Install WSUS
Add Windows roles and features
Select Windows Server Update Services
Select WID Database and WSUS Services
Input the location to store updates
Install
Configuration
Click Launch Post-Installation tasks
Open Windows Server Update Services from Control Panel->Administrative Tools
Synchronize from Microsoft Update or another WSUS server
Specify Proxy Server (optional)
Start Connecting
Select Language
Select Product
Select Classifications (Critical, Security, etc)
Synchronize manually / automatically
Edit Automatic Approvals
Group Policy
Computer Configuration\Policies\Administrative Templates\Windows Components\Windows update
Configure Automatic Updates
Specify intranet Microsoft update service location (http://wsus.vccware.com:8530)
Allow non-administrators to receive udpate notifications
...