I have a server that has 4 patches that can't be installed. I know that I should create a new group and move that server to the group. At some point this becomes a nightmare when creating scheduled tasks for each of the 100 groups with exclusions applied. My question is this, does an approved update get installed if it is hidden in the client's windows update interface? I'm pretty sure the answer is yes but wanted to get a solid answer.