How to add a domain user account on a laptop without login on it?

Question

Hello,

I'm doing IT helpdesk and for one of our customers we're trying to figure out how to get a user to log in without him being there. We have Domain users.

So a laptop user is abroad and connects to his machine from an external network and launches the VPN to connect to resources. He has a big problem and we have to replace his machine.

We have to prepare another one and send it to him back abroad.

How can we get him to log on so that his account is recognized when he connects off-net to his destination?

The only way I can think of would be to connect with an admin account on the machine and then register the account on the leplaptop as if the user were logging in, but without logging in.

Under GDPR, you can't ask for your password to log in.

I see the Settings/ "Email & accounts" / "Add an account" or "Add a work or school account" option.

Is it enough to add the user there by means of his domain ID so that he is known to the machine and can connect to it when we send him and he connects to an external network?

The aim is not to have to type in his password, as we can't ask him for it.

We don't need to see the data from a possible roaming profile or OneDrive sync, just have it recognized on the machine.

You could reset your password first, but then you'd log in with this new random password and have access to the utility's data (email, OneDrive, roaming, etc.)... which is not allowed by GDPR.

We could login with a regular user of Helpdesk team and then launch the VPN and there we enter the concerned user's Domain userID and we aks him a token code to enter too. Is it enough to create locally the account on this machine ?

What solution has been put in place for this case since GDPR plz ?

Regards.

Thank you.