Add Sub-Select SQL equivalent to report on machines NOT having a particular inventoried item.
For example - All machines without the WSUS signed cert