Under the dynamic group I would create 2 subgroups. For one I'd use the expression "computer is" and select the machine on which a policy should not be applied and the other one with the expression "computer is not" which would contain all other machines. Then you could assign common policies to the parent DG which will be then inherited by children DG. You could then assign also different policies to the children DG.
