Is there a way to configure a scope based on machine types, such as Servers or Laptops only?
Scopes can limit access based on orgs, groups or machines, but not by type.
If you were to have groups
then this would easily be achieved, you would just limit the scope to the acmecorp.workstations group.
However, if the servers and workstations are all in a single group, then there is no simple way to do this - the scopes just see machine names, not machine type. The only way is for you to select the machines and add them to the scope individually, or use the machine groups to logically group machine types (as per the acmecorp example above).