You need to configure all WSUS client computers to download approved updates directly from the Microsoft Update servers