Use PowerShell to Find Missing Updates on WSUS Client Computers

re: Use PowerShell to Find Missing Updates on WSUS Client Computers

Boe Prox — Fri, 03 Feb 2012 13:49:30 GMT

This can be done by first using my previous post here to filter for only servers and collecting the GUID of each computer (ID property). Then, using the article where I talk about using the GetSummariesPerComputerTarget() method, we can generate the update summary and begin filtering out non servers by checking it against our collection of servers. This should give you what you are looking for.

#Load assemblies

[void][system.reflection.assembly]::LoadWithPartialName('Microsoft.UpdateServices.Administration')

#Connect to WSUS

$Global:wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer('j23',$False)

#Create Scope objects

$computerscope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope

$updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope

#Gather only servers

$ServersId = @($wsus.GetComputerTargets($computerscope) | Where {

$_.OSDescription -like "*Server*"

} | Select -expand Id)

#Get Update Summary

$wsus.GetSummariesPerComputerTarget($updatescope,$computerscope) | Where {

#Filter out non servers

$ServersId -Contains $_.ComputerTargetID

} | ForEach {

New-Object PSObject -Property @{

ComputerTarget = ($wsus.GetComputerTarget([guid]$_.ComputerTargetId)).FullDomainName

NeededCount = ($_.DownloadedCount + $_.NotInstalledCount)

DownloadedCount = $_.DownloadedCount

NotApplicableCount = $_.NotApplicableCount

NotInstalledCount = $_.NotInstalledCount

InstalledCount = $_.InstalledCount

FailedCount = $_.FailedCount

}

Hope this helps...

re: Use PowerShell to Find Missing Updates on WSUS Client Computers

Davy — Thu, 02 Feb 2012 13:09:30 GMT

Thanks for your reply.

What I wanted to achive is that I could get a list of our servers that have updates waiting and the number of updates.

But I can't seem to get it done.

Any tips?

re: Use PowerShell to Find Missing Updates on WSUS Client Computers

Boe Prox — Wed, 25 Jan 2012 01:43:21 GMT

Hi Davy,

Glad you have enjoyed my series on WSUS! Unfortunately, the ComputerScope does not lend itself very well to identifying only servers in WSUS, you would have better luck with using a generic search and filter by OSDescription.

$wsus.GetComputerTargets() | Where {$_.OSDescription -like "*server*"}

Or if you have Target Groups with a name containing server, for example:

$wsus.GetComputerTargetGroups() | Where {$_.name -Like '*Server*'} | ForEach {$_.GetComputerTargets()}

Hope this helps...

re: Use PowerShell to Find Missing Updates on WSUS Client Computers

Davy — Tue, 24 Jan 2012 13:23:59 GMT

Hi Boe,

Thumbs up for the great blogs!

Is it possible that the computerscope only contains servers? What command would get that result?

Tnx