e5HPxy_McHfkas13{{fdYW(`j&Wn?Z$ic_THnl==zd5|%*KDVtLCf?m
zl5x|*g$61G72?;u4!!<JxEpyo<KGNezS-&?SSIeAHBBVob}va^LJrK?dB71SNvA4R
zgk~UZiER~*KR_wJ*KC@?3Kiu3!A8p57Pmz?&rHQzsSCMYX+;gqn$MDKMjf&zkaVbZ
z@FLi&<$g&Bv{Gt$$1Sq?MSypsR0uLh>2kbf)5I{dbSo$r#nG0edIkHVt_)hN{JO6e
z3S2Iik>eXjTz-Qc83$$FuY|$*lwkCo@{UcKjZ1+M-=FQ3D4Odd|Hq;cX_5|ez?0aC
zYl=h7j;^+%<%iSpZ(U32<aDez2G;mm`pqM5Z%ad+cQM#=w@w>$B*gbQ$Lw}X`zd%H
zKoZ!CpC%i9{r<be4qyN0D=&lm=@oGXj$|VfaIz7D)&;sj_lMYNI`^-CYMYSSzupH1
zkpI;Y_kW<r!LfmeBPQ0wz`!2!ud7CNO^qDY_SEv)Upe3x>yQ1v-q>yb_YN61`?1uM
YaK>T~@X~lXy$A+vb-gDQkL|<$KS+=yJ^%m!

literal 0
HcmV?d00001

diff --git a/windows/deployment/images/mcc-ent-key-metric-charts.png b/windows/deployment/images/mcc-ent-key-metric-charts.png
new file mode 100644
index 0000000000000000000000000000000000000000..b1d05e6103139bef459935e9c4bfeffd5aa30ae7
GIT binary patch
literal 51903
zcmdSBXHb(}6fPR1i3lhNNbk}?x^xify-SxSok;Hi0a1GIO?n6Eorv^~^p2R&dkqkh
zocP^2XYT!V=iXoEyfc}1zsY3nti9KI)?RBplSnNMMS>@kPXGV_fwIy&9RL6e2LQmR
zfBXpj4rq!AioRiZ=qSDg)J{_GqaU#BWYuK>fckj+2TN@9Gu|g9BM$(8jOE`8Ls^IU
z3;-C_Q+_9_=WBknj{AYc7KM9eIz!;HToRVn0OOc$kkv9h;x7DlSQm1{a58~|Jx7lF
z_*;mxtj(C~=g=d9lH>+ep9MtzZXT<{jCld4LpB_=5x_UKods2J2X9J3u(V(3qbCLc
zzUw(6E&dy6F&AU~H;9Tz`R^|CJAwGW0UM>xKTQAtc{!E;?%(Z|@ctXTAYjM%HwY<Y
zK>v31r6u^ku@JP<cXA;*anz#}Vtl&5ISTor=ZeBFh-6D<%CT9S{~Q#1dypw<JJ3q1
z7&rRQhrwZf6hG5O(|M&ooqgb~bMJZzzz$6TP=D6eE3uDtFvjG?OnFJmlhwfE*qp>4
zmQRjaYFAw}Zg#rl58*cJcHiC%hIO6qtp4}C2sy0-+k*jdb}=ZX7JnjBGIc(MKekz*
z-`O9G3ydFB?mr4to_s$`AePxr%W()ys4cd~S7C4ulu}zPvyVlK0BHT9X9>~aGGi?*
zbO)$Jrl?_xTKS=u|2wm+3ZNu)f&P{4o?kCB`^1~wx_~;aZ}_?HxoXhfhZ>j;|0gdp
z6)gAukCX|d0Dw$nSPDR;s)>5ywRf&^&`x9ds`5R<aW^uH?A@yi`jfo8@wEWqSYADQ
zRGiam=pvi>4-CZTb4zRQ^S72XIa(q=9BM-1VWg!z+ke9Sa~Jxdya_^s$c3Uw6iu_`
z6;<n1dzQ`o@Z3=*YP|u()DZuqd!Z#MZbuHS!^J-xM%XI(uM7(2PZ}#MYPv7`P<Io)
z%e(D6dG#<a{VpMBZ?$0{S=T;nKdV1@ij<ynI7&Qw4z!wv;cA{3&R~a?lf74BLFa$7
zsB35~eOkQLco9|GCMkCi_{tax@yhXGNlsTGbze&=B3Ef-vZfNsXrWUl!}wY7Z*F!I
zsk7Jfw_B%?(qPCc<5KJd#ii<_0GaT)Pw*}7O$Sa_ma^T$N8GXEtwc-eZyot_Z-uxx
zTCTph_o_RcD-tsM?`Jd9J^Mlq>Uirj5iGt@Yg`#|JMMk;cBJ0NYK%b@c=1SdCXK*h
zZrAWqGji*XV8zl$<npD3PvF}ub!3YyA}_e#`1sISU<6;d+=AE6Tb8V9^MhL3z_TrA
zSR%`^O}&J=#?rX+7$yKpuJed3mA|^vp;r3dUg@j5P*ul;J0ZcNHJqkPbGq|y>6aWo
zre<Z25_P{W;ut_amwoSWt(4rechx58zVb83|B!cg+J;k#e|%NgxzF*&Z;eG!oO<I|
zneuTfQ-Af#P@xb8k}3*%;PZ<W%JX~jb*D=MzGbo>@A3}LxA!kCT1Do8XRY+f?UuxT
zy~3x6_(0)9v1bi7RKy-Ye@P{Oqx<l!`#MQS!?7EM9eq%sD(j^c*{K!sH4Q2zl7a5S
zxJCSuqOE53$UJTTu~AUuLm6ypvlaCA)w410<ZU})ARm9`4I%usQ9!Ju{HoM^tpf7q
zXVUIc<2@#1BG@Ej&^mL^##G1a2r-_i-Z>%qvw7AqhFk>c6!iyEyJ^2xRmICGK^Qw%
zM%gJ{R4*Z8Ygd_bu+aG$)mn}JaxSr5K=b_T3q;@fpwTX`X-a8#vj{iSnCgDN6YXaH
z)}>EGtp!;hs_=zB3Q<AMWBLbM6l&D)lot>}@Xt_`?S6FJkoj>V?#OI?8OW!Ecmp2%
zad@GTDBZ9%aG*-5>_dB<^!59|>$&+QV8B|gcz{TzT<8EfxN?xkIR625y=}J15Io;=
z+9<wonu`28Xk^_yu4_2LWPMb7J=jZw$<_BLiMh-8<2k`aYgye>6V#5sl!@1;s#}^&
zzXQkq_Y>o8s)difqG;M}zH32>jt$?Nd_TfJ11Edt`5^0vvIR4|&#qEY&18Ef{hG_X
z+|=S`h&<6kbvWFofoF!_8Rs`>vV;lZ*m-lmUFwNpt`#ZrF|Y)+?>=5pRn@Waa1gN1
z$YQje#~F~QnRJZp@og1u0c=_F;idHjaw*d`EWqaG5tx<wR6WNlt&&|!irc|gZ$u_d
z7bAb+d)0x@ZucJM4C{Uj$}>k=QGE@EGs6<{ij^iW`v<it=SMRw@>z&tTGOs5&RMgK
zl#CD2-bknpr(Lhj=^5c|rCYwzgzx4>OL^pyl6bp_(U~&IMEwq^=R^dswgfut_gKJ%
zntL=ftDYMW)^SP-C+AkUKRH>JTe6xI`?hDhxt{l?y>oxZJAgG#Bd6^cy2evou5;HT
zyeniepNNO@IVs9DN+k_NsR~#S*u<+Axj_bl??;AqCvzdTPU$>m_j`Rrit(WMbc~-k
zXwa=l;Z^}ZOE&5os*L(MuiWORIE0@h2C6M9n(<=*Dm@1MUE~KYOl~B8?`^WJ9t^=k
zP>|QI6GIFFyGH_l8`GQ}gp=O@mw{TiA~jtu+;?(_&)4T+5jeoI_*fB*REoLvhJtA1
z&z!r6k<$y^062v-ES>h*vE9V!D@pnh<r}597ya08Zpbdpt0tppSk;uxx^vCm_yliR
zdmJm)hW~K@cd-QR+(_o}25cKY#XB6~fIa*nXkoMwPXOdgC2gS&0&iM9`Gm{-B@OrG
z^J18VgJb^CttQdC=H8LU&P85YfRl<AzNl2Ao{xwrnZKh=j<<_JxJ;(mcz7@gZ>BVE
zs|1@-x3Fdv^I!%o6IP!0nkP{XjDjj9lJ2Utbo78aKBqgFf-)l14^Eo`-5+m)K&yj@
zVz$BK^}u@7DZ*vVEYw5>1bIAiNzMa8Jrwx7dKlZ?$z;O<i`8z7x5Iri4W1WYAANK^
zRh%J4<*iqqC*j>WcRIojsQ<jNJLAx=<a*!s%?7(n!)PHvi&^vb!%EXB8Q0n6C8QDX
zZ;L{hUVkgx&!Q9wemB2JHkcb-UrEL$qia$|=%M_;%7SC$5<adpO*gzL@<The8mJpv
zI<GujMYy+6w^LI7{`}AVY<E7WXvo8`WC%4^n~A_WH2{}7JNbGfXVY5b?KD<Px?u>6
zwQAwcRR>+#2=Z<d83`ekIz}fqB%#ehI*$FjcGj*yIWlVxv8mN%#8j<~#^>zK3??`*
zz_&tgQRHac5#@5DX5nu+U-wbcz-F$Od#PkD#5L>@w(R{<yf{}lrJPYJ;l!2s74zw}
zKKV+>LF7DsJVR?$LHOD6LKVgs#tm@o-1Ic=;E#grs>qk<!t=r9?Dc>zc*`*JS$6yg
zr2@a9jj27?wI8mJQdqNYB*l(1rYdQQC2WrV0LJ2;^!6h8zs7ic`b3-cI`tJZ=ld%J
zQGW2v{yAjmj*Fe{_O^&9kqEGa@h_-UXG1D04c*$)%D1tVi)31Xih4m1_$|uytoqMN
z&3Kl+*%IV|F|yZ!E-f`yT)lA0e5&#u4B}9Uf;-F>#frl=Uf?GEXi(54zj$+CRYvaN
zsn!%z2B|Z%AyR6SK7;xaUuW?;*j@Hxa~bt~;k#K${l4?X)#ll7ZF(bnt5gp&o&BA>
z*}^9__YoN>!)@un)n;8oCMBx`)RI`68-bl{*N5d*al5osDo88|7kSirvzYOV6155(
zKiP)aV#$}}UVMw6W5lM!fg5w#;QP!8E`V3d1F1@qqgjAnd`BYv;AY$NrM3wATc3R+
z-g|`{CH`=Kb;q+W&;)3KH-?XM_Ia|T@M)BG1u-bw$L-=)BT(2UtV=xDzTm^YBA#MH
zC>`iw)6fF+oR(H2s!Su7@$P5nm*|B5xqdl9247tffb>n6G!#2|P}Wtt8)7&VFT!RF
zqOY)QHigrTiN1*x4z%-4Uof5a7N^?uO&8)RB+zT|ws8YnO!%i81hptv%l_I%TZoQf
zP)oZ8*g4lKSL{kiWSSLte=O1^`E-O+4T3!ahLe!Lwgy_BIR6NqjB$=lzli@RZUOFj
z)0%}LkhGP-$wpX<Qp~cufs(y*Uynvu<SmQ^HiOW?_ubZ)93umbBYrTwYfxiLyLrjr
zZKT=q5Iw$9Ds4e~tjnlBRW>qVq2tFL_Me!P?^sNtGDMbRd6=CjVv7{xom=n2?fb=A
zOlG;^<&d&+te%U!sUtsJ!oXH~d%-G?*ABCX%Wv3CelTA9E!iw%_F5)X{|Sx`&Jyw%
zoRUUdEtlm7!f6h00Y_Nu7%3`~3-efVtLd9B5(D{o0$wk&O;7Zt^7sjhSs(s}7SN2<
z-}%jgJR94Yu~JH>k1@TaOYeODoPk>dpY>Tyd^95r_S{z_gC)Q3x}2bjEhghS2yqP(
ztgq!S3T?@6hDRp@^;m;fi*GJ^q_1r~#HUP-M2d>8PUI#R`G^7qEvrAiqH<I6{%qQm
z@8MA5uoZ$5Lc*2Rw;YySME`1O*re`?JfsB@-(<C$9T8C@XHjOLZ0^g}`bNR{IB@@t
znh<D6N_hxRSEpw`!K0tSNT-CLj+Ei<=Ttg3TtQl6*H3(CUbyUwkknFV{B;riDJ`4O
zW4B<-iaFwayl_f77ijmJC%*>Rfpp|iUxA-KT^Ry{w-=I$c=T$V;+ry2B8$WPSX2xJ
zsNUAil`}L51V$+Dx<O{`q@4H!9e*X^sS+1Qec{bJaiN{ki!l+sYYi2`;c|O#*83R~
zPR?^LMNc0xg$<x0>3<|xhr{OTUv%JFseih4T$Thj@&VqQRdPF>nUG}Abf)oHI{ab{
ztMqia3fGPV9DR3Rc4n_B$`pcRE9-9Te$g5J^vM_^G6ib#DB2H2B-Y28YoY^e{1(^w
ztAYIjlr#O*N$!%nTalNu6y7L2Zt@m{c&tl;svfv~I_mh!uPE&>|6>uJ5lYm^`TCE*
zrJ5P}9_~^vZe^u4^25w76f>pbP<^Al_hBJQcZEnaBnf~v4g;c@r<n_3q9<a>_rFK`
zHDX7vfDjtS^~R&y>lkSwRvL-?`vEOFbm~OhCR#DpF5RA~TM=>l^yukVYMHI&TFMtc
zTO`&ShV<7d)0b~7uSd-_E?d_EZpN~CK_uOOP6I%sImo+mu?q|~hAwyNR&=U5K=^N7
z4ad~hY!cp#6wac&>7u_;u!q**7foKqe;R%xtu4y;wm(Ct|7A{vPJ94Bip=BG?=L)j
z$VS`#WO1etLf^9}a`B>Nr7$buefPZd)KB*q0`O=RCPEs!I!Qzg{3y`rS$Hq|6BS7j
z)&d<PJ406LaV_FRCS5Tp(v((%a;>d{RL(BI2kXUJ(+aHuMqYr7tYtsLCu-v`rB}J;
zbJ2yrzcEoo;YK3n9eb6Z<p@3+!7`-|_^B<btgIYdi-h!s;dVX!pvp}5@{MmoS(ykg
zrp#yh|Cx(7HUG=W|MyPH|4*nf$mbB-^dBP*=E;p0>lVL*x<A(B({u{*XG$j<TCI(4
z5F8L0`6s8lXx`8ir4ukzCAc`w?Ji;=A4t|#5VrZ#I8e>fW07(_AD=+s5a;B3g2C`;
zk+i3$$kD%zfuevAVr~z30K+v^SEGO&RG?gd?u(G~#pp_BS4Qp?eEBl|JrnP$)~`B5
zR#tFfb~Ekm{G`c4ro>3hvgBdvu3YxHbg*}?@<p`S+xInDehs@L&jBw=*mNI32C#$j
zKrk5Usaff``Hw%1>2kTqT)w8=@`?6b;ql2D&}I8HQJ?&nt_EM#8t7LjHvWiUQ)aZv
z{B85;9^`c6RPVDi>doI=@T+bZTpzqO<}DvMqwV1Y!L>Hb#RCP6oSbD^u9%Pm`v=$C
zvPaUf0mHbt8nF9ACPL~rKgWc3R|*X6WY;=fd?@n^bSN|s&5|S2F4G>Vw=q_wHvu=g
z_a2Dl#?&bkazhn=YL~BCa|7OszpjXIH<-7&WyRkUt&-E{1C!Ucje&`R>mjVD3mvIQ
zAHraX;#n%yBEQV4X@^nMeL=y(MEW;EL7BNpgFe;2@^JyUR<KQP3i%9T(>wuxH_w3+
z@X@BQ^=-6SCqY)*hq3%q5zRHpyX;(}U1Fow_}my3o<F?xv2Ba?%grVt{LR-s&#}RT
z>m5l$n$5NQqxr#HF76HGj&n|0s=>g9uAARXsg)Y1y#*liT8>3wft%b_g!-;THz6RT
zndvJL%I5+)?6X<Fn%P(6gt8MnkX$9q;I(;Zbx>@WF7YuWGUxF&R~MVkKa{oT-qbCL
z0>k^Ow32XFrD)ovT1MKyaSw>TrC!ZhkA<9)Q?I$Rvdi6#ddTAbDX7=JNF%=^w{rAm
zw^qnx_EKZfmF8hCbg+&_oTa&PYw|zUQJXh8QCuvqbBy73)wSzw6)s)aQmQ4Dh|yxu
zM%H?^ccRD0MkIGhn!u6a>F|;QL00_c*nxtgtNQc)V<yVE^c|%pA5^YXg0PI^eTw{H
z5j44~?CI0g1D)&^%KLrqo3Z>c&TL~WZmEmK{@twky2T$}b<59*N^JH1=62J;2$<^R
zK2EOWAFrs@F5weC_;084wj^xuU9Kt2?pAEN{}E9f-W8<IS@^NKn=XGo7jt5hDNm9m
z4WCd>;te_%gzFj6#rygmz<ewo+XhR4oO%vAF=QfZEx^b%k15R@!R0u+IN|QR>*2LV
z_Rv-uvBvXL@mkI6Ctf7|ie-ixzU)m7K^IJ~R_$3$8r8;d<d1v;bo;p~Vr`Q*HmUut
z*e+D}?b`hoeS|F_v2lCA>jdE@OQO4pbda@2s-Mr|;Nt=v6b6mpU^IS*a5?ILuB)WX
z*KS=Vx{%qjZ>kdu{5&6QB)*HCwYCr)gk*Uh9DlfwBQak(m7b_v*c8X){W2zVb%Q~m
zWU#R5m`z+LL0Tl&XD>cD+Rce+w|i2<1+r+t;K8j);b-q6zv?DrkJ!S~ExF&C60c`m
z%|n^PFV|fsil=UVgIh1b1Q_2lUJL;Pyyer-7__OXtq)ukG|4Rm{s1RSoty-jkB|85
zC9Tiq-#q)ma|t`%Ja;e=hTUHf8Hj^B{TBy`#4EkWec{=Nro64uhSms>|Bt^vjShVf
z2t*ab@2a7v{-{mXmY<@{dySBFa%UryJZozeI4&<J4w;a5*M{2j@}Yd#M721hj<4aI
z1_}ArEuYMD%z8Nftjdv322;ISllJ;~yv<^Qp8Do)*4!?=`(^?ZRyq$yA<tbC=;wkE
zFa*5k<;_SODR9BCq7vNbp6_>@(G-?{^YUQ;8;p!zIK6i||3NQ1mJa|V6fGVS(TEi<
zlw0_1r$&;n#?lI1oE6ADh?*R{DX%MQgXI?q_S@7%ble>5RYn<Kto*2p>*y8?IG(Hl
zcdZ@WoSt68_3mpXnPk_H$Btki@;%J5RV6(=7IglF!qwW)*?hX}?JqFh)T%6KbwKg!
z&^1*vL($Y!=M4~99dy;O_^LX+-P5Y;O(SQdPj+)KDi8up15ImbRUCQ+FKq7jmr5Qr
zXpgrv+v(+6oa*Xx@M)Lv?we+{R3>}jjUAmIdinL*!Tph^bwc@4yPj?XZGMTN!C+hX
zj*m{2S;ypBE9&Q*)<j>}EKZCu!_!;0U8D<L#5%(Eww$|kPXdzf2Tlw2=v%Nbuk^E9
z#m!H=ODl^Bf*W2D_&z9Swm@`PP<=Pp$^r}3?IaSPwD3RIM$psVJKvXJ;4jpez5ca3
zv!V^;Wf9e)ZDjzwDEfQvGF3XP6AB%Ffn>`!?dI_7NQmG1tKaT!%M0orY(5;4R@<XK
zvN$bS))lXqMJ|)cg5aP$ztNII#Y<KR-6^ob?z!~j%fBRGhig!k29TfQ`tG)|%n5sr
z?)6Eke<gIb3=$I&cDS&<APqnN1rtlUlLY5ow$xn(WGSZN1W9zgs_M87a+tJ}q{7mx
zrCtM$Qh8x*4PL)bt+Lx5O&xY@)31EDFf>->UZUb^bF9?c<(<@N61?HL3EcZNklZmx
zRK9FEp0SI0CjbD5CU^{Hz&2DhHQ|54h?LJ$4J~M-LBBdrdq`+$C&_-$s8`u_1~|32
ztZCA!qK$-TZ^!jbo9E4)+J&6h&VB?^Xhq#rqBS4Z7wcr7`zcR|R>(`KoAMer{s_WZ
z?0<7_Z#87x+|e!4)DtbmgOtMC7U5ZPE9<pGWiQQuRcbcqy2uYezIU6VL%y%CSu!ql
zeg^AW9KHH->J`!b-0DrUn{@2JziO6+-=80Gu73Bq!887;$EcA-Ge;ajO2M6yEFPF<
zt_D3T-vxxH9E<z{qDjkAo!@$GIU7%=?hMh?AfStNsz678)0a0xS*52SVTqWoqq#&$
ztoidk@&V_vm>hkwWnWL4l__yEG1jE``$a;zzC{a%;XIv+P{m-O8dXFVL5Di>??l#M
zG!-gVXvdA}k&GMr;O31pIx3V?Q|lR!dfi)z@p|Bi{Jom&MfP-M7$WBpcT9$w7rLAu
zEBo81(qpU;Y1b3r42*dM7T?LqI%_f3PP)67n<dfTS_?+jn6zu<Vhy}JQpx3_uJbzc
zOzFZR{XlVKDtU*O%erah-FD+8bo3mO$)mn1GOoz~2=HWJl0sRTDER)4+|UroIXp>?
zg58+3NP9H-p4_Qq;`-!2<2@GrRCn=H)-p8V_^Tk1*RSQs(0mKq{fm|>rX&3k)vRMG
z>LV^mEi>^T`4X{9OI9&|ld$_^>BwPk5Z_i1p81C@cxkMlY3)jYFY9%?dMC+1TX!~Z
zn*`jH&19jt5L~A~N0;BY*_*sD#=De{a7;$f!!Okj>7JJL>?uimbVtyz%2PIK5NLov
z)tW75{Y%n@+&F|!df>24)^~2GL7J@6ZgGRHUAM~{<}UTJ<}Oz`02|=|V%4=|Sm%-Y
zEbV&L8<%`!Z(?zEKA3atV~r}m#I-4|@po|EiVdh_8!y&|c0H({_M6XNNNizQdf6X3
zQ$udkH=y1?JPu(F^B1A}bsiw|%(F`(g9@Jf_DSh7zPv82o<ct!7g*CtQCjrW#I4Kx
zLXe4cZE}7kPHLt9ddK97?hp?-G#BINxupM<{c4MgH0o+LjXPL9<2CYkQSpE@;^<^D
zAicD#EIHHXWX;XZZMn@2GuuJDpt~boeWPc)>>AbIUVpX%RxrDe^M81YWAf7zgYC^O
zHvQ$PU#W2L1e23+1$U(}sNDnAgTP&Cg0&X-b^nB}_$_@OWo@NdY4zVG-NZnc*d2<P
z?k?|!JuTarSiTFHdOZU7-!Ak|?wHi5ky>%MAGf*ROrS^FXxm?1IK}F;pgcanvRoXd
zx;BQa)>tq7w8W$<yClq>v=X3evMO`H&JspdJiW?6lAZ&jtrKZr*PElF5)<!JW5j$_
zZa|Pn!-0o%;JqMCMj@z*EVRw1*G}BE-^^6>zL5rJqb13m6zhC24|CUt?#;-@wf9o{
zkn7#QwRHFQ-E~t@J(#${h7~JMsrTyE5d%x2;yi<9L>9u{qjZr-%&%YYenHHQ;&kD5
zVioh*QZKIq`kS2;4P%g=B*BdNCxZjY!Ptg|<j37Lm!L^I?$4)}eZTr|EjB?;3mf?L
zi-dvj<4wQg?WX|3)1~?%-k!4uSTxxy7MA0UX1KP_42lc|-Ri}?8yOz<h2^3;b2Ii1
zcEmux!ht=RlRK+~-FuMS7RL=Bo^2;A>6eo_9E7NRgSfma2l^y!9$2d?XueO^b44SJ
zv!B8laBWGIrrBZR^f})m;dquHOd^;OSm|}FZTQXfY#Ero|3Qj<w{_zFFoh&|QfFtq
z)91ugyu;<j1Ttc`H=k|zI6-jmc&RI1#1wcp_#-C>hY}2*P!$po>0T_o<kU?=btmUE
zevChX&4c937dTlBQ&obkrwZ^piIBUqHHMgo`ctr}H;;S?aWXG3vj^EVmOMrHdx$7c
zx&yAYMlxv;uGKypvT(0X7uZp!wpp;=fJ4u?+gqo|D@sf5;|dwFsO~skx!x|TD!=SN
z?>vvn%D<gg!_(Vd3GVh-Btks0YMIJ-<A22(Y+gPCfuv^dcw1hl>j!{QceC?FB5{6O
zcRo`R@CAXa>eiF1!66q;3zKti@RawZ*hDGQ5H1jOxle9x;m7@9&xcb{=)2wbg!sie
zU-10Iy!E|z0P^|^xm@W(&(>_34bs}&D9>pZXaJfXxgIv`v+%vkRz*nrjqwJP-?lq;
zv-aq1?&lNvdmdbF=kiQJ8`DApk4}YyW;-wTNtxi@hoY9NL3SIpcz_R=rRok24$_E+
zvG7Qe-HCj#%|39)L*e7cSE6<axX@+oA_XE^iFa(%yzixiXy349Jh1xyq1W{o8q7yE
zyIVDigTafZ`{WUbQ{!$T1J@w1UrY3PEGw69O`PyU)s`j^Tv_NSRUy!O<1vz#8v*IN
zKX=*;EU+$%>)t?_?9y>HmJU*Z2@jSEhN>V24~DjTK8I4r!y+lA4k!$a_>&EnrK&2T
zZ0mvM^RI_3Q^CzOLjx0=YA?|!V(3)oH&^q{T$=YVRXtk-e57;oHy?PD+aRs`G|;x*
zv(kU}OB{_DjG|NSiopMfkoX}$&9B7u;Dq-c+|JCWX_&^*{rac^+Udh7iIO;cKmP44
z%;(-T>mslf;}j?;b-gtxx~^Q9H01IaaHD+zT5Wu6^?79+%_BH|`7{C#GL$bF@NxNK
z8w4ut(Vr28pf*6!61V5U(Gvuk4CLu{lIy3ijz&f@slyK@2fZzL$AkHSKI<CZ-7!nz
z_1m4nttRfSpo}2v$AIDVq=!}Wlx8%uL5o?Caw4bQgG$&@@Tw&JF9dRHn(BD8#OL3Q
zgwuiENu9mVRCXg@)W~jQUT~T|)D)jf8&&J^{<EsQ`2d+aSnn+j1OQZ`(E{Vp1c~p=
zg?4eG9${f&7L@$VuOi~D_K%Jp9xiz^#0x)j@wu*7X~OPo(qCV7dTBad>W&^EzN^N!
zf+8LGw_w-^E-^ApnF?*I;MGJl$09{5F)`6@GUpsd^z!CnI$LC4GNik^Yi8!sP5iYj
z@q@*RFY;G=QMQ!t%EgUM-1o5~$S!ZrM$e~r*1#&9w>CYVnCeZGkJzwPc7Wn&u0}}G
z-k)Afrp+LqooXX6x5+}A8^p5DyoZ9+>jJ9mPPV0rCIL9;qG$iz{SxrKf4R|aD*PPM
zgK(7{iu1fx?KVek?EO}ZS4glp3W5`*aGRuYqZutFO3FwVMKlFOtKn#=K4=AgI)%Df
zy*Vy{OQ?8?t>3y?!*323OU85q$<R8{vOKiXpy?qpcnv{tX*#v+mQTN7mX?<Pedx}D
zYNZK6lSot&%*1^Vw-6M%vJQBYl!RK1Gyb1s6Yl?mxF!F8%2?thSP{e6VHTiRwdgns
zCGD8aHyRv-CZFE>OSzx?cz(nl!S&jEsXDn(iB`>YIITWu6>Wg%YnU8fjFq@qQ_Bw=
zNYdw2u;s~6eT4W%px7~SYdascA7mx$94nB-g0=ZXgpqM+2FpmsOds9d=3_1FxWa>A
z|0jfvEua|7Dp1YzgOJ7j>tdI^_1jx(Mb{SlEzOOUvc>N|5sBweJg*O%$X~D0XcJyA
zzJ2OYCtQYAf5-}U)h>~FSG#(uYR+J?jrpHAXnHOsAq8-dc^aiaOSq^iVAJ#j|HHoQ
zRT^gVeUqI4p4_|e!;E}`n)m!V-6>y?5yO2vnD@!lkoUevuZ>rK*w}Cqn7sT?)WrZT
z`{zH40nTN*I=i1!>-B>W5713L68_g$(+A0a-Hb6m)W^JP+Qe^C`3!v;TSTJtF|o}d
zw#7wNjMW+XQ&o4<*I|Z(ee*wIA%TsGDl%9-x7U@Vs>qCGS(>?)b}eotuZQqCg}wK_
z&O^_nTb{Zo3QpVJLG_z(WQGrvK2%!L<LBdDU6VrM`<v<Ja(JKdgYN3U@gCV>wSxcv
zOH8{<S;ev)qZ77DDSNhciKx+7hFt`&e>5pKWi;CTT<{9nF1`xC)4-fv=uf8p-kY*b
zqAbWe2&9(wBf+~0!vXOX*@dW(-W~rM=PO!C!u7CNp4}E{7(c$&HNeuO+vKvG4fn$x
z2oJEa+?^Ilk9Vc&u^;W;*!<y->AsT@{H{z#|D~`sSvGp@Sz`Bn;FA&Z@LvjqDIICr
zzfDTj*B5Ojt9y4u-`y6r*Pg~P**zJv2mk<nu%qopJ_1UdykMBAo{S3su#plkv*hjk
ziu6maBg_*WP61@pVHm~o+Nt2(ekpLCLhHhv(on@4Y5|0z=PJQ+Vi%mfmh_*`PZ<b5
z)&V!*IR}cWA9_1WIdR!IvU|D>{&*f{kw^J^a!ug{0N`BZ>xjq5#B|3501S~56aS)P
zr*sj|di|l^&;E^WP+gU6$>(<BrL|9N{$ow@gFYpLB>=z&lalJKXJ`NsV{Su@?c#f=
zeE4Si`r*^?#c!992O`%lCEA3{fBdtk=l^JFKk$fWHPZ&aeGHS!z)gEiBqU3lsSrtj
zEAxCu)N%7<*`F2@5EA>pO5#sX&_ISpZ~Jm|kvydEa{&_?ps3yV9{(@iT7=wxhV%c0
z1vjC={+YqO_fNV7(`=zNj?N2+NL+GM9~pI8UVM(YGgd$p1AYvR@L@4q5-tgOgKafb
znC`zxE(WC7W&f56t+0;;n>AbM?S!^7PscBPDqfATFsRAcVEx#)@P^6g?ODwyCdN>1
z^#trWeQfgt5)Z~o)%@4y|H%jmZSd)1C~*9suMbVk<~F`fZoSzTV*3<qBavB0c(iJ<
z)IWon%EABt=D$HYkMes2#7=|0gkN(W#!&p>9JW9LNy&cBgza(TI$k?WeI$<f_IQy`
zy2iNPrr4hyA3>1#)ePqfre6{FWr(n-nLt&cW#-41|4^IW;wX_=i3an=(@4PzHj=ri
zu}sMtEN}6D^Ws10*S&%T2=njyPnhlOsdE#4W-&CoDDQ^HQu{g_Q1Pl8%kTUb3S=;r
z%F<-EU#!%M)=;0F<1?PVd{!(5dh5vK$tBTZ{f*8fqJ@cauOaY)1C0&Z$sf8X`WTVc
zTXv6vf(CAx+>UXT>lDIcERct%khPufRp?F*I{tlLVq$sr;14zo!UtXfkFG<(7WwtZ
z-s%PGn8JEg6OMqF>Po92@8}FLKWr_jAzS+tTV~!lztJheo?`q(-YvgFlo<#xi~UdA
zCkoHx6Q#Kb`fp?Z`IclQH}C4tWzLlqS)N*+uJ_@z68w{>V@qtHSF(RC_d%zBz{jbf
zq@-8{ZT*cgT0hGFHd1#~=aKmPR;KMMmg6PEv28v<l(myenZXH2KW`c=x)o=+G4mCc
z9K-SXA-?kYpSj|^XhRD1Uo=6Uk8)=O`Wt8u9DwOnrVN_hB_kInt`|YgvRg_>iU3tQ
z57n~SOVJo`yl$Uy?MZD{h7Y^L)z`vm+&B?7TBa6fNIaK>N#o$pd#`_d!Y2j3I-$eE
zO2~4ksAuWgzLPmEPXzhOdIhv*+ry(C?mNI)Z#zs@O_H$EV4mb-ba*=ky}?|p`O0Z$
zKkv$;aN4kvBDg!JMtha~IQj&`<2y^`aP-x_@7Q{3>`+!!(QbF4tKZeZr=j`w7eqg^
z(klEij{5P5eGKcnc1eWc5Qpn5Dm>Rkt98gpTf0~^tt*a?VfWYU`odP8RYDf3_O7xx
za@s@f%4GU-2}vmI6f&^k-HDhUSXSOH78VnY)SzTC8mc7aznzt5mDCM7sNBuP<?*5I
z_;|2S-(&EVj5R4|uGQ+}hxsc<ef~V(aDjB|QED+WDc!PKQyziuDhgWjY9@i8uP^=q
zmh6`2`;JiQhH0>67+;O?8QLIUgt|N7@$>7ux-Y5(qd5J5?;_|QPip*K4eQQYn79r-
z$V0QTOmvjW%N8DI8h22LhqrYv4HOl&&I=(u44XIW)JEs<Hf+EAD6Qq;5mcCU99V@B
zM8cjr%AVaYYdQ>r`?r!Qi0CN79&%oRwUK<W>Ay5>A0F)ZBX1rB3X+&}?i%fkkW$9$
z#KLGP!w@xpPpv$KjKLxj*LxJ12~7b3Fy#8!#oN3RyKk(#Hnh^&Zae&u7ubn5hA*PO
zDN}PH6!j8^^9Dws!$dBB?{{Q?`<X*`F#Ex%iIGQs%Bfl<g{3OkUfWMJ9Gefc8@9A7
zZ(lFpvJLF%E38+UWE#X)$E6k9Kq|q>@rhn38+ly<e!&++%fEFuIV>8p#(R{;o}I3V
zq;NCYh)3n^odr`=wU!o_s&cY^vt0}4r*)j-4^`+h$mOT(?<9(a0<3c{mlu9O4dpNO
zG89*LT%qM3Pgp6^T>?FCI8<|rT@;Z_-=Lkd-%H27fi_y~tqecdgz;`(?Jbx=(yckq
zjI^qsCgMj-ip$cz`P$PSDClxV(X&@`r#QT&XSoz(RLzv>N5N?Shg`rPCnIg-p7Rm<
zNE)IpYOM0<NbO_Qpr$?P^W5*O&&~78#^&l6NG7?~69QlJ7j>oI%QhtTtIC<P!Syo4
zgC~D&v#nQK&?dPk{u+(i78J4aGAz8tkzCK%mYAOp6vEKY4dQT|;g6|8X|NRNVe@*~
z>xz`IVnfApeP8nn2(7;dM_k@6j-IzK@NCXaJnUmcj*WIy>CVI;nK@r-$AuR^IEXUq
zWnCZk?TY&~x$F$u8MV3VwxZrE$mpxXZfFD3gorN&Hy4Ip9gv(-5}&;MOH6R>^rm}e
z)kL_gA*Di}W$m|}W22+Q6%Hw$va+z3fVrk{bau4X;QB%GW`I4t8%L!2CiNcapGzoK
z1XeHWl$}D}*qeYagU>v1zi|LHh5Wu;m`hYHP{lA~j?YEfTv9$o$E#tuY|>KU=gUrB
zNd}hp4N`a0BTx5NI<C|ckp+I(K{ABTn24%M?rf-TP7F$oBs<Jn=u}p_#PzF+rV_d}
zX8;{oBRF1+%TDu%T&Y{|g>zhq#loxPz<5b-Hv>O^dnNzZUGa7@^QIyL-OPOru_Mfv
zdXWc}sq@S_yq8Nml7ckdc5PmZpLRcgJ|c9263P3J*IRQExi2NZaO#`XYakJ#)bFO8
z6si>64EoR&6i<yanBvJ~R8Nu20TuD8uQ;r~uM1|jAeawd?6L)~YnlEcS8rd0XYYQQ
zs1|ssj2S^k$gl;vN^{VK31td6{ou7ocw!;Ac)jj6f&CdlI!68PT)&i3RDuNz^xbWb
zJ3-_nf(LW*Dps1rZDG&-*{{3PyR(Mp0S`^D*#9;O7Z*fp>*aRI6rsDTrf?rv)6?Kn
zRtjko-~8~@=FlAF^8Swp*Nl-h%34-XOS0~lY9e*?32WbNnGCO!dAD`<DgJ(j>}QJU
zS1IrSiAHIEBz-ukqN7V_eRWDj{U`9s^HpR)5U10tr0Vb04^$GqHq6WTcYT)K65`EC
z%6Q0){0@*^R@qno4LIo?7yhF4l?5+|{!5pjdGR5$e6K!-{RZt3>7Em5WzyOC^vG5D
zdqgh$-oz(%#6gf^m@L16sWvCQLqUiYMJ*fbnC1I7aHmhvhUp0+pZn68$LPs((lQG$
z)AlbfnjqPG+R(DEGW-}9S@H3ak>aqYTV?#&b6y}|M&O40TF{4E(00)tR&HbRvzg%<
zckB+oks&5L6L$`Eax*h*Lp$Qb*)PpvkW{uHohN1%#3zSWR%<Spei6{L*uyqoBTp7q
z(UH6}!KA`2(P@FE$oZ4DPwL`64oTZ0Ni=UK4mx8fIr2M>Byw6nc9j}+?p_8$6^A;_
z7s<)xYY9YT`Q_l}LyMt3?M;iEhSLd#lM7DUS~fVMwLR3jy=6&iDl$?;%Gk;aZiltV
z1)8k4YXSB-SN@_&Jr^v_5S<k7g(+pI?CydqFYL-jpa4tBRN7Yl?CPAf6?B$9MLv_u
zvYew4V6ncs-5OacTOz8f@+liZ8bJ0Rv^Yp1u5^*p49@H6-rJ>Hj!kLdaGptnvdnL@
z6!>YZW^JW*cKHbrwLR|VBzO%ZCzP0hf*>i4)KMoT84t;YAFL8WEb3P^f8RY~B0d>M
z9dG5r6)v1Faf}QZ=N&&|X?j(P!wqKiIO=Y=iWvA(f3qd|Fx-V)v!A*t0S<J3v!A3%
z3I9H08+fTTzf2ulQX1VD9CS->^z_Wl@%`!-=u41(&WW^O(kIj$i;EJIp-6>(Qi(W>
zKmg?L3uC~$2*+v8anyt0#gtqwdKwmb8s{qI)#&gAOt&~_I(mlobhUOkvJm*SSox{T
z0}1e=lamGzLjt3|<xW`Bi_Au&(zr8Zb;_?Wf{wT)@i3Zoa+QsI8rbJfT#ZPUU6}`K
zNRGI&`x3gzpu5cF;Q`7D7ri{@i$YcTL59T4&$F&oiSas>limu8kMJlh8FzLF-1&-<
zPe#6j^0i)(jybFdrjI0k6G(5qOq1%$wz=Y{a#&r9Wq$1}<>%HgO4=o~-7N&Y3~0l5
zW;}ceJ$>g+Osu)-C*zLuJGOuC+H}~JF%uJR5^*GCNd7r|jM?pg`k;W%1+ylO+ECd>
zz<}tJqt<LmRvk&^LzTT1aF+8v_ON5;=v2eKy%|+Z5nCxET{iuy);#aaleQ7u%bQ{+
zS#LpQRVA_AzwZnSK<eb~Y8PMBhQCftN9G#0kDc_Nrb(K1N(x<=?v$|6EGsIHD7bs(
zb{Ddkz#{{8=LW`kdxAf`=D*zAkI^M>h6382SFzT4>?<s!q-lT+9*DTsdQ=4@FG8q6
zQ{KZunONc~rqX`nc3}CI+cQX<`9bkmCvSRCrBL@lzQ5(-{>6IbP(K_-NWeVyh1cKd
zug{^#fc`#}G55_<lIW((`%aMIs7KM)dC16F5=x^HH;q!Sf_evN)QdiUVnglOd;1gz
zO<+&)e6F@w1(Z?(Gadr?F5OdHcek#Nac2d*7$YC8ug~xAUyW8dccw6*Y?(KNu<peY
zho}0~%Z*3aMN{ATRyzIeFjJgSija9kLtNU{{=_A#-B@@|n2F)Loe|}2QbO&=?~TCi
zKwL*2o=0~%ZjtxpZxEAm4&=2C%Cv8PP16}lc2LwYX*Rq5I^^;-NU-UG|2*52cQGPr
z-d0H@&Ahwp`#RFKuF*}&(;RA}6Y62uWLQKnGZ0)Lk6D$KeD(Bv(MwsOXj-a&0?aXy
zxb&`tXe4p?9Wsp>AOg9TM%?YK>1P=x+_rgt_n4qh@93S3b?n5#ot|EBuQWE2YoQGe
zGff!oag-+*u~8BX+^THRw-y;IPr<tKNRwc;v`BrDrBSo4BxAavnk?WP6r)!2GH6U|
zGPyckt?Ea(c*MT6B=f4o_e$OO0*1R1(3ek_Pnm1b_~e&9-{gFh=8<C*5&oMwIv~N>
z)6HPMVzO~Gwo_NbVw5@4#$MOZqg0mgZJ2D}*|6{F=Ym+TqPhU(2s#5v#yfyf9`#3N
zrftm^l*{7Gob;LIUcqJVrGtjc30!<ky3C4SM2#9e|M=pJ>^%et&R5QG2@X$XGPg3P
z#>UNVr-fy5o9C)6hzNx(xUy^rB#3kb>MHj9N=sIGVIrL5mwPLIUsUEWMc_`oP_t!P
zVOrqM%=X0gP<p*8c=Mwjn7XrUE!s;L_E8njwK}>I>B*#-%JJPR9%NbBM?NMon^lZu
zC>A6T<O$yJs#8PVTdkKJ`X`dVMHdS{=w2|W?r(2boXpMCgr@IUMk&>CDeP<JEFQ-W
zqfz~|SX-z9GSl+KiNZ&WusqHyV_cS(fWw;b$7tH~6=9#_XMa@~1GM$%B&%X2%2<AT
zj45;#{fJG08MHddhMAF*U#Di@qtDx{lU+Xh5iK#D9s1T)3Nw@h1W(2SoQO{;luePn
z4{+uxhD!*L>Z8&f0B_~Jra^aap>h;9F+8eCKH;GM?rF{SM^Sf<FbR{A!dE7p&xu)D
z9sjNr*Wxd~VCA((iDqd0@=R(<m|AF#4Va+c9VOi(_3ZKd>>E%a-s;VCH#LEUSYshl
zcK?;HRe@~1XD||PV1G-QR2?%lPQLIhx;l&N!rZ1?Nd{<ypW-u*nR7Vr33|YFGX2_f
zu?e41s#c>-_zBC$+=qH3s_FYnsUFkYu{Iw(=+i921Jj_ei4h!08a+X~0gc2@?u7xF
z<nGf-7SD3^o~MxH@<uUhGbHOZ7Qa%Aj!yPPcDPQoyy!`wP68&YZygjmu8udm2#C19
zNhFYW9}}CugIWwkcDcKX$I*@yrU0U?pv!M#O|a!h%WM_tF6e?SHqXu;U&zErySEu<
z@4OuY(P*lhhXhPv0$xZfs^UE+u4u(~3n;A#fRnjS9EvXzct0sWfSwke5bw}3$F|C4
zJAP}*ui~Pdcr0Nf$fWHxHdw3qrTus5WoV_Piyd*p<*su?cro+N$;L*vy1+#bB`a(1
za^{WpBt?1RUZWZQ;>YWpv5qQ|Qwoq-`U7$eK1;sIy7dtoD0Jsxc)`kyKgyCYbGRQO
z!Q3`Bmvo!g()oJTN6_rqoGj=<mUTJL?5)G>a}-BbT+Q0B9h;iTP0q0SW0$`NW(Gk5
z=F+IvuTaSIDx`*}hrD77j&gY3l9{-O&O6SXJf`1#ei!=32^P?AjK8^!iqL+k>~>db
zbD`~s?ci?i$=aEXwE*qypz&0WI4Ye@Z-Oeh>Y0?T3=t03GGw#0rpSy|VW$bdW-f8&
z_R3judy@;zbpEK34J%GEOrZ>^7=h}JL{eKblh7MsWGf}9_2kDZ%MUj~O=M{4q@BE&
z<?6p}@W-yVBEzV7<D5%=hsV%Xm~*VVBS)tbU4|ch<^@gcyx;ta{2OD*G@Mfb&x$#w
zpr1e|?5plgCj;3xHeb}+MT7MNxQ#{j?iw^(Qyp9$wuy)e|9aAxwC^q)FbU|6FNm$V
z&Rl*1HkkNar59Z(k6h*1lXg3BzDRn#_U(6WXJv3{?rMmgt(bYEY#K+(>{_tBv+<PQ
z)mYd0$@NQwNHksBo2tB#?)W;IAKDo@GqKH>xmhBg%o<~ltP0dU7FD+K^HNJnqC5L$
z(dkf65>?H`5$W-Rt+GDHbj^_6vW!A$8>__n2d!ozH*rtKq8RZJ<87+>gvSA}M8O&j
zp&ioGK`+zcFrwYfPSo&HaUA}b`|;`C{&;`DAYWhCdoM*{x^ZyuVP1h#c|Z$jqaN=*
zncNede8Yk1Qww~#ALI@@I?6kmuZPo;vn7@IX=BvtXrL0?>Y3+Rgzr8+v@m2A6Zo7Q
z&I;%!o5O0I9MiE&a$`Hl=^|BqQ`nOw9p?^Q=N(wlrO_{JzFPYJ%GUi7TW^`@6csew
zwlVujE-?xnZOhQ6wIb+Kb+X%kf$_G6ET)ieafeK7Wq~my4u>hPr`Q%&!E!^V$%--<
zd)~2}*(l)BxxK|<8o5w+_f=Tj!E~tN^&Ox<yGn^)Es4OqrBr0vF?p?Urtt3$$J`Uo
zSDCB5B%b2ZrHM(&Bra0#Xq}go1vbDprE8k}X~`XrRHw)>D=K5DwcDL#y4k)pU2tRr
zEXw`>2t*0VYkY_8jBcHPl*^P}VGiKCwS=;Fvc9II`B%#im2VOe(JgXk@1)=5-MXWC
zb7n<w3D41G&=lFoW~}rgPx3ma0B`o$Dklo5v0u2CC#)L+5~OK}M|Krt$={{Dv{$A2
zkLNe|nFK&!{{4Pzv%|qjKD?_IOu2xx<CzsnNjYk1NUa91CxHj2O<f3MVj2&6`KRXa
zWI>*4YErG=mH5x5dY@_%$$GENTiXesTJIBsN!6nxgsWNTpW@7KoHbpk=}*X%;WX2>
z>L?UB!nT^8)>IlA#!mz&&Ajq-+;<dhsmRThsEbvd1M|_t-&Br=@57RGVy3)5r60$B
zg4*n?;|@CZWYyRC2V~=LiTN^G@82sj?;pQ1^s!4z;y8&_A}X)E^Gs2@o{W=oaB3+@
zidEJL4NIgjx1IAS9X+!6L9@D^2|CKee@Ofim&$Q-UGobcn;$WHZ9>7{jHMC!x>H-y
z9PlHyF<!@hv!B`&t02*^=X4S82AbegYG|eM>A3Xd!E3#-eT~uQqB;PU6r<VdH8sX^
zHxv2}n7GToD(Dqp4WQ{{$_A!ON_ZHNFN{xocugx_#PWO|4ooeBecZ@0t<TY2-Dx3+
zzKjbG+pTpp5g8f!R@?sjP=EENti8RG45XJi)$nQW-C)x7$b4X~yY~&ZyUn6$N9`f?
z0kU5uGTZHbHl4pjoU}X?Glz1dd8wW%$x>nH(EJ!O&+zUQ%S*&|?$y(I4;o1u@qmPP
zY!7-nVa#HGXTzUwR~gJCgxekD1i<Jb)eqiC_Z%<@sjtx_nhT|qS(v~|T$eHpI>ow8
zhHLu-7vHWje6=i!kgIdv@P{BV(G26l-$%5<;pA#*Ibw~lkAl4K;X4%?NZaRqvdAmr
zMkL6XlJ|YNUg>xQMvyPYPxGi_4r{(7D_%ZW3oeH&%Z&GP!tiRs$U=hlt5TNiPzl+z
z3ghLGWurFQA~5{tkJI-ZDlaPGt2Tn!q3k9R-t0VqQZflzsnz_4bvY!G!dT)om`Ev&
zn(Vgil0@RjRLSDFMpvH7d!cC2@l@fs`+Dp5+bb7Q*AaE^H7@Cm9uB?+ELvT`<H|NQ
z`P(|beFkaTKan?2E`HbEd~2l+S%TjyTay$VKYLMNQsKZHoRG`!Azp-b7h=C}@1Cgt
z>()_fg{q@lcjF!r=UcmsyM$D-JF4;Q4L_GG8#SUB{a(8jj6d^gpP0gT2+@|!cd~fI
zbgcS;?|l^JhpHSCi%00Z=#i1_{ZieN2@C^7F0s$*pTArK`h*9371*LUdWB-Vmi~$K
z6@<Z8%-4=@l8aijY0`5hu8!4K-dMR>Fou10-53J?6rM0ca5(Wd9qdQbIj?1^^murM
zn&oAjiaOXgB$`|eND+-~FBMQlx_w0-^DlnVYR99SYa3B4ReORQbEnHaHG<En;ykm@
z$0|u@;r-4_l#1|{Cq1OD@21ZyDH=jL4j_eL86?`JTL%}h3Qrlq-!n)eg@>tDxv86o
z(zc)*MOn^7Nu<+5^Oa&0XgaSvcc%UkO|(lCHI9wPFfERMhipumwSC$%^wtPH$_Z4J
z$-B8_iW*j>QB`7EbnLm(7;&H|{7Ti0D-g`+0}WEXuVfX?re@dwGcUf~HAm}uP^^dM
ze6+8H{`-3ZwIj+q1)!*w-8jJF|LS*4Q@y{xqI}UN&7UVx^8f62<dY^0)aE~Q$frJf
z-tG$K^~08fKJu8r41PtlgstJv@;>f!*Gw|cr!+AxrJ0?Xwa`g&zXZb#lVgpqdW@=1
zWI+Q0JKaIk^Cg)D<HElW<Ug||4$1VbuoT)#z(a>OPUHJwJ5Mhov*x@iPEOz5$kMdK
z9e0@@b6gy(m|pl*$Ua~9s@^k^mrIlK#v#Q9By200{%Rd!v@KhL4y~&`|5?8*aIobj
z!Mi=p!4*=1%j{7;UnZHY{F0H;bm*bUaUd!2poHs6<Q=Uy#q_3Oi5MBJc+7$@7sWCM
z9RYi>y}}0{_Q?oyUh+%Ii4;c9RP0{*e60G?OCuw#?{$sk#2jh5;xielqKSf$;c*Q$
zTMov1pAgDXX-(Hy%QcF2QEzEmX_v9l8LnXEwkbD}K32FVb0ZCNm=GI(Yh_`pm;oMn
zU6D8jz~+vZ&+WJ!zhSl}g*9I5(Vy}o^6L!9?V9~toCsRuARP$}0bFo3Q7PUrEHp)_
z>4_7%ne$zT#nrgTWi@FMk4p4xW=_OBt0`)HLVSV#-Oa@hKT{7}Ibb7wRQo*fv{RLp
z0oM2mKK73Lkk!`$gV}-r8}UjNs&JoLfDu$YWi^*)>6LA&hTjWQZn|r2s0<4*Va#N<
zdhua$!~Ec4<KTAnp608~;1$|F00MA%$)R6fTycgKk3#i^G?iS!(cLNUr{~EZiKV)6
zI=J$?qCOIqRtEp_6^M|382UAZb$=gquK0I_$Z?YVF$MTxadW7BVnox>T35i{py6#N
ztC(pOLuhp(+i)E}!^Binh~(NAm2DxywfYRdaZ4F~xs@wycG;8Rg`#Gx3qPT|ug=}o
zb)SAGnZF-rDPdg>osUa)t>t=XW)-5T`R9V}cCF>C7sKkPN{KkwzCg=*EqhbI&j`mN
zBLYAXo&#0F9=abf9yeh_gA>!IsA87v)bz&)-O6npeqcx@f>u@W#m0M3aD5r1i1YP(
zU!;v!IGUiU@?GTRNXw6yt+$jCCxi|EgR-~ailbq-Hi1A05S&18cj-WIm*DO$!QFyu
zfB?Z8cL{EdH0~ila1ZY8?mm_0dDoe9&Npk;%pa((hOVmn-uv3Sq5~i~ho8w@S@C3y
zZr0<1I7cu&#WHPYY3i2F#0+_o704#+iXd(o4Mp<}P#OW%#d}cNn^#}$sLjmL=5CV@
zFOOJtmwM21if5URQSiCGfSabko^NyU1zzRjlbcA?nW6s%rBhA8++Jp~2Jn-~j%0GA
zGq?J<=(754=u{{3M7$wv(jw@yj5aek`&5hX!jc?XfcDyr$Zx_xD)JK?9YhaD94s%w
z`F%^KrIFi@oe5G&XDFK^#@vZrC3~e)@<V~sHh$jzKpNA(;vJ5ueLXU=m#(GAtS9$V
zXPzGKB;djzv?)jWrcm+yNQO)B>G^VFys&inyo-?9a$z1HTf*bsRTG$OuQYS$i*ZcN
zQ#rSBaBOXfkuhY!1D~hN?K!tFHOIZ)qXkSlF@&%BMKDxu$U%%<Tb84n?DCapVSb6w
z2KqUt+KD>uo3v-EEq+$Ng4TSTWX9@aj;D#1(B-Wfx%HD~d*0QJz0bwimhqtRrUL_f
zozIR9-_En<E}BpueC?OqA$Tb&fB;{z`{{-cUGG3m_Gtc`B-;#x<~jLbtc-PR@Ho8o
zy#r*phG5fib*!A1!37fTzwQcq(Z~`UM48@p^=~eyL<eoIv|UCnm(839)?JGPthns;
zq0lsXvnJ5>#AD5l6bdLRbWcw7EJ;q3sr~U0sDR5hbEZ^ynL@v56W{=b|1)j0PD?er
zJFej#>8q}y#5*Qzh{DyeMFR)H+MNPmEwFuiN%q`n_j^2bzGQ&bog@kIyGr9t|4AgG
z^1;<=@g2o*VyJN<-eIjw*r<^k(VrT5U@md?lm|2p!7`~MzO*yCp4<N7^QltvljHNA
z8+3b`UA{V(i}Tvj{4whu{k1)bp#4eZcaOeRin7%C@JeccuHL6&yzoZQIP6gAV=afM
zL9Zf{_#dC2@&>it^QL^u3_`JgpyFVMxDg!{?MtUnTP^P=;{#dY2e|6EcTg_zNn%c>
zrp7lMWjyga&$IhVb^ZVm@D9`eApR-TwCIcbkv{q1`vg2B8S-FZ(Qv&yd_uG&mB>Dw
zc-KLEsX5-SjMZAECEjvr-^%)%;?ZbXlUvhlH3^re0<NgR!&}bR;jCrvb`SSU+dcH%
zj~VP$VW<^CIvt;v1?KiNO7$0VUL4muEHo=(Gg<o8i(qh)i$l?G^g77-sHyUHBt+;w
zQe%7~Q0cplq;d)|L6fTdVHG_z7G)bPW-by#s}8qGppAtr7k?gYO9Z`hE_0_?0WCz$
zP#xjLO$;7#2L;pzB@9bQ1!^`lf0Q=Su#=aTPrlRrYK(J1cX!lL->=Y-DcFk#jgV^-
zR4+@+yp(VmLv%D9kVCR$@A}nlJNsP>Z7w|IwMwo`G9}n}q0<dkFN_-a)cNOck7YmY
z;@nL)q&(~7Y?(P)un^LH!}@08Tgwi0ZCsnCu`ooQ6}I>}kldp#{Jo`;{yua+QWwHc
zOnsi;;H0G=aU9bL)JxN?;z4T~h@nMzY<gV>-;Bloda&$^VzKQkd1zam0!!h{Ud_s9
z%5=_Qy}@P_z${x~_NUYBfratJ^E|lr=5rfVKr~*z6@^ifp<|^c+YOe8HBcQ2nZn|>
z1jZtjTm!#EZJ%-`72Jda;)73#-`nA1MCwWA9HB^w?2{qxt{*ra<2`M#w&Gviu{s<b
zGS%80?{7=+y?Z>B#IiGohe2@VVm>nU2|RRRMBqY%r!z}P#{w5qTd0u_JN?8AeM7H+
zWeV_0k*4iB`_?&hP3q|w<;kUDB(KGTZHdT}3EQM0k9G^mUt4Q!5fC8v*jY+#8~Y5k
zHpkoR6dCRL`pvMfFy?eN7e7<J?s%M+jn|NN50KUqN?mTql2hfp@Xmivfmg+|oqAY*
zX-ZJP`au_<PHg3WD5JOhPQ5^`#u?_`wzDZnj0;=KfBim}%?7Dk?*VIUEN<1TuhXT(
zpzw}ZDA)Fy+PFk#L{FhCPu<^BdXs<AN@I1CibycEdf!2Bu$EkGbGUiZ-=NO8|5Bl7
zhBQyU?pw}rQbR?|GMn9O>40stXQ7O`!@#+rv{Sy<<TQ5^O%}lJ{UKt#9e#y1_QqNB
zyEbz`P$4|k&v(w|BDR!tr{UalgH*f85bD*a5}f<3KJ5Fa{w)=OrToBoH_3$B4XtbY
z;34vhi`#ay!8f1f_4{QH1>;660#GeQ@7q@$nq-ah>~)SC`|4~46w`S6lJRP!BV#Jo
zcS47VV1AO|5L{Jhpt2<oU0n`T;|TB((5uB+F^cnPBg?$?pL-p9WWrEaAS!dp?XvM^
zB4i-IUS-^}1tQtrn%k$UEz6r}iF2X6qCO&fRQ_Y-<}&gSgdi>(xpJ%jCxTK}I>?9G
zmQ<1uLEb3&g#)s{kzBf=WkRkh`y=9`<(Iq?%%j)U7O*fsr-74@It$nHDaS+T{QQ6g
zu1iG9-zDlKugU4nD`Of^OW$mJ3i}l+PZe%FB6wdfn0uS7dF<P-yIrOkS&PhI7i|I)
zt^^o{VmoGX@24~vf+Lf4;GbA)x|UJb@@*rdWAEP=|B_&NHZcd0w%-h)hPHFL^8nXS
zx{9?7S*C}x0eR9sDp5TMR(mglSzwoFoK^GgY?fhg3MUpuIV_X$eDIQbfJCvzXvs|y
z$J6XQ$+@5TP7-`9oUBRZpM&~l>$vl+_%Dnmqu8^h#G2O@HUy?}-=*_)1@aAhRpZA)
z0iF}SN|&k+G0kX0;rkh3L9@vh4p!ns<JdoUk^db-8p!zIoSrQ?QSd2sB=$0`y14rR
zi|#bHksg}B^SaOH4;DXWTQ>_{+ChQ5bqlJLK`PNe)0Xp{m*Ji)x#~Eq_?FgfYPyXe
z8#<}!^A;&D$mFq@(=^~GUI(CB4dA|KyAw_p{5-Kz4eW=1fi$KQN1(&1-mK^+t<Sh5
z(kt9bo$7D;EaCqhc6w!_%y6sGh>6*WOVbCpUmDXgkN1UQz~!9o4LyHSiz$m4_2tBm
zuGn*;R9H7HsU5KP*hY1qidzu)4w)#CqvMYXsc$OU!KJKemlth`bR5}CTgr2KWeZIW
zdg{lrfLtujxaY$ftGnHL0BD<B6^$Rtgl9@h?YgH(-`Onxi&GI|e)5w3GfmN<e_Khu
zzNoD1g68|>&T{52AD1MN`r#8x3hs=B#Avqzo_Ppz`tjAX1TQsst5Q883@J;nUHey|
z^g*3nUPEOVmyG`)LB0f3vly$%XtxzRfARCsX!*%}p+Lz5oTB5Q%QnP2L|LpYZR*Qb
z4V4f?8d(T}YPGw5ve9k96An0B%GJ$31o&INHD74QF~1brFD7afHGf$m7y%yFi|rO~
zgc9fSqc2i42hOzP0N){|z0Gi1Y>9d(Y7~ygyX&LMM5JLfM5!)rN`7hk>H2i>oxaw`
zhJkmsak$;f6WRQgc9Q^Z_?!i(%l{glf8DkEs(Tfo-#@TZZ%7GfI<zYkz)&>5g|NuT
z&6x1{*^hX)lqkfE>W2rq!Fb4~_lXA$Y;2yLf$?NR_G&SBa(*%L+}Eq*Agy%0mXK^+
z1N7F6bv8B&{iYF=X;H=m(sjc`JX;65M@Y~O$!TC6D@Pfkw^pWLw4js@KH(_JwAaJE
zONCkho=l2-gZ)X{ml(YAHf$obhH^yEreU1IOMeezs}UqNd52JBuB=tC*@Hv-SmDrM
zWF&j0tOo@g(dK^QAS1PjVAEBK@GYT+R|KaC490lw`%8M|B=)FQv^Luse_6Y}@2}DC
zecSkW6qP~WS<D$bvGH}6`C^ovH05rIl!^Mi(3Wt+UX4^K1^|-uO$&j?vLB~ne!KSv
zor<f<X~QS?CXk)mnm-ahEd;gdazO7fU)Eys`@YO4Md|sJaRX$@bLq8Ct^Mj3vurDi
zEANKSn)}nfR#$<UHkz6mYA!bcXMO#V_Z*qDt>%eXpJ;c53|&@Q$_q_w^5J7@PAq@t
z;dB+{F~F<U-9v}&@5sYO7U~=;l}2djMSj^moz={1MCk!O{;-Agh{5=XVUk)?D^0n!
z0cFkU3)>0*he+?Kme0(1f+#YjXtJ88lDPL=wjT=BQ4Hw7nw$=8PKGpaZsV42=!Cye
zXjX`#Zy%sOKW}tTNH_+xiNSZyTb*5)>Gi<B2k&4yb)t|1G`swm*E^Hh(T6ha=X2H+
zlE`o#X!>wf47wo&{?sSI^#n>CETDuBLK(LXTYELFMs@}_MY{L*r=rhGvZK3gUd$jZ
z8&aHG`Q+$UqY0bg`v)tlR-+#(sceL=FV_(IdiF2y@JIxJ--zJepK4u4GLUfA+-62*
z)T$<PA6FFvgy!06Zv4)?)dwpV3IDy9<(2f=ZSzw*^CMI+g{GDi<z6?KBU(X9sRWA)
zGG70G1B8VS#@j(@(I#|4QbMU_E#_lAQu}W7GmC-cP>L43_%^1A02^m}jQdJBE-AlM
zoh2y*lnG*}-7LAJmzlD4mT55Y0&usxmoEyUF%x<XlQZkv`ZCtN^s=2{9!$C=3nLs0
zo%39f5eDzyBF$Tno!$EBWAtNqD7*d#O8ids_TPPTz)aZRFk<@gce+nP^MAt<hlA87
z$&dU<cQ|RY^`i>hHrX1^sn^In_3J2q2U(Xmg)WXoxg-*^p?L8_;|mt1&T>-~ni*m5
zfjjd_RTfY}(kyK^|Idsf>3OdB+>Cbt5(genFyTw%vyI<VW-}(k^yb51gvsY<u`d5z
zG%F`{M{7wh0z0xxZs&oOlR5p#Qgr?`)qNEK3`(!L%!V=(8ye}H40iRJR1_|Mgpqqg
z_4^`<%6t#%8QnWxV~LzNQ9b1fRhra1;Bis4FtxQvrZW9aL@HY@d`SJCD0#L36#J92
zl37Zmqj)rSQRYhjjxR2A_ZOV?-^R#8oX0f8v=s6vx@1VPN^m6WN}oACVc4&tlSrgZ
zSZ(Ly@;TeJt-OWsGs2nhwju3rRz}Ez3gXMsA{|4Jf!Qn3P&uSNnb^9-COVd2jlTnE
z?|!N&=XV!1x~h4qj$KUZa2^|^%S+r<PX63{&7{gqjB{;1@+qu7b^rs0Q6hMV<W9&u
zk|^Nz>WmQbD!*;9M{-}%;qrK|a)X&otzA>J-$s=j(%Elc!IQ?2?Ceh3yx6)Wq5(1a
zSk~^s7p>8XyQADC1ZgcAYD7enE7Htv-rw8$?9=2;lug}4a8SLW)e~-TZ`8r>s;*gn
z;ABQZ#V3I6Rauy=e$%*8e^+Eyoc>3~%`G?TRfL{b;r3$`G;v@L(WQD{%w=0=E~to6
zjXqm@m^O3NE3R?jxZ${^*6OiJ8)7P0R?M?mjMD?R6mgWd=>qa|+e%Y|B;hf^dw9Q$
z7a@Xh-ZbO!y><byIR9M<6-XqBnz0I6JoF!oci7rm64z>|0N*6rW9C#X#Ty@8m&2Qm
z<sa{)_DH9(ZF<Jqv?92J_Q{>R#uZyLTPB*bZ(_r$Ze0j*vTdMvr_I4Nj_=X%cjZCc
zE1!%suAg-5F<;JGIj@tRuVAz6(sWRVFPAmlRVSlH-7g)Tq5a8pfNG4LWl#s*9%R)J
zBeEAtx!w_?=XjM#xaoPDBRk^?*bQwhp5Saa;6BBW4}Tqy07EZg6_AkAM_=m+Z+Bs2
zO<^2%#Zsl89%|gJ!LT#zr9J2ndZ_&5F_Brn$@yJD91V?~$cw_QZ?koV@D2;9{xDP2
zjgZIGY?<q&&6r)~#&{9Pw!jGg2tY@=m0JC2?`|zEnJ%*9Fcvo<IuK}jY+(Cg3`RBp
zvnn22|7?f|?}t{X2`<wwlPVL5iWtGLA-fb!J}b*?*t?tIon%cNE%wdbB;Y5U!#)rJ
zPyKgla(a8^mFE%=k4GF9Vt|vZZ3a=GS`hV2gvUAfoDo$U_F;W2Ub<KATJWA~xUiwA
z3aI;u(@oUa9+chQJQ<YrM}#L=O@9K2cbEi;YI@iwO*gRLFE=}qa7=A_tlO%0wcQL7
z3HY!Vs}uJhK8PpvA!P}3Ru)bv1=_`1pSM$iM<GdMh7R%vfxD0a4@}^zR^y~$RlR=Y
z<)zBNSW6$vyugn`300wr8^D)}<>9ou(~s+4E)zk<Nc7;_c{EO^(^X|BhFH{iGQ-}*
zZOhqvve4>Y#iQ)G3y<wVU(kTlvUZ}U4>j2^D+*0b^&y9`K}Pk_VvlDoCF_iW{5|;e
zZ=L$2pUO2kw7E9Sam?T&UM}YCGU;Zv)M&agh$I@VO8wO|rJ;)Q&@!GBZ+(xCD_ks^
zw{rT1EG&#t=}{{QhuI9t+}`4m_kWJgK9Ts_HhIWZ<=a|uC#xOzr#!kcb(&oXrF|H_
z31YVz(${Eus%o{CdI|?x9<iT8<L7_(VlVLVFw*s94bDWHbi8U**Dm?6onkXma^ZQf
z0c47hWq@Bm7`zk?_$ZEtFlIv82C0uBo+G}Dnk+R?bfLd$TZIShm9u3Is58F5e$Rq%
za+*-l%a?Tl23ng0%C<{lC%C88$%iixxv=B<qTrY8C?o;|2YxIjeEo#RCO~Povi+k`
z>VSH?m8_JDt^ouq`wfa%XNtYn4)6JsQ+ecDxUIadMM_f}2Txo<T6QZ%CFL8@5q_W;
zNZ1O8;1&!H?)K#&AQ>AQQw}nrm%)Z|T##8h=!pF2I+b1clz?JA-getROEchCvMd~L
zr%S6={#j)N*HDEsF6IQJua&=Xdd>zU8C2-mPh*Mmv(4T_r(;!#NI~GZ-Lj#Nk>l%1
z`M%7%<qw)wIk@zl*uY{FuXzwTL6%=Hke{DC>gQ@Gc~TYoA|hoqh0h2Jlc3k2qFTxC
zLC1%0dBi0Ad5-=x3|J>m2P<Ru3Z%=h`lPx2Hn>Z;Z96~j-SstfNigvyxgw<h@1W8n
ze_Sqp31ta_Dl;r24*}GGDtZ9-XEiffR8PsLiFVwpX}quk9XOGF59Aoibj^hw*={$z
z>x3+#A-FlG))YL`&(O**%U5s1(VpzMUe2-CB9`Mu5U}fipABLInW@7=;lIHf<|Ni^
zvY(h>!|B@uwYd^1^axKO$_*pAj6<CCj9-90;)&TSX**BBCotei>i6}rMt4!wZ1!)o
zLJR6VZDg3pVB8gJU(4O5IP}`h7{iBg@%wk92rN@r*Qs8F(*MMzf*(!Joa#fa_yyg@
zl)xGYZ%S?5jdMg2ix(x>CfY{~WR<=~3=f!=y042%++&5+KVwzTj8YejN(Pq2LO(Mf
z%Nl(Q=}UJldXe+HD{|*;drlFFTxrxGQV8#eDQma(<<=$x(l4LO7)EugzYS4MMrOfI
ztW2dtA2n5oN|sGWh;nLWrKE{#-GTsBc3i4mssGFM_0o;|Nn+;pr=?94SZ;Ve1i>?|
zxpx#a=Y7Mt%#Z!L5C1VlhEx!*k3cE@Pn4A1;A`!o>)ES#!-jTaoPXVri!JIwf{<2l
z1={)hUy)1IebayMKKeEX-gWakY4%}e&9g%?L`dx7ge(3ttYG<1=R-u4XyYSuoDSTd
z422$;fA9L`I}As7c51-7gX)RprB?8E6$S9VtXn!-(s||};m^`u_W|SDJjWL8Fwy2<
z)(8u$U~_nOwp~mCXlGgXya$posc5*o4g?bEf|lU25eJLLs<Ng~2Ce^}f+y0Nkx9_8
z6%5Z=V4`xy<-sKxWFVEOA27Vp3drfqR%h>G;pKH?>Z^e0(1=c$Y@s#MFYRd*?nM|q
z94w;!bm5jpzy|Q^X<fzpICBSXs&^L+8-35Tz3t<4+l?_iIMjf8?XC<Oc$TrzX|Pe~
z2x+Yb?=_G1;MX>d|M~6~G+V<-6&_eTz%w2p!NVOZ4N1y`*ExF&7J4#S4E^oBopImO
z3>fN%eF_1Jvwb}(ZKs!GVr7ck6X+7yY)W3&+z{B)!F!{$F~37z)v~JJ<48yh>VM-u
z^~`%2Rk5!?^1fY*G8`wC4Znyq5v`=w#%_v@%gjBsXV{NRMHS7<-L0YniYy<TdkUpJ
zB{?zg7%T?Mv>BOn{ll~tvmt9>V6@Y3qhto<<o<NaZIB}bw(?)a^{uwU?}@wo+WL9c
zV^Z6EZf8ao9d{pk^~9kan$I4$7e!~#cz-y8FJkSkTDVu2qngeNN6F$Bf4|7@qT@s3
zJgi6t^?%0PlBluj)7fZpzeAq+Xv>_z^ZqhR)UQ2><QwvSBiy)tG-ETGkwREA%RYN_
zrjO@_{(ooN7yT&dKH6{%O~kn?1;lp#p>$oXeE7p(rLQaiEj0Lv#~R6n0?GAVi##BQ
zQb3=eTrF{&g^&i4h>e;P?zY&3i}XS16?ax$LMl22;Np*nJb|*9e(R`o@ZdiBDB<@T
zUDIY#&vLGEqojXV?CokJr(sk5`r%#1WOGFF9hQ>uEbXbZX(sIJj@B{P%iC?yDM6Ek
zqquoYyJF6HXh8{0zMXI`dKqk$qb<$B2O}auXd(@8Um#%i!0p^m3zZX8`daZ@#e+%9
zfV>bh<S1PPkFtdGXXzflcllz1FfyW9XoLIeP*pJ)BFUK`X9(w)KZoJ{WE&J3M=ZI$
zePfhlAoCM~WV`vVUJ~c`Xq87M-?s~RdlNC&i9aY8zzA@Lk7>iz&(s#Ep$6&AmHk@F
zYwuxX3RXrl9#+n<d5R1bvespV!#-#K>@7Nxn_pj9+%-Hs7!FDK5Cy_y3(;f@jWpzx
zE`>ea<1>Nt6i&+Ev*FbB0CbLtukZej(Io;CM1!pqF;cr^T3nLmdjYR{du^x6HB$|U
z)NLv8anZJ0XUk_7cy>_w)A~3EG-QRlTo&9%Mm(voC7hY!1(HXfXi#|*+9G&x-c2g9
zzrZ%6bouSnFn9U)4}Te&LV*!4_AEbj&PYB~yYhPuVSsg{3f$FlZ=9{AO%(Eq(+{1P
z_}HTz&zN|#el|GLWd(#JN|cA2KHK4O_I48SXPvFaex83(FUDN$-p*($e{$1SNeoXL
zE3B}M&ed!G(c&StP$Qdapg(x3%`o-i>lF(B9prZHxVl*-_5N)s<Y8h_UmZoLbjYGa
z?Z7SHb|HH@r%-m7%tCPR^@#qsLCiR+SNq|loxp5{9K?Ea$DN&E>LT+tgMZ$iiIRTq
zbiCzV;NxvF95N-_ghrlp5@A)c5ET5ZRyX8seI^=^;JH(Lp`Th4Qmjl1+3!Z7si*-p
zO7_Kky0kQBG;!26=<8^V9MaaTxCpEpL*5F#)!af@&?WRgSZzZD)?vBf{Z5kORx+M@
zGAlDCVjQZX<#xeLMj(;fZwEO(kk$0;)VXk8uGIL*MZUc(<j<4&IIyYIKXui`%i-}u
zSkJF{yIQQh+VA{f_$~9mMc}5I%6XjS9UAlKo!YTM0TxIq&gEW_#Q^Y-qFVV^-V7LQ
zZC&k?yQay3aK!LuHVfujR+!rHy`PoY03ah5;Q46FjvrnY+aDCyi4Cf*C6tUPE6Y{0
zAijQk^S+QF-ew#2753sT6a?ta@sm7K81Nmm>b`=Vvs#S^$;rtdV_(r{CH!<Nips-l
zz0ITLabIE-V{E;Y3v|c#3qIX^S9w~qtj=hDuQ_7$g=lDN7us*7Aizg;uep8`+(dHH
zE|9Cjqv$LD(psnzO?B3;dq~`1UKcmdF0)>vR!YkCI<E4Q)KX~c+a|IOB3hQj$>N>{
zub#jE`5zy*6b+emhiUU<JPDV*>7Jv#e+kTtg`n&FS)=WH3-RjL@OM_Q)#0<z-0mqz
zH&dP9XyaSHhFHd<AA*abjGZ9AZJ+xBXI7IEJC27?5U`f^xb!3CHmSI+to2BGQE0;Q
z8j5TMx=^M|?TC+6Rv37Pk{QuSqGxM^0VztWVI+YQ;@Nq<O)AiS{3s6m={6!pIm*>y
z@u(ImC4HM-$Us`&pxUXgK#ooXD?a0VqB#l>taOJ7vR(Q}V1-(o<xBPG@K=wXB(q6c
zmB`$M_`sLC)4pJ)I~M%iae6Qw)kB_%(Ch^WIL^oXJH{x&^FXQ%zx%?`mu&=_XAZ^&
z(xq5Dx!km8BdH{wJL^_~vTUDpJh{TdId^W}gWl<h?ao&NE!z4sx?cB(All~*1e?hg
z!6_C=ICH+BX@_Y4%kOwh9?i|q0;Vt^oWB35yi`s3eQQ;+XYTC4#P2T&8C@yc)ePR5
zPQNL%Uyj$H?Q60}B{W!Nl305&TW)fA&$S51Oa`dVmvY-L8nkzsPRLgI-8zAUtj#r=
zbxZReZ~d|imnZksPkh`YAsTJqQD92CoLOcUDY)N@DAx&mmmdEjkT#xQAq(z61vT%K
zFMFogW^iv*q?et#v^*X)0(|*$o5TB;G<QJ7(dOFy0LGd{R0;f*4<DjiqHO2CiePhm
zWc|Q=(t|=Hg#=tFU@RP-t@<dijh14ikIXAoUK+v1@E!(P_x*RaOZc_jxx}wObwY#6
zYn?vrW!0aWZhprSFYENt&hycAAE7ZcfJQL&3UNfaB%BCHY6e7eCtRrjn!$M!VQ_fG
zF*Kg>H<%G)s}P>ay82LqPW)ZqtI%F5Folg}-9WUTdwuW6f?yR9QPn`7WmwIA(>OUn
zEIQEqcbr~}1*gjuII4z2cVU~ee~#!no6WWpL<m)_d6~Eq1(Oa$`OYGUb8e!E<sxID
z^Ez@%X{1)Q(<x{g_R|O8Xqy97@yu$rb<%#ZN1y7Gucqz;BjM8woh8|P^}aq8j=u?%
z5oU(Psf6Mi>;7mxRAZc~AYM5T7;~9SjL#e>Sf610N~!8BBm6S#7Cc)mnVpaKNxV!w
z>9_v7xnLCp3PuID`dUnGs||212E9mDu@%33diELgl9~cRcSr4Vknsx@9@V>8G(Svt
zP{_LabJjCtl%-FBxPEa1WllVz4c*{*JNHm+ExJcjVck~Elbf$!fo0PL8KxjyB}jw>
zxsP4aZS^(<L5`;a!r=ba54vvp1X*Ys>#c9^JNod4of1Rq;$z6SJ<}ve4Ba(#UHS6(
z_yZVkQ;Jic;OCa&S05Wsil>JdV}QFvRQcC3<ho`JhEow)KV8eIwVu=Qi}xpLg8bQt
zeG~T$oP=o?0ODlCZt2cqE`o|3@SWdp>X(<g@0vXawpO~7vHjHr$P_28LOKaK2NhO`
zVo7_EWKgz#3r--2mvMHhSnl?nIgO-W?MuU0Ja`W$X+0X(xVGRy!^V=yV&JV_>4a==
zvd+2HS6Ih8^Bhplk>MUz^k3#7YXs2%Z5Q?c4a%|?dzg@t+f7KsgGHF#Ec?Ol$9U;*
zkkl{asEyZsF2nF;FbdY&KNj2JZ8a_UUiaZTEsEuQ-;!g~Rxo=A5i9S(17Vf7m%&J~
zJz--8fknq#64TtsXcXLJ<YYHcfF<oc@Qab66aIyJFmA3EC>9!II+ZWXz<57S_(@sK
z(GYIlzRx-c+zYP~$REd<V7bH>{A_aocsSXIyk(TB$Bl4T)MKVEDlj-<-y3hOT5bju
zFrAQq9sDbnSW`86L<|I!I@zg0#7&d{B|8Ym^eSVczM;-}(J`>CS8Txx72(PO=h3Gf
zagi-J@f@@uJ5t%?b4poq170z5(c-LRArD&^1JOM)tG1bPg4Onq**98Zl^7N+ee#4c
z^!0#Hmrp7AN4u_-!N@WTR9+()OVod;=)xPx4PVgTn%8R)OghX1;r7k~{rEt7$angy
zRLHF8ZBP#g2WE4mqSFXKVG3=dsnLP7^@f4p-`y1TZ)pb2-_neTXft1jemIlRVP5+1
z&Cc#%TYN?Uz~du9Hm#&~+^i^|QleZ-W9LNKITa`+Rh*xqk~F3s5X6LZfo0jE-1<sp
z(V&Y?Dh8T4I&i3WlHE%YKV0T~&Y*|255MKxzXh+1>Zdqu79Vye(>=v~tczh|Go#gU
zLW1!$>X;3MKa;fgs_y;YI9=r^(qEj;6xC21S4q=XPYv@w`F%PJdatTx(IJ8;so_E5
z_yhzbFWx{ti{^Ukj;@?fvDV?1ID>=yP&NC%m;S3zQ>7$S52-k5&JrAp1q=bBp2I1=
ziRi(b22I{uryFBO(+7JAhb9+ow{_VBspkr_$3;^b!ze;SIGFH+CFAUF)D;68p$|%4
zM4p@G5xCEr5MM7;<V8|^Me~wZ57&5{)t6tHFvvq{M|oR%{|{`AEn6;$<E`f>3Ro-z
zQ$Rd<ndeQTmr&UR=@{x#ztA-%30DY(#Q{osHPs|E>8DhCXT4(S-UIT!tt6ZD33AoO
zZuXdnRE-8Kj7%W9Q1kOutqo5R>q_@2HB64w9Q}3J^0}SpOEoizH$uC*7K|)<ZUfQ(
zXB=)Nfd4?l((}eRQzYMA8|o{psyB-;P9(pBf+fZC8oItoR#nVFf7@ej78jjSuA69P
zt-k326(dHmOQDLpsVhBU!!4%7XoDw<6WS361UWOP<OjOn4v#GRJ+u->Y2bh#p&HpZ
zF_Q!^|H0hgASz@$VjH{P;1d~~CJF2ol3WyK`vQ^++s`KQ)e+v0M~S0rG%!p?P)R$k
zRumM%L?_ZsYm~wSBy^D-C`7|teEm4_TZCD}K-w^=oJv)u>c}Y_r8x+`j8LZPwJgG{
z6Z?}GP=6zg1O}&h?LEJmla@Tl>8wA*eE4L0%g6ax)Cua~bXg7q4A?ZNHunE)Lx}wE
zZ3x-_XBz^?4$6PEA#8S(v7+cPE%1*yDmk8ph?&|!G*kICF2$Wt^<BsHv_IwQp1+|N
zA(1xBEvJenQn;S;0xBh_ruZ&p19adBBbM2Q|I~kst%IY+CbSOx(D1@O`quCgmr;iu
z7XhaCMr_mH!FHK}Z%JBq2PI&5mhu{ju*qX8oZ9r>S1%$bz;I}Hu6%UXt)*}byX(Ir
za9!3gOhoDZyl>x!#@H5w0WPrwN|t!l$6jzhBJ$Xj7BUI+^&Z!IOVicaYSu8nzI!tp
zUPVg!P=kZsyfenAH=Z)WqGC|iL&wYo)-eyAfjlkc=3#_XtC)?jqdYl?+Nz|hNU3`U
zyGx8sozJ_R;_>lK8r?q|$RbNS(nUc4=Oz_viqfT_ZvJKHqk5?qP=h8DPC2!WX8yOJ
z#4XB~ojh+2)V?~ia9*AR7#a9eNdoUXY~$2ktxmfChClzx#N$3~TYn04mh{|4+4LA}
zGyO`i9jYE;JePuKMBoZgdPZP+!+-3NXb!QS!dJ8Ars8$%>BFwJi<`O(7X0apbRJHf
zx-EOi1YAZ1*z!o-<@?0bl{r9H`ofG(gguf{zNPr_P-lB<et1-K>eYi7R>*&#i^tl!
z?%Q1kKfha`c5yaHUp4R-CH^nlEPfo^ups7MMbm0=SkZ8mZ;(tg6kEaY*1*vwCW>0i
zd(juy!>*h+)!zod?~;LTpYG+JjFmVLo2S}W%G3@tKraUw|8m<aWXGP}@&`I!%HPqI
zopaRTG;^EGe(wY+Mp;_eQzFCMt$xN}Xl@<^Mu1v$GD!@pK}_$6e+}eul*egA#e}3a
zmuK_2(ycmQz9ovD1ef9SBfk-XYH5h1Eo^VzWSOGj71M^f&sGyR=T1>a>E4y-1+R4N
zz^B-el~b8fHFO__AGusn$nHcC59SIv`IkS=S#Pki51%QM3D1sQUrlBqH%W#A)`|VB
zW<hyNwY?IX?oYQ7gA1T_0VF_tqMx+gsEe){t>99r&pcHo*Y2*jS>Q~y|JboS-l~@`
zDk^$Qi2(erk3iWVCdm|x4K4*8L$hnTe;5GHDXbLpdena-;#BxKnHYc=F|cXFVJ<7H
zeMYbdJ)g<+{2`pn_f#0s)P;fzPb(iaxZ%-B<#c(S0I~4s)Tx7X>F;Z<BlH&zYFdz@
z?I761&)4l~x6pv3*hZGa4(<p+S{H|NwF8euo}KxF&_u7M<)k_W4ZVpC9)k~_2Pa2(
z_Jie=PDZzbkFotnCEjr}8Nej$XA{!gP+L0gS-br!vqTqIDTC=16a8BdKvKqWss=g@
zv3TXKW!f9@Xmg<JCCjRxDY5-1xEVeS@Wl9?C^RQWv%YKwei^aEAao~pXen~X!(2fA
z3iLS0wBNm7I7Y#?*2Ui6<q*;Pc?-eDA%xw(z)8#i{NBDmqV6dGue_<D?5Lp?50vtW
z<EayzF@S>0zMM6s*glLxqk4VFN5m`ybMVh@(sUlU`CNXAC`1I9$AT+2%n!Dx!2Yb3
zc|5nG3GB}p{vCIULcm1-&$>c|t>O8fZ6(DAa9@`XxI8-N_n&<q2a?th`h!j=Pezvk
zPO@}pe{HUk1#phvDash}rC;~?w3t#CeSaa5MLBi4cTq!7Y4u(CV0Zk)cKl1#ZgCDS
zTCx)FWjR}8TL0+?@$t{qwxoOC@yU2k(7SiLKhGjVW8RWJ8V0Yz(5mP)QtWj^qynje
zd$n9~k5&LS?yGV6(#A2Cjsr578F}U?0kY5w+ZwdAy0=^ulsr?Xci!)wO2^`#4h=~S
z8Y^sO79qxWKAI}F3(19CrMSLob5p^i0lA4EsR5qky&tzJAk=J@{8zJ)M<;<wpe-0{
z^IHNLVLm)U-XboR_54SbK5Onzq~D{LzUz@O+4l%9=zK?8_FWIl7hu^fPiuc;T}w1T
z2tDh&hFbbcK3DgW<-;$CYx^Quj&8$6lgPfv;MDQD&{pwaT>{Ox27jf&zrc>dYJ_2o
z8i@K!Ibyicf2mI^0IFjv+w=oH>=nFMLteQSnBVzO3G7B$C{}fmtFW(@bDQw>xr_@{
zc9cyFuv8@p_Wb;l3@OelecL}B>ND{LfNxl4qfM3$>I&<=Qb=z2m4yG~uj(#+XZs#$
zfS)SUGw01kMq&+=mj-BOlBegoCLe!=1UrPsEiEOYpcI{ng>eb3=tFdw*^AoDKRhja
z^kDj43&ezCaN6b16(G2M+XJ}C3$*?DQ+$CrANA*F2tSF?ttu%`=(mk`z5iLS=V~lA
z;|x`;ld}K>^9_5YyXM5$%+^ac0rl1<!L5bh7}FwXN%7`4iX31Hr^27D7n<slzdi06
z$d^hN0ZEr?jgSoIL}1!++F{`N>h(;Cy9)JldtU3i<NeU(+q$Oa_M`c@7XADZ;?ZC$
zb@O0>LfXAJ;c9<$tc`2c8ULT;*}Gl-E691i$F1pK>$FVW)q48pHsqXA!ECv`i1fj_
zNuqAgyG`ikITJCY;`1@d@!bgWHR-UF466@6R5S;~3&u%03W=uU5-uEfyjPuKTPf*5
zK~UMw%o}kx8zIP*$gC{|-d)i+(!NR}5}MbyH$J5Cdld>uO)f8M*-qz>1;qP@dWcdq
z9@V}Ly@6`XSzujcy&wJtv>`mp@j6%Jc=2fGSg=XM)!;*_H!}lo@&f;`gI=}}o0GQ3
zoCztZKSg@}sLpp(%S!T(!y~#`5g-5zNg%Jg^esCJ{PbP+f`oA;P$;iS@ptX(R-<)+
z%da^c`VLh&pq<!rRXR`#Q!Az~hxqfMP~K+&&4UO879stMS#qHa;eWKO-OAL|?N#DY
zhf#oQ{v+7goLpXC@5nXzKz#RbV8&UT@T_fO@Zrqs3d}p~;{FaLgsq}qw#L2U^!7G#
zFu0}Fh}p`?ySi0fXA4R(U=r_>_qcf`|JIJ-T=cns@a;)<#}LZ2bu#luw%JnJ*JpPH
zHaB%_2fG#HK9f0Uz`2Em30-{%!z=gIYS5s@D|2-*AXGKKQa7kdI#&>TQdRfp<osI<
z25kI57VV(JYDA%wRIq@)Gj(tt2yd0EjMLYaP!_>2pyyk;u0L8O4tl)-T6{={S~P#_
zAN>?4&ED<ivD3?aj)KklEWadm*5z=r(rn_vFw_<qs$b!n>>Lvp^$=|Vf5+>4$s!PT
z%$HQ{qv{OqP>pZqR78r->~D3I6ml+hzqr3d;d9z<1MW$qwHJ=A!#B}<?^Dmn`cI!1
z-dSsi$tXGh@UAYHm~8_PX%V>wL*OZsYL8mV;+KUdCnI&Uo&eFrmK?kZXAvqD3qI56
z50h`f>+Psz70?res~}-jQJvf8k3R0%HPC|@Xv2{qM0ukfbjb)9nD7p?lpN`tb&nb@
zhm3X@<BON#pgIzft{?oyh%w@Za0Gd?J70|-=xlncIb{*%oi2}&1HT^kz~snTc|8?8
zpqmzX@8SE9E5V5O3Q~Q=5cg|f!`0>X@nGt4Y!#x@bqWscnAo>CA=9lgC`Il@%PMb8
zBT;tS&w%{MRIRb+V>Y8iIFuEh5mmF2*B^p~!Pz=IYWZiJgtT~sfz*`p+z14hDYi3c
zUV^e0u_VW<V<f^!XMggk*pf@Ro4A@XnX{RRT%v>}eC-ZOiY?F@t7dxlUE(FT_#?vP
z1g84WMt%Sp6odJ~9H3D|!2?IgN7s?hiD1gC^|xJ4ZZ*uCLxE~LBQSbp8xY@r?9PUY
z`<2%Pv1^5I^ah$D^joJ{BYnb>;PJt|^qAP!{e$&hEwC+62a$|eLAwrK<*R)WD7K^r
z@9CT%s<yfE=R@SNy~t0pe1IV^4Oc+YVjub?f~6}}opbqZg94CwEZpo8D;kS08P}O4
zji+efeRFODv@a9}GNnX&bk}MIa39!-C{E;RF#V`xzaZbY6QB;$DFMbAj7%YLY6$F1
zrQm0EQD)fTz)O|4y)4HR)EM8&N8aV`-U6W?45UJYfZi>5)ZwE<rC3THn_g*?S2*17
zK6|n?;{o^JxH(#&WK!tPbuZ}(uvy11D(>p9yKt*8eJFugTlH>A$x}e>f6ukibpUHM
z9=#iDUG5L%V61z9q@@bL@g368Tcd}y@&5&-^y9NIa{xb57{14i#h$=4D>B!tU4UtO
z;P%z)qvX-u_*=t<09Cx*m~`I;m1!{DnV5&R5$<vi|Fb`fY|EWs*91@_1v&&1Vrp-|
z#{=DWq<C808Q=FOXe05E!+S6e35t?92^}AG;8fw|@<>YxzD)oW^{x8ms~IU&qeFJ1
z=q@8e{JjIQc9~omrrW7|pU<Jp3r>eCa77g5MQpkV|Ezj8w<dDm$KhX>s>S~A{!9A*
z>c2#w_-mlj-fC&|8<nb%QOq3OP*(!Qgk<W1t>)TYV0WevBTYoq*UC6V9UxeJk=SxJ
z-|{^7j!%Yg_n=aF<Vb25+sRn}Bezen?&J<uz_qdhN84cfuCJFfCLO+DX>Ha603nvV
zeUM=2=<tF{C1rT#N{)!jT2RDFOo~oJdyc!%Lx*<pe_H$}EH<u-_Gf=GYnbXSCT4|+
zpAJBQOI@kp-V;)wx4hjwDN`Xvi6NG-Axw(2RR@nF7FdRGy(d!+&iTsN&5sh7OWKx&
zHnINq!CKfCx1C$~kU;Mpv5CE))4JRrEr}xy^Q{~NdTRLj5anZZuESLMbz+1pT-EI;
zHWQa90x+G0MXX$mJDTv!irfyc?nIS%=jiW&#5zsD!$f^7P~DeEHgVyu@c(Ob7BN)S
zVe9Z<r|iMrG*otZ9H-T8{GC2BY152=o=@}&6>)F5D8@DTprBN4LQ`T@x-ei<b5qtd
zhFNO)TWi7IAmcFou6wcu=sTRf`fKqrk=nJ)FC<XapxHn*n^!=IlYSQ|(CDXenUx1C
zQo2E#&nepb%Y-lFw%Wo9sO)7Kq^->5fN^0R`G3uY(JN`1(7UkSDCO6|qmh!<yfek?
zDNx7V?a@G>#AFVGALbCBAi4)_#{SXk{UfAH8<*EFNC<94x%-voM#Phaz|nGL^jyNB
zB9AFS6iA`Y!%69~<T_X4EJtJb2591~QoI#I#EBz#sx1F#{<Tu6?%&<`7?!X!%A5n{
zZ9hI7mai7-*I<*6+M%!;r?LNpH~(06)_gw|cZj_cqamf!0?sfEQ!5?ON>8D4trDZg
zF-l+EOj8TRtxGdhL<P<nBc)7!mq@%w>dst-P1{nz#OA>#tgq!eF63ECN9DT?+&Ov&
zJB$)Ttwyp#L2PQ;F8?hSt{!|{gajqu8MREuxPQJ6myooZvp52o@bWAzeBsQwCV*5}
z_Yft)yzy(>8DGazoe2a3)uvFyjb!;aYZ#yVkrZJPF!jzz+AywxU^C=>hZAIWFhl%X
zl%DM!^sXllABeohFdWthgrnPSe<m1i0|z9S7@d_heG&i60?4_1ep>wUP@5L@x{?B1
z*`y}D09DLsW^!z&R|zBzzHXm4Y1vd?5XOCwP*k^9v>&B2{*mbTNi5q)3I-J}MG;^&
z1IV@~peuzGly+0Y2fGNMXF7CaECG8V$Gx#jzdQnZT{O*TX_rb>=Bb)UN^}X2gDjgx
z;s#vTcril$#TUc78m@uYclnwum0OC8iaH^a!NpMZ0h<Tc_IIv>b_=l#%Vt+~a4NTx
zr&P&#gEU1vSNq^yP5O%%eLwWLOoACHH`i)U)xAG1MG;(s_ZmaHOJ~<p+%cKG3`sYC
zW=>_d6n7+L(k2Ub+58e~O_^`YbFu$zAk-^kO&5Z$ax|K4Rq|Z~c9Vr?`afjim2+H{
zoNs&?Jq?t0DOz!1b@%8DT+J_W@+1PKP(?3iL9gC|w94vT8)ctlTFE>cFaNZSx&xDz
zOt#yNUjgg?)4sW>bJWBTB&W)iOqOl!9eNfhEq9YR&*-unondW|-A9_bnAJ?{IgDgb
zwcTJ|>@90(0Or^EvNrMu0{C3N5{d>omICpp<`2+~o1cE6Ob@u&D7l_pv>G|*b;6m1
z$e}ROW+RJ8N&si9cOvvrVFlO$J1u%k1u{HDoNsDgNq3l`dfETGa0axJNzZw4I9*B@
zRB8CBg(7c=d5Rb}CK60tBLW}4Tv5MrZqRCkHFb$71|6zQ`n^zd-`@bd|N6NgYH#hY
zr+W20Hf;d#U7Lg$A3M<zJv-AzZ+r&@b%XGzBsU!7XR9Od%293RZz0?Az>(#qmo4v!
zL0VsI43_-${S7`e;osLhkBAvm<+!<{2y%tv$q6p|Tb=-K=`yl&eG&9C8$1o%?7WG+
zu{Z%%Vs-PY(?iW<JhIVnTI#AydGB*f?2L}mHe3kdrO#Z^f)_w?uNBbQE#Mx%8{~18
z@4R}y)WkS%G4J`-r{Zt|wI5N@lpS(_wQF(prG&1Ze!W9-^2wJyJF3F*QExlOpXyG-
z$$G9YQ3zEL>)CJ{sBLrV8ssS7V)LACdyo#Xw-Z=gvNf2DyX<Rx@sI$jfzVgz{ck%W
z4QHqkZ@D=fR)1xWpzjq-ls)jpC$HD!Y>LPjA<@HvQpl(sBNJ9HUWHySgI8i0AFj@s
zgA#t$6Se&qGLatclZRMZ#=wbRQj;C@r+JP&CtNpItA+LGG@W9GYITu&sR<iYZ-mA?
zib)bdCoy~6iB8_+tArsqROSDW@3}pJnH2@HGTXYnRcJ=rd~?{_3xi;*fo-h_Go};q
zyfmK6#Ei*y1?Ia+7^VBRy35Yd?B9b5iN`WKR#nt38Evu*R{62zn4t*(6vUCf9e{(n
zN(8(uYeSj`i?mTf=Iy88n}!jP*JH}-tG}Bf3KhqB1J5-};Y~qH<<F8g56G*>J@q2J
zNh!7jG&=ilIeh@-@gM3+pe<gYA2$S2I^-3heaTYBCBE;+sbbgeUocRN<*aZ>5AaC*
z;=Mrx^HUlhQ0)|+T^}E?PTy$lOH0Gi(|<J?rAxq(L<VNcUx4B*ZHOPRG$Aq{>DG+U
zxD`9p{tLm+FiEy5IWSiO_-vk(2F@@ZCwA@x&f2kWZx6A(H}gGwj?&KK&C#INk#W@j
zAW@|2elRfJN-npQJs80BNJZgz>j?fNv<W|GY-p8;5Y<(AVG{dYW1j3%hDs3$BVZFz
zz~@u!((Rm44#(?jo}AfOxs}*y_gG@d=uNm|9@I+aPclkx*&z$n=|fe&MGKQe@hrxi
z%8DdvKduD+)-cYtCR!4ZGxwS<jpBy++NJ8nEk%L!g&CF}r}0R{N<<?yAJ%qPqIuvN
zc~yo9dT)B8yIA~VHMW55O!n|~noj(%MMGB@alcN|;P|)vRr%HYS`2p(3(0RwKiYw+
z*oc>uxxrBXyTAD-i#8Nn3-_(n#KisWjOTK-bkOI|JCk-r9hc#UE|pmKg<|b?#OIIq
z<i5@d{^*`bAXp>G@MuIUcFKu}t#1m7p$5*kw_40q5$o*t%2GXj8?jTgy5CTjI-}t^
z?y)uz`TY7Y#nBm*YZv5+ccVWZK}G#M_ehZ+aS@GFpWEBl)?D)OSfBgWtnJcJm>*pE
zIp%WFo#=%xBvbpVLyo^V;^|C1SSTsZ?bTOKRVmlIsj6N>=NWf!AlI9+Ftf3_8zS@}
z7zGcwll6#Hzra9v3;%%6hQuf|qnD`Ncr&c;v+&5a4sjW^<6~NGF132;SSe?c1ui$s
zC<wQ=CPa*im5em^17GwbGt%Bz*X%T)97~oaqZKw}bg;RY60*^r_EgRhSry(1UY4(o
z*#Je9_=9{zuW(YmSx8=Z5|cC8G86fzxW49gk<$CD>C0NNlbwE_3y`Kqk6D&7CS%Bv
zyuy~os~3;MmYJfF>B#)zS3Q<t%lp99lG~J_HrRWQg|jV{G=YR^7i#<M_Y>sSp=>Yd
z;*jMk=?nB&%pt4BIjO{iP1p*&x9!uei8r^W^YGe-{A--dI6W+ip%nk;oL85V`-Y*k
z!SaQ=tVZ4BNK0_+P#mir<V~qNs-7*E$?8AzS-LS>&ZfQ6zDUTfRFet9O61f)nVrgm
zX|_F7RRsamj<G4avsv3@n{(*0+=6Uaym{tnN#xP1>t>yy<gECe>j06M;I#ZO0b{cZ
zFYr<6aw+0O-~)+Zs&Yr+Me&a<2|uUMZwSESYju>T_z%02qKDU%Od6<H<NeKW+oqby
z&Gj)0OE_AfJE?-=Aclopd6kv>{963pFk$0sHSr}U1M!~y5xr?QyNz+6#HJ<~y>+0J
zug+~_bZ#~}$O>P_>G+RKSv?IYUp)Rq-&CaxtovftY2+XFE=?20do@wbIMM%vpkfFi
z$Ml2jWlwbFKc=FTQFFQ14gnHGqb;&`mH>EZG1SdrszsWOtIciV{mO1^o5jWR%RqKa
zoWrKTX~{Qa0}bZUjQZ~6rz0$omaHcv>)EsHKIQ>Ev;MFG2-xiZkwUS_8bYC24!S{d
zb_Y#sp2=w^JYCz7m{91ilLGQhsK47<j2v1fz58~W&+bamBy;w;jse)xZTVc!2M}Tl
z-j)=c=tkjDiRz`@Xx(|gwqU>MPf2>BXucVH6{yiXVI*%jLb+9RxFO;x_dL4w8>nr$
zcJ!o8OrJss0;-u6^{xTbL|}pTULD$O2K}G%OzA}+6^B^cBk5hCJ;$R;wv{iC`qHqy
zQIt-;8>T<7_W*JbpcD@upWj=*^Z^~Ewy{lXITeqJg)x_(a|uwX`!~|x&ubCerfu8^
zSY)gt*zAoWm_=7LPgOIh8`|H(KF_Aro8Q&$4SRIvA09|%keHnYBIK1#=Dj2K=<I$f
z`%>|;1e~7qN^n@ahP$QUm!*p_t2_HA#fE0xNuek_TS_XbZ$i#wz<NzWg^&KJa0bnV
z<jT3J+Hl3m3AfqZ@ic)<Ky1;KyUm#ADl+Vyq^}cD5$)5S7aAX*s~Xt0hEH!L5l3k^
zpXq!U`M1n98(k%^H9UGIySe!2&j7^t`-7&?GH9n@Z)^hSd`}p}?~i@#olbaRF|D^>
z-&Za9%4fea9w|xxTTvphGQ_qj-|Hfe59ks)K3aNk2MwZN#bLQTAGsS;O^+1~#Eb%{
z5sjhG3mLBn%`s31$b8?(21+TP&1gMIk#iLD;cN~xd{;Jmyf&eFBe>F!GR@#Szx0s!
zyOk_V{!e^l8X)Q09|_imPVr*RSdVVyQD}WZIxnere-BFOb}=kz!vaEe|ITgYb4kz(
zM_wSBckRCgbVj$6B}WTzH*<P#4zT;STgNMC=)2a<kaoK~0Hjmm-gM6X`i^JkrbH0J
z@3&>U8BXUV7%rypz+tbRKW<#g8&u)?xRuX$?VC6(CN{ff`?PX9eRE$jD#KwlJDBPo
zCj`c?J7r>q$Oah&pq~lb!ZhX~H3?OJnIuC1J(d4pIY^T20Vwn~zwbr{X1JG$-<PLl
zzzFHpEhTSO=6Lr%9fET8gzV;<ZOF_EFfT4s{$lW*&BCMlZF&?{xN;WA(Xc)BG;_6s
z5TE`-=-@<a>nL)5iTQSs4jAFC?vwtsozwfSE^}oDm2<8hpI)l#ssa`QklfSZblyVf
z`zYQ(FfJ98w2N9h{)V362NLR$1pO5SSzmZw=G)HemMl)9xO*(Rd%jo)+b?^Uhq9(S
z?eLdvLrd@f1Y6$GLJ%Cj!ozqbY;ISt^hmlj?`VX8;9&~BW&X<EWuBZ(!HS3;Cl~z-
zD&*(x{bs)`y!oGR^`QIsN#FkBBKR9l?w_ixP#okp(fzz}iKgz`(4D9P88#9$84>3G
zSVzM^pU=9Am0U9P0s7bs*9M!u{q2+|5SDJ3VuC$~I^NVl*S|uLQ8u>6x^#6Bdtf)+
zQML`XTIv6KD@b0^=gx*-QQyloLjIxLGgnO%KBb0~F>+(6fN#LoNK(>jqD;G+pMq#J
z1EQ;_!W&gV)JN`}?CZeGiDePue((P<q=?g;gjn1pd~K^!YW$I#f8679`mdHVinLgy
zi5_vP&+qq_FmS2j$u<aryOEsWjNbp*{uC?^yuGc2;vW><;`SdDz4*ULDMs3NV8ilv
zQ3{fXIaK1_5+8e{Ff6;sgK7tuvQ)VvB8G#bnBGZ=agjo-DbLvFoUi$FwOA}FsOg6O
zuiD-+s*Y~k79|jZLjnZX;O_1g+}+*XT@yUW!rk57CAbE64Z+>rZjo>AbN9LLo!8!v
z_tu}aU{$MDYu2ne$LOPv-ZiH?KQllV6HSDaWOlZZaJ9d-dl`C@C%Yi|&@OxTF4T4U
z-q2104nRk4;Ht&l=;g&ga&1d1?V}k8S#<@_@BKBrYg%gmrMnZhw&L@DXKpb1O=lMl
z#zYKS><`RbgAQRef#mlorXfBvHreV3y#q<T`K-BjZzSN9VxdTF&2@1unHfonb^_Fs
zj`wvIViQx!ehM;59GKf=5i@$o65+KRCq(@PRAU$4Am0H!dNfbj?T}wIeSe(@6G{Fz
zn}qteHpj<O6@9?#1X-!1SK6}9T62m+p9o4P<)I%C9{@E&{(L~*L-<;3-JTVVMx^kY
z*kmHkPqYVi;EQAorbPYwJ==6XqeIZKNa>QAj`aXhSbL(3#knyp8a&^JiMKwfxM5zh
zv)*gPm*biv^y&I1KZ4nF6b0;T!;NZOp{Km$@3NKuhDgv@VER)TsQ>W&Z@#xr^!`{P
z;b!9N!y|hm2jqc8+2n*7DN*b#iJTa@ST4SNd_q^n{?aZO`6M;aa}NQYN~}A$gS_9K
z2`CVltp^F!1qAFka9(_Zy`Gy|huzZw>Q7<DQ7G&%e~^09(;2M3&z$&n&ovEu_ctuF
z1iBzC$XVAJxBLH})NPrVFkr%4{HI<HYFlY_+=nWl$Ri{Nj`pt5bYc%G!U#G6V$Z4W
z_+uzTwe&?Gjtsc%gzc#Z8K)Q8F^Uul^2J)9yXD0y*<;2mD=;=L`^s%j&H+Y+KWbcB
zoZ;g*Z`l3e-f)hMpatgOEwCL9CXbrOr~g+pfG<{C2A7sK9QWIK1rVosrXg1sRSFg`
zgC1e#m`3e=S}o4xaI!FFH2&=aqxN7|A7ePnB;D&*ACW_@%AGw72{pYYd%u2syJt8(
z#lN#S$~i}5V3f;j2%+>;xPc~&Rq4|xo#;*!Pa7HS^C|4_H`4fc+}a&Ei4854)~9~j
z$Z4G$$r;7_6Gt!pufvJXY%>Tko%fjzy=yMAZKqQeLp>pmYaZWP+|!Bcv9k4bKr~-F
zgpF6Pogoy7=-eMw$BH!MUv4TyXh|oZ0oMn_UwAm&${9yh(JhQ@gQK~<o)y)uD=G8h
zh?Z(+=%DRrwstx+_cqV!VFH~}o?yO)9gTTDz2%QO^j)jr_e8N?tL=At$)lNb+(0xy
z*RIweSv33XG@Xmzhol7*cC|7~aL=5fbm%c3uiIywlAW*0%kH1rk6dq*0cw`+a*Vy&
z%SoSq@S01BQGGp7&~4E#eB$h28*R16Ep-MC@&8LzW<3_)j=C_}%?1<(t52tmS&yU;
zE*xzX#t%IIL?hyiyWI^=RC+EtFDp_i+gVIY?dzt71M1f{2M@fP0zUjhiP@s)NH6cV
z{AI{&xT1HIzfLzaAKrZ1N3h_Shj-cmqR9KwCCf=p<WCi=0-e`^i}rxzi7B0BChR4F
zJ$xo43A_ThWIh8)llS^rSKA}7(@8TmetPBxD*WH`-lLBf*gOyc1^W6!m2B@shc<$0
zbBVJad~vcdOZTp&mEzAlBWlWaL?rwYa$pj+#Dw+VRr2$v+r$WIzN+a4Faxfg(6HuI
z*KQWYxb6ii+j{%e-V-05>*)OD=~fe0GIYPJQIW>p(6~^pJjNs%urcl$gMo<`#7-;M
z7aqm^Il7zw2uHV3ObVl|IV823a!HcaE9W6WP|t^k%JQYKF2(AjLTe<FqJg=X7!`CK
zU#P@(-VfRxkr0<*bS2{Km_OzMu+zuiafhr1K3|MTc0g}APJ_aMD#xBxvBqIz2?CJT
zsgw^S0_4JdLc(y$sl78Umk1M}&CwY7Zh~Ke+KONsV-%F1l?0qL5=VZ@8|Fwu^5<Hq
znF4qU>>r?>1eT>GfdoU71Dn4xoT&XVzJ_4#N^svy8YCuaOak=|fY<$4mKbp5uYliu
zi#(Xv2z}wMq8ak$<ddZ)5#^^w&aVKD3`b5(LSM;vuS)n<P7ce*7Dk;Jgt>^q6ET=%
z{yl^qPL#ZL87Kk6jOE`JhUQB50nCj$H<t9gH~|non^^K9Bu|gS0~7z0m6Smd<0nWs
zNdUK$*NRS+Z?JVf_?2Kez&2VCG6A-)gZ;>70gDSy;i~-3y9q8etZMz;6^Y-MIGv8N
z4wbAU;2mBUI;(E7ltt1Ddsrse>)YKMfPVU<%{VD0_)(2naS$#dA96e(j~^Bx7}^0o
zx}2XCdhv@3ycw>jy>dN>NS(U-q%S}sJV=N&vB`(A-IgaAU_=_%0#+CcIG0i`njVY*
zB{GRd5lb84EE9K0#HD3t-1eugo@LO@<7WOljzZrLPTP{?QeLed_OijlG8kVW2%_R%
zltEu$kd-m^KN}cZ!8fGrCj)(gcg1<w-&wK5N0?)NqU}b4>oqgqBZFQSE<?VYimZW-
zn!0x{uf|0Lf`fz_$lg0QwmEwPkPkqeVqITbbK-maH+L!(s4DSNMoZTXZx#?Rt*U6Q
z!ul;vH7<|SAta>VA?L4WQ_d!+7L##d+GRitV(0rRGZW*WLe2%L5pEE)7NmjzJr8D_
zoIwWu2I$U(G72T5VyP*4;(|#H@K&9u>4{dU%Z~SfUb<u+wy>;`lnY8$GtwgwIL$87
z_u@=Y_ZJ4Nq34szPfus@)McU;yR8AG0748#j)}(%F9vH#&SkD`hYp>p=piQ7ZRr02
z;_8)|UI{Fm8La-j(%jdd?aQ#eZSRH>i=$N!FGaHI-*b0RZ!Oo9eE=G=`K1<kBUxcn
ze$u|a^^MU!U)1~yaDm5WxZD1h_6$D^BGlYdwu$5-#VP`Y|1Sz2;<_Ius8dyIUOdXe
zw+5koU-@&V1N5$Cw*1pCEoy4_+KKaSX|_O8D*jL4Mh6pL`{o4uC20Zx7c>3SAUg%t
zuLHzlvH*boG%%{e`*g>^hV!ttvJJ$6R>K*e<hI&|N*60TF*@a2<cvB<Q8`=}LPQ4O
zrwqgXqgj)Dx`(>){@yr}IIpNXazpBz&{F(Vp}&Se%Rd*J*pi4qloHGlPoyE&X`GIW
zkSlx^8M;nYDm&811<7RJ#!?Td|9g^f%c0-{0IM`J-x7WRv%_!+^Ly((d%Ea0bP_}U
z+hWP&qh4>|k(q>0_MrBUmlcoXo0k>7Yh)D1r`dd23_8>RB_{s$kX|%c7^p=^`3t`}
z<OK#mrK{$Kt3BNj2tJKtSP1~n-q+>Ylt7%p94F#fHrl7hn0kUtd;r-P_F^#GYx{AY
zyA;g<C?)d%CUX&V%tjaQrYkuu*{_ynyrugu5C{IU_c;Ay*Pj93y!t<hhD1>-R+HVC
zZS}I10{)Lgn?uxZCBFc7yU;;shCFW-JG7Dh@>+~&T8C91-3!>A$wO*OjEg>;Uq$Z)
z2qV5ySM2BPa~mhaQf^_8YiyAlH1l$#yyu$Z0^yRKmBNcek55N#=Y-((vy$9hvm($k
z53Pt301<#WV)9NK|2Ukwqskaon&h}47&)W;td|cSr?5*Hyk$2!I3z)#QfoRm(XMm{
zXA&Z<z7M}>UdDfE&qP|FQ1BoEdeN^^m;TA?&!4!xy=uQpZx-V0v3jF%D1WE(psKk>
zBGNP;)O|MdO5}#tW!}~~wOvsEzWCOYHJl2_^aEx@Q`=va6X#BhN7#LS;A9p>0RroV
zhBb#msZA=yTfLcbl;tW<yLz0VmJvB>wJDB0OM5+We6Q*A{VP+`L=yQ20AXspzFn%k
z=~)l!`631veQza8CEH~M5cJ1P{!=y-KkP|JN8R+-O{(a*i6I(rQYyR2tqMYN_h$&%
z{_r}2uQ{!JDU-e&fG#z6QtrVfzB6e54|Iav^A|d~0Fpk4Oo^i3#>xXu8zzh1WK;kN
zW$f4KEL;tz@~Y?7(=OiqRiVC}L~y|^kh2#4nuT|oSwAX?o4+}B3P+b>J*jj!>;PzW
zj{w6D;LHJCL}OZ)K)B(}xq3lSxeYlKuNJjBKn0*HH_|6;C7^D&m^`IIK9}M3=xmw#
znL@#n^MIkL&QfDD<GJd#LK`{Nxepv8b3O5fHY4yqC8D3jZUFXPWX3J8{bDM5*|k+B
zQ1*#MCzgk?c@<Uy+Oo0{@R=*qN8w^-;IA)yw+`zq?(%u3IUhMI7EUr_Xcg6U=T^@g
zZrOF{-xLS0-R|)hR5Qb!UF$UlP!f5fGU$LjKEu|LY=SHuow&MDyAkIGI4j|GjK-|w
zAIMOZ!WZY#C(aKKc|7Yov~)>N)gx>aeaYz5P0bj=e3{Qw4P-S_+ZgxGUi<s(m5eIr
zzT;ZA+)f%kxS2N2jRn3~bPHd_#Grk*fcQd!-bCrwUl+pDtJ65kZ>CP1jMuIS$Wm_{
z$fAa=Q)xIZ$?%9oT1JsE+=e~3S<{^)TGDMcl8~_3^k%6)h933Rme{UHt^=|#Hmj5P
zJh2pz3MH(+Rw$L_JizkiOB;@5V;zW<j|p}?Sd4wzely7E&aC~ImrOheMCV+lBbnIm
z^+n99#Z~<)b`-c|?-`j_Sb*J$r&=u`!dyrdy7sh(=xdbyFPkfHL)1!^XMZ5BT$!M=
zQ?}KizyI?HH3`F*E~b^H9L`$-fN4~$WT#vSU4Xz0wsu!#*euAAfYEUAYpL6$l^g!J
z3r(59)q?OdK;e3uSLLh0H&r^K@dxR$r+eEa{XoIQ`^<OoTOKAKPZJi+y8KQdT}|a?
ziZulnl4f7H$@EL5S5@aM39$p^z4<R908N_;H*Wo|(YM!lip`sp$kV7lm~1B8dDJ|&
zP<aZfB&Gvaz`rqU^W4)qUPdeB`cc%8Xbl^U_5T5-oCE$Kft@3jhMgzI8P>Mf;fZku
zY3xLvE8}%mdlxsqkK6~h)Nk>)W7G%2)>8ISYAZL9e2LT9ZR2B-f2C_o*8Z3+emZ?F
z#&#L5-1O{e!=A6!7=W9vb4=9edp4nSIp4dEoBh?m#HgIx8F$Z!9C66r$yNpccwTqM
z&%LdTP?qXQ*KM~{7Xd?bma#puL%w|-n7Y{t?xmFre}R<pDVf?vDEE4+?+h-N<!aqs
z|1D`8O+@hWKyXs$b&ntMd+A_a+5N$GAC3ASf~%>b1-YB5PrPH+G6JnwlGX$JlAzwA
zGixLXNOKIIhHLsiA4OQfWy2x!aUeuS+9r=y5NS#`Mdgp!ZxsEoF%n(A#?!aof-Ra~
zPp97tf`LT~RSWa;{<jpd_O0aaC!E<pQ|n#wf2o;6v&Pkn6xMk$i6Rr@$cb?|AU`DK
z;xVU_4KnDB@q>_2{pu$7?6O?eJgkxk1gXPPPs9yLLYw>nw1YgBXMBTjQ_8iN*_DxL
zwS(6PK#N0ku66rc((nH#QB?YC!Oiq3SpKk3^Y7FElNekmIN|fV&73BfMMQ;^?~ll+
z@39-gt@s~pc`n8Ph-Vr7rF>Dt?3ywD4%pQZE8|4?iG}o@VZ*{WNJ%&R1pgR1o)ItI
z>eP~8;#vn;A$`KmBiKU^wrcpZ;4y_gm6vs9`|G60@6AwGj?~kIZp@%no+45w8lRGo
zZK!w*@V$ecs_&0(nIlqVFOn+XIYN-d>JBxC)fgI+X`(LS^q!S0Buf=8I!RTT)a-ag
z+af*hupGs86;Nt!#lm_&a$8sjQdDib`p~i&;H^mIhEAE*iKe=vU!!<C(aQ3)^{9gO
zLnu;0p88^;eZfo#5Z3crAK;u#Cu`4WKP3Y6ibP5Gbbg%lB}}xd$^WgJK1H%Sy=I^P
z4uwZnG-EE=<yy3@iZh5ypgrLg9581H`*P3WXissptqfK5Xy>8v;r>eqA%ga^R~#>;
zrO%{(YlYbmk~oK~^nl8RA@0&(g^>Ba(@%cT)5D_*#Y`lZJuTBo!%M`Aj=uD93v9Hg
z7z{Nb$!|!My!U@Ukz*Lw#Sf)x{Nf^~EbIztetfTP7+4qY@n!DlyA`TcG&q5#Y+ieK
zcrM+$Rr@PF+Na2AGc#>MEJVOkj*)@~Jmw3GhP=V6SwWLn=_oP*bNa3tzqsx04}=(B
zqeF3;(?JMNTb_N~{XAMH8G>hUy^n9*faHDeyPNfTevnh55nB%D;{9MZ`eF^$qMWz+
z?jjg+dh7LuFKr=`$g={tnK}}MLV%?Tn1s=-qZ^FSCK%S}1a@T&2VztiBldUH$;#w?
z1IJIo39v?-Iqx4;>nB}N!wP=In157wvp3BW267=YXfXr7FJ`WC7FAw;Wp&RGO~{h4
z79z-+Ur5NoF1Gc*p)U9yg0v!W#th`IAQ@Ln-~m@FFmlio5dj(+TwMatW(J{cS&aeS
zgdA@55wvC{Dcq9{o)wJJ-YtW-;CTo#Ogd`%VtzL;Cm8-WbrX|_g3bR5brjPaU?4#8
z(DnJ8dM7=~S^>-|7bI==S}q!Cv{c(n?$I}qCy46ww}~t)?+QAk0ga&gM^TvuxViBV
zC6)JSYV{4-mR!~l@)inLq!_vND@0fu5yFND#Rv_~U#Xus_)j0(1<UHbZcRZ>ehJCJ
z`LKvO#q$^!kBRm<Mz&f54HyuRD{(O6v7{V8Up7I{Q3+0U2e@y@gy1<8{xfzV=<$9*
zHq4*?h(v=+v~a+#6Knh5<$H8s9!q#wIuM`(j7J1_NM;=1aS9ZaAn0Q-`1Bn$9~y2|
zPEzkHTS(oj`r)TR^p;8C6g6~73I5wux%Yr%6nmEE+j^lK8V(Dzg8c7>wWQBvw0TH1
zL)Jd;#6Z>E56EI0l_@%CkYOsR6EY=oAE!2igYD{lW5iw3$dyr0Gvc(NHQ)s`aNfK}
zeJ-Iox%Dk^tecD}FKU4au^<o%_nn9pXP<R5QJJdXHgxf)3{s7OjIi@QN<Um+Zo(1~
zRdEcz#D|H*p8+X1i~}E~Ac<L;38CW17x+k`DWSr)Mh^3`pT&V5+srp^4*P$V%DtPI
zE7#(-J7YMAW>fJT(EzcTFG^DZS%XAunssMnnZy4wi=G<&PjM0T(T~l3+EN-$qdzl;
z_&og8^uJwA8}aJ{ij9*=DySf$&+yMDVgtzKR@HPjb0QZFb^BR<pMt{#MniMEva`4R
zNsaU}7l_Cfy-$n&)y|R*4ptSc@bNw7UwL$5Z3c~DL0_RQ{ls_A-pVBaP}yS^-yH)g
zhh2+HB7q2#fRQTw;Yd^X(=f|yQmB~y!XlyX^Uz}rEYu8g96Y+|f8}N@1N6{fU@r2o
z0R+-!o#<xm{w2z4|5Iz1k&S<~<jzg!PxT*aV8Io2CP%Q<Ig$Q3B8@n!er;xKP6Lyq
zb|O`q3&HdI`QWHbjy>6@g;tT<mtbH&6OMckeFOg4BsVAjK~@JLHh*EDo#Vstq3j(}
z_2Y+H+IBdh{@ZR^F{GlOx<qc~vjLW1_C_=$1&-2Ok)nv?!vkv1hrClsTWziPrz1MT
zg`y+Qo|m`R2uM)`NQ1VIK&@Mj23T9DB{T?*rcJF{wH3|A{Sjur)(*dmfgAltS^VF2
zw$h)WS?T-U`l_a9{~0(ye<-m0VpBX7{FZ`>ouUx=Soc>q?J@dLBohlx46L4LO7tYr
ztYp6K1(lF!18C>p8lP6<VCH~s)PhPVT)_LzwM!LhAngPEBBl7l98G_jI3`5dP(?^j
zj>J*ENu-iqs+K1iW+;L&mt>)1xy!?tZK(+VqQQY!eZ&YT{uowT5^>y=<Dq*KIFWlC
z4cKxFkyTTIE7}hYtAF!eL<Ukh!+dJ!FPPm&^49LzA<=Gv%#>8TwB44ak^YT&f{{vc
zM$@5v3`VgUoFU-{Ba*zG<Rx|gY~DybpvzzvR7}hv{C8mN6>ln$Vwh*kh+q=GqdSiQ
z1vM}Z`-J{Y82n|Ms^WJNL|%@^FrCLP-_~77_?JHc&l?z+$lrw+SX9m4yr_W}D#F`B
z2|OJ+*>4a0-w$tsVSv!n<bSxsV~4$|^9J;^=@BkJ0h~Q`x`Za5i$lOg!fhxLz;6IO
z;S}ayoXPDX>J74=futRJ1c?H04(FoY)m?;ow%Ri6WHwg@&onf-t{w`;VYBK69HOa^
zjpDaohIfFtWof2HGu3LXY+T)emsJ39UW?c9Mpk5wVL6!Cm&@3Znr<P9;UGBZTjN;(
zrH9L=fM>5ZgjPBv)Adgtr_U~_rVS~s@pNOL&WjvbG07P8vRoBOI0Zl~^fJE;oyhq4
zW<FoUp@V=O`l(?V&S&`;s`L0qjPEiC(45<9dDg)9N2iXy|E$rA({MKzUx|~h%q(2N
zL7re5bzIq#l=%-!FmESdR+KFBK&<`);7{+So{#KBrG^HqUh=B(>Y7~8x>xeuetlbp
zm1!&siQ}6NK1ckz`hcA^T@j%07<mIn8DuK}w5>=kyAPdiYP?6liLtg6wN)>KxvsrS
zBiS~LMOo0WZ@Q{p-J#{~-gO8~oih{qCX+VE*{)n%!f8Vr)2WTJ{aKEC0DAg*Tq>RX
z<X~OzMw*BNschfta)2|%HM1p&LLxGvv=2RQuhF-`qZfwpb@(ZX;<B>1w9|1>?Bz#R
z<=JAbOiehboz2%^*rsKx;^0))kPO+5`p&u$1sEFypXGeW_?P9#xSuL-1t*p)1UfZ(
zVZ4r6AG^-TTh-^!1E$4ZLGTU?=uv@(oX$=rQODG@g!7gtZ=}>)+$mO%Z}%QSoK?2I
z`mx0rm_S>uD*A{lxcgyC@_IYR-S)hLPUFaZbvox25>H)9dLCeOeSWO@D2l#`&Sme|
zG`^7WuC12@k58_8b5MrY@|7M6h2+Rk(MQ1l3H05oq-S>NhlQf`?1LSzWc~qT)vq;#
zHVmLGSyA+L!Qf>^<>lpfxQpgkI|}tH)7^N@;HP%WXsG(N$C`)n)Y0X~1J{v^B}Q7g
z1)iVvYe;NA7SY1PmTK}gstV0;CazPH8Ae_yf+V~36oKJDe`-KSdTOA$X~d=Qmj;Bf
zt%_J5M0^qGGzs{OfZ|d~y;(Vz-QW|^G3r#qfq(|_;!X8W|HTTbg=v4=_2|dv2yTa3
z5jfw@1l)8QI@>x}IK94qJCZLYW8gaybuSn%0t|A1Fdpmd5k2U0<d=YZg3Bv|9=>4L
zt{tVv+Ng%{W&XRWW$N((`s1@TZJiaiN1(Tic<9|ifbJ=#^_TrmH6;!Wwc7veJ}J=+
zzoKv%GmmF{te5(6Kw%*49F5Msfy$0JjPzh0s!I~@venbq$|1PfAv)7}J|?;ym*ID!
zf$J`<UAC<}8;!V~$M45X8$RBz9#C@7BFSx)RXq$IZ!7BHGrB8!b<2laG(`hCEaiMA
zA%8nt`FO`qMp-g|22)94rK<$zPv@^cJn!p=N|6l^ahNlYnF%5CN3aI~(z*49D)&Il
zzob!lCLf}wg_PPT*2kX>p*j|1A9t6U?hq{dstmY=fQjV%&GYUuK)g4o)3C?)3*WEH
zsJ-qUnvy=rp97J=Ds;E;QKgyNa?0Y8lw{y(X|^#h$#6q{(>=UadsYWxUs<7sE=^GA
zz72WnDZi);BB<#>8@o8)Y!%<e2=_JNYFRZQorkoFJqnBbD{!0ffmx5@vwXfRLqJ0A
zv7<}nU_-F(J5tI>yj;<T?G!_&;|%;U71bSAZ%~Q;6z*L}+`nG;G&a#PMls@RjQ`kv
zKt?m>!n-A^f4`+n3-R!XwtQ;K|Iu~^V3c%Lv}E2Ja_<;U$6lqm&$nE`Y%+z38hsyy
zApkVbDlYTJr79!(YDVa#fLp4se>I<(R$i*^Whb<?(fcm5R{9x$ND~me%&qLtmQQn1
zuC3$OEm;F|Ds&3F`i;w)3mGg94ZIIEN{)i}YAe6DX*yOJ$4+RR;(|2dbUet^wCQG^
z=OgBaq#Q~@JaW;wl%Hy;d6xSMt-_Tnb>^=+Cb4~CM_=P9$(zrXZFGUbpn7W91g5*d
zB$I9w;d-WD6<cDI%}8dn&)`zS*0L7L)Le}K;k~>W$`yH&TCMf8A5dLeiekuYmvT;j
zqME0q{t0}q9uC;gUrKz2%6t>7O1bdp;B~1-E8pkq^9Um4t3UTwk!FP{=5XLrbgq>h
zLA<42B0+y0K=iWzahiEVpe|+z$(zcStQQ5@$qM}T#m~IbdN-U-%ZCpGq~jG+?8qs<
z?>ArY5-%^J6mNB%mhTva8w7|g+8aG4DrpA2cB`-FBaGXpU0!c=L-wzFmQ#1sMxQza
zc1>PrS-2sg{MTI`yKP&afB&8BCvPR&x81NWSsYMWeN&_SpEpQClD8wk<e1;G65tgU
z6!-W2zipI%|MUN_%l?0N5_0=5L`3&QRR~u4V3GmkVNZm><-g!^r8b+pTKv(5pc^?a
z&fA}@mn!{Q(FQLo2tEe{3_9e2G4ncYe1}<YB;kZjrDm-_@nfFH`Ay?T%41E8EVJyl
z-5+*4^d3wAjUfCSoct$X9~VH)kG2U3My~P}HDt+UBq7l^)43Q~<$gdom?u(v{$SWG
z?K~g!ZF)h9k>%jhGGHZb&sZpkx_u~t>_*1Q{Jw0Pimhn<GD<DC4pkH_qk->`C|P&-
zLOUgD-O^`{n`u`PWGa1{WG&7KO8j*{q+Ie{_mPE#j^KIUaAoy;ablw28hgfe>Ly;@
zG-iQR;>Gph=iJuk6kZme=g;Pmi>vFp7A7xZq&0McM*T+_*Ta|DQ^DrQH&1cCwz2gi
zOHK%ye5sq)nMc6SB5K5NKh)Wwq3$m~TD7C*prmfh-bTxXV<w;y*-ceVrnYK+Fe*%P
zHKt{>)m^AH66~BSAUfM9USB_+`_X2S%B%bJ!aBZwWYEa{>|>*gF9&@b?{eAo2%Joc
zYM9mKJ16|v%G(3{NiQ9fr^tPx3|kuSoq}?Yj?QP=bj<|>L^-j)gNOkV+jEXO9Z&1D
z1Icg+6|x;!BSL9sKKlRSYt{d5OY10QCS2b%$$4{>9B9*uR26cZtUIn7ZDNCm96hg?
zaj(5oLYAC6UZB`eo4o6Spz|yx6dppaKX0;r(zQ+#z4N}~BDiiL#*}%yrt!tl?PGH0
zaqMaOf}v^DFRQWF;@A4f)moHI7prkM<JpSmSDWV=^_eNqr5VwkCN^2*$^o0>x^M7K
z5Z>e2ao}$47p0!!KE8}m0CiYIC#;~xUh|&mXVf;eTJ_aiuV9Jgw1}xc!c<<J_g!y%
z{dv$hZ2kDVmWEljDvH(7$Lel&FQ3|8<6`Z{2fk4ll=lks);%P=wd;mZFhfue-0dC{
zk&af987X$x6ch#Xb*~-*zfK1vA0w$R*Wfepcbp0;6X6(aR`(_)$5!0qMorU_FK_1M
zwS9T-*ZC?-=G$JnZlpMw?$?MmYinOgmcL6W3b9PZNOd=KDz2+HJFdT2;|KM<p4}Wd
zGKUVXJa+wtd98o&Q5AOU^<SjB6O;V<{4nLX*-(;^{*3Mp!Y$>6MNx2?LJ?-LwgZEG
zi;q!L+fhWxWL9pRMe(#@Ug*j-SL}9HyvveYCr3JnDtiKK1KP$$aH)wJzz-H4lfw%u
zF9TrQ&k?xzTIgTd&<4WoJzo)z7-~;1msw8|O}0e3Be4B>T9pk0Wh&b&($|bc*X+mG
zR=-iHRw(4|`pumTG22PsdAhr;>JxFP+EcAx*Jr%ABH~7DOP1!K`M%grSJb-=37?24
z^@qc~*m^jfzFObw3z}Xi8NYfw7x=99#Bnt%mk95$cvYBc6E3EaE%+Ba@0}mmiia7q
zH|YsXcwKJjPZiA9+M8CyW@$=b_-NV6+=!7@c^@3x`sU7Waz$Zh@>=4FBfX@v&8I1C
z1zDxdwkAX!tAu{;Yhp6R!%VHWJUP&KzSlvxwm-k!Kk~GP`M@SyBTi0N>ch}c`Rg8#
zvZIWrg1W`TAT1y!D-}K;OTcGUxjXVj(R}dqbU)`~XR@71Th{hjyBP7rwFIHV6s<ch
z%|DNNb~drH1DYdmOKiBZ(P+^(Y~`qy^Sja=4&tMwxa4DJD~YqyDWQdnN~dg2lUrS9
z57(Kx(@FCIQpeIlvh(A)k?Tv-{%v>n+9FA|x(uC+t*(8^7LRKSF{VRi^8*7J?Fwqo
z*YPYEB8^yM2ScAvv(47aD5afGF2NT^FdWIMjnB?~joKldJP;q&=Q~mz?AN}BI?_qu
zt%r^?ecDv<aeZE$WR@ks&XycUQ~?yKztS(G5)Z%HNc>4VN0EZtg;?z5Ic(MHbki;k
zd+?lYE|E?ZljlO1V(VC~5_nF4;59DyHUhpDB0t<OMn*<DZjviJiP#@!Db=lXpLb=|
zB@!Lk_I>FPM{Z_aiyD#*GyVoa0PH?~210@@KlOY|&&1A<5L>(+3Q(y`Z9IePD_Ggy
zk8_BAx#T3}`YML-i^h{;OTF9nvVnKLm56SLi_x_p3N^lA|N5xw7nFnb5$HG;s^el{
zvCnwWbY$|+D??19te1D!@vH5r%<mlXbtu16K^Sv|*Z1*rAL)^31xP*zD%%J*OEMsw
z!iiKUb6?&b@}mlagh#%iPIE^?qDEu)evJCj14$?6)b&j_8LJuV=r!HlG-&agBph+Z
zsVQ%!iHWIcuzL4y@~xW{E9CHa?DRLG=c9=DU=`txR*!EG*G-x*$+0t`r|le83;Y+W
zqhjy{l}hKNqCyagjWnI!Z5Euo1wC1QYqoM-JoDB^Cpvd{Sc~5JANlJ_#rl*RgW>VX
zAMY~L6%OvGca2xlTD)CGBIt+BWM3^_PM5WQ!KZcHPe*iY7<LX0jg0Wc)=eI)eR}=f
zBhk^gUZXM|QRWf_&HBe7gU@G04y4Uy?&~98^7~u&EF4jVc&N(<PLSaTBxVHZ{a$QD
zu)q61XZXok_N=nOy;!>BfV<S|;|OT(j--!=czc&n-VkP3M4rYKS3kGM^$<RhI8cX*
zxq?<g5DPZu5@+Qs`Thiv<_cG#%|UrYt}gixNPoSc?Dt%?NQHn1spclp=S&8^-H&{&
zSLd<<jydq%LdU7z&@{ft2oa6CO7icnn#QLuE^<kWm?1wjS$aPB>>Bt6vtVA&tRYUy
zRehb%>-&NEGs)8|llj9o&CwA^T3Hoo7mNd(PdQlNs_MH-bQqHKEvEt6b!<@^d)H-9
zl<6JIAE6oML0TdFmf-TLQ+0=IaQx9GLal>?L_S__-Z<I%mZH61T2}MALPF!79gc?O
zcd9a#YqpN1l=kSAAo8xkNGH;HigdT0cYbfrEx+mH+;pkTaGQ`dNG>{EGT6zwV2isP
zi`k1FH*Lre5QVi1NDB(s8~k7x*SG~YojmYL3Ma!YiPF$WBRD|DC>D6|ZKkcou$HIW
z=k-WwM<ux94*!Ig+gkbIp)wwo51&=5vwF+u;oCY&qGndO{gPXAwLxw9=$2R**+$ah
z56iNT8Ke(&S$?XqduL<Aq;~T+?{fL<S@uBb8p6lN(1BgymCyl=R*U&wdN4fw5cvTd
z4m3=zH8JZrGTcF;;(_bZx&lT<S6LX`7p=z=;uQ{Gn-|-|PlkhIwLZ*ev=b-11~k>M
zu%5u6H`}=VPEEsPZRT5>7CrPX-h$zvO(yDl-AGzc>rhTea!3`Y_bA;&uNrIJ0ONmy
z!Lu$u8uGJoG1T5>(T^DkBpckGt59T!+C++paC^7wvWotJ&Pa+QE$fKL{d6W$5s^{;
zi$Y4OHqVs#O9IAjt(%plrG?=)!+p{DMv00Bhhl`j^}tLv4Qz(|`OTK#K|@qMM0*E3
zwHjB;lW*&%rhTNL(x&XbSr3y3+zyO5bvRmjSvhRCVm@i}epIPskx4Jl*2ZLnA1*3z
z<xzM&Uv8eT&DK{h!czJR;&#+=?YCAh2V#I`fJWx5o0rSMu0P9#NOA&+yRKaP=cU5Q
z7!v++l<ZV?HFhAV*c&DMq!Wy}dEW%Y#r@KNr^t|XgvprSF8LPRijLA_eZ8ZP$l|Nb
z>>J8skKEEWxp###m#%nxK3+mil-!E5=2IAmg{bSAbu~m~dQT-ZE?Bamo|0=TI;^x$
zp6k9Htw$R@VLS|EvsR=Lza7XvRInB;@p|gtEe=B=;fIY-8O2PEwQPV9`~|M|n6=gl
z1t&W^bWxtNR^2x6AB97$Gil-oUGXkaZk&SgEvVmVY<-dB=0fn99Xx@%>1B}sJ+~Rt
z#;jUGZ?<y9k(y8(7j!d|M(1KZJi2K$lCU8l>|FgY-_Gsp%a_eZpI^KrJ1d_s;5mf4
z`b6r#{^Tkw^7A_bYpIA$^}5u4X}5f?Y0u=;)Qr+@k-3FM`}8-?;EUL-B9H#;y7E{K
zb8z&!=`OB<HLrfF(vB@IcGcT40vFnk2Nm2+ld&Fm&$2?8=(ux4!V{TQ?9fnGqdf2y
z@B;|!dy>75-G83PU~U$Tkg9R~C9nATyi_MogI@CjNV=MP@0Y&LGPApcEBA4xelkhu
z!1SJbt^!q#ZQr=X)UDVbB~997Z|@u;S^vJxizHQ$FbK-2)n)(f$>q;?`F>bohSY|;
z?xsDLiR`S9)C{WE`?%<<){lA64~*8`X8+hpbbYSNRwzSnG&M8%PQi4Co_9Z+rd(L<
zf${>F72F(O-ke75qa=+5Lfy_(zGUv#Ata&`L7M|nIm>cPC5o&$P8HS89<Zl&PG*uO
zIa2fb6K_6gWwvD<e9V!XNeJzaPxX*lscPugmYT2_xqPR(_no5FesfOOeA$fyN9L06
zHreXdaMhSIm-f`oqENxCaF^_hX1%}!pt5?35P)l_<N;1bzEa4V;*WnThn<D(W*bNX
zds`e~k_9oLKLa?TC_0-_by2a=qBx&UV~5BKD^wUB#amma$yYr5yo&Cx+98c}Gp>JZ
zO8`1#wJONWgu1Y%Y4A<tNNy(?WH4#Pk6S)0GCge$zH=l~3Mv=QR3oI<^*AUtAKVW#
z*1@b0$@ZGXaX{jfvYwJzY<^97p8WmpZ<fiQIFViczA|VK%A-F{0fo!x2Mm*gsjMnB
z6l7CPpcSXuv=&r|Qd(?@;WAx7QJKt%8H)1AL}C)>vGFJLHeMm61o}okbqq#HlbiN#
zi&&JqG0~DTy^;k21jxxxUo0Hz(Xz_mqks-pj+PU$774ieD%laG(JnaoVNptVxeQ$F
zBbJmBw(sF>Nx^8<r%2T(=)^H$NX^(-%v{?c#IB*$$80%~&5ghq0;5<@8;iUJ{d5AS
zkQ~DRJV@v36qyxw&VCMls2&v%TQVvadQoQyaGI2}4jZY6MhxL8PyR_m*p<;1x3-=Q
z7V#AIv)t+C>ywI``4t$sYXd{x#IC5c5TOZat83m(LW|R{pwEtH=Z{(sB`HmdH<h8c
zm*F(tcXu$(&;p8zJP|C8j^1<UPP1%D`z#uEvUlG8=UTQsH}Oq?$vGI<o$3K4g@Cnk
zeB{cHNvX*T9Dj~WdW_0VUivL7W2JaB+TA%`Iz^$yl$+69vx1DaKgDOmOHW=;VyWit
z{P_OsT#WRePxTEY@}n)7V(YZam6Go8+7p$#I_Q70`&}=jHg!Wh7H){{lqAriOrgX#
z(1`T~b93KrAKw;K=t{JwHw)ev=i-0&k&#{fxbrY{J9l*H5cV;&qmJz=GVG%2^}+(^
z^iCyZldL%0NBVg<3l+dva3{Ofu+bQjfmJ#FD$}3tJMPKb38no(K~i!vF?UGTD#5MB
zLkAcX=yr)ev3M7WZiiXKXJRH=e(6#m9|XM9#mS~8)4LZjMifV0Mix&Qo4P%Xl?+M5
zOYRi9JHRpm4D8K!C+@e(kTNb$#^|8`4rMY?NkVphE6>nHtoWV$GhJ#!+h=EWB^`T@
zSqN?phOne>SUvWpNvKiqyJ()6>1sHq+8!cGcwB_u*syW(>?ieS!w>MEJWe4iu|MT>
z7HygxH8p1waB2(~Qzwq}-j*czNR>-?XdHSzwxO+~=jEUzgtz%3()FEMS4;4TYJBRD
zY=LPf@sRrwF&TA4)eH4|q$B3O*{s@L%n*Z<(b}1=#ys$V^!rU5$>{7(2Ok>%^_Yd+
zJnfxkMpye3bq!NL%vEO#cb^ti;xDRvvkB;&;H^m~Vjjcgc`5xh3|TgCITcKHYtqiN
zKCiP#tmq8mS$nnna4{Q?gf(fGvQq@gblZ`wiyT8qWa%H!G}-FY{T$liVnTkI-1M7W
zohD|&ZsV?cz=r8)P4JNIyZ=~jsQQp}+d1m$+h~HV%BYIN#EJH=5cWVdSbwiJ7h^`W
zbM{JzwRe}ErFj{nK{+qIlGz5a{i&vk!5OyN*deAZk7HGdZ?BIbFALETJa7MbhTxT?
zaNm6;e&Xfuxg8fk$Qv9Ld+Kj51Lp@h)5&+M3#e+<-j`doQz3TaHh_z6eG5Wj)x;Fm
zA#9PCo@DK?isRZZVgD0*d38Og8uI5=m;HUi84;DBc-%dV=a)c&23QE(@!;NZ^YsZ+
zahnwoU!e~v%5x&_4;r@Q!a5{b!@iC7PWX&nLt$&GXos)T=>>`LNfaA)C#Gb&jV`ql
z(Hyb@UAca-B7B*!Y~;@?u5dDS#L4#O8kthqL)$rJU#oTkjIT)Iu;O3Xa}9&+|AJ&~
zHZ2ko{NJnCgG`uFiFXeUoFy>GD#~)^G*pw4ROqyXKdWeY98jEaUHO-f)aFq$FhtM0
z{{j14+;rfQI-S}X=-k`q0J@DL{aQvVMI&&}A7uH7X<qKy|9Bt4yy>8Dx__iE6=#_-
z=~3rkqfG}<CU>#ZIbSqNDZ;5%ekpkOV)8DyXZ7A&^MQsXW$RAIMQa$set2?ZOmRCE
zi*ziLMOa%}d)>IicswPAvo6>w4&(bYJneX|*5M>lKwv6L#f<n82={N<>nRm@Wc-*I
z==a8d$w-O%I@IxF-g~9HeU*voBKc$MAcCi;kJndYB$|GE?R1%Zv2!J3qbU=Z<@Yjf
zXYoMbFpPU2DYVC}9Pc^_yGUmi3_TtrOszD4M|(QG{XhZIjKqFFDyWW-XnNcokwb<~
z`C~;(s)9hmL+aU^x*^_}K|4u<;4}WxB*xf}<F8I$h)jG+O9!6{2n&r(NtGoWcpn2&
z@{h$-cBa)po;T;gGAhqS)|m4(<4@xYLp9rYuarFn<4mm?b=Rr*CoNu9vqz_wj)<Sn
z*T-c#On6)w<4uyvB*%HMtbDx3l{!{cRSAF=aUeWzoH14aM-_q-c|7ozKHGHJ4D>xh
zA*p!)rxD>ofcI5$&e};O<T}YspTSUvSgj%1BC_6n|A@-yRv#&L(~9di-hZUzK`F9l
z&=9;bFh0l^_6ihiKFaD==HwxlS9u`l3(pg+taQ2J$Hd(DQ+@8U7+=KuqG9!e&tnS~
z#er;$JVXl;avT3O-LYiuPuE<~hdE4I&CdhygXU$FD4z`LLp=i%SXrsb*%Q;BN0(ff
z>qT1Bqdj#!pUCl?-`y%CCaVXc#`FYYQ~3^~Sw`SXBMg~k6qKi`gXlN<h+SQ3{6FJK
zH<5r=_&U8!C7#_RA-Jm+<|5W-lClcSx9~pJKg6;f(#C~oibuQ+2iQw|i%M|~t+4xZ
z4QqG1lbt_(+mu|DiT7sW(e70xU$cU7#OFzuj6$y%MH3{0lTc#w=Dr{{R-H(v-eqzU
zJJ{oTCZbWn^hZ&PD)%$pb)Ch2Q^<!|r~<B_Ym(BLbU6A9SKVj{RN3e}I?Vc^J+lW!
zp+8@<oj&2x7wl98KPNsHj+LR|wUO)_AEC6n){Bh8WuuK8xTZfMlOZYCw~cQ(ClV{z
z*lG_bPl7Uz?v?*e-Ij1fX_z^YXOGUvgZt?KpOlinv67QIIjeW`QjfwpAyV*V>2QOO
zlM9Vw5Kh;?EqG*yR=}jXPUk^i%=E~B_5A%yoS(&a;B05Ieh1fJP8_%?$XevF#3s*^
z4k~^Z@BW5mRH>i~T^donj;k3(2j{^Dc>VdXm-ql*WUxI_#uA&;W-YDDJBIr5(MK$-
zOVOmI!+P5#g9(wYbziWSG~g2X8^K?R!6u}oxIi-wynfkbze5VC>fgQ0{yyac)0Ro}
zMMcojJUe{{wkoW7@lN=hJ|{EJblM5BSB+rq2$BQbu_lsB@lSdZx`0c^W;g%AvC_Ru
z+u*OzAH03(X$S#4T;QA>Oo6z(Ots=Tw#14`cr<0-7<NkNoj%BNr$TB|W~kZWJ|xf~
z`L;|EO$Jb%)Q&GEU}kP-VUO@)*A7wNr43i4WnE1#JBr7wQ_<ldrdnF=^eatyDLp|{
z5Si;WoR}W4^4{O``;}9iOGm7pp)>~z;&8jeFWE9Lna>t`njt-M^}#(uik}z-KC+`g
zVPnDLAL7J3f_WQEYm1mdbK0kKBZCn@D7;0;>EF_Po6YgIy!1VKW(`_Mz29P((p9J}
zPQz%O_)I~kNRA_v_|0Sxk+KSXHXq1&0Y5px2eMNM$Ezm@J{-UeuHvTmlG5@ncHMT&
z@~TUY8i<sYI!vV~?)%g9l_BqD8|V=@BG!#Fk0f-<FGhqW3JVVwZo+?}Xlhzf5giO~
z4y8{@G?Rx>3k{{!<{&Wfj_|www3O$$-p4ewL1iw{2#P5j?h-jX=a3IMP1DO1@p-R-
zmf&6u;k`q4(Te+X<&{-;YCJpB$NT&wSEJ<#t|f1A+O^~nk4x3*WrgCkYYR!uTW`a(
zmE;}SSa$mP$d7Z-0$s6bzpoEB9iL^?EmtUb*AP^MR>r)4+f&;UlbN`db>IH+mY_;o
zvyWcGCZj&xvUK5uWU{F0nQ|ug!0vDO^jiqdyTNW(#rYTXbpItduq=VUd35bZV{%C<
z`#iOzB$NH4IMD<*GVpDq{kTxr+>$nMq2b13(?90<Wkj@Jk-`Y6+GqM{*NvJE-!pN-
ziS!hz@`Nnumgkt3d6vRv?gH^_YGiB%iTt+Z-cW96&c!JAByVj9Bl~fl^{&aF5f=R1
z_NR$Lq#Ni$%jMVSJ@{bg*5)=@Qw@sbX2ia|5w`1P$DCpU9u8So=1aNEf+sSIh`s{H
z?q6#?MKo8^rvL+?IF*P8%F@iNt!Mf``smU9c5E2)(|QxU2h{PFxp_2{0%^q(i{U7g
zhDKZU^h%IJX0&`qN)XyjD*Z{?+KfBe!AgJFUZ4K#$$G{LCbv9NdpGt@J>^W`%fT!Q
z%Or2Ec*PZ9&&BwL6M{{cCly{R*w1Q1HU7#Nb3=iwX^fjKRGrMM*5V@#nJpKgc&Iz7
z$_O~@ufis`NoYHRMa*Ffor6K~M&;McqWA7FwHnzU7}2knpD`gd&!sYI)M$%a^2Ud%
z=452)QubKD^+&Cq{(!}$X$Tx3ftq5oRLabfZzFs<HQtYbg_R_`s&@Ci$DCY->-ll8
zQ35TJ^x>vS1eGTzGXA<Kr!Hu^m95lFt|xGFpf`cgsI)tNX8P9Il(y!9?<s~c2D^A@
zUcJu_3=ICR6L@O)3*{%7@Z2~*_0{y|K5RUU_IL(zMoE_u<vfZ|tGfA>zn5ULLBiyf
zBb_4Q1wBE3*&=}xMI$XhnAkqIdp~NEUKQDt1b}Rh3ahu`fuPhwO~fp0*qmHvEjenL
z4=26eSvqoZZ9|`KgKRmPRD;NsY%`C-)|RC*sUn+dEEep%Exz@~ZHVs4>h@MNUe+XD
zT@5Lky9jKy{BY!G<#|D8yXC{YP9u}elyD5o^G_Brb&>L^b{#wLsxcv1t{q<B@aYzy
zVw1`q9w&+!ZF0LV&ODzDt!$F<I{l^J^C4#4CGw}%$<kmci}Uiu@<3_9rXi3@{~N=|
zs6VVapsc<!8G=LQ*$lpQcRihoI*6}Xs2MSHG{UQ&g-6|VaQA?yjGy?1l2R0NjO67S
z92O(7!s#F2@RX)g;Vd|?TNQHjyk1e}7a6|`02l|g#8AP%%SMCE;>@y7KTg|c7L5-I
zBGuJLHpK*39#Dlp*6;SChYuSbdP~QdKuYy_b9g)`J-a>abCJ&fK6q4fOq@Ye^g@T9
zo!B$wa19cO!eWr`R~mM{($>q%&Suen8O=_^vQHmvyx9{h8i*^m9p}1RJt|0vnF`*A
zs#QuOjp$0n!m{lw%HjML@yJa>$7c~BG5u@65N7I@3;mI+Oh6nOj34bEoE6lNo~q%n
z<KJ8N&VxG+;v>>2ov8^0uGmkx`m4)U+$z>r$a<Pem)AK(Blc1*FSAIkw1`xq30NO`
z{KVuCHv2;XEx{Cn!|%?*b=^c>P9|Ssvm1;UsvVd}c9Tb_q@+sGX&Jl6YZEg(9+16*
zo7!XpdnYz<{6S23LMvYBo^cY*RL{@_<v~lNAHBbC)iBn0e?a=?^V!>NsU&6>*+KgY
z;Q)>!OMN}ZILQ_-#WPlJHv5e6T=As5JJdH(5CjtWHM%36#K2-SMEEDBRQrg}-P3HL
zm73B*ijtB-5zhB+)Lnj)nN3(%gEBNZH{f7q|J->g01ITy{>WD%nhM;|!%!FrDC8<L
zAdXV#V7Wl6A5v)@AEEI0&C19)m+_fhy=m~<zOj<GUW=ic?yEZI7TTvdxIm>{w-tVn
z(omfY>IcZ(7%E|?Jk1MzdQb~J&1WDd{erDItgn_rTbWJ3F|H3KgEvUxBKXkI;1pt!
z7!<%FHR9J)16w&L;2!u&eDf2=3*-YUje{mYbxN0QJ2HaxXN&vHX<=!l73svt+p|c)
z@oDcJWe*P7IV@|1I65DyX>YG`?CSGrJ}px%EQQz2S?`>og<_|U$<4gblp&`f`QWf}
zZ8ffdE4)zXpQTSM8@0Q(<DLG9t(rRW(+gMiJf)>XE*X3YN-th*`S0q{!T7)ZgDor6
zJ5@K^TSGrv>4=Osogd8Zd_bm`Lp@~MJGm~1ro(kjWniuvvlBNc=u@hPZ;#pc?)CRT
ze%sBYWe-EK$t&!&_T@4{F4R-e-W9C>am8GGW<PeyJKEFaCX)r@1<S`g+V_Z)cW{T@
zB%xkO>pjZgu#y_^zIk6jz2q1*qDvSAzKxXo_0Me%K3{$^j8L*aiUT@@=z!_{_p5yN
z0X<!0pZW+X@XmD$G9B}AR}C76FwVNsk0iE2?}HmO*Ov6g8=uF2*>fSn1x@h5COSSJ
ziHQFK^`YFUxWQ0$V~*9w{MmizL6{jth`IS8WUfi(IQ5=(j~?nY$>S2Uw*2AGe8ow+
zz>yZgjJCU7uBmSu3fND-gFay0*9o1yg(|L}OH1a7)qr@lkZZ^AqlMCVqx!YQ+_D&%
zfNW*3k$@y_;{5MEaVD`7MQ_cr0%#Zf3q8Z!d-KBpUi^(8%K!NU=4APIN&^3!DF3_j
t{`2)e#6ciW#`+f_;{T5W4ROX^A(&MSRRitbC%s*lxQL8!g`i%*{{od)X+Hn}

literal 0
HcmV?d00001


From 2bd433cd1799264de907de6ca4ec046bd39b3318 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 23 Oct 2024 16:37:39 -0700
Subject: [PATCH 073/128] Renaming cli page

---
 ...-ent-manage-cache-using-cli.md => mcc-ent-manage-using-cli.md} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename windows/deployment/do/{mcc-ent-manage-cache-using-cli.md => mcc-ent-manage-using-cli.md} (100%)

diff --git a/windows/deployment/do/mcc-ent-manage-cache-using-cli.md b/windows/deployment/do/mcc-ent-manage-using-cli.md
similarity index 100%
rename from windows/deployment/do/mcc-ent-manage-cache-using-cli.md
rename to windows/deployment/do/mcc-ent-manage-using-cli.md

From b2a5749c44158060c220df83458ca9e6f3d42711 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 23 Oct 2024 16:39:38 -0700
Subject: [PATCH 074/128] Rename troubleshooting page

---
 ...port-and-troubleshooting.md => mcc-ent-troubleshooting.md} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename windows/deployment/do/{mcc-ent-support-and-troubleshooting.md => mcc-ent-troubleshooting.md} (95%)

diff --git a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
similarity index 95%
rename from windows/deployment/do/mcc-ent-support-and-troubleshooting.md
rename to windows/deployment/do/mcc-ent-troubleshooting.md
index 4199588658..467471df0a 100644
--- a/windows/deployment/do/mcc-ent-support-and-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -1,6 +1,6 @@
 ---
-title: MCC support and troubleshooting
-description: Details on how to troubleshoot and seek support for Microsoft Connected Cache for Enterprise (MCC).
+title: MCC troubleshooting
+description: Details on how to troubleshoot common issues for Microsoft Connected Cache for Enterprise (MCC).
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to

From c35dbee783eeaa9c6a61dd5d715c6d2f4845e936 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 23 Oct 2024 16:42:39 -0700
Subject: [PATCH 075/128] Update TOC with new page names

---
 windows/deployment/do/TOC.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 5fdeb51d86..4ebaba436e 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -50,7 +50,7 @@
           - name: Deploy MCC to Windows
             href: mcc-ent-deploy-to-windows.md
         - name: Using CLI to create and manage cache nodes
-          href: mcc-ent-manage-cache-using-cli.md 
+          href: mcc-ent-manage-using-cli.md 
         - name: Verify cache node functionality
           href: mcc-ent-verify-cache-node.md
         - name: Monitor cache node
@@ -64,7 +64,7 @@
         - name: Frequent Asked Questions
           href: mcc-ent-faq.yml
         - name: Support and troubleshooting
-          href: mcc-ent-support-and-troubleshooting.md
+          href: mcc-ent-troubleshooting.md
         - name: MCC for Enterprise and Education (early preview)
           href: mcc-ent-private-preview.md
       - name: Release notes

From e1546f1fd789e2753207bc30d3e4ad8130f8831c Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 17:47:43 -0700
Subject: [PATCH 076/128] Replace MCC with Connected Cache

---
 .../do/mcc-ent-create-resource-and-cache.md   | 46 +++++-----
 .../deployment/do/mcc-ent-deploy-to-linux.md  | 14 +--
 .../do/mcc-ent-deploy-to-windows.md           | 26 +++---
 windows/deployment/do/mcc-ent-edu-overview.md | 90 ++++++++++---------
 windows/deployment/do/mcc-ent-faq.yml         | 12 +--
 .../deployment/do/mcc-ent-manage-using-cli.md | 20 ++---
 windows/deployment/do/mcc-ent-monitoring.md   | 38 ++++----
 .../deployment/do/mcc-ent-prerequisites.md    | 35 ++++----
 .../deployment/do/mcc-ent-private-preview.md  | 14 +--
 .../deployment/do/mcc-ent-release-notes.md    | 16 ++--
 .../deployment/do/mcc-ent-troubleshooting.md  | 18 ++--
 .../do/mcc-ent-uninstall-cache-node.md        | 18 ++--
 .../do/mcc-ent-update-cache-node.md           | 26 +++---
 .../do/mcc-ent-verify-cache-node.md           | 24 ++---
 14 files changed, 200 insertions(+), 197 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index f1bb077c2b..3cfc44f9f2 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -1,6 +1,6 @@
 ---
-title: Create and configure MCC cache nodes
-description: Details on how to create and configure Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes.
+title: Create and configure Microsoft Connected Cache nodes
+description: Details on how to create and configure Microsoft Connected Cache for Enterprise and Education cache nodes.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -16,17 +16,17 @@ ms.date: 06/03/2024
 
 # Create Microsoft Connected Cache Azure resource and cache nodes
 
-This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
+This article outlines how to create and configure your Microsoft Connected Cache for Enterprise and Education cache nodes. The creation and configuration of your cache node takes place in Azure. The deployment of your cache node requires downloading and running an OS-specific provisioning package on your host machine.
 
 ## Prerequisites
 
 1. **Azure Pay-As-You-Go subscription**: Microsoft Connected Cache is a free-of-charge service hosted in Azure. You'll need a pay-as-you-go Azure subscription in order to onboard to our service. To create a subscription, go to [pay-as-you-go subscription page](https://azure.microsoft.com/offers/ms-azr-0003p/).
-2. **Hardware to host MCC**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
+2. **Hardware to host Connected Cache**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
 
-For more information on sizing and OS requirements, see [the prerequisites for using MCC](mcc-ent-prerequisites.md).
+For more information on sizing and OS requirements, see [the prerequisites for using Connected Cache](mcc-ent-prerequisites.md).
 
 
-## Create MCC Azure resource
+## Create Connected Cache Azure resource
 
 # [Azure portal](#tab/portal)
 
@@ -58,9 +58,9 @@ For more information on sizing and OS requirements, see [the prerequisites for u
 
     * Install Azure CLI extension **mcc** by following the instructions [here](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions).
 
-    * Resource group under which an MCC resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
+    * Resource group under which a Connected Cache resource can be created. Use the [az group create](/cli/azure/group#az-group-create) command to create a new Resource group if you don't already have one.
 
-#### Create MCC Azure resource
+#### Create Connected Cache Azure resource
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: Name of an existing resource group in your subscription.
@@ -73,7 +73,7 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 
 ---
 
-## Create MCC cache node
+## Create Connected Cache cache node
 
 # [Azure portal](#tab/portal)
 
@@ -117,7 +117,7 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 
 ---
 
-## Configure MCC cache node
+## Configure Connected Cache node
 
 # [Azure portal](#tab/portal)
 Enter required values to configure your cache node. To learn more about the definitions of each field, review the [Configuration](#general-configuration-fields) fields at the bottom of this article.
@@ -126,7 +126,7 @@ Don't forget to select save after adding configuration information.
 
 # [Azure CLI](#tab/cli)
 
-### Configure Linux MCC
+### Configure Linux-hosted Connected Cache node
 Use the following command to configure cache node for deployment to a **Linux** host machine.
 
 Replace the following placeholders with your own information:
@@ -138,7 +138,7 @@ Replace the following placeholders with your own information:
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
   Accepted values: enabled, disabled<br>
-  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the Connected Cache cache node to your host machine.
 * *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
 * *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
@@ -158,7 +158,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 <br>
 
-### Configure Windows MCC
+### Configure Windows-hosted Connected Cache node
 Use the following command to configure cache node for deployment to a **Windows** host machine.
 
 Replace the following placeholders with your own information:
@@ -171,7 +171,7 @@ Replace the following placeholders with your own information:
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
   Accepted values: enabled, disabled<br>
-  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+  Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the Connected Cache cache node to your host machine.
 * *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
 * *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
@@ -240,7 +240,7 @@ To deploy cache nodes using Azure CLI, see
 
 #### Proxy settings
 <br>
-You can choose to enable or disable proxy settings on your cache node. Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the MCC cache node to your host machine.
+You can choose to enable or disable proxy settings on your cache node. Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the Connected Cache node to your host machine.
 
 <br>
 
@@ -258,14 +258,14 @@ You can choose to enable or disable proxy settings on your cache node. Proxy sho
 ## Other operations on resource and cache nodes
 <br>
 
-### List all MCC resource
+### List all Connected Cache resources
 
 # [Azure portal](#tab/portal)
-Navigate to the resource group under which you would like to see the MCC resources.
+Navigate to the resource group under which you would like to see the Connected Cache resources.
 
 
 # [Azure CLI](#tab/cli)
-Use the following command to list all the MCC resources under the resource group. 
+Use the following command to list all the Connected Cache resources under the resource group. 
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: An existing resource group in your subscription.
@@ -279,7 +279,7 @@ az mcc ent resource list  --resource-group <myrg>
 ### List all cache nodes
 
 # [Azure portal](#tab/portal)
-On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the MCC resource.
+On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the Connected Cache resource.
 
 
 # [Azure CLI](#tab/cli)
@@ -296,14 +296,14 @@ az mcc ent node list --mcc-resource-name <mymccresource> --resource-group <myrg>
 ---
 <br>
 
-### Delete MCC resource
+### Delete Connected Cache resource
 
 # [Azure portal](#tab/portal)
-Navigate to the MCC resource to delete and click on the delete button on top.
+Navigate to the Connected Cache resource to delete and click on the delete button on top.
 
 
 # [Azure CLI](#tab/cli)
-Use the following command to delete the MCC resource. 
+Use the following command to delete the Connected Cache resource.
 
 Replace the following placeholders with your own information:
 * *\<resource-group>*: Name of the resource group in your subscription.
@@ -319,7 +319,7 @@ az mcc ent node delete --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ### Delete cache node
 
 # [Azure portal](#tab/portal)
-On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the MCC resource. Select the cache node you wish to delete and click delete button on top of the page.
+On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the Connected Cache resource. Select the cache node you wish to delete and click delete button on top of the page.
 
 
 # [Azure CLI](#tab/cli)
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 2c6895762d..8385641122 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -1,6 +1,6 @@
 ---
-title: Deploy MCC cache software to a Linux host machine
-description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) cache software to a Linux host machine.
+title: Deploy Microsoft Connected Cache software to a Linux host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education cache software to a Linux host machine.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -15,11 +15,11 @@ appliesto:
 
 # Deploy Microsoft Connected Cache caching software to a Linux host machine
 
-This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) caching software to a Linux host machine.
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education caching software to a Linux host machine.
 
-Before deploying MCC to a Linux host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource and cache node](mcc-ent-create-resource-and-cache.md).
+Before deploying Connected Cache to a Linux host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your Connected Cache Azure resource and cache node](mcc-ent-create-resource-and-cache.md).
 
-## Steps to deploy MCC cache node to Linux
+## Steps to deploy Connected Cache cache node to Linux
 
 # [Azure portal](#tab/portal)
 
@@ -40,7 +40,7 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    ```
 
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
-1. Download and extract the [MCC provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
+1. Download and extract the [Connected Cache provisioning package for Linux](https://aka.ms/MCC-Ent-InstallScript-Linux) to your host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
 1. Replace the values in the following provisioning command before running it on the host machine.
@@ -57,4 +57,4 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 ## Related content
 
 - [Deploy to a Windows host machine](mcc-ent-deploy-to-windows.md)
-- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
+- [Uninstall Connected Cache node](mcc-ent-uninstall-cache-node.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 50b3544290..68720ee8fa 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -1,6 +1,6 @@
 ---
-title: Deploy MCC cache software to a Windows host machine
-description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) cache software to a Windows host machine.
+title: Deploy Microsoft Connected Cache software to a Windows host machine
+description: Details on how to deploy Microsoft Connected Cache for Enterprise and Education cache software to a Windows host machine.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -15,13 +15,13 @@ appliesto:
 
 # Deploy Microsoft Connected Cache caching software to a Windows host machine
 
-This article describes how to deploy Microsoft Connected Cache for Enterprise and Education (MCC) caching software to a Windows host machine.
+This article describes how to deploy Microsoft Connected Cache for Enterprise and Education caching software to a Windows host machine.
 
-Deploying MCC to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the MCC runtime account. This prevents tampering with the MCC container and the cached content on the host machine.
+Deploying Connected Cache to a Windows host machine requires designating a [Group Managed Service Account (gMSA)](/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) or a [Local User Account](https://support.microsoft.com/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) as the Connected Cache runtime account. This prevents tampering with the Connected Cache container and the cached content on the host machine.
 
-Before deploying MCC to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your MCC Azure resource](mcc-ent-create-resource-and-cache.md).
+Before deploying Connected Cache to a Windows host machine, ensure that the host machine meets all [requirements](mcc-ent-prerequisites.md), and that you have [created and configured your Connected Cache Azure resource](mcc-ent-create-resource-and-cache.md).
 
-## Steps to deploy MCC cache node to Windows
+## Steps to deploy Connected Cache node to Windows
 
 # [Azure portal](#tab/portal)
 
@@ -29,9 +29,9 @@ Before deploying MCC to a Windows host machine, ensure that the host machine mee
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
-1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
 
-   If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 
 1. Run the provisioning command on the host machine.
 
@@ -46,14 +46,14 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    ```
 
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
-1. Download and extract the [MCC provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
+1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
-1. Create a `$User` environment variable containing the username of the account you intend to designate as the MCC runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
 
-   If you're using a Local User account as the MCC runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 
-1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the MCC runtime account.
+1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the Connected Cache runtime account.
 
    ```powershell-interactive
    ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential
@@ -67,4 +67,4 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 ## Related content
 
 - [Deploy to a Linux host machine](mcc-ent-deploy-to-linux.md)
-- [Uninstall MCC](mcc-ent-uninstall-cache-node.md)
+- [Uninstall Connected Cache node](mcc-ent-uninstall-cache-node.md)
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 244fbf6b01..11ce424a3d 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -1,6 +1,6 @@
 ---
-title: MCC Overview
-description: Overview, supported scenarios, and content types for Microsoft Connected Cache for Enterprise and Education (MCC).
+title: Microsoft Connected Cache for Enterprise and Education Overview
+description: Overview, supported scenarios, and content types for Microsoft Connected Cache for Enterprise and Education.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -21,64 +21,67 @@ ms.date: 05/09/2023
 > [!IMPORTANT]
 > - Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. MCC can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.<br>
+Microsoft Connected Cache for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. Connected Cache can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.
 
-Microsoft Connected Cache (MCC) for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
+Microsoft Connected Cache for Enterprise and Education (preview) is a standalone cache for customers moving towards modern management and away from Configuration Manager distribution points. For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
 
-Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux](/windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.<br>
+Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux](/windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.
 
-### Supported scenarios and deployments
+## Supported scenarios and configurations
 
-Microsoft Connected Cache for Enterprise and Education (preview) is intended to support the following content delivery scenarios:<br>
-* Pre-provisioning of devices using Windows Autopilot<br>
-* Co-managed clients that get monthly update and Win32 apps from Microsoft Intune. For more information, see Support for Intune Win32 apps.<br>
-* Cloud-only managed devices, such as Intune-enrolled devices without the Configuration Manager client, that get monthly update and Win32 apps from Microsoft Intune. For more information, see Support for cloud-managed devices.<br>
+Microsoft Connected Cache for Enterprise and Education (preview) is intended to support the following content delivery scenarios:
+
+- Pre-provisioning of devices using Windows Autopilot
+- Co-managed clients that get monthly updates and Win32 apps from Microsoft Intune
+- Cloud-only managed devices, such as Intune-enrolled devices without the Configuration Manager client, that get monthly updates and Win32 apps from Microsoft Intune
 
 Microsoft Connected Cache is built for flexible deployments to support a number of enterprise configurations:
 
-##### Branch office
+### Branch office
+
 Customers may have globally dispersed offices that meet the following parameters:
-* 10 – 50 Windows Clients
-* No dedicated server hardware
-* Internet bandwidth is great to limited (satellite internet)
-* Possibly intermittent connectivity
-<br>
-To support the branch the branch office scenario, customers can deploy to a Windows 11 client (see Host machine requirements) device.
 
-##### Large Enterprise
+- 10 – 50 Windows Clients
+- No dedicated server hardware
+- Internet bandwidth is great to limited (satellite internet)
+- Possibly intermittent connectivity
+
+To support the branch office scenario, customers can deploy a Connected Cache node to a Windows 11 client device.
+
+### Large Enterprise
+
 Customers may have office spaces, data centers, or Azure deployments that meet the following parameters:  
-* 100's or 1,000's of Windows devices (client or server).
-* Existing hardware – Decommissioned DP, file server, cloud print server
-* Azure VMs and Azure Virtual Desktop
-* Internet bandwidth is great to limited (T1)
 
+- 100's or 1,000's of Windows devices (client or server).
+- Existing hardware – Decommissioned DP, file server, cloud print server
+- Azure VMs and Azure Virtual Desktop
+- Internet bandwidth is great to limited (T1)
 
-### Supported content types
+To support the large enterprise scenario, customers can deploy a Connected Cache node to a server running Windows Server 2022 or Ubuntu 22.04.
+
+See [Connected Cache node host machine requirements](mcc-ent-prerequisites.md) for recommended host machine specifications in each configuration.
+
+| Enterprise configuration | Download speed range | Download speeds and approximate content volume delivered in 8 Hours |
+|---|---|---|
+|Branch Office|< 1 Gbps Peak| 500 Mbps => 1,800 GB </br></br> 250 Mbps => 900 GB </br></br> 100 Mbps => 360 GB </br></br> 50 Mbps => 180 GB|
+|Small to Medium Enterprises/Autopilot Provisioning Center (50 - 500 devices in a single location) |1 - 5 Gbps| 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB </br></br>1 Gbps => 3,600 GB|
+|Medium to Large Enterprises/Autopilot Provisioning Center (500 - 5,000 devices in a single location) |5 - 101 Gbps Peak|   9 Gbps => 32,400 GB </br></br> 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB|
+
+## Supported content types
 When clients download cloud-managed content, they use Delivery Optimization from the cache server installed on a Windows server or VM. Cloud-managed content includes the following types:
-* Windows updates: Windows feature and quality updates
-* Office Click-to-Run apps: Microsoft 365 Apps and updates
-* Client apps: Intune, store apps, and updates
-* Endpoint protection: Windows Defender definition updates
 
-For the full list of content endpoints that Microsoft Connected Cache for Enterprise and Education supports, see [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md).<br>
+- Windows updates: Windows feature and quality updates
+- Office Click-to-Run apps: Microsoft 365 Apps and updates
+- Client apps: Intune, store apps, and updates
+- Endpoint protection: Windows Defender definition updates
 
-### Hardware or VM Requirements
-See [Host machine requirements](mcc-ent-prerequisites.md) for complete details.
-
-|Deployment Scenarios| Download Speed Range | Download Speeds and Content Volume Delivered in 8 Hours | VM/Hardware Recommendation |
-|---|---|---|---|
-|Branch Office|< 1 Gbps Peak| 500 Mbps - 1,800 GB </br></br> 250 Mbps - 900 GB </br></br> 100 Mbps - 360 GB </br></br> 50 Mbps - 180 GB| 4 Cores </br></br> Up to 8 GB Memory with 4 GB of Free </br></br> 100 GB free disk space|
-|Small to Medium Enterprises/Autopilot Provisioning Center - 50 - 500 devices in a single location|1 - 5 Gbps| 5 Gbps - 18,000 GB </br></br>3 Gbps - 10,800 GB </br></br>1 Gbps - 3,600 GB| 8 Cores </br></br> Up to 16 GB Memory with 4 GB of Free </br></br> 500 GB free disk space|
-|Medium to Large Enterprises/Autopilot Provisioning Center - 500 - 5,000 devices|5 - 101 Gbps Peak|   9 Gbps - 32,400 GB </br></br> 5 Gbps - 18,000 GB </br></br>3 Gbps - 10,800 GB| 16 Cores</br></br> 32 GB Memory with 4 GB of Free </br></br> 2 200-500 GB SSDs|
-
-<br>
+For the full list of content endpoints that Microsoft Connected Cache for Enterprise and Education supports, see [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md).
 
 ## How it works
 
-The following diagram displays an overview of how MCC functions:<br>
-
-:::image type="content" source="./images/mcc_ent_publicpreview.png" alt-text="Diagram displaying the components of MCC." lightbox="./images/mcc_ent_publicpreview.png":::
+The following diagram displays an overview of how Connected Cache functions:
 
+:::image type="content" source="./images/mcc_ent_publicpreview.png" alt-text="Diagram displaying the components of Connected Cache." lightbox="./images/mcc_ent_publicpreview.png":::
 
 1. The Azure management portal for Microsoft Connected Cache or CLI are used to create cache nodes, configure deployments, including unauthenticated proxy settings.
 1. Prepare Windows or Linux devices. If deploying to Windows devices, prepare accounts - gMSA, local user account, domain account. Deploy to Windows or Linux devices using scripts.
@@ -88,8 +91,7 @@ The following diagram displays an overview of how MCC functions:<br>
 1. Devices can fallback to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN )settings to prefer the local cache server.
 Customers can view data regarding Microsoft Connected Cache downloads on management portal and Windows Update for Business reports
 
-
-## Next step
+## Next steps
 
 >[!div class="nextstepaction"]
->[Create MCC Azure resources](mcc-ent-create-resource-and-cache.md)
\ No newline at end of file
+>[Create Connected Cache Azure resources](mcc-ent-create-resource-and-cache.md)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 653c5676a0..e099a27f79 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -1,7 +1,7 @@
 ### YamlMime:FAQ
 metadata:
-  title: MCC Frequently Asked Questions
-  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise (MCC).
+  title: Microsoft Connected Cache for Enterprise and Education Frequently Asked Questions
+  description: The following article is a list of frequently asked questions for Microsoft Connected Cache for Enterprise.
   ms.service: windows-client
   ms.subservice: itpro-updates
   ms.topic: faq
@@ -25,8 +25,8 @@ sections:
     questions:
       - question: What are the licesning requirement?
         answer: Microsoft Connected Cache for Enterprise and Education is available to all Windows E3, E5 and F3 and Education A3 and A5 customers.
-      - question: Is there a charge to create MCC resources and cache node on Azure?
-        answer: No. You won't be charged to create MCC resource and cache nodes on Azure. However, you need an Azure pay-as-you-go subscription to create the resources but there is no charge for the resource itself.
+      - question: Is there a charge to create Connected Cache resources and cache node on Azure?
+        answer: No. You won't be charged to create Connected Cache resource and cache nodes on Azure. However, you need an Azure pay-as-you-go subscription to create the resources but there is no charge for the resource itself.
       - question: Is there a nondisclosure agreement to sign?
         answer: No, a nondisclosure agreement isn't required.
       - question: What will Microsoft Connected Cache for Enterprise and Education do for me? 
@@ -40,7 +40,7 @@ sections:
          - [Azure pay-as-you-go subscription](https://azure.microsoft.com/offers/ms-azr-0003p/).
          - [Hardware to host Microsoft Connected Cache](mcc-ent-edu-overview.md)
          - [Host machine requirements](mcc-ent-prerequisites.md)
-      - question: What host OS do I need to deploy MCC?
+      - question: What host OS do I need to deploy Connected Cache?
         answer: You can use Linux or Windows OS. Depending on the OS, the provisioning script and certain provisioning steps are different. 
       - question: What content is cached by Microsoft Connected Cache?
         answer: For more information about content cached, see [Delivery Optimization and Microsoft Connected Cache content endpoints](delivery-optimization-endpoints.md).
@@ -64,7 +64,7 @@ sections:
         answer: No. It's important to keep the Microsoft Connected Cache software up to date, especially when it comes to security issues. Microsoft validates updates prior to releasing Enterprises Connected Cache updates and only releases updates when it's necessary to keep customers secure or to ensure the continued successful operation of Connected Cache nodes for customers.  
       - question: How do I set up CLI?
         answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
-      - question: How do I install MCC extension?
+      - question: How do I install the Microsoft Connected Cache Azure CLI extension?
         answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-manage-cache-using-cli.md#prerequisites).
       - question: What do I do if I have to set up or change existing proxy?
         answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-create-resource-and-cache.md#proxy-settings).
diff --git a/windows/deployment/do/mcc-ent-manage-using-cli.md b/windows/deployment/do/mcc-ent-manage-using-cli.md
index c48dd5e04b..6faca3726f 100644
--- a/windows/deployment/do/mcc-ent-manage-using-cli.md
+++ b/windows/deployment/do/mcc-ent-manage-using-cli.md
@@ -1,6 +1,6 @@
 ---
-title: Manage MCC cache nodes using CLI
-description: Details on how to manage Microsoft Connected Cache for Enterprise (MCC) cache nodes via Azure CLI commands.
+title: Manage Microsoft Connected Cache nodes using CLI
+description: Details on how to manage Microsoft Connected Cache for Enterprise cache nodes via Azure CLI commands.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -20,18 +20,18 @@ ms.date: 06/03/2024
 
 <br>
 
-This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise (MCC) cache nodes using Azure CLI.
+This article outlines how to create, configure, and deploy Microsoft Connected Cache for Enterprise cache nodes using Azure CLI.
 
  
 ## Prerequisites:
 1. **Install Azure CLI**: [How to install the Azure CLI](/cli/azure/install-azure-cli)
-1. **Install MCC extension**: Install MCC extension via the command below
+1. **Install Connected Cache extension**: Install Connected Cache extension via the command below
 
 ```azurecli-interactive
 az extension add --name mcc
 ```
 
-To learn more about installting extensions, visit [Install the MCC extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
+To learn more about installting extensions, visit [Install the Connected Cache extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
 
 <br>
 <br>
@@ -50,11 +50,11 @@ az group create --name myrg --location westus
 
 Once the resource group is created, you'll need to create a Microsoft Connected Cache for Enterprise resource.
 
-### 2. Create an MCC Azure resource
+### 2. Create a Connected Cache Azure resource
 
-An MCC Azure resource is a top-level Azure resource under which cache nodes can be created.
+A Connected Cache Azure resource is a top-level Azure resource under which cache nodes can be created.
 
-To create an MCC Azure resource, use `az mcc ent resource create`
+To create an Connected Cache Azure resource, use `az mcc ent resource create`
 
 ```azurecli-interactive
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
@@ -63,7 +63,7 @@ az mcc ent resource create --mcc-resource-name mymccresource --resource-group my
 <br>
 
 >[!IMPORTANT]
->In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating MCC resource.
+>In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully started creating your Connected Cache resource.
 
 <br>
 
@@ -142,7 +142,7 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 
 ### Example script:
 
-Below is a pseudocode example of how to script bulk creation and configuration of an MCC Azure resource and multiple MCC cache nodes.
+Below is a pseudocode example of how to script bulk creation and configuration of a Connected Cache Azure resource and multiple Connected Cache cache nodes.
 
 <!--# [Bash](#tab/bash)
 
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index 356df8fdeb..2fb8a62181 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -1,6 +1,6 @@
 ---
-title: Monitor usage of MCC cache nodes
-description: Details on how to monitor the usage of Microsoft Connected Cache for Enterprise (MCC) cache nodes.
+title: Monitor usage of Microsoft Connected Cache nodes
+description: Details on how to monitor the usage of Microsoft Connected Cache for Enterprise cache nodes.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -16,36 +16,36 @@ ms.date: 09/04/2024
 
 # Monitor cache node usage
 
-Tracking the status of your MCC node is essential to making sure you are getting the most out of the service.
+Tracking the status of your Connected Cache node is essential to making sure you are getting the most out of the service.
 
-For basic monitoring, navigate to the "Overview" tab. Here you will be able to view a cache node summary dashboard and charts for key metrics. No additional work is necessary, all the monitoring in this section will function right after your MCC node has been installed.
+For basic monitoring, navigate to the "Overview" tab. Here you will be able to view a cache node summary dashboard and charts for key metrics. No additional work is necessary, all the monitoring in this section will function right after your Connected Cache node has been installed.
 
 For advanced monitoring, navigate to the "Metrics" section under the "Monitoring" tab. Here you will be able to access more sampled metrics (hits, misses, inbound traffic) and specify different aggregations (count, avg, min, max, sum). You can then use this data to create customized dashboards and configure alerts. Overall, this section is designed to cater to your specific monitoring needs and preferences.
 
-Between the two monitoring sections, you will be able to gather essential insights into the health, performance, and efficiency of your MCC nodes.
+Between the two monitoring sections, you will be able to gather essential insights into the health, performance, and efficiency of your Connected Cache nodes.
 
 ## Basic Monitoring
 
 ### Cache node summary
 
-The preset monitoring data for MCC is displayed on the Overview page in the Azure portal. Below are the metrics you will find in the "Cache Node Summary" dashboard, along with their descriptions. Please take note that this dashboard only reflects data from all cache nodes the last 24 hours. The filters that are displayed below the dashboard only affect the data shown in the "Key Metrics" charts.
+The preset monitoring data for Connected Cache is displayed on the Overview page in the Azure portal. Below are the metrics you will find in the "Cache Node Summary" dashboard, along with their descriptions. Please take note that this dashboard only reflects data from all cache nodes the last 24 hours. The filters that are displayed below the dashboard only affect the data shown in the "Key Metrics" charts.
 
 <!-- Add Cache node summary picture here -->
 ![Screenshot of cache node summary in the Azure portal interface.](../images/mcc-ent-cache-node-summary.png)
 
 | Metric | Description |
 | --- | --- |
-| Healthy nodes | Your MCC node will frequently send heartbeat messages to our backend. If your node has responded in the last 24 hours, it will be labeled as healthy. |
+| Healthy nodes | Your Connected Cache node will frequently send heartbeat messages to our backend. If your node has responded in the last 24 hours, it will be labeled as healthy. |
 | Unhealthy nodes | If your node has not sent a heartbeat message in the last 24 hours, it will be labeled as unhealthy. |
 | Max in | The maximum ingress in Mbps (Megabits per second) that your node has pulled from CDN in the last 24 hours. |
 | Max out | The minimum egress in Mbps that your node has pushed out to devices in your network over the last 24 hours. |
 | Average in | The average ingress in Mbps that your node has pulled from CDN in the last 24 hours. |
 | Average out | The average egress in Mbps that your node has pushed out to devices in your network over the last 24 hours. |
-| Cache efficiency | The percentage of all content requests your MCC node receives that are ultimately delivered by your MCC node. An well-performing node should have an efficiency > 90%. |
+| Cache efficiency | The percentage of all content requests your Connected Cache node receives that are ultimately delivered by your Connected Cache node. An well-performing node should have an efficiency > 90%. |
 
 ### Key Metrics
 
-The two monitoring charts on the Overview page more visually represent the usage of your MCC node, as well as the types cached content delivered by your node over various time intervals.
+The two monitoring charts on the Overview page more visually represent the usage of your Connected Cache node, as well as the types cached content delivered by your node over various time intervals.
 
 <!-- Add Charts picture here -->
 ![Screenshot of key metric charts in the Azure portal interface.](../images/mcc-ent-key-metric-charts.png)
@@ -55,15 +55,15 @@ The two monitoring charts on the Overview page more visually represent the usage
 Both filters displayed will only impact the data shown in the 2 charts below.
 
       - By time: View data from the last 1 hour to 30 days
-      - By cache node: View data from individual cache nodes or the sum of all your active MCC nodes.
+      - By cache node: View data from individual cache nodes or the sum of all your active Connected Cache nodes.
 
 #### Outbound Traffic Chart
 
-This chart displays the egress in Mbps that your MCC node was delivering at specific timestamps. The value in the chart's key represents the average egress over the specified time period.  
+This chart displays the egress in Mbps that your Connected Cache node was delivering at specific timestamps. The value in the chart's key represents the average egress over the specified time period.  
 
 #### Volume by Content Type
 
-This chart displays the amount (in GB) of each supported content type that your MCC node is delivering at specific timestamps. You can find the complete list of supported content types here: [Microsoft Connected Cache content and services endpoints | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/delivery-optimization-endpoints)
+This chart displays the amount (in GB) of each supported content type that your Connected Cache node is delivering at specific timestamps. You can find the complete list of supported content types here: [Microsoft Connected Cache content and services endpoints | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/delivery-optimization-endpoints)
 
 The content types in the key are sorted from highest to lowest volume an each have a distinct color. The bar chart is stacked such that you can visually compare total volume being delivered at different timestamps
 
@@ -75,18 +75,18 @@ Listed below are the additional metrics you can access in this section:
 
 | Metric | Description |
 | --- | --- |
-| Inbound | The number of content requests your MCC node receives over a specified period of time. |
-| Hits | The number of times your MCC node fulfills a content request by pulling from its cache. |
-| Misses | The number of times your MCC node is not able to fulfill a content request by pulling from its cache |
+| Inbound | The number of content requests your Connected Cache node receives over a specified period of time. |
+| Hits | The number of times your Connected Cache node fulfills a content request by pulling from its cache. |
+| Misses | The number of times your Connected Cache node is not able to fulfill a content request by pulling from its cache |
 
 ### Customizable Dashboards
 
-Once you select the charts you would like to track, you can save them over to a personalized dashboard. This dashboard enables you to configure the chart title, filters, range, legend, and more. You can also use this personalized dashboard to set up alerts that will notify you if your MCC dips in performance.
+Once you select the charts you would like to track, you can save them over to a personalized dashboard. This dashboard enables you to configure the chart title, filters, range, legend, and more. You can also use this personalized dashboard to set up alerts that will notify you if your Connected Cache node dips in performance.
 
 Some scenarios where you would want to set up these alerts:
-      • My MCC node is being shown as unhealthy and I want to know exactly when it stopped egressing last.
-A new Xbox update just released last night and I want to know if my MCC node is helping deliver this content to my client machines.
+      • My Connected Cache node is being shown as unhealthy and I want to know exactly when it stopped egressing last.
+A new Xbox update just released last night and I want to know if my Connected Cache node is helping deliver this content to my client machines.
 
 ## Additional Metrics
 
-Once the content has left the MCC to be delivered, the node cannot track whether the content has successfully been delivered. To access client-side data, you can refer to this page: [Monitor Delivery Optimization | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/waas-delivery-optimization-monitor)
\ No newline at end of file
+Once the content has left the Connected Cache node, the node cannot track whether the content has successfully been delivered to the requesting Windows client. To access client-side data, you can refer to this page: [Monitor Delivery Optimization | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/waas-delivery-optimization-monitor)
\ No newline at end of file
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index f95d8fb53d..95765edf54 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -1,6 +1,6 @@
 ---
-title: MCC prerequisites
-description: Details of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
+title: Microsoft Connected Cache for Enterprise and Education prerequisites
+description: Details of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -15,17 +15,17 @@ ms.date: 09/27/2024
 
 # Microsoft Connected Cache for Enterprise and Education Requirements
 
-This article details the requirements and recommendations for using Microsoft Connected Cache for Enterprise and Education (MCC).
+This article details the requirements and recommended specifications for using Microsoft Connected Cache for Enterprise and Education.
 
 ## Licensing requirements
 
-- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education (MCC) service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
+- **Valid Azure subscription**: To use the Microsoft Connected Cache for Enterprise and Education service, you'll need a valid Azure subscription that can be used to provision the necessary [Azure resources](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management).
 
     If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
 
-    The Azure resources used for MCC will be free to you during this public preview.
+    The Azure resources used for Connected Cache will be free to you during this public preview.
 
-- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an MCC cache node.
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an Connected Cache node.
 
     - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
@@ -34,7 +34,7 @@ This article details the requirements and recommendations for using Microsoft Co
 
 ### General requirements
 
-- Any previous installations of MCC must be [uninstalled](mcc-ent-uninstall-cache-node.md) before installing the latest version of MCC.
+- Any previous installations of Connected Cache must be [uninstalled](mcc-ent-uninstall-cache-node.md) from the host machine before installing the latest version of Connected Cache.
 - [These listed endpoints](delivery-optimization-endpoints.md) must be reachable by the host machine.
 - The host machine must have no other services / applications utilizing port 80 (for example, ConfigManager or Distribution Point).
 - The host machine must have at least 4 GB of free memory.
@@ -55,18 +55,19 @@ This article details the requirements and recommendations for using Microsoft Co
     - Red Hat Enterprise Linux (RHEL) 8.* or 9.*
         - If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)
 
-### Networking recommendations for host machines
+### Recommended host machine networking specifications
 
-- Multiple network interface cards (NICs) on a single MCC instance aren't supported.
+- Multiple network interface cards (NICs) on a single Connected Cache host machine isn't supported.
 - 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
 - The NIC and BIOS should support SR-IOV for best performance.
 
-### Host machine sizing recommendations
+### Recommended host machine hardware specifications
 
-| Component  | Branch Office / Small Enterprise | Large Enterprise |
-| --- | --- | --- |
-| OS|  Windows Server 2022 <br> Windows 11 (Pro or Enterprise) | Same |
-|NIC | 1 Gbps | 5 Gbps |
-|Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
-|Memory | 4 GB | 8 GB |
-|Cores | 4 | 8  |
+Based on your [enterprise configuration](mcc-ent-edu-overview.md), it is recommended to deploy your Connected Cache nodes to host machines that meet the following recommended hardware specifications.
+
+|   | Branch Office | Small Enterprise | Large Enterprise |
+| --- | --- | --- | --- |
+| CPU cores | 4 | 8 | 16 |
+| Memory | 8 GB, 4GB free | 16 GB, 4GB free | 32 GB, 4GB free |
+| Disk storage | 100 GB free  | 500 GB free | 2x 200-500 GB free |
+| NIC | 1 Gbps | 5 Gbps | 10 Gbps |
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index 03c549f395..83b9aaa5aa 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -1,6 +1,6 @@
 ---
-title: MCC Private Preview
-description: Details on Microsoft Connected Cache for Enterprise (MCC) Private Preview
+title: Microsoft Connected Cache for Enterprise and Education Private Preview
+description: Details on Microsoft Connected Cache for Enterprise Private Preview
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -12,15 +12,15 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-# Microsoft Connected Cache for Enterprise and Education (MCC) Private Preview
+# Microsoft Connected Cache for Enterprise and Education Private Preview
 
-If you participated in the MCC early preview, thank you for your collaboration and feedback.
+If you participated in the Connected Cache early preview, thank you for your collaboration and feedback.
 
-To continue using MCC, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
+To continue using Connected Cache, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the Connected Cache Azure service.
 
-As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
+As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the Connected Cache software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
 
 ## Next step
 
 > [!div class="nextstepaction"]
-> [View documentation for MCC Public Preview](mcc-ent-edu-overview.md)
+> [View documentation for Connected Cache Public Preview](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 45efd09f1b..9fd4a23d38 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -1,6 +1,6 @@
 ---
-title: MCC Release Notes
-description: Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC).
+title: Microsoft Connected Cache Release Notes
+description: Release Notes for Microsoft Connected Cache for Enterprise and Education.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -14,9 +14,9 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Release Notes for Microsoft Connected Cache for Enterprise and Education (MCC)
+# Release Notes for Microsoft Connected Cache for Enterprise and Education
 
-This article contains details about the latest releases of MCC. Since MCC is a Preview service, some releases may contain breaking changes that will be highlighted as such.
+This article contains details about the latest releases of Connected Cache. Since Connected Cache is a Preview service, some releases may contain breaking changes that will be highlighted as such.
 
 ## Release v0.1.0 (Public Preview launch)
 
@@ -30,11 +30,11 @@ This article contains details about the latest releases of MCC. Since MCC is a P
 
 - Added new "Outbound egress" and "Volume by Content type" monitoring charts to Azure portal user interface
 - Added ability to create custom monitoring charts under the Metrics tab in the Azure portal user interface
-- Added support for creating both Windows-hosted and Linux-hosted cache nodes under the same MCC Azure resource
-- Added Azure CLI support for programmatic creation and management of MCC Azure resources and cache nodes
+- Added support for creating both Windows-hosted and Linux-hosted cache nodes under the same Connected Cache Azure resource
+- Added Azure CLI support for programmatic creation and management of Connected Cache Azure resources and cache nodes
 - Added support for unauthenticated proxy and cloud proxy integration
-- Added ability to set each cache node's Update Ring to govern cadence of MCC container updates
+- Added ability to set each cache node's Update Ring to govern cadence of Connected Cache container updates
 
 ## Related content
 
-- [Overview of MCC](mcc-ent-edu-overview.md)
+- [Overview of Connected Cache](mcc-ent-edu-overview.md)
diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 467471df0a..c7e47ea564 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -1,6 +1,6 @@
 ---
-title: MCC troubleshooting
-description: Details on how to troubleshoot common issues for Microsoft Connected Cache for Enterprise (MCC).
+title: Microsoft Connected Cache for Enterprise and Education troubleshooting
+description: Details on how to troubleshoot common issues for Microsoft Connected Cache for Enterprise.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -15,9 +15,9 @@ ms.date: 09/27/2024
 ---
 
 
-# Troubleshoot Microsoft Connected Cache for Enterprise and Education (MCC)
+# Troubleshoot Microsoft Connected Cache for Enterprise and Education
 
-This article contains instructions on how to troubleshoot different issues you may encounter while using MCC. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [MCC Azure resource creation](mcc-ent-create-resource-and-cache.md).
+This article contains instructions on how to troubleshoot different issues you may encounter while using Connected Cache. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [Connected Cache Azure resource creation](mcc-ent-create-resource-and-cache.md).
 
 ## Steps to obtain an Azure subscription ID
 
@@ -26,11 +26,11 @@ This article contains instructions on how to troubleshoot different issues you m
 
 ## Troubleshooting Azure resource creation
 
-MCC Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
+Connected Cache Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
 
 ## Troubleshooting cache node issue
-If you are facing issues with your cache node, it could be due to cache node being on the early preview version of MCC. Cache nodes belonging to early preview version will be under MCC resource that will have 'early preview' in its name. Please delete these cache nodes and associated MCC resource and create a new MCC resource on the new version.
-For detailed instructions on creating MCC resource, see [Create MCC Azure resources](mcc-ent-create-resource-and-cache.md)
+If you are facing issues with your cache node, it could be due to cache node being on the early preview version of Connected Cache. Cache nodes belonging to early preview version will be under Connected Cache resource that will have 'early preview' in its name. Please delete these cache nodes and associated Connected Cache resource and create a new Connected Cache resource on the new version.
+For detailed instructions on creating Connected Cache resource, see [Create Connected Cache Azure resources](mcc-ent-create-resource-and-cache.md)
 
 
 ## Troubleshooting cache node deployment
@@ -61,9 +61,9 @@ Optional: You have two options for manually curated links in this pattern: Next
 
 ## Diagnose and Solve
 
-If this article isn't resolving the issue you're facing with your cache node, you can use the **Diagnose and solve problems** functionality within your MCC resource to continue troubleshooting. **Diagnose and solve problems** contains solutions to most common problems that users might face as they onboard.
+If this article isn't resolving the issue you're facing with your cache node, you can use the **Diagnose and solve problems** functionality within your Connected Cache resource to continue troubleshooting. **Diagnose and solve problems** contains solutions to most common problems that users might face as they onboard.
 
-You can find **Diagnose and solve problems** on the left pane within your MCC resource.
+You can find **Diagnose and solve problems** on the left pane within your Connected Cache resource.
 
 Within **Diagnose and solve problems**, select **Troubleshoot** under the type of problem you're facing and follow the prompts that narrow down the solution to the issue.
 
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
index 3d554c99a0..07c4678b1e 100644
--- a/windows/deployment/do/mcc-ent-uninstall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Uninstall MCC cache nodes
-description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) from a host machine.
+title: Uninstall Microsoft Connected Cache for Enterprise and Education cache nodes
+description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education from a host machine.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -14,22 +14,22 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Uninstall MCC caching software from a host machine
+# Uninstall Connected Cache caching software from a host machine
 
-This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education (MCC) caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
+This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
 
-## Steps to uninstall MCC from a Windows host machine
+## Steps to uninstall Connected Cache from a Windows host machine
 
-1. Launch a PowerShell window *as administrator* and navigate to the MCC installation directory (C:\mcconwsl01 by default)
+1. Launch a PowerShell window *as administrator* and navigate to the Connected Cache installation directory (C:\mcconwsl01 by default)
 1. Run the `uninstallmcconwsl.ps1` script
 
-## Steps to uninstall MCC from a Linux host machine
+## Steps to uninstall Connected Cache from a Linux host machine
 
-The `uninstallmcc.sh` script within the provisioning package uninstalls the MCC caching software and all related components, including:
+The `uninstallmcc.sh` script within the provisioning package uninstalls the Connected Cache caching software and all related components, including:
 
 - IoT Edge
 - IoT Edge Agent
 - IoT Edge Hub
-- MCC
+- Connected Cache container
 - Moby CLI
 - Moby engine
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 604ac96ddd..960f2a289d 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Update MCC cache nodes
-description: Details on how Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes are updated by Microsoft.
+title: Update Microsoft Connected Cache for Enterprise and Education cache nodes
+description: Details on how Microsoft Connected Cache for Enterprise and Education cache nodes are updated by Microsoft.
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
@@ -13,28 +13,28 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
 ms.date: 09/27/2024
 ---
-# Configure container update frequency for Microsoft Connected Cache for Enterprise and Education (MCC)
+# Configure container update frequency for Microsoft Connected Cache for Enterprise and Education
 
-Microsoft Connected Cache for Enterprise and Education (MCC) caching software is deployed to host machines as a container. The container OS and any software component within the container need to be updated to address security vulnerabilities and improve quality and performance. These Microsoft-published container updates are referred to as "MCC updates" in this article.
+Microsoft Connected Cache for Enterprise and Education caching software is deployed to host machines as a container. The container OS and any software component within the container need to be updated to address security vulnerabilities and improve quality and performance. These Microsoft-published container updates are referred to as "Connected Cache updates" in this article.
 
-Microsoft silently deploys MCC updates to your cache nodes based on the Update Ring setting you configure for each cache node.
+Microsoft silently deploys Connected Cache updates to your cache nodes based on the Update Ring setting you configure for each cache node.
 
 ## Update rings
 
-MCC cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
+Connected Cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
 
-In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest MCC update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest MCC update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
+In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest Connected Cache update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest Connected Cache update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
 
 ### Update ring options
 
 >[!IMPORTANT]
->In the event of a critical security patch, Microsoft may elect to initiate an MCC update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each MCC update.
+>In the event of a critical security patch, Microsoft may elect to initiate an Connected Cache update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each Connected Cache update.
 
 #### Fast Ring
-All MCC cache nodes are configured to update as part of the Fast ring by default. MCC cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
+All Connected Cache nodes are configured to update as part of the Fast ring by default. Connected Cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
 #### Slow Ring
-Configuring an MCC cache node to update as part of the Slow ring provides users with the option to delay MCC software updates until the update can be validated. There are three settings that control when MCC updates will be applied to MCC cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
+Configuring an Connected Cache node to update as part of the Slow ring provides users with the option to delay Connected Cache software updates until the update can be validated. There are three settings that control when Connected Cache updates will be applied to Connected Cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
 
 | Setting | Description |
 | --- | --- |
@@ -44,15 +44,15 @@ Configuring an MCC cache node to update as part of the Slow ring provides users
 
 ## Update process
 
-When Microsoft publishes an MCC update, the MCC service attempts to update all MCC cache nodes based on their Update Ring membership. If a cache node can't complete the silent MCC update within 6 hours of starting, an error message is surfaced in the Azure portal.
+When Microsoft publishes an Connected Cache update, the Connected Cache service attempts to update all Connected Cache nodes based on their Update Ring membership. If a cache node can't complete the silent Connected Cache update within 6 hours of starting, an error message is surfaced in the Azure portal.
 
 ## Update terminology, criteria, and SLA
 
-MCC updates will be released based on need instead of on a set cadence.
+Connected Cache updates will be released based on need instead of on a set cadence.
 
 | Update type | Criteria and SLA |
 | --- | --- |
 | Security | Security updates are the highest priority and will be released based on the severity rating of the vulnerability. [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 60 days of discovery. [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 120 days |
 | Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates are released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
 
-For information on all released Microsoft Connected Cache updates, see the [MCC release notes](mcc-ent-release-notes.md).
+For information on all released Microsoft Connected Cache updates, see the [Connected Cache release notes](mcc-ent-release-notes.md).
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index bf7720bce4..c190dbf048 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -1,6 +1,6 @@
 ---
-title: Verify MCC cache node functionality
-description: Details on how to verify functionality of Microsoft Connected Cache for Enterprise and Education (MCC) cache nodes.
+title: Verify Microsoft Connected Cache for Enterprise and Education cache node functionality
+description: Details on how to verify functionality of Microsoft Connected Cache for Enterprise and Education cache nodes.
 author: chrisjlin
 ms.author: lichris
 manager: naengler
@@ -9,20 +9,20 @@ ms.subservice: itpro-updates
 ms.topic: how-to
 ms.date: 09/27/2024
 appliesto: 
-- ✅ Windows-hosted MCC cache nodes
-- ✅ Linux-hosted MCC cache nodes
+- ✅ Windows-hosted Connected Cache cache nodes
+- ✅ Linux-hosted Connected Cache cache nodes
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
 ---
 
-# Verify MCC cache node functionality
+# Verify Connected Cache node functionality
 
-This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education (MCC) cache node is functioning correctly.
+This article describes how to verify that a Microsoft Connected Cache for Enterprise and Education cache node is functioning correctly.
 
-These steps should be taken after deploying MCC caching software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
+These steps should be taken after deploying Connected Cache software to a [Windows](mcc-ent-deploy-to-windows.md) or [Linux](mcc-ent-deploy-to-linux.md) host machine.
 
-## Steps to verify functionality of MCC cache node
+## Steps to verify functionality of Connected Cache node
 
-1. To verify that the MCC container on the host machine is running and reachable, run the following command from the host machine:
+1. To verify that the Connected Cache container on the host machine is running and reachable, run the following command from the host machine:
 
     ```powershell
     wget http://localhost/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com
@@ -30,13 +30,13 @@ These steps should be taken after deploying MCC caching software to a [Windows](
 
     If successful, there should be an HTTP response with StatusCode 200.
 
-1. To verify that Windows clients in your network can reach the MCC cache node, visit the following address from a web browser on a Windows client device:
+1. To verify that Windows clients in your network can reach the Connected Cache node, visit the following address from a web browser on a Windows client device:
 
     `http://[HostMachine-IP-address]/filestreamingservice/files/7bc846e0-af9c-49be-a03d-bb04428c9bb5/Microsoft.png?cacheHostOrigin=dl.delivery.mp.microsoft.com`
 
-    If successful, the Windows client device should begin to download a small image file from the MCC cache node.
+    If successful, the Windows client device should begin to download a small image file from the Connected Cache node.
 
-1. To check how much content an individual Windows client has pulled from an MCC cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has pulled from an Connected Cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
     You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 

From 3a8faa199f352f3a86a0d829b8b4267cbdf2207b Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 18:06:53 -0700
Subject: [PATCH 077/128] Added steps to point clients at nodes

---
 windows/deployment/do/mcc-ent-deploy-to-linux.md   | 6 ++++++
 windows/deployment/do/mcc-ent-deploy-to-windows.md | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 8385641122..d674b4e504 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -49,6 +49,12 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
    ```
 
+## Steps to point Windows client devices at Connnected Cache node
+
+Once you have successfully deployed Connected Cache to your Linux host machine, you will need to configure your Windows client device(s) to request Microsoft content from the Connected Cache node.
+
+You can do this by setting the [DOCacheHost or DOCacheHostSource policies via Intune](./waas-delivery-optimization-reference.md#cache-server-hostname).
+
 ## Next step
 
 > [!div class="nextstepaction"]
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 68720ee8fa..68077a256f 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -59,6 +59,12 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential
    ```
 
+## Steps to point Windows client devices at Connnected Cache node
+
+Once you have successfully deployed Connected Cache to your Windows host machine, you will need to configure your Windows client device(s) to request Microsoft content from the Connected Cache node.
+
+You can do this by setting the [DOCacheHost or DOCacheHostSource policies via Intune](./waas-delivery-optimization-reference.md#cache-server-hostname).
+
 ## Next step
 
 > [!div class="nextstepaction"]

From bc236e351bcb7356dd6e1664e33423f35865af82 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 18:07:09 -0700
Subject: [PATCH 078/128] Fixed formatting on overview page

---
 windows/deployment/do/mcc-ent-edu-overview.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 11ce424a3d..59c0cd45ae 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -19,7 +19,7 @@ ms.date: 05/09/2023
 # Microsoft Connected Cache for Enterprise and Education Overview
 
 > [!IMPORTANT]
-> - Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
+> Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
 Microsoft Connected Cache for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. Connected Cache can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.
 
@@ -68,6 +68,7 @@ See [Connected Cache node host machine requirements](mcc-ent-prerequisites.md) f
 |Medium to Large Enterprises/Autopilot Provisioning Center (500 - 5,000 devices in a single location) |5 - 101 Gbps Peak|   9 Gbps => 32,400 GB </br></br> 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB|
 
 ## Supported content types
+
 When clients download cloud-managed content, they use Delivery Optimization from the cache server installed on a Windows server or VM. Cloud-managed content includes the following types:
 
 - Windows updates: Windows feature and quality updates

From 53de6a1d482be5fb684db5fab5b8a08bcc16a5a5 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 18:07:28 -0700
Subject: [PATCH 079/128] Fixed formatting on troubleshooting and update pages

---
 windows/deployment/do/mcc-ent-troubleshooting.md   | 5 +++--
 windows/deployment/do/mcc-ent-update-cache-node.md | 2 ++
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index c7e47ea564..ac83190e31 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -29,11 +29,12 @@ This article contains instructions on how to troubleshoot different issues you m
 Connected Cache Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
 
 ## Troubleshooting cache node issue
+
 If you are facing issues with your cache node, it could be due to cache node being on the early preview version of Connected Cache. Cache nodes belonging to early preview version will be under Connected Cache resource that will have 'early preview' in its name. Please delete these cache nodes and associated Connected Cache resource and create a new Connected Cache resource on the new version.
 For detailed instructions on creating Connected Cache resource, see [Create Connected Cache Azure resources](mcc-ent-create-resource-and-cache.md)
 
-
 ## Troubleshooting cache node deployment
+
 TODO: Add introduction sentence(s)
 [Include a sentence or two to explain only what is needed to complete the procedure.]
 TODO: Add ordered list of procedure steps
@@ -43,6 +44,7 @@ TODO: Add ordered list of procedure steps
 1. Step 3
 
 ## Troubleshooting cache node monitoring
+
 TODO: Add introduction sentence(s)
 [Include a sentence or two to explain only what is needed to complete the procedure.]
 TODO: Add ordered list of procedure steps
@@ -67,7 +69,6 @@ You can find **Diagnose and solve problems** on the left pane within your Connec
 
 Within **Diagnose and solve problems**, select **Troubleshoot** under the type of problem you're facing and follow the prompts that narrow down the solution to the issue.
 
-
 ## Filing a support request
 
 TODO: Add steps for filling out a CSS ticket.
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 960f2a289d..da724f7627 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -31,9 +31,11 @@ In other words, configuring cache nodes to update as part of the Slow ring provi
 >In the event of a critical security patch, Microsoft may elect to initiate an Connected Cache update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each Connected Cache update.
 
 #### Fast Ring
+
 All Connected Cache nodes are configured to update as part of the Fast ring by default. Connected Cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
 #### Slow Ring
+
 Configuring an Connected Cache node to update as part of the Slow ring provides users with the option to delay Connected Cache software updates until the update can be validated. There are three settings that control when Connected Cache updates will be applied to Connected Cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
 
 | Setting | Description |

From a3418e7c6ba2477f6443c9a0a1f492599af77357 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 19:39:33 -0700
Subject: [PATCH 080/128] Acrolinx fixes

---
 .../deployment/do/mcc-ent-deploy-to-linux.md  |  4 +-
 .../do/mcc-ent-deploy-to-windows.md           |  6 +-
 windows/deployment/do/mcc-ent-edu-overview.md | 32 +++++-----
 .../deployment/do/mcc-ent-manage-using-cli.md |  4 +-
 windows/deployment/do/mcc-ent-monitoring.md   | 59 +++++++++----------
 .../deployment/do/mcc-ent-prerequisites.md    |  6 +-
 .../deployment/do/mcc-ent-release-notes.md    |  2 +-
 .../deployment/do/mcc-ent-troubleshooting.md  |  2 +-
 .../do/mcc-ent-uninstall-cache-node.md        |  2 +-
 .../do/mcc-ent-update-cache-node.md           | 10 ++--
 .../do/mcc-ent-verify-cache-node.md           |  4 +-
 11 files changed, 65 insertions(+), 66 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index d674b4e504..4b3db901c2 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -49,9 +49,9 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
    ```
 
-## Steps to point Windows client devices at Connnected Cache node
+## Steps to point Windows client devices at Connected Cache node
 
-Once you have successfully deployed Connected Cache to your Linux host machine, you will need to configure your Windows client device(s) to request Microsoft content from the Connected Cache node.
+Once you have successfully deployed Connected Cache to your Linux host machine, you'll need to configure your Windows client devices to request Microsoft content from the Connected Cache node.
 
 You can do this by setting the [DOCacheHost or DOCacheHostSource policies via Intune](./waas-delivery-optimization-reference.md#cache-server-hostname).
 
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 68077a256f..d219734b31 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -53,15 +53,15 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 
    If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
 
-1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you are using a Local User account as the Connected Cache runtime account.
+1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you're using a Local User account as the Connected Cache runtime account.
 
    ```powershell-interactive
    ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential
    ```
 
-## Steps to point Windows client devices at Connnected Cache node
+## Steps to point Windows client devices at Connected Cache node
 
-Once you have successfully deployed Connected Cache to your Windows host machine, you will need to configure your Windows client device(s) to request Microsoft content from the Connected Cache node.
+Once you have successfully deployed Connected Cache to your Windows host machine, you'll need to configure your Windows client devices to request Microsoft content from the Connected Cache node.
 
 You can do this by setting the [DOCacheHost or DOCacheHostSource policies via Intune](./waas-delivery-optimization-reference.md#cache-server-hostname).
 
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 59c0cd45ae..64d059bc58 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -4,9 +4,9 @@ description: Overview, supported scenarios, and content types for Microsoft Conn
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
+ms.author: andyriv
+author: chrisjlin
+manager: naengler
 ms.reviewer: mstewart
 ms.collection: tier3
 appliesto: 
@@ -35,27 +35,27 @@ Microsoft Connected Cache for Enterprise and Education (preview) is intended to
 - Co-managed clients that get monthly updates and Win32 apps from Microsoft Intune
 - Cloud-only managed devices, such as Intune-enrolled devices without the Configuration Manager client, that get monthly updates and Win32 apps from Microsoft Intune
 
-Microsoft Connected Cache is built for flexible deployments to support a number of enterprise configurations:
+Microsoft Connected Cache is built for flexible deployments to support several different enterprise configurations:
 
 ### Branch office
 
-Customers may have globally dispersed offices that meet the following parameters:
+Customers may have globally dispersed offices that meet some or all of the following parameters:
 
-- 10 – 50 Windows Clients
-- No dedicated server hardware
-- Internet bandwidth is great to limited (satellite internet)
-- Possibly intermittent connectivity
+- Have 10 – 50 Windows devices on-site
+- Don't have dedicated server hardware
+- Have Internet bandwidth that is limited (satellite internet)
+- Have intermittent Internet connectivity
 
 To support the branch office scenario, customers can deploy a Connected Cache node to a Windows 11 client device.
 
 ### Large Enterprise
 
-Customers may have office spaces, data centers, or Azure deployments that meet the following parameters:  
+Customers may have office spaces, data centers, or Azure deployments that meet some or all of the following parameters:  
 
-- 100's or 1,000's of Windows devices (client or server).
-- Existing hardware – Decommissioned DP, file server, cloud print server
-- Azure VMs and Azure Virtual Desktop
-- Internet bandwidth is great to limited (T1)
+- Have 100s or 1,000s of Windows devices (desktop or server)
+- Have some existing server hardware (Decommissioned Distribution Point, file server, cloud print server)
+- Have Azure VMs and/or Azure Virtual Desktop deployed
+- Have Internet bandwidth that is mediocre (T1 or T3 lines)
 
 To support the large enterprise scenario, customers can deploy a Connected Cache node to a server running Windows Server 2022 or Ubuntu 22.04.
 
@@ -88,8 +88,8 @@ The following diagram displays an overview of how Connected Cache functions:
 1. Prepare Windows or Linux devices. If deploying to Windows devices, prepare accounts - gMSA, local user account, domain account. Deploy to Windows or Linux devices using scripts.
 1. The Microsoft Connected Cache container is deployed to the device using Azure IoT Edge container management services and the cache server begins reporting status and metrics to Delivery Optimization services.
 1. The DOCacheHost setting is configured using Intune or other MDM, DHCP custom option, or registry key.
-1. Devices request content from the cache server, the cache server forwards the requests to the CDN and fills the cache, the cache server delivers the content requested to the devices, and uses Peer to Peer (depending on DO Download mode settings) for all DO content. 
-1. Devices can fallback to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN )settings to prefer the local cache server.
+1. Devices request content from the cache server, the cache server forwards the requests to the CDN and fills the cache, the cache server delivers the content requested to the devices, and uses Peer to Peer (depending on DO Download mode settings) for all DO content.
+1. Devices can fall back to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN) settings to prefer the local cache server.
 Customers can view data regarding Microsoft Connected Cache downloads on management portal and Windows Update for Business reports
 
 ## Next steps
diff --git a/windows/deployment/do/mcc-ent-manage-using-cli.md b/windows/deployment/do/mcc-ent-manage-using-cli.md
index 6faca3726f..de3cddce1f 100644
--- a/windows/deployment/do/mcc-ent-manage-using-cli.md
+++ b/windows/deployment/do/mcc-ent-manage-using-cli.md
@@ -31,7 +31,7 @@ This article outlines how to create, configure, and deploy Microsoft Connected C
 az extension add --name mcc
 ```
 
-To learn more about installting extensions, visit [Install the Connected Cache extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
+To learn more about installing extensions, visit [Install the Connected Cache extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
 
 <br>
 <br>
@@ -54,7 +54,7 @@ Once the resource group is created, you'll need to create a Microsoft Connected
 
 A Connected Cache Azure resource is a top-level Azure resource under which cache nodes can be created.
 
-To create an Connected Cache Azure resource, use `az mcc ent resource create`
+To create a Connected Cache Azure resource, use `az mcc ent resource create`
 
 ```azurecli-interactive
 az mcc ent resource create --mcc-resource-name mymccresource --resource-group myrg
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index 2fb8a62181..060afcf66f 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -16,77 +16,76 @@ ms.date: 09/04/2024
 
 # Monitor cache node usage
 
-Tracking the status of your Connected Cache node is essential to making sure you are getting the most out of the service.
+Tracking the status and performance of your Connected Cache node is essential to making sure you're getting the most out of the service.
 
-For basic monitoring, navigate to the "Overview" tab. Here you will be able to view a cache node summary dashboard and charts for key metrics. No additional work is necessary, all the monitoring in this section will function right after your Connected Cache node has been installed.
+For basic monitoring, navigate to the "Overview" tab. Here you'll be able to view a collection of predefined metrics and charts. All the monitoring in this section will function right after your Connected Cache node has been deployed.
 
-For advanced monitoring, navigate to the "Metrics" section under the "Monitoring" tab. Here you will be able to access more sampled metrics (hits, misses, inbound traffic) and specify different aggregations (count, avg, min, max, sum). You can then use this data to create customized dashboards and configure alerts. Overall, this section is designed to cater to your specific monitoring needs and preferences.
+For advanced monitoring, navigate to the "Metrics" section under the "Monitoring" tab. Here you'll be able to access more sampled metrics (hits, misses, inbound traffic) and specify different aggregations (count, avg, min, max, sum). You can then use this data to create customized charts and configure alerts.
 
-Between the two monitoring sections, you will be able to gather essential insights into the health, performance, and efficiency of your Connected Cache nodes.
+Between the two monitoring sections, you'll be able to gather essential insights into the health, performance, and efficiency of your Connected Cache nodes.
 
 ## Basic Monitoring
 
 ### Cache node summary
 
-The preset monitoring data for Connected Cache is displayed on the Overview page in the Azure portal. Below are the metrics you will find in the "Cache Node Summary" dashboard, along with their descriptions. Please take note that this dashboard only reflects data from all cache nodes the last 24 hours. The filters that are displayed below the dashboard only affect the data shown in the "Key Metrics" charts.
+Below are the metrics you'll find in the "Cache Node Summary" dashboard, along with their descriptions. This dashboard only reflects data received from cache nodes in the last 24 hours.
 
-<!-- Add Cache node summary picture here -->
 ![Screenshot of cache node summary in the Azure portal interface.](../images/mcc-ent-cache-node-summary.png)
 
 | Metric | Description |
 | --- | --- |
-| Healthy nodes | Your Connected Cache node will frequently send heartbeat messages to our backend. If your node has responded in the last 24 hours, it will be labeled as healthy. |
-| Unhealthy nodes | If your node has not sent a heartbeat message in the last 24 hours, it will be labeled as unhealthy. |
-| Max in | The maximum ingress in Mbps (Megabits per second) that your node has pulled from CDN in the last 24 hours. |
-| Max out | The minimum egress in Mbps that your node has pushed out to devices in your network over the last 24 hours. |
-| Average in | The average ingress in Mbps that your node has pulled from CDN in the last 24 hours. |
-| Average out | The average egress in Mbps that your node has pushed out to devices in your network over the last 24 hours. |
-| Cache efficiency | The percentage of all content requests your Connected Cache node receives that are ultimately delivered by your Connected Cache node. An well-performing node should have an efficiency > 90%. |
+| Healthy nodes | Your Connected Cache node will periodically send heartbeat messages to the Connected Cache service. If the Connected Cache service has received a heartbeat message from your Connected Cache node in the last 24 hours, the node will be labeled as healthy. |
+| Unhealthy nodes | If the Connected Cache service hasn't received a heartbeat message from your Connected Cache node in the last 24 hours, the node will be labeled as unhealthy. |
+| Max in | The maximum ingress in Megabits per second (Mbps) that your node has pulled from CDN endpoints in the last 24 hours. |
+| Max out | The minimum egress in Mbps that your node has sent to Windows devices in its network over the last 24 hours. |
+| Average in | The average ingress in Mbps that your node has pulled from CDN endpoints in the last 24 hours. |
+| Average out | The average egress in Mbps that your node has sent to Windows devices in its network over the last 24 hours. |
+| Cache efficiency | The percentage of all content requests your Connected Cache node receives that can be fulfilled using your node's cached content. A well-performing node should have an efficiency > 90%. |
 
-### Key Metrics
+### Key metric charts
 
-The two monitoring charts on the Overview page more visually represent the usage of your Connected Cache node, as well as the types cached content delivered by your node over various time intervals.
+The two predefined charts on the Overview page visually represent the egress and types of content served by your Connected Cache node. The filters that are displayed below the cache node summary dashboard only affect the data shown in the key metric charts.
 
-<!-- Add Charts picture here -->
 ![Screenshot of key metric charts in the Azure portal interface.](../images/mcc-ent-key-metric-charts.png)
 
 #### Filters
 
-Both filters displayed will only impact the data shown in the 2 charts below.
+There are two filter controls that can be used to configure the key metric charts.
 
-      - By time: View data from the last 1 hour to 30 days
-      - By cache node: View data from individual cache nodes or the sum of all your active Connected Cache nodes.
+- Timespan: Select how far back the chart should display
+- Cache nodes: Select which Connected Cache nodes the chart should display data for
 
 #### Outbound Traffic Chart
 
-This chart displays the egress in Mbps that your Connected Cache node was delivering at specific timestamps. The value in the chart's key represents the average egress over the specified time period.  
+This chart displays the average egress in bits per second (b/s) that your selected Connected Cache nodes delivered over the specified timespan.
 
 #### Volume by Content Type
 
-This chart displays the amount (in GB) of each supported content type that your Connected Cache node is delivering at specific timestamps. You can find the complete list of supported content types here: [Microsoft Connected Cache content and services endpoints | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/delivery-optimization-endpoints)
+This chart displays the volume of each supported content type in bytes (B) that your selected Connected Cache nodes delivered over the specified timespan. See [Microsoft Connected Cache content and services endpoints](delivery-optimization-endpoints.md) for a complete list of supported content types.
 
-The content types in the key are sorted from highest to lowest volume an each have a distinct color. The bar chart is stacked such that you can visually compare total volume being delivered at different timestamps
+The content types displayed in the chart each have a distinct color and are sorted in descending order of volume. The bar chart is stacked such that you can visually compare total volume being delivered at different points in time.
 
 ## Advanced Monitoring
 
-To expand upon the metrics shown in the Overview tab, navigate to the "Metrics" tab in the left side toolbar of Azure Portal.
+To expand upon the metrics shown in the Overview tab, navigate to the "Metrics" tab in the left side toolbar of Azure portal.
 
-Listed below are the additional metrics you can access in this section:
+Listed below are the metrics you can access in this section:
 
 | Metric | Description |
 | --- | --- |
 | Inbound | The number of content requests your Connected Cache node receives over a specified period of time. |
 | Hits | The number of times your Connected Cache node fulfills a content request by pulling from its cache. |
-| Misses | The number of times your Connected Cache node is not able to fulfill a content request by pulling from its cache |
+| Misses | The number of times your Connected Cache node isn't able to fulfill a content request by pulling from its cache |
 
 ### Customizable Dashboards
 
-Once you select the charts you would like to track, you can save them over to a personalized dashboard. This dashboard enables you to configure the chart title, filters, range, legend, and more. You can also use this personalized dashboard to set up alerts that will notify you if your Connected Cache node dips in performance.
+Once you select the charts you would like to track, you can save them to a personalized dashboard. You can configure the chart title, filters, range, legend, and more. You can also use this personalized dashboard to set up alerts that will notify you if your Connected Cache node dips in performance.
 
-Some scenarios where you would want to set up these alerts:
-      • My Connected Cache node is being shown as unhealthy and I want to know exactly when it stopped egressing last.
-A new Xbox update just released last night and I want to know if my Connected Cache node is helping deliver this content to my client machines.
+Some example scenarios where you would want to set up a custom alert:
+
+- My Connected Cache node is being shown as unhealthy and I want to know exactly when it stopped egressing last
+- A new Microsoft Word update was released last night and I want to know if my Connected Cache node is helping deliver this content to my Windows devices
 
 ## Additional Metrics
 
-Once the content has left the Connected Cache node, the node cannot track whether the content has successfully been delivered to the requesting Windows client. To access client-side data, you can refer to this page: [Monitor Delivery Optimization | Microsoft Learn](https://learn.microsoft.com/en-us/windows/deployment/do/waas-delivery-optimization-monitor)
\ No newline at end of file
+Your Connected Cache node can keep track of how much content has been sent to requesting Windows devices, but the node can't track whether the content was successfully received by the device. For more information on accessing client-side data from your Windows devices, see [Monitor Delivery Optimization](waas-delivery-optimization-monitor.md).
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 95765edf54..5a8de5dc85 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -25,7 +25,7 @@ This article details the requirements and recommended specifications for using M
 
     The Azure resources used for Connected Cache will be free to you during this public preview.
 
-- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from an Connected Cache node.
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from a Connected Cache node.
 
     - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
@@ -63,11 +63,11 @@ This article details the requirements and recommended specifications for using M
 
 ### Recommended host machine hardware specifications
 
-Based on your [enterprise configuration](mcc-ent-edu-overview.md), it is recommended to deploy your Connected Cache nodes to host machines that meet the following recommended hardware specifications.
+Based on your [enterprise configuration](mcc-ent-edu-overview.md), it's recommended to deploy your Connected Cache nodes to host machines that meet the following recommended hardware specifications.
 
 |   | Branch Office | Small Enterprise | Large Enterprise |
 | --- | --- | --- | --- |
 | CPU cores | 4 | 8 | 16 |
-| Memory | 8 GB, 4GB free | 16 GB, 4GB free | 32 GB, 4GB free |
+| Memory | 8 GB, 4 GB free | 16 GB, 4 GB free | 32 GB, 4 GB free |
 | Disk storage | 100 GB free  | 500 GB free | 2x 200-500 GB free |
 | NIC | 1 Gbps | 5 Gbps | 10 Gbps |
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 9fd4a23d38..aa3cdec687 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -26,7 +26,7 @@ This article contains details about the latest releases of Connected Cache. Sinc
 - Contains client changes
 - Affects Linux, Windows host machines
 
-### Changenotes
+### Change notes
 
 - Added new "Outbound egress" and "Volume by Content type" monitoring charts to Azure portal user interface
 - Added ability to create custom monitoring charts under the Metrics tab in the Azure portal user interface
diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index ac83190e31..4ca009c4d8 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -30,7 +30,7 @@ Connected Cache Azure resource creation can be initiated using either the Azure
 
 ## Troubleshooting cache node issue
 
-If you are facing issues with your cache node, it could be due to cache node being on the early preview version of Connected Cache. Cache nodes belonging to early preview version will be under Connected Cache resource that will have 'early preview' in its name. Please delete these cache nodes and associated Connected Cache resource and create a new Connected Cache resource on the new version.
+If you're facing issues with your cache node, it could be due to cache node being on the early preview version of Connected Cache. Cache nodes belonging to early preview version will be under Connected Cache resource that will have 'early preview' in its name. Please delete these cache nodes and associated Connected Cache resource and create a new Connected Cache resource on the new version.
 For detailed instructions on creating Connected Cache resource, see [Create Connected Cache Azure resources](mcc-ent-create-resource-and-cache.md)
 
 ## Troubleshooting cache node deployment
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
index 07c4678b1e..3ca253488b 100644
--- a/windows/deployment/do/mcc-ent-uninstall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -14,7 +14,7 @@ appliesto:
 ms.date: 09/27/2024
 ---
 
-# Uninstall Connected Cache caching software from a host machine
+# Uninstall Connected Cache software from a host machine
 
 This article describes how to uninstall Microsoft Connected Cache for Enterprise and Education caching software from a host machine. These steps should be taken after deleting the cache node in the Azure portal.
 
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index da724f7627..2528e132b5 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -36,25 +36,25 @@ All Connected Cache nodes are configured to update as part of the Fast ring by d
 
 #### Slow Ring
 
-Configuring an Connected Cache node to update as part of the Slow ring provides users with the option to delay Connected Cache software updates until the update can be validated. There are three settings that control when Connected Cache updates will be applied to Connected Cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
+Configuring a Connected Cache node to update as part of the Slow ring provides users with the option to delay Connected Cache software updates until the update can be validated. There are three settings that control when Connected Cache updates will be applied to Connected Cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
 
 | Setting | Description |
 | --- | --- |
-| Week of the month | 1st to 4th week can be selected. There are three to four months in a year that could have a 5th week. If there's a 5th week, the update could be applied during that 5th week if the day of the week falls near the last day of the month.|
+| Week of the month | 1st to 4th week can be selected. There are three to four months in a year that could have a fifth week. If there's a fifth week, the update could be applied during that fifth week if the day of the week falls near the last day of the month.|
 | Day of the week | Monday through Sunday can be selected. |
 | Time of day | Time of day is based on UTC and a 24 hour clock. |
 
 ## Update process
 
-When Microsoft publishes an Connected Cache update, the Connected Cache service attempts to update all Connected Cache nodes based on their Update Ring membership. If a cache node can't complete the silent Connected Cache update within 6 hours of starting, an error message is surfaced in the Azure portal.
+When Microsoft publishes a Connected Cache update, the Connected Cache service attempts to update all Connected Cache nodes based on their Update Ring membership. If a cache node can't complete the silent Connected Cache update within 6 hours of starting, an error message is surfaced in the Azure portal.
 
 ## Update terminology, criteria, and SLA
 
-Connected Cache updates will be released based on need instead of on a set cadence.
+Connected Cache updates are released based on need instead of on a set cadence.
 
 | Update type | Criteria and SLA |
 | --- | --- |
-| Security | Security updates are the highest priority and will be released based on the severity rating of the vulnerability. [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 60 days of discovery. [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities will be released by Microsoft within 120 days |
+| Security | Security updates are the highest priority and are released based on the severity rating of the vulnerability. Patches for [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities are released by Microsoft within 60 days of discovery. Patches for [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities are released by Microsoft within 120 days. |
 | Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates are released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
 
 For information on all released Microsoft Connected Cache updates, see the [Connected Cache release notes](mcc-ent-release-notes.md).
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index c190dbf048..cd55655189 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -36,9 +36,9 @@ These steps should be taken after deploying Connected Cache software to a [Windo
 
     If successful, the Windows client device should begin to download a small image file from the Connected Cache node.
 
-1. To check how much content an individual Windows client has pulled from an Connected Cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
+1. To check how much content an individual Windows client has downloaded from a Connected Cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
-    You should see a donut chart titled Download Statistics. If the Windows client has pulled content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
+    You should see a donut chart titled Download Statistics. If the Windows client has downloaded content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
 
 ## Related content
 

From 6ac3041bf041d07fb9999f41c7e684461950fcab Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 22:17:42 -0700
Subject: [PATCH 081/128] Additions to troubleshooting page

---
 .../deployment/do/mcc-ent-troubleshooting.md  | 85 +++++++++++--------
 1 file changed, 51 insertions(+), 34 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 4ca009c4d8..3abfe22572 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -17,7 +17,7 @@ ms.date: 09/27/2024
 
 # Troubleshoot Microsoft Connected Cache for Enterprise and Education
 
-This article contains instructions on how to troubleshoot different issues you may encounter while using Connected Cache. These issues are categorized by the task in which they may be encountered. For example, this next section covers troubleshooting [Connected Cache Azure resource creation](mcc-ent-create-resource-and-cache.md).
+This article contains instructions on how to troubleshoot different issues you may encounter while using Connected Cache. These issues are categorized by the task in which they may be encountered.
 
 ## Steps to obtain an Azure subscription ID
 
@@ -26,49 +26,66 @@ This article contains instructions on how to troubleshoot different issues you m
 
 ## Troubleshooting Azure resource creation
 
-Connected Cache Azure resource creation can be initiated using either the Azure portal or the Azure CLI command set. If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields.
+[Connected Cache Azure resource creation](mcc-ent-create-resource-and-cache.md) can be initiated using either the Azure portal user interface or the Azure CLI command set.
 
-## Troubleshooting cache node issue
+If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields during the resource creation process.
 
-If you're facing issues with your cache node, it could be due to cache node being on the early preview version of Connected Cache. Cache nodes belonging to early preview version will be under Connected Cache resource that will have 'early preview' in its name. Please delete these cache nodes and associated Connected Cache resource and create a new Connected Cache resource on the new version.
-For detailed instructions on creating Connected Cache resource, see [Create Connected Cache Azure resources](mcc-ent-create-resource-and-cache.md)
+## Troubleshooting cache node configuration
 
-## Troubleshooting cache node deployment
+[Configuration of your Connected Cache node](mcc-ent-create-resource-and-cache.md) can be done using either the Azure portal user interface or the Azure CLI command set.
 
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
+If you're encountering a validation error, check that you have filled out all required configuration fields.
 
-1. Step 1
-1. Step 2
-1. Step 3
+If your configuration doesn't appear to be taking effect, check that you have clicked the "Save" button at the top of the configuration page in the Azure portal user interface.
+
+## Troubleshooting cache nodes created during early preview
+
+Cache nodes created and deployed during the [Microsoft Connected Cache for Enterprise and Education early preview](mcc-ent-private-preview.md) should continue to function but can no longer be managed or monitored remotely via the Connected Cache Azure service.
+
+As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the Connected Cache software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
+
+## Troubleshooting cache node deployment to Windows host machine
+
+[Deploying a Connected Cache node to a Windows host machine](mcc-ent-deploy-to-windows.md) involves running a series of PowerShell scripts contained within the Windows provisioning package. These scripts will attempt to write log files to the installation directory specified in the provisioning command (`C:\mccwsl01\InstallLogs` by default).
+
+There are three types of installation log files:
+
+1. **WSL_Mcc_Install_Transcript**: This log file records the lines printed to the PowerShell window when running the installation script
+1. **WSL_Mcc_Install_FromRegisteredTask_Status**: This log file records the high level status that is written during the registered tasks install
+1. **WSL_Mcc_Install_FromRegisteredTask_Transcript**: This log file records the detailed status that is written during the registered tasks install
+
+The Registered Task Transcript is usually the most useful for diagnosing the installation issue.
+
+Once the Connected Cache software has been successfully deployed to the Windows host machine, you can check if the cache node is running properly by doing the following on the Windows host machine:
+
+1. Launch a PowerShell process as the account specified as the runtime account during the Connected Cache install
+1. Run `wsl -d Ubuntu-22.04-Mcc-Base` to access the Linux distribution that hosts the Connected Cache container
+1. Run `sudo iotedge list` to show which containers are running within the IoT Edge runtime
+
+If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs --f`.
+
+You can also reboot the IoT Edge runtime using `sudo iotedge restart`.
+
+## Troubleshooting cache node deployment to Linux host machine
+
+[Deploying a Connected Cache node to a Linux host machine](mcc-ent-deploy-to-linux.md) involves running a series of Bash scripts contained within the Linux provisioning package.
+
+Once the Connected Cache software has been successfully deployed to the Linux host machine, you can check if the cache node is running properly by doing the following on the Linux host machine:
+
+1. Run `sudo iotedge list` to show which containers are running within the IoT Edge runtime
+
+If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs --f`.
+
+You can also reboot the IoT Edge runtime using `sudo iotedge restart`.
 
 ## Troubleshooting cache node monitoring
 
-TODO: Add introduction sentence(s)
-[Include a sentence or two to explain only what is needed to complete the procedure.]
-TODO: Add ordered list of procedure steps
+Connected Cache node status and performance can be [monitored using the Azure portal user interface](mcc-ent-monitoring.md).
 
-1. Step 1
-1. Step 2
-1. Step 3
+If the [basic monitoring](mcc-ent-monitoring.md#basic-monitoring) visuals on the Overview tab are showing unexpected or erroneous values, refresh the browser window.
 
-<!-- 5. Next step/Related content------------------------------------------------------------------------
-
-Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
-  - For Next step, provide one link to the next step in a sequence. Use the blue box format
-  - For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
-
--->
+If the issue persists, check that you have configured the Timespan and Cache nodes as desired.
 
 ## Diagnose and Solve
 
-If this article isn't resolving the issue you're facing with your cache node, you can use the **Diagnose and solve problems** functionality within your Connected Cache resource to continue troubleshooting. **Diagnose and solve problems** contains solutions to most common problems that users might face as they onboard.
-
-You can find **Diagnose and solve problems** on the left pane within your Connected Cache resource.
-
-Within **Diagnose and solve problems**, select **Troubleshoot** under the type of problem you're facing and follow the prompts that narrow down the solution to the issue.
-
-## Filing a support request
-
-TODO: Add steps for filling out a CSS ticket.
+You can also use the **Diagnose and solve problems** functionality provided by the Azure portal interface. This tab within the Microsoft Connected Cache Azure resource will walk you through a few prompts to help narrow down the solution to your issue.

From 3c506c2708845994da6fe08e785e89b4c697919f Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 24 Oct 2024 22:26:03 -0700
Subject: [PATCH 082/128] Fix broken links

---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 2 +-
 windows/deployment/do/mcc-ent-faq.yml                      | 4 ++--
 windows/deployment/do/mcc-ent-prerequisites.md             | 2 +-
 windows/deployment/do/mcc-ent-verify-cache-node.md         | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 3cfc44f9f2..1450c17321 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -204,7 +204,7 @@ To deploy the cache node to a **Linux** host machine, see
 ### [Azure CLI](#tab/cli)
 To deploy cache nodes using Azure CLI, see 
 >[!div class="nextstepaction"]
->[Manage cache nodes using CLI](mcc-ent-manage-cache-using-CLI.md)
+>[Manage cache nodes using CLI](mcc-ent-manage-using-CLI.md)
 
 ---
 <br>
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index e099a27f79..41fab60818 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -65,7 +65,7 @@ sections:
       - question: How do I set up CLI?
         answer: For more information, see [How to install the Azure CLI](/cli/azure/install-azure-cli).
       - question: How do I install the Microsoft Connected Cache Azure CLI extension?
-        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-manage-cache-using-cli.md#prerequisites).
+        answer: For more information, see [Install the Microsoft Connected Cache extension](mcc-ent-manage-using-cli.md#prerequisites).
       - question: What do I do if I have to set up or change existing proxy?
         answer: You can enable proxy and provide proxy information on Azure portal or use the CLI. Don't forget to rerun the provisioning script after making any proxy changes. For more information, see [Set up or change existing proxy](mcc-ent-create-resource-and-cache.md#proxy-settings).
       - question: How do we set up Microsoft Connected Cache if we support multiple countries or regions?
@@ -75,4 +75,4 @@ sections:
       - question: Does the user have to be logged using the account that installed Microsoft Connected Cache on Windows or Linux?
         answer: No. As part of the installation on Windows a scheduled task is created using the account used to install Connected Cache. Regardless of which user is logged in or not logged in, the scheduled task remains running. On Linux, Connected Cache is installed by the user and remains running regardless of which user is logged in to the OS.
       - question: What do I do if I need more support and have more questions even after reading this FAQ page?
-        answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-support-and-troubleshooting.md). If you still need more support, you can contact customer support.
+        answer: For further support for Microsoft Connected Cache, see [Troubleshooting issues for Microsoft Connected Cache for Enterprise and Education](mcc-ent-troubleshooting.md). If you still need more support, you can contact customer support.
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 5a8de5dc85..938d52a217 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -65,7 +65,7 @@ This article details the requirements and recommended specifications for using M
 
 Based on your [enterprise configuration](mcc-ent-edu-overview.md), it's recommended to deploy your Connected Cache nodes to host machines that meet the following recommended hardware specifications.
 
-|   | Branch Office | Small Enterprise | Large Enterprise |
+| Component | Branch Office | Small / Medium Enterprise | Large Enterprise |
 | --- | --- | --- | --- |
 | CPU cores | 4 | 8 | 16 |
 | Memory | 8 GB, 4 GB free | 16 GB, 4 GB free | 32 GB, 4 GB free |
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index cd55655189..2c63db2453 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -43,4 +43,4 @@ These steps should be taken after deploying Connected Cache software to a [Windo
 ## Related content
 
 - [Monitor cache node usage](mcc-ent-monitoring.md)
-- [Troubleshoot cache node](mcc-ent-support-and-troubleshooting.md)
+- [Troubleshoot cache node](mcc-ent-troubleshooting.md)

From 6d790ab15a2c71c67c5e842aee0246be4a7b3b54 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Fri, 25 Oct 2024 08:30:15 -0700
Subject: [PATCH 083/128] cleanup 4 files that were previously deleted in
 release branch

---
 .../deployment/do/mcc-enterprise-appendix.md  | 138 ------
 .../deployment/do/mcc-enterprise-deploy.md    | 418 ------------------
 .../do/mcc-enterprise-prerequisites.md        |  61 ---
 .../do/mcc-enterprise-update-uninstall.md     |  55 ---
 4 files changed, 672 deletions(-)
 delete mode 100644 windows/deployment/do/mcc-enterprise-appendix.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-deploy.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-prerequisites.md
 delete mode 100644 windows/deployment/do/mcc-enterprise-update-uninstall.md

diff --git a/windows/deployment/do/mcc-enterprise-appendix.md b/windows/deployment/do/mcc-enterprise-appendix.md
deleted file mode 100644
index 0a0239d690..0000000000
--- a/windows/deployment/do/mcc-enterprise-appendix.md
+++ /dev/null
@@ -1,138 +0,0 @@
----
-title: Appendix for Microsoft Connected Cache for Enterprise and Education
-description: This article contains reference information for Microsoft Connected Cache for Enterprise and Education.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: reference
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 05/23/2024
----
-
-# Appendix
-
-## Steps to obtain an Azure subscription ID
-
-<!--Using include file, get-azure-subscription.md, do/mcc-isp.md for shared content-->
-[!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
-
-### Troubleshooting
-
-If you're not able to sign up for a Microsoft Azure subscription with the **Account belongs to a directory that cannot be associated with an Azure subscription. Please sign in with a different account.** error, see the following articles:
-
-- [Can't sign up for a Microsoft Azure subscription](/troubleshoot/azure/general/cannot-sign-up-subscription).
-- [Troubleshoot issues when you sign up for a new account in the Azure portal](/azure/cost-management-billing/manage/troubleshoot-azure-sign-up).
-
-## Hardware specifications
-
-Most customers choose to install their cache node on a Windows Server with a nested Hyper-V VM. If this isn't supported in your network, some customers have also opted to install their cache node using VMware. At this time, a Linux-only solution isn't available and Azure VMs don't support the standalone Microsoft Connected Cache.
-
-### Installing on VMware
-
-Microsoft Connected Cache for Enterprise and Education can be successfully installed on VMware. To do so, there are a couple of additional configurations to be made. Ensure the VM is turned off before making the following configuration changes:
-
-1. Ensure that you're using ESX. In the VM settings, turn on the option **Expose hardware assisted virtualization to the guest OS**.
-1. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**.
-
-### Installing on Hyper-V
-
-To learn more about how to configure Intel and AMD processors to support nested virtualization, see [Run Hyper-V in a Virtual Machine with Nested Virtualization](/virtualization/hyper-v-on-windows/user-guide/nested-virtualization).
-
-## Diagnostics Script
-
-If you're having issues with your Microsoft Connected Cache, we included a diagnostics script. The script collects all your logs and zips them into a single file. You can then send us these logs via email for the Connected Cache team to debug.
-
-To run this script:
-
-1. Navigate to the following folder in the Connected Cache installation files:
-
-    mccinstaller > Eflow > Diagnostics
-
-1. Run the following commands:
-
-   ```powershell
-   Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-   .\collectMccDiagnostics.ps1
-   ```
-
-1. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\<currentpath\>**\mccdiagnostics\support_bundle_\$timestamp.tar.gz
-
-1. [Email the Connected Cache team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process.
-
-## IoT Edge runtime
-
-The Azure IoT Edge runtime enables custom and cloud logic on IoT Edge devices.
-The runtime sits on the IoT Edge device, and performs management and
-communication operations. The runtime performs several functions:
-
-- Installs and update workloads (Docker containers) on the device.
-- Maintains Azure IoT Edge security standards on the device.
-- Ensures that IoT Edge modules (Docker containers) are always running.
-- Reports module (Docker containers) health to the cloud for remote monitoring.
-- Manages communication between an IoT Edge device and the cloud.
-
-For more information on Azure IoT Edge, see the [Azure IoT Edge documentation](/azure/iot-edge/about-iot-edge).
-
-## Routing local Windows clients to a Connected Cache
-
-### Get the IP address of your Connected Cache using ifconfig
-
-There are multiple methods that can be used to apply a policy to PCs that should participate in downloading from the Connected Cache.
-
-#### Registry key
-
-You can either set your Connected Cache IP address or FQDN using:
-
-1. Registry key (version 1709 and later):  
-    `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization`
-</br>
-    "DOCacheHost"=" "  
-
-    From an elevated command prompt:
-
-    ```powershell
-        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f
-    ```
-
-1. MDM path (version 1809 and later):
-
-    `.Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHost`
-
-1. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the Connected Cache using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your Connected Cache, such as `10.137.187.38`.
-
-   :::image type="content" source="./images/ent-mcc-group-policy-hostname.png" alt-text="Screenshot of the Group Policy editor showing the Cache Server Hostname Group Policy setting." lightbox="./images/ent-mcc-group-policy-hostname.png":::
-
-## Verify content using the DO client
-
-To verify that the Delivery Optimization client can download content using Connected Cache, you can use the following steps:
-
-1. Download a game or application from the Microsoft Store.
-
-   :::image type="content" source="./images/ent-mcc-store-example-download.png" alt-text="Screenshot of the Microsoft Store with the game, Angry Birds 2, selected.":::
-
-1. Verify downloads came from Connected Cache by one of two methods:
-
-    - Using the PowerShell Cmdlet Get-DeliveryOptimizationStatus you should see *BytesFromCacheServer*.
-
-      :::image type="content" source="./images/ent-mcc-get-deliveryoptimizationstatus.png" alt-text="Screenshot of the output of Get-DeliveryOptimization | FT from PowerShell." lightbox="./images/ent-mcc-get-deliveryoptimizationstatus.png":::
-
-    - Using the Delivery Optimization Activity Monitor
-
-      :::image type="content" source="./images/ent-mcc-delivery-optimization-activity.png" alt-text="Screenshot of the Delivery Optimization Activity Monitor.":::
-
-## EFLOW
-
-- [What is Azure IoT Edge for Linux on Windows](/azure/iot-edge/iot-edge-for-linux-on-windows)
-- [Install Azure IoT Edge for Linux on Windows](/azure/iot-edge/how-to-provision-single-device-linux-on-windows-symmetric#install-iot-edge)
-- [PowerShell functions for Azure IoT Edge for Linux on Windows](/azure/iot-edge/reference-iot-edge-for-linux-on-windows-functions)
-- EFLOW FAQ and Support: [Support · Azure/iotedge-eflow Wiki (github.com)](https://github.com/Azure/iotedge-eflow/wiki/Support#how-can-i-apply-updates-to-eflow)
-- [Now ready for Production: Linux IoT Edge Modules on Windows - YouTube](https://www.youtube.com/watch?v=pgqVCg6cxVU&ab_channel=MicrosoftIoTDevelopers)
diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md
deleted file mode 100644
index b5b7ae1435..0000000000
--- a/windows/deployment/do/mcc-enterprise-deploy.md
+++ /dev/null
@@ -1,418 +0,0 @@
----
-title: Deploying your cache node
-description: How to deploy a Microsoft Connected Cache for Enterprise and Education cache node from the Azure portal.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-ms.reviewer: mstewart
-manager: aaroncz
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 05/23/2024
----
-
-# Deploy your cache node
-
-This article describes how to deploy a Microsoft Connected Cache for Enterprise and Education cache node.
-
-## Steps to deploy Connected Cache
-
-To deploy Connected Cache to your server:
-
-1. [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id)
-1. [Create the Connected Cache Resource in Azure](#create-the-connected-cache-resource-in-azure)
-1. [Create a Connected Cache Node](#create-a-connected-cache-node-in-azure)
-1. [Edit Cache Node Information](#edit-cache-node-information)
-1. [Install Connected Cache on a physical server or VM](#install-connected-cache-on-windows)
-1. [Verify Connected Cache functionality](#verify-connected-cache-server-functionality)
-1. [Review common Issues](#common-issues) if needed.
-
-### Provide Microsoft with the Azure subscription ID
-
-As part of the Connected Cache preview onboarding process an Azure subscription ID must be provided to Microsoft.
-
-> [!IMPORTANT]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
-
-For information about creating or locating your subscription ID, see [Steps to obtain an Azure subscription ID](mcc-enterprise-appendix.md#steps-to-obtain-an-azure-subscription-id).
-
-### Create the Connected Cache resource in Azure
-
-The Connected Cache Azure management portal is used to create and manage Connected Cache nodes. An Azure subscription ID is used to grant access to the preview and to create the Connected Cache resource in Azure and Cache nodes.
-
-Once you take the survey above and the Connected Cache team adds your subscription ID to the allowlist, you'll be given a link to the Azure portal where you can create the resource described below.
-
-1. In the Azure portal home page, choose **Create a resource**:  
-
-   :::image type="content" source="./images/ent-mcc-create-azure-resource.png" alt-text="Screenshot of the Azure portal. The create a resource option is outlined in red.":::
-
-1. Type **Microsoft Connected Cache** into the search box, and hit **Enter** to show search results.
-
-   > [!NOTE]
-   > You won't see Microsoft Connected Cache in the drop-down list. You'll need to type the string and press enter to see the result.
-
-1. Select **Microsoft Connected Cache Enterprise** and choose **Create** on the next screen to start the process of creating the Connected Cache resource.
-
-   :::image type="content" source="./images/ent-mcc-azure-search-result.png" alt-text="Screenshot of the Azure portal search results for Microsoft Connected Cache.":::
-
-   :::image type="content" source="./images/ent-mcc-azure-marketplace.png" alt-text="Screenshot of Microsoft Connected Cache Enterprise within the Azure Marketplace.":::
-
-1. Fill in the required fields to create the Connected Cache resource.
-
-    - Choose the subscription that you provided to Microsoft.
-    - Azure resource groups are logical groups of resources. Create a new resource group and choose a name for your resource group.
-    - Choose **(US) West US** for the location of the resource. This choice won't impact Connected Cache if the physical location isn't in the West US, it's just a limitation of the preview.
-
-       > [!IMPORTANT]
-       > Your Connected Cache resource will not be created properly if you do not select **(US) West US**
-
-    - Choose a name for the Connected Cache resource.
-      - Your Connected Cache resource must not contain the word **Microsoft** in it.
-
-      :::image type="content" source="./images/ent-mcc-azure-create-connected-cache.png" alt-text="Screenshot of the Create a Connected Cache page within the Azure Marketplace.":::
-
-1. Once all the information has been entered, select the **Review + Create** button. Once validation is complete, select the **Create** button to start the resource creation.
-
-    :::image type="content" source="./images/ent-mcc-azure-cache-created.png" alt-text="Screenshot of the completed cache deployment within the Azure." lightbox="./images/ent-mcc-azure-cache-created.png":::
-
-#### Error: Validation failed
-
-- If you get a Validation failed error message on your portal, it's likely because you selected the **Location** as **US West 2** or some other location that isn't **(US) West US**.
-  - To resolve this error, go to the previous step and choose **(US) West US**.
-
-    :::image type="content" source="./images/ent-mcc-create-cache-failed.png" alt-text="Screenshot of a failed cache deployment due to an incorrect location.":::
-
-### Create a Connected Cache node in Azure
-
-Creating a Connected Cache node is a multi-step process and the first step is to access the Connected Cache early preview management portal.
-
-1. After the successful resource creation, select  **Go to resource**.
-1. Under **Cache Node Management** section on the leftmost panel, select **Cache Nodes**.
-
-    :::image type="content" source="./images/ent-mcc-cache-nodes.png" alt-text="Screenshot of the Cache Node Management section with the navigation link to the Cache Nodes page outlined in red.":::
-
-1. On the **Cache Nodes** blade, select the **Create Cache Node** button.
-
-    :::image type="content" source="./images/ent-mcc-create-cache-node.png" alt-text="Screenshot of the Cache Nodes page with the Create Cache Node option outlined in red.":::
-
-1. Selecting the **Create Cache Node** button will open the **Create Cache Node** page; **Cache Node Name** is the only field required for cache node creation.
-
-   | Field Name | Expected Value | Description |
-   |---|---|---|
-   | **Cache Node Name** | Alphanumeric name that doesn't include any spaces. | The name of the cache node. You may choose names based on location such as `Seattle-1`. This name must be unique and can't be changed later. |
-
-1. Enter the information for the **Cache Node** and select the **Create** button.
-
-   :::image type="content" source="./images/ent-mcc-create-cache-node-name.png" alt-text="Screenshot of the Cache Nodes page displaying the Cache Node Name text entry during the creation process.":::
-
-If there are errors, the form will provide guidance on how to correct the errors.
-
-Once the Connected Cache node has been created, the installer instructions will be exposed. More details on the installer instructions will be addressed later in this article, in the [Install Connected Cache](#install-connected-cache-on-windows) section.
-
-:::image type="content" source="./images/ent-mcc-connected-cache-installer-download.png" alt-text="Screenshot of the Connected Cache installer download button, installer instructions, and script.":::
-
-#### Edit cache node information
-
-Cache nodes can be deleted here by selecting the check box to the left of a **Cache Node Name** and then selecting the delete toolbar item. Be aware that if a cache node is deleted, there's no way to recover the cache node or any of the information related to the cache node.
-
-:::image type="content" source="./images/ent-mcc-delete-cache-node.png" alt-text="Screenshot of deleting a cache node from the Cache Nodes page.":::
-
-### Install Connected Cache on Windows
-
-Installing Connected Cache on your Windows device is a simple process. A PowerShell script performs the following tasks:
-
-- Installs the Azure CLI
-- Downloads, installs, and deploys EFLOW
-- Enables Microsoft Update so EFLOW can stay up to date
-- Creates a virtual machine
-- Enables the firewall and opens ports 80 and 22 for inbound and outbound traffic. Port 80 is used by Connected Cache, and port 22 is used for SSH communications.
-- Configures Connected Cache tuning settings.
-- Creates the necessary *FREE* Azure resource - IoT Hub/IoT Edge.
-- Deploys the Connected Cache container to server.
-
-#### Run the installer
-
-1. Download and unzip `mccinstaller.zip` from the create cache node page or cache node configuration page, both of which contain the necessary installation files.
-
-   :::image type="content" source="./images/ent-mcc-download-installer.png" alt-text="Screenshot of the download installer option on the Create Cache Node page.":::
-
-   The following files are contained in the `mccinstaller.zip` file:
-
-   - **installmcc.ps1**: Main installer file.
-   - **installEflow.ps1**: Installs the necessary prerequisites such as the Linux VM, IoT Edge runtime, and Docker, and makes necessary host OS settings to optimize caching performance.
-   - **resourceDeploymentForConnectedCache.ps1**: Creates Azure cloud resources required to support Connected Cache control plane.
-   - **mccdeployment.json**: Deployment manifest used by IoT Edge to deploy the Connected Cache container and configure settings on the container, such as cache drive location sizes.
-   - **updatemcc.ps1**: The update script used to upgrade Connected Cache to a particular version.
-   - **mccupdate.json**: Used as part of the update script
-
-1. Open Windows PowerShell as administrator then navigate to the location of these files.
-
-   > [!NOTE]
-   > Ensure that Hyper-V is enabled on your device.
-   > - **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v)
-   > - **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server)'
-   >
-   > Don't use PowerShell ISE, PowerShell 6.x, or PowerShell 7.x. Only Windows PowerShell version 5.x is supported.
-
-1. **If you're installing Connected Cache on a local virtual machine**, turn the virtual machine **off** while you enable nested virtualization and MAC spoofing.
-   1. Enable nested virtualization:
-
-      ```powershell
-      Set-VMProcessor -VMName "VM name" -ExposeVirtualizationExtensions $true
-      ```
-
-   1. Enable MAC spoofing:
-
-      ```powershell
-      Get-VMNetworkAdapter -VMName "VM name" | Set-VMNetworkAdapter -MacAddressSpoofing On
-      ```
-
-1. Set the execution policy.
-
-    ```powershell
-    Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process
-    ```
-
-    > [!NOTE]
-    > After setting the execution policy, you'll see a warning asking if you wish to change the execution policy. Choose **[A] Yes to All**.
-
-1. Copy the command from the Azure portal and run it in Windows PowerShell.
-
-    :::image type="content" source="./images/ent-mcc-installer-script.png" alt-text="Screenshot of the installer script for the connected cache node.":::
-
-    > [!NOTE]
-    > After running the command, and multiple times throughout the installation process, you'll receive the following notice. Select **[R] Run once** to proceed.
-    > </br>
-    > </br> Security warning
-    > </br> Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your computer. If you trust this script, use the Unblock-File cmdlet to allow the script to run without this warning message. Do you want to run C:\Users\mccinstaller\Eflow\installmcc.ps1?
-    > </br>
-    > </br> [D] Do not run **[R] Run once** [S] Suspend [?] Help (default is "D"):
-
-1. Choose whether you would like to create a new external virtual switch or select an existing external virtual switch.
-
-   If creating a new external virtual switch, name your switch and be sure to choose a Local Area Connection (USB adapters work as well however, we do not recommend using Wi-Fi). A computer restart will be required if you're creating a new switch.
-
-   > [!NOTE]
-   > Restarting your computer after creating a switch is recommended. You'll notice network delays during installation if the computer has not been restarted.
-
-   If you restarted your computer after creating a switch, start from step 2 above and skip to step 5.
-
-   If you opt to use an existing external switch, select the switch from the presented options. Local Area Connection (or USB) is preferable to Wi-Fi.
-
-   :::image type="content" source="./images/ent-mcc-script-new-switch.png" alt-text="Screenshot of the installer script running in PowerShell when a new switch is created." lightbox="./images/ent-mcc-script-new-switch.png":::
-
-1. Rerun the script after the restart. This time, choose **No** when asked to create a new switch. Enter the number corresponding to the switch you previously created.
-
-     :::image type="content" source="./images/ent-mcc-script-existing-switch.png" alt-text="Screenshot of the installer script running in PowerShell when using an existing switch." lightbox="./images/ent-mcc-script-existing-switch.png":::
-
-1. Decide whether you would like to use dynamic or static address for the Eflow VM. If you choose to use a static IP, do not use the IP address of the server. It is a VM, and it will have its own IP.
-
-    :::image type="content" source="./images/ent-mcc-script-dynamic-address.png" alt-text="Screenshot of the installer script running in PowerShell asking if you'd like to use a dynamic address." lightbox="./images/ent-mcc-script-dynamic-address.png":::
-
-    > [!NOTE]
-    > Choosing a dynamic IP address might assign a different IP address when the Connected Cache restarts. A static IP address is recommended so you don't have to change this value in your management solution when Connected Cache restarts.
-
-   The IP address you assign to the EFLOW VM should be within the same subnet as the host server (based on the subnet mask) and not used by any other machine on the network.
-   For example, for host configuration where the server IP Address is 192.168.1.202 and the subnet mask is 255.255.255.0, the static IP can be anything 192.168.1.* except 192.168.1.202.
-   <!-- Insert Image 1 & 2. Remove ent-mcc-script-dynamic-address.png image (it is replaced by image 2) -->
-    :::image type="content" source="./images/external-switch-1.jpg" alt-text="Screenshot of a sample output of ipconfig command showing example of subnet mask." lightbox="./images/external-switch-1.jpg":::
-
-    :::image type="content" source="./images/assigning-ip-2.png" alt-text="Screenshot of multiple installer questions about ipv4 address for Eflow." lightbox="./images/assigning-ip-2.png":::
-
-   If you would like to use your own DNS server instead of Google DNS 8.8.8.8, select **n** and set your own DNS server IP.
-
-   :::image type="content" source="./images/use-custom-dns-3.png" alt-text="Screenshot of multiple installer questions about setting an alternate DNS server." lightbox="./images/use-custom-dns-3.png":::
-
-   If you use a dynamic IP address, the DHCP server will automatically configure the IP address and DNS settings.
-
-1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path.
-
-   <!-- Insert Image 4 -->
-   :::image type="content" source="./images/installation-info-4.png" alt-text="Screenshot of multiple installer questions about memory and storage for EFLOW." lightbox="./images/installation-info-4.png":::
-
-   For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommended values for a Branch Office/Small Enterprise deployment.
-
-   <!-- Insert Image 5 -->
-   :::image type="content" source="./images/memory-storage-5.png" alt-text="Screenshot of multiple installer questions about memory and storage." lightbox="./images/memory-storage-5.png":::
-   <!-- Remove: If this is your first Connected Cache deployment, select **n** so that a new IoT Hub can be created. If you have already configured Connected Cache before, choose **y** so that your Connected Caches are grouped in the same IoT Hub.
-
-    1. You'll be shown a list of existing IoT Hubs in your Azure subscription. Enter the number corresponding to the IoT Hub to select it. **You'll likely have only 1 IoT Hub in your subscription, in which case you want to enter "1"**
-
-       :::image type="content" source="./images/ent-mcc-script-select-hub.png" alt-text="Screenshot of the installer script running in PowerShell prompting you to select which IoT Hub to use." lightbox="./images/ent-mcc-script-select-hub.png":::
-       -->
-1. When the installation is complete, you should see the following output (the values below will be your own)
-
-    :::image type="content" source="./images/ent-mcc-script-complete.png" alt-text="Screenshot of the installer script displaying the completion summary in PowerShell." lightbox="./images/ent-mcc-script-complete.png":::
-       <!-- Insert Image 7 -->
-
-    :::image type="content" source="./images/installation-complete-7.png" alt-text="Screenshot of expected output when installation is complete." lightbox="./images/installation-complete-7.png":::
-
-1. Your Connected Cache deployment is now complete.
-
-   If you don't see any errors, continue to the next section to validate your Connected Cache deployment. Your VM will not appear in Hyper-V Manager as it is an EFLOW VM.
-   - After validating your Connected Cache is properly functional, review your management solution documentation, such as [Intune](/mem/intune/configuration/delivery-optimization-windows), to set the cache host policy to the IP address of your Connected Cache.
-   - If you had errors during your deployment, see the [Common Issues](#common-issues) section in this article.
-
-## Verify Connected Cache server functionality
-
-#### Verify client side
-
-Connect to the EFLOW VM and check if Connected Cache is properly running:
-
-1. Open PowerShell as an Administrator.
-2. Enter the following commands:
-
-   ```powershell
-   Connect-EflowVm
-   sudo -s
-   iotedge list
-   ```
-
-   :::image type="content" source="./images/ent-mcc-connect-eflowvm.png" alt-text="Screenshot of running connect-EflowVm, sudo -s, and iotedge list from PowerShell." lightbox="./images/ent-mcc-connect-eflowvm.png":::
-
-You should see Connected Cache, edgeAgent, and edgeHub running. If you see edgeAgent or edgeHub but not Connected Cache, try this command in a few minutes. The Connected Cache container can take a few minutes to deploy. If iotedge list times out, you can run docker ps -a to list the running containers.
-If the 3 containers are still not running, run the following commands to check if DNS resolution is working correctly:
-
-```bash
-ping www.microsoft.com
-resolvectl query microsoft.com
-```
-
-See the [common issues](#common-issues) section for more information.
-
-#### Verify server side
-
-To validate that Connected Cache is properly functioning, execute the following command in the EFLOW VM or any device in the network. Replace <CacheServerIP\> with the IP address of the cache server.
-
-```powershell
-wget http://<CacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com
-```
-
-A successful test result will display a status code of 200 along with additional information.
-
-:::image type="content" source="./images/ent-mcc-verify-server-ssh.png" alt-text="Screenshot of a successful wget with an SSH client." lightbox="./images/ent-mcc-verify-server-ssh.png":::
-
-:::image type="content" source="./images/ent-mcc-verify-server-powershell.png" alt-text="Screenshot of a successful wget using PowerShell." lightbox="./images/ent-mcc-verify-server-powershell.png":::
-
-Similarly, enter the following URL from a browser in the network:
-
-`http://<YourCacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com`
-
-If the test fails, see the [common issues](#common-issues) section for more information.
-
-### Intune (or other management software) configuration for Connected Cache
-
-For an [Intune](/mem/intune/) deployment, create a **Configuration Profile** and include the Cache Host eFlow IP Address or FQDN:
-
-:::image type="content" source="./images/ent-mcc-intune-do.png" alt-text="Screenshot of Intune showing the Delivery Optimization cache server host names.":::
-
-## Common Issues
-
-#### PowerShell issues
-
-If you're seeing errors similar to this error: `The term Get-<Something> isn't recognized as the name of a cmdlet, function, script file, or operable program.`
-
-1. Ensure you're running Windows PowerShell version 5.x.
-
-1. Run \$PSVersionTable and ensure you're running version 5.x and *not version 6 or 7*.
-
-1. Ensure you have Hyper-V enabled:
-
-   **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v)
-
-   **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server)
-
-#### Verify Running Connected Cache Container
-
-Connect to the Connected Cache server and check the list of running IoT Edge modules using the following commands:
-
-```bash
-Connect-EflowVm
-sudo iotedge list
-```
-
-:::image type="content" source="./images/ent-mcc-iotedge-list.png" alt-text="Screenshot of the iotedge list command." lightbox="./images/ent-mcc-iotedge-list.png":::
-
-If edgeAgent and edgeHub containers are listed, but not "MCC", you may view the status of the IoT Edge security manager by using the command:
-
-```bash
-sudo journalctl -u iotedge -f
-```
-
-This command will provide the current status of the starting, stopping of a container, or the container pull and start.  
-
-:::image type="content" source="./images/ent-mcc-journalctl.png" alt-text="Screenshot of the output from journalctl -u iotedge -f." lightbox="./images/ent-mcc-journalctl.png":::
-
-> [!NOTE]
-> You should consult the IoT Edge troubleshooting guide ([Common issues and resolutions for Azure IoT Edge](/azure/iot-edge/troubleshoot)) for any issues you may encounter configuring IoT Edge, but we've listed a few issues that we encountered during our internal validation.
-
-
-### DNS needs to be configured
-
-Run the following IoT Edge install state check:
-
-```bash
-sudo iotedge check --verbose
-```
-
-If you see issues with ports 5671, 443, and 8883, your IoT Edge device needs to update the DNS for Docker.
-
-To configure the device to work with your DNS, use the following steps:
-
-1. Use `ifconfig` to find the appropriate NIC adapter name.
-
-   ```bash
-   ifconfig
-   ```
-
-1. Run `nmcli device show <network adapter name>` to show the DNS name for the ethernet adapter. For example, to show DNS information for **eno1**:
-
-   ```bash
-   nmcli device show eno1 
-   ```
-
-   :::image type="content" source="images/mcc-isp-nmcli.png" alt-text="Screenshot of a sample output of nmcli command to show network adapter information." lightbox="./images/mcc-isp-nmcli.png":::
-
-1. Open or create the Docker configuration file used to configure the DNS server.
-
-   ```bash
-   sudo nano /etc/docker/daemon.json
-   ```
-
-1. Paste the following string into the **daemon.json** file, and include the appropriate DNS server address. For example, in the previous screenshot, `IP4.DNS[1]` is `10.50.10.50`.
-
-   ```bash
-   { "dns": ["x.x.x.x"]}
-   ```
-
-1. Save the changes to daemon.json. If you need to change permissions on this file, use the following command:
-
-   ```bash
-   sudo chmod 555 /etc/docker/daemon.json
-   ```
-
-1. Restart Docker to pick up the new DNS setting. Then restart IoT Edge.
-
-   ```bash
-   sudo systemctl restart docker
-   sudo systemctl daemon-reload
-   sudo restart IoTEdge
-   ```
-
-### Resolve DNS issues
-
-Follow these steps if you see a DNS error when trying to resolve hostnames during the provisioning or download of container:
-Run `Get-EflowVmEndpoint` to get interface name
-
-Once you get the name:
-
-```bash
-Set-EflowVmDNSServers -vendpointName "interface name from above" -dnsServers @("DNS_IP_ADDRESS")
-Stop-EflowVm
-Start-EflowVm
-```
diff --git a/windows/deployment/do/mcc-enterprise-prerequisites.md b/windows/deployment/do/mcc-enterprise-prerequisites.md
deleted file mode 100644
index 2f782c468a..0000000000
--- a/windows/deployment/do/mcc-enterprise-prerequisites.md
+++ /dev/null
@@ -1,61 +0,0 @@
----
-title: Requirements for Microsoft Connected Cache for Enterprise and Education
-description: Overview of prerequisites and recommendations for using Microsoft Connected Cache for Enterprise and Education.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: conceptual
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection: tier3
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 05/23/2024
----
-
-# Requirements of Microsoft Connected Cache for Enterprise and Education (early preview)
-
-> [!NOTE]
-> As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup).
-
-## Enterprise requirements for Connected Cache
-
-1. **Azure subscription**: Connected Cache management portal is hosted within Azure and is used to create the Connected Cache [Azure resource](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management) and IoT Hub resource. Both are free services.
-
-    Your Azure subscription ID is first used to provision Connected Cache services, and enable access to the preview. The Connected Cache server requirement for an Azure subscription costs you nothing. If you don't have an Azure subscription already, you can create an Azure [pay-as-you-go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure Free Account FAQ](https://azure.microsoft.com/free/free-account-faq/).
-
-    The resources used for the preview and in the future when this product is ready for production will be free to you, like other caching solutions.
-1. **Hardware to host Connected Cache**: The recommended configuration serves approximately 35,000 managed devices, downloading a 2-GB payload in 24-hour timeframe at a sustained rate of 6.5 Gbps.
-  
-   > [!NOTE]
-   > Azure VMs are not currently supported. If you'd like to install your cache node on VMWare, see the [Appendix](mcc-enterprise-appendix.md) for a few additional configurations.
-
-    **EFLOW requires Hyper-V support**
-    - On Windows client, enable the Hyper-V feature.
-    - On Windows Server, install the Hyper-V role and create a default network switch.
-    - For more requirements, see [EFLOW requirements](/azure/iot-edge/iot-edge-for-linux-on-windows#prerequisites).
-
-    Disk recommendations:
-    - Using an SSD is recommended as cache read speed of SSD is superior to HDD
-
-    NIC requirements:
-    - Multiple NICs on a single Connected Cache instance aren't supported.
-    - 1 Gbps NIC is the minimum speed recommended but any NIC is supported.
-    - For best performance, NIC and BIOS should support SR-IOV.
-
-    VM networking:
-    -  An external virtual switch to support outbound and inbound network communication (created during the installation process)
-1. **Content endpoints**: If you're using a proxy or firewall, certain endpoints must be allowed through in order for your Connected Cache to cache and serve content. See [Delivery Optimization and Microsoft Connected Cache content type endpoints](delivery-optimization-endpoints.md) for the list of required endpoints. 
-
-## Sizing recommendations
-
-| Component  | Branch Office / Small Enterprise | Large Enterprise |
-| -- | --- | --- |
-| OS|  Windows Server 2019*/2022 <br> Windows 10*/11 (Pro or Enterprise) with Hyper-V Support <br><br>* Windows 10 and Windows Server 2019 build 17763 or later | Same |
-|NIC | 1 Gbps | 5 Gbps |
-|Disk | SSD <br>1 drive <br>50 GB each  |SSD <br>1 drive <br>200 GB each  |
-|Memory | 4 GB | 8 GB |
-|Cores | 4 | 8  |
diff --git a/windows/deployment/do/mcc-enterprise-update-uninstall.md b/windows/deployment/do/mcc-enterprise-update-uninstall.md
deleted file mode 100644
index 27fb6d1cbc..0000000000
--- a/windows/deployment/do/mcc-enterprise-update-uninstall.md
+++ /dev/null
@@ -1,55 +0,0 @@
----
-title: Uninstall Microsoft Connected Cache for Enterprise and Education
-description: Details on how to uninstall Microsoft Connected Cache for Enterprise and Education for your environment.
-ms.service: windows-client
-ms.subservice: itpro-updates
-ms.topic: how-to
-ms.author: carmenf
-author: cmknox
-manager: aaroncz
-ms.reviewer: mstewart
-ms.collection:
-  - tier3
-  - must-keep
-appliesto: 
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
-- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-- ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 05/23/2024
----
- 
-<!-- Customers will no longer update the private preview and instead install public preview
-# Update or uninstall Microsoft Connected Cache for Enterprise and Education
-
-Throughout the preview phase, we'll send you security and feature updates for Connected Cache. Follow these steps to perform the update.
-
-## Update Connected Cache
-
-Run the following command with the **arguments** we provided in the email to update your Connected Cache:
-
-```powershell
-# .\updatemcc.ps1 version="**\<VERSION\>**" tenantid="**\<TENANTID\>**" customerid="**\<CUSTOMERID\>**" cachenodeid="**\<CACHENODEID\>**" customerkey="**\<CUSTOMERKEY\>**"
-```
-
-For example:
-
-```powershell
-# .\updatemcc.ps1 version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.659" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99a"
-```
--->
-# Uninstall Microsoft Connected Cache
-
-Contact the Connected Cache Team before uninstalling to let us know if you're facing issues.
-
-This script removes the following items:
-
-1. EFLOW + Linux VM
-1. IoT Edge
-1. Edge Agent
-1. Edge Hub
-1. Connected Cache
-1. Moby CLI
-1. Moby Engine
-
-To delete Connected Cache, go to Control Panel \> Uninstall a program \> Select Azure IoT
-Edge LTS \> Uninstall

From 0657e1c4059108193672c2e242f2f9e541d659cf Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Fri, 25 Oct 2024 09:22:01 -0700
Subject: [PATCH 084/128] Update windows/deployment/do/mcc-ent-prerequisites.md

fix link
---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 2f532cb9c2..85c8a2f36a 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -44,7 +44,7 @@ This article details the requirements and recommendations for using Microsoft Co
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
-- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch-portal?tabs=portal%2Cportal3%2Cportal2).
+- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](/azure/virtual-machines/trusted-launch-portal).
 - The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
 
 ### Additional requirements for Linux host machines

From 2bb4dbbe4aa6f14f7da6ab023e2554d691c83039 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Fri, 25 Oct 2024 09:23:49 -0700
Subject: [PATCH 085/128] Update windows/deployment/do/mcc-ent-prerequisites.md

edit
---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 85c8a2f36a..9ba5eb494d 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -44,7 +44,7 @@ This article details the requirements and recommendations for using Microsoft Co
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
-- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](/azure/virtual-machines/trusted-launch-portal).
+- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as [Trusted Launch in Azure VMs](/azure/virtual-machines/trusted-launch-portal).
 - The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
 
 ### Additional requirements for Linux host machines

From 649bf7c183fc97333e9645e202950586318c1f6c Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 25 Oct 2024 14:58:25 -0700
Subject: [PATCH 086/128] Clarified steps + added notes to Windows deployment
 page

---
 .../deployment/do/mcc-ent-deploy-to-windows.md   | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index d219734b31..0c1fee800d 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -26,12 +26,14 @@ Before deploying Connected Cache to a Windows host machine, ensure that the host
 # [Azure portal](#tab/portal)
 
 1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
-1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
+1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine. **Note**: The installer should be in a folder that is not synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
-1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 
 
-   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+    For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+
+   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`. **Note**: You will need to apply a local security policy to permit the Local User account to "Log on as a batch job".
 
 1. Run the provisioning command on the host machine.
 
@@ -49,11 +51,13 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
-1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
+1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 
 
-   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`.
+    For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
 
-1. Replace the values in the following provisioning command before running it on the host machine. Note that `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you're using a Local User account as the Connected Cache runtime account.
+   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`. **Note**: You will need to apply a local security policy to permit the Local User account to "Log on as a batch job".
+
+1. Replace the values in the following provisioning command before running it on the host machine. **Note**:  `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you're using a Local User account as the Connected Cache runtime account.
 
    ```powershell-interactive
    ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential

From 1f7cae57d94937ec79e43f4c7d6927c81d922339 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 25 Oct 2024 14:58:46 -0700
Subject: [PATCH 087/128] Added wsl install command to prereqs page

---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 938d52a217..1878a73a01 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -45,7 +45,7 @@ This article details the requirements and recommended specifications for using M
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
 - The Windows host machine must support nested virtualization.
-- The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command).
+- The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
 
 ### Additional requirements for Linux host machines
 

From a5d9ed5a0af376ace4a0dbbc9b8efdd943f6bdd9 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Fri, 25 Oct 2024 15:07:55 -0700
Subject: [PATCH 088/128] changes to isp and ent private preview and release
 notes

---
 .../deployment/do/mcc-ent-private-preview.md  |   8 +-
 .../deployment/do/mcc-ent-release-notes.md    |  19 +-
 windows/deployment/do/mcc-isp.md              | 582 +-----------------
 3 files changed, 21 insertions(+), 588 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-private-preview.md
index 03c549f395..0a68a11540 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-private-preview.md
@@ -12,13 +12,13 @@ appliesto:
 ms.date: 06/03/2024
 ---
 
-# Microsoft Connected Cache for Enterprise and Education (MCC) Private Preview
+# Microsoft Connected Cache for Enterprise and Education (early preview)
 
-If you participated in the MCC early preview, thank you for your collaboration and feedback.
+If you participated in the early preview program, thank you for your collaboration and feedback.
 
-To continue using MCC, we strongly recommend that you upgrade your existing cache nodes to the Public Preview release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
+To continue using supported version of Microsoft Connected Cache, we strongly recommend that you upgrade your existing cache nodes to the new release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the MCC Azure service.
 
-As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
+We strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
 
 ## Next step
 
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 45efd09f1b..dd18d78067 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -26,14 +26,19 @@ This article contains details about the latest releases of MCC. Since MCC is a P
 - Contains client changes
 - Affects Linux, Windows host machines
 
-### Changenotes
+### Feature updates
 
-- Added new "Outbound egress" and "Volume by Content type" monitoring charts to Azure portal user interface
-- Added ability to create custom monitoring charts under the Metrics tab in the Azure portal user interface
-- Added support for creating both Windows-hosted and Linux-hosted cache nodes under the same MCC Azure resource
-- Added Azure CLI support for programmatic creation and management of MCC Azure resources and cache nodes
-- Added support for unauthenticated proxy and cloud proxy integration
-- Added ability to set each cache node's Update Ring to govern cadence of MCC container updates
+- **Metrics and charts in Azure portal**: You can now visualize "Outbound egress" and "Volume by Content type" charts for your cache node on Azure portal. You can also create custom monitoring charts for your cache nodes. You will find this capability under the Metrics tab on Azure portal.
+- **Cache nodes for Windows or Linux host machines**: Cache nodes can now be created and deployed to Windows host machine or Linux host machines by simply choosing the OS when creating cache nodes.
+- **Azure CLI support**: Cache nodes can now be created and managed via Azure CLI.
+- **Proxy**: We added support for unauthenticated proxy and cloud proxy integration.
+- **Updates**: Your cache nodes will now be updated automatically and we also added capability to set each cache node's Update Ring to govern cadence of MCC container updates.
+
+### Fixes
+- We fixed various bugs to achieve smoother install experience.
+
+
+<br>
 
 ## Related content
 
diff --git a/windows/deployment/do/mcc-isp.md b/windows/deployment/do/mcc-isp.md
index 0d3426ca7a..5baf7d7209 100644
--- a/windows/deployment/do/mcc-isp.md
+++ b/windows/deployment/do/mcc-isp.md
@@ -20,594 +20,20 @@ appliesto:
 # Microsoft Connected Cache for Internet Service Providers (early preview)
 
 > [!IMPORTANT]
-> This document is for Microsoft Connected Cache (early preview). Microsoft Connected Cache for ISPs is now in Public Preview - for our early preview customers, we highly encourage you to onboard onto our Public Preview program. For instructions on signing up and onboarding please visit [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md).
+> Microsoft Connected Cache for ISPs is now in Public Preview - for our early preview customers, and early preview version is no longer supported. We highly encourage you to onboard onto our Public Preview program. For instructions on signing up and onboarding, visit [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md).
 
 ## Overview
 
-Microsoft Connected Cache preview is a software-only caching solution that delivers Microsoft content within operator networks. Connected Cache can be deployed to as many physical servers or VMs as needed and is managed from a cloud portal. Microsoft cloud services handle routing of consumer devices to the cache server for content downloads.
+Microsoft Connected Cache preview is a software-only caching solution that delivers Microsoft content within operator networks. Connected Cache can be deployed to as many physical servers or VMs as needed and is managed from a cloud portal. Microsoft cloud services handle routing of consumer devices to the cache server for content downloads. For more information, visit [Microsoft Connected Cache for ISP](mcc-isp-overview.md).
 
-Microsoft Connected Cache is a hybrid application, in that it's a mix of on-premises and cloud resources. It's composed of a Docker-compatible Linux container deployed to your server and a cloud management portal. Microsoft chose Azure IoT Edge as a secure and reliable control plane. For more information on IoT Edge, see the [Appendix](#appendix). Even though your scenario isn't related to IoT, Azure IoT Edge is our secure Linux container deployment and management infrastructure.
-
-## How Connected Cache works
-
-:::image type="content" source="./images/mcc-isp-diagram.png" alt-text="Data flow diagram of how Microsoft Connected Cache works." lightbox="./images/mcc-isp-diagram.png":::
-
-The following steps describe how Connected Cache is provisioned and used:
-
-1. The Azure Management Portal is used to create and manage Connected Cache nodes.
-
-1. A shell script is used to provision the server and deploy the Connected Cache application.
-
-1. A combination of the Azure Management Portal and shell script is used to configure Microsoft Delivery Optimization Services to route traffic to the Connected Cache server.
-
-    - The publicly accessible IPv4 address of the server is configured on the portal.
-
-    - **Manual Routing:** Providing the CIDR blocks that represent the client IP address space, which should be routed to the Connected Cache node.
-
-    - **BGP Routing:** A shell script is used to initiate a peering session with a router in the operator network, and the operator initiates a session with the Connected Cache node.
-
-        > [!NOTE]
-        > Only IPv4 addresses are supported at this time. Entering IPv6 addresses will result in an error.
-
-1. Microsoft end-user devices (clients) periodically connect with Microsoft Delivery Optimization Services, and the services match the IP address of the client with the IP address of the corresponding Connected Cache node.
-
-1. Microsoft clients make the range requests for content from the Connected Cache node.
-
-1. A Connected Cache node gets content from the CDN, seeds its local cache stored on disk, and delivers the content to the client.
-
-1. Subsequent requests from end-user devices for content will be served from cache.
-
-1. If the Connected Cache node is unavailable, the client gets content from the CDN to ensure uninterrupted service for your subscribers.
-
-## ISP requirements for Connected Cache
 
 Microsoft Connected Cache for Internet Service Providers is now in Public Preview! To get started, visit  [Azure portal](https://www.portal.azure.com) to sign up for Microsoft Connected Cache for Internet Service Providers. Please see [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md) for more information on the requirements for sign up and onboarding.
 
-<!-- ### Azure subscription
 
-The Connected Cache management portal is hosted within Azure. It's used to create the Connected Cache Azure resource and IoT Hub resource. Both are *free* services.
 
-> [!NOTE]
-> If you request Exchange or Public peering in the future, business email addresses must be used to register ASNs. Microsoft doesn't accept Gmail or other non-business email addresses.
 
-Your Azure subscription ID is first used to provision Connected Cache services and enable access to the preview. The Connected Cache server requirement for an Azure subscription will cost you nothing. If you don't have an Azure subscription already, you can create an Azure [Pay-As-You-Go](https://azure.microsoft.com/offers/ms-azr-0003p/) account, which requires a credit card for verification purposes. For more information, see the [Azure free account FAQ](https://azure.microsoft.com/free/free-account-faq/). *Don't submit a trial subscription* as you'll lose access to your Azure resources after the trial period ends.
 
-The resources used for the preview, and in the future when this product is ready for production, will be free to you - like other caching solutions.
-
-### Hardware to host the Connected Cache
-
-This recommended configuration can egress at a rate of 9 Gbps with a 10 Gbps NIC.
-
-#### Disk requirements
-
-- SSDs are recommended due to improved cache read speeds of SSD, compared to HDD.
-- Using multiple disks is recommended to improve cache performance.
-- RAID disk configurations are discouraged because cache performance will be impacted. If you're using RAID disk configurations, ensure striping.
-- The maximum number of disks supported is 10.
-
-#### NIC requirements
-
-- Multiple NICs on a single Connected Cache instance are supported using a *link aggregated* configuration.
-- 10 Gbps NIC is the minimum speed recommended, but any NIC is supported.
-
-### Sizing recommendations
-
-The Connected Cache module is optimized for Ubuntu 20.04 LTS. Install Ubuntu 20.04 LTS on a physical server or VM of your choice. The following recommended configuration can egress at a rate of 9 Gbps with a 10 Gbps NIC.
-
-| Component  | Minimum | Recommended |
-|---|---|---|
-| OS |  Ubuntu 20.04 LTS VM or physical server | Ubuntu 20.04 LTS VM or physical server (preferred) |
-| NIC | 10 Gbps| at least 10 Gbps |
-| Disk | SSD </br>1 drive </br>2 TB each  |SSD </br>2-4 drives </br>at least 2 TB each  |
-| Memory | 8 GB | 32 GB or greater |
-| Cores | 4 | 8 or more  | -->
-
-<!-- ## Steps to deploy Connected Cache
-
-To deploy Connected Cache:
-
-1. [Provide Microsoft with your Azure subscription ID](#provide-microsoft-with-your-azure-subscription-id)
-2. [Create the Connected Cache Resource in Azure](#create-the-mcc-resource-in-azure)
-3. [Create a Cache Node](#create-an-mcc-node-in-azure)
-4. [Configure Cache Node Routing](#edit-cache-node-information)
-5. [Install Connected Cache on a physical server or VM](#install-mcc)
-6. [Verify properly functioning Connected Cache server](#verify-properly-functioning-mcc-server)
-7. [Review common issues if needed](#common-issues)
-
-## Provide Microsoft with your Azure subscription ID
-
-As part of the Connected Cache preview onboarding process, an Azure subscription ID must be provided to Microsoft.
-
-> [!IMPORTANT]
-> For information about creating or locating your subscription ID, see [Steps to obtain an Azure subscription ID](#steps-to-obtain-an-azure-subscription-id).
-
-### Create the Connected Cache resource in Azure
-
-The Connected Cache Azure management portal is used to create and manage Connected Cache nodes. An Azure subscription ID is used to grant access to the preview and to create the Connected Cache resource in Azure and cache nodes.
-
-Operators who have been given access to the program will be sent a link to the Azure portal, which will allow you to create this resource.
-
-1. Choose **Create a resource**.
-
-    :::image type="content" source="./images/mcc-isp-create-resource.png" alt-text="Screenshot of the option to 'Create a resource' in the Azure portal.":::
-
-1. Type **Microsoft Connected Cache** into the search box and press **Enter** to show the search results.
-
-1. Select **Microsoft Connected Cache**.
-
-    :::image type="content" source="./images/mcc-isp-search-marketplace.png" alt-text="Screenshot of searching the Azure Marketplace for 'Microsoft Connected Cache'.":::
-
-    > [!IMPORTANT]
-    > Don't select *Connected Cache Resources*, which is different from **Microsoft Connected Cache**.
-
-1. Select **Create** on the next screen to start the process of creating the Connected Cache resource.
-
-    :::image type="content" source="./images/mcc-isp-create.png" alt-text="Screenshot of the Create option for the Microsoft Connected Cache service.":::
-
-1. Fill in the following required fields to create the Connected Cache resource:
-
-    - Choose the **Subscription** that you provided to Microsoft.
-
-    - Azure resource groups are logical groups of resources. Create a new **Resource group** and choose a name for it.
-
-    - Choose **(US) West US** for the **Location** of the resource. This choice won't impact Connected Cache if the physical location isn't in the West US, it's just a limitation of the preview.
-
-        > [!NOTE]
-        > Your Connected Cache resource won't create properly if you don't select **(US) West US**.
-
-    - Specify a **Connected Cache Resource Name**.
-
-      :::image type="content" source="./images/mcc-isp-location-west.png" alt-text="Screenshot of entering the required information, including the West US location, to create a Connected Cache in Azure.":::
-
-1. Select **Review + Create**. Once validation is complete, select **Create** to start the resource creation.
-
-    :::image type="content" source="./images/mcc-isp-deployment-complete.png" alt-text="'Screenshot of the 'Your deployment is complete' message displaying deployment details.":::
-
-#### Common Resource Creation Errors
-
-##### Error: Validation failed
-
-If you get the error message "Validation failed" in the Azure portal, it's likely because you selected the **Location** as **US West 2** or another unsupported location. To resolve this error, go to the previous step and choose **(US) West US** for the **Location**.
-
-##### Error: Could not create Marketplace item
-
-If you get the error message "Could not create marketplace item" in the Azure portal, use the following steps to troubleshoot:
-
-- Make sure that you've selected **Microsoft Connected Cache** and not *Connected Cache resources* while trying to create a Connected Cache resource.
-
-- Make sure that you're using the same subscription that you provided to Microsoft and you have privileges to create an Azure resource.
-
-- If the issue persists, clear your browser cache and start in a new window.
-
-### Create a Connected Cache node in Azure
-
-1. After you successfully create the resource, select **Go to resource**.
-
-1. Under the **Cache Node Management** section in the left panel, select **Cache Nodes**.
-
-    :::image type="content" source="./images/mcc-isp-cache-nodes-option.png" alt-text="Screenshot of the 'Cache Nodes' option in the Cache Node Management menu section.":::
-
-1. On the **Cache Nodes** section, select **Create Cache Node**.
-
-    :::image type="content" source="./images/mcc-isp-create-cache-node-option.png" alt-text="Screenshot of the selecting the 'Create Cache Node' option.":::
-
-1. This action opens the **Create Cache Node** page. The only required fields are **Cache Node Name** and **Max Allowable Egress (Mbps)**.
-
-    | Field name | Expected value | Description |
-    |--|--|--|
-    | **Cache Node Name** | Alphanumeric name that includes no spaces. | The name of the cache node. You may choose names based on location like Seattle-1. This name must be unique and can't be changed later. |
-    | **Server IP Address** | IPv4 Address | IP address of your Connected Cache server. This address is used to route end-user devices in your network to the server for Microsoft content downloads. *The IP address must be publicly accessible.* |
-    | **Max Allowable Egress (Mbps)** | Integer in Mbps | The maximum egress (Mbps) of your Connected Cache based on the specifications of your hardware. For example, `10,000` Mbps. |
-    | **Address Range/CIDR Blocks** | IPv4 CIDR notation | The IP address range (CIDR blocks) that should be routed to the Connected Cache server as a comma separated list. For example: `2.21.234.0/24, 3.22.235.0/24, 4.23.236.0/24` |
-    | **Enable Cache Node** | Enable or Disable | **Enable** permits the cache node to receive content requests. </br>**Disable** prevents the cache node from receiving content requests. </br>Cache nodes are enabled by default. |
-
-    :::image type="content" source="./images/mcc-isp-create-cache-node-fields.png" alt-text="Screenshot of the available fields on the Create Cache Node page.":::
-
-    > [!TIP]
-    > The information icon next to each field provides a description.
-    >
-    > :::image type="content" source="./images/mcc-isp-node-server-ip.png" alt-text="Screenshot of the Create Cache Node page showing the description for the Server IP Address field.":::
-
-   After you create the cache node, if you return to this page, it populates the values for the two read-only fields:
-
-     | Field name | Description |
-     |--|--|
-     | **IP Space** | Number of IP addresses that will be routed to your cache server. |
-    | **Activation Keys** | Set of keys to activate your cache node with the Connected Cache services. Copy the keys for use during install. The CustomerID is your Azure subscription ID. |
-
-1. Enter the information to create the cache node, and then select **Create**.
-
-    :::image type="content" source="./images/mcc-isp-create-new-node.png" alt-text="Screenshot of selecting 'Create' on the Create Cache Node page.":::
-
-If there are errors, the page gives you guidance on how to correct the errors. For example:
-
-- The cache node name is already in use in the resource or is an incorrect format.
-- The CIDR block notation or list is incorrect.
-- The server IP address or CIDR block is already in use.
-
-See the following example with all information entered:
-
-:::image type="content" source="./images/mcc-isp-create-node-form.png" alt-text="Screenshot of the Create Cache Node page with all information entered.":::
-
-Once you create the Connected Cache node, it will display the installer instructions. For more information on the installer instructions, see the [Install Connected Cache](#install-mcc) section.
-
-:::image type="content" source="./images/mcc-isp-success-instructions.png" alt-text="Screenshot of the Cache node successfully created with Connected Cache installer instructions.":::
-
-### IP address space approval
-
-There are three states for IP address space. Connected Cache configuration supports BGP and has automatic routing capabilities.
-
-- **Valid**: The IP address space is approved.
-
-- **In Review**: The IP address space is under review with Microsoft to ensure valid IP address space.
-
-- **Attention Required**: The IP address space has been reviewed and an issue was discovered. For example:
-
-  - The IP address space overlaps with an existing cache node that belongs to another customer
-
-  - The IP address space was exceedingly large.
-
-  If your IP address space has this status, contact Microsoft for more information.
-
-:::image type="content" source="./images/mcc-isp-node-names.png" alt-text="Screenshot of a list of cache node names with example IP address space statuses.":::
-
-## Edit cache node information
-
-:::image type="content" source="./images/mcc-isp-list-nodes.png" alt-text="Screenshot of the Cache Nodes list in the Azure portal.":::
-
-To modify the configuration for existing Connected Cache nodes in the portal, select the cache node name in the cache nodes list. This action opens the **Cache Node Configuration** page. You can edit the **Server IP Address** or **Address Range/CIDR Blocks** field. You can also enable or disable the cache node.
-
-:::image type="content" source="./images/mcc-isp-node-configuration.png" alt-text="Screenshot of the Cache Node Configuration page, highlighting editable fields.":::
-
-To delete a cache node, select it in the cache nodes list, and then select **Delete** in the toolbar. If you delete a cache node, there's no way to recover it or any of the information related to the cache node. -->
-
-<!-- ## Install Connected Cache
-
-To install Connected Cache on your physical server or VM, you use a Bash script installer, which runs the following tasks:
-
-- Installs the Moby engine and CLI.
-- Installs IoT Edge.
-- Installs SSH to support remote access to the server.
-- Enables the firewall and opens port 80 for inbound and outbound traffic. The Connected Cache uses port 80.
-- Configures Connected Cache tuning settings.
-- Creates the necessary free Azure resource: IoT Hub/IoT Edge.
-- Deploys the Connected Cache container to the server.
-
-> [!IMPORTANT]
-> Make sure that the following ports are open so that Microsoft can verify proper functionality of the cache server:
->
-> - 80: content delivery
-> - 179: BGP session
-> - 443: IoT Edge secure communication
-> - 5000: (optional) used to view locally running report
-> - 5671: IoT Edge communication/container management
-> - 8883: IoT Edge communication/container management
-
-### Steps to install Connected Cache
-
-Before you start, make sure that you have a data drive configured on your server. You'll need to specify the location for this cache drive during this process. The minimum size for the data drive is 100 GB. For instructions to mount a disk on a Linux VM, see [Attach a data disk to a Linux VM](/azure/virtual-machines/linux/attach-disk-portal#find-the-disk).
-
-1. From either **Create Cache Node** or **Cache Node Configuration** pages, select **Download Installer** to download the installer file.
-
-    :::image type="content" source="./images/mcc-isp-installer-download.png" alt-text="Screenshot of the Create Cache Node page highlighting the Download Installer action.":::
-
-    Unzip the **mccinstaller.zip** file, which includes the following installation files and folders:
-
-    - Diagnostics folder: Used to create diagnostics support bundle.
-    - **installmcc.sh**: Main installer file.
-    - **installIotEdge.sh**: Installs the necessary prerequisites. For example, IoT Edge runtime and Docker. It also makes necessary host OS settings to optimize caching performance.
-    - **resourceDeploymentForConnectedCache.sh**: Creates Azure cloud resources required to support the Connected Cache control plane.
-    - **mccdeployment.json**: Deployment manifest used by IoT Edge to deploy the Connected Cache container. It also configures settings on the container like cache drives location and sizes.
-    - **mccupdate.json**
-    - **packagever.txt**
-    - **uninstallmcc.sh**: Main uninstaller file.
-    - **updatemcc.sh**: Main update file.
-
-1. Copy all files to your Linux server.
-
-1. Open a terminal window. Change the access permissions to execute on the **installmcc.sh** Bash script file using `chmod`.
-
-    ```bash
-    sudo chmod +x installmcc.sh
-    ```
-
-1. In the Azure portal, in the Connected Cache installer instructions, copy the cache node installer Bash script command. Run the Bash script from the terminal.
-
-    :::image type="content" source="./images/mcc-isp-copy-install-script.png" alt-text="Screenshot of the Copy option for the cache node installer Bash script in the Connected Cache installer instructions.":::
-
-1. Sign in to the Azure portal with a device code.
-
-    :::image type="content" source="./images/mcc-isp-bash-device-code.png" alt-text="Screenshot of the Bash script prompt to sign in to the Azure portal with a device code." lightbox="./images/mcc-isp-bash-device-code.png":::
-
-1. Specify the number of drives to configure. Use an integer value less than 10.
-
-    :::image type="content" source="./images/mcc-isp-bash-drive-number.png" alt-text="Screenshot of the Bash script prompt to enter the number of cache drives to configure." lightbox="./images/mcc-isp-bash-drive-number.png":::
-
-1. Specify the location of the cache drives. For example, `/datadrive/`
-
-    :::image type="content" source="./images/mcc-isp-bash-datadrive.png" alt-text="Screenshot of the Bash script prompt to enter the location for cache drive." lightbox="./images/mcc-isp-bash-datadrive.png":::
-
-    > [!IMPORTANT]
-    > The script changes the permission and ownership on the cache drive to **everyone** with the command `chmod 777`.
-    >
-    > Don't point the cache drive to any of the following locations:
-    >
-    > - `.`
-    > - `./var`
-    > - `/`
-    > - `<space>`
-    >
-    > Specifying any of these will corrupt the OS, and you'll need to re-install the image again.
-
-1. Specify an integer value as the size in GB for each cache drive. The minimum is `100` GB.
-
-    :::image type="content" source="./images/mcc-isp-bash-allocate-space.png" alt-text="Screenshot of the Bash script prompt to enter the amount of space to allocate to the cache drive." lightbox="./images/mcc-isp-bash-allocate-space.png":::
-
-1. Specify whether you have an existing IoT Hub.
-
-    - If this process is for your *first Connected Cache deployment*, enter `n`.
-
-    - If you already have a Connected Cache deployment, you can use an existing IoT Hub from your previous installation. Select `Y` to see your existing IoT Hubs. You can copy and paste the resulting IoT Hub name to continue.
-
-    :::image type="content" source="./images/mcc-isp-bash-iot-prompt.png" alt-text="Screenshot of the Bash script output with steps for existing IoT Hub." lightbox="./images/mcc-isp-bash-iot-prompt.png":::
-
-1. If you want to configure BGP, enter `y`. If you want to use manual entered prefixes for routing, enter `n` and skip to Step 16. You can always configure BGP at a later time using the Update Script.
-
-    1. Enter the number of BGP neighbors you want to configure.
-    1. Enter the IP address for the neighbor.
-    1. Enter the ASN corresponding to that neighbor. This value should be the same ASN as the Connected Cache -iBGP connection.
-    1. Repeat these steps for each neighbor you need to configure.
-
-    > [!NOTE]
-    > With the BGP configuration, you're essentially setting up an iBGP neighbor in your public ASN. For example, when you initiate the BGP session from the router to the cache node, you would use your own ASN.
-
-1. BGP is now configured from the Connected Cache side. From your end, establish a neighborship from your router to Connected Cache's host machine. Use the IP address of the host machine that's running the Connected Cache container.
-
-    1. Make sure there aren't any firewall rules blocking this connection.
-    1. Verify that the BGP connection has been established and that you're advertising routes to the Connected Cache.
-    1. Wait five minutes to refresh the cache node page in the Azure portal to see the BGP routes.
-
-1. Confirm the update is complete by running the following command.
-
-    ```bash
-    sudo iotedge list
-    ```
-
-    Make sure Connected Cache is running on the latest version. If you only see **edgeAgent** and **edgeHub**, wait five minutes and run this command again.
-
-1. Make sure Connected Cache is reachable. Replace `<CacheServerIp>` with the IP address of your Connected Cache or localhost.
-
-    ```bash
-    wget http://<CacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com
-    ```
-
-1. After you successfully complete the update, go to the Azure portal. To check the routes being reported, select **Download JSON**.
-
-1. To start routing using BGP, change the **Prefix Source** from **Manually Entered** to **Use BGP**.
-
-    :::image type="content" source="./images/mcc-isp-use-bgp.png" alt-text="Screenshot of the Cache Node Configuration page with the Prefix Source set to Use BGP.":::
-
-1. If there are no errors, go to the next section to verify the Connected Cache server.
-
-    If there are errors:
-
-    - Inspect the installer logs, which are in the following path: `/etc/mccresourcecreation/`
-
-    - For more information, see [Troubleshoot your IoT Edge device](/azure/iot-edge/troubleshoot). -->
-
-## Verify properly functioning Connected Cache server
-
-### Verify client side
-
-Sign in to the Connected Cache server or use SSH. Run the following command from a terminal to see the running modules (containers):
-
-```bash
-sudo iotedge list
-```
-
-:::image type="content" source="./images/mcc-isp-running-containers.png" alt-text="Screenshot of the terminal output of iotedge list command, showing the running containers." lightbox="./images/mcc-isp-running-containers.png":::
-
-If it lists the **edgeAgent** and **edgeHub** containers, but doesn't include **MCC**, view the status of the IoT Edge security manager using the command:
-
-```bash
-sudo journalctl -u iotedge -f
-```
-
-For example, this command provides the current status of the starting and stopping of a container, or the container pull and start:
-
-:::image type="content" source="./images/mcc-isp-edge-journalctl.png" alt-text="Terminal output of journalctl command for iotedge." lightbox="./images/mcc-isp-edge-journalctl.png":::
-
-### Verify server side
-
-It can take a few minutes for the container to deploy.
-
-To validate a properly functioning Connected Cache, run the following command in the terminal of the cache server or any device in the network. Replace `<CacheServerIP>` with the IP address of the cache server.
-
-```bash
-wget http://<CacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com
-```
-
-The following screenshot shows a successful test result:
-
-:::image type="content" source="./images/mcc-isp-wget.png" alt-text="Screenshot of the terminal output of successful test result with wget command to validate a Microsoft Connected Cache." lightbox="./images/mcc-isp-wget.png":::
-
-Similarly, enter the following URL into a web browser on any device on the network:
-
-```http
-http://<CacheServerIP>/mscomtest/wuidt.gif?cacheHostOrigin=au.download.windowsupdate.com
-```
-
-If the test fails, for more information, see the [common issues](#common-issues) section.
-
-## Common Issues
-
-### Microsoft Connected Cache is no longer serving traffic
-If you did not migrate your cache node then your cache node may still be on early preview version.
-Microsoft Connected Cache for Internet Service Providers is now in Public Preview! To get started, visit  [Azure portal](https://www.portal.azure.com) to sign up for Microsoft Connected Cache for Internet Service Providers. Please see [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md) for more information on the requirements for sign up and onboarding.
-<br>
-<br>
-<br>
-
-> [!NOTE]
-> This section only lists common issues. For more information on additional issues you may encounter when configuring IoT Edge, see the [IoT Edge troubleshooting guide](/azure/iot-edge/troubleshoot).
-
-Use the following command to check the IoT Edge journal:
-
-```bash
-sudo journalctl -u iotedge -f
-```
-
-### DNS needs to be configured
-
-Run the following IoT Edge install state check:
-
-```bash
-sudo iotedge check --verbose
-```
-
-If you see issues with ports 5671, 443, and 8883, your IoT Edge device needs to update the DNS for Docker.
-
-To configure the device to work with your DNS, use the following steps:
-
-1. Use `ifconfig` to find the appropriate NIC adapter name.
-
-    ```bash
-    ifconfig
-    ```
-
-1. Run `nmcli device show <network adapter name>` to show the DNS name for the ethernet adapter. For example, to show DNS information for **eno1**:
-
-    ```bash
-    nmcli device show eno1 
-    ```
-
-    :::image type="content" source="images/mcc-isp-nmcli.png" alt-text="Screenshot of a sample output of nmcli command to show network adapter information." lightbox="./images/mcc-isp-nmcli.png":::
-
-1. Open or create the Docker configuration file used to configure the DNS server.
-
-    ```bash
-    sudo nano /etc/docker/daemon.json
-    ```
-
-1. Paste the following string into the **daemon.json** file, and include the appropriate DNS server address. For example, in the previous screenshot, `IP4.DNS[1]` is `10.50.10.50`.
-
-    ```bash
-    { "dns": ["x.x.x.x"]}
-    ```
-
-1. Save the changes to daemon.json. If you need to change permissions on this file, use the following command:
-
-    ```bash
-    sudo chmod 555 /etc/docker/daemon.json
-    ```
-
-1. Restart Docker to pick up the new DNS setting. Then restart IoT Edge.
-
-    ```bash
-    sudo systemctl restart docker
-    sudo systemctl daemon-reload
-    sudo restart IoTEdge
-    ```
-
-<!-- ### Diagnostics script
-
-If you're having issues with your Connected Cache, the installer file includes a diagnostics script. The script collects all logs and zips them into a single file. 
-
-To run the script:
-
-1. Navigate to the following folder in the Connected Cache installation files:
-
-    `mccinstaller > MccResourceInstall > Diagnostics`
-
-1. Run the following commands:
-
-    ```bash
-    sudo chmod +x collectMccDiagnostics.sh
-    sudo ./collectMccDiagnostics.sh
-    ```
-
-1. The script stores all the debug files into a folder and creates a tar file. After the script is finished running, it displays the path of the tar file that you can share with the Connected Cache team. The file should be `/etc/mccdiagnostics/support_bundle_\$timestamp.tar.gz`
-
-1. [Email the Connected Cache team](mailto:msconnectedcache@microsoft.com?subject=Debugging%20Support%20Request%20for%20MCC) and attach this tar file, asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during the debugging process. -->
-
-<!-- ## Updating your Connected Cache
-
-Throughout the early preview phase, Microsoft will release security and feature updates for Connected Cache. Follow these steps to update your Connected Cache.
-
-Run the following commands, replacing the variables with the values provided in the email to update your Connected Cache:
-
-```bash
-sudo chmod +x updatemcc.sh
-sudo chmod +x installIoTEdge.sh
-sudo ./updatemcc.sh version="<VERSION>" tenantid="<TENANTID>" customerid="<CUSTOMERID>" cachenodeid="<CACHENODEID>" customerkey="<CUSTOMERKEY>"
-```
-
-For example:
-
-```bash
-sudo ./updatemcc.sh version="msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64:1.2.1.981" tenantid="799a999aa-99a1-99aa-99aa-9a9aa099db99" customerid="99a999aa-99a1-99aa-99aa-9aaa9aaa0saa" cachenodeid=" aa99aaaa-999a-9aas-99aa99daaa99 " customerkey="a99d999a-aaaa-aa99-0999aaaa99aa"
-``` -->
-
-<!-- ### Configure BGP on an Existing Connected Cache
-
-If you have a Connected Cache that's already active and running, follow the steps below to configure BGP.
-
-1. Run the Update commands as described above.
-
-1. Sign in with your Azure credentials using the device code.
-
-1. To finish configuring your Connected Cache with BGP routing, continue from Step 10 of [Steps to Install Connected Cache](#steps-to-install-mcc). -->
-
-
-## Uninstalling Connected Cache
-
-In the installer zip file, you'll find the file **uninstallmcc.sh**. This script uninstalls Connected Cache and all the related components. Before you run this script, contact the Connected Cache team. Only run it if you're facing issues with Connected Cache installation.
-
-> [!WARNING]
-> Be cautious before running this script. It will also erase existing IoT workflows in this VM.
-
-The **uninstallmcc.sh** script removes the following components:
-
-- IoT Edge
-- Edge Agent
-- Edge Hub
-- Connected Cache
-- Moby CLI
-- Moby engine
-
-To run the script, use the following commands:
-
-```bash
-sudo chmod +x uninstallmcc.sh
-sudo ./uninstallmcc.sh
-```
-
-## Appendix
-
-### Steps to obtain an Azure subscription ID
-
-<!--Using include file, get-azure-subscription.md, for shared content-->
-[!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)]
-
-### Performance of Connected Cache in virtual environments
-
-In virtual environments, the cache server egress peaks at around 1.1 Gbps. If you want to maximize the egress in virtual environments, it's critical to change the following two settings:
-
-1. Enable **SR-IOV** in the following three locations:
-
-    - The BIOS of the Connected Cache VM
-    - The Connected Cache VM's network card properties
-    - The hypervisor for the Connected Cache VM
-
-    Microsoft has found these settings to double egress when using a Microsoft Hyper-V deployment.
-
-2. Enable "high performance" in the BIOS instead of energy savings. Microsoft has found this setting nearly doubled egress in a Microsoft Hyper-V deployment.
-
-### Grant other users access to manage your Connected Cache
-
-More users can be given access to manage Microsoft Connected Cache, even if they don't have an Azure account. Once you've created the first cache node in the portal, you can add other users as **Owners** of the Microsoft Connected Cache resource group and the Microsoft Connected Cache resource.
-
-For more information on how to add other users as an owner, see [Grant a user access to Azure resources using the Azure portal](/azure/role-based-access-control/quickstart-assign-role-user-portal). Make sure to do this action for both the *Connected Cache resource* and *Connected Cache resource group*.
+<!-- 
 
 ### Setting up a VM on Windows Server
 
@@ -727,3 +153,5 @@ For more information on Azure IoT Edge, see the [Azure IoT Edge documentation](/
 [Microsoft Connected Cache overview](waas-microsoft-connected-cache.md)
 
 [Introducing Microsoft Connected Cache](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/introducing-microsoft-connected-cache-microsoft-s-cloud-managed/ba-p/963898)
+
+-->
\ No newline at end of file

From 9cd06356e0e7d79745018d83682b6ec0f5ed4046 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 25 Oct 2024 15:10:02 -0700
Subject: [PATCH 089/128] Added proxy, WSL, scheduled task sections to
 troubleshooting page

---
 .../deployment/do/mcc-ent-troubleshooting.md  | 33 +++++++++++++++----
 1 file changed, 27 insertions(+), 6 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 3abfe22572..b7566354ba 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -28,7 +28,7 @@ This article contains instructions on how to troubleshoot different issues you m
 
 [Connected Cache Azure resource creation](mcc-ent-create-resource-and-cache.md) can be initiated using either the Azure portal user interface or the Azure CLI command set.
 
-If you're encountering an error during resource creation, check that you have the necessary RPaaS permissions and have filled out all required fields during the resource creation process.
+If you're encountering an error during resource creation, check that you have the necessary permissions to create Azure resources under your subscription and have filled out all required fields during the resource creation process.
 
 ## Troubleshooting cache node configuration
 
@@ -38,6 +38,8 @@ If you're encountering a validation error, check that you have filled out all re
 
 If your configuration doesn't appear to be taking effect, check that you have clicked the "Save" button at the top of the configuration page in the Azure portal user interface.
 
+If you have changed the proxy configuration, you will need to re-provision the Connected Cache software on the host machine for the proxy configuration to take effect.
+
 ## Troubleshooting cache nodes created during early preview
 
 Cache nodes created and deployed during the [Microsoft Connected Cache for Enterprise and Education early preview](mcc-ent-private-preview.md) should continue to function but can no longer be managed or monitored remotely via the Connected Cache Azure service.
@@ -46,6 +48,8 @@ As such, we strongly recommend you [recreate your existing resources in Azure](m
 
 ## Troubleshooting cache node deployment to Windows host machine
 
+### Collecting Windows-hosted installation logs
+
 [Deploying a Connected Cache node to a Windows host machine](mcc-ent-deploy-to-windows.md) involves running a series of PowerShell scripts contained within the Windows provisioning package. These scripts will attempt to write log files to the installation directory specified in the provisioning command (`C:\mccwsl01\InstallLogs` by default).
 
 There are three types of installation log files:
@@ -56,15 +60,32 @@ There are three types of installation log files:
 
 The Registered Task Transcript is usually the most useful for diagnosing the installation issue.
 
+### Updating the WSL2 kernel
+
+If the Connected Cache installation is failing due to WSL-related issues, try running `wsl.exe --update` to get the latest version of the WSL kernel.
+
+### Checking if the Connected Cache container is running
+
 Once the Connected Cache software has been successfully deployed to the Windows host machine, you can check if the cache node is running properly by doing the following on the Windows host machine:
 
 1. Launch a PowerShell process as the account specified as the runtime account during the Connected Cache install
 1. Run `wsl -d Ubuntu-22.04-Mcc-Base` to access the Linux distribution that hosts the Connected Cache container
 1. Run `sudo iotedge list` to show which containers are running within the IoT Edge runtime
 
-If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs --f`.
+If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs -- -f`.
 
-You can also reboot the IoT Edge runtime using `sudo iotedge restart`.
+You can also reboot the IoT Edge runtime using `sudo systemctl restart iotedge`.
+
+### Checking Connected Cache scheduled tasks
+
+Once the Connected Cache container is running, a scheduled task is periodically run under the Connected Cache runtime account to keep WSL from cleaning up the Connected Cache container.
+
+You can use Task Scheduler on the host machine to check the status of this scheduled task.
+
+1. Open Task Scheduler on the host machine
+1. Navigate to the Active Tasks section and double-click on "MCC_Monitor_Task"
+1. Select the scheduled task "MCC_Monitor_Task"
+1. Select the "Triggers" tab and confirm that the Status is "Enabled"
 
 ## Troubleshooting cache node deployment to Linux host machine
 
@@ -74,9 +95,9 @@ Once the Connected Cache software has been successfully deployed to the Linux ho
 
 1. Run `sudo iotedge list` to show which containers are running within the IoT Edge runtime
 
-If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs --f`.
+If it shows the **edgeAgent** and **edgeHub** containers but doesn't show **MCC**, you can view the status of the IoT Edge security manager using `sudo iotedge system logs -- -f`.
 
-You can also reboot the IoT Edge runtime using `sudo iotedge restart`.
+You can also reboot the IoT Edge runtime using `sudo systemctl restart iotedge`.
 
 ## Troubleshooting cache node monitoring
 
@@ -84,7 +105,7 @@ Connected Cache node status and performance can be [monitored using the Azure po
 
 If the [basic monitoring](mcc-ent-monitoring.md#basic-monitoring) visuals on the Overview tab are showing unexpected or erroneous values, refresh the browser window.
 
-If the issue persists, check that you have configured the Timespan and Cache nodes as desired.
+If the issue persists, check that you have configured the Timespan and Cache node filters as desired.
 
 ## Diagnose and Solve
 

From 79a2cb6f692dfe29b0383d4fc0340fa4759f9827 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Fri, 25 Oct 2024 15:10:29 -0700
Subject: [PATCH 090/128] change release note date

---
 windows/deployment/do/mcc-ent-release-notes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index dd18d78067..301dc649b6 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -20,7 +20,7 @@ This article contains details about the latest releases of MCC. Since MCC is a P
 
 ## Release v0.1.0 (Public Preview launch)
 
-- Released on **10/17/2024**
+- Released on **10/30/2024**
 - Contains breaking changes
 - Contains service changes
 - Contains client changes

From e0ed22f6c25ed640a4a3a7cee5b2948cfe0c2738 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 25 Oct 2024 15:11:37 -0700
Subject: [PATCH 091/128] Fix to windows deploy page

---
 windows/deployment/do/mcc-ent-deploy-to-windows.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 0c1fee800d..d0b1d06cb5 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -48,7 +48,7 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    ```
 
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
-1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine.
+1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine. **Note**: The installer should be in a folder that is not synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 

From 1545d3a959349c8c7d8b587436c6c92f02ebce14 Mon Sep 17 00:00:00 2001
From: chrisjlin <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 25 Oct 2024 15:19:17 -0700
Subject: [PATCH 092/128] Acrolinx fixes

---
 windows/deployment/do/mcc-ent-deploy-to-windows.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index d0b1d06cb5..34bb04d55a 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -26,14 +26,14 @@ Before deploying Connected Cache to a Windows host machine, ensure that the host
 # [Azure portal](#tab/portal)
 
 1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
-1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine. **Note**: The installer should be in a folder that is not synced to OneDrive, as this will interfere with the installation process.
+1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine. **Note**: The installer should be in a folder that isn't synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 
 
     For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
 
-   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`. **Note**: You will need to apply a local security policy to permit the Local User account to "Log on as a batch job".
+   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`. **Note**: You'll need to apply a local security policy to permit the Local User account to `Log on as a batch job`.
 
 1. Run the provisioning command on the host machine.
 
@@ -48,14 +48,14 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    ```
 
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
-1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine. **Note**: The installer should be in a folder that is not synced to OneDrive, as this will interfere with the installation process.
+1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine. **Note**: The installer should be in a folder that isn't synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 
 
     For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
 
-   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`. **Note**: You will need to apply a local security policy to permit the Local User account to "Log on as a batch job".
+   If you're using a Local User account as the Connected Cache runtime account, you'll also need to create a [PSCredential Object](/dotnet/api/system.management.automation.pscredential) named `$myLocalAccountCredential`. **Note**: You'll need to apply a local security policy to permit the Local User account to `Log on as a batch job`.
 
 1. Replace the values in the following provisioning command before running it on the host machine. **Note**:  `-mccLocalAccountCredential $myLocalAccountCredential` is only needed if you're using a Local User account as the Connected Cache runtime account.
 

From 2a6f9051db204f30e7dd129990076a310c282aa2 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 11:55:03 -0700
Subject: [PATCH 093/128] Update mcc-ent-release-notes.md

edits
---
 windows/deployment/do/mcc-ent-release-notes.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 819ba1c29d..bbd76a511d 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -16,7 +16,7 @@ ms.date: 09/27/2024
 
 # Release Notes for Microsoft Connected Cache for Enterprise and Education
 
-This article contains details about the latest releases of Connected Cache. Since Connected Cache is a preview service, some releases may contain breaking changes that will be highlighted as such.
+This article contains details about the latest releases of Connected Cache. Since Connected Cache is a preview service, some releases may contain breaking changes.
 
 ## Release v0.1.0 (public preview launch)
 
@@ -31,12 +31,12 @@ These changes affect Linux and Windows host machines.
 
 ### Feature updates
 
-- **Metrics and charts in Azure portal**: You can now visualize "Outbound egress" and "Volume by Content type" charts for your cache node on Azure portal. You can also create custom monitoring charts for your cache nodes. You will find this capability under the Metrics tab on Azure portal.
+- **Metrics and charts in Azure portal**: You can now visualize "Outbound egress" and "Volume by Content type" charts for your cache node on Azure portal. You can also create custom monitoring charts for your cache nodes. This capability is under the **Metrics** tab on Azure portal.
 - **Cache nodes for Windows or Linux host machines**: Cache nodes can now be created and deployed to Windows host machine or Linux host machines by simply choosing the OS when creating cache nodes.
-- **Ubuntu 22.04 LTS**: Cache nodes can now be delployed on Ubuntu 22.04 LTS.
+- **Ubuntu 22.04 LTS**: Cache nodes can now be deployed on Ubuntu 22.04 LTS.
 - **Azure CLI support**: Cache nodes can now be created and managed via Azure CLI.
 - **Proxy**: We added support for unauthenticated proxy and cloud proxy integration.
-- **Updates**: Your cache nodes will now be updated automatically and we also added capability to set each cache node's Update Ring to govern cadence of MCC container updates.
+- **Updates**: Your cache nodes are now updated automatically and we also added the capability to set each cache node's update ring to govern the cadence of Micoroft Connected Cache container updates.
 
 ### Fixes
 - We fixed various bugs to achieve smoother install experience.

From 9ef04f6ec6bd9cccd46862792436fec305284b08 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 13:11:31 -0700
Subject: [PATCH 094/128] release updates for mcc

---
 windows/deployment/do/TOC.yml                             | 2 +-
 ...cc-ent-private-preview.md => mcc-ent-early-preview.md} | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)
 rename windows/deployment/do/{mcc-ent-private-preview.md => mcc-ent-early-preview.md} (79%)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 749468bbbf..8b3994852b 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -66,7 +66,7 @@
         - name: Troubleshooting
           href: mcc-ent-troubleshooting.md
         - name: Microsoft Connected Cache for Enterprise and Education Early Preview
-          href: mcc-ent-private-preview.md
+          href: mcc-ent-early-preview.md
       - name: Release notes
         href: mcc-ent-release-notes.md        
     - name: Microsoft Connected Cache for ISPs
diff --git a/windows/deployment/do/mcc-ent-private-preview.md b/windows/deployment/do/mcc-ent-early-preview.md
similarity index 79%
rename from windows/deployment/do/mcc-ent-private-preview.md
rename to windows/deployment/do/mcc-ent-early-preview.md
index d80c08f02f..20d6403fa2 100644
--- a/windows/deployment/do/mcc-ent-private-preview.md
+++ b/windows/deployment/do/mcc-ent-early-preview.md
@@ -1,6 +1,6 @@
 ---
-title: Microsoft Connected Cache for Enterprise and Education Private Preview
-description: Details on Microsoft Connected Cache for Enterprise Private Preview
+title: Microsoft Connected Cache for Enterprise and Education early preview
+description: Details on Microsoft Connected Cache for Enterprise early preview
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: conceptual
@@ -19,10 +19,10 @@ If you participated in the early preview program, thank you for your collaborati
 
 To continue using supported version of Microsoft Connected Cache, we strongly recommend that you upgrade your existing cache nodes to the new release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the Microsoft Connected Cache Azure service.
 
-We strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the MCC caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
+We strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
 
 
 ## Next step
 
 > [!div class="nextstepaction"]
-> [View documentation for Connected Cache Public Preview](mcc-ent-edu-overview.md)
+> [View documentation for Connected Cache public preview](mcc-ent-edu-overview.md)

From 35293bae63f1a711b30ef961d61051c848818c45 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 13:43:11 -0700
Subject: [PATCH 095/128] edits

---
 windows/deployment/do/TOC.yml                        |  2 +-
 windows/deployment/do/index.yml                      | 12 ++++++------
 .../do/mcc-ent-create-resource-and-cache.md          |  6 +++---
 windows/deployment/do/mcc-ent-deploy-to-linux.md     |  4 ++--
 windows/deployment/do/mcc-ent-deploy-to-windows.md   |  6 +++---
 windows/deployment/do/mcc-ent-faq.yml                |  2 +-
 windows/deployment/do/mcc-ent-manage-using-cli.md    |  4 ++--
 windows/deployment/do/mcc-ent-monitoring.md          |  8 ++++----
 windows/deployment/do/mcc-ent-release-notes.md       |  4 ++--
 windows/deployment/do/mcc-ent-troubleshooting.md     |  8 ++++----
 windows/deployment/do/mcc-ent-verify-cache-node.md   |  2 +-
 11 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index 8b3994852b..a86ca6bef1 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -65,7 +65,7 @@
           href: mcc-ent-faq.yml
         - name: Troubleshooting
           href: mcc-ent-troubleshooting.md
-        - name: Microsoft Connected Cache for Enterprise and Education Early Preview
+        - name: Microsoft Connected Cache for Enterprise and Education early preview
           href: mcc-ent-early-preview.md
       - name: Release notes
         href: mcc-ent-release-notes.md        
diff --git a/windows/deployment/do/index.yml b/windows/deployment/do/index.yml
index 42eddd71c7..1de435c050 100644
--- a/windows/deployment/do/index.yml
+++ b/windows/deployment/do/index.yml
@@ -67,10 +67,12 @@ landingContent:
     linkLists:
       - linkListType: deploy
         links:
-          - text: Connected Cache for Enterprise and Education (early preview)
-            url: waas-microsoft-connected-cache.md
-          - text: Sign up
-            url: https://aka.ms/MSConnectedCacheSignup
+          - text: Connected Cache for Enterprise and Education overview
+            url: mcc-ent-edu-overview.md
+          - text: Connected Cache for Enterprise and Education requirements
+            url: mcc-ent-edu-mcc-ent-prerequisites.md
+          - text: Create the Microsoft Connected Cache Azure resource and cache nodes
+            url: mcc-ent-create-resource-and-cache.md
 
   # Card
   - title: Microsoft Connected Cache for Internet Service Providers (ISPs)
@@ -79,8 +81,6 @@ landingContent:
         links:
           - text: Connected Cache for ISPs (public preview)
             url: mcc-isp-signup.md
-          - text: Sign up
-            url: https://aka.ms/MCCForISPSurvey
           - text: Connected Cache for ISPs (early preview)
             url: mcc-isp.md
 
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 1450c17321..0a71a896ae 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -279,7 +279,7 @@ az mcc ent resource list  --resource-group <myrg>
 ### List all cache nodes
 
 # [Azure portal](#tab/portal)
-On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the Connected Cache resource.
+On the left pane, select **Cache Nodes** under **Cache Node Management** to see all the cache nodes under the Connected Cache resource.
 
 
 # [Azure CLI](#tab/cli)
@@ -299,7 +299,7 @@ az mcc ent node list --mcc-resource-name <mymccresource> --resource-group <myrg>
 ### Delete Connected Cache resource
 
 # [Azure portal](#tab/portal)
-Navigate to the Connected Cache resource to delete and click on the delete button on top.
+Navigate to the Connected Cache resource to delete, then select the **Delete** button on top.
 
 
 # [Azure CLI](#tab/cli)
@@ -319,7 +319,7 @@ az mcc ent node delete --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ### Delete cache node
 
 # [Azure portal](#tab/portal)
-On the left pane, click on 'Cache Nodes' under 'Cache Node Management' to see all the cache nodes under the Connected Cache resource. Select the cache node you wish to delete and click delete button on top of the page.
+On the left pane, select **Cache Nodes** under **Cache Node Management** to see all the cache nodes under the Connected Cache resource. Select the cache node you wish to delete and select the **Delete** button on top of the page.
 
 
 # [Azure CLI](#tab/cli)
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 4b3db901c2..dbb712c36f 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -23,7 +23,7 @@ Before deploying Connected Cache to a Linux host machine, ensure that the host m
 
 # [Azure portal](#tab/portal)
 
-1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Within the Azure portal, navigate to the **Provisioning** tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
@@ -46,7 +46,7 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 1. Replace the values in the following provisioning command before running it on the host machine.
 
    ```azurepowershell-interactive
-   sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid=" enter cacheNodeId here " customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
+   sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid="enter cacheNodeId here" customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
    ```
 
 ## Steps to point Windows client devices at Connected Cache node
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 34bb04d55a..12525f3025 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -25,10 +25,10 @@ Before deploying Connected Cache to a Windows host machine, ensure that the host
 
 # [Azure portal](#tab/portal)
 
-1. Within the Azure portal, navigate to the "Provisioning" tab of your cache node and copy the provisioning command.
+1. Within the Azure portal, navigate to the **Provisioning** tab of your cache node and copy the provisioning command.
 1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine. **Note**: The installer should be in a folder that isn't synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
-1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
+1. Set the Execution Policy to *Unrestricted* to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 
 
     For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
@@ -50,7 +50,7 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
 1. Save the resulting output. These values will be passed as parameters within the provisioning command.
 1. Download and extract the [Connected Cache provisioning package for Windows](https://aka.ms/MCC-Ent-InstallScript-WSL) to your host machine. **Note**: The installer should be in a folder that isn't synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
-1. Set the Execution Policy to "Unrestricted" to allow the provisioning scripts to run.
+1. Set the Execution Policy to *Unrestricted* to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 
 
     For gMSAs, the value should be formatted as `"Domain\Username$"`. For Local User accounts, `$User` should be formatted as `"LocalMachineName\Username"`.
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 41fab60818..2504e2cf5a 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -57,7 +57,7 @@ sections:
       - question: Where can I monitor cache node usage?
         answer: You can monitor your cache node usage on Azure portal. For more information, see [Monitor cache node usage Info on Reporting Capabilities](mcc-ent-monitoring.md).
       - question: How does Microsoft Connected Cache populate its content? Can I precache content?
-        answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there's no cache fill necessary. "Preseeding" can be achieved but use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
+        answer: Microsoft Connected Cache is a cold cache warmed by client requests at the byte range level so your clients only request the content they need. The client requests content and that is what fills the cache which means there's no cache fill necessary. "Preseeding" can be achieved by use of update rings. A test ring or early adopter ring can be used to fill the cache and all subsequent requests by other clients will come from cache.
       - question: How long would a piece of content live within the Microsoft Connected Cache? Is content purged from the cache?
         answer: Once a request for said content is made, NGINX looks at the cache control headers from the original acquisition. If that content is expired, NGINX continues to serve the stale content while it's downloading the new content. We cache the content for 30 days. The content is in the hot cache path (open handles and such) for 24 hrs, but resides on disk for 30 days. The drive fills up and nginx starts to delete content based on its own algorithm, probably some combination of least recently used.
       - question: Is it possible to not update the Microsoft Connected Cache software or delay update longer than the timeline provided in the updates configuration?
diff --git a/windows/deployment/do/mcc-ent-manage-using-cli.md b/windows/deployment/do/mcc-ent-manage-using-cli.md
index de3cddce1f..5e66a3cc87 100644
--- a/windows/deployment/do/mcc-ent-manage-using-cli.md
+++ b/windows/deployment/do/mcc-ent-manage-using-cli.md
@@ -119,7 +119,7 @@ az mcc ent node update --cache-node-name <mycachenode> --mcc-resource-name <mymc
 
 >[!Note]
 >* For a cache node that is to be deployed on Windows host OS, the physical path of the cache drive <u>must</u> be **/var/mcc**.<br>
->* In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node. You will also see that cacheNodeState will show "Not Provisioned". <br>
+>* In the output, look for operationStatus. **operationStatus = Succeeded** indicates that our services have successfully updated the cache node. You will also see that cacheNodeState will show *Not Provisioned*. <br>
 >* Please save values for <u>physicalPath, sizeInGb, proxyPort, proxyHostName</u> as these values will be needed to construct the provisioning script.
 
 
@@ -170,7 +170,7 @@ $proxyHost = "myProxy.com"
 $proxyPort = "8080"
 $waitTime = 3
 
-#Create MCC Az resource
+# Create Microsoft Connected Cache Azure resource
 az mcc ent resource create --mcc-resource-name $mccResourceName --location $resourceLocation --resource-group $resourceGroup
 
 #Loop through $cacheNodesToCreate iterations
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index 060afcf66f..fd26c86983 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -18,9 +18,9 @@ ms.date: 09/04/2024
 
 Tracking the status and performance of your Connected Cache node is essential to making sure you're getting the most out of the service.
 
-For basic monitoring, navigate to the "Overview" tab. Here you'll be able to view a collection of predefined metrics and charts. All the monitoring in this section will function right after your Connected Cache node has been deployed.
+For basic monitoring, navigate to the **Overview** tab. Here you'll be able to view a collection of predefined metrics and charts. All the monitoring in this section will function right after your Connected Cache node has been deployed.
 
-For advanced monitoring, navigate to the "Metrics" section under the "Monitoring" tab. Here you'll be able to access more sampled metrics (hits, misses, inbound traffic) and specify different aggregations (count, avg, min, max, sum). You can then use this data to create customized charts and configure alerts.
+For advanced monitoring, navigate to the **Metrics** section under the **Monitoring** tab. Here you'll be able to access more sampled metrics (hits, misses, inbound traffic) and specify different aggregations (count, avg, min, max, sum). You can then use this data to create customized charts and configure alerts.
 
 Between the two monitoring sections, you'll be able to gather essential insights into the health, performance, and efficiency of your Connected Cache nodes.
 
@@ -28,7 +28,7 @@ Between the two monitoring sections, you'll be able to gather essential insights
 
 ### Cache node summary
 
-Below are the metrics you'll find in the "Cache Node Summary" dashboard, along with their descriptions. This dashboard only reflects data received from cache nodes in the last 24 hours.
+Below are the metrics you'll find in the **Cache Node Summary** dashboard, along with their descriptions. This dashboard only reflects data received from cache nodes in the last 24 hours.
 
 ![Screenshot of cache node summary in the Azure portal interface.](../images/mcc-ent-cache-node-summary.png)
 
@@ -67,7 +67,7 @@ The content types displayed in the chart each have a distinct color and are sort
 
 ## Advanced Monitoring
 
-To expand upon the metrics shown in the Overview tab, navigate to the "Metrics" tab in the left side toolbar of Azure portal.
+To expand upon the metrics shown in the Overview tab, navigate to the **Metrics** tab in the left side toolbar of Azure portal.
 
 Listed below are the metrics you can access in this section:
 
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index bbd76a511d..673884ecbe 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -31,12 +31,12 @@ These changes affect Linux and Windows host machines.
 
 ### Feature updates
 
-- **Metrics and charts in Azure portal**: You can now visualize "Outbound egress" and "Volume by Content type" charts for your cache node on Azure portal. You can also create custom monitoring charts for your cache nodes. This capability is under the **Metrics** tab on Azure portal.
+- **Metrics and charts in Azure portal**: You can now visualize *Outbound egress* and *Volume by Content type* charts for your cache node on Azure portal. You can also create custom monitoring charts for your cache nodes. This capability is under the **Metrics** tab on Azure portal.
 - **Cache nodes for Windows or Linux host machines**: Cache nodes can now be created and deployed to Windows host machine or Linux host machines by simply choosing the OS when creating cache nodes.
 - **Ubuntu 22.04 LTS**: Cache nodes can now be deployed on Ubuntu 22.04 LTS.
 - **Azure CLI support**: Cache nodes can now be created and managed via Azure CLI.
 - **Proxy**: We added support for unauthenticated proxy and cloud proxy integration.
-- **Updates**: Your cache nodes are now updated automatically and we also added the capability to set each cache node's update ring to govern the cadence of Micoroft Connected Cache container updates.
+- **Updates**: Your cache nodes are now updated automatically and we also added the capability to set each cache node's update ring to govern the cadence of Microsoft Connected Cache container updates.
 
 ### Fixes
 - We fixed various bugs to achieve smoother install experience.
diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index b7566354ba..ddc3003a7a 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -36,7 +36,7 @@ If you're encountering an error during resource creation, check that you have th
 
 If you're encountering a validation error, check that you have filled out all required configuration fields.
 
-If your configuration doesn't appear to be taking effect, check that you have clicked the "Save" button at the top of the configuration page in the Azure portal user interface.
+If your configuration doesn't appear to be taking effect, check that you have selected the **Save** option at the top of the configuration page in the Azure portal user interface.
 
 If you have changed the proxy configuration, you will need to re-provision the Connected Cache software on the host machine for the proxy configuration to take effect.
 
@@ -83,9 +83,9 @@ Once the Connected Cache container is running, a scheduled task is periodically
 You can use Task Scheduler on the host machine to check the status of this scheduled task.
 
 1. Open Task Scheduler on the host machine
-1. Navigate to the Active Tasks section and double-click on "MCC_Monitor_Task"
-1. Select the scheduled task "MCC_Monitor_Task"
-1. Select the "Triggers" tab and confirm that the Status is "Enabled"
+1. Navigate to the Active Tasks section and double-click on **MCC_Monitor_Task**
+1. Select the scheduled task **MCC_Monitor_Task**
+1. Select the **Triggers** tab and confirm that the Status is **Enabled**
 
 ## Troubleshooting cache node deployment to Linux host machine
 
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 2c63db2453..0398eaa61f 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -38,7 +38,7 @@ These steps should be taken after deploying Connected Cache software to a [Windo
 
 1. To check how much content an individual Windows client has downloaded from a Connected Cache node, open the [Delivery Optimization activity monitor](/microsoft-365-apps/updates/delivery-optimization#viewing-data-about-the-use-of-delivery-optimization) on the Windows client device.
 
-    You should see a donut chart titled Download Statistics. If the Windows client has downloaded content from the cache node, you'll see a segment of the donut labeled "From Microsoft cache server".
+    You should see a donut chart titled **Download Statistics**. If the Windows client has downloaded content from the cache node, you'll see a segment of the donut labeled **From Microsoft cache server**.
 
 ## Related content
 

From 1f15e6980c861bfeb7aa6ad4ffcca2f80c67d9d9 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 13:51:55 -0700
Subject: [PATCH 096/128] edits

---
 ...ishing.redirection.windows-deployment.json | 20 +++++++++++++++++++
 windows/deployment/do/index.yml               |  2 +-
 .../deployment/do/mcc-ent-troubleshooting.md  |  2 +-
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/.openpublishing.redirection.windows-deployment.json b/.openpublishing.redirection.windows-deployment.json
index a563d3fa34..367dbbf186 100644
--- a/.openpublishing.redirection.windows-deployment.json
+++ b/.openpublishing.redirection.windows-deployment.json
@@ -1675,6 +1675,26 @@
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/planning/windows-10-enterprise-faq-itpro",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/deployment/do/mcc-enterprise-appendix.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-early-preview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/deployment/do/mcc-enterprise-deploy.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-early-preview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/deployment/do/mcc-enterprise-prerequisites.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-early-preview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "windows/deployment/do/mcc-enterprise-update-uninstall.md",
+      "redirect_url": "/windows/deployment/do/mcc-ent-early-preview",
+      "redirect_document_id": false
+    },          
     {
       "source_path": "windows/deployment/planning/windows-10-deployment-considerations.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/planning/windows-10-deployment-considerations",
diff --git a/windows/deployment/do/index.yml b/windows/deployment/do/index.yml
index 1de435c050..b9d6852bd4 100644
--- a/windows/deployment/do/index.yml
+++ b/windows/deployment/do/index.yml
@@ -70,7 +70,7 @@ landingContent:
           - text: Connected Cache for Enterprise and Education overview
             url: mcc-ent-edu-overview.md
           - text: Connected Cache for Enterprise and Education requirements
-            url: mcc-ent-edu-mcc-ent-prerequisites.md
+            url: mcc-ent-prerequisites.md
           - text: Create the Microsoft Connected Cache Azure resource and cache nodes
             url: mcc-ent-create-resource-and-cache.md
 
diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index ddc3003a7a..240962f055 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -42,7 +42,7 @@ If you have changed the proxy configuration, you will need to re-provision the C
 
 ## Troubleshooting cache nodes created during early preview
 
-Cache nodes created and deployed during the [Microsoft Connected Cache for Enterprise and Education early preview](mcc-ent-private-preview.md) should continue to function but can no longer be managed or monitored remotely via the Connected Cache Azure service.
+Cache nodes created and deployed during the [Microsoft Connected Cache for Enterprise and Education early preview](mcc-ent-early-preview.md) should continue to function but can no longer be managed or monitored remotely via the Connected Cache Azure service.
 
 As such, we strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the Connected Cache software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
 

From c04424f07475152c705575368a6b779c305bcca9 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 14:28:21 -0700
Subject: [PATCH 097/128] metadta update

---
 windows/deployment/do/index.yml                            | 2 +-
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 2 +-
 windows/deployment/do/mcc-ent-deploy-to-linux.md           | 2 +-
 windows/deployment/do/mcc-ent-deploy-to-windows.md         | 2 +-
 windows/deployment/do/mcc-ent-early-preview.md             | 2 +-
 windows/deployment/do/mcc-ent-edu-overview.md              | 2 +-
 windows/deployment/do/mcc-ent-faq.yml                      | 2 +-
 windows/deployment/do/mcc-ent-manage-using-cli.md          | 2 +-
 windows/deployment/do/mcc-ent-monitoring.md                | 2 +-
 windows/deployment/do/mcc-ent-prerequisites.md             | 2 +-
 windows/deployment/do/mcc-ent-release-notes.md             | 2 +-
 windows/deployment/do/mcc-ent-troubleshooting.md           | 2 +-
 windows/deployment/do/mcc-ent-uninstall-cache-node.md      | 2 +-
 windows/deployment/do/mcc-ent-update-cache-node.md         | 2 +-
 windows/deployment/do/mcc-ent-verify-cache-node.md         | 2 +-
 windows/deployment/do/mcc-isp.md                           | 2 +-
 windows/deployment/do/waas-microsoft-connected-cache.md    | 2 +-
 17 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/windows/deployment/do/index.yml b/windows/deployment/do/index.yml
index b9d6852bd4..dc1e99b304 100644
--- a/windows/deployment/do/index.yml
+++ b/windows/deployment/do/index.yml
@@ -15,7 +15,7 @@ metadata:
   author: aczechowski
   ms.author: aaroncz
   manager: aaroncz
-  ms.date: 12/22/2023 #Required; mm/dd/yyyy format.
+  ms.date: 10/30/2024 #Required; mm/dd/yyyy format.
   ms.localizationpriority: medium
 
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 0a71a896ae..889d3c2fd8 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -11,7 +11,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
+ms.date: 10/30/2024
 ---
 
 # Create Microsoft Connected Cache Azure resource and cache nodes
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index dbb712c36f..1dccafb769 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -7,7 +7,7 @@ manager: naengler
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 appliesto: 
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index 12525f3025..bc519d2815 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -7,7 +7,7 @@ manager: naengler
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
diff --git a/windows/deployment/do/mcc-ent-early-preview.md b/windows/deployment/do/mcc-ent-early-preview.md
index 20d6403fa2..e552893448 100644
--- a/windows/deployment/do/mcc-ent-early-preview.md
+++ b/windows/deployment/do/mcc-ent-early-preview.md
@@ -9,7 +9,7 @@ ms.author: lichris
 author: chrisjlin
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
+ms.date: 10/30/2024
 ---
 
 
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index a8dbf79e7d..e96d65af39 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -13,7 +13,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 05/09/2023
+ms.date: 10/30/2024
 ---
 
 # Microsoft Connected Cache for Enterprise and Education Overview
diff --git a/windows/deployment/do/mcc-ent-faq.yml b/windows/deployment/do/mcc-ent-faq.yml
index 2504e2cf5a..089613eb36 100644
--- a/windows/deployment/do/mcc-ent-faq.yml
+++ b/windows/deployment/do/mcc-ent-faq.yml
@@ -15,7 +15,7 @@ metadata:
   appliesto: 
     - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
     - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-  ms.date: 06/03/2024
+  ms.date: 10/30/2024
 title: Microsoft Connected Cache for Enterprise Frequently Asked Questions
 summary: |
   Frequently asked questions about Microsoft Connected Cache for Enterprise
diff --git a/windows/deployment/do/mcc-ent-manage-using-cli.md b/windows/deployment/do/mcc-ent-manage-using-cli.md
index 5e66a3cc87..2b6393ee4e 100644
--- a/windows/deployment/do/mcc-ent-manage-using-cli.md
+++ b/windows/deployment/do/mcc-ent-manage-using-cli.md
@@ -13,7 +13,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 06/03/2024
+ms.date: 10/30/2024
 ---
 
 # Manage cache nodes using CLI
diff --git a/windows/deployment/do/mcc-ent-monitoring.md b/windows/deployment/do/mcc-ent-monitoring.md
index fd26c86983..9a4894896e 100644
--- a/windows/deployment/do/mcc-ent-monitoring.md
+++ b/windows/deployment/do/mcc-ent-monitoring.md
@@ -11,7 +11,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 09/04/2024
+ms.date: 10/30/2024
 ---
 
 # Monitor cache node usage
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index ec7fd4a3d8..ad2cdf1671 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -10,7 +10,7 @@ manager: naengler
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 ---
 
 # Microsoft Connected Cache for Enterprise and Education Requirements
diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 673884ecbe..90439d3932 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -11,7 +11,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a>	
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 ---
 
 # Release Notes for Microsoft Connected Cache for Enterprise and Education
diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 240962f055..0325c0e46f 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -11,7 +11,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise</a>	
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 ---
 
 
diff --git a/windows/deployment/do/mcc-ent-uninstall-cache-node.md b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
index 3ca253488b..3fde904642 100644
--- a/windows/deployment/do/mcc-ent-uninstall-cache-node.md
+++ b/windows/deployment/do/mcc-ent-uninstall-cache-node.md
@@ -11,7 +11,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 ---
 
 # Uninstall Connected Cache software from a host machine
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 2528e132b5..3ff6865f9b 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -11,7 +11,7 @@ appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ Supported Linux distributions
 - ✅ <a href=https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache target=_blank>Microsoft Connected Cache for Enterprise and Education</a> 
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 ---
 # Configure container update frequency for Microsoft Connected Cache for Enterprise and Education
 
diff --git a/windows/deployment/do/mcc-ent-verify-cache-node.md b/windows/deployment/do/mcc-ent-verify-cache-node.md
index 0398eaa61f..6d1eacb092 100644
--- a/windows/deployment/do/mcc-ent-verify-cache-node.md
+++ b/windows/deployment/do/mcc-ent-verify-cache-node.md
@@ -7,7 +7,7 @@ manager: naengler
 ms.service: windows-client
 ms.subservice: itpro-updates
 ms.topic: how-to
-ms.date: 09/27/2024
+ms.date: 10/30/2024
 appliesto: 
 - ✅ Windows-hosted Connected Cache cache nodes
 - ✅ Linux-hosted Connected Cache cache nodes
diff --git a/windows/deployment/do/mcc-isp.md b/windows/deployment/do/mcc-isp.md
index 5baf7d7209..019e0223e6 100644
--- a/windows/deployment/do/mcc-isp.md
+++ b/windows/deployment/do/mcc-isp.md
@@ -10,7 +10,7 @@ ms.reviewer: mstewart
 manager: aaroncz
 ms.localizationpriority: medium
 ms.collection: tier3
-ms.date: 05/23/2024
+ms.date: 10/30/2024
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
diff --git a/windows/deployment/do/waas-microsoft-connected-cache.md b/windows/deployment/do/waas-microsoft-connected-cache.md
index 132da6845a..ac5b29ba36 100644
--- a/windows/deployment/do/waas-microsoft-connected-cache.md
+++ b/windows/deployment/do/waas-microsoft-connected-cache.md
@@ -13,7 +13,7 @@ ms.localizationpriority: medium
 appliesto: 
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
-ms.date: 05/23/2024
+ms.date: 10/30/2024
 ---
 
 # What is Microsoft Connected Cache?

From c2d3a5af13a2a80f01c9b6358712446bb36c113b Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 14:32:41 -0700
Subject: [PATCH 098/128] rm unneeded lines from redir file

---
 ...publishing.redirection.windows-deployment.json | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/.openpublishing.redirection.windows-deployment.json b/.openpublishing.redirection.windows-deployment.json
index 367dbbf186..5d117ed99e 100644
--- a/.openpublishing.redirection.windows-deployment.json
+++ b/.openpublishing.redirection.windows-deployment.json
@@ -125,21 +125,6 @@
       "redirect_url": "/windows/deployment/do/waas-microsoft-connected-cache",
       "redirect_document_id": false
     },
-    {
-      "source_path": "windows/deployment/do/mcc-ent-configure-provision-linux.md",
-      "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-linux",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/deployment/do/mcc-ent-configure-provision-windows.md",
-      "redirect_url": "/windows/deployment/do/mcc-ent-deploy-to-windows",
-      "redirect_document_id": false
-    },
-    {
-      "source_path": "windows/deployment/do/mcc-ent-update-cache.md",
-      "redirect_url": "/windows/deployment/do/mcc-ent-uninstall-cache-node",
-      "redirect_document_id": false
-    },
     {
       "source_path": "windows/deployment/planning/act-technical-reference.md",
       "redirect_url": "/previous-versions/windows/it-pro/windows-10/deployment/compatibility/compatibility-administrator-users-guide",

From 8d3574f47dee2e2a9654cb8cf0001634b1291bf6 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Mon, 28 Oct 2024 14:38:26 -0700
Subject: [PATCH 099/128] edits

---
 windows/deployment/do/mcc-ent-create-resource-and-cache.md | 4 ++--
 windows/deployment/do/mcc-ent-deploy-to-linux.md           | 2 +-
 windows/deployment/do/mcc-ent-deploy-to-windows.md         | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 889d3c2fd8..3f022ca166 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -299,7 +299,7 @@ az mcc ent node list --mcc-resource-name <mymccresource> --resource-group <myrg>
 ### Delete Connected Cache resource
 
 # [Azure portal](#tab/portal)
-Navigate to the Connected Cache resource to delete, then select the **Delete** button on top.
+Navigate to the Connected Cache resource to delete, then select the **Delete** option on top.
 
 
 # [Azure CLI](#tab/cli)
@@ -319,7 +319,7 @@ az mcc ent node delete --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ### Delete cache node
 
 # [Azure portal](#tab/portal)
-On the left pane, select **Cache Nodes** under **Cache Node Management** to see all the cache nodes under the Connected Cache resource. Select the cache node you wish to delete and select the **Delete** button on top of the page.
+On the left pane, select **Cache Nodes** under **Cache Node Management** to see all the cache nodes under the Connected Cache resource. Select the cache node you wish to delete and select the **Delete** option on top of the page.
 
 
 # [Azure CLI](#tab/cli)
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index 1dccafb769..b7cfb00596 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -24,7 +24,7 @@ Before deploying Connected Cache to a Linux host machine, ensure that the host m
 # [Azure portal](#tab/portal)
 
 1. Within the Azure portal, navigate to the **Provisioning** tab of your cache node and copy the provisioning command.
-1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine.
+1. Download the provisioning package using the option at the top of the Cache Node Configuration page and extract the package onto the host machine.
 1. Open a command line window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set access permissions to allow the `provisionmcc.sh` script within the provisioning package directory to execute.
 1. Run the provisioning command on the host machine.
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index bc519d2815..d5180ee2f1 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -26,7 +26,7 @@ Before deploying Connected Cache to a Windows host machine, ensure that the host
 # [Azure portal](#tab/portal)
 
 1. Within the Azure portal, navigate to the **Provisioning** tab of your cache node and copy the provisioning command.
-1. Download the provisioning package using the button at the top of the Cache Node Configuration page and extract the package onto the host machine. **Note**: The installer should be in a folder that isn't synced to OneDrive, as this will interfere with the installation process.
+1. Download the provisioning package using the option at the top of the Cache Node Configuration page and extract the package onto the host machine. **Note**: The installer should be in a folder that isn't synced to OneDrive, as this will interfere with the installation process.
 1. Open a PowerShell window *as administrator* on the host machine, then change directory to the extracted provisioning package.
 1. Set the Execution Policy to *Unrestricted* to allow the provisioning scripts to run.
 1. Create a `$User` environment variable containing the username of the account you intend to designate as the Connected Cache runtime account. 

From 6e8588319f6c8288e060737e1b10978491540eb4 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Tue, 29 Oct 2024 06:37:40 -0400
Subject: [PATCH 100/128] Edge AUMID for secondary tiles.

---
 windows/configuration/start/layout.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/configuration/start/layout.md b/windows/configuration/start/layout.md
index 30baa389a1..2bc5402a79 100644
--- a/windows/configuration/start/layout.md
+++ b/windows/configuration/start/layout.md
@@ -304,10 +304,10 @@ Column="2"/>
 
 You can use the `start:SecondaryTile` tag to pin a web link through a Microsoft Edge secondary tile. This method doesn't require more actions compared to the method of using legacy `.url` shortcuts (through the `start:DesktopApplicationTile` tag).
 
-The following example shows how to create a tile of the Web site's URL using the Microsoft Edge secondary tile:
+The following example shows how to create a tile of the Web site's URL using the Microsoft Edge secondary tile. Ensure to replace `<--Microsoft Edge AUMID-->` with the AUMID of Microsoft Edge (learn how to [Find the Application User Model ID of an installed app](../store/find-aumid.md)):
 
 ```XML
-<start:SecondaryTile AppUserModelID="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge"
+<start:SecondaryTile AppUserModelID="<--Microsoft Edge AUMID-->"
 TileID="MyWeblinkTile"
 Arguments="http://msn.com"
 DisplayName="MySite"

From 6e7d3af6c83726f2fe958083e690e367849dca51 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Tue, 29 Oct 2024 10:20:13 -0700
Subject: [PATCH 101/128] mcc-ent-last-edits

---
 windows/deployment/do/TOC.yml                 |  2 +-
 .../do/mcc-ent-create-resource-and-cache.md   | 34 +++++++++----------
 .../deployment/do/mcc-ent-deploy-to-linux.md  |  2 ++
 .../do/mcc-ent-deploy-to-windows.md           |  2 ++
 windows/deployment/do/mcc-ent-edu-overview.md | 24 ++++++-------
 .../deployment/do/mcc-ent-manage-using-cli.md |  7 ++--
 .../deployment/do/mcc-ent-prerequisites.md    | 14 ++++----
 .../do/mcc-ent-update-cache-node.md           | 20 +++++------
 8 files changed, 55 insertions(+), 50 deletions(-)

diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml
index a86ca6bef1..b9d7757f89 100644
--- a/windows/deployment/do/TOC.yml
+++ b/windows/deployment/do/TOC.yml
@@ -35,7 +35,7 @@
       href: waas-microsoft-connected-cache.md
     - name: Microsoft Connected Cache for Enterprise and Education
       items:
-      - name: Connected Cache for Enterprise and Education Overview
+      - name: Connected Cache for Enterprise and Education overview
         href: mcc-ent-edu-overview.md
       - name: Requirements
         href: mcc-ent-prerequisites.md
diff --git a/windows/deployment/do/mcc-ent-create-resource-and-cache.md b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
index 3f022ca166..bae29c6ffa 100644
--- a/windows/deployment/do/mcc-ent-create-resource-and-cache.md
+++ b/windows/deployment/do/mcc-ent-create-resource-and-cache.md
@@ -30,16 +30,16 @@ For more information on sizing and OS requirements, see [the prerequisites for u
 
 # [Azure portal](#tab/portal)
 
-1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for "Microsoft Connected Cache for Enterprise and Education".
+1. In the [Azure portal](https://portal.azure.com), select **Create a Resource** and search for `Microsoft Connected Cache for Enterprise and Education`.
 <!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
 -->
 
-1. Select the Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Then enter a name for the resource and select Review + Create.
+1. Select the Microsoft Connected Cache for Enterprise resource. When prompted, choose the subscription, resource group, and location for the resource. Then enter a name for the resource, then select Review + Create.
 
 1. After a few moments, you'll see a "Validation successful" message, indicating you can move onto the next step and select Create.
 
-1. The creation of the resource might take a few minutes. After a successful creation, you'll see a Deployment complete page as below. Select Go to resource to create cache nodes.
+1. The creation of the resource might take a few minutes. After a successful creation, you'll see a page stating the deployment is complete. Select **Go to resource** to create cache nodes.
 
 
 # [Azure CLI](#tab/cli)
@@ -78,15 +78,15 @@ az mcc ent resource create --mcc-resource-name <mymccresource> --resource-group
 # [Azure portal](#tab/portal)
 
   1. Open Azure portal and navigate to the Microsoft Connected Cache for Enterprise resource that you created.<br>
-  1. Under Cache Node Management, select on Cache Nodes and then on + Create Cache Node.<br>
+  1. Under Cache Node Management, select **Cache Nodes** then **Create Cache Node**.<br>
   
-  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on and select create. Note, cache node names have to be unique under the Microsoft Connected Cache resource.
+  1. Provide a name for your cache node and select the host OS you plan to deploy the cache node on, then select **Create**. Note, cache node names have to be unique under the Microsoft Connected Cache resource.
   <!--
     :::image type="content" source="images/mcc-isp-provision-cache-node-numbered.png" alt-text="Screenshot of the Azure portal depicting the cache node configuration page of a cache node. This screenshot shows all of the fields you can choose to configure the cache node." lightbox="./images/mcc-isp-provision-cache-node-numbered.png":::  
     -->
-  The creation of cache node might take a few minutes. Select Refresh to see your recently created cache node.
+  The creation of the cache node might take a few minutes. Select **Refresh** to see your recently created cache node.
 Once the cache node state changes to **Not Configured**, you can now configure your cache node.<br>
-To know more about different cache node state, see [Cache node states](#cache-node-states).
+For more information about different cache node states, see [Cache node states](#cache-node-states).
 
 
 # [Azure CLI](#tab/cli)
@@ -98,7 +98,7 @@ Replace the following placeholders with your own information:
 * *\<mcc-resource-name>*: Name of the Microsoft Connected Cache for Enterprise resource.
 * *\<cache-node-name>*: A name for your Microsoft Connected Cache node.
 * *\<host-os>*: The OS on which cache node will be provisioned.
-  Accepted values: windows, linux
+  Accepted values: `windows`, `linux`
 
 ```azurecli-interactive
 az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg> --host-os <linux>
@@ -107,12 +107,12 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 <br>
 
 >[!NOTE]
->To ensure cache node has been created successfully, please run the following command before continuing with cache node configuration.
+>To ensure cache node has been created successfully, run the following command before continuing with cache node configuration.
 >```azurecli-interactive
 >az mcc ent node show --cache-node-name <mycachenode> --mcc-resource-name <mymccresource> --resource-group <myrg>  
 >```
->In the output look for cacheNodeState. If ***cacheNodeState = Not Configured***, you can continue with cache node configuration.
->If ***cacheNodeState = Registration in Progress***, then the cache node is still in process of being created. Please wait for a minute or two more and run the command again.
+>In the output look for **cacheNodeState**. If ***cacheNodeState = Not Configured***, you can continue with cache node configuration.
+>If ***cacheNodeState = Registration in Progress***, then the cache node is still in process of being created. Wait a couple of minutes and run the command again.
 >To know more about different cache node state, see [Cache node states](#cache-node-states).
 
 ---
@@ -120,7 +120,7 @@ az mcc ent node create --cache-node-name <mycachenode> --mcc-resource-name <mymc
 ## Configure Connected Cache node
 
 # [Azure portal](#tab/portal)
-Enter required values to configure your cache node. To learn more about the definitions of each field, review the [Configuration](#general-configuration-fields) fields at the bottom of this article.
+Enter required values to configure your cache node. For more information about the definitions of each field, review the [Configuration fields](#general-configuration-fields) at the bottom of this article.
 Don't forget to select save after adding configuration information.
 
 
@@ -134,15 +134,15 @@ Replace the following placeholders with your own information:
 * *\<resource-group>*: Name of the resource group in your subscription.
 * *\<mcc-resource-name>*: Name of your Microsoft Connected Cache for Enterprise resource.
 * *\<cache-node-name>*: Name for your Microsoft Connected Cache node.
-* *\<physical-path>*: The cache drive path. You can add upto nine cache drives.
+* *\<physical-path>*: The cache drive path. You can add up to nine cache drives.
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
-  Accepted values: enabled, disabled<br>
+  Accepted values: `enabled`, `disabled`<br>
   Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the Connected Cache cache node to your host machine.
 * *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
 * *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
-  Accepted values: slow, fast.<br>
+  Accepted values: `slow`, `fast`.<br>
   If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
 * *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
   Accepted values: 1,2,3,4,5,6,7
@@ -170,12 +170,12 @@ Replace the following placeholders with your own information:
   Accepted value: /var/mcc
 * *\<size-in-gb>*: The size of cache drive. Must be at least 50 Gb.
 * *\<proxy>*: If proxy needs to be enabled or not.<br>
-  Accepted values: enabled, disabled<br>
+  Accepted values: `enabled`, `disabled`<br>
   Proxy should be set to enabled if the cache node will need to pass through a network proxy to download content. The provided proxy will also be used during deployment of the Connected Cache cache node to your host machine.
 * *\<proxy-host>*: The proxy host name or ip address. Required if proxy is set to enabled.
 * *\<proxy-port>*: Proxy port number. Required if proxy is set to enabled.
 * *\<auto-update-ring>*: Update ring the cache node should have.<br>
-  Accepted values: slow, fast.<br>
+  Accepted values: `slow`, `fast`.<br>
   If update ring is set to slow, you must provide the day of week, time of day and week of month the cache node should be updated.
 * *\<auto-update-day>*: The day of the week cache node should be updated. Week starts from Monday.<br>
   Accepted values: 1,2,3,4,5,6,7
diff --git a/windows/deployment/do/mcc-ent-deploy-to-linux.md b/windows/deployment/do/mcc-ent-deploy-to-linux.md
index b7cfb00596..0fc31cdf23 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-linux.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-linux.md
@@ -49,6 +49,8 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    sudo ./provisionmcc.sh customerid="enter mccResourceId here" cachenodeid="enter cacheNodeId here" customerkey=" enter customerKey here " registrationkey="enter registrationKey here" drivepathandsizeingb="enter physicalPath value,enter sizeInGb value here" shoulduseproxy="enter true if present, enter false if not" proxyurl=http://enter proxy hostname:enter port
    ```
 
+---
+
 ## Steps to point Windows client devices at Connected Cache node
 
 Once you have successfully deployed Connected Cache to your Linux host machine, you'll need to configure your Windows client devices to request Microsoft content from the Connected Cache node.
diff --git a/windows/deployment/do/mcc-ent-deploy-to-windows.md b/windows/deployment/do/mcc-ent-deploy-to-windows.md
index d5180ee2f1..ba27a5f82f 100644
--- a/windows/deployment/do/mcc-ent-deploy-to-windows.md
+++ b/windows/deployment/do/mcc-ent-deploy-to-windows.md
@@ -63,6 +63,8 @@ To deploy a cache node programmatically, you'll need to use Azure CLI to get the
    ./provisionmcconwsl.ps1 -installationFolder c:\mccwsl01 -customerid [enter mccResourceId here] -cachenodeid [enter cacheNodeId here] -customerkey [enter customerKey here] -registrationkey [enter registration key] -cacheDrives "/var/mcc,enter drive size"  -shouldUseProxy [enter true if present, enter false if not] -proxyurl "http://[enter proxy host name]:[enter port]"  -mccRunTimeAccount $User -mccLocalAccountCredential $myLocalAccountCredential
    ```
 
+--- 
+
 ## Steps to point Windows client devices at Connected Cache node
 
 Once you have successfully deployed Connected Cache to your Windows host machine, you'll need to configure your Windows client devices to request Microsoft content from the Connected Cache node.
diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index e96d65af39..70acb8886c 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -21,11 +21,11 @@ ms.date: 10/30/2024
 > [!IMPORTANT]
 > Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-Microsoft Connected Cache for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within Enterprise and Education networks. Connected Cache can be managed from an Azure portal or through Azure CLI and can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Intune.
+Microsoft Connected Cache for Enterprise and Education (preview) is a software-only caching solution that delivers Microsoft content within enterprise and education networks. Connected Cache can be managed from the Azure portal or through Azure CLI. It can be deployed to as many Windows devices, Linux devices, or VMs as needed. Managed Windows devices can be configured to download cloud content from a Connected Cache server by applying the client policy using management tools such as Microsoft Intune.
 
-For information about Microsoft Connected Cache in Configuration Manager (generally available, starting Configuration Manager version 2111), see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
+For information about Microsoft Connected Cache in Configuration Manager<!-- version 2111-->, see [Microsoft Connected Cache in Configuration Manager](/configmgr/core/plan-design/hierarchy/microsoft-connected-cache).
 
-Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux](/windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.
+Microsoft Connected Cache deployed directly to Windows relies on [Windows Subsystem for Linux (WSL](/windows/wsl/about) and either a [Group Managed Service Account](/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts), local user account, or domain user account are required to run WSL. WSL needs to run in a user context and any user, even if the currently logged-in user, could be used to run WSL and Microsoft Connected Cache.
 
 ## Supported scenarios and configurations
 
@@ -41,10 +41,10 @@ Microsoft Connected Cache is built for flexible deployments to support several d
 
 Customers may have globally dispersed offices that meet some or all of the following parameters:
 
-- Have 10 – 50 Windows devices on-site
+- Have 10 to 50 Windows devices on-site
 - Don't have dedicated server hardware
-- Have Internet bandwidth that is limited (satellite internet)
-- Have intermittent Internet connectivity
+- Have internet bandwidth that is limited (satellite internet)
+- Have intermittent internet connectivity
 
 To support the branch office scenario, customers can deploy a Connected Cache node to a Windows 11 client device.
 
@@ -55,7 +55,7 @@ Customers may have office spaces, data centers, or Azure deployments that meet s
 - Have 100s or 1,000s of Windows devices (desktop or server)
 - Have some existing server hardware (Decommissioned Distribution Point, file server, cloud print server)
 - Have Azure VMs and/or Azure Virtual Desktop deployed
-- Have Internet bandwidth that is mediocre (T1 or T3 lines)
+- Have limited internet bandwidth (T1 or T3 lines)
 
 To support the large enterprise scenario, customers can deploy a Connected Cache node to a server running Windows Server 2022 or Ubuntu 22.04.
 
@@ -63,9 +63,9 @@ See [Connected Cache node host machine requirements](mcc-ent-prerequisites.md) f
 
 | Enterprise configuration | Download speed range | Download speeds and approximate content volume delivered in 8 Hours |
 |---|---|---|
-|Branch Office|< 1 Gbps Peak| 500 Mbps => 1,800 GB </br></br> 250 Mbps => 900 GB </br></br> 100 Mbps => 360 GB </br></br> 50 Mbps => 180 GB|
-|Small to Medium Enterprises/Autopilot Provisioning Center (50 - 500 devices in a single location) |1 - 5 Gbps| 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB </br></br>1 Gbps => 3,600 GB|
-|Medium to Large Enterprises/Autopilot Provisioning Center (500 - 5,000 devices in a single location) |5 - 101 Gbps Peak|   9 Gbps => 32,400 GB </br></br> 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB|
+|Branch office|< 1 Gbps Peak| 500 Mbps => 1,800 GB </br></br> 250 Mbps => 900 GB </br></br> 100 Mbps => 360 GB </br></br> 50 Mbps => 180 GB|
+|Small to medium enterprises/Autopilot provisioning center (50 - 500 devices in a single location) |1 - 5 Gbps| 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB </br></br>1 Gbps => 3,600 GB|
+|Medium to large enterprises/Autopilot provisioning center (500 - 5,000 devices in a single location) |5 - 101 Gbps Peak|   9 Gbps => 32,400 GB </br></br> 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB|
 
 ## Supported content types
 
@@ -89,8 +89,8 @@ The following diagram displays an overview of how Connected Cache functions:
 1. The Microsoft Connected Cache container is deployed to the device using Azure IoT Edge container management services and the cache server begins reporting status and metrics to Delivery Optimization services.
 1. The DOCacheHost setting is configured using Intune or other MDM, DHCP custom option, or registry key.
 1. Devices request content from the cache server, the cache server forwards the requests to the CDN and fills the cache, the cache server delivers the content requested to the devices, and uses Peer to Peer (depending on DO Download mode settings) for all DO content.
-1. Devices can fall back to CDN if cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN) settings to prefer the local cache server.
-Customers can view data regarding Microsoft Connected Cache downloads on management portal and Windows Update for Business reports
+1. Devices can fall back to CDN if the cache server is unavailable for any reason or use Delivery Optimization delay fallback to http (CDN) settings to prefer the local cache server.
+You can view data about Microsoft Connected Cache downloads on management portal and Windows Update for Business reports.
 
 ## Next steps
 
diff --git a/windows/deployment/do/mcc-ent-manage-using-cli.md b/windows/deployment/do/mcc-ent-manage-using-cli.md
index 2b6393ee4e..ffb7e198d8 100644
--- a/windows/deployment/do/mcc-ent-manage-using-cli.md
+++ b/windows/deployment/do/mcc-ent-manage-using-cli.md
@@ -31,7 +31,7 @@ This article outlines how to create, configure, and deploy Microsoft Connected C
 az extension add --name mcc
 ```
 
-To learn more about installing extensions, visit [Install the Connected Cache extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
+To learn more about installing extensions, see [Install the Connected Cache extension.](/cli/azure/azure-cli-extensions-overview#how-to-install-extensions)
 
 <br>
 <br>
@@ -138,11 +138,11 @@ az mcc ent node get-provisioning-details --cache-node-name mycachenode --mcc-res
 >[!IMPORTANT]
 >* Save the resulting values for cacheNodeId, customerKey, mccResourceId, registrationKey. These GUIDs are needed to create the provisioning script.
 >* In the output look for cacheNodeState. If **cacheNodeState = Not Provisioned**, you can continue with cache node provisioning.
->* If **cacheNodeState = Not Configured**, then the cache node has not been configured. Please configure the cache node before provisioning.
+>* If **cacheNodeState = Not Configured**, then the cache node has not been configured. Configure the cache node before provisioning.
 
 ### Example script:
 
-Below is a pseudocode example of how to script bulk creation and configuration of a Connected Cache Azure resource and multiple Connected Cache cache nodes.
+Below is a pseudocode example of how to script bulk creation and configuration of a Connected Cache Azure resource and multiple Connected Cache cache nodes:
 
 <!--# [Bash](#tab/bash)
 
@@ -197,6 +197,7 @@ for ($cacheNodeNumber = 1; $cacheNodeNumber -le $cacheNodesToCreate; $cacheNodeN
     az mcc ent node update --cache-node-name $iteratedCacheNodeName --mcc-resource-name $mccResourceName --resource-group $resourceGroup --cache-drive  "[{physical-path:/var/mcc,size-in-gb:50}]" --proxy enabled --proxy-host $proxyHost --proxy-port $proxyPort
 }
 ```
+---
 
 ## Next step
 
diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index ad2cdf1671..f862509a07 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -25,7 +25,7 @@ This article details the requirements and recommended specifications for using M
 
     The Azure resources used for Connected Cache will be free to you during this public preview.
 
-- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from a Connected Cache node.
+- **E3/E5 or A3/A5 license**: Your organization must have one of the following license subscriptions for each device that downloads content from a Connected Cache node:
 
     - [Windows Enterprise E3 or E5](/windows/whats-new/windows-licensing#windows-11-enterprise), included in [Microsoft 365 F3, E3, or E5](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing?msockid=32c407b43d5968050f2b13443c746916)
     - Windows Education A3 or A5, included in [Microsoft 365 A3 or A5](https://www.microsoft.com/education/products/microsoft-365?msockid=32c407b43d5968050f2b13443c746916#Education-plans)
@@ -36,21 +36,21 @@ This article details the requirements and recommended specifications for using M
 
 - Any previous installations of Connected Cache must be [uninstalled](mcc-ent-uninstall-cache-node.md) from the host machine before installing the latest version of Connected Cache.
 - [These listed endpoints](delivery-optimization-endpoints.md) must be reachable by the host machine.
-- The host machine must have no other services / applications utilizing port 80 (for example, ConfigManager or Distribution Point).
+- The host machine must have no other services / applications utilizing port 80 (for example, Configuration Manager or a distribution point).
 - The host machine must have at least 4 GB of free memory.
 
 ### Additional requirements for Windows host machines
 
-- The Windows host machine must be using Windows 11 or Windows Server 2022 with the Latest Cumulative Update (LCU) applied.
+- The Windows host machine must be using Windows 11 or Windows Server 2022 with the latest cumulative update applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
 
 - The Windows host machine must support nested virtualization.
-- The Windows host machine must have [WSL2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
+- The Windows host machine must have [WSL 2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
 
 ### Additional requirements for Linux host machines
 
-- The Linux host machine must be using one of the following Operating Systems:
+- The Linux host machine must be using one of the following operating systems:
 
     - Ubuntu 20.04
     - Red Hat Enterprise Linux (RHEL) 8.* or 9.*
@@ -64,9 +64,9 @@ This article details the requirements and recommended specifications for using M
 
 ### Recommended host machine hardware specifications
 
-Based on your [enterprise configuration](mcc-ent-edu-overview.md), it's recommended to deploy your Connected Cache nodes to host machines that meet the following recommended hardware specifications.
+Based on your [enterprise configuration](mcc-ent-edu-overview.md), it's recommended to deploy your Connected Cache nodes to host machines that meet the following recommended hardware specifications:
 
-| Component | Branch Office | Small / Medium Enterprise | Large Enterprise |
+| Component | Branch office | Small / medium enterprise | Large enterprise |
 | --- | --- | --- | --- |
 | CPU cores | 4 | 8 | 16 |
 | Memory | 8 GB, 4 GB free | 16 GB, 4 GB free | 32 GB, 4 GB free |
diff --git a/windows/deployment/do/mcc-ent-update-cache-node.md b/windows/deployment/do/mcc-ent-update-cache-node.md
index 3ff6865f9b..40f8c24f4c 100644
--- a/windows/deployment/do/mcc-ent-update-cache-node.md
+++ b/windows/deployment/do/mcc-ent-update-cache-node.md
@@ -17,26 +17,26 @@ ms.date: 10/30/2024
 
 Microsoft Connected Cache for Enterprise and Education caching software is deployed to host machines as a container. The container OS and any software component within the container need to be updated to address security vulnerabilities and improve quality and performance. These Microsoft-published container updates are referred to as "Connected Cache updates" in this article.
 
-Microsoft silently deploys Connected Cache updates to your cache nodes based on the Update Ring setting you configure for each cache node.
+Microsoft silently deploys Connected Cache updates to your cache nodes based on the **Update Ring** setting you configure for each cache node.
 
 ## Update rings
 
-Connected Cache nodes can be configured to either the "Fast" or "Slow" update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the Slow ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
+Connected Cache nodes can be configured to either the `Fast` or `Slow` update ring. If configured to update as part of the Fast ring, the cache node will be silently updated by Microsoft soon after the update is made available. If configured to update as part of the `Slow` ring, the cache node is silently updated by Microsoft within five weeks of the update becoming available.
 
-In other words, configuring cache nodes to update as part of the Slow ring provides users with the option to delay the update process until they have validated that the latest Connected Cache update works within their environment. For example, a user could configure a test cache node to update as part of the Fast ring and validate that clients can successfully interact with the test cache node after the latest Connected Cache update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the Slow ring.
+In other words, configuring cache nodes to update as part of the `Slow` ring provides users with the option to delay the update process until they have validated that the latest Connected Cache update works within their environment. For example, a user could configure a test cache node to update as part of the `Fast` ring and validate that clients can successfully interact with the test cache node after the latest Connected Cache update has been applied. This builds confidence that service won't be interrupted when the production cache nodes are updated as part of the `Slow` ring.
 
 ### Update ring options
 
 >[!IMPORTANT]
->In the event of a critical security patch, Microsoft may elect to initiate an Connected Cache update to your cache node as soon as possible (even if the cache node has been set to the Slow Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each Connected Cache update.
+> In the event of a critical security patch, Microsoft may elect to initiate a Connected Cache update to your cache node as soon as possible (even if the cache node has been set to the `Slow` Ring). Visit the [Release notes](mcc-ent-release-notes.md) page for a detailed changelog of each Connected Cache update.
 
 #### Fast Ring
 
-All Connected Cache nodes are configured to update as part of the Fast ring by default. Connected Cache nodes in the Fast ring will be updated soon after an update is made available. Microsoft will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
+All Connected Cache nodes are configured to update as part of the `Fast` ring by default. Connected Cache nodes in the `Fast` ring will be updated soon after an update is made available. The update will silently update cache nodes at a time of day when update traffic is likely to be minimal, such as 3:00 AM (local time) on Saturday.
 
 #### Slow Ring
 
-Configuring a Connected Cache node to update as part of the Slow ring provides users with the option to delay Connected Cache software updates until the update can be validated. There are three settings that control when Connected Cache updates will be applied to Connected Cache nodes. All update ring settings can be managed from the Azure portal or through Azure CLI.
+Configuring a Connected Cache node to update as part of the `Slow` ring provides users with the option to delay Connected Cache software updates until the update can be validated. There are three settings that control when Connected Cache updates will be applied to Connected Cache nodes. All update ring settings can be managed from the Azure portal or through the Azure CLI.
 
 | Setting | Description |
 | --- | --- |
@@ -46,15 +46,15 @@ Configuring a Connected Cache node to update as part of the Slow ring provides u
 
 ## Update process
 
-When Microsoft publishes a Connected Cache update, the Connected Cache service attempts to update all Connected Cache nodes based on their Update Ring membership. If a cache node can't complete the silent Connected Cache update within 6 hours of starting, an error message is surfaced in the Azure portal.
+When Microsoft publishes a Connected Cache update, the Connected Cache service attempts to update all Connected Cache nodes based on their **Update Ring** membership. If a cache node can't complete the silent Connected Cache update within 6 hours of starting, an error message is surfaced in the Azure portal.
 
-## Update terminology, criteria, and SLA
+## Update terminology, criteria, and information
 
 Connected Cache updates are released based on need instead of on a set cadence.
 
-| Update type | Criteria and SLA |
+| Update type | Criteria and information |
 | --- | --- |
-| Security | Security updates are the highest priority and are released based on the severity rating of the vulnerability. Patches for [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities are released by Microsoft within 60 days of discovery. Patches for [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities are released by Microsoft within 120 days. |
+| Security | Security updates are the highest priority and are released based on the severity rating of the vulnerability. Updates for [Critical and High](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities are released by Microsoft within 60 days of discovery. Updates for [Medium and Low](https://nvd.nist.gov/vuln-metrics/cvss) vulnerabilities are released by Microsoft within 120 days. |
 | Quality | Quality updates fix a specific problem and addresses a noncritical, non-security-related bug. Quality updates could include performance fixes for a specific problem or changes related to cache efficiency or maximum egress for example. Quality updates are released along with security updates or when necessary to ensure proper functioning of the Microsoft Connected Cache software. |
 
 For information on all released Microsoft Connected Cache updates, see the [Connected Cache release notes](mcc-ent-release-notes.md).

From a16dddb28f528b1a21bea5febbd968ad8a3df3be Mon Sep 17 00:00:00 2001
From: Christine Eaton <40660908+ceaton-msft@users.noreply.github.com>
Date: Wed, 30 Oct 2024 12:23:00 +0000
Subject: [PATCH 102/128] Update windows-autopatch-prerequisites.md

Added info on IoT edition and updated links for LTSC.
---
 .../prepare/windows-autopatch-prerequisites.md                | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-prerequisites.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-prerequisites.md
index 74379f93b0..4c7127d25e 100644
--- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-prerequisites.md
+++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-prerequisites.md
@@ -135,12 +135,14 @@ For more information about feature entitlement, see [Features and capabilities](
 The following Windows 10/11 editions, build version, and architecture are supported when [devices are registered with Windows Autopatch](../deploy/windows-autopatch-register-devices.md):
 
 - Windows 11 Professional, Education, Enterprise, Pro Education, or Pro for Workstations editions
+- Windows 11 IoT Enterprise edition
 - Windows 10 Professional, Education, Enterprise, Pro Education, or Pro for Workstations editions
+- Windows 10 IoT Enterprise edition
 
 Windows Autopatch service supports Windows client devices on the **General Availability Channel**.
 
 > [!NOTE]
-> Windows Autopatch supports registering [Windows 10 Long-Term Servicing Channel (LTSC)](/windows/whats-new/ltsc/) devices that are being currently serviced by the [Windows LTSC](/windows/release-health/release-information). The service only supports managing the [Windows quality updates](../operate/windows-autopatch-windows-quality-update-overview.md) workload for devices currently serviced by the LTSC. Windows Update for Business service and Windows Autopatch don't offer Windows feature updates for devices that are part of the LTSC. You must either use [LTSC media](https://www.microsoft.com/evalcenter/evaluate-windows-10-enterprise) or the [Configuration Manager Operating System Deployment capabilities to perform an in-place upgrade](/windows/deployment/deploy-windows-cm/upgrade-to-windows-10-with-configuration-manager) for Windows devices that are part of the LTSC.
+> Windows Autopatch supports registering [Windows 10 and Windows 11 Long-Term Servicing Channel (LTSC)](/windows/whats-new/ltsc/overview) devices that are being currently serviced by the [Windows 10 LTSC](/windows/release-health/release-information) or [Windows 11 LTSC](/windows/release-health/windows11-release-information). The service only supports managing the [Windows quality updates](../operate/windows-autopatch-windows-quality-update-overview.md) workload for devices currently serviced by the LTSC. Windows Update for Business service and Windows Autopatch don't offer Windows feature updates for devices that are part of the LTSC. You must either use [LTSC media](https://www.microsoft.com/evalcenter/evaluate-windows-10-enterprise) or the [Configuration Manager Operating System Deployment capabilities to perform an in-place upgrade](/windows/deployment/deploy-windows-cm/upgrade-to-windows-10-with-configuration-manager) for Windows devices that are part of the LTSC.
 
 ## Configuration Manager co-management requirements
 

From eaac5b25f02a07f9950dff50d8dea40f561aaf93 Mon Sep 17 00:00:00 2001
From: Matheesha <matheesha.weerasinghe@microsoft.com>
Date: Wed, 30 Oct 2024 17:37:48 +0000
Subject: [PATCH 103/128] Update settings-and-configuration.md

Added details for the InteractiveLogonFirst (REG_DWORD) value. This controls UAC's behaviour for using cached logon details (potentially stale) over doing a logon over the wire to confirm if account can be used for elevation. Useful for Entra ID joined devices administered by others.
---
 .../user-account-control/settings-and-configuration.md           | 1 +
 1 file changed, 1 insertion(+)

diff --git a/windows/security/application-security/application-control/user-account-control/settings-and-configuration.md b/windows/security/application-security/application-control/user-account-control/settings-and-configuration.md
index 8c81845b7b..68d64ea7fe 100644
--- a/windows/security/application-security/application-control/user-account-control/settings-and-configuration.md
+++ b/windows/security/application-security/application-control/user-account-control/settings-and-configuration.md
@@ -96,6 +96,7 @@ The registry keys are found under the key: `HKLM:\SOFTWARE\Microsoft\Windows\Cur
 | Run all administrators in Admin Approval Mode | `EnableLUA` | 0 = Disabled<br>1 (Default) = Enabled |
 | Switch to the secure desktop when prompting for elevation| `PromptOnSecureDesktop` | 0 = Disabled<br>1 (Default) = Enabled |
 | Virtualize file and registry write failures to per-user locations | `EnableVirtualization` | 0 = Disabled<br>1 (Default) = Enabled |
+| Prioritise network logons over cached logons | `InteractiveLogonFirst` | 0 (Default) = Disabled<br>1 = Enabled |
 
 [WIN-1]: /windows/client-management/mdm/policy-csp-localpoliciessecurityoptions
 [MEM-1]: /mem/intune/configuration/custom-settings-windows-10

From c5977ce98faa2b0ff138957e2daf830b8e276944 Mon Sep 17 00:00:00 2001
From: Padma Jayaraman <v-padmaj@microsoft.com>
Date: Thu, 31 Oct 2024 00:14:27 +0530
Subject: [PATCH 104/128] Fixed alignment

---
 windows/configuration/start/layout.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/windows/configuration/start/layout.md b/windows/configuration/start/layout.md
index 2bc5402a79..81f5d11c75 100644
--- a/windows/configuration/start/layout.md
+++ b/windows/configuration/start/layout.md
@@ -427,13 +427,13 @@ You can edit the JSON file to make any modifications to the **Pinned** section o
 1. Open the `LayoutModification.json` file in a JSON editor, such as Visual Studio Code or Notepad
 1. The `pinnedList` section includes all the pins that are applied to the Start layout
 
-You can add more apps to the section using the following keys:
+    You can add more apps to the section using the following keys:
 
-| Key | Description |
-|--|--|
-| `packagedAppID` | Used for Universal Windows Platform (UWP) apps. To pin a UWP app, use the app's AUMID. |
-| `desktopAppID` | Used for desktop apps. To pin a desktop app, use the app's AUMID. If the app doesn't have an AUMID, use the `desktopAppLink` instead. |
-| `desktopAppLink` | Used for desktop apps that don't have an associated AUMID. To pin this type of app, use the path to the `.lnk` shortcut that points to the app. |
+    | Key | Description |
+    |--|--|
+    | `packagedAppID` | Used for Universal Windows Platform (UWP) apps. To pin a UWP app, use the app's AUMID. |
+    | `desktopAppID` | Used for desktop apps. To pin a desktop app, use the app's AUMID. If the app doesn't have an AUMID, use the `desktopAppLink` instead. |
+    | `desktopAppLink` | Used for desktop apps that don't have an associated AUMID. To pin this type of app, use the path to the `.lnk` shortcut that points to the app. |
 
 ::: zone-end
 

From e88cd72e45aa445c226332ee8cd2a96d91bfb0d6 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Wed, 30 Oct 2024 15:04:50 -0400
Subject: [PATCH 105/128] Server 2025 updates

---
 windows/security/docfx.json                    |  8 +++++++-
 .../access-control/access-control.md           |  1 +
 .../access-control/local-accounts.md           |  1 +
 .../credential-guard/configure.md              |  4 +---
 .../considerations-known-issues.md             | 18 +++++++-----------
 .../credential-guard/index.md                  |  8 +++-----
 .../includes/tooltip-trust-cloud-kerberos.md   |  2 +-
 .../deploy/includes/tooltip-trust-key.md       |  2 +-
 .../hello-for-business/deploy/index.md         |  4 ++--
 .../remote-credential-guard.md                 |  1 +
 .../data-protection/bitlocker/csv-san.md       |  1 +
 .../bitlocker/install-server.md                |  1 +
 12 files changed, 27 insertions(+), 24 deletions(-)

diff --git a/windows/security/docfx.json b/windows/security/docfx.json
index b2eefb6943..b7d4db82be 100644
--- a/windows/security/docfx.json
+++ b/windows/security/docfx.json
@@ -137,6 +137,7 @@
         "application-security/application-control/user-account-control/**/*.md": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -172,6 +173,7 @@
         "identity-protection/credential-guard/**/*.md": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -179,6 +181,7 @@
         "identity-protection/smart-cards/**/*.md": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -186,6 +189,7 @@
         "identity-protection/virtual-smart-cards/**/*.md": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -197,6 +201,7 @@
         "operating-system-security/data-protection/**/*.md": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -204,6 +209,7 @@
         "operating-system-security/data-protection/**/*.yml": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -224,6 +230,7 @@
         "operating-system-security/network-security/windows-firewall/**/*.md": [
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2025</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2022</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2019</a>",
           "✅ <a href=\"https://learn.microsoft.com/windows/release-health/windows-server-release-info\" target=\"_blank\">Windows Server 2016</a>"
@@ -235,7 +242,6 @@
         "book/*.md": "paoloma",
         "identity-protection/access-control/*.md": "sulahiri",
         "identity-protection/credential-guard/*.md": "zwhittington",
-        "identity-protection/hello-for-business/*.md": "erikdau",
         "identity-protection/smart-cards/*.md": "ardenw",
         "identity-protection/virtual-smart-cards/*.md": "ardenw",
         "operating-system-security/data-protection/personal-data-encryption/*.md": "rhonnegowda",
diff --git a/windows/security/identity-protection/access-control/access-control.md b/windows/security/identity-protection/access-control/access-control.md
index 20731a876a..12fe65bda4 100644
--- a/windows/security/identity-protection/access-control/access-control.md
+++ b/windows/security/identity-protection/access-control/access-control.md
@@ -6,6 +6,7 @@ ms.topic: overview
 appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2025</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2022</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2019</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016</a>
diff --git a/windows/security/identity-protection/access-control/local-accounts.md b/windows/security/identity-protection/access-control/local-accounts.md
index 70dbff7388..074d25a3f4 100644
--- a/windows/security/identity-protection/access-control/local-accounts.md
+++ b/windows/security/identity-protection/access-control/local-accounts.md
@@ -6,6 +6,7 @@ ms.topic: concept-article
 appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2025</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2022</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2019</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016</a>
diff --git a/windows/security/identity-protection/credential-guard/configure.md b/windows/security/identity-protection/credential-guard/configure.md
index b965f14e38..192b60aca0 100644
--- a/windows/security/identity-protection/credential-guard/configure.md
+++ b/windows/security/identity-protection/credential-guard/configure.md
@@ -11,9 +11,7 @@ This article describes how to configure Credential Guard using Microsoft Intune,
 
 ## Default enablement
 
-[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)]
-
-Starting in Windows 11, 22H2 and Windows Server 2025 (preview), Credential Guard is [enabled by default on devices which meet the requirements](index.md#default-enablement).
+Starting in Windows 11, 22H2 and Windows Server 2025, Credential Guard is [enabled by default on devices which meet the requirements](index.md#default-enablement).
 
 System administrators can explicitly [enable](#enable-credential-guard) or [disable](#disable-credential-guard) Credential Guard using one of the methods described in this article. Explicitly configured values overwrite the default enablement state after a reboot.
 
diff --git a/windows/security/identity-protection/credential-guard/considerations-known-issues.md b/windows/security/identity-protection/credential-guard/considerations-known-issues.md
index 71298d9a5b..e4531d1f84 100644
--- a/windows/security/identity-protection/credential-guard/considerations-known-issues.md
+++ b/windows/security/identity-protection/credential-guard/considerations-known-issues.md
@@ -11,13 +11,11 @@ Microsoft recommends that in addition to deploying Credential Guard, organizatio
 
 ## Upgrade considerations
 
-[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)]
-
 As Credential Guard evolves and enhances its security features, newer versions of Windows running Credential Guard might affect previously functional scenarios. For instance, Credential Guard could restrict the use of certain credentials or components to thwart malware exploiting vulnerabilities.
 
 It's advisable to thoroughly test operational scenarios within an organization before updating devices that utilize Credential Guard.
 
-Upgrades to Windows 11, version 22H2, and Windows Server 2025 (preview) have Credential Guard [enabled by default](index.md#default-enablement) unless explicitly disabled.
+Upgrades to Windows 11, version 22H2, and Windows Server 2025 have Credential Guard [enabled by default](index.md#default-enablement) unless explicitly disabled.
 
 ## Wi-fi and VPN considerations
 
@@ -120,25 +118,23 @@ Credential Guard blocks certain authentication capabilities. Applications that r
 
 This article describes known issues when Credential Guard is enabled.
 
-### Live migration with Hyper-V breaks when upgrading to Windows Server 2025 (preview)
+### Live migration with Hyper-V breaks when upgrading to Windows Server 2025
 
-[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)]
-
-Devices that use CredSSP-based Delegation might no longer be able to use [Live Migration with Hyper-V](/windows-server/virtualization/hyper-v/manage/live-migration-overview) after upgrading to Windows Server 2025 (preview). Applications and services that rely on live migration (such as [SCVMM](/system-center/vmm/overview)) might also be affected. CredSSP-based delegation is the default for Windows Server 2022 and earlier for live migration.
+Devices that use CredSSP-based Delegation might no longer be able to use [Live Migration with Hyper-V](/windows-server/virtualization/hyper-v/manage/live-migration-overview) after upgrading to Windows Server 2025. Applications and services that rely on live migration (such as [SCVMM](/system-center/vmm/overview)) might also be affected. CredSSP-based delegation is the default for Windows Server 2022 and earlier for live migration.
 
 ||Description|
 |-|-|
-|    **Affected devices**|Any server with Credential Guard enabled might encounter this issue. Starting in Windows Server 2025 (preview), [Credential Guard is enabled by default](index.md#default-enablement-on-windows-server) on all domain-joined servers that aren't domain controllers. Default enablement of Credential Guard can be [preemptively blocked](configure.md#default-enablement) before upgrade.|
+|    **Affected devices**|Any server with Credential Guard enabled might encounter this issue. Starting in Windows Server 2025, [Credential Guard is enabled by default](index.md#default-enablement-on-windows-server) on all domain-joined servers that aren't domain controllers. Default enablement of Credential Guard can be [preemptively blocked](configure.md#default-enablement) before upgrade.|
 |    **Cause of the issue**|Live Migration with Hyper-V, and applications and services that rely on it, are affected by the issue if one or both ends of a given connection try to use CredSSP with Credential Guard enabled. With Credential Guard enabled, CredSSP can only utilize supplied credentials, not saved or SSO credentials. <br><br>If the source machine of a Live Migration uses CredSSP for delegation with Credential Guard enabled, the Live Migration fails. In most cases, Credential Guard's enablement state on the destination machine won't impact Live Migration. Live Migration also fails in cluster scenarios (for example, SCVMM), since any device might act as a source machine.|
 |    **Resolution**|Instead of CredSSP Delegation, [Kerberos Constrained Delegation and Resource-Based Kerberos Constrained Delegation](/windows-server/security/kerberos/kerberos-constrained-delegation-overview) are recommended. These forms of delegation provide greater credential protections, in addition to being compatible with Credential Guard. Administrators of Hyper-V can [configure these types of delegation](/windows-server/virtualization/hyper-v/deploy/set-up-hosts-for-live-migration-without-failover-clustering#BKMK_Step1) manually or with the help of automated scripts.|
 
-### Single sign-on for Network services breaks after upgrading to Windows 11, version 22H2 or Windows Server 2025 (preview)
+### Single sign-on for Network services breaks after upgrading to Windows 11, version 22H2 or Windows Server 2025
 
 Devices that use 802.1x wireless or wired network, RDP, or VPN connections that rely on insecure protocols with password-based authentication are unable to use SSO to sign in and are forced to manually reauthenticate in every new Windows session when Credential Guard is running.
 
 ||Description|
 |-|-|
-|    **Affected devices**|Any device with Credential Guard enabled might encounter the issue. Starting in Windows 11, version 22H2, and Windows Server 2025 (preview), eligible devices that didn't disable Credential Guard, have it [enabled by default](index.md#default-enablement). This affects all devices on Enterprise (E3 and E5) and Education licenses, and some Pro licenses, as long as they meet the [minimum hardware requirements](index.md#hardware-and-software-requirements).<br><br>All Windows Pro devices that previously ran Credential Guard on an eligible license and later downgraded to Pro, and which still meet the [minimum hardware requirements](index.md#hardware-and-software-requirements), receive default enablement.|
+|    **Affected devices**|Any device with Credential Guard enabled might encounter the issue. Starting in Windows 11, version 22H2, and Windows Server 2025, eligible devices that didn't disable Credential Guard, have it [enabled by default](index.md#default-enablement). This affects all devices on Enterprise (E3 and E5) and Education licenses, and some Pro licenses, as long as they meet the [minimum hardware requirements](index.md#hardware-and-software-requirements).<br><br>All Windows Pro devices that previously ran Credential Guard on an eligible license and later downgraded to Pro, and which still meet the [minimum hardware requirements](index.md#hardware-and-software-requirements), receive default enablement.|
 |    **Cause of the issue**|Applications and services are affected by the issue when they rely on insecure protocols that use password-based authentication. Such protocols are considered insecure because they can lead to password disclosure on the client or the server, and Credential Guard blocks them. Affected protocols include:<br><br>- Kerberos unconstrained delegation (both SSO and supplied credentials are blocked)<br>- Kerberos when PKINIT uses RSA encryption instead of Diffie-Hellman (both SSO and supplied credentials are blocked)<br>- MS-CHAP (only SSO is blocked)<br>- WDigest (only SSO is blocked)<br>- NTLM v1 (only SSO is blocked) <br><br>**Note**: Since only SSO is blocked for MS-CHAP, WDigest, and NTLM v1, these protocols can still be used by prompting the user to supply credentials.|
 |    **Resolution**|Microsoft recommends moving away from MSCHAPv2-based connections (for example, PEAP-MSCHAPv2 and EAP-MSCHAPv2), to certificate-based authentication (for example, PEAP-TLS or EAP-TLS). Credential Guard doesn't block certificate-based authentication.<br><br>For a more immediate, but less secure fix, [disable Credential Guard](configure.md#disable-credential-guard). Credential Guard doesn't have per-protocol or per-application policies, and it can either be turned on or off. If you disable Credential Guard, you leave stored domain credentials vulnerable to theft.|
 
@@ -148,7 +144,7 @@ Devices that use 802.1x wireless or wired network, RDP, or VPN connections that
 > If Credential Guard is explicitly disabled, the device won't automatically enable Credential Guard after the update.
 
 > [!NOTE]
-> To determine if a Windows Pro device receives default enablement when upgraded to **Windows 11, version 22H2** or **Windows Server 2025 (preview)**, check if the registry key `IsolatedCredentialsRootSecret` is present in `Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0`.
+> To determine if a Windows Pro device receives default enablement when upgraded to **Windows 11, version 22H2** or **Windows Server 2025**, check if the registry key `IsolatedCredentialsRootSecret` is present in `Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0`.
 > If it's present, the device enables Credential Guard after the update.
 >
 > Credential Guard can be disabled after upgrade by following the [disablement instructions](configure.md#disable-credential-guard).
diff --git a/windows/security/identity-protection/credential-guard/index.md b/windows/security/identity-protection/credential-guard/index.md
index fcbe9884bb..386e6883e1 100644
--- a/windows/security/identity-protection/credential-guard/index.md
+++ b/windows/security/identity-protection/credential-guard/index.md
@@ -22,16 +22,14 @@ When enabled, Credential Guard provides the following benefits:
 
 ## Default enablement
 
-[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)]
-
-Starting in **Windows 11, 22H2** and **Windows Server 2025 (preview)**, VBS and Credential Guard are enabled by default on devices that meet the requirements.
+Starting in **Windows 11, 22H2** and **Windows Server 2025**, VBS and Credential Guard are enabled by default on devices that meet the requirements.
 
 The default enablement is **without UEFI Lock**, thus allowing administrators to disable Credential Guard remotely if needed.
 
 When Credential Guard is enabled, [VBS](#system-requirements) is automatically enabled too.
 
 > [!NOTE]
-> If Credential Guard is explicitly [disabled](configure.md#disable-credential-guard) *before* a device is updated to Windows 11, version 22H2 / Windows Server 2025 (preview) or later, default enablement does not overwrite the existing settings. That device will continue to have Credential Guard disabled even after updating to a version of Windows that enables Credential Guard by default.
+> If Credential Guard is explicitly [disabled](configure.md#disable-credential-guard) *before* a device is updated to Windows 11, version 22H2 / Windows Server 2025 or later, default enablement does not overwrite the existing settings. That device will continue to have Credential Guard disabled even after updating to a version of Windows that enables Credential Guard by default.
 
 ### Default enablement on Windows
 
@@ -48,7 +46,7 @@ Devices running Windows 11, 22H2 or later have Credential Guard enabled by defau
 
 ### Default enablement on Windows Server
 
-Devices running Windows Server 2025 (preview) or later have Credential Guard enabled by default if they:
+Devices running Windows Server 2025 or later have Credential Guard enabled by default if they:
 
 - Meet the [license requirements](#windows-edition-and-licensing-requirements)
 - Meet the [hardware and software requirements](#system-requirements)
diff --git a/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-cloud-kerberos.md b/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-cloud-kerberos.md
index 58bad86a1c..7975aad95b 100644
--- a/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-cloud-kerberos.md
+++ b/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-cloud-kerberos.md
@@ -1,5 +1,5 @@
 ---
-ms.date: 12/08/2022
+ms.date: 10/30/2024
 ms.topic: include
 ---
 
diff --git a/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-key.md b/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-key.md
index 41d9b6cdf9..67e1f2fa05 100644
--- a/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-key.md
+++ b/windows/security/identity-protection/hello-for-business/deploy/includes/tooltip-trust-key.md
@@ -1,5 +1,5 @@
 ---
-ms.date: 12/08/2022
+ms.date: 10/30/2024
 ms.topic: include
 ---
 
diff --git a/windows/security/identity-protection/hello-for-business/deploy/index.md b/windows/security/identity-protection/hello-for-business/deploy/index.md
index 09c8d47a70..10823c86c1 100644
--- a/windows/security/identity-protection/hello-for-business/deploy/index.md
+++ b/windows/security/identity-protection/hello-for-business/deploy/index.md
@@ -1,7 +1,7 @@
 ---
 title: Plan a Windows Hello for Business Deployment
 description: Learn about the role of each component within Windows Hello for Business and how certain deployment decisions affect other aspects of your infrastructure.
-ms.date: 05/16/2024
+ms.date: 10/30/2024
 ms.topic: concept-article
 ---
 
@@ -269,7 +269,7 @@ All supported Windows Server versions can be used with Windows Hello for Busines
 |  | Deployment model | Trust type | Domain Controller OS version |
 |--|--|--|--|
 | **🔲** | **Cloud-only** | n/a | All supported versions |
-| **🔲** | **Hybrid** | Cloud Kerberos | - Windows Server 2016, with [KB3534307][KB-3] and later<br>- Windows Server 2019, with [KB4534321][KB-4] and later<br>- Windows Server 2022 |
+| **🔲** | **Hybrid** | Cloud Kerberos | - Windows Server 2016, with [KB3534307][KB-3] and later<br>- Windows Server 2019, with [KB4534321][KB-4] and later<br>- Windows Server 2022<br>- Windows Server 2025|
 | **🔲** | **Hybrid** | Key | All supported versions |
 | **🔲** | **Hybrid** | Certificate | All supported versions |
 | **🔲** | **On-premises** | Key | All supported versions |
diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md
index e07f9e5739..494d9a4978 100644
--- a/windows/security/identity-protection/remote-credential-guard.md
+++ b/windows/security/identity-protection/remote-credential-guard.md
@@ -6,6 +6,7 @@ ms.date: 03/12/2024
 appliesto:
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2025</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2022</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2019</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016</a>
diff --git a/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md b/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md
index 15db660036..80b74ed970 100644
--- a/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md
+++ b/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md
@@ -4,6 +4,7 @@ description: Learn how to protect cluster shared volumes (CSV) and storage area
 ms.topic: how-to
 ms.date: 06/18/2024
 appliesto:
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2025</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2022</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2019</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016</a>
diff --git a/windows/security/operating-system-security/data-protection/bitlocker/install-server.md b/windows/security/operating-system-security/data-protection/bitlocker/install-server.md
index a1b63ed90b..1e9c124e9c 100644
--- a/windows/security/operating-system-security/data-protection/bitlocker/install-server.md
+++ b/windows/security/operating-system-security/data-protection/bitlocker/install-server.md
@@ -4,6 +4,7 @@ description: Learn how to install BitLocker on Windows Server.
 ms.topic: how-to
 ms.date: 06/18/2024
 appliesto:
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2025</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2022</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2019</a>
 - ✅ <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Windows Server 2016</a>

From 96e1ab0bcbe6f87c1075a6c5ed22be65ef6d446c Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 30 Oct 2024 12:46:23 -0700
Subject: [PATCH 106/128] Update mcc-ent-troubleshooting.md

Small addition about runtime account password expiration affecting scheduled tasks.
---
 windows/deployment/do/mcc-ent-troubleshooting.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 0325c0e46f..775261fe17 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -87,6 +87,8 @@ You can use Task Scheduler on the host machine to check the status of this sched
 1. Select the scheduled task **MCC_Monitor_Task**
 1. Select the **Triggers** tab and confirm that the Status is **Enabled**
 
+**Note**: If the password of the runtime account changes, you'll need to update the user in all of the Connected Cache scheduled tasks in order for the Connected Cache node to continue functioning properly.
+
 ## Troubleshooting cache node deployment to Linux host machine
 
 [Deploying a Connected Cache node to a Linux host machine](mcc-ent-deploy-to-linux.md) involves running a series of Bash scripts contained within the Linux provisioning package.

From 266bc964d6a1c6b7d44d70538195b9afac497144 Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Wed, 30 Oct 2024 13:50:44 -0700
Subject: [PATCH 107/128] Update
 windows/deployment/do/mcc-ent-troubleshooting.md

formatting tweak
---
 windows/deployment/do/mcc-ent-troubleshooting.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 775261fe17..9c947c80fe 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -87,7 +87,8 @@ You can use Task Scheduler on the host machine to check the status of this sched
 1. Select the scheduled task **MCC_Monitor_Task**
 1. Select the **Triggers** tab and confirm that the Status is **Enabled**
 
-**Note**: If the password of the runtime account changes, you'll need to update the user in all of the Connected Cache scheduled tasks in order for the Connected Cache node to continue functioning properly.
+> [!Note]
+>  If the password of the runtime account changes, you'll need to update the user in all of the Connected Cache scheduled tasks in order for the Connected Cache node to continue functioning properly.
 
 ## Troubleshooting cache node deployment to Linux host machine
 

From 761bb9cf83c086420d59684ac95af99b7b99730f Mon Sep 17 00:00:00 2001
From: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Date: Wed, 30 Oct 2024 13:51:56 -0700
Subject: [PATCH 108/128] Update
 windows/deployment/do/mcc-ent-troubleshooting.md

formatting tweak
---
 windows/deployment/do/mcc-ent-troubleshooting.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index 9c947c80fe..c10a74c802 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -88,7 +88,7 @@ You can use Task Scheduler on the host machine to check the status of this sched
 1. Select the **Triggers** tab and confirm that the Status is **Enabled**
 
 > [!Note]
->  If the password of the runtime account changes, you'll need to update the user in all of the Connected Cache scheduled tasks in order for the Connected Cache node to continue functioning properly.
+> If the password of the runtime account changes, you'll need to update the user in all of the Connected Cache scheduled tasks in order for the Connected Cache node to continue functioning properly.
 
 ## Troubleshooting cache node deployment to Linux host machine
 

From 6cc4b961f59b9fabd44aec2a56d0144d00f39661 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 30 Oct 2024 14:37:15 -0700
Subject: [PATCH 109/128] Update mcc-ent-release-notes.md

---
 windows/deployment/do/mcc-ent-release-notes.md | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-release-notes.md b/windows/deployment/do/mcc-ent-release-notes.md
index 90439d3932..28471a7fb7 100644
--- a/windows/deployment/do/mcc-ent-release-notes.md
+++ b/windows/deployment/do/mcc-ent-release-notes.md
@@ -18,16 +18,11 @@ ms.date: 10/30/2024
 
 This article contains details about the latest releases of Connected Cache. Since Connected Cache is a preview service, some releases may contain breaking changes.
 
-## Release v0.1.0 (public preview launch)
+## Release v1.2.1.2076_E (public preview launch)
 
 The public preview released on **10/30/2024**
 
-For customers that installed earlier versions of Connected Cache, this release contains:   
-- Breaking changes 
-- Service changes
-- Client changes
-These changes affect Linux and Windows host machines.
-
+For customers that installed earlier versions of Connected Cache, this release contains breaking changes that affect both Linux and Windows host machines. Please see the [early preview documentation page](mcc-ent-early-preview.md) for more details.
 
 ### Feature updates
 
@@ -39,7 +34,7 @@ These changes affect Linux and Windows host machines.
 - **Updates**: Your cache nodes are now updated automatically and we also added the capability to set each cache node's update ring to govern the cadence of Microsoft Connected Cache container updates.
 
 ### Fixes
-- We fixed various bugs to achieve smoother install experience.
+- We fixed various bugs to achieve a smoother installation experience.
 
 ## Related content
 

From 4eddadf14f88178b0707c685dfe70cd65a33ae91 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 30 Oct 2024 15:03:17 -0700
Subject: [PATCH 110/128] Update mcc-ent-early-preview.md

Tweaked wording to be more clear about re-creating cache nodes in Azure
---
 windows/deployment/do/mcc-ent-early-preview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-early-preview.md b/windows/deployment/do/mcc-ent-early-preview.md
index e552893448..1e1922f15a 100644
--- a/windows/deployment/do/mcc-ent-early-preview.md
+++ b/windows/deployment/do/mcc-ent-early-preview.md
@@ -19,7 +19,7 @@ If you participated in the early preview program, thank you for your collaborati
 
 To continue using supported version of Microsoft Connected Cache, we strongly recommend that you upgrade your existing cache nodes to the new release. Cache nodes created and deployed during early preview should still function but can no longer be managed or monitored remotely via the Microsoft Connected Cache Azure service.
 
-We strongly recommend you [recreate your existing resources in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
+We strongly recommend you [recreate your existing cache nodes in Azure](mcc-ent-create-resource-and-cache.md) and then [redeploy the caching software to your host machines](mcc-ent-deploy-to-windows.md) using the latest OS-specific installer.
 
 
 ## Next step

From e0ed344efe268cfc73510dc52df224e7ff9e2a32 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Wed, 30 Oct 2024 15:08:33 -0700
Subject: [PATCH 111/128] Update mcc-isp.md

---
 windows/deployment/do/mcc-isp.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/do/mcc-isp.md b/windows/deployment/do/mcc-isp.md
index 019e0223e6..2594e6e96a 100644
--- a/windows/deployment/do/mcc-isp.md
+++ b/windows/deployment/do/mcc-isp.md
@@ -20,7 +20,7 @@ appliesto:
 # Microsoft Connected Cache for Internet Service Providers (early preview)
 
 > [!IMPORTANT]
-> Microsoft Connected Cache for ISPs is now in Public Preview - for our early preview customers, and early preview version is no longer supported. We highly encourage you to onboard onto our Public Preview program. For instructions on signing up and onboarding, visit [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md).
+> Microsoft Connected Cache for ISPs is now in Public Preview - for our early preview customers, the early preview version is no longer supported. We highly encourage you to onboard onto our Public Preview program. For instructions on signing up and onboarding, visit [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md).
 
 ## Overview
 
@@ -154,4 +154,4 @@ For more information on Azure IoT Edge, see the [Azure IoT Edge documentation](/
 
 [Introducing Microsoft Connected Cache](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/introducing-microsoft-connected-cache-microsoft-s-cloud-managed/ba-p/963898)
 
--->
\ No newline at end of file
+-->

From b3fca922446e43cd3fbb69d0882a1c1df309c62e Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Wed, 30 Oct 2024 15:33:16 -0700
Subject: [PATCH 112/128] Update mcc-ent-prerequisites.md

Corrected Ubuntu 20.04 => 22.04
---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index f862509a07..3252fa77cb 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -52,7 +52,7 @@ This article details the requirements and recommended specifications for using M
 
 - The Linux host machine must be using one of the following operating systems:
 
-    - Ubuntu 20.04
+    - Ubuntu 22.04
     - Red Hat Enterprise Linux (RHEL) 8.* or 9.*
         - If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)
 

From 081aff538089cb3476868438772127cf03e410f9 Mon Sep 17 00:00:00 2001
From: minakash <57613628+minakash@users.noreply.github.com>
Date: Thu, 31 Oct 2024 12:08:00 +0900
Subject: [PATCH 113/128] Update policy-csp-controlpolicyconflict.md

I confirmed that MDMWinsOverGP affects Update CSP and the CSP settings write GP settings.
I guess that this description was wrote due to the below bug, but it seems like the bug was fixed by feature request.

https://microsoft.visualstudio.com/OS/_workitems/edit/22117269
---
 .../client-management/mdm/policy-csp-controlpolicyconflict.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md
index cd2bf997f6..863938353d 100644
--- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md
+++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md
@@ -37,7 +37,7 @@ If set to 1 then any MDM policy that's set that has an equivalent GP policy will
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 
 > [!NOTE]
-> MDMWinsOverGP only applies to policies in Policy CSP. MDM policies win over Group Policies where applicable; not all Group Policies are available via MDM or CSP. It does not apply to other MDM settings with equivalent GP settings that are defined in other CSPs such as the [Defender CSP](defender-csp.md). Nor does it apply to the [Update Policy CSP](policy-csp-update.md) for managing Windows updates.
+> MDMWinsOverGP only applies to policies in Policy CSP. MDM policies win over Group Policies where applicable; not all Group Policies are available via MDM or CSP. It does not apply to other MDM settings with equivalent GP settings that are defined in other CSPs such as the [Defender CSP](defender-csp.md). 
 
 This policy is used to ensure that MDM policy wins over GP when policy is configured on MDM channel. The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1.
 

From 1d19f98f7fefcc326e4f74b0870d1045dd804f9d Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Thu, 31 Oct 2024 07:40:32 -0400
Subject: [PATCH 114/128] updates

---
 .../deploy/hybrid-cloud-kerberos-trust.md                   | 2 +-
 .../identity-protection/hello-for-business/deploy/index.md  | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md
index c547b535eb..6a73849697 100644
--- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md
+++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md
@@ -41,7 +41,7 @@ If you haven't deployed Microsoft Entra Kerberos, follow the instructions in the
 
 When Microsoft Entra Kerberos is enabled in an Active Directory domain, an *AzureADKerberos* computer object is created in the domain. This object:
 
-- Appears as a Read Only Domain Controller (RODC) object, but isn't associated with any physical servers
+- Appears as a read only domain controller (RODC) object, but isn't associated with any physical servers
 - Is only used by Microsoft Entra ID to generate TGTs for the Active Directory domain
 
   > [!NOTE]
diff --git a/windows/security/identity-protection/hello-for-business/deploy/index.md b/windows/security/identity-protection/hello-for-business/deploy/index.md
index 10823c86c1..fb262a5ee4 100644
--- a/windows/security/identity-protection/hello-for-business/deploy/index.md
+++ b/windows/security/identity-protection/hello-for-business/deploy/index.md
@@ -65,7 +65,7 @@ Windows Hello for Business authentication to Microsoft Entra ID always uses the
 
 The trust type determines whether you issue authentication certificates to your users. One trust model isn't more secure than the other.
 
-The deployment of certificates to users and Domain Controllers requires more configuration and infrastructure, which could also be a factor to consider in your decision. More infrastructure needed for certificate-trust deployments includes a certificate registration authority. In a federated environment, you must activate the Device Writeback option in Microsoft Entra Connect.
+The deployment of certificates to users and domain controllers requires more configuration and infrastructure, which could also be a factor to consider in your decision. More infrastructure needed for certificate-trust deployments includes a certificate registration authority. In a federated environment, you must activate the Device Writeback option in Microsoft Entra Connect.
 
 There are three trust types from which you can choose:
 
@@ -264,9 +264,9 @@ All supported Windows versions can be used with Windows Hello for Business. Howe
 
 ### Windows Server requirements
 
-All supported Windows Server versions can be used with Windows Hello for Business as Domain Controller. However, cloud Kerberos trust requires minimum versions:
+Windows Hello for Business can be used to authenticate against all supported Windows Server versions as a domain controller. However, cloud Kerberos trust requires minimum versions:
 
-|  | Deployment model | Trust type | Domain Controller OS version |
+|  | Deployment model | Trust type | Domain controller OS version |
 |--|--|--|--|
 | **🔲** | **Cloud-only** | n/a | All supported versions |
 | **🔲** | **Hybrid** | Cloud Kerberos | - Windows Server 2016, with [KB3534307][KB-3] and later<br>- Windows Server 2019, with [KB4534321][KB-4] and later<br>- Windows Server 2022<br>- Windows Server 2025|

From a36cf0c026056d8ebdcdaf35c7e72a0dba48e9cb Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Thu, 31 Oct 2024 10:31:59 -0600
Subject: [PATCH 115/128] Updates

---
 ...tion-based-protection-of-code-integrity.md | 112 ++++++++++--------
 windows/security/images/icons/app-control.svg |  19 +++
 .../security/images/icons/security-app.svg    |  24 ++++
 3 files changed, 105 insertions(+), 50 deletions(-)
 create mode 100644 windows/security/images/icons/app-control.svg
 create mode 100644 windows/security/images/icons/security-app.svg

diff --git a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
index 22b8f3245f..e33b814daf 100644
--- a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
+++ b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
@@ -13,6 +13,9 @@ appliesto:
 
 # Enable virtualization-based protection of code integrity
 
+> [!WARNING]
+> Some applications and hardware device drivers may be incompatible with memory integrity. This incompatibility can cause devices or software to malfunction and in rare cases may result in a boot failure (blue screen). Such issues may occur after memory integrity has been turned on or during the enablement process itself. If compatibility issues occur, see [Troubleshooting](#troubleshooting) for remediation steps.
+
 **Memory integrity** is a Virtualization-based security (VBS) feature available in Windows. Memory integrity and VBS improve the threat model of Windows and provide stronger protections against malware trying to exploit the Windows kernel. VBS uses the Windows hypervisor to create an isolated virtual environment that becomes the root of trust of the OS that assumes the kernel can be compromised. Memory integrity is a critical component that protects and hardens Windows by running kernel mode code integrity within the isolated virtual environment of VBS. Memory integrity also restricts kernel memory allocations that could be used to compromise the system.
 
 > [!NOTE]
@@ -20,9 +23,6 @@ appliesto:
 > - Memory integrity is sometimes referred to as *hypervisor-protected code integrity (HVCI)* or *hypervisor enforced code integrity*, and was originally released as part of *Device Guard*. Device Guard is no longer used except to locate memory integrity and VBS settings in Group Policy or the Windows registry.
 > - Memory integrity works better with Intel Kabylake and higher processors with *Mode-Based Execution Control*, and AMD Zen 2 and higher processors with *Guest Mode Execute Trap* capabilities. Older processors rely on an emulation of these features, called *Restricted User Mode*, and will have a bigger impact on performance. When nested virtualization is enabled, memory integrity works better when the VM is version >= 9.3.
 
-> [!WARNING]
-> Some applications and hardware device drivers may be incompatible with memory integrity. This incompatibility can cause devices or software to malfunction and in rare cases may result in a boot failure (blue screen). Such issues may occur after memory integrity has been turned on or during the enablement process itself. If compatibility issues occur, see [Troubleshooting](#troubleshooting) for remediation steps.
-
 ## Memory integrity features
 
 - Protects modification of the Control Flow Guard (CFG) bitmap for kernel mode drivers.
@@ -38,16 +38,22 @@ To enable memory integrity on Windows devices with supporting hardware throughou
 - [Microsoft Configuration Manager](https://cloudblogs.microsoft.com/enterprisemobility/2015/10/30/managing-windows-10-device-guard-with-configuration-manager/)
 - [Registry](#use-registry-keys-to-enable-memory-integrity)
 
+### [:::image type="icon" source="../images/icons/security-app.svg" border="false"::: **Security**](#tab/security)
+
 ### Windows Security
 
 **Memory integrity** can be turned on in **Windows Security** settings and found at **Windows Security** > **Device security** > **Core isolation details** > **Memory integrity**. For more information, see [Device protection in Windows Security](https://support.microsoft.com/help/4096339/windows-10-device-protection-in-windows-defender-security-center).
 
 Beginning with Windows 11 22H2, **Windows Security** shows a warning if memory integrity is turned off. The warning indicator also appears on the Windows Security icon in the Windows Taskbar and in the Windows Notification Center. The user can dismiss the warning from within **Windows Security**.
 
+### [:::image type="icon" source="../images/icons/intune.svg" border="false"::: **Intune/CSP**](#tab/intune)
+
 ### Enable memory integrity using Intune
 
 Use the **Virtualization Based Technology** > **Hypervisor Enforced Code Integrity** setting using the [settings catalog](/mem/intune/configuration/settings-catalog) to enable memory integrity. You can also use the HypervisorEnforcedCodeIntegrity node in the [VirtualizationBasedTechnology CSP](/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology).
 
+### [:::image type="icon" source="../images/icons/group-policy.svg" border="false"::: **GPO**](#tab/gpo)
+
 ### Enable memory integrity using Group Policy
 
 1. Use Group Policy Editor (gpedit.msc) to either edit an existing GPO or create a new one.
@@ -61,6 +67,8 @@ Use the **Virtualization Based Technology** > **Hypervisor Enforced Code Integri
 
 To apply the new policy on a domain-joined computer, either restart or run `gpupdate /force` in an elevated Command Prompt.
 
+### [:::image type="icon" source="../images/icons/registry.svg" border="false"::: **Registry**](#tab/reg)
+
 ### Use registry keys to enable memory integrity
 
 Set the following registry keys to enable memory integrity. These keys provide similar set of configuration options provided by Group Policy
@@ -85,74 +93,78 @@ reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorE
 
 If you want to customize the preceding recommended settings, use the following registry keys.
 
-**To enable VBS only (no memory integrity)**
+- To enable VBS only (no memory integrity):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /t REG_DWORD /d 1 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /t REG_DWORD /d 1 /f
+    ```
 
-**To enable VBS and require Secure boot only (value 1)**
+- To enable VBS and require Secure boot only (value 1):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 1 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 1 /f
+    ```
 
-**To enable VBS with Secure Boot and DMA protection (value 3)**
+- To enable VBS with Secure Boot and DMA protection (value 3):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 3 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /t REG_DWORD /d 3 /f
+    ```
 
-**To enable VBS without UEFI lock (value 0)**
+- To enable VBS without UEFI lock (value 0):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 0 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 0 /f
+    ```
 
-**To enable VBS with UEFI lock (value 1)**
+- To enable VBS with UEFI lock (value 1):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 1 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Locked" /t REG_DWORD /d 1 /f
+    ```
 
-**To enable memory integrity**
+- To enable memory integrity:
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 1 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 1 /f
+    ```
 
-**To enable memory integrity without UEFI lock (value 0)**
+- To enable memory integrity without UEFI lock (value 0):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Locked" /t REG_DWORD /d 0 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Locked" /t REG_DWORD /d 0 /f
+    ```
 
-**To enable memory integrity with UEFI lock (value 1)**
+- To enable memory integrity with UEFI lock (value 1):
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Locked" /t REG_DWORD /d 1 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Locked" /t REG_DWORD /d 1 /f
+    ```
 
-**To enable VBS (and memory integrity) in mandatory mode**
+- To enable VBS (and memory integrity) in mandatory mode:
 
-```cmd
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Mandatory" /t REG_DWORD /d 1 /f
-```
+    ```cmd
+    reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "Mandatory" /t REG_DWORD /d 1 /f
+    ```
 
-The **Mandatory** setting prevents the OS loader from continuing to boot in case the Hypervisor, Secure Kernel or one of their dependent modules fails to load.
+    The **Mandatory** setting prevents the OS loader from continuing to boot in case the Hypervisor, Secure Kernel or one of their dependent modules fails to load.
 
-> [!IMPORTANT]
-> Special care should be used before enabling this mode, since, in case of any failure of the virtualization modules, the system will refuse to boot.
+    > [!IMPORTANT]
+    > Special care should be used before enabling this mode, since, in case of any failure of the virtualization modules, the system will refuse to boot.
 
-**To gray out the memory integrity UI and display the message "This setting is managed by your administrator"**
-```cmd
-reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /f
-```
+- To gray out the memory integrity UI and display the message "This setting is managed by your administrator":
 
-**To let memory integrity UI behave normally (Not grayed out)**
-```cmd
-reg add HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /t REG_DWORD /d 2 /f
-```
+    ```cmd
+    reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /f
+    ```
+
+- To let memory integrity UI behave normally (Not grayed out):
+
+    ```cmd
+    reg add HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /t REG_DWORD /d 2 /f
+    ```
+
+### [:::image type="icon" source="../images/icons/app-control.svg" border="false"::: **App Control**](#tab/appcontrol)
 
 ### Enable memory integrity using App Control for Business
 
diff --git a/windows/security/images/icons/app-control.svg b/windows/security/images/icons/app-control.svg
new file mode 100644
index 0000000000..95b5dd5100
--- /dev/null
+++ b/windows/security/images/icons/app-control.svg
@@ -0,0 +1,19 @@
+<svg width="18" height="18" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" id="FxSymbol0-02e">
+  <defs>
+    <linearGradient id="paint0_linear" x1="9" y1="17.293" x2="9" y2=".707" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#005ba1" />
+      <stop offset=".174" stop-color="#0861a8" />
+      <stop offset=".443" stop-color="#1e71ba" />
+      <stop offset=".772" stop-color="#418bd7" />
+      <stop offset="1" stop-color="#5ea0ef" />
+    </linearGradient>
+  </defs>
+  <path d="M.707 5.683h4.976V.707H1.4a.691.691 0 0 0-.693.693Zm.693 11.61h4.283v-4.976H.707V16.6a.691.691 0 0 0 .693.693Zm-.691-5.8h4.974V6.512H.707ZM12.317.707v4.976h4.976V1.4A.691.691 0 0 0 16.6.707ZM6.512 5.683h4.976V.707H6.512Z" fill="url(#paint0_linear)" />
+  <path d="M6.5 6.529h10.721v10.1a.626.626 0 0 1-.626.626H6.5V6.529Z" fill="#76bc2d" />
+  <rect x="7.266" y="9.861" width="5.403" height="1.407" rx=".398" fill="#365615" />
+  <rect x="12.518" y="9.861" width="3.945" height="1.407" rx=".398" fill="#b4ec36" />
+  <path d="M13.047 9.761v1.469a.334.334 0 0 1-.334.334.333.333 0 0 1-.334-.334V9.761a.334.334 0 0 1 .334-.334.335.335 0 0 1 .334.334Z" class="msportalfx-svg-c01" />
+  <rect x="7.266" y="12.298" width="2.403" height="1.407" rx=".398" fill="#365615" />
+  <path d="M9.779 12.3h6.287a.4.4 0 0 1 .4.4v.612a.4.4 0 0 1-.4.4H9.779V12.3Z" fill="#b4ec36" />
+  <path d="M9.805 12.274v1.469a.334.334 0 0 1-.334.334.334.334 0 0 1-.334-.334v-1.469a.333.333 0 0 1 .334-.334.333.333 0 0 1 .334.334Z" class="msportalfx-svg-c01" />
+</svg>
diff --git a/windows/security/images/icons/security-app.svg b/windows/security/images/icons/security-app.svg
new file mode 100644
index 0000000000..8095201e57
--- /dev/null
+++ b/windows/security/images/icons/security-app.svg
@@ -0,0 +1,24 @@
+<svg width="18" height="18" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M16 0.667053C18.0667 0.667053 19.8667 1.26705 21.2667 2.26705C23.5333 3.80038 25.1333 4.60039 29.7333 4.66705C30.2666 4.66705 30.7333 5.13372 30.7333 5.66705V12.267C30.7333 13.3337 30.6 14.3337 30.4667 15.3337H16V0.667053Z" fill="url(#paint0_linear_279_15108)"/>
+<path d="M1.59885 15.3337C1.39976 14.3337 1.33337 13.267 1.33337 12.267V5.66705C1.33337 5.13372 1.73156 4.66705 2.32885 4.66705C6.90804 4.60039 8.50081 3.80038 10.7572 2.26705C12.0845 1.26705 13.9427 0.667053 16 0.667053V15.3337H1.59885Z" fill="url(#paint1_linear_279_15108)"/>
+<path d="M16 15.3337V31.2004C15.8 31.2004 15.6666 31.1337 15.4666 31.0671C7.86663 26.6671 2.86664 21.8004 1.59998 15.3337H16Z" fill="url(#paint2_linear_279_15108)"/>
+<path d="M16 31.2004V15.3337H30.4C29.2 21.8004 24.1333 26.6671 16.5333 31.0671C16.3333 31.1337 16.2 31.2004 16 31.2004Z" fill="url(#paint3_linear_279_15108)"/>
+<defs>
+<linearGradient id="paint0_linear_279_15108" x1="27.7337" y1="17.1627" x2="17.1076" y2="1.33579" gradientUnits="userSpaceOnUse">
+<stop stop-color="#0078D4"/>
+<stop offset="1" stop-color="#1493DF"/>
+</linearGradient>
+<linearGradient id="paint1_linear_279_15108" x1="13.7316" y1="16.6376" x2="5.60521" y2="2.62604" gradientUnits="userSpaceOnUse">
+<stop stop-color="#28AFEA"/>
+<stop offset="1" stop-color="#3CCBF4"/>
+</linearGradient>
+<linearGradient id="paint2_linear_279_15108" x1="17.089" y1="30.6523" x2="8.58889" y2="13.8265" gradientUnits="userSpaceOnUse">
+<stop stop-color="#0669BC"/>
+<stop offset="1" stop-color="#0078D4"/>
+</linearGradient>
+<linearGradient id="paint3_linear_279_15108" x1="25.7133" y1="26.9929" x2="19.8912" y2="16.7469" gradientUnits="userSpaceOnUse">
+<stop stop-color="#114A8B"/>
+<stop offset="1" stop-color="#0C59A4"/>
+</linearGradient>
+</defs>
+</svg>

From b035551027b129806a2f58d8dcf30ae674889762 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Thu, 31 Oct 2024 10:40:56 -0600
Subject: [PATCH 116/128] Enable memory integrity using Windows Security and
 registry keys

---
 ...tualization-based-protection-of-code-integrity.md | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
index e33b814daf..76e3f535ac 100644
--- a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
+++ b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
@@ -32,15 +32,9 @@ appliesto:
 
 To enable memory integrity on Windows devices with supporting hardware throughout an enterprise, use any of these options:
 
-- [Windows Security settings](#windows-security)
-- [Microsoft Intune (or another MDM provider)](#enable-memory-integrity-using-intune)
-- [Group Policy](#enable-memory-integrity-using-group-policy)
-- [Microsoft Configuration Manager](https://cloudblogs.microsoft.com/enterprisemobility/2015/10/30/managing-windows-10-device-guard-with-configuration-manager/)
-- [Registry](#use-registry-keys-to-enable-memory-integrity)
-
 ### [:::image type="icon" source="../images/icons/security-app.svg" border="false"::: **Security**](#tab/security)
 
-### Windows Security
+### Enable memory integrity using Windows Security
 
 **Memory integrity** can be turned on in **Windows Security** settings and found at **Windows Security** > **Device security** > **Core isolation details** > **Memory integrity**. For more information, see [Device protection in Windows Security](https://support.microsoft.com/help/4096339/windows-10-device-protection-in-windows-defender-security-center).
 
@@ -69,7 +63,7 @@ To apply the new policy on a domain-joined computer, either restart or run `gpup
 
 ### [:::image type="icon" source="../images/icons/registry.svg" border="false"::: **Registry**](#tab/reg)
 
-### Use registry keys to enable memory integrity
+### Enable memory integrity using registry
 
 Set the following registry keys to enable memory integrity. These keys provide similar set of configuration options provided by Group Policy
 
@@ -177,6 +171,8 @@ You can use App Control policy to turn on memory integrity using any of the foll
 > [!NOTE]
 > If your App Control policy is set to turn memory integrity on, it will be turned on even if the policy is in audit mode.
 
+---
+
 ### Validate enabled VBS and memory integrity features
 
 #### Use Win32_DeviceGuard WMI class

From f37adff81f6e96e41cf0b39f16a06c26dc39e556 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Thu, 31 Oct 2024 11:08:55 -0600
Subject: [PATCH 117/128] Some more changes

---
 ...tion-based-protection-of-code-integrity.md | 134 ++++++++++--------
 1 file changed, 75 insertions(+), 59 deletions(-)

diff --git a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
index 76e3f535ac..5250983d66 100644
--- a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
+++ b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
@@ -53,7 +53,7 @@ Use the **Virtualization Based Technology** > **Hypervisor Enforced Code Integri
 1. Use Group Policy Editor (gpedit.msc) to either edit an existing GPO or create a new one.
 1. Navigate to **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard**.
 1. Double-click **Turn on Virtualization Based Security**.
-1. Select **Enabled** and under **Virtualization Based Protection of Code Integrity**, select **Enabled without UEFI lock**. Only select **Enabled with UEFI lock** if you want to prevent memory integrity from being disabled remotely or by policy update. Once enabled with UEFI lock, you must have access to the UEFI BIOS menu to turn off Secure Boot if you want to turn off memory integrity.
+1. Select **Enabled**. Under **Virtualization Based Protection of Code Integrity**, select **Enabled without UEFI lock**. Only select **Enabled with UEFI lock** if you want to prevent memory integrity from being disabled remotely or by policy update. Once enabled with UEFI lock, you must have access to the UEFI BIOS menu to turn off Secure Boot if you want to turn off memory integrity.
 
    ![Enable memory integrity using Group Policy.](images/enable-hvci-gp.png)
 
@@ -146,7 +146,7 @@ If you want to customize the preceding recommended settings, use the following r
     > [!IMPORTANT]
     > Special care should be used before enabling this mode, since, in case of any failure of the virtualization modules, the system will refuse to boot.
 
-- To gray out the memory integrity UI and display the message "This setting is managed by your administrator":
+- To gray out the memory integrity UI and display the message `This setting is managed by your administrator`:
 
     ```cmd
     reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity /v "WasEnabledBy" /f
@@ -188,82 +188,98 @@ Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\D
 
 The output of this command provides details of the available hardware-based security features and those features that are currently enabled.
 
-##### AvailableSecurityProperties
+- **InstanceIdentifier**: A string that is unique to a particular device and set by WMI.
 
-This field helps to enumerate and report state on the relevant security properties for VBS and memory integrity.
+- **Version**: This field lists the version of this WMI class. The only valid value now is **1.0**.
 
-| Value | Description                                             |
-|-------|---------------------------------------------------------|
-| **0** | If present, no relevant properties exist on the device. |
-| **1** | If present, hypervisor support is available.            |
-| **2** | If present, Secure Boot is available.                   |
-| **3** | If present, DMA protection is available.                |
-| **4** | If present, Secure Memory Overwrite is available.       |
-| **5** | If present, NX protections are available.               |
-| **6** | If present, SMM mitigations are available.              |
-| **7** | If present, MBEC/GMET is available.                     |
-| **8** | If present, APIC virtualization is available.           |
+- **AvailableSecurityProperties**: This field helps to enumerate and report state on the relevant security properties for VBS and memory integrity.
 
-##### InstanceIdentifier
+    | Value | Description                                             |
+    |-------|---------------------------------------------------------|
+    | **0** | If present, no relevant properties exist on the device. |
+    | **1** | If present, hypervisor support is available.            |
+    | **2** | If present, Secure Boot is available.                   |
+    | **3** | If present, DMA protection is available.                |
+    | **4** | If present, Secure Memory Overwrite is available.       |
+    | **5** | If present, NX protections are available.               |
+    | **6** | If present, SMM mitigations are available.              |
+    | **7** | If present, MBEC/GMET is available.                     |
+    | **8** | If present, APIC virtualization is available.           |
 
-A string that is unique to a particular device and set by WMI.
+- **CodeIntegrityPolicyEnforcementStatus**: This field indicates the code integrity policy enforcement status.
 
-##### RequiredSecurityProperties
+    | Value | Description |
+    |-------|-------------|
+    | **0** | Off         |
+    | **1** | Audit.      |
+    | **2** | Enforced.   |
 
-This field describes the required security properties to enable VBS.
+- **RequiredSecurityProperties**: This field describes the required security properties to enable VBS.
 
-| Value | Description                                    |
-|-------|------------------------------------------------|
-| **0** | Nothing is required.                           |
-| **1** | If present, hypervisor support is needed.      |
-| **2** | If present, Secure Boot is needed.             |
-| **3** | If present, DMA protection is needed.          |
-| **4** | If present, Secure Memory Overwrite is needed. |
-| **5** | If present, NX protections are needed.         |
-| **6** | If present, SMM mitigations are needed.        |
-| **7** | If present, MBEC/GMET is needed.               |
+    | Value | Description                                    |
+    |-------|------------------------------------------------|
+    | **0** | Nothing is required.                           |
+    | **1** | If present, hypervisor support is needed.      |
+    | **2** | If present, Secure Boot is needed.             |
+    | **3** | If present, DMA protection is needed.          |
+    | **4** | If present, Secure Memory Overwrite is needed. |
+    | **5** | If present, NX protections are needed.         |
+    | **6** | If present, SMM mitigations are needed.        |
+    | **7** | If present, MBEC/GMET is needed.               |
 
-##### SecurityServicesConfigured
+- **SecurityServicesConfigured**: This field indicates whether Credential Guard or memory integrity is configured.
 
-This field indicates whether Credential Guard or memory integrity is configured.
+    | Value | Description                                           |
+    |-------|-------------------------------------------------------|
+    | **0** | No services are configured.                           |
+    | **1** | If present, Credential Guard is configured.           |
+    | **2** | If present, memory integrity is configured.           |
+    | **3** | If present, System Guard Secure Launch is configured. |
+    | **4** | If present, SMM Firmware Measurement is configured.   |
+    | **5** | If present, Kernel-mode Hardware-enforced Stack Protection is configured. |
+    | **6** | If present, Kernel-mode Hardware-enforced Stack Protection is configured in Audit mode. |
+    | **7** | If present, Hypervisor-Enforced Paging Translation is configured. |
 
-| Value | Description                                           |
-|-------|-------------------------------------------------------|
-| **0** | No services are configured.                           |
-| **1** | If present, Credential Guard is configured.           |
-| **2** | If present, memory integrity is configured.           |
-| **3** | If present, System Guard Secure Launch is configured. |
-| **4** | If present, SMM Firmware Measurement is configured.   |
+- **SecurityServicesRunning**: This field indicates whether Credential Guard or memory integrity is running.
 
-##### SecurityServicesRunning
+    | Value | Description                                        |
+    |-------|----------------------------------------------------|
+    | **0** | No services running.                               |
+    | **1** | If present, Credential Guard is running.           |
+    | **2** | If present, memory integrity is running.           |
+    | **3** | If present, System Guard Secure Launch is running. |
+    | **4** | If present, SMM Firmware Measurement is running.   |
+    | **5** | If present, Kernel-mode Hardware-enforced Stack Protection is running. |
+    | **6** | If present, Kernel-mode Hardware-enforced Stack Protection is running in Audit mode. |
+    | **7** | If present, Hypervisor-Enforced Paging Translation is running. |
 
-This field indicates whether Credential Guard or memory integrity is running.
+- **SmmIsolationLevel**: This field indicates the SMM isolation level.
 
-| Value | Description                                        |
-|-------|----------------------------------------------------|
-| **0** | No services running.                               |
-| **1** | If present, Credential Guard is running.           |
-| **2** | If present, memory integrity is running.           |
-| **3** | If present, System Guard Secure Launch is running. |
-| **4** | If present, SMM Firmware Measurement is running.   |
+- **UsermodeCodeIntegrityPolicyEnforcementStatus**: This field indicates the user mode code integrity policy enforcement status.
 
-##### Version
+    | Value | Description |
+    |-------|-------------|
+    | **0** | Off         |
+    | **1** | Audit.      |
+    | **2** | Enforced.   |
 
-This field lists the version of this WMI class. The only valid value now is **1.0**.
+- **VirtualizationBasedSecurityStatus**: This field indicates whether VBS is enabled and running.
 
-##### VirtualizationBasedSecurityStatus
+    | Value | Description                     |
+    |-------|---------------------------------|
+    | **0** | VBS isn't enabled.              |
+    | **1** | VBS is enabled but not running. |
+    | **2** | VBS is enabled and running.     |
 
-This field indicates whether VBS is enabled and running.
+- **VirtualMachineIsolation**: This field indicates whether virtual machine isolation is enabled.
 
-| Value | Description                     |
-|-------|---------------------------------|
-| **0** | VBS isn't enabled.              |
-| **1** | VBS is enabled but not running. |
-| **2** | VBS is enabled and running.     |
+- **VirtualMachineIsolationProperties**: This field indicates the set of virtual machine isolation properties that are available.
 
-##### PSComputerName
-
-This field lists the computer name. All valid values for computer name.
+    | Value | Description                   |
+    |-------|-------------------------------|
+    | **1** | AMD SEV-SNP                   |
+    | **2** | Virtualization-based Security |
+    | **3** | Intel TDX                     |
 
 #### Use msinfo32.exe
 

From d20cb1449bb432bdcb6964ce5405163fcde02d48 Mon Sep 17 00:00:00 2001
From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Date: Thu, 31 Oct 2024 11:09:33 -0600
Subject: [PATCH 118/128] Minor change

---
 .../enable-virtualization-based-protection-of-code-integrity.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
index 5250983d66..f89ec506b2 100644
--- a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
+++ b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md
@@ -32,7 +32,7 @@ appliesto:
 
 To enable memory integrity on Windows devices with supporting hardware throughout an enterprise, use any of these options:
 
-### [:::image type="icon" source="../images/icons/security-app.svg" border="false"::: **Security**](#tab/security)
+### [:::image type="icon" source="../images/icons/security-app.svg" border="false"::: **Windows Security**](#tab/security)
 
 ### Enable memory integrity using Windows Security
 

From 0d70be7b637a668740a5c0beeb04f677da750f6d Mon Sep 17 00:00:00 2001
From: Gary Moore <5432776+garycentric@users.noreply.github.com>
Date: Thu, 31 Oct 2024 11:02:38 -0700
Subject: [PATCH 119/128] Correct indentation and also, thereby, correct
 numbering

---
 .../access-control/local-accounts.md          | 36 +++++++++----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/windows/security/identity-protection/access-control/local-accounts.md b/windows/security/identity-protection/access-control/local-accounts.md
index 074d25a3f4..102e723645 100644
--- a/windows/security/identity-protection/access-control/local-accounts.md
+++ b/windows/security/identity-protection/access-control/local-accounts.md
@@ -231,27 +231,27 @@ The following table shows the Group Policy and registry settings that are used t
 1. In the details pane, right-click &lt;**gpo\_name**&gt;, and &gt; **Edit**
 1. Ensure that UAC is enabled and that UAC restrictions apply to the default Administrator account by following these steps:
 
-  - Navigate to the Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\, and &gt; **Security Options**
-  - Double-click **User Account Control: Run all administrators in Admin Approval Mode** &gt; **Enabled** &gt; **OK**
-  - Double-click **User Account Control: Admin Approval Mode for the Built-in Administrator account** &gt; **Enabled** &gt; **OK**
+   - Navigate to the Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\, and &gt; **Security Options**
+   - Double-click **User Account Control: Run all administrators in Admin Approval Mode** &gt; **Enabled** &gt; **OK**
+   - Double-click **User Account Control: Admin Approval Mode for the Built-in Administrator account** &gt; **Enabled** &gt; **OK**
 
 1. Ensure that the local account restrictions are applied to network interfaces by following these steps:
 
-  - Navigate to *Computer Configuration\Preferences and Windows Settings*, and > **Registry**
-  - Right-click **Registry**, and &gt; **New** &gt; **Registry Item**
-  - In the **New Registry Properties** dialog box, on the **General** tab, change the setting in the **Action** box to **Replace**
-  - Ensure that the **Hive** box is set to **HKEY_LOCAL_MACHINE**
-  - Select (**…**), browse to the following location for **Key Path** &gt; **Select** for: `SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System`
-  - In the **Value name** area, type `LocalAccountTokenFilterPolicy`
-  - In the **Value type** box, from the drop-down list, select **REG_DWORD** to change the value
-  - In the **Value data** box, ensure that the value is set to **0**
-  - Verify this configuration, and &gt; **OK**
+   - Navigate to *Computer Configuration\Preferences and Windows Settings*, and > **Registry**
+   - Right-click **Registry**, and &gt; **New** &gt; **Registry Item**
+   - In the **New Registry Properties** dialog box, on the **General** tab, change the setting in the **Action** box to **Replace**
+   - Ensure that the **Hive** box is set to **HKEY_LOCAL_MACHINE**
+   - Select (**…**), browse to the following location for **Key Path** &gt; **Select** for: `SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System`
+   - In the **Value name** area, type `LocalAccountTokenFilterPolicy`
+   - In the **Value type** box, from the drop-down list, select **REG_DWORD** to change the value
+   - In the **Value data** box, ensure that the value is set to **0**
+   - Verify this configuration, and &gt; **OK**
 
 1. Link the GPO to the first **Workstations** organizational unit (OU) by doing the following:
 
-  - Navigate to the `*Forest*\<Domains>\*Domain*\*OU*` path
-  - Right-click the **Workstations > Link an existing GPO**
-  - Select the GPO that you created, and &gt; **OK**
+   - Navigate to the `*Forest*\<Domains>\*Domain*\*OU*` path
+   - Right-click the **Workstations > Link an existing GPO**
+   - Select the GPO that you created, and &gt; **OK**
 
 1. Test the functionality of enterprise applications on the workstations in that first OU and resolve any issues caused by the new policy
 1. Create links to all other OUs that contain workstations
@@ -292,9 +292,9 @@ The following table shows the Group Policy settings that are used to deny networ
 1. Select **Add User or Group**, type **Local account and member of Administrators group**, and &gt; **OK**
 1. Link the GPO to the first **Workstations** OU as follows:
 
-  - Navigate to the &lt;*Forest*&gt;\\Domains\\&lt;*Domain*&gt;\\OU path
-  - Right-click the **Workstations** OU, and &gt; **Link an existing GPO**
-  - Select the GPO that you created, and &gt; **OK**
+   - Navigate to the &lt;*Forest*&gt;\\Domains\\&lt;*Domain*&gt;\\OU path
+   - Right-click the **Workstations** OU, and &gt; **Link an existing GPO**
+   - Select the GPO that you created, and &gt; **OK**
 
 1. Test the functionality of enterprise applications on the workstations in that first OU and resolve any issues caused by the new policy
 1. Create links to all other OUs that contain workstations

From c15356ba197fd491f542305bf94b8289fca2f3b5 Mon Sep 17 00:00:00 2001
From: Gary Moore <5432776+garycentric@users.noreply.github.com>
Date: Thu, 31 Oct 2024 11:05:32 -0700
Subject: [PATCH 120/128] Add lightbox to aid legibility

---
 .../hello-for-business/deploy/hybrid-cloud-kerberos-trust.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md
index 6a73849697..9b2e6325b4 100644
--- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md
+++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md
@@ -47,7 +47,7 @@ When Microsoft Entra Kerberos is enabled in an Active Directory domain, an *Azur
   > [!NOTE]
   > Similar rules and restrictions used for RODCs apply to the AzureADKerberos computer object. For example, users that are direct or indirect members of priviliged built-in security groups won't be able to use cloud Kerberos trust.
 
-:::image type="content" source="images/azuread-kerberos-object.png" alt-text="Screenshot of the Active Directory Users and Computers console, showing the computer object representing the Microsoft Entra Kerberos server.":::
+:::image type="content" source="images/azuread-kerberos-object.png" alt-text="Screenshot of the Active Directory Users and Computers console, showing the computer object representing the Microsoft Entra Kerberos server." lightbox="images/azuread-kerberos-object.png":::
 
 For more information about how Microsoft Entra Kerberos works with Windows Hello for Business cloud Kerberos trust, see [Windows Hello for Business authentication technical deep dive](../how-it-works-authentication.md#microsoft-entra-hybrid-join-authentication-using-cloud-kerberos-trust).
 

From 17859b50a12d2a6a3a738b306d15bd3022a199f6 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 31 Oct 2024 15:55:35 -0700
Subject: [PATCH 121/128] Update mcc-ent-prerequisites.md

Add in trusted launch callout (not sure why it didn't stay in from last PR https://github.com/MicrosoftDocs/windows-docs-pr/pull/10322)
---
 windows/deployment/do/mcc-ent-prerequisites.md | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 3252fa77cb..e32c143f2f 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -44,14 +44,12 @@ This article details the requirements and recommended specifications for using M
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the latest cumulative update applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
-
-- The Windows host machine must support nested virtualization.
+- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch-portal?tabs=portal%2Cportal3%2Cportal2).
 - The Windows host machine must have [WSL 2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
 
 ### Additional requirements for Linux host machines
 
 - The Linux host machine must be using one of the following operating systems:
-
     - Ubuntu 22.04
     - Red Hat Enterprise Linux (RHEL) 8.* or 9.*
         - If using RHEL, the default container engine (Podman) must be replaced with [Moby](https://github.com/moby/moby#readme)

From cdf6c43a043a5a5b7b14759d529727c8ff693a6c Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Thu, 31 Oct 2024 16:01:11 -0700
Subject: [PATCH 122/128] Update mcc-ent-prerequisites.md

Fixing link to Trusted Launch docs
---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index e32c143f2f..1793f5be78 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -44,7 +44,7 @@ This article details the requirements and recommended specifications for using M
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the latest cumulative update applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
-- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch-portal?tabs=portal%2Cportal3%2Cportal2).
+- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](https://learn.microsoft.com/azure/virtual-machines/trusted-launch-portal).
 - The Windows host machine must have [WSL 2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
 
 ### Additional requirements for Linux host machines

From f436b65fe3acd995cca9f58f76540e3350c769cd Mon Sep 17 00:00:00 2001
From: Aaron Czechowski <aczechowski@users.noreply.github.com>
Date: Thu, 31 Oct 2024 16:17:57 -0700
Subject: [PATCH 123/128] fix link

---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index 1793f5be78..ff48d18c87 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -44,7 +44,7 @@ This article details the requirements and recommended specifications for using M
 - The Windows host machine must be using Windows 11 or Windows Server 2022 with the latest cumulative update applied.
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
-- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](https://learn.microsoft.com/azure/virtual-machines/trusted-launch-portal).
+- The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](/azure/virtual-machines/trusted-launch-portal).
 - The Windows host machine must have [WSL 2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
 
 ### Additional requirements for Linux host machines

From df133b25fa8ff1d7675a9f03250d44d49b9f1224 Mon Sep 17 00:00:00 2001
From: Aaron Czechowski <aczechowski@users.noreply.github.com>
Date: Thu, 31 Oct 2024 17:26:21 -0700
Subject: [PATCH 124/128] fix links

---
 windows/deployment/customize-boot-image.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/windows/deployment/customize-boot-image.md b/windows/deployment/customize-boot-image.md
index 31420e8890..e473fdf824 100644
--- a/windows/deployment/customize-boot-image.md
+++ b/windows/deployment/customize-boot-image.md
@@ -23,7 +23,7 @@ appliesto:
 
 The Windows PE (WinPE) boot images that are included with the Windows ADK have a minimal number of features and drivers. However the boot images can be customized by adding drivers, optional components, and applying the latest cumulative update.
 
-Microsoft recommends updating Windows PE boot images with the latest cumulative update for maximum security and protection. The latest cumulative updates may also resolve known issues. For example, the Windows PE boot image can be updated with the latest cumulative update to address the BlackLotus UEFI bootkit vulnerability as documented in [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://prod.support.services.microsoft.com/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d) and [CVE-2023-24932](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932).
+Microsoft recommends updating Windows PE boot images with the latest cumulative update for maximum security and protection. The latest cumulative updates may also resolve known issues. For example, the Windows PE boot image can be updated with the latest cumulative update to address the BlackLotus UEFI bootkit vulnerability as documented in [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://support.microsoft.com/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d) and [CVE-2023-24932](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932).
 
 > [!TIP]
 >
@@ -332,7 +332,7 @@ The cumulative update installed later in this walkthrough doesn't affect drivers
     **Example**:
 
     ```powershell
-     Add-WindowsPackage -PackagePath "C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Preinstallation Environment\amd64\WinPE_OCs\en-us\WinPE-Scripting_en-us.cab" -Path "C:\Mount" -Verbose   
+     Add-WindowsPackage -PackagePath "C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Preinstallation Environment\amd64\WinPE_OCs\en-us\WinPE-Scripting_en-us.cab" -Path "C:\Mount" -Verbose
     ```
 
     These examples assume a 64-bit boot image. If a different architecture is being used, then adjust the paths accordingly.
@@ -668,7 +668,7 @@ For more information, see [copy](/windows-server/administration/windows-commands
 
 This step doesn't update or change the boot image. However, it makes sure that the latest bootmgr boot files are available to the Windows ADK when creating bootable media via the Windows ADK. When these files are updated in the Windows ADK, products that use the Windows ADK to create bootable media, such as **Microsoft Deployment Toolkit (MDT)**, also have access to the updated bootmgr boot files.
 
-In particular, this step is needed when addressing the BlackLotus UEFI bootkit vulnerability as documented in [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://prod.support.services.microsoft.com/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d) and [CVE-2023-24932](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932).
+In particular, this step is needed when addressing the BlackLotus UEFI bootkit vulnerability as documented in [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://support.microsoft.com/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d) and [CVE-2023-24932](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932).
 
 > [!TIP]
 >
@@ -839,7 +839,7 @@ For more information, see [Modify a Windows image using DISM: Unmounting an imag
     ---
 
 1. Once the export has completed:
-  
+
     1. Delete the original updated boot image:
 
         ### [:::image type="icon" source="images/icons/powershell-18.svg"::: **PowerShell**](#tab/powershell)
@@ -1295,4 +1295,4 @@ For more information, see [Windows Server 2012 R2 Lifecycle](/lifecycle/products
 
 - [Create bootable Windows PE media: Update the Windows PE add-on for the Windows ADK](/windows-hardware/manufacture/desktop/winpe-create-usb-bootable-drive#update-the-windows-pe-add-on-for-the-windows-adk)
 - [Update Windows installation media with Dynamic Update: Update WinPE](/windows/deployment/update/media-dynamic-update#update-winpe)
-- [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932: Updating bootable media](https://prod.support.services.microsoft.com/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d?preview=true#updatebootable5025885)
+- [KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932: Updating bootable media](https://support.microsoft.com/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d)

From decb639ece8626e8bdb6ab956aba3867ce2aa9a5 Mon Sep 17 00:00:00 2001
From: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com>
Date: Fri, 1 Nov 2024 11:23:55 -0400
Subject: [PATCH 125/128] pencil edits

---
 windows/deployment/customize-boot-image.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/deployment/customize-boot-image.md b/windows/deployment/customize-boot-image.md
index e473fdf824..858a5e63bf 100644
--- a/windows/deployment/customize-boot-image.md
+++ b/windows/deployment/customize-boot-image.md
@@ -1,6 +1,6 @@
 ---
 title: Customize Windows PE boot images
-description: This article describes how to customize a Windows PE (WinPE) boot image including updating it with the latest cumulative update, adding drivers, and adding optional components.
+description: This article describes how to customize a Windows PE (WinPE) boot image, including updating it with the latest cumulative update, adding drivers, and adding optional components.
 ms.service: windows-client
 ms.localizationpriority: medium
 author: frankroj
@@ -29,7 +29,7 @@ Microsoft recommends updating Windows PE boot images with the latest cumulative
 >
 > The boot images from the [ADK 10.1.26100.1 (May 2024)](/windows-hardware/get-started/adk-install) and later already contain the cumulative update to address the BlackLotus UEFI bootkit vulnerability.
 
-This walkthrough describes how to customize a Windows PE boot image including updating with the latest cumulative update, adding drivers, and adding optional components. Additionally this walkthrough goes over how customizations in boot images affect several different popular products that utilize boot images, such as Microsoft Configuration Manager, Microsoft Deployment Toolkit (MDT), and Windows Deployment Services (WDS).
+This walkthrough describes how to customize a Windows PE boot image, including updating with the latest cumulative update, adding drivers, and adding optional components. Additionally this walkthrough goes over how customizations in boot images affect several different popular products that utilize boot images, such as Microsoft Configuration Manager, Microsoft Deployment Toolkit (MDT), and Windows Deployment Services (WDS).
 
 ## Prerequisites
 

From 8b51cf49e5e226f5cfbdcb5e1813928d7926f646 Mon Sep 17 00:00:00 2001
From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Date: Fri, 1 Nov 2024 10:16:15 -0700
Subject: [PATCH 126/128] fixing typo mcc-ent-edu-overview.md

---
 windows/deployment/do/mcc-ent-edu-overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md
index 70acb8886c..125aed12f4 100644
--- a/windows/deployment/do/mcc-ent-edu-overview.md
+++ b/windows/deployment/do/mcc-ent-edu-overview.md
@@ -65,7 +65,7 @@ See [Connected Cache node host machine requirements](mcc-ent-prerequisites.md) f
 |---|---|---|
 |Branch office|< 1 Gbps Peak| 500 Mbps => 1,800 GB </br></br> 250 Mbps => 900 GB </br></br> 100 Mbps => 360 GB </br></br> 50 Mbps => 180 GB|
 |Small to medium enterprises/Autopilot provisioning center (50 - 500 devices in a single location) |1 - 5 Gbps| 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB </br></br>1 Gbps => 3,600 GB|
-|Medium to large enterprises/Autopilot provisioning center (500 - 5,000 devices in a single location) |5 - 101 Gbps Peak|   9 Gbps => 32,400 GB </br></br> 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB|
+|Medium to large enterprises/Autopilot provisioning center (500 - 5,000 devices in a single location) |5 - 10 Gbps Peak|   9 Gbps => 32,400 GB </br></br> 5 Gbps => 18,000 GB </br></br>3 Gbps => 10,800 GB|
 
 ## Supported content types
 

From 34e1f08298a955f00e09b1447e6f15e6960a23a2 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 1 Nov 2024 14:07:30 -0700
Subject: [PATCH 127/128] Update mcc-ent-prerequisites.md

Add note that you need to be logged in to a local admin account to successfully install WSL
---
 windows/deployment/do/mcc-ent-prerequisites.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/deployment/do/mcc-ent-prerequisites.md b/windows/deployment/do/mcc-ent-prerequisites.md
index ff48d18c87..f30f503e31 100644
--- a/windows/deployment/do/mcc-ent-prerequisites.md
+++ b/windows/deployment/do/mcc-ent-prerequisites.md
@@ -45,7 +45,7 @@ This article details the requirements and recommended specifications for using M
     - Windows 11 must have [OS Build 22631.3296](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b) or later
     - Windows Server 2022 must have [OS Build 20348.2227](https://support.microsoft.com/topic/january-9-2024-kb5034129-os-build-20348-2227-6958a36f-efaf-4ef5-a576-c5931072a89a) or later
 - The Windows host machine must support nested virtualization. Ensure that any security settings that may restrict nested virtualization are not enabled, such as ["Trusted launch" in Azure VMs](/azure/virtual-machines/trusted-launch-portal).
-- The Windows host machine must have [WSL 2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by running the PowerShell command `wsl.exe --install --no-distribution`.
+- The Windows host machine must have [WSL 2 installed](/windows/wsl/install#install-wsl-command). You can install this on Windows 11 and Windows Server 2022 by logging on as a local administrator and running the PowerShell command `wsl.exe --install --no-distribution` in an elevated PowerShell window.
 
 ### Additional requirements for Linux host machines
 

From 8264bd85234b529e2b6c5a90cf00a28d817490d0 Mon Sep 17 00:00:00 2001
From: "Chris J. Lin" <36452239+chrisjlin@users.noreply.github.com>
Date: Fri, 1 Nov 2024 14:11:50 -0700
Subject: [PATCH 128/128] Update mcc-ent-troubleshooting.md

Added troubleshooting section for wsl install failure when not logged on as local admin
---
 windows/deployment/do/mcc-ent-troubleshooting.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/windows/deployment/do/mcc-ent-troubleshooting.md b/windows/deployment/do/mcc-ent-troubleshooting.md
index c10a74c802..0f5b02bc00 100644
--- a/windows/deployment/do/mcc-ent-troubleshooting.md
+++ b/windows/deployment/do/mcc-ent-troubleshooting.md
@@ -60,6 +60,10 @@ There are three types of installation log files:
 
 The Registered Task Transcript is usually the most useful for diagnosing the installation issue.
 
+### WSL2 fails to install with message "A specified logon session does not exist"
+
+If you are encountering this failure message when attempting to run the PowerShell command `wsl.exe --install --no-distribution` on your Windows host machine, verify that you are logged on as a local administrator and running the command from an elevated PowerShell window.
+
 ### Updating the WSL2 kernel
 
 If the Connected Cache installation is failing due to WSL-related issues, try running `wsl.exe --update` to get the latest version of the WSL kernel.