Refresh policy definition files (#1052)

[Auto-generated pull request](https://github.com/ubuntu/adsys/actions/workflows/policy-builds.yaml) by GitHub Action
ubuntu · Jul 19, 2024 · 57eb1d4 · 57eb1d4
2 parents 174ba1c + c746bdd
commit 57eb1d4
Show file tree

Hide file tree

Showing 67 changed files with 284 additions and 233 deletions.
diff --git a/...olicies/Computer Policies/Ubuntu/Client management/Computer Scripts/shutdown.md b/...olicies/Computer Policies/Ubuntu/Client management/Computer Scripts/shutdown.md
@@ -1,12 +1,12 @@
 # Shutdown scripts
 
 Define scripts that are executed on machine power off.
-Those scripts are ordered, one by line, and relative to `SYSVOL/ubuntu/scripts/` directory.
+Those scripts are ordered, one by line, and relative to SYSVOL/ubuntu/scripts/ directory.
 Scripts from this GPO will be appended to the list of scripts referenced higher in the GPO hierarchy.
 
 
 - Type: scripts
-- Key: `/shutdown`
+- Key: /shutdown
 
 Note: -
  * Enabled: The scripts in the text entry are executed at shutdown time.
@@ -24,7 +24,7 @@ An Ubuntu Pro subscription on the client is required to apply this policy.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Computer Scripts -> Shutdown scripts`    |
-| Registry Key | `Software\Policies\Ubuntu\scripts\shutdown`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Computer Scripts -> Shutdown scripts    |
+| Registry Key | Software\Policies\Ubuntu\scripts\shutdown         |
 | Element type | multiText |
 | Class:       | Machine       |
diff --git a/.../Computer Policies/Ubuntu/Client management/Power Management/ambient-enabled.md b/.../Computer Policies/Ubuntu/Client management/Power Management/ambient-enabled.md
@@ -3,10 +3,10 @@
 If the ambient light sensor functionality is enabled.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/ambient-enabled`
+- Key: /org/gnome/settings-daemon/plugins/power/ambient-enabled
 - Default: true
 
-Note: default system value is used for `Not Configured`  and enforced if `Disabled`.
+Note: default system value is used for "Not Configured" and enforced if "Disabled".
 
 Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
@@ -16,7 +16,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Enable the ALS sensor`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\ambient-enabled`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Enable the ALS sensor    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\ambient-enabled         |
 | Element type | boolean |
 | Class:       | Machine       |
diff --git a/.../Computer Policies/Ubuntu/Client management/Power Management/idle-brightness.md b/.../Computer Policies/Ubuntu/Client management/Power Management/idle-brightness.md
@@ -3,10 +3,10 @@
 This is the laptop panel screen brightness used when the session is idle.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/idle-brightness`
+- Key: /org/gnome/settings-daemon/plugins/power/idle-brightness
 - Default: 30
 
-Note: default system value is used for `Not Configured` and enforced if `Disabled`.
+Note: default system value is used for "Not Configured" and enforced if "Disabled".
 
 Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
@@ -16,7 +16,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> The brightness of the screen when idle`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\idle-brightness`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> The brightness of the screen when idle    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\idle-brightness         |
 | Element type | decimal |
 | Class:       | Machine       |
diff --git a/...olicies/Computer Policies/Ubuntu/Client management/Power Management/idle-dim.md b/...olicies/Computer Policies/Ubuntu/Client management/Power Management/idle-dim.md
@@ -3,10 +3,10 @@
 If the screen should be dimmed to save power when the computer is idle.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/idle-dim`
+- Key: /org/gnome/settings-daemon/plugins/power/idle-dim
 - Default: true
 
-Note: default system value is used for `Not Configured` and enforced if `Disabled`.
+Note: default system value is used for "Not Configured" and enforced if "Disabled".
 
 Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
@@ -16,7 +16,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Dim the screen after a period of inactivity`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\idle-dim`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Dim the screen after a period of inactivity    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\idle-dim         |
 | Element type | boolean |
 | Class:       | Machine       |
diff --git a/...puter Policies/Ubuntu/Client management/Power Management/lid-close-ac-action.md b/...puter Policies/Ubuntu/Client management/Power Management/lid-close-ac-action.md
@@ -3,7 +3,7 @@
 The action to take when the laptop lid is closed and the laptop is on AC power.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/lid-close-ac-action`
+- Key: /org/gnome/settings-daemon/plugins/power/lid-close-ac-action
 - Default: 'suspend'
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -25,7 +25,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Laptop lid close action when on AC`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\lid-close-ac-action`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Laptop lid close action when on AC    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\lid-close-ac-action         |
 | Element type | dropdownList |
 | Class:       | Machine       |
diff --git a/... Policies/Ubuntu/Client management/Power Management/lid-close-battery-action.md b/... Policies/Ubuntu/Client management/Power Management/lid-close-battery-action.md
@@ -3,7 +3,7 @@
 The action to take when the laptop lid is closed and the laptop is on battery power.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/lid-close-battery-action`
+- Key: /org/gnome/settings-daemon/plugins/power/lid-close-battery-action
 - Default: 'suspend'
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -25,7 +25,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Laptop lid close action on battery`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\lid-close-battery-action`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Laptop lid close action on battery    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\lid-close-battery-action         |
 | Element type | dropdownList |
 | Class:       | Machine       |
diff --git a/...u/Client management/Power Management/lid-close-suspend-with-external-monitor.md b/...u/Client management/Power Management/lid-close-suspend-with-external-monitor.md
@@ -1,9 +1,9 @@
 # Laptop lid, when closed, will suspend even if there is an external monitor plugged in
 
-With no external monitors plugged in, closing a laptop's lid will suspend the machine (as set by the lid-close-battery-action and lid-close-ac-action keys).  By default, however, closing the lid when an external monitor is present will not suspend the machine, so that one can keep working on that monitor (e.g. for docking stations or media viewers).  Set this key to False to keep the default behaviour, or to True to suspend the laptop whenever the lid is closed and regardless of external monitors.
+With no external monitors plugged in, closing a laptop's lid will suspend the machine (as set by the lid-close-battery-action and lid-close-ac-action keys).  By default, however, closing the lid when an external monitor is present will not suspend the machine, so that one can keep working on that monitor (e.g. for docking stations or media viewers).  Set this key to False to keep the default behavior, or to True to suspend the laptop whenever the lid is closed and regardless of external monitors.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/lid-close-suspend-with-external-monitor`
+- Key: /org/gnome/settings-daemon/plugins/power/lid-close-suspend-with-external-monitor
 - Default: false
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -16,7 +16,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Laptop lid, when closed, will suspend even if there is an external monitor plugged in`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\lid-close-suspend-with-external-monitor`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Laptop lid, when closed, will suspend even if there is an external monitor plugged in    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\lid-close-suspend-with-external-monitor         |
 | Element type | boolean |
 | Class:       | Machine       |
diff --git a/...puter Policies/Ubuntu/Client management/Power Management/power-button-action.md b/...puter Policies/Ubuntu/Client management/Power Management/power-button-action.md
@@ -1,9 +1,9 @@
 # Power button action
 
-The action to take when the system power button is pressed. Virtual machines only honour the 'nothing' action, and will shutdown otherwise. Tablets always suspend, ignoring all the other action options.
+The action to take when the system power button is pressed. Virtual machines only honor the 'nothing' action, and will shutdown otherwise. Tablets always suspend, ignoring all the other action options.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/power-button-action`
+- Key: /org/gnome/settings-daemon/plugins/power/power-button-action
 - Default: 'interactive'
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -22,7 +22,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Power button action`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\power-button-action`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Power button action    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\power-button-action         |
 | Element type | dropdownList |
 | Class:       | Machine       |
diff --git a/...Ubuntu/Client management/Power Management/power-saver-profile-on-low-battery.md b/...Ubuntu/Client management/Power Management/power-saver-profile-on-low-battery.md
@@ -3,7 +3,7 @@
 Automatically enable the "power-saver" profile using power-profiles-daemon if the battery is low.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/power-saver-profile-on-low-battery`
+- Key: /org/gnome/settings-daemon/plugins/power/power-saver-profile-on-low-battery
 - Default: true
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -16,7 +16,7 @@ Supported on Ubuntu 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Enable power-saver profile when battery is low`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\power-saver-profile-on-low-battery`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Enable power-saver profile when battery is low    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\power-saver-profile-on-low-battery         |
 | Element type | boolean |
 | Class:       | Machine       |
diff --git a/...Policies/Ubuntu/Client management/Power Management/sleep-inactive-ac-timeout.md b/...Policies/Ubuntu/Client management/Power Management/sleep-inactive-ac-timeout.md
@@ -3,7 +3,7 @@
 The amount of time in seconds the computer on AC power needs to be inactive before it goes to sleep. A value of 0 means never.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/sleep-inactive-ac-timeout`
+- Key: /org/gnome/settings-daemon/plugins/power/sleep-inactive-ac-timeout
 - Default: 0
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -16,7 +16,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Sleep timeout computer when on AC`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-ac-timeout`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Sleep timeout computer when on AC    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-ac-timeout         |
 | Element type | decimal |
 | Class:       | Machine       |
diff --git a/...er Policies/Ubuntu/Client management/Power Management/sleep-inactive-ac-type.md b/...er Policies/Ubuntu/Client management/Power Management/sleep-inactive-ac-type.md
@@ -3,7 +3,7 @@
 The type of sleeping that should be performed when the computer is inactive.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/sleep-inactive-ac-type`
+- Key: /org/gnome/settings-daemon/plugins/power/sleep-inactive-ac-type
 - Default: 'suspend'
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -25,7 +25,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Whether to hibernate, suspend or do nothing when inactive`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-ac-type`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Whether to hibernate, suspend or do nothing when inactive    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-ac-type         |
 | Element type | dropdownList |
 | Class:       | Machine       |
diff --git a/...ies/Ubuntu/Client management/Power Management/sleep-inactive-battery-timeout.md b/...ies/Ubuntu/Client management/Power Management/sleep-inactive-battery-timeout.md
@@ -3,7 +3,7 @@
 The amount of time in seconds the computer on battery power needs to be inactive before it goes to sleep. A value of 0 means never.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/sleep-inactive-battery-timeout`
+- Key: /org/gnome/settings-daemon/plugins/power/sleep-inactive-battery-timeout
 - Default for 20.04: 1200
 - Default for 22.04: 1200
 - Default for 24.04: 900
@@ -19,7 +19,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Sleep timeout computer when on battery`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-battery-timeout`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Sleep timeout computer when on battery    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-battery-timeout         |
 | Element type | decimal |
 | Class:       | Machine       |
diff --git a/...licies/Ubuntu/Client management/Power Management/sleep-inactive-battery-type.md b/...licies/Ubuntu/Client management/Power Management/sleep-inactive-battery-type.md
@@ -3,7 +3,7 @@
 The type of sleeping that should be performed when the computer is inactive.
 
 - Type: dconf
-- Key: `/org/gnome/settings-daemon/plugins/power/sleep-inactive-battery-type`
+- Key: /org/gnome/settings-daemon/plugins/power/sleep-inactive-battery-type
 - Default: 'suspend'
 
 Note: default system value is used for "Not Configured" and enforced if "Disabled".
@@ -25,7 +25,7 @@ Supported on Ubuntu 20.04, 22.04, 24.04, 24.10.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> Power Management -> Whether to hibernate, suspend or do nothing when inactive`    |
-| Registry Key | `Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-battery-type`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Power Management -> Whether to hibernate, suspend or do nothing when inactive    |
+| Registry Key | Software\Policies\Ubuntu\dconf\org\gnome\settings-daemon\plugins\power\sleep-inactive-battery-type         |
 | Element type | dropdownList |
 | Class:       | Machine       |
diff --git a/...Policies/Ubuntu/Client management/Privilege Authorization/allow-local-admins.md b/...Policies/Ubuntu/Client management/Privilege Authorization/allow-local-admins.md
@@ -0,0 +1,25 @@
+# Allow local administrators
+
+This allows or prevents client machine to have local users gaining administrators privilege on the machine.
+
+
+- Type: privilege
+- Key: /allow-local-admins
+
+Note: -
+ * Enabled: This leaves the default rules for the “sudo” and “admin” rule intact.
+ * Disabled: This denies root privileges to the predefined administrator groups (sudo and admin).
+
+
+An Ubuntu Pro subscription on the client is required to apply this policy.
+
+
+
+<span style="font-size: larger;">**Metadata**</span>
+
+| Element      | Value            |
+| ---          | ---              |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Privilege Authorization -> Allow local administrators    |
+| Registry Key | Software\Policies\Ubuntu\privilege\allow-local-admins         |
+| Element type |  |
+| Class:       | Machine       |
diff --git a/...uter Policies/Ubuntu/Client management/Privilege Authorization/client-admins.md b/...uter Policies/Ubuntu/Client management/Privilege Authorization/client-admins.md
@@ -0,0 +1,26 @@
+# Client administrators
+
+Define users and groups from AD allowed to administer client machines.
+It must be of the form user@domain or %group@domain. One per line.
+
+
+- Type: privilege
+- Key: /client-admins
+
+Note: -
+ * Enabled: This allows defining Active Directory groups and users with administrative privileges in the box entry.
+ * Disabled: This disallows any Active Directory group or user to become an administrator of the client even if it is defined in a parent GPO of the hierarchy tree.
+
+
+An Ubuntu Pro subscription on the client is required to apply this policy.
+
+
+
+<span style="font-size: larger;">**Metadata**</span>
+
+| Element      | Value            |
+| ---          | ---              |
+| Location     | Computer Policies -> Ubuntu -> Client management -> Privilege Authorization -> Client administrators    |
+| Registry Key | Software\Policies\Ubuntu\privilege\client-admins         |
+| Element type | multiText |
+| Class:       | Machine       |
diff --git a/...omputer Policies/Ubuntu/Client management/System Drive Mapping/system-mounts.md b/...omputer Policies/Ubuntu/Client management/System Drive Mapping/system-mounts.md
@@ -23,7 +23,7 @@ It's up to the user to ensure that the requested protocols are valid and support
 
 
 - Type: mount
-- Key: `/system-mounts`
+- Key: /system-mounts
 
 Note: 
  * Enabled: The value(s) referenced in the entry are applied on the client machine.
@@ -40,7 +40,7 @@ An Ubuntu Pro subscription on the client is required to apply this policy.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> System Drive Mapping -> System mounts`    |
-| Registry Key | `Software\Policies\Ubuntu\mount\system-mounts`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> System Drive Mapping -> System mounts    |
+| Registry Key | Software\Policies\Ubuntu\mount\system-mounts         |
 | Element type | multiText |
 | Class:       | Machine       |
diff --git a/...s/Computer Policies/Ubuntu/Client management/System proxy configuration/auto.md b/...s/Computer Policies/Ubuntu/Client management/System proxy configuration/auto.md
@@ -2,11 +2,11 @@
 
 Declare system-wide proxy auto-configuration URL.
 
-Auto-configuration URLs are always prioritised over manual proxy settings, meaning that if all proxy options are set, the GPO client will enable automatic proxy configuration for supported backends. An empty value will remove previously set settings of the same type.
+Auto-configuration URLs are always prioritized over manual proxy settings, meaning that if all proxy options are set, the GPO client will enable automatic proxy configuration for supported backends. An empty value will remove previously set settings of the same type.
 
 
 - Type: proxy
-- Key: `/proxy/auto`
+- Key: /proxy/auto
 
 Note: -
  * Enabled: The setting in the text entry is applied on the client machine.
@@ -24,7 +24,7 @@ An Ubuntu Pro subscription on the client is required to apply this policy.
 
 | Element      | Value            |
 | ---          | ---              |
-| Location     | `Computer Policies -> Ubuntu -> Client management -> System proxy configuration -> Auto-configuration URL`    |
-| Registry Key | `Software\Policies\Ubuntu\proxy\proxy\auto`         |
+| Location     | Computer Policies -> Ubuntu -> Client management -> System proxy configuration -> Auto-configuration URL    |
+| Registry Key | Software\Policies\Ubuntu\proxy\proxy\auto         |
 | Element type | text |
 | Class:       | Machine       |