Document the idiosyncrasies of policy provisioning on Windows.

components/policy/resources/policy_templates.json

 {
 # policy_templates.json - Metafile for policy templates
 #
 # The content of this file is evaluated as a Python expression.
 #
 # This file is used as input to generate the following policy templates:
 # ADM, ADMX+ADML, MCX/plist and html documentation.
 #
 # Policy templates are user interface definitions or documents about the
 # policies that can be used to configure Chrome. Each policy is a name-value
@@ skipping 154 matching lines @@
           'id': 1,
           'caption': '''Configure the home page URL''',
           'desc': '''Configures the default home page URL in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> and prevents users from changing it.
 
           The home page is the page opened by the Home button. The pages that open on startup are controlled by the RestoreOnStartup policies.
 
           The home page type can either be set to a URL you specify here or set to the New Tab Page. If you select the New Tab Page, then this policy does not take effect.
 
           If you enable this setting, users cannot change their home page URL in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>, but they can still can choose the New Tab Page as their home page.
 
-          Leaving this policy not set will allow the user to choose his home page on his own if HomepageIsNewTabPage is not set too.''',
+          Leaving this policy not set will allow the user to choose his home page on his own if HomepageIsNewTabPage is not set too.
+
+          This policy is not available on Windows instances that are not joined
+          to an Active Directory domain.''',
           'label': '''Home page URL''',
         },
         {
           'name': 'HomepageIsNewTabPage',
           'type': 'main',
           'schema': { 'type': 'boolean' },
           'supported_on': ['chrome.*:8-', 'chrome_os:11-'],
           'features': {
             'can_be_recommended': True,
             'dynamic_refresh': True,
             'per_profile': True,
           },
           'example_value': True,
           'id': 2,
           'caption': '''Use New Tab Page as homepage''',
           'desc': '''Configures the type of the default home page in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> and prevents users from changing home page preferences. The home page can either be set to a URL you specify or set to the New Tab Page.
 
           If you enable this setting, the New Tab Page is always used for the home page, and the home page URL location is ignored.
 
           If you disable this setting, the user's homepage will never be the New Tab Page, unless its URL is set to 'chrome://newtab'.
 
           If you enable or disable this setting, users cannot change their homepage type in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
 
-          Leaving this policy not set will allow the user to choose whether the new tab page is his home page on his own.''',
+          Leaving this policy not set will allow the user to choose whether the new tab page is his home page on his own.
+
+          This policy is not available on Windows instances that are not joined
+          to an Active Directory domain.''',
         },
       ],
     },
     {
       'name': 'DefaultBrowserSettingEnabled',
       'type': 'main',
       'schema': { 'type': 'boolean' },
       'supported_on': ['chrome.*:11-'],
       'features': {
         'dynamic_refresh': True,
@@ skipping 760 matching lines @@
       'id': 15,
       'caption': '''Enable reporting of RAPPOR, usage, and crash-related data''',
       'desc': '''Enables anonymous reporting of RAPPOR, usage, and crash-related data about <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> to Google and prevents users from changing this setting.
 
       If you enable this setting, anonymous reporting of RAPPOR, usage, and crash-related data is sent to Google.
 
       If you disable this setting, anonymous reporting of RAPPOR, usage, and crash-related data is never sent to Google.
 
       If you enable or disable this setting, users cannot change or override this setting in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
 
-      If this policy is left not set, RAPPOR will be enabled unless disabled by the user, and the usage and crash reporting setting will be what the user chose upon installation / first run.''',
+      If this policy is left not set, RAPPOR will be enabled unless disabled by the user, and the usage and crash reporting setting will be what the user chose upon installation / first run.
+
+      This policy is not available on Windows instances that are not joined to
+      an Active Directory domain.''',
     },
     {
       'name': 'PasswordManager',
       'type': 'group',
       'caption': '''Password manager''',
       'desc': '''Configures the password manager. If the password manager is enabled, then you can choose to enable or disable whether the user may show stored passwords in clear text.''',
       'policies': [
         {
           'name': 'PasswordManagerEnabled',
           'type': 'main',
@@ skipping 799 matching lines @@
           'supported_on': ['chrome.*:9-', 'chrome_os:11-'],
           'features': {
             'dynamic_refresh': True,
             'per_profile': True,
           },
           'example_value': ['lcncmkcnkcdbbanbjakcencbaoegdjlp;https://clients2.google.com/service/update2/crx'],
           'id': 34,
           'caption': '''Configure the list of force-installed extensions''',
           'desc': '''Allows you to specify a list of extensions that will be installed silently, without user interaction.
 
+          For Windows instances that are not joined to an Active Directory
+          domain, forced installation is limited to extensions listed in the
+          Chrome Web Store.
+
           Each item of the list is a string that contains an extension ID and an update URL delimited by a semicolon (<ph name="SEMICOLON">;</ph>). The extension ID is the 32-letter string found e.g. on <ph name="CHROME_EXTENSIONS_LINK">chrome://extensions</ph> when in developer mode. The update URL should point to an Update Manifest XML document as described at <ph name="LINK_TO_EXTENSION_DOC1">https://developer.chrome.com/extensions/autoupdate</ph>. Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension will use the update URL indicated in the extension's manifest.
 
           For each item, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will retrieve the extension specified by the extension ID from the update service at the specified update URL and silently install it.
 
           For example, <ph name="EXTENSION_POLICY_EXAMPLE">lcncmkcnkcdbbanbjakcencbaoegdjlp;https://clients2.google.com/service/update2/crx</ph> installs the <ph name="EXTENSION_POLICY_EXAMPLE_EXTENSION_NAME">Google SSL Web Search</ph> extension from the standard Chrome Web Store update URL. For more information about hosting extensions, see: <ph name="LINK_TO_EXTENSION_DOC2">https://developer.chrome.com/extensions/hosting</ph>.
 
           Users will be unable to uninstall extensions that are specified by this policy. If you remove an extension from this list, then it will be automatically uninstalled by <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>. Extensions specified in this list are also automatically whitelisted for installation; the ExtensionsInstallBlacklist does not affect them.
 
           If this policy is left not set the user can uninstall any extension  in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.''',
           'label': '''Extension IDs and update URLs to be silently installed''',
@@ skipping 278 matching lines @@
 
           If you choose 'Open New Tab Page' the New Tab Page will always be opened when you start <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
 
           If you choose 'Restore the last session', the URLs that were open last time <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> was closed will be reopened and the browsing session will be restored as it was left.
           Choosing this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).
 
           If you choose 'Open a list of URLs', the list of 'URLs to open on startup' will be opened when a user starts <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
 
           If you enable this setting, users cannot change or override it in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
 
-          Disabling this setting is equivalent to leaving it not configured. The user will still be able to change it in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.''',
+          Disabling this setting is equivalent to leaving it not configured. The user will still be able to change it in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
+
+          This policy is not available on Windows instances that are not joined
+          to an Active Directory domain.''',
         },
         {
           'name': 'RestoreOnStartupURLs',
           'type': 'list',
           'schema': {
             'type': 'array',
             'items': { 'type': 'string' },
           },
           'supported_on': ['chrome.*:8-', 'chrome_os:11-'],
           'features': {
             'can_be_recommended': True,
             'dynamic_refresh': True,
             'per_profile': True,
           },
           'example_value': ['http://example.com', 'http://chromium.org'],
           'id': 38,
           'caption': '''URLs to open on startup''',
           'desc': '''If 'Open a list of URLs' is selected as the startup action, this allows you to specify the list of URLs that are opened. If left not set no URL will be opened on start up.
 
-          This policy only works if the 'RestoreOnStartup' policy is set to 'RestoreOnStartupIsURLs'.''',
+          This policy only works if the 'RestoreOnStartup' policy is set to 'RestoreOnStartupIsURLs'.
+
+          This policy is not available on Windows instances that are not joined
+          to an Active Directory domain.''',
         },
       ],
     },
     {
       'name': 'BlockThirdPartyCookies',
       'type': 'main',
       'schema': { 'type': 'boolean' },
       'supported_on': ['chrome.*:10-', 'chrome_os:11-'],
       'features': {
         'can_be_recommended': True,
@@ skipping 39 matching lines @@
           'desc': '''Enables the use of a default search provider.
 
           If you enable this setting, a default search is performed when the user types text in the omnibox that is not a URL.
 
           You can specify the default search provider to be used by setting the rest of the default search policies. If these are left empty, the user can choose the default provider.
 
           If you disable this setting, no search is performed when the user enters non-URL text in the omnibox.
 
           If you enable or disable this setting, users cannot change or override this setting in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.
 
-          If this policy is left not set, the default search provider is enabled, and the user will be able to set the search provider list.''',
+          If this policy is left not set, the default search provider is enabled, and the user will be able to set the search provider list.
+
+          This policy is not available on Windows instances that are not joined
+          to an Active Directory domain.''',
         },
         {
           'name': 'DefaultSearchProviderName',
           'type': 'string',
           'schema': { 'type': 'string' },
           'supported_on': [
             'chrome.*:8-',
             'chrome_os:11-',
             'android:30-',
             'ios:34-',
@@ skipping 5060 matching lines @@
       <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> internal to your
       organization. Use of these policies outside of your organization (for
       example, in a publicly distributed program) is considered malware and will
       likely be labeled as malware by Google and anti-virus vendors.
 
       These settings don't need to be configured manually!  Easy-to-use
       templates for Windows, Mac and Linux are available for download from <ph
       name="POLICY_TEMPLATE_DOWNLOAD_URL">http://www.chromium.org/administrators/policy-templates<ex>
       http://www.chromium.org/administrators/policy-templates</ex></ph>.
 
-      Note: Starting with <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>
-      28, policies are loaded directly from the Group Policy API on
-      Windows. Policies manually written to the registry will be ignored. See
-      http://crbug.com/259236 for details.
-
-      Starting with <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> 35, policies are read directly from the registry if the workstation is joined to an Active Directory domain; otherwise the policies are read from GPO.'''
+      The recommended way to configure policy on Windows is via GPO, although
+      provisioning policy via registry is still supported for Windows instances
+      that are joined to an Active Directory domain.'''
     },
     'doc_back_to_top': {
       'desc': '''Text of a link in the generated policy documentation, that takes the user to the top of the page''',
       'text': '''Back to top'''
     },
     'doc_supported': {
       'desc': '''Appears next to the name of each supported feature in the 'list of supported policy features' in the generated policy documentation''',
       'text': '''Yes'''
     },
     'doc_not_supported': {
@@ skipping 32 matching lines @@
       'desc': '''Text appended in parentheses next to the policies top-level container to indicate that those policies are of the Recommended level''',
       'text': 'Default Settings (users can override)',
     },
     'doc_complex_policies_on_windows': {
       'desc': '''Text pointing the user to a help article for complex policies on Windows''',
       'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POLICIES_URL">http://www.chromium.org/administrators/complex-policies-on-windows<ex>http://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>''',
     },
   },
   'placeholders': [],
 }