I accidentally clicked yes to the ‘Allow my organization to manage my device’ prompt, and I’m a bit worried about what that means for my computer. Can someone explain what kind of access they have? Like, does this mean their Microsoft account was logged into my personal computer? What can they monitor? I also noticed my BitLocker key is saved in that account. Does that mean they had some control over my device at some point?
Short answer: pretty much anything. They can manage settings, access data, and even run commands on your device.
Yeah, if they set up policies, they can monitor a lot. They could even do a full forensic copy of your disk if they wanted.
If your school set this up, they might have limited access, but they can still control certain features of your device.
Since it was a school account, they probably could access some of your data, but it also depends on the policies they applied.
Your BitLocker key being saved means they had some control over the encryption settings. They could manage that as part of the device management.