I am the 'IT guy' for a company that is rapidly growing and about to reach 100 employees. While my primary job is backend development for our websites and services; I am also tasked with setting up and maintaining PC's for our users.
Currently I am just making local accounts on machines, putting in their outlook settings and pre-installing a handful of applications for users, but managing this is getting out of hand. And I can barely keep up with the expansion, not to mention the background 'churn' of hirings and firings.
The 'simple' solution to this is to set up a Windows Server and start using active directory to manage accounts, the problem is that our employees are scattered across 12 locations. As it is now, I am using logmein to remotely administer machines.
I would like to move towards some kind of domain based login, similar to a traditional active directory setup where I create and configure windows user accounts at a central location, and then end users simply login to any machine with DOMAIN/username.
I've been playing with Windows InTune and it's great for managing machines, and deploying policy, but that's really not what I need.
I've been looking at Azure Identity, but that implies that I still need a local AD controller for every location. Ideally I would like these services to exist 'in the cloud'. I don't know if I feel comfortable with having a server on site at each location, as the locations are rural and I would like to avoid sending specialized, expensive equipment out to be installed by a local contractor.
An 'active directory/sso like' service being cloud hosted seems like it would be a no-brainer, and after reading about the products such as InTune, Azure Identity and Office365 it seems like it can be done... Has anybody managed to successfully deploy a system like this or know of a case study/post-mortem of somebody who did?