It seems that smart groups include all machines when no criteria is specified. On the surface, that seems like the way it should be, but it's causing a problem for us. We like to make smart groups the scope for certain software install policies. So we make a smart group called "Photoshop CS6" for instance. To this smart group, we add static groups and name them according to specific teams like "Team A" and "Team B". So if we add a computer to the static group "Team A" then they automatically inherit the smart group "Photoshop CS6" and thus get Photoshop CS6 installed through policy.
But we've run into a few situations where we remove the static group(s) from the smart group. When we remove all static groups from the smart group, then the smart groups includes all machines. In the absence of criteria, it assumes that you want all machine in that group. Like I said initially, that makes sense, but it causes a problem for us because all of the sudden every machine in our organization will get Photoshop CS6 installed.
Should we be architecting this differently? Should the absence of criteria not include all machines by default?