Casper,
Its a little difficult to get a full understanding of how you'd like to configure your packages without discussing it directly. It would probably be best for you to call in to LANDESK and go over your requirements with an engineer. As a possible side note though I believe using some LDMS queries, in place of the LDAP queries, would help narrow things down for you. We do store LDAP info in the inventory and so you can query it form there as well, enabling you to still query based on LDAP membership but add in other metrics as well such as OS version, or other requirements.