How to secure workstations in cloud environment (Office 365, Dropbox, etc)

I am very familiar (15+ years) with setting up Windows-based (mostly SBS) networks for my clients. However now I would like to setup an entirely cloud-based solution for a customer who will use the following:

Office 365 for email, word processing, etc
Dropbox for file storage (they're not keen on OneDrive)
A cloud based accounting package

How can I "secure" the company workstations so only employees can log on to them? There will not be a local server with Active Directory to check usernames and passwords as has been common in the past.

I am also considering rolling out an SSO solution (e.g. Centrify), but not sure if this will extend to securing the workstation login as well.

This is my first venture into cloud solutions so I hope the experts can assist with some ideas and pointers.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Martin FernandezCommented:
I would suggest to use cloud systems. For example, Google has all those applications that you need for every workstation:

You can visit this link in order to get a bigger look to Google Apps for Work.

Today is an advantage to work in the cloud:
Information loss is very less than local workstations.
Information is encrypted
Login and use logging.

Even you can search for Centrify alternatives here

Good luck!
dbasplusAuthor Commented:
Thanks but that doesn't really help me in how best to secure the logons to the workstations themselves. The client has already decided which cloud apps they want to use, so I don't need information on Google Apps or Centrify alternatives for now.

What I do need to know is how to best secure the workstations.

Can I use their Office 365 as a workstation logon?
Can I use their SSO (Centrify or other) logon as a workstation logon?
Vasil Michev (MVP)Commented:
You will be able to use O365 login (Azure AD join) in Windows 10, which will allow you to control some security related aspects:

You can also impose some restrictions with GPO, but local AD is always the preferred solution.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cloud Services

From novice to tech pro — start learning today.