"Microsoft Baseline Security Analyzer" "DCOM-KB827363"

I have recently downloaded the "Microsoft Baseline
Security Analyzer" and have been scanning several servers,
and have noticed that the "windows security updates"
sections on almost every scan lists security updates that
are not installed. However I HAVE installed these updates
and "windows update" shows that I have installed these
updates and that they where successful.
ALSO. I have used "DCOM-KB827363" to scan my network to
see which machines where patched with either KB824146 or
KB823980, and it showed me 10 out of 200 machines where
patched with the latter KB824146 and they were NOT patched.

Is there another way to check my network for windows
security updates and hot fixes with other 3rd party tools
that might save me hours and maybe days?