What is exactly your problem ?
- Unapproved updates appears as needed ?
- Locally-Published updates appears in Wsus Console, despite the fact that you have instructs WPP to not let them appearing ?