Lol i just spend 30 mins to our "nice local" support only to discover that the reason it doesnt deploy to new machines is as you have all discovered its not a feature thats built in like it was in 3.6 However all was not lost, after reading the tech sheets, setting it up and working with it for the last 2 weeks or so i think its actually nice now to work with and prefer it. However our tech support guy suggested i put a AD sync and deploy rule every day which in theory sounds great but in reality is useless if the following typical scenario is used. 9am - Build new laptop for user 9.30 - join it to the domain. 10am - laptop built, profiled, and issued to new user 10.30 - laptop in new users car boot halfway down the M6 motorway 11am - AD sync occurs and trys to deploy agent via new patented "wonka push"
so in theory in a nice manageable static setup its not a problem, however back in the real world - its pretty useless.
Formatted EPO4 and clean install of 3.6 again
Mcafee if your going to do half a job at least stress to the poor saps like us that have to use this rubbish the pit falls before we fall into them, or have the courtesy to provide a ladder so we can climb out.