MS15-009 has 2 KB's with it:
. 3021952 . 3034196 We have deployed both to Windows 2012 servers, and what happens is SCCM sees that 3021952 is needed, it patches the machine and reboots. It then comes back up does another scan and see that's 3034196 is needed. Is anyone else seeing this behavior? In order to get the machine fully patches, it looks like I need to deploy the SUG that includes both patches twice. The 1st time it kicks off it installs the 1st patch, and I target the SUG again a 2nd time it runs and will install the 2nd patch. Is that expected behavior? Shouldn't both patches have been installed at the same time? Thanks
