Ask HN: How would you manage IT for remote only workers?

My company currently uses the traditional Active Directory/VPN model. This has been less than ideal for people forced to work from home. Since it looks like remote work may become a permanent thing for some employees, what are the current best practices for providing and supporting IT assets to people offsite?