The Workplace Spyware You Didn't Know You Had

Your boss doesn't need to install spyware on your laptop, they've already paid for it. And it came bundled with Microsoft 365 license and there's a decent chance that nobody in your company has ever told you that it's actually switched on. So in this video I'm going to walk you through the specific Microsoft 365 features that your employer is almost certainly using to monitor how you work, when you work, whether you're actually doing what you say you're doing I'm going to show you exactly what's visible, what's hidden, and if you manage a team, where the line is between useful data and surveillance creep. Because in this day and age when we have this hybrid working policy, this kind of information I think is really important. Now here's why. Picture this, it's a Tuesday, you've had what you think is a solid morning, you've knocked out a few emails, you've sat through a few Teams calls, you've moved a couple of things forward, you close your laptop at 5.50 in the evening or in the afternoon, you feel reasonably good that you've had a good productive day, you feel happy with yourself. Meanwhile somewhere else in the business, maybe your line manager, maybe someone in IT, maybe HR, they open up a dashboard, one dashboard, and on that dashboard is a neat little breakdown of your entire working day. How many Teams messages you sent, which meetings you attended, and for how long you attended them, whether your camera was on, whether you were an active participant within that meeting, or just a warm body sat within the meeting room waiting room. How many files you've edited in SharePoint, whether you've been collaborative or whether you've been going dark for two hour stretches. They didn't ask IT for any of this special report by the way, they don't need to. They just opened a tab, clicked on the dashboard, that's what they do. And this isn't hypothetical, this is Microsoft 365 and most of what I'm about to show you comes completely as standard when you get the business license that your company has already paid for. Now here's what's in that toolkit and I'll share it with you. Feature number one of the toolkit is called the Microsoft 365 productivity score. This one is the one that caused the most controversy a little while ago. Microsoft launched it and for good reason it caused the controversy, right? The productivity score is a built-in admin dashboard that gives your IT and senior leadership team a detailed breakdown of how employees are using Microsoft 365. We're talking email activity level, Outlook, collaboration, SharePoint, OneDrive, Teams participations, whether you're using a mobile app or the desktop app. When it launched it showed individual level data, your name, your activity, your scores. Remember it went mental last year. Microsoft got nailed for it. Previously advocates said it was a surveillance tool dressed up as a productivity feature. Microsoft responded by rolling up the individual data into anonymized data-wide company stats. But this is the bit most people miss. Enterprise admins can still pull up individual level data to other reporting tools inside the Microsoft ecosystem. The name came off the leaderboard but the data itself is still there. Feature number two, Teams activity reports. This one lives in the Teams admin center and it's probably the most commonly used monitoring tool in any of the Microsoft shop itself. Your IT admin or your manager, they can pull a report showing for any given user, any given time period, how many chat messages you've sent, how many calls you've made, how many meetings you've joined, whether the audio or the video was on, how long the meetings lasted and how long they were actually present for. For a manager with a team member they're concerned about potentially, or building a performance case against somebody, this is actually really useful ammunition to have. Somebody's been in three meetings this week but their camera's been off, they've sent zero messages, they leave early every time, that's all in the report. There's also something called the call quality dashboard within that which logs the technical quality of every single team's call, the audio dropouts, the network jitter, the latency, even what microphone you're using and how much the battery you've had. Most of it is diagnostic rather than surveillance, it's there to help the IT teams fix problems but it's all logged, all of it. Feature number three, Viva Insights. Microsoft sells this as one of the well-being tool and honestly the personal version genuinely is well-being. It nudges you to take breaks, block focus time, not answer any emails at 11 pm but the manager and the leader with dashboards in Viva Insights, they can tell a completely different story. Those views aggregate data from across Microsoft 365, your emails, your meetings, your chats calendar and surface patterns about all of your team, who's working outside contracted hours, who's back-to-back meetings all day, who isn't connecting with a wider organisation, who's collaborating with who. Technically it's anonymised at the individual level but if you're a team of four people and the data says one person is sending emails at midnight every night, well guess what, you don't need to be a detective to work out who that is. Feature number four is called the Compliance Centre, an e-discovery, this one's the nuclear option and it doesn't get used that often but when it does it's comprehensive. The Microsoft Purview Compliance Centre gives organisations the ability to run content searches right the way across the entire Microsoft 365 ecosystem. That means emails, team messages, SharePoint files, OneDrive documents, calendar entries, everything, nuclear like I said. An admin can go into the Compliance Centre and run a query, say every message containing a specific word sent by a specific person over a specific date range and within a few minutes they've got a full report, a PST file, every message, every attachment, every version. Under normal circumstances your manager can't read your private team's messages but if there's a legal dispute, an HR investigation, a regulatory inquiry, e-discovery gets triggered and everything becomes searchable. Every message including the ones you've deleted because the deletion Microsoft 365 doesn't mean it's gone, it just means it's been moved to a retention archive where it sits within the retention policy and then expires at some point. The practical takeaway here is simple, if you're typing something on something on a company device or a company platform and you wouldn't want a lawyer reading it in the courtroom, guess what, it's not rocket science, don't type it. Simple. Feature number five then, OneDrive and SharePoint version history. Every single document you open, every edit you make, every file you share, even if you move it or you delete it, all of it is logged within SharePoint and OneDrive with timestamps and user usage. It's as simple as that. An IT admin can access any employee's OneDrive files directly without the employee even knowing about it. They can browse folders, they can open documents, they can review, edit history. The most common reason to do this is off-boarding. When somebody leaves, the company needs access to their files but the capability exists all of the time, not just at the exit point. For document version history specifically, every time you save a file a new version is created. If you worked on something for an hour and then deleted everything you wrote, the previous version still exists in in the history. That's genuinely useful. How many times have you gone through a document, spent an hour and then lost it? Nightmare. But it's only useful if something doesn't get, well, if it gets corrupted is useful but it also means there's a complete audit trail of everything you've done inside that shared document. Feature six, Microsoft Copilot. This is the newest layer and honestly the most significant shift in how monitoring works. Copilot is Microsoft's AI system and it's deeply integrated within Microsoft 365. For individual users, it's a productivity tool. Summarize this email, draft this response, find this file, all really good useful stuff. But for managers and leaders, Copilot opens up something new. A manager can now open Copilot and ask what has Scott been working on this week? What are the latest conversations we've had? Is there anything in our shared channels I should be aware of before our one-to-one? And Copilot will answer all of that. It pulls from the public team's channels, shared files, emails, anything the manager has legitimate access to and you can get that back, right? It's a readable summary. There's no digging through reports, no building queries, just a question typed in plain English and an answer. That changes the game for managers. Previously accessing all of this information required someone to know where to look, how to look and how to pull the reports. Now it's as easy as having a Copilot conversation which means the barrier to monitoring has just dropped to near zero. Feature seven then is Microsoft Defender for Endpoint. This one tends to live a little bit in larger enterprises, regulated industries, but it's worth knowing about, right? Defender for Endpoint is a security tool that monitors managed devices across the organization. It tracks application usage, web activity on company devices, login times, and it flags usual behavior. Your IT security team uses it primarily to detect threats and compromised accounts, but the data it collects is comprehensive. If you're on a company managed laptop and you think the websites you're using during the day are private, guess what? They're not because the logs exist. So be careful what kind of websites you want to have a little look at because your IT team can see it. So that's the toolkit, seven of them. Now here's why this actually matters. If you're an employee, the practical advice is pretty straightforward. First, find out what your company's monitoring policy is. What does it actually say? On the GDPR, organizations in the UK are legally required to tell employees what data they've collected and why. It should be in your employee handbook or in your contract. If it's not there, go and request it, take a look at it. Second thing, keep your personal stuff on personal devices. Don't log into your personal phone on your team's chat on your personal phone unless you absolutely have to. And if you do, understand that in a legal situation, personal devices which have been used for company work can be used in a legal situation. That's not technical, that's actually happened. Third, don't spend energy trying to gain the metrics, it's pointless. The vast majority of managers don't sit there reviewing teams activity and reports every week. The realistic risk isn't in the day-to-day surveillance of people watching, it's in data being pulled from something that's already happened and somebody that's under scrutiny. If your work output is solid, you behave like a professional, then the dashboard doesn't really need to be your problem. If you manage people or make technology decisions, here's the harder conversation. Just because you can use all of this data doesn't mean you should. The temptation, especially with remote teams, is to use activity metrics as a proxy for performance. Message count, meeting attendance, time online, it's all there, it's all measurable, so it must mean something. It doesn't. Not directly. Someone sending 200 team messages a day and delivering nothing useful is still just delivering nothing useful. Someone who sends 10 messages a day but hits every single deadline and every single budget isn't a problem just because their activity score looks quiet. So use this data as a diagnostic tool to spot somebody who's struggling, maybe also troubleshoot some technical problems that people are having, to build a documented performance case when one is generally warranted and not because you need, because you want to. Don't use it as a scoreboard and if your organisation is relying on Microsoft 365 surveillance data to understand where people are performing, then you've got a management problem. You haven't got a dashboard that you need to fix. That's a management issue. Hopefully that's given you a bit of insight and all of this setup is great when it's used properly and with the right morals and having the right technology in place within your meeting room is great, but what happens at 9.58am when you have a meeting planned for 10am and you realise the camera's broken? Seriously, think about it. What happens? We use our Sportrack platform to remotely monitor and manage all of our clients' devices so that we can see long before that 10am meeting that the camera is offline and we can do something about it. So if you want some information on that, check the Sportrack link out below and go and see what we've got to share on that. Great. Now, you know what can be monitored. Don't be scared by it, I'm just giving you the heads up, but that can all be monitored. But knowing that information is one thing. How do you know actually how to set up the perfect workstation when you have a hybrid or working from home policy? That's why I created this video here, which shows you how to create the perfect home setup for guess what, under $500. Go check it out.