we are patching machines and have lot of machines that are active but have failed/unknown status. What will be the best way to remediate these kind of machines as security and management wants us to present a plan to make sure these machines are looked into and whats our plan to fix these.