I use VPN and terminal services to accomplish the above.
Our company uses a custom program, MS office, quick books plus a payroll program (employee login and logout).
We have no problem in what you mention you want to accomplish:
1. Backup, we have 4 servers, 2 Domain Controllers (DC)(one of them is also a File server and the other a print server), 1 VPN/Terminal Server (TS), 1 application server (SQL, IIS, Exchange). when a user logs on to the VPN/TS the only thing the user gets from the network thru the VPN/TS is the TS desktop (which includes all the programs), all the data is stored on the DC that is also the file server, that machine has a Hardware controlled 3 disk RAID 5 HDC, and a Backup drive with a backup program that handles the backup. Evry thing that any user saves is saved on the file server, since the home directory is also on the file server.
2. Connectivity, since the connection is over TS there is no problem of connectivity since TS makes it look as if the user is loged on localy. However I found 1 thing to a bit of a problem and that is; printing. Not all printers (I'm talking about printers connected to the clients local computer) will work over TS (even win2000 terminal services which uses RDP 5.0). Even when the prinder does work there is a problem with large print jobs that have to travel over slow links.
3. Syncronisation, this problem does not exist with the above setup.
4. Security, while micorosft states that their PPTP is secure enough, not every one agrees on that, check out http://www.counterpane.com.
PPTP in windows 2000 I think is much more secure than winNT 4.0. IPSEC is the most secure solution for a secure VPN envirnment. I use Windows 2000 PPTP and RDP security.