...
- Keep the most vulnerable applications up-to-date. This includes Adobe Reader, Adobe Acrobat, Adobe Flash Player, Adobe Shockwave, Adobe Air, Java and RealPlayer. These applications are known to be vulnerable to attacks so keeping them patched greatly decreases the risk of computers being infected.
- Important and high applications, like internet browsers (Firefox, Internet Explorer, Opera, Safari, Google Chrome) and operating systems (for example, Mac OS X and Windows 7) should also be kept up-to-date. Since they are common and frequently used, these types of applications are frequent targets for attacks.
General information: Queries and scopes are dynamic and will pick up new computers as they are added into the system. Dragging and dropping individual devices or using "My Devices" in a task is not dynamic and will only patch those computers or devices that you have selected.
Administering Targeted Patches
...
Next you can configure the "Reboot Options." It is suggested that you select "Reboot only if needed" or "Never reboot." For the patches to be delivered silently without the user noticing, choose "never reboot." If you choose to "reboot only if needed," also select "Prompt user before rebooting" and "Allow user to defer reboot." Set the snooze time and max deferrals allowed as well.
Next open the "Network Settings" tab. Here, change "When downloading patches via the gateway" to "Download from manufacturer. Do not fall back on failure."
Finally, if you would like to schedule a routine deployment of patches, select the "Plot Configuration" tab. Check the "Periodically scan and repair" box and then click the ellipsis and select your group under the "My Custom Groups" tab. For this example, the group will be "Test Group." Next, click "Change Settings." 
Here you can select the day and time that the scan will first run. To set the schedule, increase the number of days in the "Repeat After" box. You can choose the time of the day and day of the week that scans will run in the "Time Range" and "Weekly Between" boxes. When you are finished, click "Save" and then click "Save" in the "Scan and Repair Settings" window.
You have now created a scheduled group scan. As the FSP for this group, you will need to periodically add patches from the "Scan" folder to your custom group so that new patches are being administered each time it runs.