Can you please be more specific? What do you mean configure a new machine without touching the rest of the enterprise?
If you want to tarde a new machine I would use exclusion. That way I could create a smart group that would exclude machines already setup, that way every new computer would fall out of that category. You could write a bom file in every enrolled Mac in order to differentiate new machines from already configured ones.
