When I did the deployment of WSUS I was having problem to push the patches to a particular user/group. I wanted to keep the desktops according department wise. By default it is not possible even though if you create a separate group in WSUS3.0. For this you need to makes changes to the Group Ploicy. What I did was that, AD –> OU –> Properties–> Group Policy –> Edit –> Administrative Templates –> Windows Components –> Windows Update –> Enable client-side targeting