We have several workgroup clients using PKI that are do not have the same enabled Components Agents as the domain clients also using PKI. In particular, the Power Management and Remote Tools Agent remain in Installed status but are not Enabled on the workgroup clients.  As soon as I join these workgroup clients to the domain, the connection type switches to 'Always Intranet' from 'Always Internet' and the Agents are Enabled.  Boundaries have been established for the domain clients (AD Site) and workgroup clients (IP Subnet).

Any guidance for troubleshooting problematic Agent installations in CM2012?  

Thanks

This has nothing to do with boundaries. Are there custom client agent settings deployed?

Yes, I've added Remote Tools and Power Management under Custom Device Settings.  Remote Tools is Enabled with firewall exception profiles for Domain, Private, and Public.  Power Management is enabled too. 

Are those custom settings deployed to a collection that contains the workgroup machines?

Yes. Workgroup and Domain machines are in the same collection for this policy.

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

Since no one has answer this post, I recommend opening  a support case with Microsoft Customer Support Services (CSS) as they can work with you to solve this problem.