SIMS.net - Intune/VPN or RDS App?

[mdrabble]

Currently have Intune running with devices as AzureAD Joined only.

 

Ideally I would like to have devices using a device tunnel so I can manage/update SIMS.net without user intervention - but this required devices to be AD Joined/Hybrid Joined - which will involve some more work on my part.

 

Don't want to use User Tunnels as users need to authenticate before I can manage/update SIMS.net

 

My other thought is to publish the SIMS.net Apps as a RDS App and place a shortcut on users Desktops - again not ideal, as means having to keep RDS in place when I am trying to move towards having less on-premise kit etc.

 

So, fellow edugeekers..... what are your thoughts and opinions?

 

Which method would you opt for and why?

 

Cheers