WSUS Server Setup

I have WSUS server (WSUS01) at our data center. it works nice as far as having the member servers report to the WSUS server. currently, no patches are being deployed by this system. Group policy is configured on the our domain to point the member servers to WSUS01 but to not download/install any patches.

I would like to setup a patch management which is to manage updates by environment according to a regular schedule. Patches would need to be successfully tested in DEV environment before it gets approved for UAT, and then needs to be successfully tested in UAT before it gets approved for PROD.

I am not sure at all that how it is possible, as this may require some of the GPO Profiles for each division. Also, we need to setup the process for approving updates for Each division via WSUS.


Can anyone please help me get step by step guide to accomplish this or in case any Free 3rd Party application is available which can meet my requirement, i wouldn't mind to give it a try.