Approving Deployment of an Update to a Group of Computers
Applies To: Windows Server Update Services
After synchronizing updates from Microsoft Update, you can manually or automatically approve the updates for deployment to client computers in a target group. Only approved updates whose license agreement has been accepted are sent to clients when the client contacts the WSUS server (scan approvals do not require license agreement acceptance). Clients typically contact the WSUS server once every 24 hours, longer if the client is turned off or does not have network connectivity.
For details on managing approvals, see
Note that WSUS infrastructure updates (updates required by WSUS), determined through calls to IsWsusInfrastructureUpdate, are automatically approved for installation to the All Computers target group.