In the colored pie charts and in the reports, WSUS is reporting computers as not having updates installed when all 'Approved' updates are installed.
For instance in the image below, you see that the computer is reporting that 25 updates have yet to be installed.
After drilling down to see what the 25 updates are, I find out that the updates that it thinks the computer needs have not yet been set as 'Approved' updates. They still list as 'Not Approved'.
Further more, these are not 'Critical' or 'Security' updates as you might think. All of those get pre-approved by the automatic approval process. There are 'Feature Packs', 'Service Packs', 'Updates' and 'Update Rollups' that I have yet to manually approve.
Any ideas on how to change this to report correctly, or is WSUS just designed to work incorrectly?