Symptoms

When scanning Server 2016 or Windows 10, OS patches released after May 2018 are not detected as missing or installed.

Cause

Microsoft released a servicing stack update in May of 2018 (Q4132216) that is required for Server 2016/Windows 10 1607 updates from June on, so if that update is not installed, the updates are not yet applicable.

Resolution

Install Q4132216 on the target systems, then rescan them.  You should now see those updates as applicable and available to deploy.

Additional Information

The servicing stack update, Q4132216, is a non-security patch, so if you are only scanning for security patches, you won't see it.  This doc outlines how to scan for it individually to apply it without scanning for non-security patches.

Affected Products

Shavlik Protect 9.2.x

Ivanti Patch for Windows Servers 9.3.x