WSUS: PowerShell: Unterschied zwischen den Versionen

Aus Wiki-WebPerfect
Wechseln zu: Navigation, Suche
 
(18 dazwischenliegende Versionen des gleichen Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
 +
== Get Approving History of an Update ==
 +
<source lang="powershell">Get-Content 'C:\Program Files\Update Services\LogFiles\Change.log' | Where-Object {$_ -match "install" -and $_ -match "<THE_UPDATE_KB_YOU_SEARCH>"}</source>
 +
 +
'''Example with KB4566516:'''
 +
*'''Green''' = Approving Update
 +
*'''Red''' = Remove Approving
 +
[[Datei:01-wsus update history.png]]
 +
 +
 
== Get Windows Update ID ==
 
== Get Windows Update ID ==
 +
<span style="font-size:20px;"><span style="color:red">'''-> This function/script is moved to [https://github.com/R-Studio/PSTools GitHub]!'''</span></span><br>
 
<source lang="powershell">
 
<source lang="powershell">
−
Function Get-WSUSUpdateInfo {
+
Function Get-UpdateFromWSUSInfo {
 
     [CmdletBinding()]
 
     [CmdletBinding()]
 
      
 
      
Zeile 51: Zeile 61:
  
 
== Remove Windows Update from WSUS ==
 
== Remove Windows Update from WSUS ==
 +
<span style="font-size:20px;"><span style="color:red">'''-> This function/script is moved to [https://github.com/R-Studio/PSTools GitHub]!'''</span></span><br>
 +
<source lang="powershell">
 +
Function Remove-UpdateFromWSUS {
 +
    [CmdletBinding()]
 +
   
 +
    param (
 +
        [Parameter(Mandatory=$false)]
 +
        [String]$WSUSServer = "localhost",
 +
 +
        [Parameter(Mandatory=$false)]
 +
        [Int32]$PortNumber = 8530,
 +
 +
        [Parameter(Mandatory=$false)]
 +
        [Boolean]$useSecureConnection = $False,
 +
 +
        [Parameter(Mandatory=$false)]
 +
        [String]$KB = "",
 +
 +
        [Parameter(Mandatory=$false)]
 +
        [String]$RemoveUpdateID = ""
 +
    )
 +
 +
    Process {
 +
        # Load .NET assembly
 +
        [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
 +
        $WSUS = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($WSUSServer,$False,$PortNumber)
 +
        Write-Host "Connected sucessfully" -foregroundcolor "Green"
 +
 +
        #UpdateID (GUID of the update) to delete
 +
        If (!$RemoveUpdateID) {
 +
            $IDOfUpdateToRemove = ($WSUS.GetUpdates() | ? {$_.Title -match $KB}).Id.UpdateId.ToString()
 +
            $RemoveUpdateID = $IDOfUpdateToRemove
 +
        }
 +
 +
        $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
 +
        $u=$WSUS.GetUpdates($updatescope)
 +
 +
        Foreach ($u1 in $u) {
 +
            $a=New-Object Microsoft.UpdateServices.Administration.UpdateRevisionId
 +
            $a=$u1.id 
 +
 +
            If ($a.UpdateId -eq $RemoveUpdateID) { 
 +
                    Write-Host "Deleting update " $a.UpdateId "..."
 +
                      $WSUS.DeleteUpdate($a.UpdateId)
 +
            }
 +
        } 
 +
 +
        trap {
 +
            write-host "Error Occurred"
 +
            write-host "Exception Message: "
 +
            write-host $_.Exception.Message
 +
            write-host $_.Exception.StackTrace
 +
        }
 +
    }
 +
}
 +
</source>
 +
 +
 +
  
  
−
=== Error: Cannot Delete RevisionID: XXXX Because it is still deployed to a Non DSS Target Group ===
 
−
[[Datei:Wsus ps error.png]]
 
  
−
'''Solution'''
 
−
* Change the Approval-Status to "Not Approved"
 
−
[[Datei:Wsus ps solution.png]]
 
  
  

Aktuelle Version vom 17. November 2021, 08:30 Uhr

Get Approving History of an Update

Get-Content 'C:\Program Files\Update Services\LogFiles\Change.log' | Where-Object {$_ -match "install" -and $_ -match "<THE_UPDATE_KB_YOU_SEARCH>"}

Example with KB4566516:

  • Green = Approving Update
  • Red = Remove Approving

01-wsus update history.png


Get Windows Update ID

-> This function/script is moved to GitHub!

Function Get-UpdateFromWSUSInfo {
    [CmdletBinding()]
 
    param (
        [Parameter(Mandatory=$false)]
        [String]$WSUSServer = "localhost",
 
        [Parameter(Mandatory=$false)]
        [Int32]$PortNumber = 8530,
 
        [Parameter(Mandatory=$false)]
        [Boolean]$useSecureConnection = $False,
 
        [Parameter(Mandatory=$false)]
        [String]$KB = ""
    )
 
    Process {
        [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
        $WSUS = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($WSUSServer,$False,$PortNumber)
 
        #Get all updates
        $updates = $WSUS.GetUpdates()
 
        If ($KB) {
            $UpdateSearched = ($Updates | ? {$_.Title -match $KB})
 
            New-Object PSObject -Property @{
                Id = $UpdateSearched.Id.UpdateId.ToString()
                Title = $UpdateSearched.Title
                Source = $UpdateSearched.UpdateSource.ToString()
            }
        } Else {
            #List every update and output some basic info about it
            ForEach ($update in $updates) {
                New-Object PSObject -Property @{
                    Id = $update.Id.UpdateId.ToString()
                    Title = $update.Title
                    Source = $update.UpdateSource.ToString()
                }
            }
        }
    }
}


Remove Windows Update from WSUS

-> This function/script is moved to GitHub!

Function Remove-UpdateFromWSUS {
    [CmdletBinding()]
 
    param (
        [Parameter(Mandatory=$false)]
        [String]$WSUSServer = "localhost",
 
        [Parameter(Mandatory=$false)]
        [Int32]$PortNumber = 8530,
 
        [Parameter(Mandatory=$false)]
        [Boolean]$useSecureConnection = $False,
 
        [Parameter(Mandatory=$false)]
        [String]$KB = "",
 
        [Parameter(Mandatory=$false)]
        [String]$RemoveUpdateID = ""
    )
 
    Process {
        # Load .NET assembly
        [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
        $WSUS = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($WSUSServer,$False,$PortNumber)
        Write-Host "Connected sucessfully" -foregroundcolor "Green"
 
        #UpdateID (GUID of the update) to delete 
        If (!$RemoveUpdateID) {
            $IDOfUpdateToRemove = ($WSUS.GetUpdates() | ? {$_.Title -match $KB}).Id.UpdateId.ToString()
            $RemoveUpdateID = $IDOfUpdateToRemove
        }
 
        $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
        $u=$WSUS.GetUpdates($updatescope)
 
        Foreach ($u1 in $u) {
            $a=New-Object Microsoft.UpdateServices.Administration.UpdateRevisionId
            $a=$u1.id  
 
            If ($a.UpdateId -eq $RemoveUpdateID) {  
                     Write-Host "Deleting update " $a.UpdateId "..."
                      $WSUS.DeleteUpdate($a.UpdateId)
            }
        }  
 
        trap {
            write-host "Error Occurred"
            write-host "Exception Message: " 
            write-host $_.Exception.Message
            write-host $_.Exception.StackTrace
        }
    }
}
Von „http://wiki.webperfect.ch/index.php?title=WSUS:_PowerShell&oldid=3043“