New Post: How to deny installation for a single computer?

I use a other way.

I have a WSUS)-group for every Software. ( Flash, Reader, Firefox ...)
If I generate a new Flash player update, I approve the update only to group "Flash". If the client isnt part of group "Flash", he doesnt get it. Finish. But ofcourse its possibe to be member of group "Reader" or anything else. So it is not nessasary to create exeptions.

I dont know why your update status was "not approved" in the past. In my opinion he must be "approved", if the client is in one approved group.