I’d hate to work in an environment like this. I’ve gotten to be friends with the Desktop IT folks to get them to remove me from 99% of the stuff they push through JAMF on my mac. Mostly because I’m very unorthodox in how I set up my machine primarily because my job is mostly research and trying to figure out things. Trying to shoehorn me into a normal user would cause them way more headaches than it would solve. It also helps I know as much or more about most of the tech stuff and I’ve been there as long or longer so I have some “seniority”-ish.

With all that being said, my go to right now for anything remote is Tailscale. It’s super easy to setup and understand. I have networks setup in all three of my data centers and also for home. It makes everything super easy to access. I know that this doesn’t work for most people with a super restricted environment but I thought id mention it for folks that can. I do not work for them nor do I get any sort of compensation. I just use it because it makes my life easier.