Exempting a few machines from scheduled scan

There's no way that I've found to explicitly exclude endpoints from a policy. However, you can implicitly exclude endpoints by not explicitly including them. I think there are a few ways to accomplish your goal...here's how I would go about it:

Create a new tag that will contain the endpoints to be searched using a scheduled task. Move the endpoints to be searched to that tag, or, if you don't want to disassociate the endpoints from other tags, simply add the endpoints to the new tag such that they will belong to more than one tag.

Create a new scheduled task policy and ensure that it is lower priority than your other, existing policy. Adjust any of the settings as needed or leave the settings as is if you want settings from higher priority policies to be inherited. Add the scheduled task for the new tag to this new policy.

Lastly, remove the scheduled task from the existing policy that applied to all endpoints.

I haven't tried this, but I think in theory it should work. Of course, it might be wise to test in your environment before implementing fully.

-Dan