Patching Detect and Deploy Labels Best Practices (4272365)

In order to Deploy a patch the agent must first Detect that the patch is NOT PATCHED.

Detect and/or Deploy by label (groups of patches) can be done in a schedule of the Security | Patching module. 

When setting up the Detect and Deploy Schedule, our recommended "Best Practice" is to make sure that the number of patches detected is reduced to the smallest amount possible to expedite the process by only detecting relevant patches. 

The reason for this is that the KACE SMA appliance will deploy only patches that are detected as NOT PATCHED in the detection label.

If a specific patch is not in the detection label, it will not be detected, and cannot be deployed.  You can setup different labels for patching, but during detection, a patch must match the detect label and during deployment, it must match both the detection and deployment labels in order to be properly deployed.