RemoteApp + Laptops + Password Update

[Whistler]

Hi,

 

We have twenty laptops that are given to staff currently. We are using Local Profiles for these machines and all are joined to the domain. The DC is running Server 2012 R2.

 

We use RemoteApp to deliver apps such as Word, Excel etc to the laptops. This server is running Server 2016.

 

We have issues with staff leaving the laptops at home (as they are strictly for home use - as they have a work PC in the office) and are only required to be brought in once a year for a re-image. Windows Updates is done locally and I have SAAS software installed so I can make sure they're up to date.

 

We have an increasing issue of when Staff change their passwords, because the computer can't contact the domain as they are offsite, they are having to use old passwords to logon which is starting to become a problem. Also, it breaks the RemoteApp connection as they have opted to "save" passwords for quicker connection.

 

From my understanding, something like DirectAccess would fix this and emulate local network access always, however adds additional complexities we don't want.

 

In short, is there a way I can have the computer "update" the cached credentials without it being brought back into the office, no VPN or without using local accounts? (i.e something I could do with RemoteApp?) We only have RemoteApp open as a port in the DMZ anyway, do don't want to open other ports when what we have, apart from this issue works very well.

 

Any help appreciated.

 

Thanks.

[deano]

DirectAccess will be your best bet for this

[Whistler]

DirectAccess will be your best bet for this

 

Hi, I don't really want to use DirectAccess if we can avoid it. Any other alternatives?

[Whistler]

Bump. Any other suggestions?

[deano]

Azure AD