<?xml version="1.0" encoding="utf-8"?>
<policyDefinitionResources xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
  <displayName>DirectoryOps</displayName>
  <description>Policies for DirectoryOps by TOMORIS</description>
  <resources>
    <stringTable>
      <string id="SUPPORTED_DirectoryOps_0_1">DirectoryOps 0.1 and later</string>
      <string id="Cat_TOMORIS">TOMORIS</string>
      <string id="Cat_DirectoryOps">DirectoryOps</string>
      <string id="Cat_Updates">Updates</string>
      <string id="UpdateMode">Update check</string>
      <string id="UpdateMode_Help">Defines whether and when DirectoryOps looks for updates.

Automatic: checks at start, at most once a day, and reports new versions. Installation happens only after the user clicks.
Manual only: checks only when the user clicks "Check now".
Off: no check; updates only via software deployment or offline package.

Enabled: the selected mode applies and cannot be changed on the workstation.
Disabled or not configured: the setting in DirectoryOps applies (default: Automatic).</string>
      <string id="UpdateMode_Automatisch">Automatic (default)</string>
      <string id="UpdateMode_NurManuell">Manual only</string>
      <string id="UpdateMode_Aus">Off</string>
      <string id="UpdateSource">Update source</string>
      <string id="UpdateSource_Help">Where DirectoryOps loads the version file and package from: an HTTPS address or a folder or UNC path. The channel is appended as a subfolder.

Examples:
https://directoryops.tomoris.com/updates/ (default)
\\fs01\software\directoryops (containing the folder stabil with manifest.json, manifest.json.sig and the MSI)

The signature of the version file, the SHA-256 checksum and the publisher of the package are checked regardless of the source. HTTP without TLS is refused.

Disabled or not configured: the setting in DirectoryOps applies.</string>
      <string id="UpdateChannel">Update channel</string>
      <string id="UpdateChannel_Help">stabil: released versions for everyone.
vorschau: pre-release versions for pilot groups and labs.

Disabled or not configured: the setting in DirectoryOps applies (default: stabil).</string>
      <string id="UpdateChannel_stabil">stabil (stable, default)</string>
      <string id="UpdateChannel_vorschau">vorschau (preview)</string>
      <string id="Cat_Lizenz">Licence</string>
      <string id="LicenseFile">Licence file</string>
      <string id="LicenseFile_Help">Path to the licence file (.dolizenz), e.g. on a share: \\fs01\software\directoryops\company.dolizenz

DirectoryOps verifies the file offline at every start (signature, validity, forest). Import and removal in the app are blocked while this policy applies. If the path cannot be reached, DirectoryOps runs as Community.

Disabled or not configured: the licence imported in DirectoryOps applies.</string>
    </stringTable>
    <presentationTable>
      <presentation id="UpdateMode">
        <dropdownList refId="UpdateMode" defaultItem="0" noSort="true">Mode:</dropdownList>
      </presentation>
      <presentation id="UpdateSource">
        <textBox refId="UpdateSource">
          <label>HTTPS address or UNC path:</label>
          <defaultValue>https://directoryops.tomoris.com/updates/</defaultValue>
        </textBox>
      </presentation>
      <presentation id="UpdateChannel">
        <dropdownList refId="UpdateChannel" defaultItem="0" noSort="true">Channel:</dropdownList>
      </presentation>
      <presentation id="LicenseFile">
        <textBox refId="LicenseFile"><label>Path (UNC or local):</label></textBox>
      </presentation>
    </presentationTable>
  </resources>
</policyDefinitionResources>
