A new employee, E, will be working from home. Production environment.

What is the most securce and elegant way to set up a network to allow E to log in to the server?

Main office: server is Ubuntu 12.04.1 LTS, serving up Samba shares to a half dozen Ubuntu 12.04.1 boxes and an Win XP Pro box. Desktops running LibreOffice and some vintage Windows things via Remmina. Connection is cable behind a router.

E's computer: will probably be Xubuntu 12.04 LTS. Connection is DSL behind a router.

I am thinking I want some sort of an ssh tunnel. I have done an ssh tunnel to a proxy server using tsocks, so I wonder if this would be similar?

Or is there a better way than ssh? Or in addition to ssh?