KACE Product Support

Can you elaborate more on some specific examples of false positives you've had, including the patch id's? It may be a problem with the patch signatures or feed, and we'd like to work with Lumension on that.

Adobe and Quicktime were the worst. Quicktime assumed that if you didn't have the newest version, you needed the patch. This included not having Quicktime installed at all. Patch management installed Quicktime 4.3 on my servers. I finally make a group and disabled all Quicktime and Adobe patches.

My recommendation is to uncheck the box to Include Software Installers (Security/Patching/Patch Subscriptions/Application Settings) This way only patches are downloaded, not full application installers.
I also intensely distrust Apple patching behavior for Windows machines, exactly for the reason you describe, so when I get new patch notifications, I disable all Apple patches for Windows.

This is what you want to do if you don't want inactive patches or patches you really don't want to show up in the reports:

1. Use this FAQ to exclude software installer: http://www.kace.com/support/kb/index.php?action=artikel&cat=6&id=917&artlang=en
2. Use this FAQ to build patch smart labels so it will only detect the OS or specific application patches: http://www.kace.com/support/kb/index.php?action=artikel&cat=6&id=1068&artlang=en

3. Also check out reports that only reports active patches as well in the example report section:
http://www.kace.com/support/kb/index.php?action=artikel&cat=64&id=1048&artlang=en

http://www.kace.com/support/kb/index.php?action=artikel&cat=64&id=1095&artlang=en