Is it possible to exclude a configuration that is deployed to a specific group in AD from members of a dynamic custom group?  I see that a static group can be applied, but the dynamic groups are missing from the selection window.