We tested out Pulseway a while back but weren’t confident in it’s patching process. We ended up using Action1 because of the price and the simplicity of it. They have a good community on discord that’s always helpful and they’re consistently adding new features. The also host weekly webinars (usually about patching) to help to get up and running.
I guess RMM is a broad term though, cuz I’m not sure about the VPN to AD situation you’re talking about. Are you hosting Pulseway on your own server?
AFAIK Action1 is only cloud-based right now, just install the agent and go. You can also set up a service account on your DC and use their deployer to auto install the agent on domain devices.