Hello, I have about 50 systems in an update group with about 150 updates in it. When looking at the compliance status of the individual member patches some display 45/5 some display others. But this one patch KB2972280, MS14-041, is displayed as not required for all systems. I looked into this one, and it shows that it is for systems with DirectShow, which is a built in feature of all Windows based operating systems. How can it be not required? What is the cause?

It's probably already installed. It is quite an old update, well over a year old.

Hi Jason, thanks for the response.

I see what you are saying , but if that was the case, shouldn't it be displayed as "Installed"? That's how other installed updates are being displayed as.

It is very possible that the machine isn't scanning.  I would check the logs on the client to see if it scanning.  Run windows update and see if it finds it as required for the machine.

If the machine is just using a cached version of the meta-data then it will never see that it needs the update.

Hi Jason, thanks, I don't think that this would work here because it is not just one machine that is in question, it is all machines that are showing certain updates as not required. What is the proper way of managing these?

For example, these are the ones that are listed as not required - 

Security Update for Windows Server 2012 R2 (KB2972280)

Update for Windows Server 2012 R2 (KB2959936)

Security Update for Windows Server 2012 R2 (KB2933826)