Hey guys, this is probably going to be a stupid one. After building my WSUS server some time ago, I've finally come to implementing it. I created my GPO ensuring computers are pointing WSUS server instead of the windows updates site, and linked it to a container with a chosen set of test computers in it. I also set automatic updates to a certain time. Within WSUS I've created a computer group called 'guinea pig' and moved all of the test PC's into it. My question, I hope I already know, but........ If my GPO states automatic updates, and the Windows Updates are pointed to the WSUS server, are the updates then pretty much controlled by what groups I approve within WSUS. IE, if I link the WSUS GPO to my whole domain, I don't have to worry about PC's getting updates unless they are in the Guinea pig group, until fully tested. Many thanks in advance guys.