I was testing some MDT options for installing approved updates during the install task. One of the steps was to map to the WSUSContent folder on our wsus sever. Access was blocked by our firewall and the shares were not configured.
That got me thinking. Do clients need to be able to access this folder share to download the updates from WSUS? Are my clients currently downloading from MS based upon the approvals?