I want my Windows 7 to get windows update from my local WSUS server instead of getting updates from the internet.
Group policy editor
Launch the group policy editor (gpedit.msc)
Go to Computer Configuration –> Administrative Templates –> Windows Components –> Windows Update
Make Windows to get updates from WSUS
There are two parameters you need to tell Windows where to get the updates.
On Specify intranet Microsoft update service location you need to set the hostname or IP address of the WSUS server and enable it.
Then enable the Configure Automatic Updates and choose the schedule you want.
Use regedit to check the settings. The registry path is Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Launch services.msc to restart the Windows Update service.
Download the updates
Got an error 80072EE6, this is because the WSUS URL is misconfigured.

WSUS
On WSUS you can see there are computers listed.
As you can see the new computer win7test has not yet reported to WSUS, I can make this quicker by typing the command wuauclt /reportnow
on my Windows 7 client machine.

Updates approval
Updates need to be approved prior for the client stations to download. WSUS will advise how many needed updates are for the machines.

A couple of notes on the above discussion…
1. Since you are using LOCAL POLICY to configure the client, it is not necessary to restart the Windows Update service. The service is policy-aware, and merely changing the policy will be sufficient.
2. What is missing from that step, though, and could be problematic (I’m somewhat surprised it wasn’t an issue in this case) is that you need to refresh policy after configuring it. You checked the registry, but by all rights, the values should not have been posted to the registry until after policy was refreshed. (It’s possible that the policy refresh happened coincidentally at that moment, but it’s also possible that the registry values won’t appear for up to 90 minutes). To force the policy settings into the registry immediately, run a policy refresh with GPUPDATE /FORCE /TARGET:COMPUTER
3. Strictly speaking “Configure Automatic Updates” is an optional setting, only necessary if you want to change the automatic 3am scheduled installation event.
4. Most implementations should be configuring the WSUS policy settings with a HOSTNAME, which will work if DNS is properly implemented.
5. It’s important to note that the command wuauclt /reportnow only worked in this scenario because (a) the client was properly configured and functional, and (b) had just completed a registration/detection with the WSUS server and had events to report. In fact, doing nothing at all is also an option, and the client will report by itself within 20 minutes. What’s more important to understand here is that running wuauclt /reportnow by itself, more often than not, does absolutely nothing on the client. The /reportnow flag flushes the pending-events-to-be-reported queue, if there are events to be reported.
Hi, thank you for the tips. I re-read my post and realized I have missed the command gpupdate /force after i have configured group policy.
what i normally did is to use wuauclt /resetauthorization /reportnow to see the computers quickly in my wsus console.
Thank you for sharing and taking time to write the tips. 🙂