Use the Windows MDM API to check if the machine is being managed.

base/win/win_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // =============================================================================
 // PLEASE READ
 //
 // In general, you should not be adding stuff to this file.
 //
 // - If your thing is only used in one place, just put it in a reasonable
@@ skipping 139 matching lines @@
 // Get the size of a struct up to and including the specified member.
 // This is necessary to set compatible struct sizes for different versions
 // of certain Windows APIs (e.g. SystemParametersInfo).
 #define SIZEOF_STRUCT_WITH_SPECIFIED_LAST_MEMBER(struct_name, member) \
     offsetof(struct_name, member) + \
     (sizeof static_cast<struct_name*>(NULL)->member)
 
 // Returns true if the machine is enrolled to a domain.
 BASE_EXPORT bool IsEnrolledToDomain();
 
+// Returns true if the machine is being managed by an MDM system.
+// The caller of this function must be running as an elevated process.

[Georges Khalil, 2017/02/09 14:59:57]

No need for elevated permission after all, correct?

[Roger Tawa OOO till Jul 10th, 2017/02/09 16:06:43]

Good catch! Removed sentence.

+BASE_EXPORT bool IsDeviceRegisteredWithMdm();
+
+// Returns true if the current user is considered an enterprise user.
+// An enterprise user is either domain enrolled or registered with an MDM.
+BASE_EXPORT bool IsEnterpriseUser();
+
 // Used by tests to mock any wanted state. Call with |state| set to true to
 // simulate being in a domain and false otherwise.
 BASE_EXPORT void SetDomainStateForTesting(bool state);
 
 // Returns true if the current process can make USER32 or GDI32 calls such as
 // CreateWindow and CreateDC. Windows 8 and above allow the kernel component
 // of these calls to be disabled which can cause undefined behaviour such as
 // crashes. This function can be used to guard areas of code using these calls
 // and provide a fallback path if necessary.
 BASE_EXPORT bool IsUser32AndGdi32Available();
@@ skipping 11 matching lines @@
 BASE_EXPORT void EnableFlicks(HWND hwnd);
 BASE_EXPORT void DisableFlicks(HWND hwnd);
 
 // Returns true if the process is per monitor DPI aware.
 BASE_EXPORT bool IsProcessPerMonitorDpiAware();
 
 }  // namespace win
 }  // namespace base
 
 #endif  // BASE_WIN_WIN_UTIL_H_