It's really not an approved list, but rather and Cisco OS updates. These updates state which KB's are to be installed, etc.
Remember, CallManager runs on "Cisco OS 2000.x.x" Not Windows 2000.
You should never run updates from Windows Updates. Only run the OS updates from Cisco CCO .
Each month, the new updates are bundled in the
Operating System Upgrade Service Release 2000.4.4aSR11 (win-OS-Upgrade-K9.2000-4-4a-sr11.exe) (as an example)
These updates have the "approved" MS updates for the 2000 server.
make sense?