If you automatically approve security updates in WSUS you will find that both the security and security/nonsecurity bundles will be deemed applicable and will want to install. To decline one or the other do the following:
Download from here and in the example below, Daniel is declining the security monthly bundle
https://www.powershellgallery.com/packages/PoshWSUS/2.3.1.2
Connect-PoshWSUSServer -WsusServer YourServer -port 8530
Get-PoshWSUSUpdate -Update “Security Monthly Quality Rollup” | Deny-PoshWSUSUpdate
Hat tip and major thank you and kudos to Daniel on the Patchmanagement.org list serve:
If you enjoyed this article, please consider sharing it!
