Not sure why the Group suggestion would be high maintenance. The groups do not need to have any members unless you want them to for applying permissions to some file server. In this case your maintenance is the same since you have to maintain memberships anyway. The intent of the group was simply a place holder in the OU that you would know existed so that if the OU changed names or location you could still find it.
