Function Get-WUInstall
{
<#
.SYNOPSIS
Download and install updates.
.DESCRIPTION
Use Get-WUInstall to get list of available updates, next download and install it.
There are two types of filtering update: Pre search criteria, Post search criteria.
- Pre search works on server side, like example: ( IsInstalled = 0 and IsHidden = 0 and CategoryIds contains '0fa1201d-4330-4fa8-8ae9-b877473b6441' )
- Post search work on client side after downloading the pre-filtered list of updates, like example $KBArticleID -match $Update.KBArticleIDs
Update occurs in four stages: 1. Search for updates, 2. Choose updates, 3. Download updates, 4. Install updates.
.PARAMETER UpdateType
Pre search criteria. Finds updates of a specific type, such as 'Driver' and 'Software'. Default value contains all updates.
.PARAMETER UpdateID
Pre search criteria. Finds updates of a specific UUID (or sets of UUIDs), such as '12345678-9abc-def0-1234-56789abcdef0'.
.PARAMETER RevisionNumber
Pre search criteria. Finds updates of a specific RevisionNumber, such as '100'. This criterion must be combined with the UpdateID param.
.PARAMETER CategoryIDs
Pre search criteria. Finds updates that belong to a specified category (or sets of UUIDs), such as '0fa1201d-4330-4fa8-8ae9-b877473b6441'.
.PARAMETER IsInstalled
Pre search criteria. Finds updates that are installed on the destination computer.
.PARAMETER IsHidden
Pre search criteria. Finds updates that are marked as hidden on the destination computer. Default search criteria is only not hidden upadates.
.PARAMETER WithHidden
Pre search criteria. Finds updates that are both hidden and not on the destination computer. Overwrite IsHidden param. Default search criteria is only not hidden upadates.
.PARAMETER Criteria
Pre search criteria. Set own string that specifies the search criteria.
.PARAMETER ShowSearchCriteria
Show choosen search criteria. Only works for pre search criteria.
.PARAMETER RootCategories
Post search criteria. Finds updates that contain a specified root category name 'Critical Updates', 'Definition Updates', 'Drivers', 'Feature Packs', 'Security Updates', 'Service Packs', 'Tools', 'Update Rollups', 'Updates', 'Upgrades', 'Microsoft'
.PARAMETER Category
Post search criteria. Finds updates that contain a specified category name (or sets of categories name), such as 'Updates', 'Security Updates', 'Critical Updates', etc...
.PARAMETER KBArticleID
Post search criteria. Finds updates that contain a KBArticleID (or sets of KBArticleIDs), such as 'KB982861'.
.PARAMETER Title
Post search criteria. Finds updates that match part of title, such as ''
.PARAMETER Severity
Post search criteria. Finds updates that match part of severity, such as 'Important', 'Critical', 'Moderate', etc...
.PARAMETER NotCategory
Post search criteria. Finds updates that not contain a specified category name (or sets of categories name), such as 'Updates', 'Security Updates', 'Critical Updates', etc...
.PARAMETER NotKBArticleID
Post search criteria. Finds updates that not contain a KBArticleID (or sets of KBArticleIDs), such as 'KB982861'.
.PARAMETER NotTitle
Post search criteria. Finds updates that not match part of title.
.PARAMETER NotSeverity
Post search criteria. Finds updates that not match part of severity.
.PARAMETER MaxSize
Post search criteria. Finds updates that have MaxDownloadSize less or equal. Size is in Bytes.
.PARAMETER MinSize
Post search criteria. Finds updates that have MaxDownloadSize greater or equal. Size is in Bytes.
.PARAMETER IgnoreUserInput
Post search criteria. Finds updates that the installation or uninstallation of an update can't prompt for user input.
.PARAMETER IgnoreRebootRequired
Post search criteria. Finds updates that specifies the restart behavior that not occurs when you install or uninstall the update.
.PARAMETER ServiceID
Set ServiceIS to change the default source of Windows Updates. It overwrite ServerSelection parameter value.
.PARAMETER WindowsUpdate
Set Windows Update Server as source. Default update config are taken from computer policy.
.PARAMETER MicrosoftUpdate
Set Microsoft Update Server as source. Default update config are taken from computer policy.
.PARAMETER ListOnly
Show list of updates only without downloading and installing. Works similar like Get-WUList.
.PARAMETER DownloadOnly
Show list and download approved updates but do not install it.
.PARAMETER AcceptAll
Do not ask for confirmation updates. Install all available updates.
.PARAMETER AutoReboot
Do not ask for rebbot if it needed.
.PARAMETER IgnoreReboot
Do not ask for reboot if it needed, but do not reboot automaticaly.
.PARAMETER AutoSelectOnly
Install only the updates that have status AutoSelectOnWebsites on true.
.PARAMETER Debuger
Debug mode.
.EXAMPLE
Get info about updates that are not require user interaction to install.
PS C:\> Get-WUInstall -MicrosoftUpdate -IgnoreUserInput -WhatIf -Verbose
VERBOSE: Connecting to Microsoft Update server. Please wait...
VERBOSE: Found [39] Updates in pre search criteria
VERBOSE: Found [5] Updates in post search criteria to Download
What if: Performing operation "Aktualizacja firmy Microsoft z ekranem wybierania przeglądarki dla użytkowników systemu W
indows 7 dla systemów opartych na procesorach x64 w Europejskim Obszarze Gospodarczym (KB976002)[1 MB]?" on Target "KOMP
UTER".
What if: Performing operation "Aktualizacja dla systemu Windows 7 dla systemów opartych na procesorach x64 (KB971033)[1
MB]?" on Target "KOMPUTER".
What if: Performing operation "Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2533552)[1 MB]?" on Ta
rget "KOMPUTER".
What if: Performing operation "Program Microsoft .NET Framework 4 Client Profile w systemie Windows 7 dla systemów opart
ych na procesorach x64 (KB982670)[1 MB]?" on Target "KOMPUTER".
What if: Performing operation "Narzędzie Windows do usuwania złośliwego oprogramowania dla komputerów z procesorem x64 -
grudzień 2011 (KB890830)[1 MB]?" on Target "KOMPUTER".
X Status KB Size Title
- ------ -- ---- -----
2 Rejected KB890830 1 MB Aktualizacja firmy Microsoft z ekranem wybierania przeglądarki dla użytkowników system...
2 Rejected KB890830 1 MB Aktualizacja dla systemu Windows 7 dla systemów opartych na procesorach x64 (KB971033)
2 Rejected KB890830 1 MB Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2533552)
2 Rejected KB890830 1 MB Program Microsoft .NET Framework 4 Client Profile w systemie Windows 7 dla systemów op...
2 Rejected KB890830 1 MB Narzędzie Windows do usuwania złośliwego oprogramowania dla komputerów z procesorem x6...
VERBOSE: Accept [0] Updates to Download
.EXAMPLE
Get updates from specific source with title contains ".NET Framework 4". Everything automatic accept and install.
PS C:\> Get-WUInstall -ServiceID 9482f4b4-e343-43b6-b170-9a65bc822c77 -Title ".NET Framework 4" -AcceptAll
X Status KB Size Title
- ------ -- ---- -----
2 Accepted KB982670 48 MB Program Microsoft .NET Framework 4 Client Profile w systemie Windows 7 dla systemów op...
3 Downloaded KB982670 48 MB Program Microsoft .NET Framework 4 Client Profile w systemie Windows 7 dla systemów op...
4 Installed KB982670 48 MB Program Microsoft .NET Framework 4 Client Profile w systemie Windows 7 dla systemów op...
.EXAMPLE
Get updates with specyfic KBArticleID. Check if type are "Software" and automatic install all.
PS C:\> $KBList = "KB890830","KB2533552","KB2539636"
PS C:\> Get-WUInstall -Type "Software" -KBArticleID $KBList -AcceptAll
X Status KB Size Title
- ------ -- ---- -----
2 Accepted KB2533552 9 MB Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2533552)
2 Accepted KB2539636 4 MB Aktualizacja zabezpieczeń dla programu Microsoft .NET Framework 4 w systemach Windows ...
2 Accepted KB890830 1 MB Narzędzie Windows do usuwania złośliwego oprogramowania dla komputerów z procesorem x6...
3 Downloaded KB2533552 9 MB Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2533552)
3 Downloaded KB2539636 4 MB Aktualizacja zabezpieczeń dla programu Microsoft .NET Framework 4 w systemach Windows ...
3 Downloaded KB890830 1 MB Narzędzie Windows do usuwania złośliwego oprogramowania dla komputerów z procesorem x6...
4 Installed KB2533552 9 MB Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2533552)
4 Installed KB2539636 4 MB Aktualizacja zabezpieczeń dla programu Microsoft .NET Framework 4 w systemach Windows ...
4 Installed KB890830 1 MB Narzędzie Windows do usuwania złośliwego oprogramowania dla komputerów z procesorem x6...
.EXAMPLE
Get list of updates without language packs and updatets that's not hidden.
PS C:\> Get-WUInstall -NotCategory "Language packs" -ListOnly
X Status KB Size Title
- ------ -- ---- -----
1 ------ KB2640148 8 MB Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2640148)
1 ------ KB2600217 32 MB Aktualizacja dla programu Microsoft .NET Framework 4 w systemach Windows XP, Se...
1 ------ KB2679255 6 MB Aktualizacja systemu Windows 7 dla komputerów z procesorami x64 (KB2679255)
1 ------ KB915597 3 MB Definition Update for Windows Defender - KB915597 (Definition 1.125.146.0)
.NOTES
Author: Michal Gajda
Blog : http://commandlinegeeks.com/
.LINK
http://gallery.technet.microsoft.com/scriptcenter/2d191bcd-3308-4edd-9de2-88dff796b0bc
http://msdn.microsoft.com/en-us/library/windows/desktop/aa386526(v=vs.85).aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/aa386099(v=vs.85).aspx
http://msdn.microsoft.com/en-us/library/ff357803(VS.85).aspx
.LINK
Get-WUServiceManager
Get-WUList
#>
[OutputType('PSWindowsUpdate.WUInstall')]
[CmdletBinding(
SupportsShouldProcess=$True,
ConfirmImpact="High"
)]
Param
(
#Pre search criteria
[parameter(ValueFromPipelineByPropertyName=$true)]
[ValidateSet("Driver", "Software")]
[String]$UpdateType="",
[parameter(ValueFromPipelineByPropertyName=$true)]
[String[]]$UpdateID,
[parameter(ValueFromPipelineByPropertyName=$true)]
[Int]$RevisionNumber,
[parameter(ValueFromPipelineByPropertyName=$true)]
[String[]]$CategoryIDs,
[parameter(ValueFromPipelineByPropertyName=$true)]
[Switch]$IsInstalled,
[parameter(ValueFromPipelineByPropertyName=$true)]
[Switch]$IsHidden,
[parameter(ValueFromPipelineByPropertyName=$true)]
[Switch]$WithHidden,
[String]$Criteria,
[Switch]$ShowSearchCriteria,
#Post search criteria
[ValidateSet('Critical Updates', 'Definition Updates', 'Drivers', 'Feature Packs', 'Security Updates', 'Service Packs', 'Tools', 'Update Rollups', 'Updates', 'Upgrades', 'Microsoft')]
[String[]]$RootCategories,
[parameter(ValueFromPipelineByPropertyName=$true)]
[String[]]$Category="",
[parameter(ValueFromPipelineByPropertyName=$true)]
[String[]]$KBArticleID,
[parameter(ValueFromPipelineByPropertyName=$true)]
[String]$Title,
[parameter(ValueFromPipelineByPropertyName=$true)]
[ValidateSet("Critical", "Important", "Moderate", "Low", "Unspecified", "")]
[String[]]$Severity,
[parameter(ValueFromPipelineByPropertyName=$true)]
[String[]]$NotCategory="",
[parameter(ValueFromPipelineByPropertyName=$true)]
[String[]]$NotKBArticleID,
[parameter(ValueFromPipelineByPropertyName=$true)]
[String]$NotTitle,
[parameter(ValueFromPipelineByPropertyName=$true)]
[ValidateSet("Critical", "Important", "Moderate", "Low", "Unspecified", "")]
[String[]]$NotSeverity,
[Int]$MaxSize,
[Int]$MinSize,
[parameter(ValueFromPipelineByPropertyName=$true)]
[Alias("Silent")]
[Switch]$IgnoreUserInput,
[parameter(ValueFromPipelineByPropertyName=$true)]
[Switch]$IgnoreRebootRequired,
#Connection options
[String]$ServiceID,
[Switch]$WindowsUpdate,
[Switch]$MicrosoftUpdate,
#Mode options
[Switch]$ListOnly,
[Switch]$DownloadOnly,
[Alias("All")]
[Switch]$AcceptAll,
[Switch]$AutoReboot,
[Switch]$IgnoreReboot,
[Switch]$AutoSelectOnly,
[Switch]$Debuger
)
Begin
{
If($PSBoundParameters['Debuger'])
{
$DebugPreference = "Continue"
} #End If $PSBoundParameters['Debuger']
$User = [Security.Principal.WindowsIdentity]::GetCurrent()
$Role = (New-Object Security.Principal.WindowsPrincipal $user).IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)
if(!$Role)
{
Write-Warning "To perform some operations you must run an elevated Windows PowerShell console."
} #End If !$Role
}
Process
{
#region STAGE 0
######################################
# Start STAGE 0: Prepare environment #
######################################
Write-Debug "STAGE 0: Prepare environment"
If($IsInstalled)
{
$ListOnly = $true
Write-Debug "Change to ListOnly mode"
} #End If $IsInstalled
Write-Debug "Check reboot status only for local instance"
Try
{
$objSystemInfo = New-Object -ComObject "Microsoft.Update.SystemInfo"
If($objSystemInfo.RebootRequired)
{
Write-Warning "Reboot is required to continue"
If($AutoReboot)
{
Restart-Computer -Force
} #End If $AutoReboot
If(!$ListOnly)
{
Return
} #End If !$ListOnly
} #End If $objSystemInfo.RebootRequired
} #End Try
Catch
{
Write-Warning "Support local instance only, Continue..."
} #End Catch
Write-Debug "Set number of stage"
If($ListOnly)
{
$NumberOfStage = 2
} #End $ListOnly
ElseIf($DownloadOnly)
{
$NumberOfStage = 3
} #End Else $ListOnly If $DownloadOnly
Else
{
$NumberOfStage = 4
} #End Else $DownloadOnly
####################################
# End STAGE 0: Prepare environment #
####################################
#endregion
#region STAGE 1
###################################
# Start STAGE 1: Get updates list #
###################################
Write-Debug "STAGE 1: Get updates list"
Write-Debug "Create Microsoft.Update.ServiceManager object"
$objServiceManager = New-Object -ComObject "Microsoft.Update.ServiceManager"
Write-Debug "Create Microsoft.Update.Session object"
$objSession = New-Object -ComObject "Microsoft.Update.Session"
Write-Debug "Create Microsoft.Update.Session.Searcher object"
$objSearcher = $objSession.CreateUpdateSearcher()
If($WindowsUpdate)
{
Write-Debug "Set source of updates to Windows Update"
$objSearcher.ServerSelection = 2
$serviceName = "Windows Update"
} #End If $WindowsUpdate
ElseIf($MicrosoftUpdate)
{
Write-Debug "Set source of updates to Microsoft Update"
$serviceName = $null
Foreach ($objService in $objServiceManager.Services)
{
If($objService.Name -eq "Microsoft Update")
{
$objSearcher.ServerSelection = 3
$objSearcher.ServiceID = $objService.ServiceID
$serviceName = $objService.Name
Break
}#End If $objService.Name -eq "Microsoft Update"
}#End ForEach $objService in $objServiceManager.Services
If(-not $serviceName)
{
Write-Warning "Can't find registered service Microsoft Update. Use Get-WUServiceManager to get registered service."
Return
}#Enf If -not $serviceName
} #End Else $WindowsUpdate If $MicrosoftUpdate
Else
{
Foreach ($objService in $objServiceManager.Services)
{
If($ServiceID)
{
If($objService.ServiceID -eq $ServiceID)
{
$objSearcher.ServiceID = $ServiceID
$objSearcher.ServerSelection = 3
$serviceName = $objService.Name
Break
} #End If $objService.ServiceID -eq $ServiceID
} #End If $ServiceID
Else
{
If($objService.IsDefaultAUService -eq $True)
{
$serviceName = $objService.Name
Break
} #End If $objService.IsDefaultAUService -eq $True
} #End Else $ServiceID
} #End Foreach $objService in $objServiceManager.Services
} #End Else $MicrosoftUpdate
Write-Debug "Set source of updates to $serviceName"
Write-Verbose "Connecting to $serviceName server. Please wait..."
Try
{
$search = ""
If($Criteria)
{
$search = $Criteria
} #End If $Criteria
Else
{
If($IsInstalled)
{
$search = "IsInstalled = 1"
Write-Debug "Set pre search criteria: IsInstalled = 1"
} #End If $IsInstalled
Else
{
$search = "IsInstalled = 0"
Write-Debug "Set pre search criteria: IsInstalled = 0"
} #End Else $IsInstalled
If($UpdateType -ne "")
{
Write-Debug "Set pre search criteria: Type = $UpdateType"
$search += " and Type = '$UpdateType'"
} #End If $UpdateType -ne ""
If($UpdateID)
{
Write-Debug "Set pre search criteria: UpdateID = '$([string]::join(", ", $UpdateID))'"
$tmp = $search
$search = ""
$LoopCount = 0
Foreach($ID in $UpdateID)
{
If($LoopCount -gt 0)
{
$search += " or "
} #End If $LoopCount -gt 0
If($RevisionNumber)
{
Write-Debug "Set pre search criteria: RevisionNumber = '$RevisionNumber'"
$search += "($tmp and UpdateID = '$ID' and RevisionNumber = $RevisionNumber)"
} #End If $RevisionNumber
Else
{
$search += "($tmp and UpdateID = '$ID')"
} #End Else $RevisionNumber
$LoopCount++
} #End Foreach $ID in $UpdateID
} #End If $UpdateID
If($CategoryIDs)
{
Write-Debug "Set pre search criteria: CategoryIDs = '$([string]::join(", ", $CategoryIDs))'"
$tmp = $search
$search = ""
$LoopCount =0
Foreach($ID in $CategoryIDs)
{
If($LoopCount -gt 0)
{
$search += " or "
} #End If $LoopCount -gt 0
$search += "($tmp and CategoryIDs contains '$ID')"
$LoopCount++
} #End Foreach $ID in $CategoryIDs
} #End If $CategoryIDs
If($IsHidden)
{
Write-Debug "Set pre search criteria: IsHidden = 1"
$search += " and IsHidden = 1"
} #End If $IsNotHidden
ElseIf($WithHidden)
{
Write-Debug "Set pre search criteria: IsHidden = 1 and IsHidden = 0"
} #End ElseIf $WithHidden
Else
{
Write-Debug "Set pre search criteria: IsHidden = 0"
$search += " and IsHidden = 0"
} #End Else $WithHidden
#Don't know why every update have RebootRequired=false which is not always true
If($IgnoreRebootRequired)
{
Write-Debug "Set pre search criteria: RebootRequired = 0"
$search += " and RebootRequired = 0"
} #End If $IgnoreRebootRequired
} #End Else $Criteria
Write-Debug "Search criteria is: $search"
If($ShowSearchCriteria)
{
Write-Output $search
} #End If $ShowSearchCriteria
$objResults = $objSearcher.Search($search)
} #End Try
Catch
{
If($_ -match "HRESULT: 0x80072EE2")
{
Write-Warning "Probably you don't have connection to Windows Update server"
} #End If $_ -match "HRESULT: 0x80072EE2"
Return
} #End Catch
$objCollectionUpdate = New-Object -ComObject "Microsoft.Update.UpdateColl"
$NumberOfUpdate = 1
$UpdateCollection = @()
$UpdatesExtraDataCollection = @{}
$PreFoundUpdatesToDownload = $objResults.Updates.count
Write-Verbose "Found [$PreFoundUpdatesToDownload] Updates in pre search criteria"
if($RootCategories)
{
$RootCategoriesCollection = @()
foreach($RootCategory in $RootCategories)
{
switch ($RootCategory)
{
"Critical Updates" {$CatID = 0}
"Definition Updates"{$CatID = 1}
"Drivers"{$CatID = 2}
"Feature Packs"{$CatID = 3}
"Security Updates"{$CatID = 4}
"Service Packs"{$CatID = 5}
"Tools"{$CatID = 6}
"Update Rollups"{$CatID = 7}
"Updates"{$CatID = 8}
"Upgrades"{$CatID = 9}
"Microsoft"{$CatID = 10}
} #End switch $RootCategory
$RootCategoriesCollection += $objResults.RootCategories.item($CatID).Updates
} #End foreach $RootCategory in $RootCategories
$objResults = New-Object -TypeName psobject -Property @{Updates = $RootCategoriesCollection}
} #End if $RootCategories
Foreach($Update in $objResults.Updates)
{
$UpdateAccess = $true
Write-Progress -Activity "Post search updates for $Computer" -Status "[$NumberOfUpdate/$PreFoundUpdatesToDownload] $($Update.Title) $size" -PercentComplete ([int]($NumberOfUpdate/$PreFoundUpdatesToDownload * 100))
Write-Debug "Set post search criteria: $($Update.Title)"
If($Category -ne "")
{
$UpdateCategories = $Update.Categories | Select-Object Name
Write-Debug "Set post search criteria: Categories = '$([string]::join(", ", $Category))'"
Foreach($Cat in $Category)
{
If(!($UpdateCategories -match $Cat))
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If !($UpdateCategories -match $Cat)
Else
{
$UpdateAccess = $true
Break
} #End Else !($UpdateCategories -match $Cat)
} #End Foreach $Cat in $Category
} #End If $Category -ne ""
If($NotCategory -ne "" -and $UpdateAccess -eq $true)
{
$UpdateCategories = $Update.Categories | Select-Object Name
Write-Debug "Set post search criteria: NotCategories = '$([string]::join(", ", $NotCategory))'"
Foreach($Cat in $NotCategory)
{
If($UpdateCategories -match $Cat)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
Break
} #End If $UpdateCategories -match $Cat
} #End Foreach $Cat in $NotCategory
} #End If $NotCategory -ne "" -and $UpdateAccess -eq $true
If($KBArticleID -ne $null -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: KBArticleIDs = '$([string]::join(", ", $KBArticleID))'"
If(!($KBArticleID -match $Update.KBArticleIDs -and "" -ne $Update.KBArticleIDs))
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If !($KBArticleID -match $Update.KBArticleIDs)
} #End If $KBArticleID -ne $null -and $UpdateAccess -eq $true
If($NotKBArticleID -ne $null -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: NotKBArticleIDs = '$([string]::join(", ", $NotKBArticleID))'"
If($NotKBArticleID -match $Update.KBArticleIDs -and "" -ne $Update.KBArticleIDs)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If$NotKBArticleID -match $Update.KBArticleIDs -and "" -ne $Update.KBArticleIDs
} #End If $NotKBArticleID -ne $null -and $UpdateAccess -eq $true
If($Title -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: Title = '$Title'"
If($Update.Title -notmatch $Title)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $Update.Title -notmatch $Title
} #End If $Title -and $UpdateAccess -eq $true
If($NotTitle -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: NotTitle = '$NotTitle'"
If($Update.Title -match $NotTitle)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $Update.Title -notmatch $NotTitle
} #End If $NotTitle -and $UpdateAccess -eq $true
If($Severity -and $UpdateAccess -eq $true)
{
if($Severity -contains "Unspecified") { $Severity += "" }
Write-Debug "Set post search criteria: Severity = '$Severity'"
If($Severity -notcontains [String]$Update.MsrcSeverity)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $Severity -notcontains $Update.MsrcSeverity
} #End If $Severity -and $UpdateAccess -eq $true
If($NotSeverity -and $UpdateAccess -eq $true)
{
if($NotSeverity -contains "Unspecified") { $NotSeverity += "" }
Write-Debug "Set post search criteria: NotSeverity = '$NotSeverity'"
If($NotSeverity -contains [String]$Update.MsrcSeverity)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $NotSeverity -contains $Update.MsrcSeverity
} #End If $NotSeverity -and $UpdateAccess -eq $true
If($MaxSize -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: MaxDownloadSize <= '$MaxSize'"
If($MaxSize -le $Update.MaxDownloadSize)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $MaxSize -le $Update.MaxDownloadSize
} #End If $MaxSize -and $UpdateAccess -eq $true
If($MinSize -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: MaxDownloadSize >= '$MinSize'"
If($MinSize -ge $Update.MaxDownloadSize)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $MinSize -ge $Update.MaxDownloadSize
} #End If $MinSize -and $UpdateAccess -eq $true
If($IgnoreUserInput -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: CanRequestUserInput"
If($Update.InstallationBehavior.CanRequestUserInput -eq $true)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $Update.InstallationBehavior.CanRequestUserInput -eq $true
} #End If $IgnoreUserInput -and $UpdateAccess -eq $true
If($IgnoreRebootRequired -and $UpdateAccess -eq $true)
{
Write-Debug "Set post search criteria: RebootBehavior"
If($Update.InstallationBehavior.RebootBehavior -ne 0)
{
Write-Debug "UpdateAccess: false"
$UpdateAccess = $false
} #End If $Update.InstallationBehavior.RebootBehavior -ne 0
} #End If $IgnoreRebootRequired -and $UpdateAccess -eq $true
If($UpdateAccess -eq $true)
{
Write-Debug "Convert size"
Switch($Update.MaxDownloadSize)
{
{[System.Math]::Round($_/1KB,0) -lt 1024} { $size = [String]([System.Math]::Round($_/1KB,0))+" KB"; break }
{[System.Math]::Round($_/1MB,0) -lt 1024} { $size = [String]([System.Math]::Round($_/1MB,0))+" MB"; break }
{[System.Math]::Round($_/1GB,0) -lt 1024} { $size = [String]([System.Math]::Round($_/1GB,0))+" GB"; break }
{[System.Math]::Round($_/1TB,0) -lt 1024} { $size = [String]([System.Math]::Round($_/1TB,0))+" TB"; break }
default { $size = $_+"B" }
} #End Switch
Write-Debug "Convert KBArticleIDs"
If($Update.KBArticleIDs -ne "")
{
$KB = "KB"+$Update.KBArticleIDs
} #End If $Update.KBArticleIDs -ne ""
Else
{
$KB = ""
} #End Else $Update.KBArticleIDs -ne ""
If($ListOnly)
{
$Status = ""
If($Update.IsDownloaded) {$Status += "D"} else {$status += "-"}
If($Update.IsInstalled) {$Status += "I"} else {$status += "-"}
If($Update.IsMandatory) {$Status += "M"} else {$status += "-"}
If($Update.IsHidden) {$Status += "H"} else {$status += "-"}
If($Update.IsUninstallable) {$Status += "U"} else {$status += "-"}
If($Update.IsBeta) {$Status += "B"} else {$status += "-"}
Add-Member -InputObject $Update -MemberType NoteProperty -Name ComputerName -Value $env:COMPUTERNAME
Add-Member -InputObject $Update -MemberType NoteProperty -Name KB -Value $KB
Add-Member -InputObject $Update -MemberType NoteProperty -Name Size -Value $size
Add-Member -InputObject $Update -MemberType NoteProperty -Name Status -Value $Status
Add-Member -InputObject $Update -MemberType NoteProperty -Name X -Value 1
$Update.PSTypeNames.Clear()
$Update.PSTypeNames.Add('PSWindowsUpdate.WUInstall')
$UpdateCollection += $Update
} #End If $ListOnly
Else
{
$objCollectionUpdate.Add($Update) | Out-Null
$UpdatesExtraDataCollection.Add($Update.Identity.UpdateID,@{KB = $KB; Size = $size})
} #End Else $ListOnly
} #End If $UpdateAccess -eq $true
$NumberOfUpdate++
} #End Foreach $Update in $objResults.Updates
Write-Progress -Activity "[1/$NumberOfStage] Post search updates" -Status "Completed" -Completed
If($ListOnly)
{
$FoundUpdatesToDownload = $UpdateCollection.count
} #End If $ListOnly
Else
{
$FoundUpdatesToDownload = $objCollectionUpdate.count
} #End Else $ListOnly
Write-Verbose "Found [$FoundUpdatesToDownload] Updates in post search criteria"
If($FoundUpdatesToDownload -eq 0)
{
Return
} #End If $FoundUpdatesToDownload -eq 0
If($ListOnly)
{
Write-Debug "Return only list of updates"
Return $UpdateCollection
} #End If $ListOnly
#################################
# End STAGE 1: Get updates list #
#################################
#endregion
If(!$ListOnly)
{
#region STAGE 2
#################################
# Start STAGE 2: Choose updates #
#################################
Write-Debug "STAGE 2: Choose updates"
$NumberOfUpdate = 1
$logCollection = @()
$objCollectionChoose = New-Object -ComObject "Microsoft.Update.UpdateColl"
Foreach($Update in $objCollectionUpdate)
{
$size = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].Size
Write-Progress -Activity "[2/$NumberOfStage] Choose updates" -Status "[$NumberOfUpdate/$FoundUpdatesToDownload] $($Update.Title) $size" -PercentComplete ([int]($NumberOfUpdate/$FoundUpdatesToDownload * 100))
Write-Debug "Show update to accept: $($Update.Title)"
If($AcceptAll)
{
$Status = "Accepted"
If($Update.EulaAccepted -eq 0)
{
Write-Debug "Accept Eula"
$Update.AcceptEula()
} #End If $Update.EulaAccepted -eq 0
Write-Debug "Add update to collection"
$objCollectionChoose.Add($Update) | Out-Null
} #End If $AcceptAll
ElseIf($AutoSelectOnly)
{
If($Update.AutoSelectOnWebsites)
{
$Status = "Accepted"
If($Update.EulaAccepted -eq 0)
{
Write-Debug "Accept Eula"
$Update.AcceptEula()
} #End If $Update.EulaAccepted -eq 0
Write-Debug "Add update to collection"
$objCollectionChoose.Add($Update) | Out-Null
} #End If $Update.AutoSelectOnWebsites
Else
{
$Status = "Rejected"
} #End Else $Update.AutoSelectOnWebsites
} #End ElseIf $AutoSelectOnly
Else
{
If($pscmdlet.ShouldProcess($Env:COMPUTERNAME,"$($Update.Title)[$size]?"))
{
$Status = "Accepted"
If($Update.EulaAccepted -eq 0)
{
Write-Debug "Accept Eula"
$Update.AcceptEula()
} #End If $Update.EulaAccepted -eq 0
Write-Debug "Add update to collection"
$objCollectionChoose.Add($Update) | Out-Null
} #End If $pscmdlet.ShouldProcess($Env:COMPUTERNAME,"$($Update.Title)[$size]?")
Else
{
$Status = "Rejected"
} #End Else $pscmdlet.ShouldProcess($Env:COMPUTERNAME,"$($Update.Title)[$size]?")
} #End Else $AutoSelectOnly
Write-Debug "Add to log collection"
$log = New-Object PSObject -Property @{
Title = $Update.Title
KB = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].KB
Size = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].Size
Status = $Status
X = 2
} #End PSObject Property
$log.PSTypeNames.Clear()
$log.PSTypeNames.Add('PSWindowsUpdate.WUInstall')
$logCollection += $log
$NumberOfUpdate++
} #End Foreach $Update in $objCollectionUpdate
Write-Progress -Activity "[2/$NumberOfStage] Choose updates" -Status "Completed" -Completed
Write-Debug "Show log collection"
$logCollection
$AcceptUpdatesToDownload = $objCollectionChoose.count
Write-Verbose "Accept [$AcceptUpdatesToDownload] Updates to Download"
If($AcceptUpdatesToDownload -eq 0)
{
Return
} #End If $AcceptUpdatesToDownload -eq 0
###############################
# End STAGE 2: Choose updates #
###############################
#endregion
#region STAGE 3
###################################
# Start STAGE 3: Download updates #
###################################
Write-Debug "STAGE 3: Download updates"
$NumberOfUpdate = 1
$objCollectionDownload = New-Object -ComObject "Microsoft.Update.UpdateColl"
Foreach($Update in $objCollectionChoose)
{
Write-Progress -Activity "[3/$NumberOfStage] Downloading updates" -Status "[$NumberOfUpdate/$AcceptUpdatesToDownload] $($Update.Title) $size" -PercentComplete ([int]($NumberOfUpdate/$AcceptUpdatesToDownload * 100))
Write-Debug "Show update to download: $($Update.Title)"
Write-Debug "Send update to download collection"
$objCollectionTmp = New-Object -ComObject "Microsoft.Update.UpdateColl"
$objCollectionTmp.Add($Update) | Out-Null
$Downloader = $objSession.CreateUpdateDownloader()
$Downloader.Updates = $objCollectionTmp
Try
{
Write-Debug "Try download update"
$DownloadResult = $Downloader.Download()
} #End Try
Catch
{
If($_ -match "HRESULT: 0x80240044")
{
Write-Warning "Your security policy don't allow a non-administator identity to perform this task"
} #End If $_ -match "HRESULT: 0x80240044"
Return
} #End Catch
Write-Debug "Check ResultCode"
Switch -exact ($DownloadResult.ResultCode)
{
0 { $Status = "NotStarted" }
1 { $Status = "InProgress" }
2 { $Status = "Downloaded" }
3 { $Status = "DownloadedWithErrors" }
4 { $Status = "Failed" }
5 { $Status = "Aborted" }
} #End Switch
Write-Debug "Add to log collection"
$log = New-Object PSObject -Property @{
Title = $Update.Title
KB = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].KB
Size = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].Size
Status = $Status
X = 3
} #End PSObject Property
$log.PSTypeNames.Clear()
$log.PSTypeNames.Add('PSWindowsUpdate.WUInstall')
$log
If($DownloadResult.ResultCode -eq 2)
{
Write-Debug "Downloaded then send update to next stage"
$objCollectionDownload.Add($Update) | Out-Null
} #End If $DownloadResult.ResultCode -eq 2
$NumberOfUpdate++
} #End Foreach $Update in $objCollectionChoose
Write-Progress -Activity "[3/$NumberOfStage] Downloading updates" -Status "Completed" -Completed
$ReadyUpdatesToInstall = $objCollectionDownload.count
Write-Verbose "Downloaded [$ReadyUpdatesToInstall] Updates to Install"
If($ReadyUpdatesToInstall -eq 0)
{
Return
} #End If $ReadyUpdatesToInstall -eq 0
#################################
# End STAGE 3: Download updates #
#################################
#endregion
If(!$DownloadOnly)
{
#region STAGE 4
##################################
# Start STAGE 4: Install updates #
##################################
Write-Debug "STAGE 4: Install updates"
$NeedsReboot = $false
$NumberOfUpdate = 1
#install updates
Foreach($Update in $objCollectionDownload)
{
Write-Progress -Activity "[4/$NumberOfStage] Installing updates" -Status "[$NumberOfUpdate/$ReadyUpdatesToInstall] $($Update.Title)" -PercentComplete ([int]($NumberOfUpdate/$ReadyUpdatesToInstall * 100))
Write-Debug "Show update to install: $($Update.Title)"
Write-Debug "Send update to install collection"
$objCollectionTmp = New-Object -ComObject "Microsoft.Update.UpdateColl"
$objCollectionTmp.Add($Update) | Out-Null
$objInstaller = $objSession.CreateUpdateInstaller()
$objInstaller.Updates = $objCollectionTmp
Try
{
Write-Debug "Try install update"
$InstallResult = $objInstaller.Install()
} #End Try
Catch
{
If($_ -match "HRESULT: 0x80240044")
{
Write-Warning "Your security policy don't allow a non-administator identity to perform this task"
} #End If $_ -match "HRESULT: 0x80240044"
Return
} #End Catch
If(!$NeedsReboot)
{
Write-Debug "Set instalation status RebootRequired"
$NeedsReboot = $installResult.RebootRequired
} #End If !$NeedsReboot
Switch -exact ($InstallResult.ResultCode)
{
0 { $Status = "NotStarted"}
1 { $Status = "InProgress"}
2 { $Status = "Installed"}
3 { $Status = "InstalledWithErrors"}
4 { $Status = "Failed"}
5 { $Status = "Aborted"}
} #End Switch
Write-Debug "Add to log collection"
$log = New-Object PSObject -Property @{
Title = $Update.Title
KB = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].KB
Size = $UpdatesExtraDataCollection[$Update.Identity.UpdateID].Size
Status = $Status
X = 4
} #End PSObject Property
$log.PSTypeNames.Clear()
$log.PSTypeNames.Add('PSWindowsUpdate.WUInstall')
$log
$NumberOfUpdate++
} #End Foreach $Update in $objCollectionDownload
Write-Progress -Activity "[4/$NumberOfStage] Installing updates" -Status "Completed" -Completed
If($NeedsReboot)
{
If($AutoReboot)
{
Restart-Computer -Force
} #End If $AutoReboot
ElseIf($IgnoreReboot)
{
Return "Reboot is required, but do it manually."
} #End Else $AutoReboot If $IgnoreReboot
Else
{
$Reboot = Read-Host "Reboot is required. Do it now ? [Y/N]"
If($Reboot -eq "Y")
{
Restart-Computer -Force
} #End If $Reboot -eq "Y"
} #End Else $IgnoreReboot
} #End If $NeedsReboot
################################
# End STAGE 4: Install updates #
################################
#endregion
} #End If !$DownloadOnly
} #End !$ListOnly
} #End Process
End{}
} #In The End :)