Your help desk staff should be in a separate group in your AD.
These users are your internal licensed help desk staff who will create / respond to and monitor tickets on your help desk.
Create a New Rule and add this groups – in this example they are in a group called “Information Technology”.
