I have an SBS2011 server that has updates managed from the sbs console. Updates are set to automatically approve to level "High" for Client Updates and the schedule is set install every day and restart if necessary.
This seems to be working fine but if I check in the WSUS console in the To Do it shows thousands of security updates and critical updates waiting to be approved. If I review the updates awaiting approval they show as being superseded with a note to say that before declining superseded updates check that the superseding update is approved first. This is impractical with thousands outstanding.
I have run the server cleanup wizard but that doesn't seem to change the status of these unapproved updates.
There is nothing outstanding on the SBS console for updates.
How can I get WSUS to have nothing showing as outstanding too?