Calendar

Find out where and when Jeremy will be speaking next.

March 2010
SMTWTFS
123456
78910111213
14151617181920
21222324252627
28293031


Group Policy Books

Why do I need Group Policy Books?

When you're doing something tough or learning something new, it's always nice to have a help companion or two to make things easier for you. And if you're enhancing your skills in Active Directory Group Policy, you'll want to have Group Policy MVP Jeremy Moskowitz and his two fully-updated companion books on Group Policy at your side.

Order eChapter now

Order your signed hardcopy books today

 

Group Policy
Fundamentals, Security and Troubleshooting

You can think of this book as "Everything you need to know about Group Policy so you don't shoot yourself in the foot." And learn a heck of a lot about security fundamentals, and the new Group Policy Preference Extensions, and the new AGPM application. And several thousand awesome tips to get your Group Policy mojo flowin'.

Start here with this book. Read it all and make sure you really "get it." Got it?

But the love doesn't stop here. Continue on with the companion book and learn even more about how to take the Group Policy knowledge and learn how to really manage and secure your desktops.

Chapters with the checkboxes beside them are avaiable as a downloadable eChapter for purchase.

Chapter 1 – Group Policy Essentials

Start of your book experience right. This isn't so much an "introduction" to GP as it is a "getting started in your deep dive" experience! Learn how to use GP at the multiple Active Directory levels to start accomplishing your tasks. Learn how the new GPMC 2.0 "changes everything" and how to successfully create a test lab to work through the rest of the examples in the book.

What's new in this edition:

  • Updated lab set up guide (How to use this book and chapters to be successful
  • GPOE vs. GPME
  • Understanding the why you need to be specific about using either the User or Computer node
  • Using a Management Station-updated for Windows Server 2008
  • Installing the GPMC 2.0 in Windows Server 2008
  • Intro to the RSAT tools and getting GPMC 2.0 on your Windows Vista management station

Order your signed books today

 

Chapter 2 – Managing Group Policy with the GPMC

Here's where we start getting down to brass tacks and working though the major features of Group Policy and the GPMC. Here you'll learn how and where to create and link GPOs, how to ensure your will is embraced by just the clients you want, how to locate specific policy settings (using tools both inside and outside of the GPMC), how to turn off Local GPOs from processing, learn why NOT to disable half the GPO, how to Filter GPOs, learn how to delegate who can create and link GPOs, and so much more. Really. This chapter is huge reading it is one of the smartest ways to get going with Group Policy.

What's new in this edition:

  • Understanding the differences between GPMC 1.0, 1.5 and 2.0
  • Understanding "Old–School" Filtering
  • Intro to the GPMC 2.0

Order your signed books today

 

Chapter 3 – GPMC 2.0: Filtering, Comments and Starter GPOs

In this chapter, you'll learn how to find and install the new GPMC 2.0, how to make a GPMC 2.0 management station, how to utilize the new Filtering capabilities to find the Group Policy settings you need, how to make comments within GPOs for others (and find comments from others) and learn how to create template Starter GPOs to make a baseline of settings available for your other Active Directory administrators.

This chapter is 100% new to the 5th edition. Here's a highlight of what you'll learn:

  • Getting into the meat of GPMC 2.0
  • GPMC 2.0 Filtering (Danger, Danger: Weirdness abounds!)
  • The All Settings node
  • Inside Comments: Creating them inside GPOs and inside settings
  • Where those settings show up (and where they don't !)
  • All about Starter GPOs: Creating, editing, leveraging, backing up and restoring, and wrapping up and sending

Order your signed books today

 

Chapter 4 – Group Policy Processing Behavior

If you don't know WHEN GP is supposed to apply, you're behind the 8 ball. Learn when Group Policy is supposed to apply, where Group Policy "comes from", and understand how every operating system (since Windows 2000) processes Group Policy a liiiiitle bit differently.

What's new in this edition:

  • More information on Initial Policy processing
  • Overall clarify and editing

Order your signed books today

 

Chapter 5 – Advanced Group Policy Processing

This chapter covers four big advanced topic. Maybe not everyone will use them, but if you need them, you'll know where to find them:

  1. GPO Targeting with WMI Filters
  2. Dictating User side settings to Computers with Loopback processing
  3. Ensuring GP works the way you want to when using Cross-Forest Trusts
  4. Dealing with legacy NT 4.0 domains, NTCONFIG.POL files and Active Directory Group Policy

What's new in this edition:

  • Most of this material was in the 4th edition's Chapter 4. But that chapter was just too big with the new additions. I felt it made more sense to break it up and put this advanced material into it's own
  • Updated information about Logging onto Windows Server 2008 across a Cross-Forest Trust
  • Updated information about using WMI filtering in Windows Server 2008
  • Updated information about Group Policy Loopback-Replace Mode for Windows Server 2008

Order your signed books today

 

Chapter 6 – Troubleshooting Group Policy

Server folks, Desktop folks, (and their Managers always ask): "What the heck is going on!?" when it's not working. Here's your troubleshooting Group Policy BIBLE. This is a monster chapter (really, it's huge!) that deals with the "under the hood" stuff within Group Policy, how to troubleshoot it when it goes wrong, and where to go (before you give up!) Learn the "Birth, Life and Death" of a GPO, how client systems get GPOs, and get to the nitty-gritty about what could be gunking up your GPOs from making it to the client computers.

And, learn about a new tool, the GPBPA which can help get you toward "best practice" land.

What's new for this edition:

  • Completely updated for Windows Server 2008
  • Additional CSEs for Windows Server 2008 machines
  • GPresult for Windows Server 2008 and Vista / SP1
  • How to troubleshoot the Group Policy Preference Extensions
  • All about the Group Policy Diagnostic Best Practice Analyzer (GPBPA)

Order your signed books today

 

Chapter 7 – ADM and ADMX Template Management

Yes, it's mysterious. Yes, it's scary. No it doesn't have to stay that way. Sure, there are 80 billion settings in GP-land (and, yes, I know you want more.) And learn how these settings are "born" (no, they don't come if you wish really hard from the GPO Fairy.)

Here you'll learn the (very important!) distinction between Policy and Preference. (And, here's a hint -- you'll need this distinction when you get to Chapter 10: The Group Policy Preference Extensions.)

Learn how to stop running around updating ADM and ADMX files and how to convert from ADM to ADMX files. Learn which operating systems can manage what other operating systems. Learn what happens when you edit a GPO from one system and try to edit it on another system. Will it always work? Ha. That's funny. Read the chapter for the rest of the hilarity.

What's new in this edition:

  • Updated scenarios when creating GPOs on one machine and editing on another
  • Which GPMC versions can leverage the Central Store
  • Overall clarity and editing updates
  • ADMX Migrator 1.2 updates

Order your signed books today

 

Chapter 8 – Group Policy Security Fundimentals

If you don't know Group Policy, you don't know security. It's really that simple. This is another monster chapter with so much to love, you won't know where to begin... (try the top of the first page in the chapter.) Here, you'll learn about:

  • The Two Default Group Policy Objects (and the answer to the age old question of "Should I ever modify it?"
  • How to recover from "Oops, the default GPOs just got screwed up!"
  • How to audit anything in Active Directory using Group Policy
  • How to manage server security using Group Policy with the Security Configuration Wizard

And the big news in Windows Server 2008 is "Fine Grained Password Policy". So, you wanted multiple password policies in the same domain? Well, now with Windows 2008's Active Directory, you got it.

Except it's not managed using Group Policy. What? Say it ain't so! Yep, afraid it is.

When you're done screaming in frustration, let's see if we can understand how to take that craziness and bring it back in control USING Group Policy.

New for this edition:

  • Using multiple "Fine Grained Password Policies" with and without Group Policy (big section)
  • Updated information on DGCPOFIX
  • Windows Server 2008's Auditing Changes
  • Security Configuration Wizard for 2008

Order your signed books today

 

Chapter 9 – Windows Vista and Windows Server 2008 Security Enhancements with Group Policy

The title is a mouthful, but digesting the chapter won't be that tough. We break down some sticky stuff that no one wants to deal with, but we make it easy for you.

You know User Account Control? The thing that pops up in Vista and asks you "Do you want to Cancel or Allow?" Well, CONTROL IT (using Group Policy of course.) Learn how to take charge of the Windows Firewall with Advanced Security (WFAS) that's build in to Vista and Windows Server 2008.

Oh, and learn how to mange a little known windows component called Internet Explorer 7. Ever heard of it? Well, get it together using the material in this chapter !

We cover some other stuff too, but that's the bigest parts.

What's new for this edition:

  • Updates for Windows Server 2008
  • Dealing with controlling your hardware via GP was part of the 4th edition. That material has been moved to the Companion book.

Order your signed books today

 

Chapter 10 – Group Policy Preference Extensions

You wanted more power? Well STEP UP for more Group Policy POWER !

Once you have the GPMC 2.0 management station configured (learn how in Chapter 3), you'll meet a new node in the Group Policy Management Editor, and it's called Preferences .

Here you'll find the new Group Policy Preference Extensions (or GPPEs). The new Preferences node has lots of stuff on both the user and computer side; some even overlap and it doesn't just overlap with itself (ie: same GPPEs on Computer and User side) but it also overlaps with original Group Policy settings, too.

Confused? Don't panic, we have a whole section dedicated to that entitled "The Overlap Issues" to help you understand which Group Policy feature to use when, which ones to use together, and which to avoid entirely. The GPPEs bring twenty-one new killer features to the table, and you'll get a grip on learning how they work in this monster chapter!

Order your signed books today

 

Chapter 11 – Scripting Group Policy Operations with PowerShell

This completely new chapter shows you how to "Group Policy your world" using PowerShell. Let me jump to the end of the story and tell you that we've made all the scripts from this chapter a FREE download at GPanswers.com/book in the Chapter 11 section.

Yep, you can run over there right now and get them and start using them.

But, you might want to also read this chapter first to understand what the prerequisites are, what the available parameters are, when and when not to use these scripts, and how to properly install PowerShell for Group Policy use.

And, of course, we show you how we built these scripts from the ground up using both native PowerShell commands and cmdlets as well as some free third-party cmdlets to make the job even faster. We also explore some pay third-party PowerShell scripting options to make your Group Policy experience even better. So, please use the scripts! That's why they're on the web site.

But we encourage you to get this chapter as well to make the most of your experience! This chapter was written by Powershell MVP Brandon Shell with Jeremy Moskowitz.
(Think about it: His name is Brandon SHELL! It's like if my name was Jeremy Grouppolicy. You know this chapter is going to be good!)

Order your signed books today

 

Chapter 12 – Advanced Group Policy Management (AGPM)

This chapter is different. In this chapter we're going to talk about a Microsoft tool called Advanced Group Policy Management, or AGPM for short. And it's goal is to help companies with the challenge of GPO management. Have you ever noticed that there's no "Are you sure you really want to do this?" inside the GPMC and Group Policy Editors?

Everything happens in real time. If you make a mistake, there's no "Group Policy Undo" short of disabling or deleing the GPO and hoping you only have a few people to clean up. So, specifically, AGPM it puts a "change management" system around Group Policy within the GPMC. This lets some people request changes, others make editing choices, and others approve their changes.

AGPM is involved with ensuring that your overall "philosophy" of Group Policy management is done right. It's meant to ensure GPOs are configured right (before they're placed into production), reduce the risk of Group Policy deployment errors and ensure that Group Policy management is done securely.

And it's a really cool tool. Which is why Microsoft is making you pay extra for it.

Right now, if you want to use AGPM the rules are very clear: you need to be an SA customer and you must be willing to buy the entire MDOP package for several dollars per seat (usually $10 US.). There are four big things you get with the MDOP package, and AGPM is just one of them. (We talk about the other really big one in the companion book, Implementing the Secure Managed Desktop, when we talk about SoftGrid.)

If you want to learn more about the MDOP package, check it out here .

So, I recognize that this chapter isn't for everyone. It's for customers who are willing to pony up money after they've already ponied up money to become an SA customer. But AGPM is a great addition to what's possible in Group Policy land, so we'll explore what it has to offer. And again, who knows. Maybe someday AGPM will be freely available to all Windows customers.

If you've got AGPM, flirting with implementing AGPM or just curious about AGPM -- this chapter is for you.

What's new in this edition:

  • 100%. Everything. This is a new chapter for this edition.

Order your signed books today

 

Creating the Secure Managed Desktop

You just got smarter in Group Policy. Now DO something with it. In this book, you'll learn how to put together a comprehensive deployment and lockdown plan for your most precious assets: your client computers ! You'll learn how to set up new machines -- quickly. Then make sure what when users roam around, they're getting what they're supposed to get, and not some "mystery" configuration. Then, leverage Group Policy and SoftGrid (App-V) to deploy applications to users and protect your users from the bad guys with Network Access Protection. Finally, put the finishing touches on, like guaranteed printers and if necessary, put the "full smackdown" on your systems with Windows SteadyState.

Chapters with the checkboxes beside them are avaiable as a downloadable eChapter for purchase.

Chapter 1 – Deploying Windows with Style: Windows Deployment Services and Microsoft Deployment

You need to start somewhere. Why not start out by "spawning" new XP and Vista systems using the tools that are already in the box? To bring this chapter to you, I teamed up with Microsoft Deployment MVP Johan Arwidmark.

I bet you think Ghost is the fastest gun in the west when deploying machines.

Well, it isn't. Really! We bust the myths in this chapter and show you how the "free stuff in the box" can perform as good or better than Ghost when deploying systems.

If you haven't seen WDS and Microsoft Deployment (what used to be known as the BDD).

And, what's new for Windows Server 2008.. can you say (shout!) Multicast! Wow! This was originally in the Group Policy book, but makes more sense here.

What's new in this edition:

  • Updated information on WDS for Windows Server 2008 including how-to about Multicast
  • Time trials between Ghost vs. ImageX
  • Inside Microsoft Deployment
  • Creating your own Answer files and Task Sequences with WSIM
  • Using Microsoft Deployment for a mostly "hands off" deployment of Windows Vista

Order your signed books today

 

Chapter 2 – Profiles: Local, Roaming and Manditory

If you have a single Vista machine, you need to read this chapter. Did you know that there are three kinds of profiles?

 

  • Version 0: Windows NT
  • Version 1: Windows 2000, Windows 2003, and Windows XP
  • Version 2: Windows Vista and Windows 2008 Servers (as clients)

And they don't like to be in the same room with each other? But you can help mitigate that if you know what you're doing. Get the inside scoop on the NTUSER.DAT file, the new folder structure for Vista (and it means that there's no more "My Documents", "My Music" etc.)

How can you set up roaming profiles so your XP and Vista machines don't explode when your users log on? And what Group Policy additions can you use to make your users lives better.

This chapter was originally revised in the 4th edition and remains pretty much the same (some updates) for this edition.

Order your signed books today

 

Chapter 3 – The Managed Desktop, Part 1: Redirected Folders, Offline Files, and the Synchronization Manager

What was originally known as part of the "IntelliMirror" components (now just known as the Managed Desktop components), Redirected Folders and Offline Files with it's Synchronization manager has some pretty awesome power. But only when you know how to use it properly.

This chapter has been revised for clarity and updated somewhat for this edition. Here's a rundown of the goodies you'll find in this chapter:

  • Folder Redirection. You loved it in XP, now make it really work for you in Vista.
  • How to train your Vista machines to redirect like Windows XP.
  • How to avoid corrupting your redirection policies.
  • Troubleshooting redirected folders for XP and Vista.
  • Understanding both XP and Vista's file synchronization mechanisms (and how to control via GP).
  • Understanding Vista's new Offline Files changes (could be a whole book in and of itself. And even in my book, it kind of is).
  • How Vista reacts to enabling caching on shares.
  • How Vista reacts to caching over slow links (and how to configure it).
  • Troubleshooting Vista's new Sync Center.
  • (Increased coverage) on how to best control Offline Files for desktops vs. laptops.

Order your signed books today

 

Chapter 4 – The Managed Desktop, Part 2: Software Deployment via Group Policy

You've got clients, they need software. Super. Now how are you going to get it to them? If you want to buy a huge management tool, that's one idea. Or use the free stuff that's in the box with Group Policy and it's Software Installation capabilities.

Learn about the Windows Installer service which does the dirty work along with Group Policy. Learn how to deploy Office 2000, 2003 and XP. And, learn why deploying Office 2007 is TOTALLY DIFFERENT and fraught with peril!

Learn the best practices on how to target your machines or users depending on the situation and really get a grip on understanding when packages will be installed. Once your packages are deployed how are you going to upgrade them, patch them and revoke them?

By reading this chapter of course. See you there.

Order your signed books today

 

Chapter 5 – Application Virtualization and SoftGrid Essentials

Let me guess: Your users have been working, and things have been going great. Then, over time the machine starts to, oh...let's call it "deteriorate." You load more applications, and things get slower. You add a patch, and some applications start acting "funny"-things start crashing and users are rebooting more.

And you know why.

Because Windows doesn't do a really great job at isolating applications and keeping them from kicking each other in the shins. If you have DogFoodMaker 2.0 and CatFoodMaker 3.0 and they each use a DLL named food.DLL, which application is going to use which file? And what if CatFoodMaker 3.0's DLL doesn't work quite right with DogFoodMaker 2.0?

Chaos and performance deterioration, that's what happens.

This chapter talks about Microsoft's SoftGrid. In this chapter you'll learn how to solve issues like:

  • App1 and App1A on the same machine
  • App1 and App1A on the same Terminal Server
  • Installation of new software affects other already-running software
  • General "slowing down" of Windows over time

We start out talking about the new idea of Application Virtualization in general. We discuss the various products that can help make this magic happen, but then focus on Microsoft's SoftGrid solution.

Here, you'll learn how to set up a SoftGrid server, how to get a sample application sequenced, and how to make sure the whole thing is working properly.

If you've already bought SoftGrid in the MDOP package but really don't know where to start with it -- then start right here. You'll be up and running by the time the chapter is over.

Quick note: In order to use the stuff we're going to talk about in this chapter, you have to pay Microsoft some extra. First, you positively must be a Microsoft Software Assurance (SA) customer. This means you pay a little extra insurance money up front, hoping that Microsoft produces updates that you want to install. The misconception is that SA customers must be large companies. They don't have to be. You can be an SA customer with as few as 50 seats. You can learn more about becoming an SA customer here: http://www.microsoft.com/licensing/sa/.

Next, you must be willing to buy SoftGrid in a pack of five big products which are bundled as the Microsoft Desktop Optimization Pack or MDOP for about 10 dollars per seat. People who pay now get the benefit of using these tools right away.

Order your signed books today

 

Chapter 6 – SoftGrid: Beyond the Basics

In the last chapter, we covered some of the basics for how to use SoftGrid. A SoftGrid 101 course, if you will. In that chapter, we learned how to set up a SoftGrid server, how to get a sample application sequenced, and how to make sure the whole thing is working properly.
In this chapter, we'll be expanding on what we previously learned and covering what's next: our SoftGrid 201 course.

The three big things we'll be covering in this chapter are the:

  • SoftGrid Management console Every application starts out by being published in the SoftGrid Management Console. Here's where we get to dictate exactly how a client receives that published application and other Advanced Administration tasks.
  • SoftGrid CMC Want to change the default behavior of your SoftGrid clients? Find out how.
  • SoftGrid Client Applet Learn all the SoftGrid Client options available right from the system tray.

Note: This Chapter was written by Eric Johnson, SoftGrid Propeller-Head

Order your signed books today

 

Chapter 7 – SoftGrid Sequencing Secrets

In this chapter, we'll be covering the last major component of the SoftGrid System, the Sequencer, and how to troubleshoot application sequencing issues.

The three big things we'll be covering in this chapter are:

  • The SoftGrid Sequencer Have you ever packaged an application, streamed it down to an end user only to find that your username is in the package? Or how about trying to package an application that writes files to a temp directory, and those files never seem to be added to your sequence? We'll take an in depth look at what is inside the SoftGrid sequencer application. We'll walk through all the tabs and wizards and explain exactly where everything might be used ... or might not be used in some cases.
  • Advanced Sequencing Can you package a shortcut to a website? How do you package an active X plug-in? What do I do to perform an active upgrade? Why would I want to branch a package? If you have ever wanted to package something a bit out of the ordinary, this section will lead you in the right direction
  • Troubleshooting sequences Sometimes when you package applications, things don't quite seem to work right the first time. Or the second time. Or the 35th time. We'll wiggle out of some sticky situations (and help you avoid those situations in the first place.) I'll share some insight I've gleaned from sequencing hundreds of applications using SoftGrid.

Note: This Chapter was written by Eric Johnson, SoftGrid Propeller-Head

Order your signed books today

 

Chapter 8 – Client Security with WSUS 3.0 and MBSA

Got holes in your armor? Possible?

How about likely .

You need a patch kit. And Microsoft Windows Software Update Services (WSUS) is gonna help patch you up! If you've used SUS or an older version of WSUS, you're going to love this chapter because we talk about the latest version -- WSUS 3.0 and all it's new features.

You'll learn about the seven (wow!) ways to architect WSUS (with specific advice about which ways are best for your environment.) Then, we'll deploy our WSUS and use (insert fanfare here!) Group Policy to configure those clients so they're "picked up" but the WSUS server.

But WSUS can't patch all your holes. That's where the Microsoft Baseline Security Analyzer comes in. It can find things that WSUS can't find. And we'll show you how to automate your MBSA so you're constantly "in the know" about any situations that come up.

Note: This chapter was written by WSUS and MBSA Propeller-Head Greg Shields

Order your signed books today

 

Chapter 9 – Network Access Protection using Group Policy

Group Policy has a lot of responsibility on your network. Sure, it's got its touchy-feely side, like setting the desktop background and delivering applications' settings. But it's also got a kicking-butt side, too. And that's the side we want to show you here.

In this chapter, I'll cover just one topic, but a very hot one: how to ensure that only healthy, validated machines make it onto your production network.

Without knowing the "health status" of your machines, you're just letting any machine join your network, regardless of what's running on them; and that's clearly unhealthy.

By using a new Windows Server 2008 technology, called Network Access Protection, in conjunction with Group Policy to configure it all, we'll have a network that automatically decides who lives and dies, er, gets on our network or not.

So, strap in. It's prime time butt-kicking, Group Policy style.

Learn the following things in this ground-breaking chapter:

  • Learn what Network Policy Services is vs. Network Access Protection
  • Create a NAP test tab, and totally WOW your boss
  • Learn when clients "check in" to report their health status
  • Learn how to force "unhealthy" clients to talk only with the servers you choose
  • Get out of the "chicken and egg" problem so new machines can join the domain, then participate in NAP
  • Learn how to make your clients "Auto-Remediate" and get healthy -- without doing anything by hand
  • Use Group Policy with NAP to make most of the magic happen

And about a billion more things to protect your network from the bad guys.

Order your signed books today

 

Chapter 10 – Finishing Touches with Group Policy: Controlling Hardware, Deploying Printers and implemeting Shadow Copies

In this chapter we'll cover three big topics which can round out your desktop experience:

  • Restricting Access to Hardware: Want a way to ensure that only the hardware you sanction gets on to your network? Well, giddy-up and good bye iPods !
  • Setting up Printers: Nobody really loves printer management. But together we can make it easier for everyone. Imagine that anyone using the lab or Nurses computers gets the same printers. (Shocking, but I show you how.)
  • Implementing Shadow Copies: How fast can you recover a user's file if he deletes it? If the answer is "over thirty seconds" you're going to want to learn how to implement Shadow Copies

In the first two sections we'll be leveraging the new Group Policy Preference Extensions to provide some extra super horsepower to manage your desktop machines. And lots of other Group Policy goodness you'll want to know to round our your desktop management experience.

Order your signed books today

 

Chapter 11 – Full Lockdown with Windows Steady State

Group Policy's job is to deliver instructions to each operating system component -- and we have to hope that component is doing its job.

What you need is a way to guarantee that a desktop can't be messed with. Group Policy can take you only so far.

Just imagine if you could really prevent changes to the hard drive. Really prevent them. Then you'd have something. You'd have full lockdown the way you want things -- forever.

That's what Windows SteadyState or just SteadyState for short is all about.

The Windows SteadyState handbook is full of useful information to get started on your journey. My goal isn't to replicate that manual. This chapter isn't a series of step-by-steps, but rather a collection of guidance, insights and techniques where the Windows SteadyState manual leaves off.

Learn how to:

  • Best prepare for and use Windows SteadyState on XP and Vista to put the real smack-down on the machine
  • Learn best practices for how to install software (and not get snared in the process)
  • Learn WHEN to turn on the smack down, and when to stay in "just testing" mode
  • Learn how to carve out a "saved area" for sanctioned users on your machines
  • Learn advice (not found anywhere else) about using Windows SteadyState in a domain environment with Group Policy
  • Use our special script to automatically clean up "dirty" machines when no one is logged in. This script is s sooooo good, you're going to want to tell your Mom about it. That's how good it is. Trust me, it's good.

Order your signed books today

 

 

 
 

 

Close