I use openvpn. You can almost certainly do anything you need with it and it's less likely to hit firewall tunneling issues than IPSec. I have no clue about windows clients but there are bound to be some.

Technically optimum is to use UDP but some hotel wifi will block it so I run it on TCP port 443 for maximum accesibility.