Try this:
$updateServer = "serverName"
$machineName = "machineName"
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false)
$updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope
$updateScope.includedInstallationStates = "NotInstalled"
$com = $wsus.GetComputerTargetByName($machineName)
$com.GetUpdateInstallationInfoPerUpdate($updateScope)
---
Shay Levy
Windows PowerShell MVP
http://blogs.microsoft.co.il/blogs/ScriptFanatic
PowerShell Toolbar:
http://tinyurl.com/PSToolbar
j> Brilliant! I think I'm pretty close now.
j>
j> In the WSUS console if you highlight a computer in the Summary pane
j> you have 'Updates Needed' and clicking the link gives you a report on
j> which updates are required on the machine.
j>
j> In the stuff you have just done there are results for
j>
j> Approved: Yes or No
j> Installed: Yes or No
j> etc
j> but I can't see anything for Updates Needed?
j>
j> If I can just get this then I will have my goal of:
j>
j> - Get details for a particular computer
j> - Filter the results to only show those updates needed
j> - Approve all the updates returned in the filter to a particular
j> computer
j> group.
j> Thanks!
j> Jonathan
j> "Shay Levy [MVP]" wrote:
j>
Quote:
Quote:
>> Hello jmedd,
>>
>> This is what I
>> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateSer
>> vices.Administration")
>>
>> $updateServer = "serverName"
>> $machineName = "machineName"
>> $wsus =
>> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer
>> ($updateServer,$false)
>> $com = $wsus.GetComputerTargetByName($machineName)
>> # get info for the specified machineName PS > $com
>>
>> UpdateServer :
>> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer
>> Id : 687b433f-18c0-45c0-8dbb-0f45a484d73e
>> FullDomainName : serverName
>> IPAddress : 10.4.90.135
>> Make : HP
>> Model : ProLiant BL460c G1
>> BiosInfo :
>> Microsoft.UpdateServices.Administration.BiosInfo
>> OSInfo :
>> Microsoft.UpdateServices.Administration.OSInfo
>> OSArchitecture : x86
>> ClientVersion : 7.1.6001.65
>> OSFamily : Windows
>> OSDescription : Windows Server 2003 Enterprise Edition
>> ComputerRole : Server
>> LastSyncTime : 10/09/2008 11:52:50
>> LastSyncResult : Succeeded
>> LastReportedStatusTime : 10/09/2008 12:07:48
>> LastReportedInventoryTime : 01/01/0001 00:00:00
>> RequestedTargetGroupName :
>> RequestedTargetGroupNames : {}
>> ComputerTargetGroupIds : {b73ca6ed-5727-47f3-84de-015e03f6a88a,
>> a0a08746-4dbe-4a37-9adf-9e7652c0b421}
>> ParentServerId : 00000000-0000-0000-0000-000000000000
>> SyncsFromDownstreamServer : False
>> # get installation summary
>> PS > $com.GetUpdateInstallationSummary()
>> UnknownCount : 44
>> NotApplicableCount : 2131
>> NotInstalledCount : 15
>> DownloadedCount : 0
>> InstalledCount : 40
>> InstalledPendingRebootCount : 0
>> FailedCount : 0
>> IsSummedAcrossAllUpdates : True
>> UpdateId : 00000000-0000-0000-0000-000000000000
>> ComputerTargetGroupId : 00000000-0000-0000-0000-000000000000
>> ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e
>> LastUpdated : 05/10/2008 12:59:27
>> # updates report sample output
>> PS > $com.GetUpdateInstallationInfoPerUpdate()
>> UpdateServer :
>> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer
>> UpdateInstallationState : NotApplicable
>> UpdateApprovalAction : Install
>> UpdateApprovalTargetGroupId : a0a08746-4dbe-4a37-9adf-9e7652c0b421
>> ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e
>> UpdateId : 1847ae6d-8360-4e5a-9d15-da82b24deffd
>> You can translate an UpdateId guid to its object like so:
>>
>> PS > $upd = $com.GetUpdateInstallationInfoPerUpdate() PS 42>
>> $wsus.GetUpdate($upd[0].updateid)
>>
>> UpdateServer :
>> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer
>> Id :
>> Microsoft.UpdateServices.Administration.UpdateRevisionId
>> Title : Windows XP Update Package,
>> October 25,
>> 2001
>> Description : This update resolves all
>> critical issues
>> that were found in Windows XP between Aug
>> ust 2001 and October 2001, and is discussed
>> in Microsoft Knowledge Base (KB) Artic
>> le Q309521. Among the updates included
>> in this package are several that eliminate
>> security vulnerabilities. Download now
>> to ensure that you have all the latest crit
>> ical updates for Windows XP.
>> LegacyName : q309521_xp_4973
>> MsrcSeverity : Unspecified
>> KnowledgebaseArticles : {309521}
>> SecurityBulletins : {}
>> AdditionalInformationUrls :
>> {http://www.download.windowsupdate.co...e/v3/static/RT
>> F/en/4973.htm
>> }
>> ReleaseNotes :
>> UpdateClassificationTitle : Critical Updates
>> CompanyTitles : {Microsoft}
>> ProductTitles : {Windows XP}
>> ProductFamilyTitles : {Windows}
>> IsLatestRevision : True
>> HasEarlierRevision : False
>> Size : 0
>> CreationDate : 18/02/2003 21:28:13
>> ArrivalDate : 11/06/2008 09:11:51
>> UpdateType : Software
>> PublicationState : Published
>> InstallationBehavior :
>> Microsoft.UpdateServices.Administration.InstallationBehavior
>> UninstallationBehavior :
>> Microsoft.UpdateServices.Administration.InstallationBehavior
>> IsBeta : False
>> HasStaleUpdateApprovals : False
>> IsApproved : True
>> IsDeclined : False
>> DefaultPropertiesLanguage :
>> HasLicenseAgreement : False
>> RequiresLicenseAgreementAcceptance : False
>> State : Ready
>> HasSupersededUpdates : False
>> IsSuperseded : True
>> IsWsusInfrastructureUpdate : False
>> IsEditable : False
>> UpdateSource : MicrosoftUpdate
>> ---
>> Shay Levy
>> Windows PowerShell MVP
>> http://blogs.microsoft.co.il/blogs/ScriptFanatic
>> PowerShell Toolbar: http://tinyurl.com/PSToolbar
>> j> Awesome, that is taking it a lot further than I was getting.
>> Thanks
>> j> so much.
>> j>
>> j> The further steps I need to take it are:
>> j>
>> j> 1) Be able to specify a particular client machine
>> j> 2) Find only updates which are not approved for that machine
>> j> 3) Approve all the updates which are approved for that machine
>> j> specifying a
>> j> particular computer target group for the approval.
>> j> If I can get that, it will save me hours, maybe days of work!
>> j>
>> j> Thanks
>> j> Jonathan
>> j> "Shay Levy [MVP]" wrote:
>> j> Quote:
>>>> Hello jmedd,
>>>>
>>>> I was able to run this and get results:
>>>>
>>>> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateS
>>>> er vices.Administration")
>>>>
>>>> $updateServer = "updateServerName"
>>>> $wsus =
>>>> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServ
>>>> er
>>>> ($updateServer,$false)
>>>> $computerScope = new-object
>>>> Microsoft.UpdateServices.Administration.ComputerTargetScope
>>>> $computerScope.includedInstallationStates =
>>>> "Installed,NotInstalled"
>>>> $updateScope = new-object
>>>> Microsoft.UpdateServices.Administration.UpdateScope
>>>> $updateScope.includedInstallationStates = "Installed,NotInstalled"
>>>>
>>>> $wsus.getComputerTargets($ComputerScope) | foreach {
>>>>
>>>> $machine = $_
>>>> $fdn = @{n="FullDomainName";e={$machine.fullDomainName}}
>>>> $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach {
>>>> $updateId = $wsus.getUpdate($_.updateId)
>>>> $updateId | select
>>>> $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles
>>>> }
>>>> }
>>>> Here's the first item output:
>>>> FullDomainName : serverName.domain
>>>> Title : Cumulative Security Update for Outlook
>>>> Express for
>>>> Windows Server 2003 (KB929123)
>>>> UpdateType : Software
>>>> IsApproved : True
>>>> IsDeclined : False
>>>> KnowledgebaseArticles : {929123}
>>>> HTH
>>>> ---
>>>> Shay Levy
>>>> Windows PowerShell MVP
>>>> http://blogs.microsoft.co.il/blogs/ScriptFanatic
>>>> PowerShell Toolbar: http://tinyurl.com/PSToolbar
>>>> j> I need to approve around 100 updates for a client computer in
>>>> WSUS.
>>>> j> Using the WSUS console for this is impracticle since its
>>>> involves
>>>> j> about 5 - 6 clicks per update, so naturally I am looking to
>>>> j> Powershell for a solution.
>>>> j>
>>>> j> There are some sample scripts for managing WSUS 3.0 at the
>>>> script
>>>> j> center.
>>>> j>
>>>> j>
>>>> http://www.microsoft.com/technet/scr.../sus/server/de
>>>> fa
>>>> j> ult.mspx?mfr=true
>>>> j>
>>>> j> Basically what I need to do is for a particular computer find
>>>> which
>>>> j> updates need approving and then approve them all for a
>>>> particular
>>>> j> WSUS computer group in one go.
>>>> j>
>>>> j> So far I have:
>>>> j>
>>>> j>
>>>> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateService
>>>> s.
>>>> j> Administration") | out-null
>>>> j> if (!$wsus) {
>>>> j> $wsus =
>>>> j>
>>>> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServ
>>>> er
>>>> j> ();
>>>> j> }
>>>> j>
>>>> j> $wsus.GetComputerTargets()
>>>> j>
>>>> j> This basically returns a lot of info about the computers, but
>>>> nothing
>>>> j> to do with approvals.
>>>> j>
>>>> j> Similarly the following gives you a load of info about the
>>>> updates
>>>> j> including whether they are approved or not, but does not tell
>>>> you
>>>> j> which group they are approved for.
>>>> j>
>>>> j>
>>>> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateService
>>>> s.
>>>> j> Administration") | out-null
>>>> j> if (!$wsus) {
>>>> j> $wsus =
>>>> j>
>>>> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServ
>>>> er
>>>> j> ();
>>>> j> }
>>>> j>
>>>> j> $updateScope = new-object
>>>> j> Microsoft.UpdateServices.Administration.UpdateScope;
>>>> j> $updateScope.UpdateApprovalActions =
>>>> j>
>>>> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::In
>>>> st
>>>> j> all `
>>>> j> -bor
>>>> j>
>>>> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Un
>>>> in
>>>> j> stall
>>>> j> $wsus.GetUpdates($updateScope)
>>>> j>
>>>> j> Exchanging the last line for
>>>> j>
>>>> j> $wsus.GetUpdateApprovals($updateScope)
>>>> j>
>>>> j> gets you some approval info, but not quite what I'm looking for.
>>>> j>
>>>> j> Anyone willing to assist would be most appreciated.
>>>> j>