add enrollment rule of Group > IS or IS NOT to enrollment rules field to exclude a specific group a users.
