I create policy to block executable applications for all my computers in my network but I need to exempt 2 of them from this policy. create groups is bothering because in some situation u need to change your policy from all users to 2 users. what shou I do?because  I need to create mixed policies to specific users.