caption: Allow devices to run virtual machines on ChromeOS
default: false
default_for_managed_devices_doc_only: false
desc: |-
  Setting the policy to Enabled lets the device run virtual machines on <ph name="PRODUCT_OS_NAME">$2<ex>ChromeOS</ex></ph>. <ph name="VIRTUAL_MACHINES_ALLOWED_POLICY_NAME">VirtualMachinesAllowed</ph> and <ph name="CROSTINI_ALLOWED_POLICY_NAME">CrostiniAllowed</ph> must be Enabled to use <ph name="PRODUCT_CROSTINI_NAME">Crostini</ph>. Setting the policy to Disabled means the device can't run virtual machines. Changing it to Disabled starts applying the policy to starting new virtual machines, not those already running.

  When this policy is not set on a managed device, the device can't run virtual machines. Unmanaged devices can run virtual machines.
device_only: true
example_value: true
features:
  dynamic_refresh: true
items:
- caption: Allow the device to run virtual machines
  value: true
- caption: Do not allow the device to run virtual machines
  value: false
owners:
- timzheng@chromium.org
- aoldemeier@chromium.org
schema:
  type: boolean
supported_on:
- chrome_os:66-
tags:
- system-security
type: main
