I find the best practice is to approve superseded updates first, and then remove them later, once you are sure they're no longer needed.
WSUS will only install the superseded updates on computers that need them, and could save you some trouble down the road..
If you're going to decline or disapprove superseded updates, make sure you do so carefully.
Read the following:
From technet.microsoft.com on WSUS
WSUS does not automatically decline superseded updates, and it is
recommended that you do not assume that superseded updates should be
declined in favor of the new, superseding update. Before declining a
superseded update, make sure that it is no longer needed by any of
your client computers.
These are three possible scenarios in which you might need to install
a superseded update:
- If a superseding update supports only newer versions of an operating system, and some of your client computers run earlier
versions of the operating system.
- If a superseding update has more restricted applicability than the update it supersedes, which would make it inappropriate for some
- If an update no longer supersedes a previously released update because of new changes. It is possible that, through changes at each
release, an update no longer supersedes an update it previously
superseded in an earlier version.