{"id":47869,"date":"2020-10-03T09:00:00","date_gmt":"2020-10-03T13:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=47869"},"modified":"2024-02-02T13:26:20","modified_gmt":"2024-02-02T18:26:20","slug":"how-remote-systems-communicate-with-active-directory","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory","title":{"rendered":"How Remote Systems Communicate with Active Directory"},"content":{"rendered":"\n<p>Throughout 2020 many of us have had new challenges managing an organization and the resources needed to Make Work Happen\u00ae. Organizations using Microsoft Active Directory<sup>\u24c7<\/sup> (AD or MAD) to manage their identities, systems, and access may run into frictions impacting manageability. In this article, we\u2019ll look at the various ways that some fundamental characteristics of AD have caused many organizations to look for a more cloud-forward approach to management.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Constant Communication<\/h2>\n\n\n\n<p>Active Directory is developed to be primarily an on-premises solution, creating a security perimeter for the resources, identities, and devices it manages. This perimeter is called the <em>domain.<\/em> AD\u2019s primary service, Active Directory Domain Services<sup>\u24c7<\/sup> (AD DS), manages and controls the users, policies, access, permissions, roles, and auxiliary integrated services within the domain. For well over two decades, Active Directory was the backbone of many organizations across the globe. With the introduction of state and local legislation for work from home mandates due to the COVID-19 pandemic, Active Directory developed friction for organizations moving to this style of environment.\u00a0<\/p>\n\n\n\n<p>Primarily it comes down to communications. Active Directory was built to have all devices and users operating on the same network on-prem, whether that be LAN or WiFi. The devices and users would be <em>domain-bound<\/em>, meaning that in order for devices and users to be verified and working, there would need to be a continual connection between them and the local <em>Domain Controller <\/em>(DC). Domain Controllers can be akin to an operations manager \u2014 always ensuring that the environment remains up, running, and workflow is uninterrupted.<\/p>\n\n\n\n<p>AD natively and primarily supports devices installed with Windows<sup>\u24c7<\/sup>. These devices connect to the Domain Controller through an associated <em>binding<\/em> where the DC running AD DS pushes down policies, identities, credential changes, and more. Paired with Microsoft&#8217;s Kerberos Authentication Protocol, legacy Active Directory architecture is built around the idea of a constant connection being the norm not the exception.<\/p>\n\n\n\n<p>To ensure that remote domain joined devices have continual connections to the DC, organizations would have to have a dedicated VPN connection between employee devices and the office network to ensure that secure channel, Kerberos sessions, and updates continue to work uninterrupted. Herein lies one of the primary issues running AD for work from home employees.<\/p>\n\n\n\n<p>A real world example of an issue created by this would be during revoking employee access. The example organization lacks the network infrastructure for a distributed workforce. Windows devices bound to a DC require constant connections. Changes made to either the employee user account, device, group policy objects, or attributes in the domain would not be reflected on the employee\u2019s device until a connection is established.\u00a0<\/p>\n\n\n\n<p>An admin needs to revoke an employee\u2019s access due to leaving the company while the DC cannot contact the device to make the disablement changes. Essentially the former employee can still use the system with the cached credentials with the current user account. This creates a major security risk during an employee\u2019s offboarding.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Imagine There\u2019s No Server<\/h2>\n\n\n\n<p>Reflecting on the requirements that maintaining Active Directory in a distributed environment takes some extra considerations. Having constant communication between employee devices and the domain is critical to ensure workflow is uninterrupted. Organizations who are currently struggling with maintaining a domain in the current landscape may want to consider alternatives to their current architecture. As more organizations migrate to become fully cloud based, there needs to be a platform that can cover many of the fundamental tools Active Directory brings, without the major fallbacks &#8212; the answer may be JumpCloud<sup>\u24c7<\/sup>.<\/p>\n\n\n\n<p>JumpCloud is a directory platform born in the cloud &#8212; no hardware, no VPN, no Domain Controllers. Imagine your organization running distributed across the globe in either offices or from home. Now imagine a platform where IT admins can easily authenticate to a single platform and manage the organization&#8217;s user identities, devices, cloud services, SSO applications, RADIUS networks, LDAP, and\u00a0 more. Now imagine that you could migrate from your current Active Directory domain to JumpCloud directory platform seamlessly.\u00a0<\/p>\n\n\n\n<p>2020 has shown all of us in technology the upsides and downsides to managing organizations of any size. Manageability, unification, and security are baked into the JumpCloud directory platform making it easier on admins and their employees to continue to work wherever they are.\u00a0<\/p>\n\n\n\n<p>Many of us here at JumpCloud come from IT roles and backgrounds and understand the frictions performing duties within legacy infrastructures. At the intersection of device, identity, and access, JumpCloud blurs the lines between MDM, EMM, UEM, SSO, and directory to allow users to authenticate to any resource anywhere while admins have a central portal to manage and monitor everything.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Try JumpCloud Free<\/h2>\n\n\n\n<p>Evaluate <a href=\"https:\/\/console.jumpcloud.com\/signup\">JumpCloud Free today<\/a> to see why 100,000+ organizations trust JumpCloud to help secure and easily manage their resources. With JumpCloud Free, you receive up to 10 users and 10 systems, as well as 10 days free of premium in-app chat support to help you explore the entirety of the platform.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.<\/p>\n","protected":false},"author":70,"featured_media":47870,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2781,2337],"tags":[],"collection":[2777],"platform":[],"funnel_stage":[3016],"coauthors":[2515],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How Remote Systems Communicate with Active Directory - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Remote Systems Communicate with Active Directory\" \/>\n<meta property=\"og:description\" content=\"Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-03T13:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-02T18:26:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"533\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Zach DeMeyer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zach DeMeyer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\"},\"author\":{\"name\":\"Zach DeMeyer\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\"},\"headline\":\"How Remote Systems Communicate with Active Directory\",\"datePublished\":\"2020-10-03T13:00:00+00:00\",\"dateModified\":\"2024-02-02T18:26:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\"},\"wordCount\":829,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png\",\"articleSection\":[\"How-To\",\"Remote Work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\",\"url\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\",\"name\":\"How Remote Systems Communicate with Active Directory - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png\",\"datePublished\":\"2020-10-03T13:00:00+00:00\",\"dateModified\":\"2024-02-02T18:26:20+00:00\",\"description\":\"Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png\",\"width\":800,\"height\":533},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Remote Systems Communicate with Active Directory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\",\"name\":\"Zach DeMeyer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"caption\":\"Zach DeMeyer\"},\"description\":\"Zach is a Product Marketing Specialist at JumpCloud with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.\",\"sameAs\":[\"http:\/\/www.jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How Remote Systems Communicate with Active Directory - JumpCloud","description":"Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory","og_locale":"en_US","og_type":"article","og_title":"How Remote Systems Communicate with Active Directory","og_description":"Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.","og_url":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory","og_site_name":"JumpCloud","article_published_time":"2020-10-03T13:00:00+00:00","article_modified_time":"2024-02-02T18:26:20+00:00","og_image":[{"width":800,"height":533,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png","type":"image\/png"}],"author":"Zach DeMeyer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zach DeMeyer","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory"},"author":{"name":"Zach DeMeyer","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d"},"headline":"How Remote Systems Communicate with Active Directory","datePublished":"2020-10-03T13:00:00+00:00","dateModified":"2024-02-02T18:26:20+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory"},"wordCount":829,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png","articleSection":["How-To","Remote Work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory","url":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory","name":"How Remote Systems Communicate with Active Directory - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png","datePublished":"2020-10-03T13:00:00+00:00","dateModified":"2024-02-02T18:26:20+00:00","description":"Learn different challenges of managing Active Directory bound devices in the shifting work from home environment and how JumpCloud can help.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/remote-systems-ad.png","width":800,"height":533},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/how-remote-systems-communicate-with-active-directory#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"How Remote Systems Communicate with Active Directory"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d","name":"Zach DeMeyer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219","url":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","caption":"Zach DeMeyer"},"description":"Zach is a Product Marketing Specialist at JumpCloud with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.","sameAs":["http:\/\/www.jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/47869"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/70"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=47869"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/47869\/revisions"}],"predecessor-version":[{"id":105013,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/47869\/revisions\/105013"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/47870"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=47869"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=47869"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=47869"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=47869"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=47869"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=47869"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=47869"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}