Providing more information on why certain users can't be added to multi-profile

ash/ash_strings.grd

Index: ash/ash_strings.grd
diff --git a/ash/ash_strings.grd b/ash/ash_strings.grd
index 11c36468e7cee4bfea6cd34b293132f2e48347c9..074cdb1a1611e225d50b7f7db4c893f42b9143d6 100644
--- a/ash/ash_strings.grd
+++ b/ash/ash_strings.grd
@@ -250,6 +250,9 @@ Press Ctrl+Alt+Z to disable.
       <message name="IDS_ASH_STATUS_TRAY_MESSAGE_CANNOT_ADD_USER" desc="The error message when the user has reached the limit of multi profile users.">
         You can only have up to three accounts in multiple sign-in.
       </message>
+      <message name="IDS_ASH_STATUS_TRAY_MESSAGE_NOT_ALLOWED_PRIMARY_USER" desc="The error message when the primary user forbids multiple signin because of not-allowed policy or because of usage policy-pushed certificates.">
+        The administrator for this account has disallowed multiple sign-in.
+      </message>
 
       <message name="IDS_ASH_STATUS_TRAY_BLUETOOTH" desc="The label used as the header in the bluetooth popup.">
         Bluetooth