Hello BenSnook,
Thanks for posting on Q&A.
I want to share the working principle of the WSUS first. There are several steps:
1. Sync the metadata on the WSUS console
The metadata is the updates which display on the WSUS console
2. Approve the updates for the clients
The clients will download the approved updates from the WSUS Server if you tick the Store update files locally on this server option.
The clients will connect to the Internet to get updates if you tick the Do not store update files locally; computers install from Microsoft Update option.
Please refer to the below picture:
3. The clients will get the updates after scanning updates next time.
The clients will get updates from the WSUS Server if you tick the Store update files locally on this server option.
Or the clients will connect to the Internet to get updates if you tick the Do not store update files locally; computers install from Microsoft Update option.
Note that the updates are binary update files which are used for installing.
In fact, the clients will get the updates. Then the clients will judge whether the updates are needed or not. So the approved windows Server 2012 updates will not be downloaded and installed on the windows server 2016 clients.
Hope the above will be helpful. Please feel free to inform me if you have any questions of the above.
Thanks for your time and have a nice day.
Regards,
Rita
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.