We have a number of laptops that are rarely connected to the corporate network despite being in the main office pretty much all the time. Because I got tired of tracking down the laptops once a month to connect them myself, I set up a separate WSUS box that instructs laptops to pull their updates from MS Update. However, I can see already that this will cause a problem with third party updates.
Assuming that I cannot get permission to set up an Internet-facing WSUS server (and don't you doubt that I've only got a snowball's chance in you know where to get that approved), is there any way I can make this work?