BYOD Windows and macOS: Can Hexnode create a separate work container?Solved

Participant
Discussion
3 hours ago Nov 09, 2026
We are planning device management for contractors who use their own Windows and Mac computers. The goal is to keep company data separate from personal data, apply restrictions only to the work side, and remove access or work data when the contract ends.
Ideally, we want something like an Android work profile, but for laptops/desktops. For example, contractors may use browser-based tools, CRM systems, reporting dashboards, and communication apps. Can Hexnode create a separate work container on BYOD Windows or macOS devices and enforce restrictions only inside that container?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
28 minutes ago Nov 09, 2026
Marked SolutionPending Review

Hexnode cannot create an Android-style isolated work container on Windows or macOS computers.

This is mainly due to operating system limitations. Desktop operating systems do not provide the same native work-profile/container model that Android supports for BYOD mobile management. On Windows and macOS, MDM controls are generally applied at the device, user, profile, app, or configuration level rather than inside a fully separate corporate container.

For personal Windows or Mac computers, this means:

  • Work and personal data cannot be completely separated by Hexnode into two isolated spaces.
  • Restrictions applied through device management may affect the device or user environment more broadly.
  • A full device wipe is not suitable for BYOD because it can remove personal data as well.
  • Selective removal is limited to managed configurations, profiles, or apps where the platform supports it, and it should not be treated as a guaranteed cleanup of all company data from a personal computer.

For contractors using computers, the recommended approach is to use company-owned devices if strong control, policy enforcement, and clean offboarding are required. BYOD management is generally more practical for mobile devices, especially Android devices with work profile support.Hexnode cannot create an Android-style isolated work container on Windows or macOS computers.

This is mainly due to operating system limitations. Desktop operating systems do not provide the same native work-profile/container model that Android supports for BYOD mobile management. On Windows and macOS, MDM controls are generally applied at the device, user, profile, app, or configuration level rather than inside a fully separate corporate container.

For personal Windows or Mac computers, this means:

  • Work and personal data cannot be completely separated by Hexnode into two isolated spaces.
  • Restrictions applied through device management may affect the device or user environment more broadly.
  • A full device wipe is not suitable for BYOD because it can remove personal data as well.
  • Selective removal is limited to managed configurations, profiles, or apps where the platform supports it, and it should not be treated as a guaranteed cleanup of all company data from a personal computer.

For contractors using computers, the recommended approach is to use company-owned devices if strong control, policy enforcement, and clean offboarding are required. BYOD management is generally more practical for mobile devices, especially Android devices with work profile support.

Regards,
Mary Romero

Save