Fog and sysprep.

Guacamole with the totp plugin or reverse ssh with a key. The reverse ssh will get around just about any security if setup properly but guacamole is like pleasant to use and doesn’t depend on software.