We have remote employees where their laptop has died and they need a replacement. In order to prepare a laptop to ship to them, we currently ask them for their username and password (ouch) so that we can login to the laptop and create the Windows user profile for them while the laptop is on-site and can connect to the domain.
Preferred solution: I'd like to be able to ship them a freshly imaged laptop as-is, without any configuration unique to that user, so that we can respond to these requests more quickly. Ideally the user could just remove the laptop from the box, enter their username and password and off they go. Is this possible, and if so, how?
The research I've done so far indicates this may be possible by using Windows 10 VPN at the login screen to connect to the domain first, then do the user login using their credentials. We currently use a Fortinet VPN, so not sure if this would be possible.