ZFD 7 latest support pack on NetWare 6.5. MiddleTier server on NetWare 6.5.

I have 500+ mobile users. The IT Support staff need to be able to remotely control these machines via VPN connection.

User logs in using "workstation only"
User establishes telecommunications link (via various means)
User establishes client-to-site VPN connection, Novell BorderManager 3.8

At this point I need the workstation to authenticate itself to eDirectory - I gather that without this we can not remotely control the workstation.

How do I get this to work?

Any tips, hints, advice, etc would be most welcome.