MS14-068 Security Update for Windows 7 x64 (KB3011780) always shows required for most (maybe all) of our Win 7 machines, both 32bit and 64bit.

according to:
it doesn't really even apply to Win7 (or vista, or 8/8.1) but the patch is a defense-in-depth update for those.

What does detection look for? anything in particular? it states that there is no registry for confirmation for most OS version.
The fact it doesn't ever show as patched messes with knowing if systems are patched or not.