A client may connect to a server over an insecure network by downloading and configuring a secure connection mechanism to the server. The secure connection mechanism may allow the client to join a domain when connected to the server and access domain level services. The server may receive a request from the client, classify the connection type, and used the classification to determine whether the request originated off premises. If so, the server may send a configuration mechanism to the client, which may then establish a secure connection to the server. Once the secure connection is established, the server may join the client to the server's domain and begin secure operations.