Setting the policy to Enabled or leaving it unset lets all users use Crostini as long as all 3 policies, VirtualMachinesAllowed, CrostiniAllowed, and DeviceUnaffiliatedCrostiniAllowed are set to Enabled. Setting the policy to Disabled means unaffiliated users can't use Crostini. Changing it to Disabled starts applying the policy to starting new Crostini containers, not those already running.
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | Software\Policies\Google\ChromeOS |
| Value Name | DeviceUnaffiliatedCrostiniAllowed |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |