Many remote users connect to the corporate network using a VPN connection. Typcially they login to the local machine and then launch the VPN connection. However, it is possible to initiate the conenction before logging in allowing the user to be authenticated via Active Directory.
When logging on there is a check box available that will allow you to choose a dial-up connection to logon with.
This box needs to be checked everytime, however it is possible to force this box to be checked so users cannot forget! Open up the registry and drill down to
HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon
Create a new REG_SZ called RasForce and set the value to 1. Reboot the computer and the box should be checked! This works for Windows 2000, XP and 2003.