Appendix 5: Updating Using Windows Server Update Services
With Windows Server® Update Services (WSUS), IT administrators can deploy the latest Microsoft® product updates to computers that are running the Windows® operating system. By using WSUS, you can fully manage the distribution of updates that are released through Microsoft Update to computers in your network.
Updating Using Windows Server Update Services
To keep WSUS from automatically updating Internet Explorer 7 or Internet Explorer 6 to Internet Explorer 8, you need create a separate update group for your computers running Internet Explorer 7 and Internet Explorer 6 to make sure that Internet Explorer version updates are not applied to them.
The high-level steps are the following.
To update by using Windows Server Update Services
Create a custom Organizational Unit (OU).
Add all computers running Terminal Services or Windows XP Mode to the OU. If you are using MED-V, add the MED-V images to the OU.
Right-click the custom OU and Group Policy object (GPO) configuration.
Create a group in WSUS, and limit Internet Explorer version update approval to this group.
For more information, see Managing Windows Server Update Services.