Updates are being applied to machines even though they are not approved in WSUS

Yes

Summary

Updates are being applied to machines even though they are not approved in Windows Server Update Services (WSUS)

Symptoms

Updates are being applied to machines even though they are not approved in Windows Server Update Services (WSUS). Usually the updates need to be approved, but for SVM the updates are now automatically being applied to our endpoints even without any approvals.

Cause

The Automatic Approvals are most likely turned on in WSUS.

Resolution

You can resolve this by following these steps:

Open the WSUS Administration Console.
Click Start > All Programs > Administrative Tools > Microsoft Windows Server Update Services.
Go to Options > Automatic Approvals.
Deselect Default Automatic Approval Rule if it is selected.
Click OK.

Updates are being applied to machines even though they are not approved in WSUS