Issue
The patch or software status shown in the Devices section disagrees with the Activity Log, and it is unclear which reflects the device's true state.
Environment
- Automox (current agent release)
- Windows/Mac/Linux
Common causes
1. A partial success is shown as a failure. A policy run that installed some but not all targeted patches can surface as failed in one view while the device correctly shows the successfully installed items.
2. The Windows Update UI is unreliable as a cross-check. The Windows "Update history" GUI can lag or omit entries; don't treat it as authoritative against Automox.
3. A patch was installed manually on a single device, outside of any policy. (New) An install started from Device Details → Software runs outside of any patch policy. The device will correctly show the software as installed, but no corresponding policy run appears in the Policy Results Report — a legitimate source of apparent disagreement. Because this install isn't policy-governed, it also bypasses a policy's exclusion/targeting rules.
How to reconcile
- To confirm what's actually installed on a Windows device, use
Get-Hotfix— but note it verifies Windows OS updates (KBs) only, not third-party software.- You can also use the following to have a more in-depth Update History:
Install-Module PSWindowsUpdate | Import-Module
Get-WUHistory -Last 50- If a title shows installed on the device but has no matching policy run, check whether it was installed manually (via Device Details → Software) — review the Activity Log rather than Policy Results Report to find who ran it.
Notes
Disabling OS auto-updates does not prevent a console-initiated manual install. If views still can't be reconciled, contact Automox Support with the device name/ID and the timeframe in question.