If your just looking for machines that do not have MEP at all, then drop the version check.

Maybe need to do an OR, if you are allowing MEP but only if it is not a certain version.

(McAfee - Check EPO Agent Version is '4.8.0.1500')
and
(((Application Title is 'McAfee Endpoint Protection for Mac.app')
and
(Application Version is not '2.1.0'))
OR
(Application Title is not 'McAfee Endpoint Protection for Mac.app'))

The goal is to deploy the McAfee Endpoint Protection for Mac 2.1.0 package to a group of systems. Then once it gets installed the computers drop from the smart group. I have the package setup with a trigger of recurring check-in and executing once every day (inventory runs every day also to keep the smart groups accurate).

So for example, If I have a system with version 2.0 I'd want the package to run on it, but then stop once the version shows 2.1.0. Then if someone uninstalls the software (since they have local admin rights) or puts on a different version then Casper will catch the change and redeploy the app. That's why I need to include version specific information in the criteria.

@alexjdale, I tried that just now, but I get a message stating "Criteria following a criteria group can only be joined by an AND operator"

What the heck is a "criteria group"? Not sure what that means as I've never run into it.

Can't you just do something like:

Application Title | does not have | "Application name"
OR
Application Title | has | "Application name"
AND
Application Version | is not | "some number"

I would think that would work to capture any Macs that do not have the software installed or do not have the correct version installed.

@mm2270, A criteria group is when you have a left and right paren around a group of criteria.

I set up as close as I could to what you had in your example

McAfee - Check EPO Agent Version is 4.8.0.1500
and Application Title is not McAfee Endpoint Protection for Mac.app
or Application Title is McAfee Endpoint Protection for Mac.app
and Application Version is not 2.1.0

I tried to put parens around the last two criteria, but then it automatically changed that "or" to an "and"

Right. Not using 9.x yet full time so I forgot that is possible now.

So, let me ask. What is that first line in your criteria? the one that says "McAfee - Check EPO Agent Version is 4.8.0.1500" Is that an Extension Attribute? Does that have to be there? I have this feeling that item is messing up the creation of your Smart Group, so just wondering what the logic is in having that there?

@mm2270, The first line is an extension attribute. EPO Agent must be installed before EPM can be installed. So this smart group ensures that it is in place before any systems get added in to deploy EPM.

I took a slightly different approach to see if I had better results.

McAfee - Check EPO Agent Version like '4.8.0.1500'
and Computer Group not member of 'McAfee Endpoint Protection for Mac 2.1.0 Installed'

This seems to be working, but isn't ideal since it requires that I setup other smart groups to base this smart group off of. It'd be better to get all of the criteria in a single smart group for simplicity...just doesn't seem to be working. Still not sure why I can't use "or" and setup the parens the way I like.