It does not suit us, so we are going to specify that the computers are to be distributed into groups using the client side targeting (using the group policies or registry parameters).
To do this, in the WSUS console click Options and open Computers.
In some time (it depends on the number of updates and bandwidth to the WSUS server) check if there is a pop-up notification of the new updates in the tray.
In our environment, we suggest to use this policy to install updates from WSUS on Windows servers.During update client should just download the available updates to local drive, display the corresponding notification in the system tray and wait for administrator to manually start the installation (locally or remotely using the PSWindows Update module).This means that productive servers won’t automatically install updates and restart without administrator confirmation (usually these tasks are performed by the system administrator as part of the monthly scheduled maintenance).Thus, all Windows clients on your network should receive updates from the internal update server, and not from Microsoft Update servers via the Internet.In this article, we will take a look on how to configure clients to use a WSUS server using Active Directory domain group policies (GPO).
All the computers that fall under this policy are assigned to the Servers group in the WSUS console.