GPO should update just fine over a reasonably speedy VPN. Are you doing lan-to-lan or client side?
If client side, have him VPN in and then run gpupdate from the command line. If lan-to-lan there may be something else going on. GP Updates seem to be particularly problematic when the VPN mtu isn't set right
MyCCPay Log In