WSUS) is Microsoft free tool they provide for deploying patches and updates.
I will go into more detail on this further on in the “Top level Patch Approval Groups” section but for now just ignore the server and terminal server target groups…
The Workstation prefix is required as you might also want to patch Servers in the same site and therefore due to the unique target group requirement you will need to have a “Workstations Sydney” and “Servers Sydney” group.
Now also take a look at the “Keep the GPO’s name consistent with the OU names” section in my Best Practice: Group Policy Design Guidelines – Part 2 post you can see how the WSUS Target Groups are also very consistent (but not the same) as the OU’s that the computer are located.
One of the first things you should do once you have installed WSUS and performed the first sync is enabled the Group Policy computer group assignment.
This allows the clients that connect to your WSUS server to be automatically configured in the correct targeting group when they connect to the WSUS server.
I suspect that it is due to the ability for a WSUS v3 server to act as a parent to a WSUS v2 server during a migration of WSUS.