[SkyF]

Может имеет смысл поиграться настройками клиента WSUS через групповую политику?

например, как сказано вот тут:
Welcome to the Windows Server TechCenter > Windows Server TechCenter > Windows Server Update Services (WSUS) Technical Library > WSUS: Deployment > Deploying Microsoft Windows Server Update Services > Update and Configure the Automatic Updates Client Component > Determine a Method to Configure Automatic Updates Clients > Configure Automatic Updates by Using Group Policy

Вот этот параметр можно попробовать: Allow Non-administrators to Receive Update Notifications

This policy specifies whether logged-on non-administrative users will receive update notifications based on the configuration settings for Automatic Updates. If Automatic Updates is configured, by policy or locally, to notify the user either before downloading or only before installation, these notifications will be offered to any non-administrator who logs onto the computer. If the status is set to Enabled, Automatic Updates will include non-administrators when determining which logged-on user should receive notification. If the status is set to Disabled or Not Configured, Automatic Updates will notify only logged-on administrators

Хотя тут же режим "не определено" установлен - те у вас пользователи в админах на локальных станциях.. тогда будет труднее если настройка политик не поможет..