I have the situation where there are many workstations in Domain A and a WSUS server in Domain A. The situation is that I want a few computers from Domain B to be able to pull updates from Domain A's WSUS server.
Please assume that there is no link between the two domains (trust relationships) except for a open port(s) in a firewall for communication
Best Answer
Per Wikipedia
"WSUS does not require the use of Active Directory; client configuration can also be applied by local group policy or by modifying the Windows registry."
This should be possible by setting up a GPO for domain B, pointing to update server on domain A.
Here is a dated, but still relevant article. My understanding, and it's been awhile since I supported a production AD domain, is that it merely replaces the Windows Update Server, as well as providing statistics.