Overview of Solutions for Managing Resource Access for Non-Domain Devices

Windows 8.1 provides several features that enable computers that are not joined to a domain to function as you require. These devices are
becoming more common and important to the
overall client management process as
organizations adopt policies that enable users to
bring their own devices into the workplace—a
scenario known as Bring Your Own Device (BYOD).

Workplace Join
          Workplace Join enables a device to be neither completely joined to a domain, nor be completely isolated from it. With Workplace Join, users can
work on a device of their choosing and still have access to enterprise network resources. IT administrators can control access to resources and provide a finer level of control over devices that register through Workplace Join.

Work Folders
          Work Folders enable users to synchronize their data from their user folder on a network to their own device. When you implement Work Folders, locally created files also are synchronized back to a network folder location. You can configure Work Folders to synchronize network files without having a client joined to a domain. In versions prior to Windows 8.1 and before Work Folders were introduced, domain membership was required for this type of synchronization, and the client had to be connected to a corporate network to initialize synchronization.

Remote Business Data Removal
          With Windows 8.1 and Windows Server 2012 R2, you can use remote business data removal to classify and flag corporate files and to differentiate between these files and user files. With this classification, the remote wipe of a Windows 8.1 device will not remove user-owned data when securing or removing corporate data on the device.