finally... a nicer way to do the ACL when not on a domain network!!