We use a simple domain logon script that checks for the presence of a marker file. If that marker file is not there, the agent is installed, allowing for further monitoring, installs, etc.
While this is not 100% accurate, it does get most new PCs. Additionally, we periodically review our...