Oops - one more thing!If we are talking about Windows end users here (aren't we always?) add Samba to the equation as well. Samba shares accessed through openvpn tunnels are the simplest way to provide remote "shares" to users - and the WINS server stuff, dns, routes and everything else required to allow Windows users to function without thought or understanding can be automagically pushed through the openvpn tunnel on establishing connection.
-- Bill Strosberg