Login to a domain outside the office?

Question

Active Directory

Hello everybody.

There was a question: How to organize an input in the domain for laptops which will be used in not office.
When the laptop is in the office, the employee logs in and works, but what about the entrance when you need access outside the office?

Answer 1

umm .. either the question is not clear .. whether in the answers?
if you are interested in the situation of running a laptop outside the local area under domain control?
- Well, have you ever tried it?
- login data is cached for a month (well, or once upon a time it was exactly (or approximately? But) it was like that )
- and you can also use different profiles (local / domain accounts), for different conditions
ps .. if all the same the question is about something else - then you need to clarify

Answer 2

Set up VPN between laptop and office router. Launched VPN - got a virtual cable that will connect the laptop to DC.

Answer 3

At a minimum, organize vpn to the network where the domain is located. You can enter the account without connecting any, and then after logging in, we connect via vpn to the network and get all the goodies from the operation of the domain.

Answer 4

The password of the last authorized user and administrator, if I'm not mistaken, are cached.
If one laptop has many users, it is necessary to increase the number of accounts in the GPO that are cached, and after the account is authorized on this device, it will be able to log in offline.
Exactly the same problem was, they solved it in this way, because according to the standard it caches only the last user

Answer 5

Need access to a laptop or access to a domain? If to a laptop, then even without a connection to the domain server, it will allow you to log in, and if access is needed specifically to the domain, then only VPN. Itself, for this purpose, I bought Mikrotik - so that without unnecessary software, only by means of a router and Windows to connect to the local office network.