Issue: You need to decline or exclude an update from WSUS, for example the bad MS Outlook Update KB3114409.
Background: Declining an update will stop it from being deployed to desktops and servers associated by WSUS (Windows Server Update Services).
What is WSUS: WSUS is an in-house Windows Update Server that machines will use to download updates, rather than reaching out to Microsoft directly. This repository saves bandwidth and allows granular control via policies in terms of what updates are installed automatically and allows approving updates manually.
Solution: To stop an update from being deployed, you must ‘decline’ it in WSUS.
1) Launch Windows Server Update Services from Administrative Tools on the WSUS Server.
2) Follow the arrows below to decline the update KB3114409.