Remote provisioning and enrollment of enterprise devices with on-premises domain controllers

A system, comprising:

• a computing device comprising a processor and a memory;
• and
• machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
• determine that a client device located outside a corporate domain lacks an application native to an operating system of the client device with a programming interface that supports direct communication with the computing device for remotely initiating execution of an application that remotely adds the client device to the corporate domain;
• in response to a determination that the client device lacks the application, placing an enrollment application and virtual private network (VPN) settings in a command queue associated with the client device, wherein the enrollment application is configured to:
• establish a VPN connection with a domain controller located within the corporate domain using the VPN settings, the domain controller being configured to process login requests to the corporate domain;
• transmit a request over the VPN connection to the domain controller to join the corporate domain, wherein a corporate account in a directory service is established for the client device;
• configure the corporate account;
• perform an interactive login with the domain controller using credentials of the corporate account;
• in response to a successful interactive login with the domain controller, cache a user profile associated with the corporate account;
• and
• terminate the VPN connection;
• and
• transmit an instruction to the client device to retrieve the enrollment application and the VPN settings from the command queue associated with the client device.

A non-transitory, computer-readable medium comprising machine-readable instructions that, when executed by a processor of a computing device, cause the computing device to at least:

• determine that a client device located outside a corporate domain lacks an application native to an operating system of the client device with a programming interface that supports direct communication with the computing device for remotely initiating execution of an application that remotely adds the client device to the corporate domain;
• in response to a determination that the client device lacks the application, placing an enrollment application and virtual private network (VPN) settings in a command queue associated with the client device, wherein the enrollment application is configured to:
• establish a VPN connection with a domain controller located within the corporate domain using the VPN settings, the domain controller being configured to process login requests to the corporate domain;
• transmit a request over the VPN connection to the domain controller to join the corporate domain, wherein a corporate account in a directory service is established for the client device;
• configure the corporate account;
• perform an interactive login with the domain controller using credentials of the corporate account;
• in response to a successful interactive login with the domain controller, cache a user profile associated with the corporate account;
• and
• terminate the VPN connection;
• and
• transmit an instruction to the client device to retrieve the enrollment application and the VPN settings from the command queue associated with the client device.