Approving updates to be installed right click approve:
Force the refresh on the client by executing: uauclt.exe /detectnow: Furthermore, once the GPO is configured, then you need to link it to the domain (if it isn t already, as in the case of existing GPOs), enforce the policies, and manually force an update to the Group Policy. Just run the following command: gpupdate /force. This command immediately updates the policies instead of waiting about 90 minutes. You can also force Automatic Updates by running wuauclt.exe /detectnow. . By doing so, Automatic Updates will contact the WSUS central server right away!