ࡱ>    M bjbj== WWlD*XXX$YY*XP[a(@a@a@aeNx.}$t -e|e@@a@a@a@a*)hE@aD[ O=*zCX"ZSl (0XZXXE** Software Deployment Using Windows2000 and Systems Management Server2.0 White Paper Abstract This white paper explains the positioning of the desktop and system management features in the Microsoft Windows2000 platform and in Systems Management Server (SMS) 2.0. It also provides a comparison of the features in each product and the key questions involved in determining which technology is appropriate for use in any given organization. Additional resources are referenced for further technical details. 2000 Microsoft Corporation. All rights reserved. The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. This white paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. Microsoft, Active Directory, IntelliMirror, MS-DOS, Visual Basic, Windows, and WindowsNT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA 3/00 Contents  TOC \o "1-2" \h \z  HYPERLINK \l "_Toc477938079" Introduction  PAGEREF _Toc477938079 \h 1  HYPERLINK \l "_Toc477938080" Overview  PAGEREF _Toc477938080 \h 3  HYPERLINK \l "_Toc477938081" Understanding the Relationship of Windows2000 and Systems Management Server 2.0  PAGEREF _Toc477938081 \h 4  HYPERLINK \l "_Toc477938082" Relationship Summary  PAGEREF _Toc477938082 \h 6  HYPERLINK \l "_Toc477938083" Comparing the Software Deployment Features in Windows2000 IntelliMirror and SMS 2.0  PAGEREF _Toc477938083 \h 7  HYPERLINK \l "_Toc477938084" Packaging  PAGEREF _Toc477938084 \h 8  HYPERLINK \l "_Toc477938085" Distribution  PAGEREF _Toc477938085 \h 10  HYPERLINK \l "_Toc477938086" Targeting  PAGEREF _Toc477938086 \h 12  HYPERLINK \l "_Toc477938087" Installation  PAGEREF _Toc477938087 \h 15  HYPERLINK \l "_Toc477938088" Comparison Summary  PAGEREF _Toc477938088 \h 19  HYPERLINK \l "_Toc477938089" Deciding Which Software Deployment Features To Use  PAGEREF _Toc477938089 \h 21  HYPERLINK \l "_Toc477938090" Exceptions  PAGEREF _Toc477938090 \h 21  HYPERLINK \l "_Toc477938091" Deploying Operating Systems and Operating System Updates  PAGEREF _Toc477938091 \h 27  HYPERLINK \l "_Toc477938092" Comparing SMS 2.0, IntelliMirror, and Remote OS Installation  PAGEREF _Toc477938092 \h 27  HYPERLINK \l "_Toc477938093" Comparison Summary  PAGEREF _Toc477938093 \h 29  HYPERLINK \l "_Toc477938094" Combining SMS Distribution and Remote OS Installation Targeting and Installation  PAGEREF _Toc477938094 \h 30  HYPERLINK \l "_Toc477938095" Summary  PAGEREF _Toc477938095 \h 36  HYPERLINK \l "_Toc477938096" For More Information  PAGEREF _Toc477938096 \h 37  HYPERLINK \l "_Toc477938097" Appendix A: Active Directory Container/SMS Collection Synchronization Tools  PAGEREF _Toc477938097 \h 38  HYPERLINK \l "_Toc477938098" How the Active Directory Synchronization Tools Work  PAGEREF _Toc477938098 \h 38  HYPERLINK \l "_Toc477938099" Requirements  PAGEREF _Toc477938099 \h 39  HYPERLINK \l "_Toc477938100" Installation  PAGEREF _Toc477938100 \h 39  HYPERLINK \l "_Toc477938101" Using the Samples  PAGEREF _Toc477938101 \h 40  HYPERLINK \l "_Toc477938102" Appendix BSample Script for Setting ACLs on Remote OS Installation Images  PAGEREF _Toc477938102 \h 46  Introduction Systems management products for Microsoft Windows operating systems have historically been provided as separate products only, independent of the operating systems themselves. To improve the quality of management services in general, more management infrastructure services have been added directly into the Windows operating systems, standardizing and improving common management operations such as inventory and software maintenance, and reducing the amount of redundant functionality that must be provided in each management product. Providing management infrastructure services in the operating system also allows a wider scale of products providing management solutions to be developed, increasing the range of options available for small, medium, and large organizations. The Microsoft Windows2000 platform represents a significant new level of management functionality, both in the management infrastructure services it contains, and the management solutions built using the infrastructure services and provided with the operating system itself. The primary management solutions provided with the Windows2000 platform that address traditional systems and desktop management are Remote OS Installation, which is used for automating the deployment of new installations of the Windows2000 Professional operating system, and IntelliMirror, a set of features that provide user settings management, user data management, and software deployment. As a product available separately from specific Windows operating system releases, Microsoft Systems Management Server (SMS) 2.0 also provides management solutions. SMS 2.0 is designed to provide advanced systems management solutions across multiple Windows versions, including Windows2000, and to use the management infrastructure services that are available across the Windows versions it supports. As new SMS versions are developed they are designed to take advantage of new infrastructure services as they become native in or available on larger percentages of Windows-based systems in use. Both productsthe Windows2000 platform and SMS 2.0provide important management solutions. This white paper is designed to: Help detail the relationship of the two products. Compare the solutions each provides. Show how to choose which solutions and features are right for use in a given organization. The information in this white paper is aimed at: Network administrators. Technology evangelists. Other information technology decision makers who are responsible for understanding and selecting systems management technologies for use in corporate networks. For more detailed technical information about Systems Management Server 2.0 or Windows2000, see the documents listed in the  HYPERLINK \l "_For_More_Information" For More Information section of this white paper. Overview This paper is made up of four major components: Discussion of the overall relationship between the management features in Windows2000 and SMS 2.0 Review of the general software deployment process, the feature area where both products provide functionality, and a comparison of the software deployment features both products provide Set of requirement-based decision criteria that can be used to determine which product is appropriate to use for software deployment. Discussion of the relationship between the products and of the features they provide, specifically in regard to deploying operating systems. Due to the unique requirements of deploying operating systems, this component is addressed as a separate section. Understanding the Relationship of Windows2000 and Systems Management Server 2.0 To understand the relationship of the management solutions provided in the Windows2000 platform and Systems Management Server (SMS) 2.0, start by comparing the feature sets that they provide. The Windows2000 platform provides two major management solutions, IntelliMirror and Remote OS Installation, each of which were designed and built on top of the management infrastructure services in the Windows2000 platform. IntelliMirror and Remote OS Installation are designed to support clients running Windows2000, and require Active Directory, and provide feature sets for deploying new installations of Windows2000 Professional, for configuring and maintaining user and computer configuration settings, and for performing centralized software installation and maintenance. For more details about IntelliMirror and Remote OS Installation features and technologies, see  HYPERLINK \l "_For_More_Information" Windows 2000 IntelliMirror and  HYPERLINK \l "_For_More_Information" Windows 2000 Remote OS Installation in the For More Information section in this paper. Systems Management Server 2.0 is designed to provide advanced centralized management features across large numbers of clients running various Windows operating systems. SMS 2.0 utilizes management infrastructure services that are available across the clients it supports, such as Windows Management Instrumentation, Windows Installer, Windows Script Host, and others. SMS 2.0 provides centralized inventory, remote control and diagnostic tools, and software management features. For more information about general SMS 2.0 functionality and features, see  HYPERLINK \l "_For_More_Information" Systems Management Server 2.0 in the For More Information section in this paper. Table 1 summarizes the major desktop and systems management features provided by SMS 2.0 and the Windows2000 platform: Table 1. Desktop and Systems Management Features of SMS 2.0 and Windows 2000 Feature areaWindows2000 IntelliMirrorWindows2000 Remote OS InstallationSystems Management Server 2.0Application deployment((User settings management(User data management(New OS deployment(OS upgrade / OS update deployment((Hardware / software inventory(Remote control and diagnostic tools(Software metering(Network analysis / diagnosis(Health monitoring(Supports Windows2000 clients(((Supports Windows95, Windows98, and WindowsNT 4.0 clients(Reviewing this table illustrates several important points that help define how the solutions relate: The only area of overlap is in application deployment and operating system deployment. Although the solutions in both products offer a range of management functionality, all features are complementary with the exception of application deployment and operating system deployment, which together comprise the more general category of software deployment. All customer environments will benefit from new management solutions in the Windows2000 platform. The IntelliMirror and Remote OS Installation solutions provide a base set of management features that are available with the Windows2000 platform. In addition, both solutions address important systems management problems that have not been addressed by any previous Microsoft systems management product, such as the ability to deploy new Windows2000 Professional installations to systems that do not have an existing operating system by using Remote OS Installation, and the user settings and data management features in IntelliMirror. Advanced customer environments will benefit from additional Systems Management Server features. SMS 2.0 adds centralized hardware and software inventory, remote diagnostic tools, software metering, support for clients running WindowsNT, Windows95, or Windows98, and enhanced software deployment features that will be attractive to or required by customers with advanced requirements. The needs of most companies cannot be met with a single management solution. Neither product's feature set is designed to or will solve all problems or be applicable in all situations. A careful review of required functionality is the key to understanding which product or feature set is a better fit in a given situation. Some advanced features will only be available by using Systems Management Server. Even if utilizing the functionality built into the Windows2000 platform, many organizations will still require the additional functionality of SMS 2.0. Relationship Summary Given the above points, you should strongly consider using both the Windows2000 platform and SMS 2.0 to address your organizations systems management needs. The superset of management functionality is available with the combination of the Windows2000 platform and SMS 2.0. However, the area of overlap, application deployment and operating system deployment (software deployment), requires additional consideration, and it is the focus of the remainder of this paper. Due to the unique requirements involved in deploying operating systems, the relationship of Remote OS Installation, IntelliMirror software deployment, and SMS 2.0 software deployment specifically for deploying operating systems is handled in a separate section later in this paper. The following sections address the relationship of the software deployment features in SMS 2.0 and IntelliMirror, and their use in non-operating system deployment scenarios. The overall relationship of SMS 2.0 and Windows 2000 IntelliMirror for software deployment can be summarized as: If your organization has advanced software deployment requirements, you can replace the built-in software deployment features of Windows 2000 IntelliMirror with those of SMS 2.0. It is important to repeat that software deployment is the only area that requires you to choose between the features in IntelliMirror and those in SMS 2.0. All other features remain complementary. It is also important for you to understand that integrated or non-integrated use of both software deployment feature sets is not a recommended practice. There are several scenarios that, at first glance, appear to be attractive points of intersection between the IntelliMirror and SMS 2.0 software deployment feature sets. However, the scenarios and functionality lost vs. those gained when you choose one product do not typically justify the costs of implementing, maintaining, and managing two infrastructures for software deployment. The following sections compare and contrast the software deployment features available in IntelliMirror and SMS 2.0, and then provide the key decision criteria you should consider when you determine which software deployment feature set is appropriate to use. Although there is also overlap in using the software deployment feature sets to deploy operating systems, the unique requirements of deploying operating systems result in significantly more complementary features. Therefore, deploying operating systems is handled as a separate section later in this paper. Comparing the Software Deployment Features in Windows2000 IntelliMirror and SMS 2.0 The most common misconception when considering the statement of choosing between the software deployment features in IntelliMirror and SMS 2.0 is that a number of features specific to IntelliMirror software deployment will be lost, and selecting SMS 2.0 for its advanced software deployment features requires giving up features found in IntelliMirror software deployment. In fact, most of the IntelliMirror software deployment features can be obtained using SMS 2.0. To better understand how the software deployment features in SMS 2.0 and IntelliMirror compare, first consider the overall software deployment process, which is actually a combination of several distinct operations. Nearly every problem associated with the process of performing a software deployment can be broken down into one of these areas: Deployment = packaging + distribution + targeting + installation PackagingPreparing the Application Components for Installation The process of preparing an application to be installed by a software deployment system is known as packaging. Packaging is directly related to installation, but it must be performed much earlier in the deployment process, prior to package distribution. Packaging entails ensuring that the package contents can be installed in the manner desired. Depending on the application to be deployed, packaging can be as simple as performing an administrative installation to prepare the application for later installation by clients from a network location. Or, packaging can be as complex as repackaging the application, which entails capturing the modifications necessary when installing an application and replacing the applications native setup. Repackaging is often required to address the problem of an applications native installation functions not providing the options necessary to allow installation via a software deployment system, such as unattended operation, control over the feature set to be installed or other default application settings, and returning accurate installation status. The process of packaging an application for deployment is typically external to the actual product used for performing the deployment, and it will be required regardless of the deployment product used. DistributionSetting up and Managing Distribution Points Used for the Package After packaging, the application components must be replicated from the location initiating the deployment to locations nearby the intended recipients to provide reasonable performance during installation. This can involve issues such as replicating the package bits across slow or intermittently connected network links, specifying and coordinating the network bandwidth used for the distribution process, ongoing management of which servers should contain the package, and replicating updates to the package over time. TargetingSpecifying Who Should Get the Package After an application has been has been packaged and distributed, the list of intended recipients must be specified. Recipients might be specific users, user groups, systems, or a combination. There might also be other requirements that determine the targeting specifications, such as existing versions of the package or minimum hardware requirements. Special considerations in targeting include the dynamic nature of any organization and the resulting addition and removal of resources from a target set over time. InstallationGetting the Package onto a Machine and in a Running or Ready to Run State After a specific user or system receives the targeting information and package details, the installation process must occur in order to complete the deployment. Installation involves specifying exactly when and how the computer settings or the user settings, or both settings must be modified in order to use the application. The following are some of the many installation issues: Scheduling the time, event, or system state that must be satisfied for the installation to begin. Coordinating the permissions and access rights necessary to perform the installation. Upgrading or removing existing package versions. Installing the package for all system users or for individual users of a system. Copying the package locally or running it from a network location. Different software deployment products will often handle these operations in different ways. Understanding the importance of, and requirements in, each operation in the software deployment process for a given organization is critical to correctly choosing the appropriate product. The following section details how SMS 2.0 and IntelliMirror address each software deployment operation. For general information about IntelliMirror software deployment features, see  HYPERLINK \l "_For_More_Information" Windows 2000 IntelliMirror in For More Information section in this paper. Packaging Historically, there have been no industry standards for how application authors should package their applications. Typically, application authors develop a procedural script that can make the necessary modifications to a system in order to install the application, and that script is then bundled with the components of the application. Often the script must contain conditional logic and will function differently depending on the state of the system it is being run on. Also due to the lack of standards, each application author is required to build logic into their installation scripts to support common requirements such as: Un-installation (removal) Coordinating application components that are shared across products Restoring the system to its previous state when a failure occurs during installation (rollback). As a result, varying degrees of support and inconsistent support for these common requirements are supplied, nearly every applications installation functions behave differently, and conflicts between application installations are common. To address the problems in application packaging and installation, Microsoft has introduced Windows Installer as an infrastructure management service. Windows Installer provides both a standard packaging format and new methods by which application authors create their installation. Rather than handling the process of installations procedurally, Windows Installer works by having application authors specify the system state required for running their application, leaving the actual details of the installation itself to Windows Installer. By working with state-based rather than procedural installation instructions, Windows Installer can then coordinate common operations by providing standard interfaces to control the installation and removal of applications and application components, eliminating the need for application authors to build their own solutions to these problems. More information about Windows Installer is provided in the  HYPERLINK \l "_Installation_-_getting" Installation section of this paper. Packaging in SMS 2.0 SMS 2.0 is designed to be packaging-independent, and can run any package installation that can be controlled by a command line, including Windows Installer packages. SMS 2.0 also provides SMS Installer, which was originally developed and released with SMS 1.2 to address common problems with traditional packaging and installation systems before the release of Windows Installer. You can use SMS Installer to create new procedural installation scripts, to re-package existing application setups, or both. You can compile SMS Installer scripts and their related package components into self-extracting executable files for deployment through SMS or other methods. A conversion utility to support migration of packages created with SMS Installer to the packaging format of Windows Installer is being developed to preserve investments made using SMS Installer. Packaging in IntelliMirror IntelliMirror software deployment requires that packages be in the Microsoft Windows Installer (.msi) packaging format. Several companies provide solutions for creating native Windows Installer packages, and for re-packaging existing setups into Windows Installer packages. IntelliMirror software deployment also provides limited deployment features for existing, non-Windows Installer packages through special text files, referred to as ZAP files, which describe enough of the installation for Windows Installer to wrap the existing installation routines. For more details about ZAP files, see  HYPERLINK \l "_Windows_2000_IntelliMirror" Windows 2000 IntelliMirror in the For More Information section of this paper. Packaging summary Windows Installer provides the most functionality and is considered the best practice for packaging when working with IntelliMirror and SMS 2.0 for software deployment. Use of Windows Installer packages is supported in both SMS 2.0 and IntelliMirror, and existing non-Windows Installer based packaging solutions can also be deployed through SMS 2.0 to Windows2000 as well as previous versions of Windows. Distribution Both SMS 2.0 and IntelliMirror provide solutions for distributing packages from a central location to servers that are local to the users who will be accessing the package. Distribution in SMS 2.0 SMS 2.0 provides a complete feature set for coordinating the distribution process. Each SMS 2.0 package can have any number of distribution points (typically individual servers) assigned to it, and SMS 2.0 provides replication services to ensure the package bits are installed on each distribution point. These replication services are the same as those used for all communication between SMS 2.0 sites, and therefore include: Automatic compression. Check point-restart transfers to allow operation over poor or intermittently-connected communication links. Bandwidth profiling to control the amount of network resources used for SMS 2.0 operations. A priority/scheduling scheme to control when the link is considered available for use by SMS 2.0 operations. Status reporting on the package distribution process. Package version tracking. The distribution features are integrated with the rest of the deployment features to ensure that clients do not receive installation instructions until a distribution point in their site contains the package bits, and to control how clients select the distribution point to use when multiple distribution points are available in the clients site. SMS 2.0 supports inter-site communication over LAN, asynchronous RAS, ISDN RAS, X.25 RAS, SNA RAS, and out-of-band links. Distribution in IntelliMirror IntelliMirror software deployment uses a share-based scheme to specify the location that clients should use to access the package bits, and allows only a single location to be specified. To accommodate the need for multiple physical package locations, you can use the Windows2000 Distributed file system (Dfs) infrastructure service. Dfs allows you to create a single virtual network location (a Dfs root) that has multiple physical locations (replicas) associated with it. When a client requests the virtual network location, Dfs resolves the request and transparently re-directs the client to a replica within the clients site, using the site boundaries defined in Active Directory. This allows a single package location to be specified to the IntelliMirror software deployment features while still allowing multiple copies of the package to be physically located close to the targeted recipients. You can manually replicate package components between Dfs replicas, or you can use the Windows2000 File Replication Service (FRS). FRS provides automatic compression of data transferred across site links, scheduling of site links for replication availability, and supports replication over SMTP and IP site links. When changes are made in a FRS-replicated master DFS replica, only the change is replicated to the other replicas, a feature known as delta replication. By default, FRS creates a relationship between each link's replica and all other replicas of that link, or what's known as a full-mesh topology between replicas. When using FRS for replication among more than 32 distribution points, modifying the default topology is recommended for performance reasons. For more information on DFS and FRS, see  HYPERLINK \l "_Windows_2000_management" Windows 2000 Server Resource Kit in the For More Information section of this paper. Distribution Summary The differences in distribution features will apply most dramatically to highly distributed organizations with many sites and many slow site links, and any organization with many distribution points. The SMS 2.0 distribution features are generally a superset of those in Dfs/FRS, with the exception of Dfs name abstraction and resolution and delta replication. Table 2 compares the distribution features of SMS 2.0 software deployment and IntelliMirror software deployment. Table 2. Distribution Features of SMS 2.0 and IntelliMirror Distribution featureSMS 2.0 software deploymentIntelliMirror software deployment (Dfs/FRS)Name abstraction and resolutionYes1YesLoad balancing between distribution pointsYes1YesFailover between distribution pointsNoYesDelta replicationNoYesSite to site: Automatic compressionYesYesLink availability schedulingYesYesPrioritiesYesNoBandwidth profilingYesNoServer selectionRestricts clients by siteRestricts clients by site, but will cross sites if not availableLink types supportedLAN, asynchronous RAS, ISDN RAS, X.25 RAS, SNA RASIP, SMTPPackage version trackingYesNoIntegration with targeting and installationYesNo1During SMS deployment operations only. Targeting The methods provided to perform targeting are central to a software deployment solution. However, different targeting solutions can often achieve the same results using very different means and methods, often turning decisions between targeting models into highly opinionated discussions. When considering targeting requirements, remember that there is no single correct way to provide targeting features. Targeting in SMS 2.0 SMS 2.0 uses the concept of Collections to perform its targeting. Collections are based on membership rules, which can be either direct or query-based. Direct membership rules are static and merely specify resources known to SMS 2.0 that should be included in the collection. Query-based membership rules specify the criteria required to be a member of a collection, and they are re-evaluated on an administrator-specified interval. The query criteria are based on any attributes SMS 2.0 maintains for managed resources, from basic properties like name and IP address, to hardware and software inventory information such as specific network cards in use, or installed software. Query-based membership rules allow the contents of a collection to change over time when resources start or stop meeting the criteria of the membership rule. All membership rules can be applied to user, user group, and system resources. Targeting in IntelliMirror IntelliMirror software deployment uses the Active Directory"! and Group Policy infrastructure services that are built into the Windows2000 platform to perform its targeting. Group Policy objects containing software deployment polices are associated with sites, domains, or organizational unit (OUs) containers in Active Directory. The policy then applies to all resources in the specified directory location and all containers below it. Software deployment policies can be further constrained by also requiring membership in one or more security groups. Software deployment policies can be applied to users, user groups, and system resources, and can be applied and revoked as resources move within Active Directory or change their group memberships. The Active Directory and Group Policy infrastructures can only be used to target policies to computers running Windows2000 and users logging on to Active Directory on computers running Windows2000. For more information about the Group Policy infrastructure in Windows2000, see  HYPERLINK \l "_Windows_2000_Group" Windows 2000 Group Policy in the For More Information section of this paper. Targeting Summary Even though the software deployment features in SMS 2.0 and IntelliMirror both provide fully featured targeting models, targeting is the area where the two products differ the most in how they work. SMS 2.0 cannot target Active Directory containers directly, and IntelliMirror cannot use advanced resource attributes such as inventory properties to constrain its targeting. Overall, the two targeting schemes provide similar functionality but do so in very different ways. Table 3 compares the targeting features of SMS 2.0 software deployment and IntelliMirror software deployment. Table 3. Targeting Features of SMS 2.0 and IntelliMirror Targeting featureSMS 2.0 software deploymentIntelliMirror software deploymentGeneral methodCollection-basedGroup Policy objects linked to Active Directory containersDynamic membership supportYesYesTarget systemsYesYesTarget usersYesYesTarget user groupsYesYesCombine resource with security group membershipNoYesBased on resource attributes (inventory)YesNoTargeting Solutions Some organizations might want to have separate mechanisms for targeting their software deployments (SMS collections) and other management operations (Active Directory containers and group policy objects), for example if different groups within a company are responsible for different management operations. In such situations the differences in targeting between the products might not matter. However, many organizations want the advantages provided by Active Directory, and want to use Active Directory as their single targeting mechanism for all management operations. Some organizations might want the IntelliMirror targeting solution for software deployment, but still require the additional granularity provided by inventory-based targeting in SMS 2.0. Although future versions of Systems Management Server and the Windows2000 platform are planned to bring these features more closely together, at this time the SMS 2.0 collection model is flexible enough to be configured so that an organizations collection design mirrors the container design in Active Directory. Doing so allows a single conceptual model to be used for targeting both group policies and SMS 2.0 software deployments, even though two systems are actually used. Changes made in Active Directory must be manually synchronized in the corresponding SMS 2.0 collections. This approach can be further improved because both Active Directory and SMS 2.0 have automation interfaces, which allow you to manipulate both technologies through simple scripting languages. HYPERLINK \l "_For_More_Information"Appendix A of this paper contains details about two sample Microsoft Visual Basic utilities that you can use to automate creating and maintaining SMS 2.0 collections that are based on Active Directory domains and organizational units. Using an automated synchronization process allows software deployments performed through SMS 2.0 to target collections containing the same resources as the corresponding containers in Active Directory, without manually maintaining two targeting systems. Although using scripting to synchronize SMS 2.0 collections to Active Directory has value in providing a single conceptual targeting model for customers who are investing heavily in both Active Directory and SMS 2.0, it is limited in the following areas: Targeting using Group Policy objects can be further restricted by adding an access control list (ACL) that contains one or more security groups to the Group Policy object. The result is a target set that is based on both location within Active Directory and membership in a specific security group. The membership rules used in SMS collections cannot contain queries that cross resource types, limiting collection result sets to be based on either resource attributes or membership in a specific user group, but not both. The synchronization process must be scheduled and maintained, which adds administration overhead. Other policy operations, such as controlling desktop options, security settings, and the setting of application policies for applications being deployed through SMS 2.0, are still performed using the native Windows2000 Group Policy snap-in. Though both administrator user interfaces are snap-ins to the Microsoft Management Console (MMC), making it easier to combine and delegate tasks, this still requires the use of two user interfaces within the MMC. Policy collision resolution. The Group Policy infrastructure in the Windows2000 platform provides a mechanism for resolving which policy should be applied (the winning policy) when multiple policies apply to an object and contain related but conflicting settings. By default, the closest policy to the object wins. SMS 2.0 combines identical software deployment instructions for a resource, but it cannot resolve a winner when related, but not identical, instructions exist. For example, through IntelliMirror software deployment an administrator could assign version 1 of an application to all objects in the domain, and assign version 2 of the same application to a subset of objects, such as a specific organizational unit. When an object in the organizational unit evaluates its software installation polices, it will find that both application polices apply to it, but it will determine a winner (in this case version 2), and apply only that policy. In this exact scenario with SMS 2.0, the object would find both versions of the application assigned to it, and unable to determine a relationship between them, would attempt to install both versions of the application. Had the same version of the application been specified at both locations, SMS 2.0 would be able to determine the relationship, combine them, and perform the installation once. Installation The process of installation is where the changes desired to support a software deployment are actually carried out, and it is tied directly to the packaging options supported. The software deployment features in SMS 2.0 and IntelliMirror take different approaches to the overall installation process, but both rely on Windows Installer to provide advanced features for installing packages. The Role of Windows Installer Even though the SMS 2.0 and IntelliMirror software deployment features show the two primary models for installation, packaging-specific and packaging-independent, they both rely on the infrastructure services of Windows Installer to provide advanced installation features. Understanding the role and features of Windows Installer is the key to understanding how advanced installation features are performed. Windows Installer is: An OS-resident installation engine. By being an infrastructure service resident in the operating system, Windows Installer takes over the operation of making the changes to a system necessary to support applications, rather than having applications make the changes themselves. A packaging format. Windows Installer specifies the format in which application authors need to package their application in order for it to be installed and removed. This packaging format is state-based rather than procedural, allowing Windows Installer to ensure that the system is in the state required for the application to run, rather than requiring the application itself to do so. A set of APIs and a command-line interface. As an infrastructure service, Windows Installer exposes it functionality through a set of well-defined interfaces. This allows any entity with appropriate permissions to trigger Windows Installer installation, removal, and repair operations. Available across Windows versions. Windows Installer is available for Windows95, Windows98, Microsoft WindowsNT 4.0, and is native in all versions of Windows2000 and future Windows versions. About installation only. Windows Installer is not directly related to distribution or targeting, providing a common installation engine available across software deployment solutions. Windows Installer takes over after an application maintenance operation has been specified, and works independently of whatever application might be specifying the operation through the Windows Installer APIs. Windows Installer provides: Enhanced installation functionality such as install on demand, automatic repair, rollback, and customization. By centralizing the control over application setup and shifting the nature of application packaging to be state-based rather than procedural, all applications that use Windows Installer packaging automatically gain the enhanced installation functionality that Windows Installer provides. Application vendors are freed from having to re-implement these types of functionality in every applications setup. The result is more reliable application performance and fewer ways that application setups can break existing applications. Standardized methods to install, remove, and repair applications. Regardless of the methods used to handle the distribution and targeting portions of the software deployment process, the functionality of Windows Installer can be accessed through its APIs or through a command-line interface. Most of the features commonly associated with IntelliMirror software deployment features. Installation-on-demand of features or entire products, rolling back the system to its previous state in the case of installation failure, auto-repair of applications, uninstall support, coordination of installation/removal for shared components, are all provided by Windows Installer and are available to any software deployment solution. For more information about Windows Installer, or to download Windows Installer for Windows95, Windows98, and WindowsNT 4.0, see  HYPERLINK \l "_Windows_Installer" Windows Installer in the For More Information section of this paper. Installation in Systems Management Server 2.0 Because SMS 2.0 is designed to be packaging-independent, its installation features are based around the execution of command lines. Any operation that can be performed with a command line can be deployed by using SMS, extending its installation capabilities beyond application installation and removal. Command line-based installation support also means that SMS 2.0 itself does not provide specific installation features such as rollback, instead relying on the combination of the packaging and installation methods used to provide necessary functionality. SMS 2.0 supports Windows Installer packages through Windows Installer command-line interface. For detailed information about deploying Windows Installer packages with SMS 2.0, see  HYPERLINK \l "_Using_Windows_Installer" Using Windows Installer packages with SMS 2.0 in the For More Information section of this paper. Each installation operation performed through SMS 2.0 can be specified as optional or assigned (mandatory). Optional operations are available for selection by users in an SMS-specific icon in Control Panel. SMS 2.0 also supports the ability to schedule installations so administrators or users (if allowed) can specify the specific time or times that an installation action should occur. SMS 2.0 can also schedule installations to occur based on system events and state, such as system startup, user logon, and when no user is logged on. However, because these operations are not integrated with the actual startup and logon processes, there is no support for guaranteeing a system state during the operation, such as preventing the user from logging on to the system while installations (or other operations) are being performed. SMS 2.0 also provides status reporting on the success or failure of an installation operation, which is rolled up from clients and summarized in the SMS Administrator console. Each operation in the process of performing an installation, receiving the targeting information, starting package execution, and success or failure of the package execution, are reported by detailed individual status messages that are returned to the site that initiated the deployment. Installation in IntelliMirror The IntelliMirror software deployment installation features are based around its tight integration with Windows Installer. Windows Installer packages can be deployed through IntelliMirror in two ways, known as publishing and assigning. Publishing an application makes it available for users to install optionally, while assigning makes an application mandatory for the targeted users and computers, and forces it to be installed the next time group policy is evaluated. Applications published through IntelliMirror software deployment can be selected for installation by clicking Add/Remove Programs in Control Panel on Windows 2000-based computers. The IntelliMirror software deployment features are integrated with the Windows2000 startup and logon processes, using those times to perform the actual installation and removal operations specified by software deployment policies. Users are prevented from logging on (in the case of system startup) and prevented from starting to use the system (in the case of user logon) while policies are applied, ensuring the system is in a known state while making changes to the systems applications. However, packages assigned to users will not be installed until the next time the user logs on to the system, and packages assigned to computers will not be installed until the next time the system restarts. The results of IntelliMirror software deployment operations are recorded in the Windows2000 Event Log of the computer performing the operations. IntelliMirror software deployment provides additional support in automated language determination and in the configuration of upgrade requirements. Windows Installer allows packages to contain multiple language versions within a single package, and IntelliMirror evaluates the language currently in use on a client to determine the correct language to install from a multi-language package. Upgrade support allows the administrator to choose and specify actions when an application that is being installed should have a relationship to any existing versions of the product, or to any other product, such as requiring removal of an existing version prior to installation. Installation Summary Because the software deployment features of both IntelliMirror and SMS 2.0 can use Windows Installer packages and installation methods, both software deployment solutions gain the advanced installation features provided by Windows Installer. SMS 2.0 provides additional features to support scheduled installations and status reporting. Table 4 compares the installation features of SMS 2.0 software deployment and IntelliMirror software deployment. Table 4. Installation Features of SMS 2.0 and IntelliMirror. Installation FeatureSMS 2.0 software deploymentIntelliMirror software deploymentGeneral methodExecution of command linesDirect integration with Windows Installer Client supportWindows3.1, Windows 95, Windows 98, WindowsNT 3.51, WindowsNT 4.0, Windows2000All versions of Windows2000 Publish and assign models (optional / mandatory)YesYesAutomated language supportNoYesInstall on demandYes1YesRollbackYes1YesAuto-repairYes1YesUpgrade supportYes1YesScheduled installationsYesNo2Status reportingYesNo1When deploying Windows Installer packages. Upgrade support through SMS 2.0 requires additional manual steps. For detailed information about using Windows Installer packages with SMS 2.0, see  HYPERLINK \l "_Using_Windows_Installer" Using Windows Installer packages with SMS 2.0 in the For More Information section of this paper. 2IntelliMirror software deployment group policies are evaluated and applied at system startup (for computers) and at user logon (for users) only. Comparison Summary The following chart summarizes the comparisons between the IntelliMirror and SMS 2.0 software deployment feature sets. Overall, the software deployment features provided by SMS 2.0 are a superset to those in provided IntelliMirror: Table 5. Software Deployment Features of SMS 2.0 and IntelliMirror SMS 2.0 software deploymentIntelliMirror software deploymentSummaryDistributionFull distribution supportShare-based, can use Dfs/FRSSMS distribution features are a supersetTargetingRule-based collections based on resource attributesGroup policies applied to Active Directory containersDifferent, although a single conceptual model can be obtained through synchronization utilitiesInstallationCommand line execution supports legacy and Windows Installer packages; scheduling options, status reportingWindows Installer packages, automated language and upgrade supportWindows Installer makes advanced installation features available through both IntelliMirror and SMS 2.0; SMS 2.0 also provides status reporting and scheduled installations.Deciding Which Software Deployment Features To Use You can use the following questions to determine which software deployment feature set is appropriate in a given organization. When considering these questions, it is important to realize that the degree of plans for deployment of the Windows2000 platform within an organization can greatly impact the possible answers, and it might be appropriate to consider those plans instead of, or in addition to, current use of Windows2000.  Exceptions Although the overall recommendation of selecting either IntelliMirror or SMS 2.0 for software deployment features remains, there are some situations where combined use can be desirable or required: Political/organizational influences. Although many organizations try to standardize or centralize their software deployment functions (and other system and desktop management operations) or try to do both throughout their enterprise, in some cases that might be impossible or will not happen for some time. In addition, some organizations purposely delegate such decision making throughout the company. In both cases the result can be an inconsistent set of choices about which software deployment feature set is appropriate to use. Often it will be necessary to support the use of both software deployment solutions within the same organization. A common example of this is when a centralized IT staff requires SMS 2.0 to address its advanced software deployment needs, while one or more divisions do not have the same constraints and could choose IntelliMirror software deployment. The only advanced software deployment feature required is distribution. If you arrive at this conclusion, carefully reconsider the full list of advanced software deployment features in question 4. In most cases the same reasons that cause an organization to need one of the advanced features will also cause a need for most, if not all, of the advanced software deployment features. In addition, organizations requiring advanced software deployment will commonly benefit from additional SMS 2.0 functionality such as inventory and remote tools. However, if the only issue preventing you from selecting IntelliMirror for software deployment in the decision chart is that you need a full package distribution feature set in question 4, you might want to consider using SMS 2.0 distribution features to provide replication features for packages that are then targeted and installed using IntelliMirror. The following sections describe exceptions that can be used to address the above situations. The implications, advantages, and disadvantages of each exception are discussed. Where appropriate, additional details on how to implement the exception are provided. Exception 1: Supporting Both SMS 2.0 and IntelliMirror Software Deployment Systems Within an Enterprise Although it is not a recommended solution, the SMS 2.0 and IntelliMirror software deployment feature sets can co-exist and be used in the same enterprise. However, there are important requirements that you must follow in this situation: Segregate at the package level to avoid package collisions. The primary rule when supporting both SMS 2.0 and IntelliMirror for software deployment in an organization is to split the operations performed in each solution at the package level. Because there is no integration between the solutions in their current versions, even deploying the same version of the same package through both systems to a single resource can cause conflicts and undefined behavior. If possible, further segregate the deployment solutions by purpose. For example, consider deploying all assigned (mandatory) packages through SMS 2.0 and all published (optional) packages through IntelliMirror, to further reduce the possibility of package operations from multiple sources occurring simultaneously. Note: Organizations with these requirements might also benefit from a combination of SMS 2.0 distribution and IntelliMirror targeting and installation, as discussed in Exception 2. Exception 2: Combining SMS 2.0 Distribution with IntelliMirror Targeting and Installation The SMS 2.0 distribution features provide several options for specifying the exact locations where packages should be stored on SMS distribution points. Those features, in combination with the ability in Dfs to allow external replication of a links replicas, allow you to use SMS 2.0 to perform the replication functions for a Dfs link in place of FRS. You can then continue to use the Dfs name abstraction and resolution features to supply a single package location to the IntelliMirror targeting and installation features. Advantages and limitations Although this scenario is not recommended, Table 6 lists the primary advantages and limitations to combining SMS 2.0 distribution features with IntelliMirror targeting and installation. Table 6. Combining SMS 2.0 and IntelliMirror Deployment Features AdvantagesLimitations You can use enhanced SMS 2.0 distribution features for IntelliMirror software deployments. You can use full-time Dfs name abstraction and load balancing features. You can use underlying distribution points for SMS 2.0 deployments. Only advanced distribution requirements are addressed. You must perform distribution point maintenance operations twice. You must manually coordinate targeting with distribution. Dfs resolution can cause clients to cross Active Directory site boundaries. SMS 2.0 clients cannot access Dfs shares. Understanding the Limitations of Combined Use The limitations in this scenario are significant. Be sure to consider them carefully against the reasons for not considering the recommended practice of selecting either SMS 2.0 or IntelliMirror for software deployment features. Only advanced distribution requirements are addressed. Any other advanced software deployment requirements, such as inventory-based targeting, installation status reporting, and scheduled installations are not available. If support for deployment to clients not running Windows2000 is required, additional deployments through SMS 2.0 will be required to target these clients. You must perform distribution point maintenance operations twice. Because the SMS distribution process and Dfs are not integrated, there is no automatic synchronization of changes to the SMS 2.0 distribution points for a package and its corresponding Dfs replicas. Modifications to the SMS 2.0 distribution point list, such as adding or deleting distribution points and changes made to the location used for a package on a distribution point must also be performed in the Dfs administrative console to update the corresponding Dfs replicas. You must manually coordinate targeting with distribution. There is no specific integration between the Dfs/FRS services used by IntelliMirror for distribution and the IntelliMirror targeting and installation features. When you are using SMS 2.0 for the entire software deployment process, SMS 2.0 ensures that at least one distribution point for package has been established in a site before clients in that site receive targeting instructions for the package. This allows targeting to be performed regardless of when the package distribution is actually completed. When you are working with IntelliMirror software deployment, you must manually coordinate targeting with the end of the distribution process, regardless of the distribution method you use. If the package files are unavailable when a policy is being applied a dialog box will be displayed prompting the user for the location of the package. Dfs resolution can cause clients to cross Active Directory site boundaries. At installation time, both SMS 2.0 and Dfs restrict the distribution points considered for use to those in the clients site. However, if no distribution point for the package is available in the clients site, Dfs will fall back to the next closest distribution point, which could be in another Active Directory site and could result in clients attempting to access packages across site links. This can be especially bad for highly distributed organizations with many sites and users located at the end of low-bandwidth links. Systems Management Server 2.0 clients cannot access Dfs shares. Because SMS 2.0 clients cannot directly access Dfs shares, you cannot use the Dfs links for any SMS 2.0 operations, including software deployment. However, if you use SMS 2.0 distribution to replicate Dfs replicas, you can still use the underlying SMS 2.0 distribution points for SMS 2.0 software deployments. Setting up packages for combined use Use the following steps to create and configure a package for distribution with SMS 2.0 and targeting and installation with IntelliMirror. These steps use a Microsoft Excel package as an example. To create and configure a package In the SMS Administrator console: Ensure that all servers necessary to support the package are configured as site systems with the distribution point role. (Optional) Setup a distribution point group (for example, Excel servers) for all distribution points that will contain the package Create the package and specify the master source location on the Data Source tab of the SMS 2.0 package. (Optional) On the Data Access tab of the SMS 2.0 package, select Share distribution folder and enter a share name for the package (for example Excel) to specify that the package should be stored in a custom share instead of in the SMS 2.0 default share. This step is not required, but it simplifies the process by specifying the location used to install the package on distribution points rather than using the default behavior of having SMS 2.0 store the package on distribution points in a folder under a generic share (SMSPKGx$) that is determined at replication time. Assign the SMS 2.0 package to desired distribution points, optionally using the distribution point group created in step 2. Monitor replication status using Package Status. If you did not create a custom share name in step 4, note that when replication is completed the per-package, per-site node of package status will include the path used to install the package on each distribution point. In the Dfs administrative console: Create a domain-based Dfs root if one does not already exist. Create a Dfs link (Excel) for the package. Create a replica for the Dfs link for each distribution point specified in the SMS 2.0 package. Specify the location that SMS uses to install the package on the distribution point as the replicas shared folder. If you specified a custom share name in step 4, the shared folder would be:  HYPERLINK "\\\\DPServername\\Excel" \\DPServername\Excel If you specified to use the default SMS package share in step 4, the shared folder will be the path specified for the distribution point in Package Status: \\DPServername\SMSPKGx$\PackageID In the Windows2000 Group Policy snap-in: . Publish or assign the package in the standard way, specifying the Dfs link for the package location. Clients that are running Windows2000 and are targeted for the package will apply the policy using the Dfs link as the package location. The actual replicas accessed by clients will be determined using the standard Dfs resolution algorithms. Deploying Operating Systems and Operating System Updates Both SMS 2.0 and Windows2000 provide solutions for deploying Windows2000 itself, and for deploying operating system upgrades and updates. However, the unique requirements of deploying operating systems results in significantly less overlap when comparing the software deployment features available in both products for use in operating system deployment than when comparing them for more general application deployment, as covered in the previous sections of this paper. This section focuses specifically on the how the software deployment features in each product apply to: Deploying new operating systems, either to systems with no existing operating system or where the existing operating system should be completely replaced. Both operations are commonly referred to as fresh installations. Deploying operating system upgrades, where the existing operating system is upgraded to a new version in-place. Existing applications, settings, and data are maintained as allowed by the upgrade. Deploying operating system updates, such as Service Packs or hot fixes to the operating system, where the version of the operating system is unchanged. All applications, settings, and data are maintained. Comparing SMS 2.0, IntelliMirror, and Remote OS Installation The following sections compare the operating system installation, upgrade, and update features available in SMS 2.0, Windows2000 IntelliMirror, and Windows2000 Remote OS Installation. Operating System DeploymentSMS 2.0 Generally, SMS 2.0 software deployment treats operating system deployment no differently than it does application deployment, by executing command lines. In the operating system case, the command line is simply the operating system installation or update command. By treating operating system upgrades as another type of software deployment, the SMS 2.0 distribution, targeting, and installation features are all available when deploying operating systems. The significant requirement that results from how SMS 2.0 works in this area is that an existing operating system must be installed on a resource in order for SMS 2.0 software deployment to occur. This means that SMS 2.0 can deploy both operating system upgrades (new versions) and operating system updates (service packs or hotfixes), where the existing operating system, applications, and user settings are retained. SMS 2.0 cannot deploy operating systems to clients that do not have an existing operating system, and it cannot deploy complete operating system re-installations where the existing operating system has been removed and replaced, for example by re-partitioning or re-formatting the system's hard disk as part of the installation. SMS 2.0 has specific integration with Windows2000 Setup for enhanced status reporting, but because SMS 2.0 is packaging independent, it is also capable of deploying any other operating upgrade or update that can be controlled by a command line, and its operating system deployment features are not specific to deploying Windows2000. Operating System DeploymentIntelliMirror The method by which support for operating system deployment is provided in IntelliMirror software deployment is nearly identical to that used in SMS 2.0. By treating operating system upgrades and updates as standard packages, IntelliMirror software deployment requires Windows2000 to be installed on a computer in order to perform operating system upgrades and updates. Any post-Windows2000 version or service pack that is packaged using Windows Installer can be deployed to Windows2000 clients through IntelliMirror software deployment using its standard feature set. As with non-operating system packages, scheduled installations and status reporting are not provided through IntelliMirror software deployment. Operating System DeploymentRemote OS Installation The Remote OS Installation solution in Windows 2000 provides a method of installing Windows2000 Professional that begins during the pre-boot portion of a computers startup, prior to the loading of any operating system that might be on the computer. This method allows the complete installation of Windows2000 Professional onto a computer that has no existing operating system, and the complete re-installation of an operating system where any existing operating system has been completely removed and replaced, commonly known as a fresh install. Remote OS Installation supports two types of operating system installations, CD-based and RIPrep (Remote Installation Preparation). For both types of installations, the files that comprise the installation are referred to as an operating system image. As used by Remote OS Installation, the term image is analogous to any other software deployment packageit's the set of files necessary to carry out installation on targeted clients. Remote OS Installation of a CD-based image is the equivalent of a standard network-based installation of Windows2000 Professional, except that it can be initiated during the per-boot portion of a computer's startup, and Remote OS Installation provides features to ensure that installations from CD-based images are automated and require no input from users. Remote OS Installation also supports the concept of capturing a fully configured Windows2000 Professional operating system (including applications, data files, and customized settings) and making that operating system configuration available for installation on additional systems, even across differing hardware. Remote OS Installation refers to this process as creating RIPrep images. Using RIPrep images allows organizations to implement standard desktop configurations that simplify usage and support, and reduce cost of ownership. Remote OS Installation does not support deployment of upgrades or updates to existing operating systems, and cannot be used to deploy any operating systems other than Windows2000 Professional. Like IntelliMirror software deployment, Remote OS Installation does not specifically provide distribution features, but it can leverage the use of FRS to replicate operating system packages to distribution points. Targeting for Remote OS Installation is accomplished by using ACLs on specific files within the operating system image to determine the list of possible operating system packages presented to users. For more information about Remote OS Installation, see  HYPERLINK \l "_Windows_2000_Remote" Windows 2000 Remote OS Installation in the For More Information section of this paper. Comparison Summary Because they address different aspects of operating system deployment, the software deployment features in SMS 2.0, IntelliMirror, and Remote OS Installation are complementary and without significant overlap when they are used for operating system deployment. Most organizations will have operating system deployment requirements that encompass fresh installations, updates, and upgrades, and therefore they will want the functionality of both Remote OS Installation and SMS 2.0 or IntelliMirror software deployment, the latter depending on which is used for general software deployments. Table 7 compares the various OS deployment features. In addition, some organizations might want to use SMS 2.0 to distribute operating system images used by Remote OS Installation. This is described in the next section. Table 7. Comparing OS Deployment Features Operating System Deployment FeatureSMS 2.0 Software DeploymentWindows2000 IntelliMirror Software DeploymentWindows2000 Remote OS InstallationInstallation on systems without existing OS (fresh installs)NoNoYesComplete replacement of existing OS (re-installs)NoNoYesCreation and installation of standard desktop imagesNoNoYesUpgrade of existing OS YesYesNoUpdate of existing OS YesYesNoDistribution / TargetingSMS 2.0 feature setIntelliMirror feature setFRS/ACLsOperating systems supportedAny OS that can be installed by using a command lineWindows 2000 service packs and post-Windows 2000 versionsWindows2000 ProfessionalCombining SMS Distribution and Remote OS Installation Targeting and Installation You can use SMS 2.0 to distribute the operating system images used by Remote OS Installation to multiple Remote OS Installation servers by creating an SMS 2.0 package for each Remote OS Installation image to be replicated, and then assigning the role of distribution point to each Remote OS Installation server that should receive an image. You can then distribute the image to Remote OS Installation servers by using the standard SMS 2.0 package distribution features. Advantages and limitations Table 8 illustrates the advantages and limitations of using SMS 2.0 to replicate Remote OS Installation images: Table 8. Replicating Remotes OS Installation Images with SMS 2.0 AdvantagesLimitationsAdvanced site-to-site replication features Package distribution status reporting Package version trackingSupports CD-based Remote OS Installation images only ACLs within a package are not directly supported Changes to images require the entire image to be re-distributedUnderstanding the Limitations of Combined Use Although the advantages of using SMS 2.0 to distribute images to Remote OS Installation servers are attractive, be careful to understand the limitations involved: Supports CD-based Remote OS Installation images only. Remote OS Installation supports installation of two types of operating system images: CD-based and RIPrep. SMS 2.0 can be used to distribute only CD-based Remote OS Installation images. This is because RIPrep images contain path and filenames that exceed the maximum of 254 characters supported by the Win32 APIs that SMS 2.0 uses for copying package source files. ACLs within a package are not directly supported. Remote OS Installation supports the targeting of various installation images to specific users by setting ACLs on the .sif (template) files of the Templates folder within the image on Remote OS Installation servers. Access to the template files is what determines which operating system images are displayed to specific users for installation. SMS 2.0 does not maintain ACLs within package source files when it replicates the files to distribution points. However, depending on the granularity of targeting required, there are two ways to ensure that ACLs are set on Remote OS Installation images distributed with SMS 2.0, and these are described in the following section. Changes to images require the entire image to be re-distributed. SMS 2.0 does not support replication of only the changes made to a packages source files (delta replication). When a packages source files are modified, the entire package must be re-distributed to distribution points. With large packages, such as operation system images, this can cause significant network loads to be generated. Setting up Packages to Support Distribution of Remote OS Installation Images with SMS 2.0 These steps assume that each Remote OS Installation server has been setup in advance of receiving images replicated by SMS, and that Remote OS Installation images will be created and verified on a test Remote OS Installation server. When the image has been fully qualified, these steps allow its distribution from the test (source) server to production Remote OS Installation servers. Note: By default, during Remote OS Installation Setup, every Remote OS Installation server installs a single CD-based image. If you do not want users to directly install the default image, remove or rename the template file (Ristndrd.sif) in the images Templates folder, but do not remove the image. The default CD-based image is required to support any RIPrep images of the same language and version installed on the server. Use the following steps to create and configure a package for distribution of Remote OS Installation images with SMS 2.0: To create and configure a package In the SMS Administrator console: Ensure that each Remote OS Installation server that will receive images through SMS distribution is configured as a WindowsNT share site system, using the servers existing Remote OS Installation share ( HYPERLINK "\\\\RISservername\\REMINST" \\RISservername\REMINST). Ensure each site system in step 1 is configured with the distribution point role. (Optional) Create one or more distribution point groups (for example, RIS Servers, RIS Servers in Main Office), to group Remote OS Installation servers for distribution operations. Create an SMS 2.0 package for the CD-based Remote OS Installation image to be distributed. On the Data Source tab of the SMS 2.0 package, set the package source files location to reference the source Remote OS Installation server for the image, starting at the top folder of the image: \\sourceRISserver\reminst\setup\\images\ On the Data Access tab of the SMS 2.0 package, select Share Distribution Folder and enter the location into which this image should be distributed on the distribution point/Remote OS Installation server. This step is required to ensure that the SMS 2.0 package distribution features place the package in the appropriate location on the Remote OS Installation server, as required by Remote OS Installation. The location specified is relative to the Site Systems primary share (\\RISservername\REMINST): setup\\images\ If targeting of the image to specific users is required, see the following section. Otherwise, you can assign the package to the desired distribution points/Remote OS Installation servers, optionally using any distribution point groups created in step 2. Distribution of the package begins immediately after a distribution point is specified, and will be available to all users performing Remote OS Installations from that server. Supporting Targeting of Remote OS Installation Images Distributed with SMS 2.0 Remote OS Installation supports targeting though ACLs set on specific files within an image. The availability of .sif files in an images Templates folder to a given user determines whether or not that image is included in the list of operating systems displayed to that user when performing a Remote OS Installation. Although SMS 2.0 does not preserve ACLs within package source files when replicating the files to distribution points, there are three methods available for setting required ACLs when distributing Remote OS Installation images with SMS 2.0. Which option is appropriate to use depends on the level of targeting granularity required for a specific Remote OS Installation image. Option 1: Using SMS 2.0 Package Access Accounts The first method, using SMS 2.0 package access accounts, allows targeting of the image by setting ACLs for the entire image on the top folder of the package. This method is the simplest option, however, it does not allow setting ACLs on the specific template files within the image. Because Remote OS Installation CD-based images can contain multiple template files, each with different installation instructions, using this method means that only a single target set can be specified for all installation options associated with the image. Note: Changes to access accounts are applied to distribution points only when initially creating or updating the package. To avoid image replications, ensure that the required access accounts are specified for the package prior to initially assigning it to distribution points. In addition, consider using security groups rather than specific users. This allows you to make changes in access to the image without requiring replication by modifying the security group membership. Important: The default package access account for Administrators is required for proper system operation on all packages, and should not be removed. This method does not provide specific functionality to prevent an image from becoming available to users on a Remote OS Installation server prior to the completion of its replication. However, because the .sif files used to make images available are copied at the end of the image, the time during which an image could be available but not completely copied to the server is very small. Option 2: Replicating Template Files Independent of Image Replication This method applies to template files for images that already exist on the Remote OS Installation servers, such as the Windows2000 Professional image installed on each Remote OS Installation server by default. Only the template files are replicated, and a script is used to copy the template files to the correct location on the Remote OS Installation server and to set desired ACLs. This method allows ACLs to be specified on the individual template files. To use this method, the Remote OS Installation servers must be SMS 2.0 clients. Use the following setups to create and configure a package to support distribution of Remote OS Installation template files only with SMS 2.0: To create and configure a package In the SMS Administrator console: Create an SMS 2.0 package for the Remote OS Installation image. On the Data Source tab of the SMS 2.0 package, set the package source files to reference the source Remote OS Installation server for the image, starting at the Templates folder of the image: \\sourceRISserver\reminst\setup\\images\\i386\templates Create a script in the Templates folder that will copy the .sif files into the proper location on the targeted Remote OS Installation servers and set the desired ACLs. See Setacls.bat in  HYPERLINK \l "_Appendix_B_" Appendix B of this paper as an example. The script must be included with the templates in the location specified for the package source files in step 2. Create an SMS 2.0 program that runs the script. Configure the program to run using the SMS administrative context to ensure it has the permissions required to apply the ACLs. Create an SMS 2.0 collection that contains the Remote OS Installation servers to receive the template files. Assign the package to distribution points in each site that contains a targeted Remote OS Installation server. If your Remote OS Installation servers themselves will not function as distribution points, assign the package to a distribution point in each site that contains a Remote OS Installation server targeted by the collection. If Remote OS Installation servers are also functioning as distribution points, assign the package to one or more Remote OS Installation servers. Create an SMS 2.0 assigned advertisement to target the program to the collection. You can make the assignment recurring (for example, daily) to run automatically and pick up any changes to the templates package, such as additional templates or changes to script that sets the desired ACLs. When the Remote OS Installation servers receive and run the advertisement, the script will run, copy the .sif files into the images Templates folder, and apply the specified ACLs. Updates to either the packages template files or its script requires updating the package on its distribution points and then re-running the advertised program on the targeted Remote OS Installation servers. If you create a recurring assignment in step 7, the changes to the package will be applied the next time the program is run after the package is updated on the distribution points. Depending on requirements, a variety of possible package/program combinations can be employed to coordinate the management of the templates folders for multiple images, from a single package and program used for all images on all servers, to multiple packages and programs, each specific to a single image. If Remote OS Installation servers functioning as Windows NT share site systems are used as distribution points for the templates package, the files for the template package will be installed in \\\reminst\smspkg\ unless a custom distribution folder is specified on the packages Data Access tab. Option 3: Distributing Images and Template Files This method combines portions of the first two options to allow the distribution of the Remote OS Installation image, the distribution of the templates for the image, and the ability to set granular ACLs on the images template files. To distribute an image, the template for an image, and set ACLs On the source Remote OS installation server: Move the template files (*.sif) for the image from the Templates folder to outside the image itself on the source Remote OS Installation server. Do not move the remaining files in the Templates folder. In the SMS Administrator console: Create two packages, one for the image itself and one for its templates. Create the image package as described in option 1, without modifications to the packages access accounts. Create the template package as described in option 2, referencing the new location of the template files created in step 1 as the package source location. Add additional checks to the script used in the template package to accommodate the packages not having been replicated yet when the script is run. If using a recurring assignment to run the template program, lack of the image existing can simply cause the program to terminate, and it will continue to run on its recurring interval. Using this method, the Remote OS Installation image will be distributed to the specified distribution points/Remote OS Installation servers using standard SMS 2.0 distribution features. After the distribution of the image has been completed, the script program will be run by the Remote OS Installation server, copying the template files and setting the specified ACLs. The image will then be available for use in Remote OS installations. Summary To summarize the relationship of the overall systems management solutions and the software deployment features of SMS 2.0 and Windows2000, consider the following points: The Windows 2000 platform provides important new management infrastructure and great new management solution features. Many of the management infrastructure services in the Windows2000 platform, such as Active Directory and Group Policy, provide functionality in important new areas. The IntelliMirror and Remote OS Installation management solutions provide a base set of management features included with the Windows2000 platform. Many individual features, such as user settings and data management, provide substantial new management functionality, which will be of value to all organizations. The only overlap between the management solutions provided in the Windows2000 platform and the advanced management solutions in SMS 2.0 is in software deployment. With the exception of software deployment, the management features in the Windows 2000 platform and SMS 2.0 are complementary, and organizations will benefit from using both. When you are considering software deployment solutions, choose between SMS 2.0 and Windows2000 IntelliMirror based on features and requirements. Use Windows2000 management solutions if appropriate. If your organization does not require advanced software deployment or other advanced management functionality provided by SMS 2.0, then the management solutions provided in the Windows2000 platform will provide you with a complete feature set. Use SMS 2.0 if you have advanced management or software deployment needs. If your organization requires advanced software deployment features (extended client support, full distribution, inventory-based targeting, scheduled installations, status reporting), or requires other management functions beyond what is provided in the Windows2000 platform, use SMS 2.0. For More Information For more information about SMS, check out our Web site at  HYPERLINK "http://www.microsoft.com/smsmgmt/default.asp" http://www.microsoft.com/smsmgmt/default.asp SMS 2.0 Software Development Kit  HYPERLINK "http://msdn.microsoft.com/downloads/sdks/platform/platform.asp" http://msdn.microsoft.com/downloads/sdks/platform/platform.asp Additional Web Site Information Microsoft Back Office 4.5 Resource Kit Available in bookstores or online at  HYPERLINK "http://mspress.microsoft.com/" http://mspress.microsoft.com/ Windows 2000 Management Services  HYPERLINK "http://www.microsoft.com/windows2000/library/technologies/management/default.asp" http://www.microsoft.com/windows2000/library/technologies/management/default.asp Windows 2000 Server Resource Kit  HYPERLINK "http://www.microsoft.com/windows2000/library/resources/reskit/default.asp" http://www.microsoft.com/windows2000/library/resources/reskit/default.asp Windows 2000 Remote OS Installation  HYPERLINK "http://www.microsoft.com/windows2000/library/howitworks/management/remoteover.asp" http://www.microsoft.com/windows2000/library/howitworks/management/remoteover.asp  HYPERLINK "http://www.microsoft.com/windows2000/library/planning/management/remoteos.asp" http://www.microsoft.com/windows2000/library/planning/management/remoteos.asp Windows 2000 IntelliMirror  HYPERLINK "http://www.microsoft.com/windows2000/library/howitworks/management/intellimirror.asp" http://www.microsoft.com/windows2000/library/howitworks/management/intellimirror.asp Software Installation and Maintenance White Paper  HYPERLINK "http://www.microsoft.com/windows2000/library/howitworks/default.asp" http://www.microsoft.com/windows2000/library/howitworks/default.asp Windows 2000 Group Policy  HYPERLINK "http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicyintro.asp" http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicyintro.asp  HYPERLINK "http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicy.asp" http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicy.asp Windows Installer  HYPERLINK "http://www.microsoft.com/msdownload/platformsdk/instmsi.htm" http://www.microsoft.com/msdownload/platformsdk/instmsi.htm  HYPERLINK "http://www.microsoft.com/windows2000/library/howitworks/management/installer.asp" http://www.microsoft.com/windows2000/library/howitworks/management/installer.asp Deploying Windows Installer Setup Package with SMS White Paper  HYPERLINK "http://www.microsoft.com/smsmgmt/deployment/deploymsi.asp" http://www.microsoft.com/smsmgmt/deployment/deploymsi.asp Active Directory/SMS Collection Synchronization Tools  HYPERLINK "http://www.microsoft.com/smsmgmt/downloads/default.asp" http://www.microsoft.com/smsmgmt/downloads/default.asp Appendix A: Active Directory Container/SMS Collection Synchronization Tools The Active Directory/SMS collection synchronization tool are provided as examples of how the automation interfaces available for Active Directory (ADSI) and SMS 2.0 (the SMS 2.0 SDK) can be used to automate the creation and maintenance of SMS collections based on domains and organizational units in Active Directory. Because these utilities are examples, they are not designed to be complete solutions in all cases. The source code to the utilities is provided and is organized so that it can be easily reused in solutions that are customized to individual organizations needs. To download the Active Directory container/SMS collection synchronization tools, see the  HYPERLINK \l "_Active_Directory_/" For More Information section in this paper. Microsoft provides script, macro and other code examples for illustration only, without warranty either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose. These samples are provided 'as is' and Microsoft does not guarantee that the following script, macro or code can be used in all situations. Microsoft does not support modifications of the script, macro or code to suit customer requirements for a particular purpose. While Microsoft support engineers can help explain the functionality of a particular script function, macro or code example, they will not modify these examples to provide added functionality, nor will they help you construct scripts, macros or code to meet your specific needs. If you have limited programming experience, you may want to consult one of the Microsoft Solution Providers. Solution Providers offer a wide range of fee-based services, including creating custom scripts. For more information about Microsoft Solution Providers, call Microsoft Customer Information Service at (800) 426-9400. How the Active Directory Synchronization Tools Work The tools are broken into two utilities: an Active Directory Discovery Agent (ADDisc), and a Collection Synchronization Manager (CollSync). Active Directory Discovery Agent (ADDisc) ADDisc works the same way as the other discovery agents that are supplied with SMS 2.0: it creates Discovery Data Records (DDRs) and supplies them to the SMS site. When the DDRs are processed by SMS, records are added to the SMS site database for new resources, and the records for existing resources are updated with the new DDRs information. ADDisc creates its DDRs by taking a starting location in Active Directory as input and using the ADSI interfaces to traverse Active Directory, creating a DDR for the objects it finds. The DDRs contain only two properties, the objects unique name and the distinguished name of the objects location within Active Directory. ADDisc is designed to work in addition to the existing SMS 2.0 user, user group, and system discovery methods in use at an organization, simply adding the directory location property to the properties discovered by the other discovery methods. After running ADDisc, you will see a new discovery property (DirectoryLocation) for each of the discovered resources. Resources discovered by ADDisc that have not previously been discovered by other methods will still be created, but they will contain only the DirectoryLocation property. Because ADDisc supplies only a single discovery property in its DDRs, discovery of system resources through ADDisc alone does not supply enough information to trigger a client installation through the WindowsNT Remote Client Installation method. Discovery processes based on the samples in ADDisc could be implemented to work with remote client installation directly (without requiring additional discovery processes) if the discovery process can supply the data required to trigger a remote installation, such as IP address and IP subnet mask, which is used to determine site assignment. Collection Synchronization Manager (CollSync) The CollSync tool automates the process of creating collections that match the organizational units created in Active Directory. It does so by taking starting locations in both Active Directory and the SMS collection hierarchy, traversing Active Directory, and creating collections to match the organizational units it finds. Collection links are also created to assemble the new collections in a hierarchy structure that matches the one found in Active Directory. CollSync ties back to the discovery data provided ADDisc by creating membership rules for each collection it creates. The membership rules specify a DirectoryLocation value equal to that of the collections matching Active Directory container. After the collections membership is updated, it will contain the same members as its matching container in Active Directory. As with the discovery methods supplied in SMS 2.0, ADDisc should be run on a recurring interval, generating new DDRs to reflect changes to the discovered resources. CollSync should also be run on a regular interval to detect changes made to the organizational units within Active Directory, and apply those changes to the set of SMS collections it manages. Both utilities support recurring operation through SMS software distribution. Requirements Systems Management Server 2.0 with Service Pack 2 or later installed Windows2000 Server configured with an Active Directory domain Visual Basic 6.0 is required to re-use and compile the samples Installation Install the utilities by running Adsync.exe on a SMS site server running SMS 2.0 SP2 or later and Windows2000. The site server computer must be a member of the Active Directory domain, but it can be either a member server or a domain controller. The utilities do not support running on systems other than the SMS site server. The installation process will copy the files to the specified location, perform the necessary .dll registrations, and create default configuration settings in the registry for the current user. Using the Samples After installation, use the following steps to configure and run the samples. Further details on general usage issues, the overall features supported by the samples, and suggested areas of customization are also included. Run ADDisc.exe. Edit the default Active Directory starting location setting to specify the desired starting location within Active Directory. The Active Directory starting location can be either a domain or an organizational unit, specified in LDAP distinguished name format (see Features supported in the samples later in this paper). To set the default Active Directory starting location setting used, modify the following registry key: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ADDisc\Settings Click Start. After ADDisc finishes, update the membership in an SMS collection that will contain resources discovered in Active Directory (for example, All Users or All Systems), and confirm that resources discovered in Active Directory by ADDisc now contain a DirectoryLocation property in their discovery data. Figure 1 shows a system resource that contains the DirectoryLocation property: Figure 1. System resource showing DirectoryLocation property. Create a temporary collection in the SMS site. Run CollSync.exe. Edit the default Active Directory starting location setting to specify the desired starting location within Active Directory. The Active Directory starting location can be either a domain or an organizational unit, specified in LDAP distinguished name format (see Features supported in the samples later in this paper). To set the default AD starting location setting used, modify the following registry key: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\CollSync\Settings Edit the default SMS starting collection, and enter the name of the temporary collection created in step 5. Click Start. After CollSync finishes, update the membership of the specified starting collection, and specify to update the membership of all sub-collections. Expand the temporary collection and verify that collections have been created to match the OU (organizational unit) structure in Active Directory. Verify that the new collections contain the same members as their corresponding Active Directory OUs. Usage Details Typically, you should run both utilities at the synchronization interval you want. Most changes to collections require updated discovery data to have their potential changes in membership accurately reflected. Both utilities were designed to be run on a recurring basis using SMS software distribution. By targeting the site server with a recurring assignment, the utilities will be run on a configurable schedule. Status for the utilities running is available using the normal advertisement status features in the SMS Administrator console. If you are using SMS software distribution to run the utilities on a recurring basis, the account used to run the programs must be granted appropriate permissions in both the SMS site and in Active Directory. CollSync requires a system, user, and user group resource to be discovered by ADDisc before it will be able to successfully create its membership rules. This is because the membership rules created by CollSync reference the DirectoryLocation discovery property, which will not exist for the user, user group, and system resource classes until ADDisc-generated DDRs have been processed by the SMS 2.0 site, which results in the new property being added to the existing resource classes. If you experience errors in CollSync while creating membership rules, ensure that ADDisc has discovered at least one resource of the type specified in the CollSync error. Features Supported in the Samples The following points detail the general features supported by the samples: Both ADDisc and CollSync work specifically with user, user group, and system objects. Other object types can exist in Active Directory, but they are not processed. CollSync can detect the following changes to one or more organizational units within Active Directory and apply the same changes to the matching collections: Adding OUs Deleting OUs Renaming OUs Moving OUs to a new location in the directory The required Active Directory starting location parameter can be specified as either a domain or a domain and an OU. In all cases, all OUs under the starting location are processed. The starting location must be specified using LDAP distinguished name syntax. Figures 2 and Table 9 show a sample Active Directory configuration, possible valid starting locations, and the resulting containers that would processed: Figure 2. Sample Active Directory configuration Table 9. Possible starting locations and resulting behavior Starting locationDN syntaxContainers processedReskit.com domainDC=Reskit, DC=comReskit.com domain Domain Controllers OU Groups OU Accounts OU Headquarters OU Production OU Marketing OU Resources OU Desktops OU Laptops OU Servers OUThe Accounts OU OU=Accounts, DC=Reskit, DC=comAccounts OU Headquarters OU Production OU Marketing OUThe Marketing OUOU=Marketing, OU=Accounts, DC=Reskit, DC=comMarketing OUSilent operation. Both utilities can operate with their GUI or in silent mode depending on the setting off the Silent option in the registry. When in silent mode, an install status MIF is generated to indicate success or failure status. Configuration settings can be stored in the registry. ADDisc and CollSync both attempt to read their configuration settings from the following location in the registry: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\program\Settings Where program is ADDisc or CollSync. The following settings are supported: ADStartingLocation CollectionStartingLocation (CollSync only) Silent (True/False) Automation interfaces for creating DDRs and install status MIFs. The SMS 2.0 Software Development Kit (SDK) shipped a DLL for creating Discovery Data Records (DDRs), SMSrsgen.dll. The version of SMSrsgen.dll shipped with these samples is updated to address a timing problem in the SDK version that occurs when multiple DDRs are created. These samples also include additional DLLs to provide automation interfaces for both SMSrsgen.dll (SMSrsgenctl.dll), and Ismif32.dll (Ismifcom.dll), the DLL used for creating install status MIF files on SMS clients. The automation interfaces allow simpler use of the functions contained in the original DLLs from within Visual Basic and scripting languages such as VB Script and Jscript. Both SMSrsgenctl.dll and Ismifcom.dll require their corresponding DLLs in order to work. Suggested Areas of Customization While the samples provide functionality that demonstrates many of the possibilities available in combining the SMS 2.0 SDK and ADSI, there are several areas they specifically do not address: Integration with the SMS Administrator Console. The SMS 2.0 SDK provides information on how to extend the menu options available within the SMS Administrator Console. Such extensions can receive context information from the SMS Administrator Console, for example the object from which the utility was launched. Further discovery methods. These samples illustrate a specific application of using the Active Directory as a source for additional discovery data, however nearly any source could be used. Allow operation on systems other than the SMS 2.0 site server. It may be convenient or even required to execute utilities such as these on systems other than the actual SMS site server. Issues to consider when doing so include supplying credentials in the connection to the SMS 2.0 site and the Active Directory. The DLLs used to generate DDRs require operation on either a SMS 2.0 site server or a SMS 2.0 client. Provide a stand-alone discovery method. ADDisc is designed to operate in addition to the existing SMS 2.0 discovery methods, returning a single additional discovery property. If desired, additional discovery methods can be designed to operate stand-alone by supplying all necessary discovery properties for a resource. Processing of additional resource types. ADDisc and CollSync work specifically with user, user group, and system resource types. However, the Active Directory can contain many other resource types that may be valuable to include in the SMS 2.0 database. Appendix BSample Script for Setting ACLs on Remote OS Installation Images @echo off : SETACLS.BAT : Sample script to set Access Control Lists on Remote OS Installation images : via Systems Management Server 2.0 : Copyright (c)2000 Microsoft Corporation, All Rights Reserved :Image 1 set imagename=win2000.2195.pro set location=\\%COMPUTERNAME%\reminst\setup\english\images\%imagename%\i386\templates : Verify the image has been replicated to the server if not exist %location%\ntldr. goto :End : Copy the template files into the image xcopy *.sif %location% /Y : Use CACLS.EXE to reset the ACLs on each template file, : always grant full control to administrators. : Skipping a .SIF leaves the default ACL of available to everyone : skipping RISTNDRD.SIF : For accountants.sif, grant Read access to Accountants group : and Full access to Administrators group : Redirect input from a file containing "Y" to automate CACLS %location%\"accountants.sif" /P accountants:R administrators:F nul : Process additional .SIF files for image 1... :End   Windows2000 White Paper  PAGE 4 Software Deployment Using Windows2000 and Systems Management Server2.0  PAGE 46      ! " # $ % & ' C D E F N O P j k l m n o p q r   ةؓjqUj>*B*UphjwUj>*B*Uph5CJOJQJaJj}U jUj>*B*Uph0J j0J UmH sH CJ jU:LXa45 g % p  Z = * 0/!0$^!0$!'(    ! " # $ 8 9 : T U V W X Y Z [ \ x y z {        7 8 9 : ; < = > ? [ \ ] ۭۗj>*B*Uphj_Uj>*B*UphjeUj>*B*UphCJOJQJaJjkU jUj>*B*Uph0J j0J U5CJOJQJaJ6] ^ j k l   # $ % ' ( ) * + , H I J K ] ^ _ y z { } ~  jG Uj>*B*UphjMUj>*B*UphjSUj>*B*UphCJOJQJaJjYU jU0J j0J U<* D@*u\#sVXYgtk?/0 !"#=>?ABCDEFbcdej >*B*Uphj5 Uj >*B*UphCJOJQJaJj; Uj >*B*Uph5CJOJQJaJjA U jU j0J Uj >*B*Uph0J 69:;=>?@AB^_`astu #$%'()*+,HIJKRSTnoprst۷ۡjUj>*B*Uphj#Uj>*B*Uphj)Uj >*B*Uph0J CJOJQJaJ j0J Uj/ U jU8tuvw9:;UVWYZ[\]^z{|}۶۠j>*B*UphCJOJQJaJj Uj>*B*UphjUj>*B*UphjU jUj>*B*Uph0J j0J U5CJOJQJaJ6 !"#$%ABCDPQRlmnpqrstu345OPQSTUjUjv>*B*UphjUj|>*B*UphjUj>*B*UphCJOJQJaJjU jU0J j0J U:UVW #$BCDZ[%%:%;%<%X%Y%^%_%%%%%%((7(8(9(X(Y())))))))**(*)*N*O*P*Q*R*s*t*u***CJ jCJ0J>jUjUjU0J jpU jU0J;6CJ]6] 0J;6]CJjUmHnHu5CJOJQJaJ?yY Y!!m"%()U)b)})))=$If=)))))))))))ltf]]]lxf]]] :$$Ifa$:$If$$Ifl4\ Q 064 lal ))*****'*(***+*lhf]]]l\f]]] :$$Ifa$:$If$$Ifl4\ Q 064 lal +*,*N*P*Q*S*T*r*s*t*v*lf]]]lf]]] :$$Ifa$:$If$$Ifl4\ Q 064 lal v*w**********lf]]]l\f]]] :$$Ifa$:$If$$Ifl4\ Q 064 lal ***********++++++++R+S+T+U++++,-W-X-~-/////1T1U1i1a2222E7Q7R7\7]777@@?ARFFHHJ4KOP'P(P)PEPFPR SƻmH sH 0J jU jU0J>5 0J>5\0J>0J; 0J;6]0J? 0J?6] 56\]5\5CJ jCJD***********lf]]]l\f]]] :$$Ifa$:$If$$Ifl4\ Q 064 lal **+++++Q+R+S+U+lf]]]lf]]] :$$Ifa$:$If$$Ifl4\ Q 064 lal U+V++-/1a2L3a3v47s7ljhhhhhfjjj$$Ifl4\ Q 064 lal s7&88;<==e?@@?ARFFHHJ4KLMjMMM0NOxPP[RRSWS SSSSSVVZX[XXXXXXXX\9\]]^^^^^^^_"_taa bbffZh^hhhl!lll~mmmmmmmnnoppppp6rirrrttpxx[}\}}}}}jUH*0J>j[U 0J B*phjU0J;0J>50J j1U jU6]mH sH 6]mH sH GWSSTXX\9\_"_``taa8cOccddddffOj$lnno.p:.pCp_pppppppppppoiiioiiio:$If$$Ifl4FH    06    4 lal = s$If=$If pqqqq*q-q1q2q@qVqZq^q_q|qyhyy$$Ifl4FH    06    4 lal:$If|qqqqqqqqqqqqqq ryLypy$$Ifl4FH    06    4 lal:$If r!r6rirrrsrrrrrrrrrHyyyyyyyyy:$If$$Ifl4FH    06    4 lal rrrttpxx}}.gy=$If= D }}}}.JT$%&01xy!?˛̛lmQRӠԠ  Whi§ç (jUjU0J? 56\]5\6]CJ0J jwU0J; 0J>OJQJ0J>0J>5 jUIǀ؀/378GKOP]p{{{{{{`{{{X{:$If~$$IflFN N W W 06    4 lal]aefy}{p{{~$$IflFN N W W 06    4 lal:$If>}E!?ؗ}}}}{{{{y}} ~$$IflFN N W W 06    4 lalؗmcW: (wxʷ+$If,:( lx RSef{|ֹ׹ºúĺ')*CPVWe57  ֿ0J? 0J?6] 56\] jU\6OJQJ]^J0J OJQJ^JjOJQJU^JjOJQJU^J OJQJ^JH*OJQJ^JH*0J>0J>55\0J;> 3^_n߸5Xyyyyyyyyyy+$If$$Ifl4F    06    4 lal58<=OTXYbgklx}ypyLyX$$Ifl4F    06    4 lal+$Ifιҹչֹhyyyyyydyyy+$If$$Ifl4F    06    4 lal ֹλ:B+$If,F BCPjSMMMMSTMM+$If$$Ifl\ ,   (0$64 laF%BMM$$Ifl\ ,   (0$64 laF+$If#&A<GS+$If,) &A;<T=>j~89M:;r\~Ta$HaBGz{|Uv=Pmu2900FSKPYZ"#I jU6]0J;j0JHU j0JHU0JH 56\]5\\0J>0J>5 0J>5\LSTU=>u>hiX+$Ifz$$IfP40  R 04 Pal ij~r\~$ & Fk$$IfP40  R04 PalC/ZzUw 4vR"0:@x@$ & F0V  0 L {  +$If, IJKno    V124efHIswWbPXc. E H k "j"!%Q%0JH(j0JHB*CJOJQJUph0JHB*CJOJQJph"j0JHB*CJOJQJUph CJOJQJ 56\]6]5\0J>0J>50J jUjjU=          $ % l fffflffffl+$If$$Ifl4\XXaa064 lal % Z ] ` d e }      ff$$Ifl4\XXaa064 lal+$If           N fDf$$Ifl4\XXaa064 lal+$If N       Vfdb`b^,$$Ifl4\XXaa064 lal+$If ND+$Ifl$$Ifl408 8  064 lal4s@$ & F!n$$Ifl4n08 8  064 lalPQH l "j"#!%Q%o'N))g++-W.y...//_12{2$ & F$ & F% :xxx$ & F!Q%o's'N)W)g++W.y.....//000000099:(:.:_:J;;A"BDDDDDEEFFGGKGLG]GHH I I I8I9I:I[I\IIIIII J2Jº⯺0J;56KH\]j"5U\j5U\KH\j7!U 56\]6]0J? 0J?6]5\0J j U jU0JH0J>50J>>{2Y4|516789.:_:J;;;<<<Y==C?@AADEGHH:I$ & F$ & F'$ & F%:I[II J3JXJJJyKK?LcLMMMNNfOOAPP QQ:  : :x x:x xxx2J3JXJYJJJJJJJJ%K&K'KwKxKKKKKKK=L>LcLdLLLLMMMMtMuMvMMMMMCNDNENNNNNNO O!OdOj(UKH\j'Uj&U 0J OJQJj%U0J KHOJQJaJj$U5\j#5U\]0J;56\]j0J;56U\]0J j"U jU 6KH\]3dOeOOOOOO?P@PAPBPPPPPPP Q QTQUQVQQQQQQQQDRERRRRRRS S S@SASSSSSSS TVVVVVVVVR[\\\6]CJj/UKH0J j/UKH\j .Uj -Uj$,U5\0J KHOJQJaJj +U 0J OJQJj)U jU;QFRR S@SS TVS[[\>\^`AcocAefghthhh7iDiMk_k  :]^::\>\Acocm>nDnInooq+rrr3tBtyyu{{f}g}}~~[~wW]eρЁ߁"C!"#?@FGHI mHnHujUmHnHu ^JmH sH ^J CJOJQJ6]0JHaJ CJmH sH CJ OJQJ^J0J>\ 0JHB*OJQJmH nH phu jU0J>0JH 0J>OJQJ 0J>5\:_k=lNlm>nKnop5pHpq,rrr9s3tBtubv3wyy3zzu{{{Bx$ & Fx$ & F({{{f}}}}}~~~)~mgg:$If~$$IflF1wnr 0 6    4 la=$If,BxB )~;~Q~[~g~w~~~~~~~~~~{~$$IflF1wnr 0 6    4 la:$If~~*+<ivweW{0{yyusx~$$IflF1wnr 0 6    4 la:$If "C:׊Ջ !+9lm <^<^^΍ύPĎގߎJ؏ُ     & F8^8`+0]0 !"$%JKLM  & F8^8` @$dN`$dN` P/ =!"#$%#P/ =!"#$%0 P/ =!p"8#$%* 00&PP/ =!p"#;$%`!1"jks,tWNS5 HHK!x흻uƿZa(2ىEr`vlۀKĆC8+#=:lE͝aI6]Ūs|>X.|zſ~׿/C귏~(?7/>/W_߉_uO^ޏvoW~\w\__}/_w_~X1_IG+5Vxk_W|Pݓ }Q4jg:_yk?תzkumk)s۞)sۻ_[NX/#^:_V.^yYmUx)sqkXOcT;)sX'cXϱ^bkXb=zzb=z%U;z_c=z륺kXOcTo>)sXq1SX/'cXϱ^bni1b=znsYc=zRxѯc=zR}Xb=zx1SX/'cXϱ^bPVjs o1SX/x_c=z륺z9K_c=z:9^OXOc//zɸnK1SX/+|)s pc=zR^c=z$c=zjn B| Ǐ_G&wr'wr'wr'wr'wr'wr'wr(MM>ɱ՛}i(n4ҿjK_ȼWi·ܝ[m )F{s e}5~ϧ6}1nCioc%VNCup?Nrg"'rC,thfH< `5"rב;_&eW!Swq+Ayv}hmiP}xVxr_w?{ Ms2aVl;y-Yvgr].I|iM-侑qݘ6]ȝvKDN+>5Аht @0#l9:K9OoANa7< h0JM< O`hRab,wr/P @ss7~K4ߐSۻ&#I=ȯχs!ct\[oMChAP:C3si…^{n n]nn^yf&՞aAKe>{d{.to}}M]8QCK>okt5~!S̸. ":N|fcY/zɝ`iu}-ܷ}ɝɝɝɝɝɝɝ}kܥTib=A+ ,o<8T`F(r;Ǝo~c+'ᮾ%%=;o;DD3J:,}n%GXNe>߇$-K|;;O~wAEr_&j@ڂ32YXR)HD)?[U0ɱ(ɨТHFGo;;eȠZiJ& aF5* RzhW%E#SܷaM`[J.B?33A){ƕ D'@%&=;=o8!lĽ@{d1.4b}'lZJ^wެrދ 2s :Guѥ5w 쳇 80SpNnki/\FIY?>wJy1 S$Bs+>bQ)"^y^Ca܇4Hknqqa(&\{: w[e6L-bfu 6Hru0{XwoU]Lfmq;H :}rn wh /̊{ %C6yhps|>h~8}1>C=܌Ty պNHA ֐]l2d曮꨼s?Es%)7r';c%:=fuȒ܋ξyz^$y܃H1dUJܤߎ{[W O"YYL%3M.4AzG% Ys0Jwh2`VzofW fYfZlduIgMzz!=Cb7:/Q:f}b4Mحdyy otcso#w/HM#ݠV:FQo`uass+il[5M}6?k{M8?߷GsËn>M{W Q]e .(2/?ef-\V#י|sQ?knŇϩ{h6v3ߣ # )4r11wz9?Bw> k%.;w$~};sb^ {m}[`Ǵ" 2*lRy֌Lw9nsD?#y1+aW3Givᎌm?j)l0ni^uZ7A.}flN9%p`RwV:4H{ymu~.^heҀԬݴx=?"tn6#Gf*`𽚝a,eX!4ڡ֑0v*{:ݼQn7Hgc6}Fvҁw rZú˲/`[݆܍};퓹c}C~gw{~*_:aQvH#ƄY?YU"B8@eu;vdBM*%Lj"2 MНMD(<0̴uSp7a9 rS6hw/a}RdGmsG[? ۯHSe/.#(㸇'Vb.ёfe'Ԫ6 F|uSF1fǑ;j76$K+N 05?<|q7iK'R$ 6&)UAtN8;Ҹ 4cm7VD#tqК)r^EqGT:j7%=xv=x\+y1nMWrWU[aeUx껑qܸܕt䮕 2a6]XKR/3bKרkh{GgrΨK:l).Ӕ$M40WϘj]92^xw5v'QK: ub쀨S~C~p9޵,w;,w(ОGr~? 0f߇b!m]VNC[J#9x~ɀc?_7[@#}y4:ލ3Z{A|:wC'Am<+6j#wLN桧3&G 6{ɔ]߫G PI?tN;(5YnL^.oo~yhFyosYmwϷlX3Nr;W FZlCf^"5p1nmCxO'} Y{zronX3I=Oēܟ޽^BJNRłCnOrwTݿ/i/r_{7P[6wO'-Ԛ3/pˤr9\}"7$Zt])󀇆8hd}nހL-B>`qǾk.|-$S$x.k0M ;߃;y;pWgdmҔuI/lnOykq]/?}4x=]V>nQy\]c]lAa`vK:kNJn*eh|?Iv%Np%*@;$6T >=8 bOkG:bݒzbyi T qk)5"pW $Spm2uJM܃x:as֦:N.¦0rEFtd?of^X<::Z6>IziZ8|e.u7;7fs)04w-H#MYv~~MqmBKVS%5ou(p߽ٚ} poܛNȤdޥPVvy2#"u ䷡%:dv}YD}jT3rEXdb&KE۱QrazdTaa<+~Α#4><}5'F*~MO>occ'SjT0m:Ǵw@ݏ;-ծƼ{C&>o}q7k$lJN4r6ÿ%PAOjIǧjgeгW/5okUY=wHpBpeOys uN a#Ss1ChMF~z~WGMo{HI t D?QڸOzCwegYM䒊d5rܷfυsq2[]%i; wϗ}z6Es^)Oi9H;ò4qf uY{AuNJ?_ ;ɝ Nwϓ;Ý&J~ ȝɽLsr?;NNNNN5/NN%s79ɽZ% j8{Q}׹pLEepR}tsNNN ;;;v rW{GǍ sNr7M {g!42[{.HeIDDw7K8{&ϻJ=<^@p M3ҝv/.܇qG^1&_/s݇c-2fN'R@r>kkZ]}U{XN۷>;{r/wɌ[us4ڸx5w1sC0ftܕ ]¿#;q m̱A#ҩğC~{!o˥ Nr_#we>yYܟ-܃7 ;j |!'"=-)&xx?/pJ/ZOj{r&iA۠C{]sc7xrWkO{}X]bmO+:ϣc?o4K[Ɠ=Sݶw3YBauBwZw"IFf\zs?k=! }~l ==J˶ff7uߊށ;Owb~aN< ;;{IܩsR$o͗[.\.ߋw>o~7O$1`!|ڛKZ-t 8:h AJx흻Fڵ BƠa@v",|g$y3?  ~Er*gټ֩ E?.9d}o{K׊#zk߭(c9ۿyV7N=gwboο{msʫu›~}u>T<ϸ|(=)Ep^x=7)^X.?իW#?ʅUMge4eVq19M ȅ\hB.4rm%ajwx.&]'(;\Kl+u:Fr!rQTVo`DrٗK]YA^$`\>Ү?L]հԭr{n@˥j\(.msκ\lO=g~hI6 ?ὸԇ0s.e&VeNå|ϻ\J/&p8w}\lu1\U3_ 8\xI6K~ .hā%\r4\^L.uqD%E9VUYYd4ﳸk}!r,IoKYdr2K%z8Ko4 3s޳=K^3i?.]%I*gW<.csi\[R#r!rY%dv2~L ȅ\hr\x{bxηGٹ"r ȅ\hB#r ȅ\6K+xuŅT޸/2K\q\Lk|'\&C!kJ\@.i%rY/]&rY/U__X(_Sc}Gq~u6_'" b ǥT\Wkڶl>TKs> )"idx".EnE:K0N~ODw x1))bV\bxZ>.^wUyVj:*' -aThr%&oƥ+kې \ƍO6Z,Փ~9?~ 0Xr}''$_)ZO/3$2٤ 7ȽN2 v C2#rdv{ Kkѻl#Ħʢ/D'* u"KStCꅥr{+ 96Ħ]nwkD7&(w[r+/2E}11\ 5\=~Q.ݩEl &/x.Paxcpj.@gV¥_#\0K/rLVvwîRnX_C-5ya偁x~чme(i*pXLclNoT.Icvޛշ~%x sIȨ֓[ԓi2bEf묌3|Q"5@؅Q˭Ff졼{!ՁμT iTOL->nP4)}.&.+t 1f*8anXؽK&y% Ћ-j펹)Dr L ӮԬ_\1U V+ǪLH/ ,s1*Pc1 qE #Ee { <=E4M>F_BdMQ./_drQ'}ՓEs&qdrQ/=vx.%KTO>_/˹L&o/cs&/ɀn]x ߍcY󰺿DfM6p@h^]\Pǟ1pΚlTƙR'%uN_8-Q:-傞>xb} E1cFUq`Fc.-ś5Y(9D[X`%z]ͽ#Gzu},J91oSh.i/0ӹh p[pA?c\z;IcJxr=3}@z z21rLL=OO֨d1,-Z_OV%~Vb'k-# @rN/%Ѯ!.{]'^*Г5r,6z_9 8AOV%arRK|D \z% t 80)Y=6SO60ГaFɡv2ccQO>F.ԓiԓ'֣#.ROvvZ=Ykp̋ѩ'g5=^,R=YK0ГNNOS`˝hՓ5sI'_ d'JK֓<[OvL=F=ZOSOBOn"S]>.dz #5p3=Yr;Յ׹? ݡ*l'7KСr/p+=0ӓ5eK\O9#/}9Eh(ա>v5B| B=YLד0W'ǮXOnEB=Yzr.W'_LדeT=Gh'ñmdS]Q'g@}LMw_r rmɅz^ =YT=k%5iɠv96YO\ 3QO&a=Y=]tz2eS.1x%la|dc ˖'5\8X$d?=91nE2' Lk L`!~k3xzݸ?nmY.n'; |!%܍p a.q }Ց"\h.[ɶ~|GEɲ ~o].'"KݸLԓq=j.Cp u~7:Єje1URע'$<|-z/zEhBnI.#t\Ow{b͂byd8=vE:Y=DI/a:Zio21!!; NHߋrvnRBiл);]_`k]:rBRq|Q]+ebY:r_* bL$n }\ /cX{嘱iK0gB{KMb@9~C5(=7K]_ݮE0י{K/:kK[avs+ZLWť2cpFix(c}IӇ-Ax̗L_I%?b)6 - gKv\ȅF.4r! \e .S)I'n!.S5\ \!E k{] `q \Jy`f/F̏ͭi"r-mN.g5 i\ }.2>Î29!>B.4屐H9c3b(\ }~Sﷸrl ivt1[MG.{raya>o>F.B.䒜 mppq^ \ȅF.B.B#rr\?wϳШZcB#r ȅ\hB.4r!\2Nn?HNAf]11,}Cq pgYin䲌}~_X޲23vN_MK=d$\ 8cd@.* 1n^ɻVvS9b2{%\Gw[ Ixܜɒˬ1Qˢ8<%'\䏊_\noo+\"\j˳ } !.,V#1/غ$.r2xPU%eO.Vs//ͦ]rl,vJS/sSmќQߑ nJkػ \2˞\~㲤-2PB[8XfjI}P?EGzKnw\l0yzK\#M\dAƌTepĒ¡iB#r!r ȅ\hB#r Дs)@Kf)v\ WFޙl|%4Lu+4r/&.i@Nfab}W{!v=y[G' qGp.oԃ@s+9s}yr Pr ,Ǧs/iX˥-{ss[Q\֔SMŚ1 GK./Wdrـ`NO?\ \ߨ\v.ĢsT<.3ނKΫ['ȅ\hB.4rv.'"#rUJf3ÎB)H.e"qaAh4-5n]cZK,7K 4ʗaT4O[ fr9Ƹrʱ ˱X_/ߕh+%`UNP_Yh}X#%ąM\Dm_cCNs \c1tipqf N#\h*ǑiBf%׋x;Ɒtz||鳿>i|gϿQ0`!P3`KF{bŶ П5/ xK9<.7TB BW,Fl!2fD!41O`% ~`4BV<.ݯciDޜv_WWUr.n5zMn^7O_|{O~鋗/~Jlx|wqF߃ E}8߼|~wɭMǃjw׼w!|ǟ<^_ _o~to?m~}=<왾,6C#_G@5k>ػ~vCwȌ>]sp-{ѣGcx <}^zo޼oj&P9^+{AH_ŰR {9$v0,v>*];z`}Rs^~{>Ͼ GvꝂ][ZdJS*{ohU nHVLig0b!wRQΞc J;dO"6wH4îإ1\ڍ6o]Sw;v7nIh>Ł?+ܝظܧ)ɽgYx{oι7 c<-0Ϟ)m<>h=g9⠢0Bɩ¨d떓ǃ'CMieMJ0Qo0:vnAT41$ٺJ "NAq#K4CtsP惭B;paw ;n @&Sd(ֿ rW/Xhǵ#r<XIvxpl3  )Ŕvrym/;M}܎b$k53KJ!TpZB{L?<>`$f7y;v{P>L91+]h ;K)%x; M1Wf^3Iqdvw7by$Y2`x6yv+ Tȴz)\ڻ>ݛ1t) ţuc*u=1 *]3ǩ)A9WQϗG_3- Nn.n :+v#v9BRSؗ8g-}iL/?{X91ʞmRJQyٳ͕mk~;6}% gSѻ\N y}R¸'4gfϓ;w]֜}Bԥڜ=G۬t9K3%Rh ؠYB6O 90I&ִv )s-Ƕnٱ'w.wqѺj &Z}Ws:3e6Vʞ}֩nWĎmI=r];#5~rǝ=ۉuc{Mw,"U;puC`p-ͺCv.MN~ǫK`ǤC%êڤ!Sw\hϜU+{e)08D=;`Glt[<Ǘ%h}` Jy)] N?0 4)^dԄMBmILJKS'zC璖24lP[a1;pIUBm ~wC?)9W ٥,OޫcM[ȎjX!eRj 1>;3K>MI (iA.v{,bTZ>zRH%-r[ì?6ͼ`B 3ر #QRՀ>4#NعP8?ȾYݳ@ۼx[alF3BҬòy=瑼u ͓69-{x3jzf/c'SE{38Ц19RlvgE~ЕgpY_\^vT{ y$q>;g;̰;`i̞p3r6s)걃rwDLތ OUU{UCv>;뱛wrG[Ҳs4aOx&ɝo.цK{̣<hgQEݍmi;:5 FAz#}3SûЀ=mɸgWe߭M0`W%[[= W7==?8J-+9Zt JbJ 0WjRvN?0vO1K=w.D9(OzYO{= r\s  /|::k^wԒS`l۵\+{e약+{e약Wa/= Wm٩WʾGvr;TMCiCiv&hVVyjB+9fA~\buzW0BWv"E Kau*+Ռh \;gu`:.K{IN9>khR)+tʾ;P>Yi$v >UioNLe4X;.>MioNk̖9(+Y1OP[Ӻ*mU[ٓfʞ4X^r.약Io5?C+mn^ټ45a~N`!b~)rxkzhKS:iSRxx\u +~qn:%7[ډc]lUD{SL S0 z({HQ&-YEoY1)(^ߟ;gYk?f ;??{.!O7{O>g;yg>_<~L݇vz+~'v:ޱ?bɓ8lHK|J> ֟[>_e?o_z}O[/.9\ yYؿlCڵ#% W.ۑ3|N_{dRF5jԨ=(3PF5j(3PF5j(3PF5j(3PF5j(3PF5j(3PF5j(3PF5j(3PF5jԨQfF5jԨQfF5jԨQfF5jԨQfF5jԨQfF5jԨQfF5jԨQfF5jԨQ@5jԨQ@5jԨQ@>3oB?ĻG5jw{M:32=tn:nwe\<ڳ4[Xokiҵ蚧ZfS񎶱Ѷ堦qAu+q^jHZ(P|R 6x?A; D,4PZ}U ݀΀cɮ]+t\Lo+\0 K }87=x~fQFebo߾~aza s$ 6gue.xap&[ jYK.PA#@J~:5̀CPp8] Rm2g `6K  0_B \|_^\)2ށ> QFe<3M!0@ a ƴrii<}{5.X ^^UN!`VO|}թE<4:c,xŷ(r Z6 346)Pp:8)C x! 3p]ṵ2 [@5je`>[oG =)TZxNϋ\3hI F>%!GIX$Ԃ5 5\F2.^eö< vN'QHTՠux- u @/ҏ5jԨQf8 vE>㯌v;<,D67 jA iQ\@=%aU+a+T*ybQ8^݀ 5P#9trl1> Ѯ"&`!^&^8܊ձ. ԨQF@1ù= cNX]" k 1I>G"Щ?;ٮmS 7GrbQ" L- b@ )yW )Zz` }+92VuQY1=@@uLo.@}ء@XZm99 f<AVȾWe"|m`%F5 '0Ӵدm]~p'g_00.E`0sU Co4S6Ϟt)>ٮz.06hLc(uqjԨQ539m,]R\w|O&) pb<vyaR'#' )D*! 5LKh5jl c]FΎv:/w1"!1+nO _C~Ssxqڄ6~\.i*戋2yy䪴ʔȂ؈ЬP ϔ@?o7P( ( =(t8^gPI>)~i~N9Aف.!.nanZ`n|lWC)1O3 ޼z0C`uDjppL˻v,F͊ty67]%-C#EL6><}w!; s}Md e2nNڿQ~z^ Y? *AQ``1 UԕHVAAPؐZT_]o   @dϔ$?$?x_8y|]223\2rrC B] \J"?֥ƅ>5s aFOfXoUw]J  PGԔQm [7msM8'5b#m ༀ*}2Md #嵘n0+eydf%-0APfdhfx`F_ZWjgWg;p@L(" ΙYA` v u-(* ,tEx +-V!f(fds s:|LF gFyŠ 0뫳=y-kZvvȞgds#&:A8 #\H?bS?jvymV 5RPVQP_-(Hl`e$W%TF&F0ĆoCz=ϕ@"2 02\P !.y! a( s-`ðV/aI8hHSm0H'%nz ƁE$Ƞ@2v35&u#Auej,u1v3 Z9ݒXڭh[d af%uj0^`>2C >!%s]"v A[S̠.U*ry5)qUɑ yQ!9zf % @ 0D{:D;Fp w9 t=bz*>TX1g@~39szU{?Օ1-oY8ʟbaAy0@vburH[S\W vAe ]XS_'m-Mڴ'tYaUPĊ'.d =M3*,?/Z h1׫A#jR'uJ8 $=Q[n`Rdaa թQQ1apP 5$&`"5ƺGCIP4?T3gR}I#(+\] \ BAnԀ=` *jc a[;HYfPs @Bmm_u *@; ԨjݨU\Sd|!gP X1:-&j'f0T5虡Wf3@\qQ .'% COZf%wE #KaHNB6lO f:Nn=8̠恚k @@uE^I-*G]\Ԩ:0-J #ݰ5K]]a>to3L k./i1Łn9TLrᐲnP# VaE RSg('5L250&L?VϘb#<"B]ANǃ89th1x%X0S\NFr=q*Tid ?{t rS<ƚ[f`QTl3-;EQd4@yf5>|ZcS= uM fk2H\aYpDd'lOvZ̸LbÜNJ+n45,OϋmMؠ̓d ҁUi %ѡ$B330`d 5 Dt;v:L=(1taHu08rȈ˼ P~o?o󋻿zp7#zxƃ7o}[WݼtW.ܹv}mڹWWf,M]^\_g2>0??;99>>ڦ*佪Ǝq,*^MG}MߐpQH3,ƊLEe*+P!@uŗ?5j5S|,^u閻Z3ԋݕ fU8JAg;90`a_3SdR&΀&0 AgoxYY.V2e'"0E0F0z'``fp΄8q>d2:t8QPÑP#]c!ڍDPg@gaac݇~7oߺv{W/yܭK˷/,^;> s#]gjT[_TSb+sJąuY15i䐪H`tO(μxGvGn(l6YcMQM Cs-l3f PRVg7 Q3ϭlY`C#&9 0?++N; &/K+@t*C]NjԶ:GZ7*6U/dK.L.Ln'jyhk :D2`x f\II0 /JH( - 3hO&:> P=66XqP |gPכWݹv;(xg 7-3EzuqjmvIό-OFgzucVmVգUw5) riKC=H#7I$jH)+9@5·<ċ^rȏpo#r6tKt ;`0,@pQfF# rO^xҀ ̔SFqnc/i?~=̡QNG]#1.GIXFFf0dЏ̀ 7WI%`0fY gRd–Z3200'65P[xr8WOPO'zi 5@ )Aav0 YIrCiJCY"JSWw;5jV= 7t.&{bm4 ]fTeXYvl S}}Oe 2\C p B 7/0Kk.-8x}u qu '439_-" %Ʉ"i5A > 9 Gcu^ ) CA8 =R&Ȁ.f/H@`/J$5&* RWhXit-'@RfEZۓԎ=hӔMc[a.3L }jr؏jI6\y)a}!GY.-'3#jS9 eQyA.@5)c~ϼ< Z!wv D9(a)]@0'^%̉Hc"ނ0(K~qj-1'ZjHڌ<_aAAk&; Π/}qS?&N00թRzUH*PK* 3[od|WÝn^::Z;KsdN@ d@V:5sdibP P%,l-PWg)+ s҂~8(`'`$# g^'Y If4VUTLҴ CA/?8 :YJ Dd Qxieˣ=;]0<}[￩6oھ)G̅f֑B>&\Ad}LChgR|q.G]+T#] `Ud/ߺ46udh,^QHT&kS4t`fN:l87}P'Z2Ba@"?aq ^QYqx[~[l}_nyɢ.d/0HKhbqC"aN5,*{F!ۣGe7ù8!6[;;18eY,my2Y= _eS4g3 0s#P X825jfU:5cxv[T$r+L)?foWMuAsJ0&@ } 1.Do<c )S'62sֵ/.03[ @;g(FˋtI4@Ρ2];8I3pS 02@3H ;)3Pf LʳGptwBD=C3raָDkXK}qJ8(mp=v!5a 6܏| *Dq MU" x/VN -!@` ;QfF 31NάhX%EW?~IS'=)=GrL%1uYfta?ru>q"rlHr?~xc se\y-M3N|Wbڹ+//|nYA 3ȋB UY<2|iXw@H2ƽ*Ŋq=9I$do /o[K5[0SܺaQOhtf4OaaDF\vHIxK6ՀW滤s v3E8ӯ0D93$m 1{p/a fA?_ L}}6 <!J~ESqcź#6<6$z2P@Q3LYUnD^S!}v!֏3hZ\q5,Ǹzd@%A^da#3 00 todQN Z<8qHPe `CUsekU`23Pfm+nʔDZeV6EU/ Q$΀PXWcŹlgՃ .ݼY aX0E|{]33|DYl_In`C~HCA( pAM kUaeN HgN^0D5=]`xH#шiLQGf@dF)xgȩ)lCqӯ$BX zE_w;ou 2\YY`8{7nҦҵ=ę^ Q`4/>?HZ,/ 0>T ` H'6\ 3$$zR<(3PfYwgd2ÐJ8rP A 0h@ d60٫($2U*g7 u6JRN)Q55h]S$(LJ2E% y"TCuUPU8rcݸ|< sS+ sk-_^]]<;w~~tnnfuf -O["lQ_S_#.ā2}e6(QaPUZC@:c+u&H33?$+ v(=* w,9WF;c&:ԔQ z3?`\d(&Zdm=ܚF}9&*%u ⾯U+oCQO/$g(B/>ψ|Oz\l9b{="W}\os Qm u cO'K2} ˣ;tڴ~^搸hDR̀ LL6r- ǛEBK+C:KۋZr9ss4)/k^P' v~@G|A|>ˈ@l績$цC&e^kSTY;DZ#ZcX촾ڴAxLZ:X5&0̟o-/vALaq\k=5 hV5 - TT(twZh:I?I9N|MsȄQߩ8[pCx_]קx^$7;"a B~-ӖF6|ZVPP , Μ8Gx[Fm MfP `@i;6gh-* n-D`ej{Ae̿cA/ "$ _qAYx&)@O=T$Cj? Y]uQG$%)gH"[C$IR֤9 2@ k-r8.;!Yv g+4/(\;aNY>#/4`CM'jW+ 4 2#ؐznbCcߗ~g1W]\B ګX$D9#j&LS-`bp]:Z钟Sȏ :n.60'9{<rЦmJ~A<;l 7x^k`0|"2-OДHS$&]kin5[M, ~K0Chkfˎfhwo= MJx^# ҸAϋ% X6j}XY}1DJ2 ~.앺WyQG 68984 @}ܤ^n /cH9&)NIô=ka!Zi'[O薂t&Z]RW-*fGf)Bfhqh<ŐWq/`C pg1]> |::*}a{Ң {\U1ձN5jl H ג2HeQnWWYZךܚ}F&UxjnJ~I 2? 2H .UD> цg LafWC& ? lh* l =6tkAu ârB δ;5q@K͵m<PuCllXrR7&H% qcC 8A~ 2;oՇf}VM2$P`/w0f6W5jԨَ0  h䎨8%,ȱŅX lj.("ؠʹ$؀5p ŷ8Ђ$+z`}U6`mu26ة^' _6cNȋܰk"9HR`|?MA0!*0Oer&ƥR Čjr^-Qg5l%-o8ZXm`f(s& Ƶ m؀(Hz"{ p~_ A7;UMIogUfTK CJ؂~ZPmsmD~EPօ|=MCPf0z.W [[\H{U0?uU^Мu)d`{T" a_8Dx b~&|Crx~Y _7TE_!1bAwR ouA0DSRQŊcqjSRAcqQ))OH @ӲYY>l%DEE謪dYc@BZ ~ oMRkpƆR<`,18(YQ>v De0 3ڪRg3* <$&H%dCYS`ֲE&:)3inXl2XbOJ`!?XgS.=X~¬Xk Z\_>baMS ښtcfs@2NV ~MX#,>N*t, \i[n傖k-4q>U@Dc>jxCDcjJ=NkǛxStdaqG2]jYn]j??qnX 鞫7f{Oݜ13pkvu{~tgqo.< 76p^-6q[ X]_`>aTZˎY7=ݦ UXfՅqAA\`&) 3*85* '(BCϔF~(<0ڦV4kE)3=*v&v~L鶉iś`9ؚվ)N1v;3C ^@Il:i#!A&j`3U 8i: A3~x ڜ jY^ӄPb3 1`HMecf#3L?V_M-֢M߄BMa/fR&bvӓ2ڮz; m1K\!mS_I$aTZ &YNJ,owosf,닓 |P/0& @3 f$X`f0ã5(3X ̭V|6#dyx*;l|ʶQz `xRl_~6l&BtEVop0-"BZ ?WIIs'd#ڔ~vtoe60 =)ehCň< 2Rz*B;K߾q:}Ԉ8"^ξU(΀* ;L`93(̽2*̰3r׶:`v曈 8kĢYG5 ևXM$0̠T܄NjH`Igj\^IdU!b&̐7&)ba~MBe#yAa0У ބ n-_o᭣6jv1;3na ;M8[=elKew&&%)f$+Cf DO@A*vgebBV2^_<"!… %7p0TA}=fHG3>#fqp|*۽-톙@o+nb'uخ]dva9t gbH[8~ITpJW啣ҢaQ /a z"cl`~a\8t!7Ze6zݷ~ae:o^hwUѺ-q8\4S&d^aGmun`c0C +3|.Aq'& aTR!(+Ƀ@Z̰<0&-݈ ղFB:e0^u0`_ϭ̾vK|7; f`gu0 Sf7XX1Ebz 2+P 8b2ˢF0N)+Ȩ@~`M/n]r:9P``~af~M0s:=RRq OzE>`kQwޒĖU\0} cln* yd,vi# Y3pي;E=nMU*l"Vz3X+bV {|?Nw`F̰-l'v7Nՙi@#38`=ץllj"6L4V/=sz|0>צ 'CaDlRgm}$a4wb92% I`93l:.~$n3C1 5d(lS0Vv0d(pfH M➛`oD31Ő 呎3XF50Mlf0/&oIod'y`;&[ xn1[RP5G 7fdq`G3ץll` ȸwoQofm9lĆ FqqLzB NAKlTeoc f>7*]׶5Y OKff`bj a-`h+h܄F0߭fa'z`} sJd6ѩXmu8QU2R]XP K=ř^TO^Gm#7QRI$$զG{-6 EY斁Q]sk\{޺~h#gޏ3lm(H]iMLGf0J M|@Yo+(ȐE­iK- X0*Y <22Ì ̰`FQIƂ`\xPEʊ Wakm{M;TMM K(9;Dtԧ'`{VHwy/f-ofQ.2}2Ç-byȺLm S2N&Xy G` 5+p+mglP6L8?w`~ 3][@fm s=ٌ|ztP'/QOM?9l( !ؐ'{C U1dv&N+ΓM f(w>FJ q{fQl:K;U*`ɁY`.߾vu}e} V/nGGSaӹ(3<7)l撔Bmm&&@uhulWt/ Pf {Go>`3(JA (CI~'^A ;̉k&"RUF)JC l_q ݃l`8XOv0*쐭"bv13,k0C1*yݻwo߾ ۇ+UU $Ŵvq,iThĂ`Š!@ Lz&s]S:63p$ XYxWpJsYx$,Q8PWgrҥ׮man1ú/pjl=NS5 p-ZfBlYfZPTe!3BcE&l(UU-SQ 8r~R#:T{͛7/^ [w}X*̰f bQCM(?.&A[* 6`n`C3+Ι3Ļq0O /w9} s٤qܥ0I9<=5ؿ89 `uqhs`Mrb6=ՒO`kZ4Ca83Xmn1PB` Pn <ڳ4L<Ժ0T X_ ׮][^^/^\\"~Xxpu D mDC-N3zEY CWm2Cemlx4z™BI~ܤ@MEy?d!p3)wQdEӒ ]S20skW/]fxb~lcA`  #$6=Sܱy̰ELlkwph8ųss j@f .;pG}߸qcuuu~~~llK~ٯ>711q{'j 3)El <6v|[u| +U$P%/!&07A k cX zLߓ\>: 88[@;b:3уۚ6}-߽ܮ7}fj266R] wT$(O-(.- 0'ڐ # Xkaݾ}ҥKgϞH}_ŏ͛7y ̰6W4K"c%)d8Rj8)c7ѕIf'RCx̜N>4 8XxQicccI1+Wo֚h׵4bsVY IwogL_v7VYXbyY:Ȉ헦d%ɳ wfgz[ M&Z:x[-fV1Ue'f` g[Ż 7e%7Qd .ݻwoܸ:33311W>fIxɩ/޻wo_>\Trlmad*GSA*"T!`iA$_+~dpd9\[zE7̰A@ eɰ[$IV(/m(F %hQN8;LTK o{noM'Σ:Q$ܵ(Ե 1!B4&A<3|`dLd1gik 8ܹsڵ///-VUs7og>oXYY +;-uq&`ӻ̉k$<2-Hmuݻ͛ .]Z[[;{pP,^௹.?4|֥s|,iXP.*%(؟W47!MiY0HMȽ($d }13SQ`p|m}fAa #fXn퐽[%b>zQo?޾}`ޮիW\$,///..LOO#*D_6Ӯp 4=d%_ݾr[ذeB L@$&Ā0O)vtbg{j8CA)}Df(wʬ}w-Bf4f^;y"Fnu1తa@y yR 3 zp( ia< 5 C,#0Dr"@d2!O7*c<1Π58fj0f6FsG3^`! p5&WVVVH0{ccc :+G>a~1ݻxK ]60rAYd(l[PN؀,gY;d<hTnblPt7!~EAM ۨݾ+ŗeexOmIʌ?wkI!:js^*ĸ=ܺ 3H A(q(^Rǁ -DcHd%IV ĬA@n?vt+pӂcn 4G[%L`2;V.zc&`\[[ð`z{{a :R@ېʫ8~GOOuCnܸaɄg#qe-gI]ᅅ¹"lcMAY*# (KKBE7=z4nx9lgegZ_f`)]q+ 1hc0G*&D{|6Ňn(C,-כew# dYqbCi P`2~D A  ձ^ ( q*r?}lE jf`C id]|P .]FFF?^ ϿkOzNږVA_WXu3˯}3`L I `i0W\y!pqj`FO0,K& m` FRE &2CW((@'p FDB ;F61~]_Ǚapaݟgϗe-|A-'nyiݚ(#ij[gcJ&+A2ʼn'+IcQ! Br)Lgr)t` Y~<ߘZօ~yu8"x|ҳ z`6&>}o#'1mz}8!$#.5\IwVL <2,'l`,x$#S9 LJ{,0cA'GN폸)3XdwףY>v?vo[Y,lZۉ`3 ;G\r|ћzMfƂ:i߭. S$ `+!x~G?b%=E>f3H%Cmj @VyUzVƐH0grNy1-jCYrf02]s5-..1}?'[:6EZfzgn77FܹcvI7+j!z&ZXqXeA-,C%ʸn5ǁ6qiK*>oNGHg0엱{,p@oY^%#>|$#隧8!":nヿϷÍNß'n7_vsm777.2: Kqi  t9(/lGvYӈ@j>WūQrA,9S +Y$.['" |#7d~{TaةpӰSr&7Yͯœj @з4X[2ω| 6Va_6Zvl`enQ6o:'yU;),/f0v!߇u;&^0݇X WCf'$yd r d3x@^z6-xp%;*C^ Տ@ %$A2|NT%I+z `faqMDID.ɩ9{?|ϸ?|_>-fXo-T  ?{(P @ٓH#3\jbB dE+.TxMt;Zk1NE9j闃Ox( o{'>[CD^[}G |~ ^s~)xA'^:bO v|5u85t X# 6Z0 t$ ]js:g wm6qH[O+dǴSf [=dm5.-"V_sݳQfIA:(H3" zFJq.SD" R@5)~d_X@[U3<ʹ<ҙ,U* "φ} 10TWz5ơyфAw5`/>oĀѱ <Qt9v3@Hب>Wcccs׸zK3,k9 A^OA6xp!^ y艟3@Ouuu?HO3HDUIՉ~`l%F߶mlPrZ5V2}ϊY˿۽4&  d 0g!f|RE,G}< <Y/E};cK)?^6N $11{P=RQrn!sF`}OƜ~.8f`Ȍ 5pAA4;_3?xT˯X]*ǵ&Bahx'OWd fVAa0صnoLf|>ysmg͈5g`Jr~T OmZJzA^x~e,<ƫ<ҭ<(x8rW0鉽1|7ԀAiJb:`g n7 (f+ d8F{`^ -gv:+bkjH׸\b=Ã:MwcCß I$bW?P0φy`fnJ\,ߴ a랖خ߼k$DHm/ouҕ̢E͈15 wNQFS2GgȾJXN " Y4P PQ Cu:'B`\V50n}9D@x_ M1`jhML0^:։1 QNC/-a gfDا>{-1+!d8ca%wD`Ù+p|4lGd3(g{c4!jL $ =̓x~Ni.\lP!'05#07p;Ed6T MMM'd ҨBSyAK{3F_X!LIHJ` a|`3fW fVq#'^yUDlĄa^l`9 f@l-6pC l$8e0f:I{ `zSHmdB7Z2دڅh5 :aQYjQ尥cVy;È0u.1D*h.*bXa3xBЫ-^ h{(0kLutF'dq8-DCn|y Xuuu@(ǎˤԔ2۞n(e%\mٖ(g]3;.g_^QQoM2CY/ Gf]Ӝqf~uƹsKp^b-i 9M+&O6т;g`)AII_^5naQ-k10b[70&0Dz!bIӹkfVX *2h%yƦKf'Y?^q:Euuu~aQ.WTTSVk<9djeI))!Ĥ_܌G^wd t~gJ%&A?^!bB"3`%\ס8m 7 W zMF j-cuS_5W2HxmE(m_v|r@"ڿaf_}wolKH$b5pL~h O[6  nJ=LDsk[K{Ʋ<. uMm:;Z[(**<΁p|>|zEKWG_ک=߇ro){uJ~-77CS)i;).~vJk}[jv߾dzk ۼRw:Fu ˴/^:ƴ.9Xkcص 'w/Ӛ+NY fiwŊ`w;:^usƮq ay ,-6ig/h$Q|3{1؛oA좥{YfS)>zsƣqb v'BۘDڟu:Cz$:bAuf^,gTMg[[[oG[ZZD"qXuzd~cnSN|Xq^NiQaUUUq\G)3L,?vb {7Ì-zJьU2S0OBfXhP(,--oP!2fa-O (}WGX7Thfc[]os;vɊ;])>.+ww|׻:6>o2pO r+9RFؗ*'TRR,t¬ǹlMulhiW) =R="pJqYU#pY>f Ld7&_G~$)'gږW-J #A:k3a5&dT8L&(Y(55^k\@X9_ '${ޖ4DU=?1[50aq4E ;ʏܑ|,CH BLn?H*t_6TgD޾ݝ,g ;LXThHT te[DŹ9>Bϳ1fbL ffGWn޶Gҙ&S;.[xQR-(b@ Ł*43\o%a2) :%:9 ;nDs4dFӭdI=f w.Gd`:#1./L w$Jd T)$᱉3Xt~w%PK(zHDo3ܾyM$`=$q5+#e֎,g=\j {LQU9\ȗWV奧O$`Tb%2CA Oݒ)f9_&&`DFXZVh^NWVwu"0H }[9(M(Zpa9](&2pD"fx\ ~VxN3PKH;S8ITjAF_[1Cskv\G`/l+A"]ݒVftQQnn.=bn*_xy7QtW\_xaf|bsϝr4Y1g:3哏&N\nP#T_^㟣 T" Q_ †3ljd)`ymVh#Q)+o|OoA*2H9҂ zg$f HO03 ? ,t!֑mhd {ʢk6 8 akdzJW̰|冗_yWCI *ÅF׆ 3\j0'o! rT"PVg`܄0LLp ' 3  ӿUc1 C (vq3H$bpQ|ŀ '!6`AR[ξ;wn U }7y6!׻:zŲ!X\]] Wm ֬j|d`pHIIb'RtKV*F7vKNN[%k(ؔq̐PPq6 \rȎf`/׏zr=8 l;(3(y:~%Crb'1Dz[|_%GOK!3M v\vwwwttw1.LTYO==MMM EEE˛r} )_QN+~W%  ϿlBGNXͱ5a>>38R"q Z[鍡6Iߩt=&a `gwěc71d{*=9nJlH{H%*r5 $1 _yg!ef~h ?ceY+GPXRh\X`ˁEw\dfaQ1IˬibbH[f8銧rUq40CSUIvkn{Ap`a\ݻNJ]On 6&0\׳k9c\`ݢb %#"x?9BkI@"3< 8dޑ|fNcU(4H\{o~Օ<˓>BZɧ-`4}"Dje s4O?U]$rdm\tѿ'k)//We4*gf2C73\5ތҀ'XJ. Q "z~!G=+̈a_ɑ_U$ {>0x_oҀkOolfPqUVev_$_vkPL䡫 H$WewAT@L%,K+Oj?ʯ RYYY +T0Y>'(<}r?*+cؾU,q9bI0(Bȷr thrWfEKN``mQ\o⁘aGKlb!?)G /P:t 幉aV.PdUwXicη p`fU,6 9̀kT=d߄\*v#{w85?#rD"fx?s^bQc ===O\2=08Z1=OW~8<60Qɋ /JX"+%%%MMMʇH߾{$74bC `Ygv*GukkC}_2ȝ$W c rKXbD"fxckS^vg&԰C,l.~xfhmm7zj8"nhh`.gÖֶFMJoQ4o-+)x/GgWYǛ&>թ;3~0SPw_(#!& `CV;`CQǸ~V6Yk   30C0L 0grZ$y{|} !늲FqNMPoo/6PwuGKZhn ͩ9H.fl!ZJǻ;Dy.Qx¬ f6KWݸe'oCԖ;^&뷼[ܒﶬ TSdk7gggJ:.ꊄv W6z\YcmCNSN20%d WIGDfDoi`Ua 8 \Z@`xARDdk˼v=%g=wahOwFmAM ʘ] Յp5$E twTp'v\¶&777===%%M|zf̜w%`8lgY100htR,w:}6$|Pi1 qWLNI 6d9Wl{dZ&`&&0CZzhr!Qn(D"3\,ٍSP_1 fyѧ0CGGƥg^Om8?pG\ZZZXRZR^Q^UrǮmG$GGk"_n9 10>͟oUa:.׆hQd~h2CvFO&F+f@r1ÐvmbD3Y{`]dAFrSGwZ{3`}U5OfhjjN^m]Bg#)]̈TPP`W\Zn |e\QQKoR?Y_iAE61d'Sw?!;}2Q~z>0Cm8Z;u 7a%;M<:0$0-3H$bQ <k_}`8?mtec 8)O,;oW}zoxx.X$(/+))KAueIM'vpܧ[K)g$[o*nbMTg?27w6b:'%PH+] 8{CDIlHgfX P]WW'[ 53[ZZBQQQFFFJJJLbZrjKk,\j/Y^WKs-P44q4F I&Lj<0,H\l])L1nŘ6bCaiӉqM Xꬳ9F:!PȲkecfo$ 1odkh^cZ.'_;~I˳VN6Αޞ1 PalD 4/^юJpa. 7o~D"fd`.FxOy씶QhQ{2n^Xz,vTWb.&YǤZkߥnqHT^^ [Oo3f8[ӅzO/u޴ϷϔJ 3;/dZ @ YlKzt\boBqn; N`konmx7\O3x^:eqڌgodv5 AP2CKc0\A/D"fe @?g `jM}{Stux܎K,zd;./m1}LC:CR,$'._/ ,\fas^R?,qQ4Vg&X Qؙ]_f0?f<S ,x%- ZxK G6t0s0iky\>cygw.j COBJTxf|LvRb~ZJQvVeQauYJRW&ilo?ܤGR f H ?l`=7x~sb76u F455 9w:j'BazzzFFbL`raUo2ÌjG 3&F"[ifxm&԰5Oaᙁ vΆZD=REE"QEEEyy9l7e>$&狯/tC2Ϧ;0&^f`%VL'Ÿ~H  \-cAlR`~Vo]_26?ķ7s DZTXF\42CQvVEa4\/3@AD!z_xxb@?x{o y1a&[8f -.36-G6nՔt}-طu~wӁW5V0bCA3hiȆ3^í͑u ,lX{Y{FFzRdYD}cg,=!tL`1CAFZIN3|S) .3x6wD"fxd90@~}L͛gmOP5ގ-D:8yWWWWTTԘ[9ywD3h<|["jhh&^($c,o3a1$­1K LOئ <:F\I Lb"*:Jk G(?[0Dz\&p מ 3$޶ykC nɬK%o ᡹P&.f-B!3?8/]E,%rGU'R}3#Q! \c"/EPTZY͔+ĕJ[kojhma knܾq '-.GD"3<=KŒ *PK,;1Cc~<\6n) 7qqc?Ibhn-J ]I"H$b133H3Cfg{c ]=]]]a{W7[锯Y`x" 3^2H6=aB-D"}]V?n:CLa~Z 3 0N?Td`iljjincfmikKc/D"3<&zԉE@& f1Ip QujCÙ@-±zW^/!1$3܏3Xaz"Ƙ1[S"H$bǀoOaCՑ'D_j2 !ȔzԌCGL6O3̀b&bH$1IvG֚fcϭ9~tQ #Ɛ~́2 4LM ҧD"H xuul̷Ǟ_02pf3V̀"mS"H$bG_AV9nS$L4sn`C,CTG0̀P` w~ωD"uE8] t2J?``Cԩh,ˣzlڈAfb&H$PMqS '$}q7Ş[qbqben,(`}J$DKZؐ{9Dj/`Ciu^dls >"D"fxW\ǯt- ]t5Nu8dh1aPK#-ML#"H$bG_!˜DP;&Iv4^;bg-ե] 3J8H$(l)LlhCYsUi,lUw=̐ngb1D"3"D"fxU[^UZ\ڔц?<3=}c Q&r@@"H K+*  ˜$H7w{nuNJQyf$)S"H$bG_Ң.QF$yIuш EAv-DŽ"O(b1D"3Se0\`El` E"H zXl`u-뮯h)o(HoȊN*嗄^[f,|X㙃e2yVBtotT/ &yZ$z'zZ%z&|ݒSBxahPg@ǬL+BMޯ-[ ̓-]bCI,o@l_(D"fx, 5*Ij;[ݍOrk3b+cy( mAziA ^iR<2cA ^6` 9$:6$^K N f!)!-. Lؐ%`ڪ`:dfq]Kc= R3Xlh̎g6T *cJ" ur@llc6pֵ$H$bǎXryFOWw@W[oKbCky$/.6T&F^-gx Ks|mh/q}6xZ m|$]~AI,3F`̤A~fZAv&`0CEI~xa0ڀI=bC[}eA¶<I9OP 56_cC N~` l!2r `@l?AP$D諻Yn^0@{f( 9L!τrϱu^} 8x]X0q3]΋7D.'xyZ'X3s\A@I>I~mH gB $쒂\nATUDjXl6VW VS4g6e65f cצ0PDn>6x2!D" 191@G#d0Ʉڛ{$":<)HNv/ wr(Ax,gU ^ Osn"6 0ϙP^c E3N!73 ,6VWqm@HliÆf¡QV_֪b`$$dhĆ*A00CY,,{h\"rh&)D"}`Ý},0 3wwW I Y7+cymnaAj14ڐtBⵋhH*:΋!D_'iUkRwR 5"dцx6 lBTUV/Elf@l`!KznI]G}`CgS0R9I"!bCCfmP 9؀č6;"H$b"\Hpv7b<]W1>4/6-JXU\&)XrE0 K,3$]b)60 .\l0؀ ܒH ĆJ줐ײ؀m-` ]?ĆFb`V1 $`Ce/KP2mf6$[3 69_l_(D"fx\ rT8\ 2W^ц 8`U$`CzBtn$76J"rY'C!Gl`:)a)6`;)XlH P" j5zY`=$b1D"3<m;wkwoco7o}֭7z{w1 Z %*J}h|E3\-)l,k(0ԗI* JULi2[dF& Xg{XwG;cR n޼yk 1 o 5vrBffvwc-gCH F{ķoLTX"_(D"f%xe,KYB+| D"H$D"33H$D"f H$D@"H$D"H$1D"H$bD"H $D"H$D"H$D"3WJcH$Db!H$4޾ID"H $D"f 3H$_3H$oD"H $D"H$D"3H$D"f H$D@"H$D"H$ ~=SH9WO/ܾKO)FO3_=;KhܢzQ F k}DyK _Toc477938079}DyK _Toc477938079}DyK _Toc477938080}DyK _Toc477938080}DyK _Toc477938081}DyK _Toc477938081}DyK _Toc477938082}DyK _Toc477938082}DyK _Toc477938083}DyK _Toc477938083}DyK _Toc477938084}DyK _Toc477938084}DyK _Toc477938085}DyK _Toc477938085}DyK _Toc477938086}DyK _Toc477938086}DyK _Toc477938087}DyK _Toc477938087}DyK _Toc477938088}DyK _Toc477938088}DyK _Toc477938089}DyK _Toc477938089}DyK _Toc477938090}DyK _Toc477938090}DyK _Toc477938091}DyK _Toc477938091}DyK _Toc477938092}DyK _Toc477938092}DyK _Toc477938093}DyK _Toc477938093}DyK _Toc477938094}DyK _Toc477938094}DyK _Toc477938095}DyK _Toc477938095}DyK _Toc477938096}DyK _Toc477938096}DyK _Toc477938097}DyK _Toc477938097}DyK _Toc477938098}DyK _Toc477938098}DyK _Toc477938099}DyK _Toc477938099}DyK _Toc477938100}DyK _Toc477938100}DyK _Toc477938101}DyK _Toc477938101}DyK _Toc477938102}DyK _Toc477938102DyK _For_More_InformationDyK _For_More_InformationDyK _For_More_InformationDyK _For_More_InformationDyK _For_More_InformationDyK _Installation_-_gettingDyK _Windows_2000_IntelliMirrorDyK _Windows_2000_managementDyK _Windows_2000_GroupDyK _For_More_InformationDyK _Windows_InstallerDyK _Using_Windows_InstallerDyK _Using_Windows_InstallerDyK \\DPServername\Excel\\DPServername\ExcelDyK _Windows_2000_RemoteDyK \\RISservername\REMINST\\RISservername\REMINST}DyK _Appendix_B_ DyK yK Zhttp://www.microsoft.com/smsmgmt/default.aspDyK yK ~http://msdn.microsoft.com/downloads/sdks/platform/platform.aspDyK yK <http://mspress.microsoft.com/DyK yK http://www.microsoft.com/windows2000/library/technologies/management/default.aspDyK yK http://www.microsoft.com/windows2000/library/resources/reskit/default.aspDyK yK http://www.microsoft.com/windows2000/library/howitworks/management/remoteover.asp DyK yK http://www.microsoft.com/windows2000/library/planning/management/remoteos.aspDyK yK http://www.microsoft.com/windows2000/library/howitworks/management/intellimirror.aspDyK yK http://www.microsoft.com/windows2000/library/howitworks/default.asp!DyK yK http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicyintro.aspDyK yK http://www.microsoft.com/windows2000/library/howitworks/management/grouppolicy.aspDyK yK xhttp://www.microsoft.com/msdownload/platformsdk/instmsi.htmDyK yK http://www.microsoft.com/windows2000/library/howitworks/management/installer.aspDyK yK thttp://www.microsoft.com/smsmgmt/deployment/deploymsi.aspDyK yK nhttp://www.microsoft.com/smsmgmt/downloads/default.aspDyK _Active_Directory_/N iB@B Normal dxOJQJ_HmH sH tH @ "Heading 1,h1,Level 1 Topic Heading+$$dx @ &#$@& 5CJKHn@n "Heading 2,h2,Level 2 Topic Heading$@&OJQJn@n "Heading 3,h3,Level 3 Topic Heading$x@&5CJ<@< Heading 4$@&5CJ @ Heading 9,h9,Third Subheading( $d<&#$@&$5B*CJKHOJQJ^JaJph<A@< Default Paragraph FontXOX Abstract Text dCJOJQJ_HmH sH tH lOl Abstract Title)d(x$dN]5CJOJQJaJPOP Bullet 1 & F d1$CJOJQJaJR"R Bullet 2 & F 1$^CJOJQJaJZO2Z Bullet 3' & F 81$^8`CJOJQJaJhBh Caption Large Picture`d8<^`6CJOJQJaJRORR Caption Normald8<6CJOJQJaJ6Ob6 Code,c dL CJOJQJ:'@q: Comment ReferenceCJaJF@F Comment Text dxCJOJQJaJ88 Contents./CJ\TOT Document Typed5CJKHOJQJaJ,, Header  !TOT Footer-even#  5$dN^55CJTOT Footer-odd& 5$dN^55CJ8&@8 Footnote ReferenceH*LL Footnote Textdx1$CJOJ QJ aJ(U@( Hyperlink>*B*VOV Legalese! XdtF0$^6CJOJQJaJdd Picture1 Small!"$dx1Z  &a$6CJOJQJaJ`2` Masthead Descriptor#d8^6CJOJQJaJOB Number$ & F (1$>T .Tf^`(BARB Number after bullet %]^],)@a, Page Number,pn:Or: Paper Title'h(]hCJ @OR@ Picture2 Med ($ mHnHuLOBLPicture3 Large)$`^` mHnHu>V@> FollowedHyperlink >*B* phBOB Table Body+sd((]sCJBOB Table Bold,d((1$5CJFF Table Bullet- & F h].1. Table Title.xB@BTOC 1/ P d5mHnHu:@:TOC 2 0 PCJmHnHu>>TOC 31 P^CJmHnHu>">TOC 42 ^CJmHnHu, 2, Footer 3 !N!BN Product Name4dl@& ` @CJHKH8&& TOC 5 5 ^ && TOC 6 6^&& TOC 7 7^&& TOC 8 8x^x&& TOC 9 9@^@POP Text,t:d<<!B*OJQJ_HmH phsH tH $O$ Italic,i6rr Bulleted List 1,bl1< & Fd<<!B*OJQJ_HmH phsH tH *O* Label,l=OJQJ O Bold,b52O2 Bold Italic,bi56DOD Text Indented,ti@hh]h^h>O> Text in List 1,t1 Ah^hrO"r Bulleted List 2,bl2B & Fd<<!B*OJQJ_HmH phsH tH jj Figure in List 2,fig2Cdx]^B*OJQJph^O^ Table Footnote in List 1,tf1Dd8(PCJZRRZ Body Text Indent 2Ed^CJOJQJaJHOH Table Footnote,tfFd8(PCJ6r6 Alert Text,at Gh^hPOPCode Embedded,ce B*CJOJ QJ mHnHphu@O@ Link Text Popup,ltp B*phrr Numbered List 1,nl1J & FYd<<!B*OJQJ_HmH phsH tH BB Label for Procedures,lpKppCode in List 2,c2L0d$<]0^ B*CJOJ QJ mHnHphu>> Figure,figMdxx]Y " G i LXa45g%pZ=* D @ * u \ #sVXYgtk?yYYm!$%U%b%}%%%%%%%%%%%%%%&&&&&'&(&*&+&,&N&P&Q&S&T&r&s&t&v&w&&&&&&&&&&&&&&&&&&&&&'''''Q'R'S'U'V'')+-a.L/a/v03s3&447<99e;<<?=RBBDDF4GHIjIII0JKxLL[NNOWOOPTTX9X["[\\t]]8_O__````bbOf$hjjk.lCl_lllllllllllmmmm*m-m1m2m@mVmZm^m_m|mmmmmmmmmmmmmm n!n6ninrnsnnnnnnnnnnnpp8tStxx.{g{y{{{{{{||/|3|7|8|G|K|O|P|]|a|e|f|y|}||||||||||||~>}E!?ؒmcW: (wxʲ 3^_n߳58<=OTXYbgklx}δҴմִζ:BCPj%B#ռּؼ&A<GSTU=>u>hij~r\~C/ZzUw 4vR"00V  0L{ $%Z]`de}NV        N      4 s@PQHlj! Q o"N$$g&&(W)y)))**_,-{-Y/|011234.5_5J666777Y88C:;<<?@BCC:D[DD E3EXEEEyFF?GcGHHHIIfJJAKK LLFMM N@NN OQSVVW>WY[A^o^A`agctccc7dDdMf_f=gNgh>iKijk5kHkl,mmm9n3oBopbq3rtt3uuuvvvvvfxxxxxyyy)y;yQy[ygywyyyyyyyyyyyzz*z+zgc0N07d0N0Mf( $0Mf( $0Mf0Mf( $0Mf( $0Mf0Mf( $0Mf( $0Mf( $0Mf$0Mf( $0Mf( $0Mf( $0 Mf( $0 Mf(0Mf03o03o03o03o(0Mf0t 0?t 0@t B0t B0t B0t B0t 0At0t,0t=0t=0t=0t0t:0t:0t:0t:0t:0t:0t:0t:0t:0t:0t:0t:0t:0t0t:0t:0t:0t:0t:0t:0t0t:0t:0t:0t0t 0Bt 0Ct0t0t0t0t0t 0Dt(0Mf0" 0E" 0F" 0G" 0H" 0I"00Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն0Ն+0Ն0Ն0Ն@0@0@0@0@0@0@0@0@0@0@0@0@0@0@0@0@0@0@0@0 0 8 ] tU* S}( IQ%2JdO\* ))+*v***U+s7WS.pp|q rr]ؗ5ֹBSi %  N {2:IQ_k{)~~      "#%EOkmnp#9UWXZz8:;=]k $ ' ( * J ^ z } ~  " > A B D d  : = > @ ` t  $ ' ( * J S o r s u : V Y Z \ |  !#CQmpqs4PSTVCZ!;!X!^!!!$8$X$K(LELZTTTZZZ~iii[xxx%0 h¢õ{"Jn+++C D8D[DDDXEEEE&FwFFF=GcGGHHuHHHDIII JdJJJ?KAKKK LULLLLDMMMN@NNNQQQ X%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%tX%t̕XXXXXXXXXXXXXXXXXXXtXXXXXXXXXXXXtXtX*13!!  O2$jks,tWNS9" 2$ڛKZ-tB2$P3`KF{b RX2$b~)rxkzhKS\f@ (  b  C ?3"b  C ?3"@(  <  # A<  # A<  # A<  # AB S  ?ּjfx! 4MZ4944 0k0k _Toc475255657 _Hlt477938276 _Hlt477919506 _Toc477938079 _Hlt474142878 _Hlt477938134 _Hlt474142853 _Toc474927724 _Toc475255660 _Toc477938080 _Toc474927725 _Toc475255661 _Toc477938081 _Hlt474138003 _Hlt474139518 _Hlt474139523 _Hlt474835607 _Hlt474138099 _Hlt474139228 _Hlt474137866 _Hlt474139519 _Hlt474139522 _Hlt474138035 _Hlt474139513 _Hlt474139517 _Hlt474139524 _Hlt474138719 _Hlt474835646 _Hlt474140002 _Hlt474144233 _Hlt474138735 _Hlt474140000 _Hlt477915946 _Hlt474138779 _Hlt474139994 _Hlt477915841 _Toc474927726 _Toc475255662 _Toc477938082 _Toc474927727 _Toc475255663 _Hlt477915408 _Toc477938083 _Hlt477930521_Installation_-_getting _Hlt477919872 _Hlt474142140 _Hlt474138843 _Hlt474139982 _Toc474927728 _Toc475255664 _Toc477938084 _Hlt477919784 _Hlt477916315 _Hlt477938232 _Hlt474138931 _Hlt477916347 _Hlt474139977 _Hlt474830135 _Hlt474830136 _Hlt474830141 _Hlt477938240 _Hlt474672839 _Toc474927729 _Toc475255665 _Toc477938085 _Hlt474139966 _Hlt474139293 _Hlt477938252 _Toc474927730 _Toc475255666 _Toc477938086 _Hlt474139354 _Hlt477938266 _Hlt474139940 _Hlt474139958 _Hlt477938275 _Toc474927731 _Toc475255667 _Toc477938087 _Hlt474139922 _Hlt477938302 _Hlt474139915 _Hlt474835770 _Hlt474835819 _Hlt474835830 _Toc474927732 _Toc475255668 _Toc477938088 _Toc475255669 _Hlt477930937 _Toc477938089 _Hlt477578444 _Toc477938090 _Hlt477930902 _Toc474927736 _Toc474927737 _Hlt475332751 _Hlt475332752 _Toc477938091 _Toc474927739 _Toc475255672 _Toc477938092 _Hlt474835942 _Hlt474139807 _Hlt474139815 _Hlt474139608 _Toc474927740 _Toc475255673 _Toc477938093 _Toc475255674 _Toc477938094 _Hlt475160716 _Hlt475160709 _Hlt475160710 _Hlt474139662 _Hlt474139716 _Hlt474139680 _Hlt474139690 _Toc474927742 _Toc475255675 _Toc477938095 _Hlt474142877 _Toc474927743 _Toc475255676 _Toc477938096_For_More_Information _Hlt477919217_Windows_2000_management _Hlt477918685_Windows_2000_Remote_Windows_2000_IntelliMirror_Windows_2000_Group _Hlt477936942_Windows_Installer_Using_Windows_Installer _Hlt477937707 _Hlt478168235 _Hlt478168236 _Toc477938097 _Hlt474219450 _Hlt474219451 _Toc477938098 _Hlt477920049 _Toc477938099 _Hlt477919488 _Toc477938100 _Toc477938101 _Hlt477919934 _Hlt477919936 _Hlt477919938 _Hlt477919940 _Hlt477919942 _Hlt477915577 _Hlt474139713 _Toc474927745 _Toc475255678 _Toc477938102 _Hlt477919619 _Hlt474139677 _Hlt477578447 _Hlt477915522wZIIPyyyYYY!!!!>!>!@!@!@!A!A!A!A!F!F!M!!!!!E$F$M$L/L/L/<9<9<9<99FFK,L,LxLxLxL}LTTTTTTTTZZ\\\iiinnnxx*,-ȵȵؼؼ!NOP55++++;;;CCCCCEE7FFHI1KAKEMNNNNQQSV\Vgcc7dMfXf:ott6ԆՆՆՆՆ@@@@@ @@@@ @@@@@@@@@@@@@@@ @!@"@#@$%&)*'@+(@,-@0@.@/@2341@5@6@7@8@9@:@;@<@=@>@?@AB@C@D@EFGH@I@J@K@L@MNOP@Q@R@S@T@U@VWXZY@[\@^]@_`a@b@cdefj@g@h@i@klmnop@q@r@s@t@u@v@wxy~@{|}z@@@@@@@@@@@@@@@@@@@@@KwfJJQ?!?!A!A!A!B!B!B!B!G!G!N!W!W!W!W!!!!!F$G$N$`/`/`/<99999FF-L-LDL}LLLLTTTTTTTTZZ\\\iiinnnxx+-.ɵɵͶͶͶ""ؼ 3!!!OPQo66++++<<<CCCCCEE8FFHI2KAKEMNNN OQQ\VVsccCdXf^f:ott6Ԇ  OO;nGn[ycygysyyyyyyyyyyyyyyyyyyyyyy z#On9X;k ( ^ ~ " B  > t  ( S s : Z !Qq4T[!Y!^!!$Y$%%%&&&&&KFL [DD L LEM N@NN Kathie WerneriC:\Documents and Settings\a-kwern\Application Data\Microsoft\Word\AutoRecovery save of SMSintell2-kw_.asd Microsoft<C:\Documents and Settings\a-kwern\Desktop\SMSintell2-kw_.doc MicrosoftiC:\Documents and Settings\a-kwern\Application Data\Microsoft\Word\AutoRecovery save of SMSintell2-kw_.asd Microsoft7C:\Documents and Settings\a-kwern\Desktop\SMSintell.doc Microsoft%D:\2000 post launch\SMS\SMSintell.doc Microsoft%D:\2000 post launch\SMS\SMSintell.doc Microsoft%D:\2000 post launch\SMS\SMSintell.doc Microsoft%D:\2000 post launch\SMS\SMSintell.doc Kathie Werner7C:\Documents and Settings\a-kwern\Desktop\SMSintell.doc Kathie Werner7C:\Documents and Settings\a-kwern\Desktop\SMSintell.doc*s2Vzp枧Ump枧hp枧a*7 }O`4p枧dF#p枧9_ (|1&|21)W.p枧%v1~m 5p枧&6H7eY8 r>p枧Bq!@ nAp枧h Dp枧p=ET0<{H`3JZVBLp枧R@S _T`UZZ#[`u^oZpBtq7Tq`krkOsOxsvp枧l]{xp枧hy`Y}p枧e}22e1M~`Wp枧@](^]`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@(^`(CJOJQJo(.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(. hh^h`OJQJo(@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.h^`.h^`.hpLp^p`L.h@ @ ^@ `.h^`.hL^`L.h^`.h^`.hPLP^P`L.@(^`(CJOJ QJ o(.m^`m56OJQJo(-@(^`(CJOJ QJ o(.h ^`OJQJo(oh ^`OJQJo(oh P P ^P `OJQJo(h   ^ `OJQJo(h ^`OJQJo(oh ^`OJQJo(h ^`OJQJo(h ``^``OJQJo(oh 00^0`OJQJo(@(^`(CJOJ QJ o(.hhh^h`)h^`)h88^8`)h^`()h^`()hpp^p`()h  ^ `.h@ @ ^@ `.h  ^ `.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.h hh^h`OJQJo(@(^`(CJOJQJo(.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@](^]`(CJOJ QJ o(.@(^`(CJOJQJo(.@(^`(CJOJ QJ o(.@(^`(CJOJQJo(.@](^]`(CJOJ QJ o(.@(^`(CJOJ QJ o(.h ^`OJQJo(hhh^h`.@(^`(CJOJQJo(.@](^]`(CJOJ QJ o(.@](^]`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@(^`(CJOJ QJ o(.@(^`(CJOJQJo(.@(^`(CJOJ QJ o(.h hh^h`OJQJo(@](^]`(CJOJQJo(.@(^`(CJOJ QJ o(.+e}eY8&69_ (Tq{H _T#[ }Oe1M~hyoUZ3J%v1sR@SkOsu^a*77kr1)p=EpBq!@tq 5l]{xW.h DtqnnAOxsvVBLW4dF#Umh2VzY}r>** @U%b%}%%%%%%%%%%%%%%&&&&&'&(&*&+&,&N&P&Q&S&T&r&s&t&v&w&&&&&&&&&&&&&&&&&&&&&'''''Q'R'S'U'V'.lCl_lllllllllllmmmm*m-m1m2mVmZm^m_m|mmmmmmmmmmmmmm n!n6ninrnsnnnnnnnnng{y{{{{{{||/|3|7|8|G|K|O|P|]|a|e|f|y|}|||||||||||ʲ 3^_n߳58<=OTXYbgklx}δҴմִ:BCPj%B"ռּ <GST=ij 0L{ $%Z]`de}N       xxxyyy)yyyyy*z+zXhttp://www.microsoft.com/windows2000/library/howitworks/management/grouppolicyintro.asp39Dhttp://www.microsoft.com/windows2000/library/howitworks/default.aspSUhttp://www.microsoft.com/windows2000/library/howitworks/management/intellimirror.asp_Nhttp://www.microsoft.com/windows2000/library/planning/management/remoteos.aspDRhttp://www.microsoft.com/windows2000/library/howitworks/management/remoteover.asp ZJhttp://www.microsoft.com/windows2000/library/resources/reskit/default.aspKQhttp://www.microsoft.com/windows2000/library/technologies/management/default.aspThttp://mspress.microsoft.com/x?http://msdn.microsoft.com/downloads/sdks/platform/platform.aspG^-http://www.microsoft.com/smsmgmt/default.asp4_Appendix_B_ Iq\\RISservername\REMINST7_Windows_2000_Remote#\\DPServername\Excel+_Using_Windows_Installer+_Using_Windows_Installeri`_Windows_Installer#_For_More_Informationr__Windows_2000_Group,_Windows_2000_managementyO_Windows_2000_IntelliMirrors_Installation_-_getting#_For_More_Information#_For_More_Information#_For_More_Information#_For_More_Information#_For_More_Information1_Toc4779381021_Toc4779381011_Toc4779381000z_Toc4779380990t_Toc4779380980n_Toc4779380970h_Toc4779380960b_Toc4779380950\_Toc4779380940V_Toc4779380930P_Toc4779380920J_Toc4779380910D_Toc4779380900>_Toc47793808908_Toc47793808802_Toc4779380870,_Toc4779380860&_Toc4779380850 _Toc4779380840_Toc4779380830_Toc4779380820_Toc4779380810_Toc4779380800_Toc477938079  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~  Root Entry FpL=Data m01TableXWordDocumentSummaryInformation(DocumentSummaryInformation8LCompObjjObjectPoolpL=pL=  FMicrosoft Word Document MSWordDocWord.Document.89q