Exclude AVD host deployments

What would the best method to exclude AVD hosts on a software deployment?

For instance, a VPN client should be deployed to all workstations. Since AVD hosts are Windows 10/11, they are considered workstations, but do not need the VPN client.

I see there are a few feature requests for exclusion options. I am not sure if this falls into that category. Perhaps exclude on tag or Azure group?

Other software considers AVD hosts as servers because they are multi-session OS. Perhaps that is a feature request to mark them as servers?

Currently I suppose a filter script could be used, but that sounds tedious. My first thought was to create one that filters out any workstations that contains “AVD” in the hostname. Not sure if we can write a script to filter out workstations with a certain tag.

Any thoughts?

We use a “Powershell” filter script with the following:

Get-ImmyComputer -InventoryKeys WindowsSystemInfo | ?{($_.Inventory.WindowsSystemInfo.OsName -like "*Windows*Enterprise for Virtual Desktops*" -or $_.Inventory.WindowsSystemInfo.OsName -like "*Windows*Enterprise*multi-session*")}