I use something similar. I have collections just for installing applications. I use SCCM injector to add computers to the collections. It works well, but you see every collection and can add to any collection. I am going to give it a try with an intern and SCCM 2012 next week some. I'll let you know what I end up doing.