I am setting up my first WSUS server on server 2012 and have a question on the approvals. I have setup this server to receive updates for my different os's and applications and it has finished synchronizing with the upstream Microsoft servers. I have created a computer group called IT that I will insert my machine in to test. The problem is that there are over 15,000 updates available and I only want to see the ones that pertain to WIndows 7 to approve. Is there a filter that I can apply and only choose Win 7 updates to approve? Once you approve updates does WSUS actually start downloading all of them or only download the files that are being requested by the clients and cache those?