Corporate Laptop Privacy: What Microsoft Intune, Jamf & Kandji MDMs Can Monitor on Screen Shares
Understand enterprise device management (MDM). Learn what Microsoft Intune, Jamf Pro, and Kandji can see on your work laptop during screen shares and interviews.
Many engineers attempt to interview for new jobs using their current employer's corporate laptop. Understanding how enterprise MDM and endpoint agents operate explains the severe risks involved.
The Technical Scope of Enterprise Mobile Device Management (MDM)
Enterprise MDMs (Jamf Pro, Microsoft Intune, Kandji, VMware Workspace ONE) configure device profiles, enforce disk encryption (FileVault / BitLocker), and deploy enterprise certificates.
What MDMs Can Track vs. What They Cannot Monitor
MDMs track installed software versions, OS patch levels, firewall status, and hardware serial numbers. Standard MDM profiles do not stream continuous desktop video due to massive network bandwidth costs.
Continuous Screen Recording vs. Periodic Inventory Sweeps
However, company laptops often bundle secondary telemetry agents (such as Digital Experience Monitoring software like Nexthink or Tanium) that log running processes and active window titles.
Why You Should Never Interview on an Employer-Managed Laptop
Even if your screen share is private to meeting participants, corporate IT logs can record external interview meeting URLs or unauthorized software executions. Always use personal hardware.