Hello everybody,

we have got an issue with DC. First to say, we use DC to rollout only third party patches with Patch Management, Microsoft updates are deployed by WSUS.

Now, in DC, there are several Microsoft updates shown as needed on nearly all our Desktops, which nether WSUS shows as required nor a Update directly from Microsoft let them show up.

Could this be a false positive? KB numbers are as following: KB3127958, KB3191855, KB4012864 (this ones for Windows 7 Embedded, we only have W7 Pro or Enterprise).

Because their severity is "critical" , the statistics show all machines as "highly vulnerable", which is a great Problem because i have to explain why.

I need an advice how to handle this, please.

Regards and thanks in advance

M. Baltruschat