Thanks Doc,
That seems to work, but I am at home now and I have only tested it on my home network, but it should be OK.
I have not done it quite the same as you describe, because as a school, I have roaming users, so it would be a pain for them to keep joining the group whenever they ran on...