I understand the issue that you describe, I wish I could help you further, but unfortunately at this time the permissions are not suitable for allowing users to only deploy to specific assets or a group of assets.
I would recommend contacting your Lansweeper sales contact and explain to them that this functionality is critical to you. Additionally, I will link your topic to the existing feature request.
As for options that you have, in the near future at least, it will indeed be either not use deployment, or, try to create good guidelines on how to use it. Some things you can do to try and eliminate possible mistakes:
- Create asset groups and reports which can be used by your desktop team (maybe give them a specific mark so that the desktop team knows that they are only allowed to use groups that start with DESK)
- Clear listing of the naming convention for your servers, so they do not get accidentally selected for a deployment, alternatively, you can adjust your naming convention to make this even clearer.