UPDATE: A powershell based GUI script has been released to make some of this easier ( http://gallery.technet.microsoft.com/office/Client-Access-Policy-30be8ae2 ) The story below can still serve as a useful tool to understanding what is going on behind...