VPN

I configured my windows 2003 server for VPN. I want to restrict some users for accessing some network shares.
The restrictions i applied work fine if the users are connected to the server over the LAN. But when they access the server over WAN by using VPN, they have access to everything. Any Ideas???