Since he has never logged in to the computer he does not have any cached cradentials on the the laptop to authenticat against.
your only option is to establish a connection to your network for him to authenticate against. Some VPN clients have the option to connect prior to login, but you might have to get the laptop back inhouse to log him in.