I'm looking for a way to deliver all available applications to the desktop support team so it will be available when they visit a customers desk. We have applications that aren't available to all users or user groups however we want all of those applications made available to the desktop support group when they visit the customer. We do have User Device Affinity enabled.
Consider the scenario where a manager logs onto a subordinates workstation temporarily, if the system is not designated as his primary device, any applications specifically targeted at the managers primary devices will not be available to him on that system.
The best solution I've come up with is to create an AD Security group, add the desktop support team to the security group, make that group available in SCCM 2012 then deploy all applications as available to this group. However when I do this sometimes all of the applications do not show up for the desktop technician. What is the best practice for achieving this goal?