I am running WSUS on a 2003 server. It is used to patch my Windows 2000 and 2003 servers in my enterprise. I have various GPO's configured on various schedules depending upon management approved update windows. WSUS is working OK and as expected. Here is my question - at various points in time other engineers are performing maintainence on a given server and a reboot is required. We would like to incorporate running Windows Update at that time as part of standard procedure...but we only want to install "approved" updates. If the engineer simply runs Windows Update via the internet at that time we run the risk of applying various unwanted updates. Is there any way the engineer can update the server via my WSUS server manually...so only desired updates are installed? Or, can he push updates via the WSUS console to a given client? I don't think that is possible but I thought I would ask as well.