i have a windows 2003 active directory and most of the computers are winXP. I have a few Vista machines. I also have a VPN, it's through a company call Corente. for the XP machines the VPN works great, for the Vista machines it doesn't work very well. Corente insists that it's not their VPN. So started troubleshooting by loading a fresh install of Vista, and the VPN, but didn't join the domain, and the VPN worked. Next I joined the domain, and now the VPN doesn't work, so obviously I thought it must be an active directory policy. So I took the computer off the domain by going to my computer properties and choosing the computer name tab and clicking the change button, then put in a workgroup name. I rebooted but the VPN still doesn't work. So I went to gpedit.msc and noticed that it appears that some of the active directory policies are still being enforced. I didn't want to reinstall Vista, so is there a way to make sure all domain policies are wiped out?