[Advanced Paste] Online AI models GPO

[stefansjfw]

Summary of the Pull Request

PR Checklist

• Closes: [Advanced Paste] Add GPO to only disable AI feature and prevent user from entering AI API key #32947
• Communication: I've discussed this with core contributors already. If work hasn't been agreed, this work might be rejected
• Tests: Added/updated and all pass
• Localization: All end user facing strings can be localized
• Dev docs: Added/updated
• New binaries: Added on the required places
  • JSON for signing for new binaries
  • WXS for installer for new binaries and localization folder
  • YML for CI pipeline for new test projects
  • YML for signed pipeline
• Documentation updated: If checked, please file a pull request on our docs repo and link it here: #xxx

Detailed Description of the Pull Request / Additional comments

Validation Steps Performed

[jaimecbernardo]

Some initial changes looking at the code. Haven't tested yet.

[htcfreek]

@stefansjfw
I am sure this is #32947. You are faster than I 😅.

As the primary usecase is to block usage of ai features we should nane it so. This is a well known doing in Windows and other tools. So lets call it "Disable AI ...." with default to "not configured" and "GPO enabled=No AI" and "GPO disabled/not configured=User can enable".

[htcfreek]

Suggested change

	get => _onlineAIModelsIsGPOConfigured && _enabledGpoRuleConfiguration != GpoRuleConfigured.Disabled;
	get => _onlineAIModelsIsGPOConfiguredToDisableAI && _enabledGpoRuleConfiguration != GpoRuleConfigured.Disabled;

For better clarification we should make the var name more precise.

[jaimecbernardo]

Hi, thanks for the suggestion. I was already on it from figuring out another bug and renamed it IsOnlineAIModelsDisallowedByGPO

[htcfreek]

Don't forget to update the docs on https://learn.microsoft.com/en-us/windows/powertoys/grouppolicy .

• The Utility table for the main policy.
• Add a new block like we have for PT Run for the AI GPO.

[jaimecbernardo]

@stefansjfw I am sure this is #32947. You are faster than I 😅.

As the primary usecase is to block usage of ai features we should nane it so. This is a well known doing in Windows and other tools. So lets call it "Disable AI ...." with default to "not configured" and "GPO enabled=No AI" and "GPO disabled/not configured=User can enable".

@htcfreek , We're basing this off on another setting we have there, which is "Allow experimentation". And also on the OS like the one that exists to allow clipboard history:

[jaimecbernardo]

Did some fixes and updated with some images

[jaimecbernardo]

LGTM! Thank you!

[htcfreek]

@jaimecbernardo , @stefansjfw
Don't forget to update the GPO docs. Abd the utility enabled policy is also misding on the docs page.