Hello,
Scanning exclusions only work on asset type, IP ranges, domain, domain, or computer name.
Setting up exclusions on other criteria is not possible at this moment.
You could set up a scanning target based on a report or asset group. You can use conditions on those based on the state.
In this way you will miss new assets however but you could enable in in your IP range targets the option "Scan New Windows Only". These combinations might give you a few options.