Start>Run> GPedit.msc
computer configuration> administrative template > Network >Backround intelligent Transfer Service(Bits) Step 3
Right click in the policy and Select edit here you can set when WSUS is not allowed to download. I recommend putting your production hours in here and then checking the At all other times use all available bandwidth