Not sure if there's a right "answer" or not ..
I think the only "fair " way to do it is to make everyone log in to their account online, one device, one purchase...
The in person purchase seems to be the most abused and most lucrative...I know guys that have become mules and buy for more than just their group...
It's also suspected, as witnessed by a friend, that clerk's first few purchases are for people not in line...I'm guessing a couple Benjamin's gets you that privilege...

Our group gets tags we want every year but we aren't hunting the popular spots.
I get the frustration of not getting a tag though...
And it sounds like there was a number of glitches so not sure how far people will take their grievances...
My online number froze for 15-20 minutes and actually increased a couple times... 🤔