As of January 14th, 2020, Windows 7 / Server 2008 R2 are now EOL, and any subsequent patches will require an ESU license for them to be installed. More details are listed on article End of Support for Microsoft Windows 7 and Windows 2008 R2.
There have been cases in which these patches are detected as applicable and installed by the SMA when they're not supposed to. This can cause reboot loops as the patch is rolled back until it reaches the max amount of re-tries (by default, 3).
Microsoft has changed the logic in which these patches are being detected for applicability, causing unexpected behavior with our detection engine.
Modify or create a label that is currently being used for the Patch Schedules to exclude "(ESU)" in the title.
An example label would be like the one below.
1) Name > does not contain > (ESU)
2) Category > is > OS
3) Operating System > is > Windows 7
The same can be done for Server2008 patches.
This will make it so that patches for ESU-licensed devices are not detected as needed on non ESU-licensed devices.
