> This isn't a problem when you are on a
> local network with nothing between you and the DC but a switch.
> However, if you are at a satellite location and you must traverse a
> VPN to speak to the DC there may be trouble. This functionality is
> designed to prevent ye-old ping flood among other things. Because
> of this behavior workstations at satellite sites succeed with the
> first normal ping but fail on the oversized one.



Are you sure that this is _not_ the right way to be?? Have you tried to use 
"Active directory Site and Link" and set up the properties of the other 
side? I never tried, nut I am quite sure that between different sites MS 
does not sent a so big ping....
Sorry if it is a stupid thought
Tom