So as an administrator you have the ability to add software updates to configuration baselines in compliance settings within SCCM 2012. The limitation is that you have to select individual updates. Now if you are looking for a real compliance solution, you want to ensure the machine is has applied all the applicable patches/updates. As such having the administrator come in every month and select all the individual updates that could apply to specific servers is really not an option. Did Microsoft think this through, or simply not have enough time to invest into this feature?
Is there a way to accomplish this with compliance settings/dcm? Or did Microsoft simply miss the boat on "software updates" within compliance settings?