Well I suppose I need to revisit this myself as I brought up a new one and did the changes I was supposed to do and most clients worked fine but others went into limbo land. It may not have been as secure with the GRC.DAT method but it sure the heck was easy to manage and script that way.