We are running ZCM11 with cumulative patch 1 on Windows 2008R2, found that following patches were not installed though I explicitly deploy the patches to the devices

1) MS11-043 & MS11-057 on Win2008R2 SP1
2) MS11-043 & MS11-068 on Win7 SP1

when I deploy it to the device, the process completed successfully. However, the patches still appears as not patched on the device in ZCM. The patches also appear as an required patch when running Windows update. Any problem in these patches??