There is a small subset of machines I want to exclude from scanning, and I may not be able to remove them from the OUs they are in (complicated AD/GPO structure). Is it possible to exclude certain machines by scanning in any way? I only see to change scanning from the root of the domain to specific OUs