Dear Stephen and Joeal,
That is 100% correct, that is best policy. Create a group for each type of deploy, and move systems into those groups. I have 4 groups WS, SVR, Exchange, and Sharepoint groups.. Edit each group, go to shields, and adjust which shields that are on "green" based upon what was deployed to that group!
Sincerely,
J.R. "AutoSandbox Guy" Guthrie
"At this point in time, the Internet should be regarded as an Enemy Weapons System!"