You can't push the updates but you can use Group Policy in Active Directory
to schedule when the clients will connect and SUS server and download
approved updates.
If you don't have domain (do option to use Group Policy) you will have to
manually configure each client on LAN to connect to SUS at specific time.