How can we ensure that all of our Windows workstations are excluded from agentless scanning?
You can use the LsAgent only option under the LsAgent configuration. If the assets do not show up under the Default LsAgent view, they could be merging with another asset.