Make Easy unlock disabled by default for enterprise user.

chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc

Index: chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc
diff --git a/chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc b/chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc
index 1dc5111a831da02dbb6aa0803d86b10b3bb914a5..4e9f77144cf49ff21fe99a1955cafa985bd40e27 100644
--- a/chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc
+++ b/chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc
@@ -289,6 +289,16 @@ void UserCloudPolicyManagerChromeOS::GetChromePolicy(PolicyMap* policy_map) {
                     new base::StringValue("primary-only"),
                     NULL);
   }
+
+  // Default EasyUnlockAllowed is false for managed accounts.

[Andrew T Wilson (Slow), 2014/08/18 13:37:33]

nit: Change comment to 'Set EasyUnlockAllowed policy to false by default for
managed accounts.'

[xiyuan, 2014/08/18 16:38:28]

Done.

+  if (store()->has_policy() &&
+      !policy_map->Get(key::kEasyUnlockAllowed)) {
+    policy_map->Set(key::kEasyUnlockAllowed,
+                    POLICY_LEVEL_MANDATORY,
+                    POLICY_SCOPE_USER,
+                    new base::FundamentalValue(false),
+                    NULL);
+  }
 }
 
 void UserCloudPolicyManagerChromeOS::FetchPolicyOAuthTokenUsingSigninProfile() {