From a9ecd2d03e3ba6361ed18a50213c397d803f2b30 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 31 Jul 2019 15:28:01 -0700 Subject: [PATCH 1/8] added known issues --- windows/deployment/windows-autopilot/known-issues.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/known-issues.md b/windows/deployment/windows-autopilot/known-issues.md index 3e55879db7..dd22f468e5 100644 --- a/windows/deployment/windows-autopilot/known-issues.md +++ b/windows/deployment/windows-autopilot/known-issues.md @@ -9,6 +9,7 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy +ms.audience: itpro author: greg-lindsay ms.author: greglin ms.collection: M365-modern-desktop @@ -20,10 +21,15 @@ ms.topic: article **Applies to** -- Windows 10 +- Windows 10
IssueMore information +
Windows Autopilot white glove does not work for a non-English OS and you see a red screen that says "Success."Download and install the KB4505903 update. +
Windows Autopilot reports an AUTOPILOTUPDATE error during OOBE after sysprep, reset or other variations. This typically happens if you reset the OS or used a custom sysprepped image.Download and install the KB4505903 update. +
BitLocker encryption is not correctly configured. Ex: BitLocker didn’t get an expected notification after policies were applied to begin encryption.Download and install the KB4505903 update. +
You are unable to install UWP apps from the Microsoft Store, causing failures during Windows Autopilot. If you are deploying Company Portal as a blocking app during Windows Autopilot ESP, you’ve probably seen this error.Download and install the KB4505903 update. +
A user is not granted administrator rights in the Windows Autopilot user-driven Hybrid Azure AD join scenario. This is another non-English OS issue.Download and install the KB4505903 update.
White glove gives a red screen and the Microsoft-Windows-User Device Registration/Admin event log displays HResult error code 0x801C03F3This can happen if Azure AD can’t find an AAD device object for the device that you are trying to deploy. This will occur if you manually delete the object. To fix it, remove the device from AAD, Intune, and Autopilot, then re-register it with Autopilot, which will recreate the AAD device object.

To obtain troubleshooting logs use: Mdmdiagnosticstool.exe -area Autopilot;TPM -cab c:\autopilot.cab
White glove gives a red screenWhite glove is not supported on a VM. From c4187844015717fa9e9cc92d0b4b739553c0c83f Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 31 Jul 2019 15:29:31 -0700 Subject: [PATCH 2/8] added audience --- windows/deployment/windows-autopilot/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/known-issues.md b/windows/deployment/windows-autopilot/known-issues.md index dd22f468e5..818d4ca0ea 100644 --- a/windows/deployment/windows-autopilot/known-issues.md +++ b/windows/deployment/windows-autopilot/known-issues.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy -ms.audience: itpro +audience: itpro author: greg-lindsay ms.author: greglin ms.collection: M365-modern-desktop From 35b5c26fda55b7b07f6594c9683a837db2dd63ae Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 31 Jul 2019 17:18:30 -0700 Subject: [PATCH 3/8] new doc --- windows/deployment/windows-autopilot/TOC.md | 3 +- .../windows-autopilot/autopilot-mbr.md | 412 ++++++++++++++++++ .../windows-autopilot/images/device2.png | Bin 0 -> 43998 bytes .../windows-autopilot/images/device3.png | Bin 0 -> 18873 bytes .../windows-autopilot/images/devices.png | Bin 0 -> 45828 bytes .../windows-autopilot/images/hh.png | Bin 0 -> 4938 bytes .../windows-autopilot/images/reset.png | Bin 0 -> 11131 bytes 7 files changed, 414 insertions(+), 1 deletion(-) create mode 100644 windows/deployment/windows-autopilot/autopilot-mbr.md create mode 100644 windows/deployment/windows-autopilot/images/device2.png create mode 100644 windows/deployment/windows-autopilot/images/device3.png create mode 100644 windows/deployment/windows-autopilot/images/devices.png create mode 100644 windows/deployment/windows-autopilot/images/hh.png create mode 100644 windows/deployment/windows-autopilot/images/reset.png diff --git a/windows/deployment/windows-autopilot/TOC.md b/windows/deployment/windows-autopilot/TOC.md index 4ad5db1e36..5d487c958c 100644 --- a/windows/deployment/windows-autopilot/TOC.md +++ b/windows/deployment/windows-autopilot/TOC.md @@ -25,4 +25,5 @@ ## [FAQ](autopilot-faq.md) ## [Contacts](autopilot-support.md) ## [Registration authorization](registration-auth.md) -## [Device guidelines](autopilot-device-guidelines.md) \ No newline at end of file +## [Device guidelines](autopilot-device-guidelines.md) +## [Motherboard replacement](autopilot-mbr.md) \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md new file mode 100644 index 0000000000..fecbab9249 --- /dev/null +++ b/windows/deployment/windows-autopilot/autopilot-mbr.md @@ -0,0 +1,412 @@ +--- +title: Windows Autopilot motherboard replacement +ms.reviewer: +manager: laurawi +description: Windows Autopilot deployment MBR scenarios +keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.author: greglin +ms.collection: M365-modern-desktop +ms.topic: article +--- + + +# Windows Autopilot motherboard replacement scenario guidance + +**Applies to** + +- Windows 10 + + +This document offers guidance on how Microsoft partners should handle Motherboard Replacement (MBR) situations and other servicing scenarios with Autopilot devices. + +This document only addresses the most common repair scenarios. + +Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device (for successful registrations). The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, making some repair scenarios unsupportable currently. + +## Motherboard Replacement (MBR) + +If a motherboard replacement is needed on an Autopilot device, use the following process if possible: + +1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) +2. [Replace the motherboard](#replace-the-motherboard) +3. [Capture a new device ID (4K HH)](#capture-a-new-autopilot-device-id-4k-hh-from-the-device) +4. [Reregister the repaired device](#reregister-the-repaired-device-using-the-new-device-id) +5. [Return the repaired device](#return-the-repaired-device-to-the-customer) + +### Deregister the Autopilot device from the Autopilot program + +Only the entity that registered the device can deregister it. Therefore, before the device arrives at the repair facility, it should be deregistered by whomever registered it, whether that’s the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via MPC. In that case, they should deregister the device from MPC (which will also remove it from the customer IT Admin’s Intune account). Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. + +NOTE: Whenever possible, an OEM or CSP should register Autopilot devices (rather than having the customer do it). This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. + +EXCEPTION: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps (if desired) through Intune. + +#### Deregister from Intune + +To deregister an Autopilot device from Intune, an IT Admin would: + +1. Log into their Intune account +2. Navigate to Intune > Groups > All groups +3. Remove desired device(s) from its group +4. Navigate to Intune > Devices > All devices +5. Select the checkbox next to the device(s) you want to delete, then click the Delete button along the top menu +6. Navigate to Intune > Devices > Azure AD devices +7. Select the checkbox next to the device(s) you want to delete, then click the Delete button along the top menu +8. Navigate to Intune > Device enrollment > Windows enrollment > Devices +9. Select the checkbox next to the device(s) you want to deregister +10. Click the extended menu icon (“…”) on the far right end of the line containing the device you want to deregister in order to expose an additional menu with the option to “unassign user” +11. Click “Unassign user” if the device was previously assigned to a user; if not, this option will be grayed-out and can be ignored +12. With the unassigned device still selected, click the Delete button along the top menu to remove this device + +NOTE: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. + +The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device(s) is no longer present. + +More details on deregistering devices from Intune can be found [here](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group). + +#### Deregister from MPC + +To deregister an Autopilot device from Microsoft Partner Center (MPC), a CSP would: + +1. Log into MPC +2. Navigate to Customer > Devices +3. Select the device(s) to be deregistered and click the “Delete device” button + +![devices](images/devices.png) + +NOTE: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device(s) fully removed per the Intune steps in the previous section. + +NOTE: Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. + +NOTE: Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: +1. Copy all important data off the device. +2. Let the repair facility know which version of Windows they should reinstall after the repair. +3. If applicable, let the repair facility know which version of Office they should reinstall after the repair. + +### Replace the motherboard + +Technicians replace the motherboard (or other hardware) on the broken device. A replacement DPK is injected. + +Repair and key replacement processes vary between facilities. Sometimes repair facilities receive motherboard spare parts from OEMs that have replacement DPKs already injected, but sometimes not. Sometimes repair facilities receive fully-functional BIOS tools from OEMs, but sometimes not. This means that the quality of the data in the BIOS after a MBR varies. To ensure the repaired device will still be Autopilot-capable following its repair, the new (post-repair) BIOS should be able to successfully gather and populate the following information at a minimum: + +- DiskSerialNumber +- SmbiosSystemSerialNumber +- SmbiosSystemManufacturer +- SmbiosSystemProductName +- SmbiosUuid +- TPM EKPub +- MacAddress +- ProductKeyID +- OSType + +NOTE: For simplicity (and because processes vary between repair facilities), we have excluded many of the additional steps often used in a MBR, such as: +- Verify that the device is still functional +- Disable BitLocker* +- Repair the Boot Configuration Data (BCD) +- Repair/verify the network driver operation + +*BitLocker need only be suspended, if the technician has the ability/access to resume it after the repair. + +### Capture a new Autopilot device ID (4K HH) from the device + +Repair technicians will have to log into the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: + +1. Repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition) +2. Repair technician boot the device to WinPE +3. Repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images) + + NOTE: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. + +4. Repair technician boots the device into the new Windows image +5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below + +Those repair facilities with access to the OA3 Tool (which is part of the ADK) can use the tool to capture the 4K Hardware Hash (4K HH). + +Alternatively, the [WindowsAutoPilotInfo Powershell script](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) can be used to capture the 4K HH by following these steps: + +1. Install the script from the [PowerShell Gallery](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) or from the command line. +2. Navigate to the script and run it on the device when the device is either in Full OS or Audit Mode. + + ```powershell + md c:\HWID + Set-Location c:\HWID + Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force + Install-Script -Name Get-WindowsAutopilotInfo -Force + $env:Path += ";C:\Program Files\WindowsPowerShell\Scripts" + Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv + ``` + +If you are prompted to install the NuGet package, choose **Yes**. + +The script creates a csv file that contains the device information, including the complete 4K HH. The service facility would then use this 4K HH to reregister device as described in the next step. + +NOTE: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. + +Since the device was required to be in Full OS or Audit Mode to capture the 4K HH, the repair facility must reset the image back to a pre-OOBE state before returning it to the customer. One way this can be accomplished is by using the built-in reset feature in Windows, as follows: + +On the device, go to Settings > Update & Security > Recovery and click on Get started. Under Reset this PC, select Remove everything and Just remove my files. Finally, click on Reset. + +![reset](images/reset.png) + +However, it’s likely the repair facility won’t have access to Windows because they lack the user credentials to login, in which case they need to use other means to reimage the device, such as the [Deployment Image Servicing and Management tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#use-a-deployment-script-to-apply-your-image). + +### Reregister the repaired device using the new device ID + +If an OEM is not available to (or not willing to) reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. + +#### Reregister from Intune + +To reregister an Autopilot device from Intune, an IT Admin would: +1. Log into Intune +2. Navigate to Device enrollment > Windows enrollment > Devices > Import +3. Click the “import” button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). + +The following video provides a good overview of how to (re)register devices via MSfB. + + + +#### Reregister from MPC + +To reregister an Autopilot device from MPC, an OEM or CSP would: + +1. Log into MPC +2. Navigate to the Customer > Devices page and click the “Add devices” button to upload the csv file. + +![device](images/device2.png)
+![device](images/device2.png) + +In the case of reregistering a repaired device through MPC, the uploaded csv file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple were used, the Autopilot service would be unable to find a match in the Autopilot database, since no 4K HH info was ever previously submitted for this essentially “new” device, and the upload will fail, likely returning a ZtdDeviceNotFound error. So, again, only upload the 4K HH, not the Tuple or PKID. + +NOTE: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: + +![hash](images/hh.png) + +### Return the repaired device to the customer + +After completing the above steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. + +NOTE: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. + +NOTE: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. + +## Specific repair scenarios + +This section covers the most common repair scenarios, and their impact on Autopilot enablement. + +NOTES ON TEST RESULTS: + +- Scenarios below were tested using Intune only (no other MDMs were tested). +- In most test scenarios below, the repaired and reregistered device needed to go through OOBE again for Autopilot to be enabled. +- Motherboard replacement scenarios often result in lost data, so repair centers or customers should be reminded to backup data (if possible) prior to repair. +- In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. +- Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) + + +
ScenarioNot supported for Autopilot (Y/N)?
Yes = device will be reenabled for Autopilot successfully
No = after repair, device will NOT be enabled for Autopilot		Microsoft Recommendation +
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: + +1. Autopilot device is deregistered from the Autopilot program +2. The motherboard is replace +3. The device is reimaged (with BIOS info and DPK reinjected)* +4. A new Autopilot device ID (4K HH) is captured off the device +5. The repaired device is reregistered for the Autopilot program using the new device ID +6. The repaired device is reset to boot to OOBE +7. The repaired device is shipped back to the customer + +*It’s not necessary to reimage the device if the repair technician has access to the customer’s login credentials. It’s technically possible to do a successful MBR and Autopilot re-enablement without keys or certain BIOS info (e.g., serial #, model name, etc.), but doing so is only recommended for testing/educational purposes. + +
MBR when motherboard has a TPM chip (enabled) and only one onboard network card (that also gets replaced)Yes + +1. Deregister damaged device +2. Replace motherboard +3. Reimage device (to gain access), unless have access to customers’ login credentials +4. Write device info into BIOS +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR when motherboard has a TPM chip (enabled) and a second network card (or network interface) that is not replaced along with the motherboardNoThis scenario is not recommended, as it breaks the Autopilot experience, because the resulting Device ID will not be stable until after TPM attestation has completed, and even then registration may give incorrect results because of ambiguity with MAC Address resolution. +
MBR where the NIC card, HDD, and WLAN all remain the same after the repairYes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Reimage device (to gain access), unless have access to customers’ login credentials +4. Write old device info into BIOS (same s/n, model, etc.)* +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +*Note that for this and subsequent scenarios, rewriting old device info would not include the TPM 2.0 endorsement key, as the associated private key is locked to the TPM device + +
MBR where the NIC card remains the same, but the HDD and WLAN are replacedYes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Insert new HDD and WLAN +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR where the NIC card and WLAN remains the same, but the HDD is replacedYes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Insert new HDD +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that had NOT been Autopilot-enabled before.Yes + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Reimage device (to gain access), unless have access to customers’ login credentials +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that HAD been Autopilot-enabled before.Yes + +1. Deregister old device from which MB will be taken +2. Deregister damaged device (that you want to repair) +3. Replace motherboard in repair device with MB from other Autopilot device (with new RDPK preinjected in BIOS) +4. Reimage device (to gain access), unless have access to customers’ login credentials +5. Write old device info into BIOS (same s/n, model, etc.) +6. Capture new 4K HH +7. Reregister repaired device +8. Reset device back to OOBE +9. Go through Autopilot OOBE (customer) +10. Autopilot successfully enabled + +NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device. + +
BIOS info excluded from MBR deviceNoRepair facility does not have BIOS tool to write device info into BIOS after MBR. + +1. Deregister damaged device +2. Replace motherboard (BIOS does NOT contain device info) +3. Reimage and write DPK into image +4. Capture new 4K HH +5. Reregister repaired device +6. Create Autopilot profile for device +7. Go through Autopilot OOBE (customer) +8. Autopilot FAILS to recognize repaired device + +
MBR when there is no TPM chipYesThough we do not recommend enabling an Autopilot devices without a TPM chip (which is recommended for BitLocker encryption), it is possible to enable an Autopilot devices in “standard user” mode (but NOT Self-deploying mode) that does not have a TPM chip. In this case, you would: + +1. Deregister damaged device +2. Replace motherboard +3. Reimage device (to gain access), unless have access to customers’ login credentials +4. Write old device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reregister repaired device +7. Reset device back to OOBE +8. Go through Autopilot OOBE (customer) +9. Autopilot successfully enabled + +
New DPK written into image on repaired Autopilot device with a new MBYesRepair facility replaces normal MB on damaged device. MB does not contain any DPK in the BIOS. Repair facility writes DPK into image after MBR. + +1. Deregister damaged device +2. Replace motherboard – BIOS does NOT contain DPK info +3. Reimage device (to gain access), unless have access to customers’ login credentials +4. Write device info into BIOS (same s/n, model, etc.) +5. Capture new 4K HH +6. Reset or reimage device to pre-OOBE and write DPK into image +7. Reregister repaired device +8. Go through Autopilot OOBE +9. Autopilot successfully enabled + +
New Repair Product Key (RDPK)YesUsing a MB with a new RDPK preinjected results in a successful Autopilot refurbishment scenario. + +1. Deregister damaged device +2. Replace motherboard (with new RDPK preinjected in BIOS) +3. Reimage or rest image to pre-OOBE +4. Write device info into BIOS +5. Capture new 4K HH +6. Reregister repaired device +7. Reimage or reset image to pre-OOBE +8. Go through Autopilot OOBE +9. Autopilot successfully enabled + +
No Repair Product Key (RDPK) injectedNoThis scenario violates Microsoft policy and breaks the Windows Autopilot experience. +
Reimage damaged Autopilot device that was not deregistered prior to repairYes, but the device will still be associated with previous tenant ID, so should only be returned to same customer + +1. Reimage damaged device +2. Write DPK into image +3. Go through Autopilot OOBE +4. Autopilot successfully enabled (to previous tenant ID) + +
Disk replacement from a non-Autopilot device to an Autopilot deviceYes + +1. Do not deregister damaged device prior to repair +2. Replace HDD on damaged device +3. Reimage or reset image back to OOBE +4. Go through Autopilot OOBE (customer) +5. Autopilot successfully enabled (repaired device recognized as its previous self) + +
Disk replacement from one Autopilot device to another Autopilot deviceMaybeIf the device from which the HDD is taken was itself previously deregistered from Autopilot, then that HDD can be used in a repair device. But if the HDD was never previously deregistered from Autopilot before being used in a repaired device, the newly repaired device will not have the proper Autopilot experience. + +Assuming the used HDD was previously deregistered (before being used in this repair): + +1. Deregister damaged device +2. Replace HDD on damaged device using a HDD from another deregistered Autopilot device +3. Reimage or rest the repaired device back to a pre-OOBE state +4. Go through Autopilot OOBE (customer) +5. Autopilot successfully enabled + +
Third party network card replacement NoWhether from a non-Autopilot device to an Autopilot device, from one Autopilot device to another Autopilot device, or from an Autopilot device to a non-Autopilot device, any scenario where a 3rd party (not onboard) Network card is replaced will break the Autopilot experience, and is not recommended. +
A device repaired more than 3 timesNoAutopilot is not supported when a device is repeatedly repaired, so that whatever parts NOT replaced become associated with too many parts that have been replaced, which would make it difficult to uniquely identify that device in the future. +
Memory replacementYesReplacing the memory on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the memory. +
GPU replacementYesReplacing the GPU(s) on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the GPU. +
+ +NOTE: When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. + +NOTE: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: +- Memory (RAM or ROM) +- Power Supply +- Video Card +- Card Reader +- Sound card +- Expansion card +- Microphone +- Webcam +- Fan +- Heat sink +- CMOS battery + +NOTE: Other repair scenarios not yet tested and verified include: +- Daughterboard replacement +- CPU replacement +- Wifi replacement +- Ethernet replacement + +## FAQ + +| Question | Answer | +| --- | --- | +| If we have a tool that programs product information into the BIOS after the MBR, do we still need to submit a CBR report for the device to be Autopilot-capable? | No. Not if the in-house tool writes the minimum necessary information into the BIOS that the Autopilot program looks for to identify the device, as described earlier in this document. | +| What if only some components are replaced rather than the full motherboard? | While it’s true that some limited repairs do not prevent the Autopilot algorithm from successfully matching the post-repair device with the pre-repair device, it is best to ensure 100% success by going through the MBR steps above even for devices that only needed limited repairs. | +| How does a repair technician gain access to a broken device if they don’t have the customer’s login credentials? | The technician will have to reimage the device and use their own credentials during the repair process. | + +## Related topics + +[Device guidelines](autopilot-device-guidelines.md)
diff --git a/windows/deployment/windows-autopilot/images/device2.png b/windows/deployment/windows-autopilot/images/device2.png new file mode 100644 index 0000000000000000000000000000000000000000..6f7d1a5df0cf44390a307a38b34b423372662ac7 GIT binary patch literal 43998 zcmbT7Ra7KRx2AFT#%bK$rEzH7-QC^YoyOhWox&Xo=mr{hcXxLmzVAQh%*Cv^n7OEx z5xG`n?2O3V^}ey6icpXfM})(L0|5a+l#~!r0s#SY1pxsSg#r6I0|_0?`gH(xRuUHm zsh#+K{MCUl7m^hM0jZCJe=~&q>ccunXgY&{ApQR513F}1ZUO>QmIG;k zzSt4K>58SLwPs0OLJwKl#uGv&;m`_0j1n9|l`4ov5)y(!dLf+M*4g<=amv%e{W@WT z3D<=6Le<_Hf4dIsW;Kr;KfCa`ot!9T!+`(`6eNnrLcF8>x5Y?sqz>~>OOJO7fbvhP z%LCm{Hdv78t8)|NF$VB~*$eGAs%JvL^9dFrLiu|I`hvmIBnT8HirB$7%rBD1XJqe3Bz-FUL~oC#W?A!4A=@Cladc?$NQD08>f0|S0FZwMDnZ{)U-SK(0x2%?IR zZ9%5nK!tA7xt%2?+}%vw11Eqf%W_+Apg;#E;VJE{_jB!}yGt_{#3`IRF?VD5&k!q- zUq6RFIE56hlu+UVuG{|3+Asb5cdCXP-*L^09;WY(8wdSM4z-C<45=au)!J*yL;L{gRW48lah_kkgO(3jc~k;2IFF3~BF<->rY3P`L6m=G{G_muFGgTWGM^;*8~8gtW%d)^ZF8WuWp*D=yQ&fa8Pw9AJl z6V0?~40-_9<+6wgQl{+LO>~FzvyOdf_3Fh)2AglcLb78c@x;Oxsx=x^?t5!~3FivV zDDN~IA1_|^ybo9FFXr$&eq6;~3KVy9S{?viUG180pvIAKoKVmU+}W@W4-WSC4@ZlL zDE9|T;2oRC%DSNb>vr7VDrH_>-DQ$@k(Cdj(UJd(bf>w0G^{eeO&pW}>6$K+hF_$* z{0Nu_8A`PKEBKl(vX}*Gn;g2%{eDwdG!+p)-;BkHGb$|?blIvqnTr1@dC!x{E^;0i zUmf$aA z_F1XsKkPZq{yz0gz`~5n?)gJq8WOrgMon|GK*+Om81I!TBb5l&(Y%rkP}2@nJj!5D z9-_MgoIv01EryR5`1)>iN`YM>e{u>r`l&}Ou1`gVErd5UHQnDg<~l{(X8VyJ=f2J_ z3Yh#3(+!{G+K92k6~w^EO}mJeR^BX{*2A+*TB@cB`pQSdTbIwS7cKpMY^xtr)#O7t zZ?NRinRWZD7OB(Y zMxe21dxC+xWA;5R!-lZw>=TEv46pCu$H2-^tfm7l%joQm&h*f2Dh3kIgv^my;EZ*G zRHrh2S+w4k@(Mj>l*YV}z)TOz9o07p*!0eiML~x`AkBuvX76tSGBz$10%D;L)Mr)O zx6e1G$J^%=GHqA!9{JaAm(e+{3w%)ub6x~q4Yj^JL1NzC)y7g)g)m=vH7o#lxcEc6 z(K|%swtJp+(4YSSi*(aSY0ydcy47E zv<}(n_iVIbm`0#NMZvXQiZ|rn%u19J(*><7dU;y>(V! z$Yh{`I3te}Cy2viW#0!iVYkqahwfpudf7;?$>8D&DthWNxpIxKEFVw2z3dm$to8HN z%-D-ZpTe}`Ea(2=E@t_>Tt>`YkN2_DlcSqO)4u+2Ev~04ca5C5!#-Cri`Vb%(z?|~ zd3`r!VJhC`x+=~bO4SJlVF0#?Z0)7YzHD5xOVV|{0f*I}<#re=!S|xmty+DfMcwyy zveA$ImY(8CxAi`yOzzpOIdY_O6ZmR4A6WdtpCB=pV8e4#)J`yS^+FH3DcU5ze`?bXFLTG78cfW zxx}Rh0$n0>Z0FT6zqmYz0l%8`Ahm>ylI%}Pi?hhu!CH0n*xj4l0ih++pvC046r`-u z&B$?A`2NhrOJZ?I$g3qJK7x*-81b=fg;aZ9a(uRq+G^OZt;aSLm_0_1F#W#aCTf9| zzE3^8;P71!Z%-=+7lLoZ4new@1m96~{!qZUxvSQ7nmfXSo3L~B|BXX#YV1DP!%$lv zII|yqbbbV!*76Ie`847$-lzm~i7js)dET*FhIol=+3U zM+vd4-+6F?H@h@S?0_z$XeM1>=Ivn0`OQQcJJL<9WV501K4t`G>-SLj=lt7Gpq#+j zgLt7NS}dhMRH(g-9*U0mJ@qkdr;E#b^5iC1DBFs-0AQU^e>@R&e8}Gqx!S*TBt#BY zU2HB~#w$il+3Pn`Wq3lxldBtzY;?aGV zKRK<3&$_2UTnn6BNk~6_x&Fs&Pkh=eKkj>qK66qf@|Qq~yF~zkF$t4lzy}g}&Ve%s z*Z%^E;w2!&is)t0fG8n}5V?LtMNLMDEK#Zup#vj69nUsCJ%!4j|L-! zK&zA>N&cKm*@=_;cxsG-iIgTQ46iEhBCJR8`+TuK6n#+@E7cVc!?EAfNh4{InX_x( zhpv0r_*(&-%=_G3H1555+Q%K|$}sFiR`Gt#QXM|eZ*J-}9Lh4d?_5_+uNIhfpj#?s zyBAZUL~$tyujM5#jd}HYczeF}|FEmAHBMC#e#+H+=ZJZDc{TRW6!=WLEDL}m98;M% z#$XfIk^!N$_hoy0B!|a(eL5k$x#7l)nPo1262O4|_xTceg)UN0-iY z7Bw$tlKHdDvLtZiRtR2Sk6JAOzPoC@{U_l5Z#S+hSxJnd&3{d@qwo%=EbMFN;Za6S zx-DPefTefC@g4XAey}gELi264`us>EM@OdhSvzT>N`ZWJxW zJ*OAa_OoAh?0uW*+NCv4YTuE{ zuLrgB;&9*h)AVCslyZO3_?lrXQ;;4H(v}6Lu$vWV=x?mpZ}^-SS;lI*Oo_W!_5)&% zWrTiiRoCZ_|A{Jydsi!?zgTfmcw52C^I^6^Kk~Z!>)uBrd;CipcOkp}elg-E`Y~oY z$)C&UVpaa{rO?l>ncDp~ApfI9KpYQuDv$xCG zUb?n!mxbwm{CY1GezMnh5cW-dn|Mr1)_vENwr5H$h-`ttWJkNsaKU?)6!nKMwcT$RRO!rAltKMME; z`JLM`OV!p{Sy@@vDPa91BUyLz$t6}Dl&QR$@$w;#2;lR2tBVOLyY9l>4d`Lo*ONNl zI@c=Xv%L0h;@o_-y_`S}=09xFj&751th*DV`k2UJQ6HUf z+s-SpC~2ql{QdV8!*5#nr(C^NkWdf`D6;`;^6>~y=w_thx%tbbJGA9X)& zD0_V_rnmI1j+wZREHehCq);rAD@`J|ns$u6+?@9fI&G|Z!}^ekP`eEYC?!)pdEE=8 z%B1?9Z)HV-{jm3UBy$DgBSJ@xAfG+wD~Q$nb1KCJaUzG6$Bv0iU_4Pc-lhLxB=dFEY3C`Kb|4 z_AKD9{^9#?xV)|UuU0z~78W+p<<;#3ir3YX=)-naMXVn{@aw{AnH=X%4C_y9>duv6 z&8o;6jdyv2^JR)KxBFj4_l%&22_aL`shWI|_n!jA*r#?CVg%QH{$S?wodoOcpUIwl z;)-BljJJ#RFk>p!A8|zW9F)dI$z_BU{?W`pYy6_2 z;qe-cA1$| zzg#=^PrS)P^(OZ7UoCDvs6TrK?T>ff?hmzS&|pI5AX_2gcudbwb?7mXbLAz7m##dF zXfWZRl+o(1BIt=wLEmA@jXWnLFcORut`41(RD@mM)UlqFrh)?$9oOCTGj^hdQV@_J zCg5+-AmacM7JbYqyPUj+8Fm5Hff^B%F2GGP6gE5sD<(eQ`GjobR=Lkag1X6rI7) zkyuA_u{ zIe&@!ka#(Ctv-z0Dvn>YZR3)8(=UxXU$_i7A?1rJw*(I;p71xzD)D4xw;1E4v=SNg zog8-fxgfUQKd(Yb6KHM`84Pd@;)JW^xL?!|Ql%m3#W`@rIS}+n5ajHybV)Gg!T{|~ z)*x5{&j*whSQqufl7C1BhOQDGIjHgfI_f!+-x*pf339SeJ29RR>VO+lhZV*n*BtF3 z_r6ln7wno%7{5TZ3fnEL1$CUaI=t?{X%vl8KdFwYg^G^k6~}v1<4FI0i~@BwbfY6wAylIX=%&sSbYxVo?4jRY#mr9#Dx3sM7T1ZcfSnM5 zjq0w_i?NbX>)uMmB?O`>XJ%O|5gBm8XxP2+@V(F)=OLU(qT$c$6Ds&St(bw6HX=y_ ziUTI0Vw#j)$sO1@7Igfcd-<6w2eYLcyg}74+*QU# zHr0+a73DXDF{;9N#H3z9YsfZ=s>*uy$xFc_zfP>P+}7G0En7!k*2~Vl`&NU{)k1VO zyX90(S0}7-a+H$KZR}u>&T_%EAn7Ar!qE|zbe%^n#QN~YZmT1O(5~S9Ru3Q6&v;vD zGuvI+&G7u6{T||mVtii7@fR@}yM5kQh?~b(V>3BPk>w`Ima|=KFH2qx>U$?w&yt51 zbouErsww&Y-i07D?CaEX#MzR*INRqk&onl!berBc-1^PWB^YybSYB=xwv5ls?H#RT z^-hv7tPk}YKy!7RKxa4NhU!XU5?shcM4wIaly=pG&?hn9*mq>P+_Bi@F0NIVI?ep) z2*=KbfRsdl(3u^!t7cj$Q6GRlo$Nv@R;I`CGDgH zwhVDrR94t5vP&E6kVU9#+c?;PeO~F!Nin#RI6nWNfzRhY z%|U3s_(LmKK~;6N#oOOSC=I&?=;Shy?inSg56r^9aPOyscQLU1^5xW7BHkqUvB8{^>@m`DFy|vc)L}0xY$3Q zTmR1MLdV{-e@cnl;X+Dn)2V}!OIb43CWMC&Qk>e7-}gtQiX?s;k}Cfo)J%asx*WD* z(yR4A0w(q|e9OVh$cbBr#QoddH8+x(m>FX2eVc8MxSM;MGV6}lOMw{OQVT#iwj=~0nL|Tp>Unp zPlm1_;F*g2_3fQO3&K1&aU#0v_1-8$cDwWO2Z(pzxBBK#dw=_uk7ZJNpR?L?%PbTc z*RA{eYp;u}Jbv{bAZWa$jSm+*^IO%DIf_!k_;c0ewF*c%Wo;@Hp7f7M->0Yv;)CFh z3Cv{x<}5>ARny>8&eG?1) z94^YGD}32|x~$plG$mVg%d&Go&09Px@?NO}KckbJdR-dWFpsuVgl?fW?cX zJDsVpHpE~l6!N_-Z47&S3PM_?)v`pqU+5UoM8E;8{r)Irt;43a<;c7)O0cK*80U+< z=q6BLu$LEdF-@-#Sfou3?XYg&=L|g}oG_Dceq$uK21$9ni;)Xu+wrwb>(Q_8il!&^ zc9J9DT8JDb!Eep!P65kgjl3vlY?~oXD*Zvge-V$kF`;BOv7BRG#e;i?oMm?ZH{PcT z@>KOZJl9#j1D+< zN`KFw0VqmxI_cWxIP|UQd=yw(X*k0O)!atl6|SS4DXADd096K6FB9peJG1Q0)7VM= zXYKCHHt|fL)&_HNWVo%g<~$q1D~V~;B`#a?1T|rOmHeb;PZJToJSGexpRn@Oz}2V-wUj5hD<3M9U!1+Ol$2 zdm#_s(0WJu9G-8}Z?Zx`PWx>Jd?Q&Sf&Yax4ISia!eQGZ-ZopXFroIZ0 z*Z&kqcpWOaB;_3i_(1GC&2~r6&v8)E(%Ng8qwCKjWLw8 zmhCJg&>9$XQv+hd%lS8~p!nlCY$NcixDub*EBPVTYh1=lW}w-RaTR(OBvPhG;voQY zx~xXkFfiun@i5QZ5c!|s9PCDOXvMTuRQxn6jq)m<7E;mOkIy)wsuLztwNJM^+6o9; ze{^4zsb;APVr6k&@VJ-@jyZ8P@|6a+U6%Nhr%;!aVdGk;uq9_?eXml=rtKZxU+54O zpsK2@EHAHFY52_?)d34T@?)G@T%AF{o^WR2c1w>+k^@4oiT9EkxGe5uUG%+%aegl} z%Wg60RrR}ZH+6>|)z1?hhO=5R6S5UE?+>E%=vrkDd*80y2)XdLo18sPZoN&-!KC|Q z-R9dXaLS!GyaVml^72Z(+U*2WesTHNV&!=W-n;0Z7CQ4a@L0CS+lTlmlRhUC z0>k!BZ9P0iET40Cu%~|7|MzVu17WoNUET=e6}te?G;0!hrL~)czp$m>kXEd zfw%PF?COi<$w4BK$z-Qz55E8t^}H9@)pbOYPM0=MmfKo&Lo_raRjIf<4TL&rb<%d1 zP7*f2ON&G2(eYs}VD;Z?7Zmw5uj3{uj-P`JJ-+MHpj|}8P1h@x%{W^Yi6*)Ge%6#H zJC-O)OXjXZ<9x^-Gu5(WQJvlsFMht!1G!IjN)%@-T>jimu$OY}9&a6#Z5u?8_zy2x zmz zhwdYmQ^K^>v)S&gj-Pg|brX||m&+~J5hg}Q@7d=0Jt$CM$Ywp_&goCO=?#*(w7*-S z4tq78*{omuGBHWLb!$ww@|3o8ugujnNR(M~dsxJ%N>){Awe3#P3QjOF4yb7Vz~5T@ zMuYiiZHqlFr$PV@H|w?;6CeR$o%&X%>a zmt&(San=b-T&|1hp^^>PhN-%iM$I__RQhW63ti+miavAgA9ox9RYG6_JM(%_wF45G zDjwnvjZBmkyB0KQl_DeDv@b1UjcqaS)@#RGE)@F)CyTi18^vL2ZWgohTYm+jC6#&%#3(JLo>gb;5_V?au)}u25XjPCz|axY6l8uq9-IK0YW51S2_ef= z@(mT>RX{9{evhcM`pAq}^Ora+{3uZ+Lkl2Q;8%tI4N0WBPnwT0k2wH?(}(bRP&8{A(?JKDsS%=iKP@lBU4N9x`*&JQd)G4?iFzYhB;eV@iFIqm zE!pswl5{ZPq%X>$bqp^K=fn?ej?dh6N2p42kTw@nO&d#!H82G+* zl!D=XxYk8hf%?{g`lke)zr~DdV9UnY1cQWX>S)gyF2FH5sDUs1*YDN|hY7dt7=Es- zt?-kUaCMz$*gw}Hpvv0+tWKz31W9A^?!^||FwFCq-pryvQXk9cRoTrx{Jrl=R`)+W zo6uct>W!j!JcR^+owP6wS2=cd0m=*Bb}npFkXcEI>|1>Yk>4tfT{!AXhF+WMbu~`6 z+yX+hT`c!g(P(~S3|UvS4X9u)<+UQJbQwyZUGsJHH(qTge*~bW9|C@zLpyKoGmUK^-O-1 z=hh!fa6UdhU*B=|%E1yD#fVwOA&?Wjs5;KogCik_(B&jc>%$A!IqjqNQ6i-ec6y1i zA~{`H*)-TpIu0&Qev(nIPl2~gl}!)TP2L8bk5r2KRkOu+rwkMIpc}+IftxQ4l=_<2 z?vRUgAd%=A!EauD>!Dk3HZs&FEpODE8D72j_+hGKc?lVFs=1C7c8*BgUuHr+13C$8z=iLM17 zh68e7Je>V9CyjZpT0h<*lJI=W#iPeTwxfEd%)L-Y-=AByS&%sz{6p2hPb^$Pv@EyV ze@~@nK5fYgFD)%AyNa?P*qQb*jW}X8h$RzO+X4`RB`zABJ{zOhmwlDXX1pZ3n&@IZ zz)V$Jp{(&e)&Ua=(AU0qJIU@b0o0q`W+GBR%AlXuIJA`~t;^M&HcWnB?(i(SA&-mZ zdVE&~X56oq^5v5I!gP>cwC5{M(wk>Q-~PuK)N0@m@Rs^+$Nw}dlOO_ty(^jZ zlhw(;7JmdA{A9_!e5OFn1XNYp9pkCPQc1)xo+L1jxY-DtWNB)q?)-3lM!S@9lU6e^ z@{~1wIlo=Nf;MRY8{Ivm`!a3QD;hk_-;f|vQbdP2kuz8C;Y%u7vL?e7^!?RdHtLzA z%HFj6+(Ug~p4K3+8CxgMYLM7<-PW4&3riasYU4u5*EyDr_f!=%HPg}b=Z0~!(VoZ# z(+TR3Mk*NE{SA%>M=g;jVG{d!pm?gYt7vGGE{@)sJk7reacp!JR2wU5C~7JtItoOM zJbT$m zC*a{{=&viF*%~_DY&WKo$n9s4X38-eFpi#|#d2+4qTW_bSlF~V0~=_5OL|_EZ{b!T z*tZup_OX`Wc<$lgEB)y)ZkQdRhC;yI_I=J?^xX>E(ZcWO z$~IMNi5QvHzVheHTAHR{JR2?yP3$>dt!SLGLS5Xu9(QwP&Y00N=ML2!~WEEf6o=`>Hh2mn( z7DZD*RVQ0ngLNvw&w8|v_J``0LaC`5JO5it3>jo!*}>S7p>Ud1mJ!{-q;?)N$jlLL zQqt+nt7%tdCvFF~r>n29Wo$2a3x>so3bS7{F$4HbNG%dfhCIybhKoHg?h$pIrHpi4a38zPkd&SYFH? znASAuiP%$Ktl}l_o@Q!b>R*4}k`xx2f>AF=L#u9oN@f}zq)mB;Af5U0WLvM*`7pSr zrixyIotZ_(c`YG?=&`%VH`Xqgw;^^YzYeA@0KI@M)`CLMoZ1<~kP>iAzSc6;zC@NR z)v2T!hgYiBx(&CVkez9;{|wKYBuz^@bB06^Yl&fiNE}v$+@vswVbYe%YvK#tReH>y zHb&38q=eIYwIFqfT~{+UY4?5&kr8cdql$H0SMxVlS#@O>9V>NJl*M0I+0m*R zfK%fNrqVj5+nb=*(9hsR%WK=iLJigKpb-MlV8*WfO{3f(6<7G1(To%uLl?m;TLPu^ zz75N1k498;&O1W)Q`6CRTN1hHW>YXdsR6Q6Y4UEb7sS$7PnXV=B^1+bC9hOJ(X zO|yc4iS^St)D=M$H;0;To}D8!In_l*K3X}KjsR`E0x1p zuUJvA46e=fvo2rkPCoDXvpj}@`J!K4+BE*>T%ErAg{(c_LD8H%fg}4WA&NFGHoji0 zLx&9&6FDr*!T>uv(IeN)!8GAfFA<5!7~_%B?S1S(_7Gk5S*Ifkh;1yjiB;E>Sa_uz z**GiD;M0Ty?*r%@;dYqoA%@;3{h=>N2F&)h?ni~BV|QI}hmq}glR!m*{Xa*oCf zqs0UQNS5ok&B-1O+9Q@em$d^=H7uQZc&EZS-S?5cGEoZakt?b4V!OkK6wHk{dr(3( zMf>6NYN;z`YI&DQ+Y1?|x|x}U=>;%bhCd3e3_tvk4$BG7-nrU;ZgAF@jbKT6g`biN`aN_Y8C9H?HxFv9wXjW&oGkI6P9D&`!0pXYcIycKpnh~}Woc!(T)Z&4 zINb6FL>EyOFD@YaPbd4kihqe@Zf52J``Azt2=n^n7z%>(#f0y(W}pfChWsR>S9N0a z84VJwbaaPpL51f+ah2mI2H7rGuZ%2G40ve7%-VA6H4K;#`6y4jdIwg^PXAP|0 z_ZnKx%f= z{$ZE)c@a|{6X`C0E6n>+FPMmy&eitRdqqZQ$-;tM4#)i)yjx+pvF=|tps20PKX}>W zxJ`u3r2d?9(@cu}wATmo{*IEHvXvxHE?>;XcSqq7ZlU=@)e#!_idib67gtqcwHVqK zZm!e{_f+#E)u2@#4`PA0ZGx11pdMCnd5&R}_y;2DgyjH{uUwB6(gt#11oiUcPn@j| z$+0fq^|d()xGuuweb_^JD~lX{LPcUAE9050!)ReHIX1*z&4A$tXo_a7<4w7 zw6P3(Z|C~oCP$`F(g@ygX(+6mRp>_Xc%a(TY3^c&_o$4r^eksoCcPZsmosu{Pi;X9 zJX*I)FH)uk&-8vc-05Fn&QD*`RpnGy$}Uh9`DoJV z6`YzK5XPKn8`fQ^xD-ZzaX7&_t{X{=%%#G#34c-fxtytx(N-cRwzz>ehcR~b0(XNa=IGK7Sqq?H3o*4q4#afb=wZPVS1y8a+zS;C z5^$S>XjOpgwv-6F@>*(_<9rDmQrL|nYU_%@X|oSE&q3tPaW7be#t0SiMp2RG;=Jd5 ztLa4yf8)5gV~Vda zYUn$*fm7Qr7)uG21(u1+J>Cm-@Wa<}qlh}*CByTNc)xc2T|A};!M~?;EUL#ItC+2KlZLBmQ!eGhH;B4=$Mc=c%)sq<^uu!pydtWbBHlty#>zP<8Od~Ng zS)%>LzY6yRp=9lbt)vZ^gx(&AH)z5nInROHhRAt%;cppbuPJfcB9__nFF7w2DYECb z=f{2vG~x`H$S@Hv-c@nf7%st0DVP4|e>jqQTXJh()0%to3iTP$_dIYbEZWst-4_qd zP1IT)@DdjYrYDb|egnt=n%1|LuYV}E78^iTO?kjymrKIL7X}yWs#uMjvW{GFT3yB_ zA7?rz&K4VEs10wi30^9>TX%Uncp7wMC(>V$eu*StS|hyO20EeYEG3*ZSue`*z0!$D z1b`B(Lt=lf2KeyG`oCKGw379^% z@bn6QDZu0WxyC5gO41ha^RcV2+c*3rR=Ko-{=1O-af!CO^-CMfeKyk+A=` z$q}y7KtUow=U~Q-@$%p0`rxP@@(aU|Jc&GxU=)DQhX0QG6$2s&PJ|>vgANro0JsOh z%iz=(*z*t1|8E)k|Nr95E`At|RXNp73}LB>kwImFk15MImKiI>MUg>is15AD^+vCp z^fvKdD;Y7kjy#0Y?M^W+pl78mF~@bL>QllwqyHZkMJBsFXVz8X=;1 z;J!LP4N8I%H8n<*!be_<(&w{kU_h_O8s%snM!xnn>qpd)j|>&2@f9%hgJsD1NtIW@ z!()68;IEx03teW1Gfbrie9DSQQhVM<3Q(nPl`+2gbM4KTR@Na`FwOrouAz5|Q&$Ck z*d>kk9E12%@hZqrRirkD$#7@ya^fYKIx-h(L1T3ci&pIeA)+Z~_4PFbc30ew!|0DW z=@9)Ue)c>iIWw>($wCT%7s{6K7CFzFypeh5j3Yk1$7t9z@4~EC94Pw!ygKA}^8iiS zqt`sdGv@d`=HWmJ{|mKp6$=$p=04J{D2EOd%sp3!5MQq0Z&}gOTG3Kpr}1u+Uqbrn zSt1GRckSwvza&1Ahe0)B)8Rc%QIZ-+EN=rANQ8|IefXf-uG^lfIw`1lC+}*|_5J$0 zA9)1BZu6|ARFRBQM=uTOs^N_|8}9jfQSGt;1^^ykwrG5=E8>RdH?J-4Ebd-RE+~-S z=HswQ()m0iG6)Mk@1d2d4R@) z<1F^^(`bh&(FScO@MKNRDJ3SG;Z_2LUbjRH?hW|9a4wGyebnexOY^$JYH=%|;`E&Wjt(xc!I>&NB!!jEM~JSjH9F|$6>%Dm*Vav% zr$M)PFAAutioMqOXB|CxT9EiRc*qQ|H|O=6Y2R29$!fo6$}4+4ir8eub56}KkN*Bc zR&?hGbkgok?(^elMxeMo`;aRuVzq3V=5C2N*Ig4}@lg`Fw5hbV!-|-GFq)o;Zpj%33bf-l-kh7JM?qO%*X@=ecv>?3 z`X#ng$D6M!@V;6CgX*a01M&T?qX-e$b;7$2-~tNhUp}7WbZ^~KqHb}C<;xx`4iA&- zByTlzH0*+RaB2LRj|z_g_qEr+#nv+CWP%CWx|{dJ#=*tby`r_kLLt$!&&Y}?2n@7z za8fn3lQYo>nnw&zKN&0p0j>}kQh)5Kb+?O?CaDMoP!>J4&ZRS zKvbcSZe4|%c!lSzm>`fQPxy9_R|z7A`tYo~CS5aYu}QDVdr!L3ly|1N)jej{?(1^Q z6O3nJf7SwfiuxC=rXth)8+U*nBZF_A*z2B@Qyc=V{@b!QYcjp`O_%!QhfQ4{BliVz zGc%0VImeA`i7dBY#s{=T(_<4Ke1#J1s!B>F!73D)R7ds`$XGuuv7GOQ0ViAL43GFu zr^%RA4n6z^E}cTA;T|r;nJh`L-+L_rq~AGDr{5ReYrM*$mUt}BR^pgO+9BEXwI8cm zE;Cl{&VBWY7fGBfk~C(nj>c3*uvhww8iz_>c^915cGt`;eHec4Weozi%QbztETA-AvX~Ik6pkilvadFcoy*@Jr%%19@<}>X? zOn000K7a6Q=sguNW`f7c0C-rKo(<@5Nt*tmrur1AY#q-JzrKY0^kN7?Zw%KYBW|94 zukaLQ6C0O!f2WdPi^ld%=P59L@P#soM*SDHi&lMw3aB->NZtguG>+ySxnz3&O9#wvc7> z);`{N^!;yE?6H(eG`3SwFM%HiSwLN>Z(pP$4yV|u-9gR$uEnKK$su~WekNwJju@{S zv_`Uz-g8WAPnQ~5ay<(cP#mwu>NoTNTFZbNIj*gc56`~3`nbGhll>*;L$eyB{nL%^ z3TIW9(g=4O_y&((*)%`DA9+(9(WKfw<;p2(jWDk1PD>H(5N-GMLouM|+3ckadBbz} zRhiQP7RUC6R@Sn?RVA(;z>2kKI8%Nr&?Dz<9KOHa-yf9K;cN*2mR;sep4c_KfuhqJGXGbe8 zBK0SRy7iIp+VpQRNuVH!NRjOXbsj8unKtT%gYQ7Y5pEa5n%i|tmhT*_Ag+1mFj^+>g)mA{tlFw?Tp@MyYXV(}Y}u|^=)8l*>K_Z}VJ zV^Z-u(5Azs{y@AnJm{l;A*?vm4$Ggg=cD7CIrm~SJ#M3i4L8+8abCu)-H#`ErEhLb z$;rb@s-W^u^Sp&fY&FO~5K|{R2A{Rg!Qj)BE3#@moaew!Ue(2Oqb)hMjaQ0Yac+hR zLt;<`zV;HF5^qix-k6+LjG}htq~QAe zm&LxQJrR?bRlKYrC-Y-_zC;%Nc1;SMwP-^2k3EIRai(ht=79gU=ht0>_{M!}heJWC zjU@jR@Niq}q$5^{0hD{++Ram~s^A$R;~B!#uZm>9--$=!$*f)R;wR28? zKbzstf>B_wjmEuRF!q~AvaUp&2g4vJEM`;sbX(93Cf^d?{arsR^L?%A`16w!9OB05 z>))U|*kUjxU}nu9u|HccR1bexXluPVLn!eVEl8?2m#d?@&Y%1ppo>P|!X_{Tj*wRo zo?2gZ6tub?LIG{OM2nv(hS=&+pqJ}3eu*t>Trjs!rbRk5>0PK-bBsCu?sMR0$5mPZ8=e93L!}?8&#Z+ibFE4Pw(oLf%~@*{)`vEfup!&A&`ZLUfbTyd3de zN!|C@#>2$j%HMl_-?duU_q=YuUiREh@LcwMZtzF}fc|4uQWQVwT7Ysz@0m;BR;|(!kjCM5tPB36}GjT22e86QP*I z4v;!)pe1*(WCGcy*(prsOn9ZoGnJg6JP?syi&)Z)(5I2C`V?WWh=$5xky98_#cpsp1 z7=xiJV#EO@ovo&lrg?7n%Vm|+3wb?92k^V2aT3e4U_`=2Up0r9@wa=P$ODm9-PN}& ztHQ-9985VBcyh#=2xGae0>1DKCWsor{0RD-^!c3M`qiR z$=I#8T)&_AHXSG=kJbSk8VhdnfVi%w=d7k-=h*e@JKi2UD5|#;bDmt8RCn!j<9Lc( zrrWzawl(&ghY546ekq~f2UDc>(H^g(^5QzNr@Lu7c`OI_sHFV*hDl&yH@v3X7laOv z6EUuv;CO&ZbAFHh2z2P9PpAf-_k5{{^g_yYxBk^8z+zT?NdroeDqz||dt$@EeJT%h ztm3Xl9#)^i?g#V3&y}*x+~!X0sZlB3?g%lwdflOg*;(D)G-`l9)9}6@A+;S}oy%TU zk=clULNUk_`_0=VTSL`gTvp#Ep)a ziK)M;+L_ASxpVEc-uGEeulq@jRP$W+fMzk#7WX_j1q;2v7WmmIW83~`Q+D6`%i{*O#LDr@pc?m_tcmBSH zMz0RL?QgV%)a$*MZ^!~TZkOP9*ob|j{Bu@!FBbuqgCZ&RPduHJrdMsqJ%%Un-c#;h zANyg5^kPdvOBvh(%!ERx#aQTDJr|Py>-lNZ($;2e(bdf(a*yu*Z)grj^WuqjCn7p9 z^{%@s>c(x6^mRdy2^p#YWa@f}L0b)D{WiYy#bnFJAz4?VKyJt-R}ftdI{fvu^I-Df z^dMnfCDHONib%ruGR@h1X`8L3u=MaxmlM&HR?0lhc54|RkL#{>Da~K?tGk}vE)3Bt zh7vTI`nRN*om!`f$8E5+&a~5)XC*`5)7xGzGW00q`{6p_@WXerC zIks8rxgTb0b?cPk>I8@&5m(R|-ccWWJFK@#5>Om@zj=htD3N|e9h8)t?xTC;e|w(; z%FRv2JPT+cT~^;eM>)j5I!`?}7X;g+)eCBiDZ_lGLB_v&hmm#F$5ecP*IFU881|Fl z=eQf9GMV%?t^Zz8IojeW>u8H?hzz4%I#ItT>C5~ut?u}GGlArL-Jikp?T&b(R=$_z zB1d`NHg!|0<}@g3wW;^f(a~)++HVGPBZN$d7{CV#xe_r7RyGz^!QYoy`h-~^cgS!6 z1)GbjtK-|(-1JBpQ|3Ax;DB*%VS4mHSgz(i;MS@V6lCVeACfeb2E#xt1DC6 z&davYDbG;I3Bx9znICZs2+!L54UOpAH;xfVCTPoY=W}EBJ)L@F?y? znPN6R*x2ZSJos2Kqo(68JHh_kdZE%6)?kfi=E1@r9|33JLrQ}#FPOO#Vc^pk*kb`( z;E6J@KjNb>Msa8`L)`S81tZUxeX zl15-Ci_Zgb12HOk@RB^Fqa*uQjW`pi3`=n&mE`BlnQ2=n@0{`W#Ug8r6umo?tMg1|hG8-?M*hzoUQ; z5`sZrAosF3>$oTQD(&|FE;F_UUUk2?6qJUZC=(}Zl2Ob{JoU&PbkbnZxl59(fiyVp z!AgJ#{Qi))5TS60scSkEdLm&Ij8}+sLI$u8XyLRG>_80RV-tDkR+XY!FyB}PGDACE1&%WHxAv_@=@5)3&y=3n}h9pdcXb!wRwxzQ^ zCUe^btf4~TnHDc@-$MpWZ*Lm{i3+GAuB;(%PkZ52rZ0RI{L;qq;U7~`Az6RDUc5as ztA}05{F@kkMR|>{Qc1+SS7{%yPkPT)}5tK5V z7$1jF$wKn#OQli8V$}Q2%>%N(Q|xH_ACy3jRWnM(CMZh%W&nP>`Vgsy?Z2p&mu@$l z;Squzq<&>88}KAAH2nAq%1MumkFdRh7I?^jMu>`pT(;RYmodKPD!k!9Ar^cpp+a9s zHIn7-*1EiPkHtp=Z5!YNn;Lmpj5TMj~S1jKG0HjSGUovQ5Ye%*vSLV!N>DxCEaV;d{Wn*Kb zYt0LTb1Y_CvUw^(?_XK4y9+DtJY0sv0&y-{IoQ0Y$IM)pTALf%U^6(Tm6ryDr_akp zrW<}VWku}jX#_}W+Su4>TbUssV zs0uoGAOLOhNVP4V7rbs35MV-MuSYgue7&K%?ad<;Pjgkay!RE9iCQ_H`c?}R@>qU! zrp(T%xZj8N9BSv4bRsW zJByh2xkfdRzXS)ZS0RVT>2HNqy zvvnitZCroPecyqQYyqqmS|!e|xfwpp_XIQ6i>)3s`EJrKyhR`r@_GK5-oXRox5d~Q zs7Nvl^StuU<8hmm$3bV7 z>W4*i9;e-PE-*qdCrj57U(frsW~S$}Ad_yuFQtb+!B%tcu3?whe;vL|WT0g)g1>K& z98HB1oeC#s{Z3tzp$FJM1m2s?B8Kyx7)ejmjJhd1+#%SKnV$FR?%|%c=Hb)nUaP)^F== zOaesp)<@D}lpRl}xe+VprEq)0aWH|Q&g-Gl&Zwa8WE#dpz#Xd5F5xStDdr${;0U6! z=kPg!f9JUiD(uG>YVV4uN2gQ(A5;|%bJ`mY3ZRtFe=g*j-YBJ+D_6i_bBfT032xQI zg52OwoLeO_?UFu{Neb0=HX7THGRj8|&wq9d9R7D|pJ)n95>c}Yc%6rb%*n6ONy^vE zWw)PoXnh9SnYVBO0r|~*X6ggU(K>7kzkfTgd6EVb7}cAteHq@R#9B;mvt8t#NQBNR z+_K$ko4^)Pf?G*+R|W=_SC12v*x?}`Q{KB%S`)6N&oQE)h$$+Uj-^9r#Mj*~)xB7x zI-xvbT+yL1tpetT6m#p>NTI$hsWn`&Qq^jw3@POEcn#&I4J+g=EC|>G&j(KI<_kET z)>{$o^SJ#aG}msg7X(uM_A-cIR5vPBE9$n~{`~3>kyOl`<*n{?d1FecP{@9rP+UW@ z`htU-D^M~FelLDe|3AjRk!J;@-iL2l0wP2)uH$@o!-6$I-=WiDxk-p=_vH@ z-42FB;rKLfqq@s@C{)^I{=R_6N$<2~v$7Vi=fiumg>3ct`Po8|K>Ka{H__p14SG@x zLPxNDp3)OYx2bB;!jJ=S`5Lj6*648^dbRc5uouaR^E|%;bm=KzIRIcF{AaD@4-iKQ zRYn1oXcrlDC}Ei0;lrpm$uYJIgRmt3yfPs*x@&18&% z*-4{ymwC846P6VDfXt5^k7~K0-)kIphrrzPo?kgJ<*`s-&)OV%c-4O;!r{oLnbp35 zcXeJ)uU=@tWCVqF5HH?s^Ki`J!Qo@r)YO%_L=K4!19e*{7g&Emu4Q%_P1ZKy)L0$~ismE~YG?Yf3=C7EzXFqI5wqCVd z?e#8nW-*p#Sk($Xc=vq=x zD_#HUd_AA1QvQSCq|JqKHLpWazq1%(VEN#PgJYNO*_Y9dfY+UsneVdN+#S%y;d+-a z*P~-T9f`7ojpT6sJB4*_@q=?G#Y{3r%d=}BNZN$5I?r)m`bmMeC)<2~bT>V35vsbr7>PbTSJH?TiZQ-x)dwU^aR!@htMs3WBnksg1q~5HSRhJ{ie?j+9tzj?NDP%F!lrS8-mA3{ea9G*h(UPy`YW{xmoEO-$ z4n1~u|4CI4tM}thi&w(a#*agJis13?_C9Hg-uD-Pfo9FUU~&%u&sp>}q_Rlg*41L- z75)$uTvdbJ(t)rL*vCti=)+UWaW%#dT-a^AogM9M8%%ZsYqR%O1=V{-^$HePOsl&X zYqSK^i+b+F?Ge-ny$!zoGA6CYa4R2{@9?iG6BRZJnGY^JwUZZ7_I=hSd5iQq zUDg9bcY+i70s;C;=tO&nkcQmOv;2f)my^LGgQ}FO2_mC!RY@CkCo&paKU{%Ut^UEM zg(Y1>6HE1B_o`T&dBD_36rr(nwl+3)$0Xja3GOc8S=Fwy zN{#`j7&5g!7B;r*1b}lP(OLX?e!oH30ew}8H_I>6#AKa_558O$5gAI9bXUBrPP1Z9 z^!xr3XBddCu1y|Sj!u5NwG@JKT6ii9=dSusFW;R^%+IGE%5TEXz<3gPQT)|y4wq*P zb3C0M4=ncm8IELkYf_tQ8m9Ae^GqzxnUPBOc7x85cpCYyL!V=v(BEGJ(f2)cm_t7{G-k2YS+*|SNJoN15>Y{+!2PpR`cr; zMGW@T%Xs@q_rykv|)RtDxI;lY@U&ujNX^ff3J^Tn>DufY0X7FwjuId4T!v zSG%3v0*k3v|9e0T)+?vYbE@>5#e0Jg%k8@M7PZ7*+|Ga9Wd#2oxMiE`eL=!c$pD2c z+SY9RLefhn>zAfVqhsOGeaVXs1t^MZz59gCz^a2Zu#kXoW7-8B`>W$2h5_%Qn? zLPh;oi1YEk{72BYr-Cs5%W-`D3HZI)?>ey}bEQ)#Ckg}&om@fqBU$i&#yYyR`Sxu` z)6kCt?>g|J=f(bDEbV{W&XuXqAbH^j6JtoifDoVL{~<;ofg(th5xP%*2l?-1KKmC> zX$eNu;e{h92OqnI<*|kHtQo@x*Mu98d%a)&BOqDMZvHKn`sMdPsAr83nM z7S(v-9JkQwpkV-Tz#ALG#W=Rimjz{BE^{Vc{pHxwp%Je@Q~4Y_DUIaQ3p{`Dw~fF;ewkP0sMg zhoSTsGX@4a#|Q3htkc|_`0Dbx4>U2CR+q3~Zq1nc-tr%1^m%D|}N4Xcf# zrzeX+x{k7zBFGUf7U2N-U&&sAZRH-YkXk1U8*KMb;8~?3r^WStjt73jZ06~Hk)?G# zaWe+4@|tY41&nFTUCkbP<7cOB9tVvD?iFr(eqZg^+$M0BXWttFH-@{sS-J$M0GhCsI`DFi5y#1xm!gjIF%G+!m1P`Tm38hd- zGI}_|LH0xCO1y~TPSV)1f?eD%q;!Cl^#P=S-Ob?!uDO1?0S9IKoLO>8f4t2P)(u;} z+io<7d+iLVdqh8ral^l^Y7%-&y+~OlXpx>b89ogZyU|wBR^=>BeoS0SNZN%DovU{; zbn7g`cJnyDG+5biIjC4nLU*IPOE`W-3Yh$v34WomF zdB!g^l~Fy8huL`5CAW|H6P*cdn8?hSQxg4;!=OcPtY)&)#$%wL?fZ`uQQEP5A)Orb zyv#&Y!_6^^S>8VoXyRW%z^_+LuW&=BTp~AVuduQH5SV)cK2Ohu26aY??$Su94xjTT zzfXq5X-4<}yl{(PI*QU*%`Y88eFTpS14dL6PcmX_M);_#r@ z?fvRKW2M|s6duAjm{l}ESQadOSpSY1U|1wVV9@!*kqOsy-1k!mov zVte4!TiaaA{$k)yWq{{yGO9tet%=bOqoV?{VfvoiKYn5~!Gx(@_v`Lzq#KoYd7B(y z_+G=g`+9}I8OJXrI}3a|)q5%H>WiU5(hlQtb3fQ*+p^dn64GvU#nSIZu7mi6SrjhG z0IVLXW}UtE`NP50a`IT#`t91H+30n^v)&*0ogPs2$J`Zr7#m|YXRL%&bR2JOY`1ZD z4#cLqfWqK#$+#Ne8R^VT%+V5;b(W8xH`q2VM2gfpqQLV_-+=)~M>v{7;T zneI{WIT zSR%(IguYAILaf}57W0(NA4>8&IXM}w4S8l3)}7>MTVpT(baaD~J9Xhk&8&EY6A%uhXBNAiwQoISNHOJDj78$Rqek`KZL!3l5cmo?4%n=o$P z{yFxl8bxXh_M^x4a7y>3iX6*e0i<=<5sMN?-_XafUkG<}EBcwc-~0wB$jh^+L{@ca zt9Z^_b4)f24f=hGU>v{z8J(91VcKiK7ByiIa zFY9;scVQ@z+~iZEPlIUl1R6zRq?j=j#E?dG>TvWiaJeXGYG$!0J0ZQxNn4)@YiLph z`D$QKxY$I*u0qs8KdB25B*B`t`a)tyL;IvuBnVy4SBa4qhQh4VV{G%)6_YTcpkEuV z2KK>Lp@V^$lYcrj(kLWS`T|A(P832p&vyU;S6S44?PU!6^FSrR36&e^kd_GdY@SRt z>}qNkYKy3@%GyR0T639!0W%HA3dcmpS5_V~e8GS`@;%KtdzY?5iln==C*jYj?b)$C zldPgNEt!~c@+k%U2Ffsr8I+E^y9 z+CBw!Q43weZ(2mB^}-|!kB^Ow{X;kW@(-*M{~y$$=BNK>c01?*|2^vPTCO+xMzrSh z=i8~=nFW5A#aS-ZV(I{BPme>hYBqs`w`jK!N2tG70#PylSo5d<%Mtr(PRURlk>DZQ zDjreIa@o>vpBB^l=S~}q-}Ca8>NTR_bpI6?^4NYDzj^}&R47weZ516#X9V~?S|M$> zImHbcn7LYiRN)hwL6|LOob5UPDeR)*Sl=8fsw$eFd()BQ$4lL=6>k-izoDC1u`^1W zOZ1#TV|QgdCF!dwY+WBqJ{jSy(Lh`z0bu=mxYk!5`&tPqh1x_vD+J4?g>=-e^j`$M z@sGa0L$AmLAMFQrPRd^oE@lpay^NG)i!T;)0=$_yCW1Q%+0IIhrCj26V}BktAB}!h zm?W%~H+D3*PZHc6WWt$9#y`4`9+$_j@>iSF_%S>G40Y0t7gOyC>(coTq;d3P3ZP=X ziG^#|p5^cwhkh|FLB!rt&r_d%-~U+MuD?^!TQaessaH@U@U(%6ByKrTdz_N$F4>&1 zp>y>-Y`8TF9Yw!7Z2F6rsCb5wkjKKr-Fc?7z~6aA@G>HbXhLPC{UD!=2<*D*iu6qe zK4%QgWDhMl`JC$4@a7b)={HMFaVX92%kR-b#bz{7;vm49*PuK;Nz~^i4GwszK?zVJ zfQCztS03kAXo7OzGRm=i^wkJ&!mQTM8FQAs%V8Ad=B8$5rp-SfYwOcZHec?Gn@3}n zWzU;suV{~sQw+9z0HoGaxlV#LRbH1wN>?*^GI(z(`bK&>-tH3K5@aE&8Ngn%-y;vH z62SR~Zv!bKbi)XD)op<8;u`LUx(Ibwb8R<2gkXW}nPV2|7OJqJ;Ul-(yZaXR z&ql^Ibb`NUGN1%;L3N{{#rSjWth;fFz5IHM5#~OY{z4^o9M0Dd z4=&yQ73#DptnjUVANSv9N_te;@Dj%ouklo=rrjl6Z#S3TQt$f@O*AjszCx92lzLnG ziIr61t-idxtmUi&f4-oRz46=go@GBDmwLUd8rF+JvXVbUT;-~@Qug>Nucz!gHdd8= zrQ@hCZnv2hRw?CT;Gp2Ai;(ZmE4}TRY?(ZKO;-6qyYq0kp{Ov$U@Y*iVB(=xT1Hu6 z!GWfRP3o=bXQ6B7q)dP$vF%n?zCJZFdc^NRyhcYyKl6u>Me8^>CabE9b#Py+gC@Ym?uvi6 z-)rZ?mfsNv1+M(@T^P(nOm*c{OXwD+QOj-!mmx%1FHWdZtGjeQ2s{l^7@X|`MI0x$ z)z@?1fRZm{*=ELdA1ed}A=xq}lWnOnN$kgo%dAZ}`^W-Tnt3Bs;YgRZ#4 zZkB&qR2U?;IMVgwg)=#~0;WJJDGk;)9LDs55UI*cV&)<-o;LAKC=%Rt$`rKga5VuT z8Q3TI_yLOuL;1cK-cbLvTM5Hvy3>kHO}CXyucM3}XL#H{yI>2Z zy9|_ydVensay1pUl~U8~RCOv6yd<^eCTeP^&WH(5P25V2qYlS;sq1@i3+jSaF9RBU7;4XS&PV@ zs)zzE2`PFjrS$YOgV?uWenHzXMc=fR-iVv3l}#n z0~-ZpA4?Ce78Ap~(D-H04EIO$pvC*p=j?>{a$Q#5&3t6ZD^~LOOEFN#{zlboPvh4-*%V)wd0o%j?(u^5EY7raHkw z5*p7E8Lii5th>m)9bvbh*`amx;>HWh3$k>l`+k{;1-R=pMP!I7>}}Tv3K4%W{(S?F z2lN9Nt}l#F2R2j@c(gx{dX(JkuL;TPfvXJtDtzP_^R0QNUh>Hb(Upo4a$*ywJe`b> zk^W>=9jlpkB6a|5fJAZ{7xo9)7 z$FFTZKAU%ObT(Kr6v%J1=wx0+gk0-ge131q)FT{qPA9*O0o~qXY z*At`$&Och`2$-fi{iW4`0k2YrPQBsjvu4Kj?#ZnYtq~Ow4svo|NLADzF=h5d0PAqb zus1i3*V5n1-=Sso>wW@Qvwl#J{d`Gptw>1l(9_`3Bqs~Q47j$LuNC^SshV|g=DjvP zH^<8uLP2ibSaRX*{n!>pg)#f2|8+@}b!QI&WuzDWpP*^?O(t0cj8=o(1`RA2$-LMY z93A!mt`zd3;^A)Q1;*hB9+La2kW)(c<)x1j`g!~Ck{B{!V`=;okfjPnC9tG8Vr>v- zp)}wVDt}Y893^H6H%St9BqTRu^0<}=^NY{Rb7t`HbNM-PM0pD<^dBRM5dFw7Zc5)w zMA@&`$JZDWQc1hgP%2V|g;+GGsMKy$xbypsFyGrRD`DU%AVK=0HLm3fu}BnT2Ln;! z!~m$j-FOZLU+ySGbzGS^iPN52{sv@p|IDo)57lyk#jw77gy3KNLD9(nG0%E5#UB%1 zoY|UQ2%RO`xhTcPV-Ng3d(x^ zMH%mC1{1G>J|v(iV+Q>hg_lp-WQxj2yazl6ESpvq# z>4>)Zw84g|vHuMMxn9SpLSuvDdYSmXr3FdDwxgm#4hYG_gp^{5!&H+{gK0P+in0_p zjy(LX>Q1B23RJR%f}@K@fWc+ucRmp#RkpB7UIR`mV1-`_YpMwrk}QmpjWZj>{ZA(; zrc8E8UG}OT^Bfm75y}qiPqRA@&Q|wU4GUA#C68Nh(Q8zHA9-PK35jo3*pwJ_mG_RIA&lHIq?VB<++<>+N{KA(lcU>CK=tqj6~Y3URl@T z1CyGFK7z=lEs6@zL$WykUTef& zQk)r0|Ebqv@m9G-6jSf9#exu7Ee1H4UhOl@v5ZliNm^Y0V>`&9J?IRliaH+ z0*W`*sMs%U7R@f65Y-&OYb*V`63NyYLyuo2j-MXg-gdmzvOU($IxOVAZBLB5gW0l7 zR{^1qw2HK5eLu=~kV3{z*iE`cG2h6MoYnOLZ`HJOEUAf>_mcE}iEqyh0;K*u3y_x8 z$oH9`djeZ8B;@riICwywW9f8=ofvp^q-jfc2H|h^2sGHsR>E}f+zmEC`a?psy&AOk zC#3$@ceoMQ!Y#E=RJReOUU6UPdel-UbFqJAaFziieeJ_cq4U58A_H9}%kmk*{rxciMsq6TB28Pl~e@Q)Zlk~m1V?v!vBK)=YDI|yAxZV` z32O{XfyK{Y_?oXjV1~vC|DBoaz1Mw$--Ry!0F<9_7*RfLsC*n=wdtKONsKt`7l%sG zV<9*pQYm4mk%f{fD2k@;rP*~(R)QWUo~QV5dILiwteuCM-_puj>Famzbi=5Egj;29-y}Wj`;uoI?M3?&ETLmCa}RIuQ1g{pT!C7pP3+W5{&x4;+I_y zWn$B53R)thK}Tj5fnaoQFiJR$em)`OdDrjS$maX7+!rC3Vm(ZSoZlsCgY*2!O~S8` z_X19r(rq2s8c(e-=?9+^`|Za%9Qz-O?M!WSgZA7S6L$r&VzH0DnVX|-QmM^9F%j>w zKV@d=BmKsphR=_S)V{Db$4b%#XhjGSGeugwEL`2fFXh7c%YUBT!eb}ykA4LJ^;@kr z2;-)&1z7rJZdldUzIVB2xSRR`+Sopp{prZY8`pqjyyGg0XR0e*!V9ZR2{GuYyp;l- zd~y%An_b%46UC_^Y^N!8gwxJF=0B`9Wb950{l&=l8%6Ntmuy#y-TFj;P15+~nc{S{Fx{jy-{{7#h6FI3%`0NbFJ3sKQ8PC@1wY}cHO&NZRTzEd*%F8Q>k~6 zfk8xq7|i)>?@@+V&yjaAhp)^&_hmk5(ZwGi0oaoRsA19bxm$E_5m@DC{mTi9rX_*b zdyff}2vvt^OBbZ4qS^dC!C6Zg>o7j?<_~NUPQSnqkUyW1d=~1k771< zqKcA1K<$akbpe{u>$w#tj_!&fNsIZZ2)1J>&8|5OhST@W)$UGtQfsZ?&7m;^14^Ia_Eo%2*~gHDcL7sF zyX4h%n&Az245$FSVuo)NarZ^ngT1GkiM>c_YsaTBrJ8h$pgkM{XqO9g66kz&H~1(t z)Kv-j`~b-!25}yqla9|mQDuV(%WPPkXEeCHzq>E`9yx0IgBwzv9Lf$x*;2KS2v(qrPzo3+x%degJtmC$ZXqO-T&J1v zfv$kUVfbm!@^T-_h%Ys9N-iG7EJF7JM*ELJL?{?ifFnfn5{4h&)B8JI@{FRLIR{0J z&pee3z^5;1a6QcarKD`pdn(~w7tJb9`! zA)eNHL`r~L2LnP*ZW9}nAx8koiv{8@A?#YU2U}&txEWD6%AN>jkW8e-M1tCAkH-|6 z^+_Ib{Ol(2J;ruS_@F~31|YRecB{%VWVB$%B!%$YZ9oW74gMooEXKloZL}S2cOIC8 zc6VY+jkW=SCH(Cr7n=ulW>aG;K*S0BRBQ(<(4;QvPNXQ*blxhLE$+MT?)#-^FXt+5 zEnM~RAa^(dIfOc@Pm{+{({(#NR?NgO3n^Eh)(Q_+npFMJJ_A);1Fu(UqUGpk-X`xx zSq1ggvTg}?RC>mOep4qQ`#3ak<$$pT1l@(HU#*VYDXL7g`D=i)vBdU*X@4#xX&3HW zO5ns>t4*a!@=>=vAu!KrE#WMuT&%2R4%x77Pj)7nc)KA9Vg4TQ8c$0gxJKQBG*5V2 zU8Yz+Hwv(7a*EgXD@+)|xtX%OsOwIWaif+TqglTzpFL&Mz+dS(lb?Pqspnmv3sSHN zX%_SYP8bGk@a^s?Y7oR?7ujJW*L-B+equf<4&Ym^ZyOh?gC9EU)OOplrjKiRb_|wU zbU8up-SwK3*h)y(%@@LOJIMp!-1}f2?{CQwTk3*X?b41MAgDw0O>R zJZR&P@BPx;+VUkFg63Lgy&^#F#eHtDL5_)e9nFtPDbmg2tzJBr22QfU{ICDBFTAEtY z%m?>d(4pR;Z5T?ZdpXJL1kE$GHBz#@d&^yj5AMMr0OaOgf6{>+PGuAF>IYx6weK(= z$YyQ4SFK}fTUN~6WE?Yp_GEe*^d@WHcW(OH72Ciuo<=|4qnCZHDwi|*w7qoK8>spc z8;3jN3Ju^BA09r+}1xJuAJS=hk;VIyCe77MoD-4t$NR@ zX=_qEh_Nf)PyEICn+SRpj?DQ|okT96EPh80bf9`mC!fO}g=_*+V}WJbsG<;K;HTU^}&;9A>mAc23#e!yDnpQU@DS zR@vR{^@yQ>-`m^FnlIXJ2|vAgU<^#!_-+4dcJP^uN7g+ja2$XX@oShj7y7t*R_cI` zI!cm2SJEdS`0#V@C*;$wdt2G93{rs^H7{q)37Ui#jBn@d~^;R(Q|TUYle#+VD>4+B856yy==1^SNW#}*Gs1X zt>y49OT%Tefxi{woObql$e-~)Rfiv{FV?+oWrUbWYbGu`@pS@WLoF?i)7IYQ^XwQi zrmCth_{@MalYOD!!qQCxEd(bgoya_<>{q&tpZf{FU$FLS#*PLcLGFe90`VPx*(?lq zDZcDdA!vSl5`4id5h#?``m#iyn)Ll4o5<>7!j%SmG!2o-`AsUS7pxxyjnfG-3n)08kJ z)*5t>-iDCy;^u%U{fkf!F4>NvY-!6=G(WrN?O-CcVb6xzBcT1U&`?AJ`FX_7Fq!^# z0b+pzqN-1(=tcNP&1n|X)=xH7us3?S6D8Pm@=-`Ub)|mVD!3Y%j^sY1fKqD)G2Eqz zFEC?<5TZR`_i>!Y&+%Ar$3Di;z!)VLzZ)+M}rdugKS zHB?!T%1FwM-iDfYHT2n&_ac&!**aZUxL*wT-~jO|dIYTY@{}bvkU`1dfKj$L87LXp zL1Q>r@L^93SdvnWFcG~gDQ1#nO_V(l2DwCpCynGlt;m=?kFc?(OFJgh4l_a6y)|9?-Vs{|Y z8LTxPElTj1UX|c9=14xAmsye!^CJSjtE0D3Z=jMe!BYbYs5w%2$ko)|)9cts6Yf>d ztPQ&i;ym2DTVkTWHI5Rf&lk+wiH_XcemU3EStt8yy34oQRm<%L79WBGe^Xq$_sDW~ zrab9#UDc=RC=W76%V&y(CCLCY(-MC3+mShvR0N{p%hQW&{&`%lhqI-^g*-F`lhDbC zrlpos3l;wZHTvxLod`kuy3~Ny@ree%KTEf4)}WiN5T>F?^U-XG9BAd+v9L_RLrHmP zAm=G2_Z0Z)bTsO|i_c>WhP~{;gNOX>N}N*Kd~*hjllNQ`P6NaLjwaP%C+mF_aJ8tG zw9sw-gZ3m6G;njHWH-n8i!5Q%H49k@`nij^sc7o)QIp5y*44%hKTvZ3b~-ev`qIYG zYa97u&YZFRZF?-_nr=BH;ppNnp_q~o6P3_lnVjSg)R!3vAAbm#vy?4&tOr54E>IL~ z0;0Qt)CcQVeEt+pTPAdt06*7TiTqdZ_@zWku3!ng%0uc@I6ux;c;6q68UAu|rHc)K zw9VI7Yg3qB0Sr?e2Vc(n21VDlm>qIlyPtfG23hoB&+l%x+cyKVJ*h;3eiwJG26%5V z8aI22a5U%0blqikc)m=_?@I}mL~$DiW9gisRuC_CbFvltR0k1++HmGh%kwXr-Igh7 zjj5ZsX6Q5U(y-+8N54xpohxG1m(<;=QRfrV?^gcTbwQ`*VeXH7l#ihZ1`z(-~nm zVTbc{ZHJzRiCCu#|GmV`&#TDKZc#~q)HQGG37qWNHnK&5hjS>N=i$${&AIybEWo!Y zbAzbL%1V#!0ov1S)nG<%v5FyaQ1c(I{QDhpK*v$r6LJtD!vC;AQq&~d_4++eW)c~9 z5Sm)8pNKZ58U%bi@F8slyz#AeqA%JS@MNwLHX?0@*f!8Rg3R(Oig;L)?}!-jIgRw~ zPM?}&dm8kPo9nTC_j{*EoO;O$vFrvG$h`moLQi+{Wn4Wv9qyy1N;?BiYe*nI~}hMc}mMTcnlOti;=h_5B?Av38|OP?hbAZ%-xdfZJ2Z zQI5YF7n6T^===rop%X_BH_ct|EyzMH3xU{};lv>$ke_h_KcuOZv0)lAbrf^atG!m05 zDx-ZDf0UNEK2emlYj|8Z5oHsCx`Beck01}i(Ip)X$#U!_7^T~Dz^AC|V^?n`lHKQ; zr=RHrB#&Ag0u!WM*zZ%pL3PC-wG;!E4X|aP|Hm%7cB<`!PxNU71`2<9Eyi zgnX%Q741VmvY{#8p^=$JJ0#Qfk2%zNqs)Y!p8@m>1 zB?ed;cZgs=m?{eM{=^^G{hfY{BEBD!`zlM&pDJNts%;@PSYSphK2{WI=zyk*9+2pj!9r zzxl>HA}G)aSp7#^|8Y+TN%$FdKW+POZ!&nXQZ*TwK~O{IirSB_N_zBYyL{&<2h8E> zLcQ<3L6Q*QUKF0`hN$>v&7S&8^V8GwZD%?&1A{30qdWnau+bSqn?F3Jj8SovZqaoO zPd>ebzjlXwg81d~*xcB7Gg~IhIRN*gS6Nv(1ZFR)1Pr9zQUUE#A@|&uPc9a3qN#sR zU3cQ?Xw5|xQwPUXx@yphe0Rkf3^Nv?Mgui?6oHj#6RN`@K||}VUEpxrzz3lK+N2Oq zWT7C3_JS3{k_9aWd=XtmB88?@z(rZ~Aj47iaF!u;P{6IlqNHG(psnHIz=V}B#UMu# zDjA^)Wt9x6@m;^-D1(OhRY)3MR0!RslqmI`9$ylbS(I5gxUifAZ5vi*gco~cP34Ww zJSHUEHx*@vn*@>qjV6RJ!qKHt2ZG`Aal9?eND*?#tJi$+1)(( z%SN1AXJv&$n%ca+|CXqt;ucAB`X}c-wmk@aAq2XmLWOu(VBK|symXHTwwfat0a|FF zEb>hQ3}&6D_=6K1BDUjdG~o0&kIf}2?)TV)gD50vY4!Z?YfC~F={r_-p(xco*qPbM=VrAP4&Ig7jHVnG_*(V0 zgDQ7;24TN7899ieL8ZyVgM&Db>+IRl`1SEhM@Q%XHYEhYUG^9+wCgpQXoxaZz@2;U zZF^HRnaIsC!+7-Po8)&dV-jL>oqm!xk+WT0E)L`$1C8NOecU>|q(uD#`=4d&Ay;i2 z+9pOgm?=o9>6=UI_%?TUpO#~bsTD&YT7qmLVM+pBQx?!VfhiXgxw}6vG8vzDDu69L zG~eP+#&jFkprkBpLJJhFzm?~;EKdBeZlXCq`r7F6RlHPeW4+g2Q3PSkp%MY^cAQ$S z+gEIWt|-bVE$3Xbz8gIw8O7PQpH}rjh6FISJD;XI^F_PfW0Ig-Yr=H-EVHN>nCdy@ zuoe9!2FWl^DsFzQX~$b6C3DSZ?m1Kb*IV)aHad^yjn5Y+ot%KTD53 z-20qts^)mZacbax;U(i$BgFIF|5e*pMa8v5+mc`hPeOp;mOyZK3kecD1ed0RTX1(0 zf&~xm?$W`vyKxEbPUDTc(+#(C&Kvjty)j<>?4R0Id#tf*u3EEd&2^0SH|5hCMa55b zsXVn$ia|o^&#!euug+2-cWLPjyN1o~!xJ}6XI$73VuLEA6_I7kX1of$iOYS|CO?+S zCR^DD$vb@?&&y`x4QeE=X)pheG}*f@dn;s%%6{2!JsT5q($EyA*_V_h5R%|JGRc9> zV$f{qPv#y|b=23?f6i<5+?XBSF_2!*7OvFQj?XurWZ1Gd(mNgY);9a4DEGTTitH$6 zKPtYF*m4r8(z7jjaAj%w&AGi~p(GD^cJPdA;o?pu`_J8`t=LSJ5ZD#D_eLo(s`jvE zU*bZid7Ime7XpnQcLSM}Dr=J(L#A8NO7RT@m3nr{qK4gEF6W_Q%vwx4hr+hh*rNNO zu$JGuh7p?Dd#+vcf&_2gaC;%eP-*ube@}OeBv8_=R9%j_n(bvgno{e}(@Z@SecRkxvA;K$I#;sZmz(c@Ui^WC1UmhPF-ar&_d|lYxfFxkD^+a@CiQ6omMZ4x>??v8aBl00AVcFEaP~m; z6)iE2Y=#w^4>RoSjBXM=J?1X74+A??rrT2Rq5&peJ0TFt8IOOnr|a`$`q^g%kMF>UmoLk^bZUsM*_8X$Gau-O+}_A)*j)|js@f;hMr^BOb1iy`D&}tD>b5> zSt#lf3C7vpsVg*Z>086n9%tOE*Pgzx^AP*Bt<=qK~Eb#hB$d+duxF05-*P(OUF-&?y96^ z2apsf=PM08;%!Qrmb;zqvxsuw;oEH(w=aG%Mt4`1wpQu0)N|gRP%R3+PZ9H2>jRf$C;YB1Q$2 z5m4KP0PMeMZ__C4t)5S+!2?Xwl?IJ=I?Mi@^aZKG8wdK7ep{EUi<;A#VB$TmigmVq z%}MEppJ&op24v z-7gH4lPee7{K^+j)7S9L+J~+3<&C6RX#U~Lj?o zyl)bzxZG-f>DpLd-&pU#EBu!Av6`Th25mp*N001{IA=u1rua=EZgQ77pRTy%E{y41BQCdpVjwYth%n3^jgZg*#)Tl}- z5|AUJ`ve)3hX4DuLytwZE)~tsGjhL7JL=^e>cEI+1v3Ar?q^g{;AKuW@-AXNrIK%6 z{z7PXD51=4Jr+B#jepf{;Zj1o$ZoOhk#$H$(UX!PEy|=7^Woj2Wx@aUX@nVRuNoiOD3clw(>zy?Hh!UV!@AfJu z(#A96t?BZF$Cxs!7Ah92q;eZ0$g*SRe5cSD>~ zuG;}Guv~2~&|{4}0PV-gK4-g4*qPT=ptB-xnv_nUvZ=Az4? z66NN0c}Xx#rF`;ummbY+s$zymO+aFWpFmjr;m5_F>IL{$YqCKWX(&J)> z1qxbn-r1?n4|V5CzeoOZGax!xxaq1WjfZ5lI^Ek(*RzVb)4&Q_yw3_0V2CEqd&md* zXsY@A2G8EvcndE5fM<20&R-7m=82h;m&=zp}HGlOO-e&!d2M?=}(l zN6Vm6PuCQ2?;~r-1W1Ef1-T3gS*EZti`R@63gJi>ayyutZxQ;8`B}lkz=b&|>U?p? z649hJn#_@K=~35kJ)urN>Qmnd(qK}V%duMwRnh}w4j(E%l}G0a5c8QV{chpyr*7|t zT`M?q8>tqjtl8=_(72&PTfT~80uqrgs;On*3gFp>@5c!+(4)$}ET)*Y*e^qx%2uw* z5bN9D8VtEEqin`Wkmv+Gg>IF`oC_PhY7`l#0e^3ocwKr5AaOTf#2?_Z*71FQAe;H9 z-ymv(^Y|J*#hR}P@MwLXnhcJQ5HFkFx?}#T-iQE zv5=zH>pw0#WGjy97RxPE4O|XPia)*jQhoMaUI6+AW;SY+&&Fb+2Suu%Q(zFy=r(Kh z1rJwA3aW9?Wu}sTxyvjeUY9S~xM&ff{I2zI8VSv9rOme^tce z)sZAd_4KX@B_D8YVq%)l*mZOOgj~tV1^A5+bd|V!SIu9HQ+D#E3_Oq#8WHu}O zABPg+NEP0NUq0EQve$8n1%8SR(DgT`h4Ltv4~{b=(G4RH)TB7Y;rg$i*QHgg5S-2S z{@BM0KuRhaxRka&iI@d{@Que94#pZp1!In?orxzzAKV|znbr7M%{!0Nkawbc# z8rQvkF3mibxQs9*pen$TBUhTC)8}4SCAG*_>*|eA4d&9rcGAeB?Xmb$e$x^7F<^6m zSm?#QA1r1oT%=sm9&@HmMnm}+4BmLdipDb9W&tCn0rcz@2hQ5*&75yue zM3iw(p+aK5)>^R2vCrrMCtW)aUF}j1(k}}{#x1L_2{ zAHOwvyfP(P$|K^rAwerbi7&a^XOw!JhDx2EWh6hG3}#aj30aDt?QB53tgkYp zkPoNik5{y#qgi|&BL}IY;>h(1GXLwHNco3RP`01b$WpV*!`X!fSDW~L%;WLnNSM^K z%+nJt|J#f6TKI_HR&(koVyj0_P2zMXh-m0$RBBkp1$wu)1kXYonnFEq*5v&!r+^kv z{`2qvpM#E2+S{%80RPie=78&y4@3{^uxwAKD>fI@P;05MhjloS)I&F)ixE$f_ror; z|K(s`cDlfI{j8DCZLp<3a;FkF_5}L0{Q@0l*SVchik>nD&(|m5B+0E zHIdas5Rt?MT^haUVaHs_T*?4AYD~XsC~7-gk~!134UKZE;|5g0z3s&fS;DW24mCON zA&VLj?DAX_5dDD_6&2>UF|CE*Ue!TM@ec&jhpVh3L^IL;ch+`LBl`c^7u_FB-3~(I zMxsIAzo0zXKScA#4BW-OA^9~I2z0WqXp{ISY_F?RzXQ$nuDrnzv!{n#DwEZnO}YGNXiaL(Do|c_ zF2|v1DOtjAOZG*pvu4eXRvlZnurWLx3!-?rL3HqV2_c^&z{o^;bS@#C!;je%L)%C z=P(}{<)(5#UcL#`qW4Zf3%s*^&eShnyTp|jO_lh8`(rq)7cS`p=`1&XPoRrI;`OEG$p0>@2 z>vl^csb7Q1mRPOi!;E-)uw6FDpS3b*!ptqteirZE#@yHw38Dd>#SGgfad@v41``B9 z8uq5(7KrU>OiG)P1>GmpRv;KwKa%QXKL!^K?V6+Ugslr_WF>9bpmB~dZhS&z(1Q#c zbK1Yudv|dWTZDrFZ!M57;P`A>mTY|e=`hA=bdM5{{qQQcqrHD%dQg(4P7G@JcmSzY zht32D-M6!((mtF$KEkg|bzd`RRT^FbW-vL{*}P2w8yMwu%^_8bX#L2n#WOZEwD!6U zQvWU4HN&GKsmBNKaI3o?7=aR{IG_LWsa3b(;SxDq(;eDHMfnO=kLcOR&+8tqpcA`~ zsk${82$YBGMZ3im6}5R65dj<5M(;;O;(*nBK1Py`ie}i2Qul_3DJ61qe3Y=onvGYq zP8Op8w>%g+AfXtD`rFZ7GfN%lgyaK6fNf`57G7QoPI|X-D%m4W=Pz2mSR0yRd?8ea z9ObhO@!FidBfx9$^~s3&L|&Ub8#7VU{vPR;hKX7q@0`y*_!o-wthB(PD+?+t&$YBQ zB}}Y^FBUTFWKx#E#t#!JVv`!~X{y&(LR%c!jaGe-3xd`fEb8c_ih7h=vN?XZsNdJI z6PqY}+qruY#Ra}>3`$MKBNM+)x0}Wd@EW9j(3LPlDfpy8?U%fNOz!?P=YpPJBdL*u zA*Rd@=$rmTsMR01xrvSZb26ptgWOUN5zLUE{5lrpHY=oI99I+)Luz4ek(hBBb^h z$2P~iT~^vBx?(OaLvSvQ)mdv&6q29~3=rK4MEdJW^Bbvyc|*26)%hiP+FqCcWH_fH z#vRX~WBFMY#z0*3!MOL;XHC7fyBc<8#WDsZapr&6Czyjm$kXKTc*XT4$Oy@SW)%c0 z0h#V7Fhz^aK>S9DR?$-aI|t5x*!2YMqv~Ja!ur?fPyK^m3!(rK?HBQ1eERRLzt}h& zb6H;XoY1(tyc_#lKuFPAf+G#_oncK$Pu~*_S)!Y6ycEZ8&w_r@&|;%`{PQp3O@ms> zSf6WE$22|0nckNL9^mx1l$B7FY%oQdsEaqjYcuE0obS{1Ze&}Zjla~JZpZhC3>guV zeX%Q1I)_~tO;l4IMArEnpsx8=Wi|Q<3U||4?h^4F#D0JiEC301wr&bXMsWH2ih$*y zO3)dWeanzS#`@|}f2(((y44n^5tm!BS{;UYs7{`zO1u_X`AU9yHI2yZyOG6E&`>qU zC>^xYxniW+FY5!lV%O(|52s#vVc&W867Hzi0}UR?APVDP8tWnE=Q}xg`Z8MRb>5(# z6YYHKz#8oPDKmoxSVQ5jyOyylYo_Wmv@55=MGoZ!LX{7F-tF{xXH*xDwY?;n<}c-b z5-F2N^s^ptjB2Sc1M+Cg79LIhwdfS0Eabb``Kg_Nphh{|u(7eS&*wn6`tfz5#vYSH zY!K5i8*KpZqSyT_4_-vGyX3Eqv(&^ZiTB|N z+S$7W*L50%i_80jO{G3fl`Y-WoOQr$fh-bh?R5-=g!&ay=K#>D*fc25)9=_fii6#a zgUt;R7kzAx6LHEiJLXm`OvZKqb$?lv)9UCw<#&E_EIqpkQmS|}W00ZJlJhdlHTxVk zBl^wfKUX*o>S!0_lNFusb2UK=uPhB$z+~J2lQ&f@+qypix0ULA_Q!eeN=TEtSF6 zs?X1Vo`RbcKVQK=7_9&Hm(8i7RV2Nb3ZBd9_Gc~a597|y^m^8%-}o-CJ;%_})J&!& z`Tk;&!qrMx{Y_Afjttuv*lHq?AXc`tVyvY;c*_hBkyH@s=pek~E`zk8B8;Jmq>lNK zJ7{QKZ5jqwO^g>&iH;|uW)8VIb&39foW0d@ycOIOHqD>PX%ZPs6QrV^aKk-}(~%Pk zMd<$uB_WWxHqgL{`GFZZ5sz6~g0W~s<}Qn;^E}GAc5*f`{acwnxMrBy7ho^Yhb+tG zDS15}$WW$3gTK#Toadr8J~mHAO<$g((}_?#;1MSl{4-1}A=fT}f(nJNMSHVf6v+h~ z=g;k$Z6i%677w;XeKfM+7Eq&u21`KBXclAAY-pZFQ_wu|;9#aL8`UvYZv^&DSU)sb zpn6mIwt4=v0f$Q_nH8|2`(rEWcX>oLZ>!UmvucxM<<&pE>sSOT4a_c;i#8b%XQw18 z(se5%g6jkLU#D^4ETP=o2l|O>9IS=g@aHP_^A6XeFo~?xZ9;s6(f~BE)lty>G$OCuwBh&YvmrBnd_14yws5ZP+2`pnO|#|C(%TK6!Nk5> zD*lyrbTgT#;;iYyt6OY# zw*Ah2tBmCPhA>ZPthdzS9e|JQ3UikBHP#r-?%uBAB1ARGJ=kMAj+W$;gITPlxDz(R zhqUqvzSFVDUGisK^z4!Wo=4^DKq=)r zE>J!t+~=xom>eOru~ha|Nubcm*xC|eXGDK#+)(+Z#LMxqm;EgNJ-p3V9=Nk`i?&4h z?}qu$1&a6rRXk%0l^yZnl=YX;cVAY5ajvdglm>U3`$Cq|DZniTi18~sq#*RU?} zy~=0D&CC6#hO))}Pj}OMH-#HkS}6-+<djobFCX zJjJ*&?9Oe2o@m!ngEx$#^?gK5X?sigeY9HfBD@SZSaa%N`_TnYZ^_RVn&*9WWq7>W z6kr{_;jBx5oieIXeNLatODiT`BGLlLPV|1Oe*UcE7CZd8!eM!1;#E$(mY9aQ0c>bI zPtbAY^3-@XQL#dB!s0Qf+cqJ+lWQ?X>+>&_ZFLkuRqkc@Zl6oa1fUc1kd1cz^6#$XmgjOd&iJ?p zcl1Yu#Q3{yYGySLAKby^cqD7HFR0kqNA!c2B{*O~!2QR29a~90GBIfiofnzL@Wf|7 zvH>Z<0&-k{pV_d_3f@-M8gXwTG%;9(p`8O>J4AyYX9cEZZT3&!aIDS2TjCoKPPvVl zo*>CUtV+MB1sh;R9(~iCiWVVIMnoehncO=G_b2FXy6-1D9Ya$uD+Jd){;xeU%#y zFNI+O>UhqFdJ>3_jYvwDSBD{ro5BBI2u?`x6Kg>0u5)IV{JIv;@t?Ox%}RdM6&FLu9%F+z`;?4bJC znft?#5v6GC23;6i&I(7)ijWA`Z7i_z4dXC;M#VT65n`83N` z@|qa-O|43IQba{nKN~McJ@G-&(}NNTBchq5i;6>2(3ae6_QqVmuD+?1qr=}|JiT-l zsFaz-y*RyLO=Wy&Kl0w`2jiztqRkIwmyNMXF}E(9ShbwNpUe9__QrzKNBcXt{aI!;WN^ifDw;~Hr`QorP?ci?XSp4*I(&`p<`OW zUN9G#$oR`1=7N{;GM^M#x(TBwqtIKbijwqdIex7ZfY_a0&OYl2`d+2TMySuqq?4TA zjkwb@xX1-@Zfz6W(Nwmkrs&w+Os{MieYxsAdQ0VZ>j!n zQ04RfqzY;)I-h{?vAYR3o^!i@VP6TX!btV<`CXN+O|-=KpDXZRHrhRV{%tDWs4+&& zx3e0&q&~SNpjHMgGqyJhDZEt7PgV^zk_se>KtL|4uUVIvy}MdtR#Qm7?&lSzZ1c-oN_7MdXg$4;vvLGQPv{qJpLwAj>E<^pbRtQTSViOv9G$fD5c zu-BDg?M9|}SsS0>*e3aT7$aaaxhQ8%XNZq4h8M9%BA6b=qsqwXvu*zC4S>IeY~Fdw zGDTA-n$!TO!uWAR=^|HYWOm|^B-6FS%VYA3p=>{>P-`yV2gijr(<1?KQ9xuTCr|xg zQ|MHjhlhYL>^Drhdg)lH&>Pvgu8pU$R?aVn04J{uhEj&+0Oi*$$Qo_+C@64^M$CYj zy>e<}P+4pP78y-swE$K zT)V&VVlThTJt27hCeJsSzUnP2+iWz?I86snLY#5PW)tFR#p;X96Y)t|O54V9Qd5$J8w?2wZ4oICT;fQsUx~yLy&2Yi%Ip5cFOE&!w^xtJ znn}|EN{W%}f+CVEMHNeKGz^DBm^z53M@&0=&!wjmw`;#mVFjoYg<`1P&s8}MobWMb z&jX@!PZN6x&AKBn3npU;o@ zEbFQ}W4DHm;f1=BrCvOuVM$LW4Jy=Qo zgg*t=!;Qlsyn6p1^xu-OjFJ87TRKaTr#SE5&{;QgxW&tu^CKsgH+9IC85g-4MkjU? zf<6Y8J)ap{Fxih@q0Ek?0rjkeHxj{Ue^`4hMd9u#F1=taxv6`UhzzaoNgB=b8$Mzz z*umqA$0Nood%Q2iSql9(VtpGbHf+k7(O#4N{V!ccktiPVgzL%w73o6oF9C(|H{AM5bI%|12M;e{XYaMwUiGuqeqY|#(>QkI+z~c5 zwqshFcMRFs_V=@~?Rj!&FYA--rLRJ)Uwa^i8n@XhF#L<+O0 zKJ24u4q;>CY~TIa^Vz%Dk&R7DPwS4V@go}|ZXhmyES$W$4RH3AkA80TjA!-ggWf|m zRS#czwTo3;;Ca=wM+0*&(}yet^94IRpE-CUMe0uiAMW z*K9j^PCWXHdi2p)p4y)usWc@OG(nMIY(|BbRxE{}e_b?F+EgTr84YcQS&fX;GTEfM z&~z-CF32MCTgbf5!?S)@S&!$tpzo#Tby!cgk^oQax}dD5$LGO&+mir$SdXfh{m~b| zyPJOsKYUaTv!C^}A9%`Tdwz=jpCd>sYZ2e%M!l&B#&(8tEyR{lIWW29`RyQ!>P=P5rv};%4!z|a zN#9|gnX5_L+?rg;E@Iwvl-~rKk)nxlKuh2{hO6z|1fsufYp%WOG>bm>XYiNeLF7?e zX15SM16|s-|Jvxf&~x0GnosbpxFSfMVWQ2}WyPA~zZquw0)99wVmVTUsntZkpPm7r zN+LLr*SD9rNY6i?@f}r`4<$f3NRV14y(cEj>kJ#)L;5af)6)P#EfLb6`XJLg>u2{e ze=R!f?+2vsa=B`1_Ykyupj=Zgq#=~y&7eVc7xeaqD^u<%CG14SgA`Z>)Y&17Phi4Tj z(ndLI(7ZD;a?|M0IjFFt;!=@NNO0aS0SpbDB=T8+HBYv;3WQ$EK2!b1V}3G2sP*Uk zkR+}=kVW<_F5s!N&LS*oHifOfozQPB)DmV^;E}jRY*dhK$XfDGA3stFxlqnSD%6L- zo>;J-M~N~V#Djq%tRvUl?Z)OOgAhI0Q25sOJW>4})o&izAZ8sCdzs57^t#9Egi5HR zOWVH1mproRfe<`+46!}b{rrw#Cw)v(X<}k7S=jd8^!Lyp@_;4E>f0P&4C}1V++hi{ zxjLqWIeY2?p)aR}G(`gl`E^B^R`2gbSC0Au_JNf`&W^ebXee-fi#WF}?)$l%qLO-4mT0yCVHK zDtY(llK^D&&+_9Czm1TeAt7_*N#@UPQ7K#PP*Szf%5+d7j@gmso%M?6+4x(nmx+p7 zvoTx|!hAyfQ%x?p-zMR~NhOMwN^~ZDXq#y&jR&??3aF^=%`b>?&~8dB3YteZSya-D#h1_v{Y%nt30AF@<y+z2ACoPb-sc#x`1SGwC&NiN+_kNth`}M6Lf&&@ z-||b}uVKB(u-lw5g&FD?IDp!9uuG2F{Vi1TTVrIlq!Ibdx>$eM86`4@yf|ZG*ST)*8Z+oE^Oxa#>B(HR>yuP^NMz}!!1SrsosJ<0BUdvm*XTK8 zNhs#w*=PP=dZ62!#ChuVJpQ22(D`dv<|E>zfw1os))MaxcGtKBDWsQOSfGATr!>kN zoe!&u3_ke-6AmFW=k=zuQGb{wd+|lZo1yP(L!Us50XfKY&*d6j1RbX?VS}yO!T#=zI z(+*)jzjC0aLuC8|8QtKing0`zTuI-Ic$nI8zu*^LTw*KqR)+o!r7iDTpc+s>ldst$=-1A54+0Yiz|Z9l@j9MFU#-#j;!u< zK|y1)mYM7*iL0^JuP^$D{fUco{0d(f09p%pr*i#wI@{er44bZ8D&-^n*&+=}6G7fn z38n6Is;w)#O}H3Uod03}H+uWp1C{38j+b)`IVY=IWqd)%?S`12^Q8D%@?f;ifT!f` z!t>yN#`+p#j;czxES#O{96riho7+)1}OlwGva*u2&8y7Bh2LtU&3#Gzfi}#0^Wx>wBYWAFP3BW z1zl?6a`kiWDqEx~wpOXp!h3yQoO&u+CGtn;GUxj?3UddZta?q%{G9N56}d|6;W!5v z;=Bs(#4Zq=hiFidNRn-Zp9kp8UiZICBmsmCe=diC6C=eU_sV(K0c+QlZc%i#^--{} zoOCLn`maR0%=aygiQEmd99-Qqs4YDhcBr8Xn)@P)_-iRt4083tDOk)On*Sr^1t0}p zntm%AnQpp>$hAhJMMJCH84{$6l+DM_eAuyCObfrwjhtS3z`~r$)+VB_ItTvYFv{}I z&a**LhOp1%0oxpU89FPRU{*`Ug_?VZ1wO4E^8dB;xt1K(LS6O=8j09~_Wju3yKFkQ zKknxisXAeMvsJ)+{Q;;l;zWa_)`}N3!|oZ6UU;#pa2Y(ycw|wtqOzdUCPneXO6(#I zX_OPxiT*~ji70-wU4O=CVB%#C_OS*lO5)v$z+X1Gw>F7vh)^MRLtlz@gjn?;hG(Xt z7P8L)$y-}3x!)jzaHNcI_?pUwk-M&6Vc`craDT`kJoxq?Ze*aHnAf!5EANHlu&sDt z(@OADnPQ@Rd(P!_{zoz*@xLN@WzHR=MT(A^_+GTKk|#L5j!0CP%K{ALb*OYx?9b5l zeP*deG%pQl96qXuAA1~1Ogh(twxI+`U6t{%MOb1$;>Y(Ap*yx$sirOwIChYLhZ$v1V|4rUI|T|$WSlkSlzkb^k(d!=lg^_qQq^|SXj^3 zz+|26nmW2^)c~Dh`b`EKJoi=c${;62L>hPyVV>)jl9Nd7jhNdo|wZ9P(K%j9~sda4)79BUH(c;_qw@w zbQHIszHIG2A=(C~c);ZRqaK}K#FEE1w>Dc_xdn5F4aBd+ zGLB?4YIoe*KA>N_Ea=2;gz3nR^B$~)l zGlpk5y)g(8+BQCyW9uYbK`U~S?7D9~7nsZu{MO@A2b)5i$Toei1`AARKRN&<%{~f} zZ+&KFOM-EHi8xs`f22PANzS~eMbLPbqyp%|ok}BJjm4Ug_{kRgf>q;;;lQN3otk}V zb-Xr9*Y0I>bucap7!DMFvEmI?m0UA<f8vH3}s`K5=iao);*VpAfa0lF&Js zOmra`y#8<-Y6pW53XHDq?41xlAP`wLE~N@OE8zH5bE&Zr)2vp1(=KbZ?x5?VkoLYS zT%dYaf#8TV|17z{F*&*V_q^2QB-3|-kAu687G_CS-TafTiKt93DBQF@pH)UYZ|%Qy zEc7t8CAWSo^@=C(h*_P9VJS&{Bx%qZ`_R~SOs~)=>dAS1aa(qR<7-WKFKzn$$*Jt8 zZk4Z&UAP!^3LObINCll7Iym&b*DkgCLcq*Z)egzqBQ*_$iS>juy*uM~%WbACnByju zfsM&wFNzcH1)&@O`e|B;TF9!4m7Wg@o_b$y^ia=~%ZjM2%0D3Qq$Ils?lD| z?4w^4gY>dOBcpn;rg`QmY9SgX=2t5197xVDXOWqZ!U?X$r#zxV;d}kZkP*&>(lJhw zr2&FNxK4h;hWqJLeQ~B7q7CnPgJ|>W{-G=WB>M)~frQ(C5Ct)b<3&7A7w^y$tG>-42^*v&PT|L`K~scxDT zW&;ES^dXC%>OS~8*>bk)+{>3(GIw;|1Hhe~vwzlbHNgcK?~}`1$*LQ5&wr4#RP5gf zl3OL}R%m{aJc=6TY=i-8TlNp|)Ke}#ScoXI@wois=))Vy7?XNZn=FTV zgz>1T4K@TSoRnYHGBOx3ZpLQL!6P^ZT?N%7$pyszgy-Wnh_*@RNa;|PVc1PW#FW6J z88ph?x~2s0m69y8+=VB|4{ijEiATT)jMTt>eq&9+>iei!AAX|oVyMm3Sb?T=rShnF zYNWB?jf`REJs_j|#F$t?ryou$8*3xMU&(bJ>M#px&G&;Zc8K*HR(IZ`J>nuf%hoJT z9Ycq_&P;Jn9}}ha#S&R2!OPpjnU??gow6#v7>``v;Z0@YkwyDp`g0@*sCOXtsrmlJ zkA1nw$SIc~5=EJ?sKk`%e&UA;n%y`F@mo-6#b6e5n?o9ch+9}={K$;lo&yEzeZBUBtxtZ%WZ~ z>$+f#kvKdbRA&g&A!H%|tJl9jX``qBlpQ3)J9suJEnX?75A^|5<8PuDLgcur!R0rf zX$c0?k2Vqt8Z%SW{$M8QIe>*LsuCIN)<_v0p3fm^yp{PlBHkp=<`!&Oo8G_|8eDp; zlTy|@y5!|3v55aOyJfBf%;mb{PUpcwOLE=&q_EV=GDFUG!gl% zuUXzc(w;2Xv0 zsxBheUb@Y-*1r2E2H{DA6 zIO3M)HChr%08}1QJvKd}w&f-5+`8svvj9W>66B*bsdf^*!u=8#didM6p-B2Fh8ip5 z5^W*&l%8|8Hj?o)_j?9nVf}{i7WapCT}AS^^~?=;YERK~Xw)@Ga`O7CYZljvO1L`C z47%3yiQ|-&R43k$-TmZXwW91vqvMJt{18p#-o-nq+N)m(W62`(2|KS=iYGNaB5dYg zVUr2j*f^0jVENTU{H~M^9;T|naFT^8hC3ww?1H<~Ohvu`GD6m@?sSmBa?~;=>^rGV z@mzD6geAzVdf~KBuo;)u?0wy-pCH0&X5iHxclUt?Tb)r`6H#D3DDS1>>$TX)TJPcp zO5dE8*-vMAh`BAN8jp&;V$j<#!?nTv{d;4>NU`%tncz6-6vESd_`A;*~F&n@0`3T!suFKprNf(WH-@%!gE z2jlKo9Vc2eABw5tE6K4apDH7mbW2)LWsoT_gs~CHLT=}Xd7Ejv=y13CVp(Vj(d)BP zFD~rhm)D|r*Ymzy-DzITkg+>Yf%~K!DyCLyCIgV!6SFTJaJamuy)vFA`9&iQpLhbFSe?i=!Rd+&nZGw7>) zcvfm8BlE)I-sYl|!0PoS0tI>|(4ag(PXD?FRpgX~;^jcIoG&rT=p29JY%6TQdT}s# zl2fgRf677!=an-xvj54YWPpg<1My4X9H)hmov^Lj{LAw%hGXLIA6PRg9QzP(#^NAk z^Og8_NMV0EESC>wW^ck2^i}`;tz=mpX@30)<CEFKb&#BHEZO0sJQrkmE1RlcOV=C6{vUxQU`P4FgPyDnx8BA~X8qmK4;H{7Al%(^u%)i{Y6Um;DyqM-rMAJo z^HNYaYy_5qqriYh@`Y^t+8@h3rHFHW&aV1rEEWX?bYWFFd8Iehi?i9{8 z1h@PJMoheyU3I4th6d_8hmAX`tRxPPde6EV<*wp$+yPz#Z@<;Hg&K%R{}1TiLoH3*SkibPF3>cTe?mjW?T~ z1J)))wKidUpb|q3%JLxGwSYSq|I^^%V`U{9KTRcvp<;j7@60&X%%47q%iQp?zQ-%_ zS@W3LRZvIx8mEPjZ7a8fBjD9|e8{{3aOgn8a9gC2?@4BU7O)ncN*6poG*+&Syfoz3 zjLk{rlw!wM>3iHO&2TOOnE&Bd-{fYsc8EcOjk4iEO6xsTq>j17Nql&pL`u?P5BRPV zQ}dotk(jc%xQV{G%^k7bW4rT{q81>i z6{HfzoNmu{0EV2%Cz>U!I}RTJ&OBs+)C!ltEImC32W*~H%z_XjR^VG5v`F;C!;mwt ze|FbG1+$)xtBG|;`{7Tt!XHU+@IRV_BQK+;Xy4gsGjeQfH;?@`94weyJt|C>xkzMy zH0S$Fl6L$DMc^gy;NkE3Dqz7Wdha+BRU1harjgXYu>g3}SGzXB%?INVsbC;6-+K16 zNAVYIPXE5eH zzDVA+XEr58YExr;*;GJ(0%d91dQ?7eZ2#%#jC1}aZ$`Y+t}GEl@_6}_TfLfHKEt$v zY$w}tcrJKALbnSibs-@B;j<>Hf$@Cn1{~t4Bt#7y=K90ho3?%>)L8zU6%D@=-DaU} ztn)zvS43Vurqtw{bp!SF-77D|iY58WkpVv=RBdRFC)Gu8$sg{_Y=Q-kZsNx2--Tn) zOge)}>utqY>}7jg@J9j|O1EapVg7ak6=SX2_gY)_Cnn!wG`2}JX3(@+4Vo!I3+kXf zS$DXnVAtjG`#e{mpeUd{k7*G~C-6{;RA_@&FH=v$L{nEF=xtAD9JH`-Flni?yoTPH z6a3Oc(hsEHuZ=^3QtZae^#ZwqhAy5B47^C143j%^X+xvnt=?zzI)43oBLb`{hS_h4 zYKIgGYn`{U?7bVPRrzHut=VRrXQNrsb{yOsk;>`dH1xO{6#z zBw%tuHefQ!FGlbZIAloNgf=7c)h5^N!?LESjI#9uY~gEMyEW3Oh?Gh!awzIoi1=2R zEi+srkVf+?W@nW;MvwlMwl4VA;%3<0%CTAHvt0$$`FkqXB?R12+*vLtjRp;w$&o9P zE9lh=dreH?2P+=k*{bs>c)t71+f&vpOe{Dj2c?AHS*5 z{M{Fp@S%R(Cb#?P=kP%?SZ}m{uzhGX@N)2pqn^_%Qgq_b(?Dv^rcfbRPtXklk7w)+ zzHj!1?#SwWC`$OP&O5BS5Q%0+*@FbIemi$ zrRLS8JbUWNZ3CtS>Vp?LPM+rQ$`VHzQDmH)W!HQ*Z$TuxK^fEXFjP4r9+_sZTIzeI z{im=~&DyRR9_9YcyFq1n4pw~NankSVe`L(^KeN>T5)GZp1TY2JejfkGWyJPgK0(eStg%fG#Q`Lmsy&F7x8nPB7iT8b!7WrRlstR#))xN5zv zwu&b-J=Kp5Kxa7F9@_2f?0*~}1=24yue=EM@?ph4--lP%PqB@DSQ+#PTr>?wuJnfG z$b}y=HB4HmWTr9cwl&Y_@bb|6l$~Eo^3I6_>Rnxsh-!E)IWNRn->Biz3E1Y6-m`Tx zl~ulWwn4RqxKV}$D-siui=68bM|vt#-8o;n7tE9v29pHx%W#8%~B7?#9VewF9xEzZ%lmc zl-PKC^Say6ZWLOSfIzTSaZXbEn^Ui>@xhv}ToEeaj)*=*yVdig)a!HF%GufU zGQ9HLUfeCqbZ3=FP3Yt#PCd1sHfAo*B|@GP4J^m5pY><*b3%eXKj`#tYSs08@IM&( zWD9jQE8Ko^tx;RTYjK|msVC;sMy8)LC%n+=&^w(JlksF%tI|FwqrBt2km07~R5r;r zTD=6$Wy$e&JsaO=`p#1TXQ3Wy=9L1FuV;yc&(g20!)(iMST%sfa3D`uAD?eY>EqN> zZ~7xd#uh#~l^%JLeH|3r`U{1W6!2Lxt3{~fFI}AWBqO+vn&A6p-`u;Ud}nh{!hDYR7n2?+ z@T;ppHXxKn2yzNvIFTNFW6T~1`RY^`v>*qB7{&b$wmK7Z+iF&I^2}PwtFP}^_g_En z+HF7(lALOkA-V|mazR-=547oK$Ao@9o-SyFq|nd0p+_&WHGLav(b$~9>?ti&8dtYL z#vpeB1{x=k*J`PB$J6j%ILok35fi>Bl5sFESVYsvw7U9La6>kCXI-|-lc1gX99~Nd zRJjYtN)UgkH3MsF(WZi53t&T&na|mfE*L8h-Z)e>YVv%&2rJ}&Z1j0RpX~wr2*Fvz z%;{Z0@qyiq2vf1`Af_Mn1NmcX344st)YgxPrlCJ0=lfh2QE^+X_hK!Yc2C8g8tJ%l$h*(@fVXv4zcY__fv9tAZi3~XnEex6M0$PI8;-DUc9qD|uXL1QC5s02$+@Gg zf9&}o;5xozyucD+6>P<@w30`##JME?Z*mfbNwq2>J4S?U^3{H>jIgp%(B2ypV?xlE!?mPWVP(bjC*nX9Z{JI&SNKlksjSWv(U!lN(+nMfkSE6YpwuOCc6G4BKD?HTK!KFW8|fX#0O5tiQcJ?790Bpp!hLW zqP5@E`sBaav(7Wy{;>4=M;V4aZCgO^ORO0_{+(g;)r$*9ntzyudo}dLXU7ABP3=Zj zv@rP?i$6)YH0-L@DM?ugeCiK0d+|;Wf`yVP<+LejTEx9I@RrO35Y@QrdH<|)XRg2d z1|C_=`{~Y-p;HoPBcD;1e*xJpgvVQ)f;7)C9=W{FX!zXU{E%OlF5v-*hmO>{;~NC@?qrzw+Y z_03%wy|6VNf?rmNjSsgGUvu!>6URs)SB$JOh=fRt^UgDbHN@08exOP0Hennz_NM5A z;rv*A+JhM`3IFgmTDC2babprFi*9RN&$jLNzpRimJ~9w6C#eDpC)9Qzj>c3*DAJ}{ z)0DyqzjLSQ&d#eS&`SdJstGP_daRDkF>Vsfo9HR{z5?^P<&Piq0-ZDRB5p`} zdZ<nh z9ptA;rJHM;h3IzkZYYO9eF6}|OD0vkP01d=B7#WjMeP+lC)EWNu3mzVZxa+ZT<=?S zilsXQGkf%Ow;UW#n{Gbiuy%h9P?@3yG^Mbxuvm-Rm{bmq)~Bx4&z9U@H$ptoP5fWo zD}Q!PsV*yskmh%%kmnY%B;@^sGyILG3Rg+<$q~C4 z6x~J{E?P)wkzReGgkkI z1hXGIR1Ngs!nJjY|Kchvy#ekVsJz$BuydGp)SNK*HXAY~;AdO@!zIL@E9&i%+6bmx zw)!^4L&tV_pHW*lI`XWed*j@n1UCn;zMRXbYRFI~X+U;PkZtd-ENg^`tf_o}si5LA zs(Hl{>U3HlfiE^$>h%u7vuk+n@La z(<|<*?4!@u2$ANnw*-9yfQ6IC=KM#uPi@2@1Z#Ts5D3q_BqfVJ{-STDU`zW3`xgsb zE?};RTO{G_&GLerd0_9b5<6-gJ=mA9o z98&&s2UMBG(L6FSl4mm|ZyB^^r#f*c+KyeGG;xC1#$Bo*`b+;HwVj<8pR z1gW`S1y4kj?TqK*7WxA9IqORNm?qTw(9=#areXDD@X|L{KkSr5Cv>r9{?h|}l}#AC z`DLB2=uFyo<&hs38w+8S6Ql`fha9>6ZId@n({_h4gKo;1Vg+0cVfk zhfXwANS@I^SF1wwOaH_r{RZVb6#q+gk^#XI_yZ_eRbE&)U9Z&`%ctWGxmwJnYc^85 zPcLPVZ>#%_p+;b&-Kd?OWWVrBuR2uL+UD}g8U5$<4x;j4>3K9ano z>6E0t@t}?Oi>{vi7FZeW)aK$0Ox?J(3E)-tjO+Flr7`EwfF;(6quRe}d;U{CZ$41aGf%GA*l7ZVE8qHFdpbZG)XDbyZq}HYC3&(8cR|)G=w!C?YKi5d}cQOT* z4x(zSR!$adz8mYWvrFs)~=JX{`oBH5Eg&W`{b-oZ-@W?`+Vm`dHK!ApKJcn%X z?i|AYJ)nbxzO{hfw&Gz)sVxoWe0|mCEFrb>%t)MhbD6x`h`Y|$5?2j&k%_r?y3UTa zejzMXd}pIRJS%GZsHB$&o9h3SB9;6!Qkt_>20TAM_AB_5M?e;+I^5oe-CB)XJG zG*?u%?s@erR-^%Gb~et9u`5ZKY+fy8+qY4-TQe&(8V&SfHWrx637hfXfD#IEx21Dh zsydpHQ}pzmcRqtZn~7!JYKy$Az6yEkRKB@WvV$7#o63Q0AF7MwTtAeYDQ_v$Z@G-P zX&_(-OF-ijVo|c`S0n=H_Z1G9hPvJ35kBHj5lG@MqsLB~d1rCx+k#@xftnuNq|cXL z6{02-m~uW0ZoF~M1X$}LPKNqD{84uehPnsrFwdHte}6IOG+C&DPmy(C=i{De>E7^> z&G$F+HvYU#@}rfau&ci-OY!~CnWEqiRL{NUR^_f4|qU6P`G~2Xs~cX z(s;E)tZhRtnn%}pKI@1iur&{_(-0ZO4bvUFcoF@OpjW%&V$}5ArNXco0|R~N&OMz^ z4|$Iqzb1ZH*0=T!-R7LbDFsQaHf|9PK>czgnoC(5*LEe`60 zB3%ZT-H?<6rJMA(XY$)r7#fxvwk;pzWp}oWYt(&)E0EimPcJG7*38jPAI*2hzS7UB zyEl|_l3O3(#3^DD8aP%;(&UpVGpjl!GdBQPDc2EsWga-1_YnX<6pr@n$C;h;*zN*n>L)Xy6A|5 zZoR8tJ33YDVsH=AZ(4+RaiV~6l;O$q4z;exrL=dXbpNCoVLR3t=}y<53Uy5!U7xvr zM4It3`TqVJ6Cb-50L83#T zS`PgNt48}X{X=H97X2oQN_ejBx?q1E*HIJLBFVqpj|XScPaln;nzqBO(n#sn+_mdm z-H}68C~Z$;+6JeqCqm-x{gsu0s2zDBn{rS8j|gvEy&Hm*#{^?F$z zJ=`Wu-#%vptP(kOGn}T9HUh1#1ffQp-A6}WXQ3!!O~D1iKHerotJt?of#W6gl^UkR zptX`BsgkekbXm?$Yk{1{Gd*&WJ&JV!K=JX$zI-<${nn#>{?=koN#DJBteeKijgoY+ z-W4V`lv6tpPFm)A+k5-#OfEp+jPry?@QnHJyz9Hjfbn-l;jfq9_o?uMoLjTgTc_K+ zFZ4I>m<<8v?gPQ>=?5#aZg23mfADfp?8wx=S#RH0UKv>%6hQcrz*lR_4rpjm z1Md_@MX!DJGq3w_^Ah$^@R4_&!ycEs%se(!0XM z!PkFrbSmi|Jl#8@7(N0mC7E7jzEDuB3DTn0JSiLqbQ}OkZxS}c4}Gb zkC$@dFcdOwn@djyq1|5~=PxzF)*SQW;{Mg+DF2e>W?k!wknsR@gH7(WGmNcK+p?CG z_++#BVwt0W2qme+nc@!rjU>f9Khi>vm|Wc9M!X4m%iKURAflo~591q_&bh9&Q?VSGX>qW172<@{*y`j-3O+5VRM@KjOEgCpw=iZWdQ8Qm1CfP;TXtO~W67e8df*fUgqOMxlW9Jb$ zLqtEz_-eu<6##wf6m9BFKU_H^Dm-hZ^r*E&W)!{N_E`Ij7v_2Cy{h^HeuZQO8Lx~h zWqa*{<;z((Vm9EeLu2Xq-K5>7ies!xC+}ep>0@lN$M!)k&O!$h)NbkXYE(P^2At+~ z#GcTYi8Llbp6vk%S6cqkW?qM%3kWIr3qhR~4V!wIbok+k8HZSGDyj>5Q_v58?{DYD zziC6*{|~11`n~=2ch$QMkmtw*hbI(CFy;GE56T%UHko!ec!nM?wk!94M*C)lX|TC4_Q^7T~N`^ z|0+ZDfMCHD%&Tno7(3c{{nF`!k5exG1ysMu6(InUD;+*a$+r;d`AJ}zY3oNeAH)B? zGv{nSJeevv;G98i&jz@Sh#qAVzWWzNt@0cd2X`i7wyAQP=ry!*h@cJD7g1s2+t}X9 zffv6|=O$sMlp=*y965Con|1h}Q_LLx?F84rZufMOD>XB3JJ@X8Q{*o=_Sm!56j-a1=yYQRExZ_61~{lK1nQl}ayO$pwUivQ zEX-W~&F17TftM&4g7aLZ3(1xfq`Bg6dwy8+wQ{nYh2>k5N+~w@?>ZX`?S9{2UIZ`k zzTKcAzkD%w9Flc=E;Q}-bVZ%*dM)3jf(EjRj%7n&Q_#30?uzB+k$vyA{!ttc*w6sf z^k~cwTttRneL+p`P4qWtkd*bO>2KVmq~ax)l7GvzR0y787q!RZ$ba9L8pcZ6^z3`q z^`bv0`!~7yzS9o>Wrqy)K_4_!O|n&W{x&V0cpbKHhh{#fpRzxmE+!_=_D*_tXJt=* zx6gdD`bU(1-ukv`ot0p-`T*e>Rv9UF< z|8W|Sx#tUknyS4lhrm{)^w%Hq35zwV9kGxzJZAjbN$gz zeCOd_V$##}_|pg39)|vQ#mNA9y$4<~+;txBq}bT7&;Et*|9cV@Qh@8Njoxi*DMBjL zcOj(DD#*Rm3XL|$L*#pD1X@?xFwY|?@G9$yYnbf(7Ig z2HfR#7TvvxJa+5f`}riN!`5+hEIWBJOlx+o*ZZEozv?;?fj&hECJ;^nY)3Lhf;W+1 zMC8IKh(^{@roWuD$w-`zUI^5?bima`29a65Lhd}|X8%_3;zxsRD3)7Q*0Jz1GP0j& z+hSV^`n7NO1se}beoF>sp2~(}5G*BWRB_vuRdrsuXN|UL8rID%bV@wGjI1*wr8kA# zM$w;1&!fRmMc2g|A?HLipHABgWsNj7E#EHcg>H#|fg8&z=uMr&p{-hGpp@O0g8Z|? z6yOk&K83BMZ)ltp9^y-Gq)s<)E{UpyuXYduAYD*q2#tB~%e(f4Q16{#qM;@^B&ULP zu&()Ub`Cngwz|qzGW`l)Ca^9^;2>}7W@oSLD(OF`)(=f!(tFKh&$rPg)?Wi{gX!f# zlxY;*G(^Q{`fJz-I?i>f-5e$+7M>YUjW_UR!=Tf{@+l)wXkqPVCb=lr!3E>>t zK44WbS>6he0q{nzPxP+xNJVb!4A>wS8R{<;9xZq3%LFoh6~M@Cn-CbF9h))0*oc4T zV~dNRj*6=I+6rGjMz33sx?Oah#m6iW&FPUodoi8Jd`B?(`wuE0jUJBKkSp|5bk_ct z#cCPIalp0zJ@$vyck}<5iTupsisb_@Ha4Hazwy$p;S~OKUd;SoK0VgA`+A%AtgH3^ uYdzTiMGL9_aZTp`s~g;5P|-}Ll4a}BV8R6J#Z0VsE8W$*Q*ry@)Bgq#_m7_d literal 0 HcmV?d00001 diff --git a/windows/deployment/windows-autopilot/images/devices.png b/windows/deployment/windows-autopilot/images/devices.png new file mode 100644 index 0000000000000000000000000000000000000000..a5b0dd189959dfb55d898b058da40e0fd2ad7ce3 GIT binary patch literal 45828 zcmd3NWmFwOw?aI9xoq!{mGK&8+!9f2P;! z)u+y%I@Mi$YVSI`qSaJnQIWnNK|nyD%F9V`aPJ{(C@rYRGd}lM1zlx=-)I=1Z+i0QN7%PW~Ati-@+=mYdNhEjG_XrAbg*O_gTNzl} zul*CiR*>~rJjwP6zC8bTfk1CQHomG-5Me0sVPTL}T8vTR8~2(J4~tMY|v`O7zkFY;Rw=LRa##$vznz#B@l}Us8e7r zR8S5*p9nti9dW1{!`g2)NE0O7VTsdze+Yphdl3qyC@{tvVY})F9Pdvr>gDgLdFU0= zO0zh4>2w-EXG9zHIF{L$wktIxY?oy?3h#>Ih$%~HfWX5=_l0BP0iPNm-H4wNEBb@% z=i_V%#^;GYoB|G17>Z$1-mR!VD&h4R27=6*_9cxkgMXw{r^tMLhZw2F$w$BX0)9oBGGXlfys9 z1d)0Viqtdo&(VBMsD?OI{B@TSEq0m&{*Q36=PpuP(SlZ*GC=6hrtT~zQ;G#Ai&L18 zdveYL1~rs3wzxz@G$b@sG+0bLyvuz%b1UDT%-Bz&_^NM)8z4uToT^ zrEnUS?9Rg9k94XVrsf|RaVKa9>*0@CgiS`U)cLviR(;Oq$!sUHy4;rjY(jE>oVIW4 zoUIy?76=8H*mMLI^8RuAeCb-SQ2~D3idrT{ijqp3@vQkKx*CfHEl(EUch!EHp3%I>VPAzX(6b!U`ZYTkL1(ArjznB}qS{rui+z4G8_b8o4R@@0qjKv{OTv2~{$+)NkxnFG){Ee`ox6 z;bv#ElZ2}Lgn>H8spMtqZp&I2;Q4mnWExoIV3wJio{mAfJ%TG`Z18*{yTC`f&~n|o zHD}c1yPHlW$@}gY=oS8K)o__IV^fuFotZ(s8C_%UW~fPW6ntNmQzUES z5}EiMmN<~*##2Rj=7`3<@%|@kyLa#Aw7MFr&#PaiJl8Y6-pR=v5$9chECd;6h$C!g zH;FZDcPDX><9o=TZIxoZ%qv_?u2*(A8qIQXa*Q!k=p-oPgN=Kuu{Nt(buuom2Q!%(}RI;=Xdp-SiVDPsYSAu3isLP z%|*j&@3RM>?6ZrF)^*CsQSRceQ!ISOvVU~t^9AD%1M!f1IF`9NentqNYEM2J9+LGE z#h29bgcuhbdHP(eiCYogko*0ZO;$uvHQ&(@Der4v#_bwfE#B>UBaTbH7SiafpA1!{ z8xC{m15WpQe`v}?yG@leroaa=Qook1fbL_DtW_kGh*eG%6rZ?mxtaL8=GGxx91IK` zq7-2XPrrZnx}aTsM?bcRSD&z35}Eih)6dbFu48ex6@B*&k!rJ$*lH z30|r`jFt=E(}9~Nyj>eXeiX{e{V1=cx|NyPwp|&t);i{M=P0h=w*poAqJbuv9+tkm zua%z7;X0w!2!gDaJK0p9apew+_vmPH9Qe?(-2^(brmQ`m8`)mAVWc^7XAZG&La9$6 zK0l)}f%%%n%5yb#_WeEU{Dn|zIRR(Y%caS#^Y&z_zDo9F<7%~Lg%wfC^tS)`NNmt+ zoW2KO&&OelszRoK+b4A0?8sybh5;daRL;w|0K_D_`TKZm+ADe+#aU4E1iWq_kN;$@ zDSrK$pKvAxg4lrFcq@>V8GENtf5Nzil>~<^YeG)VEtCV z-S7f@)|I#hi|EcNmzND%)m-k!Ofs9PHU=&`SCb;%_w72a+V`%@Q_BKNnQ z9ijzpZ^a=(WTJX^+eg_Q$sbgbso;Rq{NZuxu3pNgy{E*JMS%d9#^G@(%o-lnv6Yb# z&||O>e3S|eT=kWp-o`5bu(dB*x6UueK37LeOXpOh8R?CbE#ur=V%HURx#6#&wH36- z867q8@$nmZ;7HLhPW|xo@^AdB>w;a|OqExmCj`197;bg7!<~8T~0>bYAc$knQCea;JfKzM$FR=OJ$^ot?*VF zVeE9BC45|PQ^lS(5fzg3RD*7xqB(1j z=1WS7n`6%S=^^LUP%d2SRHo=J5C2LaCz#v0DoTHKQZfM`<1=fvE+!4INTz{RR)npw zLLJ1qY_Q~lZjax~oYcx|MV12g6Zf~vJ)uDP?QVv8xQ4%2LA-e?uYg1rRr9&av>Ml0 z!u~sYs&%S|UKQ0Eza!2;O2WDQ>N;NUxUbXPRBa+i;@w&5PR*7e{3`}cF_PCUz$XgD zSYkWBgA>7R^j<&X&V9%_b?fX#=szT~9hQ`)R{1t1mR499B~}%hOu4(m-I$+539o4n zJ3oUHO+So5CX@IgBCs5_2ZNY_^c_cSzXZo0mV*9ymkqf%s~MwkEs7~3@GHeLxC5R; zT7Vid#A%miM_NH^`gXm;2}UlzI%6m;HIJiav_FyDHIU0SB64Kcdq4$FQKms)n=Mr) zfBOk9yjRFp_c|2DOGi@W6ACY=f8-lYW``8<7sL#Tg&^eBLRCVWX8qm8kdJ1Ejll@` zr4?7sN469-BVb>P#A%e}(WPjh-}ce)ryn-pq6RkEJG{Ixw&Z8{qv%Fqu$1Qh-wa%_ zwcosqj__gPjul_HlFsyWUrpM`u*RX=RC0mVysf8HkhWNs^mn;Uz!z`ouDxOD8_L9@w!G><3 zTkHep^kH>n0{YVHBB}QYx!~xMaXPaX!-`VSpfbulj*m5z@#2palYr{;pmz7YurCpL z1Hpw^LGO9!nbp8Fuafbl|0Eate~3@g`Ulq5g?6=4$^@5)YS0H-Ugxn4mRj||bmR)g zK}6MUz5f<6l&~KLj^F3Q1(=t0i$|$_4W&6jKZIsn8JXX8n$60i3sZeCuhjHxY13!SZ8&;J0VOJ zKfw_GS1@*1LAED^$2j5^rBhuZrhUqf$aJjBjMj5A$UNV(5`swp7Z(kWIRI;12#+Dx zu5HCC!cBq>Ves)|GP-EafdBB!*bnq+Szr1TGR4J?A9VQb_A{E0TvrKswuktT?bxTg zenMS3v%o&f^`5aG9U-fwWceBBG1EV~j*swvCXb(`zSo_;9a;viij!%I@~{l&!%1^duv?N<`*Gv6g~qfvj6Y10G8DBh9sn(INk(U zc`BJWzo7Hw`KYTp?r#@m0WD((KtStj_ia#!Iw5f$$$>KJhEtc35!mtx_hNliN#ET} zoR!T-q)P9d;wpX_otcQ4@L#|AkP0}QTK`scDcj{LGSb_HUYd;rqRm7$D@;{f8Y%%o ziRsaf21r0g?Ut2YP(|1^SQn@CdxsMKC%f&#`C8P41!>)KvP=7uZBme-Rh!00?h%%6 z%l^O=eDr`lSP#D)^&=&@v5x(v_yJUK^zrxh*I|J7Wa@Y~wTD2Dz+>cek+oMD-i3${ zM{}e4(v=loS66oSnQYG87yW&*r$0$3nSInp$=WEn>|Py&g5%D-g>-{4HkBF6l5 zr&vYe|3mY6MUtfOd7F9e3YA75S2S{~kX9{!x7By`^WkD+X>l1o6DjS_CzgANHWzYG zG2m6x4T{aEQ-8i9mq<`5F>zw>ob+&W0LHO-iA(X6I<4h1{F1oi{Si5hYX-KbBzzE` z(e?wCvs(D>rQdsFlWQZ5!K3Skw$HF$$+xQ9chf;flrFQKwfEA^PpHcJ-dMP0ZDEE% zhYRopG-@jjQ^!VgPh835UxHc_*(K@*Qz=zV=g~!I6|loqD* zI5yoTYv~Wx(fR{MPm%AfJv~(s4XcmGQu7)ZjUn5Sx1uf#(59h_A zzPWWR=`%moG}M})s1>tEewm@08*!T1s$i~u#n}$VY-z*Sr520TqQr^;=ND-GLQ-2o zWwTI7%Y4!(QhU_j3nqD~F{w!LClKK3k|Imp>4{>=xl zT3zPNm)ko#AOCJ^(N!PB*AELx7y)825LFfRgvEdnS??!7^!6h#rAChm6A_Vq9zn^O^ zgFE#oC1UF`Tp4#mw?ak;7b6xXj9S3RY_$wNS9=XQ0qLRk6jZ9mdutjG3&V;hx0(WV z5a-3;DqD<>^&*(gU^VhZG(Ud~rb-FiVyGylj9d-SH?jDtG!6dKn@59p6+ zdE7nz26wh9CTA1MAk!4PY|giA)@+o2>0{X;KeE%RbzOy0Pl1h`o9k8E>`xjLnF!G( zr5f^KQFIfSPOs7yMdMc2;J9&wMt@}2$T@&}EDVU?^19FGU%wk=d5IX23^(lQIKD10 zfKa)KqN70t%ZshgNQjS@z%+u<6ZxNRmdCqMn45EXDn)b;_? zj2B)e10v;;0(^4XciBT>NF{&2po$pRbQXhp|B9RfwfQb@lwHQ+8(#sFe7BioNOGqV z*?E^Q28P<&D>aTFR%d8B-|&6NKE=$o$I9x9Wz$?*yI)|hBj zaNjEkc4|5Po?Ga?D9yF&4>6f&y`L*fkW<63>XudZUPu@UZo7DwC#`682^-qNz6_qH z&mSFI>mQo@7?I{#nu?l!;ck{N)z`uU1h5#F9p>*UTL|E}*+)fpMfWF225JA2KsIeR zO7K)*i4)IYc})Oxm|6G?Ixhs-k~BC})$4mrvqV4d^;)u!`6dM0 zU7pP2hQ{`e^%m<3Ru&-Z&9#6LzNPn$fne6y?IX_$ue$al{Lt-dA@DoT zZmosu`)xOx&a0L#+wwgF6fpB|k1G)|Bwh41tmf3=vUi%2jN1?~>s9$ouW=?7vYbj; zU8Z(~I4yqLm+HDi7n}*{AYYNhfB5Wry8NuY@^VgC=V9?@DErW}m!D+GP*E!8Qfs6? zS6|&dan~Is=kl(b57U1ANB-3SNryv?y@26}lU#Q%VXkAfQ2QF5H|EZdNbuTrtRsAv z^*QB)wJc-y6lnn3iunz(>RBItv-mR$p#SwTyv1+99s4mjtW$7)uR=i6mc@1~j%ecd!L!Rdz8sPr z1#$&+Ik>sZ4O{v&)qOR;&(nr8f$B1v%{B9Y$vpxlc5d3nT7{QGk;Lci?Dv2(6ojeh z5ncA@@;~K@IpqQ7SHUZn%K0S0!*?sqE$yFKhAVhI^|5P(E6g>MU=gBO%kvHF1*z4o zEB2UkkbBE5Uq!v($9@BQO9WuB<#s&}kJ*NezXL9Ve(f zIuOT9U?=-`2xevTd zv3Q!M0BhD~N5p8h-?AuxjXE4oTxGMXbrkHwGbZOPo4e^UFQf1^4v(xc4w@5%pu<?<5yVQV6O|^wmY#ELu%MemU*bjk8NROot6_!|U-Zq(*sTxbt{LT)2}|RhI=rO( z<-6tU)SKNl=0)biRkZWqVYBE!tb?>_qQrP-`soCnae_U>!aW78VwBWYp`-|?1!`#Wu8c`Kj8XA#jm%*M&)$ANhJWsgJfM=xalQocU?7P!dC-FQcVgs%P@ zcA@8bSK1|S*=B3&4dW@(jXsaLwMVAjG~2R)g^|RVAvWqA>vL#4Rw0Q6*VlSt--L?W zV}UcH{?v~~5?V>si$@l-Kd@^P!6u$VeFWC{IR?OVE!(^m0X4<(01Xxr=9Jm#DGnPN)M675Chhg~@u19=ur}jsUR$Y(G=mFs^34o7Y9dXo= z@s>}QKX1g1K|Uvc`rsYe0XZ`tmMfBj3>0<<8lNYDeOfwzr znpMIpz6w=x0ZgZM+IC#0+WDn(H7@@9H9$^O2Q|;UuKCg~uPvKjvWGnZi~5T}+f)B8 zX^9%Cx_z5h5G>=&eXFQh{-~p>VDn?Eg_S`H!1%S(lrZb>HHSOBdax-Df{03R$FJY; zxmj9@Pt6zQ%9Na5j|xjv6g%BvnppmJ11hM-w(cp1Cku~1uZxWOSpAkm^Dc#(2dO*5 zu$DIUt-*?Bc`_q{_B)$NseDtaPruuw{7l65b>Ww-+~G)l*2!*Kr392GJv#`Q-HfR* za&N(twu)I!aq#_G#7avoCF<0y31?Z(+f&8f^qj4ArbNhJAmknVM*l31%C-!oH*J-+ zWTow~OrFS0<>yg$LGZYrG4IP)d-U*aT~>6^77@F)b@9c#D0IshpH&YH9-`TwtdK4% zm=;S*wF9j~nF?(sI_prUX^B>xH(TA`k5b_t4ZBv!{Beewy1!v;DE?vQi2iUn(F{w` z(#=0IsVEjDWh~TW4+l>I+zeLQeISNm5|LzKjcgtNS@b?BL7#;Ydg`Ieo{@>qb*tHWqP*>P zaZ`eq24~%SWf`Y*#;|#g6OvmU$x4Z9Dz<;k>)E4vX4F0)xa004{bB*XL3gWJ+Ib=} z-m#%o@tbdayT6XP@*KYEc73M&di|-By#3`Z_m)D(JkoFIXIY(i<2HTNv;p%i57h0q zL9gt_!}-W1**mt(#f83j2|1a_=Ml;H@ef=f@eo-T)6BD&^gl6|0hW`nQ9YPul*2mr zE||tmzmk{=SDmBUZUW}STX0Pd$61}%`kZsUnecJa;`%3l{(- z$ial4TXto~^;I_^x8zV0O$Aopb2Da1C4w&j-h+j0vq$&Tx!Ylyt#AWUN3Y4*QO$XD z>elhy5j>-<_h=R$20va0dYgz@+HrGPYjz*@pn7f0Kygi#JVLs93~1O$TOCB%?4xLX zFi+H6_6i<(!i^x?>wX62m875Sgp&_yP!;yF>=j?I(D|B<{z}6^pO6xzn~{4|W1+ZG z>UIiY!e~9zX#MRmd}J{komM|E^|8DUT;METSo8yim?vj;>-VUUl9>5X)p5MsT!K}i zjpiLKii0Zf&Su&L{Fl=4N}YagnK>&_ZCw2t7xIo#N0q;gkH3ufxa`X#B28o5xTeHc z{;VBQ`1DM;)<3EL2(AY`!0oo-29E|ZmdywEL@+JRn6T7o=31iL$Fqw#*l4R6r9JPA z9JS&54|1rq@(Gv~J%x^`P29Whpd4lh07)T^5qo|w7NXCT2cy_IJ5<7mVGUbVmnS7_B-cMB6`z$_Kx<45C1M+Y;t^oRB(=#3W>kW z&&VbzRJXi_Te4X>bSAQQ0z3l*`@pk>ld_=p2tVY~cGi{}ZN+af{zRMu1h&}AQL)S| z(L&~CteR#pua?41hq5^0yEY-$I?e6ps&^UR)m)S@$mhPXXVRE_oLJGDadTa zCU>#|y8wSd5ih3hAjtVmD6z*0p*g{7ITR0L^jV9Je9UU#_V#aa8uc>K>Jh4PCEn0Yc*pb)C;c z>)s*3gIznU3Kx}vdY<2zvvd6#C#ahek|qStmv}tWSo(HAbMGf8j4$JY8{GbdT%&6X zbJ-d69b=9Ww&5DZ(okJ#CyrikDvVq1$(r{%8_QPov;~nrgnJ%)H7T-UI?t@WZ1HC? zW_tW1_pnw>I^^r;tjjcb%=VQm$9v_*UbP4YKK_o%-LvlA&Ja~g+*#aS)N6cro1&M7hNC_e z^$YFMRBC{g)!OVgvpV_ob5ox7Suzb8cqx*a=|YBSlg-GRF-PM);of5SiDnZse%IZg z|F7_gDCz^2xF3R_{XMnPUZ?O}Lf89adh=|9*;P;apjLdVI--UN<9p}&DY!t)B?qN+3+K|ZN%e76eTJ2tDv(+I zqDEyWMTymX^{hU=@_4Jo;Dqlf3^Sc>d39xCb{0G83XRmXOL*a}G{m5ymBl8tt3-0_ zB77vWhZJsF$Ka7EeXkb%MzA!PvGZaVO~Ji@sG^-jI7r9vwRU=~4)_Q-^jIARWx!>` zBCGOrnsUS&1|zRK7!0+S!}h3byB8L3kD~=Cibq&iK}q z+h4xu7NS1J(WmFu-}z=zJo3@|@J;))J#oY*O|H97g-pm9kXqCE;1~C`So&@dc8pOo z;2~1%V_nYeJlxxmK$00BGs@LlE2ULxW>h4t()MiP&CbW*xQbcAR{p9yK&e|p>BHu=J!a4r_zC+XEJ1ca zFEVUdO&qD|WnzObQuiijzBj>e6?{f~BjSRSES;Stg}ln`sGY7T-D@z zTkd`AEUDjF%Jg~3;pvDS5uqy?6UK;(rEEH&^ccCnlt;93v2t^U6+?Kqt9#+J!T+ni zxADD)*TtY?RH&W&XW(!p!#0ahCI0s0ew!_!;{~V}u#n%9u|yIWb0E``+uqnTFIET` z*EkEdA4n?gbneoZMww-JmsaM|x6H$Rm7?ve0~y}WFJDQ z8zHw%o@?pkb>yPo+p8)E9$xa-0*F1qI*5+FUKZLO9ktwJf723_r6na@bUq*kj_Zd_ zBsVY`RkTf%ShuJb%)Iq61pkL* zlG{v@`d^28^;UVBJ%duNBlr8X8Q#WDmos-Xd1qMxb z>`-gz-IgyzjwCokA6heAo}=&8bNz8OqpWN5B>^cQqKb@2KE+t5Dc%#m6&~)R&Ya1Q zH?MdtQ0i{?VI$8I`ROegF%L)mIrhYGo}kzisQij8Z7juw_$|20JX4SMWD-HX&hEsn ztx0zvr-Yd6cuD#n|8KwFHQ|BP&l5iTLrTx@Zp2brS;RZ!v-N0M94ZC7lsV&sGIb|LGdVTM;HgrehcA8@SAYEmRg|w2cuhzb(h`+e*w!u`WeZ_CAw%@ zBeBbTQX9^^@+2#K1c{;z<{Y+%nybtf51l1r*$(&KxRL8+IBdp>NV9lNl%u;@x zx6*sCkFum>(^Ygt@Le6!;7MDGOoZ0$P8!_pii-Qvm+3SP@)a|7S&1C4D~PJ0q(p7KXbpfe%Y^OPj9DofP&CR`PktFB{0zysySjv3R}Q*j{~X+{;)1#!S#~V2#q^0EvsJlC?tGuK4p9 zokO0>RC0V04-Q0u)h~PB=m)*yy&Y_~M7E;E$R;mF++?oTA{+zv&eWaA#Y1L_H0J_~ z*N$r2O>GLagm*lT3T<_CefQerTX;vg*XO#&h zbzz~{4qE}+u7TPJx>9klmU_`9{<64xy66sMGc6qTcWvPhY$HGPBo8g(H z1UjXJP;vOyFIPjdg~it1yy`cEYdmyC)W%cXMEJt~+|x0pusJW?9PP`1q31uoJ_aR0 zZ4#nWo*dR9@$$jGL*V?}Lf(^ZNxT6r!25WON{5S`1F2`9E}tG}59bX*5P5=L1<#)Y zEB{7GbM&A(Hk&klQMs}jTFWh1SyRo0oo44mIa)ip*uU`_aSFGb#21V&U<(hbO$oTV z*yX#ij;ur55>?&ZYF}XU3g?en_Lq8H?x(xKBGgXOEVzW$EKRbPpAAIkDUB-+DTA;; zJ=P_l+3~!JtGLeNPb!+L-Nsk)a9TR13XKsne8isPV1Zh_xeMIeUqjHy{tObHd+(iE z-LaI1bYgDI+Fs6-f%Og!`FD4!33p1i^pOLxmM-%=i+qZw{`_VH0aJ9TARXNsk?jEe zJN=(EEh5SV3c4u{xcYW4svtW1OSCrYzN&bjeyXiDwS!lNAamEh>Ax4Q^#^%rdiziA_^+y>Y?76@HtlqN0prALf2mnk*6YSi< z8u)&u@$}bQkYN{l3?iK)#u~l<@eXCo{mkj>*RWuEJ5+ZK0@r~-*18(ORi``&dL+Sv zwM+Q;X`ZHG9O*@wEgm84jkRnyx0rGNHe&FK(W1J zX6}qtp+^kSze2&U`o9QRfcUeyg7aM^D#IDuNeY9k_Oq{Q))+o+wetqIh z@tk=2#V~4NP~2^MmW9O;)_wp>X3+HP;MdgIA-*(Qg(cVe1Uj-5MbY?SjNQH?s6Fmbove-Z(%wg=n=l@{DP@ zR_IH#I*G2zC09@0_Kd~SVR_nJG0XJ|{uzL)AkEHj{Kiz7lb}_q4>c}f9oIX3Td=rJ zdt+WVDRpl0*Th#Z)wNel5gNnxtlx`1w}hxR@O+y;s;pWFPnOqhN%qt*w+&sJw2fLY zWI0l*k-KWU6^Hh0AZfJ{goplX6#vm4kgtkw2fYSWS36WY^srnWdYteHSFLN2QGF^w zLZZl^q|se~+N8CY##W|2%Qbm*Db1J43j|x0wUwP~zWdUtE*fK09%D`f-&xQrB#F>O zuJ<282Vzdg-`}*O*Izg)HTrs1)@|X0drYE2)ZdPvy)L2k{ zFH1Z$B7G2w7>5=|oto$A7rjb&_+V=>hIBTyJlZm()59*1Ws}=fQR&tHi9ejeu)cFF{*TU@Uj6?kcl>}#@uIkWXn~^!i>AP*>)>nkC7@gMhYJP+ zwuu70&DxN0#*$T3cX#*Fz2>;}r*uy9WjDVN{K3k7n(b4kfBVgW2ZPYo#1s#G{H+F= zDZ+tt1OmGPb4Dlz<`Y*u6#^+4P1W&Bhp>7$7Lxkl)jS!zX(-m$xq%tzeVQM~N%S4# zuCMEdIhmWQSpFGy3I-hx!!b)4-ca4d!9nwXaG4g3EhhR@DG_c;Mx5iO@5#V_nn_~G zx0$bxn6ORQi$6Gra6{YhBN)@ci`09XL5$0{^SdcgiP;sd|1>(a)CIB%JBVI z*;2sZqSn2`2lCbzn46RcHv=x$ZUF&7!Dri*Liz`-S9)=GRw@?OhI(K;(gztSZXrQU zALU)Jl&4tC`*d=lRyd_vnwd8aEUZ);JM3%;o40V3lyn`YCrCEwkK=;>H?#JKOZQn( zsxiN9EY_?#^bS9C3B1+PqAB%?gzAk^zK?7hVDj1BMbB6+&j*zCFXVF3uZHUKRyRmP zXx+=7aLu&i?jNl*qTZF9yXYAHxzB`Yyq1GG%D`pS4+04j;9>s6Zy*)vW%KI(WCQt9 zMUp6O2*R*~hv@U!-jpbtN9J&lEuV@sh=|BYHijnU1_K}U{$1brA2BnyC8J7Oi*kVd zcRFIs62o~2Is@&J)Wv7S2mJ+>U*%ukcOjJE!=#hu)cOA6YWuGEV#QgdCRbEAcL0f) z@-FD-m;nCD+Kb&l*;vA++&lb^I%nm#s_RKeHkNJnpjY`>`jdmKs{KyW+bv+p8%^?DP zCtkAMK)z973%6{jQ^IIQpIjR^9oqEPvQ0I@ut|g6DQam|QjF|x(+aBcCz5~NT&;Fq zq5EshzEYQ_-TQY=px4k~x14cjhTOkYU~3Ady_S8e^_MB8^zW+>+(^3#MJ_NxhXS-o zsO0}0!Pyp!gWmjIJtgOOxob|aylrBvy+UoVL~0T;$i_g&{PQzd4-L7(4eF|a3HAE+ z7CpYf(hc$J?-TmYkd3R15UC(pS7`}lYk5%JSm{W8LgX(ES~5q*2G)jZ)nGSxD?8Gk z-+C`0h$8C5E<8ijHb>7{YaIx7ZV)vVO)~a;C$4STvk$G&23wYG%aPmvK64nw3+{AK?_z$QA?r((zw;$cHu)0Mg;qI2+ ze~5vC_Y25sNLG1w$;J{L-zBb88NrEN{kJvfpumf^711Y;z56UiC0f*;=8yw;G9g^I z1CLGlpvkf1h29%I5A&^hSD6`5a8(h_W87(N$9CX*+X_gp_UwK#NY35$mv2Fzh%eCE zArvmWx8@|PUM^#cH<#Vx03GuCo$-cM6o5)rr3rPqY4sNL1M`k&@Sl{_@H8J8hWO0$ zWYl*XDjl$&mkl>s+ynR>+~;(hYiK zt=v3w?QhvwtO;Yo#_=C`f7!8->3!%nklEf3NXPY^N%;3#GTY~-zhCu#EDLer=QD!8 z9?nCG+{037my@h^I4pwaK6or#6kq-*bAdE)Uf$bV1e}GtdWYQ3Z6ng*+js^tPi*^r z55{KlJi9#P<28zRo;09$Rcy6Ee((1y+qpeD1L0xgRUdvURAd9PSNmhGc+_6vv0o#R ze;ln3uTU~_4Q?;)w z8b|M%>%z*MHKfVrG@UF8tDSu=at4Qgglk0P0gvpmjBXR@S&?{+igl)vH+$UN=5JCH zd>&TrX3pok*VZ>Ko%}7fh_#VB?xx3Q4|8Y_mCO}0CNPbSnS=}%THx>Ef?j`XRbO9j z+th6IY@AdzEOus%<8of=o%3Yk}}dZe&ZmE@h(c z1Twfr20~{g3_wNyQ*Kdz&v_lm3?&er^AkgO?fegDnd`+D*w*uX9b#|yzUH?ASIVnT z91tZKf&29d)oO1hz-V*xp)LoO^R1f#!fPOY!`D}=>xAi`pd@$R(14OP zZ0VK+s(SbEvK~_+8yY%w+ zz60&GZDMW{&_Ge(-2GeQyy-DJ5z}gZY7>&3#Mc=vJkVdDvY2`}cp;4~34P>p08F61 zp?l`}QHMEpx1G@0-9uEv;)gAvBBTX1_j<|#<^5zmmCzU9JN1GkQO>GxDK509EDDV) zMEojO+%Zn?62I|Cm6X_T=zMYMV%d38&_ESC1Gvt*Z-)~a2*f7jdJpXj_{w(uL`C1{ zoz}hsyj3#ZthaZDP|5X}RHU}BubPHC*=7|yI1i}k>N=Qx3!x-a74gQ!ap1l{KG>&` zJ?qr#ZnNmq{JlaVJ~l=N*ZG0H1}~H9fJ1#nEGv zn*I0g%ljZHS{MEcz{1AzoM7FqSe&mUc>{`^u5$Q8H?AR?z4S85k6~w(n#|3q3K|0< z-;0gu1G%w=9R()qAezx99L%VW)rFDwxk+b0+yn zd=wqw^$*_Qwlwjnhyu7+FSdO*NsI_?fvIsigu3Wns|5yDL@Q|Ph`FOd<(N^|1M$bH zm3D=0uUZEsJegNU8=oA_zNk>AfdkOLFxlzbEaxL#`4J|k3b z*hL`SJjm)wdfs^Kb05WvgPtgQqe6FQ*f#+Yp9d0PH+WW)z*depd@yGH8cw zJm3-uM}z}y_(4Pk1*E+;VEKyKj z74`_eSatkjDp=FSF|WGZq)jUkFRp0dZo_ffwoM034{{h$pWX}mT}YTHRzC+Tp3!U3 z6WJwj>6aTU($&cK1Sna?9zDknlRz1{ui%YrQ~%Svdt8V9sh4-{Z*v&FQ8jtJ7VfOH zumuj>e>{0RFo|Xht_frYQ@5S?V)bb&ZO6s6=)fv>SX%9-Qz<6%iQQ^GMQfk)#s@bd z$hE$sfNPaEjH~==Wz~X@4Pl;-{{TG@N6iKg8bV$!PC43e;TyL5JH208hjsj4E8)@-$__Qs`#HwpD~llMYtCO}%1Ji~af0mp^Ql+_5ZMhSxntU9sU|MyF;-9Uo z3nP1p4CR2)YXo904;z-{N^i$#FnjQzi%eBck`;Rr8ovC4S*e@^%ypDSd5Rx2wM&H2rNnIxT?OhbiW}xJghFWPg$iOJz^$w^X3i)LtUsxtZBG#aNM!o1-ZKOg* zE9CpOuJZ zb2!A=>&b>h&KpvUAE%s%^xbB+eh5REw!u|4t8 zkD>Q*-WU8Bccq2q1nk{=QzflD8YNcJ$8K;uW6$nu%cXf*?^+#fAs%1Zw7JhxYkI4N z<;hSKa;hJ}Z_6erug_s+PwKj>ruDPE!VIK>9fNVTYy%a)d&%|{qrskWW? z&eO-%U{y4?rAKC#R2nXS4=2`%(a*8zIvj_wth)wd6JEFUlXXV&_u13lT&E?$br;CB z{bnPMje9d;DgVLh_0IR{7jzTT%GzYK`f)`qDBA*iye-rMBLNci5a{nKDJfxQ?dq@N z<>FzjZmepa-M|-Hv`C1o&)D18O9DDiZ&I-7?-Dw2s zSAl#)&a&VPih0amVmov^sU; zr+Vj#GsC0~a2>Hu4+*99y*ng-2@W$#Fy44T%PMFES^gcK9dYYJ$FN$1e1R+4aDPDr z0b%b-s^@gYClaz`JE95Jj@uVHzCy-kun|X-w`9DAd;h6#uGu)rWXA37+CP0~l@3WX zJe7XrPL3{$|0-b6zqij9hEhM=76B@s^0maxPR1mQ-*P3I0&tTvoC-Wn1dJIjyeqDb z<5a8fN2w+~R)FdyVB_T{Xd!(m3zYJEY(8ueZj$ZINWiPg$PU`X0@{3IsCFUjyUzwIu&!_{#YUUxvS$(&Q3+shDFwM+CzJ$iiql9Q8t?%8*1%{Av-AmT9WV8-gTvGR=1#@g(``RpS$<-ek%K%qC@ zD?-XblJJ_o477}Az06X94Bj%g7C5u8vM>{pHPuA_&ecox)76c|#nxS9n^shr`_Y5C z9aNJ~MM}j)MM!J<1$i$er#QE)wlx%fRR5keK?%<8*%<;lC+(zlA|(dlD$9CE{|$bx zm6VF`rEClq7S{5`T>|8rQ^M@+#wc0Ju1g{+8tb%dWPosEaImmc#Kq1PhBSdDee#z% zrUrDWLuMYzRh)EDJn(#s8IU9U*q z8d(0$37J&{bG-N7)R%#Q6`V_4S3@;B9CE0A^n-S?+7>Wr&wG;7zYk zQR+$ypbD1msW)3@2TjlZ%!KOl@Y%ty#zAda6X9zkbl*E33fa*PsB83#{fSwtOA&$-;lr#rJCf%(DM=mC1d!5_V z?a3o5$mi;KhYV#chXS+$dK3>QWxy^*u-k-OZeM^Av>)YQ?jR=IVg{QO+SmufH`~o7 zOz?w9!Uh)vi3gCFn*sFO@Wu26*dFD9`Y0MJi(6NJ3AARr{A3$FL`Va_G6$sowmnbDQDPE z9|P_%d*X|s8)U*UEKrUJ>W(Q87w~PK)pof>f8zn0kUPSy$Q#@Q^_x>$Y88-1(ppnk zUtbwE(4Ql!&y6XUM-O}~)V?veJeNajFg+2YjIfR{pR8XVdlYicP}m;Hu^Wt?y=VA_ z!*2pXqRaBI8YW(ysib)DVL$&xj`9#mxZDE}y$aD6>Qfo*Uq1Sq)-0s+DteAthC z$%5ac$HLL8x){~`{9#=PKpkmJGUEQ7OrS-T78Mfc2((}$WPWsN$?0X=FI$b)=EB?$*R`qzG+iz0}OiG|MfZkoZW0T zYDPVY8pDV|lj^l(t{XUYBamJ%Vk84Zs}~)GE5(~EarziDPHEuV4ZJ#{h)W|GI1K>f zaPQyKd_O$BlnS1OZW;F4~T-+fte|tG$uw;Niicu++Do(2N?s`b&)oCO)ER{Tjs- zaY&C!!djhnby39R>G^D@9198L8XW9g%ctBF=ADLlnJdx?9a#+6@c>P>iS)V^mZD0^ zlTo}m%WqvMdkH5~3hG_v?P;q`_ha3<`p)nJrKVVad+iMZDf5T@Xv2!5ZyJ~9%RD7= zqB)FTTG7;t&joyav43eO<(5n~qw7U9b58@&fp341I4~Ofcuv+moJ{?A&%i(OVgsz1 zZ_PBOF$t&c@cm7A0N;sSM$Q1Umxf6#FJ3#T>$RtG6a;68g0fr2cWPlishGrL;!cT2 zlMd*zD|eip#d27=l&P?OmfA*{Y}JYnrT@q4#Vea&m>|GZIMs zA1i=uZlcxXmwa2l{vF;mn0~j?yrv<0aLT z?%?&*vk%d@Tq?0YT;^4|oX6EGSm(?Yho}ZPQyvim&7+a=r9XFq;(DJ$x#Mrn*M$-p z`N}q?%m-TE@|O2bGR+Qv(wR_O``V;iKJRMKm;C4)*cZcp2R#XQX-9kLOpNDIkNg@M z-Oy*os`*q)mXF8?ZaH&E6(FU6cElr9n?1%%S2|&{bYo<}Dgp)V=^Ve?PScJuUKywA zqd#bFXF(zE(!A?j!RdQF?b%bcrFFk1HqtnJy4wBCAC$>1OZW2_V>Pb)ZbEw6;;u~k zoNUQ}Yl}a>laBu|=9^}8Ax6V;fD*2$0N4`ksqUta3rd+yydMDxVS}6c9c2+T9|=4;TxuajLm{J>owNKd=v8tFmM5AweK?MthO6XfD#~N z#0IC(CMhV@=fF6vf57Nf>D+wYrNzi!Yq3k8#ZqY^9`tUEKBZQ`#vmSkS{1?5uI~KF z$h>6PyjRb)_WOeK3G)7y0)==cYnA#1a=s^Ia)Sb}yL;U2Mvgiti9xTD7f)6a@o7BJ zsZqhXap*(5f|SdmZan^U&3DXMSObyK71cJ_rQ;&rmo+t1o&|e+2=(HrfxVXg^e&B_ zfCM3vzMC{Nt*oi3IoG>;TlaR?{c75{l{a7ij(R(_dDQ`Pj~8c zM@iHcBj16tAcuLt`#xfZ3fO0ql1>&$Npdm)RD+^O(P$Nc6giH z8;RcKO(TEV=R?V?`#NoN#-%RkvT!nCk-Kodi_z|!zOW(5agM|mpYpY0(RHBcJLZN1 zNB7-%84LW)tAY)d3@(eyE{R4SWW45q+V6!CZ_mk%bJ8$R^aXUzL7>#{P*m0D#{pY+ zABc$kpI&Q=7u7y7=r#M#KGY%|ZO}t7&xI`?b(}RBmCeO<=Ve{~A7_)g-Yi9h?Nmmu zhmj#Wjdfl7w31zz#W(Yjn*#r?08jP4K*2L`yzD8FnQxZI##+Pc-aT7fc*n38)HyUWGM$5c!2g1hMSO6-S`99t}%VVfIXgnT4 zZdKv{Ma@s~(d1?tgE4An@jUVbKxU#OpVW(4eHL!0vg^lSsuo$|X>O<8N8f;C^7yCu z;(6m5^9ux^F;hJ%L`L5n@b0bM*y?F2rIZURC-$RIarv0Xbr4; z0BW^qe@`|UUkneyWNZENo?Q2>?NF&$4X^ZbOcj#;2b2e{^I-J5%Y`D+M$K4p*tuAP zdXpXR^4+d*w@fxG1l*Az5EuSO#ZE5+Tm&L;AJb#IrReT{tTB5JK5k897~?6@laDsQ zVI17ctsmYb{OJIR)zZjrP&M9oXF?mWko+xaX$(Z3CnaUY?p#=?C~98pXG6llY@r!H3D=tjR}GzGEcE*-Rvqf553fAJw-l$utX~D+fB*zZ+>&+q39yV zIqHaX2K$?Y5h^GD{2|#4CUYe1$rO9|g`$`e6FAXDqmPYw`0ghp8Z18d(FAd)fkBy! zlBeq+apWFW)ZiIlm`W}y2a@;&v$w7`zZ;LorY{IOXL;t1t12h(-EPe=fxhzt2LXq^exHXKI{Q8vgCE*(@bQx{ISL#4SK~R#g9t|hx@EZYTJX61GLC}BA z8xf?Y@eO=N7e3bAr^M(4^u1*CC2ER`m!vN>eLfh!TLaV~1^{5(--Nl+%j+#YpU$gh z<0=9ghNq9cSP4%nChu=o0>~oYU(IRpKL75i+}AK56(dh9w@^w zgy%dN>kH^TxR{W_7uwl)CQM1o(qF!*zzOG6Dl5CM7z-c@xc1eZV!iUyr%s(vkH}h_ ziE2`xe1HBL(p)EQquO}CGqA=oB~mbd=hS2pm}sAo2fk1$pOuxx7C49DMPLj>U`&jy z#cR5k0K@Y-bRggxim8WZ2hPmwg@L5}5XbRke%I^&aipN~cdJ4K*z0-BFUk7jd;<3C z9Sz<9nOah^73u8?^$kB10VOVi#FA1-=KidwRUB%%lbgZuvKX3M(KP2}Bi!D1;hj^` z)S1XGcNn_Uk_aL1%74A{&#cTr~?Tx+K- zLeOrR0w$_7bX@IR8GOFyg2bY6hi)!+eSxYrTTRm(1(z7%3bS2hLCjnc)R5rNSxeO( z?mDxa7AG;2$5kD5wza4J$o|(0sIfM%Y_B!@eHoB8X=!9GbX9{Mr{tN$;09T9JGQFl ze5WUeIbFuDi7_5NrbQ3IohlDDWXTzlTo^g=?-AehxOM*{ej%AUj}qt0)1hxLZ`iZc z3XACl$x)HN0H)5|51l329bGf#Wi9eZ(-61lvNYNe2=xj1=FA!5x5{!x)jj~Mz2ebkG=vEf$Osz_r zS;o~}zSX*BUV`&r6Fg_M3TqDBQb}enR|gIqhaZQ5N%vavA3Pg-&EdjCh}GS+e8f9V znVXcjdw8`SOmb_C6zVj|Y(lNHTlVSxi#n_IH$EICiCV+-?R5u2c!7XCo=-7;La|b~ zcDK#R>S89VsZ#Hq6`&gv(e`x~BS^$i6grhW=HPJ!9W|}(Inqdic=yl2Q!_KmOB-AS zu^@2vt%MN-;4-5NIiuca0a$z=ipJOMc6!k0e8tKAg@lyKYw9%7$3eugl2-ekAmG5P zDHXS(FT|)deI``mit5qZ2e|1C3%c`hh1sbFbVYk9N^!-EAlCK)7BKZSkU2x-)E2rG1hV z%7{o|`ohglRLQ#jwKv}W-m0Q`UFLGR74{H)@|?5Gc2;`i_nYkMdXz|T-3vuCD%Yh` zodZo$CWWD-o&T5qm$z>!B1^Szkt*y(&f=uIX(f`P^eZ*39VKgcq0Q&3w!X#jk>BBX z`!PH^8llri;0Eb@DUGj|7$Lqm@zKf$~g z^5){^7z0K$(?-RqcClF5D0_7rUhiakxjga;ZnY9{+>$2tI*t;F8C8TG9K7~+cofnj zwh$aO{q!WDe}GD{su+C&k`-^r5SQA;bo3sOT1nv0PZM>Vs%;N%s8=`Gawa*o0k-1d zs5Oa+?Hqdpx|P3l@kbKxLFn}gje4Te=b0uZ^jwy0)1|5+8{lZu>Ma2oW9GbHxOd2E z?TrCVMP$=a}p{mU1Il0|(otQDXdB?xTEINge z#qHWhQGsnJth=bzc-zu7iD^jQO-7e!W?JRK`c({N07}PmCpX)tD^^PwMmS@z<7XMR zEM^8*b-i_Vk~})$<%pd|t$uo@uZ()akV2y-O=}6~qONoCp*mO~*y<}Svcw;hwfA#_ z^a2-xnKHY%{6iPzVDZ6X_zdRx1r7(|@+SPBJAuOVWI826!pibHk8c;xp__DP#*7kk zv*oJ?LY_`)ys}i}U#a?-HA&CY3Ou5KxS7p1lxJF6N=4GRknW}5G{5ayi5BQ)2G9oh zQ#eM2O!ircHiSv@EDbx2`Zx2Of+7+U5;9VJn#VJHGaDBzC1HI>q-{sZ@iUkNBRSx5tl~3?22n%#6IXd9{V* zoxv0RcD(HjT-414rP(vu>T^KJ4h;Hy;t}Z|auQTFCyJlqROZ^>I+)R!g@ipM>ls*4|)9)6mb)kg>Cug6H{kNjFib2 zYY&V}#etIOL;tRugylaCH&SucRZT2RSYfyItT8b z%kS8*$q?ao2P;6KCU!)UO$9l?c%Yd@AZP3k-ifC6BSrT)WJGU=1cH^jg(!;Wlpp}} zfVzx;A!9PcFlS%jGZ$P97BU@zMWss~=7w(-K@7whTT5FVKSohLKGZg+&yDf#JW(-9 zsC|m-O}*&53872Uib@U<+WP$qDhx{UWE)7pFtAi}sLL<$r#-hRIXkMsb|8KaFv!a< zUweU64FZ~2e!^WfI|2`dz|m5OfsY!NSO_g2A;;}SO{&h4c(7m%=2Ql?w{6gxAP8L> z;lru=Z8ilkfqHPD4d%rO_SY-68F;c}oOjFpYZ)Dr4E_H#msvm#B@o1rqSuJ&AA{s8 zaQTn#{@nC9a7UliGhJO>H#avDP(TOB5#SLS=%yD_!cTB~dU^^xlEx(C{NoA<2LwbA zhRZ?zUwVb-eVnyacR$_jMe}{^kBwll_I?8?)w;2zyjFj_j;8*p33b42gaP(18GX2q zK1LloN~^=|dOk`RDqwu=qF0{o#q}-;T+6;)xgU}8h_D~yUk11Uns+cxtEQ}MI3(S< zI=jK2<72qi1glO5r?$}+d%o&T`Au?)R$rUN25V^P7OhRg4x5=K#fOt#&hCq8u?sYD zXq&4Qo-Mx$Dr&q0#{-ndq+S>Xw)^%C@$V%{5s<4HS==BbZ$>Wl8nwd1<^TEgO(XFf zD{`_cntPr~?rR_Qeb{Zdo8X1jZ#mPxJ%IFf^UHr*F^mTr8$T(R+Nj_h(swkc)IF*9RW`hnpdLlHD&a zHKJYZNuxusyDM=p(F4N??!EVwCck4xG->1pP6aD&&x^vUeV+nfdco3tUsa43x@su4 zMhv@B7_2V@0D4JsdBYIy3vNIoPy_92_>9bqOkAAvjLgi7KSvC&nhrnrTB{dZi4mEY zFP}Gl|DuYJ{Z)RRIMy2M56=nNEexE@g#k$=hnbuVq$Vg;uRHNeWR|SWXf!EzJ5R#s zZ9&^-GI#KIzYqG%6dS{Ir&j9iPcq)=401G^g@@fJ?YRRN=O@r;MuN5QoF6mDo0R*~Od^xt(haB%g5g#7{*y^XQPsICy z=6v)TZ}F$^WmQj-uY7_rw!Rv5M!ma+A&j^z{+6m$YV|hPX8W0$MZNr^F{;t%ycyJo z^Ft(%a1>d{v&;+>W|K0S1qJ5ssr zLG~1QAU8EeMKNt{<=l#*N1kbl*N=$HS)=m{>d-hr*10UFjuxjBhi^YS-A`7O#LnJQ z$4X7bMs{Z_4yH$SZ~%K-UtfO%bzmn-4O;V9>)V|r4NaL}Y&s3fQ)$v#%r-k(9!?%B z=zH52BPTEJDN*V|7>~QZ-qDefv8i>(z!?IjG?NIDqpUYN?B7=#E!oaF6XtV{1wjh} z2-0!SmMXQ|AC-*a4N}DC51hQB%LWVUeA@U{672NPDDyLTb5w~I2V*8%CtGqt<0MHb z@mBB7i>z}Oz%}mm#=gouv=P5_b@r*2vw^q|>r%-hwy#RBaTgZh8?tRRbt?BG8PcY@ z_EX8l{#sMQK+O^fFBN;FzOY9H7r$PuC;AEdL=>At%181e3^=$1{;VfOfyAoK>mcnX zt`Q~Y_eKr+j5xCk=xaZ_2Ew!&ATDa7y7PtHo1u2hO^mJ+7en;FAbYRRaZz0JcP4Lb zynvwer>H+}>{+giW;nQu+6+^|cB7$%*mHt%dySL zOu+VJ`ymV5Vuyyv2bN+IT3BaD^BN%CaKsuQ5*v?%gN>bj3*{x<9q;#TOm^6%h=D%w-@u~FbSJg^ah7hL9O$1Eic=Rwu2qJm8I<7 zBT>kWDVsw2dn^Tc5Ey=cqe$Hk|Ymlm!yj)A4ogMb$Pp#WYD$q7c@ z2R5AJ*$yolZmlzRcL-(fzDcj-gjG@1;7X1#yxxVt z`tPZeBhsKY)&Y)U5MsF=Fz>_x958HSSCa*9d^IascMTN{DlrP#=ZM;yv{cxa)%V>e7-?JJ@6i5l*8glp-7f6S-Q1%qzJ5sv%KHau%af&WPEjM~ z`vH{>EuexVsP_HDV7KiIG5KU8&oVas+e9eEc#$o2mJ07Y#F}auS*udb1)Kyk36L_V z?{~W|P}Nua4g*v;yo3qdNW`lb?*tu@vbHU(?;7i~ygOJ0RSooxJMu|Jx;@8bU8JQyU9DnE&Wf<%2j8igp>qL0j z)f0wrdHkQ&m0FpsX2n)J0!YwjO(2?sNtH9<+lyqpBuu&qz)vXI?IjYHO`x)Cp0E~# zh#a|aopU!RP3Zgj^<{uaKy7&=1FnsH)Li_k4Y#+bK!LE^RnO0BIq+;e{Fh91k~k?# zY%^|NnV%3c7+~z>m^0rx_2T1NswVuG(f$2)^aGgnZ3m=B-d%`g9p2NCv-~?t6|Vrm zt5%JM0tQyx%8NT=Efw8)k|kVR{7=UNWUjzQP=+$@8H%PjJ@KocEf@NaI#MKYQ)vl1 z34errSs5AG+(OOdV=VPW;^fC6&9z1-qe#q0P^2?qh0>HMob6jR9I|xjk%M)FrOK5P}2-_HWr0;Du+zYyYq@P+@{W{lENk$^;(l{vlvc zu-|%kdSdiAFnmA}X&*uU7DSs09*APG`lfGPG69~|B=9SPL#${jf< zv9RFHma*S874T*MQ9goxGi6EMY(-ue75R)1mB+E3kRBeb+RdG^KhV+ z39sxKci$`_8H8m$=I|ZCTDg>XpnhPPIvHVtR2@_JJ2!}0c&vekFrhZn@l|+l1C$is z40ylW%71SGL=e%vt{Xz@{c}Cp(a8lw>+5OS8w!YM|I7_cloy4D8nTDZpqyOpo;xse z6#tHk#Z*ZRuU`bQA}YZ3EP5W{FSM%kiDf#gbc0oON2Q z^L+kbJ}pV9-g~g^Yy&7|Pg)KlfarMzB=uFN6eilL2rKYhI^aA6(+C zmz0$Q1RvL?7oWg$xDM)m{cdA+x>%7d)WJV z9(cTtV=bTnjUr=ekMAEE$bVl$OntdZ#cG}A&!2{X-OHup&7TLe8Q4P;Qnrrb9LcfH z_9JN(bn+q1JO0Gz))f;fW!XM*Td*V^Gv|0zgFmGox2UVGxk_;p)~Lv?^|Bo`VjCSe zQeB>FfV#q)6zU^uZS@qT9`qax(&H+J7MljcN0Z_dhi`#X7hRnHp{l>SW`fV_+Gb~O z%Fcgv4n2xCUBLikQ_`Ls{e(R0$CGTvfmJcOY+MbJwdkz59A~$6tfK|WbTmU6lNB4fs<+6fm8oASs5(;@o9L@u>*&>72 zefG)4D5HBJtiQMc{w%BU7eK^*n#a3{Hsm_)zaWMHm*!*pEEg2TxRI@)`SHQEsj2aP zn!dy?)tcoVj5~vGT015-D}8HveQm9Omx(KFZPi0wg6N=0dtMh?trs1MLe~#w**j4^ z)tHtC442j#(8&!VqnB}W9?{TnH|s*yUQWkF%tPB*f$#M5b040o#|`s;Oa*dpvK~7W zVF;j!X`t*>9)^q`9kCjJ42r-uMmWeGj2uJgLSZNtfWv8?s6&+>BzX4uBwI6wAJGXq zkiOQBGJpi13<(Gm{K|951MIexg%*%_!>+iN+Y12L?PnEs6gAs88$EsbCpQSygBAdfOH z2Imb?uBE7-lffmR+F{^QJ(Zc~{kdoKLMk$S^doR>&h6>^5}0`6ZhrM}wjuSVJ0v z+>gSt6ZnlnO;(;sj12tC6?#g}Sr`caSGg{OpW!bQtobE);X8Wp$9#~c*=4j5ghQW7 zd9!g>XC5AltV#zmiB)j}!@ zvr-+6`EsS6ru0rWn+{boJwD#BfKlm`f5!BjH_43O+>%%SDWgFD#NO+Y?Q+ffaAmqA zw1))1Ntw-Ny~M&yaflpy*9O38can1f{rhROPOrF;U~4px(72P|HHQZx&$#Ib3tz3> zexogra}zhHgm?a;&p!Ta5OVRIb&5NOpC86vWDNB^-;%97lh4Qg88bbcH;1KA=yEli zcSpDHY`lhHj@t0o)rUkgnCBwUwe$42@hj`1VuGE^ZBit*D&}&?6|}fc%>p6w8gubO zl~&gRPf=XnuUWar@9B%SYK@OFKE)|Q@ozY)RzTk4`zn`sW z-_Q8mr!YYPi!TslC6@R~Nh%k_Zhm*|5?fuK4yok?&@^bpTkbQ7XB?H*ySO{ctLVOY zu!j;RFyF9Ru}vKh26aj+Z;ba|;MSPwnmP+J>qfcgGVtwdEw7=t*?;``K2izZ% zf5nFn?b*u5j#f4GDx1*ZvSp2Z^PD*G7C2Ca{WDnStuYYbCGI9mExQmWG6s*|*OqXa z+7^b9ezn0g+iJ8J0S2XkWY2f&0sFw147q0K*UQ=h1H#P{dxNbe+}C^u4+x5l?+}Ct z+W{Y(s*W2I=}W%daucN0`43g4AL461f>E$#R!P<}R^~1m-BcYK{D=h&&3b3<$#q#n z{jCyVO@n6{90`gldU@S^mD*zZpn?=9!?&9)$LWpO%52u_Z)@R+A-T%xAR=7VWbqD| zn+VN1Lv?8@j+&ppR+BObQ#T4wWZP;yXXt;k24e+p*QQ)nE9pg%&*r~xa-kE|RG**6fpk%1}D?Qu&9ijoJe0V_G^qt+OS_P;J zz1k>J1IJ|QRe{j6_MHchw-f_yJ~$7pwRY$7_L2Yf3)iY92SqT9n-!hz(-mi7H9C%@ z9eW%2yq*Z9rCs()bX1CxeF8`)=uIn~Es(hm;xI1MT#!rztsryHg{k2_xCl#{18oq> zd7+@#Y*{t6Rak|tz5(xH!_6xJGcx-MSN;geScnq7Yd|;?gXd;9Ao5t@5zw_2w)@9# zNWmdRY@u4bA6>Sqs($i(B=G7@=&*67Hhv=Bq zK7L%r#Lj8etB2pQzE^*Qd40Tpbe{3$yq4Hbuyt-wCpB+$R|F8mtCZVjaD>Zbb@UK+ z!#3Q*g!vp{s(K0BD}txGwa4M9)3z1fZ8RV}mX6XGvw9)hVX>5!hCDDW#q< zzH1vTI`ApTXsJq|EUPMbFWJwa2p2_@<33Ixj|j8a+x-5x4k0?pvmIpRJO1 z6OD}^AQqVtKaXQRGk~Z0!X9c(E_I> zvJDMi^(k}-fAdhhXN4pY7L_4wxas{W*@#tR8wbMNIFpl(r=jMew<2UTfBpn#H}8J( zVan<MKssKjhV=H7VIr!RTX`-L1ZxwF1|HV_V519_vS-2-s^&OavC%>ISRjY?I#N zt!pi0;hUGa9e%F!X~?4>rfuwKW)yV<93(7eK_(5ksy(x@u^gfr?V~s;gRj!AI44sk zU!{-c#Vc5FdE{rhq^yqsJtn4x>^g>C_gz9$!khAzaba1P_ZybLF;2|26vZ0G-V&DCr& z7e!;8Pfji{Hkwx@fh1RTYMR$=TD3@BB_ll%&Cu(JagzxPUr}`(_u9)xB~8dk_1dxC zuhdrUM=fl~#0GO>HwaGhHgHIIIJY0x%(t3d9h_D8qdOc&s+!75zj-Wbc!pl@apsf`hWo2Yob>5>J{o$j3Qoi-H(1Ne@hID^t z!(EC9Z<_RKKKbPD(meszB47j{`7|zNxW=T8Nr8faO+3yR#NV%J89;%46KBRP< z+bv(^G6ugHj8?rQA$v-f1%G{Bh`VB~AYU;kbF> zqd%xUc*~Rij) z0g6H;1pFkPf~qRt9{v^qPa{FMFePgg?Fe*m>5l0&vvjfuGvI5sjCXzy^Ne zw>fQJU66!uRtv>6MUy0h>WruPagUuX1zrR-TSR)A)tgv5$0qIJdpEV}d_Th1dA<0R z=aU>i6#{7^;LG={Gu3gCv}(wK)uKn%;FAa;kqTZ!33zpd#<3#rw~Gel;BY!d<Ai>zlINk+)~k?_u!s3XP^8x2B7 zMK1YO?Y$7AKQ6tR^7OuJx!zk1wB;ZOKRWII(M&CTP4ase?9y_0a*-kf^DR;Z3aIb` z{Vs@sHHb+RYSlp7g1oZ$fdvI?m531IM?FK~nSY^FXX+Ki^r2pc>m?x2#Dr7aj3kSI zQxN7!A}fH4=ahUojv#sdfkB9(-(V>pmnR7h8$<#<>eWCeBX=hP!LBCA_X5URxePum zVGByiPYT&A)_orU)<4Gr@+`oi*AIX8^ZO!XfAC$K0d(+;G0aJ39852jtQF$m^xiW` z+D;ADkGX1i*7Y1{UtFn(PR+ov1Kb87a+^`r6q+Sx)PN3C47Eip7j42BGfri>+>bdf zTi@E+kT^&xk31VnZ--Wr^YZ{iWZzCN=dD*=sTwJ-Q+eV-q2yD_d7AD*9z+3==Y;F@ zz6L&iowcHLflI#}kAb`BEf6GSiV&Iypfv!MoN8_2*O-zvbRORIM@Xar$qKl4Fn8~n zu(Q}1M#fr3#9aMUTrbLID#mfou{TCNNMCN7&;8#F0S0{Ao%oIGy+4#M?q{HkdUvP; zr``+JK*FMablnCC!D?;d`_u4xXwTG}sQdDTB$+YCQ1DE406I*Sz7cTJ+zD9I6QU>B zVBLSnaz$|8`FxlSj#l`TYR!I#<=J@p3mrkKP~wv(jXX80_(HzCV5xfZBi7b3>c`qU z~V=lFk%kclbHm$JMY?!RYy*KwkvtG!)WhHipn z(%wpycC7i~O$xhUwF--FtumSKui;OAuiSA7QU|&8{$U=aDOQmEyc6x`&+2}AaKklP z?C2>_s$_T-#HQoBH-Q+hlIFtq{^MIr2^CMqYgN=wF{d1W>?JX=Xlb&&F|f1;J^^vl zX~E2ju^Kq=h8Z2=?Bipz-;sPo)zKZtx{ygI>K0!_d6SOYr@kFYKsaYHfBJj9#jgTV z=I7^y*e=0cM62414V@emo-!@FJ3>3!xB2^#z2z%*Cx>!4VO{yeCiLsEC*Q6(ZU*QV zU5WDZy_AN!A1_+ILsv#`c_lK|9r;8O^#$w^ z>ZMZ>W)X_xtoFz0WoE}zcLO&7*<_rX0?FJ}KcQGgzJiD0GSEgox9^ypFHUMsPC4D) zLL4hNMbC5rUfp91{&Xa(uRb8vyjNvM8}kM1-Ppz5f-&~RJo>6ApwFuRFruH9x@R!Ip;qQk&tOj=(`M5^i*T=CyD+{)YEMZsqt@mjn3i!JojSJl@KLX@r zo3va(zW7^!?V7|3f3q@{-Ag(mu?f(|fo^ZbHuY=L#Wjsm!b^%kSl2t?Mj2Kh6zy4W zoUOSIo8JQvs7Nf@(Pb@{m-EGE?H*Z^H<#^Oiv5lWhH7ojw8GvyqV0tb#mvcNWJ;$5 zp?o8}XoMQx0=PxM(MH!btXyV5w(J%Od!vP8Vl;&}lZmFB%gP>CL(ZmJ@60-U#XKj3Ns)9Ape<^OPlsd8JqBXr;{!?q}5pgE*O zw)nfnR&A~pUWXF^92+=a180_|aBw88+FUW0ZFdgX6Q;mVxDDjQnF9EF^cb#tRWBhga%+@|?`Yvug~3Gpl1{r4J*V20kT zZzg#Bp9IWb4rW&%3e<-68DG>3)ZE8U(kK`EzoNp#K%Io&-BatzfUxMpGvL`k^J zot$0zKF$740E@~4ec=xu0WltU1rKlb0j5j3frufn3!X2+J}fnydEH?#+j-kBO9lQ6 za+&B74X?w7d*=E2QSABOkG!Ap32*9JAiWHeMI+oBTYbST7xw7v)&z=438udPE6qqU ziw4YQ1IuM94tkaSTtqypH8>pSsY)GvHYI$QVk?cvZaMMO<@p4B6;` zt)K*^HXi=f1DO58gOLRL+unab>OX(@4_yEM=`sPR6vbbdJvD_S%N*y^I;TKRa2F%{ zQHnD{AN}8i4^R|4v|00`-OS`LMlL+>i5alh4TW-WKk&jebl{o;{?J}X?+V3$L;kUE z?F}}98X3M^Fc7~0GRkrR6ObC_v;mq)yBV7@&4}Ydvx^;iSKqRFs6(T}a z0M8ym*CP>7NC5iLg$J>3C?8zQ2jq!GC?+LpZBEnk%TFhx{_dqRz-dV&?-6HI)21PT zkZq_BJcuC*6C&!9lLH+l&Sm&!1%e_5eWEOcq6T4=og)^5X_TlCo^>&YiBgyw1Z5>i zLL>${Bqt|ZlavRizyLe?2O3e_&-u9XODgJpZo)m{b^_FXf*k)RcTEft|3r`z44jLw zkh94j$W~JW2g;Y48-@>W;1X4>+s*5+KU^J(obCOv(&2ua@CpwU8KWXp?y4vJ39#xKtB~ZF(Q6d(+DeGW$LQBy0*+2YEm!vjUCz0 zRcNEBzSdcC8~_e#Jt0X+NA7*-B_PoDj(>d91C|AUA@ zhTo+5Dy!@vL$4Y%a_x)ZVZ$F-zw14JIsj8RW?E5}y==h|R2(bl>(1{>x>={D#r&G>E8gUNN};p^)- zmtQyLH{Chwf<{IkGoJSP;;Wi%b-3ys%Y7gu$4hCP99`S6kDX19QcHGy;*{O*uNGmK zyudm#AIG&l0Y04=)*WS@fVd&RS`~VvOl#8(WEJ4eWz4=@6K`=X*|+;JD7ZfRYzOsB zD?a@X`(@WssUw{ZVYAkcsmMfBhu|$dP_y-e@cRi3$gLJ=W#O-D`rS^^<`ZQQ3S9zbzV+UQr&BcFKr)u`oJ7XaW z7qa6b2>h$tPxpx85nJ&cZ!1oFx$|M3W0MqJ^|#iR0j^LhiDhor=zBoVc8sP* zcV+E&TAAkg>G_Alv4enz23TsRa-f5BN_M9{hM0eUt1mEX@d?zAAq-PP2kaFn37Leh zRBXDH){zoaqNpry@f{Gmm4GJ$d!H}SG-Y{{xUtD*fU1n$>r|DJ zT^>kkUp-SJX%?r{@{`Z|NHct8#ba%#t8c8Wb%qM3J3rdHlNKYGnJy23q;o-V$m4YZ zxM$OWP#%}I>9?{p2A9ZolsfM2vp}L}X7a5J%){-!(kwXwgeeir?>ly&lPeb63ertw zv)V4U9bAUAlK0!Jq63p273>8mkm~R-R$qdaP(05r)vA2@H-R2TgFA=syG>|pnW$N< zU=AZa8}*Bu0t*F78ffOZF4XYUtz6cNHn5_eHGvN@lh4-Lr6!OxRiU@ROeT^YBet3_ zD>th>>1lxgWX)wAZkHwF+mc3uBER zodTVyO})g=#t4$sqQ+M)kJ0j*jmtNQyV0hKuSIhQb49V4dcoV0me%<|R!MTE^M#7o z{PINkZgR<;EP6$1O>x{Pxa5seJnzy4ae^VfX8^uiBe}pR|dSZImrO$R|fEeNw2)NB(dy-X(k65n>^XCU@nKH zGBaC8(_6hgnlY>k1Lq!ijDN@$yybc=E(G5#gOzJy<}ydYG$DD>PvL4PQJng`hKW?) zxsR++lib`pEyJJ|x)Pp~>Sd3C*CN!*F1J{16~4slGI{3r@tdVp!_8*e4jXHN55S^& z4y0BPvy;kKdwl&f-+Q<$h>nuL-LHT1DvMELn8g}%(sph*9UW9% zol0JHMA&?-3q?c`E5U^$PGr-`KOTq0YRv;D;RGw*p`#W@yQZ^bDQe-q$Dsn zPEB=G(n&qQ7;j1^0Yg=m&SsXT!^pL^-p%Qz2K7Z@!1&Yzg#8z?nva2nv@SpxnS#d8 z!NpGz9?1t}j*E%&Z~#gwx+xm?T_8NJ2J#}sFT%licp>4>NFyR9(#%OQr;X`lBkz?F zsPGEuM+X_p_IIr<-Z*;5OPP3M^nF-y;^&)d7ESs3Wv;5@ja?LCA_A_Aj3Q72Xrevd z?b5S^Z$~M)ntqtwvap}N5P?pmY{*?mjfLG|QR9Ba!UMmhz5sGwvF+SLtM_EL^~-E6 zp(fWN(l!i!RkeguOljOE z18UCC<;)+?_nJ8A{h#j=$)|8Q^|)70ml$#%%{x%hLP(IDM^n${=YWxZ8GI)gIQ*|@ zjCZ463{I8k-R*H>Wzrgd`iDJVDSmr?-}KS;vu+v1GDkRgDv0uUbenAHqg%-N7@L7-! z%Bq@7jV)abj?PI?BLg(KKwkuqrPPkOq<4Gm`EJWbaa`DO{FEFP648^#5 z^#T)<;4zW#TyXFN+Wv4FSxSA%VsssSBn4^Q;Xrts zXYBP=EcwR|6~l)H-oh`I(M~X{p_!8iv~l?#!^JawD@2R8zUG(9Pa)hbu`RakU{t=2 zp~Lfu^@fJ)uJ|D#^&omv6nKqV|11e=1)?0b`zSTUZoAE}WbPP;R35i|iLruo*kWhi z;Ctq4$*m^-`g#M0*n#P|{QD-$o!D;F%Z#y|k2g$bByz56LH)ubx-CBaoun~%>s8ks zfc9J1-U++^HSlI2fj*J(;bH!#i=RP->-gx8BR+VAhs-VJRAK+wMEz86b$~+34>qUW zlAB0>-Adz|Kf%KC;A}R}9t=60;(Gz_)QEu~2a6$XBy#{$Cihjd1%F%nQ{0N@M^6<0 z01{U|nFz{YN*Odacp|U^v^&-c>iAK-J6i}ABi(J#t z0=Jsu~35L4JQ2$V7qFHQoodZN(nq9tD)o(craog;g@j1Dv*KtG9lkGBh_NL#T zzONf1t4p1Q%*_m24WG=`IEDi)X+y`C7REENjM0gBwYL19qO?wBksfhy;gMhP3guYp zJ$FsZ`XBbk7q8QrBtyagZY%saI2v(^QBlqU^^W6G1%*^7Imcbuf+t`Jv!LInFWSK_ zL-6b&^^bo5lV-YS4(&IeT)W=LK~p$9KJV9)A5az8G9O z77gzE$fQ1Qzq(SERot9o6x#xh{Ear@6^QD5Zo~buR#qJkXPlrQocbT4ZaRiOET@CR z(#|~T0jT_Xfw#|x5=+w4TkgKbc6xwo(-tCmYQxQS9yk}Q>r-;3pHsdu4b?fUI{rPI zS1{#w(mid`4qLN1J2qx5FW?ZSum8|qNZI?xHUR`sCC%La`Ds$k@T`k*Mi}nM!wKkb z{_%A&C7;ny!woV-hgDHY+{jPG$X=USX$IS@edTx(F=C^n+G}EacB?f~qE(Wb3p}); z8qS2=6O)>2k0&<3gAwY|8%o=%pcVqn=r3JZ&5`(dp>-%0bY9 z&gJigOk4&%mZQ)e7r)ec^JYyCvQS;(HlKxtlL4H=Ur*YQLS+mMT+zz|ZyD{m zQ%1n;_b14SeH1yqulr(--wn3Ok~<@!AY&%X6zftv5|v`%)~-iIMldkI4`XR0a(M(E zex6n~TeyalorwJ`%*$_Si$vq{U0zEw3oZ4!CN~$?Ry4A6TFZN}>?>fB<45r^3Cj$5 zYUu79f`;+uB*OHTxlMm3Zkn-6OCtd-VF#do1@7CEYHW?3)ehE}UG3Q=*r`Pe$7E%^ zzl-<~Y1kup(X@L6-+vJUnZMcF59HyBc*1r!dLhz!8%xt%Zyo6IDtiHl0nBqaZwSbk;1qBu^gjP3#MsJCXdzGP)9>;pH$1N0(Dl<^ z`uL4YYAUi)25+WeUPKCk@HTDq;+ypRylVi) zOl2(+s`o^L>ntHw%KJBG7U-pEymoh;(YNQ(QBl#Ond37;{)gqawQr&nqR>W2v~Qpj z9RSk@cu?(=ZvW>n+?8Bg24>*t_fh^c-Dy023xz51)j;CkNz$36#FmS0= z$G;_v)#$gs5Yzt^C>b z4es!eIn$R%91_W!g|?;z>z5e8B)%X29Z!n%``t5ihehWVcr|{hZ?4rezntD|RCM?Y zutcssAAnZQ5;0-aB-4ao3804#Z=R|U{SI(dQ4c`l%11&>*4z}m5vbrx7JI?dOg-(~ z->CO8L~#7H)5GjvVRCQn9lj^zdrNja*18yUIL&*0ojQOB8rn@RwjLTx+Sw@_Xo9co z2i2gnW$kB+>5?(aqM?r z8;u!^|Ma1wh?dZdF#ML%yo=Y4Y;SxS!3;*ikh-n*{;uK@JSY(Gd%34L>vEai)8Vm@8)JlAeRFiI zU>HkGf>*%m!U4+$XmHz?CtTKlIHp6qHYv?a{I!EyKa8d#Tf6pkI@e^d4I3LMvuI@Jg!`6!o^VUf%IP?s}-XulASVO`yLoxEXO-r`ifsdJZP`9ZbuH zEC^+WW@~^^nuAN3KjLU?Y(#xl1Ok@OQhF3`?-DoXlhUN#_%YAkY&)B-Zy40#Ffn-D z28AKfrzVNL8$lZUMVA@sIzo&FwvS<6xlrvy8^ATiOEj{KVR6DfCBU|?7R>}`ZBVt= zG(@1i(v84y{jM&u!1F<1idi5n@*IYQ=oGA`g_SEds&un`W8v+!{$iPcEc;i)X5P1; z>R)UK{`|P{ba3c$yahYf@x9i|57|G|pT4IWqJOvf+tBa7<8z*5JO%cqczE9d7qwvf z^J`k9jo@t<_I{+PZ%2u{AO3OmovCCCehLij=M3&o%V%quhL@KoalerhUxv}pOm<7g z*YL6zho@@!WMBgrgy^#8&maVVDUQS zS&Qc9&S!*(!rfmZlGQK0C%f+HOsCB*N?)!Shj{tZ(G`C*6-1}LpE?+Q0iWvqKU1l5 z%SkM&-3!S8c#Wqq*J~EMgcYg*Aq&MohGf$hY;8qwVI$v4fhC?0(c z(%UER)!e`*OHtgG6_3gm6k7l$exc^Q0bjdAN_ds2kc12}9M1f#2su~j-GhuR44CG0 zkLkS^{zJF;zG?xa*)+#chezFN5jSSZl1&mv`z;@jpvd~=%_e{e8I^AB*MSA;2eaz6 z2O?FEkjaVURM}BTk89KYkl_{eo-2vcgnveq|M#fUe)157Gye}4lG~TPAw{!*eH*@C z%3lnVP0LzGli4oLEO2*s!-80?A4Zr>JC48Py&!)r3v|Mq9Ee8I$gjlLHA6L+v$n^t zsg0R|AuI5rfs)YQA;#Hw=bviTjo%FxzdiP)R@=Zg^qkOrZfjW0)iyZj)Z(a&?b;VE zoJ+WWW|Kq;q8skTasAx1yufJ!p3vz%Z~sb!HZdIEBD_+v5mZsV&0JHAnBjnK?Cz?oIBVLJ5p`LKQV4 z5~4qu*s`m8kkK{|xlC*mWaPeKy}nHzVCAzO@Z!y0a4gSqo^fi|O3FhCL)9u;udJ+@ zhuNXS>`L*mgxb`W27z5UMo`cjSAQ@LmX6#ldaf18&z}uc&|GOBJH;G|(!m?sHg+Cs z&>rhzQ5OZ6=YqzCQ0&z7TsVglrZ^8hnW_Vlz0J5XG^x01hi*Z8bM z(b!9xgq`0EowO~9A|EPMd}2v;i9om*xnD$%8?}c87>1vJMNNEQcymF6n|Z1l%yuv- z>uXRfRJ$CAj(-Shaf~uo*_$IGca5W^8{1R}{|&~gu$Av_lO+rJWF&k&Ko?%(byoNM z+`7PfKb(^sKf17D1T0b@zl7Ro8T5u9vT|Cj=T5Ei5!an(tKhU)o*i4xXoM6}5r!>b z7Yp0N`?TxKt1@A+kP${qQ*Yd<_<4JsfV?s~jHYe{Q3p;+iXqYhU1vCci54&Cj@|v$ z{o>^(l=%OU&X*8DuC#DyM!!$;Gly(ZlTK7hQt=lzWjGZ2pcN11cNaVpv?IWk zwf%?p1>o10HGA&y+IUH~i!-ynU?%=$^$yx0=W{H}JA8V(RRoYq4_54wtOJaQ7 z5Q=ToA7kcWGSnvQeB@?x=*YLZ3Rf{0-%xbNp!tgC#gXeZ(Z<#UKxx8s#E_rmlT_!* zl*BZ&>b)Q@Uu)KEl8m4JCGBitH-Ylvtq&b5XEIRpf~b^0#YdOkp&!$_vq3R<{`WZQ zN)$TjMa?RK@9T2#1Ixo`LbV^E8H!VTLr1LC)7n4-bi(R=diMFR=_>YfaaNStr|R)* z^3+y!&2>FP4{a0XF5V6U9QY8?5$MBV8F!2D#T(Yl|G|`V<5b>(HwUN zBqJ?d61BW4n4C@M;a0S82)lBrzD?72!%$Nxp4VS}>-JDzZy{V*G2gO3gHT65U*g2h zHB|eUQMWkqg62vvr7iq(df3LVXV_*b4_=GIFUvz6AHEqSUpmE4deY($;>NX0FckJx zhrQ3;Ez`^n23zi2k4jH`O*Up{Xh?||5WBUFT9zV7+{wRx7$8#EeFgov&pO)>vX*Y{ z?OJ3sHR#GsQE#oUC>$B{?pD?oJr$ymI)am$Ic!e5fQesj$HBrCD}Y(h#3Iisw5$3O zHiLbBTZp^^;|hk(&(D#p{wBcsmPdAw|JkW>(=ut^;UmV!55pk=!`mqpFmG?PEt?Y4 zZ*ds!_#+sZGySz#d_G%!fw#8Nca;cEvGm7vY8v7w1#(`b?%kH?qmo;TD~x+ewZ_yI z+U==fw!Zx^1^lQoZH{suN!4rU%=+h0C#jJ5HL<{_)-!dK!?SDj{GW3BqKj`awe6s^ zqpLoqn~l|GlNWRPrJdNK0i|@)d9=Q9`r81`HAD!T%~GO+W5^mVOLO^q!dIXjyD77n zSJE?|Ju5e-JZQ3KrErxDT1s`2( z;{FRiBMGOyqeF5O;>13!NkOM~{TtXnAE8`zf}t}R;U$e<1f4t&m!+E+JL@_I8&io& zdB%zCf31bk_VS#lBsx9hW!EV=NBbq&j0zsu2JFyCAIgs(qO6fJS-EY#op(OI8lgR# zP!fJUqnEk#2R(RK+!|cqj3)HQoy8!5c|;~qduOg8ys;eC@IY|>P!Y3LSi|Ak*L~}> z_dOJkN(#FXvX-*nJ*6kros??k!K@jVr_8 zwTb8guw}*Gv$LbQ?_SwNyjIrpxKWfpLX>5Cd zdv6EBiWbw^`g~|wwA9MnHaH(!OS;_gEh+y5H3Wl!@vVw-(L3{Ot^$Z4<<*Lmvz|Sc z(iW)2l`o0VM)JY1<)K(_e~)N?kw>E_@x6IAciefPOYhriD07Ts=Hi8CtUcZNJAuM8 zu{>6ha7;!H)|SjD#$IWuVGF{NQBvKaT_AGPW|{ihZt*t(wEJAbMJ)%cLo7&s9M0L+ zm?f%b9v*jvyizrj+^b)an84HZ+UIuRR6pFuX!>Ui$EDqPCR9S_br*x&ce*VZLkch% zJqlY@e~#LX7o2~8?BCIgtss_R*>17b%z}9o6V^h!_)X4S-atXk6!Mlqq7Yov+80@2 zm%=^vG0JsL#tJ{R0GJDxPKh0(5RG8i5Nq#&ygKnZT42bP8cG-b#C#wX#-9IW$h_X( z;dcI(Tib|dRv-59HAYWyWEXSpPK&%g$jiRhB@nm`7A=1}KEVO+oZ`bQ>5+t(qL1+8%*l^HNf6?BcJPUKRT+K)yRs*unTO4jaAA zYWc{r6}w!ozc?+>wHVfP{8kmsNaj3bV7-`vV)S%fHT}@SnuOY0iJ`j+-+$_3omSJ> zx)tmcKS%Gu^tilJ(*6&5fR$Ftejl>!Y%IGf?`xaLsiotk;2AwC8Bd9kyB(5gQ1eOt zt^W}BjmPN(P-DL#$vnAC^FG|3`-p0}y|{&kf?>5N)pgqIQwGZZ_n)V)R(VE1TzgZL zg`}+>!=HR}E;FlNsRf)75Fo5yXfNTqKFp{I@tC{sR0$Dn%fv!0!3L^-kzzG{j z_pD~c`FB`P@^k@PTau`C$OA}BWnPdVW_$(_W6N1;X)3{_rUH;=^9@40M*T+JZq7^5sd)5bRAe0=*W%

kzCx`NO{SmzRlHf)Z=Y)5mKPXlyf2KVyaE$7?B;dQvNn9 zh)b2mYuxuxy6I8zFyJ0b!o42pAgISHxtNAOI@xFCOgwz`Gee8;tYiYPa>Z< zM<*%75rvd3pKp9(2baQ{h1B2j1D@gxHI{e}V}HY+;g<}D_wGQ(%^ww{@vphNZ{*k} ztBgVe`Kbf=2>7>G#bQT2j!N+~h==DM`!I z7fOIEkAJnJ;b_Je!aD~IWD3V%8ULp}KfEH%7ClK(w?I~9HS~V@v%Dp%V2KFSdVjR+ z+})D6nKUhPGUlT3o$Qe8A7W}X!*VuzS;@;ut>GF+4(C!Ob!krMp4#|PF@wZ6XyBKb z*Cnjytzhjh4zZYhk&v!bDSe47KLE;Q;~Pfw4Lj>Dk9>>6=geEIvoYq`d+cKlHeCp> z9#22DXPHaQL|NJNxZpe>m}5OykpXHTglbVf86ZDR(_{~?wM#Rep8eRV=Tm_A=-g;E zV(TJt$=c#V^p6Sp`AS}=wt(;osx1u8#70Su&4o0Ol3GUyfzN@sZR;DxG)yTmloLG6 z&3QeRJjC+eZndg7!TfaE)xJS|^}74;ZP;^;q7KoK)+GeuwES{-%08-Nk<8g;^EOQ4 zTr3UpXj|eo4dVf-6SqAe))mYcW4j3vH$1$uNl&|BcNM32Fhi;nLK)1wMO*n%pZ$kJ z;S{m@%q_gXt17NFq=Y2PU|~JrggJaIv7lKml5g)Gi=pt-*k1q8#FnDqVy0}7zG#2M zcce*FQdh0ev*Ty$)u!@9&N<>&=PtkZ!)Vz=XE0zkcDc%Bbvi9RI(Q8HQ_?=z%xw>8 zzD!1j5UDG_ln1TWIFs2b0@rAk8f*cV5ZIm)%Anv5w_j?I{QxKB#A<&QeaMirZjgNY z16f_E`NP-pReOe}CBdr@4i2b$w_H`@xB--Eb+{=eVegrk6>3BUFnngKU+dZFIma#g z`!}RoI#1p`F0M*BII6r(Vp_|@nqho0F0UFB{ATfXY(kWN3R&G z#-vqJ2-Oow9eo#B!sth|GbQd@Jja|d<6j^ z=&$JGM8}L6c8IsN9oNjC#Qg?ZLyQWJsfZPl)b&YV3dj{>CNp;l=Q_0HmJ(x z)jka$tD96Le=vGV5<_{YZ4adA<(&7LrJt=4BOoljdD^b!&M@aM{a>17*n5!$!<=PJ zocXaYc7{teL+xrBKU)%XJRYwlcZE1vy zExw9S5u{QF3OJ~qb883;kWS!H&ll@7)t(*>ML0|3FzgZmd4|At2^!JE3A`InKAY`v z_=X@pom^WqyNZ`Q6Jhk}Fi^aa>_P}PsCHND#e@KXMX)8tm4LMFiyzYIqyZOmyP6QhrV? zfXEuHeST!wcJ3&f)?XHLswG&N6+)ELX0w%xL%m1=AcD=2zIPM~aa6dYx8@-l?-lg* zd%vj&ew$(qiB?ehIaH#y#7#D&9H>O4PQw1skmahJ)jf3iYrc*damDT>oCGfpS}Hzm z7rOl@p(+1SVX*ZIX2-Mo*169Gdt6ohx-fTg8|RSq^swr#$)HhIRMo@IMOW9)Py1@9 z+Cfz&aBltN%x5f0mp759thmtLmSA%3Q_igIm7^cMIR^^6O3paJt5d{zbp>rj0|n|; zlo4SPga90jzcffNZWy{e#uYKN{1VPdPh0Wd%t`tZ60{NTNX!u7wEg?9Sdx%%A|l1Z z!+ZJfC&7@$|7k{@tY^!P($)WlhXvdmN-1p42{P0Y+qIatj<0EmP4kG?m=QDp<1&{B z;bLJC;{Z1`>*nxvZsa~6@X9!Kx}Z{W505a%gLHLgSnneZ;cP00@U(mHq-qS0e76!| z;M=)ORz)!Heyab_sR*syC2=H;J-qRn?47v_62W@3og{UAB5Jr;(~*DMkw^JdZaR^5 z>8N4r&HT*W+*BJi=+~WzVepob!T2}H1vyb!myOS+@;+uZHa2p;o_`i)dl#rwSHA8h z*690RU-{3aZKlB&@oVo%7y?l!bjpuQ_;?z3XU<1GKA&0_10PripXD(KCOMANE^!EZ z9POc_Ivg7u+1Ef?DU@O4dLN+rqZ9(JKSiDkZOFjh9?|6w8S zVoyf0cX-+Nx_^okI;ZTiw?RyeO5J^sDK5CUJhz;Xk-%q#Y2MLushm^xm`U7S8WfPXZ^2B|BPn zw1`5jSaJ9+x3>TQPSyr`(A6z+Jtl8_QB43hIa_K4z5(dZ;plEdJxm^WSmXrXEY=MX0-t4zc+FYUX$}%K^mhXPFu34SaDc&PbJquh4BNl zkgiFf1+`xKvGRbK6G->ZK%&AUpXgsTqx#H>6$JNg-=)zT_{w4DcH zHE(2vyK7vAi!1OHl*9Jh?_Huw8d_Se*EXYnmhw4)11?We&)~|%qx7%*Dhqpk6aUD& ze0*y&pb?rVm@T9~T*v%)vDas(%atiFS6*@BdFwcy`gk$2yT~eabjL-W6;}6Il*9)1 z8&}sp&(zeM^5~Y5oU4)k{<0~MyLq!cYu(nue#zk%&(e4^tl6}cCuSqW+EkaT^maec zg{K$LdpPfxqoieR3DR-r^|N;%@IKUwHJek9nU*>NgmmgBk@{v&{<5OKYH#->SCv!q;_e zX#ZZljXFujl>Xhi`gC<~^}w}K`L1r0e=Y=t<5O0 zYTR0EkF<)IgtkKW4fADomj0oaY7NyTD}1pJnopa|QZmoUVt< zeVeMdMJE>&7LxDZv2WANe37DmzhTi{zHuX>c>bjomwro^)140&?fCLUfl$$H*ics@ zPVvvdyQ_Y!!^Pwr903Pmw>7U?ot6RjLd#`yud!5DaZGwI`rV-ieFvF__tNYbE}c{PerJbsWgF5HVch>+ zvy%jd(!+FQsslaR=r=_x(Ve{7dM4gG#7gp~-MY}*PwEUzj3HmoikP!v`V1;_y29KQZ_3MbxUi49YyDrZr zl8mJ$zupn>yt{!yCI@O|-hi>YPXm|pR5n*$Brve`Wew*aORr`<8kE^?fT=qJLC|0Z@xX1)AF3HyX^lU8yW;C@0~` z_4(u5T3Hb&3K|IIS|-W=u*+)9h;t)!Jb}P@*G{{54_Gme zXcEb|R^b@1MZj(%Qi)NZkzQSdbi?g-Qxk>d<%!kA``sM_GyOs-4+BEt^Y4gLg1TOQ zzunbnm~2h11h2faqLvk5n+C5D5XzCC468h0u(vU+T~9eP?b02jh0e`m0gv*TAH_Mp zkZ^qgO{E3tRLj+KG!r2p$oxII!C=YWf*??j{0&RzeF_UQm_HH~6RqQ=09Rm22rV^2 z3Bq4V_A&cwZ^7eX)hYLMh93s3WtA9yb*+j1#9f0pDjir^!llRihwNn82nZ#AjV-wB zL(4*q6g#+666Ek~MT48Pzm`d!miRHsGA#slyFJ_9UU-e4V}5jXcY#3yw;JzCpVYHH z+)5K5HElE`M@^bUK&U|a*Fz+@RMmc3vY5pGqx}oS!~`}k@_-28b1XSN{T*D)agh%q uvAM_y2rFpFPbRYB*8j!4rWJU6L|nsC*>U`kOAj9aK}J$hqD<`b*Z%`YH^XWG literal 0 HcmV?d00001 diff --git a/windows/deployment/windows-autopilot/images/hh.png b/windows/deployment/windows-autopilot/images/hh.png new file mode 100644 index 0000000000000000000000000000000000000000..98fbc3cd7b65d7ed5b85c612555900a6d3580a35 GIT binary patch literal 4938 zcmd5T7UovCBO#?NLN4vLJt9?_aeOnK}tdiU78S( z5_&+oh*G3TkuFMkg^BO$8fRvGGr#A@x%cd~?%n%5XP5Onk-7+VMmjD!006)U(@@n1 z0M2kx_DVF=l;>11lt6h=x#_Db1Ih=ltWu1#kCos`06nC^oH&hKU;haIxdp zqUv@ovH<{CW?`yI2Hxfy*;)u&b(S#4t33NW4kNYC&4bimF9NMgeW}E+%dhCco1|{G zhgM34##U9l0J5|vQ&zjT(Owgymzn}U->o6}A5^!8=1)VuVmd{2Y+f?lFeH_NDM0}M zW9nq&-y5x}YSh|~*?=G7@9t?BIbP!jEMl{>GxDh>;$R^W?EDfzqz@Ip_gV#9Ovqx0YH*^J7>RGl%=a4 zBm=_G&J_gg8zOQ4Pmo-!!`Wmcbj;Vc7`3*uGhB}weH8F>yk2qdnn_t;3?N}|A^!f+ z@f8AV5={=vTivY1}^>e#}spVGo$!@>`~6i`iKq#(0{Um>Ey$0!YR38W|}?~ zS)Tei{$O`^q+Tu9r=n%%y|;Y(zt*;sYzGbRXb~W$YTlUhw8Vri;O7@h%_chntl{^&Ld^huuMhcoKaN-v@L@Rw_wue6Im6sJyjHTT{%MoR0!i#-(qT{Y=n+@W>tI*N; zRUjGZB=rWhw&ygzio&c zQf%u+l6O9N%^n_OyjM_b_*1{5-qzOL>{pg7^T=vMrtf&^56=oziIEm(bEi8RgP~l2 z;$x?$TT}Bw(Y8I(;W=16?womL-$5C3Z`Q2Ox^W+(K|A-+hQ{&l&9>u?uL#jro)zkhIWu)XaP5D?(y<>l+^ z>*nU>=jZ3);o;-s>{mAhzifa#}@2kmG`$8Nv0e|g;I|s@tssVc18lRjM$csRW3FFQA z?p*%6cZ1!AX*5)Ulo9hdAMy*n%MC87NZ}w9-P}{@3pc41FAhTauK}UD2r6vs@*giW zeZ}LFQjaD}xgJC|3&NKesvg_=xjp6%xo>$MA>=<1Lwu9H-aZINy(+x7dAZXIG`9&PRl6LX?Av~9WrSp}l-0pudQ8^HH-EXK_YQWtL(=y0A`EYn? z+h7SaH9k+Lu4l1n$`RVQ_@z^R?Ja7^?v<`1_|@CL8vHV2;)JKF#FlL4g$_GSdW;pk zM~rV|Tih#h)4QX(39bA99~^WE=pwrAsj9M>OUo}m_PcAivXe;Ih=BBgkDJDC*VUOz z=pqWYzj{9EP^p12=~z@ZuF*sdrS0yjfdoY5tVI<{>@W40HrlxAyv`%N{P;POIJXQf zVYm4E5b7)4OC5!gC0CP?R3pao6ufFV^n0Eu)4fl($z((4-INyQE~Wi*8`#i9Bvqe=?jK<3 zjq!SuQ46S(yWPjvJ?7iYKS>AK&ywfYquRrs%shD9uQxV$zS!wmwInimahho|7*=Jx zWshSnsIkgwm)nw*X|dshs;RQx6=O4ZfhVi5D$!mY7+4OOUbJKeqf7birm%U=5W#jA zm8rxe?FU@3&>=ns)(X4>mR^t_n3*l)t+2fKB)59JEm|d;zDeqRYEL(vFQG2~V}s*y z_A|Tm!1h#~T`OH-=&i<`nF}K9Zg*-9A4Dl-^71o>l3hSnQA+@6ZV6#JSuh(R(g$Zg zN^kusFk?#4C@pMMOCRpy(-_hz*9T@}U=r<3Q9qQF35K8QA)(;UFQa)jTvD!w7$4b0 z`_6mv*(EGzT#+GiIC3=?1$G6CPug+wcHEs|VG8aYb>VFR%$_YsiQ)9KtNsXTD{{TR zMlIagFE_B$U7xi)jj&UrU*x#ZmX_o$zkb_Z(78GZw5yxczZh(j*z5!wJ{x)Dx=Cug zF8H&r__NXL9idXwPl(2gjNO%*I!$S=(@gT4;N0$z;*ScoiLUgFDW2@!kv2;pr^tr3 z>Q|q6$~S~7Hs(Ejnw};Ngjh;kBag=pj>fHyByBv(3|(qi5xA;5h#SqSMuW{FT#%bg{_JYvO_`Z2NU18ltKw z38#|E&n$`QFNEct5NWPFn$(! zMwmfNG-8+6W8o~LXkWix4}2~(iRtP?K{nPH_Cd@O0YzVJt(<7?-Kc6 zXWo6gfd@HEEeRhe->W%u3D@VDbVfZve_`17Q*j;0SRKM@4UA500D}`ID4Fdr2)t%C zK60_IJOj=1qKyF;`Y^H{#{V#jopm8E2~*S%T+M|LAoDp~y5qLoszkc@E{94>Hl5U` zEFxv6)D`(o`)cZR9J6P-l6)V*rND;lA#NZ8>@GA6uj96;7T^mKn{xdof^R^hBw|Y{ z2W(z1eW=9~pYKo$0J*vJTc6%%!7pJsmzUqt=NljnjXrQy8O~V$ozRl(>BV3w`*J%| z2TibAFO{BDKPf4KnJruR5u@U$A!5I38CRefmD#8OO61h6$&is^dj3H`Mc|{VMzAByd+VR1WYheprP<>+%iQ(qLVl<5vj70X< zTT|7_8-0~<`y6S7#o^NXhQs`NyV6ExsRw54RFRbpHbTNZ5ilROz1S>i?jtR^0eeOC zYk_*|s6g0+>7=slkrlQ#tIkQvk(w`Z}dqI_K`E@Zfvi?Q~g^RRpQma+J={s zg9AWKa9$^0O0A@;!_96zWA{XiH~_wX4oZB#QE7)a@@l;s>}SN@odI1QjM_#FgXs;o zwU(17CzE{G0 za=qc4-veyll}`I;RV)d+LzbwmU#-6lg#!8Esw7bKPc;F~*WbAZqT3K>t@HSk-xq~9 z*(Ss#+Zr{rf7SJgYrt^O@ry99DUDPKD=Af=qRw^K@wu&NJR2Xuq7zuT^U_>vg^4&w zaJ<9Ix8z{eSN*Ow6wp!KRP;kZ*Px6g?epJXfzsyLSZl%cX#)H$CaG= zz}CN%A7HL9P=~^VuJ5#*`v9Owr3+v3fC&+NYgM^ebmZLA*XRE)`U8GmGkoQje7eIP z`&<>I1Ucs-oB2y{{q`b^2MnsY{XuLKhg$2Ha6HX&Gca^q@&+wB--K4;n6H4wX(mH&FoT%2(eROX?&RMe?>?~6g~VOhrfAUG(j=`+LtrVCBIVjO#;t>dx<9Qw|VvDV!4Q_LZn!g}uiX5oaeBqb z?^sWVZar=a$6)KIJ)U=LE8f2cAJ$bwke$desf5e0ad!b%`yS38Wfy~=y#zwD&vCyj zyl3dL2yR$0j>uo}Hrd8GP}pjZG6fPNMo#8B1xtPtw&dG4#_prBfh}3DQlkym5sRth zS5L)n;g49wKR4ovE~g2|(Ho1>?6zS(q`RIx5%Id$Z;^~ViiQq;y98x#G~w^sFI`Th z`UlCtBgFop-qpThrNEkDuDxXBXV0<49~L1d!1Lp^D;g|)S_uS`(cRQL56976;I-|2 z+?plOQT`>*?GDfr5&JITH;gDjwmU!a%_eYBaSXQX9~{Q;wD8`q%D?kLk#r)3c0bdH z0#Oc%l#1%Qw`A~j^>W;Paq*@!FZu3=7(qrhZO)R3n{LgsyayQMo0we4PCT{@@kUe@W-3K!$A6qc>=6Neg{$Wf(Sa7 zdprM%v)2@>22!ebsqoCa>27RY!e*=4RtwURf!@L>RiTXshQH$31;k;dUBLVmSz+o( zeXB7b)>E7H3ebZ+CG?I)u7wlipG0VEq543`nt;wU#eWLRS`9+lDjyqDCggl_DiD08 zl1Rf>N4A6ADS3=zFqWI&(X-cCPahJH~ zJ+y7(wA19E>_$crB2AtVt0uIZ%3Pnxi2n?__9+a~5yN@a;MMO^E5+`zCkVzl@=oZC zq~3O>t7kWJbJYeLzbAJ~@`T`o;tccG-k}GJ-+vD=POF?aUER509bx$tp`8SuV7$(4 z6?tKuIqo1o;-GCabkW#nJ&a(oBi)&m{rfIwmd3EZt9sZXnLeW9#9YPBsIF2GHq9Pz5ptO+0 zgaHD9K!_uP0zw2*q=a4*Lkti~NI7x7``zdH{yX=(&pGGbKlZctUeDTV|JK{r`@R`Y z4mL7-6!!oCAanJ~WfuVW0R;ft9{u=(WTcp{@KAEw7VBbj3BdL#ElOT?1YWei2mrO& z(t?{iCGWeVu6V`*fNcBsYuks&>RSMyx$o-bi*AX&Yz8^=wnqtro4l7SP?1TNC0&G8 zz5dH}-6`h>ndFI^Ss@d5{zN+8vA$#$efQU_W74(8uF8jwdC%iq;YkH0gs{tA->|`{I#WTCR~jyr2Yob-u-j~u3VDfyw#@)G!6(coxQShd4}a<{OTxGVdNS= z-A~N_UDaCx@!qARo3rP*;>Ww$bw+E8Igx!)3Zi_0)y}^c(rGbWMu;!7i^kuW1a9$0 zWE3|Etr@elM2jtsLwTNB{-$H)(jugI_3!P@h8Z0Y*Ytq9gr{C{LP8QXqw-}NX6=z# zDAHqL3km^cToiNSUy%wXwO4&WTJ*CFI3&CoA8xJFNUJ`G#o`DND$J_WT;{Jq2h_n{J2)+?3l&>~>srmz8 znet$RZsNh+m#Pfk{GbXZKTP)H)+Cj@xJmBis`D3ebPVcOKK`YVkxS#}d>&S{l3tW^ z6de0Zh~m z7nWkOQ}~;Bv0$1+$QIkRD~d(E-{707HOzf0m|mlXk(R|VZAf~d(-wE!5FNGz&oK`5 z_oCPZ-5+%+pKC7VELnhE@oNuR+2)&A0bcHY_R8 zk2K92sUQmHR7Kt#EJf>~dxOvTP9GK1B;Y5OF_+`_MI<2<<*?eF-z+)N#Fj&QWf6)4 zw&xqFeT*i}yZ6cj2V*9j4Pn&lkUt|b+EX?D0w!fwKO5__Q{RAV9~y*j>0{O*d%@VHfd)b zm?$oEm)`sot5|R`&J(Qnemm8#+^zrHD5F9YDhO>F=B2f*>dt8cHwF()`E4st{A@xv zmE|k!Cgquhys3%l0F5mN_oGSHZ%&{fgSbM({SSm~&LtTCqrI=pG10O8IJ)E6B8p9s z^Zf9Fjmdb^=E3M&yM|KA>}9=R;p`B%VCf_;t^7Q``d>E0fXyV0pNC_^TECG`J{b=E^ydYzVp}iKE+H zU?UB=P7iO%GQPQWZBVJ;Ced{Injlh}G7LV;!tu^joLaxDcT-CdyE#%?*|xXaye5 zZ4lck59<=R*RC3pYvg`KEhG+VFEx7%us_O%bFNaGmi)Y+(gDg1%U~F#X?+qo1gZ0wfl8;0HiY;#Uz@VA-lykHNg1-Yo{U@bZaATJjz1v^6$IqI;1oHX@B= z1}ZRhN=H1>xu!_|eB$(1eGSLxsQV{OaKvc_xVoVRe&A9pvuJC=k!@4*v6LBi5Tgt@ z`5YH9suSW;FPoIUYRoqi!O~a`(ZbU&TPB}`PQI>iD{q{%-MUfRwSu#@qWg{oLD{6U z*D*)smHVHLTkCmgBVbYYd)0?=>snt%Nw|2nIuyJK{?oyitwmXoOG{SSJSzqG`>2cP zs{IGuGO_w;IZ}NkYYyv?$)JI$(zKD9r;uh*#3%)O703UpR6#k9ozN5Ez0%2^KVffR zI43^*T3EAq*)EXRDARvr?&9N5$BGql`BCWAVz!7jSj|C;olZ z3jb^T%*|~Rjgp^M&f?^~R?CZivtBK$vFOPhTU>mF`>fTlVO46L#A_+~`Lpz<`a6Bo zI1ltfo-rO=gmZ+@)7EVeyEEM{pnoPMd)sgZevSj8egK%wvYjuX%|D72OC!g<)JePjx`JR*5obKv39e8@vw7HG;1_GdcIz~)XD_@JCcPMjlSLU&G^_V7+H#GJBs>BZDO8AS_ zqq8)%4(g3F_7&Ic0IPK;n*%Kjj@1y|Yt=4(--ag4<37E~3QtXQO4s9a4&n$pjPauAa&7Vlk_l9IDC7P@ zUE>37qW7?VvkvQN<`O}|#%}_Qqrr5EMuAN(K@XUigEeg=EE_!w^>ItMKm{DEx}Fn^ zZ@n8%B7PF|y?Yc=pTP=o!y8);gG&p`llNIXjK#-eGmb8K*Sibr4MFF<8E)Pla4Hec zTc``PKqk0sRhQY(L0#CGgI@TE-9Xfewu-p>Xujgv5XYdaF0L@ITg>wrr}euizUsmG zO!sLEwkO)*c1AlYK2{3RFf6>x*(V-*aqC&K;b!q;5^Wt`_j|7*%_H3c&>p&j@GkfMC%-1G3``F5bzAl#96u8aHiKKoH$ zoW>MjIzJ&JlE$iwJIEuM9Mm(%-R%8!j^VGuFSHC?@15wpRtZj!e(r+U34G$-netPD zU^U;;g7zYwOPwOSYhgwz0}>?>lT5Xb5a!XI`Dw9SIHeT;DfDx<$@| zCHn^}_{=rwUDmzQi4|@GbS30fn01OlH`W~Vdfb(l0J4F~&=V`QM0 zK$K^-ju~Qz-0OH9b@u+{3P^Ljog3GPo<~y!&JIdt!4XyO$hG-#Zfaf3yuyd53Lk&@ zfbiw`f{m~tPaRO#K9JtY9FM-QkCyj#^%pMa`%%^9erl+vB2R90i7L%5^==RXA%m5y zvPnfX&ptGQWSp4ph3k_8nvzuYL{|N?713{7PD0&`^ohk!5mj5y);>+_4b4YYTjk~z zvj;5QC|F|BS6j>FV_KJCi#|k4fgLP_;~7F^H+PZ}U)d?zm)EJT>~a~sBG~>`Pof(6 zR{LMP-w90I-!E1d?AQyu@Q)K{avVuJ;9KI4$0RD9Rr+rS+9g&3QnIiH@Ce~rykNn* z@MFUi5oq*i&fs+_yxmY7^B2|8f2Gu*Q>rTRuQ`j~kQPU!#80J#7YX7Vhz5I{lSgjj zFU4`%a4kRyhV_9Idx=xNR$@EB?tn|bDByD1JzeuQ;HRF~?fFPcGzvF@NgGUyo7SYR z%F`SH!W-2Sl%y5MGiiYfd~OXs*Y~u@Ya~M)q9cOEVVtq4itkB`>jJu%T-`wP+XW<^ z!K#Xrn-_|wa6#8y{i^B?&KVfQPTGQqG8nPM)8m*g=m=KVskV8Wv(sb*O||5A>}G3@l4CjqJ^n0 z`Uc%0Bp^|PZn$1Qv~aam3KHcX76E3i|6FcxloegsKdwXXkYh=$rk=OWjl04%g*5Y` z-lLmlZe50y=0+k*z>Uo>H6ZWe)3E6I#WkAhb_NFiB<4pXkoa2rs5nUtQ*#Kd^E5B2 zc@)~8xZG+fJltbv-|kAc(}jSTV0}G<`lPwADw;lKymbszwTw1`c;MV&5EMKDiJc-S z4%$oK#t_&qt;@{|>Qx>X2lnwldZJ5E%&Fw+O7klLPFC9)<2hj}h3;J#Ti4mwm+cY* z9A~YmW~2agR)Lc)r9lHSGTNx9n|q4;rPo@ftD5fwNpEgg`oJC|1);v$C^HR*{WbLi z9FQi?YJ;@$AZAQiga($L-kb2+{5f+do?=F~>&+u>OU#h$Cp8dBF}zZl|G>`@OIOIe zzu;4D3$p~JlIPSGJOY;j3}kB1c<0yFI)O)g6HX@ylROI4IfK^~y00U9*x^@|V~!bR zSu5i#=`2&vo~)%C1j-yMK*f#hq)Ain?Ht~XTgjkl&9^qIHUyP;&)w9wbeMZY2>$)J($g%wW9mRw4;M{m8z&Ed_ljM7tjd7lh&`L^L#LRd+YiX_x*;d}i3oo$)J#Izlff%=} z7qyxJ`ZK5p^a@5B^ zURP56at+AFn1*=!g-Lc@_!n|nT}iyq@;bX=d*T_1Fw8e3JXz??O~}-EoU=BZ#TVtS znRm~QeY1wOzPued?9#K{L>Gey8Ob47GKN!h=*No?{S-RP=Ugae9 zQ_;ko*R)3x1}$ljk))6-MBLXv4syhcI@f3@ce6fP*ci}`Awl_dY=rMziXuBUJdzCd z2wVATKQgRuig4B$xo_`Jw`SY4gk)6>8LR^nR!so{d_v9!Y`(K~kFdnP6xH{6%$4VI zh&UV*3j2^z)ve*%U*i*brpAadJPImyWsl`5vhpZPwb;OU-g#JS1niGT7zy(&TiN^# zrYn9DgR(UEe7;@pWLBYj2ajfyZ~o-d;_^9ofn2#vR_L{XuACf}h z=k(^GYAR99FywyNwc>g#lQ2tc5K?-)=$*^IC@#%vG~9CNH#lz)SeJAJVuUQJ$zN+*8yD)^ML29KgO9?n6=BMDFxMd7z< zAIs5;m21(vDw=B98Ya%j$hX9JADUWBf!PLk<;S+~@({)uoOJ$>Nl5ZKM9#VAmNJp0 z`nl3POgbakbN)?HumI!1y$%CSkEITHsAiTjB)EKW_utMHB^{RJcG&PIW6O@Cse(0&5&i+#8o#tb;x>(% zQUzP%P99(I@aXT!sEJDwCz9DI2{_A1wD|AYD(Pm)jQLct?5hTgpTx{^um*}^E#o%I zcNe<7mY6ta+u2cDu`wtSs$K9oYpmp<*ZIpiEza^w9VA6z^9Qp~Rf~HgX5rc(TDEQQ z`pXCpJL|=|2z}V-3vh`MVlwhhW%SAe0MPk(d)fktj0?tpLQWI5>)>NNx7-LtBHOBy zW%Xw@QNGho9l=au(ypxDZ*kZ-!~PQIlH;D$=3SBYWne5++zc{uS~*yVGP632k>^Jw zhdgVHfcnza7_G6Y&Ww_gSi7UH3`?B1`>5&9z+35rSChKdq8!iIs6iZoOfb9q095%1TN>>f#VV@>PM#zd>F_ zQ0FnYIJ2>oJ|}1+Q)*R9U&TVQzHY+oh6mIIb3ZGRniAt*F1tQBp8LzwJMQV|XS0_X zrrofC@SK=onA^*t@b>1oj;yMQYgO)AuB<qpNe+Ovh^v!dKv8G;?nl!=2fWUXG;gn>F&JG7;pt1I-< zxow_<1Yg3G_28$XLDV_2CgcVz6LN{`#ok}hhcr*}b$kY1q&-g15!qW(>NbA?(iCRu zxNu)PMQ6gBGh@qVDAiYDi89wdZn{s|S~At|LbmsPR7@=Exu#v%TRv(8tCWuCmmHA2pZhBMZWP(<01`d1N5u2xYMXS)nhUZjpu4X5 zk0OY> zl{wgN5_a*6wl2b$b#r~n50AUK9;X6Uu}Jw%y8-dii&N?l8}Q1DIep7+EL%PJLlHuk zvAp*Px-RMRcajuZ2>m`PzT}RUX&w=%EOIjffwxKT#rnkc4Z7S?vVis@@T;Z3ZxEUR zH{&oOXE+Z}g(YkQt}|{(PKIeK|4zDh-t)Z}&4CkEE!+l0`eR3FqK>gZhw%ha@ejbp zH;InQ26Vi&5}#9%q&6!pw7(}OdG$UmI{@zv-n6*Brp;Bb5!%92*)N8wjEHL`5EAc8 zz7jQ$b4Q1j4~2L*`(*J6@goAmSU<_xQ3@3lL$0|uTIOQ0=VjrTNGcZMxkdML2>0MR(j_e$%8Wt_xw)`}SQ7x<0r%RsWe1Y|-eRwhCMq>=m`D3#n z?I^q*q`Cz(?JqYv?wCpLO6sIXYnt=4*PA&M?hEc#;q{}P1wG| z_a;}vPRF=-gx!LMT+6J6pYrhMLv_cl7sa#l%oj_0)1k&Yg_jro)G3&+_Qfk{JWr-u z+1g%bG0r384V$;ny3#8{KSakQA4MWy#5d@1v$Yd)-nG(5ywzhCJABNS-~47jDBULOTTl+(PNu)o?st2hagsKu>({F#Nqz3Efu(od zyQ(#GUl=0-M-ZiE9a@k#C!JW9m6Q_q?bl6$o7?&#OSI-==Y~cG8+r(Y`?uaDBfIDB zJnUpfNKz9@aYGw)7C166m+zH5ic#xAc(ktg6Wx6LD|cNDy00(i^_XU7|LoJ?7xhl~ zum=I{GLOr90OfM3V_Qx|!_0O-R;D9M+BJk$CPqJrr_2(M29^-bd|KY1L+>YFXm-23 z^42n+S-v*>BXD8*yPbgXiVkQ-#)FvBL|@}CtNQ0WG2CPNHmpj`#j0S{N8-kFGF>s@ zA5nd(;q4NYHZSm&ga*TZQF;-CBw0;JJiK2}Vt~tmwCCo1i&!rqhL`)$s3Uuu-QZca zE&LjCrP-S-AkB>aNUVQWDWFJ4n2d}dJXeI~MyR>z*)mLH`SSyZYN~5c63=9-NM$S> z_v*{{(!-}9YnVC3Xtkr#jNZL5r$mF;&R;4-L-p%ESrQ`=7YK%HXY8%ufzAu*QIux3(Uul3O z&DA)+PQHZpO;*<^{IlwTm%-o_C5Q&|jSsbWCNHzSD`U2l2fDw8b<1neRWt7)a&`^`~uJNn2DigTeDw*w|B9d zgJRbOh@XXw_fvVi{#49`C?Juba74T(Rrr>!So6-}UZm*3BfE*W+a`#KH@O@*MD8rvJ=>~^$b5_2E%nE7SV97kXuueoP(MvPdn6`=`UGH z`}C7br)s;7Qt6B(`=22GSoJK*kUZ+yy-@^>;aPs($>dX+V$qt03HPM=HZ2ds&vRY- z^ikl5d%LQ#XTDKOEOQ=(r*pumIHKAw4CZaKtQBSywcb!`KF~u=?iu1s5h)zPalCix zTB#e(+W}lxO&=CiT`ArpNkfK6N&(Ad6qCNlNn(E3Oct`F(9iU)qFH_0oIZb|1#185 z^OGHSRWCD7diFC3Ma(}yvVX}}IT}<23qLk)Ix#2A2_Ss!`b6%j)m<<3g30oj9Er(} zM>A6XL{jAY){}{qcAN@{#bR7G`E-iB7fBf}qC3O|DbAWzGo*^76c~`{LMD9ZdN)c?O?z6)3?o~z4nnfz$XiN3aAd4qQ%o5zE5>N3TG1v-osmW zBd~-NsdJ@C8oX~1qzDz12(BfJa9Phb-XNlVPtmWlX?_so??Z+s`|9RA)MjO%BzAO#~KH(I6f_Rg_?DG({{^CLdWhSDld9DFohUo z=KA4qyQftB&w-US5C?7n;#s?bPxAA*U`_W$cT7FIYu9qzaQ&%InGgt%J6V0#Mn4>l zY7w8(s<^r=rhN>uOj&sCS{p38I1Fm!W>P- z7spfg;VUd*37ny#KbKYF=z*1)s;1kC1QxH(+|8hTl6BQU(Klg<3JUg*^;9_TL({VA z(_O*I=Mgd^X3sGO^9xPK--DDv!5<5pa}8dFH`OPg53O8=K-S%Eo9ze%_Zt3|JENdDo`>bUws=f#!rbK>D;WE(lD`G>$`TsSL>A2eyZhpO`*qL-lha z$ORBkmuaox&GLw;Nr&>`dS!oYmL;{`#h+P-d92?Mw3|+K6$%gX3)kY2wsWgbAYOxO z!}qBqhoaf{#jbQM)!*+UV7U>R4Ages#!&pM*6kdW-P{{An$dzm_%vV$U=^oBjz!^= zB<6K$tgZP?$FiDWGUHQK3voui>AKMH?G)D_5hy-R>Cvs-Sk2ZSKXSfkq_ zmXEWF{ixxq>42#r+xSthlQPh8BW`q;-~>$gfMpCGThczXwT1yh9P^c4X&|cVuo@BE zn^oEFp9t6%((P2n0gwTy1Nd{%^1a0_g+l%{d8kHXU*YUgyFX!T9dp6%lNYPX{t-~5w zTaCTY`{(;fJw)vFzCbHU>42&P_Z)9Tl(q-oSCd5;6}QKjYf7XUJGarpZ!{AsIq3cp zeW79Z;B zk`kbIFE^hT4&@uY47ffORXAw$%Y6OMqHPl)k4bMLM+V80dhG|&2VedR^wE5{pns4c zsqrP=Z>7>UP9u)wT}Uxhg|8K>$MxT4eH(*qBE;$#u5x1gKj|X@_2CRBbS6|JsWWKj zJFZF^c*dr~xc_UnCW*ZKQkI*lP*^%iZ|YU+iP% zJcRsP6Ze=lJE#`IsSl$rW_WY{mPNDkEY&YH-d|XBFYc6R+l?m@K1_!QOzJH}Y&u38 zW%7t3#Cxa)V7V_xvrQ0ejS@D|YdQGp5H5Hb?} z?2-`N+`*Y040=A*Ks<$KifVmf!`aJ(RjonwUG}s5-VbnLt!VGP!k+Ff-vca{k7PcssUY&yIm+L?BVu~^~N``IY0n z-vxR6&K$B7IJhYr&|pFr+WjsyJr2)(Qpzjl6R3*9r;--5w2KlM%m&MQS=4PIlB8Pg zQrkRcDRJU6e`Upl5Ojjcdjmx(lgf$zo5O~-zd0^US*znSw~PMTP=Nms)g>n^uu&`3 z{U^Bp5q0^81^Bi_3E1rU<7EO1xAFchnzrz(E7Zxg0U8fJm3 MRt}f3mu~$29}<+nYybcN literal 0 HcmV?d00001 From 8ab41c6d3aa0e7bb53a43287695b0e7b03072ce2 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 1 Aug 2019 12:18:29 -0700 Subject: [PATCH 4/8] editing --- .../autopilot-device-guidelines.md | 4 +- .../windows-autopilot/autopilot-mbr.md | 111 +++++++++--------- .../windows-autopilot/known-issues.md | 13 +- .../windows-autopilot-whats-new.md | 1 + 4 files changed, 68 insertions(+), 61 deletions(-) diff --git a/windows/deployment/windows-autopilot/autopilot-device-guidelines.md b/windows/deployment/windows-autopilot/autopilot-device-guidelines.md index 2997787bd1..d379b288a9 100644 --- a/windows/deployment/windows-autopilot/autopilot-device-guidelines.md +++ b/windows/deployment/windows-autopilot/autopilot-device-guidelines.md @@ -4,6 +4,7 @@ ms.reviewer: manager: laurawi description: Windows Autopilot deployment keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune +audience: itpro ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: medium @@ -20,7 +21,7 @@ ms.topic: article **Applies to** -- Windows 10 +- Windows 10 ## Hardware and firmware best practice guidelines for Windows Autopilot @@ -42,3 +43,4 @@ The following additional best practices ensure that devices can easily be provis ## Related topics [Windows Autopilot customer consent](registration-auth.md)
+[Motherboard replacement scenario guidance](autopilot-mbr.md)
diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md index fecbab9249..32e3447c97 100644 --- a/windows/deployment/windows-autopilot/autopilot-mbr.md +++ b/windows/deployment/windows-autopilot/autopilot-mbr.md @@ -10,6 +10,7 @@ ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy author: greg-lindsay +audience: itpro ms.author: greglin ms.collection: M365-modern-desktop ms.topic: article @@ -22,69 +23,67 @@ ms.topic: article - Windows 10 +This document offers guidance for Windows Autopilot device repair scenarios that Microsoft partners can use in Motherboard Replacement (MBR) situations, and other servicing scenarios. -This document offers guidance on how Microsoft partners should handle Motherboard Replacement (MBR) situations and other servicing scenarios with Autopilot devices. - -This document only addresses the most common repair scenarios. - -Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device (for successful registrations). The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, making some repair scenarios unsupportable currently. +Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device to enable successful registration. The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, causing issues with some repair scenarios. ## Motherboard Replacement (MBR) -If a motherboard replacement is needed on an Autopilot device, use the following process if possible: +If a motherboard replacement is needed on a Windows Autopilot device, the following process is recommended: -1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) +1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) from Windows Autopilot 2. [Replace the motherboard](#replace-the-motherboard) 3. [Capture a new device ID (4K HH)](#capture-a-new-autopilot-device-id-4k-hh-from-the-device) -4. [Reregister the repaired device](#reregister-the-repaired-device-using-the-new-device-id) -5. [Return the repaired device](#return-the-repaired-device-to-the-customer) +4. [Reset the device](#reset-the-device) +5. [Reregister the device](#reregister-the-repaired-device-using-the-new-device-id) with Windows Autopilot +6. [Return the device](#return-the-repaired-device-to-the-customer) ### Deregister the Autopilot device from the Autopilot program -Only the entity that registered the device can deregister it. Therefore, before the device arrives at the repair facility, it should be deregistered by whomever registered it, whether that’s the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via MPC. In that case, they should deregister the device from MPC (which will also remove it from the customer IT Admin’s Intune account). Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. +Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC (which will also remove it from the customer IT Admin’s Intune account). Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. -NOTE: Whenever possible, an OEM or CSP should register Autopilot devices (rather than having the customer do it). This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. +**NOTE**: When possible, an OEM or CSP should register Autopilot devices, rather than having the customer do it. This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. -EXCEPTION: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps (if desired) through Intune. +**EXCEPTION**: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps, if desired, through Intune. #### Deregister from Intune To deregister an Autopilot device from Intune, an IT Admin would: -1. Log into their Intune account +1. Sign in to their Intune account 2. Navigate to Intune > Groups > All groups -3. Remove desired device(s) from its group +3. Remove the desired device from its group 4. Navigate to Intune > Devices > All devices -5. Select the checkbox next to the device(s) you want to delete, then click the Delete button along the top menu +5. Select the checkbox next to the device you want to delete, then click the Delete button on the top menu 6. Navigate to Intune > Devices > Azure AD devices -7. Select the checkbox next to the device(s) you want to delete, then click the Delete button along the top menu +7. Select the checkbox next to the device you want to delete, then click the Delete button along the top menu 8. Navigate to Intune > Device enrollment > Windows enrollment > Devices -9. Select the checkbox next to the device(s) you want to deregister +9. Select the checkbox next to the device you want to deregister 10. Click the extended menu icon (“…”) on the far right end of the line containing the device you want to deregister in order to expose an additional menu with the option to “unassign user” 11. Click “Unassign user” if the device was previously assigned to a user; if not, this option will be grayed-out and can be ignored 12. With the unassigned device still selected, click the Delete button along the top menu to remove this device -NOTE: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. +**NOTE**: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. -The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device(s) is no longer present. +The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device is no longer present. More details on deregistering devices from Intune can be found [here](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group). #### Deregister from MPC -To deregister an Autopilot device from Microsoft Partner Center (MPC), a CSP would: +To deregister an Autopilot device from the Microsoft Partner Center (MPC), a CSP would: 1. Log into MPC 2. Navigate to Customer > Devices -3. Select the device(s) to be deregistered and click the “Delete device” button +3. Select the device to be deregistered and click the “Delete device” button ![devices](images/devices.png) -NOTE: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device(s) fully removed per the Intune steps in the previous section. +**NOTE**: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device fully removed per the Intune steps in the previous section. -NOTE: Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. +Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. -NOTE: Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: +Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: 1. Copy all important data off the device. 2. Let the repair facility know which version of Windows they should reinstall after the repair. 3. If applicable, let the repair facility know which version of Office they should reinstall after the repair. @@ -105,33 +104,33 @@ Repair and key replacement processes vary between facilities. Sometimes repair - ProductKeyID - OSType -NOTE: For simplicity (and because processes vary between repair facilities), we have excluded many of the additional steps often used in a MBR, such as: +**NOTE**: For simplicity, and because processes vary between repair facilities, we have excluded many of the additional steps often used in a MBR, such as: - Verify that the device is still functional - Disable BitLocker* - Repair the Boot Configuration Data (BCD) -- Repair/verify the network driver operation +- Repair and verify the network driver operation -*BitLocker need only be suspended, if the technician has the ability/access to resume it after the repair. +*BitLocker can be suspended rather than disbled if the technician has the ability to resume it after the repair. ### Capture a new Autopilot device ID (4K HH) from the device -Repair technicians will have to log into the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: +Repair technicians must sign in to the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: -1. Repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition) -2. Repair technician boot the device to WinPE -3. Repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images) +1. The repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition). +2. The repair technician boots the device to WinPE. +3. The repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images). - NOTE: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. + **NOTE**: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. -4. Repair technician boots the device into the new Windows image -5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below +4. The repair technician boots the device into the new Windows image. +5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below. Those repair facilities with access to the OA3 Tool (which is part of the ADK) can use the tool to capture the 4K Hardware Hash (4K HH). Alternatively, the [WindowsAutoPilotInfo Powershell script](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) can be used to capture the 4K HH by following these steps: 1. Install the script from the [PowerShell Gallery](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) or from the command line. -2. Navigate to the script and run it on the device when the device is either in Full OS or Audit Mode. +2. Navigate to the script directory and run it on the device when the device is either in Full OS or Audit Mode. See the following example. ```powershell md c:\HWID @@ -142,11 +141,13 @@ Alternatively, the [WindowsAutoPilotInfo Powershell script](https://www.powershe Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv ``` -If you are prompted to install the NuGet package, choose **Yes**. +>If you are prompted to install the NuGet package, choose **Yes**. -The script creates a csv file that contains the device information, including the complete 4K HH. The service facility would then use this 4K HH to reregister device as described in the next step. +The script creates a .csv file that contains the device information, including the complete 4K HH. Save this file so that you can access it later. The service facility will use this 4K HH to reregister device as described below. -NOTE: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. +**NOTE**: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. + +### Reset the device Since the device was required to be in Full OS or Audit Mode to capture the 4K HH, the repair facility must reset the image back to a pre-OOBE state before returning it to the customer. One way this can be accomplished is by using the built-in reset feature in Windows, as follows: @@ -158,42 +159,42 @@ However, it’s likely the repair facility won’t have access to Windows becaus ### Reregister the repaired device using the new device ID -If an OEM is not available to (or not willing to) reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. +If an OEM is not able to reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. #### Reregister from Intune To reregister an Autopilot device from Intune, an IT Admin would: -1. Log into Intune -2. Navigate to Device enrollment > Windows enrollment > Devices > Import -3. Click the “import” button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). +1. Sign in to Intune. +2. Navigate to Device enrollment > Windows enrollment > Devices > Import. +3. Click the **Import** button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). The following video provides a good overview of how to (re)register devices via MSfB. - +> [!VIDEO https://www.youtube.com/watch?v=IpLIZU_j7Z0] #### Reregister from MPC To reregister an Autopilot device from MPC, an OEM or CSP would: -1. Log into MPC -2. Navigate to the Customer > Devices page and click the “Add devices” button to upload the csv file. +1. Sign in to MPC. +2. Navigate to the Customer > Devices page and click the **Add devices** button to upload the csv file. ![device](images/device2.png)
![device](images/device2.png) In the case of reregistering a repaired device through MPC, the uploaded csv file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple were used, the Autopilot service would be unable to find a match in the Autopilot database, since no 4K HH info was ever previously submitted for this essentially “new” device, and the upload will fail, likely returning a ZtdDeviceNotFound error. So, again, only upload the 4K HH, not the Tuple or PKID. -NOTE: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: +**NOTE**: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: ![hash](images/hh.png) ### Return the repaired device to the customer -After completing the above steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. +After completing the previous steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. -NOTE: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. +**NOTE**: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. -NOTE: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. +**IMPORTANT**: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. ## Specific repair scenarios @@ -207,8 +208,8 @@ NOTES ON TEST RESULTS: - In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. - Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) - -
ScenarioNot supported for Autopilot (Y/N)?
Yes = device will be reenabled for Autopilot successfully
No = after repair, device will NOT be enabled for Autopilot		Microsoft Recommendation + +
ScenarioNot supported for Autopilot (Y/N)?
Yes = device will be reenabled for Autopilot successfully
No = after repair, device will NOT be enabled for Autopilot		Microsoft Recommendation
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: 1. Autopilot device is deregistered from the Autopilot program @@ -297,7 +298,7 @@ NOTES ON TEST RESULTS: 9. Go through Autopilot OOBE (customer) 10. Autopilot successfully enabled -NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device. +NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device.
BIOS info excluded from MBR deviceNoRepair facility does not have BIOS tool to write device info into BIOS after MBR. @@ -378,9 +379,9 @@ Assuming the used HDD was previously deregistered (before being used in this rep
GPU replacementYesReplacing the GPU(s) on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the GPU.
-NOTE: When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. +>When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. -NOTE: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: +**NOTE**: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: - Memory (RAM or ROM) - Power Supply - Video Card @@ -393,7 +394,7 @@ NOTE: The following parts may be replaced without compromising Autopilot enable - Heat sink - CMOS battery -NOTE: Other repair scenarios not yet tested and verified include: +Other repair scenarios not yet tested and verified include: - Daughterboard replacement - CPU replacement - Wifi replacement diff --git a/windows/deployment/windows-autopilot/known-issues.md b/windows/deployment/windows-autopilot/known-issues.md index 818d4ca0ea..dae9f38910 100644 --- a/windows/deployment/windows-autopilot/known-issues.md +++ b/windows/deployment/windows-autopilot/known-issues.md @@ -25,11 +25,14 @@ ms.topic: article
IssueMore information -
Windows Autopilot white glove does not work for a non-English OS and you see a red screen that says "Success."Download and install the KB4505903 update. -
Windows Autopilot reports an AUTOPILOTUPDATE error during OOBE after sysprep, reset or other variations. This typically happens if you reset the OS or used a custom sysprepped image.Download and install the KB4505903 update. -
BitLocker encryption is not correctly configured. Ex: BitLocker didn’t get an expected notification after policies were applied to begin encryption.Download and install the KB4505903 update. -
You are unable to install UWP apps from the Microsoft Store, causing failures during Windows Autopilot. If you are deploying Company Portal as a blocking app during Windows Autopilot ESP, you’ve probably seen this error.Download and install the KB4505903 update. -
A user is not granted administrator rights in the Windows Autopilot user-driven Hybrid Azure AD join scenario. This is another non-English OS issue.Download and install the KB4505903 update. +
The following known issues are resolved by installing the July 26, 2019 KB4505903 update (OS Build 18362.267): + +- Windows Autopilot white glove does not work for a non-English OS and you see a red screen that says "Success." +- Windows Autopilot reports an AUTOPILOTUPDATE error during OOBE after sysprep, reset or other variations. This typically happens if you reset the OS or used a custom sysprepped image. +- BitLocker encryption is not correctly configured. Ex: BitLocker didn’t get an expected notification after policies were applied to begin encryption. +- You are unable to install UWP apps from the Microsoft Store, causing failures during Windows Autopilot. If you are deploying Company Portal as a blocking app during Windows Autopilot ESP, you’ve probably seen this error. +- A user is not granted administrator rights in the Windows Autopilot user-driven Hybrid Azure AD join scenario. This is another non-English OS issue. +Download and install the KB4505903 update.

See the section: How to get this update for information on specific release channels you can use to obtain the update.
White glove gives a red screen and the Microsoft-Windows-User Device Registration/Admin event log displays HResult error code 0x801C03F3This can happen if Azure AD can’t find an AAD device object for the device that you are trying to deploy. This will occur if you manually delete the object. To fix it, remove the device from AAD, Intune, and Autopilot, then re-register it with Autopilot, which will recreate the AAD device object.

To obtain troubleshooting logs use: Mdmdiagnosticstool.exe -area Autopilot;TPM -cab c:\autopilot.cab
White glove gives a red screenWhite glove is not supported on a VM. diff --git a/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md b/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md index 57c91a67e4..6f157802ae 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-whats-new.md @@ -10,6 +10,7 @@ ms.localizationpriority: medium ms.sitesec: library ms.pagetype: deploy author: greg-lindsay +audience: itpro ms.author: greglin ms.collection: M365-modern-desktop ms.topic: article From a2cf785ce19ccf8ec9318b881aaba8cf778a1257 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 1 Aug 2019 12:48:02 -0700 Subject: [PATCH 5/8] editing --- windows/deployment/windows-autopilot/autopilot-mbr.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md index 32e3447c97..a5e15df930 100644 --- a/windows/deployment/windows-autopilot/autopilot-mbr.md +++ b/windows/deployment/windows-autopilot/autopilot-mbr.md @@ -40,7 +40,7 @@ If a motherboard replacement is needed on a Windows Autopilot device, the follow ### Deregister the Autopilot device from the Autopilot program -Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC (which will also remove it from the customer IT Admin’s Intune account). Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. +Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC, which will also remove it from the customer IT Admin’s Intune account. Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. **NOTE**: When possible, an OEM or CSP should register Autopilot devices, rather than having the customer do it. This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. @@ -209,7 +209,7 @@ NOTES ON TEST RESULTS: - Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) -
ScenarioNot supported for Autopilot (Y/N)?
Yes = device will be reenabled for Autopilot successfully
No = after repair, device will NOT be enabled for Autopilot		Microsoft Recommendation +ScenarioSupportability:
Yes = can be reenabled for Autopilot
No = cannot be reenabled for Autopilot		Microsoft Recommendation
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: 1. Autopilot device is deregistered from the Autopilot program From c56a42bbe39ad2cd9f84bcbb1060d8d825d227cb Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 1 Aug 2019 14:23:40 -0700 Subject: [PATCH 6/8] editing --- windows/deployment/windows-autopilot/autopilot-mbr.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md index a5e15df930..3092a04346 100644 --- a/windows/deployment/windows-autopilot/autopilot-mbr.md +++ b/windows/deployment/windows-autopilot/autopilot-mbr.md @@ -208,8 +208,12 @@ NOTES ON TEST RESULTS: - In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. - Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) +See the following table:
+- Supported = **Yes**: the device can be reenabled for Autopilot +- Supported = **No**: the device cannot be reenabled for Autopilot + - - @@ -151,7 +150,6 @@ sections:
ScenarioSupportability:
Yes = can be reenabled for Autopilot
No = cannot be reenabled for Autopilot		Microsoft Recommendation +ScenarioSupported*Microsoft Recommendation
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: 1. Autopilot device is deregistered from the Autopilot program From ad08d0c60fae7247c78fa3873969ece7561fe8cc Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 1 Aug 2019 14:26:01 -0700 Subject: [PATCH 7/8] removed new topic for now --- windows/deployment/windows-autopilot/TOC.md | 3 +- .../autopilot-device-guidelines.md | 1 - .../windows-autopilot/autopilot-mbr.md | 417 ------------------ 3 files changed, 1 insertion(+), 420 deletions(-) delete mode 100644 windows/deployment/windows-autopilot/autopilot-mbr.md diff --git a/windows/deployment/windows-autopilot/TOC.md b/windows/deployment/windows-autopilot/TOC.md index 5d487c958c..4ad5db1e36 100644 --- a/windows/deployment/windows-autopilot/TOC.md +++ b/windows/deployment/windows-autopilot/TOC.md @@ -25,5 +25,4 @@ ## [FAQ](autopilot-faq.md) ## [Contacts](autopilot-support.md) ## [Registration authorization](registration-auth.md) -## [Device guidelines](autopilot-device-guidelines.md) -## [Motherboard replacement](autopilot-mbr.md) \ No newline at end of file +## [Device guidelines](autopilot-device-guidelines.md) \ No newline at end of file diff --git a/windows/deployment/windows-autopilot/autopilot-device-guidelines.md b/windows/deployment/windows-autopilot/autopilot-device-guidelines.md index d379b288a9..8913615eb4 100644 --- a/windows/deployment/windows-autopilot/autopilot-device-guidelines.md +++ b/windows/deployment/windows-autopilot/autopilot-device-guidelines.md @@ -43,4 +43,3 @@ The following additional best practices ensure that devices can easily be provis ## Related topics [Windows Autopilot customer consent](registration-auth.md)
-[Motherboard replacement scenario guidance](autopilot-mbr.md)
diff --git a/windows/deployment/windows-autopilot/autopilot-mbr.md b/windows/deployment/windows-autopilot/autopilot-mbr.md deleted file mode 100644 index 3092a04346..0000000000 --- a/windows/deployment/windows-autopilot/autopilot-mbr.md +++ /dev/null @@ -1,417 +0,0 @@ ---- -title: Windows Autopilot motherboard replacement -ms.reviewer: -manager: laurawi -description: Windows Autopilot deployment MBR scenarios -keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: deploy -author: greg-lindsay -audience: itpro -ms.author: greglin -ms.collection: M365-modern-desktop -ms.topic: article ---- - - -# Windows Autopilot motherboard replacement scenario guidance - -**Applies to** - -- Windows 10 - -This document offers guidance for Windows Autopilot device repair scenarios that Microsoft partners can use in Motherboard Replacement (MBR) situations, and other servicing scenarios. - -Repairing Autopilot enrolled devices is complex, as it tries to balance OEM requirements with Windows Autopilot requirements. Specifically, OEM’s require strict uniqueness across motherboards, MAC addresses, etc., while Windows Autopilot requires strict uniqueness at the Hardware ID level for each device to enable successful registration. The Hardware ID does not always accommodate all the OEM hardware component requirements, thus these requirements are sometimes at odds, causing issues with some repair scenarios. - -## Motherboard Replacement (MBR) - -If a motherboard replacement is needed on a Windows Autopilot device, the following process is recommended: - -1. [Deregister the device](#deregister-the-autopilot-device-from-the-autopilot-program) from Windows Autopilot -2. [Replace the motherboard](#replace-the-motherboard) -3. [Capture a new device ID (4K HH)](#capture-a-new-autopilot-device-id-4k-hh-from-the-device) -4. [Reset the device](#reset-the-device) -5. [Reregister the device](#reregister-the-repaired-device-using-the-new-device-id) with Windows Autopilot -6. [Return the device](#return-the-repaired-device-to-the-customer) - -### Deregister the Autopilot device from the Autopilot program - -Before the device arrives at the repair facility, it must be deregistered by the entity that registered it. Only the entity that registered the device can deregister it. This might be the customer IT Admin, the OEM, or the CSP partner. If the IT Admin registered the device, they likely did so via Intune (or possibly the Microsoft Store for Business). In that case, they should deregister the device from Intune (or MSfB). This is necessary because devices registered in Intune will not show up in MPC. However, if the OEM or CSP partner registered the device, they likely did so via the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC, which will also remove it from the customer IT Admin’s Intune account. Below, we describe the steps an IT Admin would go through to deregister a device from Intune, and the steps an OEM or CSP would go through to deregister a device from MPC. - -**NOTE**: When possible, an OEM or CSP should register Autopilot devices, rather than having the customer do it. This will avoid problems where OEMs or CSPs may not be able to deregister a device if, for example, a customer leasing a device goes out of business before deregistering it themselves. - -**EXCEPTION**: If a customer grants an OEM permission to register devices on their behalf via the automated consent process, then an OEM can use the API to deregister devices they didn’t register themselves (instead, the customer registered the devices). But keep in mind that this would only remove those devices from the Autopilot program, it would not disenroll them from Intune or disjoin them from AAD. The customer must do those steps, if desired, through Intune. - -#### Deregister from Intune - -To deregister an Autopilot device from Intune, an IT Admin would: - -1. Sign in to their Intune account -2. Navigate to Intune > Groups > All groups -3. Remove the desired device from its group -4. Navigate to Intune > Devices > All devices -5. Select the checkbox next to the device you want to delete, then click the Delete button on the top menu -6. Navigate to Intune > Devices > Azure AD devices -7. Select the checkbox next to the device you want to delete, then click the Delete button along the top menu -8. Navigate to Intune > Device enrollment > Windows enrollment > Devices -9. Select the checkbox next to the device you want to deregister -10. Click the extended menu icon (“…”) on the far right end of the line containing the device you want to deregister in order to expose an additional menu with the option to “unassign user” -11. Click “Unassign user” if the device was previously assigned to a user; if not, this option will be grayed-out and can be ignored -12. With the unassigned device still selected, click the Delete button along the top menu to remove this device - -**NOTE**: These steps deregister the device from Autopilot, but also unenroll the device from Intune, and disjoin the device from AAD. While it may appear that only deregistering the device from Autopilot is needed, there are certain barriers in place within Intune that necessitate all the steps above be done, which is best practice anyway in case the device gets lost or becomes unrecoverable, to eliminate the possibility of orphaned devices existing in the Autopilot database, or Intune, or AAD. If a device gets into an unrecoverable state, you can contact the appropriate [Microsoft support alias](autopilot-support.md) for assistance. - -The deregistration process will take about 15 minutes. You can accelerate the process by clicking the “Sync” button, then “Refresh” the display until the device is no longer present. - -More details on deregistering devices from Intune can be found [here](https://docs.microsoft.com/intune/enrollment-autopilot#create-an-autopilot-device-group). - -#### Deregister from MPC - -To deregister an Autopilot device from the Microsoft Partner Center (MPC), a CSP would: - -1. Log into MPC -2. Navigate to Customer > Devices -3. Select the device to be deregistered and click the “Delete device” button - -![devices](images/devices.png) - -**NOTE**: Deregistering a device from Autopilot in MPC does only that; it does not also unenroll the device from the MDM (Intune), nor does it disjoin the device from AAD. Therefore, if possible, the OEM/CSP ideally should work with the customer IT Admin to have the device fully removed per the Intune steps in the previous section. - -Alternatively, an OEM partner that has integrated the OEM Direct APIs can deregister a device by calling the AutopilotDeviceRegistration API with the TenantID and TenantDomain fields left blank in the request call. - -Because the repair facility will not have access to the user’s login credentials, the repair facility will have to reimage the device as part of the repair process. This means that the customer should do three things before sending the device off for repair: -1. Copy all important data off the device. -2. Let the repair facility know which version of Windows they should reinstall after the repair. -3. If applicable, let the repair facility know which version of Office they should reinstall after the repair. - -### Replace the motherboard - -Technicians replace the motherboard (or other hardware) on the broken device. A replacement DPK is injected. - -Repair and key replacement processes vary between facilities. Sometimes repair facilities receive motherboard spare parts from OEMs that have replacement DPKs already injected, but sometimes not. Sometimes repair facilities receive fully-functional BIOS tools from OEMs, but sometimes not. This means that the quality of the data in the BIOS after a MBR varies. To ensure the repaired device will still be Autopilot-capable following its repair, the new (post-repair) BIOS should be able to successfully gather and populate the following information at a minimum: - -- DiskSerialNumber -- SmbiosSystemSerialNumber -- SmbiosSystemManufacturer -- SmbiosSystemProductName -- SmbiosUuid -- TPM EKPub -- MacAddress -- ProductKeyID -- OSType - -**NOTE**: For simplicity, and because processes vary between repair facilities, we have excluded many of the additional steps often used in a MBR, such as: -- Verify that the device is still functional -- Disable BitLocker* -- Repair the Boot Configuration Data (BCD) -- Repair and verify the network driver operation - -*BitLocker can be suspended rather than disbled if the technician has the ability to resume it after the repair. - -### Capture a new Autopilot device ID (4K HH) from the device - -Repair technicians must sign in to the repaired device to capture the new device ID. Assuming the repair technician does NOT have access to the customer’s login credentials, they will have to reimage the device in order to gain access, per the following steps: - -1. The repair technician creates a [WinPE bootable USB drive](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#create-a-bootable-windows-pe-winpe-partition). -2. The repair technician boots the device to WinPE. -3. The repair technician [applies a new Windows image to the device](https://docs.microsoft.com/windows-hardware/manufacture/desktop/work-with-windows-images). - - **NOTE**: Ideally, the same version of Windows should be reimaged onto the device that was originally on the device, so some coordination will be required between the repair facility and customer to capture this information at the time the device arrives for repair. This might include the customer sending the repair facility a customized image (.ppk file) via a USB stick, for example. - -4. The repair technician boots the device into the new Windows image. -5. Once on the desktop, the repair technician captures the new device ID (4K HH) off the device using either the OA3 Tool or the PowerShell script, as described below. - -Those repair facilities with access to the OA3 Tool (which is part of the ADK) can use the tool to capture the 4K Hardware Hash (4K HH). - -Alternatively, the [WindowsAutoPilotInfo Powershell script](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) can be used to capture the 4K HH by following these steps: - -1. Install the script from the [PowerShell Gallery](https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) or from the command line. -2. Navigate to the script directory and run it on the device when the device is either in Full OS or Audit Mode. See the following example. - - ```powershell - md c:\HWID - Set-Location c:\HWID - Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force - Install-Script -Name Get-WindowsAutopilotInfo -Force - $env:Path += ";C:\Program Files\WindowsPowerShell\Scripts" - Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv - ``` - ->If you are prompted to install the NuGet package, choose **Yes**. - -The script creates a .csv file that contains the device information, including the complete 4K HH. Save this file so that you can access it later. The service facility will use this 4K HH to reregister device as described below. - -**NOTE**: If the repair facility does not have the ability to run the OA3 tool or PowerShell script to capture the new 4K HH, then the CSP (or OEM) partners must do this for them. Without some entity capturing the new 4K HH, there is no way to reregister this device as an Autopilot device. - -### Reset the device - -Since the device was required to be in Full OS or Audit Mode to capture the 4K HH, the repair facility must reset the image back to a pre-OOBE state before returning it to the customer. One way this can be accomplished is by using the built-in reset feature in Windows, as follows: - -On the device, go to Settings > Update & Security > Recovery and click on Get started. Under Reset this PC, select Remove everything and Just remove my files. Finally, click on Reset. - -![reset](images/reset.png) - -However, it’s likely the repair facility won’t have access to Windows because they lack the user credentials to login, in which case they need to use other means to reimage the device, such as the [Deployment Image Servicing and Management tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/oem-deployment-of-windows-10-for-desktop-editions#use-a-deployment-script-to-apply-your-image). - -### Reregister the repaired device using the new device ID - -If an OEM is not able to reregister the device, then the repair facility or CSP should reregister the device using MPC, or the customer IT Admin should be advised to reregister the device via Intune (or MSfB). Both ways of reregistering a device are shown below. - -#### Reregister from Intune - -To reregister an Autopilot device from Intune, an IT Admin would: -1. Sign in to Intune. -2. Navigate to Device enrollment > Windows enrollment > Devices > Import. -3. Click the **Import** button to upload a csv file containing the device ID of the device to be reregistered (the device ID was the 4K HH captured by the PowerShell script or OA3 tool described previously in this document). - -The following video provides a good overview of how to (re)register devices via MSfB. - -> [!VIDEO https://www.youtube.com/watch?v=IpLIZU_j7Z0] - -#### Reregister from MPC - -To reregister an Autopilot device from MPC, an OEM or CSP would: - -1. Sign in to MPC. -2. Navigate to the Customer > Devices page and click the **Add devices** button to upload the csv file. - -![device](images/device2.png)
-![device](images/device2.png) - -In the case of reregistering a repaired device through MPC, the uploaded csv file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple were used, the Autopilot service would be unable to find a match in the Autopilot database, since no 4K HH info was ever previously submitted for this essentially “new” device, and the upload will fail, likely returning a ZtdDeviceNotFound error. So, again, only upload the 4K HH, not the Tuple or PKID. - -**NOTE**: When including the 4K HH in the csv file, you do NOT also need to include the PKID or Tuple. Those columns may be left blank, as shown below: - -![hash](images/hh.png) - -### Return the repaired device to the customer - -After completing the previous steps, the repaired device can now be returned to the customer, and will be auto-enrolled into the Autopilot program on first boot-up during OOBE. - -**NOTE**: If the repair facility did NOT reimage the device, they could be sending it back in a potentially broken state (e.g., there’s no way to log into the device because it’s been dissociated from the only known user account), in which case they should tell the organization that they need to fix the registration and OS themselves. - -**IMPORTANT**: A device can be “registered” for Autopilot prior to being powered-on, but the device isn’t actually “deployed” to Autopilot (i.e., enabled as an Autopilot device) until it goes through OOBE, which is why resetting the device back to a pre-OOBE state is a required step. - -## Specific repair scenarios - -This section covers the most common repair scenarios, and their impact on Autopilot enablement. - -NOTES ON TEST RESULTS: - -- Scenarios below were tested using Intune only (no other MDMs were tested). -- In most test scenarios below, the repaired and reregistered device needed to go through OOBE again for Autopilot to be enabled. -- Motherboard replacement scenarios often result in lost data, so repair centers or customers should be reminded to backup data (if possible) prior to repair. -- In the cases where a repair facility does not have the ability to write device info into the BIOS of the repaired device, new processes need to be created to successfully enable Autopilot. -- Repaired device should have the Product Key (DPK) preinjected in the BIOS before capturing the new 4K HH (device ID) - -See the following table:
-- Supported = **Yes**: the device can be reenabled for Autopilot -- Supported = **No**: the device cannot be reenabled for Autopilot - - -
ScenarioSupported*Microsoft Recommendation -
Motherboard Replacement (MBR) in generalYesThe recommended course of action for MBR scenarios is: - -1. Autopilot device is deregistered from the Autopilot program -2. The motherboard is replace -3. The device is reimaged (with BIOS info and DPK reinjected)* -4. A new Autopilot device ID (4K HH) is captured off the device -5. The repaired device is reregistered for the Autopilot program using the new device ID -6. The repaired device is reset to boot to OOBE -7. The repaired device is shipped back to the customer - -*It’s not necessary to reimage the device if the repair technician has access to the customer’s login credentials. It’s technically possible to do a successful MBR and Autopilot re-enablement without keys or certain BIOS info (e.g., serial #, model name, etc.), but doing so is only recommended for testing/educational purposes. - -
MBR when motherboard has a TPM chip (enabled) and only one onboard network card (that also gets replaced)Yes - -1. Deregister damaged device -2. Replace motherboard -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write device info into BIOS -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR when motherboard has a TPM chip (enabled) and a second network card (or network interface) that is not replaced along with the motherboardNoThis scenario is not recommended, as it breaks the Autopilot experience, because the resulting Device ID will not be stable until after TPM attestation has completed, and even then registration may give incorrect results because of ambiguity with MAC Address resolution. -
MBR where the NIC card, HDD, and WLAN all remain the same after the repairYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.)* -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -*Note that for this and subsequent scenarios, rewriting old device info would not include the TPM 2.0 endorsement key, as the associated private key is locked to the TPM device - -
MBR where the NIC card remains the same, but the HDD and WLAN are replacedYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Insert new HDD and WLAN -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where the NIC card and WLAN remains the same, but the HDD is replacedYes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Insert new HDD -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that had NOT been Autopilot-enabled before.Yes - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
MBR where only the MB is replaced (all other parts remain same) but new MB was taken from a previously used device that HAD been Autopilot-enabled before.Yes - -1. Deregister old device from which MB will be taken -2. Deregister damaged device (that you want to repair) -3. Replace motherboard in repair device with MB from other Autopilot device (with new RDPK preinjected in BIOS) -4. Reimage device (to gain access), unless have access to customers’ login credentials -5. Write old device info into BIOS (same s/n, model, etc.) -6. Capture new 4K HH -7. Reregister repaired device -8. Reset device back to OOBE -9. Go through Autopilot OOBE (customer) -10. Autopilot successfully enabled - -NOTE: The repaired device can also be used successfully as a normal, non-Autopilot device. - -
BIOS info excluded from MBR deviceNoRepair facility does not have BIOS tool to write device info into BIOS after MBR. - -1. Deregister damaged device -2. Replace motherboard (BIOS does NOT contain device info) -3. Reimage and write DPK into image -4. Capture new 4K HH -5. Reregister repaired device -6. Create Autopilot profile for device -7. Go through Autopilot OOBE (customer) -8. Autopilot FAILS to recognize repaired device - -
MBR when there is no TPM chipYesThough we do not recommend enabling an Autopilot devices without a TPM chip (which is recommended for BitLocker encryption), it is possible to enable an Autopilot devices in “standard user” mode (but NOT Self-deploying mode) that does not have a TPM chip. In this case, you would: - -1. Deregister damaged device -2. Replace motherboard -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write old device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reregister repaired device -7. Reset device back to OOBE -8. Go through Autopilot OOBE (customer) -9. Autopilot successfully enabled - -
New DPK written into image on repaired Autopilot device with a new MBYesRepair facility replaces normal MB on damaged device. MB does not contain any DPK in the BIOS. Repair facility writes DPK into image after MBR. - -1. Deregister damaged device -2. Replace motherboard – BIOS does NOT contain DPK info -3. Reimage device (to gain access), unless have access to customers’ login credentials -4. Write device info into BIOS (same s/n, model, etc.) -5. Capture new 4K HH -6. Reset or reimage device to pre-OOBE and write DPK into image -7. Reregister repaired device -8. Go through Autopilot OOBE -9. Autopilot successfully enabled - -
New Repair Product Key (RDPK)YesUsing a MB with a new RDPK preinjected results in a successful Autopilot refurbishment scenario. - -1. Deregister damaged device -2. Replace motherboard (with new RDPK preinjected in BIOS) -3. Reimage or rest image to pre-OOBE -4. Write device info into BIOS -5. Capture new 4K HH -6. Reregister repaired device -7. Reimage or reset image to pre-OOBE -8. Go through Autopilot OOBE -9. Autopilot successfully enabled - -
No Repair Product Key (RDPK) injectedNoThis scenario violates Microsoft policy and breaks the Windows Autopilot experience. -
Reimage damaged Autopilot device that was not deregistered prior to repairYes, but the device will still be associated with previous tenant ID, so should only be returned to same customer - -1. Reimage damaged device -2. Write DPK into image -3. Go through Autopilot OOBE -4. Autopilot successfully enabled (to previous tenant ID) - -
Disk replacement from a non-Autopilot device to an Autopilot deviceYes - -1. Do not deregister damaged device prior to repair -2. Replace HDD on damaged device -3. Reimage or reset image back to OOBE -4. Go through Autopilot OOBE (customer) -5. Autopilot successfully enabled (repaired device recognized as its previous self) - -
Disk replacement from one Autopilot device to another Autopilot deviceMaybeIf the device from which the HDD is taken was itself previously deregistered from Autopilot, then that HDD can be used in a repair device. But if the HDD was never previously deregistered from Autopilot before being used in a repaired device, the newly repaired device will not have the proper Autopilot experience. - -Assuming the used HDD was previously deregistered (before being used in this repair): - -1. Deregister damaged device -2. Replace HDD on damaged device using a HDD from another deregistered Autopilot device -3. Reimage or rest the repaired device back to a pre-OOBE state -4. Go through Autopilot OOBE (customer) -5. Autopilot successfully enabled - -
Third party network card replacement NoWhether from a non-Autopilot device to an Autopilot device, from one Autopilot device to another Autopilot device, or from an Autopilot device to a non-Autopilot device, any scenario where a 3rd party (not onboard) Network card is replaced will break the Autopilot experience, and is not recommended. -
A device repaired more than 3 timesNoAutopilot is not supported when a device is repeatedly repaired, so that whatever parts NOT replaced become associated with too many parts that have been replaced, which would make it difficult to uniquely identify that device in the future. -
Memory replacementYesReplacing the memory on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the memory. -
GPU replacementYesReplacing the GPU(s) on a damaged device does not negatively affect the Autopilot experience on that device. No de/reregistration is needed. The repair technician simply needs to replace the GPU. -
- ->When scavenging parts from another Autopilot device, we recommend unregistering the scavenged device from Autopilot, scavenging it, and then NEVER REGISTERING THE SCAVENGED DEVICE (AGAIN) FOR AUTOPILOT, because reusing parts this way may cause two active devices to end up with the same ID, with no possibility of distinguishing between the two. - -**NOTE**: The following parts may be replaced without compromising Autopilot enablement or requiring special additional repair steps: -- Memory (RAM or ROM) -- Power Supply -- Video Card -- Card Reader -- Sound card -- Expansion card -- Microphone -- Webcam -- Fan -- Heat sink -- CMOS battery - -Other repair scenarios not yet tested and verified include: -- Daughterboard replacement -- CPU replacement -- Wifi replacement -- Ethernet replacement - -## FAQ - -| Question | Answer | -| --- | --- | -| If we have a tool that programs product information into the BIOS after the MBR, do we still need to submit a CBR report for the device to be Autopilot-capable? | No. Not if the in-house tool writes the minimum necessary information into the BIOS that the Autopilot program looks for to identify the device, as described earlier in this document. | -| What if only some components are replaced rather than the full motherboard? | While it’s true that some limited repairs do not prevent the Autopilot algorithm from successfully matching the post-repair device with the pre-repair device, it is best to ensure 100% success by going through the MBR steps above even for devices that only needed limited repairs. | -| How does a repair technician gain access to a broken device if they don’t have the customer’s login credentials? | The technician will have to reimage the device and use their own credentials during the repair process. | - -## Related topics - -[Device guidelines](autopilot-device-guidelines.md)
From f57116a896daaa4bb9083cd0d9b8a38de9faac6e Mon Sep 17 00:00:00 2001 From: John Liu <49762389+ShenLanJohn@users.noreply.github.com> Date: Thu, 1 Aug 2019 22:05:35 -0700 Subject: [PATCH 8/8] new issues (#819) --- ...indows-10-1809-and-windows-server-2019.yml | 2 -- .../resolved-issues-windows-10-1903.yml | 2 ++ ...indows-10-1607-and-windows-server-2016.yml | 6 ++--- .../status-windows-10-1703.yml | 14 ++---------- .../status-windows-10-1709.yml | 14 ++---------- .../status-windows-10-1803.yml | 6 ++--- ...indows-10-1809-and-windows-server-2019.yml | 6 ++--- .../status-windows-10-1903.yml | 22 +++++++++---------- .../windows-message-center.yml | 2 +- 9 files changed, 23 insertions(+), 51 deletions(-) diff --git a/windows/release-information/resolved-issues-windows-10-1809-and-windows-server-2019.yml b/windows/release-information/resolved-issues-windows-10-1809-and-windows-server-2019.yml index c8dd852476..0d43d708e8 100644 --- a/windows/release-information/resolved-issues-windows-10-1809-and-windows-server-2019.yml +++ b/windows/release-information/resolved-issues-windows-10-1809-and-windows-server-2019.yml @@ -55,7 +55,6 @@ sections:
First character of the Japanese era name not recognized
The first character of the Japanese era name is not recognized as an abbreviation and may cause date parsing issues.

See details >		OS Build 17763.316

February 12, 2019
KB4487044		Resolved
KB4482887		March 01, 2019
10:00 AM PT
Applications using Microsoft Jet database and Access 95 file format stop working
Applications that use a Microsoft Jet database with the Microsoft Access 9 file format may randomly stop working.

See details >		OS Build 17763.316

February 12, 2019
KB4487044		Resolved
KB4482887		March 01, 2019
10:00 AM PT
Issues with lock screen and Microsoft Edge tabs for certain AMD Radeon video cards
Upgrade block: Devices utilizing AMD Radeon HD2000 or HD4000 series video cards may experience issues with the lock screen and Microsoft Edge tabs.

See details >		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4487044		February 12, 2019
10:00 AM PT
Trend Micro OfficeScan and Worry-Free Business Security AV software not compatible
Upgrade block: Microsoft and Trend Micro identified a compatibility issue with the Trend Micro business endpoint security solutions OfficeScan and Worry-Free Business Security.

See details >		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
February 01, 2019
09:00 AM PT
Shared albums may not sync with iCloud for Windows
Upgrade block: Apple has identified an incompatibility with iCloud for Windows (version 7.7.0.27) where users may experience issues updating or synching Shared Albums.

See details >		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4482887		March 01, 2019
10:00 AM PT
Intel Audio Display (intcdaud.sys) notification during Windows 10 Setup
Upgrade block: Users may see an Intel Audio Display (intcdaud.sys) notification during setup for devices with certain Intel Display Audio Drivers.

See details >		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4482887		March 01, 2019
10:00 AM PT
F5 VPN clients losing network connectivity
Upgrade block: After updating to Windows 10, version 1809, F5 VPN clients may lose network connectivity when the VPN service is in a split tunnel configuration.

See details >		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4482887		March 01, 2019
10:00 AM PT
- diff --git a/windows/release-information/resolved-issues-windows-10-1903.yml b/windows/release-information/resolved-issues-windows-10-1903.yml index ad580c30ce..4e7aae8a05 100644 --- a/windows/release-information/resolved-issues-windows-10-1903.yml +++ b/windows/release-information/resolved-issues-windows-10-1903.yml @@ -32,6 +32,7 @@ sections: - type: markdown text: "
DetailsOriginating updateStatusHistory
Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort
Upgrade block: Microsoft has identified issues with certain new Intel display drivers. Intel inadvertently released versions of its display driver (versions 24.20.100.6344, 24.20.100.6345) to OEMs that accidentally turned on unsupported features in Windows. 
 
As a result, after updating to Windows 10, version 1809, audio playback from a monitor or television connected to a PC via HDMI, USB-C, or a DisplayPort may not function correctly on devices with these drivers.
Note: This Intel display driver issue is different from the Intel Smart Sound Technology driver (version 09.21.00.3755) audio issue previously documented.

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019
  • Server: Windows Server, version 1809; Windows Server 2019 
Next steps: Intel has released updated drivers to OEM device manufacturers. OEMs need to make the updated driver available via Windows Update. For more information, see the Intel Customer Support article.

Resolution: Microsoft has removed the safeguard hold.



Back to top		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
Resolved:
May 21, 2019
07:42 AM PT

Opened:
November 13, 2018
10:00 AM PT
Issues with lock screen and Microsoft Edge tabs for certain AMD Radeon video cards
Note: AMD no longer supports Radeon HD2000 and HD4000 series graphic processor units (GPUs).
 
Upgrade block: After updating to Windows 10, version 1809, Microsoft Edge tabs may stop working when a device is configured with AMD Radeon HD2000 or HD4000 series video cards. Customers may get the following error code: \"INVALID_POINTER_READ_c0000005_atidxx64.dll\". 
 
Some users may also experience performance issues with the lock screen or the ShellExperienceHost. (The lock screen hosts widgets, and the ShellExperienceHost is responsible for assorted shell functionality.) 

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019
  • Server: Windows Server, version 1809; Windows Server 2019
Resolution: This issue was resolved in KB4487044, and the block was removed.

Back to top		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4487044		Resolved:
February 12, 2019
10:00 AM PT

Opened:
November 13, 2018
10:00 AM PT
Trend Micro OfficeScan and Worry-Free Business Security AV software not compatible
Upgrade block: Microsoft and Trend Micro have identified a compatibility issue with Trend Micro's OfficeScan and Worry-Free Business Security software when attempting to update to Windows 10, version 1809.

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019
  • Server: Windows Server, version 1809; Windows Server 2019 
Resolution: Trend Micro has released a new version of these products that resolves the issue. To download them, please visit the Trend Micro Business Support Portal.

Once you have updated your version of Trend Micro's OfficeScan or Worry-Free Business Security software, you will be offered Windows 10, version 1809 automatically. 

Back to top		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
Resolved:
February 01, 2019
09:00 AM PT

Opened:
November 13, 2018
10:00 AM PT
Shared albums may not sync with iCloud for Windows
Upgrade block: Users who attempt to install iCloud for Windows (version 7.7.0.27) will see a message displayed that this version iCloud for Windows isn't supported and the install will fail.

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019
  • Server: Windows Server, version 1809; Windows Server 2019
To ensure a seamless experience, Microsoft is blocking devices with iCloud for Windows (version 7.7.0.27) software installed from being offered Windows 10, version 1809 until this issue has been resolved. 

We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool from the Microsoft software download website until this issue is resolved. 
 
Resolution: Apple has released an updated version of iCloud for Windows (version 7.8.1) that resolves compatibility issues encountered when updating or synching Shared Albums after updating to Windows 10, version 1809. We recommend that you update your iCloud for Windows to version 7.8.1 when prompted before attempting to upgrade to Windows 10, version 1809. You can also manually download the latest version of iCloud for Windows by visiting https://support.apple.com/HT204283.

Back to top		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4482887		Resolved:
March 01, 2019
10:00 AM PT

Opened:
November 13, 2018
10:00 AM PT
Intel Audio Display (intcdaud.sys) notification during Windows 10 Setup
Upgrade block: Microsoft and Intel have identified a compatibility issue with a range of Intel Display Audio device drivers (intcdaud.sys, versions 10.25.0.3 - 10.25.0.8) that may result in excessive processor demand and reduced battery life. As a result, the update process to the Windows 10 October 2018 Update (Windows 10, version 1809) will fail and affected devices will automatically revert to the previous working configuration. 

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019
  • Server: Windows Server, version 1809; Windows Server 2019
If you see a \"What needs your attention\" notification during installation of the October 2018 Update, you have one of these affected drivers on your system. On the notification, click Back to remain on your current version of Windows 10. 
 
To ensure a seamless experience, we are blocking devices from being offered the October 2018 Update until updated Intel device drivers are installed on your current operating system. We recommend that you do not attempt to manually update to Windows 10, version 1809, using the Update Now button or the Media Creation Tool from the Microsoft Software Download Center until newer Intel device drivers are available with the update. You can either wait for newer drivers to be installed automatically through Windows Update or check with your computer manufacturer for the latest device driver software availability and installation procedures. For more information about this issue, see Intel's customer support guidance.
 
Resolution: This issue was resolved in KB4482887 and the upgrade block removed. 

Back to top		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4482887		Resolved:
March 01, 2019
10:00 AM PT

Opened:
November 13, 2018
10:00 AM PT
F5 VPN clients losing network connectivity
Upgrade block: After updating to Windows 10, version 1809, F5 VPN clients may lose network connectivity when the VPN service is in a split tunnel configuration.

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019
  • Server: Windows Server, version 1809; Windows Server 2019
Resolution: This issue was resolved in KB4482887 and the upgrade block removed. 

Back to top		OS Build 17763.134

November 13, 2018
KB4467708		Resolved
KB4482887		Resolved:
March 01, 2019
10:00 AM PT

Opened:
November 13, 2018
10:00 AM PT
+ @@ -66,6 +67,7 @@ sections: - type: markdown text: "
SummaryOriginating updateStatusDate resolved
Display brightness may not respond to adjustments
Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
KB4505903		July 26, 2019
02:00 PM PT
RASMAN service may stop working and result in the error “0xc0000005”
The Remote Access Connection Manager (RASMAN) service may stop working and result in the error “0xc0000005” with VPN profiles configured as an Always On VPN connection.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4505903		July 26, 2019
02:00 PM PT
Loss of functionality in Dynabook Smartphone Link app
After updating to Windows 10, version 1903, you may experience a loss of functionality when using the Dynabook Smartphone Link application.

See details >		OS Build 18362.116

May 20, 2019
KB4505057		Resolved
July 11, 2019
01:54 PM PT
Error attempting to update with external USB device or memory card attached
PCs with an external USB device or SD memory card attached may get error: \"This PC can't be upgraded to Windows 10.\"

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
July 11, 2019
01:53 PM PT
+ diff --git a/windows/release-information/status-windows-10-1607-and-windows-server-2016.yml b/windows/release-information/status-windows-10-1607-and-windows-server-2016.yml index f0ba7ea7a3..4bfa74c40c 100644 --- a/windows/release-information/status-windows-10-1607-and-windows-server-2016.yml +++ b/windows/release-information/status-windows-10-1607-and-windows-server-2016.yml @@ -60,13 +60,12 @@ sections: - type: markdown text: "
This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

DetailsOriginating updateStatusHistory
Display brightness may not respond to adjustments
Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers. After updating to Windows 10, version 1903, brightness settings may sometime appear as if changes applied took effect, yet the actual display brightness doesn't change.

To safeguard your update experience, we have applied a compatibility hold on devices with certain Intel drivers from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue was resolved in KB4505903 and the safeguard hold has been removed. Please ensure you have applied the resolving update before attempting to update to the Windows 10 May 2019 Update (version 1903). Please note, it can take up to 48 hours for the safeguard to be removed.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
KB4505903		Resolved:
July 26, 2019
02:00 PM PT

Opened:
May 21, 2019
07:56 AM PT
Loss of functionality in Dynabook Smartphone Link app
Some users may experience a loss of functionality after updating to Windows 10, version 1903 when using the Dynabook Smartphone Link application on Windows devices. Loss of functionality may affect the display of phone numbers in the Call menu and the ability to answer phone calls on the Windows PC.

To safeguard your update experience, we have applied a compatibility hold on devices with Dynabook Smartphone Link from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue is now resolved and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.116

May 20, 2019
KB4505057		Resolved
Resolved:
July 11, 2019
01:54 PM PT

Opened:
May 24, 2019
03:10 PM PT
Error attempting to update with external USB device or memory card attached
If you have an external USB device or SD memory card attached when installing Windows 10, version 1903, you may get an error message stating \"This PC can't be upgraded to Windows 10.\" This is caused by inappropriate drive reassignment during installation.

Sample scenario: An update to Windows 10, version 1903 is attempted on a computer that has a thumb drive inserted into its USB port. Before the update, the thumb drive is mounted in the system as drive G based on the existing drive configuration. After the feature update is installed; however, the device is reassigned a different drive letter (e.g., drive H).

Note The drive reassignment is not limited to removable drives. Internal hard drives may also be affected.

To safeguard your update experience, we have applied a hold on devices with an external USB device or SD memory card attached from being offered Windows 10, version 1903 until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue is now resolved and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
Resolved:
July 11, 2019
01:53 PM PT

Opened:
May 21, 2019
07:38 AM PT
Audio not working with Dolby Atmos headphones and home theater
After updating to Windows 10, version 1903, you may experience loss of audio with Dolby Atmos for home theater (free extension) or Dolby Atmos for headphones (paid extension) acquired through the Microsoft Store due to a licensing configuration error.
 
This occurs due to an issue with a Microsoft Store licensing component, where license holders are not able to connect to the Dolby Access app and enable Dolby Atmos extensions.
 
To safeguard your update experience, we have applied protective hold on devices from being offered Windows 10, version 1903 until this issue is resolved. This configuration error will not result in loss of access for the acquired license once the problem is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue is now resolved and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
Resolved:
July 11, 2019
01:53 PM PT

Opened:
May 21, 2019
07:16 AM PT
+ - - @@ -85,8 +84,8 @@ sections: - type: markdown text: "
SummaryOriginating updateStatusLast updated
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 14393.3115

July 16, 2019
KB4507459		Investigating
August 01, 2019
06:12 PM PT
Internet Explorer 11 and apps using the WebBrowser control may fail to render
JavaScript may fail to render as expected in Internet Explorer 11 and in apps using JavaScript or the WebBrowser control.

See details >		OS Build 14393.3085

July 09, 2019
KB4507460		Mitigated
July 26, 2019
04:58 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 14393.3115

July 16, 2019
KB4507459		Investigating
July 26, 2019
04:08 PM PT
SCVMM cannot enumerate and manage logical switches deployed on the host
For hosts managed by System Center Virtual Machine Manager (VMM), VMM cannot enumerate and manage logical switches deployed on the host.

See details >		OS Build 14393.2639

November 27, 2018
KB4467684		Resolved
KB4507459		July 16, 2019
10:00 AM PT
Some applications may fail to run as expected on clients of AD FS 2016
Some applications may fail to run as expected on clients of Active Directory Federation Services 2016 (AD FS 2016)

See details >		OS Build 14393.2941

April 25, 2019
KB4493473		Resolved
KB4507459		July 16, 2019
10:00 AM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) may fail to start with error \"0xc0000001.\"

See details >		OS Build 14393.3025

June 11, 2019
KB4503267		Mitigated
July 10, 2019
07:09 PM PT
Devices with Hyper-V enabled may receive BitLocker error 0xC0210000
Some devices with Hyper-V enabled may start into BitLocker recovery with error 0xC0210000.

See details >		OS Build 14393.2969

May 14, 2019
KB4494440		Resolved
KB4507460		July 09, 2019
10:00 AM PT
Difficulty connecting to some iSCSI-based SANs
Devices may have difficulty connecting to some Storage Area Network (SAN) devices that leverage iSCSI.

See details >		OS Build 14393.2999

May 23, 2019
KB4499177		Resolved
KB4509475		June 27, 2019
02:00 PM PT
Certain operations performed on a Cluster Shared Volume may fail
Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\".

See details >		OS Build 14393.2724

January 08, 2019
KB4480961		Mitigated
April 25, 2019
02:00 PM PT
Windows may not start on certain Lenovo and Fujitsu laptops with less than 8GB of RAM
Windows may fail to start on certain Lenovo and Fujitsu laptops that have less than 8 GB of RAM.

See details >		OS Build 14393.2608

November 13, 2018
KB4467691		Mitigated
February 19, 2019
10:00 AM PT
Cluster service may fail if the minimum password length is set to greater than 14
The cluster service may fail to start with the error “2245 (NERR_PasswordTooShort)” if the Group Policy “Minimum Password Length” is configured with greater than 14 characters.

See details >		OS Build 14393.2639

November 27, 2018
KB4467684		Mitigated
April 25, 2019
02:00 PM PT
+ -
DetailsOriginating updateStatusHistory
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507459. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507459. We are working on a resolution and estimate a solution will be available in mid-August.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Back to top		OS Build 14393.3115

July 16, 2019
KB4507459		Investigating
Last updated:
August 01, 2019
06:12 PM PT

Opened:
July 25, 2019
06:10 PM PT
Internet Explorer 11 and apps using the WebBrowser control may fail to render
Internet Explorer 11 may fail to render some JavaScript after installing KB4507460. You may also have issues with apps using JavaScript or the WebBrowser control, such as the present PowerPoint feature of Skype Meeting Broadcast.

Affected platforms:
  • Client: Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server 2016
Workaround: To mitigate this issue, you need to Enable Script Debugging using one of the following ways.

You can configure the below registry key:
Registry setting: HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Internet Explorer\\Main
Value: Disable Script Debugger
Type: REG_SZ
Data: no

Or you can Enable Script Debugging in Internet Settings. You can open Internet Setting by either typing Internet Settings into the search box on Windows or by selecting Internet Options in Internet Explorer. Once open, select Advanced then Browsing and finally, select Enable Script Debugging.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 14393.3085

July 09, 2019
KB4507460		Mitigated
Last updated:
July 26, 2019
04:58 PM PT

Opened:
July 26, 2019
04:58 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507459. Devices that are domain controllers or domain members are both affected.

If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507459. We are working on a resolution and estimate a solution will be available in mid-August.

Back to top		OS Build 14393.3115

July 16, 2019
KB4507459		Investigating
Last updated:
July 26, 2019
04:08 PM PT

Opened:
July 25, 2019
06:10 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error \"Status: 0xc0000001, Info: A required device isn't connected or can't be accessed\" after installing KB4503267 on a WDS server.

Affected platforms:
  • Server: Windows Server 2008 SP2; Windows Server 2008 R2 SP1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server, version 1803; Windows Server 2019; Windows Server, version 1809; Windows Server, version 1903
Workaround:
To mitigate this issue on an SCCM server:
  1. Verify Variable Window Extension is enabled.
  2. Set the values of TFTP block size to 4096 and TFTP window size to 1. For guidance on how to configure them, see Customize the RamDisk TFTP block and window sizes on PXE-enabled distribution points.
Note Try the default values for TFTP block size and TFTP window size first but depending on your environment and overall settings, you may need to adjust them for your setup. You can also try the Enable a PXE responder without Windows Deployment Service setting. For more information on this setting, see Install and configure distribution points in Configuration Manager.

To mitigate this issue on a WDS server without SCCM:
  1. In WDS TFTP settings, verify Variable Window Extension is enabled.
  2. In the Boot Configuration Data (BCD) of the imported image, set RamDiskTFTPBlockSize to 1456.
  3. In the BCD of the imported image, set RamDiskTFTPWindowSize to 4.
Note Try the default values for RamDiskTFTPBlockSize and RamDiskTFTPWindowSize first but depending on your environment and overall settings, you may need to adjust them for your setup.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 14393.3025

June 11, 2019
KB4503267		Mitigated
Last updated:
July 10, 2019
07:09 PM PT

Opened:
July 10, 2019
02:51 PM PT
" @@ -97,7 +96,6 @@ sections: text: " -
DetailsOriginating updateStatusHistory
Some applications may fail to run as expected on clients of AD FS 2016
Some applications may fail to run as expected on clients of Active Directory Federation Services 2016 (AD FS 2016) after installation of KB4493473 on the server. Applications that may exhibit this behavior use an IFRAME during non-interactive authentication requests and receive X-Frame Options set to DENY.

Affected platforms:
  • Server: Windows Server 2016
Resolution: This issue was resolved in KB4507459.

Back to top		OS Build 14393.2941

April 25, 2019
KB4493473		Resolved
KB4507459		Resolved:
July 16, 2019
10:00 AM PT

Opened:
June 04, 2019
05:55 PM PT
Difficulty connecting to some iSCSI-based SANs
Devices may have issues connecting to some Storage Area Network (SAN) devices using Internet Small Computer System Interface (iSCSI) after installing KB4499177. You may also receive an error in the System log section of Event Viewer with Event ID 43 from iScsiPrt and a description of “Target failed to respond in time for a login request.”

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016
  • Server: Windows Server 2019; Windows Server 2016
Resolution: This issue was resolved in KB4509475.

Back to top		OS Build 14393.2999

May 23, 2019
KB4499177		Resolved
KB4509475		Resolved:
June 27, 2019
02:00 PM PT

Opened:
June 20, 2019
04:46 PM PT
" diff --git a/windows/release-information/status-windows-10-1703.yml b/windows/release-information/status-windows-10-1703.yml index b682373dce..4dbe8ada26 100644 --- a/windows/release-information/status-windows-10-1703.yml +++ b/windows/release-information/status-windows-10-1703.yml @@ -60,9 +60,8 @@ sections: - type: markdown text: "
This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

- + -
SummaryOriginating updateStatusLast updated
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 15063.1955

July 16, 2019
KB4507467		Investigating
July 26, 2019
04:08 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 15063.1955

July 16, 2019
KB4507467		Investigating
August 01, 2019
06:12 PM PT
Devices with Hyper-V enabled may receive BitLocker error 0xC0210000
Some devices with Hyper-V enabled may start into BitLocker recovery with error 0xC0210000.

See details >		OS Build 15063.1805

May 14, 2019
KB4499181		Resolved
KB4507450		July 09, 2019
10:00 AM PT
Difficulty connecting to some iSCSI-based SANs
Devices may have difficulty connecting to some Storage Area Network (SAN) devices that leverage iSCSI.

See details >		OS Build 15063.1839

May 28, 2019
KB4499162		Resolved
KB4509476		June 26, 2019
04:00 PM PT
Certain operations performed on a Cluster Shared Volume may fail
Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\".

See details >		OS Build 15063.1563

January 08, 2019
KB4480973		Mitigated
April 25, 2019
02:00 PM PT
" @@ -79,16 +78,7 @@ sections: - type: markdown text: " - -
DetailsOriginating updateStatusHistory
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507467. Devices that are domain controllers or domain members are both affected.

If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507467. We are working on a resolution and estimate a solution will be available in mid-August.

Back to top		OS Build 15063.1955

July 16, 2019
KB4507467		Investigating
Last updated:
July 26, 2019
04:08 PM PT

Opened:
July 25, 2019
06:10 PM PT
- " - -- title: June 2019 -- items: - - type: markdown - text: " - - +
DetailsOriginating updateStatusHistory
Difficulty connecting to some iSCSI-based SANs
Devices may have issues connecting to some Storage Area Network (SAN) devices using Internet Small Computer System Interface (iSCSI) after installing KB4499162. You may also receive an error in the System log section of Event Viewer with Event ID 43 from iScsiPrt and a description of “Target failed to respond in time for a login request.”

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016
  • Server: Windows Server 2019; Windows Server 2016
Resolution: This issue was resolved in KB4509476.

Back to top		OS Build 15063.1839

May 28, 2019
KB4499162		Resolved
KB4509476		Resolved:
June 26, 2019
04:00 PM PT

Opened:
June 20, 2019
04:46 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507467. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507467. We are working on a resolution and estimate a solution will be available in mid-August.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Back to top		OS Build 15063.1955

July 16, 2019
KB4507467		Investigating
Last updated:
August 01, 2019
06:12 PM PT

Opened:
July 25, 2019
06:10 PM PT
" diff --git a/windows/release-information/status-windows-10-1709.yml b/windows/release-information/status-windows-10-1709.yml index fcd770b784..cee8270547 100644 --- a/windows/release-information/status-windows-10-1709.yml +++ b/windows/release-information/status-windows-10-1709.yml @@ -60,9 +60,8 @@ sections: - type: markdown text: "
This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

- + -
SummaryOriginating updateStatusLast updated
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 16299.1296

July 16, 2019
KB4507465		Investigating
July 26, 2019
04:08 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 16299.1296

July 16, 2019
KB4507465		Investigating
August 01, 2019
06:12 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) may fail to start with error \"0xc0000001.\"

See details >		OS Build 16299.1217

June 11, 2019
KB4503284		Mitigated
July 10, 2019
07:09 PM PT
Difficulty connecting to some iSCSI-based SANs
Devices may have difficulty connecting to some Storage Area Network (SAN) devices that leverage iSCSI.

See details >		OS Build 16299.1182

May 28, 2019
KB4499147		Resolved
KB4509477		June 26, 2019
04:00 PM PT
Certain operations performed on a Cluster Shared Volume may fail
Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\".

See details >		OS Build 16299.904

January 08, 2019
KB4480978		Mitigated
April 25, 2019
02:00 PM PT
" @@ -79,20 +78,11 @@ sections: - type: markdown text: " - +
DetailsOriginating updateStatusHistory
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507465. Devices that are domain controllers or domain members are both affected.

If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507465. We are working on a resolution and estimate a solution will be available in mid-August.

Back to top		OS Build 16299.1296

July 16, 2019
KB4507465		Investigating
Last updated:
July 26, 2019
04:08 PM PT

Opened:
July 25, 2019
06:10 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507465. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507465. We are working on a resolution and estimate a solution will be available in mid-August.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Back to top		OS Build 16299.1296

July 16, 2019
KB4507465		Investigating
Last updated:
August 01, 2019
06:12 PM PT

Opened:
July 25, 2019
06:10 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error \"Status: 0xc0000001, Info: A required device isn't connected or can't be accessed\" after installing KB4503284 on a WDS server.

Affected platforms:
  • Server: Windows Server 2008 SP2; Windows Server 2008 R2 SP1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server, version 1803; Windows Server 2019; Windows Server, version 1809; Windows Server, version 1903
Workaround:
To mitigate this issue on an SCCM server:
  1. Verify Variable Window Extension is enabled.
  2. Set the values of TFTP block size to 4096 and TFTP window size to 1. For guidance on how to configure them, see Customize the RamDisk TFTP block and window sizes on PXE-enabled distribution points.
Note Try the default values for TFTP block size and TFTP window size first but depending on your environment and overall settings, you may need to adjust them for your setup. You can also try the Enable a PXE responder without Windows Deployment Service setting. For more information on this setting, see Install and configure distribution points in Configuration Manager.

To mitigate this issue on a WDS server without SCCM:
  1. In WDS TFTP settings, verify Variable Window Extension is enabled.
  2. In the Boot Configuration Data (BCD) of the imported image, set RamDiskTFTPBlockSize to 1456.
  3. In the BCD of the imported image, set RamDiskTFTPWindowSize to 4.
Note Try the default values for RamDiskTFTPBlockSize and RamDiskTFTPWindowSize first but depending on your environment and overall settings, you may need to adjust them for your setup.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 16299.1217

June 11, 2019
KB4503284		Mitigated
Last updated:
July 10, 2019
07:09 PM PT

Opened:
July 10, 2019
02:51 PM PT
" -- title: June 2019 -- items: - - type: markdown - text: " - - -
DetailsOriginating updateStatusHistory
Difficulty connecting to some iSCSI-based SANs
Devices may have issues connecting to some Storage Area Network (SAN) devices using Internet Small Computer System Interface (iSCSI) after installing KB4499147. You may also receive an error in the System log section of Event Viewer with Event ID 43 from iScsiPrt and a description of “Target failed to respond in time for a login request.”

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016
  • Server: Windows Server 2019; Windows Server 2016
Resolution: This issue was resolved in KB4509477.

Back to top		OS Build 16299.1182

May 28, 2019
KB4499147		Resolved
KB4509477		Resolved:
June 26, 2019
04:00 PM PT

Opened:
June 20, 2019
04:46 PM PT
- " - - title: January 2019 - items: - type: markdown diff --git a/windows/release-information/status-windows-10-1803.yml b/windows/release-information/status-windows-10-1803.yml index d829da6310..fccb71eca1 100644 --- a/windows/release-information/status-windows-10-1803.yml +++ b/windows/release-information/status-windows-10-1803.yml @@ -60,9 +60,8 @@ sections: - type: markdown text: "
This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

- + -
SummaryOriginating updateStatusLast updated
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 17134.915

July 16, 2019
KB4507466		Investigating
July 26, 2019
04:08 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 17134.915

July 16, 2019
KB4507466		Investigating
August 01, 2019
06:12 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) may fail to start with error \"0xc0000001.\"

See details >		OS Build 17134.829

June 11, 2019
KB4503286		Mitigated
July 10, 2019
07:09 PM PT
Difficulty connecting to some iSCSI-based SANs
Devices may have difficulty connecting to some Storage Area Network (SAN) devices that leverage iSCSI.

See details >		OS Build 17134.799

May 21, 2019
KB4499183		Resolved
KB4509478		June 26, 2019
04:00 PM PT
Startup to a black screen after installing updates
Your device may startup to a black screen during the first logon after installing updates.

See details >		OS Build 17134.829

June 11, 2019
KB4503286		Mitigated
June 14, 2019
04:41 PM PT
Certain operations performed on a Cluster Shared Volume may fail
Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\".

See details >		OS Build 17134.523

January 08, 2019
KB4480966		Mitigated
April 25, 2019
02:00 PM PT
@@ -80,7 +79,7 @@ sections: - type: markdown text: " - +
DetailsOriginating updateStatusHistory
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507466. Devices that are domain controllers or domain members are both affected.

If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507466. We are working on a resolution and estimate a solution will be available in mid-August.

Back to top		OS Build 17134.915

July 16, 2019
KB4507466		Investigating
Last updated:
July 26, 2019
04:08 PM PT

Opened:
July 25, 2019
06:10 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4507466. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4507466. We are working on a resolution and estimate a solution will be available in mid-August.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Back to top		OS Build 17134.915

July 16, 2019
KB4507466		Investigating
Last updated:
August 01, 2019
06:12 PM PT

Opened:
July 25, 2019
06:10 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error \"Status: 0xc0000001, Info: A required device isn't connected or can't be accessed\" after installing KB4503286 on a WDS server.

Affected platforms:
  • Server: Windows Server 2008 SP2; Windows Server 2008 R2 SP1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server, version 1803; Windows Server 2019; Windows Server, version 1809; Windows Server, version 1903
Workaround:
To mitigate this issue on an SCCM server:
  1. Verify Variable Window Extension is enabled.
  2. Set the values of TFTP block size to 4096 and TFTP window size to 1. For guidance on how to configure them, see Customize the RamDisk TFTP block and window sizes on PXE-enabled distribution points.
Note Try the default values for TFTP block size and TFTP window size first but depending on your environment and overall settings, you may need to adjust them for your setup. You can also try the Enable a PXE responder without Windows Deployment Service setting. For more information on this setting, see Install and configure distribution points in Configuration Manager.

To mitigate this issue on a WDS server without SCCM:
  1. In WDS TFTP settings, verify Variable Window Extension is enabled.
  2. In the Boot Configuration Data (BCD) of the imported image, set RamDiskTFTPBlockSize to 1456.
  3. In the BCD of the imported image, set RamDiskTFTPWindowSize to 4.
Note Try the default values for RamDiskTFTPBlockSize and RamDiskTFTPWindowSize first but depending on your environment and overall settings, you may need to adjust them for your setup.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 17134.829

June 11, 2019
KB4503286		Mitigated
Last updated:
July 10, 2019
07:09 PM PT

Opened:
July 10, 2019
02:51 PM PT
" @@ -90,7 +89,6 @@ sections: - type: markdown text: " -
DetailsOriginating updateStatusHistory
Difficulty connecting to some iSCSI-based SANs
Devices may have issues connecting to some Storage Area Network (SAN) devices using Internet Small Computer System Interface (iSCSI) after installing KB4499183. You may also receive an error in the System log section of Event Viewer with Event ID 43 from iScsiPrt and a description of “Target failed to respond in time for a login request.”

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016
  • Server: Windows Server 2019; Windows Server 2016
Resolution: This issue was resolved in KB4509478.

Back to top		OS Build 17134.799

May 21, 2019
KB4499183		Resolved
KB4509478		Resolved:
June 26, 2019
04:00 PM PT

Opened:
June 20, 2019
04:46 PM PT
Startup to a black screen after installing updates
We are investigating reports that a small number of devices may startup to a black screen during the first logon after installing updates.


Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803
  • Server: Windows Server 2019
Workaround: To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 17134.829

June 11, 2019
KB4503286		Mitigated
Last updated:
June 14, 2019
04:41 PM PT

Opened:
June 14, 2019
04:41 PM PT
" diff --git a/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml b/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml index 65bd34e1b5..de3ecd7333 100644 --- a/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml +++ b/windows/release-information/status-windows-10-1809-and-windows-server-2019.yml @@ -64,9 +64,8 @@ sections: - type: markdown text: "
This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

- + - @@ -85,7 +84,7 @@ sections: - type: markdown text: "
SummaryOriginating updateStatusLast updated
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 17763.652

July 22, 2019
KB4505658		Investigating
July 26, 2019
04:08 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 17763.652

July 22, 2019
KB4505658		Investigating
August 01, 2019
06:12 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) may fail to start with error \"0xc0000001.\"

See details >		OS Build 17763.557

June 11, 2019
KB4503327		Mitigated
July 10, 2019
07:09 PM PT
Difficulty connecting to some iSCSI-based SANs
Devices may have difficulty connecting to some Storage Area Network (SAN) devices that leverage iSCSI.

See details >		OS Build 17763.529

May 21, 2019
KB4497934		Resolved
KB4509479		June 26, 2019
04:00 PM PT
Startup to a black screen after installing updates
Your device may startup to a black screen during the first logon after installing updates.

See details >		OS Build 17763.557

June 11, 2019
KB4503327		Mitigated
June 14, 2019
04:41 PM PT
Devices with some Asian language packs installed may receive an error
After installing the KB4493509 devices with some Asian language packs installed may receive the error, \"0x800f0982 - PSFX_E_MATCHING_COMPONENT_NOT_F

See details >		OS Build 17763.437

April 09, 2019
KB4493509		Mitigated
May 03, 2019
10:59 AM PT
Certain operations performed on a Cluster Shared Volume may fail
Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\".

See details >		OS Build 17763.253

January 08, 2019
KB4480116		Mitigated
April 09, 2019
10:00 AM PT
- +
DetailsOriginating updateStatusHistory
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4505658. Devices that are domain controllers or domain members are both affected.

If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4505658. We are working on a resolution and estimate a solution will be available in mid-August.

Back to top		OS Build 17763.652

July 22, 2019
KB4505658		Investigating
Last updated:
July 26, 2019
04:08 PM PT

Opened:
July 25, 2019
06:10 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4505658. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4505658. We are working on a resolution and estimate a solution will be available in mid-August.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Back to top		OS Build 17763.652

July 22, 2019
KB4505658		Investigating
Last updated:
August 01, 2019
06:12 PM PT

Opened:
July 25, 2019
06:10 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error \"Status: 0xc0000001, Info: A required device isn't connected or can't be accessed\" after installing KB4503327 on a WDS server.

Affected platforms:
  • Server: Windows Server 2008 SP2; Windows Server 2008 R2 SP1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server, version 1803; Windows Server 2019; Windows Server, version 1809; Windows Server, version 1903
Workaround:
To mitigate this issue on an SCCM server:
  1. Verify Variable Window Extension is enabled.
  2. Set the values of TFTP block size to 4096 and TFTP window size to 1. For guidance on how to configure them, see Customize the RamDisk TFTP block and window sizes on PXE-enabled distribution points.
Note Try the default values for TFTP block size and TFTP window size first but depending on your environment and overall settings, you may need to adjust them for your setup. You can also try the Enable a PXE responder without Windows Deployment Service setting. For more information on this setting, see Install and configure distribution points in Configuration Manager.

To mitigate this issue on a WDS server without SCCM:
  1. In WDS TFTP settings, verify Variable Window Extension is enabled.
  2. In the Boot Configuration Data (BCD) of the imported image, set RamDiskTFTPBlockSize to 1456.
  3. In the BCD of the imported image, set RamDiskTFTPWindowSize to 4.
Note Try the default values for RamDiskTFTPBlockSize and RamDiskTFTPWindowSize first but depending on your environment and overall settings, you may need to adjust them for your setup.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 17763.557

June 11, 2019
KB4503327		Mitigated
Last updated:
July 10, 2019
07:09 PM PT

Opened:
July 10, 2019
02:51 PM PT
" @@ -95,7 +94,6 @@ sections: - type: markdown text: " -
DetailsOriginating updateStatusHistory
Difficulty connecting to some iSCSI-based SANs
Devices may have issues connecting to some Storage Area Network (SAN) devices using Internet Small Computer System Interface (iSCSI) after installing KB4497934. You may also receive an error in the System log section of Event Viewer with Event ID 43 from iScsiPrt and a description of “Target failed to respond in time for a login request.”

Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016
  • Server: Windows Server 2019; Windows Server 2016
Resolution: This issue was resolved in KB4509479.

Back to top		OS Build 17763.529

May 21, 2019
KB4497934		Resolved
KB4509479		Resolved:
June 26, 2019
04:00 PM PT

Opened:
June 20, 2019
04:46 PM PT
Startup to a black screen after installing updates
We are investigating reports that a small number of devices may startup to a black screen during the first logon after installing updates.


Affected platforms:
  • Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803
  • Server: Windows Server 2019
Workaround: To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 17763.557

June 11, 2019
KB4503327		Mitigated
Last updated:
June 14, 2019
04:41 PM PT

Opened:
June 14, 2019
04:41 PM PT
" diff --git a/windows/release-information/status-windows-10-1903.yml b/windows/release-information/status-windows-10-1903.yml index bfe5a1a1d9..b2ca8f3142 100644 --- a/windows/release-information/status-windows-10-1903.yml +++ b/windows/release-information/status-windows-10-1903.yml @@ -65,23 +65,22 @@ sections: - type: markdown text: "
This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

+ + + + + - - - - - -
SummaryOriginating updateStatusLast updated
Intermittent loss of Wi-Fi connectivity
Some older devices may experience loss of Wi-Fi connectivity due to an outdated Qualcomm driver.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated External
August 01, 2019
08:44 PM PT
Gamma ramps, color profiles, and night light settings do not apply in some cases
Microsoft has identified some scenarios where gamma ramps, color profiles and night light settings may stop working.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
August 01, 2019
06:27 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
August 01, 2019
06:12 PM PT
Issues updating when certain versions of Intel storage drivers are installed
Certain versions of Intel Rapid Storage Technology (Intel RST) drivers may cause updating to Windows 10, version 1903 to fail.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Mitigated External
August 01, 2019
05:58 PM PT
Display brightness may not respond to adjustments
Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
KB4505903		July 26, 2019
02:00 PM PT
RASMAN service may stop working and result in the error “0xc0000005”
The Remote Access Connection Manager (RASMAN) service may stop working and result in the error “0xc0000005” with VPN profiles configured as an Always On VPN connection.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4505903		July 26, 2019
02:00 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after updating.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
July 26, 2019
04:08 PM PT
Issues updating when certain versions of Intel storage drivers are installed
Certain versions of Intel Rapid Storage Technology (Intel RST) drivers may cause updating to Windows 10, version 1903 to fail.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Mitigated External
July 25, 2019
06:10 PM PT
The dGPU may occasionally disappear from device manager on Surface Book 2 with dGPU
Some apps or games that needs to perform graphics intensive operations may close or fail to open on Surface Book 2 devices with Nvidia dGPU.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
July 16, 2019
09:04 AM PT
Initiating a Remote Desktop connection may result in black screen
When initiating a Remote Desktop connection to devices with some older GPU drivers, you may receive a black screen.

See details >		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
July 12, 2019
04:42 PM PT
Loss of functionality in Dynabook Smartphone Link app
After updating to Windows 10, version 1903, you may experience a loss of functionality when using the Dynabook Smartphone Link application.

See details >		OS Build 18362.116

May 20, 2019
KB4505057		Resolved
July 11, 2019
01:54 PM PT
Error attempting to update with external USB device or memory card attached
PCs with an external USB device or SD memory card attached may get error: \"This PC can't be upgraded to Windows 10.\"

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
July 11, 2019
01:53 PM PT
Audio not working with Dolby Atmos headphones and home theater
Users may experience audio loss with Dolby Atmos headphones or Dolby Atmos home theater.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
July 11, 2019
01:53 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) may fail to start with error \"0xc0000001.\"

See details >		OS Build 18362.175

June 11, 2019
KB4503293		Mitigated
July 10, 2019
07:09 PM PT
Event Viewer may close or you may receive an error when using Custom Views
When trying to expand, view or create Custom Views in Event Viewer, you may receive an error and the app may stop responding or close.

See details >		OS Build 18362.175

June 11, 2019
KB4503293		Resolved
KB4501375		June 27, 2019
10:00 AM PT
Windows Sandbox may fail to start with error code “0x80070002”
Windows Sandbox may fail to start with \"ERROR_FILE_NOT_FOUND (0x80070002)\" on devices in which the operating system language was changed between updates

See details >		OS Build 18362.116

May 20, 2019
KB4505057		Investigating
June 10, 2019
06:06 PM PT
Gamma ramps, color profiles, and night light settings do not apply in some cases
Microsoft has identified some scenarios where gamma ramps, color profiles and night light settings may stop working.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
May 24, 2019
11:02 AM PT
Unable to discover or connect to Bluetooth devices
Microsoft has identified compatibility issues with some versions of Realtek and Qualcomm Bluetooth radio drivers.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
May 21, 2019
04:48 PM PT
Display brightness may not respond to adjustments
Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Investigating
May 21, 2019
04:47 PM PT
Intel Audio displays an intcdaud.sys notification
Microsoft and Intel have identified an issue with a range of Intel Display Audio device drivers that may result in battery drain.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
May 21, 2019
04:47 PM PT
Cannot launch Camera app
Microsoft and Intel have identified an issue affecting Intel RealSense SR300 or Intel RealSense S200 camera apps.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
May 21, 2019
04:47 PM PT
Intermittent loss of Wi-Fi connectivity
Some older devices may experience loss of Wi-Fi connectivity due to an outdated Qualcomm driver.

See details >		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
May 21, 2019
04:46 PM PT
" @@ -97,8 +96,8 @@ sections: - type: markdown text: " - - + + @@ -111,7 +110,6 @@ sections: text: "
DetailsOriginating updateStatusHistory
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4497935. Devices that are domain controllers or domain members are both affected.

If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4497935. We are working on a resolution and estimate a solution will be available in mid-August.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
Last updated:
July 26, 2019
04:08 PM PT

Opened:
July 25, 2019
06:10 PM PT
Issues updating when certain versions of Intel storage drivers are installed
Intel and Microsoft have found incompatibility issues with certain versions of the Intel Rapid Storage Technology (Intel RST) drivers and the Windows 10 May 2019 Update (Windows 10, version 1903).  

To safeguard your update experience, we have applied a compatibility hold on devices with Intel RST driver version between 15.1.0.1002 and 15.5.2.1053 installed from being offered Windows 10, version 1903 or Windows Server, version 1903 until the driver has been updated.

Versions 15.5.2.1054 or later are compatible, and a device that has these drivers installed can install the Windows 10 May 2019 Update. For affected devices, the recommended version is 15.9.6.1044.

Affected platforms:
  • Client: Windows 10, version 1903
  • Server: Windows Server, version 1903
Next steps: To resolve this issue, you will need to update the Intel RST drivers for your device to version 15.5.2.1054 or a later.  Check with your device manufacturer (OEM) to see if an updated driver is available and install it. You can also download the latest Intel RST drivers directly from Intel at Intel® Rapid Storage Technology (Intel® RST) User Interface and Driver. Once your drivers are updated, you can restart the installation process for the May 2019 Update.

Note Until an updated driver has been installed, we recommend you do not attempt to manually update using the Update now button or the Media Creation Tool. 

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Mitigated External
Last updated:
July 25, 2019
06:10 PM PT

Opened:
July 25, 2019
06:10 PM PT
Domain connected devices that use MIT Kerberos realms will not start up
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of KB4497935. Devices that are domain controllers or domain members are both affected.

To safeguard your update experience, we have applied a compatibility hold on devices configured to use MIT Kerberos realm from being offered Windows 10, version 1903 or Windows Server, version 1903.

Note If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607
  • Server: Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709 ; Windows Server 2016
Next steps: At this time, we suggest that devices in an affected environment do not install KB4497935. We are working on a resolution and estimate a solution will be available in mid-August.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
Last updated:
August 01, 2019
06:12 PM PT

Opened:
July 25, 2019
06:10 PM PT
Issues updating when certain versions of Intel storage drivers are installed
Intel and Microsoft have found incompatibility issues with certain versions of the Intel Rapid Storage Technology (Intel RST) drivers and the Windows 10 May 2019 Update (Windows 10, version 1903).  

To safeguard your update experience, we have applied a compatibility hold on devices with Intel RST drivers, versions 15.1.0.1002 through version 15.5.2.1053 installed from installing Windows 10, version 1903 or Windows Server, version 1903, until the driver has been updated.

Versions 15.5.2.1054 or later are compatible, and a device that has these drivers installed can install the Windows 10 May 2019 Update. For affected devices, the recommended version is 15.9.6.1044.

Affected platforms:
  • Client: Windows 10, version 1903
  • Server: Windows Server, version 1903
Next steps: To resolve this issue, you will need to update the Intel RST drivers for your device to version 15.5.2.1054 or a later.  Check with your device manufacturer (OEM) to see if an updated driver is available and install it. You can also download the latest Intel RST drivers directly from Intel at Intel® Rapid Storage Technology (Intel® RST) User Interface and Driver. Once your drivers are updated, you can restart the installation process for the May 2019 Update. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Note Until an updated driver has been installed, we recommend you do not attempt to manually update using the Update now button or the Media Creation Tool. 

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Mitigated External
Last updated:
August 01, 2019
05:58 PM PT

Opened:
July 25, 2019
06:10 PM PT
The dGPU may occasionally disappear from device manager on Surface Book 2 with dGPU
Microsoft has identified a compatibility issue on some Surface Book 2 devices configured with Nvidia discrete graphics processing unit (dGPU). After updating to Windows 10, version 1903 (May 2019 Feature Update), some apps or games that needs to perform graphics intensive operations may close or fail to open.

To safeguard your update experience, we have applied a compatibility hold on Surface Book 2 devices with Nvidia dGPUs from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Workaround: To mitigate the issue if you are already on Windows 10, version 1903, you can restart the device or select the Scan for hardware changes button in the Action menu or on the toolbar in Device Manager.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
Last updated:
July 16, 2019
09:04 AM PT

Opened:
July 12, 2019
04:20 PM PT
Initiating a Remote Desktop connection may result in black screen
When initiating a Remote Desktop connection to devices with some older GPU drivers, you may receive a black screen. Any version of Windows may encounter this issue when initiating a Remote Desktop connection to a Windows 10, version 1903 device which is running an affected display driver, including the drivers for the Intel 4 series chipset integrated GPU (iGPU).

Affected platforms:
  • Client: Windows 10, version 1903
  • Server: Windows Server, version 1903
Next steps: We are working on a resolution that will be made available in upcoming release.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Investigating
Last updated:
July 12, 2019
04:42 PM PT

Opened:
July 12, 2019
04:42 PM PT
Devices starting using PXE from a WDS or SCCM servers may fail to start
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error \"Status: 0xc0000001, Info: A required device isn't connected or can't be accessed\" after installing KB4503293 on a WDS server.

Affected platforms:
  • Server: Windows Server 2008 SP2; Windows Server 2008 R2 SP1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; Windows Server, version 1803; Windows Server 2019; Windows Server, version 1809; Windows Server, version 1903
Workaround:
To mitigate this issue on an SCCM server:
  1. Verify Variable Window Extension is enabled.
  2. Set the values of TFTP block size to 4096 and TFTP window size to 1. For guidance on how to configure them, see Customize the RamDisk TFTP block and window sizes on PXE-enabled distribution points.
Note Try the default values for TFTP block size and TFTP window size first but depending on your environment and overall settings, you may need to adjust them for your setup. You can also try the Enable a PXE responder without Windows Deployment Service setting. For more information on this setting, see Install and configure distribution points in Configuration Manager.

To mitigate this issue on a WDS server without SCCM:
  1. In WDS TFTP settings, verify Variable Window Extension is enabled.
  2. In the Boot Configuration Data (BCD) of the imported image, set RamDiskTFTPBlockSize to 1456.
  3. In the BCD of the imported image, set RamDiskTFTPWindowSize to 4.
Note Try the default values for RamDiskTFTPBlockSize and RamDiskTFTPWindowSize first but depending on your environment and overall settings, you may need to adjust them for your setup.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 18362.175

June 11, 2019
KB4503293		Mitigated
Last updated:
July 10, 2019
07:09 PM PT

Opened:
July 10, 2019
02:51 PM PT
-
DetailsOriginating updateStatusHistory
RASMAN service may stop working and result in the error “0xc0000005”
The Remote Access Connection Manager (RASMAN) service may stop working and you may receive the error “0xc0000005” on devices where the diagnostic data level is manually configured to the non-default setting of 0. You may also receive an error in the Application section of Windows Logs in Event Viewer with Event ID 1000 referencing “svchost.exe_RasMan” and “rasman.dll”.

This issue only occurs when a VPN profile is configured as an Always On VPN (AOVPN) connection with or without device tunnel. This does not affect manual only VPN profiles or connections.

Affected platforms
  • Client: Windows 10, version 1903
Resolution: This issue was resolved in KB4505903.

Back to top		OS Build 18362.145

May 29, 2019
KB4497935		Resolved
KB4505903		Resolved:
July 26, 2019
02:00 PM PT

Opened:
June 28, 2019
05:01 PM PT
Event Viewer may close or you may receive an error when using Custom Views
When trying to expand, view, or create Custom Views in Event Viewer, you may receive the error, \"MMC has detected an error in a snap-in and will unload it.\" and the app may stop responding or close. You may also receive the same error when using Filter Current Log in the Action menu with built-in views or logs. Built-in views and other features of Event Viewer should work as expected.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016; Windows 10 Enterprise LTSC 2015; Windows 8.1; Windows 7 SP1
  • Server: Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 SP1; Windows Server 2008 SP2
Resolution: This issue was resolved in KB4501375.

Back to top		OS Build 18362.175

June 11, 2019
KB4503293		Resolved
KB4501375		Resolved:
June 27, 2019
10:00 AM PT

Opened:
June 12, 2019
11:11 AM PT
" @@ -120,15 +118,15 @@ sections: - type: markdown text: " + + + - - -
DetailsOriginating updateStatusHistory
Intermittent loss of Wi-Fi connectivity
Some older computers may experience loss of Wi-Fi connectivity due to an outdated Qualcomm driver. An updated Wi-Fi driver should be available from your device manufacturer (OEM).

To safeguard your upgrade experience, we have applied a hold on devices with this Qualcomm driver from being offered Windows 10, version 1903, until the updated driver is installed.

Affected platforms:
  • Client: Windows 10, version 1903
Workaround: Before updating to Windows 10, version 1903, you will need to download and install an updated Wi-Fi driver from your device manufacturer (OEM).
 
Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until a new driver has been installed and the Windows 10, version 1903 feature update has been automatically offered to you.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated External
Last updated:
August 01, 2019
08:44 PM PT

Opened:
May 21, 2019
07:13 AM PT
Gamma ramps, color profiles, and night light settings do not apply in some cases
Microsoft has identified some scenarios where gamma ramps, color profiles and night light settings may stop working.

Microsoft has identified some scenarios in which these features may have issues or stop working, for example:
  • Connecting to (or disconnecting from) an external monitor, dock, or projector
  • Rotating the screen
  • Updating display drivers or making other display mode changes
  • Closing full screen applications
  • Applying custom color profiles
  • Running applications that rely on custom gamma ramps
Affected platforms:
  • Client: Windows 10, version 1903
Workaround: If you find that your night light has stopped working, try turning the night light off and on, or restarting your computer. For other color setting issues, restart your computer to correct the issue.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
Last updated:
August 01, 2019
06:27 PM PT

Opened:
May 21, 2019
07:28 AM PT
Display brightness may not respond to adjustments
Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers. After updating to Windows 10, version 1903, brightness settings may sometime appear as if changes applied took effect, yet the actual display brightness doesn't change.

To safeguard your update experience, we have applied a compatibility hold on devices with certain Intel drivers from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue was resolved in KB4505903 and the safeguard hold has been removed. Please ensure you have applied the resolving update before attempting to update to the Windows 10 May 2019 Update (version 1903). Please note, it can take up to 48 hours for the safeguard to be removed.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
KB4505903		Resolved:
July 26, 2019
02:00 PM PT

Opened:
May 21, 2019
07:56 AM PT
Loss of functionality in Dynabook Smartphone Link app
Some users may experience a loss of functionality after updating to Windows 10, version 1903 when using the Dynabook Smartphone Link application on Windows devices. Loss of functionality may affect the display of phone numbers in the Call menu and the ability to answer phone calls on the Windows PC.

To safeguard your update experience, we have applied a compatibility hold on devices with Dynabook Smartphone Link from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue is now resolved and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.116

May 20, 2019
KB4505057		Resolved
Resolved:
July 11, 2019
01:54 PM PT

Opened:
May 24, 2019
03:10 PM PT
Error attempting to update with external USB device or memory card attached
If you have an external USB device or SD memory card attached when installing Windows 10, version 1903, you may get an error message stating \"This PC can't be upgraded to Windows 10.\" This is caused by inappropriate drive reassignment during installation.

Sample scenario: An update to Windows 10, version 1903 is attempted on a computer that has a thumb drive inserted into its USB port. Before the update, the thumb drive is mounted in the system as drive G based on the existing drive configuration. After the feature update is installed; however, the device is reassigned a different drive letter (e.g., drive H).

Note The drive reassignment is not limited to removable drives. Internal hard drives may also be affected.

To safeguard your update experience, we have applied a hold on devices with an external USB device or SD memory card attached from being offered Windows 10, version 1903 until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue is now resolved and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
Resolved:
July 11, 2019
01:53 PM PT

Opened:
May 21, 2019
07:38 AM PT
Audio not working with Dolby Atmos headphones and home theater
After updating to Windows 10, version 1903, you may experience loss of audio with Dolby Atmos for home theater (free extension) or Dolby Atmos for headphones (paid extension) acquired through the Microsoft Store due to a licensing configuration error.
 
This occurs due to an issue with a Microsoft Store licensing component, where license holders are not able to connect to the Dolby Access app and enable Dolby Atmos extensions.
 
To safeguard your update experience, we have applied protective hold on devices from being offered Windows 10, version 1903 until this issue is resolved. This configuration error will not result in loss of access for the acquired license once the problem is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Resolution: This issue is now resolved and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to Windows 10, version 1903.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Resolved
Resolved:
July 11, 2019
01:53 PM PT

Opened:
May 21, 2019
07:16 AM PT
Windows Sandbox may fail to start with error code “0x80070002”
Windows Sandbox may fail to start with \"ERROR_FILE_NOT_FOUND (0x80070002)\" on devices in which the operating system language is changed during the update process when installing Windows 10, version 1903.

Affected platforms:
  • Client: Windows 10, version 1903
Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 18362.116

May 20, 2019
KB4505057		Investigating
Last updated:
June 10, 2019
06:06 PM PT

Opened:
May 24, 2019
04:20 PM PT
Gamma ramps, color profiles, and night light settings do not apply in some cases
Microsoft has identified some scenarios where gamma ramps, color profiles and night light settings may stop working.

Microsoft has identified some scenarios where night light settings may stop working, for example:
  • Connecting to (or disconnecting from) an external monitor, dock, or projector
  • Rotating the screen
  • Updating display drivers or making other display mode changes
  • Closing full screen applications
  • Applying custom color profiles
  • Running applications that rely on custom gamma ramps
Affected platforms:
  • Client: Windows 10, version 1903
Workaround: If you find that your night light has stopped working, try turning the night light off and on, or restarting your computer. For other color setting issues, restart your computer to correct the issue.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
Last updated:
May 24, 2019
11:02 AM PT

Opened:
May 21, 2019
07:28 AM PT
Unable to discover or connect to Bluetooth devices
Microsoft has identified compatibility issues with some driver versions for Bluetooth radios made by Realtek and Qualcomm. To safeguard your update experience, we have applied a compatibility hold on devices with affected driver versions for Realtek or Qualcomm Bluetooth radios from being offered Windows 10, version 1903 or Windows Server, version 1903 until the driver has been updated.

Affected platforms:
  • Client: Windows 10, version 1903
  • Server: Windows Server, version 1903
Workaround: Check with your device manufacturer (OEM) to see if an updated driver is available and install it.

  • For Qualcomm drivers, you will need to install a driver version greater than 10.0.1.11.
  • For Realtek drivers, you will need to install a driver version greater than 1.5.1011.0.
Note Until an updated driver has been installed, we recommend you do not attempt to manually update using the Update now button or the Media Creation Tool. 

Next steps: Microsoft is working with Realtek and Qualcomm to release new drivers for all affected system via Windows Update.  


Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
Last updated:
May 21, 2019
04:48 PM PT

Opened:
May 21, 2019
07:29 AM PT
Display brightness may not respond to adjustments
Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers. After updating to Windows 10, version 1903, brightness settings may sometime appear as if changes applied took effect, yet the actual display brightness doesn't change.

To safeguard your update experience, we have applied a compatibility hold on devices with certain Intel drivers from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Workaround: Restart your device to apply changes to brightness.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Next steps: We are working on a resolution that will be made available in upcoming release.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Investigating
Last updated:
May 21, 2019
04:47 PM PT

Opened:
May 21, 2019
07:56 AM PT
Intel Audio displays an intcdaud.sys notification
Microsoft and Intel have identified an issue with a range of Intel Display Audio device drivers that may result in higher than normal battery drain. If you see an intcdaud.sys notification or “What needs your attention” notification when trying to update to Windows 10, version 1903, you have an affected Intel Audio Display device driver installed on your machine (intcdaud.sys, versions 10.25.0.3 through 10.25.0.8).
  
To safeguard your update experience, we have applied a compatibility hold on devices with drivers from being offered Windows 10, version 1903 until updated device drivers have been installed.

Affected platforms:
  • Client: Windows 10, version 1903; Windows 10, version 1809
Workaround:
On the “What needs your attention\" notification, click the Back button to remain on your current version of Windows 10. (Do not click Confirm as this will proceed with the update and you may experience compatibility issues.) Affected devices will automatically revert to the previous working configuration.

For more information, see Intel's customer support guidance and the Microsoft knowledge base article KB4465877.

Note We recommend you do not attempt to update your devices until newer device drivers are installed.

Next steps: You can opt to wait for newer drivers to be installed automatically through Windows Update or check with the computer manufacturer for the latest device driver software availability and installation procedures.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
Last updated:
May 21, 2019
04:47 PM PT

Opened:
May 21, 2019
07:22 AM PT
Cannot launch Camera app
Microsoft and Intel have identified an issue affecting Intel RealSense SR300 and Intel RealSense S200 cameras when using the Camera app. After updating to the Windows 10 May 2019 Update and launching the Camera app, you may get an error message stating:

\"Close other apps, error code: 0XA00F4243.”


To safeguard your update experience, we have applied a protective hold on machines with Intel RealSense SR300 or Intel RealSense S200 cameras installed from being offered Windows 10, version 1903, until this issue is resolved.

Affected platforms:
  • Client: Windows 10, version 1903
Workaround: To temporarily resolve this issue, perform one of the following:

  • Unplug your camera and plug it back in.

or

  • Disable and re-enable the driver in Device Manager. In the Search box, type \"Device Manager\" and press Enter. In the Device Manager dialog box, expand Cameras, then right-click on any RealSense driver listed and select Disable device. Right click on the driver again and select Enable device.

or

  • Restart the RealSense service. In the Search box, type \"Task Manager\" and hit Enter. In the Task Manager dialog box, click on the Services tab, right-click on RealSense, and select Restart. 
Note This workaround will only resolve the issue until your next system restart.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
Last updated:
May 21, 2019
04:47 PM PT

Opened:
May 21, 2019
07:20 AM PT
Intermittent loss of Wi-Fi connectivity
Some older computers may experience loss of Wi-Fi connectivity due to an outdated Qualcomm driver. An updated Wi-Fi driver should be available from your device manufacturer (OEM).

To safeguard your upgrade experience, we have applied a hold on devices with this Qualcomm driver from being offered Windows 10, version 1903, until the updated driver is installed.

Affected platforms:
  • Client: Windows 10, version 1903
Workaround: Download and install an updated Wi-Fi driver from your device manufacturer (OEM).
 
Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until a new driver has been installed and the Windows 10, version 1903 feature update has been automatically offered to you.

Back to top		OS Build 18362.116

May 21, 2019
KB4505057		Mitigated
Last updated:
May 21, 2019
04:46 PM PT

Opened:
May 21, 2019
07:13 AM PT
" diff --git a/windows/release-information/windows-message-center.yml b/windows/release-information/windows-message-center.yml index ed6e185ffc..503cd5fa79 100644 --- a/windows/release-information/windows-message-center.yml +++ b/windows/release-information/windows-message-center.yml @@ -50,7 +50,7 @@ sections: text: " - +
MessageDate
Microsoft Store users may encounter blank screens when clicking on certain buttons
Some customers running the version of the Microsoft Store app released on July 29, 2019 may encounter a blank screen when selecting “Switch out of S mode,” “Get Genuine,” or some “Upgrade to [version]” OS upgrade options. We are working on the issue and expect to release a fix that should resolve the issue later this week.		July 31, 2019
02:00 PM PT
Resolved August 1, 2019 16:00 PT: Microsoft Store users may encounter blank screens when clicking on certain buttons
Some customers running the version of the Microsoft Store app released on July 29, 2019 encountered a blank screen when selecting “Switch out of S mode,” “Get Genuine,” or some “Upgrade to [version]” OS upgrade options. This issue has now been resolved and a new version of the Microsoft Store app has been released. Users who encountered this issue will need to update the Microsoft Store app on their device. If you are still encountering an issue, please see Fix problems with apps from Microsoft Store.
August 01, 2019
02:00 PM PT
Status update: Windows 10, version 1903 “D” release now available
The optional monthly “D” release for Windows 10, version 1903 is now available. Follow @WindowsUpdate for the latest on the availability of this release.
July 26, 2019
02:00 PM PT
Plan for change: Microsoft Silverlight will reach end of support on October 12, 2021
After this date, Silverlight will not receive any future quality or security updates. Microsoft will continue to ship updates to the Silverlight 5 Developer Runtime for supported browsers and versions (Internet Explorer 10 and Internet Explorer 11); however, please note that support for Internet Explorer 10 will end on 31 January 2020. See the Silverlight end of support FAQ for more details.
July 19, 2019
12:00 AM PT
Evolving Windows 10 servicing and quality
Find out how we plan to further optimize the delivery of the next Windows 10 feature update for devices running Windows 10, version 1903. If you're a commercial customer, please see the Windows IT Pro Blog for more details on how to plan for this new update option in your environment.
July 01, 2019
02:00 PM PT