We need to find out what MS recommends as far as a network configuration
‘best practice’ to allow non-employees access to a specific application on a
server on our 2003 Active Directory network.

More specifically,  the application is a client/server model.  

Also, we are looking for a ‘tight’ security solution here.  We really do not
want the remote users to be able to browse our internal network, only run the
specific application.

Thanks!