The simplest way to treat any employer device at home (and work) is that they should be assumed to be hostile. It could be default settings, best practices of M

The simplest way to treat any employer device at home (and work) is that they should be assumed to be hostile. It could be default settings, best practices of Microsoft for adoption, etc. How to treat a hostile device in your home network is the same as home automation - isolate it. - Separate vlaned network that can’t see anything on your home network. Separate SSID. Don’t like the microphone? Find an adapter that mutes it. - Create a separate vlan and SSID that can’t see anything on your network. The ideal way to do this is configure a travel router behind your regular router. Then extra nat hop is worth it. - Bonus points for a vpn at home that your travel router can connect to, making your work setup a little more mobile.