This provides centralized update management and more efficient use of bandwidth than if every machine in the environment were to download updates directly from Microsoft.WSUS doesn't "push" updates to machines in the environment; rather, it stores them and waits for machines to "check in" and download the ones they need.Group Policy is the primary means of configuring machines in an Active Directory domain to download updates from WSUS and is the first thing that should be checked if machines aren't appearing in the WSUS console.The WSUS Group Policy settings are stored in the same location as other Windows Update settings: Computer Configuration\Administrative Templates\Windows Components\Windows Update.Windows Vista and later provide a Control Panel to configure update settings and check for updates.
Ensuring that computers are up-to-date is tedious, and at the back of every IT professional's mind is the fear that lurking somewhere deep within a newly released patch is code that will cause more problems than it solves.
If I click it it will work but I want the windows update to work by itself not manually.
This system is not connected to the domain most of the time (laptop).
You need to balance thoroughly testing updates before deploying them with the knowledge that code that targets the vulnerabilities these updates address usually appears on the Internet within a week of the update's release.
Spend too long pontificating on the adverse impact of applying an update and you'll become vulnerable to the exploits the update protects you against.