You can use Shared Folders to allow them to access their home drives without it needing to be on the domain. This maintains their permissions and disk quota for example. I'm not too sure how you could let them sign into VS without opening anything else up.