The machines were booted to automation using x86 WINPE. 
This resulted in them being initally added to the x86 filter groups on the NS

Allowing sufficient time for the machines to submit a basic inventory after booting to production, and the resource membership update to run before deploying agent plug-in policies resolved the issue.