Yes, I believe you can. Associate the login script with the userid in the normal fashion. The key to making it work, is that the user has to do a C-A-D logon on the client, and tic the box that says "Login using Dial Up Networking". Select the VPN client/connection, and voila.