Group policy/Applocker & Restricted Groups) http://social.technet.microsoft.com/wiki/contents/articles/27751.some-usefull-features-with-windows-group-policies.aspx
SCCM 2012 R2 Create a Collection based on Active Directory Organizational Unit sCCMcreatecollectionbasedonou