This is my problem - I want the XP firewall to be on when not connected to
the corporate LAN, and on when connected to a non - work network
("untrusted").

The obvious way to do this is via the domain profile and standard profile
options in group policy. However, when configuring this I have noticied the
following issues:

-If I connect a PC to a untrusted network, the firewall is enabled (as
expected), if I then connect using my VPN (contivity) after I have performed
an offline windows login, the VPN creates a virtual network adapter with an
address that should be trusted i.e. domain profile for the firewall, so the
firewall should disable itself. However, it does not do this, the firewall is
still enabled.

I suspect this could be for one of two reasons:
The XP firewall makes the decision as to if it is in domain or standard
profile during the login process and not dynamically
The XP firewall does not like the concept of a virtual network adapter
created by Nortel Contivity

Any ideas?
Thanks,

John