We have some collections set up to dictate who receives controlled software. The collections use "Query" as opposed to "Direct", and a simple "System Resource.Name is in ("HostnameA", "HostnameB")" ...