Active Directory Setup - Creating VPN (Server 2012)

Note : If you don't have time or have many projects to handle please don't bid. We need someone who can work asap and finish this task asap. Introduction We have 2 offices which are located in different cities. So we will create VPN and Active Directory. Office1 3 PC Office2 2 PC VPN * VPN won't share Internet connection. PCs will connect each other and be in same network in INTERNAL. No settings for External. * We want to build Windows VPN instead of OpenVPN. Our choice is that. * VPN will work together with Active Directory *Create safe connection for wireless which won't be in same network with PCs. We don't want to be in same network with mobile devices. Active Directory *Creating SuperUser , Normal User *SuperUser can do anything all access Normal User *Can install software and uninstall software without UAC (dont prompt for password) *Can't share any folder but can view shared folders with that user *Can't open PC with Safe Mode (If possible. We don't know possibilty) *Can't stop running services If Safe Mode is open. *Can't encrypt disk with User base not PC base. *Can't change IP address of PC *Block some ports which we will give. *Can't change password of PC and disable Active Directory. We tried Active Directory before. But we faced some issues. Normal users were installing softwares to their PC without UAC but that software shortcut was not coming to Destkop and Startup. For example we installed winrar and when we clicked folder and tried to make it rar there was no shortcut at right click to make it rar. Please note that we have also installed Safetica DLP to our network. Your system needs to work with it as well. We protect many things with Safetica. We will have one good VPS server and will give you access. VPN and ActiveDirectory will be in same server.