There is no magic formula. You just need to know exactly what your
client is doing. W2k/XP clients will try both Netbios names and DNS names.
The only way to be certain what is happening is to monitor the traffic on
the VPN link (using Netmon or a third-party sniffer). This will tell you how
the remote is trying to access resources.
If the remote client gets the correct WINS address, it should be able to
get a browse list, because it can get the IP address of the DMB from WINS.
(If it can get a browse list, you should see the LAN machines in NN). If you
monitor the traffic, you should see a name server request to resolve the
special Netbios name <domainname 1b> , then a request for a browse list
to the received IP address.
Similarly wirh DNS. The client should get the DNS address at connection
time. If it is getting the correct DNS IP, it should be able to resolve DNS
names as long as it has the correct DNS suffix(es) configured in its TCP/IP
properties.