Then you can create rule based collections with queries that filter on the attribute class.
The raw SQL for this type of query is provided in taylord1's answer.
In Part I I took you through configuring the required Server Roles & Features, WSUS Installation and Configuration, IIS settings, Folder Permissions and linking it all up into SCCM.
In Part II we went through in-depth how to deploy updates and properly manage the future with ADRs, whilst catering for the past with Baselines.
If you're worried about timing and the fact that the default scan schedule is only once a day as well as the collection update schedule, it's really easy to just change the schedule to meet your needs.
Just keep in mind that you'll need to update both the Security Group Discovery schedule the Collection Update schedule.
For Content Location, we want clients to get their content locally at their respective location.