Use the Windows MDM API to check if the machine is being managed.

base/win/win_util.h

Index: base/win/win_util.h
diff --git a/base/win/win_util.h b/base/win/win_util.h
index e2dcf700540e80393c77afc97be6439090f6d4da..d3865abbff61e1edefe587962a15c0af975000ee 100644
--- a/base/win/win_util.h
+++ b/base/win/win_util.h
@@ -157,6 +157,14 @@ BASE_EXPORT bool IsKeyboardPresentOnSlate(std::string* reason);
 // Returns true if the machine is enrolled to a domain.
 BASE_EXPORT bool IsEnrolledToDomain();
 
+// Returns true if the machine is being managed by an MDM system.
+BASE_EXPORT bool IsDeviceRegisteredWithMdm();
+
+// Returns true if the current machine is considered enterprise managed in some
+// fashion.  A machine is considered managed if it is either domain enrolled
+// or registered with an MDM.
+BASE_EXPORT bool IsEnterpriseManaged();
+
 // Used by tests to mock any wanted state. Call with |state| set to true to
 // simulate being in a domain and false otherwise.
 BASE_EXPORT void SetDomainStateForTesting(bool state);