With a simple *.vbs you can enable Microsoft Update instead of Windows Update and deploy this setting throughout your company. Especially very usefull when you deploy your virtual machines through a deployment mechanism which does not use images and/or some sort of snapshot technology.
Set ServiceManager = CreateObject("Microsoft.Update.ServiceManager")
ServiceManager.ClientApplicationID = "My App"
‘add the Microsoft Update Service, GUID
Set NewUpdateService = ServiceManager.AddService2("7971f918-a847-4430-9279-4a52d1efe18d",7,"")