Use the Windows MDM API to check if the machine is being managed.

chrome/browser/prefs/chrome_pref_service_factory.cc

Index: chrome/browser/prefs/chrome_pref_service_factory.cc
diff --git a/chrome/browser/prefs/chrome_pref_service_factory.cc b/chrome/browser/prefs/chrome_pref_service_factory.cc
index 0c761e6d9efbe545b39e813f7863a1adb353abfa..4fa645f02ce902ca053b4011c2757d2bb714df8f 100644
--- a/chrome/browser/prefs/chrome_pref_service_factory.cc
+++ b/chrome/browser/prefs/chrome_pref_service_factory.cc
@@ -264,13 +264,13 @@ SettingsEnforcementGroup GetSettingsEnforcementGroup() {
 # if defined(OS_WIN)
   if (!g_disable_domain_check_for_testing) {
     static bool first_call = true;
-    static const bool is_enrolled_to_domain = base::win::IsEnrolledToDomain();
+    static const bool is_enterprise_user = base::win::IsEnterpriseUser();
     if (first_call) {
       UMA_HISTOGRAM_BOOLEAN("Settings.TrackedPreferencesNoEnforcementOnDomain",
-                            is_enrolled_to_domain);
+                            is_enterprise_user);
       first_call = false;
     }
-    if (is_enrolled_to_domain)
+    if (is_enterprise_user)
       return GROUP_NO_ENFORCEMENT;
   }
 #endif