how to scope Macs to machines in the prestage enrollment (devices in DEP)?

[jwojda]

I'd like to scope a policy that applies to devices who's serial numbers are in the prestage enrollment only. The 10.13.x option of DEP enrollment: Prestage XXXXXX is well and good, but we have hundreds of devices that were imaged in the traditional way and didn't register under that even though they are technically DEP capable.