Question: Can a user log in with domain credentials to a machine not on the domain? What trust relationship needs to be set up to allow this?
The current setup is remote workers log in to their personal home machines as local-workgroup users. Then they run a client to tunnel a VPN. At this point they can browse the servers and authenticate themselves with domain credentials. This setup has its drawbacks such as constant providing of alternate credentials. But it seems to be the best way I know of without requiring their personal machine join the domain.
Another scenerio we are considering is to host a VM on their home machine. That VM will be a member of the domain. I think citrix offers a product that uses this design. I'm worried that there might be some overhead or limitations in the usage of the GPU.
So I'm not sure if i'm asking the question correctly. Basically I want remote workers to have a separate user profile for connecting to work that uses a domain user account (and get the gpo's etc). It has to work with our vpn.