What is the best practice to put "Patch Severity Settings"?

What is the best practice to put "Patch Severity Settings"?

Hi all, 

I'd like to ask for your opinion on the best practice to set the Patch Severity Settings. As the default value the Specify the number of missing patches to determine the system as "Highly Vulnerable" is set up to "1" for both the Critical patch and Important patch.

With this setting, I think all machines will show a Highly Vulnerable status because they should have 1 or 2 Critical patches or Important patches on each machine. 

So, May asking for your opinion on setting this number?

                New to ADSelfService Plus?