Okay thats a simple one.
Solution a) is you create a new query that filters for systems in your Systemtree-syncfolder that have no agent installed. Then you create a new servertask thats runs for example hourly, select the query you created and as a subtask you run the "deploy McAfee Agent" task with all the details you like add there.
Solution b) would be to create a global Client-task attached to your Systemtree-root or if you like it better to your ad-sync-folder. Here you can create an Agent-Deployment task. In this case i would choose the "run immediately" option.
If you need more advice feel free to ask.
Thanks, that's the screen I was looking for. I just didn't know where to find it. Everything works great now when new PCs are added to AD, and I also have a task that deploys the agent to any unmanaged system every hour just in case it didn't get deployed when it was initially added to AD.