Hi,

IMO CMAK is junk, I used the Group Policy Preferences and did just want you want. I have used them to replace the existing VPN settings with a new one, and I have used them to create a new VPN, works like a champ as long as you have the CSE's installed on the boxes...

I made my VPN GPO and assigned it to a group called L2TP VPN. Then any laptop that was added to that Security group gets that policy and gets the new VPN.