PENDING connect to any corporate user outside my network using remote control without VPN

[Manuel]

Hi to all,

I currently got remote control working from CM 2103 to any windows 10 machine inside my corporate network.

How can I take remote control to any corporate machine outside my network that has cm agent installed?

I do not want to my corporate user connect to VPN to my corporate network and I just want to use internet to take control of it

 

[Garth]

You will have a lot of problems with this as fire home firewalls, will generally NOT allow you to RDP into them with our THEM initiating the RDP AND CM MUST be able to resolve their IP address first. (aka NATing will cause problems)

 

[Manuel]

hi to all

I have checking information about internet base client method, so I would like to know if I can use this to take remote control to any computer outside my corporate network and give it support service.
Or what do I need to make it directly communicate with clients that are located at home?

Internet-based client management​

This method relies on internet-facing site system servers to which clients directly communicate for management purposes. It requires clients and site system servers to be configured for internet-based client management (IBCM).

 

[Garth]

First off you should not look at it, as MS doesn't really recommend it anymore, you should look at CMG.

Next, either solution will "really" allow you to remote control a computer over the internet without user interaction. If the computer is up and running and access cm via the CMG, and you enabled the pre-release feature for RC over CMG, you can try it.

 

[Manuel]

could you help me to get any publication from WWW where Ms doens't really recommend it anymore?

Because this publication is from 17th september 2021

Internet-based client management - Configuration Manager

Create a plan to manage internet-based clients in Configuration Manager.

docs.microsoft.com

Plan for internet-based client management in Configuration Manager​

• 09/17/2021
• 8 minutes to read

 

[Garth]

IBCM is the OLD way of doing things, CMG is the NEW way of doing things.

 

[Manuel]

is this option IBMC going to be deprecated in a specific date?

 

[Garth]

yes... It would be listed within the docs but CMG is the new way of doing things, What is wrong with using it?

 

[Manuel]

My customer is not allowed to use CMG due to government regulations
He can only use IBCM. Tell me, do you have any article where I can check every single detail in order to take remote control from the intranet to the corporate computer from users that are working remotely without VPN?
Those computers are corporate laptops that users take to their homes because of COvVD. I mean, they are currently part of the same AD domain
As long as, in the configuration manager, I understand I will need PKI, read-only Dc, https communication, mp in the demilitarized zone, and I still check
Any good advice will be grateful

 

[Garth]

IBCM does does do RC directly, only CMG does that. if you want RC over the internet then you will need to look at a 3rd party tool.

 

[Manuel]

IBCM hace RC directamente, solo CMG lo hace. Si desea RC a través de Internet, deberá buscar una herramienta de terceros.

Thank you Garth