Ok so this has been challenging. I have always downloaded the MS17-004 patch as an example. Then comes Win10 and cumulative and I was told you ONLY need this current month's patch. Thus we do that and has been working solidly for some time.
This month, I just noticed, after doing a pmimport tht it showed MS18-08-w10-xxxxxx patches not applicable to all of our win10 boxes. I understand there are a few of them depending on the Win10 version; however, the total comes to 25 out of 515!!!!!!
that got me diging deeper and our assessment scan runs in 2 seconds. This seemed odd so I put a ticket in with Symantec and have been working with the guy for a few days... I looked at my test machine and chose to install 3 more patches than what I would normally install and WOW they installed, reboot and now the compliance report shows MS18-08-W10-xxxxx is now applicable!!!!!
so how do you determine what patches to deploy? do you do them all? we have a complex environment with tons of vendor supplied, vendor imaged machines making this a true challenge.
Thanks!
added pic...
So typically for Win10, I just DL the MS18-0x-W10-xxxxx and paid no mind to the MSNS, nor MSRT... going to have to dig on this one... 