Approving Deployment of an Update to a Group of Computers
After synchronizing updates from Microsoft Update, you can manually or automatically approve the updates for deployment to client computers in a target group. Only approved updates whose license agreement has been accepted are sent to clients when the client contacts the WSUS server (scan approvals do not require license agreement acceptance). Clients typically contact the WSUS server once every 24 hours, longer if the client is turned off or does not have network connectivity.
For details on managing approvals, see
Defining Automatic Approval Rules
Manually Approving Updates for Deployment
Deleting an Approval
Declining an Update
Note that WSUS infrastructure updates (updates required by WSUS), determined through calls to IsWsusInfrastructureUpdate, are automatically approved for installation to the All Computers target group.