Windows 10: Consequences of "Allow my organisation to manage my device" on Teams login

Hi,


Today I carelessly didn't uncheck the "allow my organisation to manage this device" on the Teams login, and I now need to understand what damage has been done and how to repair it. I can see two things:


- A work and school account was created. I have removed this. If I hadn't, would my organisation be able to control how I use my own personal device? is removing it sufficient to prevent this?

- My BitLocker keys were uploaded and are now stored on their systems. I saw them in the Office portal and this link suggests they will also be in Azure Active Directory. Does this mean that Windows uploaded my BitLocker keys without my consent when it created that account?


Finding your BitLocker recovery key in Windows 10 microsoft.com

Both these strike me as changes that will make the vast majority of users extremely uncomfortable. The significance of the second point is probably lost on a lot of less technical users.


A couple of questions:


1. Are there any other changes I need to be aware of?

2. Can I change the Bitlocker keys without having to decrypt / encrypt the entire hard drive?

3. If I do change the Bitlocker keys, will the new ones be uploaded again?


FWIW I can't quite believe that an option with such undesirable and significant consequences is checked by default and does not even remember its previous value.

:)

 

Ways of login to Win10

Thank you for your suggestions. I believe there is a step during the installation process when Windows is asking if it will be managed locally or as organisation. This is my second doubt. If I decide that there will be one MS account for the company + local accounts on computers - should I choose the "managed by organisation" option during each installation process? I cannot find information what this "managing by organisation" exactly mean...

 

Windows spotlight not displaying vote button + "Some settings are hidden or managed by your organisation"

On Windows 10 with the Fall Creators Update, I was seeing spotlight background pictures on the lock screen, but while my home device would show a voting button and useful information about the picture, my work laptop would skip that part and display the password prompt.

Other threads suggested

1. Opening the Settings app
   
2. Go to Personalization > Lock Screen
   
3. Change Background from Windows Spotlight to Picture.
   
4. Change it back.
   

Only, this interface was also showing the error message "Some settings are hidden or managed by your organisation" and didn't allow chaging the Background setting.

 

Ways of login to Win10

Managed by an Organization is using the system on a domain or through a service like Microsoft’s Intune, which I use.