[freakinvibe]

1. No
2. I have re-created the policies we already had on the old system and cleaned them up (we don't use the default policy).
3. No
4. We use groups, which we assign at user creation time. Users get the correct policy automatically through the group.

We used transporter and it worked very well. I migrated users in batches of 20. We also had to re-create our pushed apps, but the process has got easier with version 5.

I first hated the new web admin console, but got used to it. We enabled SSO for it so I don't have to login all the time.

Good luck!