From edb7f5a067b98faf7532b4bd3d594793dfdbbcda Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Thu, 31 Mar 2016 09:25:25 -0700 Subject: [PATCH] new build --- windows/deploy/TOC.md | 52 +- ...stem-image-using-configuration-manager.md} | 18 +- ...windows-pe-using-configuration-manager.md} | 18 +- ...gn-applications-using-roles-in-mdt-2013.md | 4 +- ...-environment-for-windows-10-deployment.md} | 14 +- windows/deploy/common-issues-usmt-win8.md | 2 +- ...configure-mdt-2013-for-userexit-scripts.md | 4 +- windows/deploy/configure-mdt-2013-settings.md | 16 +- .../configure-mdt-deployment-share-rules.md | 6 +- ...-boot-image-with-configuration-manager.md} | 20 +- ...ence-with-configuration-manager-and-mdt.md | 20 +- ...=> create-a-windows-10-reference-image.md} | 29 +- ...windows-10-using-configuration-manager.md} | 18 +- ...=> deploy-a-windows-10-image-using-mdt.md} | 45 +- ...10-using-pxe-and-configuration-manager.md} | 18 +- ...m-center-2012-r2-configuration-manager.md} | 36 +- ...-with-the-microsoft-deployment-toolkit.md} | 22 +- ...ll-scenario.md => deploy-windows-to-go.md} | 6 +- ...-deployment-with-configuration-manager.md} | 22 +- ...tly-asked-questions-usmt-win7-usmt-win8.md | 2 +- ...-with-the-microsoft-deployment-toolkit.md} | 22 +- windows/deploy/index.md | 14 +- ...ate-configuration-manager-with-mdt-2013.md | 26 +- windows/deploy/key-features-in-mdt-2013.md | 8 +- .../deploy/mdt-2013-lite-touch-components.md | 12 +- ...-deployment-with-configuration-manager.md} | 18 +- ...e-for-windows-deployment-with-mdt-2013.md} | 22 +- ...-windows-10-with-configuration-manager.md} | 28 +- ...windows-10-using-configuration-manager.md} | 22 +- ...h-a-windows-7-computer-with-windows-10.md} | 14 +- ...windows-10-using-configuration-manager.md} | 22 +- ...-7-computer-with-a-windows-10-computer.md} | 10 +- windows/deploy/return-codes-usmt-win8.md | 2 +- .../deploy/set-up-mdt-2013-for-bitlocker.md | 4 +- ...ws-10-deployment-in-a-test-environment.md} | 2 +- ...with-system-center-configuraton-manager.md | 2 +- ...0-with-the-microsoft-deployment-toolkit.md | 6 +- ...use-orchestrator-runbooks-with-mdt-2013.md | 4 +- ...tage-windows-10-deployment-information.md} | 2 +- .../deploy/use-web-services-in-mdt-2013.md | 4 +- ...ate-migration-tool--usmt--how-to-topics.md | 2 +- ...e-migration-tool--usmt--overview-topics.md | 2 +- ...gration-tool--usmt--technical-reference.md | 2 +- ...tate-migration-toolkit--usmt--reference.md | 2 +- .../deploy/windows-10-deployment-scenarios.md | 4 +- .../windows-deployment-scenarios-and-tools.md | 4 +- windows/keep-secure/TOC.md | 92 +- ...chema-extensions-to-support-tpm-backup.md} | 0 ...apps-to-protected-list-using-custom-uri.md | 162 + ...advanced-security-audit-policy-settings.md | 24 +- ...erview-server.md => applocker-overview.md} | 0 .../applocker-policies-deployment-guide.md | 2 +- ...-sec-audit.md => audit-account-lockout.md} | 0 ...dit-the-access-of-global-system-objects.md | 8 +- ...the-use-of-backup-and-restore-privilege.md | 2 +- ...-audit.md => audit-detailed-file-share.md} | 0 ...> audit-filtering-platform-packet-drop.md} | 0 ... audit-kerberos-authentication-service.md} | 0 ...ct-sec-audit.md => audit-kernel-object.md} | 0 ...d => audit-non-sensitive-privilege-use.md} | 0 ...md => audit-other-account-logon-events.md} | 0 ...md => audit-other-privilege-use-events.md} | 0 windows/keep-secure/audit-pnp-activity.md | 2 +- windows/keep-secure/audit-policy.md | 2 +- ...-audit.md => audit-process-termination.md} | 0 .../{audit-sam-sec-audit.md => audit-sam.md} | 0 ...it.md => audit-sensitive-privilege-use.md} | 0 ...ckup-tpm-recovery-information-to-ad-ds.md} | 10 +- .../basic-audit-directory-service-access.md | 2 +- .../keep-secure/basic-audit-logon-events.md | 2 +- .../keep-secure/bitlocker-basic-deployment.md | 2 +- .../keep-secure/bitlocker-countermeasures.md | 4 +- ...> bitlocker-frequently-asked-questions.md} | 2 +- .../bitlocker-group-policy-settings.md | 8 +- ...locker-how-to-deploy-on-windows-server.md} | 4 +- .../bitlocker-how-to-enable-network-unlock.md | 4 +- ...tech-overview.md => bitlocker-overview.md} | 4 +- .../bitlocker-recovery-guide-plan.md | 2 +- ...ve-encryption-tools-to-manage-bitlocker.md | 6 +- ...-use-bitlocker-recovery-password-viewer.md | 6 +- ...=> block-untrusted-fonts-in-enterprise.md} | 0 ...ange-history-for-keep-windows-10-secure.md | 36 +- ...oose-the-right-bitlocker-countermeasure.md | 2 +- ...nfigure-the-appLocker-reference-device.md} | 0 .../create-edp-policy-using-intune.md | 452 ++ .../create-edp-policy-using-sccm.md | 411 ++ .../create-vpn-and-edp-policy-using-intune.md | 120 + ...create-your-applocker-planning-document.md | 2 +- .../create-your-applocker-rules.md | 2 +- windows/keep-secure/credential-guard.md | 2 +- ...riptor-definition-language-sddl-syntax.md} | 0 ...riptor-definition-language-sddl-syntax.md} | 2 +- .../deploy-edp-policy-using-intune.md | 54 + ...ine-your-application-control-objectives.md | 2 +- .../device-guard-deployment-guide.md | 184 +- ...ypt-or-sign-secure-channel-data-always.md} | 22 +- ...rypt-secure-channel-data-when-possible.md} | 16 +- ...sign-secure-channel-data-when-possible.md} | 20 +- ...rong-windows-2000-or-later-session-key.md} | 0 .../enlightened-microsoft-apps-and-edp.md | 187 + ...e-system-global-object-access-auditing.md} | 0 .../guidance-and-best-practices-edp.md | 59 + .../images/defender-updatedefs.png | Bin 102655 -> 0 bytes .../images/edp-sccm-adddesktopapp.png | Bin 0 -> 37277 bytes .../keep-secure/images/edp-sccm-addpolicy.png | Bin 0 -> 69102 bytes .../images/edp-sccm-adduniversalapp.png | Bin 0 -> 33770 bytes .../keep-secure/images/edp-sccm-appmgmt.png | Bin 0 -> 27223 bytes .../images/edp-sccm-devicesettings.png | Bin 0 -> 23810 bytes .../images/edp-sccm-generalscreen.png | Bin 0 -> 30678 bytes .../images/edp-sccm-optsettings.png | Bin 0 -> 17602 bytes .../images/edp-sccm-primarydomain2.png | Bin 0 -> 29139 bytes .../images/edp-sccm-summaryscreen.png | Bin 0 -> 32629 bytes .../images/edp-sccm-supportedplat.png | Bin 0 -> 19916 bytes .../images/intune-add-desktop-app.png | Bin 0 -> 47883 bytes windows/keep-secure/images/intune-addapps.png | Bin 0 -> 28911 bytes .../images/intune-createnewpolicy.png | Bin 0 -> 31438 bytes .../images/intune-data-recovery.png | Bin 0 -> 1886 bytes .../keep-secure/images/intune-deploy-vpn.png | Bin 0 -> 37651 bytes .../keep-secure/images/intune-edpsettings.png | Bin 0 -> 4303 bytes .../images/intune-encryption-level.png | Bin 0 -> 14139 bytes .../images/intune-groupselection.png | Bin 0 -> 11971 bytes .../images/intune-managedeployment.png | Bin 0 -> 24915 bytes .../images/intune-namedescription.png | Bin 0 -> 8789 bytes .../images/intune-networklocation.png | Bin 0 -> 15879 bytes .../images/intune-primary-domain.png | Bin 0 -> 2718 bytes .../images/intune-vpn-authentication.png | Bin 0 -> 2762 bytes .../images/intune-vpn-createpolicy.png | Bin 0 -> 37123 bytes .../images/intune-vpn-customconfig.png | Bin 0 -> 144200 bytes .../images/intune-vpn-edpmodeid.png | Bin 0 -> 25315 bytes .../images/intune-vpn-omaurisettings.png | Bin 0 -> 28878 bytes .../images/intune-vpn-titledescription.png | Bin 0 -> 5149 bytes .../images/intune-vpn-vpnsettings.png | Bin 0 -> 14511 bytes .../images/sccm-primary-domain.png | Bin 0 -> 11582 bytes ...microsoft-passport-in-your-organization.md | 213 +- windows/keep-secure/index.md | 16 +- ...ase-domain-controller-is-not-available.md} | 0 ...er-authentication-to-unlock-workstation.md | 10 +- ...t-digitally-sign-communications-always.md} | 18 +- ...y-sign-communications-if-server-agrees.md} | 18 +- ...r-digitally-sign-communications-always.md} | 20 +- ...y-sign-communications-if-client-agrees.md} | 18 +- .../keep-secure/microsoft-passport-guide.md | 2 +- ...onitor-application-usage-with-applocker.md | 2 +- ...ssp-based-including-secure-rpc-clients.md} | 0 ...ssp-based-including-secure-rpc-servers.md} | 0 .../keep-secure/overview-create-edp-policy.md | 58 + ...loying-advanced-security-audit-policies.md | 14 +- ...ion-for-bitlocker-planning-and-policies.md | 8 +- ...protect-bitlocker-from-pre-boot-attacks.md | 2 +- .../protect-enterprise-data-using-edp.md | 202 + ...registry-global-object-access-auditing.md} | 0 ...-glbl.md => security-auditing-overview.md} | 0 windows/keep-secure/security-options.md | 28 +- windows/keep-secure/security-technologies.md | 8 +- ...permissions-of-internal-system-objects.md} | 0 .../keep-secure/testing-scenarios-for-edp.md | 175 + ...ntals-windows-8.md => tpm-fundamentals.md} | 8 +- ...e--tpm-2-0--.md => tpm-recommendations.md} | 0 ...bleshoot-windows-defender-in-windows-10.md | 5029 ++++++----------- ...md => trusted-platform-module-overview.md} | 4 +- ...m-module-services-group-policy-settings.md | 4 +- ...s-of-attacks-for-volume-encryption-keys.md | 2 +- ...-create-and-maintain-applocker-policies.md | 2 +- ...-monitor-dynamic-access-control-objects.md | 2 +- ... windows-10-enterprise-security-guides.md} | 0 .../windows-10-mobile-security-guide.md | 10 +- ...rise.md => windows-hello-in-enterprise.md} | 0 windows/manage/TOC.md | 40 +- ...d-unsigned-app-to-code-integrity-policy.md | 2 +- ...anagemement-windows-store-for-business.md} | 2 +- ...on-development-for-windows-as-a-service.md | 189 + ... => apps-in-windows-store-for-business.md} | 2 +- ...istory-for-manage-and-update-windows-10.md | 22 +- ...dm-provider-windows-store-for-business.md} | 0 ...onfigure-telemetry-in-your-organization.md | 310 - ...-by-using-provisioning-packages-and-icd.md | 5 - ...onnect-your-organization-from-microsoft.md | 616 +- ...r-employees-windows-store-for-business.md} | 2 +- ...> distribute-apps-with-management-tool.md} | 4 +- ...s.md => find-and-acquire-apps-overview.md} | 2 +- ...configuration-service-providers--csps--.md | 24 +- windows/manage/images/settings-table.png | Bin 14426 -> 17429 bytes windows/manage/index.md | 6 +- .../introduction-to-windows-10-servicing.md | 130 +- ...ows-10-mobile-to-azure-active-directory.md | 2 +- .../lock-down-windows-10-to-specific-apps.md | 2 +- windows/manage/lock-down-windows-10.md | 17 +- ...ps-windows-store-for-business-overview.md} | 4 +- ...ise.md => manage-cortana-in-enterprise.md} | 0 ...ge-settings-windows-store-for-business.md} | 6 +- ...-and-groups-windows-store-for-business.md} | 4 +- ....md => manage-wifi-sense-in-enterprise.md} | 0 ...erequisites-windows-store-for-business.md} | 0 ...permissions-windows-store-for-business.md} | 2 +- ...osk-for-windows-10-for-desktop-editions.md | 4 + ...s-reference-windows-store-for-business.md} | 6 +- ...up-windows-store-for-business-overview.md} | 8 +- ... => sign-up-windows-store-for-business.md} | 4 +- ...-employees-from-using-the-windows-store.md | 2 +- ...roubleshoot-windows-store-for-business.md} | 0 ...ws-store-for-business-account-settings.md} | 0 windows/manage/windows-store-for-business.md | 12 +- .../working-with-line-of-business-apps.md | 2 +- windows/plan/TOC.md | 6 +- ...ctice-recommendations-for-windows-to-go.md | 2 +- ...tory-for-plan-for-windows-10-deployment.md | 2 +- ...oyment-considerations-for-windows-to-go.md | 2 +- windows/plan/index.md | 12 +- ...are-your-organization-for-windows-to-go.md | 2 +- ...ection-considerations-for-windows-to-go.md | 2 +- windows/plan/setup-and-deployment.md | 77 +- windows/plan/windows-10-compatibility.md | 2 +- .../windows-10-deployment-considerations.md | 2 +- ...10-guidance-for-education-environments.md} | 0 .../windows-10-infrastructure-requirements.md | 4 +- ...del.md => windows-10-servicing-options.md} | 0 ...indows-to-go-frequently-asked-questions.md | 2 +- ...-scenario.md => windows-to-go-overview.md} | 0 windows/plan/windows-update-for-business.md | 63 +- windows/whats-new/TOC.md | 8 +- windows/whats-new/applocker.md | 2 +- windows/whats-new/bitlocker.md | 4 +- ...ge-history-for-what-s-new-in-windows-10.md | 6 +- windows/whats-new/device-management.md | 2 +- ...-11.md => edge-ie11-whats-new-overview.md} | 0 ...-overview.md => edp-whats-new-overview.md} | 2 +- windows/whats-new/index.md | 8 +- .../whats-new/lockdown-features-windows-10.md | 2 +- windows/whats-new/security-auditing.md | 2 +- windows/whats-new/security.md | 2 +- windows/whats-new/trusted-platform-module.md | 2 +- ...=> windows-store-for-business-overview.md} | 8 +- ...ines.md => windows-update-for-business.md} | 0 233 files changed, 5429 insertions(+), 4656 deletions(-) rename windows/deploy/{add-a-windows-81-operating-system-image-using-configuration-manager.md => add-a-windows-10-operating-system-image-using-configuration-manager.md} (83%) rename windows/deploy/{add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md => add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md} (89%) rename windows/deploy/{build-a-distributed-environment-for-windows-81-deployment.md => build-a-distributed-environment-for-windows-10-deployment.md} (97%) rename windows/deploy/{create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md => create-a-custom-windows-pe-boot-image-with-configuration-manager.md} (90%) rename windows/deploy/{create-a-windows-81-reference-image.md => create-a-windows-10-reference-image.md} (98%) rename windows/deploy/{create-an-application-to-deploy-with-windows-81-using-configuration-manager.md => create-an-application-to-deploy-with-windows-10-using-configuration-manager.md} (87%) rename windows/deploy/{deploy-a-windows-81-image-using-mdt-2013.md => deploy-a-windows-10-image-using-mdt.md} (97%) rename windows/deploy/{deploy-windows-81-using-pxe-and-configuration-manager.md => deploy-windows-10-using-pxe-and-configuration-manager.md} (80%) rename windows/deploy/{deploy-windows-81-with-system-center-2012-r2-configuration-manager.md => deploy-windows-10-with-system-center-2012-r2-configuration-manager.md} (79%) rename windows/deploy/{deploy-windows-81-with-the-microsoft-deployment-toolkit.md => deploy-windows-10-with-the-microsoft-deployment-toolkit.md} (88%) rename windows/deploy/{deploy-windows-to-go-in-your-organization-small-scenario.md => deploy-windows-to-go.md} (99%) rename windows/deploy/{finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md => finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md} (91%) rename windows/deploy/{get-started-with-the-microsoft-deployment-toolkit--mdt-.md => get-started-with-the-microsoft-deployment-toolkit.md} (73%) rename windows/deploy/{monitor-the-windows-81-deployment-with-configuration-manager.md => monitor-windows-10-deployment-with-configuration-manager.md} (85%) rename windows/deploy/{prepare-for-deployment-with-mdt-2013.md => prepare-for-windows-deployment-with-mdt-2013.md} (91%) rename windows/deploy/{prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md => prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md} (91%) rename windows/deploy/{refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md => refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md} (88%) rename windows/deploy/{refresh-a-windows-7-computer-with-windows-81.md => refresh-a-windows-7-computer-with-windows-10.md} (94%) rename windows/deploy/{replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md => replace-a-windows-7-client-with-windows-10-using-configuration-manager.md} (92%) rename windows/deploy/{replace-a-windows-7-computer-with-a-windows-81-computer.md => replace-a-windows-7-computer-with-a-windows-10-computer.md} (95%) rename windows/deploy/{simulate-a-windows-81-deployment-in-a-test-environment.md => simulate-a-windows-10-deployment-in-a-test-environment.md} (98%) rename windows/deploy/{use-the-mdt-database-to-stage-windows-81-deployment-information.md => use-the-mdt-database-to-stage-windows-10-deployment-information.md} (99%) rename windows/keep-secure/{schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md => ad-ds-schema-extensions-to-support-tpm-backup.md} (100%) create mode 100644 windows/keep-secure/add-apps-to-protected-list-using-custom-uri.md rename windows/keep-secure/{applocker-overview-server.md => applocker-overview.md} (100%) rename windows/keep-secure/{audit-account-lockout-sec-audit.md => audit-account-lockout.md} (100%) rename windows/keep-secure/{audit-detailed-file-share-sec-audit.md => audit-detailed-file-share.md} (100%) rename windows/keep-secure/{audit-filtering-platform-packet-drop-sec-audit.md => audit-filtering-platform-packet-drop.md} (100%) rename windows/keep-secure/{audit-kerberos-authentication-service-sec-audit.md => audit-kerberos-authentication-service.md} (100%) rename windows/keep-secure/{audit-kernel-object-sec-audit.md => audit-kernel-object.md} (100%) rename windows/keep-secure/{audit-non-sensitive-privilege-use-sec-audit.md => audit-non-sensitive-privilege-use.md} (100%) rename windows/keep-secure/{audit-other-account-logon-events-sec-audit.md => audit-other-account-logon-events.md} (100%) rename windows/keep-secure/{audit-other-privilege-use-events-sec-audit.md => audit-other-privilege-use-events.md} (100%) rename windows/keep-secure/{audit-process-termination-sec-audit.md => audit-process-termination.md} (100%) rename windows/keep-secure/{audit-sam-sec-audit.md => audit-sam.md} (100%) rename windows/keep-secure/{audit-sensitive-privilege-use-sec-audit.md => audit-sensitive-privilege-use.md} (100%) rename windows/keep-secure/{backup-thetpm-recovery-information-to-ad-ds.md => backup-tpm-recovery-information-to-ad-ds.md} (98%) rename windows/keep-secure/{bitlocker-frequently-asked-questions--faq-.md => bitlocker-frequently-asked-questions.md} (99%) rename windows/keep-secure/{bitlocker-how-to-deploy-on-windows-server-2012.md => bitlocker-how-to-deploy-on-windows-server.md} (98%) rename windows/keep-secure/{bitlocker-overview-roletech-overview.md => bitlocker-overview.md} (98%) rename windows/keep-secure/{block-untrusted-fonts-in-an-enterprise.md => block-untrusted-fonts-in-enterprise.md} (100%) rename windows/keep-secure/{configure-the-applocker-reference-computer-ops.md => configure-the-appLocker-reference-device.md} (100%) create mode 100644 windows/keep-secure/create-edp-policy-using-intune.md create mode 100644 windows/keep-secure/create-edp-policy-using-sccm.md create mode 100644 windows/keep-secure/create-vpn-and-edp-policy-using-intune.md rename windows/keep-secure/{dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md => dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md} (100%) rename windows/keep-secure/{dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md => dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md} (88%) create mode 100644 windows/keep-secure/deploy-edp-policy-using-intune.md rename windows/keep-secure/{domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md => domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md} (87%) rename windows/keep-secure/{domain-member-digitally-encrypt-secure-channel-data--when-possible.md => domain-member-digitally-encrypt-secure-channel-data-when-possible.md} (93%) rename windows/keep-secure/{domain-member-digitally-sign-secure-channel-data--when-possible.md => domain-member-digitally-sign-secure-channel-data-when-possible.md} (89%) rename windows/keep-secure/{domain-member-require-strong--windows-2000-or-later--session-key.md => domain-member-require-strong-windows-2000-or-later-session-key.md} (100%) create mode 100644 windows/keep-secure/enlightened-microsoft-apps-and-edp.md rename windows/keep-secure/{file-system--global-object-access-auditing--sec-audit.md => file-system-global-object-access-auditing.md} (100%) create mode 100644 windows/keep-secure/guidance-and-best-practices-edp.md delete mode 100644 windows/keep-secure/images/defender-updatedefs.png create mode 100644 windows/keep-secure/images/edp-sccm-adddesktopapp.png create mode 100644 windows/keep-secure/images/edp-sccm-addpolicy.png create mode 100644 windows/keep-secure/images/edp-sccm-adduniversalapp.png create mode 100644 windows/keep-secure/images/edp-sccm-appmgmt.png create mode 100644 windows/keep-secure/images/edp-sccm-devicesettings.png create mode 100644 windows/keep-secure/images/edp-sccm-generalscreen.png create mode 100644 windows/keep-secure/images/edp-sccm-optsettings.png create mode 100644 windows/keep-secure/images/edp-sccm-primarydomain2.png create mode 100644 windows/keep-secure/images/edp-sccm-summaryscreen.png create mode 100644 windows/keep-secure/images/edp-sccm-supportedplat.png create mode 100644 windows/keep-secure/images/intune-add-desktop-app.png create mode 100644 windows/keep-secure/images/intune-addapps.png create mode 100644 windows/keep-secure/images/intune-createnewpolicy.png create mode 100644 windows/keep-secure/images/intune-data-recovery.png create mode 100644 windows/keep-secure/images/intune-deploy-vpn.png create mode 100644 windows/keep-secure/images/intune-edpsettings.png create mode 100644 windows/keep-secure/images/intune-encryption-level.png create mode 100644 windows/keep-secure/images/intune-groupselection.png create mode 100644 windows/keep-secure/images/intune-managedeployment.png create mode 100644 windows/keep-secure/images/intune-namedescription.png create mode 100644 windows/keep-secure/images/intune-networklocation.png create mode 100644 windows/keep-secure/images/intune-primary-domain.png create mode 100644 windows/keep-secure/images/intune-vpn-authentication.png create mode 100644 windows/keep-secure/images/intune-vpn-createpolicy.png create mode 100644 windows/keep-secure/images/intune-vpn-customconfig.png create mode 100644 windows/keep-secure/images/intune-vpn-edpmodeid.png create mode 100644 windows/keep-secure/images/intune-vpn-omaurisettings.png create mode 100644 windows/keep-secure/images/intune-vpn-titledescription.png create mode 100644 windows/keep-secure/images/intune-vpn-vpnsettings.png create mode 100644 windows/keep-secure/images/sccm-primary-domain.png rename windows/keep-secure/{interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md => interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md} (100%) rename windows/keep-secure/{microsoft-network-client-digitally-sign-communications--always.md => microsoft-network-client-digitally-sign-communications-always.md} (96%) rename windows/keep-secure/{microsoft-network-client-digitally-sign-communications--if-server-agrees.md => microsoft-network-client-digitally-sign-communications-if-server-agrees.md} (95%) rename windows/keep-secure/{microsoft-network-server-digitally-sign-communications--always.md => microsoft-network-server-digitally-sign-communications-always.md} (91%) rename windows/keep-secure/{microsoft-network-server-digitally-sign-communications--if-client-agrees.md => microsoft-network-server-digitally-sign-communications-if-client-agrees.md} (96%) rename windows/keep-secure/{network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md => network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md} (100%) rename windows/keep-secure/{network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md => network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md} (100%) create mode 100644 windows/keep-secure/overview-create-edp-policy.md create mode 100644 windows/keep-secure/protect-enterprise-data-using-edp.md rename windows/keep-secure/{registry--global-object-access-auditing--sec-audit.md => registry-global-object-access-auditing.md} (100%) rename windows/keep-secure/{security-auditing-overview-glbl.md => security-auditing-overview.md} (100%) rename windows/keep-secure/{system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md => system-objects-strengthen-default-permissions-of-internal-system-objects.md} (100%) create mode 100644 windows/keep-secure/testing-scenarios-for-edp.md rename windows/keep-secure/{tpm-fundamentals-windows-8.md => tpm-fundamentals.md} (97%) rename windows/keep-secure/{trusted-platform-module--tpm-2-0--.md => tpm-recommendations.md} (100%) rename windows/keep-secure/{trusted-platform-module-technology-overview.md => trusted-platform-module-overview.md} (97%) rename windows/keep-secure/{enterprise-security-guides-portal.md => windows-10-enterprise-security-guides.md} (100%) rename windows/keep-secure/{windows-hello-biometrics-in-the-enterprise.md => windows-hello-in-enterprise.md} (100%) rename windows/manage/{app-inventory-managemement-for-windows-store-for-business.md => app-inventory-managemement-windows-store-for-business.md} (99%) create mode 100644 windows/manage/application-development-for-windows-as-a-service.md rename windows/manage/{apps-in-the-windows-store-for-business.md => apps-in-windows-store-for-business.md} (97%) rename windows/manage/{configure-mdm-provider.md => configure-mdm-provider-windows-store-for-business.md} (100%) delete mode 100644 windows/manage/configure-telemetry-in-your-organization.md rename windows/manage/{distribute-apps-to-your-employees-from-the-windows-store-for-business.md => distribute-apps-to-your-employees-windows-store-for-business.md} (98%) rename windows/manage/{distribute-apps-with-a-management-tool.md => distribute-apps-with-management-tool.md} (95%) rename windows/manage/{find-and-acquire-apps.md => find-and-acquire-apps-overview.md} (96%) rename windows/manage/{manage-apps.md => manage-apps-windows-store-for-business-overview.md} (93%) rename windows/manage/{manage-cortana-in-your-enterprise.md => manage-cortana-in-enterprise.md} (100%) rename windows/manage/{manage-settings-in-the-windows-store-for-business.md => manage-settings-windows-store-for-business.md} (85%) rename windows/manage/{manage-users-and-groups-in-the-windows-store-for-business.md => manage-users-and-groups-windows-store-for-business.md} (95%) rename windows/manage/{manage-wi-fi-sense-in-your-company.md => manage-wifi-sense-in-enterprise.md} (100%) rename windows/manage/{prerequisites-for-windows-store-for-business.md => prerequisites-windows-store-for-business.md} (100%) rename windows/manage/{roles-and-permissions-in-the-windows-store-for-business.md => roles-and-permissions-windows-store-for-business.md} (99%) rename windows/manage/{settings-reference--windows-store-for-business.md => settings-reference-windows-store-for-business.md} (92%) rename windows/manage/{sign-up-and-get-started.md => sign-up-windows-store-for-business-overview.md} (88%) rename windows/manage/{sign-up-for-windows-store-for-business.md => sign-up-windows-store-for-business.md} (97%) rename windows/manage/{troubleshoot.md => troubleshoot-windows-store-for-business.md} (100%) rename windows/manage/{update-windows-store-for-business-account-settings-.md => update-windows-store-for-business-account-settings.md} (100%) rename windows/plan/{guidance-for-education-environments.md => windows-10-guidance-for-education-environments.md} (100%) rename windows/plan/{windows-10-servicing-model.md => windows-10-servicing-options.md} (100%) rename windows/plan/{windows-to-go-feature-overview-scenario.md => windows-to-go-overview.md} (100%) rename windows/whats-new/{microsoft-edge-and-internet-explorer-11.md => edge-ie11-whats-new-overview.md} (100%) rename windows/whats-new/{enterprise-data-protection-overview.md => edp-whats-new-overview.md} (98%) rename windows/whats-new/{business-store-for-windows-10.md => windows-store-for-business-overview.md} (97%) rename windows/whats-new/{windows-update-for-busines.md => windows-update-for-business.md} (100%) diff --git a/windows/deploy/TOC.md b/windows/deploy/TOC.md index 8403bb44b3..22d109f738 100644 --- a/windows/deploy/TOC.md +++ b/windows/deploy/TOC.md @@ -1,42 +1,42 @@ # [Deploy Windows 10](index.md) ## [Change history for Deploy Windows 10](change-history-for-deploy-windows-10.md) ## [Windows 10 deployment scenarios](windows-10-deployment-scenarios.md) -## [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md) -### [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) -#### [Key features in MDT 2013 Update 1](key-features-in-mdt-2013.md) -#### [MDT 2013 Update 1 Lite Touch components](mdt-2013-lite-touch-components.md) -#### [Prepare for deployment with MDT 2013 Update 1](prepare-for-deployment-with-mdt-2013.md) -### [Create a Windows 10 reference image](create-a-windows-81-reference-image.md) -### [Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) -### [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) -### [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) -### [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +## [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) +### [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) +#### [Key features in MDT 2013 Update 2](key-features-in-mdt-2013.md) +#### [MDT 2013 Update 2 Lite Touch components](mdt-2013-lite-touch-components.md) +#### [Prepare for deployment with MDT 2013 Update 2](prepare-for-windows-deployment-with-mdt-2013.md) +### [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) +### [Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) +### [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) +### [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) +### [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) ### [Configure MDT settings](configure-mdt-2013-settings.md) #### [Set up MDT for BitLocker](set-up-mdt-2013-for-bitlocker.md) #### [Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) #### [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -#### [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) -#### [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +#### [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) +#### [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) #### [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) #### [Use web services in MDT](use-web-services-in-mdt-2013.md) #### [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt-2013.md) -## [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-81-with-system-center-2012-r2-configuration-manager.md) -### [Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) -### [Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) -### [Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) -### [Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) -### [Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) -### [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +## [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) +### [Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) +### [Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) +### [Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) +### [Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) +### [Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) +### [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) ### [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -### [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md) -### [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) -### [Monitor the Windows 10 deployment with Configuration Manager](monitor-the-windows-81-deployment-with-configuration-manager.md) -### [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) -### [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +### [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md) +### [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) +### [Monitor the Windows 10 deployment with Configuration Manager](monitor-windows-10-deployment-with-configuration-manager.md) +### [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) +### [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) ## [Upgrade to Windows 10 with the Microsoft Deployment Toolkit](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) ## [Upgrade to Windows 10 with System Center Configuration Manager](upgrade-to-windows-10-with-system-center-configuraton-manager.md) ## [Windows 10 edition upgrade](windows-10-edition-upgrades.md) -## [Deploy Windows To Go in your organization](deploy-windows-to-go-in-your-organization-small-scenario.md) +## [Deploy Windows To Go in your organization](deploy-windows-to-go.md) ## [Update Windows 10 images with provisioning packages](update-windows-10-images-with-provisioning-packages.md) ## [Sideload apps in Windows 10](sideload-apps-in-windows-10.md) ## [Volume Activation [client]](volume-activation-windows-10.md) @@ -94,7 +94,7 @@ ##### [Migrate User Accounts](migrate-user-accounts-usmt.md) ##### [Reroute Files and Settings](reroute-files-and-settings-usmt.md) ##### [Verify the Condition of a Compressed Migration Store](verify-the-condition-of-a-compressed-migration-store.md) -#### [User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +#### [User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md)) ##### [Common Issues](common-issues-usmt-win8.md) ##### [Frequently Asked Questions](frequently-asked-questions-usmt-win7-usmt-win8.md) ##### [Log Files](log-files-usmt-win7-usmt-win8.md) diff --git a/windows/deploy/add-a-windows-81-operating-system-image-using-configuration-manager.md b/windows/deploy/add-a-windows-10-operating-system-image-using-configuration-manager.md similarity index 83% rename from windows/deploy/add-a-windows-81-operating-system-image-using-configuration-manager.md rename to windows/deploy/add-a-windows-10-operating-system-image-using-configuration-manager.md index 9bb36dd722..7be8c2bbe2 100644 --- a/windows/deploy/add-a-windows-81-operating-system-image-using-configuration-manager.md +++ b/windows/deploy/add-a-windows-10-operating-system-image-using-configuration-manager.md @@ -18,7 +18,7 @@ author: CFaw Operating system images are typically the production image used for deployment throughout the organization. This topic shows you how to add a Windows 10 operating system image created with Microsoft System Center 2012 R2 Configuration Manager, and how to distribute the image to a distribution point. -For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard, as the distribution point. CM01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). Our image is named REFW10-X64-001.wim. For details on building this image, please see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md). +For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard, as the distribution point. CM01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). Our image is named REFW10-X64-001.wim. For details on building this image, please see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). 1. Using File Explorer, in the **E:\\Sources\\OSD\\OS** folder, create a subfolder named **Windows 10 Enterprise x64 RTM**. @@ -47,23 +47,23 @@ For the purposes of this topic, we will use CM01, a machine running Windows Serv ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md b/windows/deploy/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md similarity index 89% rename from windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md rename to windows/deploy/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md index 65b54344fe..b655ccdd8b 100644 --- a/windows/deploy/add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md +++ b/windows/deploy/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md @@ -18,7 +18,7 @@ author: CFaw In this topic, you will learn how to configure the Windows Preinstallation Environment (Windows PE) to include the network drivers required to connect to the deployment share and the storage drivers required to see the local storage on machines. Even though the Windows PE boot image and the Windows 10 operating system contain many out-of-the-box drivers, it is likely you will have to add new or updated drivers to support all your hardware. In this section, you import drivers for both Windows PE and the full Windows 10 operating system. -For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ## Add drivers for Windows PE @@ -84,23 +84,23 @@ Figure 23. Drivers imported and a new driver package created. ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/assign-applications-using-roles-in-mdt-2013.md b/windows/deploy/assign-applications-using-roles-in-mdt-2013.md index a726ac91ee..d5fba8327f 100644 --- a/windows/deploy/assign-applications-using-roles-in-mdt-2013.md +++ b/windows/deploy/assign-applications-using-roles-in-mdt-2013.md @@ -142,9 +142,9 @@ Figure 14. ZTIGather.log displaying the application GUID belonging to the Adobe [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Use web services in MDT](use-web-services-in-mdt-2013.md) diff --git a/windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md b/windows/deploy/build-a-distributed-environment-for-windows-10-deployment.md similarity index 97% rename from windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md rename to windows/deploy/build-a-distributed-environment-for-windows-10-deployment.md index 8fa27b0329..00aa4d9f6d 100644 --- a/windows/deploy/build-a-distributed-environment-for-windows-81-deployment.md +++ b/windows/deploy/build-a-distributed-environment-for-windows-10-deployment.md @@ -34,7 +34,7 @@ Robocopy has options that allow for synchronization between folders. It has a si   -### Linked deployment shares in MDT 2013 Update 1 +### Linked deployment shares in MDT 2013 Update 2 LDS is a built-in feature in MDT for replicating content. However, LDS works best with strong connections such as LAN connections with low latency. For most WAN links, DFS-R is the better option. @@ -120,7 +120,7 @@ When you have multiple deployment servers sharing the same content, you need to ``` **Note**   - The DeployRoot value needs to go into the Bootstrap.ini file, but you can use the same logic in the CustomSettings.ini file. For example, you can redirect the logs to the local deployment server (SLSHARE), or have the User State Migration Tool (USMT) migration store (UDDIR) local. To learn more about USMT, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) and [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md). + The DeployRoot value needs to go into the Bootstrap.ini file, but you can use the same logic in the CustomSettings.ini file. For example, you can redirect the logs to the local deployment server (SLSHARE), or have the User State Migration Tool (USMT) migration store (UDDIR) local. To learn more about USMT, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) and [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md).   @@ -289,15 +289,15 @@ Now you should have a solution ready for deploying the Windows 10 client to the ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -[Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -[Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +[Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) [Configure MDT settings](configure-mdt-2013-settings.md) diff --git a/windows/deploy/common-issues-usmt-win8.md b/windows/deploy/common-issues-usmt-win8.md index a084274da5..363484f23b 100644 --- a/windows/deploy/common-issues-usmt-win8.md +++ b/windows/deploy/common-issues-usmt-win8.md @@ -289,7 +289,7 @@ You should also reboot the machine. ## Related topics -[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md)) [Frequently Asked Questions](frequently-asked-questions-usmt-win7-usmt-win8.md) diff --git a/windows/deploy/configure-mdt-2013-for-userexit-scripts.md b/windows/deploy/configure-mdt-2013-for-userexit-scripts.md index eb899ef154..01607fa6ca 100644 --- a/windows/deploy/configure-mdt-2013-for-userexit-scripts.md +++ b/windows/deploy/configure-mdt-2013-for-userexit-scripts.md @@ -63,9 +63,9 @@ The purpose of this sample is not to recommend that you use the MAC Address as a [Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/configure-mdt-2013-settings.md b/windows/deploy/configure-mdt-2013-settings.md index f9c6a2b85c..2c160812ee 100644 --- a/windows/deploy/configure-mdt-2013-settings.md +++ b/windows/deploy/configure-mdt-2013-settings.md @@ -29,9 +29,9 @@ Figure 1. The machines used in this topic. - [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -- [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +- [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -- [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +- [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) - [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) @@ -42,17 +42,17 @@ Figure 1. The machines used in this topic. ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -[Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -[Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +[Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)   diff --git a/windows/deploy/configure-mdt-deployment-share-rules.md b/windows/deploy/configure-mdt-deployment-share-rules.md index 8f21637563..f0b9946f1e 100644 --- a/windows/deploy/configure-mdt-deployment-share-rules.md +++ b/windows/deploy/configure-mdt-deployment-share-rules.md @@ -90,7 +90,7 @@ To avoid assigning a computer name longer than 15 characters, you can configure Priority=Default [Default] OSInstall=YES -OSDComputerName=PC-#Left(?%SerialNumber%?,12)# +OSDComputerName=PC-#Left("%SerialNumber%",12)# ``` In the preceding sample, you still configure the rules to set the computer name to a prefix (PC-) followed by the serial number. However, by adding the Left VBScript function, you configure the rule to use only the first 12 serial-number characters for the name. @@ -117,9 +117,9 @@ MachineObjectOU=OU=Laptops,OU=Contoso,DC=contoso,DC=com [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md b/windows/deploy/create-a-custom-windows-pe-boot-image-with-configuration-manager.md similarity index 90% rename from windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md rename to windows/deploy/create-a-custom-windows-pe-boot-image-with-configuration-manager.md index 60731018d3..7b6d831fae 100644 --- a/windows/deploy/create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md +++ b/windows/deploy/create-a-custom-windows-pe-boot-image-with-configuration-manager.md @@ -16,9 +16,9 @@ author: CFaw - Windows 10 -In Microsoft System Center 2012 R2 Configuration Manager, you can create custom Windows Preinstallation Environment (Windows PE) boot images that include extra components and features. This topic shows you how to create a custom Windows PE 5.0 boot image with the Microsoft Deployment Toolkit (MDT) 2013 Update 1 wizard. You can also add the Microsoft Diagnostics and Recovery Toolset (DaRT) 10 to the boot image as part of the boot image creation process. +In Microsoft System Center 2012 R2 Configuration Manager, you can create custom Windows Preinstallation Environment (Windows PE) boot images that include extra components and features. This topic shows you how to create a custom Windows PE 5.0 boot image with the Microsoft Deployment Toolkit (MDT) 2013 Update 2 wizard. You can also add the Microsoft Diagnostics and Recovery Toolset (DaRT) 10 to the boot image as part of the boot image creation process. -For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. Both are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. Both are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ## Add DaRT 10 files and prepare to brand the boot image @@ -89,23 +89,23 @@ By using the MDT wizard to create the boot image in Configuration Manager, you g ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md b/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md index d2bdda4345..3430f96464 100644 --- a/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md +++ b/windows/deploy/create-a-task-sequence-with-configuration-manager-and-mdt.md @@ -18,7 +18,7 @@ author: CFaw In this topic, you will learn how to create a Microsoft System Center 2012 R2 Configuration Manager task sequence with Microsoft Deployment Toolkit (MDT) integration using the MDT wizard. Creating task sequences in System Center 2012 R2 Configuration Manager requires many more steps than creating task sequences for MDT Lite Touch installation. Luckily, the MDT wizard helps you through the process and also guides you through creating the needed packages. -For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard, both of which are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard, both of which are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ## Create a task sequence using the MDT Integration Wizard @@ -169,23 +169,23 @@ While creating the task sequence with the MDT wizard, a few operating system dep ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/create-a-windows-81-reference-image.md b/windows/deploy/create-a-windows-10-reference-image.md similarity index 98% rename from windows/deploy/create-a-windows-81-reference-image.md rename to windows/deploy/create-a-windows-10-reference-image.md index 494afe5ad2..1109065adc 100644 --- a/windows/deploy/create-a-windows-81-reference-image.md +++ b/windows/deploy/create-a-windows-10-reference-image.md @@ -16,9 +16,14 @@ author: CFaw - Windows 10 -Creating a reference image is important because that image serves as the foundation for the devices in your organization. In this topic, you will learn how to create a Windows 10 reference image using the Microsoft Deployment Toolkit (MDT) 2013 Update 1. You will create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. After completing the steps outlined in this topic, you will have a Windows 10 reference image that can be used in your deployment solution. +Creating a reference image is important because that image serves as the foundation for the devices in your organization. In this topic, you will learn how to create a Windows 10 reference image using the Microsoft Deployment Toolkit (MDT) 2013 Update 2. You will create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. After completing the steps outlined in this topic, you will have a Windows 10 reference image that can be used in your deployment solution. -For the purposes of this topic, we will use four machines: DC01, MDT01, HV01, and PC0001. DC01 is a domain controller, PC0001 is a Windows 10 Enterprise x64 client, and MDT01 is a Windows Server 2012 R2 standard server. HV01 is a Hyper-V host server, but HV01 could be replaced by PC0001 as long as PC0001 has enough memory and is capable of running Hyper-V. MDT01, HV01, and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof). +For the purposes of this topic, we will use four machines: DC01, MDT01, HV01, and PC0001. DC01 is a domain controller, PC0001 is a Windows 10 Enterprise x64 client, and MDT01 is a Windows Server 2012 R2 standard server. HV01 is a Hyper-V host server, but HV01 could be replaced by PC0001 as long as PC0001 has enough memory and is capable of running Hyper-V. MDT01, HV01, and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. + +**Note**   +For important details about the setup for the steps outlined in this article, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof). + +  ![figure 1](images/mdt-08-fig01.png) @@ -83,7 +88,7 @@ Figure 3. Permissions configured for the MDT\_BA user. ## Add the setup files -This section will show you how to populate the MDT 2013 Update 1 deployment share with the Windows 10 operating system source files, commonly referred to as setup files, which will be used to create a reference image. Setup files are used during the reference image creation process and are the foundation for the reference image. +This section will show you how to populate the MDT 2013 Update 2 deployment share with the Windows 10 operating system source files, commonly referred to as setup files, which will be used to create a reference image. Setup files are used during the reference image creation process and are the foundation for the reference image. ### Add the Windows 10 installation files @@ -253,7 +258,7 @@ In these steps we assume that you have downloaded Microsoft Visual C++ 2005 SP1 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` syntax - $ApplicationName = "Install - Microsoft Visual C++ 2005 SP1 ? x64" + $ApplicationName = "Install - Microsoft Visual C++ 2005 SP1 - x64" $CommandLine = "vcredist_x64.exe /Q" $ApplicationSourcePath = "E:\Downloads\VC++2005SP1x64" Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -Commandline $Commandline -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName @@ -285,7 +290,7 @@ In these steps we assume that you have downloaded Microsoft Visual C++ 2008 SP1 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` syntax - $ApplicationName = "Install - Microsoft Visual C++ 2008 SP1 ? x64" + $ApplicationName = "Install - Microsoft Visual C++ 2008 SP1 - x64" $CommandLine = "vcredist_x64.exe /Q" $ApplicationSourcePath = "E:\Downloads\VC++2008SP1x64" Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -Commandline $Commandline -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName @@ -317,7 +322,7 @@ In these steps we assume that you have downloaded Microsoft Visual C++ 2010 SP1 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` syntax - $ApplicationName = "Install - Microsoft Visual C++ 2010 SP1 ? x64" + $ApplicationName = "Install - Microsoft Visual C++ 2010 SP1 - x64" $CommandLine = "vcredist_x64.exe /Q" $ApplicationSourcePath = "E:\Downloads\VC++2010SP1x64" Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName @@ -349,7 +354,7 @@ In these steps we assume that you have downloaded Microsoft Visual C++ 2012 Upda 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` syntax - $ApplicationName = "Install - Microsoft Visual C++ 2012 Update 4 ? x64" + $ApplicationName = "Install - Microsoft Visual C++ 2012 Update 4 - x64" $CommandLine = "vcredist_x64.exe /Q" $ApplicationSourcePath = "E:\Downloads\VC++2012Ux64" Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName @@ -835,15 +840,15 @@ After some time, you will have a Windows 10 Enterprise x64 image that is fully ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -[Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +[Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) [Configure MDT settings](configure-mdt-2013-settings.md) diff --git a/windows/deploy/create-an-application-to-deploy-with-windows-81-using-configuration-manager.md b/windows/deploy/create-an-application-to-deploy-with-windows-10-using-configuration-manager.md similarity index 87% rename from windows/deploy/create-an-application-to-deploy-with-windows-81-using-configuration-manager.md rename to windows/deploy/create-an-application-to-deploy-with-windows-10-using-configuration-manager.md index 66e8eb821c..d0edd50de2 100644 --- a/windows/deploy/create-an-application-to-deploy-with-windows-81-using-configuration-manager.md +++ b/windows/deploy/create-an-application-to-deploy-with-windows-10-using-configuration-manager.md @@ -18,7 +18,7 @@ author: CFaw Microsoft System Center 2012 R2 Configuration Manager supports deploying applications as part of the Windows 10 deployment process. In this section, you create an application in System Center 2012 R2 Configuration Manager that you later configure the task sequence to use. -For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use CM01, a machine running Windows Server 2012 R2 Standard that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). **Note**   Even though the new application model is fully supported to deploy via the task sequence, the most reliable way to deploy software via the task sequence is still the legacy packages, especially if you deploy many applications. @@ -74,23 +74,23 @@ The steps below show you how to create the Adobe Reader XI application. This sec ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md b/windows/deploy/deploy-a-windows-10-image-using-mdt.md similarity index 97% rename from windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md rename to windows/deploy/deploy-a-windows-10-image-using-mdt.md index f71f735d90..9ae073428b 100644 --- a/windows/deploy/deploy-a-windows-81-image-using-mdt-2013.md +++ b/windows/deploy/deploy-a-windows-10-image-using-mdt.md @@ -1,6 +1,6 @@ --- -title: Deploy a Windows 10 image using MDT 2013 Update 1 (Windows 10) -description: This topic will show you how to take your reference image for Windows 10, and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 specifically. +title: Deploy a Windows 10 image using MDT 2013 Update 2 (Windows 10) +description: This topic will show you how to take your reference image for Windows 10, and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 specifically. ms.assetid: 1d70a3d8-1b1d-4051-b656-c0393a93f83c keywords: ["deployment, automate, tools, configure"] ms.prod: W10 @@ -9,16 +9,21 @@ ms.sitesec: library author: CFaw --- -# Deploy a Windows 10 image using MDT 2013 Update 1 +# Deploy a Windows 10 image using MDT 2013 Update 2 **Applies to** - Windows 10 -This topic will show you how to take your reference image for Windows 10, and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 specifically. You will prepare for this by creating a MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. You will then configure the deployment share, create a new task sequence, add applications, add drivers, add rules, and configure Active Directory permissions for deployment. +This topic will show you how to take your reference image for Windows 10, and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 specifically. You will prepare for this by creating a MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. You will then configure the deployment share, create a new task sequence, add applications, add drivers, add rules, and configure Active Directory permissions for deployment. -For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0005. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 standard server, and PC0005 is a blank machine to which you deploy Windows 10. MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0005. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 standard server, and PC0005 is a blank machine to which you deploy Windows 10. MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. + +**Note**   +For important details about the setup for the steps outlined in this article, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +  ![figure 1](images/mdt-07-fig01.png) @@ -48,7 +53,7 @@ These steps will show you how to configure an Active Directory account with the 3. In an elevated Windows PowerShell prompt (run as Administrator), run the following commands and press **Enter** after each command: ``` syntax - Set-ExecutionPolicy -ExecutionPolicy RemoteSigned ?Force + Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force Set-Location C:\Setup\Scripts .\Set-OUPermissions.ps1 -Account MDT_JD -TargetOU "OU=Workstations,OU=Computers,OU=Contoso" @@ -83,7 +88,7 @@ These steps will show you how to configure an Active Directory account with the ## Step 2: Set up the MDT production deployment share -When you are ready to deploy Windows 10 in a production environment, you will first create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. For guidance on creating a custom Windows 10 image, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md). +When you are ready to deploy Windows 10 in a production environment, you will first create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. For guidance on creating a custom Windows 10 image, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). ### Create the MDT production deployment share @@ -110,7 +115,7 @@ The next step is to add a reference image into the deployment share with the set ### Add the Windows 10 Enterprise x64 RTM custom image -In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-81-reference-image.md) topic, so you have a Windows 10 reference image in the E:\\MDTBuildLab\\Captures folder on MDT01. +In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image in the E:\\MDTBuildLab\\Captures folder on MDT01. 1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a folder named **Windows 10**. @@ -167,7 +172,7 @@ Figure 3. The Adobe Reader application added to the Deployment Workbench. ## Step 5: Prepare the drivers repository -In order to deploy Windows 10 with MDT 2013 Update 1 successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: +In order to deploy Windows 10 with MDT 2013 Update 2 successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: - Lenovo ThinkPad T420 @@ -186,7 +191,7 @@ You should only add drivers to the Windows PE images if the default drivers don' ### Create the driver source structure in the file system -The key to successful management of drivers for MDT 2013 Update 1, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. +The key to successful management of drivers for MDT 2013 Update 2, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. 1. On MDT01, using File Explorer, create the **E:\\Drivers** folder. @@ -212,7 +217,7 @@ The key to successful management of drivers for MDT 2013 Update 1, as well as fo - ThinkPad T420 (4178) - - Microsoft + - Microsoft Corporation - Surface Pro 3 @@ -221,9 +226,9 @@ Even if you are not going to use both x86 and x64 boot images, we still recommen   -### Create the logical driver structure in MDT 2013 Update 1 +### Create the logical driver structure in MDT 2013 Update 2 -When you import drivers to the MDT 2013 Update 1 driver repository, MDT creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. +When you import drivers to the MDT 2013 Update 2 driver repository, MDT creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. 1. On MDT01, using Deployment Workbench, select the **Out-of-Box Drivers** node. @@ -249,7 +254,7 @@ When you import drivers to the MDT 2013 Update 1 driver repository, MDT creates - 4178 - - Microsoft + - Microsoft Corporation - Surface Pro 3 @@ -621,7 +626,7 @@ If your organization has a Microsoft Software Assurance agreement, you also can ### Add DaRT 10 to the boot images -If you have licensing for MDOP and DaRT, you can add DaRT to the boot images using the steps in this section. If you do not have DaRT licensing, or don't want to use it, simply skip to the next section, [Update the Deployment Share](#bkmk-update-deployment). To enable the remote connection feature in MDT 2013 Update 1, you need to do the following: +If you have licensing for MDOP and DaRT, you can add DaRT to the boot images using the steps in this section. If you do not have DaRT licensing, or don't want to use it, simply skip to the next section, [Update the Deployment Share](#bkmk-update-deployment). To enable the remote connection feature in MDT 2013 Update 2, you need to do the following: - Install DaRT 10 (part of MDOP 2015 R1). @@ -890,15 +895,15 @@ Figure 14. The partitions when deploying an UEFI-based machine. ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -[Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) [Configure MDT settings](configure-mdt-2013-settings.md) diff --git a/windows/deploy/deploy-windows-81-using-pxe-and-configuration-manager.md b/windows/deploy/deploy-windows-10-using-pxe-and-configuration-manager.md similarity index 80% rename from windows/deploy/deploy-windows-81-using-pxe-and-configuration-manager.md rename to windows/deploy/deploy-windows-10-using-pxe-and-configuration-manager.md index a423c563e0..3ee3168fb2 100644 --- a/windows/deploy/deploy-windows-81-using-pxe-and-configuration-manager.md +++ b/windows/deploy/deploy-windows-10-using-pxe-and-configuration-manager.md @@ -18,7 +18,7 @@ author: CFaw In this topic, you will learn how to deploy Windows 10 using Microsoft System Center 2012 R2 Configuration Manager deployment packages and task sequences. This topic will walk you through the process of deploying the Windows 10 Enterprise image to a Unified Extensible Firmware Interface (UEFI) machine named PC0001. -For the purposes of this topic, we will use two additional machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. DC01, CM01, and PC0001 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use two additional machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. DC01, CM01, and PC0001 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). 1. Start the PC0001 machine. At the Pre-Boot Execution Environment (PXE) boot menu, press **Enter** to allow it to PXE boot. @@ -39,23 +39,23 @@ Figure 32. Typing in the computer name. ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/deploy-windows-81-with-system-center-2012-r2-configuration-manager.md b/windows/deploy/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md similarity index 79% rename from windows/deploy/deploy-windows-81-with-system-center-2012-r2-configuration-manager.md rename to windows/deploy/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md index ae8394b095..747ea8bb0e 100644 --- a/windows/deploy/deploy-windows-81-with-system-center-2012-r2-configuration-manager.md +++ b/windows/deploy/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md @@ -16,9 +16,9 @@ author: CFaw - Windows 10 -If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or, more specifically, MDT 2013 Update 1. +If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or, more specifically, MDT 2013 Update 2. -For the purposes of this topic, we will use four machines: DC01, CM01, PC0003, and PC0004. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 standard. PC0003 and PC0004 are machines with Windows 7 SP1, on which Windows 10 will be deployed via both refresh and replace scenarios. In addition to these four ready-made machines, you could also include a few blank virtual machines to be used for bare-metal deployments. DC01, CM01, PC003, and PC0004 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use four machines: DC01, CM01, PC0003, and PC0004. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 standard. PC0003 and PC0004 are machines with Windows 7 SP1, on which Windows 10 will be deployed via both refresh and replace scenarios. In addition to these four ready-made machines, you could also include a few blank virtual machines to be used for bare-metal deployments. DC01, CM01, PC003, and PC0004 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ![figure 1](images/mdt-06-fig01.png) @@ -27,29 +27,29 @@ Figure 1. The machines used in this topic. ## In this section -- [Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +- [Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -- [Prepare for Zero Touch Installation of Windows with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +- [Prepare for Zero Touch Installation of Windows with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -- [Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +- [Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -- [Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +- [Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -- [Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +- [Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -- [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +- [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) - [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -- [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md) +- [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md) -- [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +- [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -- [Monitor the Windows 10 deployment with Configuration Manager](monitor-the-windows-81-deployment-with-configuration-manager.md) +- [Monitor the Windows 10 deployment with Configuration Manager](monitor-windows-10-deployment-with-configuration-manager.md) -- [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +- [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -- [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +- [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) ## Components of Configuration Manager operating system deployment @@ -68,11 +68,11 @@ Operating system deployment with Configuration Manager is part of the normal sof - **Operating system images.** The operating system image package contains only one file, the custom .wim image. This is typically the production deployment image. -- **Operating system installers.** The operating system installers were originally added to create reference images using Configuration Manager. Instead, we recommend that you use MDT 2013 Update 1 Lite Touch to create your reference images. For more information on how to create a reference image, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md). +- **Operating system installers.** The operating system installers were originally added to create reference images using Configuration Manager. Instead, we recommend that you use MDT 2013 Update 2 Lite Touch to create your reference images. For more information on how to create a reference image, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). -- **Drivers.** Like MDT 2013 Update 1 Lite Touch, Configuration Manager also provides a repository (catalog) of managed device drivers. +- **Drivers.** Like MDT 2013 Update 2 Lite Touch, Configuration Manager also provides a repository (catalog) of managed device drivers. -- **Task sequences.** The task sequences in Configuration Manager look and feel pretty much like the sequences in MDT 2013 Update 1 Lite Touch, and they are used for the same purpose. However, in Configuration Manager the task sequence is delivered to the clients as a policy via the Management Point (MP). MDT 2013 Update 1 provides additional task sequence templates to Configuration Manager. +- **Task sequences.** The task sequences in Configuration Manager look and feel pretty much like the sequences in MDT 2013 Update 2 Lite Touch, and they are used for the same purpose. However, in Configuration Manager the task sequence is delivered to the clients as a policy via the Management Point (MP). MDT 2013 Update 2 provides additional task sequence templates to Configuration Manager. **Note**  Configuration Manager SP1 along with the Windows Assessment and Deployment Kit (ADK) for Windows 10 are required to support management and deployment of Windows 10. @@ -85,11 +85,11 @@ Operating system deployment with Configuration Manager is part of the normal sof - [Windows deployment tools](windows-deployment-scenarios-and-tools.md) -- [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md) +- [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) - [Upgrade to Windows 10 with the Microsoft Deployment Toolkit](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) -- [Deploy Windows To Go in your organization](deploy-windows-to-go-in-your-organization-small-scenario.md) +- [Deploy Windows To Go in your organization](deploy-windows-to-go.md) - [Sideload Windows Store apps](http://technet.microsoft.com/library/dn613831.aspx) diff --git a/windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md b/windows/deploy/deploy-windows-10-with-the-microsoft-deployment-toolkit.md similarity index 88% rename from windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md rename to windows/deploy/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index 20361ab3bf..bcb0321bfd 100644 --- a/windows/deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md +++ b/windows/deploy/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -1,6 +1,6 @@ --- title: Deploy Windows 10 with the Microsoft Deployment Toolkit (Windows 10) -description: This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 specifically. +description: This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 specifically. ms.assetid: 837f009c-617e-4b3f-9028-2246067ee0fb keywords: ["deploy", "tools", "configure", "script"] ms.prod: W10 @@ -16,28 +16,28 @@ author: CFaw - Windows 10 -This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 specifically. +This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 specifically. The Microsoft Deployment Toolkit is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. -MDT 2013 Update 1 supports the deployment of Windows 10, as well as Windows 7, Windows 8, Windows 8.1, and Windows Server 2012 R2. It also includes support for zero-touch installation (ZTI) with Microsoft System Center 2012 R2 Configuration Manager. +MDT 2013 Update 2 supports the deployment of Windows 10, as well as Windows 7, Windows 8, Windows 8.1, and Windows Server 2012 R2. It also includes support for zero-touch installation (ZTI) with Microsoft System Center 2012 R2 Configuration Manager. To download the latest version of MDT, visit the [MDT resource page](http://go.microsoft.com/fwlink/p/?LinkId=618117). ## In this section -- [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +- [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -- [Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +- [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -- [Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +- [Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -- [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +- [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -- [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +- [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -- [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +- [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) - [Configure MDT settings](configure-mdt-2013-settings.md) @@ -112,9 +112,9 @@ The information in this guide is designed to help you deploy Windows 10. In ord [Windows 10 deployment tools](windows-deployment-scenarios-and-tools.md) -[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-81-with-system-center-2012-r2-configuration-manager.md) +[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) -[Deploy Windows To Go in your organization](deploy-windows-to-go-in-your-organization-small-scenario.md) +[Deploy Windows To Go in your organization](deploy-windows-to-go.md) [Sideload apps in Windows 10](sideload-apps-in-windows-10.md) diff --git a/windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md b/windows/deploy/deploy-windows-to-go.md similarity index 99% rename from windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md rename to windows/deploy/deploy-windows-to-go.md index afc35d1613..45666c4a6c 100644 --- a/windows/deploy/deploy-windows-to-go-in-your-organization-small-scenario.md +++ b/windows/deploy/deploy-windows-to-go.md @@ -16,7 +16,7 @@ author: CFaw - Windows 10 -This topic helps you to deploy Windows To Go in your organization. Before you begin deployment, make sure that you have reviewed the topics [Windows To Go: feature overview](../plan/windows-to-go-feature-overview-scenario.md) and [Prepare your organization for Windows To Go](../plan/prepare-your-organization-for-windows-to-go.md) to ensure that you have the correct hardware and are prepared to complete the deployment. You can then use the steps in this topic to start your Windows To Go deployment. +This topic helps you to deploy Windows To Go in your organization. Before you begin deployment, make sure that you have reviewed the topics [Windows To Go: feature overview](../plan/windows-to-go-overview.md) and [Prepare your organization for Windows To Go](../plan/prepare-your-organization-for-windows-to-go.md) to ensure that you have the correct hardware and are prepared to complete the deployment. You can then use the steps in this topic to start your Windows To Go deployment. **Note**   This topic includes sample Windows PowerShell cmdlets that you can use to automate some of the procedures described. For more information, see [Using Cmdlets](http://go.microsoft.com/fwlink/p/?linkid=230693). @@ -28,7 +28,7 @@ This topic includes sample Windows PowerShell cmdlets that you can use to automa The following is a list of items that you should be aware of before you start the deployment process: -- Only use recommended USB drives for Windows To Go. Use of other drives is not supported. Check the list at [Windows To Go: feature overview](../plan/windows-to-go-feature-overview-scenario.md) for the latest USB drives certified for use as Windows To Go drives. +- Only use recommended USB drives for Windows To Go. Use of other drives is not supported. Check the list at [Windows To Go: feature overview](../plan/windows-to-go-overview.md) for the latest USB drives certified for use as Windows To Go drives. - After you provision a new workspace, always eject a Windows To Go drive using the **Safely Remove Hardware and Eject Media** control that can be found in the notification area or in Windows Explorer. Removing the drive from the USB port without ejecting it first can cause the drive to become corrupted. @@ -1013,7 +1013,7 @@ In the PowerShell provisioning script, after the image has been applied, you can ## Related topics -[Windows To Go: feature overview](../plan/windows-to-go-feature-overview-scenario.md) +[Windows To Go: feature overview](../plan/windows-to-go-overview.md) [Windows 10 forums](http://go.microsoft.com/fwlink/p/?LinkId=618949) diff --git a/windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md b/windows/deploy/finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md similarity index 91% rename from windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md rename to windows/deploy/finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md index aed01ca1a8..3224e87eca 100644 --- a/windows/deploy/finalize-the-operating-system-configuration-for-windows-81-deployment-with-configuration-manager.md +++ b/windows/deploy/finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md @@ -18,7 +18,7 @@ author: CFaw This topic walks you through the steps to finalize the configuration of your Windows 10 operating deployment, which includes enablement of the optional Microsoft Deployment Toolkit (MDT) monitoring for Microsoft System Center 2012 R2 Configuration Manager, logs folder creation, rules configuration, content distribution, and deployment of the previously created task sequence. -For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. Both are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. Both are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ## Enable MDT monitoring @@ -52,7 +52,7 @@ To support additional server-side logging in Configuration Manager, you create a ``` syntax New-Item -Path E:\Logs -ItemType directory - New-SmbShare ?Name Logs$ ?Path E:\Logs -ChangeAccess EVERYONE + New-SmbShare -Name Logs$ -Path E:\Logs -ChangeAccess EVERYONE icacls E:\Logs /grant '"CM_NAA":(OI)(CI)(M)' ``` @@ -163,25 +163,25 @@ Figure 30. Configure a collection variable. ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md b/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md index a7ce688d17..454293d158 100644 --- a/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md +++ b/windows/deploy/frequently-asked-questions-usmt-win7-usmt-win8.md @@ -116,7 +116,7 @@ For more information, see [Conflicts and Precedence](conflicts-and-precedence-us ## Related topics -[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md)) [Extract Files from a Compressed USMT Migration Store](extract-files-from-a-compressed-usmt-migration-store.md) diff --git a/windows/deploy/get-started-with-the-microsoft-deployment-toolkit--mdt-.md b/windows/deploy/get-started-with-the-microsoft-deployment-toolkit.md similarity index 73% rename from windows/deploy/get-started-with-the-microsoft-deployment-toolkit--mdt-.md rename to windows/deploy/get-started-with-the-microsoft-deployment-toolkit.md index de438adaf7..3df68fe71c 100644 --- a/windows/deploy/get-started-with-the-microsoft-deployment-toolkit--mdt-.md +++ b/windows/deploy/get-started-with-the-microsoft-deployment-toolkit.md @@ -1,6 +1,6 @@ --- title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) -description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 in particular, as part of a Windows operating system deployment. +description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 in particular, as part of a Windows operating system deployment. ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee keywords: ["deploy", "image", "feature", "install", "tools"] ms.prod: W10 @@ -16,9 +16,9 @@ author: CFaw - Windows 10 -This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 in particular, as part of a Windows operating system deployment. MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT 2013 Update 1 also can be used to extend the operating system deployment features available in Microsoft System Center 2012 R2 Configuration Manager. +This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 in particular, as part of a Windows operating system deployment. MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT 2013 Update 2 also can be used to extend the operating system deployment features available in Microsoft System Center 2012 R2 Configuration Manager. -In addition to familiarizing you with the features and options available in MDT 2013 Update 1, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. +In addition to familiarizing you with the features and options available in MDT 2013 Update 2, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof). @@ -29,26 +29,26 @@ Figure 1. The machines used in this topic. ## In this section -- [Key features in MDT 2013 Update 1](key-features-in-mdt-2013.md) +- [Key features in MDT 2013 Update 2](key-features-in-mdt-2013.md) -- [MDT 2013 Update 1 Lite Touch components](mdt-2013-lite-touch-components.md) +- [MDT 2013 Update 2 Lite Touch components](mdt-2013-lite-touch-components.md) -- [Prepare for deployment with MDT 2013 Update 1](prepare-for-deployment-with-mdt-2013.md) +- [Prepare for deployment with MDT 2013 Update 2](prepare-for-windows-deployment-with-mdt-2013.md) ## Related topics [Microsoft Deployment Toolkit downloads and documentation](http://go.microsoft.com/fwlink/p/?LinkId=618117) -[Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -[Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +[Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) [Configure MDT settings](configure-mdt-2013-settings.md) diff --git a/windows/deploy/index.md b/windows/deploy/index.md index df7ff0fb92..455b6dbfcc 100644 --- a/windows/deploy/index.md +++ b/windows/deploy/index.md @@ -37,16 +37,16 @@ Learn about deploying Windows 10 for IT professionals.

To successfully deploy the Windows 10 operating system in your organization, it is important to understand the different ways that it can be deployed, especially now that there are new scenarios to consider. Choosing among these scenarios, and understanding the key capabilities and limitations of each, is a key task.

-

[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md)

-

This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 1 specifically.

+

[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md)

+

This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT), and MDT 2013 Update 2 specifically.

-

[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-81-with-system-center-2012-r2-configuration-manager.md)

-

If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or, more specifically, MDT 2013 Update 1.

+

[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-10-with-system-center-2012-r2-configuration-manager.md)

+

If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or, more specifically, MDT 2013 Update 2.

[Upgrade to Windows 10 with the Microsoft Deployment Toolkit](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md)

-

The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 1 task sequence to completely automate the process.

+

The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process.

[Upgrade to Windows 10 with System Center Configuration Manager](upgrade-to-windows-10-with-system-center-configuraton-manager.md)

@@ -57,8 +57,8 @@ Learn about deploying Windows 10 for IT professionals.

With Windows 10, you can quickly upgrade from one edition of Windows 10 to another, provided the upgrade path is supported.

-

[Deploy Windows To Go in your organization](deploy-windows-to-go-in-your-organization-small-scenario.md)

-

This topic helps you to deploy Windows To Go in your organization. Before you begin deployment, make sure that you have reviewed the topics [Windows To Go: feature overview](../plan/windows-to-go-feature-overview-scenario.md) and [Prepare your organization for Windows To Go](../plan/prepare-your-organization-for-windows-to-go.md) to ensure that you have the correct hardware and are prepared to complete the deployment. You can then use the steps in this topic to start your Windows To Go deployment.

+

[Deploy Windows To Go in your organization](deploy-windows-to-go.md)

+

This topic helps you to deploy Windows To Go in your organization. Before you begin deployment, make sure that you have reviewed the topics [Windows To Go: feature overview](../plan/windows-to-go-overview.md) and [Prepare your organization for Windows To Go](../plan/prepare-your-organization-for-windows-to-go.md) to ensure that you have the correct hardware and are prepared to complete the deployment. You can then use the steps in this topic to start your Windows To Go deployment.

[Update Windows 10 images with provisioning packages](update-windows-10-images-with-provisioning-packages.md)

diff --git a/windows/deploy/integrate-configuration-manager-with-mdt-2013.md b/windows/deploy/integrate-configuration-manager-with-mdt-2013.md index 00eb3397c7..3ad425ec3f 100644 --- a/windows/deploy/integrate-configuration-manager-with-mdt-2013.md +++ b/windows/deploy/integrate-configuration-manager-with-mdt-2013.md @@ -1,5 +1,5 @@ --- -title: Integrate Configuration Manager with MDT 2013 Update 1 (Windows 10) +title: Integrate Configuration Manager with MDT 2013 Update 2 (Windows 10) description: This topic will help you understand the benefits of integrating the Microsoft Deployment Toolkit with Microsoft System Center 2012 R2 Configuration Manager SP1 when you deploy a new or updated version of the Windows operating system. ms.assetid: 3bd1cf92-81e5-48dc-b874-0f5d9472e5a5 keywords: ["deploy, image, customize, task sequence"] @@ -9,7 +9,7 @@ ms.sitesec: library author: CFaw --- -# Integrate Configuration Manager with MDT 2013 Update 1 +# Integrate Configuration Manager with MDT 2013 Update 2 **Applies to** @@ -18,12 +18,12 @@ author: CFaw This topic will help you understand the benefits of integrating the Microsoft Deployment Toolkit with Microsoft System Center 2012 R2 Configuration Manager SP1 when you deploy a new or updated version of the Windows operating system. -MDT 2013 is a free, supported download from Microsoft that adds approximately 280 enhancements to Windows operating system deployment with System Center 2012 R2 Configuration Manager SP1. It is, therefore, recommended that you utilize MDT when deploying the Windows operating system with Configuration Manager SP1. In addition to integrating MDT with Configuration Manager, we also recommend using MDT Lite Touch to create the Windows 10 reference images used in Configuration Manager. For more information on how to create a reference image, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md). +MDT 2013 is a free, supported download from Microsoft that adds approximately 280 enhancements to Windows operating system deployment with System Center 2012 R2 Configuration Manager SP1. It is, therefore, recommended that you utilize MDT when deploying the Windows operating system with Configuration Manager SP1. In addition to integrating MDT with Configuration Manager, we also recommend using MDT Lite Touch to create the Windows 10 reference images used in Configuration Manager. For more information on how to create a reference image, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). -## Why integrate MDT 2013 Update 1 with Configuration Manager +## Why integrate MDT 2013 Update 2 with Configuration Manager -As noted above, MDT adds many enhancements to Configuration Manager. While these enhancements are called Zero Touch, that name does not reflect how deployment is conducted. The following sections provide a few samples of the 280 enhancements that MDT 2013 Update 1 adds to Configuration Manager. +As noted above, MDT adds many enhancements to Configuration Manager. While these enhancements are called Zero Touch, that name does not reflect how deployment is conducted. The following sections provide a few samples of the 280 enhancements that MDT 2013 Update 2 adds to Configuration Manager. ### MDT enables dynamic deployment @@ -108,23 +108,23 @@ You can create reference images for Configuration Manager in Configuration Manag ## Related topics -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/key-features-in-mdt-2013.md b/windows/deploy/key-features-in-mdt-2013.md index 99cf7abe1d..cf864d189c 100644 --- a/windows/deploy/key-features-in-mdt-2013.md +++ b/windows/deploy/key-features-in-mdt-2013.md @@ -1,5 +1,5 @@ --- -title: Key features in MDT 2013 Update 1 (Windows 10) +title: Key features in MDT 2013 Update 2 (Windows 10) description: The Microsoft Deployment Toolkit (MDT) has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. ms.assetid: 858e384f-e9db-4a93-9a8b-101a503e4868 keywords: ["deploy, feature, tools, upgrade, migrate, provisioning"] @@ -9,7 +9,7 @@ ms.sitesec: library author: CFaw --- -# Key features in MDT 2013 Update 1 +# Key features in MDT 2013 Update 2 **Applies to** @@ -77,9 +77,9 @@ MDT 2013 has many useful features, the most important of which are: ## Related topics -[Prepare for deployment with MDT 2013 Update 1](prepare-for-deployment-with-mdt-2013.md) +[Prepare for deployment with MDT 2013 Update 2](prepare-for-windows-deployment-with-mdt-2013.md) -[MDT 2013 Update 1 Lite Touch components](mdt-2013-lite-touch-components.md) +[MDT 2013 Update 2 Lite Touch components](mdt-2013-lite-touch-components.md)   diff --git a/windows/deploy/mdt-2013-lite-touch-components.md b/windows/deploy/mdt-2013-lite-touch-components.md index 7d4e355b7d..0bfae9889e 100644 --- a/windows/deploy/mdt-2013-lite-touch-components.md +++ b/windows/deploy/mdt-2013-lite-touch-components.md @@ -1,6 +1,6 @@ --- -title: MDT 2013 Update 1 Lite Touch components (Windows 10) -description: This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) 2013 Update 1 that support Lite Touch Installation (LTI) for Windows 10. +title: MDT 2013 Update 2 Lite Touch components (Windows 10) +description: This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) 2013 Update 2 that support Lite Touch Installation (LTI) for Windows 10. ms.assetid: 7d6fc159-e338-439e-a2e6-1778d0da9089 keywords: ["deploy, install, deployment, boot, log, monitor"] ms.prod: W10 @@ -9,14 +9,14 @@ ms.sitesec: library author: CFaw --- -# MDT 2013 Update 1 Lite Touch components +# MDT 2013 Update 2 Lite Touch components **Applies to** - Windows 10 -This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) 2013 Update 1 that support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. +This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) 2013 Update 2 that support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. When deploying the Windows operating system using MDT, most of the administration and configuration is done through the Deployment Workbench, but you also can perform many of the tasks using Windows PowerShell. The easiest way to find out how to use PowerShell in MDT is to use the Deployment Workbench to perform an operation and at the end of that task, click View Script. That will give you the PowerShell command. @@ -153,9 +153,9 @@ On the deployment share, you also can enable monitoring. After you enable monito ## Related topics -[Key features in MDT 2013 Update 1](key-features-in-mdt-2013.md) +[Key features in MDT 2013 Update 2](key-features-in-mdt-2013.md) -[Prepare for deployment with MDT 2013 Update 1](prepare-for-deployment-with-mdt-2013.md) +[Prepare for deployment with MDT 2013 Update 2](prepare-for-windows-deployment-with-mdt-2013.md)   diff --git a/windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md b/windows/deploy/monitor-windows-10-deployment-with-configuration-manager.md similarity index 85% rename from windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md rename to windows/deploy/monitor-windows-10-deployment-with-configuration-manager.md index dd36cecc0d..6b38847674 100644 --- a/windows/deploy/monitor-the-windows-81-deployment-with-configuration-manager.md +++ b/windows/deploy/monitor-windows-10-deployment-with-configuration-manager.md @@ -18,7 +18,7 @@ author: CFaw In this topic, you will learn how to monitor a Windows 10 deployment that was started previously using Microsoft System Center 2012 R2 Configuration Manager and the Microsoft Deployment Toolkit (MDT) Deployment Workbench. You will also use the Deployment Workbench to access the computer remotely via the Microsoft Diagnostics and Recovery Toolkit (DaRT) Remote Connection feature. -For the purposes of this topic, we will use four machines: DC01, CM01, and PC0001. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. PC0001 is a Unified Extensible Firmware Interface (UEFI) machine to which Windows 10 Enterprise has been deployed. DC01, CM01, and PC0001 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use four machines: DC01, CM01, and PC0001. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. PC0001 is a Unified Extensible Firmware Interface (UEFI) machine to which Windows 10 Enterprise has been deployed. DC01, CM01, and PC0001 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). To monitor an operating system deployment conducted through System Center 2012 R2 Configuration Manager, you will use the Deployment Workbench in MDT as follows: @@ -55,23 +55,23 @@ To monitor an operating system deployment conducted through System Center 2012 R ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/prepare-for-deployment-with-mdt-2013.md b/windows/deploy/prepare-for-windows-deployment-with-mdt-2013.md similarity index 91% rename from windows/deploy/prepare-for-deployment-with-mdt-2013.md rename to windows/deploy/prepare-for-windows-deployment-with-mdt-2013.md index 11aa63cdb2..c1c6bfa60a 100644 --- a/windows/deploy/prepare-for-deployment-with-mdt-2013.md +++ b/windows/deploy/prepare-for-windows-deployment-with-mdt-2013.md @@ -1,6 +1,6 @@ --- -title: Prepare for deployment with MDT 2013 Update 1 (Windows 10) -description: This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT) 2013 Update 1. +title: Prepare for deployment with MDT 2013 Update 2 (Windows 10) +description: This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT) 2013 Update 2. ms.assetid: 5103c418-0c61-414b-b93c-a8e8207d1226 keywords: ["deploy, system requirements"] ms.prod: W10 @@ -9,21 +9,21 @@ ms.sitesec: library author: CFaw --- -# Prepare for deployment with MDT 2013 Update 1 +# Prepare for deployment with MDT 2013 Update 2 **Applies to** - Windows 10 -This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT) 2013 Update 1. It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the files system and in Active Directory. +This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT) 2013 Update 2. It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the files system and in Active Directory. For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof). ## System requirements -MDT 2013 Update 1 requires the following components: +MDT 2013 Update 2 requires the following components: - Any of the following operating systems: @@ -64,10 +64,10 @@ These steps assume that you have the MDT01 member server installed and configure 3. User State Migration Tool (UMST) -## Install MDT 2013 Update 1 +## Install MDT 2013 Update 2 -These steps assume that you have downloaded [MDT 2013 Update 1](http://go.microsoft.com/fwlink/p/?LinkId=618117 ) to the E:\\Downloads\\MDT 2013 folder on MDT01. +These steps assume that you have downloaded [MDT 2013 Update 2](http://go.microsoft.com/fwlink/p/?LinkId=618117 ) to the E:\\Downloads\\MDT 2013 folder on MDT01. 1. On MDT01, log on as Administrator in the CONTOSO domain using a password of **P@ssw0rd**. @@ -76,7 +76,7 @@ These steps assume that you have downloaded [MDT 2013 Update 1](http://go.micros ## Create the OU structure -If you do not have an organizational unit (OU) structure in your Active Directory, you should create one. In this section, you create an OU structure and a service account for MDT 2013 Update 1. +If you do not have an organizational unit (OU) structure in your Active Directory, you should create one. In this section, you create an OU structure and a service account for MDT 2013 Update 2. 1. On DC01, using Active Directory User and Computers, in the contoso.com domain level, create a top-level OU named **Contoso**. @@ -134,7 +134,7 @@ When creating a reference image, you need an account for MDT. The MDT Build Acco ## Create and share the logs folder -By default MDT stores the log files locally on the client. In order to capture a reference image, you will need to enable server-side logging and, to do that, you will need to have a folder in which to store the logs. For more information, see [Create a Windows 10 reference image](create-a-windows-81-reference-image.md). +By default MDT stores the log files locally on the client. In order to capture a reference image, you will need to enable server-side logging and, to do that, you will need to have a folder in which to store the logs. For more information, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). 1. On MDT01, log on as **CONTOSO\\Administrator**. @@ -166,9 +166,9 @@ Figure 9. The same log file, opened in CMTrace, is much easier to read. ## Related topics -[Key features in MDT 2013 Update 1](key-features-in-mdt-2013.md) +[Key features in MDT 2013 Update 2](key-features-in-mdt-2013.md) -[MDT 2013 Update 1 Lite Touch components](mdt-2013-lite-touch-components.md) +[MDT 2013 Update 2 Lite Touch components](mdt-2013-lite-touch-components.md)   diff --git a/windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md b/windows/deploy/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md similarity index 91% rename from windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md rename to windows/deploy/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md index 1b4b7e6a27..ca1a31fd3a 100644 --- a/windows/deploy/prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md +++ b/windows/deploy/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md @@ -1,6 +1,6 @@ --- title: Prepare for Zero Touch Installation of Windows 10 with Configuration Manager (Windows 10) -description: This topic will walk you through the process of integrating Microsoft System Center 2012 R2 Configuration Manager SP1 with Microsoft Deployment Toolkit (MDT) 2013 Update 1, as well as the other preparations needed to deploying Windows 10 via Zero Touch Installation. Additional preparations include the installation of hotfixes as well as activities that speed up the Pre-Boot Execution Environment (PXE). +description: This topic will walk you through the process of integrating Microsoft System Center 2012 R2 Configuration Manager SP1 with Microsoft Deployment Toolkit (MDT) 2013 Update 2, as well as the other preparations needed to deploying Windows 10 via Zero Touch Installation. Additional preparations include the installation of hotfixes as well as activities that speed up the Pre-Boot Execution Environment (PXE). ms.assetid: 06e3a221-31ef-47a5-b4da-3b927cb50d08 keywords: ["install, configure, deploy, deployment"] ms.prod: W10 @@ -16,7 +16,7 @@ author: CFaw - Windows 10 -This topic will walk you through the process of integrating Microsoft System Center 2012 R2 Configuration Manager SP1 with Microsoft Deployment Toolkit (MDT) 2013 Update 1, as well as the other preparations needed to deploying Windows 10 via Zero Touch Installation. Additional preparations include the installation of hotfixes as well as activities that speed up the Pre-Boot Execution Environment (PXE). +This topic will walk you through the process of integrating Microsoft System Center 2012 R2 Configuration Manager SP1 with Microsoft Deployment Toolkit (MDT) 2013 Update 2, as well as the other preparations needed to deploying Windows 10 via Zero Touch Installation. Additional preparations include the installation of hotfixes as well as activities that speed up the Pre-Boot Execution Environment (PXE). ## Prerequisites @@ -37,7 +37,7 @@ In this topic, you will use an existing Configuration Manager server structure t - System Center 2012 R2 Configuration Manager SP1 and any additional Windows 10 prerequisites are installed. -For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. DC01 and CM01 are both members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use two machines: DC01 and CM01. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. DC01 and CM01 are both members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ## Create the Configuration Manager service accounts @@ -82,7 +82,7 @@ In order for the Configuration Manager Join Domain Account (CM\_JD) to join mach 2. In an elevated Windows PowerShell prompt (run as Administrator), run the following commands, pressing **Enter** after each command: ``` syntax - Set-ExecutionPolicy -ExecutionPolicy RemoteSigned ?Force + Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force Set-Location C:\Setup\Scripts @@ -155,7 +155,7 @@ Figure 7. The E:\\Sources\\OSD folder structure. ## Integrate Configuration Manager with MDT -To extend the Configuration Manager console with MDT 2013 Update 1 wizards and templates, you install MDT 2013 Update 1 in the default location and run the integration setup. In these steps, we assume you have downloaded MDT 2013 Update 1 to the C:\\Setup\\MDT2013 folder on CM01. +To extend the Configuration Manager console with MDT 2013 Update 2 wizards and templates, you install MDT 2013 Update 2 in the default location and run the integration setup. In these steps, we assume you have downloaded MDT 2013 Update 2 to the C:\\Setup\\MDT2013 folder on CM01. 1. On CM01, log on as Administrator in the CONTOSO domain using the password **P@ssw0rd**. @@ -173,7 +173,7 @@ To extend the Configuration Manager console with MDT 2013 Update 1 wizards and t ![figure 8](images/mdt-06-fig08.png) -Figure 8. Set up the MDT 2013 Update 1 integration with Configuration Manager. +Figure 8. Set up the MDT 2013 Update 2 integration with Configuration Manager. ## Configure the client settings @@ -249,23 +249,23 @@ Configuration Manager has many options for starting a deployment, but starting v ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md b/windows/deploy/refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md similarity index 88% rename from windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md rename to windows/deploy/refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md index 4273efaefe..374661ead5 100644 --- a/windows/deploy/refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md +++ b/windows/deploy/refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md @@ -1,6 +1,6 @@ --- title: Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager (Windows 10) -description: This topic will show you how to use a previously created task sequence to refresh a Windows 7 SP1 client with Windows 10 using Microsoft System Center 2012 R2 Configuration Manager and Microsoft Deployment Toolkit (MDT) 2013 Update 1. +description: This topic will show you how to use a previously created task sequence to refresh a Windows 7 SP1 client with Windows 10 using Microsoft System Center 2012 R2 Configuration Manager and Microsoft Deployment Toolkit (MDT) 2013 Update 2. ms.assetid: 57c81667-1019-4711-b3de-15ae9c5387c7 keywords: ["upgrade, install, installation, computer refresh"] ms.prod: W10 @@ -16,7 +16,7 @@ author: CFaw - Windows 10 -This topic will show you how to use a previously created task sequence to refresh a Windows 7 SP1 client with Windows 10 using Microsoft System Center 2012 R2 Configuration Manager and Microsoft Deployment Toolkit (MDT) 2013 Update 1. When refreshing a machine to a later version, it appears as an upgrade to the end user, but technically it is not an in-place upgrade. A computer refresh also involves taking care of user data and settings from the old installation and making sure to restore those at the end of the installation. For more information, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md). +This topic will show you how to use a previously created task sequence to refresh a Windows 7 SP1 client with Windows 10 using Microsoft System Center 2012 R2 Configuration Manager and Microsoft Deployment Toolkit (MDT) 2013 Update 2. When refreshing a machine to a later version, it appears as an upgrade to the end user, but technically it is not an in-place upgrade. A computer refresh also involves taking care of user data and settings from the old installation and making sure to restore those at the end of the installation. For more information, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md). A computer refresh with System Center 2012 R2 Configuration Manager works the same as it does with MDT Lite Touch installation. Configuration Manager also uses the User State Migration Tool (USMT) from the Windows Assessment and Deployment Kit (Windows ADK) 10 in the background. A computer refresh with Configuration Manager involves the following steps: @@ -30,7 +30,7 @@ A computer refresh with System Center 2012 R2 Configuration Manager works the sa 5. Data and settings are restored. -For the purposes of this topic, we will use three machines: DC01, CM01, and PC0003. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. PC0003 is a machine with Windows 7 SP1, on which Windows 10 will be deployed. DC01, CM01, and PC003 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use three machines: DC01, CM01, and PC0003. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. PC0003 is a machine with Windows 7 SP1, on which Windows 10 will be deployed. DC01, CM01, and PC003 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). In this topic, we assume that you have a Windows 7 SP1 client named PC0003 with the Configuration Manager client installed. @@ -121,23 +121,23 @@ Now you can start the computer refresh on PC0003. ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/refresh-a-windows-7-computer-with-windows-81.md b/windows/deploy/refresh-a-windows-7-computer-with-windows-10.md similarity index 94% rename from windows/deploy/refresh-a-windows-7-computer-with-windows-81.md rename to windows/deploy/refresh-a-windows-7-computer-with-windows-10.md index f73e3bbdcb..cd82698970 100644 --- a/windows/deploy/refresh-a-windows-7-computer-with-windows-81.md +++ b/windows/deploy/refresh-a-windows-7-computer-with-windows-10.md @@ -1,6 +1,6 @@ --- title: Refresh a Windows 7 computer with Windows 10 (Windows 10) -description: This topic will show you how to use MDT 2013 Update 1 Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. +description: This topic will show you how to use MDT 2013 Update 2 Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. ms.assetid: 2866fb3c-4909-4c25-b083-6fc1f7869f6f keywords: ["reinstallation, customize, template, script, restore"] ms.prod: W10 @@ -16,7 +16,7 @@ author: CFaw - Windows 10 -This topic will show you how to use MDT 2013 Update 1 Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. The refresh scenario, or computer refresh, is a reinstallation of an operating system on the same machine. You can refresh the machine to the same operating system as it is currently running, or to a later version. +This topic will show you how to use MDT 2013 Update 2 Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. The refresh scenario, or computer refresh, is a reinstallation of an operating system on the same machine. You can refresh the machine to the same operating system as it is currently running, or to a later version. For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 Standard server. PC0001 is a machine with Windows 7 Service Pack 1 (SP1) that is going to be refreshed into a Windows 10 machine, with data and settings restored. MDT01 and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md#proof). @@ -140,15 +140,15 @@ Figure 2. Starting the computer refresh from the running Windows 7 SP1 client. ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -[Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -[Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +[Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md) +[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) [Configure MDT settings](configure-mdt-2013-settings.md) diff --git a/windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md b/windows/deploy/replace-a-windows-7-client-with-windows-10-using-configuration-manager.md similarity index 92% rename from windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md rename to windows/deploy/replace-a-windows-7-client-with-windows-10-using-configuration-manager.md index ee4cd4a9e7..b9c865b739 100644 --- a/windows/deploy/replace-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md +++ b/windows/deploy/replace-a-windows-7-client-with-windows-10-using-configuration-manager.md @@ -18,9 +18,9 @@ author: CFaw In this topic, you will learn how to replacing a Windows 7 SP1 computer using Microsoft System Center 2012 R2 Configuration Manager. This process is similar to refreshing a computer, but since you are replacing the machine, you have to run the backup job separately from the deployment of Windows 10. -For the purposes of this topic, we will use three machines: DC01, CM01, and PC0004. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. PC0004 is a machine with Windows 7 SP1 that will be replaced with a new machine running Windows 10. DC01, CM01, and PC0004 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use three machines: DC01, CM01, and PC0004. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 Standard. PC0004 is a machine with Windows 7 SP1 that will be replaced with a new machine running Windows 10. DC01, CM01, and PC0004 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). -In this topic, you will create a backup-only task sequence that you run on PC0004, the machine you are replacing. For more information, see [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-81-computer.md). +In this topic, you will create a backup-only task sequence that you run on PC0004, the machine you are replacing. For more information, see [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md). ## Create a replace task sequence @@ -158,7 +158,7 @@ This section assumes that you have a machine named PC0004 with the Configuration 2. In the **Actions** tab, select the **Machine Policy Retrieval & Evaluation Cycle**, select **Run Now**, and click **OK**. **Note**   - You also can use the Client Notification option in the Configuration Manager console, as shown in [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md). + You also can use the Client Notification option in the Configuration Manager console, as shown in [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md).   @@ -203,23 +203,23 @@ When the process is complete, you will have a new Windows 10 machine in your dom ## Related topics -[Integrate Configuration Manager with MDT 2013 Update 1](integrate-configuration-manager-with-mdt-2013.md) +[Integrate Configuration Manager with MDT 2013 Update 2](integrate-configuration-manager-with-mdt-2013.md) -[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-81-with-configuration-manager.md) +[Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-50-boot-image-with-configuration-manager.md) +[Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-81-operating-system-image-using-configuration-manager.md) +[Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) -[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-81-using-configuration-manager.md) +[Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-81-deployment-with-windows-pe-using-configuration-manager.md) +[Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) [Create a task sequence with Configuration Manager and MDT](create-a-task-sequence-with-configuration-manager-and-mdt.md) -[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-81-using-pxe-and-configuration-manager.md) +[Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) -[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-sp1-client-with-windows-81-using-configuration-manager.md) +[Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md)   diff --git a/windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md b/windows/deploy/replace-a-windows-7-computer-with-a-windows-10-computer.md similarity index 95% rename from windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md rename to windows/deploy/replace-a-windows-7-computer-with-a-windows-10-computer.md index 99894309bc..0060f01911 100644 --- a/windows/deploy/replace-a-windows-7-computer-with-a-windows-81-computer.md +++ b/windows/deploy/replace-a-windows-7-computer-with-a-windows-10-computer.md @@ -159,15 +159,15 @@ During a computer replace, these are the high-level steps that occur: ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit--mdt-.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -[Create a Windows 10 reference image](create-a-windows-81-reference-image.md) +[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -[Deploy a Windows 10 image using MDT 2013 Update 1](deploy-a-windows-81-image-using-mdt-2013.md) +[Deploy a Windows 10 image using MDT 2013 Update 2](deploy-a-windows-10-image-using-mdt.md) -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-81-deployment.md) +[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-81.md) +[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) [Configure MDT settings](configure-mdt-2013-settings.md) diff --git a/windows/deploy/return-codes-usmt-win8.md b/windows/deploy/return-codes-usmt-win8.md index 967a8edf1d..90628a5fb6 100644 --- a/windows/deploy/return-codes-usmt-win8.md +++ b/windows/deploy/return-codes-usmt-win8.md @@ -767,7 +767,7 @@ The following table lists each return code by numeric value, along with the asso ## Related topics -[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md)) [Log Files](log-files-usmt-win7-usmt-win8.md) diff --git a/windows/deploy/set-up-mdt-2013-for-bitlocker.md b/windows/deploy/set-up-mdt-2013-for-bitlocker.md index 3e192001fd..fff1db9da2 100644 --- a/windows/deploy/set-up-mdt-2013-for-bitlocker.md +++ b/windows/deploy/set-up-mdt-2013-for-bitlocker.md @@ -198,9 +198,9 @@ When configuring a task sequence to run any BitLocker tool, either directly or u [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/simulate-a-windows-81-deployment-in-a-test-environment.md b/windows/deploy/simulate-a-windows-10-deployment-in-a-test-environment.md similarity index 98% rename from windows/deploy/simulate-a-windows-81-deployment-in-a-test-environment.md rename to windows/deploy/simulate-a-windows-10-deployment-in-a-test-environment.md index 3c447b6eb2..9afc652d9c 100644 --- a/windows/deploy/simulate-a-windows-81-deployment-in-a-test-environment.md +++ b/windows/deploy/simulate-a-windows-10-deployment-in-a-test-environment.md @@ -73,7 +73,7 @@ Figure 7. The ZTIGather.log file from PC0001, displaying some of its hardware ca [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md b/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md index c75d94d607..d0f0ff8e73 100644 --- a/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md +++ b/windows/deploy/upgrade-to-windows-10-with-system-center-configuraton-manager.md @@ -20,7 +20,7 @@ The simplest path to upgrade PCs currently running Windows 7, Windows 8, or Wi ## Proof-of-concept environment -For the purposes of this topic, we will use four machines: DC01, CM01, and PC0003. DC01 is a domain controller and CM01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0003 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use four machines: DC01, CM01, and PC0003. DC01 is a domain controller and CM01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0003 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ![figure 1](images/upgrademdt-fig1-machines.png) diff --git a/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md index 64c89a6dad..2fa1a8e500 100644 --- a/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md @@ -16,12 +16,12 @@ author: CFaw - Windows 10 -The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 1 task sequence to completely automate the process. +The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process. ## Proof-of-concept environment -For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md). +For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ![fig 1](images/upgrademdt-fig1-machines.png) @@ -30,7 +30,7 @@ Figure 1. The machines used in this topic. ## Set up the upgrade task sequence -MDT 2013 Update 1 adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. +MDT 2013 Update 2 adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. ## Create the MDT production deployment share diff --git a/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md b/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md index 9df9a27b3d..58b322dba8 100644 --- a/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md +++ b/windows/deploy/use-orchestrator-runbooks-with-mdt-2013.md @@ -232,9 +232,9 @@ Figure 32. The ready-made task sequence. [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Simulate a Windows10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md b/windows/deploy/use-the-mdt-database-to-stage-windows-10-deployment-information.md similarity index 99% rename from windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md rename to windows/deploy/use-the-mdt-database-to-stage-windows-10-deployment-information.md index c8b14a303b..ee21e399db 100644 --- a/windows/deploy/use-the-mdt-database-to-stage-windows-81-deployment-information.md +++ b/windows/deploy/use-the-mdt-database-to-stage-windows-10-deployment-information.md @@ -109,7 +109,7 @@ Figure 11. Adding the PC00075 computer to the database. [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/use-web-services-in-mdt-2013.md b/windows/deploy/use-web-services-in-mdt-2013.md index 882720abec..09d35ecef9 100644 --- a/windows/deploy/use-web-services-in-mdt-2013.md +++ b/windows/deploy/use-web-services-in-mdt-2013.md @@ -160,9 +160,9 @@ Figure 22. The OSDCOMPUTERNAME value obtained from the web service. [Configure MDT for UserExit scripts](configure-mdt-2013-for-userexit-scripts.md) -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-81-deployment-in-a-test-environment.md) +[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-81-deployment-information.md) +[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt-2013.md) diff --git a/windows/deploy/user-state-migration-tool--usmt--how-to-topics.md b/windows/deploy/user-state-migration-tool--usmt--how-to-topics.md index 2cfcc84f07..136811526b 100644 --- a/windows/deploy/user-state-migration-tool--usmt--how-to-topics.md +++ b/windows/deploy/user-state-migration-tool--usmt--how-to-topics.md @@ -64,7 +64,7 @@ The following table lists topics that describe how to use User State Migration T [User State Migration Tool (USMT) Overview Topics](user-state-migration-tool--usmt--overview-topics.md) -[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md)) [User State Migration Toolkit (USMT) Reference](user-state-migration-toolkit--usmt--reference.md) diff --git a/windows/deploy/user-state-migration-tool--usmt--overview-topics.md b/windows/deploy/user-state-migration-tool--usmt--overview-topics.md index c2c71d99e7..1a0b5ff4eb 100644 --- a/windows/deploy/user-state-migration-tool--usmt--overview-topics.md +++ b/windows/deploy/user-state-migration-tool--usmt--overview-topics.md @@ -44,7 +44,7 @@ The User State Migration Tool (USMT) 10.0 provides a highly customizable user-p [User State Migration Tool (USMT) How-to topics](user-state-migration-tool--usmt--how-to-topics.md) -[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md)) [User State Migration Toolkit (USMT) Reference](user-state-migration-toolkit--usmt--reference.md) diff --git a/windows/deploy/user-state-migration-tool--usmt--technical-reference.md b/windows/deploy/user-state-migration-tool--usmt--technical-reference.md index ccad2ae060..ef7329181f 100644 --- a/windows/deploy/user-state-migration-tool--usmt--technical-reference.md +++ b/windows/deploy/user-state-migration-tool--usmt--technical-reference.md @@ -53,7 +53,7 @@ USMT 10.0 tools can be used on several versions of Windows operating systems, fo

Includes step-by-step instructions for using USMT, as well as how-to topics for conducting tasks in USMT.

-

[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md)

+

[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md))

Provides answers to frequently asked questions and common issues in USMT, as well as a reference for return codes used in USMT.

diff --git a/windows/deploy/user-state-migration-toolkit--usmt--reference.md b/windows/deploy/user-state-migration-toolkit--usmt--reference.md index 91cf434e0e..3f6426e77e 100644 --- a/windows/deploy/user-state-migration-toolkit--usmt--reference.md +++ b/windows/deploy/user-state-migration-toolkit--usmt--reference.md @@ -60,7 +60,7 @@ author: CFaw [User State Migration Tool (USMT) How-to topics](user-state-migration-tool--usmt--how-to-topics.md) -[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--troubleshooting.md) +[User State Migration Tool (USMT) Troubleshooting](user-state-migration-tool--usmt--guidance-and-best-practices-edp.md))   diff --git a/windows/deploy/windows-10-deployment-scenarios.md b/windows/deploy/windows-10-deployment-scenarios.md index 90bb7e6f04..79e7ab70b2 100644 --- a/windows/deploy/windows-10-deployment-scenarios.md +++ b/windows/deploy/windows-10-deployment-scenarios.md @@ -67,7 +67,7 @@ While the initial Windows 10 release includes a variety of provisioning setting ## Traditional deployment -New versions of Windows have typically been deployed by organizations using an image-based process built on top of tools provided in the [Windows Assessment and Deployment Kit](windows-adk-scenarios-for-it-pros.md), Windows Deployment Services, the [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md), and [System Center Configuration Manager](deploy-windows-81-with-system-center-2012-r2-configuration-manager.md). +New versions of Windows have typically been deployed by organizations using an image-based process built on top of tools provided in the [Windows Assessment and Deployment Kit](windows-adk-scenarios-for-it-pros.md), Windows Deployment Services, the [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md), and [System Center Configuration Manager](deploy-windows-10-with-system-center-2012-r2-configuration-manager.md). With the release of Windows 10, all of these tools are being updated to fully support Windows 10. Although newer scenarios such as in-place upgrade and dynamic provisioning may reduce the need for traditional deployment capabilities in some organizations, these traditional methods remain important and will continue to be available to organizations that need them. @@ -127,7 +127,7 @@ The deployment process for the replace scenario is as follows: [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](http://go.microsoft.com/fwlink/p/?LinkId=620230) -[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-81-with-the-microsoft-deployment-toolkit.md) +[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) [Windows setup technical reference](http://go.microsoft.com/fwlink/p/?LinkId=619357) diff --git a/windows/deploy/windows-deployment-scenarios-and-tools.md b/windows/deploy/windows-deployment-scenarios-and-tools.md index 14df54fa0c..9d87667c9a 100644 --- a/windows/deploy/windows-deployment-scenarios-and-tools.md +++ b/windows/deploy/windows-deployment-scenarios-and-tools.md @@ -14,7 +14,7 @@ author: CFaw To successfully deploy the Windows 10 operating system and applications for your organization, it is essential that you know about the available tools to help with the process. In this topic, you will learn about the most commonly used tools for Windows 10 deployment. -Microsoft provides many tools, services, and solutions. These tools include Windows Deployment Services (WDS), the Volume Activation Management Tool (VAMT), the User State Migration Tool (USMT), Windows System Image Manager (Windows SIM), Windows Preinstallation Environment (Windows PE), and Windows Recovery Environment (Windows RE). Keep in mind that these are just tools and not a complete solution on their own. It’s when you combine these tools with solutions like [Microsoft Deployment Toolkit (MDT) 2013 Update 1](deploy-windows-81-with-the-microsoft-deployment-toolkit.md) or [Microsoft System Center 2012 R2 Configuration Manager](deploy-windows-81-with-system-center-2012-r2-configuration-manager.md) that you get the complete deployment solution. +Microsoft provides many tools, services, and solutions. These tools include Windows Deployment Services (WDS), the Volume Activation Management Tool (VAMT), the User State Migration Tool (USMT), Windows System Image Manager (Windows SIM), Windows Preinstallation Environment (Windows PE), and Windows Recovery Environment (Windows RE). Keep in mind that these are just tools and not a complete solution on their own. It’s when you combine these tools with solutions like [Microsoft Deployment Toolkit (MDT) 2013 Update 1](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) or [Microsoft System Center 2012 R2 Configuration Manager](deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) that you get the complete deployment solution. In this topic, you also learn about different types of reference images that you can build, and why reference images are beneficial for most organizations @@ -330,7 +330,7 @@ For more information on UEFI, see the [UEFI firmware](http://go.microsoft.com/fw [Update Windows 10 images with provisioning packages](update-windows-10-images-with-provisioning-packages.md) -[Deploy Windows To Go](deploy-windows-to-go-in-your-organization-small-scenario.md) +[Deploy Windows To Go](deploy-windows-to-go.md) [Sideload apps in Windows 10](sideload-apps-in-windows-10.md) diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md index f5651af6fb..f93a0355ee 100644 --- a/windows/keep-secure/TOC.md +++ b/windows/keep-secure/TOC.md @@ -1,6 +1,6 @@ # [Keep Windows 10 secure](index.md) ## [Change history for Keep Windows 10 secure](change-history-for-keep-windows-10-secure.md) -## [Block untrusted fonts in an enterprise](block-untrusted-fonts-in-an-enterprise.md) +## [Block untrusted fonts in an enterprise](block-untrusted-fonts-in-enterprise.md)) ## [Device Guard certification and compliance](device-guard-certification-and-compliance.md) ### [Get apps to run on Device Guard-protected devices](getting-apps-to-run-on-device-guard-protected-devices.md) ### [Create a Device Guard code integrity policy based on a reference device](creating-a-device-guard-policy-for-signed-apps.md) @@ -11,14 +11,24 @@ ### [Microsoft Passport and password changes](microsoft-passport-and-password-changes.md) ### [Microsoft Passport errors during PIN creation](microsoft-passport-errors-during-pin-creation.md) ### [Event ID 300 - Passport successfully created](passport-event-300.md) -## [Windows Hello biometrics in the enterprise](windows-hello-biometrics-in-the-enterprise.md) +## [Windows Hello biometrics in the enterprise](windows-hello-in-enterprise.md)) ## [Configure S/MIME for Windows 10 and Windows 10 Mobile](configure-s-mime.md) ## [Install digital certificates on Windows 10 Mobile](installing-digital-certificates-on-windows-10-mobile.md) ## [Protect derived domain credentials with Credential Guard](credential-guard.md) +## [Protect your enterprise data using enterprise data protection (EDP)](protect-enterprise-data-using-edp.md)) +### [Create an enterprise data protection (EDP) policy](overview-create-edp-policy.md)) +#### [Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md)) +##### [Add multiple apps to your enterprise data protection (EDP) Protected Apps list](add-apps-to-protected-list-using-custom-uri.md)) +##### [Deploy your enterprise data protection (EDP) policy](deploy-edp-policy-using-intune.md)) +##### [Create and deploy a VPN policy for enterprise data protection (EDP) using Microsoft Intune](create-vpn-and-edp-policy-using-intune.md)) +#### [Create and deploy an enterprise data protection (EDP) policy using System Center Configuration Manager](create-edp-policy-using-sccm.md)) +### [General guidance and best practices for enterprise data protection (EDP)](guidance-and-best-practices-edp.md)) +#### [Enlightened apps for use with enterprise data protection (EDP)](enlightened-microsoft-apps-and-edp.md)) +#### [Testing scenarios for enterprise data protection (EDP)](testing-scenarios-for-edp.md)) ## [Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md) ## [VPN profile options](vpn-profile-options.md) ## [Security technologies](security-technologies.md) -### [AppLocker](applocker-overview-server.md) +### [AppLocker](applocker-overview.md) #### [Administer AppLocker](administer-applocker.md) ##### [Maintain AppLocker policies](maintain-applocker-policies.md) ##### [Edit an AppLocker policy](edit-an-applocker-policy.md) @@ -78,7 +88,7 @@ ##### [Deploy the AppLocker policy into production](deploy-the-applocker-policy-into-production.md) ###### [Use a reference device to create and maintain AppLocker policies](use-a-reference-computer-to-create-and-maintain-applocker-policies.md) ####### [Determine which apps are digitally signed on a reference device](determine-which-applications-are-digitally-signed-on-a-reference-computer.md) -####### [Configure the AppLocker reference device](configure-the-applocker-reference-computer-ops.md) +####### [Configure the AppLocker reference device](configure-the-appLocker-reference-device.md) #### [AppLocker technical reference](applocker-technical-reference.md) ##### [What Is AppLocker?](what-is-applocker.md) ##### [Requirements to use AppLocker](requirements-to-use-applocker.md) @@ -105,11 +115,11 @@ ##### [Tools to Use with AppLocker](tools-to-use-with-applocker.md) ###### [Using Event Viewer with AppLocker](using-event-viewer-with-applocker.md) ##### [AppLocker Settings](applocker-settings.md) -### [BitLocker](bitlocker-overview-roletech-overview.md) -#### [BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +### [BitLocker](bitlocker-overview.md) +#### [BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) #### [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) #### [BitLocker basic deployment](bitlocker-basic-deployment.md) -#### [BitLocker: How to deploy on Windows Server 2012 and later](bitlocker-how-to-deploy-on-windows-server-2012.md) +#### [BitLocker: How to deploy on Windows Server 2012 and later](bitlocker-how-to-deploy-on-windows-server.md) #### [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md) #### [BitLocker: Use BitLocker Drive Encryption Tools to manage BitLocker](bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md) #### [BitLocker: Use BitLocker Recovery Password Viewer](bitlocker-use-bitlocker-recovery-password-viewer.md) @@ -122,7 +132,7 @@ ##### [Choose the Right BitLocker Countermeasure](choose-the-right-bitlocker-countermeasure.md) #### [Protecting cluster shared volumes and storage area networks with BitLocker](protecting-cluster-shared-volumes-and-storage-area-networks-with-bitlocker.md) ### [Encrypted Hard Drive](encrypted-hard-drive.md) -### [Security auditing](security-auditing-overview-glbl.md) +### [Security auditing](security-auditing-overview.md) #### [Basic security audit policies](basic-security-audit-policies.md) ##### [Create a basic audit policy for an event category](create-a-basic-audit-policy-settings-for-an-event-category.md) ##### [Apply a basic audit policy on a file or folder](apply-a-basic-audit-policy-on-a-file-or-folder.md) @@ -152,9 +162,9 @@ ###### [Monitor claim types](monitor-claim-types.md) ##### [Advanced security audit policy settings](advanced-security-audit-policy-settings.md) ###### [Audit Credential Validation](audit-credential-validation.md) -###### [Audit Kerberos Authentication Service ](audit-kerberos-authentication-service-sec-audit.md) +###### [Audit Kerberos Authentication Service ](audit-kerberos-authentication-service.md) ###### [Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md) -###### [Audit Other Account Logon Events ](audit-other-account-logon-events-sec-audit.md) +###### [Audit Other Account Logon Events ](audit-other-account-logon-events.md) ###### [Audit Application Group Management](audit-application-group-management.md) ###### [Audit Computer Account Management](audit-computer-account-management.md) ###### [Audit Distribution Group Management](audit-distribution-group-management.md) @@ -164,13 +174,13 @@ ###### [Audit DPAPI Activity](audit-dpapi-activity.md) ###### [Audit PNP Activity](audit-pnp-activity.md) ###### [Audit Process Creation](audit-process-creation.md) -###### [Audit Process Termination ](audit-process-termination-sec-audit.md) +###### [Audit Process Termination ](audit-process-termination.md) ###### [Audit RPC Events](audit-rpc-events.md) ###### [Audit Detailed Directory Service Replication](audit-detailed-directory-service-replication.md) ###### [Audit Directory Service Access](audit-directory-service-access.md) ###### [Audit Directory Service Changes](audit-directory-service-changes.md) ###### [Audit Directory Service Replication](audit-directory-service-replication.md) -###### [Audit Account Lockout ](audit-account-lockout-sec-audit.md) +###### [Audit Account Lockout ](audit-account-lockout.md) ###### [Audit User/Device Claims](audit-user-device-claims.md) ###### [Audit Group Membership](audit-group-membership.md) ###### [Audit IPsec Extended Mode](audit-ipsec-extended-mode.md) @@ -183,17 +193,17 @@ ###### [Audit Special Logon](audit-special-logon.md) ###### [Audit Application Generated](audit-application-generated.md) ###### [Audit Certification Services](audit-certification-services.md) -###### [Audit Detailed File Share ](audit-detailed-file-share-sec-audit.md) +###### [Audit Detailed File Share ](audit-detailed-file-share.md) ###### [Audit File Share](audit-file-share.md) ###### [Audit File System](audit-file-system.md) ###### [Audit Filtering Platform Connection](audit-filtering-platform-connection.md) -###### [Audit Filtering Platform Packet Drop ](audit-filtering-platform-packet-drop-sec-audit.md) +###### [Audit Filtering Platform Packet Drop ](audit-filtering-platform-packet-drop.md) ###### [Audit Handle Manipulation](audit-handle-manipulation.md) -###### [Audit Kernel Object ](audit-kernel-object-sec-audit.md) +###### [Audit Kernel Object ](audit-kernel-object.md) ###### [Audit Other Object Access Events](audit-other-object-access-events.md) ###### [Audit Registry](audit-registry.md) ###### [Audit Removable Storage](audit-removable-storage.md) -###### [Audit SAM ](audit-sam-sec-audit.md) +###### [Audit SAM ](audit-sam.md) ###### [Audit Central Access Policy Staging](audit-central-access-policy-staging.md) ###### [Audit Audit Policy Change](audit-audit-policy-change.md) ###### [Audit Authentication Policy Change](audit-authentication-policy-change.md) @@ -201,16 +211,16 @@ ###### [Audit Filtering Platform Policy Change](audit-filtering-platform-policy-change.md) ###### [Audit MPSSVC Rule-Level Policy Change](audit-mpssvc-rule-level-policy-change.md) ###### [Audit Other Policy Change Events](audit-other-policy-change-events.md) -###### [Audit Sensitive Privilege Use ](audit-sensitive-privilege-use-sec-audit.md) -###### [Audit Non-Sensitive Privilege Use ](audit-non-sensitive-privilege-use-sec-audit.md) -###### [Audit Other Privilege Use Events ](audit-other-privilege-use-events-sec-audit.md) +###### [Audit Sensitive Privilege Use ](audit-sensitive-privilege-use.md) +###### [Audit Non-Sensitive Privilege Use ](audit-non-sensitive-privilege-use.md) +###### [Audit Other Privilege Use Events ](audit-other-privilege-use-events.md) ###### [Audit IPsec Driver](audit-ipsec-driver.md) ###### [Audit Other System Events](audit-other-system-events.md) ###### [Audit Security State Change](audit-security-state-change.md) ###### [Audit Security System Extension](audit-security-system-extension.md) ###### [Audit System Integrity](audit-system-integrity.md) -###### [Registry (Global Object Access Auditing) ](registry--global-object-access-auditing--sec-audit.md) -###### [File System (Global Object Access Auditing) ](file-system--global-object-access-auditing--sec-audit.md) +###### [Registry (Global Object Access Auditing) ](registry-global-object-access-auditing.md) +###### [File System (Global Object Access Auditing) ](file-system-global-object-access-auditing.md) ### [Security policy settings](security-policy-settings.md) #### [Administer security policy settings](administer-security-policy-settings.md) ##### [Network List Manager policies](network-list-manager-policies.md) @@ -246,8 +256,8 @@ ###### [Audit: Audit the use of Backup and Restore privilege](audit-audit-the-use-of-backup-and-restore-privilege.md) ###### [Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings](audit-force-audit-policy-subcategory-settings-to-override.md) ###### [Audit: Shut down system immediately if unable to log security audits](audit-shut-down-system-immediately-if-unable-to-log-security-audits.md) -###### [DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md) -###### [DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md) +###### [DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md) +###### [DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md) ###### [Devices: Allow undock without having to log on](devices-allow-undock-without-having-to-log-on.md) ###### [Devices: Allowed to format and eject removable media](devices-allowed-to-format-and-eject-removable-media.md) ###### [Devices: Prevent users from installing printer drivers](devices-prevent-users-from-installing-printer-drivers.md) @@ -256,12 +266,12 @@ ###### [Domain controller: Allow server operators to schedule tasks](domain-controller-allow-server-operators-to-schedule-tasks.md) ###### [Domain controller: LDAP server signing requirements](domain-controller-ldap-server-signing-requirements.md) ###### [Domain controller: Refuse machine account password changes](domain-controller-refuse-machine-account-password-changes.md) -###### [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) -###### [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) -###### [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) +###### [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) +###### [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) +###### [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) ###### [Domain member: Disable machine account password changes](domain-member-disable-machine-account-password-changes.md) ###### [Domain member: Maximum machine account password age](domain-member-maximum-machine-account-password-age.md) -###### [Domain member: Require strong (Windows 2000 or later) session key](domain-member-require-strong--windows-2000-or-later--session-key.md) +###### [Domain member: Require strong (Windows 2000 or later) session key](domain-member-require-strong-windows-2000-or-later-session-key.md) ###### [Interactive logon: Display user information when the session is locked](interactive-logon-display-user-information-when-the-session-is-locked.md) ###### [Interactive logon: Do not display last user name](interactive-logon-do-not-display-last-user-name.md) ###### [Interactive logon: Do not require CTRL+ALT+DEL](interactive-logon-do-not-require-ctrl-alt-del.md) @@ -269,18 +279,18 @@ ###### [Interactive logon: Machine inactivity limit](interactive-logon-machine-inactivity-limit.md) ###### [Interactive logon: Message text for users attempting to log on](interactive-logon-message-text-for-users-attempting-to-log-on.md) ###### [Interactive logon: Message title for users attempting to log on](interactive-logon-message-title-for-users-attempting-to-log-on.md) -###### [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md) +###### [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md) ###### [Interactive logon: Prompt user to change password before expiration](interactive-logon-prompt-user-to-change-password-before-expiration.md) ###### [Interactive logon: Require Domain Controller authentication to unlock workstation](interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md) ###### [Interactive logon: Require smart card](interactive-logon-require-smart-card.md) ###### [Interactive logon: Smart card removal behavior](interactive-logon-smart-card-removal-behavior.md) -###### [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md) -###### [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md) +###### [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md) +###### [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md) ###### [Microsoft network client: Send unencrypted password to third-party SMB servers](microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md) ###### [Microsoft network server: Amount of idle time required before suspending session](microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md) ###### [Microsoft network server: Attempt S4U2Self to obtain claim information](microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md) -###### [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md) -###### [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md) +###### [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md) +###### [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md) ###### [Microsoft network server: Disconnect clients when logon hours expire](microsoft-network-server-disconnect-clients-when-logon-hours-expire.md) ###### [Microsoft network server: Server SPN target name validation level](microsoft-network-server-server-spn-target-name-validation-level.md) ###### [Network access: Allow anonymous SID/Name translation](network-access-allow-anonymous-sidname-translation.md) @@ -302,8 +312,8 @@ ###### [Network security: Force logoff when logon hours expire](network-security-force-logoff-when-logon-hours-expire.md) ###### [Network security: LAN Manager authentication level](network-security-lan-manager-authentication-level.md) ###### [Network security: LDAP client signing requirements](network-security-ldap-client-signing-requirements.md) -###### [Network security: Minimum session security for NTLM SSP based (including secure RPC) clients](network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md) -###### [Network security: Minimum session security for NTLM SSP based (including secure RPC) servers](network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md) +###### [Network security: Minimum session security for NTLM SSP based (including secure RPC) clients](network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md) +###### [Network security: Minimum session security for NTLM SSP based (including secure RPC) servers](network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md) ###### [Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication](network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md) ###### [Network security: Restrict NTLM: Add server exceptions in this domain](network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md) ###### [Network security: Restrict NTLM: Audit incoming NTLM traffic](network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md) @@ -318,7 +328,7 @@ ###### [System cryptography: Force strong key protection for user keys stored on the computer](system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md) ###### [System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing](system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md) ###### [System objects: Require case insensitivity for non-Windows subsystems](system-objects-require-case-insensitivity-for-non-windows-subsystems.md) -###### [System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)](system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md) +###### [System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)](system-objects-strengthen-default-permissions-of-internal-system-objects.md) ###### [System settings: Optional subsystems](system-settings-optional-subsystems.md) ###### [System settings: Use certificate rules on Windows executables for Software Restriction Policies](system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md) ###### [User Account Control: Admin Approval Mode for the Built-in Administrator account](user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md) @@ -377,17 +387,17 @@ ###### [Shut down the system](shut-down-the-system.md) ###### [Synchronize directory service data](synchronize-directory-service-data.md) ###### [Take ownership of files or other objects](take-ownership-of-files-or-other-objects.md) -### [Trusted Platform Module](trusted-platform-module-technology-overview.md) -#### [TPM fundamentals](tpm-fundamentals-windows-8.md) +### [Trusted Platform Module](trusted-platform-module-overview.md) +#### [TPM fundamentals](tpm-fundamentals.md) #### [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md) -#### [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md) -#### [Backup the TPM recovery Information to AD DS](backup-thetpm-recovery-information-to-ad-ds.md) +#### [AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md) +#### [Backup the TPM recovery Information to AD DS](backup-tpm-recovery-information-to-ad-ds.md) #### [Manage TPM commands](manage-tpm-commands.md) #### [Manage TPM lockout](manage-tpm-lockout.md) #### [Change the TPM owner password](change-the-tpm-owner-password.md) #### [Initialize and configure ownership of the TPM](initialize-and-configure-ownership-of-the-tpm.md) #### [Switch PCR banks on TPM 2.0 devices](switch-pcr-banks-on-tpm-2-0-devices.md) -#### [TPM recommendations](trusted-platform-module--tpm-2-0--.md) +#### [TPM recommendations](tpm-recommendations.md) ### [User Account Control](user-account-control-overview.md) #### [How User Account Control works](how-user-account-control-works.md) #### [User Account Control security policy settings](user-account-control-security-policy-settings.md) @@ -395,7 +405,7 @@ #### [Update and manage Windows Defender in Windows 10](get-started-with-windows-defender-for-windows-10.md) #### [Configure Windows Defender in Windows 10](configure-windows-defender-in-windows-10.md) #### [Troubleshoot Windows Defender in Windows 10](troubleshoot-windows-defender-in-windows-10.md) -## [Enterprise security guides](enterprise-security-guides-portal.md) +## [Enterprise security guides](windows-10-enterprise-security-guides.md) ### [Control the health of Windows 10-based devices](protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md) ### [Device Guard deployment guide](device-guard-deployment-guide.md) ### [Microsoft Passport guide](microsoft-passport-guide.md) diff --git a/windows/keep-secure/schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md b/windows/keep-secure/ad-ds-schema-extensions-to-support-tpm-backup.md similarity index 100% rename from windows/keep-secure/schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md rename to windows/keep-secure/ad-ds-schema-extensions-to-support-tpm-backup.md diff --git a/windows/keep-secure/add-apps-to-protected-list-using-custom-uri.md b/windows/keep-secure/add-apps-to-protected-list-using-custom-uri.md new file mode 100644 index 0000000000..d552872133 --- /dev/null +++ b/windows/keep-secure/add-apps-to-protected-list-using-custom-uri.md @@ -0,0 +1,162 @@ +--- +title: Add multiple apps to your enterprise data protection (EDP) Protected Apps list (Windows 10) +description: Add multiple apps to your enterprise data protection (EDP) Protected Apps list at the same time, by using the Microsoft Intune Custom URI functionality and the AppLocker Group Policy. +ms.assetid: B50DB35D-A2A9-4B78-A95D-A1B066E66880 +keywords: ["EDP", "Enterprise Data Protection", "protected apps", "protected app list"] +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Add multiple apps to your enterprise data protection (EDP) Protected Apps list + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +Add multiple apps to your enterprise data protection (EDP) **Protected Apps** list at the same time, by using the Microsoft Intune Custom URI functionality and the AppLocker Group Policy. For more info about how to create a custom URI using Intune, see [Windows 10 custom policy settings in Microsoft Intune](http://go.microsoft.com/fwlink/?LinkID=691330). + +**Important**   +Results can be unpredictable if you configure your policy using both the UI and the Custom URI method together. We recommend using a single method for each policy. + +If you only want to add one app at a time, you can follow the instructions in the [Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md)) topic. + +  + +**To add Universal Windows Platform (UWP) apps** + +1. Go to the AppLocker Group Policy UI by opening a command line window and running secpol.msc. The local security policy MMC snap-in opens showing the **Security Settings**. + +2. Double-click **Application Control Policies**, double-click **AppLocker**, right-click **Packaged app Rules**, and then click **Automatically Generate Rules**. + + The **Automatically Generate Packaged app Rules** wizard opens, letting you create EDP-protected app polices for all of the installed apps on the device or for packaged apps within a specific folder. + +3. In the **Folder and Permissions** screen, keep the default value of **Everyone** in the **User or security group that the rules will apply to** box. + + You want to keep this value because your EDP policy needs to apply to the device being managed, not a single user or group of users. + +4. Type the name you’ll use to tag the rules into the **Name to identify this set of rules** box, and then click **Next**. + + This name should be easily recognizable, such as *EDP\_UniversalApps\_Rules*. + +5. In the **Rules Preferences** screen, keep the default settings, and then click **Next** to start generating the rules. + + **Important**   + You can also use **Path** rules instead of the **File hash** if you have concerns about unsigned files potentially changing the hash value if they're updated in the future. + +   + + **Note**   + We recommend that you use **Publisher** rules because they only work with apps you've specifically defined and they can be configured to not require updating simply because a new version came out. + + If you can't use **Publisher** rules, we then recommend that you use **File hash** rules. **File hash** rules are a secure alternative that can be used on unsigned code. The primary disadvantage to **File hash** is that every time a binary changes (such as, through servicing updates or upgrades), you'll need to create a new rule. + + Finally, there's **Path** rules. **Path** rules are easier to set up and maintain, but can let apps bypass enterprise data protection (EDP) by simply renaming and moving an unallowed file to match one of the apps on the **Protected App** list. For example, if your **Path** rule says to allow `%PROGRAMFILES%/NOTEPAD.EXE`, it becomes possible to rename DisallowedApp.exe to Notepad.exe, move it into the specified path above, and have it suddenly be allowed. + +   + +6. In the **Review Rules** screen, look over your rules to make sure they’re right, and then click **Create** to add them to your collection of rules. + +7. In the left pane, right-click **AppLocker**, click **Export Policies**, go to where you want to save the XML file and type a file name, click **Save**, and then clear your AppLocker rules. + + **Important**  Be aware that what you're saving are the actual AppLocker rules using your local policy. You don't want to apply these rules to your employee devices, you just want to use them to create and export the XML content. You must delete the AppLocker rules before you apply your policy. + +   + +8. Open the Intune administration console, and go to the **Policy** node, click **Add Policy** from the **Tasks** area, go to **Windows**, click the **Custom Configuration (Windows 10 Desktop and Mobile and later)** policy, click **Create and Deploy a Custom Policy**, and then click **Create Policy**. + +9. Type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. + +10. In the **Add one or more OMA-URI settings that control functionality on Windows devices** box, click **Add**. + +11. Type your new **Setting Name** and **Description** into the associated boxes, keeping the default **Data Type** of **String**. + +12. In the **OMA-URI** box, type `./Vendor/MSFT/AppLocker/EnterpriseDataProtection//StoreApp EXE`. + +13. Open File Explorer, go to the location where you saved your new XML file, and open it using an XML editor, such as Notepad. + +14. Copy the text that has a **Type** of Appx, within the **RuleCollection** tags, and then go back to Intune and paste the text into the **Value** box of the **Add or edit OMA-URI Setting** box. For example: + + ``` syntax + + ``` + +15. Click **OK** to close the **Add or edit OMA-URI Setting** box, and then click **Save Policy**. + + After saving the policy, you’ll need to deploy it to your employee’s devices. For more info, see the [Deploy your enterprise data protection (EDP) policy](deploy-edp-policy-using-intune.md)) topic. + +**To add Classic Windows applications** + +1. Go to the AppLocker Group Policy UI by opening a command line window and running secpol.msc. The local security policy MMC snap-in opens showing the **Security Settings**. + +2. Double-click **Application Control Policies**, double-click **AppLocker**, right-click **Executable Rules**, and then click **Automatically Generate Rules**. + + The **Automatically Generate Executable Rules** wizard opens, letting you create EDP-protected app polices by analyzing the files within a specific folder. + +3. In the **Folder and Permissions** screen, keep the default value of **Everyone** in the **User or security group that the rules will apply to** box. + + You want to keep this value because your EDP policy needs to apply to the device being managed, not a single user or group of users. + +4. Type the name you’ll use to tag the rules into the **Name to identify this set of rules** box, and then click **Next**. + + This name should be easily recognizable, such as *EDP\_ClassicApps\_Rules*. + +5. In the **Rules Preferences** screen, keep the default settings, and then click **Next** to start generating the rules. + + **Important**   + You can also use **Path** rules instead of the **File hash** if you have concerns about unsigned files potentially changing the hash value if they're updated in the future. + +   + + **Note**   + We recommend that you use **Publisher** rules because they only work with apps you've specifically defined and they can be configured to not require updating simply because a new version came out. + + If you can't use **Publisher** rules, we then recommend that you use **File hash** rules. **File hash** rules are a secure alternative that can be used on unsigned code. The primary disadvantage to **File hash** is that every time a binary changes (such as, through servicing updates or upgrades), you'll need to create a new rule. + + Finally, there's **Path** rules. **Path** rules are easier to set up and maintain, but can let apps bypass EDP by simply renaming and moving an unallowed file to match one of the apps on the **Protected App** list. For example, if your **Path** rule says to allow `%PROGRAMFILES%/NOTEPAD.EXE`, it becomes possible to rename DisallowedApp.exe to Notepad.exe, move it into the specified path above, and have it suddenly be allowed. + +   + +6. In the **Review Rules** screen, look over your rules to make sure they’re right, and then click **Create** to add them to your collection of rules. + +7. In the left pane, right-click **AppLocker**, click **Export Policies**, go to where you want to save the XML file and type a file name, click **Save**, and then clear your AppLocker rules. + + **Important**  Be aware that what you're saving are the actual AppLocker rules using your local policy. You don't want to apply these rules to your employee devices, you just want to use them to create and export the XML content. You must delete the AppLocker rules before you apply your policy. + +   + +8. Open the Intune administration console, and go to the **Policy** node, click **Add Policy** from the **Tasks** area, go to **Windows**, click the **Custom Configuration (Windows 10 Desktop and Mobile and later)** policy, click **Create and Deploy a Custom Policy**, and then click **Create Policy**. + +9. Type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. + +10. In the **Add one or more OMA-URI settings that control functionality on Windows devices** box, click **Add**. + +11. Type your new **Setting Name** and **Description** into the associated boxes, keeping the default **Data Type** of **String**. + +12. In the **OMA-URI** box, type `./Vendor/MSFT/AppLocker/EnterpriseDataProtection//EXE`. + +13. Open File Explorer, go to the location where you saved your new XML file, and open it using an XML editor, such as Notepad. + +14. Copy the text that has a **Type** of EXE, within in the **RuleCollection** tags, and then go back to Intune and paste the text into the **Value** box of the **Add or edit OMA-URI Setting** box. For example: + + ``` syntax + + ``` + +15. Click **OK** to close the **Add or edit OMA-URI Setting** box, and then click **Save Policy**. + + After saving the policy, you’ll need to deploy it to your employee’s devices. For more info, see the [Deploy your enterprise data protection (EDP) policy](deploy-edp-policy-using-intune.md)) topic. + +  + +  + + + + + diff --git a/windows/keep-secure/advanced-security-audit-policy-settings.md b/windows/keep-secure/advanced-security-audit-policy-settings.md index ddf52cfa1a..41e24e9099 100644 --- a/windows/keep-secure/advanced-security-audit-policy-settings.md +++ b/windows/keep-secure/advanced-security-audit-policy-settings.md @@ -37,7 +37,7 @@ Configuring policy settings in this category can help you document attempts to a - [Audit Credential Validation](audit-credential-validation.md) -- [Audit Kerberos Authentication Service](audit-kerberos-authentication-service-sec-audit.md) +- [Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) - [Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md) @@ -69,7 +69,7 @@ Detailed Tracking security policy settings and audit events can be used to monit - [Audit Process Creation](audit-process-creation.md) -- [Audit Process Termination](audit-process-termination-sec-audit.md) +- [Audit Process Termination](audit-process-termination.md) - [Audit RPC Events](audit-rpc-events.md) @@ -89,7 +89,7 @@ DS Access security audit policy settings provide a detailed audit trail of attem Logon/Logoff security policy settings and audit events allow you to track attempts to log on to a computer interactively or over a network. These events are particularly useful for tracking user activity and identifying potential attacks on network resources. This category includes the following subcategories: -- [Audit Account Lockout](audit-account-lockout-sec-audit.md) +- [Audit Account Lockout](audit-account-lockout.md) - [Audit User/Device Claims](audit-user-device-claims.md) @@ -123,7 +123,7 @@ This category includes the following subcategories: - [Audit Certification Services](audit-certification-services.md) -- [Audit Detailed File Share](audit-detailed-file-share-sec-audit.md) +- [Audit Detailed File Share](audit-detailed-file-share.md) - [Audit File Share](audit-file-share.md) @@ -131,11 +131,11 @@ This category includes the following subcategories: - [Audit Filtering Platform Connection](audit-filtering-platform-connection.md) -- [Audit Filtering Platform Packet Drop](audit-filtering-platform-packet-drop-sec-audit.md) +- [Audit Filtering Platform Packet Drop](audit-filtering-platform-packet-drop.md) - [Audit Handle Manipulation](audit-handle-manipulation.md) -- [Audit Kernel Object](audit-kernel-object-sec-audit.md) +- [Audit Kernel Object](audit-kernel-object.md) - [Audit Other Object Access Events](audit-other-object-access-events.md) @@ -143,7 +143,7 @@ This category includes the following subcategories: - [Audit Removable Storage](audit-removable-storage.md) -- [Audit SAM](audit-sam-sec-audit.md) +- [Audit SAM](audit-sam.md) - [Audit Central Access Policy Staging](audit-central-access-policy-staging.md) @@ -167,11 +167,11 @@ Policy Change audit events allow you to track changes to important security poli Permissions on a network are granted for users or computers to complete defined tasks. Privilege Use security policy settings and audit events allow you to track the use of certain permissions on one or more systems. This category includes the following subcategories: -- [Audit Non-Sensitive Privilege Use](audit-non-sensitive-privilege-use-sec-audit.md) +- [Audit Non-Sensitive Privilege Use](audit-non-sensitive-privilege-use.md) -- [Audit Sensitive Privilege Use](audit-sensitive-privilege-use-sec-audit.md) +- [Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md) -- [Audit Other Privilege Use Events](audit-other-privilege-use-events-sec-audit.md) +- [Audit Other Privilege Use Events](audit-other-privilege-use-events.md) **System** @@ -202,9 +202,9 @@ If a file or folder SACL and a Global Object Access Auditing policy setting (or This category includes the following subcategories: -- [File System (Global Object Access Auditing)](file-system--global-object-access-auditing--sec-audit.md) +- [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md) -- [Registry (Global Object Access Auditing)](registry--global-object-access-auditing--sec-audit.md) +- [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md)   diff --git a/windows/keep-secure/applocker-overview-server.md b/windows/keep-secure/applocker-overview.md similarity index 100% rename from windows/keep-secure/applocker-overview-server.md rename to windows/keep-secure/applocker-overview.md diff --git a/windows/keep-secure/applocker-policies-deployment-guide.md b/windows/keep-secure/applocker-policies-deployment-guide.md index 5ed2981f2b..4f51483547 100644 --- a/windows/keep-secure/applocker-policies-deployment-guide.md +++ b/windows/keep-secure/applocker-policies-deployment-guide.md @@ -28,7 +28,7 @@ The following are prerequisites or recommendations to deploying policies: - Understand the capabilities of AppLocker: - - [AppLocker](applocker-overview-server.md) + - [AppLocker](applocker-overview.md) - Document your application control policy deployment plan by addressing these tasks: diff --git a/windows/keep-secure/audit-account-lockout-sec-audit.md b/windows/keep-secure/audit-account-lockout.md similarity index 100% rename from windows/keep-secure/audit-account-lockout-sec-audit.md rename to windows/keep-secure/audit-account-lockout.md diff --git a/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md b/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md index f8ad7650f0..ead3ed4c81 100644 --- a/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md +++ b/windows/keep-secure/audit-audit-the-access-of-global-system-objects.md @@ -38,7 +38,7 @@ Enabling this policy setting can generate a large number of security events, esp ### Best practices -- Use the advanced security audit policy option, [Audit Kernel Object](audit-kernel-object-sec-audit.md) in Advanced Security Audit Policy Settings\\Object Access, to reduce the number of unrelated audit events that you generate. +- Use the advanced security audit policy option, [Audit Kernel Object](audit-kernel-object.md) in Advanced Security Audit Policy Settings\\Object Access, to reduce the number of unrelated audit events that you generate. ### Location @@ -106,13 +106,13 @@ All auditing capabilities are integrated in Group Policy. You can configure, dep To audit attempts to access global system objects, you can use one of two security audit policy settings: -- [Audit Kernel Object](audit-kernel-object-sec-audit.md) in Advanced Security Audit Policy Settings\\Object Access +- [Audit Kernel Object](audit-kernel-object.md) in Advanced Security Audit Policy Settings\\Object Access - [Audit object access](basic-audit-object-access.md) under Security Settings\\Local Policies\\Audit Policy If possible, use the Advanced Security Audit Policy option to reduce the number of unrelated audit events that you generate. -If the [Audit Kernel Object](audit-kernel-object-sec-audit.md) setting is configured, the following events are generated: +If the [Audit Kernel Object](audit-kernel-object.md) setting is configured, the following events are generated: @@ -147,7 +147,7 @@ If the [Audit Kernel Object](audit-kernel-object-sec-audit.md) setting is config   -If the [Audit Kernel Object](audit-kernel-object-sec-audit.md) setting is configured, the following events are generated. +If the [Audit Kernel Object](audit-kernel-object.md) setting is configured, the following events are generated.
diff --git a/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md b/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md index 7adb7d2558..ab4fd042a3 100644 --- a/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md +++ b/windows/keep-secure/audit-audit-the-use-of-backup-and-restore-privilege.md @@ -98,7 +98,7 @@ Enabling this policy setting in conjunction with the **Audit privilege use** pol Enabling this policy setting when the **Audit privilege use** policy setting is also enabled generates an audit event for every file that is backed up or restored. This can help you to track down an administrator who is accidentally or maliciously restoring data in an unauthorized manner. -Alternately, you can use the advanced audit policy, [Audit Sensitive Privilege Use](audit-sensitive-privilege-use-sec-audit.md), which can help you manage the number of events generated. +Alternately, you can use the advanced audit policy, [Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md), which can help you manage the number of events generated. ## Security considerations diff --git a/windows/keep-secure/audit-detailed-file-share-sec-audit.md b/windows/keep-secure/audit-detailed-file-share.md similarity index 100% rename from windows/keep-secure/audit-detailed-file-share-sec-audit.md rename to windows/keep-secure/audit-detailed-file-share.md diff --git a/windows/keep-secure/audit-filtering-platform-packet-drop-sec-audit.md b/windows/keep-secure/audit-filtering-platform-packet-drop.md similarity index 100% rename from windows/keep-secure/audit-filtering-platform-packet-drop-sec-audit.md rename to windows/keep-secure/audit-filtering-platform-packet-drop.md diff --git a/windows/keep-secure/audit-kerberos-authentication-service-sec-audit.md b/windows/keep-secure/audit-kerberos-authentication-service.md similarity index 100% rename from windows/keep-secure/audit-kerberos-authentication-service-sec-audit.md rename to windows/keep-secure/audit-kerberos-authentication-service.md diff --git a/windows/keep-secure/audit-kernel-object-sec-audit.md b/windows/keep-secure/audit-kernel-object.md similarity index 100% rename from windows/keep-secure/audit-kernel-object-sec-audit.md rename to windows/keep-secure/audit-kernel-object.md diff --git a/windows/keep-secure/audit-non-sensitive-privilege-use-sec-audit.md b/windows/keep-secure/audit-non-sensitive-privilege-use.md similarity index 100% rename from windows/keep-secure/audit-non-sensitive-privilege-use-sec-audit.md rename to windows/keep-secure/audit-non-sensitive-privilege-use.md diff --git a/windows/keep-secure/audit-other-account-logon-events-sec-audit.md b/windows/keep-secure/audit-other-account-logon-events.md similarity index 100% rename from windows/keep-secure/audit-other-account-logon-events-sec-audit.md rename to windows/keep-secure/audit-other-account-logon-events.md diff --git a/windows/keep-secure/audit-other-privilege-use-events-sec-audit.md b/windows/keep-secure/audit-other-privilege-use-events.md similarity index 100% rename from windows/keep-secure/audit-other-privilege-use-events-sec-audit.md rename to windows/keep-secure/audit-other-privilege-use-events.md diff --git a/windows/keep-secure/audit-pnp-activity.md b/windows/keep-secure/audit-pnp-activity.md index d0e58e4a20..0209ff42eb 100644 --- a/windows/keep-secure/audit-pnp-activity.md +++ b/windows/keep-secure/audit-pnp-activity.md @@ -15,7 +15,7 @@ author: brianlic-msft - Windows 10 -\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.\] +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] This topic for the IT professional describes the advanced security audit policy setting, **Audit PNP Activity**, which determines when plug and play detects an external device. diff --git a/windows/keep-secure/audit-policy.md b/windows/keep-secure/audit-policy.md index dcc18d3d44..c955e349c7 100644 --- a/windows/keep-secure/audit-policy.md +++ b/windows/keep-secure/audit-policy.md @@ -44,7 +44,7 @@ The basic audit policy settings under **Security Settings\\Local Policies\\Audit [Configure security policy settings](how-to-configure-security-policy-settings.md) -[Security auditing](security-auditing-overview-glbl.md) +[Security auditing](security-auditing-overview.md)   diff --git a/windows/keep-secure/audit-process-termination-sec-audit.md b/windows/keep-secure/audit-process-termination.md similarity index 100% rename from windows/keep-secure/audit-process-termination-sec-audit.md rename to windows/keep-secure/audit-process-termination.md diff --git a/windows/keep-secure/audit-sam-sec-audit.md b/windows/keep-secure/audit-sam.md similarity index 100% rename from windows/keep-secure/audit-sam-sec-audit.md rename to windows/keep-secure/audit-sam.md diff --git a/windows/keep-secure/audit-sensitive-privilege-use-sec-audit.md b/windows/keep-secure/audit-sensitive-privilege-use.md similarity index 100% rename from windows/keep-secure/audit-sensitive-privilege-use-sec-audit.md rename to windows/keep-secure/audit-sensitive-privilege-use.md diff --git a/windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md b/windows/keep-secure/backup-tpm-recovery-information-to-ad-ds.md similarity index 98% rename from windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md rename to windows/keep-secure/backup-tpm-recovery-information-to-ad-ds.md index 83250faee4..0aca86ef95 100644 --- a/windows/keep-secure/backup-thetpm-recovery-information-to-ad-ds.md +++ b/windows/keep-secure/backup-tpm-recovery-information-to-ad-ds.md @@ -29,7 +29,7 @@ The TPM owner authorization value is stored in AD DS, and it is present in a TP   -Domain controllers running Windows Server 2012 R2 or Windows Server 2012 include the required AD DS schema objects by default. However, if your domain controller is running Windows Server 2008 R2, you need to update the schema as described in [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md). +Domain controllers running Windows Server 2012 R2 or Windows Server 2012 include the required AD DS schema objects by default. However, if your domain controller is running Windows Server 2008 R2, you need to update the schema as described in [AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md). This topic contains procedures, some of which are dependent on Visual Basic scripts, to recover TPM information and decommission TPM on remote computers. Sample scripts are available, which you can customize to meet the requirements of your environment. @@ -53,7 +53,7 @@ Before you begin your backup, ensure that the following prerequisites are met: 1. All domain controllers that are accessible by client computers that will be using TPM services are running Windows Server 2012 R2, Windows Server 2012, or Windows Server 2008 R2 with the updated schema. **Tip**   - For more info about the schema extensions that are required for a TPM backup in Active Directory domains that are running Windows Server 2008 R2, see [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md). + For more info about the schema extensions that are required for a TPM backup in Active Directory domains that are running Windows Server 2008 R2, see [AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md).   @@ -727,15 +727,15 @@ WScript.echo "msTPM-OwnerInformation: " + strOwnerInformation ## Additional resources -[Trusted Platform Module technology overview](trusted-platform-module-technology-overview.md) +[Trusted Platform Module technology overview](trusted-platform-module-overview.md) -[TPM fundamentals](tpm-fundamentals-windows-8.md) +[TPM fundamentals](tpm-fundamentals.md) [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md) [TPM Cmdlets in Windows PowerShell](http://technet.microsoft.com/library/jj603116.aspx) -[AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md) +[AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md) [Prepare your organization for BitLocker: Planning and Policies](http://technet.microsoft.com/library/jj592683.aspx), see TPM considerations diff --git a/windows/keep-secure/basic-audit-directory-service-access.md b/windows/keep-secure/basic-audit-directory-service-access.md index e5fe3073f9..aac3d70457 100644 --- a/windows/keep-secure/basic-audit-directory-service-access.md +++ b/windows/keep-secure/basic-audit-directory-service-access.md @@ -15,7 +15,7 @@ author: brianlic-msft - Windows 10 -\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.\] +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] Determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified. diff --git a/windows/keep-secure/basic-audit-logon-events.md b/windows/keep-secure/basic-audit-logon-events.md index f9f85f3cae..dbee948abf 100644 --- a/windows/keep-secure/basic-audit-logon-events.md +++ b/windows/keep-secure/basic-audit-logon-events.md @@ -15,7 +15,7 @@ author: brianlic-msft - Windows 10 -\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.\] +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] Determines whether to audit each instance of a user logging on to or logging off from a device. diff --git a/windows/keep-secure/bitlocker-basic-deployment.md b/windows/keep-secure/bitlocker-basic-deployment.md index 66830c7a84..e6eceae5d1 100644 --- a/windows/keep-secure/bitlocker-basic-deployment.md +++ b/windows/keep-secure/bitlocker-basic-deployment.md @@ -652,7 +652,7 @@ Disable-BitLocker -MountPoint E:,F:,G: [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md) -[BitLocker overview](bitlocker-overview-roletech-overview.md) +[BitLocker overview](bitlocker-overview.md)   diff --git a/windows/keep-secure/bitlocker-countermeasures.md b/windows/keep-secure/bitlocker-countermeasures.md index 29a453dfe6..2b1a79a0b6 100644 --- a/windows/keep-secure/bitlocker-countermeasures.md +++ b/windows/keep-secure/bitlocker-countermeasures.md @@ -37,7 +37,7 @@ A TPM is a microchip designed to provide basic security-related functions, prima By binding the BitLocker encryption key with the TPM and properly configuring the device, it’s nearly impossible for an attacker to gain access to the BitLocker-encrypted data without obtaining an authorized user’s credentials. Therefore, computers with a TPM can provide a high level of protection against attacks that attempt to directly retrieve the BitLocker encryption key. -For more info about TPM, see [Trusted Platform Module](trusted-platform-module-technology-overview.md). +For more info about TPM, see [Trusted Platform Module](trusted-platform-module-overview.md). **UEFI and Secure Boot** @@ -160,7 +160,7 @@ Windows InstantGo–certified devices do not have DMA ports, eliminating the ris - [Protect BitLocker from pre-boot attacks](protect-bitlocker-from-pre-boot-attacks.md) -- [BitLocker overview](bitlocker-overview-roletech-overview.md) +- [BitLocker overview](bitlocker-overview.md)   diff --git a/windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md b/windows/keep-secure/bitlocker-frequently-asked-questions.md similarity index 99% rename from windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md rename to windows/keep-secure/bitlocker-frequently-asked-questions.md index ce094d3d47..0d127689fd 100644 --- a/windows/keep-secure/bitlocker-frequently-asked-questions--faq-.md +++ b/windows/keep-secure/bitlocker-frequently-asked-questions.md @@ -489,7 +489,7 @@ BitLocker is not supported on bootable VHDs, but BitLocker is supported on data - [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md) -- [BitLocker: How to deploy on Windows Server 2012](bitlocker-how-to-deploy-on-windows-server-2012.md) +- [BitLocker: How to deploy on Windows Server 2012](bitlocker-how-to-deploy-on-windows-server.md) - [BitLocker: Use BitLocker Drive Encryption Tools to manage BitLocker](bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md) diff --git a/windows/keep-secure/bitlocker-group-policy-settings.md b/windows/keep-secure/bitlocker-group-policy-settings.md index f7957e0739..ca750b9147 100644 --- a/windows/keep-secure/bitlocker-group-policy-settings.md +++ b/windows/keep-secure/bitlocker-group-policy-settings.md @@ -1698,7 +1698,7 @@ TPM initialization might be needed during the BitLocker setup. Enable the **Turn For more information about this setting, see [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md). -If you are using domain controllers running Windows Server 2003 with Service Pack 1, you must first set up appropriate schema extensions and access control settings on the domain before a backup to AD DS can succeed. For more info, see [Backup the TPM recovery Information to AD DS](backup-thetpm-recovery-information-to-ad-ds.md). +If you are using domain controllers running Windows Server 2003 with Service Pack 1, you must first set up appropriate schema extensions and access control settings on the domain before a backup to AD DS can succeed. For more info, see [Backup the TPM recovery Information to AD DS](backup-tpm-recovery-information-to-ad-ds.md). ### Choose default folder for recovery password @@ -2699,16 +2699,16 @@ PCR 7 measurements are a mandatory logo requirement for systems that support Ins ## See also -[Trusted Platform Module](trusted-platform-module-technology-overview.md) +[Trusted Platform Module](trusted-platform-module-overview.md) [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md) -[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) -[BitLocker overview](bitlocker-overview-roletech-overview.md) +[BitLocker overview](bitlocker-overview.md) [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) diff --git a/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md b/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server.md similarity index 98% rename from windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md rename to windows/keep-secure/bitlocker-how-to-deploy-on-windows-server.md index 2c438aba69..0a0de22f5c 100644 --- a/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server-2012.md +++ b/windows/keep-secure/bitlocker-how-to-deploy-on-windows-server.md @@ -138,9 +138,9 @@ Enable-WindowsOptionalFeature -Online -FeatureName BitLocker, BitLocker-Utilitie ## More information -[BitLocker overview](bitlocker-overview-roletech-overview.md) +[BitLocker overview](bitlocker-overview.md) -[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) diff --git a/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md b/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md index b2613c0549..0ee061cb84 100644 --- a/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md +++ b/windows/keep-secure/bitlocker-how-to-enable-network-unlock.md @@ -475,9 +475,9 @@ The following steps can be used to configure Network Unlock on these older syste ## See also -- [BitLocker overview](bitlocker-overview-roletech-overview.md) +- [BitLocker overview](bitlocker-overview.md) -- [BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +- [BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) - [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) diff --git a/windows/keep-secure/bitlocker-overview-roletech-overview.md b/windows/keep-secure/bitlocker-overview.md similarity index 98% rename from windows/keep-secure/bitlocker-overview-roletech-overview.md rename to windows/keep-secure/bitlocker-overview.md index 7f2991b171..80f734fc4e 100644 --- a/windows/keep-secure/bitlocker-overview-roletech-overview.md +++ b/windows/keep-secure/bitlocker-overview.md @@ -85,7 +85,7 @@ When installing the BitLocker optional component on a server you will also need - + @@ -97,7 +97,7 @@ When installing the BitLocker optional component on a server you will also need - + diff --git a/windows/keep-secure/bitlocker-recovery-guide-plan.md b/windows/keep-secure/bitlocker-recovery-guide-plan.md index cbea802779..31c4fb595f 100644 --- a/windows/keep-secure/bitlocker-recovery-guide-plan.md +++ b/windows/keep-secure/bitlocker-recovery-guide-plan.md @@ -984,7 +984,7 @@ End Function ## See also -- [BitLocker overview](bitlocker-overview-roletech-overview.md) +- [BitLocker overview](bitlocker-overview.md)   diff --git a/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md b/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md index 2ccb3203fd..7a8babc248 100644 --- a/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md +++ b/windows/keep-secure/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md @@ -364,15 +364,15 @@ Active Directory-based protectors are normally used to unlock Failover Cluster e ## More information -[BitLocker overview](bitlocker-overview-roletech-overview.md) +[BitLocker overview](bitlocker-overview.md) -[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md) -[BitLocker: How to deploy on Windows Server 2012](bitlocker-how-to-deploy-on-windows-server-2012.md) +[BitLocker: How to deploy on Windows Server 2012](bitlocker-how-to-deploy-on-windows-server.md)   diff --git a/windows/keep-secure/bitlocker-use-bitlocker-recovery-password-viewer.md b/windows/keep-secure/bitlocker-use-bitlocker-recovery-password-viewer.md index 324a8f3227..b3d3843cf4 100644 --- a/windows/keep-secure/bitlocker-use-bitlocker-recovery-password-viewer.md +++ b/windows/keep-secure/bitlocker-use-bitlocker-recovery-password-viewer.md @@ -59,13 +59,13 @@ By completing the procedures in this scenario, you have viewed and copied the re ## More information -[BitLocker Overview](bitlocker-overview-roletech-overview.md) +[BitLocker Overview](bitlocker-overview.md) -[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) -[BitLocker: How to deploy on Windows Server 2012](bitlocker-how-to-deploy-on-windows-server-2012.md) +[BitLocker: How to deploy on Windows Server 2012](bitlocker-how-to-deploy-on-windows-server.md) [BitLocker: Use BitLocker Drive Encryption Tools to manage BitLocker](bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker.md) diff --git a/windows/keep-secure/block-untrusted-fonts-in-an-enterprise.md b/windows/keep-secure/block-untrusted-fonts-in-enterprise.md similarity index 100% rename from windows/keep-secure/block-untrusted-fonts-in-an-enterprise.md rename to windows/keep-secure/block-untrusted-fonts-in-enterprise.md diff --git a/windows/keep-secure/change-history-for-keep-windows-10-secure.md b/windows/keep-secure/change-history-for-keep-windows-10-secure.md index d0bbf40083..cb3a0d0b78 100644 --- a/windows/keep-secure/change-history-for-keep-windows-10-secure.md +++ b/windows/keep-secure/change-history-for-keep-windows-10-secure.md @@ -13,10 +13,32 @@ author: brianlic-msft This topic lists new and updated topics in the [Keep Windows 10 secure](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md). -| New or changed topic | Description | -|----------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| [Protect derived domain credentials with Credential Guard](credential-guard.md) | Clarified Credential Guard protections | -| [Requirements to use AppLocker](requirements-to-use-applocker.md) | Added that MDM can be used to manage any edition of Windows 10. Windows 10 Enterprise or Windows Server 2016 Technical Preview is required to manage AppLocker by using Group Policy. | +

[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md)

[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md)

This topic for the IT professional answers frequently asked questions concerning the requirements to use, upgrade, deploy and administer, and key management policies for BitLocker.

This topic for the IT professional explains how BitLocker features can be used to protect your data through drive encryption.

[BitLocker: How to deploy on Windows Server 2012 and later](bitlocker-how-to-deploy-on-windows-server-2012.md)

[BitLocker: How to deploy on Windows Server 2012 and later](bitlocker-how-to-deploy-on-windows-server.md)

This topic for the IT professional explains how to deploy BitLocker and Windows Server 2012 and later.

++++ + + + + + + + + + + + + + + + + + + + + +
New or changed topicDescription
[Protect derived domain credentials with Credential Guard](credential-guard.md)

Clarified Credential Guard protections

[Requirements to use AppLocker](requirements-to-use-applocker.md)

Added that MDM can be used to manage any edition of Windows 10. Windows 10 Enterprise or Windows Server 2016 Technical Preview is required to manage AppLocker by using Group Policy.

[Protect your enterprise data using enterprise data protection (EDP)](protect-enterprise-data-using-edp.md))

Added pre-release content about how to set up and deploy enterprise data protection (EDP) in an enterprise environment.

  @@ -63,11 +85,11 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md | New or changed topic | Description | |----------------------------------------------------------------------------------------------|-------------| | [Windows Defender in Windows 10](windows-defender-in-windows-10.md) | New | -| [Windows Hello biometrics in the enterprise](windows-hello-biometrics-in-the-enterprise.md) | New | -| [AppLocker](applocker-overview-server.md) (multiple topics) | Updated | +| [Windows Hello biometrics in the enterprise](windows-hello-in-enterprise.md)) | New | +| [AppLocker](applocker-overview.md) (multiple topics) | Updated | | [Device Guard certification and compliance](device-guard-certification-and-compliance.md) | Updated | | [Device Guard deployment guide](device-guard-deployment-guide.md) | Updated | -| [Security auditing](security-auditing-overview-glbl.md) (multiple topics) | Updated | +| [Security auditing](security-auditing-overview.md) (multiple topics) | Updated | | [Why a PIN is better than a password](why-a-pin-is-better-than-a-password.md) | Updated |   diff --git a/windows/keep-secure/choose-the-right-bitlocker-countermeasure.md b/windows/keep-secure/choose-the-right-bitlocker-countermeasure.md index efc0a930ad..c59d12e4db 100644 --- a/windows/keep-secure/choose-the-right-bitlocker-countermeasure.md +++ b/windows/keep-secure/choose-the-right-bitlocker-countermeasure.md @@ -50,7 +50,7 @@ In the end, many customers will find that pre-boot authentication improves secur - [Protect BitLocker from pre-boot attacks](protect-bitlocker-from-pre-boot-attacks.md) -- [BitLocker overview](bitlocker-overview-roletech-overview.md) +- [BitLocker overview](bitlocker-overview.md)   diff --git a/windows/keep-secure/configure-the-applocker-reference-computer-ops.md b/windows/keep-secure/configure-the-appLocker-reference-device.md similarity index 100% rename from windows/keep-secure/configure-the-applocker-reference-computer-ops.md rename to windows/keep-secure/configure-the-appLocker-reference-device.md diff --git a/windows/keep-secure/create-edp-policy-using-intune.md b/windows/keep-secure/create-edp-policy-using-intune.md new file mode 100644 index 0000000000..645179597f --- /dev/null +++ b/windows/keep-secure/create-edp-policy-using-intune.md @@ -0,0 +1,452 @@ +--- +title: Create an enterprise data protection (EDP) policy using Microsoft Intune (Windows 10) +description: Microsoft Intune helps you create and deploy your enterprise data protection (EDP) policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network. +ms.assetid: 4B307C99-3016-4D6A-9AE7-3BBEBD26E721 +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Create an enterprise data protection (EDP) policy using Microsoft Intune + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +Microsoft Intune helps you create and deploy your enterprise data protection (EDP) policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network. + +## In this topic: + + +- [Add an EDP policy](#add-edp-policy) + +- [Choose which apps can access your enterprise data](#choose-apps) + +- [Exempt apps from EDP restrictions](#exempt-apps) + +- [Manage the EDP protection level for your enterprise data](#protect-level) + +- [Define your enterprise-managed identity domains](#define-enterprise-managed-identity-domains) + +- [Choose where apps can access enterprise data](#choose-where-apps) + +- [Choose your optional EDP-related settings](#optional-settings) + +## Add an EDP policy + + +After you’ve installed and set up Intune for your organization, you must create an EDP-specific policy. + +**To add an EDP policy** + +1. Open the Intune administration console, and go to the **Policy** node, and then click **Add Policy**. + +2. Click **Add Policy** from the **Tasks** area. + +3. Go to **Windows**, click the **Enterprise Data Protection (Windows 10 and Mobile and later) policy**, pick the EDP template, click **Create and Deploy a Custom Policy**, and then click **Create Policy**.![microsoft intune: new policy creation screen](images/intune-createnewpolicy.png) + +4. Type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. + + ![microsoft intune: required name and optional description fields](images/intune-namedescription.png) + +## Add individual apps to your Protected App list + + +During the policy-creation process in Intune, you can choose the apps you want to give access to your enterprise data through EDP. Apps included in this list can protect data on behalf of the enterprise and are restricted from copying or moving enterprise data to unprotected apps. + +The steps to add your apps are based on the type of app it is; either a Universal Windows Platform (UWP) app, or a signed Desktop app, also known as a Classic Windows application. + +**Important**   +EDP-aware apps are expected to prevent enterprise data from going to unprotected network locations and to avoid encrypting personal data. On the other hand, EDP-unaware apps might not respect the corporate network boundary and will encrypt all files they create or modify, meaning that they could encrypt personal data and cause data loss during the revocation process. Care must be taken to get a support statement from the software provider that their app is safe with EDP before adding it to your **Protected App** list. + +  + +**Note**  If you want to use **File hash** or **Path** rules, instead of Publisher rules, you must follow the steps in the [Add multiple apps to your enterprise data protection (EDP) Protected Apps list](add-apps-to-protected-list-using-custom-uri.md)) topic. + +  + + +**To add a UWP app** + +1. From the **Configure the following apps to be protected by EDP** table in the **Protected Apps** area, click **Add.** + +2. Click **Universal App**, type the **Publisher Name** and the **Product Name** into the associated boxes, and then click **OK**. If you don't have the publisher or product name, you can find them for both desktop devices and Windows 10 Mobile phones by following these steps. + + **To find the Publisher and Product name values for Microsoft Store apps without installing them** + + 1. Go to the [Windows Store for Business](http://go.microsoft.com/fwlink/?LinkID=722910) website, and find your app. For example, Microsoft OneNote. + + **Note**   + If your app is already installed on desktop devices, you can use the AppLocker local security policy MMC snap-in to gather the info for adding the app to the **Protected App** list. For info about how to do this, see the [Add multiple apps to your enterprise data protection (EDP) Protected Apps list](add-apps-to-protected-list-using-custom-uri.md)) topic. + +   + + 2. Copy the ID value from the app URL. For example, Microsoft OneNote's ID URL is https://www.microsoft.com/store/apps/onenote/9wzdncrfhvjl, and you'd copy the ID value, `9wzdncrfhvjl`. + + 3. In a browser, run the Store for Business portal web API, to return a JavaScript Object Notation (JSON) file that includes the publisher and product name values. For example, run https://bspmts.mp.microsoft.com/v1/public/catalog/Retail/Products/*9wzdncrfhvjl*/applockerdata, where *9wzdncrfhvjl* is replaced with your ID value. + + The API runs and opens a text editor with the app details. + + ``` syntax + { + "packageIdentityName": "Microsoft.Office.OneNote", + "publisherCertificateName": "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" + } + ``` + + 4. Copy the `publisherCertificateName` value into the **Publisher Name** box and copy the `packageIdentityName` value into the **Product Name** box of Intune. + + **Important**   + The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that’s using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as “CN=” followed by the `windowsPhoneLegacyId`. + + For example: + +   + + ``` syntax + { + "windowsPhoneLegacyId": "ca05b3ab-f157-450c-8c49-a1f127f5e71d", + } + ``` + + ![microsoft intune: add a universal windows app to the protected apps list](images/intune-addapps.png) + + **To find the Publisher and Product name values for apps installed on Windows 10 Mobile phones** + + 1. If you need to add mobile apps that aren't distributed through the Store for Business, you must use the Windows Device Portal feature. + + 2. **Note**   + Your PC and phone must be on the same wireless network. + +   + + 3. On the Windows Phone, go to **Settings**, choose **Update & security**, and then choose **For developers**. + + 4. In the **For developers** screen, turn on **Developer mode**, turn on **Device Discovery**, and then turn on **Device Portal**. + + 5. Copy the URL in the **Device Portal** area into your device's browser, and then accept the SSL certificate. + + 6. In the **Device discovery** area, press **Pair**, and then enter the PIN into the website from the previous step. + + 7. On the **Apps** tab of the website, click the drop-down box to choose the app you want to know more about. + + The **Publisher** and **Product Name** values appear. + + 8. Copy the `publisherCertificateName` value and paste it into the **Publisher Name** box and the `packageIdentityName` value into the **Product Name** box of Intune. + + **Important**   + The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that’s using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as “CN=” followed by the `windowsPhoneLegacyId`. + + For example: + +   + + ``` syntax + { + "windowsPhoneLegacyId": "ca05b3ab-f157-450c-8c49-a1f127f5e71d", + } + ``` + + +**To add a Classic Windows application** + +1. From the **Configure the following apps to be protected by EDP** table in the **Protected Apps** area, click **Add.** + + A dialog box appears, letting you pick whether the app is a **Universal App** or a **Desktop App**. + +2. Click **Desktop App**, pick the options you want (see table), and then click **OK**. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
OptionManages

All fields left as “*”

All files signed by any publisher. (Not recommended.)

Publisher selected

All files signed by the named publisher.

+

This might be useful if your company is the publisher and signer of internal line-of-business apps.

Publisher and Product Name selected

All files for the specified product, signed by the named publisher.

Publisher, Product Name, and File Name selected

Any version of the named file or package for the specified product, signed by the named publisher.

Publisher, Product Name, File Name, and File Version, Exactly, selected

Specified version of the named file or package for the specified product, signed by the named publisher.

Publisher, Product Name, File Name, and File Version, And above selected

Specified version or newer releases of the named file or package for the specified product, signed by the named publisher.

+

This option is recommended for enlightened apps that weren't previously enlightened.

Publisher, Product Name, File Name, and File Version, And below selected

Specified version or older releases of the named file or package for the specified product, signed by the named publisher.

+ +   + + ![microsoft intune: add a classic windows app to the protected apps list](images/intune-add-desktop-app.png) + + If you’re unsure about what to include for the publisher, you can run this PowerShell command: + + ``` syntax + Get-AppLockerFileInformation -Path "" + ``` + + Where `""` goes to the location of the app on the device. For example, `Get-AppLockerFileInformation -Path "C:\Program Files\Internet Explorer\iexplore.exe"`. + + In this example, you'd get the following info: + + ``` syntax + Path Publisher + ---- --------- + %PROGRAMFILES%\INTERNET EXPLORER\IEXPLORE.EXE O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\INTERNET EXPLOR... + ``` + + Where the text, `O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US` is the publisher name to enter in the **Publisher Name** box. + +## Exempt apps from EDP restrictions + + +If you're running into compatibility issues where your app is incompatible with EDP, but still needs to be used with enterprise data, you can exempt the app from the EDP restrictions. This means that your apps won't include auto-encryption or tagging and won't honor your network restrictions. It also means that your exempted apps might leak. + +**To exempt an UWP app** + +1. Follow the **Add a UWP app** steps in the [Add multiple apps to your enterprise data protection (EDP) Protected Apps list](add-apps-to-protected-list-using-custom-uri.md)) topic, through to Step \#11. +2. In the **OMA-URI** box at Step 12, type `./Vendor/MSFT/AppLocker/EnterpriseDataProtection/edpexempt/StoreApp EXE`. + + Where **edpexempt** is added as a substring, making the app exempt. + +3. Open File Explorer, go to the location where you saved your new XML file, and open it using an XML editor, such as Notepad. + +4. Copy the text that has a **Type** of Appx, within in the **RuleCollection** tags, and then go back to Intune and paste the text into the **Value** box of the **Add or edit OMA-URI Setting** box. For example: + + ``` syntax + + ``` + +5. Click **OK** to close the **Add or edit OMA-URI Setting** box, and then click **Save Policy**. + + After saving the policy, you’ll need to deploy it to your employee’s devices. For more info, see the [Deploy your enterprise data protection (EDP) policy](deploy-edp-policy-using-intune.md)) topic. + +**To exempt a Classic Windows application** + +1. Follow the **Add a Classic Windows application app** steps in the [Add multiple apps to your enterprise data protection (EDP) Protected Apps list](add-apps-to-protected-list-using-custom-uri.md)) topic, through to Step \#11. +2. In the **OMA-URI** box at Step 12, type `./Vendor/MSFT/AppLocker/EnterpriseDataProtection/edpexempt/EXE`. + + Where **edpexempt** is added as a substring, making the app exempt. + +3. Open File Explorer, go to the location where you saved your new XML file, and open it using an XML editor, such as Notepad. + +4. Copy the text that has a **Type** of EXE, within in the **RuleCollection** tags, and then go back to Intune and paste the text into the **Value** box of the **Add or edit OMA-URI Setting** box. For example: + + ``` syntax + + ``` + +5. Click **OK** to close the **Add or edit OMA-URI Setting** box, and then click **Save Policy**. + + After saving the policy, you’ll need to deploy it to your employee’s devices. For more info, see the [Deploy your enterprise data protection (EDP) policy](deploy-edp-policy-using-intune.md)) topic. + +## Manage the EDP protection level for your enterprise data + + +After you've added the apps you want to protect with EDP, you'll need to apply a management and protection mode. + +We recommend that you start with **Silent** or **Override** while verifying with a small group that you have the right apps on your **Protected Apps** list. After you're done, you can change to your final enforcement policy, either **Override** or **Block**. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + +
ModeDescription
Block

EDP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.

Override

EDP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log, accessible through the [Reporting CSP](http://go.microsoft.com/fwlink/p/?LinkID=746459).

Silent

EDP runs silently, logging inappropriate data sharing, without blocking anything.

Off +

(Not recommended)

EDP is turned off and doesn't help to protect or audit your data

+ +  + +![microsoft intune: add protection level for protected apps list](images/intune-encryption-level.png) + +## Define your enterprise-managed identity domains + + +Specify your company’s enterprise identity, expressed as your primary internet domain. For example, if your company is Contoso, its enterprise identity might be contoso.com. The first listed domain (in this example, contoso.com) is the primary enterprise identity string used to tag files protected by any app on the **Protected App** list. + +You can also specify all the domains owned by your enterprise that are used for user accounts, separating them with the "|" character. For example, if Contoso also has some employees with email addresses or user accounts on the fabrikam.com domain, you would use contoso.com|fabrikam.com. + +This list of managed identity domains, along with the primary domain, make up the identity of your managing enterprise. User identities (user@domain) that end in any of the domains on this list, are considered managed. + +![microsoft intune: add primary internet domain for your enterprise identity](images/intune-primary-domain.png) + +**To add your primary domain** + +- Type the name of your primary domain into the **Primary domain** field. For example, *contoso.com*. + + If you have multiple domains, you must separate them with the "|" character. For example, contoso.com|fabrikam.com. + +## Choose where apps can access enterprise data + + +After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. There are 6 options, including your network domain, cloud domain, proxy server, internal proxy server, IPv4 range, and IPv6 range. + +**Important**   +- Every EDP policy should include policy that defines your enterprise network locations. + +- Classless Inter-Domain Routing (CIDR) notation isn’t supported for EDP configurations. + +  + +**To specify where your protected apps can find and send enterprise data on the network** + +1. Add additional network locations your apps can access by clicking **Add**, typing a description into the **Description** box, and then choosing your location type, including: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Network location typeFormatDescription

Enterprise Cloud Domain

contoso.sharepoint.com,proxy1.contoso.com|office.com|proxy2.contoso.com

Specify the cloud resources traffic to restrict to your protected apps.

+

For each cloud resource, you may also specify an internal proxy server that routes your traffic from your Enterprise Internal Proxy Server policy. If you have multiple resources, you must use the "|" delimiter. Include the "," delimiter just before the "|" if you don’t use proxies. For example: [URL,Proxy]|[URL,Proxy].

Enterprise Network Domain

domain1.contoso.com,domain2.contoso.com

Specify the DNS suffix used in your environment. All traffic to the fully-qualified domains using this DNS suffix will be protected. If you have multiple resources, you must use the "," delimiter.

+

This setting works with the IP Ranges settings to detect whether a network endpoint is enterprise or personal on private networks.

Enterprise Proxy Server

domain1.contoso.com:80;domain2.contoso.com:137

Specify the proxy server and the port traffic is routed through. If you have multiple resources, you must use the ";" delimiter.

+

This setting is required if you use a proxy in your network. If you don't have a proxy server, you might find that enterprise resources are unavailable when a client is behind a proxy, such as when using certain Wi-Fi hotspots at hotels and restaurants.

Enterprise Internal Proxy Server

proxy1.contoso.com;proxy2.contoso.com

Specify the proxy servers your cloud resources will go through. If you have multiple resources, you must use the ";" delimiter.

Enterprise IPv4 Range

Starting IPv4 Address: 3.4.0.1

+

Ending IPv4 Address: 3.4.255.254

+

Custom URI: 3.4.0.1-3.4.255.254,10.0.0.1-10.255.255.254

Specify the addresses for a valid IPv4 value range within your intranet.

+

If you are adding a single range, you can enter the starting and ending addresses into your management system’s UI. If you want to add multiple addresses, we suggest creating a Custom URI, using the "-" delimiter between start and end of a range, and the "," delimiter to separate ranges.

Enterprise IPv6 Range

Starting IPv6 Address:

+

2a01:110::

+

Ending IPv6 Address: 2a01:110:7fff:ffff:ffff:ffff:ffff:ffff

+

Custom URI: 2a01:110::-2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

Specify the addresses for a valid IPv6 value range within your intranet.

+

If you are adding a single range, you can enter the starting and ending addresses into your management system’s UI. If you want to add multiple addresses, we suggest creating a Custom URI, using the "-" delimiter between start and end of a range, and the "," delimiter to separate ranges.

+ +   + + ![microsoft intune: choose the primary domain and the other network locations for protected apps](images/intune-networklocation.png) + +2. Add as many locations as you need, and then click **OK**. + + The **Add or Edit Enterprise Network Locations box** closes. + +3. In the **Use a data recovery certificate in case of data loss** box, click **Browse** to add a data recovery certificate for your policy. + + Adding a data recovery certificate helps you to access locally-protected files on the device. For example, if an employee leaves the company and the IT department has to access EDP-protected data from a Windows 10 company computer. This can also help recover data in case an employee's device is accidentally revoked. For more info about how to find and export your data recovery certificate, see the [Data Recovery and Encrypting File System (EFS)](http://go.microsoft.com/fwlink/p/?LinkId=761462) topic. + + ![microsoft intune: specify your data recovery certificate for your policy](images/intune-data-recovery.png) + +## Choose your optional EDP-related settings + + +After you've decided where your protected apps can access enterprise data on your network, you’ll be asked to decide if you want to add any optional EDP settings. + +**To add your optional settings** + +1. Choose to set any or all of the optional EDP-related settings: + + - **Allow the user to decrypt data that was created or edited by the apps configured above.** Clicking **Yes**, or turning off this setting in Intune, lets your employees right-click to decrypt their protected app data, along with the option to decrypt data in the **Save As** box and the **Save As** file picker . Clicking **No** removes the **Decrypt** option and saves all data for protected apps as enterprise-encrypted. + + - **Protect app content when the device is in a locked state for the apps configured above.** Clicking **Yes** lets EDP help to secure protected app content when a mobile device is locked. We recommend turning this option on to help prevent data leaks from things such as email text that appears on the **Lock** screen of a Windows 10 Mobile phone. + + ![microsoft intune: optional edp settings](images/intune-edpsettings.png) + +2. Click **Save Policy**. + +## Related topics + + +[Deploy your enterprise data protection (EDP) policy](deploy-edp-policy-using-intune.md)) + +[General guidance and best practices for enterprise data protection (EDP)](guidance-and-best-practices-edp.md)) + +  + +  + + + + + diff --git a/windows/keep-secure/create-edp-policy-using-sccm.md b/windows/keep-secure/create-edp-policy-using-sccm.md new file mode 100644 index 0000000000..69e3b41aed --- /dev/null +++ b/windows/keep-secure/create-edp-policy-using-sccm.md @@ -0,0 +1,411 @@ +--- +title: Create and deploy an enterprise data protection (EDP) policy using System Center Configuration Manager (Windows 10) +description: Configuration Manager (version 1511 or later) helps you create and deploy your enterprise data protection (EDP) policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network. +ms.assetid: 85B99C20-1319-4AA3-8635-C1A87B244529 +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Create and deploy an enterprise data protection (EDP) policy using System Center Configuration Manager + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview +- System Center Configuration Manager (version 1511 or later) + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +Configuration Manager (version 1511 or later) helps you create and deploy your enterprise data protection (EDP) policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network. + +## In this topic: + + +- [Add an EDP policy](#add-edp-policy-sccm) + +- [Choose which apps can access your enterprise data](#choose-apps-sccm) + +- [Manage the EDP protection level for your enterprise data](#protect-level-sccm) + +- [Define your enterprise-managed identity domains](#define-identity-domain) + +- [Choose where apps can access enterprise data](#choose-where-apps-sccm) + +- [Choose your optional EDP-related settings](#optional-settings) + +- [Review your configuration choices in the **Summary** screen](#summary-page) + +- [Deploy the EDP policy](#deploy-policy-sccm) + +## Add an EDP policy + + +After you’ve installed and set up System Center Configuration Manager for your organization, you must create a configuration item for EDP, which in turn becomes your EDP policy. + +**To create a configuration item for EDP** + +1. Open the System Center Configuration Manager console, click the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. + + ![system center configuration manager, configuration items screen](images/edp-sccm-addpolicy.png) + +2. Click the **Create Configuration Item** button. + + The **Create Configuration Item Wizard** starts. + + ![create configuration item wizard, defining the configuration item and choosing the configuration type](images/edp-sccm-generalscreen.png) + +3. On the **General Information screen**, type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. + +4. In the **Specify the type of configuration item you want to create** area, pick the option that represents whether you use System Center Configuration Manager for device management, and then click **Next**. + + - **Settings for devices managed with the Configuration Manager client > Windows 10** option + + -OR- + + - **Settings for devices managed without the Configuration Manager client > Windows 8.1 and Windows 10** option + +5. On the **Supported Platforms** screen, click the **Windows 10** box, and then click **Next**. + + ![create configuration item wizard, choosing the supported platforms for the policy](images/edp-sccm-supportedplat.png) + +6. On the **Device Settings** screen, click **Enterprise Data Protection**, and then click **Next**. + + ![create configuration item wizard, choosing to add the enterprise data protection settings](images/edp-sccm-devicesettings.png) + + The **Configure Enterprise Data Protection settings** page appears, where you'll configure your policy for your organization. + +## Choose which apps can access your enterprise data + + +During the policy-creation process in Configuration Manager, you can choose the apps you want to give access to your enterprise data through EDP. Apps included in this list can protect data on behalf of the enterprise and are restricted from copying or moving enterprise data to unprotected apps or unprotected network locations. + +The steps to add your apps are based on the type of app it is; either a Universal Windows Platform (UWP) app, or a signed Classic Windows application. + +**Important**   +EDP-aware apps are expected to prevent enterprise data from going to unprotected network locations and to avoid encrypting personal data. On the other hand, EDP-unaware apps might not respect the corporate network boundary and will encrypt all files they create or modify, meaning that they could encrypt personal data and cause data leaks during the revocation process. Care must be taken to get a support statement from the software provider that their app is safe with EDP before adding it to your **Protected App** list. + +  + +**To add a UWP app** + +1. From the **Configure the following apps to be protected by EDP** table in the **Protected Apps** area, click **Add.** + +2. Click **Universal App**, type the **Publisher Name** and the **Product Name** into the associated boxes, and then click **OK**. If you don't have the publisher or product name, you can find them by following these steps. + + **To find the Publisher and Product name values for Microsoft Store apps without installing them** + + 1. Go to the [Windows Store for Business](http://go.microsoft.com/fwlink/?LinkID=722910) website, and find your app. For example, Microsoft OneNote. + + 2. Copy the ID value from the app URL. For example, Microsoft OneNote's ID URL is https://www.microsoft.com/store/apps/onenote/9wzdncrfhvjl, and you'd copy the ID value, `9wzdncrfhvjl`. + + 3. In a browser, run the Store for Business portal web API, to return a JavaScript Object Notation (JSON) file that includes the publisher and product name values. For example, run https://bspmts.mp.microsoft.com/v1/public/catalog/Retail/Products/*9wzdncrfhvjl*/applockerdata, where *9wzdncrfhvjl* is replaced with your ID value. + + The API runs and opens a text editor with the app details. + + ``` syntax + { + "packageIdentityName": "Microsoft.Office.OneNote", + "publisherCertificateName": "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" + } + ``` + + 4. Copy the `publisherCertificateName` value and paste them into the **Publisher Name** box, copy the `packageIdentityName` value into the **Product Name** box of the **Add app** box, and then click **OK**. + + **Important**   + If you don’t see the **Product Name** box, it could mean that your tenant is not on the latest build and that you need to wait until it's upgraded. Same applies if you see the **AppId** box. The **AppId** box has been removed in the latest build and should disappear (along with any entries) when your tenant is upgraded. + +   + + **Important**   + The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that’s using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as “CN=” followed by the `windowsPhoneLegacyId`. + + For example: + +   + + ``` syntax + { + "windowsPhoneLegacyId": "ca05b3ab-f157-450c-8c49-a1f127f5e71d", + } + ``` + + ![create configuration item wizard, adding a universal app](images/edp-sccm-adduniversalapp.png) + +**To add a Classic Windows application** + +1. From the **Configure the following apps to be protected by EDP** table in the **Protected Apps** area, click **Add.** + + A dialog box appears, letting you pick whether the app is a **Universal App** or a **Desktop App**. + +2. Click **Desktop App**, pick the options you want (see table), and then click **OK**. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
OptionManages

All fields left as “*”

All files signed by any publisher. (Not recommended.)

Publisher selected

All files signed by the named publisher.

+

This might be useful if your company is the publisher and signer of internal line-of-business apps.

Publisher and Product Name selected

All files for the specified product, signed by the named publisher.

Publisher, Product Name, and File Name selected

Any version of the named file or package for the specified product, signed by the named publisher.

Publisher, Product Name, File Name, and File Version, Exactly, selected

Specified version of the named file or package for the specified product, signed by the named publisher.

Publisher, Product Name, File Name, and File Version, And above selected

Specified version or newer releases of the named file or package for the specified product, signed by the named publisher.

+

This option is recommended for enlightened apps that weren't previously enlightened.

Publisher, Product Name, File Name, and File Version, And below selected

Specified version or older releases of the named file or package for the specified product, signed by the named publisher.

+ +   + + If you’re unsure about what to include for the publisher, you can run this PowerShell command: + + ``` syntax + Get-AppLockerFileInformation -Path "" + ``` + + Where `""` goes to the location of the app on the device. For example, `Get-AppLockerFileInformation -Path "C:\Program Files\Internet Explorer\iexplore.exe"`. + + In this example, you'd get the following info: + + ``` syntax + Path Publisher + ---- --------- + %PROGRAMFILES%\INTERNET EXPLORER\IEXPLORE.EXE O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\INTERNET EXPLOR... + ``` + + Where the text, `O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US` is the publisher name to enter in the **Publisher Name** box. + + ![create configuration item wizard, adding a desktop app](images/edp-sccm-adddesktopapp.png) + +## Manage the EDP protection level for your enterprise data + + +After you've added the apps you want to protect with EDP, you'll need to apply an app management mode. + +We recommend that you start with **Silent** or **Override** while verifying with a small group that you have the right apps on your **Protected Apps** list. After you're done, you can change to your final enforcement policy, either **Override** or **Block**. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + +
ModeDescription
Block

EDP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.

Override

EDP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log, accessible through the [Reporting CSP](http://go.microsoft.com/fwlink/p/?LinkID=746459).

Silent

EDP runs silently, logging inappropriate data sharing, without blocking anything.

Off +

(Not recommended)

EDP is turned off and doesn't help to protect or audit your data.

+

After you turn off EDP, an attempt is made to decrypt any closed EDP-tagged files on the locally attached drives.

+ +  + +![create configuration item wizard, choosing the app management mode](images/edp-sccm-appmgmt.png) + +## Define your enterprise-managed identity domains + + +Specify your company’s enterprise identity, expressed as your primary internet domain. For example, if your company is Contoso, its enterprise identity might be contoso.com. The first listed domain (in this example, contoso.com) is the primary enterprise identity string used to tag files protected by any app on the **Protected App** list. + +You can also specify all the domains owned by your enterprise that are used for user accounts, separating them with the "|" character. For example, if Contoso also has some employees with email addresses or user accounts on the fabrikam.com domain, you would use contoso.com|fabrikam.com. + +This list of managed identity domains, along with the primary domain, make up the identity of your managing enterprise. User identities (user@domain) that end in any of the domains on this list, are considered managed. + +![configuration manager: add primary internet domain for your enterprise identity](images/sccm-primary-domain.png) + +**To add your primary domain** + +- Type the name of your primary domain into the **Primary domain** field. For example, *contoso.com*. + + If you have multiple domains, you must separate them with the "|" character. For example, contoso.com|fabrikam.com. + +## Choose where apps can access enterprise data + + +After you've added a management level to your protected apps, you'll need to decide where those apps can access enterprise data on your network. There are 6 options, including your network domain, cloud domain, proxy server, internal proxy server, IPv4 range, and IPv6 range. + +**To specify where your protected apps can find and send enterprise data on the network** + +1. Add additional network locations your apps can access by clicking **Add**, and then choosing your location type, including: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Network location typeFormatDescription

Enterprise Cloud Domain

contoso.sharepoint.com,proxy1.contoso.com|office.com|proxy2.contoso.com

Specify the cloud resources traffic to restrict to your protected apps.

+

For each cloud resource, you may also specify an internal proxy server that routes your traffic, from your Enterprise Internal Proxy Server policy. If you have multiple resources, you must use the "|" delimiter. Include the "," delimiter just before the "|" if you don’t use proxies. For example: URL[,Proxy]|URL[,Proxy].

Enterprise Network Domain

domain1.contoso.com,domain2.contoso.com

Specify the DNS suffix used in your environment. All traffic to the fully-qualified domains using this DNS suffix will be protected. If you have multiple resources, you must use the "," delimiter.

+

This setting works with the IP Ranges settings to detect whether a network endpoint is enterprise or personal on private networks.

Enterprise Proxy Server

domain1.contoso.com:80;domain2.contoso.com:137

Specify the proxy server and the port traffic is routed through. If you have multiple resources, you must use the ";" delimiter.

+

This setting is required if you use a proxy in your network. If you don't have a proxy server, you might find that enterprise resources are unavailable when a client is behind a proxy, such as when using certain Wi-Fi hotspots at hotels and restaurants.

Enterprise Internal Proxy Server

proxy1.contoso.com;proxy2.contoso.com

Specify the proxy servers your cloud resources will go through. If you have multiple resources, you must use the ";" delimiter.

Enterprise IPv4 Range

Starting IPv4 Address: 3.4.0.1

+

Ending IPv4 Address: 3.4.255.254

+

Custom URI: 3.4.0.1-3.4.255.254,10.0.0.1-10.255.255.254

Specify the addresses for a valid IPv4 value range within your intranet.

+

If you are adding a single range, you can enter the starting and ending addresses into your management system’s UI. If you want to add multiple addresses, we suggest creating a Custom URI, using the "-" delimiter between start and end of a range, and the "," delimiter to separate ranges.

Enterprise IPv6 Range

Starting IPv6 Address:

+

2a01:110::

+

Ending IPv6 Address: 2a01:110:7fff:ffff:ffff:ffff:ffff:ffff

+

Custom URI: 2a01:110::-2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

Specify the addresses for a valid IPv6 value range within your intranet.

+

If you are adding a single range, you can enter the starting and ending addresses into your management system’s UI. If you want to add multiple addresses, we suggest creating a Custom URI, using the "-" delimiter between start and end of a range, and the "," delimiter to separate ranges.

+ +   + + ![create configuration item wizard, specifying the network locations that can be accessed by the apps](images/edp-sccm-primarydomain2.png) + +2. Add as many locations as you need, and then click **OK**. + + The **Add or Edit Enterprise Network Locations box** closes. + +3. In the **Use a data recovery certificate in case of data loss** box, click **Browse** to add a data recovery certificate for your policy. + + Adding a data recovery certificate helps you to access locally-protected files on the device. For example, if an employee leaves the company and the IT department has to access EDP-protected data from a Windows 10 company computer. This can also help recover data in case an employee's device is accidentally revoked. For more info about how to find and export your data recovery certificate, see the[Data Recovery and Encrypting File System (EFS)](http://go.microsoft.com/fwlink/p/?LinkId=761462) topic. + +## Choose your optional EDP-related settings + + +After you've decided where your protected apps can access enterprise data on your network, you’ll be asked to decide if you want to add any optional EDP settings. + +**To add your optional settings** + +- Choose to set any or all of the optional EDP-related settings: + + - **Block the user from decrypting data that was created or edited by the apps configured above.** Clicking **No**, or leaving the setting blank, lets your employees right-click to decrypt their protected app data, along with the option to decrypt data in the **Save As** box and the **Save As** file picker . Clicking **Yes** removes the **Decrypt** option and saves all data for protected apps as enterprise-encrypted. + + - **Protect app content when the device is in a locked state for the apps configured above.** Clicking **Yes** lets EDP help to secure protected app content when a mobile device is locked. We recommend turning this option on to help prevent data leaks from things such as email text that appears on the **Lock** screen of a Windows 10 Mobile phone. + + ![create configuration item wizard, choosing additional optional settings for enterprise data protection](images/edp-sccm-optsettings.png) + +## Review your configuration choices in the Summary screen + + +After you've finished configuring your policy, you can review all of your info on the **Summary** screen. + +**To view the Summary screen** + +- Click the **Summary** button to review your policy choices, and then click **Next** to finish and to save your policy. + + A progress bar appears, showing you progress for your policy. After it's done, click **Close** to return to the **Configuration Items** page. + + ![create configuration item wizard, reviewing the summary screen before creating the policy](images/edp-sccm-summaryscreen.png) + +## Deploy the EDP policy + + +After you’ve created your EDP policy, you'll need to deploy it to your organization's devices. For info about your deployment options, see these topics: + +[Operations and Maintenance for Compliance Settings in Configuration Manager](http://go.microsoft.com/fwlink/?LinkId=708224) + +[How to Create Configuration Baselines for Compliance Settings in Configuration Manager]( http://go.microsoft.com/fwlink/?LinkId=708225) + +[How to Deploy Configuration Baselines in Configuration Manager]( http://go.microsoft.com/fwlink/?LinkId=708226) + +## Next steps + + +Enrollment can be done for business or personal devices, allowing the devices to use your managed apps and to sync with your managed content and information. For more info about enrollment, see [Enroll and unenroll devices from enterprise data protection (EDP)](../keep-secure/remove-your-corporate-data-from-enrolled-devices.md). + +## Related topics + + +[System Center Configuration Manager and Endpoint Protection (Version 1511)](http://go.microsoft.com/fwlink/?LinkId=717372) + +[TechNet documentation for Configuration Manager](http://go.microsoft.com/fwlink/?LinkId=691623) + +[Manage mobile devices with Configuration Manager and Microsoft Intune](http://go.microsoft.com/fwlink/?LinkId=691624) + +  + +  + + + + + diff --git a/windows/keep-secure/create-vpn-and-edp-policy-using-intune.md b/windows/keep-secure/create-vpn-and-edp-policy-using-intune.md new file mode 100644 index 0000000000..ff7c743244 --- /dev/null +++ b/windows/keep-secure/create-vpn-and-edp-policy-using-intune.md @@ -0,0 +1,120 @@ +--- +title: Create and deploy a VPN policy for enterprise data protection (EDP) using Microsoft Intune (Windows 10) +description: After you've created and deployed your enterprise data protection (EDP) policy, you can use Microsoft Intune to create and deploy your Virtual Private Network (VPN) policy, linking it to your EDP policy. +ms.assetid: D0EABA4F-6D7D-4AE4-8044-64680A40CF6B +keywords: ["EDP", "Enterprise Data Protection"] +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Create and deploy a VPN policy for enterprise data protection (EDP) using Microsoft Intune + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +After you've created and deployed your enterprise data protection (EDP) policy, you can use Microsoft Intune to create and deploy your Virtual Private Network (VPN) policy, linking it to your EDP policy. + +## Create your VPN policy using Microsoft Intune + + +Follow these steps to create the VPN policy you want to use with EDP. + +**To create your VPN policy** + +1. Open the Intune administration console, and go to the **Policy** node, and then click **Add Policy**. + +2. Go to **Windows**, click the **VPN Profile (Windows 10 Desktop and Mobile and later)**, click **Create and Deploy a Custom Policy**, and then click **Create Policy**.![microsoft intune: new policy creation screen](images/intune-vpn-createpolicy.png) + +3. Type a name (required) and an optional description for your policy into the **Name** and **Description** boxes.![microsoft intune: title and description for your policy](images/intune-vpn-titledescription.png) + +4. In the **VPN Settings** area, type the following info: + + - **VPN connection name.** This name is also what appears to your employees, so it's important that it be clear and understandable. + + - **Connection type.** Pick the connection type that matches your infrastructure. The options are **Pulse Secure**, **F5 Edge Client**, **Dell SonicWALL Mobile Connect**, or **Check Point Capsule VPN**. + + - **VPN server description.** A descriptive name for this connection. Only you will see it, but it should be unique and readable. + + - **Server IP address or FQDN.** The server's IP address or fully-qualified domain name (FQDN). + + ![microsoft intune: vpn settings area of the new policy](images/intune-vpn-vpnsettings.png) + +5. In the **Authentication** area, choose the authentication method that matches your VPN infrastructure, either **Username and Password** or **Certificates**. + + It's your choice whether you check the box to **Remember the user credentials at each logon**. + + ![microsoft intune: authentication method for your vpn system](images/intune-vpn-authentication.png) + +6. You can leave the rest of the default or blank settings, and then click **Save Policy**. + +## Deploy your VPN policy using Microsoft Intune + + +After you’ve created your VPN policy, you'll need to deploy it to the same group you deployed your enterprise data protection (EDP) policy. + +**To deploy your VPN policy** + +1. On the **Configuration policies** page, locate your newly-created policy, click to select it, and then click the **Manage Deployment** button. + +2. In the left pane of the **Manage Deployment** box, click the employees or groups that should get the policy, and then click **Add**. + + The added people move to the **Selected Groups** list on the right-hand pane. + + ![microsoft intune, group selection for policy deployment](images/intune-deploy-vpn.png) + +3. After you've picked all of the employees and groups that should get the policy, click **OK**. + + The policy is deployed to the selected users' devices. + +## Link your EDP and VPN policies and deploy the custom configuration policy + + +The final step to making your VPN configuration work with EDP, is to link your two policies together. To do this, you must first create a custom configuration policy, setting it to use your **EdpModeID** setting, and then deploying the policy to the same group you deployed your EDP and VPN policies + +**To link your VPN policy** + +1. Open the Intune administration console, and go to the **Policy** node, and then click **Add Policy**. + +2. Go to **Windows**, click the **Custom Configuration (Windows 10 Desktop and Mobile and later)**, click **Create and Deploy a Custom Policy**, and then click **Create Policy**.![microsoft intune: new policy creation screen](images/intune-vpn-customconfig.png) + +3. Type a name (required) and an optional description for your policy into the **Name** and **Description** boxes.![microsoft intune: title and description for your policy](images/intune-vpn-edpmodeid.png) + +4. In the **OMA-URI Settings** area, click **Add** to add your **EdpModeID** info. + +5. In the **OMA-URI Settings** area, type the following info: + + - **Setting name.** Type **EdpModeID** as the name. + + - **Data type.** Pick the **String** data type. + + - **OMA-URI.** Type ./Vendor/MSFT/VPNv2/*<your\_edp\_policy\_name>*/EdpModeId, replacing *<your\_edp\_policy\_name>* with the name you gave to your EDP policy. For example, ./Vendor/MSFT/VPNv2/W10-Checkpoint-VPN1/EdpModeId. + + - **Value.** Your fully-qualified domain that should be used by the OMA-URI setting. + + ![microsoft intune: oma-uri settings area of the new policy](images/intune-vpn-omaurisettings.png) + +6. Click **OK** to save your new OMA-URI setting, and then click **Save Policy.** + + **To deploy your linked policy** + +1. On the **Configuration policies** page, locate your newly-created policy, click to select it, and then click the **Manage Deployment** button. + +2. In the left pane of the **Manage Deployment** box, click the employees or groups that should get the policy, and then click **Add**. The added people move to the **Selected Groups** list on the right-hand pane. + +3. After you've picked all of the employees and groups that should get the policy, click **OK**. The policy is deployed to the selected users' devices. + +  + +  + + + + + diff --git a/windows/keep-secure/create-your-applocker-planning-document.md b/windows/keep-secure/create-your-applocker-planning-document.md index 2d5ae406e6..c05e7740c9 100644 --- a/windows/keep-secure/create-your-applocker-planning-document.md +++ b/windows/keep-secure/create-your-applocker-planning-document.md @@ -399,7 +399,7 @@ You can use the following form to construct your own AppLocker planning document - The AppLocker Policies Design Guide is the predecessor to the AppLocker Policies Deployment Guide. When planning is complete, see the [AppLocker policies deployment guide](applocker-policies-deployment-guide.md). -- For more general info, see [AppLocker](applocker-overview-server.md). +- For more general info, see [AppLocker](applocker-overview.md).   diff --git a/windows/keep-secure/create-your-applocker-rules.md b/windows/keep-secure/create-your-applocker-rules.md index ef65a70017..f1aa18a539 100644 --- a/windows/keep-secure/create-your-applocker-rules.md +++ b/windows/keep-secure/create-your-applocker-rules.md @@ -26,7 +26,7 @@ AppLocker rules apply to the targeted app, and they are the components that make You can use a reference device to automatically create a set of default rules for each of the installed apps, test and modify each rule as necessary, and deploy the policies. Creating most of the rules for all the installed apps gives you a starting point to build and test your policies. For info about performing this task, see the following topics: -- [Configure the AppLocker reference device](configure-the-applocker-reference-computer-ops.md) +- [Configure the AppLocker reference device](configure-the-appLocker-reference-device.md) - [Run the Automatically Generate Rules wizard](run-the-automatically-generate-rules-wizard.md) diff --git a/windows/keep-secure/credential-guard.md b/windows/keep-secure/credential-guard.md index 23fb6bef14..c63d72e644 100644 --- a/windows/keep-secure/credential-guard.md +++ b/windows/keep-secure/credential-guard.md @@ -1012,7 +1012,7 @@ If you're having trouble running this script, try replacing the single quote aft [Authentication Mechanism Assurance for AD DS in Windows Server 2008 R2 Step-by-Step Guide](http://technet.microsoft.com/library/dd378897.aspx) -[Trusted Platform Module](trusted-platform-module-technology-overview.md) +[Trusted Platform Module](trusted-platform-module-overview.md)   diff --git a/windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md b/windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md similarity index 100% rename from windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md rename to windows/keep-secure/dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md diff --git a/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md b/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md similarity index 88% rename from windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md rename to windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md index 091917ee51..3ec93358be 100644 --- a/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md +++ b/windows/keep-secure/dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md @@ -20,7 +20,7 @@ Describes the best practices, location, values, and security considerations for ## Reference -This policy setting is similar to the [DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md) setting in that it allows you to define additional computer-wide controls that govern access to all DCOM–based applications on a device. However, the ACLs that are specified in this policy setting control local and remote COM launch requests (not access requests) on the device. A simple way to think about this access control is as an additional access check that is performed against a device-wide ACL on each launch of any COM-based server. If the access check fails, the call, activation, or launch request is denied. (This check is in addition to any access check that is run against the server-specific ACLs.) In effect, it provides a minimum authorization standard that must be passed to launch any COM-based server. The DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax policy setting differs in that it provides a minimum access check that is applied to attempts to access an already launched COM-based server. +This policy setting is similar to the [DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md) setting in that it allows you to define additional computer-wide controls that govern access to all DCOM–based applications on a device. However, the ACLs that are specified in this policy setting control local and remote COM launch requests (not access requests) on the device. A simple way to think about this access control is as an additional access check that is performed against a device-wide ACL on each launch of any COM-based server. If the access check fails, the call, activation, or launch request is denied. (This check is in addition to any access check that is run against the server-specific ACLs.) In effect, it provides a minimum authorization standard that must be passed to launch any COM-based server. The DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax policy setting differs in that it provides a minimum access check that is applied to attempts to access an already launched COM-based server. These device-wide ACLs provide a way to override weak security settings that are specified by an application through CoInitializeSecurity or application-specific security settings. They provide a minimum security standard that must be passed, regardless of the settings of the specific COM-based server. These ACLs provide a centralized location for an administrator to set a general authorization policy that applies to all COM-based servers. diff --git a/windows/keep-secure/deploy-edp-policy-using-intune.md b/windows/keep-secure/deploy-edp-policy-using-intune.md new file mode 100644 index 0000000000..3221be8c89 --- /dev/null +++ b/windows/keep-secure/deploy-edp-policy-using-intune.md @@ -0,0 +1,54 @@ +--- +title: Deploy your enterprise data protection (EDP) policy using Microsoft Intune (Windows 10) +description: After you’ve created your enterprise data protection (EDP) policy, you'll need to deploy it to your organization's enrolled devices. +ms.assetid: 9C4A01E7-0B1C-4F15-95D0-0389F0686211 +keywords: ["EDP", "Enterprise Data Protection"] +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Deploy your enterprise data protection (EDP) policy using Microsoft Intune + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +After you’ve created your enterprise data protection (EDP) policy, you'll need to deploy it to your organization's enrolled devices. Enrollment can be done for business or personal devices, allowing the devices to use your managed apps and to sync with your managed content and information. + +**To deploy your EDP policy** + +1. On the **Configuration policies** page, locate your newly-created policy, click to select it, and then click the **Manage Deployment** button. + + ![microsoft intune configuration policies screen, showing the manage deployment link](images/intune-managedeployment.png) + +2. In the left pane of the **Manage Deployment** box, click the employees or groups that should get the policy, and then click **Add**. + + The added people move to the **Selected Groups** list on the right-hand pane. + + ![microsoft intune, group selection for policy deployment](images/intune-groupselection.png) + +3. After you've picked all of the employees and groups that should get the policy, click **OK**. + + The policy is deployed to the selected users' devices. + +## Related topics + + +[Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md)) + +[General guidance and best practices for enterprise data protection (EDP)](guidance-and-best-practices-edp.md)) + +  + +  + + + + + diff --git a/windows/keep-secure/determine-your-application-control-objectives.md b/windows/keep-secure/determine-your-application-control-objectives.md index e48556261c..653b1b4585 100644 --- a/windows/keep-secure/determine-your-application-control-objectives.md +++ b/windows/keep-secure/determine-your-application-control-objectives.md @@ -158,7 +158,7 @@ Use the following table to develop your own objectives and determine which appli   -For more general info, see [AppLocker](applocker-overview-server.md). +For more general info, see [AppLocker](applocker-overview.md).   diff --git a/windows/keep-secure/device-guard-deployment-guide.md b/windows/keep-secure/device-guard-deployment-guide.md index 04e354c13f..cdedb8169e 100644 --- a/windows/keep-secure/device-guard-deployment-guide.md +++ b/windows/keep-secure/device-guard-deployment-guide.md @@ -18,6 +18,8 @@ author: brianlic-msft Microsoft Device Guard is a feature set that consists of both hardware and software system integrity hardening features that revolutionize the Windows operating system’s security. Windows 10 employs Device Guard as well as code integrity and advanced hardware features such as CPU virtualization extensions, Trusted Platform Module, and second-level address translation to offer comprehensive modern security to its users. This guide explores the individual features in Device Guard as well as how to plan for, configure, and deploy them. ## Introduction to Device Guard + + Today’s security threat landscape is more aggressive than ever before. Modern malicious attacks are focused on revenue generation, intellectual property theft, and targeted system degradation, which results in financial loss. Many of these modern attackers are sponsored by nation states with unknown motives and large cyber terrorism budgets. These threats can enter a company through something as simple as an email message and can permanently damage its reputation for securing its software assets, as well as having significant financial impact. Windows 10 introduces several new security features that help mitigate a large percentage of today’s known threats. It is estimated that more than 300,000 new malware variants are discovered daily. Unfortunately, companies currently use an ancient method to discover this infectious software and prevent its use. In fact, current PCs trust everything that runs until malware signatures determine whether a threat exists; then, the antimalware software attempts to clean the PC, often after the malicious software’s effect has already been noticed. This signature-based system focuses on reacting to an infection and ensuring that the particular infection does not happen again. In this model, the system that drives malware detection relies on the discovery of malicious software; only then can a signature be provided to the client to remediate it, which implies that a computer must be infected first. The time between the detection of the malware and a client being issued a signature could mean the difference between losing data and staying safe. @@ -29,6 +31,8 @@ Device Guard breaks the current model of detection first-block later, and allows Device Guard's features revolutionize the Windows operating system’s security by taking advantage of new virtualization-based security (VBS) options and the trust-nothing mobile device operating system model, which makes its defenses much more difficult for malware to penetrate. By using configurable code integrity policies, organizations are able to choose exactly which applications are allowed to run in their environment. Configurable code integrity is not limited to Windows Store applications and can be used with existing unsigned or signed Win32 applications, without the requirement that the application be repackaged. In addition, configurable code integrity can be deployed as an individual feature if organizations don’t possess the required hardware for Device Guard. Along with code integrity, Windows 10 leverages advanced hardware features such as CPU virtualization extensions, input/output memory management units (IOMMUs), Trusted Platform Module (TPM), and second-level address translation (SLAT) to offer comprehensive modern security to its users. Device Guard deployed with configurable code integrity and Credential Guard will be among the most impactful client-side security deployments an organization can implement today. In this guide, you learn about the individual features found within Device Guard as well as how to plan for, configure, and deploy them. Device Guard with configurable code integrity is intended for deployment alongside additional threat-mitigating Windows features such as Credential Guard and AppLocker. ## Device Guard overview + + Device Guard is a feature set that consists of both hardware and software system integrity hardening features. These features revolutionize the Windows operating system’s security by taking advantage of new virtualization-based security options and the trust-nothing mobile device operating system model. A key feature in this model is called *configurable code integrity*, which allows your organization to choose exactly which software or trusted software publishers are allowed to run code on your client machines—exactly what has made mobile phone security so successful. In addition, Device Guard offers organizations a way to sign existing line-of-business (LOB) applications so that they can trust their own code, without the requirement that the application be repackaged. Also, this same method of signing provides organizations with a way to trust individual third-party applications. Device Guard—with configurable code integrity, Credential Guard, and AppLocker—is the most complete security defense that any Microsoft product has ever been able to offer a Windows client. Advanced hardware features such as CPU virtualization extensions, IOMMUs, and SLAT, drive these new client security offerings. By integrating these hardware features further into the core operating system, Windows 10 leverages them in new ways. For example, the same type 1 hypervisor technology that is used to run virtual machines in Microsoft Hyper-V is used to isolate core Windows services into a virtualization-based, protected container. This is just one example of how Windows 10 integrates advanced hardware features deeper into the operating system to offer comprehensive modern security to its users. These hardware features are now available in consumer and enterprise PC markets and are discussed in detail in the [Hardware considerations](#hardware) section. @@ -59,6 +63,8 @@ Although AppLocker is not considered a new Device Guard feature, it complements **Note**  One example in which Device Guard functionality needs AppLocker supplementation is when your organization would like to limit universal applications. Universal applications have already been validated by Microsoft to be trustworthy to run, but an organization may not want to allow specific universal applications to run in their environment. You can accomplish this enforcement by using an AppLocker rule. +  + AppLocker and Device Guard should run side-by-side in your organization, which offers the best of both security features at the same time and provides the most comprehensive security to as many devices as possible. In addition to these features, Microsoft recommends that you continue to maintain an enterprise antivirus solution for a well-rounded enterprise security portfolio. ### @@ -80,8 +86,9 @@ You can easily manage Device Guard features by using the familiar enterprise and - **Windows PowerShell**. Windows PowerShell is primarily used to create and service code integrity policies. These policies represent the most powerful component of Device Guard. For a step-by-step walkthrough of how to create, audit, service, enforce, and deploy code integrity policies, see the [Code integrity policies](#code-integrity-policies) section. These options provide the same experience you are used to in order to manage your existing enterprise management solutions. For more information about how to manage and deploy Device Guard hardware and code integrity features in your organization, see the [Device Guard deployment](#dg-deployment) section. - ## Plan for Device Guard + + In this section, you will learn about the following topics: - [Approach enterprise code integrity deployment](#approach-enterprise). Device Guard deployment in your organization requires a planned approach. In this section, you get high-level recommendations for how to approach enterprise code integrity deployment in your organization. @@ -94,9 +101,12 @@ In this section, you will learn about the following topics: ## Approach enterprise code integrity deployment + Enterprises that want to consider Device Guard should not expect deployment to their entire organization overnight. Device Guard implementation requires that you plan for both end-user and IT pro impact. In addition, the deployment of Device Guard features to your enterprise requires a planned, phased approach to ensure that end-user systems are fully capable and ready to enforce these new security restrictions. Perform the following high-level tasks to approach the deployment of Device Guard to your enterprise: -1. **Group devices into similar functions**. Categorize machines into the groups described in the [Device Guard deployment scenarios](#device-guard-deployment) section. This begins the roadmap for your Device Guard deployment and provides groups of easier and more difficult implementations. From there, assess the quantity of necessary Device Guard policies. The easiest solution is to lock down your entire enterprise, but it might not fit your individual departments’ needs.

To discover an appropriate number of policies for your organization, try to separate the defined groups into departments or roles. Then ask some questions: What software does each department or role need to do their job? Should they be able to install and run other departments’ software? Do we need to create a base code integrity policy that aligns with our application catalog? Should users be able to install any application or only choose from an “allowed” list? Do we allow users to use their own peripheral devices? These questions will help you discover the number of necessary policies for your organization. Finally, try to focus on which people or departments would require an additional level of privileges. For example, should department x be able to install and run application xyz, even though no other department does? If the answer is yes and justifiable, you will need a secondary code integrity policy for that group. If not, you will likely be able to merge several policies to simplify management. For more information about configurable code integrity policies, see the [Code integrity policies](#code-integrity-policies) section. +1. **Group devices into similar functions**. Categorize machines into the groups described in the [Device Guard deployment scenarios](#device-guard-deployment) section. This begins the roadmap for your Device Guard deployment and provides groups of easier and more difficult implementations. From there, assess the quantity of necessary Device Guard policies. The easiest solution is to lock down your entire enterprise, but it might not fit your individual departments’ needs. + + To discover an appropriate number of policies for your organization, try to separate the defined groups into departments or roles. Then ask some questions: What software does each department or role need to do their job? Should they be able to install and run other departments’ software? Do we need to create a base code integrity policy that aligns with our application catalog? Should users be able to install any application or only choose from an “allowed” list? Do we allow users to use their own peripheral devices? These questions will help you discover the number of necessary policies for your organization. Finally, try to focus on which people or departments would require an additional level of privileges. For example, should department x be able to install and run application xyz, even though no other department does? If the answer is yes and justifiable, you will need a secondary code integrity policy for that group. If not, you will likely be able to merge several policies to simplify management. For more information about configurable code integrity policies, see the [Code integrity policies](#code-integrity-policies) section. 2. **Create code integrity policies from “golden” PCs**. After you create the groups of devices, you can create code integrity policies to align with those groups, similar to the way you would manage corporate images. When you have separated these groups and set up golden PCs that mimic the software and hardware those individual groups require, create code integrity policies from each of them. After you create these, you can merge these code integrity policies to create a master policy, or you can manage and deploy them individually. For step-by-step instructions about how to create code integrity policies, see the [Create code integrity policies from golden PCs](#create-code-golden) section. @@ -110,6 +120,7 @@ Enterprises that want to consider Device Guard should not expect deployment to t ## Device Guard deployment scenarios + To help simplify the deployment of Device Guard to your organization, Microsoft recommends that you group devices into the deployment scenarios described in this section. Device Guard is not a feature that organizations will just simply “turn on”; rather, it typically requires a phased implementation approach. To see where these scenarios fit into an overall Device Guard deployment approach, see the [Approach to enterprise code integrity deployment](#approach-enterprise) section. **Fixed-workload devices** @@ -120,6 +131,8 @@ Device Guard components that are applicable to fixed-workload devices include: - KMCI VBS protection + + - Enforced UMCI policy **Fully managed devices** @@ -150,6 +163,7 @@ Device Guard is not a good way to manage devices in a Bring Your Own Device (BYO ## Code signing adoption + Code signing is crucial to the successful implementation of configurable code integrity policies. These policies can trust the signing certificates from both independent software vendors and customers. In Windows 10, all Windows Store applications are signed. Also, you can easily trust any other signed application by adding the signing certificate to the code integrity policy. For unsigned applications, customers have multiple options for signing them so that code integrity policies can trust them. The first option is traditional embedded code signing. Organizations that have in-house development teams can incorporate binary code signing into their application development process, and then simply add the signing certificate to their code integrity policies. The second option for signing unsigned applications is to use catalog files. In Windows 10, customers have the ability to create catalog files as they monitor the installation and initial run of an application. For more information about signing existing unsigned LOB applications or third-party applications, see the [Existing line-of-business applications](#existing-lob) section. @@ -163,6 +177,8 @@ Until now, existing LOB applications were difficult to trust if they were signed **Note**   Catalog files are lists of individual binaries’ hash values. If the scanned application is updated, you will need to create a new catalog file. That said, binary signing is still highly recommended for any future applications so that no catalog files are needed. +  + When you create a catalog file, you must sign it by using enterprise public key infrastructure (PKI), or a purchased code signing certificate. When signed, code integrity policies can trust the signer or signing certificate of those files. For information about catalog file signing, see the [Catalog files](#catalog-files) section. **Application development** @@ -239,6 +255,7 @@ Different hardware features are required to implement the various features of De ## Device Guard deployment + In this section, you learn about the following topics: - [Configure hardware-based security features](#configure-hardware). This section explains how to enable the hardware-based security features in Device Guard. Also, you verify that the features are enabled by using both Windows Management Infrastructure (WMI) and Msinfo32.exe. @@ -249,6 +266,7 @@ In this section, you learn about the following topics: ## Configure hardware-based security features + Hardware-based security features make up a large part of Device Guard security offerings. VBS reinforces the most important feature of Device Guard: configurable code integrity. There are three steps to configure hardware-based security features in Device Guard: 1. **Verify that hardware requirements are met and enabled**. Verify that your client machines possess the necessary hardware to run these features. A list of hardware requirements for the hardware-based security features is available in the [Hardware considerations](#hardware) section. @@ -266,6 +284,8 @@ In addition to the hardware requirements found in the [Hardware considerations]( **Note**   You can configure these features manually by using Windows PowerShell or Deployment Image Servicing and Management. For specific information about these methods, refer to the [Credential Guard documentation](http://go.microsoft.com/fwlink/p/?LinkId=624529). +  + ![figure 1](images/dg-fig1-enableos.png) Figure 1. Enable operating system features for VBS @@ -281,6 +301,8 @@ Before you begin this process, verify that the target device meets the hardware **Note**   There are two platform security levels for Secure Boot: stand-alone Secure Boot and Secure Boot with DMA protection. DMA protection provides additional memory protection but will be enabled only on systems whose processors include DMA protection (IOMMU) technologies. Without the presence of IOMMUs and with DMA protection disabled, customers will lose protection from driver-based attacks. +  + 1. Navigate to the **HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\DeviceGuard** registry subkey. 2. Set the **EnableVirtualizationBasedSecurity DWORD** value to **1**. @@ -298,24 +320,37 @@ Unfortunately, it would be time consuming to perform these steps manually on eve **Note**   Microsoft recommends that you test-enable this feature on a group of test machines before you deploy it to machines that are currently deployed to users. +  **Use Group Policy to deploy Secure Boot** -1. To create a new GPO, right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here**.

-![figure 2](images/dg-fig2-createou.png)
Figure 2. Create a new OU-linked GPO +1. To create a new GPO, right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here**. + + ![figure 2](images/dg-fig2-createou.png) + + Figure 2. Create a new OU-linked GPO 2. Name the new GPO **Contoso Secure Boot GPO Test**. This example uses *Contoso Secure Boot GPO Test* as the name of the GPO. You can choose any name for this example. Ideally, the name would align with your existing GPO naming convention. 3. To open the Group Policy Management Editor, right-click the new GPO, and then click **Edit**. -4. Within the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Then, right-click **Turn On Virtualization Based Security**, and then click **Edit**.

-![figure 3](images/dg-fig3-enablevbs.png)
Figure 3. Enable VBS +4. Within the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Then, right-click **Turn On Virtualization Based Security**, and then click **Edit**. -5. Select the **Enabled** option, and then select **Secure Boot and DMA Protection** from the **Select Platform Security Level** list.

-![figure 4](images/device-guard-gp.png)
Figure 4. Enable Secure Boot + ![figure 3](images/dg-fig3-enablevbs.png) - **Note**
Device Guard Secure Boot is maximized when combined with DMA protection. If your hardware contains the IOMMUs required for DMA protection, be sure to select the **Secure Boot and DMA Protection** platform security level. If your hardware does not contain IOMMU, there are several mitigations provided by leveraging Secure Boot without DMA Protection. + Figure 3. Enable VBS + +5. Select the **Enabled** option, and then select **Secure Boot and DMA Protection** from the **Select Platform Security Level** list. + + ![figure 4](images/device-guard-gp.png) + + Figure 4. Enable Secure Boot + + **Note**   + Device Guard Secure Boot is maximized when combined with DMA protection. If your hardware contains the IOMMUs required for DMA protection, be sure to select the **Secure Boot and DMA Protection** platform security level. If your hardware does not contain IOMMU, there are several mitigations provided by leveraging Secure Boot without DMA Protection. + +   6. Close the Group Policy Management Editor, and then restart the Windows 10 test computer. After you configure this setting, UEFI Secure Boot will be enabled upon restart. @@ -332,6 +367,8 @@ Before you begin this process, verify that the desired computer meets the hardwa **Note**   All drivers on the system must be compatible with virtualization-based protection of code integrity; otherwise, your system may fail. Microsoft recommends that you enable this feature on a group of test machines before you enable it on deployed machines. +  + To configure virtualization-based protection of KMCI manually: 1. Navigate to the **HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\DeviceGuard** registry subkey. @@ -345,9 +382,15 @@ It would be time consuming to perform these steps manually on every protected ma **Note**   Microsoft recommends that you test-enable this feature on a group of test computers before you deploy it to machines that are currently deployed to users. If untested, there is a possibility that this feature can cause system instability and ultimately cause the client operating system to fail. +  + To use Group Policy to configure VBS of KMCI: -1. Create a new GPO: Right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here**.

![figure 5](images/dg-fig5-createnewou.png)
Figure 5. Create a new OU-linked GPO +1. Create a new GPO: Right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here**. + + ![figure 5](images/dg-fig5-createnewou.png) + + Figure 5. Create a new OU-linked GPO 2. Name the new GPO **Contoso VBS CI Protection GPO Test**. @@ -355,9 +398,17 @@ To use Group Policy to configure VBS of KMCI: 3. Open the Group Policy Management Editor: Right-click the new GPO, and then click **Edit**. -4. Within the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Then, right-click **Turn On Virtualization Based Security**, and then click **Edit**.

![figure 6](images/dg-fig6-enablevbs.png)
Figure 6. Enable VBS +4. Within the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Then, right-click **Turn On Virtualization Based Security**, and then click **Edit**. -5. Select the **Enabled** option, and then select the **Enable Virtualization Based Protection of Code Integrity** check box.

![figure 7](images/dg-fig7-enablevbsofkmci.png)
Figure 7. Enable VBS of KMCI + ![figure 6](images/dg-fig6-enablevbs.png) + + Figure 6. Enable VBS + +5. Select the **Enabled** option, and then select the **Enable Virtualization Based Protection of Code Integrity** check box. + + ![figure 7](images/dg-fig7-enablevbsofkmci.png) + + Figure 7. Enable VBS of KMCI 6. Close the Group Policy Management Editor, and then restart the Windows 10 test computer. With this setting configured, the VBS of the KMCI will take effect upon restart. @@ -386,9 +437,15 @@ To avoid spending an unnecessary amount of time in manual deployments, use Group **Note**   Microsoft recommends that you enable Credential Guard before you join a machine to the domain to ensure that all credentials are properly protected. Setting the appropriate registry subkeys during your imaging process would be ideal to achieve this protection. +  + To use Group Policy to enable Credential Guard: -1. Create a new GPO: right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here**.

![figure 8](images/dg-fig8-createoulinked.png)
Figure 8. Create a new OU-linked GPO +1. Create a new GPO: right-click the OU to which you want to link the GPO, and then click **Create a GPO in this domain, and Link it here** . + + ![figure 8](images/dg-fig8-createoulinked.png) + + Figure 8. Create a new OU-linked GPO 2. Name the new GPO **Contoso Credential Guard GPO Test**. @@ -396,20 +453,32 @@ To use Group Policy to enable Credential Guard: 3. Open the Group Policy Management Editor: right-click the new GPO, and then click **Edit**. -4. Within the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Right-click **Turn On Virtualization Based Security**, and then click **Edit**.

![figure 9](images/dg-fig9-enablevbs.png)
Figure 9. Enable VBS +4. Within the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Right-click **Turn On Virtualization Based Security**, and then click **Edit**. -5. Select the **Enabled** option, and then select the **Enable Credential Guard** check box.

![figure 10](images/dg-fig10-enablecredentialguard.png)
Figure 10. Enable Credential Guard + ![figure 9](images/dg-fig9-enablevbs.png) + + Figure 9. Enable VBS + +5. Select the **Enabled** option, and then select the **Enable Credential Guard** check box. + + ![figure 10](images/dg-fig10-enablecredentialguard.png) + + Figure 10. Enable Credential Guard 6. Close Group Policy Management Editor, and then restart the Windows 10 test computer. - - **Note**
- The default platform security level is **Secure Boot**. If IOMMUs are available within the protected machines, it is recommended that you select **Secure Boot and DMA Protection** to maximize the mitigations that are available through Credential Guard.   + + **Note**   + The default platform security level is **Secure Boot**. If IOMMUs are available within the protected machines, it is recommended that you select **Secure Boot and DMA Protection** to maximize the mitigations that are available through Credential Guard. + +   7. Check the test client event log for Device Guard GPOs. **Note**   All processed Device Guard policies are logged in event viewer under Application and Services Logs\\Microsoft\\Windows\\DeviceGuard-GPEXT\\Operational. +  + For additional information about how Credential Guard works as well as additional configuration options, please refer to the [Credential Guard documentation](http://go.microsoft.com/fwlink/p/?LinkId=624529). **Validate enabled Device Guard hardware-based security features** @@ -423,6 +492,8 @@ The *Win32\_DeviceGuard* WMI class is only available on the Enterprise edition o The output of this command provides details of the available hardware-based security features as well as those features that are currently enabled. For detailed information about what each property means, refer to Table 1. +  + Table 1. Win32\_DeviceGuard properties @@ -504,14 +575,24 @@ Table 1. Win32\_DeviceGuard properties
-Another method to determine the available and enabled Device Guard features is to run msinfo32.exe from an elevated PowerShell session. When you run this program, the Device Guard properties are displayed at the bottom of the **System Summary** section, as shown in Figure 11.

![figure 11](images/dg-fig11-dgproperties.png)
Figure 11. Device Guard properties in the System Summary +  + +Another method to determine the available and enabled Device Guard features is to run msinfo32.exe from an elevated PowerShell session. When you run this program, the Device Guard properties are displayed at the bottom of the **System Summary** section, as shown in Figure 11. + +![figure 11](images/dg-fig11-dgproperties.png) + +Figure 11. Device Guard properties in the System Summary ## Catalog files + + Enforcement of Device Guard on a system requires that every trusted application have a signature or its binary hashes added to the code integrity policy. For many organizations, this can be an issue when considering unsigned LOB applications. To avoid the requirement that organizations repackage and sign these applications, Windows 10 includes a tool called Package Inspector that monitors an installation process for any deployed and executed binary files. If the tool discovers such files, it itemizes them in a catalog file. These catalog files offer you a way to trust your existing unsigned applications, whether developed in house or by a third party, as well as trust signed applications for which you do not want to trust the signer but rather the specific application. When created, these files can be signed, the signing certificates added to your existing code integrity policies, and the catalog files themselves distributed to the clients. **Note**   The Enterprise edition of Windows 10 or Windows Server 2016 is required to create and use catalog files. +  + ### **Create catalog files** @@ -521,12 +602,16 @@ The creation of catalog files is the first step to add an unsigned application t **Note**   When you establish a naming convention it makes it easier to detect deployed catalog files in the future. In this guide, you will use *\*-Contoso.cat* as the naming convention. For more information about why this practice is helpful to inventory or detect catalog files, see the [Inventory catalog files with System Center Configuration Manager](#inventory-cat-sccm) section. +  + 1. Be sure that a code integrity policy is currently running in audit mode. Package Inspector does not always detect installation files that have been removed from the machine during the installation process. To ensure that these binaries are also trusted, the code integrity policy that you created and audited in the [Create code integrity policies from golden PCs](#create-code-golden) and [Audit code integrity policies](#audit-code-integrity) sections should be deployed, in audit mode, to the system on which you are running Package Inspector. **Note**   - This process should **not** be performed on a system running an enforced Device Guard policy, only with a policy running in audit mode. If a policy is currently being enforced, you will not be able to install and run the application.  + This process should **not** be performed on a system running an enforced Device Guard policy, only with a policy running in audit mode. If a policy is currently being enforced, you will not be able to install and run the application. + +   2. Start Package Inspector, and then scan drive C: @@ -535,6 +620,8 @@ When you establish a naming convention it makes it easier to detect deployed cat **Note**   Package inspector can monitor installations on any local drive. In this example, we install the application on drive C, but any other drive can be used. +   + 3. Copy the installation media to drive C. By copying the installation media to drive C, you ensure that Package Inspector detects and catalogs the actual installer. If you skip this step, the future code integrity policy may trust the application to run but not be installed. @@ -546,6 +633,8 @@ When you establish a naming convention it makes it easier to detect deployed cat **Note**   Every binary that is run while Package Inspector is running will be captured in the catalog. Therefore, be sure not to run additional installations or updates during the scan to minimize the risk of trusting the incorrect binaries. Alternatively, if you want to add multiple applications to a single catalog file, simply repeat the installation and run process while the current scan is running. +   + 5. Stop the scan, and then generate definition and catalog files. When application installation and initial setup are finished, stop the Package Inspector scan and generate the catalog and definition files on your desktop by using the following commands: `$ExamplePath=$env:userprofile+"\Desktop"` @@ -555,8 +644,11 @@ When you establish a naming convention it makes it easier to detect deployed cat `$CatDefName=$ExamplePath+"\LOBApp.cdf"` `PackageInspector.exe Stop C: -Name $CatFileName -cdfpath $CatDefName` - - **Note**
This scan catalogs the hash values for each discovered binary file. If the applications that were scanned are updated, complete this process again to trust the new binaries’ hash values. + +**Note**   +This scan catalogs the hash values for each discovered binary file. If the applications that were scanned are updated, complete this process again to trust the new binaries’ hash values. + +  When finished, the files will be saved to your desktop. To trust this catalog file within a code integrity policy, the catalog must first be signed. Then, the signing certificate can be included in the code integrity policy, and the catalog file can be distributed to the individual client machines. Catalog files can be signed by using a certificate and SignTool.exe, a free tool available in the Windows SDK. For more information about signing catalog files with SignTool.exe, see the [Catalog signing with SignTool.exe](#catsign-signtool) section. @@ -603,6 +695,8 @@ If you do not have a code signing certificate, please see the [Create a Device G **Note**   In this example, you use the catalog file you created in the [Create catalog files](#create-catalog-files) section. If you are signing another catalog file, be sure to update the *$ExamplePath* and *$CatFileName* variables with the correct information. +   + 2. Import the code signing certificate. Import the code signing certificate that will be used to sign the catalog file to the signing user’s personal store. In this example, you use the certificate that you created in the [Create a Device Guard code signing certificate](#create-dg-code) section. 3. Sign the catalog file with Signtool.exe: @@ -619,13 +713,21 @@ If you do not have a code signing certificate, please see the [Create a Device G - **Note**
  + **Note**   The *<Path to signtool.exe>* variable should be the full path to the Signtool.exe utility. *ContosoDGSigningCert* is the subject name of the certificate that you will use to sign the catalog file. This certificate should be imported to your personal certificate store on the machine on which you are attempting to sign the catalog file. - **Note**
+   + + **Note**   For additional information about Signtool.exe and all additional switches, visit [MSDN Sign Tool page](http://go.microsoft.com/fwlink/p/?LinkId=624163). -4. Verify the catalog file digital signature. Right-click the catalog file, and then click **Properties**. On the **Digital Signatures** tab, verify that your signing certificate exists with a **sha256** algorithm, as shown in Figure 12.

![figure 12](images/dg-fig12-verifysigning.png)
Figure 12. Verify that the signing certificate exists +   + +4. Verify the catalog file digital signature. Right-click the catalog file, and then click **Properties**. On the **Digital Signatures** tab, verify that your signing certificate exists with a **sha256** algorithm, as shown in Figure 12. + + ![figure 12](images/dg-fig12-verifysigning.png) + + Figure 12. Verify that the signing certificate exists 5. Copy the catalog file to C:\\Windows\\System32\\catroot\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}. @@ -640,17 +742,21 @@ To simplify the management of catalog files, you can use Group Policy preference **Note**   This walkthrough requires that you have previously created a signed catalog file and have a Windows 10 client PC on which to test a Group Policy deployment. For more information about how to create and sign a catalog file, see the [Catalog files](#catalog-files) section. +  + To deploy a catalog file with Group Policy: 1. From either a domain controller or a client PC that has Remote Server Administration Tools (RSAT) installed, open the Group Policy Management Console (GPMC) by running **GPMC.MSC** or by searching for Group Policy Management. -2. Create a new GPO: Right-click the DG Enabled PCs OU, and then click **Create a GPO in this domain, and Link it here**, as shown in Figure 13. - - **Note**
+2. Create a new GPO: right-click the DG Enabled PCs OU, and then click **Create a GPO in this domain, and Link it here**, as shown in Figure 13. + + **Note**   The DG Enabled PCs OU is just an example of where to link the test GPO that you created in this section. You can use any OU name. Also, security group filtering is an option when you consider policy partitioning options based on the strategy discussed in the [Approach enterprise code integrity deployment](#approach-enterprise) section. - + +   + ![figure 13](images/dg-fig13-createnewgpo.png) - + Figure 13. Create a new GPO 3. Name the new GPO **Contoso DG Catalog File GPO Test**. @@ -682,6 +788,8 @@ To deploy a catalog file with Group Policy: **Note**   LOBApp-Contoso.cat is not a required catalog name: This name was used in the [Create catalog files](#create-catalog-files) section, and so it was used here, as well. +   + 10. On the **Common** tab of the **New File Properties** dialog box, select the **Remove this item when it is no longer applied** option. Doing this ensures that the catalog file is removed from every system, in case you ever need to stop trusting this application. 11. Click **OK** to complete file creation. @@ -697,6 +805,8 @@ As an alternative to Group Policy, you can use System Center Configuration Manag **Note**   The following example uses a network share named \\\\Shares\\CatalogShare as a source for the catalog files. If you have collection specific catalog files, or prefer to deploy them individually, use whichever folder structure works best for your organization. +  + 1. Open the Configuration Manager console, and select the Software Library workspace. 2. Navigate to Overview\\Application Management, right-click **Packages**, and then click **Create Package**. @@ -772,6 +882,8 @@ When catalog files have been deployed to the machines within your environment, w **Note**   A standard naming convention for your catalog files will significantly simplify the catalog file software inventory process. In this example, *-Contoso* has been added to all catalog file names. +  + 1. Open the Configuration Manager console, and select the Administration workspace. 2. Navigate to **Overview\\Client Settings**, right-click **Client Settings**, and then click **Create Custom Client Device Settings**. @@ -795,6 +907,8 @@ A standard naming convention for your catalog files will significantly simplify **Note**   **\*Contoso.cat** is the naming convention used in this example. This should mimic the naming convention you use for your catalog files. +   + 7. In the **Path Properties** dialog box, select **Variable or path name**, and then type **C:\\Windows\\System32\\catroot\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}** in the box, as shown in Figure 21. ![figure 21](images/dg-fig21-pathproperties.png) @@ -818,7 +932,11 @@ At the time of the next software inventory cycle, when the targeted clients rece **Note**   If nothing is displayed in this view, navigate to Software\\Last Software Scan in Resource Explorer to verify that the client has recently completed a software inventory scan. +  + ## Code integrity policies + + Code integrity policies maintain the standards by which a computer running Windows 10 determines whether an application is trustworthy and can be run. For an overview of code integrity, see the [Configurable code integrity](#config-code) section. A common system imaging practice in today’s IT organization is to establish a “golden” image as a reference for what an ideal system should look like, and then use that image to clone additional company assets. Code integrity policies follow a similar methodology, that begins with the establishment of a golden PC. Like when imaging, you can have multiple golden PCs based on model, department, application set, and so on. Although the thought process around the creation of code integrity policies is similar to imaging, these policies should be maintained independently. Assess the necessity of additional code integrity policies based on what should be allowed to be installed and run and for whom. @@ -826,12 +944,16 @@ A common system imaging practice in today’s IT organization is to establish a **Note**   Each machine can have only **one** code integrity policy at a time. Whichever way you deploy this policy, it is renamed to SIPolicy.p7b and copied to C:\\Windows\\System32\\CodeIntegrity. Keep this in mind when you create your code integrity policies. +  + Optionally, code integrity policies can align with your software catalog as well as any IT department–approved applications. One simple method to implement code integrity policies is to use existing images to create one master code integrity policy. You do so by creating a code integrity policy from each image, and then by merging the policies. This way, what is installed on all of those images will be allowed to run, should the applications be installed on a computer based on a different image. Alternatively, you may choose to create a base applications policy and add policies based on the computer’s role or department. Organizations have a choice of how their policies are created, merged or serviced, and managed. **Note**   The following section assumes that you will deploy code integrity policies as part of your Device Guard deployment. Alternatively, configurable code integrity is available without the enablement of Device Guard. - ### +  + +### **Code integrity policy rules** diff --git a/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md b/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md similarity index 87% rename from windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md rename to windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md index b2b1fda6b9..951b940928 100644 --- a/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md +++ b/windows/keep-secure/domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md @@ -26,9 +26,9 @@ The following policy settings determine whether a secure channel can be establis - Domain member: Digitally encrypt or sign secure channel data (always) -- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) +- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) -- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) +- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) Setting **Domain member: Digitally encrypt or sign secure channel data (always)** to **Enabled** prevents establishing a secure channel with any domain controller that cannot sign or encrypt all secure channel data. @@ -36,7 +36,7 @@ To protect authentication traffic from man-in-the-middle, replay, and other type To enable the **Domain member: Digitally encrypt or sign secure channel data (always)** policy setting on a member workstation or server, all domain controllers in the domain that the member belongs to must be capable of signing or encrypting all secure-channel data. -Enabling the **Domain member: Digitally encrypt or sign secure channel data (always)** policy setting automatically enables the [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) policy setting. +Enabling the **Domain member: Digitally encrypt or sign secure channel data (always)** policy setting automatically enables the [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) policy setting. When a device joins a domain, a machine account is created. After joining the domain, the device uses the password for that account to create a secure channel with the domain controller for its domain every time it restarts. This secure channel is used to perform operations such as NTLM pass-through authentication and LSA SID/name Lookup. Requests that are sent on the secure channel are authenticated—and sensitive information such as passwords are encrypted—but the integrity of the channel is not checked, and not all information is encrypted. If a system is set to always encrypt or sign secure channel data, a secure channel cannot be established with a domain controller that is not capable of signing or encrypting all secure channel traffic. If the computer is configured to encrypt or sign secure channel data when possible, a secure channel can be established, but the level of encryption and signing is negotiated. @@ -44,15 +44,15 @@ When a device joins a domain, a machine account is created. After joining the do - Enabled - The policy [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) is assumed to be enabled regardless of its current setting. This ensures that the domain member attempts to negotiate at least signing of the secure channel traffic. + The policy [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) is assumed to be enabled regardless of its current setting. This ensures that the domain member attempts to negotiate at least signing of the secure channel traffic. - Disabled The encryption and signing of all secure channel traffic is negotiated with the domain controller, in which case the level of signing and encryption depends on the version of the domain controller and the settings of the following policies: - 1. [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) + 1. [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) - 2. [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) + 2. [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) - Not defined @@ -60,12 +60,12 @@ When a device joins a domain, a machine account is created. After joining the do - Set **Domain member: Digitally encrypt or sign secure channel data (always)** to **Enabled**. -- Set [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) to **Enabled**. +- Set [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) to **Enabled**. -- Set [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) to **Enabled**. +- Set [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) to **Enabled**. **Note**   -You can enable the policy settings [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) and [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) on all devices in the domain that support these policy settings without affecting earlier-version clients and applications. +You can enable the policy settings [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) and [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) on all devices in the domain that support these policy settings without affecting earlier-version clients and applications.   @@ -146,9 +146,9 @@ Select one of the following settings as appropriate for your environment to conf - **Domain member: Digitally encrypt or sign secure channel data (always)** -- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) +- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) -- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) +- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) ### Potential impact diff --git a/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md b/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data-when-possible.md similarity index 93% rename from windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md rename to windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data-when-possible.md index 2cb90d0766..d27e70e4a0 100644 --- a/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data--when-possible.md +++ b/windows/keep-secure/domain-member-digitally-encrypt-secure-channel-data-when-possible.md @@ -24,15 +24,15 @@ This setting determines whether all secure channel traffic that is initiated by In addition to this policy setting, the following policy settings determine whether a secure channel can be established with a domain controller that is not capable of signing or encrypting secure channel traffic: -- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) +- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) -- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) +- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) Setting **Domain member: Digitally encrypt or sign secure channel data (always)** to **Enabled** prevents establishing a secure channel with any domain controller that cannot sign or encrypt all secure channel data. To protect authentication traffic from man-in-the-middle, replay, and other types of network attacks, Windows-based computers create a communication channel through NetLogon called secure channels. These channels authenticate machine accounts. They also authenticate user accounts when a remote user connects to a network resource and the user account exists in a trusted domain. This is called pass-through authentication, and it allows a computer running the Windows operating system that has joined a domain to have access to the user account database in its domain and in any trusted domains. -Enabling the [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) policy setting automatically enables the **Domain member: Digitally sign secure channel data (when possible)** policy setting. +Enabling the [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) policy setting automatically enables the **Domain member: Digitally sign secure channel data (when possible)** policy setting. When a device joins a domain, a machine account is created. After joining the domain, the device uses the password for that account to create a secure channel with the domain controller for its domain every time it restarts. This secure channel is used to perform operations such as NTLM pass through authentication and LSA SID/name Lookup. Requests that are sent on the secure channel are authenticated—and sensitive information such as passwords are encrypted—but the integrity of the channel is not checked, and not all information is encrypted. If a system is set to always encrypt or sign secure channel data, a secure channel cannot be established with a domain controller that is not capable of signing or encrypting all secure channel traffic. If the computer is configured to encrypt or sign secure channel data when possible, a secure channel can be established, but the level of encryption and signing is negotiated. @@ -47,7 +47,7 @@ When a device joins a domain, a machine account is created. After joining the do The domain member will not attempt to negotiate secure channel encryption. **Note**   - If the security policy setting [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) is enabled, this setting will be overwritten. + If the security policy setting [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) is enabled, this setting will be overwritten.   @@ -55,11 +55,11 @@ When a device joins a domain, a machine account is created. After joining the do ### Best practices -- Set [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) to **Enabled**. +- Set [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) to **Enabled**. - Set **Domain member: Digitally encrypt secure channel data (when possible)** to **Enabled**. -- Set [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) to **Enabled**. +- Set [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) to **Enabled**. ### Location @@ -136,11 +136,11 @@ When a device joins a domain, a machine account is created. After it joins the d Select one of the following settings as appropriate for your environment to configure the computers in your domain to encrypt or sign secure channel data: -- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) +- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) - **Domain member: Digitally encrypt secure channel data (when possible)** -- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md) +- [Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md) ### Potential impact diff --git a/windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md b/windows/keep-secure/domain-member-digitally-sign-secure-channel-data-when-possible.md similarity index 89% rename from windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md rename to windows/keep-secure/domain-member-digitally-sign-secure-channel-data-when-possible.md index 5358865f86..d3e4df1b1f 100644 --- a/windows/keep-secure/domain-member-digitally-sign-secure-channel-data--when-possible.md +++ b/windows/keep-secure/domain-member-digitally-sign-secure-channel-data-when-possible.md @@ -24,17 +24,17 @@ This setting determines whether all secure channel traffic that is initiated by The following policy settings determine whether a secure channel can be established with a domain controller that is not capable of signing or encrypting secure channel traffic: -- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) +- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) -- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) +- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) - Domain member: Digitally sign secure channel data (when possible) -Setting [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) to **Enabled** prevents establishing a secure channel with any domain controller that cannot sign or encrypt all secure channel data. +Setting [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) to **Enabled** prevents establishing a secure channel with any domain controller that cannot sign or encrypt all secure channel data. To protect authentication traffic from man-in-the-middle, replay, and other types of network attacks, Windows-based computers create a communication channel through NetLogon called secure channels. These channels authenticate computer accounts. They also authenticate user accounts when a remote user connects to a network resource and the user account exists in a trusted domain. This is called pass-through authentication, and it allows a computer running the Windows operating system that has joined a domain to have access to the user account database in its domain and in any trusted domains. -Enabling the [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) policy setting automatically enables the **Domain member: Digitally sign secure channel data (when possible)** policy setting. +Enabling the [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) policy setting automatically enables the **Domain member: Digitally sign secure channel data (when possible)** policy setting. When a device joins a domain, a machine account is created. After joining the domain, the device uses the password for that account to create a secure channel with the domain controller for its domain every time it restarts. This secure channel is used to perform operations such as NTLM pass through authentication and LSA SID/name Lookup. Requests that are sent on the secure channel are authenticated—and sensitive information such as passwords are encrypted—but the integrity of the channel is not checked, and not all information is encrypted. If a system is set to always encrypt or sign secure channel data, a secure channel cannot be established with a domain controller that is not capable of signing or encrypting all secure channel traffic. If the computer is configured to encrypt or sign secure channel data when possible, a secure channel can be established, but the level of encryption and signing is negotiated. @@ -46,20 +46,20 @@ When a device joins a domain, a machine account is created. After joining the do - Disabled - Signing will not be negotiated unless the policy [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) is enabled. + Signing will not be negotiated unless the policy [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) is enabled. - Not defined ### Best practices -- Set [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) to **Enabled**. +- Set [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) to **Enabled**. -- Set [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) to **Enabled**. +- Set [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) to **Enabled**. - Set **Domain member: Digitally sign secure channel data (when possible)** to **Enabled**. **Note**   -You can enable the other two policy settings, Domain member: [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) and **Domain member: Digitally sign secure channel data (when possible)**, on all devices joined to the domain that support these policy settings without affecting earlier-version clients and applications. +You can enable the other two policy settings, Domain member: [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) and **Domain member: Digitally sign secure channel data (when possible)**, on all devices joined to the domain that support these policy settings without affecting earlier-version clients and applications.   @@ -138,9 +138,9 @@ When a device joins a domain, a machine account is created. After it joins the d Because these policies are closely related and useful depending on your environment, select one of the following settings as appropriate to configure the devices in your domain to encrypt or sign secure channel data when possible. -- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md) +- [Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md) -- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md) +- [Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md) - **Domain member: Digitally sign secure channel data (when possible)** diff --git a/windows/keep-secure/domain-member-require-strong--windows-2000-or-later--session-key.md b/windows/keep-secure/domain-member-require-strong-windows-2000-or-later-session-key.md similarity index 100% rename from windows/keep-secure/domain-member-require-strong--windows-2000-or-later--session-key.md rename to windows/keep-secure/domain-member-require-strong-windows-2000-or-later-session-key.md diff --git a/windows/keep-secure/enlightened-microsoft-apps-and-edp.md b/windows/keep-secure/enlightened-microsoft-apps-and-edp.md new file mode 100644 index 0000000000..4c57c9316f --- /dev/null +++ b/windows/keep-secure/enlightened-microsoft-apps-and-edp.md @@ -0,0 +1,187 @@ +--- +title: List of enlightened Microsoft apps for use with enterprise data protection (EDP) (Windows 10) +description: Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your Protected Apps list. +ms.assetid: 17C85EA3-9B66-4B80-B511-8F277CB4345F +keywords: ["EDP", "Enterprise Data Protection"] +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# List of enlightened Microsoft apps for use with enterprise data protection (EDP) + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your **Protected Apps** list. + +## Enlightened versus unenlightened apps + + +Apps can be enlightened (policy-aware) or unenlightened (policy unaware). + +- **Enlightened apps** can differentiate between corporate and personal data, correctly determining which to protect, based on your policies. + +- + + **Unenlightened apps** consider all data corporate and encrypt everything. Typically, you can tell an unenlightened app because: + + - Windows Desktop shows it as always running in enterprise mode. + + - Windows **Save As** experiences only allow you to save your files as enterprise. + + it won't use common controls for saving files or text boxes, and will work on personal and enterprise data simultaneously (for example, a browser that displays personal and enterprise web pages on tabs within a single instance). + +## List of enlightened Microsoft apps + + +Microsoft has made a concerted effort to enlighten several of our more popular apps, including the following: + +- Microsoft Edge + +- Internet Explorer 11 + +- Microsoft People + +- Mobile Office apps, including Word, Excel, PowerPoint, OneNote, and Outlook Mail and Calendar + +- Microsoft Photos + +- Microsoft OneDrive + +- Groove Music + +- Notepad + +- Microsoft Paint + +- Microsoft Movies & TV + +- Microsoft Messaging + +## Adding enlightened Microsoft apps to the Protected Apps list + + +You can add any or all of the enlightened Microsoft apps to your Protected Apps list. Included here is the **Publisher name**, **Product or File name**, and **App Type** info for both Microsoft Intune and System Center Configuration Manager. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Product nameApp info

Microsoft Edge

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.MicrosoftEdge

+

App Type: Universal App

IE11

Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

File Name: iexplore.exe

+

App Type: Desktop App

Microsoft People

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.People

+

App Type: Universal App

Word Mobile

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.Office.Word

+

App Type: Universal App

Excel Mobile

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.Office.Excel

+

App Type: Universal App

PowerPoint Mobile

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.Office.PowerPoint

+

App Type: Universal App

OneNote

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.Office.OneNote

+

App Type: Universal App

Outlook Mail and Calendar

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: microsoft.windowscommunicationsapps

+

App Type: Universal App

Microsoft Photos

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.Windows.Photos

+

App Type: Universal AppMicrosoft.Windows.Photos

Microsoft OneDrive

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: microsoft.microsoftskydrive

+

App Type: Universal App

Groove Music

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.ZuneMusic

+

App Type: Universal App

Notepad

Publisher: O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US

+

File Name: notepad.exe

+

App Type: Desktop App

Microsoft Paint

Publisher: O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US

+

File Name: mspaint.exe

+

App Type: Desktop App

Microsoft Movies & TV

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.ZuneVideo

+

App Type: Universal App

Microsoft Messaging

Publisher: CN=Microsoft Corporation O=Microsoft Corporation, L=Redmond, S=Washington, C=US

+

Product Name: Microsoft.Messaging

+

App Type: Universal App

+ +  + +  + +  + + + + + diff --git a/windows/keep-secure/file-system--global-object-access-auditing--sec-audit.md b/windows/keep-secure/file-system-global-object-access-auditing.md similarity index 100% rename from windows/keep-secure/file-system--global-object-access-auditing--sec-audit.md rename to windows/keep-secure/file-system-global-object-access-auditing.md diff --git a/windows/keep-secure/guidance-and-best-practices-edp.md b/windows/keep-secure/guidance-and-best-practices-edp.md new file mode 100644 index 0000000000..1d4c939c5c --- /dev/null +++ b/windows/keep-secure/guidance-and-best-practices-edp.md @@ -0,0 +1,59 @@ +--- +title: General guidance and best practices for enterprise data protection (EDP) (Windows 10) +description: This section includes info about the enlightened Microsoft apps, including how to add them to your Protected Apps list in Microsoft Intune. It also includes some testing scenarios that we recommend running through with enterprise data protection (EDP). +ms.assetid: AA94E733-53BE-49A7-938D-1660DEAF52B0 +keywords: ["EDP", "Enterprise Data Protection"] +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# General guidance and best practices for enterprise data protection (EDP) + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +This section includes info about the enlightened Microsoft apps, including how to add them to your **Protected Apps** list in Microsoft Intune. It also includes some testing scenarios that we recommend running through with enterprise data protection (EDP). + +## In this section + + + ++++ + + + + + + + + + + + + + + + + +
TopicDescription

[Enlightened apps for use with enterprise data protection (EDP)](enlightened-microsoft-apps-and-edp.md))

Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your Protected Apps list.

[Testing scenarios for enterprise data protection (EDP)](testing-scenarios-for-edp.md))

We've come up with a list of suggested testing scenarios that you can use to test EDP in your company.

+ +  + +  + +  + + + + + diff --git a/windows/keep-secure/images/defender-updatedefs.png b/windows/keep-secure/images/defender-updatedefs.png deleted file mode 100644 index 56efbe3a7249f5a3b442c083450f06c03644a7ab..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 102655 zcmcG#Q;=p&(>B`OGi}?peYb7fw%yYphG1!!=kqTlqV6p4%h}w{5vZ(sLi{fTM(O$`1KC2+Q|F#%$IhKKw+ z0{PE~lAWoutAV2lkdFQLKjP5;Dz|VlvNrfD>Il^Gr!nR)4Dk=FX5eURVQU8T2m2`W zF9!af`M(^EOn@H01JD0QOvuj0#>Cbc=xHLk=Pw5KkC?KBv$Y9O>D3%L5OBY%J8&>NEGL1!Azos^?@2D6I!rLo^e%l{jZO}agw+JeL*l%M1kgH^O1ot zjY0<@|4QX|@Ns>KtOOH7Vgi8VF<)%!N|GQ~?dnUOkj#QGSmW?<+x2^UwbRtE>UVeD zw{H3(uW9_7&S$6XXQ%I0AFrwBOs6Dx?i=u*fxY?+7%*TNCfvQn&)VMDct2sl{=rs$ z^L*~${vrE2_D@$I`9Cd2E#$v_449SwnQ9&I9~D0U|7ioeoa#>Ld!AMfdZu~rAFi!C z9KLA(S>vysKV<)-NMFe~r~PrhLNyEU8XI@g;JUTxi?IswuQ?Z478BfeRljMDlek|G z63}(s^47l=l;m`rXGQF;Bu(|_x5)A0Q0;JDmU?qKc7*7=K6uWQi(s*NSA4I&KSofG zy|4Lt?jKsZz30)sV;V2ovhmv$uhuia+xI(#-fcOhyjvbuAI+}2sqAo=Jzt1c4ubGE z)4o~{s%Mp+-=|hAR;zLTF}D^OJwsEN>26VRBr`(po-ElB_kCjJ0LfDtdpJfBll>wxTRF=fE^?ZQcF}@B7@iSR%{&@$8#5$2l1D@zV2*4`Quo z&+^)uRlVlBlj*JWrq0evOAB~ZcHL>lh>E^1`H!L>fG*ILLIsPvSN1du0D!0S_*PAi zOOy)0_IlF`Yu5R4*MsMA^cscjqa${nzfl}1_8Gbkm$_LXrx7wHKI`3j{*hsqJv1rF zQaNAR&A7?*YWoa?Z?Qk%5iDM&8Lm)V2*_(}xZhHhbz~`MJ+0;48w*vWv1={wzw)xX z8XK>3#=YEd?;i0!vHoXYKLE6d95TE(y9zN9NX&2K7kD)H%w(<$@=QwK^6`g+Tk4w(D}LsS2B~ zGcP%N%V|MOtQFVqRWj^#KQBMj@Nhc5=_nNbSyt<(F6OJts@oxMluTRv6t@Q_(*|GF z;`+X1dv*p{yv#5i&)A0Cav?&NN(N4PEZkvP6jeGve|5D#TZyLQu6)x~npf}Ez9&pt zc98;*^w|^loPLLZ32Jq)zN*ISNb_$X%V#79r6p5}KQDXYef2EsUh?649IZxS^QNDl z(zU%D>$&X?_J_jhxV)lz-_Q*eM~m8aSUwAJlv$+jHF7Zy5*f@Nq5SML&EJ*wvv}ut z&T$PL%RaL(qY+OTEG8Ho1^W{1))`3>JNZwx)mq%9S)?iUU2i#Dr_V1NTWhvleSRK8 zl2m=3o<2bWJ}*G=bL$T2JPk)V_`E57!BQ2hIjyn@bVkM6P1z1_HlBVQU-Q{j9K}&V zZ>r4|X}0mG>`Yv9yj@08+u=k1n{~AoWvLd%`}qd*1=|zHjg) zA2S_q@KuL&P9Tc9wGt}#F-A%n+GTO-RjP_}d+Ftu z9DknvLoP0khVvsW@&Pc{M0_?Mspd;R{CEdQU=pOOvdMM8Psy*-kWpSMY~ zZJ>K_$b34q&kQxZ#_s^0-VslG#_lZFt zjCfOqyrdfS{)X;c%kl7?<6Kv?=Z(DQOR975-}`Ua{xbitSS{qrPiqhWaE9OirS7Cr zj@QN0CHCUB*pm(K{cI0xPm^92`-<~;L64o?ZrG$5&)W#(QY78>t(Ips&*MlneP-Pu z>3>;94hoR5zSgU1y~q%@`np)xs@7R2DPIBDc=$}eHF@@|Wf>UfNKNuaM99o*y_}87 zY-c`e=()T)Z9Z0RJWNBsEP~>J{_kC$lJpjLt=oPdPRjrtEJts)MW3Wq@!cGLK5w=j zuc-)s*IC_f=D0Pk-*?Nr*W?7td}0pOohDa&@<#Z}c(#0Qh4RWhtgGQ)+U+KS^RXQ_ zWaBx~(V}FaxuN`ThZZM5XLwYZhs%IhyX~uyK~2?qM~>Pi@@SMQu(k^Pqvu*xxZXSAKOYk7vtRw_DFE|4cWW-_G%L z%TMmAw_5KVzv@gZHgl6WSKR!Xn~!YI=DVcZXSQew#OzrZQhT~8io!nTID5znwL3xS z2<&jl@}T{11LbYjKE~|eJ{}JFY;idl(4zF`d$nXl5J` z-htwN8}Fex0`y1C*<7_MnesV(Xzudm{QnBpEbbK+lj3u|D|1tqSXq3lhjQRB*=LEv zd!zZ|GN{tY2$>(`GPgz0bB{ZVMoM(`)V{oT;z0asNI;KV^ALb2+~AG>od~i>*5$Vp zgbIk6nv}cvR|&)KoLo^dP%$Bi#XuQgjc0#K!Et{`1k$jy7yCiZp+?kN7+5OR8|-IV zCU9AyyvattSgNU}QY!sjRUuU^5^b~p7R|Wl7igLczT38B|PWdVPmI*Gs zvy{UM%U*4dY6kD^IOWaBwZ$xfV{M)r4oJKau=Ln=FjQKLpEax3nR~*Xdz9usa}MOP z2m{uUFmtuSPYQGu%U*d~X72RdFbj+%uwSGS&clJB!OP?)RccL}9~-BCpKu zF8KtH^D|eMoVP#HW*W`TVB2QfryzQr#Od~7cbjB;|CdzR6)hiPoU=V1@dWib7OInn z^ixuB4e!bc9xuHuJ=%A-@Fr1MyP9m4hB>8=JE9$xPvxnZmlT)ism^hg^>%A1?1me; zgBYD2JZxZ!`3$sY-oz$Pn!D(Bg1hGxQj|E;a4o}iWo&x=t2J*am(gsEZc~WCNDb$q zHf%pHN4EQ+ExE?PG0nZph!0&UIDMJRRrUhYo0=f=@I=c{iHjY(j!YVS>NvZUNx8;s zov=qe6AKR{`Dm?~{Q~`ZpwCQ*CtnSIy&LKG&a&@mJSE_g-F^(arpM>uM1cd)^v2ZZ z)IwIr;_sMWzA!NGFt~tN=5S9;bLc;cLsoS8#2n;K{A1kV%bPVqx<*aC-@hw$ccR~T zEvH!ehp9E%-7(}bJnNSI=i?0bLYamrhoUyML@xOz?h!e2q|f2?RkzbQPj|1lHJ1q& z+9O|u*u~4xeaH>b*lOri6bGV`4v#?on@*2_gx#2lv z6lPKh%>8z{AR-(U zMOqFT8+_%sGn6{Pc{y*T4x1)+i9~3{?pO>{2X&P&jm4#h^9A7Rwi3jLFh40w*_}^m z2BA&f&Bx_RLdPsWAVWNkE8jVCfkm$tmE3tv=g#P2)vDFq$Esz%xdw}MroT?GahYWn z$Q*1a8#Wn;5|^w(R1}ev5i41^PO!0+!8gUNB*J$FXbS@>XrTlYUG4Q8>F9xJ9)9;{ z*c_!$wx3BKIq`a@i2S)sMsuR(#fbt-D_J3BwiV1;=K0bX4L>F&{i5IU?+G?}(0@oK zPd71CZzBFGO$R16oUjwryiYh-E+)~WbP|fA;dq~y&2F(#lYBS)WfL6oLt-NTUi~@6 z60DrP&^{36x@)@#pU;V_k$#gQ)dZ zf&~?Wg}TiI6F(S-})7jmbLPh zBq}h|)MJ!Z1Xd-^7>TQUtU}(Y?gZ_ahdbHBT4qbwT{2Udqbey$iEK2Q8dzHF{J}VZ z2l8AZB6T+@G1W-BAp4-+(L7H{C*D$OYkZkjo!IU&u=BJvPLL3JbEz+V4u7?)*-I>+ z%%jY0%oYpQSllnfglliy#k3?SrV{pVoU>%p{z`;$ z?lpmYwOJ^U@gwQJI92K-!Q`W^4Yw5v(8*TC(WV$YZVFtD!4QTJd~2rO6Z3h2P(gbRS&}& z=M>$v2?+MbOa1Bi6lGhN#Po!lwCHT#;JR1 zzXmA*-lrqwMp?NFzP}=iSeKgTK|fwNxjzp$V41YrsVk7eLt@X^?tf6^W0ttjoE6?; z2mo3IT$F2+iAbxk`I4YQO5!HQz^%zv5%tQl@tjLX$Jeaaq?3SigRo$$ii@aI`0|h& zT1)2`Fr!F*nWKi>%g5`B5wmc?cf!rTR+4=h#`CFk=7xMd_eMs4Lh9f?p(Cb;r zu!`wQM<%y9uFVrmofXSsN}d(7B$&kOUWyS;>d{bAkr`g|%K27?z@-sSDE|xskuyA! z1gzOFss~v|j>(7$7G|rg2n4LeIiiagrAE7AU9Xj8|Du9l=Z!yZ$3emO2%Y*!OA=B% z@)jcZPw$)RkZqs4aXkeyEgWqfRLxkR$>QXkrnrVYx@BoBa-&Woo0QEl2u52XmOqBv zDjb49L#jfuFBOs;fEykwt2&?saL6SzB83(iT4ZG>9fL2%PX1Bkfk7p42&0OU58Tfc zjm8R9s_r`4^HCvG4Xw@>Ox=LEPp+ej>Iug4$RFvI%7_po?tNB0@@GLJdhinhcqTg< z3u1lFjxY+;CYXy31^nWDEP94@dF%1?z2#D}_Soqtfklr8G5R!0Xb*GaE0LrxZRnDw znQo0M-!~BuD!0#`VlQW9n=P1d6Rk>r9w14Gg{H>}l}lIhxncsfxzl28S(@Ul?YBOp z>|mg)14cDG?kgfp@LrLZojXo)l zi9S*q;=6R8PN|p2hf_=O?Xa_FPdMsd}yx;w4yzk1wDnw2W2_lK5#LW@0 zP``>b;#;#Iq=B7}BNlMyWGSpOlG0gIA6AYCr9@r^3ki~E6~gaK`AckB7N+7CH_0if zM%heAU0Le^Qst?tI04q&tW;>)NUWQ6aDY~nv|MV7->O?VmN1&wj9Q~GKs2|x`C#02 zHvN`&L#)nMPQWvav@_#{!YHm9Q}BvbktS+6LHWqO&JGbdMiskhw9<*|iQ+GI!OdlP zSRM{)w~lDbkH&>rq#5t~iWGB+$wv$l4P+GzQbJh!XRlI_CW+g7p1!+nlmH&~UNS)5 zJmyu|)3r#&6y1GfXtp|5lZpqm21_4)zX(~h3FEeD$K;qK@>3i=?yvpCZ7NPb0s;A6 zIOfEL-Cw1xd7Q5or-k(AG-65CaedMn2Ntblyts?Sa2eY9`G8QOC38S??06e0>F3D= zE>TLa^+Ffk+AY2rrP{yX&aLgJbIp zx7?~riZb&vB}zRw?{*J^7g({dPZ z9vbo6H_55o_-p3mA~hniD%WauJDOxMHS06k){oT2P3M%}Y8BksU)N1bf`NUCBrYl= zLr1dvYeBOtV+2%sYL#3q8)7gk+DVD%Le=sDaltywWK+j?TR3ig?F@*93U|a6n=+=c4cSKtSrBy zJu3>SXqOJ!Irk^kl9cD}g2Z%I(n+1PC)q$vQ9Yhf6R04|B=5^rQuEIpxN}ac#zs-= zW)WOo9~VmBsoiA;n&DM0bxfl;!-&otg#anpSsT*%L-P&&O^F-9doD#DjE{|b${0NO zi4#{F_8NnesAinf4R;2ZY7>HR#uoI$;TO~im}N2onz5c=q|;MEuq_+TI>yA!XQZt< zT**y(Z@I?h(c><6B=c1^@g}i{`pB#o2qxrNqF4K|bhxDbR`~g?#h`rW95v~*5klC? z@ac2JkYnc*kpw9Z*a9m}}V^ngrXNVrz#oFA9iFLw;Y^_7kv)LXq z@o5uuO;pkal=PT#PG2dmBEOhy=TkE16|`5>$RB7+6!wnfhXCa7U^ZCNJXC9FB>~O= zIRR;5?d{gbc1Kv?7Nx;eGh#KuWljn`F{R8sa^ra*2}wwAjIqdpO##o^Lo181_Kx9V za6R@(`U6F`sN*uwSU0Po;&|bzPx#$fh*f~Mp2Ou;%3?UUpfD5l53X;jghlyPv4o(} zDjSil(;6nE;;`rX?Qe8yXhjN;TZ^LNLSi zbEP23&yGiy#R^h_&Fq7Mx*r)YkPu_XYfOkJAGR0_y0et9|Genj<(H7z@>HsAbeC>l z$}JSPXU(@P>I;33RMx6-BD+_~55lxi)uYvg^DJg_%#PSN)NzLC*~R_IBqd=kwXclz z{AOl9{Vo+dr5v?(_H&cottIuI-|>&VjL`u$FT|8?^V(K!Qct6aFrm0=k8`J|Y)Ek=Of>Zyvlij}QX{tLms!mrvaTdF@A zkhU9mGux9kc=YF?E2KaYb>T&-vgXUDZZseOv@Oo|D%=-d(u*z{XSLx(59js*x$&K*)ZjET_sdYx$+Ajs*nVk zEAA-TEpwCFm&;>pWyIP{d3<53@*uwQ_{?8#mK-r@ZXcY5L+El_jZ?geR@jAu(OBc4 z_8NG?pu(s*$NtUA!Youl`?3Ook^_|k#6`Q{yJP@LcN*5=I7IF<6(pAPQ4qBgG-Q+K zIL40f0;Q_aw_Lgp<7L~%MQaBY>qe|Hb6R%Io5~Sp%Ux2)Ib4~E$RY8A9h^TD)!*2IlMmf+8KbC)$N@kO0iZ|!g`5#$FsC;+82wpL;Ru+ zTgL4sJk(6$mvw_=EFRaeu_p;@j?r%TRl4HF2^_OkJAfGOYGIv~YF9k8aS0x^&*#Nc zjVG8(M@K952B|&?w>Ig}_B5g=)8A&_w&HOwXUOYdyHPppl^@OOgiS9h}BBI>s1kdZYCHbS;Q03k(O{t8GYR0PpXYlC_09sbHsQc42Q zXxfrK<~{(Zs{OHhF^Nne%19RJ&-}dKL2(52AmU#FyCaOIBr!MoF4f0d*Q-`lUDMCJ zS}YsyL6y6c8P8jvTi4H--b=dg4bt1lq|9H%zi?A4&vD_yuG5Uu>fujOWX@rZ?f_n^9c53$OumcI8gPS8px&s_&ED|QA;qtJ< zaq%R}>=g_^!7P~0*R)d3>!5rFmJ&&q7;lW&j!PLTkW+cu+s_t)0sR^3sD`nmyN9QM zu0{?`H|GQZ_o^__s7wFHkr4cffUno%U6_XD^utPZ0#^hKZKDLOfVkL!fIvwL$`SH; zIFam08c*kl^UNw6rmXczN>Niqp>lb*MI-my4<3XTE+ZH-HvQh1Eod;=TF=$G@}Fgs zO&S|lw~PDvV!5V?mG{~RBtw#1VfJh6;lWB=2Bx#PAQS@-+PYph7jdMu=AfTWG^5onvtQ6^25T(+Vzbt~k6z85A%@)<

s)wXr|pdnQ9Ug1^k5|0+vix&?j|m=kCr!-XK5l^p_m|595lH#9%+FD{Xp#^ zE?Mg0Q>D=mmY5274h!uz7Q4A!99J7@*@~)OV5N>sNkB^3wsm(OVHI7Wjx!RTa9E%V1jOIoAqIV|S#9H9N-36r1N-fr0k7Cc>5^k^313)N2eO86nm-;V7I!?h3YfohdbL$Hp-=A;|ZZ zb8CtTGXN?4Wh|_GWixmmHn=@^U?7c;v23aXe445%JcoC9$zD^B_RLMn2;cy16D>Nb zso;m4g$A)4^VK`J{%{9cKd{Wti8KhESM9xGj4{1f@dKI^(@zQ(6ADh;14ghzM;cpU z?HUj#VV>eYb{!TPlW+YtR+Qi+)pm#is-sr%l?&#D{u@u7%roYCXqM^+;VOfB>yf>* z$n{XYD3_<~Ek?dv$|q}T2IiuVsBnGe5-rBbV~{cnaqsUo6~*FvePt(>f`i#i*qNog z$m|y6+{JbN;Mj2#5}zflBbYSjQphX$hz^M4BTk~Dl z)PU?i_3KtUCIuW#B4U_r;-jeW4kJ)_3FUA;BkI(nBfDcPdO4N6MlXo!YO4LmPs%>} z(p03wzn5@l@@H;DB?}CE!NiG2aUJdNBgKXda#h)LX0!EHb-C}aHB)Mkb&ebO`*=`` z$n?S9GZA_h<(e7GyBh}bX%E-e$u?c}x`BT2xjeCWlx`_`_|YD5&Y=L^73%;$$)HJO zp_xq3ju&>RJLqP;nS(6ft1lEwk^7^W#~WrymxWhC!+zb44f%o7r|h^G3j!ss67QQz zSuM-Q`u*w`ZkwAAQ*Mr!@o|`E3<9f*-g|hTYBW%EEH*?#WPv=Fo$~V!^*7NeV^lQ- zs@rDFCGTwD=gI~}8fdnFtEWamjOH{>KAoy0;ID}>IPzotIyXFGfoohhazZa7U%|XWDW2zM#|@o6G{_zh6!Fh2pU-IL zW9OMMZ|Rdf6{EFk%u`4dkL${0Ov_jFbb4sPnoBYo;rs}&d!%r%d{`Xtpe8|c+-6!p z0Naccw8TyLxk;%d&~*n*?K%|?`rDK?7ul0HU12kA1;u}2@*LfP?Ht3Tgp zsEH8>(9oTRj}cluh){KB_$KvKN)!lk2e#C~0>TfozJV2ltsP?CWg3|DleJ7?VM>O| z&oT7$L-uRq?cf+zT?EW$jXrz5ZZb|4<=6yW!oRQGQ5jjLm}A5l0Fjqj>=-30GXW3${)IwS@IDd z6SEezgZ_nN=YN=^XX9BUw$Er4>^)>`$>_NK#1t~B{dQRdKdq*?$=r)=WD8-}q#6*) zkQ&Otrk{e6ob(n zb)IOEeshRM$f6_H*|41JC>P2qyIN>nhV>wa=30qRYNiM#pS>vyMy`eS3p5=JBEw}~jsv=b1TJyl-GdK4^kX&a4jf5g5oR+;s z8bF|!zXKB!dvMBkfWh+Bh4+tj310z;z_{`aq#>QGK_YKNWldiQiC`3*LD2A-I!4CN zhY+gGQ1DKZR0{Uht!tL85;G0~`(RDXw-OmcMFkm>OJ^9y9?$GKAI&McgDT)CM2nK` zZoO+FbWyPn*^ib5w?Bu2f+*O(ih82SH%f&`qb7{wokfWo(faD%di0V6Jdf-;IT}HP z%N3WAc+C&d^!!da6j5cZaW78X1LI|&HyGkyEeGPoPFUtbYNQuHR~b1; zEQeJ0Ns}}t40^G2KhtpJS(Q{HZF-IbA%%q3e`*)ISw*I&ixhP&4Ha^c<)N06rhi4) z%gi8KIYk$6WR{ANW;i!4{Pe?zg$HgApOmHLrrT$dhX5fhl~XtVMQvDWvAnLZpc`=Y zvo%aGOEhR0|7%X6R3-(j3DTq^Nmcf^LrI39gsWZ)VUHkFoS&g~7Lj=}oid+nsr2uM z%nO?FP`LV>`kVvF&kRu}DBEnDBK8XjT2jP-2r6BH12CwHAbH941q4#{Oqz-SR*vO6bOSvO!ZUr)1dKShP?>WNgDy zy))u!f%>J_wRh}%z4U`mwf}6AKvj-K)rKO=!DhBf3f!ER2NFpk6s}h^>pw6;0)rY1 zZ%3A{gr(Sk&1eAH(1pthILbP}M^+$5xw`zc%*{Gx`4vdL!IBbTN%%aLFn$f9OQF8* z+^faqD9;6&`DNIyxn&P8<)crhp&(vzX6cN#(>qbao)jl;WmmC#+DfX}7z-4mk%XL> zfQcAl>@hTg!uHOSVQy58%*fYSA@1C_A))cJ4h<%NSih?GSy;(*#q;<^&>H0B?2;cfc=whSHlw@Vq4280s;y7!9Z~uj>_QF5 z#jzpEP6)-}Ph*zdw1j{w2;QpO0e--WRes=Rn+3JX&#OG{lyt9K@0}NwSc1rFjEA&j zzk;V{ij2jD1@U+{LbIEPm1<2GZ=!}C2djU*@b&)Y%kh3%4J;$P>bUNf^ZtrhSJNXu zgNjdztmcnbYF%^yRxUsdP#&s+<9CV<7%ybO=P|~DYXWd*O7Ym~ zYjjrTC74;TvXgnS5!Od2)#0_T_zsG`w>ITtK~}Za1eaFg@?sfTWWMK8#_g?YCD~;({fDd(t{Y$Ha{LYu-%>$t54s zxltNs8vQu!3~ftHt*It1Mt#f8r8S2r#NtljhB&*{=X|Ge6G>mY_fIeD&W299=%xHp zWIr1uu1Q>>-**;=O|g%c-#2Xz+|kDP8QZR?!K!orx^cV)`XLT#`q<0Va1r>oPXj9M zM00x?_SYe{oSoirom&PPP;WxahOfBY;l=0Ya19@^zyAiOZnP8%*Cv?-i_13WY;AXb z%Bb0#n@0_d+OHy1d4|pGSP9X6j1fcI``h+dWK&&6XTRN5n*j4=fLpCo&XDd(6~i|4 zI}e^!6)3s9&?ijP_JukXeTOCh`Lo~cJT*f4$Oav15m>zsovmsXScF{tNjlg0^YZ;7j=2n0PCF_cYz4nF@1lpgUbcw6LZBov$|1o~pk`k|xSljUwN zbCY?azdqah>od9>>zq*X??;NUV&9iHX4O4D`E&RymW~diU?sOg2U*|G=3n|7Rm*Cl4R@HGB0((0Ic)Z>yZ_C zpn*?Wp`YhO_2PwDm<(%y1Ysu0N+W*`H2QuYfVpbjv5U{X%F>Nxyz#uD{l&b~S2 z#1_rtFk0S{vfR1|!|;VnaQ_JWq8ivAdN9t1771uesonI9f=@1BOGI?Vl5h}z0% zFAEi39q*gXlOG2y!S-3208;Sjk>nJURLJbF@+%>KVok9cdW@85kWYh;w0^@~EFZYf3*$ zYA_<0&zQvfrQZB9(dfZgsy5r77+b4PmRgj2T#}av9MoBHr*yWntd8q9vUD*~sCJuc z?=G>6GcTO5pyuw4gA7brizv55cTz$zM%_|?F&9F4K2EUsrr3nxL-Tk>IbkLw%z7dO zFmvBkI_7QHK8nncZR}7f^hx527^u*X$3vo0i?(BF`aB}qUGIY_9|VeTs~3Jmk z%e{(x$4l43M=t}mXcFA1QOo_AB)0H~F$^&g5PGTFAu&?Xu*z1=I!Y9qdr%ayfUmY%fj9|*bMgRtC~pNP4*N|Y@nssab6S1U z3kf}+vem0$zmJT=kxqRk;Bu;$dw|BBz?BORY|K%Haptq?eC&co59ybtt~MsFEiqX; zM)nx5XoIY!gyxdRCB{YEbZdVM!K5P=b4b{95f@$s}y&luZgOMDr zcQ%)L6wkhGEKZ^Umoh4BxU`>;akTU76+Jvp;N6alQuTsX{ZZf9K@wk2D;KVz^g3r0 z2ijngn&f_*fzk6zc5b)EuX|)uoRGAgz#o9;eS^>?1M2Gjx6a^OEoYL ziV#4;!(Alc z+~}9R_zPGKjCA<%bWq+9H`pVgg?!vmGTg`9P-)#P&EounYM#N78r~XV#4_Qg&weg*_g9W^i_VHr* zXcA^6D5KKvTrx-~P+cr9esy7{nQ8*C4wmo7`V`=i9Taj1&vp6AO?#yM@K_8#e(oQ_ z{(*%2aI+NhR2E_i@~>YA*cev;o=qN8zm)_rxiygejlnR?3?oNC^p=|XTQ(1#lPTsW zU*(TeQI?i+KpHC6sUs=cSM;pG0|EJI^Id;jsm$79+m<#ZUlv=E{lq-;!{#Zi_6@BZTt7U6N!h+pKaFSJ(A92h@YwFLHAq`1mU1ZD!CC z=PjZ7v+C}T`N{7spYye0KHu+HPra|*qz1O_J2U)__vQ%Kj1y^V9{4fg6&|=(n3$-| z#}H;h%^I`~l?N01>ed?EaZGuMx|i%25G8o3aWtGD|56^Cz0)$sYpIArorx5&DnFU_ zYNj22F_<>+T7y!A@k=hDM0=|ZsBt_dFUOI(j$0o18j0tbAtYNd7KvxsRp>Q+6n@c)hk6%HvJW z6nWIBlxc2*)<~Mq18!Z1UHc@*@;V>+i*iQ>Zo_H}aJr*EN>+m(KX__%CNmpHnWAKS zFJsjWx@2VFdS3A{AVbk2gi#emDJfm0Hf>VvvO%3yO`L3myl3SDAs_1jno!mAs4$oa zQG}{pj9y0s%)#rFhG88mKrurfQoZs*d0waBYFq7ZXHU>m-;?OJ-zz0-J>!ch+27m8 zJuROHlPx-}FKytB>Qm$h@reaSTLFSbgsFp+nnoahP=HHz4J3W+9%7nO-qs2l(*yn- zm-A!a70D>hs?>(3ZHZVZMP*ATBvrG?;IQ}o=>-bj1tUVCFQNuCw&+F4v@`ULS@r3; z0J~}K%+}zFtUCX}zm}fcbQ_5-mUxalNYYH`V%^z=YqRP#g`Kx%&vjET6IOIL2!}fQ zY6q0HDojKF#GxLf#m0P84-r5?z$Jnf=qX$tR3aq>n-OoQ+cXR}AdB&hDB z$hTy3EmdRf+=a1`9!NkI?2&;@r{&F`8GZ;KH5(3r+Aqpta0thS@$kZ~0GuM?G{wj5 zZpqHoWL~DlXQw$LXY0d&nD_H*4ZEZM^a&dM`w4jS;a1-7u96kQC9*&ly%#-Wf9GJ@#Fp-tL=(mX^~omrD-1rZ8~1vpc#?n;he$ zd)v#XZ}QN^PK)%c;tU{LbrUiJ$)Y3*75BS-XD;ajx=3)@4Y1zvMlRg6s%9+$V$Apt zhR5-j_Pw@N506+%)?8j3@C8g_8g!OmJx3S3JR3c@COVPlha{lJ7OdhbRJFWzYtmnR0QZU)#|i5bch*{69xj6Vr3R7i5V z6wGcdZ)?*@2LE`7-s>4PpZ6pAww8w6)b?kvOb#3psH74%Ly9}g;Z2PzbM?h%P5eQ( z6G-&WklgOl%ilv{*LfrtYJJ&8OMD%6ZsTd^`0b}>;8Wf1&jbu@03YW?RZu-B2x7Op6&FQ*~$d^RaF|Fxj+Bxyfb)02?*2P}R zj~7oSxn1lM-vVq3y!N$*K?vN6m08^%=+e^RXeKCplf?Uk0h*X40e!|rr;F1x{S3?b zzHOSc%sgX}et}cCgd;SAsCBmy@?)PCkr0EF5tSTsPJceat&q&Q4HA#Qf2eBqyIX|U zi3A12y8nTP&B?QB0G~j|qjUhkY*D@NR<&^!c;X}FyL32UGBvhPJIDWftax& z(v(KtQEXuQ^?s|R`+YLm^LpO%Hr{d7ejd$r#qM-8abDB&)dx-gadG_pdCs=|J#KXj z3uDX6ISzXQ%>j0pS%E4-wjM@M z+cBS%vX1=FBpL*UKMn=(6}gU-PRCNq%BA;h{z_s-)oi4)95KL4)o4xvsZ?6KXtd7UP4EnCGBWyK2_pdc8`slIKi8ih6m&F)1 z-|m;TcN3(^z_~L?wr*vo)HYE}KdXe)zJw?qF-B&o6m6I3D&zT4D`0`+%60Os=QDCX zkE<=u>#qALu9okkx5xA2sjT&n-9dCcudB9WpS$tpuj4hb>fu$=_L2AQ6iJb{sbR|n z2iG(E?&NX(G9$IE0%>BPLwrPP4>N<+hwlR&i&_;GkI!x(S{Jqii#+!Un`|56-xdy* z$_qbX^3fD!X$b-0v68EP`jRYv@9jn81xOdE`aPeJgpb7JF8To!ivYior-i{3{){B- zQvQAs#ne%=F3;=CO^myLzoaT9!_Pl(ovZIYY;tp>sr|?bD{ESvx zG4?$^KprCf2%?&!ToG3EM6gP`v%EG}LPdjhjH`VHXX6#@(@TCELr);&h??UKsV6H1 zQIi&T5S~N_t!J_XBQK&V7e#%xhZ^S*948JQGT3L1+_C+#F-#<%*}U0UPXh5 zW+n-NCWa&r;=fa+Q-olQVpw7-OVEH$;`O`9y@C+Jf{bxnjTjsXvKJ1u+4*~Qj(#5a z_3!a4pc0Azt-d;QE9q7U(@zX8ew;#?9uG`nWePUX+^Z$9RwRxeLY$a*L4(qs!-?onL26( zNGX#${b1u6C022`{|%C68qSg8uwtO;py*xWqPOihPFtnbveja@eX-i0R;ga+`~79R z*{&`}S^!0oX2iyl@|+1Z{CW z(xPW|Z=WfF?tL;r4khKL-1-)B1ORyubkCLSeUV+4R3KG&F~w_5kZa@D10P@nJrXad z^uufhjUIZ?iy*i=L4=t>3?=L2yf9I@7p=kt(P0=Y(6l9#eTZBfd9*Y}5l@yX7%fhx zWPkhzXJ{gA1JZ7;D|F=N9XT>(ic>$4LsX%6XKg{WKq-L^xFpP`68P{a38b+KWNc^Ib`Wjty}nwk z_a-jgtZQ=;|1=2f6DjcR<^{?FV~Mh-V|Yp%vFmOr8q>AfvorUmC#O%a>@JhCK^}^P zr?ajx|7Gc(#O&<4R!h(NR>z&i)%mt3i(wRijXLX0b;(XNU7=q0P<1K-BGUeO78!-9 zsP)M#<~WPp-Q%>DxBd7`2AAvA$K$eI3_hRF>0D7#Qqtvmi(ZFI6{s9Cxoo45gtzx+ zr~AF`_Uc_ijjX9}pUBe$7{;;JJZrs+x^>V*gWn^ z9)BHui}NM#k!OfD-PLIL;FUUI3i~tB*8?J_%jM|&S^Guj>tLZJ3~OED{}A=nVQnqV z!)>urv`BGxFSG==A|*g@m*O7Wog$^UYj6qf4#nNw-5b2P^U-_n`}>|e`RmM?9pBlV zvpZ^@^z~r{DLe&lzVZIhQxcg?L6+I{Q~mZCWfz}AADlkX^3eEdTI2bBb;JFEl$WDP zScG$?3}Eqk7GDu$5i*at(iNQ~O`*a8J>-uZ6chbP&H)$DAfrh0&fhdRP?~a^9_MQl z;!@7B`S$>%nsQBIgjv~%GG~QvpQQ$}w^ZMd7RZ00cJFdbBAN~SUXA=f+s|b3D`o(B zIH0MA8{*99aEHr{Em6D_QZnQPHGZZ28jFb-)nQmJYAb}XEor5Z0S^O8rj_Ny8YrT} zINGLxjFc6+8aw7Nmwu)EBF952ucorUb?xQ5?y;qHivjbUkzgdApdNezk z`sA%!+x1j2+tp_(r-UQ^9?6O^>4pGDeq&ooxop`0&ys+?k4lAOjNeHRw$;XS-^aCV z>+j_@l)&PTh-NWYwqh75knqT7K1n?U5O_H4x|%V5d8Se6JoWT0Idb~4!<^vdDg$;M zUcH+r_7##Poc831mM1DBh}ez>zDG^|wOp3YM#No6%2Aecb7KobQv}t3_;$Q>W1LMw zb#ok#Ns`mF$)>AsnRHZE+&p?n9 zU!bKR`yklyXE2dyE_E7l&N!^7$4!oStMLsW3(EdGFPvsX{J?5kAX(BMRanqSatxT~ zhPzIPi~#CFmvz6B?VQrM-oO;KNkSgtqfMNbe&|hcKw%0tmTZ2MCy}MW{>ohShvy{WtkE(;f3!h-CQTlrkm|P7)!rW8tk*AdV-xl$c@T;F z;5P;lt$9VA-3_B7Dp^QCQks-=Ui+{;unOP92+a}r>E^&`J516%4)|ar;TV?HOutnbC*$?7(eS+;5FuD~g-YdXD{dy{ z&%aKGD|#*?teOloink*puV&Lyj=r~qLRpeqKp#i*lXT`TVXiAqbAdrOQ*uISf?jtA z8P4}15Lg|2LsYmNi-~RWWujDJ>?p7kZo(z?)@4%R{yAU^9bnuF3ZDj$u*~PqdBBqy z(y5xdWJowoa&F42J`tD~U;-HIgu5+-uhj!}E^v&(ZA*rb6;qPJ&(cEUtqja9TQhzt z14vNr@vwU*zQ?}ic5gCI`K^oB>O)I=!%-T0!v(2(C_ zHhkyX}hbl%g+^xPOLChHi30>;q{DYRw^9)G23l zE8oM>d4|kIrNMXU0%eL)$M#yiMeoUrOg&)Q|C{TsTIfN!45N!jMoQiG8Ux!Ti)H+{ zY>m}j8dJtmoT5Bg%jE&EQ1~4y@ets#tNpx0l|;>Zz5TmJwMoluhpuNgE(a%YBu*SY zo`b!Abr0=rw^5gz$*-9tsSW#eyUzD)lg4sVeH1#%gr*1kjEst58fr?SEgot&Tn&}n z{slqo}M#YobFxpHY|ov}lZ^PgI!xmz|u{)0=8es2qfVB|U*i10N= zdQ;iOk-&+2(M4qkMyd3glBPZPBJ@I-On-iR0m@SZT>0FmNc_pJB-E}QgrUI(>D)=T%j7@Pbo#8R0IW|^?}!to@T*;^9(~1+ z^XZJ%r`HP@WERChe1 zM=c;F3nv13EIdiWrH&Q_BC*Qb{SI;(1fH+Z@BaC|F4=my!A|3mmC6-szNT8hSvCrG z)?On>uvEjak|w)!F&|l;;-n!RoR=xB`L#FLk#7xQci#DQ7H2J?o8EEo z1C7W8X$d^g;g3{m_P8^WagrOcNK8u^85^v=ZWyKWT`-o_R?>uiJ;W`xILjp8c1vHW zLRrmu`R#+c+E+Pwz#FC`)Z3y+(q5w15a{rTbI*GdNL3=eaqRLEmYA|Z630VaClm$l zsW4WZP5H1DElnlYs%UUDthWnV6=aVX9{mt&1Yrz~bbZQ_a>^x&OyLJ-Cs|e>Q>gt} zpT~yJf-Vv$0G^46h4J}SQSZb!2HZ344GfYyEvR2_3Nrg~!S8cGB`ffQm3n5swVn+M}LLgsG? zoH3$YPU#e*nhN}!k_9pk1yrRo=RCBwQ#erSCLc_l#=RWy9(SDUhM%A=)egm;k z?7)_pCYF`@P2&q{%V_p*6h#Ka&qHO1%Jiom?k)Q}pzw^wKKZr32)0z2^OJ7jR*f@r z%UELLygSAeOjI@_B6*p9C3j5ZjQlI9fPAwD^8Gh zeF7e<1Ng@}GkTB}@7W@)f-yJkVhJ?wamsGg?R7ztEGOCeygcQ60MiJAW%k(n+%ocF)Kf)2<$e9NMQOe)b zW*I4qxAQUi<&ZmS^?*;%3r+GRh3zTL-*!0Vz7vn26`p+iTDa<=W|s{8riTCy3B6mV!D6PUe$D$n#j?zNsg8y9;lxzU zdVWpg8}+xBh~NczSx8Lu40$gE+b>M{7JIbRyN*cYS!KgB3V0m%j4ikrc%-GG)^RkC z-E4f#`5IZ5*M%_lXhY&OK&6IihVU^g&M^Hx+wk*}8!6yDtil4_ONx4OO!mPL2|)7R zJkAhuIGSSbLgfjezW0~>9i=~&oiRLOPB%FB;X7#U9b>#9gjUsQi;z?LO- zb}Fy0^wc@!*54!OZhQL1P_a4^_-1m|`hRN{dTgq-m3{>m( zaqU{jeZE^{g-x^(%`W`PXCMg?LC&Np&xc!9nH-!X_MU_=L3dU2u|TP>eBmjQo$N6R z0i^~@?T6p{Z>#xDj!K@enyym_)COmd1W#6kiDgDX$Ie>Ff`Jl3eid~^ zEj*Nn@UtO>N^;z$o~@BPdCC_dN57=e-o|h}sw@H%+hT;X_eo$b=?(*%kYCAD^9(lD zRVWT=u9R51F+Vd`lvt3}D$KuGJ!=Jp9jBMFsD#?6bH?7qCCn2Y$DTje{-6i9MPl32 z3+b7v7e~m3Lhr|Hv}~m9Su|^G+0=cc4>11j6CAHJH&4zlH#+FLWjK2;D5if_&y`jc zT37u@&dnt*yFk??M*vV2C@qvxUh(|%z1Hq$dp(v8 z=*62<4)5-I69~06)(v8)W4R2k%XBt8zRsNi41<1hBzGc@GitA_j)HhdFug(^Rvn1K zw{pW`;rMz$LBSk_GpqpnZb2-0EQ_oOa=dXfS>)09?FB11Htus`C5{pI|bhN>AL|mY`2l z60Q+Lw7;mJ&5MapH?2}=w8W$;s)}8RkDwt$NDahYC-ox1(bw2UzrKc^t#XOX`w{y2DPo>se&fw9V9zo$+5R9_?xyF6`Df5@ z-affab(i7|zat)oHTBg!-eOHGID6_t8gcL!uJ;g)o-RnB30bPk;uIH|9UeSX$jOYLi|jNb1SKQ^;#=XGg}c#jW0Jx*~J1wT)85$4~ronB->GPIsEj+Njr{Uqr^#7jpnmK?~)6AK12RR0V<#8zt zrnuAD@U6K zUdgh-*4luK2i!!-GMv2Wn%yv{HEi!U@G9Ox`I8{qL?ws;>_?`r-pDnuO!zB3QYi7X zYZAao?{PP}!c1fY>0P8>yTB*gV%_-KeZ=4oiXK$!I9##&SoEf=im+!ic1=xDvPxN- z`c24qL(kO4@3b%1emkVj)YFl@#zir~P$Mk(yrMIbVzhJQMB*D$$hZ-|EhcUl>9qal z@-B+i?+aP^BWNa-ywWV2Ni~7VAT=zgjE`ii%DFX+=)soq2fVbHvl5m_79v| zL+QmU9(Lyz(@@dy3DI7^0UlYhCa``(yjxhSdm3o$4VW;m^d;8-&gi`UqCmwar9$1; zZaQ^YuXKNLmDe5<#-JKJ*ZcUc_+u-arrw4l7M`ur({4?y(4oDQ(!sn@R?KCSOr74z zs>`aI>E-@REuYZRuky#&Q#g*ElTIkI>Jmu0RNCT!C~CVN=EY7bwF;Dtr{4yu1nA_$ zdLIN)EE~TpZ3Er?WM`I3=Opp4ug#R{Rw~gTF_b!0mXWr!E9`KPH&#kc&TgNju%6Nc z6zgCWmzKz2_e{-hE*uGI34?l-yn%LGIYh5Fa0#pUg?r*Qf;_H42^{Q1!+K02rH3%0 zglt5{pH8t6T&;J0XSS0S6T+maHg>H2GBdn%2tk{o9v|l=AJKq|)UR@JmcHXO@x1D? z3BxO-I;S}H7>D(J^GA4Z?#^ffuirIZt>$?g|DFeV6qRJ`oHy%iC$0vG(x^=*{UX+k z(&R?-701Pb3@vjSzKsLkru4C(=9*f`rMH%9fo!MLnTD8io9UG?>`dNWhO zLQkAr^uerH$XUfL=U~@wy|@14sq!Z6SPv4iPBZ2wv;>Dubm7QD&_x5* z+kGX7_bhZE->Ow^&Bi+*TN|K(aug*()yRbK>cGdV`dAIFs>;7RLGX#IE! zvwQn{kvoEne$Tk=0-IN89 z!{>Fe&)^|4y;a(Q9^k)&`u-S#_m_-@*+&5+m0OSsQ2H7h-}i)=MBzd>vP)*{ zuRvUX{>qLBMuiiMO0h=tec@=TYWn1w^K>F(d|KzM)*mg~2rM7Y7Cfw}bC1(2o7GVp z%|Y=@P&YC$bSEhZcf&q#kRBx|<~wMA0b`0K-R@@9HtrtP`*wNX;JCEJK?R9P5Huxj zCmjcXF-bg5s>MSQ{6&48gw-l4^F&h1*-oE9ZQf=N7#d7fnf z|LsKIyJWqu!bmne=@$gU%?S*|;PC8u=DS#*9y$qWp$`foc6LqrBVKBG&W+O5b6NWB>NWHli{R zLDr^8HiC;`M63GvG2AUJClRj(({`P8@DH{m<(j9<`@26`Iqc4&2f|6dCs?c~z4ba& z_;IUO%KUza>)+5x#%Vfaw@+S261O`ULdosoe_;8z=UNp0b?duMjS;Ej!(+ul@iVj@$&mDiHT|M2OX66$8+*E zy>j~IVqZWj?MW06&cug{ebAd{uoo)%l|HI(`yfu1FQ}|IP&ref5LLNVGJp6XT(TGS z&09)h&ea5Qy0q?lDO7#=;qS+-*b!<#?kVI>fJWl!AtP@u&Bj+O0H-=OLlNKGfV^`e zucdeX^$q!6;!fRSLpl*kbD9(Kj!cx>500a5e4%dG{WCiz18!MQE3JINHR%gWeu^@Y zxRBH2%%(S-AM7IGb*kreO5R7CA)mwK36c7e=^}1GH+=jdN*yIyh5Qrz@=9=K62x=g z+8L;5EQq-{-t)Ok;v;$+)6w~XfSbrxbTbxI_9w*g; zo~!rIU$*a$1@@NDoyKl6YG9lN zbE(Hi+n>c;zeR8BirJe=FB?gDh&)Y{h<3R29ai2)7vPzpKYFk=Rf)<;Z^Vx{M3 z8m1)|RyVV(ut`(ap;ql%%W@Zy2MW6sFuXKt;+aaI5X=E9h>Mk7~I zCmmSS#PJGD-CZ`g^!+~G2$Pi}Z|hk!eS42df^e)HUTA_9Hzw$OORl zGXR?Un{uj>C(J3vI>yCNe3LbGXh&iZW4Q=M9&N(2NV9k$SG~*F@whnB4<;Q3Q?{9V zJngbM|CZ!kN+iv= zzJSKkzH%(~XFFefu#?Wkh+Ux%X_M_#5>tHw`>a@Ya3cIcyYN-iViIn$Onqv*w!@|- z)lv{m_DeA-T?~pf#7!%?sWOJ&fGH2MW`eu)o>Rz*7|RWj`XlmZvEq6PhALN^{-=`9 zS0yi2#WK~5?3Z|_OZezR{nZCJ)_FGei^fSADxkroG+)vL+g1 z^i@ETknzvi)-8+9calvt!9v`PmKKo7=oL^^Fz<1VT?e|Kh=D9{%E<$n$@qV2=X9!TLq#>c#+=2bDO4+p$ zY#`BTEmCu=1-eB;2<%&a0LlWj_1;66w+>hcd+mX?z(}h`_KDGod)(Ecz$Cf}ag)R$ zCKHXjVP19y1<|8yG?I)>SKQ`2H6d|`r4ddH()$q z$hX^Q6C~-)Eay>NK>MpmQ(I@~%Y_U5nLgs&LW!F8>fL)(1nPc4Sm5up18@ojsz6!{ zd!sVQq7ZoKQtF+CW?wEldz+^IoG>cSuHblFIQ{v)SYpmD+B?Mhca%_*0*{(Asmy?} zA>?U<5vCY;11m z(T=3?z5CW7@3&W@Z$#aEw5~a}K!#r|&EHuH3-9xi9ex6xUv$GsyL_vGJrY`3SVEj9 z+W?C-p)rnY$+rL)3FeplRT^%WQ`w(i#HF^aNt`g0w9tFn`ncuQ42Z*WMO@Yr0}JL# zmvpM*-AJ$5Baf`Q!l$z4C#*%Z6B-ZcV(Mvanr&+kH=*%CV?uYd{fkk{_@5e@4L=4V zoCU0^0t+$4iHVDLZHnrm771RZY=}?R&LRXZBP_c{A?h~a1i803TEo$be%%gHjvrSt zDG>p#^c&(g#s(E%a;C`|^zoRLNRu|2xJuL^q=9N45iQjf)!>;787+!t`*P8B@4^UL z5{(7^Of`7S6IBpkO!QVdn#55Nu#$u8R*4%k4f5GGPC5e;N#IX|V4wGG)J zadxX%JU47q%QY>~^_ktv;dcGmko}Q+kJ2lAtWkFp&xVfV9P22ZO4K_jGB;OzEVrw? zVKzm2=5!;1OYnO_SiuD|qs8?+eoe^rl>GHevx!%putx94JKe`^C__VjFTt#`qcn7) zpLPZ$eR~mG2ADI{9i*CslzXC8{cVBqDmEHK#C1DX@Z$_ohk5S@A=Jl`Y3+F-2kAN3 zh7Qf~r$YSCpMbxJ^$e;C3#C3biaI0JYD$Vjw9!cSU_S}-)vf5H*SrZPX#Zl9kpVD3 zGzdSVR^%u?9g73V$v;I=*U|RYHKbnRWP|>KB*lU6Y6(;@Lq#i42`aXt7ou_pp*U6s z(c57ow{XVg18CfE{|DJLurEPWL|9(lyQP1%cCHEt#%Gkco7^p&x)iu4`E|?jA7nb% ze#J7iPm6r!B&KF1j~eDkG$`B(a;cCwk(~U8`jo1H#(k!08&iV5*ZDEI_j?{5?vGxC zL%K7t{HtM!81%oiDaC+Jtd?uS&pANl^v5vut*?qp-FDOja(H}4nYk@8N1^AmM%aHL zp;Qp%8X#xbhJkH@=wP{^8XqUkhNfpBdUxgJZTZk0Aja`8SW+r@KeH($1+4X6b+3BG z7&I9_mRq!3%j?uq6qEGD>R((mkdz3graC^9g5|}mOazzu0=9~kQgMCuAMCL&#i+wm(5-(N^GF!p98=q>{rm+CoT)5!R2+x|MDIw4yar)9!FSKy`8@99{X~})u=j<7@!tpYw`G& zx%M;he^xF9*rC=TqOJn+k|N3PjFAnutu}dW#N2jCx7R1#d0QI`Dk-X4(MI?` z){WPoBDGth^2-Hk%>i?W%qG*RzZQNL-Kp3J|LdE)Rj?LKtW`$hM5Cd=4ffAf0|^|- z>MCmzvE=^}163U$Zx%?k%?I(dvnp-0o ziL%b3(#-!+^`#0XVC+(8r?N3kpFz7wt)${3lb$~VVqm=N9n$p&|Lq3Uj$^C@&u2ht?&uT84}K4culwv7nq2ei8A?~n;{>| z>Ro}=KMXq>PwhYiyK^lX9BK-*C`M~RmbDQKp}9#W6%38*Z#0ZGqW%q(>0re(iO~E6 z15<+EsqEzR=!pu9srJvjOTR}$*#3`rnr!X8Lft$ zG!xmh#jkQZ@0DV!%^*eoe0V%C^|sp||17&{tm=9`ElpR3#j;#%-ZYvodLktDwBzCP zv@hhnv+VP<<8nRn{OfUx>}j;nqfe0k{`xEF==I8Nz0l3w*wa?zTKJwf2A;&LSFY4m z3=29^_Oi-Kdhxl+@t+@Y*Psh~481t>IpjgfU!Hs~6Wo&%T^*~cf{hhhX@)X9*jnHh zF345q4>#;y=L&(!hYa#*Al{exa=J|oMXxl;A$7GfFM0qI#)8hxV!L1NqbbATuC%ph z&v)RDVU3fMp5d~jXH;OeA}5_vcH3v5gOymjqjLRTp@68aWD{q)d*18cSHTu{POsQt z9fQy#mKP@_hx8gxW%l{@5WFogQ@X5{sm#l5eN$^LMFp>*01= zN{{f>$F)+nWQ#%yV~wnSnN>G;K57gvOCKV!u-!W}_DmK!D?I%yAr{vrhg7L&QM;$& zb3|wH+fDMOxyIbpV9O2OF|#atr_6#5@*fEQYCts}B*vO(k^?e9O|5T!Ft2N-PEZ31 zAuNH!ukX-kwz!-Yy034T?pZ?$Y~4Etk?A0-D~#;%qv09|dQDv3=w+xtoNvPU{Qafh zSK&*^Stt1c;TFZ2J+U_j=J-&dK7FDS>!SFk98i&zJR8zvi%Q}Ho} zg{F<=OOn2f465MbhIRAuTEY1_*5_Sjv!wECegXU`O*;(Nd?U*IRy7eM=DgwlF-4|@ zt4&k4&Hb|OE=;j5qAGQ9EW^5%$%Jc4W$@a-)H|@+-qO^KxoRL6R!5cQUKKo7xMdJrKhV;%uBH#Du-KS<&bIx50m^->I|8iuhMz6 zz&*y=AQNz`qtq*f5R;LB2^;TgT~oGJyZ!C9=MA4={{5b83$MHK(dQf3$7|nTSh6sOeR5K-aTH(n?l{sY_EkX4sLHD7D{;WciB8GJdV(aieg~ ze3X?d*j6q3vg?Xe8y!w~+OLE@7)YqCzsO6eaWmVVYuu8ehgWFfLWxHdi+c`%6}7f( z|1P(+NjQ2*5Pr}|cY3_$ub)y4=Y`!_2Ol>OYtV@#P^#1@0~;79#%MN_p+YzDHrj1{ z3N+0!I#{v};eSK^3#Cp93_vw;SsZ7d8V{r~l;# z3=59_22t!b;^gLE-%Msm=wdy=2;~wzJN=nE0GhxB-W?C%pWpSZ=>JZ2h5gXOrMNC3 z25RMy)DXw)_LbctU&`2AX+-$SA5clT1eFihjZ;oLZpr`6WvSpvYiTT2#+ZTM~s{Z0u{yOfb+@JB*Ds? zf{wMA{4Kh;IQ8nmh1CB`#l8Y`WCdU$Ama(S=x|6sAP#%85${=R4p5loU|d41k|o~5 z_bK6lnC;8&f1% zWI!KG63T##K_O9gGaIg|?k>I~Dlh)wzYH}A%t#p&Yg!9u!}84fMe=%Qrm8R@ENCAx zpcKpKp@`;Jd_8sWk^E)se?(G3msYqFq0D#wK?oXG`SP`e;$HVl&M>1O9G;K;sJwzG zRl^VoMfv?NwXgxGTTB@s6gzhCjI!WoECB_ce>h+#%hhOUDZW6lG>J07(3m&u{{()Y zXk#1jv#46J-}*Jfh-wSmmv|+1JifFMM0m1z)mAsbsSI(vc$B=ML2Vg|e}_OGfNInL zo#ZN=L9=x+v5pKk%3ctY5fzyL270@^uQPVrz=8keXA}z;PrV~%m#B2xF*s5yZk9!* zVi7V{N)Z5r+o(sBY*_7=q86zESO*R9Uw&UQbUL;*^7o%ORLcl;Kj@xtkd{RRQhkb% z4W<0{LB&ZqL4j#FxB+SC;D5=~i!K4d)iI910VzhDoV?7GvVukEy(N};QQ(dO;#@q1 z8@0;bG9&k|h<~$tT53p)v@1@vv`(x-lQV=3kXw9cv= zX$sx1s(CqPp7+9*8u1)!fXa$2$avNH#Gac;$^{Xd|Dlfii+avU)qo)G?Pk65>Q7T$ z$y$(_;0iX+v@&hpqLg@1ZWy*nVe}Uu_g~RKUkJBRDgpAAdWNh9D-MoWx$ZslKypB8 zAuDth!NSCa<3SEN(o3SOc%g}33LMy`cNu50$WbU+@9Q36)N+ZSUh~OT5G4Ow zQ^Uz%&x=6)TA;bwSwu80s3%$w|VQMm6UNNKAyt)F1?p} zNd3@T+|fA>X*OL08(Kz0c(vn`VDPROWk`*kQoNqHuZj-mQH*V) zEPt3hw$W5hgZ~$R$jeXQw03iDcLU3pgbGr%LUWLeB_oxyo9j;u%d+c<%AD63wStFLvsRiWYY+3zUcf6kkrxO zSc3hYZ8egKbW_cBSItl7QllVL>ydW%6qxCKJ~LnGQbJ?mJ=)lT^Wmr#XWPf;FC0wE z0-4@C#YfM^bu~Wg!*(vkUS_sd2OTLbx5ui<0T?ZhlrhSoOSmHd^m2V~_OVDne$A-G zwGZCaG$B9FSG9ZjJzv!H4M^8{-QJoXr}DjtV`y&z!12dvxy?jEO8w|KGT-C+jD)VZ zYKteD3{W1Vr`8YM6u=y6Z!ED3F&3WXZ`@=!m2A4VY>HxtGgBf+{hIwNHM!$Ks2t=; zy~00Sb8>TJ$s>|)FN&2<+H{=Sa8#DXXr!X+oPWY%YpLHb#Jpd$eBIw7r6$W!ylZG~ zj(kfv25For;h%8<$hCO=0g&*d(bYE&ixY7}Tn=>jyqeRGF0@4Nf7NeT`F0Oa@@0425WXelWWMH_D;AmhKbKrQ=0Oxmn?QVTbW7sPYG%* zW2&S5=swZ2NQNc{CI!;xOhGMx$>S3 z0%&@({ZE#7bZZmm!S2Z?lQ*@=&N~OV4whHf8&q?wyA|4xDbclxk-whYo~>;J3e(aP zSQBDFj0$?z ztyNMb+%LKB_J>v&7S|oh^xz&>#LBInvqCyDRN6!Cq&Z25NVhmz`Y01j*eJ)3wNUfI zLu=j;aRVDG#0>VSyL5k^Fs0pJfGI&p;u7U5g6v|)`EVsXh#B%@wEZbEum1Csqsqc( zN9|r?B?mK7U$Dhmfb|PWPj@S ziw!hxm+oal!*13I?c9$i(;n-u7swaaHES7s|4^qvo?Z_?O`DM%tn%>T6dN~E-~Oq_H#Je!uXuIgM$M#n@Ds{`y3}E(vw95>)U;8 zBI=aV(L47>LDv3hN2$)2n(w(w#8&^Y>ve`+tYC&WCcH>0fmX~=KD=qCu_{oSCyFCJ z#Hq(OB1t{EpqV3W{5$-&_I^}##u!ECnzBL3-;9ev7r8P<@ytK9zX&lL913L#Os$+; zdaMXkH@9Q8zgn{qW;HQ&cQ;8)#aQ)t^m2o-;RSf7r?IgmML&N}42|J4%~Qf4DJ+hN zIklpLnXQk;*lK*y@sB)Oeokj%!6@;L-mX!Drdc_$f9F6c0f$lv@k9~r?o#6V{{aL7RYrtq9C8-%n8#LPbZ4S8i8xuemB+Ya@*pAg2Z0P10v z<`(lZ1)^#dXc=(Hw3W+D+Pxh-IkZd_!&py>-J)@X8MV{C^&@}lhZqRLpiiZ)?5D?g zQ|9)LQ(ksShjtqabfoOx9G6yIbxI86{Ri+z04O!Ln1|`TsKPW*9``!evU0#g748Q; zqcKdIHx&76QX3LLaU#6#CnvyF`BsOy2I;4GFDu;n zf56A}DqxeP_j%Qd@13*#s1s!n9Iaw)Sw3cGNe$lyIysw1HlRp#Qv9Wv5EIbia4)i= z5o`v$(g;r9XjO+zOgz+n5GyqsnEvb67K~O z6U9ZB`12MJA+@Ce@l))wDSPvm;&J^hTB$sC24wr}q}Vewn}(1UWNl<6hy*bJ6CGmW;U!i#rV9d#^A9yja{XUm z$<4Uux1~Gts$(Rx#Su3JTLzW}@T;1Cov$b)e$C&hD#7c$fJi9W+fvVeB|r>VX_X65;$}i7q5~@EC$1GN(nhd1s#C@9 zJfxP}gp?PKk*H4ot2SzIlar9~);m+0jaKT}q1*l`l?XtxG8(ShcBQFnUVEy`XLOp4 zzZ!-|dkbN`O?PC68acc`ZyOoGV$90UwhK_12K+z!{E4mvhWfvL{g1x7I-yz^0o7RX zB*>e8RAnOkB!38eEU%JwWqj?zi3fLUO+5X>+DY>N)8Mt%h;Pc67O#CqS&@Ayb??AI zu4hmr0fGOhQJM4lKW%Y?Cr71zz{wJuz8mjC#i?K{&5d z$FzN7YP|Lr3K0Qz;I*U#gpsdG1X@9T3gamv{{I$x#=5axV&uo}8=mG$!YNZ}VXU2* z#SF}k8Z^?+m&X@3mOCs8rY8A^CAdzgbUm4^MTA8pJexu^R;>z9XWv_?2a1)|;9t%@ z$h@3M_b=oN^Sw0M+)Q~iwh5qABV*SXnMoKT(tTw}GyNGa^8>gM-+$3FkDCqpR|V)0)N`2{GRfU_3i15r zvYHcGuvBvMygMsJ3=?6E?$D}eIj|O z^yhh>ojh0SRseegP}SHAr&B(b)U;+0e}xp(0jD{DMpFMeV>_+c{QNegSPXgCuCj&g zwZhqZj1O|oM+h$?Ml+n@lz)mPPE0)p%FPeC!&|)MeARrwZ|zij2U?&zrAnt z)#rXL2n%up)bItqJeCZ3W5C(YM5o$uZ(H{$XPE-FHH+(Ie&bQ?Xuk6kq;_amC}_!>^2<%kAps!x zRWt^jU3h&y4XZPyn%}fG4X-Z}eidW7kzxZQLe0(N#Qqot7hr}|md_pf26FXUxW#GU zvy9&68p>15ajB}%R-<+avG>-Q*4Ft{#GKF7v4)&ixPBY0vXnj5{+J)Snpllj=lh>*L-iZ8c=+&pnE0_uN#J)9baUTxA z$g`Xt)JZ!dWOAfwE&k;*U%FsVG9N&XU|XL**d_sezmZ z&{cBMjmnPd?(*tqiW2$aflQZbRPM8X`Wwh^Ls%;THixC%EI-Vk z+`K$GS?bqj4xY_;?iOSO@ufd^VGlI%n>%tng2lxEUB;mt*!}v-D-nzsmbKb~>c@)2SZCdYr@mo~x1BKhxbHnzz)vn<*nCwov!lupOf(~} z`c5aeU*fI%#j%gKwis16P8~G;nN-M*Q`;IBxul09A^&aFc?1lj;3uNV1T?OEh@#;H zr}l)w|Ifu-gJKTtB|(VgADc)fGJ1HhU*==z%WQ<_FKmQBYA9V;88Y)twz94;7+_rL zE6(&`2vz0HODR7D`EJ6x0obYSsu8EPbH66z2NYTsXe$YXsd-D(@&UZw zD`EgHedw`!S9&>%aB~O?x`2-pc%#cLq(5H$(>HlsxB@oorTdhY&@V2w+1nEBafZ%d zxxM5V;9i-Vq>}%s;U|DVFLtmsu5D!u8FEIg}NT4KJ>fvKY z29=z28uR(}|A@K@hp4-yEg?uqhe#`pG%gK-ATF@fQc}{nfOMyHOT!XUOLw=@jVvHb zx3HwN^tbPOz4!YA&i>AsGyBXlb0*wXmTj!$F%x!AIi#A##Q^39jnChIM+Sp`+dDEE zY*miC#3UbSFjFnX&y+-w+LNHp900n(g)VovqRMw13Hnm`SC6+={g@5da2yV}pHh(r zHzzdg3mSoQQgk%A9e1luNFOLF%iPQ_Y@k5V=N)xSnG=XW+SXSsq6cap-X%?B!qtl2 zwVNp@K?)K6a)^hs)L@m22RaGQx?a;X^BfHI&P~6vX48cp7QW=$0zFd6q;&-|yK9Fi zL8ph;DFQ6^2`jr63o(5Qw9Fbr)i~&YgV}jlxGcYJZ!WWP4bbDn7Fj#bLTNjI!62uI zK78EA=p3_3LV$v5)VOx(o^BQn1GtMu<~Z3Cl|i#jKDuP`x#B z^Q1h{@6Q&?zu1kyL>0@LWo=VFoLr}ETL<3JMTq~$)zZKulrOC60!F(Dbxq1k%3bNUwNV}GL33c$pS zduEL4(Y!c^$5Qeuu(%u=*QB|qun!{^m|F8vl6()D#L?-kXn9)UoHVkq?G?V!38E%w`~NI>t~Y7+xxZs zwSqiQFo?aLOx;Q2<>9=OBe4W-p;~5vSdEL*PoR|7ALjq9g!RHK<0i17oxZnnY&b$D zPYo!x9b130trN}yd=~|^Yu@!`ptFXoYUsXAeO}!gST5rI{9oSrkF-B`!(_xDuQIM1I0hI;isBp;jr^7Jw-si{eD zzW@(=e@mpmu9dX|e+F%NNi8hkdEi4(Miuq*-(V#*$n+5N#?4sbJR?v^X)*hj#WO7k z7Tbzli4`g9YM$*QYTgeV-XuCbs4QYqheAoW(m|k5asFafvE6WFm%-6F#y?g+07O)6 zjRiTGWWizOP%KH7;zi1@BE&YAV>X?$ti%-w~o{`zb1l zvdd2p_4!OoD79Pq`KziOO`2|=m@F|oin9MIZAuriMePNr;wQX3U#qEJ%um$BXtk1A zbyP5#!hbFa7^0|1wtTmJ`e}mA_}X||I50c+!c4MbzSYy&=WsEyNi^{6pnnYfYn1$T`JppDiftK9Np{0n z=98+D%3MWj_D5uy*N-gSQiq5ZKagMNF_6kvHKQ5UB^-V-1)n2p6D>KattU3j##p_E z1d0B!(|#nET4g!M?JsP^Z~M2J`nQW{s~!ka!OIG%f}Rh%6jyj}O%w$9p^7Gp7pelf zEBgOTg8%2My)Z&4(t{n15n=gGkgPPvf_wu=a=up*V+d_{@HYD)z0Qpfxc#n-hbLQy zV_olY8_paBl#Y%DlCW5CLS1&rmcQnYq$~T;*SBRmYxbNa+H-AqGBXmEsFfaTL2hlfiA~Vk{;maz=I`ocCYgI&Uc~(>E=ZpA2 z*e7NWAKn@uB#!a3_84}_Tcx1Pc-oSfsVkohhbzq3+a7ZFk7-|CZXcYhx+Ygim)M78$Dj}Pk*DYl zqt!AQ)HxnwW%0l*>d+9F5U=^`3HR8ClYGhtG3W5-2}j zy*HgcAe7c@J<`xC{}Gv0m)1FtpIYVRw8MH zdx`e*?HNkkIgvw^3cc{Kvmg!k!li!9X;P!q<)vHzCJ!P4ijGSdz5fAJoE_qD+olt+*HCc z)N1n$s2y(GHo^j=1hR9(6cxABpSBPfstK2}<4AQj3+@%r$I;V$n};ov%o}vG5Wgs4 zMZ#4}N9Aa0B_MfGRVLuA0xAIVrqR`zr<%R$X2^1qzJIT)A4i*y7GQUtlZOrUQpmXO z2KS}hAB9Sdgb27-g@Mta0U(Ti7!j$L0zz=FdI386y$2>G<)$8NqVO3FoaP68u`#m? zj0TAG?5*PS_)Yz0f;&s2Y`{9(Yf9WypTeY=!!)go7i@&b@daXw2&OuonU9F=K#*qw zccsU!CkN#O@JqsmWoE1-q|iv(*HKFr>XN+fHB;VtYRi#YbZAVqgE(L^a6ofmMNi7n z+kUMa28xssR8|)5b74zS5#xrEuEd*+bSELm^3_`P2~p}X{}O_G)P4oK+R0amQHi|r z?WXhbY1_l889KUP+nj{c70npS6&LaUvIf(cY}$`0TORhectE~#dwRyb^G`+ZJUT{1GOPX3adOOcF3;6Jxb-Ss`ypt!`72X0PRp zqY`snAN6YYJlwl2W0pUVaNjvaI`(^ha6138XImlfh{|JCA5tPM zE)0A3QkRiDRkfnZzj8cPDXf{PT^Jc8spz+&#qn9(95SpPQesxt(_O4%`q6OXq8g~g zEQKssK=7eZy7{nJ-$wO=5ASP01NMqeyRWCYc26)-bqOhysfy_h@eyYv(PyN)Ttay? zWrV?LY9HgSm83y0OmM~xdx|f8zZjx(sw|R(S%E=pH*BH^!%~5Tzh|!WI+;oR9`Kcc z^)Sc2<;YSZ{8KU~G ze9#*0{B7VB^J&`%~ zVF(Ilr#R*^tLb6ve}EGT+~A_TN$1TRX425}8c(7>0Y8lI!Nv>~+<^~<}F{U0Gi)Po_{b=xVw_{$!y zelgAfJauZiA1`VINlGA+X6yz4oXTy_%q%im8%sv~I39@qL;6r~==~W5d~tTF=wDR{ zTXf$V7Phk*7~{+FWCj#zoNV4Iv{qVybN;z}RNNNDON0=ci7qviRrZZ~$(&kn+AobN zCQ_xCMejQ6r@6`08+e{$1ep#{T4tST#|`}59mAT$7lc-J*C0AGp@Y)nq#_veh$ zH?J|!UwR=Xuf-Gbc`LSKz4?x)nGAR**1+%&{ zJ>>MJO`>S)75IEvz$ zQcRTkScS~)dM%urzG=x2y<|+`PYcQpH1di8?4F9u7u-~)EN$iR16;)sO;3&Ezh>Bu zfbvZe{j>Fi9AYQ3^!PmG%^FVo`}>C#AR#xuWwuU_3&2LobvMkUq8wpI#97@*tXy3| zf6N$Bd(f#y?$n)@*j*nl0D!4g?s$;=+3#D993MywnI05mNkM+#g^%=hq7Xzuc9cq3 z21-%NRTRYaoACOQCzjui%S?=)6KA}1NE3j%_f0xkI;y(G4u^JTF+TanFJduHbRO)K1|0NQRVu#c00u=AxCnkZ?FHKQDhhEX0VwDx*ErlSWYJYa$LaXp|D zX|64*57{kcC>2m7=E`HTCfbsG{91D)S;=ya#O5CvpnPHO#w1ge@9Jw|R^f(-gYbZ( z$Y||s3_DqEpb19-mOR^V;u3WIr&}vNh2LSOb*59=ZwFxSF^Yy&BTdK*9?y^m6B$S9 zCMeSbcp$?9=EfO`h{CM19&=MI2WL5-iL+Wx+6kZC<7E~kY^cm>o}as5?~m$moIWZM z*S9#cep8w3=HHN|(UibK1fV4kZ}_3#igbI1M0d!E`DN?0W6|;@>Mo$D^qehlce$C> zx9D>P@PZ3lP03)6i})*%pS(5{We)uV#?g{wn!H2NMY<%N2TZh27g404BIx?9r14ru zn#aT$pq6tf?P~f41Dc^mfJ)gV83d=5CU)j?aqD2@HEgMxoc zmgv&|Y|e95)Lepr#7*hV)4TS|R1;={O~$>GRT5fh!! z7a98LVa&WVkt5cq+Bl5y&tCrB|7|r=_NkzmIGcCHUdB$5&VsBms3s8?933;Bq`_~W zwNuqSrWxC>=^;{f#i04768%tSzx3P=<$mk+e*d3k5S+CFziv0f^tGZ?>`7k!k|~aY zdLbt2!2M4)A1o6|VLCucZ#Ynjg;f80U$^)g7PHMLG}#4IU*fW`-%ioR`ag#pHUN{l zLaw9SU;mXj|D}t94NWJFDLY{UOVg0%3x-edrikTgd|5uFKkGM%D$Ov5A#A*h{T{E55*B{fWS2`rO&DF|S$WyB)o zW7(q4RxRdZu&QC_nsP4TmypXik*RpFJkrlTD6SOfq;Mk{0K9L#+42Ye>$^u(Qnyz9Km zkIxfa7-b5C<)B{jWxR>Ia4XW5=bt`;56cIDGhYUNPtO2o+itQ8CV9T7;3p)NE(ZQ% z;F}QS#6j;G^dJf{Lbz!%nZ+iGM5a?MR!#8-(Ztu`pAcP(5Zv>J&)} zYX$a&r_sNf!m2H?;VQC#M(TGD1ej0?1ISM3`h`%Da#hUP{R;l->F#5{Lpm6nH(XnJ6Y? zEHMw<5*tsQ_BRcg%_v#7C_%TYEA~p>=X_3vp!E6wChi0e(vs9w}$ffCV$Rb5s zH$?Q(eP8~EJT!Ji;PPf=5j9SSN7D|H(Kgw%%{)g6d|H7ucoo(U9Z}qoyrRhRc`!J) zzOy*bHKPq-)pZDEc+&d1#yUp@4y-H0jXC4Ex;>%yPW`<~`%RSD67H&AtGRo?y}@Ll z`*w>H?rZEWm}T!Vbr24Ei&(v5v*9J`_s{mZT)CbeAyWOy_KUaue*doP{+r=G*_X4_ zDQ|yLbwSC2sjjf>f~lgTqX+wffJH?@@r8=DrE0|Q`+@rrE^kC5Y6ydUonOV2gvEm2 z)%ULXIDF0mtIr0ZLv{*|BE}mDcdMUY@9ypJ+>BoBGzipbcW^G-nu1SkkYjz1(>}J` zSm11AdLm0sC(`bS4S}ig_e(wks2i<_1>yYIX-?3{Q{F8kfcn^xUNv?|s!%qRn3A*X zK6v*SO`(cuGRmQ<%ayZsX*I8&teQ#vNDW?bLy)P;8MGVR_fb}763z;ETj$5?dhU*0 zA~!ja=ln15o?7B!E{13cWDa#cU67sdqKjPiH_Vl-kDSWZ+cz1PRn@!>2VI1e=C3>9 zQu>nX4hc>8&Y=sA>Yu}_+4Vl1{n|`p>n&!xs_BVaVaUB*K=F|$t)LqAqC69i2t72E zCXWAV-oQ=2WfIjZ7W@>)Wr~V5&l|ld{$|C9-`}&ngx^5`jiu}IKD>N5ON?^}Nq2#D zGPkK(dZr2%eCoWpsYyKQoRg3|Ub)A8)(s*o*f}-Umnr8NMKVvP^qCzM;bOebe$|oj zcv2nThI0MS-4BGgoWE?F{yBP0iB5)L1fZ{G5SJ$8jcHc!@cHk50MuR{B8qaBjMYnd zxKX89v>>M_N=gf-cPs19XFHBn-U9y|aWAC1kceK_{!#9X91QNDgc+>Z#ef(e7v?e* z6pn6HK%0MYJN=6I==WP+o{*Ne!}W;svcuX?Q3^#sYKEHwK|?na<%H1MyWhs%r!t!? z3h)Y2s13QSxy4YP9QP71GV-MjM+&D}0|ci5g=*uMJ2GQlxBCh0ULH;wLRt8^b(Ned2`^Ma}m5r;>6ueG*Rch+d_C)ba~`F z+i)M@K2)^5e7$;qdF0K)F%SV)dHy89rj)H&O#z-EWRP5nj0ft zZDV?z#7Nq`+g>B^60)KF-b;yS-ZK5~QzuBAM63l;JIpwH3P?zN?CDlETx~1WTGdt?h2p z=gJHP0j`14SsFeJ3Jj&yDmD5Yk)RI+!@kF?7?`Y_5;;eO5?j<*(nR&*kk&mTQ`K#2 z>Ein)+|sF@?8jaN_q@x3G5Aa~udNIxVZFD3W4?zSa1} z0IrOQnC@mF%YK70PCwRbA~@@lgl<4t%@}~>7>q&Jl9z7cn{z|0!S2j!3C7TaPptiI zZyE~l7N)er9@cx`%A*5fu2~T=Z6153i9g8rBItET(UazH$bKBAPHM4CoF^tiKjlGWmo9w$%7b+!<4%C?)@< zchqA+L|w<{baxLqWUVoWG(FlVT*sN)2Us+DwbEQpjhwpQ zokHXB!~N$W1(ip`53nPzE-?-Ol4D)%4u|pFUhMy%31O>0DD=?Ef|6UZeoNn^4f(}k zZ<6`v!gc?%N=n+IjLQ?-G@$$D&ao#!*1vxFlOVSk5RQzsg^kISNU9*|Y$7+OlLFAh!ziNXs7+nTJ}N>X?kHmnju?w@oAT)WgbT4a+0|L z;*QWi9AnvE_Tc5l;ek@d@0E~b)CF^M8q_0yPi~0Er2PGE1tm0EQMm2>mn3~YQZoL+ zmG4cc`Lt>UX75Ma!mx#F_jVM!!>quEw@iP}cfkU98j40>7+Igxik6h%a<#xLcG#=@|vXGl5tORN{C&bzxSlb3o$ewZYyBe+=l6ew zO@&C(5n>i}>XC>(eO6<5 zqDuu}{w>QVg>o(l@gAGu@Vy}52@a1RfIU58d-DNIky9klB65MH{ML7RgOyIyWz)*~ zbIT+r*1s%G`iBeTdaZv6@56MAEj{5R%V(iRfh=q`d68~lw=yeAWZ(r0ATCiajOSBo z!ANz4z@Q?X`y@=|U+zhSSwROi+}FL*<#oIgk=h3JrRe92s>nzJn>vsR+3(0k`Ik)U ztVm~Xh_GK`{u^Y&l(zj2t85t#kRV|Q(f3RQE~5erC%=+Y%zS`9XYP6EqDpWXpMZ}!o=T=l3Km3lFV%}s+g;yXz&L$y zjbQlLKDAs%(r`@c#?g>YH*_#9rm3HdPHl;eA{?l5ts@?J(_vK~Ne?lC9f zHP#l~w#zDZX)oF-aX;}_|Ft4PEnHKw9>^Nxw8)gM&{>?RK^qsxArpsxQB6d9m#}r% z$ojix!>+prI{Etlq(04IuArB!cFZRX>6B7oF)rU=u?m2B5% zv>%MX!U*~t7E1;Zp266QK?2He_LD~_|6V1i7e=r24Tk>C{D}Y)a=dl@C2sJGSS`er zQKXlv$8`g5;&@B=9(f^Jk;ggzE0=HpExSXWYD|0M-}PMNP$yyH>xvs1=}aPbH|)hqL?g@JT(^1|i2572F?c00Hd727 zP9m~QyrkI|6qT;Co#+C^bx<;HiBnGQMl}s@wVL{w`_fs6`fmoPh0)Z#DH(IWTd@=s z1m2+3TEH%#a-zm;{)RUx7|QQp7X=*0DOEFj{1?#X5NGZ;ah!S9H%?8_ZQhXGeeNY{ z-+~A>LFpQ4CUPJC-=TU1mkTa330sHX5u0R=3wXZ-riZVg$t)IRj_zxlK-e%Y}-2 zU}K-dL`JwNOf?L(|EnbZu&yO{2xHXs;VI)h8L4Km1@0tkL{Z;4?^c4#0`;r?5{_32 z`d(u-Iwld;)z*8fYcCGX6aW0R1_#U#^=~f&jXZeIFKGAn^WzKZmbCPxlMZ@bw8F(y zNwMWepFmHXK2j(eChGrlh*irrTKFNOC}yqGCT+^i?}eSavJNV^kGC zSveox-mltikIU^L3V`N+wTljb%&?_Jc~(mou9K3>x`6qlzT7jHRz_>>!D@C4^dnsE zV-7C*xq-Y#qw@xm*FSz~Q9%o)C&tA)-5&o1I5QMy+bNHm-fw!i?JH_v%0h#oeM3x3 zv<#4?247CH%zA~8te{PT_R+6}$#xT6m>~*Y3rN;B%S!bBWLN4w2appF8%-$^KzsG@ zg|~;%yb$in$K)Ho>d>Gvbk#p+ncd3I5|K6t4GebKziXHQYBYAJSAT7GJrjcc%{^$| zx>Ky)RYIkd3Iq^_pLJrFu)I^^Ut4B3kH|1s`0wqA0(>9F^OLdc=LE=JDwRw5mn66} zSba(3cJ2Hg`I?|f0D1q(^DU?rETQ{~%~5}sOkud~K{?yw+26xPRpJ`#bz+!Yliu6gXXE60i7|qpx*$g_=C!x})pKK~lP#?z& z!ruV0z7&<(iy3UvtWjPYClaV_qcJ>r>PwDs#lfykL!PIu#7ggLWqQgmBh>k4yP<61 zFWkaRrn2NWxE&k9r^4^y##5*q|N195QR-~W`?dpb6UI-I{8JAwXaFoWZkE}|Wq5M% zY<0=|V65!FI{^*Aj+Q)`##Wn`e3pbWs85XLI?L* zB?dL=mi)B*`(YN-DI&YPatA%)WSgTJ#Izh#hI`zv_X225l*)~>a>mH)$XLkufwj>s zbG@(_+rVxr(5t@W-zPW}v7V|ai30#B9Gv1@O+_uc%x(&puJ^Pl6X#i;zI)tq>8fF# z5Ax?7)7&pxR$MIDm%TEb?{^g?Macd8B=`@ZriDH~d8!>gc*ERs{nD=dY?gE=^a9L)jzvuzcLFGBoTf{Pw$XYHZ<=c22Z3NUW~g+L6n z;1vljo7S8NK{b5S!$caJDl@NocDSW>)jvKrioxn)0M3D;l*UeXsxF)1PSm5hDp_`0 zVzSUdFa1c&HrAD>K7gTP`kSsn?)kHw9&Er1h(bGA+{`*`TmsrGBfXIf ziRzmUn4^Wk9dbor-EU15u3QjqkLwD#W6kl5SL$13KLO6}U6^qXy!_jZ)&|({>6M0` zYyt2&4)vA|-4V~R3ZC)vDc@n7fx@aX!1q|kHL8WP;gGwC7Ez8OOUSk48&Zz7=rj;Zm#7>=yH{lBr}LGrnIR+TAew-Uf03y7BKfa2joV&5JLH za<5&80FDlIEqAP<#)d2vy3tpov3kqOcI6+lRI`8Mp0D>ewVgM2oHqyWvMMk%Uw^HM zbu{ZRy<6N1RO%X>8Tb8gNW@+j);PDh$s-BBE{!oRi@`FbOouGBFVeOzV1&9qa=sdv zZ)fz5qBIYaHxe6H-s(|umuEH4Vcm~AB3fDn3lY+qfc-IOD>w~x|%EP zIQrc5T}AquyGe9!-MH6ogaC;W+bdjUq5~;jRWGN8;xZ}OIq6?@1@NlyrA1v2MI0)b z`BF6NQDuJ;cxMWFdN~^2*!H>8Yij7+8_w*o6?E9tjJ_tmcHba+GOYhIcX&yWdAwF0 zYm7F*{h)d+>?ty5J@y^pIS`gWYiX`M|^a`_~TprAz(VuBNH>t8a+O3v*f}nb7G-$A3Wa5LCJWL`da2pjt!t99)~B+ZhQH)F2iV% zA6(KsBSFXCnY@j}4Tj~sc55?L-a0xS-{mj#L0DezDvOqvFAON#8qOk{GI)V5f7*(z z_b7Gc2{eaiS+j>+8d4I}aSW2MiRV6ytMzl2fEIOm#6hC|)MBo~agAU|f+nGfDPt#v z^5#LO&-p8D`}z?+4XNOREa7#CMd^}^#<=2|jJQpl{*o0}P4vY#(p#pdmTB3ojYSa- zF?#ch^9IZ_4rnbsu+$Y1&V)az^H4PMKd1&65e|ulwFSAv4MFiAQAM{HP}Jm4CdHf~GN3BdoKe)fKQB1z#JE^~35u9&m5O?r?uQP7NSje=p z$uMOF2;+Dwtj+B@Nv;CJwy`)E@~V!R^){N85sN8*n(CBTpH@AEdjUkYem6yvt_&kp zly-oTHl-5j}{wF zl@2#>_~zrSiku>SB2xK27RcPcYj8}~8+!W9Cd_d>^jRgg6ckYuB{!e%54iC;T3Mc8 zr%lI_?+f0r!JDUWUEuYy_#HFC<6hy@BKaod*_YCwCS9!c>y~XaN@A() zf`>!*<1L0_F(WEXUZ){Gn~yixy!DmKA)`!tyWFr|Ez$7Sjn}!b2gW@=Eu2rC8d|`V zx!Y{P@3+tI_kFQMfC1rdWcqsOD}ZaRo+yTI$#-lCdEjZ4_g(?IKMhWT5r zg$*{%U4KQ{mm}hvZqMA(Nybaa)tf4>7o*vR3#4nj5+}e2meW}sm&0TYovDy%ibbtG-p7<)F81 z(^=pyzm`ShqCBZRNctl07V8H(tw<%YhFMD|fv^|NP7bs;MRQZ)4I9u^O_t_KOEVr8TiLJN6Zwu0cPpd&n8r`e?+1&hiEUtL=*E-i?<82fP)n)NRvk1n(4<5$0G&Td%L6i&<DOH>pLC6wIwmOQyk}6ZTBpsu{q?F z#78uf^W5iRq82P41w39^N{Id#6CIv|7eQs*vs8vVrCz(&tu%(Xu!|`Zuh$!`vuYym-_8)i6g)>fSyVhE3NDzrX zgYuqYkU*gDu;|rJkNd%j4yz8&=CVm7`ThQyW@Vp$>yLf_^c^E@me+Do zsoBFQPhnhN(y<`NFLb`Q*Mc}XKRcfY{Tlu5>f}gLVxlvA%DB&56g+?Y3fEH4S&2G# zU2_fuN&}18?w7Uw4t^9*@4Xr8(8vY&V&4c=p?s!W*!%2^^CQXlnwB(Mq$R=|TaCg} zG;xj@DGsRUNGIbeIPtHyPj%x3B)@ISV|m`j5IE>T&sn;{(iEX^B7Vm4flE6Nq?LJDyTFkR7OSI`=` zE?N8njta<0EoE;S{=jEWJ7?!Dj~XsTCgyHhhVZ?PoO8Ctw=+8?mb=dNZ14P%?$HQ( zhZ!6nj}`g<5a`~SJ=e^(Ye;UxL-|aogiJ52`FV2-6;nU!ULorD<~C5_f&>ld`=O!a zQvH2y%WCVM9|;&6r)i;FD01igI$@>XcCuCb5vB!P`z~$TjN#Krm(Cel;-{Y>JFaOY z*~XHI79!*QB`*>>hol$tM);{`AjJ+qmv3sgKMEarHQ2pqLb^`(Bu8842*&$AL||iv z3D+3D2-&56bKXxEOPn~}WLvLDXAHlpFSruH8Zlsc@T=f%;k#rPzucvKD1L?G-w+t( zlP+*{GOnk0SR2Iyr5AO>Yo<5ga-E~8F@Y{mW#fCfn0rze7iWq_ENZ{!`Zao(&S2W# zIS{Vin~XuMR9R0Whlf5SUPo>BwfJMhO}ptL>5ndNXgK=myLz?fbBXxd@d>h5)s)0PK=EVE})*f57R|Kzzj8MCD2zzSc4;Awe!C`Gh)=B@!7<6G!WH~2T< zIsJxr&j=e#YzNU@-m3~Qzt$+UW~Kk5_v$u=M!KZ{7)bUh`E9iv*mW5%1(2Pv^v{bTv137+IQi#GD)X8~!(%ODlaafS3UmBm!)>n*oSCi26 zQizaL1T0QJ_gmRi`4#g^cp&SOW2My?WXu8i$#eD2PGb94e7%{>?7EB3Ocism*0=CY zo;D$OY!7FU=P{)Fk+vFQ32aOR5Dh1%cct-xl20e^KL%Ixu zqK;bf#-hkpCrW}Q@sTQ311iUoEq+I?a;)dFreGp_Pg^MTM2oM@-aPm_18!mU*5DAz~J*Dy`@ zs;FXyFw6-0O+@COagF|%lEz>%dXdVnx^?_*#c(^$jzLzcH;aF)O%dnUkLk5$2Tk=B zyDjTJ1~gWmdIoMY_MygZ15*$O0Q@7WLZ_8auEA9 zf-7$1Pn80^<0n@qsBz5fGGeb&Xtiies@&&ySG0m~Rf3&0YZw=4 zAo*Q5GUufAoA8_I;rz#T!`AtNe)&X3d8!QWy`0gC@3pCZKC6vP#Imy=8dc}FtMQfd zcL`)2LHjX-ww@mJ*`{vLawv%m0OCDPdj8~U__jS9t6aOs2xbE1(+|S2FAIT@5sOA^qUSDR~Onc99vDt{?5T~S9XN)M+7AEc;wt~qCx&G2TDpNF-CiIcLJB_uz-9(?6r~R%1);QFZT+ghGNF}cqMMC%p zwdinOVNw)U+Sw&?*U_Frl{q@P))QrAj5M<^uh;~LCO-C;A#G$y+9KRt` ziO|wuKXI#?Tlj0s35D=x;4{Kpgd7xmo|44ERM+G7w^synGIv?DtuA zt}%JCoN^Fwq3<%6XHF6nyQ}wP$Wv~Phv;){62!E9G})|hHzR*Y!|mIQ9>&Pkk~PB)BZlRC~3M_-lU zPp@)E_(W8+>pnf%f6nu&rFE?_oaqR%Yptq3d0fH^cj;w3+hZPe`jHac z#qQ-r~o*3kZyK{d#-eQ${un|%lac>g1LLcU!hwH{&i7N8@d zoksf`3EA%hYEw{i9wUIigD?7rY4^@|f_BBs;ptETNu5^d`?1!5;#X3}Rcb`jG<#=> z`f7FXZBfMf8${|8eiFV_-5UVeoyd#?vtczKp@Id&F;bs1NPT}^lyoJ8rj0^&pTD4V z;Fmr#uaZoZ{}J09YlX`^!gDccR-`eQ70H1};#-Vc ze^>7Il0;jl3;KTJk_-dpNJxgYifSHjW&dWPGMzJN;?$Rbe|UZa1w#AdUZW&nD?F_+R1AM5)Mur(= z>3-~-vvCVr0w}L`I}IxBiQpB|uRFFstD=Rz8U(lI4nSNeLP|LSy5XANV3BrC_SFYXI zWo9w@6XB<=(z=x`cGq%!rCO1t^@MeM%%-(ChF;9e{Eag_?BzDkRiS0!x8O%gTIAT~ zI$V6yWNVxU#|^Tj#S7#KYE=S`0p|RrO3FKGnW=(;Atd#FjS&IVDPV&ISvCqUGY3+1 zOiR2mImZEFNSqp*3^98O4ZDxrE!&XC6RT zYUal>2iNMY2$X za#5H3e6o{$8ipy@Bc%?p5)Hm7XX{JmC*%N@MlU7$j29027pQ&;$q2j^wWLc0jkwno zr|^D0Xg$0)7yYRkSaZq{7=~~?c!E|Rc0Vu`RQc_iwZQ&ME|6HmH>*JZo0#8?Md1Py zt7TmK%P;5Ou0`jWmY|kR>;c)o0vucGuA?SP?J}HspSyi9@LoSf)f65ev{%W?RVM>y zjrS^x99oHf%6G$zgp;rVuB@NVu6ppa?exkYt;eOh(Rdh9o9nsK;BeR3$`rBnlQ`5O zIUuoR7h_*|=5iwbB)Rsae09$=G5%OWYwrE~$GTlB7Ma-R4|npi3Za@4@fIt$FECE_ z?dp?&>+MBztkiSj;$;fb;ZEKo!~>DP1>_!G)xPMAr)#ffzmsBWV^7jI>|5o*h#{6_ z&dr=NiMGK0-O^P!QQUsoB$sg5z}=txdNM_zd2#Gf${y2FT;x0p_$)X@#AoBvHtJ1Q zP-5qR z7gE(+8;{O#`L`Nv_rVzdaA-I;Z{9hv&ZJ^;_r5?Y#3=w^xj!!cN^i;sX0)`HDV`@uenS^*xF> zx@+F*`}B>Y{s{;p9*)k2&mdO1F0YSYz?^>f`xEXI*dIh4kchp3uU>_cz`a#%ZaOZ> z6Q}fmHm6gRa67kF`Pc~jdLG+8c-VPLdMnC$+=jWkR^{m5)L3e-s!$fIM+)p~O6a{A zIiY-e&?o6ZVd|JD!Sd6V$gEq+`gdyW_fi0hkd}I{?kqL`D^&~n`rlLJPX$X~wJf&F zw)8KGN+;*R_v9ih6qV-U#^S!>ZTF8n&6{}9?>R%YV^^zg96{-r0j~4O8$WcvznC>g zwS|3Z#!spRR=%{mG}GI-^e=Qugj&J?Up01uPUDTjrWLei7I zQjqf8WkQ{P;iH3I*6f8OM5}UaOsWL*4Q|C2kyz4-uu?wBQeIna(|k5&qs1QnY-m#hN@;mU zukcGs_RCA&xp-4BNo5Tv&gWN*9$vA_@wlbKyve;+Pl|=IdW=Wo;k^4{?m|vz(22-4 zwzl?Bm8x2nFQ?HDxrdsL^-A&T5|4#I)7Lc`bqalte^w(C46r+$)*^b^+$6z4brbE5 zioUzq;H?w(|g zEd3pKdmtc`lOr4sqBG?Es-i$^|7l!SVsR(Vh$|V5l_O7>Phx4BoeB~eO@HGkIM@Ne zgLGq_w_K1j#>1ad84>y3nEqg=GEM7@kWayQzuywcY)DViubuGxQN9=l4|NM2MzQWx zajk+Wv`F{XmK%T!O-RYaooUb)foP|)GS=-(g6&}`mrMAw{K5@bqd(DqhPrTFm%(F;(H5XY3bTWKK;h654{Y{XOCB(D&Mg9 z!@F-i2s^HM-~NNJYwx*-?s(>X_4({wDOfb__8~l|{qr#WsPy#)rNLLua@tgJlD`Gk ziues@J91Z1mUZh+BdS8R>XJyo1d~I;SvgX|h$tog@DrRuB7DmEq)21?07;NC8L-D^ z=%R3R7-2;6ebfmlDf8@`lk6GcXVOm=qoorU)Lah$yE(Lspio2rPV9i+IWQT4Z5{rU z-~GDor0Y$+o@*Pka;pQ6CQ0|BQY9Rqb6f{tmE^$HFR@ql)FkOPhSEQ3sZar%j#h}L z1UE(ZTnn3ShDWP3T=61Q2ni%?YOoXl)TpRpiC!uo&hBlCCl24a^O*`}mC3aR1O2S{ zmJa$f(5nJKOWXJUHGHGQPg_f7$OW73Kj-^9%7YiFw}tw}`Z(3kP@t}JKYQo~C_Y#g zKhbfehRVV2I#zPd=3gEA_-#PyK4rhf)P>s!PHdZts!p9j{r{ zNOt$lsD#Vi3&rEqhROUpIxxI(*rt%EdWw_v?228SA%VFjD6HXIczpj3%yeYp-6#*P^kk}(y|qxL-24&hiO zCE+yYOO?aD=oI%u}#!>#^o!4a9m*>#U*U|(CM4rWiPvZsRp6a;d~Etb?5zk z9&&2%XmhZFL{NgBg^b^Bug+jPCIRwwJWX9oihiu?v?mrh$BRiKCsHty#X4??2GlDE*4)qTXAQIHsaB)?vWcHttLRWH&1)LN32OfN&LU7Z>^rJZAX zp{!g0W|&!e*^PU%BwI%nAW+*r1SMN#cHnxND9O!+#DtT8pBN%z#+2pq+yTnESyG{r z53R)3R+19?6)6RHT{%HgePn#>u!H8B_rG?#- z_pvq@*((7ZVJ62e&z->uaD8G#fTGhg2P7S^lPRFyX-5ZE1%o9_*GSE_5ly<>P<~rY zM{rDW)}$bukQ-}FM3O;9 zqR1Wzt2T|RNg-==H%no^!y+j43({-cshdCjD3dxD!(^TA&Jto$W|01k3d>);x;X@`MDgev)L5O`Zsn z6xq<(QU;MTE9XW?F>%|-*=#lAN7fAas+PQa7q6C3D+P0eEQUTpR}t}~fGJB`r{`Nb zZqs&~VOD0^EaxjmOit4>YstFBgada_1N!Je8oj6(*u+YP{KUE#rsYnziJd}Yxyeei z(Pj2mt3%;sTR+sXO_Wg!D`Jf^5u3FVMf)yC*f4QHKt$mhjzVdUS{?RuS)QR72J#os z_+k#J2F4W%0MnN1#vL0~kwaHx&vM~n8W?Y5xmSX8hEK`yLHhO?yBj|y(jQo8GT(R% zZ2g^(R!r!=TcSM_h`u8$$-wE{$Bp9r;$CxDn>e)aQh&1{?>y^X!1bAvOyY#F*QRex z1XSr==y`$&iHvlkJUEFTZ1ac&3SO|7JG1=PjTGN>3A$GAvzV+hFX8svXVqrXi0*Bn6^RJ_B(L( z!U%^g^v`r~84&o4!Gn_loVL4xd&*L!r~ctLZArMdqJd{pIeu!{reB?1q9ap0-mxQ0 z&W?IFv7)7llJE*Pfp4FSBi&Gy`oW%Y7C`^`QL05jO|s#zU4b-`VLlOXg1tKwM@Y%a zxMyC&Lw;=`ccjV70l<r81 zVJQfLj)sjuz_?|K8CpuI274|^ng1_5lw#JP9#9~{0U8aAoMcNoX+pvox9o9<5#^t=1il zqOSvQNKFgRM9WsipCR`1)qSBe*A@e}B1YOZv-H%RuYuAVeUXr`5CTEt7a)iuzz~Q| z20RyxSY6AL*i`$jg|V0I&5ED;hyS_n;Hz!pTm93CRVv( z%9|~1kiwJhw9_}uaUdf@$KcZ%Hx#Pi9ygefQ(shIiuPi85X_{!7rYl~i49LaG)71$ z@2O#k-&Ynn*J3ZaXW-nX7@xHX!8VEec;t!CfB)QvcQ-C{2uHrL6_bP;bS5akhu@9TCvch25HXE^jO z)#K58(I*zbv5_5p?D~faFX-*dUx9Dl@zaaU+vGb>9R6zg*FB%u%+mVJi{(eC6-cWU z((2I1Lz~ZvqU`1O=wn}g_$7G%_T4wvm$2vKo7ey83y01re;D@-&Bw3U3_N55rzzDG zi}6I-RO{dQ;-SUW^0XtCU}<0V%fnyW_0ug6tX{Fm=X8C*)hjkj_ceQ6;il>BzY~Y= zzw0N(0YA1-4$xmd`Xao4$9?y0d+(HBckQ3QbZDVCXK23biiO@j&Q2ru?yI1pAzcV0 z#q9-KapLgG-9NctW%crf{-~^d_s^kBh%b*UeSYMn6 zeXc!q{j&?pdoLS0c0c?2&Hqr&x4--9r`{X!pv}bW#w5{QmpoBK1T}0T8gk*EGf9I(=Od4Qp}Wn*S}rErp^5UUjOzN_QGxd_7~?5f)vj!)<;XQ!o;N;NS;r935*q?wI{#$T#b9c zXiQmpGtyNS*Pkq|YqdsN<;UBfwOjFI1yj1Wd2edzI%Q3{)Oo;s#~$6TY4}840Xfu%2VZ; z7w@z-btIIzL-5J8QigYu?e)I>my;7hV6=O#IV5e7)&-kUHmgE=?nFF1Xk=c%ghs-7M| z7tJ|b_$jOFt*d9czw`S&T{ZiC?qBK% zwMl)&%TRVGF!k4E@n#)RQ0ZB)$(+aA9529Vj$FgaMeQbR!Z+#ET~V0nh~B0EZ%1UN z!JKc>Iru@@CB!r%0;;8!@q)2wb`>+KT7>@(-`Q6&{T?YyTzT4_MErDp(aB?3UQDnz z*!}zQ6`!Y!et@nMId_5f4Llvbv%jMEXKd_^Pozwx^%%Y@3oM5MiC8iAleF(oe*Oz% zFTa24$SMW}reFYEq8LAyeRV#?QTBK z4YAjTh2v%|J`ozM-E);XV#`0iR=5NdspCUTHe1Y)V?IfHc=9Sg(?eOj&B24B){62g zB?*K(F!fj&+f`4mg0ecZb$RK54wW2Uq-(YD??g&q_O1vdEx){mz27A7*) zO*5d=0bgBl64W{)YjsntPT6}I^d26plVdBh2g3z?aR{bj5ljVl-?Z|nfsMz9sciiE zQ*~J(!9(6a*T(C<^>NpGzmtc2l9twm_J}Glo{L4yMyMHVd6JH#3HgeuINJ%`tEssD zizv25QMrC-Uw>Af>4l;sULDT#!Tq?MmrEAU3?35guh@CHbg}r%0v5d^hc#wC!Gke3tP?}48@gvR=ODNFfktdue-%&r9)pIut)n5TwuNW z>kM=1EBQD#_6540Tm$HDS1X~v+D zf<&oE(RnrOy+Wq|hx!W=$mZLOM*%4eN_(*+ws1?d(7!oBa~_W>EzqISp3VI%jXfNW z-`-RD7x}!0OmF$}u@)>Gm)o*8((ktf156IrD zGklLabH|f-Bcj+_c(WQfcE?w>Eg6os%Q5)j0&zl8TBynheOAykBF10k--e&brhVd+ zi@Hl+L+k$*&xy<3=j-UuMk2#kTrobhu9 zZcMVJgsDOPt$S$IPmDUL{35&l#}UIB_FIl{K^N7_1WI>bDOEn z1XU9nKX)*+=1^9sW8?8@gdwkDDPrSL_h@~Ncf1v%g@BgopuqUKf=^i)wqwn=)PB4? z(UcKxEf`7ZE>4CAN!`sLTUrKq5x!m3Zj{$$dgaG>OsRDortT0P8k1TPJcQ2Gh1S$@ z&eN#VK=yB!G!ZzCKX`dV{gLdLiPmkWSjlH4I^ST)cRg0ZRqW;H14qXI zU*JRzWG;e-8B|%+3=eo_O!$w4)*i_8%Ab#8vbs_cV{0{CN5Bw8_HeTdNP>eAL^5e5r6yz-dqNGa5t&jklKmniAs)fS z^%u1;V5!$xpofZKJd@qEWE!el99Y^`h?5U+IiB2CkYL>a1Kj`wFK;+>C?{sZU)=It zT<+=paOt56G~R=NXk97d8yXcQpo<=n0OHv-mU4QZ^6}`g%iwt->mdCMFR>~fZFyB!V8Vx-f{L2n_5>~!G>39e@6GTjw{pyU`0~bs zz$M{Zjr)d|2nvDfeVY<6D6nzg&=Q+zn#r-^G7N#pgugMowmM@Ps*I#nwgQ3x=$v82 z2o|o0qsUhpEh&i^e@P$}n_}#z&fJM5{hJc4`>WkGnOr;#nb^C3EB0P`mK9wreGL+0 zsXV7?aFQkOs><*^xmVf4Fk!1iyaf*=L<{DGf9F|NcoA7p9)+&$G&UGsTa_^lRoKpc z;G19XRUWy{viVUFwB+A8mP%M-btDSIkB6pxLy1S5-}H=Lw%VljJ+l3>vD7m(^5%g_ zma?ld!}lwV91`+di*-E>aPEQ2A2o&7wN$3VNsV6K0-1nWCi}tP9Da{7?VE@4p1TpL zY0uk>dq(Aj)TT#b(*~(4X=`~aDujqYmD-fG+~pr4-%t=mg)XHpDaj+lsW%7-m)JCm zL!xfkW@)2LTMS2C%+@p{CyHe_wP9&5q|6%B;rI&=*7#XzLvmn$3oCVqNp7e_cd<4S zfwI_O&F;?`ibh`d9!UG)1tc~}^~i!Gl%PgZP#Fre?+@j0qVltnhV1b9>QHLh_ctJ& zJVwLgz>$CQJ8JEf^#ncb8)fiyc(7JTO+t=B5{eY!#(<4P3wb99cQ|aJp(e?O4c4}@ z?EpP)78rK4XKJ+|7|?z&Caf?Ki^YmKXa_=xHV^L6hS$SIDcxK%w6JTSnSPlD$^qlA zF#{%>aEhNoE*_O6#0KhGS<#W~nfB^%O4`UxR#cxnQFDfs2)-#erPT6_bqY<06e%h2 z@Ue9lC5sCR+K-hmO37Btj?$HbHpx zdA3c&ZY!BWYI2B48X*D4SOYLwpgR(qF!TFF0<7-Z=?oww`$lakMgoj{jk1bN!=rb5 zi93`)^+?IV-)FJ<82Be^1W;eC~qyDiI zCva0jK+=i&;0UNRgNyu@+UO%2^jgoTX`n+U6s6uQo4y~tv?7`t)*@r^ zG6+4qO>XYg?w(qG6+^WmUm6jAAtD|qV}|e6PzxTy6eKVutb5+r1PzZ%Z0fXeCmJ@{ zuoW#PNx>#V>Pd|djZP{QAr!k^2VjBigzs@A@{S6%$qT+!3oFT;ZVhGCCr#9R=`D#J z@Eb+&wq%&s0{1N>Yl+6wy@r8~TQD1siZ2P@R)`0{MZqS7n*{ejrP;7a$rRWW0Yme{ zCK?b3VEcO?FH=L&XRH>$L^}hQSjbugB?cU=3}(yr_1_pSxT9lJFk91#@bAf8F@P-z zPHe*NT(OA_9;pnj!luAD!)u{qlN`_tF9vinO~sl>l#=cnViP~At+Gf8xrjrj)=-o} zZ1Uk%ow-+4+xvKFMej#3gDU!P-)9zVQrLwos_J0ovtyIquNJWskO(Ezrs&v&3RV{@ z-^yCx-~E|B`A|Kn7yPVxIZXjH&G zFaWw{KWW(1^tM-hMvN+%p?|L@@saEyW>vg1M87VR?jGStj14iNZv;qb z;03hgbHOH?djtv1f=%>CD%9g-5ShGDvB^WMX0<>F#YdGp10zRZ!jXSPBmXlH)xKal zm~mL<6d$?ZE#P{@COT^Bo0LTLk6d?7bgZ_uFoF{kYSTZh1qV!RnScnnM}N0YSDUOe zaW2cK$Y)|JchhnW0h|8qcQ3Ku^l!eKoR|hYcmQi&e*feV9@ArvfqoNv0v^?4L?n&$ zP!HYR57Faa6eXh6k^gCMJv_^Of`e!7>_y_qas~ri;bhPS6_{?{2!`6p!&!?ka%j)= z>MPq5iM(oCr()UUq7nfR;ESDyD2AowhcSMt`u0@(R4h4eV4~fOJq9#`;4+-*W{nBM zF4~`L!9(U+DtT2dh~w2vy1my}?r|C0WQdMf1%xzllWuDD7fNa@@oRP#n@@qHPVvJsmn%a5MHOOajIL(M$V^Yy+chr>U!>sk<{BKeY(lK(9G| z?jx$@k+m|ZmcleArj)ViRu`VEV$wBb#Ef?3JIZ6|w2*2nBg`v!CEWw$Kic^rs%7ah zfv$X>IYx=bbn=p9CM3wDOCSKM4CWwSSVtMt(s)4tT-sR~NIv4jH_^J~W?Tc9Vlx0b z!^sYRjY-2U)8`hK9UYrIR51^oKGmbg`}5uE4x{VvL_M($fLnRJ9-Jtd3n6-FSkhe~>YMX13915LVq zwubDmi<{Ak+AoHUp-2}uUyl%kTvZ}9ljyB2=wm@|ag)9%fSd56rolVA6;}rWRiwoR zi2@gsj{lw!)ja{U*vk7hCGZ#{4k!Q_yTUn?IpN=NCb$||N3!+3s*9|AukAerq|2rv zj=(1Uy|BP%e5k)Y1*nNh#>cLHg@Z zeAu@Zb*jU9WOxHis?sh;dO$_-+7s^<>h$>2U&vFxS$jFK@xZ9|F!l zA@sR`CMJ1mqJ1UJe*LPlhei%A8>Ig+9Uoq_79F=A{AB}iH3xJ4G&68~|4>2$I(=8D zBA2YLY{5b9N%t*yK>d7Q;!>0#N1fmQ&wq<`n`G2dgsQ_MyB(2AT5QuFoo}Fu8M`p$H`;*{C zWrl&DD2M&E;%Z64*tz_hvCZ|XJXSyBR)G~2S9UCx5zs^Tf2K(4FDQ5!2RPpL_ZCK; znl0yWD$>&+GSyV{LG4%mx|{_Gvvk1*3riymOuCd2fmy1$R#VZBEv#71CVeH5;AMv& zZT^%8iGRT3ptV(z!j|KPh8N)xn`ozCbJcxQuqlJ2j)ThZx{FxnGhmYkM5c;9_&U6-|dr4A{G7yf)wj_slvGX%(WipOGq5DSsQcH?S!GU=KngyrAx zHG`ixMwuvR(R*q)2$C%BF)(&}2o0tSP~Czdq$Tbjy}Hf?l_1>@F+J&F%ZXc2s)#@k zu7B@9#SJ>sWh@AnSjQ%8-?rOaO*(gMLaFj_wNf$V;Z`|-l1p*`h7ieG>AX4%nax8+ zKnOox#2R~q+wtfR9afbjm42*Z-tCB?yfw)UgZ0XIIttZG2DC(DTfSoHP>{2l$YCpX z@XNS$9#*CdPdfNU1|cDPfzf~%` z^p=ow$_MdPf|bc^(pwx2n@|?&pz&jrlIqj(9E^hcR>pJ>d4$JDqqMEGmD?_m$b_`S ztCP7Fqoa}m)0^7~FK#TWJVSjo6BP;1&Pv0`50&4RBli?Jun7wvw|u%~l`VE~)k5kc z##3#xCjStdXiqvJ23b)~N+6J>Jel@3)tK2J7a;hfq3+!q5tJ^?MjmEl?*InP{B7lL zrZ$;T)@f#Qz8|YXC}YZoW`?rIwz{~7bAi%{w!e?0kQ`;N^69|NF%A=15vv)2&lNzQ zE86Gb8UNH~&8OK2{Ml#RZTT$qgsEC8Xd?eF-gsJ}++d5Bmt)=h|Zd&gsL z@!3?|a`U8WPC3@wPV(9C+8uJO` z__0F-gD>PXyM>yV$|)N9W?s+lC2~`!O|}H}oK`o8bc0Nnr6!%xvVcwGWX-aBk{NB+ z)LEbI3l_37-!%tk*(}OtambwnqJ7tSxmIIfrh0w9OtqVm{q8 zn%d2N_WPGG*GQXr+cRG?!F(}aRV{MpDKFtXAYF<5F`3I&V6&g@oLj^=*KdrVJarB0 z`F%U)x&4Fb@?(TKwq$%EKZ+uW4Hrxy8jrV;yAvm%1>!KFx}9vl^O9Fc+OjuJ`+$!VpHgD%_n_7 zzmgZpQvVV#&EwWP=j1%)ye-hC7U~&ks-3cu{ha$rxh1rv(T#{Rb!^tI4?gNXApbuU zl({edJXvL7J6*8;RKhjfAI|FL7ST4-eR@WGkw2#Ok%G%saqE{?S2rGuy48u}6YPXV zd--GK$AtDpi?W-M@su|MXLjU^=IZNG5h7(&Y>Gy{=5znbfP=Pca1zZyGTr8Vvt|Fw z+`0W#ab- zXfJ?xk2f?*M=?gz>8D8tqMmcWPTt#Y;GAPV^D^@f)U37k-c@_oLW5)`P39YB$z+jyF;z*C!Y!o>B(SzbnQ7VQzY-I^JV#s=7bg67 zoV06IEg3mxbQpubAblkA6ifX+9SzeX>{BIUhbBEnU^A1|Z605dBhjatUx0z%R>y>8 zy`Af`-$?enN&jj$wc9nK3?l$x_=(#c1Pp~Wv4rZWm% zk;D1ph-T8g;dw#0>-)ZTLB7d(d?)=THWHR;@=)4LhnthBW&V6#6NYD5o!9+-Ws_bl zDA9Y$ujn^p$)Dt7J@ARVUFB~r-P)$6^X2|uqV^PxG$ zNC?wMG}la61$s3_#niq)nOAXhBjwMc3HiCxI*DrJr-!@m|L;RP$&=g^2?Cv!74#cG zt-);CYn*6gWz6w>nzNLtD%D?n>=B#^2-Ha8x?}12-xD|o4A1AgQrv{O1<{0vYNUJM z(n%*WZ1XJPhKvv~O{vmoSB3x@Ew)L$@3pMtir+#qsst+@68zz7YtY)MXr=N}ho-opqjgu!a zxpeI)-Y0G!o~~csgwEPX%)icLV&u~f$TfdqJf-Y0$|LD~TTg^+GuG#T=bn1bI!Dbn z!wxnuO-D*!Q+ew$(?=>xP1rJ$-YDicK120!Io-R)#6C?X;W4GXoaHyYX=Qdc)d+s( z$l2qgcRE8)#$}4nINYJBXk)2;Ta5K?HBy5;XA&P>5VabqGhoJgZsmTYHvOz4p-ebn zF_MV2c1Acg>BUvtb=;UM0?EGeIE`u8%^-Z3@$D{}%58v`_-2{d*W~^B&f{cVMnhGZSa;<5qQqV&w_-4ETRl8RK@vjK>q1 zGB6!$S(@qj>Bc!p^Bd_$!T%TLNr{#QO@ACu@M++wfxPZphblK(X_J_DzFEDZ3+4!D zp;Sy;W$J~PHz-X0 zzZYyiwwU!bV}TK8NR!B`L~XnZ&BBy>b(7=I1pkzlssoT|@`E{%sGC@;@f`ED?KtL? zi_TK}reg~OdW49n&y2L^l$bsTti8YW%Q%6Ol#rEiZhwDv)A1CKWlYyIo&m}caC~7P z)vp=rs!!}POigP@v?AuD?J8>Xa0ElYyw ze!$y1rugDlo%Py#!aiQI*#b5bWRmk7U04DTCn0XZd2(IF=6SB8V<{X$l9q|IKU2#B zk(9Z|V``7YonZ3kM#AenDd_No+CFVCu-bu5y@6(eIcr*v_dsCBUfeO@KD*pzi`-=R z`~;$Fj~Bn0end9~iC-&3%HamBRHb|+z4)~TDPfaudyh^2U*nqgw#L%Lx>!&2oFwmzco2F0qD3Vd_)wYa!-u(yvH~;iCvQ3l;io6 zCd4L(Fz-2wZyd3Sx)UuqHl-uHr;ANYeKg1!W>#$^{@@Nv=utC}B`B9<>nl1o!Gg0G zr+c;==G`7AZ1N?K1hJrof6B2jDza%{6H7@)Nkt!0+c>_9B)bH;|B34{ko(az-Hu}I z_jxXOE8qs4=R{O3i#+aJQ<;wEk4?-cTUnAb?nycSH`t_qO!#0^f~S~6erDsC^2j6Z z+w^b{tJrjWVMfx|nvvG?m8l`SrdO7)3Cq7S2Au@3=_r))RRje8Cxbl$kSj+HwaG67 zg!Wt#k#sUNXW{SWjWag+oEXj1XSkk~shqj^!@9ja+z&QiNIQfe>!*Er=X>t+Qfigx zG!yB99NZudW$H$Xb101yfy;*kL)`*m&@yBR@BhoRitDA>39yMhq>3e_*(p1TJk+Mj zdC%H$RB#9lvVLB}K0eL`<=0BH4M?{woPhZ-Z0PJ26mC-*FlG9GT);C^|mBPKvOaA`6=85x~}6D3}TQqo7Q~1amtqioQ;OgZ#*mey|{y2 z+R{3}tUqU4yFkBtzJSE>-bSq9fVB>3?E==aQ3;7JuZ`B&U0k3pj?~CgSJAUQN4AvX zhn34>`wwEWdFZt5P(dc#N6=9x?@PY zW53*yk5KRyU#MW`pw7wd?b*EWOXrUJQx8L`A*Z58FjSErI(2Ipb817)lb}vWe0gnb zzZ_V8b+8C!LGo2V?^SwdaB8S87>e~agd&a2>C(MYD4w682HsgS;HsQl{h za+fTqGP|Km9^JX(T$5way6N}t^4#C;wYo?7uS)wa$W?7)6I#B{EtlWM>THm8sa6h; z*63Up`;*e1>a}qsQrRd$o7SiK)tyCFC2yU&Eb$4-qyYMq&5N9&)4sNys*&K$&Qokp zTl-1y-T;@Be!95foH(?-lvDfUGiLoc+u8*af?wYCj{I5mX1Q=*TgkiUmfhK$rN2I7 zea8>*em4d0^$T8!i_;)IMIygX~a# z>fi0SwEG<|Hu~w}`tt*}9WeXcHk+$jC`Jp>KQ~tP(VaG@Y%e=wH$Ke=W=6j|Tp3?^ z=Tm-|LmgCjWW}5Dz7v+6i(n^oz33jB$DR*NE4sM))#1vA+~%G;zt6ICAb2?UofLcV zP2^mIt!t(|?8U2b>Y8>cS`z)UW&)sx<3`cl zz@Ge}vuGdeR4<)^m%*#PRyoe1i+kRN(kRs3*P^>WRPz)2>VeYiqxj*^;w!$~lqGVJ zS3aCpTetGxUOi}&Z3@AZ8M;|~7Y;czFpd69RIBziXLhHBOOL5MyB zc>-?Qet56y3wYN87`3ws6<;D+3r?Pdgu=0QCx#A)DYV>xTd%urS!Qt(_4ADQyP38ltNj zGVgDDHunl0i`)xJg5a1n6(x6?Vn$D z89Ey5+TPB}XfVoFTv&>M1=h0N9h}m}eGu>@Ru0Usx&-g$p{_!(1K2UtS@>)&uF-?9 z6{S1E(Fe=JZD||*n8TLEL#7ewYK*Po1=?sIRUG2W%}aw3q@NiZo2Wk8;hKRt*Z{V+ zvWlKUEMd0)z?W=|CMj8V+y+TcigX^1tva+UcA1Q9CnE>Rh?kCH(UOf#ic=3tq#>y+ z<}9_93}*8p9s{|8U|N5iu@PV*0N`@!`|0c2u#_7vvt3trWjS4J7W7Cy+sf@jx}d7( zb8%mnvy00`G#I`R2t!y8F2p)ZLV4ZAc$p1d*f^NmBdXqNk0oeKBW%Dke6)5Tx0%KO zfkDmUxUPt0Ye9J$40i4e<()%JLC}fh0wh6DQ7bDaT7uebXz&;oClUL~s3Rf?`N1Ct z3JJ}1k`NC&lk@`^ghYZ!G}u{snw4JJHPho!4LCyW19BnWSsI$#StQH97)Um(3|I#% z4)Jg$B{dQ9PNpu&y?1H!M$yR_hn}I1ig4bkLc89PYzzx0O~N1p`Kdokt_;oF z`v+)0)bZI_R&;Uq+prMM`$J)_^ATdLAL?lB8)kFLtFfG1%{2xKIDpXfO|^9^-W=@s ztb-L^*!_+{T_2@!zUXL;t*%}Yy-|$awQolwmDKEQBXpCRy-&^BVymkHUsXo(unjYQ zzWnivoI9Jc0Frnc_&z(^7GGVpBzm*>WPD9~)sjqq+0jU-5_`_{Q(#5&jxjAUna_-h z-x#PiIWxQ2s=OhRYP(-D25Xur)h34v%$efF_29H7)Z5tPn~~X(pcXb5+^}C zz?l4L@vrMh)DhxQ_a`BNL2lx)Jt^lueU^(L6+VA3x*QNEt|>zbOL=0G7II{vn+yqG z0Em`F8d$^Lk(DS2C37c1MP#upR|vw zTuxKH3_w)vyddCPYYBY_m71|UT&%CLMjbimKsgHT^h(MJ$z{#a2Kq`kx2G`Jcesm{ z9A1&(@We$ri%yAt*EsgIr6ws3EgwD7#db&|9=^6nXR%^UU=y%Nrsx#mFJNH}zKxF7 zjC{yR$Uw<0G6xXKgMpmOgj2kukG!x60B9)#4jWmfVHT-7a>vycHWBm)Y(jo|ntf$g zmJz;EKU%=ETD!Oq8#jw%7j%^^u!%Dwfr}?Lk#w}}SfXxP`X%h(s}^y1=%!PyGv#QR$0R$pvlKsngv9lcF#`b$PE<@DeAVw1fd^rQ$3 zBiMHgtJ!l!&~9K3c8XGK>@5N*1)Gq8gmOl5OZ8bUbeTFfVY88fOJdB>-C!;VPNsF# z$Gh3qdVVj2zCbpD!+ZdiM-0`=;SGyFBF7tT`86|R!Kd)S#HJBG?@y#YyP<>DCs zeYuKFG&=8%+_(2W#q zVz7RA3EIJbKNEo=j-YNtJ1Q+($wIZGTrNmQ-E4E+ieE0(#AoLZ^}%xPUk{&VB^# zrF^B@WatTpoYbc#k2f@bqTv%u!Mt*)j&({WDoly6i3bT~3SXQ268yThi?h3U@-tAunb@k#ePdQ zY%j08YiS6*Q-oT86u^JX1(o~*hGYf*py?%cl%%y@eu6= zKDaY%r?=V!&A|BbtH2`m2;DmhY|6CsClt~yu(D!y2L6jGmq#dricQfc4OOv~f^y)+ z45FZ!SZ#ur!Z-UbvWg;h>LM#UP%woQCXP*pEIw`pM$SC1AV?!YdVPtCM8eGt&%(?Lvj|OQ!{Y~r6+7x{0}UeXFaV?B zrR074t`T{{g-x_omkdC#IokWTIc0Y~o#mxAF>G*^m2Y9EzhLF)E_{V{0DxvHrI!_I z5xX>jP1Q*!u}PddiA^53lOZfL_x>$cIO+I5aNfZ|t&MjBy#X+N6)2hZgh1*|bzd`d zqu9bG0yR4ZCM2+lnh9)TfJDQKF9@C!=j2JvbyofN zA>HM#{`uDvm-{$r`mmH8qY?72-IV?{PCpUin5Jd)dOp9ImNS$-pyk<-DQslQ9$F9W zH9fW>SMt67l3z&{sMBv^%L}r7 z8as`se~RU$fe1LcM%K4BF3WTTH^(0xILG!hEQ|35BtAKwe-ZMU-7LyBbSE8eZ%w=B zFw}&&X7GNIR}d)>cQD(+MFAobVlt&}6y&i)d>IznSjDZP9Dz6hK(mAn)GWPS)-ruc zJ*w?yWp!4Cnn+jC{i#idmuJKtl25If@I~Dn9d>md6>VZfMYq89hDJ^euW6xux3-P0 zYpVlFMuUJdrCCTVI7o1ZLGK6eGHAIZ-c@{m>d{8*_sIT%Ij{!#qc;;5IDep>L!w_E zK}av& zV#CQ+gk{atdqY(SoOA`5w$$`ss>8D;0Z7q`K>O()$z;QsB`rR|(deX$u4_90mTjRZ z`fWp16!{4|+If0-wT?~N(@b^|6kPz{fRnCAMiFuPL4&asv~mb!q2X0vCtzLX(Qg~8 z!gJbct)qiB52iNI(KXi&0AxU$zs$xEpD>?3wwNeipGt=J?5+n>>dE2NqO}Ju5qA^d z-DOs>zhIOcVLe+wPZp3=I@5l{j{d2kiaY7#J4-nG6nzLOC!z^UVpH(z4UaOF^(KGO zZa6nW&N$+gbF8`p{Wu`%w8qx9e-4df7Sq_Sv{#SGNe3tp@7(iXD!9EeZ0DL5g?*jd zSsFAGMO8bTbP}PYlj~YhE8BB>b2j@0oP)h=MH9hUQ7bsGxYy5=qE1kO43~q;YxE__~r3_KqB(B-Id^?yk;SOsCxwVnN`Pm zF)Uniz!N-NMsbIkvdZeKC*VG-s9rL9qqrA01<)VIb`u7HZgg;X3CTG(ilrY-Tc%N= zg>uUa#@Aej@T)nv5|+Ps-1Tg4}% zAb>5&v{D}2qTT=F%`t|DPekps-x~kJopfGv%ft_3IK?MJE9GlB>GZ*Aa~HiM#3|jS zg-r>v_)Q!|r4dPnv~-(XS8uK3sH9?(hEVpo80_A3id9|Rkt2Fljhtu_V$xvO)^_vG)n;tKKqWSIY~m5z_4{uB!}6)keY%~Gki7?C(b&Uj*y@N@=8@flYY!yM-@0J75AV^s|0JLyYlVi!8IcJ}}yH~HvS6@|q-=-v-A*z?414+DI z>ZR?>Yl@i~0E8XVYKHxd&9EQZ0-8;#ahs3Zl!R|fvrql(zRjP1>Z(KVtNpib3#k9{ z(bxNw9M99WDX@|5YF_r(>-`TmFWcm6F8J;c5k?;8QKn9^TWqCKm6WJphKt@42|#eJyt)|zvk4>w#C$+y6Q6c)xPE)KZ$QY z`4>;T-oIYH!$W`g#_f-6GkQ%abjt(1)4%wkn=WJL&#AUX`@r9}6-!$pqybXn`-mhR zwWUSzQ_ruJZ zc-hr$UAcJKciO6^lmB+)j+YN?zwd$6UC*2xUjzTt|GC~HjR{>`N4a7$kZNJm#>!W3 zXB?zk`i~*juPWFkMaF^YS6h8;Ti67vIC#Vz#IT&&K>ryHZ2HAz&xGm#Wa@AcEbA*g z0bE8G;x~q3s*e^7c-)CUZ5p+&hylUzBHL$6vZ5mv^ znMY%+;e;R!lSE0l{QxBGBqcGMlJGrepOYF7Ff{tPz@qzyLm?Qly-l>@0oRxkRyKsC ziV@>2Hk{4S=C&9zQ-3wsIUsi{rpoT2Y3tBsL8$?Z^yUc^lDwn!L7)}_Ho8Vl)i+Eb zu|!+)Il;04Lo`fenc6Mm&P(jh2H|ATeUf+v4Q}qpkG4Ym(!N+bahEY+Zi$dJMb^jR zCeE)!b7*lR5D7ZPL!e~?C-?20kK~oqV4Pax93pNN10ei($0}a7i(}NggyDXrUR+BZ zeelILU$)R@Qu-F)S_Y9009KBKm0D)85YUN%BC+=zaZ8%upa%sdavaROxy~VnR?L{Z!A>hzUQfjEgHj3zG?Y89+3q;MIgm@ z*{CUkYXK@ldHcgK53os9QZ^Z#rEq6Jgh&@U?h0+vLWx;{_8iiCHOS=4+dS6`?_T`p z_ghs>Nf%pjZjW;9d;RwfvCv zO@PB9r34-0$qS;QUTP!=;d9bHhstK{N|`r}&y0=K7ut?-UCzmzVBvatV)B z)r`Stg+&_OEBQNLy>qnOR~2kJC44l>iqJW5a}6(Z_gS!MDcFL#CBixf0&Lt(DbD|l z*JcCaG42}k7SXD5Dl{-B?8({Zsmf+(SP>Jq*tVxc%r-&H8FT#ERhqOr($Su6+AEsp zz|i0h-g#h~&N|0g(mPk-lS{`^DJ2r~96d>fgfcpVShmVOi6KwAvw$z96`cB9R}`Uk zI&TwQAG}f>Mh~S^XprEN?YA;6l;C0dO?Xkb??G2`w^ZFU!X9#xx^hPU3dls71c+nS z38Z|Cx#VWrNmDXpTAkwPF&UTB8bP#Ifk&r(*Ia)60I57z=oZg53J1 zUJ%s{gUZAA^vqEf63T+T__)Gx*^XHdV3}AXFDCSV?jB}7C0}sc3lQ?=hasbnh%tC_ z_YLlZm*!YlgY<|AQguM9oodCOB6q0-s{qw}!Q8ho7ytO=P(qE6RYW^0?knM-1eObi zkskhVBEQ+YTixh|>N@ZmZ6xZ{iN*l4X$60eYyZh%6NLepNb-pk(dI`-gHF0&2g(_; zhHcs{lXR0qc_<|k$gOz5$~mf8^@ihDBLeyS1rHv*X8+tRsW4ECw*Ag{N5<1AO@4q; zM&|kH#89BUz$gKp-2akE!IZc~gz9)EPlT-!63Bw#L_=mY`UIkuG%ll!-he34Yh9Dtng0<%j%LJJNEA7O zgnk-MU<1y1PlA^&sUDfc{wO;M7KanMXNM-J)HAW0X@ zZ*WXL`j4szn-Z-ZR*z`rG)g{C<5#uIgC@czN5N>~yjMCeM44e9=Ap**s|o>>qRJ>) zS4jB~*&(zG@k@1}vv~JA-_3_(Y08~sawwuun_C!2p53Rx%(dHd3MqQkDQU<)R&Z&h zH_o%FQW5i*&gD)ZFvEHS`w}ZKv&zq+vuK)F)Q$|7sVf0SYdZ!JroS;ktcn7<5lAJP z3l!0{y5qKH`2=ZcSBPwPE$*j-O*sbvuQ%V!_^6X^Of795WL&^1udVsl)mL3U2R3C6 zz0*hT0V(#5uipKo4?h3&EthPe%ki(gc;WruKD__b%lCe()8@Y7_NQCT;a1!F`2!uS z;orAkCm#FKn+Ko1xfKj=f7PL%=1qQl!M$I-wE1l-f!%yv`8Pjk^)WXH=?fP=_s<)} z?JxXYYiV-BcRDNI?lsd1rzrrRn1lo;DA-TL{Np&u`~XaB!peT(1Y7nUk=4`YGNPC@ zOce_%&24uHdP8;q5`by&SeAuJ^u6+~I^NFe&W!}{OI#Y+lir4?tCbT4S4e>lMqY%L zIJTDsdmvMs&b7)qdPTiS5-@ydR%vyt)0#kBv2s&vC9<5zOO{zY33g*?!lXSgPfK69 zBaK2S{x@g8oq8~>T7)BuKwT|iF+QI-^P{8Bz8$NHl67c|jdghJ_cxt%KkYr~EG=NL zbmyAdra!rS_nx!4NI8!m1=I?hj&a>x?X5?@^5$j#ut6#(9{ci}2mkSwOB?9(UAVpZ zriDKDeCy|j9z6PI`xzb@n4x|B6~6W8U%z?T4;oX8w~pWY;(KtYF?ZYd;j4EYr}mqE zlWYF!g$o`$()g=9apQMiyYh|}9yNdX5Pai@w_eh`=Z!BMc;M)0yOfCSoGcbj+8kGz z$B|wHsS9-K9N^s+DB9Ikf-#3SPpUKtMWNh8fCD4Ry)-f@w$evQ`HFMtnvk-yzqW9T zejt!&g%1YLT0x;*XGaqC-*Z3CSq|cPwCU1T2P4QJTI_q3{m<~hi8@`F6RUv8t z(anfCI7)dGRCT})GQkMbOz|s{;Xr0M%cvnqQ2QA-23FnwMn`LHVqIwx>AyRTOt%*5;r}5!!Hg# zb!%ha`}o}_4|i142cLVYGh^Fgshcn5Nwg@T*8Iu$;kNq@pL+bRQwRU(jThmzZy$W? z?nmHj$69N)6Ad=n`o3Lsefw7(S@qf0SnWh>toFdM*17h^=MS{sfLrbg=2@C{2{9R+ zozaGf`kBZoj-p&`#?*Q2=paLONtC(O1|3->L}1IoOW_ij5E`bD6S=V|7UsL{&3~CG zhfW^A5C8Zg1Om)E`2lDgjwR z5m@#DMg)UVSqkE8rkOIIx=)1LHD&>k8J5n2lMwK&s?a7}0;Op(BvA_byFpEWCL!Ux zrNTeGgH3M!Av$#exy!aBJhW!fryGUUZ=2etv&|%e9G>F4uDU=^y>i#1@bz2ak>>v! za)>st>AI&H2B`h|BwjIcWl!&`w7hUDxZ|V400e`Dpa9hy3Qd1 zRuZ}d5g401mRI*U`8nihh zi)o5nP~2miqMwZg@05B%8az20rkVp0TOa3{B5#&l1r zQduu~1ZS!%%_v#O8?1>Z3 zSMEt-v9>)?X%{x-w2dUKo$=Jg{IrvF3V^kZuO?y7 z$w83Y-X6jB6OVrRVYs8K#coZs8npE6#u;goR@=9E*^q0y;xkvg_TB{#h^{vpQ4wGZ zwz}^dBI+mieDk@cy!@iiTn_IYxXnaJ4XyQXQx<;39Z!B0D#E5o2bf&5EQvN|D7u&R zkUMsP3^xu(EDbZ3e$Z5safmrOLy+6}?N|xT6hYR?{BmMJv_&W5t+7j=6Y#h^p!E2@ zybER4JN+q>(dV=Zjj3RNe9tDp;Q=%m{_?6dxZiGMM$O}K#k1I$$PiGJ7=F#Y>w z8z#x;#L??&hSNz2eR^rNK0#RNQCDZsDc^7A?>4$JDl|POL!46@qGb8~)Dour-EC<# zsFWI;!EIOoP=-*5cGdI7u6tyLrP^k_Qlo_uzPVTDi-kpxb2(ux@(xZpl1}_a3%XGr@%<{gJ0PMEn+!{hm}l| z+4dKeL`)$?oJhRR*&BUEU=$9tcKkKb9-{d=ch|=a zY$8gGms%euRKiE%%W$;}->bLs-L>be^iyP&mOWNP3Z1z^CG!zz0t?jivn2s8UcKk9 zo_qJA>mN9B&3?4xf|dpr(=D8=N|{n{FBfF(M0NW5iR(ZyYyPzOFc8)L8{$1Dy_1rEUH|Ofy%TctH5&_NRz-5EM(TCQMI9+ z;wo(vRAZf`8H6F-C!Q&aWG-R;DQdD+!dmAs(C7eX5J$BrXEFdM#lkUvjXVpJ+D~K4k7oeq= zSVv-8#&e-(pb!4^Sd2L}i@~4*YS`e4kqJ+bAO}}_tT1KO)cI^m7EO&+V%Y%AuQRF-Nr+9XW~9k?xxTtsV7pVXpmzt7z{8)&hN6r71Ac=e$Zi zS&2X1Jc0$p)-hqz(26#Am6Sy=`wCuWjKt&T+;~!p4?{X{#Z6KeA?eE`s=70$gPz-= zu(EQp@%)m~*LEX9^WXD!e|(IYt8hQoc+D#nCt_B*30UxdS-h&VZbpI1xebK4>`$f zmqa_17p9-g6_;cd3@Pf@!LTXQd$Sl8b_?#1;nu`s z2OJ+mTy8+g5S0gBB|-_4@!tX)N^{5OZEBl_J(DO4B5&V-C+RxLmyRZ(em_Q~zm{JE zhfTQd*_M0qO=ojU=tvN8hWJ2YXC-JlF3N0iV;L_A0u*shbEJ<#U&4uIcr{~&l>r+C zbysMtZ+FMFEj5zfpAM3aUO!f9<0!M-L5gU^${*aC&QlW;*#bp%{?wE>Tp_PEwJbKv zB4bL}CR(6{pBCMAQS=O;8fT`TuHt_|9zmFC)n1T-_s(y}DTSgPU`dAFKpSYbl0s0K zhSCNE>?EoJ|AQX3X(#C-jzh-zd2SDzDBC_cED7JTO~A#ZMtG`MY7GrUSGP&JJ=v=$ zR#xCI!?5#))cr?|@O)H})tSaWmWQmgfq?u7lOhIKfqKyf%S{n4j2{gZI zg(neBn6ncFq{^Z$^H3{Po09BaqLm_4NTkM+hnq5S$df*a@qA? z@OlGcE1?G)e@?I)l4sYhBW6E>^8UDh!b005br~XAAwbDCEW?C7?W!AfSjZ611aO-q zSn^DNezC6`PM+g1vyml(`6SlpC99p2pYD~elOP_PGstr%8W($?@eWUT!GU9T9D6PG51qei&a#$9Wf(ZrcaB=?QG^EX@cw!jGJb3=+ z$ynIm&pZcBb|j+AVon_;M)fJxJ7k~uHE6RsvgRlYCt0MvLM7Qu{}YW-izOlW+L9sI z$Z88cU#F~$mZKr#Cn9HY=@T()sE5u?UnW+xtoC}EzDA6aaAp$w=FL?`p zpw1C$Bvk_SR=rEg8I+u}f$5P;bsv5j2ZsU3@;v^U41cbr$Tv5J7O1eq*ch_LHYvU1 ztgl4(ZUSQ1;$W+F?~^Zjrp*GEO-wJxaMJZFQ&G!u(9qbyl*WTtP>NS7%Wh)W zTm~_nl1or1(V!(asg`83biAPrAgzpG2J>6CY3%LYmUJVF+DJ)y#IR|&pT5RP5j0oE ztYw>a?SXac9wx*AutafyA(2RN#}Y`5VE!P5Y@nL^a9TwY`#q2Ar-WbfElFw`qd@3D zzRh;MqdiG`WB?*`i$j&4bJ+wUDf3Gj?UF&E(<*C#C!WEorYpo@v{rdj;d57!V84a+ z^_oK%W>Y&!q)wR<30{m2o~UVPnz|~*h^g*SMUQ}?eU?oL^cxUFcdioa7GL>fKc8wD zUdIMEXk*6QW{`TZnHy&WyZKnh8u-IdfLF+L|4l6A!YYz_dmsuTyZJi5VVjyHU3APE zDPQrbp|Cu#g@q?{^;K7%v1<>Wmaqw2Y5F=c1Y^X}JAw5aU)1}JBA7-J z^qVK9%CELAml2rs%plOo^9GoW7`c81X(aC{DR^r9@r-M|A3sFwya9} zftx`b8hAo>10~{!LONvPa#~%Nv9s$z8?PX9i;eQYll*+vv$di%RJ|RuFi;!Jf_TOH zHkOv2k>MfFB_7Q=Ss#mVxnYT;DWf;(^aM{?Q_PK%SR|9Fi{{ix=qp6!cOltfr$PGQ zuv&7!t$uQ+mJzh-W{|R{sErdz{dI^W3d;Oas_Z)RnfQc{oK`Sf@q*KtUosRcIY?53 z{(E}5dxJonI;T6q{5cnYTH2igqLgaSHifP4YF%J(7XxfMmt^Uk45m413J-t=Hl49+ z5A4JjW$**Zy~%pST=)}di5i%B;RQ(p^<>b535&W^flIPm!9W}4at^foy~}qEh*CEa zm~h4}B2W{*IFK&4T8PVfG1caNDUW4-8Af0}PO~x%6(Yg{kter}Yl1|={JofBPZcN3 z%KfCU=-t(_x0aZK(xe{@Qi3tgEf7?HPH~902!oh`l`tX_g zZX+6k9fVD4$deFFNzO&krz0`5OWHYQ0{v9>%|c>|iu7ni+sOR;%$FfZ*N(*PJ9UQ( zEaluxzG-#xzh^GD^@`9J=fFsD#SCS-+zm>#YAT8YVNTHxq{@xlc{iVlB!6>($p-Se z5<%4e5(FxK4_#12iFSbDD|tH&8=4f8Qu;Dw$DW&J(zUGBh$7H8fz*0YOiOo0ZZ{c) z*w(>i-ZgVJRuGI1fDzMW?5lDk>m>XQ4^wQmxpDQoT|hGW2*+M(GjGBDU6vjV&Q|RDAb!fz`i_wA-Oe&H&hOr zIQj=S+|Tn!;l~4qBF5HlVi`t=W2#dYr%z>hmQ>7+mAqQ>E8(g+N;DVf81QtY<-Vbh z8|_GXftXWkVw&o>YE8@+3%G^Ue!+@H6kB+p+NjD6fKAGUyIR9G-QRT5VP8+fsw_Iz z423|10-JvF>%H90Jz(1y;}QttxBtERj~m#udm=>TcCKAX`nITwjdS4pNlr@FM^G3o zd`r@_hE#k~A_~S65rY6$a2tdX7REj& z1<_S4YhGAwi)13)h3MF=FP|Z=dy>u_PR1BUNAFZE5W?*wovn1r6sx9sv7JqTy@9Hto*4 zZ95iXQ>b5Jy|WglUNN@$aT*|%7&?&HBV80OONVzFjTz2SGM0-QdrrjuD|(6*=S@8I zKIJdN+bQP%;tuLy)V*wotbkJ$@Ih1|s-YCwoP0%kf04(jWy1R&QhD5A)HUF#ijiKS znzsxy9 zB282Vb>9UGaajzCKAVdr?hHUWbV>8tqD6&v$&X_FuJK4X0J+IXDm>_6lX5`{kwcP^I5H>^X8ng)8bIeC4?G%NfXZDu>d4K`+q^=aZ;vI)kW*+CLhR zjolMS-=co?G9uK|U0D_HjC|Cr2F4{YJJVfVl^Ge~;o)u$;6hO8rK1=Jt*A(I@+T#d zxpH$He+=8#*>@CCK_ai2p)0aQgSO30ebEsok54>?&qa-6;sq?{F4N^072uclIlpEnxe&-`fbxA#@vs1dG zrnEbd&7MrcV%hDGC&A_hZGb{qFA;aCAjo7l@zkbmL$B;9311{AP@N*)%(mkyBTMzV zX-WW^djPFnTS%mmXEMAg_H^uFWMSBK`EBZ*^a#$pb$B?x*Xr_05?HCy0KI#deA?WlN>x-adq zb{qcq>qZH09R@{fV)Zm}-Xfl1DC_JC18Le@Yj$M8 zr3#R>wda5tbkn0A$YVe~jLlUORpHt6nO1^Jd>HT+0l62Sgtz5v35PnBz$8+Uz)aRO zMiImtu6qVh&^s8v{;5N~v;n>1lBCLU>ZFT>g2ZXUYPC8}&H+9Hk1|yf+#Ldep4|sc zb!LjEqo|T&TFe?o5~);05jxI`EQT*8}l)bc8E8WSIzBOzw+`v0#V+@>#o zC?5&o`;HzY$r;KAH;jYF$h2}kDnIpPY_hV7d__feA=l-|sshU)ccd9Xab>cwAt-gW zo0Ft-y_?V_AS97wA#fJ7YOF(u>QqC$=)sUL;Xi{}3!aF}@IBeq%^@+vQO8=I4(7Q5jUrjoADc|zDK8B07Hl!EJh=O~WUl+IB>e#*gx}Bev!}?MVdP3GWEl zC~aCL?*WEdv7jAS>{ysigoDLywRjtkc$J^UN^NHbuK1=@l*-^aUX!BWDy(cNd26{& zIq&Pe%62s3Gst;!{?Mf_Y$<0B(!)RvT$8?=7mvwLB|>wHTfPnQQ62Gw~zYsAN}V)eftp^^l;Te=qTRu>eN!gO|79-2sHQl z)uday8xs1nrm#$j;E2R}xRXTkq?s%ZBrDHklr1=Sjty7OE+|+~d4{BP!_fxQ_)VwG z?8<^S3WAvTOiL=xF_oP*TkEY04kb)*(*O165F*&r(U(QFi7?SPQE z=ufR_UGPYD!AXd9id{w#%nf~0y-XaZTTr=sQrryZ9Dn=6voE_+N{k2Uj(hb;n;vqP z99Uw3i%Y10R1JUo`sVbcJBR2l2DxK$-JI)~#>I}b>AcZ0Gd$T;7tgN+H#C75!4vR~ zrkznEyF5J;B>D;l8?V;{rE+PNfy(bLatZYe7%^N5yQo%US-`@qTk@DT)*tZb(V?%APy8~ z<~miYq)ROUw?iTz-SM1Bpd$Ix*#{XdE;9+Cm?0PdgRt@w1f+HO+t<&3^lZ|d;j5)j zC@0mZb7k!18dsq9EvzRzmoQM~=Pn!as8dRg`*EvJ+S6Ga9XScNj2`%9kM z>Lj8`%aQDo{E!b$Fs5KX`M00XrFaTYwtMloqSgrU)VD+NIv2zNggYLG891?+W93cY zy$GdjVO%N^z)h?R?R(PF-AFzi0>(Ciyz4~5HeKtjE+6^JK(Deoj$jQpiP1fc@5v4DcB*qafI2n zjlTZJ-{KcP@WEsHJSsuMXh9c;EM9l5NFsSK4a&`B&Z1;S&%tr?sgzz>&e0KYUaKST zMqe(Z`%Hxn66vXHEh`mLrHpG61+lELde3d;*L+GJ=g*|tMgq z2s1B>sST}+6I#s=WzzJ3{1bXyT6`k(XityaeM_>yEo#_X{1wEQQ}-;^7!$ zX)mBpPT|yw?eo>nw27J8H>HATpGaB^2cbA;jNX!Tx|Ukemu~tc@+cL2 z!S|oujZ_WyQ|g|tu#w?}ss0eBO6J*l_w-7PvE(a8XDbYlYH?qe!Dh03DW6%KVV&m` zD48R4iXspsGCCczs7>bM9RY5*x6&O|Gm5QcjV_2mSZ)hJyj=*KuPc1A71LE`y0~M- zzW-ShfruTY9zYGlv%jJa1EzjT^?#NV6CFY0LN)Y@AHSM(s;s@5ol^1lS{aY@=a0Ys zx0e9H2Wk2yN6qj`T!rz$a~HmGo4)t~g_ZEsy)rmAuOXZrg@Ns2Idt9ESiK{En#}as z^5PQ%2*L?$t+g>!Cn)VClr0z3yTmpKnID|`2$;fNE5|KV`brejI!Df6d0>WixaAaz z0!Cfe{c4Or6#ZK+h30d^Ff4n9h~goI#y=Z(AuS`WWKdZ?S}Uj2nbZcka^hzUEb zY`*@%$MgtHkmpVpBiEB)N@xsJcqMLC2}leypdKHx*3);eaNgm3DTF_{QF-wt;TE&q z>j7j2Xw-v4kXo5JX%m>h2#&MUMVov3w{Ha61j;l(uQ4u%*_wUubwiuH-u*-k7}`4` z7@rg5a>*T2vGw%-{ZptS@pBA+0?!8#jgi890IkY9NzSQ_MYg_U$dnoak=~naKy?q^ z+np2W0H_I5pqEaO$(ah^W8N0!`v$=gnZs1R28-p;ndk}ztjD}7!cH)mg?NFPJk9Go z!JS$<>nMVpM*u^G%)P8m9lo>3l~u72&@ySka;_`q0XimogtzjNRn3XzoRxav zxhIadE6aa3cMZefYfFV>K7xEchBs`TEVpYvT+IODize%JN#1yFaO0k7(y0V+2#5UGc+P1(+r$ z6-az0LFBj|s5&?aiQ~IxJB=*7Ksz%%3$aXJ!{kkIsnCjad0xGZ9pSR{*^gx01E+*`Yky7RCBN8A!f<0@xpB1x&YNP9}vQ}DC@VO(dDlpLqhu93y4 zrMY|!#1NNsYTjS6CY@k@5SNKM%L<|7^o=lA;qO6;b8^*>Pj!|{Bj*im!Y`AjOvd^z zIPi)+ourEQv2EKxG`_=mCNyNrQeJ;j;#wzCRQTM5#k;p_o?GQ*T=wK6(EMd=IWX+~ zB92R6A5wKXA!e3fFW}hwxx|6pE9xN(dO&zo(j?AVowG2)-KOwT&Q`qG>~5c_2v3W< z1>&=B8BG}yRUO(^R7#ivF-o_jW#46o99LpS8gI~qt(dO<5cV{gV!U}BMv7NT9zap5 zpIQA7&sEp)7n`}yUEj`b!llg{&C~IvaECWsi8S)dAO9Ddq(gy3H|P*s3yx$`bWPIX zY-L(|ocj&s7T|zrsJXxs_ zDmgLfzOMwoi@_D84ub^5S^``%3~T7AtNQ3!pd?sn4r}!2P3zzaxu?25brtC~M7X8o zy{quQmby-!xanIm{!l;H_L3S?1au!Eh9lDgX=2o?bCz3>S5`sUl^w`KDM3v)e3=pl z%l*NnjEDQSO6-sjv^tiT8OJxM-@s8chRlqqQb5Rp;FmvnpiLh=$3U(heYp^E;N?J@ z{`~JB8Y!ZN(dt02|0=ZWbuJE?SXa2s_`dz-1?mugPAak1mBc*djI?Y?; zP6Ygh6uZ)edq_PDvJ6YDc>#s*(K<$_;3;`o9rkP%c{39R&xy`GPa@ESf{rMo6w^1k zvuQgnC6rWJ1PXHJd^&ceP5+u^DV|I5j5K?ND3JNQr)G!UVjQLZ8kkmy0DO^@S{k@6 z-N{4fA|wS2wbl?KIVtx@oBs6eM>SLGT#BIX9*DxlZQ}GLC4{eQFT`v6(Hq+IOq+Pj z#=UJIEMuhGGAAhL#G9voO%L60ta9#?l3OyyJoQ5dx$2`*P=m7)M||f5p+rqd;6QI< za^!T~v{jj8>r_|g2Sy$h=$eLKv$0uZ#`NsQ$U26g=ghhy#J|;7gupnssXZ*N z7G2soD>3=vO1yVmm=udZTvFJq|f zMsjVl>J>sEW7+E%I4sEGlvD>*8m^7P5GS<61}e<_b~Xal382(-_iB0FS5Iz}!%AWY zIM0QiA@j%+zxhqmZMv*%$WB*sz7&_9e4soJXYFl4I-zxqxC^^#E2pUYxkO+lc}4*<<2x;TbS{HNCZy0j8Zme4 zawc{|Y>YvU?!(=kc~$AX-Ixu`Lzz4`@e!w6?>D;ki*e45W4=Xib2*HQtP3(G-4yQ8~U~Kl>DGXS%i}L@hRVEbB|~! z6y>70@e45Mb|NFzyr2ESU zA-C-4cW~2Xys-WQZTezviHFS=?ptiP!PSGX%h)0bG0C)39cYn2n=tkC`G#)?841Wz z6KX`y^IgAKQY#V$7D3r}rD1y(n}x2LK}4Z26q%JZt2Mp*#_bb0o)6F?@WTueLvvha zFY0Huts^K=8IYh**+~^IqH%JH@U~$X6c#$udZ+9C!BrhN-YevgDR;#+#;-tFbMp4L z16^vEaiO2Me;H@5_ra$_Vz|$SWDP-RmSM-w9494a&1*{CyEQ3ihC^NZ%`LNjv~_-{ zBNLN^ss&bfIr`yOZ%w*Shm9|Z2*HUg%^#(qolnf^n=5Uimp$*xbq<8B_vPE$X7XBN z6JRoJ@*62y#Sk? zLX8WmVQ}JuPHn1_KmY-bLaK;JzbfVuuQJF=JFAseCSE=wEERlF@{pOlVJK)+sJo|afz?R|~LF4c5~g430{ zye{giCnY?gUJ;)SX>tOu{q)VtT;Agw$FtZ~y%MK?#R1xVzxi_QnlO zq%>xQ6#Z^^hcHVY47m9ew-1bwKfmprn1nGe#Suee^y0{!^v3e>eKUURkV(4DR?#A&TV52+BMI`>%d_P12#bZ{Q8gViP%e`&}V-$z(CxJ|eVp z7BBm+a{>SU4Q)bd$_2>uFj=zx9&pD>T0Lw$8Q>sXi5z0B!|@vs=I)Ze21=?hI6ToX z8-;8jr-Zj8xoKH^4q`a&lM)yhN79jssnG((Bw1{zXwHj<8rQ@xZOIf?nI1t}KW?2+ z^OW%{w1z#bg8GTwEeZ5hE4te}!la##=lKv+fC>Sf!JYHST#v@r^r4a-gbFpOMl%Ju z6bGkBk38|%dRaeUck#>}*h9$^b;lECtS5^tWnWp4bF-ytdlpZYFg;0mTxo^x*zBkC zn+2dmZ|adY{pq`pT6fT0#aFZXxVk?ywCMvMrQ+5So&|)UNU%A|cHlh3jyxNmf zhUoSfQK^%{lcOshr97ZWo8#7;)azSc%)X!lHDQbpd$FE7bs64}A`ltAz>SI2O)ac` z(yaQ7Vr{yUNDa_GW_&PJDekVSs*8Bv8ZXyJ<}IL=gQUxAr&QD3+a8Kmb9V%|ju%I# zI5-fT7>{NwHJ5wFLQQt}0Ef8SGp3t8{?vCs@_5YK7S2trQ zb!gFrjG>;2EEEKT0&56W{=8-Fpcvwn7Icjy4x1S@@y5Oav#_ipF}-TZE)_JM+tMK1 zF$Xta%EpzYDjA^aWmdY|rZ>c=q9hoJ;T9D94{Y)HYVxmeQ#LF)O0CW@2=N3X_tzI1 z0KM5M1q1X&$1KSpPz1tF!UG45RmBZ3UG=HCvT-Qro32pibecZ?8QKtUEACsHomc?M z47*ZE4&7fII0B-)b|33#c@Gw+sT^d}D<_m%pp5056NfTmUXCG;wCRC1c_SmYFmIX`OJUx)Xr{IBSM04)c6efC}lDus=bEGgxMg!?-ou16&Sl`-np!% zwmQYo8igMgMhYUNXF^16G9eUH#fwdUGB$Z{P{^TC6l6OeE50AS;L{a_+X2C@nx$kJ zmE+lrO#P4i$_BDFBKb>lC3AX9o1SPBI9U?9lA9-%cQxt!%;+V5B0bU7(S4*%%G;Fw zpRkz5*3dwHo&ds9ms=Zl;&hEwg(J)pz_i~LiPy^#Sv7$17M5;(hku?L+RvM$>ER_v z3Grb)WMEQm7bq4H)NC3sw9eQFAy+eltLF@!EiZaAQCJ?kqt0=K&Xj=exj?${X`;t9 zmxNSDYQ4>h;YuQKnoI??+l@6?=cS@OME-+V0n}&M;o6|GS_5&s*B`k}3fZfV#7i4h@}Gilip#P(a$(6|ioh z{Lh!%<@dovJ(0((e2%?!GJAHhG9f~f1Ei7R@`0-t39WQ>BUC&gqNNGlF>>I)gfS`QlJ_# zm#^5k*2zZYH`lo`{Sc9~xMAL<&TC*+z(cJVjcV7NhyP$dgd}Z>Y|p3XZNhyk-^r}Y z&|P#33m<6HGi}o3MrBqdGSMUa5dPse|9YZLViZX2571gk7g^xpN%#FhhV_d8N`f1G z&g7{-qfNbpx-$QyI@5u3)dbokd6HU;KoL~qA)tWQf*#K7U$$_My6;Kh4V;bfm8c+H z@!O~58OtcUu+QX4pRZ)16z2~@*M`PmdVElR(CN>h=nMzr9-Iw?>HA~-#_~hryb|FB z*iGtpm)E@vAR09XHQfOW6Llu_NYXe}Mg`rugDh3TjT4$wV@Ri~dh0SyG5y?+i;DX? z!mq+1O%hUTxlwG0#ZnjUpu*L~cK}5|y1(t+j(yv|e*E#Pzd6t*-Z&)#35c%3A!KmL zU2<*{Q%+?~M@Hp6n4zy9ddOY=m2hM-XzWO+-y3c!1&}K8;c9ocg4xdp2ySgDhuZv3 zFhTAs;G#h!2PEa>1r^NZanFa{5#Uthigf2G60)2^>^D#{WigEqNF2dBOpCSw6T@AJ zayc(I8#RU42(21%f_Lfc$dL{3QlCL5XH3^T1s^Uk{)*J!eJ7KF$tD!fRZxWn8BSYT zS~ezoIK4D|u~T;)8&Zs+d?>L068;3`wzbx30eVgau)fd zYgZIu${GlOveQH>ArE1tJ0k4y8Pg^X)X4;pKPO+S5+_H%7FSOHb*R^n8GxD`%*k}| zy~ExL%5zx~l7$p{k_rQSjtyyOM`Hvg1`@MqZ5{{~4D6NA%DB6w34;`L@o6Nuu2u_P z-%s+YVzMRhst;1BUYWN~Tys3z%P~A)C2Jiw-BN2=%7vKsBY9hpyoN(}E;ssX!mb1H zO%0^M{Qb>+G_Rm4;pjG`$jrCALt;KJFE(f=!Qv2IgjHR{s4I> zzx?k8?vQ`vVl3zc;J3H&{^f4~+p+|U5+kM1f1?s-`HZ4vsY)7CkK_xd>d~e`cq{U{DzWYt{7!@#2z~9sC)!l7Y>Oyz z-ULLtHH4OLns#DJR72Aw;iWQ~libcC#2RQMzkfUzY7)4p5`!&L$oUK`e5Nd_lfYRt zK7t1iF$}I>F9=}NpXBe@l?P|ZU<3y_fs~$d6EMKMgE|a09X83sgegqMl1FXsBY1sh zU(m`jW86N&J?S_F zl4(a7sv0NjAaxAj{AJ3gNBg78NiKuEGI!JIG6O-42zQ!tVcP&>-}#Y}Esk_LCTNrv z<4@~6{r4G!CeK0=P*@;zu#>S=se|eh!*2;(K|as!O{|GK8B`8So=o$X!Y!mDU$QvB!yxtG#~oEp7Uq3$3`jf&&8}&$)ZcyL(kP z`5jett81t`JBy{{Q#^8xC8c)|RH4x6g*xVUFWW8dVcAi@q z==EoQgFRK8`(hC(y?iPp160oTrZ36*H!95DK^8%}JD_X@sA(Ta<+MjYnyy02AS|}E z06vayLR)#Vi>4%wTDp>ZLYB16FqS~bCL#c02lV^C{O9}+fBU~La}@z{v&urAX(GLg znslf}dSze~&+3^rK{{!rq$7B5s*^?Ts%y6etW>*2jqrf7388uFaX*`vxob(Y>^RC13&7A~ zYGjP2Vgr7B7AupO!B*@Yco!BsU~a}(-BM6>@5z(#&dA4Y(VocaQq`?<@)7aJ|4>fV zsQO#AN3%2Ng*S8nwh4VSELtaUOdNbpGmb!PjDc@Aws`V#%>g_Zh;UzR^h-K^sxZYF zMWCES8MWAz+gV3CK>iCMji(XGs}$rmVHjJfEGN6%g9Ru%xMW}u_u4__Hl{i&H^VUT z^UKR}3BIYC4a#|`fuH;9izoc$-#vzO*(z7(bN^2N{`HMEVON0?iSg0RX5(>mH#NbO zO?vjBWC|*AJjDu5!sECiCf&aK$(#n0OCz1KSyXF5!X9jJO@6n9VFMb-&c)X&;4Ouz zH)pVvZzrE{-olx9rb#pKBq`aj_dvpy>DDzQ6k@D`SE)>CIPz@2x&Dkq)|Bp7hk;}k3A z4%1VJoLU1b#(w*yCv&2?&xOcV%6hZ<1t>`wHjS@cKcCn#g=Y=ge=gn9FW=Cn+wM{x z<`OPw1`sUkhAZg|KrXs;kmB{eH^2G)Z$AC>Iig^ly{FQvaJW$dvMwWqJxxBDcLA6* zo}?my0+U9xKI2ga)hu8QU?B9%L{?PNpl_Mo*u2fddc4 z1JwN+XsheudO7{8GVqWIPN`&-?b;T@V0<@BsGtEI?yRb7>Pe=hDu&3LZmllPkO+a~ z%3ONk_RRVnN|95$J2w{dF2)QpRfD52IOT zgw=1(QZvit6Xtdl<|J`xtkX~GpMLSN84v`Yu}SKha=V|ESK0LEzkVQJ^TYCepa0_@ z_wluFF5xdKo2X#B8@?sC=2t>+M9=BPB+&?|?ZESQ1RV<2xV7$tae910DP0R~e;!!4`_0}^y6BmQ zX6gH6?!_VEMar!~GrMCMqVd{kk{pMaHeH%> z&+O8%V6ot|#9uzSP5e#Y_q?nVAMfMB`JVrVQ^LbFBpslzE5RSnp4mp8%x5_f;_OC<>skzn13cNVhkG(8 z8ogAlLp0EVQCaHV6mrkco%z*Ufw@aZXHESTZ^$XkIV-Sp3vB2j*^di6hu#fl0kN6d zxgCMv%V22;LCJ50I7s{)G|6w2@P|uycLO5y>}$o3xqhgigqv;wbwI__C!Ar(_#Dzb z9S9IS36r{!8vf^*N$E$heV8Sg<>%oPX33!rIyC+K8uuiz@FU3M)^b)J4DyWlI9+(n zqgvFwQ!$D#+&Mj0I_+3YP29u)N2$)4=1Ano(bx(JMi-GO4TZ0pJ2AFV?ANL(PLaS8;w7Bct!3+mcoQ)Vn}QA;ue89-l+=2PPc`NW03 z=*wSx{EsKvbZy>tAs`0%;%&}`bW_5=h#5p=BRYAn^yU)&K%2}3V2^Ssb{XIwFPJDD zPGgN}I?9{EcMgbJ|0T}2bg`SgxdT0gO$Opp%SUGnVvZ}0#)~7y0cu)&S!Zs2X?xFK z)@vGNEcqCE2O+ur7D?ZO8r|~cHUzOL6p?Yj-;k40R^`)F8hnLY7p1|&av*$l>a}}m z4X{J<1m`@?)j24v$NFMqmK9+Q>`+F)?eYUmT?No{u~yY*TTuikLo{eYf8gF5<(}Hx zM-;u!7xYZ7%9a#bI;Qn#`JtkTl5GY^?h3-Fwp2`I94cv(J zw5hy2NnNJnr>4ayb(wv@v@GZWppph}7&w>?tZ?E})txL5Tzq1!PxKa$)Ta3_9*r(d z!h_zdLK!=nJ86zxKnce^<+MfM(^CZbW{f;Ts&#FeV&{Deixz(Jr8I z19^SZ)E7(`ktf4q9mG~;XJ9;mz|j&z3el$jy4|pp>9~aX1;qGv!(H5_MhPcFzir=B z{Ze#cSJ}8OxA3jtYgNd@J00v0yhbhCsW%;WNG#u_hkH!9*h7L|VXs$%}_V&`<#* z*}VS-5j450J80i2FlEB(AC$>*Zn-RxT^$#MK}6uRu#V2K-TMy*6_2x(Fy|k*@i@nr ze{+9l*08GQcJWJAxAbP4EoL`SKUUbxUdKJ;8Tfxi!ZQA$w7>GyZuT=KXJ(fB_!(KV z)w)nVq%Z&e(-Unn3GdE7vPR+kpT29{rY{6E8Mr@zJo%rW_ni`c88_LfAXWhIsrxK! z(S|AB!-AEZUU1k4;5mW<%rbWqbR>Z@XKX;D;Ow(nS@B@?a1QlhlQ?=x5)k<-a9Cr4 z=bh+@g!3ihF_%K2=Ls6$+=7&$V$>{3EEFd^LMdOH81r@AHphye){B*DQpd=PP#H$- zM2S;~`v#7yZ2Hp+f?fnjN0eISl*r|9sY4U|=BebS!O!!N7|K?Zmpv>9*4l|z)L$4m zah)sfU65O4)mVA|w4YYd71l~uCFPBUOffJL9Rj73QXpDFcrh!0I4T7K81mPf`6zeU zq#Jk#Fwn=ucmK+`O;4SjndhMl?E;y$3h&&eA1R%ME&7t}c2Rk_$Z)r#V=eqTUhTAD z^+24LRv0yF<73mD0$@E>&LcSs3X~le5Bk%t^aD^C{8Io;kQpYL`5}tV$Oiz&&?cCj z`tnC-lRVo$w?R5U&mgnHZb;oP2CMdzC-p=cd{j%jb2Kcb!8<6H#J*khD&uCg15?Gxne6oS|0qfOW1;J>#(iX{Q-yC)_5&kwsxLS>Su zcw8Dye*W#hwISWg)ozR#(JpT5+H=mf1WgDEjki>8(WFo1C)ejb_u8~m8GB-vjCH>!L0OZXrb>&6rf<_Q4r4Yj$U(&sE2+!6w(GYP7th~;iYGn6e?qDe}UE-5+ z(h77;Q%FL9h1|zT1ulV{Yje%tSs5J;CUNR9su*@z>a|cw%KZHDO2cpY3Cg&+9h;y| zNE^_-*Pw}Lj#JVXzkxF+opvQ~7EIeGO|3JE--85b z$!Xh(N5XN;yEnkM3D7O*Fqi<13|}C5k~s9T@+Qt8MS-~F z>P}UK=m>FV^Q&Gu;f->E>3JX@7jWMrvb>~tJO4@!>CF9%w~rcYw6DJZ<~DsmM<$PE zA_6jL;r&cvnZtGx1--3;T*KrQ0 zJM|t$o+buD$;Iw%ahk4d$3FxFm9KK4qr(?b3C1MNFZg-|WwE-B>aF8V7RkraTZrNP zgFyP{vxZ{HT(>Hvztb=c-u;Y_st3lpFxQn#INiIpQemDh!1f*jS zWooMQs~DDYBY^hs=|R$u$WrVfCQk%`j2=P;(O}E|*9I3Tgr$YzfBHPXZ{f@%fzGSB(6VV+?)zgSs{*l#L$O40W}Z;b zPJe?`i@Z!y*fI)G%TBIS!kHE0YnGF3nyMe|L<1W`MSZ^BPs`0>PQ>%0XC*LE`rs%* zFTG$==bEC?t}^!)kIZ?y7_XtgF7DKUGhi2t>O+zh$y?c^hIFlTWWdl(M83mmAAfUG z!aqFSPKklu9&rRDx$^yAy(#H_`1BL%ke%p1O#B@d{dICq-&{HmrnY&87kI3J+i$xs zgG5mu^)@C;>*Fz#B)RIG4x%LeQAJR%oHEg`9(GLL;WjwqrOHRjW+al0iQ;|TSGE2M zN2CNnnQJi}K#wd*OB3Feg&lV(+;K9A9-jo6AeddCEW)`%lKHH5vA3^mz^Iad(wWk6yp(Thr z=}Wc^=_Z>e$@5nd7mC4#bFjgR)G5;b_5ff$Y3g^lEP5e0qk*JNi$YNYOZq(sG%+vQ zx+Z1+LhDzf^MARc2x)@|EKFe&+f%pNC{G@Z->c(4OQ|NQyp47}_xf*p^;MuyA1{e&%jGKi>b;6LZz^ZrV;0-R6SJ2LujDVn(a=Z@(Q0LL}9y`XZNjO^}IVA@y zvTP~D&{*x*tCNIDU+jb<3g; z2j8iqgzE1Wv|%kp!Y0{Xg2*Wnq`2Yy@+4V$xzSe7M3Sr5#aG*4RJ*}3dC@tJx!eSx zF69^$wO&lreXB>U4n)AGe5az$se@!L?Bl$1I&z9DSsPL`Ay9z?f|m>O6jE+FE5s`h8H}YPq~RWv_2oZRp`TGNL29p;Ms? z{QBfI8i9#{-DQXY2%}# zn+F=y*ci+7!+wi2d3*JM;8P425T73g&}l9mDPG4FuGQgab8H5_a@d_4f)`P}w5M}S zA-4CU^G|GipORK1$FK@|5E03-3yz+cQ-=C<+C&3~Dc6%{Gass%;;*o7`s}%q(kdw? z2^8Q=g=dM0EJe%JEsJ^IW>@UwFk>dWVX&jQIGb#wJh~RxAZ8{kd6ru~o4~Xg^Nxh$ zje;?~HNW;}RL=LjDBs~emmXo)vPH|@1=ef`(rgKJbFVgTV!amNKhLW%)4d|)`JN) z(=z7arJ_fWNoF*}c(9YSCus^8PXzVjC0U%EVmR$ud>KF<(IazY_YHa;$AsbWl5aRL zENc{ID53~N7{1|y1w=C60x!2U`flSNqw|PIag@$H|8nEzq23_4AWk~_3tSl7ah31C z7Ow(}R;DitvzlEa7QCqrdW4X9{p23&VA;)i)&#B=z#odYxf2pK%GZnE+i+eIY)Hr4+YuUV_;x(GhIDUAIy86^2h7}?wsV_4e)9a4Ee@B9gOY2t*yYo( zQOJHcYP<-HVWU&sQMH-CQQqO{ZWwPjWheGl6i+hvV+?~R@da2bwY~RvU;p*JkL0Ve}5NJg%`sh2>Ld^vW_hI6#T7_(yI(n{+)V@~c@QgSv68yj|6ChTkl`+hBm#GO{t@Y;B@hc zdW-V?pAYRUyAmd-`NJY>NQfa)*f>w${O-4Z`}hgtFj{;qrjo%{{%EC?G#X?OLmPjw zI*Z`)Za|ajm!?o4WH#`=!pp;pCUbw2F_kO`UKeCNJ@g4Oen^lQIX{fNt%s?$3rvEt|LOzotSwC-V7cHKr&26^f+BN7^M|r z&`r{GL9_du`wXE|GdeZLk;LU4U9Tw6aT+hS#9{yiLmfcyEU1tLJN4(+AAWip(nZd~ zrZi+aKfH%@&$8)ywp8V2mmV? z6h5+!H0a)H_<%f38XV%r4Q?`CpS$8wXM(|Lwowa`SrU-;qa693Q&=P&5gsny{k#oh zX@~8)W@l@Y;E)zu4jU~pM8g?r7*r_cqF&j&+6QH;Ul5`MH$)B39+j0~9l}#A`Qo~fP$jTUE8vbP2bW_6P zrd1%uEt^6f+KIZX=dxIzz%IoV91>du^wR|B28pnM}#EKeY9CE29PyFB&4HnaY0nvld$ z09ZXM-~oG>i6dKs@G7HB8ebuqVH?08nv|qWTAlYW0Su&oAStVlLyvAFw1?4dNyb_L z#Fm)e^eY7FX4GNI?txA|nN1wgu(G(#g^exN7-yj3%1QO3wt3jeQ(<(q(GES!CfUwp z%?A6$@Y`EScNM41mA*CI$QvNU<|WjAw>PxuZzqs~*)M=aGG}u;82T`)liz)HV13oK+U&pT^@8yQH zbddvLLuSd+7QB0rvs_hP=&440uBc4{`(%d65u#x=WwUa><)PBG&uXd|%cjEAT|SohD4TAy32sJ$JRy)}q23a_c5uAC>^~IIrhNJG zj>X)>R&?WI#Rm!jWIvOnQVbxJLQp#T!P4y^j^A4@!2nW>GEwEy8Qm`H4o1nZLE5@c zWj<3fy~eTc)97TZWH5p0W>hc>gp}J(t3vy*)WA@6()-qJbMp(=cNF9;{{kuK7C0c? z0s(#$=n)Ijoc6+|cb$naRiXtx4h!=|9 z8fG>j*vG8q>0?pGAPQG-cK$1W3Rs3KY}PUgAP=I?SO&co5dHkySq7YUL!sC`gEos~ z2pR$mwxw=T&eNrr@L%wXcI_F zC@$GWWrp4^(Z`VPy=>Ao1?$iWOpitbc)-|5Imf1xH;{*>u+phEcjYo^&g+B5>!3I7Lsme zeT%ISe;{p=V*7ZiluaOq57mY`K=n_pJ=U5AP`PpF;ApQJ(#5Y13w&vGRJQr>%BwpG zcA4y3vwKiak*WSJwGWUWS&-*Mm+f5sOMi89o6t9m4YTT~*sv>}{@G@X~4<~hs{MAq= ze``BdVaan{HArkup=IUNqK4Ma$_!Ba~)e;JA%8(#iIn*t5MKD~1 zWk}Und$5p)c7e1C1Y^Nj3c-0nq%P%&<;qjt_K*7iA!V)dU^Pl`bAFHt4lQmcI-?@J zsMeY&9usA_tN#NfIb48GQ+r%7@{wd-OC^G`d}hvd)=nAc2I?uww2p@-$eFa+gHpu& zl5u~G^pPYJoxP-}@^z{J>bnA|y?7KRN;#?l;3PR+U(m`XuN~^=f+_SLU-IqO|IL(i zTs@~H=bi9_Y@h=V-=_cVXw!C?3PB>Q^qWAh5t=+OLbqH`2Zj=h(?a2()Xh_|RL~X6 zC}770)5zWtmUxhx@(LeIU|m%h2^@}_DpNBY$(4q&Fu(^90IpXa|26pJ4~G?AVn?zu z7bqO`L(f?Wb(~uP!u-bj*)j)2>Au^!L%e20q{%`cYSOpp#xh4woHk2)DP`sjV8!dR zH0q=1HbpX2%z!rzq(>UIJaBRFlJ>R<=#GPXg%J6tgt=WvAdgL}Cgn$yuXs_aY;#uB zCyCx&!5W^%?M`GaNIdV7P<{;w!?uiTh1usgc$W>mc)t2adJO5%qOKq^o}EA6GT$a~ z=(X+m6wKc%3KoJ+6sh5l}zybhDA{HY?C)mM({&+4kP?8<&<0@ zw4iGT*u|*kD_shoDuKpEoDg~cQ)V0|3q|E^iHKQgKa$v$&aqJfB}vBm6Wr7c+Gtp( zNlUIF&tnFKjeV{)3fBwC*i44BMWA?Z4W0zpQ>q0l>ep&D>}nbB+IYo@gk)35?|YK& z^Oqg*#%Z^V0Kf@C6;TkAx{CUkZ;*7Gu7?8Nic>M;CNzK}cETFSI%BJr* zje{gQ(#3P;ew1hvN*3_V?)M@Rpv43Hp@KG59oY5%wO0B%XOlfDEnwa&q~bv!jwnnO zDhcS?hmhN`;4R)k45F2$TDbEI|r>S zE9|$S>AwY`e}4&oEt~%3Pj;7|0J+WQ^KwbUZF=l3*|ByoCXn&K+@=rr<=0HQ|NO82 z4u^>Z={h!Z&aSG<3HSZ@o9~9)++;vs{D6Ap^Q5q@?9}}~iKqP%W%v>VcCLT9b?j6M zv)XK$j(c2Dy|Nj^9q;c`z+J)>kh!AxTW|7T|0r+f!hD=^eFl?KybUGsT`k4eyZ^%E zco{+CH=P216Gr@9s~!{bEnEl#$@&#J{`zLZRb#*Xj`ZS+xX(=fij(8J@3(Ks*fNtZ zSGJ<>q7d3h(BFDL@vUC%TQ3&=uKR86X^EP0zEN==8z1JLtnm9AD<%;61k4SQPae<0^w*oSD zz+)ewd8LwY>KNAN$t*#2n`?%+z&_*SPwvfLL{p~6;GYH{&asLx9ei^CJA@z76w8gU3dk45&AwA4Y94)#|%{dHelwl z=#X0KAWV}?(rPKQ>cT8ntOjsWbldmJq_=B0pqY)Rfvu8AwP;pT&6RFRV6rV&}$db8L6Moh-1V_MAz2t*PMBT30 zcy#l}o9{WlU|UtosrpRUWo?oM^C-!#D+2CBd^Xrg9qmTl;*)5Bq;Ib71;M+ojbg9^ z$$~chUZMrqoU_abxo1nBYqW**cHm)_b%^vonfAQ*UA$!@5scpe@*C>Ve zdw@2lhh|rtRemPqdggpZB-BTCOrilYW*_TA<-rBMJ*qsznqtBC&auNpuF#(uu6Es)d&8$+HIiG zky~}WJnn6{WO#0cP+vBK1?B|%+2kO+MINmIP%qVgxE?+~9L*cZ2$;o{OeH^Dbk2N( zUcA{7P&?11d}k@Uq($MF=HJHs#{^F3cPuqMx$ZDaHH_#|Be*r0 z+opsy^v0r^X}a#wUB`>H+2Y0Adky|L?H+{iyGFaNkM$|iw%lI2z^9PHwR__J^7Itb z5nIkiE0yiGD7LzE)O(~R9|AC)cF(aXP)3V3?lI4d4yD_q(%6lx4<-EfK5>@gQ_e(u z{Cqy0Hb4FiJDK&8ISLXUBIe!6{y2L;OUebP_Ug9t^Q>@06H~9~3+KsjCe@S0dvt`) zJKLZZycNMQ-ibj?*-82JU^sX+(M3h3^UF^m)znxQ`1-MqH)F4@bNMWchwPS-RF;ba zE)$2x)cg{hUxsOHNS$^e-tHbIy|`btl~6*6?jSUmIc{%7^>ZXyg(htAt7Xv(>_j|WaPANrAPa8l6W$?r#U}sO!(I;xnyqFNe?&<$UPt)psgv z+6)%0r3qC)V#)Y&NX~jV@LtL7W|v}Px-#|nUlE1)MGq`Nt47;tX=<~<1&(Z)98oRX zL+urBE{NEAAxGbz6(~@BTWOLz94YFCudVLZZSNl7+S%eT;*$3T~qgy=_ZW7ctw+dUc3ZT-#L5s->_{7qm zN5qh0f@c?BCuNSDthQD>=UiM~o|$-?_qPE#Gbtg^KfXy~LmpxN(ZDvFTFCK^rXk~4 zL(bQzSFzz-Ru5D*2w=Iy$ELdim8f?N3@Cwur&3!=G5d>9!f6_5W=~J2%D0Kt5zqp3 z391j9P7LMY@gfIDtS(MD+^F<0ov7ycSg;QYlhvCW7eTaD@Xb`--Fo=1SgVQ;B@8N$zj*JRuShyXBo5J%l&X+5-Dy(-;nn6q% zevLmZ#x5$twmB1dCT2Dgn2Y+3cmT^(#jROCuS-KCGggDwzSQt? z0o{Xh53v9#N$oId%l?k*db*cBxW9Y59~FUY?>D)MXX6SP z@L<#p7%hs+Cgp5!-~fY|l8Wlz?bRf(DdnO{gSOVZze-jm#@ScPhjwBq@$GTDX%}8q zCFgw5x->j;I?TM2JbqBC3o9QvtYD?sE|gXB}U2=?M*eNPH>nn_u}h+TjM*$0ouTA1?g-z zg7BuNnV2GW5m0zxA%TjRo5}cB37)yn&RlMeqpjwLayQ!MGDWJ02WutOqfF7g)LbjN z^5H@zhPGw`9()r-3vR3-bktf56>^3)EhS#-THo&~zOcii*~`&1k|eAIFO+ks1gtTZ zj^0z+8^7`N8zY?Ks?1*bktx;Q1|V^0unvaX8|55@A#VqApvU-#4Gw(F8UR@snexe0 z((}r4*QT$iIJIJBJ|?Y8*qk8JOzz#a?=h%3{waJ8TD5-}(uXTOdz4J4INLLw>BTz| zvKe%Dn|3ej2=4mo>I9|{I8cDfp-;t@9YUiWXfC=L(OXTfy;7km6qE+`uyv2N{=|b6 zuzQEX@jVg8%!mkc>A}RR3^CJnUpp+O(^i)C#6Sm42D`daI_>)@sLTENN8zu~Zk>H9MVh&gkYDIr z#ZF|HUC7Wk2>XxoANp&@2;@+vaW%-Ep`P6osH`Hj)mQDYv3%`1p`%Peyq0LiuW;K;g^xY||`#C2-}4dWnQJei1?;$2Wtn zl(_8#S`S!7z~{Q(?%}@=`_lZpFXZxSt<;{UpwEeMI);mkJetP$N1sWeGOO(2A;?!S z)Fij=JL5Ehn7}4b+n^yX>-!}BXLnV8k&VBh zQY!|28=|y?t{}~N4t_7HxLC`bhrREGL~*(7s^xyYXu+YCLPjs)#>ah?Q{KyOrFUKFnU}+ibXd(&Av|6hnQJ&(EK46bTQ5YOl>K~$OQ$b1E$YA`?W`M% zqPWqL+=7cSwN2S-;vKeRK*~~rrdhXb=C@MF~Sb=&R6P`Yq4qCUhN@Dcy}Du+}BF!eVf)2--yoLZ>dNhX4XA? z6RVca>}*?o8XQu}$LySMTLoZZ-x*D#Kp6P>-$K{20*7Ga4Qia>F*;ZRv+Ig_>c89p zQWFk#twPwHvA49Lc>6=HSNQEN^OP_^L8PXw|KquZ-^vv*9${!*a!A11wp~ zylKJA1lJk})=5>poXDxPIdUS^rJcLT3R_?UV)eYCu8eA^>UCxQVwrSp4ks&!GDmSU zanlLX`jFi(tAre{CFE9sN{!*MHjvG#oSx$>R?%-D(7m_i*LRhr!^2AHxMqL}mKcm< zrBo{mSzZjLIu3)Q3_$EJBcG;Nm`D{3Sm+7?EKyTvYz^xH24m8<@o>piorKqLw<+7y z%VcRcmx^HXF;WM}CS8i`2xzC5s{WC*p0H>Vxfb$(yl(zv`hU;(-bvOvRXluyAh!lohuXTLnxQZpWb%f>jO$5!IZu^>Sh{XR_Bq6XeSlFbRB`fW;_P z7+FH-%_QX%_ek%`MZ~dJLGAfjFq9#mhpaowyR4-rxL3@sc~>8_PW_Is_=S$qywFMV z-bCyakJF(r+*4T)PCH~WV8_zxl}j|R);h12vgtNJ++ITMWvM19IV;rHO2%f&@+sO> zkW0$9%`c|dBy2_$uOFp^(8l`~zz$*a$s*=L?~rt}Y{DKdyh$rZT0FFX1Oedxmsnvz z4j)BJd#NQpWz!%3{g+`XOA8oNdGv~H8_Aed`iY~d=Whjr-R zKwA>Dt#t^?q&&OoX4NI$f|+}xTPK00*;B`hmJ+}btO_0L(8juUqXULE4#UT5bh_~t zbGCcPKC2Opf8|LUcQpo;h(j7x+uFB&eSyALEM%%?Z;7SH>RQa_7a*;a4`tXdO~^zk zRTm-}ax-PNnQj@|wrEL8t23iALd4OpsmNq%)K|BC;kLKTai?MKBE{xbUKfnxc*?j| zA28h5xEI#@Xm;PhXux)?;x_I(TgOih1kmcP56&c|=o4m!b z;IMsj7VF1&c@tJr#znd8$p$&$Z_{DavNXhB{i`ANWRI%7n*Ur&$_yaMTy=M@oc+{W z_TK7scbF6|Kxw@{Kyo?A8a}<}#lOSUpuhg@KMdNW?do6+tpwhuiyr1O&xMW!Jkp;g zS=Kg}ti^1{2xP{ncYt*Wxo3u7E0g$DUib})@wUr>D7yU}-t193UnnJu`-4@CYPMS; z;9?qGYox_H+EihKmV=~hRvukV%*IrbX+uD@b>bdM2Yy7s>H@Hp;KD_BYwF&ha%B7n zBAZ6|Ncwj3Zd=`j)rNrWS!pd~*mL^4HZwdc`6xtLU5PZsTLY;U#dfEeHy_UZRyHY= zxd0zzBdM6%%D4^}qTLaSC^bXX!E0dW%^#oot#Z9_OBB#%@koJba5KX z>$)>D7cT3i%5QIIs+JQ&y+>OO0O7DgrHh{3yB2D*I>Oh2n2VvcGGpYXsff3ouuH!| zDjr>m^8BD(vx1{C^i;tqlbi%Cn}>J~Yd>6_LHnY@Y2G}y;U9+mkz`y-7-PFDx#0SO z&U+a{oq&~MrF)FXYQkQ8sv>m2RagCFg4F$H-RLyQ)=0*JwZH(E-$5yso>AhxX0%Vp z-Y*|Y_@B$B{akG4%Zwq3yfNf#+|>RQi*hsms10cBC39Uv@W zw|C1&KS7!~ILT%x$1uha9?5)Bwogdb4Yjr<)7Tr#60CG_=xHntty>h8R3T+NHm>&( zr`?+m#BuHvBuz2&KJkQQQE*Ob^2ve~m#L#B*S;37?KXJF$pm44T)P~jWP?RWeawOX z;*%uHO;VFM7H>MO=7=p-+L?8`_3}=T;ZQHxJ*qF&|E8&c>|Whk02_`Z)j~V<>ts4v z8Dv0oH+i#O8x}{U5A0;*Ofp8OWxlR#|MA75%alRujhMc$IxJ5hUXGR^jzJ?T(8S{@ z$WjR93zmDbo1!nX7&#c^kfb|BlM?lpH5|Kq4=ltd0N;1z$1ks;n)7SOT9xo8)3Ue_ z4j%X33s*70PqK$15deHY=> z33q|eT0salEP_8u5ur%o&O$aSy%%#0bCpWs+BGPo72+RmVm@1lZ&PnRj3p^k6Kq)8 z_($ug7UISex8hdzrdA3P78OM=GTErnkCa7NCU2v;TZigyrfsy0WuF`iZoC8=g0b==zoS?zpaH+4cJs9o93bmqKjbPQxf zSU@-4VTrxkF7wB8+lXN#VH=8JsS(WdzC~tN4jjz67RSSdPDJQFJz5%ggVR_6W(b-0 z3F?W?0_Y4v(ft88Don7tw%t%=L#-W4Felw(8gC_U@ch!nF;X!MU$lst;5$$sOU0#V z_IbRij=86KlqPw3tQFpOWlorrP=uBWs=~4DX{}m$#1KcA5+8s~{_;MzAgbedzp-Mv zs?x7L%pYqqzlw6dR7yCmWc!s-Cr-*-?`Rrr2aRFGog-c7HaHmBn0VE9KDf>oMp9_4 zCAm{KyHQsJ0|_cW&I{Z3*h(1`30H2Y(1?sSh5V=Y3DfmE=;Q(i4d0Yr1*Z4tiS z*d6DLq`q>af3co&kr;4C@8A0gDo3|+kMN;M7$qMM#=uNfkmXl}d4-M2YZF3A) zlWx|Y&jVXJTNM(S@*B&o)Ok}bkF{Ys0a&~srKgN1$HtviE2(+&_~}>!m4b$rVe*|q z>b79YrcbA)T>z-T!@Tbe-(1D_0+aYW&S5ftZl zFpanM&@lSDn+}1UWm_E-iACF99ZMv;2i)BG^7Z1DxvrmT_R+P@+QI?KWcY4y2=Ah5 zc4f}qtXJ{s-b{ECO~{BJ=ZLzty(Km(zlvpe0!_(E)}P*~n$U&h_K6qDof?8L%L6Am z#Dyd)gw|e37?!cjDV3|in=~2zU@0Hl(=t|66s*?lW#(3K#8Q#DHd=Lq4m(g=sGv$>$ zHtLkkB8yz@|8j9uHd(&`Z^VNZ#%WN;z`oqksIIg!6BD@Y3C+*hvq-&EOXh~E*ufZz ze97v*a>IA}y7cg^hW1oMDw%jlC!1A0ghZAnhY#Sj7w#pbSnunmCE8Mc9g1cGRhSMX zmAkNMBP$#510z4z4{W_G1BheQLtoIYDgAJJWvVe8QUQeM;x#h|1k_z!^!b()$TgPxYP{gk#1VKhr`%cbU+;FCcOPbl!Egez@c$CtyVH<0#NjBRO z+}Hs=Z6Ltp9C!u{LpySxbDmbY@+M}Sg2OyZ;U$VVIbZDq9o<|TwrE{wQrz3|{O{dy zK&`r4oKKD!z*BsOzXX~6(tIf3(ca2g8sUNYV~)w^(kbQI)P^+AM$TK=qRnW;7*Y_Q zu|xX}C(ETA$cWDh>+Eu4wXh$0#VvD@;?1anD*=NMqdFk#j+Pk2UL5%>pq?U9Vk7%v zhgm#@Bi4!EXY)-=#+XPPA+z?+5BUt~{`e V@UniBRx|(r002ovPDHLkV1kv%Zc+dM diff --git a/windows/keep-secure/images/edp-sccm-adddesktopapp.png b/windows/keep-secure/images/edp-sccm-adddesktopapp.png new file mode 100644 index 0000000000000000000000000000000000000000..5ceed9bc668903e9b27ed4201c4b2bc9f1abfa6c GIT binary patch literal 37277 zcmZU*1yG#5_XbKSEpAJTQ>2R&cX!v~u8X_7ma@3J6)0ZZ-O3^@UZB9Dixjuw4tMGI z``?*6_nq0vzDYJYNlu=VoIKe`m5(x*XvAm;2nd*RvXW{D2rn5C5D@QB5aBTiU(v(xtKt#WJBf3YKT$kW(1?D#saPD_pEldvh-;-p=UnZe8Y}nTG+z5nU_x_Iq z>9IA4fY;BjvV=g4=MVw#8ujIK2*mg=0Rc4x{Ni8279Xnq>~vSfG1J+H_RjmiFslsA z=LBnRR1PDiwbNK+V9fdcfbsMX_2Vg8GIDZqvUm8qZVnC(fq{W$`?xen&$+Xh0E2qz zoxxm*V5!2%ZEVNH;GBMu89~PDzw^jvSBToo;o^mhi;I6ib;$a2GvLhU%0F%C#x-_2 z&zOxQ%I`#D*k2?U-e7ZK7di>+L;Y{hBey_2P9Mj|#)JYp@lcRhIS^28SXiG{I*=#i z&CUx_#9w!O%(vsJ)c8=&pmQ~Qs!0cPKM(&hUN-GbpI$k>jPxDP4?@pXOOsR^8XCHt zjr$(Z%oQK7RV2`^C~3a zn1&s7{1TXko>Z31rIM)S*yfw^)l4xX3xo~xG-bX^U`0R`r~pWRmddZm>k~-`9+M6% z+6emXezMMEZW5L73Xy|@175z6kWdEE*BLXDi^MQ`$^5}sRbb_ss*timhLrw{$fE9k zdC#0U1OYgDHj)U`xiRoGzs1_s);CErH97JAf^pE()peMYqr(UvMp0_$F5WBd#*A>+ z&$whDd^DyOTcKUcuhp8nay_N|R_V4e4w+M(%65mpO}Q?RPkE{_%AvYb;=n04fIB&n$%a*6l&F#yo$k7h_6?aFGLs^5(gy0|#jj{Yxob zzi5B9dx5~c<>zJ=2m}mSG}K)$Lt!0c!I5@_Aof~wb|Q5=A|1|l$!$@HXoZe`bYXW3$(DG{7LI}FGLySp}O8u1HXT3a3^Oz z9A4%uk_4@E1vw|sqAo5ik&=^N-90EMM9av8yJG<{L?Oen89wQohmwsv5veafz5&*E za1ACcm&iy9=$-)NGnzODnGC2$w@5dA54FlP2#SD;yv_I0e!{=#^nP*Hd{$-jGf7*e z05M0WT6!FvmE%s3BdkUWfw;=n-GTP5uI$+#lfyUbiS*J(x82qr-CmzVSgBn4(z63I zp=1LiS1*8yjif`lHcEpvOZ3@=ajljtFv9S>m~0-{$Jv*X0Lz9i2?wr4-ad_$V9mK# zM5uW2OviHmbKs6)_v!T}IpbmXIL2xe!5N!~gPga9=m->`m6Y1Lx;jOAE}oXJ`3Kl{ zxA$_Fw?{h)3?VfH(V=|>R3O^ScvM+JYr~~W-9_rr$%NlyLR2TN#z84giVoDHT6&uR znz{W!xr{TY7B#5Ypc2F8N7@e>(&i4AS5aZ#Mms-)U&v-`Q!|ocm0n%R^|0@92B--t zCfD}&SE$39V-4<71!I;f{{9Jo1C1Wx+6sjnM{Pu$hZ~?psNz7~V|@_X5PdGo4WMZu zwW0s4e=iNSo0BhYr+5!qudDh9`F-T>wV+WpeQ6$YQ|kKpn^zho{j@Hl4C22^2{B4E zP^W)dPGy0M1A{gOi<=>0-737$>&H}$d$P}1tbC%;A{0Z*@d`Ct^~~Q-Shfug4%HfT zihs~X{o=JscZgx?Xgk$x1KTujcM^ShD|U%0e5JSKJ0^swVnbj6R5Z1(NM?N~lWxXb zP|b&U>AA}De@P~>8!=K1nvn0B}^oS zOZE6M;rb+heW{4`$y+D0OJHlPJLNk3@jPa!%8(_^CwDy8u$pZaQ(Ezo9vD+2rEk5# zQ=4wIPO*YVGjEr!ts(0n1_Zg9=@)}_fit~lt&lctOV*liI2efmMr{VqBm6F2P*ZtEFd>(9EH^V{yTNNeOr;>zPh34~-&3Nf< zewkmvCz!hgb-w#(G{^|vl5ZqlAn=-fiGu_FC%>HvpT|B|IQISr|Dq5I&}z`-_(5qb zLsVao1Nq_)Emc)06NM-$($s5|x0Xy90~rXGa`^`t%a&f&FX}=Yr4SbzmIT^3LSj*e zC0;oYp9b6x#ei5tII;7_`L3`i!8qaxtl}u}5Qu^L9{z?R26=w_zt~e_1s!M0IxFiK zcoOBG=qRb)QYm zQ^J#!fLauovr2)9(#fP97vj8h5OvNm<$hT0@^I`a>?z!W1<&Vy2`JG`tEOeH@|JIy z3OWpFdH%I5^g%Y`LBge{#A2=%tfI+z!dBO?Z@pI|f2Wf(RP|q$oVTNtK9!1!1Zgx? zlI-L9WgUhe=^fx{pTNu6;16f6hr`w3a)y!VQ!MHRSyVJkGf(cNV~W$vX{blfW>yq( zq|k@4sl%gSI#rd3YJ~-hHM9Bb34|w6fUZ92sgyO>tJI9I&ZP#oac@PX+nEg6W;UPz zo@+<#crVxF>YFG&7Fedl>`tjEz|MTQ#ya+94@!jP7IsC1{#*m_AP~qHz<9tdZrkp& zhC&o83y&0qJiclK<1X`M72#`ky8UDI<_F4fc14P$@D*GF&9&j+tH&gV{e3JW_P zy6nbQhRUOYJMXKbl5#`Kl(q|t4H?~pnH)Yp?IC`#37F~sosyp!#vyIl!os!PQmtH= ziVCkZuM1qfw13+x8ApvuGAV_U{a*!oVEi@Q5%T;;?l(`dLB z)ta?=z;S$+*P?*ak3jwXos7S;*ge-}$GR5B*cQR-fS};g_p}XMcXwN(GE79UCUbKS zt3TL5cS`E2S`WWRhaXqu1akobo0^`xBP;!y{1${j9UvdAB@GMKxU zHC|qRd3t)ePFr>3vvU7s@XL>t7#WZG%&}tSI|lu&+*d7mOq~qbyrcg7TSG+lC(O6} zY5GCBji z_HK3aRp^LgY1U7YlN)5stxQcn@UqTt?blp+&irnA(3#gWT2N8bFt{yw{ zW*F`;;>6*b$aSNSuJ?{>3uU>z7!=?oqO`9=V&()3&Zj5j=SSN@#v^{ zMSD%usi?uMxUXeuHOJN_cW3Vl*5yQ~_EkLg)5j-runl@gzXOwJ5r##>eTt44&o7mqc=9h5V@q8UFEwvm{ z5ErN#{;fuPiOGmmXN72zT$#*}(dUB&UD=31W>h~~Epk6%Khj@l z{AEsmfA^>cqexzGF=M4+NZJcBbOFX4qIyGf_nQKK87&(f+4^a=Ee|jmR#G5ZmPM}2 z1&3|yVU%Tv2LGEOH8FnDQSi%M>udTqKUL}!*;Dg({povkm=ZT{RE&@1)RPbA^02yl zL_D8H!izo9E;$m`-cJfe3{g|lyXZ)+dO@x$aURkzs&%B+f=q5AvE>i(TInO)!r!wv6c#W1T5+TYDLK<+44zu%y!=#Y{Y* zQyc_wqZ-I5W|@w&^n%)KIo zd7#|SVbfjrhzL($|JC4L`QZXFL(jMx?b3$GZ`4p4v1RV~((<(d>`hFu&&!%JX(mgyy$D`oj*29%_nKeu) zAX`RE;*?Y`(ks)b7%-~#%l#{fZ6ZOpL@gdpVr#JKxm9H2@v#=caiwa^@yOlZxy%LuIKCmY@>3oNdKjK>O*4h; zY#f{{w)E80P^WL1F2|Furxvy&O<^ZLzeIQFT>8sRv%y5i}YWz!@;UmS$3U9}oRbvo5WT}Jwv8R~b!c=$7tP`5 z@;rv#=z%60*W$HJn|c5ikJDPS!%}y&fU%k0+lHgH+yK)tY?Z5bB}yjlGxZM0utlmt z(n+g2{!nu^1CGB7Urz*R3Tp0`4(!Jdm6RLG(y_*EmlG5S`jb%0Y$d(CDhD8*o=g{) zQoatLuHFyH%2D!u=)wZ}all`A&tiRIcmo-~`_9~aB8&~XVcS1FyI0K{%Xe|qcF2uL z&X7aj!v=_3gqPIa*KdT7>D?Br#Vo<3x0r&tPf2(SLyaR9JfCT@gvx-9y_WE=|GE z_Z_*Mx$sAkK=Oq=51;d9x4AspDno%J0yEY{50nKCjZk#rl_bW~I)1?vENf%L3!s>uF%&czEsS{Q)aV zjDL$egzIyO4Cndn!1;V-V{1f#Aj1B&Y!UqQhK<4(W>5Z^Pc=!bWoT$#RI54Rnw5hsfR8Di9+g=Td-KZpO^yQyfiHBQ(Mjc)>tb#&|rb&))zyqS7N~XuiNx zC;7rw8meE2I=VP8wAF&Qr+w|t(>^-Ii?yEp>FHiw4SY3L(H0HUj*iy6L#&laL`{to zBr(%tS0#$ld6Ne!GqLO*W_mdl2cAy7>7iD5x1Zh&Y8iBB^akEPr5(4r97-cUttH>r z7ze^opW@E~QjDJ+U!o{?a1=Cg41Ow`R^Ji4c6|HP8Wr_YwlR2w+r=VcDe_lssGZH9 zD5|XXepO&xLOD(uO5!O6e$~c0!UqFt7)zp4+GI;|P?~kYA=BFT+m)DjH=hReqsHk} zAO1Hr+8uv}afu;WqwlINGZne1)Uo!?<9rWw`a}+L9+dH{NWWkGI0$FbO?&13+6C`J z(Wjj^Wc)bGNF-N%oMKY7O;Tuxb*c&SdOM_xqAQFnm%ei=7jNZz)$(gk)KFsj%|%A3 zIWnVDE`1#5PN(dS_0U{c=5v*qi@YY>V1aqtrOMr~4d3L%+O6}hSBmV;JR+-OJF--+ z39F4gD3>ka_a91_j=cE<>I!olAtD_%C`gFGqW7iLqn4h0Ul^D$f6wO@7tS_qcslzM zzKMerl%Deu1PFV7Uw8Sb(HXV;7vlZZdnw3~^i7*sB07HDclEy2ew@*!J`4fg`#&D} z_NuB}YlOPo*_P*FA7U~lcefV>O6Z4?d)m((1~3md6=22;cIiW`1BTJ%158z=i1&A$Crf;}0Gh`>-uVoj;L~E}Zv6 zaBn0Bdalei5np>1xGve87LSZ^kVeulDr@3)aOY>IUz{ifym3jjt(`^}na;}DmaU4r zqrbWUD(-2o-ZcjsklgoUorUe-^^Lv=34ec`-sb8bL4+uC$oc~@lqN&&GiM>o074QQ z|Ni)y{@X&ZW3T;PBTkYtD<=cxCc_GTGgY@Ct zloZZV+E)x969=!YOyWN?IhXK<$s`zh;>g|%f zPgYT#78wt_ttr)iO4bb6LXTB1A$Jc8_49Zwwipe>2#i2hL;Z{EMkq!sM^3dy2|$sh zqp%5{XW^`|AbPOzrXaea-LMni*wbBaVd)6$_I0W@5TtKAJrL`Q89MSHB#`Sf6=5r# z8?$YiZt@tt``(_F^@TWACcjo&bH8}%MO~4M(OGM=k+G{$8#BnMo~$hvOl?Aft8OMg z*glH14SXz`n;rejq^~!aO{=i5!&}gxjv76RFGmQUuoMa42M54lr)vI}I z!w8yGl33A{422pBxZXX8J?lTBoDOH;s{X6<5m-Z zB+*b(PzTdqBdmFTRQ|R8A0*LXW26|uqV{r!n|{xr!NYbd;{pRgwOW(6Zjz!e3&1Jyc@HB zV7K;)=4Dy&Xg7cR1JxH_Oljlb4O)$p%9sQr`q!bO<- zADG$GQW<>wOXu5Ban_tcE5+U`u&&PlBuy(pzVa6;z&cWwmtS;gr>*fVdiC&@XgJX}@# zB~Sv?X|Dw)sr;%G>tUcll;)$R5TV?G1A+k>sb|kO1$W6Fe6XNh?ch>7;vSZVe4^r^7LHZ zUv&3#Bwy+Sx|YKR7T7d%>(TUm+A7LN^>q*FYdkbHd@Dq_r+#AflS?FEPPq3U>Ur@W z^O9z3Eo$>S=un}ZT)#jY(9-_Vzo9Exkiqs1KPtvQH*I2;byK`|)=IJIo+{35>tfyA zv&C}V`2R%u1SV?%Q%@@9k*}XPbuZ(d;(u7~o+SaL?RS&k5aZwYMW_o2acHz#Mfg?Z z;nNtPt&;ddeUYNk*Mu{B*E=sTd*x$dWjXgQ#O5@93*eo2Ymr?lbsQcQ`7GN<5yq-k zfiw|(WPuSbc=+*zV5(FEHCG>3X6^TH>~s;iGLiB`<}|(e_1Q#Hm;Bx=iZqix`y1hp zER;<_r$lz(ayCTedi;DeOtw>!8oB%6OZV*N;f}M)H^-6wr7d61&c+YvuPCi^S#)-8 zOsk2=t?jW^^|!M0LYSDu1Xm`1m+W;puA}+aqSfi7lUBbC4{(_31ZC-D6B?6|MDJim zU~o&UkCJ8(e@+2J%G1ompw0ZwUeALHT;(;6v&KE?@7L!wo4Y)KbdxRJMy5vH(;LUK zG_;#mqR=8j%Ak=gQ5Rv(tr4H;jBI1asaA23e!HlOIu0K?YB8}(~ zb&9gm7}j4T7LqUq2BN$Gjf=lVW1@MAPW4;g0QVwlmU9lQLzVr9(i?%PhX6X(NGr%vi z3~wwS_g~UTjF{N75$f?v%!$G53U~FbZR8R#2IE)93=1EX{-h)s)>vi8wb_K9{+v8?c=WVfIaCp?OO^nQezvRl5!d(GpV0qz zmXFZ-3J`X_|G8b11P496<<5tpqjik@Z&+U`8x{O)K5=Bzt<9c3HS)*CnhGP%-;U)U zo*mO`?juFSZT`p0B>|>ti?DcX3}SCVLu2wR>oU6?b-8KPa>z&yV3qu*YBe=TMbJux`dsbx|!W(OZX;IuhEpH`Rkk)h`RG#oZs9FM`GHik}?NH6? z-tZqjMlO<|d?{$IRiOi*{y?E3j+9nmn%b6l?P)55WhunZTWiyZUkquj;uDvk>o+x^ z8Z53iq%27tKk{^&iMixs^Ms1jtHUVDZmSP3@}|kZbQ@9>pf3CM)!*ifY>I&vpSYrd ziBX&KZ-*FL3I1VHiwuNr@sTH)i=Wx!6|B``Y!*t^q@QtgAk!K39L=)kLG_r{N)JJ%;@+Y#9x3zLqdmG&zCVhMpv;U`96y7!_V)iuBEPa`9cPI z3yA9u#G(r5jY8Y*6FzZ@Va&|BX~jnmXlt|h0A3OQQ^CBm00e{yB@}fjHe-$*>0|ki zL9J{aPqH8ftB&=&^XQ|w(b4n6MINW+tTrEYq*|L3p**hzp)G9#$L+tZ(|lS1rNbZ|l+)eM} zma7fyj;dNNNkz1buN@?O=D%lhNW4N0^s!Rt&1NYkWvTS$B}wSfz=+n|Tu=K}7}>;J zH$$k&^*+<)w%{b{+IrWq-a=YHT@86ugY-)qwU$7LyCRcL;wb3d9WUpP@+BVj4E_ZMpW_EnMS zatJGfnP8=WR0xiiC?I9ZW|V;rXW+M1=~K5T5jlEArDoFMiZaHIB^B6=t4D2xgpHG? zUbdkFlf2usvtht-8*%pLc3eoCM@JIVu_Lq2)%uYK3$T=iyj5q}`|8MFab=G#>eBTR zOg~}-mmgfqMXAU^vztxJ&CJBYPg;%lquevl*ZM9kQd20;Gg9q;Md) z6n6Sl^pUzZ(zr&`=~T9>D-SS(0J95C?LfxbKP69pZ;*B6Q2mm)i-R(1y?!j}?tXy1 zH76h-ud?l4;@HeZ9YZ!P@61zOfmu6>Rj2IFSOZ6k;gX|(?8$|;qwBab8GyDm%DaBnwgqgghSGTD5Ljeqyo zM(SuJC$s#yNB7tyq`I-!#oB=L;NU&k^d~rJkWjPE)vP%|s%l*VnlH9oa;~dcyoO19OM9E0cO_aw=NCMwl z;9MSuv1-2iN$Awq-l*vWuf&BA!s+8%xP+&%aR&FPQM{ALcvJ+P^}&w8Lk~)Yc$VG2 z4!}d)8Qtx8B{lAl^Po>7CiW1}^3_hitbfUAtSCfSQ zY=|r&;Pt-^)&B)y;1|z?Iyjr+zkm|-k60mC1kS;_Tkd~!)^l-=TOOtreO{m?)Cwfl zMh8o=@p~@gqDuT1l}de3U{YaA0Du?uOb=kf!naG22wBO)GBj%Zo#n9{czpsrOv;gk zrU4Jm?~adlEpD%T@!pC&X2o4@dt9Ag{k`mwu|)fN&jafX6gASmPyXX+R^ZXF_A}b| z*2mk3z1%Lw%@yp_K3#caPtT12v_AuI%T1cA_f0_3;tZe43Cbz-rbeSIL#;wBWuekQ z`wW$a%#FSIb@t6p_n>Y!b7s%e`|bmLeM5-Wp{2-mhcWrSypHev%ByUdgF(RMvNyc# zvN{Sh_DR4tjUa-0z1}?f>>&+8Kr@T1AbL7)xJM-cco5M+73*L%USRfqZGK4PXFM|4&#POe9x3TQMvX71-2)oRGs zJy|aXDX-D)<0a^Ly*NT*>;((7q0$dBtdI4y=XgO#j>GZ}!5aaUBuQ7S$b6Y~npz2R zZ@Ff1k4OV(et~*cPmovI!b%N>T|bQSk9YSmlF;P4o2E_Yd*{5V8k8%Rhy0OD1#=$E z$UAWXEC=#7Sx4dW*!&y=5M=z%xFsu<9|vG|k?RR7yL^}SVAsDa8r)5@_FS zt)r)Rg8VQynv#qjE|}##Vo#%(N0x&+q?aMmH5c8Zf%g#O6CX8NFmqMA+>WHQtYJ9a z-D;`4oK_9qY|k`g*}&Hm96xctHEg-=&LI=JYX7aEGgHOvRaZ^ED)X%Efg!xgjS4z0 zjnsgx(BEHBE0S2ZV;TUKO^P03AMOodV@=eI4U3(B^=1+mT&nk@OPf=#92UAS+6@>$ zh#((SD_S0Z31NvFjBdLI`K+$t=_$D}{BbC(&)SVa% zHK7?b8BolysXNSMW$OF09Z28tq4_Gg#oEjY(wQ~_JSbPxG1EFu%dC}}vw&xOiw&P* z&Mg4$tB9zoYE%Ysy#~_VFDJKLptN3td8HdqFWW1wo!5ZbR+>u3FLTCt%{%Rt@b7Hl zm~aeO3I-El+r{?49-K0p{B-P^)BK?om%p9b6d_AaGP7}Ro;bUOD><`)u)Qmt3y&d2t@ttY@3)_L zPoCMjR}7%jxvuWlKZ91(lEKt=?Rl{HApnRUH> zL+=qru_N&Q^~evvrJ>*w`S~ER0D>^ZKe*Eu7c@Xaed&FVjRF@)7V4GH#OGT%Fd$3# z_r(iQNCGR+zHd6FxgHsw=lZ`q&#tCt9Q*%3qJse>ZrQPD5z6yzBJmKLR%q66Nt4^n zPj3$Yc^@MRnN6vk29YoAyYt>-qgQy+7(xb_(!c*mAAhk~9sSvZBv1wWxxl~4z{-^f zZW_?KM;F+E3-upf-t(gFpGlNuLkrvlt@6ypl$UvdW%Y>L#TIjiUP&Nhdr~~t=@-~l zfHW;Fsl)pH_R6T;S3WBV?uYko*1|d6F(m)Vus|3f-X1~2pZuv`{A-(wphi2JY74u7 z$HA@k$zg!b$Z(=<(kPu$me|p-(co2%@ltzZaPf{E{TWkABvt3rJSLGaC1)2+=UM3yb&<;uW~;E7xxT_-~{ap^P9KaT_Cu{8^&u zn*>d1$PqZmmwDmS&s=cUX>GXk7^@ zA4ySLyGWw+KbkjcMN93+s^fu+gGo!su&+m3fFjBORpAly#@bovjR44n3;k>)79{t? z_szX5Fn28*)Ai^A4O{!4B??Rd&vay&iTtx)6rg8I_iWexXV57Avun@s{|w<1R3Lk% zIgT#QZ-x;qv|H4eD#3zhO`pzpPqjR!O?3CtTQrfy2)!*wjZW&z6ievA@YLfsc zgR9~;6zH@a)#BwfZC;k+nQa`WGqJ#@$EAUp8UI`kuOnqQX#h^xr++jGl$VhIzPtdT z{G%^?VnqT!a|uNW|KBVUqJ(fBArkoimj&7>3SF%Um*0FqolL&apMG#q)wQZfPIcKM z4*sw7Y!MWOT1zCEOoNmvO4&^Q+{zj+H9Zfe$9%xQ+NznrZQ%2gNVMr+IR8~&yBWrs z4GAli`t_^0L5@bCCRwk`!~$Pq6WB~uRF&qjQl}@tuj_Q9s-Zr<({-|GBJjV4WJ{nl zRD0>+t+T%|`zXM@(`rCnZ#Qa@x=oE$1)j&TJjGUiXi$AsQp6X|LV*EqA|gckoZVNq zntZ-OCCr0{Ptk~|U!xv9b_xSFxnB-ub(w5j?rE(jTvPm)y?qczYc-{r&mMyhf3Kgi z()WdJlDwP&IapUwmKX4^ysfLnM6C#w#Ws(MnRdIzfAti;F)Mf3lK}DTcFh zk?sP3IM0lq7a+H50T6RBR8`!sp$nRKocbP4|F%=fN$X?=C$eRUKBbUt-R*NSsq<&Cz0qrtkn9yH2_=<(g(H3r9{WllIt(A#>K3YaPoG2sW zq!bu0Kpsj06OJ`uTVKP-*H?f0i$YB#6)ik_+6%tCzUMW3JAK*6OglQiVeAm+<|1p9 ztnIk|A#CBmH)VJBN@(l_NR%+k38ka6Q}FOgSy`Ed`7w9Eo+P*a6DtJ>bg&Tz#}ob>udMV29R_pw^s%<{sV5e*HwSe9ch z4Ro~B72D)hX%a<9@SAj~N7@fse*y#5gzpv)XQHeljlU*UREkw2Dt;v4h)}D6$-pRl z$)jg|yEtr+KOBCB(4@}rd6K2ScYUS!r@dy`G22z?Ru$9L#JY}Yp!TCzCw`clW*o8y zFJJS;a>gFTyjTyKgNl?>@TVRCWu^CFP=cG44j=dP>64Se+1Zs{n;sezybiufxf$n7E|?xiDoBQ~$oBERl zRHLA#aRtG$3dUcGS(ksR-I=c=KA^k1@ukpfy^trg9i))&awOLbp$qt8pypf31T@zu zWzPC(fQy&fChzNtQG*r38au?5F30Cu^^tr}b3;sjnXS}xrAL=voZy zyc_E6J=$9C(ylR@A@L$q7GFSO+&ZMH5I_#K+HgHpLsXYitxIK1_C3$79La^@!lIn9s%-SA(UZ`*Kc`9qrnrcD|VFLc$ zPvkrp*(78*zd9b73qs?gE^1XCQpr$9Kl(Ll36U+x5Jb&riQ=~X8k58&^CHc(;1^Z$ z1*IC4{s%g!uUsc@Qk>#INE|xm1ao0LQH9fN^76bo7MG6(&x}PLw+}-4VkeFdA5V5B zSuVt(-s0_5f{kjFjHhf)DwlL^PwpASkaOx-22maBmATQPN~~|JoDv}#Vi}yWop7N? zUk)45%hfRBLO#=E5rID}XJSE$23#o^7sY09wy?{8GU1$Q1Hd+R>an6aCg16dWP@vg zEMUxvkCH@82BawZ`uZ;+ywxATn9V_Cq@<2c~0uNL8v`&Wu?PV0bNb&+@m#C?(cIIGb`b*FxVxKZ-e#;UAP^Imh zluEPkL*=+~1`&5JRwEq&#D-@fuH$R3u=~-Jx87AyktlA|MMZFwm{>#iv3L|L;+Rs{oB)FJLAEqb1NI12Y+_~q-M6u( z1kD~!P;gcG7IJIp=A|Mf5`KN9z+2S3zQ~W06tB#BI$q^x*4+#yhaZ8Z!4-FGDMRGR z_%sa;(dol*-1(6t0X5l}+uG8qxtd!Ww34{Lb#m`C^zpr3JMKEZyi_*o^sb{={6l>A zCZqnL34_t#We8(U+GC4Cy#VjP*Q`xXmp}u{$v-yrD;56~Ym$z8Ohe}%XEQ$2P3UjV9FE=grT#fSW;{B=* z$qXv&pNy}?@0Ns~w$+AfCZ1q-bLn|D-l`8`12sicvyF3;`&@(qAEFizo)p;cKd_$c zy1n;b8il-if!eW+Pq!(RTHHgBP#envDvR!eF9a{lwvcRT*hLD%h|Dq+vYL?jq=!3g z%X-aqA%la1?))L)K(hAw9xD3<(PFg#Z?y{}2ZxZVfNk%*scJvi%0Aq2`gaAsDnt0m z0Q!6QGe#kU5S`6RO$#{o?t-?*ex!_sD9p0lqDzZio=`vDi9OT5=YG;m;0o>tvtz!> z;o$P{xS*fOrnQARHy)er_^WTIt0%t*nH1#WdgVk8FBiTrmem>jY_OuBKGH&ZqA=18 zj*Y><%ZW284fs_b(w1|k46Mn2oY~7#|6yFi=h`?t-yMRA|B)Y!F)KNEwR6BUv<3UQ z9H9M61)XzTSIr}q#LhEXPU}|}ITE9f(3;7VmF?BeN3Kcb;$m*CJ?;DqhLf=3Rs)Hkv&dE~>)D ztrlbNj}K4lm=VIVf0t229Q088kWn19;EUa~xIeFkG$ro;csJT>bk@#&0KJP}wCy-@ zZ;s<{W?LIm^uAO3wp!Ib^+3IOr;zK{UHQA1$y_=$dIkB%McXp0TX7QI(2ypRSRN5x z{na+p{*eIjrHsPy;iS1<0L{f*MWG}6ci>E~7?@Nl|jvj;rBI4qgfHVhG z^=O8=C?{QN5*4MDp{vN6^Qibgq<}g0US7PZwEA|1a&TFlQ@}7C2x*dUmE^cC@Fx2Z zmqx?guQP*)C5wE?wX&Y|DYz>BaLLfqou*3JvK{Ho`NEagj(hO1cbDHr4ftQRw6x7~88s3F%bE>C14*){J z&MO>sa$!OYT98`zqFdA3XbLlac3=G{Pg85_U%nUAmg04sYB(p3dgld1wB_F1x2|eS zJ#CHV@!NM_ZX6{&DCDCddXjh5 z;}-^W<81IGXVuJJSQsq^@l2zedVdHcAj0!&n-S-}sLXHyOR2*mxrmnLR#y@p8^xZC zWK+Q|z9d&+T!X%$r&)NuovW+beGGe3;+8^2M%u(RVd9wk^W28J70e!=_AT+fddbcL zx`VlM$_fk1dUV@XBaZ^dcySyg8ax|UC28sBwWk9*JdY~^tNd48KZ2KE+lfujseD6K z;>ll&Zga>Z^JtY;q-g+un48xYXag5J+Xvh^WPEhZI84_KuipQ3XH&79B=t0I#;0y9-5I@FgcC~k?uJCd6u%r z>k8O$x+!RXry_@w>_f>W$BK;Z*D~iQ$Mt{x`>z@dfF*nO1-PPWv$IAQ*AjD-c$%dg zPgR=JPBORV*Uj|K`&98O)F|u8o`W2ivc3i3kNA(iYvd-TitdQJVJ*bJNmwdZ2w4mj z(+K_Q7LAB5L~!tw6kB!lZ$t2%+3=B5v4{gx>$vh$n#^+0Kc)?6*o*VbLKA0bB93== zcYR=PD{j8LjbO-CGS8pCmqHUhzMsyMw|(@Za8-Mng8*pSU`U1v;ahGYs{+^+3$0s2 zgIfuUpJ2}Gj=%5$fnP1|;{~8DE-bY3<7Q_@PCV?;(c}`Ko6LpgfNLc%?6thv83YY+ zy4z&~v)he)H^&qRU^ixxP$B}%nBU(eUslAfzoop%VIsbFwG_75+n|q|?@2tW4T8X@ zLP9N8D(ii%GB^8o)H@;?5T1LC{)DFcYhSXCj2ENstEX2^GBJn9B+=Yl+9{5}>_ZD+++WLPt@$NdUBR?w?ya6HL z-TJn+n~|Ba9myT(KYdSu$7O$R>02hW*|+Ii4kl)O8Fq7rZLb2i>}~(d#FKRq2;b2C z9rKG{uMyD~Ha6P1vs#OF{Tw6Ao=bE4Xeitwe1BSWHC0pBFHb*nFxjd?}DdA>TaS?rO?&lWBWTof^gJB8uT%xIlmaBq(%ujq|dQs?(j0Q zZ{y7S!6*;5jeYw-8AS00B~&6G*99!ox2C$wKotBpLIj7#&j0a~*H7hfs%;}r?6zfz zcky2K_KfKxWEv3H5Wfp%{X%1!g9!lmN5tcps<-*qt?;XZ z&zIyY6$mNk-(?wUnY~M?NgxRPVbWHli8BfQ)6l;mbaU3BL#dJ$IY<$zM)lKI%(6dR zgYCj?mAVk9f?bR`E}LOQ9W#$tlFFn7*%`?4v!6 zYdh@cTd|bhXC#y*PE2%PTl7pO=8;>R1)PNJ6eEc8_EFgX!$-N3Kkm-M; z?cNEVbPyZz{ucK2Itd0q<*@BKas5g?N40N-|jw-t87pGluBR#+f^z6kFsx z&BFgg0eDa(tJ7b0&(i%EtY}v6V!v+hW>;mt6{926l%{U^^$B6tIb_z0H@fR#TVde)wqB!?n!Dl!(l$aQCgL!o3|F%>5}o@7Z(s zu??*HV~e^{NQ!l+_ci;Jwk-5SOl2mJmEUu90Pb5v6*vNvxHAkS5zKVB^XHT^!!H6A z&JMqjbJvkXEqP)-{kixy~7?~Bf%rIx}e?xL`$7p`$?xQ%<3 z-<}xCPy3D)4Vy> zN|2BjtZK5R1i{Cf0#vF5LGpN^P)wlMs~`hm-!oM?BzbAZv1c>2CH2Zu>y$Y^r^svC z?)T4~vfc2h3)Qx6%O)w*e@qWlf#Ouw@uGEROcs7b)WR;68Ij-ZnI}cvU@jlq+y95L zw*ZT>`ToX16j?;+?nYX=6p#+-?j=P!q(gK80qJg$l3uz&mTu`rkuGVZdGB3(p5OQT z{{HWE{pE6Z@3|+>oH=vmoX^Z;xw;LJ+vAcVOn?CEN-H}zcrwgI>)CO!fww@j!5fnW z6_sK9GsWb+{%04UgrfKt( zIC2)>H;N{HD4*R1X=W7OfQ#rd{3(=nUXdEWj(t>LCC?Vm4iYn4q&Vv6Gnbvd!&%ev z+?U>PZ95IAjAOej9kduO_K4i6X1#b$-TFw+Xhv}|Dc3lE-xwX}aVl`iiBAl>%mcas zp&9x%tMkW5x!z-e=~6#@E6%djtRI>Y+j@YuFLnL01c6P^GNA2ockL+Xk$#u}F zo5n+Jp$EVV1(5z=*sk`4cg!Y*Z;1lOUgyQQ3XYZ^3RP<)8~EZTcE%QGxHUpxdLM@% z$#y_TK4r(+AVW_pcx_xC)nwpp^sIcZhX}K?rd)a>!A!WYUT(!BLjopcgN6R$m)D=1 zo*y}{nSK_U^pDY#Fk1i0m8kCE_qYIJ`5?TZv1I8~w&bBNFYlc0b+3EdVS*-c?%|nD zEl=Oi?M8;FW4=I5rOK87cJ|T9Hyf0qN(G1Llinp-oQ)FgEZ`6Bq5CbkKMHpxv4Cc@ zg`cnbc~*z8JZ5}BXcfbgBmjZz9=}X&$y*E)^>m?Er1zb??0zCJeL`1^-n}BT`Ow#b z{pC*Y$DcZ&0dCQ>T$~^15btg=_F8G_sEMyY&52cc^S^FcB#6Cv>;NtBNLNbFwe{_x zKdw#kb;`%69=&)&!c;$(v=*pPT|qLVF6=Hl?aO%K`-)BE)lyt#vEk=mo(x6)AC|kP zBJIoSQOdF+w5%U);V}mMDe3E`p#r-zf#-Z0eWdI0i$vT7@KRS=!xs*JIhoySRyTGL z!OOE?7;8Dby6kX+Zp$TI`8TaAn%#S*U`N6yPZd;!VH54bTiTw?;x_3+UmQx*PxZz5 zf%}zta>BA}%RuCd6a}IL=r?i{-reyB{aS4*^=<*r!FHy_*L^bv2VS>)5tP=zOkvPV zIOn$2=a)WuMmZi~^%n;Fc(Pio-ekOGTyCiU{5Z z>lfp1Gsb2zx@P1RmzdKPruAVkF1(HR3BsctvxZtQkyTsWg9?8MpzVbLMlLrzpCHx0 z@!)cWZs+hOH^U(d&sLe~&=iNkPq;z~sq`6{wY@|y1MAZ|2FSf;+`US?sTIBaX*^JL9Y+sH+h)x;dW-bNc!Gh`>13 zbHs3kw+RPLh6eDmP=isTrI=NrkL0Jde3X)^bL$5SKj5Z6<0FnF>t(7XRXAOi#wYs=IQD1GtnR8q9Q48kb{uq~qCVcQOX`skO88JI)w4Ttuh(d3t+deOcT3rmFP?t+ zb$g9b$d%71;bPWa6Nb7*@M3@1cfS2vQ4h0mwv7w(&f#Zy-O66VvJekR&XP5NgrdMh z+w2tnIs_3@;QwGJf`CQ>lKY>4f1OJI6A;M+-qNnj&U|_i{9zIU=dTEkfdFE1i}8a} zY9|jMa}V0Z@30tdY@mL>DyI{&R|KSft=M-Sy;2r%XSvYFSh|QW=DA8`>rU7eipKeP zjLYXDy~|0?rB@ag7l4I~oiU#NFCBaGnJlbtE zgJz{F1KBeszXavzS%b$WzSPx^*I9=1g;-N7MmUdcB|nUvsI1X>Kjsyhig1bDhgj$* zahR&n$P`#_zWHUQxdoxA$PMDmZ2uIK6tDX7&HJf9^wjwCZh72l6tMp-_pi1O4>2i3 zNM5{y`c6RT!-X{X(n!$8UQhTNFn{Li3h6Epf?U@W^y)qz)R}+l&1@m4%&$s{bxH|% z*~Z1hrnAJ8eihG^vXs|a7_oz_)x!%pMU`Z%bWF`R{tR|i^@wEhzc!4zx6|4QUttd)-7nours;(tQD@P^SB#6p58u8~a zC?rz-7X*+2&x>B-kZ|Dzrx-dK%2O-~z}1I^3aQ2fujc!_Rg9k|1xZn1K5urkM zxk|H5Fw$OcJX>Y)U*Gh`X@$EHQD7=hu-v?S$xYyOIQ{j^UIgxM5+mxvg@r;NT%aVY zjFDySuCFr~x_Vt7&649e5j^cStfGck`+HH0J)>Mz*c(2Sq{uK>E|)hFsbf}BNnqzf zb<$s3lfKL7f*p&%Ba0#mEzYu*$Mds)D6%dpcZxKu4=?o@`pUkQ^TCQ&g+4L>N!FiMg)%dFTEm^}Y)#%7I$7Y%`29x!L`Eu{>UIa!* z{FOfyaogZ<_+5LC)2Rm5-CVg#V;1j$brYXAXEO{`VQiHyg@}mE{G?^}f$leBbv*__ zr~&7fgbX^k^nSOv4jXnHgfp4D&-vC{8SLk{ml-$bd|*CmHp1<8dyhv^#&YYQ=2&78 zX!@k{$jPAAeCG5QhJ+wxp8_7G2|Ha6=k)FlZ*jValBWY44lu<9w7W98F~MI?R`f!9 zxk`zDtTL{tdtpMdmV=?KY5u$urwZn>ras+b@ntU)W8rODAMN1x3J?*A(Bh`Ke^H~iUVk_k z9yj>lEljeO5a_aYI>UP#>*WR$^(WVya6!XYTjyf9)Tw7=s~+EpmDnhrDtU1S>R;#_ zjP;c#3TgRT1owTN_`j$4J-Q)KN~Sq27}&R={Q#E2@fhw$r-roG!W(92Wb!dd0fr5FHl9 zW=2{{uDqBsZh9!sGRT+f7tp(&pLs(la^SF1-tH(r=6&-n^T9ostPG#J)719IVNm5> zgiph61C5t{4}L|sJ`GsAJ)^9kEd0=A%lb0nL=x;*t^Xl60IDpOl;D3}qnMXc(v)|Z z&MR2I=y>Ip&Cz~}mU_@t9`06ov2rOL%9qw;spR{BknmyCE6TL))2Hrod-dx90GNRM zIi!Ag;}G3Lo#cac%e?E({_A?zWuFxFi>OC8sJriM%fnj0Waz z72eLo>{4sVOSBegW_i;H;~A>}b4PQ6Q2BYbu+~%qYW1{K{(RzJa4wG1{McJrdn6z(h<-eTFZ1_a7M$bVT{ZbYHBwe zF&3||`bAN68=sy&v3GtUc5ZbKG2l>O5je1y7qn!;VJn2y%0!aFPxt~Z?U$v=g29V0?ddMrcSKJlV0&+p#q3+7v<^GTfCUEF zuD@yI(Y-(YqUW(QNG6WSI_QYH?+dGfm(f+lzH<+?AWJgGnyA_n9@A^`8luuO*W~A8 zQ#!v535;|OI*G~ZNU(uLcr)ZF9z`mIjbaS^0D9~L_;2@RKjyW036Ikki|EEjLwzu* zfs^irvb*iFVx!mI7NXz`Xq>PwTfemx>De@pZ5b#1p}r?SY9stEusIjIXb0+9SGf27 z^^HLD_9Y!}J*bten@XVGC4Cb}!!L1U)*V4n)iiO4q*=~t=4Tb-r zJRlyk`R$N=dyJ=*?(D*M9W(Q#Cv^ZRmloIeg7?q<&7YrTPFak=Oc+y*qBjYt#H+ zJ_oZI`wk-(lDCRWV)xhO3M+AAul~gbUfef7p{GpN=U|+0}HxC?9sY7{!_L5?-Ao;1|3a zI1Dr|feMPjBqi^v2g1end;qdZ(5Q(5suRVD9erR0d$~(uf_5a!H7jcbBVGe6V|%VBw69=Ft+vL4HJkW9oDj^DC4~;~rfW z$9}&>%-1-Nj@SkO5FRKtwkID`q0?I1zWEZ5bh^*avXOVYpjdv)?V7*DwqzCD>=B|IU{IUF_*5IO3^Q1-n#o67O3 z)A}kuwtr(Lx?OLWEBBW^vDw33Bbs7XqIS{cCVKHedt*7Nfu5uSI}aIS5;P7Oq!K99 z#i0LekkqjzS@ieP_~{nUKn?E(fP6|t1oey4Y?(jaf^VX3QYX}|XAHD?SZ8e}?E(RKN}e{{t2?ccsC9!T$i(j^c!4=@9t>>mhgrq+x&&5zc)7 z2H({du!vEC1%T4r{1>h-tn(rR$xHWIch8t9b7Rvz(-ItxsB+p5`A`8n3WCFT^kJ5I z6+UaVdD1odTC>l9udMM=&46%yX4l(c#o!Uu-JAY`BDX$!p=SHrFq`~y zC9hYN>6H2PU$!q$2_Emh?aG&}&2gU+)%L$Bv6ko0plE4`EMMP6G`gug@Vsc0P@>d?sTgbW~pC z-qO9Mmt|OXPgvM+eu3&%K8lgKNdM{r=T1cIPG^*NQ(NoF!u~wnVz}W}dOCN*vz)hE z+S&6iY(SuB^Yevhv-p>p+LI4Cyn=lClY`SI93yiTy~FlL3g)$EcG!|cG@tg4vGI3p z)rDfmc-8GMm9Y7^Ebu4|nhR#=42c%pqDIgZZjE3yfmN!IT{n;zgc>H$ho(ScS;v#0 z_~3DkLnGPD-lwH^Gf74E1zTlGUH#FtA8f10h!@-^UfqwlVfB9_=*mlnL4ow2$ zw8IS^v0HYEShXM6vr`@}Rif~FqFqTZI>SxI`MiifUL!*X@0z;{RoA_CZa?aE36v;} zw`t?2?`diE8cuJU)U%q-@N+5{7T70swdWeIx`&Z<;(P!N3rwR33E`B~X~KI7L&6RM zibDR#2{cdf?>7d#=2&1PMBqOUh%`WC6f7`2{2dxDJR52l5|9uB8x>y6N6vq~|K@rZ zh=koGE|U~2bA7gg=I!g-+}POI&~Q*l> z&-Z6plJg+u3o`U$yUXnQ0`1Y5p_P?YZEbBk{Rs5g4oN0v>MJFN%8|s@F;hLfF{xAX zbaQtkL`A17(H`|jfJbe1Caa(Yc&>#tIup9of3els7i{ZM_`Frvk1QG-M?Fr@%#^OK&wyu1XQtZvwo zs7k5Ens|W=Zw2CmkL3#~-wgH)X31GgnOTw)lk@krOmMaXy?=Cq1K!ufc5`w%I6UOK zt6(FV&CypvMMJWaytWjCe3fR$vkW*u$A{Y)} zOn~7Kj0ijj{0~D)0Ne;?O!)U-uKceDM4$f4sz`{8$y6Y0lxw0we~Y+8Iy1RTbtPbh{g1Cwl&ZIm{6wcJbIcpv2mSGJh{v4kN-VjjKD z`JG-R;eZ=`SJTtA3}~TcLt}NH)!T8N;RZH~{S{hPp}ZFxPOc2LGj3y!48E~6%5H<^mlKU8&+k>j6f!a0lzAFdyvm^8(@&aB3h zV>b08T-cVY*msHJuxs1|D|9J7*|+QAkGu6p4}wJxv%{ryeDKBL^bX+^C`Ah+c*w24 zc64f4;;P_f=6A`pn{(XITVkBbD#M`dWcC6W_zbY0KWYAv75}&3KuDAS=rmvRXKYF& zvAQP>N$f9{cKv1pTS^|cz$$xtGbE>t{co3-mX;2RC=dg%;#-4ge!pn+t<|1^Gl}*W zq}ifFuOY&*nlslW#fBaiUaWii*gDK+BmWrL`SIMFSyX~h_nKmVdW*4!(vFQP`ZE<@ z?P?u%=2kKLSr2U|MO*@>boIVJ7oqjC^6vbIU68ug= zeaf_KG(iGvv-u;eAY0R%fweMkWJq(NMYMayqV** z9LaqBo-9+tX_`-*bRhoFqDCRJkRL@ghJvCSf~>K^R}{NVDo7JFD7%mRYfTgdd0lJ@ z103*yg#_R(`~cXrU2>z?h3IKsx#j(B7_eLngY;TyrCnDJ0V@i4slZk|AOYeNNQFoW z_y^(34frQK#{VlCuutMYUcz@xfPj=HS~y){gd9fQUWmOC0BQEkfb$sOukIq;Wewl& zclXQhBc!>x88{JsVR7+h&Xj#Xf2`+EB%l+*84rgK|ML1~YisM~=H~qTyp_NOyqF?A z*2xCnL5OgR3cp}jcni#5XJ==OZ9FOLyp%PD8m(j#rgJq_{!h5M4(}@rWGee&A&UP{ zuaNXqI3;I_^1+zJJy(gsL^V8yXlO`c(kLW?+kjL*4HrQSlixUQE-puhhhOB9Ho1`7 zgT`5HT%H#|UR8Bi)7ggR0zC$hXGjk=@XW^rO)-`e$SvscQ+f4st}hx)BP$QS*!`Je z_lu#Q|2%DUW!th*|8>E(M%ZZf!PHwy6OIPM2Zr^JCDm7J$K5X?6K$XF0EgWJ%@Obi zdHegf*42Hd2Tob9IEUoOu3;l3X1Q_XOaex+FpYEn;d)`xQ(v5kxcu0oJT>D6a_93X59GGRnCo01kIm~e8E`%ZI`18%ZJvH0tNEN`P}pPMZo0 zp2DEFZPi`yoD`SOhUdWv8+IUi|(eU86YKFOq%Y9(JB9do;U`KchMVF>@XUpbGAk=f8S58MPOJ-^B_9fI4}FtT50}jc_W=8(42}x=L_a%s zJYnYyLbe=c%>s=#qa4QZMQ~#UK#_mflyEBwQ3d4sdbssTaQn!VIO4rq6z7k7-=H@c z|FPJFo44TR6*>$+Q2t%b0|plO$`!~Eu!jUKCqg$pPLz+vUUO|%ug#cONyLvt98{eg zGEG-V9L@pb4M!U0*o1RxYEr-5aeG~M0Br!1Ny6N`H^4ig5M+1>lm@UjYTq5sHkTy< zLko~?6m(%ci$77L$hmqKYTZ;GN4DVY2{RnUjkgEVV)(#k`*LfsIxxW1v9MCgprP1T02w5Dy}1JdS7v`b*O z$qoC$o=!ndb|71O>zI?<+?K7S01much(1B2>b7@wc1}-EwZmmU6(@M;bf-aCS$Int zN_VNia|6Gb`SX0L(edB%n2qQ{U%^OT*=U1`=4VD=UN*+XHe5zQznyUrJql_!p<@jq zr`^DhJUdwK?(FO|{##k6_AhK#Wl7K)7NlU0+IT}Wzn$82R~T5jdjWa#=2Vayj} zqn|>LH6BgA^c|!Psb1>g1I>MjaaF0Dr=GxsD(YX-fPir(OB6%{PE1V1#Kb)K=}!akMx#33XbLEQy`zKI-z8cTz)m@{7GH^aDkDXL*2)ye~u;mo2W zOyO*N7QB+MzW8E2O~q0N@8FTIU>~03XIecZccq|GgP%PXWeDh`RZ>z?1BLYil&Nde z)?xM1ld?5dhz4dUx=#@BG|uVO)z!(iwlUmFh%hHYGtO_WFPE3idnuFF4k2o=Uxf-e8;yp~F1nR|e60L_V&+l{P$(n&CFuaSD_n(_oBjFy`E zOd+9)5SUT`%h9RV`Bz)r>ot9M#)A58#V$G8CoL%M!5?zNZQ`Itm$7h*QhT|)j$Qa! zv)zKB(G2ebv$fk#@;YJi;)(*xYK`G*Ik=!$lBF+p(r>@EU1;{~?n2r9*8J2Y33cDn z&T>ZGKZX-fLC$1xYBEb2YoFzd zYg;qVEdR-Z4k0B``fAcM;xcw>Vik?(#0HZwr$K-ky*zeF9-eg6hW114NR z!om${e}jRX{z?4TB=@hJgq!-{#^)VF*xJ$g!otGD#6;pJfslUL@moYAfg$M7IW{&1 zXkaHNC)a>LMZEpQnu##!0dlk0pJx6oup`jh`?5%yPFhP_#Fme^ zEN?kya@N8@vN`v3FLv<)5Q#t+eZL!uCq;ohp`^3B^!y(QNlBFx<;$COZ0jn43v70u zURHmd!rNn2Ky+8L!u0CuYJ0mxDnv?a9-4Z;i67)$OCW`KNvi<(UD6elXyvfP1pCsE zt-q6X%Me-9Wg?9L=ER4m6d?*wRL@?LUSWl*@#jky=F*mumhpD8e7~CGSy)(#nDh>} z&*;>GIHXMIL9yywS+>YlA*klj(4=D9h|~kh*r=8rWp@Rg?n8Rk;#tG>c?+(36;RiW z=i#G9-ic+%qe|Xg!*SA&W=={MA2hVw7B%bmMD+RbB6sJwBi&6v+2wE|i@{##!X~#* zT!l)c%|5BQnr7YO1&c6seeK9)0biS>BAx8Tu+P5gW#>7_@yOC0BQ9V1T4(PTJlp4V zy`$G0B!AgZvHg6Jn*LMQ6QIA5Ky!gJwlxOq3OEe;=CFO{62{kpD!iBJxomMQJM7?v z1_q3^1&jC)4T_#Vde%th0^Z8#^}|(sRhH+wM|J$!9Disd4i26$fE)SUaw4Deja_Y) zV5A}~XIe)fmH<$p7`~L@bvQ*akA)%zdR=9EgsJV^sRLiJ zIeLKR1Y@Fo>}F+?UX*z=)MsHbc z)b5JzFVV5`xXsVcU*$%%?~({hH;gkXBpJ-F)Rn{6EI;>gYTmr@lB}WIpwAU)C0S`y ze_{bO8q1dNymT&-d;&YKLi5etu5w+de;oKVF8*os-ork3xz?O!*wsrW7X2~Gk>#w} zfmAi!nLNDoZ>lEPk3A zNj#j4k`J5yG&5Iiz@{QV+p)d%(3x8}b@(93v0;BXn)VSgK_cu7;vP}0&8B%Ws|CVU z(J&;jZ>e;F=Gb$li&otO$O4QlG8x!QGns^lIL<9GvtUw?O9}>h2~k@xvxVo3>~EFL z!TEC(7PzJ_3t*?=)R3jW0S3sA$A?*L17*B!b-ZAU5jp*5qg-{-IF@4_Gn8|Bw)ODL zn>gq&e(K=VOcCHKx#vtZeimjX$YXS+BH!fKIK!zcxFMN~LH?@^lBvVAg!$d@{($;Z zG0+3gcRl9#^)|w%6F3!T`N!C$%Mbu2Ky@V3glRF(O_$rpy}0H#bsxa9gtcjYbTo`wKuG!WGhY5IaV2QD;YZARH-mSKFJ|O!KYsx22+)geNmf3P^-=9nf-ZSLML8r3(>gYKPEAL3_VR5@LseUB zvbu0ZIiC&e;NUPdH3eu892^{?r0`Uq(|&0KhfB)9V6tAjrlUE8z95CMi1Bb_cmh^1 z&hLhX1}`6q;DHRShFx{0AFzY%}hEl%8!c6`h^VR zrAvdB-D+bsm@DzMREDxfgXYr#es3elEkRNRH(Y2ay@CPvxfmH6-wCC!91~g|uzfeL zV=Ef4Ocm4Ljw_CcTT;N*k%O(oDekwP*j*1M=i=cX(X)cy7EA94{Opqbm2%C!fe@<| znT!ItjWgaB7Q5N!)z2bHjiS6Pa`m-e$}Pw>Ke=0{5+*=Tyq>2kbqBs7iJoP_N%$?! zY1xhJesu3LN>?!22oR;BW(NF;!+m{uDh0PWQ?J9a29)FG8}>cC$SdJD0RoHN0)=T? zK7IB?#0&riZZuN{aeHH7{1*6WZ}d}MheA`$#*%h;wV&mSme;HorpePhP2JO(BNGQW zKLP3G6q3dlhS!f`AiV`I!8aMa;LXiZiu)ggpVSdP0j~3kII$vQ0WXe4#Bk#G^sRmJ zY>JOSbCbARujjLa8y!@a++-r+?AU@d8q5*nQ= z&N}-RA$rO|RSLhm5Rjr)3rXD-#7<1wubzS0+?t40WDQtB;G<)dV+Bb+IK@`?$`V3O8 zfdspW5vkb-RjgxsAX+1v+lkd>TCRfuW}SG)Ngy%3G=fhM);aqM2nd2dw@6I?U?m8v zHvAhvgvbcZ4E|S61k+(9kbnnKe**G>=L7^HVg^A!j9mWN6EwbIT8a?7oH_?~(}F)b zxwyF4*n~}`AmW>%2^(PX2??cSW@bi3sp#kkJbzxY^2iI=aU(3;SXQPy^n})niVqzG znwg?I*c@Y2P*70x)6z=7sRiJKIr;fk=H?iWACuc^wa0>icdf0Nr2O_iW9z58b2D5^ zr~KY~lVf8px3KQr6K59}{Pf+uz3yh5azzf~miY;=udgA=SuiGLPH=yJzjrc$Uf|i8 zhajyz5k&t1`Oj)qP0hF07bp6)_D|2}slWaHZSUl9alF~lA^D~~BPAu2X}`@J%?uzZ z5ljOU#>~P}U0wa*{d-^;fQ3CPixJxLIht*wrdrKRTs$BzFR!stcy@2GxzTlVv}LU% zCI;t#05G|Ii%5SlGBPrnAJF1;vgNN-NFDj>V_@cMuH$`YxCdMn+Da zTg@`w4ov%T5=7%OGfzL|E2TTTxiO%9$jMh(6q7@(W~nl6^;?*q|73i{#>V!gaAbP= z>{sWbP5mlB6RD{Ql`wh8s+=K$ZNV9b?BnBe6Sdh9f(sm%5MT6GQ(HSVDTx(;tS`Y} zu-RFX>ZOopO`b>60#oDT1A~KEwn2PC9bIG@*2tMaPoZVT$K&6pFOe4UKE?3&_V%_m z*}&qUrsd({dfyRpZ#dJKo)7l@Tal2E(0!$)HVdk$nHgQh&hALcR!SHXn1hY2&G-|s zx}mmqFnttiAoyEMObiVbhD|{Id&VHiw}W|k4D%{_O>f@5tyW;z`3>CvbF_YT39t~r z8uG#Xf`Xt&Uf%)x-hD9e?`Nljsko%%{hklAfVK3a>Ub5qamy!W5)xop4%|=rONbgQ zUfyyK=Hu(@q{+j>W5U;SCd4(ED<-+w|w&T6*DH_rRkvn2*pJJq}DQEg2kSDiGtV5FOmp#$+mY ztBooMazYl5^6;BuM+RFBrD0120#}3RL}8-AqQW~IymE976v#h+c!f(yNLZ!X0@M8# zE1(e1_I(ssmOBwqP#9@w+*dF%%Gh^ubo{o6%Qu^rmZnmADaC-72ABdwL_~51@Q8>! zj@Dk)kH2qH*i-s)12D0TgF{(f9_pk0p}9HIfT;Fzv+kha;3b#!A#%XR%=L>L8|@P^ zGO|XO7^|S5;Fmez#Zqx;DLd-vkv2F88*Ml0{gd9Yo}Q1>*n;@INuN+rQA2BT-Cicm zZy|}BbU;BcERL)0?(PvK1qEE%oT|sO5&@yCmX?MR`C_hg9Jd>@;n?qe^0T7IR=? zF_ry=)ei|vAc%%#sS~mrP$_6=;E5BtmG`~^F7f=#sK)S;Mq69^uzMCc4$R8I0o-x< zoin^{)Y0Q`MGg>R0v#P4ABi>-G5C~62ypL7Yjg;0ASba~#f6byJ)|YD&_)A}uBfc3 z$w*2v`A10Lz~0!{AQOz1nZ%(pl`pjVi&{0J!K$jNR6y@A;}fI2q2$D5WULRtU&V+> zNYpYR_ufG>Z@_!MHA`f_FhwZSeI&U^CQ2cBZE9)qrT!}sGurzgW;9c#pgi=JQOJuA zE$@;BFbOKZ7PPF-7h!O_1kVN>?~WO3POR_vmo*nQJ0dGe%BhJ_7j;a!TpU|(CB}?t zh{tBN6TF-V@n(>9+MX;y7hOtyR%+BN#87g7&HH#mmAiQdA8jmcOMF6UCU$~Mh zAr@-%-h9288F>bFJ;2Lu;;O`W$LcTY-1m&A2P|Yz8vSqm-jc{;lr!?EfH!|HGy(uf z%j3$!i<9jqIFvd%Sn9t6pgBII8`D$;%{A_ZEjAr53sY&Ae~MKah8jG6E*AFXh5s4;#0ydz5E}eQj!%f%&=aE_{3iqGd4YdiF}h}T2QBl z?9q){ua2MMf!)P*N`GuphW<$kYx zgmz2$!JoY!)SdUiO~NWBT;ifWXPo_UIIl+|cSsdgXX2jv>g_~LR6M>Xff~R$Q|^}y zNM|L&&7R)(X7f#+m0iU-1C*kE@1U=>134SC6MnS#hH-QCZ7{R+$}(pKK!0g8V5d=o zNb|>~GEwTz@$hrs0us1zOTwbwZCB5EE0y1&;&5{;f3U1oD}oLioLv`qMM@HMZ@P2y zYsh4_^a`FNu44{XUSdTI#^n2I2LGEY;z`MoVtxhp2e5g3U28!_pTm`2f)l1hZz|Sy zWZI#O=i7LVHBR6%qh?qHvXgmn_NQoyBAV?K!*75*R3CDy{nkyeBc^k`L-1ag77{@j3@)6`%Qwd7g+yo4DhL~3AdO>+1VOp6swznp3( z2{=3EGyVYkHHhKegUV_9u240<)m(j{*g$}o3XoC!EBT;QssWd)m866dmgJs4?@ZG6 zH7~LPu{3g$@x}|eoBgi!lDPz96g4+39)Wo>3?_)sl8x!REbgE}Z1FLJ7 zVyZ^oW?=8rZtE>^vNWR|B^sDF7&+ylRE%ghYJZb;q!&j2gzLR_LbhQ6a8@)7XMHH$ zEHaF95;(_Gp5yRvwO=UeW@UJNICJcqm>p?RgG@Eo{qadJbiwoaT4Ju+4ZvfE4o0rP zhN)E#94>c9(uUO2t62=WOJ+N-o6~GSI`U6RzJ7gBMHrp7_DQ~SX3Wo3lTAK9M;+Yf@34hqbhhMw+BV2)Qa{{* za1r-+enuy)9si0-h(@|9L`>+IV=6T*yT zKpz*S>i$BbyFS_n*YdZ@8Qa+`;3b?a^j?x-Zu4%a!sDMqNhC}MAu8HvEd1N0ct(%F zPq}J77O-swfM73t&ahAiiIR!G1>vK)kgklOs%v=ZuMREX;4TI%X^o%Bbzu;q{*>Db2K_DT6QizY!tYW75#U@hs(PCnM$kgQFi{t0#f5kl&%7ZS|EK88VK-Vug!J^!LEmnYWlWi;kBx)VeT%u$)~0RErOVz)9W0SxjqG z`|DF(U8mO&PQv7%9L(59$XY*ye>Meh#^tf(Ed$)wKoh!rAN&}X6qAg~;@3-}HOF+~ z>fdOr#R1p{S<6HMYG_56J7Q?d{=uDsN5F>i3@$i>Yx6|pzj|XeQsx>PjM~n~p zi;NidNfN{RYb2kH`7V#5AYU71iKGmQoaP8F%imj)to?ULdx+_nr6spAN>?5UlvHdV zOx9gzOtG6wubeSf7oZkPFFHQ6<7*jkX;fe&mRurrFYdJ^jS&(~*`{3AJAFlb*=WIH zCNL5(+eNXij`FC+;7t8lbB5oQI>)Q$#7J$r4_&pH z9!LI}t8vKpwzmDrabM}ggEK-_VItXJG>HPKMqCy}zp=~rme9Od(B5i@DR&mw z9BA~B-Ys2&&?Fzcr+oMI_4jLJV09T9n)0f&__bOk=$@)-i1mBAIrGHgms*M`4Dq#J za7I=N8G1sSgCoIbBuT&R0|M83Au3$$-(wUP(_B8=U@P3Lsb7@kKo|9|9bd;!sGrT@ZcC4j!>ah9Cr}1!Sa*^qjzPLGL`JL{*bN0iB z?+&#`iVqH#rcLaRm(Nwok0k+TUwCSREPioTf?9y%X^JKaHJAbAFD#EXKPcO)mXUGw zX2qOKm$-Z8?0D62eP*N>%O$)07fK!pi=g)H!I_ft%FnpoFp%>1;)L#ur=IlL`F_fh z_YfGMOLgqi<6~Dhx5?ePA3s_F^G#hHplbItF%%nf_r57vY!)By_!A@J)y6Ff>pCUg z8CN6+d6T^z+mW6AI+|ys>6~zel>PdSF1*syfLWaA0$6FFpW{onDk&?szlQ?A3QoG3 zjj?F!lcN+q+0zUeqcK`*pK04SvbMiv=f=}}hj9l!RU#wmqpu06p4-I&4_a30l~7Pn zEG{er(w_r@C#LMHjz6SRJ))WNVY|&yhMf{5+4DXEFljg7YOeFa-`Ds0>WZxE8%%ck za1W$Et_Told9$tDLZ|(`*AG|orn&s{;RFKkvK6-ZU45%L2K+reLB_J!=sN)Pa4fN! zouZCp@M6$2$AE%uGR4Q-8GN(R-K&%$vez+M#yS>_YgNuki2zyFAZJEk^zQ?fu^)?z zK4vfOa>R_}ycNblpfacZZ@B&i$H75Z|Mh@?Y-0QuLhipFuup3xr>FKrZTV8|+;HIx zJ{>HR*vBh5fqs4~;$MkQ6ng#_s zja!4r3;snlfV1G>y}1Mhw!d%T;|e|kLO8|Xs8nF6-7zu^27(I#fFA;`3CH#!8VrC; zfsyo23OKZky&7I4puR~693BRC4RWGh>Y!!n0)lL)(CWMIyX1GH_#@|kAYcFM0RX)r z!)Ygs1-><3zP^V@dm2o;v(5#t5}YhsG{r_`?u`rMXxsBY7U}Hwgxenm{~0}bLN@ob zpBgcEBP4aQM|xJBbJYsQHglw>JwzV+4UmBO<$~btgx4D7KZc-Q9$LSV#QB}?*Sobhr#X3gjpWuAIHw+!qs7nxO3zmCchSZ9rtQkcYp-jWx1jc|?tK2|uQ=?# ze|dt0Ee*j2zZ;aCUR$$NRUO%E{`u1+T}fMA9hZdUVv85-)gD{Lh0b#%o~Zivc}GI- z!`BMkpZJZM1dwPxq0z#S^h2Q4)x5;Mo!#9Ee!a&m930975Km9fUfF?J2N}I&$aBL= z2O$h^k&(}}A|j2V?Y0`HyS#)C#eiZZiA-3q^QN}xVbaplDXFR1+1af==QIk37UI*7 z98?cpLZ17(d^eAwuO-`i5nn$&cAij;wmd`&PfG19_ z@Ko?p{VZ_+Qyc*PhSwzk&3g>(^5VqC&8_C*k0>v1d}gMxhDKF&^;JUiSUkqWEP7sFUoRmc0ayWm$pXM?^YZdK zn`&z(_HwuMQlD@6`ubLsS5?I&CNh!&Yw^7wt%;)37Z*YtQHbV4W6|ao7f<*1Rq*Mh z=wD4PERf^j(Rugv^{J_=udlD8prEXd-Q4(TYfl{>9@f_jo_F!{@l~Ovrl-e05BoD7 zv=jGO&=96n)85_=?DuJ^sGt#^pa}2HT3xl65dbC#5QvzP(%8^2JT!E6VIjWk_x5)G zBRT{*ci3R&j`7LKf{w~99Geu$s`UU&y}tgHl2Resn588b-S)=Dcbej=DvkWH0*SY8 z-*U~UVY~VIvXSDb0ahn2kyw`Qjt&h?O>5;p1em>&gWcVXw6qd6EX>R?v9S}GeZ9Tb zc6Q-YvhWT@oz{fNZFh8c1Lh2V9v*y zA#{(%P|oC+np#?gl#sBnN9WUk)lgTC)o7>B3WW-S771IW@I-ItxGU zgmNqa_)9^-X5>S_xLVOYGvjG#*>x4=V+;6zPWyvcS=D7$-BxyY*~+5-@<;7g6&DV> zSyvB_*9QfYLJv^E4;v}2MM18D#oY=VQz07fzawkRM- zifAdq?vFmF_YNNAIWPsbIA)c2%HI z+bl7giCFbDpUKYYt@z1RkHDPM>^K+)K6p$JNTHQVlT$I(XJ!2bKY60MlOO#~b2&wy zgV=;kylt13?G)9}9YCl6@ToD_S4qb}9&?Gr9GaxVE}WF#+Wkcrs(uquWZ6(k>L^2Y zPgHoJ&6sTdmsAcwTi&o`&z4Lcf~OPgxlnq z{&mWG9$Bjasg|DROZjqAlN}VN?rowONd?OrYkDzRgJ>-lxZA0Ejg^L#?JG@sjA-T; z+Z!G~`US>JRXg2UTS1tcUa|ALpJ=@aXa8rJ8)|l**uUZP`-B%?_4c@2o7V+e>kn+1 z^+>u#gax=dtEz@<3*V=CdsA$A4olE^!B6XT`U7mV`b6G5Ubm@GNoVh?tM9t(u5s-4 zIb(n5QhoaC=E?mVu6_3ahuLl=ojH%a(iR+I@RB#*enooCcaGbKvTU7Z=4{P0n4I{y zBx3V{KK(~B-2B;`UUQJU)v}Xd1hhj_O`40dM@fuaTiXs z4&UK&gXcZx>nLlOwnb?{t=f$bFC}jCs0g0R8NFS8;m#EiatmkWOnv_PMAVZ06$Zj- zYQPFReWOe#$L!peo$6<7fmVVe-B&oV&gzoCyAm|=eOqKt7cDu@32LK)yO7X!G|+{h z9-~sv=Wc_?D(&xilRxDvLKP$|`_{Li_HOZn>6)MtEq+x`S8_K{DtfBAt=@R^E# z=_g2e1N09h$Ai*6sCaOhFk zxI@Kv%`vS#RU1WCZ(y+A!1UI&r zG;#VnInB9agJtU^kXxQeC2l{I6*s+dpOD=H_5B>vs$2HHSW>}mG3Wm8#NDN@r={Aw z`sf8bgOhy|RQX%~kH3N+Hh%m%l5afz@T1yC;iZ~4*uGEw%_O_cDu?#{pSR)I+N1wC zURN8~?|XEx2IxmdL9^<8hWj5t!yA;uAmuY8Hi4;WP7OG6X7CjNW2=E9c@JMg!{qo^ zC&hvNIOZAPE)y&{z*7P!6@Ux^5)bYx=M>xI^Q#*hOGkWN9@N74IG)qkc(cDcFus8E xUog^T#>|fNgS;hI|B<_oD;fv5d2c)I$ztaD0e0ssUw(|`Z~ literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/edp-sccm-addpolicy.png b/windows/keep-secure/images/edp-sccm-addpolicy.png new file mode 100644 index 0000000000000000000000000000000000000000..d506a859a26f31818da7d05a378da0299af0725e GIT binary patch literal 69102 zcmY)UWmH>h+cga16sMHpTHFa*T#H+AcS3;z#ofKQ2iM~6?ouGQySo!yKlZin{k-G* zk+CErYn=0tIp=v~g()dWq9GF?LqS2INlS?8+4)MH`emHX(d0R`{SxYDd2sDQkXwo+Ph|n{U=b*MUmY1vU!!m(qq$U0+{_{hw z?}sUm_%$5o%9(pV2?Eipk@+j2z#y1J?z>= zFn8M~nyqUu;rnUhvh6nR6PgR}_0@eZ1$9d&@58+nsYeH(|7p~s!`6r3Vk{#5EyL|- zRjW{PjECLw?BQVA|c#v5{-{C14OH_KBgs5 z{YX5xrsfl$%4zasLW*Q>EW#2tixvMC=@auMH}SAAxZ98w4;6vE=`TY`6P|bf>Z-|L zR0b5bAuc^4YSPHAz`%12q&u1D?rm_=48*=UTItKJ_@(XPrg+U(?#9b1^=)}tBm=hF zYCY}q^V&(wcZcz)RF~HmH(bGc#_ND_X747}lir|BQl^&c$sXB2={uNKC8Q8Cs2(!B zRAI3n=+b1L>4yDch+2H3viW)vX^4G-9L@g4v9;jU+0?JR-GPT+I!EAy5btHr%ta#xq+%p!DyWsz}1n&N*1J+24XEy2(+xov3# zphUni8n6|fko|uV#ET$?QTe;kXTcLe8f`aVyK#b!J+L>t4KeLVPAw=K(eI$3*wTi6 zhfN&Wj4>X)_R<4tXTgGLk50c9_zE6!0>u-SCF2RcvR0p^upZ`7P?Jyr^JqvY_Vc6L zWnkb-uwX)~kR(H$hIZ^xzJ$dyPzKiho9kAc$i5{|u6nUj zJ!3(Q@DQQLsC#V)QO+>i{aEq-K;b`l5)eE=6vzKIdDeP9KMX>Xs9p7s#Q&#=@KE>2 z$utg)YOp%i1`3j&7Svt1fh-7s9Aby|#H))!Rp3LK59f)J@yk$zB(u zDI}SjdbYW0zRFj66I`#{$2-i2h~dEr5tw+JmmGt51|K1lKkuFZ!1#yTuV24bEf87G z&(E`v0}i9gfBKh4xIr2+X13qFS3Q1pfq1=-B~1pB)aJEj$3dJloW}_NHHMgG@_yx7 za1)_LaN*x>6F@BKBdB}(Y7#JM*XSTYeoEmHC=;&CbInE8o-?c|Anx3@? z`~?;3vF`QdQ>w1rueuzRkq7f4zw>ae6t*yDj%5*b<7PL$!{>0x@@e6ag8@$gx=+N~ zO*;<5pknGb&pmu>1dG)u_Z8qD#Q#t@+kjQfSzspG*u3tdTwWhC*NkFMy1z%F`D|F5H_L`jR;(S$?$2{<_BWjGxHxB<6Tx$BL?#j6P=x0 z)zprJUfRHYTG3DWK#J*lKN}|LJ5LQQ`D6!2{4KUp&T)B*z??0mv8gW#1cgz;7s?j@ z4nH#oIwNizwEWTHDi;3f2Bl9!%S&}wanQT-n~WF z(tYj3R`KnDqOvpcHnnL>_bjp|m+dx=bZUTk7_XD@Jk7u!D;{F|;K;Kx$clzq+aqNp z&F&1(gfL3g=TgIWF_2(ltHATRr;4#ruE@Xs*mrztp?~gqg!b&xGR~Lv*a0cVz@~kd zt09<=u-y|oFN+;It5_0a*M6!om}bHMsiOx6K|#^r?bo_QK-#EYBcf?zQg4p)OK8fr zsj4DIfCKlPdzG5l{crzRMHRvY$Z4y$umd=|?OMy|tqXJEPsHL8ZK_EDFk>=U{J{pt z!|*?_*TPwbaS7_IR!$SOQJLGxAq7A+HFfT>N9yf>W^Q$Brci0x_Ej3tHSLw_yuOg& z*V>o|(fFVQm|IY9~(Wj&= zb3dayfZ_E&%T_rcK!ED??e2=1K)tRUj5`|z5fk&k;zL|^B-C>4NlnhIKN#eo!v6^E zdz>VI5Wg1~L*ij6TM_mDW8SV{BV_zJy)I+3rd|w^aOi(sfY#yrkAtajc7~DdaopyR zKuE!KM!yy(HwID0BlH}{{8+b@CJgq+doz-Q6g5czmm>`E9f4|7vGE$>@~`xd+m(K$ zDjiXoqMm=q=r=Lpgz@0SKK=MGN{*E89~grZCx$!m(GfADLs8*dFRLLdE2aJ8qC>PK z{VJ%nrNtHl%fND;G=hgGg?Gk*Fe{J337e}l_?=RqEUjS^_tp8E_}&gm86Vdl5U0T} z=g)cEBJmUdA>!ZbVl!)M#2^WUR*Z$shHAa8AAu!g2cJZxe-coG5#zg3zfFlrfkh-#qmN4+!nSghMTaBbR#s6PIVvdNQdYAVzCI>;St*1D{ z|LGiSz^jDVFvuwAG6bR+nMo?j+z9m@-RU(Qb61)*R!;kBCJ|uRGTjkI@r+05>UDL3 zR$R+nF!sXib#{jj;Wit4102_q*80H%lDo35oDeG@pwk)sD$#Eu~>bj8K6htQ>y- z*aTsEDJd0mkZT8WhUh#i6duCnX!v;V`x2O6oBzv?A!{@kG|0@05*`*tc+=s_Ia~!r zfi*{}sP`E%#9bZ8Pz2l5H0HXg7)bjm=~?!&hWO8jOH$>1y?y^#Nu`fT*@{ZL zrQ+ytJDj+YBIp0-?qihpv#!WKQ=VMz-2`%rxlGVGqQUwabs2^RjrH+H*4jY3c||N5 zSL;*(O#X520o|w~Cc*m}UBs?Cab{ad9YY4+VrxgLtFAyG?X_Pj$+$1+jjoVLs%2y& zgVP@9#uBwRxiAb!8bPiP{>s%iSHd6!~0)_x6q9eh7JLZb09~W_60na zU#dkZV1jpq%O<{_bG=Iml}xx*3Ze+Y|$@_@2R%CkCoINjcWEThowh-}S zl6Zf_4AnkFV!5$#w)e+~|CFPVOw`ggw>`}K_MsC+qZSgbMzCt)O3aD@8z7>0M8|SF z)$7cH#?HphP+H=vkOE^c&2UbUE90NzEv+gIOV-*Uk#BQleL^(gXZwmkgWZc_|0 zlQTBjh_+Io8!@)LcG%U*FN=#0Dm2j(rds6{&rMqMMrW&EzVtXaIG`XS3#XQrmLgf; zG$X!>tAZZcOG3FMxSyye<7z@x-dQ>|h;h*E;(GUs?&g^-@$ND!+^alY5WEwn~jrtWb28maG@x!5=|#1FusN zf5*q?E$b~TEHX0Kp2Z%a4Bik-O2{l6_pH$SD;0~~e3Xa&Mvq90nnu3V8DE##hvYdu z^${z3CX&Di4De6n;DqtFmN7Gje9ZW6^odLjNLScgpXXyBFc8s6A$DixJPmT{8-L3~ z#IKEYX`enHKMJIxMtZm1f5P$UqCGX%6O87ZOFrSqKELIZ@Ps%%D7$J(N+LGZDA6*~ z)BF1?6r!M@SbvgL5@p@n+oQ(C#pUDa4pFp}7&C8$&G4j8S5)PDVjn=PB3gyawS?^A zBnURl_o@5hGkooa?NL}>X2hlwP7OIbwCZD2^9xV)l4h`-l_GTHe5DW0lIWSWR3*5j z`qoYEB>Palq^_z?uXc1Dfm$bveI0x?EYmE?DODLPQ^{b%a#hY(mssmwdQf_^GCsG* zvY1c@bm+MgzPO1A%)idBQ}wRBxVuZt%(USku%Q~Iqob4FL4YqA`lQI8GfP;kN1et# z)(wrkO(Pc?uGn-QE37Sn7C!tiDD)b;HsVW3U09~m+2NBZbZzqzt$q1YKuQLlUPeT| zxUm^o(N6XZn5B)=b_$7D+%wlu)onT7$a$is;U;}6XqX*|0D|4)1tx0gd-F94E7%M? z^hh~HGdkwtP7TNGCQK{1S2eT4iOHokEhdVKkoF|(9faJ)zr>Q6Bn_Dceu+ow28k3m z+N@gA(A-PKIREv5eC0g*!Hid%rx6yf_;4T3IB4?Vp%~bkGx#v9IoT&?34Vs(F#Bos z_c_RvkHyNvWNfTp#URc0nVNoOUfVOf9sEt%4G-G>XO4AiE~AbDHK-R5tovEozp%q8R+u+YBFi(tVpcC2u>82>e`8tq zeh1~PE`eb-!#=T2g*<6kr#~b27G0#YPMXpNyN;Wq(e9z#DUyjOv#3F&$tDC>X>?P} z;W=$pouxKyplmkn#4l3~Ur&!ZNchub!=DWShaMfA0ZrLc#NcagrbOEj=IGqFcEkZx zm)FFk1b_Shj{QB;0A`3QKP%8x-b&hpnT}4Y78se4zCqE)PMZ(|?4*wYb}d%gZ_$k< zOIB7L6I}E|--9W&Zr0jH2+!kwFOa6zHvUFwpwExQKKqWw7a)_3RV2MQw9U<+xSd)*paT z!H_*i$gf#pMUV5^^WdCiI2{#idn}#P#8~<&iQ( zh7B3HvQKyWIVy`!$tXa7uncJZYQZf9Iob$7d^lX+vDy!QMU5X-(i)*os_W)ppQR+H zGdpd$nPHYPRpT6?)__v(*H^3>_8~-wfHRpph|pA?}FwBRBD$VDYFH zWr!&%xt}6ZADK1IEK;#PIg-Ew!{%|j9D`T2RT?3gc+2Pr_zrK63q-*~;-1=R#ih%^ zT>%4KT}D9?omQd|eS66S3CaD%t+v@bue&y-$&2#uON_jQ!ec+E`93yZ&0bfqs#%!$w^86fX1*tF)?hwcL9(b zx$HuTA_-FH*i{fT8}r`%1cRqC1`&ctF;yeEpdb+NY(#PW;~({=bg-j z!74MP@y@b$r;6LtfgaFR>&0^U8+`IjMP`;s?db71^=NxQ-5~F8?}F#Tf~ykB2zwI} zJrZtEvD4$LHA6{BO^pMT4Xk1*cUSz|GL^D-Eg2Jq1FIf%fRWG5Tx7(!%dG8J+D8kW z-V)N6h6b);cxx;_%`b7zCqi}&+5SVH8)mN32;p)A)BV{2(q?5X;GV6bg{H^gfv00! zRm~M<1a|5(W_G;vj^<|@)sy@Ke;1!M`42Gf!?Qhfqic1;Kb9HL$g^eIzc^KqxU{rJ z#S^OvU|x8As{->)FSO~YZ{7KS=g`wBanaD2Cm@n}ag#9B`TAGBAtm6zPq5#S684n1 z%n&J0A|fp+Nzx+BC1s0|=&xO;t2!ja9DQiXR+m)LfKuoi9M95sV^H|jR!}S1N<&0& z@k3kfQGKz-`nQ>tn*(yGZ1JP^RGis`{XC&G&6!1JN_;pkF^?rSQIOaSbHGqAwa{xD zzVqfN9NTlViyor8ZH|93(;Jqv%gN)7y(x$Gq@N`ToV7igK^dbpW}yZO^R9zSFs>iw z2-+%}@cQavG`e20`21|ap)x*LPNdKpF(9JZM?i{66NXW{hG&B`W~GGB6wK8*lihZ- zUj0#JM$`M}^*{b>><7k&DQCw_Z#9zV2<8)mg1%(N{&B6}Z$?8NOK}f%R1ea!;7@zu zK69BbtzRxkr@C^_c@VBAPiy$HN`7aTV@uJhPsCs*H3ki*JM{UANZL@Gy62uL}iCwQ6%@$ z?b42GtT)e232$4PnmrzfA=ma!i-%r6R4l+i*1ejmk_P9)iB|Qaf}h{2LrU(e8lI~% zPi=Nc0aqCKgy?w37{BB932Z;R_%|w%zDWB(@b2MQF(sc$lkiXSO z%GY~}NL}CLS_09c4fJ)g^ppwgZY)jWF9aVWqoe07>Ss}@enS5yS6zefQK>{U%39_0=ZPVte>cn$|geh^K1`3il&0}uC%JK^{V_jm19a77(7Nb zlf-!UgQMIxRks5xayal8!_2ih*`RT8#F6pfm;q7>wbh1_o%Dm)y~u{Fsv(%T#iqD| z5Ug2NU!b=O{q^sGFUxVS2~_(QvX9eA3587a zSyj4j${(M{8@fJP(-;^L5$lsw7k4sH=mopM0Il0of#CO@K{Sz()st>==n(l$_DH;# zWnuch0^0U?M7-@)l#=CjG$hfF2N+&G^X00c&X?*gV8V<=G&vR!&d;=TjiX;Tco{$< zvQJ^;XIY*d%)+$a08FS+lNzdJaBr~r{&fD49X-7&F2F*@rYi9ZZQ{^SFnusya;3;hp16kcm@B4N*kLSd? zQ#hnl!-g-zxM_5a2>HhRcz3p4wzPHI^5WTNJnvpGRK-f`40C75KLk)0q2AD!`>pY* zWs3!U=jqn{F5qP-bvAi%Kzt)a;jZxbT{TSM_YwMTj(I^cBBk%5-C+-mUVn?Y-Xo1)&u%rv*eT{!3{M2>=ybwBZEIX{HDDfr$D+>T6D5`6P*O zDO(FFJ%x~3+Dp5jdlS{Eh3u9}5{QQByW+u^K&gyY-mW=bo&CKz%E~_C-Sea#{xhCq zb5qlSsUd5;9tM&vL9JJMwg4tc##f#u=c`5D{E=y9l!C#~eX73!EP8~Dh1oD1eHw&& zlo5+c;tN$1@fRjAQxQS=Ur_iNM@dZmiViKWuoIh`NmiV`d=V^{SXd~IwL~+n@6am` zsf20fYL9R`_`5mXO%-!CPSM>5U1nag%@uI;Kd3Elvi z8sQH-xt@)swb%gT51Ks?3WH@6jB!-T?1ZMux>A2}rJ=)cO8OCkw+IylCm#(J)3&}x zr}Js5dU-*<7RFQ=O@8xWnzRK18MuV}-uQDsJ@C}MB)Dpb9_T5`){eC)HbxsDU&4XV zlUNE0K5AJpzlB>aYni3zxkXbfvr1gH^Prvsq_dj(C)l>+3qk(SSRY zV*t=3dGrvl*RgtoS6jYriNLYfnm-6Sy`MiL%Z&!~X06@|zaNx=NVP9pD67(njTxk7 z&Cdx`Cv@@)d`SzPR?MAdF;(&cX&>_+o`X=-TYj?QDIjDT*Bq0PoBhLFx56R1H$fiP zbt6nFy&}m$)0GXQzt5i;8$A}AjYVXaH+Vj_TYthDC>w9&aKp?FGZlx}VVQzSq%!&= zOeS+e6m=uyOzVL2Big%WLOs5zaXypOH^$fFXD|^A*ui>q zw#^JGA%z2Oi$}arIV+CnZQGT9-q7XE%Hgam50;eMCJ!r5Plt~T=OECQ7Rd#L?GF@) zT#MC(RGSrUEGM=pc77aNpiQeys)mwh z(Bv4}Dv zJXGuhH-#)7!~uT8_@1~L=#c9bhjEd(Q$Ck(x`z)P(<2RD9v`LD(sA%tZgJK6AhJfx zcOy#ptq<8FG7jx4f3dCTztza()Je>!Q^jGK#g?^cA%CE>2bs)WMeBS|zD$$J>+Eb4 zHwC|#!~l*X_0;p*d2)r63`n;ovR+4T+6R8l60-r*I%luB_gYtIO&azMS_48m2Fd^n zuzx|LOX%_gytBnL4}x!@7wLIl?{G&`I!hcH8G6<=GToJ98zkn3LJW|gev*x5_kY|$ zeDVVj{*7b>suNSTS%7ct{GI*Zf=b!HEEj(J4eYB6U>=uO8z1LlW;zjc0|2Yi{gth^ z0|Nn8>`d~5NcWUQ5xNi5zYg#yZnBSa0>aEzOx2gsDs*#a8tEMU6_^U;_15xfEfV(a z%%s(rUNNTn2C0iIhj^c9K4w_1 zbw97Re*znW3?&8_DI=RBx-GGPH;wx9Y7T?9Yn%8rGrtdP>B^25TWqj@T>;(S=f+)m z5D1%^=4%&=PnFFUg{1&p-x+&YF@!qp=D=bU6F6Hnh&}s1nj0oK!d!~-a8;2+qM{nv zNTt0}Uo2WBi9NLrf^ip5QO_1L@DjPPaSBz^jP(0HDgkf5*IGz%#CTvcafHpYnrTe(L zOvRmSpO;oUOy+CM3`C)yK?HJryR@oecn+P^_$fT9l*mxu3%CQ*iwxDgvu#;e2g^8| zA=to*9x%2QgeP}+`0HbQkbUK|uOYRy!I^i*TTLSvWxeDF%ZLYo!#lf$A94b%x}rIc zxxVmfcrvB4CvyPV@2i6z>@n1OnW$J|2l$19|DS(b4YmO{@0PXZzt1i%D_2Ft-`!hJ zeHE;f2^XR3d_TFZMpj1a0@Xc4fH|Z4EdfCgCHgO`<1dH+^$Za{$7-?#nOu#1+pPAJsl)UPq!u;&3d}yji1MOBl`$-0 zhm2gm*6=i&6DPH03;cGl`A;FN6I~&aLhYm0DgDdrinwvN+Tu5(M-0~83 zIg@>k)bAv=#+Xtz`V^wf?4VJrvf#ztrN^43mfuT{GU&LD&B4o>%anm3qd~!XErrnO zf?nExRQ);DEu-+I*#kH4S`dHR*4z;dXjaCVuq7hQ!r{VofUd7m>=ZjduQOF;g&_v_ z%T3vD`k@%aOXq)B2UjYNJIK$5tr zIzpRtoC7FK&PW3yw9M-eo;6v`Nqinr&k~B$!#*u4j49=b4Wz%dQ9Z3EmHB8*W!2^j zpm4sV9lJ;VYpdSQH1Q#;U}hcsT7kDEV)2DyKs-hi`;QU@N}4}=RXVpJg(Lp2v+i4N z?YdHBy{tbtB8#hh#}{hxg%d_sig8YTSh#w@cE#Y(e-2)_)F-T`H`_90hi)l>?U~|i?Pyj#ZH?7PcGDWUyA;fp#Of}<; z&dkfyI_MZ5b*4G^3i#1S0qgmH+MDa0W-G+Pw1WP~IgF> zAAMxDQj0J9RxmZ7F@Q1hwr+H&7>$bG!1_a7Mk}~U1#rD4n?_Zl9m|*|T`??0JqKvC zY=ta=wU`R~p%5UcAK8qCF#|fi z;hq%Z2HsD1lNg%QN@XP3Cyq>&TmMLi!m?fvYoFiW?&kH z%o3pef8HiQ_G0$iL(;f?1PWvn1-XToy+ugw)OonhHNE5KTR?KDBQY|XXT6a^4`?^} zO~_*(8n?gs?9Jhg`)+4%=50UI!G6jiZl&&%36=?mWhz}NQGC3(Nl6%W66FB4l`$fn zzf8mzWSlb9KX+?J79-46BQ+yj!#Ft3et+`pvoa9%Ll%QRy#KFSo3(B(c+L-*Tg-6j z;OB>oeM{N@R=oc$1+hdCd08M^cB-9>{&Z32)XwIuW?|*(i<^L=wgz=&JSWFdBvWJo zPI>j8j^c0DKVpw{7_8EANBC}uzs4mb3^#Ny=~X4z%Z5dhzd^m!=k^5Sj4QY2H^ z)TbJiJ38sX3fXD6gk+2DX~i9^fY-aPvR0HwJtt~Xxz$TvU&J7YUBfu|LJuNu-Ikh? zaxEL%!^yZv!11Bh@x(?ojdkP^W77m=Uy#_=G=u4H`xMc9r2xrhi99vS8~S#UiphCS zPVPpRu5DjLbYcQE^Oe=rWo_*b9E}*F5GZa8QFha9>Xzf|0vrb^?Sr{cd4d2DT?QTJ zGm7;O1}Vy?m>HzY*SR)7OG~(cVFb(Y9EcQGeN?@yx$o!cJ5Mn*= z*Jp2hmbdoZ_@Qp^r>)E*`dYbJC~*bD9ko973B7$vDBnCo*a=)wDp z%5b;8ZG^>K-<$Vg>N>vzKjlTpHRS668si+!DOz9?Ze+$rcwW)e?q0Gu=j)QZai;Lk#Leqjds?x=7{S#sG--hleSipSa zYqD z)u&Rm^NN^`2aA4&^UvccX?Gh>-EUjFYJpVd9vR38x+Dr6MLH9jja`3okoU!ia3a^nDvVw$GWgnIiG$yKl&|m0WhEWYKy|+ z;sOmw4lhX)^`2h8wAbi)3lIm7>1eV^BuOc0wSOILYifEMT^X5HVHU_(;AX0LI!t&S z_YO1k*_Yq52`FAQo#*ufv2bP_RxHWSP*h(4N}`onF6!XWo6UnNAP^zy;_~F8#4Fx! z0$)Gt7?p2I1XO>YpIMmrp>&vb)n5X^|18YZPX*I}Hg~36e9X7WG?*~y z;E?l+JYhAvDnVyytKJ0p4LIC>5|@Xki;4m(z{Sn{?Ml8taSmVbQ5~|T@w-u|(tZ0= zcWF3EmJic@mM!AAy!@v0=OrTV{>38k_3Xb?gnDz$?uh*b>ESYhxG6-KiCB0UM0oK8 zm??}!>L1L8kYB z919z>0JhCB6FkVEO(Ux0NbV_+mpp?&yRV&yx&@!ufA0${hVf8zGSYLh@N#k!G+4L+ zEFR1$;@1_ey(){|n(JhzvD~4Pvm(x1zZC2fXGJW`tkkW<)ukJ&S}Ihx=npo0?ADfJ zx~1L=k9^fLzN?VomN{EBzRRSauu*DU$Yq{9QwU$V`Nr2+ZlFzFTs+-1WyF@DZuwKW zvC%?XE|oe@-F#x00}VbmH9&Hl0o;IFJpwO-QUk8iBpjmq+McQE&T#*wt z{)NWli^GM8HiAg~oZ0urnvr7NG!@zrUA~GI!^bfLi zsggw~i`qk>22TbH&OG6tfivOQNp1}sf^DD0UpcZnD^&K!SUMJX6yUnyGSca>aw4%T zNm=lG1>rYvO9M%4&8Eg53rlEghVB?r&2^#)VSjt60E4n_jCsh z53SZ23T{gcy^ioaT^VVf!*!1K)|T5-MF#z+s{21K_Q3HG*XRBVx+;=dxrz{)XM6b1 z7xX8_v2ZZS0b5flS28n^@=g~as(2?pIc%)w<`&yY+edVJ+n43PmROehNB9_fg4t0D37X%mM5d8L9Q~(nNqi*&E-<(?CjE|^I$mo(EXMU z!?ur&LwqO1IYdLNfG&{y`zWHeF*8IXzOCsdT|H%j4gyHB;l9iupXgB?STXJqUxu$o zayCP(-0E+R%o&#g&n-%j?cHf3TsIiqJ})f>f=I(p;RLX!JfpL&6l@p&_JMz(hb^8N z#Bc)MjzUDhWgVxyQ44b5b}rJZJTHV__=4tKdY6D?qNdO9=R^RV(olmA4$b?HDxdG& zyWiZBal2u_`0a}Q&VnB;3Vt-+xT?M9b6K}^V_F`7 z@wu=dkf&~)v%q|RpXKWc{Q|t@r!zL4bW-L$5kZMy1Q0?!vaXyNvvhYWEUZ|=bJOLB z849cdDNcgvUrX`NiO+ratlWk5gq^94w$sN(v4DB++X0iRZ4vP4hQJ@VK2$c2G(*{l zxvj}it<2LiO^tYsh4FJ$u%`fIXn&h@X=__~SffjOgvb9kzY*0hhhj}_{k)i>z92GV!5!5ag&&n+LlvreQljk951+IT+a(_zv?T_7SDX-(? zsOSDb&uQ?Mb#NSU@YX4g7S=UKB9!b9`ieF4VyycfiiO!8-XlMPF@lV@JkOKaLs@gp zB8&R?mp;#Z@XQkzwkOKz8L1HFe6N}wa9L3?z{XrrDa)!yEm0$1plJ!oAZ|HGi6 zS)bW``qHl;5ae#vW^=b`M@t@_j={ejQ|X^=v0$s!{vx|Dw`pJd zpu;y;yzg;4<3Rzyu&+gtuOPFheVnqaciw#wKvVfAOw228LVxn z@O~(pmu&lc4tvKm2Hy4a$P5aoZ^bU*9g($>%zOT^ui%io~_U1qR16h(++=5yP|krlpkTMrn$AT^;~(~j2=C&le7)2)$dQ= zOd!g}@AI0HmikrRx0z$7>q*+rs+BO$sf~%ux*JE&&rDX4H9~wC97$*1!3tU$m@uaV z9{-dAmlL<6LX*N$bt-WlyUDOfG4`Q4Z=lwPh0R}-wH1HUU@jfkC0Ab9l%E_dP57dvQU1W|{-R~*im=cT?U$BXOk+W28Y~Sr6zFmdU8nsva3SqOV{c6|F zYGdv8tSvnpy!31>J(w&aHBkQv;)?358>U6A@hMUm?8aeSA+x&uD><&C*;;X9&7VI< zG>-*KEg*oWGu@t5V`#(6d)5i9%3D{gc4%U55;>gWPOrr=$Fkc-7a-Kwq-F66R#NiXOdXX?AY!}R!R%jdj9kxfd#w=mokI15qMkrTMMFE ziv(Cd(t5q~%H=~>U-#0qTem=44t4waubV3BTbY>}LVyOuE1@zN16`9_m1ySl$oEv| zpJG7d-U$Z!fA}9rz0`aV|Ep`}b>AW?o_0taUtu7}8@uq`-{QxRXY4!DG8o;Ck@kD% z!ZyCu;Whj42ze=^Q_Kwm%K9o=c=6SR%CRMwyUe8*YVC-Ou+EWOws39QI2*dx7~RI@3V&2$es(^`nFSvj@s(J;^ID}xzAkKI&g2va)Q;2(HbRX)78JKoN>Q_ z^=Oe3LMXSkA%~(S`ZJ%6E9BPpLz9*Dy`_QrA^_hS%~Xb>zz;yd8yTSw21(opN2sHZ zIPCmKh~0Qz$)G!S2T4Rlvg?I?v&ykRvxJP_`*x6Jr^oK_($;aJxz@7jN4G@%uayB* zi}-G-+G*@HspuzYy7l~Lo;#)>SqvL5d2RPHt(|f?gTmpJzcIWhbzwQ$GHA_0yMbkL zX!kZh|J(FUt&Lz_T=L(Xz^5*rbBqrB09N@D-`~Hgq=vB68FH|HV4Uk0kpf5T#ehy< z;XfLa1jK+AJ(r!xs#8FS!YQviqykt08*B&nOYa4L@C=m!Vu*e=Hy<+a1sS1O*d);` zZIfPVE1&o7Uq`2xc}!?{zd>KNd%(Lie_r2A@K~iy9lV*Bb4BMeLtN_PE&*);#-EcpNo=>+qfg zB}>7}QKc0!thk?+Th<{>!1HZreSrs;tZ6c&gzSoq2F%_z% zyK%GJ02YD)^x{l0;!_ajTiNLNP#%TFBq2uqJ>w&5aZy~}HZU%RQ^IQ=}RlP|@BAvqO(aQlV31(y_Rq^r*Ml<&jTDOSE zNHR0;$+L|eT%XC$+OLUBWo=@E%LPme1w*7UIX}$P*RfCl^GBLrHCtsX%B+KCrzP@E zJ`_fAd8e7WI0x2}b&up!7F--GM8N1vo0&Ds>E})QxhzhsE!th$Ysx6NoC^yN^vfoL zfwgNhJ;`%K*EdY1F$<+Pmi6R%MN4)$KirkiBhp{-dAydHvF9v9bo=|Cf13mO`AAGi zJ5z~87Xg=a3`sLWUTK?~X(M}r zLaZakxYW}iGjbr#x-+qqSZMRd4qKcLp^NTFJQ5phMrMH~WP3{}K4@!?e45(mq0Q4* zhhGo2HR!QJY+o`2uc^s^3!*;+$ni@h1U2%Q4IK*Qa&1`#xC8-X}?|XypJrN3I+_GsY6+y zUAPWO`s=sZF6>GdzpE}A((*dX-7l=0-mNR!&HL<)`l!bz8nM%4eOYyH57UH7t-bpF z6Nq3e_zBNF@kZ|C&}>JL0-$3qW^BWCx1c8l2IJ7Zk5>#!OaBPBo2c8_0n%(+(ercq zex4Wx{OEgTsCc)#lt5I2V5V`DAk%y|^ z0>15U{?0}I&P3?n7|6%CRBey?8;7swhudl@6ibCvdhXQqSv|Yq)5fg@!6}B;H&2RO z%(uI0BZRCD-|716>$Yn5`AG?I(88+zy7I#%K{f$+ZI=&MYS-zmX=DQ|o%-9&E@L*=GJ!4~N5uj;jW>GFH|-?4f{%xU$0DR?6N7$qt4YJS4Fw0?qm#El=4=^=Ozpe!r3{v%CshT z4(56)f0WA)TT{htf6|>-A3<xDqkBA>d5nckNXu z$DNSvM)9UiptAl$^HA2Y7-A;!3Sq0J5Z>+Vo=tI#Q&&Sh4(k!Y07OVxJd$JZx?%vH zDjFXt!LNM+%Adz2(h=DEkT(D4SUs5E1;IjswOTLbfK!kXS8}?5++Z(UK$+0Y9Ass-I1mCphPF zo1#ZqSq(K*B1fhtXRP;>t15A2dRMKUJW*e-NSo<@XQ+Cb5?UKhp0KJ)ga$bWB?ije ziAh|b|B^W-W=Rhq+)g*a`S69B@mwsSC@tYmi~=BU`AVeqPUT?X*^ozabp?4&eMWN6 zzL#Xm2_4wjRg}DNiZ4aCKYH-(G)oEcH;eu}p;_aPW3PJozi*%n;{V<=T(7^imF@nG zaVo=l*e7P7&F)@x_gW%l{7GeMLs$JwfHE30QUO;%D+2V2TDYk|YOXRBP>~Seh;aO++du;z`qM!G^juyJb!ateO1k_=>LHH7|jM z@1K}2dw0TmrTM08GVmpzO76q@-fFwZJ-*8ibK9$vvv^K6{EHQ$tQ7bZ5=WXo?Qp&0 zCWW>c)Tt0r7V#ld%$4=ae|GTBD>0l2*d{Ym6Z)~tf6~6o5+l2BQ;P>dA#WbOCD4|M z)SsIlj!OFS>%-xyu10ZpvVe(!!UWt&vT%X-pOKwpvf8 zxuw;tf5+qGGdZOSp<^W6nX-*(!eD7z=zo2Hn~|0CUSXuoqg%cBg)|M|>Eb1H2rMoU z@c6z+;>~Ur<^;ySr(xS@37uC`b@g@Perq+eg|uiX-n)9g>+=`<%x7B{*s=h+A^lNF zA!uBG#$BQ|#u3`HN!-c&6r3(B&eaj*E<&(yNN#!?Y-OwRu4w4pOU8}!3+UOa!Dq=K zBl17<+a;;%Xq=L~r}nox^iCMTAFs~oENPj^()_FOIf*Qa1`6`>dUaK6RZw>Pu=|&? zxN^O9f41p=gJ8nO>b_eqDo+d|TeMWar75cF^V>B-6DG{`V&v)m*{8Z$PaeQPs$d37 z?#nIt%@<<%xc5ZIFQxWQKs-}$rI=VQ7d3KLM=f8AAkFYO9-#-JSK3XY$X)|VWO^%s zss{%r84bp?-c#wBEfZnjXY(JZkmYSW7Yf%pl>qrGFS zS7pgdPA#t!(IS#eB;fy6>J9 z7Ot};#9Ha}vMStC8*X-6;*MB;QTjW5Th7Qo%$(xy5Kiwx1a(4s?)M&+j{HO6JZhCx z(_7J8EEP>Rn@>9YeAV}AJqB2eo3IA*vg7Ty+j1TOtcO&h-j!`ifN-BnYB7ua19I`K zJ??6^cqnDKNVcD?l3vJ8%)RJsy^b^ggE&QVqvnQj?U&zi4y^B|{- z0e#o1|56$wJhp?1#XA3>?3XvK2&GiIseVZ7^DP1fm!awj^Fo}d8r(CpfP&{14Oi&G z1psyKyG!a|QE4d!kP@vE`ZB zAX^=!phd%+nS<>IElM1VhNw;iedv=xP#mQI2W6Rjf~Ey@;5)v$xYem!Cr%4_ndf~U z<*kq#m;#OHUaju$=uuIx&4Kn^sjX}D_{l6Rd~aD#Qdg~Qi0ESoXt5Xe+wdavsBUBc zQb=Qb`0`Y{b}4$uk;bxZPBr`TYZ3z+62UPOE6GK+=fcZW;gL=>8y<^cZPTg~@qpdM zzDqj;bQ15pf@l`qBuzfm*a;;beJ|qWik57TF!WWpQ<4}ex^xam~}-hLT2rZ z5^cNvh7d{`%<|Fmfe0r`8mS4=N&`uzF{gs)ML+-Eu!|yRDP^^tK+A9#?3T!f>nr$B~vJD9qG8< z6Sd*W`quK3>#J+%yy40)J}#N_AZKHI38unCHwP_JRAcBhR+}A&2Gy@fHL$3o+8xus zA$CB+t|}Ksl=3DRpm3`m_z0ZmUl#kYPPD>BZ@-p#H1*Rc=#sfuTvd%XpGN32^!z08 zE0Jx+C7++D7a9j{in;UC`>$xMK?`6;!F7a=G)V>P*cD&`2gn{f-phAjWD!H7Ni6{v zw2!0#)IWykac|x-g7XXuO{7c)|CGtTKwix|(-d-`RRoctlf>c^GRd*1xzw^)Jcj{B|H!P&5b1~2ZaXmX;l=XU2 zE68`{5ztU8!y_~xa<~SQt`j#YVDu_W)q+U~TNce@B8t>EjOgvwNh}D=1EBn}LxFh? zuPR|860w@VqhOZLe6I)bQss_)9s4(YF`bm?U~AuliL8Q~?#Qrii$0e(E(Pb&G^61y1l0D1sl4uc z_mQwPibN4b8h$>N@Ds1bX+JxX9^85Ztq9qOdY|rw zIg@l_%0`kBt=rT|oDqAHM`xF5?Yc zBUNo~?Er-GLXVjZn0k zGS!;QJ!7Ty{WA*S@pJ|>p=~FQYE>qv^A>Z}Ybi>|f@*<{bSj8|{w`&OWo7^O(xaIw zoM5p^%qFV2y^NVn;&sDiMe3m>*eiJ~0dvvEjhUd67pbW)1lniweQHk=A_d2U$r{NG zGf99@0EX|I+-Jw|f!&h+lm)!FwiOF7H!GlU&$2PgVC2AZWIDkd-{wvj4KMl#P2~n& zBqB~|9jg(i z8cvlNmu?O3f$Kf4+D6WTw_m#4qiK?^`7^IZdJ_gaMIWLpwhf_=yIF+ub*p2_9<#g< z41w;*#X?DYR0LxwQo3|34zc1CgDQ+!(yvpx5-_3BkDw2xK6x(-SK7w1MXVMA+qRLjuV(^V)UiIZcsK8|7>go(Ya5x4&?Q;Q8+koQ zb{?u0Zjk5Af^77g?h`Kh08mp2WDMW6=y&lOtL5dmiHj@~wEY(p-M*9k**>8qnD}ka ze~N(&V`9gwPyoz@AKqk-ov=3fo*MDA(Mizq+kJAA=SH?JRYFRb(n#TVolAqtM-I@i zsKgDJXtkK5CXyLujz9^~I&n)hQm5er*$ zj99kGuwpXt2WDbKkIN5zIyoJzsiIJAHiJmnX9g@5R9;Un#Cec_UWbxFttN}bqc47% zVSct4V&Dl025tHxR)0mn?4fbl=*29vD(W)qg#sN4YTVm(ceui~rdSqxKe)VtOJ^*A z;yfXyw3ZZKi5Y~Q(@bcE-!|v+L%u+YA_!<)BoB~Uy>Gk+L^!W>@YJRqd}gnrab)30 zjp6$*B#NAxH$3ZGh!ob-w4NzWDW9o4>D3c;_{Ick#INj z)Ii?`b%ZnW7P1{ojKDu#NKI-D6$%p;Ry|@dN%0bHV*d?FLw174mC%y%#BZzsFBp@^ z1$*mtUtyO=nyoAouIpv}pEoh%!kQIh%Qf zV+1R80vQo*?QZy95*Y$kOEUMVR)j}Z(3Rdc%pHB-G?s?PH=P&w_=s*iQ=!&1>NAl#iN&LPa!Ao~02>9sbrk_+-I}{x$glu? z#99%X3bYC0*VUm`5WUffJ({jCAH5IBqUjU>bwUdrtTkm6CKUa-sEs~O(Y82>K6{#Z z#@Tpi7xtLXG6*Fcg}$l!%j!FlA?F@A9*{W}+N_^L&cUp62OS%-XRq;ADAljc{XzvJ zo3WJfdd=+UQ=J*-&9YoT;s=q7Tw!3h?xOX}!9j;sM^jmg06<#dM<)|@g7;{!+=fF2 zuOU33JOaTw*NO@1so67Zh6eAJwC(2E?^K^>n8w&+W5s=4<7HMOh=V5B(fS1+bFF|^ zF;T9LySn>+M4pf{;LJQ7M@aq%@rM}WZ$5uca=cEB3v4)@$KVcn*-#jD!UR4nUN!5% ze2Sxa8Y2%$!Y>%ErnykVS`mtQWk6bs^!n#+-`veBq|Tk9Oqd^bZu$uaQK%B^h(ekj zB!OdEe*L*)ie8z^c*Gy|yX5h&hW6WM^y1WbeZ$_L#Zpn@`eGV{{pzq^{ao{0PmpNE zFd&s#(wHouh^QRlXm*c?j?0ytRqcnHHaY{D9s}kM1Z@x16cwv40dW+wZKs1yFJ$N) zrsSwbT+WW^7Ok^BaA;-{TFE%O5H4pL_$PL&Vu#ESrU14zQBZk8X^4}xmJdCw1fMNk z6Al`XzWa*uGd8H$JP4z6t(db%#Zc`pbI&90=J~ALyaIFMhXLsfu2-6|=h1`t1JgK{ zJe&fMx%2e%ixv4n;JMi&BRkKG@g<${yAh#_DbNx3xhq=h7d9$~g9fC71Cw%5zJFv+DwM6?oI`OMSN&%Pw_git*a4`&_;WTI*=}p6~YB|6H+9P|%AU%0ojyZl`Ltak}i{YU7#2aJkFY zxF4|$i9ry``4J6rm{}g)L;X4h{?yw}{)Si>-Y~7e+XB&F!XMn8#U{F1Q_8$Z#T(A& z_XbsMKlBYK4vn6Tp_D;($6s=MvL$uH*wbEezY?FJ^U2;3XGl#ktq7_O;<8PA?rC0l z3_;U*F&kc%iX0j*#-f*y%y)I$xmY)C7D2CY8$7V>4tt%3G|W62^8wHDhvSQ-5A|R@ z{hQG-8kkc5IUj>sR&>wm`RlZNWeB#0(-8&7`#60}6dF{o-9{VLT8W(@aOb;A|@OoDYon}zi4CB_G)6q(_KKot5rC_oKV z<}~iP$eQc@wS6P!rtQ5z;`tB7OA%|zJ~1|naAaigaw^ha``!jk8A)RG$Pi#`fpWBZ z$^lS$T z#9FXx0EIuxaRkd(%c{`RTkI9m-hM3iRW>j`r*QqL>BB596oJ+?Ot(=tbF2^TEe z1)c%O3CdTxt_5#HXfU{+^%)Pgc73fUdqsv|9dpLIwM{E%i;1J98hj6%iKF8a3SP2D z*iZc)=fwPNt2)vtM7$f(B$BRVmDZJt)8P?nK2l`;Iv(##qiQG#^g@pSVy>kH06!*J zIAVoWY)P+<2BUKX+vJUePQKuf9*?KFzzx&<2w9+!kHY(G_QJ4-k3k_K-+dgHG}hfo zF$|Ie8s>Rbq{w`-{o8sDJ8cQ`p?v8&a6jAIO=~N?7^uh$RP-5Mk1M=`e;Ds)U{)K+ zQY!*3DDKawjq8i_7uLEH#U0EzM_ysg^~&r#0Sw%_fp;bFVB``%dDRVzQ~MZXCs6=hJTa^iAh zk>sp&;)bPaj^w3q>g@-oMc^yqws1~kH{9d7rKL{po$tB6mWX96b{|3%?YMiwX_AlS-eeZ12uM>Xbub2U`J&W9oU+b*8PwzW!7(8vji}4vq0Bd};e6xx-wshK{fxNc&=YqpXmUSi`5|MB% zIWT}9b-Ec&Ur$~C1z;$_ZTZoEGV9L+Uq+F&vremNhEIiMtDOOd5!-`sgeb)8+kWQ) zbPPsew8hImUD@UVnnIfV(Qp_wyI{miQq)+9oSEP7Zd6rU?@EKh;CC~OoGk|!7`35* z*C;R;+ijr|oxmQ}tL?=i+Q<`%T83idtTTZp%c9yYFh~Sy&}$kf;RXpDT>jnzn2qVk zgK`91OR+0mcQ`g7hcJ#rhX6qSP04JpL|!W(QyR0cp5#o#iBR8inh$)=�Gm9V`g5 zx3Sl`wSlKP++7}I^x4CpC-Jj*w|3q*tFmQJivUjjC(q&({>8~yc_uNr!9tW6PSE8> zN07hn<;Rdws100@E-=E| ztx>|X3=pe%5>mNf`|RxW8X(xG#5_M`h`!-1A{s^p4CocYxnGGJXSAlHr>6wLOK?&E z%6u&?`5~!_SY$)6eXfDmZ&u<2ClI4QWe)}lzX=;Zb&`;bX@=?5S&`Ka7sNXDvyA%l zywvrSnutBuo*Js9RT+=NW?Zw;;=;vXev5iB#VGb*4TY~#(YGdVzD}uw)H*w?)pZ`zg@@in2~~^3%5CsniJcG~^7x@5+Q8t1`~l7z zo&I1?wT95Bs+&$wDw$1DoD%XMM>xK3DvaLz;r1dH0G^EKf#Mm%G zr9XcW`TO94IFi%8csbp3#}%UAu%{ABRpiv9>>mB_@bFGjC&GPl%w0rDY8O%-(v~H~ z?wMoU?ys38F@9zOL}P9|csGlN4bcjGj)rmq?XJwrfh*O_PPwjLYZZeb?NNnRn?AhM zN_ICM7_a+n7VWWeUj4MQ`F`ie2{W22*FygFbs*fgtU_x>J=YhnTm2cX)vq_}f(A+rtffyschetV~8=(KHZ5L*zo zLIS((109WT5nuv}zG9e$s*JX>VTnmz%Q}$aUh&-g4?+}71;q5fds1TsL6@up7XfDP zt%#le@0%c`wXl?fRHNUcMKiLqE1H@A*;VKG#zA%Hh~?6;Kf%$(*Ia-p_J?ZirSmNfV;RZkF zJwpLtN$lNt?J--Q`i=Wm&U)5a?;A+1!`1UYm)2f;U@)rqRB_{kC4MQTM|)nDJt6rj8HyUw<2<4}ys)Ew-TXjOf>Kt@|o~Ix2qk zw_5MI;EqE3p}3cx%H=n$*6G zX^IjsqROycbk>bJzV8@&w~JSus>BemEo6}Tf=QZu=Uk{C=Z)LdTa{Xe zWrT$rlj_r^&b~Ltp-U2_y>@W<7+mkd|D%>3Cm%(h)ayu@+aKf0qBCv){uopyDUo(y zFY%jsLp5q5|Jw?jH)$s#sgu~Ia%w*xre4>-ew}IxRLg#!D^RsYH^5`2`QacK{72RT zZW1KK{KW=HcIKtp|8eq-A9g8SUQDtkkMRV4y*5ZLrgZoaW>0MNK9*mgJY~CJb{wiX zz)~`A=8^r25oSMZaoD^cN0E29j@Etrfsm~BbJdo#pu=;n6k9mUcIJ!SaNgiivLvE* zf!4uKZ^&J}Ro{nk!tDWI(-xzpdDiPwu&+fpshPkL7jX%o`;&IUkP^SH>RfzhE+ZbP zrHy@f{1`^uz;7w``XI7e;a0sS1p&z@Yq%gktUR?mfgFp?Zjv-F$OcX_Vb85;m9uMj zIu&;D`A>nF1S?&~S*jx+G1@l~(IOA1J}EtXG!GCrMgsH$tUg#?!m-|0)!Pe#YtwaF zdZ3ikucMa##E?3u^rkh#j~hTaQ43Jnn%4lQGkfc_1m?4LXY*c=*Dly-@5-mBc z1Xd_pWqFfl@kG!0iNrO=SrSY=Za-%E+ETOwqK^bG;)*UuZ9G*U((}`uoD#$NR%_AN z0#QHLl^J`nK2y+%z+q2DHkgJ)FR?Qzq!H5!YIvdg3<2}}+JKjqI62O2OuF-iCS3ws zM`}~ec8$^}FlC~UX?<9wK+aUTAK)$+t3;6iV zxFCZ!{8|Ywj&B+>0jxN}a|V6j1E+xb!N3-KXGw{o-vkv7jB#USsqDxJ(WJAaj}Bq>CV@0MqRCCj1}rlAWWOto zB7IkSWiPkfLk^Ooa?PKHR@GDcyx)q>d0}Ig8it*g#eO8S&UU!JhZJgtbMhtZcPS z$+<#*zk^R1F-5nZ()IVVUuJyW(lm~B_1{>E*Wct^WC587ZgTBZMx(Vi_^6?DcAQpC z*}-2M*sN1xrT^hz7s-RuMU(<}0lU?DEi}l>m{tua8a+? z^UIfx4aC$_Wq1_R9A0^ECs;+h_%^n7lg?}bH2`0q#1=ke913~u*oJ@$>jE^iH#7G4 zS0Tm0$EOx^TfZoswXux(RgJa38zP4omwu9?f7x8wn^YWR2DE@zEaZ*d5ll9^<=3>} z73|yWXs+Kjtb{vMIqsJ`?Ol<$&cyynQmwwiHDzmjMFw2a&Oud%J&T-#F%_POA&|-b zUE7hF&!6h7Kbt0Ry`5fQzXMt#M-o?U8Pvb`pwafcK!B3}?m-}>|IYA%|B0}M|92QVZwun8 zuwA4~Yq8&$3X2vD|C|iT(r{)ugGbF5oMxoPQ`}!Y9R&QliQ>ct4mgQ89VRwyKJ7xK zHo`*ZuUEZLb~EwkM#v6${QcrzslG&nhcz zY;6xPQvxy21Q0kj@Uj)%kN>|*A>coAb9cA5Vq-?rdAmP;NXg4bxY_KHZId^xp1{hU zpLYFz>|#Gy2q8iKD>AL>bMQ7crU^EBNLrN^VhLSi7gVM>YycW~@q@tcHU8f&L%_Ff zhI1bc)zxtd^;^!djdl(?$H}gZw#OGxquPUc-;Nans`T2iGUlcwx20{o56+SnP1`IC z{Xx;b$_lR9L;RqQRi&jL%QvgLGU+#H3ayQp`GBX(6)U)_+b?&!qumW<1dcm%o^D=715BwX+Wfqa2VVEgaz_`e>E4TZ zpRNZXq3&kRU4LWztHb8>9}h1CH_Nz?1nMrQ_&pgZBu@6uJ5;Otv11Ppur<$Z;C2H0 zyVOndzbB3q+>OtA(yXGnLbjONkIKG|&Y^-FZEep&W4KM7*Lu?N0pNI-eLq91s;X37 zX)8F6_zCgZeqm7&Ha0eNylqo@K@cY^4l3ZjH}$KgrX~axXG)+>&Rej<5B;xw$!SAK zITt{1XVln^rpq7H0@;2%yXQ!vXMq79majxHFg~+8!1j0k>(rh=FAdN9*l(-i>gKf+ zLE=&_1TnlWBVR*l$hOdq6bbOf=cH+^v_nR$4#PFpv61tU^HlGw`W>3jyNN!cCNQGr z;&S>!s#EDKeYe43u0g`CW_YB=Hos zTJuNK>z6Ar$C!+x?GeVoui8zniSMSkMdhDwx>9SX znJ)dVMo~Q}J8sqQS~?rr5BEe3b4;nG=f@=76n93NGq@ zYr*vBrK}OG9sRvvs(%0g_k<@<9jIv=4?flzrEJzEg^B-iY~aVp2S`4y5}xhTgo=$W zO+TAHI_MM=dWNW-WgE;+&yLh0CM1NW84eH>6jaaPW6iU=9qY?&xuFh7GRc8>FJ%MR zxA6wPWp;6o*HXAUBdlV zY@L5}y04bNlq_ohasBC$obQ~vJ)qOIVo53?u3V)lX`aU#ez?BoHLa)6m@kPEOUcB!1DW&IqdxKzL{b1!}SvH8m z?>N)7pKHgBD9~Ng_2BE-K<@LJGnVbxbou<+%#@6j{FlDucaF-(2-hzW{$`*g0P+BU0D#xYZt7%POn3C73`Bihe+DYbGZO*36i-hdA$urnY|d(wL{$kY5FC`I5!t zG=3~yH&bA2Q6{%;WL>gmy@=FPX2h3tqu^A2PLLl1_VhAoSv2PLd=|Irr!){D9`Uwl zD!W>_fuvR-ejm?OZlc)IgwU-ZOj!qd!~ABw5?4A{01Pb_{#ouWDrmn1nrf>PS&68< z;$CWNZ7b@R_~I79a?7__F@~;Jt-CZ|%3)eNH)-jakvXO8u znwhlltQk(p@W-?C;M@G%($I{NrslPeZobNwZIXAq!P?;@0zlqQ?Po?unMQ|DK>Z2t- zG>kdVpGh&OLGnLvsjwBWF0!sgBf=j0>_m=57KY)8*)rQefQp=JE7NW)ljI-my6Niss7CJ0UYPyb(R z(H_P+mXleigl_?|CSUQHY`=Yn6zLCoARGkesn|`UqJhlnk9|$`n5#2#Pi)7pK>{)Q zazETQ6TZzV3pf4n9v#7()NvcFgxZc<(_0d%OxL}2_zl$reXDH+%pFW5gJQ7k7+b6x z_`u1$uXbml#>_5JfXrH`FV`JCYKdrR9Iu4xFSM@C+uu>SKD(tjSPKC+gQmM*taq&8 z9-I=%3GSsei(8PzLtNQh7)3p>y0*2mvh;n_e9n3&K;6ss+bnSu>4vrmh^j4EqdGCc zzbgguWsir7TJ<7n~Wk6qQ*LWZ?NQfq=NfHG7#5(j91HGjA8NhIUNH_HS`SJ`Zv zR4|%8QcDpadQ*f+&6-e0c1lZ;)eb&4#_!(?&EMICSd?v!rBfYk_ds>AXCF&Q+Z*)i zo99ybBgxVQM8hv;-5>xNTh*noSIXqBK{Nu&g!;W?DPZJ3?Q7ftH%EH{jyDEOcIOMHgQx2S?f+6CTzSDH?{-i8&^H0j8-=<{ zLjILAxni5FK;ld*W&weQ;xdf!`MHUhb4W+W;GC0Ip3Pi@4}k=xEj?1lgKXa3 z)4KP~DWz%utBvqg)URgt({f)4!+6(HU# zL03UAa3xfqG!!xqt=87nl}SFyX<3UERZ>!dM@&Ld{YcJ&zRVJ&GIq4lxG1EaRcC!Q zTpJ?$huFrP`wz0)Q`{YxEPr!WkqZv|@ZY$kgxA$M7v_I0EB}^XU5`|G_;~P1+8@+v z1Giy*^)XIZIrEJ!2s_foHT-_8({*e3aCo?|FeI3{*n8E~^dRb6%sq}x?PJosJ2uR( z{?1ei7e=vt+nG@Op+qMm=$+{f>9%FHjC@RkLSbo+NU*WEYBeI3FvAXr_NoBsz`n!m zbwt3H+rkOUEr^g$lA=~sNb8v~Vi=)i;P+<8h4f|3KP^rQ#^qN&616vw00YAAY)fX~ z1K-_}l`y%Ou)e~g5oO&VcvQR`8kU5jtfZjkVl$5LRLW5X zu<794`B3FrrYH~}GRD%?tnbZ6=60H(;2Ny_*^&u%KJZ%NHWeb^t4{ zRXCqc10Y^=L@=glvLAK-pnE;hE7tsGw$7Z;9;Th7^2{^?gbqX%jt zx5Y1=uPQ~JzCbrC08!I5{I-TVeP8|kb#4zsC;xw}Q+ciB=d0lDP!@K-x@%?Xv!r)_ zwYjq9eF-LtAApe5=ECOZr?Ru0P25R08e*w@YjMfWd@-i6o3mu)J>A`Yq_noS91|pf z0h>k8xC8Gk0`@eA2tJu))NfCu$mZ~%$|np**;sLAJtH9JS~BCB^aM{2@empCkquxI zV>m|;%dh#y32ddSJ}52Ir%)l@+KtaGsQcJV4!rE)jqQbAm^p(3JeM9iAhRlq8lKZ@ zSlb@cZ@5<{XTGmJKxOlW$ZEf)H;=8lxr&@=D$5UMNcxtD&PS9FUQA-kiXX5)&Bu^( zqwH+p2Tl2*^LYTkuBd#12I?7%0rnDwZ%l!JZX;1^CYCwfM}5dFg}mKLX)#nJ$U<$e{TK=Q^IGZGRF9=TWg$D@4jV(ZjEMw29 zq@^w49RmEDkNL1RPKk}fuU4InJLAThzfGeZZ*RWQ6HGBlHZdJ!vb#t$7Trc&O&Nfb z|4sO{N4TkbDLRca!rn#K34Mz?HjfiY?={zE-jzD+#*?@{EpIG7z9Ih8>T^=T_-!z1 z$7+vkj?yrE6l%piXPuMHZ#U)U6QjSqbBGT*6uZxDRDDEt{0%u06mH+H5~=Ncrh&G~ zievFWO==#QJwH63Mc%(4y+8YV4N19(mo^k8CJm}AadS^3bFALX)YuUk04rZ#D|u16A%&6c!(BoU zmC)VJMbaZ#qir}}@$hw=s_zqqR8W-}889EPWN=mJz5TtE;I=_6XmlUJA7*Okb=r4ys8>hZQrSFcF6Z31vOOwXC*}N7ACT?1)!ZBJ3fLp&4foCU*)%$KV zYz}wN$gPpV2 zhn&^dNAE1Z^g-`XeSJ`ke!S|;a{a0R`!&Gs?nH`M`lDt`$aUL6Q2yI_t9zH7eQ^~UfxMZ7J`{tEKlr$@ennBFaq zKm4N$5p!xr=r7#t_bz7y{_-Z&gTtK~I?+{oz|MUi1{#=={`9yc&$^+4oV2{|$k_WW z84I|kbN~OC7+lf6=*UQCAuGXM;>Owo?Tvy^s8kxaHh)+T^a}y@KbmVbQXRzfkC=iY zqFw({R{4PcQDFaTVQ7P8C7G)Iqr3icU#&i<{|^4+zAXJkY1dOfNt&D-y!|VQG#er4 ze==YyX#e;y1Pk_$0Q=kUPcEY2A4m4L;omPr!@o}aJ%ov=&DMaPk|TSw#Y4niBSgAlV<{RwTSiS(16bIf! znZ7!2w%Gq*ae9*ZvEBDHtP~^FA=TxbEz>6dY@L6ua^HkE@l6nd599-v0ggnyC}5a* zQS_QYrNFeRg_^BRlCzaHtK1yIlRu(oN!Zz9$iLLUV zYDza3o&n z2`n!pBBmT;TZLf|<1j`$4Y9^NF?x1M6#!WJh2>r>v^d8u=RV7^H+}bzoGq zLfGTfDDUXtBdVjUl)OYNBEo{Z@tw&)i0o`N#gHH=PFR2_ov4oc@lyiX!A0TK&A1Yl znH^Gvc@csRg&=l0bdz{Gg@oAXv&yTlB^kPqYm}nnkQc0K)_VOG2sJp_YqLzSD6#%z zs@ZHlXEJ8Fa#4zLaF7BGJ&&sDV5SswP}dL)v;BesRAL+@Lu;2csZJ`1idC=Ae8uK0 z6 zg@o)O!U8KiCM2Ac?Wv9Iwz%%8SIfzsX<6JH?+4#D5nn_y(v!-#={#WaetywIco8Wg zx#q9PZA#3UQuIB;a^%jfp9%RJpd&OuGo(Y|$9IU+AE1jQnA3y!+XIP0BI65aU~FZ^UGhN?EL8oaHzQ_<1bA+6 zCRk^3Cf)-X;+3B6hJ8o8y%0svVp4Jt4lQe^nB`&Y%!jzQj+85KC{eBmb5H1ILDR5|j;Fp(zHLSd@XP?vHRL^p-;; zOFoYFCRlugkTy!HQptkc-VDV;LxNyXRV1n@ zDCc2Wm(BZ9%0c)ZO=!HcH9TIy^$on$RYw^Nl!(U_kxk_Zc)cZq>Fy~l;)i#GlWNIF zmuw49z1(!ulNJOWk_olA)vZe^2(woqOR$OTZTDF(M@b$?S~%m?rg2#HJVFP`)}mRI zg(zMk7Y@zi^SSbYkt>Q-OxXY~S%LsCs{-lD$63KBlfhw`FPz2E2EwuZoqEDMzo!Ec zD?9_Uj;#k02)fCDt4(Z0OeM*cNA$P?iv-I7varoDjb%| zaDBQQk%Na63piU?tT!C&TZ?6jYt`FUP#6n?@bYQR8x!5k(ho#V(oz0&g#X#g065Kp z1i?eM8lWi_Q4e?;;7DCK=x5hC#|^N1462!$6v9EgfVCfDv;JZJz0nvh0CZUuaMmhM zxA)!HPq z6<{~O@1fncWC2e-ZjJ`*<)Q}nLWcmoP;p;qMpS3~%Fs(<_Im)BK}`rO(27X!de!$G zw!ejszyq`(7}V2i%@9mN;#i#CL&a~@hK`ORxX#V1R>MS7UJ^k>ulyYSwQWhXj$FD+ z-hpaa>OJapWi&wE=ZPLtj;Z+dJ9#aG*;}|t7`dg?JM)!m)&+icBznEz9z^)qX9ZDb z9=RQt8Ik-qxt!{8ZTP~fKMk_Rp$qB{i1Q$YpvSR^{SN4k>c+r8i80XAkm9vZzi>3HdaZ9J$0i04vlrNrgAtCp*9Vv5#_@a(m4-mjk{3AK?4zeY->TV zzD}e`!Q|${QO}=xzz5>#SIrUU_m-KKCk0P12z}x{$8{waU5|#4-n`@oJjxoK$iFZB)&!$c7VW9Z*-*Z%`Q{SUhR-}vb- zzWv+KQCePJT54l$ZB6B9XK!C#QStRZg!iA!f8j|4PD2j^6jO*Oq0utX#8M3=DsNYc z-^oSxCdo-GvqZ2Va=1Q}lL5I^5U}Ezc$z9=HtX87h8wSWe)$`2C7pvAY0gR^;-A#k z@c**J8mj=N8?YF1LC0=~zb9hSc}<4|)LyH2^+LH#shOFpa8Vu0%!EM|^`f3s$M{C#uS*5|ST zTXN;HJq#tb)8P$4e*Uq)gBouJ@!p%N7~R;JD0Z4_;ACb-oqkUS6m*<#3Y&xO?e1P4 zE#>Cq1e~nOR@mFv2)k~=5#c=zNqoe{g%v|W?jntC?L`%h?Zus6%Q_n>n5zo8w&0{a zImTk{XPZNKi&$YA%}1-f(Pw98Hi&1HhJ6Pd%{8jK-;CzV6su*od|Z*vL-+st?n{)m8X6i3fj|;STun?4 zOAA^GZWmjoI(Ab#{y)y%GAxcIZ2vqlk^lh$!QB%y!{8b$1b6oV26y-14#5Yv;1=8= zz~BQUxD!0MyZxJ-ocG;p_rvbBeBc^-n(pfA?y6ti&s|SRzG_J%;7bLBvFz+Q)$;m! zPHdyNo-d$`wy~p4Qj4j^`|On*dgrzK%{1YJ{;^mfpikAkfOkrIl^^fx`2lrp%6!Um z;GM-+5SE>0`At}8s4vKzi;5H+gibmE`g0Ss2<*+x&8@8V+WnpzKp>GsTz2hE?OEr0 z^C;RlL1;6us;bH%)pMd4;}V9OrA7*ifyIt z5CkQ@7w^BeQXrTQh%0s` zuAoD)wVFk0C|IEa09>IWOOMDUO%Rwe$Qz1pd=Xrgf5{jYkdr%M^YA=hfT7Y_AARQ% z7&U9H7t>>6mJ0@a2<+wM^%nw;8YlL;Yxio0(kEo1SXJ52iTI*-%{{_Mx62Q-PfaE5 zs)8%&D%nSwfWDgmpLewzb@aBc%AHz>*VD3gLO7GU;c*s(4O(BLq7gSKUt%=1VQfTJ z^*Bm`(0x4+jh=^$KSDyJWYpeF3GSG(VlJ|fz-&CBfptZFc`kcQVH2;>2{nkL&PgyX zYk;|xwXm#$?L-~_$6BAY6u!zEI=by5nLSg^$}@!<#9AzA<8@h6>s{%~jLYSIbZ?r? z72SSMH;Lm~e;-&J{cKFxPNaZW*|(_?zSG_iYpq2Rw~J^D0t5EjKkar6!X28XCwUCMG7F48$8g zS|MmzWJ&l_ow6+hNt={sXaEu!edn8HrCa`Hg4X`FN27Bl$? zZP#k45=CZZRMr;~#Wo?JVsRdVs*jOuTNeCg1mMOd2KuMtj?(*5X(}2z#8xI%3vvxCAOE&Gsn#hM>W6vgLe1@*H^D?XeDP^2t&{hJd)wXbhwC)ceHSEQCK4 zXnP|h4bB36z~6S5Sy(Xf5xuV-LK2r)zwuHsEq|tQCxIlZjYObiW^_w zQ7$e(S*Z^qh7z4k*yXKvz^J1-9JIhykSgaYJTUTEN%#SNRT5d2>+6JXWoBiY6Hb6t zv0;aq%%JvZIB~>u^Kc-3LMuM~y;9;WXni?G5}ya>D?>)T_mZN#_3iqgfY(0HdGpmY zGxPma{-oD$#o4x_UCMJl&!wNL=6fk>?B1@By-Sptissr==e9O$RV`nxnbgZLd^{Rf zsIulO)LBIa)>MWhJSWM7r>M8%4tq8X^sB%-eQ&%km04Ur#5+ting&k#8Vfd+H73lE z8tId2?p9j(Vp7n}Br-M-LcfN#l2 zThKCsV|CuEDk|pSHD+dhhJarrzq56LOXZwz=7H0Q(@rqRU#%oE1DSB&YT#iitO&{-qw;kTDqZ@c1g{5Zj zsa-ImW0x$v(X=h{;jq};;TU>5%6e?a;k*pJ8aVzzr{Q;0{OeVELS8+JthKI0(&?&2 zwTkvdO>6r%H1GQIV^9a zVqvhF#2#C+Ac?rqVU6!dPX&MYlS7dcGN+A_4FD2+Ga=PRC7MJ1%oNoR7Lp3A*F9Y8 z{9}E0cUN_nfi`5CvrY2d)0|L=2-&;7o=4KUPJ&tkqvJ(}ijei}Hy3slp_9@fNyQ?r zZ%qutgVj5YjDwS;qH^}!w$ZmY=BjLm=8M+_USpFai|?b!O3TQEMn&-uVcEZ>qod%x z`Jgs+ceLe(AEWQD6#rIVV~~5`&B7NKRmL9>w5#(uli9N{-$&QSPEJe*;+HGp1VI5PzuRcWEx~6KQis zb}EU5rIqsj{K1+F47^rlNZ#d26#rE)(|b2aGDbsr`Tbl2e{w=WQQ14@d@*7(}?JJUKHX(bi^p{t}9D?1E`;qmpO+(b&PsV6p)P ze=x&8UPnM_4%el`y=x&AcCwsTs}p7!qP5n<@*cLtG(*Z+ZFQTB8mV%vZ1`*_*rr3TBG+9sc3!$eN&S9IG%iRM|39i|4?< zLe2l2Pv6BCtIE#OUR6Y>TciBD(Y7Cwr_SEP2A2zSCrT*r^9Lcql!fn=Q^c~fh1b8{A8d8uPK%JBEnHiXX>(M7kk*&>GM($@whl4S!A)DP zH;}+Mu%N?o9^cS*--!q!^`hdXt8K_34S(hb18ps-gw}Q(W)GR*m^23`^>R{CeQjx( zrw(o?q-tUB%BOHsJc;=jj1g>)ALX}+65?g``0QO~p`hf){_ z2(%duBs_ce%ye_*17g>>iSQWWc6452bP?~*q}}$*`TX9aF{P)mQc+ru0S_K7k6x!x zjs0-VRUcM_5YN#`sI>AXxkW`p;^N~^&(EW1L3P!RanwO^qGgQ8?i`jq=8vrJ_r`nn zUcN*&G1(-rn+*s{fWz|-+BErEJUyO#fCAUw0n}5#ifGzThTqAvmv zeyymm{Y>whGsAcBr z8CDOtNT;!_9h;e%2?=vG*7dD(yPXsq=l%@LyClwS8fr-$dcOO`8NL6f&kx_jH!RXb zi~KBn$fFiB7f!|5gAwC+<6fkd>L1O5^Mt`TqKxYvmmZLV-p&oenyA<{xpi^2o*g^c zJM7$^z;aiRNuR-8n0E`X^k~r8CC_CUDh8PMWr#ZAtstV7u)Ofv3JZk>9W-!#IhVh2wr@mF#p&)7VD4pM}W^e9eFm3H!bh$1wGi+DOpF^_jy6L*6zV|^ZN zSU!PR@y_Ek-knM_OX+gC7tO8+EbO&@`+76Bi(#)Of*2DVbUky`$yG>bYFI>lwz-o5 zGC-o1NnyWrv3(YwGx4}yAD3!fVDZAA&+_Vove5KIHLn--TbSB{M2+&8U-_W!XBvXa z(%*As<|eF6vSTZ`?q#5=;WBMQG0`OU0h8)+%d_Y%`5!ctoWVciMJE#_(;6uqFC0wz z?WnRKY1VuO&tK&Uyy_AtZzMX5{D?^k1V?{Ax;Zf|+422`I@(HbUl zRG*>w!DbtohurMgZNF{KRn7PZCtY&Vmj|~K1ZsbQF?%17UoTweDJxA5rJc{55%X{b z;EowdnsZSzfz+vsO2;Z0q;uui8*neq7_D<>=*%qlD7VCP^7s{6D0w0$V=mow`nm9D zB+_<^j4pU5XM6}GG=Zc-_Bz_ksZ1!*iI^Nbw2{+?{Z&HAW%Oaxi;5}ER| zHsHG65lY%SKnjE|zAN|H$&GA%e`nUNlhdDjUe05!O1qx0*ZMWI@rUmMW3h@w>Ty+R zae_ry@l^b1-Pw=A&%aaquO{>nAVqFz@&OCQfVWY}26xqu{Z2~O)AgsGg{bQcv#!Rg z&J#WUeWZjEm#uxA8iX^Z!Dcd|tKns|P(0h>)NfH#tx2Hri~LW0Y`xfec9%$)aTU-M z*rYuF#)y53%^+X4w{}_9;m9Ro_q#C*M~MW8J+9e9skk3!9h%RZ<0c9tVLoq#O2pyv zsKzUfMca`$RvhQtI!2SbC+Ga?*G~9j3yhrVMO%^ZVE?be*TZjx@|Ge%LZro1| zmD#zm1wv&vuCE8nKE5)G;S+V|>(r}hW_!Qwt4nd}8Sa&dN@$|kzO5I84@=vjBiWJB zJ*ho3EEvqYS83FBE4%xvHrE1VcTQDN z-o*+I(kuuu?7x8{)MsKnh+tU-8kk_8O08$#{C0&9W+ki4d}~C3V7Sz~&U)eRlro4p zTo#$nO&`6kEo?c`rr^AWJO#{$Mo*HxX!#A5x;ZhcxREUz$HXBC)qH32_(LbrMGYmi zJ=${$N`db{k}-raFxS!viOy@eEvYJ-I&S+59LFyX10MTQN`Z&)Z;|~!w#f1gFycW& z@Eua33OY`ERfwg9*T!CTLYk>%)5!4NC$1KzM!VgmE7i%Tw8q$)7+_Rc4akI5#nAx2 zaj?1-i_ZqLr66KPJ2c_4N#2q|+AD*nFgVHYo%F0=poSUIJHN1ZVMF>R{C~?DMv-m?Q{OJR$U9%c~55~7b z#ZhNTKVDpQf9L)4tfWi`qKT2M+j^;XXMMGZDt)x=fyMq&)iu}o!tm5W)>Io?y~Rds zL}UL)cBtETpq~z;MFnYkAM?-DL(l*8^POkGqYH*Sj=L`L(yS1bA%6K9d+Ykyj~SvQ z=_qrx3`Yl{;{8?@yN^r(5OaYjMzd!;g>(ae0C33z1VJ&t1;6bVJIn<$$e;jc0H=6B zF9;IIFH{c$9E`91(hsH&AdEqC_g`k|c;GX!6c`Wr3tzGq1Xw^e@2N64?>~YVz>op< zz)ob)hi`m=^kjcH8TkBv+lT}b26n~>p7zn4Y1-PB8BeDpbTE~6+$=1L*(zGz>d!9f z$BM@eh+lh_YefAIGf>n&N2dbv8|DRGTy$n-k*|7Q3!#&|2nz`b4dY3T!*gE!1iAXT z8k3!xTEhAn_wSia;32@$*_`j++f2&MR2jLe%Dv9`0Q%%$CWT)C>i(a88Wgirml z&%w%*tcE8G;-vW-lTawpBNw2;aslO6_EJhLiey~DB*}h6Lq_+To{vhT)_^G2JG$M3 zBh6w!5AWZgj)DkD@EBe>E1esipEZvkkG5u~k1#1u?(^_WxDv_E&o?;}&ITRH5%%i~ zM!rlnv2gAG_>3S(TITCBOROY{ePSGr7hy|b+kK*@?qf&x)XJ}ga0 z);MP_pU@g%*KBU~*~ONoFDMF(R-2AS;i_`BHI+1Hkl1nP4?)AdSEtcf9OD0j8()OUhEw!1=G5{B*Ca#&BEX?{?jjIrbX7 zs%?Im{QRJ@`N88Z;wC$}dQ2n&2GAnxb4ZH8vf=|Ys{5(FjQd#6n#Xy+L<09n8I>{M z&9HR#O#)J@JPKtDo_2D4z$zC$g-}}}#T@?xbu?l#nHdM(IG*v3&|O_)w|=*OK#|ai zAjAN2no(a7v4tSQ($dmE0s-%TjuzO);_P*j6%2>hb1{o9T%zlHJBqC)-k%=|Fzq5o zdI_-Zxv4Gpc*&C*t*VfUhd7HMkdrrfuX%e>0UQ+`Da8awIox;>q3f8n`fp@$ z|KobHYW;has;)w9J4?kY(YPe=X2eD*hv1`!@3ikx4W&XI$2g22x>t=LK0-4EMLz8r zq!t%MZ>3ifT>xsvqZ^y<3Q>=M=H>XaYxQO=xX6QF4OnQrjDe-?5R1jzvev>r+QKla z2&|Y+Iih$uo1Aht8fuyr zW`BD-Zq}mMib-HC8!!YnlwL2F&>9y{p`uNx?XAmf$|6#`Mu*MlLnc{{2kV?1&dj4p z^k0MMo{69}L5Zpe%mJlmDMe3>;-Gb2Ho|`wr8V&v+HmXDhouq|cj@NGSJmaWb)ZS3cCf?pr zfR_vs4TKn)?_*OSBk zqPXxLQ66Cgi|0}{HN4-yIW&+99Sd9dm@bqcKrg$TZsO5^pYu zaH4|p%U+C@cR6ntRC$J|n^SXLsbf^xCTLuvZ6yRx|D=Y3R?HtwcjKFL)#KBuS686H zEo2azo0~wklYu@N9yiv@bayA2%kq>w4}Hq{>9(7}&c!C4u7YN?g)bNTfnS4^t zp_Romk1`2I0;QI8;q z@8ZJAM*rI0$w|Xe`Srbyxaj5KQDt-Gh=EaVLoThoRU;M8na$T{pks>)q;|W?Bvr0t z0jD>pr9x~N@sDPK#3+ZsMWDaJD5S_wZTk@Wf?o%aTrS1- z!_9#Pu~tb^QqtZ1TCGi+iG?LbC-L>0HzL(C$Ah%=W^XH6u7y-&CidnRyu6x@Q6!Ux z&yuX@7kf%XrET<(465DkWLqO51(U$`-;r)@vs_`^_O^-@{Nb<@GL`c~0@so3Z|EGb0NQtVGj~f0^&I7K{Py$L@ zu&csrKuW}T3Q!F|J^y0LgUa)F}=4>|5*?YeDgFGgo6s!P9S*SwtP%f@c(E;U7ACE*CfU>CtxX135TRUNxO6jbelFI19G07K{bbt6w`}0Yn%hv0?l%pg} ztk~)|8tbXm38Nc>?#eh6s!7n#V&miE`GzZ_Z8?q1t}0VMJ&I&q6lG0Sv$xOFh_`to z^YB0KB9#;ePAi=x#7@>=vXso`MPYC{7Ezhd%u8kQWBKOEkYe&A3!=hHjcOKgI!;MPjQx!uiE?WfUVrCqS=;+_Ja)PBcmS$Y!i)}v; zj@LX2I_8|_5nkX7Kc_5fKD`yHMP)8dJ|I!n?Bk9Kv=m3MkgVhec{L8+Ml6pMRggnF zbRQcr9qTFW94?2xrdrouVFMEPUiOa{M|zY8^A?wsD7`ZiOnSJEWotA(dsq6a$!gXG zmG$$JBZ`4HNmlZFQ!|y1_yn4A3d*vcl|ENS+B1rmc1oHNF#_*NQrnrHv8DOv8Slfv z&Sg8!;~}XOli5SHJdP2QIfu*f@8+xy{YLT4ra94yCu&K?iC_KFkQFDiepH0vY8*Wd zCJuhvX8U3}A(~AUMJuoIdBmA?j|?0Ub=AP^UCaRG=`vt&+ge=o*txfyt2G$NTK1nS z3QS17n4eUdVR zwrKyiZek1SuG)qzuVc-&yg9Xz|mvf2_ej5V0YOXYH+fO6F|pL8wmXdc#|_dgTIzYHoaCoZ~kvHV>T{MF!e zPdJIP{*5l1pX8DnwTjkvyjvvQqIpdHnsuGgtxbm2*?H$P6eM#ILGafNuMxc4b zM;u(y!Q*kG>=7(_dEigGK9E?>c?5)lHRa_^qlGA=^YdvL;ay#$m7?-9wdsB=>scZM zI0dX>yx(H;Ci1$+k`reVMhcn38HY;;2WHm0E#@|h?4>1Z6E}m$HaV6U%f&SEa#TFU zP>vey3kQBgJ`4at?&|VnN#9( znq&BvU%uQ;{GidwO$Dvd-KlJxl@s)x5tc9~+2$xT^c zQ2F{eS2B?}shjeS#r)bymT@g!b=_`gYKrr+JZGeTfc`?4?n_wqVBbx7|A(Ztwu1wP z*`&q~=9+tA{dtXQniIA0#q|KNoG>Rj>nkdn|0v|dmqFci`}$;~H5NBVvL^6PcU0C) zvRTPyiNp2%=wOIzZH?jiD=wB%FXqiD>-yS#fKPq9aVrg^;|Mze~TCasC-9sY_az(M16JwPt}tL&d|vV2v4rTmo1WsdU%0LFD-=nH0KRx&vq*+Doh$* zSEmJE8Xix#v_BsoJG%0tt?e1#>DzR86QxhUoE7lF#s%qhK0DjC33n25T!6*#QI^q0 z4oh_lUa^CuJboVBg4p_%EH9+>VuAW^UtdeUo)>Aa-$ST~oZ@0OZE3xy&=wwXc$#;J zXGfySFO%OQH+^A}CZvY)J8pPG9O}56%X+t|KLGSL*sAhr zyF+KqV!0u}XGtOW4?vX(dI-J=A|7OMCFJSlTw; zyWYKi6v7cBDG)+`XXt$*|3A9Z3%ExtjP%lT8MiH-cWu^4puWx7dMu+j8EI?wIRp~* zPcy)sf7mfL4n`~rfp?K0qoaq3n??*azs87p@js`O)`74`z&XDh+uFFyjIdFAYt5{+ zo@LG%7U!Rj4YOL#oUC+V5A8G2mzx0XY-h0<5cm1QW4YbRx!pHioq%iQ$jq2_TjwSR zMAQCM+)EimUNjzdzCcJg|4|0>*PEU8j%Q)#Ch(mV!tYO|UJznsu*{rl)tmIC8fO?Y z00DUcUpTKt^M6$p@dgwW6vRw41~?bz=jWaG7d)5YA%_5xge<+qTamMK7nyl=p9xRn zadvUD(gnh%ln|942nHSrCokMTs^df5vr|JmAl}~I-D}Ow&3AWqwlvT%z3?1~g4 ztFurU>EW_Jo&h~U1SSWUo+ zcq^sKYgG#t+UpepWMpJ-IlopHEdcWF<{J^g5-E703GDbiXq1l2l7VZSGp9rX++`F$ zC#XQ3YPTw_km$u3P}=COU=kw932JU*&@c{ zshNi)Z%7xzE;@)!?{}Zam$$g{Q>;0P$8W~>0zs{B4ch_2Ka#+sPJMAW~ zh#CRi*f36tOihu9PVU=LJPr%u!V>9Ei*%p?i@fVbX~?>`m59-2*dOsXnG^0&S^o>Y zit=vn`p)~d&PTD8Zmv`BjYEVqrW5T6)nshqu7r3#B z?GvyP`(TiK_19;{J=Fikfvh3Hm!l^BWykrNLnO?-=x7Tm3HnDAT>tZZVMs$`URfrY03{{kA5+Qu zm9SMk7feihPlJEkN`qga{br5C8AXM~g{5`uYgwuB%K6Z`5mplcUtiO!~@c#U*n*UE5|6U)kk_VXB)0I}@{OMC>XM1n=&CuT8^;clx ze;y+D?SIAk4DJoJ_VvM(L?+km_(a{yd2jy1AHwKCVqNUcCw>+GwO3^8DOPmi<}e7moi$!Y-FsZI*2S9- z6cM&R*c<)~jWLdM6KW$zR=-pRvx#0Wil4eU4#)It+&Y=r=zS2DocuD&q*YBt!yj-z zzqPr$LTIBI4@9!Bk_`Lm_Dh;643f;8>7pao*y+oOa9)EqrZ;@@VhSoH#6ql(hhp=2gnH#2sUe`cWBXUI%`9r~m?Uh}HJ*0fA=PX>+gT zT2%@afwlYm=Zl`ZA=TlCiLzq@DTL)bZU&4?68qBt0ITC2fDB5?TxL^=h69&c`;imD z5=|!+QWv!@vH*r6{)v&XgWUa$@`^i2+S=N}bA9sU$vbLJP8fgs&o&fXrnnC!6HGeI zu!Q-!Im0BSV7gr(E7#W=GcH=%o<2Hd6_o|g^LfD8ji>PNrnwj9=ZoD*I`0C)Km-^R z8y49eSnfrBP`Y@<=;p8zc20_X>U^Y)PbrDWo8$6@-;9mg8_FxO)4zb{Fu{n&wSc z+tiGgqH)0ctFiywt;$3N1%-6ib^JzpFw7Y9FNXrG`n{h z+&iaScf=eiHlGc47%#ljk(=@AcZKBjKE+mVKYUp&kz1gy69D@&DiH5f%0xAls~T#~ z3ZIta$-c1@qdW06TvgQ&b)_0rq%M@=f2#AVrGVfllDEZk-0SkU(prs1A*3c}{pvtQ zn*L=JK1jF4?X+p}c2C=R{6Amog^moB*Cm>vAzfAkDo%9h!0M;(MTKF>h{fnYA0=;Ny#joFrm` z?u3AD*vWsLW5K2KHB%HDsLtV>T6rvxXn%UA!lM)HYeZ5{8gxH>86PZ-k7|Lf6Giy6BQh# zG~`h%Bo(6mx}p0Pb1gy*J&GDMIXS7AX=7=r4NTcEHN|fzDameawG~;0nd$;@?(M|3 z8zW#U+84N#{twm~#PEv|mfZKC3<2+S%yA77qYn=y4}zj-k(fhdxTBleGMV4E)Rg2k z6t-{_og9&ZH_EwN^wt_waWmYn;upj=9ByYz)-&3?+$K8l??rx;3_c%FSGX)s&Kxfo zyZo*@L>7|N&jG2Xf};FmB(i>h%7`aSX(|S1AeCJO6h#puPW*VmfteK6u~_exmKK}< zNyr3ERZ?4QY-~vS=Hm5!n=aq`M}JUr2W=3io_7M?%yZd$7DqGuJNC4+W%`xs`Fe&o zm%+kT!X(c5pjXAY>aZi<`=&Kr((;xK0f{?PVZYf_U+>WlOxT;3q&1m_-6HrI0QUhe6uAmP- zJo)5t=(1o09cZ-domvuvZcM9k6SW#_k8oaaHO~K%tg52$llV>5zeT3`yx@KB8CCWky|=3= zdHOv^uliX`1Ou7PWe1XmK!kowhK68)DcVK1EMJge+_zfu2$(WEW0?k}H4q?oNlvA2 zFx*6DQY6kiTO}o}iOv^9tjHh$4{;U;6c9&~f~%UE>i*dDimm*!S;lyNRo4x8-d``$ zrW*MZlYoq&&?42bH2gO$T@AK!Cm5ig$AyadCVA?wtNI%pHWfmFlotkz$rXFF^9<0qy{O%%+G1WkVEF&<@ed6S_Jb0wKgkLV%s@SV0`^}} zhC$~wIJG3lCfqDh^DvgWrmGLC&O8Mue<_A_Gq@qQ?7(m<@TOpLs-`gPimv6(BR9UN zvQ1BK!Uvp0iJ3FWLcOBK4M=w67!pI(5|?L^bu{l&Khx4qE+WgzW8?uFiSTQBROi9b8^HxV<_-6*>;^d$LcQz$8#vQp>U!C!OKu zHuSGh8yLZ&?kf6my_N?0QJ*#hzxl;~z;?q0K||*IMa9aoR@&m`wD_TJ@x%353ja2j zjS8d1J!`JzY)zgt?FtSI6WqRM$8r8G81D+@!MpKrQ=d+U!1~CqJ7w!K2q}JZ8K17z zX8H_iKVj5-uF*FeCtx~#C4QVh=m*$;koy21yLjEx!hdCAv*jdc=6D+*9wP^gx6w)Y z+PH2R$6$?X# zk9+K}bd30VN?vHjiw6{^+8wD`m7M`Yo4BMW$?w35O)9?J6lI_Lp{Rj0S}LSZ3{k%S zwVGIbKmZX&)!YVMi=#{Xsb7^oX@=$^9z0Zbt>$kT1k8M>|opZG}WmFx35BE#yMM}d0u?Pocm|1~-V@$G) zZ2ocx502jQuPN;$8M-qJ4$vb8LLS)oXKEbEr-67CeKAu3{_GeUQ&b-?XA<*07k`BQ z)1KlN$>mvpe(vQqvl!dD$er7`f46tGw{LuNndZFL@_0IC0?xp1fWx*Xgm6RHja#*o z>B-Et(=PK*$~fTt9msvAU9Z@Qx8+%C8LB+U3N1YkWk!5*Z<9ZqW zeNhCZ5C$_*Tpaw>IWDswHrHEyquh=Kw&>Lsy^V$M(@x_uqjWXe#kgptAhoLNulda~ z9Z-k$5~~E0u&AKKCLlVHqCW8t26_Cm1$%bTY*(I%G2ee>FQi@vO-EGi*UnFms5S#D z6A&lKv3NJ9oX@`2bY@$}6?MgL6=IrFfUfVh(-2*!W-4lu^MBpzM1nH*)Av998w4y}GdO@Q*e)WCSoF8byZ zPt5vL=T%RFdBJ6J{3n@hL`O?_!W8=Ckv`N?2)F9FxRV0c3Rk=ilR51cpo}ddIcP_uFW!WcpK>tV0jh z?zv3A*^@)XIlW*x9d`M}9Vpi3r zh6J7Omkp^HkMrCU6MYJgPlN?&-DFUS-cT6E7~JHt()zPmmX~6Hdsy8wUR@rDBG`W+ z6PYi5Gh`x-wxP?%S98Tv>UzOodjc|lI!QShPVZO!PGtev-;>xAaU|{N%np(j{mKRm z@!R!$)(qG)6+aC*mCV2`p8sal|IB4EcgBj_Hv)~282=>m2{|){|YjZ$SQV40hO*> zeggGypj!X(1;bS9YNXmMwwMwWrmE(iwpLWOjA@mn%jf{wCEJj4hD=yfVz3^=i5dhP zPq#W-8CE3TeL+EjI7OH5;?f8qJ|0wL04Ceckq#xSs)6gy0=UJ>W_`$Xi>(;M3AIHp zQcMYH_4kLg7a+nth5Hb7kAL^P?dp+0Toq9jls&ckl*a=aa28QQVvU6}uu8!_mf@u( zB^t9G9hhHHzXRtwqwZiH?7@ zp^pMuzF&aq9`wo`F9)+qD)U}|-~*7Z^%IjA>UC)UK@g1XdaD36B=eV)A1oJ_X;TQ% zn$6NJff&mq&fK8|9f$cG_Gc}rIU8eDDg8XQK*#ole(#YYB68kxQ@dzragU869j>$- z&BN0ACmo6xJgv>${XtJjB?g!$_>me)%$^yd&a7e|-v0$;^1TK~Ue-={hXp)Q3`4O2 z;jy9!H`nYuLq6~sZe3@b5lck8H}`u#?R~eGG*87pl|7|($UN?hiAnQ5~Csh?+ev(3*QbBhUQcEmCS4`cLlVJp07Bgz= zoT7wLAIP9>3>Qi?1#ZvR%M`N|B zE*cuM?iP>)Wzq=-Wb;X9%)ART^lPvQ5$O8PgTe5I(ekF}d4;*N(XicrjEI>S$lD_Mp?zcI zSRFY8-dqR5qYZ{EueSd|ZJ_%u!KaWiQobkD|Ea^az(JXX4Fpz@bU>#4N-UNfB8e(7G(+0f7!Hb) zhlPf4Xr%TF_3ccb*8Kh=DIwM^cKEjHsrR$;Q)QCcGaPeBf|LxQKHULmm<=MsuBo4V2K34aC!(bRmrRsEq;k z_$ z_rC029zRt!xcO?nCRLUQ@k&CJc!P|nM0;irjyUW`LRQRc(UTW5nvyXW2vN5t@ht#m z@caqcRDFSAG0)L4n$yvh3B>AL9V?c%xstE;mM;EWR2{w(Uaj%8*1gyav%O!#eGd3| zk77mb+@#Y#7t%mO3Nbj|8{}4~5+`Os`%Epds?ZSM4prTArcEusG@>DX2$Idk0h^Yl z0$`5XB{zR*gLO7I>C8YzqSZ6MfQh;7YAiR#T-jMAm-%`DchO~Iq!?Q}V0Zr3PZ&Lv z$0{JL5%u86JC^5MQCsgXAp3^HurRF_hK^U~N;s2Lv?gcVoeRLNJ4%+$Y_Ebtk}&0Q zCH~R5gQ0Z={(Vl8so~9Tr~0*n*G%3vzh<^trX!IK?9SFViOtme3NNY{1_)6 zFYNfcl7>byFOtJpaXBO{EzJRIv)tWW=~n=*&VdW>3JLmnO^~3U13n?ux%{w)p&^wK z1o{DCHKAi)L$lHu3fB#er@d*u9Qv8J&Mk+F3g;E1rloB=ozT26W-1Wnh`#fjAQdND z=aSSINMzn%rG8P>Er?LEt^9?EhLL;kQO=X`IRfVSD${XlReNTO{?N-@wZj1H-ODBP zYcrF#LFF!qM5Pi@=N#H=Ap44%+D9*NB}1aKbK#8fpI)XvEJWU zD?bpIALN8>=`x1DyDO>JeX}_-Vta z1}8rL^N)72LK_Wht24<8`!4?L=c^`L@fgIdAzD&<^{hfkWb40+U zq{3*Ro>2#gVIc^OmJZg{T|t*wxix_W_nze~Vz$0>ws~~6aloD9Y$nMW^PI8CV+U6q zWL+`O4=^CiJf#VjQHRA^#9U}nhGJ1}KvG9N*^@G=iPM%wKlH=ar<0c?0=J3pCmM0V z;>2+DiDf%&iga6Wr%ruBiOR}eIt z5te$D?@9*My9N_nzB4g>Zw8v_+Xqwi&f@Ix#|5WxB zP*HX5zcwmLhe)ZklmpV;A_5}aFm!iGDM-U0J#=?7bSf|mF@SV~5<_=0#695qe*f>k z)?Ih4J8QWP&N*}TIeS0*iQiN3Q*};OJk!TL6d^nkU-(wr`LhYKBjN^|Ya8p!#e!Gg zUegblXooO(kQ?q7CSg28hIcD$&46|``vYRi@Ha>9=KZvK=mWdv$6zd$!9f=3T^b8P zB8;*hg|f&41p`LKB5U!u;j)rUHfpOA=u^Y7XJP1f8Pb^(IAE+tk0Mmbg;Z@t0g39< zbBW_1fjYZ9qqo`Dv6-QhFA_v*_6Nx~BlBmxO2IN)t2LHjFL!u%zQctaHYmz>f^v)- z*p>VejS_F#KQP5Z+Mnn>CX+r7l|>#|?MWcF;GqGxv4w3TV#gR*)EDw)PVI1D#*RVV z&+tJ#dekrUA#+kkbG}d$A&`aEQ2dv?R{tWBk*z1Hzy(13{nPE)~_NNcD#_>mzsbp2R;+&=EI68iP4)Cn&)z@6lzsynA*t5JU{6(5u4ny+xa)(LcfAl(9Bm z!Yb9LI;%O;inJh1rpel(1v2j5UD78x-(r%ask`6x8g>;+4_C+{n?;lAGPZhz-FE%> z&WimkHre)6e)k}Xg48vDR#u6RClraJQz#HTOtpa%KUm)@-fr6IL2qoeXpy(`FZ^P1 z5w}kDOe71MD7?c?Jw4GpMmB(TO(@{GtmBCvPo6eZAg%ud8XBcE?e#;x10mu;yLto^ zG0>${Vg_2Vs*7I^M}m7+k(7^Ji>XyEdtZa)WLxZaekoXGsxZ9Mn9?psr!Plg7$t7S zS-%qWQfoG|qOFMwKZ)mJEH=Of#ga^g!8g zg}}QEpqkqcbpTUZK{zn1{_lCAW;$aJF>S#p-J`JIkFVuDAV42;gPZM+ zW~%u#&w{y*7K^Fy-=o4^_PzMP>m?oM8T71eb}pPvcyhmn?3Pj+!rkC}g^qljAeqK{ zw+lnU)v<*Ul6=AX=mE(>=v3yzP(h&vurjCMiVAd2c9t;Ll41%B!6p{@dFZJCrU>$1|j=QNEw4>f$-5>Yx83FzHPL zd2lR8@nIW}?^xddt5Mzq5K5s1Rp+_1yZ=k9rbf(G#EqSkH1w1&Zr~yOzNnFN!{!BG zVPqeArlZSa`^HCIJR)bj5#{gY<=%bmpq{9|bDd!Z2=x>Yc(k^tj-;K;5y)z?Od1X} zyA6_m+}JJh#}=yGjdfBc9;6-(g}(vL1@q@zfxXqCk!E$rDiJwt@eJ$>qD~ozQopPBfOp?UwRI)P}T&O}>1T?dLQsxmpZG zR?Snx1K7UzO9$9JRyCycB@}T^p<$JPwxK%2nZb7F8+0j!4MbYgB{2IS0hoDfy`WN@ z(z06Drp)_#9|<2A**&q~$`xua(#|rY8mwG4IYDSq8OM{nyf)|EG69P@@KlCs+g{tk zM&?-H8Pj-id8W|edj(-!cD@$~DdYq9uh6^SpiTW9Z+)T5+-4J$K~2<<*4b9DlJU|V zh<^9N3uA*PFN}4MBL?5{T_5Yo!_{Pt|I= zMmFr+r91)@Ynt(uBz(ps%ycVg0{zxJ9?rdl4O$OYJ0yB*Ed7@$&4VN~( z%4o3JcqBL!3~4XY#9ypx&bzd96oZVSu^<_(>S7Y` z)Q=Ai@}KXd3p>~wjAaxBbGdBJwFvEv7ALBfXfeDl{_tK-!0X)A%Pw1i{6V6~jo!}l zc;G%xpj$?}*4St+GY3aiUES)RHjF2|DUjxq=t|wxme@}!q)saiKBy?V1w4HG;NW1v ztMmOLQe&rQmJgm@0Z`@p*TIw?)S+izgdHk#$Ly;Wa%ZhCaK6Nn5A zU0XBP_@?yn#$X?_N(_~?As_8`A!40)to)L3Hh zr}b*p`xG>hZa}Bv=k+FN^TVpC{sQ}7gX$|Z_Zw6|R$vmC0@Ag0d}{)48 z`s7EC9`QMU(`|7sPA`v0bDL}S6h#uV7_Zm2Xq4}TC_a+(z0_3S#D75U;^g8kTEG2& zy*VRkeH9#m7#kUh0b)>NM;k924wTXJf?6#gI=bAfENU*UI9s6oRBRqEBV$M)4~RqN zb*xeiuE_J^@{27~GKASL(HWVE8v5nd?7~tOch8=qFiuuWwr0ABM!B8P=rwQqw*r~Xi_*Cq{ly>x4U(xgQLH{j%F$Jyn`Ty*(l^>F^IhD-ZahZs3U&vueJ1{ zq*b*}3iy41NK?OV*%!V+T?9q(4JMLh_h!09`XgPvAwrBpXZsQtkdD|A3vIYeoc4x z6%#vV%M=BRrJ5A7@{5t09vC)`dmq)gKWZ7n-A__tDlykLDbP=>+2kg2krTXZshLX; z4>D8L(LPe_i>S2z$wC{S&9N!oWv0%>AT`Jvm54{V19YsC=fS{6*!lzzR5M0)uXJRy zZb=;HwLmHjLY-6axL8!3#`XvwCOd7HNtgcs((g`N$ATt4ehh>#{mC>GM&fJ^&{|SU z;nqx^3aH^9WYK;c&Nt0(%GhuHp})3-JM%~k7mzT`!sX8mqCL7_me!eo~#!$5flM>Qa{R9)w$@B=aCwe zh>@pPB&HhGsyp+{WO1rA-5nf8CQdWtI?+~%32Mv9VAeA{AEaw|l@ARS!S;0@5Lhdv z+8oaufgb<>FpIPRp3XY!!^E`vY#{eyhlMn~ML_;8K15uL;Xt<|d^^9&NP&CYm6o@Q##BGPCc&xVoQcbuSD}s7>s@g5{_1 z!Co4lYQ)}k8!X(z4lPh56!ox{s_D{R*MBw_F*T5x{a|UmY_+i7B2z^B38x*VEhQ|e zaD)8RQ@5{|_8~jVYVgJkHA#Tkx@7wR97M`Hv_gCbB!*A$6_--E*iJn)+{z<*2*#jG z*+^&BWKm%v{-uEArE!iRh(U==YBiC4Juc?X@%!r}61BV;eOWO?jH2ARx#iC;f zDulI6mNB(>K*k~&$e_%v{c%+Mq%+>;Vr@*SnHz1$AJF`}UP+QIJB~)i8?WMo&>U7) z5rh9J8ME=M4a>piSTr zIHfN!Z_er&imdD3<=dY+;j#b0f6ir-SYXk;G z4cdIr3@=NA2_J!AeClc{J$!giyIAzWY%Dp9Y+~yVq#G!;mjJDi*X1j4RN!9YE^R95!;>3^jkGA*@`pSjXKw;O#ndX_Xp|)Ss zb6ldxeDAHp^CdrW-O^gOy~|%sj0&v8Qs-X#5zB*ISLq6#YnF4%12VdvR+II<_cH;) z#~kM6_2g019c=9RO2qs6ZaZK)+!49c9r;3Z5KF>4Q2lYpGTvhxu(4Jw-#Q(LluKdx z3)D9eiuqcjvbdaJ_oocT?CE;vQa|P6i_x54sSa|}Xm6+22jL|YXw}TKMGYPGp>R%Tk83r I?Z!8>p__=ssV^}E2hxS)ol)iiKYhl{r`YYg_ujAl6KeoY@nEF4 zc-O^}l?u}@`^~Y(l34ps5WuzOPYMTE=rwA3?acZMMqXoo|3Zj2>i$iv$VVJp2P?&~ zLsBk9Ma3u<>f~@CZxnL1wzk$l3PQo_YO8Cwn9Jv~^$-(nxISvZiwLI>dQL$>yI1Rdb@?lB zz8|r?Na)jb?IaCShY;v*?J5smWlBD4b%ZUDPNm>}goJd@5NGgdeav0)ioW){uuyXliC4L}x^I25e+=3c^xcQJ~cQjOu%_jZTP2e>gF6}xk-P?&Q6)U;6$_AeidoW zSEDyLu+;VqtbD-FG=QqT52nE2A~iIdkltQ zuh_??Yh|>s$cI>q40iB6(A~Sr2bTWv9q`u5%J-iU;ql^vDEH&7Lm;Z<=y(pOYuN10 z#d~(5e9!oYFw!7hQ=j%Uc}9>+)8jj&DAKx`ASk68q z&v+&64DyF!_a!H6WHa`Xq`y)ExN`UAy9E5HHWvpc>-cstwg z_r*iWdmH;N_pH%Sa_ykcln;QJ6+<2+2oZy0HyJ`Xydmx*6YfT}I54kzt(~y}^1krG zOUM!D^9~luOB{ChG*7=YAY2tdnsc?gO)V`q*4GP}O1o>5l;;Mg<=goyCQE(iL6cL7 z8XC_N5+D>j8Gy&vJ^}CH<0%CaIrbyao%c%R#@7A@9j0M@KtY%di@PO1%8#Bp(5gnL z83rZg+{11IZHXd4Q&`4k>XN3enM;vWAeqF^ZzSQ5c=rHwrj`;HcNy)eM~umVESGlFgod5SQmSvl80q+raV_5K~_1t z_{{jzX?~oF3s*m$SBrQc6mepP!w!g}oOcV{=^ey|*D-fr<&bkv)X_CUYNy3m5d+KQ>ES+RwAUmvr_(pW?D>0ra$nZkV6YAQ9`d6_OHY5E7T+u>b)}sol9c5dQo?I zf$4Nr3BKyWj6Za88ljLkGFl?t-n{67EXLT;wD73cQ}eI3T&=74(pI6PGJ+X48DFG9G|nTjS8LHAA5VAUf5i$2<$Po9O!S9LQtil%;|SR+M<@5%6n(; zw9b~O5q12HLoj%h+(fp6C}p{hL>RGWRBd7u83aHQzJyjFXrL&gVQ7Hh2v2Mw`DZe8 zGk9<;%ktv(e?lAG_}kC>x5+gRy8Lh|HiKAgWKIUEPrOf0rm?wFFN6~N8f$kCut!tR zFY9Z)b%@dOEn)G;9iwKX&{CZH&yar5V<3DU_w-om?OSn9$L-mVy1L$~$J%#RAdtT5 zBgp6|r@YfsiD;j{zUlT2R!|FWMBVG=QA)J#)#XIx(*0t*xqx@t^cRPU4_=tg;OZvb!tpo|Yo~=+l+KORzJ#-`4+H?BQ!4$gy>4ca-R(wSd#8-h6%X-Fbfp|koD|7LXq_c2!Xg3EfjU4p5cunKWm7)f?&yPDD z?*HehFKCQOKOfM@5^`qSK}tF)-k0<(QYYJMn6U9$fH}2-@F?^`MGSZYC&r#ueH{$! zF5C8b8sX8h@mJtJIH|{hL9ip57caW4+jqyF+{oK^iRUag@$5JAB1LDMj&DF7W6atF z>DCd1JHA>93-2ghenKyq^XJ-Da)07~OrSu*3F7l-SqWm}zkpyF-<1ZWlg^w15hp18 zx$?$Jd9_WGm&U%z`Ii=b+cIg-JML6_}u@+ogcUl4(QQ zz9EWqR`M+k8a(bH_qhl+pkM^?K}IQSDycvXUpNf7unGTXwsB##gomtS75@E!-L{XM zemOEyn0jZhRVEIl<~>1#VHti4?0(bS+=S})gBrO%Ht0=V&~ZA_Az^7R+OER9JX!*IZfw&3XI#-q*5 zQfO-0g!%m1<=^Sb_uPU|_xp9w`F&m>SlqQdJKOE#kJwk#Vn>ODI-$+hWQ(`=VzDMy zsaD-5rB4yjN%rR_yXP79dL&P-rwl-30Y~}p@GuIM1GJoY^VXgBY+iBD%kxs>y}H$K zdjF#Y`IJzZ4upqQ>}&;vg$%PLX=!P>xyw6$+6clUl9QXfF3yGzHh?%0v#&3eYi!!` zdPbz_jBgv&*V8%{>*BH&5Rv{HWASkZ*8vO$i+OsshRttpez+J4$J5oUVSo8j9|74} zA1eWhYh~XSzYM@J`>Ce|b1&mPRmmr|GNp*D&?XtOu zv4)(EwZ5v!7|>*dUdeYpvBq)&kKD7ds%q)%a6LXg-U|=5DLHbhTlpE0RX`;xIF?M( zN>|X>1-s-eOIBZA?+ckn&1>A8vPiNBa6p*TPk9dlp!s&2 zaww0PkXwa2Zw=~cjbE2$a(m#yzL}ih$NX6VQ%WiMmnIA2q<|QM)R);|-8^ld0P5ed zer`g}$6M@#hA?A}2W2X8!Ig!P9Ug12_S0HHx2j)sqB2<(No-aDtWz!%>kCC@K(Y)y zPS7c=UyzZRq04Q}pro`=W*q$uy1m5ONO0s~^)nv>drLLNGoNOO_00NG_B5ijZX=Be zOI1A}w=K@;gC8bnUHCp9y^mJiyaDRn6UeRD*VRIr_1Ce7y6r^`&zzQ00Uxx@W^JKA z;MEU2_%%SKSc&m4&`mNho}@=DRqE77*WSLOEE@NMiA9xaLOfz3=Qxcn-znJ8SZ9DhEor ztI0LrBu#(s@vwLG$E{)$0e4ga3iy3Wkj;46%k87h<`fEl)MYa+Snk51beWZPny3c&I`qTd1i$BJT;)?Qg)o69nrRFwFbLVKwfLMf9W!5u6pvrVA}6)gE81 zDXmb>1YflLxJHALD?R+=$I)*sI@tJsep0)`8A|2?uGWmzyVZuh_Kg0{>S;6y`<-sU z``&dojlHSAi;a9V%MJ!;mUzaa^7RbZBSR41|a>?)CFG$+Y zjrjd>wf^SLU0?H$c)CWi{_(Q^SDL^z?DdZj0)pkrcs?K-kNS+Z7xVEcKL&W~-{gh? zC>f>}80E`+Af>Am<~w(dyIs5UElt{?Pt*WSvcYtC0VsHX4Wj`I>;c+8ORjjXTTL?` z0%I6E*^XF=x_SFJk7PF4(=#PQK1(r(RyDT%sGJ4D6`P@rfF*!kMmkeu%jfcy*InS< z0K4KVRQ1XkvB!~mVn8Z5`;-Zg(w=6+zM}W?tHRaCz~7BpN3$4lkiy6`q#3PopCNcO zOeWlapY%o+15!;A8KaznxLifniEF!Pj+eN}SJ66dKJf~n8lZE11_S|hHb-z>G_ksG z9`26NV6-6rK%f8V$~E%_f|F)&(F_52bbZucpm%>EkW4*SUF<#PdD*XZ6(;wUKE>(B zJ$K}E@N=tRJ^UN?UaTP1axE`Djnvm=6Bus9WlC- z$-a#D#MD5g5D>$au3d}s32y}pa2YPIfb^dFg1wIi(^EB*vs3PKn(LDVs^a(SRLVV- zHH-4b1)Dx=28`~#j`~qpgY|HBG=v`Z@Ifm9-it3dKpQi|R}P)R596gf`IC_j@33Az zipTFrI{q1;>wHY|@Eb$dc8yo>B+w`Fc*0~#$jf7W3Y|AfU{V2h8?&mlRzB>FqLZgM zw-W~yMiJ|}eYx5xJ6R>zCucS0d148QTl!M+*hm|+?(gnoVVwqL_HTew{(5lhRvHvT z37KuQM9iv#LlmRBi5a*f(;diID#IDgSydezQ+Ilbn4k9pvbINqPwVd-qljSD+%~y2 z8BmN%ZF*G0QJ>I2=484S2bE}F8cvvn4$?f^xkv-O#bIK!60Ba6ja4TAW4m?h3%I!% z%)-LV=W?0!hM$FozbUPtu%>8TOGivmMk-g0K{BEAe49<=Wk7KlNIp?eOf~>#l{S~8 z)5YjvxB5M>$Z(4Fs{oBmXN7$ML*jy`NIGpbOpASk?kN5h(mZX3Aw}7>kMR7_yl*2Z zVp^Z-kA8y<4z(RkSg>i9bFKgV^96Q1Oud`mE6fuljw+QxU6p(Nlpxw6LD$o6`fLENGN9P@^)UdR? zrY7wY;-sbzHhN`CAmf4P)@cN44QY<_U@H2|9VY zMdC5eXAQ`Q4 z2{9ljxcRF($tcU%PHGB>3<14;>lQ$}8Bok863KJ+)Gysa0!nSf9ecZ?l8x`(^V7iO zBQ&23BB@xjB!*cV`|ze|DNWT)THfuu#<0 z&Re7FThJSelNG>=tkgO5#V+})j?#PV?;Z|~+7q8n(d?O&D7*FO){I)`2tZtArdHN+ zt4DY`U6$faIa_Kr2=YH06Eia|7_Kmz|=eUi?+%-R6TBiC`6r0Ud*}rNYT1K z6c-pEm?Q#Rt&B8(Ha^Mx#op)J>34Sclj|)+g>?lKiZ8^$9NklrEK5q}{|;7hV79hY z@pl8UGXnDjyjbvQA3uQ2X&KHqB#cT_^*PhySA1eUjnXS{}>ZD*Z#u`jP5{uWgo zR0hq$d8}>vsh+k-Js#AO#VAGuYnhX~(CHX;$&pKR^`q%&Zj4_xuuSIkl(g4?oIkw! zy`#BT%&{zFHn=~(P-M0GXOp!hO${orEI*3n6w-&!04(pV;8SaQ)X5ekqZu>ztdHv; znd>N-y`I*i>4i5+6C+ic36m|$iWr_08<8=yq&EKuH=zI*`|QCaeIF?cN)uhok@~8+ zZ?P+?R2}&bwK1b=w;*?h{GxIks#;qU=o?zyO1H1(UgqmRu5bY0aK@Mmx*{`AxCVldRE>$n1xv(yo%72YG zR(Cq)PkyhKP(`x&FrzBE#X0&#h_Z^572@r)SB&F_+5DCUhAs8>!PT5_^{u=MChhLR za$C}XLAj4aPKC`08fH33FuT=dftXoo==69;3(I#fAOgRmGW&VshG_IC31C;2+9n6H8dQg@8&(ndh2!YK%x`jSJ_%s%T?l%yzXoT$z^THOXG8 zAh=p;K1Y_=! zP0!iMGcTWRXgJZR-tbKp&r0ybWadk2ZIA`!r7)k8LSA^Os!Fa(4S5$>CB7nO75^%X5s-lI-x*Oy&L5X6hL=N&UW*3SE~b#lbKh43H>ZtDb;I&RdOYJ{PxdV*ZkU&hgv4h>;k z$7r@Qo33E@=ZMp2luiCKxY22(Y!@G@Ji+tCAq1{vVCiYHRvDzKRm)4SdEaQAOxDR>e}9C71FOkso!v(e#EOz9 z_9(G;`#zfwCNfxLpG($Op5u4hGYpQpA;Jh{q-f1uou#VWQqU@owUbm>VZK*GzIjx> z#>$J$!pULPy4^uSW+GTvH$fErBL7p4DG^kusmkX2iD`S8Yh|zK322&8s+8tc_tN_r zmV#Wkehv3_WRzGXd6L<4iInA0ODX7et1!XGnxy$@4n^pI%E-oJ(w}RLa`qFxufktqZt_X9Y zH>=f$b;-1<%-@p?Gxc$QsaabEIksOEy0NpwOe1H~!+G?4^oXDc*Snu+GL>0t%0O)@ zxh02huB72dNlzIqm0oiRlo@LUs}VY~vQbQLyqQRK;-KUk+sxy0m{sU@G<9?l=qwEj#F*CmQ(5FtZ;d`c|wc;K88d+^vH)zT z!9hW=P3}@gxFP#=VYxC_AAKpBV>0~{Or+juF~$vKTO@9HJi+-$P+F5Avt10qJC9P^3+ z>RNfc)(P2NE&(|S{B^Tv{~mAsqh9_$j@)}UyA$AwH%EVMko$?>i+SeA>%I1j7Ct>a z>KDkReWL`O5I9`q6Nxvj-Z1R8TqvV?XrSv*_BFfkmj_Y3+Q0rQtpzHdvL$S}y+WR) z)kb0g;Z5&+9h#9$ozcPQ?uam$})ioNP2 zbaGkLDeq*tBNCv_^A)RRK_smQ?HfhW3A~w;UL z3sF%~6`k_1O-~P&xF%C0l3sYs;k=QRRakN|`Clb^;o+cby{v_{XHBybdJ|oA=!f-xKgOUrp{$X%~f}s*^g4_6^Xk%t!*@d2I!`AU&p!Vcj*5dF2 zgBg#T{~+T9uPr>#-r4y`XUx-XHz+$hn}o+NKR=&gwT{ys0Qc1^E7XYUJpQ!aC+TKp zW(Fz-{YwTSoNuccLS!tQx9v2W?MDI}mgQ3gFP7$tE@tnFWOgK-46xJrhHLXiPP)9E zS#;SD?cU9l$W}II-A_0Av!o?x%g@a%&!A(RL%nQlxJ>*uF#kD`JW9=@HR@^?hNcr_ zJ6m3$@K_rd!0)(NJ5*inO}rYA+DCbv>`r4Z_gK8!HBBNZ@ zuL~J_d|Zn6Ch9#dh`ldoG;IXYJ!9K$uG@L;zAfy$W`1p}HdxM^M?5uNHYWCw^r**G zai<`-;S*4OqmxB#NRL9c>*{7b!T|wEn15mcCnG059_PcClqcac?mls^zFJ?2U!ZWm zqO&Qvyx3N0y2!cM_Fg~es4O*>(-buD{_bw3o(-p}CEw{|W*T}P75#F08>OP7WBukC z;JN|UkIugnun7RK#jCjf%1WiNVM9a1YjX}T0U=8ARj(Nx@WLLU-?vsva(nV07OSQv zA0!5(j&rW*@?UKQq}yBywdtykc$<&$JLnsI0!OFUHhLpk1k&>KL93#CBnB`8HESI) z>se_KV5Fqu=wk$I< zGbzHd0V;+q6{KZtW7A*j(`i)h|5wwqqt-Ct&t&4Jh)0#rpEPIRUZ0)X8E9$QJ10FB zY&_idE;AYyYPgtU&D8Zkx63G2q_{D@1ifTyDf_UQja79e?4fX)f4J^z0DfO(?R3!h zUJ&K^dxvv5urH4!W}+N;tGBN_<}v!iypMy>sPH|>^)A~ZuZ1=KPH=9z$>4l>e#H1!agID2@LOKrdM{)7b8?nvY*8*w~WtC zPEH*q?3uZ%MV1hy%E$A-5bkeiNTkVVe3h0Ky300o1M2o|yqMrO{f) z!9hgeP`58|57SfZXjN~@0h8!_^wMl#3%2$t_E=+?)PkZoO^=q>YIfWmQ7RIH8(rP5 zlh{GlX{PVKjWv3)Dva{{Gd!tl03-#}zJZ8KJvc$TeWutEa-^qbdV652CO#ZdQSf;m z9IMEt!S^{~aw=hpS3{FeBcbmtr*qKhvj)E#xiV)c{6{IKakmcAn zbu^yNbh6sqpt`cMs=9)vf=bhjo4bliY*f@x*U)B|0_y>h07c8LJ7-DgaU>=5b7NSF zcU;*nx&W%#cKOn2D(@@7{t^m{mq|mNV4s3Z-q;A(gddUIhJ-_}-%{*3!qEM3#8>*Q zaqQmZpBwtivye#}l{;-Ot*zbR_z7)P83pUlof=HTtGx{LoQ?GDrB$pag4kn3iv3ES zs$(b)c0bW^kio;^=Jl&TxkpXA2&jNAF2{5_r>ogpr0%$oK$ zpq`k~rz*6IJ;b`w&WN9QHAG!<|CWP#y?ZIT{%K-70su+?>HWq{Mbg}Ew|Oz)Y3h|* zTL5b*kiZQp=$jStZaeb4{Z&Ndr^vkgJ5y6T^(trL85rAW2_HdnGC>lBriyD`({QnX zh3s*;dikG-mtS|wAKg#n!U$0z`iv&8ab;t1*QW3=*=X7pvh9yVOUaXPeLfq<$c2#Z zPwgIWJ--;%>=&#)=rS=DIzC`cJv`bAfVb<51GYyO0ZBy(tQkC%YK!B()$$x(17@`fenoo@fuj0>7SiR1EM}^OF{Yj_1T>ObndA?tYPf4-g zow+dQ>Tw?ZD7<;U-B%G&FHtKcK>>69M&6($@fJ<-c#nr*Wr28w`QRze=hHKw3TsA2 z2KeIaaDMqNX{&Cn+ODueUa>k!Nvbvr3YE6)Uvh>h9P4(79+#mf`d81HE;S@p8L@iI zGX6XvRol`rDBn)TdXL|FnnbyAoMXZ+TvyDX5I#3Fdhx!R9wmFbAzAFWbblg=9Jc3p zpt~PlFM(L}-dsd^zUiBtojdAsbvu<5_oMDW1W0|`o@j7^ce4s532k5XLC*^38jq%B zqEgRKhr+KmObk*_>`Yyu;qrPTU8wc5oOLeV;gQkFsi_b!3pR8*%1J(~rWovey6uez zpC-BL7nCU_ayY8K8lbom@&kYUhx2E-)-M(KN1D6OIR^Y_?2Mi~{3$U<##hH)|Jguq zHlwM_TYXhaLA$hiIG@ot_l2sM+hMDKvqKH5{qC_KUNVUj^}ekk2=_4amZA@3F-NiDhIC>Uc}+Xkens@wyX zo4Q($ZJX<#v@V3Ycz>>g_Ag&_TKy5~;wV3wvv_=2@{#FZxl54P=lEU%?N1>+zDTl6 zq*K|^q9_A9 z%ih+CNqqHF1fC-H{eaUG3_nTnz^>u>2kpql$aR5Xh>ceJf*>cKj+csLB>Dg^ZkyVg z+$9WL;vq~=w3v{#bVZ-TfeF9!k2?9TJiAK9Lb({kQ~X=_BXZR9YvS?Q_RhmcLa{mu zGig&F3QM5LNupdl_a-LL9?kY+#JZb0unyG^9kqYJmx&mENHiJcIb)PKqm{U(e{30X ziPRekECL^FW0fZfkldOi%I|jplY5o&V&i`!}XbUVq`0vw0?q2_Wy2*s~$$wcDN7JVvzR?!02JrLQMphhL z+}*9p7HG|;;FrMb4=*~Tt{6rPL;~XC9u|NFhh}~M^L=(P>CN{}N5l?_7R0ZvKWiJT zs38;Ho9`7&yg{kvTW?%OH+Wb*LQ=iU;8rF1<91zxOI+2g*H_OcSG7RHWXVx|2^@4F z8ZoB8mRAYP)(*0s7rw--+Fl0e>#JVPssm4P>6loz-ItJT%Rl3BT7SSpKplMgz*+qI z(@6C|M})<~YrnL-S4*L5w`&zFa!%M|-jq=Aa_;a5bFer9-OV94<; zti9nqN%!P^eQ%IziX})jYjfa4scPd7`3oZPr#<(x)u^}}Y$sVb@i9|bHE3f;AoJN; zM2voGG&cikTYH1z#yH~n7G~53>=^7%ztptQ8YLY719)-xaPHcVhIRum3MCAtzoUs^{~604FYM AG5`Po literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/edp-sccm-adduniversalapp.png b/windows/keep-secure/images/edp-sccm-adduniversalapp.png new file mode 100644 index 0000000000000000000000000000000000000000..bd5009afdc306ef21a00b71be0ee0fe8e68543fd GIT binary patch literal 33770 zcma&N1yoc~*FTJ+2!e>xCDM{ZcS$$W%}A$o$DklB(jeU(LpO|oba#Vv4BZS2{0DrV z_gnvWecxK&tbw!U+M%}eI&2y)8w@`&yyRc|NE_cakhdgwmY(mbnzc$E%veqI7 zYmJ5+i)(nWqn{oHgZPvK^Roe($5ACY*1K;a($aX+cwFRHylaU&c4m9W12e`bEYCVF ziz9lFPOt8}u?M9f_r8HCB+ou#A-+^!zWlK~RYF`(kU{_s$yn`U(7jE2J}Y z*aPKANN_*UlZO`e{NIJIppTG;-$?K|4VVjU+NhIneYV0@Dt`AQ z4&m7;n8fP2ZB~dIJgs$%ZP;n_gBRmFzTBNCA@s)S*Izei z@m^Fs-u7@cBqN!0E`Vzqr)x*RwY9Z%Yqq(tNnKxC z2ZyLXVJKw1En4x^Pztz?jt-yWI%*kOd6T7ZvyvBCi>Lklr2O9X?#IPcuVUiylsfLM zn2teRFQMsiXid{74QYUDF)RJ`+NX4}W7@<9feauLtmgDAY$CKz-*kw0-GJ#pMJFxF z@oal*-5@Jen{jY(5Dte2VUo6UK5_M0w03efBn^#R=?aF`Y{WH}OaW5MWtR`sZ>Bbh znawQQW~BBhy))6&ki$yJMGYP0Kwy3xO^5M2^xdbc1eRoCgpkUB43r5ai|gOb};iAHD%%(6BblqdFp ztL1;#a4|j7M*3QKIm>mvwC@_^_YrK@!!HOKR&mQ+kU6MnZr+O%J(!%G{RkC-{I-=6 zo{4p)U2^->kYFvVTJ(yvp^qHCS#N-B`NJ+VIn_iv_@0 z_$pdLKQ6{I9iqeY1!59HqA>CH9N^m8T1`z&Lqh{8={^a5uFIpMLP69AU>yK!5^~Pe z({PGkGXna?&dIbPQDcfVj)c1jAUpbE>0+QvZG{eaoOD7BUw$WHrD0MrcNz~rJP?4L z?pLXME^73e?u=n@#AMZe2V7k0-j4LO+I%I14IXleM+qNb!XFq9WucF@AGJsCVKCv-r#`JSRp`x;*dAJZdQU-7~ z4>&nF`7I7NB40r=<;6vMM8M|_?`x&Tm%hD~^0Bz*a;Ud)UqRm%QQfFHU!UJx=o-&==s!+=B`r{Gd%Q5?$mn^?aR;Np_X5gNQqLj)XNyQ@xOvh zD?q%diuX5{R0dBV>8&cSgl=}$f3;Ai1j#udSxBdnxrs^B zm-c2T`#izFNT-uqMd1Bx1k5-ENFJ=E*h!FQ`I~TVy>S38YMtp2Z^ytUY(A>OT|PwB z`EB~d^|~V>iQi#QT^F{(wQtQe|C%h4YZR*ZQ(2wneAA3LrrN_O#d;q`?PajLvt;#L zO*l2-?!%5}Y2qPdiaBQ#fW77F1H<(-QeH&4R@)Yo;Vfm^7hoBrlXcNI+!g!^+Q)#? z)6r>b8yI*%zNh<95tJ)fgj!qopo;A~&X4Hzj7V0Wiw8z!7B-DX zg+}m~KRKyJ9BQ1G=$&kC5@n}L=gfJNB5XcXpd>Ff>zx;;|M3DKrbY2|6-`y2Weni7 z<(dl19UsRD%%5%8lprX=S0YHsT8GjPnm<80V<LQnRzLUt42MzB;a>YTTpUKA>U;u;u1cIO35E1OMH09R zQGJ3mV~DWfCrBbN$LWh}>@|dc|6f4^@fJONMgWh^|6F~HFd`7PY+%~bM@?P)hpWHK z{BX9#G$2}B?e=XMzfb){?4Od+(qo&>e&}$tiESNge0hc~)aQd$KrI{d>@lWAa&98O z7CO=U74h<$^si|u`VNN@6Vr-<=}#eZl2L;I!t8U0(f6o+?@^;WVYqLe1){z99!a6K zJLtSj@zCoh0^uqGt^yhc_~NzdR(Xn293*9Fr-rr*n(O7QS1Cju;^s40&6Dfsw?LW~ z#ysTh=qo&9bpn(TmRXH~k0YNkAj2evsJ-H}kk<%RnBRgw;0HT?G{_iL^w7}epvUXs z(R=dWxtKpQ&c@YZboINiDkfP1D6a{F+N2&i$p8|+6l9bE6l8$Mo`HXP^}eHFNZ2zt zewldomGXho_o!#qiy?Ax949@aBmhsB=N-o!R|Kn_GM}S9NcE3Vu~>Qv<@u67-1rne zR{$!^_oWV6qm-Wj6cPlIzImAB8_1L+iiKbByl?vc&ph{z_rZ1tvPre)n}e%=dL}*} zx+@LG+$@f}9SAphx#i6YZk7u-duMj4d~(a|;T#bp-%r9vHyK+}b2>AA6}h=K9%=f0 zfw50^yz@_6UvRa$5hsS;qcRXG%GJ_b9eybT`g5F#ik%Teh|3=e??=0Z3u_T{ZQ3tA&V#DLT-5!^9@~6zb z0!31?v(oS*s)P5}a1@#59#~F-syznr`ZWvfGiiucyy354Hgz&sz=MpXU7-mi4coZB zpOh)N<-ez<0|^L85BJHAJc6X8@}#=WfdkBfsjy7wl9s|C^3C9dwPrH2fnz#@rGV~) zeV0f<&J?Sd?2j!n%m8c-~4uv)_WbW;ckuX>!$0i z+{*K;SBkI#tGk?>K5!-LF^x2#-A)jg`#}3PlU1k zE+Yg$4J?<6i!Yezi+-IgdH-_?d((iA>PRsVE-o$46YrDH$m26w##HO0ezPc(l z3_>@9g{rycr5Aq2wX0dOx)RCRlk->G+R%aICiMQxWq5iEzn3gS{~FTLy)r=cbSxru zqIp1 z)NdYF$r)y8ZOLoJ^+h-QO^juSMdL#@FQQb zd=)v3y5eU$%1fwB^)D(HbD2T9XzHW&C!Ec4txI`)wV&ijPCGM=4uU129_bmit5T!; zF;^NCwJs#{0&^iP5w`ET-6CFNMqr0jb@+^#&Bn`%CnqnMnxi= zQ9TA8d}2tC?|c)~_#%rz-WfA{iIgTjp3(4reyOb0@k`E_lR-_O^_0Un%|Wm#ylK6M znbS2m@2%F|yJDq^3yk43<9#}fl=nMmc%+%5J`-f!?H_EzG6I?O@j)!FE|&2in{iKSnPGtODqmTPL1oSc*wpKFWUkoSPo$iTOsPti&C6#F5cej5X z@$PdY1{X*={E)W$vXI-$-JR@w-*AO%ccxvz&Oskl5RI}Gl&;w_0W7=Q zc#b>%B!q)%@7QU!t7M=v#fCV>)X<@1K#w%Y*r*DR5JMf)nwe7UDnWQrx*K58^5P+z z$PEUj5A`aNU5VuaD`subu`75Rjy=)?EoE@PtB%V%T5q1g!yEu z`@jqKo6J+rv$_f!XyC|XL0SqH|Iz6$Rb1cW)pePw{zgsz7qfNd)T@Qo5dQ1}hS2Y< zR6kVO&*}w3pAiS&1#B7K{`igiOntRmV4SzAS5>v5K;vd})5oetDo-mH>`;-dE&^sJ zsuvK$lsf*(dh&M#i`(u8kX2o^nC=6Kd8N3pxw9Vpf@XpFL5cP9#|$CD@A$;ikDV$y zkyCqdLZ26Vl$L&pWp5gE{altne?l#XT)-D>B~}1>#aT+(_?9L(qxKb}^s9m?)U4!| zZO*C` zXD0U2ptZKr-rlZusRqZMQ19tEbS?g5SkA#GV?BGsApWZS0f&LW5ijh3f4~!3G^w<~ z{zIC;4FQoFH8h&fa#WVT&&3)NWC-#@$clTCvVA z@1C99|6*BzBb>H+V&ZmKeShRa4^k%Ze0(46Lsm8UymB?(#q?H%ZS>?y)XifP?@i)h z&Kv+*Aa>o1-Mrn2>kS1IuRZ01Se~jsFR=0}qWF}XUh*+M`)^({?d@4|d1a`7-aBxZ=HBh2&(T{- zo@*oo1^h}#4+Uzrw#NMge){KN6G$LE!>N1eUPn9ld|vuC$5`_V<2&%R?5>ltM6c8C zI!*idfZI;ViWHpb5O-#^zirN#3>PZ725PHf5j*mmk^yOIQH;Y1m8n$50RtSWgm})2 zfp!slLVeuM5S_&F=jv7vm7VxebD=&svj0zkpB&t7^>>}#GCNf4bqo*@H3Mpo(So%E zxl?ylXDB@G&^9ms#U;jrfwit*Nx-N4zdN(a7uL$tbI_4_uX@nQ9%2F?5!z z$n*EP7!A=6=_*LDHd1wEf+r`E8TtEaqnt;fY0no~vy#KE$okhgWf+TRs4Sd!&#h$@ zL<&*+Oztcj>^_fluJzV8k2b;xLD$abF@>RyE*^0o4o4ARE#-={rD0OdJ8wb3%;hME zNg~iEp6+JtzF2(i66mumeS0T!2PV5K1>E|2FO!{UKD?(`kUQesg@RPdq-30F>QM;s zh!V_)#XxR@>jg%zq)f zg^-ZfcKCD9^iqNZO8Oe5qBEsl!MBBVzQ4620fQTuqsPUSvdU^417@!)8d^GYv;49u zqE+}n@R$~-S61|b$oBcZusX;bS?bVPE8n;Sj%$<4qN{p&0kko+%o_KoUBYBB<7=7p z`j8(g1=e>gR4fru#K)HQl6WOa#19J<$Hbv&(ZR*JNW+nL>x{~v2e)mstjdRM2#I%# z-)`yf)^pPb;@wbto+>8JHq-CD!9`BNFzSbk>80QfY3fc9^;|8=uOb5I?2BE2$cP>^ zc`I@*mrb&}pA3f3M;H$tXz*WHjrx0@*$dM@=1QAdc=^aZlI?Uh-?+LK| z=pq`OA>S*1a-$Y;FmBjXt(AiZFW)*|NlC1{jWXy+QDG$)WfblGF2XT6W!oz-e4jEA z?eQ%})=JQ;jEPoC%T+>M({5mB!`$>ZCVH1*`9cj+e*XgQX(XR{3#HDhIw}12=q@sV zc3(jX^PA^$i8P^n4IYdywHGq~Tv(J_2sT3S`7M42_f3)eH&IEV&aONWFdM;T|I0J6 z1#5b8lY_sU-61qqFQmd-$FToKRugC0Bja-`i?uX;mE|P6W1%`thiKkYRf}`*1 zkUSu+%h9oCX`i{RC-_IaBNs)(Q^# z>(*!2Jk1Z2!h{Vx=5}Wc&m!>mUsg0UeDwV}hEL~CK;B(fT>hGKoB7p61zyc`+HwieU!2j9F}%dMF@nD&z^eX>BgzU-j<~Bjif;e?_uDK= zEvuM}!AQ@yVUh<^5`jDw5uBzLU31Ah?q}QJx`1DrUI9&KGk#w%om9hS$Z zy}75S;VJ2*u1*%trJ~6#pH0Y6{ObC7JNo)hKT&0)_L`o$#dL4+RB+BUK_wfGRx_H) z-0`a``3k>RM}M@5h^Y41U>lTP2Aq`3QFodNQA59ZnN6`w@DNN`h6E;^S4L%;q9J(r z3S#nKbkZ-YCl|?Mkc|x9JZ%3ylm4en;q4jV54i+){}B_LO&CUaq~RMj0nwcwDtxta zsmYyX_7&`Ud%@AnT`~u$CZHH)Ru7@#^c35o2ENRZInP{nHj_MEHoCW3yeSo{Z;gBb zW-cy3G5>}V`DEaSzM)OiDDCGG`ke{lXx(&5XHa!6GGGRf;Rqu=ll*)&q^rKW#9Lze zG)k^c0KYQB!*hqI^~Y+72E@DSAEqw?xqAVVu)&Z-jp${g)f`f3#gSCDgGa6DO@{}f zmAgsINRrno|FDha;R?|slRmn9;~ewnx{N><@Ov5CaMaO@?L^<~#zwiZrfke(FZjYiN)%%-v@sts)Llli9%^)CfTw;;O$?x&+wUj;u~HUI~H2OQrS`qS({PzRiTx_A5* z@YmC?0C~`^jmy1)V;%jb^9X-ESC3Jo_YXGP*0jJ=-a<|(C*e=`$&NRY{XljnczOVy znIW6mwwwJ~SO1e!@5ZjN99Vwj;=LD1H24YL^s8=UflFW0s85X1^3+eD)=b)?P=?AfYCnO_)Pc@FxRL#&bE(n$ESE_X_)^A z=$avHoGH9-f14B_5qvD(LaFJHzEt%)M;8$F;_XjM%stJ6MW$tv-dWtmvA&Uc8+4rx z=ZN1^ORSQ1T#dr>((J5rjH&u-dP^p>-Qr(j6XM;rHY&#z>!`Xk^V2N*1`Jh-8m*eH z&d>d@LpY=j02TuX4)DuRJdb9d)8ld z{A|~rSshZIFzbhV_PAOSfh;-09fceLb)tt$poLjp^&~oXu;a?`)7xJ|>LtEZ2Timl zN*eJO>4L?wiW;=<*#Ep!?(E$8*?B=GSQaKXLdrYmd&{DtUBpU=FQ1njD3ol#oj5hx?hUtId0+6Ku=c~FP^ozQKM|tsH+o2!v`r$)9kmhZ1pLtO?F`msHGMl za`SyVevPvIh`l2A1HeiUy$`ILnH|T2kb|0$?tZ5iV_==aMt;e0;n~uz+vcU)+qO`8 zG5xiXI9cn>Yvr-RZ|m53>o{_K=Kj5Oa9YL02%4gk6RdB)OQ5L-WYvTi>_q3yI_EW_ zT(mKBSSCq;6iYLL&`^R{>%CfNd%T7%yZ^YfIVabN&fL|+=D`@nMH@126m+p^$+)aD zccHazlk(Bl5VR>kf=g)+mO!5?mUfAoXXm(-mHBksD-InMg%eBYz$5+Cl&4PPQz0H2 z`H5`=)>f@i>4J`d97&#Lv9Vl^e2XdZW;9V8`Rw(brej^3Pq?P3G!-qJRf*0^L|s+s z6XSx-#VL|SEOt%$3BHIg7ALp;t*&$8=XW27KM1w{vXib3PiXP-MdV~_NOyKF{4KWg zq%}Y5bfy<|bh{T#i9+)btT#!8w=}u>DhzgTkItg0gzay9gKvN}(9wsNlMqbdJ+ z*6^J0XXp;~Y=4nOvW*SJvD~PLil*xP>DE53>8mQn2v1hYO zg9nF7n~CJ7t*547|GVk-vF3g*p3hcRDQfhC>PqIF6yeewG;b|miqFkI?`lrzP3A3P z>;3HG&r92MewhD~+1DYTMalF2BUnw=#YHDhu$C*gOc|DyDMKDZS4406oR`yFn2G1= z6g{1^;iO}qzGdlci1<>gGBZ6J2J^#qwRGQA=fSHeTI_X8vjp#6dunROF-lF7v7&uI zBi;0B^z_y&TA*JWw~yvZ&w=Y_a~~gL)5$f*1`^EtQ4ToXc8?Ct!u1Vjivew39l#AYT|>7 zRfj`_t|fMR#im<_eL1)aUSGLg_eh-JS&C6Mu*A<4KW4L3F1HkI41J5_$>_7(uM-l^ zp&#b^b}OfwYWH7%7aes^`Ppr}a%B4+>&Vs?Tvk@UcIk)=>E0a+t7Xk>_Qr}8sM@P76Iqp^_!NP& z#W-*$ph@!9TGwk$y@8qI&PHl1N%DR?iE{P9l~MWJu3CR?vRl(M%v32()OH3SgcEfE z9#lvlZrZ=JyRP*%*%)0TpS2!U97~ww<+oO~&Qq7|_&z5iDaXOBdSX^2k!c-msWa!| zCg&w_O*&ZFaMD-!gZRWLeM``1rv9+mW(rc1O*(yfj@h6mm-G8#?Q16s)%VWp^KJr_ z2NJwdkHf-v7$JMo@z)p8QPmD=%%l!HcmfRTwUvr&)0-!|bE}oz`^WAJwwLX<(UZHs zl4}%|=6}#w%Y~WQ*tpKw&?3{Rk;W7ag_JSZ6eTxaX5<$X6wC0bUTFCoC)4If33v~#$&<;k5y?~G;=z#^)aU1ga9J9ppXgIFyUMq zo9F!OlElK3aT3oT;y(gacs>?2`Dxy3KRV}qQ$>x3ySIFP_MTbxmpL2OwBJ!@9u+CRx#(1S zfI%EG`t3ZNGsa9~cE$_H*xTfJnG7*Y<@MYch$=RZFiW|2nwp$A?3~5L%?*baRXp!E zvS5hJxNZr(U6L?ta{&9K{p`-FNBt)r(xg``Hj%=SUYb0p(VPA1Ij%Lt;V5DzC?KkG z?3a7b{Q2AVnIOZ^S18_@82}Q@?kp2B>i#;9s0~S5D1|T|1@qYg`W8O*+wIl|jQJ1v z(mo#^*@4$<6U;+uG=t^wonw&wF#P-HWx+)6-h|%zookz4hI-5B}y>xD(8yt#Ui6JoPYYFz~+gO5*ed9nJg^ zliBiv4|rd=ir-BiRx1`IiI`47{j&_z0;j5bL4NHKP7XeFvR%qDb@=fQ# zIjG|PiJl1J#z>Q6^m{~$BytN&?*a&Wk9_wPzQaUx+>nEwJbK(!{Krh?J?Q^W2jU(C zIsc!x{uZ9$_gbotVn?!zV|eGT(f3Y+dr;?V#3Nm^>Bf3?&)j<{cjT z@!<^pu^QnF9scw&EB{}ODCDt9LFB*9R0&Wj=D5H}fOoe-Cr@G+?Qw0kJ^lCG`oKUk zBu|1>0`hObVs3a+zb3dn0F((t2xwa~$tMxF*Ys-uufj{;5S5o2IBOf=aijGVaY$ee zP^t+ar3q9M2J=N7?F`b_nu8@Zfr^UL`t0f`?dh9Ond#TnBY={P#n^?v2wCgscV^c; zlXdp9(^3hT3-UWd*$bMVWB`$;z_LN~5juCa9%I#7-Z}+prCPNy&)c4M6!~WYkw?KB zpLW9u86vPx+cqVR_b9B*4ydP>YoSIhP)%^Bp4#2^<_+k)Kit>w+bri)1xTMG385ia z9M_HdPE-q_uiCK5kR7SaNg;DDW5>=WjXdz&%ipBNs7pv*M>{Fsbbc= zdm4J&I~+pT*yrH$E<=$bI+qb1x(WQDr#L!1&o*>v_N8p-EB;tnOedYgqJ5kZUw10i zfCKrRbPonx))xH36H}2%aQJnz4n!~khpR=u+5fni)8xIQzs2>Fui;bRjb|FApDyS# zX=S59J8ioWn-L77;3wM&T*eNr&N{DA&Z|JIdGTupj^3p~WNy;6FGQhLRpRQHv@$T$ z*UF0V@#eV!wK(w5jpgLJ;JocEg;1x&7XTA|+OV|)EZb@I8zUI5MOh8;C{rO3n;ayo zCO@YPZ+3@wYRuKfSG^wu#iOm$AG-iq5(Y25KfXo!-38U$ky){Z>;-hrtQw1zd-BiP z0EA$i1aK=o3Jf^o)mz^smYJ&}!)`PEF`gUhh_Jp-IP;!B{o)Pb*tfhA5b-t}qmsSz zV=ZhGT-E9U_cckmqCmCtetZRR3x$4xi(vBly1{hgGS^hv9Pcm%?L!!^*WGa*)M&$a+Sn<~y0JCM-hDRx6AW1E9!c&nUjHV_8 zKJ_Ynp1F88!O{QE2{O_)zD*j4^Gia!WS-|y&lH%Y77w=3O1TzL$yvkzA5*cJ0K~#2;Xze&S&J4n4e$to% zx0+-Y90GOzBP;{N+2U?g;05txJa4!v$f<`dfqylXXvyC=x_p{`UVsemTeykS7=|A{ zK6e1`OQ}OaRKB8=0;8tOl4zUm@J&2m8+V49H9w78%G!O&{n%(4w5_~PMe{&1V3tUg z*fY7ZvS5%0@h&o}mAd?4P4SZL@rHIqj%SZ6Ecb517=c+w&CnE`SKopdE-Thuk8jn7 zlHo_1e;ZCLcoJTAw9#i@e8K)% zcSou%7Zb&Rwu$Jx00{`f|BZk_XHW~avQor9?I2(3`REehMwCZae}wG!i^2wPTx8HO z=0nl3J?|OAVgO1WaB9mLPPF?6F%hCOlRYrZkOA!&uMPFkmH3f+A?vd)l-9#IpHnC$Y{&BocFGJLjCM8VqE{%l}Z z8-109*5BdlzLtWVGn06q0>8f^$?z^9x z$p0on$puawTPindYyc*^3rl&*l%FTa)tYv0J^wifnuV$B3*T@1>QH^^_Sc8E%#4OfQD^t!W(4kD~4U?2*%}gor7>jA}7!J)AWi1vMlLDM6zB2GU-Y9qEiXJ5_p6nK zCS~)*wNcs%B~|-by{0uiq2WT!LfH%Ags-Xt`JBnn)$*)Ux?0!zy+ zVR5-U4}PFn*uJ&Zf%@W1`}8PW`jr^OOfXBm=B9V@xFnNwo_e%4N1wC(HwuWAf2gg& zDGt)`P1m{RPBwP71RwrO3}JBuMIfK6qm`@m^{cC^#iskSK5~eWdcIMn^N}zc2^s^atrh(qCAddX_=|Qqo%`!De zBmSJy#~68dIc`?b)9c|jK3s-P7A7ymCKVHF_TA7>Twu)`VbK-(7}2Xi$ZdV?%Qs`^ z{o9(sdR=^V20KONRgtdZ$MmmaoOWFZmF(4XLKimYXJ-pnOWOe|sQiJ|(bQ@ssw9A* z<6@#4|C!X3#`9#>ns4n-VKUOGvMtXk_TvhG=ZANiJhZW(t)x%|i%N^2kQ%?q62tF= zr5PF}I8Kh3qX;&+K0;dI7m%i=Ix^wA{_*^}iwn%35lVbx;Lp>6=RBo920X`fh7bA% zpGh4-T$5C-)Iz^#HJm<8uuMcP?#_j4;lIQu)sz2zp#C!*W%)K7r8HmkyYnJjC@w{8 zg#cBoVv<0Qv|`E!G_XohkDh6BZ=rjI@gG6P6mz;Yw5_f6vZV>K9KzIHKb0py&$54j^mNs0TPD`Ec0}6WD5@c^kX_7lU&blM2rx}28bbFlAVGP!GXma z&L`jv+gj|tJlykkxu<27D7(4iMsn2thb5X$`_x>NEYi#_akok;2< zuiVLAg77Q>kJ|`26BI2-0K)STlenpIf$YzD^#}*@qWqWl(BOFS$--D&5o<868KgS2 z;9$X`lU~6r^=;7yt_l+$AB&CS>C za*Esc{`h8`OrY_+zv=S+d~bHSaT2_dy&cG+m%E#AGHHu3@{EtW~ zc=TrWR2DD_ld@VAalD{LwArZhg|Z|jw-lsIzbO!O?6h-cT{{R}>5#g)Q96Y0XjZ-B zyy3luMzq%7ck_DzTfHvJPGnr16|{WCMO(2z)k#kEFLv<1YzV}h)oGPrGvyOv!|A1u?^(wQ;E>oNf@@FbO z|8^}24P@$@o4VO`RDgWn%BY6&Hq&dUf6Qvp2u`xqucdD~9UMMRUA(CNs+E1`C-3QK zd((@ojCi0PTdl~pSkdx(ev24n5I-&ILhiW;P`oU6mUA~ zxjXy`_ELksT}wjVKBX^v?Bq+?PBYsUvO6;SAeeesg2m@;d|};UVAU&wI=e&CcXv0V zrNDtssBc*Mp(KC|ev}^M%j14@dk&o@t|YbnvV5z;Ri9+~UG5Y4eE$?AimK@=6Q6oI zal41XZr=x$yb*$a^4B(m6A=-OS-I$I zSSNE?8ph+Hjg61r+f%^nx+5UdI#t#=lv6qI)WVj!sw!+>PDG9%t^qmf?f$Tv@b;cX zQdL!ykIz`q{|$etTJik8bH3!6j>IR(_75-rwh^y2pr+37?RcIiOVy75Wkj05wXG)% z5J7q`p*v_>=Tw!s&c9}i-RQY?b;WaMj~M&muv!+@y2>3RyJLR#?SzH_1a@P$Lp(P( zn3p`LRFBVnYtFUV;^v#=dA85J%miSsqUc1?xG++T_+!}3v(E`VXA6cnr{PsSa;LnGs=w7J;T9Zz@=Iot&-b(Ps?JE z(roU(i_b6Z%93XMyalzH{p9lXjoVknt)j9iMQ@L~+|B*OH*sDE&{I|2rE8bIOwDC^ zkB!L$;N3Uvszt%u@E6?NbvTE6kf|BZ&c?muPyb;{!}UOu2Hcpx#SxklcJ@TrI61y9 zr8{Y}6Z)HD_gaIBgsT9A#ve>m@CR4*llS`b-gwcKzwH*5YR%;dg+P7%RHo8JGp7xa z`8C_=Y}@Id9yjs8RDp84`!=5&$i2$glQ6SlulE-J05HXPy>Nh&M)0#@S) ziz~FDj}um)o+O{#Ek2-2AKf_Yo$CacWI3QXE4bom7Qo`@uEfosoy&pk>X-N(bE)qY zq1=lX`(c#)iuV@4B+8dPt2-BZQQ9a4kBFZ_XRa%-$p$CbY> z)LE*`Flg>0l>UL1rd|Z}TQxRQJPN~VTcvcW3L)|VE)T}b^&Tisdf&%u&v)H$v3;ST z1F!&SCpF&*mJ3%v+XEYDRtu;xUpZI?bIMJY+>JQ8{I;qIbgY(Ux@D{OXJX~CPx5008t`fmOSv*U;3+4J-CIngA z_y?X49b4sNtcCN|x=YWRsZYAPQ>yR0z+t`a3UzPH85*o9E(g|U$YEBVCYNbjsu3j3 zAcqb{1t0au!u~%7l6ieSr6~%NTLyMjXT%s?SeOk1apk$^3eW!mzJ5@+q2-@>vYM^M0ZM2hjE~53gKy^Xqmz75c7-xw(-xb zwPB_#M9{PN-OvcHes$(u115uGM-D70!3JH#8M>bC!${%0;%Z--Dk39I_Ek=gs2{-h zYq=)P-xr3K)I7}Ws(SOrCmDqHcB=^ost{;0VoY@1*mG-V=jz+ayu7^HyDAf}aY>pT zQ>r1F)trM|%5grnc@ZJ$TyWm6FZ>WU3YUA~(2%Mh4uGUfqXlcrD&YIP@uEJzOY1Wl z3GPfSQ*>c)g=rOHT>-1vJVO`W3`+iVUR+zNp*pUUdshw?V3K3cq=U@KE=_WPfssf6DwN+tDNl6es$%Wha^-hz@ z*q27{047vbX&dX`@tP$XfAB7sqZ2JD3wTgo{AwqdF_wMavCGI-58#(z*CHgcQf_aH z+fFcd1MxfYxL(K^O8c#5n~+7Jzbyc*(jZFy9xVKOHV{YE8P!$mn^U=bK07I-_BNwWSYQn&Nnd7FHz;4-O=vz zCSo@dLyW99q0eGiX@%-3;4j&4sIkOM$sJ0=#)J5O_B=l}eG&zG`e;9Y4MzZJ&&nCB z+ZWUkz#sh@uE4MDU3|EP&4K3Gx!kIsdr<+pJU~D3y@TF^r^8x(lLxNHc1{z}@QKM4nzs+VJqZ z?w1!DQ`{*%V-qU}jW{vq6H8cr*!m4wVF zF^NU`iDu6x$JcTTj4GEzknd4@b2Vp|xWJz(BXP$)yhBr^po(`4)8K8YR)GtbzTNAW za2-J`gVq=GNsC9dPY~%=sR8`u1Wh6bez8hoe0*22Hrp(_25|W+M?lR)IY-{yd=TjH zkU5V<=y3H4-~1V{%9(PR68YGpeJw5NBvat^Ou{P8B5mYzjOo6}$1--fjvI_x*Bb|y zC`6RXycK8O7_~TY-_7r-+3&`gyUw|AFVqUjCFDdx-Mt~%z_(2}XXJ9c9Sl8>*bRc> z2+$kQSST%C3RS{)koGlNMy{QSo4S-!plA+dpd!

hcM=Y#J%vrx%?M`_QcX@(WqJ0KQ;$8q!g$lr3)PA+joguzWHXtr8)LYcdPKDZY@sG zJrykR{u}C6f{F1ZOp9hiy_Qw;I{lHaZ@G)IMR(zs>ldnljIbvx#?PE{ByJ0C_=7r| zEf^f2Uj!nj=6@jVyupZv3lB{ScJ_Cg0G6^N*fb4E_q=gG{5?!pXguO{?Y60f z8EdQ8k{~;tR+{-3<=5u*p~?SX?XAM%dZKSZ5-bD)Atbm22oQn=_eO$iaCdii8c6Wq z?vM~9XyZ=f7Tgi)mpVz0Xh=kpU?zt zm)xR~iw~{x&zCJ=oGs;(*`o5bj)!dsEjmkiw zAhMF~m{@tD|Cb9N>LxGzv0;TN(_~W6<(I<(V2EJfgvyJ&xF|WeI;#apC9q1eEU~_= zp%7U79fSBxxnZjB`aV9O$q3>pZZEucC6*$jqb4V5b-BQ{pI&s%9eGC`_j^%$>V#A9 zry1cgjL^c(qs{6`rdePaVGad_F?~*PYS>2usw5B=xAt?yyH}A_$8I|rq_>!?@PLZ8 zzN20$)jz$+}04=8UoXGw6D9)pZ2!k z1Qpc2`d7T_cn5NME_rDHML0zjA-6o)@J1?kg8!n00+G)~J`xKN0_+C-d+Ia9Jp;Vn zp!`sC$U&!K#N4^K@H z)|_J&PIhd3+*?A*vyUlw+*g1 zwvs*S`NAq?qy^qNg#v5k{}NBtDM%-w{o=rM)f+CZ$;~K+v6rx!nL3th)cC2eY!sVf z%EzsOL$igs*y&N8Sf*iJe#QDeov0{9lUUn2fx<`_@aL3RGD}nBP`D2;zzSJUf5zUx zZ&*f8+ulX6PMc^q$Pfz&ABwl`BR^|S-NqB9e?nFDFsWNn_3Tp zP!ZNG@=4L`@7{Zb5M|JBS8}DkN^?pgRZq{MSNe70?}j${9CU5A)U~}^=~D=#(-}JK zvYT^w%W&yXtbN&2k$kD`7I^#`F*X;ycdD8xhmpm!I~%<(rPx}r=T#1@T(q(@%I4K` z%{42VI$*D-R?N{wV8Q#j7`9<`u88`E?#JGh;Ex0EOK+2|!ejQd&Zi9!HQmQ5;sji+W=ul+nESmgw!U^Tj*FkML~HZx*r=wz*}RuN^#3`9lf_fd9%n|*XSr#PAy zIiYSbQi}(keZw|sTZOsx_{h$Qtm7I7TI*P^0`1`wv2rgt(QwXmIrTi{H4KQV4WJ#= z98!e#1Xb~C)2v?DpipU*5^g{OO$NO;W$Ae~E5t|0?@KpqlbOm2Oc`ot`|my5XyGhi zgJDRIn?3ag?0G6>c)rZSk?at3UpP*CrM*67)Gp%v$7UGT~No~vT8OnkM&8vTri=P%E{o@&%lBs;E zeV~Bn+=xWCASwgBMdyoUpfv_oVszv`BsZYiiH_r_Gvj(T#Sl*YfQmc9R2$MkGt^`_ z&{4Z$bl`J501(?eAbIJslS9H3q0&bkz2KQHf>6OHXzsb%=PPe_y7x^a3)#EEC{!&} z5kDmR0b0EFPxWBeAS2XVJZx>YOQR_Ix#s908MwydQ`@T&^7@giqSy;eZW;GlA&}4W z>jPXI%q5T@_d`W6NO$*q-rIM!sb%peo&tY68K~5|dCy9oTAvticwv2H@?AX!!axJN z(Dwx!)RwjJ!%GbKR%w1ThWX;bN1ZSHGfJ2rAAjcpJv(_$Rj?_3n_C4Mi0fD(TZ;z% zwZTKlCpX&(Xq|9Dj6xb;F)mgeA6&-Z&MS(rdSi>AB2ED~?#irGLBR2Jw8CEMf}s6;KSLRqXDrr2ND zenbkn^HSsw07Ha$q(Iv7sCYn|%=lgR+Bhcir%Ie%=y~qm%ZRZ{i&pZBu(iarcFv8F z7eq_T!_7nY>(;%0fz!nQLuR>D_R-5QZj!n~%Oza=1k_{Go>3*x`saVaIJ^AjAlwUf z*KHQ32w4cm{_=~ePCQdCmvA7QQ)U3ItGAYUa5lB|giVd)=$DuJ#*xK`ntd==Nl`9+Uq5EV*xUw8;)^jlY3y1+1vol;+mcTkN03fv2HgG1sK9E7^p5g;!tw`2gYFW?bggtL zhm={^)p8OR&_+5$c7ZV|G(Vk=aT0X4IhqBtV-EyD<{Hh`@+DXQ%6>Gsb?M$xp~<;s z&xZ97Zd)f@@<6u*bBf?8X%Un{!b?_e?otp;gB4-8MmtpURB=y@3bNcYx4jBLvR#aj z#-is4tkrL7-zxgRm#=KGlUROEnPR?g^&vo{<_l=wxF5RrH-ehT%Wvuo{i1Ke+QNd0h@kQVC<7YC#lk?#KO3T0xZK z1KcXmt_7Rb^B6J&OHK2o=5h3PArguQ69ua7d1DhGB7iem5zMDQj=8@rvca2O7AGFq zrYDs88uwqcdgfFkE$48O$`K zf%zwnz#zlzcT}60b{2KY!E*Y-bYkVI4I*ezN8B|08vR+{Cyi8enKQl4@=jRG2{L>$ z2K9jQuevKi>{>i(l`@J2NxdSbsA6z6UcU~h8`t)5b<_pbKVqi(covcd&UuSQ-3j(S zB9~YO^?*&E7I;94zs{0YDX&N5hPXjCxIg9_iX1MQVjO7iaLKA0- z(aD>rwv5jfSlDl#)aJqu=+d3vqCeVj;6ZqU+oE<*Pq!7vfn4-5s8}})h_5|BfxMnzapaxgi3M9Zd`FsB+t0seoSfocqSmC>&)l13H*Oj^O`=f`qQ}!x z3K&0U0+P}2qN+tnpS%QQek-8;Cg`v&mJN9O!8Ti+)Ap_Pd^|s+b*7&2)=T^p5e-_n zVxhqO{XJo@r5r^kuOiRo#N`5L=06_IsS6zH7NX2)`(-%veDc<{8ujHPzZL;Jo>cp^ z@;Ere{WAn~=?VPe&_($U1zFCN>Yu+Mjaib0{}I>!(bWH5=Re~Ak%j%Y%i`Z9lIDH} zcd&8N9HXud&fLAF3C7YNGZK1WeWQvZeX8U=URqkV-kNFI(;1sIWINxuJM75#Ulo@m z5Utzu%6>o&w)p_05u+n@jm}5eu>bwNc#LB3=_IV|xGUSK7rgjPRNIm)BKN51_ZwlI zB&zj?{G@Rwj06U&kH-Lb26`jj17Yl5?TEZuN#dP`ozr2NCm_$lKw&ma#mo=L8^}?p zB`CM+=4Z&XUiTz?G}nAhA#1rE9ToUUrP0Fik)r?`@SL-H z4@8BJYR7q7j-h^oXaOk<`c2?l)D#0SfgTNkP0Ve6#)V{bJAtel!Vs+K?Je3c=N`yK zfRY*|S8aTFCg4S8F#*sxt`1Gb>mhH4QCA3pcri9PSJ8~=Qn(*et%Dz z1)VD2GfK-oy!~h%P7{u}wY2nNU`(Z%Ss~t^16_YLjgOl?D(Us&7j|r4P%mhyH!W&t zDVexAcr&e7`5FOdoI30VxXHN{bv{ExKjiSE-;YBY;}&bHo%9mKIITFLs&9T9R^vd) zMDhp`sw(Nn0T_@*ZzclQNl0UUq~f$W$jZgRh|!IAjV0rJ)Ax&XHA}^X4WMAdB06<& zBNQ$-Sv&Kyw%fd!vU%fIoSZ@;XtD>S`Tgfh(%|P+%7n(o>IC_TK1m+bm+z84B)C%Q z6v!AZ2X+-;FdCZ0TQvuzm?5@rRydaSJ?AkkB#KK%hczG!!!!Cc43FQ#q%$4 zy8s=D1=q6%3+akwSy^OKH=l%e4wE+i5Ic;>rPryLLhZIj58IMmQBwDdWA-Yc_Wcj#UcA#+P5M6aaU(%R>6+F$ z`}?vcYYnQcG(u`(O#Q`_3(pwpM?W3?UGXRQIh5k}=ry|@@Nz5Hm|v5nW*qK_ViV2) zrc2gPlc>;pm-M)lnQQ3c``u?Lj`FlKqgKPrJe20=J{q}oJq(A%9jFwJ&j_5zqna!5 z-=r}FDrnJDkj|8SSlmEu4gVusVbz0ateu*=AZ@g4OKFDcCa_)5$o3}F;o#)XH)$0x z&6w|C>cU$<`4rBAkGK-B2?a{hw_8n}e^RR`Um}5|g>kUsVBllnm!&`$FbK>%vpT`f z-}$KFuqZxEGo#o2?3ka*6yW^;j=17u(rKVruOlfUm6L5w}oQI<*mk8q5q6Hbm0ab~~QjWm0}1#6!z z+Gv68$4ocDrCgk7>VB8+Q{pNB%dZxM*FF$wCar6Ix4h!GD5D(3db}3^-X{pL zmP|L9_7Ph}sp|dv=Vw(6@JoZcY@;UwiQ<@xyrSuv3op7M4xEHrB?wpZ>l~Cpw5ET0 ztP=GRyyw*nGCzRMp6##c;KOuz6Ox_ z*AfTRrZ4CX;<%fW=CNB6G9i_Pik>KN#>00@QD_HdWQF7iOLQNtP(8FoGR-#>gnh_h zw>Z||sNgoEJ2~)$z(r4KO<1BY2E19!Fcj#3>1m@)o@tAgq5$2R-S9=cA4eBkl`W2F zi1ctUby$1zdu3$>fj~H3HZQ>d0MCv9?gzl?nn=L??d8Cd2nZx%XlVFwe}8&@em6eg z^x~RYegG?9V>ZRUNPunWRqEeY?Lc$k9o+?*&5?%L-_=P^_p0h) zpE351@$Scv_dAfiWYr*`=Q<>STv~N>833;yg^8uB(tHP`uhz_CSC2O^=ZsErjg@(| zlt;G%ve@2GXxfdt^|e9LSMv+ujdG7PxEy0|HWw*BU!=Go!u$I|0U2 zRd}wFuID|PZ?Q=>oE?#u5KJhl%o9Wq@MRyS7N?9s+*^6f$J8&P$fRdzPob!Av9~Xc zsnDK&K|25Cvnsr&Uqs(_0v>M#i#{fd#{)f+TlZh4(F`aY2k_+MsX_vsLdMzz>SFv~ z_C_{-uSPSj(X``aeE&aX!P6#dUk5QDUgpq4SC`*e>a)lEdNU({4r$b;G&+Sb;F9$Jv4QU< z?4LVsM|-8XYZO?^Pj{#)=bao`%baWR;-^nBEu@Zk(<$aMDXlvhIn!h#SW)`+SJ}2Gd+E#MRq2X zU}pjsq{y@nE^NKKXqXn)CEeAUM$d2Jw>lgu-=|xRVI#wCsIt{Qk~Y(!)L>&7-m)pP zN4GAb`SzKMla1~9jXTp)aj9HpJ;$U~b7LHsbhuUk(ANV_v2U?-)%wp$tk{T#EM0R` zsO4U!B{$TnE1NgF7(7GV>qhgf@X{yXjS{Vh7|l-AGlaREa^_4HLuK-YymZewbFFBI zpyEnQd&&D4K0I?!MMlTul)3!;h9ZU!x`H0{x|myHPtJ}&aZ^b;pogHH<>aLsW|j9|SDv4yXU&d zIZXlkR(OCoo`OV(uRAX6@JS%3%T9G%=SE&-_U}A%A6O}4_tV34$xrG+IMW;h9j6M*|*oe*55G3HuwjA> zX38sqc&#(A#c!@*?eAC;LJMsryK6ZI zmSj>rbyucn8}$GigO_MUC&XbIF)OH%chSs)%po=oH5%nW2 z``N$tW#`9=#{(P#EMW4Nw`BbMTjoD5-hzI^@}4(Fff#6IpDbcpQz2CdF_S9DF2`ir zPGxBiiSXoGJoORfiWoXY7cvOj1i(+Paa*J2mVypFE}aUv8*AKCvPCVKdq>;6z+v}j zW!4Uf>uCk~6!m-A)!S0IBmyMAn1&-Ri4dopoLG}V)P(&2J_^__roqUBlkJ7a=YI5* z`^57Gy8Q0Ds(RI%mj#pm&CXfDP@A$dN+`JK^Z^?=wu<>hK z9CvVF2kXVOMslxk25i`4ZVph0n0j?c=gF<1xfmI1 z$o2*l$(hz%Angc1q}cC&tUor{rc&mtkcN%B`ZwCG(LUgxP{0J$4WJR#sI&E;^F8$G`0SYIT>&6;Oez|=z38{G%#xKao!=rl63VAnE%HA&;NNTrVT zOFODt1!v@zwpGBRa0e`S+|(&CDD9Bj<_PKB|EGw@qkzccPy>6^B0>KCmmR6-{@84! zX8ZrA%YOnOk2xm*|5NPWOY=^7HHMh9)qq`^JlgMW!UUJURxf1=<2thDAMRmVN{-hX z#%Rv3{_eVv|G9i_d~%tCXGB4Xu&di;`XW*><*(jD&mk zKb!B8RLfyP`6(L)Z}NWeDqIeamQp?!THIl(Q)Z>a&pfPS<5TlwxyBx9zUN%jx{;gq zlzr4Bv0gKp04Ftej@zy!Smw=x!Fp@IV)Nt=clMvmdWXY@w&d&Ca6)Graw9=N24xk+(p~S)c9b%pWXVTxl$q=~Oe<;;yWaAWJ zEaWx%$9M%+8%QXkf+#9;%yc~q{B?8B61PG~mOEA_vLkTB_{Hp6Fl}qkbW6{ykI#d} zb(>>$R{qVfpB5;Q2sojpEVl2uc?qb2hey%2a^S%9ggTMK5lf72A@y97xQ86AxL3c4 z?^|Vgyav|8xylMxIsI(Xr~;`s5&EzXB>g}bS=hNZZL$d7R#j-^&R482TlxjN;&amu zt5b4|X`Y_K*q?~Pi$Bq(l~oh~_anzz=rIQ)TOHDlug-~BknRTqVe*dG(qQT=hk)^y zch6v){eRPuV`|WaU6Etn4WW;qH~Z}y7$=cUMO?*tW^}y(AR+-gsky3`iF;ykQ=20A ztAX7|#rNIt{)e;B(id{jQUavMVm}||mcDmBuhd4^&Pp;^xaHJ`z>G->w=+}Y@YoGz zyRz!Uey_FA!ZOrBXAO<1`nkWSV6Wetc~<0thLvcgUx(ejY!lB7 zviidiqueuC#|GY{@(~K{^l`0iHI~W2V7d~NffxkzGpL9n1A;`u;$$@pN(Ehn?h*)B1kL#S=8#V5_t?h=!0 z$w7D*3Fj**j~1)%bsQAm-QBG_agbeNa1drmv=vSHSp_Twm)U-IHZ{XaP2h41S;8+K z$o0#kfrqMWN~dqI)T(lp8}xc-HSq|*hfXIdh*y7Q;bsk@CNUoXtJ!jMemPMn(wE)I z^a_Onh0?f?sDG22{=Qs5e(|J|axg-;n(e-~zeSYG`#ECpW34#si&vHj)sm1Sl4T$T zBNqm1ud9@0sv>%wTgEB(+uE7a&Of7^YR>81ojRZ$^-N8@`Vxi`Y6Jagtabmp2-h@m zm@_RcjWbjckfTx!@=m@e!N;ljEc){Uof40j4y4#XuD}9kAgdC;kd7cHLt|&BIDl<6 z(Ldv-E?S0OO1{SlV_B+#H{#Sg_J?gB)`r5=vmc`@(gsZu^Sazx09tt=D+&apU$%Pv zJC6a)VA)S&`;43#&&^@aRu=L2%T7QBE~CP;JuD)nWj0|nME~>C{@N|`kH1t>*$W85 zRh*~{Fw$^OS5qpxYOpaXLCl<#4rEt$u=*#S@mi)vE>6N3ul^T+rJ)O~PsHqWW zY5)F(7@jh}d!nrelubGA@5c}xFyf$uv+rd@*S+J5#*E;m&0GcRm)nnVC)qvZSK>Rh zq21up($)nxk!eWeWzX{%K!S>yKzzA zg)K!tNX)xP6-fec7GZqw>XmnqZ=E3PQ;tyyMZvFqC7C@>pCTxU5N%emwMIg|gS=B% z1Azq4Gu&b{xQ3A>NerzrAp+u?+ca?iec|60ZKViW?AX+{;)48QB z;1*(VyhnVRM%&Sjdc4-h!#`rHQre7F}cSFJx8Sog?< zyVGwyfpbc96Z9>o`e!l><@9>HY_uY-T6u4Sydyr5*xPMIC>2w~LofXk_{w!&-QzNv z=|y@2i0U_E%ipQEamiy$B%TWGRJCe++*B`TxT5j+k8(KC9j_f|t?l^69B*y!e*0cBEziIC_FJL7 zAwG9>D?*-yymIG`h7rC~)s6G}qslP*dj?Q~ z6VuA)I+C1d_4M%fx5Ozh52b~)U|iT?X3G?Pe`JEv%2u@z!}mEzmP{EB)tArSh$E^c zkCFMqi~FmyU{vs3@XwyDvB{I;j(gABv!i<>s(XN-pc|m$;Rcv)@@yO32T`!$9->aH z9!{}J?5DRgQR?L)8&ekvyy5Q0!L%J^Wrul2?U`(Z8HZMa zE_Rl%BJ?rOIdu=(SPelNwT@W3vnLItBOmyu_}fa`NdoqM2<>D~THcVl0t?yL9BYff z;|AX6qbnflvpYcTPW3$e3URt%2Hy?Q%a2(zp`toyY0MWp?2ikc# zqeH6SwN)qn4di_b}L4-b=WH6szZr5IWSYkW6U^h&bvjyo?3hd${=Q zp9UJ;z;1STjZXps!B-QYvtfy&*U&6Wb8ou?TgAcjEhv; zpQtE~l{oHpa*r*cjrx&6fWmd@^8^thQa`%s=}mjruAPEkJpS%9c6E75SgU7)@QlCP zO%^Qb?;u zcqM;hJ>c)oXuf!k)|rx)Lx)-eoGH16ejy;HLY+(bkquCj4G#r^0ugtA<9-egGbsU$ z0D<5k6C>7KkJqzYO3i0qvg_KsU8l6~uwIm8<$g@GwYQ1Y{|x8pC7imRDX2APgm;N1 zIso$h$RjH>DoC3?=3;{k>}oxKy>&FDdjDh6@}bU_zs2w0@c*dbB%; zG%%i&h`yH74>V>OLu^16XYK!b0brZ0FV}G(9ZF_9n&JIO2{TjxXrh9?biS&<#oubz5bWkkBn(`k}eZ?QMGR&Th!D zFW*yOi11T|KKrhE;GjR3toWAPspo);YFE#vSxcnBrt-8o*;g_>O2ovs!8`78-C%Zy z)X`4Z5FDS-7{WuKB~Y(P=rbD6{}l0@k*mSBqGMZHpkt4d6VF`g?gxY@05~ZS?6*!( z?1S%IGT1t`2#|B%Y1?p#PcLH1MG;veK&alc(SW`H$y4N_xPLA(rSIoL(uV&QPLbqR z5)z0izav95)i{~twK;c#Z5-CNQr(+E){2ujU;8*YJ^0)mX6egHGcFO)dIftt|L`C! zmdq;alcVtM8ELt$BPy&leW{Y>w8)+4xHYBf6)TruzR~_GH9=`x(QV z^T3RcEvikO8pN{cUgz~8^=YI8nC(4;vF3_*+xnRs3z&O?Rs zyya|0Th-=0sybf$ZKQ`Xl|#0^xi!tXe+^mWHqOiS@Fk7fh*(O z?E=WtGMO1E@s0JVGb3KIkusZ5oqwgH(4~6aNB)$^wUFVL_^QhdyN3z6>ybm?y*P8k zkHn|CQ9hW%!`9qc@IXwas2w)^f*WfB#OKYC6!(xXqEq+`3Z<#WbQA+%9hE)m5gCrU z^rXpB!C$mI3@EQdljQ_{(eAzY%~TxFg|$13UM#mNyA8~q=RO{%fHlW0>D;tfs$d+N zJl&%Eo%{+Y%3((1bbmotXIr5>Ze9zd@l)>y@co!RyahUU%5@q^i82BE_8J@wkKfxNh;~p%rItj5F6WH2E&vk1WWGWu5A!*W} zIo1p;;uE-bwgXK2A&L@XS+2(yo`0*D^T~LxIcv{NrYY&Hl1_kPkl6>&H_c<*hg7$s zbj3#eb`W_opIh^!rlu<3b-+;-0tuqZr*PPq@;A?EKK_0Q`}rOC`Z*9` zJX7!VCkYSF`w5=+_d3w+gX!b+Qw*ueo6}EmG}5!b?JjXM0lu#vN4r%hoxindSg=Sl z@LXV7kVK$-?_ZQgPLq?ry#5E={ZBy@ZEhqI7*vn>zp%lwJb1~%nCB?y)>MiT3DP1Z zj*Tel#&e;Kh-A8rNdLz(V~|kc!4F^x1DzD&A97d+T9sWLd#>Jf}A-Oa;hbc)V+OFLDs`oA|`p)MGOwU1gREp`_MS`W-2zi9=Xmz$FQ)1EpsUl)q%3h1Ot?GG^W6#x9)3wv7 zM0K-{{zf;SZAP)HVegD4w0}}tHN~T9zDHfKnj^<*@UPubn|OU%g)2kH3dV_mi<$j| z!_y#mOu>PyL8zL+Kuqw#4|`;_>{?|EHB0po4BtbWT*OmaYjPxJXn+CD@H>&h zUqwKdWP@~UJI^&sHP5?<-OqJwWuGY_!X`8Ipq2>K@4)h@Ndf}7-ZSLEhEEs2_2RYI z<+0ZlMaWCS4tra4>Ekk_+BU;-(3MoP8DlasGL~7M54~5aQX6q#Yf1;S`H0q1w{FC| zcjcILO?wB|)XscoMYo;7t(7aNMAhTNEnPdM;4WKQmj&l0J3U}=0lg1YzjjX4b866~ zTilx|;y9h!ojWTQSZ)4ba}7WveFUP#-Ma&d_pVz}t=BTuBo?!Sbap?5mJB)pWpz?* zja*DJ2a1`o$pS!Sj?m@1`2{(q-;0Jc-3>?m~=E8 zkXm2r;E<0jO1JwZ=e*=ieiyoF68a>nOk)P{=6Q;CNwyAGLW_+~;(VDR(EZJP@>O1v zKk{rlB+&k=6>f1_FiLxcy^2?n!r+5CSp=>FNpM5!%=Qvf;lzF+PLXhaFUDywwAiKg ztdnBHO-bH0-_u=DlDw6~@b7oe-doA1i+jA{pAq8q3yXW#?-wzVR7a=pGg)zew3;$yn~4=RT8>+sCQgK(AN!nqg8tZ8)Q*^>wc$SU)4}LYl>$=NGV) ztguc`6j3*x^3LZ|eY30&gZjQT74W|nx5KYHPMNHYARm2g@=_FVMyp>TJ_&q{-1?s8 zKBi91WR>5=0aNpu{3LK&Zhim!H$KbGbFcO33%;BK^YlNQ*pt!}%3aU{ zQUpj(cBwE-!*(s+u|0zChhhlZk@aHDu=Ng{^hUhzVT)dSV@S}y_~+2jiXYs+#_M=y zX6723=xDWlSPMCf9F)?ogbj3~WMyawpx71z16f%}W)U}6C(X^xON~xzEgp8Bp71}D zKM`Rzng+t0KUJFF=bwRA4I}l168_^=hm)BcpN$V-EH^0 zANK2**9LQEP=Ox14i8+YOZZZ{@4E5A-G#)Rd(Pv5vENx2t@@qQ6^=^Wrj;H2ytd?z z9qvr_E3R&a83=RJuPnAwDaJcaCgb)3!S2^J`+G!9bGe0G%oPi3oaL*@%ED}YYSZ!a5-uQTT%_CInF&%CMO>c(ZA3r#X)V5up zMa6;nPp+^*R1feOAbc!cGLh!n7D1H#CN)L?N=MM!aE#yF`nxU>kr<9|p9Lr6zGouF zqCZ2AHc6M@Y{8QEAC) z^Sut}pgk!mNnk7saLb!gy8pD^DQ2$mC-4w&SF;Y3jd=Qxwpv%UTO(itpFq2`Ko3{P z_n?QB`;9!JBUW3O-|p@bKWuoR|98G+ZM>5PL5^nt0iF4aA&EkimaLqa$S*v=Ka~?y zRIECe=ARLp?o~>QGe@?-S98va)7N}|G77i{2b|r4_kGg~jB<)g3=5?>PZoV<>&cE} zY&{&^YzRoVUsU{wIeNavmWKBA@tET}C(Pis`L!GCu_G2TTy`*AC=={Tq|K;@J z_5Fu;&O_xlyo*-$q6`^awi)UMMlIruDP3-hL_Yn*FgrW2-{I`s1bD376m|GK(D|cV z6pU2Fv9du2CXYRUj37Vnl`7IJL~4#8rw&U)?xT2z`lFYDH`i%vl(cJcDZQIWouyQ4fJu! zve@Xh*eDbQzrSA>Yw!7)yIS_<@1H-v49C5EeSK4owH%8jGgx-r!0J^QsQ=kh9bv4t zNc6Q?E7P^x3Ic=;!=@+qjSN(cyKhgX=HZ9QSwmE}QnTdbFQf#Vv;;?7&*df zYv&T@WQfMYZe=wz_Vd7HNbYa%sNV znNo|6K|DMr4)>+<<1Us7u)}-thj`r7?=3I)m@)@i3*{Dh?;n26&4c^egjJYJ4Jr}O zbm$sOfSzTyn#VSlS$C$F^>J;V|1tHAKIgLJ?hGJc6rafSdzhXgVpM$2L$61gHgRBJ z0GRmBB~3q3nX{SLGkaDf#ORJ{*Nq@Dbw#_j$=Ty|c8uDq^qI51Nt_L>s_HN`uaz##lYB9e4Lx1AWPX61C*tEvxFaJNMbOKwl#IBDpwAcD}QY zjRi0l&<<>x$a#tLU*+s4Wr@DrEu1|=Bdfy2!+HYbY*_3I5I*e1Vj=}$DOhp4%)G=| znQWhV(Oqf{*GI$JKW&iMIDfd0pQxS6fmI27hvVJ;I6bCii@i!xF_X&A6RrZQ0OW_n z!C%sI;U$sDgzm$wmd2~4TbUjLM{dMG4j+Wpl>G^ml1a~mJ9pUs2fj7t9iov4t{S0GMBwGr5UXc57>haL#u!Lz(0Bj^1 z-3v_QwlpG9ul1CrY}YuRV+!_p-kypjiT`Q`mK}s#^ly?9Z~h=pJ3%fz*7@m#SmPVceyt8S*=uI|A-X!?uia zl;(;!L0PlioHnC=c`^cFC#Nt6ehTBjkjr@FK^;X$E&@wlVAT!qR@=i;@A{46n5`+Z)_3jjWR0ZPC_nL6A`TH)8V$8&2h zMBzh#b)OnG|NcGQ56X>rV@Y-(lwFUTm^z0He8(cJ^&^4Hg(hZuPhD7z^)wfbXR|*7 zUNORv)}TiPA?G#7WY5W?6nbA<>GJs_o2;4B32~9|9>u61`CjaR+7VG|N}~@~`4Xj4 z3Z;e7d}{LrdDQi95bJ)uLd`KQc|U=XBa8kiy_5e1;d#=%B4@?Jqy=6LUOezJY3rwd zKwPlD3D+M!1Z#DGqovWR@mPdD@pL5-XH{YLX4=y4Zj;d|62H-E;(-G^j=*DQ@9U;} zq32EId9EMNz}*n50CJ*KQ|!p)!(Em<4Hd>xi-y(T;L(gD!zu5JFtZNs#m39nfy+Am zy4kr^0N1k`W%w7UpEEp$3Z`bhU3_vDaI2pe9y<3)KMF=}wML9tX0uaLCw>zR`u)?Q zEVR`w7frDe!V#63H+D9^WYY1sNr8}xHG9lXsC0vL_suD*+3^vVk@fGKQ^7H?&r5fL z_5L*(EKR0s+Mf=utZH3;4Dgk)?%X9$8tv5?& zy&bBTePsjR5m7|Q5wT#d36St6wM7vuu(Sn3v19mh?+xKBl_RonhsK8AV28NhfOuf% z{3zIDu`-j>BE6(7q&P1D=(2JB?l=aj#{%`z(xBeIaa(%5>Im;+JIGN!-Hl2;A|@FS z+oFtP(;|0TYFJc(r>sqr?0Vu!BQ~FH4!t|}w42{~cMQjLOnnf!a-*6X4`T@V_wmA<3Yj$?h|Ky}6z_ja>o^Cai92Q;hAgf)EtU10sUJJax<^Rw@ z?6zl4^;l3CF%=j$43g(;TnZaLYrbncj`ww;xkBm@o}8R71_=6;e?*?H0WEUS?-tOQ zo=I~V^+7-D4}vBEJApOFb+>ayi}K3y&v-misE%XdDWP}4w)&jy=KMO#^M;K|BQ?(H z)|IwSAKoI&ss3&(@Oo&oc2s`D=iy%HdUvet#CWmTFv>JD3vq*etRm_^OD$>qOmd9+ zIN}_|0~<4sNxP2>7I`v zK^u3*yOI^5(QpHzvo@!;EaHE@n;6Zr!$AIe2>(BM&qJ*tk29;?`n?g1k-wYaq8O)FfGpKpJLM6t~phWqm2_rEKLcUGD zccy%VOhP^;!x*v8jNSLT-s^hb^Ut}S=Q_`Qo^#*#bKSq^KEHGB&EpCselo7Il%ETf z9?Ku9^|rhTNxt7_CM&bLtk}{PhcSSu`*qr#)JQZQG$kl}-nA%6LM-3ql{+&KsU3Gj zy9~3+)>fD0u2&V%^=X!oG~Q2(^-RwAywBiX>7{kN@5A8D}KK;z;WryicLx@>|_pZf)?_w^8kgKrT_Kxwpz}_ zN}HX-$$RbJ{2{kxqudxQk8Cx;M`cfv{N6o?`9oRv8;h83y%p;2fF@yUl5obo%wqG7 z#I_Y{Ra(vQ)P@wRC&b--9gS~WZp7@XPRY;p)sEajiP7V$Pg0{5j@UjyoeHwX?xo^3 zpDvSfA(uDJq~;2PpIn3n2eoLr;xw?|C0|%F%q8co&@Q^oC=-c!^WO6wiF$VS)U3K2 zX*mC(IeXW(Jd&4h^LE{iG*j2gI(Oc-zX_K{m&J$Bvv^wFr9v`IwgZp$ezAgo)p$VB z&RerkQ<iCDcW#Q6$7yIY>?qn*t+pLEir*^0%TC z2SbG`VmFSpZ`E!UhLd^@Zrb03(Aj}YXPs*>aNd_wd?HLewdyR-Qn5SU;h5#UOwLsO zqXD+tp0Tz_suT7_0DwLK|BwoWS}Tr%s5iJfYx+-fWk4@vj>?=3SS8I+AG&SuN!izW zjJhxr>%mgW>Hnvf{x_dgy2Y2Gs*PfK(oFFGEJ*jaYNh^(nF%G4NM!OUV%HnSrb-yw z;!&lQX5TJK_2*B&(eG4vcy4>Y0Qww?~hF|bDl77mrnpJ@G` z zh}&zdCTv9JufEuvZM%GaOAncGW*Dxg*3_K{Pw;z_-|~3jZE6ulkO&GV;b*s4nEAt< zVSPEra%dSw0bccKUH21?WL@%Ai(f2xY4YzCZO!bTrsuU?v5N;s^OL?km286gpz`X2 zZ~VCu1OhRCg&(#J_8j?U?CNM`V{oEEm;u!Yk`|GZlM@vcRReWNn-z)nNQ%>e-*hC3 z%y-f6=rzoH>Rme2yJKJD_d>%fV+}5q$Jtl-otq1y2|R=C3%srnwazwcdH;`a299Hp zJD#$rNglhY#0pW&W-|Pe?^j*kUOHEDr?52J^R3SQi9M0{@w6gbdM`USZa!*f4Hjn` z>jD|s`isKSdOWa$Cn%>)0420BPQ8!!7LWERDR}*C`LxRU<%BnSDmyXG-dH~V$XeP1 zI6NOmJZU0Uk4YG33hC;IS$Wr}b6ek|^yn9Z>}X6!G5gs}R`=khnb`QKv58wIx^fb1 z-f1FTiQo^wSRRyBU13vgCB_bAX_n~}S_-t08m0+-{A-#Xb5}EhYwb|=Qh|MebNi{IFU`hPdHhG3(5JU=`bv|Y9+_l00f>JN*LWE#=P>6*E;6#x%M2eNs_6p@PwTnEn2612O+%> zeno7Tq>eMl&y@!AWZy=~j1-h{h{3_44K{40sUe0@U5IPo_tgYlB>^2 zN+M^>Jp%`WF$=0e&d%104OlIBYze2``zCkbvrs5}|K7FQ`JcWPF4PbJ48I+u5{?;w z`S8+6O!|4lb~7QJ?qnnm#^SM|cf0Sp7+ z3xxCtL7NeO5sURcFUx zRpc?Q90W`cfH%oD1vG$E00JbC4u}MB2S6AIw>;u@-Y1`8oRLOBr8hExEN7jFLMa1L znBii_8&fZe3gR&5ooGFw+F?Bhi+?C3$k>RDrqbNOq}T>rsJ$zz$fgC^$<7VL39k=( zq6p`Awh*_|9ap-jYdYCPH8|AVObNGs7Gzk2^bl5v&(K;$_=sMt5K!uIJvy_?a!q4B#l^oh3ae#c!;hNrfb5LVNA&YG?_qjXP3eW_hqmrr2$ zprz7JSRNdE*sJW&p7_B1N%C;Fr;66|Ih+VpyNW~iqzooE478W(klsKoQ8R4PI?Ae& zA6h~<6Zcwn3oIbK)<`*3dHNO$7p6PeJU7Z(NCLVQPhik1^&XR)_mO4S6V{&EKO)at z4rjpJP0?_+OJUNoN^|KfG3dvanSn!GXqbR<&4fV-4FA)}N6_}K`H*~xN)duXvmdu} z*LId@UZYH(SnEBrmQq^EsD7s#Vm{waSkObx4Lr0ADI;7Ieo#Fu2IhIVnp?M@*E&dU z+Ku_ixZC3P5=;&eJocerVpr=z4HvO=h!Ec4-3tG~W6|WizuVVqT35M7A=g=yt zskRV~c3Yc-6=@Gq@6L21Z7vT`_$N2V1>9kuGkrvc|2WyqP*_Vu5HH{vr}|d@>|+PT z1x$zQhVC<#7|CHRyM``6VAI!4<$wx|maB{nz7EE@OC2OAL-C-*VSx8|NbZ#mfb~CT z0PLlW|2DvfxEVx9n!+;Qf f18WByvBOAP6m?U-gXen?c_A0hT{3=l#^u&ud=HIp literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-vpn-customconfig.png b/windows/keep-secure/images/intune-vpn-customconfig.png new file mode 100644 index 0000000000000000000000000000000000000000..1e1dd0345bf24cddd2825bd689cd8b9ff85240e9 GIT binary patch literal 144200 zcmcG!b8ux_7dRMo$F^1O)si2nc8=6xd&gTliJL-y4L5u)Ht`NPQga zyV1A5V`xVyZ5I#_gn@s4py*UGfq#KmuHss*st)F^9!Ab)AdW^>_O1-}X0AkR3``8% zwygdNAYd#b(qh7Dp6eGmD=xaH8D)O^y?u{MSBu+|3QHPxm&2YdBW6!+wspS>wnn*8 ze}K45b023*GfOHLlbJIg%P~iAqe4iTQZScoBf=qpLn&XH$5s0WJm|$kQu;#@<=yS_ z@4QHhi48gQy#Dh(|6Kl|@AqYbA7c*wcPZW`sQ&@~fxaILLK1)fZ!82Xp#L8R$@qT{ zApbWqkT5;wW%^ML@)t-@L~q}7gb=M_V`COgK!HYuFc9?L>47s)V+Uf@1-q=Y6U#sQ z9@Bx8h2(rxzedKRrZdZH{|_wz(skDPeR(;u60frrKxH!&}=Ph=qnckZw2w7QsWmnVeQokEcO&N`>SW zz^@!=(qUXNRm}SZQ?JsHjDcxxK1qpuv*UXQ|2>2}!RiWBS@wL#2DLmHd~3?-R9tau zwy1gSgo?^`|21fhml42y11DEap^*WpmhoJ7xf?03(+?i&$cdRi2O2+0?H}wX0^|eiGJ>2+n zhd*fUnwQ%N)a^xT!WT>cTErPQKRHN{fDAneHQ=PQg-d|;jFvFX{-FNGs=qu+i6aXr zXpycE3IT6C`69%Q*1u0I33egj-q!+^Sf^*?F!-Yi;{Pb@uF*VD!qn@~CrD`w+sLr{ zI{z!3XXo-rDB0F}4Rf(EUpg~`qbF@APFRcj5cx^kMrRw?$Z^&NQMt*=sb>fL=n${> zaoZ^|vEV34q@;&w>2eoxC^K`pnykU1P%UCzS(pd1#8Yg>vjfFTgY!Zp#0>{HeSZ*Q z3YCn{?JG4B0ghIU($^q>7L&U^Om%WyS*X{pRItZ6ZXU(Zzs!Ib79)j+7wc-%B#D|` ziDXpOD~w#i4L*lmd%sT4%=CUdZuEpn5F!X>Tg={-eqP+8$!q6iJssn!Lwn6bE(a== zhAwe!2*>~_B|E>t$!IO(@^k2=W9Vz_^l}Mcp%b8`==`Km&yPq3Ag-i7xlb zRiOBRJ5pOZTD*6g_#U4RVkp=OTxFqL+z|o0LwuT&q`ub7BdMg1Ng}VpH?i zmUobpwRHSFG18y)rlgyQjDgNuPX(C4{a3_!MM&Y_%5>9d_uoqtd@I1Oi8DhlENO8w zEYVM|PsgNvyvz(d7yGXWUfnEQXty|tW&+7uj!(5iSOoG%`frs*Hgyw(e`F~#%HCgi z1ky9|5wGd>4I9<#(K058(deWCiDJ_&M|m)NWAqI_m1l(}k*aD-kBJa=hCLMQQ7i`&J{d zCoKaLC9kx(1=#PXkz~$O^!DQ~trU7;nsPzb`$Zzv{-1P_KvIuMo6>T$LJ&w*lAyru zZ4#cy_$HPT2I5#(b~d&LosO_|L- z>WUvt|9NTwSz-iu8BR`B2``z;RTbPL(P}N`q_s&gPDIneG=;9##=A>#?{nOuwQ6zN z(%fO>NXt4L-bP7iCvBO)J^`UGDJUr*x9@)W;&IgqDFND$H?vnMV5!CuF4S$#Sfd&- zrr+*LoS?0}i%Ijn%hlE#Svym$D;wuRZXe4Xe&&QOLrXu?t(j#nlWWl}j!F%84=|>L zNZZrAQt0{dX)pJ*n6}Ku7*S$LNddV&>FHX~{S~Q_hg6ieLF;VEb~Q1*`zFH2yKFIF zvhEXxD9>1-Ryh`AZX+5i=~=2(neDwYTvSihg$JNB z&r{HADpC+1_vpcsiHp-AR-oY4tdfay5M8Od*C>lQ%#tF*zr1pE_#?6w^sGbT0ro~p z5kFj^+3oHeD_cT+7-dexOS->WE8)Un<^bnOzSbbZXP=fLCGoZaT)_5U-Sy2?gLo~; z#H#VuX29|79{q?S=)f}cQO35bqwVQNE*=*4EuuK$g!N7nuYT1^%fjK)0LtqR4xc-J zh}iBDP|r^{3fN1P9rai%>3N7&9#px9-6tnXyogiQt5kSy?0hs7GYJSxZ_H&&?X$Td zo}=w0T+#5z&I+*A5ro4u7jm?ZNQahTzTv?*a7QxfO)U?yHgSO70 z#*B}qFWZ;a0PB~PuhQ_~osantk${y2A6208l2~S$$1>q(_lx0I=jZSncEB|0$K_vp zPbU<`?5GBoyaKrBic~5edh0o{*z&OeB4w;izw6USFK|rV3IW&-l(IAcIWiPSOaQ8P z=yM?&sBF<(^Lc@CML9+OPq))g`{;*7oV!(1mIxss8wnS`J1k;}nF)gHa^v~Y>3-_+ z^8HdIi%=e8Cy1$$x>kjfcqY2WHSq))avzLCQD%41Z&NksFKpnQ871EcCGSoOHQG(T z;RAGC>(BbL&U)q++42h!V3tU^cDF8W5BE8~XDU6>Q+IbgJ(A$|KYkZrZa2=*i9_PW zMIm94Sy6v#DcAVM`^T@)Wp=M>0@hw5c=VkD9Zv4wWT@|0CZbaoFKSNq!(`#>gHXQr zy)3-^^(g>hz-WTCVOn7(9Tsu92%S?XgU6ekBfNuOLf!O*tWih5l6C-e_U&Z|3*&uPtht z|ADUx*@8cf{uXX-be(E=+wpX{I)0|(9ly07s--&mcB>7Q(_d?i8|los z4C7>8jtb~^b9L@%z6>lsRF{{uU6{b5Nl@YJx~CgoVJA_nNi-Y&j>RoLIi;YJ1!dqi zRY8chr^~ryg>CC!gS@xG-&$7nUcDM5J&e-cLtu^g--cN!pZjYb6ad6KE2M6-P z%I=Ps%blmhnDc`%LFK9aXv{biJw9^x$&nII>17d<6mZPy@CJ z5BKE@ZaagZ3p??*vTmK;D}~ybh*{F1qHYH)HU;^eMad2OmgaOJqvaNOz0XRtnT~WP zLi(Z1!dNK}TGq69EkfEFq?KdwMtQtnm~J~tZ5&%RqlIr`W*zHmY7aJ%JnOWumabP- z9XP7At!wCGWiU5qrg6ww_E&gZj2f1d)AzkbDx+(R=jhgcBH1S<)2uGox=1^Qm*WG; zIq`X_8+qtQ7s$CimH61;|BB-`E1EGQBH55%c5n0N?pM?2XTUkx7o#B{OB;BM+0%{X zUejAYmNg7pI;U%>nVoAHroSQVesG2y_u{f}O{gbLh?yig$bZ$3cNWtU$@e`%$jC9# zS=J(LNG3(6p<{hX2OSrkm2#PU2p1Q-V4AE{_;EslZ7)=%Bs<`VgPYj=cTVX7+vs+n z!|pOCGi93W92UY6MHpeIR(CGeLD=y8Svbb51{({f;Ng#vvfEH~`jB%LfJ%wy#vD>s zsz-0BHn&Fjue}fy=hPwRv3Wh${BY2?2T$Tj|+QQ9Hv{XQQ$ob|l6<$MzfGEe-^!D!F2=7uE472yLghD87 ztPo7}M7DM!6|sDefK9K2;f>MGc+C_G?c?Hfww0;^In$0PKJ@G=Oi7ORxM##rhNqVtTqRs6^#W8gh{K(jIj|IdSZ^p9 zJPQLkIWouR(w*3v&|)pRsYFuS=a&AgPY*yW;Tj6CWXf0o$PNt=+NVP*Htr1f+p;tSm}X-~{1wF!eGe@%lmU<-Y=KXf1nS^qO+3z?6ueXa`uQfJ6d!S(vy zc17~5r{QNobYuY~xo1_{D_Sw^&p6I9Qkt7yhhP3BF8m)O$$S_usG(T(4BD61msa-H z)|R%m)>fC;SlZoJrT7ZMcW_2G<0>ASlB6=KF1i*on-5YWG5}*&%lwLpiu!gp zUw3J8150ZwLo|K(xO|oI?Z+qUmf1B%RXv@fk@-zmA6=Ueb9MTy4~JnMTdfdR{mq4? zx!Kjl^|@}kR0X)FW{<~eYS&3>?R0BvE8RBDB_f@4JFDf38h7dx8E$rt&H4G@mhH`8 z0zH0Wb>EX$^=gLvv7!aob(1^-Trr#FSVdpNhoKWC6O-_RT~1K%uF+W`!=%!jtaVt zp8v$@Lj3p?v)=$YiJj9V=&thlM@{LAa9vCw{MJeY?tQR9`R*MXAXSa66TbYP=WxN? z1L@V`IIqdc&x$%V_WKaaPw8zwJZ_+(CK?j_J`}a^Ih{IUKj+NOmxJ)nlE9gq$I1I2 zJl%7_Ps`d|mXugO**#&ld2l?mutR50XTZUQfW4+-s-g)-#0rngwn1JSG2vPNZU*Ap zQq9Oa^dU4FPTd_9YEGb`rskmg2B!X~YkGmNj=Om+v!T;tIYEGXTJJg#T-G z&yX+vKK8Zjq&2H6t)st=|F#eu6l9U*74nUGg#On;009Zb`fnGI{{uqW%X>f5>_rhK zLV|(-3lbs{9Dl#C5PTbR2zc8V93=hU{Ac9bD8u(X%HFrF>mGp6|0eqK9pLTU{n-4ASKd$ywW0<8S)KCU+2 z4RO?ARt;@5fSDJM(RVGxJaO~YFoRETZ{KwE)1Y6d9}BekPX7vA#5ZM2UfebxHzBam z{jtX0@{|zk#M(gt>ZvRNnwvc&F9=EY!*((UJgLP4F}L`TLp;b}x-_+AVXtQ9PnSO@ zvBty>cRJQ9S*oAm$N1Q`2-w0;w;y{4_t3nR9>q~Xxe6m9jb7+bH>%Lg9T!T~HE{4T zQcKqb|7Z7tFfbGZi>sVAA4gC3UB%JD*f@lhqqp;QNda(T1C}A<8b9Ma8Q|eU7$1h@ zk5_W&dbQ2rp&xvE2EK+O(Z1;xhs5dvcBmC;5&$rcC>tn|_fQeIf3*qf=ED?X!>GPG z_u;ZvlTH}et4I9ELY&S6NzIYlqKF)d^`G9wf8h`-+}C?HA?3xoatw)uy}Z4JOG>PG zAmHa^`>6rrS`X1@T!KTu=2ULRv{h-(EuP3P@7p>nSU7mVrcjZv(vwqJ8-BKwB$kX6 z+O;P#Vc}$5A6|wS(3e|sa|!raej#v{sMkf342sNV3-=q5qr>yQNqWapax(Po3}(oY zAxWcIa56Tj*{XCnKZViPDIAuPfBW`5f645CA9I4!fnnPq_xzfWyRp8zk=QFY$DdjA zIV-lm2z83!stBBM8dhAA04+N^x3_w=z5YZ)*x1%mY%*HPsjH}*W(pP>K}0uBb{xwv zdDE6qU&OaIk*)3t=WA6iht!lv5l?MzAj1|U^y7kdj?{~GFMHxASr8)GNmqG3N`qEc!F7_oX z?BfiB126C9rASIzN6snU}Ol;qqC@!lZ283�XajDU)r^o+0%$O_<$PsNH6;O-|jYG(2cis@?7IYKDTge|OzhMxk4kr!Ix)!-0mtoD!kC0h@qfza zZ%1kdLvDl7npy`7JF^4?wq;_VqU8eoU46j<0{-!Vw}^~G^y2j=0zBt|i`}Ar4+Wze zd++$vrYJW&WGrjUWOpatOfY}{uO7BdbNiu>pKu9M7C35;jN6;DM`ulGMcf&#E)0nQ zIwj6_!wRDmD9~DP-=hZgdw%C>HTjgk5&kiC$cdjJ);};dDApizSpiP%Ltc;Ev5?y= z*R6r1I@U+ejw?GG*&H8J>a!2?aqN#6AbXW6G^#Ya-|T65(4}rMuh}>Zlqk(s0zLV1 z#R^Ni&bBqig14%vO&iQDpdi?`7MDefmvsOGvQ+u?aMm_9n>F%t4QX$3eW;eU!fsEK zFM}dCD|Eg{>|w1bOg!CpeZ6IlpOQtZdTNN<^Cc;C+p6OsD4IA|u1h+!O!z!R zw&t8p4VKKNbJu0Y&Y@4fNXwd0Ku1B3S9jk$3d+Db4;e8t1l{0v64vfT7G^`)CRK<> z*b5V$vHeKYaxVa%Is{`#@^xx~%0#Ns2Oo|^TtPXuC@Z>LlK5UdLApf1va{&q>UQ@o zOe|o<5Gm;pmmOAtSjEF{<&`sRGVhQp!?I>-{q&L5g@uQKo4VooG+#g0!=k$c~8(1T0IhFbc*KRB|b1DMG^Ksx9^sNqKorhP(z$Ej-hRi1G z#+8uoPH+03g(S^3MjxyRbXn$fHP5aN-wHdtOe_f30!8@F_bp>x$xg+ydOCt2Whl%g zd7`=0S`r@4N47sqTx~uLOtdM&6*zw0sP+iX!7zUp-Nn7#YcQzXzAnn}&N9GpI?>`| zWn26;z4UdNjTMtkq>uOH(bBgkt<8uVSJx51E)vZ^4KY&siA=pfB478io7=%B2$;zK zO&vC9yd)~pwXAz}fUdPQ-`eN_6f^fTT3rf`BW=JLNo@+RXf!nr(9OU*2&IgFCtXN2 zvu-k}Vjc8Xz<@w`@RDB{%jl8lFk~sv%5`O8&Ho8O&CR&1wqd!uMQ`S1#FHmo!s1yo z2y4L^inW%K67n`tx=q^sbZ|ukdqPmki|| z2)) zVrL+*59KkI(ULL;@6vqudAEKwdwmyIB-#mXdXrb6H#H_CxcJ9nnfx)-ck|_@+Mmn| zawA6g@2H$Rgw_D82Y|Pvnf-+y)tQitek!^s$&W1(XGH>}y&}7%k?9(Snf3x0n(zB* z8WlN`X-IkQ%V_gb5UMMVOON46ZS@@1V*T1)V&yH5e+$LDZ#ugXlWCWtoZ_$V_vObA ztau2=_%F6^du;;r3|g@u@R4dA7F<7HSFd1!1M! z7=N7%Vxmo;PSJra(-uI)KzruvxVJDBvcO4*X*v`~e3}!4B*r7fQMz=R*A6+^m8Z&) zeWS#<5OlP2q#p7lX)iB5ejefLq^a*MqRySXGHBEKiXH7w7u|>MlsIxQc+AGTIQsRn zdlL%0$Aq-_+d3Q6kKoT!;B3g#(&_D0l)N?roj%b8ld<~>pBZ=@CyJA3a6(LVARHhx z{3kv3MHcZj^9g5l(5;b!`@@A7Bz6NQtJ?eZL&|KdXLK88J=H$z-YFC{Zr}h>j_wp` z&jmmZKf~mvzRj?g9NpY-f>sdIDMzaL>uSWbq0e8wrY!hH)uB=p-@qa*4huP^$q`G< z1orqLM-kO{Sc)FSuq;3MvRn7-y0bFMlB~-_D^&wnuk~K_*_?IPqa+c%z z_!B7)@1i)=`kue_b1Ua4(utkKkzTW8{1@y^`z?MH5R>Qo=oS2yn|qu2Fp=Y={t8-_ z4sj_n=0It_P+>)BH$ zKViH|Drw)fDE};LT5{w+44^l-J|2v$#YOPtbldCnQY~J8u!wVQN5!jRCaVJSpLgHo z{po1dfl`bM1~5&jC4~lGZCx}c1pgF)qnPAFn(Ixi+J*+dtsSI?_TlI@De8LL;+)wB zerpZO(|5O`9#}?`vu?cpa)Y{&!E}~E<-J~hoX(1B(nMz|H_eS$;%iV_VuJUwa9sEC zYwh9J0L~~N{B88`X5uEtqVDB3kg198At!Fmxt)9FS&XPk zL$G%Ku0a%;yy~t=^m`z8W$EW3x}0|3jB&Ju^%x#$(EuvLJMDy?OxupPgT@>|hc?dh z=ZN@vJ2x@0&dqD(C7@jIpVIs;M6u)JkzOP{h0ky zP%R@2r=OIi@%ZtkdlD$ZzuYs&%^Ut2x=P-0GJW5Fi`F#oUaEaizgGcjvbZK|(rew; zd>h-MA<4>s;lLJ9Ol?L`F(H}KgFIu9AA3<0vW3M+8@IZ*m2*i%X@dHcZo(FJcVpg` z#hx;~@JJ#^He?$P^r_2sXFo_{#+n&QJ4xewVJ?s6xz)~y4SpRYSB1%NIPD_Y@{C4G z8|pBIs&0vR37?*AvDE4#(&l-qbGR_n)2k5Ktd>^0`W=k&c`Nd_lste%+pGEtppkY? z#{>;`g9q;PFfBn@+<$z66Eo|)ZU4335`@XYU2NUyIy=MZeN@dh56@c zRn1vxny`nn4L+=zoWUMQ!PD2R(eUI%N`wwEE1$)hYeS$9{Mo2)`Hfvlh_ z%%%p92zhS}{Sf=fs$FG4h9Q51f$&%;c-Hy$4*yR}VuMq^m{2aJ`seOi*bFj3{Ai%4TLZu+JNc&!@+Ct4!=3L;s?&uz&~H zKD+T!?^q^oDfACUviPQJV)~cMGb8WGCcBetazgl@na~a4 zAZA_sn5XtFm@1SjGD~0x(`p&M?XcC9d{j_S{A(M|l+H3wK)U;ML;Q)0%RJ(_w)9`r zTo2dR#2U5qy3i+FC}$^$7le5EBEbudtZSy2Y0_^9BAfb|z+n{Ci8GF!bFSYXA0c1)`VX+6kF@S}{*$r>p{1cW$c?W;BH%wM55=>*2a7!!o5 z*CzrI7OybA*HHE4iVLC_$e*@0*PkhqUd2hExh6dgrO(8GXFGA4#IESGU3~qri{F1v zh`oHWk!-wy8F+6cm-;z19$W6mR{lqDq#NS(#6fc6Xn?KdAx)y4fCR8n z)Rqat{QNnapm)pn>2Fe8miCm7=wm2KjICIWr57UD`A>HIG5~ni;u|oUZIi%g#C)pM zEdFL(pFEzR&L6eeS)pJxL2+Z}m$Kn~wLCvL$mFi4{MpSuBulzfem6;e^fDDeI>k6g z1im8-Oi6+#!&|21dHU$-Vb=Ik_t?vDr^4 zyw>k@sI%DZi?HQN$xVT5K3phDFlDQ?j!aVpD ziXTsZpgu4DHTwzVz0cU?%a46tKe-PF80Grv_K>QD zyyvZ%<`fh-xJjFp;Q_F3#U`MqXc!RSNLfe_=;+A8-@ws@k-_8b#Uu1PY^*re%sQWQ z*7Sb}i`%bseFkT&v05l}&A4pe2^?E)w7s~;OU%)GfaGOpKBE(T$GR-4FmXKB9>Ef^ zqMo657=rmy@Ioptso2Lx4_6WB%v4RSNr2RSIIwfLEZsTiEn z-UB++=IsNkiVE9#OHn`U#Jw2xs~R3*tr&wdwj=%5q@vvATS_1n9h&dG2$O;B7!Xt? zj}z^*Dou-IV3}Dc8x*wuG3KN-x?okGAj^5bX(1hJZ+m(`R0pT_GhtA&Pi^q&IyWeq zn4i%dMM9mVrnj}aH1{qk&@=vvViS^1?!t#Rm6T&6ZiYm#&09fM^2b080+12`vmXRu-?DPw=dhzaL3lNZ>}vLQCWulWiK3*9V*c0GmKAMa7&3Zv4J1qPCVmx9p2D$A8{T~O2`*jPDuo!e&KYx4-2R>J(b;s-{ zNIG4wd;f&PfTc4`$$6hVi$~UKr>4+vVg}8U=(^em#mIMb<<-|)f)H3?j0XN z_?{$9zB`XX5H2u*^&KaGla*e-=$F;78Vs_&@}Q|-5T!S7CPLP^%{i7t_c(6;yfl}b z+RxUc5dL)hFL-5}RZZXdH3U39m;JRr-nu4%ZFPK0LXsP!o5ak7 z@+K@ix>X_5cea%&ul+gzp5doPIFCQL#Q~qMG^+t!V99T;gJK681p4ixrIoNJAWcE)o zq9a!CX+o#j<+(V|NBcktdW8uxc`RU%OE(eu@~RM|n7N==jyN93@StTa&Etb}b5o1W z&<6|Achn^)d3%kKAD|d{RS7Zre);_Os62*};kx(@Q`LmppTXi~2Hcl$%LL1;OfrPR zE}t9aL_c|>f`a-V(rvHWsHnk=LnGQVUIw4`upRYwp0Rp0qQuvH5WY(m`YEV$>h}4R(142ABtU+tA89KMxVF%EuM~af+6o z;-Arznyf?Vjh^2?b0VGXUk9_DA>RCU8Q-4LxdKQ=OfdvE?xRWpWNce(A`-(j=hKg} z^{Fx8`cQsV6<}@t(KPY5;HO#r0t4#Kq7=iuJ07LBB-Ban(N)22^Jry-u+#SWyM4Cq z_i%y7O%(P8$Tx~m-zj0&Rx#9Rte=*m2QtT9{W9V6U#|^{>)G; z-E2#QuWM&m*$Dgm3ffxinua_ovbmI(0A;3%;f!+#u?SCGn(MrKP5J{D18ny@EQ~3^ z)^gENT3M$!S~jro6IAE8@h3qFiL|K_)$jJ){w`;VSIK3=E7?0?RAa2G@J>ebUF5h6 zrS=0-XLXm>ftS8#t!;J+=9ozEzh(hfz5`u1`#sF$0@LitDkS@iH45EAr z3Qq%88=oDb*>q`R`P>vNKk($*h!oh;fMTW2iF{7%n{N@nAdOKqzp7W}qH@yB5bFbX5uc)}0BaqC2 zhrbW4!M`Ue&f=7S17;i;7%E!K!YXFKC!LX+vP z?ka39db>MRXs6S$QRSD32S@9uuE!?*)W)u++1y?Sf=MSAGHr1Yd`*b;9|vBr7ZzNk zXs9jy?$7lBAG&2>d(P^AksuDVE1a9%`uoX8XN@#V@K40*Rb`~J@V4wYZB@rB6d&`G zfrkyhC&m294;hqNTr%}7E{^Svo`$AsoN9?aWJqJC3Iy9f8mj7`SAil0xLF(67s{|1 z_36DD zCcH)~zQk!13IJG@(@<9xGfO~DG@Ryd&YB&5u-)7qC;i+?$sf*)V>$UaqcHBp*e zAftS!&i2ab-hgFb7W~W1qqQ|(_((>UmZqw+eu$C77bio>P&WjnN!e9f+=nxjwId+N zK>*#1%2oc(v1-JlIVg(P3EZT^L$J22Qe|;nxbAc$L88Wg%3`zK6{ec@>9?Bz9zE#4 z!RXUo2<|*?Rx?dMH7Xe^>5C)mAf9Bg7Z z_1wu6Pf{Q(JtoC_!YTna^ zgOhY?K|9O4GTlpE{Yo_&Uwz}@kH-TzI6wWW$LH-ouM#Z9&gq^$yzxJcdE-Uc zNXKk-*=2w^f6~;|SGGLx`yR#Ge-4{eG_&<8YdA z54u^9`OJ2KN4i*n-{F8lX!OuhdRIi*r&eT&y$TsJ03^KSgxb+A4@hI4d_hkt0H-+a%%abl^ z48MKn`rWpW0T~?-CTv`vZs_Z?`%xVBnx^h#eDK~LhCk3VX3nftC|UcO9D2_uZt`>F zg+83!ILctBJ%1PFS(6S_MDwl|-kW60-CFleK3A%MYW+uoj2o-&cz zMfVPSK{B-OYzcSdknAau+&Unm``)&X?=TSM=AtEs@fLT37I+iIz1uous7=qU(s+EJ z_8<~cJy%%H`7J<>L+6gH#EfNp1Pm{07_a5~%S`Yg9KX@}$Fig14F}iny|;J~Y|FQ2 z3IET{z1UtlBvtRsM{0U$Nlwu(CTeKuQ#GEu6)aSM4q=z?`PRuibR*pisRvLxY}Yz=i}xzl4ZB|8|{?ojw+Vo;6iYs7`5~0Xvwe6;H}iX#g4|9 zIFuE}0yHf?MyC>dTK;u3Yut0fER7Z+uxfn4fYqUWCsaZ`gDyt_E~;kH*0O`<=%)Lx zH~++@=t%^#nA(KCDuQ1RRTgqNEN-uKf8PFnH3u;chc&8S>CWGfmf@SOMm++Ep1QCs zfUb;Ey(490Gum^#*5gY+ddR=*^p;MilUEfZrf2=y=j+~W(DLV)Rqo|Q`|f&k$E2zG z#mlL<5$qVBv7l}p(Jg6*^qXNq(_vJcJ%|?TLyK15)LOJErvs0Rfts1MJB*@hh6%}p z7YC81CY(gZ6e9=GXL#=}>H2jtllih!TGiAHok6_x=eLc^%In}-?Ph-$C%-&T<;Ne^ zk9P6zPraWGsmawXOHO{gZZ$nm4Tt+P2skV|Oll z14hcx)-6Ei-}50zzznr{WY#I(YcT-dYGTz-V|gc1(*vs^gLnk0KLA?^H$o zQs^)fFGewLt-nLi%BL!W58!Py0^cu}S}gH-<3oOj>&RgVX@U830auml)V4&4**#7#VH{vDc4zMBXla7ONajY7enX_5O#$c zspRBDjKwz7lZB?O(iVKKgz(^rT6VqW_TrwqC{a~RL&1({JrdoJ8p1?{C^tNdHn5Gz0a>$XY79k_h@9k+77dP zvm9NmT-ufl^~p26XgDjhO1T#54t`n3QEWHpEgL3Q9o~4d~p7*dv|DR5%BauMs1Y=FL-539N1vo zjlfIF1j`cJlVI|y6BzY)KenTo!QnF3pbou8H4CziL;GkKYHhunco>%iBVgf;1h0~T z#XwI_>Y3dv4&PRm7Pp$+ab<5oMO!sD3d(8vonVat@}jQERmvAy*HKhKG<7q(eSjfA zfFxmJ(C1={nAz{Fn0i5Yxv&w3s8K12ftINSWgO!}?KS-^xPDOTK~h+*gzwgtEQXWD zB(!vX%4YIb#~Q&NAY(Fin{t>_UBF!awt8hZz&tw1uXTU(B1??wE5J#A^@<3?0#;R( zf{odNmfk?19Fby9S!+u*hygl?u{Qro@u+M*y!d<-P=&_RxgmCI z;F}x=6wja`lTscnmnra`B67fzcM^jED&W@rYg+#I0h2rk+2SHSkg111T{0?XV0PcbSFqIJ1} zPa?vn#37$Pi=BzUcUpv@idOxW3S5u9g0kC&4ea|9`tXSvue;|y&;=S2&yN1hO+6%b zUMIwxV(#04SmjhFkHK3vw=Jdd75;lggIMFAZL5!&_|`to<2oZZNEW?N%q@S2lusA^ zvqK8z0dH%w`n4O18MI$Ch+5WrR!eqOEB3v2l}Nv}mK$+jTkOSPLgseDxqjr^RO*rU zjZUs+MP_N{>q_qlZR)CO=`GL@?RQ+hElu#&oA3>Rchl2s9P={&B2%xy( zA=Y=^Oq*FR>x;2uDcm^Ey59#t%%3{c#d>K{N!5LI9Wmh7{dD3R>Q-;Rbxu5mN78=P zqEFFjz7!QlRZH15D0MHBVnYboJhrXy<2w;Z9{h}bzBe9^4^QV7YFgO&%cO*=*#+%Q-SYx+>D%c`hN-#1eFq~ zD0|yg{-mlVeilZ(!z13LcJn;s%=RAJwze7gL4h6rj465ZI6q)_zvG?^*Hom&%_fUL z#F}IXS(2^&CF+0QbJkUTYmYSJG9oM~er??Qd)9t9#;Cr1(}{mb88cpk@+y$EE%u^$ zp~QC}7hJ}MVM-~zlN}fQIqTuMYr$Yj^fLGe8`W86FPuH^Y@Ld%y1w0jd#H4?k_HV! z7Ka&6?o8XK^SnL-tZ}sC)VgWv<(4Sw?9#T}+%g8&tJ~J_A5$mU zK@(O+e0J@7@WP0ZA&=!N!$#9V{|`JgG)1?EQTIy|P&ov)a#J$O_zb1{$H6Ls@EHII zxQ=FGx9gQLd>*gTaPXC5DeFcGZN zAy%n{>)yQkBURqEqa}79b(3E`{@>H4Tw9bPrA7(-p&@#`eGgabqYyLj2x@C|JiZ>k z?0$l91cxzhP}kFyfqpR)`;Od)q%(Q}F{vg6a3AsBx3u2PPwy+nEZ?6A_M~@axF5*G zL8_^BTkXp&`-7vd44qwWd%jT|?{?rUaZm|TS7WP>EZXY8yBqXrm_h+IjjH5Op&E$6bPgf`z&&UjD{{MbMQ>3 zphML*&8s)6|~`weguti<9XK>4#Lgqd^3YBi5U8Jko{jx^osiihwU9O;wa z8r^`&ioo1q4HJV~pE6_D%~#J6DwUZRzgIH}r>v z4R7eJ8XoH-@toPdug{OSpde85fIMaq+CRc9ix+}q)yb=gTRbBvt1j2uw7Z6!TlBGp z{^JLJTcUikHsuW;8hQej2l6jBK5F!5Z&IduX(Q9@xEEl7cGc5f0=mYH3Edj9j94w+ zbewiwsClsSHZ|TgUDksSl&A48wsmtmb(StHk?b%)9}*G+m}}3CiSaec$bQ^?VskMs zt;>0?MeufB?;H>6?}EM)yM9Zeo0)C_!*SySW6Pn_d-}Q_l>X%e`k|9Uv;=}z3&Na2 z6eaCsMFmmsvoi`#W&S*s!a_caLKeD`d5*I-9cRiu9Fq}JfY@V-O=?Vtl^|u4{YtO3 zL;Sx!>;X{6Y5&3u{|#TU&750t7)_D@onvk1`ENH2gTzFnwIfW%z;1)eW=E;Xc(-=& z${Zg|^!4CX+RtUf03}3$7_WJ`3+o2uY&e+!)1`)gMDi88C=jcH8l38a`i^95KF=YU(Qkc|;`4gzWV4aIq4XjLRGOYT?LJfrvM&RWA4A ztBk~i1a>00<#PqrM_nN_po zhR`)x)MJ!+yEDz&+iP$8iaOrFAoLXnPZuy0_+i*ri8BZ3h-gL<>O846<)4oOlnUgT zps@Z!_S=kBS(N`+4e*Opz{7LS`wf&H?!H93iiXy6Pm&7$^hcH|`&9L25yYQS;?ICr zxkxmBr^hSEfjo&Z=|}}Kdbw=Iuf;o>-!RUiHI)R@@#cLxy-vz0eD2ix5MlO+cqvmJ zH-GkDsm6h(7ALTDE{s}4xxu?%m2t4yX#Eee%xj&*g{3aF4MyXKO$*uJ0sa}M*3}2Q zUq<-EeEMxKvO3Avmy*cu`_5Vd{on$Xjyw`>weJs;!Q)G;2Kf%ww!c_8ik75_;r*~t zG?|35st?;q6Srbv)6E2ra8J#z)*39EgVqb*n;8Z0eJ7Q-R>alxi@F}c-vI8yKE3o{ zH=NKHrAv@~zOx3^bh896J+AcIr4bQhA<2;`R*od{*kRcLx$v>BElH#Zjofb%(XEUb zB}mIYt4Abgy5PGu_Z3ZWtJoRGdk$0M43w5U6dLoWDJb?O{;N`l1`j6vivcHoed_kir8ib0d!O{4jqoUviu;SnAY^TiPD zqH;*P5^HvXk?*=oOCMCo9?bfOm~G8=J{(P^$Mh+qT6c#aS@5!av(>9N(qJZ(u&1~D z^;C#h>|7V?og@1R@@?Gr>#>(h7;C#C&uQsWqby~0c|q~*2HLq$uAp>X?H-gJuQQDO z=SPq&=*{+a)m+$K%U-@zqvn;zd6;RBHF-Afw#&W^u7=vWUPeP(#_1)2=3luKN%K5d ze-0{XmXWjfLgk-02_g7l5FM2XW9lLzZ7Y$o zmo$UZW6@$}saZluC`hZ^x?c^Lk#aE^O>;S*t!v$I12E!P5oS6N{qC_rPn`od{%)Do z6ow-&My737*7}gSp^O{VK^CaZ`ZlHQDb;HS)BYT-TJsuP!MRPmj*(Nln{941_o5+o z#I|%{xs1*>_E_Af{+fZ2A5;h&r&K7Cv1)5@A(4uZ@xgCVyI-@@1fTu?Di>(var^yl5 z^D!mrGc>pQ>zlMo=p$j{2b?nKEdTSO-PK~4BKGvD7hFJUS4XqfRyqyCq?1B!-Dwwe zD=h$!iT|oZ;by1OzS!4l+J_c8(!aTP3ZDWJR)sQ>Z-t=Jg{WEUq>1OQGy;(+*L8Y< zR9|Pk;Xt5CkD5%2G*Hw$i+J~R*c>?q_du$)wwfqm>sBYt5i zHbVzErjeLlOpE=993u8;N|?xU%^iy2$aemDI0QB3`81K5jhCWCVuK4Q&{318$ugD* z+qpW#Wh_guAzBk{6$b?UbMY_y*H4_*q}^tEQ2W@E^5S^OT(Jd1p%I@TcpE=R9{3nc zE@RrgU^NgpX!#cN2h_5ILkLj7_(e+|3>R;pR5KHUkGc}~zgWlmrK-U&xHz3mI?9KO zxbT%RlRl@kdriX8aC^|b! z`m``YJVmcGYcp)8&RkJ5!B)`J91CXz9^5gQ3BGyJHxyy9y(X}3+N7~_+i=c!Akgm& zc0QrT=@5tA06gU>{xFqEj>F7`)ZJyN;vJpGwGK8Ws$dM{hYuSx46|lA{OeU}H5K;$ z!S^nRn~j0UwfW0iMnC}J^=P5fA=0o7FxV~YsJRwBQaw#h^Y zh#UqS4TMUUu7G#zxx2iN6~j$|{xM>Dd7z~aCOW@HgEH89JNc&J!5BJktH{9eTb~}v z>m&J~gk2y$dLs>R&V0hBs_zU90hkH3?Gn(v{4iOeTHQez%kr97lseSuDS!TCq^`^2 zIo$Bh!ro13Y#$2=tuq>eT=P~enMTLRh`OIIQ=B_pE(~xf1$Tk&ITAOIwX}D_{L8`X z5|edr$5!;iG@W=FEae-kU$fMFObF`7BW%41Rct}clx{#jEK^44bVIt|Ymz|#1q5d0olfBZ%c32;P+i)$iyv02*ydPa_h@);~U=e7`y z3CEmdN4jCSsEofjOl$)MXb6SRt0~-1Ro)>C!+I&9sjHs7SZWv#e7|05k{U;d17dG2 zMx=AW?R(?)Xx{vDTRj<~N9`GxxrBuj=0}Q)OJve-L7CO=53BbDhr1rdC|qs5_*Y=- zN`QxjJ6S8!xBPElAuJPA)dVJ}!Z_iUb&!;?0VU;xgg9WZ+PG49m*9X;gs|`pT2HnU z6X&SgFh_2w17qWyL)JnCLMbAr{U~m6zb$nxagW79nm_HQ))j9vJssfOOcTR8_QJ30 zklrJ5(mr0qU9MB-j>J$u*EQ~KUJ?eGB2z;ysf zI05Zyt!U69lOpk3Y%wR%=qbA=$;38gZ6fH9DpUvj&w3wT2`YP zqoN=8=RBck`0xY3HrB|)P3bB;zNg1eb7yYko6`K(z9M&~a#os4Y+^QUS8*em3}zJp ze~bPqr$Z`kT|z98U2E+w4{H~5cx-j6`68kpU0Bct+eJ>yikWPR4jg|S59uW6D$ytc z8{0Qg&z{g#7WX{4v!j#(bo2PY4LVQrS*d@CREEG7H0JYO<=4bCahvZux2r2!JdUrI z(}OUQ`^H3RxeS&HHW01Z7y$p4H2o!eif=B)i~l^3I2)S%n%+zwR&4tC`nq|J$(_z_ zYnc!Zfg<@SN*NwUau?@LNZRllN6PqDQBaaXSlrm}BoU^cNfW|{?mQe*+xWvLEsvX_ z9Hp0?8*iOYu1{z5*;DGCS4~SgZ>^hWO`B)MX|;J}u0Mcnf9pOg@!J9!0FI~GMTkFc zmJ2gNB#RN#b{saqBfi;y-IKyHq}%7tQK%6X;?#=WZ(H&Y6SXeUo1+pCVKsc^IW<8J zw2bMH)8JJVmTt85q8ArGs(IL_rl>(gl&N%nlxr^2-#g?*x-c?yW$Q*~dsNWAsuN$* znwsjlY0Wf1v`{JFU_%(xOH+_DxPoO_y&C|C`JBl^L_DY3S+Q|!cy&;R#yU<(D%_#k zOI^+yssqBq@=xR`sz-sBVuyGzVd>aRWAT9s<4k0eG~U+($^Or>htax=znmspwqjn{ z0|3x_+;|{>%qo}xkG?mJoz}zn%Wrz9CibBvHV;qVE|YcOGCx*W{>w05@yD$B0$KDy ztkp$lty^32uRE08n^$WYOXl)p=2b52u&z>z4;29fJcJCwX-T^)avF z^FtOFXZZRp6`;bJxv9Tebe(dqp1ZczWybm1i4;jN;%#Qv(0 zC+@WC2jLf(n}x(oVhyw`XAJ^1}XUTFdqQB*n;7>8S;}&_fe$R_Fl(!uY-M_?1>A z&Ig7IoM(%lV4`8-Tks4_`-|0G*d?dr>3?jd&a z@DI>;jy4c7o#=b36Xo%*@B2-jNYkOG{BlSxV}uDluRcbcfJE}p#(gJ+ty%W%`*At( z^ML8LbRFPR@%h!q6$pT$vmpL;-Y&MF+UFot-W1n)b&P@uLm(qH`!KN26-Kd0`{q+} zDgr6Y(f0N7A9wV6$jo>{aLr-kHe`SqGma$D(F^f>wE*T@rf0#HYn9c2@6ic(KmW zb^-+qjmVC{w;JB-%8C9@dk^AI4r$=Iz7N~s%jq~^O*wsqDKg)c)E?KctjqT&aSGLW zK4K!d7@rzmX7f|@qiT_be>I`>*^7NY1}e?Ddrw-OP>|cQ9<`>5`q`|zrBH3=Sv1AV zCuRnTc?C^&?oXYEdY3jgTTC6CIKrKYF&`sV;vu;hjf^su3FvOIawhDwG+%Ilyuqn# za?&a^c}mV$sy{YBC2vN*rnJ&-%djq%T7aOr!@I2XfPp1{+;%CRv2lfT5g~y#$VHP3Cx8{&XT|cIFBFlQr z!-5Wo!3V(`AA-QVH2#%x+;91svlo6fCDj)W7yX*(CrSJjF%5V*PPjs zzu!U_DKzDo;SUU;w!=0+RYGiRGn){<+m#RL1dV2xx1)oD9XsI3%w~TCQ+hJBj0^fY zQsZq*PygP=_l=KiQ(CuoPlyKeQ_jbS&n|5S!{Gs#z{H{n+6`IbPMt;|p75)sllGV8 zpbsnH>Hvd*z^^^o6%&+E$CTbui;g8z(e7$&n*SXhbhq3zJQEV}bw@Y) z0VA9Vev>}fgjC{rbhjQ3-=4BX5X})k9_LC0(g2QcV&?bw4(TyIx24p;GYWxXVNkgDHuAzs~hPc_+)UaOOHkVM2p< zU|IcgSsX_#DkKdIvkKrt-hM=w=O*9l?vVg%&(Z8E!dzpme#nKPkiN&AJW0$F1A`ysY^g)2N zPXcw(48+!m6X`KPh>F%(oVkN2;X1>ro_rP8&fL+K^F!hJC#oxTA_4tQJ|+wEhpqOK zfFcfdt~y1-2J6a?%c_PJb}o*6rh7)&)QohLQy^i)8`Dqf@IQHtuGiCQXB?>Qa^ zgi-AU&3kGmtbre0aX5Abul)UNYpa*gz#u8{Qr~+`a2fI6=H|E3r>HCK^xm{N&apZ7 zYapFJ&rA);X!VYRJ+4nS4b*PL{C1~B$zD(mn89ya9F#6OL3`$FZbM_@5(VLnSbT18 zjM3wFE{ea=0?)X_)gW|h8y2kB^>Eu&F_SdHn;f7+Ocvr3%#jv77gUo`d>yVeruTCP z*+qfheJIS+lsqWU)bCj`u7qsR&fp0RD6?UlbnjI~64Rp}Em*rY6e7&bWRI~$R zWBBPBOz?rCf9zNGS#GHP)4oiHERm&qmHm*^6^!oE2MPuwPph-%0g0S^kgD+@^mt$c zd1h$Z$@{AR9IW-uIjk$liz|`ov!BCy8|b`;>A!tIOrx;8;f47HsorZFf=N5am>E0a(MHlI9xs zLKRe$3k$X(A$bSMKhs?&WbWA-Mq7FfaeE^5|Dec5Cc6C|9VNLu#q1(>yw=m46#PRd zhIz5@ornoX8?;e8!uc%y%YurC>a~@*gkfb3$bIshZsLhMn|h+eIV8JsY8AkK0`7BK zuX#~&Ujl${Ep6dbG|^AlF6KGD-F#A%j$|rM36c95cF}qrlg)@^x2#OV_T6_EWL|0+)jHH|m<1 zPVCF?(?MTT86tuI)G%w080N3SxH}xHd1|(r6B6y*4Ho7<*C+br7n96=9O@ssJS}(N z8$^Q42pgb1T1fIQt+|XQ)As{;+#ef3x`$iHEES?&#b4@TbmZ4-q94cAA`TS!Do^n- z-${l`?Jd?Ah@UO>-dZEd%Q^`IX!VrOT=Y5$veb^-w9GrC>W}fDW1kgrHzybc`E{h` zfJB*EbB)}LKL4i2`5*u_o!nxvI(ghnw#UgvfR$ZJ_`aQHOI%R!S3N&z+*1ik-7rr1 zDCv>j2@X%^go><<$Lk#z6dUEQafo0Z=atPgyqNkc)fVg^S1YMV2M73=!swvez2@*s zaTUIYW@S809K=8Y2#5g_9QB*Z^M4x4&TyE^=Bw*bsr~V3R$(G|)Cw)V%KLWY>uML< z7w>Xz2wS#w%6`e#%vr_;)m4|#`$#}sc32%>twyU_*~!im=tU1Qb@G51Jd>^hUe3Yv zx^;~h$9YZ#+Xp0)I0t{(!Q~s9(!aH7;7qeMqY(i%|7K~>`lEjaWV*v`$K644$49!t zo8>;SWoB3kZ@@{QY$?*h(Jw;91f8u!t4-9#*PqNC>Wtt^T{fVsASovUXWLC-@mgR= z)X76U*XD~vw+B!PQt5-QEjR_Hd7P2hwQD$Rb?T5iz~zeelu@mP0)t;(_bj+{L6d{- zT$!OK!N-^wSKCZO^>pB^gZ`!aiZ2Y{(5!+q{(0vR3?s5JtTZ@Tu$HcZB|-|j5;EbM z1knVT6BOh|GdZa3WU~d@`HJ+!teB01{gwL7bFX4aD*?h5xe?mP{VH||)wbf^uTK6N zf&X9?YHqS(&o0T>o%Z+IK!3NjP--L?WUjV8$3@g}Y5qB{o`Yv$w6k~5V-+s{hBKn( zMbMd96(PrEEH8`u(?x>QOEZcaRs;z8TeAXAB%cM>YRqFX)$5!s^O+9Wo~QMorr=D< zj{<)!QqfV9MG=e`j}Po5;bqCTx3817v_#FW6Rv)_OU*Oai>Z<#qc3 zsaW0?-o{8L!x${2<^&e)fOlIGQk`62cwWmcHqnunDKJ-ojiWs&57a9(`(DaTJy6TB zu_mHda`n`NA(ghq8uT3F2hZZ15F+|WyZ&7Ca}b&MccP3i>0chU^kk#_MUV;TMdM|E zk)nj)+4(g1bMCz&mAa4tY!<} zI~pZbFLm%}u``YDWHOwYR@k58A2*Q{)wto0k5|i1w-f6KEY=*mO(#vP+<5!LWb%Xl{|Q1cB0jJjXE<&Iv4S?9_AK6*sJZ+UU# zB`6&xtInU2>W()6o&E}ngqN8Eky#z;m_^Bodbau){~=&IK}xp!pvgZIQV9&3FwrzD zUguDvg}B~R_l)7gX<1JgMNPRio@kVbaqX7Rk>b5z2W>q?TdRe~2)=&BNc&EZ{LD3C z1#$XMVgP|PI965=v7mTO=QACLGD>DbGBWm_|F!sKHpo7H!7O#G`7JpwZ73qFH!iej z91Ys`pYrL>{;`nvn2SZl*GV%^4F{KA`MTmIV^!v+k*KF}KQ&%5YN(U+mJIjFD+rOF zkL>^2>{T$Iq(>WvYa7x`$#m_>Ah>PXcR(4}t z`QD84Fq&DW%tG?PC3--8O(`BB??q{;Zvx*qM6!@a3U(W0R})h?F&AfaHn#HCIEXRV zEO!p}?hd*eG>H9ZAxyU)_npAHVb3H+u5j+Hb7O;!AlyoZwWXB}1`vBz4J*MF%*$zl z-UBsspw=_m4Ve4SWh1X^v`gR87wMT-Kml|Ryudse&CY21#zW4Y zrxnvmQHrEa-ot#Gzdz$4_bV{CYp-=cPn8pqpN4ikNb9YG9*pJTz9L70zrVLvWmWJq z(eIh4`hd_t=}QK5Jg6!DCbVW{6_?#0pTzx19Ye#sTeon5GYUb|V)$Q%+9+!CfbctF z@B_o5kCIm4;vw=Ar|w;UZ_#D5D|HzsUqq=rn7b>4|vAd@DL2(SL@@6>7wyX z6c{;m{!FYE{FMb_(n#Bgyz){EnDKZ)^9SBa?%SaBf0{Qg{vrN^2WJdM$MO=|qK@Fn zjd64+ZFhyaYpJgA>>VPeMRqwPnqjbcc_XW!>p>4nES{fiJgTS?5%Pbo0UsbU!5#h< z6`U!5hNk*?&H+s!F^xPraWu{nH7w`1%#fHhx{Qug)wxy5DK*r@+#?5mia(K*+nE!b znV;8GU(hpzU$fcd)elAy(&mi*GaUz+eK$<0(MJ_)Ijw(V$`mXV>?W0U@zG_8t+2!v zeqf`<9oU-mVC^AR`{g^2x=gea#?l^@&wNO9cL{V+$i?t!aj>(?3731bZr>~rh=RkQ zQY!tOFBA-i0XOhJAO3sf|9|QuT;Tm&r$@P#@rqx^9xE#0uKa6)%z(=h!KrEUVKP7Y ztKy!8^VCG{g#V&k@O0QPW$351Spmp@{^t}A^kxDKFX0|Fb2!DtWOVodMBG<6SDevDWAbgg$?#wAd zt=N307ctOy?)z<-Ud#m3MRv)ui>n3UJ_7iQxRb3U&!o zZbDMbPxtCWoG$FRc8;LLbwZ4aMszVBxqQFu{=CD2GLe)W-?@>WF*{%OiwU$8wv31C zcmVI$SmB}}EMuLWul*a%hX+JwW8>wn>9t=M_ZSZXnPg&QUsHSd4Ka_+-R}1<2JesR ziyLdkkz(GH>wJdB=|ikcrJZTne3a(jq^i!5AWB>A&eBSc{TP4Rz6$1op3fsY|Gq(I z?`;*isQZevboPgT&1cjyaG0odc!l(_8j5L18t~5~@C|BmhEMpgSo=1EP)i|EA?i!S zjiLWC*NwC(x--r*e=F*naC!4ag0bgulU#PS7;GR(`LzK!OBd%k{gR}za`+4@0<5Cz zHu^$A)XmzOS{J{rH=Zoh(;%C}JIo2Rh0>qHBXbt5>^96ZIAdi{4Fj{ZNUPmP2)2z( zx9kO4yE>8S+~_DL2&~eOB8;`Z74A3@y_eNH;^m3yD6N;+_}JKN&d`?ZYdxXQ3+Ljn zrh8inz0@}+=8n>a!ZmTOe=6S2ev3sc_gK$1aq&eJZ}IO6>oZ}oV=0lyMC~9`|B}uL zC-m0IA?p6przN{H`K%g@?(gZ3BfoJNx7w{gMYQfD zu@T>P)0=CU1gxZA3S-yZ{LN|Ifcny?u}u5 zmG$e>29ZNUMvlPQ25CvDXK)ZPnWl=JgD==6^*`ASY2Yy<8rHqH9+!59`>vhn>-eNH zvnV(+1n|(>b8?$SNM~ACrmiMdRGMoo1sQu#Y%AGZ%HwCuE}ItolXPz8yR)G%8Rw0K zR{Ha=p)VBj^kxk%iH-YEle?xj`+&er$RN8liuJ(@6i=%bcQH3(6cCoUPeeQhJ` zszP-$u{Au_Rcj`vU(O{2=ZnZD#UDPonCOM(Mj8{$TH3@8;3Ir3Jc0f0F^cEezw@RG@8UThEqxd=6&Jr&=G4kHx$3jph5qxj56#F03VQteu-) ztwWHTMWg&nSU_FC6CkPpxkmG9SJ4~~+9>2MOt@(b0`OoIAHYs6~)Zr?geL%~HbvBqSs_F`fS$U1R%DvwD9)h%Z zED3^45K(vw&jh*?%^Fnxg)f!kF7g=O{8O}kh^Mjh16~_cJkhuA)!l7+>}>DWS}IjU zy*!mi?_i^fYKyGQc5Rxf=ue36{$fNsW+z0+jLgCmV~X19y}GD2WFMyW-yPCnd+MUx z&)h@9QI>PP^;7z%=M$6ggtLo2J)}IWtCdtF2ME46zuuGTU;cbalDa>@+&Co_=9i7H z+)(lai@2#Oa|Tlk=hSVl+vNeRpMj;P$1muACH6Kl zVL(jho1wG;pZ#to{T-N!ChFYULBRIQ1%L22qEz9k;}uz~A#aP1J&49(k^epiegS-u z!dQ9froWIkpSMF)uQd1{RnAecta1EwYm&@~v_=2IQ%3r845`Z7wM)<=m0_V7bnPFEpbaM+!1R1dvgW3#9@$o1qyM{^} zuaLxS43%c-HA%4$ij*;x1sPo}$f6KVuP}{jk4|rRgfWvRwr?sR1~NxJ`cvb`)L2-W zFT_!*_j*K5bRS}*YmQsaK8I5&KVELEc4Ir95Y$ÇQAQqMDI%vY_+WZJOLAjmPI zkiBuj0yiGyMT%)Oxj0Zvj7h1<8npe6;);<$euE4!tyV9;BpXpoAVX|;LV@1A7!KEv zlknHjPwno`os%lU5e1*MLDSLX^dq#CnGuv-;c6jyqI~4j8Cj^^O65OZW1EH|BPMZO$TmHe>8nI8=0X3Zg8&G&=}`ngNKUs zwfwNV=wn>i8=gKppvOAbplHMpQ`qI@rhFU58V|u5HMNUQj=5;@d^U9|6Myovkx6{* z@nYHG!yG=_7%bMh(Qi61^kcZ93{u+9&F0Z3sO9JYoyj41z{Ff^X#bt-{}n!1o?)~~ z?zhyLt9Le^OTJ&o=PG)kM~+K`@KPFDVCf=JkBm@gH{~Y7(8DDR-~`a3!Px5R=KOlb zD{Yp#Xjy{0mVV1RrjF_a7u?~gH0ZIfs0@J`4(+yG$2uI}LSR3^1{#)k42N*_;I!ZU z`u|NN7(X}(crn*RJ`z<;bF#y9T@82c1@it55Lqi@{DQDHI* z8_Vr&y>xE!9|o-j^($str#Y35H15fyz427USI9IHBsDkenc=l%Tyb4S6YoC*R{*G_) z7cR~bA+({x+G>?uzC{2kHgUG7aRN_6iHS}2_N&FCNE!yDa}Me9%Yc+o#TkMQ?sGzA zN9W4=#Fr}1FS?dEX-An1chgKIk^X5++`FV?B*e8%1qAp-mkeZgAMY6pe!z;7wA|20 z^G{dzqt=1pxvVW2X9S|?VNT(J48RT1*V@{ zj8N-&J}}%?aq0|tnyyAVx9<|2C=DI=@i)P-4LJE?mBRbS-gldj}V=|*S8hU zhUVml;VB9>F1_cky%?keiA0Y#4nI;K=aS!vXV=~wq8j4+UV>D0flb!*YD>0iwL5Z6 z%2pcm>g(d;*3j=jBq*+Y^KZygpFp_cwwZ7LE=fa{uZs~D4y0r^+#4CLITFX5dzA8wgQ@$wvuKI)vqJfzz0ZjbL;6P^H?LM* zsQ(GGK-8J#^3PvS9oc-~+e;vIiCl`yA42Tfs@Eh@WN$;1${2LL}`{M5gD14in z#s?W28&D*lpZsACo0f-=33)@o9yS|wo|_^wo?kwEx2c6?=O3ypXF`j#{CwWAHJ}C{ zd62I3ceWVrH-rX3V-zjviv^?)uQQB&>sWVWCfJ_@MGV+2Ro*Uc{fTW9^IQ3t95`GrmH? zN5;x`Sl@`hdUbZ)hNlF0_+lzwM@gmO5?@3yphPR$`M$Fn42=P#k~e^6JyZ6?54a=S zHNn@qD+fbyHa?y?G&I}KyFlB?;C8z&5nJ%90k~NMwOdwaQnk^JcnB@}NtaM9$mj=C z_9JVHvBA;R;V7kg<6WZ1O}#?X9YStf0)$;RHN}r#1$hh_Fj;}6B-c0(0M)%2{}CZ)42D)A1LM+3J#Ogh|_QnLDb1n>DAjpz3YXS&#XNk zkUW;Y2^*(W<9@KJNJvPUxprpyE2MI;EzG5u6MbX(2XLb5o?A9MYXkm9>1N|wZH`3sjG^r(QxQWt`)_3^kE?W`L_10#E9`R2 z{Xe;&hF;b(vtzyC;G*xF^#Wri>P)+3)?nPt|Fx(JFBSo&n05?GaK7qI3DMvof?St+ zuRFtZOUwSy;Q?13`_#$7teS(1(Mi6*e>&E(fe{*jne+&WqbLQ8Tz;qufdQMc=fcIKxe>}Iv3l>P^V6~|B`8V?R>Qx!|6MjD5c-`H*AM05+TYQ9#nntRKCoUf!9n65 z{acy(*cma#p9S|YqkfyBuV7cTZ|aoe73@xU@D82q2_F8t6H~PlWLX&BbrkId+`=~5 zUC67Aw$|PSDwexk$nxi+X-(oGFRZPDVzbQ(G0@v|@Vl}TG&+OE)>ixAw{)=#B8<=vO7WDXbuo_LFleUDv>C%P(4>592+#(lSUoChs1;=2@oh&;tc-aZp#hqx0 zV5nS?^`i9hXRj1kDQSH;EG#UAX_S-SijuL92M4V90^D-{2X9gBLb8ygr}`W-1+ELf zR|OHAG0(8konedMeGuiDyEc8a5T$-N%bA6TV*d}8_8h;Y#<$(t*5t* zfiVb%0+Ez7RgATK$UhE77qLnG>e;z@B;|x56b`T5DC=(HgEmE{MGGl;sG%+MYI1gR=Lg%q8spdeRW2Z{hcS^4+aT` z{_A(%J2X5!5m99R&VI}k-S_wJiGyKGFL6_0VMBFwQFHYd_T;hhjKxKlQi1Pjg#5-P z*Y9R6uQ}Gx)Kn~o|MGkB`+_%OYAq=#xm**J{x(Y#fCK|!fLL8ytEi~xKFI+876JhQ zdG97h4VSRa%*e>-MltG7PEP*q4+4VVKQtufg!ocoi9{ro{vT)A|6b*Pmi%A-wg0o| zpl5zzM`7dJ$)J(auz~0 zH8L0~)Wm!5JW9(f;ALvAM_R3;uK+%ZS9N!`PK~=@(z8>H*XpxT3)u`@?wFW5BCkhM zd{VIrTv}}HxB4Z6J09BKd^ro-D$-@7Plt0m_PX?HO%u%IdaZ`rJ~(E#le1*VwLjLz=`IwW~7=VTLFDxz=XsUiC<-;;YOPN!R*X0&Y z_x6qk4&FWn9AKvK*fT%0yW}<8xT(dBzh39+I?Fa4e9B>}+1Mb+UlHoN*J0aKBMvA2 zlZNmaA>aHF*9D zk&~7+lDj=stSf~4aBgJhmzHe%qWXegjyp z&=UFF7&^XGdR?)8 zJMAOlOWbvJ^+D4;3Z>6s84CZi zZA(!i$dx{U04qb^ok43oZInFaukBxFrw6tr)+N8w`8Q04jybi^@BL! z8(BB7*ZY@jW`zQg4tT+XNimb0?bAQ zL5(b3iRB?fZ+qdj)bjfCKUrCQMU{OzZ-q?`>eukHFVdzdHR1RCPqp--c}BX z+e&;uCyDhdV}w-dl>Z`|qWIM~LQ7l$T=&caC`xFb#M&-TWRpyd`X8XBaaroDN1JBz zKK%Z8PY8=U5B|II!L6K|{HvGT;l~YRv8{sCy2?p7lsY5^3l-(l0-5TWI%-xHSb$Ip z()isOjP8e2lMmfM(XJ9rh^0;s392G5o2eFIFNqh`&poX3YYww9h_(?C5s`0Iy`J@T zuantg&!X!vXCwx9&e<%zrX0Wm`b36}LR$gqZucxZf+iBFH zECqbsDFnSGylCNDskzHO5pFKbw3!DbMTTMwyr9oJr!I51wzg_arc(|uiw!$T`uvO` z8Tj@qq0w*@R;8=UunjaxGcFp8#^7{kHLofx8;x42wy}Xf%rM|=t@1(!@J;*V0s7dv zVsZRsCn{gY2vIc7Vy(4?LJ10)R|ZB07bX`5oyrN%%yI_DTNYYe9$@T?!%LDPzt}XX z6)Og%*R`@uWf$~~kF*?*sglL0$K>vw9@u^-9_(T@H8<%V?!D2pm$o1G!pNN;0y7be zsmDDn*d%krCHf4ynldvpA38YaXlW_nVZtO=7ak_!@#`cN=76OIIg(+PljNf`Is`+2 z-RJBaH9kIhTirW%_n88Fn~)2zs7&Afzvl!S8(LWElPRdXbD74uioM6Y zE5}t;QG-)(>m3t)7AUI_QsCPLM1^K%%9}huNHH6iG@jwEk{3f$ptcTqf`#H{G7}g5 z?9|20;SNS;u5#OwCmYmwYJ%{VE^aV3%K6}6O^*7Y-8M4w3J{YH(eV9fv?{R=JB4yCj+Cw;F1iDyj44wM)r&%mkZ~&7C8IO4>vlxDO!{zXs>qeyQWsL zP?0T)FAuTzR)DIqvUZ0X$_JRMgTrc@^Vv+Hcwu278Y=2$r{{1Q+JBn@KD!G=UGk2O zj+SO0uD3cqU2aIr%6i}Iii(MeeH-bitFHipmVMw-cRGrJDKRAQ_MdYi_C6DR3!XRH zPG_Vp&Pq%336#9-FVhO-V+};*60nrGQ_}RM#0iw8Wyo8r&-?F$=fBvt;!2T7n^ePA zTHjlUZ1dTNXUik&O;0G{;9xb|s;Y**g?XFVmE1Jsa3=HbOLi2KiFYzPFsJqOXGY0< z2ARy{QRO49Yp3nMojoH9^W$3=C{S3R7E=z@ z<^J@KOjRG_QSHnn!IG1d0IoGvSEKjixjz^h5VwLGJ1aV0w7!`Wgh(^CD7$|OSFBVn zXsn-?*?f6lw=Wvms|cJxMbFl|CQ$pS-Ok)e46pd5)3J#M(6y@L2bRMVv5Jf_P$cii zt_E5<-0VaJqlRgZMW#s#;ct!^4Z)wX&CGfWJ$hSMAlxVSwhuX--xl(ePk1$r;)gF? zO2&M0ost}*mRrSJSv;sbnl6&UnV?*vMOMcvLOEI)p{M6EgJ21)Z7@Av7k#ul5!(V` z>LTJVDhi}f%i)<$Mkkq34c+h8o0)y?gFJAh<^D-{q-{$6V3x~ozu^vIBzp^fz8PfD zv0>xhvc`CjHEa1N96q!fVR)v!>^7Y3nW2{ZF z@kYsNJ0H}_+ai_^wbwJaM{XuNNmpI?@V@}*Ko-9wOxIR^Xu?y!RfyBB96>^S^vcr# z-)=(NOeL00$CF5uU+&8Dxe%9^m!rJlsHmuG*RG|cq@<;#y?XTuU3s#zvr&JBp$ajT z+}McgWJ>WNbhhDeE&UZtrBIriTG68cLMI;IN%))DHBHqYObu)wS2w~f1ONcwcNJpB z;1cLwh3lb_iJ^@$VXZsdXub!ob?8D|oAXFUOi;_rrKqNf_{qKfQz52ZKDvRMb@Yj( zZ01`V@)d83iH4SL^(YI1A;cq8Gn+{LlDo@u(I}P?XP=byEkQmN>cu%~SaQLqDnV>- zbelh&g+(u)@n*a1AE)uZP@uz}J5C zFtOB1@?Q#Z3$7Ze?YtGcNlamo>)%fuKkl1^n1h=)GI78_9~3egyNp6at(b9<+e9}(3c+Jy(5l9CMTcU&BrF6Qr3p1zxy+upKt7u*z79XaAZf6NHEoVMQom*r;|8O(j#&=SAXdsXP^ zuD_Qc-dI&KRdfEsDjeKG0001fS0Vo4;}CmWD65;=)i<>dS%|x-gzM3J^)wV^RJDB8 z1}FWQ+S9T-s1Os5t#V*v(a7oi)K+7*xXbC!t*mS66=GeRj|rpQgp>ZxY%J<;J3cOT zEn+Q(oh3Q{Q@BUhd8>)-7rCD~wKN*$Z<8Z7!XxsfgjVtU|MYB@@XenV# zygnJef!Kw2nXP5%6@um|$$FwFH8$}0oo*WG_(lgsW6z4}0uyz4mylDayW2s(MHp$r zqGoz6G?t`0&zmM8B5A(R=|ueHvf8G%AjALw03gKQD#URi9-}#>Z=_dzU5MojEUO#7AjCawyj36auf`uYH&W-}7hSRW zXj>=o%R;R7_Opl1CpS6E8(LP@H}?v${u1h^Labjv`D-CY*{SCb1aOTRzWzkg*M)fE zJfF{n*v*8;%x-048<8QzYr+%1M~L@dem&q0POP?9mSq;=aq82HD(b!>#C&5#Qgc7f z&{_4`Oi5NkO4iwH)!y(ER}-#>tzXK{jr}GePJUhfi4Y&%=rNpAH?Loag%>gBU;l*= zbMY(-KR>X&pLFhkKL?k1a&E(})k~xdZJPVy$-J^3Bc=B8U1_-gdM4&wyJ>dai2S&IKwA+CCvz{$mF zzaxgZqT2Iruycx>PI>*W=u|gEAx4ersBKtFON*72bx_pqW?EjQ*}H%GO!n z;A)Cp5qgGEQ?c8Z`|mwVAfqIkc1Fqsg+gk_~1h8{Y)KBilc`X&|^hKV5Yk_eUY_H6bdIfZxByZlr+P)3Vx+LhKsSHy7pnK_6tR zCz5goEJz_Pn>*3i+8fu}`MpBi-Cdl1PgYz&Ov5z0eDKCRYFAr;o7HeWovh~00kw_G zR2O7*3p|D=cYmi4H`bL;R^nf>_7IUNW?aGZ36jDheM0;oI`|K9)o1TMj=I%QnXfw@ z`xPO+c6coY%YWwfOA-m?BcRZzwb9-1(pW{HSBQzY<xTb+8SI-&FuLy^rlP{=RC2nFb?0p8;x^e zHEYUz_kil2CkZX(c_Du8i2n>O$4g9S2ywxi2YwDNHcROks+k_SbgiA(edEw- zwS~*tdw#UviwKgRVTV%YksF^4^>+=5Y-_IDw$9$&&3UP-lULx*=C)3_6#)PM{Psdj z>S*2O=Q?K8$XT|_@29#Qj#q9!s&8sztf`~D zB`@n$c2PC0oBH&6gai+V$zrd}_aBh1q5Ul{d>goQK1NhN@yT0S_xB1hp`*p$aTd3r z%<;<)S~}1#4QfMWQE0HQ3>SNU4sliHEfEfOo7MX(ac!tp>niehue8Uoj`@lZUkY2r zh2cGZ`5}Ss!=(JoC(g4cv2pSA2{HNd!2s^z*tmxUeU&#rhzT`$Cd%XFwPz-zWYGJQ zp@HFW)rqIV6=WoKMBnHcNcdZYxO?|O=$M(AjbZ279&?MyqQ60iyQ#Qk#)?9cN@o%twh>5FDy6dU?T%FrV*Gslo$8)k zJ|K)`wQ})$TU>$k7j=d!%YU=geZH`a&ZC^t-n8W>7ssNUW}8JOOICFD)=#F2IFF_E z5*6*a#cjRgW@J7~DXYfOj|h!c`07t38Igr+k9?~TBQA$|3kyn~IFr=cMMN(Z&q_1(B==h55Pn{s9fU{Bn9gZ@6?qvIDEi>@j3W0smEFK&c{ zn9$nbV&!-wF_m#JYf9fQoFSWZ8aE479a0WF*Bl_Pn~8)Y%pvx*9ujq@?TwT|E?q zp5l0^k=SwDW6^-e^sRiS5F^*jdvaZEJRdi&kcRdoRHN!@svaBGFGdmc32|pzy{Cl% zD;u}68j4U~RZ-4#v6tb*abFSQhPQXd3-JkxN>0*4LF-O3G+F0k&y+Gj%Sb*iCcq^k zC69JF{M-X1&7Tar_U`3vb$Ky<5lL;GN$4x#m-b3)OwBK= z8!(m9wcW#fBqzuCiIej_)G)QO5+XKxVA$ADt9Ei`b@$MO7m~X7OCjAuB zQyMR|WaTy|i^=^$Od+(L3G)}mjFFL7q90#9T?JW54pyQ4r*8KRtcLnl)-BXRKS}t5 zP9*j9?IQ&_8nSb6*sKigAJ5otp`?Pc8d?XcE+u(s31z)M-wc*tgl|~w2~if9xT#YlYL!xMVaoNzn4e zx1MHGh)wJ|B?1`vv`8X#nIKO!@Q_62r{1zE;{)fe19!df=`WC&} z8L&c6OO3w=qZ#HQVUbn1-ULu8g`EBLj^hF|Q4wKb5z$4?-l=askUu`$uU=rH860t& zNr*`ocC8u5&;OvXH`KTt-kLKOmDThO?(`v5NK!WR!o5BvpjHd$ zWK&b|VnrD-Y5TrzbhL&KxdF=^mBtIm$f@}4JXu{+X>F?Qw)r?ih%X*oGhRXEd42=) zUKPAbv7I|rL|91MXhuRx=A#P-$4Se@Cq3&sj`*{OLNt}-$H~ZroliwVeEmqU6#vY3 z#E&oLsL0P;yUbBTc|5<^IQz}3Y;-nLCKX_Z_CoIh>Vk3A3f+O6KFh* zA_LV45%*qy(%N)Edk>xOH;-)f+jII( zw|9t&iV86yB_(zL{{2BW)?Qye zQ%~2|ciAM@4aA<`GkMQ%dAL{#v9l*-xBeX=?k0YiHI|Q&J3;?>mH$dvLJJ8oN>nnP zYWuRbsefDE3stW?pud(g|J7ZORW3Gi61TEih@~%tW#mJ4?l^S$Pv)OHC0S1=+b*qQ z>P-v)004jx1K$IUN<4R9EjQ~3|3lY*vt6sodpb!$-Y@I|JX{7L?rk9^5C~nLL8X4- z454-Gw4cj1V#L1ly<=|UDvPFS%8wc|t+Y>1|3ZknY4;+xC~N3G%_>5#3EA!MFnXja z5@M9OarVG+F`=0m^>hxbcbsMx(A*OSYOeQowBj-K?CD`i-DoFmZe^R6Lm%U?^uyD8 zcT&;(na`7#xVtbnFarPp03gJ`w?Mjn=2+0ygRipR)z;US7UiGVTM#Q&S)R zJ)S>*&cnk4LJR-^0Duq!0Pvge`t|FpSFa|2#=U#VNlCY_-?)*Ocs(H@@!GY7D_5>v zzI^rk`HNg!Tp+{%00008F#rI+1L$=Y$bB<2GaDLk=t@#wPcL~*rT}u}fC{Un4f%2u&-bMZiLQJJlnsDe=_YquU zV_Q3(O!+bI9oy!nD6gVf()c_5Ou>h&v}c{-@P#U(wl(5VHMX{O(7rI{FpWy4*Li(? z|LX<*l9bpGdEHq>74=`5A@f$0;snvCgeUZElDfjyxwB4QLL`xYg$heM7b>GMHLs-l z^N%RR&TT%n2G*+x#Ger=iP(i}Y$8!%FzCM!;=6b6W@l&reIb6Fnl^MHW?66+3KS?% zpg{RjSsk146NI>~yiiX`l!XZ)QAxvT=IcYk(lXzZzgr!G9i_*~DHnY~h#M*kpT5ZK zB9i}ILL9VgF^jJC7lgQesj}QKmf>bg*5KL+gRY=FD@9dIkd+G?bN$KR+~%KALF3e? z6_(e1X@(oeHefMa8^SKr6`Rz#$KQ!XXCdL&5aK7Nw~H$2g( zj%JgTSBp=7gs_+&E5sem zb+2E)tZQoP{(Xg*MCjP)xxi-C9wLb{#84=ttA{rTNy;Z@d;szNR|>JXOZ?tLC)e$c zRP{QwC;X)KhA312*nNjiPFfM?8XUDd{G_OJe9*p#&HExGoZ~|ep7h)rspB1oX0Tcp zGk;w)TGnu7tnZGW!pJu^BrF20)6_p^=fRUc+auA;dk&p+4vx0l zL|dOKZU9nRWh0Z)i62@P#9?IPC?OVZRihF;i!huoam%N>qPUQcu?eM5wu5J!y?d; znzlL?#kqW26p9&zf#SE{+#3d3AqqpnB_37dhCPvJXVI!0Hb+hNr5}28Hr9CG^gv9C=>vi0iCF*hS8MSYhzdLh(zZkIu>ZZP(7eM+R}4$ zP~D<1e74h1JQM~xn&_A^!dS7L9tJuC8K)CEI%rksd_ZT~zMdm)yD=JVMalCNI+@Wr z6+KR&dRr43sqYhq)`@Ch&RY5rM`xXL&v(i)Fb17D==?!vX25P#E%dKU@V*FC(3c2J zM>~#A8x#hLe9`~dI}fNRuJ4aq>Aj1fpxC3v8e23b8WR%}8&ahU*hOPaY*AycAR;0n z(tAe*LFuwfuS;8Y*}}puTUk2!-C&ptuR&2#p>aLW@UtvcWXHo?O` zqB5+`c!Lk2wU+EfWE{ETwdw%Uq1#WwS=J{5s(_4%HhnTC zqcUKwfUduZ4!j+wkgi{}_vz6qkDzG__V}K^`RLU3M_~Li+O!{zKDmlku{e#CH2uxn z@%&?W^ZhSRV32^dl?QyFN8n8SeD_nR0-l6Z0}6m;=uqrTfzt<*0ZxO$lhD~|*ZIfT zv;Yn_K8Y9y!7v^!-+i=rukTs31#N+nCcna1MNWh-_CLkO70AFQNqtm?qiB+Zj>aZQ7?3WA3`F^9bRL5q zzj)^n^ggs2n@NmOzrnc!9RyXtOZzYNO_C?CAu?b#fHUaCdvo=2(Oj*M&egC%r(hL7 z5g@ku)w5UPa@f_`S(p+qUtfO8lJBdi&Ho$_-#cc$@+aH>9uO-jE?ls1hQ)EW_e1R5 zX37sMXK&lOMP5bYe+b0=$??Al#2sydeLL1}*?Z~#55$ns(m^x(LT9VXjn?jwF!8?- zhyksD1!wGfreNj|^S+LipTM z%1_J652~nI_`&=OC6&$nr#bin+NxOi0h&M+HA_F(4_9uiXw)cqzV|3Mr8naNux60h?oo=YedFpPQGxgNvL2rI>-QP z@CN<@v|%#9xaLkohMtYz1Zz~rPDD8-V=5{`29+@tWSAl{pqLseL)ik60efUj{4p8u zW)><#36(Ly+D{X0BiO`bfLn}2GG?GMR4oy=fN_mJ8P9Z3|@VS&g{70H18@F|pmH((P08j*oE4RbYE)ppO`Av#u} z?zCNqp1wii0B`(ZKYZ(h!HLPxwf4hgfO|0+pxg+RF&i1o&y+0?pR0*v$fGjA8YTk- zV=`cnU_GuYk^#mI?D~2K8UIem07H6b7ra4?!>8~Ol+@bkrz4Uv8I>U=k|8aYfp)z* zS`w-#pnd}Zpl2ppQW=$DAd&%9z=v4xKzrx(mx1)oF6407xB~wmGOYZNL4wMdG?)zN zWo!h(A+*sE2>*hs!3az&&@Sj`W%It%P#u*4y@UA;&Vos{eS-vs6IvIMfz`#v71YH9 zYwqlmp)Z=9reU+w4rE%;7tKzZA{pRM15}2hnLpT^j(8Z60lfn`3=PAqXQ2c ztJoZf4H7w22JBQsXD4mZB&jGdNe(JQOEgKs=)xvRusPiU>*#)`A&A5T!ywTU$uJbn zPSeoYNzSxShG?!9Pm%-YYUq@2fAIn1pCAy6Uuh8!HI$V0T@Mw1)FI?&r6zhjaDU+O z@Wq=PL0hLp=&ijNml^2i?-BqF+!)I1mv_mT-kUY;J|iEl~^(;s=b8LwMBW$yAT z*KfH!^eU)n5Fv}OJU=@q;F+77oA=XasTp{_M6PXl?km{I;0PP*36UXC=3zi+6rsLx z2)gO+Xf45I1U&NvgU|d!3kdaMOr;SkyuBWlky@Da`uOk=H+Ofx(C9iktAEOGXI0_b z06$;1hn|sfN%W?szXW1!oe9p)PU?mWa75;SkJH0%PWx=x-9HX1sP+Tmo^D|YJ~Png ziMyMd&$EE6ywY|F>=Oeqn?Z~Y^MBy(78o2}Nu-Gz!le*AA9c48&qt4a5|YwdT1A;E?fl5lz(?`vLLMtACJY8`VHGmQaN)N; z`+Rj7kuk!)|2`nrwef?X-MAei_Yg<6k!@rf+5RIN+&6$PMV~Sdvl*oCR?JrU#-R&E zlJ54F(~jFFYO9YKGkVOJu^KvhTO7}DyRdrQ_s=*R>g&qMNRJ*pMnOqs-xWWMVZS9P6`;&mSq0^JOV=dhDhEZpj#lpVqmD+CCV)0DC?l&dbHVcG z*=1PajF>0dYVx;(UOO1CQ&p57HF`8yo3Y|YJc%#jv$oKOf6SXc8L2*Itdgqcnk_aq z=39ma;t6_FV&f7Gbv3phf6%W`ceB}YeUrmiqaR&Rkcbcqnf0ffET&A-m6MVh4Xu`u zn>cBT<8Q7VJw1{@oD%K7Va*&BMcL7#N6E=6&R_XmY6%HzNbPGsMHO|=$Tx!mF^5rW zyZLJ^H6`%Cxbf0D`i4%Y?+ZWh*yP(7&m}XBl))QFVJRql$~6=#%Vp8OoH6REU()Y; zjkVQPU?hOl84K4W7ZJtIFG>wsv(QLU0Yr|LS5o<6gXL4#Gs6aA_NCqChTsR8u~1!3 zL22634X-PaM+t8qUOjHC#DJMN>vd5z(llD_ew!ckbkxU>8w+aHG8T`ycE_8-YJpHtSBgJmy-`O?^Dlw8oW?$GvQ|fb zQGtl9fiyCLuB&QH2z-f8@%=*##66utx8H0P<>fY8A1SG$whD#h>U`%d>t&^+PTr5j zpbdanZ^o>z=Px*V*^}PF;j>xck1tKpl>K7s{??A}p@F!kQ{b{=#gy4gd}H5mTU!|v z!fD6ts%jcu(V2q+q2HDLYq!~@6;!siwpQi6UORh=nwD;6B})v%Yu2v+!NR4ujtbt7 z^f;#>Ew$tDtTKt>FrBxp`N`=#hsPJTwZo%zJzeehPuQ#KPd(!n!enzftS0|k z$Fx2ApgSk{x}1upXGCiEdn=7$K%8GeI_I!OXVRRf@mZY`962C|xQA1}c9zb!R!5q+ zt>Q959@BaA8YR7DHJly{h^6I~&v}HkOVCW%Z5MUjMY*+uEbP@TY^|)S?vOa>?+)wd zf4!a3#1RAWm!>W(VV`n#9d4n4?xcCf^bX|TKb+RhShlf(@-Fj%%c%Wf#q7TX;)vBRTX{cOq5AQ?^wz9}(-^^R^wH=+;l_~+mE%fqLGxdIQ{)5-~&LD?I_+j}J?P)72 zn%XcR9wn`E#xqj9z(Q|V$CJxP6r?r6^B6+|ac;yNB~^8=m@IKXv`0wWyijMy{!6^h zLAt#hpWQ5Yw?0P1y`xGhYQ71%Vjy0y!GY1%CCZ}V9WYxjH+K^YNo#3$`^8L2MK>h1 zRBX3L*mQ8)%3%XB^G#}@*bCi!ipA2oDr!q>1cT=gb4dk@W=y^9|FT=uwyt*Jahr{6 zERG^em!Lo_Bc~aaRonl`x^{?gZ{Bm^6Unh20pgFCHz5lRo?IC_5+NShMz)b{Wc#md z@Vq8Gp!_KVaR;w?=cd)8CVWfn?TzsGMOki)(d-4wC0>(slqVX_EF^N;m^I%nFwmQ` z$mRU4Dl&5b5Kq+8w=*+S)G+jp$F+6#4DnDMIo(fDS;HedwWog$Z_u5CN;2aD(#aSQ zYfUsrFX`7hQrYtTT{?f-$Ca@erX}Q8_ZQ#edB#FjLnl7F3Ik%DSu2bCFXf9*4$;?AI{P?jXdu3Q z_$w(XsX6l(N%ozNn(W#wwvC*&L5YaRqNgTC-MM|!Wv~6>xzlCjmF|b8h=KUD=Zo%l zT;6u)g#9R~Wo2z0e{#v+E}gA0e_LaFPyZ(Zho3Tm&=`eS72^Bo*5&h77CQ{om6cS~ z3#fwwabd*m@lvvL=6x=1*Ro|_80c!sF54~uJy^=bte@x|{aoAI-TCm`?&aGL2#386 z^av1tDnJZRa=?S+19FHJcZO;^MCf3fefTFb#cSG&BsoOLnFoJt^)WjFx47X+3|@I% z)3&p5+V>|{yL&e1uEJL;I z!l1B*UAUsja1XlQw}?ijj{DmpKj?X5M30iB9^*iH>oBY<6)XnnN@dZf*rv8KWXwk% z^!#&DN>uTLPYhGsQph9{eV~8LL!gaHra=St%UXnJ+eau_h74iwZgM@LqVE0uGUlP0 zwxOeq1HSzut+A;^!7})tYt+);UJ;qRQxfA4?cx_zETL;a=Ktgn(q%?O;JI@vd^98#H2S#O&4t-Sz+R7oHvCV7oASd=e%rcnG! zesTeTI6A%jL#s?wWJ8*=`YDfup@I17-o=n#tFAe)@3vSUV7v#!z1#C}$ zYierg=xD1cD@ykV;;RAK?;gqPYIptBanz`##lnt1S#`@lpP{|=$beo*e|B-0K-|Wq z9Jc&kM^RZ_T^+hgTU$$BYP{lyfjB4d%9wHE)ipE+G)-rNO{)lqRW=>$9oWWBuM2yZ zY}qpc#Q(}wCU*5tnb>?QD;`JkOsaNGAh;&hx3E|rWpMM2%vlFw{77m^ayp7iMLc90dj2JqQdzC%99`bXzv~h^Oo(*x zD`}xO{u4kv!8yk6LGFowA}Uwtb~Jvh_#4-W)WAa8vy^J@SG1^ff`(1#fQnCZ=v+VO%H96U&V{U05^}XU!azjRJiEjU$vs@CaZ={U<$I$;Tw})wzMjB(_T^bL#CiNr* ziEv#a}lIDQC&?y2PZ>iYNg2btWfpw!mOn+JV&C7r|OC=N;0e{)-QI)%m+ zoOut3$-EAa;H(eTGT8gV{PGK_;eBnJ<&s`p*KB<$euQ*~xy?csyZD5GxF^c{cO4B4 z_t>}aPo(EbWx26oZySeP(W<+lvf$>069y9|uC=)!K+`7xh$kD(gasvxbQIQ`?5U+P zhX7(~Mu4<}`kla}eyeKrc0IeXM^Rcarm$HQAvVk??bo`ZsAz0YjJFo77>H`w*ls;?|g5i7D6 z&zg2G z6|J7}MPHyUc+t@W8MC0jWz+b1Z8Oi|YT_uHND8;(kb9qdZ6D>&C-2gEBcq|>;aDY0oaOo1d2`xUd?!|}4FfogWKnROg5uY>_f zI{?J>^)ykGJ!szboHB;saahjZ1Y-DJL9DEkHvQy)xT~v2*uw00-@_>`iO3VQw*S9? zI6&Pldg0+%h|PbhKpeR7YH1n1MA3Yhr$*5Em>LF|GD5n;++e|GST*?*1>&C0=e{>| zHB`U1INr!bf`~=0g0$6?es;Rd|Er&L?(XDWu-hUny}GWaSDZs!MQ?o@`@m2`dWX}= zX3=^P7!WU5Z%SwOv08U4W$jG$)mt6uZ1IC=e+t-5RzEJEylh8HdtVN*jDpJ5C$aB- zF{GR4vVG;W<(r6&E${33)oRUGTX!|FTg8QKzBU>*5O*HhvS7->Z;DCpelwX?nZCeK zbC^I3(a0#T%UW7GR_5Cmt=UpXXZOXtC4iVkt6DWvcb(;lmX3D@Tk4Bf&YwDS#SU6) zHwMIGq}Bg;@}ftSrQP1jJ!H8-RexDIyM1UNe(iTzPG0$}dw9n%R#gbRaZp8FGcLPE zoGO0HWt*I$^00uor|q2G*9uBnzRz*u&-o1n>*i_=3y3+SZx+o~TV=x)S#N15UH#eA z0VxyTSe+2(SFkB>XKKmpyYzVQ$KyT##GUQJ{U&Q2&pqlGd8qDR2gI;CCj4r~cr;cj zZSkU#*%la{Gw{}=aiFqIxQ3PZY8?c(?`6L{?C>!=D znjwYdEJMXNzOg;9so93h?hM6JAT(`4;c!~^A570!ai*ZYreTtO=wPH6sALn48OQ7( ztuPM;F-j&uSk{NS4T{cYAuCTOH?{DW9#7P;2}5p1L*9j$x$XKCYFPKB8~}t#raGuV z^HDp{94*^$wVlWfeHF_f%nnvp)glnhHVHc(UB_r>-nc6QJT@R@0vg`uE(xI5w2M%I z<6_>h4SheKdv9r1QPMiUqi|yfmocHA`09>cSp#h;DXgsv&0}KP~8@c2Vt2T zeYp*mK?BlMq|JhLcSRP{cw!)ywM?ONTX$cMMau*q@vkKlYRC7F6iNay*3n*>G!mIE zYtm;{yKmG*V0%Ux2Z(bpU?hMK#XyWEY#eRoi0Q|zF9KrCz3*LGzqaVub;A}JFCfLPp9D&~XC z1~NOt#HTYByM>l&+J-5L?5pn#e!uW{m(zv@;?c&z;?qP0^|P97gr!?0p{T-WPZYLC zvWyIBVf1$Bh;TT6ky=(E<4$KV1RW3M zLqp``mF;kV1J#@_<`|XdR zR+;Fank}EMrfc}St6xZz}m zFOpFh9uPx-`PDOZWrb<;z6eUpq*AH)^aSH|E4OdnG%O(QXx{tv7r^c}eWDvER6<$7 zq1|S)l$Df4KnxGeowVOHR&POUP8pri+|kwD1;1VAv{gz<)AHcO;;LF0zm+BV*H52L zD5~uFFc1s*tnU|1zY~@{^3xpuJ|Ko=-mTAiOQ9(f4n8G%u;_M}28?D_Ffz>-r*!THTN90C3< zp$g(-vke`Pi(fK;OJ2$tUK&(t+rX(WCLK}8EG#F%n?1qR>}GCaaHU5A z!TLh{A>R_u>^RDV%E@yy@E8lq$A>Ck##?9CuBcaY&RhVHUjVN=6xp<%%4L z*g$7l-g=E0C$c+o%c<@!s=QO`>gpLbXCp@UZ)QvhEBRG^UyRecib`xS+!ZEo7a3H} zJascRpDMWPoelZW(=HX!NR+8gVH2E0DHA)xFXEcZab<7vh#->GBJdOi?;RiK=jKr# zB@iAbSJRk$4hF<_QResG5-6BA$hBm~7sufKKx`dLc-#}oQPFXXs%Ez1ld~Y{TzB`& z5<1`Ydg77?g+kt7+COhutG%{L#c}2vW(8%Jf z`StmL=;pRtIPcUtC=g#jFU6NGMMBQeFDf{76}1srNW})0@Xq}t1%zUQjs%q#71zN* zqjT!(S#1pZAVA#IKz~t0Yos>K-Gwr=dB`ms!#yaghSh-qv6NZx)%dEMG@@GqAtsOV zCbr`HgFzS&)9KBpUe>}vJzi2X%Nq0?BR-Ha5%S};%o-XSIa_NvIjQ*hj{Wo9&4Mqc z)(5;IxIM2bC9}_Zz8=3L@W*Qz3IG=6#b;l;<7gpiHTR!al~Xy~ zwzeUF`1@(C)nIffpGZl$5jQ@NT1fT1UE0I zs31*#)5PWH7a^{*y_E`fvdIF!82kwA4(o=P1M)*iLjy4^6qS>c6Bid3GwfGdS{k76 z#{%)Y_nnS!c zz}t1hmy49-K#H8f^f@kPZZ>iHvQ36whq$pS$Ju<#qzPK1(WRaB42*s`fC<`9=< z#{ay21+pOYC~5s^bI-WmwO=$(oH7BASK?p#FPme4EKzK*D7y^Fl%NyKk2+gUH`J4n z0?$cnP0(MvX=he7rT4=?T=Cj__Vh)#O411X{`-I!e$EQ!&Cw{toR6yN;IRiO_8}lX zhi5ji*13eB;mH^kG&=Y$Wx_h*L0%K2I_O&?wG8*gRWk%TZy?N?T*WQVE!Nx_B)cm* zyoSSXYM#0auBIV=xTfmzhUxu}UP5o(FGM&djfcR%O9F^Ae zxeJy89{O_}DZijv&o1O)HY4p#k ze$yO+M{oaYAZ~7CtrfM=$^*}3wMg}Ur0jhl9`y&FCurM$Eq;%0CAe;jBXTog`RP{_ z8gt%(r~~mNTynX-84}u`wmVYBqz{NMJT0cT2(Npm%9;fZNSSbcT0x~Z8=&K1yh+H# zXmUwbxwJ_j05M0{cJpKc=7jZ;#PafbbbP)8VlBHU1vKWWb~HJ^N$CDZFb2dF5>?*; zarMez2zxioaSTFFIL zde+(AT3uQG_HEAFw{J_!D;k-c-aaT2)KyjDaJgWhxTLI^%@fyds42)VED|l!^=B)O zRfNak^NP8GHk5F>Y2@16x6qVACWkLdy6B*h>k11HRRx8`WLlHt4x@~XPF&i4AU5*!ZS+VL*^x4xzVT7fStYi(;6J>|%SVTq1D zTuEs;gURl**4*u4xE48Hc&PqLVACFp7GR zPHU*9ecu1*MO48)xAgZhYkz1BrIx-(^kCfBQ)%_QPM@bqNQAhx)lrludOx!fpNiA8 z92|&$2`m$G*yBZ4+_}f{=zkRCzA;^6ftMG_@g<* zCZQ+8>x(k*V?{2Vyf?P7nKOHT^wa~{wbdje$IzQ8l*B?Bh0Q-?8*i5-Cjn;-m3;4@%i=!G`n6I-(>B0OFc@b~CFjFgR7bh>8Rd2Sye(=Vlj+?VH?t z%VV?QYY7q|rZ&op(!RAEvlz{+g@>XfdL%&3Dr|3H1+9@^#}u}A_r8dFjRA2|Y?>(X zJ+q0)TI>>i{y8}}xnh#YEuLu<25oR4Ua&9R3%=XDsWLDLy!f&qE4f0?I6w@~l0 z2)y_#I2TjH<#2y6Mu3=9LlQkb8D#2K*-%52HxGFqh&SKNCf7Ag-xCdfgDr<7@J}j} zlmW=D?T{FOXAqkNuwD|sxk=G77=XCGnxxpb5=dZaQ@c-GzU=QgEJ4SSbAb{$#H~XB zF=PrE-_ERQMEzrUrNPoR49CWbZQGdGo@6qyZQHhOO>Em*lVrk)trcftJ74zR@BKZ0 z`#8F;zPhTq&Mvhz^h6#J5kY{`DJ+nmJmfah%fT_TL3Vo9we70Ac?LW(=i7#Z;z*Po zaSYjr8M>6A2k-jQr^%(jK#|N+Z@|o^S7U1A9gCz6AcS+DgyjMwBKwQafv0qH% zz3ZhmyI3f>>=F#5&PPP;H<$%3MQyA(Bu&jnIF*{-bR+j`CU_{hrzbdqT6|m!X-9=ip$O7w}J? z>Mz-yHhXL1nVra4vZ#E*bb+hkz8GzL=*VGq`XY#9l$G=WQHDBDQwb=tJa6SS<6IsO z31m)6v$dWOmgs5Pc)$V&#v}-o{mnFiU~A2Ppzyz82&oudWGpDhBG`3~uvpB!*!h)u z9r(mwKlidLQbPzOV(Y|#3=2{WiTP?UPJ|J8xfPB6QT=hHDrcgn>}83z*B5ZnpBiFL zAg!UY`l2DH*@Hr)VO!+`1)zZ%fiKUUfe*rcbNcEm%3L)M=cZ7G-G>VS`bIs=3FDFF zwcr{uCWqkjnY8~CL1X(}Rt)dobF)A{h+CS4-27^asVn2Bj>>m7VUo}7OXsW=M}k}u zK9q0heVv2meWkT=-wS#WBZ*8-$B-8!>5XKuY_EKJ&^71;isTOs7crX-RKqoN%`l2@ z6$hGSVa2B@c~nk_Ce^vG+x##A5x+AUo!KJ-HL(IShtVLMTw*+l_Emco5L(^RB!Q0G zS_Q^ZV=<>htkrf&nTqE!(cX$+Y#-pTpkXo6zC76pS^9$aI!QMuKtN@Rgw@{hmanY2 zTV7A_rhzf3|M!y~JfVH29YVF?J?F=YSWQ)&BKO*!wi0ygqc|92s(N4U93PHCIaOCI zZG8tu|4kRN=DwtJCw?qq#lR3ePBOr<23KVJ2!lP=)5u|c-&^+jtlc?hp`=?(4Tii` zo>Bo8Gbak{XhM~GU+ljeks2Z*-?Z!iz-6$=Sl)Ip7nWKq1S!|PuSlT5m@JJYv_DGT_j5$v)&=FNXh&uSHEVLkGT++Zp88c`_*X}2Z4Ok`mJgl1N(8RlD7XIgfKap+aF#2+ zvfN=uGbYkp`>BLoUzgIMEK}*AZ;AU7rM{BpD>Z`XY-fTfFr(|W1}vMGx3=8QLY~SA zo(b`B#hS!R*s3*#0)()9r_gZ(F)x9AxUpiI!x{if;#c6mWZl8Z3+DD%bZf=bNQAq# zD_cO{=i_8yeuVl3;TCSvjJ(l!c@rI_et3WFcD7sL$-H%8kvmHH=cWC(*8DeN>#y9j zr?-$IWD*5&Ya2P6^kZn$^#L+M_aOs|h$ti0z~5IDLr!|s zV3EQ<1CBFgZA@J`d4BZGBH^O|cO@r}l*Y@Vn6JaBsF0@&zV_Fa+6GY>8kTrNw!Cyy z@N@g!2x08_Qvgp}@yOjrZ;_QVWbq;we&^j7Y2Ls1(}{l7?XZPsAo>ZU~4w=%!8rJP22B}l&7Ji zz+6Ireg)<(Y1CH>VZC>+G8Km{4~Mx~Nrw*FipzDq!Z}PC#kLNuq{7Pky28|5+|9sJ z>lyFij)bR+d`k*h1bUpfYNFa_h~~H$#3T2*7QZx4hhG!$R+kR*xdi_T(-xzkziG#P(~hd|0PfvnoRBn@%8Z zn+145!NT#83o-@gS96u8UI%dFCq^Hkkoi>tYFK-JH0|NFlw}5C*k_Tc%vZb;5j#&eN zyq4YnZq>Edjc+YiM2#=+1swUvca6*mB!yxb@_6tg7l|?Fx-Nudq#O8?Ofp($qCMV! z5sBk0rjJ2jc2ipSMx@u_GCSIh_SZvy7?%Mk`;3pzW4|p8l*f z32MV%?EYq8BLAFtsN`MQy&c*lGY`g)S$;M- z>L?F(J(a|~a}tuI+qPhRr2d)an3;h&`q=wkAM)MatKl-JB?*^z$POZA1LF2D25t5E z|efBjvmimGhA>@i(*!){KByG<)38A zDWXe0MNyhFruAfiMl+d&g^ z)DyMY>QEb+TGt|sIIUK_t^ACIfnjqpDss;)%V@eiWIa-^Wp$!)VqxStJKEjqp!9|E zkmtT$N@yQO$3$o&tqM2KPw5FAm$N@%xMPZ8H<*p-l(^>{*kR9H;l`}hSl{^OOr?eBw0gsL({^z9;AP@)M5lAAzJO=uJgg*l1O&N{l@$nE9$Y*5|0-r8D zpgvvc>wC()qNgcT@i7F{b6(_*3-SK9ru-{5H3q}x(#uGy?*Zi$LqZ+6KKuzJuu7x9 z3hx~JYn)|Vktg3h16b)1T;IGB+z$I1wDG~&*iFX(0Hu`(O@6}&t`i3&;IRlS-`^lz zY5;&jJp9bzlD+WK`O}ADyI0!p@btxj^KsMU60%?KF(z)tUWY_8oy_90c|M!cX+>#k z&?1Hke#u&7Y?0c(`nxYy!VBZV?YgPxn#ZI?c$;t_moC37$B(6HiySPgX!QYoSk05O z?wtlkZ)GmZNd`wy-C~XevCKI5$`;iuVT*4 zD9~pu4@qsqrXsoBwj$xel-DU#R#8Fy5N)?T+w>+1FmH-c(frC zU^G@@Bfh#Y68DhIkPkWQ_L9j>WI@Dm{j*}UCZ&zr#=0=J`<+`zDd0L>mks2iwk{~o zA-HrpbG~{tn*Ks!+9j8$%C%hgVbGhINPfbZnPjE|?SS(P{GhpxSlMiFfOBc%rGTCS zj0E)f?qo(Nk`DTD&{YnT?7R~mX>uZXKmgE8qzLeHiMX1&0-u+Z{s~7hSTzzMn27^u zIzV+rp%xlj5TE!fk<8gjhmjH!F*LN~2*kc~DW?mwfFBupkoF647L8Ihzx|O2t5F6 zAFT=!Vj%2?sN>IEIuJ!*FcBr7>)tq=@U~B%MY%;sc(lQVwO)deEQi^D_$^Vw{R$j~XUA+<|N97Q zqA=qDvtkElFzAOcD1wSvlUj?KN?DWrdmT%CPeR6$G8AbHW$ft;j2aRcLfqjPSIJ_E z4IvW5GVJhhvIefh=vNrJYlkk;fsp}DR%jKZTJ&BIG-Kqs2{Dd9MMQahx0Qql`_b?> zMFdZA9wl-3Lbs-ZY=B+7CJDeEd5FyJzRSJ?`G$z>iO+1(7(`+jF8@nq&2|?tNu*H( zUc3c>m3lR!E{2!LnaZln4=5*hM|>3(q&HqRj)STT%ci=}9mCwpHN?kCVG|!EVMjR` zV(|!ufkPts<+zmf>|Y%AC-77!cp@-((=x~{84!ZGB^!(siE-)#z9lOr2{?ENfp1YW zqJcjzIHrt}y15sv(F;Nvo6xWMcMDw!0CSZCu?r3J%O+mqF+*Bg<1<4VQ}fAMJ|r59 z31K3(cvc5xpNW=%?{`XL#@dm3Hd}>^pR65`d4`k(}C%Off3uo3R zCb(>z)>w;&qCn1#5W?^BgzNk>hXaNw1g1C$R^tt^M~TOOrj1MUYcG7}uc$Z}ZkAyt z5aRgR;Tx#hmvDsv%y=ur1U59{8VLp+4vYf40Yw)g>SD-jfI%3S+pvNnoE+~31}*?P>Hd?F?hV69Y`|JV&iKjnet6Nc@Pe+$%@(Ft#rxln8{2GFBcSA3a5c5Rna5eM2`G zV<~}HL4FP{D16q&C7egJcHBOL4^en_ITS4pxG_%T7uUK+2fp z3l+4Y1p#2lJl2x}w^Far^}{9t4Rajv94`lCse0Uh3GVR5urb7seaLz0gb7p;(p<0? z#-1)i z33Gb|OKeFKY&Pft zJ1ct%-fUcJ7G9B(OL0osPs8_T_zEiK&y(DOEP5$;shn$aHQU&TsmMQazCR9?pq&QsQ;hUErulekFot&`X8)#zYp>Z7lryVz9_E0Ac^*f%84<_NTtG&Rt*Rv zlgPxwk?@+@3G)6=PyaUpVGITQLL}lMu}ELq`(?^0{xbvbe>g=v{6E*+{|*0VIy)2) z?!T1&tLpy&GGC6C{|^6$L^u*S+y94e{zKwF00r&87~m2KNF+dA+9_-4xY1)Dx*0>`2;WWw6S`Q`OB({8dZzYkvOV`bZ{{(5$s*%|5IrCn)jWL0exUGmGq z==@WO((jO+wR)U=3^UT_xh>OiN38{Y0$j#T!YmVbGEY{Riug^M)JPD0nUV~*R=ku^Q8mHS z{;?Dh-SV^pxx{^f%A!~ciKz=XWcpbPWe?C9foE*##R zWocPfapuAU9Mm?hCVzOjRvxmPlOG&A5(C2L&GWsi*_wUr=K(ZZ#pR>CjCU<@bC)6f zj83Zb8ty;fO!Lv}a-AIa9M|BF-uiq#wNo$PHal&hfp*w{KHuQ}esKSrYtI;1Z9z6; zprOPX7TkinS{wbR^uEGJ^8fZixQEL;+-|Fht2U8ws5pOZt?V&+aDH}yhV37u9Qsuz zwl+ffg@C=$RV0U=o&ZYuyWied@1fO_BIV_wz?nP&b5Z}aokzOiQ<_H{KZgO*==$#F zwzjVBN1o{et`iwKY8*}!gpR6p3jsN_U_E=|oxA!^L7(5@Qrr&?H09q_-1mO}UGD7_ zKpZ#sjyyWT`RouX@+27eiqfF3tbdM z%@%N53u9gTi=)?9Rg>}%U}%>HH-8Y7J$1Ragh-d=r5=(?B75N z4R{OjDE^50_?g4Q6<+_ELJczN*^EI)d9G$m8*g1Zw}Cs$#okg~FSnG37OAs44CeBi zEcDi9ah#4QMt_|$qJqGgV`jHjhmGcI!DV53RJVOXwM75c;f!3BB-lf?>TNZ<_C z^Y0%%FHx`M1%J#v9uba1Zy`;_p22g)wXe~`bYpJ-CviQ86-GO2QPTSO0n)~mDDQD? z^V^%7dMO!QmKXU>fgJ^#au`cEl+oq%$2-bdxpnT$3)rlpKBIqCuo9STC41)f+aaAi za0=vF@aez*oku(`nEJ&}P{SeQhhtC4%OQY7g#Y#aX|9n=#}1Zw=!vaG7GW~IgQcY4 z{}T=}CgDMkIS*?SRx276dHOgw3}P(enu)(lqUNER*ogMhSpZDSz*2({~xq95>*At_0%urMb-+pK3-2Kqe86BE?iR_FT2S2|muivF?CG{FvSdZzsl0a7~KxlW@6$}dBI`tD#r#< zmGj}}dgzMxww6ulZkDL;gU6CUDI$*I`uf_T`aEbD;>^}|XZ-!9oAbLvBaC-bQAnIx zNndu;(8AJ#lliyOKFwqH+2uTZ5+@n?r6uekf{F8$e?$ec5_Ro9$(8rBCejJonfMc5 zUi;K}Y17-PxYYSx36P8Xq?;rb1z&k{cb=K)FRb^bi~Yi>3}1{w-_xd$$MbmyGmn;L z?J#DH&2t(gwFly+d)|LAP51UdWi^&0&+iee8raBG zmnGvLK~6y(``={chl6Lga(rjpHr>@8o2BjSY7a0mnO`OD_A=7Ug&UXDgiM2}>M2_f z)^9QwWJ`BoJ3tUtJ#|t&y?W zD*3%22>KM>nQiSV2J&(WSbO)d5hYI|&!S~9l^t4h)Ated(U%_@$gs_(HeT8I-A<*KEC8Cs8=xO#0F@mF@w4-Lkq}j)ig23CUV?w{z>& zlU?)7K{Yq_9`c_Fev#kqs3}Z_TLd7GeNOi-r#}4s@bF>`OqMeqmLZHrdh6Twf-AF2 zb3O+MQh*8+vhbHQX<|bqs&aJI8eH=ysn%-We|ytYfSU5+&%++_2Ln0O!{a^pUty%c z8dKBt7+|}DT!`~>x{bvl34XA7EJkBll}>`&s%gD?sT>f&vXU|@Ag6t^)Ss6?5(wVU zQG7*8Xnfu@%CKuW7kJtXX$j{%XcZpI@wvOd?^pDqtUVdnZLDoUde=`CQPuNBfg<(@ z?|5EZBT@I1?mPYmn*m?my8f7+B04T2dQ)5)lV($hyJ~vEB)kzhMq!>sz@R@-K}1_s zY%Idqem&NCh4O1ie^AnAY7yoFK+5v59M*h5zoO|=$ugm=l2TX7Dy4wVL;d>M|M`CO z)d~+)Q{U?HUjPef_#Z>Qln6D+`kfmmBBoJ;FcE?0oX{Ti$m-r!QFSu|cS&(2obAEE z8>64p>P~)}N{}qyzs#~O>4lag+;#VM%6LrQ?dQ5w0h zOcAWnFPFY%Buo6%?@L*d#PC3pXk}~UpSZGdm+_BxTaxLP2R|aeut&72?b$93-E~P! z>+|QR&&bB~xVm5E~SLrX=Sr^d#G$t@MblzPiqYppvAwa0s zQ6ERb+jYzQPNc*Yn}U9Yd#yX(8v%h&ibz04>rHn%3idp~1t>u##*LnCZ zQ3=1@hU7t6Bb>yie}4{arlc4}niscy82Id53pDZ_EjmlsRPKI*Q3YJYIzZ$vfKVjnhuCEwP7CB|6%(cRRg{ zhQ0~wnWlB1nc!%DfqI*WFEgGoC(OWm|jo7N3Kl|1SoZGUt-7~2KvyltBj zL`%T!JB#l9M_Z>AxVW#4l0`~EF;Y3YtJS~67gs{ z|M{ex0O9JS)JSB*hKzq|;*u??bzkPw%bD+u8650dU$B`u$n$40OOoqh*UY^B7vB7! z=KwZ*h?0UGRq&mBmuoygzUnM*$GK=@3+fQyu)jyBefjW!aGLs%oVc~l?2p*-fVkEw zPO}$M5`qJ`;4&SiAKs_72|J|7BldOtm_P%+euZSatO+l=t<7W$;W`r3zkYv&UJ#Zh zc$x=uaGL0$_M4vQT99+nG_f82rqqE4^pbZ%Y}a-H@2?sO{5nbNYh8eYU!epGVt z0w!WS65)DH?T$T71W5fIHx)*9LOrG0+DLUFVL|EP?BDfj*@8T;<-|ckHWr*GR^tRY z`nDkxR=>BWvlQj(h*2XM3SO;IU_pbTA%YylLVtb-YFb^S=RpLrTy zuCXinT$mxiG^OxBPyf5W1|N6ZOw4u|XR%f7fH5r-Ph(B*Nx-=-*vR7&09d!2(DS|f zD%a+i*H9B%@x$I>v&rYPYuH=KPa|+YZ^l^1W4UQyf*ACA@5pbHzEUCQpIlo=Qz;jo zuFD|>4D&}M>R3Dw^Ag?`VSXU@8Gf_r4*^6j#z&VYes#%$n3G?L{b|>^*@~(B`MM*&)Z8> z%-1FUJuFZYigT(dM-AO3;^NmAH-^+}IUQ!J@kc)40o|v5N6y06!(dJXiz^Eq7c)q} z8A!pSDiUdtw-1rG6f{=s*7TG$K$)d$vnasGH>&lcr7AOz#(fJ8}6l4 z`Dr>56reARr2fm1w3c|@nv=?bjS(2_B`k2iDYsyW&OFYSK!}z$Dy!Yo@0;X`det07 zxnFN<;`+V5NG_2_zz4(uwerr>>omV3X&KM*h3ayh0~xwmX5G7e*q{t)*#cH&6~m7! zx~uG(l`NHhZ$yBK^(`l-Dlk+~W?H|?RMeZ!3_@hX=cilJiWx)>IdV5!Kz(D@O;Kcv zG14Yq=hE8v%S%^`YP{<`iXv3x1p0+>9|j|tr}v7r!z@@vR9}TbLUncldVO8B5@NbC zzk-R!oyT?j2@$W`!yN*Ziwya0{_RgLg6?7zz+TX=O1>g#uz#qq`|LmEB>u>?-^V! z1_hO+Ot`Wx<+42&a2ztHZd4=NKsKOI9#W$nh92qpKduL6ZlzWRN>dl_0EadUxVjN|59p*i0hS)%g|BJq;Xz!}9p+ z-Du4mR9aDU(z=5N32=mNN4ftN$7Wwydc762X%yrMHrAU8p1d|55;_jZ>B{xj;0Wp- zsb3AA;a}ZDZcAA~H)Tz^y-nSb`)|o|FFxIn^?CXN0ZZj6Wkwe0F@@>8QwP@3O;`0b z*;|<$+ZGDk=xlGsEE{^9!qb;eoryj;C`Qhv4>(IGt>O+ID&$w^(jO*}Y*YdBBgmSO zA#GdCBgUj<>Nr(nmm^jB>!BObakE@uS<-^`a|WYmX!gy0yx4$SW&-Q?NZ5vNKBy1L z*5!-Vm)ki%nSr*Rqn<;5n9GZdEHzKibZ>6P>c*Nj#5ggh*c%_c0t|u+aFTMn@}bif zzwr*44Y`h)6?Hd@A)|KMzlV>t%%vBl60Nsq{0&w4rja+bTTQZDo8YNWo;$?oN#73X z(Ei%G{gE3O_=F58tS*?fnqJpl{qIla!3c{`q~MI8pQp*gLO_JsP$k50>-J1m45X7< z^6eC>fNu6_Rh(Cv<~&lb_rldv=_y~+FOQv*Vx5@7DY&TtF{pfx6-Fwh5f3=eFJK5l z>^A9_0Od&I#d&J)0~2#ffEhb(j`M#E`)9A4s=7|+e7{RpHv7-OgvOjwBLE@aIb-6I zZCVrd&@3jVv)hnijlmO)Tt%d&PJK-%zENMj1ZNo}z!+1KHjxd|`wg z5hRC69OjP;CvP;yc67+=z(9|+m%s6l>Tv*y=hm%k5?f|yH2g2P6cTiVg!)yGb4cuM zb~x9`amc8t%yfej_28cS_B;x6@lllXKqP{cUuo`xgGbV>E>4YeWMQXse?aXv8PQRo z-)i$OL7N-rYEEXm-ST;u<{PjSKIo#m{oOM=HG0$e{$yKW%W+{IT3zPB)lpnL_^W>W zPitDdIjqt<{^JNU-X$dP$9zH^kzSka^Sm$PGXu&?SDSrqUClZTl^J#I}vzM*8 z^!e%i-q)V%KGP}PNaCZBYJ5pcN-KjVAtG|329-uH1A7u3T|xSj5fcrKu82HR4(&vS zh7ynrfG9~mb#Ui_2h9GX+w$qP5DpkLbwA8nU0r>g7T{?1R#Ww*j@+1CL(*TQz~FPf zD7FzrbU$%-bqj(E8uh4OH~fwXcOms{%D_}2aOMmQ1>WrWB<7G-(Ebwm5EQ4KW$M%8TLOBneq;QljnB0YqgC{J(2Lk&M#=i_=lH36J0O}Dhs$YM5T zye^)bCIvF!eS#V)(xuLGn$Hk%5^RkB>F{HX$tS<3B9wSAIk;z;Xy=?797u@07utM( z+vSdV_Tzm9^4cooT!p);{Sm!l-+w|}&OXCggh$07_nV4!0KY+CeL$P#^$L$8NKT656YPO(7f77|W1_VL!X3+0xa9PH_uasij5y!7G zs^imD+qLi8dva2Lm8Er2MweX=R;v?M2pyjieic9Ty%29s>kk3o9jaP6*n58teQF^A z@4}^85AnM!FaZfdsGnA{ zx_>uQ_XWtiBrnxytN)dO^eQ#zSs2_ClttB8?WW*-hR;DxtL756&v{9@*a9CH=^xyJ zq@!{(Y?b!k3Q145ca*(vuKDefW@BY5f}@lyc6ibqB*JPxRDz;uec73)JZ;M6T=#S? zXvr~@yVDR=Jqa)GkF@L&aZwb8GnXGYfI}y`?f<#=dvbZFDnbJ?wUzMLmbv1X^i|M# z$=`8baahu&R2aWpHSne$^6g zc(ZnHx)act$?#u8s+Q*4B)tjLMdbKE*LqmOYv8yj{%6KX5u+{i;m;=dRb&wFu34M<_(!yq*SOZ>K$pLx* zJSmSN6S#9lJOmgZa%xG&-!L`mGVBvp zKcLiNbaRl(AEF9#BYAw8B7*%O1(^{_H>$q0(ab8qCKJXN`Vr3;VBi4APE9gM_F;J0 zQVHD}D!zy!@O=MAc*()ctS?krKQ0ymxz&Q0vsS#GF&O4muQMQIQ`wFYVI`AgX=OAh zqu73{AJsi{w!g!jdo?r?EzQGzOU+#6qh!yr*5v8{E2+!Ya(CrIwtE7?IPJ=zfA^bK zZA+3UNN7p5sr(LQX%iFdL&uT>2cazXAxb7ldCd1RCNlYLEIDxJZ*uYwK~^VuB9(!Y zhj>*>gR!k9er_B(;m*1krm@!=)@98QkM1$Jso8eCG{``{Q`+LYt7ti@L_|c7eUdKm zmi{v%M}0CwY;YVe&Qm<;SrP+DIYs3&>}F9^U-Nv^Wz1JRBGcaR$}Zaxvy%cT{>*8l zyQlDW*!)(2e+0SiI))B4G3he@58ehp-Kfvs5>~eFm2HKJR!=TPuZ@Fv1^_?SpY@l@VQ*D}(uVFXDkV#@xSpHJg zE3^_2Qdo6T$ItKkzI~C{eg9Vj|FToI_5yN0iHq;T-ymuJ%0>ru6u-^p#zjBZ;|nEk zWlli#RsVd9#8Tu{k#nN`Dk=hos*g$;g5$mx0eog)Va@;Qmi`I|JvcFeY<4=O;&HJl2?`Q6dfo`D=#q?zlaga-2Zy?M9N`GJw1h=^uB>tLF0=NE4h{MuocA&aWQ3uNEOuJ14j@c3-N zjZC`0;U_)wr`u#PE&t9^L*?2plf&(2f(%}DbgM{T9&#C9023IvBFFM!6lOUV3@czGj5u?%~T6^@Z%ob>z$~FnTmed?}$; zNa8wPa|eN^H3ly`zxh7`M#Cixwr8gTw81mrZI)$Tjsw;e)r*f5Gj*rw#2oZ?9f1Hg6c81qalAF!o@Fc-S<8Y$YE0g&T=S5mLu3%{i&4 zuBK*2DKV2-v_=jO~oP6v|HrP+8+)(P0g!Wc{j@J>gm}Y$eQYx;=yjc*sU>8*Kkv=YBI*Q;tw>6&hVf(Wa1_!$ilTu(dndR zu0Jt=xc&=vabxSf~Q_Pc>4HTZIseNBjGVWC)>2Zx0IR#QR(h?O2Q@~iX2FBf-b z^j`n08#`shR}+y~D{oUfUqV9facuaqt{F(sdl^#ORn)M@lJ+_=71A6~WFs4=eR~Y8 zrUR^h3CChGtM3w$6q|5a%eB5kD)%0Wr1n~bk#xOA$9-3SQBz`U4-_Kl=9olMF3p(x zuvt73g;5RRUvaz3V3p9Tzynh*;*yg&r*n&aav#;Uy8FO0!Dx{F)PlUWF1?ve1_9E1 zEJhbmC`~-8Vao2J3R?NF4FyC(3-a9_?Q6KlF<^USZg}iBh>7!~thFYubot+dP=lV# zte=c>91(0(eRo6eX;SOXZy08_tEGg*K)q8!;6OJP=hn%MV_PFX6vF~5+1M{8Uw@!{ zTz?fIlGlrk^hnyptT8VUU1HTASx|w!%2>kl4U^6)>Brbefhd}cg7&s;MTV&&zT}^GOBp`9boJ~xT z!1uMi77kD#Tv>COK}(nx>&WNJ?ih-)OW4_7jI4yAfB?MQ-i~2kuk*rO?J!UMV|#f9 zRReYYU;^jHVv1f%|FI1+NDa#tPC> zd#N70`s@vuuxKAfOdC+R8b-Mx?tmcUgA^P%V8XO8_2<-;69hh|sxLHlqy%Q{=(=Eq zmBWEHc0&1%tFS!=$Gdj__d~FB3KzUU$MIj$f^fiB*|*(vnt{6|xxfCthnY`WTE6Pz zz`|HnMa5pi=a9vnRlUwRHsZIcpnET!jL$s`5rsjX%M^9ql=zx&1SlNpI!q_xlPm$5 z6$3@F&6cmsi*}Ntg-xNWp*bp z=Rg)1W9;5_MU{7LZ#3Y)Vv5EO#cmYb`yqX21?}>XW9A3Bcc#i><;9xe@?Ooz@Fm=aZ6|Cqv(1TSTkaacX8PGiUmWSCob;|dPf12R9 z=HEa}kY`2t*GqYHXgmf@Mpu*%EkV%AJ3rRev@I*)udey+E3a)go;VSJ6+iwXCySpb z03J*W`;8u~Nwj*s)=3&>kNprm^yCmmY$iQ$_bjlST|@d?vx9xKRnL(IA(F^6WMgr` zoqy^CYtN4=q;GgSs?z7eMy@}+<0es{e}ffp7-zscn~glqACB3Gbt}Zi?}!tA=c&;` zO#U&;WXT2ehhS?z-$>CxNUsDJ)?A{(Avj5!d*$pg=$~Hi^W#_D zU!0f$ZV;Hubv-M?Hb!{VHzUeop>{ubaA^@(*QF(;q@=O2dIZl%2E)+BBoCL(Xn`d+ z31gg?RnmY1uSnT;bLShmt{C5fOqe;Dl^`N3L+zD(Od8&yBY#yo%*NA%+`D)f`z_V# zF!fu-%i7-~(rgY=5C}SS?f-<7)atYisnKJkt4`*0^rAnkGBr2}Jxwi9 zEG!>h(FEcqlGPpjiO+J`ExDV!sjCcVs6b(??Zi51v+U$_-QJuACqaVxx+L3g<#pJt za}TPYbzXNw(*VFo)rF0*{2q8QX?rJExUyN{HtpE}kX8R2{7Xw3R1_5z^`+MC?mC%! zSoy&-{1!*OrqMIc>mGYc$n+Hb4EWPUL`ihG0zeMe5 zT5|rC#GJ0&6)syT-{RDRmDweyFk6|$GF3q$Mr&6gJzge?l$E_gl_&|@ZQ09T-%HKw!E0Ut; zi$Cco*Ioji^aT-=C;|Y94|D;tVMksNBKTy~au>L^7>HB|xW~L7vwZ<}29Ouk1)2qp z?vaHLvOPu4LpG`6Q_|i9@A!KHiFfWBQ=i|QQl20h1&eH+$#tl`@gpUQcM>$Um)-9a z6$~=@JvO-QK(W7!#SadY)Pu;IcM%7fc5bK%oq?~vbgw>$$7%#o7jjl)fKdC}0m=wL zhQUUTOAsp(PEd(W$9&)#`%U1<2a4*w5J|E>$RyzvIYUBJxj^ERhD{^<#F5$2yk>(D z=imqjjrA}5p_EEZ;sPLX-MccaGaYs>BIn<67Bzvt>|(RXaBT<%aKYc|J9>6pbD})7 z2Jl?uo@abk3q@iPu;^7Qevp1>Q#Dpx^c$F=GLvvQ5tKClb^jos{2J1Timz2!obz92 z`!nc7!d&%=fdFm%HREf;A=nUr2D&?M@@{E@|CX~B9+GC&+CSAv%g|~R?zqS66g{u9 z1y^B2XaU9l?>kl7AYYV>$Hh#9CL?8}xTS594!pE{lAb3BRD!ST78ZIJg-pFWx7U~L50d#@Dx*AB z+jy#->~=3CB#vC1`*^z~l?8e64(N4&*EXbPu zS2LkfW@-3;J5%w|BI5h)3iw#-IikMpBwQ3d3G!k0LaG`L&renul-X6{fsfu^>%`bkXLmOc zf9AAJlX}>u>m@ByQl12Dq3aO23;|MwSMKbVv2WEMNCXh%XuC^|&SZ=}tV#W|JT_-( zQs1H7;VNn6+yw~Usyp7qNr}y3&os1De%vdrfJv>V`M>#BN9%vW*|HYkT-3P!{g%A8 zUD+JqVZV74|6KHca`wI*!WMt^$}umpop=D$4BnN`0w0&70vm8J8F%&`gw_;+%0 zKG%qA8Y}7P`NusaxUX-Jmy~$uxRQZ#LuRAUSo-Bj%CO+8SXhr?j`fX#sG7R>&RU=2 zskxcg?4d{UJ8)Z7!1?uMQQnzAQY4n4Z9zZ^*Vw=Fg|bIx)xl8s>0i*3q?K|ZE(5j;lUpXDtoOOK?fEn830KpS&^8s5p0Fm``UU#Kho@x<;kv z46XS?MqP+tdhaJgMvPF>O0SU;iX$2e1HqUM1w)1=F1PpQ3(3nBa)xfV<*CsF$8i&8 zjNe*E;&r8I8@+)giSPInoJqrx*TTrqcB@|0loFEHyyl>&Q9NaubRuW`JUDq%-|kbg z5Nt+paM0L#JC?N<<_DG9wcad@>brJ$jUW$x2knEizR>sfa+$i z)5_bO{@_GFzXX1B#?RZlk&LG^yAghhi32H9Cx&u*Jw_ zrxpT`oB?QYoz<<(YBpPPK@H1c3Vg?-6QGS9i+J7 z3Tsc*BR4QJfK^_0*vL&q+zcB6CYr?@$xdZbHQR?gPHj9s;Y&)E-u?fWdI#=En=V{9 z#>BR5Clh;uiEZ1qlSw)g+nU(P#8$`F#I|jne$Mx;b>2VFYjxGVcU4{3S9Sz_huMHi zu1MOBZHvQ77-h8Y~;{*O&f1zh5Gbv=YtRZIPq3V)wg zQEL0_ao`4S$8}NX!ri8lD31fPH6>iqpQLknr2KbG6bYzobV#=EMSO=kKpv8~z4N+O?Eu3jYgy-3LORAS*@Or=WLmIfK+#thHVE9^5< zuWv&YQDg55X}h#3b_Io)XsEKr^ zdqaM_VRQZK#@}+a`(J4n;Q>4oFLe*zL(ind{A|ZzrqbUco+7GncF^mWjq&dU>D3Go zKo22nWoGs)OdEcgZM(>K-87%@%_Sj#0dqrnRS9Gm2ues=E8LjndCui>>3{B3RJAng z4CE{*u90?zOo|exNa1?hCLo+_~vk=w!LhJ++8o{Gg?IuSI~As5HMWC1VKva z8&U@}$2Oyw2t~qLL%>3?iTSxTZ zH@TV)Mp4ef1VrY8 zm4~8v7 zC(=S>f}cO$noo}y77-%{7>SFetnXfZ7elR;YyMf*{^jkw?KiWJ+C#+lEow2(I==;F z^r-9ID!qu>ybg9qlHNo(6Myq{4-SOR8;^A362kMrNN#MYR&bs_b?i|c6cfTlBxrhh z{WmL4h@2$q$+>)im&7}EIP{|BYcOJR2Q|=D?b|ZyUurb?i`gpfr)079>A$-D%4Xot zBGUq|vkV05=Gd>Do>*B0cU{M!});k>L`@qZL1*MR*kCUWeim!0>$^UM- z6cTo{x%{e!*0A1;0ELAWuBXF!UK2Zie#n$tNe<9H}^Cna#TkiS1hJ*3WAZZ+x$l2 z=mUC3Z7mg=?1X^3=P5=yb$C)_Rzves5Z8G|#Li?tQ2$G0UHZ8E-vZ|`Fp2k`%vX1Q z|9x!p5rPf%>7Sr(r*^?FxQETq9L1%NzuWEzY8>MFT%vXT)PF|1iYq&^uaJ7 zbjJO+|259HEEyh-g=uC-bZOA_W2~sCi2Y{)M@FA$@Tl?T4iB-jWNmguBOEkR1UQVP z3aJGezh{jh))&;g`j?9GU}x4;6}_A~w@bp zCDqrw+Z2Bac}10yv2?^95+tszO5^<*o?FTGoLWRc4*8WIc?d3`k8dUX)hBHDTaAx{ z2ci^top!VXV))xzcxyL4=|2v;D+*D2P;9E6Z?LM{kR@1s(E3v7Aj&)U9n9QSTy5_mc&!02z}_u?nDSZ_NM&GvlyvV!8jy%qZ+bTdsO071;^M}?V}wMf z3i2v%gw|e=%(A}felL@R09<^qL>a>VgSFW3*NbG5&*`uly^r)E{qzz+fl=f)2OX;GN+Ur5v&$`m=eb73 zB_R}9^IP#@|0hj6^f>m{N9`Iu+46@TX}~gR^t`5v>k)WTz_+_8UK;TTE11A4lHAHG zWd9~qUvWYd7VYlUW4GgoQnSGRi0{X(CH9E>CO5P~PNfwZ3VriqODrgK*2T$Ox5D3m z{t?)6ier`dB$(bh(*n1t&s&!`*7GIPP&rIsyV?|~qiaX)3&@lS$ zM8vL`mA>hvL*alrpnh`ZL3B(uO9O4fih^oYYve}#IM_8_+Q}T};%dSYr@1 zCd9wA@lK1$oN~wIx@-5Alp`g+s6VSOocg+P2&{Yl<2cv6(k$-Hz~p0=Al&akgmL>0 z@bL`FRU>9(KJy`k0LG6?D569SkdQvoK(CDx-9e#QG3JJiLtXbBhc61VQp(0bw(H`j zd}D^)2^DWd*}20I0UiE3qv8~1=rFQPmVhx#LnK`N>?P6+X>*YeNK-Q_fGpKcot7R; z*7y;t^#=K@1Tsl}5T%%~o`{`;%Yqjv_0F#ZVK-zv6rf1l-t?FjG(3}WG^r+8hAh~P zL>jz9&j|4tT+FhfNv!J}4aTsqXs>_Y2d--i9N*gqDq87ZZQeVkccJYEf?6Fr3*%}B zGhtQ;SthSsycVT-Y$q(sWHOhG?F3(6sbfZT@HkxRTz|-bkFM{GaKIgS_<%zbQkVuY zC;`7WRzdOW3I6nU@&vdMva1nwwUX;lpLl?&NZ$E+03r-s>@&@cE0~3mboBuP&LkQn z8{U$Mxig%UM7I&NF|sbQx85fdD#Zy@-i&j*7c98mHF)@d7*cuO_g)NkmO#|4h-EO| zO{bxt^l5X*2qeY?IWi0uFXF{I1h8Kv0~AOjiX-X+_sVFsaof_EteVS^OAwI)q@7g~8sGyDx&Hf=#R$zuP|3^F>J=Lpp~;2~6eC@@(10b@wKsgTR!p8ymk|Ue$wTuQYn_ za_7bM4DT33Wy8tnW)7$8ju&1LIjX%TPm+M;b)<(Qf!L@|^zmL$IvE?w6{B|JpEkqg zo<+f*c^vk6P^g}1#Vq>uoiIFo#wQzD_j}k5nE1MgK+>K5wLbbGnnFD}J+XO_9txOU zW&FWaqpg%|o$agOvSW*DA%BM5Yf1&B!O>tJ>`QUEdL%tVgootL+b0ZvK;BkVZnalD z=RG`$iPC^y{8IIG(%KWrB^lx`-ji%aCd>>l;IGqNPY}(qECcyw)m~PsaNi^mgzLTM zB%K5MXqQ`g(f`&Yvi@OmShWJZ_`O%xXdS30{*)xb_`R54ct`o*Isg7xRVs9EP~ZJ* ze*feS8xnS78fq60RJjAwP+lkDIRf5PwIRY&&oRH-TSbTVMG$Y!ipy1#6~2=Qrrl%i zLfiBlUb=TXJ7=C@>D28{gPZsagcAMMc}6p4%iD@fhloS99QLl%fr?CkSh}@Hs+!Wh z)+s`Be{#6((ca%Pn++r568x>+;J#7XNO6WF>BiD3?w_+dru*b~t^Z^R%J?{!z~CU@ z@l@30;n8o(3Do@S#p01+Wo}VIeSEdXZ5c|QJ{vI4%YMk-XD&F=YHn8qGwse_aiOBf z=!aCg)U0W9Xssyh$Wn{($PN3T*o?vk!o?A4eOdUdoL6Xi$LHt!{yo+uxWb;>%bh#i zLVT@=W~>l-E;p+SahGC-S^juA&E$)C^T~_)9#_iRK;E@On+s#Z&!{&L?_OW)q8gW> z-PY>c-qvwqeg2{_i+Blc&6{Q#n`sp^0?JfUfYDFVl3)M_Mhdl8lokwvZ!{I>K2lpW zPi>2-3N~#sSogwOxun7Kos3bDApL@j7i|tVV6#31^|^1Gq;ZtR9SYXt{YMY2HyOFY zrny>5;0+j)ODe-`-?7s9u50XWQUwo?^nEgQQZ_!WyeFhBllFo~w@aOwF(jfEf4a%# zKte)@I8^X+7h!W=Z_@}IgwzHP%Ag+mofaKBtWZf!lfM`~-ElQE{2IuKVIl= zg3-yWT`M>u*46Fwx>^G<=4Mb*|Om+946`vibLo$od_p z@mIp0S>|=Hztf6;LBdiG*zVJnZNne+hYJ`hJ?v0?!tH&x)8vlIsNm0?s$IVBpr;!0 zr5|fE0|NsqQ;f7^aXe!ZLFwZ=0%NN1p3}KVC0tS8{saMn$m?K| z8AYLF$YorT^Z%ez!Ad6N(~62fp-DhtCQt(4q^DT-5ydlmp~7`H1UV2zjkg*uXI)=k z5Ns+cb8BiYKRp&}bH|`hyH5Wcy^dvy*qfA@x^431qv(vxQF+84{Z(u&fhbY`cV_IkZ~_ddkMvWx);uu5=*>;v-(*J!O`LPpu$q|+o;V0lDv2jVPENybbeq{yhAeF7cG%k4OmYcg z@6H_^PD5;f$P1_Cxr6tym__T@!q)3t-wJTS*EDArAiLVGH*PyS`q}aEnlw+cHO_HC z+3%=voY*n|l4<%gu)%vzHE9=z4KQ0kR8&-gb7RX*Ko&9{%gisNB|**j#q-d;8YU#* zvg{_8?cSDJX!0$O;_^Q`v7qOHGbxqu$EXP22K26CHTjNk($BNY%OR8c^uLU}c;!{M z3cbKRaY5`%6+RwSOG{yRAjw@~5t4nvpi`9yq7dC}-X?$fA0*<{hU;%)8>%$fjyzr?@?xZTRJPvQYo(<&J=3YhK>fTIzbPhSnWb5xvZu zk+uVAv}Eu75V$PKeY(0^98q*Bx|8l5q7BSaHgE<21MS;n7rctXbWS@mc~2t zR8OsVNvOajX(BG)ZdM6#%y8rNCc{g~uzW*0Hj}0u)*x6W1k}Zhjp2Nh}F6d-L z%@Ydr&SqOoBiQTurR(U%OA3R)7)vh(iGGy_Girm6EEnHf_QPXNkl5Y!ItZ@a=9oAE z(m)aHS05Z(44atVEu)&6UQO9wXm86pS!$S{c{u`w^K&S(bdjv?dvk3cLz{4@wVTa_ z`7T~CuO_+OS0*+GnC&9SoD1`z6W6;#^i+ZRdAbN)3eo0)8lIi;R+mtKtorT-Tmns51U|4bI=+cz+q2&@3Ek{z zh8^O`=^5WU^I_UyOF_lMl=2ec#dCeWp}DRw!cX=4C*I{E5)4+I%lT{2)gf zd&jO05!(ISRxp`yLI(@!ZW=d|A&C&y=Vf57keHuO%EDMT)3&WPuW)qeErM9f{o+0O z7{uSV+us@Za%MQK-S*dEVm1e7vN;JO*=ajp#LR@-%SL%bH6a)o7Wy$r;&SiSu`&Us zRG`D#dhcIO#ZmQ}$Ts|XYg04h5phja3wkQ(MT3}qL+kYwAhcbcnfqc+aUg#USD#l+ zxg|96QjKmyqKo|lkwOmnbev>ka?n2%&Df-klL-O1&7}0etuG<%#KKZr)cJcFD=IG_Q5?U%;ia%-!Z_Fe&Fke^VeKteZf1-3 zc_^DHi~Du(sJ~jYd5N#WlPewWvSmev2Z^e?%QyIrCV6_X@x5<$t(%Rs`8vjYB1WnA zLMM;7-*dzz+8NT~#~Y)8S_>uW64sE8POBo@)&yr}?)ty9K@pR!s);Gpjo|1B42XM0 z0$#yqeUS;r-9bNMAT0hUuKqx10@&yPS{sq;w$~>mB;Z0WdjMC~n|?;YOwz0FVtadg zx!IdSHvqb1=U_wdE&2x@Rd<0cz!Kdd!&ckSalk0v+7{CNMwhM)Ay~_4srh0}RGWWr zy73+{g#ER`rMV_8&-c56;<6Qk9{f0^0wN38E?z$IymG706IG>&S=q_P<>cACt&^Hd z95s!l+^1M^Rm|#CBK2#!sH^j9>I1rZ(q6%1xWNvXiVTYW!~@GF@ufW%E9d2LM6U}t zDu4vU&n;#>vx(`7rYsIx$U%bqo`ml<>`QEGT+fym#rFa z_Z2h~#Cre_ac24>Yl;VocbMLv^`rVV?vZ~A80`IB%K<{kiwkl%%Dwm|toI!j3~y2W zd={n+5Y9zuZIVh54e!mJt?mRZYER-Ko!SrRck%BF{I{>EMc%>85-S=Pn<-80zl?XO1_a?Rp87uWl03%HaS88PE?OZ7y!;K zq<7EvbiPAK@Vf*POpigB+V^?A1ZfbK&|e`$wDAKXv|#ah-*5o$&_~$?b#f)DbeLgW z1zS6_vS2c5*mKb9y;W#(v!qm-oifWcW(wN$b?6Nqz+mquzLfrb9elM(L<}5}1I}fc z(?7ifPOB58BB6iP^k;bgrb7N)Dx1L0t)((@PxmglBM3Agw}QgobBp)c8InS`-d@7P zk0OX}Pj6D9ErP=dZCJV_mzyp#vku0=a&U6e@7<|l;uvVvYM8K%(c^BfS-!7o`d>7&6oGo?4&{^A!m4+R*;&Pkz~vCo3mGBgJOT!H9$;{a5!yKyaLl zuHn7G)(Zi2ksA#&y>Ly~@8QyM)9nI4u=nkp0V&K-2l zpk-9bx!!qcM!ZCug-oeX;br|B<>GidyDy4~?LUZ*9u$!qGL~N~5}V693_MqaKBg~g zlU(ePM?>czHgH4HEw963mBefnJuqFnfZSD6bNgnDC$9a^l#H!#39kS@Q-k6f>;i(c z`|G#R=;Ay?kQNb`bLX_A>k=+CGaL5e&Uvv1e?(6<2Cq4=O4yrN0Edsk#RD#nw)(2m zW3j~2s(($4oc^XBv((B0vg;;q)02HxJxzUan$A%h8_@UXFzK)5+mB;gaFNEetqH$W z=v^(xaob=Su%8!;t!Bwhhc&Z{GvLoK%+d(%tyZP9EF>v9tl}Y*7{iJ=yE|zk^jQRZ zme9LvnvF~$7)L?;U$gBGSrw?H7RPHwq{u?H?!SQOuU7e$vaex{QI-6JF9rJG6DwUc zP=WeNuUIdT8T8O1a=r4<%eKBkj7CBULJeiH-vx;-_lm5Il;9NGp;w6o?R`zbQ573I z*E?bccKam{M~6FUC4#<}`!NrV8|hN@q;i3@ApYVa?+?1xn+Rs&NOcq2ndPy29}@U6 z;g4l0%bda2^;L*?YR6U+{Lar-KFUO^j9-F}_K-JjlXpaVe$2fT6`=g86ggy2YP{4Wj6WwKKn}p}9hN8DL zq#j{EWIqUt!L8*2lZTAq^+XZ5lk(+yZ>ilk1-`!_1-8y9GzUz;!Nf>Bv6)}4sY@ix zWhNEuDKSygN``CvpC7wp8G#={bCZ@uU#+SIc(SFaM z^Q~z*^uV1N;sT02&*FoCDIXyd-W{+i5aO2(#@eM+)d|><(LIIkeBnaqb zQ`w{5{o=>Z9ma|KijeZ{D_rK!^2U@MRdv^COP}As9D_WO!iMQ0-R+rAmf~97XgB zL1m=va=&@k((a+hH~Dbi&s!11Lxkx4$L~-;&QNiJ3b{rF-M1kM9we~cp6aat1|g*P z#5Cu)t2*>QQGr?beck38dw%)Oz3c8gZ`L0rgCcr{$wQ;fWI`zW<*XQ3%TPb5Ma*lc zZ+)7H-R0BA<~&u%*S~OJOjeBsj1xYNST;oP_ihBgYU&Syai4QZ0!>Ls0(CZ}oYaa+ zQ(|L|a2-x0-Nj=DBcQ#{-}myr-R?S2c8V)($~w<0z{d<-Qh6*!U)MWFDVQqsHR1@p z=6yZk*b|Wa5HQJ%Alr(o43r-!aeQoLL{*Hw&r3jc3XF%wr=qy|ytF^_=odi@iDGcQ z=pw{~*L%}?)ezHeuPH>~eXP$LWOF`QmILU$v9;}<^XpOkEzmC7p&kwz`KO_z(w1-? z9Mrn*U84#xvgr|^fo2?x8nNj&YR_ll9s#1_AegJRr2cCje$ty>;bTF@Juz{ao8drg z`=&@P@Z!B}u(WsLEb6-je@7CKpbN*V{Y=l@fC(k+ok3{$T!0>G?Y(Vmdq((;Jc$C| zgg(P-Yv9ngKy|Vjmo(WY4}YRrW(U&AG&4F2cTp459oZk*k40J$U8wcToJgVq4A7(7 z)pu%vN!wF#UXHpoJ6EEhvDJPmOt@>_leZGo2bva|t%XF1kq2eMZZuB;p;xnmm){s2 z5uCMD{jm?nmf$qsC$dFW*H+BLK^N_M=jldT;%T7j!OG0Z10sh*iJgepDWyN*GtR+AVsuR!5HDr$D+41$rIJml>%{eM6wz@hRFWdQ zH>Hgg8#3OU#fBH)yZ*^Tn5xxnOCclWmicC}xkI8!7u!0;K7K$q1-~2 z3xNm!f^H*5$z!{mOX!HbAM#3lat@9#V##}p!;qp$QySsH?2(AQ?QkZ@(1z4{ z!O-dvrJIxsNL3fBHECR&O)!u;gX{X&Xe5P|bY?XEHb~WyR+87!Xnr{i9*g4HnVV}k zD9{(zMz`4wzA@l7gMVswe;11vPQ22Zyv8%8bNsp&nQ$0(EMXR`Z)y6gC4#_-l%A~m zT77P^)Df5FJH8L3%fv&wB{TwDtO}K+79^7$q?jC^?fyKJo#D7HnDppc4oLNcSt4QiZ);rRcxPpK6M zq#K&5J475$2k$c;pV&uyfrRp3KiLrj{AQFEx8;AbtYUmZ>E@Gt9wG{B7t&NOtn-H( z$bvrNA4pvPeaf|9yG8N&3x8G2Og<91Yu6XI9ThU5QuC2f?m>MO0r1=OhwzEtXyvdN z1mDHiszFfM2M(BX?G1R}42|Q=tnvT*CB=r+zvnZJA%iE?i-W{V`b5SEiesPHib%jo zd2dYccS{=@rMD*?Dfa?H6YN#wvI3EJNAO*la}gEUUCi9)$rdh$@Ap$oTR~aXf)vq| z?@@L9FC;x(_KO@C5JKD@%nG&MX(yMLDVgdDFa5|t`6^^G8JMR_t;~PA_uYGwYR^+d z3%QazM;UBiWW!wlza=Uw2#2`2YRGMt#gZTF-nmI3QOQQ94_tMBk9#Z}tU1T!9 zs`F2!=l;)WeG~dyUiAsMD37fwX%wEeW1&yS4F~oMr3}kA9`F( zB}CCPF^#E27`#d|j}KrsfHqP^FN=>J7+`WyP?V2GKr##U{s1y2{+KnHE>GY$z<4h7 znU)@bE;1mB{Zg0DJBij13Pl(NDDfUvoU5gJ#QF{RKZ}C{waa3LiaL(Z>Ivt{j*Z}- z+S6}ZS{F)Bqn5YiK9TqLQ#QzJIn42C<9@52Ye+>zE@0QO*74$tD)_m&JKE>!_$bJ$ zI8W~6X`;qEapa4blzU!iZkadiKS?rZ`SEQ)8{HW_2%{&F49^_A!zd!)r~U&%A(iD6 zKa)!SMX$a!(#OKYuqV zU_-RBr6iDp8k2MmAqz1Wz<1-%unlfd$9?qUqrGvd0@Tzt6S|vDv516Z~X=V2N@CcMTb+P?X9Yqi#uF{4z9?Mzh%IXXVax8W8ju@Z5PR^cLiYPzQRim*Tl3 z$Jg;LtLBq4C>VWps|yGAM7d6rxjIrRCgTVys{K>hqErq2aikWH=s+f8HYVr4!Vo!d z{WWYBWm7Qzo8WXt$hF)A)AkRdCpJc$BDix=3zf=3=mh?dA_wnHO9ADke`=rN|KGgC zkwC{TB%r(qjDK-JMKfY2hCmLB+l3@NDE;?vW-h<^2^JDM!aR9PHLn40a3FTT2~e9K zolqViSC+8Zeq=8{d~lu&L?z`+9!`D$rFP0VjTL&47m7 zx3RO$x2RTM_Rdb+k|ZN~dSZf*7|#$JKvOTiI>(=fCBlD&EBjeydbA=efD9wm_oDzT z?%Z)`pt~jKaQWb!6q=A-Xra>YUCsqGIKQv&wLd2-(0@_d7<#v&k<`QCbFM_xDZTi# zrt&Elf*i5K!fp>Qf+7hP7S`3p<%kR2xqnnozi$C4(Fu_ocGwcFbcm4?5lE??87V=p zW&eYE*$R|>I}|#=)>coRSW)e-6;DIQ<_s1^fk6#Ph`4Cy2$ol#3|{D;O*UOgi%D-a z^0>;mvW2PB{@NGdQev~4%l5*-!Qq%Eb#X?p_s z4&J(F%S>C7pLkP4oPC7|e-*eQvbh{7l1-fyk#hiSrq@C39g=Rqy}9a6nq@sB$T+2w z-Cl0T$OlVPwtxo*SmAcM%L=yr;lQ%l*UZI- zu{xGd`%heU5f|$7iV46=Ub-PD5SfP`_(1L+&01UbepEoMxqbsh-pUCq=PP$#>sPrI zkr@?5X18>Mp`mRZRc71lIpKrag@3M!=pKfC=53vRiXSDq%4@LKPScn}9;5RntTSKx z9GPg5KyT}2R5Y3%ih%aN3u%hW4=aI<}?B3Dxu4=DgbE z*x9Uz<{jRz!gA=QJQ{E~z|*(3*4Ebcc6yt<4rhMol~-v+3wtC=m0u2weHd^UKe388wBL>;h-}EXm3I{Q@tS zV1jyYn2EDUkHR&fVDYgtee%!keOFS+5Mr`|6AuGH3YZQj-XW!|E56Krji$@1K9L1uR`&cL&Z2Ki0&((l7)~@8 z_rIG45*H>Qt>L}YxY8^pooqh?e>d|!ezB+OVE6Da*nVR=kn0`*q2{}Gdhhs;$5KkC z7x|RTdM2I;17IqE*vgfoZJwn6!WQ`U=GpN`YVPEych~Um0F`w)6^mqIaMD%j{!^>@_(^z-%(t@KQdBcV$#Wx~C_n#+epAGlabmYM$crObF%Ro3>xe zsisflx?W}A>(1f)ZyDC(O1et_KKN`&z4U1vYyCMf(#uqXhmC(kZkir{?O&n*t0PK1 zA*nyKU2z&}%(;MIfD1U8&vMqt|-ZJgUQ6Tk*u+Af6xAA4AzTR>tILJkAEn z9H0J>=kH@d>5}4vXT}8D8viS@K7IA zn_Gu~b#0O6DiOWhv^v{29fu!jo9zKP(d{%0??OHP$|{4-iRN`_vShG&Y^igsFG?D@ z9|FOySrZY?gowaX65Om#4a%+WlmYmgzuk#Z8*Bio5cY$ZIa%X#0q;9+IobCPe@)k5 zpg(NA$X|X6d;HI-X-YbaWv;*q%SRDJ8izzR$7u(mydcKUZO<%z(NtQ%Am2vbu9x@NuqL0 zidm0WCR#izsw5}fqy$ME!Z{1)d%M5XfS|7+&3A&UB!JBG zP1jKnYy!LRl<@nc5e+6T6@nD4iZQ5L&BDg}MB^^qm@{}9a6lTaT1AzF$K1#pPR%a2 z2x!1COU`$*i?krO^bo5Skgr)Q)mL`d!V7)aW##Ch=G0OYeJmD(F|zfynUHe%KOrlN z{L1dIw2%F<;Aayf_Q=Z%yUw^-yq34dO%z>?+A-_&%nqW@X4LSJj(0Xw>Mydz(7pjvvP^;IKfe;`7w z3gNPhnZ!kRU(h+_iHjeWkRIS$o0$n3*eNL~SzXN^lu4rSFHLseG=3e5$TT4q$m~S} zd7!4byJK*K$dVFuV@cPUAe(*)?SxsMvWo~rb(ohiR$9*rLKF}Z$2mHLe`6e>P z+;UxPLIBpwna830JEfzQDA^Y;oPADcIf$8WWz!%XYS#Q5>JVbDhTsFpI@sG}_sXZy zKxZql;p6A!Qpp4@iVR{<@G-D;QrOVs#B9ZI@7(J?rz4mahtZfA9_V@@rMl6)mYo0l~z? zR`m9v2~Jf9U5UT_hI>1IB^EpGQX!oOJ>tCUCwV(^eckMya+|$3)i>h;w-s7J>0bJ(_pOUaBX>1?+6fzQsEQaR_tP?gRzXm>7z6gQAv9Iw zCzgE6daLXF(~2gZO>;8k%l9Uvw0XIN<#y-kKr@6ZjOsI7DB0tPU}WLX>CY5Mw&70- ztU7_h0?wo5?mW{iPKYJF6yW{2Kp(o?2>9~|`+}SQ6M%T+`TXQUIR_KX> zgKL@gIq%7wa5`+lu>l21?hfKeLZ*^@d%Ao%W5othJn_nM_Sd^$;o$Z3vvCt6SK_7} zY7Ba`PosqZ?4r5&-`rSNrr{U;tp*96!f3Jz0suQt;B1ks-pYo#rb`Z}swUc`%&||#rV$Fkd1(xf=6K$py)^Yb z%F@z7wj@2{18%79MMbm*ZX65Xj~6&_zahbyL1hkZVsccpUrbit7rgZ+sR7<;%Se{` z$16hIXFL3Rh1(|c>i9Qs(DDKKzkGmr{>h(BM4jNXiOh; z|B!TUO~%9s?%KIxTVtj?Zbx&Wm@&o}Di2)Rcu)W^@=MZKBCJQ2!$>WM+)~=6m`TB! zt2!f}r-duqI8;4FdMRWMes)yz3M~o4 za{X|$qk=!81b_7qlsH`Itgj7!avwrimfvL?TaRY6DfG9p-o2Z>!q@`*Y04&av}!1F zdhnWp{@}*;ZBCK8vsh&)o=Z&5<-|{oe&=c>1j@um$eNy%{k-4A8%dX}=N{E#PkBAE zyNHHh1EB=}7ttyVUkwal(o&1S|9|K~^nXxS;UftwkOK0e8gZb}6SYJJfxR>O=Ify7 zgpo3>zr~a_Op=X{meS;_x7Vb4@#^nvaBM;SC^VgEQkZZ7v`doMzfrt-4b(h*t83qO zzVu11;4i&Sbkg5Tnta5mD{@)I^3jOMG4EGA6wtpbJ>*#Gf{oADC(tv3`Wi#wHs!8h z`1xU^Xrv|dqh&DueTO=%TPYE)5 z{e{efu>@|n+CR>F^L);X?2!?|i!_*|p)ph-KQ<_DaS$($9bI*nSS$>R_pJ?enVv=n z$4LHKrHcWLSdEmCUumWOvr{i9Wfe1ESj>1lqrjTLEn2 zeacO3D%0-`5TwMHgM`=^O^sb}t7B?X>XW_Qf9&r$M5+p%I4KJwx%vH<6qdGK;4T82 zXb@8*;9Oie>N;HKM`eGU^&eAyM42}-zFY}c!z+vy9u2rlyMRK;^VAK~o4s@FD9npH z(xrTHovio+@l5PIUEP~_gnM3(NZ3!)Npu!6TSmiWEpu{mnh+bA*E@TjRmTR^Ha`u% z+5WD~=-k-YpH@r3IqGnZdd))w{v-GE%w>YwEx*}m7!%{FHjF3stHzps5z+$#ZvMk} zKyw5UP)0iqwO4zQU(=i35nQvyA7Aa89~VL$SC?<+LW7%C(>74QPArF03*S^kbFB`>zv%vt#p{fR-*-ZUe?sj1vRS6)j)&7^`{9b1+r z1Wjrxn$0QwZy(ER_ko}HUyU`-q@G0wlTlbv0g5$5;k!s&sOhd2SHh?OU6+8oo)O{g zf2YNF%A~{vsz{SD9J2ZLf2_jT3*yv)`9-{enhHOibC5Gy+L!!jWu? zkRh9QkB>{dpS&o3d3I6KA53WtX~ymzFWtKbZ*O!a#)*WAe*iTRaPQ_Rw$iklboq7- z;j9Qtb0c?zYCsC(gJ;ttvlIh~>PGK^O`8G_3w8v(E9!Jcqffn@Gnq~P3L6f{0UGC? zxU2A7horNs>nDIDaVrE$S77C;W^qn>yq#RLxXRi=ia(b`oizmEhK)ikipUb?vsr@H+Gq`7OK&Ec7`4ZmoxlU9w1Ox!bpJ9}XgiQyXz2Lj z67Tp5xf|!XX!=t2eWqv} zD(i-lPfS~T9exhFKGZTqHNNh&HK~WGuJio({M^po*hS%AXM$KBD9A2CPv2dEV`LU- zqDMC~bBsQ77bbr`lBp@pt%z%)pg&qZ=IML||6YKEFz(4YS%vG)+4b=Tg%X){SMXw+ zQlSD}inD4xo`?z|SF+6ZWNn3iMZYNti~qJ|51$ov9{r3MNc#puJ?lBl&M^3`v-a+q`&0B`@Wg7#NpVPVpPq;0);*1xh3FIG&qZf(YN6ot$DXFhRyUuqP+&5)G9Bi7d(c4U(R3w#D|&$=0vuov6LEb*u-ADu zR2PyMtD&@2E_!dwg|bL-Wo?b0SN|WUr>O!PK^&Ct7FajWww`u^KYnUL9ju_idzv9< zG)r51yFpU}mN1k0vUGM(s8qYQH9f(ac-K(>`7?2F92i@9@!ae0(9ptpEQYgaY+*_u>B^SvgNdSB3$6< zAFFCDc9ZnB(EdcrEsh;!AODA^uL_H6>7vA4n&7U1;6Z{*0|7#?0KwheA-G%P!QI{6 z9U6BD?(Xh7egAJ}-ukKfNY$xTdoS5(MgdA`NsXjF4TgEp+imOgD~&3Jp9sT&ZP^VL znEAEPctvm1&el%tg#)0YQ`g2D3S^+_c%4?opjWPzq zup?rDQB9WElNop3ai=?A*0wT+3p(klA2w-+2tT;QOXEOp&1)J+eyGGpO@6aaI%G@) zkWOi)q&?tfS&ueM(${KMGZRJ2qyS+D9002n>ZJ#NOXHZ$KNr($x)Qi=d z*NKhMmJS(~L-Iw4{e!>+d%p8+JbAk- zypLt%-Gfr0251nZmB!XU>)a#SNmQ)4)$je(KYszeXzXMV?{*WGnIMnmVa3TkzX2Y} zK(o~rKcmYOz8{tJO&-n;V36%Dbi(fwOR^F45dLQjW0jd-R!z5ar}>K~ujp#ZFC)ji z;VZ!QPjgxryN8&0Vr}U7CDOiR1oYJc?6zF>OUmQp86AzpY8QFwb4S@iuZ zf1W9~4CP3M08XZKGMuC}8w)`9t5f@EMZX#*Sr*=Qt;yQ+-H9rzW-UWiZG+I+c`&oP z5lgy}y(ehU@HHY~Je|m%$Ea0Zb1U#8F8v7D?kKpC+5m~YQ3_+$rui$W>U zN9s7GD7!s!Rv**TX$};aAgEVNs_sae7!~(wrt&jJjk7c}EXNRkN5@3fDAXpD4*K@F zS!nm8aG_)rA6XS$F`(ReO-xrtraCuWroJ5ZhxRyM>$BcU&I5-pLBsN&?HQc!6D|*! zpAq>8`6Y6xJp;?QPTAS^^BIiD(}NQ=<3F{i$sk(&d1qhNUK>FDTT|Df?eLTH>g0MaB-1KQ`^G;;JQD}GjRly`dl^0(@bCst zV%x4%MO~Qae<2c~A7t9-HdpOWUBqh+`EW*B?MpmZ#Hdhz#$JiJc(1yyCm z7WDbn`WKl5+CF_Fa`l`uHh}x;A)P7E1vTW_W9x&@eUpj+-d$khj|O#CN<6y-oxfM? zXWB#N_0RHDNTSt}TBUPO(EmU@0YDz!p!#XGHDM-FZOrci3pCC`kkn4C2YlUux#CPh zt~Py0^fEd0<+O|sRrhO#zqRx-ZYaZ>EFxduIy z55m@MC4#ayPk#tze*RKqhySmJI^F4>T=G>=uf-#gb5q!eQsSRRY^#$W4+eTdH%aa9 zq-K(MK5WpEQ&>#yk6%A`emBXqRyD?_?{u`jf;;HYo=pO^zQ$=MsIE=OuF$!pPmVDD zlu&uY6?jfE1)uWere%I|)mdsM#{jaSgT!Vx?AJMEp+LCMfWg&fvs0X)sLNGx=e~JU zE}p=4;3%_Pqy|kPx-Y?X{Gwxde&zVYd~KcWRG$ou0PQo)N6)Rq1lQr@c^ky|KRr=l z)HUFR2H>Jh3(8VBK0lap+%&%G8zAHGdlX~A_U5us5hy#+a3p8Zs?AMA1YIm<@=wmj zXg~p2@v92ZpR}jB+OPyiA~ll8d6B`(xj)yc9nk_rIe!b3=sQqQ<+iWBG)2E=kkzL(MOoG|$`kLPFL@{6*T&YIq zG;C8_RD}DFk_EdUAg;l>f?4HT)1dDoKkW9wWR?#LU~q8I5GVi-Izdrk6%2vCdO!ph zf2Dv3j;ZHYXoPy+c&N6czirzVKQ2%cIYMvGH$8<}SiG$=H}*)Y0e@8Irf}j@RC;cY zcD=abF9?adCv};0+A*JELi;BBEU-<;18l-{TQc}0=q#l&TJDQ|)1bE&Ya#4O9>)9q zDpRMJ(4)p&NybDVaI92Xz0>4n1;c2}I7n;e>4j4HYgGo;S)InfEp^Yd3H36>XRe!3;V77Ar!c6re5x#~>eFI*Udb_*5__GUYFwRG67r88 zRotXdbF&kAm);9B6G_~U(uVG<2a7{&xO*XFu=6DBWT|ExFJ;4!$xBmtkQYddG{J?a z*>O~VaJ@Q_`^vXnD>-At-;zZ8E#k}uGg>}>-CoE=PVD!nck+Q(x4~39%NGmY5T8$= z5-;oRT8DqkUvJO>QRiAGqz@+Nz*ly#&iv&u;NdOab=JKlkWy_t7y>f_S6XE?yjHPw zKd$v1n#9U6JIgUMGoz$96C0M@Dg8hsE28#m97CngQl@cn0^?D^h=>w{!Zy+KO$xPXTJB6VTLS3CaIT zfx-+A6={scaGBa-m>8Yt;YNt)dmA^Vizb6Rn)pKa>1FyT=1+pG=+KdijZQiO7(Cy; zW2y4CHz{0&i^JJ`DhCfs@3FWs4O7zfUT^}-k&7$TVaaMTn$l>17F*%OV#Mw2XVIXt zpTW~k&L{gFdJx(5r+vHttg1E*>H@DH2`?Q{=I>lY+D8^wIaI|Zg=^27LRpG$kHeGG zfRq`gC`|j?E>lM4&X3J$6rQhU_Pxyc?ugMS+a}fjpdl7Uwp)O+snoSYB-;1R9JG%I+ zX~BN5)G4LG@_6n|KYcVGy6<;7G z9LsB=EaTan0>POTbcYxXo-J3jQ%NohEo?w^cD)yO&L3Eie6VV~1qGrEMcle+MR2Zb zSuCZ-9T4-oo33YH5+_bzNgY0leTjH~$$Bq0aSj+Dbf&93vVJ+ZKqWU#bR~vhs)&sn9G!1Fbvz_kE8_d zGNP7+ZM%O7#tyl)QVGAbqWl`0s1Tb@_~8TQaRo6El~a+y6dF~#p&hLlE+VN&7o({7 z6A((Esh^-c2dZ6ju*dnl=(hV;T5lMTUkoK*_xTWSMw4^)nQ>+(7E|WM`#@Ox*-22= zLVLe5zH~TApcbtV9Qag0%lJK0wk#l1H6Tpc+K5s&nI2-|9 z!bF6G^b8DPk&%&^b+xs%pzqt{NMJ)5R_T_$qN@A8359{!Q7$rnUstPSgKR4EeX?OP zQf8S@wQm<{pN%XiORt!PU3AKd5ima$1+|dzmMuXKaI!#T;vx#2i7+ti<9d}wPMq@} z+XJ%1C#}hks`fC%@IAtp+-^nj)u+;0gFsdh30K|k64V|}kA8JeY=qQ&j{egsoyK*) zfL3HY9R(B+VCf^<1dx|;TG*}BVNgKCOBZz=xo1mI<#IkP!hl`uD5j>ib`9W7!1vQ6 z>T0DPd}Ra1;;Xpcabb67z-BE}qVmH#>(%Cy9>2 zNwtced-3@(sI?}+i`R+}c~p*RVhS`MRQPV#(3AU+ zVr=eL(@t%n-jDox6>IG-i}3+c=kLF0MfAsyiML9!<#sFa^lM9v8Bh zieT)I;<|&v`;qN_WZOw5C~IP>ZY}pHqd2f%MX_Yh2Jb>9eVKh0+;(eHPT3PYwnM4N zReaciKmR?x3T!I*WQ2q6wNF=bV4?rcFeS##ewIWpCM9rHJ+smM=@o|L`>>uQ2dZ(< zP8e51yonFn&1m}--Hcys0p)u z3P*1Go7=NgGbf4dG9L~379J4>CLkQOR*+1j@SW12uBk|J1?m9Y{PhqGUHg;ZgVumY8q z;EZmEII&tn*6ta;uiW@U!_KQ`?n@4Ic&5{fiZQBb|1zM3cT1nDw!0Em^=#(|gW>Wk zTLsUJ`6dU(5XS769PXSj?T5?q0cV*BfvvI*uQ&eZY^v_qa!Gw|X(D%8J;R-~Zm4`_ zWL8~y?n)&jo65?#j#1uhGPWORaRC9@1~8&j!*yrENl8R;3RgDIF%D52oCR%nctz1q z3(j}c;-4(SJ>Rfn+SOzvtiDs+zBHU18OM!MAue02t!6(5_IC^+yTr}^Au{MPom!5~ z&C2!`@=dGiG1tMF_ZL;#nCsbRbVN7(*rX^f@OJ5y!kO5Wa(BHBd#*u7|Kh+X8ZGMn+eNbtZp$o$kzzrKG2rl`yzw zYWTLppZsM1J5sc-iksgrz??qA3yp|VNVnf-nF~#_+5s;p`H+{jn=dZttsaq2?~a9z zQMjw@pG5em(dNSacXslI;V<=8Pw3jJh)?{u6Fc`0hRVU*N-ues4QXE+dYqAN)8lB^ z?ab8jg0`p}YJE+y%4PyMa7MEzFK(ZW+$K`$(saT+bSM&_ZGBRrXlGY0Gt^ra=tuCH zS7PvMTF6|zxzug$L1cj7S{~|9ZhFdv)YWqMIP+~3f1rz!7GaT? zFF03$hg^sIwRse-<+COEhCK=2D_6Tlos}eC)U6Z+84dP7TpItKx@rBmIfb0;?9dAl zoti%UNvp4SVIsbZbBuom(%-Awj@%wDwVZyjDXosc8+foOI~t+e2!q_+4so*e=Y%Rs zomg@6&U9uZ46N%>2>o)=uTX%UuD{xE5!Yr~@FM6aTcYx@(BXGWFM%Q)Lrb5AS3 zXaj2v1L0w>-Vbbfu~HOatZC*>5tc3tZIX4G-$8NXNDAH$g{ZSyka6TswJvvYF~;Ok zY&QzcZE#X_dI$Uzi5=FC~Jdyn0V^E5R7EKcN^^3yX3*X^j- zOb<;rRVh6%nt9pK;Gu!Kuw`#3-+hrBVElP;$2ZJ~D{$bcGw~--$k7<2Bz5SpL*Sv` zVy|mdzTSpr=3P0aVqQgOZ?!sY)m>-cjOoI_ZVTgqZa$sA(w2sZQXY$GrIFmOuy$2# zQ236KPQEPYI;~LwC_1zLfuB%FPn85cAY6596!2OgpE&N3+zeFe$9Q<_ypBDSnRP@` zM5dr~GO2gp$es}A!Jh@WnEm=bN=nL}v$mL)@x)V)uJ;?&`r#X&r?QcMdT^kg)2Z8sUcIic zVl69k?C1Gr3p>09fTeb8K)EK%I7pkJGGLD_cUg@fwg% z?`d}ypH5~+Qyr_lg`eSE@AQZ@i;_Fz>)`pSQoXMGgOnB{c7W zURJO-Qh8C=$@8f>W(*g$W?e@REk9^?uHM&DU9HdueJDhg-|tq~(Eqw1p2t+}+}hSkD9$fv%`AxP0d#LW9b*ZV>z*iT!7^5}(;V&#{tJAJ z$-1yLs>`IRh6i>;X_0u)+xM$=|7xy6#h?WzR!(<-GDG1S{Z)(O=!wI}

;4kRqnr ztf_eOCF3$BeejT=q9jcg<)7J5WWZ8M*=LWFDp6!yX6dC0!1t;rs%KN_knWQrDf5m7RdVZidi4lXQxYClhj@IYpNNc3$ zsG!BtJYc(1ffHg8FSht_Oszx|(y2dl$YB5u2d;t}D(gD11(!E;`#9-v)jEqn3J8z7wXExz&<@cOhj(A0zJ+72RT8shpynFk3>!$CcDPYPmX!!4+6l8#&By$0R?Yl zoz(M7;~3m_ZIO4;XXWvKQ9+%aEANeJ)7?VMW3t0MP*D3?%-{f0Di1C}*ZvGpGJ!P8 zpSf=jMz#MPz2e`+sUu%!h_t5@*m%Fqo+M)D*|@=Lw?Hp@U)HmmyKcv>q6jZWn#L1j zooa5AKt3MX8Vn9%vnZxywqBasNA_#*D&X04+Zyw3eug7^oMK@l_Jj)OH^A)fs=G42MTy=8Q^?++Q?1WQ1~lwMIjY+B+ZoB>~_)moS~D^?d0 zijKnR&|RB--kgH4XB!@|7kd__Z6&Uod0@$%=vE)$rmuPxH@ z_sJ6l#31bN3J&pssY0DDfJ@HHj7twB_~Z*K7TyuWM7>1{;H!`D$NmQe=I;oRqU6!g z<`B97Yo;{flP%wq9YTf9kwTkxpv2JtBN91$6bh(=^GqSTwvjF7XWlq8=qTXr8DS--f7kW?5#B9yxdcNWX9lY!N7 z{NSTL0cF6~(7!pBLpq4gC#gm~$CZ-N%hx)hz?yUM(E@Yz62qf9N^PplVE=a#A+O`- zdHQ2qdlQB037wy-f#+>bQ$S(vDVKhD3h^)$g$`{q3uW82;O?qI5taAiu?8Ay81`|q z(of=)XM*F4%E7pSE>ffJ|Fz^HWE9}5c?_R@tcSNYraU5|;13>DO~@x(-PG-QAW{?t z<}a#W<{2|BK8RJT%j+2+%+qZB64l#Ewh28+Yz%Yi>@vRls=?FLUldPlpP}_9%{2~< zb`>8^=s?EH_idQN(AIXn7M;aUn4*(pIXsLv-EG5bYbIgyZ+VPYcEvmsv10_gV8w1y zC4{hz9L7E!P_^(Edr!AZzc2WXA()F9Oqkx68^S}#qTY$J>(>7kH6#RK^5ZBr^`^WL z!@+ZxZtf)?sku6WT{1sbq_-geo* z>5Z$tHfX&0NUt`Ee3c4XpRJ{~sbZGa@TFCA3|FrAGm_13&I=mR*$ha9Hq>4vKI!gt zoa#-CWVO8pzK9WrvyLr&EQ{cxc3#T*wn$wBhuX#^NY1*c3Q{7;!$pDqU}&% zFf<#j4CK}K`nt*yk&9*EL6zq0D-Y%Q4!Ug$!ho?-cy=!dqBA~~3yRaD8}($UXMRe| z;rwh-QOW`4_ z>Oik|+qK^%Z{k6hhM2%4<_X$0{ke~p>{Y2IymRo^Tpzc~1pY*92s-8s4pdDh*gOQWbJr*)2`wU>VTGp`T*%vrpDZ_`9n+@i$i^5~M6#wH*1tMc3fIo17XpP5<)!yMHVgx~VZ*X$-GTzme2PV*J5ZgrJ<*x2? zTU{(ri4Dp@qxBjNQ5>XL@*+akJ#vev$!#m>vR)G|biISd4}lB4kO65S+d}ogN5zwY zYpVDC(v58@$FGmDnyV|;grmiUS}oD0-M)2-4MrlWD01Ps>VW@01O6lC2-ib84*v}T zq3HZK+W+Nu{qH*eH%$m27RCSl2!y^OFWRE~`NPTTgW|1j!TaSk>azpH)3a@$$P~(8zLc8`ag1obDC9 zeKB}a4_(AZPZ2zvMiBd`<(2vw{j$tgb!@E)Q2-Yt^-#Ny@yD?md;n++#GjtGz;>H1jIH=ueBLTnr0C9{T@# z#H#SylYA#)z;wcMrtH1zf4+~BGx!MGy6;bQ%@K;86Pk1IhJkVo^D#oS)kA!n!wWVf zTmJ;0z1Zd=+ zQLthJ2n5$($IxI`kI(f9{8=EBN#1k8yBCNZB%`y-zosnrQWO*vn5$2~TnaK0=ALMV z8l-6W_3BvfI0By^T4-=17HJO{5fqy%YMyGVr-mMH!+k%DN_J4r0vvq_98*B4_9q1txURYnaG z1)syA@UeDXu!tE$BCUYw#H7C3hjw%ruP^Mor4fcxW8(4rm0aA^8*w1(Qx@!p4BYC0 zsrJKwGnRDM4RIh8@^$D?a!R=E0@iA90ZH5ndlA!FKVm^tkYwN~_TC0dD>r3b`QyI; zYZw>`6E%%98DghH6l8;>6@>4GBFH&po%UBYBMuZr)J3<;NHk0WM>#88(5L6c+|$W- z5YE+s{HSmCnt=g#dU~a+kjc5u>Xib4wE7#2^+5C=E2k+fO}xOf<+_8~rIvobMWM|j zX475K9MXlX4tT%(TAB*S#tyMDSf-yF0x>*hv;6oV)k+Pwy_wJ0Z9o-&;2G$gq4TM;*s$4bFMb$JiO}r?QCjf zdN2Q<{omO5@CFXDrS~o23OU}rAp9U#Eoi&kWF{#$s*#%awu|?k@yUx%IQ+k#wM5UoaQ!ujP6j*@R(1+G6|3s1i$!yvckrR8ZA$k%JdvnBlcpympu6GO|3)dLqlJ}?V5l^@$aAJj_ic4!R*VRyN=wtLCN;`rWAn>P)$eONB|~b)s;wH`KL%5mP*<_% zfBe=E4cJjMQ`4$P$y*Ok*>7~7?WU&ZWDa||8?n_yHk~dpJS{giPc0&*{njVWbvExd z)|LeL8s~P5O5^wkozFPUi8dhxH|D;$5$#@;0fe=JQ+c$h`R+^o8w;wPnM2sgJ=aby~f z=gf$}Rs4(; zArfI5VM*GNVMRVWH3wx z8Rq*u-^kYUDKpY3o#$fPt7JmIuj_|Mi>160FdZ7=$GVw07ppOKa$F*vIJc<~f5x`X zc=}3Vof+i%@7TGDBm8^Q&_334jV+oa>{8oRC_V;A@4tl84u`u`6r=87x7OpVDC|t$9U3U(+X1O3m8P<-dZSCL#QfcJ^W% zhv$>;P~ZS?qhTA|4vJ;Bti_kf73S)5sXvGg+Y-{}*L#dQNt->?a08_BjA>K#iqHOz zMruF-MWP2`pQm+73XAlgRYS6yv9XkBia@^R_C;LA_~j`_qoFb@FS z6(P2v1?lR(jZR$~JQ7Iw-`)K*8FGn9FM!9Bw)bG0P?MZJD6EWrz0ZR)FX55di664M z|NPRe(^ct%P53y|yVQ6;&d>EMXR;9}oGQ{h3Hx3D?*N*Or{3-fbLDg@g5{VogR5<3 zUa)yCpKf5S;vd=?8D%uy)@)$|BUN2$%tcGtGSxvxV)DS?Edafs?!oIU(Ryu3#y}|l zZOvM-&2_9jPhI{Do7-`RvB%IUIOeq#Uwuznrv3PzHN4l$1}w-te!2+rf`^9(bcS~e z`e_^#mpU53iECZy>bgioqQt-O^#jLaIgXL`g=Tkct;XXd$8jILb4W8K#w>U;X6Hht zo#f_6{U#easT(`^Vd&^jXy18_fWLpm$nvuE@w!)KF~1=B<&<0_?g{x};r+(rB|E>0 zCON}(@U-+nlwu;hoifj@Gs_>UCh@p4HE{zU^shm=R+xJN+Q9R!(pn37PdEQ5YUCBP znEqMFkyA9XB-6xd;9&S8H!dgp9SRuXbo>t<12hq8waZd2qQeRMbjPNSJI4BvXb|Ph zsOxzu=I3gvVkwL#XJz|$`j_mmiCW)yaM4rKdvktwdd)FS)xIG?J zIZg1wbuzyZLA_RMONUCjDk$z3j@PVJsaW~_OR|^2^)TC2#hTbc+;+96it{3^h}UuW{K{@ygY67>Rwm1psY^!8$jTyhO!k_nA(a-jxF*}{b-Va7z*?cx{n zfibVx`=N0yVkoxA=i9`Nf`vHbvEKrZQcnL;xy6~63J>>*#qs}B9fl_nWDK%aEajQA1-y^pE>g3~`LK=|C=uT&8KJ(8BJWyaN zwaswv_;%6}>Z+xvB|WhZz-RD#pKc_}C3`IWRFEq|DK3H0+RRoCeXUlPbTLj%wf|W| zqgA{*IOP$@5!090H~U{gC{zt7kfameExEX(IiL-WET2*ywQUrv>Z|sB1cl?nw}RQ} z8-|H0=TtE%ADxjfm%$Fs_{!xF;h+ZqF-4RaB|^{WLgq^eSy9*6IOVtp6OUfkswk$1(KL~buZI>Iw~C^<5k~$FK}Y+b@N|CA_M>4KB!vZ}|dn*_n}*C3=^jvjo%NfusQ2nM>pJ@X2Tjy zp~Q|*1m|=k7Nx43E@QCU`G}SLE@y5yacCN=r}c9MA&}mWhsII}t${gbLcU`~QdQwJ z;+3+4BI3f%t38w-eW3BJ~S$yL}R0JU>xS6`C4AmM~Z?VHY1U+rUg zDU_uY*T-hTBS4;J-JZSrJKt_>{b9vO;ZFTke8~AdH<|pHpprWRs3?SSqkMOlx!kss z!RJ!rJIi8|Atk^E)YV}z9(vzml77%R|D3sHmK#xTCl8D2G7m>ILz$&8@w^IwCBe^& zs16RHpz{(D&3`J+dGcUQ6{@EiKSq_z<5y)M6HD1rxbsF|#>`9OM#NjQ6NO6cydu!Rfc+zp$>@iqIjg`;r%0Qso_`|%;=a;N>|kd0vbGW9$!$*QY+W?~glM4DrV1yOWaK4tvUt)ERb?90*`oFR)*Xz9?#}J8Ea#Tf?bE*^72V?;mvW?V76JsY4x66Or>bQDnyh6( zM6YG}5+q6%DQ-J7pLt%s(R zi5OoPOl+VzasuxswnRS76XoZysTle)RS%6&C%Usna`C%g{Jv}{SCBMSQ-3$r?=dRFuQxa$ERti^xaUo20Js?AHQ z2CjIAnb7Yl=Kq- zDqG1G?8CrL0j!bAd0esB*U%{k4YAHr${TQ@HM!?Q!zKtPu z-mwad=4V=UZFNVt`%3FH(sSAmh|{Gd)6z(TP>Ti0nfB42WywxR;h{OL5dq)EV7>dB zt=K}jr0-+nSx(%3C$`Ldj<~zp5iBa3^J!z=^xa?zs132Kr>M~2l{KC7CM{IP=iEB4 zi2%TuY5Ms`^nHW#Rd@!J_TsOXX)hT0I!)5a6x#T?Nn$ZIAR3Fq+&%|qTeFf{#h-{) z$T!&=q}!oV>3j}H4`l$`WxBW_UZU^b$Ws0mKyMV=nyTonj5^?$%|gjy`q@}++d~re zY)cD#UVDOU8@ zccva=13ZxJGBE z)!{K-WU6B-vo*J0i}nXJKC4!J1DvXPM!a|Itv(C3ynuty32tJj@%wuX$0XMhOZ`fV z1q0~|t*p93fF?n$wZ2q3`6QRyDP7{|_w1b|>LRq)H9^5D-8j`>u8&lRvZkE(g-My6 z42r)rVa?6W(Lf?y0DP?My!@S`t)n9+5k-m5?_TsRRrg;9TL;Yv&i@*A3rr)94^*5ZvNSTLk&~s5#j(aqCC;i!wIr!0yoAGbvm^RWA7gRL5 zF<7xuDQEPx`~C`=oAsoG;;h{LHorq2&6P22l>Hm7Q&l!|m3vPRDQL7-hXjA){N`)T z*PVp8jvlfeK~=3vy1m~raW61$?GRDObol8mCVfHTy#M1HSj9`34d2C<=5a(^A=Gek z!#i0uV<6TgiB*%ji$7z5tC|`;62`r)xXfAcB3%~>sk7B3X?HeWl$4U+;swB=13aQ*}2r&nsLpD8Xpw=y)RnR8cT!{7VyW9AlWeTv|?b4&K40_jo z8O*~wH2&;++V4j{7UJ4cc}G2FN(nxzKZ4JSv40k&$jnx3Ka*#)aJ$tf|Ce7l#(t?7 z2OAkLZ-=T;2>t5U&gkZh8_BwG z;P|MYJ`nS-!@x5Vd^=w5RF4FEb3n7?>)Kjy+wpaQ{iXX0gmn4^Adl&sF6g{C zu_N@gK$iV5@>_ylYzislP+_?nJ;EpK-G3Y2Y@2JWC;V0PsFKm*P?Us9LL&@UZe+7H zMCgEKltkfmN;FwiXgGDQpx`_oM`jX!n;zk9U72`6vWgCm;%E{QG2*-&hRgqx53oa> zFq2~sZw)%gM%HwOc*?*q*Uue2>K0_GZanz#4 zyP;$O-Qa%Wn+^3Om0R$XS(xIV!xQw%LeHZ z5-`ii)|Ww|!FgZGe_T}LetPT)%?`IP!0QAF=6rQO^X3gHOF|gFje6$f@FLb*a&G#K zD$N3A&B4YdLK~L^2mWcYNMw{>bZ*8|@i`=mtr&v$Pf&DhwY+k@{T1GYOfu?CxDCwU zBtWrwmQC$d-GUEXN_Cx)|40QIm?+-k(`d$E%{s{(^9@~69^(@zs!Z1=#*%ah_9=@@ zXN7;lLttcwU_&#?(Huej>KDlNmph){A_qean|Js|h51P?>sz_mG0;y#g{Afh?2U#?)v}&F1w46}3}+ zn5)4B%2kxYWPR6I5wBef6Z<`u>IYbg{l6+!J@;0*(c(|b#YDOYH;E8u>C>aUysDV= z59GOUzIo$j&07iA=he3F7sm#bfi~_Q7tO7_hXc?6@@>3{?}J|%YD8qz9z_@)tqA@o z2%LIyBRdY9Ta_#`_I%({kP#jd7O+QlA`GeuNxuk88s}1Rp9dDo;Xf;I{)%b#q{dfU zi-5Y4KiPIP;r5HZZ&K`XLd>Ov9El*b8+-fA#Gh%+-H(o(T>S3yqUFu&_qlg0Sd{C` z0!6pw$5$Q2CvXOo7;c;60T^nzeDfV|)Jj%uGGi>IX%ae`@}sj_uV!=OVaA6bAlY%7 ziF=qKN33t2>QKyDxEjcOH%H0i10`2rbU;>SierZy3Ds6|X0cxQR(nFUso8IWR(sEI zRY0>b{QTZeMBVc|wedGp_dkLQ)q>#d^}Alg8ZkU>Ia zF_MN+rZn_bcQM+$#L8jVb)JY83c?Vlp6wfSji6bDt6W+$;6>6qWfbo4Zyu~~7F+Xr z59{jh8%q}K-I#rjHkZqrYtne7@Jp9oEm|PmE&W5u(6KW`P{#{;l`i{~B>q3YehXfO zcVeFEv_5=-kQ9!?gr~{sArCOxDrqEs1AzQrL*0}h{5F!!UI%u+tO?>p4Sgj z<#MFDrRFZCx!*^?u*uhZ)uh@;nC>YWrlGzue$3SF9ipz0zE*cQ=iwTvg=T9W-BS-; zX}UtT#@F94rkYXpSqt-dbqvz;6d9kw_a#s#DyD153|Qg)f|tC)@#!4p+In+u#r?TF z;2b)pN)04Z2-`eatN5wCy*=AXW4}`D_cBtBlmT6r>hCL`>XoMe=$gH8Qzle?JhQ?P z)!zZ0iV=4%^dz6W()({So#xamk6uWElGpuDIa{b-;Naj?m{&I6X`BtDfbFr8P}B1j z%X(O!Zvut~hTewxZ?Ce#Zn?g8knx?g_}K!KrUxEwKS%)bJYO8uJc9JGN1oJ6s8Eh8 z)~sH?2^kfdXM~-Yz$eq+NE9V{x;smLf9(Yr{O}leU@Ee9Cj+#lBGMSK z7md|!FE9yDa}I-$>p7h}22*FNej2sP#M8kYt~^E6@{N~BJT;`T|4ds!$!kP5bDk~k zX*`zmV;eXaOGVC)zIq>!^Xq=uIg(8iL(zB=H)alGWwA)d1P?~ibKn^mcqD{QPilh7 z9CfX?6wGs!$oMii9MMWkD#VG)Rg^50!D+p@NtFI8aOaW**_|k}1b`~O+yZy4SN)Mw ziRe0@fHF}`-6Jrr?dGNA=I4iyc&7LCpOTY+vS^)#KZZK8m>$l-&q$$@=j4lR zj*P+^m>-Kos`Ed@d>5G->!GDFm*y8@_6C#CXF{&Z-VLmMv`G1ZAu1jIL52 zK|PunR1gnCp;Kd^1i$h#*1vg$q0#SuNQpoE*tZIY>s5xbQ(;W`sXK&V(P=3I9pY$G zV_!q4uR;Ruv9iz^smnx|J={VXqqw}mr%kB&GUhZz=vau^jbHkeH;$I8LkJ?5MF{Ab zK)i`Hz|BnfrqcctT7CT3zC~BPBFg9ft$76)UnwF-k~=JrsVU>W<;873`X zQ^1A$b7pe$ju)TmWbp>{C-uWRqRbi&R!dr3Joh_gYS#UExh>E8AkV|05fVnA6byW| z)S`s~;O9Z|A1)NNkidP~!6S;TT<1Jag5}W#J&^@4HDkTnBwiWgqBVpeN1?xpI0`Gf zU_g@0m^M6>HoN_bhjouW(03kw%fC)9VKH$FK|3C-h=v6C3|rX9WuUgXAm#fiAVEkt z6*CLzkK8oRNN`c?Ljlu0CqutR4{`f6 zDQ!0eIM!Jlm5fjCJd*8VWIzdsJKg|Yqww?TnhKh+vLBrG#6QeQ?N&Q%uSDxf6jWUj z@&jDh{amLcMCZ6R;cIG~_^TY?A+WLQP)y*5)j}+<&B@-H==b#!R612i&5a)6>|EK< z99Il;pZV^(nT9usD~dTP(N??iSqL2^xaCySux4fWZR<*Wm8%1PvP8ZE$zDGkgEv|DBt2 zb>8cq>VA4!s;XD5#k*mWu&EjBMNdKP)KLHFq~kOJY1SM{lcc7|WQJ$pyRe_}98Psr z(_sKxK%5VOr8`PZSWx`-BUxs&P)^CGM_Ytb4yVTPAGSdyxa*Z6#6bK;RCxo1+=Hj3 zp6$gdxolG9{TR%f;MSfJbsbR%d~$7{yN_jj}s!-J%z})|GtcV zK>d%cW?i;6Fx8yTvHKDib^`;WE|k#26Pvm}s22|c6k6}gV99;X6xY)fteW1N#!=H^ za~7^QXCb(>NKV%ac6S^`;B`ABN)Z|!6_rA>slG;7Eq} z+?dj7Az6K5@nM})t|rtC0&qiX6+dOynzZFu;sBD&(HSr|G0PLz)vm9udXYuT=(&TO zPrqA?Y_aQx8bHQS@GBX4Q`={jDuCV-@M;FTqgV41A!|{41&2Han#;xR!V};UAr6Qm z0^QBR$-8Vr_<<`=<_S;!?;#?{!FV=D`8-6r4Un!(OU#W-+&iT!U+FB= z&(H5e7+;w$`gVojBzeFS%$On6squsFv(F^-3*FLS9iZyk-PQErFO~<%H=exS;M|xw zH0_u05aHT0VnodI^Cj|Y9K93*>du2L8oiIsIy8v7j9^uH6cqpo~#qP=3 zS^0(#tU+FH(wNK$DD9Ssl##q7(i%)iTvs!*meZ2C zA!Fxl+V7VSHIQsxj6{=mi`>o?5Iilsh87p)HPBbAkxp`MPwNBhcI1diz>?w>ch9Jd zR=9=yqmeS=!Ojx^*}k6pG7r)B63OQ)#HeDd&tt3LSAkIOfS2+kY4PFFavK2O+-gs{ zkR?(BkD_23pSeq)<5SIdFFx=xlGy-8>bbOwv|@_4q-?87M?f7c~g!(ze|N0MgJ%r9@DPtI!*hq69yJX>R{K zH7t*lhxDa=f4CB^mcH*22;hm!c(u5f4tjQkG;xw!tSsrPBCG93f|rv;rpiMt!`vxA zP~J{{oK7Fx$Mz0kUz} zj3U-k3IcUDDl)mYuMEI5+SfGZ+gSXCxzjh1JExiJ@N7IV_j`$0Y3O6iRUgXXIeyX8 z5h-EX3(f=RB-CLT#Yq27q@smKXRhQ=S8Ndio%T+ef85%`7Dn}c_G)9r|Yamt&xL;_ptDd@-?-<<_f1b zSGYvc&iHt=d({n^0S^Q9$2e``8Yv7L!68j-A+MweiI1NzLkyIimQGlV=JJYBpAr&X zg^dxu^!$;dX$jHR9ybT+t5l+8Y`w%s+XV=&-Q#y0`zueJJQn(ZAWTD2p7^`EGuukg zc}tjRA4!_O`DU?S-$G*WT`D+PYfHbb#&{F&0WhAJn?;O66egy|jx2LFB&FlMvh;`6 zxO4f1o*A*E4~h*%yuaM!H1nhs?P2c~eKp>rvo(3Ha96_}qAChzVW`!j1ba0%(2jnG zM@dSI`(w9gF`wStZDL5TbswXR{nWq8edeY8E^{Ok>CNYAGV=IhX`D`)zNPzxkWZA00v6-I04SR zwP9mw5m)vHw#&h!Y>KV7q7Pf%kKi~g!{XaJU zvHI_i$p3BgPpgoSf6rm?@W41THY_Zx{}}!s)BhOzx6MDT{x$Y*n}1sUJH&sw2Y>$` zUH&_^{~a8-+kboh*Je)-koaz%qrAeAOtrL!zwB4HgV@E^+?<=PeqH&0kV-oR;_mKE zm7U=ujfN?_Wn&7S9Y4~{PG5e9KevnCUPnw?ex2w{6(VY!=W=V@v01h7z5j#2PqMhi z!KyoFjDfx>VJ4^GzI_t$XGd19{dqn+2{sir(6}h&mQ|j;eMMLMY(eyN`1fYSI)K&b zg-4Lwv>^2EFxJ+VCdlHcDsiwUkg>>Qj)Su#Ot^U1L5($knkFEL5!SckGJ8EndWquS zKj5FKeO2cxtwGoP3$DUGFre+uysb!zx~{8ly-E|yb*N%cnbydK8^A78O#L9+1zNZ* zYpI{D?P>h(RY@vVb#y$f-6*5yv8Ov>p{naK;j~VOFf44+0bC9 zXXm5Nb03n;@#BN^CndSI$~`4Ub++w95DD1)*}S7Eb#M>mB_Yo8Wuc~3?t4EOxd;14_ zbPGyIZ|BSobm0bqg)>eVRwap8KITPEAKT%N$ddML{k2`ro>IW_E=f7Mv{?%@Zmd4- z9R+Wsbo!j8?}fk1b-RsgxHsW(^VXkKe*8 zvQc$8z|db=YDSUrc*R&;wM?fbJh?{o#;tjL_qRUFeHcf7`=NMjx$f-@S((J9qT%rfdnj@%D^oZu+jw zKc!{#l89JX`KjHg19?)~r$ow;DuRduExH-UNI%3Rs?M@cKU3-vJMq?T5He=MIHPcF zMORfe!bn#SvBS2eXhd2}R^$bszsvhLcpUETrJ%wd+R6ppB*>z5gKL>byQOLSxC`i* zTEmM|Ql76>oPL27X)&En%AeT}BwNwY1}Oc+g(Qd58Yk;#K(h254$I#49V^pOk~iSE zWV$;vv$h$1Q%w{4+U@Rkw>yx@6QuK^cx@!|pF{5%4YKaIn(ly^0L-vyIM3&PT)1G4 z0!?9SYx*VjPGGNr9`L&#yX4Stq5hj$t$l@`v%Bd9kP#DF#4bQ$otccJHaWSjIO-mo zkiizsk(538)b*gbbH!R?V!?OULy`&?>QxT;YUwfa@x0$sU$E0@u*|SQZmY_zshZ$0 zRHYozcTHRf*}^1zSe^^%0;cf_re@V7@#UCy+|+OBLoARbQ>&A zVI33Z{o;J{Sau^vOFefF4GYTw#`lHUecz9BX?OF&f^bVuDd}G#$V-b4kwwR%T$FG3 z$yL5+j}j%y@L?VM(XEondHTsY!Uj{L(W8g<6r5Q?&de3Xd_p59w{2tlc>`T=LN)mj zkf0f>_^0T5V*#)(s9y8nZF5^})1Ca;&OuD&3T@C)dhTbay|^+c-%nP7o5A*;=fW38 z^RBX{7u}`=XqA;r<8s*dV^7~KKVvuZ=&mhls?NZqCl_Jg%H_78bz_dS=9|9Umv6d0 zJ&x*XC@}MG-vBJAf0`d2<(hWsFD}+>q^B4nV60zQRj(Gv4DXkP_|DpH=5NJ;)^ zYAatc*4Vi5eK^HO1qxgi7gHb7nsHZk9p05k&+YDQKOdx+N6}2_>h_SacGMN|S)%54 zTUeX>KRhcOh1P5wgc9WFT7dzgTrDtrIXmg=`gdU!RNPd?WtXZ5|9ky`wu8K`)yUaW znlF+WY^|Up;XD;w{qR@U*F!7l*6MufCPR(*G4>0s#wI$SSzA;0ysfOo#S?E=aTSDO zrC-R&0xm3HR##%f7%v;agfbjXhk2i!hruQHt`9k-NAcn%UwO;R45*ttQR?OVCd6OK zdtIJf=6zE7f3Z?192FuS@V6PzKP5)R=&DgY<7Ou|c;1UqBI~`0`bBzu!+*bWAG}+^ z*_wf#*i=J#2^oeK@srS2o`q2q%`bH9tlB5~3+bhqNWk2FVMg%_yXva04i<4hzDeR> zvK&i|lk7-NXU27ms)9!|DNP|Ynfp*Hr198nGd%5K#o1GilqgC-61u(&V@U-!pzs9ELJKaAl_txmHymcLOJ5ErlNt9P6c$3fK9t&qy_qnPnOYD&R-;HvW~ zTC!HSU{LKT+%X{*dJ1vOf>%Vk8&Ms0*hLmkTtjM>2q_M-7B$|SWJ{AGVViphkSmE~ z*Q(KL5MK}pc)%p6HyM}8;Y?slrB4yPU4rpnm!==`>Qe>o`kNSL6Bcd>4q0=sf=O4_ zTm}uooz?Rl#qV|vmfmO&6IB(v!qfAKu~e2^KKIElQ?x_CAg>|N9wU>0^6F+va`(`e zsg_E~l`o2xP$20vqA6ylyCpSP9i@p3!lMvH&yRY z+|zZ=hiTb-lXgZviCC}PVKV3;2@xGydAYU}Q=fs=V~!z7Xr(6E)z3o$Yh`7V%mono zw35}fE%NK3ySAH=%9HcT6fEX(^MeQelSzU%=y3dtBCRA!T^0%GKE+~CU#14JJk#c8 zGDm1Z#L5)6r<%@pkp`oabza#ECn1D7z;EY^>bKCoLpPooK})0Dq|9iA^#o#$oNyY~ zW`jihMwg+XLy(S`>%=>gD`$)#KirG6fK+Sa?!%~yN}gkb1$-`>4;1|3TX*#@Ni9PZ zYh|RbW{B3ez!J}?^;%;A=I{pqbm&)W>AI)8hP;)*eAi;ciAhHSa4o+*<@_v-pP|IB zFY&j2tm0k@2AEI-(dw~$Cyjp%4v2E#gp>d4osysedm7~+$P`ZCOrBVRTd^ye4Q1ZS zz1^XqvT@pvizz;VAje>IHHLH?&`Gsf@Ev&6rqW+Ok)5}aap~?ac@s8wLXG^a?h~m5 zJ(Q(nU#?v3Tlc@TcP!%b|62RT|Ni1fh%}3DTWF)>(+y+NVWdEo!hBLJ+!1)6b)^~f z7&_(O#IOJ@vNi?s3I zmeCf`6DbI5TNAY96(cJyg6WVMBldlLCYGv{x=rV^-2jjk|A-uwVaG*rsNcMijMu*e z>oUe0c}bfG;7m0W01^NJBgDA2}8$$kU2+p_j( zL;p`yYYZKMZrgMxZo$^O#Iu&o9||X~G8=Cx2;a|U-jY4fv)HUvzLFf*o;9%ww#oWr zmnVG5bdLB0%Ha)+@J8fce@kDFRs1EQm;QFWBr5M`n|t=_x!@u{3_~JzBnNNdn~jW3 zIRQ2E`j>T41)t~rhd5?^m67&27N7hR;@;V;O!Zd)05j93D4rg7p8M{goR6}dbyxp= zF*xmy-(J8D*_go9#HzUI)Vd}5p{)@SZZ1u>EO@g0{vcj?Gbe-{8Xnw7`Vj*0=@O=J zh{ZZFt=ca_Z#H2;)euPjcd`qIqdjE4{(v`PsDa+{Up3WRco}?V(2*=bX{8MT-c}lf zuWJ8BUH`;WUc6))ZFbWw#$QFzBh9;CQ2`I!hRdDDOXjXhzc-IiYvsUfvgb$E-Oawk zVD{NY0ZHrtB&pG_%zkJ<-*Vw?@Cx_Ena15AH(c_ziQjGo{|bIW^swL@Zl47TcRxQzT$JlODTMNCkGF( zD1tYQap~739}V1`MP9e^&?D5L*)8!Yo-hh(RgjP>F zZ|z*}-M$pN9*E<&;P=xc+{cnAw}rK2(gdX@j0f=`ah620_esZc$RO7dZr)YpRG# zRyz9Uem~ws7?@ZxsZ~Thpp%+d!qAX8=y5_-Z*gIH)-Ntj;57pf$l@YSrrmLaD`=am zsRtXJ);C7^iK?>Uh3*Lu%m|9^LZWUDr+aYUr_PI1pC(g1iF%@{XIXrDbjw{ArJ@uv z*w0-1YlwkGleq;FIK$?tuSpG(MSk!0w^nT&E&Lxti$vLC%(REA5cDiP#|Ht1?<|m4 z5l*R)CBaFu#waF@v4K1DQeQ)CVyfe6d%>CGxcBjD1pL86CJS3zB$=;N2PHILOZGIO zW#| z(UfFteKpwC(_arLVKXWl=ST8@Fd=5c>~5Ou;^t9R+K*!WDL0qZcHZLNo2WOR03CEe z`UIw;#n#-n*im0!=~IYAaAz_-qe#id$W>pkZ0R+X)z1=_qRmRQ`72#}6+aMaGJLB8y%INJSf%c?iG}B>X0Owy# zbp5odtNY^^JA1{G$5VL&CQK7Ba+qt)wqe!t`gx-cdczu_Cc6At2#tUqNl(o5IRLqF zVP$#wR~5~H2AaQb`%&2y`r&-)wsW?jgVkbGlO;Bq;^^ob9^nf)>F&tO&r9+iM`r_B z)20YpTJ%AyAImxODHnt)?hacgR*3F@BY0W=w1$0aNbBG@Z{xxH-l1sZZd@FlDGx-w*6=zsAOJL^i4PTG36NQz3lg|NNsTy zv2T9NGs1MqOr|&vKi)Bb^Hg6y6(jV>zcsPCxez{taCP+I>X|nZ!iG+_Ai+xZ9+Rv_ zq%*|6m<--r(oaTp89ULvnr;gVN30{S5C+D}rrHr|ZKfqlvv_$uah?0Tea?py>C`cS z{4nb~1yhC$9h=PRF0PAXNE!@?=@M|L3NritC2&wtt=j8ag>~rbK?XKx8nLny3~j=I zQjSkx7wt&B8~uG7isD&F&xPCw{Ni&|);QuUgVS{f6xY&@{(+D)n9MLTlXSka!b}bX zN~+0ZR_7@AeM8Se{5LTr49Nz6l$@Nr-6t*$P6zYQP6q;j1#jcUSEkhh5g#|M@KE;Q zB@d>oCoUaU{vv|LiOr_HEH>vgU~b@1U1fC0wrK7^OkiDDZc6k-25rGhAnX7aUDDIj z!o||&-1~$KzfR;K#amoH?+@?npJJ|XFrbf``B~MfHhWLQ?}W#~d78}BD~l6<^qr{l z^4=|jTT42AHS@O^4sa7BhDfOBXho;$X4JK{J;gq1T=rH(%N>r*vN(;ZN_%q!NjM>5 zG`EMSBO(O+s*br=prqkNM643*$pd`Z28x!XU>~F`-rLK4=S(mRG9^wQKo}t2P5B+- zr!oCC>{CMo1e;U+-roKqPtxBAH+v>|GM4rWN*B5s$FGA+-BhIVOHpf}Yi0uCH#S2( zH6=B@u}4?{^cW27Y7k9ayg5++ zraAv9l?7KhB!#SNFl*|$qn z5O54AkaE}utXVR4l%LSs!hBy0EO$62<6=0|N3(D{@T@{FcS9;y*+ilLkMWfB zoU)JBT%+H9H&sw0jOE0Q;_-q%HqrF4Ypz05U%Gr8MQ|82oB293h48X4rPXu-z>AAI z#p#!H^r7=2ys1EXdYo^pCP`goSN1DVyo8H8q~iNKWV0A^<(~a``!DhfC)Z-ew`yOnD4CW(^K3iLhd(KGsdc=l#vWo{D({IbRw8E%! zE(Y1?E*Z&S#rT!^0A0y|nZzbElC-xv>%ro#sK~avED^cNkr^Rs4o$y7d(|7J#GMxU zY-l);2gi}}6lv5rU@h>N9d8hlZW^iOv|4{Ii{H9)xB0EPx%!iqpS#6)&Su~$WtE-B z$A(NK{;0RuNt57qwgT{`uPVDu>7&}VP8ycBgXAjNUz{@= zJYTIpeh~gSK0dA?EhlVaHY;IjM)^32GvMSLKmV6wiB2ex@u5?=@Iw%+8muU9;B}tA zRruLL(NROCmq;{bw|?*Cr@|_MA>P!O@77O}Ry4Sv*60+hTRqi}_SmX3>~+Md z?0|marRa~N#RNdh@76|C23%-OXCm`_Ho}%0#J6T)+{$&~&7~Gd3N-DyxN(|tmmfbq zIwMb|j-E*8g8@Qv;vp*0L!W6Q>T~ zJY^K8^dJlf;rP7n43`l?UKZUot3j1!Q_^B3Xv~XWaL)1#^mjbUJ5U|`KJ811)M>+4 zJYb+a6RnMBX1w`zlZe-U}*TiS4%v5HYQ;%6tqK+T%{`LTWHw@oL;ejozT z9s9E>GQ#qVnTpZD2y$AJ5!1A7(M}VBFwvuVC;mcvjKf$~S<|xc<%?)Fo2A^E)%f}8 z56K;`AriHo-)+dNVlRrnBu?06Z6ICHb%A89Iq0Af0UX!mE3U1hT`5BV2wSyl5MiL2 z$J}c;zUPJ)AjmuRi>_WD zGD%c*gPyETzs}9-E9w8f6M+Kh#fXS<{|J$eK6)8`ZzTg=9V)-Vdi42|0EhIZm&G^^ zm`CMg^&7sLH6N;wvUrLN%@)h|kL#wV+<5F+F%P=7=m^05PLK}@9rXH`Ym)Icp6usw zMifpRfpYehMG_4#AZFMUk?fN0#7m-Kv$8NTjh!3yF5o7vsG)xZs|;x9Oc+zYw@2{4 zr_%w6GGB_5%|A{2zFfNoe&(D%*W>C{Pm)apn zXmSCgr~EeLM2)Ruvxs)vT2Iaz$QsVZ7$@cF`GQ+{hrr1W#kX=@QhSiBrYtao!fq3r z)1OByi{Pxw#7zp^T&4jWO13Yn8Nef5E|+GxCx`r_O>cC~VMkK8BS5pOU)K3UdJ z;jECPnrR7S4#X#cj_O3YHXvh{H#!au2_Tyssen;-5_j^E)JOEU9rwf; z>D7ik@G56ks25?Nv3>wyXSgaUQC0@}Q-i*oJBaYA)58miiH|pi z6HDbrJqsK5+|Ba3o+Acqfhj%^s;>DHD8Kq04`yZMb$EOK-oQq4cw;Y3z21_)-HH~F z%kv;vQDoKw(@5=Mj zb1kn&-WC*L+ieNV1wvSytuzVxg~SD1WkrwC7Fz826SDn|ZmGiA>@-}LF^o%%cbu-& zUQ2t5oPWf{;l~^{Id_6$L;9XsYo1A2jEpwGe~r`whFd*%+JhPf(T@1^_ypb0!*54n z#Z2!sr2Aq=p+!z-&<0X)QD4Cb_L{b#IDve3Xs*G1>aa<4jI?^67UGEdQK!u)Kw!X` zAUqJkoEAW{hX&znJDFJn#Wu4V1Eb3joqa+zsNvv^fpKD8E`S;e={D)G(oX}3v_(Z4 z7+w?|$?kSRP%M&6%m9QnsD8*sP)YyD|v9rrx%Y_+(oLViY$3$qK zwd21p&hI>sY+bA_x20@R2aZYFqMM0m#=UWEPDfYN{2XBR)I(*m!Z2;7z%o?bZf|^( ztTZ-V&Zbi9zp2iiC0*5sEUn@Af!iAmr|_xM1=>Zs%t{@;7$I53@*w>Z^XXyc!D$mg zJr~@{E0lQwjS0dQ`Q)%Fn5rg>g2!;Ey8dK}wVjl&*rwVL>C{g}=1>4#%~h^D=rm_c z>YI4gzpV=StbH!+;sTnnnPlqIJr1Yi2Elw|o>-=t`Y{Sdt%Do8nvf)s_gtCW&g1bA zS2Aev9czM}*9R9Nvm%*MiGv3SQ-EYf3P0BszTh+i41ttP-}pqFIBcWpNd-VAhv^Wb zH{*d&CUzv*x3Lw$9GNq#dBN6flmW)Wqsb^VSYzvH({F6=DS7*tErQ+iw^Bj8j7esW zrEz_it%H7^nPlG#@|YeajE+)YcboYam%JhA!m{LejM95CCLIk1hk4joo&Q?6%3tJ$ zfP5CZvk2W#>*ZKSTW+po9F|lKrs`CMlg^zr32!fzVSF%b)^z@JE!;(EM@u@P7wU{VJ^b0)xe(AF%6{)Cb}G5O)Yb45}im&Q{*t2f27BpP4(d>%!v+MnE~6n$J8RscJ~)j=pCFNS-XsO&8Dv z+OIZg1>RUEwGPPvYLS5ws)@ges16j<83Iuot;&6+l%!5`ZfqgKxh~#dXl`;jYZbk7 zX<3?lz^NW#r~yKkKa{hwG!PA=S#4qVlMPy---&RIfElLE5Su+DheYPISkb2scPJ2jNfQ*rVKmp)zt*yp>8fO zYlC=Ms9u+wd?%NebJy*v!P1xIjwiC^OiD`)k&YlU!uV99n5&J2m6jaTmBkck*Pg)0 zOxu|4{?xrneQGdrsx4ar|0+|HIfIgwi568Y$<(y;eOI2qlIv=t7#62`D>40i`%egi zp?PvbP+SJ`#EysY;V_2b|!C;IB9P#ceHMi9t5DW>u?p3PWb zYQyTHFpdb=*6J-s(hc;nK&r%5aTy*vfj^aSw?DHl?+9y4vGdK%auL4);NohMf>Wef zSh)hW+x1(($98IySESV=Od30tcHp?R!kp+;Q5z!%Qg%v<&F!H&d&w%Tu(v7oe{YbU znxC{&lFa8>C3JNvYom3%I0Ek7{@6<&Udx#`r-cs*kWz>Ug{-bg`B|r@IfKRi+QMN< z4+HCi6a5wG-~DC-y^v&<_ta3nKX1VD<~0d>+?84%Q`ngJf8vEilt+Vyul4lFG6)HJ zTor+1`C!H2WJMAh;{V0h+4-8CMbgo($%FdodjB^Xk|h$tM8c>ekyYKLYULN+0$@?; z&(8NC3NCVX82Q`VTff`Ggb2&IAG`)`KSE0!S(gao^pfD}yT+K|iZC|Ap?Dy9UrQT` zuF6U}va?OshM@o}@{y>=xje&K8lz3su^#(Tm#v9E-B~CW@M{f{T>1GZY}|O;lu=GL&jsdt)KUx`Zu`M zc7^>8Z@I}Mf?LTB|J3z1tVDOGN=G9mdY(Y5e(cNK35Y^Ea(puWs>gj?R9Z9c zZt6MmfD-zrF!72d$6Lt7qpvQC2dAXr3^Ab3aYdU1*@m$1A)TfJ50&pe{+W3sb-vk` z9A|TV;`JxqA7;E3T2>&n0$jFVZH`RkEd>2g*HxWjhvNi!sNq@$@9#Z-} z6VMnDjW9*fa67)snW3R{O@A>=x1$dy4X{+I|*t48wjgl@CTWoH5Uf`2fp?Hgh+ugT>rwj zz~HO@fnNPzyiwAelKy3zq4!gmu)pH|MU>cY^+hiCkD^(qKIzO{xSy+1WFG?@aDC~_ z=2Xy0;#LLk{hsJ`zi?KAJ`nCWO&H1v32f+(Gjx`2pfyAe_HcjDy@i@6MMonNBG_ZO z$cmcVPe~o12i~_(4KXM5T;5yJ)ID?jC8us`XodGSlo@5PHq`ErXPEk9++zz)`=}A@ zMCcT%tZ=f}(BNvkuL@}}lcYI3ou2(r%-DZEo}yAWe1G}jd*LEGx9UtcX27FGzu7e^6<+n{q_tFW5nR91Cxrk@0UXNO;$U0G6=o+Y)S$$}1 zQ!K8EJdA(7C892WX__TiBe$JzC4#&kT%^~C_}Ir!;FkNsQ=1o%D6c1VYa1v~qf zh&O4PGaHbB@HNwk-rb7Ft!oD#;DfbX!yYFLp$E*5*l?K->CZNKj9=L3v!@kp)r3nr zj#K4M?d>_$lFxD^{Q5$YXOd_tP6+Zn2i>8wT`d*6#%v$S$%I@*8QP5C0jdTof?lb* zAAyf`F2*06(Ip9?%gHt#%J>}qeXB9$IYT1@c3qPLFtXB79HU ze;|J(I6xMimpEEm|KiJAI%#16Cs+ju$Dx*2u2X1{&g0k6ZYe<0^dq0ewwUt4)=$UJ zUr-sUsy`|06VU+}NEm7)O&S}kQNIj6wQB@`CwQq}K(i9cT9`M#gC8+qI`?l!X)LfG z^G~3w4+AK-{BZ5FJ3E7`II3(#5FTrWLs5hAIG&I{hhbyHk#hHM)s{VX_72)JuGmNP z9{e5v5YvC$ax&2~aGzIICl+PEOsuOp+)or6^)+daGK@*TQcH~ZTD4rop{Yi}bh0QBDCGPH8~$QXfP@&lw3L(>7J_u1ffD3~ z0Ed{H-NnwX^uo;-zBs(~^fp&Z&YSejw~bASTsg2(w^$hBC(tl7D1bzqnYh?pMYP2A zA_)F3J(<`y^Xtu=K<@IOwOIip0zzn*(S!S5jZZ5;6=;gG;KhDT{5eJ|rmc{_S9o$q zwS`HD_QRbxMp#9SNvkypk-fjslOeUJz20igO~&VjcgVi1zx_6*ye#<{B~Ye>##>`( zl`+dANDM@$^3HvE9I^jGw22kEVOF@AHI2fAufCxE)33?aFhCnSyYFj?*7HI{VYx&Q zUMc6y(@p~kX02i<3*e^B4lyhi5B0kre?2-kY2;Uer`zhhRopoJ8+*uMcweS($rMuf z8W(DfGo_2<#mF`^D0&pP%qwAUn@<1?k+SJ4Hly^z%zC+)dYTG)BDSR8r6y^@td!{Y zz0>(C@VI-?}AEAL3*aN+I!hIf$Oz zf+@pRA+Sq_a2@4n_p<4yMH1rWH?&$V{zfNJ9ZN#;v>P$TC}KCqkPr?LQJ^HgLD=O2 zBd6}j8QX9Br=8!|Z6q_^K;k4n)QZc=L5>7Rmgl6%ibzFPdxdaSK_@6JA%4?;Mj@`T zBkSRA)I3=GEEX>8;r+9Q?w}a-vK0zp{V6r{Aja(211ik z;vASi*k^4a-UfVrQ6$5()b}jzRT{6)X-0-letuq8 zUsvRU6^HO;L(U^T0!*i+&t*D)hl3Z7|Kc%@po~lXRS-Ce8Gu+F4Ax>}{K~yLc(@Rf zntSEU+~(K65-(_4F)rJyZ&HtJdHul7h$Xel?qEq1`iFokjhCy=FwpdiiPs8^^CLv&^}gf?r;oPdNo?WhlhyYZpVRwK_@;I(do{4z4_`SLAV;*XF2#<|9h6e zdgnfK+{GYEIa}r5`fXB*r(6uk0_qLP^g-E>n5!1E#1%U*_nn; ztf(hDb>=6{Bc}wl&MwlR=+*ljK~`R(>Iy^iI=M^fu!yS3ClhG4oa#Qdwq9{^?5in# zq3xZ6h(WLOm-nEl|v2^bk@ zikXPr9vMyZiLKidW3~|&5frWV@pZXe)5?qHO+7IUjJno z+9XNC`R&mo{*nJOd61plf}2^l{`fJOfmg6`F|g{rIdVus7;it7DT7fV+R>Jva!RMM&tYNf2!dY0{;zW9|#Od|Jh3iuqj$bWG{) zJ{UhcEQ~=9(;2kp^IjS4pCyh!Y7gi;E)*vNSqvGx9d8{m2)#r8LwLE{h2mqp9mFYbeEc(|a8gAVV-sar^RvrmFU%l;*2P`%0F z9o~B*$DSX8EPxJlSG{|O?&B0-C)$;Dtnk^&>S*cPvRyjfg#+E&(_c0_vc~K$a6E=> z1R--rE0eeihR(gPu-hS_mGKuH=fuC@&ID`B#YVfF&jyMbc=DL+*7k|DIcJrG73?bp zyu8GPi&iyT&b$AFbsovQdz5-6G^9j&Z{#@ERFYQu3X?(a9KXSal>*pCqcU0 zd7cWs9CaxIFW@JK(l4>#$3M_l4O2ahSPShJEw!JNwDu1!-f^V?~zkHakf z@PM9c6VVQQEJl$m>_ZdM#G;5%0xlg|J+Is?EB94HE`C@Xa|tiTr@a-%jZCBg%u2YL zo;S!aq@llflu3*#ga_Ume8@1R7TVMzkJ@mH^Lgqz_P!Mvzjfh(gwYrqKJMZSc1B>q zx4!ZuXdQTjLh;vzgQ*sdAK3DsmEFZn!}VpPGtUfjG13z=|D_fE0=Oogrb44l-8+dI zx6fZ5k0oCmN9L7`reMBB^$})Sq^Dg2aA{g~)}2U|t$wtB^VJh{g{xQ)7kT}|BalFA zMEcY>)3Q;yJsuN$Rk7)R@})u7$WM^t^}ZS@uDEWRGQNVQ8jki`_`ThVp~y)x8u%@2 zQ`Y1@R0XUAs-F8O!&_+q-^k}P_yt|9j-PGh*rIj@KF^KFX*;ULKr)E;@!5wkmltI% zZ%c-^%hAYjZ%#myqYM@mhqWP3>nn5%?eX>>#a2nr=F@p}jaI3mlZ6M9~i$dfzem!-U z{xFN+XaAz&DWaS$r+kmqa0~_eC-!f(6}uY@vS>gfFwy7Jfw(Gz2<>|5;!5u7UaFcc zJ3%5?_vyEV?baPO1ruSeZvZ42GwvmWXJB`mr4x*uFw@9;jBBe~D?X%2f$?15Bz0XO zq_?(8OrwL(Rnt#I`bR(SVI<$IOQ}`F4qc&-gW)IQQSac^w8Q(~@ifVo06FKt!AY)7 z_lGGb#zVJ^Y2`x`o|sFXfGg{79Yl~IN3>1$8g*!n`s=Tpa=hF&DIwH2xSW)3) zSN9!5?p$47F~RB|vhq%HwN>3Y%qT!R(6>x|=q*l%LS2!<1N-9ZN=i!7ze0V;gh%vEss2(5viTtz0i9evZ=*aX z@{iL4z^J$g+yI)8N$>+mi?iwCHiGs1ouCXiddd zMo=F=$69lc^OV4m1U!JcqGbyFQ{SWyjku+3Rb9m&VDvy!q0!ZHd$(>$v`f&>NQQIW z5!E2xqh04RU#|Y4b^UN!e!nczc^`@<^a}6SVN-%_XhxC@9rS3pupeNiVEep`*-Qpw zu6=Ub+++E(MFGwvTg=66)mTq~&4p}ttyVL&bN2V)Qpc%$&11QCiRnLLcxUnz+2r1C zW4|8QkWe9bE`b;jSH^^BuJ=gjZ=o%lKt|)qB|XKb)eCKHyTU58M8g+{i%a0?!jm|} z))0zLF5z%BTp`lZS;-_3PVYS^U8FNpNIDb@A*$pF%+){C%4vQ98ja%qC~RK<;ZXahK-Mz-^w{@_v_J5 z==3$J*~#1iQ*MB-elvnX<|!vvyKa^DPk85_H_Htk$_3Bo7luB3pR2I=&=Ry(Cx%%n ze!3h)!!>I!H#a7{Z1d2<1E+Eu`5HdD;)PFebgNseMJg}euabLGRf;QF-Zi_|YzeGvhM*4B^YEW_MB>B^v+r&t?v>wHd50ni72Y>CU`M4l7bQZ#9{-k*hr~RGw@g6xiOJRG{2QCQ_*yJ$3q)!8Rdx z>S=xeIdvGRO=8m9XXpn);`L$%WSVJm2RKjAKw9&txb9R>Fi7jqZjub|nTRSA8Q)pj zYWlx!a|FI8dCG7=4Fvp|u)vyiKYezxr?D*MS`X~^povbV%-pI4nnSH6@QyzVym)-v zB&lDp1p1!cW6Br}ro#@vI()fw9>mHB)Q$8S79V!3;4FC1W9Hp*y(=ygV4r;Z#*}{d zQ#k!yLVR{a zcaYXX;`_C&tiHcEBfV`gMM`8;z#n9?eMKlXe2A+I)K4bqwar08jf|MzWF*kZDa{TZ zY@tDj?y$3aT@{o1T^vpEKgPAi$M>O}$+s8olkj>qp87OSJhE)^T_9tAa6s=vT^V`4 zcvc7x4^T^C@#C2pj#b+k(uxU&R_n!OUjf-jjrD(DrHlAkpaP(iZu=$#CI#AdsL?3s zsTC-V90CqV2UHfsgO^GZ^!e(!DC3PGLGQzmAgT+$S%IUt1sQE&CS8yO`syjk6jn7D0?v-?B(O%XqvcJ7jS*urPJ6~hs(3B zgSDR{0dsG+YVS(y>+Tf8uJO1#4m>uvjEXoZBK8{ zZ%lf>P$91VybV7%zPQY8G@l29r+@mXCe@Hh7Xs)w0b}Cp7wkOxBD7$TRqKDSUAtz( z%bfK*Ggi~c0zWXSdQe4z4ip{lp#1ZZ7wamoaLFQIAKnCu1h7^2tEf6DiLbutXg>*} zaW)`}qd%B}9(dkX-3(}c8IYIlkQk(jE=GBPnRjYyJuCJ<1OP|qKM7YEHoyZG2Yn&P zG~^+#OhS+O>DhZeo`*xe(F2cWrNTPmv?riUunVrkdW2lp-H%BUbQg?RgW#{S^D6mg z8wKhk&gig!A7IJoZ6__p6paeZD9ZIOg4CH~pxb&MFXYRfZpdUECX8rZ9bI*LY(%0` zrC%bi;KU4Oc=d$rrlaxXh!__xFwpOAV#WgYTGE{0yvkMY|omd=Ta3dB)xM*)9}MH z$m_>!z}8?&k!*m6#- zM^yb|sBFOnNwbIY;SdSx0PMa(v^ms9*;oR$FtM=neXn*M(XkWJX=T7mwjs0D1z5!) z*6!_>2$4nL&=3>k@&SCy9p(VLF#&(KOPjA;k#~zuQPn(Z?$^Ka!sMsry4`;9J)0AM z8xd=fJWrS;<3B(c8JzyWLX8Q5=Iiy5#PbNKE3yu&sfV81NHT(xA~hDn`Z9@PZ6Y9r zUUPR>zYg4X_tk50>Sq@lFvIoGEh5@U|GTw30k&Cssda$`%u4mDPpKkhCdvTj5K^YW zXETk=#h(u!mxGA8KdE7Wn_ui49bo?; zo!}B0cLKp7!QEY7pZm_eZ@hnd^ccN+@9L^rRjcNjU*5|^QOP_m>2Em5ETqfM{Kkj5 zp}Opd{@Y*Q*;rsef^{SJHxk>WL>_^Dh4=Tm_^rwWqqNi{H~62z9UiaSQom2cCk;Xg zP`-({dmeH(lCAXL-Oo85u|Vn3)&^ov_0l-rWIz7oMyok&QI3N({xmOex{?%=VlTc} zsZW$|95w=-8+Gs0$%N`Hr8nK&P7er$_5AKQ-@H2{$7@yIgWERxOc8O+BM1?{dpc}i z1q(3uoSxTjA8*#IH$xAhn%3`k&o|Wq^1q59VMJ`UwYEa6oRi}~K^#}A2@os@lN%+A8-*EDj#Bxo0!V+{T8q3!$Tg~$2% zxuyH+b(_Pb?1o&QdHRU+YDiaCK1{Q6Yr0Kf*G}Elt5dWMB|A5Mm*PwIpWqLDGlE5I z<1cwS8mNOh!UqQm#0A!zW1JlO6lDKeT{asZdXxxyyq_j!c^7@M;g>{UqUmUz$zIr7 zvhAN!Qpv7DJ}yn`eQ8uiTFd?vu!MY+El;fZVkg3ZlEb1JKAu(lO%Ss-h%Wqh<3B&x zKvElO6R&T-c_ilb3loNuE`$<{35g`a`I=9OMK?R_*kYjlR8Ks@)B9SAau=XgvA^Fz z6d0}jQLXPOXmsA}%FZWb1*U0BL+1T8&&*i9bab{m2TE!=LWm8W{}$Uuly{=y5m?vr z!}@-(NA}M-=$}j9<3drpy`6i%oArJXFSvhuQ`5qP^~^U3a+KE>4b=JUTdzn^&t`v%QTN7{qZF zq^OU&{jd6pQrIg7p}S$rrXL~TOxm4?>(>3q`sA_t5x8u3@V&p2-FldB{Uj%Q(EGw< zwdw%3NpuuS8$yJuZuccs&{H3M`P zxO7Bx?oY))$g)4;mp`e<11dUMFR;-VM+BOgduwYUN@u z7!jj%{AosHYUS#j`XtUS{p!@|kh5P6O8(dm_7B`G4eg^NM1|H6q#6w<3)iPAja#jX z>eY%dgRS0po-S>gxQW`#`aic|G!t335fr1C0e?ePmEt1vFPLRwBP{~K@ApzFI`&Ai*JjH^R?*6 z+RLq&29>a-m)Yfp4hF6(o@9+A9g*gUt z$+tqwk@tFP=nu{o?F}i0YR844ZX2zdLAYHkEu0eUpu2-P^-7dFHH{?lA=1pjKES?? z&NZ~<+DL^9mOluNk*0uLs<{M zFCqu63H9=fm-Lhv<*#wu;YJgYY|oxX6mm5ps1ScOO$RqLS{8@p?m z1}ft;BX!CNpFVJ}Y{G5eq&sl&@)*MP*M+f*HS2gwWLbMUe}++h6K||dGc^z@8Oy9H zX@YuY6ksA(UbI>lMsd;3eDG!Ie8x5iyqbw${#6)SiQu_tvwJ;fVn6`B1gmjAMW}(qzS3IvAc5RVE}--)KVirJwo$Ca zL>s0p^O;$l_yYUyc`2T@fwgfJ6D9ADHEbZ|;7#h3um@YbNnTFY+Dueq_FAT)xzk+-Qd- zY}gq@a+IrkGfcT09H@E{T5AJQQ!Si&Iw{H57|7Hvk6DzV2@1*}{kFWCo%KkPA%Vm( zgJ;rIetc7BA_iAeJ>1{k-j7=2r4s+0N;(EbyEF1cVL+Tuj`!6DVT^YGA%SyWigcO#x!Zf7UG=Mc$NXhhI6IH5z z7#Ne{C)b!{EY$o6PxOI7J(R!6;iN+e&cY&c`w+i8J{M}Ud(^h z4=>GTz$mxoD8YC^>VZV6P}%V@Sdl)mnd3C$E7(G+Cqcf27tBe}6(ECv%--j8#Mp<; z(RZg(HKhPUe{PY8m<&cWDMD`G?_3;p@{ovA7^L2-kWWt#d&itFAqvQ?v+cME^Y4nW zaqfEO4M&G)1hXPN8a%14xVlihh-iYSr3S!6y?F~Vk_T$7Le zF06H4RESKj?Hp6O;=7uIJ&=1VU%04Q5n zg@>2z(cT9Mz)Mp_+Q>#<2Y>C5AoNvY*R~$+e3h9#5z8i~@V-SS#*n&@v$pa#lMYu# zR>iL*PM^Yp`it#KPY@^OfY4@DBp!!^%cxxmoupu&%B)tA^k3s=`$iq?KRMQ;!g_$>i#!d{1H&?yiEXQ=@Y52u_3WdBM z@c;>Eo(@NU^#+=$X?_VYTdl#f%Xg0~vB;Meh{#I`fT;d9{_P++a~{QSo5?1|g}AO0 z^1f&kr`Lr>e?6}6Cr{BR%{ePxyj>^By;vB4srLxe19`f6+gnT%6whg7li(FVpKTN2 zGI3KYQWl6-!^hfxquVD&eJTG{TRrjmx97GDyRGwD4~X{UZw^SP1-ec@2M98fl3u!( zqC@V)F}C3AS6Dth!$d$Tb};jh)RXDPO1}5H6Z;*hz`+8+Eng%V33Z(^e{}_Z z_HuPb_`wcARklXVh;jZnS?nw5&@fLkY0|`PbYWaGe>88k*+9ExX+7Pa-f$r%U_N98 zWr5WYB^$m_Tm#!5=Ffn6Lib))A-HddC>9T~0};ZIms(rm`H&!4V-5S#i0`j^1^_QT zgh-BvuX;TC^%r_CjX27|+Ly!iANN0Nr&p& z-2h&O@-M4vTQ}__kblG&`qAKaqSFT{kZYjOSgW1Exj0~m&0+aWRngKup~eM;I-IN< zAL0P3VJV9uTB1B#!IFPZ)T__tn_%RQ+pevZj;CYrEi)Y%7Dc}3IKH}*j<(TEL{&Zz za%pfr>lbMjG6>6`MekSEKT`;j4eYO|u$?O7Gzy51lh(s#GQwRIVyetv%11^~qD!y& zA8$sifj_pP6+er`h4(4&ymf>G1zTv)A%Wk&=~Y-g`@y5e?#DmI0Lr2Y%8uXPndpQ5 zf31&=?F#q%*z<>`lO7U{K6J^c_yXdOcmjov@_GALcsPUgHN5PB&NB9}%Dxb}3doYZGmBa;W3m7+C+s7@$-Die5L_av%R3Fb_-mYwh z4+->AD`_F#$%Eibs=jgV-X((rt##$Xhy~^%v6pv^{$5QR$>Cr}y}^)++yi?PxF=%= zZk&#v*@+8de!FFMXf54cESG`VNg)S>SYktSy1O@iNErP)!wBFXfz(HCSB3#6DO&yz zIkF(dPphkzzY+p6ggVWhkT!)efvC&B$2)s%;BpfPWs$XF?&DR$2xh$>&X_CV;_0Wh zxhhIU1sSBu_>z>85x*jY7^ULOWIohDHD%ra03C}WFneW{#T zt5J-lF&8cfc6YZK!-LC~!`0m!fY#-7Cp4J}mi&2AZ zW|^v`*}*Xwy{W2>9ur>L$bL$|h;u)m68fy$9}}G{hGtl8 z84k&NPuJ*a2l1QVYVbR)uFA4*n^aI7@}pVe2=;q-@oXp{|9Hy9<+jQ!NreA$t7rG`0olM56J}ijJv~ky-%^&<#a2ZYC10(oQ=TL|^GiPf^@c zOhle1C`9$6L&(+Lbf8efXxln7%z14gmwK-oR0~Y|0|D&@6Jvx;fY5-OWSOlzsh*5! zxDGt9Fn~8Oo6y_eA1%RjeUwo;U>m5~?eCC#Ln+Ic3%V zSE_}}h!Y)x8%8J?Dg^cQDBm`TK=rknXZR_DQ^ zhjee8Hwv$E)QBl~Aq^g0;9#7u3XmnMG}|KyHM?TVKDl3p+j->()2C^(=+E&c<2pjt zqU5Y0uzkb*-}rHI48BUF`C;10O;@8NeA59jepwzB3A3rh@bpfC+$aSD3un-S4UY2v z{e}Pc;(z-Scu4=JV}%j?&r0CG7ytV{U>VN;Xwd!}s=%GELg5h`yp0tkYjSm#)RUot z1#21UF~sttB6}X%b-rtt^v?(D(_l`D8mu$rd>W!zG)r2>668}JHE~;WCL`^Ny)WzL z{QQ(Ozw=gK=^r#FyfZ-iIeH~FlW9A5dc+*1H&EfdAj=}a7cXc)mqyp9T+JmaJU6+6 zmKg_!_MK^2RXAfh&940C<5P5F0g9@Xke@i`>@ykW&3bwL zz{6JX_^wVpuBWxJN zbAPD!fML9UB_rH6||zwg^M$rq1)z)0m(H+$Z*F7)F}Uc-oWM0 z|L)V3iC;*p^r#5!ua-L)Mp*32HamI zpPh!;apfD5a~?w~-j%G6$**qW3!b?tg@|6R6iE>g+ue;|vDyxPk5rMraDmzB@y!sT z^$syFbmIV+z?Bw`W6vO*v;?S~y}Dn9kq6^qs3FO&Mo3Zpr3iKi>!6HY|5iICw|w+mq%4Yke{KZ@Ah6LCO6gJ7X%Nd{+N7MWP{~&_wdp;B(JaqNxp?R*8ieF7XrCb) z?|GtO7!P{w>$WYkDhkp$j3f_n1iDN9z1K4~z5G`mUx53EsuOj=AhDo-abXAoFESxL z!Q3n>li>3F#0=#&fMNQ`8CL63KtB7AY}I=y@6_qIGMEo7jjj7fOZ^R_eQ7bl751os zzD@-obvIo4-AIg`5+YNzzCkL4^M0weyI_>8tJu|!C^|B?W>i#x!A|0HBHm5V^ZkNE z7knq#w7(ygZNV=&cHZy}Kkc7^h%@)Qiv-jK(@5zj?5Mipf~z%nC$gBgQ@ zO&f~r+rlQ(KeVFt?$-)(Ro3sU-S>zM4?TF%bR*A}t0g8f7Lf%W|c2rYUI7qo>E7w1>+5j<3D19EpBa!I#n8F!o=TB!HfT%?mp1ML->!Unsl|4~-03YRJsEr~O2d&W4XVFHOeCc@qJ>Q=z7% zm^rWKw}n(v>H!{2>A@Jl1Z1~Yq&o~JNDY$$J5ny zbjMaIur>VXvZjfz1uCnDyNP!GXe>p6Dl0RauI#|SqmzF{2yV3Ex^zDj4c4Agbz*Mf`$A2)YbPtU92;dwcbRt&Z^Z9Xvt-WBD$Q3+?wQA7)w$($%2 zE$sSQ#P(|Ei>!z2a~;TtP7a=miYg!gzTxl6-k5lbP1LLkOK$JmF*I|h6)=@+=lDSL zM?OUQY-3CNP5i_j!bn*>XGLV_&t?htR=0--H&6Q0^7x2@s?Le&Y0?!Q$66A`O74ya z5}2Kz2+@<*E06u1zx4ME{iTXttgN&gY*64lc7Dw#%OYW&v;^I4q9duAToA-{-;AfE zi#FNrNSi_r8wvu-RyUa#i4tw4#uSfev+2CZL?3S+5@OhZ>f>q!A_IWtcjw8Un1uV^ zA)BU4a%SfJkVo#Csf6n{7QNjbZ(Q5^3yZ^Jf+EFjRAyom+c$cAW{HtG`L_E{^_(1L z_v8~J;)lCPyP3~PERYqrSg@ZUN>ad5KN=3*)s{oh>N+%4NiQi6qrGAfbhG`h&*8R) zR_6Jm%jPu2nfwHRml9hyJ;kq$P250Uze=wwP$z9vX%qGK%T`;W?uE}Uvx#wS1DoC{ zP6|vAjGu9jKc+7PJHcy90D3Qissxv=*iHROU4d|Kk8$4FOs;5}z6c-Ef#+kPS0zfC zz59FW?4~u86swK8v6jfUMXP$R4Wt|>#z{0N)#DyKkFT><9G2;bn2%ZM6I&LHs$^rG z{4Fls!QxoiYH^8mQ3+x2aJvU5zBdD1AhZ~X2rZ?HgEFcS2BDU-v3z>cXj0ponN3|)g7aV=rke$}-# z=)(@;!9ra(Kmd`2mZK{(GmnmHr)pn#?^rVM4^LwehmzMDBL*RC>>BGPM$wlg4wbf{2`Nk-g591q0SSTDz&~>_dPp_Dhw^h)7em{v-Fv`= zc~c8P2vtb>1cu1)Y#Zz=qeq3^@i8qfI0zSUG2r}Y=8se)2>2kDCF?(Eb(_l61oIm9 zPWHc%OoZ&HBPwJWo~4s4N$wuZHqR$>2(eQvN_RXj2W;VNB(pol*X|gQKs;YzP*@X~ zFd(yM6%lUZXGjYOYFNg9(2~hvuV;$pol?N1q4)B!j{RO-W8mP)ncgoFjzfRAL5NK; z2=}X^Fu{C+np1eoM&N(~ZE*tHc?0rQDy4S-RJ~;F2T#D#a&SV+4Lw>y%EDM>Nr%k@ z3V?_Bj0tJ7#1iz^Y(+|nS(IEf86$d|5}=CQ?DzOJ{Y?$K?srY8q#@6wVUA1AOLW=h zbk@otA8MYjq(Vns-_A5$945sAJkdA(zB3eDiNkO&rfsEa2{>p4n2mK^97&I)Zx0`l zRI?)3Up0YHDj)3dL2n~F=a=W*ryT?s+spj%3M>YdJveP_eXOCKW8DYZ@w5RkOLX}asydU~Osn7U%cwtLd#3G>9m`-Bs}>7tuThIaIF2K+uY zbeD6nkU84_%_k0nb9uctA)=%%_TY11y3)DZnvY7)!ohUY`oe|w&FeDOTiOqMOpzJq zDiZlFbQXRmt>#aXmF&^@pV-2R^ODa|@1If;ZQsC9&56*ne|MuqYYzt5(HCwz3SQg`qbI zha58eb%y{E>yVBgTNVF=5!kwy+c&&3AFM?{Dxgaj)Rc}(H#T)vqPW!nh?ZH6q$F6C zTADxR^{nwt*`Q;&km@=g%dB8~;`c1By*J%Nz=n0C@D{oOt19lw5+QC(Z!F8MwLNQ- zrBTGYdT^^TyTy*>XsNjgoN??4tKd|?o)Be405~9aR0_zHkHwGVDEI6bnVV3@VG7=r z>xuZkDek^tJ1sS|*BL$&0S-K(o+*Y zwu>nD--o=~)SyrZH+y~fmm$wwIZHSR>hrO{G_rp&O5_C?*v-K36vgtBHx4!8-QsF% z2oT#;tss0-g@q)ueBwZqRWc}ienotHpTo1O6${>0}Sy08%xiJ1 z^o2O_-sb^91zJjBgOvH2=3J|r7}e7QN}L%JaVJ8Uq*24dwUHUTzQKrY86w%<4AJ6m z`HPLM#>VOsO^@S~#%B5=${Q2SC^#T_zhFEUPv-34NSGSaj8Z4KTY~<%%`{=D82UW; zy$i%}T$A5|Fa{z2^7kR@N3FX6by9WB<(B$Jr^n&QY`V*O6<-emhS}XEglne#?R-{p#V}=i9{p@an9xUw7ODnvyNFu5Rj3qaSLjL~0=%;FZ%!P6Ia36G zU-$N$hE}5tqFxRinhh-r$BE5NMBTud!p=@g*~^C(^Zd*|=|1~s_k9uvznMl$nwjPa zMw9{GYW6=!O#?2P)s|Cv(Jh~{9lOjKw+BU8l{R=cgrRJoO)>oz0Jo z1Doo=RZBf;1!!k*E_=>)GHm5#M&p&xdZ*YnBT-bReEJq6!{%FVXVnls(g9>sAv4w0 zf=b=a0_WZ0X7AgsRn36@{o<3JlGNa?N9=ac>v_7$sdvF|C|C5*r-i(V5-qNDeo_7! z-~}Ipz0k|NW?np`3|tW7J(`Sas5L=s4SBsXHiZ3pX#i6U%f!T@ zA=p*cS`Q6z-RZQ=MFnLz^;!tQ?fc*$$$-u{2Fazwg7wA3uYn zC*l0Y+4(z~Dyu*9GUlWnO7b^i0W~ekERF$k7=ZTsm{gHrl;oBgF{Kl$Y-mtcnl`tJ zPKS@DPEu=dHWaW4z%>F+t7w|Q>H4T)9dQ*UDNol`*^(zn{~+A|rc|?+*bKdC#PmvV zb6`FpHPy=F4>af5RS%?kGV=b>&6Fftpeh`a9+S1h*^}q=hK=;PWTT|1v3rTANc zBW!6}q|lkYvn1I>ldTTbS9R7ijRz&xer?Y87XLdm$JTo%Ex=%YW6t7B?yU>_4n4XE z?6l2oSmxGdpo&xwc_@~Kua zA%o1c6VBM1(JgO5uo61kAt9cxA5vQ!e#lTwm&i-2;zo@G7^XtC%2uitnP#3(gXdc1 z>0wfZQ_K@v=LOxW&~E1>fEiF`p8&?~$|hrlnoa4*<+HoKvxqzVc-T|fNIoCT4)G%j zEaksI0ITW2PK1mMH2*i3p2qng9q5=zBXK1h2li zwo}Mq!U(__D@dScI-&fJT7u(P=H|Kpbmyvs zZ#v-84~?M~mv%tw_mw(vwu%=YYKMb@O<<9a&~sE}Y0eq1-1aL!Xp^zOC)gTp7Z|LV zN#5ru*wh_)dr#5r>|venPizj0M|U<4p5)Ic-p*pQWa`I9v* zL#)djgo^Q-o+o2*rfBzDX|J=)>7NERr{aD{jKr);C#0!->kQp%(E>*MO%0PAqmAed z6R4TpoI{t5j`ri`utl1iTk(zLeYRUwc~e#93**%Q!X{;$fA7orzthxy&8dxdyBf89 ze5slNMy#Ood zM?>C@1&s`j0|7J0O(w6;UI&Zlh~ryyi=J}BSRl@(1MOWLsPy5L0-YtoJr(>!t|@h` zRjCW{+O5T?ojM2I9=PaNB&i1mqhpJr_e82FxyQi3he4pYFa@T6=Fyw4>!$)K@*S)? z8pvG7AHU6bk5-6{Dl%p5kA)_{r1_@B-!tyCgL>mSCLyaqo-*Gh3y@(G9~c%l5tF6CHdRMlHmVhe?)Nr_aF3y@qaFT;#O_ZaFhz{P zwP%h1a@iCHB`)?Y_?@UTpX#d!by-W<(sEu(E94$-1-+Jp&KAfk&rVV5EHT4@LeUEt zNJI*Q@uw+~zDXFi*#Yu#qKHn<#cGTtsCS0gh1zTV;;o?QsW#k~@e9ncnC4KZ*xLs+ zPhn?1l44)pp(O1zOv=K`v6;=zo_+WwRiCMVacUNq#C?WSt$@h}AH(e|6o>*MVCkA)v`h&r z+a;M`4I(Es7MIJ}n$yL1Ii)8Labd#U(vW}oIU5#2(p69P_cvV^RfUYBGXeL4U%jp!h|wh>mj7OqH2w2#$=}M)zk>yyRg@?!9=vhUa1jB(6r$ zYHNQfnsmKO8zmPlOHR%z$Ve$K^N3U=&-NIG#ApyMO28`t@a=BQI~A?QH@7Spw)t$c zas{9~Re!x=q$NX-ve%~Vu%P4`NLLp7uGBR<00X#@@JjQYdJy@H9mamz#a6L8K20#D zXJwKLTCg^FWp(JGr^G@w-8U8X5GYB2dVmP^oji#DiQU7&~9=<;eBmQ`4}oIVigOjk@p7hK5540-Y%ioZkYWo$Xm+ z1u&3(&xq+B4Pd3yBH$SpFR##lX8ScuczqguWTi(6(K8o8__!V>#irLs9#R}Ec)2hZ zbiF}{)R?^)QCaA45Vc65kqCy(GBUF;bot`w(V9SmQl>kL0vR-J_NQbjd38HEgpB`0kgzIeVaQuZ|`K5eidU~rLUM4d=6bS6bJ(9V{UG4%sw%; zz&nv<9WiUdR7gV{1W>>BKt@`wDNTWB>b%j(alBI*C6Bp+KaM@hzzh5&-M>0IJb!?e zB0s$Bj=+&?DZEys*6pEogmXa4RPJKK#^5mestEBfb~-?VrYU99{FJ|x zD!B$5nPkL9nkur`NfXUwGTskJ2;|uY9o3X{8tEO;xtPR8+N>+>O7QBx_=v9CIe%*a)JTl+OFkA4!+q$i7*CLWvY~xw&Snx)6LL^J(^#UG7m~luLA?wDd}IGskM2FuQj&RUFcc0`nvGT z>Qlw3BN{>>nHcEM??|bX6;20WD_SbLu2KT$g|DbJd;ToJGqYw#g(D+E8MYuXolLmz zB2ZJ?xp;UoOPCCZDq6^^L*NnXnaIt=qck`tsbFa2e@m?{PMX+lbid)0voaS5meA(! zs^~##?m1zYLA$h?m{?!c&ezZrt$2)6p?Yg{4#AcZwG#aN;wdfd85WqU8=}j_%3s*2 zD@$#5rK4)^jPI*Lj*pEffO^A+!pp+V9L^E`h8Aa}8ZEAfMMS2rtDB{vNBdK7kM6Z7 za;hOWf5$#k0u>$gm@qx^5GffNF)g~m&xn$7MoI2>#Q_FPOCC!&rmUy*(OvHzxn39= z6G_Go#oIFC@SN_KL(_})Y)Vtp)h~!BNXKUd_sP@*=iig}@fR0YzZpfRGjhABv!kJo zKC~_FW$-HgaINTg`$F4+st;giwxk=8HGhXzEG+`W$Y(|-rd#8L&IoZZzyi&(Y{8Ck zT+9x7W*RjgtnTz3Ja163)%M9d#l&3@bI3}`JLATj&G?8%s|t3GcBlN(6|#V;rWiW` zFKJ0z)z#dMuW{b&pa5+EY1yb14Nj`Uh-F0+HB+e$FC|$V?`aGQa=J;2?b;%@!d-&D zku^sZHNNA+?PG(TjD-evp=nvDI;x3#R90){R5*hi5+4;igh+kdPA5}eI6;VhaQ2-g z3~zgz4IYL#eUN1#+s{f#ll-oQS`xbs1Qe6njC@K{vHs?2!N5RIcn{Txk!d7EyA#Pw zi^>+VO*=1#5D5vq7hcMPrWEYrprCg~;v_C%-o?mrNJFBszJJ%(MLl0F9~SStq*9C7 zL^r++|NR9{{c~^vlAtV3i+j)u$B@X^pv#g>ZE_&WHbenXr-x>Hezs+`eSW1wz zugSL0#7vgncy;a~?q+KIPx5YSVZqjEpV*7@>YlQf`GIwc|6y5v%G%dVd3dGyNj73K zTzwS>Q!n4VV>8GJFNDf;h=}u(KJRo(`|5Ld6#2IZ!FG27kUk{-57l{vUchrs5WC?i6r+KtzP=11o)H z2p1|UYM9_2{*r)FI&;|nK|80EL_|3`lQS~#NwC6^QRCxckK3 zQ2vXo`p=`XVL)%yRo9~-BQr6wTC)>GNYxG&nP0J~D=8@%8Id$ng%5=;-+5ghE3OlUt_x0?pcte+FQ-qs0Cmsc)pcw83ZioNAntF&701p8s zDJjX4Gi#7Ud7PEqb>O1w=ITAfc-vQ2cY1)Ao)%pC1t%`REZo!7It+tXS>e?-56ADS>HmMt_6Y>cjE@h}(Q(1S-6E7J`b=*L1O{~0 zzY6X~??1kOxEX~E5t6DIkwjzr`1p(tkKX$B4Bwb@V{togYG#~#SPZGcJ+kzR(^OGR zs@chpShMNPICcdYN(Ct%By0_ld^AjMOY6?hi5(}3#+Fyt2Kbc6I{c#{du3WS#YcYL z@}AwdVQVYh=TTyhkAXQ5Gj2s-Bp@btp;ts4D3kvi`}=>`MulLvz0YUyseN~7C}_j= zHF1KKDXOQC2h+_f${R(BdjpPhb;(KD$DI(8C9Oq1rI{&sdJ&E?T^9ojkE#`|A~*fzlUZ0r>Obf?=1Fucr8?+WjIw;qL%%Q zZO`WtiH?mYdZW;jj#<BGA%4S#pewq3NCD&t}PjNkV`zPpOw?-CR2 zVMeJR@44J>Zzd)t4s34DMz;Q@-aKpnmY3&zh>t;Yh3`GI6uc3EBoFOk1m4(J^mL;* zpk~ce0%9OOSbxD+GLmoh1lO!BogU%Y5iO3GEr~Utn~d%H3S<@um<=Vv%Ky;NOvOk} zm74f|EAx}@Zc>pB^Tt&)!R-43X^`A0z6%s6C08_3glWfgsRSc~Bud78aUq_qI?4I( zHw(8k?Wq1uCr?wa)~081Wjp#1UtRp?m+?u~5sVeddU+4jI2dP0LJ&9RnK0B!kKGv_ zvhPQ|j&1(Mhepq;_>5I6$*MnfRlNt9b!-a|dg%A$sMVp*!1;v;Pz(KuTW|qLJ*}dv z)?d{*eG@q!mS@Np@=3KKd6IM>I#*m)6?4JyZ873tStt7M?JSRf}fF_+usb;<3CJ`1;V?JwyL!Rj}`$#GO$5>Go)mLB!` zgvXw*D*>^TV*35(xG}#hS{RYS8<-px`Ft8zN>ZTf#LiYf z7AZ)m-TVXJyCcw}4#*@U$$60i*VUzj+Yhy6J!V0r^kaGfs{!PFcd8KUc?CvWAMYY} zy8OiNlY+7;q+rPB5>mj=x5uqXF?3Mq6Hj7JRB1SRq`5cU7aj+q^;3B(_}Mr4ixceI z6`zJ9GJz)1zEj*C>Xk=|fJUa%c4 zQUD|J*6{grhL7WCZ=L@BUVg+kG-Cd!VnOQ+pTIKf4}X9+55MbKyU2?=(PeM&`N`is z_g1s;?(6mlo37})PAyu!_hz{V`I@a^)|g@fsSE;_+fzQLa9Qcv4c+v{z~fO^QYcrp zOEe60taT-&?=%nakI22Pe{dRjOr4H{hZ~pMU&cupYXDqZ9k&jSo~2KI1L*4^!u~go zURt^`ezyg#)5SO+?GNeywsU>CIj0&Ns_E{1zI<6mpk^Zex2&z}eWxV6%U|}hrK-+H zn}1<#QTA~5u~h_}U8uU6DF){4f|r*OT-#rAUEco4pEhS4rD|oTe>r77v#SkM)4%4f zsdm6YN$hdzw}%rj^?v<__N#T>RAuWHca-%eD!5=zlCi0#s!a-k)Z6Tm3B#k)C?w=l z_D%;(a3F5@f&O5m=R4_>;{WwlrzCH6Kyso}h%z-ksW1Ddbv#MYn|A#g|2a6R@nB{3+ z)~{FLbJfTGe&G-{o{N;fz}Q${BR8YW-MztBdiaSS4#Zjg2vWK~YG9ves5zOt zX<(vr2^*(K{}cs?kpp;_e(+waWfB1M)_=kbx65pd|6J;GofOm_FyGSV_Zxj2wv_hX z89DxPp`ou8wlXX|Pf4%8vvT+F?mA2x2n?_K8FGr7!>-K@s$Tv1blW zI@Vd_dS`C7wfNW9Pj-*a?gSDd z9y9VE!%Lt5YN*W}J(TlK*nXGwv)RXEV@L$%O^kB>2L}6}1qaT{d0X zEa43{x<=P_1&yY}9gKJL{y%Mfbyyos7cUemg+eG$T#7pdic2Xj#fp0g+Tu=dcPZ}f zQrumF7YXi^-~@N)=KbF9yU+dO&OA@D*`1l4IXjcxJ?D4MPf1C8@dyMNf_p)e4~M%5 z|IQV>@}AL&eY)$JesZ!x%UV%iFSrMIjhuq6Fn7&d^n9we{%o+s{9OhbA zMO*jX-tO+vhPU0|ym?jH-Tl3AgaXk1&UU#<2N@i)h8G$yuCE#n+kJ>A8PZTwuR5mj z!$$G=>_?~#j~6UqvPGGgrmN+C)p_BMRQB?V<8dCP9D6+Vn}?hC zpQkO9x>sZsWk>RwJ9F3L=wMh3$=_Hc2SeC%CTt=rSrcb5H*>vW$u5jZF0Z-5{VunG zw)INp=wXeC#hDm@0ZK}9Shrd&=KMi2&x$FVmDKp9Y)pVXA9%QT0K3w1pLnmI++1_^ z0U5kAZXf?^iLJxp$2S#6*@DgRhLLwOndVp=oMd-ZPX-Cfa`_^+yIm&Zn}QBTH%%mX z^<*fdsNn!5=dRFzx00kn=wQ5-swD7EC#mjxi^3YQH9{{2ce5_1QG-{ORI?|?ofkV? zdLKI&m5%GfbC0MEZDZ=-QGjbPC^E&sQIhN$HgQKp#Hp@G+)yqzf`vctc<<0S$<9pR7USs9huaG_0Fe#;IquocOY#3aj+p$=V=;6zqjaZCO zNNcn;f82}^LgzLaA~d?9d+hUJ*}j=v7F`PqvF)A`u{J+F07EMwqWF3-B)Jv@{Z*{Y zM+0cLM~+^Z?-bYQbo32Jvk43A`Mg)MH03$(T^JlfEhQ~&@#z3g(8JbpWw^rwQ1MQk z>gnJ3Ve0ln1=yX3@}kvxoQ{PPXHS&ih~{G#UMhLQSNL`cnffAgbteW1+LHvG&}2Ca zuS&SPn^B7)JuIk#`IABy767}^J0RSf+ZydKSB9cIuZJb+tP{=U3~u+rn3ji~r64t`Z%Ew`f~ddF8BauyoG z_p)L}XTLMo`J^XEe_K#C4J-);$LN>^+7_2{B83KRC5;(Y+$dV6%^pzWT)WdbB5=41 z-Y^8sQ0)Ia-!GfMeUn!7isOwWi9zS{1HxHC0y^A`GHbPFXC@*lMDzDyrOj+3o4aG) zhUF=2TaG_}r#5mr`D)SM=#=&36#&~&7n@ygBU$Ha#Frw`*VSm=HKK}>DK|#c=(=7V zSjZjK*PHx#^;p9`9Lbq;JFludQH)9>A$fMrITxc5+whIH_yc^y>79s0tYKfER4{bx$|b{UEWD(jd|iww4Ch*K*AVH0tfRH6;k(7{|xMr z5L#I7ON3qYiMP-3BuLSUkjfbfc9J8;f74%HTVIXllw)8)l$$84U>Hn3qUD&xifvoY z*N^wNJAgO*bZO$ui`1wn$va zQxIyVa_s*T5_1rVvErm|V=({ZxoXbeurT)H*QCSVdA5^22exz;C?(hGLsbAbGF_Y^qq{bN_8Oh`8S3Mo$XI8x}~52#gm zTr~N43g1e%B#8QUt}SfF-u`=MWjfyi#GgzCBnb;uR@RJY@U#}c$hg>X;tAslWYXz( zUWv{}? zA(u14$Rg?Z&U}|(mmv8D7j+0v>t{;J2yrHMRL9{MwroJ#Y1h0+XDkOlE*03Xt4U zd3z63T;P8;EQ)!4TA$RLC{G}jYL7wwz0Mr=An?gjS>;CwrC(v4 znfbHYOhw;Uz?1dlUFTsU(%B$G&=+97-K8=^mbIN{o26q!@hehegwC0KwZR@0KrN3| zzg&I&-N>WKZc2OJ`7$~R1Gj@kk$Hu9>$N18%EFUnk2E0wyXIl&R^Mhw&8W-ViR~Wm zxFrAQegLb80O{8Ef&$Y;rEMVhf?5R3f%g~{y_yud4j1zwB4}S&;5zp!`P?f^V8{q# zOUl&y4N^Gq7>dgAE}l)}RXDj!@Ir?P1Vle)rFE7Yo)&EEMh<3M!=Yr0zIdE>4X;Y8 z$WTjm-l&KS$|O1X$;Z;h-bF4?|E6Ycu^r}{9}<$Cy_=dZ{b#lJY(#}zN1ENRZ;GUz zeW+yRxEPpRp1OqN%!+GEk)0Aq<)GA&8Gc5nyo!^C#OzP_7D$%eU zTG3weD}?-b@51ZJvJH#WmJ&T(-r>lJjZLR@xqqUny)xbUDC2Tt=a2{YUC39;#Azk%3xU zipr|7{dRSb`6~y6Bal+eC{QF#oIXO8E|`DdpjP)L%c=VsqO>!ppxKdsb`{tn-0V3v zG&*ro^N`=yrg5kO_Deak1y&o%zEx7-r)l8+*!bPV-%I^xn>^-D*21T$8hw(=<-mMj zHjfU^<#VrAu0 zMbosM7<^MZD3tFoSTy)cnNW97S=tHAquaHRq!PaUvMub@?C>-f5<`A>cekPpr%FEU z9weX-(R!?~!>OvMHou9UN8oTh%}p$fiD55uKknu!l^=fRhL13rFzzMDapym zj`j{E!f??ivYQ&3R8dPw*#PH+qF&EH)Xc}FGd-&exPQyS?qI5P)!9D4(E1rf5H0={GqFxu z*-M8Z9GLR58Q??CA4V&sr>xfE4paQ67%rKieC7H9k;dr~9 zxJcsTJI8yNW1nQa1rIskw$G^JZQ)5SCkZ;=rlB}o&G^A>qw{2ZVJ_b;Ao(7;B6x`Q z=Hp4LA(B^$<%V<8#!J=JIts^YWH1PHsHW}*Qr7z>SMr3OpQLNQEiV#e`p9Lx(I}OJSg1#!Pyud7c2bOQ9SVt8M-Y5mpx5Rtt=Ah25?wf* zcZ0>o898QVohHkjrY9>2_TN%QIg}#fj>o2nLtgtBviDDBze0cxrwIiR!iQx+o29Nd zp|*xe*I)l+TlxrYcdjI8E=PFw+%9MtL{8M2a;|P}Qc)WGeXq*2q?%h83>B^d$L=%Y zzN4h$-Kly~E0ai&31l*VNIAKur8H>w6j$NGd0D+^Suu)jA|^WEZ*tK7?y?KMOhA{# z;>esS_g2qu#K*>rfkaRzRX(*AVF;?-Az>Wf_QNM6#b(>exAvbqTpjba%Fdf|UG+)B z-W}0T=38kGLtC9mb?1YvXeDQC_i{RO85`*9ZE5p=o>Va1PyyMK%@a5ZD%v+ISJM-` z4b`l(** zR!hly(CE(Q4O+uN1OOI)(8`quVXzy0=b9Ado>sQ%5`%|W)1Q>BRF7MOkzYu&9l=cx zsTPs4?YpirqKA(kVMK6rOuj4M?)LWG?R_4IelmbA z{I{E%yNJg%rqS7g5NGFtQyfjQuS8x<7@b5qhsc8|*&78Y#p$ap+7wJC-5Kpb8-7gU zxz|oS*i|&zT$UQcm=r*(cr%H~7Y-%b$@X+!J2N+j~iM8meVuuv1Z`R72P6Ljw+ z!l<@-N>7Z9rx`V8*k&4WclL7dP5Hh@7cb^t!L;mycxkswmyfPfb+mcQTjF;`%DcRR`?<3pqp zN8pcrlyo95y?e>`9t3%k~Ot9Ea!_i=}f=WMdHy=J(^HU2wSzD}RS@ zR1%%^0$-Ue-qO7ChX9$?BU+qsL(e*E*xVS!)9y>nsge&qz*SA6q;zkJpIxwXwjfyu zSD4-+OD9WXE|_4z4MwIio1LXB-+6l%UY`UR_7)CrpGgJG=o_AYRUHfLA^A{m&Y00I zN=idAMB$kf9Yko3P$TczXF^D245`JJ97`ZDD1xaS%kg|n6&E6gnHCsb%hWm#P@es5 zab(a8oXITC&H0jd0TenRTw3sMI#6Z|!rw3|vEB^Hh|cbS^qv%6V7$>0^w_;bg~!tv zu1(}dKKmXq&|82{&+W}GCNy(7Js3eALIWj891VblB-lp14q^z)`!w=YKDOLs^JD}0 z{5;ytiiifxAB5hJY~QZOYqUxd+#UR}px>A0HMfdTpxrSuXBZ`yN`@Yoj&4=8opVq& z#!fr+lL`H<`#Ie@0sVQqor+V;jY%s@P&M&E>P96&_I&b|Sm%h>u;R6$ zNhzZUR(N*|!_qW#or1N3>bq#WUDV@@eTCwZhaQxvC(8c`T{O~0ZHrMVS6LZ7Q7%*G z2yS9Y{vsj*CwOh@>?98ghZyvLJUgQPjC}B>W{#{&a#VGEhjhJ|T0BSqhZkvIvq*?$ z2q3}Pc_X`)eGW`#>3e2>KZPdzsT}TPsOZbyw|ZMOR7Qe7YXl--G@vu=AP&XVQ&3mX z1J#MeBtoLQ$U^({xeI3^&5<}ti?wC1rZPm^k1d@ud>1gMP)tz-rOl}@SQT5V@2BBz z(7Gz2BUY4(>Fj_I0!5d{$S5~mgT(o!rg=@Ci)e~|Gb_rGQHFlnTh9(pXGwZX5mC|; zn~wwljC{Q-?yoxt!1`W{S~-4Je9apxR%`mjGV->QE4|I7?JWn-aH=mxdi8A)@s}G< zN`?s&21gQjbp-jLp@ z${4@*#XoKCrcM?7Qsi6ceAKiDTT3x4H;Qk#x48|`!G%9^IW;eL(ZK#w$X&R_2}sk` zYl)RYGoU8;T?YG%Kbb9qv)z`JKQHGmAR!>i*R7`Fc;=c*uwjfJ)tB%P8x81$8y*(c z;&D@1GX!UiuK4}i%gYOHVopy_Uw=o5`rznG*ip85?HrZOZjsP%DazG3GU-%_-V>uF ze*|efFBUUcu0nwxAKRFlo8#i*Zn;dZd)yogyI;P3O9F3DLgauw%@pVazTOGb4~f#Q zgCphYZ?>Q@8Pw*T$QFu}Y)a>b?YFmw>yz@7JJamLhg?^~-J>U^6>!%u+@+r`o{lt4 zwmUPny+s8|^Palv%w}`JheJUa*W7OcZIQwFjDGT;`PaC$`8R4HBfZ4)6tw6O zi=V~xRfiusiY4unDN-hpIaVet|KniDK|uuYNRu_SDx&H zQq;n4xySU)ieupp>gc(-BOmH~B_Ps%9nbwFb06}%ghm5TM>c}I&rnohc7y?gTjPJ9 z)7I1*Ku71i(ST_I?}g?$T7!&VIUtiWxb7sM^Pzk~iTku)iJKP3CEWlW{J2Z*%Jx$S zx*YB@JDArs?MH|*e`1kUhcT9oqmhjQ#yk?%%^OL9KUhB_Q!2{HG&^jM9Iv*)eFf|e zW*Ff}01pojiD3&-5`?pLNHxtHfq<7C$BlfP4J3wL-vNIfPp^mC)cVpE-0xklLLnH8 zWMpK8g@r!%`}B;AjFOU);^N}AwkH)874UU0SyWuF-PcV=PjNC7wcg}l9cr-_mX|Wv z=JG`NElyEJ;(CAm&_Vmm*HFA?G`f>*@VPMz^s}7SJGfqp zIc=2m_PQY0qJP-D)1XNS8O&gBps9YnK%3v&n+LERjItC-eGAqb$XQB7k{VYDlDt#A z*ZiFNH8o|AdG&UdK#3~OLnbo$0gb6B+FOtwa*6f zR3=;fW^kQemwf8dX?IU@Lc`%}Cb96;ZX9o&QX*f{^;jpFepNwU9a6(D{K`w%uwWN& z+jL)Fr5<}cL%>9V;cw3VUfq-`mi4+V5kN)j+Y)nH94P0LOIN*>-Zvc`hu%a>Ij;i# zdtvikKr+4C(Pwu79uE8?T{lr>kZqUmAcwNxZ(}lLWv#!~KboQQ1z)QV@uMk}XL{!L zP1}y^wyO|^q_@G5hTA z9%-+k+rEv_t?$}ds05;W`k^M7&WR1y$U?pS`Bx!9sPS~>r9IX?Rab``gzGq|bmDpC zV31)kjj@!Ju#bLmRQ;|V_8Vd!6z5dtcf2$CSJdYv=RCM5qa-wq#~vsSQhcXVo!62* zXk@Z$@>NlOcp@gcyD32z!qPJU{qq`{bIaIXTqx9$<0&t|w+wn7KyaCmRFLSRnRSU_pMzH7^!bd>jS($B z(s4d+H{cPf`C&7Y;?5=QgufBf@!0i-As>V@jmlS@BL3L8++Yw#5o)a;%6Cz#XvRomj1%DK+vP9xL(vVt%D<5C^T9cBEKvh$qH5@#AT z@VD`Jqk!_W8x+;WyjZMk0(r^NFN3mgJ;M#>X~so0fN3V~R%e@UTG%?vWhm(0>?jf;a~sHuZ0uapHczHh&k{aNk!Pg=za&()D;#^8(w-5XCV+?%3#&`cGdE1IN5q%0n zCjPc^5gaT286b_Rqi9!tt9z=QJ|ZCCKkeQxm$b%SQCQN$4?w5*{+|Qsi1uon#WhhV_fbrh zKtur2|7z&IvUlOo{WdkbI=wjiHm!Il;fw6F^YuqV6tEgG+0sE&pbqALyEO^dHP6k> zVN>Y%@07OQ2j3x_A%tOCUrA8`(Ec}`CvMSy9lILA3o}T^S=@k#r!w_BjJC9^KbrFL0UCcVW*&wD&t7p81m zy`7qt-m_-2x39m;_tnyEOCBFPy+-)&CA$=PWpC$1711Y)qCMNh5XY zh$w9(FTX~f#;G&TZL&#SZgIJckBIktK^65JEbDarC2KX6>2gpX6^S`kL8{|{wh*t8br9pD zxw5dTrKhhu7nzAZkOO~%FsUhkO0{!F3`b%(fi((_xEKUXS(2KO|2Od-Fu*oSVvGK< zd2aKIhAsC&IaR0+#2uLwaMn!Q1eN(!h%yuO`$bujx13Ty%`@vu$yP?eN6*;66*{2q zu$O8k5e`)F21(n~0O$sIFT}$`lv9^=-@4lQBu6u?zy9kjAcH8J|WJFQ_ip9A-LjS)z;PKm)AX9@4}_Mau}>qli<_RLW)U z3kLhTIay(%u*ceiRsxk>tyzEHi?};_7oC}89-d2)N0@LC0E(06E*9`Y_Cs>azc2BK zdL18HSY0Ma(TmiAPMd~44EQzkO#57GYGAQ-AYszgEUKA!eOk*9{kn;{9ZcBje*3!F zDdCAqdu3)S*Yy`G>3f;+{%X5=w!URi?EiaN(#5T8=B08}T47N|6MLtBdjg0=tz34| z1D-j>BGW4yJSd{3^)fyZNn#amidtDMO?;Q90vEm|OUQD60%4cMYq={ZNrO65vAkcm zCMv9A0$~|A(8(DfdB}ko)mkVV2%JSOKy&2#7gNWFI{ef8ZXwCDKI&|$mYOSIaSLmD zp930_q#^R*E~7_r_>p8aUQY6hmQx3e5yEj>opETj0`qa?CFSL0n`CW)+Yt-LI%5tWH@Y~nV-)IhbVKFh%YQr z&3S_n*FAV(R)6bYOIb*=XPhy7Y}X7KZBNODV1RDb+1B{62mCjwGRs?AJt|+ACu982TINTY-SfNHPV5({y02P-LV4B5 z3Z{%VlKc><9qegGjE5zdkoacvr8jA)c>X58e=K}_xivqmVK25P$2w`@n+VYXRk^$~ z&b%GI?T2~ts|nVrI68@ zOa)jBOSo~@=D!#;CqM_;aBGt0A|e(kLp5~q9C#}Y*tXx;yQ$RGz1Z+%vx_hfIXmmc zyfk9lK{&8ov|G`bSN~;x%JvO2KzT9DgqX7 z=$)|#8V8yrymd4R@L+jYmQY=vp@6-+H2hQue`QcP&}9DELI8jf5bR36c$T%^r*I4q i8b@*@@~W$=uOo!ieO6GUtX)KaCs|2FiAu5W{{IJ)MMXCN literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-vpn-edpmodeid.png b/windows/keep-secure/images/intune-vpn-edpmodeid.png new file mode 100644 index 0000000000000000000000000000000000000000..80852af30d509225ba4c4281c45ae86c2d442676 GIT binary patch literal 25315 zcmZ5`WmsHGmoDz^65N9aYdpBSyIZiv-Q6Kr2n_^x5AIHIcWc}sxN|w@o4GUh{^)1F z{q9;;Rcn=WM=2{xp&}6>K|nyD%1Dc=LO?))ARr)_5#TE-tR{$%Fh3Yg=26s#kcn&doFPs<2QFM43OaY#a$m za{>h+vj1`Eio19&-wgW)ja(W>tG73bPGx_||h{%ZEj&4XF7A1^p}yi;Ig^U+S)peyRQ&N^bi&!|mDTJGnwG$JNyp z8yA<^TRYYm^}39G>Mz^e*!+C84j_y6Vc#bq@8Ic~8B3#+nL=dF$Zn+itHb}%fjQyW z_$X_UoGR|-<~C?HgR|e4;i79XGG`Op+4;*5kj|p_XHD*pF&c@`#KY@7`A*Y2hRflw zlcc(#1bpg$MsBYXZ=$mEc4i5)pdoW6^+@%Q{Ea^fMJR@sL$G$|p!~L4Ba&vR%Y{nF zunV=fPRh~sy&CpY*g>q$l8ex3CE@i*8K0f*S=7AVi!#e&<{RlhgM~Yxm8|MW5BjOA zJN8L6r^R&dSTlnsfWpk$yq^Jyu_$zry7oMuTkFLpZv(1v1w%Zh(?bNL?eT zUN)MC6!u-S#%6YC^ZvYSXLB7A)#=`p$EiSy`ds7tCyRUVo>1L17e0aO!2T=#a*o_L z(r(+x*jkGF`qfCp2iIAT$aX#H_e(W;oRL)=@af8Y;_}}qac%GCaU zA8-y3+1-Dk{;sGnzH!8yuqyTXV}CyZDjS7mUZK=(7KIs?cT??cu%j%%{wgW*ur4nQIy z#DT!}(`aVB3c4j`1x=QgRrTS%L$l3MpeM1pNs7}NSWABtDo5AQ*`;P;m)#{9ciV!6 zL?Nizg^A8ShTGHCMewg;R58Xc(`)w6*;(Jqbo&Pe!QYgjMvh4-Sb5OFV3TG%qIpkK zDkyzz<-i|5v|(Vw$f*V3WEgl$5_yw^Y4gZ?&sJp+P!p&R&_t}onZ9!%tLR)e3w=q> z0QF|u&eowXb+T?gaXfF7i?9z@m)Htqd?#wW`Ry8-)Cg;cEMaa(`30GgPXSQ=dEmh_ z9)2~x13x+QzPK3%5wXeXRq`SEO?+Kk))JHYOI~hWXnonfBlTLVM0{L?^nN;`v)?r` z2C)aSc{$U}5V0K@$JHo#nmUClA1%9w%6uB*+`w@AizPK8IIli1> z#>d3gB4=Qa(obfasRs5_)9(0tRoa26lXedewP7Mc^J^;5Qd8%pJAKe8a>1vyNloW@ zzr<%wk%u_IzX=7=={gP2Bxsm@-6$jV?}wN-CNuFA!&^0#J_*;{hcUR>5UZ-G4hs?u z#M_X!9PC^ah^aqr!5XoUQSdV&V`5?=pmYW$4(pl6iWj8p4fN_TluF7ve<4gpXzapt zk{M80Pgv;g+lQ9d=ZBx-w#V;A|l+q9*ZbYlnZty}!VtjYd0LaP7 zZt;#}d^(BN(}>$-EoB<2U0-E4|0+yyc=9#qCgChU8$wO%A@3JCyqN*huL83;wp=@k z7mH^k-~-g@lVGs4E@3-eOVYC}wp>$=KWy(K0RtlYkDa}E(sh&`i|QyWm_f@Q`>%+N z71`_hfQw`aHME6Yp{d?U{JvWMJ-elwQ#4YoC_&BDU&Mp**>Sc}yyC|{k&C}4!`ICu zUslDjSA3S4YrRnK8Bi`CJMpxjX86Hh;RYfHM+>yoP_#@h>0Iuu8wA+liPnqO% zd(~)j3K10i#G2!>gGZ-Jcjd$n5Q|e1jqbnyG-o-5R|>8vh*yOBw@enz@tf%t+!f3X zK{@dHdMxI_V^ilFQ1yDo6!g&$sp(2J75Hgnlgay>onu7RzGAk?FgO#AyNR zXJ#o)MT$E|-LbpZ@_dtF>i5Yp2Fb^ItD!|raOU1@w;H&|;)MxDidN)DMjUoqlciLNqbIS@H3e$RhIH zJm|k;h5wQBRr&k9SI6KPqWI1(_-it{1~%g<;DulHi!;U8NDu5g)sL=ypU6LHvYVA4 zSc?{xhp~(3*iIQXzd%0kTjHoy!hys@>y>ynWMgZ)kerDj_f}xEIL!~Cl`z~L6GJ&C z=Ff6AiOMaGkX8*{bh4Hg#n;CMZ6aR5&n2?#v}Ggk%q{e)kB?1 z`Q&R~{d&x!kn+HZ>3?t<*QZaeiy#Y7N?C67Beo1GHbZ((gu#(~p;QA5Q2!L1^ur*A zbl`2b_2-~xxSi}p(TK(@C80la z`tmOkJnA^<)Vu==Xoi(3hcz3CMzvUQs*jjwdnPeEJ7}kkr&l{4*>0^pQAKmTw3k5! zIifL~NWL-)BVALT4*H*st{N4{dsijpgxmLzZ`aO{=HvG0cx*Onh~ zHqztx`SjbrQNYy8fo>c<6rutFeGXXm0ZY67T?tB-aVZNXJNc8tlR0UD1#7L4{MS`e zY;1ikHNR)|W-#U7P z6rfcM%A>$xBMQ`IR#F(qb4-1B>)irxc3Zn{#hb~^esrkwI; zHNc6qUQ8|U%DCjx4fxNT(4q2KSlz{roQge__0~)ZwJS?0PV~y}|Vl-&nvRZFP z;lNU9aw80BTQ=u`r;MNr(1&M{LPKuKPHm~Fq-G^l98?HZO9^x0mYh0w2pMI!8IPBX zPYA8#U6z|QfkP?*{&Oh9owzHSE1XnIcW~0;E)rv#3Cd%{tQpe2q>H z0l+!ezsc`hgxF_dr<>cT8Z^92E8ca>lUFjkw@pS9TPLgwrg?4rrOUIXC&C?X_4ugI zi{F9!$&IL9#qcsNZIrc9r$T1ao_ZyEsFJFZDyyMtowf2uNGR+MgIM~_ig?$N#8Mtj zOr%IO8VV1j@AU)o*RU#(TZy%#;1-yc!iF;(MZ}_(%ju2_WoiUH+jpu@Z!7R4pO3Yh zo)^7MMwMEkI@8v3tvHD8#nJhhK=4)O-@gY1)21Z0Zqet$(3WoH9XD31 z27Cs6{`M1qPt$fv#d{7{G1e+--~l*~vOq3Ymk&`ohe#g{X`AFunG+z1xZywC915O` zT%n+RmeC1h0;5pf#tB%kELS@dUiCA-#LuUhwU!g1c=M49u*VD=k}Rn_Y$7Z>_Z99zaxRv&yb};p?kNNQ6w3dF+T+Yst&#h8 z!^*5zX8c@?rTP?2?5C-8@!SUt0;2r%ROU~gHbpi!Gz-vFK7)K#s6k%KI=~aN8SgV& zC9QsB`K#+-B(map0q@F<#u}tNnrgKymRvYUdKGs@hfLJOf6pkKRFBL&87(`i;rp$ zn?&L!*Fp$q%TYHa--j{H%Zym8UQ!1JTf?~2NvOKYQnWe0M8EqZa6VkVoOWNg>J#=7 z`X0l(pVUleZ~oeaebpDxBnc+-%3Lc#*ha%`UWW zzkh#A2^X(eDJa1$ubigD5thCCuKZb3naZ*>dW!lEAvh6%LPR_fLx-njS&R~N|L&u- z?Mzb&^GfX3m3?q4Jt24y@1nGJ{~ABpM5DMV{ThG@GUz0X(6gvOeE%JEt$L}#`PPlW zwRsUgJl2H>>P_B2&Q*IP(PmzcPnnaKCoo3p2tRY;=Ii(rRFBkp(8*etqy%-O_j9Kyi%z z>wGP~oPL!;rh9ZrvQeUo+*t0BrftYN=K))$MGmAL7|N~Iad|0LMFyz|_<+x&;U?x4 z^Z%wHaHVzGN$L`c;VODFWA;)0W}9;k`e9(8-P5fTm~@7!od1RoAW`W&h62Mcir!Ze z{do2v-`>HV>Tnahd7D1VSU{?l-jYWZ4*jf~I-O@GEIwG2x^gS*D7*P(2&h?Uh^+TY zCEIb4-`3wxPr~dg1WbFCRWt2H5ZgC{T<9ulLxsXr8WKE|KUwdC8!OT@P87S{WjXcMx4{ z?P!uUrlJA2iTl~8)O*K`2#x2P}dex3DVv3ceMe?}%m)W`Y=hvM^v@pBd7 zT^c{lAtdPN=l}^8<^1Ck;1yX_BxM@>f;@igvu9)gvyCZq9X11RuLKM6GL*1sLbh=U z-=()=`Sut`a5egh&&DOZGQPVJs(s(tOKbSn5L;t<5LNuMuoIjvGv!^5};0GT*rb(!ps`F2u85C1Ak|GT57{xjmB1yJM zlBMvKL{x61BOF}E-%8DF$W1bq9iemX{eVatL`kOGQN zKeYZRK^SXzgRImI_&li^AOM7WVv=I6?Ko*#pq$&M*dO82mt#Z{!dE(zD2HpE^0~kU zu&!4aLJKLBhQ6PZ5OD1KFkRohOFj+kTN8bdj$#`1F_CZ?$ z%!@vg`vc_s4Ux$&FMQ6EDKaewn?`G^7`8^oXGv|v#=)Mc%*hV40~z63-#m9*c7_3* zQU6WG;5r1!md9q`6MZ;3x778%!lfml8$hG-os8QqUdLr&D_mPg8h1aBs(0)1S{w7+ zHuqYZc)A1h-rvpOagoCttt3=ICCl6qb+@U#Z5h3PR+uiKI-j~8LVI!Y%OS)PXjmsx zfusI=JAsk`EjtD@{qVX{!a67nCn*2|x}4|&y#1GzV;BA4L+JRyGpJ#{s6$avPUmQ| zmq!OhCHI@(Es`iFNe8XS2qJ&}ums-UNXm;&f0MN-Jz8or<9NDf>q}F!Q6d3oaA{HX zPWG+OLt5JZ6xp1@xRc|is+}uCO8J;Tf4Ui>)8xtpd89j@f6CdfW=Id(ucnS}_&v!g zvQ*7PsrAgrGZG)Idu;l#*p}kEi4FDIj5IkTE6jhJ&n8T=X>Sml*`c!Do0jd2{JO$DsF&J* z%-;HRwR3!OwEb$Cb@^;Wd}+uK#Bn#M!LC`~X}w-X`Rxahh*1-&FY6HABIDRlh9B|t zk~F@??xLCYi!O?Cxh1Og3C}=I#KfyuklMUPS>WjJB-6-Hyt2i)@E~x=VpWK&90^5l#K&n4UL6?6cR@pa+&|0=^YYaT2kuTwkE&KGEiR&ySR7 zb`(8<4v&uW(g$#wUj>Rzb&gHnk2KLdyW)d9t5NrMZrt4Z8#E9V_->`7L-#9=yO2RT zI;B7OYEXao$GT}v3epU+q~iiK7Uw$8Z2uZT+gnE+JZ}B`!ZwxO^>xm6neZ*Qmgqh` zODk|IL~pvn0oN((n}}BR;l;>TBXl=m?!jsZ{F8o*K z1)TM>+n+zT4!JPfQ=c>emTlc_;S{Gu^<6t-Hi_pqe**%_ zOwcYCY=dxD6TW5))W|RtR%>jzW(Z0>S#FWbFe&KdYJ}_lwr0Th%i$fB{5DfiN*ygP zoQ^jkH8gF2h#c0I$qaXM8q_#w|F^KlcCwS;_SG6NZWJFg5Vnkqi1An%QK z*OERN+~7dS6poT|aWZ=D$LCwGMM$(?qDPt)SU=0GZX3wruT}@!E#~VJFZwk_&4UL&B?xaDolLrv8Nuy z)EBvX8>!M|3HK9`tGUkEE_kr`q4TpJp49uWKvpl>H=SuFO@`c&^M~FOLGLWAFMt`* z&JM@-o(H#i?lsMQvnKil$C+FXeI7D;vl(S3QK&n!ktLI3GlMjTUImFiT*IlR9e01l z23#K8X;U(276HNxgMRL3+%Q&VvZUqBKq-_MOAqH$w=s`8(F4US@=o(!=RrI6HA=$@kDQP{eXFMZzj>9@v|~Cjl5&ep zcwCUYJuW^AFYt&-nY>*wM=E|MMWft!FWu={1RQ)+j^3R~s(}N3Bc=}BD?j#gllUk# z`z;r?L-4WwKb5Asds!bwYI;N&OvBvfc0zHs>>>Sy-M*S#&%l*OR#+kHZmu%(W)s|E z=5MVo1)t;3MO0f_Ej>&>#N;N+P?!=_kE7=|t&0V_!T1T#b-ZG*(s3VXzL1+=psV*J zQtL@VLh@&$M`k-yYP2FUF*yde5nK6ooX5ESc&hw*jS%pm;tNnHYoYOOMv9C}xj|Kv z-nH@Dysqx{-%L)o6_iqwKFRMt3R&i>DyeP{m*rMk?T0wri)RA9S#a{!lvSO*TQmyHzh-2I$g>X{-8z1M5Y(wi`=0Fv|EWtxP97v9(-XN- zrn9?Zz1|>vmlK~NN7tcR9rCX#Xu86W0bnRZ0sZ?(`Ir2sH~t}0R7bi$vijrAzg_e} zLDT)0fW=n9|0DO`0&t4|kDSc_RI$@)V`N9x*MIdKxoBx=;lH!9vrEW+gDYfRYkm;d zM?e;{wl1-gl|`zntE2xg_k>hlTs*|$_H^|l1r+{k%NQi!rOHi52Oo+dis02Sy?8*N z_~97>MJNW`|9}rC5kHvTZkhiD{sTX}`d{3CwfYF=Kh6IGLRztRWz8jvHD7p#D{PCj%lkZXZ zZ6EF~ZT5va-*~gwAayksEPCU_#HJIv`FXX+i>U&?@JnP?Gg4+p;^R=_biUaZvSkLp z)#6MDA~`d$u%NNEwTj?H#-n26+)hOU#psg|{L{(p58Yn(S1dmi^|X)eyLjWJx-R^C zC8mQ3u(7F5xNFhd71u4dsH=UqQjqGv^=>4ePS0u%o7@n(oJmScOO=bLsrHX)9?ma& zdjiSf6hC?q1*8Mz(ARD8SSOw7y{_;$h-8>G(GJa_O0L6dx|d8-ELl!E+9J4?YSpd#u^%(OgXupW(4OxWn(RSoc}CmbDVjX)EOqefAn>}O zw7vL(51Nqag2j?N?!oCb6?4>|HoEZf%~GV*)&{}Q&s!%a$nQJFNf|x|f0ts^YZKmk zUay3F?nwG?o6X}cTp4(JYc}5jGaNHcce|JmkLM!tvOfW;qPotX;>mcK8XtQXC($8; ztdb0rhyO`~-902w01HtB?lV=A=PRW?ezkh5)z^{f{L^POi z3O+ufS8txdcct&PR?`!izEI(%OEU~k8cV2iVM6TV9 zz~A(Xd^7u&&JTI+tU%~pvCW<|SOWmH^2hQ$zx@1=OSji2p!OsFM|C(*OC}*f;V{RG}=06q3=A;1@-;xIQ9!}V(n*>!#6)z#|?5J>db7w;C+;+<$Ad!o0{boGZzBx zq@W-3SVtzVes3+b8f<>kKJtJnV^)iB9|EDmb3#=g9}NtMgI^x6wM~T4Dm!!Hd{96i z^IFEd8x1gd|5envb?^=pt4>W#U7|6r-o;uac(h>vbGia0WyN!fhJYJXt^E6Yky+QG zH=t!AU5}Ow71TB65iyzjb$4%5!oia0P5%Ir*j7qkd3WS_&uS=&?JyEnP7D0a4(oig zD?jRg&3kRFnGP+(TLh zKFZl9X3#9D!wFgV;KS6b>ANmMBwV|eywpzG;PH<7Pu~qJmh9*LLzV7tz5#Z^-ioh3 znyN#)j}MN12>8(o2nZP4OhYSl)rb@QGhaAh6t(VgrByAz*$H>fs;!%rIL}*>neU0A zrOO?(cC%gvf4U_7h2&jU<+YidzI%oab#SH7rgAC0_%J@K+|0XdV%3fNc%K-uK`G6* zW0$f$U9Ev2+$m@0Av&xP#s^#hv~K&(*$W7H>$Vz2zMEah=jSyy3ci8;Jx@AVS@(aI z@Oaobn97^xEwZ<0VdqQ6)dTY2Fm@2ooMItiQ>HClxd$oGoO%hQF!BeJWJHv8i;CKg z2(1qt!bxo&x@I*L#Hhqwt~K*4-xpVG-4=lprF_N5FW)X)$~a|tozE?{pBfketpWJg z&TwGww8+3@ampm=Ng<#vwG9dy|IV0!L|eBGYg-IUwQF}&rfKBBco9pr`Nq#dBbbTZ zkR$?d{h+;Ytu~ThT-1qrNV>e3^Rbw}lna;UWL7XMtW@s&qH_#OKpW%*HV_N=23K0o zY9^-5ghN!h>dfIoR%}+(+7};yeFmjymW5yf35gIBDemg}dlUu=GMEQuTUwR&6m`7Y zi>0BTdA(>ag4NRbJz2>&<}02WZg%~+Y1d3i^i-tsVBPP8}{0Qog8GUQoJuu zogsmtJ8Y{D>1KMBngnsa!NJX^mBYUW%xHSKwa zUb*HE!NOp!eeez47WLLkf(2(JCN55F$|)s_`9_-m8vY^@0J@f!7EiCq!EcOZ!}|~p zgwIis0BuDLJ%RjUoA#XmScR^iuoOBpyV7Y!SBJFAvK1S-irBEQj_q@OV~Dqb-j|zv zkmx6jj>{*w+rra)$qz~Q5ld1w@s{i1X%L&|<53fAH zN1)P&H4lm=|Gky3yExK02p|;JBxhqXNu^Jx@*aem$c?!()AdboifN(~2|m-$Atr0? zBE)^*p+Qeo>8!x(reTNrt?j>#wG5w0J;Ja!g&+argP-k8$TL8+uE?cL3$svGPld@S zXktlJRSyHsji?~5C0xQ_N1f%^Ds&1i%9G;+I}|In|8kdgYj-fRH03abiH+~Ze7w*;l`Re=3ss0(rz(BZ{8g2v&Dys7hjj%IL4!X-v98d9(hjW&P z`8+b-4OYX?h5)&Lid>B>dB{qvIr){O0QhXWw@ykn9=3xBkfFwky3zlL?q(Z`jx`Q| z@6$+EGpQR6H2Vy_1Q>_7`u(5Lb*Fea#j1?Qz4Atvzq{|`T2|2OOHA6ReH<*!etBzY&L$Cr6I1Ct2@`bU(q<7+ps^`%sa zakUu*)pNcAtrmqKRmgt|Q~^FJK$!Fj@p#PrOP%oA$YdQ-K?|w6&pIxuZ8?m=jFv0uTvAs0Y^}$p%pkm#tr{ybBf|lXHeY(q=diT-a zjjwPZA~=2SvFqFJ$D4>r-xeh@yc)+D;_UX^FUVQ^ouSxG1xgM!pV`CFenb%^e~`i%@K)1jdy7yn*%j4~yhxsMIi-_d{ncNMH;j@X^H);X95Ttl5TbqS7hWIF z(qPfSri@-nOnJOaY(QmV+VEo{U%7B$?7WeI;GA6o@$Y@$4+^KFN(D`ZiBe)PwBL1nm%;`Q|GgYK?x)l|1 zN{gPtd7()RN#@#1E$u{qw6Z~iUZcdot9I>|>7w~8`w64Ea*9o^W=fskK+SKNy^2b~ zZ?atj+zWhFinrd-w!-nY2blbmFJg`zm1syquXzI@G9=LNd6ckBD0AWi;}mX{tuREI z#j;X9*rQqZwC;}dm@V-#Ri$?R##>j+!5hls6T~^ys%m?!+{fClrK1gNHQ_~HGM76l z>f{Gr15%6vkNI3iHAhJEZRjzh;a>Whab~A5Zz%7q9P;ogBDd1UoR@ z9#BG=#&ul;RY*SS!!j}w2=x}w$qX^tdw-dw%fDJ+$Or4VNf;R)FKK5-P?Yc~;n%B` zK_(N)J64f5tE9Xg6O2mI4{j%>i4BI}`ELVZA%8u0F0$DEc;Loo^Cjpe4>K3AjCKaY zb_yXN#RUfz3a{Go@pW?I+!H1qTZsBjmGdiZI-XCVdMKH8Pemo#o*0*L7;o%mFJTOh z;N}Dt$Wyq^z-u>6VP9*()Yc7}K7{r>ydAF(CB(RG-B)EvSZf2C)@9!ZeqdrCCO4oK zBp2rHjIvTl*AP1~<@~UQw3L5A@lo2`4gaKF*07XO1G%Brxiu5LUi0allna&NsCOu^ z-c8zoYII0Hp;Q}}aNvx8+>yDAn)kuZ(`Ywxt_tmW3oZa9=Qreh0Y8OYttuWK2Ag zKKnM~1@V4Tz!2nbJ?V9I*qo@o%jH;!$kn>I)w|hFK}`3eiJS2DBk`@yF;Onsqpd>^y^ zf=P-QK5#KT_UOL1sfICq(}qxSnURY6J#@6sBhc0>!~gPXq)BT!CfKi;xP7sOkO z4bAUv?AD4fG+EF+Z2UUW0)6>6E1^ajl3Oa&wCF(oRM;gZq~r@&q5bVAe4e|cDYD$X zX8aQKmn1(gbfJ6QpfVylg!#0dh_KVw#;hHGWJ)pigP4qoJM2KjJ^|pKKg9*4;zrzb zeR^)4jgh)>kIy=09Z%S^2fZ&O?c;+O2KLaMV0hUAw86;;W}6r4zBkMEOb(Yjl4f`S z`gt_od+fX4kpis3{SJ{NQ@ zcagO(yJ2Ie2QKB~Hy@5Y?(nl&J?Z!N*KiXM1u6|G4&)+xJcLs7Xm^s-?3OFDY+g<& z5b%t`o6=doznDP@k#fUinrVC2=023z3fo0*Mst;mVGP8BM|nxLN$bMyqwAk{vUaI{ zaD?m)tUP~y-@DW$KujHnOyKk7En$^Z$QVtJJ3C>o5Z*>xH*MC5>u)BACE|psPp{}n zJL6Z@6-k!=cZpKpGS8i|4??cd2Ue`t{w&gkUSP?Iu+8vdnG}(DvT0wbgjYrOME|qx zM6%UjgI{q@dQL!(F2q2Z< zi)`hv?%}0>AEDTD=oK`!+UJ8zEqvA=kuR8A_N9?lu`vMkI_)x0hrurr9p00&X=RBP z_;$O8w&eaobfDvQbEUI5nO}WiO7Nq2N5v9rpVbI5WAKQujEBlg2_szL29D9Pt$Vp! zz&BV!ZdrS|zQhHptH(Gn%d4fa;#%~f(;N_vN5r^CAl!_8XOJqa`P-Hbd&;JnCq?n1 z3R>~@N!Oaxuur%(_G_!?$<>;8`aYi^oH%o$ft82G_%DE2mXQ$ zYbo4oaW2lwQrt~}_;h}y;5w46Q(hpcx+3d&{uqw@brv!Sf0I4rK}w-Y74W5_U;5@{ zQM!agk?+X1m<=*ul)YFA|5VOv_e%EUoBZ0oNQY_K?z&c5f#)SL>PG^;2&E&K;JXx5FjRM%6Bj9{s*E$4geYBB448I zi4VO&ItXbMrx_;Wa|7L?^)5M4AMkt%>3Sgqt*S{T z0CXRSC*zpX{1zUqD*xe z{^j^U1Y7-ceAl9ra!U+KBC-buf3)x8X^t_F6W4=;YJ7w$yoTZrte+jqU*@vdI`@#_519(f z+N^Jq(D%k=%HuFwVZ#|2(Iz?m+fq&UedfVgSN`)D@e&z0qN+L2~uh+z=&$jpU+>_it&C%fwC4Ftg@mM1Hc#LqrEg zz?WHE+0haC{-sVaWo6yzXdYsnNcpIIADF|VmSU_xh@cDCw##zUZk%Q`f=UWp1<>X zlGA_U4U%_Rp$-`l1Bwp0%?ew#+b$Lw(vF;o#=X1QI2L!cCY+jOiG9g<$3bqPB=)JK zNrmgXWQR`2>P(4;*PKsvng!v>^8E(kdPb6DngYtw=ria#dne-}&9O?#!~foXGd#}m zS6J`VA~Z_!E>^JPcGkV|6%B=)5Vf1n(tTJ1!WWd|tgDq4W zgVDpsEFZ76xh_#ktfibp8noHoCgmH+1q;$k@RBW_r}o)8yB8j)F$o`&r`l*gI8e6G zi0bxwhklPAagaujyqXm1COuKc{0h6Z=D#G{O2=&h3+{X-6AyEEp6+q5(|vD0q#?6Y z7+Tq5OiHRw6WSE2r}4Dv%7+0>s8~FCiaU}n2tM->@xv1W2m#AWol3kQtt3K8r8Uc( z?^1)VZ&P0l1U9naLES8n05MhSEfg7sOlS~49_++Eh~r^d@IJQy+a>Ut852#URE87;^D?RAm&omOXVrz!0p@CxJ0j zdPTB|mc)aZ=yiwQYX92(7{P4)i7;el+YD;LlWGf;{ds6L2I3&~h}6!@g5fjg`gMnD z7Jkik98aQ_a4bEKoHo6Bv%n&FLH z$75x-=E8qGgO94Z!O%How?CT_^>}LNfq3PohyYVYy4c5r7VY`wiXDXEXrJsm`YbO>IJb zAATvTk%m)@pz9#sZkx_kd8mn8Wn97wi7l8Tk8n!{ptd!oK$moko}2u z@F&ep{&e1J!)(gI_H@L#4hA5=d(l9d_C$|R1Fzq7J`J7S-w8{{Xr$J@m=|~OFt>wy z0J@8AQtIGR3)u(2;Q9tm(~t%j*>CG?F%I8X_tM>&EVb=<;ixzL^fgxgq#f7bV}B60 zE7iK)X;cwp64z2hN$lvrCdS%x9|vV6(TJ5fE|er1QYzB;@K<>A@q^PTAR+bI$8{Z7 zJj8kp=(^|AY!5I`l23}cY+8!KzZ-TcREUGW@WB8dtjat1a0FeCs534kEvi%@SI3~! zj;B7H^(h?&xwyyAngL$B9D8~h$Hi~k*nx_R)Z0N3+2T4UHU1m0PB2XYUmqXl+#nCM z(pPK$c990f<*>eqw&ZtECFju@>@||vG9=uWiJTYGj*~I+yrTO3R*({d;;ww*XoYXs zOzs&J6%hI5v+Et098Y%Q0(0X2spz6Ls)ZQ}#AyQ{U5br+wyV8%43J1YC;d$TyyK?b z$$IyKKl6LCmUwskz(mDo1uOOs>L2Ir)FSQb$jUgmqHx0m)33usDfwq_J^l$ z1qY=nDw@$97hQ2=Yq`*h-)FvIleRzOnj>6~6t@47dNcd@H8_ub>x}5-$xu2uXM_B~nSP12HJn8Tg{SZ1XAq-m%<~E##*+SA zue_Ho`FVg1Y@;&djOZ;4hryob`Eqg139^qtp^t#R;EqH>>iGG=-$#<#1Hriyd(Quvn{aci2mg zdr{6m12koEvi(js@gOExd>c=iZ(i4J?_d?HH=t{v7yxbONg=;$@=f>HJ46QhH+XEr9d^LHG%rObLuv zMJqP?N-1wTi_!_j~qT7fJ0Cndw)jfp~Qq&!GeO- z?*fXuuJ-`s=;?frV<^^_#fyf4%T;Qvw&|f<3Ct39?ipxR-ZkL)Vqia4c&oH}_t_!o z%gY3R6*hnZulqI0*{~_+GV#q(pQ)ns`oayO80g4H7N4``M7Qz$0Ara|5d&GQ46ZZ+F7H+z0>o0+m`m5K1wi%LDzbrC}q3A$?xK(rBg zQx7X8iIEkw+QpPfaHc>n5kjxeul-ckk5j3&GeaMoD)hT|>huADGAj$w^mjEZgj^gi z6{(hkRYL!gwLqsS$4bEhWj;bv)9gglN7=oLFCP_vTJ&MLsZ`U_W{c;W5z|J3r;VNrEo zqlln{bSNpMG`#eXDk&gC3k)S7AU!ZN3|&fzl)wOzLx;o&5()y+!q7-}OE=sD>U+QY zeb2qWzwSTG!`|zx+N<_CdoLbZf~Sp(mlIuG80S!{!@Er$`*fbYJ)=)^1d%_URZTW4 z7e@!oYUW`=F4>cnDn8t4|FTZ;3b}X7aq6wC|1C9Q8bW=~jXVZ-wk(^aSE`JVu=pMx za8#b%Fs8nq>z)2^>zp|}I9I&-_MQm;1IoZ4j;tRKD?eo3KXKP);~2j)hDRXOJkd#X zo;9WyamV?qenx6zq5}r`;#TvzfH;|s32k`^ProGr_`47__p|7PRtb3AfVJ`#K_o6d z`IKtXz95=5XzkSk9TR2n;9c`+TX4Rvv!L+L@VLsC`Q7OCn?s{8?S2~<`6B0%`3Uc# zOb&CQVoE_die+hvvvpmKgfTV(nNnO9_gZxmjd1@^CsN!P#{LFes^I>HyQkwbo7Ar} zTBw7qH5|8Y5-}sK?F-9Hur#sv*UNV~k|W&;yZmG8|FHM@oy&sN??!lduXsP#)&_9hwWB2{VbSp_x?8geb8(+=_8d?bx|uFDy+u1_=Yw4FO{ z(~)^Y2&(=`kqF*Y&(99yn)?Xc-3L|JN%Q|v-#n4VT5?G&mn7T zuYy9GNL=@*^gVCCr7x1z3Q1nsJjFxE1O_?>?&Z?FjT}P2`$PmyDpgFZq|JfeEr%Pa6KeS@slI9Djx7Drem=gIaheX5DURIAA4#V-$wG{7frl_jrB@wn zC+znEFH$>Y371eAJ6b!?i+S?_Rq*aznKP676f&#EpIE1aH8-tGn#3wxmX~QRdX`8{ zREtZ6eUxgxoN1eu+lx-G=PZ^Iel!cq?WmsF=G5Zz#BQlsDa(|4BC{?fUUWti z`3IIN9o7;Iv8rZeSIZzA+;l_`c3mW}5*gb2NYfxR63kGO*Zoa2mw09_Lg4ihU*2gQ z_GnGsW+UOWEk~=B&27Ph?gls9_C4}@$y)LRc2!&P{hHaK4xpQ?%J0T!y2HK~WysG7 zv2m-<)eo*^h#7m?EC|9ozlaLRa2^iiZI6y=gL1R0ZLQ6ewy1&U~E%xCC527Yn*bO%4=d(8mj=7gt2YrtE_HmTI z^Fyo_PV?Auo}KuBK701#fwNG1-YNM<&u|KRdPYTRrp43Iez~#;WsBD#!|N91_Hxrj zoE@#@%=`n<$p;c4UgFF(Wq4*{(|01G0{6Gc!g@+#tEuQ|0~%9qn&OA!Vn+H`G=LK8 zQc5aMnz6LLO8tuLI1llQO;#(!B#Be|2!ci#2i32GoCd1!dl;D?Y8j}@Lc*fTn`E!{MlmIbd1wJ0L~G#YR%N(z^gVlx9~ul}sFF|0tunKDVdH_vS3_XB46josfGKed?^(-i&&9?* zWg)VJn!f&2KfNH4=zfd8Mx@q-zAx~0qn`+O%CG_fT1@=2+$Y;tWOc1NYT9u(Ig^Bx zAUxr1oe}uWGt3I#=HVt%{w38<+d0v>1bbF$9bei3p}8p6s&DpGU?GNvF?$%SnUv{k z6eXdAs&|^>hZMLAtSM3LuL+(wcX$*y+wx)d_)i*r;xtg36wHKAWHFY`J0iF@2k3lp z+RJgnUPs>Lo-lJU0Oy`1I_=!&XJZx5qp-p z?z|rU%LyivZ}D_%BVsQ!QkmgasX(^WU687-uDXNJhR{74D!KRRoJ|5WY+Ejfx&|XP zbDM~!?MXu9gXujNF%^pX<4W%dbHe-zK#cH~T1o#330?|?=&?*Y|Lu_%4)X~EilPX} z^ckMH6~~cWHVIBubIZ_^#HCSdEQHEDfrRTa@yh|D76=a2xb6%w1)b=p^gitmsu}h5 zw~Oa9$crl6=50a-kZRIKI;>MTJ4|3B5oizaaf!}gy(q?r&oAnL@H?2E?|lU~I2Cj& zDOJR?;UP4+^E>kxvNS51a7UKGjyI@Nl8)}}lqo`)dftNbhNTS|cf}G5@_2-SML5wv z_R8?MhBj^^$RY7sWLS)%oGpkIKi+hgdVJwKF?80x7RBOjI9nHMnG+YZ45 z^L6ne(uc;Y%gP>`x^BA}A-?^wnVU-l`Yu)^>vnc;jVGe|6gRw*$E=Sy=EI&9zAYFg z@Q1}gT!U_(%#D=ae9F1eN7sn~@*00($s9DHznIGVLnX@DrCZ|5;5g2cL|VQ9KhKxa zDf)W)+BnL}qO0Qyltmi7s*x@1NhRieRelwvsZECz{c9KgH{8_&Cj#C)zoYqGe4v-i zr<{s(#6@H{t5$B9KfjTXAMzx#z@s|2U$B3+d4|$E;mfa9KbW^EUJ@<`=o5PjLd~SE z07Rfbv;qT#zv;~Jco^i)6hh4y%?JJX+khtgH1{}+^0IycciyEb-#~0r;p#}M2V2=D zQb>AGi%)D#e%W&@D)JjE{uM{I_qc5H;2K+JKbt$c*gzVu>U`(>19n$ztpZRf0!4XZ z`tPG-b#PXb@0@z|V1o-1?yvYUd)OGBF%gqYvme}%C0oUl%z+*TGMVU27DQc45D zRSOMi`>><)<)?;M$=grfJDw25FDurC>Bv+s;^JAS7@5^8?*P)Y>U5kmN;;?NMFr!0 z&0NS{u>DKv9`OF^ z9!T$+EU;jI*9w9-1C_?KNB+|H|B?+x73n1Q9f$o^iA^|Y;$Y!E(S(W zEO8JS&~t5u1#1Qi_zj9>KpckK+!gfPV~f1BNFdcL-E{`WAA@k4Jks06a*}Msn+ zqrk?Wy3jYSpTt=zW$jHZ>~t)zedn&dBGQ}J?t5lLVJ(7ghuw|$7E<3%Ed3s{HmeAL z`$0*Ab|;~htZSc36>NTeh~D3ByT7);->ChXe_^oL@)5!LJXvIlgtCqX+5>1Ihrxir znyFjj122euj8Ar!n>(o*a=6?#-b3;0Z}6HUaZ155^ z9R;Vk3)X68jP>XTkTku9zH9R&M4HF7xfP>fIq7OE9hb#~b~Gz)z8pyH+jH|gO)L3J zM1?!My?Ng>%>{io>}%jyLhk(-@tdFsR)Q-&a9BMM!2$x3PbTz-`nN7N6ua>ybIE3G zv@!qu2Fbg;!?smT=_>=uf3a5OwT^f(wLc^Sh-uQk!Nj;>jRc4InbQYNb=H( zv)INnx}WNFUf9dIgU?#`S%mWTZo@&|$wCf-nkkE_YR%Mx`_eg^N@Y>?We&w1l7<>I zga(zR&Wz3_1tQjk??16jJX6&~JuepYYBpL}TwEUSI~Q_l#k;aLVz4xQ{FI=xGN__h zRWDg++HlZzO#L;LTNJd`ux4y~&S?#MH)~&U*wy;SD%`L>#s)a}?^@-;@^DgWvm+_6 zK&v5way@K6ZM<>N*Lvq&@sO(3NuG%dcG1s`KJyKnWBCio5cam2`Fx=DAPy^IbTw2- z1pRLQa*^!ByKk|niOTn>P{H7USACm}uU1?WrHa~y1sz3tvK7AN6j2JtL#Y<2y|EUv zg6A`O#Zt*0Na(|LbnNAYLi}lGc!5^_yVOgLL(9Q~wXAi7L7MfoRqy2CBN-iy!>osV zm6=aY3Y|l}XAt~(QDa0&Ogc~UPv2=%HnPrig~v__JgBlzt<;w8-EUo)#oqt@^au_T zovbVhcjlG6G_Z=_qp^0tr(Hopx2U>q+O$I9i26rXz2Picuc%!egH(ukltIT?@l_Kt{)}f;IKjzTJv@!mz zPA|%yt~e|e+A%}kx}$f78V*CX6<|Z9xK4=4qXTB&eX7rDHDF2tz+sydzcVu;7F)J0 z29N0)WAa{ncE}%J;9~O^H$3QYM;@aqdKX}k0WkP&_HLi4_+5L{+H=tfBpfxE)){Gw zd5s{88E6D~?fO@t23UP!poQbVp@$e800rOxN;plp*ILE&IJ-t!LNi#%lT{1f`M*Vs+R+1#<#An6Y+;ZtEba2_v7<~3A9PE9z z`Tzstmu^g2S_Va-FcUB(3%XA~J3D&>^qwRJzYGN&+;V$+KvQ)a0AxUXCwu}T0spqv z04NjS{a2$w3<$Xe;M_UTLy@DO^8r0p?xW5GZq9@Y20%g_){ip8J*O-PW`!uN*oP_u zpB&A^yHiAlcNRLgJTF2BXtc8A3D)l0xRQ)@Xk1>L4;Jf-h|)%VrWbhigJFLKt)NqC zRF6F6JGUAs%a|Ct47EB%t3ImQDwhkVeDmf_e}+tG-QimMj|`dk*w{coX;(q%3DDvW z+Hg4OwR3ogYU%n`M?1OTbZ$K(IMt%>P@kibqhtlJ=(aA>f4E-JJI3T*%Gngogt#Su zdD2Sb@apF$$BxcUO^<2(?udv-kROXLY%HMf&=-Q3S_L{N?&21 zvDcHEhPBT5KltX_qIJfr?c#y6o&U0bKM0ykx|^q-wXXhD)7tm){II^sO8)kvqv@M+ z3JT-zETXK?xsj%3X85>B(aV;*##*wnL5H;p(ezbv&SRBU!SbNUxa9uoQ44k|R!^kc7dD#?w(LLJ5#LFRaQd&yH?SsnQCQp2JLoInzJJvZZyx}g(b+C{f zh&usJP8T!Egp3S>m6fk_WfvpZWOZVfJyL0QV%o8!U7)3IYHAu2jQ)ulwZGsY0bC`B zY?Kja2~G}Xwl`~yC>Jnk!t&bdkJ!;JhG-+fsXO$aExM__QWQWog9X~Jd=~fDhV9A) z@L>{7H6FVbbmFdEl%g=;<=!)|p5>GMwJMjj=cUjzNw4P)jpx;~b942>;Smv)*uyxP zF=*?-0(Mc+(Mij1LM$xb8cJ#wYhBiCMfW3IlckdTMyLcVu1x(pjo;@+xN+vEIH5@D z_V%2&gr`Ii@*tJtQMZeQNE#8XQX@&PCvQuk)Qp16>B`hEetqf^wuNDt6Iqa#d+x6WE3Gc|q;j%^S&;mAO~#6ci)8QR)h&BW zC+1w%Ice4wRTX_m(F5ot4}N;!Dmod+9;#EMtN!)t*JLSpZGHdG!_*XuZ-a4rkw18h z>U061ss(h#?ButK*^9&=^j=>?Eue_g$DkX3qDBiB!UCL4qQvYe|1;txb;fQgz`wZH z!TO5fh=9wgmRDbtM`>;;GEH}b_ zOaR88$YW@|C9<%^V_56H1WlGxbXgm!8sB}g?@aPnQuzz+n1j5J%D5dPsf9ioC)>~WM|hq@L6b$(EgD6KpQh^N*kkQp z(GRrUC-TORUs@L)8p*_gmE-*^Nf8C!V~h3oN8jwf?XTH+_7`%*vYXRa*trP6w7 z-OigsqX>o+csl$bsUv~gCf%lEK_1j?$(*_ff)Qx;AJP@e{i~TnMUcwtF%;H@eu(h< z!I`v;w87b1y|iEfrRCFpcjGQg=Hv#utDeJ&EzzmN zHpjWRItVVSTglkUHlo%G+eXrMPI-2GqqC{>KZVu6D=kya6`gLCwzc zUQgQD`x4Lth1?Y$_vx$YzojxT0Jy?`&sRXX2@t=|7QX?mOYHxc_pT!B{};sngTW_P z3cJ==DJ!d_9A^S|-}-1peNrRC)9w5uq9UTG2pdS1gzlr9`APIK)$1h+a`Nn#XY^N@ zG5{*&ot^fmsH68$7B0RF1wFm}Qrl>j_I7;2nCDr*4*lc%{XBF!k%{T(f@ZnX1~A>v zqIQ4$_%-Lzbly$eKC+=^2L7~ArYi+u&3L~GhHaGFZdFU5G{<$i)kZCRYGdN{*Wuqg zVVvUP$~Ds&d?`Cz)WpXsbQ{y_r|l?leiUFw@b8NIoo7@ShNhB?>e$^J2lGDK#XpozHT&^{Dgqi# zOiB-pq#LO77B9@=OyI5yVsWXl%mur@(^$nwuz*6=RDS-A8;nX4UXLj*HFS)-&cLw6 zu5y86w0*%uQC592{HxByK&Ck-e0PI(L)?+i*BQ3!9nYpGXIU~eYEkyUJ@r;^T-NmN zL=bFwARYyVE^xd$!`Q!Y@_&%AnNHCYJ075wDXUKbdE_h!jj*?eG&4 z?CUP)XXG&CudebZJTU|dobOl-desCsk@d%s)8#8Iq*z}JscrnML8macskWQoei&aE z$j=KrF*&)*VO*1t5K2Fg^h1tAuON_TDyMte@5w54*~n>4Ueob$QDh^i$-}jc^lvpQ zwceCuR(}_^8aBBq;r{VK+;gh4F}ZrZPSR>~uR6~5-5mobP*(>vs!Cdd)i>oq8mx6s zE#0a!&W%snJe{Y|#mlUyzlvRLNiRH{_Mlgeqz4Jv*9O}+s97M5H6LB_Kq{G)a*uCj zgb$jHu$cp!%3Yof%~5{yO6x<>8vKOfOY$oHLC$K;mt)<=EUxvRS&{;bqcc z=Iqs;Te7%YNow@1ee`$SDK^oK=a+{LxX;6HRS9x1T)zKOLsrGU9#^##;8}I?#mj!! zjYgkyM0IRw-LO&3$7e&xYV{d5gf}i-*skFnKdl^TPl1Er&{1jb$naUFF>C#!7jdMT zyP*tZJ+x}^54rb?tCS?UR)5lkhY;GH8Tr_aFBh^;S%ar-;R96_m^zyu7ZVoGGoc?} z;r!vz5;02kMxspB#KdG$79rs~Y*uO{wj^nRs;WK9mBba$Z)Y@P73wCz`>n>rc|V+Rj{?*AvjCRam%a!R~guH_89bU;o#1bya*`y~(%^ z*LmM7e7av6oKe_~)0YsWT*w2R0VITR&&TZz6`y^)lWsDh;nrGvAdc!H0qwUI{jH69Dv4R#eiyD|6DCMCdRe;fWN@_|FQnW zfbMSiHIgIHDSFw0!s5sBS>)Q4&U5~qFu literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-vpn-omaurisettings.png b/windows/keep-secure/images/intune-vpn-omaurisettings.png new file mode 100644 index 0000000000000000000000000000000000000000..382301498e0be45aed36f21b80beb4521dc0cc42 GIT binary patch literal 28878 zcmagFWl&tf^Dewe2tfkD9X7bTOCS)O;O_43wrCPGu((TbcXwy8#ogWAWr3I9|K6(m z*3}QEPW7DGp6;I6etLR(LKWmBP>=|a0001rl%%K<0PwEv?YTsF|JJe<57B#j!I=xo z3IhODU}Tu#$2S_$K~mEh06@n0&+~3_#TWM0i02}v;i7DB=HhPXWD0OFw6t?!vNLu0 z%E83K#B0OuD+d5L{FD+ER`FOoPE%Jf*7SnhnP%*n>do4_&Dh1ana=$My1A8HlW=os|6XT`xoW@+*^RnvXSVMx~<+74KiKA`w+H=cwt6Yvw$CO``xe1 zIWiK@XSTLhW}&gOo#;K6HHlvNS?E~L@Z}4uH}lFczyHY{?!Rcz?~lkh3`yX(Pk|q= z&~X?vz9^g3*f{#;XW3;pANE-0<>*p><4UbC5bO^8c$7#QD<`B(H&6hl8tiDDV{Bz? zBovaJJv`r~YIA!4V;GTm8|0bI<=TrcSVWs?gteWB1AHSq)-3e9oGNJgS9+NuIusq9 z1!&k6cr!e%B=64k$BgJCV3F?cj)3t(u%cMLXQOcy3w5kyJ2MbUjd8JTk6$9bRB-B|Eqnt$s7MPFhl?p1#r|o`y2Qse<@P65H{zKo&c0;J z%M<%)_JX|2xaIbRpA(!B*v@S212;=C$`R)p-1`VVn6z9ek$#Y>FM;e?4d~K}=LkD_ zRJPmMo;~)L-)q=6KWgeh@?a{BRe94tSkMi4t*S~e&nE;XO&P{Guqb?Zk`Kex!mijt z;+`%POJepYB;fC#_NK2zz9fQuI5j;mjICsCc0#0TVUJR0cqX@O_Z9VOdRLybE=Z&- zEaPiyzyQ$+O;XRD2)6h^-=%FyZqywxIV+BviJhN!v8T?tjqemPxk~{6ZP$ z$GIrqZ(;wvORVsMlIB3JVl;w`_Xl(Yq+jd}J{PgBQ&uX*A9R@$QBP>$)7^Ia49_7?{au5>>BKmKsI~avN}qYF%A424DySS1F}shoAzFE8>AvM$jpe`KjFnE81{6btZ2$E(-` z3S3@@)Z=zhd?ZtRh);il6okp_WLUI)B}e@u5=4DDR%^x&ys*GX4l6n%VQ-R4sV|Vi z!{X6-;F;167tY!LEN-_Ig5Lay|1eOp&l^ks{SPI-h_E=r`#)!yOKiybW616^o>m&z5h(%G3w=GYyEzMsf6r05R#=G( z`IE|>6A`1bcwFAtFt`LR_ax1GZOko5WHVNjHgI&9c&Ge_7v z1DkN@^O!{$uED{CQr(65HhG8LydB*55vS#b@WIZC0lNLWg>D3#@S+0}clF_Av6th>HT-J5?D6c^fXR5ElA@|7|@xy>pa zrw5Y8TKYH^XSY%WkBu?Y*qr#dk?>g;< z!IoQLkFy1P1i_0bq#G~~u`2(}RCU$0W*?8u0SI(%3@#7*slY1Pf{U6zR*KR{@^2bZ z`@iNLn9`QY(CLvL5zgG?>yT^v2Yl5)h+#DC$7-2$AD@*QqhvA48+m)--6ei-Ln04{ zlHrwx5zRs_7krc_}!(PpU}|xV4?humq9FRlCQgp zPw2xh5qLO_5lu-fD$*K?fdFvWGd|9r-w3sOsGmPa4$Ez9ww*gxcVzs9z-iTd*kz@_ zz{by{Rn!pjYAcS(9Qnyqv;!e4y=_1EV9s^GF?1Nn!9ZZ?vkDCOE?$7;Z)i%`Rsp|M zC|b(sY`|~qjG5iUzz-~F9tu_Izg+EmQ5kdnSo(>T=TtJ^fv&KCEf!#edds|$V^xU* z2@&8CY`AhX*%65%fkF$}7TdVZrYzJsBMF+^>6~}TO^7V%dlblWwQ@F;Vg^j7vhSO} z^hlIR6NqmbRGMXWFXa7G~i*{jLxGZW{I z_!B>ofvb>8;#LyIV2Q%f-&FdZ#(#xJ6-OTNqMiBMs+3~zOM)5S;bOX>3Mu8`{PD-) z&KC7!fVe;8RY=b4H0TGBK6Py-(-plXIpJ77^nwqYP@!7o#9F)Fr+q;|@d9 zX0U(H6iw0eimz;HR-TiF+6s9NCN3sa*VPs!(8Lp&<6bbXsrdo;z@!Vz8MP% zly~y`o`Rn~`|U~a>%h}eF!>l>A2p$&Zn0rGsn{~U=)IW9 z$qWaFHr2_{my}qSV2(YJE!57}2IjEO)MdT-3RyIcaV7Br4YOHWALAJ1KR$e=(Lk~B z3&+-O#=(zp!rmq9(L`3FY?VDCg5?#u50a*TI9$NRE>XKmYALawzb~*^4R>h_hLf>3 zt}yR*ffOs^?&{P6^aYc^Ut+;!jG7e1S$_*csfv2W4_W@I?zdFu9#^w^t}ADz`R+Nu z?w`MW;Jo1!O=E!bxpVv*TN^r(2T{CR&$01N5brcocfq&WQX?G>LCzCj9yOI#5;3kR ziC@${n!i2dK=gq^=EzTYII2xuP?~jNbnIlm1kNWkGWzqXyTz!bgDF$1NVy}4Gs)Gh zY(bwpoo|_3NSc*038Y6$j+EBmO8p@prAS*Rsilc)$Mt26L~V#xnPALg;H@7;XJZm( z*U_UNfZXD`_ZE|Bz}{fi#z9IedSx~J`iWmTqA|{Omy@Aj>TX;L3|ncM`kPdxYP{b) zSTlDXVQ60VubdbW^u^v@Ah)HB)dvgV+`-C*x`{bO8EW)-!zx|lIn@2oSu#3)qaPr< z4(B6J_5hOVc4{Ac!G4ptLc4CC+>$LgBC49|C8gllj{@*>-?;V+q8qK4u9k0FUCBBpg-LPQgffs|A^jy`l^Re5iBf#sk?E_wNwx4`{6qKUyC zlB!h7z9#jl=kr)(;-D&*;N&KfEQzrls%FUdYg=2!PXwWo>vJ?5{gE*cMa#a~?>Kia z$=(-Lc?kEac-9zqQ}Z|G5pZg?_oAl*5|y36!m*y%Kr=A|x6eC$@Oe11?=bV|f!deG z!rLer-&-wzn@$Xc$_nu{j9g+#EQLMipNFSswjrP`aD2v#@5d;hr9dc>V;y}L7p~w*sg}61g z7&Zvqa$)D7Pou==lnv>iorQw;21~!%6@T}3PpIWmkwEkYxnlvmnQ-0FukWy>tjAIGkgT4D1?gV z8f0Xp_A;7v-1eX`&f}uJJV>x^EF%1YXD!vDM=?pp{eed(6Zt<@EzTe6mY{Mv4e#)K zepvIG+|ThFpp3ptP+x2JL{2IcOce5)d|7E&3v^zeCOJE1`f`6b1N7UX4F1C`L`X&o z+R5=S4~T?JN7^jo!@N}WKrG)V%=FEwBylJz8)*ZPp^Ps1PlO5qbD%ULi>_=m)o<*# zij26(KP=(CfH*kMyClt+ZFv7WNTz0Xh7OlEPve2sb4VHE(o|QAop4+3nvp#Ocx0X$ zgcm2m~Gecto_Qfec) zu6|qw_jM%Rp*Z$8^^IKlg4xd9W{y+~u5@P}4hO({*rdh3cfA}qu*%;KaThFhhfGNR zyjq{OJqP3thMIPRKuMs|vO$U{u7&+SulHDAC(HU@Pcko~5zxA>+OR`jpP`wlHO|Tx zxkUv&uTNXxuRCK=O;o&PyGP9C-?jm@*Ef4TCb<=$w0)Y7Og&r3d(WTgf7Br`cp5ok zrj4P_lA;f6FE=a4&zg*nedbaQF{y-WxKQ-09iqZSP??=yhR1_B74fk1W`tbrXY%68 zt}6x@cK#uIAJQ6=DP4R?lEZqRQN_Eico6{hcQm#5TvY3-U>7ma6bE$Ynvr7;W8e_L zVnd+ulH8nJMRd3&vKfUq7UFR%G6G54^0R0d(SWU_H;w6ACVuf^-59jT{ilk5W({16 z?cy(|s%T6sMA|p|9d>&m$jKB82q?3|Gau#>_$35WrYGYhQA0_*jT(D|V-?plqa!GO zht`p7U7>i{dYUm{{261i7mU_sAzi{Wqxk)a?7}#8PFrWW_imrlwAF%)TCtc5h6T*a zTX`AG*ZUmpAN+97@}QxQ zd<-T-wL2&o!)=F6t2*oZsu7>-7kON2SVK0iaKHa>MFA0I?Hvj2u<>r`e*0=_=u*n4 z9~DXc?fDS7AsN8<>17xJdy5b#yGVh`DmI?&m>!;-tAjyRQvB(7NmVZ`em57;W0hY=>Kfyd_e_YY8;uv2^!XNa_bA1-9REGc-5A0Jy9;#O7&l&`!%%H2 zegA)8ueb?qN%Fj*VpcP->W36^YkOY%bXP`AvE48I0SX2o*}%q-e) z(s|+weY9oO`(&bi7ce7$P-*`nbUO-H9%{X|<-6+L*5K3D(1wj(SGK5iVpURRt6O|o zOIDWc&ybysAhMDeHcMC7s9q`~tf+Yy^j#%R72~U+tj7EI0bkL&Q_#BQzLJ*O#{>Z0 zzw=(Q9$&k=dc99h<7M9)iK*Bd;WZg0CJ#CbIjWr+%v*c-_Te#lf0;t;bl$?al*T$a zbfLKI)0juo`ooqppP=)C>;^;@rz+?wJ8|TgkQDxEl#tn7&+ypB2&DDET=i44p2cdA zLH>si*-ow143aT-4rR2A`CUsU&(xn6HM1XAIgJ!C;@)p_Rd`s?Z)4`d!Ttvpi711V z?8vG@7mqVIFv5rtmoVN_qzOBV?F^+D$js(*gg7}J z5&EDcbig+oIW4gVr9jbHrddMExe*_+NV8Zgv~Tm?!pljVWJ4x{&6%nqley_%E=w2* zer!_t%lSt!*nOi0ohHyrMVzZ*4^zn~5S2bCBQ9g=>NP3MiIkly1*dC0*L=LY&~V5j zPFLe$JFj9pzkqe$WmAd10+l>Imi)8|xVdPWR}eFof`dM2RDkSV8;E@6oEIgL)*iIAd6LS!7T3;%zjAz&JFQyq zycY>o_^W);`Y`bv)(z$_O|nMWWWb^S(Q%~zOv>=3S<0MZG37zKA`pn)BX~*T?D?@T zEZ;Fc8*vQboP||qV^;=Kb$wgF9^Lz@zbn2Zhf9;{tWvs?-FzXXlIt3AiRATGN5QA| zq^928Xp<^@TX(jXy$%xx=bYTgBN%e@`9pY#dlGstxNQtM@k@~-)f(zq51i>*(5)t+!Qdc zY-9S7|6#wSx# zdo4c#TE~6kh6%#&JxTQ-buZ#B6%s!m7r&;YGZh!w+S;qvV6&g6SmFkcc}eCvaVC!u z*C5L5#te%Q?FQXg^O~mfSI{xnuGMZu7ZN0*0se(PAE`+dt=#EbfIXG{PN`p?hK42D zNQ%e&wzm7f6!?;)$57*hU$H6Qn8|B5@8lAsrW{4Mp@dK+PLb2{X;n;krZ31`O$iad z`r^s^%OC*8d4%e@hL`0}eQ$OW+v{8gZnzco|jc?Cosr zHU*?{RHSN@a^kcLq?c4V<1kCGELmAY8Pw!_h1hoTA=vS86qGEXI*7FRY@Y1V^UE5k zonh)T5*jm-W;mD5PRL<3v6%6clq!-Y)mEg*!GoJz?k6?Htu#z((F1bBHZcuRq16P6 zHa2OM+3_FHn)7}p?7DH#&kE(Gq8dP1_j>_3^FU% z0&$@`h;)Z^aPU`xPoPux)73E5{N~L0rWHzeZ|H(=9kiaXffh^XY)0nQ{zM*k>GAq` zZoi#Pb!~d9*c*Z8Tnp&`+EtD~Xv>PGo^d}lr3Pf!AHARpNk_NOB$;6YQf zeu09WJv+DNzq@CGSX~kEMP&p5DYZgR#z4wIRH(cwEy*tFKuQCC-%)0XagceymojXrE!2E9RvC^ox%JnQ!erlfmrbZl$W z)(y|j9ohf1<$A4=eaK~69`0S*K-9cCJ>h6nFvz5?KN-5*xIT!vhU&*aeW$FbNNR2M zA4QNiAVQ*;eGmUg6mw5o@A|DOYVHb4F$kDplP~J}s(xRQ%)9-< zd6l(i4i6t49aeRz{4}zf&a(aDDiKUWxjpsqaSlYgT{XYNBuS$p;M{xv8E~GXMUj1K zxA*K1G8F452^8tJBET{x=%pax<4ltDlr$d3*1R`?H-c#`D#%3S%jC*JWhZ&yBh;x5 z7Ey#~cxtt>=XGW^B$RDr5m6f(<`zMT?0IcqAg1yA>TuC*r$7I`o(sFQv3=p@J&vp{ z6%c0RXR1^vM6(m5rlhP<;QczKsIQ5Gfu%h+)4y$=U&;G%h%_5j(b3J{Z?8(UdU8O7 zuvhHm4!E7TS;6woAIJ%4$kCpPdp@#KydZN9=g^}q=YE476^EU9H79`9T4zX?@858g z{~H=PelNB@ik+;xyQZ~GQVIN)Rr!7*b3TfwpH0_+hE)gsh!=hmcr6vD@$8HEg`Lumx@>4gEPI2 zhhoM#=6gs8Iyuvy-TE(iX1^YyJ?vfG#5b=)F)Ji$2;-bj!Ar6}kYkDJ(N>72%&u>- zy|?5Aye**9;cLOaX>N+*raUoam}Jt$-xht@^xQ-s?g37``W=)3Ju!;80jYKG=}&Yw z*p?Bx{8weOPN%h0#Yt6GU4BJGUfcem)l>Yam;gJ_c#WU`Vat-;{HO9mRVfQUophBH z9k;%!Xm~4a1e6TJn5>A4D!k>HrYw}qnH_H%6|wjIYT}ukS5z0Z5T-B4zRdV83)}e( z#Gie80>nAU-{GN}T!ocCDW|4#4uVJ3eS$Y7483~8^1{>8bVC!hJsZ<~{GtUnBs9xB zX71KN_kFEv0YnjirU^Ju!QQP$b>#ZhlbYZ3^!DlaRhktuYOV8M* z?liAsrnVyAHF)DZ;0||sec6(4 zaaGZuW3>vH+q9Jaq5^C_h45l=U}7$C({b+|%V$`Uy2r`skBB?t%-ft+8c&$UNevd& zgW?S=`g-eyUS)<|q{K9K^ohM0CV93`qs#9)+sHJXco7?hy&&ih)3!KBVb8TMWfD@9gA!#q?d^EFo ze<}b7`UCWvqY=U|gY8_N2tU)%OA-mWP0PaDD+p;3`i?JwiK8=u%@}IXXE>(S-5#r2 zTcgk2_bTetbuB&ta$DMVes^x?c_<X>F$3Ri=2R9|0p5m!x40>{ zS6Ob8J6y$Ag@Xcj#G$|q#pDX#xc_ef)$X_es_eaimai(aQ2pScU%hVCZRbvXJ@u#R zPZ!3N_Os^7Zkc%oaD@Jbn~?X+VL=ZUxl4?j)K1AaIC&;F(2v#VvBOzkWDs0Ctcz=tNzR&Sgk#;e& zs9zpSd~y=Lo9W=D{5e`#KnPeO8##vMvgg|=o>p}l=)s-o6oSGarbGfpZMx> z1Gz*}sJ&@EW(1SSVNJoWOT0j)%(jvo(9;WU`VIWSF$|_=S~)&|^gkX}ewCIF6zQ=d z#KQdSJgH$Kt;Ll&`tz$9af~lVJ^y%ed`6+w7NzK??SzCoh7vKRaN}_g({!JQz)}jQ zoPpn;XNVyEUWOrTtQ5Zo&Df`|;L@!rcHB>wNv}S^!K=@5OAR5b(k4Hch6Ur=9Hx`_ zIB*sG!*(YE^bCPB;tZPJre`xE!xu#NDCh?V@E1CiXfM!@dTYJ!JMxj;F8<6kN%PmFRH_!hM-M95HN7J`d=)>=*@hC9PAVl&2EosJKFMJ0WTLr7zStkM0nLO0GzyN=9*?!{;vpQgCQPSMm zpZkvz3dR_N|6D)T9j*EPnx$s1yQ7jXC7=;<^|yUm37akOstveOe&R<;Sqy|Pj!y|J z{6IwI>Q8X1o$zRN?alKc9c2;VnvYVZld>55Zh?*F{Q`#Il3RR2Y0R|!y;#`UG&Uvkx0k- zN7$qkiXMDFKR+kxMi!J%UIwsvWUlg^p2V9D?Wi>!7uWQV;sWo{{c#7tGs}fli}sB| zBgfHHTMi!S;oUCm?8-4eqeTLJnNrtgAD*sxn?;A3T_KFn&-yP*GFKhSCXK`yYLs-f zLWeZP<*~EsnS2)V-YRaZ0n4jdr6s=@$|`t$JiuhoNvEe>XkuH>;?s4ywn+?q2Z^Fx zquHM>Sl@~-7O{?{+$=Sj?D^~Q3ZhQL!zScncXY%rf&aD5-=;~cFLFUsh#Ziccj-)oK+E6mtT=JB?0b@00nb#@zlfTP9YF zR3)dg%g|phT_Qy(!vhOPo441#$IH!(KtbFbh2pRppgb$#WnW@j!K^K5T?nq%W#__v zu(at)`D}ZVkUdk=#dY;#w>Z4V1KjV-#e?jHp`nPk8l+DX9Ah8DTc3?7J#;_RmJ8C+ zvw6Fou~~KF$c48!ol2x!bMm0ai|0&`1OrK6EAwe=_5Q<2cI6#HJSlj&Q@mfwKf0bw zGqJ@>gJ{vD=)*Hns#xfYvz-rAl_4m$b6L(h`MXSsydQk$9YU6mGvd|4=e*<8CN1Lg zj&OeJR?bxHc!vvnr`zsU3^J3d6<@BjP8((9gRcXp6?@=q@0xzvL?z%X6ub(Z<>D64 zGAOP{{oKb$V0SvB;whD4&q`^($!XGD|N2YwO<{r>rjy4~?H_FlHqRA% zWvd6%r)0U{-~X{=^+TPOZZwXyonW~ixZH1Q>d4Fh3lB$I392;o;Ef}{bWA+axOjo65e4ps49Mx?JUW3M1M>6j;HH|IUbY0k9;o3i_j+-2g zm@1V)G(-hxZD3NuvX2%QWuCs8&l{`p^X zZF7rIt@g|cibo4}?-@n5z`QXMRIZfsB+`Bv{C}=@(V$>Pq34Mihwi>Up-6l_BU93{ z?tYv35J%->!q3Dk9&@313&0a&`5#+<$;9UaW}bhVsmvuFL4AHU9orgkd@YcktOa8T zTCco63Rrt#DKYdL2}&K&Jn1)`emvD#Xjxl7VCTdYp}O4pT7ip72I7G zm|FQK&vgU!i3@`}wcag#=8WTsqL>2<)fu;*kkLsjW`nk7ZrjFnxy2wqK4Urr9H}l#d*q`~*cb{sCQeeNj41p~L_&g?WPt8Chfnv+V^k!wN z?g3g)R^Ud^yNj~kLCnkHAE~=3NefEF`21=b&l`e*joZ)QjE*IVCQ%oYROKnbATM6+ zQN2F2;&BQ8FJ)j=%?qXu_&igrDEoM+zHUH8#M)=);+XThQf-?W7i;`@*>b70#d0Hy z)jStn&gZ#s?g2rTs~B(hxsHTEuQ5S2vt>LRBNys$rMsGWJDJint@c-qcuOlbnrk&G zR^tR2$`_JhDt?SJA!*~tGp-uFIBgw2EpfU{l{h72%uyh+UoSQWq|VC9u%8CG1~)FH zFxIXfb(r=iR8@LJYba}rS|jBSxV9p(SsMe<3a&Z=qcs2}h)yPkiyQ3{UW&m;o<B3T5YmE%Y>qSk`&cut|5AoF4tA&MIx4Vo4jID#a>{2T2d1$SE2cO88 zfZy||AV!0|?oGNGe};x%=vH7!-bML#1cn_bI+VYr$3@` zN-aNU;Mvh32_5GqL|aC)rPC`ruguKkkfLMUBU+RS8(HpjNw9BJjvXb_ijXL=({Q>q z58T7&R+pB|t89C-NM3H8U6APp8vPK!_Z>(mqqjf=~L2{wE&0 z%U)H8R^+Zv|JoV(=op}O^`TB=(F7HWCSz*f8s23R6Dysk)MdsNf=(4)pwyAFicw>q zCo*bO6Pi#ICykm)8AC_FMQ+BDwB7eB#TCz$u#{G zQN};V;Q0t|X>&=_l#}p}twBEK0|e#r6a<6+rYv2(rC>VHm&$pJhZ19+&6Y+1=ylru zmgp2vDPuc^5M6q^VitYYUXx56!@CQYOD8)gic^pQ!}EC+*^`J#Ueq@$YB=eqc#kd; zYWk`N?wcBSz*m( zvNN!#iubD_DK}Rn7$#zb;qm@WzS`2-7%y^KS*E!>LA^#d+&AgV=!^dKQ{^8j z07Ka_BAR~*zW1NSR-YDK^Dfo)`P}N2O5dsf@(EyjSJg^&XcvZh6MYZs$l1$D0eQUx z_`9_-6d{DlMh)&XPfBF}T`gd)X#xpw1ODlHika?_Z<(^`9&UB{v;1f5Q!(@%*o-#c zjKoWTa^joC#(javwC3b?*>72YzO}cXKgkFE`;RV7f8zepbGwv+Uq~64zKo#&ESkU{ z^Mp6%TuZ=u)J)Yp`{V$N4sgK6Tpr&H#D_X?;*D8^VE=&z@R{kqIPiX?G-rYws=ehw zMswa+BKrssAcB!L5vW2WK0Axfq*CoB=D_Rossc9sUw0EQB|9K-Al9J zdq6GIn@)hY(f!|uHx&T?ck=(->pS88)@@#FNZGx(P)`mbVBeViX?A3M>Pg_f!AckVDSP#D*U;vhD9V^k!;k*;f*oqK6jHbX{C>B|z6BMZJ8D3B;(kw${ChWc=Hqj% zqj$zsrO$oT-zv5lkDRUOOZ`~BxwdRSyBD3y8T=Oe-A$pc2!!>IL6(hZ?7PE#0*FGVO+PS9lcsx7t4O()EtvgIB@l zT-{)%-u0M>r$&*5Q|wvYBYaOdokY$xLB_KN(hnUkOAw&@VX1s+)s^JHb!g2gRvVvV z?cBmfqVZhrAx3b(8eG~Xkky5yDrIIl(@GN-q$+Le?LzJM-9dzumtvbmjpwJ<2F^c~ z;`6X~-+^mK_f^g72X=|NrrFIQDkda6pdi|)*1ZezqRp3&KEK+f@xIX)wBA(y0Cc8~+SOMG2Fc0@=@CD#r%kRus^O{?HYK_*~Js zzm{yfy?HFyn)QN&t1u|ou5F9NqCDM11=n83RK7CZXvVbGls0~%8q7v|mo&!&m3Eto zK=E$OXuZ*@)=SmL&F{S-5MbCy-bI@n>+9~fq}Rth&mMeSVeTu4ITC1d@B3%n5scN9 zbt0qg3CAhUGJjP-nTm>N;t~C}!WZ|AFIGD3+8!x|7-{7`&vJ7Jf@p)pb9T(~BGXv! zB7Ai0W@bh$Wzh4&)D&BneJA;!3gd?B$GF{Yk@DMqva&u(96Mj0OqltU4oaOam1yfw z`NaR~OVoF@Na}Du89yCvvc7eo{I9Y6e1Lf{;^ESfQX(slNhntvwaqzcu=OxM=MEwNsMIWqenUU z-W(FC^#emVibQ#IU$!99i6PI|8_M`bS*cLpEtnS6k1yXllaSU^HrS01){-;0uU!=J ztKw0zwW0A%v7Sg}>AcN@vMAEE$lEqhqE4vh71^mY8*5tvLZcwb5*TjnJKwu;h)@+c z)Az#N>2@(MJnJZ$g`nca>uZ&Ni`lNmb8`!7S}4WdoK<`=4dv`WrTg=Pb;kP3$BM{w zK1}^c-S+2*E9*L~i~G%r6Mi?cSzea|LEdYQN%P6py3ZMnRbaDB&}92BGh&}-rmMN* zd?${%T6%0YD)OFIAIKx-cK-+Cvpuv_+)7Jls))3jhr;)J6>lPa2@9#S2un8ajG&^{ zN`Y3q11wqqF-K3iIO=IZu7AkioZdb;uQTpt($9?Q2cone=5L3s0?&Z)`n|dTy&s(S zAKMEK3WA4+&-e%!FPwH>Xo~f^|Z^@alS7XD3!4n96Z$?sQd>{SwcxK9> zbfGcoo;nd+;kJ0(epBEXK6`3pCVE56@squcsdXwx-ml@CHY4MR#9yLQug#dByhi%9%j!HEemRq$G+sw~4XFi;F4MU-I_4OpH2AjR1qA!9W51g6JYo-t9RhVuM zL7b7C-+U<^=jXal#Vl=Ch#Lr>=G&bcoF~3)OS_8Q+MBWCDiw|tcbiZL_l-#}^oGSJ zSNSx%ivZs(zK@rVkBc)gG!*W2gxz0EOiUpC+5EMiqs5qrP=i^1&9%?#vi-JKb{iJd z;;~hZ&U9MI1?ztyQu;n60H>ps7tz#nl3mQ>r(VFg3bI^D89IFE585aHPACjFF*asD zlEiv?da885FQ-^LbmYxMvdXvQ`6-pzvkYAFO)lEgW>F$X_{ZSYypGq*v?D4va!EPy z(v}lX_C`P!lkl5-8f0T>yl?dit4(Gl$K-XbosKtNbg@s6$0UryHiI7DjK)*r9!U5*jPCVL$p|5GUYzmWee!u?;G z|9kxF&$R@Rb%q=s96X4cZcV@euB-4XGEc6ro5f6KHvdB_l6U&tls-gC$m?G(H;T&J zk1rfKe!6ScO40r;$k5q?1h8!e>zJLSAE~>S=}y-Xv$oA1*|K#X?H64ilZA>rB%H;_ z^o_AiVMtkO8ZDH7_eY^We?o_%x$v`8vCyqmYkDKdL0%tOFSBzG8HEBBHPh178SJYG z;>fg>FiVKNFCtDJfy_CfxyVNBJ4TOjdeUy}8av;%N%$&3duLz6(3a zg~h-nTIhUu&-AsC4qmMf!RWg>%fFb9iZK*}ypoYIQ!Je$EWFOv?|UTKPQF!-6|GJA zU8|_8tEziEm7J!$EP7E(#YqG1KG5>kZ3m|KS;*YEbH%Hv#1^^0r>iL{{_aNS*`WB$ zMonE{kMN{eWD0?|)u@3@N3dZ0L6tzq+TNltih^h2OF=|N8m!P{psBxCRJwQ?-FM|) zwedUOpQ@Dnid&!$g*KSZk?}wnuwTvV2fFWLSZ|x`6XCX>>GR@oF*dij{MyfvO4gEp z?y7jUHXc;D&M9I=b|W|KSZ=Mm;loY$t?1E~kle4c4y?>A{gC=0#MTxAU3rlZcF#); zJH5STEVfKfGSeJ-{wUoX4{dv0PC)J0rm1Kua|X!w8oRhqPOWh`buV3I!@wAoTv95JDqXOCO(Tl4gPBpDeI;70ji1>M zkxe~8|G|SMSr7wWk}gm9#?l-4>+ozcTHoo)^hESr2{DQMHuZ}>qB%>_o6uC44m2F_ zI^8^ifnIoccwZGQfIjZIQ{^Oe->%Kkl85|1AR=8}5TlPj%c1U)1$N(QkyD;%9rm#(@{PJDRvzxemwi_W-1lJEXQPLaG@wa{d|ll72U)lHP`Qdg? zb#bcSX9f>bx940@Z|m?&qzelJ01iB!?UK}*qT5*7IaT7FU4$&Nej zFKVTb#$PxDPmyapZr^c#GwT1aWc*{R{ZWXj^rDJx%aGduBE%HVHvcDaJz!9prp z%KbaP9Bp$4!d`iBC!=sFX=vgU7Sr*)G!+!utfKfQ%7-GfTNWE}WIDgLfaLhBEiD75 z|GLc=Burl-Y3U~YGdBwF#BAa`J8Sm12`WwyY?a-IWxw}VXLyqw63!cGU&nuJnPL{cCO=GcFg+v?dM8wR#9Fo7;K>~t6B4_ z-JjA@_*4e#MjO3xY{S?`D*JDvg2Lfa^xZ`j<6UTVzNWg+7>78IHBH8~w}!Y9^AI z_8$_Q6m=En*x3Atm@W{+z`%i)8e@ADw(T0O>lzFt+j1gJIx$=GHY7!79yL&>U647Yut81Up88bFrgbkY9fUu!T}-|s3ts*)w7)VRH+yeZ<&&5%H_-RCB; ze5Na4W5RGPq0XRP)D7xEe_*>{{ZLo(eW*L|{p;i0E7i0T0kS@$?pLPgC0;qWbGxv9 zJSW8j$D2KZj?V7ZHmRLy8HQAo&9Rhcf;oNT> zo<`tdQzD!X_Z}NksC&99+HyRdMpl&Bl=R2JXMWYLNb9YES&BslTF<_Mk$<x?cgW{G9o#ZQHfPJva31ZdE{QlZJNf>jUi11ID#_e)DattXd~Pe# z=2q?S;IPtcrz8>4dclpHU*Otwk5Q}3FCoznfrMKi8a!yP!Q6N_`Ga>tjS0v71`#g* zH26IFcLjI6@*rqxImyF2Cqb1vMUsqz2Jw}mK{z_GqCV12NAKG<`5U;b(UCod)YWJ7 zkx=+DFfi`lUvloA;JqE$D(Xf&x`qtdi})3j{YgPr*5cN3rM&{A;VTW5XIsYRVt<3G9VOPr_u(3)6;)uG;*@)H z4)Rl}vxb>J^7&Wn(B@}pz+fm8iubwU_l?v`Aej;3N6rHGQgzp6KG|;@Xl2-CG^i}m z#1ZgFfspscK#wIUdp?fHA8C7F%mmw5QxnKgUGe%7;|+56t>dhXl*&T|CQ zC@i3$H_;q)V=K&!NrFH4K0rs6$#m=Y>QuesG^N^g?MON&{yZ7_o^w;-Y(Lnjg6J^n zfs4y{e*dPqRLKm9l%K={5n20BCTFQ9&mRzru>#x}F!5!-icCTGSRzj~$Kdlp-KVI> zKez2m_RobwdS8ypX$@SJX>limuEWyt=i!mv=C47mEIe{0{s~P+XRXL(?af629nCB5 zh!U^NCyUG^@<^rr!ky`wjsP|6lO6KQ`Tb*L2=QWJQWxn%-ywwXzT+7~+Yb=0_uaaW zx3+=2la@wc)$Ftv9Y*~`X!Onnc(S>%Pp?{1tF^UgK%8zCA!|DtaO8dP0RQ8LOhk*9 z(fckYQPFqm>c7dBwoNeg-PW&DW?vC3s3UvRo=tq{xD9Y!Yf5eS+N*ADu0p4LqCVOu z%ps0VGYs$aBsZ42xwLU11HuIx5wv0N=xR6PMr@%UnN6(?qGD}UMd$TW9`pDtS_OO# z8eygIJF;2u(yF_-H*u8;eD+JNhgI8ndcR~rQJ7m<>PB3clqfPH8COTnILz?w<_pPJ z!_dQvT)~A%k>j$3V!k@ZB|W%sd&zkaF|5Ti?RFKj+3!nNke@v)uX0xaK#H)Y`fio) z^0cYoN7@-|0h?O7OakmipVDZn{Dj`g?3F0!axqfJp>eeyDTlfsHERU+{JxrKO1=Z$ zdWF9W@Y&AU>9im%>?!9Bd`4%Kz|FP+NIO+F;w5?X=<4w!?D4<(>|@3c6%Fj9$Nh@_ zxh`}oSq|bE$qAawKVPK|SX)=%)l6}rbb%-(_0|9U?$d&t&lg1p)pVy1YQ&DVeG)&N z`~`MmS8fA+qE&KxwO+cD&35-5-OC>-ps7Zt?BfJ(ty@r>cVpT*Q@sgD(n_c<$v>`B zkF}cUR30)lHJUUS&v}%*=PJDL6!&93pXF1)E}^W81^AthgNz~H;$K{$dTUbRRpl3z_NV$Ue5BoXK6jP^dQpD_Tw!SzZ^Vpn0KYPuO9G{^r(9}~h_(UN#CQG=%?Ts@ zi2k`u00;H$!w_4VuD|~o18sPi|Ciukbf@jUY`4|(acjOXsJH3KxkjHH3rhia=}c*B zd>Mh&Q^0*nKzDOGR9GW*yffCzXe*v#8=3V16V_hWeeUWumVRI7*zlKMGr%9?(@oG+ z=XV8r;G}=y#7i*9CU0L?N|Wikz{|_qh+Cg#`Q2LD($W%Fe@>(U$G%O}ovH?#C>^4# ztE(#`bNnTuh!BL9=t(pNz3P&V%%axz;&~wm*Fe(B# zS2N?YqSxuEOdJX}d~Y5FgfL408R^R++j;N0{G~NuWxCbX)v*E`v{P+pRc9k}EwVE9 zw95E20lPS3#YgRWZZf5j73kY_NVL6(E_K3z=RS4!XVpGV1%*IWF2z$6NT?iptVm_ijmD%qx}1JDHO0H7|GJM(U~Ogh}dBA@y_LntWSDU3RA}05iVV?lJP|PjQ8POU}Tc zXek*rZt9jPmj`BsAnn?KDP+~J^P(?t@UQ5N|7dcf_vd`Q0|AuhC>I{s@cOf7@5hAPLeC*!u02V`|dD)~{)y(W~S*~ij2?Ojp}S5oxfd%dpvzpK6Fe}oJS1ldmu z>Vt?M4WGbA2HdL_EdEYcatR$-@pL$Cf5XJ8^nFjK0C3b=a643oTAO!nnzh-?1Cmi; zKdE7dsioo%y@oHVuRqSREI#q)pTEy&+)MEj7zZuUT>)Q5o>0XO%osU-2uS_25v)rv zyD?LZ;q*VSE%kTpcPK^u`Z$Zzs8W3g0t(h3rI{?$t%w0UI+*E<4~Ua$3OOpzN`VKC zWkLPt8}ks8YzebE>9dn#;@&vAx`g!8nmy%pvz^@c?0=vx=(Ld5zrGh2mSIY+Xj6U1 zFA05Ec994viaj=G_?w+K?npfi zD4}&C1x7&YoKU7;=b{`F5jkPo5gaK`UYGj3%l+wj%nxNRu;kq_(Oy&}xs`uiCF*!! z$jwPqQX)C7NmuKc1;Sp0ROa4iV zytBs8a)oUnV@!C9#nx`3%Tb&={gpqBEYaWZ8_~)e>mOvQ(~J7)Ui%J(S!K*BQE$8H zJj03r9rZopNSsbNv|tT?1A!!s53OeZuBs~P=ZZ2GfdIFpQQwEjZf+Nx1P`6l+hLwn zGS9{nr~kB6UsvjFrQRgi{J44L|2#p=>UZUUYTE}Yzc@0tNweCmG6lT=YJl#v{xjBA zwc6%Pv$f2&Xy}ELSg@H|fd=-LzaHCuvU?>AKliMPlL0QsuP#(-7fU~M?1^(DCUT#q zEYjKVMBqR*Y)J33Q8i`^QJWK%%JpV_V+2oAhIfY=Hai{H^5CqVRaVXke83GSj5*jw z3OTB2T3y9fPR$9&56UsHF%2mjdon)O)Kq&c&yk_B+y3U#lh$YZ9NN5u3_fY%@d@nF zkb+%mek_fQGRMQoG)#lda6b!YkqkE5POSro-i`ID+&_tyYHvKAx83!o6K(4!SCB~fO|=z3sAs`F{xcG##14R)+-kJP|{4Q4Lp4s4plhg$@J2VY>;>CnrSgyysxYnML1U*I{l{l zf(WP6SVgkUYHY8Vou*_{7}zsY%3mt^yBGDLV^a<_Y*c>W>nz^Dr7P*anmCy+M7>vB z$l|cFX)yWK9JIF!tv_Pzy1eFO%_LLT=;T5FK}b8c^qG#YHYV?pFN7P(={ODq=&tT2 ze=v{20Q|OTXQXR|KDQkowK$&Zdi9hRWayB;c%j=N#r&K#m?49{Ua;|ls!mLvnuhc{ zNtK5(GLpI9Gw3rIJ{*5tj(+%o`PHj0V*Rh*KO1O7p6k!GY=h6_5{6Pl+(r_;Mvham zeeoMjV7F82>y!~5LPs$%{wk>Zw?RLytuyLh?+RSkxSK&X+=pkrb6?cQ zKDp*OHH;6+k~PyQ2;H6M{hro9SIe(>y(Owgp*&2t^NedZ?{34f)?6PPl}T z^tB!rJD7_}X3cE(+U)@f9L;9=@2f{XGyF^T8|Qj_oEu-xa%I})RVm&9SiX8SEl=nx zm9G<<{^~>J{XfAs2`@i$4{=D zl#T~#1`%T_+cYvjDLRz-ycfg0WHkSR+^q=TE|I1@Sc0v}=rX4Ra?LgQFHie84ig5T z8_OZ{P4-d~-eGk%PU^l|Gmn?3%@srDalcp9Rmz6m2>&AU0;lD8a(g_zWDHeowD#(o z7sB7W=Xwo|SdE7U&m30-E``Zhm5`G9XrWcDIfgVm62bQn3Q|Xr;KL0iEH+n)cX>Xk z_J*-Rq$cXyK8ilyN@F1i3AA}}Q)%v<;4&bM9LN@5en*Dlf%kvL8+gGw_jpudB`Zqt zDN1AGPfWBE9sQ>Rxx~n58=rD*d*t9TvH=Io8Q|h}?i(UXcx}Qvwv!{MVaI_Fa(e$Uyc~ec|R!evif5_(h2AvCzJm$ zMWocyJaQFbs&Bhoe5iAYGEDsmu!y->ar^rG?R1$m#UG{hW>v4f+x5P;J+l*IV@JFg zrQs=RuE96e3w`gUAO}U>HKwNq1+#?LJXKMb!ku1SaqkU>qLt4W3t>;+>_1KGIFz?s z`kHoMPt^AVfw(Wjx3>ys0yF%Tr=8E{pdV;(9WsJYF4z6xUZ*J!jaQIK+zlmpv?SL& zf^SAW+hWcmHx}zZpHI%>p?yDtCRn`H8AA&;40alKo=csGuCvZTl6H0^H!N3wH^Nivst<$2%mcyf6A$nb*fKuexjJ+=0){H z%&fU*g5uK5o!m<{i%G;gj7#i`eA`uWR3c-P`0JO(X3$a!Hv;8t+@qWzMzlg{=I95U zmY;w}%K^hL5w(0Sj};}2NCr>Ms6w=gSu5}Pz7#e1&b)qI4>7M;@e+MIW~`r7Z;G3& z3&P|$t&Yj%xL^w0_bp!G4nEqo`m_V9{V{77XBYRZ!ECvUe<0BqnS$@nKV+`i@`+48 zM?>o6^Rsn&8%ei8uOlJ8uOjQvpMXsHoU`VQX?FhNZ?9js9yt~MT&`#0ulXg>x?B1t z%fo4(mMImqOK}A{R-e=vAjqtKAL!vqsVX5>pvuZ5&?Z5QXVP^ zx_Oyyc(uBDctt>7RGiqeq4n(aB^>(DJ~JrA_C2##YpKZbeFWR(9|eTX3tif4cBxZ= zSOuVUtx(klj!=_g?-S1Gz$Qv52*)t^bx}^pdZc39ywS^E(a zU&bYM?qwy4{P1l>et;24!Or=c<&W7)bsMc3sUd5_N0W%I_~S_Ax+g6GVHAzeQF+7U z8(u?a4CyRAW9!uZCBaduV#u1QM0iznw+rO;CGuc)F*)=|^2?L!Xj)FA+H05WwJ>5r z{+4ejmqq7}YfiVIyg`3shMi0Zk48%N zRs!l=mt;Lz3knPs0>xq#O969L>E^~{oVhnM9dvyt#<}Cb+N@I%0}|h+7{uWLiCGuq zwSQpM9Gmdv&e&(zq^e`_Hq~bS*yq8i1S)U}Jkk*;_Ld6}=QY$6QO~ zQC^iUy>?Ymc2E()QB)Xyz2`253btsLgCRDQ+V6!FR z#eal-D8+jlF8vkeojOmvNqC!zd7L=TeE^IS-u>%4A%KT7=q5#=`zu)KP|&NvRZVxI z9sibfW_EdKm)GaR-%h4;>`mrg%y&c3cP4lMjc5sbkn59G-}_L3aX9%?ZE33Z$5$1H zOJwWWp5UB{4)1Pg%<@)q@Wd-zvQtJJypoDC5r!f}( zo=@%+pSRZdPbO{Bk?!L9R?0g?)8I#d7`8}k zl_;>>><2N6Ekjd9R6$Of)}gct)a5EGCIFPXzY8JJrEam)iuDm^xktvXjLr3H2n|uS zx*8vXT<_($&Z(Mb-7VZ)Nx5f1lyCv6uX<4;K_{4$Y_Vy_LxwtaNtooO(t4LFZvon=s7e0HW!e&4|T10y1*7N-=VPC9ZI^Kt@#;4+VJ}d^SGwa zO_rtM(6vfc{mSKAa9y=X+(XT$6Tg_x7+dnSY=?ggKIu`vCRN9{F9-KrT|9(DqQly_vKFnRL~OP>#HP2E{*jDBm4%pMn#7x18DvzCbd}i zOwwGY-mTTvrF?bK=f0nozKYC-rgk)lv0~DsFv2s3YuJfOx!-CAM1Av>C>y)6_lUjV zXvAd+u!i6wc>>z99NmzC?M571kBS{uMw4nx#EL440lW7xrGQLOwglv6uehvtt1OXl zl(EQoG-bD+xVHh8!ehi$R=V;d_jJ3waBWzWb`qE+`E9_Q-wyNkqkp!6=A@jGRs7$q zOjH+g#ZcLw{q2C@2y_h7+7PGUZTqS^GgDk&>c#Z;RA^CxlW@MIqOM4EhFE@~ z-1U(5FL^`*cnIGwS>zpo)@x}teDd|Ye~{O?4XbcbN(1P2Rnylo{>U47A7LUTSJI3a z)uK3-lFO{h+U77wQXh8Ye4|_n=5rJAgM957_(W{n;O=Sr!ix@c6X#{1mHQKrh~uEp zX77rxv?cyIT$*C!#vWoHh(X!=UX2U!lgqt4XH1Pacdo3wXc}#|vu~-Xf zuZ%ra&JKKeRL+>!(*Dh@e%UBn^wN-5;mxWz4OF7vX;X<~?c)my&cVW+zoXEy@R8J^ z2SI7~LcN!Jcvn5h#E!p=Fk1G0=p_U*M2}5R&$HIGx-o!w&)1xAAHv?<1-!+0DSR6Q z7FXrC5PV>(0u-{aH+dVsiMm0IYw9!eG)Y@O_zTvH$o6}hs*Ti8OKk}5oc0^dT>W^o z_BAC8HxEW7=8farGM%(%iyyqyO-41Vc-E8`DljB*4|WMYD{7$5fxqi zu$X4*`ejx%`6<4aTKz>rA<)Z<00v?3s;Ud36IzQho%I_Jm($BHqt6zK!^bC1dzbSg zCIEbM$Ye7jT@!5Su5jOV(w#j2^z3suzY;fdOTH63oQ&do=25(p>R-om$*O+fjo*Qc zHjUS{jIEc$v$uHd@}r*W#zQANFrt0I zL1!&6i}yp&Mp9kAn!Yx7zT#)rQF=%^X*49Kttt^e>I?E_MZ$I4Dz95dZ+U_$|uo%OOk-3-c))6%XX>t=30cn5=We z_-J?R;A{4F*evUNmE<3{kGUJYtZBQu$SPKg;b z@pb2&s>|H50+pUv2cCaBo`36NKI5(K<@sW8baeFYn%uX%+L6An{@Ycro6aM27hpqd zn*bBk+66!{-$p`K7diVp+nigCyXvnaZk_{cM|IF9o!2PnH9fP;CB^*F=tteZQa=x# zq+#z~3Zat}98Vn?{3$xq|Fru=51l)ZD$s}+>=>BIPza9Kgb~mP1GOJK;&Ok2sbSLD z>I+p&UVlxE`tjx zhvYVfFUczPp9i0dQv@(l7O%Mw*<)zC18gv#W}OVGC>;A&9}Mf)8=l6WNV7i9;nv_b zc`)o9d`8;rpNUbnBn-&RT6g-`EO89t~2{tx!-X& zqw;%+H#2lQ=3{p3b9{f_a!LrBfYe-$@mGG^I2TAvOzUW`Obmbgq8FD;fMuJ?ZCXSa z85$YPE)v;NV56N9L`Z{hCYQjR#LhgX(QX>4f{V9`BlmT8p1?*MjVH>&JH}h!B4(yLlkbip=2+i7r*i{b-smBZ3 z5E6ab`dX|T%@=lS6EU4Z5zy+M4>P-l+ZX5y?jO6&9Qb&DZgtrF^Ju?yI(aVd9@-MX z*y=`eK8{~AgX%eG^G;E=vvJ^TAQdy2>dt@cGoRyPg}BofjD}hHJ%cDkll_bHCOQl?Aps9sUi1(iqp(ii$=U z)E#E&5a#b{PLx5v>52zL<|F z79yJ{eapkcbFtK5`y_S2!=D6v@YLk))Tr4TtcayFNej0| zDG!nsLtm)@h!CWb$4DM7&1xVUme_-a>jFY{8SmYXc>;&g_v8Ynov2XT9F53VcgsV-x+n2j1` zBB8)0iR{EC>F#V@nYmF3&y)oWreE4O@*AkRVqHKYUVAm$wi|GuSkA9yU~?1u*37V3 zT-m^&q~o&xTDFRneONTcxv-!}mTqdMXag3TV-;xL5zowdKus9HsNEk~pq(_&&euK~BaOEIqxae;5lX%Hm2E_BId6 z$Vn4lZq40=8n=S%qQmMo;{eJ@TXbp5Q!YUlFfA@>(4E^=e$%CcQR**kO%G1T8I7jY zFoWFa7jDZd^>;BNQ#o33k<^!A(PZ%{7ts*;1&f2RHkym?He*xu$LKR{Zo~p)tkSnZ zMlia2i)EdIc>a%djY(yX=w?ml+7+KGivm|G_j&E zUU5qX8ovc!jO1-awe^>j45td2U1qK`=TJA&&ebfvS+wU(lc@GN+P=HIycDVQ8|?0% z9JSJcv<=y<3>Y_~@n9`-IU*N5JoMThikvOmW*#N;1Ry54%}rO){aGbz=L6*D7j5NP4X2Q zp~WL9h;B(Pc7OkOsXoDi>uuAgkT9;oU2p%TofflUI3+uRX%J|Y-CusWj?{8O+OjD5 z+O&TRdNRvdXD8OnPT3P&lg{FB}qOq&0!fJC!WRPULlWHXbo`WYC1z_+;<$ms=X*w zpHqI>y29Ngt1IdV_sjHobM~hqzn0kF!uhtv6WqL#u~2W`JO93e5|+gvYXPLjZ3cM41~ORBSc5c35z`)+RwY(_$xWgHGTu1w@j_ z)j}>^!hlkj=z9m-f#k6@InB86-&tLK|?i5VHBAS@ck1>zI8c$~B?)sz+lYwaqRkoJ{hkDs1 zKk4Y`-dyblq`WPawjeP1v!Ja;PGEQBwF2AEl*=D7E}jvnHZ(}NtB5zMX1A{x&ek#> z?N>-cHm!&roRmkhe1zTk7<_R2et~NI4HR67I=V|=x2tNJRBQ5y8YVe%9t@UGcW@PW z!R+$}ZmX%TEAEIw{bdgwQ91|d?V0;6WYm5}-L=%-T3d%%nGFU%2^UK7FXt|~M79;M zMN!_(Bw(K9if^<8c-+P3YgboK$o+-wn7RK_0rP(VD_Sqe6{_5&@Y=4w3fNUV0Oorf z|Cwi{?S))l6rHM*D=^+?Mv_pUj?5JtXzgDm%3Y&Mwq^DcjYg4QBThb64|$elc_YT& zMXjXQ9c>hP4c7p8{4&Ky5g_PDv!+qn3lRvS54_^1@P41-)@*ZDPM}xTg92>tP@;1> zvXJZv_&sVo8@n-*%6s{{#xFM8nm7ihoOme;l^(cUe>-%QLspPd#3TD zbsnI0)t5)PwzJ3YVa08F@3gU?0#pEfQB?3T_+p$n82BIqiXaVa2RGB}0a_T>un%`0 zbOM%Dlabw&b)jnYHkBYBdhg4QnK=XaVW1Ma;CU(3$izid0{n1n0nDK-%Va=a47I{y z0UorsQ8|!m^sC|2gxtNB5}hNn-zs3j-2Zw@`#0)<5joKR&yTh5vT{7@1g zwr}?Mf4%ii_R5cg#me+AlGGy#iCGN2Y~7pEG|{NRW5l7M2Vp1tg4 zZ?V|zsQ)c0DJVSnKo*r|hapj7C` zfk5EA+$x^32x2YX$&hRZreRI&-Z9JY21j5K(8C=wi_eNbuzwlhYgt=& zEC%9kQdipr#J*Mm?AM@i9B)1JBo=Tbj~g|0_9$tV;8WNNWICc`atAJW&v$k>_!nQ$ zk6zhmbUhSnRW4K&>+?`-DGQp9^%#~xjwMQ;a9oaKDcu>+RD=sRc6Ncy!N1h+Q#{;X zfAY^#tYwH(dGyXF!2QQ#uqG@ZM1KGvv0V`r=Rna(xqA-~rz3`50Tt+ig?0ZZ?BLnZ z=>K5jzwy0i(DljxGq`H@0(dd}zl%fu-}+iKORUSR3%9_(^>kcp*x&Lpss^TESM49} zlmuYS#9j|ef&`R7^=gR%mygUUl8wK724m9xyHqQ7D7wRShkw4!ho)hFfe&(^V*ka% z&K|X69`xQA1sau_--vDhFVwL0E&z%DFr+-d>)$-0|DOsBH{z5K>j7y1SbBe*2fI99 zfaDG6FIbx64gq*k3F`rRr02N&ziZ|G=fQubJzkV^!k)p7?7J*SF^;Z3gtKD1MgYJ5 zTU0WzxB}LEIqVrYaEqcL1xuzM(*-Dhn}L=5Gv@yeNl8F}HK0ZxinS*g!6RJ_Y{YuD z<;WNE>VJXnw0>YC))G?$k4`y|4m+>zo$Pq5AFwn!tjkBRgP~Ob0@z?foQ?yrVgmnK z_ASD(7D}Rk5O7}&Hbi$WfLIlne-yXB@@O6G7Z&MDt{i3~`cKM;v0bDPrzqW3wD+(7 zaY)GiEwO9S)9UUL0UB0Nsqw?$M!jN3^5@e%T@ibxL}G?o z$l~$cuHC&k759pfA8DN0XB5f21Fhh|VK+GUD2v;E>3W9E6zX;237o4Rpm>ji?wP3I}F~@dondxgboWXT3 z7>uL-@L_23cx_KN@_XxE^Tv2Mc>CFU{t3g`I=g$zy8r1dsw68ftLCa0beLlPijkQv z9ed=+5hf-kW@ctqR@S3OkFv3`@zCYu$&*(qmppAjc z);70n?d%<$v2O18M^6Ze$!Ra4oVtdOP0f^^PXn~R!B73eeFGyyBa^f9%M0JuSJt;z zH+JZ`U@%>nHhnn5bai36Sblzf5fKqlQBec}AuB5@CnqN_FR!YqibA2ZVK8l&uC_Kz zTU%G#F@koDQV9Mj1VTz`K}s%tkil?&F!ME7*p&G^=UGY$Q3c5_n+xw!?ob>!T-;evt!`lf|o_~CwZX=*BL8Y`q7)a0hu)D_h9?>00vkjdnx zLa>Q0V+U49;wnc%q`TYa+m^wRAg^hIHTKZj_O|@OUyu9h zv4FQ~*yt0bVfHJh&FX5-X0?+o>DKC4&$hh5r;)8M>lP#RmbKFuNR|I?a^%F?vT~zM z?GHn8idXE!+R1|@fnIi%O!Y^_q*a{QZOuK;Uu7JvYn1ee7ePxI6kKkSw(+9O!Dy1Q ztT?)6M7411eD;iqCpuVM@o7SIeNS~KA1m=SFJc?ZB6Pv7pm|P*saSf>EZcyiN=-cD zdSFfbM^4+)4d^oumG2!|S8oV@p=d&+Nh*6>C*PsGIQN2Jxad%Uy)$MK>+2I2p_q8w zxP~O~z!{(BuzgC~(M(Tm>bu2TbItS__h)hvY02fY33lsXHBv)StWA?rsyC;K>~*Vx*`bSWf8kSV z2(~gFYMR`>uAvwuS0x~xCY3+g;gCmDXz_mRt58kpC6>3dp*O_98?l$9V)N27?0$D| zC1R3>Bfo&c5f7!-?dBZ6dWtPXuV1c+L%WZE8+_^ok#Q~J@fu}N_%Bdt*_@J!pW$=E zGv;YQaqLp^96*VT;Qe;>)QEU5#<=VWk@UgYOR8v6EqX+1LNfYjESx$D>i%(8@im*y z^OK`ui%EOm1zob(kiYsVFcoL}K))kDZxKw!>}3R?qN*#SkCh0Ii;)C>vE{x1#;65* zePv{#nS=}KdCFBF%$jOei~e}^K71*s|9jx!E@SqpTEyM$Lg_05Gk^>+6tkXMG$wuB zdU4W7{>!%sYY(J*K!2IpBF}h&Mj6}OyCFH~64HTf4B|9AhTgHL?10cpU?j$N z4yc^Yrhd;ZP4{8?>Ui}E?YY8Csadr(Epr~!cqbxC80!Q3%5 zMMTRRWNMvRK`b(G`_+p}9>M!p*ZG*US7hKGtD}yudVV)u+CWKLo}wJOap%GSMe~ z+ye##eNsLG1=|)Xz7@wnp`oE%^Wy@4I~ai)He~H#ECXVc=_jGmO^2&=PAGIrp<&W) zqR40w_P^YRDb{xJ>ibhDrX3Jpj<|Wb;ehvN}Duai7{f-gC3UFE~(1 z-Bn~cnK;!rJJxt)f7|~wQl>y%NP(j(ekuA@saq|Q!oiAD_W(2Qp|)q8yh|M}40Bo8 z1nx`;T!&kYwLi!A4|zRu(KevfQ*Q51dpx_oJL2|6Xuph%TFTC;aXv@#&s_2g z1R}3UaTsS}ypt~!#S|&Y@Ip=8r;VwvzVF`0kh%ItdZH=@1QA-DZ$zW28GwjdGzk-| zFEP1r7X7Jw)z-;2U3+8c zcj22W5li!Y4Y!bZ^RAh)5WLZz{~mvay*{`x(cl_W@^wj*f-t`dfEJN&$>#CN^_bKk zOZYL%WcQHMXXB2Vm=hRH_9bU-JDf+yQ}ip+i$3VT6&g^?cr(+i))b!#?=|%t*Wr){ z3dqjc5yeMehU3;`0k0CM(ti#ILGWjxT(+1^_@iT&= zKko|z@XM%@9H1`gZRYgxOH86G;YrO|cNNQHQ@E)~uYG=DKqydzrP<9=K93O^7#Ewk z$l1iHcj>~zt;Qy=RyhtV_(j2dWs{(t!T{YF5J56PFL9p6zpTjT+U~xsd-298g*Q}d zz)}57MA8R=B>%{yw5-8)(fMT4b4dX;$K|H%6_j)B3yAzL)ctqi9;Hed4{cepUV*9w z0aQg58=Xe(_>Bb9+f@?5M-{!eFsRB8Jccj0jHTpCeeL|}8wO7w`QwuRYl(AHp#kE? z$z92k7qX<$Qf9=I)@ekX!QQUmbX<*dxG=j<5&lD$oufpe!}Og8vybc1Rv$WV7}{lK zpp;pmmr>(ll={zRsq)tnWN)LKuaMa7x2IlBf}yfnLB}SS1xR@(*I@3*`nL@WLbg@_e`vWfaGiT&Oo|a8q=6J#Y0P||&e}lgbHM6ASr;n2qwRN!# z=W#*YKwGx5#SJ0M+zHTV4~$-qB$A~xb9o=%Xn7~-wBY8`z3^K8bz@)Dgi_ksw&A?5 z!8dn^rt8msn+xATz6l6^CA?KKE=I^ZTj5rOaoX#tJ9(MR-Dv(PLO0cOLM(mbm_M(# z^K)Nr)*IH#*IZt{oYq3~K8Yt~mX7w~_+B2Dnco;LIuBj7yX_+WCQA`{N+ak9)FtSB zWQh-&mMVymZFhd^6YA@CXS1~a>!M9%kUB?A*Q~%scn9dTn#8p1rham!?fi?NC6|m& z_VRNBtVQL+3q)0>#Oa{=v4+WeOShYxdsp<6ke20|eDlILWmhA&$z7qfq@53EL3!yS zrQp%PT6FtbuP_uOuRqgb29Doyc2v#~;>G4~uZPZks~r^s1+9@F(7~DOYg+#a`{`>% zr9|FG;YIIg+47EHuCoReBfsGF;lG~=V%#6uXEN%Ib`^TjGgNV_^kbtGz|%=Z?^lK1@w*dV}aU3J?s2EN$B?EXr z-eVzJqg~FL6@eud!pcK4JLBQO#s&B6DZc7(yvw^s z3106D{c2`w$9je|gviZT&NwXArPZozO?+xR$p`jnAS^ym_SNXg{X{=i@DCmX7md8lqi;cnzF0w05C)eQtXuMleao(V#KaS$kL=fzc$Vl{GGJL0g8{@aqdiu;dg!%w^qCPpDJ4$5(A24_^oe}yIHy2#k z+$G9-k`oc-#5O|D771^%n(F*^IS}mYPo$Swce#ds2(9~Yro)NegBrG<^a`0ztjXBt zO;$}XX%+(i;aqxi4zbj?Nb985se0+A5n&OIRpmzdl)39k0@V=mIU*jY5SYV1_z=XPql`EEh-)5jp${X+Ew zPyMe_ta=vvL3?Y)I76EkrxXV$BwE*C1_ncEQA)TRnMsxx8So1Ca_q2a>vx`OX{Gch zgXtM1AazAZII;M3KsDUYC;xU?8goc_WQ?pu_C3A6Yo6)@YS%r(y&|ODSAzK8)8gMw zibKG&k~9p8Giq+|+oWOQ`M68&{(A4+-LM_978Tc8SMuFy$CE)j-JGxd*)2@UF@ffH zcmYmVU-i4gi&;4vQJg?THqlM5zV+Q+cvAKBq_V4i&h-u{&>Vq>54OzrR9*l$A7M5b z<{g0L&w1tT&NkvP?$pE=5zx|IU_G5bf4HPQAOF@b;Frw#Y_pYsvOXC#p9t%Ua%=1P zasSOGWx%*{ATxdG>JViKY(Z4O9ZL4fG4sWlU_x<@O8^kjcX4L@b$MjR_Pae73*}F0 z#DyLUxpRqFlVos(v%$dHcf-^C266}mDNqLG>)TerJT9P)4FTf1uX@D=YkrF{u@V95 z(8#fe@c*F>0d(WP)uETZ`bUX@`bnDY%Vw#? z(55xfn3jIkQ_0t{0<6?M1r2hSn2vGlD0%oCfXtg#s_HwPz~+P-lnadCc+bS!Zwc@f zSl(5;HpvE|)QmTi6)BS@8oFZ-sX}VTUSE5b8X;C_!R`}YK=n7?in?aIC)Dh(z!piy zq9Vn&rPkzgxF0y2_zX$3TE5p)TFVA$I2hOe=uNK|H$ZPmJdPWvo4twK-X^P_$i4hz zLzAX+^R+$DDC7q>^}Fin=oe_~;{fuqb@uR+_i*qNKPi7){*2p+Py-N1Mf{@9 zxofxkrUtDFe0!}(vr-(K)Ge2)FH(IjO0ZRHwX8S>cyBKOmXwr)L3DI< z!lA(D9SB}NK0dTK(5Q0`XpFiKH1eW~<(bQw4AOS3HENz{NcZWm`3D;Kp5ga_VI9kw zEA?USrO zW0X77S3MjmQU)J3LhNXb>UBDxNv{tUZq1O@3eHs+wTt^2N0y4ik6TCABSWU+k~-wX z_TMgO;Z&X6SjJ}dsgo@37Uv#dhz`|l%x-+K9{Z*w8uY_l$F?VE-?H5Sn7q><`gqRI zB%hMyn$vcoo>FX zvdQl&U4aipRga9Sr!KpM;Hrl-2xs)Hw+S%v7qynY=9Rld381nu&}#;7yK5=N7x;5~wC14ouHi7AyKUxzxH!lozXAcekf{6&iA zk7$o(JVbmlJdgGoSj?z|rVY7<5ow^nIvW@I>B)_xC@a~4Z_5PhXZ`b`LgG-O)stZO zunXOVmWmy?bXaHj*5HoFa_Cg)g4H0%n=$vJG^iGn;uqL`)9K73M!zlPfC9KM*2W#{ zB8V=rgSd=rt%nCCdF609+}gLIS-ep+J!Nqr=(9^;i+1A$Kl(y{!y3@;5hmLXHM~ z2e>{4X{HFoj&gpHb6I2%ynK?RJ@dtv2H)(qA`QubE4YJ8ri{zxg%GcYB&@AR>lG*6 z1?1(!wc)lTwRe+Cr(=w3??$S9@$0u}%Expn$JqFX9q86vTG_XS5cqE8IgWD>YMMP1 z)}ZvF$<+{XOU~2(VR2Ra zlnxH+qSkm#m#-1HLYvathbRX+FQm!a>AId>uCKCy1ds+XHu)Ro+m?c-BO!CW`#9E`HOVBo^COG96qHp!xN2Q0DRJ zJNkeQP|q*_#*5mw@%2Nf;0L7Pl9k|noV$zFjy*Oub~PM=pC$S=^&k;-dkVS9og3L_Sh+*A#>b&jLJCZj19Pxor_S?a1xArFD-MU(t!G2B(jLH5bLrAw~1SkR`@83<0yU+rpUsQB(qaq2{Vk zNY+qL!IDV!@yS!B#ZnuGJ`Rz-yrmJ>sfy%dNt^VLbww~a*p^s%@G_)y znZO;1G&5CKHmtP9&(THhZ0j8ghb|l(dC;+skMvmur?B)S9!b1NTCFkNiry*|bX1IlE51Gy$Sn69wlC(+7lDil!qzvQ7C8X<$ zqummVcK&IIxe3Zwlecllz^j55({ifKE13kPuEho9Z)8WEEGAZ@{K%(tK~%#ybLKsU zNshcwab&#>zlaeFVel}1zLyGfpZk6rFKWij{kSInk%7g`SrFGWCliXZkxvbhdSwLY zA=n|t7S%weXyq!s)A;sKl7vdIDGG|rwdhyYigtU9mhY8_NOc)=+?#vLyHV*LY zVHR$$4pxk@&>00H3^AmQ_)q|4!lX0r%)B7h9!aIS;+I^-L6Yy)_DR>6O zgc(78vbAuhq~wpQJU$(zuHn@{1m^;x`oD(ye{K9T{!^bpLx#C+SfHR84L`Tk?xZ=N zq7MR%??mvTK_GE33<3h_oQvWF-G%NzfIz%l5&)b+i|cTJ&O*YWAW+nOUH~-#ozFsm zE`T7wGvLhM+y3hS#82~vc)QhwdEf1vtO1Pd80+1wf$AIUFJUz=mJZTBT@mP2X)k=3$rPA!e+~we?`eXCs zYV#59B2r)qa6Dalxm=)UUmw%7(1jh%X~wd#sPk$V)2r8?~=1u5jOa7Gk_Qdeu-?ENETh z7~=NaZ1Y@6o@PZ5bsj(8MMjOhA&g}9OWO2%Pv$~4Ioh=skPWG$7n{}#?64t~(cd5t=A z0&xp6WsMM0F? z^;JINN9hOZ(rz>=Sb21$K|wmhZ>f=`P*0s3PsdYHIFARSvRGhKxv z&QIlQ_TDssTRmG4Z+u&9pv1 z)b0%1$+)}<*0eClEt`A)2(%TUOBR>=d=7FX>Bk=f>$4bL55+3mYiG4*Tm zS_)Init^mPYs)oJ9cuGLcosGTX|B!^5H#=_Fn8~%0HGt`*l%{u`8xUVtZ&!(ER>b4 zL`=F1at%dWvF8Ys9uJDS&RDb0rT0AnnV*%McebiH2C}?gS_0I5kmn*s+XOpCyv?3uVBgDbLNjCmg|63fsHd|C0JS~|vRMC`ER#~H>{6NGm3qL7y zYqz82N%P%Z_nuDNXmsNxi)OX}Pu&fc1TRP3d^d(SJDx=7PocAlJX{2BE#42~Mb4*i#FkmPm5oqH8^^=UsOM>p>7gCFiiMksyL`K$5IJ zn_X3*FmC1@+iT%B_M$?S8cO+Qo#?Vd>`fl(M zFy%)LHukle)ls36nZ(S*X1sp6Y}FvS=#WH0Wd2R7J+=C-OKz%dxZ-TWVkc&rtfclJ zIB8=`6bCOC`tCdgh2DXY&JQWCgtkm11y{s`Qrbh+Y#4<(70xcLx7@EH>lO_~Uv=;5 zwE_K%g5CKdxIYyu3ntSZ<}{q5Cv~9bDACNml-|cv4a|nZb9!PtypG{Ic{HSZ&B0~9t3V(``N1g)q z@qdoeEcHc;|DU7zpT2;7+Pu{^=;N9CMCk_m$w@XKfVJP$v`B}4o?73QWbGOu=mCBlwH(N)4^(p;M_uqIC#PbcF&B7^uM5*euOI$n%2bF z%Oz)_b8d7OTw-W=T#lnG-6VwyKUvo=3%5PS=Z%~3lvTybf9iMtY_49K_{5zfmI4-R zjkPBQXb3J#XlCrZ`ekzOW5b$|AfZ$o3Hi#f`G zYo1p>s*?wy`0bxiYL9aY+5&Ohh) zv$lukf{40Ont`{07z;MrYjoS6F+)_<@HTQH`V(>EF8#IEp|~QWt;YS`&}+_FpI>thOO)$4ndsz12%7g{5JdMxKYNt$1TG~lKS-F;=i zW*mj(RbS2bxdf7sXd~Bi6P3`>LSrOKMeRKNOTnY;i_3@kqiRpt2IhAdA)u)XsdmbD zbZpDq8(fF>6XVlP_fmSxc8x$-x)?vrEf=dxZ^!h{9j~iBpvsRB^7*30kATwlwhEwz z(Z}7=8W`wK_c=ogmw;&4nP>QrbONP0F3{#!n|mw_)9O?=sBICumUwP+I6I4<^W5Kz z5VuI~qCJamBcTPfpL3j{NGqNuK2+%|M*z5JQcacZmg{oOvh=Wfp4ssclH|fp7&5Fs zg};QLO7WUz*0tDnaKM+rXH*lCvRDNr>q%-kIs1r=!|AKHJreyi?CD*m5sF{{Yu7sm zXr0`4b@x7$dpxD{{lg#*Hy%fkW8jM1b;7&%D=Us`8i2zXT6`kUEWJD3jW+7VjHTbI zSd{3EXnh}#tr49ROK=y-CVa>topX+hES!?s%I-AH7Pvbu~g-x7J!Y@bKNCIPcJcz4Xp|sK% zg-lsVpRU!Eq|gT}HQKGYFl%F$9uD&QE!_25l`$WXbYR|X52YqWbKZ>?M0pjmpS~x? zOgV#iHwgo$l|sW^`2lIYxYv7{G~tl55U)8jZ_#zuZpzIJ#ntNmqiNI^?{CAa1#_L|cZDJ1wIO|<%Zmm*48y)*GVMm@HuKI|70MW}^ z^=^UNZoDY4RzTlXJMza+o=ibzY4_rjN}+I=Myk8TepR_Wj|5N#@B6PG3RK4npe8Ci z`MY!LuekC>rxbd&9xE+ls0s8Bwq7D+254By1;21Jl>IvU7;pTV{@9_fr8Cen85eWkY z%8qqb&aR(aGIFXSoLkjqrb!d)tEHvW(^0Svzb)oUbJWQ79;yps2Sq2Qz`~86?CN|1PJMxohVdjziKI#e0XpPDx|~VBn3_) z%CKUUKr*8~b=8n)xJ8%~uMZw4IWWWv>9q1=*tY}v*{V~)&b493o(W?qt zuuT6h9qBV08KxBVyvLi7e|7apH8Pb2ZJX%N-_U|oC zVK)XB#U*`OR<|=h=ZOM}4#uz1tgSC+GlVBw@0FE?T`5XQ4{~q9Xuf#$tI}j>?0`p`5%&4#_4v&~sH(|qEe}mV& zk?yH_PQ;qWy?&)>?PEo+0fZ$1_P>}cE7)LHwt64R?oY))WfS9D=kq#tb`c`VZxqK+ z{LI}^$p-SJ<8v^)wNr>Z|FedW#0s}s<_4{UVa-2}rbwhp2ZhK9b=zB2@2Vi|uatHR ztFd}hut2rwskAqn@U}X5!RiPL(0O6hZHHuE_Dj|vHS6a0Fcrw+0>l}nJ4c(tA%*(k z>U^>dfA7jQ)4=4SZuFBFn4+Pod+(JlqKlEHAR)czgqv^81{qhlocE*%b}NdL#nYsv zL&JX<3v`-Jwfqof7{Dd!q(}mNwWlQN=H+93%P0~@-=zmV+c-LYZ21+QVr#L`jVzk( zcN{{W$|~mH!WK%viida@T(Ov*2zARdTz17kdAG1QA(azr+fGm??+7V?9lDXG#Hqd- z(LH=9eaeL|R!^oaDjACly^1Mqei|$qslNJCJ>37UHIN-^=wx+obP6X|@jahj7}v4v>q(AYSr^w#Zq?v9U1MfT4NjGawydg(mh{0Qv&3 zUu?Y?-uHXkUnr}p>lr~~`}v-#0YxvJ;Y0v3x397tF`y3Y_yFXE-+wi*W@C>h0cPd2 z0JX&)H|l;o5Brm}jlE`SW4v2JZ%B#dXQ$Q)x6sZzk+OEm>Gl+yDp zY8PFf3zZ*BxQQXY=;!jOcsvO6Nk#L%5>JX;^gbHr{3Pa4k5!RWm|QfcM@C>B#j4el zUg=30?apMJWNFSgP?>8xFJUH_(>vC#CU3@^@_|enEn>o5J;<~BLa{fT zG?Mz$SnlYu%&XGQ=yU$2j+tbZZ3fw7}6A2aA=s0qtX2|0L?Q&Kx3_;y5!ptraG>H zlgG|g$yOolKy!-Vi}#L!*K&U*%7L3zF@e*;G4%-$d%5j!Tf-#2n4qNr5NlCOuJN9} zXU=CG;q9#j=J+VaoE1|bF_th2%=Hdt8ViZ!qdNoh0G{Dg^-q3O#t%z;HclS#ng>!) z=v!u`fqo)D&9dS_`WRC}p*Goss<^%$6yPJitN)HXGD5Om?mDWDfJ|mn0s}S5&H2ss zX+Vf*jDfk*=ZnHakP{2G>8~su+87N=mk_s#@Uwkezg$}Oehn?aIKTkRq7zj=EN!ED z>n*?xLBXvC^Fg74L&BehXtk~nxcdWF62?}~q2CTB_La7d(furS2J)N<=;MPPmt||s zPQ#~#ECp5oK7cTr@2~Z|gGT`6a3*343!4oK8{mQs^C;{L^84r(fHwrRU0RII4gp}E z4dB=>EHW1jdRGy{vUO^+w4{$9jLrN$-t&hI{>9$@zf#11GE}G&dr_-yHJV3{Ts7Iw zwtF9e`QFK#WId;%J?w4;3pdVGyTEnf5|#3LPQE5Fd_X37;EW@{HTmFriobnw1+&O& zDRtWt%YxK>KXxjb@=n6NDq9Jg`1mNA$;-_1p+>+BQ$=Fe*zS$X)-<-> zUTOcp##@(r(8d!vaa;)9qXhJ`~O}`(#o^rjPN>J*yyKolJ4Qe!0b}R|yBi|F1p^sy?CoCk6KemY5dW3u?I!ZRSRpjP9sCG}H2RrY z@~4)s5U95(DCtU>g$n4XoM`KLSJ<6E>r0o+4r!l@LlvD!l?X%g5oS)h!_b6)ib*Z3wIOFf7|EuvU8uU_%^Z&s~918dhA4?AHd|2w3X% z<)%YoUOn!8HkR^En!1n{N!(<=A&~8~x>F5ph#!E=G0|I>sBHo9(_ob=P$h#r35J(; z38LIjY!nqmwx7NrFvv4;7B@B+cucm#*dy?^LBD=Z1Fa92n= z9dKM~(`wQ#664Uj*_Dya26jEjq_p~;ZdK`f%_O}uggG`84qD6 zH9+)X15Lp6HnW_63rF>5(nA#R>vMAz#mMO+9qRL+n`uo+_;oV*z|c$tIlma!*PC=2 zH~T1`iC=B=ETWnuFE18{ZOplQ23t4{9XE7E+Ge~>(;m{YO)m}}q^R~EBm_TPCYN<+ z_76k~&sN~0eSc&{iq`C-$+4EDV|!uv&iZTX%DmDh6GmL#0t>*pCJk<2}9p6X!_Mnu7q72NlDM#E|zd9M!lyc!gq z)!>dO&>OMJHRa8-3DdGp9=4$oq6i-qYU!ZzJK(^n{CucHw`1y`~zCRtH3 zE{Vm_uc_^MBa%Rio>{S);@rYID}pqs2s`R!YnaK?aLApY02db}`c=bj zo^{AU9x@}R110&~!_(4pZKYEHWhB(iX(^9YW@LRk^^BnrwjBiD8smJ-)+%7X^nePJfTiwNc=u4g975s*gFWh*P5LSj`~vA>=RTyrp^ zyyCDs$D4zZRS$8*6UeqTbM3QiisOLFYM0t@|6Y`ezWI&DD449SLfyg@|GPJ)iz8jCaHqpTf`5FI#~g3UGk_b zw2^461llOr@Hs7(;Im1;Sg5SFjExZPmiZW2U54D`KG(OLDUW|1MOYS@68@YlP(=vb z2h_DqUq^&aX3>&?`pfM=e22GTDy94VLnOMhuhFld*$DCaV61WLrRs-sE3XPgc(m5v z3UINvcc9`Iy4#F?2AY2cKS@?7{KF7`S*AFfrIAYyk(3OS08lL_==)E$`TuKS^dFAk zR~3~FFxjl^%bA_*(#ii;S^bXzRHP8e9l4bFn@axv>|(5hlVWC}K}@sX*d{q!e~BkC zKHoU}8ssLW-cLF3m5`+ABjaQ*k!V4dLJbVdV5+X6u2;lLe^faK9pg@E6U@8vK7RVe zwdE6|ooyPY5j}qA4qsfhRZc${XX8G!zTtH^cXm-%R4oCsn>E4$JyArE>7sJA3W z>p*S_8dQ@CryqqS(Vq-fdnRUz#a2Eice|gi3!d5@3maK9$Sdwh6&+b&&UjiHuL>71 zGZeS8&L+>N8`%ps8aNv9j`{vc-5rjLM5wIO2`h(wx;fHi zaC?ROZxyf0582U$Jzk0HVTbl?u2%GI-GfK)*Hf)SnkLv-L+WvDTi1beJV!0D@L{xC zfbBc0Rk%NWZW@ZplL9v^Qxh2Y6QE*bm^rGL4C@E1d=Klpt$E)=FS zY7oxC@rMzhyS_L!k*LFQmrWG{_Z2p&r@v)-tSTX(p@7x1=Knsb#$g@03dB{?%6Sum zO%M!NKN~fB?Ug2J^JtWZjHNg!hvBE)JuS$+PMKCXAmmz;S)o~GHn{MjVxRoj_O+ZeQav4i3JKhV;7G2x7hm!I;U-x?{nkvJRAnFH`{oM}wjc(YtP3Lm z*ptc#VN0&E3Vhyy@S0;CBs{q*^73P;++Tp4S2IxWGRQr#c~`}& z^>EM`vrHW`$N7dje$+$`mT4PY+2mBJmzl0F-CJ_N=cfy0$7iSRHlMDI4x*O*K?>2o z2Ph+(vyU`Mt3xd>53t+~8NwA}5y^G&f-*zO zC+pkd6M>rAl&~;_ZtAp}6;H3Sd}3L?`=!)z?4a<4$vdyrGm9{^J@{|@2#X6#rb>59 z2a@J!KEZ3&M8$4SR>Ve_E+r*LAzss-5Q+Tl$M5tT%8U{rXlejTr=W;LvB7 zh(c;<_O6d&wKbnY^-Jd}S|5>560w$!twS5yri0Gi#fb)Sq{;kz>G-MYG2)Fatd&yV zY1~=5+Me~g;bx`0SGCATv?)XMJc;KL8DI9c3i5E;(7{RT?e+DH^Olx015YZXeH7R8caFd3~k>{Ll*Lm6fIGp7DF z5iZeB%?V}&Cm=_9cnH$biLqvU^rhszpzGNBOWXKeen@3`3yszkgJ8|irw~y;6zz}ORd2l6TCwfK82athE=N7A zLx7kdJ1BEF$@4fcHQ9h|GkyQd{k8udTK@Ga9P4h(CJo6xP*&RVul@dmvu4f3BBTM2 z#q!Mm5zP!DH>v3(-E~Q)QVkNjd)L=6n4ZRkk}9pTRmqf_C25wL$|>!Hur{ad)6#5s zC3>;mz8Wgp8aw3-TpiMg4XWg^rAxv^zr0HtAN&>FvUkG|Eq4N!-~fr z74l}?Dvt4-GkyN3yg|~+8oHE!KSMpqpkG0x-#yb{j_{x=-F9_$c!GS#v3Y4Zy8e!q zPY@?NnrIs)FAIFsL_jU}IF_xAIDFC1w26jEh|X3^1g<0WE@ega@5gAZAIMGF2e^2^ z52x~>ZjWbb+U!Fex4Ixw1oqQ(|58(8*M9{8#YhacclPlnow&yG-F#>-FQT?}0i}Vd z3YXBshvL318d2G7)eeNvMbeGN(&UKywRKkw$1cXK^%O+{*SbDqpFRLW1?*O1)cvCE z?D-zcT3*{OQj|(9-X>^(wc;VaYw-Ufs+sI9hS)Jby>@$49HFbV_eFUOD+K+Ssc#lV z*>?Tk7_KzFOnR}6C1YJ-V{9%jY?cVuF;L1}A(PBQ89aC$7U15dMeo9!Y2KcBC%64> z{9(&%&CnoiZPquOV!^{iOB5(=ag$-Y8;6^5HW3FoA=!Mup6^n?<&qSee3q-!Ho(~c z%Gyq6^VK5n<}=r?|JjxL8mcEP*t#ki=BAh_C*7TrFUi&h$ZhIA=30(U){+oN#OL=> zKja+($F9x+83cT**VoP3DM)N>rFfUj&tZ|&_OX2Yc-aJ*6z@b}I3(4CuDs_K0_Z5%62a#P*^mFw*bD!O0Bs8ZN1mR|F{N$V;? zNHxm)XC;RUb5p=A>!TeTbJlX;H_)8GReB7})EHZFHkQ+ik^^AJ|nNi=r%y4_z7ytdQVp2Z*<=d4nJYik@JKmZ7p!)&! zK&9+CI~P_A{<$f?j=TPvKQ63XN%)ba#COt*f!9Nf3P4F_1g%M0jf3yWw;e}%K2O!YP|LqSi7zBH-2L7ICm8v5ho>6o T$qexSgrJLX1Dzt+jr;!tTn#ME literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/sccm-primary-domain.png b/windows/keep-secure/images/sccm-primary-domain.png new file mode 100644 index 0000000000000000000000000000000000000000..ca2c5a0b78fe3811b355c93ae2805a8bdbf1abd4 GIT binary patch literal 11582 zcmaKSWmFu&)-4`_gy8PM-Gc{r2r&5I?gV#tAKcvr*9`8iAvgqgcMtH$z3=^a-;Zyv z)!ikltE;+XoqhI+_^v30ibQ|}1qFpFBQ3511qDO&o|Z&}dA}p#EGND{pq*5tM4_rD zi4Na0aONTkB2Z9uamarS;otKg9i+9KprAhW{kx!t?8{8v3-O#KG@VuL&79o~9ZjJe z3@z=Pne9xS$vBx=nR#tEd=;Uf7;9w2MF8&0r#>Gv0Wv?|R_r*{8R^O+$T>ZvNGOV`+Q3d`A# z&b>HVy)mJw37N$N8N}GT{_5nh>L*~QO^BJ-uwLjYvg{b4J0@0J{Za%|wfO^&3AA#< zr3L^1Tu=m&o({6;@C>bviFSTJJFem$9b4wg(kL&%khm4t80E*yQLe}Ec|WL&p~YN> zCOt+H!^ZufMmLMh_05qcvT?-hROk0gSxZv890R{V_<g{lZ4R9MK(_QR83 z&qE0E$$_5sy8XT@FQEG}`B#RFp{_j34jDu;^zn=m&M1!83lNcLt@XfU%QRq28A!@gu15)Z zfB6X#J*&Rp=DwmmB-+@VVK%?gPV)UeI=(9-Cq(3uDi51ORFyW7ejwV3@>zD6@PPgn z#xRn<3>eV3sdDQ8&Zf$d-1bYrRZ#vinI;`LJt&m--Sb@PY}KnUhx6Mo_a-JL)d<2{ z)J+Mn27nEmJO*c1eOUusDSpopRd!s!bp2p{G%$}`4#Er`!mS5q^A2@33Ao-`xvt#` zdf9W|M9&BtCT&~qM6);*g!YKDP8zrq-9;5|%3Jj%9(jl|Ddq>rM4LNyai{UbDKZNc z-?a(*ws8I>$>yOga8a;4JsBBX9ZR1NhP^;tS#0}_Uc*gaYO!b^0${Bua8-NMvdE!7 z!H$cLMrq(HXSZIlBm#*uVgzx>Q(T9Qv9Sb{-4Ev!}oEu@;O^g%*B(yL-)n7u^%0=6p+bCDBG$ktD?vhF3kP8ik z)^cm=H+54hZX~`6pjt|-3E79 z+621FvG|k38o)D10CO%192nR13LmGG?+WHn?Tkt5rtnz#E^Dat3r|1?_~))>PvImWy5X;97R!V24n z<{>P>w~yhb!AjQAg3b3Qb;$$-H2@q!}O=r)*)}f5iSmPEV^WQplev$d%cQ$R`~XS(6Ne= zw?id;u)Tmj0L#Msbkpa%oOx$PMl47JI(Y)OR@CeEgyZbJd_p8G~f`m5u{QAi=* z@=^I{dQ*(+YFSNZyX(9ZsdsVbE6^~jB1Y`nr{bEfuAScB$W&Oeq`R(pF9A9(f<9G0 z+HfW`LfE4_}vMBlOmN@UBOdP zC*0pkS^gts{Bz(W9@GDKhPQmR?pg>ZPU0#?htsCFi_1g^KLzQQ-bbN|E?@Qz58Ua) z#*fD@j%!b~p+Y6!7}K^cN9HE?jK&so7;!B}u5lUfn7)7r65~!1mk>A&{eNwyHFYE9 zOxZ*tsEuTFV_w1ASZQRm702k~q_aklJqPhrw4Du|vCSq~7DDLG4$w6XrXOJ>&sPs9 z9hh7YyFc<Np3j(H4oE*Xk5dtCkFk8bgwTF|W*@4Cr?!II)pm_bL@SF63#yo`0Zpp-Dsf-; zn9OG~3nOxI(jIV}=R$4M9yjIE=O+*Ld}ZafHhm_;QY={59TaI$zZJfp?t>R49Sp>m zfg*xEWkmXWu{tsGpW;^edTM>1z397_fy_-!wC<&sZr6KYOXg+b1=&O9Tg`{VUfqC& zLVJnkYVK*&;p2nW+*cKpp|TEF`^A`tV8YF3o-+H3jvW(& z#+ljfKf{U(V80+2WntEW<b?e_?;PQ1Q5xF)rb{zC5|yyO=$7 zTB14Wq6qUWACr2Hn6HRFch}SKinvyMY8CI_5k4`j?G6g80l?Ut21V*H*qvtWOAEBk zi!ZR;)V=y7&s^eIRwe+-7`uhc^fHUd9jtDr{-eEC;pO8kKlV@tPU6xeBJzfuA8F zYII~I>Yvt|?+%r-d-whG!c`H=Yzv0=ixWDK>JyH);r@m)LTL#Z0aN2{0IpuVtIAu$ zVSVRMO}CEfFt&gkSii;>^7_4qKM%djZQCk8mTqDBj_*fQeum+wuPrw0S;RX7s+S41 z=Du*`+_pN!4b0PIPp>&>S5q#Ew&+eyhcpwX-3OI-$7Gy6o}TXF5)s1;={y_R)>NKB z+XP|hiQ@a*@<1kkbo*Ut+Ls)or@I(NRo~60vQ|-AyGmf02fi>aA9^uy7w@sfjO<;m zCB*~`<-DCa_s<4t%eWw!R?nn6QGmhJp6f@HqkVS}hbQD~>j=%bv6+Md3ekIJ)fHb} zmZ6#X3xHy(g^5Wm&w0_>$qS^u!&c~ROc-#BgU|R|HT$mTLue_bH<7}9k-%Q>*4`so z6BP}Fvu|i^ji>9E-^i8R{SplH?rRIx_2eEWWG5@TZD&*rso5x4l%xuBR?uO5087vW z8C-DexobA-86N(8>>Hk)?4@2EcWO@hqN_cY>i0m3`DW!{))Uq9%`F`=07&n8n)wh~ zz0hHss^{B{<$$MT4DoZLJu)2paeO<(qe-k}AIsl4PFb42(`$9DOQ)0|JY4yLQ+gOUkgBhcdpTFS7l3A&07CzG7TznRE0GtJZEj}QjT9va?r#WDd~#j$ z@Caa-aHWE56MR-ZGf({)kAE^5ZOm;Jityxlhc8Wy`F@SO3 zEo#vuJd31Rc46tCUuHP>J*qn|ozStUefE@4Ff_&u8tHZQp`KppKu$4R+xtaYECA`@W{Eo}r7c|J)GitC#})=G*JiECsoB%+rz5TiY<*?9%uzUP#oNw~6L3c@~xZ=-@-3TNz~u-YjOB zop(A=j3|L7>+oI_T z3>VGn0n7aasLvh>lv0U4hE4np4lWws+A4@dxgVHMJ)+|ja?g3}yEyq~TU%I_>7101 zM#0>)`!ve?Vao_@nRMLp%(&OOKMh?YQMxFDOsDOd%cM0NZ_1Sf|04~munSQYm0(vb z1`5n|;Px1NCYU`)dLVg8NSzxRTTmW4>bI+LOUpv>i|bIsnWSCay~17HdiLyc(z&@M zq4vTMUJ|RcL%Xf0UIB@*jiki#pZ-q zLF#p9<9KDs81f5BDew`Mj(2VFj(@dUil#U7>Ze3X^&vjV&)9uyX~Cjpr&vs^K;&A^ zq7)0<68yJ%MMn*58OiZERl=Lf)Q7du7rcP)U(?q{VNZzu+6hbFvAO*z{$3;YU19-> z8}PNJ$d#LMMiX{*Ne_u>^rlhA_s2Ll4pEGvO9QBQHVd-ApZF3zyQIxm{qf;0!hd=} zKCM5WYRKvQC(e`ha`bsDK;xLICwbKwlqOP+(wGcFf^;?XkM;94+KsOvfRoos)X7~E z=`fGEvN(vQ)Z7vWk8|lrg0F&VQNEGK7ILY>vyhYY$QOhGkL)f$tA?hT=f>UJf?WGV zl`ms7SoZA3P;(>qT+@8e`dU*6Da@8&^9j>=s`a(HByvx1W>)awqr@E3&TDMgfXW2R zZQH8cp$(n#NqC*@Mjcb1BYXDHv8=FB!{2UKRk^rIPF}I94g>o$U6h$>Z@JyMPxfYM zpsrty7a|$k)~2|?IfWC60JwJx9!_+ce->R8<>;eSv3EKl?lOy$lDvx^XHV^J`))GQ z52$=IG4A_d~yF+cyp8J8F|>Ai$~`xv#}Fdn!Fccfi&L z;5P*rQOxN*{m9AJP+Nc^owrInnpm4=XxO{j>#~c`D03Tm8f3RT0r)^imOU-pJ~;ynj@bcaL0WSxox)XpD3#k|6)PYx^s&hhH!|A zo8o^oD#qjICaP_`T*sSYp6Cxa38Ei?oh?0-YTD0MtMw>&4*v5YRm0o(NRPA5eRR+P zhYy~`!-hC?iGw>epaA>ETk_qusNlX!d;H6RbjmgD3{sNmY|+}*e z+Qa`ForPdlwp^8#!zQeC`Y<@$2YFA9ftc`TJLL2=kTQVCbs;+`Xw1B<0&Ly8H(Tj4 zDS>J`=WAy5H0Y#8ZWudqhRij!82I|LH__V6vaGxM*S)0hQ%WNn9TPl_`qb=q<%RFl zX-!WC@_OYp$t`kLqxh-%PwK^ zqv8_m#`&;Y&T|;{<|!vZ$7R6)DbwU?aqU3wS{M({fl}^=HmUW@(>CDBP38E|_$;KL zqOEOop?|!zJ&fF>QM~eZc2yg+7yfoc-ZplN(;*EAnAwzsH63*`WJZ8pkR2;FDJa-PL1Yq%qBw_u~Xi) z<_lBAioB%U>qFO#V)4F*rUi4tawr{Veh6UOyoA0XMUdPrXPV!-PkrLq28hY3!Jc-MmXLj?C>ngg;-wOYgxTei{9M@VVUE0bxfuf840aVH0*a0Psu6vhneFx zPl7^jrY!k%Q=ya+bCqs_Dj539SFQp6Iy$@SUi_o-BZBgEpX=f}jl-ERFh7o*HRtTJ zZ@!afXjFQLy(Ml8P03HJ;iYzc8N%%7g)%-RiCw}fUJjgQ1?rpxHt)astuzT7zzHVP zjG71FLm4q z=!+nlQsQegGi9qDLfmUh#Ebd(TiIYI07j?yxOt;wP3HB7js}UMSThgn8sG8$J)}>a zN-XQvUSfpHUMqd6emCqTruAbyZ3W#cSlo4zaYkK+gxj5%#FtwlRYk3rrbmnp0t7B` z;wcpXZX4dN06}bKH0_0zcnn-(7Y2Gh=35fA{x1t~nwmt-?vI|%K%mhjr33J?u8BN_ zfu5coK@MXhzC?VWnDgdp(I@VFmeb9JYhkt#bZFBlKAex$X2FPD?jsv?mXNb-(vUVq zz^;X^J{~%YJeVyKe7WOz?QJJcvEE#5vped@5WBBfU|%CRL0U1boNJQb^~Fd^4Dbam|j5T zDY~UyCamZ{I>*xi^;l8Ea}&C>U`F!F3_Rlu^KYfd97}(H%riG3{-GYcB|zqXS)Pu6WiL_tJ-Ji&v}|pH>UYh3r|8@- zhhnv>%-cC$z|EJ$TdmTf==tsp`BfL#lk3~7h}kFHhvClip{ppuk4ZO}sWMa?kF>U^ z@FBax-yTo<{IAz4bV8R*gr1GuTpoTCsQ;hZew*&;G+Y z>5kZjAkd9+Wp3C2ln<&4c%?wSwjE(|UR4BH$rSZ&6n}wr} zDGPAASRwx&tZ(;=VQFxxHU(mbQP1_b;?*MdAYqHLS(SikE{#ovNGxI^i8Tk?T;GZa=C+71{GP=kCMFJbe z1sJzK|J0z1NFto@ak5YlHg<)XX3oA$^W%DE0w%EA;?LMW2R93S+ghn z1Gz(HBNoVcMqVC^Ej*@1WTTCM-C+E9E4@>pZBBBxFd;pnqc8=?Y z3`iO^f;a5M1N1jduQ4_`OIAa#-)rmodw5QeDLQucrP-^b>1HM^Zc7sRlBrOc&K6Ab zNh+9VVP+;+RNg!4kP)Yp%N3G;_xEu*w5^cvLz=)2*FSO0Jy$v;JVg_~!#d~XEdJu+ zqM-tZ>< zHn#j{!t_8$aLav0lzNu_(jFL+_PWE40@?+1Mbg{#sD>biCr2NJ6G-mIE__1#vli^F zdQ)0)IRGOZ#e@PDQ(ZAF7yC*76TIsfED{#QAM*cbi7Q1EF)4UH{lJxu&t`sl+f8aS zJity>T)$qx3{@^Y5kC6wu}PM77opof8E6pdJ7e>|62*2$^UN~ueV4m8I4|PHi%X%^ zA3m~Q$Yzfm6Dm|AyGuIg@row?o~+IDJs~`TYb;giX8_Y17-w!9yhdF{n4nTd=JKFNQ`IW z8PCeCGdJ5_QHm62^V2N`3=B+fn=Jj}J;mp@Jov4xTcdzaq_{&;Ywh^>I={FHm_Wc( zJRjK4$={`LK9V!9Y!^I~WyU*j@Ua!XTex>cLQHf*tq+D$#vzCK z{@><93HUQ@m}cNvcXxL(gT~)?pnv|nhTQECDuOCT zi13vHJ6IoEfTRWjxqrCaPEJm~e{cU^y^!k(Ub=iJbgVS|<^nZ#tpE=XBtJhN{a>pv ztXYQN?{9AY3aD%jLo380)`-zpS6A1{ONyaGZ@xgGnB&a~#{s?q^GzOj12#7eFKcc; zG?3|CZsc)>vi)aB!EU+l^+KsjZ)8vLO?5f3+~1~#+4F)&HxP?1kI0)}SlG_RI*7E- zU)*U*o1aYx!lriHjo4ts<-!5J%D`4$yf}G5`H2Xw}_X!F+ zJgTi4d^G*IS7o|XIiaCv1H^!8sArDb$W90@U}&2md}yz|R{MP(gpq@Sf@VsUQdcD< zB{71edH1&lqL7i1X&7jDcorrnKQRLx@;s0>U#PJkIBs9L?{LrSzFY`&@%vui_Yl7kijNAYowHW87HVk1hD*nBE%0EYReb3BR>FSHSK z-7Kn)p-ZCs4iR#Uf_QMb7c+Y8K~dO1u)CPiWge$b zqjsl-bib62_&FI^TuQ1&yXlBWnqCKDrywt%#Yz(|Yh`t0vfKS*yt(;nAm9_xSN}b_ zU_WS;I{x)4>)l2ns^i(A52`fn+4DyPX&L7&ApF-t zQ2yrD%cU)Ve)nf882am^voj8!&WF?luZ)@OSP#CMnK>O38*EK^QzSTNS>@rYJ|63l zMaRGo3`k}=ThI*>t$Y~-*Jkn@SJfrImXs3F(wKhD&$Bfml^4uBEvqV$+zQ-c%z-i- zVcRjSthTbV3wpCqa1O1G@%*3d{F!!8op&GkANE~u*bMQ5_nskA^tZRSD-Kv#Slza& zsxu%;DSwW@pr8npOdk8m@$q03ue+0g53sPXT%4S*caW~0)A!jV52~p-A5CVsKU+nv zrfCk*{zNK-!t(0innMdcIV~0tufNm)M^tOK+8Xo$4MW1z)b#XEi_=Vr!r|ee0|QP} z{#|2ZW3gPSUb91hWT6NX*+=Df0*OaJ;Cr`Zj*P?jFsA={budl25o$V?^7!yDEKSA9 zc{4=n7wjw=eY{X3Hrna){H?a2pg_0H6}{-H4^8+p`&2eR?&RE8US1L2yu{a6Uuj{t zGoZKkU$AQFH=B!OXl&lEU%MeNNT=^M`Sbm`ewVM{Ut4>l#auzJ`RQr&QF3xF72t$OhiHn?E@1c1AH?z(SHesM(wxXR9FLtVi*;J9}R#ntoS zk-tV+cPA^uTjfozP?zMjr!>`iLd)|H4eQ0tQ3ylztjlea#?a8f5Y3>J-tA-0kFll# zXY&^pveKHjA47-wx#Q=Acn1v5IZcbaT`jo`pAjF%U%lA)_q5;e@H`J4f5i=wraxl| zRmZGXShX=-Yz-jOq^1+Vn{w~9;CY)hZ->m;eqtHEsbzJOQ4lDxWN~}6um@kZEZa}{xsb`;GEb(L<4kKSZdnb&U=Y` zZjaQ43#+R?Ma<33@w=Y*eTG%_~Mue)Fn zK_m6PfDUgp9m6qDU}9nl1Q;B}g@^mU$QdNU zPM#LVChoc_dGd3Hb+ro;5^9$#)7Jc{D?&El%)DvC-3~W#iKw%8jZ$!KVEF=|#}jqS z+Ap~;t&SVC!F7vQfjM~>_n|u2HqQAD4ITh8U0U;|MEP3pfv@CU+ zxGV|DrFxo|ZDL zsHU!tAV-Uah876eAY@A)-zbMy;q|h>{B686R{*!Tr$T&3kbY0!4Ov^Ua85HG&X3*R zbcH9JYW(yZSGg&T#PoOh;qd6Uhg1Sa+}D#4iy~G-894s8m+XO@s45no8;<^<=p24r zjdw|aDwo>@u`8i~-p{^sUp14f+{?%tp4?aZw!QSkLW zM58Yn4fmo1Eh+(%M$!KbNnV=*^cml5B7@406Zwy9uv<8k1K!E}=Y?7#Xxu~ru)hup zk-Ed>yD7r!v?ni3KR-X;pM&&JxFK@kb9it-n>ecf_N3vE2Mz9a8y+o!3F&S?BM~6u zzIc0CerNzKrmU>Y&Sqc=JN~8ZeP<;zO{dB4`MuryVHSxx ze5qwD3wgkvSF7z7ZTQk#BSP9R0N{Bkrtg;)oU)wdH91y<;l^RZ+BE@ay*M0r)9(W2e)Y-hWORnWtW z&R7aa5jg0^@YEed|nc?A}ughbgVmz-@ zHy1aJXDvpd>@083x)6Q%Kk6QYn1^aY)Fo>YOt+W985IXshliHnx9!BYS)rVyGb5uj z-QOa+sHpX2Xri`ntkzz=l(cD6)!MA8a;mD5O-De(6W-f2!VBz?MjHHXhj7(Dsu4H2=F7GAz-{^+k-QIAhnH zq@WU+pHU>Mz*ZA+iSicCJgNf#O=Uw{lD;1c?V9Xs(?)AyA?%(7h46UhH`t4cfBMz(@1u)=Bt%guC zY@!Bl2K7&YddK%@(7#tjfj%oeMIZt>SppeO>Q_)0V=*{PvNSPsOqNu@>n^Xc62Hrq zK*64#&X#&cb5`mRq|wK${|UJbCmG;SQ+RD?X^9yzh=YQ51;#$p{?w_aWU-iDGhKt- z0wk$o5`GVwV`LOyg4EW6<3{$TNjK>blAka%K|1=#Hb7$_PFR zUsDrjc_X~->>ENXme?PgttM@R^gb(g#1PRfPAq7IAo4ec6CT=NT-9MRw6dqtT;BxT zz1^@x81T3Dk4s$cYf0BZ2EuOrfi}MuQ>PgHke~UGf=DO)5$&@9;k%I*7SdndgoHC- zj&aC=7n_N3LY8aGmS{S$!C6VTzMN){PhZ*~yo-&Yw<-X#q4o2vJCs zTaG)j_&9WPSAj=gR4yGJwHy - -Policy -Options - - -Use Microsoft Passport for Work - - -

Not configured: Users can provision Passport for Work, which encrypts their domain password.

-

Enabled: Device provisions Passport for Work using keys or certificates for all users.

-

Disabled: Device does not provision Passport for Work for any user.

- - - -Use a hardware security device - - -

Not configured: Passport for Work will be provisioned using TPM if available, and will be provisioned using software if TPM is not available.

-

Enabled: Passport for Work will only be provisioned using TPM.

-

Disabled: Passport for Work will be provisioned using TPM if available, and will be provisioned using software if TPM is not available.

- - - -Use biometrics - - -

Not configured: Biometrics can be used as a gesture in place of a PIN.

-

Enabled: Biometrics can be used as a gesture in place of a PIN.

-

Disabled: Only a PIN can be used as a gesture.

- - - -PIN Complexity -Require digits - -

Not configured: Users must include a digit in their PIN.

-

Enabled: Users must include a digit in their PIN.

-

Disabled: Users cannot use digits in their PIN.

- - - -Require lowercase letters - -

Not configured: Users cannot use lowercase letters in their PIN.

-

Enabled: Users must include at least one lowercase letter in their PIN.

-

Disabled: Users cannot use lowercase letters in their PIN.

- - - -Maximum PIN length - -

Not configured: PIN length must be less than or equal to 127.

-

Enabled: PIN length must be less than or equal to the number you specify.

-

Disabled: PIN length must be less than or equal to 127.

- - - -Minimum PIN length - -

Not configured: PIN length must be greater than or equal to 4.

-

Enabled: PIN length must be greater than or equal to the number you specify.

-

Disabled: PIN length must be greater than or equal to 4.

- - - -Expiration - -

Not configured: PIN does not expire.

-

Enabled: PIN can be set to expire after any number of days between 1 and 730, or PIN can be set to never expire by setting policy to 0.

-

Disabled: PIN does not expire.

- - - -History - -

Not configured: Previous PINs are not stored.

-

Enabled: Specify the number of previous PINs that can be associated to a user account that can't be reused.

-

Disabled: Previous PINs are not stored.

-
Note  Current PIN is included in PIN history.
-
 
- - - -Require special characters - -

Not configured: Users cannot include a special character in their PIN.

-

Enabled: Users must include at least one special character in their PIN.

-

Disabled: Users cannot include a special character in their PIN.

- - - -Require uppercase letters - -

Not configured: Users cannot include an uppercase letter in their PIN.

-

Enabled: Users must include at least one uppercase letter in their PIN.

-

Disabled: Users cannot include an uppercase letter in their PIN.

- - - -
Remote Passport - -

Use Remote Passport

-
Note  Applies to desktop only. Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants.
-
 
- - -

Not configured: Remote Passport is disabled.

-

Enabled: Users can use a portable, registered device as a companion device for desktop authentication.

-

Disabled: Remote Passport is disabled.

- - - +Policy +Options +Use Microsoft Passport for Work +**Not configured**: Users can provision Passport for Work, which encrypts their domain password. + +**Enabled**: Device provisions Passport for Work using keys or certificates for all users. + +**Disabled**: Device does not provision Passport for Work for any user. + +Use a hardware security device +**Not configured**: Passport for Work will be provisioned using TPM if available, and will be provisioned using software if TPM is not available. + +**Enabled**: Passport for Work will only be provisioned using TPM. + +**Disabled**: Passport for Work will be provisioned using TPM if available, and will be provisioned using software if TPM is not available. + +Use biometrics +**Not configured**: Biometrics can be used as a gesture in place of a PIN. + +**Enabled**: Biometrics can be used as a gesture in place of a PIN. + +**Disabled**: Only a PIN can be used as a gesture. + +PIN Complexity +Require digits +**Not configured**: Users must include a digit in their PIN. + +**Enabled**: Users must include a digit in their PIN. + +**Disabled**: Users cannot use digits in their PIN. + +Require lowercase letters +**Not configured**: Users cannot use lowercase letters in their PIN. + +**Enabled**: Users must include at least one lowercase letter in their PIN. + +**Disabled**: Users cannot use lowercase letters in their PIN. + +Maximum PIN length +**Not configured**: PIN length must be less than or equal to 127. + +**Enabled**: PIN length must be less than or equal to the number you specify. + +**Disabled**: PIN length must be less than or equal to 127. + +Minimum PIN length +**Not configured**: PIN length must be greater than or equal to 4. + +**Enabled**: PIN length must be greater than or equal to the number you specify. + +**Disabled**: PIN length must be greater than or equal to 4. + +Expiration +**Not configured**: PIN does not expire. + +**Enabled**: PIN can be set to expire after any number of days between 1 and 730, or PIN can be set to never expire by setting policy to 0. + +**Disabled**: PIN does not expire. + +History +**Not configured**: Previous PINs are not stored. + +**Enabled**: Specify the number of previous PINs that can be associated to a user account that can't be reused. + +**Disabled**: Previous PINs are not stored. + +**Note**  Current PIN is included in PIN history. + +  + +Require special characters +**Not configured**: Users cannot include a special character in their PIN. + +**Enabled**: Users must include at least one special character in their PIN. + +**Disabled**: Users cannot include a special character in their PIN. + +Require uppercase letters +**Not configured**: Users cannot include an uppercase letter in their PIN. + +**Enabled**: Users must include at least one uppercase letter in their PIN. + +**Disabled**: Users cannot include an uppercase letter in their PIN. + +[Remote Passport](prepare-people-to-use-microsoft-passport.md#bmk-remote) +Use Remote Passport + +**Note**  Applies to desktop only. Phone sign-in is currently limited to select Technology Adoption Program (TAP) participants. + +  + +**Not configured**: Remote Passport is disabled. + +**Enabled**: Users can use a portable, registered device as a companion device for desktop authentication. + +**Disabled**: Remote Passport is disabled. + +  ## MDM policy settings for Passport @@ -338,7 +323,7 @@ The work PIN is managed using the same Passport policies that you can use to man ## Related topics -[Windows Hello biometrics in the enterprise](windows-hello-biometrics-in-the-enterprise.md) +[Windows Hello biometrics in the enterprise](windows-hello-in-enterprise.md)) [Why a PIN is better than a password](why-a-pin-is-better-than-a-password.md) diff --git a/windows/keep-secure/index.md b/windows/keep-secure/index.md index 71248e5e09..8a193339b5 100644 --- a/windows/keep-secure/index.md +++ b/windows/keep-secure/index.md @@ -33,7 +33,7 @@ Learn about keeping Windows 10 and Windows 10 Mobile secure.

This topic lists new and updated topics in the Keep Windows 10 secure documentation for [Windows 10 and Windows 10 Mobile](../index.md).

-

[Block untrusted fonts in an enterprise](block-untrusted-fonts-in-an-enterprise.md)

+

[Block untrusted fonts in an enterprise](block-untrusted-fonts-in-enterprise.md))

To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we’ve created the Blocking Untrusted Fonts feature. Using this feature, you can turn on a global setting that stops your employees from loading untrusted fonts processed using the Graphics Device Interface (GDI) onto your network. Untrusted fonts are any font installed outside of the %windir%/Fonts directory. Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process.

@@ -45,7 +45,7 @@ Learn about keeping Windows 10 and Windows 10 Mobile secure.

In Windows 10, Microsoft Passport replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and a Windows Hello (biometric) or PIN.

-

[Windows Hello biometrics in the enterprise](windows-hello-biometrics-in-the-enterprise.md)

+

[Windows Hello biometrics in the enterprise](windows-hello-in-enterprise.md))

Windows Hello is the biometric authentication feature that helps strengthen authentication and helps to guard against potential spoofing through fingerprint matching and facial recognition.

@@ -61,19 +61,23 @@ Learn about keeping Windows 10 and Windows 10 Mobile secure.

Introduced in Windows 10 Enterprise, Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Credential Guard prevents these attacks by protecting NTLM password hashes and Kerberos Ticket Granting Tickets.

+

[Protect your enterprise data using enterprise data protection (EDP)](protect-enterprise-data-using-edp.md))

+

With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data leak through apps and services, like email, social media, and the public cloud, which are outside of the enterprise’s control. For example, when an employee sends the latest engineering pictures to their personal email account, copies and pastes product info to a public Yammer group or tweet, or saves an in-progress sales report to their public cloud storage.

+ +

[Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md)

Learn about an approach to collect events from devices in your organization. This article talks about events in both normal operations and when an intrusion is suspected.

- +

[VPN profile options](vpn-profile-options.md)

Virtual private networks (VPN) let you give your users secure remote access to your company network. Windows 10 adds useful new VPN profile options to help you manage how users connect.

- +

[Security technologies](security-technologies.md)

Learn more about the different security technologies that are available in Windows 10 and Windows 10 Mobile.

- -

[Enterprise security guides](enterprise-security-guides-portal.md)

+ +

[Enterprise security guides](windows-10-enterprise-security-guides.md)

Get proven guidance to help you better secure and protect your enterprise by using technologies such as Credential Guard, Device Guard, Microsoft Passport, and Windows Hello. This section offers technology overviews and step-by-step guides.

diff --git a/windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md b/windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md similarity index 100% rename from windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md rename to windows/keep-secure/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md diff --git a/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md b/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md index dce10aaa6d..d32bae622c 100644 --- a/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md +++ b/windows/keep-secure/interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md @@ -20,13 +20,13 @@ Describes the best practices, location, values, policy management, and security ## Reference -Unlocking a locked device requires logon information. For domain accounts, the **Interactive logon: Require Domain Controller authentication to unlock workstation** policy setting determines whether it is necessary to contact a domain controller to unlock a device. Enabling this policy setting requires a domain controller to authenticate the domain account that is being used to unlock the device. Disabling this policy setting allows a user to unlock the device without the computer verifying the logon information with a domain controller. However, if [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md) is set to a value greater than zero, the user's cached credentials will be used to unlock the system. +Unlocking a locked device requires logon information. For domain accounts, the **Interactive logon: Require Domain Controller authentication to unlock workstation** policy setting determines whether it is necessary to contact a domain controller to unlock a device. Enabling this policy setting requires a domain controller to authenticate the domain account that is being used to unlock the device. Disabling this policy setting allows a user to unlock the device without the computer verifying the logon information with a domain controller. However, if [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md) is set to a value greater than zero, the user's cached credentials will be used to unlock the system. The device caches (locally in memory) the credentials of any users who have been authenticated. The device uses these cached credentials to authenticate anyone who attempts to unlock the console. When cached credentials are used, any changes that have recently been made to the account (such as user rights assignments, account lockout, or the account being disabled) are not considered or applied after this authentication process. This means not only that user rights are not updated, but more importantly that disabled accounts are still able to unlock the console of the system. -It is advisable to set **Interactive logon: Require Domain Controller authentication to unlock workstation** to Enabled and set [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md) to 0. When the console of a device is locked by a user or automatically by a screen saver time-out, the console can only be unlocked if the user is able to re-authenticate to the domain controller. If no domain controller is available, users cannot unlock their devices. +It is advisable to set **Interactive logon: Require Domain Controller authentication to unlock workstation** to Enabled and set [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md) to 0. When the console of a device is locked by a user or automatically by a screen saver time-out, the console can only be unlocked if the user is able to re-authenticate to the domain controller. If no domain controller is available, users cannot unlock their devices. ### Possible values @@ -38,7 +38,7 @@ It is advisable to set **Interactive logon: Require Domain Controller authentica ### Best practices -- Set **Interactive logon: Require Domain Controller authentication to unlock workstation** to Enabled and set [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md) to 0. When the console of a device is locked by a user or automatically by a screen saver time-out, the console can only be unlocked if the user is able to re-authenticate to the domain controller. If no domain controller is available, users cannot unlock their devices. +- Set **Interactive logon: Require Domain Controller authentication to unlock workstation** to Enabled and set [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md) to 0. When the console of a device is locked by a user or automatically by a screen saver time-out, the console can only be unlocked if the user is able to re-authenticate to the domain controller. If no domain controller is available, users cannot unlock their devices. ### Location @@ -117,11 +117,11 @@ By default, the device caches locally in memory the credentials of any users who ### Countermeasure -Configure the **Interactive logon: Require Domain Controller authentication to unlock workstation** setting to Enabled and configure the [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md) setting to 0. +Configure the **Interactive logon: Require Domain Controller authentication to unlock workstation** setting to Enabled and configure the [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md) setting to 0. ### Potential impact -When the console on a device is locked by a user or automatically by a screen-saver timeout, the console can be unlocked only if the user can re-authenticate to the domain controller. If no domain controller is available, users cannot unlock their workstations. If you configure the [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md) setting to 0, users whose domain controllers are unavailable (such as mobile or remote users) cannot log on. +When the console on a device is locked by a user or automatically by a screen-saver timeout, the console can be unlocked only if the user can re-authenticate to the domain controller. If no domain controller is available, users cannot unlock their workstations. If you configure the [Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md) setting to 0, users whose domain controllers are unavailable (such as mobile or remote users) cannot log on. ## Related topics diff --git a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md b/windows/keep-secure/microsoft-network-client-digitally-sign-communications-always.md similarity index 96% rename from windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md rename to windows/keep-secure/microsoft-network-client-digitally-sign-communications-always.md index 989b9a6a0d..5eed7b34b9 100644 --- a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--always.md +++ b/windows/keep-secure/microsoft-network-client-digitally-sign-communications-always.md @@ -32,11 +32,11 @@ Using SMB packet signing can impose up to a 15 percent performance degradation o There are three other policy settings that relate to packet-signing requirements for Server Message Block (SMB) communications: -- [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md) +- [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md) -- [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md) +- [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md) -- [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md) +- [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md) ### Possible values @@ -52,11 +52,11 @@ There are three other policy settings that relate to packet-signing requirements - Disable **Microsoft network client: Digitally sign communications (always)**. - - Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). + - Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). - - Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md). + - Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md). - - Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). + - Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). 2. Alternately, you can set all of these policy settings to Enabled, but enabling them can cause slower performance on client devices and prevent them from communicating with legacy SMB applications and operating systems. @@ -135,11 +135,11 @@ Configure the settings as follows: - Disable **Microsoft network client: Digitally sign communications (always)**. -- Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). +- Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). -- Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md). +- Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md). -- Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). +- Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). In highly secure environments, we recommend that you configure all of these settings to Enabled. However, that configuration may cause slower performance on client devices and prevent communications with earlier SMB applications and operating systems. diff --git a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md b/windows/keep-secure/microsoft-network-client-digitally-sign-communications-if-server-agrees.md similarity index 95% rename from windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md rename to windows/keep-secure/microsoft-network-client-digitally-sign-communications-if-server-agrees.md index e4be762172..d9567dee32 100644 --- a/windows/keep-secure/microsoft-network-client-digitally-sign-communications--if-server-agrees.md +++ b/windows/keep-secure/microsoft-network-client-digitally-sign-communications-if-server-agrees.md @@ -32,11 +32,11 @@ Using SMB packet signing can impose up to a 15 percent performance degradation o There are three other policy settings that relate to packet-signing requirements for Server Message Block (SMB) communications: -- [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md) +- [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md) -- [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md) +- [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md) -- [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md) +- [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md) ### Possible values @@ -50,13 +50,13 @@ There are three other policy settings that relate to packet-signing requirements 1. Configure the following security policy settings as follows: - - Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md). + - Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md). - - Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). + - Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). - Enable **Microsoft Network Client: Digitally Sign Communications (If Server Agrees)**. - - Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). + - Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). 2. Alternately, you can set all of these policy settings to Enabled, but enabling them can cause slower performance on client devices and prevent them from communicating with legacy SMB applications and operating systems. @@ -133,13 +133,13 @@ SMB is the resource-sharing protocol that is supported by many Windows operating Configure the settings as follows: -- Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md). +- Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md). -- Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). +- Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). - Enable **Microsoft network client: Digitally sign communications (if server agrees)**. -- Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). +- Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). In highly secure environments we recommend that you configure all of these settings to Enabled. However, that configuration may cause slower performance on client devices and prevent communications with earlier SMB applications and operating systems. diff --git a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md b/windows/keep-secure/microsoft-network-server-digitally-sign-communications-always.md similarity index 91% rename from windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md rename to windows/keep-secure/microsoft-network-server-digitally-sign-communications-always.md index 8b44bbff56..91004a814c 100644 --- a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--always.md +++ b/windows/keep-secure/microsoft-network-server-digitally-sign-communications-always.md @@ -24,7 +24,7 @@ The Server Message Block (SMB) protocol provides the basis for file and print sh Implementation of digital signatures in high-security networks helps to prevent the impersonation of client computers and servers, which is known as "session hijacking." But misuse of these policy settings is a common error that can cause data loss or problems with data access or security. -For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md). Devices that have this policy set will not be able to communicate with devices that do not have server-side packet signing enabled. By default, server-side packet signing is enabled only on domain controllers. Server-side packet signing can be enabled on devices by setting [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). +For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md). Devices that have this policy set will not be able to communicate with devices that do not have server-side packet signing enabled. By default, server-side packet signing is enabled only on domain controllers. Server-side packet signing can be enabled on devices by setting [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). If server-side SMB signing is required, a client device will not be able to establish a session with that server, unless it has client-side SMB signing enabled. By default, client-side SMB signing is enabled on workstations, servers, and domain controllers. Similarly, if client-side SMB signing is required, that client device will not be able to establish a session with servers that do not have packet signing enabled. By default, server-side SMB signing is enabled only on domain controllers. @@ -34,11 +34,11 @@ Using SMB packet signing can impose up to a 15 percent performance degradation o There are three other policy settings that relate to packet-signing requirements for Server Message Block (SMB) communications: -- [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md) +- [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md) -- [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md) +- [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md) -- [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md) +- [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md) ### Possible values @@ -52,13 +52,13 @@ There are three other policy settings that relate to packet-signing requirements 1. Configure the following security policy settings as follows: - - Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md). + - Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md). - Disable **Microsoft network server: Digitally sign communications (always)**. - - Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md). + - Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md). - - Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). + - Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). 2. Alternately, you can set all of these policy settings to Enabled, but enabling them can cause slower performance on client devices and prevent them from communicating with legacy SMB applications and operating systems. @@ -135,13 +135,13 @@ SMB is the resource-sharing protocol that is supported by many Windows operating Configure the settings as follows: -- Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md). +- Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md). - Disable **Microsoft network server: Digitally sign communications (always)**. -- Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md). +- Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md). -- Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md). +- Enable [Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md). In highly secure environments we recommend that you configure all of these settings to Enabled. However, that configuration may cause slower performance on client devices and prevent communications with earlier SMB applications and operating systems. diff --git a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md b/windows/keep-secure/microsoft-network-server-digitally-sign-communications-if-client-agrees.md similarity index 96% rename from windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md rename to windows/keep-secure/microsoft-network-server-digitally-sign-communications-if-client-agrees.md index 6d9c850f06..2a46117e2c 100644 --- a/windows/keep-secure/microsoft-network-server-digitally-sign-communications--if-client-agrees.md +++ b/windows/keep-secure/microsoft-network-server-digitally-sign-communications-if-client-agrees.md @@ -32,11 +32,11 @@ Using SMB packet signing can impose up to a 15 percent performance degradation o There are three other policy settings that relate to packet-signing requirements for Server Message Block (SMB) communications: -- [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md) +- [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md) -- [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md) +- [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md) -- [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md) +- [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md) ### Possible values @@ -50,11 +50,11 @@ There are three other policy settings that relate to packet-signing requirements 1. Configure the following security policy settings as follows: - - Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md). + - Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md). - - Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). + - Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). - - Enable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). + - Enable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). - Enable **Microsoft Network Server: Digitally Sign Communications (If Client Agrees)**. @@ -133,11 +133,11 @@ SMB is the resource-sharing protocol that is supported by many Windows operating Configure the settings as follows: -- Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md). +- Disable [Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md). -- Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md). +- Disable [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). -- Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md). +- Enable [Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md). - Enable **Microsoft network server: Digitally sign communications (if client agrees)**. diff --git a/windows/keep-secure/microsoft-passport-guide.md b/windows/keep-secure/microsoft-passport-guide.md index 54e24297a3..17108c5fef 100644 --- a/windows/keep-secure/microsoft-passport-guide.md +++ b/windows/keep-secure/microsoft-passport-guide.md @@ -342,7 +342,7 @@ Which rollout method you choose depends on several factors: **Deployment requirements** -Table 1 lists six scenarios for deployment of Microsoft Passport for Work in the enterprise. The initial release of Windows 10 supports Azure AD–only scenarios, with support for on-premises Microsoft Passport for Work planned for a release later in 2015 (see the [Roadmap](#roadmap) section for more details). +Table 1 lists six scenarios for deployment of Microsoft Passport for Work in the enterprise. The initial release of Windows 10 supports Azure AD–only scenarios, with support for on-premises Microsoft Passport for Work planned for a future release (see the [Roadmap](#roadmap) section for more details). Depending on the scenario you choose, Microsoft Passport for Work deployment may require four elements: diff --git a/windows/keep-secure/monitor-application-usage-with-applocker.md b/windows/keep-secure/monitor-application-usage-with-applocker.md index f1dfd53488..2343d692f3 100644 --- a/windows/keep-secure/monitor-application-usage-with-applocker.md +++ b/windows/keep-secure/monitor-application-usage-with-applocker.md @@ -87,7 +87,7 @@ AppLocker events are listed in either the **EXE and DLL** log, the **MSI and Scr ## Related topics -[AppLocker](applocker-overview-server.md) +[AppLocker](applocker-overview.md)   diff --git a/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md b/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md similarity index 100% rename from windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md rename to windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md diff --git a/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md b/windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md similarity index 100% rename from windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md rename to windows/keep-secure/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md diff --git a/windows/keep-secure/overview-create-edp-policy.md b/windows/keep-secure/overview-create-edp-policy.md new file mode 100644 index 0000000000..e5dea375ea --- /dev/null +++ b/windows/keep-secure/overview-create-edp-policy.md @@ -0,0 +1,58 @@ +--- +title: Create an enterprise data protection (EDP) policy (Windows 10) +description: Microsoft Intune and System Center Configuration Manager (version 1511 or later) helps you create and deploy your enterprise data protection (EDP) policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network. +ms.assetid: D2059E74-94BD-4E54-AB59-1A7B9B52BDC6 +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Create an enterprise data protection (EDP) policy + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +Microsoft Intune and System Center Configuration Manager (version 1511 or later) helps you create and deploy your enterprise data protection (EDP) policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network. + +## In this section + + + ++++ + + + + + + + + + + + + + + + + +
TopicDescription

[Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md))

Intune helps you create and deploy your EDP policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network.

[Create and deploy an enterprise data protection (EDP) policy using System Center Configuration Manager](create-edp-policy-using-sccm.md))

Configuration Manager (version 1511 or later) helps you create and deploy your EDP policy, including letting you choose your protected apps, your EDP-protection level, and how to find enterprise data on the network.

+ +  + +  + +  + + + + + diff --git a/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md b/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md index a12a8500a2..6895bda120 100644 --- a/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/keep-secure/planning-and-deploying-advanced-security-audit-policies.md @@ -385,7 +385,7 @@ For many organizations, compromising the organization's data resources can cause If success auditing is enabled, an audit entry is generated each time any account successfully accesses a file system object that has a matching SACL. If failure auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a file system object that has a matching SACL. The amount of audit data generated by the **Audit File System** policy setting can vary considerably, depending on the number of objects that have been configured to be monitored. **Note**   - To audit user attempts to access all file system objects on a computer, use the Global Object Access Auditing settings [Registry (Global Object Access Auditing)](registry--global-object-access-auditing--sec-audit.md) or [File System (Global Object Access Auditing)](file-system--global-object-access-auditing--sec-audit.md). + To audit user attempts to access all file system objects on a computer, use the Global Object Access Auditing settings [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md) or [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md).   @@ -408,11 +408,11 @@ In the majority of cases, these attempts will be legitimate and a network needs - Account Logon\\[Audit Credential Validation](audit-credential-validation.md). This is an extremely important policy setting because it enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid, or attempting to use a variety of credentials in succession in hope that one of these attempts will eventually be successful. These events occur on the computer that is authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. -- Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination-sec-audit.md). These policy settings can enable you to monitor the applications that a user opens and closes on a computer. +- Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md). These policy settings can enable you to monitor the applications that a user opens and closes on a computer. - DS Access\\[Audit Directory Service Access](audit-directory-service-access.md) and DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md). These policy settings provide a detailed audit trail of attempts to access create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it is extremely important to identify malicious attempts to modify these objects. In addition, although domain administrators should be among an organization's most trusted employees, the use of **Audit Directory Service Access** and **Audit Directory Service Changes** settings allow you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. -- Logon/Logoff\\[Audit Account Lockout](audit-account-lockout-sec-audit.md). Another common security scenario occurs when a user attempts to log on with an account that has been locked out. It is important to identify these events and to determine whether the attempt to use an account that has been locked out is malicious. +- Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md). Another common security scenario occurs when a user attempts to log on with an account that has been locked out. It is important to identify these events and to determine whether the attempt to use an account that has been locked out is malicious. - Logon/Logoff\\[Audit Logoff](audit-logoff.md) and Logon/Logoff\\[Audit Logon](audit-logon.md). Logon and logoff events are essential to tracking user activity and detecting potential attacks. Logon events are related to the creation of logon sessions, and they occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was logged on to. For network logon, such as accessing a shared resource, events are generated on the computer that hosts the resource that was accessed. Logoff events are generated when logon sessions are terminated. @@ -436,9 +436,9 @@ In the majority of cases, these attempts will be legitimate and a network needs   -- Object Access\\[Audit SAM](audit-sam-sec-audit.md). The Security Accounts Manager (SAM) is a database that is present on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. +- Object Access\\[Audit SAM](audit-sam.md). The Security Accounts Manager (SAM) is a database that is present on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. -- Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use-sec-audit.md). **Privilege Use** policy settings and audit events allow you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. +- Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md). **Privilege Use** policy settings and audit events allow you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. ### Network activity @@ -446,14 +446,14 @@ The following network activity policy settings allow you to monitor security-rel - **Account Management**. The policy settings in this category can be used to track attempts to create, delete, or modify user or computer accounts, security groups, or distribution groups. Monitoring these activities complements the monitoring strategies you select in the user activity and data activity sections. -- Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service-sec-audit.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md). Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting allows you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting allows you to monitor the use of Kerberos service tickets. +- Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md). Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting allows you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting allows you to monitor the use of Kerberos service tickets. **Note**   **Account Logon** policy settings apply only to specific domain account activities, regardless of the computer that is accessed, whereas **Logon/Logoff** policy settings apply to the computer that hosts the resources being accessed.   -- Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events-sec-audit.md). This policy setting can be used to track a number of different network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. +- Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events.md). This policy setting can be used to track a number of different network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. - **DS Access**. Policy settings in this category allow you to monitor the AD DS role services, which provide account data, validate logons, maintain network access permissions, and provide other services that are critical to the secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. In addition, one of the key tasks performed by AD DS is the replication of data between domain controllers. diff --git a/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md b/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md index a4df69db10..2a4deccef8 100644 --- a/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md +++ b/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md @@ -368,7 +368,7 @@ There are two schema extensions that you can copy down and add to your AD DS sch This schema update modifies the ACLs on the TPM object to be less restrictive so that any subsequent operating system which takes ownership of the computer object can update the owner authorization value in AD DS. However, this is less secure as any computer in the domain can now update the OwnerAuth of the TPM object (although it cannot read the OwnerAuth) and DOS attacks can be made from within the enterprise. The recommended mitigation in such a scenario is to do regular backup of TPM objects and enable auditing to track changes for these objects. -To download the schema extensions, see [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md). +To download the schema extensions, see [AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md). If you have a Windows Server 2012 domain controller in your environment, the schema extensions are already in place and do not need to be updated. @@ -432,13 +432,13 @@ However, you cannot use recovery passwords generated on a system in FIPS mode fo ## More information -[Trusted Platform Module](trusted-platform-module-technology-overview.md) +[Trusted Platform Module](trusted-platform-module-overview.md) [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md) -[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions--faq-.md) +[BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) -[BitLocker](bitlocker-overview-roletech-overview.md) +[BitLocker](bitlocker-overview.md) [BitLocker Group Policy settings](bitlocker-group-policy-settings.md) diff --git a/windows/keep-secure/protect-bitlocker-from-pre-boot-attacks.md b/windows/keep-secure/protect-bitlocker-from-pre-boot-attacks.md index c4991945a6..028698ebd6 100644 --- a/windows/keep-secure/protect-bitlocker-from-pre-boot-attacks.md +++ b/windows/keep-secure/protect-bitlocker-from-pre-boot-attacks.md @@ -41,7 +41,7 @@ The sections that follow help you understand which PCs still need pre-boot authe ## See also -- [BitLocker overview](bitlocker-overview-roletech-overview.md) +- [BitLocker overview](bitlocker-overview.md)   diff --git a/windows/keep-secure/protect-enterprise-data-using-edp.md b/windows/keep-secure/protect-enterprise-data-using-edp.md new file mode 100644 index 0000000000..0e86ceaa39 --- /dev/null +++ b/windows/keep-secure/protect-enterprise-data-using-edp.md @@ -0,0 +1,202 @@ +--- +title: Protect your enterprise data using enterprise data protection (EDP) (Windows 10) +description: With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data leak through apps and services, like email, social media, and the public cloud, which are outside of the enterprise’s control. +ms.assetid: 6CCA0119-5954-4757-B2BC-E0EA4D2C7032 +keywords: ["EDP", "Enterprise Data Protection"] +ms.prod: W10 +ms.mktglfcycl: explore +ms.sitesec: library +author: brianlic-msft +--- + +# Protect your enterprise data using enterprise data protection (EDP) + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data leak through apps and services, like email, social media, and the public cloud, which are outside of the enterprise’s control. For example, when an employee sends the latest engineering pictures to their personal email account, copies and pastes product info to a public Yammer group or tweet, or saves an in-progress sales report to their public cloud storage. + +Enterprise data protection (EDP) helps to protect against this potential data leakage without otherwise interfering with the employee experience. EDP also helps to protect enterprise apps and data against accidental data leak on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. Finally, another data protection technology, Azure Rights Management also works alongside EDP to extend data protection for data that leaves the device, such as when email attachments are sent from an enterprise aware version of a rights management mail client. + +## Prerequisites + + +You’ll need this software to run EDP in your enterprise: + + ++++ + + + + + + + + + + + + +
Operating SystemManagement solution

Windows 10 Insider Preview

Microsoft Intune

+

-OR-

+

System Center Configuration Manager (version 1511 or later)

+

-OR-

+

Your current company-wide 3rd party mobile device management (MDM) solution. For info about 3rd party MDM solutions, see the documentation that came with your product. If your 3rd party MDM does not have UI support for the policies, refer to the [Custom URI - Policy CSP](http://go.microsoft.com/fwlink/?LinkID=733963) documentation.

+ +  + +## How EDP works + + +EDP helps address your everyday challenges in the enterprise. Including: + +- Helping to prevent enterprise data leaks, even on employee-owned devices that can't be locked down. + +- Reducing employee frustrations because of restrictive data management policies on enterprise-owned devices. + +- Helping to maintain the ownership and control of your enterprise data. + +- Managing apps that aren’t enterprise aware, especially on mobile devices. + +### EDP-protection modes + +You can set EDP to 1 of 4 protection and management modes: + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + +
ModeDescription

Block

EDP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.

Override

EDP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log, accessible through the [Reporting CSP](http://go.microsoft.com/fwlink/p/?LinkID=746459).

Silent

EDP runs silently, logging inappropriate data sharing, without blocking anything.

Off

EDP is turned off and doesn't help to protect or audit your data.

+

After you turn off EDP, an attempt is made to decrypt any closed EDP-tagged files on the locally attached drives.

+ +  + +**Note**   +For more info about setting your EDP-protection modes, see either [Create an enterprise data protection (EDP) policy using Intune](create-edp-policy-using-intune.md)) or [Create and deploy an enterprise data protection (EDP) policy using Configuration Manager](create-edp-policy-using-sccm.md)), depending on your management solution. + +  + +## Why use EDP? + + +EDP gives you a new way to manage data security for apps and documents, along with the ability to remove access to enterprise data from both enterprise and personal devices (after enrollment in an enterprise management solution, like Intune). + +- **Change the way you think about data security.** As an enterprise admin, you need to maintain the security and confidentiality of your enterprise data. EDP helps make sure that your enterprise data is protected on employee-owned devices, even when the employee isn’t using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. + +- **Manage your enterprise documents, apps, and encryption modes.** + + - **Copying or downloading enterprise data.** When an employee or an app downloads content from a location like SharePoint, a network share, or an enterprise web location, while using an EDP-protected device, EDP encrypts the data on the device. + + - **Using protected apps.** Managed apps (apps that you've included on the **Protected Apps** list in your EDP policy) are allowed to access your enterprise data and will interact differently when used with unallowed, non-enterprise aware, or personal-only apps. For example, if EDP management is set to **Block**, your employees can copy and paste from one protected app to another protected app, but not to personal apps. Imagine an HR person wants to copy a job description from a protected app to the internal career website, an enterprise-protected location, but goofs and tries to paste into a personal app instead. The paste action fails and a notification pops up, saying that the app couldn’t paste because of a policy restriction. The HR person then correctly pastes to the career website without a problem. + + - **Managed apps and restrictions.** With EDP you can control which apps can access and use your enterprise data. After adding an app to your **Protected App** list, the app is trusted with enterprise data. All apps not on this list are potentially blocked from accessing your enterprise data, depending on your EDP management-mode. + + You don’t have to modify line-of-business apps that never touch personal data to list them as protected apps; just include them in the **Protected App** list. + + - **Deciding your level of data access.** EDP lets you block, allow overrides, or audit employees' data sharing actions. Blocking the action stops it immediately. Allowing overrides let the employee know there's a risk, but lets him or her continue to share the data while recording and auditing the action. Silent just logs the action without stopping it; collecting info that can help you to see patterns of inappropriate sharing so you can take educative action or find apps that should be added to your **Protected App** list. + + - **Continuous data encryption.** EDP helps protect enterprise data when it leaves a device. For example, when an employee saves to public cloud storage, or synchronizes with another device. + + Apps such as Microsoft Word work with EDP to continue your data encryption across locations and services. These apps are being referred to as, *enterprise aware*. For example, if an employee opens EDP-encrypted content from Word, edits the content, and then tries to save the edited version with a different name, Word automatically applies EDP to the new document, maintaining the encryption. + + - **Helping prevent accidental data disclosure to public spaces.** EDP helps protect your enterprise data from being accidentally shared to public spaces, such as public cloud storage. For example, file syncing apps not on your **Protected App** list, such as Dropbox™, won’t be able to sync encrypted files to the employee’s personal cloud storage. Instead, if an employee stores content in their Microsoft OneDrive for Business folder, which is automatically synced with OneDrive for Business (an app on your **Protected App** list), then the document maintains its encryption and can sync freely. + + - **Helping prevent accidental data disclosure to other devices.** EDP helps prevent enterprise data from leaking when it's copied or transferred to other devices. For example, if an employee puts enterprise data on a Universal Serial Bus (USB) drive that also has personal data, the enterprise data remains encrypted while the personal data doesn’t. + +- **Remove access to enterprise data from enterprise-protected devices.** EDP gives admins the ability to revoke enterprise data from one or many MDM-enrolled devices, while leaving personal data alone. This is a benefit when an employee leaves your company, or in the case of a stolen device. After determining that the data access needs to be removed, you can unenroll the device so when it connects to the network, the user's encryption key for the device is revoked and the enterprise data becomes unreadable. + + **Note**  System Center Configuration Manager also allows you to revoke enterprise data. However, it does it by performing a factory reset of the device. + +   + +## Current limitations with EDP + + +EDP is still in development and is not yet integrated with Azure Rights Management. This means that while you can deploy an EDP-configured policy to a protected device, that protection is restricted to a single user on the device. Additionally, the EDP-protected data must be stored on NTFS, FAT, or ExFAT file systems. + +Use the following table to identify the scenarios that require Azure Rights Management, the behavior when Azure Rights Management is not used with EDP, and the recommended workarounds. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + +
EDP scenarioWithout Azure Rights ManagementWorkaround

Saving enterprise data to USB drives

Data in the new location remains encrypted, but becomes inaccessible on other devices or for other users. For example, the file won't open or the file opens, but doesn't contain readable text.

Share files with fellow employees through enterprise file servers or enterprise cloud locations. If data must be shared via USB, employees can decrypt protected files, but it will be audited.

+

We strongly recommend educating employees about how to limit or eliminate the need for this decryption.

Sharing enterprise data through email attachments

The attachment is sent unprotected.

Store documents on enterprise cloud or network sites, and share links.

Synchronizing data to other services or public cloud storage

Synchronized files aren't protected on additional services or as part of public cloud storage.

Stop the app from synchronizing or don't add the app to your Protected App list.

+

For more info about adding apps to the Protected Apps list, see either the [Create an enterprise data protection (EDP) policy using Intune](create-edp-policy-using-intune.md)) or the [Create and deploy an enterprise data protection (EDP) policy using Configuration Manager](create-edp-policy-using-sccm.md)) topic, depending on your management solution.

+ +  + +## Next steps + + +After deciding to use EDP in your enterprise, you need to: + +- [Create an enterprise data protection (EDP) policy](overview-create-edp-policy.md)) + +  + +  + + + + + diff --git a/windows/keep-secure/registry--global-object-access-auditing--sec-audit.md b/windows/keep-secure/registry-global-object-access-auditing.md similarity index 100% rename from windows/keep-secure/registry--global-object-access-auditing--sec-audit.md rename to windows/keep-secure/registry-global-object-access-auditing.md diff --git a/windows/keep-secure/security-auditing-overview-glbl.md b/windows/keep-secure/security-auditing-overview.md similarity index 100% rename from windows/keep-secure/security-auditing-overview-glbl.md rename to windows/keep-secure/security-auditing-overview.md diff --git a/windows/keep-secure/security-options.md b/windows/keep-secure/security-options.md index 5a4500b957..b6d6747c20 100644 --- a/windows/keep-secure/security-options.md +++ b/windows/keep-secure/security-options.md @@ -79,11 +79,11 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, management practices, and security considerations for the Audit: Shut down system immediately if unable to log security audits security policy setting.

-

[DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-access-restrictions-in-security-descriptor-definition-language--sddl--syntax.md)

+

[DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md)

Describes the best practices, location, values, and security considerations for the DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax policy setting.

-

[DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-launch-restrictions-in-security-descriptor-definition-language--sddl--syntax.md)

+

[DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax](dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md)

Describes the best practices, location, values, and security considerations for the DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax security policy setting.

@@ -119,15 +119,15 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, and security considerations for the Domain controller: Refuse machine account password changes security policy setting.

-

[Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data--always.md)

+

[Domain member: Digitally encrypt or sign secure channel data (always)](domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md)

Describes the best practices, location, values, and security considerations for the Domain member: Digitally encrypt or sign secure channel data (always) security policy setting.

-

[Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data--when-possible.md)

+

[Domain member: Digitally encrypt secure channel data (when possible)](domain-member-digitally-encrypt-secure-channel-data-when-possible.md)

Describes the best practices, location, values, and security considerations for the Domain member: Digitally encrypt secure channel data (when possible) security policy setting.

-

[Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data--when-possible.md)

+

[Domain member: Digitally sign secure channel data (when possible)](domain-member-digitally-sign-secure-channel-data-when-possible.md)

Describes the best practices, location, values, and security considerations for the Domain member: Digitally sign secure channel data (when possible) security policy setting.

@@ -139,7 +139,7 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, and security considerations for the Domain member: Maximum machine account password age security policy setting.

-

[Domain member: Require strong (Windows 2000 or later) session key](domain-member-require-strong--windows-2000-or-later--session-key.md)

+

[Domain member: Require strong (Windows 2000 or later) session key](domain-member-require-strong-windows-2000-or-later-session-key.md)

Describes the best practices, location, values, and security considerations for the Domain member: Require strong (Windows 2000 or later) session key security policy setting.

@@ -171,7 +171,7 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, policy management and security considerations for the Interactive logon: Message title for users attempting to log on security policy setting.

-

[Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache--in-case-domain-controller-is-not-available.md)

+

[Interactive logon: Number of previous logons to cache (in case domain controller is not available)](interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md)

Describes the best practices, location, values, policy management and security considerations for the Interactive logon: Number of previous logons to cache (in case domain controller is not available) security policy setting.

@@ -191,11 +191,11 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, policy management and security considerations for the Interactive logon: Smart card removal behavior security policy setting.

-

[Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications--always.md)

+

[Microsoft network client: Digitally sign communications (always)](microsoft-network-client-digitally-sign-communications-always.md)

Describes the best practices, location, values, policy management and security considerations for the Microsoft network client: Digitally sign communications (always) security policy setting.

-

[Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications--if-server-agrees.md)

+

[Microsoft network client: Digitally sign communications (if server agrees)](microsoft-network-client-digitally-sign-communications-if-server-agrees.md)

Describes the best practices, location, values, and security considerations for the Microsoft network client: Digitally sign communications (if server agrees) security policy setting.

@@ -211,11 +211,11 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, management, and security considerations for the Microsoft network server: Attempt S4U2Self to obtain claim information security policy setting.

-

[Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications--always.md)

+

[Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md)

Describes the best practices, location, values, policy management and security considerations for the Microsoft network server: Digitally sign communications (always) security policy setting.

-

[Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications--if-client-agrees.md)

+

[Microsoft network server: Digitally sign communications (if client agrees)](microsoft-network-server-digitally-sign-communications-if-client-agrees.md)

Describes the best practices, location, values, policy management and security considerations for the Microsoft network server: Digitally sign communications (if client agrees) security policy setting.

@@ -303,11 +303,11 @@ For info about setting security policies, see [Configure security policy setting

This security policy reference topic for the IT professional describes the best practices, location, values, policy management and security considerations for this policy setting. This information applies to computers running at least the Windows Server 2008 operating system.

-

[Network security: Minimum session security for NTLM SSP based (including secure RPC) clients](network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--clients.md)

+

[Network security: Minimum session security for NTLM SSP based (including secure RPC) clients](network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md)

Describes the best practices, location, values, policy management and security considerations for the Network security: Minimum session security for NTLM SSP based (including secure RPC) clients security policy setting.

-

[Network security: Minimum session security for NTLM SSP based (including secure RPC) servers](network-security-minimum-session-security-for-ntlm-ssp-based--including-secure-rpc--servers.md)

+

[Network security: Minimum session security for NTLM SSP based (including secure RPC) servers](network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md)

Describes the best practices, location, values, policy management and security considerations for the Network security: Minimum session security for NTLM SSP based (including secure RPC) servers security policy setting.

@@ -367,7 +367,7 @@ For info about setting security policies, see [Configure security policy setting

Describes the best practices, location, values, policy management and security considerations for the System objects: Require case insensitivity for non-Windows subsystems security policy setting.

-

[System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)](system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md)

+

[System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)](system-objects-strengthen-default-permissions-of-internal-system-objects.md)

Describes the best practices, location, values, policy management and security considerations for the System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) security policy setting.

diff --git a/windows/keep-secure/security-technologies.md b/windows/keep-secure/security-technologies.md index 79e205460a..81f5647bf1 100644 --- a/windows/keep-secure/security-technologies.md +++ b/windows/keep-secure/security-technologies.md @@ -29,11 +29,11 @@ Learn more about the different security technologies that are available in Windo -

[AppLocker](applocker-overview-server.md)

+

[AppLocker](applocker-overview.md)

This topic provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker application control policies. AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.

-

[BitLocker](bitlocker-overview-roletech-overview.md)

+

[BitLocker](bitlocker-overview.md)

This topic provides a high-level overview of BitLocker, including a list of system requirements, practical applications, and deprecated features.

@@ -41,7 +41,7 @@ Learn more about the different security technologies that are available in Windo

Encrypted Hard Drive uses the rapid encryption that is provided by BitLocker Drive Encryption to enhance data security and management.

-

[Security auditing](security-auditing-overview-glbl.md)

+

[Security auditing](security-auditing-overview.md)

Topics in this section are for IT professionals and describes the security auditing features in Windows and how your organization can benefit from using these technologies to enhance the security and manageability of your network.

@@ -49,7 +49,7 @@ Learn more about the different security technologies that are available in Windo

This reference topic describes the common scenarios, architecture, and processes for security settings.

-

[Trusted Platform Module](trusted-platform-module-technology-overview.md)

+

[Trusted Platform Module](trusted-platform-module-overview.md)

This topic for the IT professional describes the Trusted Platform Module (TPM) and how Windows uses it for access control and authentication. The topic provides links to other resources about the TPM.

diff --git a/windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md b/windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects.md similarity index 100% rename from windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects--eg-symbolic-links.md rename to windows/keep-secure/system-objects-strengthen-default-permissions-of-internal-system-objects.md diff --git a/windows/keep-secure/testing-scenarios-for-edp.md b/windows/keep-secure/testing-scenarios-for-edp.md new file mode 100644 index 0000000000..dd6d80009f --- /dev/null +++ b/windows/keep-secure/testing-scenarios-for-edp.md @@ -0,0 +1,175 @@ +--- +title: Testing scenarios for enterprise data protection (EDP) (Windows 10) +description: We've come up with a list of suggested testing scenarios that you can use to test enterprise data protection (EDP) in your company. +ms.assetid: 53DB29D2-D99D-4DB6-B494-90E2B3962CA2 +author: brianlic-msft +--- + +# Testing scenarios for enterprise data protection (EDP) + + +**Applies to:** + +- Windows 10 Insider Preview +- Windows 10 Mobile Preview + +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] + +We've come up with a list of suggested testing scenarios that you can use to test enterprise data protection (EDP) in your company. + +## Testing scenarios + + +You can try any of the processes included in these scenarios, but you should focus on the ones that you might encounter in your organization. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ScenarioProcessesNotes

Automatically encrypt files from enterprise apps

    +
  1. Start an unmodified (for example, EDP-unaware) line-of-business app that's on your Protected Apps list and then create, edit, write, and save files.

  2. +
  3. Make sure that all of the files you worked with from the EDP-unaware app are encrypted to your configured Enterprise Identity. In some cases, you might need to close the file and wait a few moments for it to be automatically encrypted.

  4. +
  5. Open File Explorer and make sure your modified files are appearing with a Lock icon.

  6. +

Be aware that some file types, like .exe and .dll, along with some file paths, like %windir% and %programfiles%, are excluded from automatic encryption.

Block enterprise data from non-enterprise apps

    +
  1. Start an app that doesn't appear on your Protected Apps list, and then try to open an enterprise-encrypted file.

    +

    The app shouldn't be able to access the file.

  2. +
  3. Try double-clicking or tapping on the enterprise-encrypted file.

    +

    If your default app association is an app not your Protected Apps list, you should get an Access Denied error message.

  4. +

Copy and paste from enterprise apps to non-enterprise apps

    +
  1. Copy (CTRL+C) content from an app on your Protected Apps list, and then try to paste (CTRL+V) the content into an app that doesn't appear on your Protected Apps list.

    +

    You should see an EDP-related warning box, asking you to click either Got it or Cancel.

  2. +
  3. Click Cancel.

    +

    The content isn't pasted into the non-enterprise app.

  4. +
  5. Repeat Step 1, but this time click Got it, and try to paste the content again.

    +

    The content is pasted into the non-enterprise app.

  6. +
  7. Try copying and pasting content between apps on your Protected Apps list.

    +

    The content should copy and paste between apps without any warning messages.

  8. +

Drag and drop from enterprise apps to non-enterprise apps

    +
  1. Drag content from an app on your Protected Apps list, and then try to drop the content into an app that doesn't appear on your Protected Apps list.

    +

    You should see an EDP-related warning box, asking you to click either Drag Anyway or Cancel.

  2. +
  3. Click Cancel.

    +

    The content isn't dropped into the non-enterprise app.

  4. +
  5. Repeat Step 1, but this time click Drag Anyway, and try to drop the content again.

    +

    The content is dropped into the non-enterprise app.

  6. +
  7. Try dragging and dropping content between apps on your Protected Apps list.

    +

    The content should move between the apps without any warning messages.

  8. +

Share between enterprise apps and non-enterprise apps

    +
  1. Open an app on your Protected Apps list, like Microsoft Photos, and try to share content with an app that doesn't appear on your Protected Apps list, like Facebook.

    +

    You should see an EDP-related warning box, asking you to click either Share Anyway or Cancel.

  2. +
  3. Click Cancel.

    +

    The content isn't shared into Facebook.

  4. +
  5. Repeat Step 1, but this time click Share Anyway, and try to share the content again.

    +

    The content is shared into Facebook.

  6. +
  7. Try sharing content between apps on your Protected Apps list.

    +

    The content should share between the apps without any warning messages.

  8. +

Use the Encrypt to functionality

    +
  1. Open File Explorer on the desktop, right-click a decrypted file, and then click Encrypt to from the Encrypt to menu.

    +

    EDP should encrypt the file to your Enterprise Identity.

  2. +
  3. Make sure that the newly encrypted file has a Lock icon.

  4. +
  5. In the Encrypted to column of File Explorer on the desktop, look for the enterprise ID value.

  6. +
  7. Right-click the encrypted file, and then click Not encrypted from the Encrypt to menu.

    +

    The file should be decrypted and the Lock icon should disappear.

  8. +

Verify that Windows system components can use EDP

    +
  1. Start Windows Journal and Internet Explorer 11, creating, editing, and saving files in both apps.

  2. +
  3. Make sure that all of the files you worked with are encrypted to your configured Enterprise Identity. In some cases, you might need to close the file and wait a few moments for it to be automatically encrypted.

  4. +
  5. Open File Explorer and make sure your modified files are appearing with a Lock icon

  6. +
  7. Try copying and pasting, dragging and dropping, and sharing using these apps with other apps that appear both on and off the Protected Apps list.

  8. +

Most Windows-signed components like Windows Explorer (when running in the user’s context), should have access to enterprise data.

+

A few notable exceptions include some of the user-facing in-box apps, like Wordpad, Notepad, and Microsoft Paint. These apps don't have access by default, but can be added to your Protected Apps list.

Use EDP on FAT/exFAT systems

    +
  1. Start an app that uses the FAT or exFAT file system and appears on your Protected Apps list.

  2. +
  3. Create, edit, write, save, and move files.

    +

    Basic file and folder operations like copy, move, rename, delete, and so on, should work properly on encrypted files.

  4. +
  5. Try copying and moving files or folders between apps that use NTFS, FAT and exFAT file systems.

  6. +

Use EDP on NTFS systems

    +
  1. Start an app that uses the NTFS file system and appears on your Protected Apps list.

  2. +
  3. Create, edit, write, save, and move files.

    +

    Basic file and folder operations like copy, move, rename, delete, and so on, should work properly on encrypted files.

  4. +
  5. Try copying and moving files or folders between apps that use NTFS, FAT and exFAT file systems.

  6. +

Please pay attention and report any performance issues or slow-downs on the NTFS file system.

+

Currently, EFS Performance Optimizations are only enabled on NTFS.

Unenroll client devices from EDP

    +
  • Unenroll a device from EDP by going to Settings (which settings menu?), click Accounts, click Work, click the name of the device (or name of the person?) you want to unenroll, and then click Remove .

    +

    The device should be removed and all of the enterprise content for that managed account should be gone.

  • +

WARNING

+

Unenrolling a device revokes and erases all of the enterprise data for the managed account.

Verify that app content is protected when a Windows 10 Mobile phone is locked (also known as, Data Protection under Lock (DPL))

Check that protected app data doesn't appear on the Lock screen of a Windows 10 Mobile phone.

Additional requirements to run DPL:

+
    +
  • Device needs to be running TPM 2.0.

  • +
  • Employee setup PIN for the device. You'll need to also setup a policy to require the PIN when you turn on DPL.

  • +
  • At least one piece of encrypted enterprise content. This is because DPL keys are created during the first attempt to protect a file. Before that, nothing will happen, since there's no enterprise content to protect.

  • +
+ +  + +  + +  + + + + + diff --git a/windows/keep-secure/tpm-fundamentals-windows-8.md b/windows/keep-secure/tpm-fundamentals.md similarity index 97% rename from windows/keep-secure/tpm-fundamentals-windows-8.md rename to windows/keep-secure/tpm-fundamentals.md index 3c8b119c13..13e2bd4415 100644 --- a/windows/keep-secure/tpm-fundamentals-windows-8.md +++ b/windows/keep-secure/tpm-fundamentals.md @@ -27,7 +27,7 @@ Computers that incorporate a TPM can also create a key that has not only been wr With a TPM, private portions of key pairs are kept separate from the memory that is controlled by the operating system. Keys can be sealed to the TPM, and certain assurances about the state of a system (assurances that define the trustworthiness of a system) can be made before the keys are unsealed and released for use. Because the TPM uses its own internal firmware and logic circuits to process instructions, it does not rely on the operating system, and it is not exposed to vulnerabilities that might exist in the operating system or application software. -For info about which versions of Windows support which versions of the TPM, see [Trusted Platform Module technology overview](trusted-platform-module-technology-overview.md). The features that are available in the versions are defined in specifications by the Trusted Computing Group (TCG). For more info, see the Trusted Platform Module page on the Trusted Computing Group website: [Trusted Platform Module](http://www.trustedcomputinggroup.org/developers/trusted_platform_module). +For info about which versions of Windows support which versions of the TPM, see [Trusted Platform Module technology overview](trusted-platform-module-overview.md). The features that are available in the versions are defined in specifications by the Trusted Computing Group (TCG). For more info, see the Trusted Platform Module page on the Trusted Computing Group website: [Trusted Platform Module](http://www.trustedcomputinggroup.org/developers/trusted_platform_module). The following sections provide an overview of the technologies that support the TPM: @@ -66,7 +66,7 @@ The following topic describes the TPM Services that can be controlled centrally TPM provisioning can be streamlined to make it easier to deploy systems that are ready for BitLocker and other TPM-dependent features. These enhancements include simplifying the TPM state model to report **Ready**, **Ready with reduced functionality**, or **Not ready**. You can also automatically provision TPMs in the **Ready** state, remote provisioning to remove the requirement for the physical presence of a technician for the initial deployment. In addition, the TPM stack is available in the Windows Preinstallation Environment (Windows PE). -A number of management settings have been added for easier management and configuration of the TPM through Group Policy. The primary new settings include Active Directory-based backup of TPM owner authentication, the level of owner authentication that should be stored locally on the TPM, and the software-based TPM lockout settings for standard users. For more info about backing up owner authentication to Windows Server 2008 R2 AD DS domains, see [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md). +A number of management settings have been added for easier management and configuration of the TPM through Group Policy. The primary new settings include Active Directory-based backup of TPM owner authentication, the level of owner authentication that should be stored locally on the TPM, and the software-based TPM lockout settings for standard users. For more info about backing up owner authentication to Windows Server 2008 R2 AD DS domains, see [AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md). ## Measured Boot with support for attestation @@ -290,13 +290,13 @@ Clearing the TPM causes you to lose all TPM keys and data protected by those key ## Additional resources -[Trusted Platform Module Technology Overview](trusted-platform-module-technology-overview.md) +[Trusted Platform Module Technology Overview](trusted-platform-module-overview.md) [Trusted Platform Module Services Group Policy Settings](trusted-platform-module-services-group-policy-settings.md) [TPM Cmdlets in Windows PowerShell](http://technet.microsoft.com/library/jj603116.aspx) -[Schema Extensions for Windows Server 2008 R2 to support AD DS backup of TPM information from Windows 8 clients](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md) +[Schema Extensions for Windows Server 2008 R2 to support AD DS backup of TPM information from Windows 8 clients](ad-ds-schema-extensions-to-support-tpm-backup.md) [TPM WMI providers](http://go.microsoft.com/fwlink/p/?LinkId=93478) diff --git a/windows/keep-secure/trusted-platform-module--tpm-2-0--.md b/windows/keep-secure/tpm-recommendations.md similarity index 100% rename from windows/keep-secure/trusted-platform-module--tpm-2-0--.md rename to windows/keep-secure/tpm-recommendations.md diff --git a/windows/keep-secure/troubleshoot-windows-defender-in-windows-10.md b/windows/keep-secure/troubleshoot-windows-defender-in-windows-10.md index 16167e1b76..175cda08c3 100644 --- a/windows/keep-secure/troubleshoot-windows-defender-in-windows-10.md +++ b/windows/keep-secure/troubleshoot-windows-defender-in-windows-10.md @@ -40,3252 +40,1823 @@ Use the information in this table to help troubleshoot Windows Defender client e You can find a complete list of the Microsoft antimalware *event IDs*, the symbol, and the description of each ID in [Windows Server Antimalware Events TechNet](https://technet.microsoft.com/library/dn913615.aspx).   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Event ID: 1000 -

Symbolic name:

-
-

MALWAREPROTECTION_SCAN_STARTED

-
-

Message:

-
-

An antimalware scan started. -

-
-

Description:

-
-

-

-
Scan ID: <ID number of the relevant scan.>
-
Scan Type: <Scan type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
-
-
Scan Parameters: <Scan parameters>, for example:
    -
  • Full scan
  • -
  • Quick scan
  • -
  • Customer scan
  • -
-
-
Scan Resources: <Resources (such as files/directories/BHO) that were scanned.>
-
User: <Domain>\<User>
-
-

-
Event ID: 1001 -

Symbolic name:

-
-

MALWAREPROTECTION_SCAN_COMPLETED

-
-

Message:

-
-

An antimalware scan finished.

-
-

Description:

-
-

-

-
Scan ID: <ID number of the relevant scan.>
-
Scan Type: <Scan type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
-
-
Scan Parameters: <Scan parameters>, for example:
    -
  • Full scan
  • -
  • Quick scan
  • -
  • Customer scan
  • -
-
-
User: <Domain>\<User>
-
Scan Time: <The duration of a scan.>
-
-

-
Event ID: 1002 -

Symbolic name:

-
-

MALWAREPROTECTION_SCAN_CANCELLED -

-
-

Message:

-
-

An antimalware scan was stopped before it finished. -

-
-

Description:

-
-

-

-
Scan ID: <ID number of the relevant scan.>
-
Scan Type: <Scan type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
-
-
Scan Parameters: <Scan parameters>, for example:
    -
  • Full scan
  • -
  • Quick scan
  • -
  • Customer scan
  • -
-
-
User: <Domain>\<User>
-
Scan Time: <The duration of a scan.>
-
-

-
Event ID: 1003 -

Symbolic name:

-
-

MALWAREPROTECTION_SCAN_PAUSED -

-
-

Message:

-
-

An antimalware scan was paused. -

-
-

Description:

-
-

-

-
Scan ID: <ID number of the relevant scan.>
-
Scan Type: <Scan type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
-
-
Scan Parameters: <Scan parameters>, for example:
    -
  • Full scan
  • -
  • Quick scan
  • -
  • Customer scan
  • -
-
-
User: <Domain>\<User>
-
-

-
Event ID: 1004 -

Symbolic name:

-
-

MALWAREPROTECTION_SCAN_RESUMED -

-
-

Message:

-
-

An antimalware scan was resumed. -

-
-

Description:

-
-

-

-
Scan ID: <ID number of the relevant scan.>
-
Scan Type: <Scan type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
-
-
Scan Parameters: <Scan parameters>, for example:
    -
  • Full scan
  • -
  • Quick scan
  • -
  • Customer scan
  • -
-
-
User: <Domain>\<User>
-
-

-
Event ID: 1005 -

Symbolic name:

-
-

MALWAREPROTECTION_SCAN_FAILED -

-
-

Message:

-
-

An antimalware scan failed. -

-
-

Description:

-
-

-

-
Scan ID: <ID number of the relevant scan.>
-
Scan Type: <Scan type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
-
-
Scan Parameters: <Scan parameters>, for example:
    -
  • Full scan
  • -
  • Quick scan
  • -
  • Customer scan
  • -
-
-
User: <Domain>\<User>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
-

User action:

-
-

The Windows Defender client encountered an error, and the current scan has stopped. The scan might fail due to a client-side issue. This event record includes the scan ID, type of scan (antivirus, antispyware, antimalware), scan parameters, the user that started the scan, the error code, and a description of the error. -

-

To troubleshoot this event: -

    -
  1. Run the scan again.
  2. -
  3. If it fails in the same way, go to the Microsoft Support site, enter the error number in the Search box to look for the error code.
  4. -
  5. Contact Microsoft Technical Support. -
  6. -
-

-
Event ID: 1006 -

Symbolic name:

-
-

MALWAREPROTECTION_MALWARE_DETECTED -

-
-

Message:

-
-

The antimalware engine found malware or other potentially unwanted software. -

-
-

Description:

-
-

-

For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Detection Origin: <Detection origin>, for example:
    -
  • Unknown
  • -
  • Local computer
  • -
  • Network share
  • -
  • Internet
  • -
  • Incoming traffic
  • -
  • Outgoing traffic
  • -
-
-
Detection Type: <Detection type>, for example:
    -
  • Heuristics
  • -
  • Generic
  • -
  • Concrete
  • -
  • Dynamic signature
  • -
-
-
Detection Source: <Detection source> for example:
    -
  • User: user initiated
  • -
  • System: system initiated
  • -
  • Real-time: real-time component initiated
  • -
  • IOAV: IE Downloads and Outlook Express Attachments initiated
  • -
  • NIS: Network inspection system
  • -
  • IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls
  • -
  • Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence
  • -
  • Remote attestation
  • -
Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. -UAC
-
Status: <Status>
-
User: <Domain>\<User>
-
Process Name: <Process in the PID>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1007 -

Symbolic name:

-
-

MALWAREPROTECTION_MALWARE_ACTION_TAKEN -

-
-

Message:

-
-

The antimalware platform performed an action to protect your system from malware or other potentially unwanted software. -

-
-

Description:

-
-

-

Windows Defender has taken action to protect this machine from malware or other potentially unwanted software. For more information please see the following:

-
-
User: <Domain>\<User>
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Action: <Action>, for example:
    -
  • Clean: The resource was cleaned
  • -
  • Quarantine: The resource was quarantined
  • -
  • Remove: The resource was deleted
  • -
  • Allow: The resource was allowed to execute/exist
  • -
  • User defined: User defined action which is normally one from this list of actions that the user has specified
  • -
  • No action: No action
  • -
  • Block: The resource was blocked from executing
  • -
-
-
Status: <Status>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1008 -

Symbolic name:

-
-

MALWAREPROTECTION_MALWARE_ACTION_FAILED

-
-

Message:

-
-

The antimalware platform attempted to perform an action to protect your system from malware or other potentially unwanted software, but the action failed.

-
-

Description:

-
-

-

Windows Defender has encountered an error when taking action on malware or other potentially unwanted software. For more information please see the following:

-
-
User: <Domain>\<User>
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Action: <Action>, for example:
    -
  • Clean: The resource was cleaned
  • -
  • Quarantine: The resource was quarantined
  • -
  • Remove: The resource was deleted
  • -
  • Allow: The resource was allowed to execute/exist
  • -
  • User defined: User defined action which is normally one from this list of actions that the user has specified
  • -
  • No action: No action
  • -
  • Block: The resource was blocked from executing
  • -
-
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Status: <Status>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1009 -

Symbolic name:

-
-

MALWAREPROTECTION_QUARANTINE_RESTORE -

-
-

Message:

-
-

The antimalware platform restored an item from quarantine. -

-
-

Description:

-
-

-

Windows Defender has restored an item from quarantine. For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
User: <Domain>\<User>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1010 -

Symbolic name:

-
-

MALWAREPROTECTION_QUARANTINE_RESTORE_FAILED -

-
-

Message:

-
-

The antimalware platform could not restore an item from quarantine. -

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to restore an item from quarantine. For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
User: <Domain>\<User>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1011 -

Symbolic name:

-
-

MALWAREPROTECTION_QUARANTINE_DELETE

-
-

Message:

-
-

The antimalware platform deleted an item from quarantine. -

-
-

Description:

-
-

-

Windows Defender has deleted an item from quarantine. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
User: <Domain>\<User>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1012 -

Symbolic name:

-
-

MALWAREPROTECTION_QUARANTINE_DELETE_FAILED -

-
-

Message:

-
-

The antimalware platform could not delete an item from quarantine.

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to delete an item from quarantine. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
User: <Domain>\<User>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
Event ID: 1013 -

Symbolic name:

-
-

MALWAREPROTECTION_MALWARE_HISTORY_DELETE -

-
-

Message:

-
-

The antimalware platform deleted history of malware and other potentially unwanted software.

-
-

Description:

-
-

-

Windows Defender has removed history of malware and other potentially unwanted software.

-
-
Time: The time when the event occurred, for example when the history is purged. Note that this parameter is not used in threat events so that there is no confusion regarding whether it is remediation time or infection time. For those, we specifically call them as Action Time or Detection Time.
-
User: <Domain>\<User>
-
-

-
Event ID: 1014 -

Symbolic name:

-
-

MALWAREPROTECTION_MALWARE_HISTORY_DELETE_FAILED -

-
-

Message:

-
-

The antimalware platform could not delete history of malware and other potentially unwanted software.

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to remove history of malware and other potentially unwanted software.

-
-
Time: The time when the event occurred, for example when the history is purged. Note that this parameter is not used in threat events so that there is no confusion regarding whether it is remediation time or infection time. For those, we specifically call them as Action Time or Detection Time.
-
User: <Domain>\<User>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
Event ID: 1015 -

Symbolic name:

-
-

MALWAREPROTECTION_BEHAVIOR_DETECTED -

-
-

Message:

-
-

The antimalware platform detected suspicious behavior.

-
-

Description:

-
-

-

Windows Defender has detected a suspicious behavior. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Detection Origin: <Detection origin>, for example: -
    -
  • Unknown
  • -
  • Local computer
  • -
  • Network share
  • -
  • Internet
  • -
  • Incoming traffic
  • -
  • Outgoing traffic
  • -
-
-
Detection Type: <Detection type>, for example:
    -
  • Heuristics
  • -
  • Generic
  • -
  • Concrete
  • -
  • Dynamic signature
  • -
-
-
Detection Source: <Detection source> for example:
    -
  • User: user initiated
  • -
  • System: system initiated
  • -
  • Real-time: real-time component initiated
  • -
  • IOAV: IE Downloads and Outlook Express Attachments initiated
  • -
  • NIS: Network inspection system
  • -
  • IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls
  • -
  • Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence
  • -
  • Remote attestation
  • -
Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. -UAC
-
Status: <Status>
-
User: <Domain>\<User>
-
Process Name: <Process in the PID>
-
Signature ID: Enumeration matching severity.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
Fidelity Label:
-
Target File Name: <File name> -Name of the file.
-
-

-
Event ID: 1116 -

Symbolic name:

-
-

MALWAREPROTECTION_STATE_MALWARE_DETECTED

-
-

Message:

-
-

The antimalware platform detected malware or other potentially unwanted software. -

-
-

Description:

-
-

-

Windows Defender has detected malware or other potentially unwanted software. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Detection Origin: <Detection origin>, for example: -
    -
  • Unknown
  • -
  • Local computer
  • -
  • Network share
  • -
  • Internet
  • -
  • Incoming traffic
  • -
  • Outgoing traffic
  • -
-
-
Detection Type: <Detection type>, for example:
    -
  • Heuristics
  • -
  • Generic
  • -
  • Concrete
  • -
  • Dynamic signature
  • -
-
-
Detection Source: <Detection source> for example:
    -
  • User: user initiated
  • -
  • System: system initiated
  • -
  • Real-time: real-time component initiated
  • -
  • IOAV: IE Downloads and Outlook Express Attachments initiated
  • -
  • NIS: Network inspection system
  • -
  • IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls
  • -
  • Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence
  • -
  • Remote attestation
  • -
Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. -UAC
-
User: <Domain>\<User>
-
Process Name: <Process in the PID>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
-

User action:

-
-

No action is required. Windows Defender can suspend and take routine action on this threat. If you want to remove the threat manually, in the Windows Defender interface, click Clean Computer.

-
Event ID: 1117 -

Symbolic name:

-
-

MALWAREPROTECTION_STATE_MALWARE_ACTION_TAKEN -

-
-

Message:

-
-

The antimalware platform performed an action to protect your system from malware or other potentially unwanted software. -

-
-

Description:

-
-

-

Windows Defender has taken action to protect this machine from malware or other potentially unwanted software. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Detection Origin: <Detection origin>, for example: -
    -
  • Unknown
  • -
  • Local computer
  • -
  • Network share
  • -
  • Internet
  • -
  • Incoming traffic
  • -
  • Outgoing traffic
  • -
-
-
Detection Type: <Detection type>, for example:
    -
  • Heuristics
  • -
  • Generic
  • -
  • Concrete
  • -
  • Dynamic signature
  • -
-
-
Detection Source: <Detection source> for example:
    -
  • User: user initiated
  • -
  • System: system initiated
  • -
  • Real-time: real-time component initiated
  • -
  • IOAV: IE Downloads and Outlook Express Attachments initiated
  • -
  • NIS: Network inspection system
  • -
  • IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls
  • -
  • Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence
  • -
  • Remote attestation
  • -
Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. -UAC
-
User: <Domain>\<User>
-
Process Name: <Process in the PID>
-
Action: <Action>, for example:
    -
  • Clean: The resource was cleaned
  • -
  • Quarantine: The resource was quarantined
  • -
  • Remove: The resource was deleted
  • -
  • Allow: The resource was allowed to execute/exist
  • -
  • User defined: User defined action which is normally one from this list of actions that the user has specified
  • -
  • No action: No action
  • -
  • Block: The resource was blocked from executing
  • -
-
-
Action Status: <Description of additional actions>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
-

User action:

-
-

No action is necessary. Windows Defender removed or quarantined a threat.

-
Event ID: 1118 -

Symbolic name:

-
-

MALWAREPROTECTION_STATE_MALWARE_ACTION_FAILED

-
-

Message:

-
-

The antimalware platform attempted to perform an action to protect your system from malware or other potentially unwanted software, but the action failed. -

-
-

Description:

-
-

-

Windows Defender has encountered a non-critical error when taking action on malware or other potentially unwanted software. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Detection Origin: <Detection origin>, for example: -
    -
  • Unknown
  • -
  • Local computer
  • -
  • Network share
  • -
  • Internet
  • -
  • Incoming traffic
  • -
  • Outgoing traffic
  • -
-
-
Detection Type: <Detection type>, for example:
    -
  • Heuristics
  • -
  • Generic
  • -
  • Concrete
  • -
  • Dynamic signature
  • -
-
-
Detection Source: <Detection source> for example:
    -
  • User: user initiated
  • -
  • System: system initiated
  • -
  • Real-time: real-time component initiated
  • -
  • IOAV: IE Downloads and Outlook Express Attachments initiated
  • -
  • NIS: Network inspection system
  • -
  • IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls
  • -
  • Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence
  • -
  • Remote attestation
  • -
Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. -UAC
-
User: <Domain>\<User>
-
Process Name: <Process in the PID>
-
Action: <Action>, for example:
    -
  • Clean: The resource was cleaned
  • -
  • Quarantine: The resource was quarantined
  • -
  • Remove: The resource was deleted
  • -
  • Allow: The resource was allowed to execute/exist
  • -
  • User defined: User defined action which is normally one from this list of actions that the user has specified
  • -
  • No action: No action
  • -
  • Block: The resource was blocked from executing
  • -
-
-
Action Status: <Description of additional actions>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
-

User action:

-
-

No action is necessary. Windows Defender failed to complete a task related to the malware remediation. This is not a critical failure.

-
Event ID: 1119 -

Symbolic name:

-
-

MALWAREPROTECTION_STATE_MALWARE_ACTION_CRITICALLY_FAILED -

-
-

Message:

-
-

The antimalware platform encountered a critical error when trying to take action on malware or other potentially unwanted software. There are more details in the event message.

-
-

Description:

-
-

-

Windows Defender has encountered a critical error when taking action on malware or other potentially unwanted software. -For more information please see the following:

-
-
Name: <Threat name>
-
ID: <Threat ID>
-
Severity: <Severity>, for example:
    -
  • Low
  • -
  • Moderate
  • -
  • High
  • -
  • Severe
  • -
-
-
Category: <Category description>, for example, any threat or malware type.
-
Path: <File path>
-
Detection Origin: <Detection origin>, for example: -
    -
  • Unknown
  • -
  • Local computer
  • -
  • Network share
  • -
  • Internet
  • -
  • Incoming traffic
  • -
  • Outgoing traffic
  • -
-
-
Detection Type: <Detection type>, for example:
    -
  • Heuristics
  • -
  • Generic
  • -
  • Concrete
  • -
  • Dynamic signature
  • -
-
-
Detection Source: <Detection source> for example:
    -
  • User: user initiated
  • -
  • System: system initiated
  • -
  • Real-time: real-time component initiated
  • -
  • IOAV: IE Downloads and Outlook Express Attachments initiated
  • -
  • NIS: Network inspection system
  • -
  • IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls
  • -
  • Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence
  • -
  • Remote attestation
  • -
Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. -UAC
-
User: <Domain>\<User>
-
Process Name: <Process in the PID>
-
Action: <Action>, for example:
    -
  • Clean: The resource was cleaned
  • -
  • Quarantine: The resource was quarantined
  • -
  • Remove: The resource was deleted
  • -
  • Allow: The resource was allowed to execute/exist
  • -
  • User defined: User defined action which is normally one from this list of actions that the user has specified
  • -
  • No action: No action
  • -
  • Block: The resource was blocked from executing
  • -
-
-
Action Status: <Description of additional actions>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
-

User action:

-
-

The Windows Defender client encountered this error due to critical issues. The endpoint might not be protected. Review the error description then follow the relevant User action steps below.

+Event ID: 1000 +Symbolic name: + +**MALWAREPROTECTION\_SCAN\_STARTED** + +Message: + +**An antimalware scan started.** + +Description: + +Scan ID: <ID number of the relevant scan.> +Scan Type: <Scan type>, for example: +- Antivirus +- Antispyware +- Antimalware + +Scan Parameters: <Scan parameters>, for example: +- Full scan +- Quick scan +- Customer scan + +Scan Resources: <Resources (such as files/directories/BHO) that were scanned.> +User: <Domain>\\<User> +Event ID: 1001 +Symbolic name: + +**MALWAREPROTECTION\_SCAN\_COMPLETED** + +Message: + +**An antimalware scan finished.** + +Description: + +Scan ID: <ID number of the relevant scan.> +Scan Type: <Scan type>, for example: +- Antivirus +- Antispyware +- Antimalware + +Scan Parameters: <Scan parameters>, for example: +- Full scan +- Quick scan +- Customer scan + +User: <Domain>\\<User> +Scan Time: <The duration of a scan.> +Event ID: 1002 +Symbolic name: + +**MALWAREPROTECTION\_SCAN\_CANCELLED** + +Message: + +**An antimalware scan was stopped before it finished.** + +Description: + +Scan ID: <ID number of the relevant scan.> +Scan Type: <Scan type>, for example: +- Antivirus +- Antispyware +- Antimalware + +Scan Parameters: <Scan parameters>, for example: +- Full scan +- Quick scan +- Customer scan + +User: <Domain>\\<User> +Scan Time: <The duration of a scan.> +Event ID: 1003 +Symbolic name: + +**MALWAREPROTECTION\_SCAN\_PAUSED** + +Message: + +**An antimalware scan was paused.** + +Description: + +Scan ID: <ID number of the relevant scan.> +Scan Type: <Scan type>, for example: +- Antivirus +- Antispyware +- Antimalware + +Scan Parameters: <Scan parameters>, for example: +- Full scan +- Quick scan +- Customer scan + +User: <Domain>\\<User> +Event ID: 1004 +Symbolic name: + +**MALWAREPROTECTION\_SCAN\_RESUMED** + +Message: + +**An antimalware scan was resumed.** + +Description: + +Scan ID: <ID number of the relevant scan.> +Scan Type: <Scan type>, for example: +- Antivirus +- Antispyware +- Antimalware + +Scan Parameters: <Scan parameters>, for example: +- Full scan +- Quick scan +- Customer scan + +User: <Domain>\\<User> +Event ID: 1005 +Symbolic name: + +**MALWAREPROTECTION\_SCAN\_FAILED** + +Message: + +**An antimalware scan failed.** + +Description: + +Scan ID: <ID number of the relevant scan.> +Scan Type: <Scan type>, for example: +- Antivirus +- Antispyware +- Antimalware + +Scan Parameters: <Scan parameters>, for example: +- Full scan +- Quick scan +- Customer scan + +User: <Domain>\\<User> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +User action: + +The Windows Defender client encountered an error, and the current scan has stopped. The scan might fail due to a client-side issue. This event record includes the scan ID, type of scan (antivirus, antispyware, antimalware), scan parameters, the user that started the scan, the error code, and a description of the error. + +To troubleshoot this event: + +1. Run the scan again. +2. If it fails in the same way, go to the [Microsoft Support site](http://go.microsoft.com/fwlink/?LinkId=215163), enter the error number in the **Search** box to look for the error code. +3. Contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 1006 +Symbolic name: + +**MALWAREPROTECTION\_MALWARE\_DETECTED** + +Message: + +**The antimalware engine found malware or other potentially unwanted software.** + +Description: + +For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Detection Origin: <Detection origin>, for example: +- Unknown +- Local computer +- Network share +- Internet +- Incoming traffic +- Outgoing traffic + +Detection Type: <Detection type>, for example: +- Heuristics +- Generic +- Concrete +- Dynamic signature + +Detection Source: <Detection source> for example: +- User: user initiated +- System: system initiated +- Real-time: real-time component initiated +- IOAV: IE Downloads and Outlook Express Attachments initiated +- NIS: Network inspection system +- IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls +- Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence +- Remote attestation + +Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. UAC +Status: <Status> +User: <Domain>\\<User> +Process Name: <Process in the PID> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1007 +Symbolic name: + +**MALWAREPROTECTION\_MALWARE\_ACTION\_TAKEN** + +Message: + +**The antimalware platform performed an action to protect your system from malware or other potentially unwanted software.** + +Description: + +Windows Defender has taken action to protect this machine from malware or other potentially unwanted software. For more information please see the following: + +User: <Domain>\\<User> +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Action: <Action>, for example: +- Clean: The resource was cleaned +- Quarantine: The resource was quarantined +- Remove: The resource was deleted +- Allow: The resource was allowed to execute/exist +- User defined: User defined action which is normally one from this list of actions that the user has specified +- No action: No action +- Block: The resource was blocked from executing + +Status: <Status> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1008 +Symbolic name: + +**MALWAREPROTECTION\_MALWARE\_ACTION\_FAILED** + +Message: + +**The antimalware platform attempted to perform an action to protect your system from malware or other potentially unwanted software, but the action failed.** + +Description: + +Windows Defender has encountered an error when taking action on malware or other potentially unwanted software. For more information please see the following: + +User: <Domain>\\<User> +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Action: <Action>, for example: +- Clean: The resource was cleaned +- Quarantine: The resource was quarantined +- Remove: The resource was deleted +- Allow: The resource was allowed to execute/exist +- User defined: User defined action which is normally one from this list of actions that the user has specified +- No action: No action +- Block: The resource was blocked from executing + +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Status: <Status> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1009 +Symbolic name: + +**MALWAREPROTECTION\_QUARANTINE\_RESTORE** + +Message: + +**The antimalware platform restored an item from quarantine.** + +Description: + +Windows Defender has restored an item from quarantine. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +User: <Domain>\\<User> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1010 +Symbolic name: + +**MALWAREPROTECTION\_QUARANTINE\_RESTORE\_FAILED** + +Message: + +**The antimalware platform could not restore an item from quarantine.** + +Description: + +Windows Defender has encountered an error trying to restore an item from quarantine. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +User: <Domain>\\<User> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1011 +Symbolic name: + +**MALWAREPROTECTION\_QUARANTINE\_DELETE** + +Message: + +**The antimalware platform deleted an item from quarantine.** + +Description: + +Windows Defender has deleted an item from quarantine. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +User: <Domain>\\<User> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1012 +Symbolic name: + +**MALWAREPROTECTION\_QUARANTINE\_DELETE\_FAILED** + +Message: + +**The antimalware platform could not delete an item from quarantine.** + +Description: + +Windows Defender has encountered an error trying to delete an item from quarantine. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +User: <Domain>\\<User> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Event ID: 1013 +Symbolic name: + +**MALWAREPROTECTION\_MALWARE\_HISTORY\_DELETE** + +Message: + +**The antimalware platform deleted history of malware and other potentially unwanted software.** + +Description: + +Windows Defender has removed history of malware and other potentially unwanted software. + +Time: The time when the event occurred, for example when the history is purged. Note that this parameter is not used in threat events so that there is no confusion regarding whether it is remediation time or infection time. For those, we specifically call them as Action Time or Detection Time. +User: <Domain>\\<User> +Event ID: 1014 +Symbolic name: + +**MALWAREPROTECTION\_MALWARE\_HISTORY\_DELETE\_FAILED** + +Message: + +The antimalware platform could not delete history of malware and other potentially unwanted software. + +Description: + +Windows Defender has encountered an error trying to remove history of malware and other potentially unwanted software. + +Time: The time when the event occurred, for example when the history is purged. Note that this parameter is not used in threat events so that there is no confusion regarding whether it is remediation time or infection time. For those, we specifically call them as Action Time or Detection Time. +User: <Domain>\\<User> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Event ID: 1015 +Symbolic name: + +**MALWAREPROTECTION\_BEHAVIOR\_DETECTED** + +Message: + +**The antimalware platform detected suspicious behavior.** + +Description: + +Windows Defender has detected a suspicious behavior. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Detection Origin: <Detection origin>, for example: +- Unknown +- Local computer +- Network share +- Internet +- Incoming traffic +- Outgoing traffic + +Detection Type: <Detection type>, for example: +- Heuristics +- Generic +- Concrete +- Dynamic signature + +Detection Source: <Detection source> for example: +- User: user initiated +- System: system initiated +- Real-time: real-time component initiated +- IOAV: IE Downloads and Outlook Express Attachments initiated +- NIS: Network inspection system +- IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls +- Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence +- Remote attestation + +Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. UAC +Status: <Status> +User: <Domain>\\<User> +Process Name: <Process in the PID> +Signature ID: Enumeration matching severity. +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +Fidelity Label: +Target File Name: <File name> Name of the file. +Event ID: 1116 +Symbolic name: + +**MALWAREPROTECTION\_STATE\_MALWARE\_DETECTED** + +Message: + +**The antimalware platform detected malware or other potentially unwanted software.** + +Description: + +Windows Defender has detected malware or other potentially unwanted software. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Detection Origin: <Detection origin>, for example: +- Unknown +- Local computer +- Network share +- Internet +- Incoming traffic +- Outgoing traffic + +Detection Type: <Detection type>, for example: +- Heuristics +- Generic +- Concrete +- Dynamic signature + +Detection Source: <Detection source> for example: +- User: user initiated +- System: system initiated +- Real-time: real-time component initiated +- IOAV: IE Downloads and Outlook Express Attachments initiated +- NIS: Network inspection system +- IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls +- Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence +- Remote attestation + +Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. UAC +User: <Domain>\\<User> +Process Name: <Process in the PID> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +User action: + +No action is required. Windows Defender can suspend and take routine action on this threat. If you want to remove the threat manually, in the Windows Defender interface, click **Clean Computer**. + +Event ID: 1117 +Symbolic name: + +**MALWAREPROTECTION\_STATE\_MALWARE\_ACTION\_TAKEN** + +Message: + +**The antimalware platform performed an action to protect your system from malware or other potentially unwanted software.** + +Description: + +Windows Defender has taken action to protect this machine from malware or other potentially unwanted software. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Detection Origin: <Detection origin>, for example: +- Unknown +- Local computer +- Network share +- Internet +- Incoming traffic +- Outgoing traffic + +Detection Type: <Detection type>, for example: +- Heuristics +- Generic +- Concrete +- Dynamic signature + +Detection Source: <Detection source> for example: +- User: user initiated +- System: system initiated +- Real-time: real-time component initiated +- IOAV: IE Downloads and Outlook Express Attachments initiated +- NIS: Network inspection system +- IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls +- Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence +- Remote attestation + +Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. UAC +User: <Domain>\\<User> +Process Name: <Process in the PID> +Action: <Action>, for example: +- Clean: The resource was cleaned +- Quarantine: The resource was quarantined +- Remove: The resource was deleted +- Allow: The resource was allowed to execute/exist +- User defined: User defined action which is normally one from this list of actions that the user has specified +- No action: No action +- Block: The resource was blocked from executing + +Action Status: <Description of additional actions> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +User action: + +No action is necessary. Windows Defender removed or quarantined a threat. + +Event ID: 1118 +Symbolic name: + +**MALWAREPROTECTION\_STATE\_MALWARE\_ACTION\_FAILED** + +Message: + +**The antimalware platform attempted to perform an action to protect your system from malware or other potentially unwanted software, but the action failed.** + +Description: + +Windows Defender has encountered a non-critical error when taking action on malware or other potentially unwanted software. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Detection Origin: <Detection origin>, for example: +- Unknown +- Local computer +- Network share +- Internet +- Incoming traffic +- Outgoing traffic + +Detection Type: <Detection type>, for example: +- Heuristics +- Generic +- Concrete +- Dynamic signature + +Detection Source: <Detection source> for example: +- User: user initiated +- System: system initiated +- Real-time: real-time component initiated +- IOAV: IE Downloads and Outlook Express Attachments initiated +- NIS: Network inspection system +- IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls +- Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence +- Remote attestation + +Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. UAC +User: <Domain>\\<User> +Process Name: <Process in the PID> +Action: <Action>, for example: +- Clean: The resource was cleaned +- Quarantine: The resource was quarantined +- Remove: The resource was deleted +- Allow: The resource was allowed to execute/exist +- User defined: User defined action which is normally one from this list of actions that the user has specified +- No action: No action +- Block: The resource was blocked from executing + +Action Status: <Description of additional actions> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +User action: + +No action is necessary. Windows Defender failed to complete a task related to the malware remediation. This is not a critical failure. + +Event ID: 1119 +Symbolic name: + +**MALWAREPROTECTION\_STATE\_MALWARE\_ACTION\_CRITICALLY\_FAILED** + +Message: + +**The antimalware platform encountered a critical error when trying to take action on malware or other potentially unwanted software. There are more details in the event message.** + +Description: + +Windows Defender has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following: + +Name: <Threat name> +ID: <Threat ID> +Severity: <Severity>, for example: +- Low +- Moderate +- High +- Severe + +Category: <Category description>, for example, any threat or malware type. +Path: <File path> +Detection Origin: <Detection origin>, for example: +- Unknown +- Local computer +- Network share +- Internet +- Incoming traffic +- Outgoing traffic + +Detection Type: <Detection type>, for example: +- Heuristics +- Generic +- Concrete +- Dynamic signature + +Detection Source: <Detection source> for example: +- User: user initiated +- System: system initiated +- Real-time: real-time component initiated +- IOAV: IE Downloads and Outlook Express Attachments initiated +- NIS: Network inspection system +- IEPROTECT: IE - IExtensionValidation; this protects against malicious webpage controls +- Early Launch Antimalware (ELAM). This includes malware detected by the boot sequence +- Remote attestation + +Antimalware Scan Interface (AMSI). Primarily used to protect scripts (PS, VBS), though it can be invoked by third parties as well. UAC +User: <Domain>\\<User> +Process Name: <Process in the PID> +Action: <Action>, for example: +- Clean: The resource was cleaned +- Quarantine: The resource was quarantined +- Remove: The resource was deleted +- Allow: The resource was allowed to execute/exist +- User defined: User defined action which is normally one from this list of actions that the user has specified +- No action: No action +- Block: The resource was blocked from executing + +Action Status: <Description of additional actions> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +User action: + +The Windows Defender client encountered this error due to critical issues. The endpoint might not be protected. Review the error description then follow the relevant **User action** steps below. + - - - ++++ + + + + - - - + + + + + - - - + + + - - - + + + - - - + + + +
ActionUser action
ActionUser action
-

Remove

-
-

Update the definitions then verify that the removal was successful.

-

Remove

Update the definitions then verify that the removal was successful.

-

Clean

-
-

Update the definitions then verify that the remediation was successful.

-

Clean

Update the definitions then verify that the remediation was successful.

-

Quarantine

-
-

Update the definitions and verify that the user has permission to access the necessary resources.

-

Quarantine

Update the definitions and verify that the user has permission to access the necessary resources.

-

Allow

-
-

Verify that the user has permission to access the necessary resources.

-

Allow

Verify that the user has permission to access the necessary resources.

-

 

-

If this event persists:

    -
  1. Run the scan again.
  2. -
  3. If it fails in the same way, go to the Microsoft Support site, enter the error number in the Search box to look for the error code.
  4. -
  5. Contact Microsoft Technical Support. -
  6. -
-

-
Event ID: 1120 -

Symbolic name:

-
-

MALWAREPROTECTION_THREAT_HASH

-
-

Message:

-
-

Windows Defender has deduced the hashes for a threat resource.

-
-

Description:

-
-

-

Windows Defender client is up and running in a healthy state.

-
-
Current Platform Version: <Current platform version>
-
Threat Resource Path: <Path>
-
Hashes: <Hashes>
-
-

-
-
Note  This event will only be logged if the following policy is set: ThreatFileHashLogging unsigned.
-
 
-
Event ID: 1150 -

Symbolic name:

-
-

MALWAREPROTECTION_SERVICE_HEALTHY

-
-

Message:

-
-

If your antimalware platform reports status to a monitoring platform, this event indicates that the antimalware platform is running and in a healthy state. -

-
-

Description:

-
-

-

Windows Defender client is up and running in a healthy state.

-
-
Platform Version: <Current platform version>
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware Engine version>
-
-

-
-

User action:

-
-

No action is necessary. The Windows Defenderclient is in a healthy state. This event is reported on an hourly basis.

-
Event ID: 2000 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_UPDATED -

-
-

Message:

-
-

The antimalware definitions updated successfully. -

-
-

Description:

-
-

-

Windows Defender signature version has been updated.

-
-
Current Signature Version: <Current signature version>
-
Previous Signature Version: <Previous signature version>
-
Signature Type: <Signature type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
  • Network Inspection System
  • -
-
-
Update Type: <Update type>, either Full or Delta.
-
User: <Domain>\<User>
-
Current Engine Version: <Current engine version>
-
Previous Engine Version: <Previous engine version>
-
-

-
-

User action:

-
-

No action is necessary. The Windows Defender client is in a healthy state. This event is reported when signatures are successfully updated.

-
Event ID: 2001 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_UPDATE_FAILED

-
-

Message:

-
-

The antimalware definition update failed. -

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to update signatures.

-
-
New Signature Version: <New version number>
-
Previous Signature Version: <Previous signature version>
-
Update Source: <Update source>, for example: -
    -
  • Signature update folder
  • -
  • Internal definition update server
  • -
  • Microsoft Update Server
  • -
  • File share
  • -
  • Microsoft Malware Protection Center (MMPC)
  • -
-
-
Update Stage: <Update stage>, for example: -
    -
  • Search
  • -
  • Download
  • -
  • Install
  • -
-
-
Source Path: File share name for Universal Naming Convention (UNC), server name for Windows Server Update Services (WSUS)/Microsoft Update/ADL.
-
Signature Type: <Signature type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
  • Network Inspection System
  • -
-
-
Update Type: <Update type>, either Full or Delta.
-
User: <Domain>\<User>
-
Current Engine Version: <Current engine version>
-
Previous Engine Version: <Previous engine version>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
-

User action:

-
-

This error occurs when there is a problem updating definitions.

-

To troubleshoot this event: -

    -
  1. Update the definitions. Either:
      -
    1. Click the Update definitions button on the Update tab in Windows Defender. Update definitions in Windows Defender

      Or,

      -
    2. -
    3. Download the latest definitions from the Microsoft Malware Protection Center. -

      Note: The size of the definitions file downloaded from the Microsoft Malware Protection Center can exceed 60 MB and should not be used as a long-term solution for updating definitions.

      -
    4. -
    -
  2. -
  3. Review the entries in the %Windir%\WindowsUpdate.log file for more information about this error.
  4. -
  5. Contact Microsoft Technical Support. -
  6. -
-

-
Event ID: 2002 -

Symbolic name:

-
-

MALWAREPROTECTION_ENGINE_UPDATED

-
-

Message:

-
-

The antimalware engine updated successfully. -

-
-

Description:

-
-

-

Windows Defender engine version has been updated.

-
-
Current Engine Version: <Current engine version>
-
Previous Engine Version: <Previous engine version>
-
Engine Type: <Engine type>, either antimalware engine or Network Inspection System engine.
-
User: <Domain>\<User>
-
-

-
-

User action:

-
-

No action is necessary. The Windows Defender client is in a healthy state. This event is reported when the antimalware engine is successfully updated.

-
Event ID: 2003 -

Symbolic name:

-
-

MALWAREPROTECTION_ENGINE_UPDATE_FAILED

-
-

Message:

-
-

The antimalware engine update failed. -

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to update the engine.

-
-
New Engine Version:
-
Previous Engine Version: <Previous engine version>
-
Engine Type: <Engine type>, either antimalware engine or Network Inspection System engine.
-
User: <Domain>\<User>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
-

User action:

-
-

The Windows Defender client update failed. This event occurs when the client fails to update itself. This event is usually due to an interruption in network connectivity during an update.

-

To troubleshoot this event: -

    -
  1. Update the definitions. Either:
      -
    1. Click the Update definitions button on the Update tab in Windows Defender. Update definitions in Windows Defender

      Or,

      -
    2. -
    3. Download the latest definitions from the Microsoft Malware Protection Center. +  -

      Note: The size of the definitions file downloaded from the Microsoft Malware Protection Center can exceed 60 MB and should not be used as a long-term solution for updating definitions.

      -
    4. -
    -
  2. -
  3. Contact Microsoft Technical Support. -
  4. -
-

-
Event ID: 2004 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_REVERSION

-
-

Message:

-
-

There was a problem loading antimalware definitions. The antimalware engine will attempt to load the last-known good set of definitions.

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.

-
-
Signatures Attempted:
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Signature Version: <Definition version>
-
Engine Version: <Antimalware engine version>
-
-

-
-

User action:

-
-

The Windows Defender client attempted to download and install the latest definitions file and failed. This error can occur when the client encounters an error while trying to load the definitions, or if the file is corrupt. Windows Defender will attempt to revert back to a known-good set of definitions.

-

To troubleshoot this event: -

    -
  1. Restart the computer and try again.
  2. -
  3. Download the latest definitions from the Microsoft Malware Protection Center. +If this event persists: -

    Note: The size of the definitions file downloaded from the Microsoft Malware Protection Center can exceed 60 MB and should not be used as a long-term solution for updating definitions.

    -
  4. -
  5. Contact Microsoft Technical Support. -
  6. -
-

-
Event ID: 2005 -

Symbolic name:

-
-

MALWAREPROTECTION_ENGINE_UPDATE_PLATFORMOUTOFDATE

-
-

Message:

-
-

The antimalware engine failed to load because the antimalware platform is out of date. The antimalware platform will load the last-known good antimalware engine and attempt to update.

-
-

Description:

-
-

-

Windows Defender could not load antimalware engine because current platform version is not supported. Windows Defender will revert back to the last known-good engine and a platform update will be attempted.

-
-
Current Platform Version: <Current platform version>
-
-

-
Event ID: 2006 -

Symbolic name:

-
-

MALWAREPROTECTION_PLATFORM_UPDATE_FAILED -

-
-

Message:

-
-

The platform update failed. -

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to update the platform.

-
-
Current Platform Version: <Current platform version>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
Event ID: 2007 -

Symbolic name:

-
-

MALWAREPROTECTION_PLATFORM_ALMOSTOUTOFDATE

-
-

Message:

-
-

The platform will soon be out of date. Download the latest platform to maintain up-to-date protection.

-
-

Description:

-
-

-

Windows Defender will soon require a newer platform version to support future versions of the antimalware engine. Download the latest Windows Defender platform to maintain the best level of protection available.

-
-
Current Platform Version: <Current platform version>
-
-

-
Event ID: 2010 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_FASTPATH_UPDATED -

-
-

Message:

-
-

The antimalware engine used the Dynamic Signature Service to get additional definitions. -

-
-

Description:

-
-

-

Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine.

-
-
Current Signature Version: <Current signature version>
-
Signature Type: <Signature type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
  • Network Inspection System
  • -
-
-
Current Engine Version: <Current engine version>
-
Dynamic Signature Type: <Dynamic signature type>, for example: -
    -
  • Version
  • -
  • Timestamp
  • -
  • No limit
  • -
  • Duration
  • -
-
-
Persistence Path: <Path>
-
Dynamic Signature Version: <Version number>
-
Dynamic Signature Compilation Timestamp: <Timestamp>
-
Persistence Limit Type: <Persistence limit type>, for example: -
    -
  • VDM version
  • -
  • Timestamp
  • -
  • No limit
  • -
-
-
Persistence Limit: Persistence limit of the fastpath signature.
-
-

-
Event ID: 2011 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_FASTPATH_DELETED -

-
-

Message:

-
-

The Dynamic Signature Service deleted the out-of-date dynamic definitions. -

-
-

Description:

-
-

-

Windows Defender used Dynamic Signature Service to discard obsolete signatures.

-
-
Current Signature Version: <Current signature version>
-
Signature Type: <Signature type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
  • Network Inspection System
  • -
-
-
Current Engine Version: <Current engine version>
-
Dynamic Signature Type: <Dynamic signature type>, for example: -
    -
  • Version
  • -
  • Timestamp
  • -
  • No limit
  • -
  • Duration
  • -
-
-
Persistence Path: <Path>
-
Dynamic Signature Version: <Version number>
-
Dynamic Signature Compilation Timestamp: <Timestamp>
-
Removal Reason:
-
Persistence Limit Type: <Persistence limit type>, for example: -
    -
  • VDM version
  • -
  • Timestamp
  • -
  • No limit
  • -
-
-
Persistence Limit: Persistence limit of the fastpath signature.
-
-

-
-

User action:

-
-

No action is necessary. The Windows Defender client is in a healthy state. This event is reported when the Dynamic Signature Service successfully deletes out-of-date dynamic definitions.

-
Event ID: 2012 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_FASTPATH_UPDATE_FAILED -

-
-

Message:

-
-

The antimalware engine encountered an error when trying to use the Dynamic Signature Service. -

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to use Dynamic Signature Service.

-
-
Current Signature Version: <Current signature version>
-
Signature Type: <Signature type>, for example:
    -
  • Antivirus
  • -
  • Antispyware
  • -
  • Antimalware
  • -
  • Network Inspection System
  • -
-
-
Current Engine Version: <Current engine version>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Dynamic Signature Type: <Dynamic signature type>, for example: -
    -
  • Version
  • -
  • Timestamp
  • -
  • No limit
  • -
  • Duration
  • -
-
-
Persistence Path: <Path>
-
Dynamic Signature Version: <Version number>
-
Dynamic Signature Compilation Timestamp: <Timestamp>
-
Persistence Limit Type: <Persistence limit type>, for example: -
    -
  • VDM version
  • -
  • Timestamp
  • -
  • No limit
  • -
-
-
Persistence Limit: Persistence limit of the fastpath signature.
-
-

-
-

User action:

-
-

Check your Internet connectivity settings.

-
Event ID: 2013 -

Symbolic name:

-
-

MALWAREPROTECTION_SIGNATURE_FASTPATH_DELETED_ALL -

-
-

Message:

-
-

The Dynamic Signature Service deleted all dynamic definitions. -

-
-

Description:

-
-

-

Windows Defender discarded all Dynamic Signature Service signatures.

-
-
Current Signature Version: <Current signature version>
-
-

-
Event ID: 2020 -

Symbolic name:

-
-

MALWAREPROTECTION_CLOUD_CLEAN_RESTORE_FILE_DOWNLOADED -

-
-

Message:

-
-

The antimalware engine downloaded a clean file. -

-
-

Description:

-
-

-

Windows Defender downloaded a clean file.

-
-
Filename: <File name> -Name of the file.
-
Current Signature Version: <Current signature version>
-
Current Engine Version: <Current engine version>
-
-

-
Event ID: 2021 -

Symbolic name:

-
-

MALWAREPROTECTION_CLOUD_CLEAN_RESTORE_FILE_DOWNLOAD_FAILED

-
-

Message:

-
-

The antimalware engine failed to download a clean file. -

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to download a clean file.

-
-
Filename: <File name> -Name of the file.
-
Current Signature Version: <Current signature version>
-
Current Engine Version: <Current engine version>
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
-

User action:

-
-

Check your Internet connectivity settings. -

-

The Windows Defender client encountered an error when using the Dynamic Signature Service to download the latest definitions to a specific threat. This error is likely caused by a network connectivity issue. -

-
Event ID: 2030 -

Symbolic name:

-
-

MALWAREPROTECTION_OFFLINE_SCAN_INSTALLED

-
-

Message:

-
-

The antimalware engine was downloaded and is configured to run offline on the next system restart.

-
-

Description:

-
-

Windows Defender downloaded and configured Windows Defender Offline to run on the next reboot.

-
Event ID: 2031 -

Symbolic name:

-
-

MALWAREPROTECTION_OFFLINE_SCAN_INSTALL_FAILED -

-
-

Message:

-
-

The antimalware engine was unable to download and configure an offline scan.

-
-

Description:

-
-

-

Windows Defender has encountered an error trying to download and configure Windows Defender Offline.

-
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
Event ID: 2040 -

Symbolic name:

-
-

MALWAREPROTECTION_OS_EXPIRING -

-
-

Message:

-
-

Antimalware support for this operating system version will soon end. -

-
-

Description:

-
-

The support for your operating system will expire shortly. Running Windows Defender on an out of support operating system is not an adequate solution to protect against threats.

-
Event ID: 2041 -

Symbolic name:

-
-

MALWAREPROTECTION_OS_EOL -

-
-

Message:

-
-

Antimalware support for this operating system has ended. You must upgrade the operating system for continued support. -

-
-

Description:

-
-

The support for your operating system has expired. Running Windows Defender on an out of support operating system is not an adequate solution to protect against threats.

-
Event ID: 2042 -

Symbolic name:

-
-

MALWAREPROTECTION_PROTECTION_EOL -

-
-

Message:

-
-

The antimalware engine no longer supports this operating system, and is no longer protecting your system from malware. -

-
-

Description:

-
-

The support for your operating system has expired. Windows Defender is no longer supported on your operating system, has stopped functioning, and is not protecting against malware threats.

-
Event ID: 3002 -

Symbolic name:

-
-

MALWAREPROTECTION_RTP_FEATURE_FAILURE -

-
-

Message:

-
-

Real-time protection encountered an error and failed.

-
-

Description:

-
-

-

Windows Defender Real-Time Protection feature has encountered an error and failed.

-
-
Feature: <Feature>, for example: -
    -
  • On Access
  • -
  • Internet Explorer downloads and Microsoft Outlook Express attachments
  • -
  • Behavior monitoring
  • -
  • Network Inspection System
  • -
-
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
Reason: The reason Windows Defender real-time protection has restarted a feature.
-
-

-
-

User action:

-
-

You should restart the system then run a full scan because it’s possible the system was not protected for some time. -

-

The Windows Defender client’s real-time protection feature encountered an error because one of the services failed to start. -

-

If it is followed by a 3007 event ID, the failure was temporary and the antimalware client recovered from the failure. -

-
Event ID: 3007 -

Symbolic name:

-
-

MALWAREPROTECTION_RTP_FEATURE_RECOVERED

-
-

Message:

-
-

Real-time protection recovered from a failure. We recommend running a full system scan when you see this error. -

-
-

Description:

-
-

-

Windows Defender Real-time Protection has restarted a feature. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down.

-
-
Feature: <Feature>, for example: -
    -
  • On Access
  • -
  • IE downloads and Outlook Express attachments
  • -
  • Behavior monitoring
  • -
  • Network Inspection System
  • -
-
-
Reason: The reason Windows Defender real-time protection has restarted a feature.
-
-

-
-

User action:

-
-

The real-time protection feature has restarted. If this event happens again, contact Microsoft Technical Support.

-
Event ID: 5000 -

Symbolic name:

-
-

MALWAREPROTECTION_RTP_ENABLED -

-
-

Message:

-
-

Real-time protection is enabled. -

-
-

Description:

-
-

Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was enabled.

-
Event ID: 5001 -

Symbolic name:

-
-

MALWAREPROTECTION_RTP_DISABLED

-
-

Message:

-
-

Real-time protection is disabled. -

-
-

Description:

-
-

Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was disabled.

-
Event ID: 5004 -

Symbolic name:

-
-

MALWAREPROTECTION_RTP_FEATURE_CONFIGURED -

-
-

Message:

-
-

The real-time protection configuration changed. -

-
-

Description:

-
-

-

Windows Defender Real-time Protection feature configuration has changed.

-
-
Feature: <Feature>, for example: -
    -
  • On Access
  • -
  • IE downloads and Outlook Express attachments
  • -
  • Behavior monitoring
  • -
  • Network Inspection System
  • -
-
-
Configuration:
-
-

-
Event ID: 5007 -

Symbolic name:

-
-

MALWAREPROTECTION_CONFIG_CHANGED -

-
-

Message:

-
-

The antimalware platform configuration changed.

-
-

Description:

-
-

-

Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.

-
-
Old value: <Old value number> -Old Windows Defender configuration value.
-
New value: <New value number> -New Windows Defender configuration value.
-
-

-
Event ID: 5008 -

Symbolic name:

-
-

MALWAREPROTECTION_ENGINE_FAILURE

-
-

Message:

-
-

The antimalware engine encountered an error and failed.

-
-

Description:

-
-

-

Windows Defender engine has been terminated due to an unexpected error.

-
-
Failure Type: <Failure type>, for example: -Crash -or Hang
-
Exception Code: <Error code>
-
Resource: <Resource>
-
-

-
-

User action:

-
-

To troubleshoot this event:

    -
  1. Try to restart the service.
      -
    • For antimalware, antivirus and spyware, at an elevated command prompt, type net stop msmpsvc, and then type net start msmpsvc to restart the antimalware engine.
    • -
    • For the Network Inspection System, at an elevated command prompt, type net start nissrv, and then type net start nissrv to restart the Network Inspection System engine by using the NiSSRV.exe file. +1. Run the scan again. +2. If it fails in the same way, go to the [Microsoft Support site](http://go.microsoft.com/fwlink/?LinkId=215163), enter the error number in the **Search** box to look for the error code. +3. Contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 1120 +Symbolic name: + +**MALWAREPROTECTION\_THREAT\_HASH** + +Message: + +**Windows Defender has deduced the hashes for a threat resource.** + +Description: + +Windows Defender client is up and running in a healthy state. + +Current Platform Version: <Current platform version> +Threat Resource Path: <Path> +Hashes: <Hashes> +**Note**  This event will only be logged if the following policy is set: **ThreatFileHashLogging unsigned**. + +  + +Event ID: 1150 +Symbolic name: + +**MALWAREPROTECTION\_SERVICE\_HEALTHY** + +Message: + +**If your antimalware platform reports status to a monitoring platform, this event indicates that the antimalware platform is running and in a healthy state.** + +Description: + +Windows Defender client is up and running in a healthy state. + +Platform Version: <Current platform version> +Signature Version: <Definition version> +Engine Version: <Antimalware Engine version> +User action: + +No action is necessary. The Windows Defenderclient is in a healthy state. This event is reported on an hourly basis. + +Event ID: 2000 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_UPDATED** + +Message: + +**The antimalware definitions updated successfully.** + +Description: + +Windows Defender signature version has been updated. + +Current Signature Version: <Current signature version> +Previous Signature Version: <Previous signature version> +Signature Type: <Signature type>, for example: +- Antivirus +- Antispyware +- Antimalware +- Network Inspection System + +Update Type: <Update type>, either Full or Delta. +User: <Domain>\\<User> +Current Engine Version: <Current engine version> +Previous Engine Version: <Previous engine version> +User action: + +No action is necessary. The Windows Defender client is in a healthy state. This event is reported when signatures are successfully updated. + +Event ID: 2001 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_UPDATE\_FAILED** + +Message: + +**The antimalware definition update failed.** + +Description: + +Windows Defender has encountered an error trying to update signatures. + +New Signature Version: <New version number> +Previous Signature Version: <Previous signature version> +Update Source: <Update source>, for example: +- Signature update folder +- Internal definition update server +- Microsoft Update Server +- File share +- Microsoft Malware Protection Center (MMPC) + +Update Stage: <Update stage>, for example: +- Search +- Download +- Install + +Source Path: File share name for Universal Naming Convention (UNC), server name for Windows Server Update Services (WSUS)/Microsoft Update/ADL. +Signature Type: <Signature type>, for example: +- Antivirus +- Antispyware +- Antimalware +- Network Inspection System + +Update Type: <Update type>, either Full or Delta. +User: <Domain>\\<User> +Current Engine Version: <Current engine version> +Previous Engine Version: <Previous engine version> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +User action: + +This error occurs when there is a problem updating definitions. + +To troubleshoot this event: + +1. Update the definitions. Either: + 1. Click the **Update definitions** button on the **Update** tab in Windows Defender. ![update definitions in windows defender](images/defender-updatedefs2.png) + + Or, + + 2. Download the latest definitions from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965). + + Note: The size of the definitions file downloaded from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965) can exceed 60 MB and should not be used as a long-term solution for updating definitions. + +2. Review the entries in the %Windir%\\WindowsUpdate.log file for more information about this error. +3. Contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 2002 +Symbolic name: + +**MALWAREPROTECTION\_ENGINE\_UPDATED** + +Message: + +**The antimalware engine updated successfully.** + +Description: + +Windows Defender engine version has been updated. + +Current Engine Version: <Current engine version> +Previous Engine Version: <Previous engine version> +Engine Type: <Engine type>, either antimalware engine or Network Inspection System engine. +User: <Domain>\\<User> +User action: + +No action is necessary. The Windows Defender client is in a healthy state. This event is reported when the antimalware engine is successfully updated. + +Event ID: 2003 +Symbolic name: + +**MALWAREPROTECTION\_ENGINE\_UPDATE\_FAILED** + +Message: + +**The antimalware engine update failed.** + +Description: + +Windows Defender has encountered an error trying to update the engine. + +New Engine Version: +Previous Engine Version: <Previous engine version> +Engine Type: <Engine type>, either antimalware engine or Network Inspection System engine. +User: <Domain>\\<User> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +User action: + +The Windows Defender client update failed. This event occurs when the client fails to update itself. This event is usually due to an interruption in network connectivity during an update. + +To troubleshoot this event: + +1. Update the definitions. Either: + 1. Click the **Update definitions** button on the **Update** tab in Windows Defender. ![update definitions in windows defender](images/defender-updatedefs2.png) + + Or, + + 2. Download the latest definitions from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965). + + Note: The size of the definitions file downloaded from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965) can exceed 60 MB and should not be used as a long-term solution for updating definitions. + +2. Contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 2004 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_REVERSION** + +Message: + +**There was a problem loading antimalware definitions. The antimalware engine will attempt to load the last-known good set of definitions.** + +Description: + +Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. + +Signatures Attempted: +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Signature Version: <Definition version> +Engine Version: <Antimalware engine version> +User action: + +The Windows Defender client attempted to download and install the latest definitions file and failed. This error can occur when the client encounters an error while trying to load the definitions, or if the file is corrupt. Windows Defender will attempt to revert back to a known-good set of definitions. + +To troubleshoot this event: + +1. Restart the computer and try again. +2. Download the latest definitions from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965). + + Note: The size of the definitions file downloaded from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965) can exceed 60 MB and should not be used as a long-term solution for updating definitions. + +3. Contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 2005 +Symbolic name: + +**MALWAREPROTECTION\_ENGINE\_UPDATE\_PLATFORMOUTOFDATE** + +Message: + +**The antimalware engine failed to load because the antimalware platform is out of date. The antimalware platform will load the last-known good antimalware engine and attempt to update.** + +Description: + +Windows Defender could not load antimalware engine because current platform version is not supported. Windows Defender will revert back to the last known-good engine and a platform update will be attempted. + +Current Platform Version: <Current platform version> +Event ID: 2006 +Symbolic name: + +**MALWAREPROTECTION\_PLATFORM\_UPDATE\_FAILED** + +Message: + +**The platform update failed.** + +Description: + +Windows Defender has encountered an error trying to update the platform. + +Current Platform Version: <Current platform version> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Event ID: 2007 +Symbolic name: + +**MALWAREPROTECTION\_PLATFORM\_ALMOSTOUTOFDATE** + +Message: + +**The platform will soon be out of date. Download the latest platform to maintain up-to-date protection.** + +Description: + +Windows Defender will soon require a newer platform version to support future versions of the antimalware engine. Download the latest Windows Defender platform to maintain the best level of protection available. + +Current Platform Version: <Current platform version> +Event ID: 2010 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_FASTPATH\_UPDATED** + +Message: + +**The antimalware engine used the Dynamic Signature Service to get additional definitions.** + +Description: + +Windows Defender used *Dynamic Signature Service* to retrieve additional signatures to help protect your machine. + +Current Signature Version: <Current signature version> +Signature Type: <Signature type>, for example: +- Antivirus +- Antispyware +- Antimalware +- Network Inspection System + +Current Engine Version: <Current engine version> +Dynamic Signature Type: <Dynamic signature type>, for example: +- Version +- Timestamp +- No limit +- Duration + +Persistence Path: <Path> +Dynamic Signature Version: <Version number> +Dynamic Signature Compilation Timestamp: <Timestamp> +Persistence Limit Type: <Persistence limit type>, for example: +- VDM version +- Timestamp +- No limit + +Persistence Limit: Persistence limit of the fastpath signature. +Event ID: 2011 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_FASTPATH\_DELETED** + +Message: + +**The Dynamic Signature Service deleted the out-of-date dynamic definitions.** + +Description: + +Windows Defender used *Dynamic Signature Service* to discard obsolete signatures. + +Current Signature Version: <Current signature version> +Signature Type: <Signature type>, for example: +- Antivirus +- Antispyware +- Antimalware +- Network Inspection System + +Current Engine Version: <Current engine version> +Dynamic Signature Type: <Dynamic signature type>, for example: +- Version +- Timestamp +- No limit +- Duration + +Persistence Path: <Path> +Dynamic Signature Version: <Version number> +Dynamic Signature Compilation Timestamp: <Timestamp> +Removal Reason: +Persistence Limit Type: <Persistence limit type>, for example: +- VDM version +- Timestamp +- No limit + +Persistence Limit: Persistence limit of the fastpath signature. +User action: + +No action is necessary. The Windows Defender client is in a healthy state. This event is reported when the Dynamic Signature Service successfully deletes out-of-date dynamic definitions. + +Event ID: 2012 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_FASTPATH\_UPDATE\_FAILED** + +Message: + +**The antimalware engine encountered an error when trying to use the Dynamic Signature Service.** + +Description: + +Windows Defender has encountered an error trying to use *Dynamic Signature Service*. + +Current Signature Version: <Current signature version> +Signature Type: <Signature type>, for example: +- Antivirus +- Antispyware +- Antimalware +- Network Inspection System + +Current Engine Version: <Current engine version> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Dynamic Signature Type: <Dynamic signature type>, for example: +- Version +- Timestamp +- No limit +- Duration + +Persistence Path: <Path> +Dynamic Signature Version: <Version number> +Dynamic Signature Compilation Timestamp: <Timestamp> +Persistence Limit Type: <Persistence limit type>, for example: +- VDM version +- Timestamp +- No limit + +Persistence Limit: Persistence limit of the fastpath signature. +User action: + +Check your Internet connectivity settings. + +Event ID: 2013 +Symbolic name: + +**MALWAREPROTECTION\_SIGNATURE\_FASTPATH\_DELETED\_ALL** + +Message: + +**The Dynamic Signature Service deleted all dynamic definitions.** + +Description: + +Windows Defender discarded all *Dynamic Signature Service* signatures. + +Current Signature Version: <Current signature version> +Event ID: 2020 +Symbolic name: + +**MALWAREPROTECTION\_CLOUD\_CLEAN\_RESTORE\_FILE\_DOWNLOADED** + +Message: + +**The antimalware engine downloaded a clean file.** + +Description: + +Windows Defender downloaded a clean file. + +Filename: <File name> Name of the file. +Current Signature Version: <Current signature version> +Current Engine Version: <Current engine version> +Event ID: 2021 +Symbolic name: + +**MALWAREPROTECTION\_CLOUD\_CLEAN\_RESTORE\_FILE\_DOWNLOAD\_FAILED** + +Message: + +**The antimalware engine failed to download a clean file.** + +Description: + +Windows Defender has encountered an error trying to download a clean file. + +Filename: <File name> Name of the file. +Current Signature Version: <Current signature version> +Current Engine Version: <Current engine version> +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +User action: + +Check your Internet connectivity settings. + +The Windows Defender client encountered an error when using the Dynamic Signature Service to download the latest definitions to a specific threat. This error is likely caused by a network connectivity issue. + +Event ID: 2030 +Symbolic name: + +**MALWAREPROTECTION\_OFFLINE\_SCAN\_INSTALLED** + +Message: + +**The antimalware engine was downloaded and is configured to run offline on the next system restart.** + +Description: + +Windows Defender downloaded and configured Windows Defender Offline to run on the next reboot. + +Event ID: 2031 +Symbolic name: + +**MALWAREPROTECTION\_OFFLINE\_SCAN\_INSTALL\_FAILED** + +Message: + +**The antimalware engine was unable to download and configure an offline scan.** + +Description: + +Windows Defender has encountered an error trying to download and configure Windows Defender Offline. + +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Event ID: 2040 +Symbolic name: + +**MALWAREPROTECTION\_OS\_EXPIRING** + +Message: + +**Antimalware support for this operating system version will soon end.** + +Description: + +The support for your operating system will expire shortly. Running Windows Defender on an out of support operating system is not an adequate solution to protect against threats. + +Event ID: 2041 +Symbolic name: + +**MALWAREPROTECTION\_OS\_EOL** + +Message: + +**Antimalware support for this operating system has ended. You must upgrade the operating system for continued support.** + +Description: + +The support for your operating system has expired. Running Windows Defender on an out of support operating system is not an adequate solution to protect against threats. + +Event ID: 2042 +Symbolic name: + +**MALWAREPROTECTION\_PROTECTION\_EOL** + +Message: + +**The antimalware engine no longer supports this operating system, and is no longer protecting your system from malware.** + +Description: + +The support for your operating system has expired. Windows Defender is no longer supported on your operating system, has stopped functioning, and is not protecting against malware threats. + +Event ID: 3002 +Symbolic name: + +**MALWAREPROTECTION\_RTP\_FEATURE\_FAILURE** + +Message: + +**Real-time protection encountered an error and failed.** + +Description: + +Windows Defender Real-Time Protection feature has encountered an error and failed. + +Feature: <Feature>, for example: +- On Access +- Internet Explorer downloads and Microsoft Outlook Express attachments +- Behavior monitoring +- Network Inspection System + +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +Reason: The reason Windows Defender real-time protection has restarted a feature. +User action: + +You should restart the system then run a full scan because it’s possible the system was not protected for some time. + +The Windows Defender client’s real-time protection feature encountered an error because one of the services failed to start. + +If it is followed by a 3007 event ID, the failure was temporary and the antimalware client recovered from the failure. + +Event ID: 3007 +Symbolic name: + +**MALWAREPROTECTION\_RTP\_FEATURE\_RECOVERED** + +Message: + +**Real-time protection recovered from a failure. We recommend running a full system scan when you see this error.** + +Description: + +Windows Defender Real-time Protection has restarted a feature. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down. + +Feature: <Feature>, for example: +- On Access +- IE downloads and Outlook Express attachments +- Behavior monitoring +- Network Inspection System + +Reason: The reason Windows Defender real-time protection has restarted a feature. +User action: + +The real-time protection feature has restarted. If this event happens again, contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 5000 +Symbolic name: + +**MALWAREPROTECTION\_RTP\_ENABLED** + +Message: + +**Real-time protection is enabled.** + +Description: + +Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was enabled. + +Event ID: 5001 +Symbolic name: + +**MALWAREPROTECTION\_RTP\_DISABLED** + +Message: + +**Real-time protection is disabled.** + +Description: + +Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was disabled. + +Event ID: 5004 +Symbolic name: + +**MALWAREPROTECTION\_RTP\_FEATURE\_CONFIGURED** + +Message: + +**The real-time protection configuration changed.** + +Description: + +Windows Defender Real-time Protection feature configuration has changed. + +Feature: <Feature>, for example: +- On Access +- IE downloads and Outlook Express attachments +- Behavior monitoring +- Network Inspection System + +Configuration: +Event ID: 5007 +Symbolic name: + +**MALWAREPROTECTION\_CONFIG\_CHANGED** + +Message: + +**The antimalware platform configuration changed.** + +Description: + +Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. + +Old value: <Old value number> Old Windows Defender configuration value. +New value: <New value number> New Windows Defender configuration value. +Event ID: 5008 +Symbolic name: + +**MALWAREPROTECTION\_ENGINE\_FAILURE** + +Message: + +**The antimalware engine encountered an error and failed.** + +Description: + +Windows Defender engine has been terminated due to an unexpected error. + +Failure Type: <Failure type>, for example: Crash or Hang +Exception Code: <Error code> +Resource: <Resource> +User action: + +To troubleshoot this event: + +1. Try to restart the service. + - For antimalware, antivirus and spyware, at an elevated command prompt, type **net stop msmpsvc**, and then type **net start msmpsvc** to restart the antimalware engine. + - For the *Network Inspection System*, at an elevated command prompt, type **net start nissrv**, and then type **net start nissrv** to restart the *Network Inspection System* engine by using the NiSSRV.exe file. + +2. If it fails in the same way, look up the error code by accessing the [Microsoft Support Site](http://go.microsoft.com/fwlink/?LinkId=215163) and entering the error number in the **Search** box, and contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +User action: + +The Windows Defender client engine stopped due to an unexpected error. + +To troubleshoot this event: + +1. Run the scan again. +2. If it fails in the same way, go to the [Microsoft Support site](http://go.microsoft.com/fwlink/?LinkId=215163), enter the error number in the **Search** box to look for the error code. +3. Contact [Microsoft Technical Support](http://go.microsoft.com/fwlink/?LinkId=215491). + +Event ID: 5009 +Symbolic name: + +**MALWAREPROTECTION\_ANTISPYWARE\_ENABLED** + +Message: + +**Scanning for malware and other potentially unwanted software is enabled.** + +Description: + +Windows Defender scanning for malware and other potentially unwanted software has been enabled. + +Event ID: 5010 +Symbolic name: + +**MALWAREPROTECTION\_ANTISPYWARE\_DISABLED** + +Message: + +**Scanning for malware and other potentially unwanted software is disabled.** + +Description: + +Windows Defender scanning for malware and other potentially unwanted software is disabled. + +Event ID: 5011 +Symbolic name: + +**MALWAREPROTECTION\_ANTIVIRUS\_ENABLED** + +Message: + +**Scanning for viruses is enabled.** + +Description: + +Windows Defender scanning for viruses has been enabled. + +Event ID: 5012 +Symbolic name: + +**MALWAREPROTECTION\_ANTIVIRUS\_DISABLED** + +Message: + +**Scanning for viruses is disabled.** + +Description: + +Windows Defender scanning for viruses is disabled. + +Event ID: 5100 +Symbolic name: + +**MALWAREPROTECTION\_EXPIRATION\_WARNING\_STATE** + +Message: + +**The antimalware platform will expire soon.** + +Description: + +Windows Defender has entered a grace period and will soon expire. After expiration, this program will disable protection against viruses, spyware, and other potentially unwanted software. + +Expiration Reason: The reason Windows Defender will expire. +Expiration Date: The date Windows Defender will expire. +Event ID: 5101 +Symbolic name: + +**MALWAREPROTECTION\_DISABLED\_EXPIRED\_STATE** + +Message: + +**The antimalware platform is expired.** + +Description:: + +Windows Defender grace period has expired. Protection against viruses, spyware, and other potentially unwanted software is disabled. + +Expiration Reason: +Expiration Date: +Error Code: <Error code> Result code associated with threat status. Standard HRESULT values. +Error Description: <Error description> Description of the error. +  + +## Windows Defender client error codes +If Windows Defender experiences any issues it will usually give you an error code to help you troubleshoot the issue. Most often an error means there was a problem installing an update. -
    • -
    -
  2. -
  3. If it fails in the same way, look up the error code by accessing the Microsoft Support Site and entering the error number in the Search box, and contact Microsoft Technical Support.
  4. -
-

-
-

User action:

-
-

The Windows Defender client engine stopped due to an unexpected error.

-

To troubleshoot this event: -

    -
  1. Run the scan again.
  2. -
  3. If it fails in the same way, go to the Microsoft Support site, enter the error number in the Search box to look for the error code.
  4. -
  5. Contact Microsoft Technical Support. -
  6. -
-

-
Event ID: 5009 -

Symbolic name:

-
-

MALWAREPROTECTION_ANTISPYWARE_ENABLED -

-
-

Message:

-
-

Scanning for malware and other potentially unwanted software is enabled. -

-
-

Description:

-
-

Windows Defender scanning for malware and other potentially unwanted software has been enabled.

-
Event ID: 5010 -

Symbolic name:

-
-

MALWAREPROTECTION_ANTISPYWARE_DISABLED -

-
-

Message:

-
-

Scanning for malware and other potentially unwanted software is disabled.

-
-

Description:

-
-

Windows Defender scanning for malware and other potentially unwanted software is disabled.

-
Event ID: 5011 -

Symbolic name:

-
-

MALWAREPROTECTION_ANTIVIRUS_ENABLED

-
-

Message:

-
-

Scanning for viruses is enabled.

-
-

Description:

-
-

Windows Defender scanning for viruses has been enabled.

-
Event ID: 5012 -

Symbolic name:

-
-

MALWAREPROTECTION_ANTIVIRUS_DISABLED -

-
-

Message:

-
-

Scanning for viruses is disabled. -

-
-

Description:

-
-

Windows Defender scanning for viruses is disabled.

-
Event ID: 5100 -

Symbolic name:

-
-

MALWAREPROTECTION_EXPIRATION_WARNING_STATE -

-
-

Message:

-
-

The antimalware platform will expire soon. -

-
-

Description:

-
-

-

Windows Defender has entered a grace period and will soon expire. After expiration, this program will disable protection against viruses, spyware, and other potentially unwanted software.

-
-
Expiration Reason: The reason Windows Defender will expire.
-
Expiration Date: The date Windows Defender will expire.
-
-

-
Event ID: 5101 -

Symbolic name:

-
-

MALWAREPROTECTION_DISABLED_EXPIRED_STATE -

-
-

Message:

-
-

The antimalware platform is expired. -

-
-

Description::

-
-

-

Windows Defender grace period has expired. Protection against viruses, spyware, and other potentially unwanted software is disabled.

-
-
Expiration Reason:
-
Expiration Date:
-
Error Code: <Error code> -Result code associated with threat status. Standard HRESULT values.
-
Error Description: <Error description> -Description of the error.
-
-

-
-

 

-

Windows Defender client error codes

-

If Windows Defender experiences any issues it will usually give you an error code to help you troubleshoot the issue. +This section provides the following information about Windows Defender client errors. -Most often an error means there was a problem installing an update. -

-

This section provides the following information about Windows Defender client errors.

    -
  • The error code
  • -
  • The possible reason for the error
  • -
  • Advice on what to do now
  • -
-

-

Use the information in these tables to help troubleshoot Windows Defender error codes.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
External error codes
Error codeMessage displayedPossible reason for errorWhat to do now
-

0x80508007 -

-
-

ERR_MP_NO_MEMORY -

-
-

This error indicates that you might have run out of memory. -

-
-

-

    -
  1. Check the available memory on your device.
  2. -
  3. Close any unused applications that are running to free up memory on your device.
  4. -
  5. Restart the device and run the scan again. -
  6. -
-

-
-

0x8050800C

-
-

ERR_MP_BAD_INPUT_DATA

-
-

This error indicates that there might be a problem with your security product.

-
-

-

    -
  1. Update the definitions. Either:
      -
    1. Click the Update definitions button on the Update tab in Windows Defender. Update definitions in Windows Defender

      Or,

      -
    2. -
    3. Download the latest definitions from the Microsoft Malware Protection Center. +- The error code +- The possible reason for the error +- Advice on what to do now -

      Note: The size of the definitions file downloaded from the Microsoft Malware Protection Center can exceed 60 MB and should not be used as a long-term solution for updating definitions.

      -
    4. -
    -
  2. -
  3. Run a full scan. -
  4. -
  5. Restart the device and try again.
  6. -
-

-
-

0x80508020

-
-

ERR_MP_BAD_CONFIGURATION -

-
-

This error indicates that there might be an engine configuration error; commonly, this is related to input -data that does not allow the engine to function properly. -

-
-

0x805080211 -

-
-

ERR_MP_QUARANTINE_FAILED -

-
-

This error indicates that Windows Defender failed to quarantine a threat. -

-
-

0x80508022 -

-
-

ERR_MP_REBOOT_REQUIRED -

-
-

This error indicates that a reboot is required to complete threat removal. -

-
-

0x80508023 -

-
-

ERR_MP_THREAT_NOT_FOUND -

-
-

This error indicates that the threat might no longer be present on the media, or malware might be stopping you from scanning your device. -

-
-

Run the Microsoft Safety Scanner then update your security software and try again. -

-
-

ERR_MP_FULL_SCAN_REQUIRED -

-
-

This error indicates that a full system scan might be required. -

-
-

Run a full system scan. -

-
-

0x80508024 -

-
-

0x80508025 -

-
-

ERR_MP_MANUAL_STEPS_REQUIRED -

-
-

This error indicates that manual steps are required to complete threat removal. -

-
-

Follow the manual remediation steps outlined in the Microsoft Malware Protection Encyclopedia. You can find a threat-specific link in the event history. -

-
-

0x80508026 -

-
-

ERR_MP_REMOVE_NOT_SUPPORTED -

-
-

This error indicates that removal inside the container type might not be not supported. -

-
-

Windows Defender is not able to remediate threats detected inside the archive. Consider manually removing the detected resources. -

-
-

0x80508027 -

-
-

ERR_MP_REMOVE_LOW_MEDIUM_DISABLED -

-
-

This error indicates that removal of low and medium threats might be disabled. -

-
-

Check the detected threats and resolve them as required. -

-
-

0x80508029 -

-
-

ERROR_MP_RESCAN_REQUIRED -

-
-

This error indicates a rescan of the threat is required. -

-
-

Run a full system scan. -

-
-

0x80508030 -

-
-

ERROR_MP_CALLISTO_REQUIRED -

-
-

This error indicates that an offline scan is required. -

-
-

Run Windows Defender Offline. You can read about how to do this in the Windows Defender Offline -article.

-
-

0x80508031 -

-
-

ERROR_MP_PLATFORM_OUTDATED -

-
-

This error indicates that Windows Defender does not support the current version of the platform and requires a new version of the platform. -

-
-

You can only use Windows Defender in Windows 10. For Windows 8, Windows 7 and Windows Vista, you can use System Center Endpoint Protection. -

-
-

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Internal error codes
Error codeMessage displayedPossible reason for errorWhat to do now
-

0x80501004

-
-

ERROR_MP_NO_INTERNET_CONN -

-
-

Check your Internet connection, then run the scan again.

-
-

Check your Internet connection, then run the scan again.

-
-

0x80501000

-
-

ERROR_MP_UI_CONSOLIDATION_BASE

-
-

This is an internal error. The cause is not clearly defined.

-
-

-

    -
  1. Update the definitions. Either:
      -
    1. Click the Update definitions button on the Update tab in Windows Defender. Update definitions in Windows Defender

      Or,

      -
    2. -
    3. Download the latest definitions from the Microsoft Malware Protection Center. +Use the information in these tables to help troubleshoot Windows Defender error codes. -

      Note: The size of the definitions file downloaded from the Microsoft Malware Protection Center can exceed 60 MB and should not be used as a long-term solution for updating definitions.

      -
    4. -
    -
  2. -
  3. Run a full scan. -
  4. -
  5. Restart the device and try again.
  6. -
-

-
-

0x80501001

-
-

ERROR_MP_ACTIONS_FAILED

-
-

0x80501002

-
-

ERROR_MP_NOENGINE

-
-

0x80501003

-
-

ERROR_MP_ACTIVE_THREATS

-
-

0x805011011

-
-

MP_ERROR_CODE_LUA_CANCELLED

-
-

0x80501101

-
-

ERROR_LUA_CANCELLATION

-
-

0x80501102

-
-

MP_ERROR_CODE_ALREADY_SHUTDOWN

-
-

0x80501103

-
-

MP_ERROR_CODE_RDEVICE_S_ASYNC_CALL_PENDING

-
-

0x80501104

-
-

MP_ERROR_CODE_CANCELLED

-
-

0x80501105

-
-

MP_ERROR_CODE_NO_TARGETOS

-
-

0x80501106

-
-

MP_ERROR_CODE_BAD_REGEXP

-
-

0x80501107

-
-

MP_ERROR_TEST_INDUCED_ERROR

-
-

0x80501108

-
-

MP_ERROR_SIG_BACKUP_DISABLED

-
-

0x80508001

-
-

ERR_MP_BAD_INIT_MODULES

-
-

0x80508002

-
-

ERR_MP_BAD_DATABASE

-
-

0x80508004

-
-

ERR_MP_BAD_UFS

-
-

0x8050800C

-
-

ERR_MP_BAD_INPUT_DATA

-
-

0x8050800D

-
-

ERR_MP_BAD_GLOBAL_STORAGE

-
-

0x8050800E

-
-

ERR_MP_OBSOLETE

-
-

0x8050800F

-
-

ERR_MP_NOT_SUPPORTED

-
-

0x8050800F -0x80508010 -

-
-

ERR_MP_NO_MORE_ITEMS

-
-

0x80508011

-
-

ERR_MP_DUPLICATE_SCANID

-
-

0x80508012

-
-

ERR_MP_BAD_SCANID

-
-

0x80508013

-
-

ERR_MP_BAD_USERDB_VERSION

-
-

0x80508014

-
-

ERR_MP_RESTORE_FAILED

-
-

0x80508016

-
-

ERR_MP_BAD_ACTION

-
-

0x80508019

-
-

ERR_MP_NOT_FOUND

-
-

0x80509001

-
-

ERR_RELO_BAD_EHANDLE

-
-

0x80509003

-
-

ERR_RELO_KERNEL_NOT_LOADED

-
-

0x8050A001

-
-

ERR_MP_BADDB_OPEN

-
-

0x8050A002

-
-

ERR_MP_BADDB_HEADER

-
-

0x8050A003

-
-

ERR_MP_BADDB_OLDENGINE

-
-

0x8050A004

-
-

ERR_MP_BADDB_CONTENT

-
-

0x8050A005

-
-

ERR_MP_BADDB_NOTSIGNED

-
-

0x8050801

-
-

ERR_MP_REMOVE_FAILED

-
-

This is an internal error. It might be triggered when malware removal is not successful. -

-
-

0x80508018 -

-
-

ERR_MP_SCAN_ABORTED -

-
-

This is an internal error. It might have triggered when a scan fails to complete. -

-
  +External error codes +Error code +Message displayed +Possible reason for error +What to do now +0x80508007 + +**ERR\_MP\_NO\_MEMORY** + +This error indicates that you might have run out of memory. + +1. Check the available memory on your device. +2. Close any unused applications that are running to free up memory on your device. +3. Restart the device and run the scan again. + +0x8050800C + +**ERR\_MP\_BAD\_INPUT\_DATA** + +This error indicates that there might be a problem with your security product. + +1. Update the definitions. Either: + 1. Click the **Update definitions** button on the **Update** tab in Windows Defender. ![update definitions in windows defender](images/defender-updatedefs2.png) + + Or, + + 2. Download the latest definitions from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965). + + Note: The size of the definitions file downloaded from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965) can exceed 60 MB and should not be used as a long-term solution for updating definitions. + +2. Run a full scan. +3. Restart the device and try again. + +0x80508020 + +**ERR\_MP\_BAD\_CONFIGURATION** + +This error indicates that there might be an engine configuration error; commonly, this is related to input data that does not allow the engine to function properly. + +0x805080211 + +**ERR\_MP\_QUARANTINE\_FAILED** + +This error indicates that Windows Defender failed to quarantine a threat. + +0x80508022 + +**ERR\_MP\_REBOOT\_REQUIRED** + +This error indicates that a reboot is required to complete threat removal. + +0x80508023 + +**ERR\_MP\_THREAT\_NOT\_FOUND** + +This error indicates that the threat might no longer be present on the media, or malware might be stopping you from scanning your device. + +Run the [Microsoft Safety Scanner](https://www.microsoft.com/security/scanner/default.aspx) then update your security software and try again. + +**ERR\_MP\_FULL\_SCAN\_REQUIRED** + +This error indicates that a full system scan might be required. + +Run a full system scan. + +0x80508024 + +0x80508025 + +**ERR\_MP\_MANUAL\_STEPS\_REQUIRED** + +This error indicates that manual steps are required to complete threat removal. + +Follow the manual remediation steps outlined in the [Microsoft Malware Protection Encyclopedia](https://www.microsoft.com/security/portal/threat/Threats.aspx). You can find a threat-specific link in the event history. + +0x80508026 + +**ERR\_MP\_REMOVE\_NOT\_SUPPORTED** + +This error indicates that removal inside the container type might not be not supported. + +Windows Defender is not able to remediate threats detected inside the archive. Consider manually removing the detected resources. + +0x80508027 + +**ERR\_MP\_REMOVE\_LOW\_MEDIUM\_DISABLED** + +This error indicates that removal of low and medium threats might be disabled. + +Check the detected threats and resolve them as required. + +0x80508029 + +**ERROR\_MP\_RESCAN\_REQUIRED** + +This error indicates a rescan of the threat is required. + +Run a full system scan. + +0x80508030 + +**ERROR\_MP\_CALLISTO\_REQUIRED** + +This error indicates that an offline scan is required. + +Run Windows Defender Offline. You can read about how to do this in the [Windows Defender Offline article](http://windows.microsoft.com/windows/what-is-windows-defender-offline). + +0x80508031 + +**ERROR\_MP\_PLATFORM\_OUTDATED** + +This error indicates that Windows Defender does not support the current version of the platform and requires a new version of the platform. + +You can only use Windows Defender in Windows 10. For Windows 8, Windows 7 and Windows Vista, you can use [System Center Endpoint Protection](https://www.microsoft.com/server-cloud/system-center/endpoint-protection-2012.aspx). + +  + +Internal error codes +Error code +Message displayed +Possible reason for error +What to do now +0x80501004 + +**ERROR\_MP\_NO\_INTERNET\_CONN** + +Check your Internet connection, then run the scan again. + +Check your Internet connection, then run the scan again. + +0x80501000 + +**ERROR\_MP\_UI\_CONSOLIDATION\_BAS**E + +This is an internal error. The cause is not clearly defined. + +1. Update the definitions. Either: + 1. Click the **Update definitions** button on the **Update** tab in Windows Defender. ![update definitions in windows defender](images/defender-updatedefs2.png) + + Or, + + 2. Download the latest definitions from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965). + + Note: The size of the definitions file downloaded from the [Microsoft Malware Protection Center](http://go.microsoft.com/fwlink/?LinkID=200965) can exceed 60 MB and should not be used as a long-term solution for updating definitions. + +2. Run a full scan. +3. Restart the device and try again. + +0x80501001 + +**ERROR\_MP\_ACTIONS\_FAILED** + +0x80501002 + +**ERROR\_MP\_NOENGINE** + +0x80501003 + +**ERROR\_MP\_ACTIVE\_THREATS** + +0x805011011 + +**MP\_ERROR\_CODE\_LUA\_CANCELLED** + +0x80501101 + +**ERROR\_LUA\_CANCELLATION** + +0x80501102 + +**MP\_ERROR\_CODE\_ALREADY\_SHUTDOWN** + +0x80501103 + +**MP\_ERROR\_CODE\_RDEVICE\_S\_ASYNC\_CALL\_PENDING** + +0x80501104 + +**MP\_ERROR\_CODE\_CANCELLED** + +0x80501105 + +**MP\_ERROR\_CODE\_NO\_TARGETOS** + +0x80501106 + +**MP\_ERROR\_CODE\_BAD\_REGEXP** + +0x80501107 + +**MP\_ERROR\_TEST\_INDUCED\_ERROR** + +0x80501108 + +**MP\_ERROR\_SIG\_BACKUP\_DISABLED** + +0x80508001 + +**ERR\_MP\_BAD\_INIT\_MODULES** + +0x80508002 + +**ERR\_MP\_BAD\_DATABASE** + +0x80508004 + +**ERR\_MP\_BAD\_UFS** + +0x8050800C + +**ERR\_MP\_BAD\_INPUT\_DATA** + +0x8050800D + +**ERR\_MP\_BAD\_GLOBAL\_STORAGE** + +0x8050800E + +**ERR\_MP\_OBSOLETE** + +0x8050800F + +**ERR\_MP\_NOT\_SUPPORTED** + +0x8050800F 0x80508010 + +**ERR\_MP\_NO\_MORE\_ITEMS** + +0x80508011 + +**ERR\_MP\_DUPLICATE\_SCANID** + +0x80508012 + +**ERR\_MP\_BAD\_SCANID** + +0x80508013 + +**ERR\_MP\_BAD\_USERDB\_VERSION** + +0x80508014 + +**ERR\_MP\_RESTORE\_FAILED** + +0x80508016 + +**ERR\_MP\_BAD\_ACTION** + +0x80508019 + +**ERR\_MP\_NOT\_FOUND** + +0x80509001 + +**ERR\_RELO\_BAD\_EHANDLE** + +0x80509003 + +**ERR\_RELO\_KERNEL\_NOT\_LOADED** + +0x8050A001 + +**ERR\_MP\_BADDB\_OPEN** + +0x8050A002 + +**ERR\_MP\_BADDB\_HEADER** + +0x8050A003 + +**ERR\_MP\_BADDB\_OLDENGINE** + +0x8050A004 + +**ERR\_MP\_BADDB\_CONTENT** + +0x8050A005 + +**ERR\_MP\_BADDB\_NOTSIGNED** + +0x8050801 + +**ERR\_MP\_REMOVE\_FAILED** + +This is an internal error. It might be triggered when malware removal is not successful. + +0x80508018 + +**ERR\_MP\_SCAN\_ABORTED** + +This is an internal error. It might have triggered when a scan fails to complete. + +  ## Related topics diff --git a/windows/keep-secure/trusted-platform-module-technology-overview.md b/windows/keep-secure/trusted-platform-module-overview.md similarity index 97% rename from windows/keep-secure/trusted-platform-module-technology-overview.md rename to windows/keep-secure/trusted-platform-module-overview.md index d8b99558cc..8d48e9a658 100644 --- a/windows/keep-secure/trusted-platform-module-technology-overview.md +++ b/windows/keep-secure/trusted-platform-module-overview.md @@ -110,13 +110,13 @@ Some things that you can check on the device are: ## Additional Resources -[TPM Fundamentals](tpm-fundamentals-windows-8.md) +[TPM Fundamentals](tpm-fundamentals.md) [TPM Group Policy settings](trusted-platform-module-services-group-policy-settings.md) [TPM Cmdlets in Windows PowerShell](http://technet.microsoft.com/library/jj603116.aspx) -[AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md) +[AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md) [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](http://technet.microsoft.com/library/jj592683.aspx) diff --git a/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md b/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md index b0a0d91b86..e03f0a8624 100644 --- a/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md +++ b/windows/keep-secure/trusted-platform-module-services-group-policy-settings.md @@ -125,7 +125,7 @@ This policy setting applies to the Windows operating systems listed in the [vers TPM owner information includes a cryptographic hash of the TPM owner password. Certain TPM commands can be run only by the TPM owner. This hash authorizes the TPM to run these commands. **Important**   -To back up TPM owner information from a computer running Windows 10, Windows 8.1, or Windows 8, you might need to first set up appropriate schema extensions and access control settings on the domain so that the AD DS backup can succeed. Windows Server 2012 R2 and Windows Server 2012 include the required schema extensions by default. For more information, see [AD DS schema extensions to support TPM backup](schema-extensions-for-windows-server-2008-r2-to-support-ad-ds-backup-of-tpm-information-from-windows-8-clients.md). +To back up TPM owner information from a computer running Windows 10, Windows 8.1, or Windows 8, you might need to first set up appropriate schema extensions and access control settings on the domain so that the AD DS backup can succeed. Windows Server 2012 R2 and Windows Server 2012 include the required schema extensions by default. For more information, see [AD DS schema extensions to support TPM backup](ad-ds-schema-extensions-to-support-tpm-backup.md).   @@ -323,7 +323,7 @@ If you do not configure this policy setting, a default value of 9 is used. A val ## Additional resources -[Trusted Platform Module Technology Overview](trusted-platform-module-technology-overview.md) +[Trusted Platform Module Technology Overview](trusted-platform-module-overview.md) [TPM Cmdlets in Windows PowerShell](http://technet.microsoft.com/library/jj603116.aspx) diff --git a/windows/keep-secure/types-of-attacks-for-volume-encryption-keys.md b/windows/keep-secure/types-of-attacks-for-volume-encryption-keys.md index 8c4587f8da..b9da17ac68 100644 --- a/windows/keep-secure/types-of-attacks-for-volume-encryption-keys.md +++ b/windows/keep-secure/types-of-attacks-for-volume-encryption-keys.md @@ -148,7 +148,7 @@ The BitLocker pre-boot authentication feature can successfully mitigate memory r - [Protect BitLocker from pre-boot attacks](protect-bitlocker-from-pre-boot-attacks.md) -- [BitLocker overview](bitlocker-overview-roletech-overview.md) +- [BitLocker overview](bitlocker-overview.md)   diff --git a/windows/keep-secure/use-a-reference-computer-to-create-and-maintain-applocker-policies.md b/windows/keep-secure/use-a-reference-computer-to-create-and-maintain-applocker-policies.md index ded9affd9c..070851aa6b 100644 --- a/windows/keep-secure/use-a-reference-computer-to-create-and-maintain-applocker-policies.md +++ b/windows/keep-secure/use-a-reference-computer-to-create-and-maintain-applocker-policies.md @@ -20,7 +20,7 @@ This topic for the IT professional describes the steps to create and maintain Ap ## Background and prerequisites -An AppLocker reference device is a baseline device you can use to configure policies and can subsequently be used to maintain AppLocker policies. For the procedure to configure a reference device, see [Configure the AppLocker reference device](configure-the-applocker-reference-computer-ops.md). +An AppLocker reference device is a baseline device you can use to configure policies and can subsequently be used to maintain AppLocker policies. For the procedure to configure a reference device, see [Configure the AppLocker reference device](configure-the-appLocker-reference-device.md). An AppLocker reference device that is used to create and maintain AppLocker policies should contain the corresponding apps for each organizational unit (OU) to mimic your production environment. diff --git a/windows/keep-secure/using-advanced-security-auditing-options-to-monitor-dynamic-access-control-objects.md b/windows/keep-secure/using-advanced-security-auditing-options-to-monitor-dynamic-access-control-objects.md index 2aac63868b..30c91a3be8 100644 --- a/windows/keep-secure/using-advanced-security-auditing-options-to-monitor-dynamic-access-control-objects.md +++ b/windows/keep-secure/using-advanced-security-auditing-options-to-monitor-dynamic-access-control-objects.md @@ -84,7 +84,7 @@ This procedure can be configured on computers running any of the supported Windo ## Related topics -[Security auditing](security-auditing-overview-glbl.md) +[Security auditing](security-auditing-overview.md)   diff --git a/windows/keep-secure/enterprise-security-guides-portal.md b/windows/keep-secure/windows-10-enterprise-security-guides.md similarity index 100% rename from windows/keep-secure/enterprise-security-guides-portal.md rename to windows/keep-secure/windows-10-enterprise-security-guides.md diff --git a/windows/keep-secure/windows-10-mobile-security-guide.md b/windows/keep-secure/windows-10-mobile-security-guide.md index f6095e2531..a4e9944ca5 100644 --- a/windows/keep-secure/windows-10-mobile-security-guide.md +++ b/windows/keep-secure/windows-10-mobile-security-guide.md @@ -210,7 +210,7 @@ In Windows 10 Mobile, enterprise data protection (EDP) helps separate personal - Prevent users from copying corporate data to public locations. **Note**   -EDP is currently being tested in select customer evaluation programs. For more information about EDP, see [Enterprise data protection overview](../whats-new/enterprise-data-protection-overview.md). +EDP is currently being tested in select customer evaluation programs. For more information about EDP, see [Enterprise data protection overview](../whats-new/edp-whats-new-overview.md)).   @@ -546,13 +546,13 @@ In addition, all UWP apps follow the security principle of least privilege. Apps The Windows Store app-distribution process and the app sandboxing capabilities of Windows 10 Mobile can dramatically reduce the likelihood that users encounter malicious apps on the system. -For more information about Store for Business, see [Windows Store for Business overview](../whats-new/business-store-for-windows-10.md). +For more information about Store for Business, see [Windows Store for Business overview](../whats-new/windows-store-for-business-overview.md)). ### App management An enterprise typically exerts some configuration and control over the apps installed on devices. In this way, the organization accomplishes several business goals, such managing software licenses, ensuring mandatory app deployment on required devices, and preventing the installation of unacceptable apps on corporate devices. -An important component in delivering on these goals is Store for Business, which builds on the Windows Store infrastructure that Microsoft hosts and enables you to deploy Windows Store apps across your Windows 10-based devices. Store for Business is both powerful and highly flexible. It allows you to extend and customize features without having to stand up new on-premises infrastructure. It supports and integrates with your existing MDM service but doesn’t require one. (Ask your MDM service vendor about integration with Store for Business.) You can configure Store for Business for a wide variety of scenarios, including online and offline licensing and different app-distribution options. For a more detailed description of the available Store for Business scenarios, see [Windows Store for Business overview](../whats-new/business-store-for-windows-10.md). +An important component in delivering on these goals is Store for Business, which builds on the Windows Store infrastructure that Microsoft hosts and enables you to deploy Windows Store apps across your Windows 10-based devices. Store for Business is both powerful and highly flexible. It allows you to extend and customize features without having to stand up new on-premises infrastructure. It supports and integrates with your existing MDM service but doesn’t require one. (Ask your MDM service vendor about integration with Store for Business.) You can configure Store for Business for a wide variety of scenarios, including online and offline licensing and different app-distribution options. For a more detailed description of the available Store for Business scenarios, see [Windows Store for Business overview](../whats-new/windows-store-for-business-overview.md)). A web-based portal for IT pros simplifies Windows 10 Mobile app deployment. The familiar look of Windows Store was used to design the Store for Business experience. It showcases apps relevant to business use, hand-selected and sorted by category. The store can use Azure AD accounts for all users, linking them to a single, unique organizational identity. @@ -586,7 +586,7 @@ The IT process for preparing Store for Business for app deployment is shown in F Figure 4. The IT process for Store for Business -For details about the process of distributing apps through Store for Business, see [Find and acquire apps](../manage/find-and-acquire-apps.md). +For details about the process of distributing apps through Store for Business, see [Find and acquire apps](../manage/find-and-acquire-apps-overview.md). ### The user side @@ -625,7 +625,7 @@ The web browser is a critical component of any security strategy, and for good r [Windows Store for Business](http://go.microsoft.com/fwlink/p/?LinkId=722910) -[Windows Store for Business overview](../whats-new/business-store-for-windows-10.md) +[Windows Store for Business overview](../whats-new/windows-store-for-business-overview.md))   diff --git a/windows/keep-secure/windows-hello-biometrics-in-the-enterprise.md b/windows/keep-secure/windows-hello-in-enterprise.md similarity index 100% rename from windows/keep-secure/windows-hello-biometrics-in-the-enterprise.md rename to windows/keep-secure/windows-hello-in-enterprise.md diff --git a/windows/manage/TOC.md b/windows/manage/TOC.md index 9ea286f676..18e8c7f9e5 100644 --- a/windows/manage/TOC.md +++ b/windows/manage/TOC.md @@ -1,7 +1,7 @@ # [Manage and update Windows 10](index.md) ## [Change history for Manage and update Windows 10](change-history-for-manage-and-update-windows-10.md) ## [Administrative Tools in Windows 10](administrative-tools-in-windows-10.md) -## [Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md) +## [Cortana integration in your business or enterprise](manage-cortana-in-enterprise.md)) ## [Manage corporate devices](manage-corporate-devices.md) ### [New policies for Windows 10](new-policies-for-windows-10.md) ### [Changes to Group Policy settings for Windows 10 Start](changes-to-start-policies-in-windows-10.md) @@ -17,10 +17,9 @@ #### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) #### [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](set-up-a-kiosk-for-windows-10-for-mobile-edition.md) ### [Lock down Windows 10 to specific apps](lock-down-windows-10-to-specific-apps.md) -### [Configure telemetry in your organization](configure-telemetry-in-your-organization.md) -### [Disconnect from Microsoft and configure privacy settings in your organization](disconnect-your-organization-from-microsoft.md) +### [Configure telemetry and other settings in your organization](disconnect-your-organization-from-microsoft.md) ### [Configure access to Windows Store](stop-employees-from-using-the-windows-store.md) -### [Manage Wi-Fi Sense in your company](manage-wi-fi-sense-in-your-company.md) +### [Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md)) ### [Configure Windows 10 Mobile using Lockdown XML](lockdown-xml.md) #### [Settings and quick actions that can be locked down in Windows 10 Mobile](settings-that-can-be-locked-down.md) #### [Product IDs in Windows 10 Mobile](product-ids-in-windows-10-mobile.md) @@ -28,30 +27,31 @@ ## [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md) ## [Configure devices without MDM](configure-devices-without-mdm.md) ## [Windows 10 servicing options for updates and upgrades](introduction-to-windows-10-servicing.md) +## [Application development for Windows as a service](application-development-for-windows-as-a-service.md) ## [Windows Store for Business](windows-store-for-business.md) -### [Sign up and get started](sign-up-and-get-started.md) -#### [Prerequisites for Windows Store for Business](prerequisites-for-windows-store-for-business.md) -#### [Sign up for Windows Store for Business](sign-up-for-windows-store-for-business.md) -#### [Roles and permissions in the Windows Store for Business](roles-and-permissions-in-the-windows-store-for-business.md) -#### [Settings reference: Windows Store for Business](settings-reference--windows-store-for-business.md) -### [Find and acquire apps](find-and-acquire-apps.md) -#### [Apps in the Windows Store for Business](apps-in-the-windows-store-for-business.md) +### [Sign up and get started](sign-up-windows-store-for-business-overview.md) +#### [Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md) +#### [Sign up for Windows Store for Business](sign-up-windows-store-for-business.md) +#### [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md) +#### [Settings reference: Windows Store for Business](settings-reference-windows-store-for-business.md) +### [Find and acquire apps](find-and-acquire-apps-overview.md) +#### [Apps in the Windows Store for Business](apps-in-windows-store-for-business.md) #### [Working with line-of-business apps](working-with-line-of-business-apps.md) -### [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-from-the-windows-store-for-business.md) +### [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md) #### [Distribute apps using your private store](distribute-apps-from-your-private-store.md) #### [Assign apps to employees](assign-apps-to-employees.md) -#### [Distribute apps with a management tool](distribute-apps-with-a-management-tool.md) +#### [Distribute apps with a management tool](distribute-apps-with-management-tool.md) #### [Distribute offline apps](distribute-offline-apps.md) -### [Manage apps](manage-apps.md) +### [Manage apps](manage-apps-windows-store-for-business-overview.md) #### [Manage access to private store](manage-access-to-private-store.md) -#### [App inventory managemement for Windows Store for Business](app-inventory-managemement-for-windows-store-for-business.md) +#### [App inventory managemement for Windows Store for Business](app-inventory-managemement-windows-store-for-business.md) #### [Manage private store settings](manage-private-store-settings.md) -#### [Configure MDM provider](configure-mdm-provider.md) +#### [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) ### [Device Guard signing portal](device-guard-signing-portal.md) #### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) #### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) -### [Manage settings in the Windows Store for Business](manage-settings-in-the-windows-store-for-business.md) -#### [Update Windows Store for Business account settings](update-windows-store-for-business-account-settings-.md) -#### [Manage user accounts in Windows Store for Business](manage-users-and-groups-in-the-windows-store-for-business.md) -### [Troubleshoot Windows Store for Business](troubleshoot.md) +### [Manage settings in the Windows Store for Business](manage-settings-windows-store-for-business.md) +#### [Update Windows Store for Business account settings](update-windows-store-for-business-account-settings.md)) +#### [Manage user accounts in Windows Store for Business](manage-users-and-groups-windows-store-for-business.md)) +### [Troubleshoot Windows Store for Business](troubleshoot-windows-store-for-business.md)) diff --git a/windows/manage/add-unsigned-app-to-code-integrity-policy.md b/windows/manage/add-unsigned-app-to-code-integrity-policy.md index 064d2cc81b..df8b585dbc 100644 --- a/windows/manage/add-unsigned-app-to-code-integrity-policy.md +++ b/windows/manage/add-unsigned-app-to-code-integrity-policy.md @@ -84,7 +84,7 @@ After you're done, the files are saved to your desktop. You still need to sign t ## Catalog signing with Device Guard signing portal -To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-for-windows-store-for-business.md). +To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-windows-store-for-business.md). Catalog signing is a vital step to adding your unsigned apps to your code integrity policy. diff --git a/windows/manage/app-inventory-managemement-for-windows-store-for-business.md b/windows/manage/app-inventory-managemement-windows-store-for-business.md similarity index 99% rename from windows/manage/app-inventory-managemement-for-windows-store-for-business.md rename to windows/manage/app-inventory-managemement-windows-store-for-business.md index 3a3d6be3c3..17c74769cf 100644 --- a/windows/manage/app-inventory-managemement-for-windows-store-for-business.md +++ b/windows/manage/app-inventory-managemement-windows-store-for-business.md @@ -120,7 +120,7 @@ For online-licensed apps, there are a couple of ways to distribute apps from you - Add apps to your private store, and let people in your organization install the app. -If you use a management tool that supports Store for Business, you can distribute apps with your management tool. Once it is configured to work with Store for Business, your managment tool will have access to all apps in your inventory. For more information, see [Distribute apps with a management tool](distribute-apps-with-a-management-tool.md). +If you use a management tool that supports Store for Business, you can distribute apps with your management tool. Once it is configured to work with Store for Business, your managment tool will have access to all apps in your inventory. For more information, see [Distribute apps with a management tool](distribute-apps-with-management-tool.md). ### Assign apps diff --git a/windows/manage/application-development-for-windows-as-a-service.md b/windows/manage/application-development-for-windows-as-a-service.md new file mode 100644 index 0000000000..bc011ba032 --- /dev/null +++ b/windows/manage/application-development-for-windows-as-a-service.md @@ -0,0 +1,189 @@ +--- +title: Application development for Windows as a service (Windows 10) +description: In today’s environment, where user expectations frequently are set by device-centric experiences, complete product cycles need to be measured in months, not years. +ms.assetid: 28E0D103-B0EE-4B14-8680-6F30BD373ACF +ms.prod: W10 +ms.mktglfcycl: manage +ms.sitesec: library +author: jdeckerMS +--- + +# Application development for Windows as a service + + +**Applies to** + +- Windows 10 +- Windows 10 Mobile +- Windows 10 IoT Core (IoT Core) + +In today’s environment, where user expectations frequently are set by device-centric experiences, complete product cycles need to be measured in months, not years. Additionally, new releases must be made available on a continual basis, and must be deployable with minimal impact on users. Microsoft designed Windows 10 to meet these requirements by implementing a new approach to innovation, development, and delivery called [Windows as a service (WaaS)](introduction-to-windows-10-servicing.md). The key to enabling significantly shorter product cycles while maintaining high quality levels is an innovative community-centric approach to testing that Microsoft has implemented for Windows 10. The community, known as Windows Insiders, is comprised of millions of users around the world. When Windows Insiders opt in to the community, they test many builds over the course of a product cycle and provide feedback to Microsoft through an iterative methodology called flighting. + +Builds distributed as flights provide the Windows engineering team with significant data regarding how well builds are performing in actual use. Flighting with Windows Insiders also enables Microsoft to test builds in much more diverse hardware, application, and networking environments than in the past, and to identify issues far more quickly. As a result, Microsoft believes that community-focused flighting will enable both a faster pace of innovation delivery and better public release quality than ever. + +## Windows 10 release types and cadences + + +Although Microsoft releases flight builds to Windows Insiders, Microsoft will publish two types of Windows 10 releases broadly to the public on an ongoing basis: + +**Feature updates** install the latest new features, experiences, and capabilities on devices that are already running Windows 10. Because feature updates contain an entire copy of Windows, they are also what customers use to install Windows 10 on existing devices running Windows 7 or Windows 8.1, and on new devices where no operating system is installed. Microsoft expects to publish an average of one to two new feature updates per year. + +**Quality updates** deliver security issue resolutions and other important bug fixes. Quality updates will be provided to improve each feature currently in support, on a cadence of one or more times per month. Microsoft will continue publishing quality updates on Update Tuesday (sometimes referred to as Patch Tuesday). Additionally, Microsoft may publish additional quality updates for Windows 10 outside the Update Tuesday process when required to address customer needs. + +During Windows 10 development, Microsoft streamlined the Windows product engineering and release cycle so that we can deliver the features, experiences, and functionality customers want, more quickly than ever. We also created new ways to deliver and install feature updates and quality updates that simplify deployments and on-going management, broaden the base of employees who can be kept current with the latest Windows capabilities and experiences, and lower total cost of ownership. Hence we have implemented new servicing options – referred to as Current Branch (CB), Current Branch for Business (CBB), and Long-Term Servicing Branch (LTSB) – that provide pragmatic solutions to keep more devices more current in enterprise environments than was previously possible. + +The following table shows describes the various servicing branches and their key attributes. + +| Servicing option | Availability of new feature upgrades for installation | Minimum length of servicing lifetime | Key benefits | Supported editions | +|-----------------------------------|-----------------------------------------------------------|--------------------------------------|-------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------| +| Current Branch (CB) | Immediately after first published by Microsoft | Approximately 4 months | Makes new features available to users as soon as possible | Home, Pro, Education, Enterprise, Mobile, IoT Core, Windows 10 IoT Core Pro (IoT Core Pro) | +| Current Branch for Business (CBB) | Approximately 4 months after first published by Microsoft | Approximately 8 months | Provides additional time to test new feature upgrades before deployment | Pro, Education, Enterprise, Mobile Enterprise, IoT Core Pro | +| Long-Term Servicing Branch (LTSB) | Immediately after published by Microsoft | 10 Years | Enables long-term deployment of selected Windows 10 releases in low-change configurations | Enterprise LTSB | + +  + +For more information, see [Windows 10 servicing options for updates and upgrades](introduction-to-windows-10-servicing.md). + +## Supporting apps in Windows as a service + + +The traditional approach for supporting apps has been to release a new app version in response to a Windows release. This assumes that there are breaking changes in the underlying OS that could potentially cause a regression with the application. This model involves a dedicated development and validation cycle that requires our ISV partners to align with the Windows release cadence. + +In the Windows as a service model, Microsoft is making a commitment to maintaining the compatibility of the underlying OS. This means Microsoft will make a concerted effort to ensure that there are no breaking changes that impact the app ecosystem negatively. In this scenario, when there is a release of a Windows build, most apps (those with no kernel dependencies) will continue to work. + +In view of this change, Microsoft recommends that our ISV partners decouple their app release and support from specific Windows builds. Our mutual customers are better served by an application lifecycle approach. This means when an application version is released it will be supported for a certain period of time irrespective of however many Windows builds are released in the interim. The ISV makes a commitment to provide support for that specific version of the app as long as it is supported in the lifecycle. Microsoft follows a similar lifecycle approach for Windows that can be referenced [here](http://go.microsoft.com/fwlink/?LinkID=780549). + +This approach will reduce the burden of maintaining an app schedule that aligns with Windows releases. ISV partners should be free to release features or updates at their own cadence. We feel that our partners can keep their customer base updated with the latest app updates independent of a Windows release. In addition, our customers do not have to seek an explicit support statement whenever a Windows build is released. Here is an example of a support statement that covers how an app may be supported across different versions of the OS: + +| Example of an application lifecycle support statement | +|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Contoso is a software development company and is the owner of the popular Mojave app which has a major share in the enterprise space. Contoso releases its next major release Mojave 14.0 and declares mainstream support for a period of three years from the release date. During mainstream support all updates and support are complimentary for the licensed product. Contoso also declares an additional two years of extended support where customers can purchase updates and support for a grace period. Beyond the extended support end date this product version is no longer supported. During the period of mainstream support Contoso will support Mojave 14.0 on all released builds of Windows. Contoso will also release updates to Mojave as necessary and independent of the Windows product releases. | + +  + +In the following sections, you will find additional information about the steps Microsoft takes to maintain the compatibility of the underlying OS. You will also find guidance on steps you can take to help maintain the compatibility of the combined OS and app ecosystem. There is a section on how to leverage Windows flighting builds to detect app regressions before a Windows build is released. Lastly, we describe how we use an instrumentation and telemetry-driven approach to increase the quality of Windows builds. We recommend ISVs adopt a similar approach with their app portfolio. + +## Key changes since Windows 7 to ensure app compatibility + + +We understand that compatibility matters to developers. ISVs and developers want to ensure their apps will run as expected on all supported versions of the Windows OS. Consumers and businesses have a key investment here—they want to ensure that the apps they have paid for will continue to work. We know that compatibility is the primary criteria for purchase decisions. Apps that are well written based on best practices will lead to much less code churn when a new Windows version is released and will reduce fragmentation—these apps have a reduced engineering investment to maintain, and a faster time to market. + +In the Windows 7 timeframe, compatibility was very much a reactive approach. In Windows 8 we started looking at this differently, working within Windows to ensure that compatibility was by design rather than an afterthought. Windows 10 is the most compatible-by-design version of the OS to date. Here are some key ways we accomplished this: + +- **App telemetry**: This helps us understand app popularity in the Windows ecosystem to inform compatibility testing. +- **ISV partnerships**: Work directly with external partners to provide them with data and help fix issues that our users experience. +- **Design reviews, upstream detection**: Partner with feature teams to reduce the number of breaking changes in Windows. Compatibility review is a gate that our feature teams must pass. +- **Communication**: Tighter control over API changes and improved communication. +- **Flighting and feedback loop**: Windows insiders receive flighted builds that help improve our ability to find compatibility issues before a final build is released to customers. This feedback process not only exposes bugs, but ensures we are shipping features our users want. + +## Microsoft uses data to make Windows 10 better + + +Microsoft uses diagnostic and usage data to identify and troubleshoot problems, improve our products and services, and provide our users with personalized experiences. The usage data we collect also extends to the apps that PCs in the Windows ecosystem are running. Based on what our customers use, we build our list to test these apps, devices, and drivers against new versions of the Windows OS. Windows 10 has been the most compatible version of Windows to-date, with over 90% compatibility against thousands of popular apps. The Windows Compatibility team commonly reaches out to our ISV partners to provide feedback if issues are discovered, so that we can partner together on solutions. Ideally, we’d like our common customers to be able to update Windows seamlessly and without losing functionality in either their OS or the apps they depend on for their productivity or entertainment. + +The following sections contain some best practices Microsoft recommends so you can ensure your apps are compatible with Windows 10. + +**Windows version check** + +The OS version has been incremented with Windows 10. This means that the internal version number has been changed to 10.0. As in the past, we go to great lengths to maintain application and device compatibility after an OS version change. For most app categories (without any kernel dependencies) the change will not negatively impact app functionality, and existing apps will continue to work fine on Windows 10. + +The manifestation of this change is app-specific. This means any app that specifically checks for the OS version will get a higher version number, which can lead to one or more of the following situations: + +- App installers might not be able to install the app, and apps might not be able to start. +- Apps might become unstable or crash. +- Apps might generate error messages, but continue to function properly. + +Some apps perform a version check and simply pass a warning to users. However, there are apps that are bound very tightly to a version check (in the drivers, or in kernel mode to avoid detection). In these cases, the app will fail if an incorrect version is found. Rather than a version check, we recommend one of the following approaches: + +- If the app is dependent on specific API functionality, ensure you target the correct API version. +- Ensure you detect the change via APISet or another public API, and do not use the version as a proxy for some feature or fix. If there are breaking changes and a proper check is not exposed, then that is a bug. +- Ensure the app does NOT check for version in odd ways, such as via the registry, file versions, offsets, kernel mode, drivers, or other means. If the app absolutely needs to check the version, use the GetVersion APIs, which should return the major, minor, and build number. +- If you are using the [GetVersion](http://go.microsoft.com/fwlink/?LinkID=780555) API, remember that the behavior of this API has changed since Windows 8.1. + +If you own apps such as antimalware or firewall apps, you should work through your usual feedback channels and via the Windows Insider program. + +**Undocumented APIs** + +Your apps should not call undocumented Windows APIs, or take dependency on specific Windows file exports or registry keys. This can lead to broken functionality, data loss, and potential security issues. If there is functionality your app requires that is not available, this is an opportunity to provide feedback through your usual feedback channels and via the Windows Insider program. + +**Develop Universal Windows Platform (UWP) and Centennial apps** + +We encourage all Win32 app ISVs to develop [Universal Windows Platform (UWP)](http://go.microsoft.com/fwlink/?LinkID=780560) and, specifically, [Centennial](http://go.microsoft.com/fwlink/?LinkID=780562) apps moving forward. There are great benefits to developing these app packages rather than using traditional Win32 installers. UWP apps are also supported in the [Windows Store](http://go.microsoft.com/fwlink/?LinkID=780563), so it’s easier for you to update your users to a consistent version automatically, lowering your support costs. + +If your Win32 app types do not work with the Centennial model, we highly recommend that you use the right installer and ensure this is fully tested. An installer is your user or customer’s first experience with your app, so ensure that this works well. All too often, this doesn’t work well or it hasn’t been fully tested for all scenarios. The [Windows App Certification Kit](http://go.microsoft.com/fwlink/?LinkID=780565) can help you test the install and uninstall of your Win32 app and help you identify use of undocumented APIs, as well as other basic performance-related best-practice issues, before your users do. + +**Best pratcices:** + +- Use installers that work for both 32-bit and 64-bit versions of Windows. +- Design your installers to run on multiple scenarios (user or machine level). +- Keep all Windows redistributables in the original packaging – if you repackage these, it’s possible that this will break the installer. +- Schedule development time for your installers—these are often overlooked as a deliverable during the software development lifecycle. + +## Optimized test strategies and flighting + + +Windows OS flighting refers to the interim builds available to Windows Insiders before a final build is released to the general population. The more Insiders that flight these interim builds, the more feedback we receive on the build quality, compatibility, etc., and this helps improve quality of the final builds. You can participate in this flighting program to ensure that your apps work as expected on iterative builds of the OS. We also encourage you to provide feedback on how these flighted builds are working for you, issues you run into, and so on. + +If your app is in the Store, you can flight your app via the Store, which means that your app will be available for our Windows Insider population to install. Users can install your app and you can receive preliminary feedback on your app before you release it to the general population. The follow sections outline the steps for testing your apps against Windows flighted builds. + +**Step 1: Become a Windows Insider and participate in flighting** + +As a [Windows Insider,](http://go.microsoft.com/fwlink/p/?LinkId=521639) you can help shape the future of Windows—your feedback will help us improve features and functionality in the platform. This is a vibrant community where you can connect with other enthusiasts, join forums, trade advice, and learn about upcoming Insider-only events. + +Since you’ll have access to preview builds of Windows 10, Windows 10 Mobile, and the latest Windows SDK and Emulator, you’ll have all the tools at your disposal to develop great apps and explore what's new in the Universal Windows Platform and the Windows Store. + +This is also a great opportunity to build great hardware, with preview builds of the hardware development kits so you can develop universal drivers for Windows. The IoT Core Insider Preview is also available on supported IoT development boards, so you can build amazing connected solutions using the Universal Windows Platform. + +Before you become a Windows Insider, please note that participation is intended for users who: + +- Want to try out software that’s still in development. +- Want to share feedback about the software and the platform. +- Don’t mind lots of updates or a UI design that might change significantly over time. +- Really know their way around a PC and feel comfortable troubleshooting problems, backing up data, formatting a hard drive, installing an operating system from scratch, or restoring an old one if necessary. +- Know what an ISO file is and how to use it. +- Aren't installing it on their everyday computer or device. + +**Step 2: Test your scenarios** + +Once you have updated to a flighted build, the following are some sample test cases to help you get started on testing and gathering feedback. For most of these tests, ensure you cover both x86 and AMD64 systems. + +**Clean install test:** On a clean install of Windows 10, ensure your app is fully functional. If your app fails this test and the upgrade test, then it’s likely that the issue is caused by underlying OS changes or bugs in the app. If after investigation, the former is the case, be sure to use the Windows Insider program to provide feedback and partner on solutions. + +**Upgrade Test:** Check that your app works after upgrading from a down-level version of Windows (i.e. Windows 7 or Windows 8.1) to Windows 10. Your app shouldn’t cause roll backs during upgrade, and should continue to work as expected after upgrade—this is crucial to achieve a seamless upgrade experience. + +**Reinstall Test:** Ensure that app functionality can be restored by reinstalling your app after you upgrade the PC to Windows 10 from a down-level OS. If your app didn’t pass the upgrade test and you have not been able to narrow down the cause of these issues, it’s possible that a reinstall can restore lost functionality. A passing reinstall test indicates that parts of the app may not have been migrated to Windows 10. + +**OS\\Device Features Test:** Ensure that your app works as expected if your app relies on specific functionality in the OS. Common areas for testing include the following, often against a selection of the commonly used PC models to ensure coverage: + +- Audio +- USB device functionality (keyboard, mouse, memory stick, external hard disk, and so on) +- Bluetooth +- Graphics\\display (multi-monitor, projection, screen rotation, and so on) +- Touch screen (orientation, on-screen keyboard, pen, gestures, and so on) +- Touchpad (left\\right buttons, tap, scroll, and so on) +- Pen (single\\double tap, press, hold, eraser, and so on) +- Print\\Scan +- Sensors (accelerometer, fusion, and so on) +- Camera + +**Step 3: Provide feedback** + +Let us know how your app is performing against flighted builds. As you discover issues with your app during testing, please log bugs via the partner portal if you have access, or through your Microsoft representative. We encourage this information so that we can build a quality experience for our users together. + +**Step 4: Register on Windows 10** + +The [Ready for Windows 10](http://go.microsoft.com/fwlink/?LinkID=780580) website is a directory of software that supports Windows 10. It’s intended for IT administrators at companies and organizations worldwide that are considering Windows 10 for their deployments. IT administrators can check the site to see whether software deployed in their enterprise is supported in Windows 10. + +## Related topics + + +[Windows 10 servicing options for updates and upgrades](introduction-to-windows-10-servicing.md) + +  + +  + + + + + diff --git a/windows/manage/apps-in-the-windows-store-for-business.md b/windows/manage/apps-in-windows-store-for-business.md similarity index 97% rename from windows/manage/apps-in-the-windows-store-for-business.md rename to windows/manage/apps-in-windows-store-for-business.md index 6f4e3b40cd..7067bb9d4c 100644 --- a/windows/manage/apps-in-the-windows-store-for-business.md +++ b/windows/manage/apps-in-windows-store-for-business.md @@ -79,7 +79,7 @@ You have the following distribution options for offline-licensed apps: - Distribute the app through a management tool. -For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-to-your-employees-from-the-windows-store-for-business.md). +For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md).   diff --git a/windows/manage/change-history-for-manage-and-update-windows-10.md b/windows/manage/change-history-for-manage-and-update-windows-10.md index 09cf34d5bd..3d278c6dca 100644 --- a/windows/manage/change-history-for-manage-and-update-windows-10.md +++ b/windows/manage/change-history-for-manage-and-update-windows-10.md @@ -29,21 +29,25 @@ This topic lists new and updated topics in the [Manage and update Windows 10](in +[Application development for Windows as a service](application-development-for-windows-as-a-service.md) +New + + [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md)

New

- -[Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md) + +[Cortana integration in your business or enterprise](manage-cortana-in-enterprise.md))

Updated to include the new Preview feature, Cortana and Microsoft Dynamics CRM integration.

+ +[Configure telemetry in your organization](../manage/configure-telemetry-in-your-organization.md) +

Updated to include Windows Server 2016 Technical Preview.

+ [Disconnect from Microsoft and configure privacy settings in your organization](disconnect-your-organization-from-microsoft.md)

Removed the telemetry content into its own topic.

- -[Configure telemetry in your organization](configure-telemetry-in-your-organization.md) -

Updated to include Windows Server 2016 Technical Preview.

- @@ -110,11 +114,11 @@ This topic lists new and updated topics in the [Manage and update Windows 10](in -[Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md) +[Cortana integration in your business or enterprise](manage-cortana-in-enterprise.md)) New -[Manage Wi-Fi Sense in your company](manage-wi-fi-sense-in-your-company.md) +[Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md)) New @@ -140,7 +144,7 @@ This topic lists new and updated topics in the [Manage and update Windows 10](in | [Reset a Windows 10 Mobile device](reset-a-windows-10-mobile-device.md) | New | | [Settings and quick actions that can be locked down in Windows 10 Mobile](settings-that-can-be-locked-down.md) | New | | [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](set-up-a-kiosk-for-windows-10-for-mobile-edition.md) | New | -| [Windows Hello biometrics in the enterprise](../keep-secure/windows-hello-biometrics-in-the-enterprise.md) | New | +| [Windows Hello biometrics in the enterprise](../keep-secure/windows-hello-in-enterprise.md)) | New | | [Windows Store for Business](windows-store-for-business.md) (multiple topics) | New | | [Changes to Group Policy settings for Windows 10 Start](changes-to-start-policies-in-windows-10.md) | Updated | | [Configure telemetry and other settings in your organization](disconnect-your-organization-from-microsoft.md) | Updated | diff --git a/windows/manage/configure-mdm-provider.md b/windows/manage/configure-mdm-provider-windows-store-for-business.md similarity index 100% rename from windows/manage/configure-mdm-provider.md rename to windows/manage/configure-mdm-provider-windows-store-for-business.md diff --git a/windows/manage/configure-telemetry-in-your-organization.md b/windows/manage/configure-telemetry-in-your-organization.md deleted file mode 100644 index 0e0d12aec5..0000000000 --- a/windows/manage/configure-telemetry-in-your-organization.md +++ /dev/null @@ -1,310 +0,0 @@ ---- -title: Configure telemetry in your organization (Windows 10) -description: Use this article to make informed decisions about how you can configure telemetry in your organization. -ms.assetid: 68D9BEAD-8ACE-4771-AF10-CCCD65EC7D98 -keywords: ["privacy", "telemetry"] -ms.prod: W10 -ms.mktglfcycl: manage -ms.sitesec: library -author: jdeckerMS ---- - -# Configure telemetry in your organization - - -**Applies to** - -- Windows 10 -- Windows 10 Mobile -- Windows Server 2016 Technical Preview - -Use this article to make informed decisions about how you can configure telemetry in your organization. Telemetry is a term that means different things to different people and organizations. For the purpose of this article, we discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component. The telemetry data is used to keep Windows devices secure, and to help Microsoft improve the quality of Windows and Microsoft services. - -**Note**   -This article does not apply to System Center Configuration Manager, System Center Endpoint Protection, or System Center Data Protection Manager because those components use a different telemetry service than Windows and Windows Server - -  - -It describes the types of telemetry we gather and the ways you can manage its telemetry. This article also lists some examples of how telemetry can provide you with valuable insights into your enterprise deployments, and how Microsoft uses the data to quickly identify and address issues affecting its customers. - -We understand that the privacy and security of our customers’ information is important and we have taken a thoughtful and comprehensive approach to customer privacy and the protection of their data with Windows 10, Windows Server 2016 Technical Preview, and System Center 2016. - -## Overview - - -In previous versions of Windows and Windows Server, Microsoft used telemetry to check for updated or new Windows Defender signatures, check whether Windows Update installations were successful, gather reliability information through the Reliability Analysis Component (RAC) on Windows Server, and gather reliability information through the Windows Customer Experience Improvement Program (CEIP) on Windows. In Windows 10 and Windows Server 2016 Technical Preview, you can control telemetry streams by using **Settings** > **Privacy**, Group Policy, or MDM. - -Microsoft is committed to improving customer experiences in a mobile-first and cloud-first world, and it all starts with our customers. Telemetry is one critical way Microsoft is using data to improve our products and services. Telemetry gives every enterprise customer a voice that helps us shape future versions of Windows, Windows Server and System Center, allowing us to respond quickly to your feedback and providing new features and improved quality to our customers. - -Our goal is to leverage the aggregated data to drive changes in the product and ecosystem to improve our customer experiences. We are also partnering with enterprises to provide added value from the telemetry information shared by their devices. Some examples include identifying outdated patches and downloading the latest antimalware signatures to help keep their devices secure, identifying application compatibility issues prior to upgrades, gaining insights into driver reliability issues affecting other customers, and using usage data to tune some of their operations to reduce the total cost of ownership (TCO) and downtime. - -For Windows 10, we invite IT pros to join the Windows Insider Program to give us feedback on what we can do to make Windows work better for youcr organization. - -## How is telemetry data handled by Microsoft? - - -### Data collection - -Data gathered by the Connected User Experience and Telemetry component complies with Microsoft’s [security and privacy policies](https://privacy.microsoft.com/privacystatement/), as well as international laws and regulations. The principle of least privilege guides access to telemetry data. Only Microsoft personnel who can demonstrate a valid business need can access the telemetry data. - -### Data transfer - -All telemetry data is encrypted using SSL and uses certificate pinning during transfer from the device to the Microsoft Data Management Service. With Windows 10,data is uploaded on a schedule that is sensitive to event priority, battery use, and network cost. Real-time events, such as Windows Defender Advanced Threat Protection,are always sent immediately. Normal events are not uploaded on metered networks, unless you are on a metered server connection. On a free network, normal events can be uploaded every 4 hours if on battery, or every 15 minutes if on A/C power. Diagnostic and crash data are only uploaded on A/C power and free networks. - -### Endpoints - -The Microsoft Data Management Service routes data back to our secure cloud storage. Only Microsoft personnel with a valid business justification are permitted access. The Connected User Experience and Telemetry component connects to the Microsoft Data Management service at v10.vortex-win.data.microsoft.com. The Connected User Experience and Telemetry component also connects to settings-win.data.microsoft.com to download configuration information. - -### Data usage - -Data gathered from telemetry is used by Microsoft teams primarily to improve our customer experiences, and for security, health, quality, and performance analysis. Microsoft does not share personal data of our customers with third parties, except at the customer’s discretion or for the limited purposes described in the Privacy Statement. We do share business reports with OEMs and third party partners that includes aggregated, anonymized telemetry information. Data-sharing decisions are made by an internal team including privacy, legal, and data management. - -### Retention - -Microsoft only gathers the information we need, and it is only stored for as long as it is needed to provide a service or for analysis. Most of the data is deleted within 30 days. - -## How is the data gathered? - - -Windows 10 and Windows Server 2016 Technical Preview includes the Connected User Experience and Telemetry component, which uses Event Tracing for Windows (ETW) [tracelogging](http://msdn.microsoft.com/library/dn904632.aspx) technology to gather and store telemetry events and data. The operating system and some Microsoft management solutions, such as System Center, use the same logging technology. - -1. Operating system features and some management applications are instrumented to publish events and data. Examples of management applications include Virtual Machine Manager (VMM), Server Manager, and Storage Spaces. - -2. Events are gathered using public operating system event logging and tracing APIs. - -3. You can configure the telemetry level by using an MDM policy, Group Policy, or registry settings. - -4. The Connected User Experience and Telemetry component transmits telemetry data over HTTPS to Microsoft and uses certificate pinning. - -## Telemetry levels - - -This section explains the different telemetry levels in Windows 10, Windows Server 2016 Technical Preview, and System Center. These levels are available on all desktop and mobile editions of Windows 10, with the exception of the **Security** level which is limited to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server 2016 Technical Preview. - -The telemetry data is categorized into four levels: - -- **Security**. Information that’s required to help keep Windows, Windows Server, and System Center secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. - -- **Basic**. Basic device info, including: quality-related data, app compat, app usage data, and data from the **Security** level. - -- **Enhanced**. Additional insights, including: how Windows, Windows Server, System Center, and apps are used, how they perform, advanced reliability data, and data from both the **Basic** and the **Security** levels. - -- **Full**. All data necessary to identify and help to fix problems, plus data from the **Security**, **Basic**, and **Enhanced** levels. - -The levels are cumulative and are illustrated in the following diagram. These levels apply to all editions of Windows Server 2016 Technical Preview. - -![breakdown of telemetry levels and types of administrative controls](images/priv-telemetry-levels.png) - -### Security level - -The Security level gathers only the telemetry info that is required to keep Windows devices, Windows Server, and guests secure with the latest security updates. - -**Note**   -If your organization relies on Windows Update for updates, you shouldn’t use the **Security** level. Because no Windows Update information is gathered at this level, important information about update failures is not sent. Microsoft uses this information to fix the causes of those failures and improve the quality of our updates. - -Windows Server Update Services (WSUS) and System Center Configuration Manager functionality is not affected at this level, nor is telemetry data about Windows Server features or System Center gathered. - -  - -The data gathered at this level includes: - -- **Connected User Experience and Telemetry component settings**. If data has been gathered and is queued to be sent, the Connected User Experience and Telemetry component downloads its settings file from Microsoft’s servers. The data gathered by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop). - -- **Malicious Software Removal Tool (MSRT)** The MSRT infection report contains information, including device info and IP address. - - **Note**   - You can turn off the MSRT infection report. No MSRT information is included if MSRT is not used. If Windows Update is turned off, MSRT will not be offered to users. For more info, see Microsoft KB article [891716](http://support.microsoft.com/kb/891716). - -   - -- **Windows Defender/Endpoint Protection**. Windows Defender and System Center Endpoint Protection requires some information to function, including: anti-malware signatures, diagnostic information, User Account Control settings, Unified Extensible Firmware Interface (UEFI) settings, and IP address. - - **Note**   - This reporting can be turned off and no information is included if a customer is using third party antimalware software, or if Windows Defender is turned off. For more info, see [Windows Defender](disconnect-your-organization-from-microsoft.md#windows-defender). - - Microsoft recommends that Windows Update, Windows Defender, and MSRT remain enabled unless the enterprise uses alternative solutions such as Windows Server Update Services, System Center Configuration Manager, or a third party antimalware solution. Windows Update, Windows Defender, and MSRT provide core Windows functionality such as driver and OS updates, including security updates. - -   - -For servers with default telemetry settings and no Internet connectivity, you should set the telemetry level to **Security**. This stops data gathering for events that would not be uploaded due to the lack of Internet connectivity. - -No user content, such as user files or communications, is gathered at the **Security** telemetry level, and we take steps to avoid gathering any information that directly identifies a company or user, such as name, email address, or account ID. However, in rare circumstances, MSRT information may unintentionally contain personal information. For instance, some malware may create entries in a computer’s registry that include information such as a username, causing it to be gathered. MSRT reporting is optional and can be turned off at any time. - -### Basic level - -The Basic level gathers a limited set of data that’s critical for understanding the device and its configuration. This level also includes the **Security** level data. This level helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version. The Connected User Experience and Telemetry component does not gather telemetry data about System Center, but it can transmit telemetry for other non-Windows applications if they have user consent. - -The data gathered at this level includes: - -- **Basic device data**. Helps provide an understanding about the types of Windows devices and the configurations and types of native and virtualized Windows Server 2016 Technical Previewinstances in the ecosystem, including: - - - Device attributes, such as camera resolution and display type - - - Internet Explorer version - - - Battery attributes, such as capacity and type - - - Networking attributes, such as number of network adapters, speed of network adapters, mobile operator network, and IMEI number - - - Processor and memory attributes, such as number of cores, architecture, speed, memory size, and firmware - - - Virtualization attribute, such as Second Level Address Translation (SLAT) support and guest operating system - - - Operating system attributes, such as Windows edition and virtualization state - - - Storage attributes, such as number of drives, type, and size - -- **Connected User Experience and Telemetry component quality metrics**. Helps provide an understanding about how the Connected User Experience and Telemetry component is functioning, including % of uploaded events, dropped events, and the last upload time. - -- **Quality-related information**. Helps Microsoft develop a basic understanding of how a device and its operating system are performing. Some examples are the device characteristics of a Connected Standby device, the number of crashes or hangs, and application state change details, such as how much processor time and memory were used, and the total uptime for an app. - -- **Compatibility data**. Helps provide an understanding about which apps are installed on a device or virtual machine and identifies potential compatibility problems. - - - **General app data and app data for Internet Explorer add-ons**. Includes a list of apps that are installed on a native or virtualized instance of the OS and whether these apps function correctly after an upgrade.This app data includes the app name, publisher, version, and basic details about which files have been blocked from usage. - - - **App usage data**. Includes how an app is used, including how long an app is used for, when the app has focus, and when the app is started - - - **Internet Explorer add-ons**. Includes a list of Internet Explorer add-ons that are installed on a device and whether these apps will work after an upgrade. - - - **System data**. Helps provide an understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as information about the processor and BIOS. - - - **Accessory device data**. Includes a list of accessory devices, such as printers or external storage devices, that are connected to Windows PCs and whether these devices will function after upgrading to a new version of the operating system. - - - **Driver data**. Includes specific driver usage that’s meant to help figure out whether apps and devices will function after upgrading to a new version of the operating system. This can help to determine blocking issues and then help Microsoft and our partners apply fixes and improvements. - -- **Store**. Provides information about how the Windows Store performs, including app downloads, installations, and updates. It also includes Windows Store launches, page views, suspend and resumes, and obtaining licenses. - -### Enhanced level - -The Enhanced level gathers data about how Windows and apps are used and how they perform. This level also includes data from both the **Basic** and **Security** levels. This level helps to improve the user experiencewith the operating system and apps. Data from this level can be abstracted into patterns and trends that can help Microsoft determine future improvements. - -This is the default level, and the minimum level needed to quickly identify and address Windows, Windows Server, and System Center quality issues. - -The data gathered at this level includes: - -- **Operating system events**. Helps to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, storage, file system, and other components. - -- **Operating system app events**. A set of events resulting from Microsoft applications and management tools that were downloaded from the Store or pre-installed with Windows or Windows Server, including Server Manager, Photos, Mail, and Microsoft Edge. - -- **Device-specific events**. Contains data about events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events. - -If the Connected User Experience and Telemetry component detects a problem on Windows 10 that requires gathering more detailed instrumentation, the Connected User Experience and Telemetry component at the **Enhanced** telemetry level will only gather data about the events associated with the specific issue. - -### Full level - -The Full level gathers data necessary to identify and to help fix problems, following the approval process described below. This level also includes data from the **Basic**, **Enhanced**, and **Security** levels. - -Additionally, at this level, devices opted in to the Windows Insider Program will send events, such as reliability and app responsiveness. that can show Microsoft how pre-release binaries and features are performing. These events help us make decisions on which builds are flighted. All devices in the Windows Insider Program are automatically set to this level. - -If a device experiences problems that are difficult to identify or repeat using Microsoft’s internal testing, additional data becomes necessary. This data can include any user content that might have triggered the problem and is gathered from a small sample of devices that have both opted into the **Full** telemetry level and have exhibited the problem. - -However, before more data is gathered, Microsoft’s privacy governance team, including privacy and other subject matter experts, must approve the diagnostics request made by a Microsoft engineer. If the request is approved, Microsoft engineers can use the following capabilities to get the information: - -- Ability to run a limited, pre-approved list of Microsoft certified diagnostic tools, such as msinfo32.exe, powercfg.exe, and dxdiag.exe. - -- Ability to get registry keys. - -### Manage your telemetry settings - -We do not recommend that you turn off telemetry in your organization as valuable functionality may be impacted, but we recognize that in some scenarios this may be required. Use the steps in this section to do so for Windows, Windows Server, and System Center. - -**Important**   -These telemetry levels only apply to Windows, Windows Server, and System Center components and apps that use the Connected User Experience and Telemetry component. Non-Windows components, such as Microsoft Office or other 3rd-party apps, may communicate with their cloud services outside of these telemetry levels. You should work with your app vendors to understand their telemetry policy, and how you can to opt in or opt out. For more information on how Microsoft Office uses telemetry, see [Overview of Office Telemetry](http://technet.microsoft.com/library/jj863580.aspx). - -  - -You can turn on or turn off System Center telemetry gathering. The default is on and the data gathered at this level represents what is gathered by default when System Center telemetry is turned on. However, setting the operating system telemetry level to **Basic** will turn off System Center telemetry, even if the System Center telemetry switch is turned on. - -The lowest telemetry setting level supported through management policies is **Security**. The lowest telemetry setting supported through the Settings UI is **Basic**. The default telemetry setting for Windows Server 2016 Technical Preview is **Enhanced.** - -### Configure the operating system telemetry level - -You can configure your operating system telemetry settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your telemetry levels through a management policy overrides any devicelevel settings. - -Use the appropriate value in the table below when you configure the management policy. - -| Value | Level | Data gathered | -|-------|----------|---------------------------------------------------------------------------------------------------------------------------| -| **0** | Security | Security data only. | -| **1** | Basic | Security data, and basic system and quality data. | -| **2** | Enhanced | Security data, basic system and quality data, and enhanced insights and advanced reliability data. | -| **3** | Full | Security data, basic system and quality data, enhanced insights and advanced reliability data, and full diagnostics data. | - -  - -### Use Group Policy to set the telemetry level - -Use a Group Policy object to set your organization’s telemetry level. - -1. From the Group Policy Management Console, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**. - -2. Double-click **Allow Telemetry**. - -3. In the **Options** box, select the level that you want to configure, and then click **OK**. - -### Use MDM to set the telemetry level - -Use the [Policy Configuration Service Provider (CSP)](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) to apply the System/AllowTelemetry MDM policy. - -### Use Registry Editor to set the telemetry level - -Use Registry Editor to manually set the registry level on each device in your organization, or write a script to edit the registry. If a management policy already exists, such as Group Policy or MDM, it will override this registry setting. - -1. Open Registry Editor, and go to **HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection**. - -2. Right-click **DataCollection**, click New, and then click **DWORD (32-bit) Value**. - -3. Type **AllowTelemetry**, and then press ENTER. - -4. Double-click **AllowTelemetry**, set the desired value from the table above, and then click **OK.** - -5. Click **File** > **Export**, and then save the file as a .reg file, such as **C:\\AllowTelemetry.reg**. You can run this file from a script on each device in your organization. - -### Configure System Center 2016 telemetry - -For System Center 2016 Technical Preview, you can turn off System Center telemetry by following these steps: - -- Turn off telemetry by using the System Center UI Console settings workspace. - -- For information about turning off telemetry for Service Management Automation and Service Provider Foundation, see [How to disable telemetry for Service Management Automation and Service Provider Foundation](https://support.microsoft.com/kb/3096505). - -### Additional telemetry controls - -There are a few more settings that you can turn off that may send telemetry information: - -- To turn off Windows Update telemetry, you have two choices. Either turn off Windows Update, or set your devices to be managed by an on premises update server, such as [Windows Server Update Services (WSUS)](http://technet.microsoft.com/library/hh852345.aspx) or [System Center Configuration Manager](http://www.microsoft.com/server-cloud/products/system-center-2012-r2-configuration-manager/). - -- Turn off **Windows Defender Cloud-based Protection** and **Automatic sample submission** in **Settings** > **Update & security** > **Windows Defender**. - -- Manage the Malicious Software Removal Tool in your organization. For more info, see Microsoft KB article [891716](http://support.microsoft.com/kb/891716). - -- Turn off **Linguistic Data Collection** in **Settings** > **Privacy**. At telemetry levels **Enhanced** and **Full**, Microsoft uses Linguistic Data Collection info to improve language model features such as autocomplete, spellcheck, suggestions, input pattern recognition, and dictionary. - - **Note**   - Microsoft do not intend to gather sensitive information, such as credit card numbers, usernames and passwords, email addresses, or other similarly sensitive information for Linguistic Data Collection. We guard against such events by using technologies to identify and remove sensitive information before linguistic data is sent from the user's device. If we determine that sensitive information has been inadvertently received, we delete the information. - -   - -## Examples of how Microsoft uses the telemetry data - - -### Drive higher apps and driver quality in the ecosystem - -Telemetry plays an important role in quickly identifying and fixing critical reliability and security issues in our customers’ deployments and configurations. Insights into the telemetry data we gather helps us to quickly identify crashes or hangs associated with a certain application or driver on a given configuration, like a particular storage type (for example, SCSI) or a memory size. For System Center, job usages and statuses can also help us enhance the job workload and the communication between System Center and its managed products. Microsoft’s ability to get this data from customers and drive improvements into the ecosystem helps raise the bar for the quality of System Center, Windows Server applications, Windows apps, and drivers. Real-time data about Windows installations reduces downtime and the cost associated with troubleshooting unreliable drivers or unstable applications - -### Reduce your total cost of ownership and downtime - -Telemetry provides a view of which features and services customers use most. For example, the telemetry data provides us with a heat map of the most commonly deployed Windows Server roles, most used Windows features, and which ones are used the least. This helps us make informed decisions on where we should invest our engineering resources to build a leaner operating system. For System Center, understanding the customer environment for management and monitoring will help drive the support compatibilities matrix, such as host and guest OS. This can help you use existing hardware to meet your business needs and reduce your total cost of ownership, as well as reducing downtime associated with security updates. - -### Build features that address our customers’ needs - -Telemetry also helps us better understand how customers deploy components, use features, and use services to achieve their business goals. Getting insights from that information helps us prioritize our engineering investments in areas that can directly affect our customers’ experiences and workloads. Some examples include customer usage of containers, storage, and networking configurations associated with Windows Server roles like Clustering and Web. Another example could be to find out when is CPU hyper-threading turned off and the resulting impact. We use the insights to drive improvements and intelligence into some of our management and monitoring solutions, to help customers diagnose quality issues, and save money by making fewer help calls to Microsoft. - -  - -  - - - - - diff --git a/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md b/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md index 2dae2ce2cc..28ae46df06 100644 --- a/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md +++ b/windows/manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md @@ -90,11 +90,6 @@ Use the [Imaging and Configuration Designer (ICD) tool](http://go.microsoft.com/ 17. Double-click the ppkg file and allow it to install. - **Warning**   - When a full Start layout is applied with this method, the users cannot pin, unpin, or uninstall apps from Start. Users can view and open all apps in the **All Apps** view, but they cannot pin any apps to Start. When a partial Start layout layout is applied, the contents of the specified tile groups cannot be changed, but users can move those groups, and can also create and customize their own groups. - -   - ## Related topics diff --git a/windows/manage/disconnect-your-organization-from-microsoft.md b/windows/manage/disconnect-your-organization-from-microsoft.md index 1657c9878a..382645c7a1 100644 --- a/windows/manage/disconnect-your-organization-from-microsoft.md +++ b/windows/manage/disconnect-your-organization-from-microsoft.md @@ -1,134 +1,139 @@ --- -title: Disconnect from Microsoft and configure privacy settings in your organization (Windows 10) -description: If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider.If you’re looking for content on what each telemetry level means and how to configure it in your organization, see Configure telemetry in your organization. +title: Configure telemetry and other settings in your organization (Windows 10) +description: Learn about the telemetry that Microsoft gathers, the network connections that Windows components make to Microsoft, and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro. ms.assetid: ACCEB0DD-BC6F-41B1-B359-140B242183D9 -keywords: ["privacy"] ms.prod: W10 ms.mktglfcycl: manage ms.sitesec: library author: jdeckerMS --- -# Disconnect from Microsoft and configure privacy settings in your organization +# Configure telemetry and other settings in your organization **Applies to** - Windows 10 -If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider. +Learn about the telemetry that Microsoft gathers, the network connections that Windows components make to Microsoft, and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro. -If you’re looking for content on what each telemetry level means and how to configure it in your organization, see [Configure telemetry in your organization](configure-telemetry-in-your-organization.md). +If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider. You can configure telemetry at the lowest level for your edition of Windows, and also evaluate which other connections Windows makes to Microsoft services you want to turn off in your environment from the list in this article. + +**Note**  Telemetry is a term that means different things to different people and organizations. For the purpose of this article, we discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component. The telemetry data is used to keep Windows devices secure, and to help Microsoft improve the quality of Windows and Microsoft services. We discuss separately the network connections that Windows features and components make directly to Microsoft Services. It is used to provide a service to the user as part of Windows. + +  Some of the network connections discussed in this article can be managed in Windows 10 Mobile, Windows 10 Mobile Enterprise, and the July release of Windows 10. However, you must use Windows 10 Enterprise, version 1511 or Windows 10 Education, version 1511 to manage them all. -In Windows 10 Enterprise, version 1511 or Windows 10 Education, version 1511, you can configure telemetry at the [Security level](configure-telemetry-in-your-organization.md#security-level), turn off Windows Defender telemetry and MSRT reporting, and turn off all other connections to Microsoft services as described in this article to prevent Windows from sending any data to Microsoft. We strongly recommend against this, as this data helps us deliver a secure, reliable, and more delightful personalized experience. - -The settings in this article assume you are using Windows 10, version 1511 (currently available in the Current Branch and Current Branch for Business). They will also be included in the next update for the Long Term Servicing Branch. +In Windows 10 Enterprise, version 1511 or Windows 10 Education, version 1511, you can configure telemetry at the Security level, turn off Windows Defender telemetry and MSRT reporting, and turn off all other connections to Microsoft services as described in this article to prevent Windows from sending any data to Microsoft. We strongly recommend against this, as this data helps us deliver a secure, reliable, and more delightful personalized experience. We are always working on improving Windows 10 for our customers. We invite IT pros to join the [Windows Insider Program](http://insider.windows.com) to give us feedback on what we can do to make Windows 10 work better for your organization. Here's what's covered in this article: -- [1. Cortana](#cortana) +- [Info management settings](#bkmk-othersettings) - - [1.1 Cortana Group Policies](#cortana-group-policies) + - [1. Cortana](#bkmk-cortana) - - [1.2 Cortana MDM policies](#cortana-mdm-policies) + - [1.1 Cortana Group Policies](#bkmk-cortana-gp) - - [1.3 Cortana Windows Provisioning](#cortana-windows-provisioning) + - [1.2 Cortana MDM policies](#bkmk-cortana-mdm) -- [2. Device metadata retrieval](#device-metadata-retrieval) + - [1.3 Cortana Windows Provisioning](#bkmk-cortana-prov) -- [3. Insider Preview builds](#insider-preview-builds) + - [2. Date & Time](#bkmk-datetime) -- [4. Internet Explorer](#internet-explorer) + - [3. Device metadata retrieval](#bkmk-devinst) - - [4.1 Internet Explorer Group Policies](#internet-explorer-group-policies) + - [4. Insider Preview builds](#bkmk-previewbuilds) - - [4.2 ActiveX control blocking](#internet-explorer-activex-control-blocking) + - [5. Internet Explorer](#bkmk-ie) -- [5. Mail synchronization](#mail-synchronization) + - [5.1 Internet Explorer Group Policies](#bkmk-ie-gp) -- [6. Microsoft Edge](#microsoft-edge) + - [5.2 ActiveX control blocking](#bkmk-ie-activex) - - [6.1 Microsoft Edge Group Policies](#microsoft-edge-group-policies) + - [6. Mail synchronization](#bkmk-mailsync) - - [6.2 Microsoft Edge MDM policies](#microsoft-edge-mdm-policies) + - [7. Microsoft Edge](#bkmk-edge) - - [6.3 Microsoft Edge Windows Provisioning](#microsoft-edge-windows-provisioning) + - [7.1 Microsoft Edge Group Policies](#bkmk-edgegp) -- [7. Network Connection Status Indicator](#network-connection-status-indicator) + - [7.2 Microsoft Edge MDM policies](#bkmk-edge-mdm) -- [8. Offline maps](#offline-maps) + - [7.3 Microsoft Edge Windows Provisioning](#bkmk-edge-prov) -- [9. OneDrive](#onedrive) + - [8. Network Connection Status Indicator](#bkmk-ncsi) -- [10. Preinstalled apps](#preinstalled-apps) + - [9. Offline maps](#bkmk-offlinemaps) -- [11. Settings > Privacy](#settings--privacy) + - [10. OneDrive](#bkmk-onedrive) - - [11.1 General](#general) + - [11. Preinstalled apps](#bkmk-preinstalledapps) - - [11.2 Location](#location) + - [12. Settings > Privacy](#bkmk-settingssection) - - [11.3 Camera](#camera) + - [12.1 General](#bkmk-general) - - [11.4 Microphone](#microphone) + - [12.2 Location](#bkmk-priv-location) - - [11.5 Speech, inking, & typing](#speech-inking--typing) + - [12.3 Camera](#bkmk-priv-camera) - - [11.6 Account info](#account-info) + - [12.4 Microphone](#bkmk-priv-microphone) - - [11.7 Contacts](#contacts) + - [12.5 Speech, inking, & typing](#bkmk-priv-speech) - - [11.8 Calendar](#calendar) + - [12.6 Account info](#bkmk-priv-accounts) - - [11.9 Call history](#settings-call-history) + - [12.7 Contacts](#bkmk-priv-contacts) - - [11.10 Email](#settings-email) + - [12.8 Calendar](#bkmk-priv-calendar) - - [11.11 Messaging](#settings-messaging) + - [12.9 Call history](#bkmk-priv-callhistory) - - [11.12 Radios](#settings-radios) + - [12.10 Email](#bkmk-priv-email) - - [11.13 Other devices](#settings-other-devices) + - [12.11 Messaging](#bkmk-priv-messaging) - - [11.14 Feedback & diagnostics](#settings-feedback) + - [12.12 Radios](#bkmk-priv-radios) - - [11.15 Background apps](#settings-background-apps) + - [12.13 Other devices](#bkmk-priv-other-devices) -- [12. Software Protection Platform](#software-protection-platform) + - [12.14 Feedback & diagnostics](#bkmk-priv-feedback) -- [13. Sync your settings](#sync-your-settings) + - [12.15 Background apps](#bkmk-priv-background) -- [14. Teredo](#teredo) + - [13. Software Protection Platform](#bkmk-spp) -- [15. Wi-Fi Sense](#wi-fi-sense) + - [14. Sync your settings](#bkmk-syncsettings) -- [16. Windows Defender](#windows-defender) + - [15. Teredo](#bkmk-teredo) -- [17. Windows Media Player](#windows-media-player) + - [16. Wi-Fi Sense](#bkmk-wifisense) -- [18. Windows spotlight](#windows-spotlight) + - [17. Windows Defender](#bkmk-defender) -- [19. Windows Store](#windows-store) + - [18. Windows Media Player](#bkmk-wmp) -- [20. Windows Update Delivery Optimization](#windows-update-delivery-optimization) + - [19. Windows spotlight](#bkmk-spotlight) - - [20.1 Settings > Update & security](#settings--update-security) + - [20. Windows Store](#bkmk-windowsstore) - - [20.2 Delivery Optimization Group Policies](#delivery-optimization-group-policies) + - [21. Windows Update Delivery Optimization](#bkmk-updates) - - [20.3 Delivery Optimization MDM policies](#delivery-optimization-mdm-policies) + - [21.1 Settings > Update & security](#bkmk-wudo-ui) - - [20.4 Delivery Optimization Windows Provisioning](#delivery-optimization-windows-provisioning) + - [21.2 Delivery Optimization Group Policies](#bkmk-wudo-gp) -- [21. Windows Update](#windows-update) + - [21.3 Delivery Optimization MDM policies](#bkmk-wudo-mdm) -See the following table for a summary of the settings. For more info, see its corresponding section. + - [21.4 Delivery Optimization Windows Provisioning](#bkmk-wudo-prov) -![](images/settings-table.png) + - [22. Windows Update](#bkmk-wu) + +- [Manage your telemetry settings](#bkmk-utc) + +- [How telemetry works](#bkmk-moreutc) ## What's new in Windows 10, version 1511 @@ -183,12 +188,66 @@ Here's a list of changes that were made to this article for Windows 10, version - Changed the Windows Update section to apply system-wide settings, and not just per user. -## 1. Cortana +## Info management settings +This section lists the components that make network connections to Microsoft services automatically. You can configure these settings to control the data that is sent to Microsoft. To prevent Windows from sending any data to Microsoft, configure telemetry at the Security level, turn off Windows Defender telemetry and MSRT reporting, and turn off all of these connections. We strongly recommend against this, as this data helps us deliver a secure, reliable, and more delightful personalized experience. + +The settings in this section assume you are using Windows 10, version 1511 (currently available in the Current Branch and Current Branch for Business). They will also be included in the next update for the Long Term Servicing Branch. + +- [1. Cortana](#bkmk-cortana) + +- [2. Date & Time](#bkmk-datetime) + +- [3. Device metadata retrieval](#bkmk-devinst) + +- [4. Insider Preview builds](#bkmk-previewbuilds) + +- [5. Internet Explorer](#bkmk-ie) + +- [6. Mail synchronization](#bkmk-mailsync) + +- [7. Microsoft Edge](#bkmk-edge) + +- [8. Network Connection Status Indicator](#bkmk-ncsi) + +- [9. Offline maps](#bkmk-offlinemaps) + +- [10. OneDrive](#bkmk-onedrive) + +- [11. Preinstalled apps](#bkmk-preinstalledapps) + +- [12. Settings > Privacy](#bkmk-settingssection) + +- [13. Software Protection Platform](#bkmk-spp) + +- [14. Sync your settings](#bkmk-syncsettings) + +- [15. Teredo](#bkmk-teredo) + +- [16. Wi-Fi Sense](#bkmk-wifisense) + +- [17. Windows Defender](#bkmk-defender) + +- [18. Windows Media Player](#bkmk-wmp) + +- [19. Windows spotlight](#bkmk-spotlight) + +- [20. Windows Store](#bkmk-windowsstore) + +- [21. Windows Update](#bkmk-wu) + +- [22. Windows Update Delivery Optimization](#bkmk-updates) + +See the following table for a summary of the management settings. For more info, see its corresponding section. + +![](images/settings-table.png) + +### 1. Cortana + Use either Group Policy or MDM policies to manage settings for Cortana. For more info, see [Cortana, Search, and privacy: FAQ]( http://go.microsoft.com/fwlink/p/?LinkId=730683). -### 1.1 Cortana Group Policies +### 1.1 Cortana Group Policies Find the Cortana Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Search**. @@ -264,7 +323,7 @@ If your organization tests network traffic, you should not use Fiddler to test W   -### 1.2 Cortana MDM policies +### 1.2 Cortana MDM policies The following Cortana MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx). @@ -295,17 +354,25 @@ The following Cortana MDM policies are available in the [Policy CSP](http://msdn   -### 1.3 Cortana Windows Provisioning +### 1.3 Cortana Windows Provisioning To use Windows Imaging and Configuration Designer (ICD) to create a provisioning package with the settings for these policies, go to **Runtime settings** > **Policies** to find **Experience** > **AllowCortana** and **Search** > **AllowSearchToUseLocation**. -## 2. Device metadata retrieval +### 2. Date & Time +You can prevent Windows from setting the time automatically. + +- To turn off the feature in the UI: **Settings** > **Time & language** > **Date & time** > **Set time automatically** + + -or- + +- Create a REG\_DWORD registry setting called **NoSync** in **HKEY\_LOCAL\_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\Parameters**, with a value of 1. + +### 3. Device metadata retrieval To prevent Windows from retrieving device metadata from the Internet, apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Device Installation** > **Prevent device metadata retrieval from the Internet**. -## 3. Insider Preview builds - +### 4. Insider Preview builds To turn off Insider Preview builds if you're running a released version of Windows 10. If you're running a preview version of Windows 10, you must roll back to a released version before you can turn off Insider Preview builds. @@ -335,12 +402,11 @@ To turn off Insider Preview builds if you're running a released version of Windo - **2**. (default) Not configured. Users can make their devices available for download and installing preview software. -## 4. Internet Explorer - +### 5. Internet Explorer Use Group Policy to manage settings for Internet Explorer. -### 4.1 Internet Explorer Group Policies +### 5.1 Internet Explorer Group Policies Find the Internet Explorer Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer**. @@ -388,14 +454,13 @@ Find the Internet Explorer Group Policy objects under **Computer Configuration**   -### 4.2 ActiveX control blocking +### 5.2 ActiveX control blocking ActiveX control blocking periodically downloads a new list of out-of-date ActiveX controls that should be blocked. You can turn this off by changing the REG\_DWORD registry setting **HKEY\_CURRENT\_USER\\Software\\Microsoft\\Internet Explorer\\VersionManager\\DownloadVersionList** to 0 (zero). For more info, see [Out-of-date ActiveX control blocking](http://technet.microsoft.com/library/dn761713.aspx). -## 5. Mail synchronization - +### 6. Mail synchronization To turn off mail synchronization for Microsoft Accounts that are configured on a device: @@ -413,12 +478,11 @@ To turn off the Windows Mail app: - Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Mail** > **Turn off Windows Mail application** -## 6. Microsoft Edge - +### 7. Microsoft Edge Use either Group Policy or MDM policies to manage settings for Microsoft Edge. For more info, see [Microsoft Edge and privacy: FAQ](http://go.microsoft.com/fwlink/p/?LinkId=730682). -### 6.1 Microsoft Edge Group Policies +### 7.1 Microsoft Edge Group Policies Find the Microsoft Edge Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Edge**. @@ -479,7 +543,7 @@ The Microsoft Edge Group Policy names were changed in Windows 10, version 1511.   -### 6.2 Microsoft Edge MDM policies +### 7.2 Microsoft Edge MDM policies The following Microsoft Edge MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx). @@ -525,14 +589,13 @@ The following Microsoft Edge MDM policies are available in the [Policy CSP](http   -### 6.3 Microsoft Edge Windows Provisioning +### 7.3 Microsoft Edge Windows Provisioning Use Windows ICD to create a provisioning package with the settings for these policies, go to **Runtime settings** > **Policies**. For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](http://technet.microsoft.com/library/mt270204.aspx). -## 7. Network Connection Status Indicator - +### 8. Network Connection Status Indicator Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftncsi.com to determine if the device can communicate with the Internet. For more info about NCIS, see [The Network Connection Status Icon](http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx). @@ -540,8 +603,7 @@ You can turn off NCSI through Group Policy: - Enable the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Internet Communication Management** > **Internet Communication Settings** > **Turn off Windows Network Connectivity Status Indicator active tests** -## 8. Offline maps - +### 9. Offline maps You can turn off the ability to download and update offline maps. @@ -551,15 +613,13 @@ You can turn off the ability to download and update offline maps. - Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Maps** > **Turn off Automatic Download and Update of Map Data** -## 9. OneDrive - +### 10. OneDrive To turn off OneDrive in your organization: - Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **OneDrive** > **Prevent the usage of OneDrive for file storage** -## 10. Preinstalled apps - +### 11. Preinstalled apps Some preinstalled apps get content before they are opened to ensure a great experience. You can remove these using the steps in this section. @@ -671,12 +731,41 @@ To remove the Get Skype app: Remove the app for the current user. From an elevated command prompt, run the following Windows PowerShell command: **Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage** -## 11. Settings > Privacy - +### 12. Settings > Privacy Use Settings > Privacy to configure some settings that may be important to your organization. Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC. -### 11.1 General +- [12.1 General](#bkmk-general) + +- [12.2 Location](#bkmk-priv-location) + +- [12.3 Camera](#bkmk-priv-camera) + +- [12.4 Microphone](#bkmk-priv-microphone) + +- [12.5 Speech, inking, & typing](#bkmk-priv-speech) + +- [12.6 Account info](#bkmk-priv-accounts) + +- [12.7 Contacts](#bkmk-priv-contacts) + +- [12.8 Calendar](#bkmk-priv-calendar) + +- [12.9 Call history](#bkmk-priv-callhistory) + +- [12.10 Email](#bkmk-priv-email) + +- [12.11 Messaging](#bkmk-priv-messaging) + +- [12.12 Radios](#bkmk-priv-radios) + +- [12.13 Other devices](#bkmk-priv-other-devices) + +- [12.14 Feedback & diagnostics](#bkmk-priv-feedback) + +- [12.15 Background apps](#bkmk-priv-background) + +### 12.1 General **General** includes options that don't fall into other areas. @@ -748,7 +837,7 @@ To turn off **Let websites provide locally relevant content by accessing my lang - Create a new REG\_DWORD registry setting called **HttpAcceptLanguageOptOut** in **HKEY\_CURRENT\_USER\\Control Panel\\International\\User Profile**, with a value of 1. -### 11.2 Location +### 12.2 Location In the **Location** area, you choose whether devices have access to location-specific sensors and which apps have access to the device's location. @@ -801,7 +890,7 @@ To turn off **Choose apps that can use your location**: - Turn off each app using the UI. -### 11.3 Camera +### 12.3 Camera In the **Camera** area, you can choose which apps can access a device's camera. @@ -840,7 +929,7 @@ To turn off **Choose apps that can use your camera**: - Turn off the feature in the UI for each app. -### 11.4 Microphone +### 12.4 Microphone In the **Microphone** area, you can choose which apps can access a device's microphone. @@ -858,7 +947,7 @@ To turn off **Choose apps that can use your microphone**: - Turn off the feature in the UI for each app. -### 11.5 Speech, inking, & typing +### 12.5 Speech, inking, & typing In the **Speech, Inking, & Typing** area, you can let Windows and Cortana better understand your employee's voice and written input by sampling their voice and writing, and by comparing verbal and written input to contact names and calendar entrees. @@ -883,7 +972,7 @@ To turn off the functionality: Create a REG\_DWORD registry setting called **HarvestContacts** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore**, with a value of 0 (zero). -### 11.6 Account info +### 12.6 Account info In the **Account Info** area, you can choose which apps can access your name, picture, and other account info. @@ -901,7 +990,7 @@ To turn off **Choose the apps that can access your account info**: - Turn off the feature in the UI for each app. -### 11.7 Contacts +### 12.7 Contacts In the **Contacts** area, you can choose which apps can access an employee's contacts list. @@ -915,7 +1004,7 @@ To turn off **Choose apps that can access contacts**: - Set the **Select a setting** box to **Force Deny**. -### 11.8 Calendar +### 12.8 Calendar In the **Calendar** area, you can choose which apps have access to an employee's calendar. @@ -933,7 +1022,7 @@ To turn off **Choose apps that can access calendar**: - Turn off the feature in the UI for each app. -### 11.9 Call history +### 12.9 Call history In the **Call history** area, you can choose which apps have access to an employee's call history. @@ -947,7 +1036,7 @@ To turn off **Let apps access my call history**: - Set the **Select a setting** box to **Force Deny**. -### 11.10 Email +### 12.10 Email In the **Email** area, you can choose which apps have can access and send email. @@ -961,7 +1050,7 @@ To turn off **Let apps access and send email**: - Set the **Select a setting** box to **Force Deny**. -### 11.11 Messaging +### 12.11 Messaging In the **Messaging** area, you can choose which apps can read or send messages. @@ -979,7 +1068,7 @@ To turn off **Choose apps that can read or send messages**: - Turn off the feature in the UI for each app. -### 11.12 Radios +### 12.12 Radios In the **Radios** area, you can choose which apps can turn a device's radio on or off. @@ -997,7 +1086,7 @@ To turn off **Choose apps that can control radios**: - Turn off the feature in the UI for each app. -### 11.13 Other devices +### 12.13 Other devices In the **Other Devices** area, you can choose whether devices that aren't paired to PCs, such as an Xbox One, can share and sync info. @@ -1015,7 +1104,7 @@ To turn off **Let your apps use your trusted devices (hardware you've already co - Set the **Select a setting** box to **Force Deny**. -### 11.14 Feedback & diagnostics +### 12.14 Feedback & diagnostics In the **Feedback & Diagnostics** area, you can choose how often you're asked for feedback and how much diagnostic and usage information is sent to Microsoft. @@ -1061,6 +1150,8 @@ To change the level of diagnostic and usage data sent when you **Send your devic   + -or- + - Apply the Group Policy: **Computer Configuration\\Administrative Templates\\Windows Components\\Data Collection And Preview Builds\\Allow Telemetry** -or- @@ -1087,7 +1178,7 @@ To change the level of diagnostic and usage data sent when you **Send your devic - **3**. Maps to the [Full](#bkmk-utc-full) level. -### 11.15 Background apps +### 12.15 Background apps In the **Background Apps** area, you can choose which apps can run in the background. @@ -1095,8 +1186,7 @@ To turn off **Let apps run in the background**: - Turn off the feature in the UI for each app. -## 12. Software Protection Platform - +### 13. Software Protection Platform Enterprise customers can manage their Windows activation status with volume licensing using an on-premise Key Management Server. You can opt out of sending KMS client activation data to Microsoft automatically by applying the following Group Policy: @@ -1104,8 +1194,7 @@ Enterprise customers can manage their Windows activation status with volume lice The Windows activation status will be valid for a rolling period of 180 days with weekly activation status checks to the KMS. -## 13. Sync your settings - +### 14. Sync your settings You can control if your settings are synchronized: @@ -1131,17 +1220,15 @@ To turn off Messaging cloud sync: - Create a REG\_DWORD registry setting called **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging**, with a value of 0 (zero). -## 14. Teredo - +### 15. Teredo You can disable Teredo by using the netsh.exe command. For more info on Teredo, see [Internet Protocol Version 6, Teredo, and Related Technologies](http://technet.microsoft.com/library/cc722030.aspx). - From an elevated command prompt, run **netsh interface teredo set state disabled** -## 15. Wi-Fi Sense +### 16. Wi-Fi Sense - -Wi-Fi Sense automatically connects devices to known hotspots and to the wireless networks the person’s contacts have shared with them. +Wi-Fi Sense automatically connects devices to known hotspots and to the wireless networks the person’s contacts have shared with them. To turn off **Connect to suggested open hotspots** and **Connect to networks shared by my contacts**: @@ -1163,10 +1250,9 @@ To turn off **Connect to suggested open hotspots** and **Connect to networks sha - Use the Unattended settings to set the value of WiFiSenseAllowed to 0 (zero). For more info, see the Unattended Windows Setup reference doc, [WiFiSenseAllowed.](http://go.microsoft.com/fwlink/p/?LinkId=620910) -When turned off, the Wi-Fi Sense settings still appear on the Wi-Fi Settings screen, but they’re non-functional and they can’t be controlled by the employee. - -## 16. Windows Defender +When turned off, the Wi-Fi Sense settings still appear on the Wi-Fi Settings screen, but they’re non-functional and they can’t be controlled by the employee. +### 17. Windows Defender You can opt of the Microsoft Antimalware Protection Service. @@ -1200,10 +1286,17 @@ You can stop sending file samples back to Microsoft. - Use the registry to set the REG\_DWORD value **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows Defender\\Spynet\\SubmitSamplesConsent** to 0 (zero) to always prompt or 2 to never send. +You can stop downloading definition updates: + +- Enable the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Defender** > **Signature Updates** > **Define the order of sources for downloading definition updates** and set it to **FileShares**. + + -and- + +- Enable the Group Policy **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Defender** > **Signature Updates** > **Define file shares for downloading definition updates** and set it to nothing. + You can also use the registry to turn off Malicious Software Reporting Tool telemetry by setting the REG\_DWORD value **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\MRT\\DontReportInfectionInformation** to 1. -## 17. Windows Media Player - +### 18. Windows Media Player To remove Windows Media Player: @@ -1213,8 +1306,7 @@ To remove Windows Media Player: - Run the following DISM command from an elevated command prompt: **dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer** -## 18. Windows spotlight - +### 19. Windows spotlight Windows spotlight provides different background images and text on the lock screen. You can control it by using the user interface or through Group Policy. @@ -1245,29 +1337,27 @@ Windows spotlight provides different background images and text on the lock scre For more info, see [Windows spotlight on the lock screen](../whats-new/windows-spotlight.md). -## 19. Windows Store - +### 20. Windows Store You can turn off the ability to launch apps from the Windows Store that were preinstalled or downloaded. This will also turn off automatic app updates, and the Windows Store will be disabled. - Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Store** > **Disable all apps from Windows Store**. -## 20. Windows Update Delivery Optimization +### 21. Windows Update Delivery Optimization - -Windows Update Delivery Optimization lets you get Windows updates and Windows Store apps from sources in addition to Microsoft, which not only helps when you have a limited or unreliable Internet connection, but can also help you reduce the amount of bandwidth needed to keep all of your organization’s PCs up-to-date. If you have Delivery Optimization turned on, PCs on your network may send and receive updates and apps to other PCs on your local network, if you choose, or to PCs on the Internet. +Windows Update Delivery Optimization lets you get Windows updates and Windows Store apps from sources in addition to Microsoft, which not only helps when you have a limited or unreliable Internet connection, but can also help you reduce the amount of bandwidth needed to keep all of your organization’s PCs up-to-date. If you have Delivery Optimization turned on, PCs on your network may send and receive updates and apps to other PCs on your local network, if you choose, or to PCs on the Internet. By default, PCs running Windows 10 Enterprise and Windows 10 Education will only use Delivery Optimization to get and receive updates for PCs and apps on your local network. Use the UI, Group Policy, MDM policies, or Windows Provisioning to set up Delivery Optimization. -### 20.1 Settings > Update & security +### 21.1 Settings > Update & security You can set up Delivery Optimization from the **Settings** UI. - Go to **Settings** > **Update & security** > **Windows Update** > **Advanced options** > **Choose how updates are delivered**. -### 20.2 Delivery Optimization Group Policies +### 21.2 Delivery Optimization Group Policies You can find the Delivery Optimization Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. @@ -1324,7 +1414,7 @@ You can find the Delivery Optimization Group Policy objects under **Computer Con   -### 20.3 Delivery Optimization MDM policies +### 21.3 Delivery Optimization MDM policies The following Delivery Optimization MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx). @@ -1381,7 +1471,7 @@ The following Delivery Optimization MDM policies are available in the [Policy CS   -### 20.4 Delivery Optimization Windows Provisioning +### 21.4 Delivery Optimization Windows Provisioning If you don't have an MDM server in your enterprise, you can use Windows Provisioning to configure the Delivery Optimization policies @@ -1397,8 +1487,7 @@ Use Windows ICD, included with the [Windows Assessment and Deployment Kit (Windo For more info about Delivery Optimization in general, see [Windows Update Delivery Optimization: FAQ](http://go.microsoft.com/fwlink/p/?LinkId=730684). -## 21. Windows Update - +### 22. Windows Update You can turn off Windows Update by setting the following registry entries: @@ -1430,6 +1519,275 @@ You can turn off automatic updates by doing one of the following. This is not re To learn more, see [Device update management](http://msdn.microsoft.com/library/windows/hardware/dn957432.aspx) and [Configure Automatic Updates by using Group Policy](http://technet.microsoft.com/library/cc720539.aspx). +## Manage your telemetry settings + + +You can manage your telemetry settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your telemetry levels through a management policy overrides any device-level settings. + +You can set your organization’s devices to use 1 of 4 telemetry levels: + +- [Security](#bkmk-utc-security) (only available on Windows 10 Enterprise, Windows 10 Education, and Windows 10 IoT Core (IoT Core) editions) + +- [Basic](#bkmk-utc-basic) + +- [Enhanced](#bkmk-utc-enhanced) + +- [Full](#bkmk-utc-full) + +For more info about these telemetry levels, see [Telemetry levels](#bkmk-telemetrylevels). In Windows 10 Enterprise, Windows 10 Education, and IoT Core, the default telemetry level is [Enhanced](#bkmk-utc-enhanced). + +**Important**   +These telemetry levels only apply to Windows components and apps that use the Connected User Experience and Telemetry component. Non-Windows components, such as Microsoft Office or other 3rd-party apps, may communicate with their cloud services outside of these telemetry levels. App publishers must let people know about how they use their telemetry, ways to opt in or opt out, and they must separately document their privacy policies. + +  + +### Use Group Policy to set the telemetry level + +Use a Group Policy object to set your organization’s telemetry level. + +1. From the Group Policy Management Console, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**. + +2. Double-click **Allow Telemetry**. + +3. In the **Options** box, select the level that you want to configure, and then click **OK**. + +### Use MDM to set the telemetry level + +Use the [Policy Configuration Service Provider (CSP)](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) to apply the System/AllowTelemetry MDM policy, using one of these telemetry values: + +- **0**. Maps to the [Security](#bkmk-utc-security) level. + +- **1**. Maps to the [Basic](#bkmk-utc-basic) level. + +- **2**. Maps to the [Enhanced](#bkmk-utc-enhanced) level. + +- **3**. Maps to the [Full](#bkmk-utc-full) level. + +### Use Windows Provisioning to set the telemetry level + +Use Windows Provisioning and the Windows Imaging and Configuration Designer (Windows ICD) tool – part of the [Windows Assessment and Deployment Kit (Windows ADK) toolkit](http://go.microsoft.com/fwlink/p/?LinkId=526803) - to create a provisioning package and runtime setting that sets your organization’s telemetry level. + +After you create the provisioning package, you can email it to your employees, put it on a network share, or integrate the package directly into a custom image using Windows ICD. + +**To use Windows ICD to integrate your package into a custom image** + +1. Open Windows ICD, and then click **New provisioning package**. + +2. In the **Name** box, type a name for the provisioning package, and then click **Next**. + +3. Click **Common to all Windows editions** > **Next** > **Finish**. + +4. Go to **Runtime settings** > **Policies** > **System** > **AllowTelemetry** to configure the policies. You can set it to one of the following: + + - **Disabled \[Enterprise SKU Only\]**. Maps to the [Security](#bkmk-utc-security) level. + + - **Basic**. Maps to the [Basic](#bkmk-utc-basic) level. + + - **Full**. Maps to the [Enhanced](#bkmk-utc-enhanced) level + + - **Diagnostic**. Maps to the [Full](#bkmk-utc-full) level. + +5. After you've added all of your settings to the provisioning package, click **Export** > **Provisioning package**. + +6. On the **Describe the provisioning package** step, in the **Owner** box, click **IT Admin** > **Next**. + +7. On the **Select security details for the provisioning package** step, if you want to protect the package with a password, select the **Encrypt package** check box. If you'd like to sign the package with a certificate, select the **Sign package** check box and select the certificate to use. Click **Next**. + +8. On the **Select where to save the provisioning package** step, if you want to save it somewhere other than the Windows ICD project folder, choose a new location, and then click **Next**. + +9. On the **Build the provisioning package** step, click **Build**. + +### Use Registry Editor to set the telemetry level + +Use Registry Editor to manually set the registry level on each device in your organization, or write a script to edit the registry. + +If a management policy already exists (from Group Policy, MDM, or Windows Provisioning), it will override this registry setting. + +1. Open Registry Editor, and go to **HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection**. + +2. Right-click **DataCollection**, click **New**, and then click **DWORD (32-bit) Value**. + +3. Type **AllowTelemetry**, and then press ENTER. + +4. Double-click **AllowTelemetry** and set the value to one of the following levels, and the click **OK**. + + - **0**. This setting maps to the [Security](#bkmk-utc-security) level. + + - **1**. This setting maps to the [Basic](#bkmk-utc-basic) level. + + - **2**. This setting maps to the [Enhanced](#bkmk-utc-enhanced) level + + - **3**. This setting maps to the [Full](#bkmk-utc-full) level. + +5. Click **File** > **Export**, and then save the file as a .reg file, such as **C:\\AllowTelemetry.reg**. You can run this file from a script on each device in your organization. + +### Additional telemetry controls + +There are a few more settings that you can turn off that may send telemetry information: + +- To turn off Windows Update telemetry, you have two choices. Either turn off Windows Update, or set your devices to be managed by an on premises update server, such as [Windows Server Update Services (WSUS)](http://technet.microsoft.com/library/hh852345.aspx) or [System Center Configuration Manager](http://www.microsoft.com/server-cloud/products/system-center-2012-r2-configuration-manager/). + +- Turn off **Windows Defender Cloud-based Protection** and **Automatic sample submission** in **Settings** > **Update & security** > **Windows Defender**. + +- Manage the Malicious Software Removal Tool in your organization. For more info, see Microsoft KB article [891716](http://support.microsoft.com/kb/891716). + +- Turn off Linguistic Data Collection in **Settings** > **Privacy**. At telemetry levels Enhanced and Full, Microsoft uses Linguistic Data Collection info to improve language model features such as autocomplete, spellcheck, suggestions, input pattern recognition, and dictionary. For more info, see the **Get to know me** setting in the [Speech, inking, & typing](#bkmk-priv-speech) section of this article and the **Send Microsoft info about how I write to help us improve typing and writing in the future** setting in the [General](#bkmk-priv-general) section of this article. + + **Note**   + Microsoft doesn't intentionally gather sensitive information, such as credit card numbers, usernames and passwords, email addresses, or other similarly sensitive information for Linguistic Data Collection. We guard against such events by using technologies to identify and remove sensitive information before linguistic data is sent from the user's device. If we determine that sensitive information has been inadvertently received, we delete the information. + +   + +## How telemetry works + + +Windows uses telemetry information to analyze and fix software problems. It also helps Microsoft improve its software and provide updates that enhance the security and reliability of devices within your organization. + +### Telemetry levels + +This section explains the different telemetry levels in Windows 10. These levels are available on all desktop and mobile editions of Windows 10, with the exception of the Security level which is limited to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and IoT Core. + +- **Security**. Information that’s required to help keep Windows secure, including info about theConnected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. This level is available only on Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and IoT Core. + +- **Basic**. Basic device info, including: quality-related info, app compat, and info from the Security level. + +- **Enhanced** Additional insights, including: how Windows and Windows apps are used, how they perform, advanced reliability info, and info from both the Basic and the Security levels. + +- **Full**. All info necessary to identify and help to fix problems, plus info from the Security, Basic, and Enhanced levels. + +As a diagram: + +![](images/priv-telemetry-levels.png) + +### Security level + +The Security level gathers only telemetry info that’s required to keep Windows devices secure. This level is only available on Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and IoT Core editions. + +**Note**   +If your organization relies on Windows Update for updates, you shouldn’t use the Security level. Because no Windows Update information is gathered at this level, Microsoft can’t tell whether an update successfully installed. + +You can continue to use Windows Server Update Services and System Center Configuration Manager while using the Security level. + +  + +Security level info includes: + +- **Connected User Experience and Telemetry component settings**. If data has been gathered and is queued to be sent, the Connected User Experience and Telemetry component downloads its settings file from Microsoft’s servers. The data collected by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop). + +- **Malicious Software Removal Tool (MSRT)** The MSRT infection report contains information, including device info and IP address. + + **Note**   + You can turn off the MSRT infection report. No MSRT information is included if MSRT is not used. If Windows Update is turned off, MSRT will not be offered to users. + +   + +- **Windows Defender**. Windows Defender requires some information to function, including: anti-malware signatures, diagnostic information, User Account Control settings, Unified Extensible Firmware Interface (UEFI) settings, and IP address. To configure this, see [Windows Defender](#bkmk-defender). + + **Note**   + This reporting can be turned off and no information is included if a customer is using third party antimalware software, or if Windows Defender is turned off. + + Microsoft recommends that Windows Update, Windows Defender, and MSRT remain enabled unless the enterprise uses alternative solutions such as Windows Server Update Services, System Center Configuration Manager, or a third party antimalware solution. Windows Update, Windows Defender, and MSRT provide core Windows functionality such as driver and OS updates, including security updates; moreover, Window Defender requires updated anti-malware signatures in order to provide security functionality. + +   + +No user content, such as user files or communications, is gathered at the Security telemetry level, and we take steps to avoid gathering any information that directly identifies a company or user, such as name, email address, or account ID. However, in rare circumstances, MSRT information may unintentionally contain personal information. For instance, some malware may create entries in a computer’s registry that include information such as a username, causing it to be gathered. MSRT reporting is optional and can be turned off at any time. + +To set the telemetry level to Security, use a management policy (Group Policy or MDM) or by manually changing the setting in the registry. For more info, see the [Manage your telemetry settings](#bkmk-utc) section of this article. + +### Basic level + +The Basic level gathers a limited set of info that’s critical for understanding the device and its configuration. This level also includes the Security level info. This level helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version. + +Basic level info includes: + +- **Basic device info**. Helps provide an understanding about the various types of devices in the Windows 10 ecosystem, including: + + - Device attributes, such as camera resolution and display type + + - Internet Explorer version + + - Battery attributes, such as capacity and type + + - Networking attributes, such as mobile operator network and IMEI number + + - Processor and memory attributes, such as number of cores, speed, and firmware + + - Operating system attributes, such as Windows edition and IsVirtualDevice + + - Storage attributes, such as number of drives and memory size + +- **Connected User Experience and Telemetry component quality metrics**. Helps provide an understanding about how the Connected User Experience and Telemetry component is functioning, including uploaded events, dropped events, and the last upload time. + +- **Quality-related information**. Helps Microsoft develop a basic understanding of how a device and its operating system are performing. Some examples are the amount of time a connected standby device was able to fullsleep, the number of crashes or hangs, and application state change details, such as how much processor time and memory were used, and the total uptime for an app. + +- **App compat info**. Helps provide understanding about which apps are installed on a device and to help identify potential compatibility problems. + + - **General app info and app info for Internet Explorer add-ons**. Includes a list of apps and Internet Explorer add-ons that are installed on a device and whether these apps will work after an upgrade. This app info includes the app name, publisher, version, and basic details about which files have been blocked from usage. + + - **System info**. Helps provide understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as info about the processor and BIOS. + + - **Accessory device info**. Includes a list of accessory devices, such as printers or external storage devices, that are connected to Windows PCs and whether these devices will function after upgrading to a new version of the operating system. + + - **Driver info**. Includes specific driver usage that’s meant to help figure out whether apps and devices will function after upgrading to a new version of the operating system. This info can help to determine blocking issues and then help Microsoft and our partners apply fixes and improvements. + +- **Store**. Provides info about how the Windows Store performs, including app downloads, installations, and updates. It also includes Windows Store launches, page views, suspend and resumes, and obtaining licenses. + +### Enhanced level + +The Enhanced level gathers info about how Windows and apps are used and how they perform. This level also includes info from both the Basic and Security levels. This level helps to improve experiences by analyzing user interaction with the operating system and apps. Info from this level can be abstracted into patterns and trends that can help Microsoft determine future improvements. + +Enhanced level info includes: + +- **Operating system events**. Helps to gain insights into different areas of the operating system, including networking, Hyper-V, Cortana, and other components. + +- **Operating system app events**. A set of events resulting from Microsoft apps that were downloaded from the Store or pre-installed with Windows, including Photos, Mail, and Microsoft Edge. + +- **Device-specific events**. Contains info about events that are specific to certain devices, such as Surface Hub and Microsoft HoloLens. For example, Microsoft HoloLens sends Holographic Processing Unit (HPU)-related events. + +If the Connected User Experience and Telemetry component detects a problem that requires gathering more detailed instrumentation, then the Connected User Experience and Telemetry component will only gather info about the events associated with the specific issue, for no more than 2 weeks. Also, if the operating system or an app crashes or hangs, Microsoft will gather the memory contents of the faulting process only at the time of the crash or hang. + +### Full level + +The Full level gathers info necessary to identify and to help fix problems, following the approval process described below. This level also includes info from the Basic, Enhanced, and Security levels. + +Additionally, at this level, devices opted in to the Windows Insider Program will send events that can show Microsoft how pre-release binaries and features are performing. All devices in the Windows Insider Program are automatically set to this level. + +If a device experiences problems that are difficult to identify or repeat using Microsoft’s internal testing, additional info becomes necessary. This info can include any user content that might have triggered the problem and is gathered from a small sample of devices that have both opted into the Full telemetry level and have exhibited the problem. + +However, before more info is gathered, Microsoft’s privacy governance team, including privacy and other subject matter experts, must approve the diagnostics request made by a Microsoft engineer. If the request is approved, Microsoft engineers can use the following capabilities to get the information: + +- Ability to run a limited, pre-approved list of Microsoft certified diagnostic tools, such as msinfo32.exe, powercfg.exe, and dxdiag.exe. + +- Ability to get registry keys. + +- Ability to gather user content, such as documents, if they might have been the trigger for the issue. + +### How is telemetry information handled by Microsoft? + +### Collection + +Information gathered by the Connected User Experience and Telemetry component complies with Microsoft’s security and privacy policies, as well as international laws and regulations. Only those who can demonstrate a valid business need can access the telemetry info. + +### Data Transfer + +All telemetry info is encrypted during transfer from the device to the Microsoft Data Management Service. Data is uploaded on a schedule that is sensitive to event priority, battery use, and network cost. Real-time events, such as gaming achievements, are always sent immediately. Normal events are not uploaded on metered networks. On a free network, normal events can be uploaded every 4 hours if on battery, or every 15 minutes if on A/C power. Diagnostic and crash data are only uploaded on A/C power and free networks. + +### Microsoft Data Management Service + +The Microsoft Data Management Service routes information to internal cloud storage, where it's compiled into business reports for analysis and research. Sensitive info is stored in a separate data store that’s locked down to a small subset of Microsoft employees in the Windows Devices Group. The privacy governance team permits access only to people with a valid business justification. The Connected User Experiences and Telemetry component connects to the Microsoft Data Management service at v10.vortex-win.data.microsoft.com. The Connected User Experience and Telemetry component connects to settings-win.data.microsoft.com to collect its settings. + +### Usage + +Information is used by teams within Microsoft to provide, improve, and personalize experiences, and for security, health, quality, and performance analysis. + +An example of personalization is to create individually tailored in-product messages. + +Microsoft doesn’t share organization-specific customer information with third parties, except at the customer’s direction or for the limited purposes described in the privacy statement. However, we do share business reports with partners that include aggregated, anonymous telemetry information. Decisions to share info are made by an internal team that includes privacy, legal, and data management professionals. + +### Retention + +Microsoft believes in and practices information minimization, so we only gather the info we need, and we only store it for as long as it’s needed to provide a service or for analysis. Much of the info about how Windows and apps are functioning is deleted within 30 days. Other info may be retained longer, particularly if there is a regulatory requirement to do so. Info is typically gathered at a fractional sampling rate, which for some client services, can be as low as 1%. +     diff --git a/windows/manage/distribute-apps-to-your-employees-from-the-windows-store-for-business.md b/windows/manage/distribute-apps-to-your-employees-windows-store-for-business.md similarity index 98% rename from windows/manage/distribute-apps-to-your-employees-from-the-windows-store-for-business.md rename to windows/manage/distribute-apps-to-your-employees-windows-store-for-business.md index 9d3638e9ea..6942ef2ec6 100644 --- a/windows/manage/distribute-apps-to-your-employees-from-the-windows-store-for-business.md +++ b/windows/manage/distribute-apps-to-your-employees-windows-store-for-business.md @@ -42,7 +42,7 @@ Distribute apps to your employees from Windows Store for Business. You can assig

Administrators can assign online-licensed apps to employees in their organization.

-

[Distribute apps with a management tool](distribute-apps-with-a-management-tool.md)

+

[Distribute apps with a management tool](distribute-apps-with-management-tool.md)

You can configure a mobile device management (MDM) tool to synchronize your Store for Business inventory. Store for Business management tool services work with MDM tools to manage content.

diff --git a/windows/manage/distribute-apps-with-a-management-tool.md b/windows/manage/distribute-apps-with-management-tool.md similarity index 95% rename from windows/manage/distribute-apps-with-a-management-tool.md rename to windows/manage/distribute-apps-with-management-tool.md index ef0c17aa09..cac78100cc 100644 --- a/windows/manage/distribute-apps-with-a-management-tool.md +++ b/windows/manage/distribute-apps-with-management-tool.md @@ -20,7 +20,7 @@ You can configure a mobile device management (MDM) tool to synchronize your Stor Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Windows Store for Business. -In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Store for Business. This allows the MDM tool to call Store for Business management tool services. For more information, see [Configure MDM provider](configure-mdm-provider.md). +In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Store for Business. This allows the MDM tool to call Store for Business management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md). Store for Business services provide: @@ -59,7 +59,7 @@ This diagram shows how you can use a management tool to distribute an online-lic ## Related topics -[Configure MDM Provider](../manage/configure-mdm-provider.md) +[Configure MDM Provider](../manage/configure-mdm-provider-windows-store-for-business.md) [Manage apps you purchased from the Windows Store for Business with Micosoft InTune](https://technet.microsoft.com/library/mt676514.aspx) diff --git a/windows/manage/find-and-acquire-apps.md b/windows/manage/find-and-acquire-apps-overview.md similarity index 96% rename from windows/manage/find-and-acquire-apps.md rename to windows/manage/find-and-acquire-apps-overview.md index 5b9761add7..098077044f 100644 --- a/windows/manage/find-and-acquire-apps.md +++ b/windows/manage/find-and-acquire-apps-overview.md @@ -34,7 +34,7 @@ Use the Windows Store for Business to find apps for your organization. You can a -

[Apps in the Windows Store for Business](apps-in-the-windows-store-for-business.md)

+

[Apps in the Windows Store for Business](apps-in-windows-store-for-business.md)

Store for Business has thousands of apps from many different categories.

diff --git a/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md b/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md index fbb7256b5c..47ba7d29b2 100644 --- a/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md +++ b/windows/manage/how-it-pros-can-use-configuration-service-providers--csps--.md @@ -28,7 +28,7 @@ The explanation of CSPs and CSP documentation also apply to Windows Mobile 5, Wi ## What is a CSP? -A CSP is an interface in the operating system between configuration settings specified in a provisioning document and configuration settings on the device. Some of these settings are configurable and some are read-only. +A CSP is an interface in the client operating system between configuration settings specified in a provisioning document and configuration settings on the device. Their function is similar to that of Group Policy client-side extensions in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files or permissions. Some of these settings are configurable and some are read-only. Starting in Windows Mobile 5.0, CSPs were used to manage Windows mobile devices. In the Windows 10 platform, the management approach for both desktop and mobile devices converges, taking advantage of the same CSPs to configure and manage all devices running Windows 10. @@ -38,6 +38,18 @@ CSPs are behind many of the management tasks and policies for Windows 10 in Mic ![how intune maps to csp](images/policytocsp.png) +CSPs receive configuration policies in the XML-based SyncML format pushed to it from an MDM-compliant management server such as Microsoft Intune. Traditional enterprise management systems, such as System Center Configuration Manager, can also target CSPs by using a client-side WMI-to-CSP bridge. + +### Synchronization Markup Language (SyncML) + +The Open Mobile Alliance Device Management (OMA-DM) protocol uses the XML-based Synchronization Markup Language (SyncML) for data exchange between compliant servers and clients. SyncML offers an open standard to use as an alternative to vendor-specific management solutions (such as WMI). The value for enterprises adopting industry standard management protocols is that it allows the management of a broader set of vendor devices using a single platform (such as Microsoft Intune). Device policies, including VPN connection profiles, are delivered to client devices formatted as in SyncML. The target CSP reads this information and applies the necessary configurations. + +### The WMI-to-CSP Bridge + +The WMI-to-CSP Bridge is a component allowing configuration of Windows 10 CSPs via scripts and traditional enterprise management software such as Configuration Manager using Windows Management Instrumentation (WMI). The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device. + +[Learn how to use the WMI Bridge Provider with PowerShell.](http://go.microsoft.com/fwlink/p/?LinkId=761090) + ## Why should you learn about CSPs? @@ -45,7 +57,7 @@ Generally, enterprises rely on Group Policy or MDM to configure and manage devic In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management, or you want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried. -In addition, some of the topics in the [Windows 10 and Windows 10 Mobile](../index.md) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md) which links to the [Policy CSP](http://go.microsoft.com/fwlink/p/?LinkID=623244). In the CSP topics, you can learn about all of the available configuration settings. +In addition, some of the topics in the [Windows 10 and Windows 10 Mobile](../index.md) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](manage-cortana-in-enterprise.md)) which links to the [Policy CSP](http://go.microsoft.com/fwlink/p/?LinkID=623244). In the CSP topics, you can learn about all of the available configuration settings. ### CSPs in Windows Imaging and Configuration Designer (ICD) @@ -76,11 +88,15 @@ The [main CSP topic](http://go.microsoft.com/fwlink/p/?LinkId=717390) tells you ![csp per windows edition](images/csptable.png) -The documentation for each CSP follows the same structure. After an introduction that explains the purpose of the CSP, a diagram shows the parts of the CSP in tree format. The following example shows the diagram for the [AssignedAccess CSP](http://go.microsoft.com/fwlink/p/?LinkID=626608). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes and rectangular elements are settings or policies for which a value must be supplied. +The documentation for each CSP follows the same structure. After an introduction that explains the purpose of the CSP, a diagram shows the parts of the CSP in tree format. + +The full path to a specific configuration setting is represented by its Open Mobile Alliance - Uniform Resource Identifier (OMA-URI). The URI is relative to the devices’ root node (MSFT, for example). Features supported by a particular CSP can be set by addressing the complete OMA-URI path. + +The following example shows the diagram for the [AssignedAccess CSP](http://go.microsoft.com/fwlink/p/?LinkID=626608). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes and rectangular elements are settings or policies for which a value must be supplied. ![assigned access csp tree](images/provisioning-csp-assignedaccess.png) -The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following path, you can see it uses the [AssignedAccess CSP](http://go.microsoft.com/fwlink/p/?LinkID=626608). +The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see it uses the [AssignedAccess CSP](http://go.microsoft.com/fwlink/p/?LinkID=626608). ```XML ./Vendor/MSFT/AssignedAccess/KioskModeApp diff --git a/windows/manage/images/settings-table.png b/windows/manage/images/settings-table.png index f1eea24b11102d01bb21105b2f4156d2537d0f3c..4a650114d4818daff6d0295b569098c31f70153a 100644 GIT binary patch literal 17429 zcmZ9!1zc3!_CGvygQU_@(jXu(G$P%N=!ij#^b9E>C7^(Wq`&|wAPvG04j>_22Srf2 zacGngkp7?HdG3Ah``gSM&)IwJ72maXe9m5DjH$5>4J8{T1OlPa)73PGKnMZwn@Uau z*6;}$CxZVFc$@2JKq>)_HSmELe$(hC1X7(yb@Gq|e5OF?+ImAEw4L}bL7FHnJJ_AZ z)X-83Y-C_yxO(*}A0MBP!gC?bR3XhY5wK`yimLaB>Ewy&yb;rTFRouHp&oPHxL(S5 zSjM95hE*Tb9;0A2r1)S;(FvpUxJB8vTiLloO7)%5drPUs9hibO#jeU|FG6zu!NU9i-?GfX^4r5iG9_coY9h!(UJz1?7@tTjLgi; zw*}pA3wqvxrFf(WETugqB_$Q*<&{;vA3n5JfB4XV8N_^=YX0=K`O`>iYik?640m*N zbob5l_Vo1jFZ2&g3@WenMH(%*#-n4u&xtVj2 zxT#McMdx1As~~sPi_MEg&xk3LfPPGwnt_HvTb-!!^9}NFLl$KUp;z>4^meE5C#GB1 zn`G>Rezepd`03fOZSCi7NQ4G8PWx4~H<%ZEq;DV8eYNcJHtf?k35|QZVcXu@v{t`gRAVcb8CbYRspZAgJhwMr1 zLQ*7e4hC5voYN1ck$>+vawZbq3AvKn+o>$-%Yj{b*He_R9pgs#EeF2v?)|N+l)p5& z_Afm{Lq%seA{3O9?_xs~HnqM`uXY}?Mazsvaj)eZ4s|O)!h2uap<>*ELdZU%)4#IZ zq1A1F6`sat^}`>2g*U4DyPqCodT%=yPX!&E`>l&p138e+KM+>8XPj$I%-8w|GCF3R z>Ancd782&n(KZVc7>P|Kd6QjB22Ca)URvlScmmPbXnYP8{eAXA#yN>VagO(P^$FM4 zZ_vBFiwr^#(_bv@gh_RpL?1L&b9a|muPbsTn)|R4Q9&GJU&(1+uit-Im@V)=bLKiK zp5Q@&K7y_7DdaIBgi_xhE(3wvCUA(c{+-OJ<87m75+-g;LC_9itUowB6jqmqb|j?{ zEb{WuUfM0V5w>;YLI$VNSxzlQ`u)B<<%Pym+Jh;!W>DoO`{G{p`>t=_0j}Ht8+d?eeQJ&*{GGxkbY$ z*{&v8YZ6a&*)p;|`6zmy$c+j9W1d6w^NUF9MKyi-I&>Ks@fA8jQ?{9VmzALG6)#ei zIw!((r`X^|n%AGcD{{qtOoC36m@LnW6Z$+u3nr>#H-1BQ)Db#TU-WBJaq8FKe6*$j z&SIg@vpzhjq+X_CA&Ax$y$qLegWqa*g+MzedX-O{km)CEva>nNZ*-k`9bfd;L0x%A z8dczX5FQiOL(gZ{JudL2g`9V!@VEy)VYoMJ@LQVwe`0cd;E!$5;Z2uZP%01j0L_9; zq*!B*Gc~I{)4gtW*S<2TZjmDD0L{>rWne$pndxZb>y%CJo1nQ?(s3tU2|0Ia=y$sa%YMKUfBCsy8p`hNAIvL zMwJ+JRAO12>r7^EtO@I-S5|j&hQqAPKd?8xytxG!3w!z!k92E}8qW+?lEE$Rt6d6! z68X;qEm9d$+Z>mAI}{a!=ybR$bI1s4$0jqG2yMra(1E>x&WX>-&##eqnHCh(Z_UH# z!hW0M6piXPn8~0)x&-#>=2UFrO2S54o4OqbF}W>Fkv#G0ngpdKIk&=?k5l5=e>AAR z<@)~U4KWefErM7=buRLoE^h6Z**s?_|1(YJCtlZOfjh6rdU=zyUIg9P(=tE}LHw<~ zsyzx>h}HK1(pLl|kidK>*(f`SeWwE^!4Wxa|0|i1WHipTBH#ms+5P-%MrcYsJsk34 zid@_6!-S&Wr*~LCxn_<64yk4>(q0J;lXa${vHrricCPW-gblSg$(v1b76)PU)R`tU&Gz~65d!Zh}7 z_YcWWM>n~Tr)q_F#+tKsFHNN3TPowwCq`eN^_Ipj1@C;?!k!236J?vcQSy$rIQL^n8zy2N^jQYPcQ} z=>Pjr@LCS@I8pCMVpHjSV!y?OLnlNF_Ehrtb6#fVVcuNeF=Osg@4@NfkuZ0eg6Sb; zjllw_%==EvbQj&Rig&IQ+|~!H;{8gB&tAJvtB<*~Vt#NgV5mv$_i0dO=${F!@?j=j z=uXvp-9z1>xBW|wmqq2A`r9I*myh@325q}+zp}71zc!QF!QJA!uLhi-PB*C@9#x&J zxK;&?;PQTdIXLl4{yzrl_*d4DyIFsS_WUr`MERQsxjDj@e%hQ$F|ICnFRDI zg{qkK_c+s9bBQ-i1KozKuRr)zioWR1;RBdUE0y3~@24{l*(DF>+3k*YFRT7;-}$@Z zAk1B;01GJJj9~YbaeSbN^0pjwl&Hf=NN1Mv5;KpuqRhKmdjuME-m z^EqZT$4ldT1mu6sE38u6{CW_yWb)qVkbFq0f63wUCs8OqAfEoNGMPDWSIdR2@ZIPU zN=&)Ogw2#rLTtyYJv~lLDGL7hQ)tDkW)3-~ki|xtv3<6mp?DU=w@Io^NU!Llr(6P8v=gA*2xPLea za7x523<_ZgO@DEz_eCiuFd-$pfH(=DD?yY=J##?jOA`rOl}9MZCN|#J=cCwjT+4j( zBEx4_3g`ORuI}8#g=Q?F!sSfrPg`_}vu7TuGz-lMv>7Bw7Jsd-0H9fNeV@sRDaf+9 zOk!bhNKMQvQtV57&D)%KE0EbbfFhvBa+=z(Hzi{u%*OOlE{ciT%Ee2_5J0{${?z4Hi#N~uSEj| z2We<8Xo#^#o`EZET+BA=eF1k>93cHHtM z2@0$p`UdC&KZIQi=!0g{^bs6zw?{#Cr9gMcsxK!+spt{k#g?dw9b0JUlLBszOeE^3 z<2>-wPe~U`@K>YH0b;<)*!FIGV3EG>;@gpX)y60r+`H^ZoHI&N&L%$gWLY!xl->0|0(G7K2+C~qRNro{MqTS+k1G zAtZdFrLDe`PWD-EvfB>%P+cdhPx(YB(lxIM#M=frScRJ}NV=(}mBJaWCzy)$Q3 zD^Fof&d=Z7Zcsh=p}_BYs*}AxtZ)5<8YZFXC~;bWUQ{;vVl;oE?n??GH*k^=E77WD zcH?IDhx+H~k2O*Mog;nU=wB-|RW!If^b-D1wqNuyBut}vvN1aonJch*4RHp+#t!s+ zwB)osAllF}47i&!MW#w$1$4P?0AKq9OMsQ#HN_VKBuEbNrnHc!kvke{;i_aeHk-(R0EDWY2&^BP#li`rhGV#0JvAV ze)BcS*sH<@%Bh0`XhX{z!a~Bw3Rzj}vtLEjC#~RY5FV0%4vd^5>G0doB$r*&%e-SCsnlt! z6{bP=ckLUSh^m>HZE~Q@E9KOR&kvd|$NjND#*b)kdS$-@)SYoYi}_FLjQkOKf`2wo zxnIF#bt|*@9bLpfZC-)f7>e``h;dHKS9f|TtY@AnPK<<^^H{jU(``nR_1uUGB0fhn zK;x1W>bT_}pZ_EOr!HRp@f*d4mnrMejOC$diayKZ2SvlN^*`!vTxCulj2*f|5La-g z*@B)YbATOX)|b^-BkT14>mEc5XYmy0uxBiVH>cNnqRq+%LLdyT@2-f-xe8pCm8vt? zL2a>Nv+nG`RDB)JDf+CQEtd+LzyCfm!1Xy(Y+RWs?acWXIN5|cn-KL2Aj<%LBN?MR z9@)jMqW5jETUjJa`=J-!aEZR~1{ulN{YJWB} zgJXyWyZOocSdF#r{2$n5E?`%Q@FsY$oejDETMb7GC-D+&EhMl?-A{9>;1}>dsIAQu zJ1Zzqn}9qhIsJ${R^!FEB*A2F_K)5PoOp@~eNbpa#vJOAp?%>wz~lnC1n9p`&%--? zpA*TIjCYEn%7s%{ut{EzqF{CAzPWEBI{$_YDuJ=(Js(`lQe#GlZ99A-?vM`#9gfVE zhg|@XO8_76UT98=XMn0PVrM#*pD8o$dOebuU!!MSx~R^J_s(fil*D%$?#A?4aSbo^ zr#RjmN{1ZrGsJ9bC;-qq%?b z58ZtwVoJp>(H-@L{CQ#?>KaGb4|UGC(5uJ>p7+~wra;)>58tl1C%ww?tgRk>EkQ8j zo&AUB$)^?KltLS}O|^JM6FV?^7F?36(1RDb4WDGn+#{ScDf@Hwlo)an10DYdyD7swgY;B1x224EVK=>69A*T}YNoAxngHi872(chk zkucd+CkduKMra<|fDat;^4@QY^Ry7NB!)Bhbe4{6XIp=Y`u~><4FOJn-GL2xg^*&i zfAkOhPYW@?wUoamx}dC4$>t+-Irhkw5Z-5p8XI=|=|?T2M^F$}KxsDpL>5w89wr;) zf-XJ!F@CLpK!`bPPr2OCnn|5>XM`N%@?{7nv<@dh8I%^p2niST(qiQ}ux2j0s+5!? zk4@QD_eY(qgvIwtzQ7(wF{fS2P%alM@6C%pJbaR&-D~yC&u~1dS7m!Cm@~ZN{jMM=zM=`t`>S%f7!a2J&3~35Q%tEEovj7yu}hj($QV znfB00@m_Z0Uk|ziz%T%VjIkqutAlmF%|dB4#}$agf#_0A2z`s>oas4y%D%EKQZjt` zu+uzr3ifYrX_N7<1i;RukblMsC*b^jy%|(TL#|)>p$-{z$BoI-Jk0QGYNN`Cc@Wd- z$LY{F6a1WT0;V$!1Aa!XwL8(<=l>PKIp2&nGZoIfLAmaf`1fjyz>n&=5+F9=A^?@vshC5)A)}v9B(6()!kGWkf?QsCWPVy1*N-MQB^ zCC4V>_L{~f&JFi?jnZnL9yp-z0p6>f$-lXJ3G0!6DUG+lJT+TIgO1jai+7br$OdY# zk>kCQlQI;B)4#yXJCc)gv3WwM*nzYY>9PL;GVk>M38`sN4MC_DA@y0H>vsyEC!p{G zb>Ytm+e;_YR?_!tTP!c&V|u7l^;uy}`9F5t8viN|Je2CBWOvMBUOGN$QTkQt#D|~- z7khA+)1pjT#%*29z_nfN^bxj13!H;bHsf-NSxA5bq#wK1aTUQ$X@WH`4e$Bs?>9ig z;7GI_ii*-UtxvZs9G5Mdc!vqfJr6VG#9B@^Oqs2O^>e0eN#lTlOhMbBpHV(2;5n4hYEMMu%cW1att>5kA7uTs%65w;5q3&82G4hC za8rlQvPLM%p{DIH$K;uJu@<-_Ky8F(B=jot9{&M$DilWFwH>MgWtH9`qR=R?6B#g! z8E5*(q_syf_#WZ_&q^mHX1&P7hPD zASzsFgY!e|{j)y@=c@h#YRyjb!O{Rl6d`lrLnO*`=#`r4rxmp)Lv4plD5{g|TBU#A zzIg|Gpu)9>8we}TyZ>1`lM#N)-7c+|`_d5!Vm6bnmG;Hap{!e~Eporw)L;<8r2boG zUo=+mNSA7#=V4f8Uipr_{zNi&3ROWS;%DpGQA1t``=veH-Ekp{rRg-0(Wk!kgRz6L z`a@F$%e`Wk)asf)ypzr!IUAmx!1eoCJp7wxEu_K37NV{h5;kC|$EYQ&;Y<;$ZXZR; zFVA$dmu8`Z*C>f0@(oe!jn&h5ruu_T3`Rjl75=?m1)c8Wv!jAt9s54wExw}?vY)(l zx`LZ;meHAgdYt0vF|rF7b_75GqmtyEMZ*!Tbd2?s#%#-Yt(f^P!L!o9rdoNOmKL*t zV`&;J#u^(T^QD_ScVQF4-+23jF_dG~Rp+#M@3)P-Yk1}U!MU^59nT2fE?;_a+!o(>B7l8RFdE39@49-O9KIAr*y&aVb{Edh1;EK;I*CV)V`bW@O-N0+b-C9Fbx_~)9-ym} zU}K>r2k`u>DXL#|qz9tC&5Se_*atO6dUQGicrc~s<~s;q38)ez>2!T?cZ9I->kp;Q z=bZrpn9^hOonh^X3Si4RsXY%t+g?+Ldk~_02OEI;63J1iz>u z#!#iJA5P4Weqnsi4%GRdBGg5&+1fsO_M_lS07@X2AjSxltohvV@|Br-$gvSd1AzgWHO^I|AbGw%;Dc+91~>WrzwGvLQE6GLWkd6V-OcdSv%M?1vY` z4SpdE?8KACjAfEwwSUsWrJ+v3Rs7KVIR>WQl%FKa(2`eumxl0I9AyPc zUh2gp_^<<&%9O~WPiQ)RLL#pKG{Lx-IO{WXKc1festoG;St0e{slpS=d3luZ3K>MC zmNkryy2Vg-f90mG1UjMT9|)8cfQE|sh9->_HW?6gIh2m?1vJWnfRohi%=kx+vbL;% zbu>CHZNUwE`*7EGh87;sol>v7vr17$)~=8@A*7m~=YLhXXCt?Q8vdP8V?h8qRq7^7 z1C(&uuv{G>_^SfZ(d!cGb0Fo998%{=QR~T6{i5~p<*xHph7DU9x{tM=On>z22cdZq zman~YD?{@it!H1AYRDffTwH^hwJVIIUCtKdNwGH+7VgSxKPwP! zXb!|gi)7VOy0@Zkz7KS`k@4+`FI!YWsWpk(Fgaz}acIqgBcqw!GjDPdc;IGOdZ38f zkIZTb7Sye)x{8nz4U}ti+8905f-Rt`3v*;H)~}~G&XfXs#s=6XOLB!3_?fIFJ8U$L z(Kkd?E6)`3>SNLdf>7QwO5W@muYdJd%+tbSMenXy`p<^HoVEQ{k$_>=thR`IksM|? zm+O{F#$ByE@vG{oW4Awo)-hck#Xph;pWJ^ix!yL^y%P8p^}{W%`0h}oci^jpt*y7{ zF)?TZ{POVq>@DG(G&$hf%I!>;tkHxUld1=qU7+Y=aD+tTl<}h`KoK|5ciCRBZ*(JU z;l#)J~K2R-iIf5P_o*mf1KBhX^4|w>0YE8QjiA%_o50aUsWq2Q@75$uX zd;IcfZLnDmqvmJ$-j2)%IUB;nA&iu?)p{6>y=Gz*_kYAOW5xJMbW;trTlK7S3zprX znkpKKYbiAGW@=9}Z3O*$X!}Pu+6cf9AcV-Fh#*%pzU9)kjY7*nG5yV|7d zTDN%XKdynd+m;aZES}WJ^U|!Hw}zh1W~-g=xZe$t!UgpG=roQ%o0ECO;~4Yyx&rKm z$3$&TH@d`k{z3Q(pwD?76|`JB%mjXYz^}(O4d?mt(QtbN?Vb^a;1bIzKjej;E+N7} zd(s4%O@_@O{ey{s?O_sNdxtbyLNur}MFcru)-R_(&YB&<@Khn5|CLWJYeK*m>!TXj zUKB_h1=4nHX$i#-MVpf)v`q*kt8P0P>$yM$b)*dx?%5>hm_*}@iH`cF)J}Vh?#yNe zxO;_eUdMAL29gKvPfhI+xIuMHr0pM}hHt!Sohx4X$F&JTHE&15`E0O;9!GuBWjH;e zqlKQ(Cfk7~=_-@$c+S6Xj7x}gwsPVC&a4oI8IK)~_uUsrqAsVFDMR?9k4B!-eRTI5 z-tLRWjzZNMVTI3d$zEfWzB#bHa8UDbQ1kW-7zAEHdj-f?pE8;It9!HZNLQ!wXtfGP z2rmSyFK>Xp;Y1l#*3?L2*4xhifD2K=4mhOH3(D^eobn$#WW`GtoP#&&{+H$YBcR#w z?+9ji<@#0T-Q;3P0fR}Qt-sTs@zvqDEIED7J+w3cQqMQn#D5mC{HoQ4m#TxxeOCoWN=pu`4_HnT+7 z`Hd#JYK+lh8wZ4-@b1iixI5~cE?=|ULO2o6Qvn3OES4@fIOV_m49+JstApCCk?08_ zkuUgZ-cha}dA_#ww}o>~9>1-**xg_+gYP*o{ot~YC&7$amuwBjCPw4Tp-n{zDsZs~ zbS!Ky`(XBDB9t1thV0M|QT@AT{IuKSKC95zH^rq<#|UGMquWS{p1k}IE;h-+ua=!}=w~Y} z@Uq^^MDYd)0sUTMO`f5J zn06h$ZqM}Rw_yb)p*pP#u=iJVbdqT=B{Qs3+k3QzH!loYYI7uZfjh2#gmvekS0AzG z37eqJr*i=s>^a(hU$K7KlF4o)fiwnwQ>9HkbNCYM|mawJa)UpP4|^Wnwl zLt7c)dJ1gGWwbJuEmf;0H~XRyEWqc0VXMZE@ihj=R~MSUihOcRp!Ue0ma+s<4sMCQ`6R`5k1Ci+rIs-0y`o!qi6`NqLIq`j86-Uhw)SEoN6+OuFh4k02ektplrAk!OGmA~t+z){ek;01 zcnKa~D!>jfap)E}DtgH=V7ecY1(&QyYIhHs-YL-5xP~56O7~Me+I*aOY+p9&obb{q z|Bs2U!(QDzFY)6)lfR4Z@n)84Gyi~gWWKCLnGVZ%&V(nwYSAwg-D8HozrAtrPUcN5 zdpT!C1Q~MshK@Gc?5Ic)v5k6A-ZeyxxzhLgJ=ISKzNqX~SVyBkYP5GIOzRyh;OndI z)(>gL-&W3kUw(WTgxHqR=|-Cc7Afv)-}@7bUiqG}wZH3#k{J;PGRxA{_ZoN}oeHgT zS#+>&tZu$4OV61p^Fgw&kZ(PsO;-9b6aQk}^KRCGk}j#>sVs_Wmkr)Jl=G@jTK>d1 z+<`({`Zlh9ck%HjKL4L9?x{qzbc+4?SLYr61Zq>8Rc$?Ld+BYU;(>6As6sduE3sR> zaU=*MSv`VX(IfSo{r*zso06YguY|XQCVQc0X-6ybOV8FkoX>&U-~J%hfs;jJKf}Z- z^XCfE@8U<~triTUkIz0`dEFX}4ty{&0Bzl^hspInH@1?CjgEFpTw$D>l!It8!UnAy^XN z>Fhx!w5S1>Gs+@yflRKBL&eb)^C{}kobU}P!c6*#qeq9uenc)R;rpKt7roLDA;}V> zfkT?tvQlE&`>wE{UadZi0m>5JNveeV8OTXU*ic}{KEOmL32j|7iWK4H@4VwjT~Sjy zUo$Ehn-+qR;Fyr)W7kWKcB!jy6+Z=iZgSQtr?so>PQ`GVSE_-~aKGs_XV!m^aX6MNHWiDB7rtbmW z5x7yt$2zF7bscElV_lGI#y`4qQNinuFqeR2uN&ZzhOlBHTQ*aUWTqQAd_h?Vs4>H% zHlR%pEX|9tYeDna;1fch1GosDv>#BJsJRGAa9z5nIh?gk>{1cG=y1bnV%Rk)fh$bI zRc8XA31xu5i5C|T>G8ZMoBJu{IzdiM+78{f^U)cTXM)Kw3gvX-YE1Z^-ke?E`?L&S z+709tIpiw{%TDO}>7pF-$+6M6KWWT>k+~C!M%`J@o0gx`PxGRICGA^AzKnFt2;r0b zK>MxbcB^DijA-HB!>SbkhA`%*wAgsGX0$u&{Op!oETV-9J2_S~niF3$kAf&(GE2{Q zXg8c55^uuuc3Y4U7uki` zY?A&1#=pN@AVk&f%D(dQ;&$LbUap_@g1ks-N(j=txT!urI#?7!-$#BWQ)4>coimr_W;h&@{{1T^`Vq^GB9ZSc5zo8u%3i~a3#Dhe z`gk0Tj-C?B`tR#bKDVbbxX41Q3Vo_8Qv}u*o6Ek|$Gh>5{g& zex<)_lUE9pg7oPQScqO_X`7}C$2ob8af4K}@WdFgbV63X7(*uGdrz~xnE6=QfC}bI z(p0n&cvdDMCvl;s&^%(Sn}eaSrRSHNUYP%0HRY4ccQTn3BO$4)%^27oQ54P=;iOAq z7)}D27gNt|JR*i*uH-FlhVY~0)5=2r;94!9d1P3QX$38KvcpZDwYS1HB;}mftf4xU zw6f!z@II^00iQFYvqYb>nuzk_-oYxou(93>=G%t&mUe}%{Z%+bpJ2WMXJS$LVhre> zrtD2fadQ*2c`AxoH-yfq*sZp)d_y8;bt{iDmrJFPA!iXvp|ij3lEI0G5^hV)R%7<> zB3b>C9&xK&MZZtf109}P@k23 z>$0DcEbxgpb-A<}DPhf=T3BsDphxsFCEe=*DhN;VOb0vJCpa-ZUi9YskFF0tVgQx0 zQDF_eN;V~bkFhId-Kr!N6qoj0w!fkEbMSoL=6jQ{w2h3zU1Bv--xqQO!t+fc!4omR z8hR9oS_n2XgohAC=(R5$Ryuz)@@6I+N??1n;oz_&XJgPn5t)S}W`Bx7KXB2wazY>RCy`OBo3N_x_h$C_2U* zNsoNx>tjfygf9PrU^l)Gkp<^vY?8>R0Ku;am{qBZrB=h84OG}A={5CY*)u7YBx?0$ zclz26k$cnl4aY~Q{rg63Y+HmOT|psc?Ez_KQszr)FB15*wlJs^gnn-r5(br5qrjZ? zK(2ncVtJf5z-H!W1jCu13QWrF6Gw z`uQIm8pXZ&WWBa1r$1-8mmD+)PJy?IL{NzdxH0$C%94KVuV27}lFs{qX*;4|?#O=@ z*g1^8U~*agrMKW#Z+~P!A^{h(Tq>?ve15w3D(%Yt`dY$fxPu3Bt$0v39f4x_e zEgy|Tu#A0HcVC#EpUueMKiyU1rkzn~P=NrdtxUlX?5{s64|;6#@5!}Y_Znm29mNHm z;rQNcv~JNO5)yT=Oos)%0hduG{5I}98Z*|k3;TRHiG$1Y)$iYY(S=92>JStppWuNTtw8`6R>^t|Jaz_!tmlUQRmZG{ zPjQi9-)D(s5W=OTjaK(Td<8I{<4y`L8h4n=0ev8~;^JG3R7jkEEBo+)ZA3Xn>x;i{WSe=TUwG{VraE&Q0|X+ z>ORI6y(&}IEVdoW3;i<{T23;vTQjo>P(p;Z;($Ob)6_>Hk@JVMLOK;jhy*eeRoL|v zQd!i^tbM{%3ha@~&ESrI_4p~H6n?j0-o$zAjlF;2~tI1ce6&?+R zKC7pzjs}SR79Zxh^^#=~I{NjpM76_T85;vu1O2LMfN0LZUrVpF=j3}G8Qdq6H!JU0 z@An~F{v2Y+fS_a$MDcPq@4lK{gOV?hj8JK-=-i|*>U?VdJlnzA(c-|GDV|Sca zM$9^-+2O8{0z}x;`IAz4DMZM9XojO&RihL@^(iJChg%feuino^+N~Q=qw=o6S2oqB z?kzTtW?zA-$pfVYkZ?JjRQK2ymg=`k!qt4C!pWL%AER7vmrEKs6vwFbT7T7e2D5Q~ zi|6cty2TUq(k1^bCXB)TwS}43FF}6keggP%`Y(&pm7*wChhjEnLg76Upse-_UV#4& z%-EF+nehJNAD->E^&R(A7}>kOp#~*+MQ6?$Rmpu zOpQfp~asMO4yVcjLYo; z_a0^}p;A}}?fR1;*Lx4sl-*LpaUuS2W@&ONN^gk=gkVOH_4irZt*{6p!123M{`I%l zHF0NGw_fS(_e^wYvqE>!{{D0Oc-xtYk_4h`F{T?+I5_Th0TuMo8hUCrCD z*L-%M(o}e*k57|=ejD7%-KONm{8Q7^b@)?8wW0fh-9ZfQ! zbac-BsM-)8Xe)5vUtx>?2QG;gTDJS^MWYU?iK3AedcPC%CP{|czL6fTGUtDJfuk2z zwCPmUa#|Jrd}-R`3wZp-3k0P1Gj7fi&JSN7@ph=3dK__we>l>cz}s}0ZJZAxT^5i` zkSg3Pn3+BjnYP~|MPJww{z>%eAPZmWyEmQ0x&eK50Z`zS7_XH)`(E+MZU3oyr5;1A zcOqTs#2}=L5Lt-YU|} zR1eM8ZNHljLyPqBqyA*<4}XXHGy2FNT8g`W*3vMmpPfqY4 zxjT%gS29rxcWN)y_C%>%5Zvwei@-&z0(?m0aV~gbF}EPQW5C1^V!OKs^AZ;W+pDihB-g?? z{>x9P-y_OfO%>2WnXHsz+x}&mziACUSXzR0ViE{rlBjL9+^!0L7gyrXu8@D)|6a3B z#EO5bV2YTS1!4wSX0lDH2!qHC)CT(F{{BZ^R=h_rYG5e3&r0Do12KbavRSX@V?4I5()Ewg1N`=-3yhK_A+sAh^m|JV`C<}HGb!cppSm-~nKb#O((_ZW7!FY+@UMVH!LO4BUuu@rHePa?eu?@>9DTPt+ z8U)om1dk&r(p^t}?H#;0Le`k2r_KDaXqN~^Z47A#MgJc0^;i>c)<+!XjbFoi+}7I9 z0@d^jY1ec3`O}>ca9t2$U)W^0KtiNxYfzg`6>x=aL^)k;*@}rQ-=}EY5s44L^4P?? z!fsWvHQ~l{PJ{lLzM3zi!1sOuqdpAvFq`@G#T`a0CzwD6Rie0ie*BY8?X>9!<+Sw) zxXSQh`ibCz4>#08kGc{=&hHm7f2{s%g_4CG`p{gxxa9Zys@ERb^w?SX|5vrFw9^Tl*5eEjWfbKAS-!1TxT<%y9kG7w3%M<&Yo49%h7XkAced}sP3042AekE zNpI$)d>HFL`-|TBem`6(HV>SEgp*6(!rC)M#P7Oi{mKin0&`ma#c#luWLqdC0ZlC6 zP2L=d9{)xYF9;oOE~Q1zrodLh&>0_A8VLvD@|IAq^faCvS|bz*NlO-jH?8(w;BuEm z$WWg^vsKTQJMM#KFD_!CJAVR2{&mfBNwvT6QJz=Dud7Ovv)U6?7WXOazh5`=J>5(h?yO^j#0~ot}-L07#ohAV!r-T|7V7=1E zFOEOIjUSFcr`++;nJ{wMCc;{<3uuur^pQWl${P0I76;E*#&>bns6Dq;NI@1Ue^`=K zlwX*H<=s(}*qYh5D|9^*dg6`wo7ZIhN0jo$g(&)&2Bl(t=9%(ZW%3Ln{nRVpvZ6U3 zdFU~*^(9>~yOO5q6kb1?_vex4r);MVJ@Gqse%V>aZHJxOdSBJGcnpe9Nni6>5y{%3 zReBWC)Xm+#OE5`O*z;P{J}Uk0`CtY)(zCQ#z#=Z$WHj`2KKN0-CCcD~TFn=3rikiD z1}fG&P1Al@YQy||NEij&s>AkdZgyfrKbgtwuPz0t#{4gcuCn^;+pZPi;p_~wpDCQh zO%v>Z$4P}bxvQi~;wxPkC+}CESO(m-V5_iG|G@(td4}LD^AA9frOs6Lx z^-gW=rnM~i!lN)=dO-|}Mkm|86p&Q`6CZA7{+7$B+m7~jM|%fFo-ZI(O})mrMn1^3 zAC72eBCdr^8_PvHXz{$l&V3_`yK!F1IZ6>Gy)a14FEdO$va}Rjuw2Sn@X$R1ck_o_ z9wn`L95^vmI?bQlfztiYJ-0B%1$UzyzQ|#2T%J@m`_zB-*2>2g?hb7*v#OOA;KOH8 zwgsd}JbiDEPisXY&MbS#QMW3OK939rmj&vXY>sGff@xWp(x>D1syw7ZpMY;To-Yh{ z29zYwL!ZM)T6s#>WKc7ZC)WT2-=lWK^b3_3|sE&cw`k|4ufOOn`~ zF~Tdt0gc~As|~3BA+=1pk)k|d!JI}y12a2X3Wgc0wmONsym&=08MtZd&N)ZVC?xqP&BgT3eYdxg{wf zJQm`gDIp)wTP>~`ENfT7y?d>SM^Wp|N)0+Lx=t)vuuZ^DTrhOU`Mv7%24}cthPLJ@ zF>u^-NRKJ~drS6OP$|j@ZXx}&%~qGbMt@QH4&CPf-BFYI<{;FM0jn{zjKFYy6v0R| z4J0sLhVhMtd8!?o?-jtn2Sh@3Ipjg%Zlr|x7b!f(r|Z8@UdLbHeHiGu{kx#?;|>Qj zZ{Z)$_@N*9C(Hy$dXik^zlFTH$YnKC!{@#2$$}ZF_zYJvAg`Pr%#bY3Yr}8@_m)c! zC*I=JZ1Uy`|5M8c(Dho$XG}aNo0CI<=aHp1@hnVG+(~7AFL7XYswt@aG$WR5S%f6@ z{d!g2voh0~ClkaDJZ6xGnLBD~`TvzWJP}X_TM7E`(7Nok)DFOWW|NYn%fD;kkLCGS z1wo)}MWj{7LBkyV{GF~s2PVRSo?C7-Hx8e-c_D}%yXTe0Qx|i0Xe{|>Ar#Q6?+kbW zlf|dEZ9m5aVq$MNhYL0MVUs5{YiIy`_AXvs9hA+0l>nC>~$)r`4~a=9tt1U1>rKMw5ux7Ggl2L&x))QccOSi#XSsRZP>r8a=kU8=Hp z5*BYh|M1d^5!mi>4y|f1qttDo2Y75aA=o`ReT!lSNNbzf9XAt_?(xd0MGmhqdM7N| zyO3a|j79%7%F>?wH$DNHtJ~3FA~S6m?x>iXvV1`-s^Ey*N#OJd7q(rN_cw|&Zmns2OQ@6$B|KO71Ym6U8^ z1)eE>p~q5T`lC|)@@mK~;-Xxdh$cuaw7Fv7Lv{9dc`bTV6xO{gv13T5J8K zo&gNK3iWY0tjY4Xv4ihuky~fcV_Oi6#qO;%SfO3^~S@LOp$9er_V}Nrob!O`&P2|qTVYv z^kk`ajjrleo$^$~@2(jI<|7{|H-A<0(P40xzSzvjjTMFF^;v2DJTWDZP1eIo8roJS zt+$L(1h~V!15_uHmeidKiAw1d09jEZ|@Kf<%gwF&6ZiS0|*D5&7+&}ZHvu{nDt=)+|9Cp zaZ`IEqXxE=d{!^3`CuaKUZ0g9O4N3NKilXa-<4P9y2~UvI7_vJV)rP^o)UwP gROPKn=VY&DxQ?W9m@C2mtplQ`Wvp4L@gU;=0k9Wg%m4rY literal 14426 zcmaL82|QF^_&+`>Dul5WvhT)HmdYU8&7OT5YqCugWi7IlWF|WyYq=;pF$h^oveT7p zSt85WmqxPxF7^5Se&65!_4?mv=A82^@8>zsea>^vz3}?F>SrifDG><78BGnq5P>)b z!M{SMj>A1Ko~cj4A7q|}>MDrh?(=hS;E-qePULn~qA>g?XkRSqIYRM?27E$$=qMEP8w2H-*@E3F| zFY5M488u3qv|X{UmNn@@-}sJps+Pmn%VR#v-)d5@Zn^5%ch$9B@y@ssd}%c(IX5Y} z^(x=}uHyDl#qE=-**jHCg{sX5)q8`$?LOdM$2HGBHS>4s>gpP%l^VApP2(O-?{8W@ zUvy03bnHIr+B6zie=&YEZgR88^k$vK;~7hvFiZPvs~b4$n-SIyWw!9;5N_-8_J%`@ zol}C{-3hz9Q});tdu+PHtyd0r>K*UoIEJq~IXPkP7T$udXB#e_mAAbr+@7xAeemI4 z=(?A0vTsnsL-=}>7w{-QdxxA@9*oNhK7d5!>gyMsp)guXlqMLYx_id$52=I$k%TR zgM&XtM@Pqh%uG!DoSdARoSgYNIra1B^v|C&Q&Y3kQ!~@kGcz-@Gc&}QnfaO7S@_#5 zadviYac+KNetv0TVR>P3b#ZZVb!Bzq_r~wvzqfbbe_K27|GV%Hd~NUV?;ITL9vti+ z92`X8mq!qYOQ$sfW#jw9i|L#3i)dsht)%R%sK@82^VhmxL_7=2q`N^$R~m|Jo6=W` z|Hb=$-*zi=`hu_X=igSTYl|jkqxpI4UDbv=sac7)mmV8sztbdBd&YQK;Khd@1&qRO zz+Ju+arxp)sLGo49BgsXd0u2XP8Sda86Z3n@Zv%LYgTbnls{hQhNO^76WtFo&+kfu z$AgQDLIh9hQBJJm6B*CNd=R}zeuFg0f;c{TV^PH?bS$Ppu_>%L~c;L^0 z9)Vv|`ou$|n18|B445Ct$?3Apk+W?@jUQg502G$DSU=cGIGl^m$>-~`$x_2m7N zkH3dMG6i$ePCh1UX3@s|7Nlpl_&8Z18N+FQ;v7$r)%mWeIvVm4vKvWQUe&d;+Jx-E z+%1kG#5FAjVO5}5(1Ibhf6vjC?bO5e)*v>*u$ej=?FyqeV0j|zc-qMdfQ`q{Nr&`G zUA1HC%t+`L`Xw?pya12mX8gs)Hy0fu47}Kn7x9;TK39+?Ifb;|PEr5x{%loz#r#xR)>&q=LyD}U>t%R9~1MBW)647a}4LbyDTgvWE_?q z(?9$hKwVRdH~9ReG3)r^3!*Y8_At%fY6SvJ3)_Qng}w9lDGK8zN56PeTSWV4Jt*Lf zza#)|EVy~`0;xV?%2N~6BT?!*-L_7CUP@fF3)!|DQSw%bjK_$E3s}Qb4tBFhG1PAj zLMT7&b;_w%8k*^HTs3zPKXdlIQ$$P0cYs=c)>Q|>Vv(0Of%lA}fZu(`Q>v_waL0_z z)WZ-c0U=9Sx7&#--wRumPE*i4J;q2LEKm2i@4Jdut^L=?RBc z?|^Iaff`z&Un1S6RFqr80qwB12i+}wAg5h0AX0Y}$v#o4+8 zZ;8OUUz`VxReKNL7WVX}70a9bj;QrTIo>b;wWT|~g}uEv-gddTHCoZ&iXF|SZsO{9 zjCvkybYyG|?ljB^b~pwk&O|T`=nP5GAHw5LaYZCAdOO^CYsK^Pn2;Zc;%X3zp5biR z&Fi_}88H6mD}VV_b{nKG=&+?AoU8l5PLx(Bs#0 zH;0-J6y%$K`SRVSW#GHJ{m$5KgA74`Q+WQAc>J`${Xbobq8S@=Ddo?d+cGw*qY@KEHpxcLeO{F53#tbx?WwKLiCXR z+jNHWc;Y>fMaGkias9oQO@H#BZ(CXgvyC(V7e=L~PFZ~qvR5-!QFjuQVr51Uxs!4% z!zEg#nLk(&mk}P_sHrnAFpMHI6p;_T%1v61v0bRhVWI0ln9WX9nn^i&0zorD+>3U+yM{tIx(TNMf30-nAzefO|w! z{8;DdD1gKWYIn2FQ!2QJ@Mv&G~(3{^z8c?bhsd$s~4(;3_640qPIR4BXPnxQdEW) zx>iN(%+8PXv_X<6tjG{9;`suJvX%mVD8VcA&`;np(aame+t)69Pd4a};_vQrRk0lS zkF>c9tD;QqN;i0C!YPv_N-qx*M>lAn-PWx9>=WH3AZ$i1MImYsvh059l1Vh@%PweX zOYhq(_7@AYPbVZiK7*}Q5FJB~#uF2@oPri=0ExICr$9yi8t_UoU!JgBg`o!Rxq3mg zZ2HhG0ZC6w^{ld2lBnco(IZ!zhr>V)VAJtZtjLb#0KZ@C33a-?i%<)mPWoho15lwX9Z-K{Fd5a0T76r`OZ+ZDFW*&6+Fhg9nm%U#9QsltmJYZ4{BIj$Za zc#uU3h?!;un?$7_6GuB$N&qjIo31VlgS*+89~?^_lcg?Pu!%HDaj-SPk#V6Y+egDq zP=mde!^7G}9Z0@L3yC~GHkUgJ*Oz`$9Dy+RzHP@0nnzoh#8h21yuX}(s>pTx1Zg0z z>S?}V#B+-eiDPAbixyYao3Qt_2_nha0VA(0>6|i=fV&;@x@<}z_TI;g7Lj=>+Pu1w zA z1va(a`sN`s#7B|7kI#7P5=766Rgd&TdGhquIYn7##_iCZDpEcxJ}?{dI%|}?Y5)G+ zKT2Mq4aSz1fszv!)#F8F-(vGGgUv5EW{LJXP4E5!JUFmjNDbw{xy`aR4nTXxAt6}B z{#TESv-sQ6NLStj^SNquS!x?jNEq|qqf39tKDsZ~bT}Opbaf#Zq8forD5Lh6e&2zv zFW}7O{YQap*|wNe?x3VN&AZWh(+w{^E;r}Tj(A3hX1h=IQB*pZI3P*2$g8$o--KhaSKTxd8*LWuCkejZhYfd~q2Di%c=Vw6d&KoUU` zV#_IeOmt@msA}7NBp3Rgy@l%C>zj_?Wi3Z?=oh}YqvtOL8Bj$X{ykV8V;Bd%=0Vie zg#giMS0Ew2XPRVv_+qT0NPcSA3(DSzze+fiy}pu9KXfpnq)gVYH5YnQW_m>@8t*;p~IX~I<+MTGeRd+UIDr%}0(q4CS(LN%6 z&>K1|l)wZ;^Vc{US-BDcU*0d@y`{Al(#7Wx<5T9rh^_FJjp%p!NA^s3dIj~?zRVg| zWO13N2;aS;F33@|`wKTF42z)UwTQmmt^g^>ee=B*FzI5|MJZ^DmqOK4=`ppqrm`Xoxb& z_0XAI+s%jW-TZe`n&!h3A?x=k|L}GVAqt;$0iN>1U!ARUkt~Vu#ANtnsyUcHCRX5e zgFK91MeI(x4~DYF+MNbBxwd=MgEo$PUFP%q%QTBr;Ax@<+^>0wT&M55twIt_EURGK zlC3>)Lyk^?4<1^%<`sWJCiTljbvfu->+__PqLQA{6HqF0DejdMgP*FGWN&Y4%r`yT zBkg_?p!J~~cU+>6S{RqR3MqzKo34%t5B;CyN zbOL`rN?QI$dmKVE8mI8(4n5I`o2wkiL{O4zjD!-oVcYxyK;I(Szee8wYosGSYEjkL z!TeHcmaX^GXR_N>#c0@Nf1^|ZH`Xdjnk!wPQ|KsS1l%2%w?CE^&?)p3ksQIbP>B;8 z4_r^03i$Dse=&P%{e*~j%b~?5_75C1bMVDmGByqm5vl0wVll+s(yut1&qbt*&{)&U zX;&c0OPx@NRzDONZs&}wi?W=v2W7Sx)At;(aBWTE z8_C?u?Uto~5ty=fz&zY&lyC)dNhm)qQN#3BdUl(J%L6`EMCXpdgw#W(gQY*Ozb0Lz zO6T-pg^tKma`_>=Td9j%-2qcJSTHWFn3^>aWW07jM)BjZW6Q#eP+eL%_Y!-is$OSc zHZ39`>MCy8lb|=GH;X;66v0f8k;VV4iuYZ)BuSOd?lZYO%Hx*PgDcip1PbDkQ-=DX zWG}nSckjQ1qG$nEOZ7LEQS}1vHdLH4%bRrh{E&xYjXIR28D8m12k5Diec432Bw;J+ zX#Sv12(1p(W_%sLm_$tPR1pkI-#XL5dN>99LuDO?mJ*K4=*x?JE7VDMQPvuSDeuGC z^l}@_10*I)Yj8xb9o>hgL0=datB;#)3#D7m8$cZ{&J8gr6R+K0n>LTA2B4$0%UzpP zc%ntT`UMvppR@c|eA=2%K$b{_iyz)CD=rr(t+;>1b$+&SdeI>38boMLnyTYSYh@2ZdCjMH(k z+RP2lpblU0C19T^4t?_n;o$#;8)6-kXBk6Y*Q~!?SxMRB05K*h%$EtOB0h6mzxc{< z$0p1@lyQ9F%bTGDcwttorqC?B^{jQUG^)nu+uDPG1^E!x@oIH3HA28bCre}(F*g)f z+@t3wzqUVE6J8Tc)c6Hl6LHOnM|$Iu?hRLDqDmofB{QnkgzJAV0ttRYOLhJ0gcF7?Ls4VWrPw6? z?LrG@5QBX}j*Y=!*{ganphBSGWr6>L8CdW{v?6?Kl2LP)!1~;_)w>8#C0uZ3qH#^O%U~-mgxasO*C7PCC+<| zW6zk--S(e^qS!+TcG&5#A7 zITjV_dd;=0GB=*<)gt@xP2-q`gDQL0&wlRhBUTAF$Li)*s|eC{i?#EqiJfiFhhheG zSqmH;>jLNB<->)}8!gG57!OBp-Wq|puA7`T>*V+&Jj8GdOgh$e?fVjS5JC>h(7Yt7 zLmDkA)O2M(TTynEL{wYuZFlq|Efp2Y0=9katg}SAj~xO<_gQC%Wzx{)sxkp&z;zVr zxRT?X`i?W#l7VuQh5Ae{Fh1IzqDnF;DnvamEHuI;CV2Dwr4~ai$b&0xj$Paqrioho zsDEJV*Dt#YJ?7O^Un@IdWZ4KrcN$8M2yVWjPkF?C9_E6u0tE#j_1W{(8dJkzG>umX88 zLU#oEmAp7FKPIZ#CjZCM$&Zc;9d^2T2KY)g#Z`lNaO;1=OD3ZFWd91r5zGHtv?cfd z7hN$4{BW36d2^$*fgXNzK*jZ%2_C?T?)zb19biRq9+3q_H8$3QAg(^_%p zY*`sVqQZ4^wHf!mO%BPBWMx3aF^hL_i1w-C;@FhR>TbTAt2M{)Y?A{?iw;t>Aba-L z35RZni@lTCq*KiK{-+F7>_r@c<~#F#s+cC?0?D9nt&8czLGh)}%dVI#**4y%j#Te7 zbp4(^XLfx9l`1*_;lU6QM$-1woX5?sT-biFS2&C^22XE*bfD+ucV$$O z^YSTs>yrKbtM3vHrbFPk6^$?81z++HPugro<2f2OY7^!q$G8qUGF~Uii7rgd+%-dgy1wEvCQ1vBIN(f0U7g(;T#logr#;l!_iXj-ijrMTTCc<{nx5 z+r0*sWR%gu9&41AX}It0y;Hxfm&*(THxGd(w!uL4=-E@arCb(~V#o`9oRV`Bw$rg# z#+q1D_InO~w7ed?9T!Yb{!x}zXwhx3dhunOEyBaBNdgap_zOEdi~aK;b(e8!Y-hc~ zjhAS71riavJcCUqR{D#DfF@9*>A&!R z9I;3{#|9ewQ6f~F1eMFOBfq-w_17b7scch6O!iesjA4$kR_w?u+oy|pYKU9%!CVy(UO`H0lT$umBnR2bpQ8^v7sPUopc^K1{vqWk3}KO!!Vn<;6$ zR!JsUD+qb%g7o(cv%TJ#pQWTxC*B1hgHycL^YKGuuc2TeQVP}e_B3< z9{efUolJ~0+4l^U+kuw^7!W-S$d46L?6dd0xwo0xyr%t# zew!U8kMPr0VY}^ruLuNOVAshU2X5q^E`Y*l0E!sx+?n&rwq8Euck!KZk3jF$-hMx*g%q;voRt0>vnZ08x{gi`! z&yTN0F`)zLevcJ8RH<&li|@a6##ZikB!``fEkm6;U3yi2CJZ>hYM2bse!Rmndghwn z5uVk@{cJKKsbAAXFRDBDrZF9dwv524Qy>HW5Xx9FRS4i&Y2G$yCQsi+nN2o+so48G z;En_Y>5C5K6&b=*^=wCKSFRm8;2PmJM?zs?_y*B;Nq-*lO-BQ;zih$jQXJ8j#{ymv z0#Qee0tT_LYd~~Du%6Wi(pp}MDgV*n{cCn<)&7_xl1v|iQlOxlpDeP!r)~6C=y@eO ziggd5!wv~WOK`D-JvEhfGM+iFP(#pQYtJr!y=Fzq!6m{g&8EvGU6!F_?b}IXucO?` zKJ`sh@)FvTqgy^9<;*R75ULBPb><(2_e{%=D`s@X=}$yO7Qz}s`z?F zCtKsto5&AW0XPnuW3Qk`j0!0%=Z=+$AbR+M--{j@RiOos!jW-kpg;V?ZNUcUm@#N; zuQ87f9H7bJ2pBlLpNN}(XI=1UzN?PnWB(oo6L&Nzxp$5Sp{1Or-8rA1XGZQRd2zS7 z3>-0V;15?m`nD6#2U9x@XM4%i`9|?;k#--n$!FMJD{H#@UnaeKI zI8%lIfO8k&1v^@->?cgtvj0`k=Y(xGlYzLYjLBK{0Qe=xWv z^b|j$f(1@*?OOjhWfDFXsmJrNu^!m3P{&!ecnkRzykjpWM>Rg*m_2_}!nY&{VHmeW zV5oZ{aOaW9-bnh{HvX9>XWFj3&z_laVIdkYp9Dk0(vhzj*lD!s0=QC6+gzTF{Nlj3 zu2k-7ca`HP{f_qSd{Ge z2!z3v>39jmao)H$k=J2WSH7*>C*rDgQ8r#2AGA5%KZNaaySz4^STGd`V2bRp!R=Y&c63rSA(#iKq2b!UVT5n5sOderq7&rw(t!IVNlS41Bd6{Ddc+j^q&e=KE4YBU!p^OV5 zv!cVZsclbu{kx|1-SrS+74P;WO^0t1C(ytKo%J=ZuiJG+-qEX<8Q57V3a1OW7dAaL z9ds2!=o3fToN+czkuayn?{&p=tSa~E0DDkkxiqbAS5FXqc6OK&A!F=YYSm1CeT>aI zI1QDjcr|7>!HJ!B543a?zZ0l){i~# zMFihgMpbWfo<>ND8MM2(jSA3TPtFaO6MZ9oAmS~}*^ga@lnpgr*NmQ@NqLuQxrqlD z1mf_*epwd-ToNbe2+vM_kVKIokOMcF;pLGOg{b(#IwE zEWUkLv zjk{yIS^AZZSF8?>XHp)m0UZq`(6##mj0&Mdq-nomu5Oxx{+Y5eimt{E+@*1&%~h~H zgv7SuQx}ZJ@6o-XFzC4*)HCzP`qfsTUZ#R zpMIt7pNb^p=!t~A=2wMul1zzOAqEVXT$Sf_^QDo*LI)2pbo4Rz6Q+-p2Zlq^kE}Ee zOwSeM?K*+5sk0`6-IBQ!7)*%M4;gR5Yzg0jM70U~k3_c@B1RjwkBS}`$19ufh>WjL z*X?Uq>KI&Ky3d>J>I%96{{G{>)#pm8%DM}5(;WYq6W)&{N0Z42gzFzRbLIXiP26^=+SltN^=g}xYEx$!WInc|3()s6{+lZ98k1w+wM(+7@a@K! z)DNJsozI{5LPI{%8kX$V48lk1U7hsQpZJqcCS1Q57(XiC^gkq&R7({i)_)rYXSb)E z5URIS_Xy!P3jI_WescXYfoxSKg(Zg2%;*gYE73}<+mah7YVM@k>Kq19_WUP2#WyaL z>lf+>em~L|MP$Vc>|JBQZs~uvrQ`RrmN;hrXXhRKehKZMI-SC&c61KJQ0M_ytA-FCBB{D=Afgo1stR6EZ2p=dfBfhl(wugiDER!$& z8>Ie@tl&&Jd^!TO|I#bc7im$(5SP@xrABIyOJh3Dx+v%*^F@GLMEAGs7Oj29p6c&K zWEe<$f#Qeq73tC=7$plfV@;3ecn6Af{t7kZE?)$)ek*aiK7GZCYVF%a@fi-2g$T}1 zwy7wSRM|)S^%IILYxpXa!W|fIJ$;tb#2SE|A1|OeXLQTmaxa+l7+-V0OrLH~-}}C{ zbT$jW7>^K!*TPb>hhtZm%}-RMr5WdbsP4zsA<{4*v*zCVk}$)91+RP(Wm{ zudCOuDh=D`Y!JnGYt!Z3FY*un!7YYF9OzjiDp<{xTuQPMilR)%r*8-j(|AiqkbizY z%JPI1Cgd#-nH~DfeSrwj2Wxz%{j5YO;u+Nc;rAKREGK*pG!7m_HooZNysJufuVcjK zg29oCd(wW4Xn5CZKAiqH1#>aG0)VXohUfx>?a=X_PfSqr+HGOoGxPqJUJgGb^hkwP z>F`p=aj)z_HCmY@46eQD8T>Q)wZ7K3K+$dM#dXprm|$BNdYbAsJ$8Oi?9Eb0^UwS8 z%MI}+F5j(h30frVWGyh^Z3N5&ae-=t53R@X)w?m+0IL8!WP0oH_8N`)!EO+pgrHyg zp&%A$gYMY#T|Kf@#Vd<4<(16@B?U4p?{H%ZW5x9G)4}aC1;&Ud=6yAz(Nm^>>$)hCfE*Xnbt z;%>UW{{53$txJp@+e5i7rdc~vhO|Dt;QnO*8xkudD&+R~LrCOnGxm> zZ@oT{N+mjact0ktWO!@1eiyvWTjM04ecL+cOkKoMU}>JEOswTq{jYb(NXNEcFlBqF zN~c_R-8+MZ3^fuL-8!`Zi9GXq_9;YK&^5&xBzQxqO!_6)RJjo7(ZiSYx{dkIPZ>(Cx*sMa>`z`ufjpP}q=xp% znl{Sy>FrqJJ_Uub8Pc-*iy!>>{}7<1_xqnOekD)9`#^Yg+H)4PFQ{cg1W17}Oz80&Hv=t8`tCUtVd&8 zVPCs>{Mf^1S)fhRe&_$h(!NQ*MnW_9NP(6uF{j#$O+M`;dRV?QTJw3hS^Pf7I5qrQ zZxtk_1d_ELdzGl8y1{VjhnQZYcF+mlxKIjN(OEsYqIvVrlMgJs-zAvDtLwhfmr4#5 z&91tie|yYCkhP_|cG+b^rpAHQW3&97%yQkj`h_EdJoX8PkKZOA1Ud_?ZY1X$bDs$# zsT@yU=>OV)9A&;AQ(NGzD&1yf(cWy9@`K3v;jdffzIOZfzkSyHYqXr^p1TZ2aGOpf z)-|jm`MZtx?P!_OS_@mc$lp)JUJw%$A0yjTLe3|aze)c?azlpCet+Ye*K4@J$IZGw zKE}dV?Y5xLXfi_6|Cs6Svom*FALQ=~EZZC)vPEmZ1&Uc-5T;7wOTUu)Us%ZJvpT!mpE77It7%MxD&-gU?VB2A^P_&e&B7H@IjSIif zRXZ7>09wq2yK5zlyqMNDyCE|lqFj@(Xhx6^dw`j}>#p>!PgIK4 zzSL(vDp^_4opu_2Kg#e~J>X!SXgW5g?!*ERw98`Ro5~6n2R+%P%;kf)&Kas0DiaDm&5Lz>Q^3_!^r3)R=O1Q8F>rb_B%}Z>y(%zttHWM#~o#GAwytNwz6A?MF3N;fhb^J=RuSJ@AaA(9h*U zBE^7lD$FnB(oM(oFs#IpeVKolA&qvW?!2qqtQfyn-+9OjLkmyi|8EoYAI4)fS%icq z;P*j(%SkHI)zOy;@C`S&qiG?VLnl-;{1JdcDG~I$`ws6$1XPFd^=HeR{s%=ZOd-f_ z5932FIrvpuU~0o{!?9=KBXhw22=3UV>%To&TR-tFYHn3#JKXt4zP0+_y4Z^@fCjD? z5@h&-P`KZzx#7-^XWGY8f{7<@Ij*qqy)H_c)KzAVO^_kXya(LnM1y!zaLdJ^repgu zEXt(j^0JxMaaL7QWz+g)5T$Rn(il`t<#7T!+tZ%H7vxF}Mbm_P2pA%Co-+gk&lg{* z8}5YdeAHoDTAl;4#U5(lPTaV@=VQ}eEl4HYac>h;hf|Pi#+&HCyXMa&rIV9CIu$9M zlg)~GwL1UXIx9YWG~O-tZ1SV*8~Hz|^_6o*RG&U488LXT6&A{_S5YAMev}Ha6&OEC zvG}Ph6p_YIX7RI5z{2$ymyd{qi4u8Xa2Zp_5GyVE_u?%F$AEV;w{Wl`R!C-Oyext{ zpX=`R1XPUQ!pHzog^(u2&jW@M(;~6lJm5G7yEVM+z+jA~+#`qUYJJTUWrlqew^`2! zQ{M`|-OC1bIF}Ye{q0IDA_%_CuqHkFfQ`aJmh~z%WWY+P7x-XQo$6JZfnmIb8*o;H zY68Q2@jcSol5_O&v8!5#Zghg(c#Txo)QhJ;-uk|91CcygrGP$-paP>#U*`32mlK2s5xaBxR7wVQEF&6?m)FBhauoso!C{eM{ zlsC(HdG%SH82r8pTpra(Lo4POpETp%2Hd4vKjM$rdw~XfM?4}|li+G51ZXn02a6^h zXji6%KS{(ZH=EuTXh)#dCXVE4ZyxfW;BxLSwl>KZ>cgoGSo5XI#~|d~MOb2}k-?NN z&I`=jO#Y!&CVArmTiWBO>C9_=5^@w+#wHQ0kZ9e4{(@qhCb?`0C5P-`!3ICVfh8uy zkQZ9l($^u2#8?_LsGGMVQ~>I1i*pG$+`0>-cvR(j*@5Hm$&itCKha0#BjX>AbaD+voKrAMZdxf}NcX4;gq`K)XcE5UVC@&7 z^QmZoiwAxy1FvxoK~*Siav3bi5cRSK)gz3r{;MYyuSC6jCJ-0;n0O1Pt3DEVb~Y=7 z=npo{;NcCT4sSovJWJ3|lKSvfE5EB?`XM2gpT@;E@HD~Iq*13ZTM-qpM*O{%5s~mHyHf4VboSg9{zy2jz_ugGwNCB0j98mFf{R7w z1LHaIab)ZO}Y{T5WCjC@cG&#I8n?wi%WJ zSI#H;gHnswmT|neF-KWB1@f=1I(;8T=-2&QJ-9$GbGSZmmMej3XiASIh&<6ivKiECsvmg&e#HtY_Up?+rGCXCngQ6bk{Ak>0d_DB7(LkuAq_E`Xy45T4 z1QFxKO%dV7$6AT{q_KaZb~xf)gbVc8;lWNm}}> zYmbpN&h2zMf5p1>*Xub9)`Nk9A`^O>`zvkj+vD8j%MOl95^@p5Tki>PfD(4*QLC(E z9G2UHAYeXzL)MM%&UC*kVVEN8UZO7&n-l7J$v1~o7bOFQ;&A!&_e2`u4W|AZbXy*3yK8x?e4pj5?#r}qPj{J-0#1klEAJ-Vzfz- zfK=E>-Ae!D{H?m~-%16-x)^>I6c(PlSnu?MN>{xFxAx`!Cma%J!CjpDqZq#OUhED1 SvBN+4Lug*p1&UQ}JpNx@i?^Tv diff --git a/windows/manage/index.md b/windows/manage/index.md index 63beb79e14..c7488d7115 100644 --- a/windows/manage/index.md +++ b/windows/manage/index.md @@ -38,7 +38,7 @@ Learn about managing and updating Windows 10.

Administrative Tools is a folder in Control Panel that contains tools for system administrators and advanced users.

-

[Cortana integration in your business or enterprise](manage-cortana-in-your-enterprise.md)

+

[Cortana integration in your business or enterprise](manage-cortana-in-enterprise.md))

The world’s first personal digital assistant helps users get things done, even at work. Cortana includes powerful configuration options specifically to optimize for unique small to medium-sized business and enterprise environments.

@@ -66,6 +66,10 @@ Learn about managing and updating Windows 10.

This article describes the new servicing options available in Windows 10, Windows 10 Mobile, and Windows 10 IoT Core (IoT Core) and how they enable enterprises to keep their devices current with the latest feature upgrades. It also covers related topics, such as how enterprises can make better use of Windows Update, and what the new servicing options mean for support lifecycles.

+

[Application development for Windows as a service](application-development-for-windows-as-a-service.md)

+

In today’s environment, where user expectations frequently are set by device-centric experiences, complete product cycles need to be measured in months, not years. Additionally, new releases must be made available on a continual basis, and must be deployable with minimal impact on users. Microsoft designed Windows 10 to meet these requirements by implementing a new approach to innovation, development, and delivery called [Windows as a service (WaaS)](introduction-to-windows-10-servicing.md). The key to enabling significantly shorter product cycles while maintaining high quality levels is an innovative community-centric approach to testing that Microsoft has implemented for Windows 10. The community, known as Windows Insiders, is comprised of millions of users around the world. When Windows Insiders opt in to the community, they test many builds over the course of a product cycle and provide feedback to Microsoft through an iterative methodology called flighting.

+ +

[Windows Store for Business](windows-store-for-business.md)

Welcome to the Windows Store for Business! You can use the Store for Business, to find, acquire, distribute, and manage apps for your organization.

diff --git a/windows/manage/introduction-to-windows-10-servicing.md b/windows/manage/introduction-to-windows-10-servicing.md index 3de0e4c19f..e6837458dd 100644 --- a/windows/manage/introduction-to-windows-10-servicing.md +++ b/windows/manage/introduction-to-windows-10-servicing.md @@ -286,91 +286,51 @@ Windows 10 Enterprise LTSB does include Internet Explorer 11, and is compatible Table 2. Servicing option summary - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ComparisonWindows 10 servicing options
Current Branch (CB)Current Branch for Business (CBB)Long-Term Servicing Branch (LTSB)
Availability of new feature upgrades for installationImmediateDeferred by ~4 monthsNot applicable
Supported editionsWindows 10 Home, Windows 10 Pro, Windows 10 Education, Windows 10 Enterprise, Windows 10 Mobile, -IoT Core, IoT Core ProWindows 10 Pro, -Windows 10 Education, -Windows 10 Enterprise, Windows 10 Mobile Enterprise, -IoT Core ProWindows 10 Enterprise LTSB
Minimum length of servicing lifetimeApproximately 4 MonthsApproximately 8 months10 years
Ongoing installation of new feature upgrades required to receive servicing updatesYesYesNo
Supports Windows Update for release deploymentYesYesYes
Supports Windows Server Update Services for release deploymentYes -(excludes Home) -YesYes
Supports Configuration Manager/configuration management systems for release deploymentYes -(excludes Home) -YesYes
First party browsers includedMicrosoft Edge, -Internet Explorer 11Microsoft Edge, -IE11IE11
Notable Windows -system apps removed -NoneNoneMicrosoft Edge, Windows Store Client, Cortana (limited search available)
Notable Windows -universal apps removed -NoneNoneOutlook Mail/Calendar, OneNote, Weather, News, Sports, Money, Photos, Camera, Music, Clock
+Comparison +Windows 10 servicing options +Current Branch (CB) +Current Branch for Business (CBB) +Long-Term Servicing Branch (LTSB) +**Availability of new feature upgrades for installation** +Immediate +Deferred by ~4 months +Not applicable +**Supported editions** +Windows 10 Home, Windows 10 Pro, Windows 10 Education, Windows 10 Enterprise, Windows 10 Mobile, IoT Core, IoT Core Pro +Windows 10 Pro, Windows 10 Education, Windows 10 Enterprise, Windows 10 Mobile Enterprise, IoT Core Pro +Windows 10 Enterprise LTSB +**Minimum length of servicing lifetime** +Approximately 4 Months +Approximately 8 months +10 years +**Ongoing installation of new feature upgrades required to receive servicing updates** +Yes +Yes +No +**Supports Windows Update for release deployment** +Yes +Yes +Yes +**Supports Windows Server Update Services for release deployment** +Yes (excludes Home) +Yes +Yes +**Supports Configuration Manager/configuration management systems for release deployment** +Yes (excludes Home) +Yes +Yes +**First party browsers included** +Microsoft Edge, Internet Explorer 11 +Microsoft Edge, IE11 +IE11 +**Notable Windows system apps removed** +None +None +Microsoft Edge, Windows Store Client, Cortana (limited search available) +**Notable Windows universal apps removed** +None +None +Outlook Mail/Calendar, OneNote, Weather, News, Sports, Money, Photos, Camera, Music, Clock   ## Related topics diff --git a/windows/manage/join-windows-10-mobile-to-azure-active-directory.md b/windows/manage/join-windows-10-mobile-to-azure-active-directory.md index e0cde52fa6..cd798c3163 100644 --- a/windows/manage/join-windows-10-mobile-to-azure-active-directory.md +++ b/windows/manage/join-windows-10-mobile-to-azure-active-directory.md @@ -77,7 +77,7 @@ An added work account provides the same SSO experience in browser apps like Offi - **Mobile device management** - An MDM service is required for managing Azure AD-joined devices. You can use MDM to push settings to devices, as well as application and certificates used by VPN, Wi-Fi, etc. Azure AD Premium or Enterprise Mobility Suite (EMS) licenses are required to set up your Azure AD-joined devices to automatically enroll in MDM. [Learn more about setting up your Azure AD tenant for MDM auto-enrollment.](http://go.microsoft.com/fwlink/p/?LinkID=691615) + An MDM service is required for managing Azure AD-joined devices. You can use MDM to push settings to devices, as well as application and certificates used by VPN, Wi-Fi, etc. Azure AD Premium or [Enterprise Mobility Suite (EMS)](http://go.microsoft.com/fwlink/p/?LinkID=723984) licenses are required to set up your Azure AD-joined devices to automatically enroll in MDM. [Learn more about setting up your Azure AD tenant for MDM auto-enrollment.](http://go.microsoft.com/fwlink/p/?LinkID=691615) - **Microsoft Passport** diff --git a/windows/manage/lock-down-windows-10-to-specific-apps.md b/windows/manage/lock-down-windows-10-to-specific-apps.md index 4379103252..095f7b1bbf 100644 --- a/windows/manage/lock-down-windows-10-to-specific-apps.md +++ b/windows/manage/lock-down-windows-10-to-specific-apps.md @@ -18,7 +18,7 @@ author: jdeckerMS Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. -You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](../keep-secure/applocker-overview-server.md). AppLocker rules specify which apps are allowed to run on the device. +You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](../keep-secure/applocker-overview.md). AppLocker rules specify which apps are allowed to run on the device. AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run. For more information, see [How AppLocker works](../keep-secure/how-applocker-works-techref.md). diff --git a/windows/manage/lock-down-windows-10.md b/windows/manage/lock-down-windows-10.md index f411de7cdb..1954ea873c 100644 --- a/windows/manage/lock-down-windows-10.md +++ b/windows/manage/lock-down-windows-10.md @@ -43,28 +43,23 @@ Enterprises often need to manage how people use corporate devices. Windows 10 p

Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps. The result is similar to [a kiosk device](set-up-a-device-for-anyone-to-use.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings.

-

[Configure telemetry in your organization](configure-telemetry-in-your-organization.md)

-

Use this article to make informed decisions about how you can configure telemetry in your organization. Telemetry is a term that means different things to different people and organizations. For the purpose of this article, we discuss telemetry as system data that is uploaded by the Connected User Experience and Telemetry component. The telemetry data is used to keep Windows devices secure, and to help Microsoft improve the quality of Windows and Microsoft services.

+

[Configure telemetry and other settings in your organization](disconnect-your-organization-from-microsoft.md)

+

Learn about the telemetry that Microsoft gathers, the network connections that Windows components make to Microsoft, and also the privacy settings that affect data that is shared with either Microsoft or apps and how they can be managed by an IT Pro.

-

[Disconnect from Microsoft and configure privacy settings in your organization](disconnect-your-organization-from-microsoft.md)

-

If you want to minimize connections from Windows to Microsoft services, or configure particular privacy settings, this article covers the settings that you could consider.

-

If you’re looking for content on what each telemetry level means and how to configure it in your organization, see [Configure telemetry in your organization](configure-telemetry-in-your-organization.md).

- -

[Configure access to Windows Store](stop-employees-from-using-the-windows-store.md)

IT Pros can configure access to Windows Store for client computers in their organization. For some organizations, business policies require blocking access to Windows Store.

- -

[Manage Wi-Fi Sense in your company](manage-wi-fi-sense-in-your-company.md)

+ +

[Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md))

Wi-Fi Sense automatically connects you to Wi-Fi, so you can get online quickly in more places. It can connect you to open Wi-Fi hotspots it knows about through crowdsourcing, or to Wi-Fi networks your contacts have shared with you by using Wi-Fi Sense.

The initial settings for Wi-Fi Sense are determined by the options you chose when you first set up your PC with Windows 10.

- +

[Configure Windows 10 Mobile using Lockdown XML](lockdown-xml.md)

Windows 10 Mobile allows enterprises to lock down a device, define multiple user roles, and configure custom layouts on a device.

- +

[Reset a Windows 10 Mobile device](reset-a-windows-10-mobile-device.md)

There are two methods for resetting a Windows 10 Mobile device: factory reset and "wipe and persist" reset.

diff --git a/windows/manage/manage-apps.md b/windows/manage/manage-apps-windows-store-for-business-overview.md similarity index 93% rename from windows/manage/manage-apps.md rename to windows/manage/manage-apps-windows-store-for-business-overview.md index 0d661cb50a..042a6747e6 100644 --- a/windows/manage/manage-apps.md +++ b/windows/manage/manage-apps-windows-store-for-business-overview.md @@ -38,7 +38,7 @@ Manage settings and access to apps in Windows Store for Business.

You can manage access to your private store in Store for Business.

-

[App inventory managemement for Windows Store for Business](app-inventory-managemement-for-windows-store-for-business.md)

+

[App inventory managemement for Windows Store for Business](app-inventory-managemement-windows-store-for-business.md)

You can manage all apps that you've acquired on your Inventory page.

@@ -46,7 +46,7 @@ Manage settings and access to apps in Windows Store for Business.

The private store is a feature in the Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.

-

[Configure MDM provider](configure-mdm-provider.md)

+

[Configure MDM provider](configure-mdm-provider-windows-store-for-business.md)

For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content.

diff --git a/windows/manage/manage-cortana-in-your-enterprise.md b/windows/manage/manage-cortana-in-enterprise.md similarity index 100% rename from windows/manage/manage-cortana-in-your-enterprise.md rename to windows/manage/manage-cortana-in-enterprise.md diff --git a/windows/manage/manage-settings-in-the-windows-store-for-business.md b/windows/manage/manage-settings-windows-store-for-business.md similarity index 85% rename from windows/manage/manage-settings-in-the-windows-store-for-business.md rename to windows/manage/manage-settings-windows-store-for-business.md index 9a61f80f15..a7ad87debb 100644 --- a/windows/manage/manage-settings-in-the-windows-store-for-business.md +++ b/windows/manage/manage-settings-windows-store-for-business.md @@ -34,12 +34,12 @@ You can add users and groups, as well as update some of the settings associated -

[Update Windows Store for Business account settings](update-windows-store-for-business-account-settings-.md)

+

[Update Windows Store for Business account settings](update-windows-store-for-business-account-settings.md))

The Account information page in Windows Store for Business shows information about your organization that you can update, including: country or region, organization name, default domain, and language preference. These are settings in the Azure AD directory that you used when signing up for Store for Business

-

[Manage user accounts in Windows Store for Business](manage-users-and-groups-in-the-windows-store-for-business.md)

-

Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-in-the-windows-store-for-business.md), but not to groups.

+

[Manage user accounts in Windows Store for Business](manage-users-and-groups-windows-store-for-business.md))

+

Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.

diff --git a/windows/manage/manage-users-and-groups-in-the-windows-store-for-business.md b/windows/manage/manage-users-and-groups-windows-store-for-business.md similarity index 95% rename from windows/manage/manage-users-and-groups-in-the-windows-store-for-business.md rename to windows/manage/manage-users-and-groups-windows-store-for-business.md index d34ca092f9..15f2838296 100644 --- a/windows/manage/manage-users-and-groups-in-the-windows-store-for-business.md +++ b/windows/manage/manage-users-and-groups-windows-store-for-business.md @@ -16,7 +16,7 @@ author: jdeckerMS - Windows 10 - Windows 10 Mobile -Windows Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-in-the-windows-store-for-business.md), but not to groups. +Windows Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. ## Why Azure AD accounts? @@ -36,7 +36,7 @@ For more information on Azure AD, see [About Office 365 and Azure Active Directo ## Add user accounts to your Azure AD directory -If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-in-the-windows-store-for-business.md) +If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-windows-store-for-business.md) You can use the [Office 365 admin dashboard](http://go.microsoft.com/fwlink/p/?LinkId=708616) or [Azure management portal](http://go.microsoft.com/fwlink/p/?LinkId=691086) to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to [Azure management portal](http://go.microsoft.com/fwlink/p/?LinkId=708617). diff --git a/windows/manage/manage-wi-fi-sense-in-your-company.md b/windows/manage/manage-wifi-sense-in-enterprise.md similarity index 100% rename from windows/manage/manage-wi-fi-sense-in-your-company.md rename to windows/manage/manage-wifi-sense-in-enterprise.md diff --git a/windows/manage/prerequisites-for-windows-store-for-business.md b/windows/manage/prerequisites-windows-store-for-business.md similarity index 100% rename from windows/manage/prerequisites-for-windows-store-for-business.md rename to windows/manage/prerequisites-windows-store-for-business.md diff --git a/windows/manage/roles-and-permissions-in-the-windows-store-for-business.md b/windows/manage/roles-and-permissions-windows-store-for-business.md similarity index 99% rename from windows/manage/roles-and-permissions-in-the-windows-store-for-business.md rename to windows/manage/roles-and-permissions-windows-store-for-business.md index f776407a57..6e84e31b65 100644 --- a/windows/manage/roles-and-permissions-in-the-windows-store-for-business.md +++ b/windows/manage/roles-and-permissions-windows-store-for-business.md @@ -211,7 +211,7 @@ These permissions allow people to: 4. - If you are not finding the name you want, you might need to add people to your Azure AD directory. For more information, see [Manage user accounts in the Windows Store for Business.](manage-users-and-groups-in-the-windows-store-for-business.md) + If you are not finding the name you want, you might need to add people to your Azure AD directory. For more information, see [Manage user accounts in the Windows Store for Business.](manage-users-and-groups-windows-store-for-business.md))   diff --git a/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md b/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md index 3171136e43..51f8190e05 100644 --- a/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md +++ b/windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md @@ -44,6 +44,10 @@ For a more secure kiosk experience, we recommend that you make the following con Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. +- Remove the power button from the sign-in screen. + + Go to **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** >**Security Options** > **Shutdown: Allow system to be shut down without having to log on** and select **Disabled.** + - Disable the camera. Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. diff --git a/windows/manage/settings-reference--windows-store-for-business.md b/windows/manage/settings-reference-windows-store-for-business.md similarity index 92% rename from windows/manage/settings-reference--windows-store-for-business.md rename to windows/manage/settings-reference-windows-store-for-business.md index e092ef5913..23c785a7ae 100644 --- a/windows/manage/settings-reference--windows-store-for-business.md +++ b/windows/manage/settings-reference-windows-store-for-business.md @@ -21,12 +21,12 @@ The Windows Store for Business has a group of settings that admins use to manage | | | |----------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Setting | Description | -| Account information | Provides info on these configured settings for your Store for Business account . These settings include: country or region, default domain, organization name, and language preference. You can make updates to these settings with Office 365 or Azure management portals. For more information, see [Manage settings for the Windows Store for Business](manage-settings-in-the-windows-store-for-business.md). | +| Account information | Provides info on these configured settings for your Store for Business account . These settings include: country or region, default domain, organization name, and language preference. You can make updates to these settings with Office 365 or Azure management portals. For more information, see [Manage settings for the Windows Store for Business](manage-settings-windows-store-for-business.md). | | Device Guard signing | Use the Device Guard signing portal to add unsigned apps to a code integrity policy, or to sign code integrity policies. For more information, see [Device Guard signing portal](device-guard-signing-portal.md). | | LOB publishers | Invite devs to become LOB publishers for your organization. Existing LOB publishers are listed on the page, and you can deactivate or invite them again. For more information, see [Work with line-of-business apps](working-with-line-of-business-apps.md). | -| Management tools | Management tools that are synced with Azure AD are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider.md). | +| Management tools | Management tools that are synced with Azure AD are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md). | | Offline licensing | Configure whether or not to make offline-licensed apps available in the Store for Business. For more information, see [Distribute offline apps](distribute-offline-apps.md). | -| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Windows Store for Business](roles-and-permissions-in-the-windows-store-for-business.md). | +| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md). | | Private store | Update the name for your private store. The new name will be displayed on a tab in the Store. For more information, see [Manage private store settings](manage-private-store-settings.md). |   diff --git a/windows/manage/sign-up-and-get-started.md b/windows/manage/sign-up-windows-store-for-business-overview.md similarity index 88% rename from windows/manage/sign-up-and-get-started.md rename to windows/manage/sign-up-windows-store-for-business-overview.md index 1516f02855..7a51e37188 100644 --- a/windows/manage/sign-up-and-get-started.md +++ b/windows/manage/sign-up-windows-store-for-business-overview.md @@ -34,19 +34,19 @@ IT admins can sign up for the Windows Store for Business, and get started workin -

[Prerequisites for Windows Store for Business](prerequisites-for-windows-store-for-business.md)

+

[Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md)

There are a few prerequisites for using Store for Business.

-

[Sign up for Windows Store for Business](sign-up-for-windows-store-for-business.md)

+

[Sign up for Windows Store for Business](sign-up-windows-store-for-business.md)

Before you sign up for Store for Business, at a minimum, you'll need an Azure Active Directory (AD) account for your organization, and you'll need to be the global administrator for your organization. If your organization is already using Azure AD, you can go ahead and sign up for Store for Business. If not, we'll help you create an Azure AD account and directory as part of the sign up process.

-

[Roles and permissions in the Windows Store for Business](roles-and-permissions-in-the-windows-store-for-business.md)

+

[Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md)

The first person to sign in to Store for Business must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees.

-

[Settings reference: Windows Store for Business](settings-reference--windows-store-for-business.md)

+

[Settings reference: Windows Store for Business](settings-reference-windows-store-for-business.md)

The Store for Business has a group of settings that admins use to manage the store.

diff --git a/windows/manage/sign-up-for-windows-store-for-business.md b/windows/manage/sign-up-windows-store-for-business.md similarity index 97% rename from windows/manage/sign-up-for-windows-store-for-business.md rename to windows/manage/sign-up-windows-store-for-business.md index 0a57c72f72..5e8dcbf37c 100644 --- a/windows/manage/sign-up-for-windows-store-for-business.md +++ b/windows/manage/sign-up-windows-store-for-business.md @@ -85,9 +85,9 @@ Before signing up for the Store for Business, make sure you're the global admini After signing up for Store for Business, you can: -- **Add users to your Azure AD directory**. If you created your Azure AD directory during Store for Business sign up, additional user accounts are required for employees to install apps you assign to them, or to browse the private store. For more information, see [Manage user accounts in Store for Business](manage-users-and-groups-in-the-windows-store-for-business.md). +- **Add users to your Azure AD directory**. If you created your Azure AD directory during Store for Business sign up, additional user accounts are required for employees to install apps you assign to them, or to browse the private store. For more information, see [Manage user accounts in Store for Business](manage-users-and-groups-windows-store-for-business.md)). -- **Assign roles to employees**. For more information, see [Roles and permissions in the Windows Store for Business](roles-and-permissions-in-the-windows-store-for-business.md). +- **Assign roles to employees**. For more information, see [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md).   diff --git a/windows/manage/stop-employees-from-using-the-windows-store.md b/windows/manage/stop-employees-from-using-the-windows-store.md index 4b3444dec6..3adfbc0694 100644 --- a/windows/manage/stop-employees-from-using-the-windows-store.md +++ b/windows/manage/stop-employees-from-using-the-windows-store.md @@ -82,7 +82,7 @@ When your MDM tool supports Windows Store for Business, the MDM can use these CS - [EnterpriseAssignedAccess](https://msdn.microsoft.com/library/windows/hardware/mt157024.aspx) (Windows 10 Mobile, only) -For more information, see [Configure an MDM provider](configure-mdm-provider.md). +For more information, see [Configure an MDM provider](configure-mdm-provider-windows-store-for-business.md). ## Related topics diff --git a/windows/manage/troubleshoot.md b/windows/manage/troubleshoot-windows-store-for-business.md similarity index 100% rename from windows/manage/troubleshoot.md rename to windows/manage/troubleshoot-windows-store-for-business.md diff --git a/windows/manage/update-windows-store-for-business-account-settings-.md b/windows/manage/update-windows-store-for-business-account-settings.md similarity index 100% rename from windows/manage/update-windows-store-for-business-account-settings-.md rename to windows/manage/update-windows-store-for-business-account-settings.md diff --git a/windows/manage/windows-store-for-business.md b/windows/manage/windows-store-for-business.md index d02d2373f5..6044cf1532 100644 --- a/windows/manage/windows-store-for-business.md +++ b/windows/manage/windows-store-for-business.md @@ -34,19 +34,19 @@ Welcome to the Windows Store for Business! You can use the Store for Business, t -

[Sign up and get started](sign-up-and-get-started.md)

+

[Sign up and get started](sign-up-windows-store-for-business-overview.md)

IT admins can sign up for the Store for Business, and get started working with apps.

-

[Find and acquire apps](find-and-acquire-apps.md)

+

[Find and acquire apps](find-and-acquire-apps-overview.md)

Use the Store for Business to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization.

-

[Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-from-the-windows-store-for-business.md)

+

[Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md)

Distribute apps to your employees from Store for Business. You can assign apps to employees, or let employees install them from your private store.

-

[Manage apps](manage-apps.md)

+

[Manage apps](manage-apps-windows-store-for-business-overview.md)

Manage settings and access to apps in Store for Business.

@@ -54,11 +54,11 @@ Welcome to the Windows Store for Business! You can use the Store for Business, t

Device Guard signing is a Device Guard feature that is available in the Store for Business. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files.

-

[Manage settings in the Windows Store for Business](manage-settings-in-the-windows-store-for-business.md)

+

[Manage settings in the Windows Store for Business](manage-settings-windows-store-for-business.md)

You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant

-

[Troubleshoot Windows Store for Business](troubleshoot.md)

+

[Troubleshoot Windows Store for Business](troubleshoot-windows-store-for-business.md))

Troubleshooting topics for Store for Business.

diff --git a/windows/manage/working-with-line-of-business-apps.md b/windows/manage/working-with-line-of-business-apps.md index 82ac833b02..8b553433a1 100644 --- a/windows/manage/working-with-line-of-business-apps.md +++ b/windows/manage/working-with-line-of-business-apps.md @@ -91,7 +91,7 @@ After an ISV submits the LOB app for your company, the Store for Businessadmin n After you add the app to your inventory, you can choose how to distribute the app. For more information, see: -- [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-from-the-windows-store-for-business.md) +- [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md) - [Distribute apps from your private store](distribute-apps-from-your-private-store.md) diff --git a/windows/plan/TOC.md b/windows/plan/TOC.md index c11effc96c..288223815e 100644 --- a/windows/plan/TOC.md +++ b/windows/plan/TOC.md @@ -1,15 +1,15 @@ # [Plan for Windows 10 deployment](index.md) ## [Change history for Plan for Windows 10 deployment](change-history-for-plan-for-windows-10-deployment.md) -## [Windows 10 servicing options](windows-10-servicing-model.md) +## [Windows 10 servicing options](windows-10-servicing-options.md) ## [Windows 10 deployment considerations](windows-10-deployment-considerations.md) ## [Windows 10 compatibility](windows-10-compatibility.md) ## [Windows 10 infrastructure requirements](windows-10-infrastructure-requirements.md) ## [Windows Update for Business](windows-update-for-business.md) ### [Setup and deployment](setup-and-deployment.md) ### [Integration with management solutions](integration-with-management-solutions-.md) -## [Guidance for education environments](guidance-for-education-environments.md) +## [Guidance for education environments](windows-10-guidance-for-education-environments.md) ### [Chromebook migration guide](chromebook-migration-guide.md) -## [Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) +## [Windows To Go: feature overview](windows-to-go-overview.md) ### [Best practice recommendations for Windows To Go](best-practice-recommendations-for-windows-to-go.md) ### [Deployment considerations for Windows To Go](deployment-considerations-for-windows-to-go.md) ### [Prepare your organization for Windows To Go](prepare-your-organization-for-windows-to-go.md) diff --git a/windows/plan/best-practice-recommendations-for-windows-to-go.md b/windows/plan/best-practice-recommendations-for-windows-to-go.md index 4f9850c51c..8ab55ac121 100644 --- a/windows/plan/best-practice-recommendations-for-windows-to-go.md +++ b/windows/plan/best-practice-recommendations-for-windows-to-go.md @@ -35,7 +35,7 @@ Additionally, we recommend that when you plan your deployment you should also pl ## More information -[Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) +[Windows To Go: feature overview](windows-to-go-overview.md) [Prepare your organization for Windows To Go](prepare-your-organization-for-windows-to-go.md) diff --git a/windows/plan/change-history-for-plan-for-windows-10-deployment.md b/windows/plan/change-history-for-plan-for-windows-10-deployment.md index d5ea58e8d1..3f7228b6a7 100644 --- a/windows/plan/change-history-for-plan-for-windows-10-deployment.md +++ b/windows/plan/change-history-for-plan-for-windows-10-deployment.md @@ -29,7 +29,7 @@ This topic lists new and updated topics in the [Plan for Windows 10 deployment]( |--------------------------------------------------------------------------------------------------|-------------| | [Chromebook migration guide](chromebook-migration-guide.md) | New | | [Windows Update for Business](windows-update-for-business.md) (multiple topics) | New | -| [Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) (multiple topics) | Updated | +| [Windows To Go: feature overview](windows-to-go-overview.md) (multiple topics) | Updated |   diff --git a/windows/plan/deployment-considerations-for-windows-to-go.md b/windows/plan/deployment-considerations-for-windows-to-go.md index a7c14e1f47..473ff80e7e 100644 --- a/windows/plan/deployment-considerations-for-windows-to-go.md +++ b/windows/plan/deployment-considerations-for-windows-to-go.md @@ -314,7 +314,7 @@ If you choose to not use the Windows To Go startup options or are using a PC run ## Related topics -[Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) +[Windows To Go: feature overview](windows-to-go-overview.md) [Prepare your organization for Windows To Go](prepare-your-organization-for-windows-to-go.md) diff --git a/windows/plan/index.md b/windows/plan/index.md index 91e29ba596..d02e27fed6 100644 --- a/windows/plan/index.md +++ b/windows/plan/index.md @@ -34,7 +34,7 @@ Windows 10 provides new deployment capabilities, scenarios, and tools by buildi

This topic lists new and updated topics in the Plan for Windows 10 deployment documentation for [Windows 10 and Windows 10 Mobile](../index.md).

-

[Windows 10 servicing options](windows-10-servicing-model.md)

+

[Windows 10 servicing options](windows-10-servicing-options.md)

Windows 10 provides a new model for organizations to deploy and upgrade Windows by providing updates to features and capabilities through a continual process.

@@ -54,11 +54,11 @@ Windows 10 provides new deployment capabilities, scenarios, and tools by buildi

Get an overview of how you can implement and deploy a Windows Update for Business solution and how to maintain enrolled systems.

-

[Guidance for education environments](guidance-for-education-environments.md)

+

[Guidance for education environments](windows-10-guidance-for-education-environments.md)

Find resources to help you plan your deployment of Windows 10 to desktops, laptops, tablets, and other devices in educational institutions.

-

[Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md)

+

[Windows To Go: feature overview](windows-to-go-overview.md)

Windows To Go is a feature in Windows 10 Enterprise and Windows 10 Education that enables the creation of a Windows To Go workspace that can be booted from a USB-connected external drive on PCs.

@@ -75,9 +75,9 @@ Windows 10 provides new deployment capabilities, scenarios, and tools by buildi [Windows 10 servicing options for updates and upgrades](../manage/introduction-to-windows-10-servicing.md) -[Deploy Windows 10 with MDT 2013 Update 1](../deploy/deploy-windows-81-with-the-microsoft-deployment-toolkit.md) +[Deploy Windows 10 with MDT 2013 Update 1](../deploy/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) -[Deploy Windows 10 with Configuration Manager and MDT 2013 Update 1](../deploy/deploy-windows-81-with-system-center-2012-r2-configuration-manager.md) +[Deploy Windows 10 with Configuration Manager and MDT 2013 Update 1](../deploy/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) [Upgrade to Windows 10 with MDT 2013 Update 1](../deploy/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) @@ -85,7 +85,7 @@ Windows 10 provides new deployment capabilities, scenarios, and tools by buildi [Windows Imaging and Configuration Designer](http://go.microsoft.com/fwlink/p/?LinkId=733911) -[Windows 10 and Windows 10 Mobile](../index.md) +[Windows 10 and Windows 10 Mobile](../p_ent_nodes/windows-10.md)   diff --git a/windows/plan/prepare-your-organization-for-windows-to-go.md b/windows/plan/prepare-your-organization-for-windows-to-go.md index cf0638b73a..8c14a856c0 100644 --- a/windows/plan/prepare-your-organization-for-windows-to-go.md +++ b/windows/plan/prepare-your-organization-for-windows-to-go.md @@ -109,7 +109,7 @@ If you want Windows To Go to be able to connect back to organizational resources ## Related topics -[Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) +[Windows To Go: feature overview](windows-to-go-overview.md) [Deployment considerations for Windows To Go](deployment-considerations-for-windows-to-go.md) diff --git a/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md b/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md index 5b2b71a83a..41a1cbce6f 100644 --- a/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md +++ b/windows/plan/security-and-data-protection-considerations-for-windows-to-go.md @@ -60,7 +60,7 @@ Windows to Go is a core capability of Windows when it is deployed on the drive a ## Related topics -[Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) +[Windows To Go: feature overview](windows-to-go-overview.md) [Prepare your organization for Windows To Go](prepare-your-organization-for-windows-to-go.md) diff --git a/windows/plan/setup-and-deployment.md b/windows/plan/setup-and-deployment.md index 28d4166bf5..f52da706cb 100644 --- a/windows/plan/setup-and-deployment.md +++ b/windows/plan/setup-and-deployment.md @@ -34,62 +34,29 @@ To use Windows Update for Business, Windows 10-based devices must first be conf Windows Update for Business allows administrators to control when upgrades and updates are deployed to their Windows 10 clients by specifying deferral windows from when they are initially made available on the Windows Update service. As mentioned, there are restrictions as to how long you can delay upgrades and updates. The following table details these restrictions, per deployment category type: - - - - - - - - - - - - - - - -
-

Group Policy keys

-
-

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\DeferUpgradePeriod

-
    -
  • -

    Values: 0-8 where each unit for upgrade is a month +**Group Policy keys** -

    -
  • -
-
-

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\DeferUpdatePeriod

-
    -
  • -

    Values: 0-4 where each unit for update is a week -

    -
  • -
-
-

MDM

-

./Vendor/MSFT/Update/DeferUpgrade

-
-

Software\Microsoft\PolicyManager\current\Update\RequireDeferUpgrade -

-
    -
  • -

    Values: 0-8 where each unit for upgrade is a month - -

    -
  • -
-
-

Software\Microsoft\PolicyManager\current\Update\RequireDeferUpdate

-
    -
  • -

    Values: 0-4 where each unit for update is a week -

    -
  • -
-
+HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\DeferUpgradePeriod + +- Values: 0-8 where each unit for upgrade is a month + +HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\DeferUpdatePeriod + +- Values: 0-4 where each unit for update is a week + +**MDM** + +*./Vendor/MSFT/Update/DeferUpgrade* + +Software\\Microsoft\\PolicyManager\\current\\Update\\RequireDeferUpgrade + +- Values: 0-8 where each unit for upgrade is a month + +Software\\Microsoft\\PolicyManager\\current\\Update\\RequireDeferUpdate + +- Values: 0-4 where each unit for update is a week + +  Administrators can control deferral periods with Group Policy Objects by using the [Local Group Policy Editor (GPEdit)](http://go.microsoft.com/fwlink/p/?LinkId=734030) or, for domain joined systems, [Group Policy Management Console (GPMC)](http://go.microsoft.com/fwlink/p/?LinkId=699325). For additional details on Group Policy management see [Group Policy management for IT pros](http://go.microsoft.com/fwlink/p/?LinkId=699282). diff --git a/windows/plan/windows-10-compatibility.md b/windows/plan/windows-10-compatibility.md index 0d588136e8..1f9c40a938 100644 --- a/windows/plan/windows-10-compatibility.md +++ b/windows/plan/windows-10-compatibility.md @@ -38,7 +38,7 @@ Historically, organizations have performed extensive, and often exhaustive, test ## Related topics -[Windows 10 servicing options](windows-10-servicing-model.md) +[Windows 10 servicing options](windows-10-servicing-options.md) [Windows 10 deployment considerations](windows-10-deployment-considerations.md) diff --git a/windows/plan/windows-10-deployment-considerations.md b/windows/plan/windows-10-deployment-considerations.md index cc72629422..422ff1b3af 100644 --- a/windows/plan/windows-10-deployment-considerations.md +++ b/windows/plan/windows-10-deployment-considerations.md @@ -125,7 +125,7 @@ Over time, this upgrade process will be optimized to reduce the overall time and ## Related topics -[Windows 10 servicing options](windows-10-servicing-model.md) +[Windows 10 servicing options](windows-10-servicing-options.md) [Windows 10 compatibility](windows-10-compatibility.md) diff --git a/windows/plan/guidance-for-education-environments.md b/windows/plan/windows-10-guidance-for-education-environments.md similarity index 100% rename from windows/plan/guidance-for-education-environments.md rename to windows/plan/windows-10-guidance-for-education-environments.md diff --git a/windows/plan/windows-10-infrastructure-requirements.md b/windows/plan/windows-10-infrastructure-requirements.md index af899becf8..0718fc8270 100644 --- a/windows/plan/windows-10-infrastructure-requirements.md +++ b/windows/plan/windows-10-infrastructure-requirements.md @@ -44,7 +44,7 @@ For System Center Configuration Manager, Windows 10 support is offered with var   -For more details about System Center Configuration Manager support for Windows 10, see [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](../deploy/deploy-windows-81-with-system-center-2012-r2-configuration-manager.md). +For more details about System Center Configuration Manager support for Windows 10, see [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](../deploy/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md). ## Management tools @@ -110,7 +110,7 @@ Note that Windows 10 Enterprise and Windows 10 Enterprise LTSB installations u ## Related topics -[Windows 10 servicing options](windows-10-servicing-model.md) +[Windows 10 servicing options](windows-10-servicing-options.md) [Windows 10 deployment considerations](windows-10-deployment-considerations.md) diff --git a/windows/plan/windows-10-servicing-model.md b/windows/plan/windows-10-servicing-options.md similarity index 100% rename from windows/plan/windows-10-servicing-model.md rename to windows/plan/windows-10-servicing-options.md diff --git a/windows/plan/windows-to-go-frequently-asked-questions.md b/windows/plan/windows-to-go-frequently-asked-questions.md index 47da55d191..9cc46f790b 100644 --- a/windows/plan/windows-to-go-frequently-asked-questions.md +++ b/windows/plan/windows-to-go-frequently-asked-questions.md @@ -436,7 +436,7 @@ There is no support in Windows for upgrading a Windows To Go drive. Deployed Win - [Windows To Go Step by Step Wiki](http://go.microsoft.com/fwlink/p/?LinkId=618950) -- [Windows To Go: feature overview](windows-to-go-feature-overview-scenario.md) +- [Windows To Go: feature overview](windows-to-go-overview.md) - [Prepare your organization for Windows To Go](prepare-your-organization-for-windows-to-go.md) diff --git a/windows/plan/windows-to-go-feature-overview-scenario.md b/windows/plan/windows-to-go-overview.md similarity index 100% rename from windows/plan/windows-to-go-feature-overview-scenario.md rename to windows/plan/windows-to-go-overview.md diff --git a/windows/plan/windows-update-for-business.md b/windows/plan/windows-update-for-business.md index b936f37735..21bb74847f 100644 --- a/windows/plan/windows-update-for-business.md +++ b/windows/plan/windows-update-for-business.md @@ -65,44 +65,31 @@ In Windows 10, Windows Update for Business recognizes three deployment categori Both upgrades and updates can be deferred from deployment to client machines by a Windows Update for Business administrator within a bounded rage of time from when those updates are first made available on the Windows Update service. This deferral capability allows administrators to validate deployments as they are pushed to all their Windows Update for Business enrolled clients. The following table defines maximum deferral periods allowed by deployment type: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
CategoryMaximum deferralDeferral incrementsClassification typeClassification GUID
OS upgrades8 months1 monthUpgrade3689BDC8-B205-4AF4-8D4A-A63924C5E9D5
OS updates4 weeks1 weekSecurity updates0FA1201D-4330-4FA8-8AE9-B877473B6441
DriversEBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0
UpdatesCD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83
Other/non-deferrableNo deferralNo deferralDefinition updatesE0789628-CE08-4437-BE74-2495B842F43B
+Category +Maximum deferral +Deferral increments +Classification type +Classification GUID +OS upgrades +8 months +1 month +Upgrade +3689BDC8-B205-4AF4-8D4A-A63924C5E9D5 +OS updates +4 weeks +1 week +Security updates +0FA1201D-4330-4FA8-8AE9-B877473B6441 +Drivers +EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0 +Updates +CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83 +Other/non-deferrable +No deferral +No deferral +Definition updates +E0789628-CE08-4437-BE74-2495B842F43B +  ## Related topics diff --git a/windows/whats-new/TOC.md b/windows/whats-new/TOC.md index d1840fd5b8..3e1b376ac8 100644 --- a/windows/whats-new/TOC.md +++ b/windows/whats-new/TOC.md @@ -2,10 +2,10 @@ ## [Change history for What's new in Windows 10](change-history-for-what-s-new-in-windows-10.md) ## [AppLocker](applocker.md) ## [BitLocker](bitlocker.md) -## [Browser: Microsoft Edge and Internet Explorer 11](microsoft-edge-and-internet-explorer-11.md) +## [Browser: Microsoft Edge and Internet Explorer 11](edge-ie11-whats-new-overview.md)) ## [Credential Guard](credential-guard.md) ## [Device Guard](device-guard-overview.md) -## [Enterprise data protection (EDP)](enterprise-data-protection-overview.md) +## [Enterprise data protection (EDP)](edp-whats-new-overview.md)) ## [Enterprise management for Windows 10 devices](device-management.md) ## [Lockdown features from Windows Embedded Industry 8.1](lockdown-features-windows-10.md) ## [Microsoft Passport](microsoft-passport.md) @@ -15,6 +15,6 @@ ## [Trusted Platform Module](trusted-platform-module.md) ## [User Account Control](user-account-control.md) ## [Windows spotlight on the lock screen](windows-spotlight.md) -## [Windows Store for Business overview](business-store-for-windows-10.md) -## [Windows Update for Business](windows-update-for-busines.md) +## [Windows Store for Business overview](windows-store-for-business-overview.md)) +## [Windows Update for Business](windows-update-for-business.md) diff --git a/windows/whats-new/applocker.md b/windows/whats-new/applocker.md index 3e605c56f0..5f46e6349b 100644 --- a/windows/whats-new/applocker.md +++ b/windows/whats-new/applocker.md @@ -29,7 +29,7 @@ In Windows 10, AppLocker has added some improvements. - You can manage Windows 10 Mobile devices by using the new [AppLocker CSP](http://msdn.microsoft.com/library/windows/hardware/dn920019.aspx). -[Learn how to manage AppLocker within your organization](../keep-secure/applocker-overview-server.md). +[Learn how to manage AppLocker within your organization](../keep-secure/applocker-overview.md).   diff --git a/windows/whats-new/bitlocker.md b/windows/whats-new/bitlocker.md index b88ada4195..9e9c10c5ac 100644 --- a/windows/whats-new/bitlocker.md +++ b/windows/whats-new/bitlocker.md @@ -43,12 +43,12 @@ BitLocker Drive Encryption is a data protection feature that integrates with the - **New Group Policy for configuring pre-boot recovery**. You can now configure the pre-boot recovery message and recover URL that is shown on the pre-boot recovery screen. For more info, see the "Configure pre-boot recovery message and URL" section in [BitLocker Group Policy settings](../keep-secure/bitlocker-group-policy-settings.md). -[Learn how to deploy and manage BitLocker within your organization](../keep-secure/bitlocker-overview-roletech-overview.md). +[Learn how to deploy and manage BitLocker within your organization](../keep-secure/bitlocker-overview.md). ## Related topics -[Trusted Platform Module](../keep-secure/trusted-platform-module-technology-overview.md) +[Trusted Platform Module](../keep-secure/trusted-platform-module-overview.md)   diff --git a/windows/whats-new/change-history-for-what-s-new-in-windows-10.md b/windows/whats-new/change-history-for-what-s-new-in-windows-10.md index d767164865..2844e6f47f 100644 --- a/windows/whats-new/change-history-for-what-s-new-in-windows-10.md +++ b/windows/whats-new/change-history-for-what-s-new-in-windows-10.md @@ -53,7 +53,7 @@ This topic lists new and updated topics in the [What's new in Windows 10](index. -[Browser: Microsoft Edge and Internet Explorer 11](microsoft-edge-and-internet-explorer-11.md) +[Browser: Microsoft Edge and Internet Explorer 11](edge-ie11-whats-new-overview.md))

Updated to include the "Applies to" section

@@ -67,7 +67,7 @@ This topic lists new and updated topics in the [What's new in Windows 10](index. | New or changed topic | Description | |---------------------------------------------------------------|-------------| | [Security](security.md) | New | -| [Windows Update for Business](windows-update-for-busines.md) | New | +| [Windows Update for Business](windows-update-for-business.md) | New |   @@ -84,7 +84,7 @@ This topic lists new and updated topics in the [What's new in Windows 10](index. | [Security auditing](security-auditing.md) | New | | [Trusted Platform Module](trusted-platform-module.md) | New | | [Windows spotlight on the lock screen](windows-spotlight.md) | New | -| [Windows Store for Business overview](business-store-for-windows-10.md) | New | +| [Windows Store for Business overview](windows-store-for-business-overview.md)) | New |   diff --git a/windows/whats-new/device-management.md b/windows/whats-new/device-management.md index 97e1081acd..35914b826a 100644 --- a/windows/whats-new/device-management.md +++ b/windows/whats-new/device-management.md @@ -111,7 +111,7 @@ Active Directory blog posts on Azure AD and Windows 10: [Microsoft Passport](microsoft-passport.md) -[Enterprise Data Protection Overview](enterprise-data-protection-overview.md) +[Enterprise Data Protection Overview](edp-whats-new-overview.md))   diff --git a/windows/whats-new/microsoft-edge-and-internet-explorer-11.md b/windows/whats-new/edge-ie11-whats-new-overview.md similarity index 100% rename from windows/whats-new/microsoft-edge-and-internet-explorer-11.md rename to windows/whats-new/edge-ie11-whats-new-overview.md diff --git a/windows/whats-new/enterprise-data-protection-overview.md b/windows/whats-new/edp-whats-new-overview.md similarity index 98% rename from windows/whats-new/enterprise-data-protection-overview.md rename to windows/whats-new/edp-whats-new-overview.md index d56f40ee4e..d5a8f8ca05 100644 --- a/windows/whats-new/enterprise-data-protection-overview.md +++ b/windows/whats-new/edp-whats-new-overview.md @@ -12,7 +12,7 @@ author: TrudyHa # Enterprise data protection (EDP) overview -\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.\] +\[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. An app that calls an API introduced in Windows SDK Insider Preview Build 14295 cannot be ingested into the Windows Store during the Preview period.\] With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data disclosure through apps and services that are outside of the enterprise’s control like email, social media, and the public cloud. diff --git a/windows/whats-new/index.md b/windows/whats-new/index.md index 6258942dfe..69f671b735 100644 --- a/windows/whats-new/index.md +++ b/windows/whats-new/index.md @@ -40,7 +40,7 @@ Learn about new features in Windows 10 for IT professionals, such as Enterprise

BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers.

-

[Browser: Microsoft Edge and Internet Explorer 11](microsoft-edge-and-internet-explorer-11.md)

+

[Browser: Microsoft Edge and Internet Explorer 11](edge-ie11-whats-new-overview.md))

Resources to help you explore the Windows 10 browsing options for your enterprise.

@@ -52,7 +52,7 @@ Learn about new features in Windows 10 for IT professionals, such as Enterprise

Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications. If the app isn’t trusted it can’t run, period. It also means that even if an attacker manages to get control of the Windows kernel, he or she will be much less likely to be able to run malicious executable code after the computer restarts because of how decisions are made about what can run and when.

-

[Enterprise data protection (EDP)](enterprise-data-protection-overview.md)

+

[Enterprise data protection (EDP)](edp-whats-new-overview.md))

With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data disclosure through apps and services that are outside of the enterprise’s control like email, social media, and the public cloud.

@@ -92,11 +92,11 @@ Learn about new features in Windows 10 for IT professionals, such as Enterprise

Windows spotlight is an option for the lock screen background that displays different background images and occasionally offers suggestions on the lock screen. Windows spotlight is now available in Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education. For managed devices running Windows 10 Enterprise and Windows 10 Education, enterprise administrators can configure a mobile device management (MDM) or Group Policy setting to prevent users from using the Windows spotlight background.

-

[Windows Store for Business overview](business-store-for-windows-10.md)

+

[Windows Store for Business overview](windows-store-for-business-overview.md))

With the new Windows Store for Business, organizations can make volume purchases of Windows apps. The Store for Business provides app purchases based on organizational identity, flexible distribution options, and the ability to reclaim or re-use licenses. Organizations can also use the Store for Business to create a private store for their employees that includes apps from the Store, as well private Line-of-Business (LOB) apps.

-

[Windows Update for Business](windows-update-for-busines.md)

+

[Windows Update for Business](windows-update-for-business.md)

Windows Update for Business enables information technology administrators to keep the Windows 10-based devices in their organization always up to date with the latest security defenses and Windows features by directly connecting these systems to Microsoft’s Windows Update service.

diff --git a/windows/whats-new/lockdown-features-windows-10.md b/windows/whats-new/lockdown-features-windows-10.md index 460a0a1dde..8bba0deb3b 100644 --- a/windows/whats-new/lockdown-features-windows-10.md +++ b/windows/whats-new/lockdown-features-windows-10.md @@ -61,7 +61,7 @@ Many of the lockdown features available in Windows Embedded 8.1 Industry have be

[Dialog Filter](http://go.microsoft.com/fwlink/p/?LinkId=626762): suppress system dialogs and control which processes can run

-[AppLocker](../keep-secure/applocker-overview-server.md) +[AppLocker](../keep-secure/applocker-overview.md)

Dialog Filter has been deprecated for Windows 10. Dialog Filter provided two capabilities; the ability to control which processes were able to run, and the ability to prevent dialogs (in practice, system dialogs) from appearing.

CAI~dp^HKXYoK=25=i6R`cqH@#ay62pnbv z%rpo^5^nkaz$yZZX;XeIu0ve;zqiKz0|x#-{r@i={{Ws4s|no)THJw%HyOXV4`#D1?w8JEn;JRvVQ8jfPYAt3kq3)Z%w1{ zvXD0=ajRMFWS5qFT#fiIm1lIFCE9N*|4(6W0oG*O#*JeKn24BQ0V**O2}ui-R*6YY zq+7a&ilDS~gMf65kY-Fka&(PGX&AWxwlVnbd*gZE=ly^GyO+EkIxM<&=e1jBPP;3q zHqX_BO2$)hb?@=2C4If^j-;~u-kD7)?QXjtTf-GjBhm?FT^*|*sX6w8sla|+J7spN z$yRc)RMV;R5Sc?rsMT+J!zA(O>muIYSr5Fb8YjfkTO2dCfi9oQ$T?x&buu4j`{TtC z`32Q}8O9J5L-Aa$p;W<_s5(yeYUWbWx5PHt4nItOtKO!?*2xCs4V=UoPgYg&qPV=D z%~q`5yGcMym`0Sxi7sW{$=pwEy=4`qXNK8g?8XKaNly=nrN%UKEc<66>am#oq)9;! zaw=>t6Q-q8b#orGBM}Duc$I+Oc|N1UcbtLjU_=&Vi#1foiG4F;sX3QcG&#sz+2^?olZ6^g|n5d5nb;!6sfztpquC&c$wu0=NM zR%H&ky$NdT>x&Rm3()P|m4|oIE~ZFV?;Ff| z{NTgPmRz;!!f2eBeALCP8v@rm`kt$n9*1t+@=mnsdy!SP6OJi(gF4>vrmH89uT~|k z%edO%kU1**nW|Hcu}eJ_tL3`;+X&UVlCxDiURD`ir4zomDkgb;A5~PCDtbaU%n&vR zl_0ZFKTG<+XFflXBXC1Lq#STxU9Do0cf89buw`a5?D#pXp=RP%F{JTzY5w01vRdxr zLs8!+TZ>Jwi~WdrS9ObWWR3KuvM%DhcFCW#`g!P#KkzIXfPeZ;btkh}p43DhWHawY z%nP$~e;$$Z3SO}dGsyJw?z!<1HF{kfrAp9_sa_ASE}1lI?l`f1C<9&jUCHiu{&(Sx zQ<8_5Te;Qjk7XZZx6_0s!M%wAEpnv}>u;TEsbQP#O`meqoljXf+;OV9eW><1xQ9V7 zw+=18g;Ps~BcCTxA~b$#8>V0X+8~1d3ORr*VD!@;XKp;+%MYos7p)qUIbXpP`#wg) zlwHS_{o-pc_o4Jd4&7t(0o{d{j4oY}lx>%7$uX}^d;Fmd`^fzBp`7XoyTqmQ<~r#+ zY2+EHO?f_9$l`HS;&@=`b!gTVgt*A_l})( z?zm4Gd(yXoa^O@sxP{HAwS$Zu+-YyGCnybOq-F8b4GEm1y6iuV(Hl8O>1jQ) zk!Ghdvil6WuC||_l=e8+vN$xM^Ii+wDf$2xv{^u&yK7a(T+d=tuu*N6b8@> z1-#O{vI%>{S=yFdx!sHaY(555kWsRsksv-P3%f zp=84wk-E+IRazfk`J;a)y|u?g--vaw8?g)b{1Ys-vo#fr^7EX>tYhHP%rk_+wiCBqa&pPV9PZA1yS@yL`yR$BKA$9?`s>(nWy-GdnLrhI&?dC#P z*f;YZODo?`fALt^bXLBKXEBVoBh$-7&= z?2ZxDVYiDiiCb4M8Y}eR<+A?hhfes22vof+hOf8SzPa#rp8s~usQrG>h`t8g_j7oA z`yAO@fk6T|_YJ1WlKb)_HBXdYcmE2%&ip7Cw61u(LS12wz+hbt{Nd z*d{xM%#1+D+0RhZc`vL%#3aMI&QU909Acu1PHP8s-FueuF4(u`zEff~*Mcz3h!|^1 z;W}dzT8aQ_5y}hvR^s&J*mRhR*jCI5VRz0GPtrXp>7SlLH&H9Z#=hW-f;QX0semG> zK;IS@w(h8Osb1FD?y!dvk-ncs@^SScrmR^9=SnR!g;QuEyx$=kDqfHOTmX+`GFtK3 z#@y*@J{AC+HZXmp$RS#!r)w&wJi8f9l?s)6&lGYeX>cKB63btj?0?fB7tUw21ntxEF%#lfgnyZ}=`oUA}HM-CWk* z<2HiaZLG|@BXMz=AJL$>!+n_j@^B!y$2QOEevyh(chpfmCaIb8cEO_p{xHn1Xfr>* zXl&qXVjGr!ZiFrW>kJQ4*}Bfh@g}$*Pd+r43w!Byo7YJHgf0ubIb*!IoQ?Vkk3sDI zHi?Bll)BN!R>M|a-_ZF)T_iKN?r&!xFnUQm%u0XGfB_${tJ?*^xM?B_NoSHtCIs6- z_V?$={Vws(Jz08$1vC!9#m@qpn+jd}K;(-jP0$1w?H{M@&A#N^0DK>0{kOi5R+~}jv9ks@qvXm?wJZpF(u`Q2G zUd}b;FkMhOoHy`DnkRuNyRWnC)N@q$6UBahF0U1nQfJQ^bBE`4ECg){u_0R}UZo=K zhZ*1oBm;wpJk`u`?Nx`s81i$slpy!UyBncXaPxbzzh7MFk>TwM9jS{S7_R(X+Ke@7 z4%dWaEW}5~uAj|t@Cvpn-Bv-Xx`~2k#~2ulP#t#5n73y$6;ce1)D^arU@N~ZT1Fh1 zOKQ{7(p&hi_FO~+z}2J#0iyx~X$Qv%_bZzX+I?eocXjIvPi~mg7K4zWHrv5c@f!nkVD9mQdK!XhNJh^2Fx zy;|sZ%V?~TBlem0FB6IZKDcWQ(x;!%eMfDT#B6owJM17kI$F|EtHTZzYAso_Ge2*L zYx%@`S&JuzT6x*NJ)87B{9(Gdg|b#+F+nmeuMTKef*}7+vYh!cb5)6ZY#hI!>-&d& z(H~{hZ?@=t`CC^M(O9_lCyAHY!QQrm-|&Q$wX*XE$qF`#f_+43#auT4rH(f!fIT|}GpWYh3_EoV<8p*UF@~(*Y>%P|bo%eB(4zIWZ)!VoyPd!`r!akK4 zRTpdCxql|n%BXTU5p89h{nwu2HPK=UDQ^lGj`HA@h&6SJwmnWJ%1WF^7f3s~tbQ`- zXqGr%gU(0PyGioQ*C^7BhJbA&pbv{Jl`7e^O9z~m>)`82zUI&i3E`xycmFE0Hd7`zO;cj>Z2YkX#5DFlJP z@^k>xs{HT_mHdMZZ8VrtwcRUi>$CZ0NoQ7lX?JN%+5d9O#SbtuLk+Ddl*V&cFH zft!KwQ>z`N+1WW-60r+St6DvT8j;kiaoqd65C;YzhP58O2=d{p7z%ksLE78T>agr$ zj=}Q8%bFk&UzF6_*=Ud56)wfv8)^NsK}Y1A2r3L@P?8&{>_eB z0(4>+ah!KpYGkv%qN>wp_94+ztM&vPTzk@@2U(_hBdw&fI>wk;dPyS_+57~5LgEjim=1?8K)LCym$FYoYbG5_p~ zOkL8lv$t>HE_VXv zKfrqbP4)--`#%}L0FK}f2PgFNtpDT&>;9*lx6bUyY7Og?qlGRCW;m4pL~3^q z_2j4xbyE2`ih^O^eV=^hWcQUITJ>a(&vXe0@<*@Jd-VA*((Gmg!k9 zH?R5?s`YoNc@fN;adrNzU$CSjaH}Cfeul4IB>WfCvXQXQOjB*mBDD<953IYEzq(>G`QI+v=egu-LPE zBjYOpEM$`(ec7_~>33`&i!$}L`EI_nt>(RMD6U-j7B$L2#|QQ7J4WluD-#^~IdGjP zVAWlK81qr(vB02%V|EM}*#8bPfX6P#bpR0b!KDlQ`Sf1Fe}6&4)*BdVhurDpx!Z*D zKK+F0*_N6t(7}TCrKluMh6^$qfE56CKpRa~5Z5450SME@0Duqv0d5;;6@WRImzEm< z?f;hBvj{Mek^{?V>YZ6lY_S*@cnjPj@>kxSJItcZePH(i;`4UVQls~NnrH+@)(qI= z7wS$F?=KN;2GysTntyAm+q^n{HgQS4-yDzs0RzXnu66+v9Y-zcM&v2Wqv)cPz&Ff8 zaEs$BBen+p%-pJ@HEmpi-e@%^F`d5GinikNIq}}d!jR{upbOd3u~tHHd^_^oX*05- zI(lpF>URrEmA|jNi8prrTFv37#1dDNJ*(~I3E$I-mN+mZ=ao)CKg?;_IScS8Oqdr`+5=D@w z14av#U*>-XxHwLodS$ULb_N^(k$_W)CifLgH_}VeUQ=Yq{b8JbN1$ASNoj^%4qOZU z2tvXUY-RUt>hRKOn(+BCaE^^o*1AxF@<5H%dZGCR(r4+woJb`H^AO;Wi*e|yh9(ma zwYY7pN95dHNuw|GOnhau(JrqULYU||^Snz-+f3N7Up1TCwkuKRojIs1saFZ*^7uJu zBf7lOE!@(TUF!Zq^%(WM&|Ap7T@dx4#q+2jM?cJaT_3RA*{lF5ed=KQi4?wFlz5^2InB0RX zXtu!OE=cg8f&7D9dh#BiwZ*99t@WumVQbxL=k+qbf-`JBG80GXur{Z-184Hqr>GGXtIFwhLCK!D8R7jV6sMK=jn0FgnZB@7_uI+IXtn|#%hN#ZWJxUXyX9{A+ndwY{wd9;?95qpO zPbdY0+|`oSW0fpe=w7`(aJ6^#;#xbETK1Uib2UPSwMK4*uZmqoPPF7Sz?*=lEhmx8 z>I^zkJOn+KEzk+ad1;U-Feej9_&LhvDk1|GIQ(EzZQ$oStouMD-BLWM-p6FF+SEd_=`vnPf%lL2BZ`N9-jyy*Yl(<#XlR}JBkslW zAb-fRu)f-IPM~8a`P(vZhvjTjuSxobLTnbM`#Ifou&o61vlP|pyXJ*z*fz5q zON~q=4O9w0@wEIDWg*U1*W%VhK7P4)WR2&MV3*6!ny6{yxtYPj zrFen)QVzcqgD3}Eh!l<|^TOUu0!f|R1nkH>W|91ZAphAcg16Unf#eH9k3%*L6RoV~ znb(JKKG+;hDp=|SV_~4IIWebf6~jQyzJs?{+uuG<>`8^G!!EipY0BhSP+K#F@O|pA zl=17fIRNnS#o!)X7i8-lb@4JOI?0_d+ek;!eTtJ#Bb8=<9sdp=(nul5K+0SUP1|nueN#d zQpxX5S;~hGnT(BiMb4cH>Gkepm-rSYUUK9>tP=}e=-Xt6Yy+hX7ZW9StB)b`7$C}_ z0LSGCSRSH$$1|H@yQskDC`kr}4ZxexSEPWZfdyh990C{pfOq5ufdfECfbLL5ec*X> ztSg&2Z{W?FtazdxJUy!6w^&@In>^;z#i2{>_bRp?{e&`?yMQd2E8V{TG$(UXTZQHvPCeF_6C&>Ib^+gNsvOQ>_CCQnkr% zJq_)14apBuSk5)5rYJ^OrJWr5`#br_EW3ntFp!O&ms}0ci;`wGuZ)JEc@q@uWvlW$ zEy~0mb5E%0T@N{HA>8-H_0X`Zb^&keJ}Y_hlfJ9mca*b*+QfcuUPIz4vt7EOEyJkm zIB6#nJm;u)2)Hr|sv{~JR`NRh{H$fj?4*50xIprS{`}d9=2Jp4lPoVj7ln7d(ulh& zVODQY`5=?`73tPjQ`3kCkVUlrrPI1&U&hYvbsvahnHyfuQa*iC7X5fT;5Vbkp+h}n z!y}pJs6FQ2wi0G~BhY43at76kNP+c!4PJnI>HRVrOIiFhA?@VYjo>SKP&hq{_dvZS z8xrRhb4Gg+nW5LB)rf)EZp7FT6Mz!I(Oc6Ysuch zT(lbrd9={lZ{~IR##oUQ$)pUpLx{G^OOOw?POBWJ6sv9}^bzwnlO0+fR{y^J+u4jy z1tl4tznS9X+55Y?m1suX(MmLMJ>=zo1Ai1;hy;j@z#&iUGkWW9`^XMXPMbK~JCCU`KIr#}Kq3DaH;IU4e#2%P&&$@Z!M?1g6-c+SNU7#K!(LCU7tFA) z<1xjhrAAK9i=}H8>Z~TZs(Cm^(-TLti_RiuI#zHgoTREoaFc@T2>DQI7h-dB6OESF zLiGh{Bs>sA{E&I57Oe}(4xPcOiIPj2R35m_9qQi}dCl#TH{dO+T=E{P{v>B~-4;4_ zVdz8VT{ZEkxbWus$jjipO0>S0m6c&j9-5|(%p4~?M;REsH2cVLJP%6h&OeZpGH&pt z=2EBDAd&0%k-X5X*Ls1P^W4WjG_YQ1s;}#Hr~&U=k! z2AxbhxO6Y$wu-|$Ep3B{0Z8h5^6l>G%6+~$P=fry+B*4@PT)PS^Q-}yC`sY<&-2m! zhum-iUU6*uMpo}sPQSfoJ~?>JtmIW#u*_c*WfLR41Cs~BIR%gS2H8YdxsYdQ_uc@v zhm^oATTP(}Miq~u;w*_1XNCWCBONZQ^yZT*1Q2CaJq=@vtgwi@@l2i7O_$@vSPv(Q z2UTxa-OcokWc~vC*iN5rlUW3RA>@!7mTBXKitG8ZwR`|N0H0Ba#mMl8ss^q)geexx zcfFMn=;j7Okq_|NV<2Y1y(1dmfm1$u0&R~3WIdo`Gywu*OT^PDCm4rt(=< zv~Y`m=V+W%qJQ&Voy-E!i^+m*v`$tnMnzAZ2Z$HkaS-vO`eB4#V4=fiS-rz{i?sZMiIL&see1EpPt+V~oV_ztV7%>xgy;PoEQgZAgWQ4>zrmQdwk zWQpgv9=<0thM$Or<-cYv@xh8YRoA6RdM5!gM)8?@rV+lwp(MX z6zCApqD5n(dq8RCdO>Sp<#NuwgK0w}&*a8$jG0>SGuFNBIhDE=?Q(vb5s3c@jDHje zIb)OTT1Lk%3osJVoeUeqAp~=Pg9)!+d<w?EuyXsNz#$WI@2 zfqq1un_y(Bk`3u%nTQ|!s^N|H>$>2AJiv?zMDCuCRG;`7;2~=6L@Z$NRKU-Y(-d9% z@($lLDq#9TJmSAzablU#61T26d)BQI?xMnCaev^T>YT`08>en~K~{2(_}~oW(gpRN zD@MShaG%z7>ANk@1gQDjEMSf>{E`HM1aTsEd3kwZVPR)yXZ7r69f0UB2ldTPnHZn8 zW@^_BP}X>fc$Hik*~YP5wyFAh_mP*% z2Uhd^z*9(oN2(npVu?iJ?Ck8{zkf+2QWCxPv3$L5gyK&Tn|J&*&eBoi-rMRVGE3gs z!79%0mDS(P;%loHeL3uVFc(xqO_D>F#`3l2{rVB=`tp*vHjoCoAQCGM4h|*Sd{c<3 zk$K09`~}Y@Af6i0zu&oQkRy8ixnt4VIvfQ~ijRno7%&c8f^!J1gl+n?g;B)ohoMSGhamO zyz6B2bf|^sml&8UK5}rWjX1m3i}QJfE3|H(ea3O$dtu_++JVechjbBjs%9r-xInki zLRhB_lk(Yl?$uRo9^|I_U*%#R&heq2rOvGP;o0)Tq1EQ2bDiI|_UAw&TudMKujGWJ zxX9F(at!Mju5XNO;Kk=>zQf*I?fHaBrFAT@b9Qu83vfENhuXaITu@Im?wy}ffi*iY zOzB6crm9LJM_h}OtrdUm1v|+2!;a0TA_>@OSA4J3G%hQvY zuoX#Ria5IH?iz}3teK*YY0{gS4C$~of%{0zueP!MxaTB?TdhQi)!^F(6 z2bOY>;gVeBcS=7DJpm7SFl6O4 z`LYI!yK`gi4*tFF$5OUUs7H8iu_o|?6Jk|j)h>SOd|1H$=R5bLT zjDB`QuGV9mB>uN!4AiUOP5d#>KD>5i7IKP*=K|$$O?RP(((Qs!0O0mn|fj^h(!uA{=7(ajK z+|0x*dgEcwvYD=LJd{dUW4vYm(zC`)P}P_GPF{YB;(EhL6H8Ss&xxOW`!5NW<^0^aRHB|XKK>`}v@n8doia4f8lMKQ zNF)Xa2diNyNm8CWWxtV`mE%=9Mi}6b#s+Yr2q&B5S`Z<%wLCGJe1*VK`rEpa_2JRu zO#PqQE)5$8tGzkp{MFSpSn#IIfmGP&+|?C4UpHjI?`%v@F+>Pe60ylrvbj@IO1@yar*)Q8K9e+_al@_j?4LAMPq za*dr-h;OfMSw7X**L#UHZyisN92`EPX8oGyh0GnJ1sRhfYhl=RZ!{6 zc(_z?W%z?6B!d5AjQUfSXUEB6aT$2Kmkt>hrQW_}&%rjF#KUcpoN78BpM0gb=HpZ@ z7+}To#Gb?z)c7WgItrH9v|n z)DnF@_d@+$Q%KnAO+sUl{nEPjeW{>x2?p5ow~~pR)|361HnuDTp& z2%~#P^@%Zq`0Xd~6Y(}VxmO9H{+8A-)Afjfws9fZXrJvDg`sKYWHswLnipY8|^R}>>{ zEp@8E_u=H>>zsJ=Kje)l9SgCm0#ev0*34AA#?z`hc`Q_7P{cDRk2%o_Y_y1U)U zi!vHf2K%utiRb3~8SIbr!EuAt?NWEY9eQNFks~HJByLseDQ>B(Zk4Ee>eYan1Zwyd zrb$hAhCsOWFrnN}vEU|(M z#YJiHpB5XJk#&R3V_Qi5UjERq>i#xfp9mNO&R=5=)6mcWIGC6429?74jaTa4-;5sH zs_j&E@`b&3fy48fc++dl5JmGGs-C#)Bp5a3he6wT{-kCv2i7eK~FulH~>2b zLIThc3v|Gfgfj$H^jCh>Uv+T~>T+^LmJ}hCAZ6C^J5Ql3&q0N9!I5bbMJ0Mn`7W_jZ8x|*B&o<|u4$+wwOR1nx6!EMAzB`?ljCD)u0jsqqz>wwkZ{BMG&W&jMqd(UK`$r5(d zr#EYCW-rmK1|vTM-3IpDNiMl3E}_cSm2cMgekrus-V~x65YeEs#$0w)y-)>%8@2In z@4>OkY>M5WSr8(s4I$EUfm!G2=2BqB;nkry@4jYB%d#1a)#K9YA=%uomTl+Zmlqh3D1$EAY0TX`p(HF0NUqOZS`2 z*X_Mg%2)P*8WnMeFWXP~wpvTh>XfYH-9qs7vb2V&jTb*Y-~R&Zpu@2n33ZvF1P3vI zLsR|a{}&hfWja@@SD^x(CDa~D|AuqHuoTJy#aJ3VyIJvGH_8@%Uo+>Y{QR zp%V8!(l_5*%S_ZWicL%O;xRN#YRp074FY`gtq%a4r6*!3q*tt6=uBMoy!?7fx+G(J zI8>xcZ7hiT6aBY}H~J>XI6mi9&cH=k5SzssXwUD%GavRsQ&(a z;3tYC4T`PejLBS&s{~Rrq82_P`O(k?s>^U}+s-r7O{ReONR!>cm0U~8J`VPwE_qhz zNce1fSdPtXG|ZCsL`3gPxY}kE?8Elti8&1LLxDp>Lq8W{IFlV?slyi9WjgnNFOIC7 zGhVeMoa7ldaC*ycWGGKEUTR!6o@?G?z{v#6&a)x;Q`JcOc=u?411DE1MRyH17{9@) zleR0%%ga$HcDnV5Q%dyVd0cjWS%`K*hataFs7S<6GOk^A~E^KUM7Y*~>ycxxHn%j+&8lLc0!TOC5 zVWTHRxu^3l?=-ZELuzBC@?p%IPQ>=DRBSz94)J*N5WwC%ZdwWHbtg|b93(~Peqf)N zrK&z84JOE1uuVju;_)rSndhr%_R~z+;tr zFJN(akz}?lxbGjv{^yk*--N<&jQ@>uXz>j_0=mCTTHSRg;bwAx*aygqVVsRZJ^oVy zzYi9qM>XGo!oa^g90*hZ9smQUjrFG+oiNYs<#E_;I$=EB{zhGHS{=A`0SI=$Sn2BI zm!%{Wd=s10?ztWDX|MWqAe7jvV;YG2=poiWffUfhbs!0B4QL%;oc}B5Rtvohoo!kG z7tjKPXf*LaPc=;Xk_!R0g(HAEK*#0m^$&l6H8KD}*fcBnN{i*_9sHjUwCXqj5&q@) z{^!FqW?!4xMIErvq|P*^%yO?2h>O#hJtCQo3OInUVoRh3MIqv@pr%adiVnJi8eVaE zeL!)dqH^voC2_Ndo<9Bp&byMI(doII2!jd>FJoIEG+o!awITX9(Yv}Zm|(_@DwVJ} z9(iT;d?!BRf*VuA^+HDoi`i~@MwHpOmF9kVM{CZ*xJT~hH%Y^ZdV*ylood2%=JhP_Unb3Ou!L}yCVxf8=B0@e(ah6>;h-KbC@=^nsV?% z@*gF%gyP64xz6(L3mzWAd_T4*GEvTf8twr#{=gw98k!`DK!|f4^~N2}OSG2cJg~h) z7cf8OpHT+C{?{l2C~N_+PnVDu%lyv=(jodciO)UNYxFLZ3DF=%^dZf#9L#qxqA7l_ zFbED1#-u}gHlZ_lt4e2LY?tt9Kdlq4!C_0(vFuy5An<^Cuo6l|BSbS~`|f(^KNhpC zT=ao%JfJ~prwD)0t2lwQUep-{55;pQP4C;pTUvUGJEpGK7vau3(4vi zyWJIzEb}ou#pHMif0|xdbzc8=<1(mr<_{paiiPvB%U@s{05tw!MJ$h`4`q==>VY3O8;H%cephEg&+SrGpqqzG-Q=Og1fL?P^Mw!|G~%qFXq-2Yq{j3Xa9vp z2@L07{9l&#|DKQo((ld1LE!8Kp`&JS#l_Wfng4yeK!{k5}ypOVrm0F(Hh9L>cZ9w+j06C3@W- zcaAS|AG36%h$gop1ULOeat@fA__Lp*x3|1A{Ds?h{jMHYauF;#*BBTfdNCELO>Xla zish3Rc&-Zh2Q-YmO}3S)-nvbj3IPt4GT5JO7ofX+3j8QtrB~A!h?2c?kM7Rk zMMxx=OdDblqIBZm8E!s>6O0rEcnzc)>%vAilv5B%K%J+*4Tn{+B9qj%JvYVyx+T`g z;QX~ZAc#LVxbml2%R*sKSFt#Avtrou;|eq&;QWWCG3!qDB*Bt~rki;@H1Yw=4IoiO zzHtlUm@Y-|=j;C@w*kN{1}xFZC25=v_8H7uxCCcTf7F+Wn@Tk(_8P*<1vWhs_UR~d zls4s%a42lkDJS$`80-Ma!6f6BtPDr*BTeb&fKj5YCCTm2Ney|Oa7#=MQE0bG{w~TD zkNqa!GL`(j@qvn`W&@B9)9YbpVYyxblibASqVpdet}fAO0LAMJ`ztys5}$6WNluKrv#ikt$tj1y_N9w*6(Np+iaz z5;G_IRG}qVqqc7hmwt4I+*A#=2zoh@9ei$SYOxSK4PB399gn0(LhnRLEFI=E#Y%eQ zb7fUp!@%uxN57OVN<3jU&&z@^zm2+6VC4pcLiGBNO+zK@)S|kld`S*FXC@Q8?g;UT z91#lM7VQ`Az)fAEQ9^$!LR~QeYFVOkM^`iepR;@Pub}<`|6pRZhV!vESUqj`(08_^ zh#d;B$!-Doh(($Yy1f18SpB_# z_sx(<)Yex3B0hS1zVD(BuntFeUrhBhS_E8Pl->mZS2U7A-wTNAfar(Rcly{6*^}{j z#{+j&R@21w_w;7aEkVXMw_6e9tUX?AS0kuqB~gs zbkzQ}Y0zi2K#X27z@&E6$ZI6Gl6A`5sdi+2!n{8YdyCWyC2tW^nmj11(lqx-Jin~Q z@i_8WKgDHjfNkXls>2k)8Olf2ZUyQFTxt&fFud6-H?>+sz~ z|E#ie*2~bOtynksiF2=u$F;;!B&#H;((||DkgdG!ca0(%cgyUYgpcpnyC8%8dEDC4 z=Pu8$lev%F&LkYI4`%*)>mID5#jT|KvXDm7uUxR|S1@>>6be;_D#FWEZ9=QJFQNX} zl~5X8Q5?!s8&RRU58NN{fOC!R6?mE!&q68;ZW#w7nQp&&L6ytd=3TH11oik#oZ|4g z7xuRUZYV1jnD-j4sHp*xh#49oy-O;0``}IKY~r&uPUJq%E;;+NskOb9D#ur00~-b2Gq|AEVBZx zB8@?tHYB8m*!|ysH3Yk^gUibdj=*BTe*yHLu?NN(i1caL`5FV88=102#>HspEhov5 z4q3QtqTAZk6@hBeZ3_Qfn;`-M;E;pY&m9m3q4oWYn=Jc(6s?s3Ppe^&l~#I||K#nb F{{v`priK6j literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/edp-sccm-appmgmt.png b/windows/keep-secure/images/edp-sccm-appmgmt.png new file mode 100644 index 0000000000000000000000000000000000000000..0a9d23f405b52edb55b689cfe96bd969ffc6cf1f GIT binary patch literal 27223 zcma&ObyS?c6E{i~D^lE{$l|cLyDltH++}g6NO7s)T6`&1+@ZKj7hT-l-6`(yLchQJ z$35qsd*0^&*<_PElbK0o^2vmdkBTyAC`2d-2nc8(SxFTHgjbjd2rqh(UOttOWbpSs zB`=&+WW*6l2T69GGOsPf6vPk^%A-*4Aa9=X$e(1joe>bwVb8xWaOvc}ARt)ngCxb& z+-LVw<-s@}WZg3Z=5A~K=1Rn|&2|^7WP-Nr$)G0N3LXbyC3Cmcf%=0!DBEC+a>ma2 zo6M_eWkLY=@UMYnJWEXP4`pv(TVcLdRue^(j`p2&_EVSA)KquldLz%ndw;))&Gd`x z(N8`3X8rO}Gdezi0_oe+Pw~&8+r=l+5D;vAgy+t8np^Mqa)v*=Lks}EcrJy#hCGiB z!5c*to{su-fG!r{u z5&6m+T4`gtN1E)|I5?E$RiE1|k+6_GcT%Gh0J4#tw6jWujgO2RUmPn`(3C%xg>v93 z_5024R&H$arkV|<3E9}&3Gkd1ildiO{%bb)BV|QMj-DhYR!+`TUdZceQa_YqL`m3& zI62iPhga3dC$)PmDapgWa^@56i)pWA?19GtpGH5rh>%0MS@@w)@^CepV18AR&|qAx zh9A-nt$_0-K!;XpOSQq2{t$pb-a(REJv+)DP*75GZ~)aU0iKViYHMjxsAqoQtDs3R zgU8B3@$m66$OMCnkl2&c^aak{S}Jc{Qx<}S(ibf1rg9tExa#LBg=f@b7fk-sW5!jr_r@`OdLL`N|6X^q0o(4hnw5j z+aK=j&9(Z8lv4Jb&8k@2|J|!AaQI|G4UzMz-v5pV_-@?0WIsiuvP+5sdrbkhB8{OU zL<#zqnA`x0ubI)wuNhxjQmQ$-UtO)-8frFReG(qwRwPs9x34PlKQulTq5u5D-fqYB zb6a1JtSkiJ`6%C1pVQTWHqm)lASV#7BWpW!%%~b$L%uzNkx)|Q;kFM@umid%?0C)3 z{GPOF7n>S?!vU%Awcp4R$ZCuqvMZiJR#&n9K5Nve-!I8L$yLCT6IJ1xsT%j!+02O< zp)LDpTGv6vhHO8wy5f#6 zSmPUe$x?tpZ}*LZv2XD-!Mc-c9@(8MXtqd3R!xcCujZ$= z5SFYf1eTPcYWTzN=66%2m$=5XKPoehGAg?8vO0DiI%DU7T|!p{Y+RWUz5sI!poN8n zFZ=q)l#;)3rthSahy4kyuOMF#I(JSmGZd346_+XzJ{~7C@gd&=afNPfdSK zkaFH-TMXcgrk;x+W*%-ZAbUXN9}2yhBW6?vCZfDvGE8W5*? zy@$&qQ2a|@5uY6XSV}NzwTK;W&A~~|-a2?4)L$fmi3#}e2Rdk0?vBqR8{)_wVb4EO zsHB<11Mqd`h%eWHRB%({H>T1Sg+VX)cb@qi3QS6$J4cS4PxTR4tumLHFTS3x9Yry3 z=19p@=MVe9hX9c)0^;K1v-ZKVG2dO`LUdYA!+Ke3*`k5%l5fL&E9M`Gzu|rQAQmV> zm)Gc4+H}*yihjFIsr(F!P$$vsTb$1O;)+1A|8tMp*S4!f+JdtcC)ngG2}Gb zWuG|)re*`EVWundrAp9DrCO`GUnwYAGnTm)G^s<`0#YHun$R;e3UD$FI3OUPPhP(7 zC^3If(!}}2V+AF+|8H4~(3K-K38lsE)zA>$d@Hr(3w*3!gH^qHvC|PAG&e!5nZ&#H z?IR1;X+@z+^ExKs*v6d6WfIUc8RfUhXR%qDWKBHj?WW~ZAOl9D0#tLD>A`%dD)gOr zQXAYwV5)gj^i=0XtSZi9z1-7Oe3H2qbl>&%*6m2m;^c`fXJ=Ednf)a`IOWdn+i~WE z{CcA&i@=`buhjDjp{)x=l}M`+=tG!zk|JX8&@Je3;zlU z-_Q@wGJu(gAy-Bpab7D^yDJC7=sz*_u`vxfoyAY8XQU&Mw9&5>i-jqvpWHpcF3l))=> zC$%rL!p}0k{j;R9fhgG8F~;I5sURcS7}smiS|=ZT3P2yNm6`;*b;YL9*^KJsMB87wxE=)c9E0aPa%cJTnjWSV1t@RIL*D6D~LSlgBCodVm{|K?QgJdF3 z#xbLnDP&qq$2r7{2#Y({?W}NHVJh5s(T|FZCdaMjk~e!)0)^T6ra2}T?yr2O#t&|l zj^>l>U8DF(F<9`br%$ZIPKe(&bZzLPs=Sw5Og4ADl6$qDw9NSf|3mVsmd9)?r$2sl zZD>j0is19;#6}swg|wXyS0T2XO_-s;7oL9=&XeN(JVqY51&`euTHUf+-KrXGvdbKt zTx@+mZRh0qbnJM3I+ojmf4hmjKBraWnpPU$n%#@sn0&PJ8_Bt=m@a)?Fer)MQ2|kY zcP##8<6E}ey46V$qI)13iZ~Si6*ZWt4+xe_rACK{Kl6xs0hTRE&m=`|J+^~{4cXe< zl<_tZ@_BW?2wCchbFkgK?q7|C9~~|dmy{m5=rw-6-pf73pSM6ER@#~(uhrZlDGVQC@S5Q;wcK| zx8xgIJ@bEJ;+BENvGLMGBSm?yW54ITqh@8ynfzFlQl!reew>7 zhd?LPt&AkkT7+rJ;SU*Oj!Q4+AEz73(rYRN(U(uj z6|@KX1OX#0M{-3oXZ|20!tZvrB%VNKWK40c7vjhgv^d0T_CMK-^gjJ*7JD~sq|-+C zy6!SXh&$Odd%_wp0+20Ql1cbn9?m!Evs|=vo$B0BvolFoh}P8SW#yyCTkwO0_Loid9(*x_3z{79^ z`t#!XxBAssP`=CLr9!EC;qkPXtvJVJQ@Q%bbG?rmv~<|xlU174sKg!4%sO62qq~;C zLZl;W^u=AJXhIWgY3cAY0wvX|{a~_?)U(4>7hB~4Wu|FS8mg96?-0FBgX5$6c>$Jg z#kTsrDu;#z;$!lKTlB4(_Ue@jdwzI;$=IQ1No^ptT>39DUA1A349<>PQPJV{=cWG3 zDJqyep(nN3xO(i_{qQW8(mBwfZ{ky=iMhzU>8mGU2wYAgu>qxo8(JFlMZ8XeuIO~K#u^^30ea-QBP$6PM|?2REC zP`PzZe#b|LQk^6wWt+#V{My50__QG_r}C4a+P)yYc9$7rojDqh)J`dLp#?U!f-3R}|Nyo43De-xSdo}LO?-L!I?bZ~S zq@zg_6?^dHO&v*cqw?M4OY=Wg>F954oeq$cZus_kJB4yHE4ZEN^aYT!(7r{+{bxD7 z7usBI$cgP@CvHQsoY&xzInZ$F%SK&4ul#o#d^?ono~r^SI%4P9Q36h*)u3~`tPCNh z*=`dyCLzfR0vbNiOdj_uw8JGDs}TF8wurqt&j1#`2(m~S-fPu}&z|?NP;)?jk|XQ3 zhV7<$l*P~iKMt~{O%YS4lzbCd^`yBTClEl>*<(tSv`>iVb#YNLDZiv2(DqNN&gfu^ zWFOkm(bhRAPH4!&LHmfW5!QMlc4%3V3iFi_h^}n(TxbU) z5(0S=0%t{b^R?gkYaQp_TI+Okl{rcw2%%86xCUwR8$Q}X42V_e?&JcL0Ox((O~#;K zB@69ldnz#&V=4pSgy>E-wlOY}$h3i@;RtK|w|1rROMAqM+bAQ_X5(_NM%jp#U-cy!kU#DN08C^0G&_E%0(`Q)2t7 zdP03@?NGSxo*@!pWg|wyr^r3%kub~g2(Fk4zxa7kog*4gkg_~MwbVylsJ*-%PhhkW zZZwY|+A6KE-g?%lAT&<|GRfN)YOc<3IbNlk<0Q8szs^QoF^SrvgVFf89wzQ)2Jh^EI2wTKZ#pBy7SjN&ZW%Xv^Tj|)oSbqrw80TD3zUGaoUmF zBi$7l#sW?j@`F17VH)31&XCgu-nkGD*ZvCS%LCpV zXCYP-&%YC+<6tAbdZt(}8m!CTJ?e%Qrg?BxZPKW|jfjEGn#7tKS6%s{qS8U=?WefD z*u|C!_mw$!qfEB5f2hc^-YZo~=FY7(MWv`Az|N)xDY`{=oAyAOGXl6dHKEn`}2~VQD=iJE!u^U39fw#3TpjFGky>Iu4&t&hPUG3JeE0`=p)i zf-PjU6~Qs8rD20^8G<~XvMO<}%mmf~^4}qL)+mQdG0ce45{{^Iw9K@gQ#hBNcdo{D zm8p5)pajLG(9oW`TxxOf#+;qC^jeI0TvPR*CG;~vAR$-U)q#d|@a2e@+@mlNJ*9UT zhwRV#)nady`Di&pNY6{JhIb6DUadb1G`_5Ou{4=QjospqNeK99CAP!euMH!VKmIG( zt4MO9724WU@k@eU5<|AY z_R9-!SCsUcDo%PeIskwi0?8mWPceqU0p3%=F?hphq%HhGerbRF#zy_{4;K1s)P%Li znf>D!Y9&_)};iu`}#Bdi12+yPGn-gd1+D#`L#N3rzjW9pyl9yUFvrExI4s0Us4{ zkjg;jN*d-S-k>&=7Hv0ZykOOnoJ2!$7o&8;lf?W=;V+8xg8J!McXeugUy4kP^i@<0 zuXc`9Qzp-vCec|@X*FQ}qiKq^%~B8tHQ$zi!=m%UdeY_n$%eWE48v>eS(eKY?*S#& z`Lzx$D}|J4LXGlk^H~xY1j7>dTJsdX?nok=Gr#>I;rY}w(BIh*H`wpJzd#}j@wLF; z64Lw5uNpL?4#pwT{AX)v-9b(ky{OWj5zY)7{siTr+1TR8YPyYFdriyoD)N(W?1>7_ z`)6wA^^~u1Kl^;Ar&aoq$}Fo`8s$Bu3xPe5`|pITFQdqjiT>MN!m1b`KWm1F zT{s4C6i`fBci&2)YiF3M>mwZ#^`=zb(dJ zD(My;X%JCv%v6s=iWiVuo;Bn(j1!`co%{TgFrXiRKNkX8niA-$sJzbRG&e}g&z4kH zBDJ(7v9lz}8Ap$HcE@)PfWyaSkK~rFtbK`St|S&3x2!9aT6^=po=d6;_O9N}I?Fko z0FLC3c4G2gr3Ii90kJ9N{zjU`=&|SK^b3}~Iz1D)QGuK&jPfM48THNkf6;%j=CjBK zbn5Z?=iNC(1BDD+=xFeyvsRdLSXHio;$LNo%A=~c6`3yz(8EU7ywExVJ!%Yw{EUal zgdC9;a@t+<%jsxp6e8`T`M4=9>yV;ayctD`3>i{1tQ_RxRf8>KEa9JjGnqPRdU_HE zu#4vD?iNU(sbQDEb(Bcq@V!C!0SMf5p$yG~`SWXPLQpVYq^Bir?ZjXO(7|P6(uw1v zi0^y4gVP#=(*=cu;6oWe3Z9rOy@2d>;GZ{TI8t z!bEo2Exu4`4)qBFR1_)v9?}4*)$9(N=p)Y-nxF;)d3pPpUHMO6sU@#FM3y<|QMlTO zEvzhqf3so&M1)QY`mUnh3EsR^c-PXE^G;k(>Ql`JqJTdAb5tq`DvYN=xcB+PSAHefGHtqz$Je4BX&0aM-ib*(QYK$dnZcr}zglV)J+Tf( zGe|dM+;p~xJXxC*AG=j~3n$#1Ey9*dZPw(bk}+?{i8aoM=p$vMro)|yl;@0Wy z`}{^~HHE~NJ4s(_Ufl_l;vRk?2{o{gKcs=9|+ShGgc~KJjYS7;GRQgtezna{k6%LF3=AAwvtgFXw;NqMAV_s90YZhKkzh3Ei z(3F4)NRpy1M+#6COsg)G^E@Oe$`>_IDei%kOsJ=AML z6R^587?jFbz`i9#Kk}|>8V#mLPK)s01nF}>sIL7@M#GJ>2+m@}%Wdn@?kPe-DsM=b z?>lYAot!rp&8*#9EqfAwT;<@3~ZM_{kq4!%8+X_pY|zrg?oIt{1B!=#pvo z{9P?{c>eOzHAz71lurIi-(zp!CxeY+&7pTLn?RqMy4}J1xe1+QX`zxa?-GrnUQ=#K zeikgHle)>D*4I)_0@p8#fUQLpDrz25S}9YXPt+uK9d&j?HaoI+OCV|SEve8w4|^rw zM|(3E&TnevZH%M5wU=80LH2NuJVitWYxH13K^g&|Z4dP;S`LrP_YMRp{{{wFGQHyu z?^}8;copN_6=b^=5J&wFG+REv%9R>FN1$!$_^>>mp9RHc4D=gnxMf7YKt#XMjXWhy zb4D9FPG;H1xAjg%5Xcwfn0RDaVFk|S?#T}%(RV?GWc36S7mH(yx{?lf^3|MQ4UCUK zHjZgMB~^oMrE{SP6g8zR@@Q`g>PFSo+naTm>FDu(jOv)g7UZ?q_6)7+w{$4-Dc;UC zn2U^OO9_*j>jVYqGincXp8iURbV*1d?ekK*KeSU zlG;7yPf}i!(vh~&h+SgOs}Py$+slHBeHGh~^}}#0D>I_~i#Mr`4KkJvM+8|M;IyMZ zBmMo{HWpL7Q6e*NF4bflGu(x1kCZc2W)L!$RbFzXlXl#0X#^FSn zpjNOg=6?9K(q>V(;MJLa7<)967a0Q4)UfWh_vR54oDu;#0DU9qa%WOT@N$#rcqb;& zd3d6@M-frOt_upP{M*lWtV%jw=kD&>n`ixwc5XgQo}V3b6^AzUq5M*uQVBrT9iUA3 z9}o&Vy9t1w_i)%DHGADUT5PFlCwx+!fEoHy(h%zV{+J;Gw=I5f#i9DKVitebw`W7 zM%4?u#7#4^+{)VAIxgi$PWB>6#U=TiblFs=&SN!C9)4Z`oW#a_p009%-l+$>kquYf)Q9iPj$pc7Lppy#uhW|kDAA0@Jx0ouzm9*rD@K`&mIAqsY zsncDgu~1U|d7hKGVE$OWL)<&y~ZvhEeRFMXL%LFTFZbIV= zTpU2la|aJv1yuI>>p`JvHEyfndLC}?#q;w3kJ>SagRP3DnoZisdC%OB9ciQS6=@nA9O>?tjHhcS&R`5bgva%xDuOMZ4 zCl#O5N(<(k&T5`A5n&INv)lAkJ}>H=vkc>T(}>gC^Htcbybv*;T?nkFbeNnG_+7%q_C!}q~y)_hl7Kjn^|dI9O@kglE_l8M4>RUsd-p&-{h1{ zVHvR|!@!18ZYO1gEGH9|m6Mc7ty9EI(i#uDdS^__PaS7-=`oSWErYugSA&|f#e0?l zwYf!eb=TRS@eTYtr?Z{`;9NS^*bQ@yG~wvRBm6C45%--S-3`xX8my2ek1X#x6Ky@) zCrYPt+By#24FXgv30;%D;U{LqPTxojdk9tM(%mfePf-ohEf@(<-WpzF1W?T-e=V7q zsLnBa+7dePrbv$!s}(BKflHpOMM3T_QB|${X4PzFhSALpG_wsC9DEGfz4IvQGN;P4 z1w8e*#NN>|T(jH>JlvN2Vr8D%aQH@Z{DwlnYUnygrjlQhx9#J^kuw?k<<6@IJE9m_ zamoWVYIrA>z(2g_i#|G-nnCJXz?6#U@@6Gwl`M6#rmAWCywvvQRmMk7GK3H6CZvT`PzxSogi0}dhge%Vnth(wy1cEeq11g5 zlR){Wq$hBwwq;XaPb($4a?aM7TYzuNp9!8M-K{4VU!Q4wXEh;dmQz#F`|%Xa+LF^i zV;|20mg`kW($=Rp6jAHt-?5RNn)J3S{Mye68r^}J+_pBJRbNTn{_-<3u@I$MQji)7 zr()LV_bcxB@a)sH$smEN2CMD?z>N+1Zcf$H!_JKj+|jP8mcvsIp8E&1rNF4-ZVy3f z=7BkoK?Q$ao}KkTwwx7#x&VCnOW@m*Cb7Bv;fX%Z2<8R>DgDfp$+t6L(2V5n=j$Za zigdwzudQ{x!Pasv?#!dZUAKBX+4p<%wBFD0cf8L*}@_+|?~4y?rnmGu-hY6;^ziaW>rb;>SC!6h1k z-yvx9fNaIL%Z!ch=BO-=M%98C(VnOwrvb8M?<8+HdZ%M9lpm$(HtG&@@*24g@`K7o z@0$A7w6*k747DgAa49n9Y5fGNycttABJ=PrEA9K9q7U6oULYaCktu=6NAbCtjDq6* zR-f9+V&iqI&W?fbgsj`KL6XKyLUtN|U-}Ak**%?OC~)j73z>3HV$PK>xW9(K4JYg}BO zjvBXcs#TGDKz-fvPA-qAVcfexQ_GRyDy3*5EN%NR4yN=>EtY=2AfMz=Sy5w4fmqCV zp!O4&5M1ej&5xFGuWz+Rp&reJIUpP0k4~OgpGjlq=@N~+&Q+k&EEo_r$jgyi9UiG| z7y;JMyaeT}DJV4DV(_E-Su%RDQ#$~KJOn+NrCjesHy@U07V2ERdM&e@+4$5#o?fw> zhY3X*)mGD;_)T8Ty ztIoQCqAwqI9b)>|+;d^372o@2ZvB-Xm;om-84Z25vSZ|%21$4FQ~zyg7+}++aPQ!* zZ{}mB_U1c@c_=K@pcChH^^HRAjgJnO9mDdcqUrTz-Q!C(hdZ2A3^IEgR53EFQZpr6 zG1TegczzdqVd?h_JK`!DS;ZzE9#mqrP0;{*e%3D;1E6O%dGQ0w?_Pged0pG%s+GqP zFPMLOk$z1Z8Qj8a;C^PLc%m6&qq)nH#@HBha&}isL;H~8<6_uV?!$wA|6!wz7VanH zO;1~$uY2q?Qco0yG80Tb&D_7A>$Qpred^vQ3K1}CE@_OGbUeVLU8zUi^;%;}1N_s< zOn*wKoci`8)!`w*cXv2P6_GVvIL`Bebtf^l72hH*0dL|wKX8lbG$TUvTgL6|wlEKb z&_2&GIix$Y?s?(=UHb~V{f!ojY}Dog9y-*-5)?chRFgGg6x@Fw`MO5@Yl+b(#=82I zOONJ1Us!R@0@_!!;`Zy;EE}=3{nu*iNB$rfShTrG*%*d`IQ8wYFRgDTR(-c-{5GZDH(x4B7qRGb zUaThG6EE2^9v`x9NXqkCbLWSc%d2g9JCafJltVxQJ2<=(`ej#!CSkl({~V0vz1-F@ zIyS%EKv2o!@LYwQALw|5iz|G8DFk+jh&qB`rO}-MM-FKY7svqic|jq!9{@c4`M=5{f&W+S|F+$u@zK8a zy6hl=U^FX``wHVq1o|DBRLj-))4IrTbj2IO!3<^I>#xyh=qwFwRIIX%G1WRdrdAsQ zGkATarsyHn{^NiYAntKZGpR`rAMW{4Ta|Z&sKv1{N?|Z zFr$pESn|>lMxqNa_0(aa8t0+`Ze^)IU6Y%`K(Ley` zn5I&Z2LtGws=UHF5Bd{o%=@@iN5D(_K35odY~>>MPiObWQl&u=Cd^#^DSrtop-IuSI-z65Rg=hU}`8} zE8$Z=U2_f=^K|nQRZz5@ve@sokU}FQRV9C`hrg%N*Eup5J8LVB$A1NF%&oB!4Y~J> zQ&Cm(I#bjimV5W?1K<&Un|3o?lNG>Jo}a)MZJUF@cySYlSLAAyQt^A#Z!7bln7L%g zvAnsgSwtm6zbL>8p&lnrP(ZOAvZ`n3)0UyQ9(euMB>6|J8a{TeJJ7l2XOB4ah5}p` z78VsW=istXj=x{r7G_gY8D{alQkK)BxS@Q;A}FzlHZ&dk^tZNPNZyM=YD(>1tX#{7 z&YlgN`=)_4Z##|R!guZ;4)~K&u{6gL=yRRtK`;{h)hPdd%-r>h-u$iQ@%jF{w!ZT@ zRS^H!T&DoRkgmd8N}k{Zas;h%-~eq1!%q3spkQ^hKL|s^htse_0_sTto-J-mZjZIT zDwW=vQT=qBog(tS2r=*$vzlCg(!yfJ{1`zN3vipUYHH=Hq2nv}K3D6Zx&EtVsPAGn z@0Q13agERH0*Asb2MyK+;MSJ|)viyHM|7ZlCqO>>|R3qW2z@xZ9-%o~DYY(ojwNvN=Z#`uFk z+llDWu1tA2{ao-d-c?i8C7*X zh;cxx*l&(b2|CaEBEE=tGV1-6p_^tJrG0{Rt7bYqcocs;2Zsg{Q^ZIKUeq`gH6y|u zyIqlUNI$tN)>08N<$$QP(j@8(8Bo^}npo(`yRp7Z?rf1h zl}9fTzD}IhQ?tRyxESjX#3*A07khG6=Oig8)aqBAWq^BbPgUxgFijFR2hX>eJi#&l zq$LG&F|eHvb23#TK;S`o8Z45kYBBkd7!-l~@$Cyy=u;S+*eqqGHnHY=!18|u);rM@ z2a?Y<9{wx%x40qvx5oW1(Xr5DQX$0=x}DskwrC&8NSXS|hx=Al{wE&ZfA!?hW!igV z(PgsK2~;bVdSF$&>;qS;Sy&l9)`jv?QGQ5op6hKF0dwZ$hy39;DJ)>0R6X%$yYI;i zuJpj4qFPm9PwU^E4%1ovbG;r_+rxvVjnn>h;4TH(7SPa(BvTJtFJ;l$bCXhbXY|kk z&?2T}Dm>`FVU5K&jd)(cpP~?xELsoHV&dW|jPTks5%HDl5lIJ7EPT2;_hak56H3hG zomSUXO+8qC!o{@YoEO$5=K8#z5fIVz0JxUw&P%R7gB)gA!~+FoC)vG9t^pHsrxdz) zg(Y={$j|lIAh`y35{`&GchJArH2?|2@^N$Jc(T9Gz}6MV$5B-+>1#UFVpT~|V>i5* z;LkKQ03&2-j@=g_%qrS_>YLtYzp7`|NyAwp-U#H!B&_>?p8#3JGn;`*xnoCC*CLlc zJlob}dhp=jcDbKzgXSz$rrJh#zSj<*(=VR9PZ+j+udwv0uTF*ACkV0VU^Nz8Ki77j zR5=Tt^f_GaE_z16zAU1sHfYl4zWfL7!2E&#Iz_^M`t<){@6-sNBk{gGReGxN@6(I_ z>!cdK-pa$aelJ5Clm)4LBc&nfrhgYX=^Snt&zQsDy>>+oTS!zSvuB`;yW&$pBH- zO7GUNw;-1eXpPb8;t=2wAsImY-;3zMlgEzbzq3Ypd!tNr<@69ySQ77gLWfXEk|7lV z1x>y;BafW&zrqW)GXF85I0HEFV6|zsKa)BtkEaf&%ZU5RSe|EH$--%0ZcM#v*{mdhtGu@+43IcMDbMZscoXh~ZN@o_vO7$Q*9&e$ zRB&x>yWYv+oRK@+DAj>1`0p?w`XdX|K?(zd^U@81Bk&o0motU$F>^stmTCvSPU?b; zmfhwcPG&3Jh~Y|^YAETGJ&wV9bb7_JZM_grSE)VZ1(kq4IYb3Qi_KncF5ccQE@!(F zJo@3`$186j;?G~fg)MmsKR1afP(G`hKd_nwOiN44W50i}BwXkBxO{(mX%`i4?vgaf zm2`b>-Rna%n)1_-hjgDskM42Dz%oh~kYw$SlgaSvno2W16xSJ=(9Hc?O9D8wQ&NJ; z#rW3OAEpin_}ZBdnZ1`dQifR{u5RBv8V{lUa1gwzP6XH*-xEw*E|kTsAE>Ra zR`1dcOwYk|eP`t(ldqM>YkR(;?MNItVkKJio9iUc<8q+_FZtds9URzP9^Rk-`CcR-;3Xr| z&5W%2`?ie;K|ZLWOWLN2*-p;A@V3l#Gma>J6;b1`sV%Gu?7x9vfzctpk{R_1JHsp9 zB<{~#_4~vLwcsD6y3*z1{_HI1$T_hF!yGZ#v{bO7I0kl2!ZAk%gM9)=XOt~=ykmc7 zBPY$WJ&e&}&^6n(X91d;rf5d{>r{rK=5Ipa41#*Ap5)|AH+$$oTrb99od>Q}359~) zjSodRZd_=@Qq4J^d+l+P(c0;f0Q$$ za89`RPBC3(rQ7kkb-J!o!a5LDvhu(fHGIOUqACH+>FU9fbspBdcnC@FWZvjmNfL&9}}o*q<3H^#Y0)+V5drrw>ATCPBmYmcoxn&Ku{y993v;*RpO~Rlrv`DVFRzmMmpZzuz_v2#EzAM9d z>YrA_)jqjbt)*0bqc;fHi}iL6Hwn32R7)Cg>o+;Z96Uakk9{o}K=nduer#BWVbl}5 zm3L;VQ@?-rTdKe5D`2>HxVT(chNm7qo-QkS)shSOJ$NhBd@k8PU@)`ENz!{nU@&!_ zxmrr@VKMryII*E&>WgW*@Yf$6n?0O_33%|N21k(z&CcEKJ~T7ZK3;8Ov_4+NF5TVL zrr+(K9Qhunx04Gt-Ndqz3pF?UT^`KU+5ivT?p)0lcPCf4?BC#i1NwY=)4!v}*kFj6 zdyWtA;TS`t249vKFSU;OgsxRO3=RqtKc+W3qlNAYu3Z%cmQ=5qj%s9m#wy{Z&K|=^ z1z3aO*-{*;&gH4&rf+5XT&M?K;u|<%2r0mOc!;m1_31(k6Dtan@ z2Q!AM{Z6oPh0MJFn4L3s`McJ6sS^K3z@x(;Z{N&i(-vR%#QngjU<%J2#gR^y_e93q z$_|*z<)MCw#*$Tajdkp1uGOv}GxI@I_n5EW{xl-<#9YuU&(A79VD-6+i_7xT)2aTK zZ4_)@`N%AEx$q1}woc0IN{&(v%<4W+dBcLDo1EH_I!-{yg(q=DR~qqS%c#?hA@@Xk z!Dn(G_w|mD%dt^kpR?&Qog%lo)V+w#C1O&-u_^Az$jH@n{wJ&Vbp4F}M^{=$K`=rWYh8H2j_ED``g^;Ni>DsHIs{^ z++6cJRm7)`AUc!~;|ndm^D@yFHWa^@$k@GuIMLnxOwoDV5wH3z?p~l;Fnw~8|N6}; z=UX4&t_b&c8y^ymlWUSm>AvFGJ)reo=R$#*{e1-~l6}`R))I zI&f+#=>W67xwDktUabApn*G$Ic6Z=X%5<&8(Swke-aF}^)qu<)AIi5i4Nv^m% z7nnzD%OXL}o6V>97pp)};wMreD)M1SjFm9OgJ6w1%gFBZv=t03D6J8J@mMcXtf7W` z^IS^wTlk=T1^}gOq}6bp!G9za7lrCQVD^VvP6^?yb;ZibhgzGgxd+nAtD2ee2&?Xv z^sD*BEkpO6iC3Vh!t_r|Dg!PZLccL>$_o{|8k)0e^YUo3v87CqwRY5%zq3p+kYt(i zJ>9EB2$OK!7KN_+(@SW}{}92Y=A!7_E%Km00-r>glCEmfjqtwuMl%JnAyol!HXTsNLU?eAepnZE(09fkR@*q+ia#4ykDCo=F9pf?gPVAPts)-HYV{V$Iy zNW^pDKlx*Sm(ngdturSOcG&oRU5{PX&w)|X!Oct&TalHS;A~M?`P^q0i?%Is`(zpe z7k1E^5+5U~SaYXksm-&a?+#vvJ4_0s?(z{NZ5kprv)-w667VkH!n(L&jYkg5TDoL7@PjhJvvJk#L6FSM`jK5$t)sY~vmX6=Yhi|`O z*AbTvgC7)s#?5o%NwW3yDOnw3QF;^&dP0gtp}((K{6TGh|9+Y=Q}|q6dU0wh)2;(3 zAD2x*>j2q-o?@F#8zQ~q#6=VwlWXt)y7w;n;k~z@H<9P8?U){gZPtl`^VD#!$u)?< zp=4~o`xCxIl)rI#+Q-4FUc>xbq45g&uMqXtYhCi{Zef$^zE}?VcKOAl zBShp6lury1g|?x*&z-AvFk~nyuG1SX7XI6+dt6!5F;g@&sFR*_0CpcPx0%EenQIxd zTY#{5-kh)N2l+VykA_&I_F8U#?aUN3ba;IpQs5e9jBBGC2E%NR5 z_TT00;pNnp#l^h^7eS#=GMh?v4!vsEi3zUBsVNC)CJmTnYCOqQi9Mvz(3JamhxdHN zdIS$(7tby7=xuK9YHp5RX|`c%wq?GxzPY}+wTZXBiMx)AgNK8|rVDX|K+3n28a8n8 zHa2lb+4$-`X11Jml+UIsleXA7hRn>&664~gZEHRTz+KH3b*)aO!h@4rX+4CKn6h=D zQ_ef^VmCgIL_UWd2A?jTgOorwJSF=;p*-N*ixibVzu$&|5Bm^Cn3Nj=J)=H3(ZJUE zQd-mbNCn!nfz)CkMW^r{H01Hu$H7nc+5M4=@gSK{yda}IT&e0dmsMXh1bKw<fHE=W#%6*=~f;1CUYJ^>h``=o`Cm*tG$D5UovFgb;tT~AzsF1d#A0b<=zTgi)z zulFJI9{y~>(sWqhoA9gkP=EUVcd?=yaRD9Y)Pn?vf|NWRiB=MxPZ0g{WosEKa8sF` zYcmK+u0sup>1B9>VeS|Z@<2D)UUdbdc9amT?&Q<@Cld;=JOg-t6xyw*CB?S6$H(ww z1$?o>zA}T^|Hw|ZzVz&f8-?Kk;7c*Fc)9uU>vcT-IUmcHYA~LcY7~e{-rLE|S)b9} zr5(SLWlJ-Y_7Em@(!&f?Hf^Ot^bfq{Md!gQO%lLJ@3ba9%q+Ev) zBcxXM?)3SMy%T`*P6~k9;38P}+E|hKlmws+K_OB(``MCH;rPrO6;os;>>uv|7rO81 z6h2yVHma(+1?2%k16cjD{Eq_N614CEzmb-spVkW`)py9)d(}=5os{*M?nFf$AwO|w z0)~I0>L0vH;)g86r}>^q5B?fT8Y^c!aipTE>Jcvpkmw}ZOa74?g6GQAUvLqbA#xiO z1_~OA|)xi%OG15W7006fN8}=)TBYG3nLoUkOh>R7@Clkc=~_%5CynT z8;T^t)}i`BkrE^hExx1fgJH0{(r8YZ=wjIz56YISBDqxvRKFpja^iY%w01^BcGPq-2&-B^2OEva<(i~(~g%!1Lk?xbjvS}6npwuVFvj&DE(bKq4 z5zHEsr}6~5J}+$)U`Bl?rIq2o*vv0LF{nlZ(4){RI`HX#1U$3xsr(-p^yL5UJnp9s zIn6eZeK}PV3>;$oi_n&mBrqmpNdcZqq@ZWM9dwaUbpK+Tf!tUsAo1mEXKMYHT#eaY znH?7R(}_S9T#EdL{@;CEiYK_@UvS$0fAar8hyT@j1`Gckn!#KiV4Me!xY$zn z^lKsip^Mz7$};Ywo{jiS-D@+h13&(uRYnavCwOgul#bBKo4nXg_?0p#-Dg?>|fnR zOBpHbB;iRtb}VwU|M`Ag!ISw*00|QF>;+|92tVb{b&`|EBb^QDPEsV)$Im#17hG|* z?K-~oj^6u3n-0bDf-__+Nk{&?V&!-bnrVs358&eES9<4bOXiz*E3aW~%?Euzw9BRs z&mpr7C~rr863Y?M5^MnFb<} zpM5OudN{+=FY_gh7^&AlF3C70k&yeM*6G%f@l?c?6d(GbPpGQ5iLHXa2uA;PqtsNg z6A9aniFdm1#ONzeZYk$H3YPQ)9!6fl{*Pl>+6ukKHVdVzmEQ{mjDqKG}^xfU#ww7wj{k7N}%( zZt$6BHd}7sB$!=_TOrD{>sEMIFEw{zm`_WFknBllAgVpK`=tCtSXJ}K3j8f&hsW8I;yB2 zKLWxqD5EG3ehsC&e*nJD_dit@BynMUFK{|Dg2TE`znLawON&YN()S65idK9oczs5acE5IJpxBZ+cN|E~_-|gr3&TdoYp0L8fc;2Y>#{Hr+j6A%$d}`89h}UU;Nk0p zS#j%c;r^U?S6HYfm)=s#P(T_EJ{~GxV_n! zHm-;dti&MZqN|#muURSe+V=70GGo0JWdB~!S7u$$BIoa9*y;Hh80M&VAq94J{fd)u zB3fApgSHjBpbjGC2K4L#nKP1%d7nS8Ow{J1oweH1pYYSqDrr2@cMc&2B@Dq|qZ1Rk z7!~?|RH^unybm+Vz|05)WrrR(pB=r`JP{vuo@)r(o!xf_I&C)lG~lIPd!qD4Z4NtK zu1Bb0-AHC0_SfCp!?%1yr22l`!e#(4f^BtdEnf=_OSt-rZIAFoWZlIE%K-3w0;l?& z^!eL?4QLYBkpFKKB4z_B0r2bu14URgMPEgJkWm-3e?kI4)E}^JX7Ef}?uk*{rTcW0 zzXijI8|m*ZO!PXc1+HM=}f_+hi-D?L;85} zk&D!!k2kmow7v`}@+d6}h;966!T-W9x@1m9TaManT#_qrzxy7AkY2CK^MUU^^N zdzXA+J8OhDgpdgdzPdPF?oGb__V(7EHp}2O@b}g%O!@Qdwwbj68KUBH!Z^E&bm#U? z&zeabeFGO^H|uHT7sMfH9~d5deKoUl+!}OVW5{zw!%X;1^#g~x0H8boEnpP7#?!|8 zVZWMqA*8*}7-WJk_7*!^37NFg@k)heENb`!jgybvR4!b^$vrYZMjou%iV8aRwmjD` zFZr`f{qx-iz7|SU=v9Kfw9`2t3Y)PsmwmszG4<&7$ZQfQ;zybx_)PSr7^@)cg<`W8 z`%Ydpjt*KcUGagryWiTRifttIQTxzyx@egKYq(VGqXIwDkK4;@yh;F5N|5R|5zHol zf`E~am02)CNb{bCyQeA7_Beib6?O4d%v~G|?thuHmE=~-s440btetZF+bg#0 zwoP6j!RN?*QBJ9pxy&J!gM^lcS+*J`aTe<$6<*@?Q1OzzU-h$t)0?07?(z70JkWGTY0^3KQR?X1B_B_h z>kzk2Gloy=@|JU{d0$7@<|w7-vAc6O38u`$6@0SG$OE1wP^@3cXEqC5z~xI(%IGd# z;i`HY4zZhj9IqyHCTs^*nEgI6{V^i8&Rix@MA7A?PJ#jXj5^m_b>oPR@2L#bW~()G z7SCj#A0!l)cknh`7R*_GU03+(nuD8UbG}__8P+{ixGUvvOis1kM0Y19JvVUH4fioD zOZpeyP*`Q=in;kN!vOVP$04TPHZj5NSGR$TpjV1GLwOnqdIko06pMPqy=88&f7ADC zfw7dT^uyS*qPk-q#JDkX)JSfb(x%4Pw&Zp`XHRX@Qs8YLm(QN!UmJCQh9kD|UC=Z| zgUIjrV-_X;ya)M$=69?qjm5gb-wt!Rh!kZFV2U|S*J$5zXQ^2wzTrZ>F!iF@BE8Hh z`+K1Qm01J)YZ_00@Qnk&VNx@5tsz7}7LT6ekk3AaxOkV{ASUNo%6b74p{RqSb5dMH z9*S)tHfoK4qb{Hyn#23oc3 zeA@nF_p*mzTcT4E=TYj*2Uj^nSU@yaf}0;z|8?dZzA0~i=xa1#vhG&28_r(rB!|e1 z=46bW5U+H%ufspD_6yBZUT1p2%NjLb7tmTf9;rl#k}U!x#B^rstc}rE97}(;u~)IC zUo*nJTko8e2(uVWb6GzPEOCD`6|a5NMGjk186MqgdsWKqRN8W$zm7hWb3a<6JY>I- zUutmuJxT*S0n#Ytg>$ZJO6Dsu^``p~3Kpi0rL{DY6ptm%aO1A<_7+pdZGT9Ez!rMLM=5YgZmyD~N6| zILtBIH+i2QP+52Z+C1uZ855X$D^Kg{J&6VD7mZJ}_oj>yokHwC#xi}P+MLj9@_>a+ zj6AE~4FxtpqWuZw=AEPP#n}u{b1~7M|A?MGCHU2m+Z8J3a#-13SjL?)0+CjvnGZ$n zZ7BYZsaxa33n%8w=*f6h(8lb%KW}rDgExq(?v$ZZ_*m1v#0+9>t=*%r0yjqS0@cfc zgxrg}^O+)P)>mSt<)AS2n`{6VeRygOiY3T#x4-ZBpnk7Mhcs_PL#P$=4(ZtN?7mUl zJ*Skeu8*u-+}gH1th_0u3ol<6luzC-^dA;2`X{(Qgrl=+huLFw6zcAY#~D1#o<%dM zy#oZ}Xxa>v<6CZkR5GM$0u&kUMyt_FY;kxvuS|wC^rvu3sf4&()S1tiD>Uy365erk zsfLCYDzK)N=+j{>y&umYPR77rq06Q-^#bL-%NX@`4Dz*un5wR#7+QMPfh8tvV^dp$ zw3DeU^J{}stu6^-*>|k?v^0!zhyH_=bQep?cFV3&4*9$FPagyMhlDQ&w7%ez0&q98?t-0 z>u+<=76n_zw!xQ$WmANQ;`R-qg@nE3TQ&a1N29+p4?L+L>vzwBf2SVc0{Ray24ZA$ z{jaZrzqOXX{@V?R^CLf1z(@2v1T**p2>iqm-ZV{#U4bm?Rhbgx&b2v6XX1 zuks18*ZYD)f}Se~b@Pn5+Iv9On&U~h#}rfrzamDco#2NS48yTy*~(UBPa5v)KtPvE zUsl~WCqSqs^^VJi?B@x6^HkL@`UCv?$Vv*}bUR|U^Tt`1+P>vqplDS%A;XGq7$-zw zksLYC^bXiWIArO0ppwRf>}0!%Mej$CrZx!dmz-z7-|f=OwmObZ1@@FqUp@C?7z`_@ zuWA8UVMt@8bL=^K+M$+zVv2b3%WHYkE-UGoaEiYxn!l?+(;3xB+h*}6@|_=L^xHe@ z4#SjI>sGssoFCWP7rQ(>U;h-*Sf^D@N_AZKO?;wbw62DZ)VacPaJzf?MZ)%qB@^v+ zEV;T6-s)gF{gOv%(?#U=o#euJ6<@8MwtJ?WBjeGtRx2x!XBl3smX#SC(@zQbm5U$D zL(i?7+!cjR*`)VHRmYoG!iAw#lCQpX zP?M5B85yjdFs<%O-UMC)E$m2k^Ex zeqEgni$)$wr0scOt%@RZ;JZ`GLZYsZ%|mmA_=6731)T!I;ZG8ZJ^gGP zX-wkG^6ln*)9^KR8+=6vN^~x8fQ*cnZ{^vS7o2YY*mQl0P(f-FlWO<1Xn-1 z!F(_`+(#Yi;I4RHS@oa_Dq{qk$iW}+fE6qBNpRymnawOLWTd1nqhmANyVmSgzC#KL z>-7^d_EJfaaTCviZ7wvtD8Wn*ik8C65N|VJoPp`%0`IIFMRHD|2a^reNIhkG@5Ho1 z8&PR*V#uJC2@AL{Dn!IZrylZ#jN!pkc(DZHtzpYU?ZZ=7l&*OjKuqZ+M$)J%SK+hM_rtS9UlE|kGmfIJV7$?OUmt!Uf=WE_}t#K z&g}Y`fnVI!`QcAJ0D2?NM1;Q(M+H@>%DNL;7j!E)9CqjP#F#XGbh5F~Jga*pZp+UR zzcNN~ZZe5`-Qv|BsjUPLMyXUhI@JOG&k}?P0HV`?o@!{tpiCc<0ZnSS_Xl3CYeO zRU%J&4I9JnYE{!zfw)m8gogM$DJUYMZ-|q z)b}AnuJ5mDBvK{(zTt@=-OH5VfL{+*APPCVxM*r<(B@C4dI+{>1^2m{UNwbY9nq;9 zz&U)Lz<*l7Fh@s6TU)&Jaq*a0U<-8PCIB|+L$K=rip8UWfq_9Zz6CH~j^^+t#=&Pv z@+&#mM1L4A-&45vrAg>l4h9{nfnELc*ELIXICP>i8kGs1hSPwD1a*6r9bB{?!>#Zx zM@adqY<~{#)Ga+QA!CKXfbjSykA?R7Q@bXLX-_FSZxNvo2k+^N$JrpS9y|c@vG#i% zs>(e{@ib5FO66gta1Y7l;xGjtTFDx7K`tr<)+z>s26ls#;|#s;Zz}CI-)`L8=BjkX z3>fsQoy5_I>%j>#5u0^>`hdYr%qA8DnRJ}!HBXvR<1zJL z8u5s4xzFRCXx8Ahdr>uN6D{GT9hJvcrgHJ7`aGmZl27K|&5-i=!Hv8D6TKCUr{vS` ztNfiynfuPk<~LPrUa#hTP%X+x`fRpU6^O}t5IF}ShR{f zPkwd5NrHS0BopFdSb`ZhR>5d zpCHAP6S^5m40h!bH#0|qJG52@Aorg){sw?uurZ9A9J>GNf&hf`Z*Rr_?S@s<0rtR3 za%^Q_fo_`p9}bOwluPW5Nm^Pu6M@*-*=g193J3UON#^%I6D58jA+7cGe!jlGetxGq zH`1nuF%qjHu+@1&;+%6fHa7C|@>)p%w#_|DNjh*e6J@UqtMrhtI3liY|Bn0UY@CL) zl=51B(8Qc>-dwFEh1$1kIK$Vr%dXwkuR5gbR{IOs$R~tux)O?nt?mgVE=v>xK70P~ z&C>1j`HIWgGPGmOxbW>|wCu|FOjyB`8R690j)&ja^O6Ifck=NrT7QfD`F`i?XEoIw z0U0-l3S!6ujj7&em@$}EECbnK`SSzb5P(4&8%3;O_h;%NhDq#V!@|M`I#x&jZ}q z$e53Rt=$nQBVt4C5gE-3e{$tRW7J9X;M;r^5|Kh6?<%9Tjkkb1o{ zbks7Zm~wqBnIq@iMpWw6<{B=oC!qGUpMV{YO%Kmo4APMo0DncQp`aHv{;hx7H%6~m zkD&s;XTd@AN)A9RbNGfq{k&=NnOkG_hnF6|2u8jZF5oXm9U`;j<@_p~6umOxG- zMZbHcHO@BiPb|D7g#89SG$|V(#+KwGObCv>oUC=D;_M{2!CrM*$8p}t`O!M&TMKtv zAJ~1iPoWL2$mxmPs^GCNo_%jC`%93&vrim2*MliMOx|6;#E^o;by*|sfPSssidXqn zVt#3|4flmp%(w7hVo&}FI!ac?WSgfrb5zPWodxWZnb<1pq6gHqmgAR_&NGa`LoOnW)gp;!Hs&R_tcQWnL&2z`hDdiJ1eK`cxXbQg(mnuwLeB{p?y&G$87M)4zzCxZ`PgBMjVN znA<5-nykdgTgHQ|m&CLHNdAX`gGJvP>H7bM%^MiJan}ADOR;E+btnH*@P7hf0G0pg zWSw4uz#a8W@$uPK>RD|9HR!k&KDfaSGR2q{o__%B?->6SnZ=*IGX%odHNenFB{WcU6x#(S&myK=ibP?BTr7x zpzd>*?)yGiayCropo9{3J)P=nt7)pCukhg7YK74Eu$QatUPxqm8F^qS0?be>NVh}D=RC@Rh(`b*#xblDmP;~yz}o;LnN~I(yKwy80P-c#R-dW zeto!lp%^RzM8dXd0#9X~MQ7(~Gds^Zd3Ra(43@tsN*Hv|F^5kI>yK6Oq1(ex+qaL7 zRtiNcs)N}xA8fARyR?SiRdhrmNE7q6c>P)N%36W+r%X2KnzUXhH%ETOpc1>m+2=k= z7yUs@tDZ_;MwqIGRjWEh?)mwPkQjIUMU9>H7eSs4tRcn+CO29Psyhe*I4Nr zsD_{m7X*|dY4heimv%vVn@b)DJ#l_znzF5?ra!q5dzKFNgX}E{{m>dQ{(^>fc4xEZ z+%oW~4RE+RXiE_ue0g>_-}c5$)CnIm;RNG^3uB`7?)8}>@CJH$f!iu`4vq-e&Gxyp{g1Pz~RZGqTv>*mp<2DdZ2P5 zXop@^FTrdUz1-=QPF{D?c)BfL>JQDKX*-sPb+wQQ-f%XDSMP-oBlGX>@UmBA_Bhh% zz_hcF^xBS*6Bl4EDAavmSKG_dW>{=ObA!&pMaBaqd`gCI?_Ie7^{aRSe*#w=EXG{z zFRK=ih`Nwd1i93Q7hHQ^m$iSsa3{_Ayl`TF_~lPXkDs|zjCB}i@{|_p{`8Su>6QG% z#!MaMpz_>g6ey7*TTf7Ax|c#@LpH2n`u^et)O5VPsEk?t@;%p)FG^ReGL786DEx~19g=WYasIfdkr&OD5mvRIcfaOGcG7F+`Gz#P zAbpvlK=XxS!fjKhdtQ(S>2chd6IF>wleh&NjIBmUy zj#*5VNsGQkR0>A4CG0$}lzD|8-WQ*nvO%zQ_ty)a`i0f8SPCJstu$xc+S({y_eNc9 z^;I0ffWOD~W~Wt8zJJs{LM6Be4vAfQ#?@9}SZ=wWj!cCq=VDnM!QdVrxQ0eQ3FxY7 zx;WbvU}o*6wf(Gr!bXh`j!e=GF8S<;w(q4lUY)3!Jm*^Gs(GwMW9wzPx|_bz=WF}e zaY$j#kvm#L#W=msr`I9{Ot85z;qnmd+mHGsbW*0ZO(7gZx@+;tGG=orOS*9(y`itH zcJC1TW-^bDZMLD`2Di3BWb*`Y#~vMZ$)93IH$w2iRh4 zAy7=r1}qo=rZ*2j%Gk{ZSk!+A#zxE1!$E3cH>G^)@OS^?H7yvvy}ivOA6WxTHXv9a z4fq6{XYs!~(9wv~HetGH2Iv^uCKV%a{77!i?*~{x%~{&-n(>`@*klYWtNyFw-|gMt z9ad!A5Gf`DNyWP%)bf~^4N!i8!2mWmFp4iYWLSS63>RDWe;g1na%?C6Uv;sA{|_4e z_qloUWhOUUPEo&0=IV5(_a3i}4L&0<*1G$Uv&;Q_{CKFR&6>5{OK9(ay&-E5MYd|%8#Cq z59wu$^bUmh2c0!7U=l&m4tplSj)l>#_7SAOS`Z@}Gb}QQa;4b$z++=$S%T3!&F??z z16)$O+Bq6On~AW%9eT;*#k(|hd3o!GFkcJQFOVw#xA~FN93>q>Ht;dg@tD~oC?{BL zM_b+ktC!FpsW2yOA*Zi5Ene3f-tIR`0zk3)*f#y#3- zE0dkP=7_6P_IM(@WF2zY;bgd8sF`Usf*4Gg4wNe`182!smr?SYr_JY&49`rh+cs|e zB*YBQUBu?)+0}M-c3MifGQXK>1SJL)q)nMOw>pR)SK2J_IiBwQebc`JJSln6>P<#Q zT$;s&P{(K5EGLoMTvfi*srusto@eCvIg9W@7 z+B>!R(=MO^^n!)tE;&*U(qlGb2r*7_=Z|VT+A|D2Jlna%(Wz}{@=K(zn4E0!5qS=8 zKyQs%HGvc`BmfWmbU+FBMMvVN#YwGX$W?Z5(tU_TE;Ts5bv9FyDWB(j{|Q$o;CPOl zHw8?c9+#%u!pwITY<}K7?Z8xx%Z9F@Kzf^;iw{`k)^k7NP89*pad>Odtx#FiYtel; zx{?^iDZ^@znZpcl{TBh4qfQi_JpszAuzPans!tYg3)&7HErFyqt(^Zv-AB_NtLI1B!<|B+S{6G&)l-?7-lD9v=67a|w3-?uD`zponQixLV3v1&F7&S`W;227 zN9Ol_&rKc&cooJT#9*niy#}qBo{De51-8xS&Z29*_fbIXL2$mMmi4^7Lkx z|6F&0Vg6EtCslfxNIi)M(docjG*(5S-;S-ZSOcKTK4OOyIfFCApks(Pv;%*p;}`-( z|ILnFiyOGS0U%({VpS+qP8a}0PvNcwD9@Dq*bn4``E9o06oM7Mi-FUblFaai24~bQ z;7O<7TYQgE2~tV`AicbWt5d+v2F?>f>AC?(_Qw~%?wP$yhSW)mD;nno;LDO9B`nq} z4_9|3&~dy<08q*j=#d(D^YaY={HP*fW5hnl!m(FIoOtZ@HiQ(o z!XARLS7P8)c;LFg19R*~TwPG!R3}mRqT@GlH4Ed>fKUc9&liaR{TAxLov?iSp&f)ptdAUL#ma1Ab{xRzkSi#rr| zc!B;u+g@x_z- z8dbhShx-evtD39?O6d^!=6wOp>b=r?6qJf+tZS2J_hk$xIbBy26rA>lKPn-U!bcPo z{X}`G_ZnW)JLw=r0vpnhsX=qk-tZNlcjNm}R3^YaG2Inhau z;ifK&rw{cqRrIT{J2Y`!Ac#iAhkK-}_Bx~m!8Ppq<2BF-{rPk9^z?6eH{5LajTSs3;Pq1J;k*`=i z&@+3`&5ZPrf8DRLgt}^-JHe2#jLSv{b61P@zr)oJnUV*Lc1H&v0jNks!wg>XYr?ob zI}QkoJF?%}Tc)qY-w47Iwq{;YU0eGK2WM}-ne2WNUrlCF&ohF(4ZGPlBTz0wM&Ep} z{CXmyHg()5J^=MzZb-E?nWdhfCjko=aIwQ2B`8iIOT9k3S}qk7njzx9>B(n7hgT4}N^>bBloojSulv^u*LEsy(Ln&t^HdCu6l^nNTPO?>Y z2>{k9U6tZj#cu+ft}-c{-1?G-c;;F|pY6)3`&EnTSCP$({fB7`enUIC%LP(xbZq6= zTSZbMER@Q7K3+cm1cef1PR@+@6zxwmk1SRgzxxl)BPKTg`*(TZ-R<6<9XWB9yD<<2 zUL6jQb_~_~_AaG0t0ls2Z-aqPW$ew|8Yg9TwK`ZX1fH{ys_+DFS}l^icw$=$op=11 zI^5jLp{5F6lPjEE(X^rY!K29V>mGF!fc{N>1SR{yItzZ>)T6ptEbYcCDJh9XhX(cT zA0cA&-~K5Zy!r6Sut|z-V&!}$Kyg6(Px>DexH%7AzM(qRYHbQ?Ufq0*)6qB?{Aa?a<7E)n zJahPN@kq`6ZjZMF6&4j8l@<$-8*nX==LH7PofodN2Dlv|hjpMB6K!}dxmRmvdJu=*fYDrHT3ivXr>^M!`rc7o7JviyO!w=w5Koe zo3syqhHp=z0sgRjW(#Cfc3pnix+Euln&VGqatEhCF!%`fau#}bEX>-Qnes*BT+%rL zE1{j4y2X5aC$6BdXh^|i3T(C4gZdL7S)dj+rM9BW=T5ew{$rAKJia){HHjymX?`8E zstMKJ#=ss{SLbEn?Y+9orI}SoQQ3$9#TGrzm=Nv6*#4{6NhUjU=sP zBfMtT&}{!P*2*7il;l$-Tg-*X!9iXbaSWLnZ%lZOXt+pMPC7P4K-aw2Jfzo<(d)}c z82g(kNWE)n7GTq!D=NmuqtrY5(-!uV=lM*ht_gqiP*6Y$`2gLLiCV{bruG%xSo_U` zvKM+U&Tr@xztyK&lj6U}stZRk=XRzFK}Y#mQdbna`~wV>fB10^ERU7{(B=LFd?>X+ zmyn3o1_qbytH+0xm}=kYY=LZK<^q{2f4twn75EhW8iG+_|J6j0Ps+%~;MpYx)zZW> z+b{$j>igGd?_bmP((&VUyP}HGd3`}OjEi~MT>+5_&Nh@>)x6`VEa)_?7Axia{PxA? zx5-tx-`~DdY-2qqq*B`lo&g?fMZZO zz4&Y%3+P>Ti?vW=2*Ll{^!n>t|9Or~{z}$A%>qDW~zkKr#qs99rjpgCqh*%-oLiP%l}O zlrf7S#Y&aby@doYarx*L>VGYw0n+4hq#?`J0eH<{J}!EZh8-O(q2(EW&9<<4632s2 zuAcb7542t(keZ4?ICeLBa*Qk&W8}}r{t$n7j`F)UWff6RY%w<+MWN|SGP}lnhBb2w zJSmWA?z1uIWACXpxKwn0Z|bIDw3JG5??PW7D2M?(nr**?Og>-#&=J_d&(NtT=yPK0 zZ0fdUc;{ub@N1@dbkb40#n~)xPE5<9(HEZcOYOIg8j@>Fn0hybxL*Y^uQB@b7j{fu z!05R_j0Q`Gf_i#KY~%N8O*h`irGNAZg4F1kFKd^<|&Q%c$MHBH-0qn(GiaULB1Q({=m|8C!8-YWF zT2h{!5rhnQZ=u*PK4&gB+xN(3NI@8yEk2s*Pz|FC`~<=~DqsFWOVC{`r+;AFdoEj` z%L+to1()wz#Jl$%0RbjsqVwVcD=txWviWn%RVr4AluG`AM-w{!Hxx6ucI&M+!v0+W zS#>8~CPyZA{_~$wB=1Uv%3FmzjokNs=FNV#GrDa)-1rG>zM&nqG`hSA{}hW7)=76z zlF+2#Y+8`hair!Qc3aB98-Wo%JT=1AoQpB}=22VR%jqo)`3RljD+dP#2A;0}KL6W; ze0rAMyO~%fKDjAq{sw0B!6 ziC!4449|p7itKv1`B=lwhh{&;@t1g~kHdZ4Pk!+xhO)ATu!4s|8Wy8Yf6TY^UIeeo z5oZPJY5U#O3Q%^3zNr}KEDvDeT_mM_(8Ed`INht}UX159Z9pfX^wH5#)YiMze(74@ zt)cX*sHjHmt!a)aQVyuW#eQ;%y7X$WEIS1ps(aXvL&;L31E$X>9oE(_+NpP>N^KOn zlANnr4PVay9_`dFU|BKv8yRiX5*=4pD|)(#**c_J+k5cy&ea-GfNL7bwq&=qW%|I) znNWS8W-U$S3i00x>>JtMKg*65nC$sZW^nr<0RSI`GMoSc}@%3R=I@%f-Vsb^^D zdtiD|U$sC;oIpfzclvj+a#;)X^AjSgeGAc7TBvNbebb%JUFN{Xwh*vfzkNsL>vZMfP&rM^dNuwU(Vk9LwEG4k-InN#&WG`IFxvHN+8K zWd9?aGtj$2gZixa8P05mXss*9#(t7RY)8nq ze%IC3Lh$q2DDHWD{OD{aO4mAMb-h`O_!2z( zzNYJhQ`xZ#hZfXbG3e!X#MIziM{)CJN+5ife3y#6b2%T~H@>r)p5z9+z;6)(vXNl_=EUI(C zo^<>(@n)_{5_|9WFLY~>s8y|a~O2bkb$U{oWpmD-DKcuG{D7o{u2Ir&fQW=Ck@jmnU0H2CDB|&qug$~ zx|cKj(;PQ`yu5M+j|llkI4`$@3XWjFI#IV;VlWF+5TuBpIQ6)`HRsY_$?Ct}2o_gu z3`vn&_BbxKN+m@~)1vG6ePvwI@rYb;R`3bxp!&OkE>fqGg*R6p4B~U1BQ-do6djQg z?BoV~d;SZN;=!Jie#EvpxdU}CJ8N4OBZ`e~eHBuFrVqXCVSXiSd1~o4MtK_wpCzVOGKb=f(Va72YC^<>%v- z$s1q4mx5<&BSKF(nYq4^|EBc~ixs_`W2Zz)&Nb@P1?%xU-}vfNNDWJTEt^>uHL&-o zsV=}`P530AYs8Ml#NdZ#^8vZJT6sdUd8C_6#L(Zdl$1QBhtu6=ImrDcPPaI@nrCt0 z)`vC$`n{j*L8!#B&=&IGR3Y~uWq;G`5xhfLtCh>dIomvD!@AEvQO4n?R%LR=nAwwL zb)uhzYY+B0$Evs_gC=kRp_+s6o^rT?Axg@~(gWYGGTGvs`-@QPPw+;jx-ewoV)D zd2bV;e8iFit{-f;X7dZW2iaGDgV&k?BccSqm27_d%GrA7^^CYqRygsYd-;28Gyrx4BEU#=jdbLZqt_CwQ*#Yo-#Lbg#Nc4bhCVIO0)wSFdT^=S(OCE zJ3s1WT=^b*RC7ru!A#(4xoqot^xDcN0{ly#-{6lt!PW0kltRp`6itoR5V>^u*D{0K zIx$T@Qro}su*70C7QXf&YReVV-;u6YP610MQ`lW!>y9M3`%GkOU9Big1`PAJOmFJ5SF|^o!?NF1AGe( zlrQ3Mi2>5aao>rbF9kC*($%}N(NmB8CPop+6Vmc%((3E$DM;t8@aWSx`-t(^3hcWz zWceFxT^sg)>5P6=oMa)qjKmi~H~1r=B4>G+jY)MgrlNhWTAx_>_lJx4+SP_BhvtS% zJu6SQ3^(9>gezgK?bW3RrohphXn)o8pLni<4?gBDwO;M?1S!a5e0vYaxc?SLHj81S z(0KX!CQr?A^=mFp4*p~)`<)Z(y}myh)gSkhpao@0qee5$z35>I>vkvEWQ}_1p5}5! z(_-#{ryHkSL+?~ub*-W4Yty*HpAPktI`Sm=4R&OtDUXAsm>By!>46^vmBYdLZ~8SF zVwJgnY!mtUI;}hJNpz>Kl7NlXRyA4Dxm=XfW@l!s`WNM@s?co>2Z;!yIjd$|kEC)5 zA=>VG0Wh9We&vQHjypeYUJSv9)yWsTQ=;ZQeKa?zIfc8^1vXq(#e5yvMs_%`q)7B z?{-+n0MT^I|IWT`{2;lrq=vn)h_yG*l@~G9u?cx*mE_z&BL412HN6`!x{Tvb;NW8G z_D0~>R}SkSJ43eZ#P&FrXpK#Z#6~(bPn9xJ4(*h|T}B&NlZ5JrcWstuRrLnJomowv z7qd(u&=igvmtFClblnf?x}+cT*DMUzZPrX|3oRW>QYs02@?>|DC!V8MgFz#3if8&C zzgANaIK8J4#%Adu3VQwG^?wrgzf*tOVhp+-=)1SyL`4nY&$^v-Wjk0<(!%mCf<|(83P0;EQ#WW1<9GSJP(_`^l67TiU)c zPG$AgaJD@nE z@LLJRi`YSX?d&-r0?Urmn(U_xQXSuLQkqa1+cR<87Z>L;{<2U0#2FS>+*tPTt3~xM zIPxoS4lPW7Z>#dPty$cTOE_1yw0yh9OyQzj!k*E?+sKhrPJS_NIeBw4YgXUlS;>7Y zvbC}>Q*T02e$_w`A0k(6Yy@z;wwU*;?2*29>z(mSUSqfz_BTDQqzH&h+!)6H zas&B72QdOI)#@2#f2|hyBoIikP(QUtIQh@@wM8PbN%9p;OG>yhay`(nsGc()e89f^ zFLZb8NAxk%z{h=FJoH1#-Fe3>tLRSx!MliT3Q~eBi5UVUQN3&SODuxLAKDHUbe;;q zI5m5D8oVs{-(DxzF+dX}Y~a~W8K&z z=bve693wW@mekZOp&L(fnOQ;P`2K)%@IJS5(p3!-vcE4O)g@la%|Y+Vy|&IixB%ex z$7tc4=k8zFPKHh1pMd+F$(`)O_~Qwu^GwV~?2A#k~n;POqqRgphT+ z9zL%cJ~LMpQi!-p75t^pS@)hFMr$wcKqy}+CZdma>rq zDM6jrn`d7MXo639&WL6LNg0v7!qxRWk84$BosO`DXZo(wuMp`v_Zto2z=^G-|J4`lkPmPweOGt~YbRb953x)M(M-11AO2}a(QYBTt)iV1n z2Bn!>ZqXk1be>M+A~3#mBfH_|YRuPzxfadUGh}?6`PgD%7PF4)!OMlE?a6Y}mn5%*lE)<>7k>>R$cv?U> zJ-jDLD)~h8iM@Y&{V_Y)YhH>zWj@^*4GONn!g7Dg-?F!xzOj?SlhP8yOkuAaNHHoA zl+xGdV`qC=^kz<1@VZXGXKXP%=-kJ2R83xmR9fs(f4bF> zwW(PRr>qigC~s_RNH%V|Y!nGiHg;&V8>KKEYfEueQa&3rH4mq88K53O$vu*I7aX+dz>Iz zR)t<3Gh?WHbC*pWdtuS~I9L7nOAmM6*3$R?6@i=6ehHR~1H77Rq5OvfY{k3iE&ts2 zkB(mexV&h4^8vzZ0F$zl_?)0Pk*=_`y4GK0*C-$op(dKc9l2G#%+je;@21Z}f*-Lf z5u2NwZOr#tHCKxvZU)(7=de_@rH56?B@LQ}+ro`Vaed)XXJ2SP3Bz z7Xb`Usb51D|NipKIP=crFW*dkH_RFj6+WwW=?qfc*EKr3nwVHy7h%uOhUtQIxl1*4 z_Xsu}^eKkq$c6{Z5e|_#Mpj&EvZJF7;d`e9^LvdDgcG-WZ9Fz+?Dyf0uAQ#@+#p%BN;>5Fl+kLKLW$Y8fRuY?seP}h?)(-{C+zqi4Q;C@CIqbVCB&xa~Dc^YRZb{t~RgD%g8JJOn>sHo`22V-C1N_Ye1JZ7vlA&%^% zA8`IznXgAc7kGc0mwzl8HVzGER96dArXhjIxp_lIK;C(2#T5f=N@2xi@F7UT$n_+? zccNHpdM0hFXDf)^N@yCq#qJxSXT%X`IQdWq&YiZKRAv<@Q1OaawxunK(=1@k#d(P|NfCLza;3# z@0pArPUgO}b@i2%4RtH-jdRNR{pK05{q8IY^-5-}%%g-vTjAkJ!kvoFoN<}rN$E4X zYKIE*#$I&3afvrO@SMsl#n^ym0oIbzx(y4>5_qn=25hIK(3%~h#gLiccYU<7j9%)W zdgW9w{Q9N+XpqzruFVe`PIf2~_UMD|SnAOTGPBH5&kUW{zDk51Z;)IqAwCb+HsQW- z081}B^HD|z|C;$}{JR!jQC+=pFd#r)HKZF|C_jTR-J)_E8{1LWFI&S#>LKS#2A?I3n#7-uewug!lKp6L;*1q^8gL~%cc32OhbXok<}f? zJ?y664rqKHEb?^Jo$@EFl+i5 z1K++z&PLilm)8gn;-lRTxSK9?Gzl>Am@ugwo~BrNgI|efMM>gb#0%}~tH>W;*3?wg ztf@Fne(wWx1y1MLr^RR{RaG{sxA+xkxs6OlmX==5@Rn5~%;l}Zqo~f;4igcH6i+{` zo}@F!OP~{qzKW{WthlR2`4<>!Oov(r+gusw^$lxBZ!xTkU;%;sIqo*#!TmEZ+LP^D zcX8d2BOiH<6xWz?b5|v$shS3iZ_@%m+Cp)9r}E+0T>9CqAN-!#e{_gKKFSl}d_8B}~OvYmT|ON-!;ThR_|{ zN6ZBoJyPOSQPbW)>VlB!on1k-vN+?pu{en&_tbcZ11fU*Q}O>wIKG}s+fO!V1|dcM z_ARA2$KK}D3)W5wx0b)-7gvEmQbpF>>PpnvBc^P*lv5Se!$TJNzYGZuXL(pRm3da* z(T|S9iVC+{{cDSwT+VG)&j%wX%+L`-l&ytiJd7Qb%$3)&ta=AY0)ro|rUYd9Ru4EU zY{F!61sKg)T@tgU^J*n=oGR}9k3V1Xb3Ij-&);CsOE}gLJ%t=joPS=_5zF_@g538#=vCY}mV*E!AbA#280 z7!W(oc}Pu)r8|J{t!t5)$=;Mi$J(Q*rENVu{-v3t3*880c%pmhGjP)k&0sf6^~rfJ z$mV;j2O0GclRxdn-E1*3oIZ=liIAUC3LnbNJwcoMBhvuiv_^sQ(LFehJ9E_?7~CzL zqf<09Ce8Eum)~!;ugSSpT+tCvdeu;et0j2dRdA3nMoO*4B%E0QHujZs&ouG}vwR5>h z?9yWPRCo2Q%ROH;-Jt|wqZ`4S?si{S~ zk&)W*qv>~|b3a%)i&=BH6v^mD(%lQ>oJtw!T-kE^Wz_aTJ~7bwc^#kgX+tufj%Lq? z%&7Aio3L!gnvvCa9**<(WfU=My`?}6jqBt6Gr&l$=nqGEzbs^}lrZ%C?CKsGTj+1a zKW;xDB^4iFasS!jcQSYCIW8>{)j}~2dE@(zA`yRx% z3JWXf9}@>akkaY`Dih#CGC>>djG7G8&!?32clZ!2{K#FaqEN^qaAKVL{55Dg25?h& zdl~SzEK_>udUt)Xj4D6S(&6y>EP5=YJvs$Wao4hX+&GX&yn6^vrMUK<44LD{Im^1` z@zc#Ecr`W1Hh`wJDfnu!bu_~8 zE8u<^2ry0nikCSk{6yOJL;Mfmlv+d5-59os2@q7Cs}(7B!%`=9;w{9%zWD4Hd$!nC zKol{NgZLI$p6yj>d~%^FGr5*H$u#an45{N){7xmgC6g^e+)+03@?~k`+SW*WUE~5W z?IND@d4Qk1ZKy#p*!85Of98~xL5NJa^h4TSw$b3H$r7e!5en$xpLp`FXIHEw@+4_% zjrak$c(}^w<`NpH#`y3t>{o)zvCLIHc5I+NVpqo-uqP71&;`9ba`B;qiC(=T{<3E} zF_lm!N7sK$)w{{7mZZ=P?ck;T-8kT(NgRTCwO!G4xJjBdQnNT**Duo=o-)S%isN)S zmMyiGhm>6yM|x4M2(4t7Z_d%K1G+@y@k2S3o*N$TAlaY}yUA^c2{$*EgJsjanEVQ$ z_l*}TME&CcAG7-wFbf%|%;j>X?VQyp=&yFPw~>Ss+{Anf><=L>|3kXQj+e}Jv%luV zRMgBfG}IxTNaEY5pfsk_E{FYIvs4FZk!=*Lq_FB-S(G@V=JApiMiIPtNCksP5B`Q} z)@tecuv&YRVkav9#x!N;N!goUYZ2u+`i{pxIRF0gt zGt>t>8#U_EYDGY~oS9x~yG_BhJVBYJz@K=uY{|c9XF?9XfE|eKL47iHW6(Tu36zh3 zpQ2zGn;;i#K*$WZFAZiY`EhZqR&4X1OAM^8)yzSNi{OmF3|>;KLO1$7d&;pvpYwD6{y^3Sc%1H14c%_wKEF?Ix=)Q|u()egvf;G1 z3I6@S2_zny!ZGsK*z97vDH3sY`QzzhGo4izhoQM-^_L($VYhqwQ6FC4{GS*1G0oOq z$(jm~IR`*EW5@&a>Xz1kZDzEx@-d$ZKIS4ukxrMclF#b~({Zo|Z6)$x?=M)g#8dH> zYJksUnIBI|1~5$DfX@=R{ z!bO{BsYGb86dAnt>utRjB#aDf?o#Mw?D@zb958bdra^aqO7DoF@GKA5bq`KudT_xD z;=0^g)}2TH0iv&JI+5TPzeW@|&3lSi@=fDqJrg+Qs?fK=_VDD=GwTp>}%N+0%j_ZkagmWJU+fLjU z$Dh7a(`$pe^shsG*n#@JbteDFal;24_8WmHyiepC5^L)QEK1})E{*^C=J9;_SejV* z8$cekHFLBTytDmbJ+nlPm)kltKc+gOj1 zDJUCGz|k~D>*7}l99{w%jDh@hjLMeXkyFyGsh@I*Yf6*Ds$|^^zrd8)_o0d_2{Vx7Ff7ei|5je=Gq2{f zovaws9Cjh&xS9Wo&eB^pxvtEop2aVj)S_j02I32e%Ul(`no|C^;Og~B%xH=Ku~NGI zd4H)sQ*r+%qTF?#dRbO~k?A(P|5bEEaQdYh$N#G){O^?+ZP2Z)*XrZG;h@Q%fYVJs zAxf2XfOcJKkBD`L1EOh;oUl>EbV?YBClU_8fF)TFkX^tTQ#osmE=pz(xbh|&z(ri+ z?6qZ$Dcodw)}xITxdxPkp4ZAH9ujq8J}^>v{g-ljFGG+|p=vl_%%gjI$yPX`A{V_f zmm+Y1svSysjO>CMGs4|2@{(=pEie8O?#xdv`HhqzZs+LQ8r%&A6Zx06XZ(_jwvZ(s zGNT-nYTS(~3$sgfzToHgmFR1$ih9%}_U%A>cybp!crfuMnaN&<3iNpNJ+G_O3brET z9J#8~JeW|&#m_7#_jG?2d(ccdrC?;BU;pZpyT+KwN8hcc>zj8WYL4YuAiyw3t!|J zan3d@^!u>(L04c38O&Vc3?S1P=3EU! zHbQgnq+?)KpC%|fTf%Wy8B9QiyLiY+qDZUN~BG- z!q1+2;Vf9$)b%r)-Wb0$@r1AhRl|~bu9-_w93i|KNmxs_65Od}opXgZnU&h`m{=ws7k(&?De_C!BiPsD?`63V4BrU{+l8?h~{_vA=8sB7mBn>t~7|5;#KE% z_7r1*MuYP*+?7q~-?Ot6dq@S`St>IeDQh9|;N~k|APqd(!m9?pI-o70@yo0&o$%0DJ&E7O-O%Umw=C}MT*z7(gZp`Ysc!>FgBOY>qREALu{ z%emBIF*?J^+CWM}5rsu~cP(UTu!JB(XLNkcp83tSn2NQnP&c(*gl{%&ri0`NAq`oD z&+7u{32c2&o<03GBh9{rA_{_Un^J?=xR8sWe|KmHq5t@7e9xSf4Q?Cj@r! z?VJcPR@A>I0t@G15)T|k+4F|?HpPu+&yzPNR^+-)OJwgmD&vFOV0gcDdT4H#~8Ao`L89?;ijmkQrO zEY^h2zuxO}ReG3uG_A2WckJ4CE%M(*E_ld*UM|Qy>v|mz^+<{Pf-683<@B4Q5FHZkY8}NUf*Y6=u z@&7;bedWSWD1$EK`U9Q3BM%2l#35O;MYjj|RkALhV0BT-sNa}x_ll{fL6j3R>Cxm7 zM5zK;x^MwP|+G`6;kmZsBR%|`V3qjra_ zb*Fa?Wt!Czn{e&R8v2%G!WUPsXE!fuEqw$gtxfpWwnYG8DQ*sY?glLiAF zApg?JN6}eNhH;^FHRvH)<~9KhXLGa=78b|LKdc*{a+>L#NrdomCFx<|Qa3LaTQ~7P z-9%#+zD2@_C2GR@Ae2aCys(5 zEq;_+X2Q+xM6wes?sRW0$WmJE$E>}r2|sdmD$pbpT>zUh=ilxq5@OP=NQ z)Fd`pw^@*$aiR-Ji+NA3q#*zGGa+#yP7H}@$9XVN2AW0!GoDq9=-(}O zcy81G&~_|Y{a}LGbjdU}fX?-dRs6%F+59nT8d22eUV8hHgJqI|+b5Bj@;fBkeQapI zk-f4YLZSA3s*9h5%b#mqyYM~|j;xS4om^oVCu;sBoo3#ty3P-)Nkg(GOVQ|e?}Gy^ zfPn#qhVlC16?-T{xLQK@=JkctNE5cl&eWiLA7U}ke~W4wu{tb1^t5KzY;5~{Dh@`3 z@`s7_rdb7rh{O0kQ1c@zKIwcJo#Buk?zV$YKCJt(tUNcczC)+!Bfvdl?fW9`$ouA3 zO3M-Un2w2tKjkkekLZAC* z^~y%dqf3~Gg=5tQ=sp|yy9@KoM1TScqb<;#RrGdlub9O1lhg#TB7Ar0gk6=r!AYD z5zTaoT;~y?B)&Ehq}rT98M|8GC-JFgYPE*#n&coiV)qE*`(a1R=}(G}@g+EBL(N8h z9F~9E*$$c!Thq5N>xKIj*5>x$#2Dc>XA5E2iB}$NbE&us)Hdh#*p{#%ww^fZr1}he zA?CPudh<w7^r4t={G>jejCQ zGm-4UQBF$-5DqJgC#~l1pSQZn&^pJqoW6Tm?hTlkLHN=-zqcZ<=$~VI=38x@@G<3e6QUKLNege;t4r-7x|l6Yf2NR%;1DC3 zg~Zj}=U7eb%8>2c<_QY}vdX5#ATVrB!7+A~;+g@!m^ko2OEz)_&knPkexnkQj*1;U z^)#dHx)Q6+2ld`t%XL-FX-LlvQ5U&EeVFrq_xf%t07{iq;dH$Wegpq}g%#=rJ*ZO0 z_J3$a2VNe3?F>;Lybb{%2yZ`mSG4$43oW}Hkbg*xSrIKp2e-4*8hY`nUvAVK)YFYxf|F-)(4+E2-WlFfjx@cY#=8x z5q>JS1P=iDn;8TdkcCbEu_@2}ekh7fBrR0`xAInCho&qeDlsb|o}TaD&MrkF%+1w< zR$8OfF%}SZ4ptuB>s9tJIY$0TjQg`koC0Tbe#0V^?Ga_uE9mK^qz`N4c+_I6Kb7=q zkneKa+W=}ySCY6Yg#C-BA=W}Mg35xG|Bkg@sG-tcO`aSv%hutnrM_d@*tYe>;B&5B zP-TA!Uj1N>4tAce+W*iorN*DM9Zzq*X$?Pa_4vDZA4`Y35vbw?2K-ltfHKWGgE#j< zW780?v$_k*rn-Pao4;WkjFZ_1?e`ybpYy?wZNIqHA;P8+qbI@RL@*^zBU?v4u-*ec z{=KosP@aNLUtvG628rh<3sNIf_)!~QA?Tj>F7>-14LmQLDMNJkl{Wl$tk^?vyPRHt z8RSA=;6%g7r=6mdJC8L7`#P_l{j@&&ffM%uu1zFFI{%%Z{DRDnjN%2U?IJM^MziVe z2k5(3eGRbu79=YFqJBR3{@Fq~y?6xqgQndR(hn7R#$~!ZwrR?{XBiHraqerIJ*fEC zEy#XzyuaO}nHjoDF?Q9gY308Ge(#Md@;@XA{&SI09>W!XQtz3O06vtYUJ&J4cfFl} zcla*d>kBA+`reqpbEKFm>$=IgJ8y54Z7F)dEn^@yJjdua9|_&2S7+n&1EnbTur8>* zE`g8k1Q23RQ@Ea;@ofTT7F@FPO(q#*vC}tM(tYP89{H0;o$>}jZV`<}do_SwgFKOi z-Luh8$LYI6U0aky4T-RL_gu63W}ocfEnc$I?*4BAHZrj*!?%kecdZYb;y+I?tmjbc zmZr0pj$1dBRI%juSDiU0_zb&@=%!|aTK9f6puTya+-2pb+Zl~rwXOWxE%l>OM**jg zTix9`6j&65@z$z0UePMQaPP|nO#MwKZpHEu{E9jOs=(C@ng1;L7z7Zq2MUYV2+LXG zUCH-BbDmlZ*T19E6s$4SsL9o)NC0Wk+DC*|b7Z-vp8uPG(F!Q>bx%F6tVBIl@mfiC zN(x#_6^7;88)bTB4XHn9ncM&5+0*(=Vgd*TvPXBRosO3T`WL63Xzw67rJm6>_ z0fO;?0A|%>MPE}JD-$5VD4;!>{$58=K(>;vEx&MA89>wTbEZTU)O4gOb|D z=OCHTd#ltKI2YN03Sa5%Q|)*LdUC(=dz~c#U0!XkZF@eL%n!qSj++7DAqYCw!oAWR zwki518Z@avS>H*aCSsZ#-L3WYYM~BjuR%}j?_*JI(C?#gH`OvgS7!0^-ma|IV+oDm5&qBL00_ODRZWh@obzAX{`G~*q?02E@?oo&q2KA z#2NQ39`yTuH6?QTyooU8{wqiNS1@Eip@(a2`~Zyg^nZr9m-B;p?)MbrGH;F`8x;3m zThep^JWo(RzqT`bcrEq7Vt*twCy#EbqovoJmr_OiEZ4CeiU`#_R&r^P>t+7iUQauN zw;%TOfq%JQSuOBw6juA^CuVl7TFy(Rpj*m6aqk)VKr%B6@XJCY(${%BBMxWS0^f?& z+H^}g*E)*~iA_`XN!=!)CyJTB%Dfr-4x3?KOnoj_HaSr6fwL&~o8qT?l>Fi5sDA`x z7t!cAssvC!y=p^c@Y()4yUC8@r0`MdFVvv7p0>J2tj$s-VuF>9yvTEPsZ?OJCTU~sznVQ-ZeL(y!C)9o4bvsy(AjzTWtV43l;H? zqvo)jCFcsqCP|mEGe@dM+-zGBSe?BHKJh+Zz~V0M!=5p%GfhCL}}^FKeJ` zG63s|%j^qWS;{*T2&lv;-7APb5u}~-Qd0vK8R-FF^#1{V?oOx)`lv@9H(mdBM+64g zS+=Bv7ZQCAtkbW6_L*dsOTi3r|G!qQJRYjO|LfMhQpvq2S)vj`gG!dflt?;=F;p`s zkzs5p``U(3>RQH?Whw?^vV<81W6IiOyG>(fiWr7$DY6W|b4K@hdS3VUJkRU(d;R`7 zGv}P|`Fua?`}6sHzjG$JI(U|>{XPZGc#~oaOgvYhiwRA5r?<~%wWISRl%^iy zBV28ryW$@7#!ymU5K>G89dFHl$h+3|xeTslwX@)}MF4t`iFIowYcB8BUAxF081*;N zzO|7h`pE*uvySMr`qTf+g7Y$~tC`qj-el*X)f6dNQdboq}9egr*gqX%d6mUkCDArBIr&p;;xpLf#I@^{S)^8{Qk(0HBCGSSsAOe$! z1TXw`(Q`0JqxBo}369bQpYO{B^98deYrgO@<=?uCLRs)E`Y$UMhLThLx6XO-!q!>- zGLtsy{T~MK@`>G9xWQf5xXCP@(#)w2K#u130dfWq8h9YN>2>7~1Wi4TT)TEYrV-kJhS|t{i8nY2{tBgE?>)}GWOjY?y?lH1+ zvNj}~hZAgItDLm}-(1QmXHJ94yM-EZaQ}zG9(4X+6}EP8+C<+#OB7<1g`nfSzGm%< z);_a=f6g4pkX!#^--Y z3#C~Dj1t0lY7Xjgy)r&FYwTND;4>_KDtX+3Dlxb?pX{qxsQ09AFO6?H(4{?Bx|zl+ zf!Fc*3AL9PFZ|#QWX-Vakd;Bl@1~*h^|-#jMLlkew^?_bQgTv8%tU-XPSejlq4FZx z1~UXYGUSI>vfPQ_Hf+b)NynOP=Ys++TK|l^@EjQ^ZtEW)IG;N_v>TEKRH-kl;AH7_ z)2VfDdXtRMi_PY%^-A6Uhg#n&E$K|pC?}S4m9B6Cn>nr%2kYw1Qz+h2VD zfX_^2L2AXTq<-5HXCXcc_>#zF9by+<2GpDDeZxj=wF0eMN1YC=qc?O zcPD@RS6McEc=Ek`OzBYS#{m}+DznNnpk^@QcXJTcErEU~SlHs{5$?O(hjMTOU0o_3 zRT*^o0qvGMi#ajUb3LeH9#z68Oex3hjBEJ#CZCMdpPRSV_O{tJnbdnS=^Ce8skIH` z7|l7EAdiU9lgA)vOt?I-U z>3f2yIBtaD3ZA&l1Cn;(5>VtoQ)x^bZ}MhW6Ro)oaT2P9==_PNi&R;1!<>e4r|+p{ zM4I_t-w8vgn=~U?;B3Eu;lNXGL`>hV2Avvm*`CSi8P>%WZ z65$f)=IlWXKq3GJpc?+5Yxzo3+Yuivva>aa3*C=UDmi_QQ!9c4i8gCm{lQq}%vh=Idm<@k za?28Qt2FA8GqI8HV?iW5%E3kt|wc5g@FBDZv2p3|522z<01m8J=Uu#%O7*_ zU#VK)pOlZ^1>Mv`uXvHY85`4=uOI;Bc<=xc*l-if5B!t={csc9KbWrcR2344nln?g zn~bZNlmE1J7n-BItwP)4w*E`vPq`vLWp8_Qg=C%W_kvfbCa#+<9i4E1(YYY6^Mp9q z&sfww!rag;3N^nTLQn@!smJk8Vqmwx{_iCY>Q*lUP>)-z0CnU4GWM=}IYCa&+Z(>B zGc+Q2I&cV)u25c)zP-O?j<@tGWNk(9$Qo|EA0|Y(t6D;sp)V7d*BN_f+hMDsBD0!n zQL$Th+np~dJ4E=X*o52uu-|+W<*v2|5N#6fMkyP6`C&19u=a(eiiaE6prEe+9&SX; zI}TlLx{AF6rhR<6O+>Dsb|H7k#3s;X_aKkw`3)oP5op~`sM?xBQxQ&lfT>Uky4U%c zz8JzAoywn_y|H#scHHUk)78YOJ65j^)=Z7f#g$BRFDx#!Q@5=Brp;5^Xo~20i?Ls| z*Lxn{<)~<_?3?GQ=_8odAssNALON!zPb#}iK^urfr)D0X8cdB9MmyR`q;?N|GQlgs zmgef<)*}NAYQ+aYRj2J9$<~wcd{Ve#rASlII59QD&NtrSOCKG?!f4E#G zlffve7k*Wlb+)n&&#;Mn9;+W;@&q)TkE(F<@_O#x9!c91dj@eNZu8<$ zlGK4kS4)~*WbU1%=)7lH9;217KIq!3T4X1*P6j?2DAo4gz|2?sk{Y_z!ms)Ix%iF4 z;0qC_V#AKASP+e+nh%F>xK|>P5#d?*ph6nyl9KCnw*?mTIL$SmbO*HhNK|_5H`W)a z4824Hx}y5?bH(M+LUS^-V_Lt&pDxj?a~r9j&Vz3$`c(C(eMFEayTe8j-s?0K-8A0k zul@QI&dUg-mRTazbaQw6NV#8J++7tb2&JaNtPvMeQVq@OHKiaAI;$C|A?;N(%>|-~~9|_5hR1Y$H2ZCDm41MPur6Y4FEk zgQ1o^7ub^ex=QE0;_VvdO(lZQP>W<8Qv$dlU&Sbzxmt(O?Vk(ae)7)V4C{U)7@sR4 z??-RuLLZuhy#xHJyRTSUiFsGeEUAMYTC2AkclHR7{4oA1kXmiGP}$(4gG_4-g=D#K55Cz<)u5P0#`yNZ==M#pBYl&& zMxt%()-+LZ1B7u*uBThU*}4-YvNwA-x$d|wHk0(xl7XvTll_B0?aGOfb=X__tn%&> z-1Z`8$F;7Feeyl>B0w3qQ*pQ41z0v%Za?h8GMUJ7=3YY|yK+eVJr1gd$l_oXFkcy!%09d6g$v)|ozk!nI0%c`)OrP_DZH{Z5uSuCR*dYG7b zz*vo%ZMdXU`7SGcdi4y5V#z!A#~4w7}qKQNZEp zSzc=Hus-eco6N>)sU4-5oD$^0hA&@E6@Tb9KGYWEMo>(&MHu@GQy1^|NUF6E%{oJm z*12&LzinN7o=jj0mppLDTMW){?!um9)li3=QQ3A3pAQDUPe-97!u6#fr92#(vtIWD znTA``m&v;M;}^O!3BlJ-dL_g}5Bv;o&f@xxe|%jUbx5zS4tc^yJfTX%|3`LLd7bcGZt7PC*9mopKR%ShyF2pMCzgUk6=foaocG zW>D+eYs_{AV3KOlMAk}>hnt1V*`x2-7{wZga^$jX4^Bm25K3ds-H3TTA5YT8ugMiN zs=#1y&xCum#-ZSTrSrzXj-Dfvsy>p72d*B@&v5>eElYWrBi4L~nwqSCIK7|__qfO< zFj&D$1fB192bI-y6wf^pDfOBYL7i{ip+r4S9QNR31*?3Of&3fh3>5XeN5^XYPN|kj zDc699EhXKz;WhTxGSB#jOlxI+X}K&K`CxP;vOtH*uxILZ2L)R;@Js< z{YBetw%UM-juKR7nBVEBNxh&75Tu=@^tT*mU-`mfEnxk~M$4SE{iPLJmHSf`&k;22 zz#Q(uHKO=Bb5^#uB|nQTq=YTF2G5!BBbFwC-a@aRd|Mb>Ha+_|6XX&MEMFt^=QZ#h zz`xQvKSGP4IA?*|8{dn9AA|8f#_l>S{Fk!f@6@_Q*Eb&c70BOj|5$`n+dxD2dI)hq zAkrxR&x3!cSpEX6{{m2dLm;s1_^T}Xj%4OGLxfZ*xTxE2B8K z>Z=eS7S`fcZ-lWtxm#4Ty?`~E!8m0Y=LkCAci03~3kviw9D*TGZuC#!5uAlzaq)3= zeZczdE8tTv`^pJTRU-P@B9|6oKTg!Ovb!8`Fi-5qDW6b|xUn7`#tRM_4_s`(Nd>Rm z(l#fH$-)p6P%{+YVUsyx`e>~um%~x~LYRL#vCY9x6TQUa-B35B(<9azaEfMbV|y>j z$;$RXT)fmP0jK(+EMxFkJy>?cnet`k+qEOex?7YoDb%zq2y?b#0G_@^5$)of-AXwC zvESwfa7C?Kah-wz0afS69D5wUjs}*E6>i=q)Oo=FRf*~SeYAsUsbnQ|S)pvDNTm=_ zB=WO3X*I!isB_|))1@sx=fl}DD=2d#KUIHvRh_|@^G)9d?=VJlvr6}9JN}N%OWGzc zAGAs{vp9PotcI&A62J(yXU=^TgWOYx2J^%>G`u}lC0ZW-8RP4yr%gWgTi~A@4c7B( z+jjM zjWgj7dDgkb1ffL9fvu;y#^RYHQyz4_CEPsS=2{Amht}D%d9Imw)!v_lR`&d1e^E|B z?3`0dtYMq1n1w44Hf16iPr?qL_wc-U; zy>8snjj&^He<6?$6!;&Sq>iqLzmJLAX;c0_MtZVIwGR=lP*|_e1Y*2#~K4)2~2d|7C=HNpu?wP%Bkz}Ha+hxl^Q z^1gZf16I`;dZkTVX1KTVC!tq`^j18n{9Y_~6#wKg1EG`x9vld2B}L+1^I zH>W`w1N4{R!xbp>k|igsk7-@oW5->a9C#&sTSMT)+ut>PG>WF`HgEq^IQ<0XWP)rY z7JWCW1|Kowx<3+6VGY5cPU|FWgBOp3i#I42m*D1GFpxl12jVs6#BYuwEK&Y4-Kx!b z@LwPRr|mCr4zHb;-Zo;lsNqnz!3GU{9Bde&HD~@nEaQO6)YS3MNJd- zcYud%)IQS$BmiE=#_Tsmz<%FvO1TK+&P9S(@D_wGzw}c%#Zkk4;9s~32$&jM7!?{` GzWqP?$&dvA literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/edp-sccm-generalscreen.png b/windows/keep-secure/images/edp-sccm-generalscreen.png new file mode 100644 index 0000000000000000000000000000000000000000..788cef4b8a3cce813dc0c2e2cb9711099e051562 GIT binary patch literal 30678 zcmZ^~1yoy2)HX_6XtCl_inO>xaEF%S1SswjN^y6mrAToJuEm1826vZ2aCdiiZs_~n z|E_PX|7NY^WaiB5k-g`6_MS5*=&QWsTh#Zc2nYyorKQA_5D;ErAt1aQMt%v;shKwX z48Oc^P?8iyC>bW%fhQ16KFh%~%OlY4K}hg4imjBU0|Ej@$Mg3^k4>Ht0)mT$wAg1A z*V+A4Z6NUuQGl6hwW@QWo@$i4`UOqX@7V(F;+SNarhx?pb;X8$-OG|(x>-8yD(Tib zzRyy<8OeU%@m~dWrr05T`Dh}~jp$2`g^VKo!w7`y8^Mv5=*{t~hvQoWk&b2Wt=9z; z(ICmAPr!uWE&MlS>G2Q~-YEoxk0^ZSOC}GcFP;&zU~} zpA(+12q0g;zf$dppyxruZ~RL(PPIF7yg$lcnjeQ$?rl!&@YLBq-=4N?kHM9TR+!XG zkcwRluRWG)fs|Gap6O7vk4-f<3#)tFsW0;B2tJp!tU(3OMh?y?1-Fk+Ok8Y^I#p1& zovF_x%Fu3#SYK(Kp6y=-=PIPv)VQP&xoc7*sbfD^OE!^Wkxb^q=nJBzuE<%`)w#o% zN!$i22y`2p==TqgPfst~Lye8oG?@r=#1Wj2?xZfBHq%m<;=9FMs1J>{O5SeI@{_5| zPq28*Y8MLmUH4tyF9c0W!*1|cHIo`pT0PhT&5CPcG67DGj*UbP4ET`60A(~Zv}_qp zD#@D83MMxk6xizO>f^(m9sXx$Si`r5%V8Jyks8=u`4-H>@oE;x17Y#87?u>+W%m$P z-np2yqLGu#STHA%Y9`rrp!2Q}ZXv^>K>*F7w~MihQRmqAe6PsiHX&kGkma*ocBr6M zOk;|hoSb}od~EW#T4nIHEM?BwdY#@b=aouKiK^UP`2DCFu!E<3>s&Y+Id=5tSy=ye zBuU>_x_5QcV_yoYy2d1`sUv#6)SNG@uEI=4=B;`BP!Le=YDlttf9l9$sediNC}?9} zu;NPE*424m8bss%B-;qh@9um%(RG+_FR-B{WjS)fs0^+-+?&9NE3R@g*{6}S`s*Zj z=rKP7n6g;-JT;C)31auL&dHj~YKR@SDw;u2RkHjwW-y~0D#kp?RnC$V*65w79CLit zzpRDuLwac^{rtd@|JTnSa~$hwNq0>-kD~s+EX~Z!`k4JK^9u{XlRp7JEhR+|ab1q) zn6m-C(K)KDwgullI^S zUTAs!RjD^9X*Y7Trp6w9zus>?%T0{us`kD#mg+$v%);+=u9Oc=SSb?13>`4hyZDo` zvU2N@jYTue!Nk_cl#>J_3J?|+HZd_lD(G5PdG@+T+>{g<_XnVu0$47PIY|||S&?V6 zo|If4Gz8|7sC7%}r#n!Qjm`kLXD4^}b=C?4w6)5cB|{kdra25;NDP6f@lpt4K=%A*J_7ENRmRdNS0D-gv>A}Q36 zO1iISd6380%b(ub#)6Q>p=me;KrLKLj{@sgGq;P1cTzsZ1&)mE|J}wbKJ`EXy~Kiq zqJleCj+;Cr3)Zi0wizc9jX+v?Pj;{2|*_=(uD|H=`9>>WIwC zqP|Q%U*#Q+blfhYys>2NGTRqP8?xojeWSmr+(wsca%;}_}aOuRnwe_ygteM&Wph0>H0pUG5V z`iS$4&j(~Rs0yj$w?LuY+q9i|+zOu)swAV{Bv*m6)X5ro(mISPrlj>44GPdC+Kmq9 zA#_0g4B)a+QmTcX!yotJA8qu(PfarR%y1OX(M%{(+iR$`!8bW&mTf;@k4I$o^ZjfO zxt(X`%nAB~q$7n;k?5z;`wF4;7FGGRMkT-tJHEeBMEAbu4I(pLdL#oj^#!dh`HR*p zUtWBKA4f!mXt)RnRIKz?X(HU{2ncXYdj258GvOaN_&k5w5&vEO7ndMZwx5@VpUlsa zJ>UCL|&CF|b))XLj{~_d#dQa{9{4wUPkFRtu~<`pO!1?>k$Omvsh5uNbHUH-3_#FlgM>(Z zWCoe+#neOXf4PyCcrN^9aZ#nAY67c|C;Dy0Y$&r&m1t4 zL#Op~BgYfJjWbz~5>_eu@2(PvLN;1Xs)*wRT^c7}$?r_E4uSRWyFY>g3^>>!Ur9=c zd_N-le$=D|Mzfc%f0{T$s#Gnx(6|1z8?6XZ5~RQEQJ~6Nxi&~Rf&H=x9x1vXKxyX52$F=QHDfC* znJQdK`8=&}Pv0;9MN{AUy<#*hzXXNt7U_d!j2LSXvn%58I**+qHXkZd(8J<_3 zToxrTAvHPq!%6tXC8q0q$6^%y(ez+tVpk7%X|b6@OWR|_d850lRBJfRA&tRWSaaHS zTr1fn@3yz)AP_@sgDkIKXg*TgcI~W1olL|tr@`g=X0XuUYZSo#V|g}J^WW(BU3ql; zI9ELe_R;jG9Ah@nNuPigq?Tueo${X=*xIv!FbI3NQe$FTn)f!@JL30bUfW)RY!|y1 zzN}bjZnwKXJsPtrx3p3R)J7e5>=$m%!Z}PxXcbflH7t?b@ZI!h?J?s>`HWck7u-t< zo{IKPW`1_9dQ=9=FV$>TtIxc)Fb^y!#ZXm4SDl@A;`(A${Axi6*WpZdRIl^#W$CrO zt(`%51i-L71oTVAw*9-rvvC=H^OGj~1;)jI^~NtdH{?PfqHW8C>S%gL>rEb*I#ySu z6IFWU6Z$L-mrD*4Cc*t^5xRWl%$4i$q{2$(<+C!wn+-`@viPi? z>YLN0E%?K7h|P`T7R=k`=1JxjKJ(M;dQ00@rmoA4!ejgAlM@(Ilj!kt^@aOayL;|B z#SfI2=_4b}s#jqlzfY-}7)hRWh-F0SC;b&aalLeCXy~VbLF-u=1OjcGx4W^w@jqL_ zBa9_Ty}#WatpKZOw`GiFwik@`V|X+)+_Zr&ccyAL;}4r3K6tp?f;Z!OUU)ucH2@Ej z?<%Y|AAsyoSW|UzH6apWzDHMavDRL&YN1AHgVT#xQXMR8O`|AMu@KZ?ZG7cI!4W=( zRr}!Pg|tXYwiT+8WE<}-mtnrq^fczLRWv^#@;g!A3S1%%Lo>Q3M#PWy zS!GP{#<(i&EbQnF*{!wFL0NVk2Iza|plX_I6{HxM2#JIAM2u*)lXB2puZObD)BSWE zXl7MbZhzl`hyNKqTWc|Z`dMS*OFTq{DoNLNo?3-Iuvz*%56V1q92J!J#Pz%NV$9%M zj8q4M@82l!l*KTrdeTEtjJl?MqlhReyB+YD1#)`Uwq6BpEi|Zjprh3&cDep()S!rW zoB9<oRY&JZtAJ{O$l0#QxEAG&c5Jfl;oH z5)146U&OF{`Vuz9Y)`l}eGvY4_Dycz=&kd%Q$)78Jye3QM0e55@xZzG1Ll5O80lIN zF4I$}30+Z6d0IC=Dl-+`fu^WeaJHSG_b1FlrK6gi8s>4l4$l*Fau=y$JD*^fc6nCs zrL-j@*#dvKHQ9lfh&Xq|w}zfKfjuYJGb_U1xoi}|#orU_P*WfJ=GFw(`q$bR(QYNq ze|hsfWyfz{;a=F7(0fVCW(R+X#(g*eG}oD8+z30moX42AZycTlbLmuv6LZ^XhaN8E z1UTMrrR`%V5)e6pcs!}PTX_K?N zthCnQ&C4Fw6bf3FR4`>+?7FBH43`AL8B;f)n|;V!?>0o*5+lMvJue#`IU0YN8(?o=SS6G@F1XBm(6kP00w zWW2umyG>5;VI`k8F72acN;C=OiKO5qHYRCgm6(gw+9b11i@dterx8v?`4dYE@Mv9C zNh+qtA$e+xK&4wd_bm>sFl@EXw9p=EBa#sVQu@IWroy-T;)kfG9e0w<6^MV<zSH1q)W5U%7nn)`uto1B-poL;Zs zI$e&2n;Wr%@>KNSd<9E(%`ZQr9_OPG=DYjogU`sWBUg-waO`_}4_=Tny z%)#xJDg2)8+x7|gh4nCUi)ChkR%*ORzfllbcD3%^3U{LcyiW)^)&?@mtm;{j$x_gpjpuH~VTsXVH)Xj}Urrq3NihA+o0Nx>ez6Ed{A31cUNb|KrN-W1$ z4ffLtiP^uLOOw`C7P>5(3Kf-IW><41-sxJ=9e+EXox~rqs6aw5S^bjbCS+h=xe7ZW zGD%f!@F}f22XG6Wb`_ehgUN82$&Qo!vW~&eLX?V+I(|{lUrIU%k^bH=wgg!zTRP>a z>&AM}!7%QZ`)VhVkhVCV1Lcvr@s>JQKUd;BYm{qGXWAwWhk$Ha->$bJvyD|P>Jp!y zZg{x7f-)F-JcAfd+vHPv(eKjND)w#rpVQi!^BSU}B~#KvjblO>;uwO)5-%{jR6KlC zDXevW-W#BK=@3rY<}ik2eID8gK`1ze#lEPg_|fmB;{PG`4PZ%u@GegjvtKuZ&pFAg zOCc_wlh%8@MY~mVdq+17RwB=+wt-rzvWcw#^%vz3a0nhcv>&`;F(@8IkA#Opk?ls;2g#O}A@Kjk?x18L5u zeSNB<4g4yk1S>|V$k{A8JAyfwco%#>Br4A0)PHN`xwwvZyH_WD;5k`Y@YFsS_}-zU zk$)>hO6pKg}(4eXFHi$2&s8+}{BE=gP>@s*&8L9ZT&Jh{PO01b-2fQ6e9f?%7kC=%o z8v;*Hd{33-fky%6X3T~vRMDuu&#~DLgWC_U!83oSCWK(N%7i27{HCWLYX055cOGB5qZBQwsuHbs&qHo6vjYbN`AHv%@H>(m3 zF;mJVnqcti6knM9wv;jwU?C*;tMsI^}C(CTOMt1?o&vCf{7zwxD zQ?J-|ag$%95U`Ig=&Bv^BpuR}+d<*DttV77^81KKNa**7gk=lLf(eFLVqE5htj9!~ z3$~z6;FDe$*;hefh6DkL6UE9~uHL#)0P_@Z04rUFZ+Oik@8&*q@N#$eu)F)`?d@Z? zgo$ccQ<;=q?3kiT5m2TP|3+e)g^#l=!{D|X9R~ZO=|gmFQCKNnSbP@UF{!}z`Jcy_ z%$^VzH?nvB#oowQEkLZwlN8eW_y_e+DeDL;@byA**Oh6xkQS$Ch`8wq@|TbO%Mp`^ z&V{}!1)u8rKjdhJsIv4y+HGg9Heyq#&$nATm z^kz{7G`DfBEyE;H8x!g&XPwSKPs}oW$e8Ikr2=*HRZMm6H&0{3ZOcBPQz3(T>M&iZ zspgmJtPl{I%gQ>c6ntbYUDJv>*YdCUBNdr8EabJ>eRv!Z|I6$E?Henp!T?yTaJ16< zU_Y_SO%LF8RW=b}!L#~5v&oe3a(j#-Sj5#;pPD!yS|Xsv(d>VVc>^eee$5M7q%qx+RV}{J(T~G)i zniEFWwvlr8m@X2e0Byrck^wjjkh4xux;b&qAIbtr0yVU zHWu&Mub&9?Te=m5r>?iGOun><-CHvKV_AgeTmy=dTW{Y-uq)4YARmwrTD0dh*{;BU zobL2TWHU=-_xQ;-LOk!7Dp^GT>BkJ;!1r*yEMA`G4eyt$Hm>?z0%KQ9shVoQpn#<^U%or6)%nZO^YF z;PnkOd$!lAJY%aCQSskWMrhP(^LtGY?J`mnNB6QCigzc@ zV3}|UY>2Wz+BPgR&np!W{DhS9j;J8RyyZU-gFvm{2%T@&lR} zPa9#K_6&<*dwxw#dY3&9n@5ODHa&e9O71QU#@mSmoS49I1~*FEHXQ2dF_)$yLpH3C zzWNwg1)y~J9RLH4*YhOCMV1D0zxL(I)e?d6eY1R;G!9DUW zG~K0NVvbLbWDW0o^y!X^5 z4a%&%(Ie1k+;6lgN)SX^5xZ8mtWL;@To#* zL~RqZWCHj+Ww@MMyBv|q&mkAj>!!?k36%zlvZ;?*@?W$Lo_B8dqNi_xD&J@_fAJsx zDVu*-C3`r2{xgIq?c7npyx_(VQdcDkn_tEHt;^r>dxqbdTW+V?g>#p_+FU9Bybqrx z?bCoYASd^uTv5WpT1Srbqaxvx{^2L!7x{~7>4@jSQ$$~J z_MvUqv9qh0?2J?#3lz#BymjX0BeK-kKnksGV4qtNriU4qY)#p0lhN$T0XZu1bfesi}Kh zC&aQfUo|j0VOA6so~HsC>j4`^Nl@()261X;u4ropgjPi*o9(`oR#&a2XU=*2&{M(U zZ6_e`#rep)0SK`&tI3-!ddrZia#>U_K_Aa3E4!{~hMyZ@a`3PL9l_AKT~W)|v%v`L zuxVBlKGYy!<$mtzSAd=N8xyc{C6P1uK6)eGsuy?t+COFG^IWA`v4yks#NG@t;;Wxi zXJ0aoH|u@AnVGqHx2@Sj_niaVc$vXwF*4u4vr1pH`-UdgH_VRKEzZuWXJ)*15{r?L zgeu;9m9ML+-NNQFE5<0?PA~4Ojtb7s^i)*da&uxZ;-%u}T)3@PbaG@W_{6$8E=?S9 ze7JPkd1#hP}sKl8|82#28}5ox8x7RYYuQ3UIudNmDUHMXMI?y7l#43B>Gk zlcnT?lDa{QgJ;Vnsb^!>>r>8Y)v~-m)_Q6S(VoTEvlFKzb`uLaH(jhp2RB_e9qBqU zPnUW}XKhYPx0CKTLD}y#Uxjp0%x%R*%E3EW25S>jq90~m^V5v$#C?)4mlERUW;@c; z(K@~LYz_-M4oDwY;w{70J9Af$Q(thf&V?CQ^A~fUrr=gkn~=PB&L4+VR79Qjj|QV! ziEn63C^ucl-Nw~PD+;jCb3t-yX}vDKQrl$db5u0$Td7@Td(lesrn)#T)y6mDw3zN( zFqc@7e(h6G9yRHX!e-nQabErBX&%4u4JzTVYDR(VTTYZ28#;G4m6b_#C#b14E>1Y5 z+YB{qQs3E;Vdm#(67Nule6t_p&m&SV><)NMy1x8lR;xHuO*?mdqL<4ltX|;eAaf9+ zb)y36+pZ=K=Ah*u6N$9;uxHuQo_k03SH$MX8M@g^F&P2={au>7Yr8}TFZCHpKhPvx z)2(b9lg!-DniC~fDUk0~&!wih*$=Ts$!OWJG7Z-Yagarr7#nx<37M2n=h85*t*QMQ zRZ`F0IZ7wtnd!BAwF|*^I{PX+@TXqYbUJV`x;&)D#(ZYN5I zbbCDImyIHTtNbvgfxo=rTDvDc?naBy>AtR(lWPuqZ)N!xBJP)fW=*o55tLDZOOuoV z7l%C$4`8_2n?%*5R3|q<2kWc-d6FP%LbvpVO?Cx-phP9evfm&fW(vJ=w{m275c4v^ z*$Km?3IRitz&5{)(Juw|Cv7DTlV8u}bhh(YgZKxecFL?jem{YNa3h(NVZwc>Y ztzm1K?FhKVIqwFx@ZG>UvT~&g!mWF6;WH$F4YUykZ)9f6UOTR+yGX@}`RPRsytetS z>f*9|Art&&gb`kgI9?of6k2 zq2SjIW1jffa23^^t{rAtjF6}MxlZ5t(+gFRhs^b5U;xYes1y2%0I`}mL-YZ4yaE5~ zh%%eP--tM0dJ_Fq+WVfp*0L{c=ZBJ6oimcr^;N{NVHdOIY!x@gRdUJ2&dFV?faC*+ zUE!$dBoQQ_dNTtwQ26tNR-xXgBI?$C;o*&yn+RvT;Gy#P`wt@T>(i)2YDBD-j&QB@ zT7*DlV-9S5ML2L>wDw>D5fhmTN-SI4KS#$>6qgfaxG{CZ(ShZii-E962#s!ow?dv9fZZtx=kaKJ41otms? zp66NOsR2%!v?$rC#NmAe+vhm6=&MLOtIH+p>#fB{<5Sssysq?j!~PofpFRn8kHJv4 z6Ojfdv*fprARR#08Mpugmp8axtt39#RGM#B6{IM>&8~OSa7&E<-E~E({G{&wy3sz0 zQJ)gD6o~Pxte(FDfl!0@d!mk4d(*!dH|=cMk%TM5ZTCmIGoY(iVlINr91Sk@hk?5X z+xZKth64bV^W5`ktK+m^K{*NzS$BqmhmG(w!lDbn?g$Ut`}W8rVVmrONC%Z?CZIzs zH@@zG12{j4j(a82DvJRxcqEi?to|DQ2N~jm2*wmPZx=zk7lNlP0}WmxK0m?sMfr!j z$TXjxgH!m{#IrZ~9JsZqVGFCRb{qY_?z zBa=2!MHC?w)Ut?t=_(P)=v->$D7zBOL{ zG?+~`xLvqE*|U1QYtYR6rSxVJ;iz51kudy1p$ZNNAhcO`$QT$lM zC}3gHvF-O*(~&oqkM$q!NuT~pU$d(jpKjM0*|zih?lZsFWuFfy6P6jZ z5?+6%%>5a`FKte0Ql_W1!ynqRg#wuynZJsVwLNS(^KiFUFkcf#ggI1181Q?p!2@MM zO#n5j1Ve_4KsIASoqH<1zrk#n!EV)P?NUz0;T5ySQ5l-QicR?LQzl4S@4dHl#IMfn z(CeH9{wzmxq>~x>FnQ`5 z2Jq&-t5-@AETC|aNLtJF)6`H4P0tDRrs=z^&eYfgQkGXvIK}UG4m7@@=Wz-h%O;G~ zo=0$0cN!la8au9?#<%bZl?kKz-~eTN1^4zY(&}7>TnOAI@!DcAFTd$zfAahtXfXTB z-^?{W@iKemfvb7*<(l#p1T8Sd?)r$OFDl=IxS#OclZ2?s@lFkE1whujA}JRTcm2_S zRu{Cc*c`xn=R@k-=U&e(A^#LCDHcSuwlBG7N3vTQe9d82V^W@A)@wqgBzya1p_mRT z8;=}IKqGXbyx0&EnAMP(cuvz)H-Fw7X|{#bwr*a&H_ zC1gKnv;^7T^iCFd6$;!n{+1 z$K7L)xLDm}P#`sE?rWyW#zFv0Q>#ieNFvclbn{4~(N(oJf7M%criui6sJ20&@fm!E zh7*@or-XX_k;$*QgJ!=?C=*!)l&J>^T&-~GPcKz+E2*5>r>GLHS*)(5X>^5@0A^iW ziynanV=zl9%J_iyZAOBeOTlr1S5dw@XB>K(lyAhJYfKajZ@dGdP&>4p+Jr&gu3Uo2)=OWj?G`w5Xm7}&q$Q)~VXx4!K^%Pp8j`yce zF+W>&N+>{7u1O`%S+RLGXnt~__P4?Pv}e7yy+BkBe@iIS+;r7s@!?F^zZBts1Wpmi zG**_!EULAAo6HCb0nQlDgaN+%=)g>5rPW=|bBOdO_0=<%sB{4q1Z?zBYkLgweiBXs zs~q6!A(8)IR3i%bM+aEI5nQ0v8Ta4){lY1We)+ACw8`2VrT0w9%K94rQI*-cy|5hr zj=iu=M#B891R<~^QM)~`1L$`;Cda}hpofg~%r|A~ZR_f+0=U4{Y1V{GbDe*rv#$kk za*qEhIh~o^q~(;YEGsla>_b7j#B2mhS)_WX<~z3BeorYlg$nuGKzHvV2NO$c)S)P) z^)1qUO81S3P=JL!bC|1U8)w9W5|3%75guA4$Dkme7=9YMk(&91S@NN2bCc{Odwhzy zC;PmEF~!oD&hV8kCfUK_m*?^BYXXJ}%*J0L)lTIRRDtc4V#t(8&^Sgc`%p3mfwyUC zIC&+1BV*i31fq7!A)EhLuaqUh7+(<&2%i5duZ9Ns`&F3$m@gAWVazUH%#`4_*g*~7 zjym4;%@>mG!rj4G$;LS>xT$wja&3TsAr?%DpEvCL=xK99e#Q^2MKjWjrSOp<3qH?f zs|6~=z}S&Ey=ofzCAz&!8c{U0k5@s(zP%&n~RqQ#Eef*W~| zi_@@pXi@2qnHv4%D8sd*W)GL=JJUMZ(hjwJW`S@1>#1X|0nXN(@mI;L)pwZM^fIDv zW9CbCD6#eNrYiu_ZJdif0-+K0Z$jA)bm;yWGzMKly^l#lXw_k8y;0q_Mjoei`dV5? zkhS``2|kjty*<#w^Yq{yi_kxXe1?z0tEvy!^bxy)iZ!7>AeB4@=i1I!dYeb*`2;$A zoJg?!F?N&psY#ohC=rda!)1F_CVU5Gj>$7*LM;YLy7n2f|19leLL3UsHzJxHdN3{& z3|&$b?8`ptt$}gx+)y23(FqTuLHG{c#;#Vm(*MV|A~gARf&D-KzkKsR{GXX+4ckEy z`){o-<7+4Ym~o>Y_Dk1LMrJeFn4%i`9~JiupVGCMq%xca9y#u2Rn2HG%oet)lM#JU z^b`R8`hb2+@{n)mb*-HbUf#h*C)ZVDg*~B{88bdV^kyY>_ibD2l$!<1J`*UPPLCa5 zg%~CTidE>hoi}!csC&7P!~HyDNE5oIMdQ2+?>Sk!R#|O5Zzt=1H4;pIcI+G1xhyK= zfkzY$Q!I$eo75~`j=E)b7R`J4&cZP*5gRY@*f(zi$DI;OOwn3}gV#$$UuH6$k2X`! zy^=?Z!+0UTb?K?}a@K>ez>a1{9ZX0~S%o|!{CDsrNkeG}r-gsCB7sJT3{62+U4KmR z$BvgI4x?H#Di-}R8C5;uJ?3$&YPv>B6?v`I_woyEbF5W<)T!hxSCCMvdKDPbJU(f< zZ2-@1l~rbDxUBa!jg>CugdVRMw!d80gp0jG?d3ZMZmMU)k3)vIjUts#*Kenf4tTi| zy?e1vR4r@rjRV&psk&=p8+!W5+UH#<8~Njh$>Xur7!K+83isSrd#8mj-`dbfnC|(VC*eUccLM} zUa0xYlb$#tr}g1q_Pyg0Gz*Q{y&;wI+80bH@#VsMipkN z)+G|{KN-UKz%zk7-i$41x8lv3{K{hyBTl-1R7UMoVpp^!`wNr6xq+J&+*Jzt=6CX1 zp^D^F&hT{spBy^K#2d2{TpK$}zP1>CG?g|g=KTybQALp%UZGk#iQuG@BP^$=Agh@J z3DUPuYN56>mRhleR}qIQ+6LYlj1lATFce9;byK=N=X5bk zkvWal_Ko*Uc+mRwWW7gm^^vlD^`IhrHn0Dl1qy5*OX|xq+IkkiOr!%BxnG#l34XbY_-|={5Guv1WQkyyBF6bPBhJ%6g&73VN;~-z95v zJIG2|#->k&^P#Ro(I>+Ps*sb{xMqWv1zg{A0i^a9Omm4|mOr&`bpNvM8`D#i-vU80 zPEa&F2L7M|?ncer0uTP$zrPv+8Ek^UIAaV??b_6-udNksow@!QYt5G1KoWw}i!x;m zF@!cF>7%e_EfwZXt{_jbS8>=S)8v=T3ET{be^?N(fXDBB`(P9)ZQN2uf=gG!`{UcS zv!bRm{{qvt^K3DGk&V2s2E#@FL;t6Pbv34qDP~pedx9M0`k2-F;g(vAs>7RTukz6T zYB7#6=>Oh@*0Y&`=11qVN zfb3Qr^aabZftuKIT2xpH9dbXzrL&mPAXGoh5!uB+`_Ul|Le7ik+xUan$NvBs#Q3@j<_q}0#7DFfxxqOOvMCS z6mrF@be1mWAorO6=25EK5Sv-v^YEMcwV&?JY zmVog-x=Kn+SU_}~&>+*)xtpRhW@fnYDdkFK)xRvCPXWnWoXtAo!h#p5i{%{Pz6X3x zoD$kWY>~)c>Rg*E52N=W@{(xDGir9@pm{>PBvEE_o4P-~9q#g-uNJ)?HYiK%S zdbVH+&RQjl8y<=sBc-5}Q!8)CE;nO&-Y00@m023m{b8UlC=H0cEIUVqjN{>18)~&Q z775d}FEr-QXPqZRHM7n^@}!kjlgtI=DzXz;yoK5(+4U!`w<~Q7X9)rWTuy26{LPHV@ zueb>t_Ur@JHpQN04T~k5-gU{By}PPd?6|8ioiB;MP|JwfG^2bYdFTClg?i!f<5AdF z;WrzZ12gC%_kzx9$q@PkAF&1X^E(B$1nt?(ApYLd6H$^$H02rnfl1?wi@E4#PIrC5 z^_z}WTf)Mbr_rne^$2bFn<(%@KO5~v5d#u-MmWyw0-NhcuOC)R<%c2)@Hy(bZ3=<^13KPcc_Sq$7At~A}gkw)1#)7 z{FP#8=iv9##gb8EHr1UqMG|JwE7nk4Zxb{YXkebfUnPa}+V;cHetR~@XeKUjT-){jE z?-J5W1l^VIls)uSZHiY^x_+L~b%NhDZ}WA1PlN~x9{WAJBPkUCeDNh2*BWmb`BErta7e{N(|h!=?IYfZ9?4kyQyyZoimd(Tep*k@R!4q&uo`HBaX(kNvq1w!#Sn!;tk`f zcR)mg=J)It_YJ>=Fl;%J`AdtDJuss^zY^0*j|Q{J5Po+FYe?QX%~@-SMSV8QPYJ^s z3FACpcf{6dxqbinlt6t^ugl{%qccqkRwu`p>^V0A1UT{EhIi=f7Ndlh2vrZcWf_o%u%o++iY49LUYW_ntL(9Pa)& zjjak@Ht3-rqR@M#2AP?yQ|oYeC1`c-WPBoh8P(d(utP7{^u+PMqt`goqA8CEfmwtemLN(G(Ie&=ACjz8O@aG`zN- zy|20Xs_VO(VeQ9oaYDGwV9}U10r10>!vOdaIbOX&kxx#qtC;v>OF#v`qY9bzwp9Fj z@M%ma9JcG?d8Kx=>SPiLI3?2ne9~W-rNEhOOo4zGpYHt3W}jrEzCX~@_yULq+!|3u z<+_NinGiRA$H<0+?x0ZsrAa`jRzQL957x6S?o6914@=uL`+9IdG))Bb>2vQXbRGF4 z6Re#KjJCW+Gob-;AJ8a>H}*vkPoThVOqQC91M)KfU3-ZtsLZ6G+bY10F0f<>2|fTV z8sO@dX~R`W>P7a3dl(xz@Pqh46b25TxYTT_Qv3PJJLQ4(9W-I;DX|3K^4UoKa8J1; z6j%m56spQDfC+~fE7?AjZ~g9=N3u&95|zsuq(E_A2HZY@sCwKe`qbV^-7DuvA>iRi z_Tze_w|?lhbAvqpU)>MhN(qgqIr88boeWK8*4slrv&#A-5I->C(XPL|P<+Y3VR<(h&ES3-}uxt;5hBvph?J<)qi4D7_8Y2 zzt0@N^%(Rk_4J*apq^>YXpgAVrL%3}Kog%;t@d{y%-iL>W=2ugX|;V^`UfDjnCT{c z^-BW6pVW4$#4vmO&3tUgpOZ)o8*wM-*UCj+5(@Q^9*0rcTbvbY3Lv~8gmy>Kc23e6 zd-5AMKGi4YiOtKdZm(we>v+5NmGX2z`v*_n!G^3W=4L;@^Lj^y_2GLFR!?VcOXZBe zuE{CIG1n&t$`Z9kJM{A(-DfZWGxt7C3RoRe`=P)W?xzHKR_fdqe`&=S41BBPFy>Z0 zzS!x}wI)&{{5qqCaYSx3O(TmrG2~JCq9(?5`SEo- zbF4$2tj8n&A;scuNw%}EKZB3&cnMBNDl)jCp1*vplg$_jS(zMo^B{W9)c0(`O@S`n zDTpA{kyJH@?cf;fk3D8A)@0(p-YWr@lj6u$a@PBaQs@s-TF6PNB@=WC>6Y>=Kg_i8 zq$d?}+4-K1L$OksaSZ6<*(5KpAoihX&vs=~#LbD~>sCI~F7nx3J%4Dt$of5lndYYioOVYSmnj_3n8+$O zsnLyV+Yyu;=%MPE zD9!(smD5!1f0s$m*Yoop|62nyg-(98IscoG`dLCR!wYRx?yp`2EB4ixg3z2-M{E~) zdr$n*HsLqr0)oW>o9V30h(mrm!($Ynik{U!b4MP3Ibe@#GDv=7byjp_7qDL;E1X9`oQFSQBawv#M#Pw6y~$|ptZCjFtdN^0&G z$J{!M9(ue`Utu_&u=|SaBDIiFr8pBe?PwvIRK=|z4UqG!JP#%N2~c3}y15^HhI*g5M{{QZ=$T*%j^(4M{- zc-CU9{tk!aYe!Y>)6E1R2Q^ttMH=P*Y2-V=n%KIvQ4whh3et;82Z7L$sv;;5Knz7X zQFmK^9;<)p1t;7>s@tb z@5G@uCs?)5aSq682feFkn#`;WLzuHG-cKiY-QXu|-w3|KeH%r~yOyhpxhHpt7M&BO zF8eimD#>-VoICLkEKXW?cRharqwDd8{D#({%Xim9{73o4M89QrxWgG@^s+1r4H>pE zlwxRcHyW~)k9iwaNIGEsORFYdtsv?3h6VRY2n-|vCImD5~CCg+P6owtR|@BS*O;Kmu|EAo6V-UQNI0oc=7JaIE|&}L92|7bGnSQRDJm%W9hFm_Z}wy05z=E9 z^gHG)jQ!2V`n;>?2<3dS4-SjCWod2vZtKs39b@YdY-5o$OG#YlYNNA)09!<*dx&mn zO_}JSSB`_efF5ha!gs61!cp6X6(akm3L$2xEt`WJ=$++Ae(z7>cQRVt zk>&2CN~6|hHuqWz!7yB(4wU43Or;OpxNI(LFDqieU!U;Hp6;yUy}}8`leIo5+*tIa zax!^kS~sUi)O=AUkS3w8H2tp;pNCVLD#_i7J-GxsHt}dd;?*neG|c!8sZL23LlhO1 z?eUI$bra&F9a&Q549)}&z6@Qd-@--6V-WhM7jsjzRSAjH1%|HZSk`2}9dy^|3&PtZ zch%uVw-UvE-pR**Z(qq;d<=pM1k_~^WTej^`pBI=nH+3m+x;_e6b748j$wi;0ZnsbO7uM@q4y6K>SjWxM-qE zseWVrSs$ngyTFk6?|@B7Wa)`A0Lm6XLm-O*?hw_3*vT0Hi(n%n_CYndhjRG@#8YE@ zVH7@hP)8KOBp5rz&d^vq32|`RE&<* zEWA>dav-~~)%>Y0-Co?mPfy#4)%kkV*94swa=n_yl_FKsdkKyz=SsJq%JiEA#$I8| zEY*%vo34aEGsr`K3Y1~No6d`tW4_vM7@VYwzt}@7##dYU+6=vjoQwTroviQxR+D{t z!6QGU5}3XsBYMB5ITJQ1dMvHR*yq#-XKO05sTzhb4Owt%v#L=1h{+Z3)YFtU)LSb? zUvjDFpJKB%AWt}~|Gdajg=`e0yPELnbG?L7cE-(;v1gAc>|GIipDuKiiVS(^#~#OY z29^&Oxglq3`w&#P9rJ9Oq6v^EqoBs^)QXTxNQ zs#th-q(5Xxkr)8{q{Iw@GqXT|t+Mq||L|cp)_oVKh2yj2%Wa z1<<1<4NN!$zRCayaG}C}D+*!@eK~KM1IxJU(RZ*Av0h+*6Xx#nB= zFcjDy!rYcsbUs;BD{R4r5;nmqa}_;k7Tx~j1OJP*gu4lidvzirK2m0z{VE=Lr5O&N z+F=&}0;R>eQ43%8l(JXw~O%HoV*_0rr4 z^v2@bCmuUo&$H~W?+A@$Y4;=u_tyz8c&0+XZ?OFOqy|rCd-DWVrlBdOK94Qsr*K^0 zoA=)lmvK->@Y<`m*TSSMsMpJU566SA^-=)LQo$q{Atw4bq7}86+9G#9)j219>JI8dBCZOC`OK!OPir33u)KdC zRb%gzE@RDmPWWa9dggiurmG?y}Z-HmeR_+zDxsRI4{QO(EA`L+Fi2dCD| zxSNiTQkL>a>f3kbp1d!6qS2e5^;f9+bk*kG_G*!f*;~<@uJtfW6{sgH3Cnm`JuOhA zZ@A$VTj@ENlIxR>Fp^r1&7Yjh&2a6~ONRz)Q^LH5URcL+W-R=wz$C4FL=V2a$j|V| z58E8!K>*UU8b|f&Fps!1p!Y)K)$-}0P<92pSJAzcty@sXr)jFik_vk1SGOfr-@jt) z8j{kTklkEU>$kX>R`=%7%F2|JnWI^S+#s77bRC{fi@tSy>pIl)MNm|}HG+3CVAS_l z`CFK9(4JDDkcyv_%KVZ7HQ+x$TA^ZS|G8kMFSWIikUdq=av|s>6|8=zw!T_WM*R4e za^300m^H&($|$!{4T-PA;|E^O5B8K^&!l_vLGv=F>Wut1F?t(KtQ4?{gNDtTN#^c4 zOeGEux-p>tCQ-84!N5wPnRjASq2h}6)@>qDQ`+;mcvBacem3vqXFL73qP0v3nl5hj zubAP2Y6mavx7}ZVHOuvpldiX;)8Cc1lc7i74gS@nd?H-erJKQ=kg@V*nik9YaAY-237`4W^j#GF_tE-ncY*@@HN^tK#PC z2E<{OCm143+tqcuDzCnl5BTfCzq)&(4M-H>0%|Q{PTJAbMQ3UaFt+HFR+j=4&96<}3EbPVom7=nsXqP8K4X>iET>=Zb9P|p!Erx& z@V-@h<@CZ~qy-aaQ^+pD$hXaLDKFpoxz>cX*IUMJou>M?hB>&=>a#?m{b9K22A}L8 zg8g;JGPRhc-M92j6@g-pP=%BcEbV>OSMNhTeD(F!?en8rs#!$oo5>#Ow3X4D zA08s{W{l^0k(DQ}=+%v0vGchE(U8U5)EyGipi}Zw*DO(=&Bx>&>1;vwSJ`P7Lyr@_6VTlvl_|nhJ zo z*0mx#c}KMcG%-EcS__}ET^}vkXxCQcQfM?#$>|NOF{lvd(vP2;bD|)L=}|ZFR=h5S>2; zaSpk^HMcyF{nxkFp(KPdHPCl>1c<5$=VjH|Q>!xY@hd6+w8a z@|cMk6-Ai+_u@{rJMqMsRyzD_zW>4ecadXy0!B*2!wCLTzi+nv zFpR|f-k*XOE-JmMS*|)e?vd*pqn7p?h8Hi-R2 zluaX?*Jc}dpLI0)>Lu%Z5#;-df^UtXS@`k!*bhr^PlGlU2S505P>bVzubT=C{MyzG z1MuuPno_5THDuvx!l03Yy`008v1nt9YZZJqkLiT|NM)wKE0S|#RBA%cqYxSkgvx;D zKL&!S)zLDa%^6`n1~r)6QX0n~M-?M_h(>KW^4O!<#*{?}C%0jxT6o9LP@WOpKFTq8 z*6*VGV)0||Xt;no%H2dhOFSOC{&3?~Vz&*Kr!2PyI0I9}GEP5MJb=M&C`Urop>y zLwpVwrJ&~rajW6kL-TB2Z+8_W>(iTuR-f#&aPZ9(38+}fBb_5^ zDejrX{9prem`Cl6tQ*!|u@Kb*6WPU$w(Arp_sB{IU+7#$zh$PN128sgf~r!IB(Y%Vm^x!qhCN}CfgI6LEZV^@*=Rt^KWhnA#!@Kc{*~m z{E4XWTj+4yEKDyPcQ_j7*-YAeymusqk2oPrPZRDQ?XAl(vVirMdOx_vnzdePIcH!> zmY2eJRl#h*@rNcYJ$vi$xj#lJmJ0ZSw7Fd0y&gCN`r=PvxV?Ot{<3v_3hXNNH=}b) z>cn1D;RNYR!|bE6fsglZMNjkvRLYji42fUW8hoIhIXnMk0`>{ss<3m}^SVU~2UXy4 zdNjAUK7BwYx#fsHemIto0ne@zaC2*M67OmuGI&iRQy1xIzKb?K)oP z1zybIx!8HQVV|RE%?TlPeL6@vwoQQgF!3&I* zt)8m$EI#~NiC&}C86Kg2qpwo$=RJkEPPNd;V3(=Qvoyl z@<(5fpDn=_v`^KN^6hxq^SV~sjL(P+f3EmEDzjafQ<-s|$f|ls$J=q=9x8HJ!r5`t z$ppxv(aV-B6BJ86Hr6kQf`MgWAsr1dt9)hqs?2pEpDoXh0W|420*1a5p<(e@>{``L zDAoK;`;xB^mJ9~9C<99D&4lrrMTGW+9pg7%a+;wD732<53w%Exn^j11`{2}0WI63k zhCjz32a#?&In47!j!7}2g%g{5Vx8dq8c%sQx9r{_XL>q|xAq_AmscB*>`bW<9>2pO zwwX0GXBYhaskraI&eoPs9;_#=Vriy7gDeOe%GwR=QY*ceCF9`~bHqO^r$qo#ZE`FX z1=jJ#D;cK+4H~RR5jglrNamfN`&)5B_004DXrV2)mIl@_&QhPTwjk_fmCA<0h#I#XCwXjC z%>Wj7_4SU=bT$UxwsXvRSp}!mvJbq?-#`LMOPHYm^v`UT;ESAx;l>eC$7m78ez^^F zzx(l@u1%pv%)u6Gy_&F%sw&L97JUz=u-&vZ$7V#7X%$uFCy|Y@L#)tcbdBd}C}7JQ zMc~FeCVL54h+nRr%;@DuVNvARksi=?(nhhnH&#&l#Bsb0UxA?8 zlJ8vNakztiwL9E#_QR*p1?U@x-Ma)S*-xP})oP=QwJ^kvJ5(kHwA3&1epIO&8&h)|!Q3kvlAd z4-(Y2cg9{FA$D8yV=x>3LM$p%DhxCPapd~PH(F` z5iem&FtIy25BGmWGWovSIigNt2;tQf1hIm zqMliO3Fu^a!E5N0vwUUf%~OPE|LMJWF|OeU7{!9#yD-Cs-kj@uFvqu2P4SQ_8;?tY@ZF`=c1H*KxrO(&#xXrVPl2Sa z(|OA7oNO_W)X8DaQtgw!VwE@CH=b;I-W0aVBm%qeaQVseJ^ahyhy`kau19b04Pfux zuz#7r_?4zjtd0p9PSbL#A9Jd)5$_oiwd^g?X=+||s@^piz}ZWXo7@ciHH(}}GW7!% zN&-tMi!&Fyf4 z`);K>725$9fGaFCh6kZGoWO3po9y7iQQ(u#|8_{UyaGLy14;;^ah%FQr^oosWM5jH zr+?1g1lF0fR_-ik2hU7TD=I0S{OsgZ7W#QD>l5bjVk*@$%kLAR0xw<#9j@1;rlt-= zK4vPSoQH-U#_0P*GEIeAmuYfl?|yoG!20KIGg5Ks=U4M7K1g5&cCwR%oR<_U_I=2N znm3T4y>QGD*U;R22I)`pel7F-txet z<_6dB9cGHG)Vo%XEPV+A!FLPC4P^xEhqEIzIz7sN!sLvSFQU2me<@CA9+RS7yDhqi zPu_L+>L$-&g1%hUKPhbI?Ciiku0_ms>#DAa*;Htip%4;AgX@luFR7nPLM!N$-jWo| z?Y*YyujW#9`qg{|lzeF$kq42TX)7i<$fEW<(kUQ41EhNPKOeYJz#<)T-hXdkJYt4B z4B+9Y9h3nvIuynFX_^SpPfZI!2H)=}#Dr_&6V3ta8n2SVsJS|{ye-VlmH3{(iv^=4 zcxqlaZ;($aPEK!om1Q)cWzffOTLTeAhRSpOXK10OevpoW8YU>=<{$bWS|6>iam?fn zynXx&my9KY)f5pvSe^wJ$iV!3eSHH0gwDf?UtZi+WLL(J!h5tcrvX1&3b+-X`y;p$;3JS7Q_yJiB)&XCHnDIR;Qkh zq}PN(PHruU^aquv3Eox(w}wX*{MXC*6UDH#w>I)35<4&ceo(s?7v%3R2uxK_i!d|p z)#slX{kd4C&kf5MS|FI)SI?pEP$UpIK8y&%S+!O!Q{M#4jUgQrgj%Wypl!Ebib*Pn zrYQ4_t`#}wTXlaGWbc!Mpvv;*cDf7U1p&vh(nfY*rafP7D0pzyRcj_ITXHxWCJ^hLDZ-n7({AP)Jjo; zpdkIv2XzPqFR)7D-y2jGHw@zO8VYWCuAs3jV3dh&XlMvPBBKMkj*HtveOahdH+U|P zghUFFqnXrRW~?7mUA&FHH)BQ!P}mC*#(iLxORp&k^s zA@1z0^svUKgO3DIPxPH0M#tDgb~VYkq_H!P^Y|LmNm#PZYHGhM@o3#8G`d`Vj>%Yg^cB`wqGB2P zlg(?ZZ*bUuJ{pkTcexOOC4{n~VlrSC`?LunI_FrHRqGM5_Jn;)2i{;GzCH70ys0nE z1rB7Y=75Q3^BDkOSD^RJ4J>hG3uHWE9J%UOa?O*wa>ftth5pQ~Hchu=$qW|CPLSXJ z7NN|O28eW&7CO0tN&Xj*z4x8#mUO2~71vm@h>NUm6w5QONJGP| z9E2EarSVV)m7$aeRozvh+pPcn(OH+6vmo%!{O7|J0Arx|{;h%VYU%EA(-j(1pzHrpeK?h(M=2X{{OsAN{9k?GF7oyUzE*mvr@bwmR{-cG-Xs?;OenVY+h z2z?fT<22g7Joz8fVcIfc-1;S(hWeA<`Vhh^IA8G~ox@?{_x(RQdpr({;~>?@nW^0d zoVS7titzK#3$Rl?IfUfYup+G;AaPDumr?|ma$nY@ZYJSsd8?!+WPGj^=TzujvDBeA;-c(L5qx>0hN)PpK_wM#^F*u06;IpuMdJ~i|R6?m8ctYim7A6W!bW9qPc zWLmau$a5kq0>o|G;X-^np&G$7vpUT6UDWlt6_Eh5{9e_;JSvo%*`YuCp*>lOJgK*4 zhI>s+(myI`yt5%2Ld;Ehq0}Tk@c>H$X`!|pwuP=S+a*_0uedoT(XsXqk^%Nq9dgG| zy+eo%^w-=#!V4h#zj*b(-}op0-ag9#Jw5l#^9uBcF$70P($D39+f?AWfpXKh^uI)} z#IP1LlECVye~fV%IiLfp!z(sBgkbLtwi@@FXFk5~&;9t-^j=!rLq=LT#0nLYo#kD) zCG;HKgcr%VWchcsgA{UQBbY_!Tz(@eo*+)ji)nB9HMm~}w{&iwS00GVkLYQ>&ZWpd zp5dbXX?)FnQ30?*TvX^io)y3`e+kFwF}~-j_AII4C_f1_9o^A!e?E}h+_7Y3D%I0= zs^JD`^suF|g~LedyWx4BG8sc^G}YS5G%0p*wsJp*3D_BClm=}kdfu>bFK2vYWBEs? zO^FR|BXWH^ztiE4e6~1MO;VHKM4bNd%F5#UKnBmA5EiJ@dNkxRe|Sujv**lx@a?O2 z)Z|Um(V`k(Ut>kZFbm`35nO*|c5$E};o)TG!Lk-!^bpt&W#2J+R_>sGCzNSd1K+CU zQ@9&@&Z60$n#T7iIR&VTV!q%DJ3kPEm*UikCzMO~3LPD`o>o2DGaaJD1@g7NzkO1; zXOL6mw59jURJ!*|!=jV=9)EP)_68590_V=>>a89=xfqUwmrQxn(Ry~RVV^sml2{beA6r1Cx$iDCWmDA%N`nYkF4e3Gm z$G09SkYV?veocKC@}klmO}Ku+<#W$rXuKcIoCMGo9)Ru657hxQO#G`xys2 z$ayZB@S>$=VH!&Gb}n?gRfiL5Hk=ThQ(Uj?I;zAtvUbcea0NQO>6>o3BD)(x0T}r2 z$X2~tV`mp~3XwZS`MaH^0(HCP^kp!edsSGS0Q5pg1Js*J1NQVF)fFs3hQ>Z9dK#`20^XKaq=Sdyvt5FxZH ziH)dR&BchCFKa(>V;RjAr*Wfp>^vzQ zo&nTCU`6{s9smvjhJgDYE;9u}0?)}x1wZ9N)wWq~PoGUaHBmKqX#<*!jaGacJ3Umn z4hBYOP$5(hC%97uxTnDtU>hV-Vyt)_&~%UlV00(|a~U{%=%ECx&}okYfCFAwtdg{7 zHdF>SfbFX^FECqnboEYH2Y3hcuf_x&7#Q$jfwo;)3R1ZbbWKXWw*@WMtjMOxd@S2=~J8Vm%M$20nzDv8SMG7 zYULTt8FoFKzqvt*U1#wc1lS75h!p$5hUbF8Bk^X?EQe6k;w|NpE(077p@3klG%kVM z1KbL+?I$|ulo)t{6iWf<0MLXM3JT;u2??MC1_hvr{(G~t#D{@xK|w)+4(~TYz!lgO zAjvKtD#Us0pGPGjfJo0IQUMjwzeWkr0{si{JkXyyF{cIj0&IB!cIm>6%F518ysMD{ zb`8=SfM4fPru^$fmwT}aYz@*;?MoU>0D1>$5BW%dfg1Slf<+eyH!yhsNr1M9g6PqR zr{IIn!69)`qg4(}&Vw|!YA8b@3&`j`+8?m8wzfB&2Xofni7PPB-xK=V72@UpbO7fB zHvRn<7zmLm|H}brO8Q@V1u#x>`vC+F)SIKhIsN~70oeGzxBC0t|3H=WWM}jgeUQIO zbuh|#nz_Vj`}w29!lWK3M;HydB|l#o6{M{b47sI}V441n8QfZooHtbkm?;2?y8t_h zf&`lbQ2Fl{LHO{}LbF|irOlOt*sEeJILq$0c$>EFmZSP?qEdakkOxZ7Egf{iYIIsF zJ3*81`eaRZQGgF5h^8Zh4a=o=XT7?BMJmxG+V2mqQrdf!TTZYY)+Yu9B9WA6#ScSS z*Ef3>qli%55JD-U9| zV8_(aLq*+-ntc;|c<4@yn}&;LPrLfe{s!jIaiw5u@% zQq7hVbP{tEblea3_O@g{7X@F?UD>; zIOPjeIVQIM?fzo;js^h5Zw@dI#T;lyS{yfOkg+tiBzp!ZO3sJafBrV=6t(U> zf(*Nn;G1&TI`Gr+{K`|`EK7%h_@!NSoyh&6`d0y{iH<&|p)E^|YEb%aRhBFxYMJ;l zD@P|0yVXhU?aKvL8l`oTWcZ?XR{0-;zT=h-Cz~yq@Gf51FYT`NYz%X!)-31V9Xp#x zQTNw-TIr|T49L-hA-QdaUCkq*IxBB4eAz;J=xl#oGGL#1MiteGgkmh^s^4Oa>fXHQ zmibXFbiu^V20k-0LA5;BvbQ|gs>cHh!r}=bbxx(oKB@QViMMuI{*(iF86G*l@GjF* zqf|+GLQrGiBj#B9>7gQYF706^``+7wCtoEndX4f5a%E7!I$7qnF31EPYR%4jOs&rZ zVQT;_YGoFU2u^`Yqim)(_1Cc>&`cW`C9o+Av-(dVE%^713u&2&xVC zOxhg%%ZF;sQD26plA~uM#?E7PE>)fk1_h5_zMu(+;(VxOS}e^LIFC@ z2OK(?#kZ&rr1go;m_#-eMush&1{9>>_@+|rp`{=P7htFuDbb}uA1qmb50Z5xfC7x{ zQ^=l0=y~iIdcl9i0Me?wKBar{*)MPlnhn0i94dT19ruMdh_T^x19vn+Z`J%O5c6XF-q1vau2 zM^W>FS3>{s)PNaUlDQ(-_ZetnkAScXMEIT|aav5f?aT*!$Oo8D5;8iHXTZ2Efwy_! hsU|h>PTPFy_FR7ERtS?nu$GcUT~+&D>0Qf^{|CwlW_kbs literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/edp-sccm-optsettings.png b/windows/keep-secure/images/edp-sccm-optsettings.png new file mode 100644 index 0000000000000000000000000000000000000000..d786610c07fc8f03315999231db1d59fbaaf9312 GIT binary patch literal 17602 zcmZU41z1#1^frosk}4%4CDNTMEz;dx(!IdaEh^m|OGtO;k}4ew(zS%JbV)aSyZHNm z@q9cF&(7RCcjnBQGv}Q5oqI!-6{T=6Ut^-6py0?zi>sobJU&4|c|`K`G2)7Q1npS(MRV>CqlnWMChGYSgsPvrljrdZoO#Kl)G651|m4i+x%#vpSPM`LTC z3oFpvg_4_$N($oVNo*-hFsUkSASZ?k{plg!XtLa(Y4jwD;iF@SLdD; z)DJ<$SBU<;P>zTLc{iL64u@-FNppCxN=(x3&*5~Q3gZbsztf3;)6(9lTB~n787BGH zI&Y(A!lDcSri%w39UWa}zBS>ExQQ8cSec0Lh;j4s_ADqY#Kpx8%cG&PHzj%V-V-VH zmz%&&)%pFN^WEV5nTppYypb66TY8cmR0nTZx5z0dxULk8sg&NvV&ma?dV8zRyn~DefZHFgoE^$9wWC9e zH#We`3A;>rpscLydP^W!2oTx&BQ=#IhsR7iEG5#gl1@ z=7y2b=VWr(vU+VfcfKN=t(oJ}P{e1=(qXM*X7!TW`xd@_nBE>}H#MXcQP_F%s^< zEP~gE^BCf(3ZYv0*leQ;G6|gx348`WMd_U^)e4!d%30lGc^R4p1}kOo2gV2cEM41W zj&xrzu>Kfn;wXc){xvL0)&(|fQJ(MMDcG-HUcZH-|Ex;ro_g-2W26_!3Z&FMMs?uW zs*N37>#|$7u*3)sGUFtHql-4>bzFtz-#-W30r*>ftouX3*sttco&c+yy4QM`d1sn5 z_u88^B4;`D>s@cT8pdaOtLoP>u;OWNf47hN{Mb|hFU>c9kK?tQ=UHt(c>j88@3eu< zH^-pr9bk$=Z-0Iqz&l7bUv6tdowZL;WWx=mscPErZg?2Eh{t+J_9 z=s2-<``MgHD%YD7kM2D0U6w!5DIErA2Y>TacVg^8aYjrBpX(lCcN zj<%at0?fyNgWGP1G`;Ba+KO<5K68f-Xv08CI4*id1(uH`FNPh3E3 zP>WSXSb8v-VqbdjI|}NSh8ZaVnQiBZw>`@Q)voH^HMK47$d%8bmBM>gs(IL+^B%ma z<*urCCE^9xUYXcpwe&&BziR3kHJ&d`h8KY)V>Yy$k9{0gdRGrMlaoW2%E~KZ4vSAu z>)#}I%wj|S;PlI{Gud|gOK`@9fyt<2NaZ?J3*>;7$7;2sNd|1k-W7KjJ-bJv>k^}_ z83of?a-iBya$H>jW^>P!-D=RWOUtK7n6_}k`kisREm5f(FLsZ<6mL+S+rcvd`=9r2 z0^$PhQ)7@1&-)@hLC(%vNlEYGUYgEak+yW0YjV-5-YX<7bxiNLq6;wrh6d)}#gM|U z!EM`O?gP+@^`C@F+Aq`Edb7(MhH4YRWP08pNHwt1C>^%zXO|@lBri8-B6xB0n>FMcf-4Z!GOoM}Px~&e50jT`Xj#cj)$}2;nL(&!Q=IX3? zq;WVgPZ?@^b}!IApAQ!q8ZaUk80-O=x>W#W1j_ah!)e>>jJ0U_f9-BtJVt8X7T$AI z?aL4OI`DnJ0ABqN;F>!`ufo@=oW-sBJnH)ePOGOgxua&nSOhrOz8uCYr1=MUV+ zc-~_0?=>qHYJ9t!r@35;jUj&T-*@iwD`D1kf3)1Z0k11%sjmF692LemZ@xk(CxqEj z3A8tLD{JR@d;|xX))g&;Yb&4)x=4;JF4asMf;Biqwpe$m0Ge;+3**6&I*JAM?Brp4 zL?)_=b(Xi0vs80?2bgHxPvJeUAKQo!cQ@Z6sJh0g#Fb{PTS8re$tb zpAsR>yY}|>a4amaUu|nwzrwvg4Hete^i;?aLDS9Wgyk5dUY;KL4p-Esy?7!T;@SFH zn+Y)O9RDFMa9OuM5QbCQg=D{IG8epGe|6evJa5bJBagzvTxCVXDJgS@a@z8 z6NLVsm?TOGcnAfQF{H?dg{b~lXuk$I7mKgOO@Dr9f3$~pNL18x;vUQGEGs9$H~%zL(_tbbd@k$$WED(Rt@MqOav6DCgc^cy&)EqQ9>C@A8iDK|KBkqoFxfPDN% zqb86yA&@jaN7^1IRlXwEij%osvbGzbiz;F0+zrql!Ml3 zoCnH@t#gw2^9V10p1_EgQQZCT@>(AKjN(j@M_|Cbpuj?Xz)-@}T}(_#!PiJa!QXuC zv-C`2ratit#lq-zd-Qye*w)tfkPtkix zIB3)8ilv8vSrxZVO1aw*<=?Ek3JsMp zw{$mk4%eSrEZ*JOB`1HKIeDU}rQyD|Hc3mDC@Do49EgSb^~v3%z(${A!39pC^znss zPW=jtrlwqEkq)8w(iG0os~;X#>)+LU5t@(kF(gS z+r?%+N`sMMSP~;7`3%$MVK%QL8563RW#D9I|4n7P1++cb-kd19CYOgYSK0()P}B{m z)0pGTUdF-I{p9WZ#Kje*rK38G3ZmU>qAg1{BF%^kpWro~wEWEZ8?nwFN?T^mTjT~~ zX&RVTON%Y*gW3)b*~rP+%gH6JZ8U^Ru$)-d%UaohUm>%>|s>D26%g3XwA*W_z^fY3m<1Zqt|^;OT| zdV!2*r=!}qwAi?#!h)lWb%%IKtaP)S+{BuBTOKwaTPY7+3m;86KU+t(M8(SMf`u}d ze*&%_qIJUys|!+ElVs(RiIN9Ow)Z7^0x=e`I>=u82?)M>PsN^1`NfD>FIWEH6~k`U z%jgjemI~f2YqZWj65XEP3fOAa-@~ShZfFdyT3Mauo(pwme9fknUDRY*<=)<6 z+0f$LP-$Bsclo{0GVZp1!`O0K-tycm`bw18bM*4VtkA>+FLQ#`FKQdXg|UHmP*`o3 ziZjxeegKxmgQ3N$J??XJbJrL_3DCV*j#T&fz{X1!Kc3DvyM#Gyobm~nB_+6(v#OY? z;q}rb7xpC4_7KrYQV6GLlTjF?rx~V$jr4WLhDTl#)X4ZPdPqAKg7v0Pnab&+yC^PK zUd}7Ju|BwJN`%Ae`2?y=!>OfeqwWF~1zzS~dFgc6&~xz4=DN(3%54b!fRUShkxDIM zU^JhL;Zs-}8V{6{KV+mfFqN&BheRtq)(&fPHyPn%7> z*S^b?WRf=D=v)}^ut~UF_60k=`<^DHm^i%5Rd1A>gK91*;8VZt4F?-va@?CU$ z__=Sc%df@yx14pw#ZFZv%^fAph1JGY1{^u6&~q2IV@%19kM-IF1>RH+C}kB3c(-rw z>ZC?S4)s*bO;w!DXgOW`dp!mHTj|UXzz6`t`p~+{Y^1h6FQ8UGrT=^&maoBjq4^cX zq}PwnR4x8!>q@%e|IV6(Ts zo~uoEDmJQVVZr-b%)mC8kbIt)aPqR7;icQgQGzH{*zrc`?wgW5vK_KF;JrQYh!MT8 zEA3v6!hRqYUxV8UesAu1huh4IYP!M00v~%oIOc{V6*xRk9zlHBZkP8mHQ%cFMDFu4Iz2$#{Q>M{$m>y6nCu6A|r=Ry&04^f~eSe51v>IOl5Q zjwlQQsc=Lo@Pn5t<}>S6t(7Fqqt)j$-fdI%uhjbVZJ_+ zY2oe31~)I}x@(LJx1D4N^MCq`OP(jgrg*_l#_{W0En88QaT>vF%xI~=ZJh(#YPN;G z#>u4OKt*KxbHL`lx=zfJuHmejY7Q%r`?E0qV@$7KonY2k&Gg3p#&t+0jXFKalO&f0K(O5LaoAz30 z^Ret)^`K)t*ljOcD0IatW&Sq8NTm9W+eLpzmdoVxEo0!B%3>S3>gV0X&iAeyQL;S^ z3xDh5_`rheAP6U2OKwhcr8=iFvnp1gkZ0?Dm2&EW#3UCGzwl35x)#Jm>LxE+IsF==WZM=&^3aaGluK77EZo*o zs^@I5=f8Gq%Z+PZlvtt+%gt_^Oo$FTn)+?X__Za*1WnNkt7P^r`Mkc`Z-61_4U=#8Pp*Ko^_riunt+0D(P09_Wg=xBr5C^}SM(zOA=5Gj# zfDYus9LrhL;(g(FyLpCSw>cFVqaBlwwfF976$^E8c)nj>Dbejsbi4i4-{+pGCmn8l zr3g^#H9w(3J2qcGNi21B;$R`vXnR>K%e>G0b|i^WGryqTpn=%1IpKw4<5)M((z@#I zq%9ix;!TUF#y-wQdt%P+hg-V##X&RGDi z-n7kC(7G+3tD)j--B|J*$u;ge2!n|~PoOt5@2l^4Lt^`P_844nJm*y@`js?`bJgfy zKL3?6XEhIHZw2V*CUF*`QzF9RC*4BD*0NH)Z!vnAJ3e!|;{`-JWETccbha!XB{KIi z@l9t0(kY4WU0+gFh$FdC_*~U?TQbOz{)g zpdn(}4Rzm;DO;7n`vvg+jga>PFjE%DC=0gPM$i44CslhT%slO@FGE&VfIB%Z^*WUe zoU&@Si4W!8%I2fWRpKF4ej-T;O+E zPC|f_b5US~ut`5K)5N`OiKh<-iO2$AMH*ix6Vtv`9o3%CFTE)5(31667o{jF5H8Nf zn;Og0S`XK45D4BJ&PHE%%>Co|bw8ZHbEEzw%QhvtWYfQ#{l+%+Zb5agUA0p{@V3zK z>*BD2NoYxpJ~g4c%r{0=<@BV*{ayV}reOF!Ym=wiYm&+5q@^KI8s7o|5LlnH>uQ!T zS$$TE7{@Vpw9$;`qxHpS{Pvs{rko+B37DE}^8S`ue7;vK`&z)$94Rb2JFniyX$B27 z$2eG#uo`fAQgw%eL*Zp%bRy}vWE!uX#(e52L+<}5Yzhm zYb|I+n2o4!jMJ?BF27^Y@FMZsCGoS{hJ;1Bd_S#^9a=rDM(r<-nj`!=(!DA_-YY`R z7GCZhgyD1$aX3h)W)Z7VJk=EL&%B(Fa9x$H)t*q(oEsrNKNc@}Ypi6Uxr1}g96VS| zMdixD!4ew_<>07U{;jLT_R}@lh0Wnlar}#G|DNHboRbkV?E#a@p5drqgJzl`Kob>v z3(F6COWRQc-j-lkN^ydWfAD48yvTysmfQZSCYIZ5ct-hxdDYOE;Q_=P+XCS;FVNQ{ z2Yp#twwA*u0vg4y_mw(Wzuz0h{z>kh5Qz^dUXo5(lHFXAE%JTomGx~_tHi%h{k%f^ z9{jeGRN@K{=5i1+9ZfXipTXhBS9P7{+!p>-P_U>rPgR3@N?JVaW(7#q!31c$U1tG_ zfFpkYZl0OZ^uL!?a`+QTiZ;xuV<^lAaKKU`$Kx7+*1k#dihyZ55d!okR=VfupY3u^ zX^q*jLh1(!_IKwL@kvb1o`=vSk{(ZeM1pu940sUiY4GN^)^a1=IpTFD4>}w8{ra|l zoKo9xp+8mL62Wf=A{7Us9X|%{o92|u#E>iV>N{eI6Q#=`y^mL))x9;j_Y&qdoaMHB z%lilOS-G`iQx|9wPc$^JHJ?LXG-8J7UfyK3wl*v;uas(WwF=PyeDeT6vldAH(ivmZ z9^1*^friGBi|v_(rPf0dI)ENdK{;UtT{3CyAFzQI2ieiAv-)5eg~f&i3-CUcEJfpB z*J^_`OP2*Oj}h&*5N;3lXf`hHrJz7eXSusSGIOj#ZRppS`in}g38gD*tC7;w!F#6U zI~CT`_{ZDzf}OTL3$|ZQr?HBrv9>4(U;7PkwbJpX(;GRhC|%LveM4`&e6MBLqQA5I z4hz?siJ)YFv3X!{B5_U3+}zj1DY-}+ffW%zF)&D4-$2!%!qUSN{sbNK@xhTV%$apY zB1-_@d4K0yeBnpGYku!w6SDFpJMf{W_EbN#L9cz+FWa{ccBVVG5S-ss10zGLoo|5D z!rZSd-0k6KE2R5EM}Y$KkikOD!ANV0iYFEutf|Z$J26ugA5oD(`Y*H}%Aap! z5+Y{hIZJl_3r>fccJJP^d*4@Zuf%(LKHKcyH{O<3c$>v{;y-BO_ba!9zK}JUWs&(+ zdsa?VD@}(_!`YAC9BL`&ReVO8{DHiQs3Lk#mk4H|HkQiowaUM#U)px5y2chU(G~J= z%M&;P=-zV!=)bv-2V0tgeJ)%Q7P_tQ3I#jnbu34^Ztm!Mbs$vt-X;*w_2oHi#5%Or zfy5XQ2vXz7!8(+a&v4(Rbe-bmx_`>>&AH2VhndPfgTcAG&Pn^*b@lq;HZ!Vr$M@9j zI}LK3{icLjeyUf8!DCCiBe%;ROhBsjvOM}arL6E$)$#e&gTa|gWsak~godFv=7yr~ z78Qbwie7Y-OPxaVi>!wep~~}e&lG_q##DUgAdk_}8?M4%=l5{->xieQX#Zt6{y*&) zZkwmR)7&@E2aR*40U<;kuX&HP4u_0-U->1B+!T*3E7yaR_?Z~T%oc1N>lj3QnpQT6 zCo%5zuST=J`QL~i9nzU&;F_VKYu35T^8(JN0oa<;xS@I5Wp)xKap^AbZ@~b%cl0K! zq-{Q!!x`axhvs>0_M8k&&z|)wg{}2k6fTguVvWetfI1b>3SF+sGfC6#3NoMLK8R>& z0vWBWGH0FGozS(g7$Kv()BD+Z-(?x4K?2mQB$$L^)wFy)m=NGk$`I1?+t%KTWgCnl zFXwm5yDMGQkW$k0z0|lp6w6r_AOy`;=?g3C6_!+NSC+jgE_%hxvcm#*&8KbbrlWuS zctA0$-O?0)?N97WqRgxmX4#Mp8gXLSplqv%>zbk8)bxgl-*wNUpp3Tsdm?1uML{t% zgm5UErJ82|eN2Qo3`v$3m!D4%YVc6UN1M|P3JTc>3X!6U*-)>h?W4Q%8K}+ZTfO&| z^gGj^ha5**j!b4jeqT)%bK>E>$Xe3X$gOZtpPaH`9KaYHl$3jS`?6a0o$B$Ev}>7q zVPP5L7qbl3U%KF}*D?^NLmek4v`~iDqU%d{pBg;B?S}ipU9vFi&MVFN_G)7Wq;N>X zqy0Lf$WrebIl+VbuFwU2QN^QW>Jl>9(xm?6iKbk*9{Tm9LB>~|)N&b_y=UhFf(~{1 zH7YZPsxvcN5tzEn93+ElV*7Pn6`QseY=SaGofQ-qr2fE%7>Axtq9; ztCmKFA#a3Mgntx0kVxKrP`{gfA>iDfnh993w5*HFp+d^4~-`;$7ylf>3RX0#A zc@Y{qTXc+RwnZWiJQ@obHzUX^IC@Jx2CL|OBe+?6kQJ42F+;^Es5F&5ReRiU(sRb~ zk0Yi82-HFzLpQMr^h#~npF8~~#V*Y=HS<-VqqnoS+sw$!G&D5SHZlUIW*Qmj(9+g5 zmt>@7yrCeac>RX#)mTEZn_1rAg^#(9U1OzEe6&(Vv{HPd(y_vUo09vHnS-dfi>GYb z*aFXesZtwTMyvNA7uP%W^we3^ck0IyX^-3A3aP~<#U>{v5>q6v?PYqLa2=d4HeXx@ zpFIMs>gj3N+S-C~)~@X6(@l|U4yx4~f%f3|_b>S2Oz>YOnzV@Z;pflb#;pe#$~X=F z?%UjjU5p(K93AC)B~R9$28YY3sg2{uuZoF@`TE}Ok)fuhDtLO51wM8aH;d0Qitq53 z`{XF+=r~xe$3t$|{o+MpDoMG@X#FC2vAgff73y03^e+n;<6mwEU#h*v^nmj5<%b?# z-nBp5h`PMF)7lXByx%6P{M&pq)g9=nXcYpDIifHz;J3*A$9%_th2TL}kx9OywC_fv z7u$(da;!$><)fg(!X8akO*J`_J2+l#Kv!2^#7UDI0`oaPVnq+0hUvCMxPJ zq2K_L9dGkyiB&0o@dEni58RKpX5NqH&aazq)}F(OrGgdGC=|y-<{O`jpK2|^I-OHt z(B?l6py^}V8QY3+U#h#ju=mF6jj^%r>~d8shm!mn*HE})M_8p5F}O? zWZWV(MIXj1j18NX`aLzp!*TY>#s+9?Y;0|9ZylQgojV$vyMe)mPIhNDXO=%zN^%u# z(Tu24cB+y^LdARnIH^S4L}W5kX5vyNlH%sJz11AY8`+&sh z^YT)pFLH5@5_X=rk3T2d>o{X!Dlzn6?{KOWZnz5e4kBQ9#%V_y`Q<+by|)i%+P}7) z0ni9M1cRF;gL-M{C}L{Bsi_diY%mtqvGcLBnY@ipdJ0sU&56|2-@UOQyIAdqgRR{r zU3^<@tsbaG4|GgGqN4y2l=xIN(_6|eP`Y85elvHPZffMw6O<1YJdHCbQTPunM<wJ#~%*;hY{V_5m}G4;cYw)zAmJ@6SO z;X=DXLhLNzi^)&U!t2XYS~YRq1Uu|?)hRs}u6dtQIf;1U`IZt!t?7HT@yvc#L#aog zaBOV4SBO>n3=`A@V&{ENG0C27CITj%{#|y7G4gZGukrt$H8B+tfgKqg9TgcF5%sc~ zJ?xNJ!|%z-xnA( z(S6x>!!%3Zx@7B9#Ho-ObHonY*iOXwnDtjtrPwXqx?yd{&eX_E6OEA8ye8IksoF`W zG^D2bBD;&13CgK)f7+nW+kPbYXzLPQHWUP2v?g3D_q}Zs6GP1_E$FDs`p}cZy)CMt zp8ulyfWpt0 z_1D2&=d8rOT))B-9DPe{hI1-kF0(!vhws{}*_#??_%?%|LWW*79g*fved2wOv~q}N zNiQ3_y1Yxp_31l9KRG>8lF!?lWXjf8UX$B?i6u(2#ao-o40GOTdg_tT?YXOAIQ(cx zUdONfEw?{Rf5i}nll#sO7J9!cjSKpQ;BhN{BS3&H~aJYP3N;&f_SYPSN-0AyQZZ-UmHiruKE^t zbgQ^4ZOZ&*3wgY-y>pFM+kzkvm6!)kyY&O)&wxqDml$vSTC`SzwgN6@MFo*ftL^o| za50};AvTOmkrmKI^jWY-tItXFwBpU|+7U#cy&^XD=N8SEX3@#Mft$Cc%j*EAX_nu{p_*UYiP1iudNr&AQSZgUy;PtsnQbS{s_`YMSa=TkCEd z{fvQbZk|p+b5Dd5)+nTLuC%IX4Z;?$9?xj%hk2ROR3FOVVt-9DL23mdGKcW_XTgck zp{XfSO?t1uRx#NChFY1qlc`^Dt%~sAwsDR&*;tu{h|Cp>6zAh19MWjD<)rm62gim7 zwXVQ}yq5{Qy@kdGe=Pb4+d(6pBut?=TJ~b#DcEmP9>9qa$}l&w zDP;EcXDYIQvV;cFL0Phn@W*+NVzBp@|_Yq`I~ikyQO7f_#a*!Ar;Pqxk5Ei}yd%C}4Ly4VSW!`xrd<3K+gjX=%n`Ez( zR9^UQ7J;7;llx2>5BAvr+x9`7Iu=~)&U;DJR;$3553>FE1*&at%pbN`4P337Cquje zgHY14#oBrqZ|ycV=piix)qaPW!Fn1scpkAD)+}{LYUx%j0OxN!XY9Wu_CeF&>le}f z_KWv(3LOeLO~Di`ZMVmb&};v_4wei~gC}FfK3|fbT-r-cX0a;Njqg@(h+1B4+<8iu z495=tB(F#qFB{j9fNvXh7ox>ZACc zCu$cr^!KjkBen%YkO}`gVdiisE1))Wo#qfAa>r2#`*z*&Uh{wetPQMCPz0jv>jJMp z-DzM&VKd^@$kIS3Lsb%a%>_yTQyl5(rGO+BZDr~QU{LycJyNGHF6K9Udm$r%Vb7j1uooIp1i<_mUUjJ^-zNM3azl9*uDkH9*F z7I66qIMopo2rK&l1a&mr3;H=n>z==BOVGA2o=Py>|3gmXQIqoGSaen5x~d|MR0rjW zip`Xb0y_`Lv|Ho~YERA)1#TFj#Z{3`rcGWme#9_tb79@{Y_lXin2PXyQ;??YW%Zx(#GoQ3k1DjcX%!!jMArIaH?>XN;(TS~#ne@0Dl3CpzrsGEGbcHa zgx|d4A8!T)r!?L0=%aNvFO{;G*)&ovHS=0!dwxr7d8ljWv3-q9sf?gmw0g|kCQG@Qq4iEIYa zz@pRUJ!zy&2<75X0$g3Wa`g3Wv%v3Uoq6TVqu#fVM4F>hE2#l9SvZfqI09fNyUuFK z!^h_k5*GuDT|_6tgeZ`J;3U#jYQH;3s{c-27VI0_R~Md}6||!Z!nGlMkqFg8gUw7( zZku`;nMypV5Cj_%+Wd@ej$@NMH~K=t_Y=5&J9S+QHy*q@uUfzLW>4J9khSo1q|uAK zw4F7UY};v2;zzS6=i#F!evxwwNC0F_Qdsg-nCS8#@FWiWoo)O0TO%X$?Ee)*bUbsc!xnh6h_!R}= zs(zUEMP9te1fe?K1D;X>`fy-bFe?N8{Zh4eAXFITXBZ{muQKTPC7ywcJ01{@-Xw|w z5d|)fB3&NR@gdzY;-$O?7l;Dc3a1e9X{-Sdjvw}PYj13Otn*klPf-oUKC~)WZd&3m z1pZMUWaCV(*(*s61G&rQWvlQpgo?Pqbu zo!ifr&cZ`UWc-5Y1i~&rx=Dv=A6(E{9G-I$H?&|9qst~t6})jv=Igkm(d|sjpO7WX z4IPMp(+bITELdA?)3QFy6}*L0$kd3XAY#y8!IF^SaS~%qebNjsa_7;Cp^?flkRQnOZFnr71ExB0O;s zB(@ERcUa>rqVMpmLaJ&`VMgoIMGx)5v$=&{vM|7}C>wr)LM#IBQ0#DTC9Cc%WlJH?eZ zh3pzv+Tin};dK8mA3{gJOC%ch{QEs-iJL+%`WqWrm)Yl}dQev*9l$0Fyj%vAXB;yCJP}eqj1a^rG zFvpbLaw$h8)S>+HKjdjuauV9O2R67OhrSmi)OT_?J%7f!@;r4Vl4f0nXB&NR6%H@j0XqOhbw|N@y^;hbpdGq9DkLwA7 zW%EOGZR!`3^j9BTF|Y3m0ui>8?RsC7>-?Z7*?grj7O@2~{7_x5jcu(^(e2aMWP(Zkusk3h#~tG(yo^Q;)K zUwRK(9~;751zf`}vRqD~skf>y z$1@}L6VIxp(V6zzd2;VRxLj9z9|9Y_f>*5O86h%fs!61f{;8;jRLTIk^kj!d*#qsC z7k~3BP4L;qMXVqzGKzRmsm6K6aGD~ioN(2ZBQx$CEBXSe;U#}hI7bi0e$O)Vf z&4}RkBu?^IMz%-$)K2j7?a(V#fEfa*Q{Zt>9A)MyvE%@8X#)jH&2bT!dl+_Gdpgm>~5kW&B* zGGow8TsnUq{g5QsCX!a)RLLzd;&kTu8plC-l2sP%?NRl30IERvAkJaB|IUV+mlG>1 zU`4I~D|!XtG${d}Va!Z`Ev7v1-(2vpX0!d|L2eh=mL~lu&Q@J4J{D|deDkWTK>Fnnil;T>qzWiwmSy!CoyADUbnsI^DcuQ4Gi7HrE#AGcn@kH1BS_ z|EhwX_~-=}g$qOUeWB$08D}`G?*%eQQvx(V_&7GDxNn^q38O@y%fPMHBL6#{yqq@@|EC-psAR+6Ii~$^|>H~NMjT-^)Rvjwk-36&0TCgL3 z5Pjhzq3mbaLzU#!(bip0(nnwl!ZI5>y`dh=}GnpoY65eI7COX~2t*M>E#yGlbc_(sDH{dZE z+~Nn-5jcYH+!o=s?I#1SBHTspRt#yhD#d_{S+dniIdvBVY$)(`A{!uX19!-4EFJTl zhNJXtMg4lIH_J5?4ybcLF3@V%+il`E-)`*AUMnWD3Q0BU^M!La=$g)&fz*7yPy-t2 z0TZx@WUw*hDTGAX84>OD9JuJ}J+BW*b-%!188E?VS7Rp)X3ftOQ3fqazDlo&Rqa+> zq#_HGv+WL2+d;?at!TW-Fz(|GfA^NXeB4EVZbn|=b*E6%yaw>PU>y+_NQ7B^LkfbH zC`wC@l#=NqQB4eue=F zv$lSCAA#%anU*9FUy@vvHTqx5W|-NR!`?wvNBo)Sew{#7!GCAh<$90P{XYTlCeK1? z(u*=q1I!PNE@)U}P5eWwWL`}#KbK+&I%1e7WcNyU4u~JSILbQ@1UB14?;<(dt0;KT z(w_W&+-SQ}T2PSb^!;pPcq4~NMX*KQ_ruFn;P8ORzMU*Y5j}x(?um-2_7K&8PLYnH zR;M2^z@1IrmF`UThp~HUtmV}y1Y!l%Q~By_`1|)BLxG{M%3%^XNv8j3nb* z`wdtgTlpOG>EQWAC*Odu2px`CKQKHi-&){r=63L%>Pl)wc`_*p$?QOq%oCE4^{ztO zq#CBlTocOOpjH))9!AAHS&85fOsaZ$7A*msuv!Md-uP8j%QuIOsH^Po>q>dJl}PXI zWkEnLXoA1~C}8e+^TC?8tu>3H(SwXw(3;xnv?pTx+1mC<%iLVaG_ zFFx&GdNup{qOPBw<=c=2!>BPIP_u+#a62u3Xv3jqM;4KH6@k0&V#@`mn9hvU?$+Wc z1&st8kB|Av>iY6C7yjm*MwG{a|0;Ka^AqffERvgC>BD?}ANJW~Fwsc=DR|}XG#L-R zP~442DuZbxB9XMsYaQ_!BoDyt_TTVl(U9*~`hL5et^oBGj`kuW^ic1M^yvBp$pzC~ znnbcN=t@_VGgZ~-csC)M?5H8k-{ox*O1?GtEN)@_vD89XId1n<03wgktEaWrVyz8* z=b@vtrwsc>=v90ceERGt$K250Jicko*>$Vnw=Mm(k^Ze=%8lZixX*3-Q}AC&OF3+P zk#%5;DR&;+UjdV~uOP-I%R{yuuY7VH-lNL=*EF7qJnU{TQSKM1OfX9TNolm{L zj{WJI9|4~~w{s)u#h)P?zMX1~X1AFK68!@(DUOuGhz;QEYb^+9=K2?{5J1XNUw1Uf z^>sD34fN&Lk+7d(Ba>{&Xvx0hbL@p3r?FwEjiKm5&(0`&N_dERlGay=BTJcr!YXDp zxTxbz4uZkte+2(QO8h~E1|8W+wA@g}&BC`V#?(Y|-m+;8t>e-yFTjDpzlkKdQZqR@ z9ibI*7IGt;F@bKyrL`M>+Pp7Y9 z*Lcckf4@@YGUCfts0kc<>RRxpnXc3~X*Dn{tUv7g$poW&;z8j- zgomWZlNA5a8wdo?RnUUO#K?T9mKI{I+tee8d|Bu7&VYhZ3@KvSQ9iZ#?BOAe2L+`} z7if5mu#x{BcpxwS8O?(sAr~8Q4SDyR2|yw26Jke;2v`pn0JMNHiyV>Ihc1_U;F6dM zHoQna3kAi|8?;(S%Yz`J6}VA&AGq?{HOW06XB-G$w95n^f}-w4z-2`Ck`1bjYRuQ< zQhaFj874o*>ESI?Ej-``b(D$mR3CBJ?Hwu(0p*6+yeiDmY|^VWVE&QsssHMJBrw#kf7XA&}tH7 zRXoFX*wA@9;OjiH|G(NpW7+TTh9dPE<`t%yCr{bW(DBdTXkKmnQz~@NFFU28>!0r5z(9dh5J*nOE z_{99TaJyg|N$XxSd_C^Pv~6j&5Hzw3NCIrPf%GQRjZ z_b>r!9@L1nHqh1LYuLr?T8|s)X=`TYB2A>0%y2aEKYggp3jJW#pR{1mnLtDH)jPtn zhYSt;QWCC_2z^BuZ$ejE3b~BSa^m>}VPm(!)HJnElHqXghnwLB-ZP9JchOQj1 z`y{+}>Iz;!Np7rrscyYK)?mbAM1^#?2-H;5FUVvbY@(I6$-`mrTqQlcIs8~(wH&`h ziJ<13+D8=PRE_uc4V}h!=1b1v`di^oY{K}Sddb3PIJ+NTCz{PL? z$7IO}xv>zYT+*hJl@|-^BIOk^>W-ed1927oFj5E3#aD;t>q4xDK}oDE&aIe>8JmKj z)%a2KtoL%?bao`KUFU5P9T6)EjjI`XXL+7 z_^=bA2gwp6sYRseeyV~A(vm=AN1gNyjo6Ml*NzkfBqcV5yEr+nlujIPE zzb4rx`OhcRTYQC;Rjt#mJ_Kz9a$ciBylQPx91;5V!F?s@@yCD(&mh%v&;PN~MUd=u z z-tFw%-=6=k{g<0L0|N3=wXWYWFob}+FIr%1MROl00QNp1;BpbDa$qPh|6^~vs;g0O SpTt%mm%-E3&t;ucLK6T^)m4W8 literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/edp-sccm-primarydomain2.png b/windows/keep-secure/images/edp-sccm-primarydomain2.png new file mode 100644 index 0000000000000000000000000000000000000000..5cb9990bafce1b993656954a004516ddc6b71575 GIT binary patch literal 29139 zcmbrl1yEaG@GnlO0Hr{SQ>;K}aF^m0ELe&=6!%cvp@jm)CAfqF!L7JUk>XH-ySux? zOWN}4{?xxPchMv zcccTv@Q}>|2PLWZXvG5*o5+htX7A+Rp`n#VVBZ)#MqXommezDYL&I%F{XHOJkokg! zW@io(f2ZO)wUa6RbSG-z?h7Q)1K1%O8==nseBs2_7jPk#(1y{!sBk zy8`sx4od%=Z*XnVgy>;FnA=MXj*@TR4$5erQ+<6aEln&<%tv#<%MDAsGyNTrSlSud zxDa`IUJ%iRc6@PfM$s?TeD4$Bi~i`{bL4M3gV*pek~%cB`oxI)y9f$ubl4-*r7ONL z7OFh}xZ<(TW^$wMAMg3q@enzxWsl6IcTY8n%r#o&EiLHf z754n4ltkh2;ss7QYO}s45QeBV`qsRen zT~!!Htg}-~)pF4&)%&aNCR(X{C+7`MnRx5KdaM=?PBF%ia|^Qtkgl$7iP_AdJL2Q< zWMw5U7vQA}9cbxI_{n!+3oozRt|+=1*H_J(q77h=wtD-|_p!SZ$FY8O+SbM7!+I6f z3z==ZwIXSgCxQ+^lj)g%AiP_dI=H6-G2Ue&)OfD=Ux1Atz_b_{=t{B2f*_^9`sg^4 zRSJp2$8}d%SNey*&xdcD)T5o(nqVD`p2_5NZb}1IM*Ee(%|4|&=Mt?@ zXFZWc5E?8d#E#$o$7crDN}I@M771oa&%&k!mxu0BBw~r-PA7t6T zDtcbRnJd}u=rXKf$ZzZR@pasU4g2X@_Dd)aReVh>)2<2=b&v?KL{5H6d!mT)MMzaG zkDYBc-$q^biO8mP!gl4}4>G4;UC_QX?aPg-3COBLvbnR2U(D2V+n*UMlHPF}Nh0_nyg6ECI6}N>aD_WNn zxM#@YfexEG$MX&IMj=-hYkSWmgVq%gH#c`!SeU=Rzlg}JFm<{UQtn|D{y=)jH?6N6 zNjVu!K303Hulc~^q_b_P(LhRbw z#oRAzWp(^7AfwnpBJcw^Po{lPTh_hKs$rcV+J46keBbB0BWz@5hT`NJ6#M=c8cvIU z8;#izhTVpQOuLruyWHK*b{Ss1Eu00A-6}Z@wdIoI z=xDBpa5p6{FRxDy!^@jWk!wu1*B>}F>XmLYn-FOZ6y%ElF#bcI*9)LmJ|KQp{z<5k zOsMcsdsi3&uOiX5@625ZF~@ZdaA+Jz1!jp>Yq}{pGFO%`^ww#fF=p#oIGZ~LS6%4* zf}#mClE79R1#fNVqiG)Bcwfn=(sw||lDxMBOV_tnOF*&G5firF;1=jxDx){xj+K7x zb=s>SuB5#8+M+;{nS_=8uxG!mMY?Bdw3pam#ZL_Ba9&c^r@V~B3Y3m@zrQZ$J!i+#YB_zF%VfhD0k9Jb zm%JubxBk#S%U`8EN}$x8oNN{9T^3?_%pwf(AT$vN3C#;!tu!3o0HBQu$9iZ;(K`Y- ztnLPN7IXcJ%8917?QwLB?~sjOU9rn7xNO-VIMHuFe6RYT@PbeY#+uTb>_iso0MNlY1nf04j0ZXsp zb0K@$fA2;L9|0_My**5%^B)}wk7l^iok!;@I;ysWK$eA_ z%a=5q#)tW5&u6MFRZQPkn7%9Vz$gkvbbxB?qqv#x&lp=VXgxnZxA*~0yd(^grUz2R zKSd#Kq~{@EGUg59m5l-DBa?iCu#NURVn(WE$iGQKfJ1clCwFL9OyKvyGSReh!Q_n5 zgarcK5tTImdiVi5cBH5rmo2F98#TYIK7Q$fjfD`Wf89DTdn^kNmG>6+@b(@`XjX5%-dNrieB*uprH3w1nV!Ax|^Vr zjl{CAdrnd(JV{4INAd5>wfID`Ux&qjeEP(%q}(4WAx1LPOU6ur>zx6nPcW!w$u(-c z_PbMsLU#8o0&nlKjw$1!vyV-RhrVjMjr*$DN1taW9Z=eQ5w1;^+$N3A#RP&aqJM9a zx)rorl9qo!@fbh?BOK3c*MA))5kT_(8Tk*XiKUkWxA7#mC2bB7#9nRCrp3))U%R8C zE;kcLOAkq4Fi_y}U6xg9T70#q-k5#eh>6IoJz~mp$+&m%!#aDsD$to;T9sajIvhL1 z@H+{*4nR6U-2HX4&=<4XAFsZ-alVDM+p+X=9lFgQ0RG9x3P>h~OKInjC(Qrnv+A-k zK>=QF9#)57^(i(T$Fw4I5#=%ao~e(Xg?sHj z6rE44Lc+(0DQ(%9Ht$x_c+;qxIXQR^JvU7l2wm8fsPn!68hw-^3*=a0qaM9uV;s_7 z$}%ktJ$XjSI;gafGP^OZlC3wF%b%iXh7V!E+YPw$? zeRZiSFgq~K?9|(>b8b9D(684z3~*;T(Gz=s?3@nG&N5ni2s$ZN^(*uXDQg$pJPjNh zGkh*5NW8|D2DGj&=#sp z8P-0J{U3BOKD3b`4G5?fFBz}@`SUrhzh0A0a#GU%zR$vDjZb;gZ9wCu`)dEaZlRF6 zo~rZJZ$_)ERpZq|0=|$@?>n90(XG9tIgGu{Rc+b%QL*`4@5ScQRNApDNZUPTV=w=|yP; zpf{4X|CE`+Jvx_(kx^e;TiY*vA$Q-v%gahN_W0^Fzc;=qpP@Q7?eb_OuZLUBqnlIP zO|z&dyLV{Q#_Is?a5$Pe8s=epbN)fj=iC0;x3TB@H)0;=r^9M-oew)}Vr@ky(N;Ze^{@hRQhKEb#}Y^z+9hJK$hoOc{N-oef0Pk_)2o z>_w(s$EVN@GrE^H8dwOY<85g zfg484{F^wmkCcoPmSKMRLIhuIb5>|`B16kimv8ZNZ{)+X<8KFrvR0%0WxU{)2IT{lqfMTF>Yao=zewSgE{VW?{0#qH&NHTL zz7~U^OtTD+WC@pY-fUvs8htX`5U^#Gz>d4>aLucAUjL?%csc??@q27(+X`d5;5vDG zKcfJnw8(F^(a-h9)i$s!i6785RHvn`7$vm-b$7sN@sv3+$nLdT+h0KPyi5_lHN}JD z(FBcHOMl9k-|JXk>ob^74j&sZw1JO!DOG*zjknunf`kw0YOCB6i_`>4E^FN37DW6! zBL$~?+I^u$LAyyqyqo!za)hX@l>rj^V~bY@9=t|qepP4VeP0LsSzC9=N0rm100J6Y z0m}MthNVWXCBSk3y}Uf!qf0g1ac40bHeUI(D1#ceqSIEqc&Ohu_rI~%06j4EZrXXm z_|of$a9aG8A~Vpi^meaGpE{rRF{BRg1@=UtAYSpIMZccd<`n#@YUmFY@&0n@n>b2Z zx0GnASBKidH^k@r(UIcSwhP(3I^}Ze4e#(Ow^LfXv)wc8yfyhL$K*ZMae8sLg9oeE zPbq>Wn4Lze5YZBPRrIHG)-ONA$C;XP^~;^{gorp?t4(L^7r$3PMZPWL-5@hu>@sujTt%Kj-isq%c;yjXN5rL zjq&LkTMQ?N(c%+Jy|zl*&nB26xO7e4f#>GMibFGSAhS%;$P&3K9=8 zddk=oxn3|ScRe1l9c(>eUxW?&Ppp9w!+RX&8VjOoaYZXatnnxg8Eojeydps3-OA&^ z)(Z=?_(vP))N5qmgv!06XtK&FA%RuZf?2K(+S-8jvnLM{4U<=oOu63#dxYM3oO{%2 z`rSki9X*v-*n1A8zY@s0M4XQ=I-qhBE$ZE%oQt+v`jv#pa-s`>FeBkG@vxH7GMbs8 zpG~I@Uh29C>q(~6JCzsjRb_LX$)cvBU-`aN|M|-91Hbrl3u)S62O@)$H{U~UYyJe5 z>GDj6Bc|gnYn3xzOt;6VXCC&(?r|nsX{-=oh9(w*o;ZAq9ZlBfxu{T5(-xbZF|>hb zF|5c=Bre5F_mecs4%8cLfd5L@i%0KuKjU9_z{&H@@&BAaXQE)bK!9nbYi9K_h?W9o2wx3cN# zBsS0FE)Y+^-QOIDXIM(iGf)tydU$xbJh7&hEWWpKZaBSrw`wlc!(}``^Nb*TIc6Px zJhMRql6|1EmP7q`qYRDdRMEs+5w-sBxrMw!`}ZKvNvEcCRe9?&@EPOJ>oV+9^l8^jfcA(ETU&qw z{>Wd4`ZJqA(A5a>ZC-k^aAc%o6}pd?lXlKI4i0IscIUnv<%~{?h3OUvbHDu`9gHOb z#c*)~(fH3?07v+U5cNrc)oYA36}*jTzE%N6``l z>VyOVHThy7S<+;i;bgO1Keo9qsEP=&~A|Rv(qnbD87B?g!x9W#;{W{vC!;jlM z#k0<2Vw)6ewP{ZsorLVmvJz+XqMBFi3;=<=!`2A(u1|l~ zQ~YG{+o&(^Z!z@G{BO>3fOG>s&m8ZK_jUY|WCqb@Hq-8QOU|TnxEo6b94Y*5s<)~N zu!$XY)rXvl(DiD*7m^bm_=@kbe1C=h4)g0HbZO*I*Y1ipoeqKYbM&viERbrU;&6pg z8MgHlSUYxY`of##Ixp&h$d#1+2Dj#8;9$dkJX95I#*1D)6>?z8{t~s94HjTTet`S+ z8hJ6((qwr(&wz;F$(IKrBM}`qOM!t0Mlc*%(%;|f6n(K|UpfPy)#Ku2+P&t1U%vxR&C8L0G35b#)D=5AFsxV2XvAn!MHC)Bwn|s;NmQl`t40TSpOw@E*3hG(|7?9 zIV&BzEuA7NvKP;tQA8iVYrV|ap-G%69`0i>=Bu4hC|quu>{XB#Z%uy0i-au z;%@@fKbb!@3<^Dw z#C7XOc`6IL=kU%D+^lxQjQJbc%@9J-(2om4mOFH;b;==L8Eu9q7kUp%4PZs%$7vJg zQecYrE}K6oEm>rOY@nIi#^GU@FWFi%+2?x(x8k4Xs7@s-trF5E0j?mFEZB)Nv9LMG z^k;uI85{t{_^y3Pu?Dm@3JMUk2imH5i@zgOHf4ca$i#g1u-GR62gCAtP zE`ulBJj*C~iUh#8FW{`EYPGYMvE61(~tGMUR-#zyJ}^nl$&e1 zpy1lPBI@eO;AOvxsu2qVq3$aeLgFAOeu+fW_GJ_KmOHCgwTTt$uhq!s9r*WO26Y%l z&}>t((rH?oTA(+DeK}8;#kdYOuy;6I!)3|7B}ja(qN)4Z+kfRBm9C9SR@`t1cQ1+* zf1GPsZSkxhuNy%3^XH0>k~F(lA=< z%tx~fP7vaHvB;%;x((C3Z4s<0z3;a8Mx0Njo*wC{U0d62x(;2Yzqi+yA2kPdW=9Tg zRUT`#LXC-|+Gz7YJ-dDd27*dts&r z){-IB&f_kcgWg;z(|`|mEgFB?tgBN##jUr#$;nu(MldoAK9^G80ezhU@`koH)$^-r!n~>`V}1iI%fPmvTRzR{8`jfDbewtaRtf9gGYWmD!qvcL zP&F6$X-(|MjlrFqW%PKCz`c4m^$!?D%DCUj8hQjdth)dYNtoQuU)YkSn0?P=J_F1f z-%Ne))qf=HDkHl5;cVx9-HX4+E(d-GaEXyqG@xTU&B9D>W�ofX`svH8buR2JV%1 z_%S8S0cY?qnQe!}+A|eRDEA%r=sn{iJ5ROzczhDKaww-qWQ{9ZYC5#wcj7L8u8PCM z{*fVr)kC1Wxbk;v$?SxhzR`@F?5d~!L;hiJe#6Ab&b0`Hz;(V@BBl|C{t|r z^IcMyg!BQxj~nckHdo$~G0hf*fgfRczOTGHnKgmmJxex>=;4{z#THz4jQBG*$0=#c z=hieN$;~}on5w%hd}j$3;P_+>;DPoYjGd%?q&kUghkCUaHWC`&rsX^D6Zw>Zo6OP#UkB)F=26xk?j9WI+_yCRx**C(Fm;gBPB6`A zP|+6Z`xMHDz`zc<%*(6z)^@sSQPjQ!-`awhX8w$FXx!VLnHq3zg*Kc&ew$jH<&J;G zbe{6)uRDu&03Tli6-&YB-)+oJM+gb!^pt%|&L_U3ZI9TRr4NvbZt|cVFjm#PPvqW; zA(Tfb8qF9uc{bdc>)b~fU0sOZF4En0;?k&^Xq8+1vTm~2DJMU15S(Q#a@NbbGmB^$ zo3qT~mSkoc>F#y{;PZ+#hbc|ZB7!+K&?O%>htDEBudQ|Yuf>^ctX!Y%UEZZ`d;G_> zFTfYxE0RH+c&P)ncU~p_qIyyMk#?h!qw}1J_Z=3zL@VdSgwNE}$hVUNid81d1|p&r zaN!jEIdCmyF={!`u9!E%9so*Bi@@|J_S$#6|1oQxGGw{NyHyfBzjg>6^2~f?w!&k< zvwOn8=(VB}Krb@;p4I|vawOAZBH#az0;ZXs^k*xlB1tprCR&c6(6xu2*%&Ut+-gu8IB zHoaME<1!+sSGff#Dq40-a^7tBGDG* zFljJAuys)L;Q5Qn*#T=aL5{3rZ}}(hUjf?M@b)h~#pVY|KC#>5pVI(KDJbPn_8xX( zo;Pf#?-eJ0eOKVqD`cS++1-Cmou5?(@*8L@T|6!>VehL?#q}_P)@8WAFXotMADO8W zjgI28yRPEf9W%d@w~^e^aMv|&c#SJQ8ZKcM>`C8LoVW}>DcATx>(LAYH zBR18oYSL5onypc?VDk}WCAJXHFo=?dGQX@(w(1+8Xim*ziaQw{N#f>Cx^rea?;$xq zD$By7b^>Kho$(cv4UZL$jDqw>$C!<|B-|2N_{)!GHfQ|A>Mtgv3g+io$G2Idq*rdq zSGg&BmtG>h`j)*l0K}|;H_@j5=k$tf96KUXdG?~LKVj-F|HF2Y{=t>7_OFi|7sdPx z6q9q$tc!|^Sy?@F*y7t3d6G=Cl)~N{SgLA<$nrjZoYeY$_mG8B7mS4&H!KyX(I{P4yX z*6NGv=C`Ps$Vb=6DONCLYR|&X0Mfqtt%6$g04K&9Wy97rT%_D1)$i!l)AJqyUo>WCdxO`G4J zp9;2qEG-@UsG62sbp9&I#m>MEG5{&>pWIn_j$gKC`jXOtQFSdi_>e@EAU1ZYhv`GV zY~w}oR&kB$90wyKzlo_+mglKB<2Jm6OjrB3GVcl3FaWgv6ijt>wxzx_zUy}v8@Nu?UWQ=jhaX92_k-zbeJ_f_RIU+K%TTb>ad=IAw{^WkDm_ zN5^SqVm>K1Np7;`6hk`}VAn(W7|K=e^MtggLUdob7Z-)=Uhiw41#MFRqCq zDo(|uD_sZ!81y9f&9%j}+-$R(qK z!FZ;-8_-m@Yw~R>8g+}d{)oDcB&N;lv8OV5=Qo|4mUDL&_vY7Yh~nD4UyeGkhl5jy z+`GHc(A2(5S-;;%H8i}Lrt4fla0Ftbsw+Gap`?h;{-ZZd7~dhaE`voP4CXH>IE2hn z;dmC_bE}6eENlbpERmrrv=IV3Y`qo3)@7tP+>*-`h2AT>kw$Zka4OiwHs!WY(eBP4 z6}7W@k3X7foJSdkOA3;`K_4vE!FuD*67k=&6Kd{csusG+B`CIV%B9eg@6{yyNfG~` zl(MQ!RNISaMbr;HuIWRWix8B#&|s5X!c5b+(82}LDbi$j!MEybD{sBr1BdtQ`=imL zhZg}|hROYcW{IU>d4bR;A$nq2!}8Tt3JqHcW&JD`m22Z7nLTlfOPxKw4OPKMheT*&R}Q$Li=D7!H&FV3%3b;i?c9*UFUc_+FUTK^BJxW+7Q?Zu7?c03hM4Pz6a# zlOk()kTodDQ16?W=ttLbhy=HS{49_aMza5&Mo1*^?5CQ9x&VFX4_+)X~ZHh@(sDf zC+c;8uOrT=n$v6zOLu>+l_e=D+1O@QBqg-AuZ;sA_IMTgoG1 zU5Qch+V|rKLvJ>+2B@CPV#(vQJHg9?edyDURZ~B|GdjBpPomCAl-&K)cfi-grlZa% z{V~atn5=o#G3nb2ioT(6Q?1RH7Z{lq;XL^*{Ksr>oAdNM$wLsQsAtIi^83mrxuWxS z2cX-mvmL|RZMB6xnhj{e+ankk&yVkT{BpB5oBWP!$`z$uKdBw?dj~g(6;wm41Dynw zyO-;1?_fSxH5TjO3&N7*(bJDZoX{Z+&y5Z5$C*!6m2UkTSI`exlo z-9ag&j>wicwV*WjdC*1aRI9N~T|JHf>VV+POd*3+9MB&Ln(>_H>6I{)`{ZQP0Z&vL za}ptxEi0M5zhd7si_jDCSedHL%p)_n-u(;yg| za&|9GbY%%HK&3aYxqzHHUsiojVrFa>|L_M8f05=j7kY^k(B-%%{fU`y;^~uW-(+&{ zv~luh7w_Nczo7`1=-v|uucD2L<@0WPIXg*B^0LOC?jt@{g*^&L?)pHjUujl8@s>G> z4SdsJ6Q`n~oY)cDomdyW;kb+@hF#Ro=_Jq#-4NKtg_HmIfRT{uAiV(|mZaBVMba}7 zFAzj^^&9*JP)Y4w_F}W)H8gJGd8*S1+sPj^aaz1xlO-Tcl!qryP;mwQ20!ilKmtui zI=2wI=D-Tu;dMKT->;C#fR=k>g<$At1$7ELHgeK0DaK|S=@!>E-(Or0p~U)=i#@(9 zSR*q;zwfRAl|0x{QdsgWpi3>q%BCeq|sds?A<}b{sk@d0A zgLqW_bp`H|2E94(k-xBQnMY2sVAKWrf-<$pk1o{d{r}x%7wEr9{`=?unf3nD{*Kek z?^?7imn$?eIVRP-<0r~jFMM~aNPdDjT4-D1zJ?T`KO+6~RfW;F;g@HXcUNz(Z1Bin zsCAkjqcFZi6d^s;u|3Zh6rL`C{%13j0ZavVwsjpk&i%ZxDL=&eTYn&IAp)+GiFS#v zvd|L7LV4>gPkKl{Gxk$2S!1-Y%S}z*2L@ZK z*dpGgSUFG-VO34ljm1F&YqdcoZOQy|?sYNcrybJ-*X`HPC#=dRCWDi94=+4XggUik;7~$Idrj}Dk(GF-|egKNLu(t-4 zjEG{c$Adt+7!?e-1k%3&caim4QkVE`8eUD0z)8ye`|O=uVBKD5&)|39gBBb2Xkrq^ zw@g&=M{q~3=5cxLMUck4EVd~XqcLS!Lm}~GT-r+gpFBQ4ZJzBCiz;h{ z2A8Ny2uanu(+mg2pH9!mS;gs-RC4N81)&2VkveW@3pT=eY54ZVbPtVt%vr!aKnLpE zw2?)S&;fjgqGj;d<$S~$ZxwPt{-n$MmE*Gb8|R)EvYxmZ+-(lcUCJua>fE-#!2_YaQk0NY4MBt^Tz7SEF|PC;DRal!TS00&tZ8+QF6eAX3V?8ri# zw_$a-AEfwB=xd)m1(!gYG2W*{PP)o)4`Dv_y9uft?yZ*+#}0XQ^}BhpA64a*F@{O_ zHHWQx3V{}MD&x#U{-)LCVyUy+rsvb$W4(Iu_F$&1EqjvQmIr4`NKsxTxR7#d1WMHQ zAHsE_^4Fok!i)~TL13AzXHt%It(6T)+8)vPA1Mu3@}(_=;z#Mt()@4vI%qNNIF#nuA>V`B^R2{RbS#J!>fh?_(WfM9V`Qx0 zvSj8(kfoEeF-LiR-W+#c9M!o;f6|)rz%hJhzCO09yhohLs5oczT)RGkNS}m0$$8TL zvGnY##3N+Y)T3ngXiwVdZN;Pg^t>bZC#-{ES#sgMj^aTvF8wm6uLKXBukPbw`j|tl z-ua4Mh7Xtz0vmatjHf9*Cm!yW`4)Glaq}KMBRui;*}&U@MxwmJ)J)x|7sC5cw^sUS66IpY1)=zRD)Gdwg462Ry1t_ zY!yZZvlL-`Micx>cbJDsC!Tr5uQ;edMtbqSp|!RCUgQ|m(4_%Yp;?7 z{p9O;40e_|)Rf!0a7%vG+b0NdiF;esYLVIJ7J_ZzT?N2Jv8P5Ee00RI2^!!k3>$?J zD)h>ED6s$$x-%*xzhMBLh#KUva!abal1Fq#rsD_k3~{-heK3TOhP9fL>^@jcil}2Y zGz?<)T!uNQUY?k%mQ?sa@Gp223o~l$%xu|=uMXE^5mC>U{?84~V~ z&PxG^z)?yjZ~ql_@hC`w;ipCWx>`)t^=C`Rn$LYX)8n=ZaS#8==bBse#2lX=VOR#I zw{=#?w=Dunh(%Nvm|meD2m-&1X!agSt0M>%*qw<$t@CC25Wc4_hE2C_FG)!jP8t!G z>GXT?g>KR|)wK>3MrcFPTg*=dp@RheW#lw83{#ppWpz@wMY5|$jH@(UY+a;#eRte$&|94V#h!x$m}5@EFKpcZctZ>dy!}hQ z(?va%@FpcF;Og%stMF#!6XCxONelD<@b^dy-1@)M-5MbHYM#2}X66tNwZQozC{5I> z6?%cxcjR+$0rD`wOBg6hg+a2>H(!8=L5}}|aR|7Z+qHZ~pK)L!o0cnht!k&IRxl8FyuDpA zj#p4cgjyack|zrOJEm~hSb>7u=v)`HUF=@>uGwcgn)h!7q#Zr+xJq0(x1BjES7L-h0cvYi?s*dMfOVN={4k?2!{oFx{-M|Qr!syK67%V z{t#MDYi@PbkFm**jDL9j0jB5cn`fWj2!#Q#8L@}ctjb=fgy~#er5iU$mEiT)8uffG z(6{ehTYzB}h`r=DtbynoXwyDH|C3bI1Lhi&Q;cz`g-Z z)V754TE-lH4kdhXJENtKHUDlLlqJpd%W1iMEdI?j2pmk1pe$O2EosNEDs5qFw`OO- zo~6_QTLx{G+ThzvYYgvEU~INnj=J{ag8Io=%SE z>qZW2Hq^tU1iBG|;TB2Rhk^N61vC+d4=7W9zmYxQ0RxEzs`q9f_Es#uV(s$Wp}dp| z6RI*W9noIL&s^3IF0Y+JiVLHHRN3PJ&jMGbSl#Bz+MxZ#4pmnHquPZ`H;`pEgGxzv z!w=PGDn?ad*7&n`i%xcCC!>crZr`tLoAL@nqBq*|ocXqst-hx7=hJxBtXzC!02%RNy%pCCi9ww`LqS z?4jzMrC0rpEaj{~#}2_pACE~CTcv%~fSo+sr+JE#Sq(3E?ub>u z8x13@c7A7+Jw0#Ep!>@@ZJeZ`kelLZwvE#H_~cB6Os90R&701ie&Z=P zotRtVacCY*_Ho%v*|IJJKyawT*F21Kdq>Q;S+DmLjKSPYh}KQ)<86@ z?%MKM%&Y@L)VW+#6KYl>KdY(A`>g){m}cVwRnh%EqN6e?UkCb+{D8z2TO|3gF`$5c zP^zg00VS&e-!epB?*uzBR5&fOOFd?HWjj2;X*gc9KwnZ|xp5V#Q*>?L6D1>8cbJ1XA-IPc_rEG%i@5ByA zm8qje_ghT|*LAcXkJ3Y0pa@FqDd^LrVh%fqYZZHnrQ7m*jY-_0qFAK2S6d1}(aO19 zOu?mj#Lw@Fc-Rzi?KS`E^Y;ESE~MIAZ}K}QnT$clY+t1)!E&SB(#dlo`f!EW``0k} z$;e;r8yfg71j=TXrfdW*%t6;k*yh6hnLF8^GE7Mm9NoSesY?q%Y&cfhRR_@s2iLDA zv8k(C$?Myh{R}iS+Eja21FU;&+*_T9Z4iF7x78O`KROH7J}FJEdtNE;@^LJ!&gKvq z1%kD%Z$XBe8QQ#Vp>dRTDv3@r?%%4$u0w4rN|A7`$)&%lYIs?k@|iKnBcQ#2xu}xC zxoc1(I4|DeiNj(WM~a423T_5Haqb#Q@%;O#)+x?$3aX9c@Gx{~Wq@kgcWI5~-SU)^ z=o|&XBQ7uYSUEOB(HeOhu%07dZh40ff2Ljc0b%eU(HH-9qaU^ghnrIKmEC0LYMC86 zAi*>3V=voQ;3LS*sQ||KsL)mo^Ic9ug>dbv`q?y5$lUY0UuVq?e@cpZW|dtrwqx-~ z^cI_r7F%tEo|5d{5-r>*?_Zkxf7_i%E0t_`L4B!C=FXqD{2O`zXP>NIF<1S1y_fYU zEK}iS#tUjJ(PWZqvWG~PEDd3TpRUdJLJ}6}s@|g%Psn0l+*I=(YN~&A*cA2 z=#GfDJwm>Ihnh$J46Y3Mdx2PWS2|#;PA_U?l1zKu`eXfWVRfSMt~ETqQu5Lu!SP`k zUZ0yg`07Yr54i%k&K!(Sern=z5vz;2s*I5!$BJcME#@jxyz914s_J=WR6sEcZTbvV zKbu5H#uQCqz@X(Tm}7p;dxst0NUMguQuy275j6<1@A@7bE zx__-&y2C$Lh?f(VzTbO2Ovfl=sNo&-G1KLvqAEaWJdx?7plkfzlZE83KL~RSfQ?u_ z-cw2#CVyeTcnBvEgBvO^!Sk8i)<=J@EQzoa$r6&A96J5d%lEE0%9Dv5LcVyC6w>zB zHxQh6RreB;{fFe_-?O}22U+Zvb9@0zL1UcOCDOM<<(x$F zE__oe;HrzilsP)tRKk;AxIx+u4o?P*H0`JjUI*?x=Lm?jU6$u&}=3fU2 z`3$Jc4HzBeL?L}BB$@x+!aalUP;JzDg@Olu@rR)QcUNH_WWTMq$p%zSYy);yu=PRb zAU-!WUdwflP_FjpY?$Ll6Qc$$N}7=b;_EmIgYL&|){?~@N<=(!B42dh6BmZ(rpMznc71xN#Cmubg}( z;~MSrO36~fgfrk|VgT$F35;b41bShEqse%onMhGY+Liu#M#W%vypnLp(nmh+^}4;?A07a#CO~se;Ik)|;yJ@F1jK4ZQ$m2N1(7$=2Wq|5ah`ES zEc<80s|WD4wON_|JYnTHClQwY0MsU7jN7sAc?8Y80dLN+S0~2`j|paZSvF1%Naj17 zLz+!(dM1jg&mEn{$%fq1Ba?h*Xy42}g2z0kKg**I<|F{$Q)2$(7j~MD~q} z_v31HTqmbhvtcHL4Nx=k$LF~a07?UuFawoKDW4RlV6e^+?P+slFLOR&LSvO0nn1n01EYXmuuyp}*Wa5am z-2)*FjcyarVr{t?YfHs7di(;08&dH}hfLFU32&&t1!$WeKL+px$sfW$4d5V!y9LVD z4$U@Fe+qBDG?l5V9GdCViCNcx#Sn)Aw=ZDu@%?bg*?|kEkk`CSe`Cc35D7UL!4wmx zUf@d$O$(o)G%mC&Uf6(nE%tVSi^3)q?`Q+#N=R~?A;~r<( z*zH*6k7v{fx;9k%vF(gm8v#F*C9CBx9)}~4YWJ6*iE6;$Ox){q5=w_W$%BwI0gS|DQJ~y+oM~sWU+3rS(buyL}3- zb+2}m0Xcy8LF>+CE6utf0-F+zf$Gk1DYG)Be7k?TQc>w+rbC zm;P;$UhC%kg8KAZbhd^^wCvbwnbRD@*Q8ICiobGLhSpO5>rOTfd`#}tV!^`=gYTLh z5HhcGh7AsU4~Cr}1Ejg&%Zd)K>KuEA?E^*>!@mG|yPz>oXPuzI*4p+l#?#gc@}qXh z6Vy8fk&phN*$)$Er|(4iQjaL>!3Xg8JJs#{ds>B#NxR&HW5Qk}7h#TuV5P!kT}73n zu!4#eEuMU~?3(%lW$UU&>zMBP$vX?@K_UOa1Gt*0jLDMy_dh9JP(*1LF>>U|Cd~1< z;IC}U*w3kwt_aoUc}OKS`Sw4menHFXsU@-vEu_{8X<#Qxq5TtYlzV?C%>)U0T36%e zxLccHn9A|BS8V4^?K*x!l+%}crmx}~$O?vJ@90#2k5}OfQhqA{n(Al_KFL8!hVbT! zD~Q+pJ20y$G9_3e45(!PwwIh%N1QS%77W73QT{rLZ6wiKvefc(`mz2O5}<<`AO~6d zB)kbdhWvR0MhHgtND(L4{fh6DODVM4n9JuB=t)#3gzn0WX|+t}wOphbhIdOO)&ObW1(8A(;VChU0Vuk#Mj)q!jpX0nsJU5k$sf zvVtSS7k{honuAA$9bCtM|%$=oEVKZ}=5Gg^!Ie<7)G*HkGjJ!NM=Pixz19WBQkJ zv!a0B?v=}$jhdF<@qn2; zo+>PX?vY!Ac>r%r;<@o4pXwfKPqgNOa1bq~Ss;pEs*+6qdhBmcDV_33uAijWfC^!X#VqtD}w*Pw~k`4~L44obZ?c?+#*pLhf9X+O=FyQQ@V zMdHqOzcZgw6QVJBTW8XmP=XFxNI=<_8#o?&09Y2p=3ciRNp2|e5t$Wl>_)6yF9C;& zj4dj=UK97CQg88k3;jsvLV+Ay=f?KBNiJn`l72b6&77zFNv4XaS@8FhQl%7|45=-R z(^$#|#p!<95d1{aXf3t1S>x)XEGMfv3gq6}Z9bl3LCRD6DJWC(mq4Ld?HedQG+h+S zLViz!?{$7`nAU{AW6fvX$M7rJWe|o3Vrg)`Y<5J;=ca=??6t1@{Z-~_o3<9I2-C-{HUIzr#~-;5+L|`tL7HM8}}O;z75K`S?*19LduU|1`3PQki||r zjUg0yUyZ{oh6RfS6`s8ghuX2F0o{B2`-Zn_@5^2GYod}d&^nz`cr1vYpkvp5sc%u` z!$g2iX>V!yIUFCTYQvxTKCU_;&O_I4`SJsMeGSG}5qhkrl(QpF{gYJG9>dX0Fodi1ov5l@|$`g@y^ z#C5Na`{#>|42AqS8E)tLk^=wdtlw?tWw7Jj1R341S8NL|{%p0G?bA6TbW(Y6J>2>J zfKJbUWd*Xgc?&v%YXt5#kN13Ub*C^e9~Lx8IX3+8__jck+R22jZ5EoA+t;s5Am5 z+D*Z)4bO}=TNK&y@0fC>l~i!HOwJB)vWjHT%1q{W4@7Om48FRkC| zwC06a>5{HFnvohE)8ZkwN;!Y^h^&G`@bcyxtcJ(x`st2h$DVRCXDsWK=7QXHm{lyM zqiUA0ubXHMyP1h@2p}x$dz3$unp{_Xz%m-3w$V<8L`IOBS=UkMm-` zO-R$z=t|RLTkM%>cg?yhhW}TgI%;|^IeRfek_P$5#eG>b5mq(s`73ub5>bIU^-)U$^NPF|kkn1HHJT2nI zW(;k{x?GlJ%g>3ejK0k!NWr!LCpCN#0~h32KgI-$NHqwt~vMj!F)0M&$#hOY8g&Y7SQuFVa;P zIT2mVMZ6brg z(Q4JMX433xI5}gxmb)}n<2S9%H*auQUTH@^REv)+XfJOy8+VJTn}u<`!>|{@-lxcJ zl-DHtV_9o-S$s&N|CU0%x>RmcqZa6GZ}FYh3c+%Mro?pPm(;nz8D5<==c!!`RHK> z6edZI#3@;Ct;iw!;L5z<%J$7E?GG_27!`Elp&!IDrC6IsDsG{pjZP~)IGGnZynjro zZm-r@yZW8&CZW!FjkU(Ky~5h@`4WAScyeplGC8BS`lqE;;F=D4G%g<}Z9-z58oMJ` z+Ry{Uv-F*PRljw7QS2JbOvHP{frz5J{|?W1=yxE9G|ES%)`J6|&8QOigV)O`^Yy7x zMw@E{mU|m9#RWP~g|8RV5#ZWxr7da{&%_~aA-E#j3|~w!MzBPO!)R&B&CCCGRE%vP z;pF@vf@x{#WE*@o(M4)egoV-AF}J6TtZ2ctYqHB@Fw#l6ZH38z4c79Nz1_n%`&VS0 zJz}CC9QO#qWk+58uxuW&QolGvZFQeuJ zM~8j;1WPJKO5%`w$yL&F$HXaHZ(biOiQbRo6^0w9`(@fbto$A8e$ z9~}K@6U!1z32ugk=InYQ9N3A~o`~SNG@*jt*Z+XfO3qn5gv|(U2lTLee`Q)}ddNgj z-e87oD(&qpO|HPHJh(N%VKvY26G1oW05uX(*p}7XP&&WANx{F=0C)I28Pu8(WVrMR zl@pYUDd6q~c4<^t2m40lRgNREtcDG+VCn&^HigWThpah9Rh@LrIs#a9-A(EzAXqy4 z2@~-d!{tcVF-+n0p!WO49`G&dLI8Y&>I{6-cy%{gV_u_h1wg1!h4#f8;D4G}(@P(e z`P82g5j|)CXYm8}rh4PQxj;GUVx&A}sP7ZmYnzTo?$`<=69Ev)z^W9^?=ZFNW9^12 ze`Pdk0>5qDJoY$xRXb10SJ67?ptFU;_jhP`^v4+Yz2348L1<0`XZ^Lq2FkOswSzu(htUSMb zjLX`>SM@TmN&scgs|Z*r;=1dv=e&FuNRR*;YHCE*?$?1CjI5GgO(d311rXRoL`b)& z`ps)XbavjJW*>a|X21YF{;?P@dm(quQ$>1t3oohg`kI_&LUO5;`w^qehuO7paE&SCh`=#3w=eFtzEt_u4Z2Ytvsc?B zY|({7@=DhL%HtILMZbVRUNGc3?1S>BsLL~9Ti83*B*;eU;@j)9eU*AXvokvqV_REu zL)P4sm5TVl_Y~IF!1W<{^No)bmz_;Q-*!x~t%CJ%8|`_=k3!0qKKQlQxFu_nm*SR&koxTqoZD7@w3;;AQ(6Z8E@46$c#oYSehZ^)>KCc@*Tr!^Pw z*Il>2@7tMo;;>#n-q4q6`j+GE?;d+DSNlUp&tPKKFx!D6UoDCC-Wi3i!-tGh+*j9? z?(2`Wc8N5qKW+c4N@U{%TLZXk@vKsM3Kz)Mv}@WU}F z-C>m*M_y&4XZAF`^b0P>gzOKE%#uY!hRxxhgGp2!S>sB%XM5uA8B_+H)O!8=u7+jB z0$y>;)WhORyVeqZ^z^aWeSKoy;IsiccH@zq4YTmiX$oeBBZP+q+Rti@D!=dfx7^p`+o9`p7ViCVlH1R^UHH%qGQ@lLq&p=QABk`FRYqC>5*F^Nk2=gy-2rNG2f!V z^MbP^%8AI|S8a9jqGA|gM`!+~443BS`i#6O&Vy29cTmq$NFuKvAslif==u?h$7JvL zTCc^$*WIImiI+}n2Pya-oY!P~rX{P<*r1!^DsuJNZ_x4S1!rP9EBfd$PjZe$?4tMS zE_?0Pe$lbt>My{_1{)Zh@{V;bQ*OMeo;V!E*|)v+1OC*Y8k6>P05K^ zZhUGN0KbMRf1}M=`|4Yb-|QovF$J$AW#46)v-(MtlF}t0(YH!Z*jLF0Smi#UlyBB1 zi{6(9j?Tm@H{G3l&cjjqFu44J`CvJkzuhL)awfPnCTJ0m!u*UV<=!h$?`acWkFth zsDs6@PeA?J1WrTkhOO>`R)ASk_9zc>aB#33WBd>&{w3qnlk=UZ&WI1Mmazii+??{w zmR;Zrf`&moybUQx8;{8M> z_3}W@+bP)smIdojl&HJEuB>+vCkF=yZf|!dl3C$d#n-WILvy9;iM3a(g}Bx`xv}qc z?u#rp@h96*F1RoFAt`Qq9#Lw0_`R>KIIzvPUhh0>D`JkKUBq>dO*LO;WU&_4I25e% zX&%cUtzo8{a#{+_JeFTTRq2D?)a=LDph`W*H$0nqJT?~x^5}Mz(!Y%k{y+>d`1jyHJ$v z;=8F83eXOrj*UeFPU1%{f<4{(v zJePG94>U9(Q(^rF7c67+qk` z(Q{x54yGL7P!Pwve7-$UPVPVJmT)`iz|5xL*+`*{(|W1+SMiwWk4!UKTRJLX(XF0R z?@D=gbw&gUQU6UG$DuEuG_TZp>84k6WcUc5nw`o_Jx1CS)L_e)a8AiNugJ?e+-}a5 z`NzuymXJsviDC2w9Tr5v$Fx>`=UiW#BOW)X63^j%oq~(mH1f0Vm!)K4zH{fBcRmUh z=?s@eWzY%aC(4DMO7%=m%@$YfjFvG;ry2tkwFX^@5^&UM3Gs8dQ9pIv1*ZU5{8y0? zM5|UL95E$OjLu!>q=gIz`i?GIYw0G;AVPVy@2{pVg#|@-k?nNVGD(;p8vPB@uMHXr z*a-wfYW6UxR$aS>FtF<)>4mW3h`tznz!?!2wdtQr)}@V-D&>fgc-x*r)3v0tJF%G` ziFN@poCc_VM5AYhnJp0=&>g{OuMcOfJ7M7ZTK|549UX43-U42pCauz;G|=UBvRFBA zjjy-i-iWtSc`@0+-VtM&HWw81CLynJVlGoyf{JjzmO83Af0e;@%h12d%)967)GI*O z?JnjJUY6RI+6O$NR?mQr!7WwO;PST)yF{o9>Tda(k70L#1iiq`Kh6PMbMMoWRHFU< z&dfBMP%ZDDBIVx%f*N+nq}10=R-NG&;uOaUM|oU6h?3S04SvzKt+r=ZijH)cf!c$g zXQ_<7$eTupxJk{PuXK%e;j&&EynzTxhG+0&Jz$|iqytH{kz9%B-4UJm*=m|ux(Cs6q-IOI`fO3FZa>o!Drg$&H zw(z~e0zCXS>b>AamwUx8oW1gnQ&nbs1IOz4ddjjr#FB;BJdO|`QA@%=?ji}~L3iGp z{8RgnC9sVyplDUt(`CJFdv>!)-U6QC z>)Rv0QVcbD0HS|OK2)?Vph)cl71VaUSz_)0O_9;A>80B-lmj%gNB^VQjg@dqi<8^J z0|O|!odl#y&ZF>~!*~5ycLi+5+3hTk#p(%$>EsorJbyGvk7SbJv0&v>2AKp-->`%q zHd2qFd`(*M$WMwN7NQ&%+?mb&!fIW&6WlJ~);&zq7YxHDYrXDC;T3P^fk5OuWtbw> zACn^jI96_wF(bD)Nw7zj9SY1wCg2UH2nLL&;SMmBn zztIm}4E(v-t$INXH+lZszOs>=C&U$3>n%b%C4@<%gU;l5r^2 zg*YK(*n$yeJ%ALzA)m7khHa0Zzh?DD`bS{w)!%lGPt++4d2Hw2bB%rr+STSCmJ1d| zx{lXuv&KYms@AsEo@I_)7JDnqzP}9fVjFKK&;Mx{f5%(z*>vO&2+id@s;u1R%P+4fr^I$cDfBlaCIk^+DOI~ihq2gx~VZ0&ruy3A>wvr*oW<58D z=w#)UvO?^IU063yD_Fp5ue0iY*~?nW@X^vqH0--xi%o1p&?rlX0a~8FyG}It?C3QF`IogU(M^7=-uu~zt>h8G$|6$2U0RlX0ujcKLC4JE5xo3`d?K934hxDNx zF+#*gYJGDTCTmp>8hYxl8JHRwPOBZm4YwP&J83x<8NE+kJI|@)#B0QB^39mEwqUKt z!d!9C>j<`G=v~}*a|9`INrxyqj;pQ>B$})N2ThL&874h96V?7|85JAWd{ia9 zTSxEQTi8iVJ+8>wNH;2c;~sx=$FyRzNuU`e(1#BbC6rZciRnCyv2N-LPx^tBHAWwq z+L+2VD75UaxF9c zE1E>2EK@$;VZwl#@|Ru`>%7sIuD&$6!jD*i~7d($0> z)ODNCIm2grx%-8ZEdL3uS|$;P)CIhXr}ug6=w#JGmY{t@{vkN28$%p}VHbiI_e5Qj zxlTleeJ}dns3g0X5Rt2BIcmx6*xFnE?3uLY9kTGH{Gq0lsd0X z^{sSUBf-tpjw@F5CTo2Ew*$9JlO%6EeF?^POqc9^Tv7st{QuiP>b==ZE#U@{ccO>tY-**T!Y%Q?ebsR zNcpfnk(+u)jG^(pfY{Hro;Vdxo>b+;jy&J!yjJHPb$VQjEgn|-WPHmtH#zqGUZ37`c#C#Za%s-JT_QhP^#n_V7D%XxHQoo5yRi zGTn6lB78hb?wGWPsbC4DrvWW+l;`=>2**hmHM7dL27#pFR@0#$vFrU>ljucjp2Z_-(VtrGJ9GT% zoQRMKB;-W6+8^z#Dokj;o?3HNH6zl}tg5-Qy&UItX<`Gk2r9?46J+WVU(~jcD=g2kw97`moAMz^@*ob zW&qp!-(mh=kRE|Xou{uJ>LaOUKX&(SzpixReDIZ$r)igaS@*)lp0x*P_MiPn9-l zUYn||t%sBC2IoT-lhe%#3r6C<7w3L99aqUuvghye||+#*%No#ds2tReQ@r*l}>Yu#GaJCQHSqbbe$$r zAu)!8*-sCec{mKM)e0&l({^u$%O)N@)y~en zalnsj`%#kIBx1;3NG>{5>lxn*n29gW?oqGM zCbJR1lQPIpKPkC9+jgkzR_g^>)I0N`QR73Q`T4OF30w>n-6g1v&<> z*Neh+X|`BU)IbtxRLs-DJ@;E8S|6_G(H0b@6xyDf|0$3H`yX%4?byH-FA zV7!tnnTJOH=>IiWS>7DJ^ot0Relw5JwKE~L@DV09QmRRvnlnJo4R0?sCk zc|Op|(z}ARHGr8sQ0zxQ{KLr^IJ-pMlOv;w*KKzKXtd4px|j1H4*IKb;+D=N5sdnx za_fD;A9{?lNYB;H#ImgiEs>_}8j{kPpOfTqtWOw(P9W`CJ{MVKY2B(&FliH#*GW*Q z=~wUaDoX#z-&2EmAX?kI08!kJ3yB9mEButs!)2x#b?0Q2!L?IocCK*q%t~)ZdwG`6 zWG6jxSJU!{xTt5yD7Pe8%&?hEr}`l^$AuNu)_2c7>*7->5+3|bds+f-r!>dgPen6!qKBhQLE67AD!@-q+-vZLA#{) zL<7^O)p0tVLzok?N#^d340M5Sq0}Gc%DtNFH-HXg-d&|=kQ-NU8ZowXV9f%ag+zz^ zvpYen?v@;qc20c&Fb@Er;AL=kWdJW=(C07f$$#U{e|qV!C61oD3!u*b-}rW4JEnIB zE`M(7FlW9vDmkqa|9MnzdCAFVOnz3b4`Qec01UIPZI_qrcvcMENJ~8FMQYY>M?_dZ zRMbYzsnJhDqS7KaYH)U_t)gvso70 zOoFmz;Zh}c+Z_}k<-LHhts~U^aIdVMhTO6`V}HzX-^+JfV@|F`lS{UT2TUAwHM2Bz zwoS?{oh8^X> z>Tx96rgG|L(*7&_&5x_@82T>de8qRYS4+@bZizR!%*Uxg4ovlPCz4f(3zioXwenln z8kQ{+O~{CC#oeXfi6{xZ0tA$ZUkZZ#;nFqtflJ$UER#&mw~(6_M$=Ap*-X>gU;%DjU0Ls(q^)Ei;fc*a{$(T# zZ^xk{KmSXx7GbJss6XILOAAk;qF(dez^XycmG zDAn(RaeW`w5D*pCouU8AV{vyYw&aAIXieYy#p2tv%Xw0QAZn^b)R3wEV7-OZQkb?( z_IdYpu{4MEYmr~jr1HSZRhueke@g2_v^jz7iiFkse<j;u^%`%))@w~PqT>s zXtUYO{%gxuGJ%*EtUP8`9(I})8{6oe`9Pf=~Z40Yd_f7BOD(Tuumc_QnehCr2Q|(d3VDh|?vcN84U4P+w$%`dU zK3FbM26pSY(^Irp26DTtk-Kg4M@{b1j7J-(YrsV#C&#w*PCfVdje-u_^o-SL38k9LtxU59a3$V#Jd%RaVo=yqXy~ULtlE zWJ^K86;%9*J&V@UwUIKMYWf8(FtsWNq6aR3KW${hR%#$^v0-m({C>}%C((ahh z+!Z;!%H+K)$DsQ-uJ8EeJ$6NYrW?+AL+vAVF1}u( zkzRQ1+tprbncD1L+LtJaViz3ObT)XjS_tuuCs+CN99%0MH~l9&yXazKLY!58DOv~n zO?viWUyt78mv_6ILKS1G5x|6@5Fp?u;sq%AzEq)w01?6&7(Y=?E@~ARTZ(xhO)U@u z^amAGBJEv+-D~d}=?irZfV~|0>rgx9-vRpIcMJ^}OpDzM4IJl%2402j0ZJuPCj!c< zaR3kgN>-X4sxkkKjsHjsl+>Xifacdx(#q}}{XY>%{(qeGSI2)#dshv=kS!2;1S*)* zLd<}AI#nG&Q~y$&zfdjQu6d=IB(=HVOp)zTdMKxx>8Wk87Hj5vK z*M?b57j<84nE>i73kE=%L@sRh*GY^b3}FwZFPrDB#&99Qlqp0+8uGat)dtR`QL6;V z!oiKmg>}eAU~b6v5Kao>nyLc`+F7=N6>l@=bA}&)R1wjE=yRt~HnzP)t1Lb2n4i8K zLR1~IJsJnJV(KRfS)uCKzy9+13x-BGM1@wR8zEvzTwKiZr>TI12KcZ4>hkw)fB*Kc zX{fnbf2ih8G!BG3LRCLBCSu|y*0dt6NC6t1E-=aKauawWeR8HsCiRhBu%-@h&p&lx zmxHzQSe)tKCf#rusvvF7C6IW6OIr|&#n#QQqc(4q&R$soBK<^2I1uH6yUfs~c6k<- z**#T`O$gsxYM(#cl1hh~rO6t;6V^4>T2m`FL^cDMRf*XyZmRBN+Z`rTE*n%>HzT)V z((jmq{45O~lAPPi){atGTiXFcFTHa5B1uboD$FWDC%v0av1vq%^H98iOrncdyTOqM zk9Xc*wsdq!Do{r!X;3{YyJ{Xkx^^>*YZA{U&0msDP>09w_u(PJrwn)7+m;dCMb{In zCNZ(6rnQ^y!Il-ZcU!tPNs{*!B})3HBR+pnfAV^aG{_KYJ+nK#QUY;q3?^F{UOSGj zRO2tE6};jFe6Yv9XMnx^86C*BZyJZv%&7V{(QHGkyn}*9%M5EueMII3n*OWrqn1@3 z9CpFKl8puK1CV9EE>MX5`Rza7{k`v>-!8^t8!t|^si=`?ut)X}O`NqNozqu`qn1ChzNeqW?u zxq~#rD?S|&b;G9?7d2(fcBh&-)H$AKF|VElD@7I+!d=btv$9tASCg_ObRV^FbZAq5 zKUPf`^$*%`_NVf=P0r6cT5c%@5UC6Ndo3lJz5Ny}$BIdf6C)PqdT~_TfUT36=03^B z#&s+4A?N0XGqRhR`E=f}avAew*<~wr;^XgI$H$)pSPOAgF$->N8D@meKTVX~l4-1p zA28rDjvEJ3Rnj3tx%Rzs^HK=Bzg&Q3iqP|EIS^=Wj6Sgrk&x?xH3#GPU!tCT;=L zNpgazTu*_GbYDl)pHynSHe_5^8^HepXFcT)U+tZ+U@hF7Cxfcdq6(a&G@e z&7ya2z7IEZsylAt%z}+(zlcTCN~~)sQTdIObo8-gq817Q(1(wfcXp#?Xlo}td)N|Db492i_ zmANE$=k1RZfb#+PmpRei*)VMCH-+b%GyDLDKVU#YD(Jq*!ee{LoQ}Z}XMDjFPuERM z8z|njts4Yff2mZ_-JckxP!)tLDTs;$^BW02G&^ zD4F-(&F=(=EU}Iy$jDN{Z>8+98ElFV?65K${q@bYSWq&`3Op-54 z&~_SW=%0|f3ep9hb32FuyHW)u;}P{s7$Q@=evIR)1x-d@57y6t_cYfdN#|YWMS#wI zi+z}W@zi!Dv}4mz16EZLH>nnD&`xxRC|_aE#lj_A=w6}?M1aNef^6&5A1)7jV_tgl zc|hOA=mJry`7GFB`zO#{3P}p_fkHlvGRmkwzlXHSol(Aj47Pb0ZuxGsU|25UJC&y$ zb7Z+1sDcd>uOXhg@YnAP&h2MBhX4}N=FVrp^C=!&E6IkU^DNiXHSl+aP0Y!eikzX* z>I4oI!}G_;SQhB5kEyU^=U&x-j+LSI~K9R5H)+}sA6lE#%D z_KR#ULY?6fo)an&u3n}>7mCGsQ@s_oNYtC61qe0($X%&oWB;Z1CXI9SDO1|BxrBpxm4C0JK1sYTFd!hH9|-I}jL&Nm6108s zSfL9XI4W)Cxw4@kBGcKq8Xm@-Z=o=Lq5L7et*Y-1JgwnEc_Z4CNw{kFLD%bm)=4~x;uFo`kUhuSTc<+>os%cDoSjV}0{jI(W9H26S+Il$rz5EgBQPcS zqqo08XziMnBTz{Kc;LsMB=c!Lbc-Sa^7uZ>kcF7aEYrU9e)GzP76F0pn^HL?0)m*P z(Tp${>#D3Z z*hfrdBtZVJixMO+&Uk9XdEzmY%=Gwoaim$;v(Xc~F{dF5d5?wm>+?iV)h&~I=s!~k zwt-Pt{IM#+6j%J5np=-;WvDG@5E4Nv)?Yh}EH^CT~Ef(@x9EZy1vmlww$`wNQ8>HyKhgf`BBI>v_XZ3H0{1}M*O#Kjj zEnV@zGhr(Je9q&OY)d57T<5Tk&(FI6tHOjLM@N%hZxwQLm2mc}L%!ya zugT7+euihqp1W3MT(`dv&}a2=iy+??yhlT5 zkrqZEa{LS)qIeo0AB=rFM^!O&B=DsTaf|W0qM_2my71%NQOD}`!(#Nq;^;w1baQj> zX!-S@jQG@x54pR4I=>cEqwL6ROr^0;X!FUYnU!)uK#w)|!tp2lx(%4w@34?D`U8a- zJ5XLgP{7pD*}YcyfAQJAyw%Zs9|b60M z66taH`5Ee&TaX92d~-8=Qo4Cd><2B zE^acM8jG85MZ&vfC#}~_2RlPc>^9YNWfV7Nh+H@fIJ7t_(Bp}?R_NI0+%qx{8#jBe zeLCBQX2^{WXYJI!68R}k2*ynX_4Nn#5icedWI#52N)CeSuA#DsiIpPz62eUNOkY(?vUME{a)|UGIdIe~m7=0nD^1D%UscX5y1>DOb;(mkc zxJ~G&@GH+nV?zkz2 zZlLrWv5RO3%E{M|{<-Ah#jYS3Q0~%vf>!`}=J{~>`{Z9>8zp5Fjuj5gDkh?2&RZMu4mb97za$G&)tRv53? zegm|zUwW3B_8EdnOwh=y)s|0gw|Z&m&?rfQN(9eJl8LMa{`ok{Ai^?RCPDl&pIa^5%aBvdwY^)^JnK-(Hg-k>O@##0eB3G0A%`l4M`IaKi>Z;xndZ8DG=zM6;7}b05w?IagH5!fB~r;!w&3%r}s5pE+Oh zl-x(%w(id#yVl6_xkjoV@WdO+RR9ksYK`ImZzHFro9ryymB=aV{5bfntUYlJcN8*G1Mx@_`^R{ zL|26gc4?}jvh9t;2Wh~RM;$MCs(?*%Ide5X?TAi0Gsq6gM0Ouy(`!~lNB3i{l*nKX zM04D;!5$%&B;8Jt=xC8x!IkYEeWr_$FwrCe4Jh=WEf@BtCZNV@EqfzjmhsIq#*T{N znCDtXR35<+*`9*BSog=@%B%FzZh6n_FCZr5I0vVFtm;h>gx_u4k`Lyfflk|_f-DKG zCo(D?A=O6C8$@O@Oc|%n&E6mgN*#T2z?Ftxj+CQd@^MF1m$$ z$*8}k#AL;cd7yk(&C6CBTr1Kp)3GXM_;Dg033s9|2O3Af%s)=4Qcm`&eW#gjpopf^0Egp3j zZ8vb(Y3n@smoTB!IV|KvQ8RUYbhT45ke+#LKtC~I&jr_Q`Jt)AY-!2A>K{@2C4qR| zF1cB7FSYpCzHPszm|h+6&b$O8zON3ev`d@ytOYJHrgIXG!m`6?B-8EWZ+>GZbfImR z->*&c-g}~>?`JLY(9MhNgKCdom7r#9>U2yUo)$pVG#MDS$t4VaLf`io@OQ>)k)a|t zc&NiZpN>j>b0*bxpXs9cqXOl27U~csn}o|V;iEfNWXTU_hFDG_HkW7*tPwYk$F1}dJT~)$ z-3vD3_=4F5<3xWP%&uGz;@;RC%lT?peq|1Q!R(6qCV?`x3j2a- z{^SReR9d32r4vNO#zB zx6JFhx~#jC-W>ud&p#hyC~r8j?q|_!miM1e^?xzPc!+Mc$b-oQ2-JQ-~Bb7fcRm&-UliF#R4XOwrnun^o0ND=_mTr zRZP-8yHRtlz8$qqyn$dUb7niu@Gb`B`ds}In`q@v-!{q&@duEV4zy*rxBAso^-kU0 zf~uP=p#BUxo4=S3YP9Zon=peitp2%(@zD@^*SO~SVz+3BoL+)GJqG)hF&2)PKthgP zAlC7`Lh741XIYM3$rtLxUDZ06NpfE;OWU%43&~-7e#rdlhrRu7)6K?*@HF}NdU`6m zjp3n^&B6TE?ZnJ=lu|X7@)cC>uy%S3Zfj z?L`0buv+7qJ`Q61-s7J)TiaL_8zGTzP^*8kr)yzp@@L()`?V_z(*0x*FpXsPTfgU! z4TXzz{YZFf^Z@pcIL~_8AIh(P21FK|WrZMY+-_r%Dz5Rn6tZ+nGZ$a=zKdJ#K!4+i z!hzD{@zt(=q>3r~r>lW&q;nqtJ8?!;-rUhEv~^@+zrbuH4g#!eykxB&yR&6vV2Fd1 zcsfz1K+^v?(%x3TA$d!QIbLR$RHPKN8haCw76;pB&E+2iRX5N4>Q)=RvX4pL>q1r0 z5_f-aQ};RPVJ3xe+XuhFaT{gE%uvs3O`+vqum1w`(=GZLDQO>wzfiT((B2?(ircVQ zGO*)ITP>4s-`m4uW2^P(%@a>P*o$A_#-psx^k-mupdT+zQ9|?k)|CNVeUW1Or1@rb z|Lp89&Ob>c%%Qw_v|uEMQbA{_5-O&eqZedJ)W0v^ip1*tk)dO07htyd((S`h$nL}% zmn`-tSTJ>BJf4oQuR<<6`>ZwW0Doj3>8{jZr=9|$s*laWes;qO?J8A3G+wQ|9kRNn$-es1YfbQ<;G zG8(u_K{o#j9g%M3o0<94OiWqNWn&v;abU5sXFWfapJ#V*y-#3^JF2)(;Ok%icq|*r z#|9WQ4ZrF1s&p#hmx3B09GuBKUMSyYjU_B98*xUo!9X^16G$laC52n{N-r4Hg(gwo z{p#?y*24Jn3lDVH4v18VdSyuQ=Y7lA<(9s9dWn105?kSv6z!)-bygaA zNvBKaBVl-?wZ>Ipn>x|0t&Wp;aN|K>M)e>+Z5-xXcu~=$|CF*GkYO|h6NRpm6|q(8 z-$4+e)kz=dxs*IXq%9XdlcE zzWoMqkiNpg>S7i*w}!&v1z`&kDzH!|WknI4TAL|@)tSMfJLX`!$4oriyYX3fhs=(b zvNBALKGb8?PzLoQ_bvuk2_;+@9X-9JATGvRq9>(_fRNM+At^?5kZ>|;sE*={`sDVp zR5<2+4;R&yH?qrc7zJpAT*>^?=qTxet{WPtOz?=GxnjwiVkfGJz`2IA7Ry&}-57q( zWpKqGH&FV0L1{bZ^EEakcz3-vScqR!^Lw1B(YN{Hs%5rBzr|$}XgFA+GaK9-7M5hy zEu;su-dg8;%l#oKxB0{YcGk3+TX@>N*<}6alnur|UbY?B?{`D<4@|aTz@NfyMcZyb z#Of;Nz2?LHch;>mmYz8^3Qd&5iO;w1w>($JdVlgt@H(n{%ldB+U=VB>G!_bl*B!HhjCJF+HZrO|K#S}LR zc*aeGWb=ClY7>rJ&l1?#?*KP|V%o8S9Cr_Mnxo9WV=bUE#@e&ET<&Um43&RzXYH|R zIqUOUrSJ59cWVS+okh6^+S)$g9`t6Oj9urV#`gQHL2jBbzb2ftT zgB1hy;xdHJB@#`yxi>3co+y0KiTZtLZuxsW!Q+0%`}MnDit_Igl)n%ami)P)wMk5T zJv+DH;IMHbffP*f8N&rf(RarzB&>408+Im_P|I*DH?Go52vTF9?lv4wJJCO!W&DRk zgrq-^vOvk-Y3w|eYWMHY^<2pIhpYmYEp*vM0vj`aIQB)SNI2)xRslb_00Wwl|1>Bp ze~;~P#3#u80j~aIzJ=mGEU7psWH4%tWRsph+PUsloroW5GUPu4o&_k^8&sG?_l!;F z)!PQhtCr-Kz`Fgj`QIr-=@Ro$cSoIW0AmP!&)|0a~lZ_1Z zRhGoc@Pn=W^IsG(9w#PZ#6QjMC3?PM)F$Qqyhr8N ziz)LVD=q=A*v`QV$yQQ)LBcH`i%|4&6wtuDEC!RQ%2fplrv?b32NNV0rSlU$NNLpOrF)S?P=Nj zWxv@4CJ^SI9-54nsmMI&XU zpg!%lqsBEgwItDD(%28n2%#01M&r3xFw>+b{Hm7u zv!lpSmFrQde*tW0iEaoiBu4!E)0qe6|0!B|)5#?{`&G%m&q=LRRnQ~bDuuV2jhDar zQ%XAfR|qyAKM4-2kWEY)tha)b`6g7joUbcBbItvB>4LcSML`TXVmO^|iYNi?wmWBk zXJUTp758rccH*>}d+n~&Uo_+1t)DnX$h#fm>NZXCdQ4Hvs;AHN&$6+B!NRzq4IZH` zQ}zIxI7(^ZsiscoZztZMW@AQqH@_AbR z04wR(lfBj}iPsJ8*VhI0LyD{Qu0*o%wAR`*%8b(N3^$!^d5QXl@VTA-cyNyWRC?X3 zZwYMivhFdeM3U^{$XYIuW-gSy{nWz{_l8pyRzQn;PStV?X$%GI=p%D|Y>Yq?SFVYj zq$w$0A>~s7m+{Q@69yL*EzNyZ`FD_h3aeJmU``5ZA1}U&yc}vBv2eVksGC$&<+g6p zj}l{h>SKZ$x<31CJfV?EcPcMN?-{{V*Q^!S~(yq4h6ViCzYp=VW70uWqV&eU-fiD^|HsK~)o1A6BotQamJ zE3cm2BSypHLZ>%8Jmg;S*jAI!>Dt8c@qP0xe?Y}5dn5cwX_XOIcUTdHOAU1z)?r*z zQqxUG%`N*=Cj0Qtof>v=@Ko;E6kku>Kh!V_`e++Z)WFKh*f$+HQluLebiPUVtj{JA z==pVlwekjgM>jT@YEFMQa#MXRH(B?*f zXz6z-hf&=_S2d*cJyv6klN^_OCnt9WQ#H*b5h63jESPWo-FcTz;01F$-&t98Dy3$r zb4?3wcXr;VEWmQtXMJDh9A)tGdHwzK%C-cq?I;bhl&+NExXb$`E?qDr?P1C~yTELB z5|Wes6}?p56AS>f#ALBQUN0<=Ci9$)28@>;IyP;A&PyzdD53>Iz!Rm$ER8No$b-*n zY)%cB9i!X!QaWl?j02f8R)VFyJ(-P6CTWwNW6OXzK8HBld=kHN)DKCVK8WnB!}g0enUA&3nK~D?8`sOY{OMGDY)m@d%+S%%)i5v?9OFJ< zX_wedM3pu3job2D7)^oelKot6?#7L4Am{8GPAw+D;4BnDW) zD1BBK#~&~$1!~^za%PLS=@xxi^GLwQNg;M^Xy34xj_RZcTHue`|6XVS=e8syt|kl| zbiL1${ysVK?X1ydoRhcvTTZ;i{mxD5-R(|tQ5SgS&xvglOZE2E=j}s2$(~`Ciu%2* zrP$<%Uidm06O*t~WDh+kcHQ59<;werYyOsk%%KDRfvP;l`qvYh5X?mZ_g90|j0e$0 zoa<_;9sp);$&2|g7;@!=Wu*#{VdVmgE-S$xXZsa`-T`S@<2JF&O_d-$X;JaSLcC-n*hO>+8I>xNq86{JyGTwO8P(AwFZK7+%u6c&0Mxz?^?_ zre(|fpxD;D)VV1UD%I}DncFc2E&5`~@Dy?LPSF7BJB8hm6CEdok>k?@q^0z5JbeU~ zR*u6lBbZp&X9%p&=HG0pH8OhsymR4+(TGOj^ zGPP`V`xoYn8y1OamJxzb=dtB6W}M1n;JfHd51OYEhpMA$_#D9bv$4q|?;Qs`At3C0_kN^M949L&tQ&}G6|Iu6j zbG@_SZwU>a6*|gPl>v`#Jp_G(~>42i|J4^Aez0(dU(( zSU|c2O8N_WIcK**Ju=c8c6;Etz;{zsTdT3c5a*?LsBSwy8Hcc==)yy=V4=T7c}9k) zkHhnxdrQ_E!6|l>_#ADqvY8I7s4okffZY-y`q0TL1mC34!)={@;pzgltbkq(UY^8f zUM;sa+sB(c-Azr8ymzNIH+J#$!+d;QP16K&yyfJCeoHPOtx={$zRpF+m~;21EJ)+B zqp+e|>c@j`jo(8o%v{jz$As_moQhHL_L_z`&GU7Ep-ptN%pSOEV@|8%#=M0e!~^<5 z31>0u1_S_j zf&k&lS>OZQ)9QxBG_Oco&pYM6wFlkXxs9RFCLg=y^3-pS-7QA4UYEQMR6{-hlWUzJ znwDUeAcea2KHR8LD%k{7gS|wxX83I9yEx#2dPQDfUf~bmLIA$zDdK{SP2)5xP#_+cVS(I-F^Ur8K^dQML*p!!62ls zbF%lSn#+6}*<4&b?=i*GzX9%C4p`4cF;~Ubi0Z8rD)Cg!4(+M^e69bEHS)6*>1HA4 z{L8K=uo-U?539dICDhn%S3@yU!Yr??#K4QeRjoli1K)+HtUTlR7viNFZwO=*)Q(?g zcWxXhL2YE;Q}ii|xO7^s9AA!k{WU(g$MRH$-uysD~1s^%*&H-2vKe!WIhz$x7&2{#2D$ zfExFP2x&=9ylEvU~Hmpm2YaN}%2Q`qN-q$OqmqFvm0CySHXe7;$d1+E9+5EPVs zt`mNodYuw&rP{Orkud7vu`oH+RIupPs%(cOmQ3Exf*<|AgMV$Sr82W|PNeLQl%WLh zX~asO>Y}Kd0RyIsoXaR%A+QXG3Qw^GrfSSxp~cAs5ZVE^ zLry`p0~9fpS$|abKG*^GMJ=ccZwIl zcMM^mitjA0@HwmQk>rzB^6Ksj@h-r1(LExv0|tpsTqf(DMx}T zN(OaN=56NX_BDL~FJR-w!2J0w9%Hgn!uavWgUjZ?*7}WgJf0PX7ZzywH!19O5YHrL z!h$lho7LjU+4XmP8mNkkBlEAI9_Nx)sFyCf#hMRns!0GGC-rNpSipKo*2aUhdJLdW zCQJ&p*2n^X*92SB>UVRiYj;{vo6V?tLa*!zb!H6`m<#Nw4(m|*^^9GUEPw}9%C6xh z?0EguIcw$zhOE&UE!DB@r}e|sbuPNq6zF#b2W7FTCaYdLT-MlXv*p*tEn;2f`*Hz` zfwUH1uCX4Qu04POIv8_{HRJlgPGY>!#RsKRqVufDlV<2^&`IjYIrCm8lWd(@i+lsX zC9;;6sBHT!WOnw6m+(Nzc@wG@`yB|EeY+e6Bh5VPR4H)GUv%k)OXpUS)>1`%< z@&;k)RNw6w<;4@!$mszqk!lF;@iF^J8c%VCr+hL{D%Q@{7jG;33Xk0X#ylC#=b`^s z@z=p3|8PT!r2ftA$uecd>UL4L>)X&1-Ai_bbu;v|9McGo%{TmQ$(gNTyRYQKxRC87b5irx23r&l_wN5xH z7=S4pP!Di(Q-=N&F*?{p^$U@lIxrwt2^7MGBV3~~lcuLX%y^1EZEB@|Sll`)WaUdz*$p=8zwM}>o^>etu>^&PItD!-$Q#oE!h#vM_KV-xIgPtH zB|*du#By{QUQ+R4bvO30m;750qgW?iJ7Q8#WLlETl#PJ`{>hxfBQWhhuox|R85EJE zUi?S7Hpssu!6#$;FZ29aO+8cU|5ZG7KM|qzY3%>D`+wVr7q7*DTy-DOdu=~|(NC?D zq_I@BvH{S2cDAPBIIyalZezyqmtzCk-2H4rx$=j>JD@uP;^(ibM^`ZH!huZ^!ZQw{ z=ejq5=NCX+gMe!4p+Y5VBW|r;*2E!Dg<~u&uWXBGkCSmB)VMoXKHl*Y{drh_&Ws_^ zzt9-WJ{%By?eV>EG?TDjpCOzAH{IMpDniIZT<2>Ig@uW#*Kf((E>t>Jo?1$sXRwA1 zfveq7(a|m`!V(*-5QozTE`#&1@_{m;C8Y^SMFMbdd!XI!Z0*0n+Q7m~<5$0_2tP>6 z!Jw`ZM)XkZ<`e+3OBOZS(`2A}I7C1O!co69?a)2J*~eoeB9hD3n;{LfN?3^Atf8!? zrdQ(mj|#Kez^+}0{+k4%x)jt4>78B?7i!g%=Kf8ifK7pI`x%J9f==w^h7;Gnm8aof zE87d7a&@0pG2eD6=X&|f+)t0Ux{eS3jlksQ`40t%|EI;XBQ_UxxYxK*oD%ui(D97@ zQO#-i1Vr!AQflM`MpNQQG zNgaVmXvicvcDIv$8 zk*hmR17^lZLlS`N_vAfC3h2?OX=CiGP(=`!UxYkArY}rH%n)_mX%NsU*n&PLs}kA^ z%?AwjZ^b@^4b6KipdBxTl&8MoyNii;oh=l|3xuHw1Sx$89x&0Q0sn5Ctp^w&jh{v8 z_?yV6*WA>k`EDIw{AXNTLImj6&&q!X(A;@QK6Q6!s5)Sny}ym~&NF!OTca zlz*PEF%7pc&mWPe%ALy0k(QcdjO22R5Rp66_82I%*}(h><(h-9*N7@jl76;%{M1`@;o;e+pVzQkQ^MJ0&r3|` zJ9fc2UREsq-(cl3==BT(OS(4Db`*zKejRhLd^cjQQGafDIBu#he(_55;Canf2+0DZ zqiP9qaGq4_N0%}*_W0j6rs1oza$9+XV6n`(lHL03S5`ez!4<%Oc*Ie5y`svres$i` zPS#Zw78*D-FVFzS!#vT9v4pMJX!cN$gFJ(s+t2yA8>X1~-y*5?)Y9kZS<3VTyX4iY zpA3P-{jR6J6yh3~g`G(whE!Mqqaqb$xwOSJ^f7H1HRsaLI`c^fK72Vmry+Iw5i7uC zzMY(-+=Y%*P3y2JE{usIN?9$n#=JhVH=rZYV5n>mvI;Jro#pyxFJNa^JT^N{eN@OQ zNQQ4f;Ft0CDeIVusU~xB22&5ii`NZZ4hA;K%6Ugx>0a6>e<~($H+()nwx$DMDDv4T zh7|3SXumCRT~=v}bSmRQgQr42N70&L4ABOJv~~rc5YD`vuYE^VQ7!kuw)%3jZZp+w zDRPuhoP6-IUwgRW^kCS@Xh?K3*=1~ALC|rkOz7(f=5w;BT7CA@hbR5>u#R>2u_TE8 zi#K>AtYI^v(6$mWbr(~QMAM!C(lbil|9iAh!f4p5#?5YOkKEc3$EBR+s#x?d=_u=A zcv!s#I>Gz3g|umE!#Ne$&W<}#gtY2(fTsJ6n2CZFv?kO2i-UuvrEM?t@u-?`SKho2 z(6bR!jg~2Fk+GVL7VA9ReY@<(u)PFB%uPnxCUZr_a4M_@S366W3sel+{K`7S=Ieyl z9J@mEZnS9uocp*u!}n!nR-|vM{M}s85gP(NE=4uS0DP^)Kc4uc+YOmBj$ogclb&<$ zT^2EOl5Q&|mExmS5(Uooh3^(QY8z`-n>!@-NLmF!3X5>jw@gB+K9yZ!7$aBNJJyU5 zv0#i~K0PCQ4_wGFVzdB|JY}UlBXwf1A1+q|$ zlCUOy7tZv64S!!q9b;O>7z%AFoA=ORuW!aCZyTneu}4lF#jjA>W!2noMG*p!q>NZR z1U}Q!o_%fI%k%0}8hOu>P)qtMaufdBxW?#=@cbw+6%raGOoZXt4GfH&x?mKh<;t2fd=E2Bg1z8VSn!ff?=DHH2n!s;7zfdabZ7tc%` zO`R3Z!j8d`++)ovtvBTlwxN9~CKvphBzWY#CCY!ix^RcI-r_8|wAGBe2Twa>j|Q53 zcS5K9N6>gWOuS;JxcXmc{sv5srmyySXS?&En`obxgO?}$y!JMxN5^H}01R|u?-<+; zu4o=!NKHoOw%g^3jrvdsXt0nUynjod@D@OBXd>KaXVc1o9bzKV-V#53NCsFJn*IT7 zPH|rWLoPacJ&`_6SC7h>tm1^(lRWHB$3n%_2?2vgj@n)?f1UG*)fk_=&geX-?2d_M z`Os(`YFkRdk*Q`998EO$#+-BD-VwnI6H(3g2k_VmH1X5PoQz`#;dlDbmrJ>*iOq0e zJDA;#NzHW2=pz97Kw(LdU7Ee`CO&YN`&Bhj_Sj78&pBfVV3lhV@Wc0`W% z_<9T+W`2o>?-MAwtS~NQcRm*#f-4^A@0X9x*^|Q40*4|ar&w`+4 ztG4ndp3H09f#;(6!#ztmBd>Maae%7UGKeP~Tp$%zVk5i*-Q>zqa zotuos9W47^RE?iFe#8ylt?O2#!K5Z%phG0mDc0rk5?PXiWT^OB{eAf?od8wgRGluFTWxBK#mXq{6OjiZ}iY#yPez?cU`0^ z?oT@HjWP1`-I^ajXK%>ATRQ)brfoegv>UV^h*keG{?nmr$5(5p{P5M7H**Ld{!`XI z5P!Yxh2HMJ=>MypNWw);ZRHtDiB8hLxzP)=5i;2~PjkP^N~50G=UyK2R7tv5G3dr^ zb}=eI`1=F+d@04)guk+pwDI)Um^6??7l!|8X49#8&p|+1kL#}L{;eX{+qb^|pc{d= zc~B2gedCZcIRo$<*z#7VwvP3NDsnsgDSzVMe;WyPdGi8`YmSduO?P{3HZD$iw8@Mw z<`(bU{~CZ2yDrt3`ME2)?^Pe!tmWCOK}le2xPCcJsczpAezzRmpI85O>;u82=$|v= zYj`#Gz)fyL&$Z+KSyli@kLpfJ@xSJ(jdyB)b-nO}>!-z^)VQe>v#96gdIsg`+{(uH zP8{N$ET2RC`>`#D7A>Lgd={2o-1kLGT?eA$=fk;H3y=D7gHFuZv%|`Mvoeqfix!u18pJ1i z_{7kzYMFeOojO8qG?=J>+jO(1Zdt~swGF;AK*L}&qb4)oj9Hual{?77NOTyfv=QnT z`7aW(O9K38)fT+T^tbW(oG(l>pabH#U4pBa90C#st34iK5=9@fUJ#hA!P(Q;d#tZT zG8)NZ@j-X{nb5xQ+;8{emsr$^pF_d7fwbcNv1#ko7@tD~1!>+aL+x&)_hpGk?}mxd=bhDxqI7 zE<=cb{ot5u_Ii`xYmJ_Un5%2DAZX)Ba!Ei=7o)7jBc0XKn&q-Cqi_C|qIF?UP~Vix z+AYr5j728nBGRQnh|Z5E5MBa&AoQt_WYn<_$y;y49@8&z>tNbH-By!b)D@y}FdNt_ z0AYSp**=g-0`7OG8I)a)9>&29f&}isb`xA8 zw>VlW$(}Q~M((QQiZgeJSy-d3=9vmlirM6YaWFS0_v_C6`sL($s-JngSL8PhS6irlZE=6XOdyQkKpPyKtKOM?nm0jB_ zIc6SULdTi*MX4Is+>z1d_lXTAc9I*!=?$QhTQ^2Lg^D2v^WgMXIdz{9n)P)yYkz|u zL_N2&YKyn3qclL`Lm9J`IEDIU--%=K(ay4dT#ifr2Hhd;UZg&20R?6^jMO2R&gyAF zpC`G&69QtK{Cc{k_oSYTk-?_dY+V2R*ysAwLsfRwnZ23EJ-X8FF5wv7-zOjLx!VUq z0kGh8_b58Q87)2sJgm^=S1Z5uWi*L^6v;-C-dB;VKMx&W{6z_N?VIX+|t9>jH zvi`zdt;Q=>HmK(PYF6A;flIm7x1n+U)08Q7TCTG(7K7Ic4zR4Y+D#_Ux4!8>DWE9n zdkUVWhUV+7^EXGB#@orp!R0+Oa5=*b#V$5RPp_(3j)Pt_9r& z2tEXjJl*ri^=fz=m9lDMfIxm}=(~hqbF7?^Uigm5*~C5L3Nb!N_+?Xtfnc-*%uQ`9qPLc==EEF`sN)t02s| zmZ%BzF3#6&$(y~){ra|pqM@2MSJ8!?!c%-)tL7?dlq%Td>{pFXG-y$h++bH_57*LDtwdCcsdK7nG0+Y5 z;eTd$+CH?i_XKvQ+uBRbj1*YkfaNXHy~F$Xu+`qb9k@)ZytU#K0dWQ_6`5Qg42`DJ z*yIV997vM5e|HO8Scz{DA2d!93tbCUfn|SjO5>6FXQa33UAA%bm^D z-6k&VC&^Al!I%G*>+2sECA4W9HPXC7v~lyI<3h&-w4feIP4D^sknyp%r7oAcJcg=#=bkO zsjbV~c5SE#2nte^Dq=wC9Yv55ibRSeH0ixVq$^dVNq|rTQbI4%5<1caq=jA*lqy|9 z@81dDJ2UURGtW2w>~o%+eRf%Gud{x8uiVM8%LzbMy|Ub&1*x%GUW77hDRu6&(04RD z88%xL0vtLR?L#npzwSX$&JY6Bs;n&I{jWUbl%f?#q~~Fm?5HymP8S?it|Yr6>0Z?` z?Im|onMgn7@wPJoE7Nmy`yl>`S!&8f=zdIHbmm*}rCVhKo2Uv`=tq2z*^>keLk{!( z&v7UH6u}{UD^$Tti?tje6f@<#sr~c$H~8kGzwTYGDk;m@I{q!(7E|{79c77js$@&1 zw_U>LL@v8r6BdV6&yPF7&&`7^6wvJo3pSsi<_cR~M3pr)XMDAD!YX#tXS+LDD17Pa z=XgW1lXFM!Z=E|g+~4%nL#5=X=4X9!|z+v5x#1~~+#^J(x%!bnFO z{z3Wf9rxoJ<#7k-2mC8XTlj1AUnN0Grp2yS*9_f^k>6oYvOU^-8;} zl8qLS>7S2W8F#1W!lHZIS6{t8HEdgd$%qpO;KBzwV2pyUI&7U+S^1k}MyK$kFiOGEVzKF`UCA;YnlalcEyC zWGJ4;A0JmBtpECZV^J~pYRw6R-}3Rv(JiE|A)cIpj1q zVdpCGNq#L@8cfsVtVJu%qIYq#rtIBrTPK>L-NN4j>@jh`BHT z0=>iz1n%TWlZSnB;uO+}im%x78VWR-YAr`cnbY-8AahwdeAvN^&9O|7n3j+gELwa? zu!l5zPx8FH52z#Z1+RJS`O->`QSyV;m?}uxK)(SLMazwRkVtD7*=|E>S zb`{r1vcO7tc5Y5p#@DkFnne=YUss>YgKL9yi)UDY7OgDQ{RDkq}#gumH+ zc-WE*o5g>-iNN=dIa5_#ritj1A_JoSS8WuWdG{87n9p!{3@h4xRT#Y0$^@L1(1ukB z@77Oy3C-sY%hOvm1bB16;E3B-&VE5te_=y&!pKbvquLWWRP{o~Hw#M92N9FE#M)b! z(V0)100awA+>1H^WV8UFFoI(nK{%o>@tG*5j*eH8GZFL?K!eApAzc6kF#szfw~zOV z2X1S%B`LYDHYoY~n!0*mi^p4*f1H!)yJ49AiW#m#{T(u{yKiSl(-Lp_oJsscP}3>) z^cBh7fUI*r%)AFyG*SAV)7iCRyCNxxxr=r65q3NIIo)~G4PEu|$tW@7*}-DAUG`O$ zKS%8UoI!nIvk`CGPvY5ur_^|#OwN;IT~liMXutN)8)7?p@%NZiTI@$~?&A>N z-!NlZ0sn=UiUXcUUVz#E`2{V2L1#qS7QAH9*Pi{)zXb0I;>iUxeVq6_?25pdLRChVRyMozQ6R z3qIbWy-4+uwwMR;AG2qQiY8<8YSQr+$-_VeSs)F)(2t34GrFD=*=&d{9`1C}`?4m{9r^ z46oWOYE{s{+}c9cCZ~Qwp#p5XwI+i^udCA;YC8THO_EmHMI6UiT z(_ZK@^P7=Ua9?>%^}rj;=;Ur0;Y2H0oJB8xQhAVgP+KuRky?z7DMeT6x{SMdmCGz( zOVQHPI5X|o-8v+!z+9L)7Hun|r9Py55nuy1U7F+w?#l=SO~+{&n9z*mZTJXn;4uda za1rwui7Ags@qa)9HHj$U`%kq)M)DnU%wbC>f*H?p=*O%@RbYdpp!f*xFUNi-;}M*1 zV{{?*mdm&cUS7G~RW)X(b-R16Om7xd?zEOeyis78LnL(zfO1e6op#NqyQl4+v*zT@ zFt0qTXG{`}zroGZ1q(nsNtov!bnbt70G}c)c>m>n((^xY|9?kM znF+_!JJ^IdE#J9qChz@)M4sxDwXpz|w1^KkEXK9wWGsWkF4>Kza%^7GTR9;{E$A=y zu25ftCMyUGQ;hWURgSTHWSrxSYCjBt+epap!B!qkf3R%V3T zW}E$w?(W$AoAWUI4N1GWU4PX_38<|LbW##d`I7qS5l5pcdTaSvk5L55AdY^x)@|-D zCoe`54eZq95c%qId1tHpZq)h+Q(wW{;?CXicdV}GGyH&^nv>I3@rj*DIqY7~T7Z)= zB_;(=;QT%KdbziV|i&I1y{(do& zMdU!gWo)auud>8Mco93$(`~c57`Zx^Fxa7%$^CgMW$3;-ixEg#XH1ay`hsW6-tDZE zpz;o(hmiK05$%3&8l)C6ta4?~cy4cTMh}{uO?~WtIh5_JG%dN4L%B{tqfm1f#@?c6 z(em=21?4O9VSrqU1$Zp{2EJb_z;N|LmZvQk_lbKHIdkJahJO;7dms586Ae?ltQ?$_ zK%aLrIB(cMR;WWikescRqF@Ax2u1Fv<{l(9TK~?e?o?1@*s8lk#~;d|}F zr-9#1dbq|;{~|`{3?Ro1NhAcEq-TGiGT;fW zY81D;#FK`dNc2#ZD!0LE)RYixc*Quz6T|Exx^ed51i7O(3wv=QBc-*+OLiQlNdh5v z_kzdCERJHfiqi26Lc05_XaC5-2ap@>$Iv#3;VvV>G7EM%9OYHJw~~I4*txF^?+#mV z9!F`4wb6}0yt$&coGaq*YLiR>K>06dD|4{mS0l!Qb=P`r@#UCD45;`N@EEQZ#lZJb zEocSRwU97|NOX791>BZX9d%x@Za)$GD3Vj5>X;wH#-Th^#;#jtPKom@2xf{0S#+yJ z*qaCS&HbK+x3&)iBW6B}s+qA;#nAJwb5Mnp1UG)xp^7ytYudxp`NTmIgYiVAw)Yd= za~a3>d_EHS_%@CQv-l5lfDp4~8T+}S74}&dCO+IcLoy6F;^9G0y=KJtI)jv!KMYH}Y(JVtvWcx|=#p{JZeQ<#sdAeCOu2>I*}pR|U7 zVgjiQf5KguZ;l6&jT-~I4GPMa;$3;xu1mH~8%Y`vd%m})_b$2U9|kI0ThxKvxE8SJ*N>DE zEEHgnDr2h**-*KR)=U!^B`oa+0J7eVG0+%APW{pv=Qacv}&cyw{qyQgXKz_|3q~R2G83_QKMBa8*MtUD_oZIvk%u2K;bz^cr1 zXUNKiIO{L+5V#ykamd596$k@#cF~Ti5dmXfzkPwcVI&bi zk0YSZ)_Ec}&waEq0}t4q|3g7x_sRv;ISv5SCn?@L&}?RjP3*NXOnb#tLhv4O!my#u z93?xNKYg-{g4r%rQ3u|?^{lw>EbT=it}p4Ln`ID=?B(b47UwT81pRbnuMV=c4xXus zL@|9P%epDuOIhZ>ib5hQ7CW@- z4+|_f?cX!#+L8Bes^wMZPY=FRz9Qr1{V+>!5$=(luB$oO>ZNGTp)kT}3nII=U|dUl zMsILCzC50W^0oBkXW(ASeePnm%5G}mkIv=`Pvz`JUAJQ+q*AC+AEsfi#=F6&dHfCQ z(uW7u8aj*SP>5dr{uwVQr5)2_)@P@$yC2q|ry@)*o4T^uPB_(i)0PG#%h{D0eofr8 zM0Pt|)tnmh#wIGt24*XQ_qiO3y^3mn*OY!{!*A;jtH$zZ``-j$s#Lj5Hl|M6oF4^= zvo_jt(h8QQZs7XYRHFzUmy#MVJNEHBs!^%++FO9SP@)s({2R)uZ^Sy^K?c$sE<@9h zJK8K}ZFg{N6fjGhXP55-h#ZMf7eM#@KeL%%0qWcbI`aRFW-)rKwH>@vyOeKp&(@zr zO<$ynbdc3Svo6`qR5t&czDOXRBd@g+?1vi?Oq7` z!&hn5jBbbE=-68~9GfasB}%yKEAw19J&M_k=&@Wa=tj`KlIJ}0>8SBkAbf?Y4hx3A zAxwb3y}Y!IFP0g}OqW4s!=wiik1mEGOFJK5JzMC7+g(_~XG(Ba$^+z<*XFT@U-fWl znekh$@5Jt|Y%5;@BadGN&F$C^F~TW31(x`Kwf7-T~&)?HR$ipUrD@p)3eReuXrWfTxi@Pg$^eYt*pzC_Q%4b-h6hz8t_T(QTwFQ*>}G4&sFv_-FiT=a+O3+5qXowW zuv!nqCCQ+{{fNtgQ^%d5Q}2&RgZpumT6j}y1(BfW6R5t(PhrE+w721RhHufH9ScTG zNOskniF|D`js)RGmGAXITay-_2&t`S)D+Fi_NWFR55ZH!>vPM|sfz1vIkHV{Az?XO zP7mG##3L!pQX4WH%~t9oia^R3vlYD(5PvQy3*L`&$WbUSf?9F;8=G^!T@Z#Mv}TOJ zfygh*vZoqZHCuy@L*|~f#e>q&#`(5O$O0$@Y`8_VhyNq8thiuQ1R8wTlu+^H;NoiK zl;etG6878>mjeS78e(0*4SF*ga;k~WEM*x>Ah%}DX#VH{%h*{PkZH(C;XKEJGS_c( z{4D4$(%HV#*e&*=yz0aYC(YNx!(y)S&OXmlg2r89-Siof$lY<1Jk3jD~ns zZsV+dy36df-xI+?)7-wF%_6iDD(%`h-+FJME)&w&|Ldo7C@&kEOVP zFMe>8S)!#9Qq%bC-j*|6bbMG;4>J;RBOJ}v*B!@s{t}FGOFE|88pOgQ{a~YzjP5YKNswtKwzcAcMN2K~T!Uz@U*( z&B=O@ppbg2Z{LU9(%qkBQy&$tT-)mP%MLza3`M>m&oXXn<$qLOn{M^O5?^{O)_^C= zxi&vhJIhiiyWK>$lNp{T6s#T~KUTZgMSJvDm1!OUxh?Z^_dP%r=gBhXXw{@H*wqfH zF~!h>czw@lz}&Su7usDjGtXJgpR}>Yr`i2J2OE2Bo5l6~1}1(x$ihTU>q2Q+E=|F$ zcb`{&tBcs#cx#bA7@rlj(XbS5Cuj~+(>&=pGB5-mE4sLVU}7EYzbZy>ZGo}G)rr`i z{fz6EYFs67LbKA@WYw3F3R-oW(p#mhXw^l-E^1gK%r6GTX_1A*nH~snLLIw5tkmUh zX>6HO?5K(LG9P>&5!*Kv_Gp_a&76VzR@`2+FFcxSjC&*ZqRbdYrK^1SS?ee+g5iNz z=?Y40GVgTlk3fcR1@len!0bR%I*OqSFdw!;WcDg;6D_plN$A%h(7vO3Sw>&;cUZW^ zfD*kIk4I^Zg>P?cJ+FQ~Ekg~evxow;phCrG!mq2n@7$M}v1HsT)o`SkRO5M9W?iy@ zg`45nOH60!ZHvPh_8>i-=thC|fb>NN&m)M|NNH$Pm=Vfe_XTV@LsLDo`5f$!H7|0} z)J`<2&^nlw-e_%GYl`(#BBFFf-k2CDTSq%Sgep9Xzw~veaKc9h{N(6DS;l$YsdHGA z-j)$T_j6SM$US1ZV*GS&j8YhN3x$(yT}AL%x)B9vEA;2GVv^1S3XG!!c||D>VL&mz zMbmv#Y$pyU+%qfOsZhpxxgCeNz$qanTa5miZF>dOK8mJ>(V4|WSeQw4=`#7$#l^RW zVL1Xi`O3Li73UzoSx?6^vddS)9JC*nUD znvuz#P-bDFTRFp-fqp)o%pnzbl(*!f7tgo0H6&UaBiuLWcl=<>zp8}G!8ECY+|ib; z`$lfKf}wvpO$3B?ZE;c|t|UA>U2 zYbE9NYt4~~$mlAqSNwBcQbP3)Hc@xCACi19yJuiYjHfgbu5h9EjUU}Lhzzd%PM6t) zSwO-gJCVIn{|PrJk+%6^R)#WoOZQdlHtvyKZPE^F+CA0GrVulHrUH1YbRb0)*dXgGSq}za_CV@U(t0A{f@77gbsb79O`$`)xfR0$<3phtLi)?OxqH2Ap z6=ZE(oAB&j>Q-f}k)>Gk*r&&xufXi-KfYDYCSs**dEG8NY7)wcnI5Q=>F#l;n>X);$XWM!)4&{FM{HK^QutV zvktbDxwDpB2{ZXH=7E_V`}U~)C}59plfYAlH0`YJ5@Xzk5h}U7KoLlWRG~O35S=K} z3FUa7^fB}q4NFC*drr-0CC4dhEQqL`6j=?bcgZH!8_LG~N>vdgu-UkHa@K@%#%z%< zxLFS_2yRQkrg~;U!;m|$kK_a83%}WD;U$4td|4YV=d@nUu8i=cX&$`_`e@!hShRQn zcaA@WGi(>x29a&TsHR+(sRTY6t=rYlO>Rjn=v3Md5@U)+MtLW}sM2PFjc!|$8%)$o z>qWANvRGqw^|`j^lgr2k`qRaBLDPKUb&Bw9b@?j6&zSP-I#C2Mc5=&-SeKs}_k)F2 zAM`2;z!B=f>*iFi~{0w>=s(#~u(0YUFk#h{n2Gtr^Ij$-PuA7y5-uRo#VamxW z89n_1xBfdAdOTFc6$Q7R;9t3%zIs*MbIMfiqSGIuiiLo@e33O8{ntS4=jkq$@T9R- z=L)ETgQjJU&BzWb(?lFOK>^R`7;t2n58UkSRBrb{_;$@)xn0tc{gB@dDe_>PF8k&J z%;Sz@yQm4Mn>LVNXRhjsgjp(DgTrr89ZK9WNJM_`uxJZ^{Hsv5Y-T@Ygyg$F1H+TC zw|a5k6?MjQbBZZB>V0FY`%r_?9rSJ#Aaw7Eb)?j=1z@8;7TO0U3xLNyE;QXr=$GYk zP+rRWcFxX=9~2*Puo)wasvjUOP%%09X_^#W3bz0`VbNR;a=nnnB$H=Yeyynlj5AHWX~DLiBjxddO&^Tn2^xy z%2w!f41=E1zV3mIrxf!a58k9~^ZhNJ6SK8L-D$-M{(BSIup?X}3ZT z7T`>?`*1v;u5wG4;+z7Dz|YmoIamcJ`(a^@P%!mv${Vbgg^zL-jGjGon*Lt2_8o3Y zfECI+3Jp__phCH8-L)41nKbM!nIHJuUv)_@`~9cRyEf4t(h+3_AVgABvFM2;_olZ z#)h5sZOur0hHA;0rUziIxmWy(iAA);4i=Bug-Yfg`j@U$;WIhckLFQ6?4r8Li zCT~dYv9=?I6Mk{WfJFQhc2t~IjP2eX-OF$^PJBt98S^-0_X@N6gqvM~`^AE)>UH_m zgk9?+1$Sn}JJJ!Ku^!ii2O){Hvr?D=_jw$1Iyan8OZO3QL zC)f7nN2b~Jt(;`Ebvrb~n-SSFenHoLYx#W_zG6VlHT}^W)Py>;RoSctWoJBL1a<_k zTC%{4VLJ0j$jHLm%WLQ`6^Z$@*R>Rr1) zJa+!omGPjdeA-gOeOU5(9R|H0nUb*o9<|hmCN_Z?opm{ST$ZYJ^?o(^M3O>qU+gU2 z5EV?`$>{4OWEM8B6ts0Iu+POyj}|T^BTWsX{ayA=CwL2$Z&Q!AMwPIJJWTGWWLz>? zslAq~OR%8dvhLd|)8)K&Xf2^NX`Dq>`6up;4#>E!0JX|T(hpVFY^8~!lWeU!k z^sajHaP)Bb*Dr(4V>eT7{tv(&nus!n~B zLVg`YU0?Alced`g76v0B05&0kb(%oNGwww$D{wojramVC;*mhY*AB3;QIvIaV-in$ z<<#r^!OF%M#YZ-wkm>>U=vg{gN7vE4oU3#CEx1IUMz1Y5?w>2GwrECnetDDUx=3D= z4=a(*+sXo!!%r^4p%U|s9qY>?hb0j0vTIK8X&3wpx2a4$ZFT7;$Q>_hK2J{fT?6pS zuo`^hei95rf++zEGau9roLKka(p$Cp*@v2RQ+d7?pF_h}SY?B1Bti|m~VUbtn z%ry=jd{Y(H3|k4dH7mWs&LLKV*0PY!5wwJ!Z7XNXuu|pxl5kfD51w?+ixe*|SD%tz z$Rb=Tu$1Z_kT+Cx$bmK0#4px2cu%}nL$ z5}&9~otn0VBLMUblglZxWoc7fP-~)NyC+uq+$U#80r7lE8Pon5#1{Wn=u2?hyq)LS z<)9I5ANR8`(e~r}4Ri%2RhdXiY0ifxV7D1$lHf;*+8dS`w=pQk1DEeHYJe<~Lj9YJ z*6n5*1GdR^69~KX?OtmvC-Z?OIWq?5f`1NQ!J3F1;FuW7(61ZCLPYM`fGJ}ssG~lI zDPUPE-htZV4G9l2ou@8vu_)L*FO(mLynbHGp)ij`{HE2W&~B-S&4YJH=(jCl?gE-d z(vo3wa8>s#mu@E3&bCxLL!)HVzb1mN89w&{|!H{z;ob$In|%WQ1t|ER^cB$0e@wush4}CK z{s$m9Jp~9*@=p){dighf_XpMTz(kL>`@_`Q=gj2fF2S~Y_?%Loc}Ap#JmGkAZ`goW zOrY~doTy%t)EXH0B6S3_pz?|fS--H2gI~@iocNSEt#oWueeHoMu;44c0<#*SoCuvj zJlU{g3`=3E4YrHeS;LpFeRuT2yYOs*q&}V>?OU_%nKPy43FG`m=1i-{wAXwszS)FX zM_Q7=vR)L9VXMA6?}aA{-GH4VDgLhZ2&C^e42Ky=_*3iDAOPy<{T~J)w&I#x{@^TK zlh<@2+gN31y5-XT1FyZb@wuY(}L zZL~kD*3QkQ(aL9w@%wi=wj7M)=PmQ2;aApWHeR~LW@}sa-B=lUCIGn#h6rrzvc-uv zOpjD4TLo~E51!ppYTUnIb>;o2e4yxDJvk*NNvJ3h+CI|SOkso#nFI1iokFKEh0Ot6 zF155evy2e^;TPghYto`GQ848A1auxXW5h(_#82F}&COgbb!UDQ0#OorrLol?qB%&UgDoCVcGx|1w(b{dS=cv)fKc5t zTRi!Wb&DbGF%`)aMnVrAPFEqO&mhpq+vxp8LC5^)OCZ{`Gu!D5S~5f?yGnPQjBX1I zc6E51m1YddIvLqiXrmC2VR+{nZ?N=tSu~fY3E1-eMH^0~P5y6?$m7b=e9+bmPRR<~ zv7O5xn>n9eLuX@Y+0bZd2CBQ0K9r%Y5K9k!5%6cXhNl5$Ml#k*c5rQ8gN=KrO1&ck zaS1R#Q$<+r*?t#te83QLcDeI)CEXV`&Xg7#-Z94Lgl~H>AdUMucW5qIU|-5|@Nt@# zORo32VQw{!kK$44chmA@H)1Nz!W8v=ldwYA4A<9L0^RynN0HF$TG3q0A~xH(x5@J0 zNjW_1>}gYm&0!{x$`Je%ryu~X1G`&*jKj#rhMI=Aw(bXWf)-{k*(7Z3RG!G&zw`W< z8ov0*5z)R{_6`D(;K1HG z_ggHxgQsD02I<~7s5jotdcyeFM`xIMDPS;62>2%`!H&o>gu6^}Qwhm>k+#v;`h)N? zH3OlyPl)>SNMgW=?+#f-$-B-Y{2!-b1gF~Q3;LdC4fbx^nDZ#+|KkRvSlE(|43l=~ zR4HJLzt^7-*9*$qcnFFm^MeE)$^HI%Z|5L<-^e4zl_ML}(eir8+QqvApvi>1>xA$- zllwU%F*>j%kr1VCGo~hADRuY0)tF8VQn0M;k>5UTSMnvSWbyZA2#=I^!e-heGEg>4 zi?^@=x%~QPiXN~{O=WvdGGKT#y#t3yK zKSt%}Q2ASm@K^f?38j4W2n~Y(OX$k+;dqLZ&EtW?p+HJ-Y$+P1jcE2}?7W2|OA&&0 zHYDWBj8J|(8L5U3%9or!(**g#lkv2vvE~D>N$dLto_qA&RM#Gn`F7o9v3~s4w~y>H zJCmOgno1b2w1tK+0TR<)W2wo_mmO;zJg;s0W z$#sS{+pHeVr<~M?SZ+DEIl9=ITFgQp)^Tvtn_cVV^i-V~|DbyF7i}<~-IbSM%V4s6 zbT&0%k+xUAqkL0t|Gv`j%9BJ0NT9T)NNQkBbg7$oW9?|?UMj&i;^oz%_yRPR&;z?_ zmC4t;-S(jeR#ljleZooal>g$&QWSyeQZ`$8Gg}>ptz?3N)`6(v{08z&c?OU*ZJzsJ z^lbIQ8UQf@O~PN_&rzC%s?9NC=Yg%p9UewR59*GbPj?$5{pN=pmZ z$=vZhalhZ^GkH@uf6u{O&YrgCbfAgHIpje0_B3@#O_}O~NsSykcgn=r4gLjiV9M93 z9lMBZe6VZKzIrv2>D$7ecPj><#DXfnsKQ2V#V)l1?60OeFI9R{XQdJt{vNx*u!y@Z zm(K9@AfV?+jKpjp=k^M!esZ|W*?sJk0@rEWCedwl2xncdf!+J{-qd$Mb!%sCuHJGO zyLgVor172Rt{`9(FTvSt7k4#v&yXhkuLT4QWRU}A@`nUDY~>f;K_Ni(GeDQpptGlQ zzj6j3z<(o=H!m47iDRm5UoWe6+40_=bqhQh4x{L2@+5Clr>g-tG;muUoAQuGx+^yJe_)%C*C=_M> zb5v?3%B-ZezY+b0+IVLpp0z{#d>5oDFZpnSubjU^?-e$Cd5ChRWA07Hy!x>9ehti& zN-&NL&$!6s{7DlHdZPxKCiBketgvL2fCc z>3mDNW{VYfheun(U@*;bdWBRc6Ztp2F+QWJ`FVub#Wei+mq@?wnN? zy3IsPgUB}@`Z z;mh2fLLP04kHMx6=gXrBhFa3w7cv76h|ZNK?M9upzi zDRm#aq|T$@$}umdN~Ai9tA`?C>f78^5kel_aoRdYf^nUbj0suUyWcfiasmEiqdCh5 zq}a;&$NBjvDugL_Sj39Uv>ly`5;vkK;u{MPZFnQ`Qcfx!JMGL_Hji)DOI(mzv=3|C z(@eZFnX)QoHz*tc*Yt%>m02#l+(w0}+kY~PjgllI9bpU+CfMBW1fP4E3QT^di;1Qn!&Rky8*1idbw9>(ny)oavw zYk^rXyYOS&rmepiEc>)S*F&6V_MFH%w5qc5iigEv;nHQ@@=~a~mzyQ?!q)6;HI(iF z+Lg@B`|VqG(zqJ_8pKWO?mwij<4@Uii1r)AHBC1uAMn?dB9YZY)ouMn=-Kz^tXM4; zhiRxqgp?YvEchA?K}4Gew7_{(aQIeA@5+}ZVhX-i)+NN?e#0GEukvMGXBu~C`G9uH za;`?tbC+i>PZx8)NVa4hN57cToVLg7T|J*GQY*Rc<#sQZuGphM1^7^`krti8R<#co zb>>M(Nc@%l4))gs!77Iyyz7^nzCBYfMoS0WAg!`Gf^#|vp1XrLWk?VJQVOha#Jh@iR$oo5(o!tn zgtU2d?RQ|`Q$%Gz*Q1r@;i-83+*b?saMxn%=@CiEXP=XQ*QP)%v!ZxZ(Ly=hHr!%~Zs3*C zuA-J*=tpE0V597lpmeuiw6rU=3ut=y&(>sazE|pbd zp{duxo0XyUEZs!!oN412KDFTsMkZ^8=((CX@3bq5c`u>ehGUN1d-n-cx3A~g5~zmb zBeV+9hd`|=GcD*-p7K)6(dHvjr%LtOl@ zzP7s3;!fcC2ZXSviv~KhmvUI_3ro&YeSKsjqnPb$WM5}JHQ6tAhQnN83iPqn{Dz~LgTB$^qyj(v{EhFzF+d+jc8&Of$@#1meTqov)i6Ku zBA)UKJ4G6yXhHUL3Y86UrGKdpP_Ok9g$`G5v&uYABOrGea4 zAKWl64+Oiu$b!P~frAhWD{!O%;1Hh4*8s2I{Q`Yx!@-Tf04~+LS*wNNE{1aT9}~C{ zOb%cOzm6fGB|sSP>s-09ZTkd}Ez7dqW2%OfM6P_MhHV}g_!*KXMr!Tv&HR)Z=oJAZKPDC(9kL(aj(rDqMosx6b)R_(D1+C{~nOMQhtYqrfQ}n zE2Zr8AIuOnkKQnK{b8^`(*MKW%iKeJDkWDMd{36GI`oX>hmySdh1&inmI%uiT1E?CNHn zi24o3-Cck3#p>DJP*m*4=Lg;aR}GRVz|bJ{E>#!MU;Ov?t?L`3G<1s>eaw*0_?Z&) zQ0)8Ka>gmb`|=I2obkSFg}njZm+t^=u=^5iffHO$5xz0z=wLfK?tir1Ph})n*#$z?Q1)6}BO-97v2Kkwb4BFSrL(;CoRRW55UK$Uhf8Y3G;kYoa^P6 z+sz3JK#Lru7GKy^j$_qDyEfKMdcTj2jcvM#*w|zku#*}|qj?-$DW1@|4hEW#=IsNj&?FPoI?RB{0-owOA4I zvMghhnDN?(!Uz|Qt50;Gs*wg?q4mJC?u+s0Q45mKD8D+E6~M{akQ2q~?&&!!QqCB) zx2a&V?2tNp_6ljDx};FEwC~?5GIF!q=+C{nXG>t7B*O7`NGgYtT@-cN(#a};#KluE6~n}hEGWDk{99!KQCa0v_NSONer7eicWdE?p)QEyY{QMf5n{R)$eKa-}6yi|XX@#LdAtd0CdHfnm zGrmAMf3nHBVO3~)F?apIikLhkZzk%Ay;6%{JSIa8Tu4~IWU>d}wh%WL+VgwP*2dlr z=qYdET~YLHSGVcutPDC>nMaLG)aYn+#(LPJ>c5$2g_(XAnqALM>oh;lm`r;7ch*K4dht9F7n z+YMWGvqVlu3#~-A>DaT>a3oeRuDBMFP})yEv5}CASKJXC)@*FAsULdsiD#H4im*h^HXSTPGhZ~CTq=_=O~Xj30_OZI`#Ny-loAzV5)%R$-T4O9uuH4^DO6XWYB)BOjBuKTv>qB#;HuF=J`sv&*U0 z;5ojFDdaMaeA8%JmX1hhv=AD&Hx&>cA77$~U|2cxwgMa0om3@rBDgZ2|M(Q799X@4 zOCp6^8}hu5E_8HG=w+GENTfJqQGN<(kx(7Hpym>0OB*aGIGb2IVDV7`^{obdghTAQ zR4JErC94Wb6Lte*hczBAf&ocFC^$gJ1_JI>t6G_pl;d&5Ij)I(d9Q{yaH<*~Kp`^F zf}9*nD{t?$c^;j_w~B)s#?kh{6c-(WSCUU2Vlb%8-(B=%t!!WdezBr!C+a4d5;m|Y zWciP=)n~5LQqPxcvlN~W4DicKV$0Wf;~;XxL&Q3B((q`!I~TkbVtP!Ny+6Jy;2@ul zsdG)q0&GEf-bX<^O1-n+Z{wjq%6oO|8oz3Yh6Yy71CWrCHv3-bK4Urvu>`6IDE*Y? zdivbVwtHTBH1V-vs}AP#6s2=6F*LN|GJw^)n&}ZT=Yrm=(T+gB*FQfT5*;#RRWD(d z(xZ8CJVP6pW-~pMJ$^w3JC~`ID}S7+JY26PY!gJI>1d4vT7uQtl7W zAAfkBR0WTE&ZY8`8Iza}bO1a9{H;}-n2xD^h-_A7(EThFu?CZ^;L)Vz`$)2FVl#1G|Wb8@Mk9lDq9h^|4mdaNEmLFlkf9d>hkOaW6h1+rN zgG*LbwUGRnV%5qQJ%z+2l1h=yFaEs|36P^vqzqbl8$j6f@!gUaWiamVWz1ZS#B3`F zdMqCiwN}Dkg!G7jLF&dK1YKVe%k_Ae!`lA#kMT$3sJ-e|Q*Ux25OXU?iyvAf(x@(n+`+A0}bj9^T`m`u<7Enp#%gNhf+B-8OxU`$N0$nLTM(&R>Ujk z!N`~+WeaY!@@E4`VXTk~SqvhiBuG>2o{CaDHoy>uj$1@<4lgy`V{Qqbe%0ut?v~VF z{zR#Md@K8O?q`uFr(yU{RKmkKpWwAPd4$jGo(-993z^KhHRf+k1+Ra%P`&sZu5g%g zi$ESrYg$3|8uiWSADB;ndyXlz&=qvEs>A>p0Y4H7Iyv%-BJ#5YviEVRC?=8MgQf2= z$B>O+P~c#Zqca<=eN1G&u|Xy;zT%JZ(P8qdjoS>b#1+(I>(3Yxc@Q=}K3`>0=lrK= zqH2RWPuWn7l%EDr+$XB-y1Iyv!76ek(B7bR=m*sPxmYZUplco(6+HAi)p`DnoE$q! zUxjedum?!O9Hgu)#u=Zmd2k7;N{l*Br2&kBlbyn!-Q!~#4Gdbh(t4o4GTYzZFXo09 zK@b@xek_)r8gSw>yhAV`;eXP~KRi9|Te1Ktfi}C<-ClcNCGnodGTY*?Pkd82*VDn*GcZ1>`LSpJQM@Vk z2)A#Tqy4tJ^!(D%SuBEp*E}iI3`5)YJHPxrjw~^tO0+()L^#9m5`MYV<>uvmeBWB6 z7fL%c*5pf&x_4GKjxeqeFyd%AU3BHQ31JI~Fcvn{cj)1i^vmf7y#zrY9 zP0gK5AJ}Ga>NWp1NwR6V)fE!lx;q4!nn`)O9=Z8;t>jJw2QjHztYCDV43mDzYj(&f z^~m`?qh;SPsj;{Nr6Tt~_cPlsskboF=VRWo|Mi!DpHmKy_@5wqQj1ov zHrxfluMepDNx5(yWblqwKw^}Uwnc?F{^$N~mNfm|*}SxV3ASqCb!@Cd_>7=9$@8YA zY?+BA&(8Gbx?%2{%IOr!sjY-lRJeiCw2sNJ=GB}dc}JHr5M){556j;79T>jUo}H9c z_BYT^jYWf57F!s5^$zt7+s;a6B2Q(R_~l#0=eV8LVJhSlT*HV{8<7T(|j znQuN=8$+BI$8xyqW*>ZL{u@LXX&7EsKHtBlN*SOv^grO50WUmh-iGNa!;0LOlGpYg zZK!R`XxpHfb-MMQW_yoxzCM`JB9RlH z)Cp^xa(M_JS;zOig(LZoBo7~FlCbf>raQAR`*qNQB#8~5r=D9eA#j@ zzfsG3u!Y+YK7XwY0o}JhLa@O0LZV{fj!_$Z*AFCJiaud-U*5hYIB75E`jGM?--C!u zUET$E9HU7$gLC`T(GlwZwTq>)YJ_51Ihg(Pk7Mi;NCyp3@Z^pyhF|mNA2kwcrhbW~ zef?vL&BFm(c|`?M()NGDu|+NbV?b5BfI)tS2$3KKP`h_af43aDGMN{Uc25UDltlHvB9g5<9@f5Q09LBL#P@Xo|$;n`*Z zQ!h(01j0uSo2Yhuv6pJ2)MAY+_HDwVJ*&{KUeK@uuo*9{CDKV4D%!jq9aUAy4em*| zsMt7I*s4AJ;jZ}ChSzpiyEUhIva;SZxhoZ<&Mb=4(#6H$rFbDm&B;oC2NW8>DFyRk z1F{O3?)EFq#$wfxO3{$jceK;Mu-)MUk3X%n+Y24v0b}*SJBusZ&wWUx{pM-Q%qzCW zN3uAIwI4CX2h_2DOZ=^rBW0GC&^M7MnL5;8&Sk(v+ST7b;v)1&z%IQlvEOna2abLB zyMd~p8q;{;o~X57tB==S&5aejblWDP3Wr5WioBd`+12G${qupuXj#~sR>)TlU5mVF zp>^-sTwQozcxF1y9P(p~-V@I*Cz~fV3eO5y`GcGXSOeA-;17&y$!+wK?O5GLDesQm zG)nNJ`Wa&D71|@}AK`w?v~t}LYLw#`>RuwJpg6>eyyQuGNkQ?09dT%4I2%vrm>NmE zzl6^U3twxgdk%*gSnH%;2DqJx#AbjJJw5zL!y} zILb~IYDXBQgnY>1_#!sjtDW5MxHcn2yq}Y%tQfSh9?oTuOf`YrmX=8{30h1k`4#n$!csf|yl{SPC-v;!sL3k^9morjtOtc9jBIfD$3v)A3( z6&HT0n#oeecYiY0c`T0mi;#}vFpHXb0FfCM!5^?t{I*|2d`Gj$-vw?by-rQyjfpNp zY8TW-ZDDmrMoiF>4;vR8tU(wUf?=WOgdQ-VJ%^n&IuNfj`Q=|X(dijvt5I+3Xu5s_ z!s5*tJ9v3>We>;_Q{tNU>U4UZ9@^`iO;5nenA8)=CQ~aSYp&(exo7p2I94&_`_M-> z?|1aZOMV1{u4d^NRl8#rSZW6g?EUF90Z1NRvN4s?UJ{9dF=LH^{aq>v}NlSiy_ zz!bUj369-rq-QM^mFh$Ft~#;lc~L+@vwAKgrOe{rqzDHG0GxnTo0P4!Eq7t*_E)Ak?_#Ha9Q4f0W8l5etcxuDJ-Qa4y$t9s4jN5jj$CDn8hf-N17lt>Rou#@PG!!EV z)#~#Z;`L2oqpD+^q{&u!bsp`m-;BtZDhgUv$?7ySvBVjl^#&gr^$=q1v&IeWOf=XNuFHyX z=_wKcw8$n8P%#@XBm~wcQPMV=-?NwBk80Vw21e_gu^ep!Mk2)aWF@%wrbymz^4&=P zc}0?SA|#i@YMR^Tp-mY>ED?*4b9YV5b&Qo91!+iJ+)qI`X>sKwI5`lt#^la>=yw8f}60h;k~p_Lg={-i(IAX7Y8v}?LP zIvIO+TU5*7dp^Gr_;L4c$3Hsyrg`vgsOxfm()8xEBJd*N)@JBFR*8b$VnKp6dQXxm z0%e+(>lqF=9=h4TZ-(cMKG|%3CeE{B%FaNNsS*=j%onWigl(Ywmm6=u+fD+NSN7QR zBP%<&=bWzRks_Ds%O7XGCz8qfF5$m(dSB}Jbggj&kIj$T4GlzFJ6|aova;!|ZV;4D z-#{Joq@rI52G*8;&4I52B~4#`yrA;kpd8codGssoc5Ct0HqcFE^lDqBOLNMj$f2SB zjnt$&iSZ=suZLf|>!luWDy|NGcjP&qwBI@{S}@U(hXjx*ReEdae5}`eDts8oSfLMPUp*nueD$nX~|lo2^jd>}sjQSM}k`RWgE zIz}i(>sM+}7Zs7~eKi71Hc5G`_12lemkm|@lEe|jK3@|lL$Ty|lz zb~x6F{(4K6lXiL|V%MGaz~gTItN+Mnx-knn$UI$v@ls*k(|A#pUn0r8X((3k51&K=SM%4B?XC=<-Za#| z_y_&*xfzD@oAm6yqm)G99A?;03=wDsC9ama@9HMU^qdDK9_iAO;DHVNRPi$r>z;Ul z3-z<`XYsYVu+P#Eb!FRJkT1m(Ab&|qkagCiK@sHRRuat?MOsA#Qu6WPDokUe)8ncB zdDj6O-up1iVd6&qavf$ejy1`x4SlvFal(=7?yKXAasl07+(ZvUI4jaN%CW>RVPWGL zMmfVh{Lrm<#HYbBpj@sf`zV=Qp?E6uLC>F--UK9Uzz_*1%- zO_1a!;pz?UMb|GX{C@NBR)MA7^!WPm#*$`;_|4(FClq=`xt}Uo9+)S5?V6o}9jkb_ zCfLn66$sQ#klPyG%)&o7~<-oIIksS%g;^+}T625HNz z95igmxq#xQ8>Qt17P&iVY96-)>P0}8N8j*MVN&`o8SPT8cwVFR8AfL;pivv4O(Iml z@ba8`XD2SEq6i`$XX$FSl@GExh!I}>nk^&3L^@MDw{(qeZpx@DC+BHj0?$`WNMln| z-^kOP687G^5Nxlo$>+3($ixc;ni{@(Q(_MUmOguXSYzKKDR*QGHY|A6{HQ7pcA0M9 zqj37X>s}1r0ZMQxUJxxYTkph4^DEs*6U#T;VU^keu_zhZ7f38-<)%Ea>y5YPSUg%d zI~HYrrhz6K2%$w!7hiPJ6TANDMiu~Ky&t};)4OtgHBVwCV^5tTEm1J3W`_-qF_0w; z)est7G3e{f(JL)?sam`64moyHlb7EKr@jrRch<#cW(juRJ}xnC%NU%E5qtwpTW4T7 z8BensS<*^5EC6{=>ZKjCxByg34WEIB`D;p*jo$UZlc8a!Yoj0Pln|uta@LI>$kLEbwMYR^!%xvCq}I?8%|dilApK z>-}eW#X=#Z?&2NTEJ;L8`?{I~6&)BY7UGwTSXbg$H+Wqa0z-Adf@eD(yBkoyP&Cm} zDXp=)!Hpq4K6P!fM6KoUXJ4Z7-*RM|FzbbLf%iw=u2a?*)QtD8M0$jDK1-6xO^kYu zIQ0NNBw=YDH_>ea0LWH1u)Bj*qZwvC57||MyagT0SB6IJ5Nlywu&)`D2)KJCBKICN zRNjvGDY5VS+b>?)EDFiw>ti2EkvnvE#UyufY?oRBm$AAVWmEcJF(Y|}c;nT{(|Fl~ z_8!3nPpeNipN(f?gcxVe-8>6dRrxqCkPPC9=kO zpjt%E%vnK~iFr%f!bnAKx#M!|329AZQ=zej)=M!eJ&Jn95m#SQL7abS#8xUxV7{Hl zptynq77LZ`vo zzs&x0DXe~p$bU&c#mG3b)Uf#EiOR{b8daDneF(OIO@1_l38Weyk8yG$Qxn#lDi$D( zF1~K*4l*YiuGThLXe%a}aM{=PkJp@@ke(X3#z)T|T^j(HC0>c%Z2p(fghE~-R(gn6UuIMamW67$#)<@zN$oX#>BU}4+HKVL2k|GZgFebL_fc#p0ReGK1p6cRa zYg;P?3nI|a)3M3lMN{E;1RQ$qAUsw!?p8Ku@o`i|JC}~})1Wf^=%KUD4E`==eIkjSQ1wk= z-vt*|wY2!pk3W<8Ps*xi%)fPe%RfqaqNjWjXJoAqh5f#JxRq~xjk^FTJm4uCuG;vB z2^rB=TC^f4fcqAY=CgOIg#xcM(&zNBbFOM(s(D5E@9G~a2~0KJH+!?$rd6~T;JMh8 zyFMKAJ#%hnUXa)46|uc@u+$5h)b!-?aJ8ygc9nG}{~z^Tl!w{60B77cHZ&I&>3zF_(e?POaVK-XH0ixm zQDC1a#4xI7;EXmOUa9nPu&H9{sI-i;zab6Z*CMt)%SXDDYmseiu2CQ+TEKY+Ca|~u z_7cxtep}zi&}Qi-{X>Jlp4PUbO?P4MRUBX@VSXar1Z+bVtgI_{HpJTX4^p?p7qG&P$H$U+d6RE_c+L*VJdY~j1hgJX@R?JA zqRP>U;<0fh(}@W-OCCAzBzD27!`*^849SMyTT5(n!aUal%Z%f z$zgQxGKww%Of~PLZs>ce67}q zCMN^#PW%mNPk8{*sl;msQT8@-gFhHM#6?Q%A>P9~#?!}G(wT3?2HRIEoV-MzKK7av zOh`zW+c#+NALQQ9`3>-qe$>3r6HanCTcn7 zk|a`L@jyq~8pWCK#8rU|%#7#gYM-o>T$bsGL$x3M7#msc-7XwDICHd@L!dLT%6$Mw z<7GJd4>Z)43kljFr`Mq#E@9XP!Mx!Sb#bh&avkSKg~7eb_Ezzk>z_^h6xOsvu#c}QTa1BqU{*=L zQY0_W-gY2I8A7fj+7tFJ=ut_d)NKCG@jkwAK)tV=aaQWYqiGeTY1wVni@Kr84DmwW z14X03mI{7>tb_e+&pJ}Yi|sGoU#*m^LqB`bP>AjUFGvsvQ(L zXxxO>#el1bYGwM7%jLt~>#VN5KVEYVXLGwB#Q*mvn@L+Y~^lXbpt)Y(}7^0;1CH8rr zqrgt8Ri_018W$zI&rO_~;QWlppGu2ffvTMGWYd!{R&Y=#9SiQ^3~O(fo$c{*@#$z+ zd*Hc_i*wtNs^h!nS4j~)KV6*kW(>8QrGhShtx_jRA&wxE1 zQPl>IyWhkx2xgZSn7y&o&l{Z?ke|(&HWx4m_bKxDUPyzCjL?@~=zr4e+zoak(J5QQ zF$RWSBw7CU@R`48A@;l8S(Rx~XC+QZ!NZ@)Yaa&bQs*V0KB4ti4QS~e=J&PpgY~GT zgY_1f4GssR(xL0B&RU_snug<9`%k;0*BNzXU1N)O`&)d~tO`48FJqX?>|zUV@0U`7wb7;aB9!kk@s#e-bR`I=xDIn%azk``=;!gqixpn2 zJ6_~P1WSk-cwIZG9VWz3O>T3TzG{FSUM~wW=G`XxU%&1Q#z00~bFBST=*ggKiitHG zEAeXDGzypd{H8r}l{D97l*Z|Ambg4)l+YePpA@9>XT71&fP>Hiy~vJ@X`s5YbmzT( zjQ`2PWT2X)>uPV(54|B;CGoqw^tCo>Ef;?mt~ci9e&Ft%jBzo4$f@V<*Fr_oBMs$xbUWx z4CnIuk`ueK$CPumTySyIpOl%+C+}*1E&!;rVidm(Q=tYtbu}c6pnic>9j$un%+&7k z;_&g-koBFJqvYBCm!5>`#~nkM8{gTJ9!7nwa^reHqu#okZYdp@EWovtjFN#?2{qvH zZ=nDOh60Q~u~CYq0!jVtL7UK=v`ra{r`QtJUBMZtvipBd80t@9-xj|-WC@Tt*AmF z(um`_%ai$@-KdfY1x!zO(TI*!P>eUFw4-!|B(Bk=PVC{EtMgAAZAI%kI z*vOfxmTAr-1B&`6z~@lBgYBoJ2)>74+m6lY4W|e0oELM%THYd~S=!H)n~K2^ennSb z=N8c}iGPS5ARL_frh%Sch<3t59dmRrG90XBFplkenmt3v24A4LC zl@+1y)Ue-K2>4zS<7sX|9mF$H8ZI-D!6kfCc=ckOzgj_;IZ&?ZMxlLnZA2hUB;i9g zaUA)OFr8>boAIppNnZKv%=*N|mZR-VccdGS7y#LU^N;F`S zm1~_CySfw&r^sFqmQesM&`w6r9v)a$(p3(bN z#T0FZi+LD=?^62}8^hc!ej{1g2BO0N7eVy=%ALEhzrpf!xIuz(Gmnw1scX?X9ngYr zrq;Y-OCcU)Nx^y1_T=syR!Q=UQa(!`w8%b_zp+=z?v!shlACTM^nR9sN@lzujNBNo|K=q#A z>ocH3w6$4~RLkMMciYPtPaJrsN46_Vp1tsf-*&aqENJ(q<0wr2j2;5K;I{yxHjc_d zd(QQ#L6}2)4}BkjeoK=!j^jDIFBTtt5H-rtS>TG{CCF`u1@ZsUtPINHq^^NyEe+H# zHZh42$PYdao&qVg93FTtpr#sC4d3frPkRgAOpWBPoP%Y3Y3_$r;`?~D)HNy6)NV?$ zBQU23Rc2sW!ntARvd&OQ?dijoZ+sGnIJ+-B1ie=gfX`n%KTd(z9!RU7k%Dn(qp{mz zE;AmA74Y4U%?VQ@drUU?sO?L$_#zUoy2-Jtwk3%5a6yGo85 z-$Z1bU?WvOI3#3JZ3D2DmUNYbj2lH@BqQSje|qveviv3p1w24t#s&il-ZlExY;%HG zA1vK)gz>+hId8S~8)E#ECX~(CR`5d2kiqSJM0GFwLCayU_O}cE)NYM-d6wIzl2)2m zHeMx0@|&X0&BkAHw~-30=XEWsS8w46VqyAd4b`@(2%&^9G3|Q$TUUt_`$`^g2<_#s z0=sbeTdAR2HKS;NRmR4>e&nJ66D9x;RxHOJ?&RY1PjThad|Ev0|K%ZBE2>U%Hh(p4 zLP)l$Sab~#G(5EOdOchM$)26ZuOsIMe3I~$?ee9IbX=*jWU4d>ro&xp9I!h^fv812Ot z{r#@@AyB1~3oCvv^_=f)T7{*s_In#y4j*Y98MFWpm;+se7hybSC^Fwq5u|=y)yo@W zMfA0vY^{k+r%^f6LRi&kV}0RQCx@7zpsAj|E%1mc`;e`IvuUn|cc!~;y2kxIQ=FB@ zQHP!{3PC7aE@ZE?cn;_D3eO3Zu1SApI;~?>%17N7e#YK_?&He%YK6ynp*&WSjm*JP z?+&CmQi-g$a`gQR7wty?1fqc+-S1H%BjnKI08f2P@=BOJ6iuD%sbSf(q_%VRgA3P4 z7X#PUmsbP!Ii7VTZ6Q5o_e=Q-_CQuc*H|myj(%Jb*?g}HI2k+wt7P=tkLFACUQFDZ z8991!DaVA5f-v760@;kffxV>wWm1X)8MR+lgP7{pSuUJxRM#w*#n=*VtKX%3WpolBf^trATt02ISHN&#c`i~d0QyE{g1@|EI5khrsHdW zsSULShD|zu{703)n-AZhl+a%q{XY~_g!j|E1MK~PZEst?LFkh}>ka#HkWQxt<8o9H z3orjQ+rI(MNE(K+5GR^bu56uE7_x7t>e7_F_>0dkR>0iexqb65-uPesO-xk5SO6Tz z8cax{9Jgmc@+GFeWMe+W>}3d*4OqxuPDp&S1-XwVBF)Z6(&%@SkYW6 z!oTgFZCVVEPDEdY?#I5=%+L`c2FD=A92ePVfP46t$xIGP_w3u6ISsnncp4q;oMxh2 z54g0SzfQAp{en4S0=wv*+9UPSspXjn?uQq`1dlANq_pNhWrdXHU?VTmO5^f= z|Co-666Cp00ZokrA^0pSKU9TU>+p|GJR53%NH20Ct>(U6Wwj)0(hTtCbv z=zH+%f44r3n6ZKX1Q8R9;2)wRSPV~k;dL5~v z9C$GBc2(wDKegB?R8rzEd8oet);6WBD`@yCNz%Seka*_FE+}JVcK(xgf4<6RsZku^ zn`!}*|FnownSnOFD&wJUFNo4KI#4i0d%XCjYQAwF=U7Mdp>De29Lalm{Cd9X;)_{_ zybFgBnB_|=i``!Ik8etBdoAuIuFDJvd-zpbuS)1VikVzX&oJ*3dD>%|5qk4PEoAfy zZigBO*agSyhvb8o)x6FgoS%Nw#W$3=yZZbU^#~zEH4gaeJOKh5p|AVhrn9}Da~-B(bZ|Bt-#n;g1z z(y_G_2v$=c;#k~?_YtmeuQD^4<_0u)iF=G9R1Y|Za40u+PBebhid5W(1QzA+qdVif zhV{$w*imLq$$(L|g8;u!Hn|<%z#FK*DQx~zOP$TNx(JBAH{9*D@A8l4JibVGXG58?Ca<-NYS)=$z9gK zv(qx!p<`z1C*LzNKi}0?C6y3Hd08UO=C0s&qIzX{)L(i6Zu0itpSW8n(ZcUot6zU% zBP6i;7riR;uo-OOK)=dLH6(H|MSC`7QC$bLTediXYrnp~n4#x$vHvC6>NxOp&{Qzo z3h!3{%&k;Q_~4CN2A0!92SzS}pV@G+Bwrh9l+&kOp=okGR^As3 z^tAT$FyQhizq!J8w*E3b{r+W#r2isPG$yN(rKztX$w;nf-F1uBgAy-(t04p6(9l~U z5veT?WO8u(Qgu&Q>l1OEu_+Ai^zrxEJL@RZb!AI8;Ha%aR)pu+%0HOngKr9bn-F5gI??T+WG<3 z4ZZf6k^v79I0eV1+mwEsg0Iuod(nkNWvdL~P$>JOcu!?#av~I-cI|7$zT2!dRX_&OPzO&^ zl1#D|!-0ZB#^0BDKiLlQ35zdam4A6;w*YW6Q8U;f`McTGmMxpi_25Ch(2V8YvTI&* z$c$$Y#&-26E{JHzF)Vj8**SxsI!EM(unQRuZ$w8~?xV>>))d}z7U-?>4i@X*U>!xB zq0ie~QyC`n-Er*pcgHOMsr~{)P6nUVVI+b6<9`}oJas!~iLRaDgtq$0zjx68r^Wy0 z8eoIJ!_H|?x*@$C_Gqt#FI?WYbtvqghIwW?S$X;zf$?nr@@BRK>HYAp*vies?DEbw zHiAWzk_W9f|MLkt>c@m`4lO8gwH@Q^b~<09YvT1xD|M=wgO~z0f=X$=$xp>)44fBe z&DaZPPeUIWwEn*Q>vCK}z=WL%dAiQ2CDj}Uq*ah9T@bu@I{;C;*ZXT?W7rL$zu-X? zzOR92Ec!Z=H(#lmv{&aCB%(He_`IU|x=KFE4sB_y3d5u6QzVs$48ig!WQhug;8@cmU6FK*>6SBOWMuO3{dpbrj73bHKw1BQN8HR7(w8@}eP0c% zhTE7!E8yR{)HZW$$oUu~EI|Pu2<%V`w&a&Mvww{x=G4e3g5h9UzN@Q?UIkQSsjYEdfWxFJHclM0wKLvd+Z(VK61Jq)hr*J2i5}b)cKqwKlkVGg^ahU<{t; z?ohIN|JNG_qeHibd7YUWSGhfZ#81ccwBe=gyz;(uIC3VaX3SQww$>shS+KNm@VI(C zkMdYi(fSBo!Qtt5hRod6#MCrP{`pC%UwLz%vKqlkOoRPUlpC$c{Oh}rZalzQof;Ko z-2)owsXnKmI-NM@e`RI@t;I=ysX;1u$UomgD1N|+GvtbsC3{lT=)FMr-}~x+8sRmF zcGMxPzlcvS0@!0-wLkc;RrKE3ZiUg#!YtWlJ54ET&bl8HwEY)efO}^_JBMl>GzJSO zVaqcOC_j6Qs4hdS(siRO_0-7dY|QjG`=5~NOV8c$Ab@z@6sTMNq58cSVs8N~1%z8S z%tQHRFt%tpcxIGp}4@v*KphB}#6n8#D_%%-)-Uxy#TxW+j!6br9l zB(X{!BI{c#&-SxHIMvnnRg`$}q!n_y7XL1`b}SyM-%CGbK0C}zljCj)COG&*2Zab$ zz$+u=lSjDqn6a=92AS){g#(#YkJ7`VRzAiS{dz76V!rywdgv-aUFYUuRfB&O`CVsA zQSue-%lV742J3=h_yaVPM!*HD;~uASDwI3cHGl9YcKGUcJu-Bb0r_DB$;ESh0M;xOL8%`VVZ*F#rJrxs{zgd$MuJDOMz<<(d9~pZwENFCn z@_+yhr=)j!nADBr>l@jUi0H*fVoNIE%R?VHAGETC0ssk`am0%sgdl}* z06gV$E6DtTt-*3gjX6-W#gz-~-J}^Xw63996w9PJeYF*PzG*Wt-vg7(}Fd(vxI12bK_1JhWi-nSWS z)LAAFV9?Z}sZD61Qcan3lI87{Je)X_DW(lnBvwQ#>O{c`RvK;eKWGKxHt$)n)b+T| zYNtk(C1#){i9JQzyDO>o+F)B2n+|Wrtl9BT2@#D89WA1|VJc?&>)H9a{wF2d_%PNU zGlT0M1;vmBUZoD5%3@ss5vSshsV$fxgs-AnmZe_V*5|+4%%4a_?Ik1##aXpcjE8iD zs@$+Q5WpUwA*vG)40A&Xa>l`;dCkv7H{)K^A2+~b9CBNB+0%k~SNxkfJs(ejnx;V0 z4T3L}klr#PVq$SYjaM34ZLsg%krBypDB;iP79V7O|8sS)aB(HI!}`3k_?t1fE*c62 zVj0+L<-T4b2S218vy%I4fb!!Tb-_MQS=X5ORmcet)#~oRf9e2k&r;Yl9C%ZvY|m2q zXfiLo>wST}z0%I`MQ|{)uoVucZ#f4-TNBBLtz5j!W-6EK^>osoIUyWnrV-jHyAUNj z>yigsL&U{-g5*4Rl1^BPch%^ilFGeb zb13nG>ba0bJ1N3?j|?rwi*E;+d&Kn$Eeq=V91_Xcd3K$vh>TGXn*)2}XE3akr>z}F zr+06Apar`xTVaSWK+=s{WMrgVVvcT4ehf9NBg5}g&Zc9auzCC%lSi2yqN;(X%~%ky)7UdzMn9_#a7 zgSOqp31fzoF_0?*iwYb%>{-rHRLKPdJa}0Gr&E_ew1ZN4wi31Y1O-$2)k>>)nX4ub z4kQBWjAX|TcgGvNPIq0nlh|Xn8s2p@eK2pc`*Q80DsfNXf z`TUU)NsnXJ@~Xiq>V)}B0BRQExGwR10*tS0iWuJ%TL2XtQ?$%_5=UqKeD<#|ES-}) zREYWR7(+vs_g=X*TSgPxD_jMMjzwG^Uer@_D|g0b72(+|f1j@}6Ollo;K+f^*s(mx zeVbokmvL&A`07i&ZNUVfM?Ebg$F9G9&3Gg=_=+;%i;SJ2&_2x#yhkoO8dO-I=XFcssuld8qqLVd+D&;gWvvWr|-+ zJ~VP5JxfN|!n13;f404M^_n`^KIB&Ej@iTz==r~bK2`2Z3Q18W^s1XF;UNuvgL(R5 z)N0{)H&m#!4ncJp*O)YYq&ohoFdSkCs^E>Cy?yGy_KzZF6UoqV!#~wdBelq|TjH~* z%}wEZ%JcG%9Fq=|1;W-vrtF6{FVzw=D=%>E;%^#d6fFWp~ zQ1jF=7ULKJc!4u&kqHD9&X}Sfe%4taz!tm! zwEl`}g){mVgO*@j9B>CS{5FGTE#RJDhMTXofY9tK(8k=v;so&kGt&y@c=+b!El~>` zV}_QW+2G>8TXh;r%*`1FrxS1i^Z9MQ{$~O(Twc35BW(b<|082q=H3E(K=6NI_a?;Di-8|Lf(JelL3_VN#14+<^Q6Xk-Zi0iNZ zt!6+t0Jp`#is0R<LY;rzNsFo533-%K7#xB(w6e=nNbuFzvfPr0|OtL$kl%u+YNyRv^|0nc%1B9olU!I&VJJvveaZtG=k`y8ZTLm2i)IsQv}( zKs4SzLDc%#bP?Gb-8cN?{y#d>L|0@}=YSOpX(iHQMWW$lwypHZ)kz*t7nyc&BzKO^ zUF&r6{GI*G>qi>11}OM2R(;O*e-Z_CLDUKi;k+&e^aRALCv&&S7b(feHF>8*cn#TZ=@^`epNN1w$|*y-`EY_b5E!mT0Wzc1ItJqlitdGfAzdyvIP0EPF2Za$YqslSu0zs zyuLJbVHAW~);F5guj_nu#QkRf#`w`CB+X8J3O(-hjvx9Pgt z1lM#Y3*lse!&JgE7HdiNto8G&Hc)PFX`DO%hXp5bv6jc#@5rNj<*PF6IXU*ib2l|k zL2})S6{uCU-GpfbYqtt9JeeDp`s^EL@wJ+9>E@=LfEJ^Ll1b9%RcKQ2{(fq8hRgjx zwd7;KlAsY2ObWc6sY97`oYg}5L=}38`lK~^PapKUi6nH$2p1|1+9O$0d*w``{d>Es-4V#YOgS|XjG0$-K4&r6(bOH~0 OaRL5cY!mxMANn_j-nB;n literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-add-desktop-app.png b/windows/keep-secure/images/intune-add-desktop-app.png new file mode 100644 index 0000000000000000000000000000000000000000..8d8186398a295dc8be866f2d15bc9e7eab20b735 GIT binary patch literal 47883 zcmZU)1wd3?w?B+1q6{I53<%Ol$2*}a8e83kp0r3 zCf6-GkVcBx;&Wm1K7(tJk4#(;a1taG1E$Q0k(Z!)+DzzfL*Y#bJ58G;uCA9;d`~;) zL_;)WK==>O^(T|RK%Pd6f#4g2f7t^6m-XL0|MvPF9|Ml*^H8QPxx2pWJR80woX2mR zaL8&YEtOcABMjmDJTTDooho**_~X0}di_W^ z`BxaN01FFC>OL30MDl9BaciVP1k;(8D*&>M^J|+UJxMUOQag|@V+x^EJ^ZY9_ z3tMgW7#^mG-?25sdUd_m%zn#N#?n+>{T2Vk!Gg|D-@{ z^va*p^~x%MfYtF^Fg;^Pcy#cQ{wscgOw4ZFm4w^NLpE*r2qI{H^QO-7hE@+S^D;17 zUQ_1&X8rtbRKzDz+cgCYZgRfgt^{UalDd=OU;N1s{GVxjk^?*9Yp11#g|8T}vE$px znO2{zkN~}FEB>ob0I^&!O1EkQn#pyRUdKQF)Op7Ptd<7xqR|b^42?uP@x>;lfnna! zS#F_dfpJ3z0wYwjFMVA>&VixBuGhi)u(k5IF263@jpKo!0%Qb)-cC*)V6s!K*q}2= zB8Ng@Exul+wuV{x6De9~fz?#h*i@Ij`OhQqCO+cSyqn6)4dp)d`oxfQp5*kx;nT|c zilmlkt~tA391}R{sY&T6-=n~KE@7n&vubmkbZF}a*b?gX)2oJuz0z0e7*8>@a|T8A zt~_NN6yoOawxXct{el+*WYcC_2)&%fU)SyD}X1yQrcZm$Gx7tcwB zVSF#xObgz8m$lMz#--D`x4fRIQ~ez;5lm}2q2rQBDE&9fdpjS`z&^JLe)O3I1x}=G zJzE;Ts<)w(?{9}a2tQKqsaKG$RhGuDp^c8Nu0|J#-p3E!TRAxbEvTlVf~72B-jczk z2jQsh(^YKipEgX+g}97r9~skw-5=wIO3M9*+y70ccUs7`zJoKD3>I1hNg2vN zrq*4gFUFXj3UL`Qsip+GUs_6^f#N1jgH+uY_-vIS<=5-0g3%)<*VPk~$3=Dh*mwvC zW&JLogT<{donSNfuDFxRs9>!V&5NOZDr>T!_U1ejLV10q@de=!l&k;%B>JPiY64;( zCMF$e2n{tvj$fIIcHrT7E_<7mIW>abI%Y=KjqW+IcsjlxXA5t<6xLGLVvbI~Zx?w& z5n;}8n?oNTM8EY`4)kWK^K)~eP{u_IgcY9Xe`!&2s5AKt>X`qrV6N`nLkl`lHa3o>$*GS-XFjII4w4K^TM}17d`1G_&-A_fm!R|#$K~XTOo5xV$gR75dgS> z82c9>04dIT*xy$yw*@Q5`^Knmh-&`L3WfD(gWlNCzD}EcF=eQ1Y01a>A8~XplNduK1IW>8T&J#q zF0YrQ%O8rkZwwmxu{S2qsXYmX09Q~m7|m9?L%e9d4f4*P1S<5UQNF=W(O&46cGGdZ z2PgS#w!PP`pHIO8rV&a_UanG#gk;WPg^@yQ8W|##u*&gn#q?hEFqZ8~vTlZ}Vf_Gz zc4w2hEGXdACI-NjVxBLhz;)~O5@W>Be{TbEir`>N^+{q;m5i-?BTCojkR?{sc*xiNQKm*cz=HF7#Q&(8Lm?`6By?-VG zy-SG2AV`70RQrg_7~}@aMiu$7@VM*SvhqQ8KYn`4-llyykQ&AG#>if;DSL9Oj$C|b zg7Ri^o;%CX$?LUsQi!LcYu0a!*Z)|F5MnyyOWWt0lLBbUpNoQEzN(9;C{r(DB3^nY z$NY!Do$>LUKQ#3LTJlnyP1b+_IV`D4fm#-&>v)qrOoiNGz*Vduh;iTZ^NQPwRfVU_ zmDQ4zpHdOJ5xo+~S)Atn>$~mQ2IcV050^5I%8hayfaoKcsCFp@8Oc5*o4}jzGBd4$ zGD=yv#dW{wK(Yi)V{Y~D`=AMOc{)k($m_9k+Y*EpNMW<^<#07_oW`r0MN4mHChQgq zp3n#KO%sK2;C?(Jj%hO(=k1uO7NRC|c<(Q}3zc08)}K-7oG4Yc4wDJ$-a ziF7tU@XKW`6C9CC-F9%j2KUc_Ly&v&C!bic)yzdaZXf@&I#;|MhGO9nv5Q&7roola z_R?4X@su^(Qxha{5D+?_?=i@zTz}?G)!?%r_Df>{pHB`vJ8@TsQIr9R-Eus$;@ExO zz)Uou#ExgWFs~OA&&@^OljBCvq8ZW4g0@utG-to}uD(nTdmTkf3GCA?%j*|&0g6<= zmaENIrWdd+Y^I<7aNi4%zPzzMpOl5NZ=jcE_)-kmyLs*%4-BKi^zV2$loRg4Wow!aq#%uBs`k$a|<*o{o#gKK=482uQ@%JzvT z-sA@=V6g)J8m&mhOMUcYXfS4MuymdV$6QbmN@LrLq~5lUAny#8ck@Zgp!{e4pdZ;= zHtVlbXh}fAEym~;wcSDz>Koo?fc{VdP8JF}HXll0$_=84o<(q+4y&KC+w`*I=P8;h zr3sNKFk9tFlRphG2%=t^yEdXBi4G<`aTUAJS{Eoq(wDaiL)fMh@KToF3ALqPc;dBSWWO zW?NXRSWCfYtLjYFM8^7UC{kp#nry4ph$dcTUj=fDu{|EP@9pAvkywAqFZYg1kEmEu?Z6Uy=Ewq5r7HP;Bb&FPJmB_Hl1>H6i@ z;ekJn2{RFFvLNT)eJ}8oDi8#nYT|j<*SS6(!gja0)VTVp(SGD3(`@R-pgc<<7)K=> zd8k;+)TZoQDt;hgoNlz-?xvCKn(ygC6-tJ(7AK?hl>XoR8u3Qi7s|x^ z!H$3+Hs%s#dZMy7@#NJWx2ywa?9X|0hv~h`cM5NKs77svTYsINb8IFL#?3%23RJkI z^4^y7@eTPS@}>treC=NhP2oZVv$~g~X*yimt$w7X(14kfan>Zs7WJj-q3 z>{`^)wU``_7giEi>uLt)`J&%O{ga6Z!#NuQJkxF1mYDj@o;N15*^t(u=b^h;2_j_K zNV+sNTchPbh8!@CCb-s-L}eR$#qpl>0>5ZHNgYZrHEZ`y`RgL($4HGOAqvGqh^<79 zJ;`%(+GD6tiK8PYOyIsKQQLsLk=7yDmSGx|wZ8$V2FS9&iIi?0YbN_ggWrd;Hpg2j z0LIv{#UucXG0tYy+q+Nr-Y_AzA=6aL#Dcgya+ZtpHj+-sbPxZ1A5tEKf5_fI><@E@ zA}EP(OB^2?|2mCQSGKx_rMGPFHAz6pvMpsz4K#WvLR2b*Bf-Uk8Yb|)4FT4c0y*Ao z+1iu*+WrcSZ$s+MzX~uFLLJA|I}SbcEeAVW&R2c(+O!@xV??2^20Gc7LeZo4UKiIm z$&AA|+^A7b4@dTD&@vjh2TU7ZtbH|V54f8*->+%G# z6R0)k?<-fA_QN$WXrJSNwJmBf%@+k)M%zY(`eCX~z!Wv#{-ecD01HsGo8sj@@ym$j zx97j5`&ocK!3%XUn}7r5?b8bQ1r&1l%aC4fzzw6+tZEWmHRGyu2=f2F_c}G`l$?|* z6BHs8*1L`ag}HG&5;yKdKr+^Y^sdMCg&((ksm}se?+nMpgSq z_Z~k-GuWz=ZR_d&z05BMK&&5Sn(i)#=gl8>I8EupD^ru_!`r?WIBU|x79#t1gW~)B zl7c^ZxCJZ7V6503-5+d!E09-E^lWfFUN_?7e}i1ptt4W=(CCB5Fi?_JDYqOGIwdS(zN@f}s{!trZ`!>anRoq9R{x3_Zq zXF@FpORG2k&Z~MO@zl*k^k)j0tn&>?_?N3%UKHpf}%=2@xmA7z*31qPquuY%E zeC;9`3pV9ci=t;3|X@= z_AX=y!0ULIkJYo++YfVHOz2@q^;5K~_5i)`@_k)K+^USQZ`2**BH0pue3b(K(Cjn3 zUqq({*1Sw!G*FMLqw0J6+PZe({(}ckWj4h}bhM`N5Wgqv0Z!aN7>OpOo8&&yQZwF} zBPzG-9Io5xhJtOP7*4V}*Sl6NP0eT{aoBVf3}IEadx$&X(Z zON+xyp7_d=A{Kz>J*ZWw_qxTR3YW!+V=?~4Kekv2Km)p4gm{H-Z*N^(T)v`J;^5-m z-*Ft1m-BM4&<17R409DhWg-3jW2gniM>j7gI8e%|&Tm{hx)_^d;pbxJIUY#)k;~z- zXVi$(bKQ~Y8#|Y9!Qz@~?AL#k>tEijOdI@|55il|KfjSSJMQ#Uq@@dc8Gka1A;^g- z_Do<|o2w15^tiXME2Dsn->v=njm9*p0iu}_MQ?U+JSf-#-?Sa&oh+`pP!{?tFTG$9 z;YKso3bxy^%dF05YTsCC>YQN;nO6+_KZ_Y$IpQPrbezwR3%dy8HsXSJ9I#pk5vf7g3-F7@E%PARQ4=X$1+bWYQ}u>|zKwq+c9Nu5j@7!(g%4jiu0e1FWc)TqGo zBI_8Y<3V@m4F>T}2AdyRvZfthVHt{6Y*+H63~ogC-aIBPE;wEG-}yYkE4iQdalz3P zmG}40zk>ZvPcHd7>=;1cy1LVLU6ku1qu@_*fUv4ONt^DamJ1AVAjaP$jdIet-P#1B=8`>Y`Kl>wY9; z?b{2shLoqc<6ppZw3bgdEZjI*?P0Bb?IYj=$4?4e>K%!sV@y*YZCcY>o@@Tn_*2bZ zJDM2o3CpxwTyTN89xI2#p`a=l1T)X2!<^sQ+4-UYyned0*lfcljxw`Xu(-HbQc`ko za3J-Gi8Cpf&tU+`C0}EZ`CxUVyyf{LS--F|EZ~tHv*=)gb9Pb(Hq>xzqHb#rN9K&i zU^-6vEEd@8?95e5$0P^B@|0K}>MB8nYN%)!%0ryn!?5PSnbnz_uE)mOSE3h2!E7*f z1@Utfpn?OT-QJoO)Tnm^+Y-2uSEyXau44nokZdO*$0z5SG=-*YhMN-aqOD~jx(2~5 z)`t&mH>bekl}f%x#_O@_x(Ts)Efxc~yuq_Yl4@@4)ID#!c>61vs3B})n8@ilY`dZx z7Xe|`0qQwf#}=LKaNk&c*Ab=*WoHjRToOC%;$(UJZ3e%uivv6zQ~gh839Y}NU)kT9 z`@h(pu&1l+KWvr1c;DaN|FD1m#r*zZfBuUO{_Xt_yG$2aCr{boa(pqd%lC8-iSBJ% z${t51-Uzg0BNLB;|DlU+Ypj@Is;ysl1y?6ML_TqiFC}v1_ui{p(gIaLf4jv2J_F+b ze+R%2`+c8yy^v@BhocSs4IzH&RRPw5mVw2dCiwh6GX5{8AL+kjzywC~wk+YptG}(S zt(7aAHC4mKM2r*ncW!KKsKXoX`xj^KtG;zTtMfqVwWuSSXSU*Zo+_g;YC|-q_QhsJ znXdHendVN8fzsJF%{gW)r$7Hs_1iNV9ad{iJK zwyG*;IGVyICcb?If#cBWBuy|(iyo&+gV>S^Cdl3iu z5d%QzDTG*mfU^-GKSoF8`;g>82t*$JzJKFcf%pIRQ(mP$b&6PsiHVT~MZn|b^d027 zR{I7M6O(}}2TTMH7$r~*nvj4x-|)yo0w;rTM!~Fq8`NO}(xG%u5{Qx`a6iBhselMy zpaE1sk0;(2`!CQheMkthpw;-`iE5T_Xr%D*I=L~|IREyXt^^xx_8;*Dz$t-Yg8pCj zPcRX@qde%%UvXcA;Ph8xxGGOQV*v17xYQ>lBmY{9(1-LSxzFw9Y@~?K@w(}E=LqV} z8rss5WQ*Kiv*4P*rOdNd-8q8cMW{+8zf7_D_L^x7ARC_2|H!IEJ-d`(Ofa&!=Quzc zzMi;U!f#$_;J4eD^mZ5u8K3bt*;R^n&jEMH8JFRpzVuIq+lK(38ioj0}-|Jxya$d(mb;drK^su}fF#BM)9TNF1I8q4*jjQLE)EDRz zj`ddo28>wwH(MqcONldAdpnhqZi$SxFmpQ#XI%*R!qDE9jK>s|MC%d@@Sh=*``I>+ zbDs&#oS*+A@~@YpY_*+>Dk>_BwLTv&BejGub08-KeUv)%R6t)oL-Z$!zTo;A=z)^l zvLk*kM?|vv09%#H`;em6GG6PRLE+uE3V<34&80gG=hcC6&bw{vb%zEa8O4o%wnH{1 zQ)m!l0DYaUj?WRou!Azi%8ZPSjg5@*OG|6jiXkG6Odf2$Fp@32(F!kBr>hVMKlC?N zd~jkoH-*%v`0nm!LPB>Qu*_N}Zmx3P`9xL0=1YAx*8WbbHV82jb7EevS#e#Rihz$s zsZ8BQX7!gmxu1Llx6aAdQzn2uB!V2s$SVX@r`km0UrU58lKNBn3;wXBvkX9(#44zM}UtBbknR2K)ncn$w za_0I4DmL5sDKQ}-rGOUb@^Lgv85H#k0hyJj#nRutR?Ha#okVAddo%NE+8-$E*6h** z|5Ple`uwAT^J&cYmv`7 zDWx#|{=-#IjMS)Ls=4QM(kRPunX<{fd9`{yf5^eS*E}4~ zsoFg2aw#$OQ$)G%k=XUj#Q@;OJTsP)eVVis+P2)&*>mI%&8Up+@AXw7B>wV3h_J); z*)AQuCy|!WTJvzdr$8892kD8foxH2ncku$`2mldKOH1nuh!_4aCigaCRbWu>(fQr^ zf>37^7Y;Jy**anmQUt)t%IYXw8nj`y(SG~RW09Wn*rx!G=WX&U6vx$chr>7hzh{HU zJO;4mmPAFX3Oq~bT&-Vm#zdt z7d)TNFZM-%W6|huUf}m2;o#sz1Xq#+3r8$ve=r|Se7=EJaQG9woUp0b+7_>}abinHHn%njux}?9Nf{W#1|* zgMGd`xo9=M{=$dqU*9G1)4WsHyfL;|Oh7Ls^eZ^uZu97DEu884PZTN1)v=8m=;uxU zPz6VP_(5+!R;c0szPpQ@-}I=0sUc^!e87vIxE2wbzg{Cd%+6;Lnik4iQYE&g@n`pU z*4p($N-qr}!yRIVBA9KvAov^x==1wx$C7q9tCOEhsP9scLJqyDm2jP-gJBu} z*Z2p2I2m@#ep4hSbouF4O<0j*r?adKHR={>eRqPVI7BAznB z?f@Qi*0`s$9TpRr8^AhrOxSt9m$&Myibulqv8U7BBrLaQIaKgRPzab?!pGN`weMs$ zW^>k8DVM3?qA;kZQ-u372EzU`@tt2z;l;{}uWR+XBZ4O}-@X$P|5HHegm*g=5v&$m zJU7kv1@ybMwKaL&>w5kCtX4l+I%5;3__o5JuG{Ktqxd&f8lSo#3E;Rie^ZsGxN&YL zb(az~4a`0q4h|T0y8{ji=W+3JnSx%K3pWT-egS!cJ%9Z8k;(+kH|w5|kL(<+LXH*3 zb_g&Ed>qOM+LDh1qGM^AIqw@}){8U`Dp%$!Q`{0MuVcN*(P3pb=_WrYU)P!E@vM5i zy(bA4$&|CeF+Tfg$jKi8@Y6QBufC=bf6#ZQjRse2L*q>P#e~%u)Nn+EFGV(#t=6GZ zqrJeUOv@j%t6aQyBjlgaC^u?IcrVv=ZeHXG`=Gk=e&}0AzhZ1?e9&txT3cKk3(127 zjgh$B-#aJMoUbAvZx_h;aP5szZad%*s855RaXS|zgkSA_oM6t}#`%m|47oAzG0ZYc z6+~L&l80!QsTfuD=`aZErsp?iAT{2I2~~0vwqbc5`-Jnnk(-hJ6QlR|)A;5p^;0vi z{k;CV9d`YO-$0WPV#-ET^~lxoE2?_750(e`jm*tkA0h=~cI=A26~y_frlf(flnkJu zvx6NTy*d$*;w7ja8`C~xBu`2G0$PTn;lZZV?5qlgxoVt&u4@Za1f&bC*<7J&NciTP z42+wMua>jbTnVDhKJZ2grEsLB65wlr2P0oyq-;g2zNJFFpVdSij%8*)JX03ip!ev` zbC?L~6OvJbZf_4M}kI>8qL zWJN7`r$4Awd?G(|Eqzsziu3VZZ|4XPf3TTQdm0+8_O9sgPtBvQsDB}K=2zV5h*EYKMFLVP%ewVIZ-UXOV{xcmDr&w zyktsZIUH61nYT#uqocoVky{#y7pbI9lG9Rf_HDYR;n3C;?$- zFB5+wzqoin0d7!%(;FJdAPihPtaCp)&gxdfVtRa4evhu&6n-Ncx!oi6+0g7hkeo7g zGBxK2J4s--0mn2rPvR)s;FG0E5V=TCb7P=B=;5ZA_R>{wEKjb$urWN(PyLu;crY9_ z53?`Ii%Vkq8B{X`C`3W4PULDY#|Te_{`%-^Z|BNg^_n^>I;~4zv#5r1eRV7k716_;X^Y}r{9B-{SPiWT(P*GCbU|=a41(BFx z*Ns`>&$ynR5F7pWg7RMGUf)i1l>@!mCSmqW;&0+w2Dtll)V80#Qz-?5Q)RU69GOw6 z6JKn;eTFIL^djCYk&nbtHAjj>AOt`5YNA$8LW+GI)BKzZm7Ws_Me{dvuS-wKKanjc-_zIdQLhZ89d3 z1E(Kz3Q0XvRkdvHMW4L*H-Y71@aAq>uTu=oorizLulzdD5(}pu`iSA(=-W(AE#}Dj z{(b78)6hm)JV3+SIDb9!S5yxYM4l1S8BX@s zG<%$WlsX|dQ^=2sU~pV>!U|n;6B~_qSr1|v<-AtKPcB4Jg-^gS!62yK%SA=3XT3zw zKS`aGhIwOGe3>=)rN|{qLSasS3$>SGTHqUwP&6sTl=!Fo;2 zjYbK2P1LhdQjdo!S;uMB~$hG1WftXuSZ!cZ8W>UvP+9WI_il%sv@o(1A3Iv^Y)yATh zsu^@YN5Wf<;$q9i&A8eeAw|HI#Y0>Yb-pLi`{fDJCcA~yNO%0LEq($bGvS^Y>YBv!cB^06v%vRf;F28<0L{in2e%NS;~RC1Vc2aqWOjx7^;_{1 z57bZUI>+`o%BY(AsMoG>S=~;OVJRuHR2C=C6_aR(|_xjzka_BK0tT&7;?Q7ajF)}TlFF~6XWm9i=5ICj<9}vHrWcv;^9y|t zBe}Y_5FHUQ85#QY-J7&Zg}xbQH3I?GS1lC7orvFW)A)c~GQ&*e7f**ZXN#lWh0P{U}ePCQ;gNMsde$wgQV@5f6G)z|%;wgm*CuObh`4vN5Ue*TeSUG* zxY{}C-f|M_w#(*IYH91Z|LX_|sN87#vloC~`u%?TGJQ)87o9YS=-#alDHedBk_o}& zlRdgvK2}<~d$eWBoEmdlgJD!0Q~2j=ncir2lut}<)?u;I|A zmeo}YKiqAb6+{Fds`k9U0r}S|GN)(Q+)SQ(yLCE-`Vl3UhNLA*tM8LE>YyTf*p`)M z(NZIR-v`qu!k#f6h$}b-(lVYnkS=y?Kla{*yc*8P4l=UT@~m3^^Nb{A$4>xVh(B zu6w)!z_86wY?f`BxB|;WLyoO7#{`<2?L{)G4EJ<))MzX7{QEI5Bo5?tEW&m=na&+v zIS4p3JD#mWk&xNaRw~@bGv8@Fu=?3$foGMt;&1$cDe32$X1lLYj0<}QLWzNw!9>a- zY%75=!Es8tIf;pYdh;`lXVsxdFG5!>;3MGG8X)|td67Kd>33D-2$(|F|EPr%N@UDfTT;_|_Jhwz0NU<6MH z{D~=$O#D+{=Rxf!=gGSdjpZTI7Z*|o^H{OLC%iB(I9>=}nc@rKkJ4LzxEK)2HHTbI z_Byc2tWP~oHkoWU%~o#Ah7A?)%z-RJb9=82{_y|rK`Um4P#zn7b%S4)F4Z30jLyYu zm%=qXpMeuhOO#J)e}T$^VgONOq^0hRRi!+YEj(9MH0+VPH<13WoXd`lPzq;Gz5%^9 zGltPh>y3l&|66=ZW#zkckGqlFgEGx*kWsy!`5 z!sw5fe}ZM92tUEuaHJUi^pEGS1#kz!fqu9+Y9PX2{=as?d&vGX(GyDl??mulPwsr0 zKI7?`03|T{Nk04+TmT$2{wo0H1$PYP6YwwlPnh5We!?U5m;3*ljGGjuv$^p&&6U2; z5z3CRsqeg9?7tYHucwXs0~N6|5*YL41=8!cQD|_eOz#{V2;5>i`wci-1oq&aJ-c~X z%%h9%GC)}QBh=xV_u310I0Q}Z%I#**Qo^g=MiM6+N)&*IF!1+rXUY(GAY}AI`%o!u z%0p2Czuf{Q?m5jm;szoD{gbW;M{Wth-dXo)y73aR#tZ^mR*c3gUeMogGvQs}L=Ws_ z0pceB5T00Y+Ca4V@n6l0?O>@}WqGObP_z4BA-RwUWe+)-#tgBD<>H?ac}E}Rl%<>A zR$)FDK08oIrQs2p%Kgxy^!nS7A??5g)R*)n5?9o{XsV4CJW@7K9!Ef81@_|bq8>&+ zYe}*pMit2X@#ak+cR-mg03w)=Txkw2JpG<^j#P1Cq$tW)! z5EjrX0UEHQYDQok51r;?8|cJM4rU3(@FvCB804~OFk_Lir8}L;Hdh}cmATcjv7WM- zgjtxS(|`CUZn9vTNV?5c+6{rPGd-4|9(YW$2ZcNB*O-De`82rDaGjT=fZZRZx=tzT zaCDe$_h84g^1#|5d4MLuV}PS0X1+lo<#ijBwr1Ih>~lZkmF~ zYL(BI8z**jK%SQ#HrwEHm}Qakl)r`P&R;n> z?k9;jnTE=2f5sX`S+kz69oV8N*cNH9X&_#g!N@kQ*RS2wSO;LqqqKV*IL!K$2z!8X z?YNx!>>sbK&D3*qg>C8@32yuo0WxRH@c4i z^^(K#B2n``kp?cJkZv&ixcUr#EZ<7#ac?u~u~P^m!_hxK;pL<1FjvwTf&s@R&oVT? zQgMYgx7U=-#&dkT@!yVA;tJy*;bx;4fY{lGrofJ4$@I>(YC+Jgnj#f6R3YX=I)iV5 zOA2c?;n1UoVv`HEG5hG&>zW^4#(S*5Igl-KazWMN_zsd;fAk zZ3bWZAYGVjpEiwizdj_jVeNWxf@IA?^3&Th(F)|pZFjx6YTGuiDSFtKSi8!yg#5W8 zG(!7Q>_7t}MZ8NHKxEQ#Xvs%ns*pO*Tt347x|Uh1bnG-U*1f7J5NSMgi+S)Yg->5d&IT zAD=Eg9)t!cw<$`+5OL&%{|38~Tb8Re>skPw&S&(%1OWPgu)7VWinn;>rxR4$(^iFe zmu#sH&VC{z4)uIfpkC-O`!nqZXv9hrZvt(UA&_L7R9YpV<^zjKdiuTh4!8$*C%0JY zXrlrbz0_gTHKjM*m!&=C;n0{nB=T3UiM4gtd|0fl-lh~Svuy%z$c>gmdypal|5SN;LZATf zAK`U@V6fOg6&DUUf^8Y~JaM}0BSkUp_K$a;L{|u?dyztN#C%vqG&&^+kOu=cYEX#8 zdXa=Ed0*|;189DmCh+=B<1>sZZ@s8#`}k>f--3Qw{ydxaJ|vsmX|m~*Qb>${sgGCO z>n*g72Xef`=g|_x-r1gLwX?Rehy1Mnm26kx(nEa=Pbc-CG>x1OU!#5|BE7ct{1nzx zr}mcm2wAL@*aSmdO5P*at&2hE{PYEK9xim1wXCv|X~t88u^RL6V<~+ke`3*e$IV`_N!ngKGE#_j)^!r-GJ!Z zKE&|%5&2=AW!|K~BL)yrhIANTn_7N-3j4tDxiiQra43*JpJZyA^v(13CJY8yv8nw) zWbE%J40$rdP5deWxB1d?%Y^X<+b{u?2r`PMl!)Fo=v#u7Xu27?hd7s(JyHY0oq33d z@jqzMzlIIjfyge!EuVwRCN3*`eN$bXzC*Mx@8PJ6{X`2j^eCLu4}!O?5dtQ_Wc#(X z#8JI+%wMU&)FwMnEuG%yNCK?o2Z88@`fU`fMm})c8RT^u-LEI!V6JGM^JJL*PJHF| zPL@2^^wzk%Zz9N=g=RADS63+Fx_}kRY1%IgOj3Joy@}ea(q7gUx_1tm3sR)SW7elY8nCJ)4nR}7gLb5&q+1+~= zW9RuBHEWjcPGuSMRh6m|Q+#`naGxj=P#*xESB5-8_Ks zqu*5gw2VIMtN79D+d=ym{bGdAX^RQ1%UdVmEgG-tzfv4mdLFjVJa?P_{r6$z7+Xka z>W^vcX9V0g+TVQvw62`%jKU0mE<)xpNlBhf2Kpz3O~hS^9$U~Eha!J!aEc>i#gF$=Vw-Rz z7EV1#--SSn?;)+6WMS%q_2#~=zv+wnR!3WpWrH|Oa>}}D3MHpIH>gjv5-bWP7kQQm zkdY+%QJ?wgHw-G_rDu#B7IAs9q3RmnGq}@lEz|4nOZ5MmNEYyMcd(hLZpSgJ9pzyk zQr_}023`mL3M>ZI8`Y6cE}$xz%^KiXmFd^4ije`K4!kqB`AU$id)yjzwS~R6HAIl( znh1a>&QH%ZYN#NIk4Ks0?&;%9L;Pa?F9grE)9)LAGUK+ei8C(S-LL@(KJQN!0pUJh zG6ASB)8i-FHc1N{rU=EYwSyOPlcy{vlatPLA?pgXr;9uc{Ing)dPV1ak51}~8w0)_ zmC}!c93M&DG{esn`B-xAIf!U4Hv%pNMe}kxTzFjv#yNnm_b=p;Z5{^P-j^Bn83UM%a%=HB*TASi;uA0xqJ&O9 zm9xQ+AMj5G*o@D~R{&n;!rFA?K(g@9biIxH--0(-7z$ry1aJBREu#ef1V63o`3Y8m zSHkdSt%kT@9+wLr<&|C2Ba}p;XHVtt$JpQ|mrFl5Z}*6Cf2l)np0Wq%F90atlr9!MvNo5MZ5=%=w~7hIUijWA zP~PwUG}-FJ)mm%T+9t^DYCC>qx6{({&URBn1%!Hc)jLz#PM5aVaJM|78KwoFP=^#o zB6XzxzP}+K923m7MM?vo^tk0!o*L@>73`?IlHvv=bH|ZLK;MkTa?|cuSs7w6Oaqkbw6z86>s>TVpp=)kz@W~f9}O;5fF~na^DkE&{KHbO zS1y)US1X}Vs6PfFItGSvVYP|5m7X4%D;FOhp;zZb@`N{G`om80?mu%Vz%rdaw0(+h zwWk7VOF0Gut6Te!euF*(Yfa7__&Dtx9GM%_Qc{W(3u7hpjf{+3U0u!0J~zHvQZlVB zC@7#`9%_oDuTy$l$Uuch+$!)s43Rr9PWxVAyWtBEi2;0ps86wuNEnPi-d6hKPSNj-P3dS{~^ zhyov?1_)svU8iK8GAqeqYR9tCZVUd#Q4L!VHOg;~0!=9o{(Hh^A!6ZzzyPn;L@(dW zYf*hWejb4NF8M}YXPlCRLH27I$;iSacKsao)~I>y-2Q=mZMEv~fo-0{LH}Nr@5|cZ z=;T4$jiFSo(}K%hj?LVIoPJnEhk_nsCCGfG+V&>HHrgarepA2#wZQ(Ea-cI>Ovr}V za)x*XJ39_unreX%Y3{xlh!|B5Eqg7^eq{nm$oplyMlHb90ZHkuCL@|=1Ra@SuKjw* ztugs1K{)5|Cu9J-)~FSJYT{nmSlwAJZn8|J#fpbOQz!$$yqc=l%BC>bd0eVygvGTh zFH?Lpp2t0D^Lv|>%YsyO!PpPS&OHJ}_GfldC7oXF+Z1@OKM+VPb+Nl6)1i}0FUjm4 z`F)d1#}gJQk|}z4MXQ}X2I!DYJ8059y6uRS5g3QBw*FF>0C3>{%47dKW3t2iNT3f z-GX08&3{TNH{i?3U^8o))ODOx-UV~4-f^~uyVJgwRy zZYk;q=g*K}+h}u-;MK(1fA4&P0^8Q|@C4~T9)PeUH3mA{p}yd9otkTr zt2Lvg)&exnoA&AG-n%}VjdQAmb==$840QE;jXjTI*#6aPx^vPB=qv7_5Nw98KAgFU zUv)#-;E1265*x6_oV{%q?DJAdMZ~5cs0;^1a#FnPrvY<8hC52-knpmwnH>nM$vCj^ zj}Cqc z3F#Ks_-jXuiiBVhiGadYzo;TisV#UoP)C09EieOjXyZ7EYGU3!ImO9Fdr3Xpm}>Ah zu6`++4fCcuVb`ZmCq(8bX&IhCW3F+q=X>?k;C4UgbfD%-I1ZQqNKc%(=JA(Kzcu?3 zHnv?=7Z^Fh)oW`3DN!`76gKYN-aFb#04F6TMq11kK9fSeYA%P?ZN?k+dpwQKm%&=ol{!;pLbB}+B^|1Z)SZ&JG9Q&IC%wmcm-c! z?iiA>Feve-|K5+SNZ+0A)_U(XaB!-sUP|A#^F9h&2>B)yds6mm=%talyMs1BU3QjXHQ5lSa5^A+nv9FlU^lO)rQV=jFX$Ks;4!~aI>qlLwmcMnaPL}9T>!P#oYY6ZDv<8E z_A+@eVwIu&>OeVW5W3EFYyqeR!~*{P?Iu7kQ0#^gEv#p7kV<^#l;J051KIt*u?D;r zXlX@7TkzS&`btU>CO_GWen=oGOQ1HJtp>o#8g@^VMk4GgN1_D4Mx&L?|377l#BcAXiE%BEH zdP;HY0ow4fVS_pzjNmbcx67Hyp-re57g_sV_jzg7{DIFY69PfwUY%@>=au@8%xw$*7=tpdAQjR%M{b~GVC!(F3x*X5}bxl#`)CzPUwd_#_2?d$G?*+Yvd>+Lr)bf zppyQta1O}jg_`YR-XFQYHt!38zL_AOJLu*D1?&~`LJ9(zU32mbdtQ8q=wfj4r-5l_ zEgguHWXsE$D__ube*Bi2q{d!o&u+4DKEgc4) zOr&yw27PzhkBom>{IL|msfe~N3f`s7Y5O*y!M}nrT`^cn@@p;@lb$VAb{{*CSYYQk_oq?p+dW-q7FrShbO3~Lg@94Ue8G%!8pe$jvA`q zq2AJ$Ufs5^nWmJl(`@$6;~XI4pV`%N76jPEw(vV^-|AGvZa!uO&3s!RQEP|z`TDoy z)psr+w>w<#p5$r3f{lvqaq8UhvLF>v6>Fa88?c#;#XilRTYI|A%f@dd9R=@0UMSKz zWrW(o$3LjX9izP3*kErFf_5e|!XAm}R2#G&1XiNgAQVVNV8-&p!e2)<=si?p2F1`F zynD3W;W3oQ3G=dzcwjiRCo7mb0u@yZ<3sUacWDjp3&;JUQviJeH#q4rphN^c44!%P zKeNCW<^M!b$3Sktq?~|V!S?Mpc>{FMP+{a^k&mJanYz9*G&ON?w6ZpyuZ7xVID+$%E+(mpo0mrQI6x@*!(E$_Y=w;5ax4HIx+cgX(+O= znm38vzl^{l_h?JkP1+%f$jrWlx({@2OZA_{)27_<4U1aaM>;$z{)jv)L_(V}m%!ye zIg%)Pn5lEHG}L-ZK#Q$RhwSah5z`Xf(}YDG?P9Ct5=7gO#iUc^T5U;fZEaOmRe8B` zzH+VI_xhvx-RCI`%F0K?w*dm9uv1L#qh`P0M<>Gyhk&GJsL>Eq^;266{Ai5wz`Vml zh({(;jUA*#!)Fvyfbg~eryL}dmZC&rJ^Mn^c4_hu!{a%cHN2UoG-=i$Gv1r8hTzWLmwtFJ$m6VbIAz_*fcx-29krkLs7Rbacl4T&6(+Pq)JScrU zKS5rn{PFhO)fxWgaO!{J(hi$3$$)~RHrax<$f6P5ID>!*pZhUo2g+V>^K^fjTiSUO zZ$qzo2kIA>Yq-R4-=^oL1K7a)!g_nu)ND~QUpY3ho}M3)EK6NN;yN|BXa2}I=I*4|`214kJu(fxGz0hlR6P~->kg$|L#6ac z7;$IZ;24(>WuD3-@LojTEM~K&E2mj5fxLTC_9)ANIv9cFf`Q*c^*}4D1xoWqR$usY z&0CGt5{Mr?m1&8gR=~XS=Cc<#{Oa?-$!Q_epFCjh>^To?wX8K+9_(S>`fEEF8X8B( z`1NhLBaI7IdLYF|4~npyQUMC3=SnWk^65D|^LV48boa8737IV#`kHXpxSPJvp646Z zCPc?;IGNq2xNv31WaBH;(5fMI-Hr8pByI#2Yci~=Kc?lcfA{K18Y30e?`7)~t>+Z1 zP1IBpn%#>%Tl_ZnIv7X>EWBlzU&}BOHWbnVA_KOhBw$P5^uBke|1w@#Bc}r@5lu@Z zlQRZNKKa1{Y8|tbS#8#rG3uwck5-}T-}+2PS26Nya;O7ZX>0u!N)|)ag%W863p2Lq zEj_N6g|vI@!uZUp8DcPICfmdYKToZ+v?e4pxUh5HhcB(RR#42tv=-Ku%5$- zLZLGQiAUv<-%BB`7BU|~Vq^PX68Ol@ssD1)y0ovzg9dfq{`H0#bW_8`s2c}j^1Zad z<&)zLp*1w^QP__kM`2Gtta!uwv$$ntg*H@T!O3C#H%-9p5CnGvKL}1AY**;YK@iiq zxT{BLq|$8e8u%9FP=0t~^S)0_O>OD+dCLmu>C^0I9vb|F_vHSR`G2p5Vr|*JdaQSm za-iy?s{vBHi$RbUw><-LQmY9luo zTQ5eM;1wml427NTu3`ZcaY85Vb_vQ8drE@?UX5~#j=Z>Vq|VS=^S>foBODlgH6v<)Fb;5ys}1m z^zaGh);Drr_w6F_+o;*km3&88wX3LtWD1=o<=}Um6`@n3om?Co+o)N;slvVeENp;AMf`G>Gu+%#W=mF)eApaG0egkCq|pVx3zvmzXy2=v7Y~E+Xpdkn z_&KuNyepJS$;1GetusJ#vA+-@JB%62WW?tdVcc1!!v7Ju%AgAdn1(i^yqZY^#l{3z z{HYa8E1KU@Bs7~UAoiB^C!u?Llir5q+1*t59*Olpxl}Lnrk-yKQ19W~y7denf;cA|>01PF&y7 zHbH->=5lDN-;#qM7YU{5Q+hnP@^Dj@KVB5y=c7%j33fW-<2~9mmbb!qbSAP?SSfKi zMX}fyUuoJsjN7iRj98g~V#z(xY{wWgO?mJ~R{ z53RGm>=gA5zaY>idw(tB<>V^KQuTS8>$YNlW^m&u>Zz7;sKEzS{|}idwr&oKbFmdr z&wRZKtV9)&M#a0mJvoDL0WAx+F_q1UA`ICuIwe#C0nOVuWw7bTU;~EsSyS)#1(|jmCk##63zRE}rGEW{@^tz(uCv+Hb`1vUR z(8=>p!(&@~92tL^cb$dEh({mjq_*Xw)km;^AKrJ#{zN7Qif6a|4lXus$B0bsJNL#5 z4`e=fcX*LaQY2Uz3;z~?kVT4ne|!0t2pYF??|nfne?-y3w6$+d(JA&wa+VHFO*FRl zwit!?z@(ts%*!WzP(u1VPEt(tA*Ua}QdMErxh;m)8FtaSL2Oz1Azz;;z~CkHJ&67H zbR}&)*&`UKR*qBvOjv&TpkT6YOsG0=Sr2@Nd^%?Q6(QF57tS{e`J*tVF^j#V6eAZK zTF5I&j*L53gBC@arHr+31C-G~Eln$!oKrjGNoHKkg-CnkD>36R%ZK_M9<{X&nK=p) zM-yZWsFank7iiO1RtQB#B(+3($MNn)P)$-ZcDb3Tj*Clt3ZwjTyW#nit@S1WGP?VgSY-Ay@gU6u$6XBM{eXuDBK_DFkF`8ipXqE0 zEPs-ATZ|0tJ1qT_=*6Tf1*8J#>GF_vN*z2FSRktx1W zZGZI^{^&%bmT}G~`3wg7U(W+*F%#Hp1$OlL` z_7}JYn859Fcds^3C|=F!bdWmHY}{#Yl~ks8EOa%{8FnaqkeYdUVK-S968H0oWE)eC zn!Tqq5DuZK6>JV}gB*^){&>b2A!wWn)1fbl67+lBaAn0wr!`|?J_ZoVlRlXah*|*0c`M7N z%=xTmsZb#G8$dxKUsLnoQSsl^JFO&C5mNdatC?MU@m${8826u29&%uBj)E!Gs`4MI zTAWQ`GG^w<(fT(9jTUShSA8y{}R=e}J4LAz4 zYT~~-iHQyYg<08M;Vu@wUi(xd?aiR1_%S_D*;1^WT9u4`=P zRgv2?Ag=${8q=>Abfo{*0*Jl}PNDm5#rSWl=pX;-9|+W3ho@4ZP(7vVFAEKX3px^Q zNHrI2Yf~%h6t%6N%gYU8!hjY=x8z~PGHk`d$)lvMj1GMPfe=4AaHkF;DyD#{9?TJg z?#M~aVj!gO&gy!f!+~->E35pc#MxDgLTaY^LAAr<1Gl4W*Vl-yobZ~6LB}y6bsz`^ zbh*@qluu<5c@h z+;~Ck8**mqY$q4bcN!%NzFWT@Kh3o z2^O80bypfx&w(tTVD3@1op+3c8vBn3e8&4>@S95&+li(yI?!(@IN;9~38R&_)y*$f z+J06ndJ8(#yw-uwXnE8q@^MGZLGe~SC3a$!r(#xKuJHGXrH5xpNzeyYw+r2-mq;Y# zO~TDaGWaa5A!9zvgSu2BD49q+y5aJ6CN_01bA*u>eMJ`slMnX@dB~IHi34e^hECq6 zVQ|~@O_P@Mtf^K}3%Sa(v%psP>uLgi$N`Iog;+I>yr@aSr88ffAM5)cKhLmR>YLui zMc`~(e&2*uhB&PY;FF$*g~LA+H|UFAK270D%d?-qbbY#C=DrZ-9K&Zqz)*fzdy-h| z^uc(}`xbLtB#bkeE*wJ=vG!Tg4@oJ;IgNeL#FS*W&8k$a(DG)BKOhA^HKFd4*vp?= z=Qf;4J?~@=WmDYZ1&I?ls&rr|$HQAUV6On4GsAi+#w9N zTPo9*m$06iQX{>^0rRn(7NU{0FIkZhj2X>Q@U5dP`dJSGP-4s>4jZT>_C9s{L|W7n z&s1G-1Bv=cdzckC1k=iLC>*moVj|S(E|>{_YG-c%)qG;4DL5oP((~?w$8jwh8}KZ` zUPZwz;?7^8$lfI_OrOTiS!b32J%)qG3oQkuP4u~Dm3sUE3 zj&4K8=+5F27j?$no;D~0)iB0w)<$UK)R}m#UHS~*k9(^o>;}X4%{*XyPav9D>d~ec z(EfVf95G}BKr2>D$4fB(^2SRCJjy|SsWQS41nK!N_X|N`$?=)g~TwqsA1h`_ZTVr2;M*-j_eT{5+>jV;@6{3 zNOPm%sDZ7cZ?(6b;9n4xw;8B3(l`D4mX!};=Y4Ng`p3bER+|x7hw8Nwixp8YIZlwu z^MEmCP*0g7s_nant~q$|7H|^9Le08H!{?r~BWnl^Ws_kWtOoT^hcb!E;k1X((G6>7 z94Zan*^d|JV;h@MqNWaQkzc^?B*Bb^Cp%?CbU=zlMDy<&TAlVh9L!NnBhVAD0b3#8 z^1ca;fiK^{VU)c5NlIRP=)g8pnr# z0}Pmbr~2RkW7MsmZ`eVBA%5pn#I@Ch!c`Uew!P08*zR=><`Z|1$Rs;t=kU`#+OI-n zRn%l6nm1m^0e4D`P_nBe!&(?4jl~o>jXz94o!=ik{p2F*0{2JFd@3Y}XQRDg=`llS z4vv_#nt;wL2kf;H=4>z$fV^q_4XpRq5;%IM8ul3Fp06?9x}JAH__7^&u1#P84mmdG z5zHuZnAcHL;#RMC+N48AsC=J>sZzE7EsaZNe0gU7P8}*`tbEyq-U%-1-)=rXQb8x& z?Vrs>8~zz?aiXH!)Lw5io;FamsHv0GADrO<3lkxJ9|bB@29{ zJ~BM(m}g?$Eu|m^?$^DZdVmM`BbY=v9{Wax=l;tpxw!*N;|5?|1CH}{4?JM;qJ6jM zLl3}5Y~UjrBK{M~47x7o4(w-u>+JhSa1{1+pa5O$x;nbKU(j(Lv33k}ec-?*!VIz- zf!6Q|x#1>}Di~VY+H#Tv;^N|pr}lJqcJ4jeZkxJ1S-d)3;JG7IBN6ty2kXlt(Re8` zF9QEC1q5b}&K??e+1lDA^1JY!ivsXI(#seBG`-3S%3LHZ*Q$LgvgbqXR^#lL6-Z?pjM~83-wUK>);EGYQ=iT7LoDL>K)9%zJ<%R}A<+i;+-t z;cCSt)Ei#$_y2tU|Fapu-9Vk1zxjrfQ>Ci2rD<&syx7B3Yr$BFlPQF%m2P8a%8rUFjQS~TsBDOnc9abA(SI)poJZrCxs&pVB0FtA@?ygIT0KJ-*= zuz52y?TfOfEv>|cdWrzODpGZE$ieO z^P!eUep1$dnqsX_WBiPwAk|)(mW+g9+^m|EnYmH5d%UxU2~>1!FXzk_c;+BY{11j~ zH9+lOc!W-pHs0`3U!vX_zxnj|I?jc17yAtz_dy&P#KKur%YJt@*%x|~{P{TGx0os8 z0(U$>z@nNK?$&tz4(Uc_Xx522hw&8= z+LaTX93V#gjE&yY&6B=h3CiYR&s3c1YLFX%u@czyIDT`LoEkn8h@U4eC+^ z&{cgU#a+SqOhXos@Y{x7;SnCt%xIiL=Ujn7A}+-ST@yceGKUD z`0W$cGpV`bty!0gn&Z7syER)8UNZ?^ktzo0m2@r6NTC-neDP(6=EbMVkH0QF7RdPm zyTF*_0);<$;hOHbqjDHgX$@xkRA7nq?rZ67LuQbrUfpL|h}#}7{9~DfK7(A7FCvPv ztzj#p)EI31h=zJ`&yHoQBnr+{f5Cc2y1nUku|SHsp7Anuf`fqtv@HCq-I$Bc_9IHi`qKpUKr|IRnLr7<)eMK+m~rkXxGaVCOF zkyV?ALffEN3R_jr){!P-$g2i_Lc4)*G#rA`=`hA;TNFBXX^O)xONR(F+pR*))g$AY z_d#4CFzte;EVdeQlj7^W@+_dH`#5DTJ_25y%w0O*e&gUDuGFa6yX}w(@jN!r>gl!j zp6DUWk_nZfxkxs?Opa5cpWwk@Fr%btM2khVNg>a8Z-({;B44bm6QUs8J*aiMT9@Gh zFvvQ;bz1qM4Y;Z{{gq#>P-~iBC@n%X9vcxO**SkE%>v@m1~-+$J9f2?R+%fkpaL~7 z5@en|3q=s(k_1=u@_^_Nx|+#WG}2CPd!oxMO^Y#!(lT)tu4~3C+MxkxS7kPFF@`6}{I!W=P;1TXgkTng{`41DGsrnPbz~hfhflu1Za-RPx$Iam{8Rue; zco|*`kp|^#zO#W1ZgxiG8V;*dj4yNA`0;`cjlgO6G#jW`cprJ%O@~J|T&P&T`*Wp^ zlsw+Y3UfY##-OXUh;sJ?B0_Nk(6i+z?A6F)+dx^k>z_DpFueUXY^L8akK*OLc8Qah znuz!Zx!%%ykVSyUrCQ9VgRC@87Qvj@(=8afk2`^j0v9+vKNzuq#H76@9=6q_AsIBp zJCOq&9t;vaQLtAsLFEl>pbRh%7A#q%P-3CyNE8@6Aa0{5IDHfxarX7Wx>$U17N=oY zF;n1ol#ZHFkovb7Dq%&aSa}n1lPSJ~9=CYpN`GWl`qK!|Q4u0ay6-d`{5)(TvE5N| zXfEv#%<)x@>33^i^m!ybQQlezfVgpm_wpbzi(q1?oOJoAJK2;`aCj6vOpFENlD^&J zUGQfZI79EDMkiT8b+8~~L5M~JT3KA{iv14ci~D!SeihwoS3B%s2%JDJdxliJ;r$g(pH4$Peok&0_{7h!;Ka8TIAh z1pP=7D-Nf>(%kBJ>92`{+evVy)+C8}YZQja@XIXScz0@Ps!v7^Bou$x~HN2D?Eiki|! zyyMk4c!xpi>ib62?0coWEnA)el#ZZ|W&qkqxt28PuT5Z?|7#Nf_HncW?uuq0T?*YE z`rFm20FV%9%m(@^&>hirZ|HA-p8_QRU!UG=Yex<>L;3fs^OMH*{VOJf_J1Fr_tkNa z``gh#%&a0fV4&N(v=rM39J86To`0~{l!<7zBh(Tb zh97b)`{whr9cVAqJ~L=-xt!9ADpP`7wvXL6^`7yY{_a*N4M#P6eFCcYKdqbo3GL#q z=x+Cjb^@{G@3`9B5s%}~O=TM|25Z}1-d72cnc$0sZ>R0B!}AbZP7&W5y%P*z?2_|u z3?D*h*+ETTf|bLf;Df(k|3`=)!AbrI`;!qQwn`d;rmL5+v~X7C*gkHFjymTqRpss6 zGp*xL0pp}D4W&4|v$88CEsdlk_@ACB6%`dt|F+q$m-0KwR-e&xY_)KJgNy^+PM? zP6#pO*wrbV#Q#O#M{$%68{*CR$|TgE_2NXJv+4H@Uq|J_YM&yAG|xS_u<_Kcg+5r1 zfTW^+U>>^z$}Zt`^fvX9`q8`AcE|{~w~r-h)l!a!icmR~y-&P}_{ zx&JcaR;($1Yi{@hHvuJz`f;)5ss+9KZ~|Dc-=h|w%&ttx!9_dd2aZG{Dy5JGG{WbO z`0^0&jc#%Yo$Yn5GtoZ2?;(=>Am7>P&~WI{RlvUJIZW;lWCrWy{u(GQe+TgKEBL#K1S&p5-Y_ok;k;WcZF#boYG}x!?+1Vecb&_8!s7=p&5|$SyAk z^&+}MBB;Rzd~#A7IEb3fDF=-0Tl`$+lRSbhqUb}w-DXnUi_yy^0M!LZjE@Us<>K39 z0~R4j82+lHR1$rHoh{j$dtsUrtZ}FV<}`e~YMph@Asb%t9n0=O1QtxJX@8d}Rr+m*hpKsB&1(*v)u-W-U)SA;nsB81y7K15^ge<;+ha+c zZNH-x4k1MW?zAJ2Lwg@}%aIcV=F4BGjc3!I^PLS9etO-p_71 zwZ0-?Wwj!8GM3acTl=Y|D|7aBTO`vTEcx!<^3HRX{kM-TLj&&u(y*wpn?_X<0O7@0Wbp=OCZy6mKnO>6Q&>?F!*s{{pmflj`>)GYWPdbNAO(~qd_0GP}NPC zm9C&cJoidh0m`tv{C11f$oCbD3vv;#R~RM@mLT{QLqr36Vm zW)=ALt9NLPUQo4@EmOTS6y?{D73!j1fFpVvodvC_62YWsBoCdUp`j*w)XLiY^1j2cI z3V9||O0}{F4YA7}9p}ut7LCt7e{|@%n2J&@TiWA-yf*t*<1-*QvihXuH9<=Xv+rAH zsW8*zQ5ZYX2g{=G?iQW~q`;7Ayt0)}g<{}qF#3`uPohCk7XNPuQ_``#cch{k0RWnL zS#j}TTSXDu{eagRp}%ShH9%NN?T2L;hT+=oG>1oFUyXA`msIef;(}iK2_;jRvoCKn z_Oa*)DZY9vd>+>8I~)XPn7@h(nD>BvX_DZ!J<3#1ynLLtHvC~ssvT*xaS{F@y;=(* za0Fc2P(hOI`!Zlx;z)CM{@XU>jUv{{Y{M5k{~y@19J4kxZg?c`*~Nq!sczxlIVKrx z8$YpDQBpaK8xi2!JL`+BQ64w+gmVs+L%^v{d4}NJ5&F%Ia;~ z7tW`c-ed{sBJKLtvga?tjEC6;X7k1OD6JG&#NfrqdI_o%=7SqkePZUvvw9UUMrZZv z7VYJo$8H&G+aC&hL6OZ!)*A(1L8FQ>et$6EbEOnu;P`wOAfW1cK+S@+KXgxd-2?jA zKW`!+qi`=6o+BynOp>O^7iy%-0L^u?O786Y#xk!{Fn#-u%nd8yZ_t;`7$QM%?NGRk zo9k9r9|Hy9C%L$7MV5~ear>XMr&U1$_H7(?;$MhDBoeHg`N%`o_y@=lTdF^gDvz?M ztcq*g`~1wUic6yg-GmUIaYiAEq0W&VWT0%9xJRvg6 zU$Y1|mrq z+?_K&J37foT%DNq*LI>-ndd&{(KFrrBO{Ja}IUOr>jLK!J^Fsx+el`3T27VkV(O5vm{Lu%$T9 zr*PWPPsOFzqQX8r60Kom5ZQ)M2!?R-()NiD?{^C!y8WRtH}6>WFlW!jsxu;rnp8ug zQdMr}bRdk9*2l!a?*AF0yI88jXq!qwBC(c}rQKPBNBm+}?ZNnn%5S$uE!WfAfoWM4 zf){cWAT?-Dxz3A~cA2d-mDG1&w8Bfij z7y?h=b_Zbk7mtG6gG1rd_g;gIg0TCg!RBidjW}4v>UzJMk?l4lf&0hZd_L*hKTUtZpJ+V_8{-SnsEjlJN8Xm>`oY&3KB0I#hTo-s+CU&#(WuQfJX?jz81v zd3j%)zkK~^OP2%7U`ps`o%m`9uW;w~=F?y)m4j;aH0GPnZQ<4z&@OZQ-whM%9~1iT zzFO5gn06LYRL(DnDi+1 z9E5Ds=UN?zgGI?#e|EkH$FyxoyG>R9QB79hnIC{j9o85)J$C-`S88|AY+^C;7diq{ zgAQ(nK9tVHS8=L1p`S!3PqDyT@}v1>H+JoDe~-eA7D!tb`l$?spNdgRsB91W^Y;C33fW-M4yzun~gJabR$h zh2%T%o>2AL9-~8Pkh8VxurSf(;X82aQ@qolOYfBW$z$I1FXOsm+hp6%2Qa$U{GZG> za2X*btm=kdp5IqCEy+-j>zgW$fwou7=#dZd-1J~d$ZR(nVaYVL3N}@gd*rrLsrLPS z{^@%ICx@zuX3~E5u?4&s3*+Vyg-shUJ2|}_V~40!h{$f5=9=%@zHDeL2Sc^e%|?DU zO8Tx(6Fm6;BL8)yg&Tbce7GK3n-X>3(d}k)l2V8DEWsV z;I~hgnx3zCI_o}jK6vkP)8Ut2D_0Ju*cc>5>6lRB^;JvQdgdRD4K5$(mb5NE4T z@2bSTPFPV;0`V26?oWE7o#u11=;&iWukRBweh=Io`g{T#-#iMJZn`Ew!Jc7S#f!~X zZX*2h9y+CR=6uM=w35eOYf^U|kV_~h^T}8#7;c*4iiQ5q)*`&xyY3?m#v7Fne&?!~ zGr{lfc@8VzoE82f`H$+uo4@s{8CleVJe?YMJG#U7avmBZR*PBHh)(D~LyELKG`=g7$wyo+GFYK*5ofa!O^xZCVKTQcQG|+(1*}bMl zUV#W0A|t~X7u4?bG&s<-?}sO!g~ZZ`X3 z`lRF4KP{lMgV7QH8|c4lBtaN98YY1TUwpMfX9!<~^U*jAH0(qho$ve4^Wv6PWZN~u zqSb>101#Xy6t@B}lWPP9`ns@G07HaM@I_zM^*=?>IGO)zkIDacq5zOWE7E;rMC5Wm zR_JiQ(D;I|QYk7HmT>0^JR%EDFh0dFouQ2BDOW_T|31bT~RO8F-E!3DR*HxQr7sG2w0bA__%Cok=oJz4~sA znU{BTY;0^~X=0f`@q`8XHvWX32sWHBW>()F~1q5m_sb z0ePb#IB3bqf(LtWYwL;m2T7hk!ri$XM{udr^mk5ocLRyxVtu|6s>ebJX@2#NH?sbU>N0L1ezelNwsglZj@Qgsma-0aR42IaDR)wUeeT+q1s z&#x|?RU=uzvJOspCO+ukC2!w*qLCJ z$_V}8rP5m#SjqrWrW5=;qRX_fkfJJ27gq03RcV4Wq#?7*&}nVoY(X8wZY1(0=|A5*Xamn`=tedR!DTdj5G21W}DcwtnLo(YYHFSWR8 z4J*?{+1Xt$`S+@lh-L=M>c+ECr3si^wVM)xW)rK0F9N4#D_qJfC5)L)EBkWaB(M;D zCm^t1&~oU2f;*kmkk2g18y205ULl#;R6xyoURXtpMsC&6&(9UyR-OxITK`d0M<3Rm*qkpYz~0cl+i1dyDzIM90)MvfqfF&slwaW$yEY zMkJh&z+DPDi}T(64uQ_SMmmD@vbS#MiB<@(Kn}s60q`ri zWT+xPL&}z3`c!8Nih5Iei0K=iMkRl7E%Dua(l@!8};iW+{_ zdK5gS4LM5!lZ#U{XoGl^|M*e@p+kEpu9wr7_Hek1m#Z^spd!@DQjn|rK+5oyCdKR* z_#;EuF})jzN;3ig1`@V`3ZZ9zY`{5Z}z00=XSewnc@!B*HrGo5T;e+!_RPG3_>w73pVJm+2g(l$p3tjMVM49rR{Ra`!(2a8XmSc# zasXNe0tP`YXPB08U?xawCK^Fh3OD6Dt^1{GAALjM;_Vk1M%ra~vfH<*LFF`sPuL{& zg%6+7UUH5>EFsn3gD1dZ8@#O3jrNd=h>ZRBUZOK-uTrnkn1}t%^*EE9-z$g z3H~w^y?Lq9dAS+8&8F|y9%CO?GXtYYU8gqvpZ!4|;X2oZ?XOOvRZ`&jp+tLiem?Dg z+Yq@NuW^`H6>s}Re#l`aWY_xiuSP)cw}9siz1KusJN}2*;NpA#Z1-ssJ_?J1lMYw5z(`yH+hRDdBVN@p z)><<=-!0Ufx_v{hyQO4;?|@YKuMGgnsl6PiJDY}}pUJM>)S*Tj4OjMs;@CwxU>J-r zf{GvgV=_Q;%ubyx>Vco5A3J>+zK31`Nx)mfqR_kQrS__!(+LQlOEX*&fs`H?w>|Fg^>@tz?6VLe;&lCL)MzXs%___a=wo&+MMg00Q zlbawfvcKo4T^mG2YPTO(vh9o8NOj^+#wK^b+=Y_|kWSB1%CTyy+c#_@{b`lgP>p!^ z&l!i!^sjH!+Oxuh=_Mxd-^?PHwcq?IA6CtO={-GM;A=6So@A?B>fF4zJ#9meaK1M` zL7j$?q|x{gFB0JAHR@Gz%wf9PqZ(K9IQ7yUiCqUIOPkS{f2jo6s&HkWNsMNmb}@`= zT+~|?{~8j#kwn~vw1VDh^`O17Eh)^5E|*mz;NeqG9k%UwU4ZpJS_EyROoB#T8HSM2 z1)bUcwuJ_*r8{4st;j~&g@$Y6Fyx@+r~*5GVd!Gm4TAB76Aa2<_;#rYDrqT^qqGg;#+fZljrzCZ>B zCdA*4Iky&A0MY(n1X%*JE(5w1Q5BB1V=|#@0=)J1T`=GcWq_8h{TDTAE}K0(=sEx` z8VKO!U+C?+ao=s*A3d!j;QuOG4fP`i5Zo`PtXOPC|0$YgM#`7>e-NU4de%KY8v>x9 zK19IN|EG;L9&S5v;H_y4ZOHh4KT(@XD72slmPLBy%~=9j@VhGfnF> zmPpKfyt*$W08H=hfvLj47yPOJNTnAnbNRz;o*uZ(r44q?g{w7Gm5zx!XUxLJRx*on637W@fZ349Zx(Yof(CXy+YMyuhMNk9Bf~^4| z`oQlsVl5`@sL_TEz#AkVCoeDW9r{Lfo&Cdiow%7jM*XY%YWYB3XLVIo>w=Xt*#$eS zEM5>rD&T6haoRF6Wj-`VJ6O$LPj?{vCgIXNpWOy$kg6JU*wTmXxHWrInTf{Cg|vPB3*!#BW}GR?cV~yyC;6|NdH#YqH9`jmnN+BOUj1<|4ih7Dt&}^I9 z9XO3+vTEBo&A*5HF&qFvw|eo3K^?nHH(pNQWt>+T)95QH(2ZV9`CXidA7-k|qI4W6 z@gA7zC#R=FNP?I!~`;vlaqTj=id?aP678#cv7RCK6q9DGgxEyPT7JNxx#VGigE9{Fbk7(g@=bqjru#ZTzkBy{`)u{?pR&wNpRxn3Ud z#!FL{_$hgXOYqVOb)ri$*y;4-caM$IBT3jRVV~GoxU&RaMx`X+lMsjC2!3;_k!u^-#dObf&Par1Jg zK>daq6<H{n%0~zr_!FVZn#@(eNwuRJj2w28|L+ zi#wSNUJg{0^Tp#l2ZW#8j+}XW4CiLIPK~-~Kg6AKotsCjADIUu>!~xRj5qt|Asx9k z##x+?)63)YxUosAXlkvtRy5o*)Lb7-a>2$%tZ4@0maQ0J(%}SYnJ(pBrtM8TPS8FCWvvxl_dA>}a5F zc_;2Hij05@^yt?@OLr^ZW@1k}GQ4gzbXP8)3KhYQ76xb#N&$KER@S^M^bs#d=|kdY zX5O~eOJJF$_F9nyMxYxYoQxJTb2^7Md04%XSvh){MPakSEMfhFGa?@{VsBn;^7)}=m!%&eah`KAgCM40&60#7wR{^Jo3gSp z;BAgbLvX?5i+qbs<+TY=_jY@1LAJ;usjnS)Bd6&@;;ha^Z6Q zQ64`sI@-!bgMaS;H*j0w-i7YwhHGk8!wsC>u5}C_AG-`n9TA4}W_b=O|4%VAZz-E9 zf88hi_C1UJ^{Z)udMsDbe(YGn*Tq~$TceGHx-~<6&v=~-P}a#=`sKi>*`mCfuX-=T z(5*ch;~$?^F~$eusKR(RmZir%9V_O+&apldWCh*PTFGqVd~9sHjS0kc>J+Bu_B)8* z7GSNavtEphR(;L0pS(_*I=-QsMLA4LUinWta?xY{>`AOuTR0r z_QVG4o~u8<@;?Wk;T`4R#(Kw`s$dE^u<^hfgpmUxYMCS| zA;vimc!??6pN4inl`s3j8!35GNrDq$#h(xo>pG_B*wOK_vCiLWdnw>dSrL6ALpwu<>r7zE6~1YqN0YY?KY2&j>tRz>&Og)qX?frr`K52Io#L+ZHLmUFkYD}S7)>-pk^Dmxw#x zI?La;no+rVBcI^n#Eav#>eX=#eTSqhm}otpjWiD+v%A#_fAEGjVEbPk`_L4Y&b37X z?$BF{Yli?3nV}6^_5Cv%V5jYkn{YJ%-Tk|< zc6bJp%Ys^EekG1IUmO0_KR7_5bWlZ49jC17=)xKlaU3NC2_(%6Qa+uTnoG-(|7u;| z<*;EmKm+#uz$o_H%J%&O2sp`tziJMei~p}@`BJq$V$dE1jNd71PTt@;EiCDP|KSFZ z{43VAPD`C#sj&cRd(p+A3yJ<2HlS3p#My1X8R3WqtST);`u@X3@Z1|c7zI-f27Q!- z-itw(dDsrhn9Zb=sW^hO3E4cKW{sl5`&Rl>6S*M62$BuPpLs0C$JnN{VAl+vNd&Pr znpw(uVR&P$cI7u4v27*f^tKQ)I9Y>#WN!Ma01gM^;krNm*6SLFKB9HCFLATopK*_4 z4n}P6vsngkNmiPZyZq)m&#;3{$`8(G*UT5jM%`neF51kEa=i#DMvmA;~S!U2Zn{5PYp@f-s5rGu; z^PJbi_wai=G7SWxB;EQjLmw_LBMPo^R1a(Cz$4Zz0cxUOL{UEh;1U#L(7iCoHs#9p zQ>vBgHzjWkP^ZhP=FrDldN(5wvFL3%jf#MGVYg@VkCIyw^~B0T+1qASKULv27UB%% zK!4wp*5oC|#1&9-LpGY26xBGy$sSM!kx<2=+n+>=aL-CB$Dn`11spT;^;M;HzI|ol z^wflfQUjzwzk-t_Vhql<02J#`#~*%!AjR~=k|;zjT?UEI+yDxbbM9^f%dBdR_f?V| z>@g_(&zu%A#F~fv5e%4!K z?>}qh=!&0~GL&YSjcb{sMmG0nom5Lw^8FM0Y^xlE9zw+GUEmj21#9<3+Wi;5Wga4@?Vsoe5kI$b9v#e~3{KnB*))c7Ll%%lK> zhJg=qAMmHu9xIamhwV>Ca@O32cp#>xrg0Ua`gK^_A*X*DpB>vf%t)30#1EkNr5zsV~OJuooR`71f~y{W!=-FU5T&S3IC zm>H0}_0^M`dj?Y{WpIFEFyt>u|~tx#`ad!_|Mh zZn(L91ba0%!dKDlhQjVw>KABo4P?$KVwz}|mM2RB&&}9nDdN-!+z>e-HNTI0gb|^! zGj~DKp~Ta}`X}Y(+ZeR|{%Xs|NYd0MACB0iu_NQM1KXM$XITkr ztXe4OUPNO18QO2$KKoIM^1dooYv||w(eHDEI12z`@I8{Ou%Vkt+;R2FQuS_4&PMI= zA;`VlR3Ur=kyL$&l9`Wp^3<}ZmT;rg8FiJ0xOr-^KwLZQv7cFzwp;Cse#SHDXLF0Xd(d*y7;t3TYW@z`k>`xpJDM~#IVPk|>@$!O zSmBDoVx7?!{~?O82DMor8@yuRyO&yXdoeU4aJsS%ZOf_2;_dchIxd0_i7K@9(rPq3 zk9m9HLNHY5^@GOWm$jfme(Zs~jZ}67YE(3}rbRR4)GfCiKkqD$%?% zdpaoIxz(@F<}%S!pr1*3*h~^8U}g9CBxxyIUhr382P8C00OD?1lm^K!}DY|V9U6+h+j&y zy1bV94wt;&M-q*9ODE;G<$t&~ggM9W^9erTPw;MLuyK)x4ULwv9G8m{(JB|3-i5JV z@MgU*OF(oEJEVD{KPb~W)zJ#4dlQ+>!C`f1@jaTUx-GDP%Jkk-LK@+z_c@t`?>upmAK45$jfV+=g{k2O)w8_c~u~~;7hZi z6y-iL-X+{yeb^Oeq0yE37;Pog8aH0OXu+3zM>52h#WAYxn+D{&Uh2e2y~=e61g7V{ z+IYA%ZR0-meYUfGglPCTS4HN)OKbHIlE;^`6$Z|Q-u5;W@ZK5qEYFmuxqVQ9H~|hpqSO z$jz~SvEog>lEq%TQZC))pEvk0+*h&)(^Rr3ioEbWv=OPUr*)jHDgX(W`b||Mx%K0V zD0Z*5q_rtFjdtxO%6@Z4*~BH!LMd**I>R^^`3RoPY@T%Yd^BI72^;+N*3$q5Sn)Yl zHOC(F4*7573CL1O3r?Io++~IEN05FXpM^To+~br}F+RDs*S~dboQ=`{%gup@G%Erl z>`=k}s4RHYi?P+^TXy%5bSrS;tea(>{J~eRJX#4d^YNV+K<%48FXxFVEpOI2Z+3GG z;e%*MgyqH$=vbgsjf}RDTNaTg6LMX5nJuEwB?cZ74?O34P6ZEscsxS*{FSh@BN$%KwP_t;mm!)riV0m-kCpAA_d$ttj0YwGJl zqKQ=D=RR<8sn@^!0k0T)MxGae&eb+DoJJA^7*~1EHe8KryeG>&NrPQyK3I<=b$H)x zfzEw~PfVY~PD5p4IM51z+9x?Hi*SIn!UcpL!iWxCE$9QH*|s1Xomr_bE@3N0bi_Tl zu0zOWX-);7kmQgG=^8v}gJ&$Rvq-}SzN{=ir6Z9a(&jyI8;n0_C2S#gVQ56k;8t5J zVJjio?DUBw?=%|(dW(}eIFfKjZvIwI+*m1Lw_ct&8-&7VJ#)&iwnhM>(CN20h3>s- zs?|u*=J!06X@gS!?Nut~G~kq|{aymgw2q?e>)5FmdtdV>MrL3#u>Z1>SVV5Y zrV*(?P5v-T!0nQ8g)z*V$v2$qmqjOhPXytMtfZ(L#!xNLps}2;Lhq2B@E4?14!tn< zGJx>Ez%{!yx{J}I zW4r`^<&M6!Nh+vneIi)V<0Bs^kBkR zi_nddfoafPr3g|Fy+G%R3)L8QJ{~<2qe))lgQ8zVp(L-b(O_F;C6csVubO?As=MQ} zeLeqTHB9jHLmkJ$t{UzKu%WE!6~@)Z;c+P4qqlz6ymDsFeI~Q%WGmT8GVG^2?M}dm zRvUfNnR-0+JGx~e9m2?%ILPt7ARHkd`WtCwZLNxXI{{M#c(a}n2BfKJwf#Zw&|`d( zAq%#v3%!cW2}4q)@#^1Xxzgh1wi4RwLL*2mzSlp^oagyK%`xAQ%J-#P!A2ql!MX=&%!4;a~0_)W7@OR z7>=--kNULX<~%&zU4!T32``nis=~9wQWej>CSWPbz+_-=kGtHV0+;62bS3eq#gYXu zzqxL`pdf$Ag{^!sH!{OlD z2=uwU*nt6vN{Yv?pO(Bsy~0vMV`Gi~cYPMNY`bfutxb3PMh*^I2c+u`Y~Drboy_nV zlKxNA;8k(94*$I6(5FM#!HLo(5wDp~5dCvKhk+2o17EZEk6V7&@$OoB%bSn|3Eb{z zgv0YFDtL71EWep2eeW3aPb_{}^JwX*wHgck%wy#vdy2v@dAtF~O!aFVb;|83Q+7)h zs9Moe{4*c37pk5gD68NH7i>ijlw6!c1ZZS2r2aTWg)=F(6Ut%V;&Q)$GN=zKoL!f} z8sh4MA6$JhV4UHE^n6eCJa*r$7y7~7P2c^UAS@Cz%@l zMlsz@%LdwL2nw!B_^#}p3$u%u;9fWls@i>d?>JV5%pfkx} z<6mYX3f7KK;w_bAZi@D<9#uWSg3E7_f5rnmj@_O(9WR=8MF`L~=Y2-`Bj8%5OFG=s z0l#eQs`f%eC388&i4T!vl%ek<|fs%fe%_Ws!wD=4re0qg4=?2&i$v& zd40h+kqkl!9T`$z?{8ej_6#np2JO+mHH+>=Wt?v(oHJHy+J&v1fI|@aqi9zSQ&|A> z{}5}OVq3O;AouNtTfLoFGQ$LGtcp^dNMG0$Bb!>>Ub%(YsE!KqDCH)p} zT>P!Ff6FluSfW2lJy8kx6z<;c{!)~wukM1%)|X;&PDsg*GAAza`!VS4;;!<-?w1_= zOrpKDHF^Mj<7fbEy{h>B8=s5Y$=70gBU3@rpi3^a``>;-ieFpZ;8xV%+WVH!+4iLo zulkE<;#~Upb^mxLYmaun!DojEou2q`>0`u^MI5OKCTyIo-S1gJQeCB_I;`C<(=Sst z3(3R7fPnE1kvxME8Tuue3!By=1#>I`LqLNjmFA@IQzc&8zcq#u+=xN<)A3!J@Z zL5nhqWBH;boo<^TzOvEbr2Q#Vw$60537x6LE3^6OlCKZKR@#Mf&urbTk^e+i^*Ces9Se5b zW6)S6uPpWv@80iG#?ep#ZaB&KXrdNBfihgBbbwL%BR6El@e$Vp4Xqp<$_p(Rv}xIg zx`)s56tQ@w_20jLuMv1&rjs*}j^rnslNB{!Jvt(_(dLIbsnMhFhA2=6-J^p*Qv2F` zcJk;BHb1H>GItz9Htwm_3Qz@W@j=Fw+UE?EHu@8g?jZfSPP}RHW{x+;5XPL0oZ;0lUi;L9v zTtl~2mr4L~NIyUAEi0Bv_dM2a_l;7a54Nl^Y@)kH4|R>`3Cq;ut;*XCdDYbJeWIs$ zW^v(zk~fmu#C!N_S|LmHw>Uq0;=!%+SS=~)RCyj$$KH$q+{H7pJ zxeLbpZaArt*UEMJxs_F}$u#fC4N@O|Vi&;=GiqTUNbjUY_t1=sz7r3REtDBv)v-D$29Lno1U9);^Ay$SY=z?5qt3X*r;Waz51YR*1TgqWMo^a7 zz2H3W4oz>M3ghkW>Dk;R#LAq*dbPX4o?Mi9nnH?FE2Wj_y_|v$3c6VB-a|mKjE&dJ z&AYULynyg^@Jdk0A?6q@t?@?2D0}wbSP0|r?wKtMvJcO@_r7Z}3298KzZNk=QEE=P z6G$)%l`KKPN?R;X#T<22Q1z#8-P_=^9_}>MO1FDuLUuVmgrARB4@BCis9!3k_na|N zS7O1~(v@R)VpZr(O%myn`JfuF3~Vn1!}69n$vWhuBN?HH4lu}$cJLTKV)j+AIG0Mv zy=g}+ON}CT*1imVZ}bR7jcOrNgo)rUB4FOTx-1vT2&dq_$f1jy>k<&j z0EMToDLreGJG|`d_<4HZlL3#vJ5bjebb-B3iMN$uF=81a*!2o8WDFE?2oyvO98T+I^^?EDZh}WqOEXlXo zaJ~_ca+5L{`7`%*z4ry|SMFQtsI*>U4=(8iZ%Sof{{zE@t9DE386Q;0aT@=i=Q|u9({8Wp#Gz6u_fx#DI%8EpzLZ);+_6} zA{&8LI4r%MM2dp`nY-H;g2`o57^fxrR{qqa;e> z-SxO%Gm4fVp=O1WIPN9F1S&N{rHME+ZQ(Qv^EF1^$cPb!7Q+|gA4iZ~Ai&DVox?hJrhg@&buN0an5a%E zI}vPJVzEK!{PePE9QLK|dtmdE^T{jc4js7=pV5!qfMh-#VZFhkaPi zS#K2gjrR*?5X`_Ws#^w~JpEDU=$`uutv3Sv8i792Apmo;1m=cMjstRL;xRX8g@iv` zX4FMwEnGlQHECrRM1AqTlBuKI!}m>oq^zhcGz)+wFCCF<5 z&rUxUFyI*&ED@Exd|KkP`^mcB9)$S#eP0vYC#Q#>-0DpXM7$RP~IqZU$rSW_Jr|?j>sFXo; z_9>s!d+9;VY1ybfL((iAyZW1uEI!DJYdc|Q4YG92eg9_=&J=y-)B@&ak)p(vo*2^j ziaoe1fDM15<8gje6{DBCeP(sXHbxg6F4vh;GP~#e&ux8}j#KJ!Hu7^)2Yh+eC*Y6O zA7BDt6rY}bqLX@*3+^@XjT{GL?K1)tbQbd~gRT4-mk4OlJ4(ly`_Fu1AcPOyH*~bV zx#r>g-00%w<}Ml{e1%1Ne}e;OUq5qu0mAH!4cs>OPV74i4xU;6%J zPW{K1fs4SyVb8M!u$oze%hux)HwT5j=WK5;H5)F)j+jbR*43@;{p0ZvXm8>!=`+vM zSXz#Km063W&P(qN31YMtW)9)Iqf;G5^Vin_q5(d6Kjv*O>oTVu2+dQ;635=H?hEoL z`W}8oSEcq}o!-{S?pKN(SxGik5BfmgMv~WSE|}O=N$s>tT<-KH6UBSr$L5c7{Q{s1 zVy(^Il^21TLf@mVs2;a5VYQ%38+d*_{MX7#6H(~Ajn!35L{i;Mp?XN&AjvanDoC@j zQCgwaQTW{Sa>451pP)vN2=#vTN_W@xb8822?fC0mP-xRhd}ZPmdWcmB&8_%kFelk& zm%ZRIjOX1YOt%y@*-l!av*TR)r%NDzAo7iKrL*b%x0OSleM$=jEy|+hI5dtExb8%- zZG-}jyhh^!9l6KTxs#=k&%$6eTwSJ*HcOsG`uEcaXjk?o9uzwBJaSG=lv#A1QfMn0YM<930 zYG1l%UV?-)CR}Q3V!hoCSFRop>zY17n_3E|XiZ8S^udTuyQINJwAz^Js2(X1t&d?> zZN!oF%t`m23Euuncr8}`kXx8!&T z_O4b?>{SLiN=adUk7J>3_GI-KJ{Ul z6CRG5GmIgp*J3uqv|dfVU;RAQCS~IJqYoGfdY+z+>U$h6eL#NN{LV;93S7T`;yjFN zr_;kNxic#d*!B&(ZN`>Xdg8kcODgl(Z5n9@bMBuYRq+?lYWaqs-jgyK_7Jn~{L1 zo6kp0mdg?9S6W^9GOE91y$fG&WQ*pDto!29BD5KtV0}v(?sA>`FeA~0uNU?tU=G^Q zlqp>B$IAy+fm>d_Mn3Ok)$Jpz?w@oeHwapOl<-3x8bz;cG=A%4c`0CNFH+mx$&=l; z+}wZV)+qJwWtr7wmE5DgaigQ>k!{@fRUCp^Ktqj;EN(7#p6$%cRua|XvvKG)iBff* zII~m-fw=(($3rc|gO&AP_fg@UQyZP)<_4FA5+ym8q{_J*Tc8~pd~N(&q1e1~vbRz>B4GK>b%Iw_R3YC&63 z3qiobJQEDMS=FkSYkq))b|i!Ic@KruYCRgR)o-)AqHq>0=~MzXsJXnZVk8__`yISL-q+ z)FbyN-etd1rr)2hRusfmiXZc*B0*wz13bL3^HHSikcvY6`~mI(o9ONgeM&UFa&K6~ z^t}c3oPjWo#-AZS9gD_BpC8#1`#ga^bS&W9aiXt1nR7Wrl9{(hq-qJgzN|*e2038l zj1ha7#QYRBie`swZf;74j$=*s_OZ=UkbSuFLEW01xJ}p~gl#+d%^R@^i&CFO75apP zpl5Jqk3%^rY#=y+sPZB^L;+@Fw8Bzqkb5tyTbRRLY?qQkCt&U17Wzx~-JDq7#5XTn z0v{UBx5ihu+T7i&2t1|y#Wx<8O16gx_2)eHJ~n0&BUT>f%ym;mvX@oHEUuTq)#@J_ zg(**+NEBHqp2DV|yi#KlyARY;R}?BO!uV(Jsp;cHBs-SAY@}m@St+OUUEc@$DvwL~ z!IdXDlhTWlDB)(JxoC9V={`6jE>Q;cdUm>eXVHo$PaPP{`ecfqBx`$6&+xs{89ujx z*zlcSo%m+|&HlR!t;q{5g;_%P2Y2@`cPAn*iLohfn-a!k1fMitF+*Oyb3B1w%P+(< z%J`!oAr9Sii_%eP#Gam9;|3=EzL;9Q7$H#yup4x3&i(TDFsA-D?4H>(L-IWrmwJq$ zSo4aU-KzSgEz36WvBpWUrgm>>`rvvx!?>`Cl)@TCUUCy;1AesKqF*!oyxAO$$+=_p z>-*q3mP_-IT-9r&=Cf12s+@Ein-q4)hJz}w8M9*X+L|&o1+js(m-)B`1`gy=R}{!< zwLaD?Nu}*@rIVW}qpo2iz;{OhC$9tBj;>}!#dI6@-q9}?2%GrA1M}%(pGz`_c#cdA zzl>vtM3MeO+@R>5@$q)z&!4~fOat2rnr#beyV2CVuabSZ;Z#D@(mV>A8yGEEm8^5m`ON~BIM4s=g9 zY%1p2KPb@Gb^~KJIIbRuTlHhhyWQsjvoS6*=0nb_k8J6`{FR% z;GEq^O$q1qAKe-E!>4ohHh;V&#H-LK!IspFTL}s+Z*P~CEq(jep^w_YaoO%m6gqrE zlvgURtJCeWOVjb8ff5XiU@rzYIy^Ae&*YnneQPXIM`Rq+QFhnt^&nAz9c_NI1aCQQ z_{(G3HIOtg_Lu*?{Fyu}3dspZ54ge(Q3R@iLKG=z68s-CD+?F|SP2+pBci9E2q*ye z+Wc@2fELf1J+WLnu}?GyVX6+1F*kV#iD?NL?7c4q63j8Hr*&$(k+9;oaaa4hNsLy zdA#z>xP`_Q)cnKY0tFP?FDCqA#@=5#-P|*<7Cni6jNRKgh9R@`^z@QbQvCG=u7sYs zW2zxCSdo(!-K{%;&zH5VsWVoL!-k<9sG>efu^4pawU{DHY7Cl7zmc0utnzVV!IQjq zuU@KptPSr3;$mq4iyZktEY)4?&reLO!&>F$;-5Mil%f)nFk`e#a01KE4z*l|b? z61Z7#QrNIc2zpY5b;_*KF{IXkcK=m12ifn076GX(aZ`AfOM&6rICRbdmh_kLClV4z z6pUma{H_~a+dz_jToc8ivonyykK5OOR$7m0_gnZY0(j@RAkyt9Rq3=okm3J~bVHdr z=)QV?ulYM%ok~TV&k)CevtK|Wt_c3%e$UkCvq}HY-Tz$vbN9p*3k-`FJxNZF4M7C* z)ivd;wXD9yxw&dI8r?R#;_P;^(YNrG&&Jl))}|JmH+p_*ga?`Cw_IvhMwdU_5UX41 z;ra|biQC57On-aKe!hX;M0wr}c6P1P?!Ei`G>bj?>+Hm|6#Crf&xtA|%=>2~H D?{hA> literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-addapps.png b/windows/keep-secure/images/intune-addapps.png new file mode 100644 index 0000000000000000000000000000000000000000..431eab4f59e4e7e8e4aafcf334d4b13c655a08a4 GIT binary patch literal 28911 zcmb5W2Ut^0*ESkOL`6VQn)Kc~(u;*65C~v-fI)~R8y7Y#@!nr5Qs$Wv62o5 zM9>NXT{gLP88}lCiIV|}EA|gG9)LilF~ld9guw6XFCQDagFvLs_`ge(+)rKuCuyL{ z&!M`mc2F-%H(St4ONa|p(8U(YEG{T4DD5N`s0jkSbXHS(@XQ;%KCR(OH%5DZu664P zWFNy>y8dyZ5@K6z>a7=MSn-XjP~bt`IHgm~D}EO4w@RLGPj*SA)8{h$u>NtwM19M@ zm@B`|y?or&Ha8;MLZ$%71_@{Ocs2H(hq9~1|K_IF(1>SO(*Y*{zpPS$uRAE*&D^DC-?xjb&GJ^RxC{=MvQHD6mh3Z|+%O1GmEEec`Vh%fb_+IIXwmE2^~in z6yPU@bqABt@6eE=gtSC4avI6`Q5eJWBHS$$jI{0>e_>o*{nyVc+Zp!{Ym_^~F`4)# zRye9c@W2zCN;f1qek~faN*iUA)er{@bo=wilQiK2B%YlI5!$vJW!J6OwtFZ)`xsno zYiWj8t4M&gH6sDF>e@PAHCee`V2{7iktO2IRxAk3KaeF^l zwWUwlv5LbxV|(%HpmkI@W~GF#XQMpD%eTk>N#2%QaL(^Rny!=BX1~R%Fe~KIZfHHx zmmtjGiCSj^bKk@PbpA__oy_#3Gx;QOF14ZVU8FvONH97%P5!I;!T2$K_-sY=m8V7rU2X-oQRzH>Qz3~4mIP5?+ zLW;#+Ri$J&I;q7DmKx}IyEAotp!n{>F6KrD6r zSw!{iGxIP&5%oG?GP6&7*1lfVgIaJM3}d5aDo+$<@YpE}UW6Sg?KM$+>IJSYnq4;g zp`Gw^uX*Rkb?lUERJ(N&o%sH!|GjU7ONXawhoUMX89oC~g~G``V0K4dd=GX!Vp&IX z9*mtd{YEUiZa_%@o2w9sd877>!{}MXqvZE>OoDhh;Ko$rhCaEDr43V&=_B6Hn5lq@ zLRUzL>7C-Omm55@-jYLdXH`BcF9!xCCUEqLxdQfYL$EgJ(J;DduXgA`UCN;p(RnYh zsC+2LXpBm61yl$9e9I$oGEXQ3TOObz!PvDSl_KcBTLfb)nQAy(T`%s5yfu8gxAs;{ zrZo&U*ptN5V*>W-a9mJ!G?Zqn0L|_XaU=-CPv0xv%n+GAT_BgA-7YphekI4Q7LK_$ z046h0>Dzs>vs<~YTA!FPTpFJmh1m><4!FTUP&Sva`T;XTKKTb^7gl?6?SbK!2!$fE zSX^>@^NvS5l-MyGGsQ>6=xGl=IJueE`1a*0i&}iU9BcVk`NJ!%HMJu8{@F{>=T=v(iFJaEG>mbMZ ze*$=G_nyA-h)3J5&h#is$64#;VJ{S`{)_`{q;l=kc2Cvzsz}CF+e3lqDq4BMnS=RI zB6$6;_AhYEndJMC^}g^%NoD|B$V%V34*yB52aZv&iq#>Uk4-T2-J@d5A^gg!ek%cFKj}~@n9q;5i7O(AmkVFnAs4JU%X65w zLiI@v-xV)q9xKX=;I?`K6YUPHJfZszXZdz=kK?BrV2nCLgy+(JTfZWNl4*8+-JMF$ zr#4?(J{Ry%!T1HTv#V{VTH{*C6zM5Y=f`s$85tS4Vz139aun7+I~=nWjeGtip8Y7W z5FAw1+YNmsBog54@^d6&j2^X-ay6?6HJb|a#9NTDoY?7x7lA#Z@pSWK$L~M^w~{m8 z*j7(PD}WGCcirl)um$L_S_a|cINj=~g^ZRUBWuh9O{AL7-cxJ1F4X zEtJ(=ps+Fm6M#VX!Mgb310);*oDHpTnzs(}>_5VjRX2eDPe}PA<%RCaO<~6 zrN-9Sg8lMeF&{AF)E(y3lj}^4-&~|;$)4b3?p%!CLd+UBQtyYNjj8t|Gkdo7^Ei}C zfQ~w2n&#wi>2T%G;gO}!8taGhw2V8Fng{eZV|%H;x9wK7@3u`qwq#?8&vh<=ezdnk zohCZ=vfizd=ojRl2uN~A)IMJA?~5PVL}s_`mWc#-`re7IQp}{U_Yw&Zfh!d1p2L84 zcCApPsA=w>iuklV_T*ReNe8VnQJRKUGee^8_PFRy}M+oh$P_P z0y6^8>!>h{A&I1Z9JNRWyQ>01R+8@t66anSB7hjXgHleXa(&w09=co@g_+-I!b~V{ z&E}xQ&NBgtoUKslB=X@6IfQ+}&p}&xQIY9t!+RtYCSpq9Vm^fZBl5iRR6&B>7yGiW zQQwMVI3vtyZCncuBzmT#wL3GfdT}>E(cjONU$RfkC0HDH8G3=WX6e9&`Lp|cgwDQs! zgc{8j-6|*lz$NrIg`!&l+pPHnTe{i~WlOOi@kOUj_ZbgOtd*Fo6<2B4DphMy=eKAU z-j;wr#L(}2h>)AIXY0UeWJl zP8ZTZ{&wLZNK`a3Nk10Kfnkm{*2WjTP8_z>1y`HDSa+iK=Bb zm&^HVE#qI!{Phxm8Y%UcKP}F9?QsM#m zSHfTH;6aN=;a^~bS}X9}fS)X$7XE+o0lpc)12y|Fg{dGp+w(6TX_5o>#$Yq^S0(@+ zNMo`tc)|$`HgAxf#ok=}^eQGR!(97m!qg~ynC5~ex){)L7V-z}d*YD^N5=K~2o0w;2m=B5J*$UJtE*ga= zF%W$|I4w3N-;r+kl>?h#q}t@U(PBOF(AP+}*vh#kl2YUiD<|{sb;o)zt>m^pVszx| z#21QkmjpCsB*A{e<4;)QX4{@dEVJlEw`}nk8E<4{LXmy=LUQudd;Ju~g7@QJN|X%v zh^u)LpO^~W+Vfn?guo$XEKMki$J3erG(1j$#63F_h;|Ho5nM^^{pzmXK*gzZukrhF z4&xYGsQfGsJWv6Z!;&WM(YUA2rWK2)Qjm?Wzi6Rv-C{8?9lZRPcSJLYcUHJjW#Od1 zpY!z+z=34~y?)hI5jX&?1N*UEJH7OQp+(N-`P@|ZJ-WX&OFPAH z|DDM{J>nJhkHY?5cnua~!7m?h;s3QJO3B7oBrA#NiAYW#zA7`SbJv%jdZ+vIas@5^ zgw0*}ro*5z#~>@JDgu2{$6;Sh^xMBQosuhJG5Usd7Nz`?X9uHMcY467JKsRt)~BgL z$+s07`M;&gzrOuh`tCvoEM0mjptR6Vw$eJ@_oBm@Y_L#@`eKc#I8wVefzguXG`H$N zLgM{_q4R6#+k9#0Kg?!;jag0fPH4&eVutsAg3}!nL$r!z%*I+hO+Oy6Y z8za3$9uMRCLOzs+&f?dc$<6zSOBT7J8p`0e@?B6$j5a)c!=T4Jx$GeugPRq_XTDxL zWRRu@I*Hnva!K3%zK8kOTi3j{1gY~;Hz^_o>vs&ZZ%2wPd}l$?aRrreJfRX!h8Xtr zix~an$9^j+<>txZP3aHwHHmd2)`Rq!C$xzh#=~WH;EASXd(DD$*MoVdOS$I>jd({l ze;Ss*f0o!=o`2;Y?fTDM&Sy~pN823cx3GfhcAU0GPq;$gxGyH^bJ`+PF%JG1uL<-< zJ5f3MRom%lz&x||JqSU?@X5!gF4gUAk&Aj$&&Fa*wKhWG2eZR-bDyW4r3j`NQ0~Rg zk$+k3c7Dk80|$96AJ)af648}z1B4p)5pfuj8kIMXI^`Ob` zPq=F&)=1goFx%UR-xk4ON$R$bD8Bfr5__5c$j!UpD=+h#mu}E>?oR1hm+x_s^IiEA zrq3KvV-jdt`N9*ka5J1I4OJ@&!RbkwSA87`cUsw0;Ry^4*Moe+4Ic9$uXiapJl&h1 zH|Oj#Cn;#FEg zTFq}lW@1ugXUFC*AX@0iyf3DG+jM#Fvd4fe&NASOs2Y<7Ph!D%y%k5F)DZJGHP^K; z4R1pY&xp(`TXjur!TZ87kKdwrldy)udmjEkQyayl?rB}0fh);@&KXLw z>_Vum1@fRAWQ4o`YH;Vaso>s9d*jY9Q4rLff=Hjk)<`JXiL{QMfCNA`Gb&3UK>9cy zGn!YCVS^OtcVmVZHFr}hTf=v1Nl#XUP__NrnxY%B`e{acNtkHLx-c*oeLyfcRFdq} z2JO;W{)5Fv#w@=Y?D(KK-gJ;Kjcn(!e9BKcjXl2VyeU_ z3q?2VzCouJ&7B9`FDnXv3{0<22Csd*mVnl8mOBBFDYDn=A>Q46+zq`m2n5;Uog+Ru z3clkn_~X`q1q5YFp>yl4KEHS{Z`v&PNuz*t=ViwaxofZW*ElIP3>WNCdueoXKOZ3y zh}<<1(}S>Nh|lia^vsu=6-4{F1T0ezXu2yLspV~u#;{Q2XE@odCGxDdNV4cF09D0e zvi)WJOVSu$k82kuhm&SVns{%V`YSTNq8yF)^~_o~tIUVezlMPw^x8s#G(4lP-lP4#FIyV+;)5lE znG1LI{;CuYs*9k2BV3+ZjG?C@aM^d;BHC6a67_;)=MS3?&;3- zr3?r_8g)eC$-@5e0Z{JZG(PO84f1X^V?71&f4Q3gmKU^VEX8Hr{&o`Q6d=h@Qw0?K zOfeWwSFtZubUnLezHJ7q)e*{ac8Zy_jaireHe|6iQkh(l%=V4z<|S<+_J8MK4zu5p;(7>b3ujB_9IKDa|tZ9|B&~2ib zaa1@h#ylx@FUftx^(AnPqq2j`K3YKG%7rAUTkvQ_(eKG%qSD)4#aPa|WZT;tq6~rb z50ulOi5PVA^&PyMdTrVb%@d9h7G~ROGHc|jyQbi<9@Hz{s}=j`s3h1Qb%+AYI`C3{ z*ZA{!`3sNyx+MiO&>JeT-n%YokrQ*ey0}n`S-teuGI0K5oJxbbYi8fPR;P;C^o!0d z|Dnr&2Xh6UDcE%oSa960V1wUf;i=@`()Y^A>Dk%g_VM;saM;BM^CGWfd3JX8`~l(; z+$=3LFKeCcHP80in2;MG=n-$z4mr;yAhsb3sin1Lx&*jhagdxGLmUO(30q7lDwN0k z?LYd-bqBnEd(d+UFmg~VhP-Rn9D6Pr74#6$Dljs@N!!Uhg$Dwj>|#LC>eqoXHJJeK z^gyri9f|{%1kC$BZ~+n4y~`jI?b zvfoi(n%Rs(J2NWi%-^95dc530bW93@t03T{W(e0tbJN*V|3`>Roa`v8BAlH!wif5@ zM;R*7xY&9bACUAxJLOSAisnLeZ&ZN6VP>JBq95d5=B&#C2Z0ueEI#Xt>|sK1kY^d{pzG8T(a2!J$F8UKQ>@JJZ+7N z^o$T5SZ#O9BB3`Af?y_92eR}xe!*R5@qMzdB~g=1 z48Dj{J#S{>5+Zoj#-Oscf%9m^ti`h|(yZ~{SEb;52bY~rqd&UNfRt!o(A>PA=&_h9 z{!IVU#|XftW}tzdye1}!08tM#bjOp8rMT=L*{bU-Q%lO1Syo4bV?HhN`&is~`BapF zO|m*`lIe!rFX~$hFKz*5xG#h<(3+4opf=ai3i5klV?>XeKdJr!+e?p#=$TsTwPNk# z++svWfl+QCi$~5QvtR&3Adc}*V8_J~(ZZnRp$CXK2#6*dJgYZHFXMnGv_y*t(bF+h z6v_UJ6v%XF#)q3#Fz#^-KbDJxX_6bZ#!#+a9`}u?FA2Gl8(Ea@_cSqJ2K%(tHx_%m_y;f&NS$8XPdcG%LClX<5V^rl5L^NX}^ptiVnxllr9UiC(H{i)}!PBzu zoNsi+t}u!+|mPT{1C=;2;|Hm<^&;qDVQvtxKWj9gXwAQnQ6 z&2E;1I(6MykZ%`46$hO(wO)Lnzi*4yoAp-c8Oy8sIn-6HGT$ofX#xus;V_)?pe>$Z zUp3XM%-{Ng8=}GPbod83+)dFoz77eP{mfi>fFA(%1T4cZ6HL9AYd$YR3vW=xll8Bf z#9yy%aYy`nKJIuf!8g1l+DCm$wIgVgNjd=d{X_eLznl@V5Y)>JHt<}GO>t(jg8-WF5 z5Fvw2k>nMYH-7{^Cgg(O-#J2Dy}cMgcgyNwYplwfvHi%LV)Op2n2e1SyTf-P2Yki>~xza_$pZX^e;|C zApXarQIVPKY#b1iNmW)< z0s86^r-}i`fIw6f%NdPMugGG-2@uh!Hcr&RRJDPU(r>Bv-~`M}*Dj}Ts81pW*sAZ+ z{B2bZKBok|&U}FAg1S!JN0fqWaDP;pB0hY8$^!#PfW$(`$;mIO-bW}ay$1uf-C6PB zLo9>^WpmfYNJ%ML_ssKG+jLIO7{BpE#QMZDzk@{{puzGZgb)jg8O6#vv~yzR?R}n< zQr~!<-7=ssIDN8K-H7({an>qSL3HiPmAKfj)f2#}$m7iHC(9_$XU>0Shwl3ymNNxN ziHugBoS+~1Vb7LZ4x)t2l`k52ws7o{Mrb3*NDmIMsdCS2yxhjT&pQuUk9jJ&iSCU> zM(xIId^6DMFWMr%%^@lj7A~UT>px2*dH(BNTJfff!c^(TPwN<^4M0m8hzE$tJeEhN zY`PaSj=QaaAX7vhykjzt8<@0CTdO3ooEdMBMxQP1ukViq)zp>*f3d~SFf^i5T$3N3 z`AwBmUQUO%n=2ix>LMxEa6G=@!$R`SVcSoJE29&NEfQqiu=Sli#m2bu_ZDS)$V!;* z53?PAlJlP|3d_z8a$<^7*qrw9`@S`*UOgotzH8Qn(eC-HeoXXDQHl)GsSo%C6)5{- zgOl`X4C;GnIaBL)x<~NNwGoGo<2*16Y9Zkx`V_O3f^FE_ugo9)UTPaK@!xuJ`U-)N zn5Lya*+@;Ds)r_FBM(_ydPqqgSJbsj;Pt(F?^BtaA`*wlo;&x)L3VTI z5?VsNT`pzoruMvDJ5vS4b6_{GvAX^n^wOpl@N>lv%7kE>!cex9#tYLm0s=5AKY#z z66-Coox+E)_q3J47H@@ZEx&mgqm|UFwl*}k7VjHnhf^eiN6)f=ZOwi8P^|R{m`7e( z-@P#1;c`+HOK-BKD2i2rw%Vw-xb|eR=yJ~zT7(ldOwC*V<>jY<_vDK=M-+>;4_o_?peGJ zRZc9@id^uvGjG>G-{lI?jPuY32xVUZ6xPJ+h|fMKhn1*b;hqdX@2Zq&Paabcg|p9Q zx~qN`O(hs$0r*w8i+LE`W4+OtAw8zT`d4s|4$6wJ=DVSyrc2R22i*k$cEohN!vf10 zTbDA1FWD1~#AAj(@P1Q8ld>1!zO36jAVq_jnp&xbSMT(zo$Y#KpKmG**CzY4Ha2yp zKLkd?g%XM>@?T99()%4Ikd5DyI z*bR8mml;96-j(mUb1OY^;kL-#p$!|E8mJ0l`T3IezRLWI<=+ebJpLZiK;+^DefSx;=>cc zU9Q1kdvrk!WtkK6(NXcH{h6~G?uct)Zs-2CB(q(6d@ZpU+Su)UehTPonMLkLRwFqk z8*DCfIAv(g*BedTpxEH>@?bQ7K2m^b{Jb7jWGWKt6t;i1`*tTwKw2IT8_ZEWCIZ7i z)c{VBwyjyEAAJMXv`rQ>_Gn3p`Rc-u9N2F(WhC#!p7X0PZ;231tw2`f@9e$wDLCd$ zz8P!Otl0aQc0Rvj@+w2Sa7qFme=*&`f!s2V0ys~4_*4rfe3?DHtC=G8(8#_1QmKt* znE^E(+ly`{c~3^C_{Glg%kt)yb?CMfvhm%$X}?)vbT6)U4zyj*mS8!F%85 z-G^NhM0HWnTr(CbFC=)r*<&2iDGuiZoCm;x5uKm#+92PX<} zT2%ICLAb84h`ZI-_gQ5_LuP!p2!T!j2m`L|@z}$^RjJ6y0VkIVCcwM7PQaIcTmwR_ z`!N^8vX1KkZl%iy|K%s(UMDbKz##&)LHMe`Mj0s6*G1(Y17icWN=Cqpt^#r4>;E*M z5+%XM2k`%t_;~AU?-{-RL!g{u)on`h*@$gd$=U7*;eD%eUf4z^x;FJot zvMkICr(PI?6H^zaY-rR zv@y*-GAfEv$b*PW0y+5I*LnY8SDadaa)WD=UNTryGlW7q9~-4T=1@7RhpvQ6`Hn}~ z98OT4T3qX@d)xlmz8FT&bT8Jaw=qF2HA_AaDJ1!MB1Lp8OP{T<{4E=**dW6Yh-Lw0 zyaNxkea_3ln=IGYtb1t$oy9(5QC&wi=04URLpwHG^l?y5s~uzfI5> zBSGcxVrb+`{A+Uez-b8IolAK!PS%XW|+|#uG-zx zvgD{|%UCXOr4PX_rBIU~L2OV%Oemh7u7pTv;*`IBY$!~}1JO+Sd1tirz4~@oL1_M9 zxhv@58~vqA|Cm$&SX4fzGY--wp>OJ(&QC`D^(8loaD;j~5mV;J5n&=`CM6`=Qvt4a zEPn)d0b7?`3-Gs*F*(#q1@6~en0K|PylL^6Q5(o|?m^E`vq0E2iN3newnw5dN+evI zoY957Y~;{FPpzuEd2!X z#m_*u!9SGR|24?z{AF+`Aw%}_(6*b(`I!^CMjqGR+@>xJCfZ{U7R@Ny?WFTL+Zuq> zlVX1uQw+ZYKO2j-ce&3mwDTD4I^1uA)xUX{jH~Jo^<^=84=90Eeq}>LV$Faj`xh%$ zXJG&E4{w}ZwyIk^fL>RPVS*Sa&5548@?(^^fD*9t!6ofgl*dDW&AE;5T=%Z<{~2aL z@=-B9mIW{#uG5OVlg^1D0rzkWrVuG30|G5UDN z*vQD}M#KR|dIOaw1l&0oFU3m67)qySG9G20{_b+utag!4tH)PR z;Wp}Qz5Qwyw~~^@UGO`Iu!aRvKl_i{Z1tGSRK4V}1xr#tyDr4sBJgm3fcmOxbC0&d zvkxDBh{LX;EK+|!_b%_KFAJJp7gV7Ld+*h5?~7=?MHb)n+k|`Scw{m7S|%s!Wfah} z`YOs~la_VK} zsSZwadG!5!EhJ4#m6cVP1koh^1{2a?x=-eFO4j-*`h}CN_0HUete26o@gy4E-rn98 z6W6(2+%VynIg7hmq*xD=fc6RB3`Oi<9xGh|n!`ASr#qwTgE&i5Da3x}&o{TMFU^dO z20dqx`eWrA;LZ_uM{IQN@$RAOG7~MTmIzriiA4q<{W|G)xnw*YE7l&}Ob+eSE)AMv zmcEh}JiF|5tAoesC5=zBYcS@-bBkgKS6j}Vo~=|h{=kJllbxI#uim@h+pw8$IoSPH z0q{Aw7RPAWz($`nF8Gv4UuWX6)5xwjHQV5r;>r4!uya~Xr){nKmf_{reHW^dX`PBi zBA)37y&@@@%8TlWr!ytC{O0`%7Gc?i8>14B&KhZ4s4Q;(mz1Ij%+4%KtlSD7T60w- zzSD%Zc4T{MCg40U&}Mg2hm~z}i6z-5QpLYJ`r4al_rb&-C@m)>YQ9 zqvvSG?B~8NJPHusR>BYR)I>#5(RwWv$j3$=?gHRtL83e5&2Ou^r(U*+zf7VW-}iXG zU;Z2FmI231x$=D`MTGq|#VZK9K_eOW-3%?eK(cV-1r6WtXFrFWqy$5RXsF_;s@rdy zN36)aLaZ9FB*#^}UXX!RO?-o-@)}%sWLXNwI0GwFODLm$Xw*DIfm$7kR!rhx>V{Jr zKok2dWuGrT_zyS&GvO0#u34G;0~6+GQOs7SkTX1eUv^e*k?ehyZ&BI9M-QtM5QVmM z9DfR>G?Q!@SBKpKlhJXHd`Q6g)C}L2t+|Wy1jmYMzQldFh6fx8;yQS&XD!Wdqfpnr zk^ZDDJ(??iFsb#hbvQ4pE~fsV)K#$JSb_ap(fpSx^!vY!roF*lKV;FiFsjd^L$k9r z0iO<<`8pK6_o5QG1_E9kEyck1_DqjhF8xPAVR$4hKw5SK0gR{Oe-HrTFQb(HLH^&P zRG`HVadPrEkgG6G{HZGl+6zPE{0B(@6g2Q>FFfF0H^z`!-il>Yn7`E=)>mBZEw#k$fat{eZc@FG3#?^6dGm2_U%K85FxKZ|ue zLsP?;8cuhDo8tbsC6ZD8l?-k1-TIs|$FRW(CR$4AH$_sIM6y#{$3_n9g2PxC*%P{I zpVl1Y_YjlIY5X0Z%TrY(5-lrpQ0*m5BP)j9ug3bF1t*UNZ5-LFw}||onaIxCd<;rQ zsJx77#SuFaqs54dHR$mLz7r5Pv>iKDE0(8YmBk%%ie{F z7KKAh-DzBQx-wicqMPhlE+(v0Q4c#aKaU+dzt6w=pf+;!bvCWae?7IAbYXHGm zzLn9?nDYwhVn-u6Y90)2`AMJJ75Z=ELYTt-8NAiuN$>sQaALCZG`HL_ckBN~K91IC z{epBdDl+2Rql?B)kMd#trz$At=*fxDB;(%?S~HPm4W&B2=P~n(xjluq`5L|(N-_Cx zQ>EVm7F<~43gY~U>g-0CG3<;j^GSj2LickuTeea?)PiZGlKJ_cawIHSK~T5ye&G}Q zYD-vmzcdrwW;XyuQeOYUfL79Awq>*WZt<$;3)(-Bazw<7ZI31{r|y4)w>Z2> z#i0Ku*Nj_#6>goDYZZ;zx{jSV%U11xzM??$EUO9eOiy31wN+s!N z`$O3BaAh-(@vWWP1FH+^X4CVErmW*vOT&#k)S%P0j7JOwUpLG2 z7y)`YQK0P6{2d-$CcS=jN*Rx7u?vqna2KKczu^}Lu$V!8h?Xg4PU4)Oe}~&l>Pyk5 zD$mhv;;(C_uetMo7yAxoPnkPC6>=_cdyxB%5Ww$WuTFx~;@^9}O+mle`-1r4fqUfN@-G!4AGjwFPqYh+}|R*4E5UHv*(PMLuv zU={8Ip)?AR{VnrTCZ?Lg^}3a7p`@nc_gRwt8 z&HGNWKYi6w{^zts(U=qZDvtv);pt!ZP&ZP7KR5j=!*e9b6#7L|adPagr&paxTbDnY(oWGIrqV9F*H{u5ftiTmSmIF8~HRn0W-e@~CDw7_C^a$UkSxNuve}I?@ zdfQS)OBYp`TKQF2VDlTRIRhZ^pB0C>D1fQc9grkE29T900*!tvM>`%w#J4J?qJHGR+$la@Z&5o!gIB1&Lbjy(&1K)U>}H#aCe`+2xA@9C3nf&GjPr5G|K2O$N@7=| z06X3WtLvDNdx>n?P7T%+F9z7lkb?>8Tpk>fv}N~ya%l#M8&gTM^s)%aHt8N+FPKLAc9;k5n^I} z%KcObU2FZ9*AOhncE}z>&DAT|l1u^c@n#%>UEztP85!A15?P;9dG}roFfQRj4PgPb zw;1a=u-~Zmj|%MK1BNgQnX_Eg_mF&85cHkgJecVcg7D{m#AW0QZ?s|_++_j#JyoIy z=jGXKt`K#RB3j1DqSI3|#bBO%Xsx?fTz_9f6y`Ds+|#pU{7>Tmu%!&!wX8ouIhJOc$06yivm5 zRAFHRoB@)AfiqNKV!Q$bfa8Ca@xMD(dkbl*0BUjo_5YnY(EtDP7?W$%;4s};p%oI9 zQJ|3~;f#*PN;ouEBsq=|U+A4jv1#{bsV*s_9QV0OJUgZ)qHgQYmM-DNU=y<}kh5RZ zd|v~-XT%=Z{4?s>A_X?iRSX~>`fw(J5CzPR0=$fzq0dC*rLe0FUH8%YXG$4ss|wKc zOfz6`T)*WFg$01wH$jW?Cx4Z4{Q%NK5E{N$nfMl0iN7B2Z}bp5Pc;UezabzJAJt(T zF0JPxM&Jzu*6-oLAS@HVGh$%Aw>E~YUCyKvw)jy!8<=J@o5W|Zzdo^3KA;fsJE4m_ z@>Q1qc9%)v`ToYFP~(XkBZ<84?qi+xcVr4H=t{?Gm+52yV^4qClcVLVpydp&=rbu( zBvjf8UOnTRZx3b)I(gMk=6AeNy==Bq+<1ml2*9!9Jm;E&Gi1H&U=4@!5l+M>`;)Gg zEt0M?^np{Ajs}{@HkE8Zwc4sBeg~2>-V0J@bk-fwi)Mp$URd@<*}GEq{q*PFJAIPw z)}`V{88RN9C{KigbB_$R{%RChc%Qon^9@ZOkAf zFC%&78po5w!(Eh?K;O;q=5qUis+dP1H)|K7W!gtVoI~yuec$f39ubRt z=AFdJ>p7xlP=CBRN7o6g1o8bzG8V3SuEhZ5%`UvL0=B*_13oWTr@|GO)Vi&3ENG1t z7>Y@Qa}3Mve3nQgr(U8oBx%7pfB4o__;tS93}G-BT?Dx4O`43yx4Os#P7U12&OnQ9 zFHFQ5T>&{G_h+}C`R?PQj>|@h;vm?W z`eX#V$MZVRLTW}ymnlH6F;N<+1QdTt97cG%PjG9+W_Aag)8f2PB5EPC-r1v_W#cv} z=DO#cMx|DSp!ah~UR_3u`)}**`qMGbPX<+)L7>`@b4nXgXz3CrfL(m&Fqmf z0s>Ji*XWe*bwb99GFrr~ADC;$^G?XL04sI4GoW~E=C{8NXSl6>JGtDZi{dQsVA?Bz zON%rgFiROXsfTf_$`nn|h4!c;IQ>?5!0OjL=Ev%ae|`{D49YKECAs^{A>nYVgDFod zYjZ3t?2@fN0|HxzRVWG%yUjI3mwcoKwu?n^8$Fq9JX)etynOnj=Jk3(`%jgI&jy&! z$`MqCZ%F7QVr!uoo!Pe45{ss{hlJ_ZI%a*AGv-#GQotDHeW7yTv3vued-wF%eJ^vn zUBDQCVB(l1(l*a5Gvu>yQpn^O zt?x9pzrW3=e$stFJ|+B=Lw8r0q_p!k z_v{lYA+xC^Pzm`{TR6Z1fu9!7ykXIiq}*zpBN8w~eWH1}T_4Nr+6WL#hL}H<4Jlnr z6fhpO@E!i5Jzm6>d0LcgiSr52frSobRF+u~J&8 z<$Q|)NC?F;hrF~v5j6599-2b=>&5uVvo1wZut|l)hf(_D)fqo*Wx8EoDlPangH2n% z^fLXsvBox=7sfd%BzyzoB6BS6zdPd;o{LAh{C=`vUFk5=og$?5W~ndDkIq@;$~?Fzy;uJ`feoVO@#qLXE+Uk{~$$=2SOIkC!4U9(@Ag%O^8bNxZ6^OZwH zUPlZQ8FR?2)imwL?*}t}^<~`_xL&b=R(MY2M7{78OGcXaPAp*WS{8cx!8Cnz7sZ4EZQ+K~bg8ONK z`wUx*+`O-GeLo1^gW2s0>>$^Q7MN*Er6AV6OIOt_ z?gGjTzYHzV5E$n>`!-o>O=K&Kebpo_xMs7uHDPtrp1ft4TMu5xg{~o z8wYGf#>z?;;sb#vm;yIj9u8n6*I2=hS$t&{Z!wz^az`|CS5aUk=Q&ojT|$&_GCwOk zu4rFHEytNVVE-kK6&nVjHK&T~hE0z`q{s`Se zfUt;2*n~Bl_#RVlsvmJ>dN&VAr7$Cc+8RRAlp^oT`L7*b%Xm(UywfZO3vrWU^!oMV zP23YVn;bZRtdZ>>wvVzD&khM-5<(M}cbU*b46>f@sYw<-+Vr%Jax}MEpi9S*;NtsAe58X0_f%Hn1DN_cYc%wzY<7IZj{Ks zgt2(48Cs{MuuFD{&Vj9D$THQe4D19E9vc$(S^1g$>uaH~_qyn`t#F^7B|O*J#eLM! z-lyaW-*q($bO-@GzflEu-s5K>;dpN7z2x+;?Ph4SRpg3@IZJl`vyXsdYX4{=049*T zbs4sQu>Y7wFjRQMU0_H{@w6hUjD&=!^!lS~s0#6$V+cQ5-FJ{Qju4FZ+^O;VUh;FUDCm>WY{TUaHTz_o`#m!Y|nxT-M_n$-f_Vz2Tru_*}`+kO71Cfkh zQla|_>SsUy=(S{A@4JV|%W~D-D)qacbdLb$@a>rzV>w$_!@srbYbJ zLOALY_SHywr_*6<)cr?9Yi!NCYKFGw8icT=!iLE4Nr+O3O{>}V0%3zKye#M#6lhC~ zVw59+`I?9dN2Lrrykajhi$08h_a5X7*@+LM?2-nj3D*3&+}zRk#naSt!q%)y=kt@n zH-}B3$!*3}tqFE+^HCfQZ=d^zydEKospT5VSQ`zARLA4{B}}4()Dr#a0snLbM7R7) zEjzz&MuRdh|CYKe~=EuD~(|Ub%D4r5(W$<@#h;H9m;yD&@5ILR2#69h#S=s!~!k zZy-`vu~DCWhMtmMU+J5L{#LqEejZ|12jV;1AOHB^-OXVOo)R9m{TVuMhckMibhxtf z+TMN7-1vg3^OX9X3Fpb~`4aP-h|2^oBv)KMwiOU95!}30@gy&3NT$@9({r7@%Be?_ znxHrL%bUvqaZYxUFjIr_edAq9nM@|1)|M7^op=V>{SRgv%c3?cX6?lz@Rd{?zuW&A)(yZiuHgy?BFIS}yypU21}gFU$e=Fbl9KMGToB zMiRAh(Bkk>6)!JB%xpuzWHRLIk!`KNfT3}fw+;G4hr8~PIw(mupP}!8P=2t>>Y$tY zotyft-sce#(8hN>NOL!4m#VA6YEls8 z3DriNUIxc(lxYMumY1`&jcvEWx~%y`J&>!Vg1zf|I*j{(vmNC^$v`}e+SznU%u|SN zd`Tm5r2QfU*Z8RyWoH(;lz}#@+8#P5I^tj|pzrb%y+}s{^$4OS^GFPmFLnA=tUPh8 z!i7&MW-oVFh>z*sWAEM|{IE^nN0t)9DZ&$_p@yy9+E>@X2I3)>PuT2+e^=b+Baqddt|*^^TN-3 z-jjDe;vgT3uqkfdF5K+^?Ab-6s>NgmJz8myi@`H#Z`xGhPx19dx3z5ARs+w2` zjREUXZPVei^2FX;LfPQ58EUN6<};~eiw*0iHAZve`%aH_7KqWIIxh1^qnVSxO~Q%1 zNuc%FJ>L(*y>G+{e2PlRDNoa}FdmvZKn|RdQMgN^y?h6W(PnMe_*7>vi~@Lctj>!v zPRKgkO=UrODct;QbEr{=B|#ol#{+rey-#Ee3Z}8);|*VoZ{2faQ+#v%ASo?C3rMYn z0C{wy6LM#9TE&`)y(Pa$sD80Mpk;e9I4HC&Oj*KosISf@P7x|51IUZFM+0d4s3vw>@y2a`OX%UQzAZp__zl; zasGnR4KaImc6@#aA^_F6@4B3x43UmGcXxf$QcXU92Gm1U8azUlo`R+b?+;@(Z@dm%>u zOkSX^pvu#AAkuSBWW}QXE5CT6_>2f7TT|3}F+%nWpI_gfA#dZ14Bx(&O7Ff0+_-lY zexB`{D*s#%el`{qI4yIuHMrKO%YEm@qKkUqKB_V3R7h0AkOwY!6B6sC!bJBeS&uF+ zNq*(|m)u&Tk!O)6(Pagdw&P`U;-b@=9PLsg){|$GgFl-e+pV(Q zeMZoQ4&W$8XPs?-`~X%Qj(P202BbRxD?$kzn%FU+J9C z4vE_}x-(*savPa;>^m%uyiJHU{6*c5)QlW;^lXWFP`Q3 znCK$XzEY!wg?zkN;QhFk!3>t2$yiKtz@v&fbA;@CO@QchCY;blrv9u}44w&>yLg#V zRKxO;mGc{7gwJ#0!2zr8_p7!$Lvm;{8h43dBUfH!8ZFdsqj|b`!6J6l27jCad_OX} z>WUwu@^Wu)9H#7*>*X=nXYW8ToM99VNH@bD%&x#`n|Jcl*4(O%}q|c1vB* zj++NyqXmh9h#u(jWhJfE52|;>WgZ-#_{YXK<<Y}Iy zke2f|l^1|0koW?;9*IvdzUTu4M*yATQ*M}1cmBDE7iAuXDlea|PdVz3*jTRP^)0D8 z-(Fw8c}`&COD;H*QCzs}|KbwRCNV}EVa^m;ow>1I?;ik#^5-ka%hNG2tYJ|0bwmpy zH?A?g0h<>TkEA!&)i}cgy)uiJm!~%h3Xig0LN8unH1mW99^qadA4M!AB%n~JmaW5I zzkWT9?C|x4`fu+ZZLYQO9q)3}k(LjBs@xewqnU#STAs4Ko0}gAeOKv}So}6<=^Y(B z{lJwSoI!K5{Fn>%f7SNgQB7^Z-g;3{5wU?vRY5=ykcjl6f*=q1f)uHt1@tP? zgwRRof&`@sA+%6LI-w|sUZop)2_XHQAl`M~``-7y_s_RjtOfg=Gkc%CXMQt#&Yl?! zze@MwDb%7IwrABFDSq&xAmGI6W9i@c6zm#uB3-<1hjc5tX+tnjvL+LKsQI z;3;V?r;1*cUAJwZD=M(>P!GL7OkF5!&r zK9NN-Kl>$wB>V35vBmObfJf?|;LT|~SR_rVUa*^(Yz$Wfr;ygrQiI0Y230?(7!DS0 zcaNL1g0Qdj!1@!8dF#o2RlJ(7`kq21K|~g7qy+mo^{to>Sg7uMafdei2EZnVU28TL z;H(G=hdTq-y&B7WJm_}}UYHNv-2=CP>-{+){V+F+{<8Sc_w<-`8-OQSV9dB&tqZKcb<9>ZBj9HwZR z3#CFKiCWYzFEz^s-y;yQl`!UU`RFo`LbFH{;KrPiB2A zHfM^z2Y)|PCf(tg&}BT6?gEq<$SjS%u#T7B-&uWN?!?%j#Rf0tZCIqm(mymDDVi{C z)YI{kYo4tM9KU@wcW>6EK^>r8`|jbVDr2ycK+3%otS|puaej5GTOK7;>{p_SwTrFn zEg}|*bdW72-qb%ZVn={!k|;dv{A+6a35_x_ogN*dxR0M83RFcIs&Zy1rAUimym9%Z zPvaC|YW#rbkE!XsnWMJzxt{z$pj3Mpsgc_O>k(ByrQ*O>Yie!naSyF7KP%{k(2H3& z*mLYGvE-J>3@KlzaQpUSS8K+(_qq7z?mF4)t!uC^E)7>?SYdj@bIQJU?OIapM&WRo z;mSrAt8-<7$|O;sF93KRO>88mscNlOt7mw8@bSJ3k(!?@XD?!52b^JyuMQ%PexygbD7;)ggfN}G1!sN0y;QjI1oza=GdG` z{1BQNemgiwEM#S!Lz3f!Ng)F*{{70ZrBnLoX=4QAP$!E}keAsg3zhxNY(%!9t<8r1 z-Amw^Zo=0ynB0cG$2d$9eLgJ97S5WCEL)$RtIh<^(Z~7I*nb}W&+Or%V z0Nn<%h=u7?x1;P5K1ir08yjJBh(gX~li3ww-N8*RacHC+#{RTtYNoS2)mWmN-#pX2 zi`IRtc_N2Ns_|-Z9&KtvE(hf#%g5DZF1u6oOVq~YBH^j(mg_Gi+ zne+B6;kJ{!; z1APDWYQgje{+N0+0k-Aul#wkU!tSV%9HWBKej+m?`b!)sN!;ShR4KN`W^6Q)vlG^g zF$>D8x>qS6dVrHGFogHokonNQ$^+|7^62;FUl!_7;};3{hO0+)>9>4OJF2vi2ag9R zR?1;y4F~33ov_n<_sK9f(?`z)i_pX0Ja{8qV8$6xFNK`r0f|L+4e=A2Ezni#&V;*D zHnCUM@}^Di1h6i)x@qg)$8IxRql71dFu$;dDw-?r)nV{oAgS$G6HS-X_|~)d9`Ub@ z{u&5rt%%L@c{wmDwJ22VG&r7o5sccfh+A3SOZc@gOstaX@9jphurfElr_a?+DlCww z^elX(NU?W+>jBTCNhl|i!GMYHhOTx_DmALuDezt;&7aG^bqHuOPy*2?G5O%1Cn!fc z|4~Uh$rU(~Bl9h)7kl-rVPQ_PUQClOYiaQUh9xKRB_!@j?Vd-7gJ2)H+J}2tNVNHC zqgU%6_AQnE-5dFH_fH<9DVB14$o)4J^RJt&&tr}Fb+i&bWLWht_^?(m-c%_y%(eGO zD&Ort4r;DfP^v*C%-(d>{x-4B#Aj~|b?m{p+O_)C5uf$E{T(_CCwQJ!yot;uu-Cae zD|7PiYXLm98C9EiAx}Wf=NdsumfWu}tlTu`KJo?6u47)x$qpQY&_3nD?2QWe_=DB_YQgyJhqx>u{ExG8Jvgvk1X_aK`R*Sy;Bh@voq22uSPW)Oj4U=MI^BFOD$s{ zGVF3iLk6zz%>L_vYe2itIwb<~V*r$R?<$7Vh7+*b{rThPuL-iPD085eY6i|)G@{sF zp~C0V`yGHnMh=@;+K85akk4kGS<0I)VFK=#F3I4 zn3(4f$P;ils_iEd7t+4FOD3vNt934JP(QrXG%#xI-8-L1n@h~7u}r(FAK(8VtuM1} z4j&idrmKUGuBIM%=QFT=FM{N-|FiTuKumXHFwlt{ z+o(%;A#`GLtV_pP{Vm`AAM{z1>9GES;nlOt%pbT<_m zf*X-kVF;fXX?UC~;thiPHnSQxASemwtNN|TY zA*WI{!!GQ%uXbBv{H5jk?W9kjZW7$$xwmd0&%Z6pduTk;63goqz>{#VW7Q3= z)L~lWTO(?p-wt{u9F_-#<2Q}VUP)xSqzO88Wgvq7sz7bW9wS|kHO1IehHH5Om7-NT-7XqgFj4;A0c;X%5DoLpX59iEx7$oC~+iVSa zV|>k`&Q?Plcjq|~IKC_hppTvO8|LP*4QZB2h#&4Y7#o|*t|-^soxQBsE}?90OS-aB z?WI!X-u%4Rp#-;#w7ClTn@wes3H4$)E+pavgl zeh1uHg!V_x!$%@w9w}=iHb}&!TC((ucMC&|u0#;(Bp$04*HstFB4VHj)#-*g4exsr z$E9A5=~;zb#Mv1zt&LEh#=u7|VSE*rU~#xKE^}?dzTS9y-mF9hqq9CPs|b zhcP{>aQ3{@AAc2g*Qmk{F2l*d=i6a z<5|<@EJRS@)jXbor?elEQ--ux1(Mjr=W{NKIB!mUX;~DDjv-~Rl|qa(r+LHR^NF9* zO!TojF&>60SR#k(6O6wqcHZ;M_&G=1rZ*EtKIN!=I#g!&BnU|Cz~US$ITAv*Jhg0L z`N*5fOvt-~ZP3g8GdQ%Ehu;f?wC3VAl$*)IbwG@$zI_f4+nA&Mokk~xjUE-lSg1se zF)z@Z7Ja`VMru7|swTO{xIO)audmXIKEWWCx=CQa0jFsr8Jpgqs=3TwRD^vsq zVU)M9BgQs&QgvTC=5L*lONN?oq_cU3txozCKlTiU&{^3Yd9nHr#0*QFgdrIeRg#-< z67|4$j*$1Yy3xK+I#lR}xI%2{QNfrWmbjncTN?R=PhkCbigsSe&%as7`Os3M*oTeF z6|to4rt64?-%NQ#zfLSy+_@Z*MQ5s ztRd6Uq=)JLUJa&kXcOdCoyK|y?GgLRL+ob<)Q6V4cl}p(BorS8tJ1wqvz81r7t%)6 z&(ht1KdroE)|9p!bnlzrjnk^0uIbQedYZrlg2*+7Hx6CnaxF}YEj)JH3>B`gZ{J#7 zx}0!HN#WgHo+9$_%My946!jB@vB8(R=o?b8!x_$(h$&3N(4ugq;&x;X6hRnqPcsv_ z#;P)%{qp3Ir{@nj75+VDTmh9HB%4G!FVGJOxNN7ERaA@beElwus#g#EqUOW(9cXpe~(OOYQIk8X^QSRz+ITAE;UqcsB z(iBU9=LX>PL>?O$*W_X=7TL7$V0wO=t}gTDL|x76r?re1--4>rt7eg6?9hk9DLPqh z*MjkfFp*p{y8W*nf9qdF8W`1kK zDsHE%XB(8*J_}xRtT^A6gk0Yo35Sn?dkW*VJ0^QeUFNy-v7>s)dCfnMoABRrxF_1z z+zgsUgPLF-fU>h!o=+L2L3=s{Dj;@k7N%WHl#Mtg9Noc;Rs2p2tpa76b+9-83p0EM zUr?wA%h$%{q~mCst#3P~#={b8D|>D5oy}b~T^G9K8PQaC7*1_ud(I0x`*jt|dyf9} z6Rxb&81!py#p7Ewgi%^(5pxzNE03j}tl&ipaMyldZRIM5D5OTj+=^)|w6^G0=hBc( z?CmC?;rf%apV};$qV;T$osjuinT6^XW50B+Xtm36D6j#ox zGa-yq|SFZNrYhRoB++R zHg-1^6QeF9YXxq;f-!InEHM)kX}_iu%o_<;*!|}n9Rd}eo@<8s6@%du6`%WBW|Ln3 zLMpR0x{hf7WxC^vhJPuK&q6#9X3#ev=LL$x}E2mzrxo3yWHcPGu zT*(xw^D1!c_J-B79N6s?!0HRyz=v;pOZ^?#F>R}pV^ft(=Ul^! zqn~atz&Viap_OBtbzdibvKF43F4io17i5=~e%FEYIg#lclQz}rKWlQL1peDU0~(5y zsP^Bs>3?oI$P@uyrg)hC@wod(V&l;O>tMDSE8>GSyPnWCZdkTGu}Ad$JFM;khZ-N9|%Qdo(;ED zgY!-x_=Dc6Pc1)_8B}^-4r7JGbeam8zt2>+BxV^! z4SbT-OPsZr+PzYi*D&W2?VFh{Y(Ku(EE$9}%==!C3vbgMj2^(<0zCPhD}=E(`p_uh zUC(DiPw#3#+@A}#u<1D}4^IUnDtUSeM5@kJfg2{uj+B!lg6VkTgxn@{&$CE`+9B1I zd_4UPox}!>)T43=Pi?cFcm?H)mF+mm+92zsy72;6T@wp8TFicv7X}|Mz(*0HNi`Pw zO%=M&1n)oL9${#oH={S%85`a4=Ynx8NPbvQt7AP3v)&TJE95U8&0r8sAP-i-2xW*w+gL# zov;Ex=ENZPn10AReT%Ix!YByskO#!(DZPuqmQW_V!b9AmEQu#1j)|8n4Y!wB2!k6n z(s7b7#S&njNN**z+}xY}O5>H#Mdjh7dpd+J#-o_MRn%q8-_!W^8sNYMczmC_K3v}9 zrZORNjb8_`T1VO>r&x}qK)qbM8=4DquWZ{JF%V_x0anO-D`0??XzukwOgzJ^pJ3(y zsvnl{0!B^#7G))#`Fy-bG1ACrwvLND2b=7RGL=wO?5FbNM?t{G%3NrxTViy6L@#pL4&^ovUS_cB!vy+@e^9n&!eY`*nBxPJHpbRPNVbMbyz&`1g1RbbkePh&YGlE?5};*-KIxR^iTi z?q5VRZ;Xabov6KB$3n@a1Uh$X&l&eSt&wmpj*WMvR$_~8gTLtFqKS&m;K_ley4Lw2 zotNfcXagt?iHlU;iNDrb=S?yqG39eFD$n`HIN`~P%7}(p;1nnAZ-U1l741$1wvfaM zF^S7rF=2GmfMzWt=u|$`n7^F}AUgl!o&Lwe00P*d6Z;f+_iy*hVbj0e50q<%LIzp{ z|Aj7R7)b#)G@t8W4`iw0P(2q`Mz>by?Th~fl7y0Efs9xkk>ZW4F8ypz!VsU%^UdX& z$u;j%xuXXen+Z}r)omi{3M`Wy9 zDcwTv%x=fZr*TW&8CX26c>8L`e)U^m`QylYFvOAq1$!9~zDGYda455mtTlZheV-<` z<9abosDh_Tosef6lgbSo;~cD7o&6b_w^_K599p*8%4s{l78NJd>Xu6|GR9cgThXg* z8)&j*#^I`k!Sro9dXg7EoaCFieRlWJb(!Xen@U?U9kcQLk-6zg&0pBZ?evT4{aTUj zklj1?!0)MXTURr8053xJT)UVI!rJPB-mX7x_EZIfLFF)d`K3*UH%< z0U0Vo`i6IZy4gW;ct)ZJCX;l`v~PJ23E7C=FevsoHl^le8dlrFk1h?8oOPIQ*+egC zhKN_R<}fpsr8c7EnFl`YVDQiewIzWgo~DU8;YRmNOSKhN+P;6L8f(;3M+r(y(pr;J zuZAS;?-R|hdR0_pYH~-sN;S`pM|d~{}zKl)=d@) z&Xx7?o7sLAcHb=ORl1&SXLBXpcpy+?rmK&!r;th$BPRLZ!rar4LWOJlPwjbGBq9e| z?-dQOZ#upB2(eRz8NkGU>73l2rr9)^+l>4kEVK9Fw~iM)hVjv8Ds*=)8WPJNwn&Fo zNnoLDy;Euo4`%Z;`MP5s4v3iY0>hFlkRe;c@0UE2g^Jk_jfEVRkA%5Xk~|1^4KUpe z8RYR9{nQ+x1tPg}qH8x!rN;|*X?`wP=34Kk8~ec(Tf3X>Rh0)mHVo(g9rr+pr9Ol_ zVICK4=!SG_T2e+a6cLrbvCvoznWq(fjD79*LI+ETplfn*TubeTOJdH_{vj*?M8bI% zt-{C16_NyVoRJkQn?o48YrZ|YGP66k5+HJ|2=DRJRQvSgYZgOA(~4+s(+F}n>6;|d zqU`%yL6r-=94R!rk4Bjo8rVS{AF0>EspOC|~ zga)QQc9o%axPK-wz~*yyE`1+=q1XFl(AoLTk?O|bl7+<<86vlC8!@jyQ9J2;!Qk&y z4xfj>n%SnClcTfO2K|pKO9{WZ?P#US&eqg=9?%3eb`v!TkX0_#-};bF7+)hDi#+iM zVTP^5^n@{O!wHGOTFQ<7t8gB(ko}|o#R@!duu|IocV-|Z&(y&uKTsP`Ohih8ArNRm zLH#du|1|yY$R1?%`aixK{-JT;()`ax>w$Io|79TVJcp+5zdm68zXq~@^20bs(8X1; zz_cBadqH$@544r)NgGwk1?KQ+V`fLLdPQcgafd=Kr-)GW%rHRl;DWZ}8D*@qK(<(1 z;{woH6h5MkMRA3W7-OqO9j!S=HqebQ^eB$$NyhK0Dn$A8e zu^1MwNoZ z#dh)dx%3lX@>t!2+y+Vw4<8>=Dls4ucix{{*hFx6f^4Gz*-E|Sr zjCjoh3}q}f{cO5*C{!g(=ZO999a6hfHSq;e4oJd#XDYLr3Z9V;V4ZaFW0a7ceV?83 zH^An4ch)5uCJ1w$TmM5u1b zXez!ntxdb9jV_v0k+InIr^nh14_#B6NO(qLpAMFn<_zM(1};BTeoz>*zEx#(J?6Z8 zN-+LHR>ZD_=cPw#2GisRkRfdcpEpnu&pU%1WMhmrewA7iOHgH#`Yl>D;4!7SY%#bL zKIF9GGS^OCnMaCAynQ18mk#E56v&@V;ta|0@iZ*p)m6N&sU_!6s`&LJ^H&f;F(+b3#$`w7Jf z!Ud8?#&K_qzjDV|Ql*u12HjX@i2DGLM$<)~IDcISzKaY)h$)_s_4?&boYuF^a3yabpbn=Dyj1EFNk zHq(bvQ4(ZRQsf7KP8mu{eX#vLC4WBH4kpB7==Pnh=8fY`4yoe#yJ*z6{$!r<*csL zM|Z)1$Qi;+23@i=tB<#iM{!Zn`mg12Hv%7aH;|h0gbP$eNl&f;-4^??X1}3V$Gv^2 zuL|bAUO%13SyJ=j7$?4F$%{#;OwECLf41bAT`>bg=HfF|Fg^E6^wfnqm$dJV-Rb+? z<}M1BeM9E3^)AUQbkehXZzJr5;{;QDHygC?_>>t8(ar)URX+6K>wtZ(pcNQ^bahgP zB1#2{xF|m0qvGUgZ|;di?ru7?16@BKLaBRvjA&L5Qi}_=)`4X@BAf%pz3a_uGo3F0 zeR2xD*>{=M%Y3UkjXFZjS+BoX6;f4D=zuM5U(Om#muK!@n4cN0@LFE~rCXDSo*S80 za;PFv)h%*t%PZ~j&NexDEshaIr@r@X`Ru3&R3^8nBK$^IUeuYQC$BIsJMheyA*j7f38$u)De~;r)$vcFwEK;T@g0i=RXYsam1b6Ds4rbj{GweY2VTVEY=> z6J!huGwr!zw=J<=pfohVp&K2zupdq0cxra`jOx9S0ui@gWQ3+(cK>l^+$q#UAb@?xA*P|C*7 z>xQ6|=#=0Upk8w4fCYj`f@WJcOcm-}Dm|ryOo5Q`YYiU-QB?sX)9q48Y@X=U=wEV& z#5Dp)6H3)>enISJo}`&8u_iCwH_;7s$KR%RSeW-Kj|cwd^2$11b{&RYma7%; z-~;9iB6;YYG?6P$EcyK}e2|+Bl8d*q|e&rKKxz3bOyb6j0>nAnp8t zxcrfhR#*rLl`OqjF*5QT-_)m@C4%7T3Td4mF)62%tpK?vlw|pQf8@&!HmQBiB* z_(>K=9EOG&&Cs1uPTvM34`A9V`>_F9L8&5LUoTt&<_7^=i|fB#~$yF(#4WD3i+J zo%uQ<*K<{{x(G-=-<%OGIGU&X%Yb1o)vxL~SkmeirB;XFleSnp=v6CIwYI;(JpM1y zoCj}G`1@~gd~bh)+$}6D0e4W{L-0uuJOKV10wW+QPzjm?Sd9AsK0;HC0?$?fY`@{| z13Jm|&2HZ~xk1rqya@#)Pg^<01GrVPh9I(LTr%YK;Ru3A2HfQwb1H4Vdo8bThmf9j zOj~7WV;wvbe3OznlIy4WD6>imjA>n7Hr`Ij@8PsE$9H=ZG>{efyE_}PW^v_Sf(f>JW(tU7vH^uTzC#|NreQZrf0%ya3(L1_j)kezN}r zgd_ReU9W;KgKXr&08rS6LN))5;QVcH1rL~s0yPKiwUoD@Ecet(oy!vn=|Af%RgLC% zsM<8In0B*MM|IhE3iISN*#}mm7bK9F`7{T!xJw{^9xPE`ol8sJH@t7QjChuI4J9zojfbtlBsFu^&A@>6zsIOaM^*Qc&kA~y zz@j}M5vO|c0==2I$p!w2o-ag&GkPBxfYpn@C?FZTs&R)0YjsDM9Tai1I0QFV;x2vD z7xG8m^Q#|QV}ygvS!K;VUnFeko3om2l?f)w+&$&bd$p59TbW_b3b4hWKL7$)5UD#L zdTI>jn_t#(^`)(MsRPb?iM`^8qct>^7yp%IybS=ETVby1h#J&nyGycT`p#yvODSS& zOc2T?g(Y9$Kfs1kIl-Y4Kb@MVU+xBwh;-XGWhLsta!R0NQ)E&4v_Rnv$~Y--Cm6z8 z=OP^fY@Fshc+@o$ZTt;gpYzV6<!f-uLr-&vVZE&&xSsuid$Jc6WBJ+1by|M!wcmBD?+YHUR+vnToQ4HUR;K2z+wQOIt~fpknCJIzB_>@KWO?0YP;f>6z6HeE!y3Wg{;F0`ktQ z-?bD@a(V&+e;XBrm%4tlTiF9qkMyV_9M*>lNNIPxS>!~n-Fq4O{ulV}D{Ey-Vj+0S z@#T-)i$8CraQqYV6T|_fhbER}_P2a*4hULdMLO}3{A^dMjfF-_4+hEuJ zX8$M02l!j|FO3fq;^%uXHZfqKRTO}eJ>NN5*jqFhZk)M#>Fqc4`7AWo&}8A__wMiX z;aqe3O6h0V24AIRi&ot4J}i@B(8wW3Yv9L5ad!m8-K#ofPNu9pyhj$uNDF?NqJo!SC+Wg{ULOlDxX0Ueqm2>Y072{saL?APs=Aq*s);s z@0f(J&6r(FnZ14048cwn$YI&ED{%rn_tNP+-?%TA+z_G!`gulmuQX|QZW=b=&^G*> zUdry+*h5L^sPq^YgFgS$M|xb!)i7VWJ!?{K*wMUGLx;)`iviGj5AWRcIg2qc36c3fH3uknZYV6Nn9UFw`A6Z%5anG_Xpq_L&V zE98C#CM6(9$E~O1nwLsZ_0*aYes{2wpI!|blA;wy=0;&Y<)in@-LdD2$FJR-QKL#o zw~?15uzC+$)NH}(ALTwr5y1BC)A6vCY>BD861{*!6Q;moz4HUY7q)=Y&SRs9PT0JM zDC)f%)JLeX6PA{a%NMCsh3C<3&|dSo(gvvYMsjG@t-FaUVbjox2x=UHdt8n+#xD=I zQRdz)7h6PAjF|8j#{s+YlU=dyUk$LnBso}1du*&3>V9@iD3*C8R)Kf+WZ)0_{a&72 z)0EqjcqAq&RjqT^qZL-bu=qQwT2_ zf9NoRY?n*MeHvY!#_G_}m5pk-_kGZ+ptp|Hp{pZ^+)C06xVilJ8J8^D0$&cIg znUW=~=|Gw8(sIz|JE?SWTG&b@6d^vH3+YMsMg)(g152A0Gg+{{Uz$tf65O;|;g8U2 z%8hCt{T7WPz(AF%zWQw|RNky-sMpl&J|kYAtWo6&5PrcmZKFpVNZ9(3k)q* z#@Ry1bmT#0_X9M5;?eoGNDVklI}6TPGk=1lcmZO5hHGZXfE6e=1UNGcd*J5M#8y)g zP$FyU%KC?~gCz&;1mqWd#;3T(e!WA z_-fr_4HUqrl%N2B38m{FwAm$4h;Bs>g5}w1&PYUMbq8Fo$+tGu@s`J)ez69=}cCO316K z7Igrt4@xr8xvxzso)<`N7M8DVh8LZT+SNZ;Yj;iZy=$DXJ-KjBu%gJ*Cqn1*)szPY zvjr>6`VWy>xS6keVjIBy?+T_8)TD<+cFTSc)@sap75oBnAzAIi@HVq;4(8RaqH?E- zs8XDXC&Mmd(rCO&vcuCFWv6QG+cRy>$Qrvli`mn69oFC~-Ue-0i8b^gXv+|a`Bg-!743Yen9R(9Fh=kuu>WWqsY=7UK4EDqbA4Bx)UQoN`bSUrl{xX z2$S1LIMdHcE|_xVJ+8H(VP^yq;OGH6dx3R_{sN{Pjm~baC9$Eo&-$@h!IYs_R@cE6 z1wJ1lh22NHbq#il^JAjWv~L5gOUo-bF43`_LPQb@lcN?DG7_c2nBLbG7itnL2IOY3 z@Xh8C9qz`4F!Xj&)SQysFFY%}A|xf>ddKkBo)HlIYq|eFbN`rlf`4iMG5B;>>l4BM zmcHvU)fvh^d-e78Q>xoxa^hlZN@CT62-}0}PD11)t7~BHARb3KI$Om_s zpxrjEch<8UZGZJTiYSKoLo`q9VV;r>Eav5xoR^ z=-f@Eevr(Ba8%}$-@pX*EH|wUwP+5`dDsS1P;@k{ElWG_aOYr8M)BQTEx%f?zQDd- zCCQ@6c=aSmhV0>m`fe}$pF|&pFMEyhnd5VtoW2xTivc3E|0ybe5a7#^@^6*Dul1XN zIIq?^_3S-(Gt1Mf$ESc*{6}@w(BC&Jy7t_w-$`D2bjtT%EgAo*@gI6J&N0y#gx8T5 zATaiSc;Xpt%j#dT+P+--x7+{Q_^ER$Zd&i(zBPhQwyGU)8e9ULE>^z<<8%Z#-^p;yAV;sWwL zp96(3qGTIGaO+d%Vl6EK?r^wM6>u0sa_Aly2;b93^#|8WyZ9s1i^YO@NkBNhK{#XUn#$H6u)DtO9QE*<(AJRAKx*|p;324P6 zoVC>aS#M~PdRNvl{(cbCxawD=XIQ$tzcyLN`qBJdT57gU$fAuUVfvF^Bxvom@ zt6++0bKUk03yNA#i(yKl`<)j|qExucKY_!aSUP)?zQgkDY*?O%orrlJ4xO&qD&=)8 zI}*9e#Ip2YS?Zo*>JqL?%s=Ul3y(dwxoQS7k=YF&ew47>v-11o;Q zVvl7e`l0$CeTpBZh?}oU{4{X0a3}BiQ&8sy1g$xrE=Bb_E=gLTSXFAaSA%|^C()z0jVb2)`dUS2V2;G7)|6Cw%xNGweo4n`t(D~ z?WC@)nicD_eBhk8h~&nMT$uNRS^I8rW8x08Obr-Ea;LavV3xbp82BZmI{*xET{pce zJJz!-%YYOL85z-2%QRzT(Hh+wD)Rd1nYkUyK9m}zAYU|%K$q0sc$^V7!R`V2ygr?j z`+6AXofU5nwNaEZG1N}S@(=}y$Xy&4>4K(~>RS&+gz90X7-bJLRroWP7L#diyj5A`SzjP~7*f3CoHQqz z$|wmf}#NA2X~D@ zlxu;{ybf9GtveyEA{q16L(szyZ-y>USSEctGBI=V`p?5Kho5<0;T548MuKydt^QUU z#*|949k8AvG#s?p9#%JUc_?{V4fL(_(6xF*vm5tkl5;zZs_rhIoW}F8#2tO1OgB-p zvAQ4QCvQw(Pu;7lUe!INQdcObVEW|uSmR!~rE+=QLqf%X0-t-CAzu_=&&<1kYls|a zFZAG+s|46xWVjSW3CBVZaz@quh8mu6rv0l8_u|Beez&j}esNMI`rh6&s78Z``Ggh)K+8{J_ zEVXC(8nap$g~+7b{Js$+Kk2^JAYRRor7M2s+5D zs@%Pk+}sG0LBlmzHg&21Tw%+IK7Ehc>C4!3;j97~(#YyrPce(@r~^1Z9oz6~1_Y0| zpP3a)l_iGSqHn{b`JOA@#+tiNW{EA)zf76R;Z5U4v%GhWlknJ|(*S>(<3)xZAtZ-N z%C|k32yQ<9csJ1!6%~OSa&HlRtRpWeD}LUsnqG;@_CJj@y^Nw*6mrqtSSG`FdIe3-5)Rf!|=VZpeK2D>O7uXc6fjpD91Jwt<(wtO7qU* zkDt83i!UFC_j^4mF!07e{y%@#t3wML0?-{^dzEKr3*{yNO)1>ErG=aYU6aWmy~xh( zfsfBOzRz}-AA2=$7=Y`t`hA-7MKOwqzWtA8Zubpp@BPLM4tg*9ZQOQmQFlSn>4Se? zo5DR|scJ~XPnJ68Y*LoVg#4A`w)s9cxAbq&j;9a`j`8d{)^uqSw3t2rSI3zJ3!-7|KN=uwhj7pceJUMJ{vnc=N_EtN-^XnHAOo zkSNmwYaoSmcfP6bWL#$GNSa5~LrNJz1p`C>qDzzVDj^aneql3vH#Yp7)X-pqi@iZ> z@~AAj;Jp?2Xh4s}M6%N7HQ+(3`O{49y&aPdt@FEMW{TY~evB);W3)IzWa&2u7Jk0} z0+4`Hn8~;ffZ54Pu?8gogBT@RK;U`tVVlTFhlS|CV%vTCFzrl;&J9MK!S!Ja;y|-U zaU37-$|=*MgZA6vjxQW}R!@d8bamM6oF3a#;PLj*VbfV2>YnZ2QEwoZRUoVyFUj#8 zl{-TRo&8F2@U_h;Wr^cur0;?80|uczqt*z{EAo=3bz{|^z3KMFAldDOY^z|NRhk^$ zp;klx?e**E7`!jmLJ5cb6~EU|bZl^4>z{#Y`POW)L^rgB`2LUIy)(On>7w{IaSH7g z1uA%jjrYa&%;7LnCKeg1;?ZRj@?iX@ApyU&WIwuiTvfrtki?eN}=c zOTTi+{+s?^-E2E#MZ2_#@0`!&3zGz%(R*5h!#B`dq>yH>iLAx zAT(_-AY1RjU&ed@ymB6@B`$w>vIOjfxxBBkbA5c$^lg@biF~%jbfV45#VqKC6p#$7 z>4G22)d;{nu&!#r7`RplGo&1uvrH_EX>Rvz0-f$W#LJTqF9-bix9|NxQc2=@ycRzN|B;XW_N&?uddx<-i`?n2ymQ7XGG&5Qw90f7vOFNnT0O-s8@IvXR zDnzB*;BSWqZgeu6NB%{>REc9Y-R_5|$&<}3414>ahC<>C3JQMx;q;TjOFsq#u*90D zlyt85RdG$0w~M4-&PYOYzQ^(rAjiiKOUj*iGwYndlbt1QC3XDOiuWx;kKVtcil0)7nPbA#e|lwe2F>!T`T`sXj3 zY5k6=Tdr;lR3kUp*x>U8JuvRg(U#tZzAeP;ml+`mq3Nyq>Dv`17rg70yF+pVd^9HTy;3zLXl#_902c03DAo&O}&y^PVd1%PP18@}`1L zMQ8U;;dj}o-uo@zjUC{?=Jtj@CbG&6&m&@aM(7+w@q*xRgg+)70=#S5!cs~?K!7C| zkZ3vT!jK(k%i4x*(t|~JhH_d3{1<1Z%OkL0a60gE3M+FGEVXI@HA>e}c`T}L#j0S? z56e>-92Lk$@R7EpE+<-YmT}TAG4KFvMQu?-L|@-d#y@(JTb;4WfQ@A&UvP_dj1wk* z74W7-)2U738=$+l<;kYFIHLL>8`ZS;1r))17YZ60z<%=i|3oJ*1q?XXsD| z`{ScAw!u@socytv4bZX|513zXlrmW6_VTOI{-|^a3ebOjCGy#$LOF3abLR{pfCDD5 zgH1{1vE)p)8KsB_RPw?@Q!KL&y$!S4+%Hh)Etzs+{M7NsSJVX-u=i;4mvlm4rc3f^ zVF%iMCDkWy|z+ z8;j6pb+kU?8L#RoYG!gX-a5SbGmDTEz0ey(&i%3kyq)YP!b5E&_fk6C`s@5l2U?qh zr?@T`C-d!4x#o-vndx1yxF0Y|*KXZD$9^By0r4NOpc9i`Sf0zXR1tsy#?$5jLq$3$ zEkl>Xcg5_kA{vD2h7Ih0OO-efaeh(el;HgK$z$8$J}0|c-9c=uCSmUmWzB2pE6eO| z?1B;O)0h1YX%4hLe8oPKYs#1rP<^uK%6E4YgxUH?%~5haR+wZ!sebtz@3v}DEYYCJ zZFk+t(sYQPTiZ|&S*`wK?+R+2r_)AuZb=`{^JSz_bt`zaFVM`UZ>gUUqMu8h=Jp~} zSSY5?Su*OFW#0vBF*GdPD#*vL3Fz~MJ(v2NKIhH(-sM*Z{-^Fihg}<`qAn+6eaEZ0 z?y}m)99lFML1Kb;K7a;ZC1-DX4Y-vR><`{3Vc6V_)cZES3F45d88Ln-4tAicxtoSi zR+9;I*2K9{V?|1R$`M-@kIvhwJsZZ@S5N%68DSrEDUI5r0T0i%v4_^nskkxmb?!72*Pn7J2TyXM;n@uMjq)2aBQO1&WzMRjj0H7 zB3=Y2tAuTY;81C~Pppt|X1JY-DP;&tF4aB;v`K18_M&?!zBOq(dEaTX=Dthl6D_Ce zIOET3cvUs?Q8m*9<>(%Uy*O(EACDoM-~p_?49zb_jqw<p91wXop-Km=ofQMdZ*5u}T*J;2XzcE5u`PrhC$HGa1VTiryqV*VxLdUiTrYx3b& zKq%{4Wpp^=w0(mAiZg!k#~(EOPl{h9{{gc8leS$sNLTO+0X96z5p@bhu1N?To+E{f zk@eZIQ|Q{mavS)&4R`s1$J#Nw6!5v`gl3PERCiy9N%{8t#iRIb{XD?wha5&>y~Y-( ztRsivIw#cY9yL^1J}+5Drs&tc7>jiIk%bK;=<|L^tMp0Fd%Sm(y%o6Oxqp_zm7kIm z6BE_ccrbZMD>WUizic{+idNN*_)ffxsRq$=Z-qU`@R@8K}4 z9E3Ksik!yS#7XWCK(0H;orL`~2*Ln#e>Yw{6vMfkO?AMuGC{KDhR3_PL$ym2gx=#O zdPnmJ5~Dr@$?$$EXXO+RUJ)a?nJO}6cC z8sihLGfG-+9nG7D4m(b4UmYw@kqR45_MCwtgbz&?!_!4>OVWUc7wqH-sd*ADBLdG) zsP($eHkSx^($stMLk8tvhZ(6_2YMuRl9ifR9M{wAbL8JH8|nWNuYfizqz_91T;Iig zhYVO$>cr>PJ@q!@Qj|=JHX{(2qs%Q@{TiD&hDCNnB^@%}7+?hrs7FYT3=8XrN=rYZ z(o+*DiUb4k459wt>+?|y5D=jV( z=|9?AIR-)40Rf*X@9YKdX&2Ok?oYu**!a$>Xh?_9uLtS30*nPI0^+BejEU;SDentD z*qo@ysAFvyaTd8&#m#C+omD;KVo=kfX7l_7syfl~E$1G5;$3h7y-ZU6=X#<~qEpko zVz*+Bc&r1i8x7L;(GypI6zCHUWa2ct7Lzz0B-FF%tD?%Cto70`tIfM@TP zra=XL#m1P>r2nCJ0q{%xwmsZq=0P(y*uARrH%U4b$%j6ooT8Z zUhMJB2QK(>COye%dAd0F-p4^&M8}sGBq=P}c-(f;NnexVS|}_?s=R35`9!71QIo-K zd+LqHyXHjHMf_{hjNWmXDW2kK=B|sEB(xj>b)PG4sqk(SZ51=Uyp~_mf_KL9>Q(o5 z$$7+2*ue?`D~LPF7LA86-j}HBogc<;fJn8~8jY7GJz3_W?N%bGBp+Ze7K;{E%y${8 zgX3{YKLB7&zx6Es4?jq==R#-LkwIlmeDJsB3A%S4)H#-dRQYbZ=y54W?{se2*?!wh#Sm%GgFmxdFb|ijdqKjOcW$T(ryV;=n ziX(s-)A+}7GN(Mx)H3}zK_4qU!@e0*eqV_d2-dW>B;6ZY@jm5{e1n~O3_vjQhc`$8 z9^1!w(XMbi2J;P@@DyvjFl978Iby~Xd9^B!KQ4N)WW>adX?OCWk$UjOp%=RFf@8(3 z{41~*T0R9WUp(zSP3I=(S5`vRQE${@2=fS^y>rfE;qQ^4NQ5LU9QzI3ZLS4e90c#_ z&#a6+Z*yCly6g_Sb-3L}AF6)vt&4g&+o%YFx_Azl)$aVhE8iQSm8iW|Z8l}(@KfW+ zx?_W9uaJ9mVk>rv!Xl7%kNA<(v1~Dco*$eA^W;geD5w^5xMG%(oVTI@R4(xnlRRvC ztKxmwLI~nOX%x9t2aSv_YVYkx9P{t-=zbvomUMP)FV=WA(XjvRgi8YCUHx0W@a7m; zSWZ}C!8@7bW1Or_LnNFtEaYsJG!a5m>zd?u%a=BUVa06BSG~Kv{Mb=txnw`Vl@cuz zB|hc=*5xPGM48Q2d(Cxt>OwaV>Z*kM55>iPsWm zE>U{uv*R1V!~xh+QI7AGu9)j2XKWIX!>Ft@0HVRkgGXtc&#CuN{S@E8$j;{N(_w6;^6K>c824KLC;~mCZ z&13Q+`+m1$Kqjln1NA&m>%3T54~G^%D)6FQT4zYm&9u+A5psZ)KOx0xER`K!am=tZ-3m0V({_b>fM3!7Tj z@jsI!>CcP5XyLtVV0m+rbr?lIIKTB>= zpBvmu`0hxkO<3^E>)I>j+2&cZj9(4Ui3D{kWA+V-|uCt5Z({{7hD4T6ZFFOZ%XhlY;y(N z@BuWM?ymLq^;s7l@_H6GlBWeVc2HqnO^i<`JLs=$3@xA0_)~<+@Ydn}$TD2jkkQ4O zH!`5qVmC6?%x|oc3uo(4LaWp#964Kl>q%lv8L&HWRx*>QS|WU0%wGsD9j6KgT9bPG zb&Rjv;s&_K0ddm-d$m7yV|`$e2M(sCrPZd3F@rCY<#KQ&MVDk}(2J~d>pSuU)jc=Q z*4|2Ebk42(j9T_T@omceGc%Jhmo}}oqM$z{Iz}HC09K)9nSNp@vaBwgQb5*VIw?-m z?Q70f5yC36N)GIv9L1Ct%DH#?&h5?*OrVHmYgtfUbF&7$ZNie^UfH=kUw21)~@Ko0Sg+7#<0mCHTsJChH^BjUquP6y7P?N z71!T@IP=ESAwrm!5AK*{DW~ubjmd|P!j|n_Ep$rF(N&Ibq!PZIP;F2c>nnhP-=_`^ zu*)+Q5*=3AU%nSRI)^|~1u=Cqr)3D@tUwugpBvDc!%qOJpB9iD>Mxbe&AfW&$G3Y9 za1?MO0r{cHxGe|fi5r`qnTRJR<>v$U>&myF`KoATmhM@$ect@+tiUPI5WtF6cm z<-FDONFi+J;r*raY_I3Pz3cp=C9qMcr zj02GvxByTy>1ccGP}KVclsNSwUnz)WD&f{(`2bV^ z#SA*5-b@}C`oOQP31S+rkzrGpmom)Do4*w=d*rP$K3icD8?-?wB8ky4u76=poU{V? z``X?Zz+G@QKL(_h^gU0bb1Lv$Oy+LdT%s?T%yZH?zB+)NcN#x{?i)*oJr~LL5Uku@ zT?yR#6>&Ji{^MtTE1e{_u5a=Xe_1`9+Y_kLS#g+=Nu)_8PJM*^jmjNt1!3@63O6?O z15ciYfR(bgFZSFj9xkt(0SSELV~-8}Il{hMR9kgJ`byD$WACVm8+hufyc6%JnSmYH z3REgwyrRA3nhuF2j0}w&SUU(tS(RO1T5POIYIN3D9P8PUQJ>7TqDzNl?y$Ss-yMX2 zM_}~M&O&*9YQJpdWhb=adPIk+$_VLKh+a0iTascKOP`Xu@NE4w5{y)15^Ad!PN&sk2SYDfw8DCYjGYr!k1GmcI&Sj)Zutd^k#&vP{VMFUYO(@p=Z|( zmjnHmJCiV_sF^QyAvl`>YKyBKGBz9q#yJW$DX1*Ko>voqDhH8TnyVD$Bg{nzt~e5#zas^Q+=9IhwbLnf*RJBBg1y*NxJA&^J*(-Gq^l!q3--zW zHm7z@D0*b8U1C$z)rkQ?+kKCYX^cZ>OPDWV8;rJ}L(9`-t?aVSBoiXp$Ld9kKaKf& zkbnnk@F0C|s&Xt}G==MZPi3B_uy>IW@7P^fiTLBgwn}1}@7Yeisd*UYdjBnOurJgP zyV7@j-RfY)NNSzCoj956W_w|6qSh~oL@nlY2-LrM;Y3n;TWrWXC*q}xb4f{Q3DhC@ ze9}Zub8p8d0oOKN#|*gr4)zjtm*^!k;O2)HDA857QCR`D-qWarXMW&!u*X-0cZuG^ zYB!StD(F&~f~5J4GmB_%WC?O{yhL49`f~Uf6S93BB!9OTs$oE_e%xO2;ct1v6F>zV zF2ex5;=c#aE?;JlT!#e!ZT~C|woTu;Q6{;*e`nQ`5EL&;^zt=%FSNAO#nRH!-JM(n zaPv9{66POXCNtMHxaa z+TQ+wCVR<@K~8lpb0`KJ8oE&oM2wMk6D50y7hMgD$cG1H6V8Sg0x}JzLcz%Wn|uN2 zAMVdY6|h5#Nxy@_MPUby^+C=_G;W~Y7Cwl_>NhGT)1~}8fdd~Q%PCG?e{mv zJifW%xYu3s0WS`BmpyjskfY=5VWm+nd$~UN=|!Js#l-bJb5m1OW8)ISg^LOU_QT1e z#%C*T9UfOA`e%l?{~YfyWC}EU_Y5s0Ggrdrx!E!G_4Q+8I--FX{a)0zK|ka9jjL|I z$IGgp0@QP+q2@itE{Va#!6ziuX?7^!4>532m4qhK7k_B_z!%Mn(5)Mj?&M=n)Va)W zCQrBLeUkgC9eF=0`DLK;DADel&tkNpTgLBS`u^<&W+*|+Vu4JYO)lp71Alm|$|f<@ zMWHAkV-AM2aJi4(nGGcQ3w#a2B$@Tvwyo#ut*p03b5c~FTB(+JZzgC@_lKI)b&tJ- z-JI$LhZx_&E(g$j_%d{#+pMO({=nq+h%<+hlG3w2@C=u8VU#WrO`FC^b$`QSzyjxY z=PxUkJFg$h=XF(5Px&;*UNYNn6W2c$RYJ8(=|4}|ub`aDxlcEhFW-k0@QE?=%eYCj zLbm5l4)Wqi5-UTtRyr4Yuq77dZ}q43R^-M*_MgEtm~U<<I9mQ*&{R|{sLF8K2%c~vq9mW&l)ljqxsZcNdTgr^|H1M`P z@m?(I1Adw|3={ZImzJK8fm)B2Zc##gV<2NT}Toj9d18@*Q{TW||lg%=Gq(>Y+%a&g6l}Vl??)IP=XFvp5(_ zLo7#MXCD6({3-Cs~SKcocb2W@rKi+z(jo?<&>arEMqe3>$ zPO7r=MBA=Rtbma16fuef+w!ZMCvNL~KA-+Q*v83|`!oOXbKY4bo3`;#_E$)Oxt$MX z>$oawh|5i+7C(lkB-=lg8}Wvbm`dsw_3M+L9`frejtNS-3uT^>p)lw(WaIJKph~Y6j{zS$#z`!MtYhsbZD$_ z>?>R^=kBA98$u4Mi}>Gy%9b%k{0m8>&P^GI{j@`i=-^o5jB;Uiz~kaI8t z;(>y|(f7kC~HT=53N@2&)a^#d3)(UFyHL2MwmdHz07r`UU;9}yO$X@Od$Um z7nW@ns0IA~mJts!4p6Xa?xjl8Jz8<|O&lq)m14>IO6@*I_T9sz%tQg%hg2SgsVcTo z*_8Ug)vc$=#{@_?$RMDcr{yAgV(X*+2o)ag-K@K^+<*E%-8)F$I+ta`B#d4!AJ(uv zbG)D>0b$LaKT~hhxMuAxcNo{2A!Pq3%P$MO&Hc}UgJDmERHVZ;Yd-DZT(y`anT%n% zW*0p?0Lnfeu-2oRB*BS%pM>aU*t8=We;j*MZ{hHnwY_Fc$y<{-rK=jgpkV2dxD3Q=(WE1OCCN* zuS`?)`$z0ARKYX{7s_v9v!;h|R(#5~k%><^FZR!lZsL8hN=KA1htY!@S;7E^7ShkJ zI?)Uz(`6vZQj=jAZ8wZwWm_o&SB#H&wwq9He5-+V&mMYA7xeiDQ=&Tg6UI3%!O=PX zb^-UZ4+u#o56@Mq?Tho_5Y=`St%k^G5XUjOsCp$@Ds^1!Z=g8N^#QLCCic!RqtL8W zAjv&>tUhTBZ^=jup0Dn@xh-ljv{O9?XcuiGTx!KL3{7Ad0ibw>1LguBd}x7&Wuwgo zgg2zJJJ7Pac#VuZEc9%#r+js0GGdRku+aPQWX|Y^mnD<~ZKeQo1U6bZiQ0YMP>`*l|AEk1-QAl*QXc?K|BWx{aPhr+@&iF2xVN#?x z-|C~5z}TEu|I1fyN$5}=-8;4t>A_f$dJWrUG`E4-v<+(H)S;pwayB93XV3T>6*BVX z{Nd4bNYibl{LCyUh~shU?p89W<|&fZ#HWvAm)>4meZKB0GNsKf6Q`le=8r!!{r*Gs z)<#Jl`1WK4(Lpq5N}!3J7qnh^$5;1xDh1brLykKpY4zs#13n8{92I{~Sm`I)iDrG? z^vOv#;(V(y=FvBH>S zvc!*KF;!f<7}NK*Z*qVqUq#xr$?FHjxvv6XOe;Vk#IzEZY+T(GH6NG7EU-iMO6o(v z`yM(^ey)Iu3<^MMK{ysJEV}^hqpP#BD?b)koa<6c`Xl9^=$b2M+2KQ<5ec4j1!i1r zCh(Vht~Lb~2z>ruB;)Tk;|k>XhyG7g%2gg4t|g4Ydr4DMQzx4y;*zCYp}a~c^@(-P z+U4tiV_EP)Iu`RV004m5*~#3Kc7o&_AM*7jWd-DVryq6i*QR*Q#2;Lf@-99`^3(H77(`o+QbHP0HRdBQArIYd?{m>|E?9%7hech)S z2?XxDpK$KD5xmpMz$K4}?xH|i4{Q7`v{8JREGnZ@<$m#`Y$ijC9$1`AaN)13;3O6V zlxKkis|ieN4d`lj(3=-Hc7LAhFSLEk{Fk>fh}Ju*fZ zAsG!S3ecM$IsGNNM~1(7Q;ay}=C}r5KJDfd!B{w)*1~5;i(4)7H0;bT{_aM>>6(+1pWlnU|^XvYvWqCB9w{hX8T57xc+HFN}Qe;uT}? z)Mn6xXIOyMN7bH?hF^8@o&zeN=YFA!wCBR?KE&)&f;e$taogBMVQgS6Orm(?a%DHo zEd6)z(1be}LeZ(3&8?AHLUd2NE9QL!f1ywx2>fRSLqEI_=RGRpvva4VL^=&b9Pi}k=>1*J?SZIh? zyVr+5Zl#ZLrQ}>K=j4gyexywo#2I@PKn4tJ%J9bD7MnvL2PzUgc@>Qs6gq(}v@hhq3Tn)SLn<|M}Co;B81 zWZ;bU*hS{iZVxy40n1UrR*zyT8V{ae4;5MxrgV=*veEPN^dfCcz+mq#m!i9IU7df= zvhh>Z=#SO+x&{0m=gljwJCr`Rln#{Ud!+cAkXI@a6xUv2Y)FF@2}mgV$%n~V3~yM_ zbVZd9Vf-g=FVN$^^{X&I0s@N;*g?DIB58Y@_z}10fl({jwSyg0LW+#|4h&?F$mBnG z8ZRSrN4R{y{yP$cs-N-7^wDe{H1V|=fTbNMPQXH|^AVh=;7F+}=;6w2RLsD9&@U|8 zRKiuo=90VqT$?v#v_anK$(&^`(9p3Qic7h}vg)f1P6Z)#T!vC?2;1C8`;TYYYmC$8 z-gM~G*K7C&M3?DqtEKrmW#Yb}zTY_7j+PTNFwK&4M2(AFZC>#v=vV)s$-R3;IGE2u;7owNVqE{#A-HQ5XpMGr-6jQcp=-_07?nyYT_iM z3p(?g1voVH)u3K;m~5Z@`3#Kd$~wvNzY0aT3cWLp1my~j+*CVKjbFKv)Rm3J6FNwK zd9D5v(D2uUhNnahTz%7jBO0&%zXMH0V=pR0E>BnET0<_jPqkWu)h+`_cH444k8e$HyQW@Z$z4hQVj@DL*SGAVuTjKbAI!}VlaJ;X z>n7?MjAwI5hYsEoBbxOha(|ICuDz+kO@<}C5oqD`xW1V!=I7Gba`8e)Z2@99!k(0Z zLx6UMje(r}ubIBOtT_lZyO^&Gl!a%l&G{#|kJ9~}E_|Fs8_Wc4Q{V}-t)SZ$iSkax zhj9Lb^AMotjT8GqIR+3e5F^{(15L>vf9*cL26S+Lb~9NoWK{Oxd*k6ABGxvg_X(%` z7@L#2PtyBzpuynj{{H^T3hTsEO5*i)-AD<&k(FZ&+RDWHM(Pa|SKtv|Ru<1woDYV6 zMIWw9#uZw$%$qHswsTE|y}ot(Pr&s{-D zKb}}miRSPXzJc%SzuZKkHj$BzxHz4qIh|5^2&3kP?@X5A%=FPI)A|==ZW{h-o#voP zU4WmTVcD!OV4)!|(%5cP|A%{F`{LgTzUtC7EaTG(r=(O6bO4C~9B4I1&OccQao@f( zoa(*YRx3ORb;CByX1k$Y3Pj#>edA_S4IcW;J9*%bc+{`jWMTW*vQj?^A$c=*GpD*o zNrlV4Y~cY=aSp$nTup%>{87dfJNN8)#~3yAczd}EUR`ih+P`bJ{^fLmKBEJM6aUz7;`{%ix7)*lT9&iLab(ZDSal;?-5{_)_m8QC2ivTjMdW=%b- zMe>Yh+`a;YtV^oJ)@TfU;}vt8g~;T+ucO3w2`|%~Nj4W_7_$Bs|3i;ptpYxet!U)KY{Mu zhwBW~C;uPuRQWoNw)G6v08%^qk0XX3D>wxMP|PhFgkHP92JfEzCp;K0R-DMTt+UVa z*!y+Zbi-ES#;)i~=wEmb%J$93(8hLYvgMlzu~!i)#S<8B4LIKX(gyhA>#m$!t zd#3(jQ#~yhs^pXY@ID6f_Dlec8r~v7b76<_y_6Ft1K^-s17ed)#Q>TBb=)(J`Izwz zOZQikfVkWkO=tUmSAusSlKZKe!DOq2FXQzv+HbIaUwpn~Et>>Yi?7mEs|VQHIhB}% z-Yr}y|a{6@f&>TPT0xsf*Fdy{@?ra6-*M+$T{W8(YAHp`HQ=Q2rRK9&(9 zoQmA0!-5z&MPjc>2AL=__?OF?4Q@_RlUYn*oXsTG8uhFk&<#5%O$bi9MWUESHAi-k zMYX>mw5yxX_!zg%*1Vm45k-hM{C`zMGQlm8hGAQ%iDdWlkOBCF%4jqzKD`$rB^q1G z((iFc@}+Tj@-Un2fO(?#&kLtuPd_sA`Hve2Ek0Q(8blygWMo%2pwPXUS8y%1ezO8} zIgD!BlF%fwIx6!c@GUc}{y=8UPs(b@mk|FTGD`6#t0n&^SA19Ak~s z58>Ybsa;zH$7}plb6);yq31h|E5B)29T>rWavvg&0hj0dyFCMewKIc#kTHnkK*S%@KB^y_^Sb z+ROm{EaJV?ggKpW8Y{NFap$kWxA0&PeniBfKVG1s`b_K(!gl-bAFMP7Mh!#h+vVhV zWFf+j0(K&A8j*X=D>PfBVL?oR3ZGZsEK5>&s!P9*WQS%2Aiekc?2^NKQhQB`&UXt| zV)l9Ny#nhF@j;eDwVhYWD`J^GJO+3%)aL-Js9yg8dD+Y{%@{xKNQ7DmaIH>92xrWx zH|p$NY-8eBsgAmEt$V4%D45#Dd)D>ydEStb)ZB}sHZ~ub%fq#}%L^s?1^DIK7+}b5 zZ2@*lxza+t7b{Q*D4|$mTEt?pY@83d${iANm`>2&XCIl$AS}G;^w`%A_$k7JRwn(Q zcb>KQuN7s6=sRIFCq?z$lx8>PZ-l>!pR3S2k)~9$&axjB4tw9+_5b$v2qr3rVqb=0P7ev? zY1>^6tqyWNK4>07elmP5sOC3!vGTqwI8KcY*W%N@`>-JHdy;y_8;bOw$7=UB6!v5) z+%`!^ausL_6LDQV!U-@W2liEn4l{snY2L&SLWGAH*XYF?Zk652>x*#f1xNRSWduP< zLFdbu{fu{~7pC(NEff~hv?&cvL*W1)VB%e!T(zSoHmoGR69HL+1J$M9jJ{U)O<51D zAflF~{){c{F301_rDX70hl$DVGa`L=1r5%8YDj{BVN;LZS_h(5)i^30dt(5ny1%^_C817^L+A|C(<{?`R>iV3Yux` z%)X4ZmLrt-#JViSUNg92??dGX^Z)DWt>dD4zW;G75CKsUkS-}H=>`$$1_5c2&P8fn z7DVZ8kVYEmUSesH?vh$+DT$R`UFM+t3Li1+0g&Er#sRVU%G8UFzPeh zyfV0siV1|fAF#~sp2s^Z?xYd>Y?lcSVipT`qwW6$Ukopm(6gR!bL3bnO~^iSa0!$; z5$X!V&AF2j_VgiK5m81;zcER>f6D6lrkb@c-AJVh{wCyS09887C5mUBo;@}>oUbDw~&A%)B-qk%F7+ z-T<-H3-y|ft;g3qGQ zho=`BFNJFP)?D&IU+VJKv9=t=J+C+S$a93csNFOWsT)|`EZDAUYfeYVQEa(=)mP`d zBs}!HPG>yWc#n}0 zbYEPnsga-$sy7?^>-KMcHE!MI{^NmhtmLCpJ0hx>o_gr2moZqKcF0D2OW@*dNP*s^DBRH4$0)fZM@*x6; z0xQi}Brb82hsn(-L`am7BK?*~KWOlH0>FV?`cZ#@N2#a&j_I(af@?(z@d{E-dIg4H zdt<=`b8-!L-R>olIVI()Ax9YKocIcN6+LdAI8a^&sEwh}=sT-$VMWA-M^QXadDr)S z&$7(Hmb=Ipd{1-1dl=lDPkgG{ zlPeE4FS;#zPb$~MD69Fp5Q&Npm?&?hjNd_fP+JD&SBx#U#g>DT;QUkEoeFjCEzwZ< zZuThTqKCCbjJasZuHwM$yDZVC_&aFoaz44KwEO5*DM-nAp(?b9X`{POJY5tl2S_VS zh$J$?{YD#}erfR2T`d8cc?ll@`ua)V@pQ9%=Ymwyo=R-^-*o z9{g35L;tg9MxzO|g{j8P=kZ?wE^xMfzm6*n0*pYk(+n$0^ej&`KrGD|kBJvT08vh3 z=VcLnwHQ<7oj}LvU+`>)Aqwu38cA4=Nmr;h&sF*)YfY< z(a?0w3M<^n{RFi7-*+`&No>A7jl9$kP5ZIvkiLY+5W5}dv+5jSD5ik-r_q8@mOec3 z)HdGLoZZt-0iA2QqVOeo>X7qlMj_31F;9!2x3D21bWDuBw*@K?aT6DPE%Eawgh(GZ zWQNc&p|4?1ttuir&$@tW+ZVg2Nz%TX|oqt=h4!LwjH9kWB0%^f0X?1zJ*yp8M_ zo{>z8-FpI95MVL9tpvjFX*4~d^f(HuKOj#{aY7~AiQbzWSUgy*wT%@i#jzu7N4b#z)7tA8Uk$-hJl16{ZAwdc zt^c-C<>3yy;GQ)h$fa1U0lK%vnhX}8vGL;#Z*y64tq)Ci@9h=RavPSPNLJ3@FThpa z8U7W?TCqxLY5@3gfQ`y00wGlH2J2!E28;5L4Df^46in8pW(!DGPwfii2B(4(idV|S z_%DhiVFgD)`N<-6!>?m{M?^Wq8B#9=GvBaCoqyN8MkHK2@RNlFIsbWg|2m(6J>@?i z^7S?j=nL>i|8*z>mq5XC+z=Gg4dbM<`sZ)}KEzmGU;f>x{eN~v2G2ohtw9Ec@+-V` z=0)#Ze0|MQ?nIK?uZH4*6Q|rs@wFN|6HAhPavE&AwP&8(dl_((WM}G=Vu^JTXlNw5 zy&;U*i)V7=*5BUA2BAq}y)PS_x+~UnH+G%gz?lpFaPd zoLlx20}obj^gVyXzcZ521D`lXrnE5w!~6uPF>Zv+Plb-`H21((9;Sfj6~WY6s}0e9 zpq{VW9rs}ckl-WTAtTSg_j^NK>uJIs*}$uKJKW$o%72Qrkj7l{DQ<1%n8LT*^xIeK z@=dRs&DTj3JGnzgk#lcpCk%#vH%9jcMdpbFjli51CVkk{I7+b`7x^CZPi;!Omtqqs z8+jLD#6E=cs>u&c#AplE3T%H!Pbn`6ErPOjofJikV<8F)+Nk9J6>l5bgWl zllU06kwGv+u~ByTa(~{LWZFcihWr&MCe8fT-kU(7EekO#cPF=TGCK2^Zqvj(Kk}hw zwtmJ9u7D3rf^%hHj@+XBXJp++!Aa*r4Q`2o+GV8dPH@`mqzfQaVk+?^GGhE+|>*fQfQyO^JY{bxeMJ z-={0!vl{XXkI68d9|Thoi8|LY3!GhM#{cd)H%QjCwWSG(Re4m65+K(*1EsM=XYP2r8nE85OM1 z{~6;z>vz%Z7=OXHkumZ;W}dahPza?padAL|iPA6u$g7y5Nj}SCrir?)H+X-w%Hl2s zfxot+1$ihRNA;uh0m)=5pf_Z-+D0T+fkbBYzb4 zl<(}7xzxV_O?}a?SQ1$)HN7-=qsl{PMIIz9>6v|=BNHkvov_ln}W@L*H4x7&-Hli#Qf*g0si0cIe6F9 zYn?271(?RaUcGCt|G%i+|IV@jUb%)x7?%0l|7<1>hUM@5K#=W!O&M1~V0Sc)UJ^~# zKi4_8@wp+WwbN>)q>>u!Rdx@*{HCnYI+(3nbI-H66;!OCMK|p+Gmb4YsK8r@_YCTH zE|lai$HPt9Gp$zp&xzdXg;6i%I7222Wfg{Vcfup3BnII#TkU9m9a@~)^Cp@_nfqQ( zG8-Ty|M`{&&zpvz2g`?bY1m?7T0p+*m_stw7U8@&u|2~kFU6dzRn7g{`Xs+~2~I0T z?Mdwd?Gp;{U^h29jrZkz;mmKN&iI^y8NUJK5g@_`e>(r2E>C*KMWC^Kg4lkxA0f3y z{HruC%%d^9)pK?k>AskytNV>>-MV0-zXC}^PQEiZ-|#!T3+n9b94F4vb|i-Q4(79u z`}M-($H~gr%(*ml6GJ8Zu=_yLC6J2s66Y!Rr_MXhpGwK{7;Rt1-n=(Dj-#X!ZyN7w zo}aEYZ&5MZ_DRt=ZX;cnt>|VTwJX!T$J)%=ADS(s+aMt8>E=G?wOuR+$1L62!Qf9? z-;GmoM1iQLx9u@sp6)w^25uv1rm*)6sIb9%zzf!2%oG=dBTOVKZs~G;+`t5qYj)0ON2~NJ;}=&uJ9d6#|LLI$qSj=%gK6wRD>g<<_@y0VDh3uhA1N-5jK*PbDp_yw*X#!5!?U%Pi~xB7sH)UZSSCeV z;N|Q_wu?t&SXrH2xp~UsLkuoNS_2&wxm{8+Q2`#|IID1r$wgkGsG5fTG`f}ZcN}@s zQd6~aAqVwtEIN9|yUzke=c!y=OU)ifC=1p$zIw-#E+=_YuB-{{WjSv<^-hfRHk#IT z(C9SCq&hK?bSBodP;$x9S|&b75qY!v&=&$R=uEm<{RGnNF)uY8TpR-edwA#;tmxu0 zfl!@!@5)m&Go*6G7u;tcQuF1irDdvRcI#hfN4_^QQmq z>Z4IpRqYkpUJ=3<^e`oiZKIC<7Ax-}k*mC3-uaAf(Rk52$lT>7uvgFGhh&lN2lN@G z|I!_ytI}&*9~@X-ZwGVbrbK7L8wWUo$Yh^_Xj^^tZ5Ykno%HO{~IS7*Uh?vXviuE%u14 zAKkco0#WGtL)vE~=<)O_47sQG9uK$T(V&e$F*77j*50(W z5xFX(UkJ0tL}xtXNtIyp+j>dXp`PIQ4Zq1Wc(^ssxwxoGL8%mYVk4DicS}6wu|6Mk zC{Byl4QDIGsGDe?4N|f&IF>X2eXn}o|HeizZ|~=?VsTg{+y1XNV^4CYm5cS3SBIJ$ ze$v*B-TjbIx7~UCJT>JdM#M>qv~Ru{_f!-w7ZqxdSxll=ho)kEUZEvew_qI6>4O)T zZRxAP)`cI~R5#o7aL43`P>bJ}cb7qHXjSm*;yXdKULYqbKHxsThaj;4d2d?Mv!7~S zr)9*_r>j&AYWAC$jgUZzs+6L~k9ei@o`Qsoz^fyE(Wf4E3J)FZ&}3!?Zhnl0tySwk zrk~YvhI5@8I0G{nQSri9W`-X9IoBYm&r|Wcmn_^=2zsNxe58NQO2g#%)dCt`_`!(b zgOd$u>9L#+mQ4v;v_*s2(D>6I_ABIP#M9`9e;RJx&R7=a98qWbm`)ea^%mX>eShFg zO6apvhiz-~2wvjmMBIVQZ~*H*IL7M93v)BCAZ8n8nBwwceOgpJENqr7;jn>gB=2`t z1FRLbK$hmT`m4|2xGU#9nolQHuSB=l6`s53mSEVcsffJCnqx{bU#0h=s*D>H@erba_e;W>oktu<;-M;$TMf2vbn^0zn=K zmy9TRg;44_#zAIO4zWAC)sxxf*y1|U-azXaDaC;=_x}9xHl>l>vx6z!wZUUR+4^px zZnkwul94yR`SN{4S{aeO;ElfjUb>g+CS-=Po-#S}#%Fl&Hm22haZ`;Q#mPBtW=Mea zk?Bp7B<^H$r9{(ycY2g{=@^>w^qXO;S~onOS!`SAJr(mV_a2=AS6MbF1$_TvfTm(@HQ3qAXl}=n2U4l zUu^V`o7YwSaL4B6=KS%9KbF#W?jId_0MG0*T%igMIi>7c9~=@rJNke}A4|vTFb{CxdKv*iYG$&`Pn^kJ759$|Ti|6kQdervL zQlD-Jd=Ylo>7zpM?r+1%@z~2tsj*|8Xu5c!i`g2R;NW0n@GJs>SXht{5owR||N5Q* zgzIn*N@Dv+(v1>t6(7w4x9&|MU}jlnDUb%;K&8fkEq*bOalWa1yWN;>gf1w1;7Q_r zbulurbamo(4r85flgcL7xVk_AQTcozDj%|z#X{G&M4$DEy3txkv>+^8aXo>FG(+^f z5-)5b$-xQpd@i{1R$=!c0yk$NudV|NNv-E2@+n3eS{02$%Ol!uZ@^}yxJ+u zx9!Bd&!E;SfTPGhRTJd(HaCv`Yzob2Fr0E)ozB0Y(t-(SJ zT56&CQI+crEm1TVHx!xQ7h=@a;}uda{%I^q^IK z9FW{crzn7Wy7J|32?66^Rz$s}It%KE3FH*ayj%9_0d}|Ywh*2_Bc(4tgeL%gF-9*0 z{IHmTP z8a?1|hkcNv|Iv0wKKyn*8^mAi&i94YM~}ZRCaEF_7(gdFoYKj&KYvdD)YEce>^;Be z3&v=WW3eQp@HXFzvn@st`KJPUsv!E5yPcj7$qSqAvmZa8c$r{uw>KV5nsy?iTYr}> zjMDOB=_830B}5+6xbTgHWeE|3$?33&D2L&adoi{3p0D*%ESN#mlC$DDLNdZz^s)w} z)WZ||;rq6&GLqYUIfmoen(5#B1-~Sw&lc6sXHPd5iA)^Yf9^|*>`SviI668~*<7A< zy2fGCUOJ6ar7rBEb<+4Hi=X*9%-Y4Y7e3Pz9H%1VLk%sOA>R0d>%K-6Q-_spI$2u*v`pyoNO*3Q zx6D+>KHc0UbCCUu5*w)OLFQ7lY8OTayB zLB4Ok%jU_H5W`Q}CT;~pqePc{l3NVeD`uMMAPp65RSwe*UIWprBVhQC@c_{DCFT_kPH(QP z))Z`RMRy_9e>f%%92MR0++~ULcbi0&K{_Zxvm_48Hw}6v@bOc;ZeR2EM_pzVI==DO zYfChl(y4~n1p|)o6Y4?WH11ru%pm8 znm2|aC2vt|(xX^nbIP;*J>?{EJbUZx+(o&i^fqgPI)7-EJq0Pd76kuDL3cF|B8i0M zR%SA|8z`L~L4bhEqmm+_hj#l{v?zeg%`aZU(kO)Zu@(PfUQw|Qn_ygyI=X<0nMRxw zwyXA_1OFx0Q?;`k{BLUJ5#b_gR~JYp{lcG~Z{7+0N@hZ+9{Y^989t~a!#)PT@#;0& zsEvgQNhbaFK&c`esi-l-nFr8w*Ikdgpm^D|c7^v>3kZmq+(b7RY|3~toi zY&nE9E3Auqeji+JySHZV20GqmUBQv2#Cum1IO0hx{wTU~TY}Xt_DAs@sZ|lS;zv{v zhuhW}pagcik798fwhkoh6Dz9U^u3}ZWa`!Nop1~8qri2;t9t_<=Hw9>+>&PA?0Hlh zwRuGBWvDIi(ziyw;xd67?r0(Vl0)cQhLW$kOXf;eto|K1rYIsA=dUgzA!|=25or<1 zm~CcCuf4bVNGJ~jD+{QeXa>U6xEh}*rE^DK^LghohjDlOBcmFN*w4jxD{+YoY}sZA zy_zW_RjiWz8o+H6vAlneyvWvi;jc zjzTYJ+e21=v=_{EPFYWUyLXcu|E)d&C!vM^GOt^iNRj!5q61u!BouDSX8R@Br@G@=lx9u4)V(g_tOA(>>nHlQ1nw45LZQ8;P z5p)~A_3!Nn@-DwXy=!<%)6F=LWw!JKEu_;ct<>gXm8z^%0|A``p|3W})@B_>%^u~I zD8rcbib8E-J|Z7{V}*0l;S12R=cqmW<&X{Xf8gd=4OR}Id6!kxQ{xi@OMeLlg(z4! z8(}Ow3AX2oxr#k4wsnLt3rkE*dq34z zufoKvjDw|Hc&w<GF-*K!y3sY+UA;-xNqNg zPsQ^&=Ivu8EUBt-R}?Q&@&{8hG5UVtFi-!?c$D^y3OHR*pZMh3@%xoP#Ax%Kd&b*B z1~Z#2u0qj5!kp4H4VLgsZfkM$v^2UmOBpRh_t_M!ULQZ$Qo{@(miV0jK0l%Q3ZE$c zD_D&1%e&};7YHW#H|30|Ur5^^cpc{ZsQpn^3(nA|;11QTYJ!eno*q9i8=0r$^{q=gPOc_C7y4#y(i-z1a|| zYDj{q%#-$K3JCi*sG$dH=bXlcv(@-cPX-nh5NGW-V4>;5sb9|)SVF#NQRit8gOkTiV%xmmqFIbk1#S^w`n@mN(pZJGHUdwC1AEz@~oRr0r6y z%l-7pvMJx{*R9+3Kp2GtkB8mAR>>w`a3p6oD;L*%8u&sJk!x%sh>P-{m6i&a4uI|BKX4^?J;Utkw`HsaA1qD1n5DLK%O((2cHuR!_dZ8S4r>f1b(!x# zW*))4)kxQS5QQ=Z9@65+9^_#Ix;uAP2AEg#>(SXcJ|$m0b(9QGE~fGgUr7paz5eOE zfJpV&wb~pg;gIp3|9lrMA0vECS3f+tnPCq8LcH&?z-ybdfAn+lhGqEn$L7Vmqtv51 zKLsia@C?jqq$OT|*eMaBSm&Ndf0iIfGoMP@AMDif6I!Yu_vAy<_r(W!)Nj7!NpF_* ziT{|G_4u>>4)09oyD)JpwWJ^XAyN(C#gD=AA^~!j8cWX?=-^~Px8Bv`+F4i@yn5$Cy`b?^Ev4 zH7p2G*HPrKAt-}j1!>ws~WXr5)ZqEeKEZ&VQvnL`pW@b~dab(B>)YsgBsg zXuu!TuUwAxnxx9cf-k?L8NUz$#zpvL47RFKEl6iM20IoHQ>hp>eXRY=z0Qd+o*qPQ zS)@Q>lXfR-WPSZZ!vYfoOsd>&9lXYhQXaai76xoft}ZuwqQkK$U!RLJm@ufkqT=f8 zaJwg(&R8&DI0{}O3hIS60VFGIW1S3_@i+~blq$y8UBLrq zjpB?la5&08g=^@W)ja5gr0%?kM92yU|MD3k`FN5btE-&S`msm>eFoSf#gvRnO2{tc zHM>?LVeNhjH{-WIIXmduH1X+{#@$s;CE+*kydqaj+sMGrJ*)hDml_SE}3F*X9S*Uze0-m#yBJ>A(G9v*DWs;OP9 zpTD?xsW>}0ywDwQ;Q?Z>rUG>p=Ie@xE#%<#=F@sPeMsrxy^*z?^g=xB7Zn zZTP-~;~AK~Jz4DuO=t!&Sps;@P(fUt5j(rx6kbrH^1}hz1M}RBC(ve8Gaf)~K#XaH zU<$^anU`RftrvUU*{zoqZ6esnGjs3N;jOKrd!Lz>aE`1HmT8wkNGVpIWL2Yu@>LKLHZkA=#c}DZR`g@66TzwyN zeCM({MVHxZX}rc>pS~=A42@DR30W7<>6CY0U|9Nyxu3D+9+|EC7~uR2_&pJ*N7*@Z zIkE0E^#h(wHe|${!nQ|CMRmU2uefe0tl9t4@rQuv}{sgCHKe85gkJTEsc)j{6X7ku*`ImZxAYkfh0y<+t_jg#zfQ2 zRT2J70EPZ|k2RNH5W-SBxu-3!uzcySQ!TlX@jhoj+9CeIbJSCLZs`gE5R@=km=gy> z`-ECze(7qa>|l6JlDOW{_Dv0R7OFt&AiYrOwb{iXOeZ=e{C+bl6JeT&*=x(xXq26# zzU^gcYLKcTwCFRu{AJBp-C9cDpsVVnTFI#Jj1T0MHt7x`Nhyj+1#kP=8ao?Lr&Srm zJ%}stZLpN=OJ!^0FsoOxsaFCrx>U$8o-^-FfB9%HIs6PQ2}JmO>y_H!;d=ZXeS|UY z(7+4NFAxY#c9O{krra_9rC~4Y&2dj<|BQqfskShO2`}isUd-F2BD%`}VqVk!S>De0*88_oWAWfkth7t|C>a;D&6DuJN?J-zXs< zAt8CT^8L6X#n5Ru8=|qYHFav0b!Ms84et^@c#aZ_0HTl*U9PSC8r-VJbT$NM5ZSUc z>@6;;%%9N1DYrHl(PiWQ;1+){K|h?%$!F09A+?hB$As+ax zL%t}--9s!TJlX;5dyj5dDqv73791MC)-N7unKzjWnE>LsnIyy|rZ5yGO`o5s&B4^o zI(vjteIJ?&N;!jqHet}=Jqk&_uKC;T*hmL(+2TPJ&-~L-hJHxbs9}aZm|*XIWwvJd zAU~OsS7?9m90g=ZJhxHL6_1A^nO~gOn0hrl^n_(1yR#$chCNj?lD*6s?BVN5%iUOD z7u}+wt;vZIs`&ga<`uL3IJ^%ClRK~sOGXyc0CJvmf*5ppJ`eC^@#-F)lZZc~cCapbp;r6xUYvJ9I=b&avgfpY%p)s0h%Gn0Vhbr}y zPa>ck5&IpS!@-AoYPz9%fdLy^lt{$GGvb7sRt zAS;i*ls4DxYyflXOAvon-rCNC#D>(dAH`dCjCodRC+D-XdlBips0dH_X{H~$``Y8; zdtL`F^-8?M?y$&-v8Zo;eYJ%H4|bHR)e0ODq}FLaS;Y)-pA6aXg02JVI5lpc8;pR=A?;>x2!K#UoZA}ewcdf>RsL_TH0@ZIh={)VsgNS|$N?B#1UQ=|DCkMY!d!FoRUqJ@EL_xF(iAoV0^!jwAqt0YGFWM?nTUd%Rfs zCCrbsx;E76ukkd05A*zs|+N^d+hq}xlIcjbFIS?uYDI2BOab{ZO+DM{*k;%&a=0wd|05;m#vamFo; zBLc*&Et{_*b|t)oTD&jTWV5Ix;%Oy(ATH+!y73Rj#&A!j$Q~vLI+KLFKQ>Bmjb=iT zvl}k=%F=02ybtW_d)40F-U7waN__Zza$vE@!Z-+x929T8e}C~l^uGS^hRHC#%Kh;& z;AF7ne7VJYVR`iJ4K7AT zhqnmzH(}3FM<~pFjQXR6x{bxL&6Wnp=8uDgKPG}G#V6i_eNN8?jb6Q)Zio96f4z$_ z-An~n@1X*8;2z3wQ7b(!DL?A>kpt&({0mStaejwHXpVXOpd=&r!MpD8*#(VN8M#V%vEN zKCu~({1LbCZTx*F-=stY9AF=#Azo46|cU|X^^XfnWZZnoXT~EevT-*VpDSjP=H!Z({!{4_G0x2g>x^NMf^C!;AX#@Ps@>(pZ(uk}aWYWsD}F!Qh3 zGxzfjh!wiZP=QFCEG0!V*+&@DD($peSACXA)an3Jy0o5)PHd9a+c`6(YKJQn8kTVv zNQz|&I~7aC{`jR+=GB7WP1aNN=l3#^NYnc_@}KP+EuV^6?1tqthZ-CnHXUx1KcX(t zby%571sh>)==vP=hQzry;PA2JkKP;KPH@TWj14p}v@|>f2osXdjN;|@yc`Q|t%&IZ ziW1r~7>eu}UAP9e{5i-RFh`Ec7;dW8fy`Y+zU69hK&Kj)TQtuWGKi0Vu zKdHwt-6;BW;9!Bb$GT?ir&SOBKzSC`8$py+dS&T!ukb+Oy`;{JIk^I|63B?Sxu_e= zRV*HYjmcQbAjfJN3;$U^-Kc_<@Q32*{2iq&I!=q(Oage2kBMxAB;C#B8YX-m?tIs34 zG?$C3=j!Z9ALCka5&GRE6^qpjO;A#@TO|mSS)yy&`MkY!aA!PpvXR?)RV0%8KKDn$ zHEJD%uSW-v)eg1fiEUeVMmZ2GB+kr6D&$tV{c5mDV*~N?^RMqstR-TVDj>d#naQcB z)aE23O(3J75I?^TqTdLD-RtqZR6=|6e|3yZT~tFA-lfl3#oA4t-VU*0r~;Nm@1-d2?i=~TuVE(CHXh;AJFzUc?|6{ zRBk_Xca4kZ4~cpLEF~qy{*d+==${y`bFrg;MX|OPnzXN-7~x60mg|4gmcd6XuSFy> zf7ysV%@^w!21DAe;EjK*bN~a@L(<!n2rRVlZ!Lu+-!YDwmWJz38!d zqkcxHf}<&9XaLOaM6!u-Msn&1I!7|IWLcjMzEv$g(|w)mu%8M@ruY@E1*}Il5Rk0# z6Ivc<9LPlYf1h3X&uf@%u6%;nf_+ZyA!Sfa>`)I+p#o}d4V>BL)Q0V^up#iItB7~| zB?p}=O9|W$zRuH#YY1@WLGjnW9}IQ|mset}O!K<4T27OLAxl|C#cPm^cnp`v#-DNf z^BYM{kj+7_>kN#V2OcCMo%#COJm3z8>FEUX9>B>E$c#q$@^!99!WQ`a^8U-yQMBowTCJX) z{RHonc(;z`OYA6mSk$8cNJ#m1YdwSD=OUesb)z(Lv{~&(6l;UqCiuQy6rC>Os0H5( zn4tF20r4YaU&&dMtNn7Pnb@X2aacm_x{0s70XCi54AJ<)lvw(D4hdlZlby^Qw3TFa zPv;IsIAM`VdCp;Fd)tew|6qMF<0~-6C(e*u;7@|^b-GGG6Rt;nJz;<<-~vf1|9_u} cOnk(N!&AD!{-S>VI=zCDocgQsmv8<49}|IU0RR91 literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-data-recovery.png b/windows/keep-secure/images/intune-data-recovery.png new file mode 100644 index 0000000000000000000000000000000000000000..0913c7a22b79d8834409b8e8aad309ba7cc9d7a7 GIT binary patch literal 1886 zcmY+Ec{tnY7RS@Nrlyu>)a^yEcy?@E$qT<0L z2SFf^qN|Iu7YMYU58M%QGQbJRwB-S^FUISlBdBRaV-ZOH7VhBg00RA*BmWH{3ozMB zaBnD3H#Rl~fuJBL5=j0MC=}}DqH)?7eH0eA zt8bXbk#cAxE{g&PYtOh`?p}<&n`ChXT&`gJ!!%bQ=18RiE=w%nN~N5|#U;RmLZLt` z7KnGn0s#uPsXI5=&4a9lbAp~W@%J;j7>v4amwn=-y@EIm%&Erf$GKbM)%OalWW`O=`;57 zMilhntWoufSvtH~vu3m?ZTBk5Nt&sp#usIa*3W<6-e07;?zC3c`{b*wLPQc#gE8S> zqj@0RNu*)ur6sIMUH|wY{sSnc0M|pg7E#M%v8C&oXSwvCcdD&9Ur0f3WBXUF zlorfi9`hhwLjuqDX6j94vP$-}P(3KU(dM z@Y@ND>N6*t*^$_$ei&N-qiQx@2?!W+i!`t?iSd-v?i;Q=q{7Pxy5TC3%dzVFtfZei zeZE$yO!Q>d+4GW{G29V6XvGY z>>!WO#3*PjRqJQV>SZm*ukBXD%S4RoGL*k5Uf=7)bYNfm24n_jJ6FiGfUG1L(TShv z@KRbZ(Vsl#zhJ;0D|Z@QZ3K&b{^|CqE@|`G9azP{xQkv=&Rr!fbH?^}gI1gKs7(0i zmsh72H(&uGxV%rcP{qHRX79e8n|ZzB%*QQPd}R`>!pAd2t=G=ItOKHu^kzU*B}v_7 zgw|h=^x4H%U0722mpCCC)#Um1-dnwExYE_`aY)Ek{=P!_TTOO@hFnN#DtjqE#qr$8 za4qFgbRn~QxyjYi59>Rl_gnvF`S8LVKW?S9uKxHz*6IP3EzJEpav7m2xwL_9$623~ z=HwS|q|(c!!>yMNReCt4I+g3`w^9l=#IIhxJh`~~5G>gl?ux<@Vu{7$dfV}d_&V8M zboXI6|Ja<_P{gFkId(kCrgMUyW+yayxr2LCc3NQiB@VOs(|hlr$!E(ps6#m7PmkM~ z8qaD)->kN?jlT5G-5&2KiRb7{_7oYfl4Xo2Oy)}?9eX1@Um}^4m_@4A`R;D)iW_!_ zX>nZ@AH4Zaq7`30F`;SUs8~_*9sVxEflo$>@hifTq96JvM4@=5^|yTp4F*_klILjccmnIDprTbO7U8wzp#0Ia2oA^^D9!l(maEdYVeVxY4ZfR$9yEdZ{y zFa`kFKO{K@bgCN)cU~vwDi8FGwJ`Yh1UbaH?T=satJ`*D6x(ud8cSY$?CCDeKL@+O zm;B|r&V14sra2fN6SQ-^zM%?_kI4ZpJf;V|QF5caY2_*`e3Q!TFD$`L{5j`;w)Woz fPHXO@?FcRX?k1Mhwfzkvcq8QxFXr0J literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-deploy-vpn.png b/windows/keep-secure/images/intune-deploy-vpn.png new file mode 100644 index 0000000000000000000000000000000000000000..de066d3a8ba34dc18337572376dd909dddb8098d GIT binary patch literal 37651 zcma&Mb8uzP^Z32VW@Fp7ZF^(ewr%6aPBz-uws~W0Y~65U8^8U$zkfef&#UUxnbUQq zYr3baYo=$Sl@z29U~yr;efx&+Q(9c*+c)rxZ{NUdp~3%2;95C&{=Fb9MdU@keQQX7 zdpG{^?;FNRTHE#8H^jmJJzyBrGC}`@*lrS9ZmNzJZl1<2=HHx*tsUGL9n9T`*%_G` zdFqUN=Jp0lE=tDQG`T$2A*vSZ;%^n{dITeDu773sfr`b)paDUA(4 zo&-;tX{3vqEKClQQZ$~K6B}nAA_6WB84UhACsd!Ug>RvWW2;9B6&gj}bED_*qUu#J zr&IIk#53S{^N#2EsY|o(<#v)O@as(|>^@Sc|3~{btX*)uAULNzR~o+?AXXn($!^zE zz0p9(4>-)~Sy@B>2Mjr9t^X60a?}5RwjL_b>$NSb=;+W=!s)lmQo>T08Bx08d@@1* z*LQg|X=k4xCF7^n{lI$;P-aau?LDPjl#`6U(yU>$1T}y3yDC2BfBIjc8*$*5Xez2o z5<(Zmg7YW?vj=xHKISk^9KJo+;$f)El`dFB(jdb9_q#tt79!$7xA=yz)bBnZ71MRv zVIb-_(R22sy#K|mSLxPk3iV|(wz|#3$Yp`h^<^hhHyi$C)zYbb&7Q0C$M$2VObOyo zgyzOdZ6RiS-;aTWN3@LvY=SjNVH7(tZ z)%82bTD}tPjn(ZZNJYoUrkke1wN=4Z-dRV?Nb4W?`a2Ilm^2GFcD6Scww%ykgO<3bNEu+wX`spwVxK=*`qe>;=yp;*gTJId4GNqIn{=@nS=x!M-MC$nDx zb^0uyHK+1RC&YARFxbEA=`l?iZN>zEK!1=U#^qBrIII*m`xF2hawAFGtyr>ro_zqr4*>@i};rS^D?J5&)5+PH*w z!pjFRdE1C{1EB+`Dy(;T`5g}W0K8ZLIZpW@J>sH!cW_K1BKaCm#4GBdB>j?0gdpt54B zQ_FELL85`cKT&`{&F$|KVsArGT&Oql4+3pMNCkEo(%cFv^l6~^Ip9U&RCUBcIK8(g z?#!4Q@cuyDR!it;+AF&P4m5|07W}c2GrxLYYKrW__29?B!+P>o=2u*{o~9Vyulopxbot-V?@IPeI9Za#Lki2?ff+2LP$ zg-8{l&J&%`_o@Q+qt)E-g{0g-KAxU{(AANJMts!JwoXrU*FOVg#Qi1(_kYjsE_&Az zGe(9eF+(qUcdnY&?c%#?yk2o9p}C=BUC~j!uL$2zfuq?JR_v{n7i&r5g?afV%F)Oa zhksyZ7yt89YaXTHl9;0MZHtPf3*5~?-tFn%TEgE7-V!+BK8ZtBab@ZjW>ScVOI!jb z^<5n|wRp5(yw<*?mcw6efc>Zg2u?Iv#U&obS&<@n)Bp!Yw7Ac1Y6Gpczqfhc`F35A z*fovj#y|khgfC60o5OJh`Y@YzG+^lIUqWyQbD>K9M*rjs7cV|p-R5^9CH|8Ys-*f7 z2C~ac=++fuAA0El)<*f@g^fLxW5#=RF>%QQ=`k;eo)>G3BH?vTw z5p(o(?M;->9eEFdV5O+^IdiYlh#zN?fUB#?4t`(X+&cE1l+hlIM|=gol+vl0k2;}` zzmY@%&!2Bs`RNlBW&nDUwPUAGMp$dWvcjcx)&{n-0(VU zAGe~cvjy_T^RIlkFkW`4px_|GruWzALKS*+0LA=cFHP5#n*#f3^I;=^pv+gXNlBX$ z4OUjCGcW66+bW!~siCi_q_|j|8eL20^L8$Xq)Fg$Vh|md&s^5ir(oyUhhv>8Egc$2!GUlQnZDrF zHEL{aTW(F1>$xtk&+tH+B(0(W#_801lIkB0(kNd>HvWJIC0(QS1bEy&_M$;bDi zMNPBI9X1mXpmN73K~Rj`8hH90{7^FsAJJ2~E|a9Sxy<$V9@5X?3BF#2o-rw1ex~Nd zgd64h?I=HCA{a{C#9Ztx_%FW*^V-TH&+Ynt1CpRUW{mj!e5Ll1#_qYAhYl(#%IKjb z*qv~fAK|gEl&ZH_-xuIauQf#~1Ra%0%F<~3y*Uda%;q~vxEE2g%I1)2S7 zQr7(Yg5yKiFG%wj2~`I9+eUmaB5$M#+5l)q|B|)n)!lmh;LN~srZCa0ZXXNdCA3QxGLAFNioRR(G2?`)Jy!nS+qSZFM3G?F0+mV)~ zq(V>bY1I|JyKm1zXf7(Vs9DK=lg-uPed`-7a7lHG8+u8w!Do9eQq~Qe({LL%h{{&0 z-l2dy($cZ^5zw@$9h+??U6!FbHfwYG`FPP5v=&fS^*8Cn%MefGIoP6zJ+EcFY)j>P zVnwT*LfIERV74MXCYkzY7I2isd9Xr*CN8a+MM$1BN7XOTHckvEK3_uY93?77Dq%_P z*w$50YGOT$C50nSPs*61C?U3_SjPV;ojU@BPl+2Idw`DuZ6+E&e96Cct=($5|FcYc zl^Y^CgJDK-*y#nl=fjO{%Yck*m)UvGW}u~eakGbPbc+VDnPV-4gavb1G+4E6vNRPl zBwV&#Fp);QOiq?4NqLLK#r-ek3GoC@-4VhVK z70wwskF%2Zizq1Cfuj9!@w>E|UC1}$;`(moUy}*#T#Se!`^D84xMXFQKtJIwxrh%p zLIK2RO(K1dT;o8x;CQC9oURLJ>9go&W;D10vh=WAvGTKQo(uC_*w}Qx2GRawVwAE{ zm1KZj0dkaJs9aRT51&_)IjGK0EzQI%hyo?&GE>-K3Z++zbTY-nzZwQkIH^%F{XZ>C zMjSG8iJ13GrTcFo2*WS^i};Y#VmXVVVfZXY< zZalB>hM#!WP`l{5Yu&9?sl%XdTf-X=k!k+sEayOuq#;#|Bhe?hORi?kj}(km6!4<- zm4myng-J@R%l&pf8rpyH03>+Q4$QnQDa6`~m{P_i{!+Dx{4d0cxK}hZkNi`Q6sUFz zbIBVM2UyR~C0qB63_rI#cY5BIxfA$#MC#v))_@wtFeJzg;buSV0_xXaCnrY@f5xRJOJrAu6 ziofg4r951e_)&rBHM9)f(#0#h5%(eq!^>3agEDS3YN(!b`cf9Xjey94iVcR{U}v}+ zt{KiQ!w}xpN*rJJn@5wwkPm5YqO#iFb@&B5#ClaYa(tyAe2xA$APe`e!j_#Q*l&%P zTZ*DaT3Ju3RL5cpt6G_{RQo(HfT)|-Lt}nOG7S%W-5g?lUcU98K(X-Kw zFIhGkm9nwB>sFLpeu!HPwCeZ@UMM&07^$0g~511_ZyP~)qj8TdQ&fe`>M zGj&|gH2Pm#gtt%OHdLp|Ff~1M?@LYyg zj`F>O!iohOVxp)TM*T14)vkOYYTjtM6%4k`uuzv zSodMc`(5^R6Pj@*b1O5RnlF1}^oL=}NJvfm84KT`MqI48!{647HhMbdtvi0nd`Vcb zOhubQ+8FKcW*Wgh&Ua)EF}gX&+UdAmrRS^<*U5PIu6?p0d3TONDGA~U%{43lW-q?g z@b9Ds6rsAwp2Js%V%DUZ&Y4m{vTb_zBBLyHYuYRTF;=+xo( z#dCWJhRxM%+K4kjDJNOQ%;mMn5=(MJj2K_1UHm4lZQqODocr2oC!xyy5hPxh>%QquKv(puWWN`I|VPQT2K0B_)3jX|pSA>%U&y5bD#5PIZ~ zGfDz`M_HVks`14`$KJfREl0<>?41vd8=|l6vhtUFCnW)yn~o$Fl3?zex-Y-CLt$Ax z6Bx|5CK^PK@*;U|+^;{EZn_C@S5!B!=mq6R5&)vV9uPG6_?R)01;~5c#}WY5Bl$;c z+Vb+%_RqHEu`Wi0WIu2)BoQm})!gv!1t-1<9y;Pip5N7ggk`%H* zV`ALCv7`IVTu>F+12?U$_Z@O7+x|W=Jfa#_4f6K_(k7=c5D!KV*3nMM&mdCmg=-2x zRRrEOe(+kr9zkm;@;Zt6?4;ABM{Ybt>}(x`=yqmVvbH0_^4+vj>o9KjHN4J8(@8dX z?H{+P8Mq9DEOc}R~&3J$;(YOJnuX` z_UGF7G%HvAZ2GMOQisYcCJJ|x7KQkPs&pZxAR0%`XnNT~N0bd197jH3wJr~?*RmQP z|F}FGF@(xXinSNtZ_b53@cnAIH3=I3E#aT`R?myet0C_m%I#+#c+zm)07(*_g{^H0 z?DfKVAx=6uCtU+9WBc>&CEs}T0OBQRIz@Skv;aHzXYpt~L9<5~)ZZCpe;V-0DiJmW zHW-4L?4R0ynDnvgar+is!2(rbY0p_~*9Le=7#`;Joe+R;xMsT~?=k3YhfUFb!Bdcm z%k@TEGS2ScFBe>feV?yHgRi5ua0FkEO!Hx8Z#O@~cD_E2g#wA<%fBw_0&AG48NX&7 z4FWzC+w>5d$3|j=V1bHmz7_bD&Hf&)FBG|hnaeq&(naWXv~uysH&wV@+l+O%^2-l5 zBQfZG$n*$A9V>0n?HKqr6~aZ%5)>HwOh@n|`#m-8f{~~NUY2pt;lHalOlb(wOOguF zv33%u7I?I^*Ve#A)Dq}$b1%Ctfm2+-plml-!(7b#sbh^m8#@?p+XLd|^ zs&i<*FEg9agfX>N`Q36iNs^>ePUlXBA1UhEf zc`3sqNjI%Ky?p5T2^ayu5Ap0Xfp;XbbDl8lsuxTy(4Rw zToWlrfZ2Fi$>}-i%lwKrdtGM!;WM)01?nlFi>TG6%0d1@V>)*$OINkaJxz&J8iK@y zbyYkR%rq996hLgpJPv^e8QUNt3JoKUjv8e~UI-2zZS|d!t&Ji$QJ5U*F*7&dlqSRP zWT8y)Y2(UO;c3HPXPxcx4IE8fYgueP3#+XIg4@I|eaWB@)O`xhJf%8-*9_3PDnh+s zskZ#1Dkhp&1quzNaUj$WU?li@(myl&+UH+>zdq*1Z)iEfVkSdO)vcR57#`Lx+|am( zEKS(CBl_xksQdC3p(JGjO?StH-bfU`B&#|07t1qJh=Ls4vs-Ysw|LSw&6r!Im&pnz+|{>>CZOpwM5bK}s`BU95oL zOjIQQW7V>;u1;y6j$WX4%;rDY*hYEl2U!HS&I? zM*&N`-fYWCr$q%f7i3+Xt)Krg9h-ww-+IW5>^lkr<7)qK$3#n*64>g-L(DG2F@<*) zgqUPqQ7%RN*t&aHV*@VNIk)4#+T0Q zeTDw0AJ(%|(hs8~)R%kZm&Zo|#rY@jRmw#wj#^G%Zwoa+21DlmX3>T>JZ_Gp*9x7I zvuU2S4fY5TpSitws?k~1nxiu7w(vckFiQgH%<$>0N6xZGkjv_Nti&eTySG3&BW%q;T;k{8oT}i1QOLl#4494*!o)8P;8rxTg*K0M2>WqK5)y5UJs@8Tg)s z8h-a-vD91VTSRX4e&fU7v^xHzVEp#L+{58{Ra|-9#QF||PgiJ%TYW0@mAHb1#hdC+ z3kaDV;NULhOIb*Fn%iHI!pr2`GpOHq*>f z>Mog1$*7U9rCq@Z1H(`)Ze$0cAKMfqu|b>3lB(aU1q%0=HkU{0fIa1Jg6Wp@%qZMN zA~yXD7kQ(iphIP6mYpQ{OF08FHT?1dSGn?HpA{4FS@nk;-DshhpPVzws*3^CAD5-( zNEA^a#0C^*UBY z$YG%YYEQ(%7t$8jU(DncUFW2fgoJ6gSWn^Z`W*K0#O?A$6yZo=3Ux2LT z*Ic7oPe4JP?&j3t?X&&9s!fYayTrH6Uvmjo9F@zM1I?dind@$0e4M6_d~|?0kpNj) zwl;}PzTZpJEpR{P8&cv7DMupu4YPlBT<9lv{LmK-O3_p*7WL)Nwbn{}aKH27Py8Lu zl!%akH}i5UUe}IL%z~DxvN~6ivz)iJ1@32CSXZ@>N|LZci|@l_jrncT=Z0sxx?KLx z<`f1rUq2O#g3BL;yh@fD8x?xgkSY#mUEWR#OS0p$Smm>mj1ZKwP=C zHFd0?-v}!X|DTmDdVZK^sF)bDWJ1DOFGGeJ(Y5-)Lak8$+^t6Cvzp=lq{lq4`o{~a zQg0i*KQ`6g3YjM6UU*p!A%gPH<>OYw;%8y@0-rL-{`D} z)a97gbYjfLY)0L6-@q)G1xX#P_kvY-vgMO`%dOVd*r7X$Woe? zOL7-%Ap8h5SM6QlTGL=A{7zAKrER6^UQB7pLQxqrY#aR8HaZn8D1rpq;5LE;?l!~$ z)(D$dKTvO7Fv^s=E|ofIP7vRP1j(X>TA(_p(1g^1eF}`UKAZSA11uG;hVPTIm>7K( z@EMqkv8&9nQtg+62tSEQ{?SK?K?F{_jj~G%Lms35N#XHQ_ID@yYi>Ud>xXxy}9bUvwI)AFPew#f&7C6H{3$grO(gUK?kS_*%hwFr6Nf|^av|0Ej_j&y7cU2 zA#8+$vqK=6wpsGH<;=x8Je>VT0&|xd=DXsXlu4e!^S}^*MTGQp4c+a^L_%`2H#A(o z`;Gb2@5y*(aT8RdaWj)1F*^QJL@;&tts=$MXO-@Mqjj84tT#@Y9rr&t7<6&A=;}K1 zYWGJB$zdC3q)|}l-aMD+*?X*fHaR|{4Rl0GwdQiEXMbOdX{+4%`RJeo#G8yWjKA$g zTM%M}Df^%CB#u}JaIbT%%RV|T-g=wIrtT)9f&MiCGYZ@@40%|QVgKVj6s?k*{6Ey3 z|5^AyBbn+zJN{2w=hd*N|8eValkM31vhcJM*oOf2AI=-s7i~MA|5e#B!2bi(3RcMt z@gHi=(Emp{2>Jg|0+JB_kKX_>;r|08GU)%HMf^XN>iGYEy6@22+@VUN?-+D|sw&}b z&R79mwl3RnR+wLqW3ty}&ybTCl`$zx0_M*@q+;pq3|KZ+%-1e!i@UM>w1&P2ji?|~ z!1uT70^i}i9n;Jg^nMm&y$|f%Kysv*2CL2M``iG>Q~eo&1<`rC+)S@*t$)?7^P@)3 z|DoIA`gk%j&BGufL?`5`(GB)^(^Y$SGAOC`Nhdm&0`mSwfreNI!$QVfTIOmDbn<$r z(x@Lq;l^rkJGXGOu(Z`@W2-Uzbh4iK*t+0(n0mkMd=L?l2SW@6{G^U`xa)B(_Zicj8P9QFw3vl~J)9`azH@*>rEbwT?AQ8?glqeFf!> zmH*btk9Qn&i_lZ2|M{G@8dDw;F1%|1D6w$WR(VvC7KfsG>Mej-%@WiHN&yi*^J-^m z4Yb3}!Hv7x^|hWrFFnGiTT2F=$IT$PUHJqGp{lMI;i6?J9WXd0SNGLwtfQs zr=4bRE1EYPLwb&iD`U@#+XE{mOlAL^eYGDYH%~>N_tpNLZ-J`vc{F@Z*b{YTyr(D7 z&C+xBy}hlk?Y3wp%1M<4TYAhkQ3T_QetX#9At0AFKwlW+%k3mW zS^)y7k1yk&p0t-$W>?kC_^z_N0FYPuM(+UCqA>}Z83yaH&Q*WU04?e@>v`2x(+6qQa-b*Ah)X~+%#x& zXQpPD&YLnu5D_0oiV1#nWV!L?rlrsIUu|w0&`-`xP5Bqj)n%o`-d}6WNtzc~oehbK zsnet=Fjeheo$Jtk2yau2&5lFzFk{QjEU>PH)l})Ko0}IO3eqgs*=rMVo-CfT^OpUx zC+b8Q-MHo~`4C~$Lo4XNbQQV)*!#!;=?2;+I;r~9MQ$?DS#@yf}!r?wH> zjIU6;P2*+@DPrW;afO^x(iCVy=c6(%OpA7J(R|5tKDiK_vK7yK2fUeeK(U%tZ&6bNzHpmC+yTxWZu7z%>KI3a=3`9_ojUQOMph{8J`|DJcI@ zvw(BV1~=QM-CNfDg-a^MJ^MQ0h(eOw2N8+B#Iy-&-|-g0pV>qXP$LwHv`_MF&0P)i zBwi^QxxjCnQkIwkffc%XO}cq;OTgDt70mD0lugaA51^6pW)E$~+;rrNAd!7&1te6W z;ADQ9+Ir1-^*;p3DX3!#5JsX&HLw-h#HHIB1^9L zFm1wuTb@$N$fv>ymHaL*L7ZsCJ~B-wU8`nT4T_`qOB{$k?}dsQ?bZ(>MbnCK$7@Nv zwcQ+77|EH|CQGU{5V^8=7=fSNt?8liZo(1_hg|z50W8AF0q{qV4XB`|l4Y$6me=F)DhcI$hqP7*6-CS4!sR`9!&;u)e)NIi14c(l6~temC`!{Y!n=@ndOgQY(`zBY zh?843s9u_~j35vGDK4rHjXTU*gnEMZ%He_fh7K!F%xl44wbSaA<+|-PBbbcEMw%$i zwbn?cdO6y(`$THRh6vciX zE%+cg1Z;jT!q57OkT~G)%MnY5Rh=jYjlDC;{x>QIqHILzpPc%*-fq_9h>Cuh+N};8 zrtYm%n%)ZpDZL{_$aC5p8l#U@x2pXY&tc+c)sm~YaHz@<$y$$y?*?;KM4NE+_WrSo zT7{1vqfHU_%;;(@9V>WM>vZG_T>%HQ!5Vpuuzh?ik1~~TRDAg|(c(U~)x(ry8w4>t zr#`!m*s9w?b^%X!%0gvo*PlU?w}{?G9p+uM0rd^<>h7&?0Voqg=-~dMG;QsM(S*Tv_HM!zimv*+wrK1aW zLqEhswprgNm^%KVzrP49SPUh%>V(0~5^v8|`@O`2QV`yDI7nB;(T{a&O=rK4o)o3w zQyKol87^1lW@t-ZM4b~d4kqU3rDi!2A`(K=zIF5yGq## zl}?UZhpSu2GD4nSHG-*2-{5(!Pfx6YZVle+E9@-XpLrm7rvEg7i4qku3veL0`>0h^+B6`N_@KT zcMc|fWE1t{v4<^!(@+#mejjg%L!ItWGy9Pg1$4o>X7R;n^j};ne1abj6SbROrmH)d zaacZ~wm%uJoaDs)9mROUg|A@%R%h8NXG*Q(r1#b;UN5-{;}0XlAF%G5ih^` zq@d5(M;KrMv-(^opP>>vd|bx)aa1eTzvs;QY(4G*ID$nUlWX-VCfgt zRN_(x=}YI*3B~~xOoxuF`@f+I?@nWv(SBl2$&b-*CgtMBaV3|)Bn5qU;P2|5W3}lc zQto?Tu-i6Fb2sv#c0Np=D72%D`**r+L2el@X0#sBRu|=kzan)17Nu3i6?EbD`4K#7 z(N909vRU3kJsVGgTycZ*f;X>Pw5QX^je>C?Pu#?7;Zcu%{PxPa)p3}wi!Ot1w*j}W zEK2yBj+%Zs`^jabo_OJPxu65T>wepB?&SlEch?qQFfnDN%zkV?ns&8E^nB0&-il{J!fi| zr{i7fsr5&a7V9sDlUCV{Wi28;EbBc^Cm9NO4Y2}8&h{?A#-VqNST@(K= zwk3JZL)U9OjEm3}Y=zvPZ4$k9s6&p5{&zdY+}yZJyKRz!v9KZg*Y9_el@wAkReY)Q z!$yv%(={!DxIN3#t`%rH=ma`r}WEDBtAa7!Wj6 z-0Aw=f)g=rB#@cu@^p`_AvQYRfNnvw13Kx(bbr~J6N`$JTV=0I1A(%gobYp`csJ}X z2BM*N@8y|-E0#FDow2mzVnU0$s&rT+dYk>o^t8AX!aF~E&%ynKOeXP8)*)LoeIIv+ z%7Yp}jLIuoWeV|zk-y}$YCN>%CdP9bH&?`;G6t<+?`ChB3jJgCZ2PPZ!`rBHkLKlA zhVFYZeS9bz1#3H9+$$L91_w2h z0`BU`eZyW&qx<8tCb3I)@Nt3nDKMa-CR7%>sIc2n>6CVT@C90P?A}ewEp;j!2Xg=( zmJF1BVbx6ZAd2<0kOd1PFcD|Q7^d)X=1;IL;VZ1h?jcq$V-qa40lutBI6s8c^V{ge zm6D#PcMc{-SbHL*hU5MMl&&nlr%u49t(Df$u$$5%eWI# z%oz*3%G!+3wjeTjjo1@+ddt_tezsOhC;!AK5oYs`TQx9inUoL3k23ABjauq>7C3-E z8+UYx)*g{%T2|$+#?RPQsJ*Wxei;UW4spcRYIrX-s2KxX51{2gC%*bO->>DsNSc=u&i^ffkNCS~;-Y z=UU$aZQi@yf1FE$T&wOS_pfY!<|yf5=a$sR#|ARUMrPwtDqI>(1vL*&0hT!TyaL(A zBEyTGC-J+TE1JNaMGVwhH?Ru~n$XTiyrge}>YLGO)Y)KBKT!B>#b23Stg5E~-Dl-g zs_*_+N1=cAd7%=ni(HK!Z80Ke2j6#FL7js8j{kzhITarzNOC2Ts9V859fK)k>2?`G%4>G(h)N@Mhyh4jlCbIyHn)S4F6wvEK%w{?HX$0GJz{yemty4_5vF>pT ziI`Qj|;ajYS(>K^ADG-qGTFdxVeocwy`LytW6V-&?RRNDx|GbJjg=zMh`tb0yO z$^mHHO`Y3PlcC+zRq+uZwB33M>70BA`>T!9ige>%q*4{#!!=Ya<{Q$6$n*sb9BBJP zLmr@XA3UgGK!+A+sWfg7P?$^h_O^J~KnZ)Ed}m`1X0=!b;cG-4ufPBv$HCrY@-{9a zh^(ETV*ChF)&|gJyO-^Wd2okBQp{BkIAe-ST>Hw-dsGK66{glBRM+5d7UxuLAaOqo^tYeAR zNFDH}IIXRb#Zpv5NM``w@vNMiUszBaaOjg1IOhZMS;dG>HmH&dXgHNnleU>l(|O`G z=tr0pZc>9(|7n3wNOHe@5gGI$HNVwSaZ}ovfKxFp8c3Kc$w@^_a9;rQzKU$DPA}{G z>D=T9qe#<;HotTZq0JO-Uz>NTdEM-(?|~T8tkO1qB%o*QhIwpz{B60@as+bdyZ8rY;WQ2ykk?-QP9LlxXc|I zdK(iBlqvb2O(_e_y{|NF6r)N14G-?l4*nU^9j+xFpgb=&lh@*V!w@9{0*44H+rvdo z@k+VijVGD7c}7*93f6~XX*%EciH{qtDg6C@~fk76{ET5>&YmyNZl8iUk|m z<*SpMmiMlTKDzD4yz(90b6!UZ!A(!^I0%IF%lMXa9P4qBLL>h!l3L*&RyETFXT)~8 z(X0De0v4M`+|Vy{P^b-wJE?O0Vq5jE2lUQ&I@MPk_U-Ja&EI%GGPE{BXn}%3DzU3= zZl#)+5nikig%BMofxXMJBPlk#QViN!UFd;PP-hDDbonn8rL8@aez71fQvwWe{Dw-X zEl2AF&JgZeWQ$E9RnwaOOZc{%`aU`5Toby?>0M~iR-`m8NbMlJ3w^p@9Qf9ZBud;S zWBR#-!;p95n^rNRwyr+H2UiG#(3qOn{A^u?ud=2eSb>fSqcorOY=H?N1vn8R9B!&2 zQwe8PxLmELixYlPXT6{Mi8F-2T(y>(sEu-LfLJ;u-{3|Xmb(=%u19kVKr|%Bx##mQ zzWcxXT)j3_=u-RdRE$shdNB*NqYRP)hW!%Qw0Tw2C)=bCzc#}yvr`5~CGDYV@llC`DTjkc=cM?>_gAP@{ zl>5$@%>!xDFsQiz&fZygV;2b7joTRjJZ+`a)&Ot3VbSxD+jxHA^T1JI0$(_uW)N>` z9@8%SLd=;X0bl_~a62AAB?@v$>yvU`B^FBvzDE!1l3FmNsXb>&xec_np3eaaxc3q6ZEo!=Bs0sBZ+(?Z7cWqYg`_RhFshrQx1PTDVM&Sp8y1 z&2#tly(v-VYK(C-xlyHdSSis0|2a_@i;W**ivv~CNvnJC19qXMCvb!1JaD(JK#n70 z&~B{uQp|D$`WF^f6zZYoOngMccBW00K@rYCHxfbo>}OXGRn19^sr~3z2#Bi;4;(21 zPpbZ;-;lfW)z+Y&RNzZBW0{xFy_a*UQ1zdc;Xi|+w_AMOzes+_&Wm#=Z;Z8$#~C<4 zZ(`Fk^_h<+sgF4{#whqnJDYs8Gc+8e$R`fSPkogyuj33?W?*I4h7ml{Q<+OB!!BLUR1N z)}KQ8(tw9=e;2T;R2 z+#LWhqDFCP#C2xpa}CvIx=5k|{c2HNj}C9PB@^2=zVblXruMtKMyV8|t$XEL6$-p* z!&oD{yd%P!`Uu-(lzrP)d`}0T4q9=q*2(>$rz628I+hn~%KX$UU-Pf4);+KMG=B(G zF|5y$PT^9B|7y(jyj~|wQ&=-{s|<~O_{y(~$tay}n5I;(ld&Jq6)Asl16g)T=@cY1 zv($IEa(lN5V(t#$xQff&?^m!y^Uc)UgqoS7VD|Q45XkhGRRZC!tDWeW3a%7YlK^gn8RHIW>-so%_U>2}qd@4;QuIWKvK&;Cl7xXCeUA5C58X3;>_FE7|yV?x|R9lLXrHgn!nofy3IRg3wkN^ z$`-@JjL`XwoP_twxz^dlAR<2Dhf)Aq+UH>02w~c0O=;b%*y=&-xtt~}1!WcfWZ%E6 zGBC)cl;aJDmRgRht=KAMQ?J$zGUuADU-dENWD z$XY%&SbfMb(e&O-9rc10aOsZjB)IwuibF7O=2Or=@bnx0r5e&12{gG$;il@e1S7Yo z&OjvH8AY|7ZGc+uXo(2)hx*mr-qU`HFB8@EV zU-37~OvDWHF(=1%N!ud?TG7Myd0m`r0gtMc(B0Nbp3>}aBeFp^_n*7QZ;onP+KAqh zk)AR<>3K`qW8z|(rlyL!Xx2$i{kgKA zF&_c!W=8&LE`(dEF%afm5g{XHrz|VJ%m$(AbI>6!%epLJze@x4ONtPH2tLzY$Hu?C zpD-x;^XbA}L_!ssm>&dqqw)>(ED?2a9##mhet#kbw`*^;&B?YPIwZ?3(@w^$cuqG> zuik!gEPB9+q9G}yQ6+2N{2Dqx8W}{Q91lMw(M!sk4-+Fxwt``j z^)Q2VYX3ziAuAtE6|>EMA^vJ*Mg1xCIKy9AVY{xUetB(!m`kY1J^p~VF#|bHYcf@6eZBTwf z&4rqpUe)P#t04BdPOk{c=9_$dH{PZ1o)+p5j^DrNUjO5_dPD8*~XA&kS`Q#8eXh;_xSBhao0RSE`Nv(VatY*u7u!yTTV`H&k!he zNbZA~Cr7eKq}fcb4x0o03F6-&pB%YMoWYPCL$ z^E;(_-FPuzUk#bT0T|F(O9XYAD{kue;^FnV`!2o0Tm(wy0-CECU7uiR$v5eLE#20p zhEYqE9rn^i%qmm)eGb>$G&Zz+QP_C;%Tlo$lK40p3cv-B5M5r1Rko+3r1X&O8!aOs zY_62|-04Cdm^q2MMyp%q_48USR;omg*56(uOdM}V2E>b0^?L99ON_j!#unjD2d{W+ zY8`)$?rv{g{uNC4!h2MG=@^GXU&2S4?<;+Zb1w*T6{|t+>fUsI8ag&Q%4-BdTvWa* zze~4!$KOB-3W)Ge-zov2u&|Zf*mG?qZ%YX77*moLS!#o=2cW$-T|unnIy?lO%V{{U z?MZur6U{6mNH)cvKq*a{FehQcnmUt`vQh+HFndP+rqS&IFdG=Yrzn)O1i6pMwvW>; zTKG-JZbn)I4JYT8z67@E=-XtmPEFVQ>)W`k4#Rl?QfqHdS5a_(f{P34E1BJH;KC>q z$w#&MXsUCm4~{xja;tX-15}?~Djks&)p6Q@afjSzef;km$)kZZy6*lt?8Bnbc$pYTGCZxr%AO@KZ7^%t9ho3%lMC_@$Go6N9(J^NlgWPAlOd=M^&>ZAROM* zi%GkWUDVHVBGWTG_l49j?1V!%TT<|v-960+ar7JQg8dqHJWou;Kuy(&87(43EpBfPk(f)&s<2-Jvi0S)J*0*UQb(mn2reHN8~+{`mR#qV3e| z$nh-SP7goAJ(H)`pte|(sp|LG^n5gxo@PTG)SEY|Is$y*d7N6D`y68_=;$Jbjx zwbguU<87%>v=l4u#R3#}cXxMpm*5mA8r&&X+}(n=Kya7h7OZ%KJ73!Oy}x_!|NpIT ztywwAWMrY#HB2;O#-hG|W7nS3x@8s@TIkl@kU=;}9ke`kQ(d$jNo!?)kwW$^ zLfn-e3O@%K*&IG!-oX!GXNX7F3|nQaO!v$^`SvTjH7WT+8%9xTT=og+k)Ft$cq*bK zxQ7MrHh?$2ZfLFl$C$%_aBjV!(ZpnhEkcipFR&996$O967M0&mwcH`r)PKgOB3unZJP&OH!fCP?yjy_$Er<#22$74S)HJqjII1U zT9jSYbUO7O$BU>L+)%5|vW)nXyuz%Gd!>WIyGkOssJh0p3y6SgYPp~pXdG&-%Hb)`Az3`QqnLr!#tgrrnoh;-XH@l{HT8AHKQ{^1_TRH z5 zV}_lmWia_esgQc3-63j#+WC8%T$A>>mpNV+?CRpbMFASx=E)+Js#mm;ptM5uJY_nx z8V)SMah(%tuvw#~5<2YwESkfV<@he;= zIXgJYZ&O8g3_Y~P3)NO7)eWJcI^c|&7Sow}cedH?#`ib*XF@m0ZdTnyTmia*t6$v) zHuMuxTv)L-cI*msw{l&VZa6sjo`oPwQ<%Kf6DjJE;NZ!A0fdoz3o&{ zz$h=#DpHE}CLWxKCZ*NoH480;kg!=ddsj&8_GhFPCZAz)j z@NvpBHS-Cy&ySHkQ}Q(DXnx`qZM|Qzo8mw!A8ccl9inUXj$o^-1X$plNmRCcP@=ba zm2AdsUI*d|ve^h<`9w12z#2|aI%h1RFE*n|p)xeDr2EQ{J@yi2bd1HB5;uzlf|RXm zUeSEC8cW;CKv*&2Fp+kj#u^?F>I$M8&P-q_vu0^pN9SlPWDslocwDrvD4zPk;0yIT z{MVq*&!<*YrqOnKN~4De&ha<=1lsXmGVHEtDky#T;enV_LDU48%GZJCG!hS;4dRHC zOvg>jzw8euvb7C9Oh zXQ=dveaE=Z^s;n{FX?osg(Vn$X1GwbDm5NACStclP`5X^`G-)Q%V<&6W2(_^46X+< zOY-lS;Ar>5z%ztfO;;eB8f*b@=*yDJ?#n-W)uk;iH_hLKuc z&()W|sqR{mxOmi{E}mrpF|n#^&5RM zda_C*V>(pn>J~>+zvuRVEE2H96xf46+LAS7i~<4&i&>p()gfsK#L|Ilit~w!G<#kVr$|hKt}Cr2 zye~FD#^7W5wI=h2TU6;iyez+JPx!8}7*fO_(h~TC75MdAB*owB|1;~;Ip1$j`ItM@=&4nM`h_TVh^g_6E&Xt{*GT#k(I7R+ zh#7~Xr}LpqwSGDfH5PWZNQa|Z_94yt8Ph@RaSF2Gy=S5{zJF7e>i6>CvwPV$DU4rH zYp;4lo^(nH>x@dCy3dj4qCa9EPpMuF0^Ps5q_7g}nz4>8?P0%S%I%W+LTy7Dr|0^GIfl-Ppo_#)*-w^RoPdg zb76JxeL5d2B^n+3TVEk}hK;9yLuu6Zhk{H&{%(oo5+7*Bip5xd7HWN^rA?J78TX;e zy9scoNqV1E0)Ix*1&irJ3H>uq%B~wsDlFE{8q?2imQOYl6w!W3wH#phUCmPKqHSTa zEX{3LTe_Y~q+6#&k}Tk3)IQ9A{()H6{KGN+Mkgqhq+`)^Q?Fu=RWFryq{_Ney2>Hz8~OcSrKVj-uEgoOcCEs6q{F98Dik zBtjbYj`^!rKl#e!aQxWawWmhz$0wLsfs%A(2V~D7>|TUuvkJH*m^{MwonpLH_idd# zr}xSXVtTyKRabg(uN&`kI0{+SdHCi=6!SKGIkA#eKn*r~KF)ph<_(j}RK5j3zci)s zf$s#=)4U|{_!}{vfI#M_hG6W*+)q3KK&pL_EpVo$+wD> z_Yx+1eFt2I}@RZ7?rORg`YUhJE=1~m6TyZWcceKJKrJr+3o!#ei@L zLGH+Fg~T%(ZyH-laj?+~{4^LTcehc`y#eW6+n%{pYWn7ZSp>#!1vB2U#7CYCnxXBv zG;hWlI*tQ^r|~am3k4Zo6Wpy%Yf5_jkSw{L%$Sjt))(~mxf|4-!POsablu@famO^p zTztL5%bJoKNl^kFutlvPMDVfJT@w^xG)qF1(tgx%w6OXnC z3e?b*p0X8D2qhsT9};`)^yZ3nM4TCkoZc=L;77U1tt#Tx}#{q4&LPN&fn7By@izx3=d$R z3x3Ktw)og}wd%vI*KNVr>Yl{M9HKq0m*E@OIybLmk!bxS(FR=8msnV61_!X2j)1wO z4h44t@RFQT)Nb0JuBUZ3ORs|iZ`)3~o($A<&~9=DZW9&H=3iJH23kLilZ-J2J=W^% zIMlC4bFS8uT)(OB%v(KhGx=qb%I?zGl$#qkPK{4)e{s)bx6HHUr(RKy)*!T>&hXvo zv%D0!d)4%B9RE)saqlv1%ymz?Sb274*H{P>T6hmis9b6!ee05IodPxWk*thNM zjPxd}pV~u9()GEkSDMAZ^fUeAkEJ$83rKy>$BK}HD6a7HnAEw8aYAyoXWeNwbk$(R zl4{N?KTV*QNU7z-L$k-I{xkiLWV8=k)YL%uC|r+E5OgA^^W88aHF@O5E=bNWWlja6 z+?oCQ3KK09Ur;hWy*@oU(D!uDPel$Y4Op1UDN!=t1wNUN)hV0?UfNw&*d7sk7?-b2 z9MvPg6eU4haZ4BdF*?jKoPvYMLxXMDbpUQghFvmdKUS{vGDV7GGpf0LhZIQShUZKe z$MT%>y?VN+KD!oOwF5Xy$t4$iA9#zW&5qNi4l@UnP3J*ZE()znX|XS|)c9!*4%P5- z3RT4m#oje?<2Qxjf5P$zTpR^%zCG>C#FN zL;CM|kI|a#kEH>Yz2IxpeCfAt=c~!=lXL5`{VTSOVD!rPf%6j2;|PAq@ii9tjPjv` zdt_tXOT392(o?qv8TGdd$(Oawk+!_XZkbbu(8VhCy9FO6Bp$Pee2IQ#h@tfNxjoq7 z0Y1^>^fTW3u2EmsYKgOR!8! zX!p`a%zjzfj*jwViy1Tsz)A)u0(krsMHX8?#j)QdF>L)?hKP?MqxCE_gKVRo9}F@2Cd9_`Bk%?wYEDjRw760G`zx9 z66P?ES0_DuVT>xR^(skSNJ!(Au!s;2f-y2BrO+kz#Lb#s__t}KDVY~fYr9u4S67!~ z>2~VO6aFXHV{W|Kq~F&7c0N&+l%4&(WGTyT0zj42!0s%T#h1P99XrDxIKL=ff3=Eq zqz{W~k=NLwYDIw;UYcIHZkS`V#_&i-;p79X8ZWMqRnmAzP zCF9?yCg|ViSeZLDrA>6pU4pMY{!NOHZ+-VT-siEKv=%Gr<6=K8WByhsQ(TVl_^2TL ztRQ3(zIpukTcyA~WAvpnYJ@aKc;UpS*tcFA81e4%_FJ@v31%cRGik3w5z1cBsMS9H zz{pY|B-l^YUwRXEQ(F5*&v%iBYm0*F+^H*a2aVK21?&ic41ecvhrLRW5!dVD z?jb%Ga54(ZW3S=LGw3`wAy{Lm^3T_mc0YSpF%anIjD^%lNUQK$F@H=xg4^@Al8!M$ zJ3!_wdh|FYa6OQB&FSfz1}%5iw$9L7M@vgf$u~X(%|^fa6DD0&++sOcz9YO7sHZ(T zD9aW5gpKdAEFkZl1Prc zuZ=l9>K341RUGg^PKYcNp>AkEZBi*GmBd`GXi7?)`b7s)M%B1$1p0-2`$(XoYhxqt zuuTsdc<^o04rbJVY9#Mt-R^l9M+=TYVRppD+HI1bP3lS3%y$yyWx^`4$b6-eZ4nr) z%Ey;4C0NXZD;3Zb0*&XeGkkR_C)u;dQIWo}U6u`ydigqZJdy&cJ2UvQRFk)fK5!Rh zt6NCx*u82?Ecl4A?cugD2KNUidEqWYUzTH2+V5WcK{>+f!ptr+A&oOxwg={Nwu6RG zyf%Z)N?|nBrm(QPxuqhgZ$e#8Lk?rBz@zO+qY;!cTFcm-XY|Y>~b4N^nRglut z^QC;dK*Rviq8W_TQY$Zp974W_LebUE^`TJ*$U!FZ$cn7Ul=ccAvj9_!NNyZd>?LpU zDNA$hVNDiwz@^Wp*ay#N=2CKehGf4iTUzeU-zL9fKz|#JqrlXqG=g%5o=xbQ-?Yv$;N#p1%t?HBra0oY4}V8^!bL4C?#xehST6i4DAxNHJ-leBvzuoZ zdW=qXn^NZMGe_EEFDeqQX)gLkZrT;r$n=3$9)u`0#5nz-$zW>Wy=aF6+F^c_ z>Lw;8g$W*e{?0H03i4b<_gN-JL?kD`)b;woH$tQ^Bkg*(7Q288DMSZ~#WXB`fQL`j zR!-||oO>=39*w+cLv(m_YFjMvZQQK*hYbVn8Rj4&$GJrZ;h`US8eKG6-nR2#Na$>G z3wv?qvM>1d#f`nY5=(XMgdm%6RnDV=LNfFEZbPQUqulTd15 z>)~7r=c4I}JjWQk#XBBQS`UB0xgKgEQu3h|CAZUwTv7X;m%kJ}eRx`kH_tKG6;WJx z*YRn>mXIHwhWWo#O-8%o4;_GQPGh#h^E=2iVp&{hllCK9n_>aMBS)Kx$s7mgn`;wS zKda|2O)&}Lpfp%E5vqI)tMAxj+Xwd8&#e}1kWn3LilDPS(_Wb6Wv8-CE=Iq;>Z`Mz z0hHAJ@zZI`!_#Oqb<;G|M#%NFAE=DTW)C7M#jxCgkSAOd2WAV00`SJ{?``J;-L7~Zi%;&?6y6^>dh#6AU zyXAX!B?dU(D&w%g@xJXC>lnh4O~rwnf>r=mM?Ak zSw#5WYRCq@5?H=7rBRTc9nZm9-_TcxfO}=Tec$zHPJ!F}mp2(FSN5WwXIO-LgkSEL6v@ zBH-y^RQtlUGKD?#j_p`sNH3VsAjU3C=MdetR)WRF$zR*+eNC6cD|!)nftBbg%aoLH zCAqv+5|ISuMpv>W-*O>&o{Ea-Ac#r6(y*MoynI$x*8DRvNVH*(3cKMctBM{Ui%TI1 zFh=X$UvVUy1BJecty zt@z`eMBEs(tict~1>m$)G{Q014N)SbLu|LgBI#MMFWIIR$ce==#EJxJ=G@G5?>Svt zZ(s0-SKZva)MR&sAw8)^nBo75v2_rKtvVb(nlcCXn7&UZKQT*biN=-v9h@#(U+>E3 zE>8*xcps@KC-N%rZ!7z1D=jbg`80O~bhr2yTr0{t>sEWFCoI1ffgZ0D>CWGarX#DW zuGb>E<^XsUa*NO5X6fV(HML(m)LD0Fhc#Nd;ueMw7`qa|+ zwF7=cAe(QlH}7gS#0rEIcpBPLq!$PAe-^yBQGqvy9RMqgxAWt%mV6juv_TnhyfwUS zWngJ!gPtN_o^&Ja%dzvBB_3Ixp?vAjc57SCHY6Sy-*D_VvjFuWmL*a_e#J&g{)K&2vpA6^G zpl-_|5I5(_9$;=Sd>31@)V6Tses?I^`tme`VxQnD1i6^Ct@U=c*%atYjGvSC1?fcw z9pvOD^agq*{nSFgN9Ni$tRejbV|ZXj?!%{F#9YEtJo;8$TlBD+S-Z%xhi$v~kbyUT ztl+)pv*<^V&g7eO-az%xoRJoHw#M+QYi)>>m9Hfj4e$7o2M_7Xh|@EsCouf*sJz_3 z?_V5!6uNs(LkPMb$~{EJC}}osR;0%RQqS8)QSR|&;fLu~E&0JA@Ja0*X;@xeRm+`C zuDOST6$Y*N+b%Fz(%Qvn zs%AuhzKmGSE@%v;ooediRgOo`8$P_ozwg=eN^^cu%sY`N*Vg$Dc2t0yrkNv;$QiZ;k zc&I)}ctLiL{qF25I|C)TcfBlOCV>a}ZDj`={W$pBZ!4>|j^NV%Ad_#E=t#vnL?AyO zL-M5G$)?>BsV`~nkNnueHkp+WGog4dxl5l+GuC4bO=Nlh(f6%~D#;po zU*5_#i^IC_8{hPp_u2{St9#rQSx2T?SWFBp^sc;D@!i16$^3$pKqH?5MYl8VY|aVY z5+aDb^6BSq%ZS0^d>a`|SDzrbvMrpDUsf^oBQ=eeDBa2B7~|q?R#V~5GGi(tOWrYw zE;z};a!^g@+0Bu%9y$Ky6 zD2l|V5yCFtqWeGfp6#qs7J!{q2*Y`a);qGv<7wS*x#yKSkDs< zS0Q9Kq@B^ZA*6}X5sMUkH7K77y>hhZY{8}2x1y-44?r2wl#HZ+q=p*F>E*)thy4$q z6v;Syj`at#6nA>Mc5Rt9lXDF?;J~$kCw#BqN3TN?8NXTl-4b}NaCk1k7F1e?KP0Cz zwo!{{ns-f&VR15_?kDaBT%RNzUnl5?YlX~dy* z=*8;t#)hLhIo6vmg6B~SO#a4A`_+_?+_gEGfJI(WbImd8o-TOKG?2>rtR z*gn112on9qbyec+hx=_S5{#y(RPJ}baT#(Au6T=wn`aK&KB8eZ%O zQ=Wc-<@QLcbqap>ckQ79*4`7`EFr9Ag*g>uwEm@)Pm@G=PWP$T^rP&l{>|Lms|OaTk#HQ@%lZzi=MBag9}l0u1}PE_QPXf z1u(`Sshn;0sQYwJ@$HZuIc;`=D$oy4fv2tE6^>fUA*#S#HGH)|;c=c37HdH9pLLT^{s8#%IC z_VMG_LZw*A;<*H-gIhDajoGIrfg9(8_TIzRJ7e#~nCa52grZaAu7(lrS%#zS^LXxH znY$xB$AWA6+EEf74E{Ty9uw*%8Xp&tza-O}u4X~!SI10njX6Ia>Ix%ing+H);`{rN zTL!%<701SmfOUz^WsjU0Dy)ns?FT|hglZ%FP#xd#(ZZIW_(5BpBgm>hE?0^->F)-` z>Ig-nvg80Ib`-7>nka<1*%>-3{AKCB%_X@fqru#WP3GHt2D9#E<$7k=9fdYBIp!0h z7q`O(J4bLX6op|J!>CJZcUJtK^^$!Ts%X4%5n(2_gIKtZ0c~kIv7d#c8jwbY_tL&# zv5af3wG=j!b4>hc8*E#X7@i8Rx5yTLM}%);_q$yMYFuzoQtm>ONb0|d_9Omm^f%!p zGB`dB_c29BW%2drGR`t>7letuLv?uJD`H}>B+82~wB@_@agv^^Z;a{EwC&~EyRz9@ zaCKHhW=&GR#~c^e6=vI)ht=L6OFq^$iELY54!{K9r`ZipfPZx16}!V`y$2Yw()gTW z9~cDPW6#{p(YF`fos1;Vcz~TGc@GBBqUBz=+X?`sDshW;aQJIZ<2#hy%_bfTk2=Ln zI(}!NXM2nq^=L0~1i;FD0&I_UQ6kdql4Gm;bLM=V@}dUL;O_>}JSbW8rF?@=>o2=@ zhkBN-FHO(E`fW7iW6w7oI*_4v*G0?S)`^AFj+FdzKGG?#I~d0xztqAK^;t4r@W zpK){B4z%V(9VYi|@ps~EkwUL_16M_|o{1}eVJWks_=XZBr2Ouk`FmxtkQcAYaFT^- zlF1@b`f$RZ%ZH=jkp;H9x`>$7sUI*zKCRvU+#l;76Sym&zMDJCLVaLKnRgOf24nI^ zpyfEkko|OkGW2j{rh^&2*1U?(X`zU`?qDYuJ*PY_6j;U*t+?)0l%(~JVFuyZV(`!L z?B~lf_m;_{oQ_wIkIZ8fwy^H=Cu*6zgg&{&Sf6)Uw=dWFKjno$43i2rNx5gdA72EzrZVlWMM8 z{a|aFG-pNS{W1DSX-edji*Ii-Co1r@2%m!}-aULWf@zvN+tSyQL`*BmZuQrD zGt1mxr;DrugwKEUdG;>Z!l>_Y)(Tkqe~G-z>ynUGM*uw10mf!NaAy;{g6P~ZU;T#r zU>c|6dh!A&2+BRJy-HDJ1s+%@TT)Aa4)xarEN~$aI=6f zlKg$-E5T*Q6ANc@Mr?j%w}FTI69hT5j~_L^6NWdBL!Y&yeuoCELLZ+K=O|2p0Pjjz zmN;z6N_8{as2@Z@Vfs=;H!#w>=@Bf*aJ?o{k+oHu-*}tecen!@H@fEdMV@9cpLyR5 zRsRj@F!UK0c@2-pM@B)OD`gvWkYha%={7>Vv02wa`*L)!z~w#~|0MwJ834^&rycCD zI0KVy3N3KcDPUX~`g*{Krg|2fcC71LtPlkb1`g63}-AsHUeW{=W%nw_pdowJ`_ea!UoPG3Xc#zgJ$NW@|BgS!Q z=yy|Pb$vVpG?kwGT9O7RQ`kJRJ|6~^ZH;{wb^fOk+4{;I!QG|GDKHNi~nwaDj01ZBt!kfpS*3_BoR%r72tZZSQIs2e` zDS?;gB>;uy_OsRvwCAuDmglgAniqh_KJ84Hlt+h5j1Z{-`LRYf{8pbKcQeoz5m9U8 za2c2|w&k=4ao*H;=IH2sOx$pNw!U5BS)q;VaWEf%OOcXLF70QZ zT>YTHfFDsf-8_t2zCuHpx+BWS>l;I?-ET7 zcR>Ep7BP=KXmzoivJV*u6Z3A!>OD8ZsI^*XzyG>Jn>8c1=IGI-0jjTY^Yl$)>t#s~ z<9?DPLvt@K0!|p@`Dcis4@k4%;jAZqck0Z{{^)|;d=Yua?31U9bbauRPDan5h`6Q1 zal}H78~m*np83;25oYT(?;WQ4{?X`RfVH}tEdSj~-^$o%Udmc6_-h|D4@sd-Z_Lpw zeHzC*vxPiWR)Hst;Oo58U~mLus}6&<GUvC>oli@i}^{JHH`l?h8XH7n*be~n;>@~20h;RGN6 z1iUU^XowO_+Tl9Q?Tz!geN4Uj-8nX*K6il6(>lz7=b^Q1Q-9JTN6Ri%P~6#)VRN*h zmU>W9-2t(_Cjv3eAIUFQ&|9JBSF_gfP;T+-6`6WB-qxNClglD+$F2!N)L0gM&ZdZt%LMc^3NO#uwKGF`7j{Pg-p!u7VX%$k1I;CGL1R|j zk+1Bo#Ole^%nNlLI|j$|xxt(DCy%LUEPA1PUx&ykl^)5>3 zn~tev&LMb{!EgKu#C;+qrP>SBf8Mwu+MFg@v1Kvqyq2bIG4W;nGtZuB-MfElVUz{t zd0VqrQz&<-x(3y)>rH|n1U4i9z4kajC2)E0eQcqR4&OnybK@X^noT9$Fsq)m%E~}B zV32L0sZyF$g)p*|+c*RQDEi;^I31qx}9A8tzA^BuCvrVWn z53C>e=Mn9?bq;RtI1-r%#GsJaQhk%iDk_>79)M+d`f!CM|GHj*Ieg`FSJ%=sv<_$T zbfG8sz3U(=#%WW6MzCwzcL>?k8yBQ7R!oVMPAmsy^Zyn8*Wf)bUhYJTcI6IlWoEWQ7#8cAWG08rI9 z8}ha9)cqqQnZ4}sMmo1l=PHZGoQ1zHXXrX7l6qBKE`Qg{Sxe3}aaN5Js#Q6Z94Bhn zm?^X9DOt+Xe|=J%P^Nn9%TvZZZDkSlTA=g8KeDbe8R1%wXUvw8J|(nkcNL)hJCsnx zJSOe%7}9!PtLlsFR2hep&~d8!2?_hI92^&t3NmUj|hLs>OU#|x9IL|tAB|M<-`0ZigOFA3XSD(Fp;u@~3wMRa!^vb9%<#5|q|Fntc$;{jw0Y1Kt zt}X}ywY-3>lv;0t1FoJc=4##E;{c<2`c)WZA0M&z71c)u-h5`CuYuw`aCl#F3W_Ce?db3W;Wrlmue|0Jnz(7~m*33+d z<~|F!>eU1>ca|iSyL>$iiB9PQ9mZ01WkTNOb#RWa9Ez|}j$SNS`caS0kdIjH&<_{&r=yzUj*H z4b{Dbk5`ncW5YUp+{=CwxJwZdL(*^LMKN(wE2>x-TNU){sxCKr;HzI3;jJN!15q9nWK_Dz~Q24ysj38%S@?kua&7gaE11Cihp0Dr$|m>0#B{EgrVbk({}ABYU>TK>K9>p zG`4PPJY`Srs)FcjK}UbSMH+bJ!mHN649Nc5Iiw+;*qw*Ui*$OgqsSwd zSubh0^U4I>X<`XOPPbogh%jH)cml&gd`wIyIsv~@Fa8{UJ4Bg>n8Tkxx41zb3bWm`J%aO?CgTzk9^<9XBV~V?)@16f1u}E zm-hV)S=scGeef&&#J%31zvDcm%SVgiW=cq2AuZ43eL}*zGxIA0BXs;76)5#+4#|vhUnI|7F9iaRRf;cCvAVHgt0h9SnY?%M%_DlpE zdodSBsJd2H$bIylYO(Vl=sB2oPPis<)hSS9INm;}mLgG<8VLRu??G3&5dJdoXtMZ1 z_D1R#hN**8(IoBafmTWMP3V|}gv2V1k(9Z85`@Wo*{Hrek@4N$0EvU3=jpru$Sa9+ z1(JE+C>79(Wnz1xbV{&m?8U4f|I|{)LCx3)cf}j-VWd}9mv@XiOOv!L#bbRHotNhi z?e|{(Pemv|OO|HXLyNts*x08tK{C#)oC7B{m6fu=N`%fV;3ZesnKh@5`BZ(UC*waf zFfoTCxW0d(YcJ|`+%kYh%=uPDA!KoBD(CmB4YI%$0CA3gz4#D%_c6y`wEry7d_DQu zR75zKz%Pf+HCegmq0#e%xY#CpU8h$%tO`dn>1QFHbKt*BBSfOh$Jl&2`Ow}m7E=}# z8$g<~wzXS3zI)%uqp>|$GqJg${Ay&e>C(dnxHS5r&vAssCYGlyCTzw2FFnHToIa?q zaq$a3G!@-hn#`+XWPY!qxs@M3e{hr1BmwFqGcVtA`R}{+<~|Gw7#EY5oVInPYFasc z>)?O%Ao$C6MzF4B=r!;D|Ki&}jQI~yJ}rSW6br%QN4&N0vNnLOoRjFU_iMo-Dp{!W}> z5bIuZq(2P*xp@)#w!b2)y*nzkG*#m)dm4JtsBSwdN0FD`B4WOyj9Q2drXrhB}b`Iq1`T(B5o>UU_@J|3>Sbmz45hr{7rzUl#b@}^$$ zZI(?G%FJ*YnfWPC>fnb4LbmVHNzv~XH0u*3wy+Y@{JrCaL&LK zZ>uHtI$Q$vsXt=ouxBR&m#JWHWG?3Bv9+R7o^h*+bK){)Y}v9S;uov^GEMb#sfc*Q znqA>yw8-|pVifBy&`~tuPexZvlgx4I(Smetj^E<umZ^j*+BgDFmKAqn2va`c?T|KM0rYB|You;6y zEv)Rg6dr_z^r09`yK1$Y6fPzihz~FhX?+T?X9kHb7l5v#eMYR8_{M0C?gCh=H0r`V zynm0OQ!6NT8BG0TWNJ(1==UV3mX^|9_AI8CRnD(AW%*e#^#t<}uf{p?V)9??864zQ z0VGR{-9Myw&j`N-#ZIwSnK_r1rrXFfdHqhag0&oWfv?fC*ZxtT0-gir6goAOB-j?O zGaJ2mvYneB;rlPp(+)3V)Mpo5nckoiwYEzb8~V9&+OQ|A$SP;>wcV4oFh{Fvv-pil zC?Mq2d0s1`tBbZA%@f8ssb2cxG(Xx%7?hswe58#M=pBfx10QR6_j}gO?jv-f%Gmu# zK>SBVeCUC;w}Y<)K5!ehjAj-IxZi))9>#|RSUI=MdS4`E^77|IPIE>Tu8PB4U9Q)K z4b^B5ZO`G`6MeMQwmbWIchC8XJ9q_b(%U+gEF^~-*q9KD5c6nuUI~jY2}56Dy~kDv z(vc{kiG)@P2{F79m!A})5c)3s!6EW0G5^G-T?>Zr)!fqm2!>v#;TA+emmH;-gCdhrbdBD+_bINJIz+-iGZ5)@PvL2~7i-w&aGwPx6=JxnTKiRwqKx6Xd_+>zlP zL5}u~7^s+dtz(`^Eq9V%$yjA;Upsrlt?6rpe{*_^#>HnyIk7Dam3hxi-4r|-Bv^~2D9=zG=>nZQJ*g)Jp z_lYhd*1a!Gy~ENzg-Z6cOU5?uvSpkYhBaTeR-!1Exfh5m89TOr^5RyPS5wl}d}|%X z8NfBJS;QtNm{devltNEZ$HmK7Wv^Z{e!me#kbLdm^Vcx&WNPyCm+6+bEEAgy8JPz;3ckm)q`~^$A*X7?%P%M^-=%u8NzQu z9X?J@&I_;Nx;n`&V#L3Z|3Aa&zk&Q8yXzlY>R&>ft)PZ5fhKJ zBC^>^8|h@qi3DICu7K3q4`;6cEha=Z?Io?=J;OZZ6ECmiIIAB~Wv?23IG$--zlboFY>p%`)*Q zCzmo)*b#cM_-^>LKvY#1qDS!y*_f8@Yk&30E7yay0Vz^cnPo$n73VV}cK-Du-IkmY zy)P>}lYz}a(-T5Xg)HfEGjUnY>4cu_)S9I68M5Jp`0%|ioMF9UNR2hM$1Xe<4Nf7{ zadeR7hVx;s8$gSUF>Se(L&e}==Zim0ElA{XvPy)5laiSUf62|1-(Z2`T*aD~)g<9T zq_^`pgMjDnb)dk)3>BTp654^_*y@d@cKd~g|5$WntDzn2#^8nYlHmKC(Z$X&>Q4ZP zeA~U7h=j9+y>ygDV#8}VBpe12AVoj=`!#Aej=WFSfzVkL6&4zd87<=u7T)6zL0N?L ztHjT4nh$i{zD7=UH#9V$NK{Exm36r@fSlDS)j3ue8r5>VI$DJ*<5*ljaBp9oDH7r%Z#@*T3!luDGO*nX!QiqZ&$FMW^XSjTaDh@;Es`NqO;ZoAldqrt7BN@Eg z)AXo$l?0mE!wd&45Pm*BgX1R~7mP5pB5JXb-*2^{Jcsbg1smEsi|9idnUPbF3XpvL zo&Y$G?E8Rs!#i7gqctO`j;>!^oH2vBmPKau9m*vnwDp{-D~{G})p;7*N#|I69M+OE zG{0%k*H<^RaXqv)iR=1SlCnS4i4|7T(td2jUD+rpluyS?9Sm*QBc3JC1&0==fL!bU ztRcXP&0uwPEG!snoql%^5H3loPM7Z3xj~zB(aaXL-vJ(2y>#+w0&4KXr$;kJ{}CcU zhhCj}x;vKc%vI>tVyi2mUm4dc>5#s)C8jVu0L;o`Dw1Ni$06CpZ1CCHEMmK4i)^acQ4}+BUPj(eXXX@W&!gs5WVKo9adXQslND@(|Sw@3ULit1M8tc?vaMr`R=Dpk#!TfZ^!VjH;Hu8VX1 z>{-iOKFT&_I+PQDGSs?5SPz?ecZbB6UnTDJnd?(CJ8$Y=Nk2#*Y~%Icp?X!T7|{;W zyF1lXLI=xv0AsrB_A>V&hbbDO~% z?=zfs`dl4j8ftxB`wlhZ4NIriJlKZbaYv0z>2ykv8MCzFH@?B)v>ayFfxotpzNfu# z&bA77C;ecYUa1VOm0jSUz2I>j4WVkJOZQTVnf;@Zk553qBqSvK`t?gvq2CX;J;(ha zM*9-!N6_9SuLAb@GSsZB6>>H0IJTXzG!hYB4a^#_V#c=y1$6WUm!*^62z?jZjdqa@ zL9?Ymk)X5V!`c_{nQfBPxt~WuA1(_PB6{x;GCJKM|d-4Y!8&k_@V#jgoCbu6YDDFUm#-lHBs@tEA zI~v;*H<4~cwU_UAH`A%S^8+>aTSPY58($HsCe6>Hol+^V;~P;kjd$QBnp^rLrX!` zobBf4Lc4$h6?XOo9`kHb$Fd%GJmERKs%T@5dy zhn9igO1cFi2in;tjZ|gH)iAeP7RIA^S6IEW@CnoE%;*P_rt1j5jGuPV>U%l|$9h1W zb`^lnuj;Wa-)eE!OFPs@r!gKI5`Ns&H7R@t{_@UBOSKIGg`PIR%1KnxunVENPnFyk z+3l-3F8@I6XTSM$`N+ruY4mbE&p&t;?mc~&ppI9brnTUDx4z%bT(*nDiHB;L|9|?r z@_4AX_pjX2c3TK7BR5jAm(ti1S+kBM3}Wp2WEo?vBtn)eDT87x!x+lM*ro2wAj1t~ zve%Gp45o>(HGUtZ*YDof_xt+(^ZA_5bC&0MozHpBd7k(4I_GGwEg_#(#Mgu&frGlR z597qx`4jO_M~3Q`6gwlU75bekF`ck)PQL$T7sNL zbBXQp)SIR`7QKZM1L3iaUR=F{ay|%1Lz^k(Z|qFV&@6}6(ikj>X9kfYSk@yp(vxd( zrz{zE?LFTM`#{wugaI;!kEg>KvkZCAUS)&wB6njqm{qizwxN4OjDz%MAKYo~; z{Efqj8J5XOd;X_FFH)q%Ck^s=?p0^1xFspBUgU;Ln!fq%9H&oOZZwx7FY-HBciI?5 z!F=Y6d`mv!y6;y>>}0UFOSZB=liJM!Pt716IhBKZp?_& zMo>o?FO?|nlp7j?jq=XScdcuWKrs$GjYN>3xaU*isJ+uS9c%ppR9`7cD8ORfgn(jLTI+qUqUdj1WNZ(DRiG5q08c^hJm zU)Vr6bladD{a@huPhE0#o`3-rZiW3yNLloJiVVr#PoeoYGj)e3CHmX*A&Pp%kIHv*4&#>t=Ab5lHFr zUwA*aQ`RK)8rB-Byo96bqaJT`R!85ah*CJMD{yMYWSl%usTv6Fb!kQ=oM4F2R%1L3tk)|x2i?l3RDL!NIaJ&o zx-f9rV^Z(^#?ClH2ou-%M&kL6s-q|sN<2~USaLBc8RqENy3cCpH$?2ZkJfs(*`pNp z-q9xSxC}J94#(8{YfXqhE9r!(ZpBHMzwg^%nxJn5v0sYC`uK9DMnFG!vd>g6`DJ(& z(fI7a@#%>EICnvlet_TsTp4r(+C}iK*cb+x`zrFJCfJ^r~tx>$%&ij+3zNwn>?8$jq zYg7*`Rv0%bla8f`v>782iwyNw;NvOOJt(QX@=NOdU27TP4|D#i>Jlwbso^BKsits; zT@+46JSyp}`RkquK9b3*-0+ClZ5b3d$+uqvC2a}ZKvY}Fl#zPto*Q&Z8CPZwY6+PE z=1T82DwSFry&Znyyk1!!2i5YsC}o(R4@TtGGIg43^GVUk_DW7Yj*TJh<)KNHb|;Y8 zAFf&5_KnALtk*`xF_o_gj%I(Pg~H(R)kj>b{9D5$`=XZ1{G{OTKoQ-YYsEEB{5QWX z>krM63{$mYj9mN7w2IQk)mX7kuB^kUTB_rCOflH12qql1w=gl$$7_Gqy1t+{n@2tB zq|WU@`V;@;)p7txnwZ1Bzqh&WloX6YH2P*mHa-0bg8d>&HL4A?(cMHc0We`P*vs{mgCuXhp z6N(fy_oLtMsiTIXC#UwE`O?|@KI)VotE)$yzb4S}mX2a7Qz3Nj=|juJ!DPTG?qY5r z9GN~{UW6sA#{$u~_$}mf?+8KC_#Sbg(eMjt=;kRIb4<}j1H^X{TIPGpF~N2zM%Btr z-2q>8a=wr)65^Ge)ph&W#d0*iFe0_e``|!EXr!nCx5ZtN^FV_9DsX_c0!EE25=n;($Ga)f)maSaggdn($o4Ab1c zc(cx;*wQ|G%Kj2n7je-QYq(HU2b#o}1@x5I5Jl=VeX$2OdQ= zn0_-wV4O?eceNS!eSRh8=*QJifb_}6D`j*sm=_&N`q**iSw_9WmER9#?cjZt~d zeyz1j#ZbxnnTG+H{$~>AtO=2ro_^~0{pj%QkTb5s6Fj9yY!3g7YihzSS!gYK2S_P` zK&P<%vqPbQi5TjnW&Yovs4OP?L#^4BvPcypy5fS!q%rM=UW;N-WxG5Hl(Ax*3E}?_P*~azZ66nX3bl=+XS3+d~2BDV1wFu`SNvv3se%RbnaF4E_QjfbJwh;5=KYe`N6p^8KsU#x3dj+jZA? z^bRzPm=HPd`A~{Sg|5S`k}LeVu5a$NM(^$)h>NYPr7?1O!GG$LEAJznz(QGvSsst= zqTdLPeN1Z}75J2J?J4K_#k#u*n&YHHF(1gO)*v1p9&Ugc9C%3`1Rj=K1VB_CK!AVJ ze#rPg%JA8+fJ6`0KGYx4^Fx?XZ?yb;hAR z2?+_3^7yJM3|LG|Oi)ipM@K3Jpjm>B97#_U|0hi!=%;^vZDvynR2Y)FmKW@3QPS_Dep*^Q#}-pl|Fo+)Bn}9qi>T_r8TxN%U=mmL83X; zY@~;m%!gCw=v5SVAIVG~;?gb~QNn9EFtk+Dda;hdV0;aEW@kT+8Bty}%+dxpmxi5f zQ`b~jcD4!}k&!kqhGPA*IV+tpocW5d0g>~czjrrWI#CVPOmZrXT)4>vD~4X!jPx#; z&|Sq)*fWxGKo=F1OGQ_|Ry(|xAS@XD%%ZH`IDpPFBc>!~QRMmj7AVh*R^%~ZL+n48Th)Vm&SLyN2gy-oVb*_%lcl=Mpw}ISn16-tN4g%4RJnuMsYq2#2SVyk6nIV)CcMSr_(mPdySn?Xmu6K6k6V_+-Q zk%PU~D2-SCdF;UwS=1Ll1^@DM<>JL4ztCuB*1ap9Gg1)AzDFY8KX`sz#GGE@ddPnyH?#I)P9leqC0nYcb6AP%@O;`&{WrnX zFx*)9stF42x*w%?SPf5;_qSF%yN@bJ(+p^)gKQ=oFLujBgB1P8mYut=LXXN#6~)K~ zL`sHDE!9J}TaUc_l7U}Q*LG4%pYy>PT19ra0DWg_kA4QzL%GSAtwV#IZmk(?R2!D@Q2q^(Z^wai;zRSuFT4a1&7QKuhYXxB? z1~*w_6;0Js2KY$rZclJ+p9L<%i&*5svC}A*Y3K+j3}_38?$MY!*ywvcWY@Jydmn;7 zEa0U|)EKt*TCc0Zb#ZA~W2!x3o?vX6O0~(Xjl(Q4@jIi|J~!oc)qrphfU)KR?Cqv` z27N32Zm?0s68W+-mgt*wh)%aKDaPXiC1Okbeb_kBR`KSr2 z1?bxsT({_ASk}R&a*~Zr?A8R+VYS6Taw_pT7%sLSnCT`+ta0)tuT$|0LGlIZKL84k N!F3azifgy-{U6$35>x;H literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-edpsettings.png b/windows/keep-secure/images/intune-edpsettings.png new file mode 100644 index 0000000000000000000000000000000000000000..882bf0d46bcc72bf2cc83212967a0136f25d6412 GIT binary patch literal 4303 zcmY*c2UJtb)&>+2DJn&zNwcDW)EE&VVn8fdK#53EDG@^rgpSgYk`O>ZLMRde5rNRV zh>8hHQ9^=1Xp#US1f_#b-W?hq9v%@9 z5g8H58?mvmaj|hoBod8Ar=+B0WMpJzWnr=~SS&UtCnq;27m36tVDU&i9?wJAg#5hx zf`S4Z4p)dPEGjB0E-Ef9EiEf6tEi}`s;a84uCA-AYi(^s;>lP%0XLY?@D*Q4&#Iy4 zv@Mk22?RW00#Dv1;IU*pl1#>b_+36hz;BcB@87@w{Q2`2!k4bjuAZ+w-QC?iJw4yL zzx93VqmU>A0|P(EKZb^es8s6c=qO=gf-td7-rk-Zo7|otY;Tjt$H(b(`qb1EV~W9? zW-=IziEZAPSXfwKFR@ovR#sP6*=+XO+8T$$;c~g_>+2gE8@vcbu_8NO*@V3>-Sy?; z6aV<<;U{>#cIG(``hg*SR$i`t0T19VeBKY-JpD91UHp{wG*4>+-F2T>@`58QE`qEB zhgdm@dHwy;1S{7tz3_Ijdedy=3kv(FKhAm|bNF(ts=zMCBd;W0rrQqL-Z@Zaec&yH zlNQoDIZEwv3UD>hReC@6>tkG&g{Nna5j)#=zT0_v7yr&~i2ZKN%W#FAG-YKWkcqee zeBa-&OeNs)!Z|x(WFoZ_+!quUW`9YCOMdD;=(6M{Oazsw)YIBDB`+55u8;act-r1a z*lwFsY!0Owibfj5*|En{RoN`7V~0~$Dg|lz1}V+=KPadjbLMoWEwX&9!W|9|-fB;~ zQhY}H>z1*^>tl_|JCV@}g7s$4nTPE9y`gpRj53^pn)#$L3i)Ydu|VMoKM};VRLXd~ zoFUyvFAPq7|4k$BMqe-*_d!ZNNH-z@D}q#{Q>kPSyJ@iUwfCxW{b9!1aB&ZFqKGCO zcu+3r6!iGn+hfW%fv+&6xOU=qa}yzCg2F<7vO-EtXy^_aYDxY9Yn=I8TW=3s=1iUe z+OWg)Oztsk=5--^Sta1$by8f~bc909_vLmf2|spWS*89_Tj-e*FU{W?XqSMriz$#-h>rZYlwbJC8u90pp7mtfa7~^&?X~qg(`##UdhA!*4|RCleACK-;%vh=hA7eFm?O(xFZ!H) zS&56T`v_Zm5Gtuwc_YoAfe&5aP2O80Z-=N=Dj((0s@1G-fJmxqs<&;NL-pGX}l z&8v&2PUfD4IzGr@fi%_os4AJeKz(Hw>Kx^q>$=KbiGWNFp&kJY&pPK-c+$m+uDXwE zdCLwRu(HKVWwnAlll6zA3Pf?^P?hFdOfz9F-AOO!MZoQR#LmVR7a`Ki!I67NqmA=2 z!~JsFXMSotzGHI=)lrqCq3X0}Nd5ElY7*s^FQi7fw(n3`lH|!e$DuE~Y-x2?`YZHt z!>iZ7vmPhD_WX4OVflroV2ydJ@A~chYE^^k)NH3u{B&o-O?Hbu@{L4@dfi>Q=_O9z zG|Un@>Mq%M>>Q#;(KQFA3dMA=9?*2=4OQC@=1r}DPljC{C{J>e0uFhH+vi|#socei ztEMY*T^mkrAz7KUT~;?O&UZG`sR>BM9 z0I&yxFW(cXx-;zB@^`!M&Gpuvf+wfhz#{91q|eGl(e-?S8{57tR+ z4nx?a8qGZ1(^%V{&*@%9hkUl0?t{L)B1Zdk(n7LPXRtB#(9BXkz}EY`R@4n#j~S7E z;DiwzF`V~dejlxc_}VK3ohV`a1sF9_==k{aB08~yNHqf*1uD`S5*%o$W=r-vl5R>k zXA>J2AX6V4kP0Df2bCII2=itm3D}^_Bc??p&B{G+=;&j~Mz#?`^J#k%)dVGb+Larh zeyp+(6&p%BZvQ+6QNyW8YmQ2_PY0lvNa-{Q;2lZW@ySd(bsZ=oK7AHBq8)G8A_KG} z%s;2xH?r$mlz@GwV{5o_A0J4(JS6KRSb_O*Xoz1d~L}7=((*gH{4&+ zeSi7@HX&VLsE9T5mH)Ci`-Nck6Vww7@kMbRT}v|Z#uZql4pS* z&IO^9OPpQXLg$uWj0%q~ysv~!ZULZaFJEp4rva}0SaThQ1b7TLbONgH zwcCjQVr_qbjitaQMYJMVu^>-9&ClkVZ%7?0zhh)}ifs!#RCi>W-uU_#0f$p}aap3# zC;|9+xR=uAY)1vka>-a(h$cr=%&AM!5&$X>n9P^D$;TfTqG5=wXFSxBc|O1}&kU!A zS1N?LIL45)CE}%tVkRi>D~XJQ@r)g4`R5R;Ctqq_#UZ+Ir?Zm+*6YzIl`s5_h@!o> zALR;_&Itcj?FQVNPG-yfba)RDCzct8jSG3xUvlr0WLIZ%?#&aH`H5wK4BZC0Jv;90 z_o8DGj$>@2qP-@bPPEJG4YVEurR-0<7_qBwqp=(OUb9~IU8eh(1i{p>1Tcf&<`|;vB*h%P^ewz%ysx)jxh%f6 z(9u<)C%0%Cba$yMjOpvTa7k=jI)VTjc&4M@*4(~W?s8@Uc+5TlahP@}lr~`tXf1B? z@WS~rr7>}S0kU=NR$~&cK2oh?ajJll&lh?O-Fi9e-99j^*DWKTsIPysZoc&G%-eZzn~S>)^Y%;$Zs=TukVdsbDTp?72V zmw_r03B6_ChVAZTJ`E_<>@64RC>E&_--x_d+gephA^3Z_)i*@mRd#zu*#QvOIYbJ6 zbl0Uie3NP<=gv5_FiR2KN^e&8?mQ{xJQ2jrJ9kx|sJ>EZ)Ah}|5$_>U3Uzq}>k)x3 zo(#6Ozd$TR9&J9tjEZJuNY54uXW0v$CC6f}^CXJ%e6Go?IhLz|NVHf==EfThxeu8? zDImpez*dSXX)j;+ci4|Su)kj0y|jyEvVf|KyFT$Bxl#N_ZseutYeJD~vs~#I^mzVn zo2e~97ff2LolZh`CMasJYMV>Uk4gRE7Z;vrz-Z5us!nwy;$%Vxw=NpqXjNk|%sqPni0A8z zjg*v-A*<;EQM%@;GGRcItt)$prRiMCukHECyQxc(qr!Z#skLAiY)B%e?G}sQ8mg5_ zdQ7W&b+tfM!@cv_Q^{=AYtjZ1C)rQ$n@XD3*s*k0d}_K1ty&*OSFP{AVN~iLs`&2p zK6aj;g+80vzyu7Yc6Q*XF_7R=!8g}S{OCzu{?}AfArmhJ(q>Vtz^#&7wzA6;?X^&{E z{F>NmHmKmB5^(x=)&7laVr4+A`0gWrtBT@3s&Y=W(d;4e#BYEk>_nEzwKM6MB1R35 z)?u{cceAAiq7(|r2?QnE)D0U^Gn53f(*q;PdF!4zSl>Dm9AB%M@pkLOin%1P$_w(4 zp4>-kdcjHYT(SU?jt-lx9H#ISEqI5Z@s;KNDhm=un>iv$xdle)1g0~^do}7j=S@~n zO>eX+Ed#jtY202IYYl{0f2Tt1oFVNLmc0^(O}Z+nDz6`TKUb*!c~b#*>aq)gtbZxp zQb|uS%ON13G7z2CkgD^RjmD8mNURx1U5`gE>ju`a|4>d~hfZb1K{TX$l@s`WIU+6i zfRrubj*Qb%r)PDdrNd)g*16)DA%^K(>>*dXnR?iZv6k4*(2K=;&%>=bEpxUvXf-}f zrcFtwNKLgnIt(edTZz}$M>{9>p6C2vXtzqXOh!0)P(OGuQ61OKBsm_Rn){sG-qc4{ zD2xto#|*qv8{=?_WM2*+&F@ cySnnU4?1tHJtLOOYgqX#z?K)wFWis(KWNc}-2eap literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-encryption-level.png b/windows/keep-secure/images/intune-encryption-level.png new file mode 100644 index 0000000000000000000000000000000000000000..f094fae2f9c6951e405a053afbe8043aef700136 GIT binary patch literal 14139 zcmb`u2UJsC*DeYuf}sgSiZtn=BUL&CqzVL(-i-8Kr57my5drDFL{NI~5I}=crT5-J zIt1zM2H*ETl%A)}`|oB=V<)9dxiJM5QL?U9jEaPceu}~0 z!gv)i+J#>JzKW!uWZ{Z=txv`on{*%V1G5IOHpw2$GfJg;ft^P$)2mOYv_G7el$WHk zAJ=QV=c*J`n3`1SU4M^{%{*VF&PyQqnkCo35ywZw79!dw!iarq}N| zW8Dpg-`;@I+{kF5nwnggKe{GEl$v+s$zHv`|$qBsKyePVM`2ET4 z-QV{RBFq9y77B~c9Id6s9<@r;_BUKZX!)t%SmH+IY$*2p@=LP%5(QugG+|UzX_6>>| zfp#i%+rq77;q5pyZwgX&bs8U#eopKZlzsptlcB$x(j_+Pu>1FoIcPnx#eEJQsVE0@SuwZv@S?4AJyH-do7A@v% zW!hXjn4KHW?DK5nOTwGFC*q4uika)36pZ{-k6_&Mb}8D*06U?wpT^n~2NViGbAk31c%pU1xGp3)&n3KJB3#=YVRZKg|G8 z1|j<^uQo9Ahk~602OY5?1(}1F>JNUNRHjgoqF=rv16jl!e;?qv>-t=p(q(0YG^A20 z6xrjwKEPJfEH@i)BJBeDb(+skpl97r~ZT(41v?f$?aF{nTk%Cv=ddS^H`YT67v$5=PeCh{w^+~i8e!YNuei1T1RE1oE2jW2`jRzG8y zP~vTw%@Pk_E&!q){knm>(I=yifJxzCtJyxveOaA@h4y5+F|KT@o0oinJqG4|q2fOH z0F?%*>Nby?85Qf{{)3Ts!^OFB%;k*&V9gv}La1ZzW)?z|a0u}gk6}kyQqAhU3>4w( zb*y^RY-XwwjsBsYk99$y6|Mh zWH;b(?L|YyD8UU-BL+ zMDy*u76td$LviQBQ(&0WrB>up3ym``go00}#y?KB_e09P$7XMYlmvQ>u4mn@YGYyh zY=1W1d_|w>6ul(wyg^+lykhF2ec@)ijpGmAP3P^O(^9t$&pF-Vt6j5XUsUqP-!8(< zX>#5RS=G)zcFN8|clPK>SN%G2vupVpIhcAH9<)#c^y?l0bdg_1n%X&ip?w$|KzT{3 z+_04En8Ad@h_6RjDt-h%cLTQaU6%V_I3>p2=)UQ^TZkTENIp61Kj{nCHw)L7w~*_Z z&Pi$e8N{`tR@=tVNDurO&qK704}d55w%He>`90E0SG82x=fA9W0&jN)Zc0AqKbm35 z!v^ZqD`%&EM|;i+jbq@A15XyXnq02IrY>qeK=?K2S75FAjFTuIr0buxM4fXmy6MKe z0nCyVyY#$WU${BXzHL08*uf@VX8ED@KK(AxP|<;Y$dA{pq>a;H!@di@{TnnuKmK0Y z-+}*z5MKQM&JKBEfYsmlH%Lg9g>;Q#= z?@=C*LEfXshi4MP*2xjrK!$&x76iU)V8W#7|Nfmm=h43=+y`QzJO9fTkldZ25L|TU zT>}dc^smLzP#e(IaPt1CaF#@?;qSTX_Embfl9tOLBqkW@R`pDy*h#5A-G0>W_(AeQ zSCR69^|=o6QqiHqG<3-2QKg`|UTcsr_;A)2;$xr6nwtI;vL9<6|)5#~a z%0hL~tq9-Kd7ZS5tJB3H{Tyd=_@MJ-sJ0bi!3bneF@-g_FAg}1nan`S?z zMamWPs0aY-P-{K=q*S-@v(UYFhgK#u9qoAOAd~dSopGm|nG}00*r4n!WK!hDyp0)0 z^}%Qn`h~4YbDV7_$~<d5#|KVR?0-F{CtZMoGw=Pw=iVt+PKo@ z@}l1BQ`+BT+FymFz1)!}NSQt#wVnHgPkqTXNXx>Cm>Uy+@ukYrrrx%~caqOi*YJUs ze!8}-`Km>kK$_x8t=`7!c-0S~FV6*qc#d;~z7)i&6IE4ZiU$V_L! zWj*jZMcdQNj6_Zj7gW+P$h0JWX*igE@boK1GLvH0Kn_$uf6>2&6BoTl^|7!StD2cSV0n5 z9x-jNn4O7KY%K>0coELMrO~*{qvklR`%_6tbDH1oW*%~3TiDc zh?E-}nb4^X7f%EaBZxsYiNpOlNsrMhed{qmRvj+WB(&S8qE6Cvgj;pp3`(sGQQt`n z#0G?8!H`r5AIV(*sFJ=9>WnrtCVx*Fmz9!&n`!P10kv2s#pfZvE73BnDyHXC>}!wq zDlbFBx3Fs3+xqxrgT9rsRCZey)V)lCi&?5Pq&oYH*yjGsfm~=|L+?w+vnXzku=3ac zIftZ7sQ>wG?szsCw5S*}e3gc|?Ec{?c*!Ps6}S;(X}}f^|8hH=^@9TV;RJtZJV`l= z#urEcI66}g2amnY6iR3!2jd=JDW?gIiI}wD1Mazxz_i@5F4B7uu#)+~D3-+RW7*wsdf)6BggGbQZDu>0y zQ?DNIgt&{)H)4SjTm<3`9pCFDbTY?bEXwiLlK{hpHpD@Hg5&0a0z-KLy=WV#Fzp4N z+zUq{4k~pRF{h$vk)0A?=sE3|y0*FBf-g35`V8K+L0hgO>ds>Tjv9~cqrzi)W#FFA zvu}S0?vWIEJg6<%BbJoMJw8U+ilq?VYMF8G2{W?FtOIj2yIz z#~8S@?!%PvHU!dc(!PN~hc1)5yPTT z&!M7ek}uA&5R-d8&Clms9m|f9FqVMqSUlAp8F*i5b+BTElV*_*A+X2_(hER4*25R1 zt=3ghk4~A7UW?#GBUYb@_KmNjgE(tho`>3Pat2NieE}cM~B-eEfBS6 zr%T4}wq%}b;`A~}buJ?#r9kj})GXn|>uRA-9h*|5L+s8y3Eg)1kU@jsIT^UG=jZ#DvHy`*AoNA1@3_}3ZIC?dbUzysXs{l1-a{p(M(SqyZ61qx?#u7hr4G}37eMqp ziKeL8K-8cB2era!gl5wwJM+9fh#I0f8#l_*#R~Mdibv?5VeFaIgx#0vbj~#(r@Wf+Gpd$dN=FtJoapuhs zNP;v(Bx9f*7vwzw2_VpQ(b?{Vk(ATKs3~A$kF_)KdYi{@3GenS=GJTZhtkmk3}$C# z)gQ=v9d2dnUCabzX=4ToX%1vH_*>olJduC)!JWjaP5b5`r{dC38cr~#G+y~rQE2*Q z+>dUj*gWDxhzG|on}@{Q*4igp(PA5&e)sZ|cjL6TEIp)^FhaDiD*^EZjVLa?%w40J_8-GbZIjPCQK%``vcQu(Q}K- zcOJI0>%(f51)0}&mm;jCW>rJqm#HzT98#!7#a&tl#CGH7D-oJDWgR8*Cl|vg8{wQe zkXF*>0Uv2T(~!!y9g7cEZfa&d`k093&^c?j9ding2h7Evg>0O zZaxNjlc15F-{R$EvQycUm_^m0{)>wd&>34k7cr;{KJ zLh`2AIi2p#c#1wUAgm^QQQfR$rJxgo#RvfmJe-N?4t+j2_?_ z&?*qc&eTEmZq|p{o5bpQ&gg+&Jy8`S?m2olgHxlm;`tG*;F>>5P(P_(_$sF1cfD(} zW)^ZX8oTv?^GkBf3yz5AmWI&qfvyIViDs=K=GV<%CPD0?5g6nMFBifC=BtZ=UunY-|U9vVtr z*-)y(TTEws?Sx#dJm+8M?SEv58g@})?O|~`WP2YPO|ActGhSYnP|CPoreAe|aj49c zJ!9xM{t@l788}F+fI4NjVvF!Cp(;BzA&dKk*n^dt4WgqQ-aR$+i6fui#KRZ%Ybtk( zS1k<;AGc0(>&p6V|5SG%c>EbEr-ELs8U{9e6SEjJc5DB3>FD;n?P{VPt^aJH zn)Lnck)5ph2I@4=jUE7Y1B+#$B(rR9+mAmX@o195k*l91Gw<&t_C8z78B_?$f)CQL zNUZjV2x0k zsHhWg{O0&i*jlfOU4*fLL9_F5N8x&nzIE09x$eBU$LEs#3Vz-{WRgh{`-$mV6q3uj z0J`2EETtJE>jW?OUfC9H5>1K%d!(~Sj*i2mXE@P{R6-nu{ZjQ(+fbKX0e;c!X1WN3 zB7Gzk59YnJ(gP_FNc*MWo}~u06+}bDa3s5S@78Bo=$6(itCV9>Ny2DmWb2_m!Dm*h zb91U{tjT`JU~{=<~3p?+auNP27!AEeD6<;CKJfRAf%z) zcJrxZz+Q~odZIx7SHtS$vaIYjsJ*4*{3EzGbJY2-ZehCl>|2}oU=i5q2eLG;n=mG2 zYqrv45!een)g4!Wh;v<#N_us++w2wb5G_d0`m<*4#}Di6N%(YPY?H*f95L5#&7IA9I33?e)Og;m999bEfQ z5*wL^Y^$BpX7)S>ME{(7r9t+54}QDwv}c~6wl>{1+A23H`K!s}l6AAwvg&xsCEr?} z*e!UwpDZ(%h0@!2IeE#Pe%6=(l)vohhMJqw70>i` zFITfdauk!Tbsy>?S?t5m;zL=j zC#CZSmuq63bOETwa`Cf}@_@@&g{*+3+S7pQfJ>nXj63X5cMk~I&%Ne=Oy2v4%sMaw z*U@VY44-@P;5`Q{<{xGYhswbH)S=XX%tVGgaD3d7S+n2jA?uE5bEL*BjAbtBJDBtz z?rr`24rl$tZqe%N9UYgZfAB9+{_$V1iQ>O#^8W*Q**AlicB7(*4Edd|wtgIyx4vB@ zccK&VaNYW~(~&7=bnl;`Jpn+Iw6>F-fd#*fdb*6;-#uH?7wF^H&t8S-+nYw+g{-!^ zE{k_}LP3u675rd%tysP7&&6yfUT<%2sT+Ua=19k{n8d_HyyW$4@w4efSm`p-(&6*? zA0bsC7Te>YM(|c`MEAN!3qo~?N?X}f@cN+Xds3lDqxM|6M)??3ylh{afBF6>_w`hl ziue>;-*bGI^-zyL-|i9N*QeJKy<)!|a+n#`o+Qj~Ar^9VN>1_7ogH7nf;8m9ov%+i zTJME#NVa;o?8V7^|MKO_aWok@Il+^D<5oVm!=8Aa7BnK6J2SRt7^{H8tw4XuhPjs0 z;l;!6tF$2vsqORcvKcPIktPb`zu#LlG`7hoCa{N=aD~x6%aM}oO3vEBq0f0~YikS6*mg4)UP?i1DXZw~{A8<^ z;7+ty`UZ#8Y0ghks(@w@ml$Z#BAOCND?6jitbU+QNbT4cU>^K4Qe|R)_WDQl{|b~= zt<4q4{c)8-1W7kdlrETzEVvbqa!u5)qH7Ba3psNbJ!*1weHYy05prXAVnl!!EH=TP z!9`O5PaEfjomsi2OZE3FP2OJv>vzW;XAHPzdRcH)#^ylES*wLY8tr?eJ|5VACRwWT z)iY=)4eiHgXA^?YOX&e@Pd2KvuS<5+HYKLRV#H#oZ7{1y;m1)G_A*4T!s-|E&a~rq z<7-QwTaVXeMpYHY<8KL;7ksBj%^iFf*>xmVC={%{uPo@+M%o!T<`jQmYcu zh%%`s=@uRMMEo(|C(+sez$nR${{XNL-_0q4oP9ez%?KB&NTvLd%%@FNp+=g?%Xdnf!}9X?P-zeEnV|Hva|YQo8(whb z#g!UTJPx@ZV#!#4|EYI#O&@dj7#04i{C4@F-)W)4Ivf<;gc-Hu{?8P0TDzEz}Cq`Jq&yFn=eh`|0G7;wc zeJwM;At|*H6JZ{5L_YQrLft+ZT)wnNDB>4YrCef4=Qa*?#E7K&U9wW}p#ys;SifIB zm-ukFF!^0+TAz6N;n5y{f3&u*tMkL+Yg_kDY_t;h(faiCWbU{0Qnq6W_ri1o{m#W! z2XeS?-FqMRDOefk>IrTH)DNd}3q>(N6=c+8^Y6QEObp+UU%7f1D zxVd6PdCpF(q+y-jjrImXRU9wtgX?`*tje_SV!Ozw^crRJQjKNTX-}o^X^XDQW_~QT z7OVS4tex76jG^iIF-CtzazN%{Io3;h86WNVfrrq?t{pMoHu4$+UzHb0n+GC1JrB1@ zn4GsLk`UPkm0Wr5kwuabgUlfsqP;!b=o`b%*v!(z*bs2|UvLr;% zcs~~lwl@94`}L>OvOhakx&^PqODN^>sdcvNpwP!3oV4hHEVW5iTtt91=GRBb#{KgA z!5yCaPL4}!vaVhckN>P*9aQeOg-qgiiKNg+E`vZM*p=Cri`8N~_u z*^9Y&jM~Isk6PJIvhn1zyQ2xnfeAKMU5E~{_i3jIh`hNfZOav9dSapF{ zVC{MlKFsFfix7KeAUo0NOnM!pu54&_|d)hx8IC8V@bMQjBmY zL`#UB%lpE+-M5#KsI@P(Ke)L{jT?McUb#(k3QV0|aX8V6X{@g=^9a~1DA@_tFZgPN zXhMFgQV+cmR&tCza9IRz6JmTPC~o+Kp0%fmmt7p(0fqrQ180h+UWYStjImRB-19ZG z7P!PgE30K(G_SUH)oY-+Q^LR=ETAlWTKM82U31G&vB8%E7pt_iX{WJCEuZ%psLANe zw-qJ$st(*=wYq}BV`M=Im5aOvU&mjp=f2{VFl8<)*IZiBgrxY^cmGzENOW8*pHgH@ zG4ZRY7wV2!s_Qj!Ym_nZiQNXb5LrX?ATZ^6wwW1+0~tw3A`zYEzL%h&M4E_x-PC={A0G*r=)2Tk;r7NCmb}{+dP5gO8M-9HquP zNg||fY~s5(Y-UA*dv?}cAt^7wVxK6v1zhsuH{4I1$J?l!HNK`6!#;+_981@c#`XIj zhKs@*7MFDir@55oKi_xB@h~h3!1m0`fJj7^u@11w(*s3eqq9V?fd?>uM*B$=o+{FH zo%?y0sr7QH_$P~ar~910Mflp&LVRq#&ikE=PCRD9eK7sHPlp&d-7*YgAsEX{C9g}8 zm>qvHFS^QEmNP;ozeJ~WFNAy7zGC-4D=+Wd>zQV z?a1ov|7D_RV&ZS>Gu?`~7)_lj_um+ricGeiY!%4R75O;ri@=#Ok{Gk|n=e3^UZXNsh@{SEb!o4@>$Y8YF{-y6 zO#8O!xA~{DygXYeox6+zc*mwE2h2sC>H%Jh8zuA0Bepg~sZBWE(OuvEi+0}z(iOYG; z)2OfB`+ZeT=dSb1Ut7)uCZB&$xmLIjSi7_r<`O9PcdT8EB+g|y*ACg*t?Oftd<3?} zk%6A+$ag!qUM2CUCsS-7LNxGD%0)+#{vcD90CfVoUi_a4ycx1B6D{rkQcUD=yg7c#K`uHHfqhMS4#IJO-JDI)L4xekvSE5mEkF3}ufSBrB zL1Q*1Hah)s2T!5TfJp$lOU4XTq0U4#MS#rMxqYlIZFwlFd2=Z_b~Nhq>s%6rc@oe| zgW*eDe`-LB`su1azVM}F+}X7DCBGI8iMk~Vlg&#keT>~G#i`Iy-qZ{K`NbLk{-I2P zb5q^O=e_OSg>_$D0Y5@-rbIVZ(ix90SpPm68}#P^IGt~bA^VMPLhX78|dgLHinoG+!Fb2%C-#_`%U zL4LTfs)%Js!ONPlzeA#h&?QS*IFTX!NJ1!*d#RBlV7WM=7z_`1(7b0Ah$Srq{dNpg z27T;1Aw8m7&O+KkQrgDvWLx^X44L5r*v(cpaI+{pra8)}*y0FlhCcAn;Parsm{o{M_ z2AJ<+Pl)3BJ;yly^P_w$pLM-sWeAMr`>c+J{$DDC2EnKoq;~@C|4@G6aPZQzno_xi zyB#?Q$$2zG_WyzH{NHqDEWrOeWtzmuIXLO)2ro?)4tTqKuDc+55Lq8XEhh5T(qpBc zrVR5Rv&66gJbk9VCmT+!M>9nIf$kP>9sJS9`tllMXW;E@vD1L5;VPf>9gVv4Q(lLt zv3ye>|GgF1+S=N9W9s@J8?*J!o}M0<%8@#)-);}sf;+>0bURAv+^o64Bt6BRjMXj$ zEfHT7BrX6;G`?cp({&pbP;hHFueY$B$gpQ>JK~rwQGIEz#E-uc$|BJ>+N9%ze=NPm zJ*H}FsI?z-ybASH+t<6-!j*tvTuZRf^S7)TG4_#^+w2cR%WH1`F+D;KO-E0$({nnZJ z5GEz!+#q-v`;d%>+qli`lyrcMtSmEA-Qsq+~LBCmo&{|n2fv<4+#CCTF zQ>v<2wIJ2#i~=n%jnPL$(bTd^g>RfC9K}~Z#eV)?rYlLLi~X{gX4t-g-=4z-c-z39 zT5Fg)^JcdMnZXR4uKV>scLft zgUqXht#JLdWA%q?wFZ4N%yup4!Y92xvcdu}5iZM^Hyqq$7mhbeG>r2iFD@K)7(#rY z8#~`1!V#X)Pd590p8U#DoyBq&N@9yCsdBq;ZTh@3jIuOb;`FV>wM)nX`r?*PO1KNv zdPovlYdw;U#;If5QC;Yr zrR_h&OaS>gKX~j3&gxV-R<2Ws7N~T{pcRKzmT52cyBNG&jfZR3JAK*c-JFk-_lh#t z(<<*JjeR`RJMQsnXr!tGUsQ<}xHYe}0e*ihyn8sX`Jzg7M@v;xO(U;rB6z;`2eB;Z zqZeQ$bHw3X{ANTnU$Mk=e>pVF;myE%n=H!+)FeB{*wDpC01UMncC97S%MP>^?CHnofl@xSn{C$VJP-|FE$WZ=m4=?rxyiX7jC0L`YpAwZt9_?jX6I!}sN*PmC~d z?`FQ0iUxEw5;eAFNF^L*EE&k=#Qv4E2X=sdHIO-kKrU8Do9Us><5=gIP$~N zisLhLIbWp4*6Utqu)xgIY+PW|O4%zMEvmi4ZDLS@Y_mbvyQkL~T)>`_&G}$K5>0YgoNFV7hMzSYAZAtf!o0Kl5WXNi77z6>u5vO`WvyN*W~@VCy(9P1(7MVU`vk9 zAq;@_P46+#)JnDryF{S0n4_6c7- zJ8xVI4+RbHA2e+5G)e~wASp)c=Rn#F3j%05k&?~c9oEPRl?y@~@C*uoL*`9n<#!}yJ2USy>+yf={Q>7)*5NEsv;g6gyb4B& zXUE@zVbj*Wp6zpCH9xn0D1-+vqwf`8u%!gK<9OYI81KP8a0pAP+4a{ALsD+WvIdp4 zn8NSDyd@37Eg3TTLy_H!>zder$R7TuAa^g_=3 zEG@(1ZP{WaqD>EYFrG}yV8T)Q z3=2S|w%4fGd*GgoC&`@V?iPbvz4*_i6~(1$$0S*P?@TSn(el&br4_X76pR9f-)ZQD z%JyPhae{#AIKt zWOy_86>g62d@0`8aH2?0O&6B4Hc>K@bVK!ppDIW?FfclzMEI%(<(kv22EN-!SHFfw zBrQo;tc6nbzE^j_Ywz3&d3zr)MpOG3{}icbi%xdCp5eQ3w+;SCA2TT)TLp4Ez#}{u zhVjMhu&x@fY7JDmi7OH{NeirWd?@x4tUTK2Lb$D&hx%PP z@&6IfFn>mGSpTn`!bSp>Ba!wOdNs+e~ z5!tGe2ZJ$I+|r@AAaqLkkLh7`DKo=9?j7aXwd^2h{L_BOr2|R3%A4gtDrBb z1tC?ACbF*2)Az4VLXPN+^^FZp^^MaTz0SK17o<+NW{xJv8u9Ps?)$)KDWD0$?|3uW zB>U0}>h0b5*72)||8&ZEWmT2y((qM0j%jn%AS1cZR;|Z=;aK1PA1kwwOXq4K4Lcpq zUBzx-3A!F2_?|E;YmcCD`IKQ%hFb2lmkg!FrUKd8THY6 zM$Kc37g6%7!&Nn}H=}#0#?V9FN94z+a-%zRZ-)1u76o+d*O3;=~<<7QCtL)$jeS&BKIEe#<#v#UZS> zl;Zoo{PWAU=U%|_6cSlm&A%a)a?@U2j?hM}Cq{es8ElCm_FFH-r9L+{7n*6)0s-pg zKKXVF$1LXGD&0EOk*@Ql{CIR6=kE=e_^?%qKCOgdL}C#U@f!53?N5^X=?CW-N6? zNWLB}cl*!>97|-_o6rCL>s+VOCSAXTOTSH@^78X8hpN2YmMqKWP)=Ld=af@5UK5+^ z$DFdI7f>CG={%ic?`HFBCJ`QP+sWSQ0x>rKryQm8D7AcTv)0eX)geCqznV$LTI?Cg z*C}W9G7NQYTGmXwl)}j0dIhOBEUk1I|MYcc_vZdv()fbNFYp%Cr@caqupvvapRKL) zXmiexCiNG$$X~J<21oM}Ty%4R@%V~DK@Aq$`mm5B zM6ai7?*Vs7gHpy?&YFEE(GjDnjbYApu5ZbDUUH)>3E_*!K$Fj!{GD#`8;3pVjTWT& zQ6rK0yr7g}(hs6V$?9P`ST56S7P*2?qCPp<3le zpn<)1q%)D`>0Yn_NJpKAh9|povJV%JkWV;agN{vEPRw~0QjsxvK&#Q>#XgsJvN1(ra1pdbcBt zRr^XLg_c(0wMz2|smmxN_lN;&4#MU?%CzXWzW0P9pJoq3C|o$mbn^Is4<541z_&ms zIIoVEgY}TOu$ttHvP>u#YJV`|$7%r|3^Lv=iFyEJCkImlRO%uCFrhD{0f}sJANb!I z9*@;9XIc1J8GW|ZHYeV2cku{m!6u3WxReyj{z-OpKxGn`&>QDY)=Mf^d3o)CCf4r z(BW9=I7#0vB*;W*?eUy1oz!Wk$dPiI)=24;itfO`03uM6F=f@k6I}scVA0{0orQcfqh4ZMF=8B@`=JS^v z`#syo7H}m>(4Qv|A&q*=qI}-`3j>|8873p^&l)+?nG8p&)v^jXgR1%@fLh6QqX-FU z`19Uf2J*0&Bdp)CDt!8uE9DMb8B|1oqdj)gJ-@+&9&7;d-NN$nKK|2qv@m%znL35n zjYbWs>NDsBy(s@>?Y_9E?;(jU))R6Y3{mB!I#qv(4d>AfDtNtWy$rhWtONBQW!LWm z9pwud_EvY9S2CZF29QKgR<{4$wY;Xq_2U8O{fFV%etR55H;cs!0jsh3re3=(3ndG! zeS-gHl5u4I|AhMg19b4;{uN01KL94wqv1yCdq_1Fyf=6h{SR*#N-xyp%D}IK|1T5A B*k=F$ literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-groupselection.png b/windows/keep-secure/images/intune-groupselection.png new file mode 100644 index 0000000000000000000000000000000000000000..992d7a52cf84768ad44cc42df4c06ff74a2aa2d9 GIT binary patch literal 11971 zcmbVyWn7e9*Ds)gfPm5=-7tW(w6rjE&d@a=sghCxQa4IS4Gj_l(!)^FB{_6T3pnDC z(hXM!Ag?Kpg;fvrOwoJca9S#N9_pCK!DgdZTo`4Yt5Vzy&;e1KgO&(tDQOD4 zoK4kqU3}gXA{=k$oqe89@7dZh11w8Ce>p!bs z&EsuZ5?4P8HBXjn5%hj9kfV4L`oZkv1mOz)ra?xsO zDk>`e7lqGq?dmdTtc8T%uYK*eug;#;id>;vd3%X(4!YNm`7Q5(pr5AHExkN#u4{Y( zYUXB)(>h1RJsZcx+a7#cTrwz*^-k9JQA_^BAlg6f%o%6t_rpJhp`p^Or8(#%+1Nq| zRgZ)8E1S$yj7^*->(A7HTO;(OqG)<(iLaVS5F1pEHPYP zH7zgmK&{l>=%LB#%4{~Qd0v75*Zj)foz4#hZV`|`B?Y3gUQJrw?$?0nK^5b;jD$4b z(V`i-59HBK{~V51SUcSXWD&>Nfp`^dN&Mbz7`;JLYu7i#8NO|)6O7AviOy@lLavQi zE;NBB$3l)S>RoaI&|k)=7#U@rJoz0blQG!VODr27aQ3Y(D~{xWnU0${I~52#{en9z zH$B|2wB-)cy)Z_G1XzS$8(R|d1pi&Qt&I`my!5wEUj|d_;RU5<-dzYU;T=BE1}-k> zSQ-%Ib-H>*p}XAX(-nHcQzDc`g|6gmDs5^L?<`vxIUL+f}4B~axl|(dY7GO+x0|vDE@q{@D6ZT znCSi7iOD_CoLJ!9Z8B%`WRL;t+3aUS?<&{vpXon}&hMLO{-$o0Yv93qO{eTBjW)@g zr@PX-6MCm%QYo>5p}v}MQed0|K3Qd;?c7%;FUSr|ruxR=W!}6}g_FiS#t-xE8;3LC zoqQ3i$%jh|xm(XHrnlBQ9(CPGzAtt6xAS?EXAp$x7~~vk%q}X+d4LkQD9!L+ zgBmwUA+Xg@m6s>0J(p*s z&1xZMk!|pqs~;F7<9^?Ph~rCAq<~w`X5RfWjT&Um6qYIgaq^qqS)onc<_KX&{KDxR z9KnXyCFxejdgGG=7v`>P?QTj;i_=MstZqbaDC@^p_AM#u#bmX@n+V@YPzP_IxR zpeyxxov|HfSy&&eOX#&26&o|?=UT|))+2ZI5QtIhnbpgODxG>6RZtvYqX04w4wo^b z1OVr%qr+hd#k@pNvGH*ce~rV*6M(R=EgiNHU{fwi;-D{7;+}P}L!bi@bQRI01ahh% z+U5d8o@?`+))cmx9iBx_yFNeR?#+4IbLlL5bFvo4SRSz6w@oO0lAZtzhS)srDJw5$ zN}#7$YsG`6uYbvKWuv3?|E2qmy~UWXH)gWtbDxNdWc?G@u@SuDte+hg+;Ep4J*uka z{C>k^lo2pEjIAes6@EC$cOQ6u$OHg4)o6xLgGwaS=%LwZn$GaStcc|8aw5lXHgJF- zQE9`iuPz|YkLG1rH~N)x0<9o7{y_npV9o5yGs2(eDLKCUX9v4M67@dHH@qL*rZD)J zf{pxfS02XVX7bek$QraC$`)v(t|Rrmix?-BPPsn*(`vQ{*?@Iiz7%7}9a)#Q0RtxU z@b!1>a&gaMpTDu? z)FlKI)95Lhw(qeBKR6~R^mx@zdzA-IBA$CeaR4gzZjU@Fx(SYJv>7G=?ghvFoXox> z%Pi6+LZxZkT zswvMb=yO*FHRb#`zVp4LA9GY6B*fZ@wH>z$x;NfLZ4bJal#EhRMsNuLcvnrey-}!Z zAD;`5F{nj^A0RRjIWBIY4gzloC{?9TG=%@c**CTJM%h|?<-vzGm&}n*uYLbP*-@KI zAC8JWddX-0Yhx2gnf>L!yQHn*0QvL6IAy7)Rj&3BXoFw)gVK6-NZ|FzPU)4$mgt#p z88ru&OW}-FgLBvX^0_+N&+p8*$cOk)3?Oy(^CcJ#AZgUOEBj*i${0KM9mJX5KTrLwSaCnoBvPLws?rok`kBB{?Z7WSSa-jy4=- z%1*C_V}icP7*u38IIQWHrZ7GREdzOh{u8D7iCCwcMB&app{@QKwRe1G zVpnPuNr)c|X1;BToPghENa4fpaiD)1|Ei!k$To#Pd6aGeHZtQjp$d6MjtyYGZT>rh5nkvobSlrL4=MCR=2U>VHlC^r0~oOxCpcZ=c8aa_#H}PQN7n) zRij-<@-W(qQWUjH1V8+e`#LKPoTY!v27t+Ow=i!Xo-`yiD# zQ7Z`tV=rbv%^GYY0cTK!ggXTahTrUc?BHXk|WY+)+K zy5e{wUe@Ga8Z%G;FAMtA-6Q_BYu7*{2B12?WL|A<$a!4@}s$wv$I&VM5z%|D{ySGck|Fz)5=Lo(lzO_@OMe8lGX ze81FDd5$g?`)RC6Th?1!f?W6^l(I^s>LM*8@!+r-?ujRk!uCkCuN`t&@-GWYrTJoO zUfQ8)muLjmBHJ_{U zCnIQ8y2fLIJ+HHQEeno<=U0|&&hDpsvk#BhWQL1hJQ8z!;GccMDLv`POJercoIapmyaqN#bUWZDQh2%Xog480p*&x&9a~z6EINEN=DhX1E=R z=nMxsa#HDF68s=5U|^gDPYvL6GOivLyfaUH_3{uZG*3tW zmC_2W6`k-P^`4dE2FLd7hbj#dwI7kNC9hV^GU}O!n``M6L3#GZpz?$%f{|D2z%F$% z=kQhE1s&Ez3bronuY}0dZV@2P$h@LQ_%$9Q?*!`cgV*Aj=AicpJB}BHR<04SHs<&b zTBu-c4QlqcdZd7tbCLQs$7xRiM`oHD?<661F?ZEUw|^&5K^u%*bm5+epb)z+2cIad z)OsZ$Y*FgMp3K>_oEg@h51=+9zGk95q6-IpE~KNhfbQ?@(hBrDbsa)+bSfP}kDoQe zqs6scmvBKn>eDliD($|&4>k1cF@lFbrH}yqUi-o)aoiq(aK$etYHbs&3iMAs%V%Za zc2S#UA3RH~8WJzzgEkMr9^y2!X3kFeqxay4u%9f}Xp#>0&IAe=v5%BB&2|K4snVPu zfyN29eCe!aB>}ACv*hL-OmuI!s{`SKIVr{uw7yl_jZE3pXQbO6MM({RKe!w8)swf7 zNcGkD#OF|oLpqCIj*@bi^_4%=*E(%_sQ+nknv9pREUng1$?&L$jM`RRiqt!Z_XFtl zr^@b8>Y4jJ&aRUZ(8o^(Ha)4z&kkC#7k%7gJ(l`zp|Z z^{u0sCTi}^DT;avPL)WRmc^`_7ReUhcYA*KwN`}VxYanSY51Qvg?G%tUkghmL`p?e z3M~#s7)m-g@qGDeV>9qUv?&2{sQTFyEa^HStfgk(6>(%b$YpCRBuep5b=$;F{`Y~0 zu3}zAh^=#PAM?QoO?StyOWN&Et0eqlP2bJJ1&f+OWoN?ywnYw`fpju*(jBt&%RENt zT*0ili7LR+J<}eq#B4AdY50 zNo%vD@{vdP9}ry+KPV$Q@^T3%nJrKW)HP4gXOa?j6Sby7hy;Y;Yyz4-!dxQ{0PfE>7>H-{1F9z!Tm&#&&B(*A7>IfQK=EB z7jCi#J;?Hr6so)$*mdJO;S4R(lR5sy$Pw+OVi}mV^q$K`*+|K5wjc5Lfpl|dIrTb z`baSa7;`tq1jID#qW&j^A{14d;f1+F!rVOdDBOy9Moam>G5y~pKOvpuVP9_?LOHKo z{2+wAZT8`}d~ThSM6mjbcfU&dSp5QDRv0s%95z=L{u!Iq&Q&qV0OiwP7vnmmpCehbljS*| zEknRfwO^X+RDwFJ-h64~2~d-xuIvurFN(Wnd5fs3%{{ODA2;J>|1?6^$`hSV8XGRmP1ckky61`t>6-++50OH(#kPHg z0D+;zzTgn|2JaZH`(4wKNoh8Oz3h6>PLYnqNu>%(@P=VjpTkLZRJ-shZ(IDYsplhliBIzZnPG9r|NRA03CK$jxNE-X* zfzT64HI>K^NBOs46%GkeFz)0$9@tONxlcQ;kMtuu6L1v3Wym?Be1A6V-iHlI0%d7k z$8XOJH#ROX7DdR|5cVd`a0FZZyrxC)ds}r3jdvrDjqukqogW>&^3Gw5$*Qm(e z3h9%$(%pbl8pNQ+LQ_+iL%l#;G(Fe>ADsZHl@>YA-Mu~$woAkI4s6QYF)v-}C@Rv#`Be-EpRyk?oJmJ9oRwQ_ zW%)3(Bcwf!5{uq?{ETS`H!6kTB`s%VX9R4oDvC3H0H{7mpPcAa#Mi*q<45{=A)Zbg zK&MI})>gwhJ$7eBi3iKPt#WOr&)j@rmmS&`67_E!!ZGfJ;79hW@mcb$D&SqvFw6Ob zR#*2e3@0IN#7*B@u+*0?c@x)}7}SMLS^`Xu4DxwA=XJbJYUcBsOCw_i0~T@t$8YfVwI%az5?IG5IW7687?D^~YW{;dv$qwQ^7a zQB%uBvqqnlE|`kPh2SOto9O_NnUqR4lFM^K+ctSqiRL@ zv8W%A7#qI?@Qso5xqF@+jurly!l*x3EPZJ6gI7FFz7DQV7`N&C{DUvI6fVB{e`fNl z1t4(e!DC!AJBh{x@N9E6LhW|Yz$Vm-z`+qS#2&SL?06uz$`%5_AJ9l6T4Z{g)8-Mbh zflrfaS(@=9Oar&kcMda$!jZx37cXl%=^gMOsZar31;gL3gIqV?QXy&-G%T0ThqX+h z4olK=@;~cxwny5zZ$UF2_S%e+#gp-c;QPinJ}rN{L54CNJn5PVJ00JN$UbB zdoF+LEYv~?rgvuyvK1sLiU{bmUYqn+TAjE1t0*-0Ze zV^DVy4+5rsqxvIxkpHHIoPKeMsh+3H74%(d#5eoImEYPIVFa+wc4hX+R(lQ(%Dv*23$q^3OLgB}YRMaZ0ya`-DJe@P@ZA&mGq|u?{;X3p!bPR!3ZKOK z1tO_1`Xhw-<*e3`jSqsnqd10lF};b|;Uzr4j3-L2JgM??FZK)z&<;PaXljn~kCQ~O z0;iI!5eA;W94iUIPX0WPiY^iok~h69N^udlzIK?gE%wJ>?}BkPXgGj|Ci}0&;~`Rd zhxYisA^B9YCA;kIZ9=QJdmG#8KBC6q@YD;E1WV!e%KYh5AP?$;r+R@X-uh+U|N`2no~jM*pMIfGvT+Umv885BalkODHiH~B)NB_U230{~bN ztjMrmd8DRg#Z~c$!|r^yQ?6so8A?~E%9}kTsq!4-4j6$89e5wvF=?G0eqTZ6AgpT7T zSBEnJ2{88ROHh!9lHZEGt#6rvrrGdY2>u>8wv)r#g^dQ~QaSuvIYbR(roqNO%{1#Gd3-JL59|{MFMe zR~8M#r>$op!rV1j_Xwh=r$fCqr$e`(3*~NJId^O#%*%KZ_~Ls{jC3!P0;JE@Q;OJ- zDFO+1#277uXo**juew`(PtHo+G{NZtsyV0eH(fXw2%^O37pDLn{wM1ijak1a%$gw< z#KCjPDU~KcE4}j-ggz=3HMs@8XC?7Ze$|@JlqZekMQi3BGOlq>wQ-Gpktdi*K^1A6 zFBy(Clpo}YY6grXb2OP=`a0f|)q!r5Dc-x#A7#I|lwm@uCd16nwnuiBEr(d%3%T#J ztLWNl&U7^eT|o%CdMnjlDTt+{ci0aJa%gV-cDLo??_ud6R~CvU<|q5z2% z_EMFPO~fVS9dkIgz>m}J!_w31J2A;5u+CnFkA3qBFcR)J~*p&L8sjWDS<%*bzwl=x?K zS4jZa&o>S;)}`IvrQNS8Matq5S6f=AeWgE)ia8>v@YhdcWHg|%qsB+JAnvNQrMH-X zMHP>VEO;XPF&5CvAbVNN8+}y73Y@JRsZ@VM6)LT-8SZ!Tyi2k&1-puv(bbNo*{wSb z!$t}o9?(OoEHvEg0NRPIk?bl0?lh;y%;DsjTezoCaU}bd*OH|shv!=Jl%yhAF zRzg+^#G8MQm+v|-pY(fS>CQy!t)?FkBEt{kshbRh6W1Dl*dB!pJZe(! ziWN1aH5zX=>2EaQN7}?4jaE;4@FVm4ds&b%(hleew}i}0C?r$#;8IyX8RGR$+vTWa zDjp)Z$EF4ya5a$>kt)ZP)RWhKUYuz#<|}%Y`j(`rzr&tehmpTBU|4S?Y+ToW5B0gv zu*dCW*Z&#RGzpeXn6DpC0geEbXMQImOSNVg`dag;&C~8IPVPEoutV(tX6qp;Sd{ra zaa*^Hk#noSdq&0?JRq)vX2fJPL|3}+EaN1I*F&CD+MSU@8sa;KRb7YQ0disihN=6d zf_Ml!d8oDql;bNv6&vGNN>BixZ~qshI6L=pD(VTwh8PE=wDUc61l{@}7=*zW3Lgq{1IwvMu%tBy)DXU`#x(;xI3rpzuPMN?Z`?)9S}p zwE6>|ib)Ken{fYQHBuwez`bOdf7@Ay8&S^jOH;`dicoAlaLfO@B!phEa4rv8y zh8#vC6q0JFITBxpWu9==+9gx+*uB4V@n*#s4x=sRz5=r~{@axOS%kMC>^nl?HdA27 z+*{n5@=v_0aJs$IxEx@uCd2#d!c5}c1EW2(T2=zN`%$7Uxk(;GbC0CF~3i` zZr4EelKD1LV1GopX&1Y?XcV_RWd+(AWx=NuoE2=0cv2tM?E3dl&wZQ}ih#Es=sYd- z@VZ$$9|aD~Y?`GcBdnDfNM?9qzW8*SnGTeR`7bNh+S}&et{a;!_%O)X|I&Pu=-M^!gS6FkJnLzaww$ zis@mLxOLt?Q5W;>@2LP|;$VOe0J%Ajn(79dczZXQ{e;~5`F?FDGje~c)ANmgVEErW z#}2%{x^aHKvEl9OAMvk85)@Lj2j=F>PTc8n2mx+!QP{)3xsfU>vibvRyY}KH+0I6@ z3{B`|=XglN^RKtPY{2~X&C(AVA(8{+;BzeUzf8Rxz*3pTaw^W-y@uILumY>f1T{D_ zyZ_3n=3ZWbbuabgP`2`)ZP=;XCzLUn-=!*-;?U6C5>sv6`(!ft(Z2*S1Fzqa+-m)2 zS3eE|$OT8p3EYj%C7lS^gn3~uZj->w`;2I-o&^z0V|%pXX%`0H}E zwf?m^!ONv)-;3jI0!!i+e|(Ps(|rQ4$=pJ?riUfCqQMZUw`Ab@qjxh41GtzeXRKh5 zZn-ru;{^6ddxnJLaO2$vBW37xx!$bRy!WE*z&PXaAj9ox49m`!1e|^|e1ULv`KK_Z zRu9_3&**2XUCvK+95XvE@AWNQsl>;^OF*wE9X*9OyeO{`Lh<}MEI(XPlbpF&vJah@ z+!+-71DSZdNE%BXT_VkmIvOysy1DEV3OcYp?&dGuekCom4y^3gFEQh_8UWI$ifuB! z%fmJ$Q1mnXCKn#r?L?kIebOB50_nlHS9Xl9oFgBj-GipiOzQ zT;J!O;?J+0zE4DU_GU()N^pbM5>SJ|kQIf^;gTLF#N*y$Hku|LB07&|VaIQ2AGLsE zJ0?Ve(DJRln*JvxsiMFxt>F@xg@C_qBV>I&7SEqG$+I$-j!05^L5cY%nqUc@Jj~P0 z&H!cL5sCJ6_BKd1@=n*@|E%`3nOXxFA*OcO7~#i4iui#U{Z0xhJtzq)mf$abVYU5V za`}aZKS7S4_cnO_JG%WF5`zInzCq70CxQQpgMaqwEz=+9{6FhIM@D=sRbC+GZ!3{+ zJN8?1Ez@X-_wzM@YAT`C*U8&tDNr0hXjcpE^L&srA!3&k+<6uJ?_3>*-%Q zO@Txh=Nrpm@|tqa9B*&&W+4xtN&=4mB00?UwzR(Ro9>003U=2&-;)4jBn|J!0t$oL zrabecEKQ+KMYdTW76rprZSv2GAXcykW%4IVaG@-}_#Qad7u#|a9LKqkUt2^9}Fv{j&rJe>HZiqY#2ip;)MQh~j9K-%N2 z5uapyeymlLuA}ay4bkoQdOxWSse1^XqoCK!cF0d5Nr1e7NLJQB1~DRK8D^Q5qXELk zu8PpJ!_3KW=RO2!fqifOiJnZQ6m05&fbKY4m@J@~HD-(r>@>JO0Y5;L6xfX*`sPsUE%vz!cR&Qo z3ptRUb3k@PGms&mOq0;b%WgJ;{=<|fhqp^b;nHPWOOu+@;|Lt4!T5ES$DQJP+@AN! zt;8%MSB*p#K(Fp0F}!Nsy?VAi3Gi8XM*~S%%)M>a6@hIp8*tCvW-k)$bnVlz-Iu)Kzn>l z1Iy;$W!2rUq`x`q&n<|a0hpo3PMCM6iDVdB>^~g;S;~0G1G-7!rcvx)^#IsS$sh$x zHyBfHPhou}#mKySObPtn^DVKdCH==n#beA@7UB;e94scx$CrOFUt(FeK<a?8VEt@bq!vB7WD9OwZV{a?0SmNQ0vxx3 zm|uo8zOG_ZL&6=9@a449#Ty})0B5mbKpPnnx$=QsO|rd6uDwV~$U6@2H0fItXH z73qW)N|4YLDWSK}+kFE1e(#;{zjN=MVJ6`zr|z@%K5MU&z{hGzr%r%QFfcHjdidb} zQwD}ZKNuJetQ|WDTwz|VJ`a2xaD1wCk0Ga(YXbP^u%*1JJOe{sDAU&SBf$U1Up&xp z1Re$6V*YV}?b@T43=GE9hxg?*-6%8VOnCin_eA%Byts!ZmTBqm-1rdbPAhCDxMZM{ z_@`Od@PcP-6kEiwP>1~==AY*oVJpA=|9dpmI*KQA<4PQ2d9rOFptN_ao z`*q^R(f4;Ro}|8ZJOAd&(rIeouU4aF`1W!_`Kpw2mTh<2R=tNhJ_e$@0*Ei?N zjX7U6^n0M43=DUrxx^DL9(zsydzb$T#(G%(H2n{xy7wV}8UfkAAfHJ3d+Y!3P))Nn z&5t!##m2kb)nyquq$j5{+Rw(a_~UPJok^r!nsQ{O-_H7xqVeT#zbn$qQdT~}unK)6 za$BDTd+uy_4OTqxT!=p!XRbcF_Ttu=y~+|v-$24mU#92tG$L0Va^UB7yNgyL&W%Pu zbXVX|%wCIb8ryG$JFAz|qV2+l*4*RfJSRtk;VA0LCzt7dOi5~AxGz(hCZD$Kjhi}3 z5$Ws4h%mYJ<+-VRp|yZ~WK~ts2N!p%4Ry@bQlZ_ToBXJ!ceDkU91UwVd&Ma$% z`ys%_p?f+x)AoYufM(bvljv-I5T2@Wt3u{;QG{*sOUcSvFvH2#lW>Sv(O6JD-L zr*`xD{Gh0=78yf=D-CI;o{v`Ug>c%L(TCy{%$00nJ~w=T$>l32NLWcFBnEu^+c^uIgF^07M_18?12tkRg*glvP+VPBr2@KQG){U z&b7mZY2j!xxTg`>q@&o&$7O~gBAlua8;?~eEB97{H6`e?PWuEy9(kQiums_lR%|RC zi(WNsTxfdTZGphZ3L@9tHylDFSF`;m1G>#CE5X^@^VT`Hy8*{A`J;Su>q^^bj%u~nOd!PxH-X4V-6M7f=>mWm7&e}u>nsDp*#Odby zy2G?@vx?aygC>|BxtEa4BCHHv!;445Vr2Tbd-3Ln4M;qPt!}FJ^jwqj;ShtmXtUPe zL6grpbR5BD@ZMNVjIq5pE!8j(p^uydfxGh7NR)PJ8ENayc22DpWX~X*HN~OiDM`+O z@_WaOI&E&#j_V>-C@(yFsX4R3Tp}^=W$~uerH$8W7vs(HfAXHD{Yt%Q6k0!*17p1Y zv@s=XeAEj6>Dq`CGLbYWX?iK5RU3E7FVYBW1kq)xF>OcC*CF*fI>hdBSUSnQD28ft z7EWZ-?V!G{sPlDzPFlX3^~D{SPz3{rUaqS9@_k{6gw`iU?ejf3_Ss%tU?O9 zdMRsFvrdGrKD(a71`^;qC$mbF*_~?`FOjJuYX&_CHdT_2y*XA+L}ap^IF|OT>rAeo ztcXz%gPjmnn4We<-yav#HRv4j#oWaRJ7%YG z_RqH>@oNaLDQJ1j;JealgRiy=x_PjvZ5ZUEj3PS3Rer84DJH^lxf*r>9nr3b+!WxD zM*PJeRo(_c*76L}WUwI*6U5`n2IZW=O_#^udfz9(&(eCo>SThvzAl#)nxF|;vx`QR z;rtb26@y5m(`R8o_@Z0+mNeDm2)$sS+VU`cVx!ksuu*VnA{F?7lPx_Mj%^&(k{9i2{os6zJ`v_W?svNGH7(8S-8oFjt{K zK<(69*~RlUyYo@3oW#o2sAP9Lef##g?ZGWJuX_v(zyk;>4_YL%0YPiG#y|Kfne(>M zKGfPtva3#^z;Up6_};|JyhA{rxidWni~qEAi>HyBh|Wa{qW*)Kfliwiv2`rdIMoQ6bTH?zW(|{`qFJw6UYW z@YDFDUFXW@mDIf_dFtittJe5M&+qne@;rpnhlU?Q;kJGiu!Wql=x_(taf)+QGPIU}$oFkV@c##If#x z#+$hEcn9Y6$<1*jZD*a|hi~>cLwPRAP`zi!%{0J^)>|N*LSSl@eZF0=RWZqb|C7vr5tvfyyc(D+;$xGEP!y69x9CK8lKGPgSjCty?O)e#s5v;3@Er#XcC`4xry6O;l|9+#|-?LtgK88)6` zu737hc^y(&DqFe(vtJ51*@d2vFY4XdnEfOA&2mRIH2UU{)9RRdoYxd@Oi>tMhcRXt z888XKsWji+ed9F9;GtsAVzIq*0J4!pjkONSj`ma(_Y}EQ@wrOFlpg}+9c5@&0(t*9 z{$%;>NH~&uJGpk*Uw7OZSBvgYb^i8*{b}K#wPO87fr0XeUE4cT;p7hPu86gukc}&x zj##{88$s$zRo_dA@b>sY8=79}D%x$~3Oqt}_pzO$TImhDoW!P13V z`3jBtF0k$)bjZ}rt*icNtq;-UK96VjC@DG=Ic-Jdoac!_&=bpeUXX#)f>F5*w3`uq z^t=~Z+|k*`>t3v9MMyqz}K8s`qm@W;`WFypFT{>P_p z@lLzV;5tRhm(itZ366rM1C|B7%@HPa|;u=u%>T{I{;F{KxjPcvwCqMYbaXZnj4Br3M!SPNTvEG}dffd5bErm{%5TWIog$WV*{=bk?Ua9EXLbHA zTFt-&;nKHq)!&0B)Ze-%m+uoBPFTJ0Tg_?Xmtr1Oua8u;C&!ap$i|ZH%NLLuo&IK) zS0#0AZ5rTGJxK9rxKoYe?Y5Ay52iEi=J%uPd4AGJa@&)sJ=p@47<3L-o44pf=aTN za+6JOIW9j}b&1h->XIP+L_C8G(*{^f9GPqeIh-{UnhgDqbs{@h*VyoarxNmUkG+hBXSBQp7gyW!NHhXBdkFBUyyce|3A0fD#p(l$1A^!a&6Ng}mZ zPDS=D0Q54(7bbqh40j8_8twyDs(PhFW2o^U0Hga};D!vypyDx`F*NM<(yMxIB@791 z7juBYBdlIry{yEMpYN0mwO!iK6V-XU?PM4%k_+$>5D-Hmha0jdr(Qz+fm-xM58;|5 z*STH=anRm928NO&e@mx(yZ^YhehJ_zP&NYt@UdSFLp!}8^a6p4v#RKLkH5b0`)Mm$ zrOZxNrZg>}(&6ggGJppBAKc=}WSFQyiBn2z|2IczvFVzcHzy@!Wm}N}bpM%1x`6=6 zK%r11S;$k;b7h)2dfzi6ASV-H$RCo3bJz$MX34*<85F12dS*O6Rgt2YhT~SaMW(2- z(?-Hl3Z;s~ea3DlgdIVBViT)IrAKw65t|4$PI-wdyOghgop*aD2nC%Y-Z^adGdf{K zm?EFh0h=(cy(BQ4Mj8xt4(`y=(=2vo7U%n08x1KAjWD+2v8M)A9K2s*W!T#)V(^uV z&}KFjwD>7C$2(B`KTo3Y8~81(gN;WV`~fb`+rJM2janjioLQRtolT`r8AChuXb;Y} zqvG*=;>R2*pGN5J^hD2);0#8P2hTn+pCn~U@$IhGJ1%x^>;- zl-HJ8i;XEXV4wB%z@mlJAO5jyt8B3&j#9NzN|%<#AtC zTrYUE;LnmOV-KpaA)gDo-%=nFxSW=M5hj=~XuFYm1Uap92I;PC(;bsjT*#Aj7vn6C zdM0t{Pw;8w(l;jsVHM_mY6ftEAoc-cE-7mnnr++T-+d;f(siMVOiiR-exW0%FFsC) zk4|QW=t9?0^5ZOgSR*nkwfUcc7C;OL&z%oX@R+qT>g~lm3@;745OY-~<T-YP!sx`f4EP!3ji_LPcXjt+>>FYLBE+)Mr5iaIRkOAlnu{~ThpR6SeH z6Pv*>vuRsX;k_wRx#h54lmO9PYO!e3wIyW;K3h+`W4?So`Ux3&3YW_41?MzxK8P0g z)J`CW;lwHF8K!7LG%LNhyO`q;P$KI7Go=%~a7zkgqsM2aN8ILT`yjhzVur$$2tJ}Z zKvbT+<+H8zchz7hKGcc*Nk}lXt4s0IHUa;nfYhOSznAX#>n$cYiE;x zP^z--r}*)G!DT2oOBL5V9?RsVrP(}>ML_OGLZTI_u!q`bY@Cd-?lYYj(vL7D?p{nU zf_NafEc$c|LBJy_aj;1ND|Fulmw{RHcdfwdDofiqLSGB5{Ww|v;Ys{r0;BIdW98PUXy4%F{l>3%i<}4-j7B(d@aZRN$mEb5Z5x`)92T>E zEd9lxt3ryH1BrpKA(uW>UZp+1tix&cS}z` zI@aHq2F;}4F0p?eT6MP1TmzyqYyKRCwk{YvJJtH$U~(C3)mWSYp%nI5AambID8^Jq zD%$nUj7s*AsNwV1Qz8gGyLOFK^M z$UT^OSqjbsRmQ_fh$^*iC2>)H&Ql7+&7s|$u#R^RUDYukop}dS8uunPvUW37n0T*x zJ(gXPbq1Hry!?&Y8&9TYWr#ifvJ&>4D<|x}tCc1ve{r4dq&eHD7{%gz3^vBm;Hhxf zbcCO66r3NMlOtG;h_KBZuC%RGYUMTY9+}^By;RwNDYnM{bEAAqc&ce&9uSR0aVd^r62I66Jxp3EKs6bUo zp{NH|PW{5}6>M|H^ERXEr@tW!lSqXuXmn_Zs#wX_>BH!w*W8aJNzIz7IzH3}@-BHofnPjphtQN8|St#N&mCHXXijMTjDwK98bqcuil~InX}awx~PeiDkC(9B?cK8 z*Vu2NhH;!^?dLh19BpjW^LxASckjAH+iVsLo;D+L_@s!tO~2gDR8pX=)VN+1vqiAP ztz2Wg_UN&;Z@&koB}w1Tpsp?*PY;AyPC|z}R_YvZdc2IGu<93Ssh%Shq~R%PmuW;> z5FTWT&&pipyG3Fi8*`lAQ@A3+ zI6e3=NFkL7^_occ3Bhrf1)a}nhd&>%fQJP<92c3_74DwrPYDsl>S59vanm&ribYPQ zt@%KSGa*}Q&e#iZ6^x24LpHWY#VCk*Upf~@SI}e78a=7(e2<-La zS)IB?{`N7SDeaw0e=?%^3rJ8$HgluP9Z!!O1A;5O|E-n_)WrLi7Gfp3&pY&t*g{}H zu-GmUc|Q8^rt)gneN%MEsqXi88f3=JF@9&9oD*gUqX*F|+kaZDD#}u!z|NKKy$;Yr zJ3Yb4hEBx9V;E-iI!Sw5V(?KcTZkC+8Yrp+wi$W?a2~HR&XjWj9uwG$2f!E=!6p6p zjA~fH!6{>v1U7QkXkrF$PPqt%WdEezY}wE)uDtFH;2)y@mLG#~dJ*{i@y4`RkH~47 z7RgUDMeWKCxQJ3Yqz{=UGxUgUTPomfFQwOP>`d`m;9g+RyOkNbR6e*I@Jphm-3fk9-t zvr9B+0}PGMz#t&6V2AKEOu4h+za;nU0ATJxr`ivSR+Q-deQkgT7pe8oXRycAgo?r~9m z!3B&(yZ|S`#&`3(G{Olk27O$&8Q(t`ez0j0m(vlx<5ELJah);m)mblkhG~QyYCb1g zUa{W*n&!8WfY7a_-HHeI*t6|-U%9FkFXkBS4yW!CBSoaAHs#z`4ImzmKr&K=k60eI zxZIKMlR=Z)j=LYXf`E+c+}D=}MEAO@9wyE0-s+2K$_gk#YyvUvRA2q97Z=)A55wfp zsGD`^ou7v(*`-_6ovK7wz!`8HR46omqIW_69?wxd{G*ee+64`bXV1B7cTSd&OweTW zDLI{7#p8Tq1VdqX71dLV9HQS$=XMTt?6mDn zmR4-@`g+dfl-t!CnZ1KWc2Uhlbj(PUT4}Aq?m(>zseS_4ZLp~|>yLx!0IhjTOAVDZ zxeN?hM$^~sQ5`m;nGX_)EiLLDb??P=S8l#A;cUvyiBqL*UgPv$xt`u4<(rChvu(X@ zTBi8p6po zs4QjdLEb}IIx!OBJ^s)nW962ar}K*AEKV1W$jw8@4#h2r*1bB;ykZJ zyRb^M_#B)rfdyAYE-nXdj>S3*UQ$X}JqN^Xu(pf7yW5-P7l;a|-J*J<(Z1dJ?3jaS zpWQQ&v0lpq2&W5ZwJ}>$w061>Kvu~pTjR4$h(~&<&oItp+mI~ z`%@9a3-XpGAe5tIjm*_UO)SQ!k&UmXW<-9T23EiO9m$2JRM$I;!SJCHx9+2XJ%bd_ zRn|&3AEg=fCF0!BolQN#lxEWwOdCrZkzBqB+Y~(Fy#m)0+SGfB!IeGlFfgGOnGAD} zI3X+VW3^g$1irskKIy0L?2cx(et`GArE1&B46y&5?Fwc}+1+}P&Bd@%qxC=={2Yck zX)%fWg-bbK&FG}SkCt37gv6_Sc(NkeC0*a(?SKwN(pm5_*3wN&9ZAsD$;pXtfJwk? zV}Ix9UA}JUOD3>cVo<_t$j##pj!fg7pQoi6PR7HC=wy~SS1ex)3v?n{kSx2iy%{fS zYco?r?iuPYF#5EyrRU@FD~@6?JCdw$eWe)DeboH~eNC5g+;(P?s;K>{h$a|yoIU@FQNtf#<@(~V6~+y2%eeBhI4dV!^S%fD8~H(R4p^eUxqwPx%9@+%?^mkB zd-aV6ZBK*ANT)v=4JFT&tmV_U2P9*c&|P=O)d~p! zckg1PiMhTD9Y8?|p@#41*^2g_vO>#*eOJCm5#hh*ly6?y1LwWu$z7)D!BV4rPxtqM zc<;@9^#1q2K#{NLUNEr#KuyK=|2!a*M8b;irP4_j`x%tI?9|COuv`x}V%2zmwySr9 zok3VY$J#4l>QSko7Zl_)&j3e0esYrSb z$v_dJi~l)h^pz=%WQIAum+OS1*$vbz-l}4{{mtEfPb!&Laeh6Pm!p?WB2(e=m_Lu! zXItDi#7f+P|0cn_b4eye!}Uk#6iT33<2B;z2VduSg*$L&;u{K%0z+$ABC}vHnyl$$ zIIC@@*~WUiizGl1VT!I}uQ6#cH-{K;nLI_NadLb(EZ8JKkdixKRm6rncS_Ar_=}i8EoIDSeGDnt z?{ctx=~{B3Uep`w(fe#V?XU|~n|V=r@y28&PtV3Q82A4h0;Y=;*SXX8uyP?Up z+FfUOnGNQJda1=7)n4!dQbbkvrx)?pi23*{35Bt?Tc3odCL4o~{VC{?LzaH*e|s16 z=fvrlm*(}TXWR21wz^2^An)cdMjprBKP&Se)Zat6b98Usa+o)lH+`<}(z{*~ROq#h z|3jmK9VkJG1u|E?Xbns0qpI@@p&{?RytR->E!QmhMujIn%@e(@?n!?l6V2A(S#GDL zw1B85?oYpU0|C03{K=zR)?S}eX)sPUDj_6f+OsIsu}@C2>W$p$Xysv}Zt_R9O(_vNq{_IiN2(ek6@5O00LD^C=V?al$nMLmrs zJPJ$$;VgQyV8}tJoAyo%cJ&&Wdht+PBwA$fZ3G0W^DXK6deybbhO!G?6fYisj zRO~*-7nED9uZwDrRzICcXz3a$O^v}>)0E`SRGeOn*deLovq=Mkx!PhSTaEf&0xPjF z?89I#LOwgnHz~mJzx(P>s9a!Oj=8ZKWrI0%66utUlW6~ z))CU+{0PGNWSf)SL2*Kp^CknDn2)9H^n_7r5IA@COI|YbDp?~hl{d5?0JmdOu-Z?2 zI;WI(YBe1uv0mHm4=cKOSSFEFE6NBOpnbaL^+dOa+PW^k${c3{uRksu+E}W({hXNJ zo%$x{WS?aDZ8_V8lhqN60Y#Bwl-(2Uey6V}9W}%RtK$G>lX?Wb($nFtRme2w75Jjl z29Nt3i6t!#J=Qak8!W}b+Py=P8l?!6~)QC zXBV)0XOs))9ohadZ&$n%C+K6>#5zUc$;R5f%ZW`C&)$~O<4>&C2BrEgqq?*+TfS1B zZC7tpMGjQt?ZgkR`DGI)Q+GW$+xmTsC}u*v+MfDxUh`iwVeqF$>2Y?qS&q8i&UXH~ zu+4MYCb+`({t9U~gheT5h7=S!w&f00!f@8Nmxjd&M535krpGJ1Jjlvvy8IsuWbA#8 zdQOI_^A0?d8{4^PCaawJ@Yh>L;r3gt*7~;JQ<1m^&*1i=mJy?4-k#e5 zmv`*B7v}g0NzLS?p%Ws(tcQ66C04@u?`Dul2;p*;b67cG%kCOET*5?EMdxs^bqz{e zS1u3mdm7DC+&G)o`-j3|p(#G@UrPHDGd$MBCk91nq$E}l<1lc!{?bGK zbx8m8oD`TuT`NxAy&SgwswKm>Old-*=tpQ|;mAGOBeB-l*aTYhah(fEvPH2=S$RpX zi(da&{kdjy-S^DWz7HC948&9@=2xEr&;05bwbV!@})Y$5e#ivh(XBJ-b{y{rl$q05n zoO|yc<_|}n{c(ARpYxV2sl=0`t5+9zwKHxJg3uTi)5^AW zN7bOYtEs0W{c0h*DvnwH_SmRA(wSKylw z6%OMc3N}GA`y5^rqhv|nQoNVSB6@K6XF)<4gs@#3gHCsrQ09L{LC(M z-xed=*Fb3zVo=ZYkgvW|An;I#fPH${JoC}Fl}y4&trxp*+*nDqo9Gh(DnHt;+XaIR zvNCu@WTPHEQ9^l1$qMW#R71&1p$KhmVZ{Be1sC59vE^poe zFKNUX8F6)0F!!>c`>o>SkojXA9L^&H@mJRkKZzu^k&DM8?6f2}$e>XU=Ni|=>r2|F zc`T)?ni3cmkkMPc*LP*_qV{@B1cBY|zF0~N2gM2BMwn?Y<^(ow+2efVpASDJ=vv)( zvohYA(jJ1LKsy`hzqa%8tahie?jNXo@a1mS%=D$I1me`(SmA+C8!^tf-p*g5#0BTu zvNK?|<28}z`CzsNn9i$$3z@?q@pcp6Yd3eimV7KLl2?;QX7slTzXH2{o2PfYUuEu|L&-^w4xVrrGM%xpn>hS{ti>oNJvzi#tieb( z3nED7A}O$MjRvmUVSzlm7hqvr;ar94UhGjQ!>~J~>I}+ed%(0zp1HBt*?V>sCWe&Ha86UZTdo zOz{Qu4i3{MGJA1&O5OjNZ(lpYu1EtuehVa18sx>jm(OKD`)69?C7m?Tv%jKlXn=%; zhuiZfGQE!ey$i!|G6UPmBa_#EWQ_-&&vG?Et+Jh?sOqW!X;!En?p<__c`$B(ki*Rd zsdIc_jc@dLq1~tLR4UE`R;^p;jB%Od&8EZBC%CJQBE3wDxcljFXV`w~b+ z0E%bK^BZCmX(!KKgs;cDM_Io-_{rv;O>aswVT{-Z!2mC&)t5h--V$h9Sa@bD-|l1` zKAu;{i6S4hM%()GSMAnZ24kf6FZ!Ns7AY&`A$o;CiHBk90aA$f=dUBZh|dP0PS-Fb zdB(~)`Nk89;JtZaDTdWE575pkklHU|?p$DVrUILRk2x-vb-I2R47dY2%Fr@^Uorqo z0sb6_*ili*A!X8@D!}$@pBt_|iFEQ@Lmp@mnpu=x`jrCPoSGlD!5h>?x&}Vimzs%0 zjg;Bo+nxz_sLHXe2_ADcAnNJ;R(g?&naOVza07O$K>v5GXt#6A7G`32)-ZM=yEs!( z-??$oh!02Huc2d#Dneiim6iE>rT`jvPO#~7Uwez)Y5dKB<`S2?u-Nr{*R9k^fo{%p z&bj1A5F?-LJO|U_VM>5gsms>*UvVLjR@)9OlHt0NG_<-NygQuSCp5VEt+`-M%4?@g zkNe(!0WW`dQ>Vys*LArp#tRX0_d$0zI8AovzNv#@tR43PW zIoS6hA%r|(sbd7;3%F*&31;xVLAbsgP7aZZ97qCrPydj{xr)p$D+joXQ;;cqRjNQ}`>e+Od;g$0w2 zUY-&w>H`TYuw6+37!P2UJ)*Bw{5EL(;Wq-5sQ0lcYrs1tEN-Nra`a55b08{mQ0_@^)6b)Aw5VC}_r&|EGNA@wk*NA-xhtyT@(S*>b@JPZ_|xRXFp-dP4^5FjMn=V53PIul6lIB6S)?BO&~KI^sW$> zENqQ-A4b+)&&ebRR7Vqy3Okbj9)x|Kdi&)~J8pHJwurRy63IpysZ!<+5FnU%V%|1Z8(0>q3ND3F{(s;}%!-f|5X<}0iB*X&J zKr#id z7>C`>Ikk)OsY(v40@RB9Bm1Z--7L%^vlOEwEaZp`Vc{;EFIiS+ULlIViPrKG{U+~W zzHdq;)en-E!Z?P)g!~AvttM_{EVnDKqbZr-L9>Zf7NEDBiPnm-bfq z%BolU!yd1VKEV|Gi*qQ6X3z|h`$WY(^Be8=IR29sqqzUA;a_HKFXy+9A^&7t^rYrq z`V8<=boUC3G+HFIzj{`|v2HraD>A5`6?)ssH5W0JxBxI|1G_Zsq2x=#4$@_9@xFbG z*rDH-0gK%eNPqu@p#A6$ZSqc3bcD;4rQXGCubykl|5+gP?ryLzk5_9;Bb$2V&fu%{ z*9!lj4C;5~eW+2sn&uk7ccny59oi2?k3Av>R zmgN-Yi_?D+-|cYb0vFx=1I<3FglUQIP8S>1=i@|aqnLsF{-2pIcWSQzxwgHL+#||l zJB5yLf5e@0&bX}C3oA>$+&gQ07*cYlz@i0|S>QC$5sp<+QEBeFlJ4Gl0EiTXTmG&O zJy?)PjqT`J1@CK7R^a2iL%)OFba#iDRIF_#}cr8W3F!&gm8YG<5qnxneXm z(8}W}Xib)1X^*M}5;LlkOB$^GqkPht%}5RnWBCGWi<5SBa_TC2_f(m8uc3#qr1nsd za4Xbv#m1A4D;eXTWm9J;CLu^gjo^>rfOtsiD>jL!Qd-Sz2qsY-p!v(y(ji@viiHV(_CtkQbo+N@zLS&q`W}0sD~=qX8@3t9?>POF@Rp59_CelMc~KY3p>UNO}-P;z1lJKke7^* z`y@JfP102Cd2E@65)hYk_f6JRZTVS$h=5SU| z07RNRHu3laTKgti^d^n%OygNgBhfQ!NDcG~hgcoYAuoe~S%ZgYg4FoT+mQEv^^0FX zG8${h#gdIn&n@h3?VSpsJ5SeVFPI)B@2z-xzjB_h8m|;Z{#|kZD~J96wo>;^o^JX7 z&$;iv>w;d?-)f&5Lp;2^yv(jRQknsqo9IZ@;BqlBF{yddt|2Y~s4d0CZvr|LP9t%6 z+3^8h9djoqJQ~$FNx%*FHWfHLKUT{rw z4?_U`=NbrSsgjr?5GQ}YPY4m*n8#->ENBCE!UK4sTP2Cn3h(8M6Jl?|9(?qw>GTjrlqY$oJz(7xNFP75DfU=8_5GsL9EXz6a2lm7+_ zG^hEMSFX0cZp0z|yxHCLI&`Jy53RHL7gqA%Lnhj^t!GN;c zqEDV(N4@JJC)h?p9Rs+`SDSod6uw;I&gFXvLPbf_nPw#e0y6uPSyEcIIXm)sN_@N3 zUKtRvC!BP*ZltIJxwLq0mBXfSpVPgpr7}tGhI)yWl%!K=kqmTv5R5|;Uf)&+!T}jq zdVo?AT=va!H)+YXg%!cmp$Z%gG`Pp66RD_jXo3bpT^KbJr@)ct5KfP~l8Ch+RNGO% z@qtVX3QfMbWV;&nX&Ml9d;`>tbbl~=-fm`K*VhMSbs>QKp*8;mXy9r#H?IzLdal@} zr=u1m6NQ^<=%hXb&=8gL41@b}WmUgTwvPZ)PZN*`5~H+LZ2(FDdYlFSa2YMP*(y9r z*H&DZo@9m~U(%CFd(|)m`))l;Y?zZ94mai4cH0Uxda&SMvyo6q8zuHUGHqAgS7QJR z{dpJF+m2_gJ@%$(eWmmCC<_qKz6ykg6jK9$1R(Z`tekJRw|eT1{Xf1LB(=BW8$`^shX!Mk=I&)=15wUu`$nNJ?^HQhz86aH?Eap8V1_ZM8UaR$n z!IciRB?&;vEZ1u`x%j-U%0@iD5fl*Z4y_G|Zl3uUImf|vjnWO~3ZHRpw22lEaPKS> z!M7Uavhe{4Qghl9zczPwGL`>osg0?S4d2~GHp5`o8SlOdpV7`C!zAw=CmN%+xG>nu z7YL2^S9v?N2&cH%P8qN4vI|(P++H5Oi}Cdo`B!HG%y+u0xhSUrEVYB(6scBd-LCSr zFZxsgq$qs`?E2?f*SY@_o@*DWtQJ(A-hW<_(CbGvrK%6*MRLhkDfdf;RC6}$u>_1H7F^HB6) z!R|}VJB&tIi&RHxAYc4iUuR7;v|K;_b4Q3YkLT~Oae~o{sW!6A&hUpX|Fco4sl|%d z7#$Vq2G=4_l|97h>_JQ-Ns-HKd_XNPmaQM2%&MI(RiU3o# z0HH7e3`quL=4yxbol2=~hp!u1^%acc;sxpf z7wW7Pz9Cia0g8`WUG*2Mm3C@x1~28eE_Q9J z+kuY;%*Mmo)}q>hZElQ9jr|_To`;~dM+U(|m2(pqj_inB?XXgp23Nn`Aq6tYRWX2}El0N`=- z{8@Sn`IUVXd2rsgY~32tD9r;}H_dgfK7)Rl(8WM)V>`tPAX=XTN`i9O*1WR;O?P9V zO+2MuJUs;4cS>L1ayTKnnGBn{g8Nc)cmP6)Kv{NwTY~7O3;f-tKxhdtK%KTjyP+<2 z6%E%^J?T(HIZw?karj}03$oA!mn6BcTZxJpl*Jlo*nQyhn zbt4j(l=fuwi1Vk>@!5Q~-h(}lBD|jjh%f?L5&q_a{jWG)L~1~Es(HwtpkTnCLxai+ z@f$yS;3I6#=ZZbCAQ^yjcy=Aw`tF4fz-bXPLi-QF#7g!Tw?3moL>cigqgc=KeD^KkB#)m9~dE~sK27jvAf@Mk;<*mK}Yj;IPh%v!& zDFP*(Y7eA=0T~7eb!U6SbB|W1FV0IHR8iq)yn|anirxdwZWnPR%=C%bf(<}gbX+zv zyEZArCrr!_YA6y|{?*71C~JT|0uX#A+<{%0oj+pQA(8YMENN3A6a!nzZ>v zzM<;?famUFlrK$YyCWI}^$e6gpd(H?eL$1r!|TY_r>*uhaeECw6j&}>;o7h1aN=fk zPn+~2|G|M5n*ETtT*PCm6-BUN0m<`p5tM#3fxN?xc-9MTFBWl*} zY*$~mcAEcY;?Z^CUmO}Qi)OE1W|mRhvsECXqN-WrKdWSDSTlyH6{@Vmxtj{|6Kh#s zujj~)>e&c3KF58n>BFH(TI)yokU06!Q{m~Lwh2M$OKpfY|f-Tlg26$>1p{^FJN@9_CM9(uT5w~| zh%6G{r&kA*8MRar&>>o6mC=8sogXmD=@FlACNmoV#lR6)f}va7qioJKlU!SnLfrvizqWT0 z=ooOG6KXOfOh%Nx6m4yww8R6rQ2gwM`w+snbjq#uVL_3(99ohSXKU~xFzM8J;Ec6i z?_~LX`V_sC?WBfPkFnl9Uk(V`|L}a+#~8XOb$?KR*yi68u`m!oLcD@F-$6NcrUd?oMA(bI3oc^5yRiYQ87^(Agd^ z?B}NTmX=1>-!1b?*vEgPLf=IETiw^tX&HNDJl$gXIQNgH?Xm3tmZFo`f7q{HSj7Qode($bL zuG)H2dz%gEH~<*Q_jYSqALHQl0+!01TIHhhygu$(xq0A_!`|XPnG4JHE{n6lXaDPD zHI`KA*dHEVNUD@s4dOw0`LyjETFm|L`_+J0_b;6MXAu5f`ma2~-#*i&%JjaKRRBYQ za8joK@P>GSQhc9?(b1e4L7p!^^BhAVO_e?U+i%2VmphPEB`fW@4gi0glI~27PuSX6 z{WqO=A-d*puGP0-yP$`}{QeUjJ%dGU6$?J@E5llxW;&`RcQL>Zd6-uQA@H(-OdHvU zd-v_uxE(?f(mC64OZmz3DU7y3B5AnEqFFYj;Ag?H4YSZxV9yB{J>4<^F=?%bRtT=7 zddeXlrd*mG1Hakfm-%m6Atlv?Bybl(^?~||p#TW&{|sZ~wNT6P$g#)36^%v<1Hbk1 z<#0p_@VTdAgulq0*X0K=sj8 zR3>S_50(Ju))mn{%iVC4JBn>68MNIb`1hvCV=-Ny-#aNySgqGaO+f!od1FY6re4iA z>ziXFL{mw9KofvMOkRp@_;cDyj(*Yri0CD2FfiHv0I;0m6!)6a8`|hfmlcCTK}Z@I z_g`-)$!(CHD1n!2MSbj-C%esng+rA?`;0|d+LlbD-EOMZ?WU{ny*sgvagAA9Sj6)tKAm_5Z*q(K`?G_8i~Wu?Rhqdlc(=K zUDAG=?NBypvB$Vq`g+#ZVr1p}{pW?tXdTL{z%L05?QRc=>f~P`)7yL&c%eq6mH|mK z4V7^L21fMR*Sj4ZUG#S%3rUM}OKozM00X9H`|T>38o*7tyI+MLj^x^JAFxG?g92j; z;CI81G=V(W&~9hIf5yo}`7<0~Rrf~H9N5eZdip-vf7@&O1TZ&7*0kZ;;JK2`_|p2h ztH5jTCPJNEaXg%y3iLyCz^~2Bm9HAQ@9G|AV7S5BFqa4nQTpDj?po35-{vncjHoxi z9@iV-s38Y%A+boFKCp`DK^EXYnfF^{pd0@i$?5ziaQ{Di${zmj`?Y`M2_4z?RtN(< zK>6zd_FkYb8rz!=Kexp9a*RMZ{+gKb(?G`k&~zugv%nREQ&B#EjEN+J;cQbDsg>;7 zvH*b?ZDHAw4+`3-;RjA*h^8w2J4;HAoq6JD!>F@>T3Dl#x)?{Vlvq$aS*wbwoBoDE z8y2o*r-UI&!_x&nKeUh}D3zsYfWR}qE?Ej2c9&aini|T)TAoUQO<_AXto&ey?j|6e z^t+zK#?nzg{zW0o_($Hhb9f@0IZ90aL6+Y>@4>jT$FX@SDGo& z%E+^Hf~C|4V%?UK?(yOOYUIk}pn^l3SUn}^ zsKBf-7GFLIP5-c7+I|_Z6O6);5o9x%NnZ#kKah2ytZr`m?rg4GT6I8qk$1e|oDXoE zcD>bCNtD)?UGD?svkfEX*)O>bVnEG*XuA-B4TTZ9<5p_iKdW-ahG1#SL&c}77(Gf2 zI_TO1zvsSeV2_Z{GYk9Dn-*F_+ixZt#()14haKXfljPR;f`Ggn&Sf-Rj1*>%txCFg z_sf%W$4{M!(v{#ect0e!>6kScz?xtl(`Jp%EGgvB_*8Y&AD}@0>VdK2hxdspsJ-rb z^ThuNfdp+@sHK9DluQfGt}*@S@a9$rfoEFABz6>r$2lM>6*g1X>dpB(v%r*OW!kKt zwBDukmWOxVHutu^kKb+-l9|d@pXVH7?MroSZ!xH!Pq4X?d;8Y@wmioL$=d)x%fqf_ zO_fi6mG6^ooW0t~r2A)FjDHLxubE#ezp1Q*p_wIF9qV2-`4oA7A~9F#NA+0ThkfmM zzJYl8xiqll9u`NmCF?T4i>1nK5)vS!uk+xYV|^;O?#U_ zmqCN_tpmC`8~8qrBL6JOftIz${99K%V#TTrA1IM!8cV`I_fSTi3Eu-)?Rv66R?t}0 zkg#}zdQUox~MS>K47f(BP;l%SmuG(kX(f6-*irR>54sv2C;7b;%7UpEO@Mqd#>tvEo*pX_(g<6K$ z&Xc!9?2m>hSIC2Vo+%;4>)Gt1IEHVB_zT;&C9N(l3qmIKhj+`vo9cWAa;b?(*G!4h zH^_;UKcrGfF|}^oVP;KPPPPQwhJ2g)47p(Q10PKeHCqybtU5B06J4R7W0CwJ-u&>s zTM>RagQ+L>A)14XhCuDtuWP@1Ak<3L=t^%DD2}N=14p*A=xahMQxEww1dk$0O0y$&$@&v-Aa48;| z_6xq%=Af$YZ9{Rwns}=1dZ)F;0cA1MF$8OWFX%=jx{iI}wcy4!pKA7n;y^9RL`jOR zPU77qO3#11wmL277WzbX)OW6van9-ZWG5UEYtuTj^KyORVdRfRr~nGG9Z_8vqh&wC zW9P&4Rsq0?1|%LVm>0$aaJUO9ambpt370*c&+o!Qx(`PAOs`%%03zZOFzK&(evb5f z@vlG71M~j?q`+D4;IJCF>KUqBxIrl7H^8`6&}H_xkfPu4&b9-yfxfmxh`PCu?m+Lj6R z13t_?S}%JMDr++Gy=)oOcYz+Hf1geh=PLQs;-;dDc?DB{W)3ezs7U<8b%|#1KC-h963?irVOZXaczzSlf=5mb z7f!?7K|WyP@*fcJ1Ves|?+YXn%@N%wS&T7F9}bBCFi&uTJK=Z7>SxhY-2U;?>>4sl z+MArSa3t47;aGg4n7oKU zxlxzM4z9RVAGuhO)Ks%>vP@ATq)fKUDX^5x3`X4Z*1ErMAB7zxaE1`_<%KUGXsF`% z>~9dy1&0HH>swnEXrELSpl46ojbOshk*XQba&g`F?}9%K+SgDev;X7)#qQUQmcS%F z83jq(Mm}FkNKKm)|-z^=+f?WlnbtSPW3;v*c-C zph`OoWOE4a3{u^IP$c<8KU*iNC|^PuG66d0OL0l>G{0(_on@1PJ}+AL6e&4n)pZ8v z{^BAEW2yysvYc$wIcrOHVP;_0yW@L|ykA?S_3DlamCBXfceR7UH!uyWl-HEGc8Pr^ z_kd70#XNKSRE>5o%5`M;6Mw>V$9Jv(k;`_*k}>JWWI+tFhr)n??pfm=JN0XQLPvI^ zb@1^MnEgj+{>zGQ68^vRHbo&F4{H_y(Y%8`d;mK_Kryr@v$zU%dz3OLLNtjusH3W)U+I96PL+*Q#5n8yQlfh!-{dl#EYoR*ktukpf!4sY@a{wK8|+(7g=x+AdS2E{3QOQU&HLxyj>Kjh+7B2pO>uWn z#wuc@bFyK_ab~UR#yr(QcxQ5O>xi$+&WtY^P;Hmy`FGx)0#DgpKsT>SLtY0KCqjLD zsO1PAY1C$@rKn=R_(lSr+S9LMQ6`b4rq#f9$3Uqto%<`gZgMMML4ku!3(I*u4rXE| zT;?ubrcYSp8w#CRdQ18T*9yf7mz+NmZ+NtgEONP_HyES_H@hwwU&z^195Sw)n|Yy} z;4&bcN#ZwqBni3UBWj3JxBMQIH=`Lh*L2RxVlPD@sQyaN@1@B>-#IeGN=9m5#n`>G zdS9b@Y=F=63Yl8|$i%<(qsg+qXTTj(btIY>2@3gFmlQZ~l{l?$+MzGXj-(ocLP^Q> z4|(A=&*Uv5p%UR)h5uc(m_C|MV`s3 z>Lw2jbMz?FeHLJ9>t`QnpWl*d5Z1aKwKi}%=O_)e5!%R7AApp-w8p-}5&5&Yt^? zY_M_5S#r9zBxCMcbbL_MQ2q^=L3NR!M9f;o7Je>+coh+a`i$-bE%{uBYQ2!OI%4p+ z*&z;oPm^Rc{kd3UejM^Y=v~DGCN~SmY2JuI{y zEhN7!B);{LUkzm=dfUffd(OQ1dB4&?3(5B!4Rhhw3?Ly3<4wlB(dP z^S8I%5n>yzJGyYWFyw94*=v#l{BIq3$kgy$SXWYZW74f;b7qD@YcoeJ{LNb~X-a>7 zWcz|Ew5Xgq?#K1f7M=Lbr;v8i0;kbw_4l)xEX9I_T1IWLfhL`At83hLwhFlls5V(il# z&aV&pWJ_Ft1D3UEo>j=O%3j^;F95n_l?8njs3%+-F8)wdj+7KC&(Wc3hlzt?}bS0>1joSAi!An`53JI4SR`fFnc_h#7i> z7d$B>S?%khRcL(7q#aLK2`hER72EM~sa#%B!&sLc$cDFv*J>iOajnD=pnMl|U3tJP zD_bf(2a@oKB#!ZlgsQd5G}FqRNn#bvPt|h+bQw!=r5s;`l;W-$gci$hRpaMMAUshCpjqB~&n~1N_n~CA75!=Iv*&=HvUc4H3vO(PyTmczPM)V+ zgZMgA{VFSm%ePbVH`-{NmLeh;NgR6GoEtu6lTl$wyBl8|A+~7!{l%~dNug&w1%1H2 z`gQq!mj~Xq`GcJ;Z)*f)@)a+djEz=+HYs$Axk*TxgO`#csuoSmLd(fWXVy6tU*Omw z^aL$FD6FAls$KB67ZE|n{+q~vGzr7b=%|hEPc2EyBiN~g0(LnrOa~nBgA?Q%9^3X_ z1IJs~^5;y$4owmmD#@THnbn>)_)pXlU@Pm~>o7p(XZpp`?JtH4-9WRqIjqG{RbY-Q zY|g_(=@m=>ksvKsbO|ObjRpJ~eSC-iAt*$2CGpOmLls;&oSmFK^U^CyPY5S$Faanz z!wwxkddn#=lf&wSy7)S9rX7~U2WczpznL||*WY2F-TFE-7;dO|%i|Xd;?se0XtSzN z#+fevV6pGHaKi1cI9_IA8z0<|hSK~uml4&OXQKYsdCRk(l7kaXrVTPvQnUsTnm~2_ z&iUVGu`qWx9}yO_H@I(4szzn>|9}yJ@XuQD9a5EQ=rHz^E7*51nRE*?GWDh|bBl5A z`vtkOk!Nk%LFcC8q=60w0qq#9Z&6Dxa^nm`NbfWlr7AtA`xOKcWas*j5U(t^!IR|c zmDPP|d5TUqA%wUZa%>mVA1gzKIG}&;@6m`WD%oIX{x;1jyVQ`j_Iy3A)S7f%Zv>?A zAzOKjl=lW1tZV%rPz5(EywXzhoodUS++F`DBT zRo+ue(eoaXahE3g1Ihu~PQf*U z#7hO7Pfx^CMc!nk;i_D0QiZNIJ~^yVBf>7NWgfd6e|mz(aBfO^i<;E1swQE$T6e$q z+cC$L2VG09r1a=v!@F-tVS;H)+`CVSKoZLcSgyT~ex3h1PMtT+Uyl%eaplztyf3nM z4cByT$qbqdB#FJRPY`52lOu}ArQE_6zV>7U-6lY2Rh68Q9IQm}NSEm2dI$1?SqVl0 z)aPalz1_)Uf~_jKT`A1wa4x}W1&qx zpl2F1wzFzDk;!&Y(iu0=3%LW#T6)aluI;O-{GOZEQy z6b(YijqQi<>juLb90LU0x1Vavn-Z_>#CxH^h{MvsxH5Lr`>&<257L-sJHZGb2CwB2 zp~L}V89)Y07}ipBc0u?V_y*B^Ccok0t@ff(2%G#`7eA*+-`)Rc?vO%8h=j feUGEocJ?2zO7HNI<(vi=-KVUe@pq1#x$nOKsHTt` literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-namedescription.png b/windows/keep-secure/images/intune-namedescription.png new file mode 100644 index 0000000000000000000000000000000000000000..874b8b52a5f2c37f1437bcf578679b1570066e6b GIT binary patch literal 8789 zcmZ`f2UHVXvq8Fmpfp1by`u!_y%Rb}5djrkKnSAJd+$X;K%^r@YJ?C0X`=K*nt*ha zDvCys4pQ=h-~Y=0-gz^3Gjpfky>mAAWRqxSqDOa;?IH*SqJ!ycTYx~M00>0#n2MAr zS=`XSLnI{L7J8bX+F_1$;)Kjq!&n0Zs!yXiaU>_ssUPdxdV@fhy3a3?{zsKW_Y37_ zMwU86B?u$~0_lLXh{Fw}qXW`01L?p)5d;w82!tSj3U)|HNJvRZ$;ima$;l}xDJUr^ zsi>%^sVS+csTmpRnTWtl1O{dnmaA8Ka-gkQPWsOADl>rK6>-qve`RtVRbUL#*JuigPg2(Shs0&2-?z&r}`6 zkq+Wa2lYcwAEvLbZ(v|xY+`C|uHta#o}&}sq6KnsF?LC;btQru{J{fLcXxNV4hXIz z11Cm-%bdr6o56{YN*uB9)KqvX8eVV&FF1pvcHpQZc>Cf*&nE%rkQfk<6p)w~kdz-9 zdM6^nF)}hTHa;=IRVTsKEg>KvAs{g!F*zYIFCnKcp=LaZXq}Hvh0CPEbyDGGsj0+4 z44;~cI!Z;yrlN~e(dbn4L~8p^>c}_(fk;nJMgwvysb<8i==>x! z8jeQCo+lwf`wqIlAKkx%9$7?BbfPB+=&zmcQF-sXdf(5UboF3+dNO-@dU|_%`_cLR zM8FO8FA)Z7k_QjQ2M$He69#Ps|Gp>u*TF+m_q5n=Yr zbXVQ<+`{z1$?WXQ&qP>QUFt_K5eVPE*R2x)zxCrs{f{3%e*NCt-utt&f4n>&Xb5IE1?BYUR0B}RtAB2)XiH1uW01+dNrI_H`O%U|g3Vzur9UD#^82$MVQ=_ zjaFZVm^y`uzYvW*UB+7amSQ`B5*SjB#gwQ^vJ+dQEbMd=q4AMXai;l(%U3XVPk&v*80#_C%79th=4VD|5Gpc;zCC^UEE_RZQc@G8Y8-Q0RH>uurOkr@ z$o<=uHg=PMrJqPzL1+DvDmgGa@_2fR&y+XNOIlMY>2dAJ3vh8C(yj3!idli)1P<-^ zQAqWkzBMt!*?J5gX5nGS)jT*R+KfydoX%3R{o1xmW^e)g%%Rll@$~Ku%}KpGRl;Qr z<7kVSa@OFl8ymfEIdeBwo;0XDTW54)Iykvu#uNJTj2dWfc$Aj=ZL=E+dC- zje2__zvBpb(Ox^3oZJ{S{?G6q?6R$18XGConACI8I}JQ-E_R=`<8 z-l}0NSObfc{S($>@R)_t)>VR6 z`D}<~j_c!}w&d`950Ucr`+a`H{lKbrz@WP&KuvIk5%dkR>~TabbQ zcM6Om%64QDz>)R>uh@twjomT#6Z*@>k~*sXLIC; zr@x$k`}-IHB4EhJdErv*rDa~u3%(i4URoLgHEqpQ;E^g#Icf=s&SJ<*GjSiUb$;8y zQ=!oCz=J|H%?AJ6@o!+sgP@iSe$}v!gU|(jPrrKYV+MQeJb@qYCy>qr-I$-Xt&KEF zh?=(KeRhK_l>Qv)vLR-o@qT4oP$SMw)L#`=WA_~zXE`!&WH!aupCvFp?yBgk`ED1S zf%GiN+`Ty&-Gs9`#JR7*Qvnm%pwp68?KfQOMc8f^DL~%VbtuDkNI7TL8A-d0#2?d$ zb$>YtX=%T>;By(e(6yhZbT@>DoinFSk=4Gx-HWegqqHF71*>Cxw$i2=o0bI5M@x!5 z-~M*6DU0|Gsh9Vs5^I&y5AIHiGVJN(9MY6Nypn(8NhJ%9B+jEhf28ite~RJ&P%@Ivk9NUF zUJ>W_Cq$n@pD6lYE|0$>Qx^zp-zck)c+H0u+l1+`Rzkj;4oEW28j5UG@~gCRMmbFNIekkWl-sHoq4|(TC*}E5FP(PG&$K*A*IX*7 zi!bMarhsX))g_9Y^u&68{x&NpxZmAtp0$>`K1jwJ{h0{~tLqz6tB(c{x;P(Xpv1%( zHYL-W8NPV;!&`0sj6Uq7p0UTvM{moaFzU&l-+%nB9j(vThU%9BH=kK+V(hPaFvB51 ze7sXgBWSu4M%MCcvC$3R7q7Sw$i0c7TUHav`V?-Ng9ly)7~2kJ0~fjv5;NgOn$VRr zq=%%b@Qj+@Fz1`pt5n@lY@B-fmw^%WGKR&slq5CSeN7XFkLpRFIYIq5R-e|c=(2Un z;ZAlIYwskiYEz_~kfIKFkkXk)zi8dOJB(-^u6hSSKh(t1N<&e;5N!_*3~uOp-rKfR zA?cD`ruI|>?7O^XxoR51{LVGtP1a7h(44R|=qHKI-FIn-)1KQab!ikiXVVPOi#%;? z&^-6`Pxwx2ycqB&9pbEdNp67(9E)(E2ghn+iJT@@m`PI?D@@=62HW(D=dVIt7|PB5 zD*j7b%z$Cna+#|=(2;cxzr8>5oz-u3@QuwxWl$Uqfkd%jC>H7RdEvyupgR(V^(4vJ zXurd)>QOXPH-LE-5&!e@Z~>>Qa{x@=V#M4CD;bTy!5ouu;t9A&YLRSju+TR z}|W_;8L*01O;&GR;rKtLPMM!j0a#UG2=1@u98z$ep5UI!VX-u zYD*M)O*el=VY)Hy^UiO>ph8H@lcQ_J15TyTpon=A&6nevy%&5@dFz7cE%sg&sssK)xfsV=K5&a12>zi*}AwQiiRc-82 zmaM3$%f8aUQq6p=Nv1;Z^MuDF-^4O7GpBLWVR*8>o#wrJ0K9K(<&SvXCbeg~@y2Y|t=@u@zN}D5iLXfhIjd)L!6~W6&4#XAa32 z4wlAz6|7%XqfXooU980LqfU-2P47#qac(>&<*qM$7CbR`??oCpG(1dk(fm!vfKAR6 zf&9}#Uhvyq0pb0j>J8L!Ake`W7UQu;bxaq5SK%=-St4?UfjA^*m9|F5=us? zr>$LPerqvnXU;k9TD1-KLlMob?$O)gfx92LYm!XgoQW;`F6Ex%oc9Xb5($Sxf(NiJ z8u4<`g*q&hcJy>TzZ@SH3_t1%wuQiX4Lws}HN{fq&%o>89bxL^>(Y*ao<$iFj?d=Y zX3CeZOZ}OD^tp#JMx>e%gBBH+5EFha_n;*rcUI}f&kcNsa?zife0v<87q&O)(LxO{ zO*|cRs;3uwAnbvx3J^uT5uc!oO&2TBvc6;4YFz6kaVmfnM)+zA+O*IDOpUC7Z(DQJ zpem2?a`-P^tZ+3uG_c4c(Wp<}XYu|^hXyT98#iZ44PdcbGG&DVn)D+oWt~#^BEUor zMVK=Y?WeG+H#b`tNTC-22q_q=PI1nZs#9RBfs^?K$E`e4Fwr!U_FQ}J^VdlCtpKnR zF+-(6fnnA08!&Q%kj~KX2Fr8YB8qL*&c&MhHs0G=JvV9%qfLbokshYMmcGx4Q;@Dj+ac6@<|)U-*Ai^|Nuws`ckFfPAmKWdnWQXHO|-`U89GB5ToJ@v^FPT|pS%XB_Umk5%Dgivpr4d6faNAn z)R?B7iY^S{QS98i<&+Y$SEK4-{(@TO?pRDk!4~h|Y2jG8_v+~#$ zHtT+ry|LGDX&W@2)wu|8)7idu_*9NozT1$jcqYsq+E%IOobJ-jPnd3tX6lU;PFWdf z(JD?UX7x_0{i;61Ovd_pmzH7-3J1rus51<5QoNy?X~xpE!`|6g2^L71_cc}co`loz z3Cha$rUi+-{Nfc}S^YHWGI959RouQViM>`9_t9T?_bQx+{-I~T;XCwF9er%si-E%3 zR#6V00sv=30reWa8v@h}TZR8^8$M#kkbtq%VIY8vhzF^7%9iQ~e7JVsE&H3qcDwMm zyUtaRb5pFkt|zUn``}{BW(G^?8KLCl#QxG$iXc|q?}9B)SJF%l_NoCQ5`P2piR-xR z+~G?KibFAUEoAh&y;J_DH0jZ=U7bakVC#j{^Z}aEZw>ZLu3ksNoa@{rKE%#z)svAb zzU^b8{A!^1b7GF>b(nw%cJ*rkoy~WJdduuat_zs1g^vP18E^8E%&71&UWZE1`F2>C zE$ciuQXCy#z2`g&trcM?Ff0%PBNSL8XThX2P{dxUyL;oLVK8E7*55H4LQ^piza9C6 zoS2SPl`Qe~?cEs`s0j7_mT6RIj7Xh>WVz$%LYQxg7;%SHsuRWS@eRTu9wWeZYxvsF zUf+CN$M>Z8THhNq+{5qGIMJV|Fk-q{N1>Iw=Ke3n9IDIr5~H)O%xo8(ESGx!I>VNz z3~)i(Jb^vcq`-Mtz|zC@m61~&%vZPh#a%wcdTRpsWJ50tjVHm(sh6jm2v&?ozkQ<0 zGLx7iE;FAViMK}JvR=|*ly6Av{IX}+M*J*1^2(8YoHIpt2UGjY=qU0!@$OH%?Z{vP zRvN*k%Unl0L4r4}89yt?%LdFC9Wkq7u?vI1@voNq+c1xBW11|-IY)92`*-9Zd>&=q z{#cfsY84shngBk(2$bhp?%lZcta%@HRh*0*YN#IKo&4v81yAs!)=8i>dg4lTd1*0!lAT42=)yX{7NHl-hE zmY<#p;$!Kd+a1ziIw5skBK}*4-LE9h5toVX5r3a(BN3jb65uZ}$z67BGp z5TO}q+f|$Q&w?B`J-p`PB8A0)(iJLOrbTdq_(jWuMc(8q-zOhF81I0@2S8%N~9R& z-M=R=(^wC88PAkJceX8eK3;vow07jRkWGFb1>*}z7KV?t$_I8%vrLi1v)Tj#Xa0iv zvPde|+ne;P{Fj6F0OWR;?Z?3u!@rUC5G^h6Pqs2{)Ld^1NR%8uLh{~SO~+btxe?W` zqQ!S7#Ez7_UH{tB$B5s9HQ_^Jgx{#wAHy%Pe=?K1@_J|7Ar zLMOyU`uZr{Ta1WDRi5Mbgu{E5`sXYka6?m?NFMR(bWKWB~K z)%1%-oQ5oQH**CC@}4W=MwW9uw1|GG=f-|N7R*O<96qB54n1$~s#qqd zs}2}7Uf~5jTj$2vTmpo4@c#mj2)Irt5`AZHEtfAy^+22*-E0`z`1=aemo4q zGh^HP&H1{#cT3XiK6}wq^@gO6>BRjqRG)N;fU%(x=fA|NLS~ z_?;e4?Bgp|&#t;nXvD^obRZQfwVw>~Nt)!2KldA=)8HOx8?)I0CJ*Kn9HfIdO1dHk zjGp^?u$r!oTe!c;{IzzYwECgr;piRyS$X13W4*|#0z_79@5e)|Y$9*IBO{dQS9))K zpc0f_Yg(#m6Rx*(tJW^HjL<^Lnl_WW8bx<5{8e@Q~R6)`D1^xErEdbJ$E-s zOjB*{9W9C^3kM@Nxd-|Vv=)tG4p%Xn2_h?Rob5vFW#{_C z@$+v@=FF}}ERkvjlQ?8&PnViJrcU5VGV_dpfB#ZdqEG99rM0u>FRONP!kcKRL@@Y| z9p>K`G6zwMMoW#f#hxhCbDezU-<}j6f_r0CzgVp}`FD)fVP7U+0Tgnwlgp{$e62R&dwm-wS zw&t1tRP1qAh=&~>Co1=9Qh)(to&hy@BrO!1t6?3}E`rclqwLz`#X=YXga$>IA`$#Y^AGvUW692~1kXv-xg+C0gy{b_;6Fi#_Ww^R zjE#CzxU*|RMGYxdF#*4OEZ0~bU4-yu$eArvq0Bk26znlh&Y z7`zk^Z!zW0iD9p@(-0)$-(WLWFbsn1YG>0LQ7920Lj=Px`R91QEs!oX~+9X zSp$V?K?AxNwHe&+psoG6M=)%~u*3Z!M%e!IyJGxGuI5(mD`)7iV_oN3^jcr79e-Op zCsHfpyY08aAe6XcAK|IhNNvWebPtmiT}-$Zw3&QllBzKsKjVvezS(gN6VtGpZKW8p zn|~)x_6sKkyMTfmZvL{uNA>nk@f8tx?~{;e?y}nWCiq&tw38r4KvdfbclQA8-E=bs zFplF*F{%=kLzGzvSF1L~`Ob$wfch{#(kpvE?)BT9+N}I;%OK46e&Z7h10xYz%j6 z8uE@x-zL{eWH+wNUyAys9RM`Dw|XBQ*^bgsskFr(?|&*?zG*yD*#QRXtkd24-L z>+I^tRZccb?K?;#e}4uHl4eCR8__6QnR%+3+SYSa;{*N3bM+D*c%5!0zn@OD3_V^ezR4scHKCu=ZMT$N~AuUE~g zvfNC$5~Q2ULC+lIssDJu*wYp%E|GL`o9dPhrm1J3kfI_vEQyfWkP3(u;P<{2^{;$r z=K(K|%dL+IKuhzNjjQgr_=ex}`(aW}gP`&2?7K;)z$KRkw#!`T(wmVi#s%xNPgUQcBXrcDHJk+9-p81u z=Y`4-4&9OK-O*ol6KXrhOQ-GgGMduy?HM?=(lpk%KX>tY4oS0SO#OR0*F7t4So$L@ zE(9{nYd$GlSkid$X z|MsPiDTwiSB{@zxV|^Nz6lEYO8^(}K6|zSQM5>opr)A!b`P_rH5C(MAfa<%ZTGo|b zy*r@@^8+Qs%k*TavB#vC=(G+zB*V>J!`jF_xK0(@d_1d{;uppW1-E?i$$qTu=M?ii z`@Ztt4;gF#o6q)S-9Sh}X7{=t^osF1B>x$62A@vkwrK8#*^ zm!gE|4I_nSiZ}1l+Wz49IZ_c&1Eoz*mqxet-V)QMW_!Kp_4I>eg1d+{_V<3PJ)o9& z8ip+~kle0p#%0-~eBX(&x{dSt-&FE#p;9wbo0P!T zB*(BXg`7FOx_2jx8}B8(z0y*t<*DB1tQ?4eKnd%sK4vDADnP0yruA9qFH6!$5(Oc)?qU;yU z){C~SC9Y45qCn==^rE={rU|CBG23|YG9E9Z(m&0x2QgQ;Cp?-rY)&(EElfhtUy`+k zFX-?(65mJxP~+-F;R7ws8a>SWSBZupJ;=isGM&|p5AW7yge_rp0NxMW8;{IGW=-YEv2lqw3w&esOb2MbhFrTA{2ePMk7aOa{R0Z?4 zG|_(;VXKI^hMibWZVv9@t>U(#QY2U zbDs`iCXluImDvhWhVAX-;Kw!^aWbUw^P;$3j>fM(X+DCVo+;Qky6kW9bn9yu(u;F^ z`@a2p+u2~Vm(iRd!rEE3^w-#>6E3O8qcp03Sr&=`{)58RAJ+$wv4xDPLt(j@d*7TCp}2ugO{ zSuW8=>&w3~!mzLoB?V;@oYrw8nkDb{xLNDM+U=02)s9`^iuh*vmn^J1w_je+Z<4?f z{~EE3-}SN20nT`sxkvrAGhYWsyUA!@w(zN^3Ow8@S4~PQWBBu|#9*DD-N)6yVawcZ z%lxFbaY77amxT{CnA|MJ15{im~ARu~RkhVaPL8QCkP(vu)h$0e-(lbK{!jRJ4O2Ztw zQ(9WO;hw?wyZ`t7|Gm$>JP-TKUT4SJtJmK9_`Q7bl==+Q83Y1BE&c3?0s=w0j6jg| zpC*MN#axeW!w(W$g{O}Y87(ZcaOH%_L)nK2M0OD6zWzzLPGR#*-4=m3TTT2Yskcrx zLLkJVq@O%gavE5O9<~~iqLtb>y+?ILk3^zMi~Y@cFUL);{@;%-UD`w&G_z^=iRW?3waKQ5*XreQZA9P(*@bfE3th@w> zWilgNJb;Kl|3AP_Gr+ku^X&AJ(X^@f**1e>Mardwxiaz1#*EhCs=4u7AWMyNzLv_2 zBR_57Gr(a(pL>+#l|}DJM8I;zUdt$xTk0lUZh73blVUq=m+BtNYPEAEfgx6vTYMmS$nTLv)tW2u`HHRhm%rZ<}ckX`t_b*3ac_Xmx@TkP1E3j(&d&l7=Zv8XO8b8;AjnY27L z+J3$^^{h2s_A|4Mlzm?3CXjLfvfj+n?A- zfL()cmz`ZJ@U|5oUanIk7WHap{SUAhXs29!L&Vglk+nx7{Hbk*thOYNg$3;hRjGbc zZgAT6HOKPj;eDRJHPOucczMCZ;c}MDBFg7ttlC%mF^47NSs7p23iVU-)!Bz{`?5&L zyvD41PxoZZhpm&@3l26Xnm?4yk4&t2G)a4D={lBGtks+;;C+%6VZ>sm^?P?36{UPY znDEUh38=Pd*gYpdm6{6wQ8xQrzp|Kc3YcfDRGnVC&l5t1&3%$6Js5V`vgjNp5s{Mc=8Y|8}ppW4{99X*umXc}@y6Tle(rJ_c}jeDg^t92ljhXZ0zJ zgIw?VdtXMRq+&Hhfs|TH+=2JJA$^^I!F9D?IWI9-wne_ zyPAp>p<1DZ61U>9W{3UfjaB`#Wm!$iiI4TnoeWl|+M3LzGIA*8eT=E!T-$ESI;YRh zV=K^&Vqfm2sYi2_3%pmhRZWJBaQ$l(l#??KLZVgMRm+FXe-KUF6NafS`y?f-PHOBH z4*?5?;bw(t?3R*wwm~?%C<{{owk5Y$!DBe>Rdud4VVp{BS6rKWF*NU}D?qtoPsxfs zKbw=DmM1(vr8bSRSuj;!V>o~v(*2op8)$o`nDT6OI1?)!Bf0Q2b}U<@U!SeIN_8=( ze2N-rK8oH^sQpSYx80QTC<1yed0oy-BCt%&(a5$}WoFoCh*Nww)nqsC#>}qPl)LY5 zXJLLZGihr|b1Cr;+wu$`VY9sdx#I8dZg~UBM9O@t7L2Hp181{!7>OJ6iW%7$f@KEG1Pmv~ro@H18;5wGINaT&&f?s? z_#*vq2L3_^{546JN1~ev^qQ$*4HIv%(yUSGdl|UIyMhKYqU#^ccEfAzw+#IlWMWOX z+;ebeT`FdRx)R&7hPW6qZV|*+YTKrxe{H_qg7JkDxgR( z#YepChf>V(+>{E{%%yj2<(^9|Ie23mpZrb zLN}ziS-s*fQ|Y|(9|T2bREV*PG1MMl2(p9kuV2AL;6?1TRRlS;~^I{1X-NtKA1*zMyHJ?&0&={#YX7bA_ z0F6_jGSrg(HN*2}{5UQp?7*Ud{&r_~VDW>AFm`>7?$4*fztGvIAf-FOpq>)py{U^1!mM)w*Rn4oXZFYtk!9bZ} zAuC-nvx=#X08_SPVxGjs=lLlx#}u3Kqpfv6Es)YPzX~kRQ|vJJZ$EfA+mfs)ZQ0i1rmjD^#QdohQN{&|~#YsTF+0lHj z2R*cfqIFICVKi?3X+a>cx z(7N25v=2@TK%s&s{A_`+it#7M;Z%Jx80_83(;e97KsN=Bv!DjCBJOeXI<~OE`D8*b z@a?v&2K3Sljt`xR%-KypL}6!F1@Z4cpW4$<$mrmY2h$yz%t3=hKkX`*_oEru^Mm%d z;h&5GhC1zRnzxooc~!ALc}HsvbOfpe^I&v8$wDklNkUh4N7<({XJCLRD4_V9AbQm) z7p_!&QwB!Qmf6$7gB?rpakTe8r8t?fm6i3VZ1@+8sYjgtAnKvwmmn{W}w7ID5DwMF7yh=_V$p(%?w7}iytM8~W1}uNG_Ug` z_pFltIR4oj-)YNZGWbmpdCT?R~=i9H|??;NK%?FFi6fQIipUoAC`!eQb^lMnHrRAsZp%-738kBIE zuH0p3HL)xzncv65|03tcP?}UFuSdmXpL^@D?;)annsv9{P z8R$S-QwUKAyy7XFb@=$fxgjQTrim{m(mtyq%<|bHU+Ygh%ho0KHM<1!>2X?JDuk~J zP-!l}_6TH7K;9D-9P#|KD$cawB3Z-57#_@X)mflZtNbW)5kLEW`R(T?3ZgqkQa2*g zb893E=Ql&yw<(GX^6k3Y7#!<*Se%BQi85Imr#y~_wAicFqc{{D^1q=Fy!Vy-DHm4tGScCRCZ~>vgZ*spxiyHo?Yu= zA=h(D*s| z8RXLMAynLq&(1=yi)Oyuvxx53#`x&o>pk9wkLT0HEeyZ}6y`Q_<5{gJr@XKyFbZG6 z9CIn*UEXxAWlsrnsql;M`8I93Q7L+_Le1G_Tk>loOfUFc1{_nsc*}+*Pk8_qbEio2 z>BTxFAWkpt~o2JF$}xt#jZeWSxRrtFm~NS|1~42H?x}-U*v(^bo@1mkl{&O7(U@Oe@e&thi<|k zHLOHSx=@scCR1S#Z^KVsy-xRLZH%xmc25&1_3GuKIe(}S;M}9(MxnNx5jK0P_|=V+ z=|~Yd$CrR%_1*5kg`}dMl%XXiiibk2*PZ6It4dQC^KHyE8{cVHshr_6*NXDk%RiSp zBS(O}Hu;^6jC>!h>B9BN87oGZI#uq|AhQ>f%>9-P&3(~b)8|pHnag7J6{GbtERL_xu3wr$XZ{x28NB{?YdVxxO%5nPIyK@}{ zjF)4ZK-=%;0GnZmsh$h~0FT+)-XaibCPrnPpU^0nZ7SbBHWV zPY&h+^6_!yt6AvPdpO1g*5CeN9kKp%`|KSlBQ`4KhTrW&6)LTC}-<_0Pvzf9UIixeJR{O!x{9b38rOHSe zA5Z+KcQ=qakiPulM@9{}&iUR=aVu$h8t-c8=ckaHR#|fSjI06RBd<_u(e*YbQ}XHj zvbaUWPv)dQ1<=-^SNFz_NfbeiNQ+!@ODQp4i#QL@F7r6~leN65_&MY^q@s^XW`(&- zc44>;1O3g$}b28W^XlR<0f@WX7snHuMLH3T@LeUy^@b=Bf z#+)VYs7!ua=qNkRhJQ<&3eiVk%4U@BTW_`9z3N}l&~>?|ApDo9A<(H3XK%@V6gU8B zSf(sn&0fgoYXg;@-lA5P_)VP=^jWeL!J=XYjN4}%aUIQ7Z0E=2kJo!4aGYh)!@Yio zf%$50;lWYVmS8d|?#tWjDhIg*%V(HUe}LF}uqLxZ)rjF;Kh?xt9wUInFga0Nd07A! zNR^Zm7B%2%r|>{LCX2$}`5U)eQK1Qz)Ur;yBRd|$js_EvY~3#}O1hW)h%_6YACff# z-T<<@Z%ZLRj*U9?b`%|w%nQoPfC7C2^ZP8U9dQAty7~O_)t$%Uio5D^Fh8C&4ai^C z(mk0j@vZpGC7e12QlsUp2gzlIlLlVKq767r4K3^DKCGV6T_k(EL9XQLx23vrSt-i( zo+^n5okAZK;vMJ1fId_SNzy0pt{>n&w1g3ShhKb%@ERCEG2!3^meOnJD*Yg;BrMlB zvqX(sGi-quzx7eUYU>3djwPO`v0v#)#ZDt&@ME3?`VLqjEUf^MEXIG71>}KiCxaaSTuL_M2LdQXg82Gzc4^k4VNFUO zsP3Z*wPdG2AQqb(kzy~8IBLPK>`2?~hF6bHUrRXaM*xGXzjeLNLQkKC_sTy00KZNn z*Hno)!5ip7Gz@ALpK=-i{zW;TZon}jz? z<}PdD8k4`C?S5O6*~lW=r#`A{@A51>!k#YnylO+WPKvo@k`cZtYt;g7-U%Cv_ zw$Y7Rk4FeHl&6G6LSzzSMTCXv!!>p`^YU)-UQ3Vem15d9U#a}8aaj9!;EsX#@97je zRn}4ajTPT`C|?Zd)peF;spLh5`~TQk?c*H!K}b5(s_h zxSkN_P5Ktfi-bP(G_#99$QoFla;DMKs=gU04$`%;mLI-`?h%LUCOe)gE=yxiuk_Q> z9fehTtp7+X{$9?IL|*N{@H7Jl1-@+74?~9Vd}^8u@Kvsw>?<|$&~H!WHK-qFd3kRp zQ_ft*V(GDHOtfyOr~Q0*J=k?4G+Byr8WpnNkA3!<(zcJHxqgE(V(-+Bg>!3~}2EF_5|{T9;>KT)Sa_ z6Dm1+4Qi^5yx0(>m)oD|;gM$&FMegHJAG|u?MQqN-P-nN)+oqC_mvTvT%#IX7b!BP z>A6SREVNE@@VfaNu5om?*_TJ@w0%TGJry(A>0Hb{7i+F}2~u&RFECwd&UtvIgXWfH zy4!>AH>rJZb=P)ONa0RcaTj)JK48%mH>Drmk0VXP52#Aql{vpY!8~lKlVZ=Lveyth zwKUi88aQyVzjjNo!ure0EGY6RGQtg$$=hwPRy-8kW4wEF-eiimYE|n~x5{go`6*xM z^KKtuLuXn2d$fS$t@H?u62==QW2)Fuc9Zq5qFC3|0k(qI7hC&7gPPEF z?ro-<#!2ko_2c+(>g`jP#{1kxyRTb}fZ{`9D@%2mPOlv%gtIY`swIl!J@v64o{p3( zrxDT3W;CV1WrGpx3S%!s!;ZKj29)k~U9(zuDDLn#)yv-ug6^M{FNc&8bjOer9=D%! z2DnczVctZ)T{<@kye}{b zF(OkZa~bQa)_c{EZZ}KsX6BVa=?ky(@VuKX1Bc#XW=Nb+?7-@PcI=wbQJrh7=X$mX zJ4ejO(PW{>zKB1YA<#yOq*Du$*>XXH&bSrsc|X`|TdiIgc-|7nKW%h2%ZK{LJ3@+| z_T*jTLXDFi#z@6&rfA1oH?QM3wF1NyRb+5?+38;~DRAJV>veRucCz+gS4XfevMN~^ z)5nN$AKvyjTuzD=|I+trJ;px9{g^H!xL3xHG)2d_8`|(P3$vFTOA^L0crJ7u&n9&? zW2>M6*ZB+XLUZ@#3{_rwesk84YY_~SsYr77exb&ztiqmfq|w-gYFmgb#-}0ySruO? zfzHWXOqd&6(C5==Fk$9nY2~>{MdpekSDA$aiHh6xhA$5GPi7x9`vx`W9vwym6fgDN zW?niosLjHNdxI~;d^W%@4fMR0vAvij@2gUBrcaUdcFL*#{gT!*DkQ2KVXtGMzEgPt z*=jGx&xdB!re49xpUNYz<4!qKR_E1YTSpZb&acueEX!a=vDBNsZk!wQsg0?hjsIdM zDN>iJhf7b@raIhyPnE=#_o=QRU6CF3^S}T>ZB%p1gOkq{=`L89zx-hOAqK6wFj?5s zYG2>QHl8UlvR*Fum}saXAS!*}Wg@gKrTARX%ALzxpYv;Y+D7rnM$kiD>~{i4s+y># zdzL2JtfNKZ5A(nq8L2Yl#Fe(9ysG6hVKg~em$rwsW1)9$x!MvtSs)E_vQ6a;Rwos! zPIZ|A9=cVJR|AH?Ck~&?a~-PYgBI0fl`4yFjDrVBC)Pa;+b*Z3{CRDMqY%6M$lL^= zBeQnQa9oqB-woLs{Wc@G<*6-tXg)LCGm+`&!9(-}_Boh0lYIFs+m$bnt{QW(!))(h zOKn6x>imoO%M7YluvM-W*5!ji-{dJTNDp}Td6PiEFWF8U%qVDj_PXl6+i};eFCOdb zZ?EWwhWn`WfD^Fy?c#%X(qiTp539R2DS=s2TZh+sfSC5)I2r77Es3pQubZH~HZq^I zW!0S7{atdic7ip^`4o->{r=pe1`W!;e)$|6l^jD(Bgq!^h-YR3q_{UOaA<>gAnVr! zk`ul2ac*#&BfxFpR3Qs9hXzmOvk;>i_$}@YoDKSvmF&T$&t%)3p$NPE*L zg!)oA*;~DzHy$H6@A&&&{lIW7?(6C6aUTS(p78#l`GV!k$y4|LJj{t3u!?B5Dorx! z0S9_(1R_~81eN;rO zj~o4u9tcFA5YG8Mq&JUL41-vQr1uh@w@)5NF+VOp=`Ex2#l$uvB}kS@PMKb{@R4rG+KA6LWbR7gW~5_9 zx^=iTBLeqhWDxcJ-mo{52RCo99>tEIK?Lo+UJ!^-AtA=2S&Re=Anx#<&J}+OT+uI{ zo(fSp#rx6`HLp4ks9eeN1yA zKu>TKcfy;^<+R{vn>#EA>-4))Q|aJWbt&W`5sjN2Bs_C!rlHMzuE-!MpDvAl7qK{R z>RTREfD{B+1pRA^N%#-$T(DViHG7)5T0v2(+0_gWney1YqTcBdwrVhc;5w00fEAE} zs!>L2*ZrI~!(nJ6Ug7*OaU+}2jdsr%EU|ume($I)*&DAJD@$Ca&D7YGkWYKAe0BJ6 zh@20zj!oxJ6wg*iwBMUhZIcqnnGz~5w?MPI=rifKOcP3jNU|^{F`n%jpVE@~Et^4P zUtM;3Ua6*D!&~4e-uPfgvm9bK2b|E?h zP9NxtxSGOTA9*h30a51U1_t2Tu|}INe{!g0wEH z?gp-394j`4@z(>&FEm%|FO7&DE>ajB17Q8BhLr|^koy3+efjUILe!>z^ogj>I1)JZ z|EpYmRL7MpMk4&*l&cEFTTY*}5c&@-oMvzR)MWk*2oSxE6uo$?n6#-2x2`p3I-8P` zA$;`!U09I{peKp90``CJQo+dtajs(0#M6&LrX<&d%g~C*>hQ=~vlGc?so@cKu*CDls3OF-Y%|JDa=hnYXfiX!Ja9Cv!#deqSt=XOlaExS6A1YYH47i>z zmXJd`l-L}ap5Q=^q*J`J!8sKQB{2Kew@_sQ@CsnN0(OA$pYqu6dPs*{&?k29qjIoe zuu&CyZXx_o;E_y8zOlNiMhbtlA)xL2+aL^o9w!fPhQkt`dq}aE*QaD{#~DHw@WiXc zqPGuqgG=6ZQL5Cdp9*FpY_o$^u*cTxJxm#gCNRbj_;UpJ{x|XyjmJMcf~Ws$_!l*&bB zjCyXX618t~hIPOF1PNmAXIaQ*8Pc{@O!uw&8Sc&eqDkj)&|($++5We}d6|%B85-${ z0m^(jd0k&ic&xEk#N8rqF1`(|dvtlX_bi&7is`UFFlqp`kfPoaaAS$jU_nABIK5|> z!(2o&kDIJzwF{&#KMR3Q9Evm_^q(}IrdIC}pg$-bZeGtLt9{=2yIianR55(^G=*7} z-15NC`H_OzT*cQLWgGI15W*JqcO5@0mS6Nd#dhcERAY_vHGl3EW1d_cSiIAyZ23Aq zBn%|cnC6UXhJDxu=!Xuo116=Yqj*P&cyAFXt6pw~Y6ZbGs}vqfpU1BqziQMzR%A4w$9dIJFjVP0{_O5{8?VF z4-^JpX=N{ZA;;;>{tqv)b3e0d>F6Fc{NO7eX%#^7_7 zx;0>UH*n$SmCJVBpo@Qhou`!&nmp351B5LZq#L-rZ$pn$ckK2-k z-)wFU+-5d?FGWjgN(E+DF-R)hAFKjD&8@aMp+my(GJPnq9=_IB-AF*-7LKF<4V1$o z<^}P~Y@{uV7C>Et;w6a|YFC)JHL~OHngjWIN@5>>Gko{9MfIZy^)=5GOR^0UJG#>D z3OEF-;H7TMz8yko+}AV&%=(Q}n`}QpHzGtUAlUF@ne5h{)8R-mJdQCI(Dj%)6`Nu7 zL}e37??VkqmE=%5DLHmvB}*6`N;~}*1c|Qg2lTu~H-kFD?l=fhRl&DR1iP(GPWHQQEsMLhuH0ZPgr94+ zj#h4)J&JOpMK5s0N2{9uQr?+7M!kSy41?SVzsTSI5NLB1x%RV>`CmaxT<>Uf{!Z2c$JoiuCD^%aS~ zu0_=laC}v}aA;ZSzPAbC1g(dPR=O1Bvj58`!A9;l3VaWn!T)enL_-XFtt`yrTuex3 z?!>9BJ2|~QX(?A!xPk`{JF)2qh#A8XI=l60cC#Y9BJ7Gumb*k8{fi!tScf&l)iGNa;kyc-!Y0XPg6POFqWNqg{&8#fq14If1fbPiu_U-~>W09Ade0IPc7m zjggf3b~akB%fBs(o+)7DWVWx4YCEV9@$|jQ^btz<63C98`_#;T7ii#tX+;Hx zNMbmO&8%RpVg;PKL*yn>AD|*9zK}N?_}Y<|=R2awkjAgw1%|f@-{jHeIJi`DAS`+Q z?XhF62G90`3Ud(0yd#Opk;x2NW1*o5q2*bloEf~>M%nv#*z>dAoeKg0J0>InIB$sL zmAY1vb?&mC|5diP`@$Ok1rFK!H-02gfiz&kPBWp21C0h==?1ia&&P9ZE zrP!dtIftdaNq0Fp$N0Lg{AZ{;)S9uR;^k1(37=IuADhsp0=R^jcd(?v5e`A90CQ5m z_V(O$vzzcaIGkPm0Hizo`vy-{uI(7yb|G-NMa~OO!tV{8(jbA@o!+_pu{SyKEw(B zKJ);Q!?*3-VJ{u0oVB%axyx2_sb-~%^@Sf()+@9%aiIBRiVANn^3}4oCTB~LOc{E3 zMV=b&uLqQ7V<3DEGfs%7N8SbNPzj$yEJAl`$PhLzu+QAqA;8x|h-sq(8u*xk!^sOz<_V_wKqnysM46=Ddgv_1*~7ya~E_yX;E7rYIX4*Tb>4nG37<5_$8?bmq_ z_gl+64tA#@T>QPDD`N35aS6O=c7AN2Oh<4G-8GxhkHhh?;yse@@u=%``uT_RBjB!o zK*vdC73uOO_uEc>3;}Nb;g@Q&e*4ht)5rOU<{I2i};AVZ?=2$e(ckkAvM1hs5z`U|(RSYIF~1R7P_VN8%;8cZ{M?8nmu1^kU}= zbfHv868FV=)}b{IqT)#?X%Ts{)8H{*az$>x?@fn*CNoY+t7A2=fKgeQ%K?kGWLNt- z`uET=3v+oO(0uTIc>@|0UE%V5#PXQwg*h;0gkF+*ZN)B5!z}#Nf@SK4*tEh;4x5S0 z>WA8kXS(gsK>E-86x;NH*72csB&Tz2b=MG#Ra$YglNq0KasNKDuO*&1m78+aW^4qvZ{B zNmGI%rJv<;#wQ2m1dQZB-SGj>{TVokb_qh)iQ9dQe@^pR=DL`>%Vyt&Wf9prnsi?6 zk_4X=-TN2ud}{X&ln}M*9xI1UV`FijUWVJ;PJ5w?_(vL6a zE`z21E?=$KJA;#wKW`17IAb13gQ-Y5p{KLjHk!BU&)l7#8I@a^-&+~OG&9E)=IT~> zPVJfkx?03kBuf-0{hZRdAml{)8H#TQzk$j|&R@4I_fF^%`o%3(6)&E=`B->B6nd(i zyJFA}KJVOkwwJGveWM^4N*OHn2CpJA#AwCRvW}x`Jo5rIqZm&$p$7ENwzLG?MWwSjLdx#`N*O>I z0F4Ej1B9X!g}j8Jo6+n<3Wb{h(!!zpNo&dLFLx{3_UueKtVYd(3EJF*-(PZi*>RW! zerdi`&ph{}6eB<#tr(5J%BwEgf#3>Hw-d3J-7|CAUqz{CI%4;S-afNihn^=<5YuJJ z9?-7!A?1^7vfx+^)MKpV#y?yzc1bG9HILdB3~bOf{?ZGsb=zsfp8>s7>0F5sR! zs3o?fybD$VYb9O-4Jp<+~NE+em*Lp-)>6ySdMd`3mD;FukoXy9`ltLt>3kX z$~bCbNYir2QI=N7%LGe)u9&uV_ptX*OI#|_mFlZypxMBIxc7lL2|_IfHu`HBq1WTh zN*hr~<{iGrZL}!|t&Lf}%xK5+TkJT$*h!sS55qZaXE~AdT3>P4Iq*5+`nmdB31A?F zx`Q~9jai){*&*)^tae15N-D%W)Cx?o&#&u}?!Fd!T`J^d?ylB=$wLgkd7BMXB-0ur zme#$IkkFp?SX3~Zu{7l%X;6JIFnzMa`P+DbNYm~;N#l8&rykjdO_yve^Pu%KJQyM_ zy+}g){@MHTm%U>KbP|in9TS4VFBDh$t@1FU5wW@oHFpUJ!wRvt)0 zLUfR2_Bd$~*~e#X%>)wu6d}Kz_{r)ipX>JOdV_zniTfjJTD})u;cZA+hGpYQ+{~lG zQa2gzcJ-msPvKNY8|PBr-6%n}P?ypmCm2HSS2yG%*(Ua$eo;U9{tC-)+}&WayNQlE$6a?+Cj2TQA+J zr0aaQWXAw1EiKpgch&|5)OlE-t%|8NA7QaPWF;X z8vt|2_*1_0A)oz!Ke_P45$_+3Pe200!i{ny zL2`zv&AC6ouF%{;0x}w(B3ro3fAL#<=Lwr@=xNO@ICkHj7<61(EosQau@3M4s-D+9 zY*NkCI_MB>fsBxB_0Mt@t0afp#VFk`Ih1r>_}B&EMKvvOuh`ZUtG=L;j{@cPe`~zh zxnN@j9LnFY#M)QJX^WmLtLVJY(%ECJfNRgbaVkC_$ty%98qH-`AaXJgLTD-BitT46 zmaBYbe!M-kwKQC6Ki`vY(c4mgBo;Kfa1v4U0BN{1bTfjujf{{fzzp_LMLi}eE~OE` zIxNoq_XTAE23MGMyxpzWkF@pGI!kmZ+-GH$?+MVa{9Ip+4JvHDdc6cy)xDk55z{5MFot{5@y3^xEaAG_j_YxZdJO%p(3durJq z*_kh^jMHA~$`{f36J z^VbNawi0UL5IUHEUyZ~MuQYAnuF5!W-wle_fO^)*HE8+BjU8zyb9yO=2D!%jEkDS8 z2%>Lw*!`2u=vAl>Tc`f~+>qF5RQcIgvFuK%#>!ZltK~Q=t>+z|E&eC>gk(N`*}CrO z7|iND$yxq`hNCK;xRPVC5A94U8UyYQ6w=ol>LVw2MX&k)3h{-+xwI2ggf*V>L@wpD zgG!ei!lPqqe$i9?NKUlN|HdcdW65xt_SIOpfXkP<$QJd`=87DRvJYr^?(z%EiE>S| zON2Rm?3NV0TUNN{Z!t7lh`zGKH#=xq1M-(%H9j=C z7fqVj@%2tP`0*lXf1y*eqUK&!b);7C`ULhK&EYQ$NZqoKm^+d+nB;!F-6|(bx%C&iiNI9_ChEmJE)bgeMe%# zX?&)gBQ)XD&8S;z4q!)SCB;MARlZ#9ktB{-iTlEb+aae|-L~7MET(I5K$`75n0_Nl@U4#HZO%34OJL_+MpbHg=KLvZ( zE$~PCTTNm3{@O2zs#ujCLexyL3ly69E8RZP%o*yExa}D~d8zXEuH;5jy9V5%3$>p< zNs@a`%P!GO61s8ZINybGxrkm;PRh^Z=lPCtj=dPO9joyny==UoC5&C5S}X(e=dmXA z6-=#g+thSn__Gk+SYCe7k>rk;Ud{aF+!=LcVAe8gHl&`+<~98Gfo3ITkq)pz$1rqK zbf%?W$dM#MPOpYTnkH|f)GMMJwUaLAR`GX)$`1ZgLr3fHwm@T=_}*yB&|^B*kZ|Jz z-e0@DdD}ITjwDG8wH+ZQ8++c(9D2_)*90nr;<^RsJWSIVyHLu@{T4^`f1;ChMab0D zfid3#>_bRNY%EQZ^DgeSV<(LG?i~@>bVvU*n7>xRD2)?445!cB|Re@z% zcl}!*Pz8otCZlyc+nP)MLNv61+QH%U-sKJdPNe!_Tt8>jwwLslUCG;rmB7Jz^Qjr@ z3p7hxIpgrP=fXehLGbNOR|O#VwrnRa#mf0n-soIRflLzaqPBujQ=ZeRLRLNpv%Fn#h~3V{Hg%H3_Z>x z;5=pbTuvwIyB{loHz@Wx)g^M|2Tc0Ds;HV*+1cg}?nHL%=J5@9iGHfEx&q5sSC*cOArnNbJAu zjxmSZy(C`p?Fuv`4)(vB{nHk{_xb=9YM4d;DqaHcuj4NN^n;}d=Gg;c0e>2BT)@a2 z&-C@bFoMy7$08QTnE$Id?%0-r-J#0(y}iBt=g*&Czw|skbs=~U4@+?>+U7UKsjoJd z{C#iCfHqd-UaqgK>azcf0RJ(}f6f075->W)YyG=mDdH0TFWA5QkF`I5{-4YKyLKuf z;i$GM!JnQGfxv{t>eC6VEqg8#jw=tLNDKyEvmpq=T!G6TB`B)ptU}VK&SXXau&{@x zxeEX=so+u(W&(Us){*2J2=^{#dCMYMfjW0Ius1B`sH??iMq9$3Vt2AXaK$Y z_G>R?Y)5_NNAB8Ktf|XcZOXD^>-u@4PfkCB#U}$9Row{`McjSpYKhy zw-sY>6)g-Cxs$_}J{`|R=px8Y?gU>^Hms=;{CW3vvm%~aK+!#VqWN-bPYr`m)Jf)# zQeiaotuNhdg1H-K=v&ia{LJgn92V0HqGI}=Jra^JDhVh`bNr!j@4FA2Ej?N~oy;ms zx8$OvQ=&euO31F>65YuY`HOrCMgf|fA+MX*R`nFJ>ui zymPy<2%Oe6^IyEja`x|ZJJgF8;rLVNQW}Q2qQ$J{LWF-^a|;x@L>jYiws_XyFR2bU z%IMdWO`BC8!n7v9M3*A6SP>SkVv9_JF}t>8@xBQ}*0(RWFp zda;)ZfsVwEAuY%eOEq|lY0j;7M}$q%_%&&G({K?F2Zuyc<|UE|N0^(ttXocdZZ229 SXv5o&2x-X|Pck0qdH*jZVNrkp literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-primary-domain.png b/windows/keep-secure/images/intune-primary-domain.png new file mode 100644 index 0000000000000000000000000000000000000000..72105fab7c993fe6d2e4342e198c055cac900e3f GIT binary patch literal 2718 zcmXw5XH=8f77Y=R8gP(@)X+f`q(j7jKtc^-85|LVLz5CD^b!n3lpcK2>z7ahqLfes zX@UhEU?8DHx>8gU3@8wa5ah)-@2z|8+57Hw?^)}dAA8-@OBZcK1f>N*AdrZiE#e9Y z1O~X=p8p6ps}@u?a)H;!!qEZ*YJ4cfaX$(I@mO3!{f^}7AP^FS3U@%a_i{p$3orx<0fYQif`H+&goK2oq$C1? zP*_-4Qc^+$hy(&9F~2&c_(=v(`;b(hT|vnsHx*VlQwRhSkyKt@URhCDT~%FH+eWH= zUeVA|Md_?=>}qXo?e6aG>FFU*=+9pCb@dHW=yVGGkWL}cDHJaB_Vy0E8~D5b@8Q8= z+7NA&Haa#o_MW>Y=O*cs)6>(lv$GSk3-rUoLppuw;}RF<=jWMUm|vH_?riRCZ*TAJ z?(XmJb2tawE0ObceB2QV1lhWTf5Yq_cBB-}9rP*byZ z60fLEO&u9~^M>K)!8Xv<#T9imvRMcI&Yd2s{!{W^;RRadNr5Y6Rnue-7*RG#;qg=3 zrQ4AQYc?w@xAh{gMpRvG6B+knBrmGcLVJ52O`ld=>WR>I&$7%P4Q+E1hJIa3Kb_c- z$tn(UH?>||Q=dh!j~vFro+D$ZIuUFITnu05K`?h0+u!37G$h5D?S zj6lSnS0{ITIJ-RDT@1F`Npp@~DY5CY91>B++^mK+SD)~Z2K~&5@`ag)A7zbuq%%@S zN{cLhZ2xY|P%erY0*woz>AGIhxLtW|%S0lds{Izuh_>9mrkgXNqgX^f4+(nB;vEPg zOR7}fhR5s}L3qjHR5w|Pz*4SRvezvIJ2QvN{yiirApA@-^@&L`m8kU_+)g#& zvTs_dXNr{beOuiS;9mtshzYl<%%FHsjZ@>pJUO-0VdyNcL~z-nj*;`N zT=ZP9OvC4CotSygP#;LHf0B(g&Oyad-F>CFz53sYtBHGweTkl-bQPc{UHC`v3 zsU;bg2%s-GLS>e1PS>1hGTRauz3dA}s5+ld%2tvnGKIseS1oTTH>moo)VE5NRqq`? z74m@IpI2(S0AUA+|4CMNnV>JG2%um59lxrn<&B>+gkCla!F4Q&Q4MiMNH@3*`;$&9 zhAoW5%D}}RR~n4!FM&J5(71>jDK>0`2-Ai=KAknDA98G%4ErlG&qh?c!pHc=35Q1L zn7(cXdcgAivSBoWs@ViDHiW_T$EQNV2mpSCEW_rFJcwm`1r)RZa>zr*yP;Cjo`@Rh zj{nswGaB=WZyY8TzMr43d?`FQvX9YJ znd@4#p8{|$srsw#`lGOKzWmHNW8jI?%&Be9Uij=8T<>S)nb8=QJygo9NfL**mp*;? z-2ThQTfBQs4laLz;im;q?`L6gV0ENsg->SD1V*&YaOcG1u6BK7-ZwkNGut%)S*Td- zcA0khx;{;RHGN&{v7SXUCaUeQGxfhhhw^yj>9F= z0(}i^D;)2CH+~ZW``Bc-_*@en{wGNtjyvOuB;{4jR66o^swfUJ?5N#_-%ebFZu`0u ziAH&#`ulTCL?+cBGBE%Qp_gV@5YOuwckOZtGeKs&)w52?=3J#O}o5U9dk6 zU8ahGwsTs^Bca&*#hvTc)Co%`@&EfJ*DingC9bG|Yo#czmmVtPjMly!YOy)RHao*+ zKYl_TlKWNJEbPxi#U3L5$5?Yu9EZa>JDA)L!HqJN%6*zYtGG>}?dCF#h1EU=?60!& zh4R#QGKgxXj34hj{(@|LZ_hvY3B~sc=}@V$s{S8(oXlg*4kz?H^z59>G-NwXp`(#= zW-AcV^29APFV5}mUY++FuOh%iZti}Xlv@lbvWgL&;f!a|c9-^jIC^x`si%+j0cEJhFhftt3W3_`*#)Wq$(IYKk>LTed_pO(8v3o=1U9)BchjL1e*>Qe0%RA8b z?8nWJE&HC+{vY6Tax+Fnd%9+c?Qon3#`~&k?D9~AGwxTl;y&^__gV_k6n-Gr$uV)z z)X(}{_s+n@r)R%sL=~I>lzzq)seKWHW6G^~!SI=><=5S`vAM#jKDW5%Gv>Lk<>1~e zsTW8-gEtq&m=Pu2r4kRV*Cu*qD;~|M$xT6b(?aVRr^=Arw@&|S67^4$R{u1)CZ3|r zt349>@IshkP%6;*&wS341gi%)8N$3cGr84xrE2O)4VpN~4+l2L6FrdZo!ij+WW@dc Ofb5VL5%rdT-un*{wnCKv literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-vpn-authentication.png b/windows/keep-secure/images/intune-vpn-authentication.png new file mode 100644 index 0000000000000000000000000000000000000000..49c41b313d099d5d999c6f4a3a2ca47fa57ea31c GIT binary patch literal 2762 zcmaKudpwhGAIB%1evC@ONGZjX$Q*Jgau}&d+Ylqi*^fCcXXDqosYcjuVoo_%+7^Z% zNgk=(PKBjHIW)x9!pw0zcRkPV`Qv$Bujl=`?(4q4*Y&xs*Y*0muIqc<$xe=TGE&M? z5C}xZ{*(<00+GOh-NVrd6XrxXkE>g`v=ctZJuzr#wI4Rxf zEC%_suCeObKiF(`bL$(Rcc7!A^IiYYhfjlF#wLcRgd@Cpo?yn%(9qb}*woC-!NKvO zx3?cIz~3Ji6hr_Ci?|dOn-Cov7neY~b?a71S$PHH>E}`I=h5-cW8nvu~-Z)83I8+2)`75r=fAs`80 zp}4rX_(oq3h$G_@?gWC6ZU-h(2uKJ4RQ!~HPzXt>1PX;fVFmwjH{^0!=;f3!kgFL{ z$=T7-(Fuu3H*em&MSlbiqkw8q_!AZ-{|SY~NlQ!1C}PoQw5+VGoJTeJk8ARu)D<)9 zOIQu1rKM$$D#{)`VKSL43V{WV0pW01ob{@zDt1$A4ai>&jjioHABOt+`Zz4gug>-N zgTtU3U&h9VzfKH)ogCp#ex01=a=GK<;}cW-DZW4?5-l$MWO-!;v|?>-ZJonfU+1i^ zubuhKgtKufwtDUnkC#YsNeUnkXih3JVcFV>joO30< zu!T+mTdE(c_>XJZDGaJ{F{!&42ca2ni+FZqZ6RFqfv9{-Rvggb%&M?5>9wcrqbB4I z%J>-2jDZ~saIB{jBiBi5{4q*)b|9H5UdzZ-}`NI{@0VR&HroT-`3u|g7{@EK9#tmf~cl~_(PeZEj~MX zo_R?NrIV<-uSjY6d(oV8ICndTAHH*>BN*K!%b&hFTdidmXSH!j_q3aLnu6s^lrGJO zCFPfltkQ0KW8zEZ8SOZtG_7y!OE$lDUsw6?inb{F?6jf@z2W96ljA`1PZcS=^K>#y zFFlh(gkg}A@W;AUWF2`|b;fx(*e#Fy5JMZ>QR? zcvvP>IhEeu2iR*HlYrIloW!W?V)>-fM-e3+1|QE|Z9AU9>rQHc57=Zyh|qx1 z$}ZEF6)%77SkT$O_pK{?n~(Z{61C}qc_L4USQD=|MZk5(-tX;9p;#{&EK&memS**S zsC3ds+UdE7(OFv?sFSUzp}2CdYf?|!!+GrfL+aQzf;{$vd+&iUd{f(bjmV;|?9g~X zQ2p_F{sqw`s&rnLPFxTZT2x@%r}rSYyglV!s;%u;Wm}EXlGFC=A9-iTkfrQNc&~R_ zT700kWDeTGFO2&>yx3>W!Cwq`byGdpi_Q)m$CY zt(^UBgXX;WIFKdpSfSM~B_*{rt0)-foq`zYi)9t;fYZ+<%xyWWsE2ulsR#02OoYfF+l2Ct2v=yqO%Vxm$=htL6OoeFa}(n3p& z1z73kt7MD4Rno-X=&q#uCaN=EjKREAAbg{n4czIXUp<&@Czfccy8!dp2nby8dA<#`iA%7c$ukHS=~{EZJc_M~1_pR&pU`zJRz~cm(!_uzkVwj0Ou(a@(R?J5()H4!d&^ zb+8Bddx>fA#czfZTAir=`pFZ8uck@+@ySUE9gy z(2HUQ({|`t55Y+1(qU?U%*(mRiT2M(cD1`eEj46Y<`o^X@|0E1!$w-apA^-L@jQp{ zC2o3<(-1ATl~K&hwSZ|c4&p|9nTuI3-Yy`SZx7#ouc%kNJALN_7D#3^!0)_xFE}l1 zAWHA5zs{gq10ly;830P>t1s$KCsKwf%nq4BwmQ#WN>i)rKCduz&>4kl&O4>$$9ydh zZ^Gn$i1uqp?C;7oJLlB0d{u{(YZ{P3^jr=nrNO zf^J{c!cCLqGNom9Bz1H*=C4Q&iWI3xTT9(c5d@y z4EQGqZmC+xP&gRZaXQd6?OOY>q3lYE5-JP9-Fe{hM9lyM=jmFz{a|s*+qu(B=jafj zdVI5~?;_RnM)qzsGrKPEnEiOs12{;_LS*83uz6rI7?hfxlh2G9L0gUz-Am0Te zq&#jI(61WEvK9R3<;DsdFYdnUu?g8gJFNO;AY#bl8~aq%UdqwE^;491d(ataSo&`4 zN=PBUj92M(K-EJ;*WgOx>HH=yI$ID{bb^&~ZmB`Cn5S}C@%7DdYR9xAmA;( m4$QBM{l9OdS}5*=kZ<9E4G2H~PNL-JZ<{^R(S~8=ef6IS2XpiQ literal 0 HcmV?d00001 diff --git a/windows/keep-secure/images/intune-vpn-createpolicy.png b/windows/keep-secure/images/intune-vpn-createpolicy.png new file mode 100644 index 0000000000000000000000000000000000000000..51abff377152f44878adf7667c733d4140552430 GIT binary patch literal 37123 zcma%i1z42L_b4i*h$zyHluAl>cS?76ceAvBq=0k@NVjw?-QCMlA`QDBwF@k9m+$-i zpXbK^-scYN?3pw3&YXDXoS8E_Uq36$V80-Ffr5g9Ehj6fhJx}8`FTo*`4oxyjAxXC z{CeW9CL@kgJxO+eETCG8DT$$=)FoiunxY}g&s}77-BD0p^*w%`3^|utAdy5KQaT>$ z&Q>1Yrf!xfE~d6l9xP6l9#otxY%F{Z9D&LxDBnEfB*ip*z>plMGoBP#@HNNnp^OL- zE*JHix2V`(ZJ!jH7*|)hST4AIPa{YKR|Qj2|K(28vXS=&Vz55EQN?=#U%Ja9Fp;XBKs7TsC z`hUSuem5|WhdmLJW|UFf2As!l=(ETCUwB&h5&pZAc3-cbm8mseMvT=)I9UDa=geb8 zFvgTj#7wip=_T+^q9i_Ij5051ww`v8JSHFT_#94d6W>A*3`)7W0XPryc5-5u*y>9O z6A}m%sckPTCx9|~B|Wd7Wpf`&kJ zc>CPc#OfUv5Ujlq7e^p@ryzhL9EL9OBT^a1NVH{0Sb`qFNj770uNA(@*{Q2mITz9E}(TjCr?OCeBoc576UY8?B_DjCXIX+-8=Ssv!ru==8q1 zGKinLv9F4Fvs*+*wtcHq4+>TXCe!`8zUytLNJc z$EZ0D0%V$rGYVd^=;LstG%as)}A@`T7@M1eurs;Si>+~FZ*F*;|jlA&%jw) zC3W8>-#9X)0HWm)=-v)(O{Mg~fSH@l6USPP0Qkv9GmhFyllPP(=J9*!R|<&Gk15fq z&vl;<``FHDL`w~DJo|aCUdH*GL@pNHt;on$D+9=4=`sH?ZMGix{Xkf0`@@-D^WXJJ zgib(%3YXx-)&#r;skh*QSs-IYYIcp!$Kd;Dxj*cxv*aU#Ih!j5J03f8J>&z!Ti>C{ z%u34>c9D$Cdu8VzXNyTiS$W)+8&II6lPP}qM`z(seYfJz4ZOl1!JXo}cgK@l6!m1O z7&G>Hd9!lRK-hC6Qv+pyXG&Z{48pjg9cDMVjYra}GwpQ1(*fegG4d;+b0s-X8&r(F z8WhK7z6U$x;A;cM-ru}g5}EWBy$ShC5~_}~CUO*c&&^XR&R+t1&K{cdM~rPs~vneE2yh-pJbju108c+^`?hVHY{f zduFJEhbR{u_j#M zci={|=Z(;)Nm^>qy)o0H|G7-PS>MykGO!!VkTd%e$IuYM+=*sq?Brj$y4GmB#F>K4 zIB5YzNkCtKLgX*>$vT1wE4AxLy#_4AOLe(>OOd4JQ37BsYjOyq z0U~?lLwiD}{aJ)y&BWh(2hR|2N#*VNSc08fK^sf7B+|Hu+S+U+`C3~k!`$2kw}HBI z7Qpn&N*fV=_vqO`vt17GoBrWVU^aI27xBa2Ncui|fS15mJB(9bCYQ_iF!Ty+jCGT& zld+Lic+`&d6;sT){?%o$iks2b*KMYQt!Rn&yAd$H1smhmo-96OEBVC9wl>4dg^h;s zhbCqMmOF(#=ZcEM=t&90C?th*=7F(Lmvvthc`B$tX%0kEIp;`P)1C-AL?!NxqxaW85Xpy=>AmDvn57WYO zNwjiFKSela{)K444F6zgg?>I-x8EVHHXAC)VFfuKjb`v8?*Aj376xM=#rJ5{{^#rk zq$z7}Z||9y8!Yl280R^Rb5!e?97qo0&nFGqq z0$E{fU>Rgz@KS)p>-Ttxg=qKmP=Rd6%~AE=RE_Njwz<}|Mggq(&1!!t4!edLZDiXk zcBsIMb$Q$NV%VCMG#U6xWC55gvepXQk&c5QT~YU%?Z%A>F0>HPkbq>0LI#2EP7+mo zUO5!ojv+sW+V@fdtycwIJ`=Y}vhrZSH#*1S6{*0T{Y9pKsVL~Lf<)*;ir2vB`^w{J z65%F(CJQQ$FST#&XwqS#pYuu?3KL0adL)`4n(~F*cE;({`Ld1icV@$!4Dy{)j6Wd?neH>dJ7B)$fXzl7gVA7&v{1(neDe(RTwTlJBjSjM zTtAn4#NhP!#Lu}1b_rKSO?D@31%y0~EDW)5BSnG|EFz2OEmd1=W}mzuh7E%x%0J9y zl(pHKtL_(EziOTjAN3!}#x@q`Ewhj$z+LJB8!n5g`m8m6Di5957I4&Cpq^6oAaRbw z%E|aHQnnqcRmtoQZp-hkmk#tgsT=WZR~mA{Wo3;#79MKI2Mj0=H%^Xup!@*D6a;SB zm*x7>-MakwG%`*C0AVUK%>s9O8#P>iEntc;DcA8mi+QSND;2$_8Ed=Hz=|*e-v1JY z79_ER=NUKD@R89)Dj&YR>|52UWaU_>p-v^1#)u)%Y~kwzGOw*CPgQ`mgGB!vT2k^L zmo!Isr9ND0rsY^Av(x4;LYk*gq|HBUBE5I@iu<(5Ue=t;{baetA!-@SQeXS9x?xX1 z>*tQK-I6D@lX7dGfONe+;@1WNi=*yr^rdCQGuIc8JG~EAN4tC}pF0xe z1gZj5wi3`F~T zeio>i~^EL1}Pi&dZ!VCHSxayyr>BYGBo@umo!xzqynGryZ?RK=lz69fFmrf{wxvy)Q%O&6|P(6p(a>y@Wwi(bIC0p!sY|g6fwGIPE3{8A@TD!?jVuWlv2AvZ> zO>GCWOCr_Fs8qDvH(n5SIx9F+Mz<;Ekx{6UH23>#59WFMUdlra+)`J_jka4nt1;7S z{LZKlU|QG80UC{@qF`s(w$!8-8r?R4_Zh@gsCg8pQ1qZZ2~VTJENK=QiZI{q6duGqqwVgBVlheNg%*qSAA=7hi+LqP#! zAkFEqBx2PHX`Mw8e;I5xdaPa{U%wv!p8%+P!V~0z9@-aXzft>k02}?^b^Sj}=Kn5( z7Xc_woYVdQg#h2r1v`O;RX3C;8@Wb7?u16|uPWO1bu!%cN?P;$IN*EZ=l8Ii8`wS9 zvoqMuh2>JOk__}}a|JQfxn^QdaXjXJLFuoZRm}AASu0t|<_mwcsWU&~$$Hk$HVh-Q zcv6OqcRO2)NxSCkO6C4c$~00775mQww-vnntpBvIu$XQJ!UtZSz)i}OdE$^>D2@xj5H7*1M9Z$QFKr1d< zr4b}h`-Ykspfp1HG*YDF=wHOiob86$+N9aE#XaY2?u-=6$_AUSv*Dj7dV|B+gN~g$ z>Iw!*ppxR{lm&!7XX?VN_1oBD-MJX1K0CH+-hkv`bbl57!8Kct{pi%BXl~V|;1L|C ze6s9&ttZ%q{Wj=&%DS`}^35Y@WNluAqx~N0r8=v^4@?}`OuP!AFRrhz#k5DBa7#>G z9$tff=EW+_o9<@lXf4yKT4`<@y#-7&H0&+Di*uEISD!;uIeozVO))G`;K36TcWWUd z?de6LNne+f{}dESa&tXl!L_qDmZePxeS>jMdwuzXrYo63yPKqqc#e$JgM`56TT)bC zFfNp@>rIDmv1}>HJK7HosBiLHI#N}w@Ns*~!e%WJb+#Q*G zN(<0npT8H(nfbcAMOzuJ4j?>y&-N?O;cp{5120W&m* zH4!|$V#%KnqigosW0~;gaqideae~3&ON8z9ya%RNw`FX7v&=sUV~()jB>JF18DWzI zzrKr{ppKmIPjnk-HsX96Fw97HQsYvzl3ib?F?^P;Q^8c@)&ek(l4$$q2vn4Y5%b~C1i8`qC90MY13o%I z6#M=Sq4)~zdnTs(!D5ljoV(t;d;sTL7*FUI<-aER*-QyqH70{%bk49ov0DBoRHT{Y zMS#({kBl`Cl>nNR@z81tb}F=SUMt(|D*Ap;`jM@wkbXsMvF%b7vkY;M?3B>s*M}JH z*>T=jv36MTsb2CaoGCw0=G6QbgmdJ~)4uIFvhWp`kV*PCB$!4~>xi9kg-&1<=vJ_G z@b`TzE05||u*sX3qVCQ3Y<|-pg6VIb?CtNU{i>H@P)`Ck8}MBvam3s(I?)^T7g^mO zQ|?b3WFbpZ89N3Pv%>9BW3uTamU8Afa$X^PHPsl+o%F}~<+{2kf~h;|%GgkK2Swj` z?tH5FB^M@8I6p?(IdWmP?5b*0?ts4*`WF4ATNwQ7Gu@a zX=eQV$UC(@mIW&LC~~In;WxKZW-`YNwAjYlsuQ04=vcnSgL_i_y3>X0V_3+|dRX$D zwet^vEPIQ1_UJdU;6LFGiEr95T(@!M?Q#`dleByjKd?X3M0@k4kf>m*(&E|l8;6wW z!S;MW>Lq)(HLX!fzs|=GjFh%#)ivg6rHKZbtM1ci4O7YLn(<-yoT$vaR!bW_E)<9@ zr^YF_*hx8k)_j1jyc_8317^r&maQ>Lnij$+7OA^m&QdnUlH=Ys#(c$5UgMv@+L2F- zZwhQE*QCw{%ynD;Ov;F3C@euTQyNr8YJOo&8I@(FCf@Nv6@DotC_iOdBe?UNWCESr zQc{?j4^|etS`NZ9QoEG%#{1u&r$kNzh2+HZh5&IA(LbcFerN=Jhs`Jz&CS31krkOM zj-Vn;oor_m)kw!{U@b+XCc?~@z-C_ROCXNBCjED{`5oZo0%qJ1%*0(q zBV)A!qKeDgaq(K&u&)(XBt7{vg|>NXYfr!o_5(cHh*+y1514>(wNL`h@c`o9PG`LD zY_{mXjyD%qBxQEJz>%5#qpdNQwvA(GoxR+?We51)*@Mw|0B3(<-(}=tA~1QW1i;oM ziE26ShkPfVGd|C$XVF+fP&crq_LsSw7yf4322OFx)@1aGOC_hF&tH5~7_obmkO-8| z>X`3&?_8g*Tdl`G?`!S4yp3JmChB}fdzfZ1}4rhzg!kMNA1m88_ z5BFmk3&NVL3v}LvTJJA1_3M5)I30zSqit!=%e5vN9TcUR+BUMXD$AMbDO`Hhh5T8g znp}F<$)aiT>dW@P>S+^QWmD8_*s~O zY@tU=6l_GGwTabMF7!Fa+^DPK$=ciAqmcnJ2@U95WqVrHB~Vyj@Ybd|&McywW-f|d zSBFndxpbi6uZLzgz=R20FiU1k{Y1t6Az5@S*jcd{aI9GVJA1 z?R&Z6@l4fSsTM53Z4J&u8VH@$poOUc9T!!pFKW|znu*mc=bw4OUu;Ae6NlAGUbT~x zo)Lwoo!joRgcjBFKO1r+#>pn)GG zF)-WrKFc9GUfMVRp#A!_e=M_uQsBO~Mxxm@m(M;>_ji2|$?nLgL+xjd_3a@W3SPS) z_#xKd!DMh-XQd~67k@*F`Ozbv_@6dJOqse?#|fk?o8-rf1_>P4Hk^nxs64!1K>Xw| zvU&J^y8Xa}+<+GXHY|I8Jdq48J_0}Z3P@#O6MS^PorueNbmc1xcJN%fYj{ck2G21< z+^G=Y*f1ka`ftVwUivSvVdk+T$A;6qP7YZ+&96^ww9HblT=sE^T2N$ILeO-ax)Ygt zn2DtMJ@9YKMQ*}s)Qu0&&oF7%ni1>tuc?!KlvQg2K838TQ86@!VEt#Sja;xT4Lr%) z{l=mL)CNhg(g}Z7up~Ycs`(qoe|Y7ra`2Jb1>$o48U165)tz3NZG{zjP2t5q6N%* z6#@#k(vg9gba_NWqU7bSWg_Dx<|v5S;-)_*1?phz6Y8LSWQRU{m@1{t-p0X0)5sd% z6{IlXl|kwl+tVesH08x=2aPG03HKyQ&gihhJ7aopmcv4nr=#EI^5s2W`CtM5_x%@A z^~EhYM{0zw(d!&6qc1=D+z9nYGK{S`eLOEeOcgqJ@q&3HlqpLVn9l~NdTkg@M{I3p zznUYD1b(}K3H`$=DJv-zpi>j3ZH%MtkZEB}eW7nv&=^PB)MnIW;H#4Zr-RXQ+?-iq zd?Ot;87_-+2|X;Y#cwHkx?E{jAG{$Bz#So1|EfB+3WKFZ?Tkem$9Jg+C6Y#;Ica}?d*cT=Bl53{!hBQ5 zZ8IRpaB}qIj)Nh%hnKA2LEhqAIBewTR{WH!nUTSF&e#wcM=G8NPH-;6q$7{ZRCe@F zkIZs;u3EZmrrL@m7+|Y@tIXt1i;5YR#?X}+HJ-U818IgD>bdodz1A0laOovxax-C7 zzpMbsF(;@#T5{ISZq{#c(TuRzVvj-?Y!PVkV}U7XTP5&8mE)=>B>?);Id>dZ)vF)% z=hF-4`~5lUp5Nt9R{*~NERg-N*j7UTRn(>gGR*Xw3e4l~Wpv@?GZ^?6qvVzb!kIh% z5;?mz_J5v;2)%(ObAVkqb0Qw&W?-J#4_thX-g@AraV&G3ur_=8g!acy{+siYf1+k6 z|DL7%3;$mm{ht-V8x??uTLdN6f6~}WHPxlef67Qw{-FbDDjs)%|0(_!1;Z23q0dAS zNJQ}5jPOAaAt7PnU*us9(!OAzxY&Wcy}Z19eSO{CC7N&^9}AwF2ZH}jPEFNRS05iA zQ&3PGpPY;!<@4A)6zmNE0FcC7U0q#VT%4Vq-Q3*V-YWj*(d1cSC*+A5l7QdZHk3Fn zPlA2zjWt8E(W-?8d#|h=2`pq?|wLAVjcCPGb2xV+43=_*u5NB zCF{8hFWstqwy@T&W0A7JkSo@s`1Y0}E^g36=tbK@)?K~%=U!86X~D}C+xTL?+Fy3z zBAB|3PmzNvDty4&m#1@FWXje<7_?@jnzQ((UJ~lDhjDn58eG%yQ zIW$$v9%no#5jH_f7y~2cf-Zq!Syi{nE%(>I{g-aOO~wc%{2C~DFBjz8c52i0y1Jxl z_w_A~eV)ea`h@KUXMgDp#Y41@KQ^>1Vs?q<)SC}IX5UDhrggdtX^=+byQG?Dj`y-K z^$C9Hk7pt$UslfV{4U?c(%PeXJ8Lb+jVmSy{No9-etQja$TiqVXY90`leUZOW=-nYSrxC(&3i9MhB)c~I;^6tKzamAj_c-`$LsH$yyF+A@}v_&4vf@mcsG zG+RY`wpqt0hR(+AvzekohM7e2{`!6rW*g3?lor8kWT+gA#Z)|bdELN@QLex*w^RVk z-P?^Voa=WA-Bqt+=Vp$W&fbDbzQ#5EaN`Mg+}?{+gD{>Xf#6@(fg~~gmK*LDPicf7 zDAugnYs_n^n`=ONY=)8;5df`7#PrHuAuc<&AaE7V?*=NLaGbgr)&7}%Hq(Ws2?{4U zklG%$4pz(5^!>EeePa*OK92OoFzE|P}%+( zaAcM(S=vpHZ-?OQMOtc6Qc6@Ms+cIkfqEs;9P$AXH z@+xq1eSzGe-xHo)e5rVf3oDDKHS9H~40gak(1ID)cX&*U9iZr8MJrFZxzz$D-+QzU zOJ#!K)S$hx0l(I4Vs%;XfTb3cDYHE3XmL_c=KOX#0ko&RF$qT`mx8de%SrH-tiUaG zsi8Dutdr1-22(!+cuasvVfk&GR*Z3nsXIy|kELSKW!ZfF_jX)$+wTmuxV-ck47*&K z@1Hf%9!lb+k(!*nHt`GLtbO$j4L{K1XUprA{^ovR;9vf6W@_&UgRm7^@Io<;)%6c= zVJ|)h*KgkFhzr#G;zp-k}}wv5{g%8&KVE zJO;0E&=s1W`9SPnmwlW-_054|OpdJrDTjnNL>yz>69{RWO$0A0n^h9_#|BDpz;U-Q z-jB}tUuQmw=5muFv}|5A&^L#5!wwcBq9JsVjq}PyecRs$C7G z3Uc*zExBCJLt11IgZz02B9gTh0w!N7?&{)v5h7wLd?m`C@Nx1&KZP70t>2yDM8mEtZX>_!4`7voVVT5xS9`o#Us6Lx;x$ICKkBxO%iloF2-4N{as#-bZ zuVxwu9yA>xSwb0PM!@`U;{MxB1L`uYg8XN(c`jbdI;#gGb1c@<}# z?|I(-q7W|SY~m-oJsl44MKTC(j2VuumfR2g{`J!1UVcc%B#%3fT<74t;4~)t`I&TX z2lHROgP3#B9$l}ncm`q88`>V?sM2vW%D%)1fJZW_xb=coUPU+idPJcE_ptxR=Bbv8 zj;pA=qCF~*cx}zOz6>qadq_r6o5$o7E$mClH7yKKu|`5^|2+wmmUK1)T4ExeI?n3{ zDoqmkF~B;9R(PzxK3^r{PY;@jIq3(+H=hg_*{%<@h5qSk)_q-`B_>c;M05XX3I(C} z++DvM+cU*3HeOb62Wqa%5+0^Hf@I|}u?_;wx~oxnCrynf9QBr(O*Z~IB))A0xZCr= zlK1_wD`^F$4YLP?6Y7PVYu=it46>7URI3Va{GEPF0S??jNn4hj>c(MUU757N)VLJg zn1Yg8ziWyY8Wf(*;Am#0L#CbcIu*0fNwb`OVf=Z24A@LuvX{v6bxsE<#hNAFUsipd z=sJn7La)b7Hmnki(z;ch8ESlA=aOKzM_ksdt0x@1MnJT(D0tD^_&~oVXyZk}zsgBI z$-UuCINpY8D9poe@Be&&V0l?Ez>0n%QvfealT@z0Oxbi}5r-+aAIQuLhSI_uYk7*` z(vzebcvMDo-mVk~Zr(4!d1mDFZ=T4i-sq+l4Q*U_FZ^}Mrn`w7Ri-w5@mu`W#1EMr z-6oD$M!lY6H$U-wK6E!?)bFfZM_U>DvwOnAN$1ATpKRJkk z95O)^h+~8UIO*zG>;4f0UEN8{Kpt*3QltMq_o&+cxo{TK$szB8AD(Z+vu9@zW1q1c zdvsd%KAe^cxabAWMJycXU`G2W22-KJsKZ}BMZ6X_p%llYuEnAL2LZxBqPvA3YmoUg zWe?DS5gG&U%RX}BV0%FtF-PFw|K;KK)}Sq~Bn|H@T-+_c^|h*W)02bT?si}8+1Zf} zm16>!SJvf+m9hH|IVH=1S(E$sn&uGVh{q0B%=6^)X*ke@u@M>+`FyUI%X_Du#M(>} ztIIC7Rii8JZPYkJz;6*YL}z#z&FMumJGqgf3rDri5#Z|6r+dTk(<>%l)oQ?ZsIa>|ci>%yH!*C@zE9u8SkaaFjm2iEaNWFZdCTAm4`CM7hl<`VwT&=9 z8jKSa=F6$In#0?{$-VA}L_IhL@vd|%=bQtB;#bK`T~RQ=@RXqz7iRnYak?Fft-sh9c^#zkeC@ixh*{C>?{RbLHHHZ3;0 zu+02sE zO3o$z`-N0E-udQBlg$SDMSbJEDdt)+7*gvYpE~xJsT4qv z#Ka>DmFI}^@ASlG2)DbhCM~G1zcQCoOiY}uMSQLdW(Wa1m6;`e{W5Lx`rfiqNDr7j zQoRzliac~x^QVNh23IJz$2!#vlh;VioD$TyYU>-T3YI1=R1Sw2nw4Z?k1WG@^v6HK?ds?CXV?))Yx8OAA4kmWledr^JTcLgPX(O zTGnP$!3&t2`FG<{vyGNqnlKt%OeQjmjqtpFx8A%a{OX<_Lv4hb`!=YGrO!q83t@dM ztGDR}$Tvn%gXeRi)4?b5F{3?9U=yW0&5@Xqscg+h@-w=RyT3vK``7Eh-wunNEFJjz zC*L8xcInY$18zZ0(sVIOyQ!x#*uLjcq%Qt+b2y>B*z2(XCr`V-BkK*0Z@Evp@9|=2 z@Za)HGnnUH*3d%E35<9_+Cqw};uNEJ4lR_3GmIccSeePbCy0<{jQ!66?}%U+$KP_Z z4Xw#5(w_H|tcnubs^8$ZtHOIkE7+NJtju=tB6R@KI$JcvtR7^(`XwTEgAgKtw5O{4 z_1FrQ&E=Avw^R7LZ2_@uBQEk!5Wo69D$)<7{yk&bqK+Py=XQQmf(~KSwytXgg$Dx+ zVLx2WxiA5^u#7B=t{jNy*1M%1)6)-G1=SQE%4aN$cGyzFI+#HW&W3M1lwT(5F+<)k zYO1$SqWUs|crpO`+b$elev&L^c?Qb*IA_X;q(mW#a*UQFxH8{Vhl$^WwS)PmCejA8 zJRiEKyZm{aorbZeFkf=f35=>59y2FOzb7!hLXUur3bu@lqog%RQmQ=2+6uz^?EX!` zPIg+_fj{FEhA;k`Lw8M^P_S(NafIl;d#&@R)r7zMHe*j?VV~K!N6rtmeql?A4(uvx z;2Q+}n_2}0{%!sQAUw3gHmuF4SQH{Ly1 zw1h(Xy!6hiLx)+_g&5}x;NHoNJ`aKp6U_gq@Dsd6pckf;1>aNFEg`4@~04enEdGeW3 z4*>gpbtiq7GJ>4E(d)*Ll}Mv7K91|5NBp1qhQQpvzb7be;TWfbvCIW@9nymz7S#ze(D zuij@M17kTFFbN#NX(-X5U&{$CJo}G06L_E!JwX<%>-5P0Cn4)ehXW<@2dpc3nB*a zbi2$I?P`{g-^?3TgWNp>!o`26klrMG8mksZ$WRgT4*}G*Cs>loM*s0S!p4EzzW;cc zf1D3Q;?e&g^AG?g(hDK;5I{EOf8(6~S8w&a>Y8}%yKvh4&hGjf?w2LZAh(m-N6$2L zlYMU8Qh4zVX3ZjL_3=<6w_sAG*=#8e{@cgf&VxsG+;AUJ}CuzJ5FCkE$h%u zi2?f~FVohh8xS48W8n5=;hhob`cs4zjRYUAH^GDP#*oO$$gVi#E%9L|72^c=Jy1F zh@tgX3f}U*&*{6R^o>7Ll{n`6a9^IyjC~vbMm@sUzgRaM3NIxxZ7}p2vPQX~&`G;WYfH!fh*@1D8$nT$z|FHpd;)bQ#O3QAcoV9fbKIoqnWBW!=}&KFHbO?Q_o z4xm{=re4=L4pFr#D{Kya2*C?XEI$b8E}t7H+GMX&=`hPJ+MwjNgi^}J#dWC>*g(d2 zQNL6rsP)$j{hn=$@Z~V;5O6W9I=I3sk-HWrJ1ym`;#}=+pC$J^3h+4ado$zhteLT( z0pR=7ciq5U)8JQcMrpZk$q*M29i1TSAA7uz7*;{|Cq7SsI_K6&7ePNA^nzd9ZAdr8|)Z;3KrNQA@oW%NQ9YI?narqtv-bJQ44a;!y1eo_q=3D!=J0qoc&W zhRlk+LA;NC2Lmks$@@a{;gMoIsYeu2Cy%X>JRs#Kqxw&G(IB`sNc;RMpF&)t^A|y# zU%s;8XSryVPCNEL{EZ?ldQ0RYour8cAr`H+Dv{puE~Mz zQQOh{Z((2T&)ucQa7u&bdx3=8YY(b+U5>-P;m=t~^$^;wY_PkC9@Q}P1+E6|=V|{% z1#-T0V!*y&t75}U!-C6%$^(u5sXBz#o_NiDSw7O!sQ{V>k-iUSS#$kc>lULne-~Io z-E!~PDZ5oXO}2^`*(`-fWcF~4@MDABf0E#CcJZEvQbIij>hXxp<29PfRBK8@IF@Zi z8_=Nk25NOtu~H;-puRyA4MkBNeUBNA+`P7+E6o|&2yy!RQ1tq9ka_cFgDGwH?YkSs^vaf zFg$5=yX4h0{=A$=n1R>czpc9T2iLUc~T#2j9!4 z9?4^*S!)oJ#Z35q)T!$H ziZ25FT=!D%T(O2Qc^WvBH~`AX!L>_EBA@Qp!B%)t>+ zcGi@dWxquM%p~t6bpvI7xq=&sh0Pp>;14k6LN$(|ai~+K&mVZW8(IQ@zHyj0>2kMq z=fzEiF=x1AM+K)-wR=@GsFQP-s7^L+Ov z7YYOXek!RZSI3%1_XKn6$EaW^qE;mb_sZ#9>tqkPmm11lez30o9b|s*z3=_n$>}xI zd7(7k#B(4K9wF5~@6`<_gp>v+`uSPr7cUH$=ij2X50ISl$b*=ljT&rG2RMU|bNZWr zr44f09Y?`#zWPnBL}Cll4QI6p!cl!Ghk$~^SS%}o!&z2=DDD+h&fCKs#>JtPZmL;S z&H{J)PNo|}A36{E*PWN%KF*QSgdSnc>Mu?oV>QZARwBtm#xxX*v5bi%Eb6PG&`hqKhhA%FAwI5qJ+oge}s%7z)&ofndt zc!$g$uOM^&wh2|m$&SBKNGVt)8#<`(5b%>}k_(Z_J)jebD3+$(?4jU>;rEVK(%t1Q zFl^^wx=T2YaM?8y=fPHH*m)vXf$e7$pkMgV`yOwDH>DqF&ISP=IR0D;i?K#n&R%IS z?7@83qXVlbcKKZz2csi{r;-+9VDHTTX07S*td(}@mNW%d^aEd`Y zezUoM^I`jRlwvco7k(6e$&j$e zHYN`!T1-xp>sk5-diUdB@VcLKwBuW2hPu&Nr0(%(Shb73)?;POA5Yqi*ZS6lGaByb zPW0D>uXaWJm;BawF;Uf}Z(2w+;`C*)jt3@6DU4}piM*`eoYABvXHdfV_!TNq`XEp1 zWi#t2cjtoO3?lfF2vo7xP=D73XWbZ!(1QpX<-BH~*Ja6Qdm%uBGYQmfW9-=1LJTc5 zrDb5$ydnnv&@Qmvq%1JY%uBw%aDHQngBn8ZHFGxXnl2Ghrb``7OyOPfMho!^6y<3p z5p^5qxO2yk@s3b3&L%IB2$S|i0;)cDVT7RK;9GS}-U^D?`wDyfdmj21y#WUwj~Qwn zLM)ERG=6p}CvEwZ^tc3I1gMLIIYteO#KU${ELWj2S|J%d_@^Sey4xRT6yAA(Mjw&MnzvG9$b>VVjpM=5rgr=>zi>7xRa| zYo~P1urFmX5sICs*-R8Y+QcMH zZkSXl5+XXPyl@D8nV~Cc>)zKWOd?icc(y~Nv?qyjD@JyWM$P)_l`0J<z zS(^>~ROo2pE5SWi{yM33>^Ht2nU25j^Wm^DgvPxyRFco!9JxssH_tdb+-G%T+8Q`6 z0<@5gYao0hJVpMrxKl3x2lu5n;_s5+f#p=4c$$|PLiD9SedkO93C67 zTz;npGl1do4JT<^RBQV<7rR~04`9zRegIOEP}+L-+-NI&#L_>Fk5Z)rSdU){2!&Y! zM}$P({eNh@MudwUT*}=l4?I`@mZpnoyP@NZl^>(+WJ@$L+3qJSA`+=rkWUNZvfUST z3LTJV`%`PcS08S>jF{ji5{oS@Z(adNXoQejWzwIJop<)?zXvlkSnY)UY~hQi>)jge z_~n6#kq;nZXBEWhJD2TxM~vEL%$+B0PgW-`ENYuaj*_7!wzXL$t4R($QqBHx%HZcf z>7CNubZ{wAiT>JkR5E3C(ezgkInE$gfI<_zm{SO!6VpLQo>Oz}EsaCW$IpGeHk5NU zwVv<54Bu3#jCAl&#jXG|z?rjPJMN;lzG1LL4hS1v{cA!Cy+11fk)O^m7A%G{t`n!+Ui5=epih%XJGl#Ma=EjgzQc- zZe2Mk*9KjAH#U~-GCQJ4XRPEeejVt7Ns;FO}~T;>U`=I;pP zU6w9e8sscR-q^I+xNE>kNK^F7prn{M}Wg2|!8=JK?LP!=> z5G4QMAt)I(!7wA?8)A2);KIE@alnR^Q+p^+8@FnUTM_*^r;_JXB)6i|PrUHLK~#9w zbi>JgMTKr`K?ae1k^TWw3RqzIdDPxjsXqUw&SbpBqK^Df@>|L2Zji~Nu1c?sRMDK$ z0feNPJJC1JtVtii49GjEU^oi6Rz=ba8L)=9roC zsgQ)%qUaQb+6j(lU}H@UYXI_?yG#qQ0sruvAZIwx>9d(;P9|U}*ewe3&7pVFHZ8WX zO4^nI;HSY^TKI~Ry|QZ>K?r>d?K9}i!FdGQfq{6neSndcz1@`4?6XqQk3#(9fl~ro z^7k(i1eaP%RZ7@3+Y^W3_3k-P2Ec_7YjVdKNII1ixz09Hsj(2(DEg9x{ zf08f*B)95NY(K_qIN_Wh8PZ9rI21S^fQ;;+k7!fT9lPk}lx7<)2@dg3ou_aFOtmk9 z_7|^;k_{rd-4)=)?aK9Ywgo7T3dJ)gZgobKK4JHK=P31Iup(1xoD|{8-~-4RQK+Yy zTg~#VTXpi%13p0~cXF8{;lziL)xSlGemoneXEB`XZHJz7-qP#+p86*4=50;$icJNQ z2roXeF>4~4TKF9P-QdsAPkay0u$*Y0d2{8o+tLKVx<p zU)-+kia1jVsk}%x73rC&&uIbFH2ax=d5Q)&Tet6s?ka3I#?0y>qhT4QtMjJNJyvr! z7&SIj#}Js1J$y++^g6Z%zY*(R$4ys#>5KT>UO%}sAwbkAlj2~auqfRoud!8+MMoh# z=4+3`tZ+j;#sUf-YH?n<`6PuX|7(>zKR*4d#YQw|`|xtb8N0K3tzVeO zqj)R>x;#D^4O^2#j7Q5&?-eiFsX|WKADm5bNE;Fi_9SZ~Va#E}2NneH<9bfNo9EI}CI8_I59K$P@FE9el8v$?t$~iVE)KeNt~I~x@)sC2iyRz^ zRU?hU6ZIruP#xdJ%niG)4Wh6IOzs(6ijN8EYh<=>AvgOAnMnT@D zpM_sUHgnpj=y)(?Anx4BYJ{UXbyMvML&bj$zu*Kzz35$NE^<0nymMNd5W7Tz9N%2G z0+A*T!jU`8CgKS5;eX3Y4Zyl}G~f8~p}MnM%l%!CuhGRk80USgb9#T@6d{h4n6&CNj;Z@*Rm9QJ5A!tk-c4sxa94tvV`{^<2; zP;*`|pzgFUqsZc-RzM@p3yZ9#z54o6m)43XAS&aUVB#alCM%QY>#50{?@;z`u+NWY z;}WAf>^IH2s0#jxhYxNL2?4UYP)HB(Z-7kQ)Wf2*;Da@!5K9DZmd9v4Jt83T9Px|I zo2PIf3#xx5t1V~5W9RED0x-Ku~GWgxH}lEURcYAm3#twDl4YtgS<_8 zFiw{S&UaE1S`^&vDb@WT8DSuq%9PTO6#gv-M^*vL#$RG=p1ghbPoynCLrxsF8AT13 zxI4!2t$`g)30V{#WV(vcL!M7dHK83K95Z9n<>@P<6u}fC{`JBu)KssmN)g)gI#nxN zi2Fp;oLmqlJ%&HQk6bD1hG&0s7afqdr%$APN(OFwBG0ufyt)@YQFye)G zKH=^Vg`5s=^Sp`?OxTXHQN7PhSFSn8J1?1M4u{ytpMkZ@1FU(AwXa9YOqiv-9@l