Would anyone be so kind advising on the rudimentary question on network design.

1) How the Win2k domain controller interfere the VPN network?

We have brunches in Europe, and now we plan to singularize the European network via VPN connecion with inexpensive IPSec. (This is not the MPLS-based VPN network.)

Amongst the brunches, 2 offices already have implimented Win2k Server, as PDC(Primary Doain Controller) for pure file service (file server). Other brunches are not using any domain service.

Do you think PDC would interfere in anyway against the VPN network?

2) Is it possible to change the IP address of users in Win2k Server into new IP address? (e.g. currently users have 192.168.x.x range. Is it possible to change the IP into 172.19.x.x range?)

Each brunches has implimented class C IP addresses. No DHCP is implimented in all offices. Only 3 brunches have implimented DHCP. Each office has merely 20-40 staff working.

After the VPN implimentation, I have planed to assign different subnets: 172.19.x.x ranges (Class B non-routable IPs). Currently all the office as assigned class C IPs (192.168.x.x).

3) Is it possible to change the Win2k servers workieng as PDC into workgroup server?

4) If 3) is possible, is user profiles (desktop setting etc) would be lost completely?

Please advise.

George Assai, a young junior DB person.