User rights on a 2000 AD network with Cisco VPN

[jszei]

We have 2 offsite users who connect to our network using a Cisco vpn client. Their pcs are part of the domain and can access the entire network without a problem. We have one user who's pc is part of a workgroup at home and is not part of our work domain. He logs in using his work user id. When he logs into our network via Cisco's VPN client he can only access some servers if we add his login locally to the server. This is not 100%. How can we get him to have access to all the shares without making the workstation part of the domain? He would also like to create his own domain at home. Would we have similar problems then?

Thanks,
John