I provide after hours support. Only company owned laptops are allowed to use the VPN to communicate with the internal network. Not for technical reasons as much as political and practical.
If I ran things... I'd have a company virtual machine image I could run on a home computer, and that image could access the internal network. I can understand that's a lot of work just so you don't have to haul a laptop back and forth.