Remote providisioning and enrollment of enterprise devices with on-premises domain controllers

A non-transitory computer-readable medium embodying a program executable in a client device, the program, when executed by the client device causes the client device to perform the operations of:

• retrieving an execute command from a command queue managed by a server, the command queue being associated with the client device;
• retrieving certificates and configuration settings for establishing a virtual private network (VPN) connection;
• modifying a network setting of a network interface card (NIC) of the client device;
• establishing the VPN connection with a domain controller located within the corporate domain using the certificate and configuration settings, the domain controller being configured to process login requests to the corporate domain;
• transmitting a request over the VPN connection to the domain controller to join the corporate domain, wherein a corporate account in a directory service is established for the client device;
• reverting back to the prior network setting of the NIC and terminating the VPN connection;
• and
• rebooting the client device.

A method implemented in a computing device for provisioning and enrolling a client device located outside a corporate domain to access enterprise resources within a corporate domain, comprising:

• determining, by the computing device, whether the client device located outside the corporate domain lacks an application native to the operating system of the client device with a programming interface that supports direct communication with the computing device for remotely initiating execution of an application for remotely adding the client device to the corporate domain;
• in response to determining that the client device lacks the application, placing an enrollment application, one or more virtual private network (VPN) certificates, and data comprising VPN settings in a command queue associated with the client device;
• and
• transmitting an instruction to the the client device to retrieve the enrollment application, the one or more VPN certificates, and the data comprising VPN settings from the command queue associated with the client device.