Hi dubsdj -MCITP,
1. Only "approved for install" updates can be installed on clients. So, if you don't want specific updates to be installed on clients, you may "Not approve" that update or "decline" that update;
2. >if I have unchcked Windows Defender does that not mean that it should stop sending definiition updates for defender?
I don't think so, as far as I'm concerned, WSUS clients will not evaluate if the updates is needed based on if the application is running on the computer, maybe by the version or some other factors.
Best Regards,
Anne
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.