2 new devices have been enrolled into a site, and it doesn't need to have most of the apps that are applied to the all mobile devices scope. It would be nice to be able to control a setting to control this for all apps. If there was an option to exclude certain devices from all apps at once, instead of going into each app configuration and putting the devices in exclusions. The workaround is to make a new site, but I am trying to keep it as simple as possible and not have a site for just 2 devices.
seems like you should scope your polices not to all devices and scope them static groups, for what you want. If you have some really good scripting skills you could probably do it with smart groups as well.
This is actually really easy. Going off of @nessts comment, create a smart group that all devices belong and have an exclude static group. The criteria is super easy, as shown in the screenshot below. Obviously you'll want to not use a group named BitsBoard, but rather whatever you want to call the exclude group