Newb Question, Sorry...

I am starting to implement DLU Policies on my network. I would like to go ahead and put the DLU policy "in effect" for all of my users...

However I do not want this policy applied to workstations where I have not prepared the Default User Profile. I see in the DLU policy details where I can include and exclude workstations, but I cannot find out in what order these inclusions/exclusions are applied.

In otherwords, can I exclude my entire workstation container, and then add each individual workstation to the include list as it's are ready? Or do I have to manually add every individual workstation to the exclude list, and then move them over to the include list?

I'm am just trying to figure out the easiest way to roll out DLU "one workstation at a time".

Thanks in advance.