WSUS deployment questions on disconnected network

Hi everyone,

I am a new network admin, and our office uses pretty ineffective strategies to patch our systems. We only have about 30 computers on the disconnected network, but each computer is patched individually, and that takes about a month (along with other admin stuff) to accomplish.

I am looking into streamlining the process with WSUS, but I have a few questions, before I start the process (and come up with a whole new batch of questions). I have been reading up on the service on Microsoft's website, but its not addressing all of my concerns (or maybe I'm just not understanding it).

1. When I download the MBSA cab file, and burn it to a disk, and run it on the WSUS server, will the needed patches come back in a list, because I will have to print out the list and manually download them from the Microsoft Update Catalog. Does WSUS even use MBSA to generate the needed patches, or is there another application it uses to determine needed patches?

2. Can a Windows 7 PC be used as a replica server, or do I need to use the actual server 2003?

3. Can computers in the same OU be put into different Computer Groups?

4. Is there anything else I should know before installing the WSUS software?

I'm sorry if some of, or all of, these questions are kind of dumb, but I need to get this figured out. If it works right on our secured network, it will be a life saver.

Thanks in advance!