From 13db6746453980987067511749be3f37849b3704 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 29 Jan 2018 11:59:08 -0800 Subject: [PATCH 001/106] first draft --- ...man-protocol-over-ikev2-vpn-connections.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md new file mode 100644 index 0000000000..aa39f965db --- /dev/null +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -0,0 +1,48 @@ +--- +title: How to configure Diffie Hellman protocol over IKEv2 VPN connections (Windows 10) +description: tbd +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security, networking +author: jdeckerms +ms.localizationpriority: high +ms.date: 07/27/2017 +--- + +# How to configure Diffie Hellman protocol over IKEv2 VPN connections + +**Applies to** +- Windows 10 +- Windows Server + +In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. +To secure VPN connections, update the VPN configuration by running VPN cmdlets with the CustomPolicy parameter. + +For VPN servers, configure each tunnel type. That is, if you update the IKEv2 tunnel configuration, all IKE exchanges on IKEv2 tunnel use the secure configuration. + +For example, on a VPN server that runs Windows Server 2016, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): + +```powershell +Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy +``` + +On a VPN server that runs Windows Server 2012 R2, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx): + +```powershell +Set-VpnServerIPsecConfiguration -CustomPolicy +``` + +For VPN clients, configure each VPN connection. + +For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps): + +```powershell +Set-VpnConnectionIPsecConfiguration +``` + +On a VPN server that runs Windows Server 2012 R2, run [Set-VpnConnectionIPsecConfiguration (version 3.0)](https://technet.microsoft.com/library/dn262642(v=wps.630).aspx): + +```powershell +Set-VpnConnectionIPsecConfiguration +``` From dde64c7ffdbd19c1eabb5ab8494979fc3a062bec Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 29 Jan 2018 12:06:51 -0800 Subject: [PATCH 002/106] added toc --- windows/access-protection/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/access-protection/TOC.md b/windows/access-protection/TOC.md index acb2519e1d..4eb52d5725 100644 --- a/windows/access-protection/TOC.md +++ b/windows/access-protection/TOC.md @@ -65,6 +65,7 @@ ### [VPN auto-triggered profile options](vpn\vpn-auto-trigger-profile.md) ### [VPN security features](vpn\vpn-security-features.md) ### [VPN profile options](vpn\vpn-profile-options.md) +### [How to configure Diffie Hellman protocol over IKEv2 VPN connections](vpn\how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md) ### [How to use single sign-on (SSO) over VPN and Wi-Fi connections](vpn\how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md) ### [Windows 10 credential theft mitigation guide abstract](windows-credential-theft-mitigation-guide-abstract.md) From 039dee8c1656681de86fd928ff7708a7206f19c5 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 29 Jan 2018 12:18:51 -0800 Subject: [PATCH 003/106] changed metadata --- ...-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index aa39f965db..80b3df4da6 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -1,13 +1,13 @@ --- title: How to configure Diffie Hellman protocol over IKEv2 VPN connections (Windows 10) -description: tbd +description: Explains how to secure VPN connections for Diffie Hellman Group 2 ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security, networking -author: jdeckerms -ms.localizationpriority: high -ms.date: 07/27/2017 +author: shortpatti +ms.localizationpriority: medium +ms.date: 01/29/2018 --- # How to configure Diffie Hellman protocol over IKEv2 VPN connections From 2090a58abd83d1047bb2fbaabff31bd7c3ae5282 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 29 Jan 2018 13:32:49 -0800 Subject: [PATCH 004/106] revsied server decsription --- ...ure-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index 80b3df4da6..aece297230 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -19,7 +19,7 @@ ms.date: 01/29/2018 In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. To secure VPN connections, update the VPN configuration by running VPN cmdlets with the CustomPolicy parameter. -For VPN servers, configure each tunnel type. That is, if you update the IKEv2 tunnel configuration, all IKE exchanges on IKEv2 tunnel use the secure configuration. +For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. For example, on a VPN server that runs Windows Server 2016, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): @@ -33,8 +33,7 @@ On a VPN server that runs Windows Server 2012 R2, run [Set-VpnServerIPsecConfigu Set-VpnServerIPsecConfiguration -CustomPolicy ``` -For VPN clients, configure each VPN connection. - +For VPN client, youy need to configure each VPN connection. For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps): ```powershell From 90fa997a6565656aa924e89e9bd1585ca4f1ead1 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 2 Feb 2018 12:53:52 -0800 Subject: [PATCH 005/106] revised examples --- ...hellman-protocol-over-ikev2-vpn-connections.md | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index aece297230..c5e91f4974 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -13,11 +13,11 @@ ms.date: 01/29/2018 # How to configure Diffie Hellman protocol over IKEv2 VPN connections **Applies to** -- Windows 10 +- Windows 10, Windows 8.1, Windows 8, Windows 7 - Windows Server In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. -To secure VPN connections, update the VPN configuration by running VPN cmdlets with the CustomPolicy parameter. +To secure the connections, update the configuration of VPN servers and clients by running VPN cmdlets. For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. @@ -33,15 +33,10 @@ On a VPN server that runs Windows Server 2012 R2, run [Set-VpnServerIPsecConfigu Set-VpnServerIPsecConfiguration -CustomPolicy ``` -For VPN client, youy need to configure each VPN connection. -For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps): +For VPN client, you need to configure each VPN connection. +For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps) and specify the name of the connection: ```powershell -Set-VpnConnectionIPsecConfiguration +Set-VpnConnectionIPsecConfiguration -ConnectionName ``` -On a VPN server that runs Windows Server 2012 R2, run [Set-VpnConnectionIPsecConfiguration (version 3.0)](https://technet.microsoft.com/library/dn262642(v=wps.630).aspx): - -```powershell -Set-VpnConnectionIPsecConfiguration -``` From 98f632d1e6250ee079b231aad7f7ef1fafec59c8 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 2 Feb 2018 13:01:21 -0800 Subject: [PATCH 006/106] revised per Satya --- ...figure-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index c5e91f4974..7bb443505a 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -14,7 +14,7 @@ ms.date: 01/29/2018 **Applies to** - Windows 10, Windows 8.1, Windows 8, Windows 7 -- Windows Server +- Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server 2008 In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. To secure the connections, update the configuration of VPN servers and clients by running VPN cmdlets. From c82d22c6f56790dba20f5291abeaace39177bda6 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 2 Feb 2018 13:04:57 -0800 Subject: [PATCH 007/106] revised per Satya --- ...figure-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index 7bb443505a..e89326d91c 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -21,7 +21,7 @@ To secure the connections, update the configuration of VPN servers and clients b For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. -For example, on a VPN server that runs Windows Server 2016, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): +For example, on a site-to-site VPN server that runs Windows Server 2016, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): ```powershell Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy From 39c6d7cf9c5f6c401019e3e1b4b7a1938b212345 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 2 Feb 2018 13:21:01 -0800 Subject: [PATCH 008/106] edits --- ...ure-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index e89326d91c..24ef78f2b8 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -19,6 +19,8 @@ ms.date: 01/29/2018 In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. To secure the connections, update the configuration of VPN servers and clients by running VPN cmdlets. +## VPN server + For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. For example, on a site-to-site VPN server that runs Windows Server 2016, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): @@ -27,11 +29,12 @@ For example, on a site-to-site VPN server that runs Windows Server 2016, run [Se Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy ``` -On a VPN server that runs Windows Server 2012 R2, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx): +On an earlier version of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx): ```powershell Set-VpnServerIPsecConfiguration -CustomPolicy ``` +## VPN client For VPN client, you need to configure each VPN connection. For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps) and specify the name of the connection: From 4c3bd8707050fb83a8e627bf3f18548ed9307beb Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 2 Feb 2018 14:08:39 -0800 Subject: [PATCH 009/106] edits --- ...re-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index 24ef78f2b8..99fbbd061a 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -23,7 +23,7 @@ To secure the connections, update the configuration of VPN servers and clients b For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. -For example, on a site-to-site VPN server that runs Windows Server 2016, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): +For example, on a site-to-site VPN server that runs Windows Server 2012 R2 or later, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): ```powershell Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy @@ -34,10 +34,12 @@ On an earlier version of Windows Server, run [Set-VpnServerIPsecConfiguration](h ```powershell Set-VpnServerIPsecConfiguration -CustomPolicy ``` + ## VPN client For VPN client, you need to configure each VPN connection. -For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps) and specify the name of the connection: +For example, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps) and specify the name of the connection: + ```powershell Set-VpnConnectionIPsecConfiguration -ConnectionName From 6cd9f40b598596c26e3499a4b4c085145b85f9d8 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Tue, 6 Feb 2018 14:07:17 -0800 Subject: [PATCH 010/106] Fixed applies to list --- ...-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index 99fbbd061a..6966e27f33 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -6,15 +6,14 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security, networking author: shortpatti +ms.author: pashort ms.localizationpriority: medium -ms.date: 01/29/2018 +ms.date: 02/06/2018 --- # How to configure Diffie Hellman protocol over IKEv2 VPN connections -**Applies to** -- Windows 10, Windows 8.1, Windows 8, Windows 7 -- Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server 2008 +>Applies To: Windows Server (Semi-Annual Channel), Windows Server 2016, Windows 10 In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. To secure the connections, update the configuration of VPN servers and clients by running VPN cmdlets. @@ -30,6 +29,7 @@ Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy ``` On an earlier version of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx): + ```powershell Set-VpnServerIPsecConfiguration -CustomPolicy From ec510fd8c80f684c94ca564499894783ea1bac9b Mon Sep 17 00:00:00 2001 From: jcaparas Date: Wed, 7 Feb 2018 09:37:21 +0200 Subject: [PATCH 011/106] new siem error content --- ...ows-defender-advanced-threat-protection.md | 24 +++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md index 114d11828b..1088133d52 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md @@ -36,7 +36,7 @@ If your client secret expires or if you've misplaced the copy provided when you 1. Login to the [Azure management portal](https://ms.portal.azure.com). -2. Select **Active Directory**. +2. Select **Azure Active Directory**. 3. Select your tenant. @@ -49,7 +49,27 @@ If your client secret expires or if you've misplaced the copy provided when you 7. Copy the value and save it in a safe place. ->Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-troubleshootsiem-belowfoldlink) +>Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-troubleshootsiem-belowfoldlink) / + + +## Error when getting a refresh access token +If you encounter an error when trying to get a refresh token when using the threat intelligence API, you'll need to add reply URL for relevant application in Azure Active Directory. + +1. Login to the [Azure management portal](https://ms.portal.azure.com). + +2. Select **Azure Active Directory**. + +3. Select your tenant. + +4. Click **Application**, then select your SIEM tool application. The application name is `https://windowsdefenderatpsiemconnector`. + +5. Select your threat intelligence API application. The name is `https://WindowsDefenderATPCustomerTiConnector`. + +6. Select **Settings** > **Reply URLs**. HI VADIM CAN YOU PLEASE CHECK IF THE BELOW IS ACCURATE - I TRIED TO ACCESS AZURE BUT I DON'T HAVE THE RIGHT PERMISSIONS. + +7. Add the following URL: `https://winatpmanagement-us.securitycenter.windows.com/UserAuthenticationCallback`. + +8. Click **Save**. ## Related topics From a74d9b4c3377fbd9c30058b42d363269e12a9464 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 7 Feb 2018 14:11:15 -0800 Subject: [PATCH 012/106] added how to turn off network notifications --- ...rating-system-components-to-microsoft-services.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index efdd0f54a8..f9769b3314 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1065,7 +1065,17 @@ To turn off **Choose apps that can use your microphone**: ### 17.5 Notifications -In the **Notifications** area, you can choose which apps have access to notifications. +To turn off notifications network usage: + +- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **Notifications** > **Turn off Notifications network usage** + + - Set to **Enabled**. + + -or- + +- Create a REG\_DWORD registry setting in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\PushNotifications!NoCloudApplicationNotification**, with a value of 1 (one) + +In the **Notifications** area, you can also choose which apps have access to notifications. To turn off **Let apps access my notifications**: From 130b62ca3fa8835c43eec5815fa75c0f4cfc5eca Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 7 Feb 2018 17:18:07 -0800 Subject: [PATCH 013/106] fixing capitalization of HVCI --- .../enable-virtualization-based-protection-of-code-integrity.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/threat-protection/enable-virtualization-based-protection-of-code-integrity.md index 4483edb168..158b2fede1 100644 --- a/windows/security/threat-protection/enable-virtualization-based-protection-of-code-integrity.md +++ b/windows/security/threat-protection/enable-virtualization-based-protection-of-code-integrity.md @@ -16,7 +16,7 @@ ms.date: 11/28/2017 - Windows 10 - Windows Server 2016 -Virtualization-based protection of code integrity (herein referred to as Hypervisor-protected Code Integrity, or HVCI) is a powerful system mitigation that leverages hardware virtualization and the Windows Hyper-V hypervisor to protect Windows kernel-mode processes against the injection and execution of malicious or unverified code. +Virtualization-based protection of code integrity (herein referred to as hypervisor-protected code integrity, or HVCI) is a powerful system mitigation that leverages hardware virtualization and the Windows Hyper-V hypervisor to protect Windows kernel-mode processes against the injection and execution of malicious or unverified code. Code integrity validation is performed in a secure environment that is resistant to attack from malicious software, and page permissions for kernel mode are set and maintained by the Hyper-V hypervisor. Some applications, including device drivers, may be incompatible with HVCI. From 565b282a5c1ca816e052c09445b990de4784cba2 Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Wed, 7 Feb 2018 22:41:12 -0800 Subject: [PATCH 014/106] removed the comments to show the education videos, which are now posted to YouTube --- .../trial-in-a-box/educator-tib-get-started.md | 17 +++++++---------- education/trial-in-a-box/index.md | 4 ++-- .../trial-in-a-box/itadmin-tib-get-started.md | 3 +-- 3 files changed, 10 insertions(+), 14 deletions(-) diff --git a/education/trial-in-a-box/educator-tib-get-started.md b/education/trial-in-a-box/educator-tib-get-started.md index 125ea5cd60..0c46318837 100644 --- a/education/trial-in-a-box/educator-tib-get-started.md +++ b/education/trial-in-a-box/educator-tib-get-started.md @@ -31,10 +31,9 @@ ms.date: 01/12/2017
- + ![Log in to Device A and connect to the school network](images/edu-TIB-setp-1-jump.png) ## 1. Log in and connect to the school network @@ -49,10 +48,10 @@ To try out the educator tasks, start by logging in as a teacher. ![Improve student reading speed and comprehension](images/edu-TIB-setp-2-jump.png) ## 2. Significantly improve student reading speed and comprehension - + Learning Tools and the Immersive Reader can be used in the Microsoft Edge browser, Microsoft Word, and Microsoft OneNote to: * Increase fluency for English language learners @@ -80,10 +79,9 @@ Learning Tools and the Immersive Reader can be used in the Microsoft Edge browse ![Spark communication, critical thinking, and creativity with Microsoft Teams](images/edu-TIB-setp-3-jump.png) ## 3. Spark communication, critical thinking, and creativity in the classroom - + Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. This guided tour walks you through the essential teaching features of the app. Then, through interactive prompts, experience how you can use this tool in your own classroom to spark digital classroom discussions, respond to student questions, organize content, and more! @@ -99,10 +97,10 @@ Take a guided tour of Microsoft Teams and test drive this digital hub. ![Expand classroom collaboration and interaction with OneNote](images/edu-TIB-setp-4-jump.png) ## 4. Expand classroom collaboration and interaction between students - + Microsoft OneNote organizes curriculum and lesson plans for teachers and students to work together and at their own pace. It provides a digital canvas to store text, images, handwritten drawings, attachments, links, voice, and video. @@ -130,10 +128,9 @@ See how a group project comes together with opportunities to interact with other ![Further collaborate and problem solve with Minecraft: Education Edition](images/edu-TIB-setp-5-jump.png) ## 5. Get kids to further collaborate and problem solve - Minecraft: Education Edition provides an immersive environment to develop creativity, collaboration, and problem-solving in an immersive environment where the only limit is your imagination. diff --git a/education/trial-in-a-box/index.md b/education/trial-in-a-box/index.md index 2dbb835a36..c738b478f6 100644 --- a/education/trial-in-a-box/index.md +++ b/education/trial-in-a-box/index.md @@ -20,9 +20,9 @@ ms.date: 12/11/2017
- + +
Welcome to Microsoft Education Trial in a Box. We built this trial to make it easy to try our latest classroom technologies. We have two scenarios for you to try: one for educators and one for IT. We recommend starting with Educators. To begin, click **Get started** below. diff --git a/education/trial-in-a-box/itadmin-tib-get-started.md b/education/trial-in-a-box/itadmin-tib-get-started.md index 5164c21a1d..34a9219da3 100644 --- a/education/trial-in-a-box/itadmin-tib-get-started.md +++ b/education/trial-in-a-box/itadmin-tib-get-started.md @@ -35,9 +35,8 @@ To get the most out of Microsoft Education, we've pre-configured your tenant for If you run into any problems while following the steps in this guide, or you have questions about Trial in a Box or Microsoft Education, see [Microsoft Education Trial in a Box Support](support-options.md).
-
From 2f8afe7ed865f0e2170c5914c81d2ff8fe805758 Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Wed, 7 Feb 2018 23:06:31 -0800 Subject: [PATCH 015/106] updated video syntax --- education/trial-in-a-box/index.md | 2 +- education/trial-in-a-box/itadmin-tib-get-started.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/education/trial-in-a-box/index.md b/education/trial-in-a-box/index.md index c738b478f6..3ea775cd97 100644 --- a/education/trial-in-a-box/index.md +++ b/education/trial-in-a-box/index.md @@ -20,7 +20,7 @@ ms.date: 12/11/2017
-
+> [!VIDEO https://aka.ms/edu-welcome]
diff --git a/education/trial-in-a-box/itadmin-tib-get-started.md b/education/trial-in-a-box/itadmin-tib-get-started.md index 34a9219da3..487ae73b96 100644 --- a/education/trial-in-a-box/itadmin-tib-get-started.md +++ b/education/trial-in-a-box/itadmin-tib-get-started.md @@ -36,7 +36,7 @@ If you run into any problems while following the steps in this guide, or you hav
-
+> [!VIDEO https://aka.ms/edu-it-admin-setup]
From 67a5205a29deaec71a1af5b0e380fcaf691cbcdb Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Wed, 7 Feb 2018 23:24:13 -0800 Subject: [PATCH 016/106] updated to test video link --- education/trial-in-a-box/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/trial-in-a-box/index.md b/education/trial-in-a-box/index.md index 3ea775cd97..573b2026bb 100644 --- a/education/trial-in-a-box/index.md +++ b/education/trial-in-a-box/index.md @@ -20,7 +20,7 @@ ms.date: 12/11/2017
-> [!VIDEO https://aka.ms/edu-welcome] +> [!VIDEO https://www.youtube.com/watch?v=azoxUYWbeGg]
From 4fb185f0f5ed79c254768bc4dfb3d801d2cb74bb Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Wed, 7 Feb 2018 23:37:04 -0800 Subject: [PATCH 017/106] updated --- education/trial-in-a-box/educator-tib-get-started.md | 12 +++++++----- education/trial-in-a-box/itadmin-tib-get-started.md | 2 +- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/education/trial-in-a-box/educator-tib-get-started.md b/education/trial-in-a-box/educator-tib-get-started.md index 0c46318837..7ac145676b 100644 --- a/education/trial-in-a-box/educator-tib-get-started.md +++ b/education/trial-in-a-box/educator-tib-get-started.md @@ -31,7 +31,8 @@ ms.date: 01/12/2017
-
+> [!VIDEO https://www.youtube.com/watch?v=3nqooY9Iqq4] +
@@ -48,8 +49,8 @@ To try out the educator tasks, start by logging in as a teacher. ![Improve student reading speed and comprehension](images/edu-TIB-setp-2-jump.png) ## 2. Significantly improve student reading speed and comprehension +> [!VIDEO https://www.youtube.com/watch?v=GCzSAslq_2Y] -

@@ -79,7 +80,8 @@ Learning Tools and the Immersive Reader can be used in the Microsoft Edge browse ![Spark communication, critical thinking, and creativity with Microsoft Teams](images/edu-TIB-setp-3-jump.png) ## 3. Spark communication, critical thinking, and creativity in the classroom -
+> [!VIDEO https://www.youtube.com/watch?v=riQr4Dqb8B8] +
@@ -97,8 +99,8 @@ Take a guided tour of Microsoft Teams and test drive this digital hub. ![Expand classroom collaboration and interaction with OneNote](images/edu-TIB-setp-4-jump.png) ## 4. Expand classroom collaboration and interaction between students +> [!VIDEO https://www.youtube.com/watch?v=dzDSWMb_fIE] -

@@ -128,8 +130,8 @@ See how a group project comes together with opportunities to interact with other ![Further collaborate and problem solve with Minecraft: Education Edition](images/edu-TIB-setp-5-jump.png) ## 5. Get kids to further collaborate and problem solve +> [!VIDEO https://www.youtube.com/watch?v=QI_bRNUugog] -

Minecraft: Education Edition provides an immersive environment to develop creativity, collaboration, and problem-solving in an immersive environment where the only limit is your imagination. diff --git a/education/trial-in-a-box/itadmin-tib-get-started.md b/education/trial-in-a-box/itadmin-tib-get-started.md index 487ae73b96..841327ddea 100644 --- a/education/trial-in-a-box/itadmin-tib-get-started.md +++ b/education/trial-in-a-box/itadmin-tib-get-started.md @@ -36,7 +36,7 @@ If you run into any problems while following the steps in this guide, or you hav
-> [!VIDEO https://aka.ms/edu-it-admin-setup] +> [!VIDEO https://www.youtube.com/watch?v=cVVKCpO2tyI]
From 25c4ee2bbd6aeaf16f0531040d93d02d870f2eba Mon Sep 17 00:00:00 2001 From: Celeste de Guzman Date: Wed, 7 Feb 2018 23:40:40 -0800 Subject: [PATCH 018/106] fixed video links to include embed in path --- education/trial-in-a-box/educator-tib-get-started.md | 10 +++++----- education/trial-in-a-box/index.md | 2 +- education/trial-in-a-box/itadmin-tib-get-started.md | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/education/trial-in-a-box/educator-tib-get-started.md b/education/trial-in-a-box/educator-tib-get-started.md index 7ac145676b..b932073a8f 100644 --- a/education/trial-in-a-box/educator-tib-get-started.md +++ b/education/trial-in-a-box/educator-tib-get-started.md @@ -31,7 +31,7 @@ ms.date: 01/12/2017
-> [!VIDEO https://www.youtube.com/watch?v=3nqooY9Iqq4] +> [!VIDEO https://www.youtube.com/embed/3nqooY9Iqq4]
@@ -49,7 +49,7 @@ To try out the educator tasks, start by logging in as a teacher. ![Improve student reading speed and comprehension](images/edu-TIB-setp-2-jump.png) ## 2. Significantly improve student reading speed and comprehension -> [!VIDEO https://www.youtube.com/watch?v=GCzSAslq_2Y] +> [!VIDEO https://www.youtube.com/embed/GCzSAslq_2Y]
@@ -80,7 +80,7 @@ Learning Tools and the Immersive Reader can be used in the Microsoft Edge browse ![Spark communication, critical thinking, and creativity with Microsoft Teams](images/edu-TIB-setp-3-jump.png) ## 3. Spark communication, critical thinking, and creativity in the classroom -> [!VIDEO https://www.youtube.com/watch?v=riQr4Dqb8B8] +> [!VIDEO https://www.youtube.com/embed/riQr4Dqb8B8]
@@ -99,7 +99,7 @@ Take a guided tour of Microsoft Teams and test drive this digital hub. ![Expand classroom collaboration and interaction with OneNote](images/edu-TIB-setp-4-jump.png) ## 4. Expand classroom collaboration and interaction between students -> [!VIDEO https://www.youtube.com/watch?v=dzDSWMb_fIE] +> [!VIDEO https://www.youtube.com/embed/dzDSWMb_fIE]
@@ -130,7 +130,7 @@ See how a group project comes together with opportunities to interact with other ![Further collaborate and problem solve with Minecraft: Education Edition](images/edu-TIB-setp-5-jump.png) ## 5. Get kids to further collaborate and problem solve -> [!VIDEO https://www.youtube.com/watch?v=QI_bRNUugog] +> [!VIDEO https://www.youtube.com/embed/QI_bRNUugog]
diff --git a/education/trial-in-a-box/index.md b/education/trial-in-a-box/index.md index 573b2026bb..62510022e6 100644 --- a/education/trial-in-a-box/index.md +++ b/education/trial-in-a-box/index.md @@ -20,7 +20,7 @@ ms.date: 12/11/2017
-> [!VIDEO https://www.youtube.com/watch?v=azoxUYWbeGg] +> [!VIDEO https://www.youtube.com/embed/azoxUYWbeGg]
diff --git a/education/trial-in-a-box/itadmin-tib-get-started.md b/education/trial-in-a-box/itadmin-tib-get-started.md index 841327ddea..bd1c4b36cd 100644 --- a/education/trial-in-a-box/itadmin-tib-get-started.md +++ b/education/trial-in-a-box/itadmin-tib-get-started.md @@ -36,7 +36,7 @@ If you run into any problems while following the steps in this guide, or you hav
-> [!VIDEO https://www.youtube.com/watch?v=cVVKCpO2tyI] +> [!VIDEO https://www.youtube.com/embed/cVVKCpO2tyI]
From 6a4ea705d719350ee38de8652379f12b14ba34e9 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Thu, 8 Feb 2018 15:54:35 +0000 Subject: [PATCH 019/106] Merged PR 5776: Add Intune instructions --- ...change-history-for-configure-windows-10.md | 8 ++- .../lock-down-windows-10-to-specific-apps.md | 71 +++++++++++++------ ...osk-for-windows-10-for-desktop-editions.md | 3 +- 3 files changed, 59 insertions(+), 23 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index a12a531608..4341c2671b 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -8,13 +8,19 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms -ms.date: 01/31/2018 +ms.date: 02/08/2018 --- # Change history for Configure Windows 10 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## February 2018 + +New or changed topic | Description +--- | --- +[Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) | Added steps for configuring a kiosk in Microsoft Intune. + ## January 2018 New or changed topic | Description diff --git a/windows/configuration/lock-down-windows-10-to-specific-apps.md b/windows/configuration/lock-down-windows-10-to-specific-apps.md index ea121c6820..94ac63a7a7 100644 --- a/windows/configuration/lock-down-windows-10-to-specific-apps.md +++ b/windows/configuration/lock-down-windows-10-to-specific-apps.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: edu, security author: jdeckerms ms.localizationpriority: high -ms.date: 01/31/2018 +ms.date: 02/08/2018 ms.author: jdecker --- @@ -20,21 +20,49 @@ ms.author: jdecker - Windows 10 -A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using Microsoft Intune or a provisioning package. +A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. + +The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. + +>[!WARNING] +>The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, [certain policies](#policies-set-by-multi-app-kiosk-configuration) are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the policies enforced via assigned access. + +You can configure multi-app kiosks using [Microsoft Intune](#intune) or a [provisioning package](#provision). + + +## Configure a kiosk in Microsoft Intune Watch how to use Intune to configure a multi-app kiosk. >[!VIDEO https://www.microsoft.com/videoplayer/embed/ce9992ab-9fea-465d-b773-ee960b990c4a?autoplay=false] ->[!NOTE] ->For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk. +1. [Generate the Start layout for the kiosk device.](#startlayout) +2. In the Microsoft Azure portal, search for **Intune** or go to **More services** > **Intune**. +3. Select **Device configuration**. +4. Select **Profiles**. +5. Select **Create profile**. +6. Enter a friendly name for the profile. +7. Select **Windows 10 and later** for the platform. +8. Select **Device restrictions** for the profile type. +9. Select **Kiosk**. +10. In **Kiosk Mode**, select **Multi app kiosk**. +11. Select **Add** to define a configuration, which specifies the apps that will run and the layout for the Start menu. +12. Enter a friendly name for the configuration. +13. Select an app type, either **Win32 App** for a classic desktop application or **UWP App** for a Universal Windows Platform app. + - For **Win32 App**, enter the fully qualified pathname of the executable, with respect to the device. + - For **UWP App**, enter the Application User Model ID for an installed app. +14. Select whether to enable the taskbar. +15. Browse to and select the Start layout XML file that you generated in step 1. +16. Add one or more accounts. When the account signs in, only the apps defined in the configuration will be available. +17. Select **OK**. You can add additional configurations or finish. +18. Assign the profile to a device group to configure the devices in that group as kiosks. -The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access. ->[!WARNING] ->The assigned access feature is intended for corporate-owned fixed-purpose devices, like kiosks. When the multi-app assigned access configuration is applied on the device, certain policies are enforced system-wide, and will impact other users on the device. Deleting the multi-app configuration will remove the assigned access lockdown profiles associated with the users, but it cannot revert all the enforced policies (such as Start layout). A factory reset is needed to clear all the policies enforced via assigned access. + +## Configure a kiosk using a provisioning package + Process: 1. [Create XML file](#create-xml-file) 2. [Add XML file to provisioning package](#add-xml) @@ -46,14 +74,15 @@ Watch how to use a provisioning package to configure a multi-app kiosk. If you don't want to use a provisioning package, you can deploy the configuration XML file using [mobile device management (MDM)](#alternate-methods) or you can configure assigned access using the [MDM Bridge WMI Provider](#bridge). -## Prerequisites +### Prerequisites - Windows Configuration Designer (Windows 10, version 1709) - The kiosk device must be running Windows 10 (S, Pro, Enterprise, or Education), version 1709 +>[!NOTE] +>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk. - -## Create XML file +### Create XML file Let's start by looking at the basic structure of the XML file. @@ -90,7 +119,7 @@ You can start your file by pasting the following XML (or any other examples in t ``` -### Profile +#### Profile A profile section in the XML has the following entries: @@ -103,7 +132,7 @@ A profile section in the XML has the following entries: - [**Taskbar**](#taskbar) -#### Id +##### Id The profile **Id** is a GUID attribute to uniquely identify the profile. You can create a GUID using a GUID generator. The GUID just needs to be unique within this XML file. @@ -113,7 +142,7 @@ The profile **Id** is a GUID attribute to uniquely identify the profile. You can ``` -#### AllowedApps +##### AllowedApps **AllowedApps** is a list of applications that are allowed to run. Apps can be Universal Windows Platform (UWP) apps or Classic Windows desktop apps. @@ -155,7 +184,7 @@ The following example allows Groove Music, Movies & TV, Photos, Weather, Calcula ``` -#### StartLayout +##### StartLayout After you define the list of allowed applications, you can customize the Start layout for your kiosk experience. You can choose to pin all the allowed apps on the Start screen or just a subset, depending on whether you want the end user to directly access them on the Start screen. @@ -202,7 +231,7 @@ This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint, ![What the Start screen looks like when the XML sample is applied](images/sample-start.png) -#### Taskbar +##### Taskbar Define whether you want to have the taskbar present in the kiosk device. For tablet-based or touch-enabled all-in-one kiosks, when you don’t attach a keyboard and mouse, you can hide the taskbar as part of the multi-app experience if you want. @@ -221,7 +250,7 @@ The following example hides the taskbar: >[!NOTE] >This is different from the **Automatically hide the taskbar** option in tablet mode, which shows the taskbar when swiping up from or moving the mouse pointer down to the bottom of the screen. Setting **ShowTaskbar** as **false** will always keep the taskbar hidden. -### Configs +#### Configs Under **Configs**, define which user account will be associated with the profile. When this user account signs in on the device, the associated assigned access profile will be enforced, including the allowed apps, Start layout, and taskbar configuration, as well as other local group policies or mobile device management (MDM) policies set as part of the multi-app experience. @@ -256,7 +285,7 @@ Before applying the multi-app configuration, make sure the specified user accoun -## Add XML file to provisioning package +### Add XML file to provisioning package Before you add the XML file to a provisioning package, you can [validate your configuration XML against the XSD](multi-app-kiosk-xml.md#xsd-for-assignedaccess-configuration-xml). @@ -317,12 +346,12 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L 15. Copy the provisioning package to the root directory of a USB drive. -## Apply provisioning package to device +### Apply provisioning package to device Provisioning packages can be applied to a device during the first-run experience (out-of-box experience or "OOBE") and after ("runtime"). -### During initial setup, from a USB drive +#### During initial setup, from a USB drive 1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**. @@ -346,7 +375,7 @@ Provisioning packages can be applied to a device during the first-run experience -### After setup, from a USB drive, network folder, or SharePoint site +#### After setup, from a USB drive, network folder, or SharePoint site 1. Sign in with an admin account. 2. Insert the USB drive to a desktop computer, navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install. @@ -365,7 +394,7 @@ Provisioning packages can be applied to a device during the first-run experience -## Use MDM to deploy the multi-app configuration +### Use MDM to deploy the multi-app configuration Multi-app kiosk mode is enabled by the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp). Your MDM policy can contain the assigned access configuration XML. diff --git a/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md b/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md index 0fe1c5b458..d68048c98d 100644 --- a/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md +++ b/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions.md @@ -32,7 +32,8 @@ A single-use or *kiosk* device is easy to set up in Windows 10 for desktop edit - For a kiosk device to run a Classic Windows application, use [Shell Launcher](#shell-launcher) to set a custom user interface as the shell (Windows 10 Enterprise or Education only). -To return the device to the regular shell, see [Sign out of assigned access](#sign-out-of-assigned-access). +>[!TIP] +>To return the device to the regular shell, see [Sign out of assigned access](#sign-out-of-assigned-access). >[!NOTE] >A Universal Windows app is built on the Universal Windows Platform (UWP), which was first introduced in Windows 8 as the Windows Runtime. A Classic Windows application uses the Classic Windows Platform (CWP) (e.g., COM, Win32, WPF, WinForms, etc.) and is typically launched using an .EXE or .DLL file. From ea5b9646f1889697593f910315373ae6e51c5172 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Thu, 8 Feb 2018 16:47:19 +0000 Subject: [PATCH 020/106] Added info about customizing message when files are blocked. --- ...-block-at-first-sight-windows-defender-antivirus.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index 84a88683e7..65dd369db4 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -9,9 +9,9 @@ ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: iaanw -ms.author: iawilt -ms.date: 11/20/2017 +author: andreabichsel +ms.author: v-anbic +ms.date: 02/08/2018 --- @@ -38,7 +38,9 @@ Block at first sight is a feature of Windows Defender Antivirus cloud-delivered It is enabled by default when certain pre-requisite settings are also enabled. In most cases, these pre-requisite settings are also enabled by default, so the feature is running without any intervention. You can use group policy settings to confirm the feature is enabled. -You can also [specify how long the file should be prevented from running](configure-cloud-block-timeout-period-windows-defender-antivirus.md) while the cloud-based protection service analyzes the file. +You can [specify how long the file should be prevented from running](configure-cloud-block-timeout-period-windows-defender-antivirus.md) while the cloud-based protection service analyzes the file. + +You can also [customize the message displayed on users' desktops](wdsc-customize-contact-information.md) when a file is blocked. You can change the company name, contact information, and message URL. > [!IMPORTANT] > There is no specific individual setting in System Center Configuration Manager to enable or disable Block at First Sight. It is enabled by default when the pre-requisite settings are configured correctly. You must use Group Policy settings to enable or disable the feature. From 30689be77cd4c309c6c75daefcbd91374b299ddf Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Thu, 8 Feb 2018 17:10:05 +0000 Subject: [PATCH 021/106] Fixed link. --- ...configure-block-at-first-sight-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index 65dd369db4..7efd232814 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -40,7 +40,7 @@ It is enabled by default when certain pre-requisite settings are also enabled. I You can [specify how long the file should be prevented from running](configure-cloud-block-timeout-period-windows-defender-antivirus.md) while the cloud-based protection service analyzes the file. -You can also [customize the message displayed on users' desktops](wdsc-customize-contact-information.md) when a file is blocked. You can change the company name, contact information, and message URL. +You can also [customize the message displayed on users' desktops](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-security-center/wdsc-customize-contact-information) when a file is blocked. You can change the company name, contact information, and message URL. > [!IMPORTANT] > There is no specific individual setting in System Center Configuration Manager to enable or disable Block at First Sight. It is enabled by default when the pre-requisite settings are configured correctly. You must use Group Policy settings to enable or disable the feature. From f5a9f055c70053f755a9fe3407b2780a139ca16d Mon Sep 17 00:00:00 2001 From: Charles Morris Date: Thu, 8 Feb 2018 18:13:14 +0000 Subject: [PATCH 022/106] Added "allow-redirect" attribute that is new for RS4. --- .../enterprise-mode-schema-version-2-guidance.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/browsers/internet-explorer/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md b/browsers/internet-explorer/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md index 237d0411b6..df6a01cb68 100644 --- a/browsers/internet-explorer/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md +++ b/browsers/internet-explorer/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md @@ -191,6 +191,17 @@ The <url> attribute, as part of the <site> element in the v.2 versio +allow-redirect +A boolean attribute of the <open-in> element that controls the behavior for redirected sites. Setting this attribute to "true" indicates that the site will open in IE11 or Microsoft Edge even if the site is navigated to as part of a HTTP or meta refresh redirection chain. Omitting the attribute is equivalent to "false" (sites in redirect chain will not open in another browser). +

Example +

+<site url="contoso.com/travel">
+  <open-in allow-redirect="true">IE11</open-in>
+</site>
+In this example, if http://contoso.com/travel is encountered in a redirect chain in Microsoft Edge, it will be opened in Internet Explorer. +Internet Explorer 11 and Microsoft Edge + + version Specifies the version of the Enterprise Mode Site List. This attribute is supported for the <site-list> element. Internet Explorer 11 and Microsoft Edge From 78c6588fc31521f29a5e1a9d14393ebaf2bfb146 Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Thu, 8 Feb 2018 20:59:49 +0000 Subject: [PATCH 023/106] Merged PR 5792: Merge sfb-wn1801 to master update what's new content for 1801 --- store-for-business/images/invite-people.png | Bin 0 -> 6842 bytes store-for-business/images/mpsa-link.png | Bin 0 -> 6482 bytes .../images/msfb-products-services.png | Bin 0 -> 69071 bytes .../images/msfb-settings-icon.png | Bin 0 -> 11434 bytes .../images/msfb-wn-1801-products-services.png | Bin 0 -> 14305 bytes store-for-business/images/office-logo.png | Bin 0 -> 5201 bytes .../images/product-and-service-icon.png | Bin 0 -> 2750 bytes .../images/products-and-services-photoshop.png | Bin 0 -> 21088 bytes .../images/products-and-services-ppt.png | Bin 0 -> 22776 bytes ...istory-microsoft-store-business-education.md | 6 +++++- ...ts-new-microsoft-store-business-education.md | 16 +++++++++++++--- 11 files changed, 18 insertions(+), 4 deletions(-) create mode 100644 store-for-business/images/invite-people.png create mode 100644 store-for-business/images/mpsa-link.png create mode 100644 store-for-business/images/msfb-products-services.png create mode 100644 store-for-business/images/msfb-settings-icon.png create mode 100644 store-for-business/images/msfb-wn-1801-products-services.png create mode 100644 store-for-business/images/office-logo.png create mode 100644 store-for-business/images/product-and-service-icon.png create mode 100644 store-for-business/images/products-and-services-photoshop.png create mode 100644 store-for-business/images/products-and-services-ppt.png diff --git a/store-for-business/images/invite-people.png b/store-for-business/images/invite-people.png new file mode 100644 index 0000000000000000000000000000000000000000..b004d3ad7f05cbae8ea9ddca6bc849a073ec97be GIT binary patch literal 6842 zcmd5>c|6oz+jqAM31vy5AyYAC#y(?9$d;if`!Z%TF@~A3ZngpQ8HVN0Srmh3}4vcc!4 zI8GN$!)bs3pQ%D%^1#aiu834pLMj47RU{1dL(~L_0xX(_{(Hh?ED`VbcSKE0kcRG5 z8rmI$Gt|`p0i@)JL@W}HP(mnT<((l4csL${#Vaa7(0COr1c$*XVi9OO9wx8yofoiQ zmyGe+u*1gwA3=*HV*rfbwnW0vFf>|8UI_x65f4FQHqaEEu@Ed4gTdmIoiWOA%r7)k z3K7T~wA(+TZm_}vh!|C61Okmygec+RDiBq?A{GEsR)r`!E8$gD6|pLKxHCxNPrW*1 zH!{V9j0LQ#0FuCBka#kMga)FANJ0~EP!D&)Ml1v9z$pxfRKRh5KeNLe=lS!=jVSRw zQ7%=;CyK((SA4z_2=o2 zqX~c7;ZM2mGAJ|&h>6Lxq<@T-?<*THKURLL{s9F26XKs#{W<+BVzq%>+K8pUBBJ@% z34&KrP*sMj;vmi#1w{xizw!9H>;Qw`g$w5nn4SWZC27!0prQ!`8|rFX_@+&C2UwU}R&AfA@;{Sg!kL>4 z_W$u9TOzWqpB>YVG|yq5Qae|X$Z*Z{qL0~-NMl{rMVXa!k;ta^ecB9R;vJD+>%7d{VW4s?3lODgjqw%HtR*0f&rmbvi?m`@ z+XEu|`dFW)Mk7!`xvOLCVr-+(ik0D@*n}LgN!^?#VY%ZXZ>dRAKCZrZZM>=64TE-nac9-HJ%XFh&nI<_L`od!yt0GSYR2h! zhLKPCOBSZcffI3KQ|VCMgdeig5j0$hi^>>@+h0D@bd2ctiDT2XU@x7d z_ZOyYy7yu93$*jaimgb_a2YPHlQBF|QTMwp)`I4*^H?LzyDv1HOMfyR7Av4FgW_H? zKXORQsHFe>QcS3j1<&Zy8G=ylmi)#9sBMZw@>Xhzgdih8xslu*u;$uzMzt>}*+XwB zx_Yfy-1Hhx|MK}0D#Zn}EA353b2dlv^Ho&B`aj@^r_gDk5K{N@U9I3y6(?O^O+NZ8 zo47=EE^kUFjXPKe&otokB}2#0ikf$4s@ZkJ!O8}FLPo16bq$UM-p(Ev70Xf^uQTgC zWVV&_X>Rl$J3_BkaM4h{{{v6#anjMNlGmoHSCgUc9zjlCaUjR0rMcJ12f>?41{r(k zPiq&dnB{X*ji@r_Hy18Ti`Ck@LdjXG-GxFrs7r?(57;G&n5uhaYR`2Mnj(hMC-iNb z6c0ybU6vp8G#24S@ZB}3Gpy}^Ty=N(vfa|RympwEevYOycrDt>+uV~MnmjGdit01a z9UpK*%(Sh&5)}xN?!T)TGhQGSvSO14Nq%g%Zx9zN@briw4>;+S3_HBA$X?wcd)zJg zv`O~97;c`!hCH8UjyrH5_|oovCDsmJFR@=m70cU_u9pn;dCom090XrXNY`DnUGwBw zs_)!uN22_kJa!cJxg}-P--PLyOK)$xcTmxIJQS*f+Cs4L?OP0;sGNMr1eKorF{i)p zSayb`E2mNn(`;-9L|~<_Ayxp*SHx|+55ag$%Gnbg_C~&;&{t_yhZXh6%5BI%Rerq| zQJVxgD=G+IJ~*W7aV7LpobHXz1HzF%w?8e<1t%s*)jb~Dx`%;t77rAmfK*8umxRnb zPqoU5td}LqT07Y#wmsEcln3_PSojajc=5)|MA|=POIwNu3IgKm%vOE%s=!nH)l;{n zK;BCr3URt#n(|{YqqmJ;rsrc}A1Q1I>HNt}CQ(2r`OQf9(VHde4lFJS@NoseUUs6C)AmDh$NYD+Bhlsl`;^O<(f zQa85WlYi$RsdaEqQ*=PkgIx3Xj*d5G%>9 z|Mm8>uVw9T8mZ$L9o}N)le7j0Kvj0pt#C|lvF9y_{Y{&h)FpwSvvJ1XVl-3BKW7o` z#8qv&y-NjF?(TNFrPlwDH0hWi!^;`JyIJ~Wc%Eb8ZkQW=Lil!)v!U)dmmcRz@U4XO z{q=J<+^^2$l#OjaVfIe%yqEdb2}axWLg}#K>Uj73R6caIWh)!ky8H|Q*B)~j<5J+p z9AG3RwfA|!goboSN`+V<>qF|!jBmmV`Ib;;T>pi)nB&g(MrShP_{VNP?@(+XMZzKHd>RN?343WL1eExVL^ zTJ1>fJr+EQ3pbXzhtbiEj;~K_H$Htg^z@*Pd}c)R%BjRqd!l*g#y|KxWIsiA0Sfv*eaT+27Ckxqmgiw8`_``EM^c9Z z?SluNThBb*9|l`5SfGE7D&(3AihOl=2)k+a<5Q@d>5*4g!0rQ>3^qQu@?F^&%WEYp zT;ceky=t@Ly@uSphpA+*|-L$Jr$AS+Gq0wXP9m>lYb3dl-%rRw;1FS12wp)T?r}eh%OLNT%C> z^Goly=nuve{_()fnIwFDhU@kjt7aH?j}PLmDtze8yRK*Do^;-bXe(t6gmdGw#doD^ zqBj`{eZBS>4zC#y$>%Wt!Re`8icAYnV+CE-`%5n2vJq7iEwnMg#-yzVEMv}>C$=3q zUi*@sZO=^dIfgo{jDOYB6E7;JT_8=fGl(5xgmFsRU`$?)$Xkml;5sdF9^VWIQ#Boh zTp7JXMd=Iit!8I>D^+y_1;-e!!1$ z1wCz-8-o@uZ=0$~vZH&(C&_hRF68R%{upxg!~^tDG?E?9E#gU6Z-Ds`-)d^MqoXh_ae>A5XkfHZ@zGY|aY-1xJp|QN6?8-<)C6vy1aCRDHt@U|Qe33VJfULYJydaZJN-blXIbjt$Glb;WniUZ zDvc=Kazj2|^5P~|NIcL1fURe0k97zSmrbcy_+w-4w8HLMiXNyxn0F5>$Y{|XkW3Ep z4>K6LbUVS z`p4=(&*wAZBCs1i2WG$WYpe0vtEBAco!KNcK)B4W(Iuj-je5~BW3{v0X&}I{r)zlu zpJm$ZzxHlKDrq=m$oM$jL^e_5IGaS4<&ou@*xk7uw)l^f1?X%v{uS{x9e=_$zgx$ z-bR}N@42EZeP1T@_=U79M~yO0s5@A9)=f#b;B)f}lN5YS$`sWB*0q{jwi^!Xf3g0g z93}z2*P8Gw>ZKOFKZHkBjpRVeSgkWIUyi*#@@9|mRA|~2BZ<8!UtLamxgSo+A5)rh zVKw%cq1GHK?1EzTpSX$!T+l(C;3LGAEj$@3OUnHyI5*VJpw4Lvo}kw(__OK{6FKe# zr!VR@aFxV#Q8Li8gigxbK~}Fm7a{0thDLe{E|SZhN;>xu86DO&E7qFm#9M(Wv`8b1 zhcNrSt6#2wcChNJt=wK$PV9cM-{~V!ZIhu!@zcwSP(DV3&>=q4TW+(T zKbKq#OS`hXnwexZBbU6DEF%T%BG}$Zd;Iv)36)D?K4F}Qa?>*ym6^q1T+z_!;GR1T z4}w#Z8*jd0qX8ZZ8@Ky8N$z#Mu&qpUWO9bFTZ)dIMbo*W2{rbshC}ClSoJ~YEM9cD z4uLN{^YbhyIO)mw)^3@pUds?7PLybFR|)25)&auWYY1tXZ}hpygIg7KeuyyDtc1_ z*H{-{oAN?I{q+bB+1+XTMGJ#Z9j|#*UWz$yBXxw20o`+Ge8mgpPmyXTJW+a))k7Db zUMiu7aj$HN(@5I4*7Ht1Dx-2`qH-=w>&a~py)sompg5+q3icc}%;!q<<8j!|wV(2g z7;s^A!L&(Iu=83=KHU53zP6610efE-PS<>fA7q^Rnlq%FI>F`@ZD^X&DiB@_d*YA6 zeM&qXGQ;I6pM5GSI-WneWW4BuTZLBn#n_XazM71z(NcFSS6No1XVA-X_-n~`_S;kE z&(4&0@jd3H9QUlU*J>jNsw%|v;vJVdKhB<;EsT~p#){Gaj38?IdYOHX$ZS3bY&X32 zwfcQ)fy&Axp3{5><=N-Y<0A`e8Y*Cu;h3CiXTH?*{S0O3)7$VijIhIWtiYz6l%Rm1 z<7FES!BfPNP*KGA3rqfXUNcxTBP}E`kXk7 z>orf&71k;@^~cs^bqY$qP%TD|h)p;RLK@lL6DI6q)Qp^Frvs($SL@tpK&eL_R??Kh z_%AZW_4tyTMNM;*)#qN+8Nbi7j|Hv}>%tnH&M(=6q1zIcXrZG{URj}`BZrRkkIf2* zH(kz}OzaM5|El{TY*|xR&m%S=#Bf)f#W*YVfa?^>8Fqu$vSbp`Gg|9#7%+#i@m|-< zd*c>$jbJVQL#oGP!gYiv07fNtKn$`6Ljj2Nq?mVmt z@C=ugO<}IC{I1wS+>RkoS+3pd=x#fDY%%RK(7rq-t|!D-Dnaa#1J+6CwXu3X_=O?S zUB2lBpN7~U70Mkvyykc11?JC}_Sj!*E1MfW^ReXC{)*cy&?ZOw$x&KhU$p5bDRaTc znZDa*5_?pc{f$VUYM&?hD&)W-6j`cT)auNA7VUX_e&3dirurCt!g2y$7N~{1;>vz_ zRsp^J>#GQpTJyDF;QM0Z*JI-6U-?kwB`szRz~lqE8E5x>CAwf1zj;e(5v{Z zoY@4vO}&lv3VKnsDn*;6zclHjJAhn1-5J{^(68ojUU&86sk;$sn+KQNQNg9>0~MBv zAF}J7>Vg%=!T}HRn|jU(sMqULPsi@gi{upx>2i{v0=zmi3FCe~j_5IBJ~%v}!^PiK zV#%k<(x=Y)ddto%{!3A!&Izi&(5J>H@aw6swUncH7ltBsolPicV%ts&i#OJff94zH zeOMBD9gS-)_joStFjVkztLx-hU z8O#o|pEcu$++ww3NQKtdz?H>8pObWyC9PX5;lahWvhdDt2d22LJX`hUKsv7WY=xa- sadL=JHXVyd<9Krr%t8DAHCzZ`X%&YJ#b>|U_;txp52Z^#?sW0L0AbxHfB*mh literal 0 HcmV?d00001 diff --git a/store-for-business/images/mpsa-link.png b/store-for-business/images/mpsa-link.png new file mode 100644 index 0000000000000000000000000000000000000000..74f14969359483a7e7ffe82f2a3efc2ecf0aa4cb GIT binary patch literal 6482 zcmds6dpy%`-et!Qve>~4#J6zZI`~JQ^@9X{fT-Wv8c1vGRlV{h#T^t-7 zJX&Ybh8!GQc-ZZiJ2~0!_naPIXMb=}&YICUICk@IzP4~gF%EEWZ0{o)o6=2n&mnMR zk{lLKwkF8Aktl352ZsvEje^D56X;^r1Y4pb5-?R#0T3hNkpL4#U9c`ionS{i>p>+L zdFUDAJnV7GcmPUOOvMesCLj^$STQ$}gCh;$h6H@)MX=kOhd}_b?-05@5^#DmpqQzy zzL+|hN)S_&g8^~!3J@{4vYb2&tPD{&AqD}M8I+5%sw#kUKCOgxS0JhQ}Lm*Lp(>l_A+Qc>t9% zs>64C@Hh~`fk0w&)7V(~@A@bRbt(Z%CsU2dWQSjg(*G4vOkG{dIQ?un z5XHWi90H5mtaKy*x0zxB9`N%p@h{x_dpdv6y4n%gr2irLKVUSn4c!$>C7iZpJN-YD z7U?IQf*c=LIb8-2R5YT_k)t|XGCb-ehVciK- z+RxFeVQv5P;ZNLmj2@Q6u8B!T^gmb2_cNO`KhFFP{euYfC&j;n`t$IwiapJqOPjUy zS3*?(dV<&}LX}|hN(7)ajy)~Fa0LaRl8v$r5D$}A1Vi9>2v|Y+hYt?KUyl4YS$`G( zyLbPzQ2)A^z4~u9e{VbN&hL$j;K;U~%HEcaam`~nIQ9u@p-&sTF__)%Zei!kcT9&R z6Pprsq5`srquRuX2iC-(8z%tVL4cdGzSs6dI{8;;gounmO&Vt^w^a*I2Scv;-bjdl z4RhOzPPgFGF}tX3zLQkka8$Q5Ppjj^BJc3W*CdQb6U;rVd}?tnj;uxvy&AUYP$99) zjCPabW&B!cH^(&t4&^PE)%7?&hw^j42DV<~`9I$EA;Vv$5Yh;b13gQ`^@Mf3tXT10%!Y^yL3N#^y@1EVl1C-K)Ol9-#`4R~y69YL zv<8>u7Fg@lD3al5%9|zzp~unp(}{ZHDYq-LJY3i(07*YS|8tO&ClPQBR`+t-k?7Z* zb$j_li}wzHUJWu*byKJ|M=sneBpFWJigYYLs_~T>u=6G#4KT;gyy)CtTa*T9v|AP* z#qjUV8y{WUR`a;W@uvRHEFXa2y=<0*y^Ra^+#{)=g$aTeF~2;aJfpbExVL@0F<{%a zoBa_@d3I+mBv7rN9~VFVIYLl%Hs!vr;^8Bt1AJSC@SV@+k2dey?xW}IRXxdXQXr@} z>RARWRFIIfYn@+mcR!ehR(aQqxKqYkYCexshuiY-OJN5G{2xUPPep^@@ke!d^sKJ* z1*TjjoRZNMo~})3SzdPX{z%^IT=#ZV#QT+7jwY8~sr`kk(~9e+a%lb1@!>@o0Voi8ku03Ohx(i%h2BfSB~HvWm)|E@?$g$j^iDuxhVB?_Hxy;& zcYK;UX5nLM|E;F7O}ot9>anA?wH>{XvEr9F5*j>|6*um*I4GkgJmum1@$)V64szc{r*IY_&OOO-m{@!2H$U44_|zod1^i{nt@pwX6m6sz$+QGMg{|hA>ns}Q z(Yg|`;LgK31&rlEL)is`e8X?EYv|x;$wN2Z)zE1CjP5RSyVdey?mQ-z7t(q7J?aFh zX;EL)!oyze&Y|5ekvBG!4Yn_JGx1`Di3#rOsC>o?n>Tc1o9&C3oRi1aQ{zw7H0M@R zdnLuc_~;$^cz4$WBkyx3yj~2uM$md=?{!+WI;ExtuQZg_zGwiGg~d@J-;T8Z|`({BZP+9EOksG%7I7&ByPk2ASoQeOt#C;XxkqL*7J+*kz zuU3INpRCxW7y;o^QPrNQe;@Nlw(C`;sg(@{v!_Fr<~Z|^to)SH7yWkb<64I=lsC+% zNT>6)zYMxdns-M`%KWj$_O4h01cPcRzT?!jJuWgTIz9rf?e&O1mF5%Qf;wRub&n4w zE$!01ujvX{^kj2k?kQKbVfCQXUR&yEfCzont4s^QN%JPmovw|dA}&{qPW(q^VQSl{ zji9aCfy?#j7iuSC?zv6fdGkE#1@9i?ySE2by4XIYS~ZnjAV0VmzI4m72+8`|n}{&i z?ngWcBjF((1+PQ#M+1FIVQV=$nd7dJIQ|1)y-+=$KHTP&^Bx^a5wyLdBI*0Agh+dt z=rl&QWUR0kF)osWg}z%Xf0)0ax`FuI$Lx{aP{oqCm_7&h4KVuH2zDG&L<(2yn<}6> zj^)@=p|3Qoum|CN?s^~cPKJf*no&a<{NJ9Da`c=Y9c+cZ0919+BW+zq>5@x)^ zs?hy{N=e=}tC>=trq6Bsf?XRyU>EL`h-|!fLU#t#B5j(A^h!ypy4>VyhA3Wr3iH$w zAf!to15`1F&1lhvllrDQJGpkvn{3xQU)hvODH@LmKQI0q(>9p7Ix-)5W1?$LMY^~x z_Kx2(Zy||SoD%px8>ptg(2LB%%81Z;Gv;vi2*zX-)0($INotNr@9bv`3^@GZWn9q9 zea93%`$WLVFuYx>wx<6rI(;NMVFPF?*Pgc`wVvFE%MW+vSbICixb$@VVOXO4bP{D!ZqRcxB2 zd|-L+l1YSffHW+w*6Ydi-Tvao0g^gEojZ@YxfmrXA6642Oc0UGLdyI1y;BI6N5ys< zChQvZ$&Njiw-+2cJdl`GlJ7e^h(O9B^uD(DHid^?`y^URzYx{hW$)=@wHyxL6<9XD zl+*dv(5kqQitc=vOHE~zbLOW{rkF2t0%4a^_zG~GR{h-WfsrFvR>#Q65Q>Lv#Q-s~hK3(ax90*8isM19?!v%e2 z)&*=arY`2QEv8!pIEQ`oTm%~yq1`B`j1IF2k%~3FF9=(eT2a-u$aQLb`|62_W{ZHg zS54t%WrBWTVQEoTC(`#7Y=>FdYF}JMTD8FfG^hcQO0>v~??A@w(cp)!7^q zZlJ+v)oxed+1PP&TR4Aicg|2h#4DvaM=A}y_VQ`seIBT)S**P01o+ciy|W42TP%np zbSGd&m3go7glBJ${kpu8<^3`L zk;%qj%eQ=Y--#FJw`vP^LtGkxxa?8g6uJCxOW1zn{J1OB(F0>A^6wxDmUJR?x))PV z&CDk@bPYUe?J4<}ZJA*TSrA>6ksvJQS;DT~}bB&mFxbt^4?Q1YZf5oMQGaf5&-=8Dgv z*|zFopVk68?}uBtM&(QBQ|n>lhclSPbD445N85NqUTHlJv$vR>z?-i)kf)R@#*DJm z)pm|fJf1k_0(<#VnzN2eeBe^Fd)wRlOwDvgT?V)Mv#>F~x^BnLXWm7R=U8|Bv%NG? zpDLS+>%t#1v5}__p7D$3SG(ChX#|lIx8vi5-jGhpNSVqA>nI4evuNj@Fldo6 zhO@+0PYeuLeKXFRN;~!_i))2xT=#Us&Uu9Lpv&mJ*j}~1h$b3IJsKtM_jw|iy>G5p zE%?Y1A@eJ5Z0{B4eP}QEBTh_uqn;~f=FMafezA&pu!tb40EEOHqhnAx{pCFOCe@hSSKjNORqOjUM9FJdkGs4Y+`x-p~ml7&3%>^}AA zBD!wwlG;8_G=(V(8!Ej0d&42 z!#Uhnb6>&@cl~ot-h0Y+nHeNSr#!yONA0s|foAO#mraJIyDb+g5KcL+JiPvi6!b<5S-KhJPd)$oO98W_QLhn3}f?0_;Om7`{Q}^xsK{_zJr_>nWy&$(Z zRW+=khyHSSdA|2G+d}qjpKK`q;>oMGS&fh4Qp^PcBY2W@vP9NdoTK_1E5#=mOQ0eewwdyQ?JGs_k4JOKj7WI)&s>cB%+CG9HPt zOXEG0&grTe1zgl`1@oH5rg_f?D~zdY81$ z&lo>Q4kTTb>})^%rZd>s)2mF_mJPFmb@sHIOinZs`4jeJzMq*9d8SE|C{T$VcgX)Z z81NBw_2h@z15fUmM&*9!Bz;LSTIe=Xxb1grW!{=zcy)B(VFyBeu;G)Y$Hkj($nV$t z~d>Qd|(jM_S#cei$U`8;;6(KQg?wUVc$ACEUEm$JVzQQFop1U2Hb zm(p~!fXaZpp3PxyV8+tK=$gK?!E!`Wy-OjwpdTG0 z1i!p_Gg%YlLD5jtKJmn@ww#k$8#531rV_w#>$)+}kcm+)YpjTUkv4wrZu!LR$Io+0 z+Ab5}W{+e+ftqrHXKL4R>YVpmuM=}Bm1WYow2l|;uJ#uNkqTF{30+g~7ZC$~yLaDL zFHni%Kd5l~QzoC<9)VAp9Zr=FLYCU#o~pa-?_|8?CdL@^ddP95L%|qU%F1=pu)pxW z8w^Tve7R?v2uSqVSyu`J${fNt5%^Ui@!M3UPS|Rg_m|Zj!yV^+Va1E!i}_ z+3wMm!Dt_4xusp8kvO;O7ms_pd-pY&^WR{!tj=y@@0!spgTW%`c@3d~H}=*8EKL28 zlVs{sn>)NQK@Il#LXq$(rL2WFdtIIgQTx1tn#1REpGZk%7%GUj_zEdEU?-5CW>%Nl zi_20QEu^>4aZ&r!!?$=ZN5#(=+#Ug&#kW|=3GDDlrf1hpj^unUKIhdfXs>Hj-@d(H zKg4$L!OdSO`d@K4yyM~!p>ns*nVH$%W@e_C8Mc|3nHjF1_j&JE-;Yyu z{@kgWn$bvVwMrVbv{rYhoQxP`NWGh`GW-;07~?rSZTto8{cwH_*cZ!1HIt@Y%<>t zNQAM!hpeVA1^3t{6$24>7GT**~p( zrp=he{_p$rP|P>!f2-!l68=d0R}*n!L1^axRuli$ioEN2r$h4I{ro74M!OpqqCb^>ko*7vtJsPQM@CrGwTlU@|x)0-+3_K z_1(%?+_w%cqLV%4YyN5SeJ`Vp&w=95E7H?Z7Dgh=N_=?7PRhKpca$sS?YMJM!8$5m z)jyM;7^v;t*XWu-xA@VT%N)rX#3Kj}BI90s!Yivo0@Z_oy*QKhwG@#SD(XJFg!b1l zSb*h*K&;*2w>_L0_seE8b+)a%X|CV2yjj4So!wvZ4hFaBx~Kl}S4?qTO7vtTA3yW(=iu!4e z^_tphRzsN_qUCc0?9DAx0`ZyV+V1Bns?V#mLkhbk)EflK>`<`q2~M2>i2;?pSiC=z zp2H+8OZ^S@idJ4`?v96d=Qui;B|JNVk!{w7SNF<>>1c9F!3TKnzFu&92d)faO+7K~ zm(aCz+o0_P!|nHM5o59zlfMn}jx8%SWjFJ;zxO&?Lvp7B-{L{_#(W9>d(``}8H#-3 z!u~IRpZHD643`k9LhE&he)I-SS-iryM!5z+*n~N~JknL0*geG1YCVB)OV?!n{r#Fg zXW5K-^_-g9;SQ>S4!guyS?ZWngJCIkQE)3=&gv7qB$`gY3S`XG`1b+Kl5$_R+)p6 z+Ya8rD9mqOa?%M*5DPu0U%!UY$b(~ry2I6|oL67qNGXZ=a(D##c1_T=z5v1<=@}FO zt+PRi?M-;;jX{{jdGIdwTz*i(@L@8Z8NA_Txy+n&$Ms;VUxm-jY|Cy@whHlMpqYBH zeqY|WLe^Lz{in_;Z`6;&BgYS%)!g#UrAZaJ^G?UrO&r(9Wtfm#rVs#(hl%&!^if5u zyGI;YZpJ{bD^)wU2Up|+-jQ(LeLgWZeD7P8R`Ty$fx1r1=sYjC4)+I|nOlUFGbYo- zt2~9&>qHJx9Gb2V{*xRjCU*FdIF2+3y1a2>x*bC{Fu_SagGC#ag#u6pyZM974%@D@ zn8&?Yk(%OkRKQ9?KYl~npR;NGLE0tx)~`x^KJiTDJFbD(i`!mW>DRbk7ij_=y=UiS z_S^C8J~L|I4;HdlBZ;^rqdV#3I>yR6sbaDi`0l&T?#zladAVe3iCJFfkJxnWi7vrU zwZ<#*&)UvlpgkP7n{iooxkK>}>WjU3N%u|Ca}T#|0Ud7(&L8AZqlWe8Zg|l=_IMbP zhtf+RXWma%PacY*+u^Jk7-eP?+R^ z6S+@+Q9HL0*jy3ZawoS77fl@R_A$A)Ek}U%-%}%9xz}OD^Q^RR-9OKX0u4Zt6qm&X}aIe(dperZ6TcheW^i(SF`aegg7gr-vKo{a*U z*?~E{0bM_E|E5g5jfvkrf|AxPH{X=p_Imyn2U`!iTo~-r@s}ZV_UTlnH)`|?iUS}y8Ph|D1ypX5Ki59J;W__E8KWA<15BaU3lp!*N7|a1 z@GhD4R+&viMdQ}ZiE|Mm)M$cRgLk!B&<2wnM_@H+BnRkImrFGRC0;qMzqkI zE4lGJR#7br9~Ez3u6-bNIf$5K>C$rnyEU_BCw;;h_2FY^M{W2r4IK@V;w`y zxA5L%nCz7PrYarjr^+X(?55Do@a%&F$_EtBAQs&p>Y6D$Rt!rQt)Hs@JL+l&p1p3pO;a`uh-~y{ZTa(8&5y{&pRydF!x;L+Ka1G8%GnLGQSoy)3QH(@5dYO~3fcK0Pnh?AmA!Mc*{# z!G#n5{QHLih;!l1773CbecD^WIvuJ-S>PPND*VrW!>yRuw5#h)7YOuWk$!5N&1J7i zOVBLDRc_azRk_xtl`xV?WZd)>90^RfSfvfCHFBx!F$^_93B~)jo`;=e*eYWq9yZ4{&-gKUMq+0N*l^oW&E=8^Y z3|HwY?wuK#jm*>0p}**iSnysbvdXkQ^w~Y^ujLnAD=O45-gR~sH3z$NDKDkQSF|rq zj-h{dvfCspXeX6>zHQS;P-n+SxpZi$ zXV}ZR&2IEIRNW|7KA9H9)!jOg?(g0{4p7_BiYq&NdZjvS?95N1#urFEZ4P7&zG1fU zH<%evr;=GhdFAcpS+(DM%r1p5^f`iM|u#l z<(>!Hrg4^U$w=$i)mt26PM#;miPc*4o#JZG_hSus#ac`>8spdvZ$ozmSu=wf-}HPL zU$&?-UMhlgD}Jkujf`o!<31RgvdTS?wh2912c(fBjl?tEQ$QT><_h7#_b}MiGcTpaRp!X7JDsv8p*I?}^S=BUePXT`;5DvF?M6C40oQ|s{ykP~y6*#s zevL0ev|v=PHsJVrR+U3(Y+SJ+6OV+z_*6q33U}-5;deN6b$hcmoE(1Ns;z~3q5iqf z%{jK_2RrCiEdW8LnPyx;D!WZ0FE7!==%-qJU?_A3L*v+w&6u z?r!BepNMmX!-u8o;i;uIbLvTDM-Vk#ONjiAHEG=qoag&>FGUR|+`OL}bCvj^GByV*%(HRRUQ!3iod?o;=aIMX-K>1eXYiJ0) zJq2&#Q~=DO0AOa}Jb!QTV<$eCmXvH$h+}wkV;p!Z$MdqUNPCVP_#nQ=_s@CgL#$S_pp(|(GKY&-SFa*f# zK`PSfM>0I=nj_Lp(fxGwl*u|CNH1hvJ^W7MDXsResuVIy#}{khl1nnj6PQ-Yi0Z|( zrJ^U+i+2KxLWbM6YgHIasv5@uJ~rR%sz2h}ns>9RAhFzd%UmpX>L3P@cgcm48=)H0 zn2%|SXr>j8=@-&L9&PLM_qv8u29vJ{SWJ%+Vc@I76~qu(S8LjwgbA~^xSWFSrL%#r z8g$=g@gn^iI?*Njp#o9%a>;*o;!H|?q^2^Na5kws=n&@|Q&28dHdu58HxWWxSHw4P!i`6scFfrgGen>tN1j^npPL+rr;>y5J-OUh(7&3G~+{XgnP+D89Wprr0+*ERZH& zD~8d@dUi!gJMfwakvnN9{b$^mKgX>E0m}8b#rii%whnEhq`(nQZol5`p0d+Nt=Kv? zx)@WL|9qyumUrL17=rA9r1gh=#&)SMTwNzwQ?FG!{guvu$oWoPAh`&ucO;_j_QvsZ z-XjZ^_@)i4R0%Q9AbtASDU%x$8SSjo(vGPqK60?Z1o=t}ozU_sTg!Hjyw<}k8?5^? z%K6D!T5DJ&MfY3i6@ue4XB0zR^$_3j^#s02QMGM&v_ro_Yijn)$q^cEsDp9>*ED>a zW?u@;DZtP@CshoAOx0a0Q1p>~SW!e8OgMPKe)13$fyWgUJ{XD8g~4For^b`j(tmbh z+5C;Fj7!K%kNnv+n@1s$FJ3Q}Ad!52In$HCJA9^tqud!6K33MK&@lJt=$8gTaHcm!EhOlBWkjx8XpVN7oXy zce^?Bkd;$%6Y?LcEB^Y`my8>yA>s(FZ_TTZ^=FJsH}b!T}h8KtnCSP+U6!;kC z-*Bqc6+wKL#eDaW$8N*HODcLj;IM#%aeQDo3dchj(RqhXYZ*80qFYp)%s~u?4aogU z=xWx03GjY%_e3Dj1&_v+zDcoteQUqEf+Om@FaAU6&Y)|o4)G|vAN^c@#{{n zE>7aU?=i)8KG(A;MKs-4YD|7{7~QP=UNY%$=w-@u%V2Fy5V2IaZUZ2cP6LrBp+#)3 zSEvgcH$?rhb^3jS5MtOtA=#g<)0J8q%|) zDG0JUNs6D|l&(*v!^iI?A!#mTEt__(HJ_B{{$|K7JumqQ6YUcGZGmBCBZs5F#h@zs z$a>sK;Qhd625;}^m?FS=t36=wx@R0It4+PS(V~iib3Kf7^>D+_-kx!D-#Ih0t-Pou zp*={2$nO6Lt5R#*HR1W#Rot)A8irtl<2#^->EdzCe2taw?>oN0-x+pu=Fx2o((U|6 zlkLpzO{1if^lHCfMC>cdOvdGUbPFPq%k3BLI467R9t zY)v`S`S>UGM)hjF!s=-|cST)cJFH%Wc>DA$^gO?f)#qF!P0JR?q4O;&`QrQ&8S)j} z877tW96s09RBNzjkW8*HdFxRfe!s^mtXSM@YAy@2@P72Y=ydZZl+P-EyO+;; z>>neSRBfAP@?y0p>d9BV^4D3M%)6p83wZ4BxVYiBxN6R>Vnujj0+QlED-UlVqa zg~9Ejnywb(o4b5L$zL(ndOR+ChS=)RYmHtwE3cRPcP85f3ONB9@;!sHKH`Vk*|oPt zl%6bJ=-KbOn!%nD@c@wz&FLvCr7mXBX>@N` z3I90Q0+?!eeFFm*j`=htEoj!FUd({jfcORr0#a*opaxUE(NA%lMnwuobF~M4M-|4U zdN!1JP354*L;eeR>8rab{Sun(zxUetiJE5fE{M`20mb4}0O>!^AU8f;4G{?FVf`ZJ z8~St?5<5#HbyETIRu^;eKSlT++E5;iRz!KXeVo)@Vocz7M^eRA5Mc#rsIfs_se9*n z0w%5vxjwo!@E41MS69A&`P_A;vL6u%!r~Wd^nGep-Y_-3?JUn!SaJIjX+;_omC{Gj zXu{i{0vf2^ug(rP8t}Z+Bv>m}#k?!jo1dr6_;^j+g(4_Nk&l+L`f3u*S|4S!Vm61n z&$uYqjat%@nkT>x=NYG;IOr9np+dP>`c7SXWSHq7SZ8O$pDff}82N0k`a@&Qc8pxXZ1fwYXQ#b+Cxaq+Hfc&volb?(}ksz5$0LD{|qvXQm(iu7URJ(&wMp+OxlQ~Yzfk>tdr5L#H$4tzkkr`>mrBq zZ_>h6P?m#*j(sJ^Y1mE$uQh|4v+`h0?80yC&oz{!cl}BS&oO`95dSaK?c?&kh+0%y z2fK}WK<1ob624(*J-FYh#P2+I=5zVI=wFx0Crm6 z!W&EObd~7dD+nIGe^8WvI)fnSHQt5ner8hH@xdaH(XVov^Lyc&lnUkaKiQuY!wUrs zjT2P8PUcFR*82g)Vgq>YOoZv|g}cOm3ydz-7zRt`I9;r-?fr}V3lTkK*LplyKgIm{ zw_oCh|2zJ#kR$%DKxW4OxBdQ~1;6fmPg^tYw`A344IMXkXj89V#+~Szqz>~NHyHTc zsHeJW{b_Q(!*ij_W8h$8)2myWC)(}&B|0vdS+jI%dkdGtrCrfygz+e_?g?TK0Mw+_ zsGV8Mc13SjbG&_|?hm@bg`**LIQ01{=Z~9nJvhD=PynS`Z(fvUUz_x}9s(pte5g2U zIuP;j&X!-&4eOW@m&;+m+#hnB%JzkxDSo5PBQ2Do*zr4uQ6Ga$nXNZINPGTjIO3By z9?5RNOIIiDDHzR%T&@k0#`$mwWGsQ@9W50RWG>f}&@M`dn-!RT5eCS=9y017X09{< z&6>$MeiUp6_=xWzHTGIV<`@NAJ6|S?P6Fxi)BdmMKCa;trAN@R;e_5b-vH zTORn0DvZEy5t8>2Ghup6T~f@DHy8E@<{ z0w939!V|UoI8#N&J`8V?<<1+>6005$@7%H8O9NSDbdaTw?=xEt%E5&n7g`T`D482I ztORx$4tlQ%HmslmpS8Lxk{?J{HOV7l%;_glljsMCemQXgaQ7Z-P!4dTqt{rr59Fe= zQFWa*>+p5<`Kdz#vUA7!F;YHYQx*co~b+k@Q44X?QH$&t>Fl9R+H zg2uxN%n;5!&aBqGU#xiC@2q>iaSN%}<}hOo)LnF(IQratkU^UjCh2pjl+87i>?y(t zCUhGb$sA8AD^G~X3ZE}UAOdS398!6vv8|C&Sx_36q-{5LqbeB;xx(bx+i~L-|pr& zzco()W=^}I((UXQi&g}kHYBxn&R6INyG2)J^?RdMWLfCu*u!4TBFu;T$_BQr5Sz3^ z*zM6e^fZPq&)z3gC%~)7}yBtP-RbB)NyvYxGcHdgY0k;)@EY{cH`= zFqcBVUH1+M{0_W>1*&_(@_U0H&t`SW931b2pHRMoVDUY$&MXj^e6Gl*B~R$VgJ!sM zDYtUFF)h)Q=DDWa!m0)QFK^(8IH?dFlxZfQ@Z_5S?fwBNx7~E*P@pYe3b@2YFay&i zW@wvC|1>HXex%q($Q?}^bP=VzUM}X0FBO^KAWbJ{qd@sODh)qFWHD3ZsG{JnHu|_{ z`{1|RX}P}Zk3sz?TNb&%TKK9d_B6IgLgpa^4{bOnB7*iefxb=%I5^{?SXfA?K~WnN z@X_?@O}_SyZz19##EUTI=A|{%Lj2wRSq=B&)I z*{WZl>(v-i0mfXqEPHrK!cvND{rvr*;IF$C6rz@>V;0%vApqQ$*DxeRM7X^2tQN<| zAde?R6ddy7(o4FDtLiy9;^RPV$9Vz6?T{!)(!VP>AD6ZQo((C-7G`p=0j#0qoWBC} z32H0wHno zm%juqmxAkqDT!|hThSiZ=dYXF&PmD#TZ!-*q_Y-;4uLh$s?Mg$ zVht@`%6C0Ul!F(6M5j`GwiNF?oZpDkk#LZHo@(H++^Mv;3qnHO z67wYl+wvlqOHxk-4nVHV3-tjI$L5sS4nsr2{!)zS_*Xk%XJ*9=nR1u!?e1a7DQi>r zC4(Wz)20uK?hqhKh2PU`UCP{}Ch6b7lH{s?lLwY#o+kEWtz1DNHYzMCb<}Bbb^n^Yo99&q@)sgGzo!IrMLG%a% zMclMHN{SG>Yz{xAc){vvEp(D|FD%f; zdD5?01rXB(eF-9~&pG&!XSS8t*F9@bxSKB){|aBq7j8Zp5DRw2bRh4GsMpz+(kea~ z$+pfnIK){h<%@X&f7y>vvif*y(*CxJr{y%KY=GnMvrXHm)^>A*knJ#d3DfdeiqpI` zARcjn(w&8db9wAYI@9^`=OpvJYTFOpxshfuTzBxQ{pLw@)#HYQOouxuys9mWx>a4R z(-^Q!h;TXlVq<^dw4D*UjXnR3^;BH&K^5ItImb<8+C)#(oVDt}w&Mrr0cB|}pbXzL zQNHGrk2@R=p9DyhEkXkGJQ%M^36*e{L?mKkV^!C?(J&s!m`NfgyxKN(v-_T{#F?9a zqzOV+gb?mDd)fN*XgV3Lrkp2`pOZ9=?4z2&>w5w2OIw? zA4QSKj*O(NmQ(gP2n{C#QSCg8p@Ij%;97D68NJrx`8*ibdKKl%1Nk>9x!y1FtdW>(i0&A!b3q`Vo{W0V_@ko6YoYu@ zk;mQNW&Is0d%pK@@z)=Dlq!;PZP;L- z9|5%WP>tIsEAgyB-1kLBn}{9!$`sh1%XXsyUrFfRA`W!j!>f|5bHwnF*wH&bVGLQ_ zowEKrAX3{m&F$#+*JGUa+ihlOKM%%MmlXO%l>_E(hA3&6kO@xCjzIsH!mD{nx~sX> zvs-*SFr=?p_XRpt=mt-i?%qKZuDauRPLVRl&3S8*XAnBizI(6^lZLvUnlOjp_=g)3Mb+~1UX(AVu+;$h^^-NYf1q&O$-#_7CrL}%j zUSd{x)prS0LOxV!iaY|3FjXDz)S`<_v51gjPP~)yFnFiFLH?~(%J%yK$zLOXvN|+? zC)^Q|!Qbl+6ER%R)}qy#c`zd1m6$3)CzDg0(mCU6xk>l=8 zgH86-1RXbIbRAEm;@_EWk5^2S0ND#0p7CrO-jRug&RR=dDByLRG=~BWaDzp0!dWH6 z=Y?s%z16EjGBQXyU(K=GqEw)8ig>;ojx zy>GgAy1oeWeA1!&ULHGUQ+QoTVXcn&mCYeG>puP%>n|z9xoa(z7BG%LLF=jHy362U z&sO%p3AS}{sq0@l9yc^P9tUuZQ<2o}qSa;&R18*}$OM}|i?wwlDBBjZH6l1mEL==6 zJ@(MP?^W#w9&Bv-mpHI%QC8Agdd|S_q%4-k9Vzne&me3N39m$l2h}_CJnB_c87+xc zF*%vFQn0yGPLTLuf20(#D}#PlRTxat+1zY85X546GtdFt*kadvmP7F^boRX^q&r=e zRTYX3>0O%&g_{NJw|UB!f3{PQ130j_B<7NwdSa1N*N&Ds5xnah&tK{luByfY4BY3rZeZVI_{qbG2@T9F z22p6khf=1xKDsN&>k7F=mKBv_N3{Z(;gviPH)nzhJC%X4+z|uRkQFTv^*wMD#HMeckcn#X{FOArk=#G2PuXT($uZyPa*K zpw*%{ZI}f^Rhk$I8({H_;i?h$(`x)Gb0Z$V$QIee&ArM=TF`R-S^3kG$$q&Q8u{Z? zek6LA^;+|LE{5xC=cp;(1$kJdpYFj=V0yTWs6G)4k9u!fw6R^Y6wL^hW+V`pJGkAxt=tQwO8Js(~mQOkMf$ ziB(R=glvd9B8vvdfR+#a)uMZ2#(!kh6I+NZtGHW$`G|W8OOxR!w8-s!nCobP2s8M; zZ<)@2;%_5>ivs#^xQ!0LU-gBifX7!z2#39v5Us2TVI6-C7oZ@dC&$iDvIjq=i z?pj(gW$NgP8EF~_cYmw2;9TO3EAZt9=oeX5+-)T4oX6HdLDA)*G4?m)OZZC^qOvr9 zQHQ>_AMpjS!3=(d8Wrw1vN?-G!`ys<{RpzscxFB5Za5LHA+_=}r}q4Uq(Ld{z@DwC zXUEg^o`Dl;aUKm3HM#HmXE?>s=KPLzg|~;;!=Sw2p(bpQ#cY!1VtMpfP?%J9=ua`5fWV$-zgkv z&-r)g`3PnVvb3o^LA zELJ?xUaxTCEFmIFs4Ip}@~_xJ+D=%%)X4()(!IN z9tqkUtel@aVJ8@a&5=1Rn&J7eKRp)J+jbirG9fN+|V0O~R>S!rOk=gwY{ z+w;+J`=$p{e8Q&rtzuA%)yp6E&O$pn=N)XQY?4U=(;H3;rlN=OOiS!W9WBMcYb z1R9AhFyr!^Vg$8C*l_4Cc_FE9Mu?d4WG!*1ragTQUta|>|e`#Jzc5K0?#YDc{Zv2 z&;Z5X(PL|gh(j{@9|q#X=#XO*`|E_TwWazIuY}^#XQ1Dc%o{=FopxH7JN!0Z?9F}t zDRPG+68^{vi_aWp?8~W&y}A`XRjrP|NH^RUa)ol3gebE>*l~oi@)uaqkD6d?7=1jE z^7x%I5?6R5$_{9U8l(~;9UZfOi$(9Ze^qhlF^mZ!UK3Ln?+7_hl`avohX#UeZ;{r= zRv{>JH9AnJ*5?CXjcwF~vz8)~P1^tf;TDVz3J@(a$eQ~CaQ6)?PbiNDTX3!BMz~0j z=3e9AumYVpT*`oQRzEIG?eg=%5YQoH;a`F{0?@9GI#+D}W8BG!`7; z|0QDc3EXdU6RJqYFV#_}>ZoeVRxO&QHDC_*TS-~+v}bDMt~%SS$_!o^UeYX$tqbUz z^s~$rNjWXstKiZUzT|`-txyG>;|RCQ$KLJ35K zJr>I@eS)PwO7R~dxJiDN)(Us8bWwr@-{)8a)7HaU>rJT6aA;Ze@=irBZ|9L1CFIR` zY#)@xWF_?F0=Our8}%Nid>yUv2ReT+skM^BOfIUxBBHTysfu2_cU+bL`Vcl~3p6mt zQNV@#L4z10wPK@mL~M7EKb9$iblF2HD|*G$Z{ZwVFmfMmiT|1s(J;hrgEtf%@@VVb z-lBagPw@{;Rl6dY8kM=`pq2-Mndu1GP!mmGC$s8%zs3RAI+RY+@ zMe3e9)MR-h7{mcj#H-d{jre1>h2$&vlbaJ;N>Kds`f@(su3eZcx}n3YOwcoshbcpX zRIe@xm6-FFARekMHdL-1bzEnEGh7tS{Z>-DMBC$LGefxXUJ^7b0Bb7C0axQADrb-RgeX9`j67CjQxcRe0Si`d(Jr03P-ppllk07LhBD^=aspcdm@Z2zHI!~CJ!y`F1 zK~qXX(MfytLc>mTmpjqd6cRdah=gtUR zsw94xaxVSG#o#DLz*!HaH`yMo=Kj~O=rB8JUX$LPLk!J`tUs^B7o&LqmKnNKF?PQUcW*CO@9^^UgDJ)5ZK{y#f5Th37lP=tiXF`QBtd>7clil-@o{IlWsC9RDrUJmvB zPl;a}9?WgwZ6F-+Ctx15$I3)duKx(>MTcQuEpVr(;1_5d<)7B)ahaD4EDQ_QFmhEl}8cZnN|6mr!m`Rosov z+pjM$Cz%%)9KMKNJ%`J450C8JM?PyiS{t4Ovh6K@Tbh^2TE{EpnSD*^=WHvE9i!Q0 z&$`=s6xM`Sg#~j!$C&^l7Qg_!>dm^pcIw+I@vq@&&Z4M@V~zN(deZpU3cE%6)L#^w z{to$L`qqDc9fx%H&ZvKk!I9wt$K1k`X3ZHwpL3#K!@!PP$%XMMrl4KqeOTPNKg}m8 zo4&$HCDdE8d-hsn8RJ^*LBuLYYu<%Ng`+#FQJ-(E}g=#~sH zVdOdq43qKFU7)->q7%rUG_L{5pX4~)jvXD=Dhsq@)x+zLS`uY*XE+biT878iO@MHO z7vbtS4M-;xMKQIV)al+oT>-oxGTC*JoaHL2G%`7fe0qYP`_b;!?95r4Efc8`GVb{o zzoKP!D>lPO{;V`X!ZJo=m1=-H#`t*}X6~W|RH=%3wLsgVy`JMZGgl)1HLd?wFrbWw z#T@-Xsw1hja_TUHMXoxHX5vU?&YQ~IGjngdkGXLUcPvu2i%;uFDeKjg3EY3(tSJ(l zMT*7ixB+(XEcTf%VeZYEu_NT=>Nc!hg+OhpI4`~wiKhb2*87exqX_9pzIXain>fAH z%Vj?oQlKIHm^xzCQ&IZWE}bg&Rs3|lV@18|o#ES=XO4=*Mp8%fU6^nA+bPVwYTE|$ zTk;N~-()nQs@7ymC4afjCCjKYDkNAQ_HVXh$Uu5dL9(^pALFkz;UZHBb?HlW#t!uY z)DinWNH&DOSgv~A^bDxyWuG$eNCiUP5tbQ3cUSH7SlyV8gMwRLM$Un`s$8^t<*&O~ zo$GPYYv<;FNPQq?7c9Tqf~1>}l^X)8_VJMXB(Z-EcR^52O$05sp=tAHb~l{w`GmF} z&gJshSAlZ5BxN_AG$P{BLB+C)nHchv?rFy%K{8dzaOt}?{?CZv&)*aYQy!anV>cEkQc?pzrh829sW`DFt@@1418%S2MWhiHqu;cu^%M>_2Yma;^ zL7>IVXODmFm?}XSbaicJTj*s~$aup8g-qn~hcOLzp{rk${)dqL43+wy8O{F(6!HHm zSdN#lyxwMGy@5P71A_USPLVon`!(@DOtSqsE|2FT>C}1Ghj((gkUf6&lBHV3C)D1) zO8c+k6N%A0&qJhByJEq+o56}NE7tM)GqLM#8!v*`3ZcUXs2mBic=7akG z3ljTZ75ty0&vv>{O&d3QvUSnw*LGGm*wq4xo6ze_Ag-_ zy4$tQi()FlLe1k7wKwvG=S81t=NsG2>L3h7T}$)_cp{~Rn%&R2jv`=8iy7gG%coPy zXTY6qXhCa~wrE*#LmS?^bIMX9aqyWi`a|bGJUY`O!gmdT1+PaITH04``;+f}fHzFH zw_YvO>PQn_Es2Jeg(Zq5F8_;#3xIe82RrivjJHNC$&a+%Nny%^NXnPT*UOTEdJ>LA zQSUL5w)L|qQ~KCucN#a7P}PZd*vi-67(2X6y#W_daYjzf(HUG(BiKn7RJq5voT@UG z{ZiSP{IPQ#J}Riw&iF>BqHU@4PmsYhKHSy^L0LnPx;-85r+f8qxH=6ba+e#uJ@jxHmzokrZAbncl}y)_4LxzmPZeU&#(0wW%O2W4$=bYS8}&UadeFt znrP&X#)ol43*YRsuf>o2uF|ka#)c6V9a-|s3E{45(_0#UttCs2bYq!?i8WxEtF@LT z?82oW?NyJmLPb@Ii&Gp1W(r%Z z@G*oE>4bG;!FdQ}+@seuZKsqf3{6lPPMj0XW28de&gL%S?xM{rRFL)S@0jYt?V+q}EC11M>W6f+bQq+F}S0l&ADmhwKP6JzB$*!XE9U;U+g0BULq1p4>Hm6qa%_ zj>;qt|k5Brc#Cv7Ann>h-=O--mAWxF>s+RFsm+?$&@t z`TneUC+vqh2w1rK)Is8uA_Q$QfBLCZa zW($rTR!d1aw#8=;MdotFIG3O(rzABJ+i@x_m8TNf+AE;$hTq?Ebh^@zJ|^H2%+C-T zUz?5Rfe@!jYLzT>Z6iwFi1EF$W1~BvEeKg6sL@t*Z2EL*Jy-&%U%Pf_%<&} z-U|nMTQLu+;7$ zC_>az+5J3iCjrQmrD~o?ICMG@wx*k%XtUG0qao>ugFnG+UcG=dhG!bf{K_R?(U%Ek zm@B)sObKygs2}V4ux97t^|?{wsZ-->{fRR(S92an(?Y%P4Z~v+bvuXxrfXXUY5l=^ zL!&!u%0Fh!9ZB%ViPfR>gxbkrRPwiC5&4-L+UwZ^HxKo2u~I$jE8{rp62B2Hms&dC z|7PA?>dT&IDQItO5b6^OUmNtN%_T38%qx%yDJT&~`_0AOTyOCmSNtIOmn?YbBd2@- zyQWFsVGH5{jNYPm5=hM_}NDcl$9jw}~sD_tBl?;_Cmw7Ydi!IyV)aw)a4 zkPtzuceFhKK2|__f5i4{&ycdK5*&8M{3M$TyEN$KPzs2%- zQ8u#Ut9%_@^jV}_u7>ycw63?>S>DfPI`6MEX$jurBTCdFnHZo7+RZBn{OvQH-T|FSyo@M1;a(l1uov&^Upq<;*+ze@5@M>4McIs`J;n zb_h}0HA}EL<{TF^T_nXcG_%=Sgomh*gVTm>50wRF)1T;MM2$Di8y}1&L)$;0iBE9f znXN|N@&dbjW9yk&Lc&8*h;`;qs@Ai@!lZkEyS17N29TIt?@B?A1A=0tSLE) zin8z$Q}eOEnPQ`DJ3p}yji4&e#-`{_L~D*fMZ@&T2H-7{gox5vNPLVil3_ewPS9An zxob(%UNhBk6r|mGK!+U9hZWIDY?gG_^kL&I_PeTJTnpIZm*<*6`zj8BDK=XR|4++wd-A3;Ov3@-c9jrlD3W-8yp21vn%SR55j*QTt zuIVO^%(6hG3XHKiCm693+&&}^I0>Rznq>*yUG@guGN-7y)Pt9S_|j$MR~b07pa24p zzsmFG&2w|4L?8C`T_G7vP`w{QTGwslAhHM+GF<4Sf4&FirA0kw@zl#tNM9kOEuoglIPWg8Fz0I){bNf2oXE% zKFrN)+1}1YO(rO)?uk&0|er@>nFp+6&YpcN-Q)r0!k`EGrthf zMWlg4Ps0o^Hbf!lx+j_Fy2d+R`1ZYU3dV_LECxVZ%(KR^&YPp#(2=b5W_L>q6Cwp_ zm;35`=klWd{&HeBtIj~l34GN?nsYbH9Gs&t>+_NE zCHo#dWv*5ZZ%(6O;ICzY#SGN3IE5c0swx!@{#C1KVQu-9&Z{HY1wom;2sLx@nKT`JIBw$Y*PZTV6gwVj=pX7vkIzDghet|PCVd(ieU1K3`PSOKLA`q^ z)6OySbf>u!A=%lQ?bx1|2zR12E1;L>%@Y|#J-MG*z|(qy#dI-gMy9Up$@5q21BOqJ z%Zoh(DCRk}CE>}rSv_P;fBH?KmJ&<26z~~+p zvb%2j|M2!!L2-m_8)gy`G`M?kclY4#7Tn$4A-F?ucMHzo?rwuS3_b*Rm!1FnzdhKk zt=ig?J)5ejnXc;T>3;iuuKQ|*9l$q&es->8Of=NfXi;`}B$7{y6a*Cp;g-~cC5r+( zjGW=0KYk!<>$;N7mnxX7HJ1C{42^8e@yXngC%|G@6xne+v$6_jISy)f^4(C-jBD1{TKAuZn3kw519}_JpRor~yp9XrM-1O^+#12cw~v4=?0p zkJCNs!o1agp4OI1=`yiT2J82|cX9%tR2|Mo(FaIjx!vFnYXMoKOmY;hW_12Gi4(M> zTt-_G%$r@X>0(sxaJEdRF#Xkq9E!kXF85ZnBgqzL)nBHG;E4aI_Z{3(i@E92Q_i8KG&t!+M3wPMf!1uM4TB$?F--x zw|1H;E;jD`@&yhYeq`(H%QalVof@E=;8>ALCUGNq=dq0)|W; z@rw+r?U`YAv}X_U!2wlWt{^2LIZKDMqInsK)fD z)lA)J#h>XBSyXz>?*uE!eHVh^B#}vssC2dLMNxHxZl}5FeV!0$6Bhg06 z5|Nyq#8)%+B@RoxYWWD{kWVOx9x+r-SWslp61!CFlIkfb z?$t$BR#iJG>TUGX9y2{wKLkR5GN)ulSkr`Lr)j{Zc>9tTwUJBgJf&z&PSwpZ45#Vq zk>RdM19#h2<)o`9S${C=%6%X;zDumX~fI>$&I--qbTFw%o<#iKH#D#!uVDOqSR)^v@1Tg+W+qKebYG$aDz)grE=6-UrMo2-jA(`f3=R(^p;%HD)qQ6w z%FQl>cSf!<4JZgCDUw7fs3j{pVou30v(;`u2XO}D%u$3@ZOW$ex}auY`o|D};(sEa zISfN|FRw1j%lYMZ2FjAf@3iCb^hT5bCHnArzGZSxoVj?m=-lKyZ$$w3KFff}I?3!CRYdB+7S4jqlg6?`; z-*M!Y^jNf#Z<6?%=x}guq=W76d|ykAU)l{R(0yf#?_VJAz>D5o?zh z4^W;e5c3M1OPlI`QyF8Y@&VDQ=5gdW-@%3?f4xJ32pAJfHes%`@y-f8;@z?Nj-$ng z1*mTqXwgsKc1KmNq%*#XS|$J96@DLEiA=w?N7}{e{$I6Ii67z0(QnfTZj$x?h@$i6>#%E3)&m!{~ME$C*DL#*hcj>J?K!=@PojDajr2#N~sb9=^p89G|3$J56Tv^ z`A(rBQ}&`3F(xzVL|-fH69Wi2I3SLfG<0I(3-|x+b~x8qhWzD)l*+@ufqGedFYh$v zeBSX+MPg_$d2F>?5)URc>x`eAHEKZ;&gPt6UMase%W`n(PAs~{MUe%_o69l)wDV_- z|NCX6JRX6ii^c!~v!P=SNS=dIEg^h@D>bon_HU*@;B2j_$OojnaWfOV;r0?5l4Eu& z2f(^M2wrAkV9ACXw}-s(2xHumb1Dx8gfhOA6%YAX>oONCD|+g0LCeD>~tTv_`<;COi_ z_yu&eH#d=xH|^cO#uukSwTWjszOAPffRUk$C>Hz(AR7eCw-~>ycRY!pRz59P7cqWhr}R!@t-80hg4K zW*Vvf58OhhwPJg9e;NaX5Np`}&-j-R%s7+mo7xG8$?P?3^s@1?@WVT9B0RrQ7}o9YV-ggmyMKGlK(J`2@uh7?$NP{y471S_YxEdG7RsCmpTFU9&!Fq2Z_ z2V*!YILf3mN5iDh*Rd&O-*IA3)cz#Gzp43OJDHX3Yhd_S0-V@t9IqW_Mxq6{@WMW$ zihWCG(r{!7=gV#3`lzN`T#j58vW}c5I0d~=PW}{X7z?e0akD?I>LZbyW>;*fs>M{p z9~()dqD1t~I1`}S_rQYt#LIXl(uASA4$)&_i?+_~Y34+Q)Gow5z8?&r_qy*Ftwgu7 zu)9H5$VGZr(3(Pz7(&Dq?Dslbd92R{6Sc! za#Ppdm|b4_6FlvxR%E#ivk4{WY0dJ#PFD{eZ73&ZYwnAF`Oofrg&28Wqd_hhmSA*z zodB=AJIOOrENynPF0#r_r2T>ICcnU4av+iC?hPN=+<&Kw!~0~&4Q5( zR8^o3x{|}$Si4IPs!o0~@RwEgq@vUlBw%g1Ia56O>tt!QWyYTtZ#|Tto>%XviO5@9 zD%Wm7Iy;iuCOysf-;uy|-i;83Wtj;j#}(|IwvcwCZCne%>az~ne;srmJh4*w((ls$ zy*i8q#L>>|55)ZUkodot=>Bg*20XTAV?m!=K|!sA9ryqFamIQ+Lz->-o%5~4Xmv?l z0r=~2rbd8@S}!NR0d)w;NHCw7E6{;*d~m;pQ+Ig%NU^+^e#_!uFu!&7h%8!u&^sJU zFiMZ+F%oUQ`OKOxntg)F`=KO9A-UShk%9#ko`kaR&(Z?9AhsqbI?23a;I;g$1b4hJ z?kri2-JWLtMhgE6r(LI(lw=@mS}C~k*vq!T(wq=MVnd{8;KUXed2#bR=x#p}fV7mD z)A{^(QzbP&Qz6fvnTSD>8-3(AvhI7oE!DaC{%%E(@$^-+#y{x<%lvx!*HdGI7%30t z6Gqv-L8L@w$xD+W!1YNbmC0cG+Dulf*_m*?nf`Do*Nxw8Z_2k-aOCU-6v^X(7_aw2 z8D15j51uj_-<^UvH_I?52Tf&+B{K<{j4R$`yquHY2RI^J)G#`}yn+*$PbEsHb@~bY zivBbDai&!Wygwgy-r7`}PUEA^iG$3`2)n|m1oibj+qfJI0!WP^jI)i<0wY)p}Zx^wSL`9)icDN#DDpzSot#cE~eNY=Xpvd=|@ti$^U^D#Kcz&|Okn z?v5P}n?E~)=z9|IKpG-1go14IXhVePt>iaV>PJ=<`B)E}n>J|Y{YC8+N63iYCEddy67ue8bW1 z4k_cY`S0xDyxFGXZy-^t6%(88=`SZG%g8gHq)l182Vs(f7r8eThP5+>mYOEgxg3aY zu;`5@wlI!?Mx}MsW?U0kQy#f3&Nu$!^!>A!Cl|RqlN6^Lt-%|3S?dR`wx(3)drBH@ zJ|D|!2NVGRr!U|pEC!u{zDcw)!|Lg+zW%41N3VZKGIT0hoI1tA@*{I8rfRvq0x(|T zEe)oD+?)ZZCm!S~_U|S^wDo3mow9RMbgUhEy4*6&HxsFN&qycz0XK^+g~Ly$ck=Vkh=fhkGU72OH=jbAzl( zuXzUdqolGq(PPP($ibe1F{wnanzb3dYpqnjUf&NqVavj@2|HcE0;kcPxmJ0bk|D>Bl7Lj^n=^|iYjODZ zorK5Z6KSFBIMB9a#?_A7*Bo{mokklS(PXgxzETRRP!W|~m_dxym<{>;)1Od9WPzLcvecrD)c}Iwm&421 zJHo#kZ@AcTPpRO0`|aH$RrHMJ9lotsPv~+Ay#CCPT`QX(0&mo)Q1<)5%fy9aEEjRk zSe*}F@)!jpNT{<>h!IP)a4~SQT!836r-@Lz4I;gL+uXhh2S4E`p7eAnp^EFIQTjOW z6HT6@SBql{Q>54&juJ7NlJd9A{tpUTfJ1SGqN@z~2j=49qKvtDsZT9Hxy;w&L#pKC zO%*eG{XlJUToE}&jaTkj?2$iAPwV0MPNu=Ag-#J9DD36`tWi=mUGeM0Ci!>`dT8fX zrF7EMHD;~`^wsQoZd1nJs@m9v8za0#pJtS|%J<`xyu_reU|bQVGKYj{K;K2o%U*=f zY+Ig*HY=$<1+PI~nSisTf?8IK?M}<=bY=(APZ&tCupo5LE1)jz3?1(+h4e}uG}`qP z%2b|?;;zQ;E^3@EI_gr1l!&^lf3qHCVyAGtsH9wLM@MvsvMeXlM83FF`>@FjHi>78 zbym6ul-~Yxt*me8tAVuXhahpFqb333xFRq{xn1`yOFZAXvTO7Pgj~G zllfXSB}-V}`ew&_uaIe@-OFe(-FEe(oK|VBcE~{S zsX>d9md7?hjg^e*Iqs&Ym*ZjND=&KU8rk^39yHB^;^vM!Ps(@~h^}i5N!6TyJ7FX| zpi}c|=7|=4OZ)wVRjEy{tB5pD?`$!n=PHMe*UJ6yU`YY zy%Ppfw0M3^OV$r|P;$@Fm5W!ceZ8DvE?Jk)qieEH8_bBO@srpnD$W_`N`nZneAKe2 zv2&!~-7MX_uidK*ua{LHpHFI^%*U5~AD>lqh1|clbasW(8N6gywuiR*btu*CS=j+g zxbDR--1*{o;x9^T^Vd1zU5qAI^?8rSTEmIS+CAZ9AKLQ-sn>?NWa(ND3SO+7Q->Z2 zCANmrvApSf01zhpFYwnuRqP%A<0GM1?tqUn;W<*a^D`PvH7asfN_&NN%RoR>@YFo9 z*`&InG5$Lx8 zv!nL>A7pp_W-My^E6Q-vLhRP@d)R1*U@6u{;_lrI7xriz6I-IrdP@W%jUA~ouQl2F zY(S|$3+7r{$oTcT_dVwAVlOpt*1n~|kjC)&R^7GjP_R8uTW-_S>8S~Q=F|Y#N1GPi zH;?Y)C(u;J_y93N#Nt4Rm=9idZNh_cok#a$F1Z}u6dI76N#8wvW^8xTYGvx>%F%s~ ze%7Jm_N*Cfj!1x>8U2tn!Dxt)sQ-(2efwpzYwW}R_UE*j(anY+0(qD)_dB=qJh)g7 z9Qm~ola@CR*)~;9#ve?!)WN)ut$OdG{F%-}DNq?N&!WD7(;sg3V4<*_HzEGXCWnjt zQe+F3r>FJSlR;5e@yq&G8| zX>QQ~EMBso)I4xTRyZwsfHHP?HqB=90h5OQ7f4#NarHtCI6^u^Cri0B=O-(Px(ZrP zf~--xVDj6n-cJ{?{Fg_3r$9kH5gGEt;Rs096hP=+nGv_#Il45JwR*b23Gm)R?sNnm zG=3MD=r|#SUu(@*#Y!hGDyaWWOA%q%lcbTH2bY6QVkB`L9i7vG`DC^tN)}+D+(nE0 z{$ib(mm31HD!#s-M1|)x17}C{I&=Y3CHxC%1%JX*(YmGhw zL)~^5;>d60G0ca$9SkX!F)wtd;xo2|bmV=+=xOx`j8j8~5G}8tUC#3V=I4@SxDia( zkkx7nW-~m!?AB>1;+F7Gg-G#nW;)Xr;=NfjUdmB(6L|B-LKLDMQ-OsVMIg)8oY&*l zi13Jr7m_?SXK%U1TV6$8;-g?3r}>FVE$$?p4*bWfgDhOXrvY1_5LZTOiyflm7ay0K zQ7rp3^v3oh+(TbSx);Ij1f4D2&@p?9sVdyZ`_34BWiT_>$zW3VGXGF^p2hX(&=q~a zi+h-!uh2xIA}m_vP?|j%vB`4`?&R}7D*xw2&S>J&03aK>cPr4bfDw_$hSQsKFA=p` zi^BrW%)V^5YhqOuZ%RB^r$cW#=2=59OZ@H4k9`I3t$DB8qm0Gnu!?O^&z3E~^cYM$ zb5Xpi(t`!%bzYhGbd>}HJElE3wI_KwDtYqv#l%4pl6M852K>xlyuJd4b~blpK4@Y% zjl@|eA44D7(;ci&nfWp`UvQ?ex{1Pp9IE;4^C9;uyxlwUk(cE^diFh*%s7%0GPER; zj-}tvIEbfIB)^53v&$Pd)Ev&Q{nlKItg)0RBDzv5Ie6-f8 zJO}FL9~AHMYc4}j4h_anzKnC#hxa}PWE1;>kN9dBsj6iN6x;OPbp9)%^x4lCt8B!3 z6)pmUwH`@n~@40^j5c5VgVmkieV%6yMGr)zn-j!NNJJ~>x06Xf+=^@JNQA6fz zCpLHzJLcB}5=lgX+SVw_f0bIfRr;g-?N73>IPOpaWd1L)_TCpbXoa*i;{q=oCviKN z1d^==92A&Xx6f=Nn?H8#F?!k!^p>*R--d6l8^tGI_9ZyG-MDJsoR6|Y3Lv*#Has3D zWbLt^{fRo=v@i^A@0=Lis~i4gt4{=e2be86l7nK#sAGcC&Z~mIm}znF-^&Vez3Fam zU|GClmkJMBoouoCk3HRJb}uC_TpkmkUaW>rj`D|V9Qhh@-V9WTlv0ePbj9N8S=u}| zUK(%pGxR*o0W*`QY#DEhJmSr#-!7Z|;3~ETGDR)&tgT1aCsGB>3TFkBi*CE&*pV5i zsP-oFcVU89v`hV?En+Cc?#-95}n1)Xkij+xT#d(Hq>cw8qSm zeQ!;eTG#Bq$(nWoR839C$R8YKKHpesLcMURJGMSE9l3bp;I7hz0OWyg){@sk!r0?Y z9`c3WTl2nkloMy3v@&PPTYlGmg%Y5VBhDJL?cvgawzn@1ltTBslE7k{a08*6U%(1t%7%HY$XxWh@!Cz#^VZ&R8>ViBaV_@DMc+aq zt0rDs8HVQhiqZk2(weO<7c@@QSQHWcNAK5rsRS9dTBlnizR5j@$-+Z=^`4_%G<|QA z&tw(dyV_65c@zACEP_mdVL{>;a(?i|FQwJ>y^@i znR4m_#7**BG41y%GF;O}eO1I`vG~B1d+-lN4nbYto17!;uCWe;#ErPJow|xrslUC< zHSIgbv=-fy4;?`Ixszz5q~sm{5Y=Qt8__ddvGiDIC#Wy4uhVMbk<&e^!|0?&^}Pkg?%;F!V=Yhc((9X|O8z0LS>81w zsqGn?uO8C+%UEsymM%z>0vSY#ZzP3`7mj>@{T!$SH-eIzUPZ4EUNPKEa6GU z(?QlNC`)MewF2z*kOG6d-k!Le>lw6AM-p?4bC+e@uk8D$1>_l)BF$;U<~u`oN3hu) zqiOJn(pf3oElQtPh1yNCTVKP|95>dSrAQ>dc8Pbl$2MyuoF z?>$w3xDS|(P8oQosTVR|mHiDgDiz1*6$va&b39;EWGOtT1%(>XZVbhoAdD%V zSojKvIM}$5*@QT{`y&Y3-~~hW1ohUYd`mHO;6@+(&eUQ&Q;%Bwbr19LC^W^2Dcf6XD~;U$E7@qF2L%6DKbjgF*&_gmF1ns%Tq;`$ znVp3_QvrI|Oh}cx-FZf{Rb(_9_`&@Sw$q9B{O2gZApWac95LDFDDrL|mHw-R@9((I z;1d3pmbj$^qDQP{RY&c8jzR$5+;G;#p&9e;h_m+tLRnD{g!93qALnZ_(ALoy8mXkc z{LYL<9-^Y&7MeK@FKD1FYxtLnp%Kxytv)8vn~%>O!|ACWUIYs9F=hE?KTKu$Hq27Z zyq2+S!`x)5l$4}fEF>AaJ5zHMa=VZb7Z&6_De~2?`ELk(4pmO!X_b~1y;ylHVODf{ zR_zR<2w9BJ<|;PFhwLn_z$Np$1cDEABQ#kqQ4dFAc^R1D;&Px2h^Ez@hfb+G z_QvEZT;GjetC%qqj%*O}Y#enY9M5|9AyI$)bmHZ)nITCXUw~jYJhPR<&3)r$-}cO! zz@&LSYBPU@cg397!<>+mm+<}E6E1J+Dbz_g!}oT9P?z@l-Px&U>(NL+7|LO13Sx^n zFMcUmtTgL=>?o4Qt3A}E-c=&nNSJ+_e*MQEdnD)O=?$xM{ zd{oYnt+nV5ooThphclfMp9-XFFNh|2m&bVKP#7f#`X@gA|0oM^;D!<62090~!3tFm0{> zR26gRCl2ImNgXSM>CSJ+C3e?Pv6|;bjHUgGSB2DA__@>B_A84;o#{WmXwRdF9Q=+K zBVe_WMoQdrDCn7iXG7i8bch4>F`a(n!H=^#eAw9mVL2Rp_?kErc=-AIbd6ytOAM1_ zMe2ATmyku$EM+$KF2lx)3CFTN(ZFvdLaSX~hh&_`&a#9FaN6~Xy3?)DKSHQ~>+oJJ z!%2$aFo|ts@e}AAugoM-OP}$|TKRd7F~u=oLA!X*jSq$wMkMWpT|-{NRa(D(x7mEv z9Llq7twfmcGPft(loWFmby-##D-_4|Rl1lO(DR*L%JQ;t`-UtZQ{XE~BrDpV!PBp( zTO1|Z!?f3(l{G8W6C&%*1DW&xE}y@ybCcf26Q$8SYiaOQNxsPnwKlgPq~57H!-8KMTTkO%_i0L4S@U-~6)}@Pw(8;^Sg)CcYJO=&l&z?LNIY(bJCPl_@S#l{`v#ATA zl=Q+EYhZW&iTwGonWRl!MftAQutL7BP_lGMQD<3!FL%&jVk8xWdH; zYo|j-vA*Y$`WK3NxMRpQkzO#ktMlyq+q*br&y5=}m)Icc45@qG)HZ9G{Sm~cgR4rw zDMv{s!NlZh0WSworaMkp`>ZjPot7t*Yk_}`c~wzU?V=!Qb4T>})Ugcv0S|LWDwni) z{(YXRmw3;>fe13mBOsQN$N6s1~&Cpz}}M;%N_BgOIJp z*GkpmmF4$>P%LOk_1^<)8liI`6}t$euspgP>vWZDY4X@C7aJZmF`$Z`&h5;tuKk8e ze64;kc7bN2Rlt$rcbUTNR zek?rC3<&j^6Z@M2%2KAAs4+8334^oiRQwltSgZk9CFzMwQQ06z{5lr~UFkaZ4?UFUpwfySBz7RXupB~7D zl*EnUAJf>@0jxbRXYIt}yGnE8@0Yg8yic28#?!MMNGd1A#G3+%s{JBwTqNaS%WxD! ztvbe~xOi65G)5j?PAr$_!u`T4#yCagA`(75;1vY*qY3J2Pwi;Kw3%rbuRS_B`3UG} zs@K)e30vzE;Ewu@Jc<~f z4|xgDqu+PrupiaD<*8L&C8VMVm<eQMWul_}8MNvm)xmGkX+SjIf*@ z5U#f?Qgbm57XZb*VWLH5u9^YH(}MHYWiuONS7pZwFuGuYqL%c=itJJ*v{= z4=$YP_9LnP9GuvYxeNr2sQgJ++oJ5y936Dw{un(A=Y;j|!3SaKe^{w&2XMT=5KY4C zl(Jg}?ex1v79HOIA}fslH^SpT-eIf%cgOMo#mpoUSi>d(^fmESXU6bWqo>;P^+8at zJbg@&ufHJXi|L{eA&k0s8;1Jp6R5svDK#-iZ=ZeOg9b4r)D)a%{6^dZR)mm_LfLuV z-fyvKt#z?XMLI8Y4P&c98uSU-2(fpnijC-J#>>&&q(uoa;q*Hpv!;UCUr(0EwV| zi_m8m+;uLyk}bYWl)MIC>mhCV>)bQjwdPV*)Y->8Q2_^P?%s_l=|{;ywC#7aSTX1Cki9Xjay7V(l8b}Zzv;K%f===A z#nt=RrJ4C`iumzz^JRt{6b+spP3w;Lv3UN26X60FWH0cLf~KdI`JaoPCIbEX;& zKywIA=>((*hP|$HG@P<_FHLUud)-u~me(H9%=4RCx|Qkl?F1}o{z=M}AK;;Ns^0po z{{ZI7E+Ayu?e?kt@l5bC9EF07uUSK0GPv&^X#Pg&^l?`N%OCLkp*X0pl*=)h`_2%} zMVYH%E>E!8mTN~tasDO*mk`d!RfX#1d5Ef_x}#s}d;eL8aZ?(R$kUR6+%9KA^1^Ru zI)=7|iKJd8uHO1h_!5qCR8#bPYZ21j@F3TG*OzZ}cAYnFu3jCEgKD$qiriN#woQAT zn1S^>G`t9MxN5&sueqazWO*3M=n9Rtc-5boAZQ96p#&4Mudl!*RuAu;T>~RA4u9zE z(#Z_oAPe!1q^$%X;EPj^$;jYSuEd*HmW z`@}*MQ}vq$MKTt{t9YmQMk7*vB65P}-uqB&AxbDye(Yxz&l)p(=P$qW4iMZuO=esn9Iy;{J&sAXp4Ug?1`LrCd7e7e z92pzlH)@eDujKeI0zCc1RG$&se(#ttf^$DQlD@i7>L4HT#OEPOilgbk?`3#8@xdoO zC>yyD|B+Gl51+&OSaX#@fznEFp#sF;Pc^ zH7-Q-B~4W0>G8k=(B*s91>`ZSUsU9TUG39;ZhNJVJEljiw4cMG3Ovt~p3)C6MnyL2 z;s0tk#$3NA_)$41W2*aIzi?Qy*v@P%n`0jfGa)BK!OV|=X1y73GO7%J(;ziY`?IJ8 z5HO+eouyhVd+`$k!A9$ELJFeBC?w~osfyb(`c18$x(zrnsm}Ly+GE!#_$yx2Q1U;? zm4)?>Bh^YBOzx)PJJ~bnwHxDTdpvi8`2p&Ob^fbp8ulwP+65Wgl(Ubx)2aiuwcwdl zMDEPnQX7%F^(%5YGuvMsVbG{)N)H%mO}xQw6CQiG>vDqw3ip9}YA-FM{Rv~&L$WKK ze7H$0A?c1n9zcx(b~`FrtXk9gdx8BWoQP-y55+uQY6Yy3R0fL%?o^GxDC@L%Huszw zrwo1TjJ(j%sY=JoiBhVhvdw1bIWu38VOEKSn$K2by`2b2X5}y4Dtr6i zY<{Jcp%_hIUi}(;)}!I}EsB7mMyb*)a8 z=pzj$&x)~nje4(HU3ga(b~vY$t|~o*mDDq7k)&SLJ;w2q^BfpB+xZtwH|hW&e=0HJ z{xkkC>N)+3Jv%gM=7?%{0FTxEVWI9fV@7!s8)L-H7Y~Y`Ik`)me;VD8iR@nH1dnZ1 z8>3qF=yup~+Ky7{ zqQ;-##6-ojGJBY#pa-=EPr^sUMfcC=%slU6XfSE@uT8D(zgE)yVNGV;C9 z{)TVk^)kzJ@nq(tirnEbqnx;FSTXDRh~-&@7Y6%k$4-;kPE{~h-~0aU@#{lZbJU7( znxoOhuP7Ilavm14JA;B7yWwpTma3e4is%-?g2JuEETOorRJVri!}S#DkmggF2c#=C z0^Mm%gQ=pK(_Sj-)HsI1E7r%^3Kz}Hk>S}wHw4l*KRAcAF#DXfIr4?9xdFbF4E@9J zD&*nuQiD-cCIg?ESBs-#f4X!Ge2D~%Sr2cGoyNHs!k`R1xCxJX_rx9%iMeITtiu%_*2Z&)^ z+Gx=#!=ZZbXvYsjEf1%?jw{*G6KF(BU*lJ;AuBznuyi^~RjWw}1l);gR zNuVyB$-<$((h8=%DSAjdIo!oi9N_Hu583yAleaOU`rm4`z>}8Ezl6SZeX<&sIARjI*f;nSY7q}PsK zJz@0B1p=@wbF5ibt1N5Om|V5nEqr4y^6B7~aR(Y*pT$=KVIv^+t+`FTKB=(THeRfaTZv`5;!bRG87P3x zH*x)+)Louvw!a|HvvfzQ`X!<@kGkQ0VCn68G4_b>P%N)U z>NBTUb@6mDgR*Y&olD;X^?pCa_kLFLwe$Ih+laO>Dos}_sEnS)MZpJ`o8_eBkHOj4 zQRVP#j}I4gYz z$DbulcMfwoeZgyxL?%@*(<$wt#BrVf{;+cQa^LKWh*W7*eKtWaM~ea7?p$miw!E;IH~x{@gnu|=o4sxTI8^Nf& z2WTXA&*x9ay+wCcQz)JV0(eV7BBD7dXMx{(v4k*?YP0#M6!4h3uT0IZ*0ALlQL{A- zljl3p?uX0XdQ;C%_svHQo0sdsgC{#?)WpP7mUR00cOg_(8nOIZ4B8GeM6Rl~R#*ZeB2DCr5Rmg7u%ff<}diA8Z06S`rIWWo{O`@#T!c#5=+y zYU&zMgbwY9=MtMWd5@-Rw)drJ#@JNZ@^!CVf3IMzInsBgzSC>hNk<@^(Zs5F`O}(V zT21DhGEy1q)KMX;y3^b}&Uee>c!kf`&HQv%LF$r>%eOKU#5Lojt&cN~vlo5^ID05W zoY1*X9yCq2=0t|ITNh05>#EGz4`6MDP1N?}@Lja0`JAVVIbQMlYu6u$S!`oq%pnsF z@1Te0sYu#Yw<=g7^jB$}3Tpdr#EbmUAUOa8)JBPmM z!W`FBWcQe{F8lkZ5$rrbw;f_ouA@ASWJAL!unN7f8PRS{A|WkNLE>4NUx$Ni{D(*l z&}f+Ig4sh7y1m!@mUzt|BG|BTWGEL_>%^&l1vc;mW!Y-U1qWM?J#4l}GTM%SYr~0{ zZ2e<+VJ097g?Ne=aqqliSS7VFGWeUw!Qaq6V{B4zv2Oip07tCH^L&?kC1FQ6YB2W{ zTPdH%J198j2&K2+K-J4)98E_2-6rHWFAs4*Xxdc^Vy$+w!uLHMfKGMc&32^A*(=~0 z%?4D7oU5Mfa`$>vW8!t2pmRiEYJBi;aWj;-Ir8nuOL9;8 z!U-E)t1V7EYhGE5>EEx;g%@<3&4dJ#5!PWX1qn8zxw8#+0L-y<)rvdeOd3^EN{+C% zJpb7mdzpMpZ1SzzT>R1uKZ&qZmQWB30FI>a#__i?2c3dsIVnrq?+6Ws>}3y)fNG@R zzTaC%!hfE7e*ziRim6oHOJT&Oo=!n&B3fHSkY~)%BT$m{Y6SX)9W80_8l;KNQ4># zg@YQ=Azc=@*y=wA4P0}3HONozV1viQ@Vt!cJ=;>?YarkA$*)#dGPlAr4as)v6RvtI zML3DsbnnNbzZ+dqQ%^|GZt}g9G4(agK{4|9G<7Femk?Qcdq{~3C;FB-^Q=FToH@y1 zA)n*sJTddz-V3$9Kro>e7>p{N)s($)`hT$Y)Gz&zza=nR%Y>R+UT@5D?og zSB8vyVd9Q{91Y0F&Z6Qux&+3V<-Q|q<`Zu-{mVhQGyL1WDCO={h-^Ys_G`kq6_n+_ zz7%Ooe!FU{c8m#V7)#~rDH&TD*nG60S>=pHhP%PuVnQg*Lp!D)8<5tVxyQuW5_w0A z7jOZVvn2@&I#aox9277U6Jn`7#)Wh&``BFtc-_OQ=XUqk-+rW(&@l<-WME57Q6Nbcp7$2%c_2_C<(CKpo{ zm3aVVeRuREKq;Wxq{t#8oIn3Q9{vJpkLwfLD)Brimi?~Oh!2UlstP?C zddb{+w&7fR^~l)FaN8YP9-6A(4)#9VtY|&ovvYk9tUPOa{WeMfFRi(6=2~)5vhzoI z-U5PUP4E8Kz^=8pYO9li-Dy#kgtJlbz?rnH>_X>)UP=Tc4WRk3rZfmn8Sub#?p9xeu8M?zTHzFonrK0_W_36dxh6k@pcc2CXEv#d|K+x;XF!FEUHi zXr!`vkK0jD4YVO~ZHW_0w~#&~b^_L=maXl*NL!_5GO#sR$!c`ofI9C8HoJ1h1h8Iy@UOH3P+a+;ATA5O*`@18s>u znb@0z0QoaBbkXBz-9isBXcx&6LV>FC1;MCLS5{2tM+6M0WiPF{lG<PK*EJQKB>?YUps^$I>ZbQ!@sGjIHzMLm69(%0Vgsn*v_a`?L zB_xlF(@JYsVobs4(i2U8b~@V#HGS5LVuEPAuuA|#k5B1kL`Lx?m5PNJA@lb{9u{5+yG{)@) zKvG_4z$ceHm!&Z)tDE#~Vs;x|+Mz^hdYJh{w<9i3nSLki4xQf*Ex=noRRH&w#}oV? z;ojJGDn89T%wyF|G^=l&$C?@v%v=-^B2jdCK;L!Gfz#Lb6=PyBR^2o5Ty= zBE-%M@i^`YJ^UKA+fL+BeAn59Z?+i{L>!CNHmC&Tihs-fEKg2)e`fGD)z;Sb%=Sd} zax6F5pzKvUji-Ng{22(=!hA2Gg?)Uu8N~<$y#w*%0H~8vL|^A{PW=4fuMKQiKb$R6ObJa5}rYDbIYi9F|%R%G!K)yG#-$B zY3zAbD=i}}Vty>2N9+B!!|rekhBARfMBV!HPA)YKL->vjWmimn!E(H-L$lwoLLh7V zQj}A|FL630BpW()ofA%{zAlZ#Saux7O+a^2UVKJ!29fLWe9y8pQ|l5M5kD08apX#? z;2+r}OsoAkHHPDFR&pp|%?u@6mZBg-%@vtXSUcNH-vW7u-LLcXw6loJe{&h9rg8;L z7W8AK{T6GOi@uyK#ZsACb-IOCsx0ybIR~W1*v_BE{We;C$pH#3&wWUcpKBGK# zrWfBBYnrts5#l_726n{BQUZwz_gR5&Si?5xJKoAD1VkBBfq#+fMM5Umk}gH4nYe_J zYL#QU=Hi{Y3dHW`oetILNaeE%GfP#hF(djR;Rxod^!t`Cw>IhYBwBIL_ZBr{)10MbO*%~kLssWLlrcTlxwmWU5OIO~ll zE4RBUws14sFBUWU4(%4|VRdoD>ea%R^SS3`^3o-|`qO=o*A5w#37GzB+V+P>-)+)- zx)fXU>{VlO_jFX>F9@&iqpp4Dw9b!Z>tc^@Y zipQ;BKK_ZNzx{^E_^Y>l@0}Gk`mS2o@bAGB#SV$L-ZT_zzn7w$NpM=4tb_!dh=|Bs zT!?6c!4771i8XS4XM4Wk$qcdh7mQ`ysc1jNEX@h%Zbz2KsQ9y3?^~qTZe4-FN&n1( z)zrP+cRUKdG0^xQ!cdXnEJE8@g}~aa^|*csVv>jebVeE=&LQBbqok6O*Oqp7F*U-r%~~i(bU)Rd>$nwhY*KCRw6p=9v2?2 zKn*Kyq^tU!T}%49z}jUx$xWRAkVgmpxfic09T)beTs;DfFCTL-XQ&U?hHk_kw_SxR zsAC$QkS)x1TVmIT5!WYTusU}j)M?G&oTr!ND2o%z*;;Jleg_ixqb+qm)g>oh%s`RLUo$52B-pHGEE+;|nS~^>++ypmG^@>^C_)(x zSmo?%`=uTK(T21H}c0 zmix6p0!_3k|9S08rwZtm`LK7i@hHEE=l)fY*dCD-;_C4JaN8Q`#G}%#(;?@a+-tBe zW71WZca}39eFP&>B1WN}8H6s}bnam5!3PMcESMG@4I*CYNEL*?h0a1u@L#$VjkR|Z zc;0y9KdfeaTtqcP@hac#KaRW3CP0OYm zhbzCuzABX84mq4oVJ20DD41MzVU?}6fv@~friu%mP^?A;-~y*W4T8Bzl^G+6oMwwQS~DKuDK|z_de`m;a3YJ((<|H zs!j{<#SjcP@M5K&unKux3ErB*UUvdS{ z4Xw2w>U9n7pEFUZf@#Q7yRwxHV~G|bHOPU_ysx?xs1$Y?i@o7E-t;x@kn!z|gQpijq9>((Ao`ijy@Q951`R+dMI^ybVPIk1X}wpKGpNjb#*cj+_47RBPs$ z#_f;=Mm?a_+tQ%WxIg;Tgf?a&6bj$*&-TT+tfyNndedc;Fk~dlyh(Elx%hREjSV;J zBKwV$>sbe*+4c0y4r_Y-Jrm3>{&@J+mvdF@z=Do6syELuo(9agNf&*4Ql!_4hQl}u zF($yn*ztqR4cL4;C+_92{ng}P!zhlw*y+H?#m`CG+b2PclYGIjoE~oc8pe#}WWuDH5(YOj|UyYD6 zxcEdtmKqAx_q$N6bP(a|RRZ=zo<8VTA$H1v$8keKvGVC4jhqIY7AqklBszba-;lu! z@qGnifQDN%-i77dYWD)G?YX)l<2|PwvU5cr95Qd(Bf-gxe@v*9Eycx5A@RwlQb7ZR zN)-75W2rn8f3)R}Hv;4Dd91GFqG4UW?;zV+thS(5w%>3zR5OMRV{OiK5bL+z=7`2? zpb$+4M7H6poO>B)w~*a(Tj`x}b-q=pZtoEY2YBIJIRD*n32{t6A*M4d$DNgJ-k|I6 z^u1ptRdBm=_S1W`pV~M(j!Bw^v594Q@mF5lI^7Rx-Cmvl5ETIbN-b#jo_SF)^=um( z!tp*$QK>W#Jen)F_M9nY{HFadJj1ZrI~x1q@lfz#v{grHmf`1|<=JR9*VdaBo{U(q z^T7qiEhNQqrV7pNK-udYj;w_X5qpy(cCNj9%Q=@w_DD<#x@&}d-tv}=P@ufv(xVJ_xZ zSKC(*S*e995-9F!_CfnWXOzdC&_ZD=#E}Df%AJT?z?tmSlfrF96@lItn>Vd(MFcP` zGk6e?xaMgoQRd55W5$^%6zOA_W3O^%4jTf7toUHq2(DaQ1B9GZ2(wD#oCm>>Dbi4a zr)_-JW0aTu%$Jvebfw2pUiq(3pFgKPOdulxo-0mY^N>}?dlE9|arUDm**WT1D(SfV zb$7B4r{gG#Y$rfmg<0-){FzF4bvefqUIO3!;Dz~=n+@!5o!mel;I1SRmur#g5>6h1 zm~l2}Nrz+!%XbsARDrBF50s|cdg^dRDFzD(zzbK5{S{j!y9uk#7}P!)sN8(5J;do| z2a8h#^rp%6;IyS0P=ti`p!08`P3-oWT+HaM>33ZdIE1vj`B3VeeOD$w<)ZF zZLBgZ#K4^iQp{xNSmM0uHbTo_8Mu#;sh2Jd15IgQO3Y)QkXP0uUX@hb@z2Eg&U6mQ%S4QU%tKV#2TU)lMg`_=yJ@jNr zB>4XFJ019IwWkB8>Hhud9+9}tevCFRHEc)gPk2syG8k+0xp}%s$!DaKNF|yDbiFeR zE>=TbUg2af9vg%PT!d*UWQnvsnBJk!IQ$6AlYKb3LT#Ea4b4*J4w!*1Ja10O zu^)xVtsXTUPSjYZ@vM_Q$JS}T+;eu2=?eL(_#|?m5WZ5EuRr~SGZ)%TJ1ux{u+fKe zBa5`{$>csbcDXf?Gpi^vuQ9=cGsVaiRrm3Qr zZEzjDi5~+Vi@8dJo47T6`fohPL{UvF2Xu$;Z{D><_p@>>8ZKYxUGOAxoe|2E;X4Je zgt$g>72BjD8(_Icynd3$$Zl49z^V6gu>?2Cc|ZHgr3?A}Y$MWydQKMEn#fL^hA0ed z;A%ywyb`tv20-0Z;vEmELV8q-r)oY$v*EG9&ScjmWjHm{dvlY08KK%!s-Op0g`W4= zeBs{0^lJP(`~Wm!mZITgk3mWp*}U|hSrCTfl#Zj4e!L=;5`N;RBexr9F-)!n{+y?g z&v!jE^tS6T)Sfg465>XQ)g!Q@*9e%iJ%reiIdycCa7Gp8)a3zrO*h!_8ZzxoqjTbyL*Tf3IIW(QW^C zCOze!f@1M5?)^X~Ao%;=NgOFVd-lKI#8C;FnhO6XLfUKa|J*q4`giOH`Tu@BB&US= zPoVUasKo!CDK0-G^8dfUhlme=ki2EIc*};4e+S+B@mlkQW+A?4+1u9}4`HM*e)=f% zcqwRB)+rS$lohzZtHO?4ZX)xa8q)s3G6JLDprziQ8@IhX7Cwt7d?sTSUw}UU;3n4P z4H@0A!tM{;oO`rgJH<36(S2kY9vh>kqzuT;{$d^W-|g;X3RG78g(=+tqMC*5ZMG)q zg3m=tOG%@>rFtWOu^P4+)kyZI8h^R2@JsRW2F-UY2>)EftzApP>wJl}n_VdredCK~ zPV39MF_U&7daP&K@o)n5NBQEqx8r6gM+M}S?~2O$ll`xO4<}SVF8O9|%{cGMP&^dh z!m5>1)7i+6G&nPL{7tpmEep>3@T>g8h4&KOX;q|6(_< z$;8^;ebj6}eH?U`a&KqfCPoplbkC6`&-7o!^q7f-jYY*dSHpqPj89#Sn0crP?vD+ig&C2(uG8cVVy#bp8 zZmh1#`1Hy|4<3(9bLA<2SPO0yo*PZ}@DeR0eSi@Mt$?!sl$`3^5c-%3nALSFY|w=B zj*-mf(vGO)I1UqN4iSSexcIe2hg!QAsx5>1^fqUTRheF%t+yWAzd0KYMz4;E{G6#0kHoM2=Pf$Gqa!C4QPnKYh7+@OmtTnAXyU+e8-Hzf(ENOy za=sClWNC)F=|L66W*uRBHh@VRFWe*y?%HZOj_;<0t!>^!to$|FRdS|{`w_4-i`)$^ zsAbOhKPsQUE@xBQLe5X93L{TL?f_8c7;3W4A0x<&2P*wKF7V37Ydg*7EJ}HLtjRKe zi!5!IZal-AJ}GioSpO4{3Y)`jR_%C7(Bl6HNKjDN3AuJFOaF`Nx`yb5t}`-t9^&M( z(t4trlp~Ep21UeN5O{$#i9XADhO$M5o{c{y5n)w7s~YH$jqU}#gz7!Q)QXN=-r${v zEeb@TLr8NECFAjz{!Fx(P6b@DHj40jTx5eDz%ZYrAN_M}Ajfm%5m{L)X3|r6XNvk% zzkRo8`)w2ob0AoYc3d9K>sZ9PLQyb7b{0-|d3F!fd8wXwF+T7Zr4kqN3bcOs3kGcr z-k6IKSw<}!0GpC85`duk!S`I<5w<%XI_oJF3GsSqlp~^%Aul?OL-r zOzAjMb$^CzYGU1i5>e=kg-Ql8k$YSbw-NJYq3wj%JA<5XUT5`Sb?Z#sBJoEeueo}hWbtJ%r&)M73A$yT_v?K?$nH^bEnPsZTHNY`SY{7H45hj%X? z*lUk+&0^C&CFXiwuIQN*KC|0+?gjwAv~LrsfU=vBML1M5HL=CNNesUo@abA6g;cHrY9iPx52T#7<) znNUrLJWWf^5Qg$wVp^quJGuF?R}P7NyaL zd-MXhZI?I=yid8_?fc8yLc2FlLqkIioP69X%ThF9w?0g*|B37<`n(D_jzrW~#*nDRx0+GS=L)UP zhZld>vn3#X0hyTJO-?}JbG)_%!1u=}U!3ul^vJv}a{gO*XvXvcwsQ2HkbjbSt6Q!! zqyojumv~~9{h~*)bnrFJYx=#qW=w+}tr?3>Z?5=yw!tg2;i+r`T04v_ry6C%SmEE67%LIfZ3Bv@EEVIzy_H)1;0?-;JuA(qe2XY^D9V* zlruDoJ8&Jrs4y4#nRm-p0Tf>4V~S|++af*(yUtjf8JRD}j(pyM{`-9zVP`}^?t-3n z8yuIJsi5NpJ0OZx)e(eNJILF1pxSWCKRU7Q z*B$MwsRcB_fpExSOPp>!B^)nYjc6J_CwZ7Z3~hNL1VKYmz6=|99jf~YxICTr_deJj z-#_dddfe6CCA;!UgK=tZmK&L_JWoqe6H{5m7fS8`pq}7~FK~kUnq%KjI}Wyf7RucM zGKZU)s%q=ICKrQxuSV{DhK+Aoo_}ciEfvn(I9MFsC3;5Uf6cgHqJ&TK>wgwx>$|!i zacXwC#;z8hpRQABRTKWXu=uLVCDq@}6ivp@;C38eT%hO^zAQaB`RROgbac#LaS8CX^=m0$5~3GB!7T#?J?!l7 z$EU^#YZyUe>c0R|tc}|OXNcv@aJU=X7ILV8uc^tmV&qU^o0)KIaAv{Kv z;u(@hgE|(GT{WD=MgNI$u>zI&q|bdrRjkZGXM2A|$TID<(c-x?EZ2R$DYWNA5^{x} zOgpF4GyV(*cq^6Lq4Eh`eRTa8q1EWYfyW+o5GVRzG#XJh&26^uXCUm}l8TWfg%u}r z=eWAINZ>nmUa&jG<^G*Ek%6hNdrO4 zt5GMUr1h=ysy|1?tJbiF`TiI?HB4ofcY=0B)iC=~X&FdO1!PYj(lIgh_Vo1VTskN{ zKJoiK^P&=Q*Cnp}TnIaiV{s&>iOn8PaK!BVOr*POP7(d3^2FpST2wDAocj71ls>HX zXJSa|;FgP6fJj8_z{psBw@7a(2)Wg)+QA-nF$J0|@XbLEICPZY9V!#LxiYKApiVD6 z+B_W?kp~$~MkZeI`#p+Du6FHO-8S!fh<8_GbVrbD+|BDro))e?LVu^b9a2mrg+~;` zxG##x?~jpSkMLUY@XT&a9%9TP-RkvI)_nZ4@`j956_2HPW3}D3GzC^AX6Es?jL(M0 z{8DdBM7avgGDCKiaFC*_*=c^T44~%8IB*eT?bl3nz|`j!vOWHYMM4AWMJen&SF>X3Sxpz) zNgrb-H`Vy_6jSqEcKyNiz$G@n&PU~KYL3IelP=-);H}}x(pYWNYCb}lwQk5Zi7~qm z{qF8LV1?UX0PNr$J0RYd& zeMJ7vLaD>-kaLyn77gI6a1xK@qziypFP*~j?Y88 z$x_6tF!bT8<9ivgRARvx3Fo3!?hKvJRp2XvLp^@~$au}0Lcu{dygjH1++ z#|TMn{|#Q{SYdeE!)98ks& zjhL1_A|u<>#xsEmPCv15UIar08sf)j$1w>o!aRt4Y*?;Frbb}riUUV%OLttC4oF6u zzDrI-0~{mP1}h>l>qVqwJLZN1lLfm#JbrshQUl2o5e>j3`SrtJZ^ct z_|5m*RNICR46Pscd!Xxx$e?Iqa?aQogv7lE{(1moJ&br-yDy8Cy2xyI*fdCFvwtO} zfMoF;*=QmHi#XDeM*ehu(^gR||2~w+k#9y7asB|y=4PP&I=hfw1*nu6;F)0~A` zg`tV!VW0bAx`lEFv=f_2D66LT(euIWUXxyabh4aS$ThPx7Eg-tn&Qty0>_hPXpKc& zyh&54n%MVQ2G|yD{wE#_psNFNh(f0MO=|tWlPx=tVm-H_$}(ka@%s4pC#V$Dfb^$o zV^IRhg6J0yqYYs`jfTy^Xj$W08_|S9MUI`Ip90h6pMV33+39s^$Ja%~zYZr~2uQDn zjE}<{N`z*!KCqx{6_}@OQgGMMsFGU6AYJ>|{ZlER8}&EC+%A2qc^uG0>KlTx5#%?a z+~txwa!6ytHCzlU2-0=idB|azDsRAQjn2fC3>coP|HnJ4yoqwVvG8k)aj)8j9t9l{X+Xr!6rk>!Ongxt!l1Mlb9Pf_N zGVO>3-W=*HA>AKNamop43aRak)XzQ_mzRaootr3!clg-55tefJ;AxG*v_y5{gQC9Z z*GJS#aIH`A;wS9TjFhNaB0r%uW1#{Mt3hiNdv9m+Su?g`4!a7{M3NXFOBzKx!Pl=} z**fqHu4W<+6lP-R)H1u2L30%5))n^r)+{TZ()+FEp4*aMs9(BD^ z<;!a3Hr^Iwb6T{G0!J)yx|WC5S8qBlFt-(sWvqE97Q9t^!ukfsD#D~>)s4l6u}7hi zT0x?C_g924;1<>bP`OxL^AYXnr{tV?ZcXn8O+A`f-S+@xyK+R%{i<^@e4Ny;;+^Kp zn{k-resA;En)=1lZBe}U45G{9<(_3KpP=q?BJcKGh&h2Br*y*xBB5VHq2F?6Y|&Vl zuaB~=_e>D2KbkKM>9{_>PUij1FWFFtblSq%dsV?RgVFUksQ$~>x0;?V*Cs$GkPL-d z9pxbpiDQ@Fac;-?8jSflA&q628WeO%k4WlSbXAwU^Yit%UBt6E z%NW`m8A^O;x=)0to{zs%?Gund&zA4({GXr9fvzHoBakQP=(ej=8)1LF^8jzsj>!Jc z38-2lH!LuGeOJEJ%pjF_qXS9tmcYUj@V>}cmDtvcgCjBADc?_vbM&IGZIH|zk)h9zPj!SPuI{L&7~HGV+G<-)poB z6ug8t776_nF*af0=9Va+5E34p){*_L8}8I4;e>obr`gDtV{KmRG=MQRb~$JEmPw(4 zwYdZZ`CLzGKG!%Rr#0G`p7o+9dt$yP_of%{)AhXlgJ1tC(X~u&9>c}epl=3sk~gtj zT$Bvewe@cIVLxks5#p`VTF1jse|QGT5&PcinJfcKnZtx5E89@+v+L(%wBvN!9a&Pa!RKa&jStZXazMr$xg`2>eLUm098jk-X;_3?KR(| z7;`d-gpQ<_q;RFh=N19?{F*M>CUQlvrt`spP=l>Nl&!Ej;T+P2z22BIf0IgwEjrwt zMa0XlU>OiMK)Q_83IiX|!$nA)r;Wz#a7+Ey=`@1yO=T^cM`unM{Y_ZR?_&}s*k$^6 zd`84D$8VK6O04xbKWwuCmF&5VgR^KAc(bV^Rt8(>HJ{_>49dA6d~QI-L@w$8eHD&% z;Jx=!b5eH=ty1&G>1O0ZVE|bt0bptE7}~D_#v^#RtG6R0*_W>8fOv#RodwzT;NbsPcBYX=li7Ee+J9 z16sLYyi(IV67hYg1q*EZ#%JFF<%`k8xvG9mPGGByDaGU0r**6=BQDojyXQ;5HOWEn zZ?F<5b=^GG%%l===aletub2 zyKNf*7Q+9rVGqp+t}n+Ty(V4=$jFK|LXRSNOoz!5oL-;8Jt?owa;A|kBR5tCr!H-& zk4GBNe*EcCF)CU5R?q(_PeeAh0pZT;geu6|vH5ZZ|Ik^a+q+0H{ zZHBeC$C?9_#C1JsM`5+PJyi+jrIA?^MvwYRt>{TZCw2W4T1M|0-*NmkeV>Z^cCvqV zU(}5y4dtG1nYvVi@)}dE_nG5NSXF;#iM2?}Bd)8syyp}W4Q}h**l)!=$!mNDh;`Id z`QYXurK#K;-pTmO>}OJQvcr76tC=}^W(t5u2Q6H5a9+3qGKF*6vOKihwg?rEz;_$Z zDbx6R-{^KNW3<(!WPEZ9PE{4U#Z_EMVVe`X$9O^$+xyn71|!-ozqx-LQ%>h|OKCeU z?YCtg&-${amLTn1$mV%zN~4(4PaBZxAO+i|hfxbwveL!_?>09V-q0|AxUt09idH=w zo+*FLR^V8V`nj_s#m<4+bPuP}9FDFHg;Iclzq7K)(P-rIdnMu$SYCBx%55~*HK+SR z=0Q%cDm3pg@&Mg=ur&r}dgl}`A!_0>f&s(_ zo&f{SmW$c}KqS`K5r8jnO>N*;DELZ&xJRQ$ohKEUlr*?|U>Z4Z9sCJi($I;$A}&F9 z#Y;=O)s%?y@aJQvT|nW;#zIQ%&QafFv_UZm|1ek5m(KM2FtZ=9bm5VvF;h(ZM?Qhl{aSN58<rBw?2w4+(n_opLeF z7$JCIM7*oML@eQkPA9;Iamr<0_h1=$v2h(<lpNBN)^m;sH11P8<*_L zy)GZ0@O`m~heom7>O#Dx9?qs6rbuNf40#fRA}|bu=P&CkjI}h!DDQRxG>)5Y zc6x+;=cy`nI$JY5KB)GSrvZrEoi0ZmU0%z3n?7LYi(x?AA#R=+Co_bjmYXMQ&N%1& zsL*+R&_Mqx@mCy)+_|V>u96Kchgg#1J7;=w)Y@7e5ptQQ%`I*VH#DIIqRJZc5raAV zCDVtFKELDfV$HbM$hY&f0_)}`e_Hs7KBKv0Hu$;CW;fIb9=%7Z2Ec+aI5{Q&!S*!M zN>V!Hqe7W}R~Qul=V*2SpejF0d-U7SjVJc#sIJ7!HnLLI=y(_)X1;HtTEWIr$2<`x zn8T}HDS8t(p3Kp$?N1jomvQVc&Bi{2*HCR{2;0!*TD+YS?cC=E9s+i4)oar04`mEq zczm?t+z(4sujZku-hpH^&C^MDCzKjb6Uq(vog!56IDqa5Z-XJ>zWG{bLW(N=;+cET z`#a7KubdizEzr3@BV$T?K!@U`*&#X+heSYi)2&oNP2j#^PmxNk#pm54BHMjA2~kJe z{3(soLY;WSum|m>$)ElG{g{4$f?PSEZDIO!`-@hV)o^&Hq3DtNo~@9?)A%a=p&1LB3>dXNO!f)aiLaBsJrkiJuwvcEeXCUU zRl@!0VAv}M^Gan+LmM3&S};?hZ-~bPa@R)>4_OXfZ(;W*_?r)Z^v0hp`0PZ9c5(H{ zndzCw-{?YAqG&oY<*Z#*`#UEKjrKs|=HMm%gM14INAdn$ zt%vWOPWJf!cO`ZZV&y~;bR54PtY74~=_ z_5)7ts7C%g)Yxx+E{Rl!IeFFYUGo$Ai_t4GpopX_JcZO{c&Rs1oPxC5?CFIkZ`QKm+uGTd zS#YO1TqEV|Vnz8udiW1Jg&RcT^Whc${d|l5Itf?)ThMy0_S6C!2m~gE)Np8!E~Y5k zq;jXxd8U2+4`9#l+!2CF#i+H`=DQ&qmu2Y~jM!pxIZzrgStw=s%lbDux7*Nu!iN^x z+L^t*4X{}6Xy1jZRq`xiWOTh4Na|qMC(IiXj>VcTe$n|?%Y4a^EQ^4`>)G61dVu#F z;QQ3wbP9A@@tN0`jh2Ibp}~}IU4HRfzrK^IkrxwnrdL!{8h5p{K!*=osG2juC?U3uE7r$hJTx42j?&DwFTr=_WTGI3p{mM`T=`I#=6wyeo%n(+(X<10E4~*( zgH9%GFD24BZi`{B*CE<0r5aOdf|>j`endn>my?Cq0aEW#9g24}R%TIhRZ^HE-opw} zH7QWJ^<^5&k!~`i4$}jNma_uTyrE@nzoH;y@s8jd?`+rEQ20>3F{5IB&EeW+h7X%-K7@93gZw0%%@m@?WKpb0ZVmH@&FJ@0jkfsWT-o%OS67o(_3secoBNCv7c(<+;@S?iv{&7#xp0K}mMV7*9`f?rE*7{_(FrV z{s$|p#kFk|TN>;d&xbT(B97l2iauS*gqjx1CPY|w?^)n60;GVh&4`v7Y-Nve$$33n0tzWI;8Px6#)ON0xd6?+6 zO3z2`hfQtfsIAQTIU1$SSJ(`rG+1^xsgqY>guGg^1#gKfD|+ng>DaDXi>a;tum zxvSEHu)WJ;e)GTHFC7!^jc&mJ2>L{ruCMRl>el}djjp+}l2Hv{${j3I8-LMQX+XD} zF8Q?D;+iL$21)7ICX|sI;j2%^TYpGD@X>lz$LqHX|8(lOcK%E($xiMwofP?OLr=h- z^Y0s&dIMqwc?RL{3cXaE<)Nk`CFleVS@c@48@0R`ahq_bu@cJlsXM!mn_DU73w+Oir}e4liR7C^-7{@287?kSc3 z4UIRJ@Fu5A3Ls6&-?Kd-1;Uw~ma(9xC8p~{p{P5L64Rzw<-a_^$-)u17=36i_y$ZWwL-VyZO{Enc<_g930GJn!-RDig89e z#4YXLhFC3{v62r!?#DYH$ySj^|4;G*RP~wPrKg1qYo3YsjdI?FYIergf*=j ze%2khS!nwLkdr`hPrr9Be26$ZW>BbI{4w|V>^2`=X|~tqnjh-ucb*Hgi|%xKfR@Ol z-EGbiLwkPHXmNn{NgFX8=qYY$MV+`RLyZ(3M+tOfp2XaXy9JoeHHaBJcwwA3)*JP; zecCyU(0bZ!wW+i3dKQoHsILe|U7m|CiC4FqGK_Zwu^{7~kjs~r&C}$%k!cp7tyn8t1bhk1Av$v|QvM00wA@rqCnq52H$e30 zsIjkFe3nBds_b5k@iy9&%hnglL+p?k;_nZ?GI|U2P0m@I7d-e1?;F35?)*vJ9X0F> z32a*z418y5dT}0x4+5}>M)+B+oQGIiIy$+(GpnOQ>YNj8ODQ-2sZ1I06$}` zk>_!j5sPy8Mx(o$4t1qNQ*BgTs#3RDPhzw096Oj~F@by?>^70+U0T!{XoA1BvdIV^ z(EMg1QIVM2O(7t70=;pl12b}wEVcHFNw>J`WQ0$-T5tP3pyXJJ(+wcf#8#)b!5|dt zeKHp%#Z#n>#q^KmD6ZhFC^o(sro0!N!ygM{%*S^E);@7QC=?(x$Zjn>AZsyfzxTFR zS(|Gy5@1(?b@NtGKW5+zA8eu=c%aIoo4?Nrd11-5a!q)sM+Eqf{wVeE>yN@TS^QtNnn z_3r3Ag|6;M`|w-Fc?g9VCPrr0-A|nlda?ZsVoOO5^zm6CX2K(U)>)+PuNG=8zL!8IJ#@L!mev7L?lbSN5ijJ81z4*+?UAq@SoI@) zH&!uB^^9DpYBc-Z1l`*llM9O~zcI&#D4}3mEh2mVV~=0j_Pre041NSjO_+XRzu0l; z3fNSYl4XsQG3$>t$eWD0KFTIiOWNqFW~5$d6?_@iEEB65gr~uAjZ& z%5=ldH~;KO6TWb7I(4N|4ZY|Y&>dZ$&h${u#KsesQzPWIYw&LlKX^AJ*^Yl!dr1Bt z(%vdA%I^#KRZ$Qr=?0~{8Jdyq?rw(e?vU;rI;4>hhEAosJEa?>bKo6*|Mzn)&&4@& z$vh8h*X+GleV6;~x@Y)CY$xP)a)IwNuQ$H}5XvFI2b9y_0plz72fqvcINvajSzoyj zK|8K$VPnf+CcVt5leyWe7HXXwYWZpB2b_}4uUnJ9Kj8*-dDTZ+xz=rBendz0$51dx z`KK05mQ4oq{bY;Da^i8>rW02~-y^G1dZ>xzpDm|q@Peaq+%~iPZN<=0u4Tl5&$_s@ zWw|8=RoC;ZGVtf+Djo2h!IgnUeY2_F=+D^cr>w|;xZQT~`V}ZXuQZ_+t=LP0f}Gq& z)`k%jsu|quqYI=z0FmLz8{A?`)lPL|WQ$n%BI>U2j@txk6e1~V^1?^HYyRkU(>#!0 zuO$YgGx(O$z0iRKZEQ~dVFexyl8m$dT^yS!SN;U9v)HVS9EgkCDwp>s=i=sVPRL48 z5Z6bibv(z~-Nq!vk7y7T@Vd1N&ecCA?2$!jc^7$Qe(Xy`JNs8E$NSmS%cU$P%2m)m zwU+4CgE|nQ+mwckk3LK|Thf#crQ?}WvFd<>(3K23)4{>*w_VQ6qJIAe*X5877{BvCU}&&?19+&^ zn)J=;iP9KJTDdwXtmvdWHKm_+x`XpMJ-=evD^0kBj-y;7CXs2fu$7}ALxrf7xy(|J zE57g-%gn6x-)z5#57ur8>DD4p>ei_rEuF5Xuyy_-Kvlyi(DBF?7(+__dvpoXjUuKi zh!f&n6nRI`&692+({5!JA?Sa4eW zb0}q+;){Nm7F1o?V%gkt_=isEzmTF?_>;nc8X0!?vO$a}*G^9C9}jqgSc$E1(NdpT zFVq!aeNDXD6EJ=|Drz+&mJqMPxEGiGj_zFZgO<#>{cBX<>n__S!H_3~_P;<&ii2^; zO2XiS?&~+OLr(JlLoUMNXz0~%fr?d|{c9LIEchB`O@OWREZ7HjZzpMkskKE#MOvwH z2L|G=Qb^RzhEr4C%6a`Wm8gIH!`0qktQF;d7kLul|M&cedzH7NHUJ|I0{=^v^zB~w z|FznG)>pq*t0y#K>(1%~KP$^dv8;ESELksiNi$iY7f{W%5e#yGq{7xg+>%<>Mwug? ztoYGS|0sM39fY9vr^;%W@Ir|cC+t06_&SDN-}aAT;_V&{o`_f4i~zSAWAR=QcHw!5 zhaN*a5HHriG2x2zs`LX#CmL^JMmn-pO#QZj;l#OS$ODnDNoxJK*Kt&Zme~O~2vCZj zKH~V_@t!?3C6{g^Ct_^D(*3Clet(ztwTEzEnQOUi;^S-WpEf&nF$m|AY~}JM(G|}g zusrQ@R7Ct(v2przJvX1|LeCe&xUlf!0he^>aoNhILgv2_K0NJ2$ykhzF+sF)vyrHd z6>u0vHM!iav{`M)4p$X81RfWyO7`5OwDIPVGq?SF$9#3vAJ0|%Ij5=~^@X@klIjY7 z{M6cWF6hxP8uauxL3WkUnz4xq%!mox`WXYRthQH49y>sC3_qs*Z*s2Un$7}>>$us= zvP#$fA-+4Qb@*u4ixdpc`uBd%lVRZPG-(#oC^s+{J!yX8rgFAIuQj!v5PTs!K`ZXp zo>2iT$Db}`)wG&;mc`D%*GrI>_4W>MDS4DIxLll`g^5dYi*BT<_;S8(7xdaesh7P? z)Un-RDPWS5N>Lc?IR&tSUnu|jx>JnQ`}>*yii}{hP1fB92x^a3*h(f+tDotg$#wZ8 zT;K5C&I(F75Mz_XE%AgZ9m=+W(NvzkPs1i&jgd~;1=O_o`5*Zs`6s29Q`#|M)Dd2x zOCb}F79~XMboOj6Wh~Gj)4NC~m8S+lV&55V;NSr8c zhN!&CTKDhSQQ(Ala-;u`4+d2oL5cbD%--34q`qSaB1`O+-gP^~k!2GL1mOZT8Q_-s z60`2WikJb69dS1wfi&g@al^U2n)Bt3I_yiIAETP6;@O~!yIY<{Zz^VFkEBs_-bg3r zi|hRoOXfby`Boskd{N{+!k+(qkmH$8&q7W$>&?!etMsPucf*guGiyaY{6>479T!q@ zfTWIq!Zb-HgO(o3^Cln069oXmU5eHSJ10A4x4l(-RCq)i+1ehP<6`5S-(Hb!eVf0{ zlD&0rO!EQO%3Q|pEU+Q|%Ty8f#Z_&&b|Q%xZN7|$`^vIUD+SD~*6@}Vl-9U0LV8R- zozCV7&$o#@H;iWI<6*;A+!2ji=jrWY2e=e5#H64A~W2-(t z_152Po9{TL(auS3@mS}U7|Pd(jv(G?NA40qo%ZkEL9m|T5~FH&s39-$ibkdRj>S;b zzxmuCtkHtI;5N26~@v>J4SCyOQCIi8iV$vr1mDVE>! zXuCF4CQt1iR5$&ABBrIZyW1DK0#S5ioGR3mDuq9e? z;4Fc7&ng&qKzKguKi#Vucc7x)&=4EYkhxdY%kufo3fB6AlH6Z7EjED#1H=zmrZ>my zQbfT3@#`{wK{zTH|N^i37Pg-mjLD|Yw-%e^DNxyg8Q!@-M~ z!6Vy*mGp&{%VnD2=14}~sVs#vE5J->Y@GjiIy2DvnT0ee3CvECJxi4$!ur&M50?bp zM7dz~HHQ|$cWCc5`3Rc$&`FYvcwCoCC3MQ8&c1DF#pN(o)hJt@r8eZwCd}eZ2)o67 zfwm(rk(Imdk7s?jOb7Z4IvbotLWVqKAaF^O|Ew!BloX7NzG}DUdjwOZA@eG!f8Xe% zDCe7r{5g?qHB!ej^vJLiOvU3%rA3E|7I=_c2-A5^OE~r=a`5p;1)CJli#!%M;Wiu z(CB2`K_Ph11Dt4id2XEVmpfr+&MbcdVmwa%{tXCDB6rKsX_N}laCi7Ji^$BZb2CoV zUyIaiT+Awa2qhvNUka;C1Ds3<3#R=;3fUx%dwSv-cX*O*3_LEe=qFo-*zB;N7S-#Bw`Cq(8Dy|29!W5*|}01#zj zz3arJkZw<=0wf%*+9$JNWLGz$2iPYp`x~D|CN)J^LQqFHmJM!n#-3LPPjuFRR2@=; zCUk`63VW)FNMfKpHjBS+;L!;C9xgo>p4MpP!`S%o6(zTKJgfs#4(Pny!NqEvKxA=D zI(P5$4~XV)ObxNg4vmoL;x?wwe0WJi(elTlboC?yxCVZIa54KJrmL)doVQ;L>_ty} zN`9^;3&a+DG@09B52sE>ZCH}3dzmdwKNirC8(m?avG1K=ML6B(`28g zGKDmZ1|ud7nx?lVIn`%}2viz)z{L&Ya<_PLp33DE{z!6-r+{YLRb=)mcc)Hv z_S4AkWlTueZtdh0a3>p6(0g&&U!97L=LlG`KM`&^p%m&b^-cu(ifVB^bg$WiCgN^6(OcVY-4gVu@fded^Sl_FuK7+{*%})adcPT&3sj| z4RIt~KEQ?t*fYDA8DWCY??FQ@E)YUG#(%y!Tvx4{6DgPZ*U6aroQx?=&F%f{Vec^X zG3q`xAL9KL;YL@qy0)GJO~tI_-{qX^wnnu?(Z!CXehEkC$fD4Up4H?jUmh)?Mv4ml zgFkdc&53tiQko=nTysiWnHq>jbv-UO-2 zCZCP^DTL$9Fi#Z;6ly9B+BcfaM(Rvj7d;;^#LP9y8!bhBdbE%!gAh?s`*^4mWg#Dx z%~{(&db%5{@A?*GqFl!84P~RN5}+)CtK+w{BmK_C3}pwj8c5|DeMER`wkBx(8`)wk zm75|%T6;(h23mdM={MISi`qs1s+<=7J9_jAmI~OvaM!Y1l2uVE!26-Z1F-FyHXX zpo|5dc_7X5Q1~ar5lwI8?1f)XBql?S#f+_8)1&3z%-JUYtTkzdX=VI8L>icmH0WqW zsB$x};~hS)HS@3&Co?)4hnS600c`b$Kn0!K9yT3jX)q%M3q<}{2UbaVv}ED2+oQ|L z_E)1)0iX~)+aS!VzS`Z@Ucvz%6dh5PYKiP6u+()_*;>u+WHfBE_VSNj{i!x%OQV+I znoc?n)6VWR8R^&9aOL|o{f_-;?V9SF665>dgl}nnIk{dLllt-1_oXg4x1Lw3wsa*&6r^+S;Hum6dx%c@hf(?iNM?R8Bv7WH0PC1x}T z$W9_0Lyfg?iv4G`eq-!+vUq&S08P$#bH;mhvp6o}t8XIn14!OWN_kOI!f^1xAuNTveX@0+RJH}_eY)#>iVGK>T>+uY`6upx+qKVwt4`m!7SeB?*&c^R_BYh-G zWFd^=;&)FZtjUDI54IL|$l>R1RZycR!_V#Q{uojNS~eH@4qmUbPCh^}-Fxzq z5_VGM_*%rDOh98T#cGy$NURvR;yeip7r-$mXALv|#oA7kwCB&*pjWN3JSpB*qA3b_ zYpY-7+Cx@Fc~EnE+b3>Y%kffM)7ZP(iLQWruPIAi40U=(8hs=**lJ^%viaDQ6i{p9 z6FLRIFU1*K;0RH8T|v_uB9go;0~a1xh-_tWi6P zKV`A7v9x(1_3my$ZECCuD@dP^7kGJ%>8aGKQt2lm-D~RmrF=G0m3m0k7gNgY+w9RV zB|4;BuEBTzLYC%gUqU5L zz`d8TmN^IR;8Ljb?7XCa(~@6Wksv}6(-+s=ESnP6gZ7linO$*w^=5EbqIo3ZBdzs+b@`g>OE{Q`1T3t(2BrF%@sJzn_5KZUF59rdI%ZXRbYWX&$33V1eD zqVj_c^30l#2n%J^WAM7Xs>kZeEX+qo%D9oWhQ`Nn*(mAqzebVizP>E{vud=ay&P+dTzz3S+q0K znUJI49{ywpb5FWrS|*JxL#Pec>;Iq@E=;0?JR1Ki)Hxx99BnW>ZhDEM9rZfV zox9+AdR+oV?k}Ts&6VGQg(~{RsGdf~kZmS|BgW$jbb~)Ok+}Etg>PKF8;$7Ys$A)@YDl8`8%blR{1W9ae4}iXD}e}Km~w)(dQw<-FmJcyHloe&w&Ka zu5A;n@fT=_dHC$1lG5Uo&~+V!1FMxSr*!IH+GUpYZl{#CzWlA;eQ#wWQ&(1IT0X?$QHL>>%<3zqNGOctkIf^-y6Nt>KW+!bp+yder{jOw9_Nph|du( zm%|o(^!i-X`&q6T;KN_Verk-gX!9?OUqy%K5qsdLN@spO=xfXIp51!8!>l&qoj@;;{@Vui@;m9BN7FT@7&B-Cb*YxKo zmi?ghcBzQAC?7sIn#Uh{|9qTi*!9mMj$*1AGu22tB5gbGU1+Oq5@bzt*1LvD<;m$a zBxb3_&kuA?96E;kU__Jy{q#?$=h_96E^ChQH;pSq{9vB$Q0L}8dLN#)g!;b z_|Bem+Q9z>(O|P56=<=W!KEOyOQ&RJfM}rHBnHhH$%!ZjGj$a(8J8vUj?#%P?&j8U z03K;llVY-3qTF?+6 zjl_PHWDM(uWB>kGgm|n976F(@l6M3wO_6Y8F?tkU)4V1ISBYu=08f386ZaELzlRld z+sOy)r*u;!|AebTfNhx+Qp&G(VzkHsZLgzVx)}PozmiVeAyxveaP)Mel`Iy&C;Lz( z>QTlB_*A8*-xVbUzS{FvUr9Dz0jhJ5WXi17$=&TuWA&~5zgCvP#Tc}sgN1#?1L3rd ziiJEoUJ9==9vERPfCC})uOoe41;ewT8^uXrc;SewJhfi^Re80`0@#R#LPk%tK}(_| zW|7U$vD1RB{Po4o#MeIIQD$j*o~pQDXd^c8abm_K60I+%=d zj3H~H#YJ4e7nOy~b-cct2xIJA<%I{Bv0!uE*c0eREj?o&sFtC}h*(7mQMG019Vq^! zJvpq;vxms5UNc4|H8)LWOmY4P>(QfjM}oa`7&iGE1Lv$jPyPTy%-6*!S}D&Y0@UM-w}K9Y7^HQzwD1zC~og zWOQW=hVH8&eEHQHfADsg(+V-Fb6_mo#3qurXXF=(OFBo^1x(F*=twEm)l=f(4i6Kc zqdq?q_zv+dVjiFpc>YWn*SEr^U}8m+iJD8rTl8C5zgdoy7eN0Q7sB4VQ_w&7&odDW z&(SaNhyiIN&YR$s{ePzU?NplDLgb4L2U)=4Qhtq^U8tRK$y@?xpfUFPmIYrf`KJNy z9(_r~2n6TH)@H=}A@$OLU=c^}#_#kJJWiC|7eu~PVGYcnn`54eRo7@6TU5~P>Gt-9 zNQIVD0E1ap8=gAjOZtb)-I}Z4JA@m|TZe);3~BvcVn-2UbRC{Gtb7@+Q8;Y&f8NcV z#{JS|OTcwcCN6mlp z<~!8p>IH0Nli~gALpD9f7_!0I1oGc0HG`6AxdNT{!4!eYW@hG=_}OIf;%YkOhk zDCVlDh7?m9Y;}}73X#0fCt@pC`qEV;NUZfgJYGdHXf+{JAI4bD7Gn#}yFncM8Fni! z8P*cTSE-jL%e|yN^@ed4=YmcX1@2~Sg)-GEf5okjl($bVJgOFI-+y`cbEZUT=QG`0 zX{fz}Cjn=v0^**3EeXs^bnp`Py3F5{B}Z|Ku_<>YIGs7mNMe)?SitH9j+he)TXFP! z^o{I#4h?fmc0O#q@k)0SMJwDsxIk z>xAx(5*lH;rjj8jJhcfpUZUhBHzEj9`Z!)(6}uQpW!b(2GK;-7dLkFi!aUe)uV4Zf zTajX1RdT9R9?@tl=k1-RMU#_Y&_KAwI|9|NNz-4tNe)(DTNho!|74f%Kn2-hK zGZKX9))_Aw!XlV-TEDQS_c)&~(bxm&U~yR*Fdhy*gqh{}1ndbNPPfs0L0azsX5|+E zH&ipmctc_S3siJJ(ck5|f5P^Y2zkItAsI!-toU})AoYfvqJNTnG8OffSz6y2DyNL9 zE>_rD;DP>}2TJJMG|VASX*9KM!45bGW;tp{Q#;MLp8VT%-eXiMYzra((tcW0ZkZQR zDO#ZRsTH>BFkxwQrH@7TjXk`^3qQob_+GnpiXD%3OoJJ3F1k@2nO0*#YcC1oEsv1> z%yFL7!p2xysVQJtle#p&DBeYdDqNT>p|G|_uNE?Uq!Ij)ZK*63jC=Z4C+-u6|44-1 zuz8KgImVnVP^?OdJSbyBJdaMP5;4VBS*zB9bvTvDe6&oJz@y5nG9)nk@=0P`)@tz_KV!UJi!`bw82c62s zB4t=N0a{3BrqHgBit801yv1K;xu4tJ-c2!Woi*O>x8Lyc0j%3dZ8USO7gy!ByO!(V zyLuKDnZ{SMhkICvl>KGn)(n%13w?0{TKI##4-iIS%*e)p=%1~G1hQDgxW-32-(#dh z@@c|kD~UT!QL%OlRq~wvEUVqe5J*NueGyOy`3XXNlHpCr%!&w(BSoDDR2U8)j+5H$9KXJ_xd@hwi;xV3KT=2+ym(_x1qxbbbyjR%fr?GpR zyJ-8@hoETUN3!hY2J<_OWm;A9ic#a+IxdfLNSelDhYtiA=Y@0Bt|l;a&wO%=NrvO628lEa#v9R;ejGGSsgAQiVq-#(=;LPoX!vTqB4EAo6M}Tb`~bm$CN`@lY&;#-o4@O&Bjwn z{g{f@fBp21gfO#r*R^^ho8S+2<`+7zq3L3@t^&8nOUTLP0PP5782gK{4sAh#VeU75 z%ZKFu>$+YA5pvXQ#jKA%=K2oraQiO-@dwJBYwAd^5Pj(=&%0ZKDRNf^dw=7m1KLmo z$J|l*qzUVCw$LyXe^3+?0eL%bap0EKd&g9N=iFna)jc5JOIg0Zg2sl}d$2a#ex~zl zO2;jyMM9rkag#1 z0^h|VX07h<_A3(32xx6(hX}<$?$N1gKgMmLw1RZ83;;aUAHV$S*)~~&W^G(`d-ZxF zh8fY%TB-xgH`vk%yp0#3$fJ6D0o&UNUtsO1zc}ZjUBj-u8J}7%(&U15b>>Nat zJYLIiT}nl=PvvRwNqZggw463w3%_OW%Y0B!#=DL%1>xRi7mmmr+?J)`X?*7`h+&U8 zoT0dxv8z4l@%FIdcBX=d%sC9-HE&S!fNdpO!GcCMx3Uc+(RInN03}$Xpv$MgJj5G6 zPCRID91IZ0uFmujD78Mm5o~mF-X50o$5zkh+|{{3pTZ%Vt9|XDcbBVWx&sQrQvE4U zYcHV$ONko{FnE-jdVf9xA?Wb6{W9&Y+dVj+`^Mh-MTSnt#|P?ATa)iof{TxV*Zr62 zr1vSuXsek6W+-Ti*vPT#g+h2Ts#xtT6jZ6 zEHPAYPrp!}p`F^BOBzkDVCxQXBw^NM_C~oSS`z;^ww)4Eg10O1Cug8OQ|0{U?ga}R zq{@eD)jd7U(--PKmGw%;#=8}&bH$f)Lh0KLCF@{wI%)HM=HZA7%ih0kvr1kfQM|vt z%Ox;f9j=C8#JX#BUY#@K)CCSf5tJGWZMJA&gSDFZXcv5Q+X{9lzT0vrRxF!wM+1G@ zL5kmyeSpJ9*N{}3E%bjRNY%ejA(fZBEGgT_>WY9w;9X)acGx3;uFGKl^BX@qE*i);% zvdOH$!&-6BDP4>y1rx}FpC%0!;W>Dw=c5Ckcf}_~%a>64jDJEkdzijVCwWhCVlp3c zwHc-Pe&^etH1NQEI7RY63chQoEgvfS!m(D%{Po7aU0c(PFXvZ)u|luQk@!C@mAgF& zC*HpRjjsUFXOq`ltaURgY9LAq)V^9){q(6&IlY&LYNp6)vRvMbUjWWRaXQTUVDQIN z@sdsoJS@geN36_-7}0ViHquW&xm-Ev^YVLT=X%i`0bv_)tkwp*oqvlKWBRRBLuSIT z6Y_!iRe$pXM`BdH{j8(=cuh}!9$|Q<{*EsOZ_^?yyS`7hS&_T?@2PvSVxN;Eja`yC zAf1LIZQ>A#c4|qv*2b({y-YZzr4nxmLLS)ZE`$0yL_kWQgjX?7BmzT^JU z4DL&PJqO5N^Yb6z8c235W{W>)g=w(3kJ;>wq<41}(AHT@rhg(aWTVqSTE`ks{$=h9 zwRUK&JWib)#p_k5xiBIAg|_r(2?wT-9|R`d zZoW<|EW6_CF~a}wvr?}U@cJYA|H+|!DvPyp^~5hU!#12-*x1<%E9m3>miRrazF?`X zjlWL&gmjHsiW5D;s(?glpDnW+#Hg*8*$Pidf>I+FKJY zqs;_%u}-{t`BtgEZt$(u&FVugWB6_}7-6a{v6_a}!Du?}$)hkHSKl{^*RPgNF0s+; zRX}0qrl9?Ga(6;K-vL`28knlHD^q4Xf{n1;%_l|BjDu+1Q@E!dXg;8@Gt|tU#qXJz zR5BKCR)^|gC`+L)AmgH(bA3(9vW@O{z#!F(<|FhvIQW0mA`ra39%gUKx}!uMKGI7 zy#91y0bmRgiyvd!ueN~yj)mKR;)~zxEV0|VI>H2XgUFIk} ztbfpDMtqh-xxR2CYNim@r?O{c!WVSt<8_{6Cz_T3=$$?4u|hxf^1tanF0A8ZyMDa! ztixSm7HxenopD-cg2 z0+G8nQ1-#WrTQW#OVSM|YV8rBu`X zv5y;bADEJW0q4Nd~9@+|Z*%}x6gusDUrY(@&V-Z|OfAIUXjCeu!6rtnr zv+PiMifrcR-teLV&Bs5GtjZ_Wb(fL7lhf+YlfOvU+t%Vf73m^A-eZT3jcgxi=!5oE zV$N9%%uOHTEO|h5fOV7&!)wQAQq}R=3N4TZi|3pryf0fU{#ir+S@U(QIt97M z0a$t|%xqVFdPyfwPsl|#Z!Le6T4}jhi^v?UGteV{Q<1@wY7k5432kS}%4kcD5_7MT zVIx4EA?8SRg-yQEJld7*=Wuv(z^NVo%YiT;{K7S}!P#n-C?ln&Xu?9YvV-Rv!Ng%y zbrT1H>_U0udOyXkwJP>4;SUx zvaQzN)a;sZWg*GyA96R1E6MG9Zs6UM%d2phVsQjR0K=U1EeMK~dBr0p?fXxfJPkg4 z*$(~R=&VOmRifRE0TEv)i)-rZdvC`eX zhAV0F13-@q7gqKpeF>!m_Bhv{gRy3p-02KmU_dS--(3FBMSLLWT)TuJY^SmZ#A1w5 z!^F&+GoeE5Q1wV;a8>>7sfJyXSuLLAD?v?_)iFs>SY?dsE2O+oVik@DWOAeukrTXL zsAc%x{+4LSOKEr4VJ|x(ScBy&Wm`pc)wJTz7tj@L4LDGsW!m?5=JDWp_pFdyS)SGV zre$pj=VD_RbVGZbyya0NKRPUUrx|vB717@nL?39hyfc$&GM)onc2AtT98RQfQA%7+ zCe02AvZUv%@=Y7N>ro5>a2vi%|vNY)_m>hn(Gu9Hn!5p4wr(V{3ygZ$NUx+kR z=WQaO)QjTVtaqgstN;6DMeoyM?Oziwm($;S{d#!37oNHdCjUzs)M$>N0Bvga$NTjyT-8Ux*h!+OzQUc%pfT3o%foTKffH@aj!TaWXIW@&As=Nmyd5e zt~Fm&t!k>@GbMcz@?D{5qCqR#ddx}i9`G0aowF?r&+o;Zj*_K)gV@gJUJSh?Uqttl z3FB788s5GQozgZy?Si^SDH@%aZsm3Q|60f+X^w+xX(!q$Ou(A}R zwkaYlKN<8(cAH5!&&yXbq*SOcPa3E1^MW(%0oe`FiEdZ89Z<@IS~ck{51B`oueS_8 z-MuENbVycs>PU2B&FgC;uNVWmp^|^fMMQo%knX9+u7nWhMgO-$ z2;NQt{yTb0W5viQ22uA zv+rtDup0?GnLO9sjE^{rV_PvPgP=`oibH);F=LuOev?1-(ac{sa@=-&CetcWx*26f zZPr8|Fi%R2Ohn3@{N|jB5R(ZirxtytD1}GsEwGe{e68lHLo|%=XyHrOZ{<2NxicQj zX7DOO*lIWOO&Pt)G>GyV-{)r0VF`W;=UlHTw9oKVHLNW7&v!=6K6h`M-8d6I#m1EF zABk7m>D83PH)Um>#{X2_+TRY!%*^z_sKt0U(N2azg!`hVVDi`OidXSOf75}B6%H&`EsSPY1OmGnqL!aI8D>`{MgTy)pm^O zsI=DB|7m*+i%ep|YqRz8<&SdPJy#vxw5zQe=Iu--ZN$f$pu%(Z`h@sLkcL{CvFC-w7i++XL3Mp=0zcl zrc*P%E{{%v_O7K@k4C*Ve}C5?z5j4q*k*lxg^17zI!wgV&)|&V9wrfQ zC1=6284;uRg{hM#R&Cda%I3^c_X@>gIuB4!;GS<#&|R@as>DA8e61?t^$nTKLhW=W zG6(1v>E1lmlycF{nAfvP`t0X|_kx3+YZI#EKV3Ee6zhLRky(`2C>~849H}-Sx1NhT zZhl(MsIHId=-w!sKTztP)^?(YK*;Uz{IXoogjB>r(DY?lZ<|o`)~_2PMlS%+W?J zaxWCrG+$Z{Ji^Gon3%>aygE7>+}wZDN+>n_t$z(I@WjlrDzKl=&h-*@5&97;*baPU z+Q_(8rNE=1v0GCkmw?U$ zuTGZ1=q4ZsISqcz4Q%C1!}ZM*y`hj3-AfYDFhlFyGP0$nR%|wJ7oeAb3O|(3py~^p z2E0F%m?W$(vKAa(dQTOseXm`Du4?seXqNo9T!c6s-K|Ha0;vY8o1wu2Dl}3WO2txI z<$m7u@2^YA04%KE-6C_~OVFYR~sGR%5qPJ@t%@ z`~TulgbLhFp=o!O8KnK2rHd|-{voX(tkKNAC2`X`&TDNurKEp06Tx2OHBs>+^IDpc z@UVgO8)hc7jh!~6>#^Eb7fBLbP-reaA$nga#22;r&Fh4Ec-5APq zdV_CU)f-b+@{5I>0DJ#uhUXr1q$QDy@x4EaK>QAXQ#KbhKzlteKX{%Mb zO$Nfli&pQrEIFNixr%agyP{{V-4``p3ch)R0+A9GQiYFcKZ*J5&UL$_WGj9pHr87h zkd0POg)sQdN|elvQfA}y3FH+po8ZHPzgHXBv;ci}yLyR$HFbTnlVl?K z{DJ8?^^{d}ot*to>nM^H_F_rlF2mg+6u z*s~U(?vOLl$aYxM;MKbM0{T_d|j~JT};ZkujA7zrSzNAQ7Ax`;ZUg zopOHV%$zO_0$f-+;&OO6R-wk!7iYlpB)fX<*ZyCXaikf(%i@p)0RM$}zv1M_4XnC{^M9W93i zne0~;B!7mc%3JMV&%j=p${w%-6e65yfmnI)bzq-As_Y`HxdQ_PgS? z>Gxh=FoA;g7ndp#6Xq{rtF|jL-=_B{odvImXhY0Z&B?3&aF(hJgM#MUKC0vPL%B$(o993xi&O?%uFs5{3TDzPG{V6FZJxqa2~vzNv4kW6Z`=Ml$W( z=%ilsq~$bc$13f=vxi^|@yg@%=Ap3fzYJr+S7Z$Zs7+VKS^lu0gQoh2+4t5Od+p3A z`pXGzddlZEhc69&z{SPQI<^%pt-~JAu7P64;2V$Iz`|r)j(!@H*&aK(I*O8C6bYWZ zdmR7nXkU3y_q|GIAQbAj5M}1%sP5>srwquEszv4m>6@)SsBCM;5vBagz;q3Vf{hto zK^M<5rzVg}v&SBzk*3YjyWY!m)^fCEpjT`NwQ^CnM|x@2t}m za7&x6S%f7EUY#jf&7(qpeeYohS5Suk#g>gJ$tjdBQFr&{_VkWN_Z^+GJTWMm3HJV= zR;)EG&S5u|oFU}5umlTdT*B2rKxtWVVS_jghPMtiU*bxRwjPXiFCjDK0LSm6z=Ji# zjP;dpH&(^b`Q$>ejl7X~r2+A+ieHQ$)XXQhqvFzH5< zuRB)bI1WSJp&+5TSMfS){ zBhOEL9>17oJA0rR8r&LcfO}fGWgJGCBgKPAJz4pgjkFDIat?=M1M{P!ywe060b%2z z&gTo}I83V|p^43(k`@}=aQmxuH--+{ZB`s2`OlLYI1j>s{_)e`uIA5fS)4}z46rp8 zf@Z&FjT^hA*gZvmQ9@>pysRukv*o1CN>j)LJ=w$wAMM)ZZk1@XE?=%}3c>7o$AOkxjGHrCprX2?E4;-y6$(SM!wr z-xmv;<8ZXq?yIv7lc~bo1$RL)hGgP~j7@FYBDvtjS@6RN@5E7vkm^9}mUctV_awgX zM#MsyRyY2|d`tlC@<$oKkC}tT*5s{oH$9IA1!g(|Ode-id`O?VDJ`d46{W?4sW07Z zr39E-ds7W-R7=E?*WEV*WN;||LBo643455Db`=G;adTM@DjgD)%jKCGZ`I*g3Om29 z3}BTR<>c;n$5~2Mtlyp3Iv^o#+y|aSEIlLrL<>!{9w?A}pGU7_&h8Jzzo<}I9ZI*F zT?rR#igh^pC@)At(^@h!eB}9ff{Vv)jx6%n+1(e;z+|7+U2F?lWC!uHHy#_!1{L*? ztPE;kQajRdMqyV2|1`x(Ap`fk?GGEnR?Wk5L<5|d5rS%y!MjYNIFIom3jIHo6* znFMOCy%b_4aJkd4AIbyko8SEt;;7vGiM94ofGQ~>fX$4iqpBYsw-wo`Cs1yw-Ufr2 zXcwI8Z+;$$QplU!`^V-tO;@)2qG6;-D$4U(2RGJ1)42*d``pnL-j&xUvHVJZIfBKa zi%SLP1t(sD;QQUtC`MFN{B4{SKNeGQa8guQQqn@t!e(j9304UPoxRUH*cyI`eH1KF zEYdN6@8l0K5?Rle3J8Tff{iR#L(#-hwqhI&CMH>9CN3T4YV1KW(?(k!Q!hl!E@z|j zKVxz1k6mjd37XtZP<#4439orK(02>s$v{EyY>)lb z7WzXuWbHK`)0J!qN%#>U$e$6-mLM)2Z-~jL=Y^=lqtO)VgHMO_hj`r=_^QH(@1&*oY6q(S8BXnJ%QX3}b zUQ~opr=!5yBu(rWiW$M%zaec~2U=eGmkdM~A4S6X2y)z;(6mx<9Y9EpDwOcipi`Bg zLl-yZjp@p#i;iNpwJYAiNYei?v&o3T@N12kg$P)BypoaIQ@yLVrLr!J5h>p5>IK%W+<;B(R#b8o zBiIH~u6zM|*6$%)3=a?8$JTHSRm%q#&p?tS=|AMJ#gf7l^j(8C-$a-3AhAbi9~-j$!AL#z5^oIl9HOF7hhyc1=d)Mz})P^V^9%R!iZU>({7 z`*GpS|Ju91m!`rvj^ppmq?w}RTpCNo`GX_w?2xmZEop`kW-78|y6vp&uDj^2|0U?! z3n3`zRvB9cu?xYPP@$n0nwc#VVd^^W47AXzE<*gi?w*GO&$)V@&%^mX&zWPlvV!jm zY2wpya#}wD_g{CHS<4B8$GKwvN;3I|MDhdG?IFT9T!o3qiZ}R(uDT!0B$CX`XXxx3 zq19o$ybwa1GXECP${Gkgcu0rpB(rgboxLn}^*)cIU6dY`qITDqd_BeDs#%A!GXIWc zm%^o5jbYzMo;^?GcmJEKpLrX9Z>%oGSbuJ_v1Xps%-5qVt@AB=RQmg~Z!c%zLZeDi z_9d@U`=44eOia9BcG-e$^Al64S+?w#dGd6Sr7tOdNk9`PT#2I@w_Cw>ct2BG%{8wN zyOD9q>ovUXjfF!wHk!L{(&R8(=UslnkqFW77`OIo*9;e1{9M;Oboa*?4-KK!n14aA zRW)(dt5KG(Wh=qcbBB8ay*O*?xIH+E9*Yt1)E_gs6w~S(K#xX@=Ysg!%&`ufMfDG% z>rwR3T~z0}Lcb6~oGuncQF7_@!QD+l2qAM@@{Q%{0?F-Ap$>IW^th+xy3HKIh{+ z_j8^*uIpQoDoQd~=;Y{daBx_1vLDpI`#gBfpdy36`nybd;0@kIO-2H)e3Wtzd_c4m z|0oUzR~3(OZ-N9qqdCgzxWK_tg+0IE4PXR;aB!@mav#JYo`#26XmdDQw|(DVLmcJ{ z4sv0#643s(I&FNmltFwdDJe=8!;;<12&jCK^Q#i`pT(@q3el)U=yVD*uL?4^MOXVC z44-EIK8_4?-wiv6%wDwKXa5@=<{lCr^II*l5_m~R*U9ZX(T+xavgptrnQG*xW4qdx zRUeXMne8QQyVQ`NhGw5cnl5vH(v4#}2xWfB&8^;YHY!-llZi?3Uh({JQR`r(Rqy^^ zA5AS!CtKn^OyOX@M&@9(-Kh5Sv^=@CQkQ224kaILliOd$LgnvDdU5I%hQg|KpEdsd zCQy#x9urEcXPjer%S9qq=h*+1&UCs|!*l{BReSNl*mLK*zeqtBd}+1Ek`qdS(xV@ zf5gv|i6_Ppxu&&K&2!!wH0_NcgQ?_7z#P}RYI*30A`^6sSKGdr9=x@yA8s!; z{GaY<9^wW3A8(5I4r`}g6Jfs5DkqF3=fOw8q0VR9&mq_Op~*IHoyhB8xbUsx1-$}a zf>~djb+gCu3^}iTSu&d*F%8`;q|#X2?!W#7*Fxj9(=CXw&*h&L|EDj9C+pp=DIu(h ziL5BQzqOlOOVW63QYb~8DIjD&v?|!!t~W3iHaHsEVq!4m8;3$k3}4?~{AF6Gvtf!N zWR}n)NK90;><+{Fw$d;=Ds(oS)HZHtz1-yH>i#5#Hn`RECYQ1D^EAuH3PW}5$)wu% zTtfF?8g#+X)OU%VC7r=2Hr{tJ&Ko$zrOsae)W9-LZI6BbJ~Q24%flt)Ds*3}@uQj} ze0K7O=IOm(*H$-Jp zX)Pm*G3)$^JQ*9&$Ll=JHeatBytT*PHyUNys()vGW|VF8hH8_Nd7~P6?=jp|JL8Nh zJxqJeEgZPKU<+J;~0-Z?HM4Pn&4bdfI}_x`fU3$rzL%yza$6pTatD^fy#RFv9!FpEU+k1M>*J@h3imycLhl%pYt@J~2xrtY7Wv zy1(o{`UqP7DONq;kAW1c(B1swG(FoMS+J>S-PYqd&GJ~u<(5eWPh^P6A;5R~-vIp& zInOFcd*SsyukGAd;qru|hD~gNpf8Nd*~8R}itb_>jV?Q*2mhAFA0O`a6ek#nrNg{^ zO4JJG!vFh_CEzx>J)ACSsfutI!Moxa46Yv)xwGw?`g(v_nJ2i+-hO`??cPJA<#~#^ zA;wz%g5w;lV86&KqUmB)Nxgd8^vkPN|EYwm;K{FosR^J4N&5Vlf=OXqrb#y)R1aA> zc!&+G=F1VVIjpoC+?1hH={V66OC#rr;m}{@l%aBTYiJoT2x2T1f^&Mn9}5-qu(umZ zVRJ?NYaBVcSM+_9dP>$%@mQk5987CnS13l!PA$y$=5%5L_EBiiEDIEZY8;kiCE*Lm z;Rx?4l%p_p4WZI`Oa48MbeEQXfpE}SPU!&EkgR2v8!=U<-ncZIRykz`iqiEsD1lLz zaqp{~(2BH%c2jxIIocZj^-_dBa#~088b72NQsqJ2)?Tg^X4u1^{Eq**?2gmP>*Tra zO>WeTiR3|lb@ZVLdFddH5wuB}!jtK-s#rheygDN&+p3-t(W^9ur=sH#eY)pvu1LTC z@MLAx6HQ`y)`>QKMLVuKG z{F^b{zt=j03!(*xSTssswcTt}$a~>X;u^S4NI|(QkCqx?7DFk}C_c{Wh5&5jWN~Z7 zzEg^rRwu82>Z1222wT0PVK_9S+YHI$2}C5OTNv%8Jy9D6HDiTPem~9B>fOnL=wZvR z*M|ez{$n94Z7?VgM6kL`v8*)Os)kj+LFJwGWJrA)!SAiSrX9BmMwHRWQU+g!TeQ;Z zo71g4C_g9X^u9w{q=sBrs%%{|<>TK6~DXW}l{5I=}ftRug?J8qxi z@b47kT(I;DH0;lrtGAmKZd@|Nm&1#h09>Iqy)7t(KcTu3E5y=B#)=|H*;2=OAnrefIgoz732Se1p z<1A?~r`CvjB6fGSf+mBP3B8-uz3hDZG)3O&mFA|oj`99PvX&up+vBaxf+=QOrg+^* zwRWrb1={p02*cZ1oYufyCrN8W6HK(HE6}>-a|Mv;a&AEv@$Q1V0~1)HU)qe;i%`+9 zfnI?6{;e<7CK)1bYDl9qODhCb?g!T|_D)JfKbdz*Ki24j;-!`%EHW^SZq*9pRR_t% zFWP$2f9n03|^*ShRm6uThhRWb?Z)77UlD7sVCp)G&g7m&Ga;ypvR(yT3VO zPF{m%33`AV>3b}@Ifr^sIxY8C+V6s?Lhn&S;)AKC5Am7)M!f~!8xwuX^wU9L&>6Qu8J*rf?}YgT;@ z*i-`fUvBq`7Jf$(6qqfRwRBL?=$AEz+DI49cGhhTrG9tZbCqiFxJ)ci zNd27rM(Yze=DfU}{MU1($bnb425=FL?>&z6?K%SB3vYsxw0}8{^aHpx`e~+gjfGs@ zk(f>Qm6@O*JTeZ#=BOFtZ+-UD3;di&SNmZ~(8g&Xn+^trj1M8^0#x6XNH_30I4q4Et0nvJJ}Z|2Q(Cm2%oC1m6( zF$~?0R&*!ks?69Z$X~?XpHC@Q|MC7WL1u1~A8&)SA@Gg#C*JCO1CyEivoTSQFZ2EY zZB}c`M26#+*)KO8h-ik6enY%l<8Q#LU>zFwdwTG&12t)3h@-ts_?OQ#Co)-eAFRbO!}PF(-ntOJeH zYO^Zt9`{?g$d_p_CfldZWGZ!){Vw-ICLpIk|lCK%$c{^4QsW4Ay55z5GjF^BbE z>-WO){U81sxk{ng2Vc%J7iD&>Tov!GK0Wdp#0pcAr7v5(G{K{Od{faPp_Q~o^xgL~ zG6vQy9Q+z}!s;37HIchfl94TN=oi9hNl8rwn643C<_g#qAu+#;JTUb+g0)p(IuK~E zH~xoTKwR&NU)nYwc!94#iR8hPqSeiZmG6de8dOkxN zNcU*Nobc6>q|aFng6UkPiSvmvub8rTzH}_Pl%)bHIp#yH)kM%2CHGLYm9)8NY6r{+ zGhM<@A^9(o{xoiq4k#(-vC&H^W26Q`f;x@8p+qa*f7w1h4O%^8wKjscV#8GG8l3uq zXS4(@-GilAZw8Z?;`JvH^A6{0it26Wxehx55nNOL%%ztgB4|p@_xs%)@?QQYU7b{w zNgKu3t8d@1j(j+&z>zGhp~)0vztWN(mx%j5+iRQbr};qQfy+=it7KPSwcam#=NumZ z4_pcF6w^2Zg}*1fw_lR=(UY9-$3;&TtV*c#>tma#Fsc|y=azW}xc@2Mxr_ciGw?B_$0C0haakW$?V|45 z4f7afv2yIHVQazjLP}}+YeYhZg3+pV{V;3fKOlXX_SP)qF<_U2pbLG4z*97=&-~iR zcDbo8<|Ihl0+oA<$eTcde<|hBghbH&AP0(+U!sF(gnIykeH!^TvGN$WPp41)>H|ty zj^}!8c`G9|BkE~d4lz#}tTVE5*qOBbJqXXhXR9*2;_hscC+h&1KD-Bz!)Qr#mZ6nUVlkbK*NwX`#(ESjY@Q>Up*7VR69A z%}O!P(SHB3uO1SRQK3`wNtGoKLAus*j2hGn%-qzrjl6h~L=DoSweFc>ReIGbQz`x$ zhJN_9*OgWiFDG)u5#-Z@Um#9vzf)EWOh^wbcW~uf8`FTsC=?*SX|3XP0?e^mHGYNr zh+1IUYbT58A*D>WE^0Kh!=#AWe0n~Pfj-!S`RJ8&sY>pP!>q4VEhm6rm>;Lpbd95Y z>dDjMSpRU;a;9{dO@`JcHC$+@dPf=L`qH)GpMsc7O_23^|xW8PI?`sU)P$KFKYL zv~;Q~#gdj{R##02f3-eujyh5olvc5^E5z!Tc*#<`zdslnXCYCfxb3Of(8%{+kLk!a zo>~Tq$v@5k>;}^TSdQN_D;Wk1Yx z88sO*k>UO{EIY*RCx{WoKld{YuY;;Xc8}b-pN-d2yCH&EbJhPzm}*``dpM%!>(*fM z)alOHShlhhz)wl`<5RH!4A)$B%c2G)5X|%+C~|m#N!cphbA2ZM2dyf2+pI73|2#9N z&$L2NAykv|4g{Ra9Sx12x^=t#dkDml&R1QsmBE>n(!Gba8X7+|r$Jegkcnc_riznm zUAoZII9#Z+Feh&hfbS+KPnt6*4k`_)jCv{Par6gh0<4lAPFEd@#r(z>?(RxlT)yy) zSsEds-^71MTt?p=HOIHw|Bx`C5mC6e-|3(yHKb)%)+E~LsVt5x>1`Ti_Wi9}_gP9t zXcSF4Y~nEx0i{}S5w9&%`yV;eNx^3Mbkqsl<-xq93_7-J+?v$dsg=}jc^m<1d-UZS zkDu;{$F}qQo&9SNL;~tYszY@3=(VD^*g2}v+Ez<$-_Q!Qz^d%Yb_Qb;vwznNiI>s` zEj&DCchI1Sz#`l($%HL!F&cFOBfR$uw2ESv;)*NA_~Sh2Df2=ZXrq#OLjU0Kbk_~z zn%^@?V6B7m538XJ=iv%)`UZN^rI=F4(b_ZK(}5uvzCQ9EcAeJHvc@1`&(8}XC_C9Y zwSNU2ehm*pUa={ni|5a6ns4>-5EzQgf5#QTuE+tif>~lCtf+R`>)8Sz?iz9u1n(xu zlL}bF1Re~Yc=U32BDj^fD5&oTg?bTj5Zi1Q-VpGg4F8CD|Vlo-rs@k{ffA&DQ)ccojyIjs@UyZIIhwDN(x z?UvrrgJfp)!ts@La{x%nM+OJV0fI47GO7u(pdZ41AHmE`Zpz>YJ_0G7v(BjLs zTu7G~i^s>35O<$;zlUAabvSM(&g{Oe*%I7n@w)SR3v*IsNsWl15Oul(>omQXypUzPDj0>-r;)MEid6$H66q3&5M^)al1X*A(v)cS>)s3H`>+1a5K zQJxU}M>Vu0`MjBuBmz=w54#em%L&ixHAESn<4;}xGDVd8q>;zj_T4Y=mIuYJC&sWB za?{NEw>Xj+l`>_0WKtPFeyg1Qlus*uF|M=&O6HRMFyyB)n0N8=cYaIzN~m;;my5}pc+WK^>_|^1_@Kse~AkE@vNKP*Ep>Uuk#FO zBkBxg3V%)@I*pdWQcYn1WI&_dYs**M9^e+!tc={}>o+=2G6Yl5%8%yDB>{5U;NwWd z^?t0wIWC1wui6NUD0g#k8Vw;%|L?6#wqrp z?tey$8(XPHDQyRt0r->3=RT6{Wr4fV0I?TAZgaKX_8cuYGjHKYMG-nd5|deV)KUzy z+x7bFMno$qSCsl9R*k92Q{y2Ll|c=G?!+EHGsk27JCR7nvmXQMyd0N1w)$kPhHfH{ z>Bs;&9FXOEg2ck($~--lGMwc~hVQ0|(qi*}mS>@rV0^)L8+j~^3^W${Y`jpk{5`!(62Nlf;M$Yy9`GVv>AnaW(BYDwEBddhtaC=%$ zQbF-qII32!FneJe0q=@E*g5F|cp!a1XKH`A1Z1`Em?O_9M?LphO5kEbrI*|Z*H|Os zLw&)`mHZy3H|HMlsQ%%I8H2vz7ywX#g0gi>>%jXG()7XbsgK}GMBQkx{gf>ik*rQ` zHLA3Wv*3uU7gca&8#5hsEP-U{gL5IPK*NiWmyyP$ffp6Sjegbu2PxZsj5HkkTpr{? z`B@HmdC`XZAIphFbU=ki4HY9}b&hMaDSvXks>) z(RL2unNJxm6@-H_X`i#`JCI~!ZWQ5s1G5TF6{xD$!r-;Ybk0qloQAwxL?H)P8EL?;h9xA5Y_ z2Y?Ms;la>645SCM1bGk1Sb@xa_R0|9vs$zJA*`m@Y^Wdiks$CzBPKtdekqd9;aUJa zEqjG@RH+T0t2UcK6STDuB5?6Xy$-D96kb;+ShqSrEvs(aSOlxKp|Q44j}LM5Pc9Nf zNW6?OjyF8&gjHv@(S*#fSSrDkI9&Ej@9K?^-AtR=@&az{?#V^C_-exj@h~917mcL7 z4IU*_g3xD)oeafYPpSqrV{_Aq$<95i4`q|iHy$v6!=}h$s?5!=)##`RJYF(M#E(Cp za@KXE=}nhW{_s|0`pzOFNF_lla?}f(nKIR*j%pS{5fp679PWSlEeclAe@Zo?g)0d< z(Y68O*<+o64~8yXq*?Ed=T?&we_BgR9%@b)&+}XlC7Hy7A;iEu|7{%b@T&p~qmDr# zWn4!ogon#jqy<#%gU(D;ob6{tvgSi{yB#7z$oMDm>w?OlQEc|rPZGGezm4Kvq7Eew zZRNbiEsgh7c6JU*pzDXrjCV$HeECkSdz|5zu$F2};4kYX`3R!q-ObMTJ=ygf0C8;% zf1<8O!LT=0={gWSz9=OxUt9rXvJtn~8F{)r@&k)nC~XwiZrrbyq7bDZ7%Fdq(6YS8n4xJZ3(xA4xLNl+q_sYn&QJ8T&{h!sF&zLP33NGj+Y zz1w4o#h*gie1B57?*AF6V=*7?yh##~bN{=m(H`T1f)3son$(22%E+nU`?znI7?MhoOX7rr@(J%CscI;NoId=vjEdX1r zH@iEo$^EeOaIPwNG*QHu@@q4V^u|{k!t*B~G}Z|9e=hJeH~_8UKU)iIdkFfmbTRQH zgs)Y^!tMYO2pSjlm2lvYT_tp!MF#!-qcn@^zj!MmPxsH`Ie}?{9_)5|#+Ap8hehe4Z&I zJIu;9W)^C4YV;u>S_YOK7sR&d6c{d*S3R;xOv;6=%8Woc%o#OmcDG~D8aZj9fKV1! z26*$oguo1G7{(uM7HUg8H)DCN6mH>N#Ee2pMP(4Uxh|Vgk0om?fuzi{X5$MOB~)H{ zt^9T~UNmJTG4F+8+2P`^qPjqMSK1QtG;2&=sJZl8a_=uc)KeE5pNOkJSQ72J^sCj3Ym? zfk8zk1?hTVMQnL_YnOj_!04Sov54xU_EChCLge_j zbp-;)wJZjqxlkU?J7jT=;YwTcT_;tn$=JZ*F_F6%H8g2f?MgA<>-BKcnKGTpqDO%I z{&Qs`;>1FAO89pIoE&D|S}QvFRCYG@)^oMn=nx37A-Q47-$kHYDC&!jM(wxzZx#~C zhoq5HSan_k7f^=Th`sA6#9F?$hn??|N!1jg9cpKdN@ zjgo^c-q|l{KbNqSqh>V-38IoZJV$qn*V*eWn%D44rS75dAx~^N)%j(&dv+|Ut=?`o ztSa)k@}wvT-O+LQ`s*3Tqof4whUFhF zHL45j?afwv*Q~eIX(Z+PyL27Pqk*;_=CT){?Lg`uboTPP^?c9*VI?nf=RHBMu!hQe zu3_szfQOaRUq^Tkw0rhzUsI!?J z> zYFOim_R)0L0A|G=me+9FTdn~5(S+qE6Qwn|Si!i2gX_vF3v+j_@D6-RZ!@jM2B*Bt zjj3vjA%X>nJ;shKD#{7{W@xi*vDE~un*SeA$3A<1lzq?L@IEVxmgS`EXA~PfLUF2d zx-5fhfY9ZfnJxfj<`3WQC`9wMm=eiw;DeN~Tfg;*P>6=4%c8z~y55Yhd2)Ew9C&3% zG5>4TZ|Ku+S$i$`Lr|#1U5U{A5aL^xxc}*$><-)UPCl!WTDf6%;1(~O(<6g$>#eVj zmR%Xp41-rpLJ~K!r3gb5m2!6AwjdoO>>~6zb0ZkFN~wS z{)I)B!N&PWSkI#d7;_WaNaz z7#M-FoHSJcQv{%AH}zxxoNaJ|$N9{fimK*7B14j)3`rob8KUohN6*T#9=Aw!@NyM3 zdW~2R9R2-CImY+!vz;-LaBM2rlPU^#6@ch^PAgtJ6Df#-Yh?N^BRnZ7f%z{CYbrOM z^xOw+#kI4YAFC0@af%r=}ZuPxIio{O-%(T^@Z-Jmby zN?LBxN$Q@X{PUG2!IzJB$2Q7B|3Wfzd;o!~zH4IsFAvxSP=vb%Q*$^Iw+7%8kc3&B za=t>W>R`PKM!}iXDGU7CqP;RkwWsA!kY_1`y=nL5WrO=U zut%oIGS|N)2;cmdWGnp>odLCQzSd#YFs?UG3ms4XAYgLD{=kNHOU@Dbe#hl%Mo}NF zunV~P7T3%n(GsyJk9&=0+C;Y$OC3D)-A$SNF58vqBkZlM^a{eH3=;RoO6gh(s%!ST z1s{UVG7xv>tVLJ>=(}{MDHHtt8$l5%#HI~oJkrT&3*no9_kt|h`N4?28+ZFn7sa^$ z;~5RV$&{6Qt=^hYnnUkaI6+q(BOi)zbi_&b@+RaI;Xe%Svz^hbH}o?(cHx$zTPW&q z%U#nyhRE#E0!bWe)@^X#=sN}ag*c47kPf>vxD+BA7@^1*T?_UBEvWj6FZmw1fMUTP z)iI)!0T%gb3yFuEw>zNG&+T=tv8@T5f~8}3wWuP!+wOSarJ`fhJ{SJ|7t)T;Hq&wM zxhY4k*E;02Dqu>b)xa|J{QykaZX8j?cKl4|o2}F-4x0{wZ_7lJ_Rb5|MFSCq_8UzJ zp=imtN+&{)MrR9o20kQ?(!n8tFSqA&x4SWQ343-3fQm?85-cIS{SEk^EVE17)1yxn zunXmTqUXrdqg)8#zK5Y51(j%MifiDN4{pi=Z*7!IgH*_q^FiJ*8u}JWrt(+2(V3xO zBXkq3%LK8!%%Sx{^I7QywxNJckl}vNS+~Lo;A)fTkDI=~e>yM~@K0YM+BaJR#!b zrAZhj*JT%KYNMzQ)b>5V#G8k#_YU) z8(-&*m3EnEfACq{KeBi;UDg8Y~P$brjv<$E8eTILnc^?mY z2g)|C@{J*>5Y-a)XJf`s#}WhuOz*G%fgA;z>1yd51TsP9u`G}wG-ubg4{8P8*^N9!hXd9!* z!8{jkAqB*vE88~81ryY)p{!Y1PDKslaVs0AKJG**K<{RxPc9D7)-4Wm?&F>WZqzR7<;`}6!<<=$+;pe_rZFI% z_2pBgxWVktmqPBn8gfH1NCw{eJPg1Oby$tws_mK^159OR1qLw1mR~NEPm)j&?>z znmO-q;gir~_DK*<{oCxTx$`UmcDxocOC%QHcHZiMfxhrLoUR>c zL~jj3eR6KYbE1~`W6y!vsnAW%@0>qb`ia*SSYw0rCxFB6vA~qeVpyXKKW5zGtMe7% zqLXl-UinM2sN@7NsYh_ShfO937A1hQoA;bfdl2OaO(da_`&}7LQ1z~w^%-zUW;o-# zV+~RT!IuoEnZw#B1#xF3C-vnYb!BVdE*4PsMQc;&5En~>9-dW?9NJ2(U+DD_D8O?r zD9n7EEWmE92kE>)3tu@5`k_&vwAXpEI{g0)scxh;@j}|44ns7W#B5<7={AfN=Bk+e4aC+E0(zM^LLlxnb^7wFWMYUn*s!@#Y|RKm^@&=G`6 zeUwj57Pc5$sRk%wQe4QvSCFNgs4xm+Lp0LsP)siF#J&XArsZ>0MAwKhl4GlA-zXLC^F2bJ2Mbp1J3I z=I*rdZ4ZLzYe)Vo08pdA20-42@=SL0<7Wo;ip)TA^ALYQ36O)kr2#mdYxz{7nkT*R zEG_tF8K>sIa!HS+;Ehrix%u!MlttDJ@b`mM1znP7q9eM=ba(_bz&TzD02#yL=>n}p zE@oKr9A62ON&s@cHzni#E+iS~P(xOEIHLEQc5;qMzx#!dgBQWxP06A*L28WwB`g;b wwD?Lo%ZcBbe$adAY^euNcV{I^KMbYUSf6{8j?6DJcp6X%XSv2EM7ZQHhOn-kmCWMbR+@;vWb=R0-Ik6pET|JYS~ zbzgmTU#nNRoQx0&bw>aIFXa0P1rcf|>H`4ST*QU=mE3eLvZ1t+L|>oT+O-^d zCzAIaTwjhZ9a0T`7PC=BXrE)lnpxGm%FD@Dh0y>B1Bk?+iX~FFE1kfLo;vQ0^>H*0 zdGC7Yg!xVy`n-7moHHG4rMl)mxtDe+npMNI%rc}`7s5ol(1t2cz2A}dHcC@`JQVoY z$R~`09?15la5edEtmMA?ixhf`z2V(2rPKy~(znThZk6_a`N72ejKIU)uFpw;3=inS zCGF0xS%?BMU+cK_ma6yK^&}?JP{u+Yhm;Jq5_NUhUv}9ZCVg->Y z7!&q~qj8cJBR^#ohjta_>5mtsx!=ETwWqO0>dL|pG=6(YU_+u@$u$0U3xbQnzj_k= zXRoo8dK&M5cnWm9e;`ow=TAsb)5bl5hH%Oty`#)LPJHjUweo;Q!vubOnSJ$ixHKNP z1L>7!&11IjA{u+w=Qo8!q9L!I(A}V1NmVzK)j%M~u<+?Irg1|)?YAUnMN1jFYMMP> zpaI|%^%&R87@tH?!N<2LD!)7^;6dtN=0w0NazvC%Mc}b7tXQcX!X&0gSZ_!(Rp|oe z8>FGaFeB2jWhu;$ksg>O@VU#d5&XMANxP!inT#mK5bU^&GNg);`XsPxN*_S8OBm15OMm;p#s0jyu?X@)2&E(W(_Ky(UQooZ zpgh7rhPxG z?6HGFW6?XVCoA%kL2Wj;p^7aU`D?SEQxpHHa z`iczT)~(tJ!4H%mYg6=gXFSSS0m@lSsswSjo#}qEOg4(**i}4N+*J@@>^C5!)k61f zhTzPGUgStkhw-;4hIDSNakm@%DdLQlAsN2)c8yC^&qB^o<(i#*C$lPxB)`mRFOLf**@41=@HNg?g)e_3D4tG>n2GF@q^k!+PVP7K=@K_})nt9s%Mi~d{Hgq|Q z*e;!ceh!}t)>NjrtM12eNuqpA+_YrC?&}=y22(MgW1tiL921ERRx%eRXH&61X%@*A6CB{3Kxd`#Z})cQ2wsEvm323ka6rf*0| z^gobr(o-CA7w&P@&PV@ObM%C~ab+%R&kOVYuxG2o) z9lMh{G|Wf9IKaAO5eY~rC@|*R*DM&Bj7o@0NIE|-A|j2MFOZOyd|N;%!H*%51{gCl z2=*=k6%7di0R;^e9TA!BDL2HZ_;|&*6#V;eLX_i6BG^%AfIaDZKLQ?#Xor&m()nf_ z7C!{!FvL^W#5TlHH;hr#{3xdNQTVoZ0FMhH5u=wx+K#*$`&t0{MwgkPK#TqK3i4dP^16dk& zH7=Tx{cIB)j1{0|H5K=V#jKRMWDG?oJ`cjHR!DK;xCt|fZ4u-le4@U#I9Ou~;rR1- z!WZ!UHY^HSipDXfk}n}|nXv*6e&&}Q^w_9Lo+|oWFpUs+FVXT#dwz|!6)Cci)=Fa@ zNng*yYVJ=;j^2~%JSuTczNBquBQ_&;3?JJTBSTOhxI4Q%r7aA>j9A6`o zOt?gSjV??E#QfYLKwl<<4>p5tb~pi;rgTgs#MzfR8b z>FAr*`q2tdES3xO*I{kdpIVH^d$xPWLRD#Ms`D=ank1Mbffd`c;dR}XL4W$(x0sU( zLnbHuF!>E*d@cDtn(K}%h1EyngcO$IlX3+vpC!{;^e#e?)q4{ zIV*5%ycj@TQ^UJqk!B$#iGW-pQGLl_(8m&!cw6~bTB|_t-4*NDi>Ilw{Xjgn^KiI- zA;`012XrMn$!hi|jziN7)U>9k;`+>O26*;%f5?D@dci9Sg&v}Z5(;=-dAu!!_Or=p z89PK^9x*x@8mh_DE|1G_KiojR>2<}OR2Hugf1N{pz0*$4v}lx-F?p2bREjz>7ju^i znU`!fxr+g`G!y5`kz|CW2z%P3wWVPq60@31-?rMRs`&BO!x{!1*tr-;3%__iTgO`w zML3_bGZraw-i;w<1VS}ncDj-ujLgFl;+7r8`@KHswAA-abv=3ro|OM9qw%GZ?$fAQ zUnF$ejKKGn;hy(n;fVh5-_8fYg<#V%{=RH4Ij=c^5A9q!*3BEQ518`JTxsqs4~&;K zzwkVdzwg)U)mInrSo`TuQQ)EkU1+YJAvB8w46%$}br|u7rSWUm%fylRSTzSR)lKwx z%AcE?nt6rW_>d#5tBV9hB`F!V&xNN(m+4F(P3iNWuafgNJp)JSEwiuj4FnM0&!;!n z+ISY~B2xAP{q!lmyAo}K?os_CGSl7!j97%ST4kubr16Dla9-OZPRZUEo7Z^v2+1VU zl$i_~Dk{2%e@T3W#CNXPGT9u`=KuIBEi-$*^fj9L%@0ms>~%ycSFm;*Vw*U6t*5Zg z?o#wskmnegFsw5_z#gItp)lkHIBwV=+zx zW_7sWWdl)vS@u|nx>2M;@HB|x&k_$pS$&~Z>mcLcv`#l|wnr~CD@NTzZ6@$b~}Dnw*-Szf~FR*cV&MJo3gG3I~}=KVf+dGn84h;{M} zuo3Y);I*H^9*z%%a(#XZfF%4}_^{8-#TDj8a$KdEf|(3Bm{ef)LK$}R6hJgV5+Ug# zbMQ}}uNdesQwW*8Q#{>R&yS1K3?8V;Xez>dR?opw91*?};^vyW-lO-mO^WDgk3k)b zmZ@&Cf-(2Oj;`q?>=};DGMdLQxhz(v`G`Ftz|3CIoIOeM$$r4;;I>zmZN zAVgJ)#~A)(eE@z2DJNTYOY{{r;c9LSX=tXY z|AUM}V}FbuZ*3|qw9X#<+?MwopNFWazj9FTiH7UCVl4}#_Ez2;t)RJoc)TZyIJgzT zr}lxh6m^ZC7ynU%6-lf{wI@cPLFvG&F%F82J+f;UrHDKYN%*y94F9ihKf)*V4j0#e zg;J^tQ&RI+^Pc`~(1cB`^`Y|eVoP(ga#CvO(NdqAhp;dXY&2d?Sp{7!p@}?VtluQt zdK4N6#-GZKySqgE90VdJMzJcwT>p}UAN!&i>%@VB*1$%=th}yT#azmtR zUz8;kRn}#tW=0%9?$*3t#7D}q3V!4e28fQR%bZ*&h?nqy)pxY?yhgw00 z6Epd*@bO9t3nD`W7N}Qwe_@_&A0hCHm8L(K1xHONR#baGmLq=87o!Dkopo)>ePyhS z{ozw;xEO3EHQVOa1tbPY$h^DoK2PTiRaD%y{lZ5Kb$=9VZiO^dFEP`E7ySp63V0G-C_*|={ z1O~;ZW~-UG_&4aJIaw?TH5i(sii)5`OI0*v@mNQRb*Piwva5sg$qU zt0(|&Cu9A7vCCP^tc}b}*t0sSC}{PwFeOmg8s_XLY2wR>&(_|tBV#l9DewJJtOoj2 z`#$X5c*$I!?4Kl%fWPI6b$gK_dAarzlSQy>xQh;~otI^mON*9D9d71B9^4gmXI{V! zZK^1jxDOx$5z+YPYfQ)uuaIAkri{34sU(&1f#IVcQS+_aT+FFz`#OOv=Mz-%N1aj0 zEHy|B#4|y@0r2ScZUOope$7NN|6!f)5dV)~ZVx|WxA07&+$I7iPE~287=)`?t9-wB-Af08B5rJq3{$Zv0rj3&+!R6gKXTf2|qrm z*gvk!tXmOyo|Ask7a`zg@N)ws|800wl63bWzV2Ah+Bop0Yv(-89qC%&vRBr7b4Ne^ zwQ!EEiWqp_445CctDKceqp3+i_#n67)f`IRFa6D2k109rKE%ZdLVR&~E?r3xLBFx2 z72NY);c0N3_{Rd)cNIso#@B-CB2X5nUVWIK{&`aThW2UyZnSxmcT}p=84D> z_t%wg4>es6>6fsed6=sV7Wa{`o6K@6uNPDz?bR#g#)lQZj!?;`IOgJ=SlfO&w!OV# zv>#ZYT)%KLL=*2s@!QVJBURJke(R2pa?ZIBi8QMi-o0HLHI}3YMWB-!siFAOM+@gx zu>}zA?lT`9>`xfH8mR%4O8DwruSCh9|7ZjqG2?Ycy_k^@S` zG%E+9cf$!;tkRI#O8OZ=OD^$4ZVOx1I(Z=-Yz6J>Pa{VccL#(KK`Xr zREI>GRFgh}$*xoRei;wDu3Jz)5Q{oV0)NNtdc!tV(%sChwW6Y;j25Ixl@&~{q=&q@ z?d$LG)h-^8{Zb)m8*ZA{%i0P@RV947VUaOa>K2|4cK76Yd8%>L0=$o~xVj((Pknmd zVd6=nkZYo*H^>J})aZt~hlGi|17V73!qy}W<(jCX70iSJ7Ma``-gZg7bB|vfoi3M;r(w=@|PDC zc&QmbbN2oB&$YC)#y$uLr2#>U{X{umduxUtTTI|n5PpiH#qju53H<`)MP1*T4q+yu zwqH->61=tdMgw2Aq@_yRR)^Y}<>NoVf3~oV8kuugfwcE)!MFG2icLvRY*Iy?J+8cW zEoME589&e4yEE>mXsBzM&?d}jEMMF z><)F{Ei9b{4q8GZ&rniOi#-2ZmC+tGK1%0z zDl{xlnCW@{j0mSf1@0)jAFuo9r<{WTz_TUgOF7Nte)4yKof=>Fbdhjzy%(J}Nu7Dq zV`{A7SNE2(FG($C2=9ab)u-pqN*Y3uAT2>=G5K6FQX=cNq=TDEQc)%!V1dXdtdXI*eAq%A`XYXC!*|wHsyb{PoNG#OOV#}G_O3a6KHL@ zBAhxYt&^BgE6;mx$GEyh|zm*de){!;(0afjzx$?W*R!8@Yy7gGKf8b^JHFIZCn zDBWTCuX|@WUAv0C{I~^3o3yq%q1_ht3d?$l+2sHTpOU<6o86ZV&jXT4DOuSo1WM2C zUYC(;e%h)X`p)e=`dh&VCtE&$b#S=y$e+A2pzFzJ)I5@yM z;vvU4l@$K$>MYG&OU2e0-+oxztk7@BZj-pwp7sq7L%ux9WNB2uNG>Ne04*>{!{zE+ z^I7#t>d9|;5oKt_e$>0(Jvlr3@oRdDs+r%whQ^nr@7)uDzAm@Oo~XyyO&^^4A)Jt~ zokCE?=?eFkw>HZcTqwou5DWzydpc7MF=FO+KVxj+?BHn=Or!`HV+=0N96?ytF}6HD02Og1KFS zq%^oZPErG=NId^>ZOK``^87%pgfP&bIVB}zM^xGvaVBmusjCm*U}vSgb^`z zv}?Se03F?|7K*4R>|uDJ5b8<}xklNO!Ii%zt;l?9wmUPdzF+joxGDdUu*e^Lqb5xwgulu8eb(g_#-VXGcwb@ppsr zfsOr^@{MO%JC5rK21e()uw;pWfdLBfsB|r3XccG!LZEqNX$q8$32e~&Ym78Gzp*-2 zEE{O#Z&O!hzRpS#a+=Bgy~hx*+KW3M>1fC0E&uIWH`1=@nHky1X)bfjKR1&b{k*sw!QxBdZe(lpAYhAD6UW^A3Xc<5i|J3wWRPZY+plK9=`)>*+`9)e@L80jC zPn-1Du!eb(f|~JjwTFsLCD#uzIc;&J@<={AHc+@qiIFx<3$ex?-l(o6s+Ng@&`gM^6&#vWCdyV z7d?Hl6YDBD{l!2^%#FH$i8M|I9w^RPfd+F}9;Y`~+c#0FS>rl*IpJh(txK@Hh7S8F z4OF(e8v)den+N9H1qspZ!1>&c@(;8H1!olo(Qeb*|6TyT`@2{PnO!@}a;tZd+TfNVkt94kq^cTrm3|9+p{a{@;EXPRi3Rk7|#el#ZdNGWx4 z!{-1JNvUjdmDIvEnsR!NzENA@bQ*8n@qtX^ut*oOAOZhPD=|iDd}{1hu#AI)gQjIU zaz1;v!cd%1;!uE-q`)~lODU)vvCUTP6cNOa;-8tFh{8n3@!X`blf{5@j) zgG5LHRh!G`a98uPcwD93_O%izGz`KZm5jT>bLI6?*K;T#<9uqKiHS*ECQWS(RX#=W zaDNhbEZ8N^yc3tRhbv(VMRZ>xb9SGehm9m!3*X2q1!bo8nx9|0)ca)ur6 zmPESctcQB=>R;kuYA28oeOcNnvw=jHOrne-rlWjSlP?~ISuS*VDf2bYypB9{2^=d6 zrP0c!>kHh5Yos>+clWQNO+|ly4-FKgb94h_3ZmK;N+ic$ zXkRE$Vaz?Z;+*iTnVdktePX%V$Vg<6N&yq$kJ1=P(H{woMnN5g##!vl43}JIki6@? z@kmg>d94jbSjhI>Z=__s4q|j;=s~vp(|A`ejcj^qc07QO{GD9t9M)G@utXI#O`a~Y zWxNU^?%u?DW+W&F8G*FG;E)7;_Wwkq*B#Yfj-2CAVq&7We^CcvU_uD^f1`0vzrZkl zn`Pyz?WPhJ()J^3sP5ovzW`gWa5^36yHzI&l~;FiO-RP7mkjsa1=(qT8hF@#lN>67 z#^4BQJ*_7iNFTSeg{%*W#dSt;Gv0bz$mDD|X8Hb}DU2(r3g3!0Y0pjhtZefV5Vq?o z^LLf#aT+oBF56WX3I^@vv-{g#_c9unUdnm~{?o7p3=)Gv_;&BncD&jg7D*xz@vH#? zGBWb!^6(-!Nv!B83{?GL?f1v$k0RuFzI+w7lo_G(l@u~pL{-ni=r^!!yFfRUV*)VeuC0VS|`a z5H%#tVfZG915+6q5AZcZR4}1Uv|fwA;WD?zNI+9iDO|m(+b;0rZ&}mWNLearT7SSd z4gAL^|63XUhZX)m=B!z%Bh=sNl=qmBekp0U`o0s(Iu+D#E1q~|)->Gk zgCdoL`|Eas&YNjm-X>t8(=Ku@zKJTAQ_ya;|92`Z_k0|AwYbV3yXL8n#Z=P<{k82>^3 zYZkq{X1h(FyJN?^3GIyS<4pFN>@%@refW#mAccldG81vdR^jdMRgpZA&-+Yn-dDfr zPGxyzBEubNp1Qo0ypsGz*GcCLk3hpa=tH#SCxbUnlKvs3?;GAlAYy)(8P@BL8NmmH zd#*QZqTZ#i7adga*T==v?VW0w?e;auxPLl{6I-AUo=vVE86`LM-z|gRK|`n1n}mw^8JnYs%h{>v`qszJmZ%F4+*X5M<|1rK)jU}?>k3gAo@k7>?$ z!ct?Au^ugZa&r7~t4SI4T0spNF;%bEOGdkd1Pn~XL@JFsv#9=r3X3onsXGM3LGc8d zepSH0a<#=oDs_5cgW12+7sr$;`JMO1s;YM<(jf>*B{Y+AtIvZ}tcYXF5rX-IaA(j7 zyoyeOXFGPUXB4Z|I(~HxkB6CS$H0QFNo;|*c##`RR;x5_ZFHCgw1e_LJK>7~*{X*# zNpVR^@+wN&J*b}{5)HSOtYvsS)*VXfpq~|$Y!%g-JOqbHiSnBb#%H*s#aOUPsZ+TO zUwLCS!V0&yw-ZXK)=NE}Zmk&+w{Yz4$uycRqq4dA4PwrBA<8geSQ9CeU&7x1s@Nk{ zKi}`*C@Gt1G>eQ)X_eCRe|rxHK)~)B9V{-g?mS&5=9CAZ(vY_re5jBLL)`A*tVHp- z6VcI;lXEZ809WsB=GN{Ib2jU3DuV9gac0op9qzB+)qV0~6dWQL9hkaobG_V*8k>p+ zVH@w(&-Qoy85Lmc`%9+tc@i9M(LJE>cbK~C(6^8r(JiDuPRPH0>||p|qn2KE)@i%1 z%fepJR%bD3pZZ&-EzYR=WU$f@t_sW8-~#zH7@HwbTR=_XRZXbW9Iq#DKSG0rd&H;o z7HsR05fK0`^(pEprtQb)8CR7ryDNpm77~gG_#6CqpE7yb$25xaa&h)Ojm$*DvKk`8 zU;XW*2??4pt2F7v`E6Eb*^Ruqtnhxaxa{U*c%@RVSF5kryAIA^PiUO?tuv`vj0Yom z*MI|E8S3m(Gka%Eza>g@@$v^t^fdgf3XlEM$8?EraU(nWQA##?8dujPkNPqqM&y`Y{#59fva(8z1(_EaRD3fkUejmQreuVw~ zj)n;Vz5i=blTbI9lD(5n}DWWYY>6$;31VY>vED?fff_GW_=ac~2_ zt^Z*8`ER2}`+1KIF5oOkX;n$X8-nq>21j!~K>Bt3E7P-w<11P7r6AnFruM)*K&403sm*! z#~LS6onj}JzdWwSjBkuJYj6ExWzt7iSo5DwqDAta^7Iuo9aP;d7v{X4f_AQU@lgza z=aBU4Ye!@!^wyey)xaz|q@fTJ^N_r3#y~Ci==Uku)c=kupf#GWE-7ydieR5kWeH;tfFPx3(`jbxCKK0q3_uY`Y##u>t(;)a^b` ztf;skN+yEnJ$g(`Repit%5gZ;{fhcyqoV6!w|nh&zHQZ;H!8RLNW{XxFK}B6xju8< z6Y@LfHDM`rN4^0|<9-f7f79k1WUDOXlwdW#l}%JS=Io^~O9m;kV*bro+<6d->YtD# ze1aTxQ3)_X(=A2`4|0hFPs$S-sZ=#-uZF{{dlK-d=YZv_*VmTc%O#N0v*$+Jl%4{+ zlw(uG;D38K8G-;lNxH%?aVJ!Cf;<1ZfLKBA*^e~$N8U`SaG-sw<*|?nQeVQkaEX%% z++jScYpL(EI&ax$}LVfWDNM2 z8QB!MbtOVD`Z%P3)-D-jOgz5g(0w92#vgO)u?B~qwWZngqjFG7h0kluDGdpe( zFi2u_d>;gH^KyZBt%2IioW0Qn)nv9yaFkzKB}+QcC2>14egAIs=BX;Vjqt-JXV~(3 z#nka$i?W+mAdx6hC5sMk%L_N$FBa`mB0E(qu!9pBO$hJnP-?8*tmS@XPGH2xMA1m) z34TdwY+$fO7F4=>R#UC0DM3$UTn)BrO&MG;3VaN0aA7a6s%CgDsd1(r6fJieGw7m- z_DWRhTFApdOzo>2pRFckh^%NeRyxF#R~X*(G6J=&RKbL(kH*mn4G3IneUY@DX3M4i zi3J!IgV{f_!0L65%wBEO(u9wC}aTC3>imiO7wbmmzolpI0`z6+6s z)qcZo?oOAxe->hq^7er&?tf(#8nSbor-Y|G>ZOksHYRh>xudMr9=q%-jhCX2mRQp7 z)B3O%o->XuoWeSU)5YCB9{4)+K|OYL9BX(?Rb2*(R!JIS)`oerR$-pA9(d@(;eVfl z&1BkyEM~H!;=C$xz9#cNUUUx62R?1aj7SNPnZFe^q-zdg#uXy;N!ge+Dc17#J{}(5 z+ziWI1g%V>J=8^P$8hNNeUtp1$b~Xh;I^-Ec@>;;f@hyiO+LwFTw2kUEKoD3cUl+A z_|}poP&4T-hIUfDPoai3&W_5LK~?F?pS(>ANV?IBxz}jzi$whI)81kd<~QKt6<`uiXl zk0bjLi^h_zH)SAIu4Xiho~^OU9A&vElyRI9Uz4MMw4jKvk^Ip%6C2&chj{IZA520- zns_y=(Z>LiH`g=2ryo=HKKFS9g@($6pO5t+ARkwHl3y((h1nD;r7?fC`$~JzFuALW zFP)JJ`-0|Mu%1n2qo4R2%zOt@$-1*SSrw92OiU)Fz&WP{OjH*4RaPr@8m*vTe=hK4 z=|a0V%%r9JU=4++sZyjcfIV9!qC-vv9hX0_of&sjA}u+0wLk>CHFXM(A$9eGPbJo|SQpstt0$2OH#K zu@a^ka$#N5v6|RV2_90-+dvX;8Jq^&@((}7SNp=PQg?!?95xiGY= zkwb854)8NR&PL$XaP)HUxLY zFes>d-#j}QsTnN2=D%Mw*AdfhxN@Jvm#o~2AXSU8=@sMPfvFwvIbm_1c&yVA$>?u# zwhJnN1iRgY(tkFMt>!HcEG+z#JNI#mU9+U{5`RmG!ust+Tf9J<@pIQPddd#!c9*Z|*#$?+KdOA>DtCwl%lj0jC8%102Z@T} zTDhwR;C98}7f1uF*nLoypg?Ay2_qV>e<+xuMfy&&^m4Btd;g2W49NEKBzxb0jR&(| z1W6m4$~)7ZoKKa1xemDsJX@({iyG=W|FsGY$wcvuJMcg()c;$&%hGXD-bqc2T2#>5 zwS7^cf$>RC1}ax}gv>q;f6gVf{_eXSO8b0E~XhR3;tv#afB4EL9tRl@F@wu@}t9Km!Bvo zDD=?RPfw+^m`q$`=G_ycqhSeT%=-G;R84)zc+o*4e>Q^^}9 za(~O6T;!ve5PxV){M=>RZi)f7V%8Iy-PYSn^xpa%H#vjspUN_z$zg^&qMd3Nxhv2| zC24)m>S-Lc>KlX`Jz#n17P(ZKo%D8=sel4CZ0x;w8A=x=!Y;_6FQGqV{*PaGd>4cJgk{EK0bzV*$y zxxMu0sfFA5>ExPV#B;&S`E%i{s34KLuPltH3OaXjQ~y+ue507wZ)x%)5w?;kaMyQ1 zgieOWR@RPc0%IXVrkuMcmRhFAgFP0h_L(x8}8t#Dw&a0xwU z+C-p00AKx4xOS(@%i#W>j;kzV99O)aLCPn#*eZx*pZC|vhfWuDA^I8{`E~>3f@agF zj*l%<+g`*FJ#x&+ytJYV6gU&P|CaGk|F@BKUyu=6E8*ek0jJY>#>?=IkD|5X1pN>y zxEeg)l7DMG?^nzl_JysA8|x=X8j0z9CssBZs<%Mt<-^yWr4=K%v|QOb zft!?twMEzJnhd=TA^%dbGE)+AvA2;y25jDwG?hs=`TjB+2Y(NV*c8GM%{7$~=TjPj zBqZdJ67wCasBE`-~>|I??FG$-!u z?frx^>D#^iuBLNyTnt>V^baR6R8mqva%!>*(?O7MH@Q4V>Ya?`WK(HL0s*;SIC z{fDE`Iht;E)ww-1`lwTGE(ReI7T=0e&CVRHPC$_UPM+ev)ejbS>^NCs+1j zHdz!n>tpG>XX>pAc^t?uWHDI)W-31x(lp!T3h_)j&I5;bkUlO`-exb=H9S`$*5|nB zC$GyV_+?M`!Z5f15jq^*L@I_Xo_w3;Q){oX?*$Q>)SH6ToBFIJfj1xL9{9biq405N zZCKd9MN_bk&q}+*sz%}N>qREALxhL=O*?vcJeCFR-hv7`vu9&~eQA;)hw(3CnN`mF zSDzJDPEAZ`9Jff5``@kW5RQw35dLtVXf$76YuMBLL$eYK$IV|#EAm7PD{@rsb@E=` za0}hug{&p+h6VW%BrbYBVaJkOD65pg16IFBGFaG&s4%2h)49CnMFtLxlJ#|sROY+x z^9!y*7|jV?o>=j@4v+3Ktlnb+w)-X&dGB@m3o25YO~v)@j>f^{dg~D;p}qtBX6Xob zIeDF`yM@vjEt^gMelUO* zc)T?{c+o2`^_>T}p)D2uac>-I#!W@Z%}^OuffuB|0I90^@(J-Q@75Naj@}RKfPEIW zF>6*3^_INLZky-dL@oswM&83CMt(6IkWA*sh1)|m)Rd*Y^}I6WU&aPPMP|{r130S9 z`rvRR>iBM$S|9}B9!D&Ge)UfA6>@#79yvoZ51T$ypvJzsQDND9mpI2b8xV>hKYCe9 z#TTE@(bL2sZF1$3dP!1yk-$k*&{?6W_Ne{+a&!>Y09=w381#_>leGtj`>4szJEllX z>V5yw)(~4z;7WX7>k=y>KG`TSsJ@dJJUo0f=A_?u#tKR{)7J(>bi;MhX^B6&o&?YN z$1TjmSe_G^zy|KnTG^O1F_h8#`2|OY-LkYPHPpnIp?={FdgJ>g5Q~zlHl|n#qK^j%1Gqmpz1L6J&24rD?g$~ z2H)l_z+l8VR%WT*juV|_*r=hYp@BhVg%mF0OAB%+Ed;u)eD;H4Hc(n4{Hc}dDir3W zi*ws7J5az>8x^8YrSqJo63((f%Ho-iVmH0G1)n`1tgV(v@>N|5Zv$G`m9zb`_vIiQ ztN6xzcB!EG$F42#SSmP%3;dUWvUK;sM&1slfk2NHB_e};M}*2!TVtW+70;xZ;YsQ+ z(9X*LXREo;xsAM&7G-W9{uSj%Q$_oAMs`1-n$RtyZ_%Yzu2vshgZE>T;P)H1# z;xh_H zOszxbHB;e9=|7;$56!k?JMWgq{l^#Ffs843LH0mq3ulW(C9)}F^HrA=agj&DTKtVr zV2a;4rj-#hD+?1-V;E7`#_9mn2}sCNF+2U@q}dpBgX9#|^z^tDvB!Iq^;{8=kGF_T zrk_{0Ek?SCm%(6C&qSi)^qSnpQ!bgJK44tIyZyfIg-W%IR$c5U&*fAidjn9%XQ;#l zM#9scf)T0$rCDH!^>ytexZ#P%z|(T!203TutM@RwPKFv1aOX}Y61$*~z}Q`5l#H5E z9~4`iV^3wEo2s0egdS?b+Bf-Eb_ymkg6kscZ@$UQz}*5-T;XRL`P;v!o_ zKp>Df!PJNZ0<97U#*c(n1IG(TlS6%0OutWo$@vA#;{FH|5HPqenFCi>L##~cr=g|gpPMq7zpS~u zeLjGfAAJ81m}}?9p}|QsF5BCSLfhv-PU(NTvL8$no~_ z{1zT61y1v%F#&8YV5|O(9|vdXMI-arUUqD@=g&l0|MUnpGz6>IGgwqMpR2mU=Z87X zh|HtmAwbSBFa#2K+o_{)Xe3Sp0YhML2*h_&OF#uwGLQV%jM-EM-S4lMT3X@=EH01C zqR1Zs>1x?1lG+ac@ z0PBYA`Ol~;tf&AYhDxJR5P%r57=#v#jQz$6i-EadT+nD23YG4n3E=$0uOZu$?PbZP z0@2lgfT0>ae99{W0=nfWJu&N2aVO z9S@U?U_f^L6%L(0 zmM0ypfzedQ&|ofruwe)-6bgo+W9cxeraBsd)S@C0DC~C@o{XP-zQe-*-2XS`|5PS_ zJ`B{}mEo_V51jmJ8#ER$aW9}L5NDqj0FCJ~!ARfE_uA)921mLt;n`SUKjn*@Qb?^$ zA!X~`++6unPtQ2DOArr9rk`YTwi#dxs$0um2j#M-T3XA@dMpo*i9+`iKSu1X>!}po zx~+A6)xNX2tHWx9LUx!N2qgzZmCgH2RjQPUOn_x?EB8*TM(nyxf4CevcR*L86Q6RY zMn(d3A0jge0yTkftE>&7Aou>Ydg2M7TgjV1Xx{4U;Y3h#gYfY!|B;&vn~k70;<}Kp zPI4j{Lv~H7eKuCS3Ik|Uw3wmX+7!D6*LrhUXKHnw$c8y!q&AbSWhwUZRwB|XKEF8ako?n0MdHI7H-1spJN+L?k zrXn?*prRahJ#HwBn6^r8U8DC&508RLjl@M8f4>t)Cz$rWC2cJ%MUT4jd1J=%?^5fG znsO1v#C~eTMUs>f^?f8s|0;HGX-YDE!iW1fWsLO#}-9NgYhIz93p_^Sif9#d$=3u|%)QEwXjR z4uRyJTDyj7Y0~e`)rf|^w}+eVZ7&GCqdwAlrv1YF7lq#@myUnr= zpICeO6fp%_p*L5i^0#{jxyVc{>ehG{ewQvIpy&|MVg2-_4WEmm(W05pU5;kR8FdRj zRMw_95KyTCBQvRRAi(t2t9)I=je+^lm>4c@ z56Mg^wJ(BXa}~S0XzcaZ!O7f{(?dZkN*WgA4x5cq$~$Z9U#*lLG#qs_Nij_Iw*#MbOh9?!>lq7x zWzyTFRa%<7l$|H^{IkE}btv@CsbE5m8;V`JeK7e5DLDqNTw%SgOhxA2)n2+nhkzM~ zEb}Ea8%i3SzH3GtQq8$h;QRii+@atrGjDh}53FT!O#KCt6sb%*_c^zqH)Y-<>6qH= z=&p=?e$~bf&remXnYvxxajL5*Dp+>Il=(Bs?ClY=p4~B$8xG(bs?({mrfnB4x)peP zFMk~wpm|K5d9c{+zV@U|U-PR*=dPoB>(*|5xR^*B@M}gq)7fdzbR}^o`FLg*)TDrq z^a;2#BAof$W6(V@P;FvnQ|{i)R!ch`zgO=2dbF=rc;)DjA3Uc0VT*=E3PZr%Vt&`i zeLOuhFXM}m86hyb-+25`jk_k>N@wA7_1gf>?Y5EPBf-38oxlbif7A9@u|TumT`-99f28pMo_rxSLn7*ykESeMqji2U@pXPtLr`zxhSOQzaxG%8gt~QnTtUD7V z42&EepCc$OBocEbt_5Yi#`?A67FH$qcr+@vh`&GwMRXPk+20=AdwcEl@W7LRfY004 zpIC}~+@Oci){{+tNbD9i5SBkg_;6qSTyl&^|6)#X!Sa%l`AyaCF!ii7mUe&YYTsQI zBnG`IMPcnu5uG-%|5~N}|E=zq9*x%fo~Q^OoxDg|Yq&-*c58izaOyt%BUG<9U#xWD zN&gpJYp3n;3X>Q_NJDi2$1!T-()es+^5T;`2M9ssrob34Z2{&Xb#5BYuXmnf3^WAn zNxU9jZ98xa8d`mvm>n@%@+u)mtYoJ9h}&^x+mbYy_2)A}iPE7Ll9Mkxs|*Kqmh(a? zV^mUczyj)-PE=fInYa<)%HC^p*CDCL9j;{`CH4(o%ZRr!}z_B#k-}Bh(;c zD{fXGRLYHZ(;#z5Rnm z#=}i7955(rU%u6cJDtazbHoA-+^#6zj5oe-jD?=HtrEHsh7{Po1ng1-w{>-^$8EIE6DL&a>97m>d@i0fH4JuPM6HtQ`K>#9|f z@gaew*u&ef^SObSs8)Y_@1nIYFcxd%(DcqqD z7*_dlIPJllC6^*Pq7bXm^^f`topE zv}<~P{%wBxTQ2PPz6bAJtPt7~8^qTcE;f2E<$87tJi;2s6}JVa{l@c>6R5|VnyH=< zS|7Za|3P=*#eF8Z@WYwmIc6;)d*N^py;LV(XR@KF##y9I^5m<#=Qp03>nxO+9%kg^ zzZ`Op34!CS{If?7XAFdK=Loup$%a;%Xi6eEBL*VS2Qwq%bH9#1Ly8|FZOpk}$Bb}! zH}ZLGK49_7hMev!ep$uPAji=P`4YS({qT)=V_E3gSGnczd{0r6@Lv3~*`P+|W8ubk zqk7iIw%&EzKVo%kQl-23{ZqtEA<>cH>XD!XXj9zeA&qEuRF`*G0W;<%vUlMub~zg! zs4FW!Rs7~{YZL34T={e$!dG>8WMaLV*|W5GovCnicMtliVEkb)=KijJ>Nb_`9Wv>; z_oZECrs3yGrtX_Y*5qc7J2#UX1HpwYK65x zq~B5QAG(me+tb`XTWld>cyqScP_~EiO#x|L**(}6^Hha{aUC# zvTB!Unyd|HzAm^bCJ^HG*6Ev)#f9WxgG zJvhpjmo^(GZ-$LLfI*F?7jEC>r*k~zX7*gj>NOR@#c7kwR0*;o#ZNz0&jgw04HeN3 zuuuDE)sNvijD1QSaifJDugp$Ub1^Ix6+@^bFu5{#mK6HzFu(9qEAw2}@;RZtqmIN+ zU2iT0ccaTQPgHf+BF?1kpI!Ayw1FTNrKLUd zh|UBysSvsFMlMbEu5Vs%wfw;TA&TgivO-J0PWj66GW^4dzZHEJOBQTd*CM_RS0$QY zVMA$KEvl3SiGJK1 literal 0 HcmV?d00001 diff --git a/store-for-business/images/product-and-service-icon.png b/store-for-business/images/product-and-service-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..c18d3c82660141d20bc295cda351f3f48160ee92 GIT binary patch literal 2750 zcmc&$YfKbZ7+q8v710`h&^9zo$HZ5ioyR_B%7Vy(5ZQ$&2CT&G?95%*!tSg)1G`|r zXWLj~jhb3Qaj7w(F>S#R(fY2JQOW|OgHT1&fIg) zcfRv|b7wbXm={D&d~2dYp@>XPF)mUl!Xn}P`1mn!+_GZl8u)L5D`lyuP()0VzhR1s z$~P2>*RI<$v!!fP8p8<=CCdv|p!7Oi5Uo(e#(P~Xmk%Vw3UcjE1KM@84n^#|0nO5w z2$L%jiAB7Q0;kA$4XB@&fphsbjv{`Dly5*2 zbVF-kUE^u;iL*9NQTfdDjErXP#De4+n7bh z;{=6M6b2EPSnQNoFXj}dhZu}N z%*a}WLdk$arGXS2t^r!77_DWc6#=I-JrvB9CrE;rC%i!0!16GKJU0-~Rp>78+rx7>C;$$~EkZ2m*XLpq z-GG$@ccvf|gbI}riijj8BD1pWPG0bcvt>O&I54sjFrctzdW@jpUnZ$x2o0l#mwJXE z0#Fm|0-lxF(SZftZYv%Q)MR2(oub4#Ign~Jpiq?3Zs!@GSJOO8(3p-@kr>OV35+GI z0MoDS^?1NNE8{2 zng--uRYvC`FF0w^07e2bO zzcS%LOSwGOnG4{NiKB8VxO}(-3W7gdtHD}l03|Of_K+jb$r>rX-@73Pb!am@{pIPvYX@Eoytsf9TJMIhrCDRd zD1~C|+EimgrnmA=Q{9K#v!ajRtCm&}Z{D84&zgUvuyLO>wellW+T_W&`F4tc9Ij;w z$8TAlFfVD`)VbT&e>}PVorL}M@!qjJEgk1$&vhT`Y8S)WdofG%kEgEjj?$G~5v`U| zx<|2BA&oK3{Plkrj#ZSb-q=&rextnVN>lui?$$rcEqruY`d1y}D$Jqb^46+|s=sPh znJv-2NjYteJ!jXv`{Y5>Mctu2lXCbOopDdNTT_*dbBgX?zsopPh?KGlW;wABz|a zUD3Vg)S0&B{~TDituMVL%}{@}1D>X}S*v<~+hX2Y8Z}4?XUpovYs)U`KB?PIT}|t} zP~|JFELk7E_tPC`*01b|I60ITrsTQP8MCRkwxMQo!;|P;OP94Ye_8Tc`FnlJJZ4Sx zv=}osiTi#rlhx+4B;Dx3!LNgoIMHCKK(^>Iyy4e>f?i=fjbmo+@if!6gu?z#8-^tr2- z+-|#kVN-sVuG)9vhrg4oE#bpju(9#`N7cTt=h%i8a+v$CXyIV`ci(!iR$Jn<@-NKP MB(rhP{14Xt3sM~a5C8xG literal 0 HcmV?d00001 diff --git a/store-for-business/images/products-and-services-photoshop.png b/store-for-business/images/products-and-services-photoshop.png new file mode 100644 index 0000000000000000000000000000000000000000..f20c074aebe107212f6859ea1ddaaee5375cc557 GIT binary patch literal 21088 zcmcG$byyrh(=R$m2qZuV79a!`3GOVmxVyXS;uhQ?1PSgC+#z^?EG|iK774)}f_rd> zyLs(=_dMr(_xtDaEW5KaHPzK!)iuAas@@0{C26c@B+mc<}bPy+xYEX46QbY#SP z!n^$Uhz|^B8C_QZc#ik?9|_3FA_9OXKWsE~+;kKbAm&aEET$GtW>6L{2WJE|00;LES)RP%9fpLCT}nPD+rCg&?Iimm-^@vpCe+M#jels_vttVeVsR&Sya>ECdqp zf*=?;K;2A1UJmw-t`ILl%75^MAddf@W~BuEgT&2FkW%z-gCHG66_B`-3lzk~!p&^X z4(0&y@UgISv+;3&nLr$D>^!V&Jgn@T%xvrsHf{(fALw6yl!(?`EG!{v5>o$a3-L{m z(%Q|<8N$ly>FLSh$;sm6V#UhN$H&LY#=*+L!Hl3_cJ+32GxcJ2bfx+?2MMUFxr>dn zn~jqr=r2c8GbeX9K}v+A|LlT;^MBYny8dgJ5Cg{QW$Mhz&cgP$OaCTRRQ&Hr9UT5c z?dm4!foSDl^8OzgyJ~nlLs`|Ju1@YQ=1@rwsG}RzzZzsR8yrfyI{N`%gMnb|lHFAa7ugo7Qz!NttR3t?mXC#fRB3M@?BO#f%Z zP8K$n-v1L)MMa3LqpO>#qd8PoLXZ+66pM|G1;mWg+>*lrYRb&ZW5L7B#|{QF^O>1L znc2({X2A(&HwSa@{zERr{Sr>*?tcgG@BRNYS_>z01dsoW55$s-lb4&F7s_mA&Ix8_ z<3VuawdAv8w%}&xV&mYk;9vvu{hOPziw$DlnA-nWu79PnKyc*XG_y3f%D-J<{p(!*sSwuxU046O_Fo*)zsV8a?eF1#+$!SBe;hN^5y9F8 z;dX(V_Gkc5kdT!S)$qzXXt(k*koMWqcX!zeiQPu~X^q2|V4`NCGBS{Kki8DJ^R>LJ z_MA4VnVvo|bZUvaJT|HkZ1C*OA&%?2h!(7q;#0wYn}E-WLD`1}$#WH2q}5)0fu))d zA`@|aCnU47A-nisrynUA~`{m^)_W6-J=)Tn>mV;M$>_`myJJ|EQLf1DU zT#uy`Om;yO?<-9+LL$S6BSEW^%$czxFk~b^1ih8%tm+L~V|oW{amKd95i8SxG=DX! z<4p)Eye_ST)k%7J#(5p(De;K)%BQGy&E@S2nV;{L;wVhP87$6x@H*7|PHMNMPyj&Z zm>aY5-L3e(Xn2w9$9JaFeHYicP)qgg;~<*Y4$0lZ!>fmZ5da8ctXoUp%DuQ2G`{)0 zMRf8TZtC*5^>}R2?_gtRC+N9 z{6YS3oa=Y1{IF&G*hB8w6ix2^W2@upZRc8{@ULb*3IJeIRH&H>JStxBN(?+nS@_Pi zdYP-N{0cv8ZY5hzz4ySE+~4oW68MIfdpoEj9bP08uGGeCV=~@9LQ57{Nws~rv*>cP z#9xWoYChVoEN~GYLj{<3T;@wVEekyZW;|{Ul?9GJk4rc$`fE3e(=%Lj-nSmz|E6mE z2>^p*Whq;j3`+r4BxYcT?eHfxnjo`H_H}krBbmg|W#)>!Zb! zeySHf_Fw>rpRf|XMb(XAWl6r}UcTwZQ%2Pv3gU{{U+~ykasVR%fGE$kalmD!yyj)B zjMcKq3vuMQnu;D9SD1(3#nsv>_tswc(r5E>C-}uJnU7ngFedOP^p@OzJt2M?)4FT% zg;0yqBhRAs{Cb1R45+=)E?niHC{w0vW2XE>4PrLqo0sCF|qCVw^I6n{VzT=45_xwVauv;|w{`1MvWmqEJemnH^ zZ0Mw_)iIs_;Uc088j>u)`Y;uEXZWG1fifef=`vOP_Ql=r#(=&EyL(TeDa&fkSheUY&&KCL1_1S3+Meu_A<%a_;16oMH&S|SF*Bzs=?{By2%4%?HeWdjUh^wup1vY$;c45skiPWD;p1|>?7V{YUAm194NDikb2~=S z$li-Of3WatzHrJ_%KbPQaGE}0SKI6Kz{HiKITJ&3f^V(^sdcKhxH}cTudy=nWzb5H z39{qbc$g;-IIVe@HugUXACH19tj{Yy9CecIynYx7eCQIsCGTARBKYmI+ zSGRWic>m(zB=DZXl*qnvD2Gh=YAx_?;BH}nT(DgkVKaA|oPn3!X&vw8*Op0KgQk}Q z{FiIhtfE#s9|nx?gqI&w9~~}5_%7Fv?i(!7!}cxwpbtac&rkvD!33)CCEh>5Rjya* zd-%NV=ESwO4c8t^ zEN|4p(GML6Dk#Xw+Yw&aA^Gz<(9Q{tEqpnD>E&aP+%_hW10sH2aetM5-)MjESen~z z0^M)(X?t8It4`05y(GCpo`o;_fKMQKK?CrdM`gmFMIRBU|OBSoWD_{G|O4#-B z>Tb2>A$<9_9|C!IH!#*ahyB80_yg;lP5_l+>> z!NH@4ioomE&Xd{tTjL)^z3D%H57{?V6Fi@-ckQ!40CuUQ0Vq$l&_(Z7z{c|3FP;tp zoPy_YjKs)NeS!rvF*WR~YB8SK%hJZ1E zFFHdNrK7!SleV?s4!831{GN@wLS+Hc202&xW@+KaCse-2_3YVuSbrTqmT7L%8;@~y z;^Jj-R_MmZ-0Y7$zXT{TfRWA-Yj@NS9%hh?UCgIxg=30_D76Ze?Zbk?Fo8CIWoi>a z_q$K;>seWb%Yx=yNAFpbyjMfh^yj1-u^N@LeSC#d+s|Wf{kdHp8Cg>_J-)zs_}WS5 zzz`y~1K+iHj9vYb>;U&Xv+R(wr2=RL!)sZ{o8ko4x87r67@45G8;YJLk7!=QKUz7 z3>-WU$r#`MveG7Ox#4~~bOoDUc54XT?MZ}h=zTKWJ|I>a$%VPc*^_@9%I4GSiLIha zh**0nInwH2J${y6=*qamc$c|j;GK8sNkaidhP}nA$4}N6Qc=-jlg9%iWxR>(Agggr z5=R2q0DKI3Tx5U_4H>W|g%z@E*W)=ZZ_@jS|tpTVK~EVGU_jX zP|KE=%O&EY%1C|+LKVfqG0_}n>x~ByW%Q!cMPmn&XJ3;z2UOUPtc|TYipEXli04QiD(dlW3%G zBtP)I-z{ayjI&YG;g(0r#Z!myG>wCa(NS3r$PKr#-Nh&mx@9xl%M0%%3|+peSG=nhm|-rUWW|K zE)rm)iDPG$=`gXQsT)5AP4-`Z$Zyc<1j*)CAI48-uxe5XemEfGH^$??MZ05BZ#EFK z{;>I;4e=OHyowAlQMRHrW|(+OEGCxlR&yLZIQ}gL3OZOZ5h{Wsqe-AhH4uY>XPvS6 zyusZwls>WuTxGDvj)oeNSm|?*#Du{h7Rf|~PM;`|!NABMDk7Om5TdXDLB#%Jc^DWA zIoM3cGYY0x#!xPWqmoL1WtvD$(ObtkfGu(05O>HAVwBKs+QNQimQxt^_5r<1l>0?S& zbgf-x+C){b;%YqkVPDMqp=Zf3v?>MAR*rcQ^8{j-ve zfXv~UrRnME$z`2%I8~RwuZMICznOd#zvt0lcdB;MwJ+Iy+lT6ECaZaF_b2V#Ba6E< z62oNMw}JPA5g()}GsC|a z9FflaBKVVLH@TFciYAi`4}|wy{`@?rKi|@J=vN)|5o>8Qv2x*ZHb z&w{yXaagY&sedM1KBsXYb;zFeb42$lu<_*=S zn$~#;x!?BT#BN zgUu28h@#R_+bMfkWk_p7jQb@Q&f)C(@T;F)p2C31oY@gcv+smP`Ry&5T$y!owGr>c zhe+qq70c2DxgN_xN&26*37RYCEq0-}-*tyY`26=J)-U=NVb`634^>MYikwM!!9^3h ze)`6q?Da$P0OchB#wBNm=|I)QyNhQ5uk8wK5jw#!4`r<4i(C5L`yl!mDT&!?3% zZ^NZ@K67xxr}~wQTa!3i9NVEqT8tUI`ffMT77a0r9d`2C+cRTH{6_(l7T-H$IvJ9= z&#~u*+`g1{X2_mj#HHKBtJ{iG`TpSMpvP&II@;g=@@W`pNP0Z_vflHEDJ^92@&KF7 z(w9wxxkQ@V>1fy1wN>!@lH&cF_7EL>x~b(!o{6cK&pcu83Vbvp(x9-X$|1 zG#Px0he|*+k8hA;?C>XklP(xwPF=gTo$xxX_e?}S2<<88bouUy59Ba^Y zB+Eh7D#rNg1M%QBP&8BgMJChXkTh%`gjRH-1$;rq}-B2>`WhBqfC?a*<>jyfMzf zTt-Cw#I{y|+Y8Rj-;jJ-kq+yY_zIa>rqzlJ)x-Mv`o%VdDA!4a%AL0QSAy>;b19jaDnVzJc z%0b;qBBU@=O-U@zv(^|=w6E`J(g=HpnJLo7u|aAHa`7SY1jw0a3oPYYWeI03)D$X6 zgz5v$7Fuk4)|L5Tc{n6$doc!-1J98alhoS3WW7Y=&sMKjO|7Mi=cuQV!95o{nc3M< zb7$5ZS@g=r0D#z-7{ft#B9!2R-JSe(If(YtBDuuMJo2dCr=hW8@-R)jT$;Vd3pi4xXpu}j*FpQy`*GHLFBZe&EB(s_@0uvPwzD7K z4fw21J-^O<8razwk$F)@z|_@v*8k&y%Bf}}5)~%OIf-)ulhn%&(*bWhLlbR}XFO(5 zd$yrxC*6I-R#u*>qt`t}h>h{F=-Q>3g8sooyJEhHLzor!>wAj2w;eT3LEq13H=5vP zaBbV~&K2)}qf@i8Ff%eNnXEi9`F2!2shOchv2HE$bndPg))XC|S56b_+9C+E{bhaR zwUTf<+IBKtRHhTRiMZNZU0ZAHOjyQf5=}*)qmF?gC$Y6;VZx^^ z2ZzqH{(EU7e^V}P?k^HbKf`=lIp9&=FIyZ8WYvaAzCOLj#7QeGbEZ~fwA2ha39XED zY+73X<&KC)>m)!i(Gx=e5r7RRo!nBE;027!a zLfAyQ_AF_`UvcH*QNi=s0X6(-MgxSqn8P4VRd!2jJyi=u6qZi%sX<9qvz<7opgMu1 zKtwMP~rwO@&i+ zD{Wf4h-_r2Ku7=@k!?mKMsPlH5Lh>XLX;h|YM?F*NiiX^0B5g+t+I>+B$F6~P9cK> zm}6076yWsYm;mT=)-EKUU~XX+*3n29`IU6kl1ZpjUcUKLU+@FdBe6H=!F8-a` zDkJQ}xHs@EqRg$MdQt)l`1U+9QdC@n05iT^6O{n?880;R$z>hBylYyQFQRAF@SHc zTuS@;o2Y!?#_0evn$+=?yLF_-{Y0xRH=Oi^WQ{4&t-ZRKXxz3IdTDo*tH@=P=+T_=dW^DF}TDDi6q^^O@eWGS<9-2^V6Z*N= z{?=Z8M+jv#IN3Gn%pQo3u%){#Na+VzVjMl0WpNSZVX&TvCoPv*pW0vAi*%(Xs)Hu-{C0?O-43S`ld@fSs(~f#0 zg0sJk-VnMkRjtCrBPYN*2(8W8+EdDH)mo#F#vwPiI#+yhy`H3uSX^dQPwy=*E|!nhXTP-R`Mj$pwSigLB`!lT=X4P|w`Dgz zL-iZ3+8axpPOB`=%4%hf*Tv5OiI)Lm-s9tRib)HABKId(B`rmi6ApN18K za}z;QpF!4~1A0oqmMAG@^h}b3Bzn3(+)<&ydi@iGcArA>X!27E);)>DMmCXOj^Mj8 z=KzXgKoHtMtfHWUkriJGo(v7HOOYCVV<+6cVA!&v#|->MWNJG$KF*9c1NBoL1QNWV zhS0hVhl^#H1<}Z>KaF3TDhWR%Y(T^glq!au8das_qq=+)uUU-UtB=m{L~+21oSDPq zkBMQ?K_Zeel0o^1JS}EWC1qj|H4+$;4qY?k z8C?UKj33NL!h^Wp8iWV?IG>{h;TSF_;L`v5`Mrp~awjIFn}_j0MC~ z+qk>K>g!LXV&FxEr|&=jKxCd#LLV87Q^)i=LL#I5^Yq^B#X*!*;i&MVA52eEQ!^DR zo4C2TxqE(7KPtp1tHzy4fSPZ>Qd3oBc+j%FZNNeY03q?zvcVt)nj|K8xMw`b+h(m8i=K@Ov8Vqr>F1i?3mRyc^)kxj&pLzV%J7;1bzG7 zcrvlDv@9N$)cfbFu#v=k`0zoSwGN5l>^etbB`x`P8hjUVP2J4eBR~x27QGe?9ww; zX~T`Zh5E$Py14zfLyzvRileM`btCfN39Xh2--#NP4Cvj}bUuzNm)eN` z{CtwZk_7J>{*2da(dsbzrtxU$Hfs6K(&k-Vd9ai?&g;qI4eN1}MndEC9DSTg&)0_R zNm-f3IQZXwg1>$4JslneOWI1A06?;<9Vcf!v?E7{C~&h`n|71X0uxBw+_Idi>$xNZ z;FBo^=lQK3i~iGOwONnO;gme(oSfs=&zA43=+iRNv(x@24J1Uh)-CMcHm9mC?L=uv zmQPL|_&Rd&sAE!i+XS$X80*Jbe^0Ztv>a@k5YSzhM>N<|PIkFZ*(9qyn;GU*rB$Rr zgNO038~B*8kKN#nTt)H7`FOTgH<*F7{@`CDc$LoTakKB#c{3zYxnGxAH@1;c_R8ep zR`?;@>F!qz2Vh~Tob@p>PRM6^RXaydW?E5-yX$$XRJq0=Gjq+?mP%HkTVw|g=iby? zvZg41D}L&AJ#J}(n`91Rhta53H~c`3Z(I_ei>L;LrSDK&4I^Q@rL(XR+s7f9x@`C zr!OhE?ti~7b>Lp>&^B&8IyFAdg9Z8>=k-`P4n%k!kWKPj1}Hd6WrGp|56f~Du7`JE z`&E|$3Zg1<>rTGw+8*b(G%tjV^HGc+e+dFX`@fHKI~pFNJY#b7SRQY9I*^e*=6bJ% z*U$pMF8^^2+Z0H2%UnIlZmuTa0KR9O=KyI%Cl6f7S-4A3_;5E|6L^gB#2Q~cU2JV8 zAH_3ZHB-NJUM;Frxu)#J;nLKdo4cbD%ro%V)fWK#Jg$e;;l}sHHM&?6`lELTufu66 zqZu+#;)HJ4M9zh8$B#6V`R(%{xu5;7AF9>+j0$US>bHz$JeFTQog)Q+ypzYRYm`gB zoxL}X@ZEGCBcGjf{kiv(idWTM4Q_?RHWCR8{glI zyvGJK^redgx6yzh>9x!-w9Ha($gQ<%PEO7xs&D3zp(h=}Zvekm_-&*pMC+K^*#wuD z1bq%4ba0`%YJhcwJ+Xc9!yW6RttHoO&e3#^?@d{MHEqY~eW#jMT$_i5t-DQx#S)jp zi=`Gg%~0T_Z(uIVF>GOX;rH*+fSb$Z$L}vJ)irD8gE4&eWL^LOPRWDE?fMTrThm`l zV|FG)K$#R@ZsNd0!}&+PXStaVfxNG93k@dz$#lsg;v?^exvY8)A}+0+$- zsW7Jj-;s6g2pe@2ps3Q}qjg!s$X{&k9f{0E5J|zr=F8*U8cXfY+r>`qfHmXBR!qbL zs@PuC>+|#r;A*h*Zu7;%*3qHM#8gGnm zdW>Tf$?r2eZ@%+94%fKytlgcdfeSIwx7VK^0nmLeC@Vj1(nZ{O#7RLXnr)>qSf{G;Zgg<88R+j9{^>vAACm3JW z7V+FY+LcJ94nYD;ZV!ArZtuy-K|O?c?!UM5$Fg5|T;5(BJzmH=efq#MKEPu{KdFyo zYR{Pdwj_j76x>z*) z?j!0*Bu{UVmmd#>_gkP%stV%TUie$a0ryuZp7wU!bN2QDEV?ckK?D6>bKJT=_a4uF zKXh<=x-d68OfTZto$wb5+2!dg-5=m{UVZ9AXJeH`HvM`?a&Y(kGT^Ik-$$LT*6>D$ zL+;01azXdK%^U;B(o*AM0ih)x0e|?Amf*=xNf99g3?xCuqfY<DsWXIWbRja!uM4Boauf#OJN>r0$X`HYr%Nl&7LHt84nSXXUMM z%Dy!HCjWU-i4k3x%jjHp+lr<_-uqfX4TOQiNKb5(Ju3H{FTD^w7!ZC_BN25XrlbY_ zGBE7;Y3>sDwG#>(=wbghLQ$J7Mhm z`iVgY&C!DYw2JYJP2(9RCgJbX9>|>gR=eQ=QbiXRL?Hg-h*jjIif`%oD*6+q=VP!D z8Ev6jd^rB)(xda29=F3iNJ}`=7opCta>VwYi?@H4<{Q`5`2s(~_(o~b+rYy5pVyv} z1$?tz36lzgmswL9VoLgmEfIbg_XWZ<>7n@W4|~5x~W6t?1do4)Zn4f^>dS z$b56~T||4CjhTQ@8yDMYzQp;p_)6$(dZdKVRsRPXDP{GWckhYJ306x-w0I-YXSOvo zXU81fGU?Do>k8T+@IcFM56UGr4vB(Fx8~WMuYYkP4pg*ImaeRcrBLX_{DG-)=9aWR z*6rr?Xx!ZHGe`%+RnH3=&)@)GiZ|QK6ac{tkF@utYz> z!p6HEWD2yK=~wO6m%p=;vKQJz%jb9RB*LT;ceoQuam7lb%HT~Z z+V@(6KN4|*>+*<+k%2GqN%vZED)9xTu{2&7Tuv^lzxE(w%^ceS@qbb1JpX@^Pzyy6 z*-94qSGCu;qgjG)4B?K>sWeBvhdb6Kce2l>ioQ>i6kq}>&{{oTPf@no#HLRhCd@Dr z*7bV3*X<%_e#H`b#hs-Lt+WVyw}6E%Tv%|kUA;^CS+fVVmEsfv)xIyJJ0I<@TBRPGKxfjz{BWi*EM z?I{qnQHE!=rL_wi{LZt?bb8K7tMm*x@XyMatC%d4G8wPi*PWHfgeja5*SO!=$ZJ0B z$EzgE(GP~|YipN+59vd9x<99H0w2ys709&NjRVhC4Il3oIED11x^Egn9BRmg_!{=A z=eaMDfJ(Hk^uoSyr*>^P6X~$Z3!yLKtM!4WJb_LZ7Yn|(EA^uS%Od5SuE}LgZ#jF? z$7zi+`@w@1jf>|$?S!vKX2d(=Gx+d!4tP(dMD4Mi4lFO<82kTzSS-aR8`9VnoIh$Z zue|JfdlvS?>J_$ZWFjN{fW__V&&v>)igxap1>vBb)pSvU^WOdh!@zHe>Vn9&9@84_ z*ZiJ`ABPnQy}ti;e6tfJ0$8V3;h%7?f>#(T3&9d}nH|j2!;N-~A z&rS=fwNhu(qHCE-E{4@rVjxn>nn|ZUEg6FZ2sqt2fA*5w2OT7Zo|H9gD_1?j(pQgf z7v;q~USARa>&~!?u&Rl4RLwFx`{gsuj?~d985T0bM8$={l~0>UxG(9w}i=v$^{Tt^+B1zqi@ z&&Wj=&})j*)Vup<%Ou&><##5@6YO$l2|@_C#*+ueS2g6}vyg9Qc2>%7>lsWPO|1KG z9^A}$OalwrPj(*+nq979?j!tkCqEls{dm>*Bt#yQmruXY2jlO+}GHN(KrFkP~qvMe&QBm!11Ze1aD#T1~yZO4nzgt3?bXB?VdRrTCQ@z^><DB?thO!Ah3O-tvvRq5ZZ>8%xi5 z=Ej2&TJ2L!iW#n^+tjg?4I)`pFg$=abLQr~0ZU^`3rSRumX?;+L)+T>*FoK9s>5?r zS{JTs>^ZT7scI9E=C9|+@T&WjZ8QsTFa`OA@kX*WA*XVuuS+hC^wKY>3Qd-l4@3JdG57M2O%DP!?H) z6t_I=9JZ9N8lGNEk82(xv*OxHJjL7Q-9LmZn)p(RNF2R8v`4anQzWt{y?I7@n%rC# zKPzX7P$^xBW|297v#-I!4Ga5>aWdKB&x~_n7;kJaqUxZmcH7LXYP;e42Wh2|;bEn> zk>4-knPhPQ*~E;s%Fv$4*lNWG6}xw!B^H*Gh13hd9+q5vTDA9r_m{rxg!8VrO{2{P*idKQR4hmDQ* z5!Dn}Q8ihraMcaMx~sLdhC8Jkxl{CGrcH@cC3Jgt5I*|mU=A1Ks|RfUs`F~L;~?Q7 zXP95Xc6BB_^gFZuq6a6Cr#jH#zyGzdkaZnomFmjh5QnS?d3T1sX8(EztM3)fmRabV z#^sUnNv4`7?ITHju^wl!C+ST!uIdbsy`62my0PoYX!x2tMB(GQ0QcVR-E0r+B(;j4 zbo2B&qCkUV1N*BQ4y|_T>yNv;_BAOCG_6(15!$F#J*$+mGPP)mm5EuB1hz$EVWGcl zIkuiR@G(gN&M=L9BB>9_={={<;n>Fg-`^KoFC4re){RDw{a%;1B2^4BDPdlz<|ZLU zgxwNl@Lvv?(5EmCDGtXRw9h*{pl^XB*V9r9P_1?%-9#jHbd1>f?;W30mHq60xzS?J z^D9aoK9w3YZ~6IIT{^|v7`C5!0-A{0^_zW(e3&%~_ zfgqRJ;Q2K);7^Jg@J?oz>DFXj5QCBDJJ{km_do{C1-(nUUf zK}P!eb)gM}B*rW{JS+?p5-PSD_jnZ-cyt+X1e-RJr%8GteD`I{S^|C6z5$Umu*u+N zV`Jmz-#hl&+}gUmy+r~LVKLl@EI!wg_V(;GUR8W6OUnlP*+ivML9$VK*7mOs^9>@P zc=!fG%HW?re+H6h9k}ObW@d_?fN#3@qUSh;z0b!+mtO$!k@BpHJ>>JSOEo8Vl)4tS zq#*+9LOc7Sqm!m0Bd(L3;%Iv!>*oNVRobVkoOUFL?M04e7R}!4>gqa-W5meFNRzZP z!haNkLm1VA@)X-kAjhoM8m9MBjA*S&zp-R|N3E>8&K^v{MTChe`n9pKZ|z;@@*^U7 z)Chy=R%r!;ymFSCUAJn@`+9qOu}OJFa6*=kJX;s7MzUtV+9XZdW@lxs^TtvS%saML z5o?^7HKS%*RQ&R52^i_BOUF3Q7XF?REgZ(y;5^~n-*Q~0jiH$UB_PIHm}KdPBB3}} zzYK~AxIAwvYj1A{f)L^jSg`fRNOf6ol$FmdEs@1YA(As#XehFYi0l-1CIVeDF*EBj z5r%iIx-@&`80+g-Oz*+raHY~D=xlX$wU>a>_*nv#G$_Q*&aS-NM}RCCR6be0=vbpw zQODGZ2$N3h)8XSwHZQ!`AT6sqo70Fbo>m0m1iQxaAKl+R%d@821{=U3`PN}A?~?jE zE286$UHozbwF}1(F-b)$_ly!m2v#!%gdPk+73FnVm+|%W_4MQcOx)d53g~i2OUrGU z2z`%xUU?qO5n!Udj**g=mp|2uepjngsZ}AAi;$z)fJJd!Le<{JW?;i5kvde2LQ)k+ zj0v8&UVP=X_h1Oo4vX7+8i6yo;bK&C*+sr_>YcO24}l166!>EzBFYBDZh@w6vSXSt zritC%SV;c&cyn|$9^$I*Wrb5UZXz`X#s2QDEzRxZ*q99>c|)BvU<+f2{C#zG)!i*| zng>D`zTZ*K_1P^mV7Yt`PaIe$U@nOr(S)`O+kiauQLG)?=RO$0GNt2M6)+tp4$RZ-!nlAf{$*2L z4IQWR+)`E5Uj%3IOH#a39c}ID z$?7q*KLSS{tu^;9M)+kK<$6`SkY+#omBz$jOW8!XW`oFr^;7TM(Qq6}bYu!tiXqE- zqZ*!UCI0LYTiC8kbG37t3q}Crj$6x^wVQ{BQHPqL_pcqdcB9Uj7&i!cF4k`ugl%t< zgB5S@0|1fn+Qw_++|j3iHJOu#C_>+ILMc@r6J)L+L_1433;Uydxw?$WtoT1=an_?+ zOp8C&XpCkCm+DmqoY*UrZKRu9Sw3%`(0>{S-+DoUiirN?3f&Ek3;WVsDrte5Gx%>d zUyn&V6m--k>MItFM>6=gjUPArnICN=?Q;y$rfI9cEmk!)Fp!0+rTLNTCQ{4Zttbb5 zeU3V4E%rBHk#<+5oh{$L_wBT;fDStx1&G%((osxvz~-0EvoEvfAU;jU1QF|2a#<)= zYYtBCc6W0W<;|MWfL7o=a^l=75-drHIMhf=r5vaZBDlGX)66tfiJ_qb5q`4u{8-cj zB0(JKU{O~wn8vzf=qNcvP`})gKt?|%>t{TA5Nf_E(=>1Dz^mufqAAaw^qRDph&>nZ zw{+Zl66vE`#U&YWUYVo6z^nNyAc>9}?E8>gp=ZJds z=&|l!_{LRQc3c^pGBFvIw&mp=^|9fvXqB0vp@dYfXA>dFJq;r0fJ&8?Zt8}2N3-NE zN{>!fIt~VvymgOSXhE4?^JmbP29hUWd7LJ-)tA2{ROPB!G$gv~+zPeE*z#p# z++siLFn=>%tDDe}<#SxhH)ueIkM(oKp1#M`uNx|Z|D>_+bu6!Zvx1Qg@nI}c^JxRA zZmMh~eQA>B$d6yB!(RqC-(?PCC$y!?@Kvts(HyzlTF4?JD%4XgxN?UHPxImjAbJ92 zUJCI9iCi9TUteRP0YMrAOr;FLiN>yTykRsE=gj_yJejhxe$^Br;{767l;GM0R`RpQ zM@a;gz}T=rQ48Bdc5Fhy3=1!yvD2Wxy7(EU{Fgiu=3+%l+WsxM6iC<4crG@XBx;Iu zogQ=o_<5!tZSwbtr9)#K9sAE9(nHD=J(%}D_SuhwC8YIxPNHgN?%yANuX0p<885+T@a@%^P7Jqx)S~DGw&R+Nh-+{BFsq!Y zBzG*9dk&wAb+Z8l<76S@%!Y*mp(~9s_O*Xh-==nz!qy5%Jn)QA13iCW)5UvVlh_WI zwSq)kEwTUzM$L#HLPrg%tJJH~dP0eAQ$H~C`-=n~ecCvS9PTiCVwj=QQ<1#{2fX8^ z()M{NE-f>R8$o^Jb|Y4J9bwc)SElLnYbGm~JSjw#f@M@F)J9hmWR=H`s`7+H&7#(T zfhriRUrC~d9{f`y2DNB**LhA?bG(u!s^=M|NI7V(JAr3WsOoaAl_cf2858k#G?9f+ z!kT#15=>*kzE(AQ3|dc}nx-*j!KI6dNnsl@KKOR60-3tW$A(MwfOH>DoA`tP`@+N4 z&q$=Cft%;&dU4N_-u*mq&!NM{mnIzj=U+n^c3@~0{CAG3C|`_lkv=30)+R?1i&bqf zwvDeA@z%c_e9mZ>AN!@}&lr_#zM9wV)k4F(rw;E4N(v;d{keR>Hy5d#ny45(!?${i zN+CEu7=GX@ipi)I+bd8gAUQ>qe?CcreVS8D1eH1ymh1)kqhSA0S+rRbiWvj7)%Uy0Klb2B02Z5b*OraBUi(;JOOD2 zQ+EW@Q}vCdnDwlG@z*#jgNHJ}gNo=+J{Wtq&xb-~i-@p6F-=8m7_R^u6469}3KjHj zj1jJb4~;eFQq(t&%gxDg90_OZrIy9U!s05v%lRUBWN?#D#q+w-TQDSX*qgpKSqNi7 z(z2k<$V3Ml0E8S80AMQgDXW9w3m4Mo07y0w8Tef8bFx0L$v`2Sh`{4G=vVgvIa|5j zn}`i}oE#i#Ra&mir0_aKMxF?hTl@8Qce>ZnwFPwKHcf2-HeprGbHz;w`2dhn;_l(G z#o;9y0`VnNDkCji!s7KFZr`2|@-`@HHzYvEM)@qQ^C>v@%VP5WDFp>Ssx# zdgvl4WpT~3Fx5?E9kg2iTb+g|D8suJH8M;Oa$rp=D(~dg7LR+!MRa?^5rb%%1J%6%eTCUe-O1=2)wtnM_1Y+`~;(atR$e2@RfTUnp` z^J(v#OP_Ycw#o`>S+F826O#x!Rl>*ea;d_EE$^fOx07{Q1aKW6Pa3xL7ee@`Q40>V z4-`1)8WozQ!J^|f9VH#fJ()t^-f zN>fCcdg}0oOI1}B0$plVAXW=GTjaj`wf?skl7(Z3hmIAKbC`8{6_Xjh!-y3FH7=s2 zf;(LSQNvNJW&=-U&ehtf$#$30oTS?|yf;U98fy3Uj+bsi-);nq#=$@k6C9>jb9$q>OHLt$tyGcXf49%c|kKZ)JN<*&-_BU{h0CAu7_+ z;mb#~=w?St?FbWlFJjUc`(~JFUc0I~4R7~85dr0**8irSp=?Bn1Bj`EFIihtQ{(-m zu#hSZE_gnnuHWeB;NaliY%pni{%5tz+}s?oYQyY8tV4O0HxNB0j4CcH{6H)~fc0n}?nh7*?ki!L?t$3&zG|GjP;fpxy| z*u2^Jm4R5>4Wm?5-9=L8jg6NHT+a=nN!Rx0KCqxI+vutL_VsuOK@KFKcf}1JdKD4D z7yJ#3YK7hDeqzlqvFLKLPTV>PVfUv=t;WY&6ZW<TTCyAUw~;YJj79e&FB1kO}k zQ@1j!&6qY9^ti$@DlGHyz8M;d%Lxpt^$udNOxt{ws9Q7bfA?qALiEp#{+Z^e@{blJ zwXzAunl=tDt|t`9)QE+rC^~y@MFnC}Y+S|m^0fgdE2yV%JS=ZM85 z2J?pdei76eWFh1A;vgk6;=MoF7qh2-IVz*@RNeccxl!!?Lr==2y3?Dw>#k?=*Q6!m zYqY0uU9^H@sy>H@l^=tNo#sjDQ+?QJBR&fgi1>rKLJdVO^_!LduCnW7bS5a)=Z>wbNC%9!YN!bamFkX2!7% zZpEp(kKIJ7F7ZV>pDQ9u-PnE#*{eo3AtFzI914TvRHXk5EUT2}Qs zTk-y~)h)vnk}{}>NG`VpK*2sMwYmD4IdUgzm;Dz(*^t^SI~=s|z7g%`sMPk@@5KB?0u91O(1rZHdoU)P<2j-eHFK?`T>3FNhLCdQ9N#od$(Zpgc zly+ftEaLRxkyDQb!PW+Lsnq|ciZhRfvhCye&{WD2r6FXUCn`iuNQlv6C(9^g?8_Lk zFIg*$YS3ei>|>2V_Gt)NLdG^RYBFOj#xjPGG|_uMz305=y#L;R-S;`yef_@I_xt%? zmkzVeE-MW-tA7AFpKW(V^bMfCh_h+?+V87NS4yt0&*+dFuW+|X&=;C|8m}1F+{?A& zD3x5{P|7lK1$~y8;&43{*&f%dr+%j?8z)zt6P?@XAGtB~oCOFAppkvQw8Ouol6Cg z#bn0XS~VF3kYeB2`@p}Bf#V2-u$hi%{_d`>E;z0(d~0!UFWf?q)yC?$c>5=Qo{)wb zxbgJ#t*n*YAsQhfif{2k(l2XU6smMbV_9Na({$c*F)QvKk}r32P;gD}E3y-C2LNK_ z?p@LTfMJ=Ph;}mSHGQ2(B;MDU-i~OptMMEy0G_JknhL(Nk@rx^%{Qwcqw=z|H`x2R zD)(Al$~x^1kfY}YXB>up;eA<$IM}BT(E0do)1{f6%8k*@4~~i+4;nv)z4~ob5jsY^ zzz`S98o@X!1(v8^(R}RXddu(CqrW&nFW@3BBXf0R38U?jpyZO(FP7%Y5LhX)?xKS| za?@7?Hi*G6VlNy6zqizj?SWM04ZCrVm_O#A%)2|kevoqg7N=^y_fe#5R(A^h2Oe1< zj-TUP0~#dGC1F!&DcsOVQ4Q$M@DpV zR(S|_pcIph!^iwDU?y5A6zSV;I*JIehSC^5*XLFAA3`zdKyjQ*&EDBNHo8?|mOroN zyR|qBGj*h2US`;P^MgR9<7RnkI{Y_{jY&g8L&Q;jxa_Thyu!j8Gw+i1;+FPy#m_@V zSI^Xz1nt9t7}l_s;6v>Wpy6~Mk3`>=69lXf#Vi>vcv`8y8jVLEp_p|Z3+LL4(lSh& z-+T?&pn}JT!#Vrz$Hc@02g4wVQt{n$8xs=*sAgQwVB?#-`nB!^dF0Ra}zzd9+stg7l?I4^jdf~K%`)1j4BXq>sQsOa@z#@KXw zWJP(oa6&*E{k>ZQ;=Ol2wkqYpGJi~H}AiE@)mvP>ouXa3Tz zW__mfhDdTmy8~gW#!H0MFh%gYlxcJuPg&Z^B)PZI*ZtL?h5!c%xRZ)m+)^1P=i<6% zX*97uVOPLam5K*&@gs3M{PA`*&)>V%3g89*B{KoTPUziHW;X>L5)~B%;GOa$Bfx}7 zqo8XL7skiOH8nMXLUM7=vIHsz05o&Tuez4?xzzisnOI~xlU?%w`6U^m1cVJw5Kqt2{4O0)ZAR+ZAP)x(g~v9J6vir{|<( zA{Ev@e%ymH)Ts|!p$hH|*aTid`daw-*M_1CVDM5P$eD+WEB_q#JlD3_Z~4iKjfwdE zxE|Pi#iFa`q5b42^!ev2XT`3@d|8KALrAgXxC#>@gdEbq0fwT|1l`F7pgSzx^J#4F(!8HoIl*FcA{*i zNoZ)8YzcQBJ#yuTcLp9$?@Bch)#o%!x2kW}e%;@_teEx@+-jzB1a6b%W{cN0Kw(`{ z@gilD$AmBf;B0gLi|B!4{C!^{1Ba-0HJ(APSeCwXwY?*B|6nhZxvNDJy?m)4W+8bm zkY7C8c4U_xdK77Q?e4^9d%Y5yXNpjv5^n_vI?AQiQlUA-y>p`%7<2dXcZ=9z_W;BJ z4y>{wbdvduJVY-;JsAqd8C^El^+9HWE2Sq+m*zKOlO&=;BCN%dwm(JjwI$-zoShfl zq7;yV0W9r8EM}T{U9&Wsv?1^AuXadJ#IhW6y;|Wkv~yU527B!e4ZMo4*%IGAaC0@_ z;y5AyK5~Xmzo|J13xPAv|q=b2hn~pJO)sMOIlXez#6x=rUV_$-Fv0n zNA;Op-EqKta|oC0k{f7N(>+!CM1-dTy%|?VI}YhFN^FP1s-rAQY%$8t)jDYtjZQNu z)vLV=n@@`6xVi!0d39?KNK)WwZqljQFJ2IV2~$N`Sst$dVgkqL9ZE|}3jikr+8B=G z|EHheH&Za|;adNR!C=s6_DaHQ494rKt3NZk1mBfkLF)4nxy_Z}byQt~|3Y|Jv4Zp< z*bo&mf|cYH)=5(3Qose#8*0-P?zZso@-l&)K#Xs6cz9=b7Z94}auZ~-vX)jyOH1EY zR3&0%bv3AsPC;J{`aA# zrfky0iyyPTy+uwj4&4g!&!L`)Zc1?L!=Qp7zcIG}XJ0;YxhYa0Cl)w)mOT-0Z?@Yp zdHeA!YeWx~BQ7GMet*LWdeSSQ)f*;qBo2qT@Fx~g22KuIT6|K~6g1SZrKt(f(w>dB zv67aR8Kkd)>iOK<+&FW_iuKaCenx3&)wU?8UajJj3K5|&dz-%SL6P247{KD;gTK zUy=U){2(VK;0`v^)I1q6zTNHZA5k5o+XHy+c+hc=DJpyYg1eBiyMfw%73Qyp=t-^s zstuImIzWx}`2}1COV36ujh*2dN-l)TMOd-RvDg~06!+T!rGfafz66dO-p~P3Mo($t z7xh`II?kDg(F5$aAe|tY^FhBXOC^A+66~SUBlEsBxuy_ea)M1F9(|&opMREq(2HvH zn{GX$%gO0<6!b7?Im?a%q>_6U)LHHoff`tiUG-}IQdPtumlf#NVbDTAVUwgZvJ4cB z-`-Jw>{AA>8+$pGY+%Lp;~@HY%Imu029||nM+snW2eoz8g*d&1-aDBL(T-MnS$Cw) zCg}c}FCn#uOCY7la6fhWA%orY2d+0*VfYNOj~vq&o!MY{{9C>gEvzWn5}ypQtVDQt zdS1-L(tTMhR_7e0xFpD;x}OL{L4f?m7Jp)XFDomXn{(#ENpk5w6O-a{87Jfj~SxAQ13|YGM#D z?)*uRc4QB`mBr3~`xdB}H3ejtPfy7rtm$vUw{9FP+|ZL2_@_VU$A)tj zDTK`==u7{EXyl8ggtXPkVbjyoo9%|@{I_>^RWq$B5oQG%m0merPByl-^;1j?ylc)M z%=u_@b5mP#HjwyXxv9&kj_L#WNa^o|c@k1nQvu=XO;xNmf?rPe^W(P0zJL=2d`>tf zgFmYm@(J19Aj1^$&44WO*+K)gn(q5xhjNGDOGm5Z{;U6)Q-n7AT3`zqZvvFg=TxX+ zYg)~ByGcXke2viUdsdS6X8CR}%#pZtVvuKR>@AV(c|@YV#H#$Q+CB;Tm79$>ev`c9>Pe^!h@nYV>0NX#arD z@oUE9X2~?~Jj~OcQ^vm(dP*__aR~Vgtlc@S6FA&Ek*dGSt8xs5-iO2=SRtiFzxVJS z2370bxgwsp+N{cV!ml&h`&Je~0j4Hm0p|A|=N12Ws`bIg%yI{_JnW+1j7HV&z(;}q z-isj-w#@KJs!b;y)>|3urhPNwY#(>tO15k6!?&JV40)op-fDkSs9f;FAUXu2Vxg@A zzUZZ4{Fx~x_a*WBWQu_5<*P)QPezQs9&hpJE&A8u@>zpB19H!w4J%51n3oK?I+zq6 zh#9Tp^9=N;?_F}o0)?`OH<{iNfTB(eC4?P(@k)z#exT2r5*nLv|1C#?RL%P2~s=WPtDQV->AR%p%oRR zR2G!QI{6-Q9z`yK92GySoz{g1fs*fWe*1ci(#N{pdASf2ONX zowIwNy}Ke6&D95XAotg$+ zvhfDm@rDD6@fO<0&q*99JD9piM5xP8Ux~-9cIV?Mf^075k}Q^Z#sH;PV4lR9dydAg z_x39xJt0q!TxIJ1y;dXWkl2EgNFd-iCpSQ%=TjsrR{GBxA2iczb-m`t!+O&5M~TGR zXI(#5JpYTz+tY|ZkHsJhv+*DdKn`C3MI;cR z*QhYZGi(Sa$|&Z<>ujMMo6m{N+l@**9w&HrK#O}Iym9|J&c#lAli7(O(gGs*TQCi& zl9Cb?Ep146csTjfWuXGO)58vC&$Ta`wo4&9)|3!RG;QT4PL;K12 zz)KLnnJKW3+IS%D!6xQDU~06JJcxSTp8Y~m7S4&S|r_}7Q%2y zPf$R1)(H5@iYWVO23}G!ft#Bf05-NIY!93AmQLt-DlhOihM>WsfULI!IWu4f2M7J` zCRF*&sW8MTL<6fUio?7oNX|Rn@M1sSh-{uufs1G7j)}*1%N@J6dOco@h2qcZEp_~M zttc*UBHiSR-5jYNhUVPxNQ{v-r`1tWAd6g1|43YJz^uv0Ub<2tqL&`YSZcPC zYC#|;Q;31alB)C1uJXKR5pPc`SsSUJ43|uurzu?^at67I6)Y zZrIl6X~SDV9UWe`a$#=jyhV$xjlbF5ikH$j@TVY8M8fi1w)aXJeQ===Cf^lo~TGd%aa=2@q?NOkoE92}e!nsuPwqd7LO zzZ}=OYIsNpkeL~EY-}tdF0N&xgDWFbhtA?XylvK18VL^3k zfO1CiPq%RHCvJEG1T;<)bn ztEO4+0&70$hp0jkKh(d|89*izqPxqQ5(*@aM<>L0TTpK5$lrNLx6 z3Xsj>gtb|&>9e__-E*c`YEvnd?`vpHF&yh!eL9$Tud}`nv$K-RWXEt`@iy={!jU!R zYa1FD81f$1Fak*s?Z$GX8t%T-GMe;@(rVrjE>#;ub20QT{d?vi*9UgG{p)Ydx9@o# zHh+4T>=LA=p-D_j8@(^s*)fa|B}qz3(mb%+PE=8aO}!Rw3me_d(6xp&n^abzsVPn( zp(@8N|D~LiyqveR5(1FIFs-om7|LLa{(Gh^34b6fmI7pcO534h&#UX_T|dZD z9C|60bC4(W6k<~_$@6@deLBfX$5z)@H&Np+_D_1XQ17cOP!BLSJ z7ZsBc>yZp3)*|N#YDEp2qMXHMe}}DyB~eW(S1Mz_F7Mq#Wvj40%cHFoORPZm(ai6L zymxh_b>ks21(Hz==gn$H-zc*sMUklDoy{z)q}##BEGz2GGKH4WB$CqqfX8WYA`^qo zYpO!Gc7=^n%fN#t-IjiL=9WZSRP)<{jOER34Ge>hM^)-0aR`>sW3J6nXj1 zn(#Y0Ik*D~ja3_Qu>H9TR_)Kq%(vzSz-qY^V|`A3oTHJHC*)l+H};)g=A2s+W|14h z1KH3M2{}I!6UZteT1HU322~3u9R}GcSa$YDmC77*-jBsRX?sz5eZr>0n~KBT z%XsMr|4dm5!evFZxSPM$=;Os@Ra6pszH~0hUe19tMHqE6cvSVa&i)^j82j!Cqsozy%GKK;|K4}z&Cy1_iC5+k)i#d zPE!0@gW<>-MnZFfH40Yd>ZBXN=+#R$ZcbC6BP|v7D|k@-HUr=TY?(Gc_$x0V&cxZj z6X_QuKIH0@5c}10qsucT%6jTMWy) zb(?lRPg^=3dj|d|A2)rHsz8DLTW0WZhlUz<(wFyAFm{a~K3P^v%uGbg1})%p4B~u_jQn?C~(Hw+d7N-^5a6Df07u-9G*g9jX=}zkEA)OF#2E8csTdHrhTlT(rUGUla9#$InK2o=5f})eAsy7x@B_T!uM$~ zhSX1cr&h1g53k=BH+jh7sPmg#vvb_`vcTzCYeOMo@I>Yp+QK%{3YKDZ8C9e;cq82U zw8h|meuJ;lX@#qu@`H3fo-n@Bi+$YoMvFG^M>MF?4_(&JjZZbmo`x^8d2yE(PCgZi zU&)v{hxdKIUuGY;(%6GnySaVs$(W0xh)$jf2G<8J_37e*=hdq=7@yMFVo1hSf#XQ? zk*FlWOw@+uE005aiCKT&FpdIb6%RLylJgc|v}I_q` zNgxEk6+zo#z)ZqQ@LY|UVOel?>WY@P;P>>TIxODf!$nE&U;vP^#V7Y`OuH?9CZiMp z1Twmern3x%wT7;eRn_w~bCBiK5U03v4~)Je>I2EWZgp$CD+tGi#EY13Qm_>jXG0=_ zxOJzh0wppCXK%c+>-B^%N^!UOz7O2R~#~fzo(JagUz(QNJb$I`o1yOBGwO@O< zTtyks9_)$w`A!)h`(B4Y+sIYyo}GcG-V$EB@C*z<<9oLc_%^5<5(b}XrCV} z3_Yx$WWN0aKiGj#P*4y=!<80GJ2i9SRO zyb)u$+W;?({vn}K=()6&;ppjBiX%xX)0jS1%^vNFDO72~<-sX1%I$;Xa44db6_xa&J36#kSu@Nq zg!JY%B}6rC$>jez3w!wy{~kn?w3x;@uLPiGj!xoFT8fBya=Dz5q_EpStYs?J%-7%D zU+DAH=trMv%8OZAS&RNK38|1?VwsjSsaE{H5S7(QDT1KZqEi<*SS=Rt&$~;oOhh72 zo{&qsUjGs5YiVHlf?j#8CDD4T8Uw78eQ^4~g${rv6{tTHe#7NqrQXEB(XsDzzO?;x zbaF-q$%>UJcBX;3!xP}FR?9h9QN0#a4PM{eapgxW6n6KG0Z=Ie5i9<^fx8qer{?EF z^~^fB)#)sR{v#-my%$@jMK8cVfX6`U9~xmy5vM)Ga0yT)KZJ~uU`Pqij8LQ(_x}2Z~dD2JVg=-Y2_|*2ZsPGNw1F8g0ZL`mm5M!9An7mOj0go zMa4gv#!fH}JR?A4m%t5JFBKr6VaQaFtBH^*tHbVmOLp9T_{ zN8rX7X9Py~kAz^bKE;DE2NJR@3~2zejS=70ix(OPwYB|ELe}$5&%gvM6!6KV#A-cd zW#tjT-oKel@I>D_z=wq!@y?9+%4;LImAx3-Db4h5 zbuoOMOCS8xQ}%M*MWL_99rEXJrnCNVCWBmGpNWOxu>-zMFMq&tYW3jN2Nyc&2S~%` zSi^s~N<)7D-kx?aLaDIc;nKE?_ZSl4ePr6@hZx$LbVeom54(>A*NsnUSWg*NCFG^nMT)%{Gv|hj|?YM80v3s zlUE)VHJ*&$m(#8{@NHKcV9(j@2chAQj0aM_bJp$4_&hvwS83m)@UPdQ==7|_ijAk3 z99H~%+8KCW*{y>%xYD%0`8g0Z%|F=TYOwoGXRtpXFEBh+8@G4fJYKhR8>`uF$EQyBi9kgE ziH^5SKXP<`4g$Si87^ituUxOn^YWNCO+IeJzo?^zxQ#Yo*cInv`oE&rmKqV_%(!;< z91mijotEad_|_7Qb&RjP3vWjWL3mw9vP77ngK~C-@Zx+EX8M4p@lrG!W7V{QDVvGC z6<<9Dhyc~HBn(qha~b=d(rW-n-?Ms+{8vcS9F|07aa2QHP)k~z)+^-D?WK#llCd_e z7h69fp-UR#ShZh5HRi81+RfskLodCMWgHTnI2y0!Y7YtSzlB_NGRRT082 zPBF~%-1Tb+i58&%rny;MJ%0Ksvt$vZW!ZwzugrnVmWD?SVR{W>YIe-z7hFr~ z=Fx-$A#Ked)RgU4#2^S12N@UylAV+jLx9b1!di0+&1;IiM(s+i9&5rS(A@n^4_R*PQ zKmQ&6ZQo*q`Nv@?)(_dZ`FWaP>L&}=9j5XS{_GiG0DOC!2%F2f#M*IrK^34B9WKr9 zE{3(U;F&xixFA@8X5H^ErYS2spBV8>WhqO7B;}<=7s}tAk^Jr9k;n?~WJMvsz+tJR z_fsG3*vFKkUpN>gJ1MMUj-;(^Hty(AfE!y>eJes)ge8MEOK6?X)J9hF2Rlhc9^vv3 z8_Z~Rs6q?aDLEp{?BHQZSEne7dICiCf{BQ}y7M_Q0B8rn6y0#CA`^JCZJq5qNtN(-b1+%_=MV}b@DaD%@Y~Me ziIYiJDoAcHuRiQbX|5q395ssZ`MmszjmG9Ep7x za>aCmR((AkwQ!X8Cf(?A{D`R(lfTi$&ZsW~HPj)BX`v^7R!d4ph?um)@%3{4_<<>w z{^PpiBC_a?whSGYjI5M|mjX&`h`ekeMX)-dAdF8(v#Ocb461#?($=P*JeN_o#|dn; z-DyxfjF^6+DjrglQYgp94in876_8sZ>O*p`sFRqL0_oTTP9COS6gBq;iMAIK5IOOp z4IMl~p(iFL=5vrFNLp%YE^f2o%1y8h7Le7ID8xeW9UPo{s+>pGX8#BMKQWOoZ$Cf3 z4Ff^@89b=fV}@{FMPj5-D%uf}FIi!Y$lkfMudll$JERW-(OUABd|)Xp4=GTEtPq z*74KKKR%C6N!Y+*s&eu9GB{4C57?auREH{`sQ?h-AU8_~$0RwZreGE78bJI0gdFu% z5tc@8Fy2qh%ti{O{jN2}RCH8W)&%h^&1UU_i_LXD^4@3CZ27c8ff zFl~Urs?iIKPlYZZ_1(cD3>VCez^e{i*HKbip6F>ta9VOqkRcyUJ}8K|H&(T7{0yi5 z`NI?vlIjals_6HFlbbO@XU=H=fDE|qVoC3mpXy%JbE}Us@aPGc(n=)LVY(D%e4PmB z=m$cyQ^GY(Ft`{pl?_e5g?Rb++Dn-$!#}rQqEug z`H?a>#KS;B*MnELc8KJ9kFAX-`)K#TQX}0UqT^-jIRnj5{3~4~sa?&iSiiER@L(WL zTtkWoB~tV)OYmGHGBJV*DYk4*dr{}Ps}lnPmf2&r5BP`*9{g38CV;g$SD-fy$H1m( z0?SBuzIl|}b+SW}j9OX6Y+-wKc4)a_1qX10C&!hXZN^eMFFBL)LpSR|SYYhkqDvc1+@2W)%?FEiiyI)rpE{rfg8+^W0TBLB*b+F2{}a9@LJvW{{4ICmrS7zbPUZOXB*w+y@Huw8wliog<1Imf-5)4M!SXmSt6zu zVlddTi<;X}aI29p4!U$T;F2q{-s^|T%I7v+)HVjS>10-}5rm5e%4@l%F7=wQyUki7#~4%3T`0B3pmx?6bBqc9ArIvwN@hep4J zzdhw4huv+8QEwM82PKk<>Up9rF5uc%eNWTx0ss5<@@JG((<7j^wpLWqSr;-3!#%;n zRrHNU#D(0zB|s3Kgh33@@@8uKdu|t7@cZZ^axR?^N1ivLQi3OGrrguOMrm*i(Vp5!r0gpH6LHl+R8oZBlRd$bd;?Vzk z`|bVTRs4D^4>2#+ZhrVZt{ZFvrlotmjq!8*F5Edn4DRp#jE?wi)7j3!*Sd6KmTiws z0Lj>J@iG)w7ovnsUgdBG-wTL7K&jjN3pp$venY5L??(WNSR%O3=wn0o4HStig@My2 z&$n9xh27iu)V=rR(*3){pApD>@mF=nsrJuM137Oz1tK;5mnTyA{GO<}1l)mK(J6-8 zLbvirMD`z03_VZum<;bQA|o+_B??=6yERkLOuL_c;W#G#L6e#4d!v_hX$`iBEj(?1 zKHA{7zL+fiG2f2Y3+pfvUTpGJ?=0OF_$G=gvt;O2NWmI~saoqsl2A=sj)a3Su6|ZM zZsRiDNYB1JHv0jS52q`-e0xs+lt>)5fEA`&jb0e?Rz|S9L3WIq3`O7ecp%H@UUBs9 zAokvznFePre{i;2cpd18A||IB8-6QodYcKf*vjbgS0|0-N=`P7pP=_C@OksKm3F9Q z8nfSS1Q)+$J&K&B)#RgsZpHbAGso8xk)6>?S6;b#X|7H}*U?(0=w-HVBc_Q%yiub3T5s}Oivi*lLFEwDl zA|RR<9zKC!JP_C^2#x}aKr%yDZjaEPky);iJJjZA@_heg@Nho_QfmcZO7S+ zbF389?++WjJ%Ns{440>4>XSkb(~T}XUzQvTCER_ESqd$Cv!Ittm&-5Bf0asm*0mg-Oun7+3awg?iWLQVpoPE8gAJ9 zwq!jU&9T{6gAznt;YOq*`}1m*4ig{WdNgmrdbCUPESDJr9KU_6h_}|4&qgHQs zf!X)GBDr001;nm%n2ZQX#28N0S!{EpFxw3izcr9Py!3j-ejh0m zhJ+XDnp->UErYc?32DDKkDRiD|5|1tjxh4JjAghPhUnqF3$ETMzFW-Y3|iu`AK2ZY z*I$V%RoLTm>yCM!W$5CB&-H79@n*L(nK12aLBioj)#307G$Zm4;?Pfz93k?@$6Kly zc!fVQ8e6|*d>tzHa2v+=X>;H|n)XMu@44kan#_z$Es+~2wZWP1xha@*2}j0@8|la<)}+J&s6Q$X(&EO3b$SCe0H%d9H9#ovR+EH| zzuMTca+0)Vp`uE`GaJ+p=BI!R0EK#`3E*)GHH6TefCWe=wV2?MM%FW zRFhW7O`YAkVmyJyBqm>xSm#&RuN!95x+u3^p&22FjW2rj#j+uw{$F!B3_Kt{8BHW5 z@W*`SC$IFQfx1yZ$2N5+zzbGHJ~|lt?Zc3Cc4kc|zNvGABMh~95chX>Hj!ug-{b>< zZ{QzbFj}jv@u(C6Q`ll8f)pAq(dm_5E9@7EljjZKmc;u@ZQmnM8_=`cW1Nt{3K^43 zeL~B_zba0n?8Ggh-bunY*FyBHLQgn@p5cDo5}MgA$+X#Dei@Djy}N?@0Hnp+Qp;o;Aa|&0AkQP&n@TT!^u`rGJqF z2`)6MREpEtkjG~LZPs!@M>rsQi+D7VX2*Su;H84OXq38c=Y3i!f69b*^u}onLw;&R zsT!TMH4o-+vANA@5t?fZg-U~ln1;A@zVGn{mgvWyz zo0j`ev#{JDB>lF(ch%;#fIc4Aw_=6*i(C^lSOY)o*Lnr=M(HzoS?StH(mz4ke+&i(weYqZ%3h=x05qB z+-gKMP6_^h7-pRAYhcHlQw8}oP{*4Lc@38z?v;zNLU1&hoWXz$oM3=*bZp!3$HgCA z3Skx-Y!%f3n(+WCPd;9j2@tt+Bmc$7K6NG(ocA%7%>0Egr%i83O zzjQ^w$DnWVSKhyRSYj7l>Xd9Rx!L#@#Qx}|qvMF5U$b5czC@pti=~b2>|Gx99Rj-X zxI2V42&N3gdm7)i6ctR^`tiDgND7R9D~)_ao2w9@pGlh*Q8f0m^$XC#1=iPF+Sf?f zs1W>JfKy%0NXTXoGs;Oj)#Z&uI+32}*-T!Orb;4DFf}ijvJ}kDhbp#4tf-{%v=`Sh zjVqOm6cQ^2ziQ&dv_8_%ayL>*K!96%BZ z9!o)*ME%7z&sMzg94FWDT-g>QFvp&b#P}TVt4LpeisWNT`E=x*)8rRL}OYWx`YE|wqYz2Y}c5YKw-g1Umh ziL%Ds@z?`DA8gsra;Kg0(%okgE*yL^Ul;e&*Ut(s8wHeAXz%*aCB7?N#4}|$EDYfB z#2biuBnUhZ)JbHtfDzTMg`wAH2`pov)PqK+rNCslO^eKkx!90!q+}f@>BPj%`IUb$ zqY$Ef53a`$E8rX~uIpb;B4wM%WU|IL{%sfoLQIHi|(hNIotm?gQ>LKfmhA z9aB}{$_Rs4IFBE5AK&m|Qu>qM4*I+cG0>-ddra}|A9m6FKX*Jhm%F~7WwRQE*^z#~ z&ARgYG{Z3|{${3?+1uF~cGtTtHKo~5(-l_Laxjn0jgm#d%9TK|&R1}i$Z}w(tJcq| z+3!yIt{Yj~8edt7&={CW*p01wdd|)c&Jj1&J9I1$W+S)eC-SXJJJKFn#wjeok$M{x zM0D(K8WDKd7=liHlaTlno}2i$M{kU62q$#;|1EIrOgD~R%*~P2+uIvH+nSuRHZ<&+ znM(~^_;nHNO=zZw!w-U(-gtgYhuEQpWZloRo2aJU39o?yPRv*3EDdi$t<>x!b}M_&NF}{{G#IncK#6Yc&C!86#7; z{2SsM#b)J>=yTYgan?Yt=3Ia#r`51VH0<%5iCv#8Kl8Q zf>7>Q&}7BrLeyieMKiF;w9ui}h@U-2OB4r3?TKTx;g9#l|qt=AVfE={K zVQxC7<|E>wgPSy=m2$wfm~r|^NfHuiB)pWV{<2CRpu5!Qo=2Ums6IVC-#Y6c2s=|A z>naH6(20bN5~-JN=jLD2DXG;UUWr%}%m{mL>$QZSNI!5r?IX5ga>D%H#go zL(cqraDHTddr3~=RyXA2+MW4mFJ5qh8NoA5zOSQ{RI!b+;@H3MjwEL0c^w_yW&p2G z!@R&cMBJFKtZdpz@uC!~LM*`*ULGVvKRP}RhsUCKu}xpw{-S{}Z5(Z8XeKf-+&nxw zQ!iNm@u3Y4?uY>I?}7iZu;4HuI}XJqn+@f1`|uw1m4RM{um3EHIXXDdteFU=Rd@L( zuQmPJSh;L~IymU1!{i7HgM2HZtI8;fQ$D)1aP8g928C@sc?|9qj)zUg!ty&;=acbl zY{qo6*=D)U{Yw9mAw<_~&XmB_|CFDAl$6vFv^NxY{2KLP3^3N)GZ4|EJCAE|DqyQn zpIHeE*ed*@dm1TAdD=qoDQeUhx&C>Poo#KL{7MomJwro7K1-=f*>f)ocXuwA8p$0) z?%+buU&X0Ga3C*n5A#)6)>D!SC?}V5c}mKVu*{sqj1d7kUlfv+mDT0EeM4@84k~f{ z_w3dNxLi7T2`2CdHJTV4Mum&nDEcvwhY79Z!Q4)>Xi2@Fg9#qhk+uswDDQ_7%X?)~ zrf*7$hOkbVu&o=@-J+VMu@!YR+fgd7;8(c5v@=Ob$(e5cSl=N%(3i7Tj2$ zf+!cnjH(xQZV81uj^Ge08^tZlal=Z$gpa@AcJ)=QU{3|g zq$lOyy@NXDpMUX=F9rv%pM8DE!FcWngc^f+rxW5w`H_ER)xeN9?O~X_5dSOMmRYif z^Sfuer((q-0PC-kmRjJN7pcqQqxd84g@++dQT?Lr=@#0M6C_+QGrBr9F^y7wo+eUr z0rnidJ~E`sUZ5EO>^;~HL6}D-(byU?w&-3|V;g;;@RR`tftm9QbS(>Fk91)cqVw;| z7aBo#cLy#ncUDuPtez4`A3yv&JUBNtH=msb?St2uV1A4gVgIL0hEbH%)d8$a{>;jO z|GN;3PP1}~>$f^eNsEwWJappP9*?6qec7WO#{80XIYEC;fMiAu*l6Rd+6QF|k{al) zirPvjaLwHunShx{=rAEkB5qvl7#i3g4sg*S*#_S(eBT`c2&P2`f$Y;4cM=BInoD$&Msq(P4M|ddK^tR$ zs-`MT-|l18lJGa{-+G79@5U&n=RrB?`fl+2+zpbXYJf+&YDxwEve za4nGA(bDvg)X_Xh#%lFdo2-p8ej;ADQ2uy#;Sf@rjoP#F4F}m}FyR3+f1UszF;)(|s{IXTXKU=CwSxWK34Vx!k$n86xgc z{@ib(Ki8rH@jjuCv(@Sfd3BY?12EEooDc8zKchoC)c zK@aF-d*fJtC(!sSP2<1P)Q&N-3ix^94*wr!IzZLG!H~^No+LgP*d^uF-bGJ7KYeMt zpzbT*cuqNBAcWVGBmf8wOEyEG;tqBbjfnc@YQeAXLOUqnCdu?JN}RKn7;Zs;;o+k} z*emb^G5UBts3LM*D)6>3-0fFz<%8w#@5K4>Fk-OQ!;m0|OzDaR6wt|yB@RDW!O#q2 zdVsTqUotN71!IReV|F3l;x)?|*%}{ed!X-W8Dl`N)y8MD%fkZ7!P|w*7Ht z@w8hgFj8d2!sxZ~`zij4Hz*bw-_hl<)MI}W8D)1rfb!!;;4Pi#&4{%|uQ$Tr;~K^1 zNI|nP_OReA?*gw}0RC=c~fg z>q-3kmx?nBodXEM}3O)@ar@A7svy?pn%`C!iCcfyX>-eY*b{>GophVqGjL!H&T z`gb75+Zq1Brvo=SwWhB}PY3k&w7lat2PR$ zLV^Do+@R(;q&IvoHvO5~&F_Ik-@q4AUW_`7>_gU$fr}aW0Bssdo zaP6F?{&gH<#qcTsYlJUK;QbxrVyzu1UM>TX=T#)_vtN|A)tK*yE$oR!SK*E0)kI&A3F@064#DL9vPQE zhR=l5hY`hhobjaug|^mZs<-~uvd5kuRf!A1WLxYpl6&qHw|9R7|9IFzCPVLL7VFHT zmb^OW5jv{Mvv<||`JK>+qcEmV! z905;+hWWH<3@6h!{DvSI1 zWsRiAX_!wAvRoi%Gyj9^;&w+e@45pw=My0KO{p+^!c@p)b)y=C&y8+EA=kIDtUs_2 zsd7Ch!@^|pf-alOh1Y1176{s>Fzz38Ok*@cEs@U+(=adtQN;ekE39i%h{KLm!*kmi z&DnhN*;Kz+YevlV?LfWieWgd@!5>KZcV0iaMaZ*MH4sz`U++Gm?$hE&%3kw{&hsy> z-|pBe29E`fVM;H?-px1E?4mth;1yqc=I-)0U#oXu^5T_6K-%3wA{y+c5}fx;p@si97`0f zan$p*0VAe27yP~PX%%QTLkkS zZsgyTaeWI`4139`27j_RuuMKXrWx(}In~2xw`&>thNlJkd9J#{aej{&vF{fj=VZr# z&~gVh+G`suB%Jek!a!eRXC{+1QP~V`M25+%$nt6ac+W-)qqicdG+sB>VR=8otKLV< z5{2wh&(V(^4(zd>cQs6l{xsOM=NsFJG-e#q7fmQ+Zp4IdMyNgqR564CgtsYv5#2oT z`w^RNT^~~vZJfD-QOPo(K5rSv>k!fwI)fMt8+VhBi&<9Od|WU%#9?*V}DUcQvN@F0Wx=vw4BD6RgC>p0^mymsZw! z&O=qLyMD8e!3#HPxp9Rj0b{mVlBpB$1GkvY9g5qZ;%wZc5(OaL=!3WIf1l@t#%A{ZvANan zi}8eaeE36byV~`gsJj=AlCNg>cX6%Jtu9_S_JbmiCs|23XyXlfDJLOj`o!5`oskG#1*gh% zc!rvb@x`%bbYnm>tpYMm|7H6AJYST(-&Dm^=KTIK`tarKZEa6WK&v@Azww}C*Po`? zp)adbi$V6!yn+fY`f^rSdf08^K3DYCkaJZiUVrX+#`YG9!u*Y1l7da^z?$%FO{5q> zi(f65zJlxeTP$xDpNvGuksjf=^U~wByDRT9M?;B>*>HSPP3VNtT~9u*4^_9tf@N2W zA&R=s3;+C4j?t&W@#9@G)z6Q~FMsy%x&EN|wsXSsqRrfK0#r4f7T-l%b?lNmSL%#8 z{gTa#c-|P}Zr;U=Tq~dZ_u1Am)#HfuM@})q3R|)SbguSZ#{Tx|qreI4A8^tCC~tz) z|E0X)-#p(yBg6@U;IIo=X8<53mK!pgr2^dzCxc)>z?KjIs3*vS0yCur33I|{M=fY+ zBD|KA@DRd;8=Indiv-s+Moa(?2j@}wo|h*8A*mxn)8vJ=T`6v0BI-Nex*kwgU5zme zb$f{m@l%cOrup8|x|>OFEmA~9-M;-yw6Pp^Qm?S_Q(na^q@~5Z=WIPgN73kFV&LD5 zF>}MCYlEta37_@3eQ&e0jttA!p(`U+SG&e_wB|+bB&%^FTa>k~zHgb}MMXs+SBRpW zxxaw*c9}9j3O<(;z*H7j@IW~7z{m)+nVA_30>S}03d*cwQFnM8k-*gSt2a%0prAht zK*WWLC_*IE(GxS=^BF$u`p4q-6>=SZO$^|wJ9KaxJE(Vx&q ztoTH|cs)}Im|R#KT?Z3EBWhTJ8HpnXla$m?qY|FfWGp&3mRMLV=0L?meJ7ccyz8I| zR$+~o_=8%wp$Rw8ihO3FRahfm0x+ISFH;zt7J@+kdG5C+>Kd6 zgiHc`lyJ+J?Dv=Cps0j|rSw~@>`ocRg*L6YhX(@no$JM^x@qyT@UM&rVKx~Jia=h0 zSiVwGV>cuxvUEvVRAM$Auyk7Ft=)WDJy^2mD%xPu1WGzq3*kQjeI?)W|H|v&{Hn{7 zTlTibS+e0))~#@9g2ou4EO6ldl_I=O^LR{Q_C4|g0L;Keqo+vTtB?$)iJ>n|>Zj|0 z$hnX_)=*}>=)uK8UF1Ze8iLb+)kRxyP@wI*ccIJB<_;AT$wn!8nQEwHY5tQ7i>#0W zRqUExd?jU7|2W%u!l#i2=op>r_|yLb+0K!?P1G|&1@x++GVamF!}Dl3t!MiD<={r$ zUc8{nJfe1%Sn&SV`dDS_j-D&JBwvm`4^Vl zjN&FbVVkh=^}szQJ-} z!gy8Vrp)|E!sjFrWd>^)$a5Fb7(w4qfO+bk6CYp z!O5tp;Sv)QsTdfJg(ZrW`vwMr?d!bnPL#+fC`c$Mpi&tO!Zc}*Byf`ms{a3-&Uw(` zAf;twp1IU$X(SUMprJ{Dz;E*M@}m$R#}#6+tnVr+q+cg;u5XbAbGkxCuA*?&kaVXEgndO=ev#DdOB)s($|E;r zBqU~iGw?SkI!xE_#I>nJA;KG*dk~Q>NeW-oumNNygbbcok`0Rzx0b0qv8hrg>Xij* zW<_cjt~%7qY6V2hC_X_#6f_ltg<~99kTQ-E^%*J6sLxiY3RWkPq$Nu!dVtIJlhg}= z{TF~w*o5Djou1J0Sq_7+lvq@>bU$Opnc5_dK)2Ld_;GqLN5|$(BrE5v1q}<=4!mJg z7<+Qp9WE%VQPxkd2Ik;Gwy^en_wa->6>z&=Yl!3>^fbaazXtYDFmi{dZ})t6FK`0R zwAWLHXTdaf4)NgZ6*xRR#IEbA9NZzyl5d=81|5wYI`^On49uq>6zXB{IEZ#k^u~UW zKe6@ten&eYP>LBRil{{F%wKY8p!!P z$=g+lFpD5talZH|Q|l%CVXbi36xNnwccukHv*!?qX0b4f^=!pn}8@F3Rk(lc;EZp{F-mR z`Eh2>IeV?W_S$D@X(%V<*}?b5wTEeRqD(1*n$gsUrC!Ou!}T9%q!j$TPQ!NFtUYLi z$-O`TT%+))=8l>GBCnSkQs@rMm)USMr?fqRWlF4tPOT&M~a?Hf%7QM+ck0nZnd8<|@G8OI$uQIHBxA{#zxoq(p;bK3ESXw|Mg5yhg$W;*hY zHZ`uhkqQ5p7oZgxir-_{CzP}~-p4TKNyX?N1}y}Om(feTZ@KxgneoVqqJX_7trA+Z zjT2+~mNC1@!5~7uo8k3_^@n|OaqR2<7d>ZAor3S2r1R95nePRDDXiYZUGDJ!&3sDD z4!%s@1H>%j7J&CTRz0fL`Hxm+9k#zhRT@V>?wFU3#4L4MYo%ysz00>pvopA#7!t*^ z1#2d=<7+npbVX8)idvIpo@Zyfg*Oy_YMDJh#(GDOSb9&yPsv>1KBZO_hls!~8=Qly zYihm*$!jh<1iyT%q_Z~B*Dj0ZZhfWb_#x;WeT_iYWp{^&U5zHXW+&v}(29qfzqWQE zgi)sUGr4WF|LZ;?S%-jn&^!1*gJCV(t0q2wLuyBk_&)u0V;&s6{{tqG=BNqKqO$*o z(cc_v9(+2uyE(76dX5&Zv&_3cldubP3Uj|Vbq|1yh=`|pBnlHWrTu%~`o zj1aWbI9AoRrf#+hUzg+G)2N5tT@3U2Za$pCq>H)_@Tj)>nH(TO4aizzlR!&f28X%Q zaeShN*_eptAS}Z6YLdrJ#UyH`5mi!MBC?noNgYG4wXO!cVyXAqL6)@B1DN{DA6&^p z)-L7Z#i;T~bBn>&O%>=*G4daS+tTH=qXkc@OjCx2Ry+Ezp4B?_E9%Gd%!W<;iUd}a z{s-#I*6KP5q_K}gI%Z~Sa;42>Iqij*Zm?m+Ok*$X?>F27h~7L^?_*c?{pY>azTvo! zrc1o^TgUdza4zjBT;uXbV0m&X@z$`Kzf z6DwPOBSv~3G(J*Kg}c&4)!!R5lfM_#S%}19xKz9@7<(f(7CIjAb@%=D-EWts$FQFa zW@`@XGsk;d3ZIHr`KSdl3g%n^{l8F71nG$=i-9ImQb>>?x;g!DT)vYx{}3p^o=Wc} znT|oGq0b1p5^!^C;by;6Fe@4?ISIa@Ozy=LkcP*AGte9Cpu~Y(pO`^$h$4iGD%K-V zp84eIQ@pFI0~Y$kfgmAR-K>PXw$qd#qvK~lzpXPUk)FURDDdIA4W~o`E02%Bjr9A- zrbagN4T`?4qPj^DO?d{A`C%X~=G1JO&@>_;hXF&hc=MhreoNKw`x19>ce8(e>o7I~ zug3G;45e@2u*Q>ku`Pp|#t?wKskxQdZB7Z21;GLLPDJho6Yg`>x6>0HLNoA^cM+9B zukBNttH~aZZ#OmNePE}*yu1Wt=cn`~(gxFWmXxp=S4$uP(l26iX+?={;Jhr0s%kQe zt0dn8t8qVvlynCK8fr9Ki>Ak#^t4A~ONl8vw zc(eQEY||^D966>C#e794TSj(fx)oiiE?9iRG@R^l-08dt6>8lP9^pcLi_sWP)5V`( z*FGfg4Z~8Bc89&CE}P$vjBNN0GsoEqa&dE?8NgmDeyq3apR2L3BF?G>pNhUpg_LS= zb8`>pEup`5_-p`d?d*cbd`T6>W6;T)NDA9Dg7L$L54YmNzt@U*DoWZvaVi>uP4{he zU0mMRL&8Pn^~fL57~W<#aJDvb@(^b{kNSA^tfYriOiEJ9aF@6B$F6Rr3&zqMv@pN~ zD3cxrh*>C9 zM5+Oxc$xKF^o!p_RrR~`b@1q;@VsC`E*W{xTUjcUHw+#vB@m$efVw)Da|1Pu(t_R$S#hy+XM_eL_}u$okD;J%w^OIw6u3 z{AJR@!-Ock$JPG|5mwjKUv_n8a%q>`0j9CI=ZUK3||^gd{A)uVT7EGJ=^d( zc~5+8f7S0UTz8#e+Fm)#j2JyNpfooGdZ{II;OYEXMOmwfE<1-fMCAL|eKfA^(~&2I z$7FRHgwPzS+UzGC(G8|K4>MoC`APdbWma-kapB2WGJ^R#lHH5-F?)E~FVa**MFPQI zweUT3bK1QkC%b;={2+s_2eDw;6B$S4`zv9ko6%*@ph#v;o8ub%r5b~;u;iNa%MmQh zKUZ~nkPW}(oF-`o){}wzwDL69y14A@h-j(s?@*tC__ClZzEc~+w?9O5uH0uSW=kaG zN=8bl3b5s|O~3a?R=B~^b7FHdgYai%DD(u(76UkC$dWKeu?ij~mbLP`G(B=H8+?09 z6mTO}s?gp$Ee{xv{UJNY>55NIf_DsFntD^BJV?iJb-svvgp^7-{uF_r3EWC|mp~Su zppv?hdVb`9Ck&%oY{+_7yQxB0gmkg|hfb>IeZM-T#~z8ltiNC+N!Sz73F`Ri{U z>`Ys{q4eYRSQ?v9qLUdpk~i3Rw*n%m$q-xXX=P$hCpmUEUxJr650~U!4s3EqlaK(o z2g!Jj=D9^^H{muQCBK{$5LiARpGo~pNwaRM?p@7M%P|X!wTS8jzs#JR;!)#wqM-~2 z-{(jPG}5&^vW?zw^5g7T_Ip!{L?tg?sj;?Uk^#!VCV2=X0CyU=T~h^*9>LQO`M2pl ztijgKwD`!5O8d(&wTLw|y`=7}HsG;BmrgadE~w7)@hyZrD{iQUhuH~KS9=zz@)-9+ zi$Gi!6*EPhFAHD6&I72idDN~RonbQ{O>L6P2K;~6y|nqfN(*HFMKm`Tzy6PP_G@~V z9fOWi5kC$uk4i*aZ{a6zU9T{a1CMILyO@Tj%|lY{Q+bnA4f@~Sy@$~}hBtw)36 z9K#GnHC53~h5Sm_;pL|A323<#Lerz>{8g6F?C#6P`kPnsvwj)zFL#Hi_pKI9bn2!K zJDer_w#!r}H%HxgEOVcpkbS8@VjsBtvB*on!RCx>42=7vu3vsooa0+i4met*E_?z< zI}3oS&fR%EUH%Y?3wvLL{qj0nr1LwT#ZJjFb~jQWNDx1s*t9|SP_Z*$l^sF03D;! z<5FJkW)sNi&!2m7zR)pvi>%AOE}s#h#ja*!rpC;)nV5BBiS8KTl6L`?kaX z>XLsoBvNd@qB=O3ZR%aV`oD0`SV`7FQk4EvWk}LN;G!aDTzTnWI@;_%cr3H1i#)VNxF5~&JTYMn(pK~QQDvB zVybhE{?GvxfFvDi_!kdTX8Om5>1m8s=_Ds~86I5*t-jM2*YJ<0=a#Z6^o!^7Rk6t% z#iWBjSlXxk<=al7TJWFPH`yBbQ)gx5#<>9o?F}_QdS$6gso{L+9Zo4@i92s&8MM@% z3<~sa;EX*vjEOt&borsrrOd`Q8o`fre8b6;G|h4Jz{wY+5nyF049BKx>3LrhdFEcj~)>;V*)lk1E*T@vnSE`cnWLnW=9T=6sfNztg?l%(JoNutU~A*=TRx(=*?c zp#NrN+=~By0dvJPLL+IPg&c0Dcu+|4i1fq$173>1avhKo#jSw{l+_K!R3{wAInAGO zvGa~DE?p}Z;N+a^zPUKRlF*s|4>LtWVPl-?>>(lJ`BO|?@bcJd6!mzGw6u4AZ^T=s zXMh+fRxiqc{Yi)x^VCdWnqbW7y@gni@%9KTOe0h?bYsJh`5KGRfX*6F zt*ZkpI?O_tBKLW!$Ty@fO4lB~NC$a)(jGp-RKdJVqTXb83Lk3wRnu}8ObDwhvqQ8X zv_H?H8xmDZoGE-Ytx}3CpR^14!Pf^p@pydP>zrGg2nwL^)M+afqdjS@a?9Iq>-s?X z5dWIs%m>v4&@(NqC+vn>(=v%IEy}MFJN!Sht?`Vmt`>T;?X0iA39Fh;8bAKj6>Pf{ zo8tDUlc<`jkV}PXYNA_188nGD0r_Uke9}BZ7Clt8AtuGvbps@x2$pU@VvszuJGCq} zt`W^JCSP;%q;s?3_jBMIOWfKda!J@}3Snz6?4{NZWHqH%oUn5RRJJnGXR)b!Dbmk+ zAgSZ}29z-NRtX+GTsk^_WfcRPzg>k~cDdKro5I=!K~&DAblR)+c)XEza2{xBQz?^k z4A5S!FI zP4zf`Zg2?0g0kQL8Tlz@b&|dguCeVDH;hXWHN}#-H99tWg4ORbnBy}o^Qw_J#MeMC zZmR?ynx8mK%Mq}xEDrnr%GV03(^Cv`nh)4lQJI=gl0q;&!b!*|vw!pY zt1t5$0m|a&lDBFP{oq7I*w_~VRo=Yp9Ky4)4?DG{CRk9+Cp399`(G~e%MsYturBxIws@kmt#zY2bBo;Sp}}@Z%E~+) zaMFe}&#gQO+37Q6Qi}8aQ8Xqb7OIf;cgLE?#?Y9FH$Q9w4Y6W@a|eW^7)GW743BI` z#Y5rzO|cqt>-;-$!P~d8rc2cPMOB|>iU+HglKjPbdmOqSe^#?G{HLpsstk}wV+^M6 z`P#HPPzhi9e4f^HeZ}X~9p^S_No<$y;psX?g=tUzr*J0mDU27{Fc=PXEAo09> zz%KrY5478|`}_U*^X^cl1gREDI4a^+XjB7aU{C!hMGZdDS$)h*v%$`rO7ZK}rl~Q1 z$?rP|Q34_}KQb41Z$W4wz8&iLm5-b>nmE#EQfT6p$l+1KWHdYiuLG&HpFh&5J8 z;LDKsx??=4ATlwWKTJM1oHb(G$CBj_7A_0h#Q$K%2@d|;(WPCRr5 z{(uo@9_Qwaed(%DFVD*Xh#`1K(WZa72YK@O-LQQ-z*k6K@95tz?FT_*G~Kyx+7IFo zIkt{ZVgqpXANl*=1d@3 z;}YiRr{%EL*?3~$NK>lw2OBNtOl zr^4RzJHn2ioly4AQ;%4*;x;n|Q2{GSh*hoH5cVXV3MPqL-_#9M?nk(tKQ8F-qguPT zcw3W5R$PAcxnoyWpCMseV%P}b(@l%}Oh+;V6JBJezCVJB#_1vK!Fo=&p`;%FNqCnY z18|aI1rwohpGU?S48=eGCN(2B(bac+%Bj|A|3+Kr2@ywmrbs}9N1~Qr^Tj^9h4|4F z4ZIYJvG8Yn(e`vK!wRF+Z|V*cWZ&mBd)x}mGoG1DvPRtSI5>2uR4R)5q&mmzSnC~O zULFB2=W1mm?};O&w+@Y1@U`zu!)=FS(U~*}x8Qxf|)QaQOK)2<(zaf&^zcumsbw?1a+$RCCI*$F8wVC!xDSw0a mFa8U|-t@=l2?m#4{UP`MeWGl37S2aTy7YDKAnV}{QU3$QmN0z) literal 0 HcmV?d00001 diff --git a/store-for-business/release-history-microsoft-store-business-education.md b/store-for-business/release-history-microsoft-store-business-education.md index 4d706c69f6..705b6a6199 100644 --- a/store-for-business/release-history-microsoft-store-business-education.md +++ b/store-for-business/release-history-microsoft-store-business-education.md @@ -6,7 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: store author: TrudyHa -ms.date: 1/8/2018 +ms.date: 2/8/2018 --- # Microsoft Store for Business and Education release history @@ -15,6 +15,10 @@ Microsoft Store for Business and Education regularly releases new and improved f Looking for info on the latest release? Check out [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) +## December 2017 + +- Bug fixes and permformance improvements. + ## November 2017 - **Export list of Minecraft: Education Edition users** - Admins and teachers can now export a list of users who have Minecraft: Education Edition licenses assigned to them. Click **Export users**, and Store for Education creates an Excel spreadsheet for you, and saves it as a .csv file. diff --git a/store-for-business/whats-new-microsoft-store-business-education.md b/store-for-business/whats-new-microsoft-store-business-education.md index 80d4cc6d6c..2afacd4204 100644 --- a/store-for-business/whats-new-microsoft-store-business-education.md +++ b/store-for-business/whats-new-microsoft-store-business-education.md @@ -6,7 +6,7 @@ ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: store author: TrudyHa -ms.date: 1/8/2018 +ms.date: 2/8/2018 --- # What's new in Microsoft Store for Business and Education @@ -15,9 +15,16 @@ Microsoft Store for Business and Education regularly releases new and improved f ## Latest updates for Store for Business and Education -**December 2017** +**January 2018** + +| | | +|--------------------------------------|---------------------------------| +| ![Microsoft Store for Business Products & services page.](images/product-and-service-icon.png) |**One place for apps, software, and subscriptions**

The new **Products & services** page in Microsoft Store for Business and Education gives customers a single place to manage all products and services. This includes Apps, Software, and Subscriptions that your organization acquired or manages through Microsoft Store for Business. This change centralizes these products, but the platform changes also improve overall performance.

**Applies to**:
Microsoft Store for Business
Microsoft Store for Education | +| ![Upgrade Office 365 trial subscription.](images/office-logo.png) |**Upgrade Office 365 trial subscription**

Customers with Office 365 trials can now transition their trial to a paid subscription in Microsoft Store for Business. This works for trials you acquired from Microsoft Store for Business, or Office Admin Portal.

**Applies to**:
Microsoft Store for Business
Microsoft Store for Education | +| ![Image showing Settings icon.](images/mpsa-link.png) |**Supporting Microsoft Product and Services Agreement customers**

If you are purchasing under the Microsoft Products and Services Agreement (MPSA), you can use Microsoft Store for Business. Here you will find access to Products & Services purchased, Downloads & Keys, Software Assurance benefits, Order history, and Agreement details. Also, we added the ability to associate your purchasing account to your tenant.

**Applies to**:
Microsoft Store for Business
Microsoft Store for Education | +| ![Image showing Settings icon.](images/invite-people.png) |**Microsoft Product and Services Agreement customers can invite people to take roles**

MPSA admins can invite people to take Microsoft Store for Business roles even if the person is not in their tenant. You provide an email address when you assign the role, and we'll add the account to your tenant and assign the role.

**Applies to**:
Microsoft Store for Business
Microsoft Store for Education | + -We’ve been working on bug fixes and performance improvements to provide you a better experience. Stay tuned for new features! - > [!div class="step-by-step"] [<< Use School Data Sync to import student data](use-school-data-sync.md) [Use Intune for Education to manage groups, apps, and settings >>](use-intune-for-education.md) diff --git a/education/get-started/enable-microsoft-teams.md b/education/get-started/enable-microsoft-teams.md index 09326b1e2e..6c74c506b0 100644 --- a/education/get-started/enable-microsoft-teams.md +++ b/education/get-started/enable-microsoft-teams.md @@ -46,10 +46,6 @@ To get started, IT administrators need to use the Office 365 Admin Center to ena You can find more info about how to control which users in your school can use Microsoft Teams, turn off group creation, configure tenant-level settings, and more by reading the *Guide for IT admins* getting started guide in the Meet Microsoft Teams page. - > [!div class="step-by-step"] [<< Use School Data Sync to import student data](use-school-data-sync.md) diff --git a/education/get-started/finish-setup-and-other-tasks.md b/education/get-started/finish-setup-and-other-tasks.md index 7dd5513764..55a52faa11 100644 --- a/education/get-started/finish-setup-and-other-tasks.md +++ b/education/get-started/finish-setup-and-other-tasks.md @@ -26,7 +26,7 @@ Once you've set up your Windows 10 education device, it's worth checking to veri You can watch the video to see how this is done, or follow the step-by-step guide.
- +> [!VIDEO https://www.youtube.com/embed/nhQ_4okWFmk] You can watch the descriptive audio version here: [Microsoft Education: Verify Windows 10 education devices are Azure AD joined and managed (DA)](https://www.youtube.com/watch?v=_hVIxaEsu2Y) @@ -78,7 +78,7 @@ You can follow the rest of the walkthrough to finish setup and complete other ta You can watch the following video to see how to update group settings in Intune for Education and configure Azure settings. Or, you can follow the step-by-step guide for these tasks and the other tasks listed above. - +> [!VIDEO https://www.youtube.com/embed/M6-k73dZOfw] You can watch the descriptive audio version here: [Microsoft Education: Update settings, apps, and Azure AD settings for your education tenant (DA)](https://www.youtube.com/watch?v=-Rz3VcDXbzs) diff --git a/education/get-started/set-up-office365-edu-tenant.md b/education/get-started/set-up-office365-edu-tenant.md index 3fcbd5064e..59d939c2eb 100644 --- a/education/get-started/set-up-office365-edu-tenant.md +++ b/education/get-started/set-up-office365-edu-tenant.md @@ -23,7 +23,7 @@ Schools can use Office 365 to save time and be more productive. Built with power Don't have an Office 365 for Education verified tenant or just starting out? Follow these steps to set up an Office 365 for Education tenant. [Learn more about Office 365 for Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans).
- +> [!VIDEO https://www.youtube.com/embed/X7bscA-knaY] You can watch the descriptive audio version here: [Microsoft Education: Set up an Office 365 Education tenant (DA)](https://www.youtube.com/watch?v=d5tQ8KoB3ic) diff --git a/education/get-started/set-up-windows-education-devices.md b/education/get-started/set-up-windows-education-devices.md index 3398db7d3f..edb76d6448 100644 --- a/education/get-started/set-up-windows-education-devices.md +++ b/education/get-started/set-up-windows-education-devices.md @@ -19,7 +19,7 @@ If you are setting up a Windows 10 device invidividually, and network bandwidth You can watch the video to see how this is done, or follow the step-by-step guide.
- +> [!VIDEO https://www.youtube.com/embed/nADWqBYvqXk] You can watch the descriptive audio version here: [Microsoft Education: Set up a new Windows 10 education devices using the Windows setup experience (DA)](https://www.youtube.com/watch?v=_UtS1Cz2Pno) diff --git a/education/get-started/use-intune-for-education.md b/education/get-started/use-intune-for-education.md index 5541526c47..646d7b8e16 100644 --- a/education/get-started/use-intune-for-education.md +++ b/education/get-started/use-intune-for-education.md @@ -41,7 +41,7 @@ Note that for verified education tenants, Microsoft automatically provisions you You can watch the video to see how this is done, or follow the step-by-step guide.
- +> [!VIDEO https://www.youtube.com/embed/c3BLoZZw3TQ] You can watch the descriptive audio version here: [Microsoft Education: Use Intune for Education to manage groups, apps, and settings (DA)](https://youtu.be/Tejxfc4V7cQ) diff --git a/education/get-started/use-school-data-sync.md b/education/get-started/use-school-data-sync.md index a370bb71b8..c5392b41b9 100644 --- a/education/get-started/use-school-data-sync.md +++ b/education/get-started/use-school-data-sync.md @@ -25,7 +25,7 @@ Follow all the steps in this section to use SDS and sample CSV files in a trial You can watch the video to see how this is done, or follow the step-by-step guide.
-
+> [!VIDEO https://www.youtube.com/embed/ehSU8jr8T24] You can watch the descriptive audio version here: [Microsoft Education: Use School Data Sync to import student data (DA)](https://www.youtube.com/watch?v=l4b086IMtvc) diff --git a/education/windows/use-set-up-school-pcs-app.md b/education/windows/use-set-up-school-pcs-app.md index 21ac36db3c..7cd7884f9b 100644 --- a/education/windows/use-set-up-school-pcs-app.md +++ b/education/windows/use-set-up-school-pcs-app.md @@ -42,7 +42,7 @@ Set up School PCs makes it easy to set up Windows 10 PCs with Microsoft's recomm You can watch the video to see how to use the Set up School PCs app, or follow the step-by-step guide.
- +> [!VIDEO https://www.youtube.com/embed/2ZLup_-PhkA] You can watch the descriptive audio version here: [Microsoft Education: Use the Set up School PCs app (DA)](https://www.youtube.com/watch?v=qqe_T2LkGsI) @@ -89,9 +89,19 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the 5. Click **Just remove my files**. 6. Click **Reset**. +* **Use an NTFS-formatted USB key** + + If you're planning to install several apps, the Set up School PCs package may exceed 4 GB. Check if your USB drive format is FAT32. If it is, you won't be able to save more than 4 GB of data on the drive. To work around this, reformat the USB drive to use the NTFS format. To do this: + + 1. Insert the USB key into your computer. + 2. Go to the Start menu and type **This PC** and then select the **This PC (Desktop app)** from the search results. + 3. In the **Devices and drivers** section, find the USB drive, select and then right-click to bring up options. + 4. Select **Format** from the list to bring up the **Format ** window. + 5. Set **File system** to **NTFS** and then click **Start** to format the drive. + * **Use more than one USB key** - If you are setting up multiple PCs, you can set them up at the same time. Just save the provisioning package to another USB drive. Create two keys and you can run it on two PCs at once, and so on. + If you are setting up multiple PCs, you can set them up at the same time. Just save the provisioning package to another USB drive. Create two keys and you can run it on two PCs at once, and so on. * **Keep it clean** @@ -112,7 +122,8 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the - You must have the Microsoft Store for Education configured. - You must be a global admin in the Microsoft Store for Education. - It's best if you sign up for and [configure Intune for Education](../get-started/use-intune-for-education.md) before using the Set up School PCs app. -- Have a USB drive, 1 GB or larger, to save the provisioning package. We recommend an 8 GB or larger USB drive if you're installing Office. +- Have a USB drive, 1 GB or larger, to save the provisioning package. We recommend an 8 GB or larger USB drive if you're installing Office. +- Check the default file system format for your USB drive. You may need to set this to NTFS to save a provisioning package that's 4 GB or larger. ## Set up School PCs step-by-step From 5636af8787713bd8f6e6125033705175a0e0b068 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Thu, 8 Feb 2018 14:40:32 -0800 Subject: [PATCH 026/106] Added more details about WS2012 --- ...diffie-hellman-protocol-over-ikev2-vpn-connections.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md index 6966e27f33..7b30f32d4d 100644 --- a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md +++ b/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md @@ -8,7 +8,7 @@ ms.pagetype: security, networking author: shortpatti ms.author: pashort ms.localizationpriority: medium -ms.date: 02/06/2018 +ms.date: 02/08/2018 --- # How to configure Diffie Hellman protocol over IKEv2 VPN connections @@ -20,16 +20,13 @@ To secure the connections, update the configuration of VPN servers and clients b ## VPN server -For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. - -For example, on a site-to-site VPN server that runs Windows Server 2012 R2 or later, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps): +For VPN servers that run Windows Server 2012 R2 or later, you need to run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps) to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. ```powershell Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy ``` -On an earlier version of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx): - +On an earlier versions of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx). Since `Set-VpnServerIPsecConfiguration` doesn’t have `-TunnelType`, the configuration applies to all tunnel types on the server. ```powershell Set-VpnServerIPsecConfiguration -CustomPolicy From bd300f585b311a8578c97c88365f382195840f80 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Thu, 8 Feb 2018 15:16:56 -0800 Subject: [PATCH 027/106] moved file to correct location --- ...onfigure-diffie-hellman-protocol-over-ikev2-vpn-connections.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/{access-protection => security/identity-protection}/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md (100%) diff --git a/windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md b/windows/security/identity-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md similarity index 100% rename from windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md rename to windows/security/identity-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md From 55dac4ec3d6ea8c49817b3f75ad52500110057f8 Mon Sep 17 00:00:00 2001 From: Feng Xu Date: Fri, 9 Feb 2018 05:55:57 +0000 Subject: [PATCH 028/106] Remove host name Remove index as that's not necessary --- bcs/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bcs/index.md b/bcs/index.md index aee1cc4e7a..49e0775203 100644 --- a/bcs/index.md +++ b/bcs/index.md @@ -1,3 +1,3 @@ --- -redirect_url: https://docs.microsoft.com/microsoft-365/business/index +redirect_url: /microsoft-365/business/ --- From e111d2a62ace521a8ac6094db0dc07a80379aec9 Mon Sep 17 00:00:00 2001 From: Feng Xu Date: Fri, 9 Feb 2018 05:56:15 +0000 Subject: [PATCH 029/106] Updated .openpublishing.publish.config.json --- .openpublishing.publish.config.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index be7007b5ea..7c4e04d4a5 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -2,9 +2,9 @@ "build_entry_point": "", "docsets_to_publish": [ { - "docset_name": "bcs-vsts", + "docset_name": "bcs-VSTS", "build_source_folder": "bcs", - "build_output_subfolder": "bcs-vsts", + "build_output_subfolder": "bcs-VSTS", "locale": "en-us", "monikers": [], "moniker_ranges": [], From 9920a1cbdd25601e9ea418d16f723c49252632a8 Mon Sep 17 00:00:00 2001 From: shuurajou Date: Fri, 9 Feb 2018 12:17:50 +0000 Subject: [PATCH 030/106] Reflected setting name in 1709 ADMX In my environment using a 1709 ADMX template, this setting is now called 'Synchronize Windows settings'. I can't tell you when this changed from 'roam', but 'Synchronize' is the case now. --- .../ue-v/uev-configuring-uev-with-group-policy-objects.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configuration/ue-v/uev-configuring-uev-with-group-policy-objects.md b/windows/configuration/ue-v/uev-configuring-uev-with-group-policy-objects.md index 62ab60728d..f0eda613ab 100644 --- a/windows/configuration/ue-v/uev-configuring-uev-with-group-policy-objects.md +++ b/windows/configuration/ue-v/uev-configuring-uev-with-group-policy-objects.md @@ -51,7 +51,7 @@ The following policy settings can be configured for UE-V.

The default is enabled.

-

Roam Windows settings

+

Synchronize Windows settings

Computers and Users

This Group Policy setting configures the synchronization of Windows settings.

Select which Windows settings synchronize between computers.

From ce3994b5dd467c791199813a594a25e1b5f46ffd Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Feb 2018 09:24:25 -0800 Subject: [PATCH 031/106] corrected video linkage --- .../deployment/update/images/UC-vid-crop.jpg | Bin 0 -> 38093 bytes .../update/update-compliance-monitor.md | 10 +++++----- 2 files changed, 5 insertions(+), 5 deletions(-) create mode 100644 windows/deployment/update/images/UC-vid-crop.jpg diff --git a/windows/deployment/update/images/UC-vid-crop.jpg b/windows/deployment/update/images/UC-vid-crop.jpg new file mode 100644 index 0000000000000000000000000000000000000000..47e74febbc19f4c3d8ea0c5dbef0aab824a69a20 GIT binary patch literal 38093 zcmeFYbySs4_cwgeDTst1DWD+T4M#;{ipsGfgV8m{TvZ|$qs=319)JuM-cp7#|7&j z0xbaK-)#UOCMESZ4GQr430Uqv`e3=E`}?o0frYgri?xX(6&DK|3kN#@NE=vKnNZ1F z8{5BkFtG&NA%8;pO`8C$_kBYCr~Wf4@^>AHlMMi(qW)C}+W{PG?0f=j90F{7RP1bb z6)xWY?K5yZzyPoStN;^$3Xlh^0b{@(cn>&$-|q&8&jO+V8VU+33Njih3Mx7p8agH( z7A6J;CL!*9Y&>GZMLqNhqfOi0tAeJbgChwH_*9QR+ z2^j?y4IKj$3v5t*A3#JvLPA7FLP0?W)q>y&z6X%;P#!#He}RgxV1Pz#N5J6|nTbyG zviuvN;^+Y_r=h(s1}4!%Vv1jW8mWE;pO8O5Pc;kE+Hu;t)#4?s-~`?X=H3- zYG!Wn*1_?;le3Gfo8JfjfWVJI!BNpMv2pPUiAh=6Ik|cH1%;n0Dyyn%YU}D7+S)rh zySjUN`^Ls6Ca0#q|Cm`?URhmR-`L#RK0G=;IXyeSxV*ZP3jsj-Bi28X{V#IifpQ@t zBO@WB-N}W3=nNJlJYtjRAk-4_2hb?Pe~RQaJnMR(dtBbHszP(Xm@rWB z7)Z;YAcgcL$DP^?RYR&)EZ;vLf7$o&sSqV6CMqsXIBuCzC*<19HZs>Dgy_>R;#n#K zpT@L>h$XdN+;zGcWtb8T>-Ivb{FB@c)h$jlqp&&rqtHdO9Y4*olD1eM*KY}5^!Z|}l)a`L&lQn&@;YeFHJ!{-3UAw!d{t1d zid?{g#6~Wuy?VYW_^2fA6q0K30%{$lrQOhf7Gi>+Y-EWy5%QXF6(1+v)i5ZQCQfv)A>=QFV)oBg!Gl7ek1zA>}PHp z(U{ohSkkE{3i&^)CscRv6HT9Q)?fFDzqt8aHVi^&-B~6c_3g2LZ3oTsOA>U%J<6oR zU$PRn)!0r7ornXpuNaE8_M-e<_)ovB5PHNkNDeBOcp4g+G;0NO{4CMxEtz#yvo;-{`TN?JEJ$n0(!Rob3R0 zfjP#!LEN+1ryL3!yj{5*Q+SS5-`WHf;N?A!*pLzf{cxBt8yE)LOcJ8bH z9Qj>$e{`r{T8#Jl`Q2dRdL;cue1ndI%d*6IlLwO(H*1wm6qiVQCuD~wXg+?}FzWK; z9_7*H0KOSD^G~I76)4DvO^adQt=el56Ubm%6EH_>8>P#swV`?g;Z^(YY*A#3bpw2x zLn^HF_MMF z?fg2a_-_Zp^N+Kcx1j>_4bxmdY^Kb)1YPvi&s?ee(h~U@>}_#yIC$MLTWywQabymr z1qhq&<1)c^2|qG)w4%7q;jp<7-(>f>kqnQcG;$3eaFMI8(2eLL zN>Sm+N);{4Za-x2H8UU#wImiL)4}NF7s*dCn@vi8ne$kEMOR z>ypNH1>Mc~S_yHgaY=9<6E$&fcW;!8HURN5H2qDVFngEl4I^cLlv!;sidobfLKRo0 z&W}js!_wPAY9&90v%B*&x5EnMDlemTm^1vJ>iCfe2GKtFv1rD>0i@jHRDktPIW~*- zAB*(TI=q{&b^3wP?KL)wizw#HSG5%HX^Fl<9X)q39{m9&s!{?EpIatlchh~b1q9l z`}xeDze}V!KvubB-1;O{rMPS~N^*hBFOZ~bZCHhGaaumh@=Pjk)^v}Nv{7=3b>XtO z(xAVv58EGkDJBYildqWB`fBP}xi&%$$I6OE%RF_MgQ2{A_bXP)27qHPCq=t%u39m^ zK0z026!|!qaDi#;!2|9d5p&n?UQ0+JujlVKB0v~?>QR3r_cHue#6SVDW08n%N7baxvarmWjG?Nd9+MBbPDrV$ zasStKJ3Ef37%h}$m&Ts3N94yKpgi|8|2UVlr)SP9c7l@7VvKd4i$3*xr3_6ENv_~z zyxor>HhcHglh0=@3^KAKENOYY8*$=(gOK-Kh-So#b}7cU&wPgOjC@1}$ye*Rq(nxm zqA4tHTFQ5L9R=IKUc_EbZtjHY{fbQ{bt)XdAS|xMA9T){o#U$DgdMDU%fCL|ipUf0 z$-q_*;-sRDtaCoki+h(QzoBYY7rvu-oas*`Zqi{FO20LGdSh{AGDj4zm|W!)U~U}L zRKa_%Ph8w(aRh};y#~S16CooG4Y|gvdY(7rgrGU#m-!Cuy1a1C(F!w`YjKBh*^qQB ziLgMpMfyRaxvqRX96-N$M`!zHR|qnQv^U5^=HiGjSgxiXMdq*^@l_1eq{Ry7G5=R7ViUI z0@}mLpx!-%-nGWKo6V9|yq&GG5GhQ_%8p{Ps&p0{w$II|Y_7z^B&)_T2=WqRh7Ds& zv8mtQ9kAc7s6oGEg3G%KFT?nDIB^Vldl-Nap4XfqIPjuG z?KlDsd@QA0lDLVzM|yh+IZ>LPc%O2@LKh5e=Wua^0|Q_XUV#J4^l%`+=wRa(joW63 z6-M2Rr8WAU4=u`=HGwuo9p|cr} zaVnIR&@X72R0?)!AWYcZOT$<9wii;MH)50r18HP%AmeArWj7q?P^*|3m?nzsXOhL| z>lNQ-OcR*MQmx^Yw2oI{cjecCsr~E{Sh3+h$yzSofd18W{ZCf~kZ>(rKz0k$uwH^kA4l zx&Y!DdE^TXB#S5@=O4YcNnIAKV>wl=AQ}^=s>Tl4D176b`ZW$ENRIv7)4WdoSpFYi z|DF(cYESknLlT?;UpiM=NzMfoa?^#`ZLzd|g8JI9`PlJP05@6u98P}yzD z3)6#mu>QfrM&&;Y@F0GBxgl6Dr2n4V zK*+?Ng+oOp3AZV>*nMhl491!#o=jx!Nt$D;KFG74Ha6LE}$;_ZRioc-d+4 z7Tj2fgx~;-B)Yxzgmki%uk|7r0(t{M&>J*s9fOnTW105IUT(vz6Oz83XwrJL&}O z=#MchfL7LeXAJHp1P&+>_`l`f|2@M%M1Rld^Qk}6t+^tY-?tldQh)o6J4`@k{^e5$ zcO4b$)DOW)3jw_W=*9ls8~g=nb7?RLhZ2k=qCNdzXe8X+`NqG|u*?eak0AKV`~B4q zWaZz8GR|y*+UkTX{YS^_|Dbx-0M3~IOJ?A}MX>5^Vw1qP7gN=Gu}`5>P*%VRvq}=$hl=y*k^} z={vu)ayW1ZVsu9<@XX|3=Yd>pk;DESj8gyR^8P3TBvk1&&_ZS+Ch)W9C=|!&bol&P z>%o8*8RhX`ljx6tCU@+9?&B^|TPGIk+{QikECieV_Lx&8mv@Y+RgZ$^{%?xAbNGKL zjvEXH|KckBjy^a=riy-dyqhAwP513@({o)!a_@B7;HytprX_oy7Y#<%N$mM?|`vZxB?lefA@}7%3?D-q$*VYpnO^xCO zTxbs_?!`mc2g@ATP{cLA-Y(De%^2^#FdN^Nioi%-R_;XSp3My%$whXy&tH){nRKj0 z`$DF>QiP@$B*d!Xp~7P)6)kdcbUAQF*~Ql+OUuS{Gr4 zgMUzCUVIxUW~Nb9y`S+cHQ#(i*iL$?Z?E*Qh~sulg7Kt?w9p*!OSKqnu{1AvH(>Ai z7OR8>t7r7-M=L3!=V+f(+YfrSGzs3I7`)2>XxVu14X zqX+UaiHwzd5sh0XXL*D9opzRIu7;>gz65r@=v1MORNhd`MlnF`h_CBg=qk4323NYt z>-wX34%=>|^{cDNBznZ6nH=xHAa(pGbTqD3Q_{+Ehm;NS?Lh(r)tNzN<}obCACIsR zQegRo=Y>KwCxrzW=pHpE+5I-sNx?uM_~-wthfM`EXDYgAV$gJKE7HyJ(m&}^3*Z~JuHQc;994LuF-#Yb`=IOmA@vH1$6))u zH<|OWpazuiyy%f?kevZjgoBH9)3@k4Jl_}d7ZiMFB}w#17#{o;gdc^p5cShp(;Jiv z;DB+OS8Mk2s5Moi)Jok;f>Og-|F+V}?tE2Ub4c+sV3+H$coQqdcP_Qogwj`uGgApU~36K(6TI8dmwQnLla$PPaGX; z6rP>d4C^O#PMWU;f3iWLC?ZKm^LCWVCxnPy2uYv$jwaw<~b_Wj;eM;&i6SZ zUZhMZ6`@PBM^FCJHhA`Q?E7q11#^>_m1Dt3JHLd^w;pYT0RElyC4&p4)}_Z))b{0l zKc(aNu#OjveWIt4gjQNJOC-6?i(4-wnLk)}@r#yGL*gBVD!Mk?My!*1Ci{8wl(AaVv;y!?Y;@e-EDyM z!2zVLV8(Umg}N6L7`oPmVS+FMXj}WC*)19i^l;%I`x*=HrvDH$4%lq=P1%7+LRO0z zICS7LxD(KZ11qiIR*VTk1Rb&8fCJzP2@~?AoN}O*^63Ak|KH;i@$dK(mM>9~xx~SN zE&-jA^)jImS=%C7t6FSf0cGW0%W=QtsPXBWkN`Vzdj$ozD~fq&9`|lr%jvAQh)M5j zvZ$61;gBIlt_wp`#R{E3Q}jnKy}w|74bM2P0^H3~9&N^qO$WG(V+#<@adfiIOeWfr zqYFx+E76*?i+6 z|DY(CR~e_iwADtRI55UK{`3O7N#AIl*4;-3g#f`aTHd9%Ic zZ;&H0i!@E+t~^QysT(S&)A(tz@zYuZx%0&U0)_u9gwn7n*LjL5m9R;2j&{B|G)Mr$ z)|MpbG;jDk{KX=PyOe1J5NDD0Fy(Nq1)K;ChsCdjM-p!;t9q-fdP!^Gz(b{x(~YF5 zEN}kJ8$m96PSflreAMP%kzFLlm7TlU1KII zCV=?sQ*L3~4l_ET$k1ChG|r_?)+{ZC&^RWv+Y`$idEA8_4I`e=zUNeWqTlF{E^aNe z1c`+QLFQVIluvBVSK+{@yq+>;qaKsTQ!t!WIokP_(bK?w2z$zT?V2fp@r;>3K_iYp z@d27rFfY=`2;!(Dj)ggp6-<9ukXSViV5w!y4cnhc{F}1WTV49A1HI6PS2Qt@CD)?3 zRSl&c+saCbAs6J#%GlFbBFrZk2~Jyj_(g7d7K-$uehnZ#^YP}vMi|S>@(uWanW>EO zh7BNR$kEiv;fn>{TWS*UaQQ?x)c*g#=Dt#L^jv$LZ+a`s_-_ z9duL1lSvldj%48W*lj2Jwg;5 zD1t~|J~e_x(p_&{PEU>fc|dJ*aS?rce6zE4bZ^_ERcZZrF!T5pbySS-lx`4(K;bzG zftsw@5`ydUcgNgj3`_2YxsutZXmLHnWMI>&!G)D!wpDAX=3aaHlElllF3 zuP!%pQw6o+6CH^+$6~QD<6LwPQ1lu+aa(IOn+sh`*D3LIEEY)N9+SQl&+#7WZZ-qDX%UtS96$`>_Xb7rtvJcTs_Xt1v058 ziO9E6mxHzUkP*LzBWxwLNAU!!g^SH>cB;GKy<&Ws{gzcfmjA`mE)eL#1l4mN=&I*v z>&})XYHbr19H7|?g9Cap+81Su@}n^E3!9bpNiVbU5V^b(fmR+Z%1jisrk2|AUETFF zM_=MDO({~qi(5-;s)URDsi)|hXk&I3&+lhQb4iygooO5s9vWUIjShsLDd%RNUA}Qk zSK3$NFG#Z%q{L>jYDyO!;~owpQXS*cB#-`i-)=+Nqv{5g11kM(%!|<_MEUTEe^uTX zsq3C1ulh3V!Pob+(@F13 z?#H;7+Qx`iBWc&=sT{n+MHxEtex+D*E&DtB%8=-~#Kk#fWEn}lVy&VzvEVS;j>041 zoJg)?CY5I%YNsOQ)s4Pq^K?~-bOA47qj*r%-SL#B2h;8yR)fY|_AM;Qk_30ZB;f!$ zqbCmY+}X5ZRIZwG?6Il3eD&pZV{G6yZYEmr=7)*MQ(`7Zc7<{ATCo}Wtl|^IVET-I zFTe?xZwy$xiGmrbPfuHtjhN?GiwN##Iy-Fw8L~O0y>xZKGemLAV&PmQW)9wHrIy3o za3Iu8H*FUu0%@CrmBMs4a${!#rWfYA5!U4HzT8+z@OtX%E$`kU8VVekfhz5ecvbhl zFLj-)tdfuKGQ(fD&8&48ciazo1S>2?CtpRm`}Pk;mNYp`mfme7{Rt#jybK+-GwHd|p(L~E{1 zeP$mucVK_u^r%8uUhHDpiYtVuQGe=khr9k~_I7^cg=z3%AH7N<*Kx{g8Z%S7v`0`@ ziE0lsOZ?(*%_<##P=RIulVMRHtqFo?XMPG4{$QlH=O( zi1tJNrzTnac2RcigC)QEC^2sgN?igwoK{1Lkzg8I z?FTD5sqr6j$70H5tCerL=9aNsuovhq%)afq+H;SJxUVOmcx_LbC+qexi#1W3?KIX+ zI!m=qL5yI?yVSBHO<=5v(Uq_!e`7zEw=9-oDRgD3LGut2ws6F50S8XEp(iv-{Cr)T ziv#TV?IZ6Ww*(fsxOb@PJ{=cX$h%CFPcXV&-sLBUrdp~Y9N55KL9X4RuhhJrm8c9J zOg>Q!HDjK^q|Ztm;m|v^Iw^~K0tX_3APbP8mfHAREl;j;9^60IIDQDzV&M)o;RZltugOt@$y+7CR(hODKG^1_58cC@SQ zPRkSgbF2mV?;0F(XdNEcD}Tq#3^@CsaB z{=$k_(3G?zY{Mb_9^TdLw?wNYLNUV*2jZgo7A`I+#~N7i%;TMlPK0SBzOv#Hal#nw2ElYr>72q^>wK%vmRH(I zXMWrG(}}t4hOobpgxn%EVITkI!@3d$D@&MqAk0-=;*?=99nesxI7W zXu29qc@%1gmHd$|c-=%l8ac#5oazCNoGbC-G|`uST6@VzL0bKX`Z*tZzxM796UbuM z9CPvF2`Lt~(*~;qPCSx9LwRChRWmVW6_r2LBNcW_ zi)2c1GlIeE0Q!njyU<$6y`$p0HWO#tSy@5P-n4iRBC zHxdI%x#C=_GtdJ8SXQCRAno*N?IyUEb|m(Q*jB~_EJF3)tiF8BxYIGiAHUsim-MQLPABR_QL82s$=!9sN( z7Gls2xVXwIUEn|jj%VVw*Jb((txW}UlEfp23+bLVum(0zTmIy(tVtF9Mr0N%|FURy zQ*QKPnxZoCfYYJN&|`I|@@qQg)YVUBrHOe@_dV;|9?eeGH)4%@Ziuj5DuECaIgQ4* zxZ;HI;B3_7`?n|B{_nqiJEa_p$;c^|V?>j|$C9#~yA)_gVnJu~&lEJ7>N?2B z^dk-zQOF6t-Yte@`KD*-)0|A1BoVzN0kp%{ScS|{TJlT*ddyALXl4WbQJg6rA8yfe zMd-q8l4fKq2!cAaYFYVz_@dfFr&x)5){C?+KL1?kjNGz(h(`imrOb-j6p)c4ZEwW11Qw6VBV@KI$17>gU)ikAG}86 zb^RA910t5u$Caj>+w<`gR+IwM7lh*%3U4hV54xgn8<*Yh@upS|AVvN_W4=Ptlh)JG z+!T;V8IAS5ADLt4Gv}{D4y^hNp^a7KVr>tzKKt6$_@3e2hjB-8R>==ydEZ~W%f9}I z08yHNaSKnSnt5W0xm(`ru$nXpWrL&|&bTbRZl2g>daUtb`uT2;UaZe2LOy;zc0O8T zY#djD-W%6EtvS7yhjR}rJR|&d1UN4Mi)-{)`mdrDJri&uleUFh)#FJ-ktO&u{$+*F)>rgF>ArEnR@#4#@OZk8s z2$(@4{+(Ve6RT)Uu&CuZk}~Fk1HZo4JUg=2MrMLEH!`!5+snHhm;LJ`LAvo_n_GlK z<%I+sc%mc@W*hWw2~JP>ud9!`+aQ+=NxawKerz+ptZ;a~c-z_n!8|K?ppsH!bV2$3 ztdN3#STruq@v*I(GtQjRbXtZQ>=y5;TMzH&Rt;{Y%Yr&b-X_vNH{h*!Odf9+p|ha$IP1hr6-?tbybf8kxpCWpoQ|=sPVR6o z>0vd!bQJUyQ=OCD5b}th4Mp1B*X_)F+pRv{GB%3dV&5ogmTUK>Ya~@IFyuU5G@qqi zC0tLgQg;Uq@K}I*rcH80wV)eoklo;RShGBMSTk#odcMW;X; zAjcmURl@i07GmF`p+z>i9@Uux zaWIzg^_X4B{VXRDZ%K@@LK8Tkya4W>by>j0EkEr2Ng|o+r24tcsfaUwJX2vmxG53c zdCy_nR5WyE(+;`J+6WNU7y@HGy=_Hs%KO3vBk}0Uhne%H~CNwEo_J2(& zNq*${+{*ywCs1q5505kk62yvg~rIqD&!O>{9%IKb6aBZCJLkobo#wGN5XM zS?McVdFdi~LnUa8u(Z~LdquZAvohs}1Vpk8^SkfXFsdA8A@E#K0>#1rdb1 z22%jnujHI_)n*nmxl{3+z2<#F9qc{f!CTa61I6gnHU0t>x%_?5iOK=@gYK`UPy_rzX$-O5AK#NEEQ`|Geq6(ksBDY0 z{^aOTh5cnC-L3tHA^%KBtypO zp#uaOq+WVZ} z$efwVc%!W&6G^me4V4k)B=ipR7F^O5Cz$rEN+02ok24Oh&1R9PlLZ)NJg_L{c`Qs` z-Ll_*lOS-Sxu0*NcY!8TXz|E8ce&Zx$Oe3s60AvMPpzSoK;Mt&Pj+@fyrZlpJ`!HA zMcBc~shRU>#urr3GtKwsp&p1{s(m@vAyO*l#TMHvkbVHnL6>Bn)wBGXGuWp=4ST$ke z@0S>!r)v?m)cR-b8TQ_p`*f~WO_AhjVt-@$^3xiRe5<-f(%9_(x9Y!iU#OJ5M zwQ03z2gC4Ei4@KCpd~$}PC!`+Z2@giWPm6ldfAWwrRS4DqKGKV5g1lq(2B<7&?A|L zSbL(GFqO`ohIdIk&F=XF=sd?9*ykjd^2=;*_3rH`-fc16QuM$0%BP|oK3)o3m9-N) z8dh5TQhC+#lp|fD@B}xgT9#?1->5)a_Wm3aaki?^J4iB!h;_)pV-sf7$4_uABq-fb|S;<1EkInJ8a!f$cUwMw^`*M0x<1KX3WH<8Zy0&BsTJ;1iK?E|ijLQI#sPY#Qgz=xPjY8ovLe(cu!e zM@2{6inaah!L~DdJEB&X{kAum8?K`KTSP?#HM39;gGkEm5086g)F)f&jcz`c;#2mO z?Ibld>@_+U%CVh4Aev3tB?oQ*#QcNOn3?I|s%sRTex_|>%3nBIC#ZF4mGuXNCcB5s z-Mf&9E9*`TuIu++>aQ|x?bLPYYb%pgMj!1>nz`(?zv}$qQPZ>GH#{;eo{b5VI(IA_ z;e#o`O(?s#Ku+O^eaO_#vBc(gw>O2{7)3>pZ^Uki2Rl1T+VdB0C-;^tl=~Uz@saA- z>4*(yi2>JPGBYlbCgC8UZy1$UXSZqrW~&g&NPbmxz-!B68s9CR6{8v zTNW>ek)yl0XADim0DblTT!E#4-U@dE|NOm6t{nRrEe69P zydEHF8jiYINR3g#&^(gIp64$q=yAYs+Sn9KaM$15wJTOq?V z2gQucxT(WbbB|d%hy5$4J;cYG2JW?qXDM?_2yMt>T(Iu>>D3N^W=5RMSRi~WXhKu5-Va4 zbAx*s#l~Y<3g^~Jet8JQzu`&e{$=8O>EVB;$tL4{WVb_EPok^ZJ6p^Mh!5;URH zssFkYqeF5?RIFv!nvl*p&}*|iTMN;))4}^5*eJmIAGtlHv{-O4EB_yhS?Qs?^~mp< z^jVcmWv;F$G1M}FGdYX;52SX!lAR!f>6L}eE7PK-ACB{8D#w{|22U^6FY9K<`L|t# zeco=_6hEGLj5pi_*q4yTnDEg&_CdClys_kgpl=>Vi52n>y@)*=;so=8e!0kf>?zvD zrHLU+>DVroZMFA4TR0EXr#(ncGkMQ=e#9nxA12-qFy**rf_gSbM2q_~eEw~Ni-WwD ztHIItZW>e?R}|Z10NEkb*o$tesMfE_m5N;!ISTc9b!f5H+E&6)VnvGaoveUuE`>TH zjq1;{nd4-ckL$#}>~-&;DUZ_8rcXXQ35dm|a*h3Hqj4=?=aFI#N7HP4JyK)`wX)z4 zb6^W?sPvr!P&uSF1;SgZeU?2*pC7*Mwk*{9ocz*w7JEC#jB&`J>jkBPR#HH;Nuf8Z zzJ_h1_^$(ARM^}6gU=FeZZ8&+m5x*Dj`h}8(_Byav+e27CnA_8M~5t0kPf=yqDZxR z=V>AAoQ#0lrf{dDrgno!taVLX?LkG0iS|G~4HbUm-t((TpQT%2qoWl+!^;wO%np;} zQrA^V(Qd>dv88*|d`n8m5vx8`O?&p@{6dTAvCzj`+M{hF{t~L}((;AHX7ppqhPRUy zn{Q`zwSG#pOqs90Mrz>2<|iQ+{>aUP<2ETPC|xx+I@R}>_|u-X6q9FfQS6x1y}<$1 zPeClS=>D+?A~}n=1JjR}^>ADqI^$K(lfvdMm5;`ItkJt}(qqnO((QC~V9Az+UmrJr zlp*Gyks@0RUr)v5m3F*PwsSg&fX z)OtCgWxvnPb}XQiwPP)k@h}luIN$*X1g<>%+|pSmE}M?c!LKjQrj>roJ?YFD#_qAN z5bu7s@1Zj66bCEP`lm%2N;%0txX&2T=#Nab3d)6evj&&O9~FAUn&?;%_YSwajQ<< zmR?rvNF!+tcYaPdiNLb$LQHEkak9J3NKxIoL_2XHk&J;HDWNy0?34cbuH%(rDQAOQo z5ZM1IKhL4-6m4!QATe9Q!HUF0gEs16%6^07%dB`}6682RTwzr4w_!u|P-p7{Z7EXm zRU#~#M^WPJJ#XA``?6~%)@!|A510Rh6J{Qo)*3CD z>0lny*No2${HkNvhFk8b<@a+%4;&42uG(uPoYIanetuSvbI$H$^E@k<;ltf|`cwK& zW&$9#by4q<($VJXO7mOEJ|Z0Gxz2`8k4=j(Uf`cVBU?x>4o>wFPnO3Ei{#1%1kkOAxc4G!}s9zz77Ctj)5;yqRQK}&<__%r(g6=`{H2v+>?u`~*y=>fe zdu&9ZO?Sjs_bD?U5kl!>i9(kw=E%Z%^2qJ(a_9@#@Wz&I+h@X;1ptCK+S{2_!MDSD zjQzQ2yW3@ASK)*xoiPs;UmbUqj?`@SQaWBuoTyd=M^#0h6jp!cEUjWB?afazjx?!z zB}E(T9QN^Lr?|2&dvnA4VXkYdM{PqgX4N&4Va2FF$rBN1o=CkBfMUW_+=4Uz9AMua zVknW@nkD|QDBkIb;4)@!-8scP?+9i=gWn|1o z*iYp}cj3Tx8BJYH+L&{|Hp$~y91>c^T=_cgt`&ODWy?2ZzD1smoU>f5p)*f9p1*ZE z=TTgVdN?5eH5@8k?tU23?sT|5p`+8nhe5P3S+09eOsytzqB2x5tm-NYuvT<$qR!Gpuq&*lsJGQThReMf^ulSJ2UxurTB97_8yT z=3wu#1$wtMlt+^!4Bs*ag14s%mj=wPU)b%Oxk4|J&^qPsr6u{ofkmO#8(F(s(}?4; zrifw%n8|r+Ct*7rXqz}#xJ6cj0|;y2FC#4EJ0UoXgjUZH^N~qiT_ER!lp2{gJNvkQ zdNdPuK-wjUSvl869^){KlNZwBZ^00@6Q9L=-~jz_0Z4Y zWry1g(jl8+Ky0E6e$T^0F_W2NdAj7!SpR zOYM-QP&0^WGT1qLhYOnOxwN|l$5p_YTIPD=37!kmIO zJ~aa749boiDf zyrxx8w1>V-7nFwxvdIHI056_bWWxybZY6MGNO0gxY>vg98&_vT+eiz?w*$wcuX1qEh})Z(X}lSmjbHgSG|3fdVk~ z_!SE4i?~pLo{~W>aN)oYh1)VemtrX_M0hyD)W3CjXxwS&S_DSayd@}^g1FaVUveOTpr;)C6CnYxP zOB=-w@U3LF5__FEC_ zpt1gWmw`o~0{znk^4BZGPC~suJ^rSZayx#K>84D%rPsN-()u)I!Ft3?{vPIOr^yb*qp|m!XK!oR=I*nRm6CXc@)NrM2ThC^8t(olj<&pdC{-9K$?nOs z??40UDMnkbzkSOmg0ZR4n^;!1Mmawhaue5#qPZ5J*1IjCB=cMHxBN8US75_!KW{#E zk2c|FY|@IP=D(_lxU`}h0yC9E5KKm+Th=kkfl<{cEpml?bVe}^O6-e&{c1ub`9DI9 z+H0rB|0A{}PG!1>VZw+H8)Pi-9LAqWmL;~}!GT`o(bk`!?-djF6m^CJ6b{fjXsnTn z-pl3EVwckNgV~O_ask==*`X39dv9x7kvHw+I1Y^`Me!oYhXkX<%cH-Rlmz;or|9o8 zy-bhKBc=3rtI6k{c;s|V%ldQ`4Xe(d3F*Gzr+U7#;t*yvb=7*ySt(--?1%^57&^1^ zeK^pd035VBD#NDq0)^n3JhuLfm25uo1EMPGP_e8TUwn&sj;MTVB&5pdg~*6^$BI&m z`}ZY>e z$-1y`xPZHP*C&jZhgQYvGaGx9IPQek%k;@-!i3;aL}YQrYV7_+_F(P-<;Pre$g+ZY z5IQu{RNEw0{P}G6{4oE{ivzkKuODQGTdKDH*tv!YtSE$TyQj$K*Imu=WAVXdzpiwC z44(>knMJhvdC2`5gPMRp=ayKLR9s|HGSJ4254Uwcxe2-gu$Hy7 zwn}rxc1@ie&1>hNpRq=;3wI;rVt-XB!vV9g=Dl7Q2CMlRmy-1MVZzRLA!JUSypk)t zw6ewLOy0@q4#lT%4dz@#L=u-5iHECP&SNp(hg6l1~V>)s5kS)r`$dKF9@YYL5`hVJc>#!)hu5Wl~ zP&yPO6%eFL8U|2FrBgtVZWy|U5L6ht8)>9NLRx{L2Lb7j9J)hl{7&_{uKT*~`+J}7 zIG*?W<9(0g`D2cApR>ACzvX~6`hHI3DrS7ywg6_p8b8BO2_jI|*flBFn;7@j+{-RJbYyCJ8aS{18s z0(AHATN)XuN`YOm5(V|jI&~xBNBozid}SJUd+YkeDb=;^kaMUzfKfb(Zua2t8_gN` z0eqgSCkMrHaEFOC6*E?`XIsWAj7J`Z56W&@?Yd5tG0M#A_mm0+tV*xolY;EL?@Z-h zvJ)ZCUjM9Y@72xyGsFF}aE7)q?OCa!P2WZjnuPXcip_6;kwlrCi*Q{{qB9?(%nIRm zs`5?pyD~JHtcNn{?qItTv}$X5p|W*(!1FF6CAv%pO<_@$OY1J)!%h% zW(wIeeS;i9^wX$awPn7C4L?SJQ;2oUL}a}1Wrb;#MKxa=*4eU`gximXo6Yy-Vuj-M z4Dktz4`XLgB&YTX=s1|ZJhe+V^KIwnUhK;nN%obty{SMubyyG)R1K@_#e~tgWE37O z1w1S&753GzWTfYJW*K@Ep!-snTim0kgm25~vl#pyxSu5{nor>q3H)n&Hi0NR@%Nlg z{>7Bs8~HTc3mgLt7@G}<7QOljPOd^-Q;Ye|@*BixR6U5N`<|!S1Z?cgzH)^%J9>JJ z7^^bgNctD#sfo+_H6OT<@_o0(x0z^&3+bApSute8;7Ofzyd8|8&ON2>xnNd~jxNS%R%xP!Voel{i(%5$Pv> z2pd{uBz~ZfB`u#7hIZIM+>7eBU#MnW8Xu$KaY!>pb<+7o7}aNR*)OLu#>YH*z(_-9 zg|3)yTcT?;JFBl}*d;JtR%a&L`v?V9m9weaCb=nuCi~1>@A<~9BmHn{&!t$(0bUAq zTyraX*HUPVymxHy^ZFxBUQRNu!{5K%eTzujD)K_(^EpVdf0?n5Fl> z5ty}m%!1Ks<>%5_f-df@8v86Q?{%NC4oPCWiBo6h=fX$5gARTLz)1GPLH+K-;3J$i`jwj(OHJRgQDpT}Ds#0LUn##}b=G=5;7R(I(M~ zf9{JM zIi1cc6zeXBP70r0Vxqi9|0;RpkNTVgo>kZgG&(uGEVwwvh4ZXNoES_@!OeuulrVGR z;7Q>vLuwa3=tpS2+9kl~{;Kr|)n0$-CF?g5lvg(X<(!6oux2K%9rTOzeX$rag#b)n z3LK`@WC*Zqq_=#ab*2?oJPl{s5taIU{nkJzsQTY zjbaehs_pLMbskJ%oVgNHfX|;ROHql?L}e?u8Cu)D^t2c6eVXrVY);BGBG;c@AdkV> zK4dGmBl;Ss90J&~$qcDZCW(tya9^&9wLejHjWV3!};t##{mK=rt07(X4p#;#PQ{itC zzA}$$%N~6-=k1p1PD|#+%*qOQWjaB5tna7NsbcMP|AVx1t6ZYwP+y@B0WuM3#R5AW zwEbK6=k5so0R3(_$W*YUqWo}Ltcc+LK&Niy*2RD#0eZfE}tR08_! z!Y#BNDRnRS%k$BKh9-rSm-U3f?@qGuEx(?8dFgde?{z9qDE+YqT8Hl~MvqS zWSHyo`DzDMm4fO=BeEpC4Ck-#O^c>#SInIK2nA5T2$BmBKBf?Z5$l}!ZBnraQ;^K^&BH@4gm6xs|6g@g#p(2?15R7y^!wb`xZ?>H zKiNc{-^R6CqqHzOq~(4TO0ggU1#rm^wl=BTz8|Gsf4(YN-TQ~&L3Iu|@24;9(y!`i z&W>RDsV;EEBNYH-v(@3%P=+k@=~uD(aejj48|kGc3PG1wE6!qs$$OcTB_ClP>Klu8 z`gUE*Na1sjh|l2Nwc^KajoIl2IdX?AiNv6;dfK@j8nmbi$%GU$7em`%b%>)aRj_kT z5)E2nZ;uEIwGSlSXShD~oBCRZT5>FL^o$%O70zttdAIPEHizk$hU%PCwO>X|C2in? zBN{>?7P?%R+rtVe$}+FA>sKGA9y?$rPx9B6fAVCCECnIj9;w~D_H7$1lqqQ{GLfer zi<+oo_YVUhBZgWN>qy{sWsGuEjR|A4Wid?werU_HrosZ!K19sP zY+QTj@;LbHiRHj_j;+FKlwfaFgE2um$wcu9I8uBNG zb%F#pwUvvUty`fpHH^=1TsG^IkILu;7q1h z$0gkXLW`S71=-BoE?9!g!eL=wd6h?kT2Ni?r8JmCrGMA<6_B+?W?dzw1`l?TRGr~nHKY`D>i@3tSqa6 zuMAx{&c-n`+}hMCvm2|elxx%tsuG!NqdD!7e8pXyAA8hEK#f~=S0m}hjDon|h^!QH zYk~G{d7w+JWf>>v-tk&u7%Lie(Z!e!DU)`!0?&X|NV2I2$fZmEy0x}9pLnLZETbqt z5?cjhB!G8if`hS-+Ctpnt_=N0q0HBn$a78bezf(c$Kl(a@knPZ4VZaV`mzYdNjt7&s zT&Qm#ThL2FH)keO)JVnQ9s`I-hP*AyMZZ{o;Yio?~viRf#<#27`w{WIh1 z{TXg~htD8hva@Qj_Mvg6ub56m;&@jSd*-{&Np;#;@OF{a2CxjslO)W{;CRuTsf(#% zC5#_0)QXnXoWCMQ_Je5ZX35g=V-}`Ml-_Uf&M2Nv+bFEE^Rq@^6QVJ0dO$_>p(JSy zyK1gTg~c#Sv`Wn#cZ}im9h|`VGN?mmjThJ?xsij~CKA`at(XyKVR9J5qIIOT`+nk# z4Rd=q8t85Z!gPo?>vN0Tbzz~6hxUG&1VZfo570wRVnM3g;zwt4^cmnwRnCaoM0X~R zBjb`2%xHz>HkNhiVzTE7_GS%X%HFg5Vq6dh@c0smw(8Ye;m}lXJ0m;(8TQV zU~7Ut$yf8x#@jwenzxp{#pAB76yqul##V5o1kt;q<%1jYa6$F6sUGTpZ--8z$H-{B z9Sy;E>xW11j|7cv77Tsvd^S}jW=J|JdmMRp49+4h)|A@Z!8EJfJ Ot5iOzU^=)~nxCh{0j*ey(_V>EHUzMY;#jIGdjUeM?%%}{ZyHPqKe z=+R@DOTFf-CG`pHL5u)9)vFM-7|R+D?pufVsP2Yhl#9hQ`%~qq5EtA?6LeOJtAtc4 z)cPqdCAl28 zv$dyfq^lWizwRoLSAObkeYNOOCGiOGvG!92o&0#A zFZA0dZsrQU`^3>SB8bJBxILZPj28q78Jzdb!UVL{o%mxvgNV+c&xceKtaQY+6wI(YdzWblI^`1bq_qla`>?Pkh)5zK~cSr^3yLZ9c=8@W$M; z%(s9r#~y}&nBtEV>9}D9oD^?@7ra^4tgg>;{4D~Q-rtG1s?*Rvhn&A(t(SNm#0; z;OUY|LL&vg`F0{>B8ln0Qr8eekkyQ| zGVn9e74Ik|yX#akfd0w5-phlgWaGNd zq;PF(>&3I*dU+U$i!UXi@^aIvxXmXL7zC^si_m{TArxzTCI00&fo&tQo9I8#x&#YX zUW2Gbl-A+dKQOyR01S0`$nobmeeYn6Zgv^Gp(LN>~vJl+PkXuX{m`Di#wmN$i-5%uaCqP&*aT#TQ*1FX}vpI zLyRV2PmP4JDuv;~wEI$`o9qaJ-TI>MP4baHK+nduT{rCW-sb29;P9dw&KbE&3)A9u z%dteh?hvfF737d-Tl!*Pg5-&tK&*fo9f|Ww%wd51$^8H!&fmPjGu3H;(<+7ThNTAF z0Ckb8qCNTfQ=MSUG$LBa&p=E$+?kf9Syb|}uU)JZ5k9TpYqa;dyycaXx%!gqX`SGP zmotKqGIz4~{@@`RL)?vT59TI7syO9p1{RGD)9}-0ANzf1k7hY;lj*AnuoFL7c-F;BUnCBCEoXaY9@IcA@_ob91H2B01!0h|E9OWOd3Q@0L$a7{m6 zSN`|aC;WO7^tCn8%XK66%YaL~7$r%^&Ukf1dAY+>#?kHM75nINX$P?%Adf(pvrFVj z?YDc0)`~?dv9ee^O4PhJU1BMV(UOA1{H)N%A>y~x~TUF>2+wmP22e%$CcA zv+)%;Pb~W2YuUZV^Hw5QtsB%0%fn|hW%ko}+T+X(BJuZLiy#Igtx@_=gw8eiQxxDN z;a4Dl{t17->PJoJ?_OimAn$X4$nEB!7)r$)?>b%m&9@KBB#B^y?F_-f> z*MFDrM?e)bUPHX*2S~yQP`%ywR|w=sj`*``|E%L5WXb)L0@*l1KbNFp&x}Xp z9Ju%`axK{WQ707_&=C9#{Q-0O5ReIH`G-c|DQCfUGzC!#M6&#H#qvz#31>oUK6&_Q zQcU-_x(6YjEFqpajO_ceM2Qpv*S=uep@(v|MMY&O!TfEg_Lex=XKv}SVQh^lo3*c? zk5IAR2!$TT0kmK;7$i3DWQZ3A(W!k?aj(v8jHWiN7qiZ@9o6^)wB<^6US&6TT9Fi- z(Z7(dw3_vs!m8+oOtH`VDjOB3hEC`SVfZ#a>px;&K1MLodah&@2u=w; zut*7@Re;my%QC^Lv>N*#fCBoXRive`UhzG$2p8j*cOGmEH)Rp--Nc4`S5s%(lj`N? zk-+Uh#jE0cLj62|;s5;r_J?<)-v==B{kXp!z!XLY>RmS)NQ}6A8GnFci*unZ+&>){ zC7?EbEoTjp$M|?T%hzGzO$+Bcx3BlDQ!ASU<+d@;n}*Yg@t%ElqFNSn3F`_Jf3iAX z3Y%G}Pukuc$olAu+J=mMgT)FnoM2Zu3{3NUY#ChOIz#yY@(o|L)p=k5TD9$kA)jA% zVW_6EawOy|cBD~hF?XX81j&9CK3fS3d(ixnhL`mNEV*03L)~0b-${8l?ezF~)5b4n z+jg7&h`V{?>UX6Mp2f~@T1|_Xg(QUHJ{Ye&0e@F0sCzTT*1dJ}JS?)LWrnR`2vWc2 zR#4l@VXn6Fh*D=IC_m-#8{U4?_<0|Ha*>&LYzbe_ljiND3+F!HKW#cnCU|c~H7)$j zbX`P5^2D?sP)KH0K^Fv44U%H559$i1yOFFWdm$w5vALM3?iRrAI+lR2Vd>;Gn(Z%O(s(>`izy-C=3&O*nC03u zj}KWGXl`I0*qiu;fc>#iu=yZ6Q!g|FyS==somSE@o`Pu)b-=hz^uZv^k!)bJ3*u;x zUQ6obe3wd3NLU$J`DnE9LKR0kr3KiUEgXTJ-5Fq@yEdTWPP&Y_46(eD3vnwL*2a@V zCoC9XpI99E5l3n`U1!bPI`POmdSragipA%VID<3Mw_8B&Mn9Q>5fjH<_{D@!G4zwl z{WS7KMbe|*l;;mwNeqzvCQ5X&I5fd=Be_B^xJBPUD<5;JP02XOm>Kbj^PYbf6aReD zZG};EeFkjBxo7h+D2tk7st;bJQy*rmzGXRm>XxRQ##@KC$}K*xMZ3LslWV^LVH2HB zXiZ-~p8N3;XI@psyek|3E-SjKG!@Or1QmAh61CeaIcSy16E(`@9qPvn_@;&ZLTg~$ z?QL-tiFD_d&ag=Ab+ZO@X9&w+M&pa8Q0_~XgNZ5ldCcn%NryFc2mvw!yN|cp)}FX? zV|A_gTTvt3U=}>&A@n=wkUja2EN?9W6OpQ`@$gz@C*ls%R(kHr#vkW|lyLxRB^r`|UZG@P8lp~*cS>0Zjsq$1~U9%kJNUy8F>TGo>E zh+$QajmGcNWOv=jfYajSE50&P&rsm5c2CJ^*bs;!?XE7p6X@4<%02{by@3vi7F?mB zxwfs4l8Kmu3_i_C99ore&@UkbAWF~vZnge1jQh_W>fiZe)CtJeNWaU^l(RMuE5MWw~&ttEeGsb%F_MR~2TYITxKDALPpB7JUL#9F(?giYd3E|i_ zuG5*V?5+y(`DRiu-|hS4ShY^ARszV1@W2CG>Yna?8pimWB*-!x6Uk#oq`DCA`iy!on3tbe=Z2>jmdN ze#75!E(?yPkF-_kjY4@9ULUgltGXaS000&hswleJ5Kjgqmp|JWbsv1bmUY&XjrFr_ zxj)+x_g6~OKO6eLky3ptGWV#ULE)a~%8kDEAWAcm<9uFOoQn^?DDqs0BTS_s8{g^* zOrwu(NK#p>QNKnB=s*|fWA3HcFZS$6lgyEp(Z_GLFD7M*{s7fN3vehJSLFa|O#syL zQUgfz@Ml&a(=4LTwd9RvaY1G;@>Ykuk*Mc1-o|ca*`H~l&mDi#*$ANXpDDAk4Z3K* zmPRYo=7nhnBe09^N0GKZSCz7wlAR9`JK2<@Ixgd818CEB)|2~_AQb>9(W%)zx9xAu z-xItmyaS7cTzt{^)knW7K#sOw@ppWYUhCh5fUa;;oW`lEf8Sp!68}vDtoQ@uI<6%o z5U8USw2OR}$SDfJ`V1nKk=zqUrM%a1Pc4lgC!RF{F_KD3S#+FVS~8*S1o@T7o^xf6 zh2PdpbB;E8M;$8nXw1yDloH@9NM@yOZ5~Q8Q&9)>kdmc`tZSl0jcJ=FTGUTaYj}iO zjbNJ_81vjrTp<*rK(s>S?;U_(i2!P@_b#E-23&Fq-pc>9ZuIJLoXpWe=Yr^YyYr1u z)4;p2s#VSqRe*JAsXy{X!pZkzT5N9m;3!PV=C#zPA`F zohftG(m;hkO5rA6j2em~IG{}GrPf*TjWe~;ILg!uajG*jo}rw5qn)ZvF>RQO>Cp-& zASA6YMwrb8ib;OuX3=A_X!_*zS7Ms@1Z~@K0D7#%$b5oye1&sGU}xNPpq2Q5w?< zTDJH^I)+9VhQ}S$nWxUnD?V(hPsi=u;ODXZDhK#Fkd~o$)ZJ!tY$xZQAVLW=M6umz zHu~C3Cqb~IfD%)*Y%J|8d&Eo+CgiM|sECR(M^{{Cv#az#= zH;|(-E8ECs8^wwbBKYN|mk|CG6HXYKI zT%Zl>xqTfi#R6!&=`%#dfVtAHT)1?8U%>9eYDq7-7!XtQgsPOUAfv9aPu+isn(mvuMYIE;Sp|%(c8; z^`25M1kU3Ry-zoZBo{*T8b$?58c|;*#t&%piS}f_YExonPSFzjb%AVqUGNnn7z1d7 zDjHeP<7XegQ-Fl7L-EIHQXQh)%*j>UE{h(qI`R-qF~p^NFUP>v;;p71$*nQB-!&j( zNiIaHDtns>uS9;Qi$`lh${~iDEyXW1Ax8SoZl{p<^rk!Dgux?cCFmGbW^(0azm zGrwk7uDoUwuJyZRDgUi;_RB}~l6zOHQpQ9y`_h1}4B%|$`byu+OS8NXO#g=5f5@Hs zDuB}Lc&&PEe>7IpH=<-PDbg0((ROwq>8(CCm`rk)cpW~ ztMzW@E%*y>4W^Hw%(I8AR2UV`kgM;dK?%_jqW3G$uF78m!^a_l~ts$Kzcc0tmy1n-%pZ$syc4LQQ(}5 z@vn$0@BW|igm7T1q5tA%h2iU(6FBnQX8Whz_J8#QY`WXrs!*8)+4NjFj5W; z5M(X=+9sQ-n|Q=|BQcIRE8Yc#b6CJtNS)3+b4&Qsb^6MRnX#Y9g(`L#MeIc>Z#BD- z^9tH!@N6Z@Y9WDSbGT2(eB*P%ji;E{9B3e)=ubb@=*4dG@47D+`}q#=#EXp=634HK zvWedQ@=f{Mc)E;jaR2NoAo~X>5V|f~TT%cx=^8>T(qAP!qrTpN{`7`karVsj!#{LI zI+q32#f^D5fcnEzd?Reg(Q{Slb=#pUX#gQutFpv?&959wWm?HAV;T``FvvZ$6WDKTk1?E79`{KNK@c(U z9HzmQ!$mpQ&md;$@@4pVsvd-P2B|#+<{QwHfBFIgv5=>|E_>pIDWt6-?M9hMMO^ZZ zYE}%U6Tj(C-x~bcozvXZ4P%~paOM%dIyjC$`q1V*3qy{-moB&A8_GXM z>hj@T&tS97Mz*xG$82RLmn421IQrK6l0#`ViRsXpzZ-N+Z*ZE8$2?rhq)kLdJcTb* z&yc=cQSp#{Lon8!nUXK*Zg8};#q8W=jHc!I?vr$lCodmZu(+BlFtCR(7`w#8@<)o~ z+XEVO07UCras+}?84x=;i6LQag08BJ=(==W2+ z_mY))?XJL3+=CR^*?NkaXt?B8f22hsU8(iasPY>{@H*{#H_;siK5<84IQ z`N`8AgC?6F7Qh{11h7sSo(*-z;%sOLzBL(NBYN=4Y$cG9(0zL=Yxh9QY{H?r_znS| zg_*XnlT?o?WOQtKzYuCSC(#L!Gh4@>p_(KWTroSihDZ^r5KQ7~(VDr`vJ0iQ*I{Ej z`Its2CUV~RL=`Llj;;4hc^Te!JF5Lgpj+eGrA(J8TXMoFfAQx8RXIw8$SE?cD3f8V zaMawhwvn+>;ht*wtJefViJgR^ApHuNyj0KzYq{O`)C=6Co#z55tG5JOIe#A2_#l4U8nI?Q?{#9 zM_(iQ+i6Z&CehibPOhKSHu;qJNn~3yC)^Rqu{6ICDJ!!~og%e29v~{po(Lt|gj&PO z!$m(~21$7*5{8Ma;|#!OL2}+zfcY!)H%1gwl6W0p%Go2Cb%>bwJ^>`V!;b#hu%)@C zDPw#30jX7|s(>A}DVy6FW+jvBwD(e-J+t-By~HPzLxEwDossdN`oHA*Q9tGSWhMVy zDTlGYZ#==sCkFvG`v0Flx&+KqCxd23@t4y)?qpXYTN;_6B`@Y~Qsb5DDdEOfVYGr1 zK$>)PqpzH0D~V%e8O;f$rtuhQ4tiN4*D|MRgG&S7iJ1)@&%4*T%m84}Kt21VVW#KBTiLoTQFktzpF$XR9QL2C+ENLcSkJQMXN=8d;H1 zdWiOz8FogOy2RpqO-2c5vw#1B38~dq5s7}FCHGlS0Tdv0?zssGlG+2@F}nQ&-}z5d z0z=-(j{iV==0h7G9sf)IK47pW>fDo3Es9%s~x%0v5c<>=p>A6@tDy$q6(%A`o2=4wz^L}14>M_?@1gDJ9! z3^)+!{s8Sw0rmyOyx^;oDAaWpimmaDeX|Zt5&^QK)pGV-8e5)haDlKvXgggqGBxui zl&qJa&q&2Fsoo9t$^Dh@OJzuw|KwS2#wm5axxbk!J%CEe1P1#8Ah7IGdkdT$OQC1m zfRk~p{??QwoiKUECf)3~1gtYr-v&m=iZh?+3F9a!uDHSN`%7b)TeU=sA|3GZS$$NCoeey*wi-VbKhvlCYMF}+h49EPe zH0t3!7~%0|4XL1>JhdSjTtwaFV$>ag@JIk`N1Nr9jScc4yM!wM`m*-m&FNiz&mKDi z!hzgSp52`}p;}SJ-kpg$-}%*9vH)F?wZ9r4;VesZ=WRi~2GsaNH61y)W|zxX=iu~05?yk1Sn z)iX}e)!$tbK?g|jkH*25r_k=4k?{l9_3pgIUA~!Q))#z`XyGB=k+NY-$$xzl#q}rg ze>&w3iRasMeVG}Ei>jUJP7yetp7MBFRRu#!uM@tuao?2uK(oi>UM+x2r}`=(^-d#=2hHhHibwHgkb?GvvKwyKBSHC>jj~c0!*TL%&t7P! zXsFE8GnjjU>TxQ>U7~(~v}BW}FLDyAHL7l8d``40>g_n5_uPVegK7v1i#~KZNhbHV zFWfb)-!o-gJw{%w<%-tjV#rq%DDdbR;NV!zG**q7?gk>1y~92*kLRCuMR02Li+O-m zMa=;CRl_O5S4*dP{GG>>8ojZeF2hKk{7I14c9V*7<}s+!*29Ch__Z>3V3fb}Am6hWSnE(BRUAGUGQ+8>$)XD4c%#U!|&J=dK9~2xJ#uEGYlUuUK<}yX} zXBI}qXY~az1Z$1IB9Y_DV(im!>FJT8m*fo)1x^ShRW>>ZzFg~4GIy$8aoTY^exc1aBPnB}y8Ev)wDfW{$7K3TPMZKpYjlYaX{~sUw@l zy|<7eNV8(+fG5E-<83K|D3fp_P_rvv%N*4FOt?NqXjs*=HF*GR+@v#VV??{V$K&eJ zj@B4X131#{KR_(g+2Q)Fse-ArylXNvT;sxhiL_&MGAK{l%|}IB(vt){qNZqp-JZh2 z2rA(Vmy-g&CIen!eN2_;Z;{H|--!7~w}KaFi_lS7UM?<-oP#m-hS?>zSi}i&+u=qd zwNK2R`Mj4CjueyF2uu-0?p~g(UN_Kum40t~>p(xeL_j+_2Pwjo$NmZCU>b$biT~8 z!ipMujq>b0zfl43E|{j)f+MVMas~$p>{ zkBu#9c0?-Y?c=zl8tupvLfu#-Kb0HwpZe(C#~tyq(YIM9s^sT>`e(O$to}!r9rGRs;CPh#1U)o*p_+(`LLpfb+ zw3~Wv`|k%UbHL9r#X}!GM}f0YoGC_Pt@@n~Ou7bf$S6%Ddlste;NGhUH`Z4sQai7W z^^u&lPEMkPEofVYge7LFp;^qev0g9tF_7;N^kr)HclIY|W(c0VPQ1|s((%`&+4n=E z-{&}?2oJMc4^fcTBe8Z*-S&8Mk#HBUVS+ssfw&($6|!-%lceo`SWKcw-+S5iEqppJc8ek{9f*EkD-=1 zqHFeb#XLrlSh{;I8JUh0M~WZv!c1&iZXF^uFQ0nHeafb|5wP;$CftBfM?z%XI@V#t zq!L=S_ccwlhKlZ9U{&o3*@p)4ZzS-iD`U$Ft(P=kxC+^twr}1&PXSRn4!AChtgHn* z?A;jTbb0+*$I+>tsJK2IB$l8Uu_S0XIV9TZA58HjFi;B1MYKGkWY#8j&bt1~41Ij} zz<>&FpK3X8kS@(pL~htd37g-8whvqnN&GmTo_3R~`^#VM!plG|ZIdYW#s=9mjR^mK z$>VuhGdeW`7&lGTR+a%i$l{q$SIyJDi;rF84r#h<<{c`@exuQZvou6Y%lS6zQHFtPfDaLWf_NC|4H_xtNYkZI;nD9LvgXyNw-mHt8MiM3S3jwW~p#&r`zO@;KacPZ<40&WCVtE?*x}2xhqW z38Z|iXQ%4HL6h$g?m-lQ5lTmM(sp4-Jw>Hklq^lWAfnFb2igEr7Qv*x5zt3z?$U$E zXOEDbQ?Pp9Tcoc*UMHDDi^xECZqQ*0}&rdv=oerLrwAcE?K0@)p_aH)~{1Z zekJ#{3G(EkJCOrJc-<0&yphdIc~#A0FEsTVrXH~qe7e=`3}OicSfBu$`2g-TT|yU= z*TO?uKCV~q;edkasH=?^_3$n8e081T7HP^;UO@yatdXeEXE{2<8{KQ;c^$U<+v%0` z6iQZOv>SvtDh8GZ*?4+W@xeEVy@TYyWsiruzhT#6V&n7O4#Gy;8qaIu3m19TDn9(G zK*woFc)7*ox=ovZ`;wn^HrGi;PU0hE7Rf{?>H(U3gUg6VQT6ymSd$ce8Tp*}(762B z8r%nL4g!q-5XQOuKG9|2{=+srANtXDHS3init8`z zw&ibm+>MKbIHSpyW|x*GUUeqrl2DurZCk6`CbB%6qdAF84`wF;4vG^s3@EDPD4J5) z`G)+7Zc=N`U>%3?>#jj-_UW!KZ*hn zH^Vz?KBqAid0`C1Y>x-{VPp#+2#V!{l=wpklA~?9ro>z*VeSZP4$k3IC2@Yb^zjZW zMiu~ybO6*WHhg$@9?HIKTk9B7L1apA%N>_Ie@rr6I>MDVQFZL@C1h_rpdzvyib3P| zMaPZRtZ`&FyFRWzQP+?JFiGnqCPErOLyu>6*u;|j@Vz%c+Kh+M-C?TLEkE7#wnOCn>>HBF zIMYRn`a?K0Ut(@0V3YICPy?|G4D^V;8Qd( zimT;2Tp~mIhxX;uvS{#xUc=$J4y#x6aqw&KH?o|gamD5FI%odgD%2+I+dsK`)J8FRE-Zd9_heJPPj{v^3H zjxHc%KJd%I8Qzc>G1~gz%$8POb)CL`9y~FLI#nCt%%dV9Oz|>m?qW=+DsS5NKoRv^ z{AuYA&>W_-6$YI>yJD=0q<*&-t=t}Fu!MVPJ0;~e%R-tF0v7p~ca@s+)bY~sZr@Ob z42imo=5y4El0-gEb+hvwArg!2_;~FM`97NKNA=E3DUdSjtn+p^uJP2V2n5~&61o(U zPwhjvb$E_QRG9@0luBaSnu9{D!aup8usx!kKVH^wlHoPlPjI4%wfKGY7O zEN?Hl{3He1T|QtMeK(w4*Ba_cne$jUifJW4lLq-E$_DffJ1u8k;=ratBh;+H*F)c}W%zF{ikuE#R zX)@KRa_+K3j1Cs~(nAW%qp|++XoD4@uHc&Xkxg~^LvTM6v#j#YXAnlDMuo<3T$kR5 z{oO!oFKW2=9@EqNVtMM42MlpAw-=J>9z$(cjER!YeOmo@&;4BvPuouciNzq^ViWnz z`T;C?V~;a@eQ=5ZT9(IR8Qmsh>+WOuOiRDmqBV6Thvn-WEU9_Y;b}pbVeb()xJBKG z%z9IT(67m)PBz$@wkmX1fT7lst@FB9D6(}0#l%jAD zDC1f>p6m70YDPQ^>U*bfLo_Ozg5*nW+U>Wg8=skqHuFE8^-j&7C~`hwUl#iRyXg2(6jmlXJOMDayV44WZ}pg_lxm52Jh1 z;wc6)(r8}Bysl`Ge1@YC^n`Ct*tqa!BM(MzLq;~Fx7*w0IoWsr?!~D*+1Ua5yHS|@ zJlDFZcGFn3XNn`n?M3hJVqh>*Uh#msS<%w~Ct`-5nS>OmB2@?S<9F>B+t3x4Cn)%= zpZng{A)H|96-q9r9b5LqjLZyIk0RLk7Pm?&zo{FSk%otOA!js{1i z*zM9Iath2cM-!vH!s~;dCWJFWSH~)s%YeC?Zh!9F8<7Oxxp!L4%R+*s0JjEkAD??oTQerWByjR*p-cvSDjBn?p}@QC|9C|sS~7?g}zyY z+0#)OciROafL2&%2QB?w%oDzD><=~ac`l3(z`Q1%L4W{Ig7!`7y7|+4 zORioj9-u3s`Hk?4{B^_4(8S^cc$dVV$}@*47;IT$YZV$oRKFA&37r8n`GASNxaGO6 zXd2+Y#jhHQ_zYcOyn5i?c69~5J_LWtK3YH8;_E&A^F0DMBZG+mq)*g-k@$u91t<$J z(nfp+M2d`8tN>>C2w)n{dI0!lFd`R`jdu$EBcBLBss$$adpbbQ_`5LH$)Cv<{*~$` zK4surJtvWNno;-O>BY9a1R%fHzw)c={VSVXv#dW;{Sl||--~nqe@z$ut2}@?svY<| z9Ec)6r?~%iIod%^y;MT_eHobIxzbjkwd*H>Sh=QN>UytaDjbXjn2#z(lJw}8xjOlo z$ZvPF#gtv5UDD$gDjec-rAIy`+`6KhnHi%uQYBi{eD}5di~ac0m$|jnCnni}cS7$1 zchz-VZK72ygukYrsund{rlJNepls@8I$e&eMH`VVA;o;UL(Au)GS8kWda^02a%u*f zrEO#^mN;F8`M2;6N+R`I!c`BKs$z9D_DHg_#Jq4Qmsz45YSF$pk~>liC{@fSAJAp+ z_!fU7YxHo&)^v$7@IKDJGoJkxKXfpUa3nNBD-a}nv)5=h)~gHTI@3knWel~Ol}LAC zPJ64A;Hd!S#)PH&iFxE0I;=g6y5kFb!7~`7{5hTEQ{3L@em24NQp8eY!2uREkf!{2h= zVF}{vzHb^UHN;;(>(2y($h%#3;lq`p13K|}&jV(9&OI;T<)U;~syGTi6Y}4FQ(mCu zc|7iF$=+!2?PW4qU+|U474+eqldbyx0{Lc)P!qHvv7H^@MA-zi#>KW`b|CIt(9)Ni zl2w5z)VZ);727A$%8~d57kEjFf7K;{h4xyLF5q-4N==IP{-W%G!H8|rs279v9`?DG zf*qh(ggxRd6H@FBmG6QhEMLCYgfs8hTvfaLEo%^ z@YX@(Xrm552Rv1Yk;{_0EfgjcR*3xaD|N(D@%gdWF`A2KuIGDyKRQ2}VCKTfVg?&`Uru5kY9}TvY%t_9+9Zi8nhkQ~W&!a}NP@Ykj-&s*# zeh1ibcKU%WKkg{^k7p6<{GW0E>yNSt_I9WMEyWu^w-FTeuVAJB@3Q_V67)Y=#T{i6 z26C@jeC{Uq-W%jo+KQvb9cT8X&1+g z+-abq$qPmfV%iH1K2?arlTxGlimOwVp{U=FfQR!(st-agh3$+hO)v1hmog|$v#W}d z^_vbF6W$;eqsmPETA;{kf7d@AXeG>R1z##vY8Z*pE18zkx!t(=S+=`)cp4c_M35U% zM_p$BmZ0ji|G;S*|NcE};;Q9|bPa;>!c~|=gVQ-nItAjX_cCm)y7hPUCI4u}gwNdL z?i_FpJCuYe{b7aVx?}B9T-wxIH!ao21xZg&zl8Z~v9^vm@p0B5WF3#jt5E-}{P^XI{FP7Q zJ-%J=9Tt4%0h?PLC;eRFuy(&g=AZon_y zL+`WGq!v$TsO8j>m@GnO;R3H5wWXQJu1AM;#H99Vt>6h`HEQH65BQbyJ`@yWTQXb; zOzP(U?q1aP0gw)6hUQs9uJiZgfNY$AOVxfd+K=Q;OWTfyhjIRIk5GS9+%xhri;)~{ z8fxwH1!$&0;SA!e=+X-S@w-8%UmOE}Pdqq1y55wWhqg%38Ua+GpMG)D=hqBeCK6Sj zwWo@s^9OaDvmC+mxjV?qF*IP~|DWvs&!Qdb>#zPPD*td_Nsr3>u!n}13cffWAV$B# z?adzfVQe*VTqwi0k +Click the following link to see a video demonstrating Update Compliance features. -An overview of the processes used by the Update Compliance solution is provided below. +[![YouTube video demonstrating Update Compliance](images/UC-vid-crop.jpg)](https://www.youtube.com/embed/1cmF5c_R8I4) ## Update Compliance architecture From 2d70a27ab4121e618647254eb8730a5f4c345654 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 9 Feb 2018 10:07:35 -0800 Subject: [PATCH 033/106] fixed video links --- .../deployment/update/images/SAC_vid_crop.jpg | Bin 0 -> 20653 bytes windows/deployment/update/waas-overview.md | 11 +++++++---- windows/deployment/update/waas-quick-start.md | 11 +++++++---- 3 files changed, 14 insertions(+), 8 deletions(-) create mode 100644 windows/deployment/update/images/SAC_vid_crop.jpg diff --git a/windows/deployment/update/images/SAC_vid_crop.jpg b/windows/deployment/update/images/SAC_vid_crop.jpg new file mode 100644 index 0000000000000000000000000000000000000000..9d08215fc953b03acf4e8befd0c7c5ceafcac16f GIT binary patch literal 20653 zcmcG$1z1(h_bNw7GqWewnl-a#&6>~lYV>LrxFahmBMG3Opa2HoKj3N(g;c`L z(hLCP4VJqRf%da)0x;eYapSM}bX4TeI2s=(07OOo9S6$+oa`L@g6y1v?0i)00)kvT zf}Gs{H4p3$Fa#_C8^9Ex0u%vTzyxproB>BLeck!h1n?BNeG44}{nl*^3=B-n+gP|n zc(^z?xDN;j@rkG@XlNc%P*Kq_@vzb{a57R+u|Xbl@(BnF3)8YbkrWq{uU&`@un-Mo1N6bp(M_#U`{fAj7`4)I&}lnl|S?Fl%2BR^u$ zJSk})RPNiQcyN!9Dh?s5fe8LFCV{v;L~Rkl2Xz#vMQ=->Kd9_+QufP zX66=_R*p{2F0O9w9{z6v0^hz1f<;Bg#Ky%ZyoaZyXJlq&=j7&BFL61fI+lkZKx#d8)r#5FR+QPq%gj91mOpk~~gBYXh)F?FWu_?_(gJ4pYu=X+dWK zt^mw`B`GL~9s?@h46*Gw^ra>x|-neixF z*TF|iel!GUC*-IB+L(0tHscET!P$wtczmjMFz98mCB@=-bL=`lS>e42y4~dCQ{^N) z>1!e*u7FA`Bq6lG?KmqfmMYRW#EWq$+~D&g96Xt|%lD>{SHN?k3r0bT=m@ay`klrr zAix5OfBs_XXEClT;L~B!%szJM;_qZBZpzbAp54+~Kvq9KRS!Zm`iZ5-x?q(-5ci}- zxH}&scI)Tl{z2e&Hh(KYxkKwGz5nfqJSf>DGR4~zVL7UF&8^eEz7x(?-@aeB3 zpZ;qi|4^xuqQT__@_RpYmBjQ4@Fu!o`mz(~lvwS8#rV*$qs~4r0?Gy@9m)Jio78{r z^N*Fyhy9yba^!Z>12I+jdWCs6qQ|Pw8rtVShV}R1!C4n^N>xvT&;$g2AlZD)o zFxP%L>Gt}aEy=dihdJ8yV`S@)71IwjkyX2ii{Jnaa=MbLD*$6V=n4??f?NS8(HD$Y zz#G?Rpd3U~t^l8QB;iMbTy8nqSL6?D)m0*-3Pr1V1&hp}jY4VAAC!t$z&DfYsWM02 z2U*3-z5-@Bp#heCVk9ZMVXG;J=zq`@ek$dpc#a0nxl`1kR5V(m;K{$muPk$r~S3N%3$Zwlw zEor?MLf9fhsiG@#$f-4HIF@{0K-tq%ozq`o!??9+&XmMaQlTX#TRL3GhAQHmMNT!- z(~LN*aR{;%6@8IMQLbEqpWQiB%4LTluy1s62UD?3{0a~@z5>2V$VqU$v~;CLa8n+% zKoE;c#}<&45a>x;u0^Uq=49~Z4`?s(6|fU2HI{k>By(H=Gt`-BKFjeAkN<9i(##*} z)_Mi}28)BC!S&j{cB5bHg(J@hyx@3e3zV1pOxldN|K7=)@o(Z3%6PBSs<;`Q5Y^b6 zW7=nXuVsR~4LABrEsf*kEc=%qe|;NyIXC&@eWqZ~-Oqw4n@K{*-&mnL{otad9Mg8a zIMoJ8%LM08^6-mgDdyIyyNf48ce=JV(ZFtwaHn6m~KRs6*x++V7ezs&?x!FJ#3km)1# z>*u7o3n7rbKT0yq5txLS6QDe|)b>_9zxlJX%wLF5D{DaCfW5ac@Z+)(jtvD-1fTU*>NQ>rY5H<@* zQDADn)grJXH-X+ColbE(U9{;1%8*n}COQpwlEB4ktMiW7EerwTbLFKk97h?GLVHK) z4p)Giw-b@OE-SNc&SZ|$x3EuU9>DMxzeYpvs!5JSs{(_bX5GYCf zGlb-=tNEDH+@LrtR~f}lpiBI&9527WhU@Kip6K8ie(aTB7-+E)L?1M?U>|GXfKd?m z0<1u_D_)RqIq_XXciV>AY|$AZM6qxgeXgpOxuwB*S`Rs;$>vj(DjDgME-3mK6R1vd zg90P7n12(KG0o>^V9FfMG`CI>oI^pb3P2(X5{n5WIayQLJh?yMbtI7Eh&#I5SaET$ zCN~|NX^=S=>QAmXH4`C9_OzPf1dL>kxHYA8oaa4FIwo57lbbHmN{T8Fh!9_@AVm|( z;nJM6Zvvxj%~Qc8+pYA`1TimA=hJE{<+VOck5t7LE+IO9oWq>0 ztSX^aZyoSv7?`}g@~Ii7YgVOhc&M}Sn!i`Z{ZJqZW6Tg!k{|&7OF&7VL-dyEk!kS5 zjAKMYuYi#vc(o;p>4KjC`i~K{^y$mWZmsYgl_mQf)%Q~Yx!E+2!B%>{rNJ11>p;-& zZL8RyBmvMnHj@h;9;KhwWAfqs=J5mdC@mT|PPaOLannY6Md34A%4GdMw^A z_A`1B^dZUB-!d5pfDb8FFYkvOw6$2`%}~k${D#9Z4}2`BCj2H~-rRu>y3w zn*A2z0tB4w4d@>U)^Dqkm;s*f#|9N$m!wWgwCK)EO_}#pyP{XRUE~!p$4su-*1ebvwm?VpKr@Y}tg1$|4%mnv zpJ@21<~lyVv9TjT@B-yOgC@M9YHWpw5#svrd-&509jEp*t$B+NrkX}sO0}GYipjj} zj9E9_=sev;_bKplvWFQGi(mXH+y8v#3!09M7WcJNKN6KXqzKGc<_uKMu1>X&4qleB zlQ6f?2wZPt{?K`QbQ&30ZWUd#(IP9u4K7(uKNw>wY6OM7oCI*gEFuhtl>kU`Yb8j+ zs}O_%`8nWR;N3yiK=!$n*Y)>tYp;N!#}}alKnhNeFiEy~{rhml>CnKf_J!0UD^>7tQKlf_BTk zBfqj~Tz;HXgEK0=uqd&79k0H|?M3W#C>l#=0-BPB_2X_;HIS3eE8u8DpD<>@Ojqwm zjB>wf%>U4h*SfMi=EW_u8k?H?YoZrW&q;NUq;L4swY;Db3=}7(uBi%{&~3N%K#M(B zSJ9rFZTcRk+nKY@n3lTom#X_y<^AzwS<`@+3@Qa(PS(?00Z-3HbaaJ-zhENOhAoNo ztv`i5@pdNDUw@S4GRIJ-IOGZT&{@6+k0F`b!+3#HnAD15L86 zY-EVlT7JUmE3sX(l<4rIlyi>!tVt2a!(xS$Z()xvo@7M19j7;v>pq&4rvVW@a^h{Ih z2s5468j$qnXp&g$ZGKTsH4SVm0IV&vPaN@3bVAUra!8aXRa;h5J<8CNH zpz>2||L4jsq{P*A*XY+NIWyDiJR(ez`SLMJU|{E2LjXpt<6>0gM4x=XcQG|1E=`Skf5;M=OLKr(=>Z&J{$wEQi+T-7yynRz?d45<#UF@zOr)Palr z)$mZkQtx4=!zE>=W4!3Y*izPcRmy2wc{4>%M|)(Yx#1eP2WJjSXWr^5T2U#hLL8vZ zOz9^K>-D~?4R(XhDk2GeVcPA3ri_|Z_PH;0UmtwZ-!4YYQ<9MA`~(hnASf_YaQgfH zCzCfNoH44a+`{*8MMC8yxHp@IS}o&m&3BX34?k|Z0+iJA*@nLM<_YWFopTL8d8<8C zutLU}c6b-Yn9KN+kv|#w<=HfBv|qH4wi6jH`WyYGXp%8|CCzL zG|Z$-0_ZAb!gJKBB0Vb5!Vir75_nT3>WNI5dLm7Rb*+>dS`B}Z(ZZL*-LY+`4(TcBh_ zD^z4+8J;ac8K5QI&+$e=X_JZk$)MJQ@xt!*P6_A7h)K-gE%0#N8T)!69^Y7FHqe*4IK#`1T`7+TP~9j0*ts`6NjcPTV7XIv zG~Z@6lOasvjv_V96f6xZL)I4Zd5k{u| z+k(fhzT<(f+wn2bJr(k;m2hAfw~!=QSqmLiV!14*_CrF>YKDXafx0>IzcsLG%C0BQ zXJVi7adyN~mpk3*l}P@l0W*Zeo4YG?5hjQMDO+5frZNcvHS&-DM^l9J0UH;XUuu7D>z#d`M9OHx9x>Y~j}t@jDZ zi_2+nCqK^p2e>}24E=GI%EaSR{AwF&h4bzi2(@o#SAee&)fGURQCq^-hd~v!8pKwu zIQIssT@Cv5zL5v85@gc1q(y*ZM)%jsAeY3WhB4yHZ)H?DvSy*5q=}HNty+0{zNwb) zcrAsUod=K0)14@-A7|aAqjYnz*JkKWe^{iaWD5(s9p&~WXeQ@+o0V+Nehn@-?0;Lc zOj!38*W>Y_*g3Rlldr8j3OV*GumnEe=SXSEwSv>F4)9o{!M+XtTXkmUrrU^wOtfu2 zi0n`vyxiOL&G%}Oi#(H}kbEh4B1c0T`fyx&mC#2OWp#A8AB-^z;rs^hnlUR2vjp&81o;3 zd`Dh)+4#qHFAfsUo)%XAf;uL3T=#bTyG;HF4~mwe0aJ-M`p{bThP>mu9HD6u%hF*3 zJF8aHd5eYQ!Kz9U;=fn?v8tqjE#a`7W ziGW-R#?|y*&#dRDFm{Vn7fi-X%%=O8(l0Y`V}O`z(@J@Z3M~xpsmxE)(XVKgwM<=K zDkOYEHP1_+a=r5H5DXNBtir(ajny<*+3>Fh6| z?CaZPnxQqV3QSpvInt#P1XcLovF(MQ{`S(Sw4_}fEvH*PZ@mG|_-agxrqbHQo}$^H zDZ0WF*M37zDLh4{R1J=iSHp{n> zl<#rv!mn>n>FQ?Syr;2azvtJ1(lL9?bHjyqzm0G&j zNjZDM2H2P_O@yqerjNPdWXb{D4@YttXdrQaZ!QcaU7_siGrN`A$7-9{Q3f~In<^|1 zWhACr!3Ne&6bZGL2NbO1@<1HsKj6a8^xMpfp4%*&TK`h*fnlm?7YgZ>( zgw9C8eheKk(hh`Xa6YAxVUO*)<1WpPvD3}~5f6K`PA!kp&q}|pUK=A%KbRs z6>M!ywCqER%E8$C1X-{Z0NoECLQXyPY zJ+E(XeLy;C1->b>+{Jmcb4Ok{GsuyQZ4`GNFx_Zd5fLbIu6NF*!TZd)1yO1%3>c!9 z(_-ysywjFRp%#K}%D~UCp?Myr&bYMm00zypRP?;ZTBKX3h@JPf?2eZY#-f1pBnn2; zU7>|SQ#5#4_Ee{-OZ=U@vK$)gBJmq{97F>%L&;9S8@BJ048bpewk;(p5{ zu2`$#hhgaGVcT4w`}C%iQ`3|DDhEb>mg%|`-?Kryg30&BCeqYlv`*4#Axt<6*!Jt< z8}j8tS(UyI*(Z7;D^KfIPuxw8TGtxp)0IQzAUHv6OJ#{Yxb$wyuiHu%o%k7856K@n zk&y}6$jKm{c8&01mll2FWtT?C)g0~cJ{80BYV3|E5BH&VI9yrEs?f$VYcjZIsA!?8GDz3IyzK6reX@U{I7PlY zc1i3wsQ`r-ra9d%@f{EU5Tp0J=`^<&!mvD@-rul|%tFWcT(c1=nQ9@Gp+y#KeLrsY zrJf{hs1Mn_*B!arZY|Pl@Q^ipo`8ag_gQf+5}c3p+4#&_TFAvua$54e?Cvs)6T=Dj zm0f~QB160;&u2f_M=G&>d>zM1z%GHA6hzzi5qngCM6`zFf^iUw({kLMC>Xoy`7wk$ z)6bVW5VP3}PuQHNB%dvbwWnl-bpVV1#WOxOYO)wZDcky<8bqOyXF_I3vmO2if39YV z;dpci-$E~OIzoG+x3)HlaZ#tF^u?+R-_x@YG|5zRW%kJoj}YZP^&n52KD-M#YRV}( zD2+xws7vir(hEvk1#cI998JFRZovLX9} z9vQN*+mc|T-e-g0R9^uepIFV|j|Cp;p7kY++VpmS7e|;W2<1H!-=xyv-GmqHs~Pxb zv%{~_Mn(y@=BjJpPwfcP+MX~@9SEREEldvDkB+rlvi5)ZrotXb@X$d<*H1Ca3Zp{q zT_yIjy?4)Uk~lZfFzeks@Auj>AgP(Xdm%mVPjf=0I(+gsE_0Liq&J z_;Jv?RW$Or_wYSiMve0Ut$_^i7=7YaF6emHWvSdDc>N>-k`URFpf{a8{1Nf2J-Z^m zF^d7pp*6Uq6Eb@Vd_-|osE{kYw%y=?AUIo;5{fcHX=-)cO=7SOR+cGJ zoOZ26hmqE*&q9jsntm`bUw)a=^R9R)l$^I^jW*3(LpP8HlHFy2CcgO`$LoR7JP_B= z(Lq@EO;75EeVAjUI!$?bncmB>mm0NxW3io#qY6tsLLrnrWpqQfwCZ9dw33f$so7AA zW+%O=Gg36_qHeo>$4rdbUrdk)jKOvmt;0UcMry?H?vare?^o#?j6K_2 zGevl^y~8#(o5dLwzDtf+r9%8@v=pORlU5FssRxEtoEJ48q!2Bw&r`k^iaXoWO?6e> zUFeDp=Dl@Go?XD&w@Rg&qOQMx#*fGR1no>&9nZ1dgBP^_Ql;eQ)=d1xK1Yd&zarbR zN29qV6xe#^hAvtkz&i9b-kaeojD%oH-wO_4Na*IAwKeQS`)=s2Pj*ypy`nr}nSWBh z1&Bc+x$7+xH?IKm1H358F09qj77Jb#^)kr~OKq>o_~E!9VXm>-;zXABcfEHXcFfu= zl?voz;e@CQ9wimVCNlz?!y->nqExtdnyKrT{E4m%g|W z8p{StfqF0K)o`P$W=KwpmhVi3BAv_Lk3A$|xMSfu-wSRoU0X>e9gNhHmv16C6>FB` zx!F?KuQX1?Nrb8e9T}l_pDz18l6V!$tS35s+&FG-9Z(@rlkk1n_Th_1jUSu^ z7U$!7We4oy#@8>4m_Z6vcC$q(D?$74_iXb^9FbtW!4VTk zprhOZTl3Oc?(z=DqV3oS#aQ9mD;9-}04mdpuy1fL}9*{&$B*md4`^b1P+_gjR+x^bcETxuTxu^ zqr~cT?_}P-$oK^2M|ryDmXWYdhd+2T)lBPBX@jktgh(;whcJF)AW>gLsN=7D4lh;K z5b(`d?bB0eXS~jEG<0EX8EHH7-5K~|)HX4d2-wojIuXjw8-u401JHN#*98%wjtWUh z;;31{kd0h0$(Iqr7nAQ_DUx(NIzp|e(me9}gT#AtetXlM3(-S1ZGhFW`mRmc+q&mA5$wNcWE$^JsV~@*lm%95e zWA;W46QtdU#fg zjE$wwcBLt^lVBxz_a;=;Mnn>5mLfmuG8-+(@QST^`t3}?@nW@%usaDNRRy2S*xQU; zh?CCXnoG2JWhCr$Cf!b*YyE|L=X^i-j1WN zl-V-jF12=^lnQhkvo1A`i9~fYj!jDU9kU1x?r-oN=#=B}Gp^$!C2oFe;k1tq!7X?A zR8tSl4t=Ux8=4h)10E6T17YL6s{r}ZdMhtY=cPsIQ$tHZqWS<#lBYyx`o#RiBG%*; za>EgA<_61#0)`FKw@`9ThmUUaF2DXrcaQOzDoV@iN!+@=j>hGs)!@TQrh#U(N%@4j?om|R5DSE@hnrOw#bxcIn8IeZ;|G<2_tz{$W>c8@(JxqN*Y?z`{(%5lE3zst*;>H%7; zvd8HVkg=*12I%`L%H|OB{jBKfL}rUR*8X#anf`KXA;~KszW00^nrYFWyT|!)H{JZZ zM4a4y*=15d;=FETS?o#}l&OqsZ00O#QigS`wEX6h%BLL6_v7|oJgefABw1lnQY%S*>*$yaEtIfM8-Gp{-DO8D-DNd< zlwz-Tfrq}P^=Z8-A_%oRk|y4ugKSwu)8w^RvsjfY7Us7y_E3|9C;ok3EI#24u}1Yv z&+0XbW40HmE88y8 z^zO4s%Qr1a4+lvJlc#wvpVCN|-PIx_X2-@r1MaxZr&~|NS&Vi#-g|%VGLC^Zyh+J` zMEK?N{pJs6wi=?<{8`GM%fotFS(>7}ar3Rr#`9-9St-^<~olZ&;)YtY6D(sOGsU!wWE9e_w0taN7D|hwZ6dZYy z6cq<_5IVr>ot!pyw6*oWcRpsbcXu;4vL_R>|Ky1ntjSD0(^@`MOY9V|S&Tp7Vv%_$ z)|0UFP4sBQO{0NpvZ*#;SM?<+Bdvb@_OxGO)Dzhidd=CL&678g_OI%l z@p86$D;y3PoL^ftT;Gu7!QXe+wg|SZ*B9#KIeMSG2o&whbv#;Snya}t-rQxBQDqTj zVwrAfgw6t+kn=RJkhI7(C8rz8%+N0S$T=akI6j`yjwd8XD8@AzQfa|^TyKCJMbPSe z?ZS)nUph-Re7-P%#(z|>vlVB3W=mTo6=v~_Q=%GlWRQDO#!watTMHQ9)6Okne<#{o zxBIcm-1Vf&5#FmD8$8fpc{A8*%^IKcDekD|J<`ua*!C&sX0Juo?6$UEv8E`8^^<_h zl)*$9wVh&-W$N;i2-Dl+-UJhvwW=pWD9s&o8iVIs4{KMVqi5&?ho5x|yQ&BAl!LCV zB9+cj_G*X%Ug3SikJd_kRH573aq59XTD(jxCQMprK3?ej?L}_tU8EaQt|ALMfi)2k z7!hxXw-e~VN3O2grKs0d8D9U zO`P>|jTl+sotE9y@wPFT7Y|eKAsj_8+6OcsPnxY2v3VUg_+;#`ypm@n?g}nxuuLx0 zV}-YTii8P%TE~^pM-Ca=yVL%VVsW+kDjh^+E&#d#I9@2FyFR$j`&J1yeBat1cXY~? z)-&4Cz{|r!rP!#l-(OeC5dE@-_qttlIJ5dcUavEp- zlhG*-^9!W69@Y9WN9+g1>QK@6hOv7XqfsDVBB5ljb^7`%AjrK8 zHbt$$)PJYT^^TyA0=i1S5954@@_banEym`bP=Pcbfi1ZttuHZ9CL1Dimt2m+g)=4H z9mn?grfU!GwdWM&KZCqsH1W}Eh_*9}v2%Crc}IPZZ(-kfp9G0jCew87K|>lewK zuK->BGg8K1<7knfA2ay)cMs>3IB^r5g2|g5%Hdo$MWh7ccPF&wVNsrK`-20GyL@+B zis}MM2-Y)gy*ppqOuSp9OA}2_D;ko~q}~SmlM&aUxL1=rpjQbW@7;>>_a*L;bffh! z9xhqm4$tk)u;S3ynXNOq$WBKaB$d}gbrE51slubr%(QgqIvysH2-#=e>=DG7j`c0p z);_gA+$g-Ig}pER)F#pU!Wi&vC=7k9Ubd(1@8aB6=vzg1oNnlYCiGT-BIYaZk5}a- zghzv9wzfoFK_8Zkl)0)z63Jx>T>9X4xy9Dmlk3q^UIkRop4MWqEEz+lp*wu5%=cPe z^60Rhd&kWcd2dGJKJ)%Qcm*)^?7a;gpKUkHXj6auneN+cRVl)A1jFhh)_T)usZhrj zZCKZ)jFEy2_c&wW^J~f6aKQ)|ol`Y|=Vtq@pRkBpCQ^AkwvsEgHM?)&t^eiGAw^24 zE{Kkv#f`O-9!;8R76ENzzw4T)|1G@dvI&~#lgS>kk*U<|l2Wdw3@2Eq;T$bXFY4x; zbbSjOa-GqwLOk;> zKM$N-@pLuome-_EnEUUwUZ5zCvRx{4L)WsPOt8Y$pk=E)5Gxxp)9;sBOdD1NW6T%v zN&EXw0JRc?2@a|JBwSNw4_s@R}ugzi5c2jQSsz#)zH(ExeK z%SAqR)+U|X4eN!Il-gnaa|sFbjXnM;$8U4;)o{8?dr;bCh+^yq)q`dvpQ^h)8&uP@ zg;fWx-iR+j5}m8%$#ZjG&p_#Bb*6^5RzK=Sc!XBFG>D?gpRIJFTj70EcP7v@;0Niw z1Ma%mOkajtW8Z|jcFj0Lb2H!@c#9LoiG10n=WyqW`skXes;(=*9YnPr=gY8a;mkZ^ zEueU&$>3PUHl3A~28-KPRtIN~&`}Hl*Iu`b!rCjcZ7FR0Z;3Q7(ATYG`P0L- z{bK!K{2AR;_kS)*2qpv*bq>7WrVK!NofeP&qp$p&6m?!n4t(%dohUAe>B>HGxsJ$z z0L|)|SQPtmRd8mws($*2tMr;FB(l_#{G;>Db) ztt^Rn4#Y(s5jaQE5i&$SzSxH%7W)?ELEJ6~f&VIRWF;jb_cI9sr@zWmnx`P$+Cc~| z9Du7m)_K$G-M*^dM|e4k*C}!Hwhu5+u?HV z&>erdW9H(slb^XSVI_Yh>J2_$0V$SX0Wrdye278ab*g^HUuyI*WMy0*G5h1DN7L}6 zj61eoge^}$7FO@sQ6ln`r?Z{lgebauNr0>}OoUl5tZlKmn=x}T3>Lpxg^tv0KU2Pp zT0pwhFKOw{FNZsjGTD{tLVJlWau9T_7kki-;J4hK5q&CNzZa4_779ND^+zlbuEhye zS~h|lr_`;yYZVjWHM5>Ie=G?M1G4Gq|M*Q|_nDuY@~%AvE69fE+Ze zB5=S;*DVWs#;)d58i5yf$#`c<$7IE4vxm9@3zK=UL8fo7b*Id>;Vkf<`;VT1j zbv4OkCcd5BRAT7A!4Fa9rnFR1jOl?^yS==i2|ro+c9IzN>bJPcVGxB@7_m$;t4c%BMvbiR9(d+05EDIzp*P&isE zNA!si*W=pQEbiJS?_j@b?P_PbeFbO^^?QX4LOaX#PremF=c+D(JpRNB^LVI^REIsP z>T2_Dw+1oMd(auw@DflL_tt@hb93@b3CHe~gI=r@H|UP9+_4VyY>w!1mr0fpd_g&8 za|Nut0Sl&Yf<+D*A0uW}W0XvYOpL}So%|jn7L_l-!M+BAKRQ$?#VScL{}VGV{0>B% z>z}k`_en(Ph3r546J{PxPkFZVvpm?0@eL*1NCvR-Z=lzH1rD8|PLg28-L#9Ryf{z< z8{Z5^x@TV=$VuGCD*1d55pWZinL7ha-mj^lK*-sU`gBfLx+DNL(2Paem=Ke``s2^EwDF`>GM zl%9}&C9zu;-Jr21Y4Ha>`FF6MFM)GseTk(8mmk`V#!E%iY8`Hli5w9{`l>oh`(+tx zgTleHQar{S6L5GKlzyzy-JRm!+Uf^A_xeJKuM^v%BDD7zoQN zAf2?mT_8h7Rt;S`YutuK3^OYk3?-)p1xJw_Z{oU1ZXnYMh48 zGOJKIDBM)p9b`}*wB>n^vai9ey@E*J;hVRrsi9sz_cp5HS`s7^a@*W8ssa^!3{$wF zaz9*le|tLHwxdCUK>5Fda9&6Qar|ge76tnE^~v;D(?XEvvu9Q!pHn)bT{JlJm6ZJx zR~<%(=s_r1%@-t*4XEX71(oDOZ&>6Aq9_!Z{FafiIGJ*d&b>A%{s)*_g&uePQ`7A@ zGyK#e2AG$P8>J%h#~yXpcPC!vWlH�A%)VR%|!pfU}h(R_+?99^CTWx#EK{)(tEF z8PviT7KMsMve(pukd42sEHp?H8VCD14J4zh@r3mqw_KSxRP5l)#a{$-)_ zGWQ4*+6%f_bt{{zk?o@4U)bnCUxC^%B?z*U{xU!?Na8_M=weUVtq{^hQDO8$5R&tyGYrsqY-+&7Z-9@fETIg zbvu6)wDOPGV7F)}QrvQd9PB;5Jhb?`oJbz-(}ITdTQ!isoBONSagM+*-Tpz_J@b~z-O!CpuH>~-w#UM&LJoDI3klu7Z8Ty@RkRhpxry#{jutnrA75*mR zAN-s|BhR_LidK-G;C|~xDw6h3f>S{Le-g|9@^$>~9|SM{HH^O#Z1L+rOe-Q*`;I@S zobCKuO-`F97SxusH4#i9DG5LF9`cV)3}?g{RamxS%jyH19GYEBHWuVx{PFOHgF$+_F6)A z@`TswSISdPhJ>)zdu!@p9GarP%^Zw@-$JEJrSM%GK|yI5oR@9e8HK15{gKh{egN&& zxE3-q`cR6aCxOwY-_Gh+z}+33ouYPU;H}Fzd*?s0X^yC7mcm+UlD98C` z4$dH#7d#&~DS}`eFI_Lwy+D~pgJge~`nw$9LC^T#D{`Z(f-7qU`e#GjP>UI8FF4yz zc7LF!8HH$o-&p;X)Avj3V&ui|q%Nd+9-kk@gWnEvYox4?2W(hs_)K+)`|e}EMP$LA zfPS)uR^+2jMG*KFXl>5(cJ5Z|+d>Ekup%i89U38zd{af+O_Fn>RGZW!1LsoOPIo3k zeclHTcP7iJzH1gT=$SJm@hzI$EPYCHo$bc^!s0T`wYazg{U;|HM30tfndzIKZOW|6 z6p#x_i@Ez-C@pD(R4Mq$*Boi@bL4beP1b40 zMY66$J|J=_N>hB~Qt)mPEzHMH$YUr;a(zO+YG8c4|5k0>5XrPEHc>GZ1*d29mSO^n z!E#(xoHbbzYlU^9^w$Afq*4&kD~A#iGaha1gLP2G6>d6K#-@=5}xNvPjRD#hI2 z8hl_37w~Jw81F=gzF6a^o91PwF?e})l2?;Iyw@`Qp!R*_^L%^KeEhZ>e1zJ}%Ncw<$b$ep1wqF>&{fJz|7ke^K737rZhfUJhFL&D`1#$7JpZs(}15fUM7YkTv=k@C zx(CO0T6devdzCyjPB?2uXChU{^xZjr{P^eI-uMHAZmvw)8mv13Y0iYZ3fkh7e#0RBXe4+2HTH$q-( zpdh2ZdOtFjP~4K%t`;U3ttzKphqHKUHa9p|#CD$^vg!N5+o?%-(qgzN!^L50!Jjs2 zbLtQ+Q@u8>LyN{*$DL|rMLpW>g1=yEaCK%yKPMGO#G8L^m@Pe24PQS%$%nt-e0rpU zc=O0Qpwf>h=948|EZT>KRCFJvP=thY)_3oSR_w2qfodU!nhR9E7jEsyOvEh@DE0RCCG4_anxgBy~lDaGO=}$mQE`TEz7a zqX~T{6O#7zyGZvD^o-t7V_OWn0%WXv>G_KcVvQr3KC2D-`}?-IrOld~`89~Myaw8N zifM=A1l5yXSN6%dve3@bp7bpQGEZ1Ye2b&K9fOVb2yFwd zp#H2!x1^?1(eZeqDkX*0TeG#QklxyMQasI4y-ME{wtT#KKScI(6k|h+%OP##bY@i& z55hW!&4zXUOCUX*B<-D~js*yM^lw$nG&mYOAm?LnIb!O?mYcH{@+A#|Z>yTO(%#g? zM$(tc6j}#@pI1I1!H&{ux1{Rw0*1 zEndttJjFET4H3{$(2hUU9ty58-dzjppB}z#_gjT$P}Vz{@=t9N=srM;0^@_+nQh6N zB!&59_Y2dybFefEcUWm9;yd($sri7dRSePO3iSa^9cHJn5yc9wE8xL?>vEanC?8-< zo|@S8Ec z5w`_I%93wBLr;DP(Kh0=HF7P3>OqFZbTdIqeV)vm8Ysuz19P6#q z;sb8sh7G9%5o<_KdQbM&$4gy(rNW6l{bdVx|KV_Uk6~z%RFYKX+oRX#p|&%yD}d{1 z7ezVvuIyr6cwM9%lK*zl+T}vy3{GKiln(ZmvZA!2blr|NK^ZKPbSIZEcR%`wTMs3$CQjgFY>9v>GLJt;?5 zL&YmLk(_Eyu;rnf1VPp-f8VH!`2uKdwZ0IHO9Jl z_gS+pDyIlWL)LoZ%`!YoioP z#@HD!UjnV!H!p?}7x9n2$npyL52|{5Q4CWKwR}?h?9F`9Q&Zeik~aCR@9Bd| z6GhUd&*CpbTQ}6$!1FZBq02*8<|6Ks!PmI4&c-F;TxF@(9x%x-k*S(k_wJS$e0_6- zRAnmBgR=k0isyIE1vPMzJ_r4RKX9I%$P)#uX#S`Rckz|_I=rE!u7MqOAGVFS98JS$sx%nz8@wYBk6txSM4?>|SM}_z|Cw?#*;977hl*Qqy?WGZC0Sb;sZ@VImg#)S1T?=Z8*vym*^EDY6 z7z`&qZv-r->GRmicdQQ^8BGM=#&tYXCdo9-?-pLAxhMS>vp;t+GlYE zM2^a#F!+7|*SS8QBCaPCDo(_@WfJyv!KKGgN?Cj8(VId`Rb( zL#sviB+6>oHnS7_-#rc}E+3(I>L>DT^j>@l22E;$xc!AEUr9Dt^btHS;_eA2E)H(K z|8&bW+240O{BfrrhWS1`QB%RInUnYdx`6k#%)`Ft`6a})_(o&NP5C3B?psBI^Kn~DP>P~Ed1OPJT-{R zw#{ge4#B5bdx{O0Xo#?u`EDFRT*uRqJ&Na;pgZbhul^J+>EQorU=O=y!0BOf9O#yM z%DrZS9NJy)lCl26zvc^JX`$iYVU?^R(l&;EDPo(CtDn= zd%rbu^Q2d&j76-@&3!67S$bpX`E^_uq;4IGeLd^w+wP@DuUv|n#GJyr^!+5$+Eht*G-$7i|bnn@xd$^gh zqq5!R7kHGv{gqm=AWZ*Nx%j3ZPLlc0r$wghzO%^fB=?rbFK3;<{B`&2Qg7}RVehV& z*_}6fvaWtt)yfs>p6>)N<>no8E&nWGvZm+;(6vjW#eX#f*l#zvbjm=*W{3RyoU_c^ zwwvlMnd~(`{_>ZdH`8M`IroSuR;GTpuwUxCDC^hpn=RADC+*oZr&Xb5@rIW%_vSCR z+12G|+HG^>_RVWyccQmjtlMz+j{MKANH+T;7WwCMP5NdD?B8?jPRwbQbC)+udj9M# zJ?s8F#En&D@`@;->Ywd@H0{pK{|sDY3+!Xh|FFucbI(kh$fEC8QB_#zRnT)k=-whxzaP!X1vWo+cJA-K)y44G#$Kd%i9^UbyFB0~YpIK$ zRKLcb+iW7a?WKYK@B6<5*Yexn+upk->AUhxv{qu_R<|8H3Ba`j9x++&Z*;ih#cK_Mro&Q9CUF|mUPKem{bM|}7SM|TH zSi6UDnr~EHH`^rTw6^k@yMA@=H>|c#pMBNdD*aaNi{Jixlb+n(xyVzS|F_A#l|L_j z%iJ6Md0Fl9d;P!}lfoPIHjKc5tCpseX?Z^+(MtL6RIb7zy<&;EOMQyo({7I1ZXJXs(3$58bXaDXNK^AZTP ztny0bRd(||_NOObt+%q-X@B$2%Xy`8r3QQ2e->2%<8!+DZ~M8%z?SC%eZ_w<^WOjy z14!KG^NPuz;J=uWWAfSeePrZ%?8pNIx zVZL(N=1uupUqQ3Uyfx*erpa&0 +Click the following Microsoft Mechanics video for an overview of the release model, particularly the Semi-Annual Channel. + + +[![YouTube video of Michael Niehouse explaining how the Semi-Annual Channel works](images/SAC_vid_crop.jpg)](https://youtu.be/qSAsiM01GOU) ## Building diff --git a/windows/deployment/update/waas-quick-start.md b/windows/deployment/update/waas-quick-start.md index 5716edbdd3..8ea214bbb5 100644 --- a/windows/deployment/update/waas-quick-start.md +++ b/windows/deployment/update/waas-quick-start.md @@ -4,10 +4,10 @@ description: In Windows 10, Microsoft has streamlined servicing to make operatin ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library -author: DaniHalfin +author: Jaimeo ms.localizationpriority: high -ms.author: daniha -ms.date: 07/27/2017 +ms.author: jaimeo +ms.date: 02/09/2018 --- # Quick guide to Windows as a service @@ -58,7 +58,10 @@ See [Build deployment rings for Windows 10 updates](waas-deployment-rings-window ## Video: An overview of Windows as a service - +Click the following Microsoft Mechanics video for an overview of the updated release model, particularly the Semi-Annual Channel. + + +[![YouTube video of Michael Niehouse explaining how the Semi-Annual Channel works](images/SAC_vid_crop.jpg)](https://youtu.be/qSAsiM01GOU) ## Learn more From 761fa74dd37827f25ad263638ebcb4c71701ed65 Mon Sep 17 00:00:00 2001 From: Zach Dvorak Date: Fri, 9 Feb 2018 10:52:24 -0800 Subject: [PATCH 034/106] Update upgrade-readiness-upgrade-overview.md Made some clarifications based on user feedback. --- .../upgrade/upgrade-readiness-upgrade-overview.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md index d74712221f..f1e9422095 100644 --- a/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md +++ b/windows/deployment/upgrade/upgrade-readiness-upgrade-overview.md @@ -35,7 +35,7 @@ The following color-coded status changes are reflected on the upgrade overview b Click on a row to drill down and see details about individual computers. If KBs are missing, see [Deploy the compatibility update and related KBs](upgrade-readiness-get-started.md#deploy-the-compatibility-update-and-related-kbs) for information on required KBs. -In the following example, there is no delay in data processing, less than 4% of computers (6k\294k) have incomplete data, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: +In the following example, there is no delay in data processing, more than 10% of computers (6k\8k) have incomplete data, more than 30% of computers (6k/8k) require a KB update, there are no pending user changes, and the currently selected target OS version is the same as the recommended version: ![Upgrade overview](../images/ur-overview.png) @@ -43,9 +43,9 @@ In the following example, there is no delay in data processing, less than 4% of --> -If data processing is delayed, you can continue using your workspace as normal. However, any changes or additional information that is added might not be displayed. Data is typically refreshed and the display will return to normal again within 24 hours. +If data processing is delayed, the "Last updated" banner will indicate the date on which data was last updated. You can continue using your workspace as normal. However, any changes or additional information that is added might not be displayed until data is refreshed. When your workspace is in this state, there is no action required; data is typically refreshed and the display will return to normal again within 24 hours. -If there are computers with incomplete data, verify that you have installed the latest compatibilty update and run the most recent [Update Readiness deployment script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409) from the Microsoft download center. +If there are computers with incomplete data, verify that you have installed the latest compatibilty update KBs. Install the updated KBs if necessary and then run the most recent [Update Readiness deployment script](https://go.microsoft.com/fwlink/?LinkID=822966&clcid=0x409) from the Microsoft download center. The updated data payload should appear in Upgrade Readiness within 48 hours of a successful run on the deployment script. Select **Total computers** for a list of computers and details about them, including: From c720c9d93bd91b733ff61968cee3d3a5f8372afa Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Fri, 9 Feb 2018 19:41:32 +0000 Subject: [PATCH 035/106] Merged PR 5822: Merge msfb-updates to master video link fix --- store-for-business/add-profile-to-devices.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/store-for-business/add-profile-to-devices.md b/store-for-business/add-profile-to-devices.md index d63ff3800d..20536b0115 100644 --- a/store-for-business/add-profile-to-devices.md +++ b/store-for-business/add-profile-to-devices.md @@ -7,7 +7,7 @@ ms.sitesec: library ms.pagetype: store author: TrudyHa ms.author: TrudyHa -ms.date: 1/29/2018 +ms.date: 2/9/2018 ms.localizationpriority: high --- @@ -20,7 +20,7 @@ Windows AutoPilot Deployment Program simplifies device set up for IT Admins. For Watch this video to learn more about Windows AutoPilot in Micrsoft Store for Business.
-[!video https://www.microsoft.com/en-us/videoplayer/embed/3b30f2c2-a3e2-4778-aa92-f65dbc3ecf54?autoplay=false] +> [!video https://www.microsoft.com/en-us/videoplayer/embed/3b30f2c2-a3e2-4778-aa92-f65dbc3ecf54?autoplay=false] ## What is Windows AutoPilot Deployment Program? In Microsoft Store for Business, you can manage devices for your organization and apply an *AutoPilot deployment profile* to your devices. When people in your organization run the out-of-box experience on the device, the profile configures Windows based on the AutoPilot deployment profile you applied to the device. From 9efc8512976ed15c877ab54f2ab275342cc1b9a8 Mon Sep 17 00:00:00 2001 From: jsuther1974 Date: Fri, 9 Feb 2018 11:53:19 -0800 Subject: [PATCH 036/106] Update deploy-windows-defender-application-control-policy-rules-and-file-rules.md Fixed typo "inherit", not "inherent". Changed description for option 11 - Disabled:Script Enforcement to not currently supported --- ...efender-application-control-policy-rules-and-file-rules.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md b/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md index 3b2d35881e..891d33a3be 100644 --- a/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md +++ b/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md @@ -70,13 +70,13 @@ RuleOption -Help** in a Windows PowerShell session. Table 2 describes each rule | **2 Required:WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | | **3 Enabled:Audit Mode (Default)** | Enables the execution of binaries outside of the WDAC policy but logs each occurrence in the CodeIntegrity event log, which can be used to update the existing policy before enforcement. To begin enforcing a WDAC policy, delete this option. | | **4 Disabled:Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | -| **5 Enabled:Inherent Default Policy** | This option is not currently supported. | +| **5 Enabled:Inherit Default Policy** | This option is not currently supported. | | **6 Enabled:Unsigned System Integrity Policy (Default)** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | | **7 Allowed:Debug Policy Augmented** | This option is not currently supported. | | **8 Required:EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All future Windows 10 and later drivers will meet this requirement. | | **9 Enabled:Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **10 Enabled:Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | -| **11 Disabled:Script Enforcement** | WDAC policies also restrict scripts and MSIs, and PowerShell runs in constrained language mode. Enabling this rule option will allow unsigned scripts to run and will leave PowerShell in full language mode. | +| **11 Disabled:Script Enforcement** | This option is not currently supported. | | **12 Required:Enforce Store Applications** | If this rule option is enabled, WDAC policies will also apply to Universal Windows applications. | | **13 Enabled:Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as System Center Configuration Manager, that has been defined as a managed installer. | | **14 Enabled:Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | From 3220c69aa78aad8cf40500e04dafc5e7844573da Mon Sep 17 00:00:00 2001 From: shortpatti Date: Fri, 9 Feb 2018 13:35:52 -0800 Subject: [PATCH 037/106] changed the Applies to format --- browsers/edge/emie-to-improve-compatibility.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index 433e1061bf..e8a0eece50 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -13,14 +13,13 @@ ms.date: 07/27/2017 # Use Enterprise Mode to improve compatibility -**Applies to:** - -- Windows 10 +> Applies to: Windows 10 If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11. Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. + > **Note**
>If you want to use Group Policy to set Internet Explorer as your default browser, you can find the info here, [Set the default browser using Group Policy]( https://go.microsoft.com/fwlink/p/?LinkId=620714). From 2643efc51fc078993be5d827f466900f2380f631 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Fri, 9 Feb 2018 15:32:13 -0800 Subject: [PATCH 038/106] working in edge files; little to no changes have been made --- browsers/edge/emie-to-improve-compatibility.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index e8a0eece50..c9cd299705 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -97,7 +97,5 @@ You can add the **Send all intranet traffic over to Internet Explorer** Group Po * [Set the default browser using Group Policy]( https://go.microsoft.com/fwlink/p/?LinkId=620714)   -  - From 778e0b1beae4797e95bc63bdc5a0fd115d8fd8d9 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Fri, 9 Feb 2018 15:56:38 -0800 Subject: [PATCH 039/106] testing out a table format for the long list of Group Policy Settings to see if it's easier to scan through --- browsers/edge/available-policies.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 215e7cc5a8..60781088d9 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -10,12 +10,11 @@ ms.localizationpriority: high ms.date: 09/13/2017 --- + + # Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge -**Applies to:** - -- Windows 10 -- Windows 10 Mobile +> Applies to: Windows 10, Windows 10 Mobile Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. @@ -27,6 +26,12 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: + + +Group Policy Setting | Supported versions | Description +--- | --- | --- +Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable or don't configure this setting (default),employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this setting,employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. + ### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, version 1703 From 6ce945db8c9ded1c97260bee4f56ab4fb86e8759 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Fri, 9 Feb 2018 16:11:26 -0800 Subject: [PATCH 040/106] added a dropdown for the Group Policy Settings to see if it looks better than the table or the current presentation of the content --- browsers/edge/available-policies.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 60781088d9..e7f367bde9 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -26,12 +26,26 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: - + Group Policy Setting | Supported versions | Description --- | --- | --- Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable or don't configure this setting (default),employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this setting,employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. +
+
Allow Address bar drop-down list suggestions + +- **Supported versions:** Windows 10, version 1703 +- **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. + + - If you enable or don't configure this setting (default), employees can see the Address bar drop-down functionality in Microsoft Edge. + + - If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". + + > [!Note] + > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. +
+ ### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, version 1703 From 98c8b58347736c21dc36bc3d22136351cd21c1e1 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Sat, 10 Feb 2018 08:21:52 -0800 Subject: [PATCH 041/106] trying to create a drop-down so the user doesn't have to scroll so much --- browsers/edge/available-policies.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index e7f367bde9..470bd66f97 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -32,7 +32,7 @@ Group Policy Setting | Supported versions | Description --- | --- | --- Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable or don't configure this setting (default),employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this setting,employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. -
+
Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, version 1703 @@ -45,7 +45,7 @@ Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This p > [!Note] > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.
- +
### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, version 1703 From 0cbb5e49a34eff750b69fbe93d84bee488a33690 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Sat, 10 Feb 2018 09:07:59 -0800 Subject: [PATCH 042/106] more testing of a drop down for the GP settings --- browsers/edge/available-policies.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 470bd66f97..43a49f5e8e 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -28,13 +28,11 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A -Group Policy Setting | Supported versions | Description +Setting | Supported versions | Description --- | --- | --- Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable or don't configure this setting (default),employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this setting,employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. -
Allow Address bar drop-down list suggestions - - **Supported versions:** Windows 10, version 1703 - **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. @@ -45,7 +43,7 @@ Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This p > [!Note] > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.
-
+ ### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, version 1703 From 7414eeecf60e1fc98a4357b8e8e94f67c8860fcf Mon Sep 17 00:00:00 2001 From: shortpatti Date: Sun, 11 Feb 2018 08:52:36 -0800 Subject: [PATCH 043/106] commented out the drop down test section --- browsers/edge/available-policies.md | 23 +++++++++++++---------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 43a49f5e8e..ba29d404b5 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -32,17 +32,20 @@ Setting | Supported versions | Description --- | --- | --- Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable or don't configure this setting (default),employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this setting,employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. -
Allow Address bar drop-down list suggestions -- **Supported versions:** Windows 10, version 1703 -- **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. - - - If you enable or don't configure this setting (default), employees can see the Address bar drop-down functionality in Microsoft Edge. - - - If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". - - > [!Note] - > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. + ### Allow Address bar drop-down list suggestions - **Supported versions:** Windows 10, version 1703 From 89a6d43054e90fa3a2ad6f32bebe4622313164bb Mon Sep 17 00:00:00 2001 From: modcaster Date: Sun, 11 Feb 2018 14:55:55 -0500 Subject: [PATCH 044/106] 20180212 Update --- devices/surface/change-history-for-surface.md | 10 ++++++++-- .../surface/microsoft-surface-data-eraser.md | 19 +++++++++++++------ 2 files changed, 21 insertions(+), 8 deletions(-) diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md index d115d86ecf..a12b0c33f7 100644 --- a/devices/surface/change-history-for-surface.md +++ b/devices/surface/change-history-for-surface.md @@ -5,19 +5,25 @@ ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library author: jdeckerms -ms.date: 01/29/2018 +ms.date: 02/12/2018 --- # Change history for Surface documentation This topic lists new and updated topics in the Surface documentation library. +## February 2018 + +|New or changed topic | Description | +| --- | --- | +|[Microsoft Surface Data Eraser](microsoft-surface-data-eraser.md) | Added version 3.2.46.0 information | + ## January 2018 |New or changed topic | Description | | --- | --- | |[Windows AutoPilot and Surface devices](windows-autopilot-and-surface-devices.md) | New article | -|[Microsoft Surface Data Eraser](microsoft-surface-data-eraser.md) | Added version 3.2.45 information | +|[Microsoft Surface Data Eraser](microsoft-surface-data-eraser.md) | Added version 3.2.45.0 information | |[Surface device compatibility with Windows 10 Long-Term Servicing Channel (LTSC)](surface-device-compatibility-with-windows-10-ltsc.md) | Updated Current Branch (CB) or Current Branch for Business (CBB) servicing options with Semi-Annual Channel (SAC) information | |[Wake On LAN for Surface devices](wake-on-lan-for-surface-devices.md) | Added Surface Book 2, Surface Laptop, Surface Pro, Surface Pro with LTE Advanced, and Surface Pro information | diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index fd67224039..b1f7c26052 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -10,7 +10,7 @@ ms.pagetype: surface, devices, security ms.sitesec: library author: brecords ms.author: jdecker -ms.date: 01/03/2018 +ms.date: 02/12/2018 --- # Microsoft Surface Data Eraser @@ -139,25 +139,32 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo 8. Click the **Yes** button to continue erasing data on the Surface device. +>[!NOTE] +>When you run Surface Data Eraser on the Surface Data Eraser USB drive, a log file is generated in the **SurfaceDataEraserLogs** folder. + ## Changes and updates Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: -### Version 3.2.45 +### Version 3.2.46.0 +This version of Microsoft Surface Data Eraser adds support for the following: + +- Surface Pro with LTE Advanced + + +### Version 3.2.45.0 This version of Microsoft Surface Data Eraser adds support for the following: - Surface Book 2 -- Surface Pro with LTE Advanced - - Surface Pro 1TB >[!NOTE] ->Surface Data Eraser v3.2.45 and above can be used to restore Surface Pro or Surface Laptop devices with the 1TB storage option in the scenario that the device shows two separate 512GB volumes or encounters errors when attempting to deploy or install Windows 10. See [Surface Pro Model 1796 and Surface Laptop 1TB display two drives](https://support.microsoft.com/en-us/help/4046105/surface-pro-model-1796-and-surface-laptop-1tb-display-two-drives) for more information. +>Surface Data Eraser v3.2.45.0 and above can be used to restore Surface Pro or Surface Laptop devices with the 1TB storage option in the scenario that the device shows two separate 512GB volumes or encounters errors when attempting to deploy or install Windows 10. See [Surface Pro Model 1796 and Surface Laptop 1TB display two drives](https://support.microsoft.com/en-us/help/4046105/surface-pro-model-1796-and-surface-laptop-1tb-display-two-drives) for more information. -### Version 3.2.36 +### Version 3.2.36.0 This version of Microsoft Surface Data Eraser adds support for the following: From e3ea6ac828516e74628979afe9e994fc03e9040d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Feb 2018 17:35:49 +0000 Subject: [PATCH 045/106] Merged PR 5837: Added upgrade support info for LTSC Added upgrade support info for LTSC Also trimmed the table for better display --- .../upgrade/windows-10-edition-upgrades.md | 37 +++++++------ .../upgrade/windows-10-upgrade-paths.md | 55 +++++++++++++++++-- 2 files changed, 69 insertions(+), 23 deletions(-) diff --git a/windows/deployment/upgrade/windows-10-edition-upgrades.md b/windows/deployment/upgrade/windows-10-edition-upgrades.md index 359c1cb9bc..b139ec0d0a 100644 --- a/windows/deployment/upgrade/windows-10-edition-upgrades.md +++ b/windows/deployment/upgrade/windows-10-edition-upgrades.md @@ -8,7 +8,7 @@ ms.localizationpriority: high ms.sitesec: library ms.pagetype: mobile author: greg-lindsay -ms.date: 01/18/2018 +ms.date: 02/9/2018 --- # Windows 10 edition upgrade @@ -20,7 +20,7 @@ ms.date: 01/18/2018 With Windows 10, you can quickly upgrade from one edition of Windows 10 to another, provided the upgrade path is supported. For information on what edition of Windows 10 is right for you, see [Compare Windows 10 Editions](https://go.microsoft.com/fwlink/p/?LinkID=690882). For a comprehensive list of all possible upgrade paths to Windows 10, see [Windows 10 upgrade paths](windows-10-upgrade-paths.md). -The following table shows the methods and paths available to change the edition of Windows 10 that is running on your computer. Note that the reboot requirement for upgrading from Pro to Enterprise was removed in version 1607. +The following table shows the methods and paths available to change the edition of Windows 10 that is running on your computer. **Note**: The reboot requirement for upgrading from Pro to Enterprise was removed in version 1607. ![not supported](../images/x_blk.png) (X) = not supported
![supported, reboot required](../images/check_grn.png) (green checkmark) = supported, reboot required
@@ -46,25 +46,28 @@ X = unsupported
| **Home > Pro for Workstations** | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | | **Home > Pro Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | | **Home > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | -| **S > Pro** | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![supported, no reboot](../images/check_blu.png) (version 1709) | -| **S > Pro for Workstations** | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![supported, no reboot](../images/check_blu.png) (version 1709) | -| **S > Pro Education** | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png) (version 1709 - MSfB) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![not supported](../images/x_blk.png) | -| **S > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) (MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | -| **S > Enterprise** | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png) (version 1703 - PC), (version 1709 - MSfB) | ![supported, no reboot](../images/check_blu.png) (version 1709) | ![not supported](../images/x_blk.png) | -| **Pro > Pro for Workstations** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) (MSfB) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | -| **Pro > Pro Education** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) (MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | -| **Pro > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)) (MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | -| **Pro > Enterprise** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) (version 1703 - PC), (version 1709 - MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | -| **Pro for Workstations > Pro Education** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) (MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | -| **Pro for Workstations > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)) (MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | -| **Pro for Workstations > Enterprise** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) (version 1703 - PC), (version 1709 - MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | -| **Pro Education > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)) (MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | -| **Enterprise > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)) (MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **S > Pro** | ![supported, no reboot](../images/check_blu.png)
(1709) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![supported, no reboot](../images/check_blu.png)
(1709) | +| **S > Pro for Workstations** | ![supported, no reboot](../images/check_blu.png)
(1709) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![supported, no reboot](../images/check_blu.png)
(1709) | +| **S > Pro Education** | ![supported, no reboot](../images/check_blu.png)
(1709) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png)
(1709 - MSfB) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![not supported](../images/x_blk.png) | +| **S > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png)
(MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **S > Enterprise** | ![supported, no reboot](../images/check_blu.png)
(1709) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![not supported](../images/x_blk.png) | ![supported, no reboot](../images/check_blu.png)
(1703 - PC)
(1709 - MSfB) | ![supported, no reboot](../images/check_blu.png)
(1709) | ![not supported](../images/x_blk.png) | +| **Pro > Pro for Workstations** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
(MSfB) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | +| **Pro > Pro Education** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
(MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | +| **Pro > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)
(MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **Pro > Enterprise** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
(1703 - PC)
(1709 - MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | +| **Pro for Workstations > Pro Education** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
(MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | +| **Pro for Workstations > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)
(MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **Pro for Workstations > Enterprise** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
(1703 - PC)
(1709 - MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | +| **Pro Education > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)
(MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **Enterprise > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)
(MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **Enterprise LTSC > Enterprise** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)
(MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | +| **Pro for Workstations > Pro Education** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
(MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | | **Mobile > Mobile Enterprise** | ![supported, no reboot](../images/check_blu.png) |![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | > [!NOTE] > Each desktop edition in the table also has an N and KN SKU. These editions have had media-related functionality removed. Devices with N or KN SKUs installed can be upgraded to corresponding N or KN SKUs using the same methods. - +>
+>
Due to [naming changes](https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview#naming-changes) the term LTSB might still be displayed in some products. This name will change to LTSC with subsequent feature updates. ## Upgrade using mobile device management (MDM) - To upgrade desktop editions of Windows 10 using MDM, you'll need to enter the product key for the upgraded edition in the **UpgradeEditionWithProductKey** policy setting of the **WindowsLicensing** CSP. For more info, see [WindowsLicensing CSP](https://go.microsoft.com/fwlink/p/?LinkID=690907). diff --git a/windows/deployment/upgrade/windows-10-upgrade-paths.md b/windows/deployment/upgrade/windows-10-upgrade-paths.md index 4ac4288fcb..f3fa9fd3a5 100644 --- a/windows/deployment/upgrade/windows-10-upgrade-paths.md +++ b/windows/deployment/upgrade/windows-10-upgrade-paths.md @@ -20,14 +20,16 @@ ms.date: 01/18/2018 This topic provides a summary of available upgrade paths to Windows 10. You can upgrade to Windows 10 from Windows 7 or a later operating system. This includes upgrading from one release of Windows 10 to later release of Windows 10. Migrating from one edition of Windows 10 to a different edition of the same release is also supported. For more information about migrating to a different edition of Windows 10, see [Windows 10 edition upgrade](windows-10-edition-upgrades.md). ->**Windows 10 LTSB**: The upgrade paths displayed below do not apply to Windows 10 LTSB. In-place upgrade from Windows 7 or Windows 8.1 to Windows 10 LTSB is not supported. (Note that Windows 10 LTSB 2015 did not block this upgrade path. This was corrected in the Windows 10 LTSB 2016 release, which will now only allow data-only and clean install options.) +>**Windows 10 LTSC/LTSB**: Due to [naming changes](https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview#naming-changes), product versions that display Windows 10 LTSB will be replaced with Windows 10 LTSC in subsequent feature updates. The term LTSC is used here to refer to all long term servicing versions. + +>In-place upgrade from Windows 7, Windows 8.1, or Windows 10 semi-annual channel to Windows 10 LTSC is not supported. **Note**: Windows 10 LTSC 2015 did not block this upgrade path. This was corrected in the Windows 10 LTSC 2016 release, which will now only allow data-only and clean install options. You can upgrade from Windows 10 LTSC to Windows 10 semi-annual channel, provided that you upgrade to the same or a newer build version. For example, Windows 10 Enterprise 2016 LTSB can be upgraded to Windows 10 Enterprise version 1607 or later. >**Windows N/KN**: Windows "N" and "KN" SKUs follow the same upgrade paths shown below. If the pre-upgrade and post-upgrade editions are not the same type (e.g. Windows 8.1 Pro N to Windows 10 Pro), personal data will be kept but applications and settings will be removed during the upgrade process. ✔ = Full upgrade is supported including personal data, settings, and applications.
D = Edition downgrade; personal data is maintained, applications and settings are removed. - +
@@ -36,6 +38,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -51,6 +54,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -61,6 +65,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -71,6 +76,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -81,6 +87,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -91,6 +98,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -101,6 +109,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -114,6 +123,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -124,6 +134,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -134,6 +145,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -144,6 +156,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -154,6 +167,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -164,6 +178,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -174,6 +189,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -187,6 +203,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -197,6 +214,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -207,6 +225,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -217,6 +236,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -227,6 +247,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -237,6 +258,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -247,6 +269,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -257,6 +280,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -265,11 +289,12 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + - + @@ -280,6 +305,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -290,6 +316,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -300,6 +327,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -310,6 +338,18 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + + + + + + + + + + + + @@ -318,6 +358,7 @@ D = Edition downgrade; personal data is maintained, applications and settings ar + @@ -328,16 +369,18 @@ D = Edition downgrade; personal data is maintained, applications and settings ar +
       Windows 10 Pro Education Windows 10 Education Windows 10 EnterpriseWindows 10 Enterprise LTSC Windows 10 Mobile Windows 10 Mobile Enterprise
Home Basic
Home Premium
Professional✔
Ultimate✔
Enterprise✔
Windows 8
Professional✔
Professional WMC✔
Enterprise✔
Embedded Industry✔
Windows RT
Windows Phone 8
Windows 8.1
Connected
Professional✔
Professional Student✔
Professional WMC✔
Enterprise✔
Embedded Industry✔
Windows RT
Windows Phone 8.1 ✔
Windows 10Windows 10
Home
Professional✔
EducationD
Enterprise✔
Enterprise LTSC✔✔
Mobile ✔ ✔
D ✔
+ ## Related Topics -[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md)
-[Windows upgrade and migration considerations](windows-upgrade-and-migration-considerations.md) -  +[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md)
+[Windows upgrade and migration considerations](windows-upgrade-and-migration-considerations.md)
+[Windows 10 edition upgrade](windows-10-edition-upgrades.md) From 90a5f5582326176eaa81adc92f21a6e591fa7ce3 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 12 Feb 2018 19:16:09 +0000 Subject: [PATCH 046/106] Merged PR 5842: Update telemetry topic for 13 Feb update --- ...el-windows-diagnostic-events-and-fields.md | 245 ++++++++++++++---- ...change-history-for-configure-windows-10.md | 3 +- 2 files changed, 190 insertions(+), 58 deletions(-) diff --git a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md index 7db5063374..eac9fde18a 100644 --- a/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md +++ b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md @@ -1,5 +1,5 @@ --- -description: Use this article to learn more about what Windows diagnostic data is gathered at the basic level. +description: Learn more about the Windows diagnostic data that is gathered at the basic level. title: Windows 10, version 1709 basic diagnostic events and fields (Windows 10) keywords: privacy, diagnostic data ms.prod: w10 @@ -9,7 +9,7 @@ ms.pagetype: security localizationpriority: high author: eross-msft ms.author: lizross -ms.date: 10/26/2017 +ms.date: 02/12/2018 --- @@ -101,7 +101,7 @@ The following fields are available: - **epoch** Represents the epoch and seqNum fields, which help track how many events were fired and how many events were uploaded, and enables identification of data lost during upload and de-duplication of events on the ingress server. - **seqNum** Represents the sequence field used to track absolute order of uploaded events. It is an incrementing identifier for each event added to the upload queue.  The Sequence helps track how many events were fired and how many events were uploaded and enables identification of data lost during upload and de-duplication of events on the ingress server. - **iKey** Represents an ID for applications or other logical groupings of events. -- **flags** Represents a collection of bits that describe how the event should be processed by the Connected User Experience and Telemetry component pipeline. The lowest-order byte is the event persistence. The next byte is the event latency. +- **flags** Represents a collection of bits that describe how the event should be processed by the Connected User Experiences and Telemetry component pipeline. The lowest-order byte is the event persistence. The next byte is the event latency. - **os** Represents the operating system name. - **osVer** Represents the OS version, and its format is OS dependent. - **appId** Represents a unique identifier of the client application currently loaded in the process producing the event; and is used to group events together and understand usage pattern, errors by application. @@ -255,7 +255,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.RunContext -"This event indicates what should be expected in the data payload. " +This event indicates what should be expected in the data payload. The following fields are available: @@ -1604,6 +1604,39 @@ The following fields are available: - **SocketCount** Number of physical CPU sockets of the machine. +### Census.Security + +This event provides information on about security settings used to help keep Windows up-to-date and secure. + +- **AvailableSecurityProperties** Enumerates and reports state on the relevant security properties for Device Guard. +- **CGRunning** Is Credential Guard running? +- **DGState** A summary of the Device Guard state. +- **HVCIRunning** Is HVCI running? +- **IsSawGuest** Describes whether the device is running as a Secure Admin Workstation Guest. +- **IsSawHost** Describes whether the device is running as a Secure Admin Workstation Host. +- **RequiredSecurityProperties** Describes the required security properties to enable virtualization-based security. +- **SecureBootCapable** Is this device capable of running Secure Boot? +- **VBSState** Is virtualization-based security enabled, disabled, or running? + + +### Census.Speech + +This event is used to gather basic speech settings on the device. + +The following fields are available: + +- **AboveLockEnabled** Cortana setting that represents if Cortana can be invoked when the device is locked. +- **GPAllowInputPersonalization** Indicates if a Group Policy setting has enabled speech functionalities. +- **HolographicSpeechInputDisabled** Holographic setting that represents if the attached HMD devices have speech functionality disabled by the user. +- **HolographicSpeechInputDisabledRemote** Indicates if a remote policy has disabled speech functionalities for the HMD devices. +- **KWSEnabled** "Cortana setting that represents if a user has enabled the ""Hey Cortana"" keyword spotter (KWS)." +- **MDMAllowInputPersonalization** Indicates if an MDM policy has enabled speech functionalities. +- **RemotelyManaged** Indicates if the device is being controlled by a remote admininistrator (MDM or Group Policy) in the context of speech functionalities. +- **SpeakerIdEnabled** Cortana setting that represents if keyword detection has been trained to try to respond to a single user's voice. +- **SpeechServicesEnabled** Windows setting that represents whether a user is opted-in for speech services on the device. + + + ### Census.Storage This event sends data about the total capacity of the system volume and primary disk, to help keep Windows up to date. @@ -1614,34 +1647,6 @@ The following fields are available: - **PrimaryDiskType** Retrieves an enumerator value of type STORAGE_BUS_TYPE that indicates the type of bus to which the device is connected. This should be used to interpret the raw device properties at the end of this structure (if any). - **SystemVolumeTotalCapacity** Retrieves the size of the partition that the System volume is installed on in MB. - -### Census.VM - -This event sends data indicating whether virtualization is enabled on the device, and its various characteristics, to help keep Windows up to date. - -The following fields are available: - -- **CloudService** Indicates which cloud service, if any, that this virtual machine is running within. -- **HyperVisor** Retrieves whether the current OS is running on top of a Hypervisor. -- **IOMMUPresent** Represents if an input/output memory management unit (IOMMU) is present. -- **isVDI** Is the device using Virtual Desktop Infrastructure? -- **IsVirtualDevice** Retrieves that when the Hypervisor is Microsoft's Hyper-V Hypervisor or other Hv#HASH#1 Hypervisor, this field will be set to FALSE for the Hyper-V host OS and TRUE for any guest OS's. This field should not be relied upon for non-Hv#HASH#1 Hypervisors. -- **SLATSupported** Represents whether Second Level Address Translation (SLAT) is supported by the hardware. -- **VirtualizationFirmwareEnabled** Represents whether virtualization is enabled in the firmware. - - -### Census.Xbox - -This event sends data about the Xbox Console, such as Serial Number and DeviceId, to help keep Windows up to date. - -The following fields are available: - -- **XboxConsolePreferredLanguage** Retrieves the preferred language selected by the user on Xbox console. -- **XboxConsoleSerialNumber** Retrieves the serial number of the Xbox console. -- **XboxLiveDeviceId** Retrieves the unique device id of the console. -- **XboxLiveSandboxId** Retrieves the developer sandbox id if the device is internal to MS. - - ### Census.Userdefault This event sends data about the current user's default preferences for browser and several of the most popular extensions and protocols, to help keep Windows up to date. @@ -1664,6 +1669,25 @@ The following fields are available: - **KeyboardInputLanguages** The Keyboard input languages installed on the device. - **SpeechInputLanguages** The Speech Input languages installed on the device. +### Census.VM + +This event sends data indicating whether virtualization is enabled on the device, and its various characteristics, to help keep Windows up to date. + +The following fields are available: + +- **CloudService** Indicates which cloud service, if any, that this virtual machine is running within. +- **HyperVisor** Retrieves whether the current OS is running on top of a Hypervisor. +- **IOMMUPresent** Represents if an input/output memory management unit (IOMMU) is present. +- **isVDI** Is the device using Virtual Desktop Infrastructure? +- **IsVirtualDevice** Retrieves that when the Hypervisor is Microsoft's Hyper-V Hypervisor or other Hv#HASH#1 Hypervisor, this field will be set to FALSE for the Hyper-V host OS and TRUE for any guest OS's. This field should not be relied upon for non-Hv#HASH#1 Hypervisors. +- **SLATSupported** Represents whether Second Level Address Translation (SLAT) is supported by the hardware. +- **VirtualizationFirmwareEnabled** Represents whether virtualization is enabled in the firmware. + + + + + + ### Census.WU @@ -1695,34 +1719,18 @@ The following fields are available: - **WUPauseState** Retrieves WU setting to determine if updates are paused - **WUServer** Retrieves the HTTP(S) URL of the WSUS server that is used by Automatic Updates and API callers (by default). +### Census.Xbox -### Census.Speech - -This event is used to gather basic speech settings on the device. +This event sends data about the Xbox Console, such as Serial Number and DeviceId, to help keep Windows up to date. The following fields are available: -- **AboveLockEnabled** Cortana setting that represents if Cortana can be invoked when the device is locked. -- **GPAllowInputPersonalization** Indicates if a Group Policy setting has enabled speech functionalities. -- **HolographicSpeechInputDisabled** Holographic setting that represents if the attached HMD devices have speech functionality disabled by the user. -- **HolographicSpeechInputDisabledRemote** Indicates if a remote policy has disabled speech functionalities for the HMD devices. -- **KWSEnabled** "Cortana setting that represents if a user has enabled the ""Hey Cortana"" keyword spotter (KWS)." -- **MDMAllowInputPersonalization** Indicates if an MDM policy has enabled speech functionalities. -- **RemotelyManaged** Indicates if the device is being controlled by a remote admininistrator (MDM or Group Policy) in the context of speech functionalities. -- **SpeakerIdEnabled** Cortana setting that represents if keyword detection has been trained to try to respond to a single user's voice. -- **SpeechServicesEnabled** Windows setting that represents whether a user is opted-in for speech services on the device. +- **XboxConsolePreferredLanguage** Retrieves the preferred language selected by the user on Xbox console. +- **XboxConsoleSerialNumber** Retrieves the serial number of the Xbox console. +- **XboxLiveDeviceId** Retrieves the unique device id of the console. +- **XboxLiveSandboxId** Retrieves the developer sandbox id if the device is internal to MS. -### Census.Security -This event provides information on about security settings used to help keep Windows up-to-date and secure. - -- **AvailableSecurityProperties** Enumerates and reports state on the relevant security properties for Device Guard. -- **CGRunning** Is Credential Guard running? -- **DGState** A summary of the Device Guard state. -- **HVCIRunning** Is HVCI running? -- **RequiredSecurityProperties** Describes the required security properties to enable virtualization-based security. -- **SecureBootCapable** Is this device capable of running Secure Boot? -- **VBSState** Is virtualization-based security enabled, disabled, or running? ## Diagnostic data events @@ -1812,7 +1820,7 @@ The following fields are available: - **LastEventSizeOffender** The name of the last event that exceeded the maximum event size. - **LastInvalidHttpCode** The last invalid HTTP code received from Vortex. - **MaxActiveAgentConnectionCount** The maximum number of active agents during this heartbeat timeframe. -- **MaxInUseScenarioCounter** The soft maximum number of scenarios loaded by the Connected User Experience and Telemetry component. +- **MaxInUseScenarioCounter** The soft maximum number of scenarios loaded by the Connected User Experiences and Telemetry component. - **PreviousHeartBeatTime** The time of last heartbeat event. This allows chaining of events. - **SettingsHttpAttempts** The number of attempts to contact the OneSettings service. - **SettingsHttpFailures** The number of failures from contacting the OneSettings service. @@ -1990,8 +1998,9 @@ The following fields are available: This event provides data on the installed Office Add-ins. -- **AddInCLSID** The CLSID key office the Office addin. -- **AddInId** The ID of the Office addin. +- **AddInCLSID** The CLSID key office for the Office addin. +- **AddInId** The identifier of the Office addin. +- **AddinType** The type of the Office addin. - **BinFileTimestamp** The timestamp of the Office addin. - **BinFileVersion** The version of the Office addin. - **Description** The description of the Office addin. @@ -2004,8 +2013,58 @@ This event provides data on the installed Office Add-ins. - **OfficeArchitecture** The architecture of the addin. - **OfficeVersion** The Office version for this addin. - **OutlookCrashingAddin** A boolean value that indicates if crashes have been found for this addin. +- **ProductCompany** The name of the company associated with the Office addin. +- **ProductName** The product name associated with the Office addin. +- **ProductVersion** The version associated with the Office addin. +- **ProgramId** The unique program identifier of the Office addin. - **Provider** The provider name for this addin. +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeAddInRemove + +This event indicates that the particular data object represented by the objectInstanceId is no longer present. + +There are no fields in this event. + + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeInsightsAdd + +This event provides insight data on the installed Office products. + +The following fields are available: + +- **OfficeApplication** The name of the Office application. +- **OfficeArchitecture** The bitness of the Office application. +- **OfficeVersion** The version of the Office application. +- **Value** The insights collected about this entity. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeInsightsRemove + +This event indicates that the particular data object represented by the objectInstanceId is no longer present. + +There are no fields in this event. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeInsightsStartSync + +This diagnostic event indicates that a new sync is being generated for this object type. + +There are no fields in this event. + + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeSettingsAdd + +This event describes various Office settings. + +The following fields are available: + +- **BrowserFlags** Browser flags for Office-related products. +- **ExchangeProviderFlags** Provider policies for Office Exchange. +- **SharedComputerLicensing** Office shared computer licensing policies. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeSettingsStartSync + +Diagnostic event to indicate a new sync is being generated for this object type. + +There are no fields in this event. ### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeVBAAdd @@ -2036,6 +2095,18 @@ The following fields are available: - **Validation_x64** Count of files that require additional manual validation for 64-bit issues +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeVBARemove + +This event indicates that the particular data object represented by the objectInstanceId is no longer present. + +There are no fields in this event. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeVBARuleViolationsRemove + +This event indicates that the particular data object represented by the objectInstanceId is no longer present. + +There are no fields in this event. + ### Microsoft.Windows.Inventory.Core.InventoryApplicationFrameworkStartSync This event indicates that a new set of InventoryApplicationFrameworkAdd events will be sent @@ -2412,6 +2483,66 @@ This event indicates that a new sync is being generated for this object type. There are no fields in this event. +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeIdentifiersAdd + +This event provides data on the installed Office identifiers. + +- **OAudienceData** The Office Audience descriptor. +- **OAudienceId** The Office Audience ID. +- **OMID** The Office machine ID. +- **OPlatform** The Office architecture. +- **OVersion** The Office version +- **OTenantId** The Office 365 Tenant GUID. +- **OWowMID** The Office machine ID. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeIdentifiersStartSync + +This event indicates that a new sync is being generated for this object type. + +There are no fields in this event. + + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeIESettingsAdd + +This event provides data on the installed Office-related Internet Explorer features. + +- **OIeFeatureAddon** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeMachineLockdown** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeMimeHandling** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeMimeSniffing** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeNoAxInstall** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeNoDownload** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeObjectCaching** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIePasswordDisable** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeSafeBind** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeSecurityBand** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeUncSaveCheck** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeValidateUrl** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeWebOcPopup** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeWinRestrict** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). +- **OIeZoneElevate** For more information, see the Office-related [Internet Feature Control Keys](https://msdn.microsoft.com/en-us/library/ee330720.aspx). + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeIESettingsStartSync + +This event indicates that a new sync is being generated for this object type. + +There are no fields in this event. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeProductsAdd + +This event describes the Office products that are installed. + +- **OC2rApps** The Office Click-to-Run apps. +- **OC2rSkus** The Office Click-to-Run products. +- **OMsiApps** The Office MSI apps. +- **OProductCodes** The Office MSI product code. + +### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeProductsStartSync + +This event indicates that a new sync is being generated for this object type. + +There are no fields in this event. + ### Microsoft.Windows.Inventory.General.InventoryMiscellaneousOfficeVBARuleViolationsStartSync This event indicates that a new sync is being generated for this object type. diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index eef0a970c9..144f6425e6 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms -ms.date: 02/08/2018 +ms.date: 02/12/2018 --- # Change history for Configure Windows 10 @@ -19,6 +19,7 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md) New or changed topic | Description --- | --- +[Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) | Added events and fields that were added in the February update. [Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) | Added steps for configuring a kiosk in Microsoft Intune. [Customize Windows 10 Start and taskbar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md) | Updated the instructions for applying a customized Start layout using Microsoft Intune. From dba2af44fae290f5f06e5f7915525e153dfa6dbc Mon Sep 17 00:00:00 2001 From: shortpatti Date: Mon, 12 Feb 2018 13:07:46 -0800 Subject: [PATCH 047/106] adding comments to the reviewers for clarity purposes --- browsers/edge/available-policies.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index ba29d404b5..7dee5755f6 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -30,7 +30,7 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A Setting | Supported versions | Description --- | --- | --- -Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable or don't configure this setting (default),employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this setting,employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. +Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable this setting (default)Employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this settingEmployees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. +Group Policy settings +--------------------- -Setting | Supported versions | Description ---- | --- | --- -Allow Address bar drop-down list suggestions | Windows 10, version 1703 | This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable this setting (default)Employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this settingEmployees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."
Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. - - +Microsoft Edge works with these Group Policy settings (`Computer +Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to +help you manage your company's web browser configurations: ### Allow Address bar drop-down list suggestions -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. - - - If you enable or don't configure this setting (default), employees can see the Address bar drop-down functionality in Microsoft Edge. - - - If you disable this setting, employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type". - - > [!Note] - > Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. +> Supported versions: Windows 10, version 1703 +This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable this setting (default)Employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this settingEmployees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."

Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

+ ### Allow Adobe Flash -- **Supported versions:** Windows 10 or later +> Supported version: Windows 10 -- **Description:** This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge. - - - If you enable or don't configure this setting (default), employees can use Adobe Flash. - - - If you disable this setting, employees can't use Adobe Flash. +This policy setting lets you decide whether employees can run Adobe Flash on Microsoft Edge.
If you…Then…
Enable or don’t configure this setting (default)Employees can use Adobe Flash.
Disable this settingmployees cannot use Adobe Flash.
### Allow clearing browsing data on exit -- **Supported versions:** Windows 10, version 1703 +> Supported versions: Windows 10, version 1703 -- **Description:** This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. - - - If you enable this policy setting, clearing browsing history on exit is turned on. - - - If you disable or don't configure this policy setting (default), it can be turned on and configured by the employee in the Clear browsing data options area, under Settings. +This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes.
If you…Then…
Enable this settingClear browsing history on exit is turned on. [can employees do anything to this setting at this point? Or is this controlled by the system administrator?]
Disable or don’t configure this setting (default)Employees can turn on and configure the Clear browsing data option under Settings.
### Allow Developer Tools -- **Supported versions:** Windows 10, version 1511 or later +> Supported versions: Windows 10, version 1511 or later -- **Description:** This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. - - If you enable or don’t configure this setting (default), the F12 Developer Tools are available in Microsoft Edge. - - - If you disable this setting, the F12 Developer Tools aren’t available in Microsoft Edge. +This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.
If you…Then…
Enable this setting (default)The F12 Developer Tools are available on Microsoft Edge.
Disable this settinghe F12 Developer Tools are not available on Microsoft Edge.
### Allow Extensions -- **Supported versions:** Windows 10, version 1607 or later +> Supported versions: Windows 10, version 1607 or later -- **Description:** This policy setting lets you decide whether employees can use Edge Extensions. - - - If you enable or don’t configure this setting, employees can use Edge Extensions. - - - If you disable this setting, employees can’t use Edge Extensions. +This policy setting lets you decide whether employees can use Edge Extensions.
+
If you…Then…
Enable this settingEmployees can use Edge Extensions.
Disable this setting [why would a company disable this setting?]mployees cannot use Edge Extensions.
### Allow InPrivate browsing -- **Supported versions:** Windows 10, version 1511 or later - -- **Description:** This policy setting lets you decide whether employees can browse using InPrivate website browsing. - - - If you enable or don’t configure this setting (default), employees can use InPrivate website browsing. - - - If you disable this setting, employees can’t use InPrivate website browsing. - -### Allow Microsoft Compatibility List -- **Supported versions:** Windows 10, version 1607 or later - -- **Description:** This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. - - - If you enable or don’t configure this setting (default), Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site is automatically rendered as though it’s in whatever version of IE is necessary for it to appear properly. - - - If you disable this setting, the Microsoft Compatibility List isn’t used during browser navigation. - -### Allow search engine customization -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you decide whether users can change their search engine. - - >[!Important] - >This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). - - - If you enable or don't configure this policy (default), users can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings. - - - If you disable this setting, users can't add search engines or change the default used in the address bar. - -### Allow web content on New Tab page -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it. - - - If you enable this setting, Microsoft Edge opens a new tab with the New Tab page. - - - If you disable this setting, Microsoft Edge opens a new tab with a blank page. - - - If you don’t configure this setting (default), employees can choose how new tabs appears. - -### Configure additional search engines -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees, but can be made a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. - - > [!Important] - > This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). - - - If you enable this setting, you can add up to 5 additional search engines. For each additional engine, you must also add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine, using this format: - - https://www.contoso.com/opensearch.xml - - For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. - - - If you disable this setting (default), any added search engines are removed from your employee's devices. - - - If you don't configure this setting, the search engine list is set to what is specified in App settings. - -### Configure Autofill -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill. - - - If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge. - - - If you disable this setting, employees can’t use Autofill to automatically fill in forms while using Microsoft Edge. - - - If you don’t configure this setting (default), employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge. - -### Configure cookies -- **Supported versions:** Windows 10 or later - -- **Description:** This setting lets you configure how to work with cookies. - - - If you enable this setting, you must also decide whether to: - - **Allow all cookies (default):** Allows all cookies from all websites. - - - **Block all cookies:** Blocks all cookies from all websites. - - - **Block only 3rd-party cookies:** Blocks only cookies from 3rd-party websites. - - - If you disable or don't configure this setting, all cookies are allowed from all sites. - -### Configure Do Not Track -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests aren’t sent, but employees can choose to turn on and send requests. - - - If you enable this setting, Do Not Track requests are always sent to websites asking for tracking info. - - - If you disable this setting, Do Not Track requests are never sent to websites asking for tracking info. - - - If you don’t configure this setting (default), employees can choose whether to send Do Not Track requests to websites asking for tracking info. - -### Configure Favorites -- **Supported versions:** Windows 10, version 1511 or later - -- **Description:** This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. - - - If you enable this setting, you can configure what default Favorites appear for your employees. If this setting is enabled, you must also provide a list of Favorites in the Options section. This list is imported after your policy is deployed. - - - If you disable or don’t configure this setting, employees will see the Favorites that they set in the Favorites hub. - -### Configure Password Manager -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. - - - If you enable this setting (default), employees can use Password Manager to save their passwords locally. - - - If you disable this setting, employees can’t use Password Manager to save their passwords locally. - - - If you don’t configure this setting, employees can choose whether to use Password Manager to save their passwords locally. - -### Configure Pop-up Blocker -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. - - - If you enable this setting (default), Pop-up Blocker is turned on, stopping pop-up windows from appearing. - - - If you disable this setting, Pop-up Blocker is turned off, letting pop-ups windows appear. - - - If you don’t configure this setting, employees can choose whether to use Pop-up Blocker. - -### Configure search suggestions in Address bar -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. - - - If you enable this setting, employees can see search suggestions in the Address bar of Microsoft Edge. - - - If you disable this setting, employees can't see search suggestions in the Address bar of Microsoft Edge. - - - If you don’t configure this setting (default), employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. - -### Configure Start pages -- **Supported versions:** Windows 10, version 1511 or later - -- **Description:** This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. - - - If you enable this setting, you can configure one or more Start pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format: - - - - - If you disable or don’t configure this setting (default), your default Start page is the webpage specified in App settings. - -### Configure the Adobe Flash Click-to-Run setting -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you decide whether employees must take an action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. - - - If you enable or don’t configure the Adobe Flash Click-to-Run setting, an employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content. - - - If you disable this setting, Adobe Flash content is automatically loaded and run by Microsoft Edge. - -### Configure the Enterprise Mode Site List -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. - - - If you enable this setting, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. If you use this option, you must also add the location to your site list in the **{URI}** box. When configured, any site on the list will always open in Internet Explorer 11. - - - If you disable or don’t configure this setting (default), Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. - - >[!Note] - >If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

- >If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one. - -### Configure Windows Defender SmartScreen -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. - - - If you enable this setting, Windows Defender SmartScreen is turned on and employees can’t turn it off. - - - If you disable this setting, Windows Defender SmartScreen is turned off and employees can’t turn it on. - - - If you don’t configure this setting (default), employees can choose whether to use Windows Defender SmartScreen. - -### Disable lockdown of Start pages -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you disable the lock down of Start pages, letting employees modify the Start pages when the "Configure Start pages" setting is in effect. - - >[!Important] - >This setting only applies when you're using the “Configure Start pages" setting and can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). - - - If you enable this setting, you can't lock down any Start pages that are configured using the "Configure Start pages" setting, which means that employees can modify them. - - - If you disable or don't configure this setting (default), employees can't change any Start pages configured using the "Configure Start pages" setting, thereby locking down the Start pages. - -### Keep favorites in sync between Internet Explorer and Microsoft Edge -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position. - - >[!Note] - >Enabling this setting stops Edge favorites from syncing between connected Windows 10 devices. - - - If you enable this setting, employees can sync their favorites between Internet Explorer and Microsoft Edge. - - - If you disable or don't configure this setting (default), employees can’t sync their favorites between Internet Explorer and Microsoft Edge. - -### Prevent access to the about:flags page -- **Supported versions:** Windows 10, version 1607 or later - -- **Description:** This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. - - - If you enable this policy setting, employees can’t access the about:flags page. - - - If you disable or don’t configure this setting (default), employees can access the about:flags page. - -### Prevent bypassing Windows Defender SmartScreen prompts for files -- **Supported versions:** Windows 10, version 1511 or later - -- **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. - - - If you enable this setting, employees can’t ignore Windows Defender SmartScreen warnings and they’re blocked from downloading the unverified files. - - - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue the download process. - -### Prevent bypassing Windows Defender SmartScreen prompts for sites -- **Supported versions:** Windows 10, version 1511 or later - -- **Description:** This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. - - - If you enable this setting, employees can’t ignore Windows Defender SmartScreen warnings and they’re blocked from continuing to the site. - - - If you disable or don’t configure this setting (default), employees can ignore Windows Defender SmartScreen warnings and continue to the site. - -### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. - - - If you enable this setting, Microsoft Edge won't gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu. - - - If you disable or don't configure this setting (default), Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu. - -### Prevent the First Run webpage from opening on Microsoft Edge -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. - - - If you enable this setting, employees won't see the First Run page when opening Microsoft Edge for the first time. - - - If you disable or don't configure this setting (default), employees will see the First Run page when opening Microsoft Edge for the first time. - -### Prevent using Localhost IP address for WebRTC -- **Supported versions:** Windows 10, version 1511 or later - -- **Description:** This policy setting lets you decide whether an employee’s Localhost IP address shows while making calls using the WebRTC protocol. By default, this setting is turned off. - - - If you enable this setting, Localhost IP addresses are hidden while making calls using the WebRTC protocol. - - - If you disable or don’t configure this setting (default), Localhost IP addresses are shown while making calls using the WebRTC protocol. - -### Send all intranet sites to Internet Explorer 11 -- **Supported versions:** Windows 10 or later - -- **Description:** This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. - - - If you enable this setting, all intranet sites are automatically opened using Internet Explorer 11. - - - If you disable or don’t configure this setting (default), all websites, including intranet sites, are automatically opened using Microsoft Edge. - -### Set default search engine -- **Supported versions:** Windows 10, version 1703 - -- **Description:** This policy setting lets you configure the default search engine for your employees. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. - - >[!Important] - >This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

- >If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. - - - If you enable this setting, you can choose a default search engine for your employees. To choose the default engine, you must add a link to your OpenSearch XML file, including at least the short name and https: URL of the search engine, using this format: - - https://fabrikam.com/opensearch.xml - - - If you disable this setting, the policy-set default search engine is removed. If this is also the current in-use default, the engine changes to the Microsoft Edge specified engine for the market. - - - If you don't configure this setting (default), the default search engine is set to the one specified in App settings. - -### Show message when opening sites in Internet Explorer -- **Supported versions:** Windows 10, version 1607 and later - -- **Description:** This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. - - - If you enable this setting, employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. - - - If you disable or don’t configure this setting (default), the default app behavior occurs and no additional page appears. +> Supported versions: Windows 10, version 1511 or later + +This policy setting lets you decide whether employees can browse using InPrivate website browsing.
If you…Then…
Enable this setting (default)Employees can use InPrivate website browsing.
Disable this setting [why would a company disable this setting?]Employees cannot use InPrivate website browsing.
+ +Allow Microsoft Compatibility List | Windows 10, version 1607 or later| This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. @Reviewer: Is this supposed to be a link to another topic? Is the topic Use Enterprise Mode to improve compatibility emie-to-improve-compatibility.md?
If you…Then…
Enable this setting (default)Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation [are the updates really applied “during browser navigation?”]. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site renders as though it’s in whatever version of IE is necessary for it to appear properly.
Disable this settingBrowser navigation does not use the Microsoft Compatibility List.
+ +Allow search engine customization | Windows 10, version 1703 | This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).
If you…Then…
Enable or don’t configure this setting (default)Employees can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings.
Disable this settingEmployees cannot add search engines or change the default used in the Address bar.
+Allow web content on New Tab page | Windows 10 | This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it.
+ + + + +
If you…Then…
Enable this settingMicrosoft Edge opens a new tab with the New Tab page.
Disable this settingMicrosoft Edge opens a new tab with a blank page.
Do not configure this setting (default)Employees can choose how new tabs appear.
+Configure additional search engines | Windows 10, version 1703 | This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees but can make a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting.
+ + + + +
If you…Then…
Enable this settingYou can add up to 5 additional search engines. For each additional search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format: `https://www.contoso.com/opensearch.xml>` For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic.
Disable this setting (default)Any added search engines are removed from the employee’s device. [is this implying that Bing is the only search engine on the employee’s device?]
Do not configure this settingThe search engine list is set to what is specified in App settings. [what’s the difference between “don’t configure this setting”, “Enable this setting”, and “Disable this setting”?]
+Configure Autofill | Windows 10 | This policy setting lets you decide whether employees can use Autofill the form fields automatically while using Microsoft Edge. By default, employees can choose whether to use Autofill.
+ + + + +
If you…Then…
Enable this settingEmployees can use Autofill to populate form fields automatically while using Microsoft Edge
Disable this settingEmployees can’t use Autofill to populate form fields automatically while using Microsoft Edge.
Do not configure this setting (default)Employees can choose whether to use Autofill to populate the form fields automatically while using Microsoft Edge.
+Configure cookies | Windows 10 | This setting lets you configure how to work with cookies.
+ + + +
If you…Then…
Enable this setting (default)You must also decide whether to:
  • **Allow all cookies (default)** from all websites.
  • **Block all cookies** from all websites.
  • **Block only 3rd-party cookies** from 3rd-party websites.
Disable or do not configure this settingAll cookies are allowed from all sites.
+Configure Do Not Track | Windows 10 | This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests are never sent, but employees can choose to turn on and send requests.
+ + + + +
If you…Then…
Enable this settingDo Not Track requests are always sent to websites asking for tracking information.
Disable this settingDo Not Track requests are never sent to websites asking for tracking information.
Do not configure this setting (default)Employees can choose whether to send Do Not Track requests to websites asking for tracking information.
Configure Favorites | Windows 10, version 1511 or later | This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. [what is the default setting, enabled or disabled? I’m guessing it’s Disabled is the default.]
+ + + +
If you…Then…
Enable this settingYou must provide a list of Favorites in the Options section. The list imports automatically after you deploy this policy.
Disable or do not configure this settingEmployees will see the Favorites that they set in the Favorites hub.
Configure Password Manager | Windows 10 | This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.
+ + + + + +Configure Pop-up Blocker | Windows 10 | This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.
If you…Then…
Enable this setting (default)Employees can use Password Manager to save their passwords locally.
Disable this settingEmployees can’t use Password Manager to save their passwords locally.
Do not configure this settingEmployees can choose whether to use Password Manager to save their passwords locally.
+ + + + +
If you…Then…
Enable this setting (default)Pop-up Blocker is turned on, stopping pop-up windows from appearing.
Disable this settingPop-up Blocker is turned off, letting pop-up windows appear.
Do not configure this settingEmployees can choose whether to use Pop-up Blocker.
+Configure search suggestions in Address bar | Windows 10 | This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.
+ + + + +
If you…Then…
Enable this settingEmployees can see search suggestions in the Address bar of Microsoft Edge.
Disable this settingEmployees can't see search suggestions in the Address bar of Microsoft Edge.
Do not configure this setting (default)Employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.
Configure Start pages | Windows 10, version 1511 or later | This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it.
+ + + +
If you…Then…
Enable this settingYou must include URLs to the pages, separating multiple pages by using angle brackets in this format: ``
Disable or do not configure this setting (default)The default Start page is the webpage specified in App settings.
Configure the Adobe Flash Click-to-Run setting | Windows 10, version 1703 | This policy setting lets you decide whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. [what is the default, enabled or disabled?]
+ + + +
If you…Then…
Enable or don’t configure this settingEmployees must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content.
Disable this settingAdobe Flash loads automatically and runs in Microsoft Edge.
Configure the Enterprise Mode Site List | Windows 10 | This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If there is a .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server has a different version number than the version in the cache container, the server file is used and stored in the cache container.

If you already use a site list, enterprise mode continues to work during the 65-second wait; it just uses the existing site list instead of the new one. +

+ + +Configure Windows Defender SmartScreen | Windows 10 | This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on.
If you…Then…
Enable this settingYou must add the location to your site list in the **{URI}** box. When configured, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.
Disable or do not configure this setting (default)Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps.
+ + + + +
If you…Then…
Enable this settingWindows Defender SmartScreen is turned on, and employees cannot turn it off.
Disable this settingWindows Defender SmartScreen is turned off, and employees cannot turn it on.
Do not configure this settingEmployees can choose whether to use Windows Defender SmartScreen.
+Disable lockdown of Start pages | Windows 10, version 1703 | This policy setting you disable the lockdown of Start pages if the Configure Start pages setting is in effect [“…is enabled”?]. This setting only applies to domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).
+ + + +
If you…Then…
Enable this settingYou cannot lock down Start pages that are configured using the “Configure Start pages” setting. Employees can, therefore, modify the pages.
Disable or do not configure this setting (default)Employees cannot change Start pages configured using the “Configure Start pages” setting.
+Keep favorites in sync between Internet Explorer and Microsoft Edge | Windows 10, version 1703 | This policy setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position.
+ + + +
If you…Then…
Enable this settingEmployees can sync their favorites between Internet Explorer and Microsoft Edge. Note. Enabling this setting stops Edge favorites from syncing between connected Windows 10 devices. [what does this mean? I want to know more about what this note is saying. More details and maybe an example or scenario.]
Disable or do not configure this settingEmployees cannot sync their favorites between Internet Explorer and Microsoft Edge.
+Prevent access to the about:flags page | Windows 10, version 1607 or later | This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.
+ + + +
If you…Then…
Enable this settingEmployees cannot access the about:flags page.
Disable or do not configure this setting (default)Employees can access the about:flags page.
+Prevent bypassing Windows Defender SmartScreen prompts for files | Windows 10, version 1511 or later | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files.
+ + + + +Prevent bypassing Windows Defender SmartScreen prompts for sites | Windows 10, version 1511 or later | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites.
If you…Then…
Enable this settingEmployees cannot ignore Windows Defender SmartScreen warnings when downloading files.
Disable or do not configure this setting (default)Employees can ignore Windows Defender SmartScreen warnings and can continue the download process.
+ + + +
If you…Then…
Enable this settingEmployees cannot ignore Windows Defender SmartScreen warnings and prevents them from continuing to the site.
Disable or do not configure this setting (default)Employees can ignore Windows Defender SmartScreen warnings, allowing them to continue to the site.
+Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start | Windows 10, version 1703 | This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu.
+ + + +
If you…Then…
Enable this settingMicrosoft Edge does not gather the Live Tile metadata, providing a minimal experience.
Disable or do not configure this setting (default)Microsoft Edge gathers the Live Tile metadata, providing a fuller and complete experience.
+Prevent the First Run webpage from opening on Microsoft Edge | Windows 10, version 1703 | This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time.
+ + + +
If you…Then…
Enable this settinEmployees do not see the First Run page.
Disable or do not configure this setting (default)mployees see the First Run page.
+Prevent using Localhost IP address for WebRTC | Windows 10, version 1511 or later | This policy setting lets you decide whether localhost IP addresses are visible or hidden while making calls to the WebRTC protocol.
+ + + +
If you…Then…
Enable this settingLocalhost IP addresses are hidden.
Disable or do not configure this setting (default)Localhost IP addresses are visible.
+Send all intranet sites to Internet Explorer 11 | Windows 10 | This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.
+ + + +
If you…Then…
Enable this settingAll intranet sites are opened in Internet Explorer 11 automatically.
Disable or do not configure this setting (default)All websites, including intranet sites, open in Microsoft Edge.
+Set default search engine | Windows 10, version 1703 | This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).
+ + + + +
If you…Then…
Enable this settingTo set a default search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format: `https://fabrikam.com/opensearch.xml` If you'd like your employees to use the default Microsoft Edge settings for each market [what does “each market” refer to?], you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING.
Disable this settingThe policy-set default search engine is removed. If this is also the current in-use default, the search engine changes to the Microsoft Edge specified engine for the market [what does “market” mean in this context?].
Do not configure this settingThe default search engine is set to the one specified in App settings.
+Show message when opening sites in Internet Explorer | Windows 10, version 1607 and later | This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
+ + + +
If you…Then…
Enable this settingEmployees see an additional page.
Disable or do not configure this setting (default)No additional pages display.
## Using Microsoft Intune to manage your Mobile Device Management (MDM) settings for Microsoft Edge If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( https://go.microsoft.com/fwlink/p/?LinkId=722885) page. @@ -417,7 +220,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Allowed. Address bar drop-down is enabled. ### AllowAutofill -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Desktop @@ -434,7 +237,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Employees can use Autofill to complete form fields. ### AllowBrowser -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Mobile @@ -451,7 +254,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Employees can use Microsoft Edge. ### AllowCookies -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Both @@ -487,7 +290,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Employees can use the F12 Developer Tools. ### AllowDoNotTrack -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Both @@ -521,7 +324,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Employees can use Edge Extensions. ### AllowFlash -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Desktop @@ -589,7 +392,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1 (default).** Additional search engines are allowed and the default can be changed in the Address bar. ### AllowPasswordManager -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Both @@ -606,7 +409,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1.** Employees can use Password Manager to save passwords locally. ### AllowPopups -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Desktop @@ -641,7 +444,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U ### AllowSearchSuggestionsinAddressBar -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Both @@ -658,7 +461,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1.** Employees can see search suggestions in the Address bar of Microsoft Edge. ### AllowSmartScreen -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Both @@ -726,7 +529,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1.** Disable lockdown of the Start pages and allow users to modify them. ### EnterpriseModeSiteList -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Desktop @@ -910,7 +713,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **1.** Doesn't show an employee's LocalHost IP address while using the WebRTC protocol. ### SendIntranetTraffictoInternetExplorer -- **Supported versions:** Windows 10 or later +- **Supported versions:** Windows 10 - **Supported devices:** Desktop From 94eeda913f0aca7a80de804494f476f01244af5a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 12 Feb 2018 17:01:01 -0800 Subject: [PATCH 050/106] fixed step 4 --- ...-windows-defender-advanced-threat-protection.md | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md index 1088133d52..b285654fc3 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md @@ -53,7 +53,7 @@ If your client secret expires or if you've misplaced the copy provided when you ## Error when getting a refresh access token -If you encounter an error when trying to get a refresh token when using the threat intelligence API, you'll need to add reply URL for relevant application in Azure Active Directory. +If you encounter an error when trying to get a refresh token when using the threat intelligence API or SIEM tools, you'll need to add reply URL for relevant application in Azure Active Directory. 1. Login to the [Azure management portal](https://ms.portal.azure.com). @@ -61,15 +61,13 @@ If you encounter an error when trying to get a refresh token when using the thre 3. Select your tenant. -4. Click **Application**, then select your SIEM tool application. The application name is `https://windowsdefenderatpsiemconnector`. +4. Click **App Registrations**. Then in the applications list, select the application: + - For SIEM: `https://WindowsDefenderATPSiemConnector` + - For Threat intelligence API: `https://WindowsDefenderATPCustomerTiConnector` -5. Select your threat intelligence API application. The name is `https://WindowsDefenderATPCustomerTiConnector`. +5. Add the following URL: `https://winatpmanagement-us.securitycenter.windows.com/UserAuthenticationCallback`. -6. Select **Settings** > **Reply URLs**. HI VADIM CAN YOU PLEASE CHECK IF THE BELOW IS ACCURATE - I TRIED TO ACCESS AZURE BUT I DON'T HAVE THE RIGHT PERMISSIONS. - -7. Add the following URL: `https://winatpmanagement-us.securitycenter.windows.com/UserAuthenticationCallback`. - -8. Click **Save**. +6. Click **Save**. ## Related topics From 2ef4c1aad99b7b86232545f953864339e3f44759 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 10:31:44 -0800 Subject: [PATCH 051/106] update time zone settings --- windows/security/threat-protection/TOC.md | 2 +- .../images/atp-time-zone.png | Bin 0 -> 851 bytes ...indows-defender-advanced-threat-protection.md | 15 +++++++-------- 3 files changed, 8 insertions(+), 9 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-time-zone.png diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 6e06c0988e..1c3e472748 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -171,7 +171,7 @@ #### [Enable and create Power BI reports using Windows Defender ATP data](windows-defender-atp\powerbi-reports-windows-defender-advanced-threat-protection.md) #### [Enable Security Analytics security controls](windows-defender-atp\enable-security-analytics-windows-defender-advanced-threat-protection.md) -### [Windows Defender ATP settings](windows-defender-atp\settings-windows-defender-advanced-threat-protection.md) +### [Windows Defender ATP time zone settings](windows-defender-atp\settings-windows-defender-advanced-threat-protection.md) ### [Access the Windows Defender ATP Community Center](windows-defender-atp\community-windows-defender-advanced-threat-protection.md) ### [Troubleshoot Windows Defender ATP](windows-defender-atp\troubleshoot-windows-defender-advanced-threat-protection.md) ### [Review events and errors on endpoints with Event Viewer](windows-defender-atp\event-error-codes-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-time-zone.png b/windows/security/threat-protection/windows-defender-atp/images/atp-time-zone.png new file mode 100644 index 0000000000000000000000000000000000000000..13b0392123259d9794c4fb81dff6571eb84801f2 GIT binary patch literal 851 zcmeAS@N?(olHy`uVBq!ia0vp^vOp}y!3HERu!}APQk(@Ik;M!Qd`Cc-ajG_-G*FPe z#M9T6{SgzdkSv${%ghe2kZVMVV`)i7ei6gUb!R+)LOdlvA(zzR40BHc%s8XXuqU6>w!lvt#3&n>lQV)Tn$ ze$!GXs(6~r^;>!U_1yC;jtaN8c}`0W3Y{u*TrqN5>}$hgCq$#xhMnA`BgE3E;;D4J z&_kf5drsVX_g(9RlY4HxHH)0~Rrku)y*G2jzE;UjKFKoEhizGAlF`hVCtIR)TMj2O zIOt73{IH;5S?0RCwY$x#MO_`WrtW&%zb|9^?Ya7&^kZu?RfHOsWqzpI3q%om(^p*0 zdj56(#u&Z8l_BS{`;R})TD3Z0|NZ`h2?ZOs$E}Zz|FQCIS$Bj^nf;fEySVPY|K4%@ zv3T{tgb&LW0X=y5;fGg0&l?2+Eqz&HCH>^@U)jw!-{=dAaWant to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-settings-abovefoldlink) -Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone and view license information. +Use the **Time zone** menu ![Time zone settings icon](images/atp-time-zone.png) to configure the time zone and view license information. ## Time zone settings The aspect of time is important in the assessment and analysis of perceived and actual cyberattacks. @@ -36,7 +36,7 @@ Cyberforensic investigations often rely on time stamps to piece together the seq Windows Defender ATP can display either Coordinated Universal Time (UTC) or local time. -Your current time zone setting is shown in the Windows Defender ATP menu. You can change the displayed time zone in the **Settings** menu ![Settings icon](images/settings.png). +Your current time zone setting is shown in the Windows Defender ATP menu. You can change the displayed time zone in the **Time zone** menu ![Time zone settings icon](images/atp-time-zone.png). ### UTC time zone Windows Defender ATP uses UTC time by default. @@ -55,7 +55,7 @@ The Windows Defender ATP time zone is set by default to UTC. Setting the time zone also changes the times for all Windows Defender ATP views. To set the time zone: -1. Click the **Settings** menu ![Settings icon](images/settings.png). +1. Click the **Time zone** menu ![Time zone settings icon](images/atp-time-zone.png). 2. Select the **Timezone UTC** indicator. 3. Select **Timezone UTC** or your local time zone, for example -7:00. @@ -88,5 +88,4 @@ The following date and time formats are currently not supported: **Decimal symbol used in numbers**
Decimal symbol used is always a dot, even if a comma is selected in the **Numbers** format settings in **Region** settings. For example, 15,5K is displayed as 15.5K. -## License -Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. + From 0391babc4d41d39edee7773309e6e2cd85374702 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 10:41:08 -0800 Subject: [PATCH 052/106] update author --- .../settings-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index e5c8e51821..b376019c6a 100644 --- a/windows/security/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -8,7 +8,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: macapara -author: DulceMV +author: mjcaparas ms.localizationpriority: high ms.date: 02/13/2018 --- From f6ed82031fb5114ff14c6afd2700c86537e5d354 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Tue, 13 Feb 2018 11:39:03 -0800 Subject: [PATCH 053/106] fixed the way the list of Group Policies are presented --- browsers/edge/available-policies.md | 452 +++++++++++++++++++--------- 1 file changed, 312 insertions(+), 140 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index d5d1fc008c..f23e141f4e 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -10,7 +10,7 @@ ms.localizationpriority: high ms.date: 09/13/2017 --- - + # Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge @@ -26,170 +26,342 @@ By using Group Policy and Intune, you can set up a policy setting once, and then ## Group Policy settings Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: -Group Policy settings ---------------------- - -Microsoft Edge works with these Group Policy settings (`Computer -Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to -help you manage your company's web browser configurations: - ### Allow Address bar drop-down list suggestions > Supported versions: Windows 10, version 1703 -This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.
If you...Then...
Enable this setting (default)Employees can see the Address bar drop-down functionality in Microsoft Edge.
Disable this settingEmployees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."

Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting.

+This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. +| If you... | Then... | +| --- | --- | +| Enable this setting (default) | Employees can see the Address bar drop-down functionality in Microsoft Edge. | +| Disable this setting | Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."

Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. | +| ### Allow Adobe Flash > Supported version: Windows 10 -This policy setting lets you decide whether employees can run Adobe Flash on Microsoft Edge.
If you…Then…
Enable or don’t configure this setting (default)Employees can use Adobe Flash.
Disable this settingmployees cannot use Adobe Flash.
+This policy setting lets you decide whether employees can run Adobe Flash on Microsoft Edge. +| If you… | Then… | +| --- | --- | +| Enable or don’t configure this setting (default) | Employees can use Adobe Flash. | +| Disable this setting | Employees cannot use Adobe Flash. | +| ### Allow clearing browsing data on exit > Supported versions: Windows 10, version 1703 -This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes.
If you…Then…
Enable this settingClear browsing history on exit is turned on. [can employees do anything to this setting at this point? Or is this controlled by the system administrator?]
Disable or don’t configure this setting (default)Employees can turn on and configure the Clear browsing data option under Settings.
+This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. +| If you… | Then… | +| --- | --- | +| Enable this setting | Clear browsing history on exit is turned on. [@Reviewer: can employees do anything to this setting at this point? Or is this controlled by the system administrator?] | +| Disable or don’t configure this setting (default) | Employees can turn on and configure the Clear browsing data option under Settings. | +| ### Allow Developer Tools > Supported versions: Windows 10, version 1511 or later -This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.
If you…Then…
Enable this setting (default)The F12 Developer Tools are available on Microsoft Edge.
Disable this settinghe F12 Developer Tools are not available on Microsoft Edge.
+This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. +| If you… | Then… | +| --- | --- | +| Enable this setting (default) | F12 Developer Tools are available. | +| Disable this setting | F12 Developer Tools are not available. | +| ### Allow Extensions > Supported versions: Windows 10, version 1607 or later -This policy setting lets you decide whether employees can use Edge Extensions.
-
If you…Then…
Enable this settingEmployees can use Edge Extensions.
Disable this setting [why would a company disable this setting?]mployees cannot use Edge Extensions.
+This policy setting lets you decide whether employees can use Edge Extensions. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees can use Edge Extensions. | +| Disable this setting | [@Reviewer: why would a company disable this setting?] Employees cannot use Edge Extensions. | +| ### Allow InPrivate browsing > Supported versions: Windows 10, version 1511 or later -This policy setting lets you decide whether employees can browse using InPrivate website browsing.
If you…Then…
Enable this setting (default)Employees can use InPrivate website browsing.
Disable this setting [why would a company disable this setting?]Employees cannot use InPrivate website browsing.
+This policy setting lets you decide whether employees can browse using InPrivate website browsing. +| If you… | Then… | +| --- | --- | +| Enable this setting (default) | Employees can use InPrivate website browsing. | +| Disable this setting | [@Reviewer: why would a company disable this setting?] Employees cannot use InPrivate website browsing. | +| -Allow Microsoft Compatibility List | Windows 10, version 1607 or later| This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. @Reviewer: Is this supposed to be a link to another topic? Is the topic Use Enterprise Mode to improve compatibility emie-to-improve-compatibility.md?
If you…Then…
Enable this setting (default)Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation [are the updates really applied “during browser navigation?”]. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site renders as though it’s in whatever version of IE is necessary for it to appear properly.
Disable this settingBrowser navigation does not use the Microsoft Compatibility List.
+### Allow Microsoft Compatibility List +> Supported versions: Windows 10, version 1607 or later -Allow search engine customization | Windows 10, version 1703 | This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).
If you…Then…
Enable or don’t configure this setting (default)Employees can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings.
Disable this settingEmployees cannot add search engines or change the default used in the Address bar.
-Allow web content on New Tab page | Windows 10 | This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it.
- - - - -
If you…Then…
Enable this settingMicrosoft Edge opens a new tab with the New Tab page.
Disable this settingMicrosoft Edge opens a new tab with a blank page.
Do not configure this setting (default)Employees can choose how new tabs appear.
-Configure additional search engines | Windows 10, version 1703 | This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees but can make a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting.
- - - - -
If you…Then…
Enable this settingYou can add up to 5 additional search engines. For each additional search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format: `https://www.contoso.com/opensearch.xml>` For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic.
Disable this setting (default)Any added search engines are removed from the employee’s device. [is this implying that Bing is the only search engine on the employee’s device?]
Do not configure this settingThe search engine list is set to what is specified in App settings. [what’s the difference between “don’t configure this setting”, “Enable this setting”, and “Disable this setting”?]
-Configure Autofill | Windows 10 | This policy setting lets you decide whether employees can use Autofill the form fields automatically while using Microsoft Edge. By default, employees can choose whether to use Autofill.
- - - - -
If you…Then…
Enable this settingEmployees can use Autofill to populate form fields automatically while using Microsoft Edge
Disable this settingEmployees can’t use Autofill to populate form fields automatically while using Microsoft Edge.
Do not configure this setting (default)Employees can choose whether to use Autofill to populate the form fields automatically while using Microsoft Edge.
-Configure cookies | Windows 10 | This setting lets you configure how to work with cookies.
- - - -
If you…Then…
Enable this setting (default)You must also decide whether to:
  • **Allow all cookies (default)** from all websites.
  • **Block all cookies** from all websites.
  • **Block only 3rd-party cookies** from 3rd-party websites.
Disable or do not configure this settingAll cookies are allowed from all sites.
-Configure Do Not Track | Windows 10 | This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests are never sent, but employees can choose to turn on and send requests.
- - - - -
If you…Then…
Enable this settingDo Not Track requests are always sent to websites asking for tracking information.
Disable this settingDo Not Track requests are never sent to websites asking for tracking information.
Do not configure this setting (default)Employees can choose whether to send Do Not Track requests to websites asking for tracking information.
Configure Favorites | Windows 10, version 1511 or later | This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. [what is the default setting, enabled or disabled? I’m guessing it’s Disabled is the default.]
- - - -
If you…Then…
Enable this settingYou must provide a list of Favorites in the Options section. The list imports automatically after you deploy this policy.
Disable or do not configure this settingEmployees will see the Favorites that they set in the Favorites hub.
Configure Password Manager | Windows 10 | This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.
- - - - - -Configure Pop-up Blocker | Windows 10 | This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on.
If you…Then…
Enable this setting (default)Employees can use Password Manager to save their passwords locally.
Disable this settingEmployees can’t use Password Manager to save their passwords locally.
Do not configure this settingEmployees can choose whether to use Password Manager to save their passwords locally.
- - - - -
If you…Then…
Enable this setting (default)Pop-up Blocker is turned on, stopping pop-up windows from appearing.
Disable this settingPop-up Blocker is turned off, letting pop-up windows appear.
Do not configure this settingEmployees can choose whether to use Pop-up Blocker.
-Configure search suggestions in Address bar | Windows 10 | This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.
- - - - -
If you…Then…
Enable this settingEmployees can see search suggestions in the Address bar of Microsoft Edge.
Disable this settingEmployees can't see search suggestions in the Address bar of Microsoft Edge.
Do not configure this setting (default)Employees can choose whether search suggestions appear in the Address bar of Microsoft Edge.
Configure Start pages | Windows 10, version 1511 or later | This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it.
- - - -
If you…Then…
Enable this settingYou must include URLs to the pages, separating multiple pages by using angle brackets in this format: ``
Disable or do not configure this setting (default)The default Start page is the webpage specified in App settings.
Configure the Adobe Flash Click-to-Run setting | Windows 10, version 1703 | This policy setting lets you decide whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. [what is the default, enabled or disabled?]
- - - -
If you…Then…
Enable or don’t configure this settingEmployees must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content.
Disable this settingAdobe Flash loads automatically and runs in Microsoft Edge.
Configure the Enterprise Mode Site List | Windows 10 | This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps.

If there is a .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server has a different version number than the version in the cache container, the server file is used and stored in the cache container.

If you already use a site list, enterprise mode continues to work during the 65-second wait; it just uses the existing site list instead of the new one. -

- - -Configure Windows Defender SmartScreen | Windows 10 | This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on.
If you…Then…
Enable this settingYou must add the location to your site list in the **{URI}** box. When configured, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode.
Disable or do not configure this setting (default)Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps.
- - - - -
If you…Then…
Enable this settingWindows Defender SmartScreen is turned on, and employees cannot turn it off.
Disable this settingWindows Defender SmartScreen is turned off, and employees cannot turn it on.
Do not configure this settingEmployees can choose whether to use Windows Defender SmartScreen.
-Disable lockdown of Start pages | Windows 10, version 1703 | This policy setting you disable the lockdown of Start pages if the Configure Start pages setting is in effect [“…is enabled”?]. This setting only applies to domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).
- - - -
If you…Then…
Enable this settingYou cannot lock down Start pages that are configured using the “Configure Start pages” setting. Employees can, therefore, modify the pages.
Disable or do not configure this setting (default)Employees cannot change Start pages configured using the “Configure Start pages” setting.
-Keep favorites in sync between Internet Explorer and Microsoft Edge | Windows 10, version 1703 | This policy setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position.
- - - -
If you…Then…
Enable this settingEmployees can sync their favorites between Internet Explorer and Microsoft Edge. Note. Enabling this setting stops Edge favorites from syncing between connected Windows 10 devices. [what does this mean? I want to know more about what this note is saying. More details and maybe an example or scenario.]
Disable or do not configure this settingEmployees cannot sync their favorites between Internet Explorer and Microsoft Edge.
-Prevent access to the about:flags page | Windows 10, version 1607 or later | This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.
- - - -
If you…Then…
Enable this settingEmployees cannot access the about:flags page.
Disable or do not configure this setting (default)Employees can access the about:flags page.
-Prevent bypassing Windows Defender SmartScreen prompts for files | Windows 10, version 1511 or later | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files.
- - - - -Prevent bypassing Windows Defender SmartScreen prompts for sites | Windows 10, version 1511 or later | This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites.
If you…Then…
Enable this settingEmployees cannot ignore Windows Defender SmartScreen warnings when downloading files.
Disable or do not configure this setting (default)Employees can ignore Windows Defender SmartScreen warnings and can continue the download process.
- - - -
If you…Then…
Enable this settingEmployees cannot ignore Windows Defender SmartScreen warnings and prevents them from continuing to the site.
Disable or do not configure this setting (default)Employees can ignore Windows Defender SmartScreen warnings, allowing them to continue to the site.
-Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start | Windows 10, version 1703 | This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu.
- - - -
If you…Then…
Enable this settingMicrosoft Edge does not gather the Live Tile metadata, providing a minimal experience.
Disable or do not configure this setting (default)Microsoft Edge gathers the Live Tile metadata, providing a fuller and complete experience.
-Prevent the First Run webpage from opening on Microsoft Edge | Windows 10, version 1703 | This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time.
- - - -
If you…Then…
Enable this settinEmployees do not see the First Run page.
Disable or do not configure this setting (default)mployees see the First Run page.
-Prevent using Localhost IP address for WebRTC | Windows 10, version 1511 or later | This policy setting lets you decide whether localhost IP addresses are visible or hidden while making calls to the WebRTC protocol.
- - - -
If you…Then…
Enable this settingLocalhost IP addresses are hidden.
Disable or do not configure this setting (default)Localhost IP addresses are visible.
-Send all intranet sites to Internet Explorer 11 | Windows 10 | This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge.
- - - -
If you…Then…
Enable this settingAll intranet sites are opened in Internet Explorer 11 automatically.
Disable or do not configure this setting (default)All websites, including intranet sites, open in Microsoft Edge.
-Set default search engine | Windows 10, version 1703 | This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).
- - - - -
If you…Then…
Enable this settingTo set a default search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format: `https://fabrikam.com/opensearch.xml` If you'd like your employees to use the default Microsoft Edge settings for each market [what does “each market” refer to?], you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING.
Disable this settingThe policy-set default search engine is removed. If this is also the current in-use default, the search engine changes to the Microsoft Edge specified engine for the market [what does “market” mean in this context?].
Do not configure this settingThe default search engine is set to the one specified in App settings.
-Show message when opening sites in Internet Explorer | Windows 10, version 1607 and later | This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
- - - -
If you…Then…
Enable this settingEmployees see an additional page.
Disable or do not configure this setting (default)No additional pages display.
+This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. [@Reviewer: Is this supposed to be a link to another topic? Is the topic Use Enterprise Mode to improve compatibility emie-to-improve-compatibility.md?] +| If you… | Then… | +| --- | --- | +| Enable this setting (default) | Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation [@Reviewer: are the updates really applied “during browser navigation?" shouldn't just be as simple as "...applying the updates automatically”?]. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site renders as though it’s in whatever version of IE is necessary for it to appear properly. | +| Disable this setting | Browser navigation does not use the Microsoft Compatibility List. | +| + +### Allow search engine customization + +>Supported versions: Windows 10, version 1703 + +This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. + +For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +| If you… | Then… | +| --- | --- | +| Enable or don’t configure this setting (default) | Employees can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings. | +| Disable this setting | Employees cannot add search engines or change the default used in the Address bar. | +| + +### Allow web content on New Tab page +>Supported versions: Windows 10 + +This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it. +| If you… | Then… | +| --- | --- | +| Enable this setting | Microsoft Edge opens a new tab with the New Tab page. | +| Disable this setting | Microsoft Edge opens a new tab with a blank page. | +| Do not configure this setting (default) | Employees can choose how new tabs appear. | +| + +### Configure additional search engines +>Supported versions: Windows 10, version 1703 + +This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees but can make a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. +| If you… | Then… | +| --- | --- | +| Enable this setting | You can add up to 5 additional search engines. For each additional search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

``

For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. | Disable this setting (default) | Any added search engines are removed from the employee’s device. [@Reviewer: is this implying that Bing is the only search engine on the employee’s device?] | +| Do not configure this setting | The search engine list is set to what is specified in App settings. [@Reviewer: what’s the difference between “don’t configure this setting”, “Enable this setting”, and “Disable this setting”?] | +| + +### Configure Autofill +>Supported versions: Windows 10 + +This policy setting lets you decide whether employees can use Autofill the form fields automatically while using Microsoft Edge. By default, employees can choose whether to use Autofill. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees can use Autofill to populate form fields automatically. | +| Disable this setting | Employees cannot use Autofill to populate form fields automatically. | +| Do not configure this setting (default) | Employees can choose whether to use Autofill to populate the form fields automatically. | +| + +### Configure cookies +>Supported versions: Windows 10 + +This setting lets you configure how to work with cookies. +| If you… | Then… | +| --- | --- | +| Enable this setting (default) | You must also decide whether to:

  • **Allow all cookies (default)** from all websites.
  • **Block all cookies** from all websites.
  • **Block only 3rd-party cookies** from 3rd-party websites.
| +| Disable or do not configure this setting | All cookies are allowed from all sites. | +| + +### Configure Do Not Track +>Supported versions: Windows 10 + +This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests are never sent, but employees can choose to turn on and send requests. +| If you… | Then… | +| --- | --- | +| Enable this setting | Do Not Track requests are always sent to websites asking for tracking information. | +| Disable this setting | Do Not Track requests are never sent to websites asking for tracking information. | +| Do not configure this setting (default) | Employees can choose whether to send Do Not Track requests to websites asking for tracking information. | +| + +### Configure Favorites +>Supported versions: Windows 10, version 1511 or later + +This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. [@Reviewer: what is the default setting, enabled or disabled? I’m guessing it’s Disabled is the default.] +| If you… | Then… | +| --- | --- | +| Enable this setting | You must provide a list of Favorites in the Options section. The list imports automatically after you deploy this policy. | +| Disable or do not configure this setting | Employees will see the Favorites that they set in the Favorites hub. | +| + +### Configure Password Manager +>Supported versions: Windows 10 + +This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. +| If you… | Then… | +| --- | --- | +| Enable this setting (default) | Employees can use Password Manager to save their passwords locally. | +| Disable this setting | Employees can’t use Password Manager to save their passwords locally. | +| Do not configure this setting | Employees can choose whether to use Password Manager to save their passwords locally. | +| + +### Configure Pop-up Blocker +>Supported versions: Windows 10 + +This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. +| If you… | Then… | +| --- | --- | +| Enable this setting (default) | Pop-up Blocker is turned on, stopping pop-up windows from appearing. | +| Disable this setting | Pop-up Blocker is turned off, letting pop-up windows appear. | +| Do not configure this setting | Employees can choose whether to use Pop-up Blocker. | +| + +### Configure search suggestions in Address bar +>Supported versions: Windows 10 + +This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees can see search suggestions in the Address bar. | +| Disable this setting | Employees can't see search suggestions in the Address bar. | +| Do not configure this setting (default) | Employees can choose whether search suggestions appear in the Address bar. | +| + +### Configure Start pages +>Supported versions: Windows 10, version 1511 or later + +This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. +| If you… | Then… | +| --- | --- | +| Enable this setting | You must include URLs to the pages, separating multiple pages by using angle brackets in this format:

`` | +| Disable or do not configure this setting (default) | The default Start page is the webpage specified in App settings. | +| + +### Configure the Adobe Flash Click-to-Run setting +>Supported versions: Windows 10, version 1703 + +This policy setting lets you decide whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. [@Reviewer: what is the default, enabled or disabled?] +| If you… | Then… | +| --- | --- | +| Enable or don’t configure this setting< | Employees must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content. | +| Disable this setting | Adobe Flash loads automatically and runs in Microsoft Edge. | +| + +### Configure the Enterprise Mode Site List +>Supported versions: Windows 10 + +This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. +| If you… | Then… | +| --- | --- | +| Enable this setting | You must add the location to your site list in the **{URI}** box. When configured, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. | +Disable or do not configure this setting (default) | Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. | +| + +>[!Note] +>If there is a .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server has a different version number than the version in the cache container, the server file is used and stored in the cache container.

+>If you already use a site list, enterprise mode continues to work during the 65-second wait; it just uses the existing site list instead of the new one. + +### Configure Windows Defender SmartScreen +>Supported versions: Windows 10 + +This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. +| If you… | Then… | +| --- | --- | +| Enable this setting | Windows Defender SmartScreen is turned on, and employees cannot turn it off. | +| Disable this setting | Windows Defender SmartScreen is turned off, and employees cannot turn it on. | +| Do not configure this setting | Employees can choose whether to use Windows Defender SmartScreen. | +| + +### Disable lockdown of Start pages +>Supported versions: Windows 10, version 1703 + +This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect [@Reviewer: shouldn't this be “…is enabled” instead of "...is in effect"?]. This setting only applies to domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +| If you… | Then… | +| --- | --- | +| Enable this setting | You cannot lock down Start pages that are configured using the “Configure Start pages” setting. Employees can, therefore, modify the pages. | +| Disable or do not configure this setting (default) | Employees cannot change Start pages configured using the “Configure Start pages” setting. | +| + +### Keep favorites in sync between Internet Explorer and Microsoft Edge +>Supported versions: Windows 10, version 1703 + +This policy setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees can sync their favorites between Internet Explorer and Microsoft Edge. Note. Enabling this setting stops Edge favorites from syncing between connected Windows 10 devices. [what does this mean? I want to know more about what this note is saying. More details and maybe an example or scenario.] | +| Disable or do not configure this setting | Employees cannot sync their favorites between Internet Explorer and Microsoft Edge. | +| + +### Prevent access to the about:flags page +>Supported versions: Windows 10, version 1607 or later + +This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees cannot access the about:flags page. | +| Disable or do not configure this setting (default) | Employees can access the about:flags page. | +| + +### Prevent bypassing Windows Defender SmartScreen prompts for files +>Supported versions: Windows 10, version 1511 or later + +This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees cannot ignore Windows Defender SmartScreen warnings when downloading files. | +| Disable or do not configure this setting (default) | Employees can ignore Windows Defender SmartScreen warnings and can continue the download process. | +| +### Prevent bypassing Windows Defender SmartScreen prompts for sites +>Supported versions: Windows 10, version 1511 or later + +This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees cannot ignore Windows Defender SmartScreen warnings and prevents them from continuing to the site. | +| Disable or do not configure this setting (default) | Employees can ignore Windows Defender SmartScreen warnings, allowing them to continue to the site. | +| + +### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start +>Supported versions: Windows 10, version 1703 + +This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. +| If you… | Then… | +| --- | --- | +| Enable this setting | Microsoft Edge does not gather the Live Tile metadata, providing a minimal experience. | +| Disable or do not configure this setting (default) | Microsoft Edge gathers the Live Tile metadata, providing a fuller and complete experience. | +| + + +Prevent the First Run webpage from opening on Microsoft Edge | Windows 10, version 1703 | This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. +| If you… | Then… | +| --- | --- | +| Enable this settin | Employees do not see the First Run page. | +| Disable or do not configure this setting (default) | Employees see the First Run page. | +| + +### Prevent using Localhost IP address for WebRTC +>Supported versions: Windows 10, version 1511 or later + +This policy setting lets you decide whether localhost IP addresses are visible or hidden while making calls to the WebRTC protocol. +| If you… | Then… | +| --- | --- | +| Enable this setting | Localhost IP addresses are hidden. | +| Disable or do not configure this setting (default) | Localhost IP addresses are visible. | +| + +### Send all intranet sites to Internet Explorer 11 +>Supported versions: Windows 10 + +This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. +| If you… | Then… | +| --- | --- | +| Enable this setting | All intranet sites are opened in Internet Explorer 11 automatically. | +| Disable or do not configure this setting (default) | All websites, including intranet sites, open in Microsoft Edge. | +| + +### Set default search engine +>Supported versions: Windows 10, version 1703 + +This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. + +For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +| If you… | Then… | +| --- | --- | +| Enable this setting | To set a default search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

`https://fabrikam.com/opensearch.xml` | +| Disable this setting | The policy-set default search engine is removed. If this is also the current in-use default, the search engine changes to the Microsoft Edge specified engine for the market [what does “market” mean in this context?]. | +| Do not configure this setting | The default search engine is set to the one specified in App settings. | +| + +>[!Important] +>If you'd like your employees to use the default Microsoft Edge settings for each market [what does “each market” refer to?], you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. + +### Show message when opening sites in Internet Explorer +>Supported versions: Windows 10, version 1607 and later + +This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. +| If you… | Then… | +| --- | --- | +| Enable this setting | Employees see an additional page. | +| Disable or do not configure this setting (default) | No additional pages display. | +| ## Using Microsoft Intune to manage your Mobile Device Management (MDM) settings for Microsoft Edge If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( https://go.microsoft.com/fwlink/p/?LinkId=722885) page. From 508aea116f4eaffc620a83987375dbd4f6d37a2f Mon Sep 17 00:00:00 2001 From: shortpatti Date: Tue, 13 Feb 2018 12:47:09 -0800 Subject: [PATCH 054/106] cleaned up the IF/THEN tables --- browsers/edge/available-policies.md | 77 +++++++++++++++-------------- 1 file changed, 39 insertions(+), 38 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index f23e141f4e..64552b94e0 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -27,7 +27,7 @@ By using Group Policy and Intune, you can set up a policy setting once, and then Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: ### Allow Address bar drop-down list suggestions -> Supported versions: Windows 10, version 1703 +>*Supporteded versions: Windows 10, version 1703* This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. | If you... | Then... | @@ -37,7 +37,7 @@ This policy setting lets you decide whether the Address bar drop-down functional | ### Allow Adobe Flash -> Supported version: Windows 10 +>*Supporteded version: Windows 10* This policy setting lets you decide whether employees can run Adobe Flash on Microsoft Edge. | If you… | Then… | @@ -47,7 +47,7 @@ This policy setting lets you decide whether employees can run Adobe Flash on Mic | ### Allow clearing browsing data on exit -> Supported versions: Windows 10, version 1703 +>*Supporteded versions: Windows 10, version 1703* This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. | If you… | Then… | @@ -57,7 +57,7 @@ This policy setting allows the automatic clearing of browsing data when Microsof | ### Allow Developer Tools -> Supported versions: Windows 10, version 1511 or later +>*Supporteded versions: Windows 10, version 1511 or later* This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. | If you… | Then… | @@ -67,7 +67,7 @@ This policy setting lets you decide whether F12 Developer Tools are available on | ### Allow Extensions -> Supported versions: Windows 10, version 1607 or later +>*Supporteded versions: Windows 10, version 1607 or later* This policy setting lets you decide whether employees can use Edge Extensions. | If you… | Then… | @@ -77,7 +77,7 @@ This policy setting lets you decide whether employees can use Edge Extensions. | ### Allow InPrivate browsing -> Supported versions: Windows 10, version 1511 or later +>*Supporteded versions: Windows 10, version 1511 or later* This policy setting lets you decide whether employees can browse using InPrivate website browsing. | If you… | Then… | @@ -87,7 +87,7 @@ This policy setting lets you decide whether employees can browse using InPrivate | ### Allow Microsoft Compatibility List -> Supported versions: Windows 10, version 1607 or later +>*Supporteded versions: Windows 10, version 1607 or later* This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. [@Reviewer: Is this supposed to be a link to another topic? Is the topic Use Enterprise Mode to improve compatibility emie-to-improve-compatibility.md?] | If you… | Then… | @@ -97,8 +97,7 @@ This policy setting lets you decide whether to use the Microsoft Compatibility L | ### Allow search engine customization - ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. @@ -110,7 +109,7 @@ For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy) | ### Allow web content on New Tab page ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees can’t change it. | If you… | Then… | @@ -121,7 +120,7 @@ This policy setting lets you configure what appears when Microsoft Edge opens a | ### Configure additional search engines ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees but can make a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. | If you… | Then… | @@ -131,7 +130,7 @@ This policy setting lets you add up to 5 additional search engines, which can't | ### Configure Autofill ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you decide whether employees can use Autofill the form fields automatically while using Microsoft Edge. By default, employees can choose whether to use Autofill. | If you… | Then… | @@ -142,7 +141,7 @@ This policy setting lets you decide whether employees can use Autofill the form | ### Configure cookies ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This setting lets you configure how to work with cookies. | If you… | Then… | @@ -152,7 +151,7 @@ This setting lets you configure how to work with cookies. | ### Configure Do Not Track ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests are never sent, but employees can choose to turn on and send requests. | If you… | Then… | @@ -163,7 +162,7 @@ This policy setting lets you decide whether employees can send Do Not Track requ | ### Configure Favorites ->Supported versions: Windows 10, version 1511 or later +>*Supported versions: Windows 10, version 1511 or later* This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. [@Reviewer: what is the default setting, enabled or disabled? I’m guessing it’s Disabled is the default.] | If you… | Then… | @@ -173,7 +172,7 @@ This policy setting lets you configure the default list of Favorites that appear | ### Configure Password Manager ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. | If you… | Then… | @@ -184,7 +183,7 @@ This policy setting lets you decide whether employees can save their passwords l | ### Configure Pop-up Blocker ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. | If you… | Then… | @@ -195,7 +194,7 @@ This policy setting lets you decide whether to turn on Pop-up Blocker. By defaul | ### Configure search suggestions in Address bar ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. | If you… | Then… | @@ -206,7 +205,7 @@ This policy setting lets you decide whether search suggestions appear in the Add | ### Configure Start pages ->Supported versions: Windows 10, version 1511 or later +>*Supported versions: Windows 10, version 1511 or later* This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. | If you… | Then… | @@ -216,7 +215,7 @@ This policy setting lets you configure one or more Start pages, for domain-joine | ### Configure the Adobe Flash Click-to-Run setting ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* This policy setting lets you decide whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. [@Reviewer: what is the default, enabled or disabled?] | If you… | Then… | @@ -226,7 +225,7 @@ This policy setting lets you decide whether employees must take action, such as | ### Configure the Enterprise Mode Site List ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. | If you… | Then… | @@ -240,7 +239,7 @@ Disable or do not configure this setting (default) | Microsoft Edge won’t use >If you already use a site list, enterprise mode continues to work during the 65-second wait; it just uses the existing site list instead of the new one. ### Configure Windows Defender SmartScreen ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. | If you… | Then… | @@ -251,9 +250,9 @@ This policy setting lets you configure whether to turn on Windows Defender Smart | ### Disable lockdown of Start pages ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* -This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect [@Reviewer: shouldn't this be “…is enabled” instead of "...is in effect"?]. This setting only applies to domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect [@Reviewer: shouldn't this be “…is enabled” instead of "...is in effect"?]. This setting only applies to domain-joined or MDM-enrolled devices. For more info, see the [Microsoft browser extension policy](aka.ms/browserpolicy). | If you… | Then… | | --- | --- | | Enable this setting | You cannot lock down Start pages that are configured using the “Configure Start pages” setting. Employees can, therefore, modify the pages. | @@ -261,7 +260,7 @@ This policy setting lets you disable the lockdown of Start pages if the Configur | ### Keep favorites in sync between Internet Explorer and Microsoft Edge ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* This policy setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position. | If you… | Then… | @@ -271,7 +270,7 @@ This policy setting lets you decide whether people can sync their favorites betw | ### Prevent access to the about:flags page ->Supported versions: Windows 10, version 1607 or later +>*Supported versions: Windows 10, version 1607 or later* This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. | If you… | Then… | @@ -281,7 +280,7 @@ This policy setting lets you decide whether employees can access the about:flags | ### Prevent bypassing Windows Defender SmartScreen prompts for files ->Supported versions: Windows 10, version 1511 or later +>*Supported versions: Windows 10, version 1511 or later* This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. | If you… | Then… | @@ -290,7 +289,7 @@ This policy setting lets you decide whether employees can override the Windows D | Disable or do not configure this setting (default) | Employees can ignore Windows Defender SmartScreen warnings and can continue the download process. | | ### Prevent bypassing Windows Defender SmartScreen prompts for sites ->Supported versions: Windows 10, version 1511 or later +>*Supported versions: Windows 10, version 1511 or later* This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. | If you… | Then… | @@ -300,7 +299,7 @@ This policy setting lets you decide whether employees can override the Windows D | ### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. | If you… | Then… | @@ -310,7 +309,10 @@ This policy lets you decide whether Microsoft Edge can gather Live Tile metadata | -Prevent the First Run webpage from opening on Microsoft Edge | Windows 10, version 1703 | This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. +### Prevent the First Run webpage from opening on Microsoft Edge +>*Supported versions: Windows 10, version 1703* + +This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. | If you… | Then… | | --- | --- | | Enable this settin | Employees do not see the First Run page. | @@ -318,7 +320,7 @@ Prevent the First Run webpage from opening on Microsoft Edge | Windows 10, versi | ### Prevent using Localhost IP address for WebRTC ->Supported versions: Windows 10, version 1511 or later +>*Supported versions: Windows 10, version 1511 or later* This policy setting lets you decide whether localhost IP addresses are visible or hidden while making calls to the WebRTC protocol. | If you… | Then… | @@ -328,7 +330,7 @@ This policy setting lets you decide whether localhost IP addresses are visible o | ### Send all intranet sites to Internet Explorer 11 ->Supported versions: Windows 10 +>*Supported versions: Windows 10* This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. | If you… | Then… | @@ -338,23 +340,22 @@ This policy setting lets you decide whether your intranet sites should all open | ### Set default search engine ->Supported versions: Windows 10, version 1703 +>*Supported versions: Windows 10, version 1703* This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. -For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +For more info, see the [Microsoft browser extension policy](aka.ms/browserpolicy). | If you… | Then… | | --- | --- | | Enable this setting | To set a default search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

`https://fabrikam.com/opensearch.xml` | -| Disable this setting | The policy-set default search engine is removed. If this is also the current in-use default, the search engine changes to the Microsoft Edge specified engine for the market [what does “market” mean in this context?]. | +| Disable this setting | The policy-set default search engine is removed. If this is also the current in-use default, the search engine changes to the Microsoft Edge specified engine for the market [@Reviewer: what does “market” mean in this context?]. | | Do not configure this setting | The default search engine is set to the one specified in App settings. | | - >[!Important] ->If you'd like your employees to use the default Microsoft Edge settings for each market [what does “each market” refer to?], you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. +>If you'd like your employees to use the default Microsoft Edge settings for each market [@Reviewer: what does “each market” refer to in this context?], you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. ### Show message when opening sites in Internet Explorer ->Supported versions: Windows 10, version 1607 and later +>*Supported versions: Windows 10, version 1607 and later* This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. | If you… | Then… | From 0f3f695fa22f319eda6feee85db52304b4b60f7c Mon Sep 17 00:00:00 2001 From: shortpatti Date: Tue, 13 Feb 2018 13:00:33 -0800 Subject: [PATCH 055/106] fixed broken links --- browsers/edge/available-policies.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 64552b94e0..5c926558de 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -102,6 +102,7 @@ This policy setting lets you decide whether to use the Microsoft Compatibility L This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + | If you… | Then… | | --- | --- | | Enable or don’t configure this setting (default) | Employees can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings. | @@ -252,7 +253,10 @@ This policy setting lets you configure whether to turn on Windows Defender Smart ### Disable lockdown of Start pages >*Supported versions: Windows 10, version 1703* -This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect [@Reviewer: shouldn't this be “…is enabled” instead of "...is in effect"?]. This setting only applies to domain-joined or MDM-enrolled devices. For more info, see the [Microsoft browser extension policy](aka.ms/browserpolicy). +This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect [@Reviewer: shouldn't this be “…is enabled” instead of "...is in effect"?]. This setting only applies to domain-joined or MDM-enrolled devices. + +For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + | If you… | Then… | | --- | --- | | Enable this setting | You cannot lock down Start pages that are configured using the “Configure Start pages” setting. Employees can, therefore, modify the pages. | @@ -344,7 +348,8 @@ This policy setting lets you decide whether your intranet sites should all open This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. -For more info, see the [Microsoft browser extension policy](aka.ms/browserpolicy). +For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). + | If you… | Then… | | --- | --- | | Enable this setting | To set a default search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

`https://fabrikam.com/opensearch.xml` | From f3d49396595c25f8b165395d660b01ba27bbe791 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Feb 2018 13:29:49 -0800 Subject: [PATCH 056/106] updated xml --- ...oy-windows-defender-application-control.md | 76 +++++++++++++++++++ 1 file changed, 76 insertions(+) diff --git a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md index 755ea84cfe..9c13d17bc5 100644 --- a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -142,6 +142,11 @@ Microsoft recommends that you block the following Microsoft-signed applications + + + + + @@ -392,6 +397,46 @@ Microsoft recommends that you block the following Microsoft-signed applications + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + @@ -430,6 +475,11 @@ Microsoft recommends that you block the following Microsoft-signed applications + + + + + @@ -678,6 +728,32 @@ Microsoft recommends that you block the following Microsoft-signed applications + + + + + + + + + + + + + + + + + + + + + + + + + + From 0535c23c5f00f46a39fa21843e1d7a4dc70ac43e Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Feb 2018 13:31:03 -0800 Subject: [PATCH 057/106] updated xml --- .../steps-to-deploy-windows-defender-application-control.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md index 9c13d17bc5..eaba2eac26 100644 --- a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -6,7 +6,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: high author: brianlic-msft -ms.date: 11/02/2017 +ms.date: 102/13/2018 --- # Steps to Deploy Windows Defender Application Control From c13c5b9616e7924f25b96d381549ba084bb00022 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 13 Feb 2018 13:35:43 -0800 Subject: [PATCH 058/106] updated xml --- .../steps-to-deploy-windows-defender-application-control.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md index eaba2eac26..1475541a41 100644 --- a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -6,7 +6,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: high author: brianlic-msft -ms.date: 102/13/2018 +ms.date: 02/13/2018 --- # Steps to Deploy Windows Defender Application Control From f282bec63b9f257bb82ebbba55bc44221fdbe1c6 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 14:07:06 -0800 Subject: [PATCH 059/106] update toc --- windows/security/threat-protection/TOC.md | 212 ++++++++++++---------- 1 file changed, 113 insertions(+), 99 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 1c3e472748..60a2fa1d16 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -16,12 +16,13 @@ ## [Windows Defender Advanced Threat Protection](windows-defender-atp\windows-defender-advanced-threat-protection.md) -### [Minimum requirements](windows-defender-atp\minimum-requirements-windows-defender-advanced-threat-protection.md) -### [Validate licensing and complete setup](windows-defender-atp\licensing-windows-defender-advanced-threat-protection.md) +### Get started +#### [Minimum requirements](windows-defender-atp\minimum-requirements-windows-defender-advanced-threat-protection.md) +#### [Validate licensing and complete setup](windows-defender-atp\licensing-windows-defender-advanced-threat-protection.md) #### [Troubleshoot subscription and portal access issues](windows-defender-atp\troubleshoot-onboarding-error-messages-windows-defender-advanced-threat-protection.md) -### [Preview features](windows-defender-atp\preview-windows-defender-advanced-threat-protection.md) -### [Data storage and privacy](windows-defender-atp\data-storage-privacy-windows-defender-advanced-threat-protection.md) -### [Assign user access to the portal](windows-defender-atp\assign-portal-access-windows-defender-advanced-threat-protection.md) +#### [Preview features](windows-defender-atp\preview-windows-defender-advanced-threat-protection.md) +#### [Data storage and privacy](windows-defender-atp\data-storage-privacy-windows-defender-advanced-threat-protection.md) +#### [Assign user access to the portal](windows-defender-atp\assign-portal-access-windows-defender-advanced-threat-protection.md) ### [Onboard endpoints and set up access](windows-defender-atp\onboard-configure-windows-defender-advanced-threat-protection.md) #### [Configure client endpoints](windows-defender-atp\configure-endpoints-windows-defender-advanced-threat-protection.md) ##### [Configure endpoints using Group Policy](windows-defender-atp\configure-endpoints-gp-windows-defender-advanced-threat-protection.md) @@ -30,25 +31,29 @@ ###### [Configure endpoints using Microsoft Intune](windows-defender-atp\configure-endpoints-mdm-windows-defender-advanced-threat-protection.md#configure-endpoints-using-microsoft-intune) ##### [Configure endpoints using a local script](windows-defender-atp\configure-endpoints-script-windows-defender-advanced-threat-protection.md) ##### [Configure non-persistent virtual desktop infrastructure (VDI) machines](windows-defender-atp\configure-endpoints-vdi-windows-defender-advanced-threat-protection.md) -#### [Configure non-Windows endpoints](windows-defender-atp\configure-endpoints-non-windows-windows-defender-advanced-threat-protection.md) #### [Configure server endpoints](windows-defender-atp\configure-server-endpoints-windows-defender-advanced-threat-protection.md) +#### [Configure non-Windows endpoints](windows-defender-atp\configure-endpoints-non-windows-windows-defender-advanced-threat-protection.md) #### [Run a detection test on a newly onboarded endpoint](windows-defender-atp\run-detection-test-windows-defender-advanced-threat-protection.md) #### [Configure proxy and Internet connectivity settings](windows-defender-atp\configure-proxy-internet-windows-defender-advanced-threat-protection.md) #### [Troubleshoot onboarding issues](windows-defender-atp\troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) -### [Portal overview](windows-defender-atp\portal-overview-windows-defender-advanced-threat-protection.md) -### [Use the Windows Defender ATP portal](windows-defender-atp\use-windows-defender-advanced-threat-protection.md) +### [Understand the Windows Defender ATP portal](windows-defender-atp\use-windows-defender-advanced-threat-protection.md) +#### [Portal overview](windows-defender-atp\portal-overview-windows-defender-advanced-threat-protection.md) #### [View the Security operations dashboard](windows-defender-atp\dashboard-windows-defender-advanced-threat-protection.md) #### [View the Security analytics dashboard](windows-defender-atp\security-analytics-dashboard-windows-defender-advanced-threat-protection.md) -#### [View and organize the Alerts queue](windows-defender-atp\alerts-queue-windows-defender-advanced-threat-protection.md) -#### [Investigate alerts](windows-defender-atp\investigate-alerts-windows-defender-advanced-threat-protection.md) -##### [Alert process tree](windows-defender-atp\investigate-alerts-windows-defender-advanced-threat-protection.md#alert-process-tree) -##### [Incident graph](windows-defender-atp\investigate-alerts-windows-defender-advanced-threat-protection.md#incident-graph) -##### [Alert timeline](windows-defender-atp\investigate-alerts-windows-defender-advanced-threat-protection.md#alert-timeline) -#### [Investigate files](windows-defender-atp\investigate-files-windows-defender-advanced-threat-protection.md) -#### [Investigate an IP address](windows-defender-atp\investigate-ip-windows-defender-advanced-threat-protection.md) -#### [Investigate a domain](windows-defender-atp\investigate-domain-windows-defender-advanced-threat-protection.md) -#### [View and organize the Machines list](windows-defender-atp\machines-view-overview-windows-defender-advanced-threat-protection.md) -#### [Investigate machines](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md) + +### Investigate and remediate threats +#### Alerts queue +##### [View and organize the Alerts queue](windows-defender-atp\alerts-queue-windows-defender-advanced-threat-protection.md) +##### [Manage alerts](windows-defender-atp\manage-alerts-windows-defender-advanced-threat-protection.md) +##### [Investigate alerts](windows-defender-atp\investigate-alerts-windows-defender-advanced-threat-protection.md) +##### [Investigate files](windows-defender-atp\investigate-files-windows-defender-advanced-threat-protection.md) +##### [Investigate machines](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md) +##### [Investigate an IP address](windows-defender-atp\investigate-ip-windows-defender-advanced-threat-protection.md) +##### [Investigate a domain](windows-defender-atp\investigate-domain-windows-defender-advanced-threat-protection.md) +##### [Investigate a user account](windows-defender-atp\investigate-user-windows-defender-advanced-threat-protection.md) + +#### Machines list +##### [View and organize the Machines list](windows-defender-atp\machines-view-overview-windows-defender-advanced-threat-protection.md) ##### [Manage machine group and tags](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#manage-machine-group-and-tags) ##### [Alerts related to this machine](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#alerts-related-to-this-machine) ##### [Machine timeline](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#machine-timeline) @@ -56,8 +61,8 @@ ###### [Filter events from a specific date](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#filter-events-from-a-specific-date) ###### [Export machine timeline events](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#export-machine-timeline-events) ###### [Navigate between pages](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#navigate-between-pages) -#### [Investigate a user account](windows-defender-atp\investigate-user-windows-defender-advanced-threat-protection.md) -#### [Manage alerts](windows-defender-atp\manage-alerts-windows-defender-advanced-threat-protection.md) + + #### [Take response actions](windows-defender-atp\response-actions-windows-defender-advanced-threat-protection.md) ##### [Take response actions on a machine](windows-defender-atp\respond-machine-alerts-windows-defender-advanced-threat-protection.md) ###### [Collect investigation package](windows-defender-atp\respond-machine-alerts-windows-defender-advanced-threat-protection.md#collect-investigation-package-from-machines) @@ -77,105 +82,114 @@ ####### [Submit files for analysis](windows-defender-atp\respond-file-alerts-windows-defender-advanced-threat-protection.md#submit-files-for-analysis) ####### [View deep analysis reports](windows-defender-atp\respond-file-alerts-windows-defender-advanced-threat-protection.md#view-deep-analysis-reports) ####### [Troubleshoot deep analysis](windows-defender-atp\respond-file-alerts-windows-defender-advanced-threat-protection.md#troubleshoot-deep-analysis) -### [Pull alerts to your SIEM tools](windows-defender-atp\configure-siem-windows-defender-advanced-threat-protection.md) -#### [Enable SIEM integration](windows-defender-atp\enable-siem-integration-windows-defender-advanced-threat-protection.md) -#### [Configure Splunk to pull alerts](windows-defender-atp\configure-splunk-windows-defender-advanced-threat-protection.md) -#### [Configure HP ArcSight to pull alerts](windows-defender-atp\configure-arcsight-windows-defender-advanced-threat-protection.md) -#### [Windows Defender ATP alert API fields](windows-defender-atp\api-portal-mapping-windows-defender-advanced-threat-protection.md) -#### [Pull alerts using REST API](windows-defender-atp\pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) -#### [Troubleshoot SIEM tool integration issues](windows-defender-atp\troubleshoot-siem-windows-defender-advanced-threat-protection.md) -### [Use the threat intelligence API to create custom alerts](windows-defender-atp\use-custom-ti-windows-defender-advanced-threat-protection.md) -#### [Understand threat intelligence concepts](windows-defender-atp\threat-indicator-concepts-windows-defender-advanced-threat-protection.md) -#### [Enable the custom threat intelligence application](windows-defender-atp\enable-custom-ti-windows-defender-advanced-threat-protection.md) -#### [Create custom threat intelligence alerts](windows-defender-atp\custom-ti-api-windows-defender-advanced-threat-protection.md) -#### [PowerShell code examples](windows-defender-atp\powershell-example-code-windows-defender-advanced-threat-protection.md) -#### [Python code examples](windows-defender-atp\python-example-code-windows-defender-advanced-threat-protection.md) -#### [Experiment with custom threat intelligence alerts](windows-defender-atp\experiment-custom-ti-windows-defender-advanced-threat-protection.md) -#### [Troubleshoot custom threat intelligence issues](windows-defender-atp\troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md) -### [Use the Windows Defender ATP exposed APIs](windows-defender-atp\exposed-apis-windows-defender-advanced-threat-protection.md) -#### [Supported Windows Defender ATP APIs](windows-defender-atp\supported-apis-windows-defender-advanced-threat-protection.md) -##### Actor -###### [Get actor information](windows-defender-atp\get-actor-information-windows-defender-advanced-threat-protection.md) -###### [Get actor related alerts](windows-defender-atp\get-actor-related-alerts-windows-defender-advanced-threat-protection.md) -##### Alerts -###### [Get alerts](windows-defender-atp\get-alerts-windows-defender-advanced-threat-protection.md) -###### [Get alert information by ID](windows-defender-atp\get-alert-info-by-id-windows-defender-advanced-threat-protection.md) -###### [Get alert related actor information](windows-defender-atp\get-alert-related-actor-info-windows-defender-advanced-threat-protection.md) -###### [Get alert related domain information](windows-defender-atp\get-alert-related-domain-info-windows-defender-advanced-threat-protection.md) -###### [Get alert related file information](windows-defender-atp\get-alert-related-files-info-windows-defender-advanced-threat-protection.md) -###### [Get alert related IP information](windows-defender-atp\get-alert-related-ip-info-windows-defender-advanced-threat-protection.md) -###### [Get alert related machine information](windows-defender-atp\get-alert-related-machine-info-windows-defender-advanced-threat-protection.md) -##### Domain -###### [Get domain related alerts](windows-defender-atp\get-domain-related-alerts-windows-defender-advanced-threat-protection.md) -###### [Get domain related machines](windows-defender-atp\get-domain-related-machines-windows-defender-advanced-threat-protection.md) -###### [Get domain statistics](windows-defender-atp\get-domain-statistics-windows-defender-advanced-threat-protection.md) -###### [Is domain seen in organization](windows-defender-atp\is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) -##### File -###### [Block file API](windows-defender-atp\block-file-windows-defender-advanced-threat-protection.md) -###### [Get file information](windows-defender-atp\get-file-information-windows-defender-advanced-threat-protection.md) -###### [Get file related alerts](windows-defender-atp\get-file-related-alerts-windows-defender-advanced-threat-protection.md) -###### [Get file related machines](windows-defender-atp\get-file-related-machines-windows-defender-advanced-threat-protection.md) -###### [Get file statistics](windows-defender-atp\get-file-statistics-windows-defender-advanced-threat-protection.md) -###### [Get FileActions collection API](windows-defender-atp\get-fileactions-collection-windows-defender-advanced-threat-protection.md) -###### [Unblock file API](windows-defender-atp\unblock-file-windows-defender-advanced-threat-protection.md) +### API and SIEM support +#### [Pull alerts to your SIEM tools](windows-defender-atp\configure-siem-windows-defender-advanced-threat-protection.md) +##### [Enable SIEM integration](windows-defender-atp\enable-siem-integration-windows-defender-advanced-threat-protection.md) +##### [Configure Splunk to pull alerts](windows-defender-atp\configure-splunk-windows-defender-advanced-threat-protection.md) +##### [Configure HP ArcSight to pull alerts](windows-defender-atp\configure-arcsight-windows-defender-advanced-threat-protection.md) +##### [Windows Defender ATP alert API fields](windows-defender-atp\api-portal-mapping-windows-defender-advanced-threat-protection.md) +##### [Pull alerts using REST API](windows-defender-atp\pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) +##### [Troubleshoot SIEM tool integration issues](windows-defender-atp\troubleshoot-siem-windows-defender-advanced-threat-protection.md) -##### IP -###### [Get IP related alerts](windows-defender-atp\get-ip-related-alerts-windows-defender-advanced-threat-protection.md) -###### [Get IP related machines](windows-defender-atp\get-ip-related-machines-windows-defender-advanced-threat-protection.md) -###### [Get IP statistics](windows-defender-atp\get-ip-statistics-windows-defender-advanced-threat-protection.md) -###### [Is IP seen in organization](windows-defender-atp\is-ip-seen-org-windows-defender-advanced-threat-protection.md) -##### Machines -###### [Collect investigation package API](windows-defender-atp\collect-investigation-package-windows-defender-advanced-threat-protection.md) -###### [Find machine information by IP](windows-defender-atp\find-machine-info-by-ip-windows-defender-advanced-threat-protection.md) -###### [Get machines](windows-defender-atp\get-machines-windows-defender-advanced-threat-protection.md) -###### [Get FileMachineAction object API](windows-defender-atp\get-filemachineaction-object-windows-defender-advanced-threat-protection.md) -###### [Get FileMachineActions collection API](windows-defender-atp\get-filemachineactions-collection-windows-defender-advanced-threat-protection.md) -###### [Get machine by ID](windows-defender-atp\get-machine-by-id-windows-defender-advanced-threat-protection.md) -###### [Get machine log on users](windows-defender-atp\get-machine-log-on-users-windows-defender-advanced-threat-protection.md) -###### [Get machine related alerts](windows-defender-atp\get-machine-related-alerts-windows-defender-advanced-threat-protection.md) -###### [Get MachineAction object API](windows-defender-atp\get-machineaction-object-windows-defender-advanced-threat-protection.md) -###### [Get MachineActions collection API](windows-defender-atp\get-machineactions-collection-windows-defender-advanced-threat-protection.md) -###### [Get machines](windows-defender-atp\get-machines-windows-defender-advanced-threat-protection.md) -###### [Get package SAS URI API](windows-defender-atp\get-package-sas-uri-windows-defender-advanced-threat-protection.md) -###### [Isolate machine API](windows-defender-atp\isolate-machine-windows-defender-advanced-threat-protection.md) -###### [Release machine from isolation API](windows-defender-atp\unisolate-machine-windows-defender-advanced-threat-protection.md) -###### [Remove app restriction API](windows-defender-atp\unrestrict-code-execution-windows-defender-advanced-threat-protection.md) -###### [Request sample API](windows-defender-atp\request-sample-windows-defender-advanced-threat-protection.md) -###### [Restrict app execution API](windows-defender-atp\restrict-code-execution-windows-defender-advanced-threat-protection.md) -###### [Run antivirus scan API](windows-defender-atp\run-av-scan-windows-defender-advanced-threat-protection.md) -###### [Stop and quarantine file API](windows-defender-atp\stop-quarantine-file-windows-defender-advanced-threat-protection.md) +#### [Use the threat intelligence API to create custom alerts](windows-defender-atp\use-custom-ti-windows-defender-advanced-threat-protection.md) +##### [Understand threat intelligence concepts](windows-defender-atp\threat-indicator-concepts-windows-defender-advanced-threat-protection.md) +##### [Enable the custom threat intelligence application](windows-defender-atp\enable-custom-ti-windows-defender-advanced-threat-protection.md) +##### [Create custom threat intelligence alerts](windows-defender-atp\custom-ti-api-windows-defender-advanced-threat-protection.md) +##### [PowerShell code examples](windows-defender-atp\powershell-example-code-windows-defender-advanced-threat-protection.md) +##### [Python code examples](windows-defender-atp\python-example-code-windows-defender-advanced-threat-protection.md) +##### [Experiment with custom threat intelligence alerts](windows-defender-atp\experiment-custom-ti-windows-defender-advanced-threat-protection.md) +##### [Troubleshoot custom threat intelligence issues](windows-defender-atp\troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md) +#### [Use the Windows Defender ATP exposed APIs](windows-defender-atp\exposed-apis-windows-defender-advanced-threat-protection.md) +##### [Supported Windows Defender ATP APIs](windows-defender-atp\supported-apis-windows-defender-advanced-threat-protection.md) +###### Actor +####### [Get actor information](windows-defender-atp\get-actor-information-windows-defender-advanced-threat-protection.md) +####### [Get actor related alerts](windows-defender-atp\get-actor-related-alerts-windows-defender-advanced-threat-protection.md) +###### Alerts +####### [Get alerts](windows-defender-atp\get-alerts-windows-defender-advanced-threat-protection.md) +####### [Get alert information by ID](windows-defender-atp\get-alert-info-by-id-windows-defender-advanced-threat-protection.md) +####### [Get alert related actor information](windows-defender-atp\get-alert-related-actor-info-windows-defender-advanced-threat-protection.md) +####### [Get alert related domain information](windows-defender-atp\get-alert-related-domain-info-windows-defender-advanced-threat-protection.md) +####### [Get alert related file information](windows-defender-atp\get-alert-related-files-info-windows-defender-advanced-threat-protection.md) +####### [Get alert related IP information](windows-defender-atp\get-alert-related-ip-info-windows-defender-advanced-threat-protection.md) +####### [Get alert related machine information](windows-defender-atp\get-alert-related-machine-info-windows-defender-advanced-threat-protection.md) +###### Domain +####### [Get domain related alerts](windows-defender-atp\get-domain-related-alerts-windows-defender-advanced-threat-protection.md) +####### [Get domain related machines](windows-defender-atp\get-domain-related-machines-windows-defender-advanced-threat-protection.md) +####### [Get domain statistics](windows-defender-atp\get-domain-statistics-windows-defender-advanced-threat-protection.md) +####### [Is domain seen in organization](windows-defender-atp\is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) + +###### File +####### [Block file API](windows-defender-atp\block-file-windows-defender-advanced-threat-protection.md) +####### [Get file information](windows-defender-atp\get-file-information-windows-defender-advanced-threat-protection.md) +####### [Get file related alerts](windows-defender-atp\get-file-related-alerts-windows-defender-advanced-threat-protection.md) +####### [Get file related machines](windows-defender-atp\get-file-related-machines-windows-defender-advanced-threat-protection.md) +####### [Get file statistics](windows-defender-atp\get-file-statistics-windows-defender-advanced-threat-protection.md) +####### [Get FileActions collection API](windows-defender-atp\get-fileactions-collection-windows-defender-advanced-threat-protection.md) +####### [Unblock file API](windows-defender-atp\unblock-file-windows-defender-advanced-threat-protection.md) + +###### IP +####### [Get IP related alerts](windows-defender-atp\get-ip-related-alerts-windows-defender-advanced-threat-protection.md) +####### [Get IP related machines](windows-defender-atp\get-ip-related-machines-windows-defender-advanced-threat-protection.md) +####### [Get IP statistics](windows-defender-atp\get-ip-statistics-windows-defender-advanced-threat-protection.md) +####### [Is IP seen in organization](windows-defender-atp\is-ip-seen-org-windows-defender-advanced-threat-protection.md) +###### Machines +####### [Collect investigation package API](windows-defender-atp\collect-investigation-package-windows-defender-advanced-threat-protection.md) +####### [Find machine information by IP](windows-defender-atp\find-machine-info-by-ip-windows-defender-advanced-threat-protection.md) +####### [Get machines](windows-defender-atp\get-machines-windows-defender-advanced-threat-protection.md) +####### [Get FileMachineAction object API](windows-defender-atp\get-filemachineaction-object-windows-defender-advanced-threat-protection.md) +####### [Get FileMachineActions collection API](windows-defender-atp\get-filemachineactions-collection-windows-defender-advanced-threat-protection.md) +####### [Get machine by ID](windows-defender-atp\get-machine-by-id-windows-defender-advanced-threat-protection.md) +####### [Get machine log on users](windows-defender-atp\get-machine-log-on-users-windows-defender-advanced-threat-protection.md) +####### [Get machine related alerts](windows-defender-atp\get-machine-related-alerts-windows-defender-advanced-threat-protection.md) +####### [Get MachineAction object API](windows-defender-atp\get-machineaction-object-windows-defender-advanced-threat-protection.md) +####### [Get MachineActions collection API](windows-defender-atp\get-machineactions-collection-windows-defender-advanced-threat-protection.md) +####### [Get machines](windows-defender-atp\get-machines-windows-defender-advanced-threat-protection.md) +####### [Get package SAS URI API](windows-defender-atp\get-package-sas-uri-windows-defender-advanced-threat-protection.md) +####### [Isolate machine API](windows-defender-atp\isolate-machine-windows-defender-advanced-threat-protection.md) +####### [Release machine from isolation API](windows-defender-atp\unisolate-machine-windows-defender-advanced-threat-protection.md) +####### [Remove app restriction API](windows-defender-atp\unrestrict-code-execution-windows-defender-advanced-threat-protection.md) +####### [Request sample API](windows-defender-atp\request-sample-windows-defender-advanced-threat-protection.md) +####### [Restrict app execution API](windows-defender-atp\restrict-code-execution-windows-defender-advanced-threat-protection.md) +####### [Run antivirus scan API](windows-defender-atp\run-av-scan-windows-defender-advanced-threat-protection.md) +####### [Stop and quarantine file API](windows-defender-atp\stop-quarantine-file-windows-defender-advanced-threat-protection.md) -##### User -###### [Get alert related user information](windows-defender-atp\get-alert-related-user-info-windows-defender-advanced-threat-protection.md) -###### [Get user information](windows-defender-atp\get-user-information-windows-defender-advanced-threat-protection.md) -###### [Get user related alerts](windows-defender-atp\get-user-related-alerts-windows-defender-advanced-threat-protection.md) -###### [Get user related machines](windows-defender-atp\get-user-related-machines-windows-defender-advanced-threat-protection.md) +###### User +####### [Get alert related user information](windows-defender-atp\get-alert-related-user-info-windows-defender-advanced-threat-protection.md) +####### [Get user information](windows-defender-atp\get-user-information-windows-defender-advanced-threat-protection.md) +####### [Get user related alerts](windows-defender-atp\get-user-related-alerts-windows-defender-advanced-threat-protection.md) +####### [Get user related machines](windows-defender-atp\get-user-related-machines-windows-defender-advanced-threat-protection.md) +### Reporting +#### [Create and build Power BI reports using Windows Defender ATP data](windows-defender-atp\powerbi-reports-windows-defender-advanced-threat-protection.md) -### [Create and build Power BI reports using Windows Defender ATP data](windows-defender-atp\powerbi-reports-windows-defender-advanced-threat-protection.md) -### [Check sensor state](windows-defender-atp\check-sensor-status-windows-defender-advanced-threat-protection.md) -#### [Fix unhealthy sensors](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) +### Check service and sensor state +#### [Check sensor state](windows-defender-atp\check-sensor-status-windows-defender-advanced-threat-protection.md) +##### [Fix unhealthy sensors](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) ##### [Inactive machines](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md#inactive-machines) ##### [Misconfigured machines](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md#misconfigured-machines) -### [Windows Defender ATP service health](windows-defender-atp\service-status-windows-defender-advanced-threat-protection.md) +#### [Windows Defender ATP service health](windows-defender-atp\service-status-windows-defender-advanced-threat-protection.md) ### [Configure Windows Defender ATP preferences settings](windows-defender-atp\preferences-setup-windows-defender-advanced-threat-protection.md) #### [Update general settings](windows-defender-atp\general-settings-windows-defender-advanced-threat-protection.md) -#### [Turn on advanced features](windows-defender-atp\advanced-features-windows-defender-advanced-threat-protection.md) -#### [Turn on preview experience](windows-defender-atp\preview-settings-windows-defender-advanced-threat-protection.md) +#### [Enable advanced features](windows-defender-atp\advanced-features-windows-defender-advanced-threat-protection.md) +#### [Enable preview experience](windows-defender-atp\preview-settings-windows-defender-advanced-threat-protection.md) #### [Configure email notifications](windows-defender-atp\configure-email-notifications-windows-defender-advanced-threat-protection.md) #### [Enable SIEM integration](windows-defender-atp\enable-siem-integration-windows-defender-advanced-threat-protection.md) #### [Enable Threat intel API](windows-defender-atp\enable-custom-ti-windows-defender-advanced-threat-protection.md) #### [Enable and create Power BI reports using Windows Defender ATP data](windows-defender-atp\powerbi-reports-windows-defender-advanced-threat-protection.md) #### [Enable Security Analytics security controls](windows-defender-atp\enable-security-analytics-windows-defender-advanced-threat-protection.md) -### [Windows Defender ATP time zone settings](windows-defender-atp\settings-windows-defender-advanced-threat-protection.md) +### [Configure Windows Defender ATP time zone settings](windows-defender-atp\settings-windows-defender-advanced-threat-protection.md) ### [Access the Windows Defender ATP Community Center](windows-defender-atp\community-windows-defender-advanced-threat-protection.md) ### [Troubleshoot Windows Defender ATP](windows-defender-atp\troubleshoot-windows-defender-advanced-threat-protection.md) -### [Review events and errors on endpoints with Event Viewer](windows-defender-atp\event-error-codes-windows-defender-advanced-threat-protection.md) +#### [Review events and errors on endpoints with Event Viewer](windows-defender-atp\event-error-codes-windows-defender-advanced-threat-protection.md) ### [Windows Defender Antivirus compatibility with Windows Defender ATP](windows-defender-atp\defender-compatibility-windows-defender-advanced-threat-protection.md) + + +## [Windows Defender Antivirus in Windows 10](windows-defender-antivirus\windows-defender-antivirus-in-windows-10.md) +### [Windows Defender AV in the Windows Defender Security Center app](windows-defender-antivirus\windows-defender-security-center-antivirus.md) ## [Windows Defender Antivirus in Windows 10](windows-defender-antivirus\windows-defender-antivirus-in-windows-10.md) ### [Windows Defender AV in the Windows Defender Security Center app](windows-defender-antivirus\windows-defender-security-center-antivirus.md) From 35a60a172b8dc8558ea339cb78e3b818cf87087a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 14:40:35 -0800 Subject: [PATCH 060/106] test --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 60a2fa1d16..8b44574c26 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -16,7 +16,7 @@ ## [Windows Defender Advanced Threat Protection](windows-defender-atp\windows-defender-advanced-threat-protection.md) -### Get started +###Get started #### [Minimum requirements](windows-defender-atp\minimum-requirements-windows-defender-advanced-threat-protection.md) #### [Validate licensing and complete setup](windows-defender-atp\licensing-windows-defender-advanced-threat-protection.md) #### [Troubleshoot subscription and portal access issues](windows-defender-atp\troubleshoot-onboarding-error-messages-windows-defender-advanced-threat-protection.md) From a87281f91d7d73f20cb573c5fac430339dac7577 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 14:55:12 -0800 Subject: [PATCH 061/106] fix toc --- windows/security/threat-protection/TOC.md | 26 +++++++++++------------ 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 8b44574c26..369801f8ba 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -41,8 +41,8 @@ #### [View the Security operations dashboard](windows-defender-atp\dashboard-windows-defender-advanced-threat-protection.md) #### [View the Security analytics dashboard](windows-defender-atp\security-analytics-dashboard-windows-defender-advanced-threat-protection.md) -### Investigate and remediate threats -#### Alerts queue +###Investigate and remediate threats +####Alerts queue ##### [View and organize the Alerts queue](windows-defender-atp\alerts-queue-windows-defender-advanced-threat-protection.md) ##### [Manage alerts](windows-defender-atp\manage-alerts-windows-defender-advanced-threat-protection.md) ##### [Investigate alerts](windows-defender-atp\investigate-alerts-windows-defender-advanced-threat-protection.md) @@ -52,7 +52,7 @@ ##### [Investigate a domain](windows-defender-atp\investigate-domain-windows-defender-advanced-threat-protection.md) ##### [Investigate a user account](windows-defender-atp\investigate-user-windows-defender-advanced-threat-protection.md) -#### Machines list +####Machines list ##### [View and organize the Machines list](windows-defender-atp\machines-view-overview-windows-defender-advanced-threat-protection.md) ##### [Manage machine group and tags](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#manage-machine-group-and-tags) ##### [Alerts related to this machine](windows-defender-atp\investigate-machines-windows-defender-advanced-threat-protection.md#alerts-related-to-this-machine) @@ -83,7 +83,7 @@ ####### [View deep analysis reports](windows-defender-atp\respond-file-alerts-windows-defender-advanced-threat-protection.md#view-deep-analysis-reports) ####### [Troubleshoot deep analysis](windows-defender-atp\respond-file-alerts-windows-defender-advanced-threat-protection.md#troubleshoot-deep-analysis) -### API and SIEM support +###API and SIEM support #### [Pull alerts to your SIEM tools](windows-defender-atp\configure-siem-windows-defender-advanced-threat-protection.md) ##### [Enable SIEM integration](windows-defender-atp\enable-siem-integration-windows-defender-advanced-threat-protection.md) ##### [Configure Splunk to pull alerts](windows-defender-atp\configure-splunk-windows-defender-advanced-threat-protection.md) @@ -102,10 +102,10 @@ ##### [Troubleshoot custom threat intelligence issues](windows-defender-atp\troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md) #### [Use the Windows Defender ATP exposed APIs](windows-defender-atp\exposed-apis-windows-defender-advanced-threat-protection.md) ##### [Supported Windows Defender ATP APIs](windows-defender-atp\supported-apis-windows-defender-advanced-threat-protection.md) -###### Actor +######Actor ####### [Get actor information](windows-defender-atp\get-actor-information-windows-defender-advanced-threat-protection.md) ####### [Get actor related alerts](windows-defender-atp\get-actor-related-alerts-windows-defender-advanced-threat-protection.md) -###### Alerts +######Alerts ####### [Get alerts](windows-defender-atp\get-alerts-windows-defender-advanced-threat-protection.md) ####### [Get alert information by ID](windows-defender-atp\get-alert-info-by-id-windows-defender-advanced-threat-protection.md) ####### [Get alert related actor information](windows-defender-atp\get-alert-related-actor-info-windows-defender-advanced-threat-protection.md) @@ -113,13 +113,13 @@ ####### [Get alert related file information](windows-defender-atp\get-alert-related-files-info-windows-defender-advanced-threat-protection.md) ####### [Get alert related IP information](windows-defender-atp\get-alert-related-ip-info-windows-defender-advanced-threat-protection.md) ####### [Get alert related machine information](windows-defender-atp\get-alert-related-machine-info-windows-defender-advanced-threat-protection.md) -###### Domain +######Domain ####### [Get domain related alerts](windows-defender-atp\get-domain-related-alerts-windows-defender-advanced-threat-protection.md) ####### [Get domain related machines](windows-defender-atp\get-domain-related-machines-windows-defender-advanced-threat-protection.md) ####### [Get domain statistics](windows-defender-atp\get-domain-statistics-windows-defender-advanced-threat-protection.md) ####### [Is domain seen in organization](windows-defender-atp\is-domain-seen-in-org-windows-defender-advanced-threat-protection.md) -###### File +######File ####### [Block file API](windows-defender-atp\block-file-windows-defender-advanced-threat-protection.md) ####### [Get file information](windows-defender-atp\get-file-information-windows-defender-advanced-threat-protection.md) ####### [Get file related alerts](windows-defender-atp\get-file-related-alerts-windows-defender-advanced-threat-protection.md) @@ -128,12 +128,12 @@ ####### [Get FileActions collection API](windows-defender-atp\get-fileactions-collection-windows-defender-advanced-threat-protection.md) ####### [Unblock file API](windows-defender-atp\unblock-file-windows-defender-advanced-threat-protection.md) -###### IP +######IP ####### [Get IP related alerts](windows-defender-atp\get-ip-related-alerts-windows-defender-advanced-threat-protection.md) ####### [Get IP related machines](windows-defender-atp\get-ip-related-machines-windows-defender-advanced-threat-protection.md) ####### [Get IP statistics](windows-defender-atp\get-ip-statistics-windows-defender-advanced-threat-protection.md) ####### [Is IP seen in organization](windows-defender-atp\is-ip-seen-org-windows-defender-advanced-threat-protection.md) -###### Machines +######Machines ####### [Collect investigation package API](windows-defender-atp\collect-investigation-package-windows-defender-advanced-threat-protection.md) ####### [Find machine information by IP](windows-defender-atp\find-machine-info-by-ip-windows-defender-advanced-threat-protection.md) ####### [Get machines](windows-defender-atp\get-machines-windows-defender-advanced-threat-protection.md) @@ -156,16 +156,16 @@ -###### User +######User ####### [Get alert related user information](windows-defender-atp\get-alert-related-user-info-windows-defender-advanced-threat-protection.md) ####### [Get user information](windows-defender-atp\get-user-information-windows-defender-advanced-threat-protection.md) ####### [Get user related alerts](windows-defender-atp\get-user-related-alerts-windows-defender-advanced-threat-protection.md) ####### [Get user related machines](windows-defender-atp\get-user-related-machines-windows-defender-advanced-threat-protection.md) -### Reporting +###Reporting #### [Create and build Power BI reports using Windows Defender ATP data](windows-defender-atp\powerbi-reports-windows-defender-advanced-threat-protection.md) -### Check service and sensor state +###Check service and sensor state #### [Check sensor state](windows-defender-atp\check-sensor-status-windows-defender-advanced-threat-protection.md) ##### [Fix unhealthy sensors](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) ##### [Inactive machines](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md#inactive-machines) From fa4f1b5f9417f44bf48172e6a1cb2f9446f086c8 Mon Sep 17 00:00:00 2001 From: shortpatti Date: Tue, 13 Feb 2018 15:13:03 -0800 Subject: [PATCH 062/106] fixed the 'Applies to' format --- browsers/edge/available-policies.md | 52 +++++++++++-------- .../edge/emie-to-improve-compatibility.md | 3 +- ...-guidance-using-microsoft-edge-and-ie11.md | 2 +- .../hardware-and-software-requirements.md | 8 ++- browsers/edge/microsoft-edge-faq.md | 5 +- .../security-enhancements-microsoft-edge.md | 13 ++--- 6 files changed, 42 insertions(+), 41 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 5c926558de..9bbec23d0f 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library title: Group Policy and Mobile Device Management settings for Microsoft Edge (Microsoft Edge for IT Pros) ms.localizationpriority: high -ms.date: 09/13/2017 +ms.date: 09/13/2017 #Previsou release date --- @@ -24,7 +24,13 @@ By using Group Policy and Intune, you can set up a policy setting once, and then > For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](https://go.microsoft.com/fwlink/p/?LinkId=617921), [Group Policy and the Local Group Policy Editor](https://go.microsoft.com/fwlink/p/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](https://go.microsoft.com/fwlink/p/?LinkId=617923), and [Group Policy and Windows PowerShell](https://go.microsoft.com/fwlink/p/?LinkId=617924). ## Group Policy settings +Microsoft Edge works with the following Group Policy settings to help you manager your company's web browser configurations. The Group Policy settings are found in the Group Policy Editor in the following location: + +`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\` + + ### Allow Address bar drop-down list suggestions >*Supporteded versions: Windows 10, version 1703* @@ -33,7 +39,7 @@ This policy setting lets you decide whether the Address bar drop-down functional | If you... | Then... | | --- | --- | | Enable this setting (default) | Employees can see the Address bar drop-down functionality in Microsoft Edge. | -| Disable this setting | Employees won't see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."

Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. | +| Disable this setting | Employees do not see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."

Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. | | ### Allow Adobe Flash @@ -73,7 +79,7 @@ This policy setting lets you decide whether employees can use Edge Extensions. | If you… | Then… | | --- | --- | | Enable this setting | Employees can use Edge Extensions. | -| Disable this setting | [@Reviewer: why would a company disable this setting?] Employees cannot use Edge Extensions. | +| Disable this setting | [@Reviewer: why would a company disable this setting? Is this because of potential memory leaks?] Employees cannot use Edge Extensions. | | ### Allow InPrivate browsing @@ -83,7 +89,7 @@ This policy setting lets you decide whether employees can browse using InPrivate | If you… | Then… | | --- | --- | | Enable this setting (default) | Employees can use InPrivate website browsing. | -| Disable this setting | [@Reviewer: why would a company disable this setting?] Employees cannot use InPrivate website browsing. | +| Disable this setting | [@Reviewer: why would a company disable this setting? Is this to discourage users from browser inappropriate websites? What are the use cases for having this turned off?] Employees cannot use InPrivate website browsing. | | ### Allow Microsoft Compatibility List @@ -101,7 +107,7 @@ This policy setting lets you decide whether to use the Microsoft Compatibility L This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. -For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +For more info, see the [Microsoft browser extension policy](http://aka.ms/browserpolicy). | If you… | Then… | | --- | --- | @@ -123,7 +129,7 @@ This policy setting lets you configure what appears when Microsoft Edge opens a ### Configure additional search engines >*Supported versions: Windows 10, version 1703* -This policy setting lets you add up to 5 additional search engines, which can't be removed by your employees but can make a personal default engine. This setting doesn't set the default search engine. For that, you must use the "Set default search engine" setting. +This policy setting lets you add up to 5 additional search engines, which cannot be removed by your employees but can make a personal default engine. This setting does not set the default search engine. For that, you must use the "Set default search engine" setting. | If you… | Then… | | --- | --- | | Enable this setting | You can add up to 5 additional search engines. For each additional search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

``

For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. | Disable this setting (default) | Any added search engines are removed from the employee’s device. [@Reviewer: is this implying that Bing is the only search engine on the employee’s device?] | @@ -201,14 +207,14 @@ This policy setting lets you decide whether search suggestions appear in the Add | If you… | Then… | | --- | --- | | Enable this setting | Employees can see search suggestions in the Address bar. | -| Disable this setting | Employees can't see search suggestions in the Address bar. | +| Disable this setting | Employees cannot see search suggestions in the Address bar. | | Do not configure this setting (default) | Employees can choose whether search suggestions appear in the Address bar. | | ### Configure Start pages >*Supported versions: Windows 10, version 1511 or later* -This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees won't be able to change this after you set it. +This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees will not be able to change this after you set it. | If you… | Then… | | --- | --- | | Enable this setting | You must include URLs to the pages, separating multiple pages by using angle brackets in this format:

`` | @@ -255,7 +261,7 @@ This policy setting lets you configure whether to turn on Windows Defender Smart This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect [@Reviewer: shouldn't this be “…is enabled” instead of "...is in effect"?]. This setting only applies to domain-joined or MDM-enrolled devices. -For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +For more info, see the [Microsoft browser extension policy](http://aka.ms/browserpolicy). | If you… | Then… | | --- | --- | @@ -267,9 +273,11 @@ For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy) >*Supported versions: Windows 10, version 1703* This policy setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position. + +[@Reviewer: what is the default: enable or disable?] | If you… | Then… | | --- | --- | -| Enable this setting | Employees can sync their favorites between Internet Explorer and Microsoft Edge. Note. Enabling this setting stops Edge favorites from syncing between connected Windows 10 devices. [what does this mean? I want to know more about what this note is saying. More details and maybe an example or scenario.] | +| Enable this setting | Employees can sync their favorites between Internet Explorer and Microsoft Edge.

Enabling this setting stops Edge favorites from syncing between connected Windows 10 devices. [@Reviewer: what does this mean? I want to know more about what this is saying. More details and maybe an example or scenario.] | | Disable or do not configure this setting | Employees cannot sync their favorites between Internet Explorer and Microsoft Edge. | | @@ -348,7 +356,7 @@ This policy setting lets you decide whether your intranet sites should all open This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. -For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy). +For more info, see the [Microsoft browser extension policy](http://aka.ms/browserpolicy). | If you… | Then… | | --- | --- | @@ -463,7 +471,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - **0.** Employees can't use the F12 Developer Tools. + - **0.** Employees cannot use the F12 Developer Tools. - **1 (default).** Employees can use the F12 Developer Tools. @@ -565,7 +573,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - **0.** Additional search engines aren't allowed and the default can’t be changed in the Address bar. + - **0.** Additional search engines are not allowed and the default can’t be changed in the Address bar. - **1 (default).** Additional search engines are allowed and the default can be changed in the Address bar. @@ -582,7 +590,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - **0 (default).** Employees can't use Password Manager to save passwords locally. + - **0 (default).** Employees cannot use Password Manager to save passwords locally. - **1.** Employees can use Password Manager to save passwords locally. @@ -748,7 +756,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - URLs must be on separate lines and aren't shared between Microsoft Edge and Internet Explorer 11. + URLs must be on separate lines and are not shared between Microsoft Edge and Internet Explorer 11. ### FirstRunURL - **Supported versions:** Windows 10, version 1511 or later @@ -803,7 +811,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **0 (default).** Employees can access the about:flags page in Microsoft Edge. - - **1.** Employees can't access the about:flags page in Microsoft Edge. + - **1.** Employees cannot access the about:flags page in Microsoft Edge. ### PreventFirstRunPage - **Supported versions:** Windows 10, version 1703 @@ -820,7 +828,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **0 (default).** Employees see the First Run webpage. - - **1.** Employees don't see the First Run webpage. + - **1.** Employees do not see the First Run webpage. ### PreventLiveTileDataCollection - **Supported versions:** Windows 10, version 1703 @@ -888,7 +896,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **0 (default).** Shows an employee's LocalHost IP address while using the WebRTC protocol. - - **1.** Doesn't show an employee's LocalHost IP address while using the WebRTC protocol. + - **1.** Does not show an employee's LocalHost IP address while using the WebRTC protocol. ### SendIntranetTraffictoInternetExplorer - **Supported versions:** Windows 10 @@ -969,9 +977,9 @@ These are additional Windows 10-specific Group Policy settings that work with M - **Description:** This policy settings lets you decide whether employees can use Cortana. - - If you enable or don't configure this setting, employees can use Cortana on their devices. + - If you enable or do not configure this setting, employees can use Cortana on their devices. - - If you disable this setting, employees won't be able to use Cortana on their devices. + - If you disable this setting, employees will not be able to use Cortana on their devices. >[!Note] >Employees can still perform searches even with Cortana turned off. @@ -983,7 +991,7 @@ These are additional Windows 10-specific Group Policy settings that work with M - If you enable this setting, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. - - If you disable or don't configure this setting (default), the Sync your Settings options are turned on, letting employees pick what can sync on their device. + - If you disable or do not configure this setting (default), the Sync your Settings options are turned on, letting employees pick what can sync on their device. ### Do not sync browser settings - **Location:** Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings @@ -992,7 +1000,7 @@ These are additional Windows 10-specific Group Policy settings that work with M - If you enable this setting, the Sync your Settings options are turned off so that browser groups are unable to sync their settings and info. You can use the Allow users to turn browser syncing on option to turn the feature off by default, but to let the employee change this setting. - - If you disable or don't configure this setting (default), the Sync your Settings options are turned on, letting browser groups pick what can sync on their device. + - If you disable or do not configure this setting (default), the Sync your Settings options are turned on, letting browser groups pick what can sync on their device. ## Microsoft Edge and Windows 10-specific MDM policy settings diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md index c9cd299705..cffe549908 100644 --- a/browsers/edge/emie-to-improve-compatibility.md +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -20,7 +20,8 @@ If you have specific web sites and apps that you know have compatibility problem Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. -> **Note**
+[@Reviewer: will RS5 have the need for the following note?] +>[!NOTE] >If you want to use Group Policy to set Internet Explorer as your default browser, you can find the info here, [Set the default browser using Group Policy]( https://go.microsoft.com/fwlink/p/?LinkId=620714). ## Fix specific websites diff --git a/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md b/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md index e699a000e8..075821264e 100644 --- a/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md +++ b/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md @@ -21,7 +21,7 @@ ms.date: 10/16/2017 - Windows 10 ## Enterprise guidance -Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956). +Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page]![](path/to/image.png)(https://go.microsoft.com/fwlink/p/?linkid=290956). We also recommend that you upgrade to IE11 if you're running any earlier versions of Internet Explorer. IE11 is supported on Windows 7, Windows 8.1, and Windows 10. So any legacy apps that work with IE11 will continue to work even as you migrate to Windows 10. diff --git a/browsers/edge/hardware-and-software-requirements.md b/browsers/edge/hardware-and-software-requirements.md index 6c45062cc6..81c4a2c980 100644 --- a/browsers/edge/hardware-and-software-requirements.md +++ b/browsers/edge/hardware-and-software-requirements.md @@ -13,15 +13,13 @@ ms.date: 07/27/2017 # Microsoft Edge requirements and language support -**Applies to:** - -- Windows 10 -- Windows 10 Mobile +>Applies to: Windows 10, Windows 10 Mobile Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list. ->**Note**
The Long-Term Servicing Branch (LTSB) versions of Windows, including Windows Server 2016, don't include Microsoft Edge or many other Universal Windows Platform (UWP) apps. These apps and their services are frequently updated with new functionality, and can't be supported on systems running the LTSB operating systems. For customers who require the LTSB for specialized devices, we recommend using Internet Explorer 11. +>[!NOTE] +>The Long-Term Servicing Branch (LTSB) versions of Windows, including Windows Server 2016, don't include Microsoft Edge or many other Universal Windows Platform (UWP) apps. These apps and their services are frequently updated with new functionality, and can't be supported on systems running the LTSB operating systems. For customers who require the LTSB for specialized devices, we recommend using Internet Explorer 11. ## Minimum system requirements Some of the components in this table might also need additional system resources. Check the component's documentation for more information. diff --git a/browsers/edge/microsoft-edge-faq.md b/browsers/edge/microsoft-edge-faq.md index ca6eea8b48..05335d7416 100644 --- a/browsers/edge/microsoft-edge-faq.md +++ b/browsers/edge/microsoft-edge-faq.md @@ -12,10 +12,7 @@ ms.date: 09/19/2017 # Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros -**Applies to:** - -- Windows 10 -- Windows 10 Mobile +>Applies to: Windows 10, Windows 10 Mobile **Q: What is the difference between Microsoft Edge and Internet Explorer 11? How do I know which one to use?** diff --git a/browsers/edge/security-enhancements-microsoft-edge.md b/browsers/edge/security-enhancements-microsoft-edge.md index 2e06bbe027..40952d55dc 100644 --- a/browsers/edge/security-enhancements-microsoft-edge.md +++ b/browsers/edge/security-enhancements-microsoft-edge.md @@ -11,19 +11,16 @@ ms.date: 10/16/2017 # Security enhancements for Microsoft Edge -**Applies to:** - -- Windows 10 -- Windows 10 Mobile +>Applies to: Windows 10, Windows 10 Mobile Microsoft Edge is designed with significant security improvements, helping to defend people from increasingly sophisticated and prevalent web-based attacks against Windows. ## Help to protect against web-based security threats While most websites are safe, some sites have been designed to steal personal information or gain access to your system’s resources. Thieves by nature don’t care about rules, and will use any means to take advantage of victims, most often using trickery or hacking: -- **Trickery.** Means using things like “phishing” attacks to convince a person to enter a banking password into a website that looks like the bank, but isn’t. +- **Trickery** uses things like “phishing” attacks to convince a person to enter a banking password into a website that looks like the bank, but isn’t. -- **Hacking.** Means attacking a system through malformed content that exploits subtle flaws in a browser, or in various browser extensions, such as video decoders. This exploit lets an attacker run code on a device, taking over first a browsing session, and perhaps ultimately the entire device. +- **Hacking** attacks a system through malformed content that exploits subtle flaws in a browser, or in various browser extensions, such as video decoders. This exploit lets an attacker run code on a device, taking over first a browsing session, and perhaps ultimately the entire device. While trickery and hacking are threats faced by every browser, it’s important that we explore how Microsoft Edge addresses these threats and is helping make the web a safer experience. @@ -55,8 +52,8 @@ The Microsoft EdgeHTML engine also helps to defend against hacking through these - Support for the [HTTP Strict Transport Security (HSTS)](https://developer.microsoft.com/microsoft-edge/platform/documentation/dev-guide/security/HSTS/) security feature (IETF-standard compliant). This helps ensure that connections to important sites, such as to your bank, are always secured. - **Note**
- Both Microsoft Edge and Internet Explorer 11 support HSTS. +>[!NOTE] +>Both Microsoft Edge and Internet Explorer 11 support HSTS. #### All web content runs in an app container sandbox Internet Explorer 7 on Windows Vista was the first web browser to provide a browsing sandbox, called [Protected Mode](http://windows.microsoft.com/windows-vista/What-does-Internet-Explorer-protected-mode-do). Protected Mode forced the part of the browser that rendered web content to run with less privilege than the browser controls or the user, providing a level of isolation and protection should a malicious website attempt to exploit a bug in the browser or one of its plug-ins. From 6db857cde9fad1663ed1f8668bbd1c88fc5ddb57 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 15:14:47 -0800 Subject: [PATCH 063/106] fix in this section --- windows/security/threat-protection/TOC.md | 4 +-- ...ows-defender-advanced-threat-protection.md | 2 +- ...ows-defender-advanced-threat-protection.md | 1 + ...ows-defender-advanced-threat-protection.md | 2 +- ...ows-defender-advanced-threat-protection.md | 1 + ...ows-defender-advanced-threat-protection.md | 27 +++++-------------- 6 files changed, 13 insertions(+), 24 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 369801f8ba..c7591e103c 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -165,12 +165,12 @@ ###Reporting #### [Create and build Power BI reports using Windows Defender ATP data](windows-defender-atp\powerbi-reports-windows-defender-advanced-threat-protection.md) -###Check service and sensor state +###Check service health and sensor state #### [Check sensor state](windows-defender-atp\check-sensor-status-windows-defender-advanced-threat-protection.md) ##### [Fix unhealthy sensors](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md) ##### [Inactive machines](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md#inactive-machines) ##### [Misconfigured machines](windows-defender-atp\fix-unhealhty-sensors-windows-defender-advanced-threat-protection.md#misconfigured-machines) -#### [Windows Defender ATP service health](windows-defender-atp\service-status-windows-defender-advanced-threat-protection.md) +#### [Check service health](windows-defender-atp\service-status-windows-defender-advanced-threat-protection.md) ### [Configure Windows Defender ATP preferences settings](windows-defender-atp\preferences-setup-windows-defender-advanced-threat-protection.md) #### [Update general settings](windows-defender-atp\general-settings-windows-defender-advanced-threat-protection.md) #### [Enable advanced features](windows-defender-atp\advanced-features-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-siem-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-siem-windows-defender-advanced-threat-protection.md index 6cdf425a42..e3847a41ad 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-siem-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-siem-windows-defender-advanced-threat-protection.md @@ -57,8 +57,8 @@ For more information, see [Pull Windows Defender ATP alerts using REST API](pull Topic | Description :---|:--- [Enable SIEM integration in Windows Defender ATP](enable-siem-integration-windows-defender-advanced-threat-protection.md)| Learn about enabling the SIEM integration feature in the **Preferences setup** page in the portal so that you can use and generate the required information to configure supported SIEM tools. -[Configure ArcSight to pull Windows Defender ATP alerts](configure-arcsight-windows-defender-advanced-threat-protection.md)| Learn about installing the HP ArcSight REST FlexConnector package and the files you need to configure ArcSight to pull Windows Defender ATP alerts. [Configure Splunk to pull Windows Defender ATP alerts](configure-splunk-windows-defender-advanced-threat-protection.md)| Learn about installing the REST API Modular Input app and other configuration settings to enable Splunk to pull Windows Defender ATP alerts. +[Configure HP ArcSight to pull Windows Defender ATP alerts](configure-arcsight-windows-defender-advanced-threat-protection.md)| Learn about installing the HP ArcSight REST FlexConnector package and the files you need to configure ArcSight to pull Windows Defender ATP alerts. [Windows Defender ATP alert API fields](api-portal-mapping-windows-defender-advanced-threat-protection.md) | Understand what data fields are exposed as part of the alerts API and how they map to the Windows Defender ATP portal. [Pull Windows Defender ATP alerts using REST API](pull-alerts-using-rest-api-windows-defender-advanced-threat-protection.md) | Use the Client credentials OAuth 2.0 flow to pull alerts from Windows Defender ATP using REST API. [Troubleshoot SIEM tool integration issues](troubleshoot-siem-windows-defender-advanced-threat-protection.md) | Address issues you might encounter when using the SIEM integration feature. diff --git a/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index 487679607d..0dd01e9e60 100644 --- a/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -307,5 +307,6 @@ For more information, see [Windows 10 Licensing](https://www.microsoft.com/en-us ## Related topics +- [Troubleshoot Windows Defender ATP](troubleshoot-windows-defender-advanced-threat-protection.md) - [Configure Windows Defender ATP endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) - [Configure endpoint proxy and Internet connectivity settings](configure-proxy-internet-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 336ff2d686..64bd439f18 100644 --- a/windows/security/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -71,6 +71,6 @@ Support of use of comma as a separator in numbers are not supported. Regions whe >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-troubleshoot-belowfoldlink) -### Related topic +## Related topics - [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) - [Review events and errors on endpoints with Event Viewer](event-error-codes-windows-defender-advanced-threat-protection.md) diff --git a/windows/security/threat-protection/windows-defender-atp/use-custom-ti-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/use-custom-ti-windows-defender-advanced-threat-protection.md index 8e87ecf9ea..c4691b7324 100644 --- a/windows/security/threat-protection/windows-defender-atp/use-custom-ti-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/use-custom-ti-windows-defender-advanced-threat-protection.md @@ -40,4 +40,5 @@ Topic | Description [Create custom threat intelligence alerts](custom-ti-api-windows-defender-advanced-threat-protection.md) | Create custom threat intelligence alerts so that you can generate specific alerts that are applicable to your organization. [PowerShell code examples](powershell-example-code-windows-defender-advanced-threat-protection.md) | Use the PowerShell code examples to guide you in using the custom threat intelligence API. [Python code examples](python-example-code-windows-defender-advanced-threat-protection.md) | Use the Python code examples to guide you in using the custom threat intelligence API. +[Experiment with custom threat intelligence alerts](experiment-custom-ti-windows-defender-advanced-threat-protection.md) | This article demonstrates an end-to-end usage of the threat intelligence API to get you started in using the threat intelligence API. [Troubleshoot custom threat intelligence issues](troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md) | Learn how to address possible issues you might encounter while using the threat intelligence API. diff --git a/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md index 7068cb4a06..75aed7ba70 100644 --- a/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/use-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 10/16/2017 +ms.date: 02/13/2018 --- # Use the Windows Defender Advanced Threat Protection portal @@ -27,32 +27,19 @@ ms.date: 10/16/2017 >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-usewdatp-abovefoldlink) -A typical security breach investigation requires a member of a security operations team to: +You can use the Windows Defender ATP portal to carry out an end-to-end security breach investigation through the dashboards. -1. View an alert on the **Security operations dashboard** or **Alerts queue** -2. Review the indicators of compromise (IOC) or indications of attack (IOAs) -3. Review a timeline of alerts, behaviors, and events from the machine -4. Manage alerts, understand the threat or potential breach, collect information to support taking action, and resolve the alert +Use the **Security operations** dashboard to gain insight on the various alerts on machines and users in your network. -![Flowchart describing the four stages of investigation](images/overview.png) +Use the **Security analytics** dashboard to expand your visibility on the overall security posture of your organization. You'll see machines that require attention and recommendations that can help you reduce the attack surface in your organization. -Security operation teams can use Windows Defender ATP portal to carry out this end-to-end process without having to leave the portal. - -Teams can monitor the overall status of enterprise endpoints from the **Security operations dashboard**, gain insight on the various alerts, their category, when they were observed, and how long they’ve been in the network at a glance. ### In this section Topic | Description :---|:--- +[Portal overview](portal-overview-windows-defender-advanced-threat-protection.md) | Understand the portal layout and area descriptions. [View the Windows Defender Advanced Threat Protection Security operations dashboard](dashboard-windows-defender-advanced-threat-protection.md) | The Windows Defender ATP **Security operations dashboard** provides a snapshot of your network. You can view aggregates of alerts, the overall status of the service of the endpoints on your network, investigate machines, files, and URLs, and see snapshots of threats seen on machines. [View the Windows Defender Advanced Threat Protection Security analytics dashboard](security-analytics-dashboard-windows-defender-advanced-threat-protection.md) | The **Security Analytics dashboard** expands your visibility into the overall security posture of your organization. From this dashboard, you'll be able to quickly assess the security posture of your organization, see machines that require attention, as well as recommendations for actions to further reduce the attack surface in your organization - all in one place. -[View and organize the Alerts queue](alerts-queue-windows-defender-advanced-threat-protection.md) | You can sort and filter alerts across your network, and drill down on individual alert queues such as new, in progress, or resolved queues. -[Investigate alerts](investigate-alerts-windows-defender-advanced-threat-protection.md)| Investigate alerts in Windows Defender ATP which might indicate possible security breaches on endpoints in your organization. -[Investigate files](investigate-files-windows-defender-advanced-threat-protection.md) | Investigate the details of a file associated with a specific alert, behavior, or event to help determine if the file exhibits malicious activities, identify the attack motivation, and understand the potential scope of the breach. -[Investigate an IP address](investigate-ip-windows-defender-advanced-threat-protection.md) | Examine possible communication between your machines and external Internet protocol (IP) addresses. -[Investigate a domain](investigate-domain-windows-defender-advanced-threat-protection.md) | Investigate a domain to see if machines and servers in your enterprise network have been communicating with a known malicious domain. -[View and organize the Machines list](machines-view-overview-windows-defender-advanced-threat-protection.md)| You can sort, filter, and exporting the machine list. -[Investigate machines](investigate-machines-windows-defender-advanced-threat-protection.md) | The **Machines list** shows a list of the machines in your network, the corresponding number of active alerts for each machine categorized by alert severity levels, as well as the number of threats. -[Investigate a user account](investigate-user-windows-defender-advanced-threat-protection.md)| Investigate user accounts with the most active alerts. -[Manage alerts](manage-alerts-windows-defender-advanced-threat-protection.md) | The **Manage Alert** menu on every alert lets you change an alert's status, resolve it, suppress it, or contribute comments about the alert. -[Take response actions](response-actions-windows-defender-advanced-threat-protection.md)| Take action on a machine or file to quickly respond to detected attacks. + + From 85dc5d122f5a90c7e0297de4d99ba5d1bc1da798 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 15:32:56 -0800 Subject: [PATCH 064/106] update siem tool error --- ...ows-defender-advanced-threat-protection.md | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md index 114d11828b..f87986f306 100644 --- a/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md @@ -51,6 +51,26 @@ If your client secret expires or if you've misplaced the copy provided when you >Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-troubleshootsiem-belowfoldlink) +## Error when getting a refresh access token +If you encounter an error when trying to get a refresh token when using the threat intelligence API or SIEM tools, you'll need to add reply URL for relevant application in Azure Active Directory. + +1. Login to the [Azure management portal](https://ms.portal.azure.com). + +2. Select **Azure Active Directory**. + +3. Select your tenant. + +4. Click **App Registrations**. Then in the applications list, select the application: + - For SIEM: `https://WindowsDefenderATPSiemConnector` + - For Threat intelligence API: `https://WindowsDefenderATPCustomerTiConnector` + +5. Add the following URL: + - For US: `https://winatpmanagement-us.securitycenter.windows.com/UserAuthenticationCallback`. + - For Europe: `https://winatpmanagement-eu.securitycenter.windows.com/UserAuthenticationCallback` + +6. Click **Save**. + + ## Related topics - [Enable SIEM integration in Windows Defender ATP](enable-siem-integration-windows-defender-advanced-threat-protection.md) From f4efa69e168855c0694097c7219e03320fc1f035 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 15:33:31 -0800 Subject: [PATCH 065/106] update date --- ...bleshoot-siem-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md index 12e1769dc3..e69e3f6c99 100644 --- a/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: high -ms.date: 10/16/2017 +ms.date: 02/13/2018 --- # Troubleshoot SIEM tool integration issues From 059653c6c4741e62a065de7608d4b33dbff16174 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 13 Feb 2018 15:34:49 -0800 Subject: [PATCH 066/106] update --- ...ows-defender-advanced-threat-protection.md | 23 +------------------ 1 file changed, 1 insertion(+), 22 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md index e69e3f6c99..c384aeaa9e 100644 --- a/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/troubleshoot-siem-windows-defender-advanced-threat-protection.md @@ -48,27 +48,6 @@ If your client secret expires or if you've misplaced the copy provided when you 7. Copy the value and save it in a safe place. - ->Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-troubleshootsiem-belowfoldlink) / - - -## Error when getting a refresh access token -If you encounter an error when trying to get a refresh token when using the threat intelligence API or SIEM tools, you'll need to add reply URL for relevant application in Azure Active Directory. - -1. Login to the [Azure management portal](https://ms.portal.azure.com). - -2. Select **Azure Active Directory**. - -3. Select your tenant. - -4. Click **App Registrations**. Then in the applications list, select the application: - - For SIEM: `https://WindowsDefenderATPSiemConnector` - - For Threat intelligence API: `https://WindowsDefenderATPCustomerTiConnector` - -5. Add the following URL: `https://winatpmanagement-us.securitycenter.windows.com/UserAuthenticationCallback`. - -6. Click **Save**. - ## Error when getting a refresh access token If you encounter an error when trying to get a refresh token when using the threat intelligence API or SIEM tools, you'll need to add reply URL for relevant application in Azure Active Directory. @@ -88,7 +67,7 @@ If you encounter an error when trying to get a refresh token when using the thre 6. Click **Save**. - +>Want to experience Windows Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-troubleshootsiem-belowfoldlink) ## Related topics - [Enable SIEM integration in Windows Defender ATP](enable-siem-integration-windows-defender-advanced-threat-protection.md) From 274b2653d09c84ee71a54008826894b2dc117ea4 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 14 Feb 2018 00:16:31 +0000 Subject: [PATCH 067/106] Merged PR 5870: Adding detail to note that if you use /FullOS option you'll not be able to reuse the system partition Adding detail to note that if you use /FullOS option you'll not be able to reuse the system partition, per bugs: IRT Issue 125374:After MBR2GPT conversion, System Reserved Partition is unexpectedly assigned a drive letter and visible in 'File Explorer' Bug Bug 12115050: [PC_UPGRADE_RS3_NOTMDA][DELL][MBR2GPT][DOCUMENT CHANGE REQUEST]After MBR2GPT conversion, System Reserved Partition is unexpectedly assigned a drive letter and visible in 'File Explorer' IRT adn Bug --- windows/deployment/mbr-to-gpt.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/windows/deployment/mbr-to-gpt.md b/windows/deployment/mbr-to-gpt.md index 1f0ef3d834..8e67035c39 100644 --- a/windows/deployment/mbr-to-gpt.md +++ b/windows/deployment/mbr-to-gpt.md @@ -7,7 +7,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy author: greg-lindsay -ms.date: 10/27/2017 +ms.date: 02/13/2018 ms.localizationpriority: high --- @@ -70,7 +70,7 @@ If any of these checks fails, the conversion will not proceed and an error will |/disk:\| Specifies the disk number of the disk to be converted to GPT. If not specified, the system disk is used. The mechanism used is the same as that used by the diskpart.exe tool **SELECT DISK SYSTEM** command.| |/logs:\| Specifies the directory where MBR2GPT.exe logs should be written. If not specified, **%windir%** is used. If specified, the directory must already exist, it will not be automatically created or overwritten.| |/map:\=\| Specifies additional partition type mappings between MBR and GPT. The MBR partition number is specified in decimal notation, not hexidecimal. The GPT GUID can contain brackets, for example: **/map:42={af9b60a0-1431-4f62-bc68-3311714a69ad}**. Multiple /map options can be specified if multiple mappings are required. | -|/allowFullOS| By default, MBR2GPT.exe is blocked unless it is run from Windows PE. This option overrides this block and enables disk conversion while running in the full Windows environment.| +|/allowFullOS| By default, MBR2GPT.exe is blocked unless it is run from Windows PE. This option overrides this block and enables disk conversion while running in the full Windows environment.
**Note**: Since the existing MBR system partition is in use while running the full Windows environment, it cannot be reused. In this case, a new ESP is created by shrinking the OS partition.| ## Examples @@ -236,15 +236,18 @@ The following steps illustrate high-level phases of the MBR-to-GPT conversion pr For Windows to remain bootable after the conversion, an EFI system partition (ESP) must be in place. MBR2GPT creates the ESP using the following rules: -1. The existing MBR system partition is reused if it meets these requirements: - a. It is not also the OS or Windows Recovery Environment partition - b. It is at least 100MB (or 260MB for 4K sector size disks) in size - c. It is less than or equal to 1GB in size. This is a safety precaution to ensure it is not a data partition. - d. If the conversion is being performed from the full OS, the disk being converted is not the system disk. +1. The existing MBR system partition is reused if it meets these requirements:
+ a. It is not also the OS or Windows Recovery Environment partition.
+ b. It is at least 100MB (or 260MB for 4K sector size disks) in size.
+ c. It is less than or equal to 1GB in size. This is a safety precaution to ensure it is not a data partition.
+ d. The conversion is not being performed from the full OS. In this case, the existing MBR system partition is in use and cannot be repurposed. 2. If the existing MBR system partition cannot be reused, a new ESP is created by shrinking the OS partition. This new partition has a size of 100MB (or 260MB for 4K sector size disks) and is formatted FAT32. If the existing MBR system partition is not reused for the ESP, it is no longer used by the boot process after the conversion. Other partitions are not modified. +>[!IMPORTANT] +>If the existing MBR system partition is not reused for the ESP, it might be assigned a drive letter. If you do not wish to use this small partition, you must manually hide the drive letter. + ### Partition type mapping and partition attributes Since GPT partitions use a different set of type IDs than MBR partitions, each partition on the converted disk must be assigned a new type ID. The partition type mapping follows these rules: From a93f9183580dd379ade7ea9cc8ac167bcd074d00 Mon Sep 17 00:00:00 2001 From: chintanpatel Date: Tue, 13 Feb 2018 16:20:44 -0800 Subject: [PATCH 068/106] Update windowsdefenderapplicationguard-csp.md --- .../mdm/windowsdefenderapplicationguard-csp.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 6b6afaec07..710bbc8021 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -34,14 +34,18 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se **Settings/ClipboardFileType**

Determines the type of content that can be copied from the host to Application Guard environment and vice versa. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

-- 0 - Allow text copying. -- 1 - Allow text and image copying. +- 0 - Disables content copying. +- 1 - Allow text copying. +- 2 - Allow image copying. +- 3 - Allow text and image copying. **Settings/ClipboardSettings**

This policy setting allows you to decide how the clipboard behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete

- 0 (default) - Completely turns Off the clipboard functionality for the Application Guard. -- 1 - Turns On the clipboard functionality and lets you choose whether to additionally enable copying of certain content from Application Guard into Microsoft Edge and enable copying of certain content from Microsoft Edge into Application Guard. +- 1 - Turns On clipboard operation from an isolated session to the host +- 2 - Turns On clipboard operation from the host to an isolated session +- 3 - Turns On clipboard operation in both the directions > [!Important] > Allowing copied content to go from Microsoft Edge into Application Guard can cause potential security risks and isn't recommended. From 73d8887e9f827ad588e37a847cdd5de3d7fc645a Mon Sep 17 00:00:00 2001 From: shortpatti Date: Tue, 13 Feb 2018 16:21:55 -0800 Subject: [PATCH 069/106] fixed broken link to the IE11 download page --- .../edge/enterprise-guidance-using-microsoft-edge-and-ie11.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md b/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md index 075821264e..e699a000e8 100644 --- a/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md +++ b/browsers/edge/enterprise-guidance-using-microsoft-edge-and-ie11.md @@ -21,7 +21,7 @@ ms.date: 10/16/2017 - Windows 10 ## Enterprise guidance -Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page]![](path/to/image.png)(https://go.microsoft.com/fwlink/p/?linkid=290956). +Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956). We also recommend that you upgrade to IE11 if you're running any earlier versions of Internet Explorer. IE11 is supported on Windows 7, Windows 8.1, and Windows 10. So any legacy apps that work with IE11 will continue to work even as you migrate to Windows 10. From 3d263baf42bf7c88f333be600e44e1074ff5ec62 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 14 Feb 2018 14:55:18 +0000 Subject: [PATCH 070/106] Merged PR 5872: Fix link & guest mode instructions --- devices/surface-hub/connect-and-display-with-surface-hub.md | 2 +- devices/surface-hub/create-a-device-account-using-office-365.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface-hub/connect-and-display-with-surface-hub.md b/devices/surface-hub/connect-and-display-with-surface-hub.md index 1a16c46d86..44cc9145f9 100644 --- a/devices/surface-hub/connect-and-display-with-surface-hub.md +++ b/devices/surface-hub/connect-and-display-with-surface-hub.md @@ -31,7 +31,7 @@ When connecting external devices and displays to a Surface Hub, there are severa ## Guest Mode -Guest Mode uses a wired connection, so people can display content from their devices to the Surface Hub. If the source device is Windows-based, that device can also provide Touchback and Inkback. Surface Hub's internal PC takes video and audio from the connected device and presents them on the Surface Hub. If Surface Hub encounters a High-Bandwidth Digital Content Protection (HDCP) signal, the source will be re-routed through an alternate path, allowing the source to be displayed full-screen without violating HDCP requirements. +Guest Mode uses a wired connection, so people can display content from their devices to the Surface Hub. If the source device is Windows-based, that device can also provide Touchback and Inkback. Surface Hub's internal PC takes video and audio from the connected device and presents them on the Surface Hub. If Surface Hub encounters a High-Bandwidth Digital Content Protection (HDCP) signal, the source will be be displayed as a black image. To display your content without violating HDCP requirements, use the keypad on the right side of the Surface Hub to directly choose the external source. >[!NOTE] >When an HDCP source is connected, use the side keypad to change source inputs. diff --git a/devices/surface-hub/create-a-device-account-using-office-365.md b/devices/surface-hub/create-a-device-account-using-office-365.md index 47f53254f6..f6f48f6401 100644 --- a/devices/surface-hub/create-a-device-account-using-office-365.md +++ b/devices/surface-hub/create-a-device-account-using-office-365.md @@ -91,7 +91,7 @@ From here on, you'll need to finish the account creation process using PowerShel In order to run cmdlets used by these PowerShell scripts, the following must be installed for the admin PowerShell console: - [Microsoft Online Services Sign-In Assistant for IT Professionals BETA](https://go.microsoft.com/fwlink/?LinkId=718149) -- [Windows Azure Active Directory Module for Windows PowerShell](https://go.microsoft.com/fwlink/p/?linkid=236297) +- [Windows Azure Active Directory Module for Windows PowerShell](https://www.microsoft.com/web/handlers/webpi.ashx/getinstaller/WindowsAzurePowershellGet.3f.3f.3fnew.appids) - [Skype for Business Online, Windows PowerShell Module](http://www.microsoft.com/download/details.aspx?id=39366) ### Connecting to online services From ccf08e5ac72e33e02152ef957083a8e6a804a396 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 14 Feb 2018 15:49:50 +0000 Subject: [PATCH 071/106] Merged PR 5873: Add link --- devices/surface-hub/surface-hub-start-menu.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/devices/surface-hub/surface-hub-start-menu.md b/devices/surface-hub/surface-hub-start-menu.md index 0f3defa248..dccacb8551 100644 --- a/devices/surface-hub/surface-hub-start-menu.md +++ b/devices/surface-hub/surface-hub-start-menu.md @@ -176,4 +176,8 @@ This example shows a link to a website and a link to a .pdf file. -``` \ No newline at end of file +``` + +## More information + +- [Blog post: Changing Surface Hub’s Start Menu](https://blogs.technet.microsoft.com/y0av/2018/02/13/47/) \ No newline at end of file From c45e0ef5d89a73318426c93a5c5cba270293779f Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Wed, 14 Feb 2018 17:54:38 +0000 Subject: [PATCH 072/106] New full diagnostic data topic --- windows/configuration/TOC.md | 5 +- windows/configuration/index.md | 7 +- .../windows-diagnostic-data-1703.md | 4 +- .../configuration/windows-diagnostic-data.md | 262 ++++++++++++++++++ 4 files changed, 271 insertions(+), 7 deletions(-) create mode 100644 windows/configuration/windows-diagnostic-data.md diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index 2542a03b63..e08ae3f4bd 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -2,9 +2,10 @@ ## [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) ## [Diagnostic Data Viewer Overview](diagnostic-data-viewer-overview.md) ## [Windows 10, version 1709 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) -## [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](enhanced-diagnostic-data-windows-analytics-events-and-fields.md) ## [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) -## [Windows 10 diagnostic data for the Full diagnostic data level](windows-diagnostic-data-1703.md) +## [Windows 10, version 1709 enhanced telemetry events and fields used by Windows Analytics](enhanced-diagnostic-data-windows-analytics-events-and-fields.md) +## [Windows 10, version 1709 diagnostic data for the Full telemetry level](windows-diagnostic-data.md) +## [Windows 10, version 1703 diagnostic data for the Full telemetry level](windows-diagnostic-data-1703.md) ## [Beginning your General Data Protection Regulation (GDPR) journey for Windows 10](gdpr-win10-whitepaper.md) ## [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) ## [Manage Windows 10 connection endpoints](manage-windows-endpoints-version-1709.md) diff --git a/windows/configuration/index.md b/windows/configuration/index.md index e38d95e4ca..d8cfdf2e49 100644 --- a/windows/configuration/index.md +++ b/windows/configuration/index.md @@ -22,9 +22,10 @@ Enterprises often need to apply custom configurations to devices for their users | [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | Use this article to make informed decisions about how you can configure Windows diagnostic data in your organization. | |[Diagnostic Data Viewer overview](diagnostic-data-viewer-overview.md) |Learn about the categories of diagnostic data your device is sending to Microsoft, along with how it's being used.| | [Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) | Learn about diagnostic data that is collected at the basic level in Windows 10, version 1709. | -|[Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](enhanced-diagnostic-data-windows-analytics-events-and-fields.md)|Learn about diagnostic data that is collected by Windows Analytics.| -| [Windows 10, version 1703 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md) | Learn about diagnostic data that is collected at the basic level in Windows 10, version 1703. | -| [Windows 10 diagnostic data for the Full diagnostic data level](windows-diagnostic-data-1703.md) | Learn about the types of data that is collected at the full level in Windows 10, version 1703 and later. | +| [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md)| Learn about diagnostic data that is collected at the basic level in Windows 10, version 1703.| +| [Windows 10, version 1709 enhanced telemetry events and fields used by Windows Analytics](enhanced-diagnostic-data-windows-analytics-events-and-fields.md)|Learn about diagnostic data that is collected by Windows Analytics.| +| [Windows 10, version 1709 diagnostic data for the Full telemetry level](windows-diagnostic-data.md) | Learn about diagnostic data that is collected at the full level in Windows 10, version 1709. | +| [Windows 10, version 1703 diagnostic data for the Full telemetry level](windows-diagnostic-data-1703.md) | Learn about diagnostic data that is collected at the full level in Windows 10, version 1703. | |[Beginning your General Data Protection Regulation (GDPR) journey for Windows 10](gdpr-win10-whitepaper.md)|Learn about Windows 10 and the upcoming GDPR-compliance requirements.| | [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Learn about the network connections that Windows components make to Microsoft and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro. | | [Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md) | Wi-Fi Sense automatically connects you to Wi-Fi, so you can get online quickly in more places. It can connect you to open Wi-Fi hotspots it knows about through crowdsourcing, or to Wi-Fi networks your contacts have shared with you by using Wi-Fi Sense. The initial settings for Wi-Fi Sense are determined by the options you chose when you first set up your PC with Windows 10. | diff --git a/windows/configuration/windows-diagnostic-data-1703.md b/windows/configuration/windows-diagnostic-data-1703.md index 954a8fc5e0..67fd23abec 100644 --- a/windows/configuration/windows-diagnostic-data-1703.md +++ b/windows/configuration/windows-diagnostic-data-1703.md @@ -8,13 +8,13 @@ ms.sitesec: library ms.localizationpriority: high author: eross-msft ms.author: lizross -ms.date: 04/05/2017 +ms.date: 11/28/2017 --- # Windows 10 diagnostic data for the Full diagnostic data level **Applies to:** -- Windows 10, version 1703 and later +- Windows 10, version 1703 Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide more relevant tips and recommendations to tailor Microsoft products to the user’s needs. This article describes all types diagnostic data collected by Windows at the Full diagnostic data level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1709 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) and [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md). diff --git a/windows/configuration/windows-diagnostic-data.md b/windows/configuration/windows-diagnostic-data.md new file mode 100644 index 0000000000..e3c5fb9fa4 --- /dev/null +++ b/windows/configuration/windows-diagnostic-data.md @@ -0,0 +1,262 @@ +--- +title: Windows 10, version 1709 diagnostic data for the Full level (Windows 10) +description: Use this article to learn about the types of diagnostic data that is collected at the Full level. +keywords: privacy,Windows 10 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +author: brianlic-msft +ms.author: brianlic +ms.date: 01/30/2018 +--- + +# Windows 10, version 1709 diagnostic data for the Full level + +Applies to: +- Windows 10, version 1709 + +Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1709 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md). + +In addition, this article provides references to equivalent definitions for the data types and examples from [ISO/IEC 19944:2017 Information technology -- Cloud computing -- Cloud services and devices: Data flow, data categories and data use](https://www.iso.org/standard/66674.html). Each data type also has a Data Use statement, for diagnostics and for Tailored experiences on the device, using the terms as defined by the standard. These Data Use statements define the purposes for which Microsoft processes each type of Windows diagnostic data, using a uniform set of definitions referenced at the end of this document and based on the ISO standard. Reference to the ISO standard provides additional clarity about the information collected, and allows easy comparison with other services or guidance that also references the standard. + +The data covered in this article is grouped into the following types: + +- Common data (diagnostic header information) + +- Device, Connectivity, and Configuration data + +- Product and Service Usage data + +- Product and Service Performance data + +- Software Setup and Inventory data + +- Browsing History data + +- Inking, Typing, and Speech Utterance data + +## Common data +Most diagnostic events contain a header of common data. In each example, the info in parentheses provides the equivalent definition for ISO/IEC 19944:2017. + +**Data Use for Common data** +Header data supports the use of data associated with all diagnostic events. Therefore, Common data is used to [provide](#provide) Windows 10, and may be used to [improve](#improve), [personalize](#personalize), [recommend](#recommend), [offer](#offer), or [promote](#promote) Microsoft and third-party products and services, depending on the uses described in the **Data Use** statements for each data category. + +### Data Description for Common data type +|Sub-type|Description and examples| +|- |- | +|Common Data|Information that is added to most diagnostic events, if relevant and available:
  • Diagnostic level -- Basic or Full, Sample level -- for sampled data, what sample level is this device opted into (8.2.3.2.4 Observed Usage of the Service Capability)
  • Operating system name, version, build, and locale (8.2.3.2.2 Telemetry data)
  • Event collection time (8.2.3.2.2 Telemetry data)
  • User ID -- a unique identifier associated with the user's Microsoft Account (if one is used) or local account. The user's Microsoft Account identifier is not collected from devices configured to send Basic diagnostic data (8.2.5 Account data)
  • Xbox UserID (8.2.5 Account data)
  • Device ID -- This is not the user provided device name, but an ID that is unique for that device. (8.2.3.2.3 Connectivity data)
  • Device class -- Desktop, Server, or Mobile (8.2.3.2.3 Connectivity data)
  • Environment from which the event was logged -- Application ID of app or component that logged the event, Session GUID. Used to track events over a given period of time, such as the amount of time an app is running or between boots of the operating system (8.2.4 Cloud service provider data)
  • Diagnostic event name, Event ID, ETW opcode, version, schema signature, keywords, and flags (8.2.4 Cloud service provider data)
  • HTTP header information, including the IP address. This IP address is the source address that’s provided by the network packet header and received by the diagnostics ingestion service (8.2.4 Cloud service provider data)
  • Various IDs that are used to correlate and sequence related events together (8.2.4 Cloud service provider data)
| + +## Device, Connectivity, and Configuration data +This type of data includes details about the device, its configuration and connectivity capabilities, and status. Device, Connectivity, and Configuration Data is equivalent to ISO/IEC 19944:2017, 8.2.3.2.3 Connectivity data. + +### Data Use for Device, Connectivity, and Configuration data + +**For Diagnostics:**
+[Pseudonymized](#pseudo) Device, Connectivity, and Configuration data from Windows 10 is used by Microsoft to [provide](#provide) and [improve](#improve) Windows 10 and related Microsoft products and services. For example: + +- Device, Connectivity, and Configuration data is used to understand the unique device characteristics that can contribute to an error experienced on the device, to identify patterns, and to more quickly resolve problems that impact devices with unique hardware, capabilities, or settings. For example: + + - Data about the use of cellular modems and their configuration on your devices is used to troubleshoot cellular modem issues. + + - Data about the use of USB hubs use and their configuration on your devices is used to troubleshoot USB hub issues. + + - Data about the use of connected Bluetooth devices is used to troubleshoot compatibility issues with Bluetooth devices. + +- Data about device properties, such as the operating system version and available memory, is used to determine whether the device is due to, and able to, receive a Windows update. + +- Data about device peripherals is used to determine whether a device has installed drivers that might be negatively impacted by a Windows update. + +- Data about which devices, peripherals, and settings are most-used by customers, is used to prioritize Windows 10 improvements to determine the greatest positive impact to the most Windows 10 users. + +**With (optional) Tailored experiences:**
+If a user has enabled Tailored experiences on the device, [Pseudonymized](#pseudo) Device, Connectivity, and Configuration data from Windows 10 is used by Microsoft to [personalize](#personalize), [recommend](#recommend), and [offer](#offer) Microsoft products and services to Windows 10 users. Also, if a user has enabled Tailored experiences on the device, [Pseudonymized](#pseudo) Device, Connectivity, and Configuration data from Windows 10 is used by Microsoft to [promote](#promote) third-party Windows apps, services, hardware, and peripherals to Windows 10 users. For example: + +- Data about device properties and capabilities is used to provide tips about how to use or configure the device to get the best performance and user experience. + +- Data about device capabilities, such as whether the device is pen-enabled, is used to recommend (Microsoft and third-party) apps that are appropriate for the device. These may be free or paid apps. +  +### Data Description for Device, Connectivity, and Configuration data type +|Sub-type|Description and examples| +|- |- | +|Device properties |Information about the operating system and device hardware, such as:
  • Operating system - version name, edition
  • Installation type, subscription status, and genuine operating system status
  • Processor architecture, speed, number of cores, manufacturer, and model
  • OEM details --manufacturer, model, and serial number
  • Device identifier and Xbox serial number
  • Firmware/BIOS operating system -- type, manufacturer, model, and version
  • Memory -- total memory, video memory, speed, and how much memory is available after the device has reserved memory
  • Storage -- total capacity and disk type
  • Battery -- charge capacity and InstantOn support
  • Hardware chassis type, color, and form factor
  • Is this a virtual machine?
| +|Device capabilities|Information about the specific device capabilities, such as:
  • Camera -- whether the device has a front facing camera, a rear facing camera, or both.
  • Touch screen -- Whether the device has a touch screen? If yes, how many hardware touch points are supported?
  • Processor capabilities -- CompareExchange128, LahfSahf, NX, PrefetchW, and SSE2
  • Trusted Platform Module (TPM) -- whether a TPM exists and if yes, what version
  • Virtualization hardware -- whether an IOMMU exists, whether it includes SLAT support, and whether virtualization is enabled in the firmware
  • Voice -- whether voice interaction is supported and the number of active microphones
  • Number of displays, resolutions, and DPI
  • Wireless capabilities
  • OEM or platform face detection
  • OEM or platform video stabilization and quality-level set
  • Advanced Camera Capture mode (HDR versus Low Light), OEM versus platform implementation, HDR probability, and Low Light probability
| +|Device preferences and settings |Information about the device settings and user preferences, such as:
  • User Settings -- System, Device, Network & Internet, Personalization, Cortana, Apps, Accounts, Time & Language, Gaming, Ease of Access, Privacy, Update & Security
  • User-provided device name
  • Whether device is domain-joined, or cloud-domain joined (for example, part of a company-managed network)
  • Hashed representation of the domain name
  • MDM (mobile device management) enrollment settings and status
  • BitLocker, Secure Boot, encryption settings, and status
  • Windows Update settings and status
  • Developer Unlock settings and status
  • Default app choices
  • Default browser choice
  • Default language settings for app, input, keyboard, speech, and display
  • App store update settings
  • Enterprise OrganizationID, Commercial ID
| +|Device peripherals |Information about the device peripherals, such as:
  • Peripheral name, device model, class, manufacturer, and description
  • Peripheral device state, install state, and checksum
  • Driver name, package name, version, and manufacturer
  • HWID - A hardware vendor-defined ID to match a device to a driver [INF file](https://msdn.microsoft.com/windows/hardware/drivers/install/hardware-ids)
  • Driver state, problem code, and checksum
  • Whether driver is kernel mode, signed, and image size
| +|Device network info |Information about the device network configuration, such as:
  • Network system capabilities
  • Local or Internet connectivity status
  • Proxy, gateway, DHCP, DNS details, and addresses
  • Whether it's a paid or free network
  • Whether the wireless driver is emulated
  • Whether it's access point mode-capable
  • Access point manufacturer, model, and MAC address
  • WDI Version
  • Name of networking driver service
  • Wi-Fi Direct details
  • Wi-Fi device hardware ID and manufacturer
  • Wi-Fi scan attempt and item counts
  • Whether MAC randomization is supported and enabled
  • Number of supported spatial streams and channel frequencies
  • Whether Manual or Auto-connect is enabled
  • Time and result of each connection attempt
  • Airplane mode status and attempts
  • Interface description provided by the manufacturer
  • Data transfer rates
  • Cipher algorithm
  • Mobile Equipment ID (IMEI) and Mobile Country Code (MCCO)
  • Mobile operator and service provider name
  • Available SSIDs and BSSIDs
  • IP Address type -- IPv4 or IPv6
  • Signal Quality percentage and changes
  • Hotspot presence detection and success rate
  • TCP connection performance
  • Miracast device names
  • Hashed IP address
+ +## Product and Service Usage data +This type of data includes details about the usage of the device, operating system, applications and services. Product and Service Usage data is equivalent to ISO/IEC 19944:2017, 8.2.3.2.4 Observed Usage of the Service Capability. + +### Data Use for Product and Service Usage data + +**For Diagnostics:**
+[Pseudonymized](#pseudo) Product and Service Usage data from Windows 10 is used by Microsoft to [provide](#provide) and [improve](#improve) Windows 10 and related Microsoft product and services. For example: + +- Data about the specific apps that are in-use when an error occurs is used to troubleshoot and repair issues with Windows features and Microsoft apps. + +- Data about the specific apps that are most-used by customers, is used to prioritize Windows 10 improvements to determine the greatest positive impact to the most Windows 10 users. + +- Data about whether devices have Suggestions turned off from the **Settings Phone** screen is to improve the Suggestions feature. + +- Data about whether a user canceled the authentication process in their browser is used to help troubleshoot issues with and improve the authentication process. + +- Data about when and what feature invoked Cortana is used to prioritize efforts for improvement and innovation in Cortana. + +- Data about when a context menu in the photo app is closed is used to troubleshoot and improve the photo app. + +**With (optional) Tailored experiences:**
+If a user has enabled Tailored experiences on the device, [pseudonymized](#pseudo) Product and Service Usage data from Windows 10 is used by Microsoft to [personalize](#personalize), [recommend](#recommend), and [offer](#offer) Microsoft products and services to Windows 10 users. Also, if a user has enabled Tailored experiences on the device, [pseudonymized](#pseudo) Product and Service Usage data from Windows 10 is used by Microsoft to [promote](#promote) third-party Windows apps, services, hardware, and peripherals to Windows 10 users. For example: + +- If data shows that a user has not used a particular feature of Windows, we may recommend that the user try that feature. + +- Data about which apps are most-used on a device is used to provide recommendations for similar or complementary (Microsoft or third-party) apps. These may be free or paid apps. + + +### Data Description for Product and Service Usage data type +|Sub-type|Description and examples | +|- |- | +|App usage|Information about Windows and application usage, such as:
  • Operating system component and app feature usage
  • User navigation and interaction with app and Windows features. This could potentially include user input, such as name of a new alarm set, user menu choices, or user favorites
  • Time of and count of app and component launches, duration of use, session GUID, and process ID
  • App time in various states –- running in the foreground or background, sleeping, or receiving active user interaction
  • User interaction method and duration –- whether the user used a keyboard, mouse, pen, touch, speech, or game controller, and for how long
  • Cortana launch entry point and reason
  • Notification delivery requests and status
  • Apps used to edit images and videos
  • SMS, MMS, VCard, and broadcast message usage statistics on primary or secondary lines
  • Incoming and outgoing calls and voicemail usage statistics on primary or secondary lines
  • Emergency alerts are received or displayed statistics
  • Content searches within an app
  • Reading activity -- bookmarked, printed, or had the layout changed
| +|App or product state|Information about Windows and application state, such as:
  • Start Menu and Taskbar pins
  • Online and offline status
  • App launch state –- with deep-links, such as Groove launching with an audio track to play or MMS launching to share a picture
  • Personalization impressions delivered
  • Whether the user clicked on, or hovered over, UI controls or hotspots
  • User provided feedback, such as Like, Dislike or a rating
  • Caret location or position within documents and media files -- how much has been read in a book in a single session, or how much of a song has been listened to.
| +|Purchasing|Information about purchases made on the device, such as:
  • Product ID, edition ID and product URI
  • Offer details -- price
  • Date and time an order was requested
  • Microsoft Store client type -- web or native client
  • Purchase quantity and price
  • Payment type -- credit card type and PayPal
| +|Login properties|Information about logins on the device, such as:
  • Login success or failure
  • Login sessions and state
| + +## Product and Service Performance data +This type of data includes details about the health of the device, operating system, apps, and drivers. Product and Service Performance data is equivalent to ISO/IEC 19944:2017 8.2.3.2.2 EUII Telemetry data. + +### Data Use for Product and Service Performance data + +**For Diagnostics:**
+[Pseudonymized](#pseudo) Product and Service Performance data from Windows 10 is used by Microsoft to [provide](#provide) and [improve](#improve) Windows 10 and related Microsoft product and services. For example: + +- Data about the reliability of content that appears in the [Windows Spotlight](https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight) (rotating lock screen images) is used for Windows Spotlight reliability investigations. + +- Timing data about how quickly Cortana responds to voice commands is used to improve Cortana listening peformance. + +- Timing data about how quickly the facial recognition feature starts up and finishes is used to improve facial recognition performance. + +- Data about when an Application Window fails to appear is used to investigate issues with Application Window reliability and performance. + +**With (optional) Tailored experiences:**
+If a user has enabled Tailored experiences on the device, [pseudonymized](#pseudo) Product and Service Performance data from Windows 10 is used by Microsoft to [personalize](#personalize), [recommend](#recommend), and [offer](#offer) Microsoft products and services to Windows 10 users. Also, if a user has enabled Tailored experiences on the device, [pseudonymized](#pseudo) Product and Service Performance data from Windows 10 is used by Microsoft to [promote](#promote) third-party Windows apps, services, hardware, and peripherals to Windows 10 users. + +- Data about battery performance on a device may be used to recommend settings changes that can improve battery performance. + +- If data shows a device is running low on file storage, we may recommend Windows-compatible cloud storage solutions to free up space. + +- If data shows the device is experiencing performance issues, we may provide recommendations for Windows apps that can help diagnose or resolve these issues. These may be free or paid apps. + +**Microsoft doesn't use crash and hang dump data to [personalize](#personalize), [recommend](#recommend), [offer](#offer), or [promote](#promote) any product or service.** + +### Data Description for Product and Service Performance data type +|Sub-type|Description and examples | +|- |- | +|Device health and crash data|Information about the device and software health, such as: