Systems Management

Two questions regarding patch reports:

Given that my patch download subscription settings are set as follows:

Subscription:
All Windows in Inventory
All Macs in Inventory
Operating System Patches:
Types: Security
Impact: Critical
Application Patches:
Types: Security
Impact: Critical

BUT… the report we schedule is set to filter on:

Match all of the following:
Detect Status contains Not

The problem (from what I can tell) is that the report is showing *every* patch missing, including those we filter out in the subscription.  So; we patch 19 out of 36 patches missing on a machine, but KACE reports that there’s 17 patches still remaining.  Those patches aren’t “security” or “critical,” but the report doesn’t show that.

The questions are:

1. Is there a way to tell (for certain) that the patches that aren’t being deployed really *aren’t* “security” or “critical?”
   
2. Is there a way to modify the report to only look for patches that are “security” or “critical?”