Parts of GP will apply over VPN connections, but not necessarily all of
them. It depends on the speed of the connection. To get all the GPs,
the users will have to be connecting to the network over a pipe thats
at least 500 kilobits (by default).
The ADM templates, security settings, IPsec policy, EFS, and software
restriction policies will be applied no matter what. Scripts
(logon/logoff), disk quotas, folder redirections and IE settings are
not automatically pushed out.
To change what is defined as a 'fast enough' connection, change the
Slow Link Detection policy. You'll want to modify the 'fast
connectivity' definition.
Hope it helps,
Colin
