In method 3, instead of making individual adjustments to security principals, you roll back security group memberships to their state at the time of the last backup.