Business Laptop Deployment
Business Laptop Deployment
Hello everyone. I recently bought several Dell Precision E6430 business laptops for my team and I'm trying to configure them as business devices. Instead of just local Windows 10 setups, I want centralized control—like changing wallpapers, blocking apps, etc. I read about domain users but think they need to be on the same network as a Windows Server, even though these machines will be used remotely across different WiFi networks. When installing Windows on the first laptop, there was an option to set up for an organization, but it prompted for a Microsoft account. How can I create those accounts for my staff? Thanks.
Consider Azure Active Directory Domain Services or the simplified Azure AD Join option. A VPN might be used prior to login, or DirectAccess can deliver GPO updates for enterprise environments.
Well, subnet number isn't important here. I think you meant LAN. If you start a normal Active Directory on-premises server, users need to connect to the same LAN first. Once they're logged in, their credentials are stored locally for the last 10 logins, but GPO updates aren't sent to clients because they depend on an SMB link to the domain server. Besides DNS, DCE-RPC, KERBEROS, LDAP (UDP), SAMBA, and your DC must be able to ping clients so ICMP8 works. Azure Active Directory Domain Services connects your on-premises AD controller to a Microsoft Azure cloud instance, letting you run it over the internet.
The "Add New User" option appears grayed out because Azure Active Directory is not available or has been disabled for your account. Check your subscription settings or contact support for more details.
Great decision making on precision! This model is a strong fit for business laptops and matches the advice I gave my company (my recommendation was approved by senior IT leaders). I wonder if your devices are using Windows 10 Pro or Enterprise? You might want to explore F5 remote network connections or comparable tools. This setup should let you control domain policies from afar and provide users with access to internal resources while they're logged in. If that doesn't work, consider other VPN solutions. You could also try running VMware so users connect to a VM remotely if possible. For stronger security, implement RSA Tokens to verify authorized logins. The only known method to push policies across multiple machines is via Active Directory with domain access. Be aware you may need admin privileges on both the server and local machine for this. This seems like an unusual scenario I haven't encountered before.