Thanks I'll have a look at the dungog.net contrib.
I don't use VPNs for remote users as:
A) Too Flakey
B) Too Complex
With an ssh tunnel I can set up their laptops with Tunnelier (Freeware), which establishes the SSH, and the tunnel, then launches Remote Desktop, all from one double-click.
Nice and easy and no support headaches for me.