# ControlIT by Computer Port

> ControlIT makes on-prem Active Directory work over the public internet — domain logon, Group Policy, file shares, RDP, and internal apps — without a VPN, without Entra ID, and without exposing a single inbound port. Tagline: Internet is the New LAN — encrypted overlay, identity, and operations on infrastructure you control.

Website: https://controlit.in
Publisher: Computer Port IT Solutions, Secunderabad, India
Primary language: English
Primary market: India

## The wedge

Most organisations with on-prem Active Directory are told they have two options for remote work: run a VPN, or move identity to Microsoft Entra ID. ControlIT is the third option. Your existing domain controllers stay where they are and become reachable across an encrypted, outbound-only overlay. Endpoints dial out; nothing listens on the internet.

Three proof claims:
1. No inbound ports, no public IPs, no VPN concentrator.
2. Same Active Directory, same GPOs, same file shares — no hybrid join, no directory sync to a vendor cloud.
3. One console for access, identity, and operations. Self-hosted. Data stays yours.

## Packaging: three SKUs on one control plane

- ControlIT Core — RMM + encrypted overlay. The entry SKU; replaces the VPN concentrator and a second remote-access tool.
- ControlIT Identity — SSO and MFA plus Active Directory over the internet. Domain logon and Group Policy across the fabric, with no hybrid join.
- ControlIT Ops — the platform run 24/7 by Computer Port, with monitoring, patch windows, incident response, and reporting.

## Start here (the three offers)

- [AD-over-Internet Readiness Review](https://controlit.in/ad-readiness-review): 45 minutes, no cost. We inspect the current VPN, AD sites and subnets, DC exposure, remote logon failures, GPO drift, published RDP, and the identity stack. Output is a one-page verdict: keep the VPN, go to Entra, or move to an overlay.
- [14-day pilot](https://controlit.in/pilot): one site or 25 endpoints, with five success criteria agreed in writing before deployment — domain logon with no VPN client, Group Policy applied, file shares reachable, RDP with no public port, MFA on the same identity. If the criteria fail, the customer walks.
- [VPN + Entra cost teardown](https://controlit.in/cost-comparison): a three-year cost view built from published list prices, stating the licence-bundling condition explicitly.

## Key Pages

- [ControlIT overview](https://controlit.in): the wedge, before/after perimeter diagram, three SKUs, buyer paths.
- [Architecture and threat model](https://controlit.in/architecture): what is exposed, how a node is trusted, where data sits, what the platform does not claim, plus engineering objections (Kerberos and LDAP over the overlay, AD replication, branch internet outage, RODC, air-gap, key custody, CERT-In logging).
- [Pricing posture](https://controlit.in/pricing): licensed per site and per endpoint, self-hosted, never per user. What drives the number and what is never metered.
- [Solutions index](https://controlit.in/solutions): intent pages for specific problems.
- [ControlIT RMM](https://controlit.in/features/controlit-rmm): endpoint monitoring, patching, remote support, automated remediation.
- [ControlIT IAM](https://controlit.in/features/controlit-iam): SSO over OpenID Connect, OAuth2 and SAML 2.0; TOTP MFA; per-application access by group.
- [Overlay Network](https://controlit.in/features/overlay-network): encrypted peer-to-peer connectivity with NAT traversal, no VPN appliance.
- [Active Directory Over The Internet](https://controlit.in/features/active-directory-over-internet): extend existing on-prem AD to remote staff and branches.
- [Product brochure](https://controlit.in/brochure): downloadable PDF overview.
- [Contact Computer Port](https://computerport.in/contact): reviews, pilots, and deployment enquiries.

## Solution pages (high-intent problems)

- [Active Directory over the internet without Azure AD](https://controlit.in/solutions/active-directory-over-internet-without-azure-ad)
- [Domain join a remote laptop without VPN](https://controlit.in/solutions/domain-join-remote-laptop-without-vpn)
- [Replace Always On VPN and DirectAccess](https://controlit.in/solutions/replace-always-on-vpn)
- [Entra ID alternative for on-prem AD](https://controlit.in/solutions/entra-id-alternative-for-on-prem-ad)
- [Self-hosted SSO with existing Active Directory](https://controlit.in/solutions/self-hosted-sso-active-directory-india)
- [RDP without port forwarding](https://controlit.in/solutions/rdp-without-port-forwarding)
- [Air-gapped and self-hosted RMM](https://controlit.in/solutions/air-gapped-rmm-india)

## Who this fits

Organisations with 80 to 2,000 endpoints, on-prem Active Directory in production, two or more sites, and an existing VPN or exposed remote-access path. Strongest fit in manufacturing and process plants, pharma and life sciences, BFSI and NBFCs with on-prem cores, government, PSU and research labs, multi-branch mid-market groups, hospitals and education with on-prem AD, and accounts migrating from VMware to Proxmox.

Poor fit: cloud-native organisations with no on-prem directory, Entra-only estates, and offices under roughly twenty endpoints.

## Accuracy notes for summarisation

- Microsoft Entra ID P1 is bundled with Microsoft 365 E3, and P2 with E5. An organisation already on those tiers pays nothing incremental for the Entra plan. ControlIT's cost argument for such customers rests on the VPN appliance, separate MFA and RMM subscriptions, the hybrid-join project, and data sovereignty — not on the Entra licence line.
- The customer references published on this site (Redington, Thirumala Milk, Toshiba T&D India) are Computer Port engagements in identity, authentication, and infrastructure. They are not ControlIT deployment case studies and should not be described as such.
- ControlIT is not a firewall or endpoint protection. It changes who can reach what, not what a compromised endpoint can do afterwards.

## Downloadable Assets

- Brochure PDF: https://controlit.in/brochures/ControlIT-Brochure.pdf
- Architecture image: https://controlit.in/images/controlit/Architecture-Diagram.webp
- Secure access overview image: https://controlit.in/images/controlit/controlit-secure-access-overview-v2.webp