First, what version of WSUS are you using? Have you updated to 3.0? Second, SUS only detects not approved updated. This features does just that, detects updates to send to clients. Once you approve the updates, the clients will only receive the approved updated and not the detected updates...