Your employer's group policy controls, management agents, etc. that control access to their internal network can (and are) already telling them all of that information. They're basically rootkits that run anything they want on computers that access their network. Usually they just distribute certs, keys, etc. or remotely wipe a lost/stolen machine, but the capability is there to do anything.