ControlIT AD Anywhere: Your Active Directory, Over the Internet

ControlIT AD Anywhere extends the Active Directory you run over the internet: domain logon, Group Policy and remote domain join, with no Entra ID or connector.

Extend your Active DirectoryBook the readiness review

What this actually does

Your existing Active Directory, over the internet.

Remote Domain Access: domain logon, Group Policy, file shares and domain services from home, a branch or the plant floor.
Remote Domain Join: join a new Windows laptop to your domain over the internet, without bringing it to the office.
No Entra ID, No Connector: keep your users, groups, Group Policy and Windows authentication. No identity migration, no hybrid join, no cloud identity connector.

A new laptop, joined from home

ControlIT AD AnywhereOverlay up

Remote domain join

corp.local

NEW-LT-0419Laptop at homeHQ-DC-01Domain Controller

Laptop at homeHome broadband, behind NAT09:14:02
Overlay upOutbound and encrypted, no port opened09:14:05
Domain Controller reachablecorp.local resolves over the overlay09:14:07
Joined to the domainComputer account created in corp.local09:14:22
Group Policy appliedWorkstation baseline, drives mapped09:15:41

Event log

09:14:02Device enrolledNEW-LT-0419, home broadband
09:14:05Overlay connectedOutbound only, encrypted
09:14:06DNS resolvedcorp.local domain records
09:14:07Domain Controller reachableHQ-DC-01, head office
09:14:22Joined to the domainCORP\NEW-LT-0419
09:15:40Group Policy appliedWorkstation baseline
09:15:41Drive mapped\\fs01\shared

Microsoft's answer to remote Active Directory is to move your identity to Entra. Ours is to keep the Domain Controller yours, and make the internet behave like a LAN.