My *ahem* favorite question *rolling eyes* being emailed or IM’ed to me right now has been “Hey, how can I get WSUS to push out this update??”

I always suggest that one uses an “admin” script that can be added to a top level GPO for “emergancies”.  This way you can add a command such as:

wuauclt.exe /detectnow

That would (in my case for a logon policy set in my GPO) make all clients and servers query the WSUS for any updates.  This would install critical patches, say that come in “out of cycle”, and need to be addressed immediately. *hint, hint*