If you have deployed DC Agent, and remote users directly log on to named Windows domains in your network, DC Agent can identify these users (see DC Agent).

If you are using a RADIUS server to authenticate users logging on from remote locations, RADIUS Agent can transparently identify these users so you can apply policies based on users or groups (see Configuring RADIUS Agent).

(Forcepoint URL Filtering) With the Remote Filter Module, web protection software can identify any off-site user logging on to a cached domain using a domain account. For more information, see Manage Off-site Users.