Another weird one – KB4457144 was deployed to a collection of computers. On those that said it was still required, if you forced Software updates evaluation, it would error in the event log with
Package KB4457144 failed to be changed to the Installed state. Status: 0x80070017
And in the Windows update log
2018-11-16 17:40:23:667 4460 1198 COMAPI -------------
2018-11-16 17:40:23:667 4460 1198 COMAPI -- START -- COMAPI: Install [ClientId = CcmExec]
2018-11-16 17:40:23:667 4460 1198 COMAPI ---------
2018-11-16 17:40:23:667 4460 1198 COMAPI - Allow source prompts: No; Forced: No; Force quiet: Yes
2018-11-16 17:40:23:667 4460 1198 COMAPI - Updates in request: 1
2018-11-16 17:40:23:667 4460 1198 COMAPI - ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2018-11-16 17:40:23:667 452 22bc Agent *************
2018-11-16 17:40:23:667 452 22bc Agent ** START ** Agent: Installing updates [CallerId = CcmExec]
2018-11-16 17:40:23:667 452 22bc Agent *********
2018-11-16 17:40:23:667 452 22bc Agent * Updates to install = 1
2018-11-16 17:40:23:667 4460 1198 COMAPI - Updates to install = 1
2018-11-16 17:40:23:667 4460 1198 COMAPI <<-- SUBMITTED -- COMAPI: Install [ClientId = CcmExec]
2018-11-16 17:40:23:667 452 22bc Agent * Title = 2018-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4457144)
2018-11-16 17:40:23:667 452 22bc Agent * UpdateId = {D79DF406-4690-4973-957B-832199321C70}.200
2018-11-16 17:40:23:667 452 22bc Agent * Bundles 2 updates:
2018-11-16 17:40:23:667 452 22bc Agent * {A6FECAFC-8E4B-46BE-AD48-3D9E0F4630C8}.200
2018-11-16 17:40:23:667 452 22bc Agent * {31E0EF72-C9CD-456E-8530-81566466B2C3}.200
2018-11-16 17:40:24:722 452 22bc Agent WARNING: failed to calculate prior restore point time with error 0x80070002; setting restore point
2018-11-16 17:40:24:855 452 22bc DnldMgr Preparing update for install, updateId = {A6FECAFC-8E4B-46BE-AD48-3D9E0F4630C8}.200.
2018-11-16 17:40:24:855 452 22bc DnldMgr ExtractUpdateFiles: 0x00000000
2018-11-16 17:40:24:855 5772 1bc4 Misc =========== Logging initialized (build: 7.6.7601.23806, tz: +1300) ===========
2018-11-16 17:40:24:855 5772 1bc4 Misc = Process: C:\WINDOWS\system32\wuauclt.exe
2018-11-16 17:40:24:855 5772 1bc4 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
2018-11-16 17:40:24:855 5772 1bc4 Handler :::::::::::::
2018-11-16 17:40:24:855 5772 1bc4 Handler :: START :: Handler: Command Line Install
2018-11-16 17:40:24:855 5772 1bc4 Handler :::::::::
2018-11-16 17:40:24:855 5772 1bc4 Handler : Updates to install = 1
2018-11-16 17:40:25:021 5772 1bc4 Handler : Command line install completed. Return code = 0x00000000, Result = Succeeded, Reboot required = false
2018-11-16 17:40:25:021 5772 1bc4 Handler :::::::::
2018-11-16 17:40:25:021 5772 1bc4 Handler :: END :: Handler: Command Line Install
2018-11-16 17:40:25:021 5772 1bc4 Handler :::::::::::::
2018-11-16 17:40:25:021 452 22bc DnldMgr Preparing update for install, updateId = {31E0EF72-C9CD-456E-8530-81566466B2C3}.200.
2018-11-16 17:40:25:036 5772 1bc4 Handler :::::::::::::
2018-11-16 17:40:25:036 5772 1bc4 Handler :: START :: Handler: CBS Install
2018-11-16 17:40:25:036 5772 1bc4 Handler :::::::::
2018-11-16 17:40:25:036 5772 1bc4 Handler Starting install of CBS update 31E0EF72-C9CD-456E-8530-81566466B2C3
2018-11-16 17:40:25:350 5772 1bc4 Handler CBS package identity: Package_for_RollupFix~31bf3856ad364e35~amd64~~7601.24241.1.6
2018-11-16 17:40:25:366 5772 1bc4 Handler Installing self-contained with source=C:\WINDOWS\SoftwareDistribution\Download\c2fa3ea9b06cba71527404b37117a30b\Windows6.1-KB4457144-x64.cab, workingdir=C:\WINDOWS\SoftwareDistribution\Download\c2fa3ea9b06cba71527404b37117a30b\inst
2018-11-16 17:40:29:723 452 2040 Report REPORT EVENT: {F776014B-1E9F-49A8-AAA4-A22BF42D2511} 2018-11-16 17:40:24:723+1300 1 181 101 {D79DF406-4690-4973-957B-832199321C70} 200 0 CcmExec Success Content Install Installation Started: Windows successfully started the following update: 2018-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4457144)
2018-11-16 17:43:41:776 5772 d78 Handler FATAL: CBS called Error with 0x80070017,
2018-11-16 17:44:01:013 5772 1bc4 Handler FATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x80070017
2018-11-16 17:44:01:014 5772 1bc4 Handler :::::::::
2018-11-16 17:44:01:014 5772 1bc4 Handler :: END :: Handler: CBS Install
2018-11-16 17:44:01:014 5772 1bc4 Handler :::::::::::::
2018-11-16 17:44:01:022 452 22bc Agent LogHistory called. idUpdate={D79DF406-4690-4973-957B-832199321C70}.200, resultMapped=80070017, resultUnMapped=80070017
2018-11-16 17:44:01:025 452 22bc Agent *********
2018-11-16 17:44:01:025 452 249c AU Can not perform non-interactive scan if AU is interactive-only
2018-11-16 17:44:01:025 452 22bc Agent ** END ** Agent: Installing updates [CallerId = CcmExec]
2018-11-16 17:44:01:025 452 22bc Agent *************
2018-11-16 17:44:01:025 4460 26a8 COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = CcmExec]
2018-11-16 17:44:01:025 4460 26a8 COMAPI - Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2018-11-16 17:44:01:025 4460 26a8 COMAPI - Reboot required = No
2018-11-16 17:44:01:025 4460 26a8 COMAPI - WARNING: Exit code = 0x00000000; Call error code = 0x80240022
2018-11-16 17:44:01:025 4460 26a8 COMAPI ---------
2018-11-16 17:44:01:025 4460 26a8 COMAPI -- END -- COMAPI: Install [ClientId = CcmExec]
2018-11-16 17:44:01:025 4460 26a8 COMAPI -------------
There was a disconnect between the SCCM Client and Windows Update
So I used my SCCM Client Sledgehammer to reset the SCCM Client and low and behold the KB now installed fine!