CHECK() that AD user policy is only created on AD-managed devices

chrome/browser/chromeos/policy/user_policy_manager_factory_chromeos.cc

Index: chrome/browser/chromeos/policy/user_policy_manager_factory_chromeos.cc
diff --git a/chrome/browser/chromeos/policy/user_policy_manager_factory_chromeos.cc b/chrome/browser/chromeos/policy/user_policy_manager_factory_chromeos.cc
index 171a22ae88498e593159fe8bdff49f59bdd6bc83..835f51160734be5a8533f7ff97ce02bd1ed42c63 100644
--- a/chrome/browser/chromeos/policy/user_policy_manager_factory_chromeos.cc
+++ b/chrome/browser/chromeos/policy/user_policy_manager_factory_chromeos.cc
@@ -185,11 +185,9 @@ UserPolicyManagerFactoryChromeOS::CreateManagerForProfile(
       is_active_directory = false;
       break;
     case AccountType::ACTIVE_DIRECTORY:
-      // Ensure install attributes are locked into Active Directory mode before
-      // allowing Active Directory policy which is not signed.
-      if (!connector->GetInstallAttributes()->IsActiveDirectoryManaged()) {
-        return {};
-      }
+      // Active Directory users only exist on devices whose install attributes
+      // are locked into Active Directory mode.
+      CHECK(connector->GetInstallAttributes()->IsActiveDirectoryManaged());
       is_active_directory = true;
       break;
   }