To use wsus without a domain I believe that you need to do a reg hack to trick the machines into thinking they are in a domain and adjust a few other settings. Also I do not believe that this is officaly supported by microsoft and may cause other issues getting updates when students leave the college.
Tom Stachowiak D'Youville College
