Oh, Well, then you will have to install the Desktop manager on his PC. Can you do that over the VPN. I know we can with my company. It is a little slow but it gets the job done.
Actually, no, if he has Blackberry Desktop Manager, that is all he needs. He needs to have a mapi connection to his email and then from the BES, just make sure he is added. When he cradles his device it will see he is on the BES and generate keys and get it working.