Oooh... nice. Looks like some real options here.
Thanks again guys.
I am more immediately concerned with the DEP though, since we are upgrading our BlackICE software and DEP doesn't like the new version of BlackICE when installing on a newer machine with a processor that supports hardware-based DEP.
So I will work on testing adding/modifying a line in the boot.ini (YIKES!)
("/noexecute=AlwaysOff")
Any further suggestions on how to do this (in addition to Bryce's snippet above) would be appreciated since I am a total n00b when it comes to editing existing ini or txt files.

Thanks again!