I work in an environment where all network users must logon using Smart
Card Login and everyone must have their SSL Certs published to the
Global Address List.

Some clients connect back to the home network remotely using the Cisco
VPN Client. Those users are unable to publish their certs to the GAL.
It has been our experience that VPN clients usually have full access to
the domain via VPN and that whatever resources would be available to
them in the LAN are also available via VPN. This is apparently an
exception.

Does anyone know what might be preventing the process from completing?

Steve