Imagine a scenario where you have 30+ people with laptops all over the world. Those laptops are Windows and also Mac OS X, but for our purposes we can address one or the other. You have a Windows Active Directory environment in a data center. For that matter, you can even haven a OSX Server in a data center as well. The point is, it's a hub & spoke setup....
Now, you want to exercise some level of control over the machines. Ideally manage some basic policies, run scripts, streamline logons, etc... How do you do it?
At first glance, you can join do domain over VPN, but for anyone who's been there before, you know it works terrible. The whole idea of having VPN before the logon just makes the process inefficient and faced with problems. Ideally, they would logon to the computer, and then log into the corporate infrastructure by some means...
Existing tools at your disposal are:
- Centralized 2008 and 2012 PDCs; Federation Services coming soon.
- Win Active Directory stores your credentials that are then used by a number of LDAP based systems.
What sorts of tools would you use? What approaches would you practice.