If I install a second SSD with its own OS in my company Laptop (XPS 15 9510) will I be able to bypass company Bitlocker and surveillance?
>>109630005>BitlockerProbably, depends on firmware settings>SurveillanceNot if they're using a management engine.
>bitlockerCan be an issue.>will I be able to bypass company surveillanceSure, but then they'll see you're not working.
>>109630005Grim
>>109630035Genuine question, do companies really use management engine? I’ve never seen it used. I always assumed it was literally just a government back door.
>>109630035>>109630041>>109630106As far as I know they're using a management engine, I do have my BitLocker Key, I just want to play WarThunder from time to time when I need to use my work Laptop>>109630094kek
>>109630191I’m not talking to you. I’m trying to talk to somebody that isn’t a fucking idiot.
>>109630207mr tough guy over here
>>109630005You’ll just give them an excuse to fire you without severance
>new work laptop has zero oversight, was just handed to me fresh out of the box, can take anywhere at willfeels good being a low accountability chad
>>109630005not really. but they will know that you are gay.
>>109630005no
OK so I learned from you guys that it is not possible to dual boot from my work Laptop without my employer being notified via Intune that I did some shenanigans just to play some War Thunder on work trips>>109630460and also that I am gaycase closed
>>109630005how much we wanna bet OP fucks up the install and ends up with 0 OSs
>>109630489The answer is to bring a second device.
>>109630005>no one mentions secureboot/g/rim
>>109630035>management enginei did quick a read, doesn't the management engine runs after the kernel?. If i'm not wrong, which i probably am, shouldn't you be able to run linux(kernel) gnu operating system and by pass it? I don't think it's that simple but that's my thought.>>109630005If you open it doesn't that give away that you mess with it? If pic is just an example, then you might better consider an external SSD or a big usb/load everything to ram before opening the insides the company's laptop in the first place.
>>109630489>IntuneI just use the tier 1 Intune for work. Maybe tier 2 Intune covers more stuff, so YMMV.I don't think I'd be notified or flagged if you changed any BIOS settings on Windows (e.g. adding a second boot device), other than fucking with the Secure Boot keys (which Windows Autopatch tracks). The vast majority of Intune stuff just interlinks with the OS layer.That being said, it is possible to collect hardware information from the device, so there is a good chance existence the second hard drive is detected by Intune.You can encrypt the drive, so Windows won't be able to read the contents, but that opens you up to an very interesting problem. If Windows can't detect BitLocker on the drive, and BitLocker is a requirement on all drives, what happens next?Best case scenario, Intune flags the device as non-compliant and IT comes asking questions.Worst case scenario, they've enabled the option to automatically apply BitLocker to all drives—which explicitly warns that if you're already using third-party encryption will render the drive unreadable/unbootable, but if IT does not expect people to be using third-party encryption then they will fucking turn it on because fuck nagging people to turn on their BitLocker manually.
>>109631207this>>109633389external devices are blocked
>>109630005Does your company use AMT?If so, no. You're just fucked.Regardless you might be fucked anyways if the BIOS is locked down.
>>109630005A couple years ago I talked to one of the IT guys at my company (fairly big tech) and asked if it was possible to boot one of the company laptops from a personal USB stick and he said it was.Never tried it though.
>>109630005You’re on the fast track to losing your job if you’re asking stupid shit like this. I let my IT department tell me I can’t upgrade my own RAM as a justification for getting a whole new laptop. If you need a second drive for work purposes, make a case for it. If you want it for personal reasons you’re a dope.
