Our office uses WSUS for distributing Microsoft updates. However, we have a number of remote locations with low-speed connections, but relatively high computer counts, including some servers. We want to have updates install automatically on a schedule, but we need to schedule the downloads for overnight. I don't see a way to schedule the downloads in WSUS. I've seen BITS offered as a solution, but if I understand the concept, it's not a good fit for us.
I'm considering the following solution and I'd like some feedback. I'm considering a script that uses the WSUS API's to download the updates and set the NextDetectionTime value in the registry to two days out. (This should prevent WSUS from downloading updates on its own.) A GPO would schedule a task to run the script afterhours. Another GPO would schedule WSUS to do the installs later in the early morning, allowing time for the downloads.
Any thoughts?