Functions/Invoke-IntuneDocumentation.ps1
|
Function Invoke-IntuneDocumentation(){ <# .DESCRIPTION This Script documents an Intune Tenant with almost all settings, which are available over the Graph API. NOTE: This no longer does Conditional Access The Script is using the PSWord and Microsoft.Graph.Intune Module. Therefore you have to install them first. .EXAMPLE Invoke-IntuneDocumentation -FullDocumentationPath c:\temp\IntuneDoc.docx .NOTES Author: Thomas Kurth/baseVISION Co-Author: jflieben Co-Author: Robin Dadswell Date: 28.07.2019 History See Release Notes in Github. ExitCodes: 99001: Could not Write to LogFile 99002: Could not Write to Windows Log 99003: Could not Set ExitMessageRegistry #> [CmdletBinding()] Param( [ValidateScript({ if($_ -notmatch "(\.docx)"){ throw "The file specified in the path argument must be of type docx" } return $true })] [System.IO.FileInfo]$FullDocumentationPath = ".\IntuneDocumentation.docx" ) ## Manual Variable Definition ######################################################## $DebugPreference = "Continue" $ScriptName = "DocumentIntune" $MaxStringLengthSettings = 350 #region Initialization ######################################################## Write-Log "Start Script $Scriptname" #region Authentication Connect-MSGraph #endregion #region Main Script ######################################################## #region Save Path #endregion #region CopyTemplate if((Test-Path -Path $FullDocumentationPath)){ Write-Log "File already exists, does not use built-in template." -Type Warn } else { Copy-Item "$PSScriptRoot\..\Data\Template.docx" -Destination $FullDocumentationPath Update-WordText -FilePath $FullDocumentationPath -ReplacingText "DATE" -NewText (Get-Date -Format "HH:mm dd.MM.yyyy") try{ $org = Invoke-MSGraphRequest -Url /organization Update-WordText -FilePath $FullDocumentationPath -ReplacingText "TENANT" -NewText $org.value.displayName } catch{ Update-WordText -FilePath $FullDocumentationPath -ReplacingText "TENANT" -NewText "" } } #endregion #region Document Apps $Intune_Apps = @() Get-IntuneMobileApp | ForEach-Object { try{ $App_Assignment = Get-IntuneMobileAppAssignment -mobileAppId $_.id if($App_Assignment){ $Intune_App = New-Object -TypeName PSObject $Intune_App | Add-Member Noteproperty "Publisher" $_.publisher $Intune_App | Add-Member Noteproperty "DisplayName" $_.displayName $Intune_App | Add-Member Noteproperty "Type" (Format-MsGraphData $_.'@odata.type') $Assignments = @() foreach($Assignment in $App_Assignment) { if($null -ne $Assignment.target.groupId){ $Assignments += "$((Get-AADGroup -groupid $Assignment.target.groupId).displayName)`n - Intent:$($Assignment.intent)" } else { $Assignments += "$(($Assignment.target.'@odata.type' -replace "#microsoft.graph.",''))`n - Intent:$($Assignment.intent)" } } $Intune_App | Add-Member Noteproperty "Assignments" ($Assignments -join "`n") $Intune_Apps += $Intune_App } else { $Intune_App = New-Object -TypeName PSObject $Intune_App | Add-Member Noteproperty "Publisher" $_.publisher $Intune_App | Add-Member Noteproperty "DisplayName" $_.displayName $Intune_App | Add-Member Noteproperty "Type" (Format-MsGraphData $_.'@odata.type') $Intune_App | Add-Member Noteproperty "Assignments" "Not assigned" $Intune_Apps += $Intune_App } } catch { $Intune_App = New-Object -TypeName PSObject $Intune_App | Add-Member Noteproperty "Publisher" $_.publisher $Intune_App | Add-Member Noteproperty "DisplayName" $_.displayName $Intune_App | Add-Member Noteproperty "Type" (Format-MsGraphData $_.'@odata.type') $Intune_App | Add-Member Noteproperty "Assignments" "Error getting Assignemnts" $Intune_Apps += $Intune_App } } Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Applications" $Intune_Apps | Sort-Object Publisher,DisplayName | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Contents -Design LightListAccent2 #endregion #region Document App protection policies Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "App Protection Policies" $MAMs = Get-IntuneAppProtectionPolicy foreach($MAM in $MAMs){ write-Log "App Protection Policy: $($MAM.displayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $MAM.displayName $ht2 = @{} $MAM.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = (Format-MsGraphData $($_.Value)) } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 $id = $MAM.id $MAMA = Get-DeviceAppManagement_AndroidManagedAppProtections_Assignments -androidManagedAppProtectionId $id -androidManagedAppProtectionODataType microsoft.graph.androidManagedAppProtection $MAMA = Get-DeviceAppManagement_IosManagedAppProtections_Assignments -iosManagedAppProtectionId $id -iosManagedAppProtectionODataType microsoft.graph.iosManagedAppProtection if($MAMA){ write-Log "Getting MAM Policy assignment..." Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text "Assignments" if($APPA.count -gt 1){ $Assignments = @() foreach($group in $MAMA){ $Assignments += (Get-AADGroup -groupid $group.target.groupId).displayName } $Assignments | Add-WordText -FilePath $FullDocumentationPath -Size 12 } else { (Get-AADGroup -groupid $MAMA.target.groupId).displayName | Add-WordText -FilePath $FullDocumentationPath -Size 12 } } } #endregion #region Document App configuration policies Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "App Configuration Policies" $MACs = Get-DeviceAppManagement_MobileAppConfigurations foreach($MAC in $MACs){ write-Log "App Protection Policy: $($MAC.displayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $MAC.displayName $ht2 = @{} $MAC.encodedSettingXml = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($MAC.encodedSettingXml)) $MAC.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = (Format-MsGraphData $($_.Value)) } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 $id = $MAM.id $MAMA = Get-DeviceAppManagement_MobileAppConfigurations_Assignments -managedDeviceMobileAppConfigurationId $id if($MAMA){ write-Log "Getting Mobile Application Configuration assignment..." Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text "Assignments" if($APPA.count -gt 1){ $Assignments = @() foreach($group in $MAMA){ $Assignments += (Get-AADGroup -groupid $group.target.groupId).displayName } $Assignments | Add-WordText -FilePath $FullDocumentationPath -Size 12 } else { (Get-AADGroup -groupid $MAMA.target.groupId).displayName | Add-WordText -FilePath $FullDocumentationPath -Size 12 } } } #endregion #region Document Compliance Policies Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Compliance Policies" $DCPs = Get-IntuneDeviceCompliancePolicy foreach($DCP in $DCPs){ write-Log "Device Compliance Policy: $($DCP.displayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $DCP.displayName $ht2 = @{} $DCP.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = (Format-MsGraphData $($_.Value)) } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 $id = $DCP.id $DCPA = Get-IntuneDeviceCompliancePolicyAssignment -deviceCompliancePolicyId $id if($DCPA){ write-Log "Getting Compliance Policy assignment..." Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text "Assignments" if($DCPA.count -gt 1){ $Assignments = @() foreach($group in $DCPA){ $Assignments += (Get-AADGroup -groupid $group.target.groupId).displayName } $Assignments | Add-WordText -FilePath $FullDocumentationPath -Size 12 } else { (Get-AADGroup -groupid $DCPA.target.groupId).displayName | Add-WordText -FilePath $FullDocumentationPath -Size 12 } } } #endregion #region Document T&C write-Log "Terms and Conditions" $GAndT = Get-IntuneTermsAndConditions if($GAndT){ Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Terms and Conditions" $GAndT | ForEach-Object { $_ | Select-Object -Property id,createdDateTime,lastModifiedDateTime,displayName,title,version } | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Contents -Design LightListAccent2 } #endregion #region Document EnrollmentRestrictions Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Device Enrollment Restrictions" $Restrictions = Get-IntuneDeviceEnrollmentConfiguration foreach($restriction in $Restrictions){ $ht2 = @{} $restriction.psobject.properties | ForEach-Object { if($_.Name -ne "@odata.type"){$ht2[(Format-MsGraphData $($_.Name))] = ((Format-MsGraphData "$($_.Value) "))} } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } #endregion #region Document Device Configurations Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Device Configuration" $DCPs = Get-IntuneDeviceConfigurationPolicy foreach($DCP in $DCPs){ write-Log "Device Compliance Policy: $($DCP.displayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $DCP.displayName $ht2 = @{} $DCP.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 $id = $DCP.id $DCPA = Get-IntuneDeviceConfigurationPolicyAssignment -deviceConfigurationId $id if($DCPA){ write-Log "Getting Compliance Policy assignment..." Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text "Assignments" if($DCPA.count -gt 1){ $Assignments = @() foreach($group in $DCPA){ if($null -ne $group.target.groupId){ $Assignments += (Get-AADGroup -groupid $group.target.groupId).displayName } else { $Assignments += "$(($group.target.'@odata.type' -replace "#microsoft.graph.",''))" } } $Assignments | Add-WordText -FilePath $FullDocumentationPath -Size 12 } else { if($null -ne $DCPA.target.groupId){ (Get-AADGroup -groupid $DCPA.target.groupId).displayName | Add-WordText -FilePath $FullDocumentationPath -Size 12 } else { "$(($DCPA.target.'@odata.type' -replace "#microsoft.graph.",''))" | Add-WordText -FilePath $FullDocumentationPath -Size 12 } } } } $ADMXPolicies = Get-ADMXBasedConfigurationProfile foreach($ADMXPolicy in $ADMXPolicies){ write-Log "Device Configuration (ADMX): $($ADMXPolicy.DisplayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $ADMXPolicy.DisplayName $ADMXPolicy.Settings | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } #endregion #region Device Management Scripts (PowerShell) Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Device Management Scripts" $PSScripts = Get-DeviceManagementScript foreach($PSScript in $PSScripts){ Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $PSScript.displayName $ht2 = @{} $PSScript.psobject.properties | ForEach-Object { if($_.Name -ne "scriptContent"){ $ht2[(Format-MsGraphData $($_.Name))] = "$($_.Value)" } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text "Script" $PSScript.scriptContent | Add-WordText -FilePath $FullDocumentationPath -Size 10 -Italic -FontFamily "Courier New" } #endregion #region AutoPilot Configuration Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "AutoPilot Configuration" $AutoPilotConfigs = Get-WindowsAutopilotConfig foreach($APC in $AutoPilotConfigs){ write-Log "AutoPilot Config: $($APC.displayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $APC.displayName $ht2 = @{} $APC.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } #endregion #region Enrollment Status Page Configuration Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Enrollment Status Pages" $EnrollmentStatusPage = Get-EnrollmentStatusPage foreach($ESP in $EnrollmentStatusPage){ write-Log "Enrollment Status Page Config: $($ESP.displayName)" $ESPtype = $ESP.type switch($ESPtype){ "win10EnrollmentCompletionPageConfiguration" { $ESPtype = "ESP" } "deviceEnrollmentLimitConfiguration" { $ESPtype = "Enrollment Limit" } "deviceEnrollmentPlatformRestrictionsConfiguration" { $ESPtype = "Platform Restrictions" } "deviceEnrollmentwinHelloForBusinessConfiguration" { $ESPtype = "Windows Hello for Business" } } Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text "$($ESPtype) - $($ESP.displayName)" $ht2 = @{} $ESP.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } #endregion #region Apple Push Certificate Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Apple Configurations" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text "Apple Push Certificate" $APNs = Get-IntuneApplePushNotificationCertificate foreach($APN in $APNs){ write-Log "AutoPilot Config: $($APN.appleIdentifier)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text $APN.appleIdentifier $ht2 = @{} $APN.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text "Apple VPP Tokens" $VPPs = Get-IntuneVppToken foreach($VPP in $VPPs){ write-Log "VPP Config: $($VPP.appleId)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading3 -Text $VPP.appleId $ht2 = @{} $VPP.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } #endregion #region Device Categories Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Device Categories" $Cats = Get-IntuneDeviceCategory write-Log "Device Categories: $($Cats.count)" foreach($Cat in $Cats){ Add-WordText -FilePath $FullDocumentationPath -Text (" - " + $Cat.displayName) -Size 10 } #endregion #region Exchange Connection Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Exchange Connector" $exch = Get-IntuneExchangeConnector write-Log "Exchange Connector: $($exch.serverName)" $ht2 = @{} $exch.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 #endregion #General Settings # On Prem Cond Access Get-IntuneConditionalAccessSetting # MAM Settings #region Partner Configuration Add-WordText -FilePath $FullDocumentationPath -Heading Heading1 -Text "Partner Configuration" $partnerConfigs = Get-IntuneDeviceManagementPartner foreach($partnerConfig in $partnerConfigs){ write-Log "Partner Config: $($partnerConfig.displayName)" Add-WordText -FilePath $FullDocumentationPath -Heading Heading2 -Text $partnerConfig.displayName $ht2 = @{} $partnerConfig.psobject.properties | ForEach-Object { $ht2[(Format-MsGraphData $($_.Name))] = if((Format-MsGraphData "$($_.Value)").Length -gt $MaxStringLengthSettings){ "$((Format-MsGraphData "$($_.Value)").substring(0, $MaxStringLengthSettings))..." } else { "$((Format-MsGraphData "$($_.Value)")) " } } ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 } #endregion #endregion #region Finishing ######################################################## Write-Log "Press Ctrl + A and then F9 to Update the table of contents and other dynamic fields in the Word document." Write-Log "End Script $Scriptname" #endregion } # SIG # Begin signature block # MIIXxQYJKoZIhvcNAQcCoIIXtjCCF7ICAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR # AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUzAH2BVHoBafTGV9+yxzF3d5s # ncSgghL4MIID7jCCA1egAwIBAgIQfpPr+3zGTlnqS5p31Ab8OzANBgkqhkiG9w0B # AQUFADCBizELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTEUMBIG # A1UEBxMLRHVyYmFudmlsbGUxDzANBgNVBAoTBlRoYXd0ZTEdMBsGA1UECxMUVGhh # d3RlIENlcnRpZmljYXRpb24xHzAdBgNVBAMTFlRoYXd0ZSBUaW1lc3RhbXBpbmcg # Q0EwHhcNMTIxMjIxMDAwMDAwWhcNMjAxMjMwMjM1OTU5WjBeMQswCQYDVQQGEwJV # UzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xMDAuBgNVBAMTJ1N5bWFu # dGVjIFRpbWUgU3RhbXBpbmcgU2VydmljZXMgQ0EgLSBHMjCCASIwDQYJKoZIhvcN # AQEBBQADggEPADCCAQoCggEBALGss0lUS5ccEgrYJXmRIlcqb9y4JsRDc2vCvy5Q # WvsUwnaOQwElQ7Sh4kX06Ld7w3TMIte0lAAC903tv7S3RCRrzV9FO9FEzkMScxeC # i2m0K8uZHqxyGyZNcR+xMd37UWECU6aq9UksBXhFpS+JzueZ5/6M4lc/PcaS3Er4 # ezPkeQr78HWIQZz/xQNRmarXbJ+TaYdlKYOFwmAUxMjJOxTawIHwHw103pIiq8r3 # +3R8J+b3Sht/p8OeLa6K6qbmqicWfWH3mHERvOJQoUvlXfrlDqcsn6plINPYlujI # fKVOSET/GeJEB5IL12iEgF1qeGRFzWBGflTBE3zFefHJwXECAwEAAaOB+jCB9zAd # BgNVHQ4EFgQUX5r1blzMzHSa1N197z/b7EyALt0wMgYIKwYBBQUHAQEEJjAkMCIG # CCsGAQUFBzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMBIGA1UdEwEB/wQIMAYB # Af8CAQAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC50aGF3dGUuY29tL1Ro # YXd0ZVRpbWVzdGFtcGluZ0NBLmNybDATBgNVHSUEDDAKBggrBgEFBQcDCDAOBgNV # HQ8BAf8EBAMCAQYwKAYDVR0RBCEwH6QdMBsxGTAXBgNVBAMTEFRpbWVTdGFtcC0y # MDQ4LTEwDQYJKoZIhvcNAQEFBQADgYEAAwmbj3nvf1kwqu9otfrjCR27T4IGXTdf # plKfFo3qHJIJRG71betYfDDo+WmNI3MLEm9Hqa45EfgqsZuwGsOO61mWAK3ODE2y # 0DGmCFwqevzieh1XTKhlGOl5QGIllm7HxzdqgyEIjkHq3dlXPx13SYcqFgZepjhq # IhKjURmDfrYwggSjMIIDi6ADAgECAhAOz/Q4yP6/NW4E2GqYGxpQMA0GCSqGSIb3 # DQEBBQUAMF4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3Jh # dGlvbjEwMC4GA1UEAxMnU3ltYW50ZWMgVGltZSBTdGFtcGluZyBTZXJ2aWNlcyBD # QSAtIEcyMB4XDTEyMTAxODAwMDAwMFoXDTIwMTIyOTIzNTk1OVowYjELMAkGA1UE # BhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMTQwMgYDVQQDEytT # eW1hbnRlYyBUaW1lIFN0YW1waW5nIFNlcnZpY2VzIFNpZ25lciAtIEc0MIIBIjAN # BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomMLOUS4uyOnREm7Dv+h8GEKU5Ow # mNutLA9KxW7/hjxTVQ8VzgQ/K/2plpbZvmF5C1vJTIZ25eBDSyKV7sIrQ8Gf2Gi0 # jkBP7oU4uRHFI/JkWPAVMm9OV6GuiKQC1yoezUvh3WPVF4kyW7BemVqonShQDhfu # ltthO0VRHc8SVguSR/yrrvZmPUescHLnkudfzRC5xINklBm9JYDh6NIipdC6Anqh # d5NbZcPuF3S8QYYq3AhMjJKMkS2ed0QfaNaodHfbDlsyi1aLM73ZY8hJnTrFxeoz # C9Lxoxv0i77Zs1eLO94Ep3oisiSuLsdwxb5OgyYI+wu9qU+ZCOEQKHKqzQIDAQAB # o4IBVzCCAVMwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAO # BgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQEEZzBlMCoGCCsGAQUFBzABhh5odHRw # Oi8vdHMtb2NzcC53cy5zeW1hbnRlYy5jb20wNwYIKwYBBQUHMAKGK2h0dHA6Ly90 # cy1haWEud3Muc3ltYW50ZWMuY29tL3Rzcy1jYS1nMi5jZXIwPAYDVR0fBDUwMzAx # oC+gLYYraHR0cDovL3RzLWNybC53cy5zeW1hbnRlYy5jb20vdHNzLWNhLWcyLmNy # bDAoBgNVHREEITAfpB0wGzEZMBcGA1UEAxMQVGltZVN0YW1wLTIwNDgtMjAdBgNV # HQ4EFgQURsZpow5KFB7VTNpSYxc/Xja8DeYwHwYDVR0jBBgwFoAUX5r1blzMzHSa # 1N197z/b7EyALt0wDQYJKoZIhvcNAQEFBQADggEBAHg7tJEqAEzwj2IwN3ijhCcH # bxiy3iXcoNSUA6qGTiWfmkADHN3O43nLIWgG2rYytG2/9CwmYzPkSWRtDebDZw73 # BaQ1bHyJFsbpst+y6d0gxnEPzZV03LZc3r03H0N45ni1zSgEIKOq8UvEiCmRDoDR # EfzdXHZuT14ORUZBbg2w6jiasTraCXEQ/Bx5tIB7rGn0/Zy2DBYr8X9bCT2bW+IW # yhOBbQAuOA2oKY8s4bL0WqkBrxWcLC9JG9siu8P+eJRRw4axgohd8D20UaF5Mysu # e7ncIAkTcetqGVvP6KUwVyyJST+5z3/Jvz4iaGNTmr1pdKzFHTx/kuDDvBzYBHUw # ggUnMIIED6ADAgECAhAB7uHu9sSCKgqVgJoW5mKYMA0GCSqGSIb3DQEBCwUAMHIx # CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 # dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJ # RCBDb2RlIFNpZ25pbmcgQ0EwHhcNMTkwMzE0MDAwMDAwWhcNMjIwNjExMTIwMDAw # WjBkMQswCQYDVQQGEwJDSDESMBAGA1UECBMJU29sb3RodXJuMREwDwYDVQQHDAhE # w6RuaWtlbjEWMBQGA1UEChMNYmFzZVZJU0lPTiBBRzEWMBQGA1UEAxMNYmFzZVZJ # U0lPTiBBRzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMfM1Zl2D4mV # Ej7w9rAboqVD3E6JHf3GUOw0cPPP94occ4dCeqITcVME6s2nhVcnff+68FPtJB2g # BKWIB8zL4bD1SZBgLywRe3F/KvmbULw9gp5Qk8nLeVOLtXsyKEIfNMzMWeMxTMsx # mtr910G0knpBnuHQgJVNpKF4BgSpIJZ8FQJlvYvLm0y73HXj/YSUJt7bstqnJ9Q6 # s+ngp/en1pykXhzgj76u6yPKc/kdZQwfzsLj2FQ3y7ScWt7Ps1fevkh8JBmJc+ti # 6oKVDMArOEj7IdXn9rjPkeTSakFoqb1ceNRnMYyMOEaflMFwxylT2NTm4cYTF65m # HtZEm//K7QECAwEAAaOCAcUwggHBMB8GA1UdIwQYMBaAFFrEuXsqCqOl6nEDwGD5 # LfZldQ5YMB0GA1UdDgQWBBTP/wNYXuPPmMSxVMf7zj/HD4TQbTAOBgNVHQ8BAf8E # BAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwdwYDVR0fBHAwbjA1oDOgMYYvaHR0 # cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItYXNzdXJlZC1jcy1nMS5jcmwwNaAz # oDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtY3MtZzEu # Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAMBMCowKAYIKwYBBQUHAgEWHGh0dHBz # Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQQBMIGEBggrBgEFBQcBAQR4 # MHYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBOBggrBgEF # BQcwAoZCaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFz # c3VyZWRJRENvZGVTaWduaW5nQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN # AQELBQADggEBAJV9TChoYXmc7/3Qc8p9EgcF4I+6cnLSBpQOfYGi3f3bBcATTPle # cJiruue4AxIpNwtGwZnqneGxAWT4C98yjBQbCq7nt0k3HF1LjeTNdExNx6cVGF4S # 9HvcSsoqFNnQuMpzjnFredIP0LPvLQouYtEKcvYJDmx0Bb/72anpAlUiY0WzBF6t # cYU//dNDqiw/0uQqFMuKzUTKSgGlf+bLsebz8XNIcJPrrui3dduig20oOR2V60Yq # PmZhLDS3CXNvKXZbo/ib02zendVAFYDIoKZOtmNOalBoWwlQRYWmwQWuSJRbQFl1 # ridyuVRrTlCgWJj4547jqr4/cxmFLV+hrZcwggUwMIIEGKADAgECAhAECRgbX9W7 # ZnVTQ7VvlVAIMA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK # EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV # BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0xMzEwMjIxMjAwMDBa # Fw0yODEwMjIxMjAwMDBaMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy # dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERpZ2lD # ZXJ0IFNIQTIgQXNzdXJlZCBJRCBDb2RlIFNpZ25pbmcgQ0EwggEiMA0GCSqGSIb3 # DQEBAQUAA4IBDwAwggEKAoIBAQD407Mcfw4Rr2d3B9MLMUkZz9D7RZmxOttE9X/l # qJ3bMtdx6nadBS63j/qSQ8Cl+YnUNxnXtqrwnIal2CWsDnkoOn7p0WfTxvspJ8fT # eyOU5JEjlpB3gvmhhCNmElQzUHSxKCa7JGnCwlLyFGeKiUXULaGj6YgsIJWuHEqH # CN8M9eJNYBi+qsSyrnAxZjNxPqxwoqvOf+l8y5Kh5TsxHM/q8grkV7tKtel05iv+ # bMt+dDk2DZDv5LVOpKnqagqrhPOsZ061xPeM0SAlI+sIZD5SlsHyDxL0xY4PwaLo # LFH3c7y9hbFig3NBggfkOItqcyDQD2RzPJ6fpjOp/RnfJZPRAgMBAAGjggHNMIIB # yTASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAK # BggrBgEFBQcDAzB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9v # Y3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGln # aWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDCBgQYDVR0fBHow # eDA6oDigNoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJl # ZElEUm9vdENBLmNybDA6oDigNoY0aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp # Z2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDBPBgNVHSAESDBGMDgGCmCGSAGG/WwA # AgQwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAK # BghghkgBhv1sAzAdBgNVHQ4EFgQUWsS5eyoKo6XqcQPAYPkt9mV1DlgwHwYDVR0j # BBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcNAQELBQADggEBAD7s # DVoks/Mi0RXILHwlKXaoHV0cLToaxO8wYdd+C2D9wz0PxK+L/e8q3yBVN7Dh9tGS # dQ9RtG6ljlriXiSBThCk7j9xjmMOE0ut119EefM2FAaK95xGTlz/kLEbBw6RFfu6 # r7VRwo0kriTGxycqoSkoGjpxKAI8LpGjwCUR4pwUR6F6aGivm6dcIFzZcbEMj7uo # +MUSaJ/PQMtARKUT8OZkDCUIQjKyNookAv4vcn4c10lFluhZHen6dGRrsutmQ9qz # sIzV6Q3d9gEgzpkxYz0IGhizgZtPxpMQBvwHgfqL2vmCSfdibqFT+hKUGIUukpHq # aGxEMrJmoecYpJpkUe8xggQ3MIIEMwIBATCBhjByMQswCQYDVQQGEwJVUzEVMBMG # A1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMTEw # LwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQgQ29kZSBTaWduaW5nIENB # AhAB7uHu9sSCKgqVgJoW5mKYMAkGBSsOAwIaBQCgeDAYBgorBgEEAYI3AgEMMQow # CKACgAChAoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcC # AQsxDjAMBgorBgEEAYI3AgEVMCMGCSqGSIb3DQEJBDEWBBQvyvpKw4BfH2Td9Cls # AB14tys2DzANBgkqhkiG9w0BAQEFAASCAQABtq29FfvPkz0B1LUl/dwt6g2RunRD # WqcrQjCmLJcQXYXyr0Q4l054OsdACZrC6uFZu0bFWfRqfoAJ9vD3WzOygewlJYv4 # +NwSmVKTZ31aaCIz4etJSfBkUQGdoPdRoE8bgT3yA6jDvXboexzp1zcBUKUuQMma # DNpSm14ta+iEtKZrd7I/dqghebel+5PNFUnLf5rqOPLUFJ6Og+UEiaN0AfeYfX/X # G2TpXxkZUxPDB1Rw6evHzHp2PcTo5e/i0TSC6tmev/VOMcGCMioTyGo5nhuJPkpo # 3cgizZRkbetE3/S1PX3RagIz2BrmK+FnNWtzPWwiHsJp9yhVY2BaEPdHoYICCzCC # AgcGCSqGSIb3DQEJBjGCAfgwggH0AgEBMHIwXjELMAkGA1UEBhMCVVMxHTAbBgNV # BAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMTAwLgYDVQQDEydTeW1hbnRlYyBUaW1l # IFN0YW1waW5nIFNlcnZpY2VzIENBIC0gRzICEA7P9DjI/r81bgTYapgbGlAwCQYF # Kw4DAhoFAKBdMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkF # MQ8XDTIwMDEzMTE3MDI1OFowIwYJKoZIhvcNAQkEMRYEFNUQI9iErpHumcbqF4fl # PXAYvGSgMA0GCSqGSIb3DQEBAQUABIIBADuyEfr5x/OML056HLaXDC6mbEsE8s7Q # FJOvXcUyKtOqdTV96Yte2PBwiC5GY4c7MiOQSNO1PV400VADixV4FRhBhS85mANe # HcuXAxTOJxoidy9eGts/WE1zLnCvDVTin/VZgqbRE69YVWvyBhYWmPRPq1INmsPH # LJhc6+CQ1MBVOienxeKMbBhyt0wk1KwI0k4Lrc7pjzNH7ZNzprOqU5i2qq8v11px # U2nLU0ETKD/wOLsS2OtTzFAZgkPklLk8N/67nnvbJwK0JC/IvjIcsPh1Sdvtjiyt # yzT/EbUCdigJijfZM3eujPWwcgoC0b2gTP8rDwF4ceOcA5FEhZp4fRE= # SIG # End signature block |