Active directory configuration of external network resources

An Active Directory configuration method for configuring an external network resource, the method comprising:

• receiving a configuration Group Policy Object (GPO) at an Active Directory (AD) Bridge Agent client device from an AD Bridge Gateway server device through an AD Bridge Gatekeeper device, the configuration GPO including a known good criterion configuration file, wherein the AD Bridge Gateway server device resides in a first network, the AD Bridge Gatekeeper device resides in a second network external to the first network, the AD Bridge Agent client device resides in a third network external to the second network and to the first network, and the AD Bridge Agent client device unable to directly join the first network;
• storing a copy of the known good criterion configuration file as a local configuration file in a memory at the AD Bridge Agent client device;
• applying the local configuration file within the AD Bridge Agent client device;
• generating a criterion file hash based on the known good criterion configuration file;
• generating a file copy hash based on the local configuration file;
• detecting, at the AD Bridge Agent client device, a change in the local configuration file based on a comparison between the criterion file hash and the file copy hash;
• and
• responsive to the detection of the change in the local configuration file, overwriting the local configuration file with a new local configuration file.

At last one non-transitory machine-readable storage medium, comprising a plurality of instructions that, responsive to being executed with processor circuitry of a computer-controlled device, cause the computer-controlled device to:

• receive a configuration Group Policy Object (GPO) at an Active Directory (AD) Bridge Agent residing on an AD Bridge Agent client device from an AD Bridge Gateway server device through an AD Bridge Gatekeeper device, the configuration GPO including a known good criterion configuration file, wherein the AD Bridge Gateway server device resides in a first network, the AD Bridge Gatekeeper device resides in a second network external to the first network, the AD Bridge Agent client device resides in a third network external to the second network and to the first network, and the AD Bridge Agent client device unable to directly join the first network;
• store a copy of the known good criterion configuration file as a local configuration file at the AD Bridge Agent client device;
• apply the local configuration file within the AD Bridge Agent client device;
• generate a criterion file hash based on the known good criterion configuration file;
• generate a file copy hash based on the local configuration file;
• detect, at the AD Bridge Agent client device, a change in the local configuration file based on a comparison between the criterion file hash and the file copy hash;
• and
• responsive to the detection of the change in the local configuration file, overwrite the local configuration file with a new local configuration file.