Why does my Patch and Deploy not clear up all of the outstanding Windows Updates?
I have created a Smart Label to find patches with Vendor=Microsoft Corp, Operating System=Windows 7, and Release Date>2013-01-01. It found 332 patches, I ran it, and it still left 18 updates that were not patched. Does anyone have a good Smart Label for Windows Security Updates to run?
Answers (1)
Well, I don't use patching labels, but checking against missing patches.
This usually works fine.
Mostly you don't need all of the patches which are in the patching label and also some patches you need are not part of the patching label.
Maybe you need older patches?
Check the patches to verify why they are not needed.
You should enable debugging and check the logs then:
http://www.kace.com/support/resources/kb/article/how-to-turn-on-client-debugging-for-patching