Computer showing not compliant in my report due to one update that was NOT deployed

This is what I did:

1. Sync'ed

2. Grabbed metadata and put them in a deployment group

3. Downloaded update binaries and created a package

4. Deployed the deployment group to a collection of computers

5. Ran a report to show compliance

When I get to step 5, I see that 2 of my computers are not compliant due to one particular update, though it was not even included in the deployment group. The other computers show compliant, because they did install this particular update that was NOT included in the deployment group. 

My question is, WTF?!?!?

Thanks