From 931c3dc7ffa62875abe29b74fddfa7937e384dbb Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 29 Mar 2018 16:33:05 -0700 Subject: [PATCH 01/20] combined steps --- ...reate-and-verify-an-efs-dra-certificate.md | 50 ++++++------------- 1 file changed, 14 insertions(+), 36 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index 862200bf00..f92f0b2830 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -72,7 +72,7 @@ The recovery process included in this topic only works for desktop devices. WIP Where *encryptedfile.extension* is the name of your encrypted file. For example, corporatedata.docx. -**To quickly recover WIP-protected desktop data after unenrollment** +**To quickly recover WIP-protected after unenrollment** It's possible that you might revoke data from an unenrolled device only to later want to restore it all. This can happen in the case of a missing device being returned or if an unenrolled employee enrolls again. If the employee enrolls again using the original user profile, and the revoked key store is still on the device, all of the revoked data can be restored at once, by following these steps. @@ -81,51 +81,29 @@ It's possible that you might revoke data from an unenrolled device only to later 1. Have your employee sign in to the unenrolled device, open a command prompt, and type: - Robocopy “%localappdata%\Microsoft\EDP\Recovery” “new_location” /EFSRAW + `Robocopy` `"%localappdata%\Microsoft\EDP\Recovery"` `"`*`new_location`*`"` `/EFSRAW` - Where ”*new_location*" is in a different directory. This can be on the employee’s device or on a Windows 8 or Windows Server 2012 or newer server file share that can be accessed while you're logged in as a data recovery agent. + -or- + + If the employee performed a clean installation and there is no user profile, you need to recover the keys from the System Volume folder in each drive. Type: + + `Robocopy` `"`*`drive_letter`*`:\System Volume Information\EDP\Recovery\"` `"`*`new_location`*`"` `*` `/EFSRAW` + + Where "*new_location*" is in a different directory. This can be on the employee’s device or on a shared folder on a computer that runs Windows 8 or Windows Server 2012 or newer and can be accessed while you're logged in as a data recovery agent. + + To start Robocopy in S mode, click Windows key + R. 2. Sign in to a different device with administrator credentials that have access to your organization's DRA certificate, and perform the file decryption and recovery by typing: - cipher.exe /D "new_location" + `cipher.exe /D` `"`*`new_location`*`"` 3. Have your employee sign in to the unenrolled device, and type: - Robocopy "new_location" “%localappdata%\Microsoft\EDP\Recovery\Input” + `Robocopy` `"`*`new_location`*`"` `"%localappdata%\Microsoft\EDP\Recovery\Input"` 4. Ask the employee to lock and unlock the device. - The Windows Credential service automatically recovers the employee’s previously revoked keys from the Recovery\Input location. - -**To quickly recover WIP-protected desktop data in a cloud-based environment** - -If you use a cloud environment in your organization, you may still want to restore an employee's data after revocation. While much of the process is the same as when you're not in a cloud environment, there are a couple of differences. - ->[!IMPORTANT] ->To maintain control over your enterprise data, and to be able to revoke again in the future, you must only perform this process after the employee has re-enrolled the device. - -1. Have your employee sign in to the device that has revoked data for you to restore, open the **Run** command (Windows logo key + R), and type one of the following commands: - - - If the keys are still stored within the employee's profile, type: Robocopy “%localappdata%\Microsoft\EDP\Recovery” “new_location” * /EFSRAW - - -or- - - - If the employee performed a clean installation over the operating system and you need to recover the keys from the System Volume folder, type: Robocopy “drive_letter:\System Volume Information\EDP\Recovery\” "new_location” * /EFSRAW> - - >[!Important] - >The “*new_location*” must be in a different directory, either on the employee’s device or on a Windows 8 or Windows Server 2012 or newer server file share, which can be accessed while you're logged in as a data recovery agent. - -2. Sign in to a different device with administrator credentials that have access to your organization's DRA certificate private key, and perform the file decryption and recovery by typing: - - cipher.exe /D “new_location” - -3. Have your employee sign in to the device again, open the **Run** command, and type: - - Robocopy “new_location” “%localappdata%\Microsoft\EDP\Recovery\Input” - -4. Ask the employee to lock and unlock the device. - - The Windows Credential service automatically recovers the employee’s previously revoked keys from the Recovery\Input location. All your company’s previously revoked files should be accessible to the employee again. + The Windows Credential service automatically recovers the employee’s previously revoked keys from the `Recovery\Input` location. ## Auto-recovery of encryption keys Starting with Windows 10, version 1709, WIP includes a data recovery feature that lets your employees auto-recover access to work files if the encryption key is lost and the files are no longer accessible. This typically happens if an employee reimages the operating system partition, removing the WIP key info, or if a device is reported as lost and you mistakenly target the wrong device for unenrollment. From 209b20bf68e8afc1736f4555d99b246d355f9dcd Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 30 Mar 2018 14:26:22 -0700 Subject: [PATCH 02/20] fixed headings --- .../create-and-verify-an-efs-dra-certificate.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index f92f0b2830..bad47f39e6 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -24,7 +24,7 @@ The recovery process included in this topic only works for desktop devices. WIP >[!IMPORTANT] >If you already have an EFS DRA certificate for your organization, you can skip creating a new one. Just use your current EFS DRA certificate in your policy. For more info about when to use a PKI and the general strategy you should use to deploy DRA certificates, see the [Security Watch Deploying EFS: Part 1](https://technet.microsoft.com/magazine/2007.02.securitywatch.aspx) article on TechNet. For more general info about EFS protection, see [Protecting Data by Using EFS to Encrypt Hard Drives](https://msdn.microsoft.com/library/cc875821.aspx).

If your DRA certificate has expired, you won’t be able to encrypt your files with it. To fix this, you'll need to create a new certificate, using the steps in this topic, and then deploy it through policy. -**To manually create an EFS DRA certificate** +## Manually create an EFS DRA certificate 1. On a computer without an EFS DRA certificate installed, open a command prompt with elevated rights, and then navigate to where you want to store the certificate. @@ -46,7 +46,7 @@ The recovery process included in this topic only works for desktop devices. WIP >[!Note] >To add your EFS DRA certificate to your policy by using Microsoft Intune, see the [Create a Windows Information Protection (WIP) policy using Microsoft Intune](create-wip-policy-using-intune.md) topic. To add your EFS DRA certificate to your policy by using System Center Configuration Manager, see the [Create a Windows Information Protection (WIP) policy using System Center Configuration Manager](create-wip-policy-using-sccm.md) topic. -**To verify your data recovery certificate is correctly set up on a WIP client computer** +## Verify your data recovery certificate is correctly set up on a WIP client computer 1. Find or create a file that's encrypted using Windows Information Protection. For example, you could open an app on your allowed app list, and then create and save a file so it’s encrypted by WIP. @@ -60,7 +60,7 @@ The recovery process included in this topic only works for desktop devices. WIP 4. Make sure that your data recovery certificate is listed in the **Recovery Certificates** list. -**To recover your data using the EFS DRA certificate in a test environment** +## Recover your data using the EFS DRA certificate in a test environment 1. Copy your WIP-encrypted file to a location where you have admin access. @@ -72,17 +72,19 @@ The recovery process included in this topic only works for desktop devices. WIP Where *encryptedfile.extension* is the name of your encrypted file. For example, corporatedata.docx. -**To quickly recover WIP-protected after unenrollment** +## Recover WIP-protected after unenrollment -It's possible that you might revoke data from an unenrolled device only to later want to restore it all. This can happen in the case of a missing device being returned or if an unenrolled employee enrolls again. If the employee enrolls again using the original user profile, and the revoked key store is still on the device, all of the revoked data can be restored at once, by following these steps. +It's possible that you might revoke data from an unenrolled device only to later want to restore it all. This can happen in the case of a missing device being returned or if an unenrolled employee enrolls again. If the employee enrolls again using the original user profile, and the revoked key store is still on the device, all of the revoked data can be restored at once,. >[!IMPORTANT] >To maintain control over your enterprise data, and to be able to revoke again in the future, you must only perform this process after the employee has re-enrolled the device. -1. Have your employee sign in to the unenrolled device, open a command prompt, and type: +1. Have the employee sign in to the unenrolled device, open a command prompt, and type: `Robocopy` `"%localappdata%\Microsoft\EDP\Recovery"` `"`*`new_location`*`"` `/EFSRAW` + To start Robocopy in S mode, press the Windows key + R. + -or- If the employee performed a clean installation and there is no user profile, you need to recover the keys from the System Volume folder in each drive. Type: @@ -91,7 +93,6 @@ It's possible that you might revoke data from an unenrolled device only to later Where "*new_location*" is in a different directory. This can be on the employee’s device or on a shared folder on a computer that runs Windows 8 or Windows Server 2012 or newer and can be accessed while you're logged in as a data recovery agent. - To start Robocopy in S mode, click Windows key + R. 2. Sign in to a different device with administrator credentials that have access to your organization's DRA certificate, and perform the file decryption and recovery by typing: From 0471800f74fcbc2cd649db8bbbeba9fd6d7286da Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 30 Mar 2018 14:46:19 -0700 Subject: [PATCH 03/20] fixed syntax formatting --- .../create-and-verify-an-efs-dra-certificate.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index bad47f39e6..aebfe5a064 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -74,14 +74,16 @@ The recovery process included in this topic only works for desktop devices. WIP ## Recover WIP-protected after unenrollment -It's possible that you might revoke data from an unenrolled device only to later want to restore it all. This can happen in the case of a missing device being returned or if an unenrolled employee enrolls again. If the employee enrolls again using the original user profile, and the revoked key store is still on the device, all of the revoked data can be restored at once,. +It's possible that you might revoke data from an unenrolled device only to later want to restore it all. This can happen in the case of a missing device being returned or if an unenrolled employee enrolls again. If the employee enrolls again using the original user profile, and the revoked key store is still on the device, all of the revoked data can be restored at once. >[!IMPORTANT] >To maintain control over your enterprise data, and to be able to revoke again in the future, you must only perform this process after the employee has re-enrolled the device. 1. Have the employee sign in to the unenrolled device, open a command prompt, and type: - `Robocopy` `"%localappdata%\Microsoft\EDP\Recovery"` `"`*`new_location`*`"` `/EFSRAW` + ``` + Robocopy "%localappdata%\Microsoft\EDP\Recovery" "new_location" /EFSRAW + ``` To start Robocopy in S mode, press the Windows key + R. From dbff31ad15e14d3c544c199b0349139c6e80b2c4 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 30 Mar 2018 15:13:01 -0700 Subject: [PATCH 04/20] fixed formatting --- .../create-and-verify-an-efs-dra-certificate.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index aebfe5a064..d7631db8b9 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -80,10 +80,8 @@ It's possible that you might revoke data from an unenrolled device only to later >To maintain control over your enterprise data, and to be able to revoke again in the future, you must only perform this process after the employee has re-enrolled the device. 1. Have the employee sign in to the unenrolled device, open a command prompt, and type: - - ``` - Robocopy "%localappdata%\Microsoft\EDP\Recovery" "new_location" /EFSRAW - ``` + + Robocopy "%localappdata%\Microsoft\EDP\Recovery" "new_location" /EFSRAW To start Robocopy in S mode, press the Windows key + R. @@ -91,18 +89,18 @@ It's possible that you might revoke data from an unenrolled device only to later If the employee performed a clean installation and there is no user profile, you need to recover the keys from the System Volume folder in each drive. Type: - `Robocopy` `"`*`drive_letter`*`:\System Volume Information\EDP\Recovery\"` `"`*`new_location`*`"` `*` `/EFSRAW` + Robocopy "drive_letter:\System Volume Information\EDP\Recovery\" "new_location" * /EFSRAW Where "*new_location*" is in a different directory. This can be on the employee’s device or on a shared folder on a computer that runs Windows 8 or Windows Server 2012 or newer and can be accessed while you're logged in as a data recovery agent. 2. Sign in to a different device with administrator credentials that have access to your organization's DRA certificate, and perform the file decryption and recovery by typing: - `cipher.exe /D` `"`*`new_location`*`"` + cipher.exe /D "new_location" 3. Have your employee sign in to the unenrolled device, and type: - `Robocopy` `"`*`new_location`*`"` `"%localappdata%\Microsoft\EDP\Recovery\Input"` + Robocopy "new_location" "%localappdata%\Microsoft\EDP\Recovery\Input" 4. Ask the employee to lock and unlock the device. From cf0f39ed2220ef53e55d574591c7b9e19b441e45 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 11 Apr 2018 14:29:27 -0700 Subject: [PATCH 05/20] added image --- .../create-and-verify-an-efs-dra-certificate.md | 13 ++++++------- .../images/robocopy-s-mode.png | Bin 0 -> 13301 bytes 2 files changed, 6 insertions(+), 7 deletions(-) create mode 100644 windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index d7631db8b9..4e8e4aeaea 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -79,21 +79,20 @@ It's possible that you might revoke data from an unenrolled device only to later >[!IMPORTANT] >To maintain control over your enterprise data, and to be able to revoke again in the future, you must only perform this process after the employee has re-enrolled the device. -1. Have the employee sign in to the unenrolled device, open a command prompt, and type: +1. Have the employee sign in to the unenrolled device, open an elevated command prompt, and type: - Robocopy "%localappdata%\Microsoft\EDP\Recovery" "new_location" /EFSRAW + Robocopy "%localappdata%\Microsoft\EDP\Recovery" "new_location" * /EFSRAW - To start Robocopy in S mode, press the Windows key + R. + Where "*new_location*" is in a different directory. This can be on the employee’s device or on a shared folder on a computer that runs Windows 8 or Windows Server 2012 or newer and can be accessed while you're logged in as a data recovery agent. + + To start Robocopy in S mode, open **Task Manager**. Click **File** > **Run new task** and type the command. - -or- + ![Robocopy in S mode](images\robocopy-s-mode.png) If the employee performed a clean installation and there is no user profile, you need to recover the keys from the System Volume folder in each drive. Type: Robocopy "drive_letter:\System Volume Information\EDP\Recovery\" "new_location" * /EFSRAW - Where "*new_location*" is in a different directory. This can be on the employee’s device or on a shared folder on a computer that runs Windows 8 or Windows Server 2012 or newer and can be accessed while you're logged in as a data recovery agent. - - 2. Sign in to a different device with administrator credentials that have access to your organization's DRA certificate, and perform the file decryption and recovery by typing: cipher.exe /D "new_location" diff --git a/windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png b/windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png new file mode 100644 index 0000000000000000000000000000000000000000..3b81bebd76bf6e906ce24b3e4f19b1d6ae5a2520 GIT binary patch literal 13301 zcmch;Rd5_Zuq`NABW4B*M$9aWnVFdxEwGrGnVFf%0*jg1k}PJ)VrG8hd-v_$z46}u z?8Zh+S5MbeRd;1~pOcw&CPGnO0uc@m4h#$oQA$!&84L`(2DCxLd;!%Y{){~W?ZBOs zC4|9hr}2+L2LKBpIUz8xhB){)BS_FOtb?SM6BroMz`qTA#J=1V42(5WN>oVIUH?1> z-ca>E=W<4t;u1`16asLN;t#tWNGurIf}zw3`yE?n>fEz+w|%YtT#x*hjD1H`6Ko{QLLsbWoR3PKkE;LJerzX&)`$zjQKRsg;xx z#7!h6VV;T7@rm5Z8mM`A!k$5=jdltx3Ob~j{#-P8$DFC+^lEwgJEdc@^Z_}ea)N}7 zU%6u??)}#!jv;mr*EV0#qq7CO#(rAFqsrn3M9KZxntcuyuSPTwrqEDyD@*EAYi#EP zD>tEj&6fSELe!*oj)aFL5~^S#UW5A3NNZ}I?E$XzM#g;QH0abv!$C;;-QLfm38WS? zxy|sdr8#veTb|A;b_Bl5x?T!oW{>-7q_Xh zsd_sqdWnu+DaHr{`cC|*(b4J`;a$dF!fAgD8a?yWyblctdH-uab%lIJEI!~AM;8cr zQ$@bCbFZOb)>r6mXy~8f7}u#;TR^L;xiri-C>wd}n=cp!VB*PzE1t~cD=Te@rO>Hc zfN?UH=B}vCo^@b7EPh(}U_25ot z9ko!;I>v2Q4q4Kr%pU$i~fMQ9{9t3P6AgVj#fS>+I|tVcDx7x4SMP>n7=U zP8YKgh98Y7=g}UV$|haVt>Dqw93P4*s?|l$u?yx}h}o4+K?Php@gC&^j<)ZP=PCZ= zWGHG7s_0BCr^`Mt($)>IMAK|ZfK||*qKhDU9z^RQ`cBhQ(M$;SM|9z zUR-Z;%J|7+C`UWn{C6jn6D#VP+`3OE)@EI+iYQCvRy|-oQ0vP{MBZK##h-Frbi`Ir zeWr?2xbt2;P|qin!9k)u0J;h$5P(D2E%AQQaXCCRw9)P&^Ne`%@$mtA^nE{`u_GcP zY?f-}BqhO$%zyM0-=Fc=x2}Kk=|Yi8`lF-u_b}}VLB|pDd0woybzFA8W^KJu{A6Qe z)9vycvTk;EacOOBb#r@6pZc4ejM4H9Y@z;QZ_9Tf^ZBS1duI^^0Q+5*0$t|Uyionw z>U|WC8(vZ(8i$>CC@wP52aG;3S#@0%M5IF7uj%}C{67I^ntqB$|SjqsM(y(P3QveXuJqi8pJ36vVb(j?@ zag?%3b?|fZYDW3vg>G8)J z1^kncr0cAE(c^#9?F6fWo{rI9ff2w?`5f*Pon<00j2QA{;lBVCKH89yofPtH!yzl5 zf3ty+g0`4U@1s9M26Kd}OAMw)N1*V?_s5C~>0*KJ<-?FvBL+b;eIk|=+^Bwuj;YlV zkahq~x;J2q=*j}}DV!7ZN@cChlr#jlAX$Gw%J&aSj^-n{*SRo*1ex{?6$>X3@Cs3X zKu?x_qSXC1P|9~u_+vcpbC1=^;N$yiMibHZr?Nu31tCylyfkhY!A$b+EsP&mXV5C_ zpL-BeH-$KXeW1td!0$+mKon)LF2PxGulr3F03H?%14AN606NPTaJLysaB=|s{)1b60N{K zc4pu}4XDva-0LYB+l$F6r8ZEEG4EILjPWI2{kO;E*aa7&U+dRGE{B`&1YXlE=iD0) z^NB6CBWr%ztJk;lIX(Pq&ufhB{FSFWL!hz6L;DP=7#R<7Aq|teNs1y`kRtnAx3AA< z_~QrZlf8QG>%LAVZ5(g=4{dH*^lX^fUNkJUx;-G?tP%-{>`)h+p{8|Jb20%cbrK6ghXPH+w6wJTMAmUi5u5hGWV!3ZyIq5D zj7UK#yHS1_U^HuNb8&Rss%btVVYZ2G51+NLj_uJ+eK&7IEK!TY-+}8{%1_2jQ9WYZ zL#ch52tU`mFix-P9cKt@VhboXQ-O>Ig7BfdOHm-%Z!s8$Gr zdV<}9Y|`|sDFcfB{WhtHv32$Pl#eWH#`zy#Ho#-7`@c7gwhwnEF(jQ zvA4n3c{J=Y@=1l5oN-j+T73sXtG#IV}nuD%w=Ua$>`*m$8~E`#hRVO%}lM4!{uWAQL3qpZu8Y$ zRCQno@wDUUlRSN4fKIO!YOrG`TC=d}tT*Q-U{1nu%j%UKl@dK5h$OGfG>1CIA{3l9N5VH|TCYPY`*2qr{*6^Q z_t(;0&};vPht}Zdv*+DqH}lT9gt37(-*J?Yw?q4G7U@tU)3|0iLwk}e?4AJDPj4Z5YV zH`)13f)7+7n*stj1mPW3y`M4Mx;`PcT5S=~Ad z>voZOm~%v^1tmd19Gx3DM+}R}O1E>z#G&LictFc4Mnxr^QI(aWXF>)>`TIuEjzWmT zdlWE;noO_3-m9d;a#qYw5J3pr$`m%;$v{A#j1xKnCJ+JnJ_I#Knd)@gOgcrfSyE08 z(F@Yr#^&_oq*k}Bf5OrTC3x}}HFfjDG>M5%H67PnA*Q}eV)Y`b(R@%dO`+b~YZ=gin7T%e+qai-NM6EVwOZ#z;e$(X zL_d;Xa^0736f8w4XTiC`c7a`&q=h#~9rkg^f|B)q)qzMo-ZgI1$ygfakE7S0HL z#)jB$WYxO)w-_)W2Qe8e${GDnKtMouclV-KjNQcm+{ZR-9dDhOq-3}Z2+{%9d?;!4 z!H-KrU<-s;SXdWW7$7njhUK3F?N9{1xS$Bd8$$m_IZ}i~I35=h6BQ*RDVfes8J%OQee4%w-}{O0nb8&%MMI6HnCk2|dB2Dv&P zMwrsosaFzb=(IzbbMGJ4VA)Nr?@{)4cux3*sT^^LmtZ?O z25Hmk*T$b!&yE6+*V$U+l;2R%_2DX_rY3jr%&3sZt)%SObobPdRFap&t@Sd5ZJ_&0 z(c|`SOzCjx$A@p!P=D^v?>|?zQ#3f7LD+W4wib00Tuq=xrk0r3--<}&_r`=_KT17H zdo%qsk|~HcA&HaoK6_ddeJ}!=%q(!Z$b>>RhnbYuJdl`7lqr*r-OJw3UPi}lAm{Ig z@0!2Z(K+_ZOHEFWUQ7&qbF&76Ubk~;=b7m7byCTQfWWJVh6W}6lZVS__^7nZ0re+k z{BU42p-FyFJ(Zn}&G99Xq;z^GnaOqHLnZPAF#Jk(NBy4tdSwC zYcnbh#O-VqV6vUGT6&dpDx{?j&$FZ64K!_72ahxCcV!>$Ohr56wSE4HA?iw3a(r%J zD#4M}+v9QqIQf6i7-mM>WnH%x(uTBv@bSrID0L|(&ai*k(A;@ z%8fUYja9lDsPB-wgpgtu+f^19hVM%yo=~`VWe&^^{cMsP_4CX@ihg-u&~k~> zSvllBhGG)!V58zshYK`(NWSE$-5Ti+Fno#(jwz+&Me~E&lCu6gHX-(d8k4=m&^@>q zS8`P+;h0X!%o=|seEf#F7>ouCriFy|k$1yyuOgAR;XYuF|e3F=|Us>IlC{-_^vE0y!4KzfL!Vh&^tX8g-y)P zh9?3hR6qX-_DUqbRljN*&y0siEM7!Ch=YfQhJ}X*{@LG8GBD6DM=@dO7d|(;wKYGt zNq~nZu5*R8lI51Y*7CF6^RUGU&kNwOCAthA)0lOx_<}2~rOCMuvycac?};n*NaeYv zHa#|q^H;KKI=pQ9FnWy;smNr{l8%3=4}C-)vrEJG=>3K@FR$DAc(>VR3F_t5Hqa0* z4{`J(IJWOMoZRgA1}Il!%Dj!h}t6^%N#t zt34wI28*WluROxnBjOxBFE;%DI7Y-To*m$1u}F|sg?=h>n!KJYq70#xD+TBEi>>&6^7^YTDY z#3wiW(H`08S$7TMRZ6+cLHLfpX>)pMX~dq(z2oEU&VzSNk-%Abp`b%E~;43)jQIeVii^Kfh0CBEnpLdXF2?J#1`y zzK3%OO>}*LYnIPxF_6G-dxhyukTGIXK)T z8h;$L909BoKNXC?r-QxhxnPf3zJ0GXfu-$vqqfnH@Aj7j0BWcb`WmYUIF7~UJEm(0 zYKjxfp9a6?pU3BDRWoX^3WtK&2+#7^U1+MdvU*vBx`hLuf_Klep3vMydyRj8h3D>y zc68e8SLon_0^R!o69g$GH@7Wzt^SvqAoi$5G*rSr%j!otvk_d`6c4 z)#LmQcYffIuG_t)t+I`F(liqT_aS9r@Rnmurt+&vk!)7CtAcKE#jfj8)kvKJ0`gQF zhu!lAGh$5+HVtF(WcnY6SL2)Hrn@_~O(;-mVm1JRRpyD8kPQbBbqAe8?N{7E|p~+I5moE5FA*;#AY9(d;Nak8L{l~Ro&DhQ+3xPm zt9pkHptDv;8j;@H%$6>S9USo?{P~wobH?l!WaQ%9ww075esU*sZ*SG*kkAW*oL}!j zYF4S>w5rQ%YeWPD162|z09@SeC83TVy~Y8CvxYwrkr0Fnw~Tpy?7Hjeo%f#82AxmU z|As;ZNPNW+mZLk@AIms7om`@`G z);(PW?5VfJWY;-8)}TX9r@W%HX($(&{BDQOXY93ffyR~dt_@Pp@-eKR`Lb%xsy${U zemZrU<9BO%QT!|X=LkR7)vEp0>%EM{mRHyDdc=p$Hy^qCKOg#3UoI4jXK4H%`UIkK zPKpTh0YQe%nuw^VsGZ=VVl8**LjE8A5q`HBe@7Qrliw15xVu$0oTsd}mp<*vb$!9j zI|UwT`q}4=8Tz|iZyWj<7NL!s80_)(Ri5 z@}Uidi>Ck7jm*M-?ZYd1$!5|j6mJn89VsO(JwB3q8OzY;eMiQ3A&wRuPu!4~c zX0$!;4B_RkZdYt~$Q2o7O&(WE0t*>3lEhTzFkU3ATqA*t`l`CI4av7f9MfI_Jz-Qc zQ1t?(*qD&!I0rqVqk&2p#;s|j@qW0WRGOgF|9G80^~au|bKZHx5=Hs2R5r_XsUnH; z^Jzrj;o+fL_j&QEewNxz&fqq!EsB*WIzpzR;*{pS>1`L=Opm^KtlVMIc!Y+omH7B65B!2?r^W4Y`03$+Zm*^dBA2FW-9?#o?d$O8@n^aoLP$ur*i6kC!qxALyju+i+Y-$C3)dJ`rJIyUkzxl;7w{ zN%u^T$MW9xDJ=v(y)QaF3Q$pFBpgTbf$5MM!9^?Q%Kw zZu=w*y1O1{8;VMnP8lT9JwMO7GvfGK9&)`dA|m8LD>Hk|aWL22f+sp)eeI2c4Pj`| zN&=(Z=N}A0%FX-i03S904+&z)$AK^;=wv=sFI8+9E$?)@ zwflXvd9`x<*5Ko~>v4X5-oSk)T&Jvr6U&P=tS zmywc_lasQtv%9#wwD=Z{f!zugh|D618iCtnuLh7NC7dKaEA%5!+_IIL=?Zn;42Y!j zR^#wd7Tz~knWp&B2Kxb-#eSU>lsj9k>xEWc$=AofAJ5-v&!ZQv!YG(4f{QH1o4!0V9@>e@Q4#(0gfi77Y6A>guY#o@sXEO49KKc{e;g zJv})&nOr7y-DOEHCnpC*Qh0xPe%|T*#RX+5AOKu_AY5tVOL(2^SWd}Nzxu7Zn5o*{ z!yhT&7kM|G-`1m68cSZ#GzxBwBt*S*L&7oD5G9Zqly_T7k-pP1&tci++5tF^oHGT{ z6C~}k7f{twVUA&JkG;BFdXzu<)rgw>HwJgi?J~{yE@Z;(ub(fY_#BUB3o2B~0&DyD z!TLcwZp((ZwzgIvCKLxGYdW|>L4R8pUY$vh@tvIosa3RLuL<#&gFX< zA9{K73z992e3+l`?PaM4$rzi6hzJ`S8x<9t&tw-q%a}SpG~cHlE|=M4IP;rLukCm; zbrPk*gBxlvGR!6x^;N(SB4jx`6D3n%Ffv7S;;emkwy``fkoV@s{lPF;Q zrC&MhsEF)b1F1Gz&_KP1q47G1Vp#p>x z-e*03W-ynAQhKHZ5}zjB^!fibyEKSONkuFgpI;n9nFW_HhXbo)$Iv*bJ%%*Y9VkJ` z7DnQlD87^Jk)_gavNJ0;kMJNO1m)k0#!#k_&1)LB! z^V5eJ-)6E89m1?+^ZX~!WZM2o^G4w$H zwut~*u8o;~MRx2Zp$7W;f$~PZz-5=&tGy`Ds(g5lk>9a?E*@@q5O&wM6i`N&LjUb* z_fiV9iojX^FK@;3e=pI7z9O)EjcikcztU}}%Cr~`+(j&YKhdLg=O8{*l9Y0spKfgR+ za;)x~7yn1F%hh9H?gV+8M75b~(4R#8HEu1=UUr9zNU@W+3|KcR|21K_WJ95QZ{>Wq zgF-73Yrl-G#xmk|;(u$|KR06}Fbz%(@271YBbA2 zX^JA(4vxguR9YO1LcbznMW$e)QMRES0;#E2~ z5?gt7rVonSv>Sv6wyX?NW;aDZ#4)4-#}?Dwf1LH3kB?7JPmcfuFSfQdH8mi3ZnfX) z_I>x1lbd?JJuLg)0p^Oe*H&aLkt(PT1=pJ_HZV}gOKc;7%88O5AsES|DRj~jMAYB* zwK)PZH0Y`bo|haVC2~}cLOeHUfW_d4qC%=OTP5#7a`**YABC$(!kwg2u8CJu(|Tkq zp)?gdcN^zIMdesYLbLq$b*h5uSu6DI{-eHOnLZ+qh4tRf;$TlS!z5E;t3!_@S~JV% z(R-c}scB+}`5_}0PVRZUW2lvjSrd)sF+Nq*(VXV6GhRS_L`t}ni&`;|!|Dk+0OUvY ze4O_99_F~Y=YG**>ZizE`nWrtRJ|T7we9~pn?nPGmX|+qu!~sn zh7jK+xjd{fTav|4U6k6XyfvJ7w-KBp$o-;jP>XW&r$Gc;FH-d;H_NSCeuhp;TyEwB zB81#SC%G*DPJ=4%nR*jiDEeV%K4TY=v9t#%08PMf0@^~*0vVh$5giz;RL~%`=p;wl zWcRlS$bOTyTT0)1uYR6jUZ=BNk3bQhLW-Ck*?P$6Ku9Czga%+v{+->r;Orz6OS0f{ z-_qXOmRHy)Sq7bx@MnpwoDE0$78^tAko}vD(`Jl^P`b=-t{ksYPfAq{F_c4VO`e*; z!3cB%pZi6(Eg!eb&92EWu%m&f?95SdS6xWbg_NXHCVyf%jv~3pKihauG<=Tn%X2v= zjOVHezKf4N$2z5LBhGBvrlqdxQ=09az6BLQHyXHORtSGQliP6p_^}7>I0yD%yEqg~ z3|^IsA3!)NrMm5(B?p+QaNrTRpmknD$0mi8icjmq*W`i=fsQ=RbPvyyO^dgodsqs& zug~Mg|9)4vsGxx|rOlLf37#2Q!DU^xp^2K^hNgqa<|fRchUin~B1#=nL=os8=fY%W zYnSS*TBv%-NTvzcbDR9tAs~8Z{g1{wG?u?Cm^2@1?ssR9^X=K9@>W%c}!A|-P#vj zI~NY+np3E|_sKCguDBB^#oZfvQezl6xmwX*4?jZG1-=Dfq7C{I^225}bDa;zz7}lq zsjR~eNown*kczBZeTy%4SP-2B&&wtPjIKaPtxAgX{w$N6C__y_La3L7VyT#4bUz*DaNu?8v5mYujov|XKbg8 zxSFNPx5PGnp6+(xtXFU(7HRbzvX{n86j_Y+#l6vQrn;%Xf(wCcH+C%7SEf0^k!tn2DbxD#xdAYecLwnuvAIM;rnRfZc z%Pb$(4;;i{!%m_0a4sL5)}vRKc+Q`G$^V}96b;|E$}zqCJ5{OPZj~jIeNO$n4nV28 z(alePIDYQChM-gEbeE=eH#Atp`E+m1+cRDGXq!jUf|fzrM8lfe#~sv|y|gUB`rBAl z3$qLTbS=-b@LIp=u>-Af;p;kW&;Rw=M>C28r=>(KMou^E(MSwMzzlyq?0(`ea_Nv6 z`StoJOyUqdNdAyhaJ+3{p>xO(n>FnOawP(K6`ijhVzzQ(b-NtGvH#KOFoy`IfTq{> zS?h!As%?<#sXx69EPox6P&~5{LY~Ib{cDW{zh<_2JqsCFu0|M$_3uu}TC)T?QSWDc zeu0*!K;B4I&YN=HSzz z@eU@yzDpv=7rjc>86O{ahZ92aGsjtq3KE9qv(6?Y0xdHI?tIiD&G~J?BTLqKUm|ya>D87`whvjrvugzR8w2CfX!KfRAf>DOr!7iV9zPAy(Nj{EYHCVUu&z!F_rqi8oGi3Eh{xJnYY2?vVI~D(zye;6}V z_l-B&Cow5$P?_%Dwn~Y+awvqD2a-Z#d{XSiZ;FGMv-_u?P0LVHjb96*Kt%aEeKd|o zrki5ydcy{HI8LT;L@a27K`CM_EM4E!-fEp})`o7SZ=_0z*^M-0mNl>bbUNFu8d-7> z9lpQ4f2^C8uKLTWGsqai)R0ar+7Wzau@aq(8f)(W|8Qy!5yALC2&wZcLNv5Q=mhj4 zO`fkz5R9PbCN2J|R<0@j+})D6w>XnWHnoRkX7v2Li{8!xVvTah>DX;?PF^ZhZd2c` z4`!Rrs0eeF)c3OwRI^$yc+PtOh0v|h2vQ1FZbnrt3h#kM7m}6Zpfxy$eG*_{Chz9& z2W$`8YMhsAF1Jgw^#Y>Rbk?fe;RUK}K2j{$%asTLvVkhTw~&&d((VOyuYb`e6Yy{W zDq?)oa*;rzd~4uc3XILOr+g?ysXz6Kbc6(~&5E z%b8$^1K(@7aJ%u=!}yLsz4``vI^cdFwktAh41B#u4sMY0;l#VY?(bgiH-}pFn0DeR z52rbzAq2}D4+IuPXbJHLI~Z&l$L&#REyn5}n?HYo^4Sf}Fk-q$eOd&%do$B!8?r{1)Y&$-6aDm#n zeJN#n^+*;T2M+1U+-0rW4Fz-Rc{B89Cr1+&Yum6F{S4WkJG_Tc+9G5h}4f7&RbnMm{2 zH5qAXK|oScQX0KZC<#a}?7yS6fB+?;tBW7L4a#OH0sdW}^YJQZ8dK)1k)R2JN9bE6 z*-iR`pwZAUJnX+ojQ^|L`2YDkYvJLq+e8qK`$~TQPA6l?``^{d|FwIO2K2cr&wn?n zw>J;SBHXX#e8{`UjvxzF*{&HyiFb+vw1W|`{t{;v%D9LdK62?BgCMd*#AZ4mvqQ#?`8 z(mK@zadPpp>MBBypvpqm`3gju1x4caTm)z=2+4t(ZtD>Y-u^E_&i@QT`$iIoW>B90 zKJni3(vv(^nRhs=xfjHmUb&23BVU0n0ztYTaa_z%KCQB}0unQitB-svJ> zuYv+aywx1&fs-1H8{LMe0_v$zjsqsi7~UIH zt^34ZXmCu+%b15%wP!03$L*DlSSU#%U)J&=QnF z8i+CbEeybMv!#BgAzjoOvy6f<2b03W;(jw1=PoIikA}ZH$=|R$q#mr(y8pen6ij)X z7?O+MUfIotz{3U$2cZCGbSAp@yluft%L_(ysrEG&`v~u1rPAYKSBRgsnhI0JanMkV zJn0iyt1}kCd(Y5|6q*PTcNC72>U2yh{6vu=>Yt~X-r#u3>v_`qX)eC>Zcal(lbMyp z%F5aYeaW%sa^=hF-h(R#+S%cpzfSqnwY0Rbv$17!{`kU{pz{yhA!oQPnQ$h}og5um zBzMM=D3$)fJCkz`5!?S4K(5CaDwpT;uu`MbN}-V3>3+Qn%5-+>pNU;@$+>rFqJzFd zUFtJFR0qidPESwK(a=~}Sm?0eeeH)k@{x9(c=UGkp*?6can%R_SFis-fKbFsf8#%p z{pVcyqbUhUYeiI`v5El2EaL5h&pR6TA0BA^xZ~XorT3+Vt+aRiNP)oE` z?s9c*G(?(hbx_Lib3~7K^jjQ>R#d2==%KWsDS7~?g#&x{kM;w d7|O?2G0l^w0ClT)&|h`Hq{QS!YlRI1{|Bl6g}eX& literal 0 HcmV?d00001 From 703ea41df35b5ee579e57c2b86ffdd14df20d260 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 11 Apr 2018 14:59:19 -0700 Subject: [PATCH 06/20] cropped image --- .../images/robocopy-s-mode.png | Bin 13301 -> 10160 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png b/windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png index 3b81bebd76bf6e906ce24b3e4f19b1d6ae5a2520..15df1b540e368d65e7fe77d94d60b0d96e77aff0 100644 GIT binary patch literal 10160 zcmb_?1yEdFw`IrB27*f<1oz)afA=x7%Cn@XfK}=PuQuuQhoyT^i%6V z%W0$!ag~Dr@95j=XqpJN(09k^8MCK>?jnu{H{VDoe+C;MeX}sq@Ansd-8Q>7?|VI0 zA?^0XB_)3@FXEXwy76-5SZIH)3)7RNPBqj z{)qfC^?yB-*!4G*C;mV{Y;)s{Q!U5sORFl$AR(ZWOl16JO|Kjg0AG<}*#Z9I{?Jzd z;s7{4Cqh7+A27VWo5g_=AK9+KkX$#zH+Z*GGh$G5{1W_^v%O;66B z9}~`x(mV)#x&|L~9l1O6N0-iU!ssAHwGH~cz~Jh6R9YOs2J+Yl(e<-zl|@Z*+$4|L zH1_eLb_h)c{{iyb$A-~yL0>9jyAJRlLM=|FMpymKt`GSKN0oi-Q%ZUyGHy*(6D|=P zM7BEfnz(b4^-19-bbdVuoIn6zZU=X)Fc~x1F*$2%SkA5P8sYQh+p3W(=rL*w!kZDh zwA;fzc6$SX4ZPzEc1;BP^tkrtTn3(B*-1%s@g=o~6}H7%*0}~YM{3%#pkH!an$viB z53$myso$c9t@1zjU)SXz{6= z;avW~g+slrJSl-o-FB-PYu})`KG(c~7}nAxQMxkX_~~y_ZF+wqff}h?W7-%m@9*9O zOWiaH^Gsv_OTX4|T9x2U|73gDpFdN)9@2bbDR<;6iync~MQ%!2zvI|%b7{7>w9`m^ zW;3?NTWzBU4!J&a$?Ai>$#KMGZ>`!V!Aqy+9v>wVXOY}kNpk7pU#a;;#qZHHrpH>y zjt$6qMn0`lQ3-_1ls}X>Rzl>*Bz)w`d&C5V^%j*$U=KXh@_6rk2 zvsy|hMdgeiWMr8NJ^)ypFD6E2zCgqzVTrKi$l8y77M^x<%)$?Mq-(c#9gn9EejfMT zYaK49MSeGh>ti549lu*?m&44g-H4h8ZEbT$srg4WTu!s*B3WCVhW=umr?KGp)*!W$ zI*vh*`qhpC*DlN5z(8;I{^FfNzWFWVa;ujUsI@6g(nn@mX7xrOhL&!vsY5Y5v*r~b zB=mH#L*ZpA>?xE?9b^m($JvK*b}}h=<`S*iaa4UE z$`ttab)gEqUBi;<3zQkk{~$!TXCUpJX9NIJ2L~O^n-*S>Y3B8RLAckOK)|2(pCAB0 zD1i43famRhf}!XG{hz(rGRJ=~GP*>qXv*MW5E&4A_D5O~0FZw5U#$NtbpCHT{(mzi zh=aa+{cS?%zIJybL_CxzJsrKa)_Zb`-}mX^wz9HPnU)qRm2fAg38b2}CI8H;j65{% zm>7FcE=ix^|JIgOkWQ9Yt;DH06u?v{(bWxBLcrtzsd2hF+^J0PxJau!ARyd zv+l*MVlDCQ`bG>o2giZ+@^e>Lzp#(<&(re>VPVf&_;OR#XM^U0>-)eiLt3103G%;R z-6^YX7+0i9!kSS^+#_OwiAv8TmrrE-SoI9FHPlp6pjR>6idG{s1Q`yg7pnc|XM}Ok zrhFN@)%+$@Jku=&$EFq4bQ*%_i~D>2$}9bc!j)qT41@yT4vs$O)lp=6U zgRf)puE@qyVAQ?v{RJ#5%dQzM;-K?8t^NUS&dh+U?JJXk6L_RXx@MK@&0`?UT(_Zo z=gMp(WljI$uzSf)r{HdieTH}AxWm5U{`En zR+`tw!-p6W%l5CQxr408wO>+psOQ#&x}HmlQg?8H=Sh=FeM3#vyaURWa_a9A)kn3oWx0+>bWo&O&!mQTb5#lD zBI&=|P%}jZJmf7IgVAs+getnlEMzxvCJ))-KVkdSq?UW^OYqP9jH1q%W$|2y?PEbV zVJRUS8E7uxl4C7Pjn84_rJ)Za>v8zTyoe>v(A(bLzO}X0+}w6~=~BU@aNK_V#C>?! zrOfjl1q~tasY^uo-u|b3=i18J+U$~FFl9MxdmohILo-2acggAfu&Z6^!#+( z^0~p_c0;E_*cV!bB^^}1U@BU#Jc+n#(7bl;zLso^87`L_Wa_MPSIbBXArY<^2UUcN zC=9LuMfI>|6W&Ehe)m?$FbQByHY2xDNh|i%C_tisrRA%V<>6Ta_Z-=B3zK>rh|2n; z=A~snH%B+oQB!E75sb`=p)}XjvVdM}YGw+iW|bp2n$v#VN?u2@q7l}WZzSiUW;pBR zZi2D;*g}+Nky>CdLl*a^?pqAu>5JnA}l`-9p>Uf zz+P*Ho?x(4Gyh0JR?^?0A(@FGx$N{5e#lkiyYsEjbb|)%2lY)(=G&WF!2#bYD_1S2 z3x_2sL#OI+Ia}Z#Mvi)PvS{H_duu7TfvFFrMGQnScRR^bo?7jp@69-uO@rfKZg=#C zDM32X-^MDXdrH3)Kv!GR#6IC5#o=|1Ei+qMMyi$JIZBNxGrhGqZ1hnk zTpx#2R58VEExp&d=W2x*!>ae4IU~E+uuaadXSg&3#xml+8$oqpM%akcL~P|c!{2q} z)+^a5xs}-L7Ls6YPdDRpez%wK5zQm*y3!v%{wy~+4MdaVrGdfe89#POo=Gup*GT=e@*$OsQd94TvS^RtT?Sy^2m8N31|8{P+9 z7ag5Tr%(k&#(m#+w^!YZ)G?^{Kq{uO{t?Qf3HxVPLfK0m*OA%lp+N$3P{R247Q30W zpPa-}ebmZ22g8fsFoa6IHhwKVJM1J(2-(>Rx^9i8iFODx%4Rv=W$Vn=eC0VS!X_!= zN9e{pqyXJ&3ukl{G)?V1f7Y~D!U!`o{NctzAft5swJJZZqfobWrL{?8szlr5@S`uy zI=7aq(g?E_{cP;s=>i$sOl^B!)LEXbMzf8a1eDx8QQ(>K*1b}yN%DiNa%GOvMQXBG ze}7a)Q{1AvDNc{Ye{8qF(EIUd7wV9$Dmv!qp~aR)t+cqAW3G(X8LTrz>Bit5Ot#2y zssg5=o=PZu6csLb5n9`XU(@5X{E?2GJ;85U%(19R(0LRmLiRTzP1R_2mRD|D%E*Vu z>}Lv71@xcHkPD0(y3nr{EMp1@_0GIpmcN$0EEUF7A8UTN?@op;dM~s%SY~=7(yeSQ zk%wtJj+%hdWzTP6aM&o1<=Btg+=IuH$pY7H#?w-1mC%vKl^4$o)=oxEJHJ5VDG#Ds z(a==siNXNEoBIm8S-`{D%sK{Wrys1r*^Q8ae4Y_`Abd-cbB5`Q;}#*zEDJhUr^B}U z-f4YKS)3bPq0H8afKo*Gx2=YJ46AJS2m}YyAYK`ws`21?&)o9yF6Cegmtp+Db1&P? z#r5JBJsUGOtPS=Y&3|;#sAt1PEt%zaKT>dB=sUf5pM9Jvoi?p2kIA}w5`5IX=%F6F zcIq< zwbZV6F+`&PGarMpnW?(DO=L4cA9o=Jt3UsQjAqygyB4m@uO|FGl^+_viFVtHbIL@s zO)1=R=X!!aST1I5p$ak|3iI=_w;kwAAGNX`uO}VlF-f1}kG8n~T{z&4NMY1w90maV zjYJ!??yTKhx8$76%oK;mhjW|0*elt)xiwG*-`(8{e&m+)_4?~_zr-hG)8@StuuB=) zFq)y-MDORQvDNdueR3S5`}_2?>B}uU$Ues(h<;Hm9wtY3LmP1oXiG_wn2j|6$ zqIfwzvZ@Q2)J-c#-y@iC5fKq-;Q1K93y8VtRBI&-<>MJ*!*h=tD!ZWF6(bY*6_OEvr(8xS|ujk9o;Ox~l9v*^R;Qjq$Q$|#FT)07-Gr0ufeFr;e$OP`2k^-CGF_?vCr~6p5vzhvFG`tN=6lmmV8p5|z@DFLx1-k5^8YxP8yNi|h|t zy>I-V_p#rkOoTo>CI&6j4T;E*Bj-H_V19Ob5X}Ukyc4f1FK1K%uqc;4=|}wOpvE-t zhD#qf^*xk^AU8&h-^|G|tf-4u-^V6YGe9V%pPpXDj7Ua|iF69H{1NtTJuIsl&xc(3 zyf{7`!jC(`ZOUKnH2vcKqLA=A8$M_K=5~8(&bexUWC-o>IOOj?q=^_{gk|tKfUX;5 z@Zkoi08nd0MAF)9-C>DdvsnaX`!_}DyEOrSvbZ4TRR6HB!$rb15Cv8tT?zv~js0A? z_DF;#PRc{kbo=V_>D2S%n7x6Y@AUJ-W?rH8wBGe2yy4@+Q6?N?rNa?Uvbb9bf-FT7 zyFagJy0$()yK;0q&y_Hv>+yI%>2!E_%+5^X?oW)|3}J${n_s{O)#E=ZH!iNfauR3S zwt6Sp0G07x|LtaPST&%saw8&qa$*u9Gr6mCSLjk@)j21z)dj!jd_^d?6{7f~SB`xK z*z^IG&dq6ul}UvjV)Z>Jtif^JuD>5;b85HBp@?XVR#kh3%rk~$3nwWQx={L*%Xh~@ zKw&d6-fiSZdol*MpVE!L-g@vjuYBJ5)3x?^O7KX)bjK-M80zoQF3scQD(7 zpTZIZqewsUU3sV}4Wz(|LXKMYuUz)qpF7`NGeL!08a5u{VuVtKpZggyeR!K>Z?#~j zC+jJU80C19ivK5-}-9Pu=GvzP0#Ib&h%OQyMmO)uAMrHo%$3VMR`G8z+Tx_mb@)MSi$6 z`%>`!7WxIulC_Y;-mv6zR0iYrz{khMC9x5>c{rc&yIX{CJM?c^F?$D25cE6{G z)@8y>&8qNa>7bf#VGdPT;PTlW1R^J8Q-8F{o29hk#To+(XX5DVF|tHg|mhP^-RWD z{i|FYt^`{1Wc9czFJW@MJZe97i{n+>v9S9V$Y3On+4s5Mk5Rj3b6fcNwxVH`2>5pH zacoUpT|G87ZX!$2%X}==VIUlr-FzG>Xx*Rbw(4=d9xyab<9B&^t7)+GIDFLnh!~T} z3w(#1d!|nJw|5=;9y|1sASIgRQiW31Ho>$VZOPTQQ zqd!|-rLl&z4I1fhPyO;(>`+Z0YB(7>@Sn5!Ms7rc@|;}Bw(4_VHw|D8dG246k)}t- z_`gL=_ng(q{q1StKA&Z}Ca)Emk%^^zwKe-GzBx(Fn{nUpwS9%%Jl%P1p$Rg^WIuX~ zWAgiSTfJ8IIJ@k$v@}9OLQ1E!#e+$LmD%&Nv$ON_6eb z7S-VgV&X(60@jc=xn9Q@+iyLZ5rtl*KMTZ`1@(8p(TjNfg%E8#l`OtO+<#Us*p-j=cd!AY}@y+0!`ue z?xnfk>KOIyN(3VZ-e?z;pW4zTFQCcw84}>%l1@dH^Rv=fEM+0zLJT%6CHLvQA{c#3rCQI(YG#Xw zL<(0t_<4_Domv?oS{7KQ%QeJQtuzOfI=_;M!jnvOu7$f_xzhdpSCd%N1Zk? z(*;ZWHJU6rXUu4!V;RItZ)@n%Xhlsl7;{+CZZN)$kB^f+orG4k-<9%g{URfzlOv9a zhA!&c;4yQ_H++b>lQ7(Hni@$gu#c!cHEKtwsJaL*qKM<$<*jD4U3Pb7YEb8}TNX&4 zczq+A<5V(!xD?F|!nKCa0<+f|zNe?CA8#t@sppkImR5g^TWfFB^we%gFc)(LqN`^@czRAF@a0rm;RRA*9yIZwsq~zmkxkaSn5FgFmmPd0k%ZEQSZekj zX5SF@SAjnf$`Q0(S{TTps3A^TJGp~vJ6aq0lLm5YJsdIX^|r`X$#!EZU?GH!P>n#p zg9f{q7x!!;D*qt^m8#&$Iov97DW#XR2kYVUKxAQ-Gg;D%glzaD(8H?4^?VCFwAv|i zf$TppMdOY?Md{!f5q_vDFpufKy=5$`IgmD?*{K#V zlb@EcSnP4NCS@4ivqY)Tw4hG@BgZnvWKJL*Bi=%xMi?~QI+yx|L!7vlx;UK699&4| zOoMJ?RzZ)$ubkz%+x?q@t1S?ytsaOqw-h275c7KT*55mS3^=2;HI(hc#&OAcN;#ZHSVDD@-|V_rnzP<(McGoqn<`CcW%q&ulRh|xqsphoL-NMRHKmB* zp_MpH`W5vy>U!!etD+^)K{?U_1}V<|Mr^6<9eD|qirhO-tFH;Gx$yT1MjV9|TS@UT zwR2qNngm>U^7mDd1>MOI$_yUF;yex>IaEEFMB9hkWGQ;RS6ly z`2%!k9v+m)&JrE@^n(PA_rq}2>&{q96VgQw>k;?_;wza~s_ws{z3=<)K(SP007r6W9_(zC^y%Z~v21 z{Wmc{e52A?V>Ti|`&mIjf&48%#)0^LhWXK%&kkY{Buv(IAx~HK3 zr=LE)mnaoC?)^C*kb&XbVeM%~_VT!_qb5V|kVXWNEabJ*CkQduU@Mc-BxMpz?YA`~ zbW+O({g;GYm;o{Goo0YWC~L>wI`ANeGQ}2O&uQn{(W3*cd!T@Qdz>Izd)4 z8~>q5Di8ZUM%GLeQyPH@#-6p^QEL%qW!@v8jbZ8qX79XoG!S3NMlSd zwE9zD_fpl(K(qGTF<6?hhFDZZB@Rg&8*b8cYOW_aQ+Wnv`K=cxMT;-y% z@$Opj*{r&w7QeDGiLro*lUe{DcLIAcPA3s{XsQY*mPg0L|6P(Pxt?=}WJ{dr5b-Z$ zG8X;~t#)OV=VU2g5Y5ar)>M>+kU8RH>Rm=&>&Vp2(Nk)J2pCfh4W?eVzv!i8vPL11 z)!KQtG6q+wZfLKoPP2MQxz?Ib{$7IY60i&6&10KvTbfKI^RQxOCsy62UBq%wOhAD% zulnIUD3NN&mBwqc%8QrKsL)-_u040IY z+NS;I)RuCXD{S%2JXS1wz{+duVP}(E+x@xJQzLI?qlXj_wP#F@kHxR4U<+si5@RW5 zW@*0n_7mTb`%B8EUcY^c_8&TNJ7v-*8ukxoC<1D@Eu~_e-*yvkJ|6xTXK0(9 zjOWeU={)(TD#tA%LW`ERU z(nXoTf&MDyweU!Vq0-)jc9h5KmT$QKf`V8$kn}}SLj3=oCj6H}{eRZ$`zo|{&&yKc zmlR;4$=*!K1^$bB{~yYa|Fa(cF9!R!Dc8Irk=pZaE0SKB?&G2^X86`iB#oJ4o#b`g zrWpkM;k51??Xx*nM+T97 z*jgwy;R@2%J&%v%v9OsSsWXa-i39$z#Rl^U`i;x$)r7LE@6GPSd;p^1p ztLY*?sy44f{UJ$X;DJ}+B_Z*UL%aZ>_2;X_l3lddqYuWzQe1AEA((N^evnzGp z;%&Uu>Op8^(-KgBfi;cOZod4vym_&#UKuwUL45CYRi|Z6u-{(4d{#-QM8ND9(=fbV zrFKeYRoJmA_5-ZYdqQMfHG%w?98;Bdlb`POgiu+et+er!YyS%KiP`)v$-Zk_vBi82 z#OHdXUflRf4xiQ_(5dlHge0#?XnvtQCc0otco~{PUtP<5j>d77`$n;)4fTj&nF_VO z+ggX+yiP04s#jT^%nKxzu8|lQeyTq+9f@+r+Fwr%Xn}8Au+3< zmuU(Qb$C|ECO)rT?-@8!=_ohSNOAtegsv+>>nHnVfgU5on?3 z#6uGAS#TvxcbNnR8!S%XAZOUlh4CWCZlP|0cAHpIs!Lw!J996sVvcgtKd(2d3dMBil`YW|y zo{$|o!i!S?o7p_VS3HjW_;(-h^k=j7R9v1Y#U^}9Kr*kMy#z1H;H1$RL$AP1Q;6a; zcygmXz#Yau$>6A3876-N&o8BOQN{~AAWLyT8ocJ16&A$eS*W?l_pTjTr ztoN@PP^*Ic%#)hxj3!!8>A^WD#zZ_Qe(_qU|69e^YoSGXBKJ#Vp+$~&**5)TP1!bL zhv|9@3mym&@0Ppm2B?(-WU6rrZ%M}XTu OEwYk|5|v_x0sjL|e4yk2 literal 13301 zcmch;Rd5_Zuq`NABW4B*M$9aWnVFdxEwGrGnVFf%0*jg1k}PJ)VrG8hd-v_$z46}u z?8Zh+S5MbeRd;1~pOcw&CPGnO0uc@m4h#$oQA$!&84L`(2DCxLd;!%Y{){~W?ZBOs zC4|9hr}2+L2LKBpIUz8xhB){)BS_FOtb?SM6BroMz`qTA#J=1V42(5WN>oVIUH?1> z-ca>E=W<4t;u1`16asLN;t#tWNGurIf}zw3`yE?n>fEz+w|%YtT#x*hjD1H`6Ko{QLLsbWoR3PKkE;LJerzX&)`$zjQKRsg;xx z#7!h6VV;T7@rm5Z8mM`A!k$5=jdltx3Ob~j{#-P8$DFC+^lEwgJEdc@^Z_}ea)N}7 zU%6u??)}#!jv;mr*EV0#qq7CO#(rAFqsrn3M9KZxntcuyuSPTwrqEDyD@*EAYi#EP zD>tEj&6fSELe!*oj)aFL5~^S#UW5A3NNZ}I?E$XzM#g;QH0abv!$C;;-QLfm38WS? zxy|sdr8#veTb|A;b_Bl5x?T!oW{>-7q_Xh zsd_sqdWnu+DaHr{`cC|*(b4J`;a$dF!fAgD8a?yWyblctdH-uab%lIJEI!~AM;8cr zQ$@bCbFZOb)>r6mXy~8f7}u#;TR^L;xiri-C>wd}n=cp!VB*PzE1t~cD=Te@rO>Hc zfN?UH=B}vCo^@b7EPh(}U_25ot z9ko!;I>v2Q4q4Kr%pU$i~fMQ9{9t3P6AgVj#fS>+I|tVcDx7x4SMP>n7=U zP8YKgh98Y7=g}UV$|haVt>Dqw93P4*s?|l$u?yx}h}o4+K?Php@gC&^j<)ZP=PCZ= zWGHG7s_0BCr^`Mt($)>IMAK|ZfK||*qKhDU9z^RQ`cBhQ(M$;SM|9z zUR-Z;%J|7+C`UWn{C6jn6D#VP+`3OE)@EI+iYQCvRy|-oQ0vP{MBZK##h-Frbi`Ir zeWr?2xbt2;P|qin!9k)u0J;h$5P(D2E%AQQaXCCRw9)P&^Ne`%@$mtA^nE{`u_GcP zY?f-}BqhO$%zyM0-=Fc=x2}Kk=|Yi8`lF-u_b}}VLB|pDd0woybzFA8W^KJu{A6Qe z)9vycvTk;EacOOBb#r@6pZc4ejM4H9Y@z;QZ_9Tf^ZBS1duI^^0Q+5*0$t|Uyionw z>U|WC8(vZ(8i$>CC@wP52aG;3S#@0%M5IF7uj%}C{67I^ntqB$|SjqsM(y(P3QveXuJqi8pJ36vVb(j?@ zag?%3b?|fZYDW3vg>G8)J z1^kncr0cAE(c^#9?F6fWo{rI9ff2w?`5f*Pon<00j2QA{;lBVCKH89yofPtH!yzl5 zf3ty+g0`4U@1s9M26Kd}OAMw)N1*V?_s5C~>0*KJ<-?FvBL+b;eIk|=+^Bwuj;YlV zkahq~x;J2q=*j}}DV!7ZN@cChlr#jlAX$Gw%J&aSj^-n{*SRo*1ex{?6$>X3@Cs3X zKu?x_qSXC1P|9~u_+vcpbC1=^;N$yiMibHZr?Nu31tCylyfkhY!A$b+EsP&mXV5C_ zpL-BeH-$KXeW1td!0$+mKon)LF2PxGulr3F03H?%14AN606NPTaJLysaB=|s{)1b60N{K zc4pu}4XDva-0LYB+l$F6r8ZEEG4EILjPWI2{kO;E*aa7&U+dRGE{B`&1YXlE=iD0) z^NB6CBWr%ztJk;lIX(Pq&ufhB{FSFWL!hz6L;DP=7#R<7Aq|teNs1y`kRtnAx3AA< z_~QrZlf8QG>%LAVZ5(g=4{dH*^lX^fUNkJUx;-G?tP%-{>`)h+p{8|Jb20%cbrK6ghXPH+w6wJTMAmUi5u5hGWV!3ZyIq5D zj7UK#yHS1_U^HuNb8&Rss%btVVYZ2G51+NLj_uJ+eK&7IEK!TY-+}8{%1_2jQ9WYZ zL#ch52tU`mFix-P9cKt@VhboXQ-O>Ig7BfdOHm-%Z!s8$Gr zdV<}9Y|`|sDFcfB{WhtHv32$Pl#eWH#`zy#Ho#-7`@c7gwhwnEF(jQ zvA4n3c{J=Y@=1l5oN-j+T73sXtG#IV}nuD%w=Ua$>`*m$8~E`#hRVO%}lM4!{uWAQL3qpZu8Y$ zRCQno@wDUUlRSN4fKIO!YOrG`TC=d}tT*Q-U{1nu%j%UKl@dK5h$OGfG>1CIA{3l9N5VH|TCYPY`*2qr{*6^Q z_t(;0&};vPht}Zdv*+DqH}lT9gt37(-*J?Yw?q4G7U@tU)3|0iLwk}e?4AJDPj4Z5YV zH`)13f)7+7n*stj1mPW3y`M4Mx;`PcT5S=~Ad z>voZOm~%v^1tmd19Gx3DM+}R}O1E>z#G&LictFc4Mnxr^QI(aWXF>)>`TIuEjzWmT zdlWE;noO_3-m9d;a#qYw5J3pr$`m%;$v{A#j1xKnCJ+JnJ_I#Knd)@gOgcrfSyE08 z(F@Yr#^&_oq*k}Bf5OrTC3x}}HFfjDG>M5%H67PnA*Q}eV)Y`b(R@%dO`+b~YZ=gin7T%e+qai-NM6EVwOZ#z;e$(X zL_d;Xa^0736f8w4XTiC`c7a`&q=h#~9rkg^f|B)q)qzMo-ZgI1$ygfakE7S0HL z#)jB$WYxO)w-_)W2Qe8e${GDnKtMouclV-KjNQcm+{ZR-9dDhOq-3}Z2+{%9d?;!4 z!H-KrU<-s;SXdWW7$7njhUK3F?N9{1xS$Bd8$$m_IZ}i~I35=h6BQ*RDVfes8J%OQee4%w-}{O0nb8&%MMI6HnCk2|dB2Dv&P zMwrsosaFzb=(IzbbMGJ4VA)Nr?@{)4cux3*sT^^LmtZ?O z25Hmk*T$b!&yE6+*V$U+l;2R%_2DX_rY3jr%&3sZt)%SObobPdRFap&t@Sd5ZJ_&0 z(c|`SOzCjx$A@p!P=D^v?>|?zQ#3f7LD+W4wib00Tuq=xrk0r3--<}&_r`=_KT17H zdo%qsk|~HcA&HaoK6_ddeJ}!=%q(!Z$b>>RhnbYuJdl`7lqr*r-OJw3UPi}lAm{Ig z@0!2Z(K+_ZOHEFWUQ7&qbF&76Ubk~;=b7m7byCTQfWWJVh6W}6lZVS__^7nZ0re+k z{BU42p-FyFJ(Zn}&G99Xq;z^GnaOqHLnZPAF#Jk(NBy4tdSwC zYcnbh#O-VqV6vUGT6&dpDx{?j&$FZ64K!_72ahxCcV!>$Ohr56wSE4HA?iw3a(r%J zD#4M}+v9QqIQf6i7-mM>WnH%x(uTBv@bSrID0L|(&ai*k(A;@ z%8fUYja9lDsPB-wgpgtu+f^19hVM%yo=~`VWe&^^{cMsP_4CX@ihg-u&~k~> zSvllBhGG)!V58zshYK`(NWSE$-5Ti+Fno#(jwz+&Me~E&lCu6gHX-(d8k4=m&^@>q zS8`P+;h0X!%o=|seEf#F7>ouCriFy|k$1yyuOgAR;XYuF|e3F=|Us>IlC{-_^vE0y!4KzfL!Vh&^tX8g-y)P zh9?3hR6qX-_DUqbRljN*&y0siEM7!Ch=YfQhJ}X*{@LG8GBD6DM=@dO7d|(;wKYGt zNq~nZu5*R8lI51Y*7CF6^RUGU&kNwOCAthA)0lOx_<}2~rOCMuvycac?};n*NaeYv zHa#|q^H;KKI=pQ9FnWy;smNr{l8%3=4}C-)vrEJG=>3K@FR$DAc(>VR3F_t5Hqa0* z4{`J(IJWOMoZRgA1}Il!%Dj!h}t6^%N#t zt34wI28*WluROxnBjOxBFE;%DI7Y-To*m$1u}F|sg?=h>n!KJYq70#xD+TBEi>>&6^7^YTDY z#3wiW(H`08S$7TMRZ6+cLHLfpX>)pMX~dq(z2oEU&VzSNk-%Abp`b%E~;43)jQIeVii^Kfh0CBEnpLdXF2?J#1`y zzK3%OO>}*LYnIPxF_6G-dxhyukTGIXK)T z8h;$L909BoKNXC?r-QxhxnPf3zJ0GXfu-$vqqfnH@Aj7j0BWcb`WmYUIF7~UJEm(0 zYKjxfp9a6?pU3BDRWoX^3WtK&2+#7^U1+MdvU*vBx`hLuf_Klep3vMydyRj8h3D>y zc68e8SLon_0^R!o69g$GH@7Wzt^SvqAoi$5G*rSr%j!otvk_d`6c4 z)#LmQcYffIuG_t)t+I`F(liqT_aS9r@Rnmurt+&vk!)7CtAcKE#jfj8)kvKJ0`gQF zhu!lAGh$5+HVtF(WcnY6SL2)Hrn@_~O(;-mVm1JRRpyD8kPQbBbqAe8?N{7E|p~+I5moE5FA*;#AY9(d;Nak8L{l~Ro&DhQ+3xPm zt9pkHptDv;8j;@H%$6>S9USo?{P~wobH?l!WaQ%9ww075esU*sZ*SG*kkAW*oL}!j zYF4S>w5rQ%YeWPD162|z09@SeC83TVy~Y8CvxYwrkr0Fnw~Tpy?7Hjeo%f#82AxmU z|As;ZNPNW+mZLk@AIms7om`@`G z);(PW?5VfJWY;-8)}TX9r@W%HX($(&{BDQOXY93ffyR~dt_@Pp@-eKR`Lb%xsy${U zemZrU<9BO%QT!|X=LkR7)vEp0>%EM{mRHyDdc=p$Hy^qCKOg#3UoI4jXK4H%`UIkK zPKpTh0YQe%nuw^VsGZ=VVl8**LjE8A5q`HBe@7Qrliw15xVu$0oTsd}mp<*vb$!9j zI|UwT`q}4=8Tz|iZyWj<7NL!s80_)(Ri5 z@}Uidi>Ck7jm*M-?ZYd1$!5|j6mJn89VsO(JwB3q8OzY;eMiQ3A&wRuPu!4~c zX0$!;4B_RkZdYt~$Q2o7O&(WE0t*>3lEhTzFkU3ATqA*t`l`CI4av7f9MfI_Jz-Qc zQ1t?(*qD&!I0rqVqk&2p#;s|j@qW0WRGOgF|9G80^~au|bKZHx5=Hs2R5r_XsUnH; z^Jzrj;o+fL_j&QEewNxz&fqq!EsB*WIzpzR;*{pS>1`L=Opm^KtlVMIc!Y+omH7B65B!2?r^W4Y`03$+Zm*^dBA2FW-9?#o?d$O8@n^aoLP$ur*i6kC!qxALyju+i+Y-$C3)dJ`rJIyUkzxl;7w{ zN%u^T$MW9xDJ=v(y)QaF3Q$pFBpgTbf$5MM!9^?Q%Kw zZu=w*y1O1{8;VMnP8lT9JwMO7GvfGK9&)`dA|m8LD>Hk|aWL22f+sp)eeI2c4Pj`| zN&=(Z=N}A0%FX-i03S904+&z)$AK^;=wv=sFI8+9E$?)@ zwflXvd9`x<*5Ko~>v4X5-oSk)T&Jvr6U&P=tS zmywc_lasQtv%9#wwD=Z{f!zugh|D618iCtnuLh7NC7dKaEA%5!+_IIL=?Zn;42Y!j zR^#wd7Tz~knWp&B2Kxb-#eSU>lsj9k>xEWc$=AofAJ5-v&!ZQv!YG(4f{QH1o4!0V9@>e@Q4#(0gfi77Y6A>guY#o@sXEO49KKc{e;g zJv})&nOr7y-DOEHCnpC*Qh0xPe%|T*#RX+5AOKu_AY5tVOL(2^SWd}Nzxu7Zn5o*{ z!yhT&7kM|G-`1m68cSZ#GzxBwBt*S*L&7oD5G9Zqly_T7k-pP1&tci++5tF^oHGT{ z6C~}k7f{twVUA&JkG;BFdXzu<)rgw>HwJgi?J~{yE@Z;(ub(fY_#BUB3o2B~0&DyD z!TLcwZp((ZwzgIvCKLxGYdW|>L4R8pUY$vh@tvIosa3RLuL<#&gFX< zA9{K73z992e3+l`?PaM4$rzi6hzJ`S8x<9t&tw-q%a}SpG~cHlE|=M4IP;rLukCm; zbrPk*gBxlvGR!6x^;N(SB4jx`6D3n%Ffv7S;;emkwy``fkoV@s{lPF;Q zrC&MhsEF)b1F1Gz&_KP1q47G1Vp#p>x z-e*03W-ynAQhKHZ5}zjB^!fibyEKSONkuFgpI;n9nFW_HhXbo)$Iv*bJ%%*Y9VkJ` z7DnQlD87^Jk)_gavNJ0;kMJNO1m)k0#!#k_&1)LB! z^V5eJ-)6E89m1?+^ZX~!WZM2o^G4w$H zwut~*u8o;~MRx2Zp$7W;f$~PZz-5=&tGy`Ds(g5lk>9a?E*@@q5O&wM6i`N&LjUb* z_fiV9iojX^FK@;3e=pI7z9O)EjcikcztU}}%Cr~`+(j&YKhdLg=O8{*l9Y0spKfgR+ za;)x~7yn1F%hh9H?gV+8M75b~(4R#8HEu1=UUr9zNU@W+3|KcR|21K_WJ95QZ{>Wq zgF-73Yrl-G#xmk|;(u$|KR06}Fbz%(@271YBbA2 zX^JA(4vxguR9YO1LcbznMW$e)QMRES0;#E2~ z5?gt7rVonSv>Sv6wyX?NW;aDZ#4)4-#}?Dwf1LH3kB?7JPmcfuFSfQdH8mi3ZnfX) z_I>x1lbd?JJuLg)0p^Oe*H&aLkt(PT1=pJ_HZV}gOKc;7%88O5AsES|DRj~jMAYB* zwK)PZH0Y`bo|haVC2~}cLOeHUfW_d4qC%=OTP5#7a`**YABC$(!kwg2u8CJu(|Tkq zp)?gdcN^zIMdesYLbLq$b*h5uSu6DI{-eHOnLZ+qh4tRf;$TlS!z5E;t3!_@S~JV% z(R-c}scB+}`5_}0PVRZUW2lvjSrd)sF+Nq*(VXV6GhRS_L`t}ni&`;|!|Dk+0OUvY ze4O_99_F~Y=YG**>ZizE`nWrtRJ|T7we9~pn?nPGmX|+qu!~sn zh7jK+xjd{fTav|4U6k6XyfvJ7w-KBp$o-;jP>XW&r$Gc;FH-d;H_NSCeuhp;TyEwB zB81#SC%G*DPJ=4%nR*jiDEeV%K4TY=v9t#%08PMf0@^~*0vVh$5giz;RL~%`=p;wl zWcRlS$bOTyTT0)1uYR6jUZ=BNk3bQhLW-Ck*?P$6Ku9Czga%+v{+->r;Orz6OS0f{ z-_qXOmRHy)Sq7bx@MnpwoDE0$78^tAko}vD(`Jl^P`b=-t{ksYPfAq{F_c4VO`e*; z!3cB%pZi6(Eg!eb&92EWu%m&f?95SdS6xWbg_NXHCVyf%jv~3pKihauG<=Tn%X2v= zjOVHezKf4N$2z5LBhGBvrlqdxQ=09az6BLQHyXHORtSGQliP6p_^}7>I0yD%yEqg~ z3|^IsA3!)NrMm5(B?p+QaNrTRpmknD$0mi8icjmq*W`i=fsQ=RbPvyyO^dgodsqs& zug~Mg|9)4vsGxx|rOlLf37#2Q!DU^xp^2K^hNgqa<|fRchUin~B1#=nL=os8=fY%W zYnSS*TBv%-NTvzcbDR9tAs~8Z{g1{wG?u?Cm^2@1?ssR9^X=K9@>W%c}!A|-P#vj zI~NY+np3E|_sKCguDBB^#oZfvQezl6xmwX*4?jZG1-=Dfq7C{I^225}bDa;zz7}lq zsjR~eNown*kczBZeTy%4SP-2B&&wtPjIKaPtxAgX{w$N6C__y_La3L7VyT#4bUz*DaNu?8v5mYujov|XKbg8 zxSFNPx5PGnp6+(xtXFU(7HRbzvX{n86j_Y+#l6vQrn;%Xf(wCcH+C%7SEf0^k!tn2DbxD#xdAYecLwnuvAIM;rnRfZc z%Pb$(4;;i{!%m_0a4sL5)}vRKc+Q`G$^V}96b;|E$}zqCJ5{OPZj~jIeNO$n4nV28 z(alePIDYQChM-gEbeE=eH#Atp`E+m1+cRDGXq!jUf|fzrM8lfe#~sv|y|gUB`rBAl z3$qLTbS=-b@LIp=u>-Af;p;kW&;Rw=M>C28r=>(KMou^E(MSwMzzlyq?0(`ea_Nv6 z`StoJOyUqdNdAyhaJ+3{p>xO(n>FnOawP(K6`ijhVzzQ(b-NtGvH#KOFoy`IfTq{> zS?h!As%?<#sXx69EPox6P&~5{LY~Ib{cDW{zh<_2JqsCFu0|M$_3uu}TC)T?QSWDc zeu0*!K;B4I&YN=HSzz z@eU@yzDpv=7rjc>86O{ahZ92aGsjtq3KE9qv(6?Y0xdHI?tIiD&G~J?BTLqKUm|ya>D87`whvjrvugzR8w2CfX!KfRAf>DOr!7iV9zPAy(Nj{EYHCVUu&z!F_rqi8oGi3Eh{xJnYY2?vVI~D(zye;6}V z_l-B&Cow5$P?_%Dwn~Y+awvqD2a-Z#d{XSiZ;FGMv-_u?P0LVHjb96*Kt%aEeKd|o zrki5ydcy{HI8LT;L@a27K`CM_EM4E!-fEp})`o7SZ=_0z*^M-0mNl>bbUNFu8d-7> z9lpQ4f2^C8uKLTWGsqai)R0ar+7Wzau@aq(8f)(W|8Qy!5yALC2&wZcLNv5Q=mhj4 zO`fkz5R9PbCN2J|R<0@j+})D6w>XnWHnoRkX7v2Li{8!xVvTah>DX;?PF^ZhZd2c` z4`!Rrs0eeF)c3OwRI^$yc+PtOh0v|h2vQ1FZbnrt3h#kM7m}6Zpfxy$eG*_{Chz9& z2W$`8YMhsAF1Jgw^#Y>Rbk?fe;RUK}K2j{$%asTLvVkhTw~&&d((VOyuYb`e6Yy{W zDq?)oa*;rzd~4uc3XILOr+g?ysXz6Kbc6(~&5E z%b8$^1K(@7aJ%u=!}yLsz4``vI^cdFwktAh41B#u4sMY0;l#VY?(bgiH-}pFn0DeR z52rbzAq2}D4+IuPXbJHLI~Z&l$L&#REyn5}n?HYo^4Sf}Fk-q$eOd&%do$B!8?r{1)Y&$-6aDm#n zeJN#n^+*;T2M+1U+-0rW4Fz-Rc{B89Cr1+&Yum6F{S4WkJG_Tc+9G5h}4f7&RbnMm{2 zH5qAXK|oScQX0KZC<#a}?7yS6fB+?;tBW7L4a#OH0sdW}^YJQZ8dK)1k)R2JN9bE6 z*-iR`pwZAUJnX+ojQ^|L`2YDkYvJLq+e8qK`$~TQPA6l?``^{d|FwIO2K2cr&wn?n zw>J;SBHXX#e8{`UjvxzF*{&HyiFb+vw1W|`{t{;v%D9LdK62?BgCMd*#AZ4mvqQ#?`8 z(mK@zadPpp>MBBypvpqm`3gju1x4caTm)z=2+4t(ZtD>Y-u^E_&i@QT`$iIoW>B90 zKJni3(vv(^nRhs=xfjHmUb&23BVU0n0ztYTaa_z%KCQB}0unQitB-svJ> zuYv+aywx1&fs-1H8{LMe0_v$zjsqsi7~UIH zt^34ZXmCu+%b15%wP!03$L*DlSSU#%U)J&=QnF z8i+CbEeybMv!#BgAzjoOvy6f<2b03W;(jw1=PoIikA}ZH$=|R$q#mr(y8pen6ij)X z7?O+MUfIotz{3U$2cZCGbSAp@yluft%L_(ysrEG&`v~u1rPAYKSBRgsnhI0JanMkV zJn0iyt1}kCd(Y5|6q*PTcNC72>U2yh{6vu=>Yt~X-r#u3>v_`qX)eC>Zcal(lbMyp z%F5aYeaW%sa^=hF-h(R#+S%cpzfSqnwY0Rbv$17!{`kU{pz{yhA!oQPnQ$h}og5um zBzMM=D3$)fJCkz`5!?S4K(5CaDwpT;uu`MbN}-V3>3+Qn%5-+>pNU;@$+>rFqJzFd zUFtJFR0qidPESwK(a=~}Sm?0eeeH)k@{x9(c=UGkp*?6can%R_SFis-fKbFsf8#%p z{pVcyqbUhUYeiI`v5El2EaL5h&pR6TA0BA^xZ~XorT3+Vt+aRiNP)oE` z?s9c*G(?(hbx_Lib3~7K^jjQ>R#d2==%KWsDS7~?g#&x{kM;w d7|O?2G0l^w0ClT)&|h`Hq{QS!YlRI1{|Bl6g}eX& From 29b7b7119d53a120c3c1fd05ae0323260b30a943 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 11 Apr 2018 15:22:07 -0700 Subject: [PATCH 07/20] cropped image --- .../images/robocopy-s-mode.png | Bin 10160 -> 9729 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png b/windows/security/information-protection/windows-information-protection/images/robocopy-s-mode.png index 15df1b540e368d65e7fe77d94d60b0d96e77aff0..141e7a181933ce6b8e213774fe39ee1f87ae7860 100644 GIT binary patch literal 9729 zcmch72T)T{w{AqFid5;n2neWv^ri@*2kA-`=_Q03dX*|2q)CU+q(cZDq(~Kz8VCZ? zdkeka_`m!9H}mGryZ6qW`)B5yoRgEi*V=Qw_3gdCwIbev6o?3D2><{9k&>dECIE0R z3v<1ShlM%sMB(gVzV5kbD#!vVhUqskH`rFM)m{St)v<)vrVlXp_>PM2T>yYbU4M^z zy^vya0DvP|N$$0_hw*OajEi1>()xCR*&0)7_$}cYIO|&bM1Y*1e-wJGDs$W|*ZW~) zDaP6}9l@~6t>?X2vZcRMZT3*xv>5BNFW;+xckI=Q)^D)Din7hq>@0!UPvOk?U=NUG zmf>FOg~9Rcul=nn{D;O`e%JlxeQ8-5*P+u98($?q)v2Na>#Mjfca@#P?F8A;I>Fua_Mm{Rv0p zG8L(pCzDn>XN9*WN0IZ@m10Bk1Nus0CZnrRv&v7McD+rO!SH)=-mFR##XUfJog z3X4ZDqJW|BctNv+0OF|{jCZSJ+a)1&Z+4&inFzMjG(pSmCiR5!1y>Axq#CP)1!~bI z?!>=o)9z*mm;H;gJx;bB7tw^0ai{+ZN+7$D=Io@PSM7>&oaSMS?Y4t;+pjzF2zPi8 zjM)en%WFjOQD%)AyQmi5*HXYii30-cZIbemHIaBHiex1PyW1gkoGztI#{M;Dr-|Or zb)QSWLoK{GoF(jPf988Uo=AMRH=Tdyx^bAP;Gk! zeVdS^9@O8)|EyGfcI~dwbdM8Rcy|?2(tc@+wt74QU7)>7k95f-<`nJaSnS%v3k!F8 z;oMzZrF|GhZnA4b4(&TJmm-2&;qmtS{P*jz6(+dC)%Mns%Qe01-I{oc;czB{v z8_9F52`sZt7LsWZMb8mx2?~xrhm*d+hYyj)Scjj)6?7)_7#K>8AvlebbSfRqQ@*5o z^3K!Tcj_D(Q|{25B|CWlcqdc-T8z*LsG$kOfE4L}IX>02-uyM|c5CavTMy``D|Wez z9%VB0yLM0Mxm^#bhNMK_4P9_9RCru0P97E%a17(KWO=Q}ueY-h*~GPyq`qch98ji( z;D@CBc9eV!mHC|fC0Kfz48(1Q@}t&JFmwq{ybtL6teYK&!7qn}oUIMp7E{Z0nOCac zZZYHG?PZy5gRiwc7#vNW7Y8_C2bu-3{=va}Jb_$-(Ao!mZ;|ZhdHqMepKp75)ML>} zA=C2Za8$gXN7UQZpN0bH%-v30Kp&P@lfEw*5JbBa$&8MtfN_8;P1*}ZYV?$HM~di) z00788FpjzSj5Q_jmm@&`HEzJMxew^Z|7X(>7#I`wpJ}E9TI&8^RPulQ{lCIO|6@%X z6A-Jbs}k-ggRc+-V&2}yW@~eko|c}Pi77iR?Y)uFVvdidai_|QmR4|huk-z(xa|Z_ z*O>qS5~nATBER_v0+1qhvBo z^s|iKeSPmCBqk+@Hb>9*O=o5W7EZ-%H5Gogn@r)UG^!x+QfMC-c&4qbJ>Q`5CgFT% zrgk=(NIgq>^>dmT)Wv#sb{K44f1RHJ#D*f}%Q{;RDauIq+*Zj1{OFJ`4iQ{oxC03z z6Dno|?uyYfXkjC=G$e`jD=T~}CHxC>R}abv=z#pUmRGvwJ>TV4j>=vJ@O{6RC2X#i zw7c1>ra=?6GUglN zdp11$yv;*QM(D`-dgdrMjLjW4l-6L+u)L!At>5l+_3}uOv0=NuuxRlam&;0Fset*G z)MVjr2cc&UpK7qUPo?oQSVZ(vzqz6fIiLD?tK~h6Oa*<8ps;i$sMt1&3EL><>TG*O zN}gg(2^~119}n7{!ddH7mHZ>udYHFHVYHHvuEe&vZRfA}K)r%|i>haF+ z$eEes(+ZdM=c=lzSyC<;^K%mv@Bi#QneiH*p_;a1OfH(v6G(kq7oPe0Sy~jD9ZwLN zz}+3!T8QnrNa@5ZLQYH6?fu!qip7dq$p~9Hg6E0&*S<%K4>?TA>Y3t~n8^};Cc(lX z7cp8(y21$L<}|nX@l?d0-Cx;xxcBpWpc$LOYt!7C1h^t`fp8sN?Y6Uaf6q15&9P2N zqesNVXD26fbPZZs1~O7-V;i*GC`cs{Z}~4mdL!=OU!?3Y$28Cga|hGhP3T|Pi}yO$SGE&f5^9Bi(T@TA$bA^%ctL&o>qA=j=_1lf~bSd+>sDu<8m7Liq{lW;Z-!Z2d zAEy4cS@$Nmvjv>GH18){Fc+jjMj7$bPOqTaY#6@hYCIciOBV7VA1jmK3 z#LB}}Z!JR!PvylAe1or0es{fR3%8R7GUvVRyVe^_O-SVL-@oUlgn#)LZR#G4p$UAM zIgHpUh(Wi1wDsio$-Q2)vADQKlQaP<9bgtz&-IMkjfE!M*9V`UX|a#Qi!IJkTn*J{ zlH{XRascw1}JqoJASGABkhtt9ShUnBaRL4O=tOdgpuMu;4xC~>xrId%=DINg_eA4 z&EEx1M)#!G5xKdE*lwrj>b7P1%R|8Imi~vmg`WdUvQyj=gX3dHCBAy78yN4=UR^dT z%%&t8^F4d!bF=j0kh}Q`F5^|DDk-mQZhEKJ>QQcQn|1@md7fhQU1XBQJk?J}c2 zOUE;9ZS#Z{CQ?43U`6$ZBvng+bE8am8=jDtp(~1`MG$ zXt?mWom#&57FHW=9yLVg#;%OK^qx05DVG`zFW?r)vrIhYK|7WXYIEUz!Lg57pR zhK_nBAmWE4`y zOY0VDvW5rw96XEIo^!w3oOAbYGh449e5@n#wb@pDUr5TsZ~IWCz`;H1r@Lg@zL)rd z6#s$*|ALTo^Zxhv+cpH7g1Vy{bGYQ)$_vz!_8>^;rfuek<-H$2K0fiSt!<7Y_rFi} z<{v>K<$XGDZ!Ha7>7E%ARETAquU?MzhVDvN`75~Hlw94fr?O(ID34iacCW8NZ>?wV zU#ui9wA|g|8q_;Tc;_zZ`?`R=O$KiwVmMut=frz0iJ8Pu3rOcF~dtc__ zP`&=vbUTdcI$Nuk7%pN$w^g#;YA`oG=Wzu!lb2t`V9tH_^4h)qYVLGbA|_kXeN%rf zDRk;h*rT(PmqslfX{A;%q9y1%o##wm7q)B~v?Og%`Zbxkz4s!}D*GDoCROaG9gg9= zS?AuJ*teAj52Lwb1&V{dthrS1XMl1@EB5dHU6yPMG~7&U7G%c+%%L% zy!mT+3qlCU_DUJHlxTex$?HJcr(zm+zhmq^wRE|&-nW^pb3qn-wqrN7Qc-DcYNn;7 zh58@`ckt7lp6aj`u=!l9*_AT7|^DD%;yD ztE=Ose>%)Ho%BT0MMvxCOiq6DpbYQ&rXJ^#I^ll9943_zjAt1pn(}m7DyWAt9%c7N z2=w{llocO;Vr4Ug2CYl9Bzzx~X@_Jo%IoNsh@eDnvg3N=6~(Ko=MBjh?_q)Zp1)uBD>U@O?oiBAFdM9Udj0_Ad{&#+QR_imhGj}{Z>wpOIwO8vPubm6B zl*?e8Ve4bj&;b%1Ci@h9v(60s>rcq2C zuyc=AMCFn`&IdP`inCI4J9V)pm2-;Ai4IRly_;B?*!Rg~MVjEQ;Fp*Oxv3Z^D~_UO zXEzg{yzWGfj*iYvx~&g0T$1P;8L6?J_j6|ZTp#ux_b5mvse(Y#7~#ypAx6bqcH_l` zdZKhZYrsgp)YoB_x(B~&Sef4mFUnDBeYb2Disn9Oc2w z-k5^;_U+r}&jgzMV*;A+j*gDpTo!?^m`{3ozvt>e(#_QwWUeVGcz^JDyU)R&*9Hc& z`3kXxg@p}rPq0U#MfGXLKQ4K2pSOtJ10~}h`J2$PYI2EdoF8xDT}d{)jw!dhx}|;1 zOd#e!TA{Z*@m}3&|4GAm1ES*3@Bq8=q3bH#`~c3FcUH{lQcae<6gpZ2X+^B zpOcdl%+~nWG+DYdOWOBq)bKFK%YE=ieV$L(uf=G|Gv@okaDqS2Am;A|(JbJ>!9kee z{RHo`z0qyz5;|XA4x4=9tm7aclip^6@pfNrRn@QASqXmr>Ke`P?CuOJ$2FH9ILX3Z z3SG@eoX|R6rm;e1H;nSMy}8+l5jp$%@LDV5gX70WOX*unjG9~{mRE>-2YwLi;W&LX zQ%=8J!8e`##l_8r<^W^+j+K>`mlhW{_}z%N=8yJ{U|2ILIazo@#1S*guTV_Yv?$X7 z02I{!)GGe9;zP}};_UN#0C_^0p2mPWUeH(%B_O9b0M2oL4ChrmmW>JyMlfW3FqZrf zqr%7&!1!n|n(Su^MFRn!W-a5+K{EE6l0Axx;ZuD+iahdG-g1BT4oJUuasa@+e5lfFRa> z3Ng8#tFBi1XU8-)V;*v(nICR|$%#7TB^@0iuQtkP1@`T_6w{|o*sR~o&d-xBF5D53`h5J?a>R!{PXRgk{`I9&9i_J3$3mdS2ieU)bObWF&?&p~@Iq zsPh(khP5Q7m|Kb4T%wj7RAXh^>6Mg7M*XPf@%5X<@&oZ*$$k5Utel)y%@ek94ij#% z9sA!sBsUIu+5zbC0{)4(r}mbVHGO)}7pU;lV6$Q@He@NO**Bsz4#(NI!IF9K3Y+U5 zkl_$f?D4kK`!IB>C&yl}!x#EEZ~4l;w(}Fmt5Yz7UUoQ|1v??gL#=dn)lAxF&C&_2b!ngE z8W2&x#3=mV!ityZ?z6G!6V>ulNLvK7Bv9nVs&+3Jw+# z*r0%!ywzXPX&=nhep}r4vPhYxslk0KN9%)><(hR!ABn_d)rgG%_U7Z`DBC_3pe&CL z<+^Brxw!8u;f|eHgy{i-#c^wp)J^e*9~2+J=eQLd*2!ofN!#yHs*zQfaf)3cS(x)Q zp-j7~)baX~e`{@0=%bmUf%a_KCusM^ms4QpC)0||$NdFE)&0MSX40Q#(9^mCSwkMT z^lnmpfv#--iO97!iWUqSTg%pe7l^Ogz%cskj>G^o6bzEEs0qs0qSN_RSJCgl1BSlP z9)O$Q;B(@w446OT#+uQNd(-1-CMzE#=y7E(8(}$M4eK!(n$A;vq2)?*EJ{AZp=dxa z>$}OlI&8i4iDg@^BwY^~PQ(fhWYD70&!Cscac4PURhL5rMEA-;y0Fc1Mh@{(LAf`Cd<-VT;-OmD+>5w=kE=@!{obAz64%44F-q zMo`O|tb%Cmw9`1k`76n?`+Zjz!vO~8LjK{mqNLIIl#35%i)V}En+#*iNuE-7H`~s9 zX{y;xW8C50Ip7V9GoFRQwHtUekkKP}WI~k{q;xt-`$g&SS?-+T*jgBrS;BW9Xemzka%36k z4-|pH14R^XiTN;ON@t9kP`T@&!c(MsL9y{m7L`!lfyr{kJ)<*0&9nb+s>LL{D7fPg z=C4oyE=^`|f6m-J%n#Sp>sV75{>DrnB>zFGj1ppV1@v-!3CKA&<%?{ES0_BY3U3=mT@l{eqt=QtUZ&igW*zexpz>H{_C9FL z{1cp%{N12%F1)b`m=c&8Jn-aE_Vpu_vv%8zl4xou&0>|FBx6KMaOcX!=`G-`sh3JH zXAP2`VnATh{6ke-n*hInfk%=;Ay<^(WulUhFzRQXw^Q4!M-JYDuTZzwLUqE&#CK6q zO@na3bm^h!TC)xwa&G^Yh!#yQCYrs6w&C%lZOw(8YMN8pBB2o0T_^u(J9b`E|8$c1 z@M#q~-xYQiHZiTNxC&BJoAEGCJO*i(vW!pEx0EAoU0-!uYEI}owH35+e`VhaZtK2a zAJFtWqz;ZuQ{0M+dwgP<${m%vV_mQD+wf6>dafH#jZ-+z!8cdqQt(B4zb2yfS8Bjp z^MxK%{KvRgG8Z&JmhkAki!AF_o#d$bYC_3;^)-IU#2`7aB>?xuRe zloppwU7H0kh{N>iunmDxFVmE!R8S^dg3& zye#n=l>smjL@>fWB2{2Iq8tb_dEp7${^EkN0Dkf{;t1F7LRh3z|0w^kG{$2W1}Dwz zivUqRA>BJToR0eSgiH7b67{7?-YptWIbBj_@8VB8OC7GZ{PYnp^|e#Om!y~TWCW3@ z3M~@REiBIOsR$yVm6KdUv0S$(le~)ZadQZf`w`g;*>Y88T%^0sdD*x@_p}CEycUUm zVRv;j&Bg!~H^J!T5O)p>9aT3CnT3w>rNv~N-Lz`N!TBj4MNc?Q@B+o}D9jR1c+P|^ z_@KM*P4@vle%51=R~Zt%e2*&BNJNVg_;C%Ef*ZA{4e00o6Ibd3tE@)v;?5Z$hM!>$mSGgS=0v=$%wJ zxa~qSQa9vYaw#1k@dQ+RMa3+~)NuE)VSJg?0J68QNJ*V7-ALJk>UdAbk{{6%eQ)B< zfJcbb4qZJ(JbE{{#0Lhfr1_{AbgFkUleQTAf0OI~V`;7bzEwh{*_W6Vv*3TgdH=Ez z@G-TV#QLURQ$gf{$JB@+!Nf7s-3LH(Tui|NA5(DFk=l8r2rCxD!lIfgx`-;hi!Po4 z<2%A9hY`|dmi|!DfQ%We6aasGFHU$q9M8kclg;OYiw9fHCrlkgGBGo_g_QK*7!5rC zzV^>vU!gqMSpRIUMjr$YEk^e}!t5RlqyylGK)LVZgLI4c|BsQk);1CiA^Qsk5Z~n+ zeJDX?<2TG zr#h|vd3gWpmmp;W#cI0+f0^!a+e#4PANngn$KX zE?zocBj1ih70lE*<)nj5JJX%5oQeM$D29hHNjc%HZss37?L#W5zIt827qXMesp}Ae z!ZUrUVy|5la1_k+o0YFOkr2%d#&PKi8L#MlnCh0OzTYo`N7J8f8%o`TNP;JsF@xp* zHuu2Ea;_KkI`4^xIB{cj{!Esa z!^cNl!SERi(cwR1)~}3dT zA5VAf^cTTtT6o-2D4n-dkTLeEOaJVJ4@?&!t74!LFJcpUALArotcQ;Dp89hP#O)tJ zn(V<6dfK=lp@lJD;y@mD)G1O=Ysh-1JY@N35bnz2WJm9AII(|q5uBuA2mV$qM(1T uh^bRzX2h(=0Q}g0Yn531Z#5R~Z~^m&Jx<`nIZW9WKuI1XS0Vc$=-&WiPr^0; literal 10160 zcmb_?1yEdFw`IrB27*f<1oz)afA=x7%Cn@XfK}=PuQuuQhoyT^i%6V z%W0$!ag~Dr@95j=XqpJN(09k^8MCK>?jnu{H{VDoe+C;MeX}sq@Ansd-8Q>7?|VI0 zA?^0XB_)3@FXEXwy76-5SZIH)3)7RNPBqj z{)qfC^?yB-*!4G*C;mV{Y;)s{Q!U5sORFl$AR(ZWOl16JO|Kjg0AG<}*#Z9I{?Jzd z;s7{4Cqh7+A27VWo5g_=AK9+KkX$#zH+Z*GGh$G5{1W_^v%O;66B z9}~`x(mV)#x&|L~9l1O6N0-iU!ssAHwGH~cz~Jh6R9YOs2J+Yl(e<-zl|@Z*+$4|L zH1_eLb_h)c{{iyb$A-~yL0>9jyAJRlLM=|FMpymKt`GSKN0oi-Q%ZUyGHy*(6D|=P zM7BEfnz(b4^-19-bbdVuoIn6zZU=X)Fc~x1F*$2%SkA5P8sYQh+p3W(=rL*w!kZDh zwA;fzc6$SX4ZPzEc1;BP^tkrtTn3(B*-1%s@g=o~6}H7%*0}~YM{3%#pkH!an$viB z53$myso$c9t@1zjU)SXz{6= z;avW~g+slrJSl-o-FB-PYu})`KG(c~7}nAxQMxkX_~~y_ZF+wqff}h?W7-%m@9*9O zOWiaH^Gsv_OTX4|T9x2U|73gDpFdN)9@2bbDR<;6iync~MQ%!2zvI|%b7{7>w9`m^ zW;3?NTWzBU4!J&a$?Ai>$#KMGZ>`!V!Aqy+9v>wVXOY}kNpk7pU#a;;#qZHHrpH>y zjt$6qMn0`lQ3-_1ls}X>Rzl>*Bz)w`d&C5V^%j*$U=KXh@_6rk2 zvsy|hMdgeiWMr8NJ^)ypFD6E2zCgqzVTrKi$l8y77M^x<%)$?Mq-(c#9gn9EejfMT zYaK49MSeGh>ti549lu*?m&44g-H4h8ZEbT$srg4WTu!s*B3WCVhW=umr?KGp)*!W$ zI*vh*`qhpC*DlN5z(8;I{^FfNzWFWVa;ujUsI@6g(nn@mX7xrOhL&!vsY5Y5v*r~b zB=mH#L*ZpA>?xE?9b^m($JvK*b}}h=<`S*iaa4UE z$`ttab)gEqUBi;<3zQkk{~$!TXCUpJX9NIJ2L~O^n-*S>Y3B8RLAckOK)|2(pCAB0 zD1i43famRhf}!XG{hz(rGRJ=~GP*>qXv*MW5E&4A_D5O~0FZw5U#$NtbpCHT{(mzi zh=aa+{cS?%zIJybL_CxzJsrKa)_Zb`-}mX^wz9HPnU)qRm2fAg38b2}CI8H;j65{% zm>7FcE=ix^|JIgOkWQ9Yt;DH06u?v{(bWxBLcrtzsd2hF+^J0PxJau!ARyd zv+l*MVlDCQ`bG>o2giZ+@^e>Lzp#(<&(re>VPVf&_;OR#XM^U0>-)eiLt3103G%;R z-6^YX7+0i9!kSS^+#_OwiAv8TmrrE-SoI9FHPlp6pjR>6idG{s1Q`yg7pnc|XM}Ok zrhFN@)%+$@Jku=&$EFq4bQ*%_i~D>2$}9bc!j)qT41@yT4vs$O)lp=6U zgRf)puE@qyVAQ?v{RJ#5%dQzM;-K?8t^NUS&dh+U?JJXk6L_RXx@MK@&0`?UT(_Zo z=gMp(WljI$uzSf)r{HdieTH}AxWm5U{`En zR+`tw!-p6W%l5CQxr408wO>+psOQ#&x}HmlQg?8H=Sh=FeM3#vyaURWa_a9A)kn3oWx0+>bWo&O&!mQTb5#lD zBI&=|P%}jZJmf7IgVAs+getnlEMzxvCJ))-KVkdSq?UW^OYqP9jH1q%W$|2y?PEbV zVJRUS8E7uxl4C7Pjn84_rJ)Za>v8zTyoe>v(A(bLzO}X0+}w6~=~BU@aNK_V#C>?! zrOfjl1q~tasY^uo-u|b3=i18J+U$~FFl9MxdmohILo-2acggAfu&Z6^!#+( z^0~p_c0;E_*cV!bB^^}1U@BU#Jc+n#(7bl;zLso^87`L_Wa_MPSIbBXArY<^2UUcN zC=9LuMfI>|6W&Ehe)m?$FbQByHY2xDNh|i%C_tisrRA%V<>6Ta_Z-=B3zK>rh|2n; z=A~snH%B+oQB!E75sb`=p)}XjvVdM}YGw+iW|bp2n$v#VN?u2@q7l}WZzSiUW;pBR zZi2D;*g}+Nky>CdLl*a^?pqAu>5JnA}l`-9p>Uf zz+P*Ho?x(4Gyh0JR?^?0A(@FGx$N{5e#lkiyYsEjbb|)%2lY)(=G&WF!2#bYD_1S2 z3x_2sL#OI+Ia}Z#Mvi)PvS{H_duu7TfvFFrMGQnScRR^bo?7jp@69-uO@rfKZg=#C zDM32X-^MDXdrH3)Kv!GR#6IC5#o=|1Ei+qMMyi$JIZBNxGrhGqZ1hnk zTpx#2R58VEExp&d=W2x*!>ae4IU~E+uuaadXSg&3#xml+8$oqpM%akcL~P|c!{2q} z)+^a5xs}-L7Ls6YPdDRpez%wK5zQm*y3!v%{wy~+4MdaVrGdfe89#POo=Gup*GT=e@*$OsQd94TvS^RtT?Sy^2m8N31|8{P+9 z7ag5Tr%(k&#(m#+w^!YZ)G?^{Kq{uO{t?Qf3HxVPLfK0m*OA%lp+N$3P{R247Q30W zpPa-}ebmZ22g8fsFoa6IHhwKVJM1J(2-(>Rx^9i8iFODx%4Rv=W$Vn=eC0VS!X_!= zN9e{pqyXJ&3ukl{G)?V1f7Y~D!U!`o{NctzAft5swJJZZqfobWrL{?8szlr5@S`uy zI=7aq(g?E_{cP;s=>i$sOl^B!)LEXbMzf8a1eDx8QQ(>K*1b}yN%DiNa%GOvMQXBG ze}7a)Q{1AvDNc{Ye{8qF(EIUd7wV9$Dmv!qp~aR)t+cqAW3G(X8LTrz>Bit5Ot#2y zssg5=o=PZu6csLb5n9`XU(@5X{E?2GJ;85U%(19R(0LRmLiRTzP1R_2mRD|D%E*Vu z>}Lv71@xcHkPD0(y3nr{EMp1@_0GIpmcN$0EEUF7A8UTN?@op;dM~s%SY~=7(yeSQ zk%wtJj+%hdWzTP6aM&o1<=Btg+=IuH$pY7H#?w-1mC%vKl^4$o)=oxEJHJ5VDG#Ds z(a==siNXNEoBIm8S-`{D%sK{Wrys1r*^Q8ae4Y_`Abd-cbB5`Q;}#*zEDJhUr^B}U z-f4YKS)3bPq0H8afKo*Gx2=YJ46AJS2m}YyAYK`ws`21?&)o9yF6Cegmtp+Db1&P? z#r5JBJsUGOtPS=Y&3|;#sAt1PEt%zaKT>dB=sUf5pM9Jvoi?p2kIA}w5`5IX=%F6F zcIq< zwbZV6F+`&PGarMpnW?(DO=L4cA9o=Jt3UsQjAqygyB4m@uO|FGl^+_viFVtHbIL@s zO)1=R=X!!aST1I5p$ak|3iI=_w;kwAAGNX`uO}VlF-f1}kG8n~T{z&4NMY1w90maV zjYJ!??yTKhx8$76%oK;mhjW|0*elt)xiwG*-`(8{e&m+)_4?~_zr-hG)8@StuuB=) zFq)y-MDORQvDNdueR3S5`}_2?>B}uU$Ues(h<;Hm9wtY3LmP1oXiG_wn2j|6$ zqIfwzvZ@Q2)J-c#-y@iC5fKq-;Q1K93y8VtRBI&-<>MJ*!*h=tD!ZWF6(bY*6_OEvr(8xS|ujk9o;Ox~l9v*^R;Qjq$Q$|#FT)07-Gr0ufeFr;e$OP`2k^-CGF_?vCr~6p5vzhvFG`tN=6lmmV8p5|z@DFLx1-k5^8YxP8yNi|h|t zy>I-V_p#rkOoTo>CI&6j4T;E*Bj-H_V19Ob5X}Ukyc4f1FK1K%uqc;4=|}wOpvE-t zhD#qf^*xk^AU8&h-^|G|tf-4u-^V6YGe9V%pPpXDj7Ua|iF69H{1NtTJuIsl&xc(3 zyf{7`!jC(`ZOUKnH2vcKqLA=A8$M_K=5~8(&bexUWC-o>IOOj?q=^_{gk|tKfUX;5 z@Zkoi08nd0MAF)9-C>DdvsnaX`!_}DyEOrSvbZ4TRR6HB!$rb15Cv8tT?zv~js0A? z_DF;#PRc{kbo=V_>D2S%n7x6Y@AUJ-W?rH8wBGe2yy4@+Q6?N?rNa?Uvbb9bf-FT7 zyFagJy0$()yK;0q&y_Hv>+yI%>2!E_%+5^X?oW)|3}J${n_s{O)#E=ZH!iNfauR3S zwt6Sp0G07x|LtaPST&%saw8&qa$*u9Gr6mCSLjk@)j21z)dj!jd_^d?6{7f~SB`xK z*z^IG&dq6ul}UvjV)Z>Jtif^JuD>5;b85HBp@?XVR#kh3%rk~$3nwWQx={L*%Xh~@ zKw&d6-fiSZdol*MpVE!L-g@vjuYBJ5)3x?^O7KX)bjK-M80zoQF3scQD(7 zpTZIZqewsUU3sV}4Wz(|LXKMYuUz)qpF7`NGeL!08a5u{VuVtKpZggyeR!K>Z?#~j zC+jJU80C19ivK5-}-9Pu=GvzP0#Ib&h%OQyMmO)uAMrHo%$3VMR`G8z+Tx_mb@)MSi$6 z`%>`!7WxIulC_Y;-mv6zR0iYrz{khMC9x5>c{rc&yIX{CJM?c^F?$D25cE6{G z)@8y>&8qNa>7bf#VGdPT;PTlW1R^J8Q-8F{o29hk#To+(XX5DVF|tHg|mhP^-RWD z{i|FYt^`{1Wc9czFJW@MJZe97i{n+>v9S9V$Y3On+4s5Mk5Rj3b6fcNwxVH`2>5pH zacoUpT|G87ZX!$2%X}==VIUlr-FzG>Xx*Rbw(4=d9xyab<9B&^t7)+GIDFLnh!~T} z3w(#1d!|nJw|5=;9y|1sASIgRQiW31Ho>$VZOPTQQ zqd!|-rLl&z4I1fhPyO;(>`+Z0YB(7>@Sn5!Ms7rc@|;}Bw(4_VHw|D8dG246k)}t- z_`gL=_ng(q{q1StKA&Z}Ca)Emk%^^zwKe-GzBx(Fn{nUpwS9%%Jl%P1p$Rg^WIuX~ zWAgiSTfJ8IIJ@k$v@}9OLQ1E!#e+$LmD%&Nv$ON_6eb z7S-VgV&X(60@jc=xn9Q@+iyLZ5rtl*KMTZ`1@(8p(TjNfg%E8#l`OtO+<#Us*p-j=cd!AY}@y+0!`ue z?xnfk>KOIyN(3VZ-e?z;pW4zTFQCcw84}>%l1@dH^Rv=fEM+0zLJT%6CHLvQA{c#3rCQI(YG#Xw zL<(0t_<4_Domv?oS{7KQ%QeJQtuzOfI=_;M!jnvOu7$f_xzhdpSCd%N1Zk? z(*;ZWHJU6rXUu4!V;RItZ)@n%Xhlsl7;{+CZZN)$kB^f+orG4k-<9%g{URfzlOv9a zhA!&c;4yQ_H++b>lQ7(Hni@$gu#c!cHEKtwsJaL*qKM<$<*jD4U3Pb7YEb8}TNX&4 zczq+A<5V(!xD?F|!nKCa0<+f|zNe?CA8#t@sppkImR5g^TWfFB^we%gFc)(LqN`^@czRAF@a0rm;RRA*9yIZwsq~zmkxkaSn5FgFmmPd0k%ZEQSZekj zX5SF@SAjnf$`Q0(S{TTps3A^TJGp~vJ6aq0lLm5YJsdIX^|r`X$#!EZU?GH!P>n#p zg9f{q7x!!;D*qt^m8#&$Iov97DW#XR2kYVUKxAQ-Gg;D%glzaD(8H?4^?VCFwAv|i zf$TppMdOY?Md{!f5q_vDFpufKy=5$`IgmD?*{K#V zlb@EcSnP4NCS@4ivqY)Tw4hG@BgZnvWKJL*Bi=%xMi?~QI+yx|L!7vlx;UK699&4| zOoMJ?RzZ)$ubkz%+x?q@t1S?ytsaOqw-h275c7KT*55mS3^=2;HI(hc#&OAcN;#ZHSVDD@-|V_rnzP<(McGoqn<`CcW%q&ulRh|xqsphoL-NMRHKmB* zp_MpH`W5vy>U!!etD+^)K{?U_1}V<|Mr^6<9eD|qirhO-tFH;Gx$yT1MjV9|TS@UT zwR2qNngm>U^7mDd1>MOI$_yUF;yex>IaEEFMB9hkWGQ;RS6ly z`2%!k9v+m)&JrE@^n(PA_rq}2>&{q96VgQw>k;?_;wza~s_ws{z3=<)K(SP007r6W9_(zC^y%Z~v21 z{Wmc{e52A?V>Ti|`&mIjf&48%#)0^LhWXK%&kkY{Buv(IAx~HK3 zr=LE)mnaoC?)^C*kb&XbVeM%~_VT!_qb5V|kVXWNEabJ*CkQduU@Mc-BxMpz?YA`~ zbW+O({g;GYm;o{Goo0YWC~L>wI`ANeGQ}2O&uQn{(W3*cd!T@Qdz>Izd)4 z8~>q5Di8ZUM%GLeQyPH@#-6p^QEL%qW!@v8jbZ8qX79XoG!S3NMlSd zwE9zD_fpl(K(qGTF<6?hhFDZZB@Rg&8*b8cYOW_aQ+Wnv`K=cxMT;-y% z@$Opj*{r&w7QeDGiLro*lUe{DcLIAcPA3s{XsQY*mPg0L|6P(Pxt?=}WJ{dr5b-Z$ zG8X;~t#)OV=VU2g5Y5ar)>M>+kU8RH>Rm=&>&Vp2(Nk)J2pCfh4W?eVzv!i8vPL11 z)!KQtG6q+wZfLKoPP2MQxz?Ib{$7IY60i&6&10KvTbfKI^RQxOCsy62UBq%wOhAD% zulnIUD3NN&mBwqc%8QrKsL)-_u040IY z+NS;I)RuCXD{S%2JXS1wz{+duVP}(E+x@xJQzLI?qlXj_wP#F@kHxR4U<+si5@RW5 zW@*0n_7mTb`%B8EUcY^c_8&TNJ7v-*8ukxoC<1D@Eu~_e-*yvkJ|6xTXK0(9 zjOWeU={)(TD#tA%LW`ERU z(nXoTf&MDyweU!Vq0-)jc9h5KmT$QKf`V8$kn}}SLj3=oCj6H}{eRZ$`zo|{&&yKc zmlR;4$=*!K1^$bB{~yYa|Fa(cF9!R!Dc8Irk=pZaE0SKB?&G2^X86`iB#oJ4o#b`g zrWpkM;k51??Xx*nM+T97 z*jgwy;R@2%J&%v%v9OsSsWXa-i39$z#Rl^U`i;x$)r7LE@6GPSd;p^1p ztLY*?sy44f{UJ$X;DJ}+B_Z*UL%aZ>_2;X_l3lddqYuWzQe1AEA((N^evnzGp z;%&Uu>Op8^(-KgBfi;cOZod4vym_&#UKuwUL45CYRi|Z6u-{(4d{#-QM8ND9(=fbV zrFKeYRoJmA_5-ZYdqQMfHG%w?98;Bdlb`POgiu+et+er!YyS%KiP`)v$-Zk_vBi82 z#OHdXUflRf4xiQ_(5dlHge0#?XnvtQCc0otco~{PUtP<5j>d77`$n;)4fTj&nF_VO z+ggX+yiP04s#jT^%nKxzu8|lQeyTq+9f@+r+Fwr%Xn}8Au+3< zmuU(Qb$C|ECO)rT?-@8!=_ohSNOAtegsv+>>nHnVfgU5on?3 z#6uGAS#TvxcbNnR8!S%XAZOUlh4CWCZlP|0cAHpIs!Lw!J996sVvcgtKd(2d3dMBil`YW|y zo{$|o!i!S?o7p_VS3HjW_;(-h^k=j7R9v1Y#U^}9Kr*kMy#z1H;H1$RL$AP1Q;6a; zcygmXz#Yau$>6A3876-N&o8BOQN{~AAWLyT8ocJ16&A$eS*W?l_pTjTr ztoN@PP^*Ic%#)hxj3!!8>A^WD#zZ_Qe(_qU|69e^YoSGXBKJ#Vp+$~&**5)TP1!bL zhv|9@3mym&@0Ppm2B?(-WU6rrZ%M}XTu OEwYk|5|v_x0sjL|e4yk2 From b10a36ba67f947009d694f71459ba3f797a6d25f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 11 Apr 2018 15:34:39 -0700 Subject: [PATCH 08/20] added checkbox --- .../create-and-verify-an-efs-dra-certificate.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index 4e8e4aeaea..51a816a4fa 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -85,7 +85,7 @@ It's possible that you might revoke data from an unenrolled device only to later Where "*new_location*" is in a different directory. This can be on the employee’s device or on a shared folder on a computer that runs Windows 8 or Windows Server 2012 or newer and can be accessed while you're logged in as a data recovery agent. - To start Robocopy in S mode, open **Task Manager**. Click **File** > **Run new task** and type the command. + To start Robocopy in S mode, open Task Manager. Click **File** > **Run new task**, type the command, and click **Create this task with administrative privileges**. ![Robocopy in S mode](images\robocopy-s-mode.png) From 4743fe3434a5e4fd0362ac4bd3714f8783891094 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 2 May 2018 10:33:30 -0700 Subject: [PATCH 09/20] Updated Intune instructions. --- ...-first-sight-windows-defender-antivirus.md | 28 +++++++++++++------ 1 file changed, 20 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index 9acab9ce56..cb413ea7c9 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -11,13 +11,9 @@ ms.pagetype: security ms.localizationpriority: medium author: andreabichsel ms.author: v-anbic -ms.date: 04/30/2018 +ms.date: 05/02/2018 --- - - - - # Enable the Block at First Sight feature **Applies to** @@ -30,6 +26,7 @@ ms.date: 04/30/2018 **Manageability available with** +- Intune - Group Policy - Windows Defender Security Center app @@ -58,8 +55,6 @@ In Windows 10, version 1803, the Block at First Sight feature can now block non- The Block at First Sight feature only uses the cloud protection backend for executable files and non-portable executable files that are downloaded from the Internet, or originating from the Internet zone. A hash value of the .exe file is checked via the cloud backend to determine if this is a previously undetected file. - - If the cloud backend is unable to make a determination, the file will be locked by Windows Defender AV while a copy is uploaded to the cloud. The cloud will perform additional analysis to reach a determination before it allows the file to run or blocks it in all future encounters, depending on whether the file is determined to be malicious or safe. In many cases this process can reduce the response time for new malware from hours to seconds. @@ -69,6 +64,23 @@ In many cases this process can reduce the response time for new malware from hou Block at First Sight requires a number of Group Policy settings to be configured correctly or it will not work. Usually, these settings are already enabled in most default Windows Defender AV deployments in enterprise networks. +### Confirm Block at First Sight is enabled with Intune + +1. In Intune, navigate to **Device configuration - Profiles | | Device restrictions | Windows Defender Antivirus**. + + > [!NOTE] + > The profile you select must be a Device Restriction profile type, not an Endpoint Protection profile type. + +2. Verify these settings are configured as follows: + + - **Cloud-delivered protection**: **Enable** + - **File Blocking Level**: **High** + - **Time extension for file scanning by the cloud**: **50** + - **Prompt users before sample submission**: **Send all data without prompting** + +For more information about configuring Windows Defender AV device restrictions in Intune, see [Configure device restriction settings in Microsoft Intune](https://docs.microsoft.com/en-us/intune/device-restrictions-configure). + +For a list of Windows Defender AV device restrictions in Intune, see [Device restriction for Windows 10 (and newer) settings in Intune](https://docs.microsoft.com/en-us/intune/device-restrictions-windows-10#windows-defender-antivirus). ### Confirm Block at First Sight is enabled with Group Policy @@ -113,7 +125,7 @@ The feature is automatically enabled as long as **Cloud-based protection** and * 2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then the **Virus & threat protection settings** label: -![Screenshot of the Virus & threat protection settings label in the Windows Defender Security Center app](images/defender/wdav-protection-settings-wdsc.png) + ![Screenshot of the Virus & threat protection settings label in the Windows Defender Security Center app](images/defender/wdav-protection-settings-wdsc.png) 3. Confirm that **Cloud-based Protection** and **Automatic sample submission** are switched to **On**. From 85a69a0e6da58ce74b1c51059134b12b005d3382 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 2 May 2018 11:04:20 -0700 Subject: [PATCH 10/20] Fixed link and formatting. --- ...configure-block-at-first-sight-windows-defender-antivirus.md | 2 +- .../wdsc-windows-10-in-s-mode.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index cb413ea7c9..c2f08b09d3 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -66,7 +66,7 @@ Block at First Sight requires a number of Group Policy settings to be configured ### Confirm Block at First Sight is enabled with Intune -1. In Intune, navigate to **Device configuration - Profiles | | Device restrictions | Windows Defender Antivirus**. +1. In Intune, navigate to **Device configuration - Profiles | *Profile name* | Device restrictions | Windows Defender Antivirus**. > [!NOTE] > The profile you select must be a Device Restriction profile type, not an Endpoint Protection profile type. diff --git a/windows/security/threat-protection/windows-defender-security-center/wdsc-windows-10-in-s-mode.md b/windows/security/threat-protection/windows-defender-security-center/wdsc-windows-10-in-s-mode.md index 658c5331ba..a4423252ca 100644 --- a/windows/security/threat-protection/windows-defender-security-center/wdsc-windows-10-in-s-mode.md +++ b/windows/security/threat-protection/windows-defender-security-center/wdsc-windows-10-in-s-mode.md @@ -34,7 +34,7 @@ The Windows Defender Security Center interface is a little different in Windows ![Screen shot of the Windows Defender Security Center app Virus & threat protection area in Windows 10 in S mode](images/security-center-virus-and-threat-protection-windows-10-in-s-mode.png) -For more information about Windows 10 in S mode, including how to switch out of S mode, see Windows 10 Pro in S mode. +For more information about Windows 10 in S mode, including how to switch out of S mode, see [Windows 10 Pro/Enterprise in S mode](https://docs.microsoft.com/en-us/windows/deployment/windows-10-pro-in-s-mode). ##Managing Windows Defender Security Center settings with Intune From 2cdf79009321e1032136ef927a806ced4c7deef0 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 2 May 2018 11:22:46 -0700 Subject: [PATCH 11/20] Fix formatting --- ...configure-block-at-first-sight-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md index c2f08b09d3..d5bdf282dc 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md @@ -66,7 +66,7 @@ Block at First Sight requires a number of Group Policy settings to be configured ### Confirm Block at First Sight is enabled with Intune -1. In Intune, navigate to **Device configuration - Profiles | *Profile name* | Device restrictions | Windows Defender Antivirus**. +1. In Intune, navigate to **Device configuration - Profiles > *Profile name* > Device restrictions > Windows Defender Antivirus**. > [!NOTE] > The profile you select must be a Device Restriction profile type, not an Endpoint Protection profile type. From 73f98e2e7bd33e2c3d577e1a004a4c5a7f7b6d36 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 2 May 2018 18:36:26 +0000 Subject: [PATCH 12/20] Merged PR 7734: AssignedAccess CSP - updated description for KioskModeApp and Configuration nodes --- windows/client-management/mdm/accountmanagement-csp.md | 2 -- windows/client-management/mdm/accountmanagement-ddf.md | 3 --- windows/client-management/mdm/accounts-csp.md | 2 -- windows/client-management/mdm/accounts-ddf-file.md | 2 -- windows/client-management/mdm/assignedaccess-csp.md | 9 +++++++-- windows/client-management/mdm/assignedaccess-ddf.md | 3 --- windows/client-management/mdm/bitlocker-csp.md | 2 -- windows/client-management/mdm/defender-csp.md | 3 --- windows/client-management/mdm/defender-ddf.md | 3 --- windows/client-management/mdm/dmclient-csp.md | 3 --- windows/client-management/mdm/dmclient-ddf-file.md | 3 --- .../mdm/enterprisemodernappmanagement-csp.md | 3 --- .../mdm/enterprisemodernappmanagement-ddf.md | 3 --- windows/client-management/mdm/multisim-csp.md | 2 -- windows/client-management/mdm/multisim-ddf.md | 2 -- .../mdm/new-in-windows-mdm-enrollment-management.md | 7 ++----- .../policy-csp-accountpoliciesaccountlockoutpolicy.md | 3 --- .../mdm/policy-csp-applicationdefaults.md | 3 --- .../mdm/policy-csp-applicationmanagement.md | 3 --- windows/client-management/mdm/policy-csp-appruntime.md | 3 --- windows/client-management/mdm/policy-csp-bluetooth.md | 3 --- windows/client-management/mdm/policy-csp-browser.md | 3 --- windows/client-management/mdm/policy-csp-connectivity.md | 3 --- .../mdm/policy-csp-controlpolicyconflict.md | 3 --- .../mdm/policy-csp-credentialsdelegation.md | 3 --- .../mdm/policy-csp-deliveryoptimization.md | 3 --- windows/client-management/mdm/policy-csp-devicelock.md | 3 --- windows/client-management/mdm/policy-csp-display.md | 3 --- windows/client-management/mdm/policy-csp-experience.md | 3 --- windows/client-management/mdm/policy-csp-fileexplorer.md | 3 --- windows/client-management/mdm/policy-csp-kioskbrowser.md | 2 -- .../mdm/policy-csp-lanmanworkstation.md | 3 --- .../mdm/policy-csp-localpoliciessecurityoptions.md | 3 --- .../client-management/mdm/policy-csp-mssecurityguide.md | 3 --- windows/client-management/mdm/policy-csp-msslegacy.md | 3 --- .../client-management/mdm/policy-csp-notifications.md | 3 --- .../client-management/mdm/policy-csp-restrictedgroups.md | 3 --- windows/client-management/mdm/policy-csp-search.md | 3 --- windows/client-management/mdm/policy-csp-security.md | 3 --- windows/client-management/mdm/policy-csp-settings.md | 3 --- windows/client-management/mdm/policy-csp-system.md | 3 --- .../client-management/mdm/policy-csp-systemservices.md | 3 --- .../client-management/mdm/policy-csp-taskscheduler.md | 3 --- windows/client-management/mdm/policy-csp-textinput.md | 3 --- windows/client-management/mdm/policy-csp-update.md | 3 --- windows/client-management/mdm/policy-csp-userrights.md | 3 --- .../mdm/policy-csp-windowsconnectionmanager.md | 3 --- .../mdm/policy-csp-windowsdefendersecuritycenter.md | 3 --- .../mdm/policy-csp-windowspowershell.md | 3 --- windows/client-management/mdm/rootcacertificates-csp.md | 2 -- .../client-management/mdm/rootcacertificates-ddf-file.md | 2 -- windows/client-management/mdm/uefi-csp.md | 3 --- windows/client-management/mdm/uefi-ddf.md | 4 ---- 53 files changed, 9 insertions(+), 152 deletions(-) diff --git a/windows/client-management/mdm/accountmanagement-csp.md b/windows/client-management/mdm/accountmanagement-csp.md index f43068ab86..0575027aa8 100644 --- a/windows/client-management/mdm/accountmanagement-csp.md +++ b/windows/client-management/mdm/accountmanagement-csp.md @@ -11,8 +11,6 @@ ms.date: 03/23/2018 # AccountManagement CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. AccountManagement CSP is used to configure setting in the Account Manager service in Windows Holographic for Business edition. Added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/accountmanagement-ddf.md b/windows/client-management/mdm/accountmanagement-ddf.md index eddb5ce0ba..a7703a14e8 100644 --- a/windows/client-management/mdm/accountmanagement-ddf.md +++ b/windows/client-management/mdm/accountmanagement-ddf.md @@ -11,9 +11,6 @@ ms.date: 03/23/2018 # AccountManagement DDF file -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - This topic shows the OMA DM device description framework (DDF) for the **AccountManagement** configuration service provider. diff --git a/windows/client-management/mdm/accounts-csp.md b/windows/client-management/mdm/accounts-csp.md index 0cec8a8ad3..a5bb5e5ab5 100644 --- a/windows/client-management/mdm/accounts-csp.md +++ b/windows/client-management/mdm/accounts-csp.md @@ -11,8 +11,6 @@ ms.date: 04/17/2018 # Accounts CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. The Accounts configuration service provider (CSP) is used by the enterprise (1) to rename a device, (2) to create a new local Windows account and joint it to a local user group. This CSP was added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/accounts-ddf-file.md b/windows/client-management/mdm/accounts-ddf-file.md index 311ed73e93..0153899c28 100644 --- a/windows/client-management/mdm/accounts-ddf-file.md +++ b/windows/client-management/mdm/accounts-ddf-file.md @@ -11,8 +11,6 @@ ms.date: 04/17/2018 # Accounts CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. This topic shows the OMA DM device description framework (DDF) for the **Accounts** configuration service provider. diff --git a/windows/client-management/mdm/assignedaccess-csp.md b/windows/client-management/mdm/assignedaccess-csp.md index fa60680334..7287b515ba 100644 --- a/windows/client-management/mdm/assignedaccess-csp.md +++ b/windows/client-management/mdm/assignedaccess-csp.md @@ -35,8 +35,11 @@ A JSON string that contains the user account name and Application User Model ID For a step-by-step guide for setting up devices to run in kiosk mode, see [Set up a kiosk on Windows 10 Pro, Enterprise, or Education.](http://go.microsoft.com/fwlink/p/?LinkID=722211) > [!Note] -> You cannot set both KioskModeApp and Configuration at the same time in the device in Windows 10, version 1709. +> In Windows 10, version 1803 the Configuration node introduces single app kiosk profile to replace KioskModeApp CSP node. KioskModeApp node will be deprecated soon, so you should use the single app kiosk profile in config xml for Configuration node to configure public-facing single app Kiosk. > +> Starting in Windows 10, version 1803 the KioskModeApp node becomes No-Op if Configuration node is configured on the device. That Add/Replace/Delete command on KioskModeApp node always returns SUCCESS to the MDM server if Configuration node is set, but the data of KioskModeApp will not take any effect on the device. Get command on KioskModeApp will return the configured JSON string even it’s not effective. + +> [!Note] > You cannot set both KioskModeApp and ShellLauncher at the same time on the device. Starting in Windows 10, version 1607, you can use a provisioned app to configure the kiosk mode. For more information about how to remotely provision an app, see [Enterprise app management](enterprise-app-management.md). @@ -66,7 +69,9 @@ The supported operations are Add, Delete, Get and Replace. When there's no confi Added in Windows 10, version 1709. Specifies the settings that you can configure in the kiosk or device. This node accepts an AssignedAccessConfiguration xml as input to configure the device experience. For details about the configuration settings in the XML, see [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps). Here is the schema for the [AssignedAccessConfiguration](#assignedaccessconfiguration-xsd). > [!Note] -> You cannot set both KioskModeApp and Configuration at the same time on the device in Windows 10, version 1709. +> In Windows 10, version 1803 the Configuration node introduces single app kiosk profile to replace KioskModeApp CSP node. KioskModeApp node will be deprecated soon, so you should use the single app kiosk profile in config xml for Configuration node to configure public-facing single app Kiosk. +> +> Starting in Windows 10, version 1803 the KioskModeApp node becomes No-Op if Configuration node is configured on the device. That Add/Replace/Delete command on KioskModeApp node always returns SUCCESS to the MDM server if Configuration node is set, but the data of KioskModeApp will not take any effect on the device. Get command on KioskModeApp will return the configured JSON string even it’s not effective. Enterprises can use this to easily configure and manage the curated lockdown experience. diff --git a/windows/client-management/mdm/assignedaccess-ddf.md b/windows/client-management/mdm/assignedaccess-ddf.md index 4d6da38792..f57c98d76e 100644 --- a/windows/client-management/mdm/assignedaccess-ddf.md +++ b/windows/client-management/mdm/assignedaccess-ddf.md @@ -13,9 +13,6 @@ ms.date: 02/22/2018 # AssignedAccess DDF -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - This topic shows the OMA DM device description framework (DDF) for the **AssignedAccess** configuration service provider. DDF files are used only with OMA DM provisioning XML. You can download the DDF files from the links below: diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 556cb49468..ce295ef0c7 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -11,8 +11,6 @@ ms.date: 01/04/2018 # BitLocker CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. The BitLocker configuration service provider (CSP) is used by the enterprise to manage encryption of PCs and devices. This CSP was added in Windows 10, version 1703. diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index b2c82ca8e5..3abe24d7f7 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -13,9 +13,6 @@ ms.date: 01/29/2018 # Defender CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - The Windows Defender configuration service provider is used to configure various Windows Defender actions across the enterprise. The following image shows the Windows Defender configuration service provider in tree format. diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md index 4077ab58af..1a0438dc8e 100644 --- a/windows/client-management/mdm/defender-ddf.md +++ b/windows/client-management/mdm/defender-ddf.md @@ -13,9 +13,6 @@ ms.date: 01/29/20178 # Defender DDF file -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - This topic shows the OMA DM device description framework (DDF) for the **Defender** configuration service provider. DDF files are used only with OMA DM provisioning XML. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index 4de7bc9cc1..6adcc5b415 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -13,9 +13,6 @@ ms.date: 11/01/2017 # DMClient CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - The DMClient configuration service provider is used to specify additional enterprise-specific mobile device management configuration settings for identifying the device in the enterprise domain, security mitigation for certificate renewal, and server-triggered enterprise unenrollment. The following diagram shows the DMClient configuration service provider in tree format. diff --git a/windows/client-management/mdm/dmclient-ddf-file.md b/windows/client-management/mdm/dmclient-ddf-file.md index fda5ae3f82..e4a11620fa 100644 --- a/windows/client-management/mdm/dmclient-ddf-file.md +++ b/windows/client-management/mdm/dmclient-ddf-file.md @@ -13,9 +13,6 @@ ms.date: 12/05/2017 # DMClient DDF file -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - This topic shows the OMA DM device description framework (DDF) for the **DMClient** configuration service provider. DDF files are used only with OMA DM provisioning XML. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md index 404877f84d..0921c036c4 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md @@ -13,9 +13,6 @@ ms.date: 03/01/2018 # EnterpriseModernAppManagement CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - The EnterpriseModernAppManagement configuration service provider (CSP) is used for the provisioning and reporting of modern enterprise apps. For details about how to use this CSP to for reporting apps inventory, installation and removal of apps for users, provisioning apps to devices, and managing app licenses, see [Enterprise app management](enterprise-app-management.md). > [!Note] diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md index 7c3c1c855b..12cb46b485 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md @@ -13,9 +13,6 @@ ms.date: 03/01/2018 # EnterpriseModernAppManagement DDF -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - This topic shows the OMA DM device description framework (DDF) for the **EnterpriseModernAppManagement** configuration service provider. DDF files are used only with OMA DM provisioning XML. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). diff --git a/windows/client-management/mdm/multisim-csp.md b/windows/client-management/mdm/multisim-csp.md index b82b5779fd..3b07d6a98c 100644 --- a/windows/client-management/mdm/multisim-csp.md +++ b/windows/client-management/mdm/multisim-csp.md @@ -11,8 +11,6 @@ ms.date: 03/22/2018 # MultiSIM CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. The MultiSIM configuration service provider (CSP) is used by the enterprise to manage devices with dual SIM single active configuration. An enterprise can set policies on whether that user can switch between SIM slots, specify which slot is the default, and whether the slot is embedded. This CSP was added in Windows 10, version 1803. diff --git a/windows/client-management/mdm/multisim-ddf.md b/windows/client-management/mdm/multisim-ddf.md index ccdbecbaee..b75b123630 100644 --- a/windows/client-management/mdm/multisim-ddf.md +++ b/windows/client-management/mdm/multisim-ddf.md @@ -11,8 +11,6 @@ ms.date: 02/27/2018 # MultiSIM CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. This topic shows the OMA DM device description framework (DDF) for the **MultiSIM** configuration service provider. diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 27b42bd746..e8314d26e5 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -16,10 +16,6 @@ ms.date: 04/26/2018 # What's new in MDM enrollment and management -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - - This topic provides information about what's new and breaking changes in Windows 10 mobile device management (MDM) enrollment and management experience across all Windows 10 devices. For details about Microsoft mobile device management protocols for Windows 10 see [\[MS-MDM\]: Mobile Device Management Protocol](http://go.microsoft.com/fwlink/p/?LinkId=619346) and [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2]( http://go.microsoft.com/fwlink/p/?LinkId=619347). @@ -1202,7 +1198,8 @@ For details about Microsoft mobile device management protocols for Windows 10 s
  • LocalPoliciesSecurityOptions/Shutdown_ClearVirtualMemoryPageFile
  • LocalPoliciesSecurityOptions/SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
  • LocalPoliciesSecurityOptions/UserAccountControl_DetectApplicationInstallationsAndPromptForElevation
    • -
  • LocalPoliciesSecurityOptions/UserAccountControl_UseAdminApprovalMode
    • +
  • LocalPoliciesSecurityOptions/UserAccountControl_UseAdminApprovalMode
    • +
  • Notifications/DisallowCloudNotification
  • RestrictedGroups/ConfigureGroupMembership
  • Search/AllowCortanaInAAD
  • Search/DoNotUseWebResults
    • diff --git a/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md b/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md index 7cee27e382..32daf8fcb7 100644 --- a/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md +++ b/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - AccountPoliciesAccountLockoutPolicy -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-applicationdefaults.md b/windows/client-management/mdm/policy-csp-applicationdefaults.md index 02d3d2895e..c203a66f41 100644 --- a/windows/client-management/mdm/policy-csp-applicationdefaults.md +++ b/windows/client-management/mdm/policy-csp-applicationdefaults.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - ApplicationDefaults -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-applicationmanagement.md b/windows/client-management/mdm/policy-csp-applicationmanagement.md index 082ad6881d..e96fc68705 100644 --- a/windows/client-management/mdm/policy-csp-applicationmanagement.md +++ b/windows/client-management/mdm/policy-csp-applicationmanagement.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - ApplicationManagement -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-appruntime.md b/windows/client-management/mdm/policy-csp-appruntime.md index 386d22dfe2..f37e5b4640 100644 --- a/windows/client-management/mdm/policy-csp-appruntime.md +++ b/windows/client-management/mdm/policy-csp-appruntime.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - AppRuntime -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-bluetooth.md b/windows/client-management/mdm/policy-csp-bluetooth.md index 0205e259b0..762903da37 100644 --- a/windows/client-management/mdm/policy-csp-bluetooth.md +++ b/windows/client-management/mdm/policy-csp-bluetooth.md @@ -11,9 +11,6 @@ ms.date: 04/06/2018 # Policy CSP - Bluetooth -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 514ff83491..ab3d44948e 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - Browser -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md index e07d5f9e02..bfd371ead5 100644 --- a/windows/client-management/mdm/policy-csp-connectivity.md +++ b/windows/client-management/mdm/policy-csp-connectivity.md @@ -11,9 +11,6 @@ ms.date: 03/14/2018 # Policy CSP - Connectivity -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index 503193fb97..b777062185 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - ControlPolicyConflict -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-credentialsdelegation.md b/windows/client-management/mdm/policy-csp-credentialsdelegation.md index edd5e6b205..71806982ff 100644 --- a/windows/client-management/mdm/policy-csp-credentialsdelegation.md +++ b/windows/client-management/mdm/policy-csp-credentialsdelegation.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - CredentialsDelegation -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index aa3591630f..29a7886fbb 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - DeliveryOptimization -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md index 0a7c86e017..98974c6cb0 100644 --- a/windows/client-management/mdm/policy-csp-devicelock.md +++ b/windows/client-management/mdm/policy-csp-devicelock.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - DeviceLock -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-display.md b/windows/client-management/mdm/policy-csp-display.md index 0cf8a9740d..3ff482c3d6 100644 --- a/windows/client-management/mdm/policy-csp-display.md +++ b/windows/client-management/mdm/policy-csp-display.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - Display -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index 38e01b4868..528d2b70fb 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - Experience -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-fileexplorer.md b/windows/client-management/mdm/policy-csp-fileexplorer.md index df185f9924..91fe973551 100644 --- a/windows/client-management/mdm/policy-csp-fileexplorer.md +++ b/windows/client-management/mdm/policy-csp-fileexplorer.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - FileExplorer -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-kioskbrowser.md b/windows/client-management/mdm/policy-csp-kioskbrowser.md index f662a910d4..cfe6ce478c 100644 --- a/windows/client-management/mdm/policy-csp-kioskbrowser.md +++ b/windows/client-management/mdm/policy-csp-kioskbrowser.md @@ -11,8 +11,6 @@ ms.date: 04/11/2018 # Policy CSP - KioskBrowser -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. These policies currently only apply to Kiosk Browser app. Kiosk Browser is a Microsoft Store app, added in Windows 10 version 1803, that provides IT a way to customize the end user’s browsing experience to fulfill kiosk, signage, and shared device scenarios. Application developers can also create their own kiosk browser and read these policies using [NamedPolicy.GetPolicyFromPath(String, String) Method](https://docs.microsoft.com/en-us/uwp/api/windows.management.policies.namedpolicy.getpolicyfrompath#Windows_Management_Policies_NamedPolicy_GetPolicyFromPath_System_String_System_String_). diff --git a/windows/client-management/mdm/policy-csp-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-lanmanworkstation.md index 15c57e928a..13e2299224 100644 --- a/windows/client-management/mdm/policy-csp-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-lanmanworkstation.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - LanmanWorkstation -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md index eba91fae44..1daf3d8ae0 100644 --- a/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md +++ b/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md @@ -11,9 +11,6 @@ ms.date: 04/06/2018 # Policy CSP - LocalPoliciesSecurityOptions -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-mssecurityguide.md b/windows/client-management/mdm/policy-csp-mssecurityguide.md index bed4009f6a..f20149e9f0 100644 --- a/windows/client-management/mdm/policy-csp-mssecurityguide.md +++ b/windows/client-management/mdm/policy-csp-mssecurityguide.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - MSSecurityGuide -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-msslegacy.md b/windows/client-management/mdm/policy-csp-msslegacy.md index 85f1361fe8..c6727fa700 100644 --- a/windows/client-management/mdm/policy-csp-msslegacy.md +++ b/windows/client-management/mdm/policy-csp-msslegacy.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - MSSLegacy -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-notifications.md b/windows/client-management/mdm/policy-csp-notifications.md index e5838dc453..51caa36965 100644 --- a/windows/client-management/mdm/policy-csp-notifications.md +++ b/windows/client-management/mdm/policy-csp-notifications.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - Notifications -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-restrictedgroups.md b/windows/client-management/mdm/policy-csp-restrictedgroups.md index 8e59202bfb..e18e0e6de6 100644 --- a/windows/client-management/mdm/policy-csp-restrictedgroups.md +++ b/windows/client-management/mdm/policy-csp-restrictedgroups.md @@ -11,9 +11,6 @@ ms.date: 03/15/2018 # Policy CSP - RestrictedGroups -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index 12b9c8386e..aea6133ba1 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - Search -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-security.md b/windows/client-management/mdm/policy-csp-security.md index b03abc2582..1549210b82 100644 --- a/windows/client-management/mdm/policy-csp-security.md +++ b/windows/client-management/mdm/policy-csp-security.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - Security -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-settings.md b/windows/client-management/mdm/policy-csp-settings.md index 5773e32200..1c445ea4d5 100644 --- a/windows/client-management/mdm/policy-csp-settings.md +++ b/windows/client-management/mdm/policy-csp-settings.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - Settings -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-system.md b/windows/client-management/mdm/policy-csp-system.md index 6c6ed3c4c9..5aa3adb08a 100644 --- a/windows/client-management/mdm/policy-csp-system.md +++ b/windows/client-management/mdm/policy-csp-system.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - System -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-systemservices.md b/windows/client-management/mdm/policy-csp-systemservices.md index 1efa6419f1..800090eaf1 100644 --- a/windows/client-management/mdm/policy-csp-systemservices.md +++ b/windows/client-management/mdm/policy-csp-systemservices.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - SystemServices -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-taskscheduler.md b/windows/client-management/mdm/policy-csp-taskscheduler.md index 4ac73d9f96..7a05f84ffc 100644 --- a/windows/client-management/mdm/policy-csp-taskscheduler.md +++ b/windows/client-management/mdm/policy-csp-taskscheduler.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - TaskScheduler -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-textinput.md b/windows/client-management/mdm/policy-csp-textinput.md index a7c646446d..affd6a36ac 100644 --- a/windows/client-management/mdm/policy-csp-textinput.md +++ b/windows/client-management/mdm/policy-csp-textinput.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - TextInput -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 5462333ba5..9d34d6f2cc 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - Update -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index 3584468818..e8f878d742 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - UserRights -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md index 4f33bd0bdf..0dfb797f32 100644 --- a/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md +++ b/windows/client-management/mdm/policy-csp-windowsconnectionmanager.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - WindowsConnectionManager -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md index c94d1e9dd5..62f0031a6e 100644 --- a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md +++ b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md @@ -11,9 +11,6 @@ ms.date: 03/12/2018 # Policy CSP - WindowsDefenderSecurityCenter -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/policy-csp-windowspowershell.md b/windows/client-management/mdm/policy-csp-windowspowershell.md index dca0467136..3ca5b0ea63 100644 --- a/windows/client-management/mdm/policy-csp-windowspowershell.md +++ b/windows/client-management/mdm/policy-csp-windowspowershell.md @@ -11,9 +11,6 @@ ms.date: 04/16/2018 # Policy CSP - WindowsPowerShell -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -
    diff --git a/windows/client-management/mdm/rootcacertificates-csp.md b/windows/client-management/mdm/rootcacertificates-csp.md index b7fa5a8362..1f5811644c 100644 --- a/windows/client-management/mdm/rootcacertificates-csp.md +++ b/windows/client-management/mdm/rootcacertificates-csp.md @@ -12,8 +12,6 @@ ms.date: 03/06/2018 # RootCATrustedCertificates CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. The RootCATrustedCertificates configuration service provider enables the enterprise to set the Root Certificate Authority (CA) certificates. diff --git a/windows/client-management/mdm/rootcacertificates-ddf-file.md b/windows/client-management/mdm/rootcacertificates-ddf-file.md index 03c352d150..e7109c768a 100644 --- a/windows/client-management/mdm/rootcacertificates-ddf-file.md +++ b/windows/client-management/mdm/rootcacertificates-ddf-file.md @@ -12,8 +12,6 @@ ms.date: 03/07/2018 # RootCATrustedCertificates DDF file -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. This topic shows the OMA DM device description framework (DDF) for the **RootCACertificates** configuration service provider. DDF files are used only with OMA DM provisioning XML. diff --git a/windows/client-management/mdm/uefi-csp.md b/windows/client-management/mdm/uefi-csp.md index d2a2fc6fef..72f8871f90 100644 --- a/windows/client-management/mdm/uefi-csp.md +++ b/windows/client-management/mdm/uefi-csp.md @@ -12,9 +12,6 @@ ms.date: 02/01/2018 # UEFI CSP -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - The UEFI configuration service provider (CSP) interfaces to UEFI's Device Firmware Configuration Interface (DFCI) to make BIOS configuration changes. This CSP was added in Windows 10, version 1803. The following diagram shows the UEFI CSP in tree format. diff --git a/windows/client-management/mdm/uefi-ddf.md b/windows/client-management/mdm/uefi-ddf.md index 5f8e6403eb..8ea53d146e 100644 --- a/windows/client-management/mdm/uefi-ddf.md +++ b/windows/client-management/mdm/uefi-ddf.md @@ -12,10 +12,6 @@ ms.date: 02/01/2018 # UEFI DDF file -> [!WARNING] -> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. - - This topic shows the OMA DM device description framework (DDF) for the **Uefi** configuration service provider. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). From ce48d442c12b1dc77fb05ba781be56a871ec58d8 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 2 May 2018 19:46:00 +0000 Subject: [PATCH 13/20] Merged PR 7740: Add 1803 note to Wi-Fi Sense --- .../change-history-for-configure-windows-10.md | 6 ++++++ windows/configuration/manage-wifi-sense-in-enterprise.md | 5 +++-- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 9eae6cb71d..135248c1d1 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -15,6 +15,12 @@ ms.date: 04/30/2018 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## May 2018 + +New or changed topic | Description +--- | --- +[Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md) | Added note that Wi-Fi Sense is no longer available. + ## RELEASE: Windows 10, version 1803 The topics in this library have been updated for Windows 10, version 1803. The following new topics have been added: diff --git a/windows/configuration/manage-wifi-sense-in-enterprise.md b/windows/configuration/manage-wifi-sense-in-enterprise.md index 9cb8223eed..068422a836 100644 --- a/windows/configuration/manage-wifi-sense-in-enterprise.md +++ b/windows/configuration/manage-wifi-sense-in-enterprise.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: mobile author: eross-msft ms.localizationpriority: medium -ms.date: 07/27/2017 +ms.date: 05/02/2018 --- # Manage Wi-Fi Sense in your company @@ -18,7 +18,8 @@ ms.date: 07/27/2017 - Windows 10 - Windows 10 Mobile ->Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare). +>[!IMPORTANT] +>Beginning with Windows 10, version 1803, Wifi-Sense is no longer available. The following information only applies to Windows 10, version 1709 and prior. Please see [Connecting to open Wi-Fi hotspots in Windows 10](https://privacy.microsoft.com/windows-10-open-wi-fi-hotspots) for more details. Wi-Fi Sense learns about open Wi-Fi hotspots your Windows PC or Windows phone connects to by collecting information about the network, like whether the open Wi-Fi network has a high-quality connection to the Internet. By using that information from your device and from other Wi-Fi Sense customers' devices too, Wi-Fi Sense builds a database of these high-quality networks. When you’re in range of one of these Wi-Fi hotspots, you automatically get connected to it. From 34d447116881fbbf98e322b9324892ccb17ad38f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 May 2018 12:56:06 -0700 Subject: [PATCH 14/20] update auto inv os support --- ...tigations-windows-defender-advanced-threat-protection.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md index 94e1a95594..9c89602bae 100644 --- a/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md @@ -36,8 +36,10 @@ The Automated investigations list shows all the investigations that have been in ## Understand the Automated investigation flow ### How the Automated investigation starts -Entities are the starting point for Automated investigations. When an alert contains a supported entity for Automated investigation (for example, a file) that resides on a machine that has a *supported operating system for Automated investigation then an Automated investigation can start. -*Currently only Windows 10 version 1803 (spring creators update) and above are supported operating systems for Autoamted Investigation +Entities are the starting point for Automated investigations. When an alert contains a supported entity for Automated investigation (for example, a file) that resides on a machine that has a supported operating system for Automated investigation then an Automated investigation can start. + +>[!NOTE] +>Currently, Automated investigation only supports Windows 10, version 1803 or later. The alerts start by analyzing the supported entities from the alert and also runs a generic machine playbook to see if there is anything else suspicious on that machine. The outcome and details from the investigation is seen in the Automated investigation view. From b0db79bddf14e5b485bb068243195952aca1275f Mon Sep 17 00:00:00 2001 From: Liza Poggemeyer Date: Wed, 2 May 2018 20:35:14 +0000 Subject: [PATCH 15/20] Removed rows from comment that wouldn't comment out --- windows/deployment/upgrade/windows-10-edition-upgrades.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/windows/deployment/upgrade/windows-10-edition-upgrades.md b/windows/deployment/upgrade/windows-10-edition-upgrades.md index 453db50ca3..a500bcb812 100644 --- a/windows/deployment/upgrade/windows-10-edition-upgrades.md +++ b/windows/deployment/upgrade/windows-10-edition-upgrades.md @@ -46,11 +46,6 @@ X = unsupported
    | **Home > Pro for Workstations** | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | | **Home > Pro Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | | **Home > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | - | **Pro > Pro for Workstations** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
    (MSfB) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | | **Pro > Pro Education** | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png) | ![supported, no reboot](../images/check_blu.png)
    (MSfB) | ![supported, no reboot](../images/check_blu.png) | ![not supported](../images/x_blk.png) | | **Pro > Education** | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png) | ![supported, reboot required](../images/check_grn.png)
    (MSfB) | ![supported, reboot required](../images/check_grn.png) | ![not supported](../images/x_blk.png) | From 7d717f250b6ef1f4cd930169f6231ccd30ce7784 Mon Sep 17 00:00:00 2001 From: MikeBlodge Date: Wed, 2 May 2018 13:42:47 -0700 Subject: [PATCH 16/20] corrected typos --- education/windows/switch-to-pro-education.md | 58 +++++++++---------- .../deployment/windows-10-pro-in-s-mode.md | 2 +- 2 files changed, 30 insertions(+), 30 deletions(-) diff --git a/education/windows/switch-to-pro-education.md b/education/windows/switch-to-pro-education.md index de07efe44c..816baa12a2 100644 --- a/education/windows/switch-to-pro-education.md +++ b/education/windows/switch-to-pro-education.md @@ -16,8 +16,8 @@ ms.date: 04/30/2018 Windows 10 Pro Education is a new offering in Windows 10, version 1607. This edition builds on the commercial version of Windows 10 Pro and provides important management controls needed in schools by providing education-specific default settings. If you have an education tenant and use devices with Windows 10 Pro, global administrators can opt-in to a free change to Windows 10 Pro Education depending on your scenario. -- [change from Windows 10 Pro in S mode to Windows 10 Pro Education in S mode](https://www.microsoft.com/en-us/education/windows/s-mode-change-to-edu) -- [change from Windows 10 Pro to Windows 10 Pro Education](#change-from-windows-10-pro-to-windows-10-pro-education) +- [Switch from Windows 10 Pro in S mode to Windows 10 Pro Education in S mode](https://www.microsoft.com/en-us/education/windows/s-mode-change-to-edu) +- [Switch from Windows 10 Pro to Windows 10 Pro Education](#switch-from-windows-10-pro-to-windows-10-pro-education) To take advantage of this offering, make sure you meet the [requirements for changing](#requirements-for-changing). For academic customers who are eligible to change to Windows 10 Pro Education, but are unable to use the above methods, contact Microsoft Support for assistance. @@ -37,7 +37,7 @@ You can [compare Windows 10 Editions](https://www.microsoft.com/en-us/WindowsFor For more info about Windows 10 default settings and recommendations for education customers, see [Windows 10 configuration recommendations for education customers](configure-windows-for-education.md). -## change from Windows 10 Pro to Windows 10 Pro Education +## Change from Windows 10 Pro to Windows 10 Pro Education For schools that want to standardize all their Windows 10 Pro devices to Windows 10 Pro Education, a global admin for the school can opt-in to a free change through the Microsoft Store for Education. @@ -49,7 +49,7 @@ In this scenario: See [change using Microsoft Store for Education](#change-using-microsoft-store-for-education) for details on how to do this. -### change using Intune for Education +### Change using Intune for Education 1. In Intune for Education, select **Groups** and then choose the group that you want to apply the MAK license key to. @@ -66,7 +66,7 @@ See [change using Microsoft Store for Education](#change-using-microsoft-store-f 3. The change will automatically be applied to the group you selected. -### change using Windows Configuration Designer +### Change using Windows Configuration Designer You can use Windows Configuration Designer to create a provisioning package that you can use to change the Windows edition for your device(s). [Install Windows Configuration Designer from the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4tx22) to create a provisioning package. 1. In Windows Configuration Designer, select **Provision desktop devices** to open the simple editor and create a provisioning package for Windows desktop editions. @@ -81,7 +81,7 @@ You can use Windows Configuration Designer to create a provisioning package that For more information about using Windows Configuration Designer, see [Set up student PCs to join domain](https://technet.microsoft.com/en-us/edu/windows/set-up-students-pcs-to-join-domain). -### change using the Activation page +### Change using the Activation page 1. On the Windows device that you want to change, open the **Settings** app. 2. Select **Update & security** > **Activation**, and then click **Change product key**. @@ -103,7 +103,7 @@ When you change to Windows 10 Pro Education, you get the following benefits: See [Roll back Windows 10 Pro Education to Windows 10 Pro](#roll-back-windows-10-pro-education-to-windows-10-pro) for more info. -### change using Microsoft Store for Education +### Change using Microsoft Store for Education Once you enable the setting to change to Windows 10 Pro Education, the change will begin only after a user signs in to their device. The setting applies to the entire organization or tenant, so you cannot select which users will receive the change. The change will only apply to Windows 10 Pro devices. **To turn on the automatic change to Windows 10 Pro Education** @@ -113,24 +113,24 @@ Once you enable the setting to change to Windows 10 Pro Education, the change wi If this is the first time you're signing into the Microsoft Store for Education, you'll be prompted to accept the Microsoft Store for Education Terms of Use. 2. Click **Manage** from the top menu and then select the **Benefits tile**. -3. In the **Benefits** tile, look for the **change to Windows 10 Pro Education for free** link and then click it. +3. In the **Benefits** tile, look for the **Change to Windows 10 Pro Education for free** link and then click it. -4. In the **change all your devices to Windows 10 Pro Education for free** page, check box next to **I understand enabling this setting will change all domain-joined devices running Windows 10 Pro in my organization**. +4. In the **Change all your devices to Windows 10 Pro Education for free** page, check box next to **I understand enabling this setting will change all domain-joined devices running Windows 10 Pro in my organization**. - **Figure 4** - Check the box to confirm + **Figure 3** - Check the box to confirm ![Check the box to confirm](images/msfe_manage_benefits_checktoconfirm.png) -5. Click **change all my devices**. +5. Click **Change all my devices**. A confirmation window pops up to let you know that an email has been sent to you to enable the change. 6. Close the confirmation window and check the email to proceed to the next step. -7. In the email, click the link to **change to Windows 10 Pro Education**. Once you click the link, this will take you back to the Microsoft Store for Education portal. +7. In the email, click the link to **Change to Windows 10 Pro Education**. Once you click the link, this will take you back to the Microsoft Store for Education portal. -8. Click **change now** in the **changing your device to Windows 10 Pro Education for free** page in the Microsoft Store. +8. Click **Change now** in the **changing your device to Windows 10 Pro Education for free** page in the Microsoft Store. - You will see a window that confirms you've successfully changeed all the devices in your organization to Windows 10 Pro Education, and each Azure AD joined device running Windows 10 Pro will automatically change the next time someone in your organization signs in to the device. + You will see a window that confirms you've successfully changed all the devices in your organization to Windows 10 Pro Education, and each Azure AD joined device running Windows 10 Pro will automatically change the next time someone in your organization signs in to the device. 9. Click **Close** in the **Success** window. @@ -142,7 +142,7 @@ Enabling the automatic change also triggers an email message notifying all globa So what will users experience? How will they change their devices? ### For existing Azure AD joined devices -Existing Azure AD domain joined devices will be changeed to Windows 10 Pro Education the next time the user logs in. That's it! No additional steps are needed. +Existing Azure AD domain joined devices will be changed to Windows 10 Pro Education the next time the user logs in. That's it! No additional steps are needed. ### For new devices that are not Azure AD joined Now that you've turned on the setting to automatically change to Windows 10 Pro Education, the users are ready to change their devices running Windows 10 Pro, version 1607 or higher, version 1703 to Windows 10 Pro Education edition. @@ -163,13 +163,13 @@ If the Windows device is running Windows 10, version 1703, follow these steps. 1. During initial device setup, on the **How would you like to set up?** page, select **Set up for an organization**, and then click **Next**. - **Figure 7** - Select how you'd like to set up the device + **Figure 4** - Select how you'd like to set up the device ![Select how you'd like to set up the device](images/1_howtosetup.png) 2. On the **Sign in with Microsoft** page, enter the username and password to use with Office 365 or other services from Microsoft, and then click **Next**. - **Figure 8** - Enter the account details + **Figure 5** - Enter the account details ![Enter the account details you use with Office 365 or other Microsoft services](images/2_signinwithms.png) @@ -182,21 +182,21 @@ If the Windows device is running Windows 10, version 1703, follow these steps. 1. Go to **Settings > Accounts > Access work or school**. - **Figure 9** - Go to **Access work or school** in Settings + **Figure 6** - Go to **Access work or school** in Settings ![Go to Access work or school in Settings](images/settings_workorschool_1.png) 2. In **Access work or school**, click **Connect**. 3. In the **Set up a work or school account** window, click the **Join this device to Azure Active Directory** option at the bottom. - **Figure 10** - Select the option to join the device to Azure Active Directory + **Figure 7** - Select the option to join the device to Azure Active Directory ![Select the option to join the device to Azure Active Directory](images/settings_setupworkorschoolaccount_2.png) 4. On the **Let's get you signed in** window, enter the Azure AD credentials (username and password) and sign in. This will join the device to the school's Azure AD. 5. To verify that the device was successfully joined to Azure AD, go back to **Settings > Accounts > Access work or school**. You should now see a connection under the **Connect to work or school** section that indicates the device is connected to Azure AD. - **Figure 11** - Verify the device connected to Azure AD + **Figure 8** - Verify the device connected to Azure AD ![Verify the device is connected to Azure AD](images/settings_connectedtoazuread_3.png) @@ -210,7 +210,7 @@ Once the device is joined to your Azure AD subscription, the user will sign in b You can verify the Windows 10 Pro Education in **Settings > Update & Security > Activation**. -**Figure 12** - Windows 10 Pro Education in Settings +**Figure 9** - Windows 10 Pro Education in Settings Windows 10 activated and subscription active @@ -225,12 +225,12 @@ In some instances, users may experience problems with the Windows 10 Pro Educat Use the following figures to help you troubleshoot when users experience these common problems: -**Figure 13** - Illustrates a device in a healthy state, where the existing operating system is activated, and the Windows 10 Pro Education change is active. +**Figure 10** - Illustrates a device in a healthy state, where the existing operating system is activated, and the Windows 10 Pro Education change is active. Windows 10 activated and subscription active

    -**Figure 14** - Illustrates a device on which the existing operating system is not activated, but the Windows 10 Pro Education change is active. +**Figure 11** - Illustrates a device on which the existing operating system is not activated, but the Windows 10 Pro Education change is active. Windows 10 not activated and subscription active

    @@ -260,7 +260,7 @@ Devices must be running Windows 10 Pro, version 1607 or higher, or domain joined A popup window will display the Windows 10 version number and detailed OS build information. > [!NOTE] - > If a device is running a previous version of Windows 10 Pro (for example, version 1511), it will not be changeed to Windows 10 Pro Education when a user signs in, even if the user has been assigned a license. + > If a device is running a previous version of Windows 10 Pro (for example, version 1511), it will not be changed to Windows 10 Pro Education when a user signs in, even if the user has been assigned a license. ### Roll back Windows 10 Pro Education to Windows 10 Pro @@ -269,10 +269,10 @@ If your organization has the Windows 10 Pro to Windows 10 Pro Education change e - Logging into Microsoft Store for Education page and turning off the automatic change. - Selecting the link to turn off the automatic change from the notification email sent to all global administrators. -Once the automatic change to Windows 10 Pro Education is turned off, the change is effective immediately. Devices that were changeed will revert to Windows 10 Pro only after the license has been refreshed (every 30 days) and the next time the user signs in. This means that a user whose device was changeed may not immediately see Windows 10 Pro Education rolled back to Windows 10 Pro for up to 30 days. However, users who haven't signed in during the time that a change was enabled and then turned off will never see their device change from Windows 10 Pro. +Once the automatic change to Windows 10 Pro Education is turned off, the change is effective immediately. Devices that were changed will revert to Windows 10 Pro only after the license has been refreshed (every 30 days) and the next time the user signs in. This means that a user whose device was changed may not immediately see Windows 10 Pro Education rolled back to Windows 10 Pro for up to 30 days. However, users who haven't signed in during the time that a change was enabled and then turned off will never see their device change from Windows 10 Pro. > [!NOTE] -> Devices that were changeed from mode to Windows 10 Pro Education cannot roll back to Windows 10 Pro Education S mode. +> Devices that were changed from mode to Windows 10 Pro Education cannot roll back to Windows 10 Pro Education S mode. **To roll back Windows 10 Pro Education to Windows 10 Pro** @@ -280,7 +280,7 @@ Once the automatic change to Windows 10 Pro Education is turned off, the change 2. Select **Manage > Benefits** and locate the section **Windows 10 Pro Education** and follow the link. 3. In the **Revert to Windows 10 Pro** page, click **Revert to Windows 10 Pro**. - **Figure 15** - Revert to Windows 10 Pro + **Figure 12** - Revert to Windows 10 Pro ![Revert to Windows 10 Pro](images/msfe_manage_reverttowin10pro.png) @@ -296,9 +296,9 @@ If you have on-premises Active Directory Domain Services (AD DS) domains, users You need to synchronize these identities so that users will have a *single identity* that they can use to access their on-premises apps and cloud services that use Azure AD (such as Windows 10 Pro Education). This means that users can use their existing credentials to sign in to Azure AD and access the cloud services that you provide and manage for them. -Figure 11 illustrates the integration between the on-premises AD DS domain with Azure AD. [Microsoft Azure Active Directory Connect](https://www.microsoft.com/en-us/download/details.aspx?id=47594) (Azure AD Connect) is responsible for synchronization of identities between the on-premises AD DS domain and Azure AD. Azure AD Connect is a service that you can install on-premises or in a virtual machine in Azure. +(Azure AD Connect) is responsible for synchronization of identities between the on-premises AD DS domain and Azure AD. Azure AD Connect is a service that you can install on-premises or in a virtual machine in Azure. -**Figure 16** - On-premises AD DS integrated with Azure AD +**Figure 13** - On-premises AD DS integrated with Azure AD ![Illustration of Azure Active Directory Connect](images/windows-ad-connect.png) diff --git a/windows/deployment/windows-10-pro-in-s-mode.md b/windows/deployment/windows-10-pro-in-s-mode.md index bab515eeed..db34074133 100644 --- a/windows/deployment/windows-10-pro-in-s-mode.md +++ b/windows/deployment/windows-10-pro-in-s-mode.md @@ -63,4 +63,4 @@ You'll be prompted to save your files before the switch starts. Follow the promp [Compare Windows 10 editions](https://www.microsoft.com/WindowsForBusiness/Compare)
    [Windows 10 Pro Education](https://docs.microsoft.com/education/windows/test-windows10s-for-edu)
    -[Introdiction to Microsoft Intune in the Azure portal](https://docs.microsoft.com/en-us/intune/what-is-intune) +[Introduction to Microsoft Intune in the Azure portal](https://docs.microsoft.com/en-us/intune/what-is-intune) From 96061b10e7fa8d214577809445fcb513934b9a1c Mon Sep 17 00:00:00 2001 From: MikeBlodge Date: Wed, 2 May 2018 13:50:46 -0700 Subject: [PATCH 17/20] edited sequential numbering to be accurate --- education/windows/switch-to-pro-education.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/education/windows/switch-to-pro-education.md b/education/windows/switch-to-pro-education.md index 816baa12a2..190b45e980 100644 --- a/education/windows/switch-to-pro-education.md +++ b/education/windows/switch-to-pro-education.md @@ -308,6 +308,6 @@ For more information about integrating on-premises AD DS domains with Azure AD, ## Related topics -[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md) -[Deploy Windows 10 in a school district](deploy-windows-10-in-a-school-district.md) +[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)
    +[Deploy Windows 10 in a school district](deploy-windows-10-in-a-school-district.md)
    [Compare Windows 10 editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare) From b40528d7131ff37e209590714c7e341322ad1277 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 2 May 2018 14:04:02 -0700 Subject: [PATCH 18/20] deleted spurious internal link --- .../deployment/update/windows-analytics-FAQ-troubleshooting.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 0de84a225d..94cc5759c2 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 04/05/2018 +ms.date: 05/02/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -23,7 +23,6 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Device Health crash data not appearing](#device-health-crash-data-not-appearing) -[Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates) [Upgrade Readiness shows many "Computers with outdated KB"](#upgrade-readiness-shows-many-computers-with-outdated-kb) From 4bbe270df984f36b6fd4104376a4cb348eea5b01 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 2 May 2018 14:32:44 -0700 Subject: [PATCH 19/20] fixed link to Windows for Business --- windows/deployment/upgrade/upgrade-readiness-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-requirements.md b/windows/deployment/upgrade/upgrade-readiness-requirements.md index 9d83376ce5..9e68e3b157 100644 --- a/windows/deployment/upgrade/upgrade-readiness-requirements.md +++ b/windows/deployment/upgrade/upgrade-readiness-requirements.md @@ -39,7 +39,7 @@ Upgrade Readiness is offered as a solution in the Microsoft Operations Managemen If you’re already using OMS, you’ll find Upgrade Readiness in the Solutions Gallery. Click the Upgrade Readiness tile in the gallery and then click Add on the solution’s details page. Upgrade Readiness is now visible in your workspace. -If you are not using OMS, go to the [Upgrade Readiness page](https://www.microsoft.com/en-us/WindowsForBusiness/upgrade-analytics) on Microsoft.com and select **Sign up** to kick off the OMS onboarding process. During the onboarding process, you’ll create an OMS workspace and add the Upgrade Readiness solution to it. +If you are not using OMS, go to the [Upgrade Readiness page](https://www.microsoft.com/en-us/windowsforbusiness/simplified-updates) on Microsoft.com and select **Sign up** to kick off the OMS onboarding process. During the onboarding process, you’ll create an OMS workspace and add the Upgrade Readiness solution to it. Important: You can use either a Microsoft Account or a Work or School account to create a workspace. If your company is already using Azure Active Directory, use a Work or School account when you sign in to OMS. Using a Work or School account allows you to use identities from your Azure AD to manage permissions in OMS. You also need an Azure subscription to link to your OMS workspace. The account you used to create the workspace must have administrator permissions on the Azure subscription in order to link the workspace to the Azure account. Once the link has been established, you can revoke the administrator permissions. From 4b14dc86053c3b963b54610e0ce240bf2402c663 Mon Sep 17 00:00:00 2001 From: MikeBlodge Date: Wed, 2 May 2018 14:41:33 -0700 Subject: [PATCH 20/20] added FAQ for commercial and EDU S mode doc --- education/windows/s-mode-switch-to-edu.md | 5 +++-- windows/deployment/windows-10-pro-in-s-mode.md | 5 +++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/education/windows/s-mode-switch-to-edu.md b/education/windows/s-mode-switch-to-edu.md index 81a611be20..4fc7cd0c9e 100644 --- a/education/windows/s-mode-switch-to-edu.md +++ b/education/windows/s-mode-switch-to-edu.md @@ -51,8 +51,8 @@ However, in some limited scenarios, you might need to switch to Windows 10 Educa **Switch using the Microsoft Store for Education**
    There are two switch options available using the Microsoft Store for Education: -Tenant-wide Windows 10 Pro in S mode > Pro EDU in S mode
    -Tenant-wide Windows 10 Pro > Pro EDU +Tenant-wide Windows 10 Pro in S mode > Pro Education in S mode
    +Tenant-wide Windows 10 Pro > Pro Education > [!NOTE] > To rollback to Windows 10 Pro in S mode, a BMR factory reset must be performed. @@ -67,6 +67,7 @@ Tenant-wide Windows 10 Pro > Pro EDU > There is currently no "bulk-switch" option for devices running Windows 10, version 1803. ## Related Topics +[FAQs](https://support.microsoft.com/en-us/help/4020089/windows-10-in-s-mode-faq)
    [Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)
    [Deploy Windows 10 in a school district](deploy-windows-10-in-a-school-district.md)
    [Compare Windows 10 editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare) \ No newline at end of file diff --git a/windows/deployment/windows-10-pro-in-s-mode.md b/windows/deployment/windows-10-pro-in-s-mode.md index db34074133..9a4f995859 100644 --- a/windows/deployment/windows-10-pro-in-s-mode.md +++ b/windows/deployment/windows-10-pro-in-s-mode.md @@ -52,8 +52,8 @@ We recommend staying in S mode. However, in some limited scenarios, you might ne If you’re running Windows 10, version 1709 or version 1803, you can switch to Windows 10 Pro through the Microsoft Store. Devices running version 1803 will only be able to switch through the Store one device at a time. 1. Sign into the Microsoft Store using your Microsoft account. -2. Search for "Switch to Windows 10 Pro." -3. In the offer, click **Buy** or **Get**. +2. Search for "S mode" +3. In the offer, click **Buy**, **Get**, OR **Learn more.** You'll be prompted to save your files before the switch starts. Follow the prompts to switch to Windows 10 Pro. > [!IMPORTANT] @@ -61,6 +61,7 @@ You'll be prompted to save your files before the switch starts. Follow the promp ## Related topics +[FAQs](https://support.microsoft.com/en-us/help/4020089/windows-10-in-s-mode-faq)
    [Compare Windows 10 editions](https://www.microsoft.com/WindowsForBusiness/Compare)
    [Windows 10 Pro Education](https://docs.microsoft.com/education/windows/test-windows10s-for-edu)
    [Introduction to Microsoft Intune in the Azure portal](https://docs.microsoft.com/en-us/intune/what-is-intune)