You can also control the behaviour of Automatic Updates via the Group Policy
template that is downloadable for the System Update Service
(
http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp)
You do not need to install this service, but the ADM package that you can
download
(
http://microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-42E6-802
5-8C667B4C94E9&displaylang=en), allows you to control from where to download
updates, scheduling etc, as well as blocking access to the Windows Update
site.
After you install the Administrative template into the Group Policy, the
settings for controlling Automatic Updates are found under
Computer Configuration\Administrative Templates\Windows Components\Windows
Update
and the setting for blocking access to the Windows Update site is located at
User Configuration\Administrative Templates\Windows Components\Windows
Update
Do bear in mind that there is different Group Policies in a domain.
Apart from those that you can create yourself, there is one for Domain
Controllers, and one for regular machines in the domain.
// Henrik