WSUS Windows Update is disabled by policy for user

Hallo Leute,

ich habe das Problem das einige Server die über WSUS betankt werden, zwar werden die Downloads heruntergeladen aber die Installation aufforderung (mit dem Gelben Ausrufezeichen) erscheint nicht.
Andere Server in der gleichen WSUS Gruppe /OU können die Updates aber installieren.

wuauclt /detectnow führt zu keinen Ergebnis.
Das Log zeigt folgendes an:
008-04-29 12:30:20:993 964 15a8 AU # Policy changed, AU refresh required = No
2008-04-29 12:30:20:993 964 15a8 AU # WSUS server: http://w3kndse01
2008-04-29 12:30:20:993 964 15a8 AU # Detection frequency: 6
2008-04-29 12:30:20:993 964 15a8 AU # Target group: Servers Citrix
2008-04-29 12:30:20:993 964 15a8 AU # Approval type: Pre-install notify (Policy)
2008-04-29 12:30:20:993 964 15a8 AU # Auto-install minor updates: Yes (Policy)
2008-04-29 12:30:20:993 964 15a8 AU AU settings changed through Policy.
2008-04-29 12:30:20:993 964 15a8 AU ElevateNonAdmins policy changed
2008-04-29 12:30:20:993 964 15a8 AU AU setting pending client directive to 'Install Approval'
2008-04-29 12:30:20:993 964 15a8 AU Existing AU client cannot show the pending directive, session id = 0x3
2008-04-29 12:30:21:008 964 15a8 AU Existing AU client cannot show the pending directive, session id = 0x3
2008-04-29 12:30:21:055 964 15a8 AU AU received handle event
2008-04-29 12:30:36:055 964 15a8 AU Windows Update is disabled by policy for user
2008-04-29 12:30:36:055 964 15a8 AU WARNING: AU found no suitable session to launch client in
2008-04-29 13:16:59:560 964 15a8 AU WARNING: AU found no suitable session to launch client in
2008-04-29 14:02:49:022 964 15a8 AU Windows Update is disabled by policy for user
2008-04-29 14:02:49:022 964 15a8 AU WARNING: AU found no suitable session to launch client in


Dies zeigen alle Server in den LOGs an.
Jemand eine Idee ?

Gruss
TC