I have some experience to create rules for deploying patches to specific clients. I use WMI Query to filter clients in Package level rules of 'installed rules' page.
It work perfectly to deploy Java 8 Update 65 to Specific Clients on Windows 7 64-bit Workstations with WSUS Package Publisher.
http://www.sthshare.com/wordpress/wsus-package-publisher-create-an-installed-rule-for-deploying-patches-to-specific-clients.html
You need to understand the logical for creating rules. How to create IsInstalled Rules with WSUS Package Publisher
It work perfectly to deploy Java 8 Update 65 to Specific Clients on Windows 7 64-bit Workstations with WSUS Package Publisher.
http://www.sthshare.com/wordpress/wsus-package-publisher-create-an-installed-rule-for-deploying-patches-to-specific-clients.html
You need to understand the logical for creating rules. How to create IsInstalled Rules with WSUS Package Publisher