Query to show machines that require one or more patches?

Recently, I have been tasked with creating reports for 55 different K-12 School buildings that notify the Principals of each building on what computers require a patch scan (ie, laptops that don't get used often).

Is it possible to write a query/report that simply outputs a list of workstations which DO NOT have all their patches installed?

I thought this query would work, but it returns EVERY workstation, even if they are fully patched

 "Computer"."Vulnerability"."Patch Required" NEQ "None" AND 
"Computer"."OS"."NT Info"."Server" = "No" 

If this is possible, how can I take it a step further and AUTOMATE the creation of 55+ reports that only show machines for that building? Each building has between 2 and 4 subnets.

Thanks!