Who has access through VPN?

Just curious what criteria anyone has for allowing access to your church network drives through a VPN connection from a home computer. Currently we have very few staff who need access after hours from home. I am trying to establish standards for determining who can access network drives from home? Do you allow any volunteers to have access from home? How to you make sure your VPN users' home PCs are sufficiently up to date to protect against the nasties that abound on the internet? Any feedback you provide will be much appreciated!

Quick Wireless Access Point survey....

We currently have a very low cost wireless solution in place at Pleasant Valley using basic off-the-shelf routers and access points. I would like to budget for a more commercial grade system and would be very interested in finding out what hardware other churches are using for their wireless networks. I have also thought about implementing a Radius server into the mix but need to do more investigation into that. So...what have you found to be useful in your church's wireless implementations?