With DirectAccess you can connect your Windows Embedded Standard device to your corporate network without the need of VPN.

DirectAccess is a new feature in the Windows 7 and Windows Server 2008 R2 operating systems that gives devices the possibility of being seamlessly connected to the corporate network any time they have Internet access. With DirectAccess, devices are able to access corporate resources (such as data-servers, shared folders,...) securely without connecting to a virtual private network (VPN).
With DirectAccess enabled you can manage your devices anytime they are connected to the internet - without the need of dialing a VPN connection first.
Any time a device is online it can be accessed from your corporate network to service it, upload patches, etc.
DirectAccess uses IPsec for authentication and encryption. Additionally it supports the use of smart cards for authentication.