Anyway to tell when/how updater was set to automatic updates?

I have a couple of W2K machines with policies on a network that have somehow
deviated from the policy. The Windows Update utility on these machines has
somehow been enabled and set for automatic updates (with default daily at
0300 hrs settings). I am wondering is there any way of determining when
(and/or how) the updater was set to Automatic update? Are there registry
settings, or other config files/utilities that I could examine which would
provide some insight as to how these machines deviate from our standard
policy? Normally we push patches using the updater and the individual
machines are not set to update automatically.

Thanks.