There is a post-installation procedure in the KBxxxxxxx-AMD64-Server.msp, at the end of the process, that runs in an elevated process and sets applicable agents into pending for an update. This ONLY runs with success, IF:
The user called the KBxxxxxxx-AMD64-Server.msp file from an ELEVATED CMD Prompt.
The user who called it is a SCOM Admin, Local Administrator of the OS, and SQL Sysadmin role level rights in SQL.
The agents expected to show up in pending are flagged as “Remotely Manageable” = Yes
The agents will only be placed into pending, that are assigned to the management server that you just patched.
If the customer used Windows Update for the server patch – this won’t work.