{
  "comment": "1Start remote policy. Put this file at the PolicyUrl (https or \\\\server\\share\\policy.json) or as policy.json in the content source folder. Top-level keys apply to everyone; rules apply on top, in order, to matching users. Registry policy (Group Policy / Intune) always wins over this file.",

  "OrganizationName": "Lincoln Elementary",
  "OrganizationLogo": "logo.png",
  "AccentColor": "#2E7D32",
  "SectionsLabel": "Groups",
  "SupportContact": "Ask the front office or email helpdesk@example.edu.",

  "AllowWindowsStart": false,
  "AllowPowerActions": false,
  "AllowOpenContentFolder": false,
  "AllowLayoutSwitch": false,
  "Layout": "Sidebar",

  "comment-power": "Students keep Sign out and Lock in the menu; Windows' own power options and Win+L are handled by the taskbar policies below.",
  "AllowSignOut": true,
  "AllowLock": true,
  "HideWindowsPowerOptions": true,

  "comment-taskbar": "Live per-user taskbar settings (restored when 1Start exits) plus Windows policy values the 1Start Agent applies.",
  "TaskbarSearch": "Hidden",
  "TaskbarTaskView": false,
  "TaskbarWidgets": false,
  "TaskbarCopilot": false,
  "TaskbarAlignment": "Center",
  "TaskbarLocked": true,
  "BlockedWinShortcuts": "R, E, X, I, S, Tab, A, N, D, V",
  "HideClock": false,
  "DisableTaskbarContextMenu": true,
  "DisableTaskbarSettings": true,
  "DisableRunDialog": true,
  "TaskbarPins": "%ProgramFiles%\\Google\\Chrome\\Application\\chrome.exe; https://classroom.google.com; Microsoft.WindowsCalculator_8wekyb3d8bbwe!App",

  "rules": [
    {
      "comment": "Teachers and IT get the full power menu and the folder link back.",
      "when": { "groups": ["SCHOOL\\Staff", "SCHOOL\\IT Support"] },
      "set": { "AllowPowerActions": true, "AllowOpenContentFolder": true, "AllowLayoutSwitch": true }
    },
    {
      "comment": "Library kiosks: Modern tiles, hidden tray, and Windows Start always replaced.",
      "when": { "computers": ["LIB-KIOSK-*"] },
      "set": { "Layout": "Modern", "ShowTrayIcon": false }
    },
    {
      "comment": "Conditions inside one rule are ANDed: lab machines AND a student account.",
      "when": { "computers": ["LAB-*"], "users": ["s-*"] },
      "set": { "SectionsLabel": "Classes" }
    }
  ]
}