Here is the situation:

We have a teacher network being managed in one tree (education tree) by
Zen. We have an Agency tree being manged by ZEN as well.

The teachers will need access to the Agency tree for certain applications.

The problem is, that we have ZEN built around groups like "Everyone"
or "Everybody" that gives rights and also deploys those applications.

Is there anyway we can assign those groups to those teachers, but not
have Zenworks push anything down to them? They just need the rights from
the groups in the Agency tree.

Only solution I can come up with is making a lot of new groups and
assigning the same rights, and then removing all the teachers and adding
them into these new groups where Zenworks is not assigned to, and that
would be a lot of work and kind of bulky....