Chuck | Chuck's Tech Blog

Geekom GeekBook Pro X14 Review

I have always been a fan of thin and light notebooks, but never a fan of the lack of power they tend to leave on the table as a compromise. However, in recent years, such compromises have largely shrunk. From Apple’s MacBook Air with its powerful M series chips to a plethora of thin and light Windows laptops running Ultra 9s, such a gap has closed considerably. The GeekBook Pro X14 is no exception to the progress that has been made in this area.

Today, I am reviewing the Geekom GeekBook Pro X14, a 14″ laptop which promises a lot for a fairly affordable price.

So how does it hold up? Let’s find out.

It’s specs as reviewed:

Intel Ultra 9 185H
32 GB LPDDR5x
2 TB SSD
14″ 2.8K OLED with up to 450 Nits of brightness and 120 Hz Refresh Rate
2.2 Pounds
72 Watt Hour Battery

First Impressions

To start, while pulling the laptop out of its box, I was immediately struck but how light it is. Weighing in at just 2.2 pounds, this 14″ laptop is noticeably lighter than my 13″ MacBook Air. Of course, when comparing the sizes directly, the GeekBook is ever so slightly larger than my Air. It is also a hair thicker than the Air as well, but thanks to its feet on the bottom it sits significantly higher than the Air. The feet makes sense, as unlike the Air, it is actively cooled with a fan so the clearance is necessary for better heat dissipation.

There are several ports on the GeekBook; on the left is an HDMI 2.1 port and two USB-Cs (not thunderbolt). On the right is a USB A 3.2 port, headphone jack, and a camera shutter switch for privacy.

The lid opens easily and with one hand. I’ve had 4 pound laptops need both hands to open without it lifting the bottom as well, but this lid opens effortlessly.

The body has some wobble, as if the legs are not perfectly aligned. It is not very noticeable when typing, but pushing on the bottom right corner is. Geekom claims the body is coated with a material for more comfort, offering a different (almost plastic) feel than I was expecting of an all metal magnesium body.

The instructions say it needs to be plugged in to turn it on for the first time, so I did just that and pressed the power button. Within moments, the laptop came to life and I powered through the set up screen. However, be forewarned, it took over an hour to update the laptop during the set up process.

Keyboard – 10/10

The keyboard feels familiar to that of my Air. If you do not like the keyboards of the newer M series Macs, then you won’t like this. However, I’m a fan, so this keyboard feels right at home for me.

There is no keyboard flex, something I dislike on laptops made of plastic (which is to say, most of them). Overall the body is sturdy when typing.

The power button does have a built in finger print reader, which is accurate and fast to unlock Windows.

Touch Pad – 6/10

Ouch! Not sure if its this specific unit I have, but the track pad is stiff along the entire center. I have to press hard (or tap) if I want to select something. The right and left click fine. Precision wise, scrolling wise, and feel – it is among the better track pads I have used for Windows Laptops. The stiffness really hurts the overall feel of the laptop otherwise. I am curious if any other owners have the same issue.

Speed – 9/10

The Ultra 9 185H is definitely a power house of a processor, but it is also now two generations old. I don’t hold this against Geekom, as there is clearly a price advantage to using these processors. Further, with an Intel CPU shortage in full swing, it may have been a strategic decision to do this.

For day to day tasks, office work, web surfing, I’ve not had any issues. The 32 GB of RAM offers plenty of overhead for these tasks. For photo editing, it is quite honestly, good enough. For video editing, 64 GB of RAM would be nice for larger more complex projects, however this machine has no upgradeable RAM as it is soldered to the motherboard. With the RAM shortage, this again may have been a strategic decision.

The SSD seems to speed along fine despite being PCI-E 4.0 rather than 5.0; I doubt anyone will notice any performance issues there as I certainly don’t.

Gaming – 7/10

Update 1-25-2026: The Intel Arc chip in this thing is more capable than I had expected, but as I had figured, it is not the best for AAA gaming. I tested Minecraft, Space Engineers, Star Trek Online, and Star Citizen.

Minecraft: Frames varied depending on location, chunk loading, etc., but I was as low as 30 FPS but as high as 114 FPS. The game was overall playable. I played max settings, max render, max Chunk Simulation Distance, etc..

Space Engineers: FPS was between 30 and 40. High settings and full resolution.

Star Trek Online: No FPS counter here, but the game play was smooth at max settings and resolution. However, at 2.8k, the GUI was tiny – very, tiny.

Star Citizen: Would not launch due to a driver issue with the Intel Arc. Further reading on this issue, the game did run before until an update on Star Citizen broke it about a month ago. The fix is a driver update, which does not yet exist.

Screen – 10/10

The 2.8K OLED screen is quite simply, gorgeous. For entertainment consumption, it is practically perfect. It’s 120 Hz refresh rate is also nice, though falls short of some gaming screens. I do not have a calibration tool, but the colors look accurate enough. The 450 Nit brightness is enough for me to work perfectly fine outside with a partly cloudy day. It may struggle in direct sun, however (something I have not been able to test due to weather).

Speakers – 7/10

Despite promising high quality speakers, the sound is… tinny. Playing sound at max volume, alongside my M2 MacBook Air (also at max volume), the difference is very noticeable. My Air is far richer and fuller than the GeekBook. However, the sound is passable and will certainly be fine with streaming content. But for those who prefer fuller, richer sounds, I’d suggest headphones or external speakers.

Camera 8/10

The 1080p webcam is great and works well in well-lit areas. The physical camera privacy switch on the right side, next to the headphone jack, works as advertised.

Microphone – 8/10

The built it Geekom PC Manager program offers three optional modes – “Capture Voices in Room”, “Remove Ambient Noise”, and “Clear Voice”.

Capture Voices in Room: Seems to capture (almost) everything as one might expect. My wife, sitting about 10 feet from behind the laptop could be heard mostly, but when she lowered her voice some the microphone did not register her voice until she spoke louder.

Remove Ambient Noise: Did not work well at all. With my wife speaking at a distance, her voice came through warbled and distorted with ambient noise penetrating through. So if you are in a conference call and need someone near you to be heard, do not use this option.

Clear Voice: Seems to be slightly better on the pick up and clarity, but you can hear mouse clicks and typing as well, but no noticeable ambient noise.

Microphone Effects Disabled: Definite difference in clarity and ambient noise came through (such as the laptop fan). I’ve opted to keep the effects enabled with Clear Voice as my preference.

Battery – 7/10

I’ll admit my bias here, after being spoiled by my M2 MacBook Air’s battery life, I find any Windows Laptop… lacking. The GeekBook Pro X14 comes with a 72 Watt Hour battery, promising up to 16 hours of life. Currently, as I type and browse the internet with max nits on the screen, I have used 22% over the course of an hour and a half. Windows tells me I have 2 and a half hours remaining before it needs to be charged again. This aligns with some of the other Windows laptops I have used for work. Obviously, you can get a lot more battery life out of a laptop by turning the brightness down.

By turning my brightness down to half (whereas I’ve had it maxed before), Windows says I will get up to 5 more hours out of it. I see no reason why someone can’t squeeze a full day’s productivity out of this (gaming, photo, and video editing aside). I am always suspect of claims of long battery life (regardless of the brand).

Note: I have an Anker Nano ii 65 Watt charger that I tested with this unit. It would charge for a minute and then stop. The charger that came with the laptop, also 65 Watts, works fine. I suspect a compatibility issue with the Anker and the GeekBook Pro, as it works fine with my other laptops.

Bloatware – 7/10

There is only one program on this laptop that could be considered bloat, and that is the Geekom PC Manager. It seems fairly light weight and has some useful functions, such as tracking heat, adjusting microphone profiles, and more. I’m usually not a fan of bloatware of any kind and immediately remove it, but this seems reasonable to keep if you want, especially as some function simply opens Window’s settings. Otherwise, of course, you are always free to remove it.

Warranty – N/A

The GeekBook Pro X14 comes with a one-year warranty, plus an additional one-year warranty when purchased through the geekompc.com website.

Price – 9/10

The current price is $1249 (as of January 2025). The initial price, $1,299 appears fair for the unit as far as I am concerned. However, a few days after I purchased the laptop, the price was dropped by $50 and a 10% coupon was offered in addition to that. Go figure. However, the price of the Ultra 5 model was increased by $50, so be aware of this. Even without the coupons, at $1249 (as of January 2026), I consider the price fine, especially for it’s OLED screen. Keep in mind, these are claimed as “sale” prices, however, I’m not sure if the price will change all that much (though it may with the increased prices of computer parts and due to the CPU and RAM shortages).

The Ultra 5 125H model comes with a 1 TB SSD and is priced at, currently, $1049.

Overall – 7/10

I have some complaints – the rocking body when flat on a table (and I’ve tried different tables/surfaces), the tinny sound, and the track pad issue results in a final overall score of 7/10. I really want to give it a higher score – its weight is incredibly light for it’s size, the keyboard feels great to type on, and the screen is stunning. Still, despite the score, I will absolutely recommend buying this if you are in the market for a new laptop and want something light and portable but powerful and capable for a decent price.

As I have only gotten to use the laptop shy of a week, I plan to update as I go, as I will be using the laptop more and more.

Updates

Update 1-25-2026: As part of the testing, I opted to update the BIOS to the newest version. Now, as always, if you don’t need to update the BIOS, then you don’t NEED to update the BIOS. However, I decided to do this to be thorough.

Updating the BIOS appears to have broken Windows Hello / the finger print reader, as when used after rebooting, I get a Pin cannot be used right now and a flashing / refreshing screen, preventing me from using a password, pin, or finger print. Or anything else for that matter, as it refreshed several times a second. The only fix I have found thus far is to restart and NOT use the finger print reader, rather opting to just use my password instead. I will update once I have a fix.

Notice: This review was written on a Geekom GeekBook Pro X14 purchased through the geekompc.com website. Links to the website and laptop are strictly for ease for my readers and are not affiliate linked. I have received no compensation for this review.

Install Failure of NinjaRMM Agent (and Fix)

Out of over 800 installations of NinjaRMM, we finally hit a bug. The agent install appears to have installed successfully (with no apparent error message), but the program is missing from Programs and Features nor was our icon appearing in the Task Bar Tray. Further, the machine never materialized in the Ninja console. Upon searching the event logs, we discovered the install was failing with Event ID 1603.

Further investigation appears that Windows Defender may be blocking the installation. Regardless, the fix is to simply install the program via the command line.

It is very easy to install the NinjaRMM agent via the Command Line. First, move the .MSI installer to the root of C:\ (or wherever you wish to browse to). Then, open the command prompt as Administrator. Type in msiexec /i “C:\nameofinstaller.msi” (be sure to replace the name of the installer with the name of the NinjaRMM agent MSI, and be sure to browse to the file’s location if you moved it outside of the root of C:\).

Simple as that; it worked, and the machine appeared in our console and the agent icon appeared in our Task Bar Tray.

Minecraft Launcher App Not Working in Windows 10/11

I recently built a new computer and wanted to install the Minecraft launcher. I went directly to the downloads section of Minecraft.net and grabbed the installer for Windows 10/11. Easy peasy, I thought to myself. At first the installer ran, but soon it became apparent that process froze.

The progress bar never moved from this spot

I closed the installer since it had not moved for over 15 minutes and decided to try again, only this time I got an error message.

Sighing, I decided to try getting the app directly from the Microsoft App store. This time it installed but clicking on the launcher did absolutely nothing. The game never launched, and no tasks created inside Task Manager. So back into the app store I went, finding the launcher and clicking play. Then a new error message popped up.

At this point I wanted to smash my head into the desk

Clearly, I was not meant to use this version of the Minecraft launcher. I was also not alone, with hundreds of reviewers having the same exact problems and rating the app with one star. Even the few 5 stars I found still noted the same issues, and in some cases, just left a bad review while giving it a 5-star rating.

Overall, the score at the time of this writing remains at 2.2 stars.

So, what is the solution? Well, first I uninstalled the app from Settings -> Apps. Next, I went to the Minecraft download page and downloaded the Windows 7/8 package. Then I installed it and was brought to the all too familiar launch page, where I was able to finally sign in and play the game. Though, humorously, it prompted me to try the new and improved launcher… from the App store. No thank you, Microsoft.

KB5009624 Causing Some Domain Controllers to Reboot

Update: This issue has been resolved with new updates released by Microsoft.

Today, I had the pleasure of troubleshooting why a domain controller was continually, and randomly, rebooting itself. Though, rebooting is a light term, when the reality was the server was entering a fault state (aka, crashing) and rebooting to recover. Inspection of the event logs revealed Event ID 1074, which stated:

The process wininit.exe has initiated the restart of computer on behalf of user32 for the following reason: No title for this reason could be found
Reason Code: 0x50006
Shutdown Type: restart
Comment: The system process ‘C:\Windows\system32\lsass.exe’ terminated unexpectedly with status code [blank]. The system will now shut down and restart.

One or two Google searches later, refined to display only from the past week, I found a post where someone figured out that Microsoft Window’s Server 2012 R2 Security Update KB5009624 was the cause of the reboots, further detailed here.

Microsoft did release an emergency out of band update (KB5010794) though it is listed as an Optional update. So if you are not in the habit of installing those optional updates, now is a good time to start.

However, if you don’t want to install that optional update (for whatever reason), this fix is simple enough: either go to Windows Update -> Installed Updates -> and select it and click Uninstall; or, go to Control Panel -> Programs and Features -> View Installed Updates -> and select it and click Uninstall. (Note: a reboot will be required).

Using an Intel NUC as a Server

Some organizations have servers that are old or perhaps they just have a single server. This can pose a problem if they utilize an Active Directory environment. I have seen an organization have only one Domain Controller, which doubled as a file server, which was infected by Ransomware. Luckily, we were able to restore the server from a recent backup. However, not all organizations are lucky. Had there been a catastrophic hardware failure or no good backup, they would have had to rebuild their environment. Another alternative issue is organizations that have several branch offices and thus need a Domain Controller at every location.

Unfortunately, not all organizations can afford another physical server. One solution is to remove them entirely from Active Directory and place them into a workgroup. However, not all organizations want that. As such, another cost-effective solution needed to be found.

Enter the Intel NUC. They are fast, cheap, customizable, but really, they are cheap. Also, depending on the one you buy, they are compatible with Windows Server 2019. They are not ideal as a standalone domain controller, let me be clear on that (unless you operate a home lab). However, they are suitable for branch offices that are interconnected via VPN tunnels, and organizations that have a physical server in place but need redundancy.

Not all Intel NUCs are compatible with Windows Server and those that are pose their own challenges. Through testing, the best and most compatible NUC we have found is the NUC7i5DNHE (we prefer utilizing the Tall version). The NUC7i5DNHE can be customized with NVMe SSD or a traditional 2.5” SSD or HDD, with up to 32GB DDR4 Memory. Our usual build-out for clients is a 250 to a 1 TB 2.5” SSD and between 8 GB and 16 GB of memory. Regardless of the two options for SSD and memory, these things are fast. With Windows Server 2019 standard installed, we see full patch times, including boot times, to be within 5 minutes. Straight boot times usually fall inside 45 seconds.

Sounds good, right? So what issues have we found? Mainly driver support issues. With the NUC7i5DNHE, two drivers will not work out of the box (nor have we been successful in getting them to work, not that we put much effort into it anyway). The built in WiFi and Bluetooth drivers will not work. However, everything else installs perfectly with Windows Server 2019. We did have Ethernet issues working right with Windows Server 2012 R2, but there are drivers out there if you can find them to manually install via a USB drive. Windows Server 2016 on the other hand was a bit more complicated, so I would avoid that OS entirely if possible. Another note: BIOS updates through windows will not work, so it is best done to update the BIOS through the BIOS itself (which is fairly easy).

Keep in mind, we are using these only as a redundancy domain controller for smaller organizations or organizations with several branches. If one of these units die, it’s trivial and cost effective to order a replacement and have the redundancy restored in a day. Want an extra step of redundancy? Utilize an external HDD to do bare metal backups via Windows Server Backup (or another backup solution of your choice).

We have deployed nearly a dozen of these over the last year in different organizations and each seem to meet the needs of the clients nicely.

Dislike this idea or have questions? Let me know in the comments!

Polycom VVX 411 and Skype for Business

We recently purchased several Polycom VVX 411 phones to use with Skype for Business Online. However, we discovered it didn’t work right out of the box. Turns out, it requires a firmware update (which tipped me off since Skype for Business was still referred to as Lync on the phone). Fair enough, however, even after updating to the latest version (5.9) it STILL didn’t work. We would get stuck at “Unable to fetch user certificate” (or some variation thereof). What could be going on? Well, it turns out 5.9 isn’t yet supported by Microsoft (as of Jan 30th, 2019), so Skype for Business Online won’t work. The second latest version, 5.8.2, does work. So, if you are having trouble with the phone and signing into Skype for Business Online, try updating the firmware (or downgrading) and try again.

Azure AD Connect Not Synchronizing to Office 365 – No Errors

Recently we had a very frustrating, yet somewhat easy to fix issue involving Office 365 and Azure Active Directory Connect. Essentially, the synchronization was happening but none of the Active Directory objects were syncing. As a matter of fact, all previous synced users stopped syncing and ended up existing in the cloud only.

When looking at the Office 365 admin portal, there were no synchronization errors shown. Rather, it was showing the synchronization as happening every 30 minutes as usual. When looking at the synchronization service itself, there were no errors shown there either.

Yet distribution groups no longer contained users. New users existed only in Active Directory and not in Office 365.

Many hours were spent talking to Microsoft support over this issue. Installing Azure AD Connect on different servers and different domain controllers gave the same behavior. PowerShell commands did nothing. It was only when I was looking at our other clients AD Connect settings that I discovered that the Source Anchor was wrong.

See, we had been installing Azure AD Connect with express settings. Yet rather than defaulting to ms-ds-consistencyguid for the Source Anchor, express settings set the Source Anchor as domain.onmicrosoft.com – aad. Anyone who knows Azure AD Connect should immediately recognize that this will not work. Even Microsoft says that if the Source Anchor is wrong, there will be no synchronization errors while nothing synchronizes.

So why did the Source Anchor default to something so wrong? Why did it default wrong on different servers? This part remains a mystery.

The fix used to be simple. Even Microsoft’s current documentation explains to use the Azure AD Connect Wizard to change the Source Anchor. However, that is no longer an option with the newer versions of Azure AD Connect.

Microsoft says Configure Source Anchor should be here, but it is not.

In the end, we had to uninstall Azure AD Connect and reinstall it manually (versus the express settings). Once there, we were able to select the correct Source Anchor (ms-ds-consistencyguid) and proceed with the install. Within minutes, all items synchronized properly and as expected.

This did not randomly break. Sync had broken two months prior and Microsoft instructed us to reinstall Azure AD Connect using express settings. They had even looked at the installed settings and said it was correct. It was then that we figure the Source Anchor changed its default from the default to domain.onmicrosoft.com -aad instead. After that, it took weeks for anyone to realize anything was wrong (again, as the sync service showed as operating normally and Active Directory changes are few and far between). When we did finally discover this, Microsoft spent many hours troubleshooting on the phone with us and within remote sessions and still didn’t catch that the Source Anchor was wrong.

Proper Source Anchor settings. This was changed to *domain.onmicrosoft.com -aad* for some reason, causing synchronization to break.

So, there you have it, if your synchronization is ‘working’ but nothing is synching, make sure your Source Anchor did not default to something else other than ms-ds-consistencyguid.

iPhone Contact Details Not Saving

My wife recently came to me with a simple problem – when she tried to update certain contact details on her iPhone, they would disappear and not save. I verified this issue by adding a birthday to someone’s name. As soon as the contacts window was closed and reopened, the birthday was gone. Even a simple change such as changing the number type from ‘mobile’ to ‘iPhone’ wouldn’t stick, reverting back to ‘mobile’.

iPhone as the phone number type, vs mobile. This would not save after the contacts window was closed.

A quick look at her settings revealed her contacts was synced to Gmail, which I assumed was the culprit. However, a cursory search didn’t come up with much as most others had synchronization issues. I had to dig pretty deep, but I did discover someone having a similar issue – Birthdays wouldn’t save unless the year was included. Sure enough, my wife wasn’t putting the year in for birthdays. I tested this by adding a birthday year in with a contact of hers. It saved. Ah ha. It turns out, Gmail can only save certain details in certain formats. This differs from iCloud, which allows phone number types such as ‘iPhone’ to be saved, along side year less birthdays.

The fix was easy enough – we moved her from using Gmail as her contacts sync to iCloud. Now she can change the little details and add birthdays to contacts whom she knows the days, but not the years they were born.

Misc. details about this specific post:
iPhone 8
iOS 12.0
Issue date: Oct. 6th, 2018

Critical Error when entering Office 365 Exchange

UPDATE: This issue has since been resolved.

We got a ticket today about a user getting a critical error when trying to enter Office 365 Exchange. I recall a similar issue happening to me a week prior, so I took a look. Sure enough, when entering exchange, I get this error:

Here is the full report:

Client Information
——————

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36

CPU Class: undefined
Platform: Win32
System Language: undefined
User Language: en-US
CookieEnabled: true

—————–
Exception Details
—————–

Date: Thu Feb 08 2018 09:31:21 GMT-0700 (Mountain Standard Time)
Message: Script error.
Url:
Line: 0

Call Stack
———-

Error

at Function.ErrorHandling.$Ee (https://r1.res.office365.com/ecp/15.20.464.16/scripts/common.js:1:189941)

at ErrorHandling.showUnhandledException (https://r1.res.office365.com/ecp/15.20.464.16/scripts/common.js:1:189026)

Dump Event
———-

                isTrusted = true
                message = Script error.
                filename =
                lineno = 0
                colno = 0
                error = null
                NONE = 0
                CAPTURING_PHASE = 1
                AT_TARGET = 2
                BUBBLING_PHASE = 3
                type = error
                target = [object Window]
                currentTarget = [object Window]
                eventPhase = 2
                bubbles = false
                cancelable = true
                defaultPrevented = false
                composed = false
                timeStamp = 7115.5000000144355
                srcElement = [object Window]
                returnValue = true
                cancelBubble = false
                path = [object Window]
                composedPath = function composedPath() { [native code] }
                stopPropagation = function stopPropagation() { [native code] }
                stopImmediatePropagation = function stopImmediatePropagation() { [native code] }
                preventDefault = function preventDefault() { [native code] }
                initEvent = function initEvent() { [native code] }

Detailed Call Stack
———–

This error message occurs across two of three admin accounts on three computers. Oddly, the third account does not suffer this error. It also occurs across at least three browsers – Edge, Internet Explorer 11, and Chrome (Ver 64, both normal and incognito).

As of now, I know of no fix, and several cursory google searches where fruitless. This only started to occur within the past month (as I go into exchange on a monthly basis) and sadly there are no recent posts anywhere about this. If anyone has a clue on how to fix this, or if we simply have to wait until Microsoft does something on their end, let me know. Otherwise we just have to deal with this very minor nuisance.

SMTP Stopped Sending Mail to Office 365

Had a client whose SMTP server suddenly stopped sending scan to e-mails to their domain cloud Office 365 e-mail from their on-premise SMTP server. The queue folder quickly filled up with over a hundred e-mails, so what could have caused this problem?

After three days of troubleshooting, I finally figured it out. In the event log, I was seeing the following issue:

A total of three IP addresses were rejecting the mail, which never even left the queue folder to generate a log in the badmail folder. The three IP addresses were ‘207.46.163.42’, ‘207.46.163.74’, and ‘216.32.180.10’. A cursory search on Google revealed these to be Microsoft servers.

Now this worked perfectly just a few days ago, with no error message like it in the event logs prior to the 23^rd of January, 2018. Could it really be this simple of a fix? I tried resetting IIS 6.0, started and stopped the SMTP service many time. I added smtp.office365.com as a smart host, I added a relay as detailed in several websites (including Microsoft’s), and I event played with different settings. Nothing worked… but I did notice occasionally a few e-mails would kick off at a time before failing again as I made changes. Now, I can’t say I know a lot about TLS, but it is my understanding that TLS required authentication and had to go across port 587.

Apparently not. I went back into IIS 6.0 Manager and right clicking on SMTP Virtual server and went to properties. Under the delivery tab, I clicked Outbound Security… at the bottom. There I clicked TLS encryption. I made zero other changes.

I clicked OK and then clicked apply. I didn’t even have to restart the SMTP service – all the e-mail in the queue folder cleared out within moments. Finally, a victory. As a final test, I sent test scans to our domain e-mail account from the Xerox SMTP configuration as well as sending another IT technician to send scans at the printers to themselves. It all worked like it should.

I’m not entirely sure why this works, but I would love if someone could fill me in. Remember, it worked days ago, then suddenly it stopped working until I enabled TLS encryption. I did not configure any ports other than 25.