in defining registration rules. how do you all do it ?

our zen zone is split between two countries and then two support teams (servers & desktops)

I want to implement registration rules that will feed the devices into

1. Country A
+Servers
+Workstations

2. Country B
+Servers
+workstations

this is because neither team should have access to the other technology and one country shouldn't have access to the other country

in defining registration rules

is there anyway to add filter sets ?

so that

rule 1. ip address starts with "192.168"
and rule 2. o/s = "Windows 2003 SP1"
or rule 3. o/s = "Windows 2003 SP2"
or rule 4. o/s = "Windows 2000 Advanced Server SP4"

? as the only way I can see it working is having multiple rules like this

rule 1. ip address starts with "192.168"
and rule 2. o/s = "Windows 2003 SP1"

rule 1. ip address starts with "192.168"
and rule 2. o/s = "Windows 2003 SP2"

rule 1. ip address starts with "192.168"
and rule 2. o/s = "Windows 2000 Advanced Server SP4"

or am I going about registration rules the wrong way ?