I'm unable to enable Remote Desktop access for any domain users on a machine on the domain. Under "Location" in the dialog the domain is not available. After much Googling I have only been able to ...

Actually you only need to install the root CA certificate on the non-domain joined machined so that they trust the certificate on the RDP server. You can do that pretty easily via PowerShell.