Use the Windows MDM API to check if the machine is being managed.

base/win/win_util.h

Index: base/win/win_util.h
diff --git a/base/win/win_util.h b/base/win/win_util.h
index e2dcf700540e80393c77afc97be6439090f6d4da..f1b6c546460664ad74addd664a497812fb6ac3f8 100644
--- a/base/win/win_util.h
+++ b/base/win/win_util.h
@@ -157,6 +157,14 @@ BASE_EXPORT bool IsKeyboardPresentOnSlate(std::string* reason);
 // Returns true if the machine is enrolled to a domain.
 BASE_EXPORT bool IsEnrolledToDomain();
 
+// Returns true if the machine is being managed by an MDM system.
+// The caller of this function must be running as an elevated process.

[Georges Khalil, 2017/02/09 14:59:57]

No need for elevated permission after all, correct?

[Roger Tawa OOO till Jul 10th, 2017/02/09 16:06:43]

Good catch! Removed sentence.

+BASE_EXPORT bool IsDeviceRegisteredWithMdm();
+
+// Returns true if the current user is considered an enterprise user.
+// An enterprise user is either domain enrolled or registered with an MDM.
+BASE_EXPORT bool IsEnterpriseUser();
+
 // Used by tests to mock any wanted state. Call with |state| set to true to
 // simulate being in a domain and false otherwise.
 BASE_EXPORT void SetDomainStateForTesting(bool state);