Hi Marco
my experience with this was to setup VPN then remote as admin (since end user profile doesn't know anything yet about your VPN) assuming you have remoting solution on end user's computer.
then apply gpupdate /force then switch user while VPN still connected and have user login and finally do gpupdatep /r to see if new gpos are applied
