Stupid WSUS question

[Cache]

When a client scans I believe it will scan against all updates available in your WSUS database, so it will ignore declined and ignore any products which you haven't approved.

[penfold]

OK, just found this - https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/updates-operations#:~:text=After%20updates%20have%20been%20synchronized,the%20computers%20on%20your%20network.

 

To me it looks like any update will be scanned to see if it is applicable or not except declined updates. These will not be offered for clients to review if it is needed or not.