Secure and convenient protocol

Hi,

I manage the network of a student residence, so I don't have any control on the
client.
I want to setup VPN for all clients, and I don't really know which protocol I
should choose. My first choice was MSCHAPV2, because it's well supported by most
OS, but it seems unsecure.

My second choice was EAP-TLS but if I have correctly understood, we must manually
setup the certificat on the user's computer, and we can't afford this.

So, is there a secure protocol, well supported by most OS, with which we don't
need to touch to the client computer ? (with password, for example)

Thanks,
Regards,
Gregoire Leroy





------------------------------------------------------------------------------
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev