Inactive devices in Defender 365

Good morning:
I have devices that are inactive for more than 30 days as "Non-compliant" in Intune. In Defender 365, the devices appear as "inactive" but they are not "excluded" and it affects my security score, fixes..., I have reviewed the documentation (https://learn.microsoft.com/es-es/microsoft-365/security/defender-endpoint/exclude-devices?view=o365-worldwide) but only indicates the option to exclude manually. Is there a way to automatically exclude devices that are down, but if they come back up, automatically include them again? Thank you!