VNC / NoRM

Greetings, running SLES10SP2, for remote administration I've enabled VNC and
have had no problems connecting to it using a standard VNC client.

3 quick questions:

- Is this a security issue if the server is NOT exposed to the Internet?

- If I have a remote server running at runlevel 3, then I have to SSH and
init 5 to VNC to it, then typically I should do init 3 to remove the GUI
overhead on the server. However if it's already sitting at runlevel 5, for
instance because I forgot to change it to runlevel 3, I would tend to want
to do an init 3, but what happens if in the GUI session I left something
open (such as configuring OES2), will it warn me, or is there some general
advice to follow here?

- While I can connect via RealVNC client, and also via
http://servername:5801/ - if I go into NoRM and click under MANAGE LINUX -
VNC CONSOLES, it says "No VNC services are configured on this machine"...??
Note this only happens if I log into NoRM as the eDir admin, if I login as
root then I can VNC from NoRM no problem. I found a posting from Dec 2008
(novell.support.open-enterprise-server.linux.web-services "No VNC services
are configured on this machine" December 11, 2008 4:16 PM response from
brunold) which found this was a bug, guess it was never fixed? I don't see
any TID when I search on this error...

Cheers
James