Hey James,
Another way to do this might be with a property source. If you take a look at a href="https://communities.logicmonitor.com/topic/1371-using-propertysources-for-reporting/" rel="">this article in the 'From the Front' forum you could do something like create the 'snmp.working=' tag that would then automatically populate once AD runs. This would then allow you to validate based on monitored protocol rather than asset type. The WMI example is pretty easily modified (pull something like winders version) to create a 'wmi.working=' to catch that as well.
Cheers!
