I suggest you to not use duplicate-cn.
If desktops are in the same subnet, consider for an endpoint VPN into that subnet (another nethserver via IPsec, for example, or a cheap IPSec-enable router).
Or create one account for every device you need for connect to your NethServer.
Another way could be use the other way around: are the applications that you are using possibly being secured with an higher-security protocol?