Hello, I got the same problem. Using a MS17-010 patch baseline, some number of target got fixed and some are Failed in status after restart. I tried to look at Event Viewer under “Setup” and I got these message.
Windows update could not be installed because of error 2148007941 “Server execution failed” (Command line: ““C:\Windows\system32\wusa.exe” “C:\Program Files (x86)\BigFix Enterprise\BES Client__BESData\Enterprise Security__Download\windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3.msu” /quiet /norestart”)