I'm managing the IT for our local junior School. They are running a windows 2008 server which is a domain controller and is also providing the in school website. The school uses netbooks for the students and although these have been in use for nearly 2 years no critical updates have been applied to any of them. Obviously the student accounts are restricted so I need a way of rolling out updates which will run in the background despite the restrictions of the logged on user. From what I've read WSUS will achieve this?
I would be grateful for any advice about the best way of installing WSUS and details of any gotchas that may be lying in wait for me as I've no experience of doing this.