Hi, There is a Win 2K server box, and I need that ALL of its users have the posibility to change the properties of the VPN connection, specifically the destination host, since (at least for now) it doesn't have a static IP address or dynamic dns service. As far as I now, only users with administrator privileges can do this, but I'd like a more secure option. Even the smallest hint will be welcome... you know bosses always want this kind of things done by yesterday.

Alright, here are some ideas. First, you have different levels of user rights. You may be able to designate someone as a Power User and find that they can do this. It is not a good idea to add other people to the admin group, since they would then have as much power as the administrator - even being able to change your password and lock you out. You can also set up a gateway so that you use dynamic addressing on one side, but on the back end (in your network), you are using static IP addressing. This involves using a proxy. It's a little tricky, but can work well. One practice has been to use IPX/SPX on the back end since this increases the level of invisibility your PCs have to the outside world, but hackers have learned to hack you anyway. Best suggestion is to include a firewall to protect your network. You can find firewalls already buit to fit your every need, so that you only have to program in a few parameters. This is probably your best approach.