Here is what I imagine will have the least impact (and I'll probably lab it up to be sure)
Regarding rebooting the cluster, should these be done one at a time waiting for one to come up before rebooting the next? We have some subs where TFTP has been offloaded . I assume everything will need to be rebooted.
Here we go
2. Apply to Pub then TFTP servers then all Subs.
4. reboot Pub wait for it to come back up, then TFTP servers, then Subs (I prefer one at a time)
One other question I had. I assume I only need to change device defaults back on the pub correct and then that change will filter to all the subs?