The Windows SBS Console contains controls that enable you to configure only the most basic properties of the Automatic Updates client on your network computers, such as the time that installations should occur. To exercise more complete control over the client, you must modify the GPOs that contain the configuration settings for Automatic Updates.
Windows SBS 2008 creates three separate GPOs to configure Automatic Updates clients, as follows:
Update Services Common Settings Policy. Applies to all computers on the network
Update Services Client Computers Policy. Applies only to computers that are members of the Update Services Client Computers group
Update Services Server Computers Policy. Applies only ...