I manage an SBS 2003 server at my church, I currently do not host a WSUS service on it, this means all the machines on the network should get their updates from the Microsoft mothership.
Unfortunately the default group policy usually disables the users ability to edit or allow for the updates and I always have to turn to the web to relocate the correct registry entries to turn off that will allow the user to modify the settings for automatic updates to enable getting updates from Microsoft not the local server. I know, change the policy on the 2003 SBS, I have but the default user template I use has the wrong settings and I don’t add machines frequently enough to remember to change it.
So after another multisite, not quite my situation, the internet is impressive in it’s breadth of opinions even wrong ones search I finally found this page at the Technet site (I think, I closed the window prematurely after the screen shot, sorry if it was yours and not Bill’s answer) and decided to snag it for myself and possibly you if you are here after a search.
Click on the image to see it full size and be able to read it.

No comment yet