I have a W2k3 domain. Can I setup a dedicated Windows 2000 IAS server to handle my remote access? My options are kinda limited because I don't have a server with the required hardware to be able to run W2k3 but it can handle W2k. As long as I add the server to the IAS group, it ought to work, right? I don't think it is wise to make my DC's the IAS server for remote access since they are viewed as prime hack targets. Can and do I need to setup certificate server on the same? Am I on the right track here or barking up the wrong tree? Sorry if this seems like a silly question, but I have no one else to ask and can't find my answer on the Internet. Any additional suggestions or material links will be appreciated. Thanks, in advance.