MEMCM client not getting full policy.

Until recently my clients have been healthy, in the last few weeks we have discovered some, not all, clients that only get partial policy. If the client had 10 app deployed against them they might only receive 5 of those. An identical machine sitting next to it in the same collection will get all 10. Machine policy action will not cause the client to get the remaining policy. I can leave it online for days and nothing changes. The only thing that will cause the deployments to show up is to delete the deployment and re deploy, run machine policy, and the deployment will show up in minutes.

The environment is http mode. I have read every log that I could think of and nothing stands out, although I am no expert in the logs. Our domain admin recently spun up new domain controllers and retired the old ones (OS update) weeks ago but do not see how this would cause the problem we see but thought I would note. I have inquired with our security officer if there are port changes but they replied no changes but our security officer is typical and is not very forthcoming. Our Enterprise CA was recently rebuild but since we are HTTP and not HTTPS I do not see how this will effect anything, just thought I would note it. We are running a CMG but this seems to only effect the on prim clients. I have read a bunch of previously posts of similar problems and have not found anything that might be causing our problems.

I appreciate any and all assistance.