Deployed NS agent via intune to windows 10 machines ~4000. the deployement was successful however we seen a rise in agents on machines not steering traffic as intended.

This is very random and given the users are machines are part of the right groups and OU 

Troubleshooting Done:
1. Enough Licenses ---check 
2. User part of the right group ---check
3. Device sync fine with intune ---check 
4, windows up to date  --------check 
5. manually update version ----Done
6. unstallting agent -----Done ( sometimes this fixes the issue when intune reinstalls agent)

Any help will be appriciated