I believe my last statement says it pretty well.You need to evaluate your scenario and determine what is right but if there is a chance you might need the OS to do one of the tunnels then doing some of the network blocking methods I mentioned might cause more work in the end.Clearly you can run a full Microsoft environment in IPv4 only, the question you should ask is, SHOULD I be doing that in t