[sivakumar]

Really what lodown expressed is my site scenario, no control on VPN user id termination process. Already we have well built two domains for internal and dealers, and if AD to be integrated, i will use two ldap databases for internal vpn and dealers services access. As well said finally AD and certficate intergarted authentication will give best results, considering business needs, i feel as above.

thanks for all posted for my query.