Thanks for the reply
I wish it was that easy mate. The problem is DAgent >EXISTS< in full on these clients. Hell, in most cases, the service is STARTED and yet there is no connectivity with the server.
Because of this (the fact the service is started and the files exist), the only way I can accurately target the machines I want to (AFAIK) is to query the DS database directly and compare it with a "better" source of truth, eg AD or NS.