Hi YourPubilc1dentity,
>Are IIS cookies actually used to communicate with WSUS clients during checks for Windows updates and update downloads?
You may check the setting here:

> And if they are, where on the file system are they located?
If you want to view Cookie logs, in IIS logging, please select "W3C" format, and check "Cookie":

Best Regards,
Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.