centralize windows update?

is there a way to setup a win2k DC as the central windows update server for the whole domain? so that each client doesn’t need to go out on the internet individually? also, can this server ‘push’ out updates automatically to everyone?

thanks