Keith,

From what I understand, if the users are set up on AD and the computers are joined to the domain, then all you would have to do is configure their access on the firewall. Once they are authenticated through VPN, it would be as if they were in the office. Hopefully, I did not misunderstand your question.