Ability to Exclude Certain Users/Machines from Specific Global Maintenance Tasks

This process seems to work for being able to filter deployments by using Tags and a Filtering Script:

I have successfully used it to deploy different power policies on managed computers within a tenant.