1. A computer-implemented method comprising: receiving a first request to provision a virtual computing environment, the request including a set of encrypted domain join credentials capable of being decrypted through the virtual computing environment and usable to authenticate a domain user of the virtual computing environment, the set of domain join credentials associated with an account specifying one or more permissions for accessing and creating computer objects within a directory; provisioning the virtual computing environment; transmitting, to the directory, a second request to join the virtual computing environment to the directory, the second request including the set of domain join credentials and a set of machine credentials corresponding to the virtual computing environment; adding one or more user accounts to a group of user accounts specifying one or more users authorized to access the virtual computing environment; receiving, from a computer system, one or more access tokens, the one or more access tokens specifying an identifier corresponding to a user account; and as a result of the identifier corresponding to a user account of the one or more user accounts, establishing a communications channel between the virtual computing environment and the computer system.