microsoft security essentials updates failed

They haven't always been there and I know some months ago I made some changes to WSUS and GPOs which started all of this. What I don't see how to do is to stop those updates from appearing in WSUS. They are how I know that there are always 4 of those updates pending that never seem to get installed no matter what I do on the client. I also don't understand why there are always 5 updates and why manually running WU on a system only removes one from the list in WSUS. If anyone here has ever changes their setup to start getting these Security Intelligence Updates, what did you do to get them? I'm hoping that if I know what is done to start them that I can reverse engineer it to stop them. I've tried to recall what they were and go through and undo them in the server and in domain group policy but so far no luck. Unfortunately I didn't record what changes I made. Prior to whatever change it was that I made there were never any of these updates showing in WSUS. But the only change the WSUS console shows is now there are 4 available instead of 5.

If I run WU again it will again install an update. I can go to any of the systems and run WU and it will find and install one of them. Now every day WSUS console shows that workstations and servers have 5 of the Security Intelligence Update for Microsoft Defender Antivirus. I believe I made a wrong choice some months ago in a change made to updates on a domain.

Microsoft security essentials updates failed