|
 |  |  |  |  |  |  |
| Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks. |
| |||||||
 |
| |
10-01-2008
| #1 (permalink) |
| Guest | Powershell, WSUS, Execute Multiple Approvals per client computer I need to approve around 100 updates for a client computer in WSUS. Using the WSUS console for this is impracticle since its involves about 5 - 6 clicks per update, so naturally I am looking to Powershell for a solution. There are some sample scripts for managing WSUS 3.0 at the script center. http://www.microsoft.com/technet/scr....mspx?mfr=true Basically what I need to do is for a particular computer find which updates need approving and then approve them all for a particular WSUS computer group in one go. So far I have: [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") | out-null if (!$wsus) { $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer(); } $wsus.GetComputerTargets() This basically returns a lot of info about the computers, but nothing to do with approvals. Similarly the following gives you a load of info about the updates including whether they are approved or not, but does not tell you which group they are approved for. [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") | out-null if (!$wsus) { $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer(); } $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope; $updateScope.UpdateApprovalActions = [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Install ` -bor [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Uninstall $wsus.GetUpdates($updateScope) Exchanging the last line for $wsus.GetUpdateApprovals($updateScope) gets you some approval info, but not quite what I'm looking for. Anyone willing to assist would be most appreciated. |
My System Specs |
|
10-02-2008
| #2 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client computer Hello jmedd, I was able to run this and get results: [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") $updateServer = "updateServerName" $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) $computerScope = new-object Microsoft.UpdateServices.Administration.ComputerTargetScope $computerScope.includedInstallationStates = "Installed,NotInstalled" $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope $updateScope.includedInstallationStates = "Installed,NotInstalled" $wsus.getComputerTargets($ComputerScope) | foreach { $machine = $_ $fdn = @{n="FullDomainName";e={$machine.fullDomainName}} $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach { $updateId = $wsus.getUpdate($_.updateId) $updateId | select $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles } } Here's the first item output: FullDomainName : serverName.domain Title : Cumulative Security Update for Outlook Express for Windows Server 2003 (KB929123) UpdateType : Software IsApproved : True IsDeclined : False KnowledgebaseArticles : {929123} HTH --- Shay Levy Windows PowerShell MVP http://blogs.microsoft.co.il/blogs/ScriptFanatic PowerShell Toolbar: http://tinyurl.com/PSToolbar j> I need to approve around 100 updates for a client computer in WSUS. j> Using the WSUS console for this is impracticle since its involves j> about 5 - 6 clicks per update, so naturally I am looking to j> Powershell for a solution. j> j> There are some sample scripts for managing WSUS 3.0 at the script j> center. j> j> http://www.microsoft.com/technet/scr...us/server/defa j> ult.mspx?mfr=true j> j> Basically what I need to do is for a particular computer find which j> updates need approving and then approve them all for a particular j> WSUS computer group in one go. j> j> So far I have: j> j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. j> Administration") | out-null j> if (!$wsus) { j> $wsus = j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer j> (); j> } j> j> $wsus.GetComputerTargets() j> j> This basically returns a lot of info about the computers, but nothing j> to do with approvals. j> j> Similarly the following gives you a load of info about the updates j> including whether they are approved or not, but does not tell you j> which group they are approved for. j> j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. j> Administration") | out-null j> if (!$wsus) { j> $wsus = j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer j> (); j> } j> j> $updateScope = new-object j> Microsoft.UpdateServices.Administration.UpdateScope; j> $updateScope.UpdateApprovalActions = j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Inst j> all ` j> -bor j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Unin j> stall j> $wsus.GetUpdates($updateScope) j> j> Exchanging the last line for j> j> $wsus.GetUpdateApprovals($updateScope) j> j> gets you some approval info, but not quite what I'm looking for. j> j> Anyone willing to assist would be most appreciated. j> |
| My System Specs |
|
10-02-2008
| #3 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client comput Awesome, that is taking it a lot further than I was getting. Thanks so much. The further steps I need to take it are: 1) Be able to specify a particular client machine 2) Find only updates which are not approved for that machine 3) Approve all the updates which are approved for that machine specifying a particular computer target group for the approval. If I can get that, it will save me hours, maybe days of work! Thanks Jonathan "Shay Levy [MVP]" wrote: Quote: > Hello jmedd, > > > I was able to run this and get results: > > > > [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") > > > $updateServer = "updateServerName" > $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) > > $computerScope = new-object Microsoft.UpdateServices.Administration.ComputerTargetScope > $computerScope.includedInstallationStates = "Installed,NotInstalled" > > $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope > $updateScope.includedInstallationStates = "Installed,NotInstalled" > > > $wsus.getComputerTargets($ComputerScope) | foreach { > > $machine = $_ > $fdn = @{n="FullDomainName";e={$machine.fullDomainName}} > > $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach { > $updateId = $wsus.getUpdate($_.updateId) > $updateId | select $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles > } > } > > > > Here's the first item output: > > FullDomainName : serverName.domain > Title : Cumulative Security Update for Outlook Express for > Windows Server 2003 (KB929123) > UpdateType : Software > IsApproved : True > IsDeclined : False > KnowledgebaseArticles : {929123} > > > > HTH > > --- > Shay Levy > Windows PowerShell MVP > http://blogs.microsoft.co.il/blogs/ScriptFanatic > PowerShell Toolbar: http://tinyurl.com/PSToolbar > > > j> I need to approve around 100 updates for a client computer in WSUS. > j> Using the WSUS console for this is impracticle since its involves > j> about 5 - 6 clicks per update, so naturally I am looking to > j> Powershell for a solution. > j> > j> There are some sample scripts for managing WSUS 3.0 at the script > j> center. > j> > j> http://www.microsoft.com/technet/scr...us/server/defa > j> ult.mspx?mfr=true > j> > j> Basically what I need to do is for a particular computer find which > j> updates need approving and then approve them all for a particular > j> WSUS computer group in one go. > j> > j> So far I have: > j> > j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. > j> Administration") | out-null > j> if (!$wsus) { > j> $wsus = > j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer > j> (); > j> } > j> > j> $wsus.GetComputerTargets() > j> > j> This basically returns a lot of info about the computers, but nothing > j> to do with approvals. > j> > j> Similarly the following gives you a load of info about the updates > j> including whether they are approved or not, but does not tell you > j> which group they are approved for. > j> > j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. > j> Administration") | out-null > j> if (!$wsus) { > j> $wsus = > j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer > j> (); > j> } > j> > j> $updateScope = new-object > j> Microsoft.UpdateServices.Administration.UpdateScope; > j> $updateScope.UpdateApprovalActions = > j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Inst > j> all ` > j> -bor > j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Unin > j> stall > j> $wsus.GetUpdates($updateScope) > j> > j> Exchanging the last line for > j> > j> $wsus.GetUpdateApprovals($updateScope) > j> > j> gets you some approval info, but not quite what I'm looking for. > j> > j> Anyone willing to assist would be most appreciated. > j> > > > |
| My System Specs |
|
10-02-2008
| #4 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client computer Take II: $updateServer = "serverName" $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope $updateScope.updateApprovalActions = "Install,Uninstall" $updates = $wsus.getUpdates($updateScope) $updates[0] | gm -MemberType method a* TypeName: Microsoft.UpdateServices.Internal.BaseApi.Update Name MemberType Definition ---- ---------- ---------- .... Approve Method Microsoft.UpdateServices.Administra... .... Notice that the Approve() method has two overloads: Approve(UpdateApprovalAction action, IComputerTargetGroup targetGroup), Approve(UpdateApprovalAction action, IComputerTargetGroup targetGroup, DateTime deadline)} --- Shay Levy Windows PowerShell MVP http://blogs.microsoft.co.il/blogs/ScriptFanatic PowerShell Toolbar: http://tinyurl.com/PSToolbar j> I need to approve around 100 updates for a client computer in WSUS. j> Using the WSUS console for this is impracticle since its involves j> about 5 - 6 clicks per update, so naturally I am looking to j> Powershell for a solution. j> j> There are some sample scripts for managing WSUS 3.0 at the script j> center. j> j> http://www.microsoft.com/technet/scr...us/server/defa j> ult.mspx?mfr=true j> j> Basically what I need to do is for a particular computer find which j> updates need approving and then approve them all for a particular j> WSUS computer group in one go. j> j> So far I have: j> j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. j> Administration") | out-null j> if (!$wsus) { j> $wsus = j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer j> (); j> } j> j> $wsus.GetComputerTargets() j> j> This basically returns a lot of info about the computers, but nothing j> to do with approvals. j> j> Similarly the following gives you a load of info about the updates j> including whether they are approved or not, but does not tell you j> which group they are approved for. j> j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. j> Administration") | out-null j> if (!$wsus) { j> $wsus = j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer j> (); j> } j> j> $updateScope = new-object j> Microsoft.UpdateServices.Administration.UpdateScope; j> $updateScope.UpdateApprovalActions = j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Inst j> all ` j> -bor j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Unin j> stall j> $wsus.GetUpdates($updateScope) j> j> Exchanging the last line for j> j> $wsus.GetUpdateApprovals($updateScope) j> j> gets you some approval info, but not quite what I'm looking for. j> j> Anyone willing to assist would be most appreciated. j> |
| My System Specs |
|
10-03-2008
| #5 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client comput OK cool. So those are the methods to make the approvals happen. Are you able to help me put it all together like in the previous post? "Shay Levy [MVP]" wrote: Quote: > Take II: > > > > $updateServer = "serverName" > $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) > > $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope > $updateScope.updateApprovalActions = "Install,Uninstall" > > $updates = $wsus.getUpdates($updateScope) > > > $updates[0] | gm -MemberType method a* > > TypeName: Microsoft.UpdateServices.Internal.BaseApi.Update > > Name MemberType Definition > ---- ---------- ---------- > .... > Approve Method Microsoft.UpdateServices.Administra... > .... > > > > > Notice that the Approve() method has two overloads: > > Approve(UpdateApprovalAction action, IComputerTargetGroup targetGroup), > Approve(UpdateApprovalAction action, IComputerTargetGroup targetGroup, DateTime > deadline)} > > > > > --- > Shay Levy > Windows PowerShell MVP > http://blogs.microsoft.co.il/blogs/ScriptFanatic > PowerShell Toolbar: http://tinyurl.com/PSToolbar > > > j> I need to approve around 100 updates for a client computer in WSUS. > j> Using the WSUS console for this is impracticle since its involves > j> about 5 - 6 clicks per update, so naturally I am looking to > j> Powershell for a solution. > j> > j> There are some sample scripts for managing WSUS 3.0 at the script > j> center. > j> > j> http://www.microsoft.com/technet/scr...us/server/defa > j> ult.mspx?mfr=true > j> > j> Basically what I need to do is for a particular computer find which > j> updates need approving and then approve them all for a particular > j> WSUS computer group in one go. > j> > j> So far I have: > j> > j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. > j> Administration") | out-null > j> if (!$wsus) { > j> $wsus = > j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer > j> (); > j> } > j> > j> $wsus.GetComputerTargets() > j> > j> This basically returns a lot of info about the computers, but nothing > j> to do with approvals. > j> > j> Similarly the following gives you a load of info about the updates > j> including whether they are approved or not, but does not tell you > j> which group they are approved for. > j> > j> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. > j> Administration") | out-null > j> if (!$wsus) { > j> $wsus = > j> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer > j> (); > j> } > j> > j> $updateScope = new-object > j> Microsoft.UpdateServices.Administration.UpdateScope; > j> $updateScope.UpdateApprovalActions = > j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Inst > j> all ` > j> -bor > j> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Unin > j> stall > j> $wsus.GetUpdates($updateScope) > j> > j> Exchanging the last line for > j> > j> $wsus.GetUpdateApprovals($updateScope) > j> > j> gets you some approval info, but not quite what I'm looking for. > j> > j> Anyone willing to assist would be most appreciated. > j> > > > > |
| My System Specs |
|
10-05-2008
| #6 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client comput Hello jmedd, This is what I [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") $updateServer = "serverName" $machineName = "machineName" $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) $com = $wsus.GetComputerTargetByName($machineName) # get info for the specified machineName PS > $com UpdateServer : Microsoft.UpdateServices.Internal.BaseApi.UpdateServer Id : 687b433f-18c0-45c0-8dbb-0f45a484d73e FullDomainName : serverName IPAddress : 10.4.90.135 Make : HP Model : ProLiant BL460c G1 BiosInfo : Microsoft.UpdateServices.Administration.BiosInfo OSInfo : Microsoft.UpdateServices.Administration.OSInfo OSArchitecture : x86 ClientVersion : 7.1.6001.65 OSFamily : Windows OSDescription : Windows Server 2003 Enterprise Edition ComputerRole : Server LastSyncTime : 10/09/2008 11:52:50 LastSyncResult : Succeeded LastReportedStatusTime : 10/09/2008 12:07:48 LastReportedInventoryTime : 01/01/0001 00:00:00 RequestedTargetGroupName : RequestedTargetGroupNames : {} ComputerTargetGroupIds : {b73ca6ed-5727-47f3-84de-015e03f6a88a, a0a08746-4dbe-4a37-9adf-9e7652c0b421} ParentServerId : 00000000-0000-0000-0000-000000000000 SyncsFromDownstreamServer : False # get installation summary PS > $com.GetUpdateInstallationSummary() UnknownCount : 44 NotApplicableCount : 2131 NotInstalledCount : 15 DownloadedCount : 0 InstalledCount : 40 InstalledPendingRebootCount : 0 FailedCount : 0 IsSummedAcrossAllUpdates : True UpdateId : 00000000-0000-0000-0000-000000000000 ComputerTargetGroupId : 00000000-0000-0000-0000-000000000000 ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e LastUpdated : 05/10/2008 12:59:27 # updates report sample output PS > $com.GetUpdateInstallationInfoPerUpdate() UpdateServer : Microsoft.UpdateServices.Internal.BaseApi.UpdateServer UpdateInstallationState : NotApplicable UpdateApprovalAction : Install UpdateApprovalTargetGroupId : a0a08746-4dbe-4a37-9adf-9e7652c0b421 ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e UpdateId : 1847ae6d-8360-4e5a-9d15-da82b24deffd You can translate an UpdateId guid to its object like so: PS > $upd = $com.GetUpdateInstallationInfoPerUpdate() PS 42> $wsus.GetUpdate($upd[0].updateid) UpdateServer : Microsoft.UpdateServices.Internal.BaseApi.UpdateServer Id : Microsoft.UpdateServices.Administration.UpdateRevisionId Title : Windows XP Update Package, October 25, 2001 Description : This update resolves all critical issues that were found in Windows XP between Aug ust 2001 and October 2001, and is discussed in Microsoft Knowledge Base (KB) Artic le Q309521. Among the updates included in this package are several that eliminate security vulnerabilities. Download now to ensure that you have all the latest crit ical updates for Windows XP. LegacyName : q309521_xp_4973 MsrcSeverity : Unspecified KnowledgebaseArticles : {309521} SecurityBulletins : {} AdditionalInformationUrls : {http://www.download.windowsupdate.co...TF/en/4973.htm } ReleaseNotes : UpdateClassificationTitle : Critical Updates CompanyTitles : {Microsoft} ProductTitles : {Windows XP} ProductFamilyTitles : {Windows} IsLatestRevision : True HasEarlierRevision : False Size : 0 CreationDate : 18/02/2003 21:28:13 ArrivalDate : 11/06/2008 09:11:51 UpdateType : Software PublicationState : Published InstallationBehavior : Microsoft.UpdateServices.Administration.InstallationBehavior UninstallationBehavior : Microsoft.UpdateServices.Administration.InstallationBehavior IsBeta : False HasStaleUpdateApprovals : False IsApproved : True IsDeclined : False DefaultPropertiesLanguage : HasLicenseAgreement : False RequiresLicenseAgreementAcceptance : False State : Ready HasSupersededUpdates : False IsSuperseded : True IsWsusInfrastructureUpdate : False IsEditable : False UpdateSource : MicrosoftUpdate --- Shay Levy Windows PowerShell MVP http://blogs.microsoft.co.il/blogs/ScriptFanatic PowerShell Toolbar: http://tinyurl.com/PSToolbar j> Awesome, that is taking it a lot further than I was getting. Thanks j> so much. j> j> The further steps I need to take it are: j> j> 1) Be able to specify a particular client machine j> 2) Find only updates which are not approved for that machine j> 3) Approve all the updates which are approved for that machine j> specifying a j> particular computer target group for the approval. j> If I can get that, it will save me hours, maybe days of work! j> j> Thanks j> Jonathan j> "Shay Levy [MVP]" wrote: j> Quote: Quote: >> Hello jmedd, >> >> I was able to run this and get results: >> >> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateSer >> vices.Administration") >> >> $updateServer = "updateServerName" >> $wsus = >> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer >> ($updateServer,$false) >> $computerScope = new-object >> Microsoft.UpdateServices.Administration.ComputerTargetScope >> $computerScope.includedInstallationStates = "Installed,NotInstalled" >> >> $updateScope = new-object >> Microsoft.UpdateServices.Administration.UpdateScope >> $updateScope.includedInstallationStates = "Installed,NotInstalled" >> >> $wsus.getComputerTargets($ComputerScope) | foreach { >> >> $machine = $_ >> $fdn = @{n="FullDomainName";e={$machine.fullDomainName}} >> $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach { >> $updateId = $wsus.getUpdate($_.updateId) >> $updateId | select >> $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles >> } >> } >> Here's the first item output: >> >> FullDomainName : serverName.domain >> Title : Cumulative Security Update for Outlook >> Express for >> Windows Server 2003 (KB929123) >> UpdateType : Software >> IsApproved : True >> IsDeclined : False >> KnowledgebaseArticles : {929123} >> HTH >> >> --- >> Shay Levy >> Windows PowerShell MVP >> http://blogs.microsoft.co.il/blogs/ScriptFanatic >> PowerShell Toolbar: http://tinyurl.com/PSToolbar >> j> I need to approve around 100 updates for a client computer in >> WSUS. >> j> Using the WSUS console for this is impracticle since its involves >> j> about 5 - 6 clicks per update, so naturally I am looking to >> j> Powershell for a solution. >> j> >> j> There are some sample scripts for managing WSUS 3.0 at the script >> j> center. >> j> >> j> >> http://www.microsoft.com/technet/scr...us/server/defa >> j> ult.mspx?mfr=true >> j> >> j> Basically what I need to do is for a particular computer find >> which >> j> updates need approving and then approve them all for a particular >> j> WSUS computer group in one go. >> j> >> j> So far I have: >> j> >> j> >> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. >> j> Administration") | out-null >> j> if (!$wsus) { >> j> $wsus = >> j> >> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer >> j> (); >> j> } >> j> >> j> $wsus.GetComputerTargets() >> j> >> j> This basically returns a lot of info about the computers, but >> nothing >> j> to do with approvals. >> j> >> j> Similarly the following gives you a load of info about the updates >> j> including whether they are approved or not, but does not tell you >> j> which group they are approved for. >> j> >> j> >> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. >> j> Administration") | out-null >> j> if (!$wsus) { >> j> $wsus = >> j> >> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer >> j> (); >> j> } >> j> >> j> $updateScope = new-object >> j> Microsoft.UpdateServices.Administration.UpdateScope; >> j> $updateScope.UpdateApprovalActions = >> j> >> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Inst >> j> all ` >> j> -bor >> j> >> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Unin >> j> stall >> j> $wsus.GetUpdates($updateScope) >> j> >> j> Exchanging the last line for >> j> >> j> $wsus.GetUpdateApprovals($updateScope) >> j> >> j> gets you some approval info, but not quite what I'm looking for. >> j> >> j> Anyone willing to assist would be most appreciated. >> j> |
| My System Specs |
|
10-06-2008
| #7 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client comput Brilliant! I think I'm pretty close now. In the WSUS console if you highlight a computer in the Summary pane you have 'Updates Needed' and clicking the link gives you a report on which updates are required on the machine. In the stuff you have just done there are results for Approved: Yes or No Installed: Yes or No etc but I can't see anything for Updates Needed? If I can just get this then I will have my goal of: - Get details for a particular computer - Filter the results to only show those updates needed - Approve all the updates returned in the filter to a particular computer group. Thanks! Jonathan "Shay Levy [MVP]" wrote: Quote: > Hello jmedd, > > This is what I > [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") > > > $updateServer = "serverName" > $machineName = "machineName" > $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) > $com = $wsus.GetComputerTargetByName($machineName) > > # get info for the specified machineName > PS > $com > > UpdateServer : Microsoft.UpdateServices.Internal.BaseApi.UpdateServer > Id : 687b433f-18c0-45c0-8dbb-0f45a484d73e > FullDomainName : serverName > IPAddress : 10.4.90.135 > Make : HP > Model : ProLiant BL460c G1 > BiosInfo : Microsoft.UpdateServices.Administration.BiosInfo > OSInfo : Microsoft.UpdateServices.Administration.OSInfo > OSArchitecture : x86 > ClientVersion : 7.1.6001.65 > OSFamily : Windows > OSDescription : Windows Server 2003 Enterprise Edition > ComputerRole : Server > LastSyncTime : 10/09/2008 11:52:50 > LastSyncResult : Succeeded > LastReportedStatusTime : 10/09/2008 12:07:48 > LastReportedInventoryTime : 01/01/0001 00:00:00 > RequestedTargetGroupName : > RequestedTargetGroupNames : {} > ComputerTargetGroupIds : {b73ca6ed-5727-47f3-84de-015e03f6a88a, a0a08746-4dbe-4a37-9adf-9e7652c0b421} > ParentServerId : 00000000-0000-0000-0000-000000000000 > SyncsFromDownstreamServer : False > > > # get installation summary > PS > $com.GetUpdateInstallationSummary() > > UnknownCount : 44 > NotApplicableCount : 2131 > NotInstalledCount : 15 > DownloadedCount : 0 > InstalledCount : 40 > InstalledPendingRebootCount : 0 > FailedCount : 0 > IsSummedAcrossAllUpdates : True > UpdateId : 00000000-0000-0000-0000-000000000000 > ComputerTargetGroupId : 00000000-0000-0000-0000-000000000000 > ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e > LastUpdated : 05/10/2008 12:59:27 > > > # updates report sample output > PS > $com.GetUpdateInstallationInfoPerUpdate() > > UpdateServer : Microsoft.UpdateServices.Internal.BaseApi.UpdateServer > UpdateInstallationState : NotApplicable > UpdateApprovalAction : Install > UpdateApprovalTargetGroupId : a0a08746-4dbe-4a37-9adf-9e7652c0b421 > ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e > UpdateId : 1847ae6d-8360-4e5a-9d15-da82b24deffd > > > > You can translate an UpdateId guid to its object like so: > > PS > $upd = $com.GetUpdateInstallationInfoPerUpdate() > PS 42> $wsus.GetUpdate($upd[0].updateid) > > > UpdateServer : Microsoft.UpdateServices.Internal.BaseApi.UpdateServer > Id : Microsoft.UpdateServices.Administration.UpdateRevisionId > Title : Windows XP Update Package, October 25, > 2001 > Description : This update resolves all critical issues > that were found in Windows XP between Aug > ust 2001 and October 2001, and is discussed > in Microsoft Knowledge Base (KB) Artic > le Q309521. Among the updates included > in this package are several that eliminate > security vulnerabilities. Download now > to ensure that you have all the latest crit > ical updates for Windows XP. > LegacyName : q309521_xp_4973 > MsrcSeverity : Unspecified > KnowledgebaseArticles : {309521} > SecurityBulletins : {} > AdditionalInformationUrls : {http://www.download.windowsupdate.co...TF/en/4973.htm > } > ReleaseNotes : > UpdateClassificationTitle : Critical Updates > CompanyTitles : {Microsoft} > ProductTitles : {Windows XP} > ProductFamilyTitles : {Windows} > IsLatestRevision : True > HasEarlierRevision : False > Size : 0 > CreationDate : 18/02/2003 21:28:13 > ArrivalDate : 11/06/2008 09:11:51 > UpdateType : Software > PublicationState : Published > InstallationBehavior : Microsoft.UpdateServices.Administration.InstallationBehavior > UninstallationBehavior : Microsoft.UpdateServices.Administration.InstallationBehavior > IsBeta : False > HasStaleUpdateApprovals : False > IsApproved : True > IsDeclined : False > DefaultPropertiesLanguage : > HasLicenseAgreement : False > RequiresLicenseAgreementAcceptance : False > State : Ready > HasSupersededUpdates : False > IsSuperseded : True > IsWsusInfrastructureUpdate : False > IsEditable : False > UpdateSource : MicrosoftUpdate > > > > > > > --- > Shay Levy > Windows PowerShell MVP > http://blogs.microsoft.co.il/blogs/ScriptFanatic > PowerShell Toolbar: http://tinyurl.com/PSToolbar > > > j> Awesome, that is taking it a lot further than I was getting. Thanks > j> so much. > j> > j> The further steps I need to take it are: > j> > j> 1) Be able to specify a particular client machine > j> 2) Find only updates which are not approved for that machine > j> 3) Approve all the updates which are approved for that machine > j> specifying a > j> particular computer target group for the approval. > j> If I can get that, it will save me hours, maybe days of work! > j> > j> Thanks > j> Jonathan > j> "Shay Levy [MVP]" wrote: > j> Quote: Quote: > >> Hello jmedd, > >> > >> I was able to run this and get results: > >> > >> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateSer > >> vices.Administration") > >> > >> $updateServer = "updateServerName" > >> $wsus = > >> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer > >> ($updateServer,$false) > >> $computerScope = new-object > >> Microsoft.UpdateServices.Administration.ComputerTargetScope > >> $computerScope.includedInstallationStates = "Installed,NotInstalled" > >> > >> $updateScope = new-object > >> Microsoft.UpdateServices.Administration.UpdateScope > >> $updateScope.includedInstallationStates = "Installed,NotInstalled" > >> > >> $wsus.getComputerTargets($ComputerScope) | foreach { > >> > >> $machine = $_ > >> $fdn = @{n="FullDomainName";e={$machine.fullDomainName}} > >> $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach { > >> $updateId = $wsus.getUpdate($_.updateId) > >> $updateId | select > >> $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles > >> } > >> } > >> Here's the first item output: > >> > >> FullDomainName : serverName.domain > >> Title : Cumulative Security Update for Outlook > >> Express for > >> Windows Server 2003 (KB929123) > >> UpdateType : Software > >> IsApproved : True > >> IsDeclined : False > >> KnowledgebaseArticles : {929123} > >> HTH > >> > >> --- > >> Shay Levy > >> Windows PowerShell MVP > >> http://blogs.microsoft.co.il/blogs/ScriptFanatic > >> PowerShell Toolbar: http://tinyurl.com/PSToolbar > >> j> I need to approve around 100 updates for a client computer in > >> WSUS. > >> j> Using the WSUS console for this is impracticle since its involves > >> j> about 5 - 6 clicks per update, so naturally I am looking to > >> j> Powershell for a solution. > >> j> > >> j> There are some sample scripts for managing WSUS 3.0 at the script > >> j> center. > >> j> > >> j> > >> http://www.microsoft.com/technet/scr...us/server/defa > >> j> ult.mspx?mfr=true > >> j> > >> j> Basically what I need to do is for a particular computer find > >> which > >> j> updates need approving and then approve them all for a particular > >> j> WSUS computer group in one go. > >> j> > >> j> So far I have: > >> j> > >> j> > >> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. > >> j> Administration") | out-null > >> j> if (!$wsus) { > >> j> $wsus = > >> j> > >> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer > >> j> (); > >> j> } > >> j> > >> j> $wsus.GetComputerTargets() > >> j> > >> j> This basically returns a lot of info about the computers, but > >> nothing > >> j> to do with approvals. > >> j> > >> j> Similarly the following gives you a load of info about the updates > >> j> including whether they are approved or not, but does not tell you > >> j> which group they are approved for. > >> j> > >> j> > >> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices. > >> j> Administration") | out-null > >> j> if (!$wsus) { > >> j> $wsus = > >> j> > >> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer > >> j> (); > >> j> } > >> j> > >> j> $updateScope = new-object > >> j> Microsoft.UpdateServices.Administration.UpdateScope; > >> j> $updateScope.UpdateApprovalActions = > >> j> > >> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Inst > >> j> all ` > >> j> -bor > >> j> > >> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Unin > >> j> stall > >> j> $wsus.GetUpdates($updateScope) > >> j> > >> j> Exchanging the last line for > >> j> > >> j> $wsus.GetUpdateApprovals($updateScope) > >> j> > >> j> gets you some approval info, but not quite what I'm looking for. > >> j> > >> j> Anyone willing to assist would be most appreciated. > >> j> > > |
| My System Specs |
|
10-06-2008
| #8 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client comput Try this: $updateServer = "serverName" $machineName = "machineName" $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope $updateScope.includedInstallationStates = "NotInstalled" $com = $wsus.GetComputerTargetByName($machineName) $com.GetUpdateInstallationInfoPerUpdate($updateScope) --- Shay Levy Windows PowerShell MVP http://blogs.microsoft.co.il/blogs/ScriptFanatic PowerShell Toolbar: http://tinyurl.com/PSToolbar j> Brilliant! I think I'm pretty close now. j> j> In the WSUS console if you highlight a computer in the Summary pane j> you have 'Updates Needed' and clicking the link gives you a report on j> which updates are required on the machine. j> j> In the stuff you have just done there are results for j> j> Approved: Yes or No j> Installed: Yes or No j> etc j> but I can't see anything for Updates Needed? j> j> If I can just get this then I will have my goal of: j> j> - Get details for a particular computer j> - Filter the results to only show those updates needed j> - Approve all the updates returned in the filter to a particular j> computer j> group. j> Thanks! j> Jonathan j> "Shay Levy [MVP]" wrote: j> Quote: Quote: >> Hello jmedd, >> >> This is what I >> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateSer >> vices.Administration") >> >> $updateServer = "serverName" >> $machineName = "machineName" >> $wsus = >> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer >> ($updateServer,$false) >> $com = $wsus.GetComputerTargetByName($machineName) >> # get info for the specified machineName PS > $com >> >> UpdateServer : >> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer >> Id : 687b433f-18c0-45c0-8dbb-0f45a484d73e >> FullDomainName : serverName >> IPAddress : 10.4.90.135 >> Make : HP >> Model : ProLiant BL460c G1 >> BiosInfo : >> Microsoft.UpdateServices.Administration.BiosInfo >> OSInfo : >> Microsoft.UpdateServices.Administration.OSInfo >> OSArchitecture : x86 >> ClientVersion : 7.1.6001.65 >> OSFamily : Windows >> OSDescription : Windows Server 2003 Enterprise Edition >> ComputerRole : Server >> LastSyncTime : 10/09/2008 11:52:50 >> LastSyncResult : Succeeded >> LastReportedStatusTime : 10/09/2008 12:07:48 >> LastReportedInventoryTime : 01/01/0001 00:00:00 >> RequestedTargetGroupName : >> RequestedTargetGroupNames : {} >> ComputerTargetGroupIds : {b73ca6ed-5727-47f3-84de-015e03f6a88a, >> a0a08746-4dbe-4a37-9adf-9e7652c0b421} >> ParentServerId : 00000000-0000-0000-0000-000000000000 >> SyncsFromDownstreamServer : False >> # get installation summary >> PS > $com.GetUpdateInstallationSummary() >> UnknownCount : 44 >> NotApplicableCount : 2131 >> NotInstalledCount : 15 >> DownloadedCount : 0 >> InstalledCount : 40 >> InstalledPendingRebootCount : 0 >> FailedCount : 0 >> IsSummedAcrossAllUpdates : True >> UpdateId : 00000000-0000-0000-0000-000000000000 >> ComputerTargetGroupId : 00000000-0000-0000-0000-000000000000 >> ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e >> LastUpdated : 05/10/2008 12:59:27 >> # updates report sample output >> PS > $com.GetUpdateInstallationInfoPerUpdate() >> UpdateServer : >> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer >> UpdateInstallationState : NotApplicable >> UpdateApprovalAction : Install >> UpdateApprovalTargetGroupId : a0a08746-4dbe-4a37-9adf-9e7652c0b421 >> ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e >> UpdateId : 1847ae6d-8360-4e5a-9d15-da82b24deffd >> You can translate an UpdateId guid to its object like so: >> >> PS > $upd = $com.GetUpdateInstallationInfoPerUpdate() PS 42> >> $wsus.GetUpdate($upd[0].updateid) >> >> UpdateServer : >> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer >> Id : >> Microsoft.UpdateServices.Administration.UpdateRevisionId >> Title : Windows XP Update Package, >> October 25, >> 2001 >> Description : This update resolves all >> critical issues >> that were found in Windows XP between Aug >> ust 2001 and October 2001, and is discussed >> in Microsoft Knowledge Base (KB) Artic >> le Q309521. Among the updates included >> in this package are several that eliminate >> security vulnerabilities. Download now >> to ensure that you have all the latest crit >> ical updates for Windows XP. >> LegacyName : q309521_xp_4973 >> MsrcSeverity : Unspecified >> KnowledgebaseArticles : {309521} >> SecurityBulletins : {} >> AdditionalInformationUrls : >> {http://www.download.windowsupdate.co...e/v3/static/RT >> F/en/4973.htm >> } >> ReleaseNotes : >> UpdateClassificationTitle : Critical Updates >> CompanyTitles : {Microsoft} >> ProductTitles : {Windows XP} >> ProductFamilyTitles : {Windows} >> IsLatestRevision : True >> HasEarlierRevision : False >> Size : 0 >> CreationDate : 18/02/2003 21:28:13 >> ArrivalDate : 11/06/2008 09:11:51 >> UpdateType : Software >> PublicationState : Published >> InstallationBehavior : >> Microsoft.UpdateServices.Administration.InstallationBehavior >> UninstallationBehavior : >> Microsoft.UpdateServices.Administration.InstallationBehavior >> IsBeta : False >> HasStaleUpdateApprovals : False >> IsApproved : True >> IsDeclined : False >> DefaultPropertiesLanguage : >> HasLicenseAgreement : False >> RequiresLicenseAgreementAcceptance : False >> State : Ready >> HasSupersededUpdates : False >> IsSuperseded : True >> IsWsusInfrastructureUpdate : False >> IsEditable : False >> UpdateSource : MicrosoftUpdate >> --- >> Shay Levy >> Windows PowerShell MVP >> http://blogs.microsoft.co.il/blogs/ScriptFanatic >> PowerShell Toolbar: http://tinyurl.com/PSToolbar >> j> Awesome, that is taking it a lot further than I was getting. >> Thanks >> j> so much. >> j> >> j> The further steps I need to take it are: >> j> >> j> 1) Be able to specify a particular client machine >> j> 2) Find only updates which are not approved for that machine >> j> 3) Approve all the updates which are approved for that machine >> j> specifying a >> j> particular computer target group for the approval. >> j> If I can get that, it will save me hours, maybe days of work! >> j> >> j> Thanks >> j> Jonathan >> j> "Shay Levy [MVP]" wrote: >> j> Quote: >>>> Hello jmedd, >>>> >>>> I was able to run this and get results: >>>> >>>> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateS >>>> er vices.Administration") >>>> >>>> $updateServer = "updateServerName" >>>> $wsus = >>>> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServ >>>> er >>>> ($updateServer,$false) >>>> $computerScope = new-object >>>> Microsoft.UpdateServices.Administration.ComputerTargetScope >>>> $computerScope.includedInstallationStates = >>>> "Installed,NotInstalled" >>>> $updateScope = new-object >>>> Microsoft.UpdateServices.Administration.UpdateScope >>>> $updateScope.includedInstallationStates = "Installed,NotInstalled" >>>> >>>> $wsus.getComputerTargets($ComputerScope) | foreach { >>>> >>>> $machine = $_ >>>> $fdn = @{n="FullDomainName";e={$machine.fullDomainName}} >>>> $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach { >>>> $updateId = $wsus.getUpdate($_.updateId) >>>> $updateId | select >>>> $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles >>>> } >>>> } >>>> Here's the first item output: >>>> FullDomainName : serverName.domain >>>> Title : Cumulative Security Update for Outlook >>>> Express for >>>> Windows Server 2003 (KB929123) >>>> UpdateType : Software >>>> IsApproved : True >>>> IsDeclined : False >>>> KnowledgebaseArticles : {929123} >>>> HTH >>>> --- >>>> Shay Levy >>>> Windows PowerShell MVP >>>> http://blogs.microsoft.co.il/blogs/ScriptFanatic >>>> PowerShell Toolbar: http://tinyurl.com/PSToolbar >>>> j> I need to approve around 100 updates for a client computer in >>>> WSUS. >>>> j> Using the WSUS console for this is impracticle since its >>>> involves >>>> j> about 5 - 6 clicks per update, so naturally I am looking to >>>> j> Powershell for a solution. >>>> j> >>>> j> There are some sample scripts for managing WSUS 3.0 at the >>>> script >>>> j> center. >>>> j> >>>> j> >>>> http://www.microsoft.com/technet/scr.../sus/server/de >>>> fa >>>> j> ult.mspx?mfr=true >>>> j> >>>> j> Basically what I need to do is for a particular computer find >>>> which >>>> j> updates need approving and then approve them all for a >>>> particular >>>> j> WSUS computer group in one go. >>>> j> >>>> j> So far I have: >>>> j> >>>> j> >>>> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateService >>>> s. >>>> j> Administration") | out-null >>>> j> if (!$wsus) { >>>> j> $wsus = >>>> j> >>>> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServ >>>> er >>>> j> (); >>>> j> } >>>> j> >>>> j> $wsus.GetComputerTargets() >>>> j> >>>> j> This basically returns a lot of info about the computers, but >>>> nothing >>>> j> to do with approvals. >>>> j> >>>> j> Similarly the following gives you a load of info about the >>>> updates >>>> j> including whether they are approved or not, but does not tell >>>> you >>>> j> which group they are approved for. >>>> j> >>>> j> >>>> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateService >>>> s. >>>> j> Administration") | out-null >>>> j> if (!$wsus) { >>>> j> $wsus = >>>> j> >>>> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServ >>>> er >>>> j> (); >>>> j> } >>>> j> >>>> j> $updateScope = new-object >>>> j> Microsoft.UpdateServices.Administration.UpdateScope; >>>> j> $updateScope.UpdateApprovalActions = >>>> j> >>>> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::In >>>> st >>>> j> all ` >>>> j> -bor >>>> j> >>>> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Un >>>> in >>>> j> stall >>>> j> $wsus.GetUpdates($updateScope) >>>> j> >>>> j> Exchanging the last line for >>>> j> >>>> j> $wsus.GetUpdateApprovals($updateScope) >>>> j> >>>> j> gets you some approval info, but not quite what I'm looking for. >>>> j> >>>> j> Anyone willing to assist would be most appreciated. >>>> j> |
| My System Specs |
|
10-06-2008
| #9 (permalink) |
| Guest | Re: Powershell, WSUS, Execute Multiple Approvals per client comput Cool. In the example I am testing that returns only the updates I am looking for. I have then tried to approve these updates with the following: $upd = $com.GetUpdateInstallationInfoPerUpdate($updateScope) $upd.Approve(Approved,Groupname) as per your side post about approving updates, but it doesn't like it. "Shay Levy [MVP]" wrote: Quote: > > Try this: > > $updateServer = "serverName" > $machineName = "machineName" > > $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($updateServer,$false) > > $updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope > > $updateScope.includedInstallationStates = "NotInstalled" > > $com = $wsus.GetComputerTargetByName($machineName) > $com.GetUpdateInstallationInfoPerUpdate($updateScope) > > > > --- > Shay Levy > Windows PowerShell MVP > http://blogs.microsoft.co.il/blogs/ScriptFanatic > PowerShell Toolbar: http://tinyurl.com/PSToolbar > > > j> Brilliant! I think I'm pretty close now. > j> > j> In the WSUS console if you highlight a computer in the Summary pane > j> you have 'Updates Needed' and clicking the link gives you a report on > j> which updates are required on the machine. > j> > j> In the stuff you have just done there are results for > j> > j> Approved: Yes or No > j> Installed: Yes or No > j> etc > j> but I can't see anything for Updates Needed? > j> > j> If I can just get this then I will have my goal of: > j> > j> - Get details for a particular computer > j> - Filter the results to only show those updates needed > j> - Approve all the updates returned in the filter to a particular > j> computer > j> group. > j> Thanks! > j> Jonathan > j> "Shay Levy [MVP]" wrote: > j> Quote: Quote: > >> Hello jmedd, > >> > >> This is what I > >> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateSer > >> vices.Administration") > >> > >> $updateServer = "serverName" > >> $machineName = "machineName" > >> $wsus = > >> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer > >> ($updateServer,$false) > >> $com = $wsus.GetComputerTargetByName($machineName) > >> # get info for the specified machineName PS > $com > >> > >> UpdateServer : > >> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer > >> Id : 687b433f-18c0-45c0-8dbb-0f45a484d73e > >> FullDomainName : serverName > >> IPAddress : 10.4.90.135 > >> Make : HP > >> Model : ProLiant BL460c G1 > >> BiosInfo : > >> Microsoft.UpdateServices.Administration.BiosInfo > >> OSInfo : > >> Microsoft.UpdateServices.Administration.OSInfo > >> OSArchitecture : x86 > >> ClientVersion : 7.1.6001.65 > >> OSFamily : Windows > >> OSDescription : Windows Server 2003 Enterprise Edition > >> ComputerRole : Server > >> LastSyncTime : 10/09/2008 11:52:50 > >> LastSyncResult : Succeeded > >> LastReportedStatusTime : 10/09/2008 12:07:48 > >> LastReportedInventoryTime : 01/01/0001 00:00:00 > >> RequestedTargetGroupName : > >> RequestedTargetGroupNames : {} > >> ComputerTargetGroupIds : {b73ca6ed-5727-47f3-84de-015e03f6a88a, > >> a0a08746-4dbe-4a37-9adf-9e7652c0b421} > >> ParentServerId : 00000000-0000-0000-0000-000000000000 > >> SyncsFromDownstreamServer : False > >> # get installation summary > >> PS > $com.GetUpdateInstallationSummary() > >> UnknownCount : 44 > >> NotApplicableCount : 2131 > >> NotInstalledCount : 15 > >> DownloadedCount : 0 > >> InstalledCount : 40 > >> InstalledPendingRebootCount : 0 > >> FailedCount : 0 > >> IsSummedAcrossAllUpdates : True > >> UpdateId : 00000000-0000-0000-0000-000000000000 > >> ComputerTargetGroupId : 00000000-0000-0000-0000-000000000000 > >> ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e > >> LastUpdated : 05/10/2008 12:59:27 > >> # updates report sample output > >> PS > $com.GetUpdateInstallationInfoPerUpdate() > >> UpdateServer : > >> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer > >> UpdateInstallationState : NotApplicable > >> UpdateApprovalAction : Install > >> UpdateApprovalTargetGroupId : a0a08746-4dbe-4a37-9adf-9e7652c0b421 > >> ComputerTargetId : 687b433f-18c0-45c0-8dbb-0f45a484d73e > >> UpdateId : 1847ae6d-8360-4e5a-9d15-da82b24deffd > >> You can translate an UpdateId guid to its object like so: > >> > >> PS > $upd = $com.GetUpdateInstallationInfoPerUpdate() PS 42> > >> $wsus.GetUpdate($upd[0].updateid) > >> > >> UpdateServer : > >> Microsoft.UpdateServices.Internal.BaseApi.UpdateServer > >> Id : > >> Microsoft.UpdateServices.Administration.UpdateRevisionId > >> Title : Windows XP Update Package, > >> October 25, > >> 2001 > >> Description : This update resolves all > >> critical issues > >> that were found in Windows XP between Aug > >> ust 2001 and October 2001, and is discussed > >> in Microsoft Knowledge Base (KB) Artic > >> le Q309521. Among the updates included > >> in this package are several that eliminate > >> security vulnerabilities. Download now > >> to ensure that you have all the latest crit > >> ical updates for Windows XP. > >> LegacyName : q309521_xp_4973 > >> MsrcSeverity : Unspecified > >> KnowledgebaseArticles : {309521} > >> SecurityBulletins : {} > >> AdditionalInformationUrls : > >> {http://www.download.windowsupdate.co...e/v3/static/RT > >> F/en/4973.htm > >> } > >> ReleaseNotes : > >> UpdateClassificationTitle : Critical Updates > >> CompanyTitles : {Microsoft} > >> ProductTitles : {Windows XP} > >> ProductFamilyTitles : {Windows} > >> IsLatestRevision : True > >> HasEarlierRevision : False > >> Size : 0 > >> CreationDate : 18/02/2003 21:28:13 > >> ArrivalDate : 11/06/2008 09:11:51 > >> UpdateType : Software > >> PublicationState : Published > >> InstallationBehavior : > >> Microsoft.UpdateServices.Administration.InstallationBehavior > >> UninstallationBehavior : > >> Microsoft.UpdateServices.Administration.InstallationBehavior > >> IsBeta : False > >> HasStaleUpdateApprovals : False > >> IsApproved : True > >> IsDeclined : False > >> DefaultPropertiesLanguage : > >> HasLicenseAgreement : False > >> RequiresLicenseAgreementAcceptance : False > >> State : Ready > >> HasSupersededUpdates : False > >> IsSuperseded : True > >> IsWsusInfrastructureUpdate : False > >> IsEditable : False > >> UpdateSource : MicrosoftUpdate > >> --- > >> Shay Levy > >> Windows PowerShell MVP > >> http://blogs.microsoft.co.il/blogs/ScriptFanatic > >> PowerShell Toolbar: http://tinyurl.com/PSToolbar > >> j> Awesome, that is taking it a lot further than I was getting. > >> Thanks > >> j> so much. > >> j> > >> j> The further steps I need to take it are: > >> j> > >> j> 1) Be able to specify a particular client machine > >> j> 2) Find only updates which are not approved for that machine > >> j> 3) Approve all the updates which are approved for that machine > >> j> specifying a > >> j> particular computer target group for the approval. > >> j> If I can get that, it will save me hours, maybe days of work! > >> j> > >> j> Thanks > >> j> Jonathan > >> j> "Shay Levy [MVP]" wrote: > >> j> > >>>> Hello jmedd, > >>>> > >>>> I was able to run this and get results: > >>>> > >>>> [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateS > >>>> er vices.Administration") > >>>> > >>>> $updateServer = "updateServerName" > >>>> $wsus = > >>>> [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServ > >>>> er > >>>> ($updateServer,$false) > >>>> $computerScope = new-object > >>>> Microsoft.UpdateServices.Administration.ComputerTargetScope > >>>> $computerScope.includedInstallationStates = > >>>> "Installed,NotInstalled" > >>>> $updateScope = new-object > >>>> Microsoft.UpdateServices.Administration.UpdateScope > >>>> $updateScope.includedInstallationStates = "Installed,NotInstalled" > >>>> > >>>> $wsus.getComputerTargets($ComputerScope) | foreach { > >>>> > >>>> $machine = $_ > >>>> $fdn = @{n="FullDomainName";e={$machine.fullDomainName}} > >>>> $_.getUpdateInstallationInfoPerUpdate($updateScope) | foreach { > >>>> $updateId = $wsus.getUpdate($_.updateId) > >>>> $updateId | select > >>>> $fdn,Title,UpdateType,IsApproved,IsDeclined,KnowledgebaseArticles > >>>> } > >>>> } > >>>> Here's the first item output: > >>>> FullDomainName : serverName.domain > >>>> Title : Cumulative Security Update for Outlook > >>>> Express for > >>>> Windows Server 2003 (KB929123) > >>>> UpdateType : Software > >>>> IsApproved : True > >>>> IsDeclined : False > >>>> KnowledgebaseArticles : {929123} > >>>> HTH > >>>> --- > >>>> Shay Levy > >>>> Windows PowerShell MVP > >>>> http://blogs.microsoft.co.il/blogs/ScriptFanatic > >>>> PowerShell Toolbar: http://tinyurl.com/PSToolbar > >>>> j> I need to approve around 100 updates for a client computer in > >>>> WSUS. > >>>> j> Using the WSUS console for this is impracticle since its > >>>> involves > >>>> j> about 5 - 6 clicks per update, so naturally I am looking to > >>>> j> Powershell for a solution. > >>>> j> > >>>> j> There are some sample scripts for managing WSUS 3.0 at the > >>>> script > >>>> j> center. > >>>> j> > >>>> j> > >>>> http://www.microsoft.com/technet/scr.../sus/server/de > >>>> fa > >>>> j> ult.mspx?mfr=true > >>>> j> > >>>> j> Basically what I need to do is for a particular computer find > >>>> which > >>>> j> updates need approving and then approve them all for a > >>>> particular > >>>> j> WSUS computer group in one go. > >>>> j> > >>>> j> So far I have: > >>>> j> > >>>> j> > >>>> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateService > >>>> s. > >>>> j> Administration") | out-null > >>>> j> if (!$wsus) { > >>>> j> $wsus = > >>>> j> > >>>> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServ > >>>> er > >>>> j> (); > >>>> j> } > >>>> j> > >>>> j> $wsus.GetComputerTargets() > >>>> j> > >>>> j> This basically returns a lot of info about the computers, but > >>>> nothing > >>>> j> to do with approvals. > >>>> j> > >>>> j> Similarly the following gives you a load of info about the > >>>> updates > >>>> j> including whether they are approved or not, but does not tell > >>>> you > >>>> j> which group they are approved for. > >>>> j> > >>>> j> > >>>> [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateService > >>>> s. > >>>> j> Administration") | out-null > >>>> j> if (!$wsus) { > >>>> j> $wsus = > >>>> j> > >>>> [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServ > >>>> er > >>>> j> (); > >>>> j> } > >>>> j> > >>>> j> $updateScope = new-object > >>>> j> Microsoft.UpdateServices.Administration.UpdateScope; > >>>> j> $updateScope.UpdateApprovalActions = > >>>> j> |
| My System Specs |
|
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Forum | |||
| Running powershell scripts on a client computer. | PowerShell | |||
| Powershell and WSUS: Copy approvals | PowerShell | |||
| Re: Powershell, WSUS, Execute Multiple Approvals per client computer | PowerShell | |||
| How to execute a webtest from Powershell | PowerShell | |||
| Has anyone used Powershell to script WSUS? | PowerShell | |||
