WSUS
Guys, I haven't even seen this update on my WSUS Server, and I just synchronized manually about 10 minutes ago. This just goes to show that you really need to spend some time configuring it so you don't get unwanted crap like WDS. I have WSUS set to only download "security" and "critical" updates. Since I am not getting WDS here, I doubt that it is being categorized as either one.
Beyond that, I suspect that the people who had the update automatically approved for install need to uncheck "Automatically approve updates for installation using the following rule: " under the "Approve for Installation" setting. I have never had any patch automatically approved for installation. You could also create a "Test" group in WSUS and change the rule to approve for that group, if you are extra paranoid. Then don't put any computers in that group, or only ones that you'd like to hose if you are an evil-admin.
Biting the hand that feeds IT
