So, I have looked and looked, but I can't seem to find the answer to how to disable users from checking the internet for updates. This seems like it would be the simplest of questions since one of the big ideas behind WSUS is to keep computers from applying updates you don't want them to get, but maybe I'm blind or my noobnish is shining through.
As a fall back I guess the easiest way is to use the GPO to point to the SCCM server. Am I to assume that I should point it here:
http://<server.domain.com:8530/ClientWebService/client.asmx as shown in the updates log on clients?