I am sorry if I missed anything but I have looked around and don't see this issue. I am trying to push MS updates/patches to recently installed Win7 workstations.  Last month I noticed about 50 of them had not patched, some had corrupted SCCM Clients and I reinstalled them, but I also noticed some had failed the updates but when I told them to install they worked fine. It appeared the patches were already downloaded and just needed to install. If this were all of my Win7 machines then it would make more sense to me. I am at a loss other then it appears something is not configured the same on these machines. So I waited for the next set of patches and again some of them just needed me to run them (I did run them as an Admin, but SCCM should be to). Other than a few of them being repeat offenders I am not seeing anything that makes sense. They are in different offices, deployed at different times, and SHOULD all be getting the same GP. We are supposedly going to SCCM 2012 soon, but I find that term is relative, and me and those who creating the servers dont see soon as having the same definition. In the mean time I am forced to log on to these machines and kick off that patches. Any ideas on what to look at?

Since the updates are downloaded to cache, check the patch installation schedule and deadline time on deployment management.

Check updatedeployment.log, windowsupdate.log and WUAHandler.log for any error on client machine.

OK I didn't see anything in the

1. windowsupdate.log that indicated any problems.
2. WUAHandler.log seems to tell me there are patches missing which I knew since the computer tells me 11 of them failed, so there would be missing patches - but  I don't see anything that says there were any errors 
3. updatedeployment.log says it "Failed to retrieve current (user, session) pair" which appears to be happening at the beginning of each Maintenance Window.  This would indicate an account problem to me but non of the accounts are locked and everything is working fine on other machines. The fact that I can easliy install them with my admin acocunt led me in this direction I just am at a loss as to why some machines and not all of them, unless my theory of the why is way off. I did some online searching and don't see anything that tells me what that might mean.

As for the patch settings again the part that gets me is no matter if I have it set wrong the patches have installed on at least 100 machines, but the settings for June's patches were pushed on the 18th

1. updates will be made available - 4/9/2013
2. updates should automatically install on clients - Set a deadline 6/18/2013

This has been the basic settings for months and I am not having a similar problem on XP, and  the maintenance window is every night so I could see if it were a matter of only so many were being done a night but this number has been the same for several days, and it is ALL the patches not installing. thanks again

Please check if you are using the same time zone.

Did you also confirm taht if the clients download the updates and stored in the local cache? You may pick one of the client machine to check.

Yes both the workstation I checked and the server are set for EST and have the same time, it is set by GP but on the off chance that is the problem I double checked.

Yes  the machines are definatly downloading the patches, I double checked the cache, and as soon as click install they start installing, no downloading at this time. I did notice that the cache had 12 patches downloaded and only 11 are waiting to install, and if this didn't happen to at least some different machines I would think there was one patch hanging things up. Well that and all the patchces installed on several 100 machines with no issues.

As I have been working on these machines I also noticed that there were several non-MS patches (IE Firefox type) that downloaded and at least on the one machine installed.