To the Microsoft wizards - WSUS options?

[sajunky]

FWIW - there is a solution which allows you to run WSUS without the CAL impact. This is based on a leased server with on-premise install for the purpose of just WSUS. No requirement for ActiveDirectory and the only requirement is to adjust PC's registry to point to the office WSUS (normally AD would do this automatically). The cost is <R1000/pm (so a fraction of what a regular server + CALs would cost).

Yip, this is the right solution in my view.