According to Symantec, in version 10, the GRC.DAT file MUST be distributed MANUALLY to each client when using clients are managed by CLIENT GROUPS and not SERVER GROUPS.

The issue is that no matter WHAT changes i do in the Client Groups, the changes are never made on the client! The GRC.DAT file is changed on the server, and dissapears on the client after Symantec have read the file. So everything looks to work perfect!