Windows 2016 Patches Superseded each month

[Aram]

Please see the following for a good discussion and some background around this subject:

Supersedence handling change for Windows Patches

Ordinarily, our customers expect to simply install the latest patches and ignore anything that has been superseded. This minimizes workload while adhering to the policies that Microsoft has published. Due to the critical nature of WannaCry and new emerging threats related to this vulnerability (Petya), the superseded patch updates that apply to MS17-010 (Security Update for Microsoft Windows SMB Server) will now be re-enabled for applicability reporting and patch deployment. We will remove the …

In particular, if you would like to be able to enable evaluation (and deployment) of superseded Windows patches, you can do so now per endpoint by setting _BESClient_WindowsOS_EnableSupersededEval to 1.