Look at the Windows Server System Update Service (SUS); it's included with Server and should simply be another "role" you can enable/install. It then downloads the updates to your local network so your client machines can pull from it rather than Microsoft. I believe you can also select which updates are to be installed.