webmail access no logon rights

I have a group of users that work remotely and need to access their email via the outlook web interface. I do not want allow these accounts rights to log into my LAN. We are running AD and Exchange 2003. How can I make this work?