Admins can attach a static defaultSettings payload used when a policy helper is missing or fails.
What's wrong with this entry?
Admin policy sources can now put a defaultSettings payload on each per-OS entry of policyHelpers (or under a top-level default key). If no helper is configured for the platform, or the helper fails at startup or on a refresh, that payload is applied with no process spawned instead of the previous retain-or-fail behaviour.
- Failures are logged as "applying the static ... settings payload" and counted in the
settings_policy_helpers_per_ostelemetry asfell_back_to_default_on_failureorrefresh_fell_back_to_default. - A payload that does not parse is reported as
default_payload_invalidand refuses startup. - If a helper later recovers on a refresh tick, its output replaces the static default.
- Putting
defaultSettingson the singularpolicyHelperkey is ignored and produces a status warning saying static fallback payloads belong on the per-OSpolicyHelpersentries.
fell_back_to_default_on_failure, policyHelper refresh: helper recovered; its output replaces the static default settings payload
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.228
Managed settings accept per-OS
policyHelpersBoth mention policy helper managed
-
v2.1.228
New
policyHelpersmanaged-settings key for per-OS policy helper executablesBoth mention policy helper managed
-
v2.1.235
Policy helpers can be delivered by remote managed settings, after explicit approval
Both mention policy helper managed