Consider Kaspersky Security Center 10. There is an Automatic installation task created for the Kaspersky Network Agent in the Managed computers group. But you want to exclude one of the subgroups from automatic installation. Is this possible?
Kasperky's Technical Support pages provide information about this on their website for the Security Center. I recommend you access the website to see exactly how the software needs to be configured. Use the menu on the left side to navigate through the available topics. This is the only thing I've found related to Group management, application deployment, and item exclusion.