User %temp% folder exclusion

Hi All,

Scenerio: We are running software that cannot be scanned by anti-virus. It resides in the users %temp%/gss folder.

I know Sophos doesn't allow shortcuts in the path, ie %temp%. (Symantec does...) ;)  anyways...  

So... I have went to the client and inserted the full path c:\DOCUME~1\LOCAL~1\etc\etc\%temp%\gss and it works. But wait. When I go back to the Enterprise Console, it states that the computer is using a different policy and is flagged. 

I DO NOT want to see every computer flagged. The only way I went around this was to create a policy for every user. Surely there is a better way to do this! 

Any help would be great! 

Thank you,