The Apply tag now feature in ePO 5.10, which is available when building and configuring a tag within the Tag Catalog, ignores computer properties, for example, the Endpoint Security version. Thus, the use of the Apply tag now feature can potentially apply the tag to unexpected systems solely based on any configured system properties, for example, the OS Type.

If the tag is also configured to evaluate 'tag criteria' and apply on the agent-server communication interval (ASCI), the tag is correctly removed and is applied only to systems that match all the required criteria. But, this action doesn't take place until the system communicates on its next ASCI.