Hello, I was running into a scenario in our Automox environment which I was looking for some additional insight.  We have a set of machines configured to run a patch only policy of a few vendor approved patches.  Overnight, the policy ran successfully however in the devices page, it appears that they still have an update pending and upon going to the device in question the KB that was installed by the policy shows as update available.