One of the most annoying flaws in the WSUS MMC snap-in is how the filter for Approval status filters updates on whether they have any approvals rather than whether they are approved for a specific computer group.
We found out that due to an automatic approval rule for a test group, a whole group of updates had not actually been approved for the majority of the production systems, leaving us open to a number of vulnerabilities.
To solve this problem I have created a PowerShell GUI for WSUS to allow you to look at the status of approvals in the context of a specific Target Computer Group, as well as set approvals, view update details and export information.
The project is hosted on GitHub and can be found here. https://github.com/CraigTolley/WsusUpdateMgr
