@GregE Sorry, no, we were not able to get it working. Instead we setup
an Advanced search that looked for the attribute matching the regex
expression ^$ That returned all the devices where the field was blank.
You could use that in a Smart Group.
@bearzooka Thank you very much for the EA. We are trying to implement it
in our environment. However, when there are no users on the Mac that
have SecureToken Enabled, it is returning nothing instead of "No users
have a Secure Token". Can you advise ...