CA question

We are looking into setting up a Windows 2003 CA but im having some
issues finding the proper information on what type we need.  We are
looking to issue certificates for the following:

1.  Internal web sites.
2.  VPN access.
3.  Signing software such as ActiveX controls.
4.  Using SCEP for signing Cisco routers.

It seems I should be fine with a stand-alone root CA but im not sure.
Any help would be great.  Thanks.

Yes, it would work, but would be a lot of extra work for any CA administrator.

Yes, it would work, but would be a lot of extra work for any CA
administrator.
I would start by looking at either my PKI book from ms Press or looking at
the www.microsoft.com/pki Web portal and reading the Best Practices white
paper.
Brian