Currently if an endpoint is disabled, it cannot be added to an exception group.
Ideally it would be beneficial to add a device to a pre-made exception group where the agent might be in a disabled state for troubleshooting purposes.