Skip to content
ControlIT

Active Directory Over the Internet for Remote Staff and Branches

Extend the on-prem Active Directory you run to remote staff and branches: domain logon, Group Policy and file shares, with no Azure AD licence or cloud sync.

What this actually does

Keep the directory where it is. Remote machines authenticate, apply Group Policy, and reach file shares as though they were sitting in the office.

  • Domain logon, Group Policy processing, and file share access for remote and branch machines.
  • No Azure AD licensing, no hybrid join, and no forced directory sync to a vendor cloud.
  • Directory traffic stays inside the encrypted overlay rather than crossing the public internet.

What signing in looks like

Illustrative ControlIT Identity sign-in: a remote laptop logs on to the domain through the encrypted overlay, confirms a time-based one-time password, and single sign-on opens internal apps, while an audit log records each step. Sample data only.

What changes as a result

  • Remote staff under the same directory policy as head office
  • No identity migration project to enable remote work
  • Branch sites onboarded without shipping hardware

Extend Active Directory with Computer Port

Bring us your directory, your remote access and your sites. We will map what the overlay changes before anyone signs anything.