Actually just realised the filter I have currently,
OPERATION OR (at least one condition had to be true)
Computer.Managed product mask
is not one of: ESET Management Agent
Is not finding unactivated products but mobile devices that cannot have the Management Agent installed...