We did. We do scopes based on OU/LDAP location so technicians can only see PCs in their location.
We then had to create a "Provisioning Scope" for PCs being Provisioned.
For this one, it's PCs w/ an undefined Device ID, PCs with the name of Windows-, PCs without a Computer Location and PCs that have our "Provisioning Miniclient" installed.