Is there any way to filter patches to include only those which do not inherit their approval status from their parent? For example, we have a number of patches that are Approved for the All Computers group, but explicitly Not Approved for specific WSUS groups. How can I find these exceptions?