Windows 10: Remotely manage Windows 10 domain joined machine connected to VPN

Hello,


Can Windows 10 domain joined machine connected to VPN be remotely managed via RDP by IT/Network administrators located at internal corporate network just like DirectAccess?


Please answer specifically with reference article.

:)

 

Time Sync issues on Windows 10 domain joined machines

I have started with new issue in my environment with time sync. Most of the users have now started working from home and hardly connecting to corporate network either directly or over VPN due to some challenges at network end.

Further Details:

Operating System - Window 10 1709

Type - Domain Joined

The issues generally starts after 4-5 days and user notice time difference of 5-7 minutes. To fix it, I either need to connect machine to VPN and run GPO forcefully or change setting (mentioned below) to sync time with time.windows.com.

Settings-> Time & Language ->Related Settings ->Addition date, time, & regional settings -> Clock and Region -> Date and Time -> Change Settings. Then enabled Synchronise with and Internet time server as time.windows.com.

The above settings hardcodes machine to sync over internet and changes the registry settings(Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type - NTP) to NTP which is not recommended for domain joined computers. The domain
joined devices is having NT5DS settings which is for domain joined computer.

So is there any way like when devices are connected to corp network, it sync time with local domain controller and when not, it starts synching with internet time server?

Thanks

 

Can same PC have domain-joined and non-domain-joined accounts?

Hi Douglas

My name is Andre Da Costa; an Independent Consultant, Windows Insider MVP and Windows & Devices for IT MVP. I'm here to help you with your problem.

Yes, you can have the machine joined to a Domain and still access your local account if you need to.

On the sign in screen, there be an account called 'Other user'

Click on it and will bring up a log screen, where you enter your MACHINE-NAME name followed by your account name.

Enter your password then you would be able log into local account.

See the following article for instructions:

https://www.groovypost.com/howto/join-a-windows...

If you want to remotely connect to your work machine from your Home PC, you can do so using Remote Desktop.

Here are steps how to do that:

https://www.groovypost.com/howto/setup-use-remo...

Information in the above link is sourced from a trusted Microsoft MVP blog.

 

How to reserve Windows 10 for a non-domain joined PC (but perhaps fomerly domain joined)

My reservation icon for Windows 10 has not appeared. After ensuring i have all outstanding Windows updates, and run the script that runs scheduled tasks, the icon still doesn't appear.

Then there was the hint from
KB3081048:

> The "Get Windows 10" app doesn’t appear in Windows 7 or 8.1

>

> If your device is has been connected to a domain it may be blocked from the upgrade reservation.

It is entirely possible that for 2 or 3 minutes two or three years ago, my machine
was joined to a domain.

• What registry key is the upgrade advisor mistakenly using to determine if a machine is joined to a domain?
• How do i check if a machine was previously joined to a domain?
• How do i unjoin a non-domain joined machine from a domain?
• How do reserve a copy of Windows 10 for a non-domain joined PC?

Bonus Chatter: It's a Surface Pro 3

I tried using the
Media Creation Tool, but it fails with a non-descript error:



How do i upgrade to Windows 10 now that it is released?