New Post: Exclude autoenroll certificates

Thanks for that. And I presume, to exclude those auto-enrolled certificates, we would use the -bnot operator ?

However, when I use that, PS carps that the token ( -bnot ) is unexpected.