Contractors using laptops from their own company's domain need to connect to our corporate wireless, printers and network shares using domain user credentials we provide them with.
They can map drives and printers, connect to 802,1x wireless with these accounts as well as connect to Outlook and Exchange Activesync with these domain user accounts.
The problem is that they always forget to change the passwords or change the password and then forget to update the password changes in all the various places they have saved passwords, such as wireless configuration, Exchange Activesync and mapped drives.
What is the best way a contractor can access these things and avoid the hassles of account lockouts and having to remember to update saved password in multiple locations?
I thought of smart card authentication, but I was told that only works from computers if they are joined to our domain and their laptops are not members of our domain. Only their user account is a member of the domain.
What are best options? Are there certificates that can be installed on their laptops and come kind of certificate based authentication that would enable them to bypass these issues?