Set a deploy task to drop VSE on workstations. Apply it on whatever folder you set the "sync/push to discovered" option or I prefer to setup all task at root but disabled. Then break inheritance at whatever level or machine I want to enable it on. I find it makes tracking tasks easier.
Thank u very much.
With best regards