Windows Server 2003 SP1, ISA 2004 STD SP3. Since multiple updates (including ISA SP3) were installed over the weekend VPN Clients (PPTP via ISA) can no longer RDP to their XP SP2 computers. In troubleshooting, I noticed the source address for the "VPN Client" changed from 192.168.1.100-200 (via DHCP server on the LAN) to 169.254.217.248. Since the ISA policy permiting "VPN Clients" to RDP to their desktops has not changed and the fact that I am not seeing denied connections while monitoring the ISA logs, I can only consider spending some focus on SP3. Unless this is a known issue with a workaround/fix? Thanks! ...D