So the specifics would be "Windows OS (Client)" but that solution doesn't avoid my main issue of not wanting to do anything manually to add/remove computers. Also this over complicates the issue because each SG only contains one type of computer anyway so theres no need to add sub-DGs. I thought you were suggesting we could:
Computers
Office 1
Computer type 1 SG
DG1 *
Computer Type 2 SG
Office 2
Computer type 1 SG
DG1 *
Computer Type 2 SG
* same DG assigned to multiple ST
It sounds like I'll probably need to reorganize my OU structure which I really hoped to avoid.
Semi-related question, why was the ERA CLI management dropped? I get it's not commonly required but would really help in situations like this. Is this something that is likely to return in future releases?