I'm setting up a WSUS server to patch my Windows servers, but the problem I am running into is actually scheduling the patches to coincide with our maintenance window once a month. WSUS doesn't allow for that type of schedule so I thought a way around this would be to have the servers check into the WSUS for patches and download them but not install automatically. Then on our maintenance window I can schedule a task to run a Powershell script to initiate the install and reboot at the appropriate times. I've tried to find a solution to this but have been unsuccessful.
Has anyone worked around this limitation in WSUS, or know of a way to kick off the install with Powershell? I want to be able to start the tasks on the servers from one central server.
I appreciate any help you can give. Thanks!