diff --git a/util/syspolicy/policy_keys.go b/util/syspolicy/policy_keys.go
index c591174f5..166bbe601 100644
--- a/util/syspolicy/policy_keys.go
+++ b/util/syspolicy/policy_keys.go
@@ -42,10 +42,11 @@ const (
 	// The default is "show" unless otherwise stated. Enforcement of these
 	// policies is typically performed by the UI code for the relevant operating
 	// system.
-	AdminConsoleVisibility   Key = "AdminConsole"
-	NetworkDevicesVisibility Key = "NetworkDevices"
-	TestMenuVisibility       Key = "TestMenu"
-	UpdateMenuVisibility     Key = "UpdateMenu"
+	AdminConsoleVisibility    Key = "AdminConsole"
+	NetworkDevicesVisibility  Key = "NetworkDevices"
+	TestMenuVisibility        Key = "TestMenu"
+	UpdateMenuVisibility      Key = "UpdateMenu"
+	ResetToDefaultsVisibility Key = "ResetToDefaults"
 	// RunExitNodeVisibility controls if the "run as exit node" menu item is
 	// visible, without controlling the setting itself. This is preserved for
 	// backwards compatibility but prefer EnableRunExitNode in new deployments.
@@ -80,7 +81,7 @@ const (
 	// ManagedByOrganizationName is set. It can be used to provide a pointer to support resources
 	// for Tailscale within the organization.
 	ManagedByCaption Key = "ManagedByCaption"
-	// ManagedByCaption is a valid URL pointing to a support help desk for Tailscale within the
+	// ManagedByURL is a valid URL pointing to a support help desk for Tailscale within the
 	// organization. A button in the client UI provides easy access to this URL.
 	ManagedByURL Key = "ManagedByURL"
 )
diff --git a/util/syspolicy/policy_keys_windows.go b/util/syspolicy/policy_keys_windows.go
index 2e6455952..5e9a71695 100644
--- a/util/syspolicy/policy_keys_windows.go
+++ b/util/syspolicy/policy_keys_windows.go
@@ -22,6 +22,7 @@ var stringKeys = []Key{
 	PreferencesMenuVisibility,
 	ExitNodeMenuVisibility,
 	AutoUpdateVisibility,
+	ResetToDefaultsVisibility,
 	KeyExpirationNoticeTime,
 	PostureChecking,
 	ManagedByOrganizationName,