I have a device collection of NON-DC servers for endpoint. I need to exclude a small collection of servers that are in a new collection.
Can I simply exclude the new collection as a direct membership rule? (I assume this will work, but want to be certain.)
..or do I need to add a (not in) in the existing query rule?