I'm starting a remote contractor position in a few weeks for a U.S.-based company. Because I'm located in Latin America and contractors are expected to provide their own equipment, I'll need to use my personal computer. The job requires installing CRM software with administrator privileges, along with a Google Chrome plugin. I'm considering creating a separate Windows partition and installing the work environment from a bootable USB. Would that keep the company's software and IT monitoring completely separate from my personal files, applications, and internet traffic?
3 Answers
The safest practical choice is a dedicated work computer, even if it’s an inexpensive used laptop. If that isn’t possible, a VM is usually preferable to dual booting, but neither guarantees that company software can’t observe network activity or access data. A separate network adapter or isolated guest network can reduce exposure, but it doesn’t make a personally owned computer completely invisible to monitoring. Before installing anything, ask the company what data their CRM and monitoring tools collect and whether they approve a personal device or virtual machine.
A virtual machine is generally a better option for separating work from personal use. You could run Windows in VirtualBox or another VM tool and install the CRM and browser plugin there. It keeps most work activity contained within the VM and makes it easier to delete or restore the work environment, although it still isn’t perfect isolation. A company application with administrator access inside the VM can monitor the VM, but it normally can’t directly control the host unless there’s a vulnerability or you grant it shared folders, clipboard access, or similar integrations.
They may be able to detect a VM through system details or monitoring software, and trying to hide it could violate company policy. It’s better to confirm that a VM is allowed. Also disable shared folders and unnecessary host integration, and remember that the VM still needs its own properly licensed operating system.
A dual-boot setup gives you two separate Windows installations, but it isn’t a security boundary. Either installation can usually access files on the other partition, and software with administrator privileges may be able to inspect or change more than you expect. Separate user accounts are easier, but they also don’t provide true isolation. Keep backups and assume anything installed with admin rights could potentially monitor the whole machine.
Would the company be able to tell that I’m using a virtual machine, especially if I don’t mention it? The CRM also requires administrator privileges.