Thanks! You are correct, it's not the most intuitive way at all. That means I have to click across all the computers I'm managing, one my one. That's not practical. It's more practical, if you can scan a group of systems per se, and then show all patches missing across an arbitrary group! And then be able to select the patches, and click install.
So if you have 10 machines in one group, you'll sell all the Patches, across those 10 machines. Going into machines one by one, is not practical at scale.