I might possibly have 3rd party host that will be connected to the internal network and I want to make sure it is separated from all other clients and networks as well as giving the company the most secure access (VPN Guest Acct). I do not believe the host will need internet access. I have a few ideas on how to accomplish this maybe using group policies but do not have all the details of the intended use for the host just yet. I would like to hear how everyone would approach this situation. Thanks in advance!