Purpose: Get all Workstations with Failed Software Updates (WQL)
SCCM offers multiple ways to monitor your environment. Using Device Collections is one of them. You can create a Device Collection that gathers all the workstations that have failed their Windows Updates. The rest is up to you if something actually happens to this group after the identification.
Purpose: How to debug windows updates in SCCM – real-life examples
SCCM includes an integraded WSUS server in it. You can set this Software Update Point (SUP) to manage your environment windows updates. However, there most likely will some problems along the way, which an active admin will find himself struggling against. This post covers the usual problems seen from the client side.