Can his VPN access anything else within the corporate network, and only RDP access is failing?
Has he allowed his work PC for RDP access? Any personal firewall enabled on the work PC that might prevent RDP access?
I assume that the group policy for the vpn has been correctly configured to allow access?