We don't have a mechanism to automatically install agents on machines that don't currently have an agent so you will need to identify which machines and choose the best method that fits your situation. Unfortunately installing the agent outside of a Protect console push can be a manual and arbitrary exercise. Some customers have had success using GPO or other products to distribute the agent using the Agent Install Script.
Other methods of installing the agent would include:
Then me know what questions you have on this.