Question

我正在尝试获取有关Windows系统的最新信息。来自systemstatus或wmic qfe list的信息有时不会提供已安装的hostfix的完整列表。所以我想制作powershell脚本，检查系统是否有可用的更新。我的脚本如下所示：

[CmdletBinding()]
Param ()

Begin {
    $UpdateSession = New-Object -ComObject 'Microsoft.Update.Session'
}   

Process {
    $UpdateSearcher = $UpdateSession.CreateUpdateSearcher()
    $SearchResult = $UpdateSearcher.Search("IsInstalled=0 and Type='Software' and IsHidden=0")

    if ($SearchResult.Updates.Count -ne 0) {
        $SearchResult.Updates |Select-Object -Property Title, Description |Format-List
    }   
    else {
        Write-Host 'There are no applicable updates'
    }   
}

我的问题是：此脚本是否检查来自本地WSUS或Microsoft服务器的新更新？我的目标是：当WSUS的管理员放弃一些重要的更新时，检查来自Microsoft服务器的更新以省略情况。

Answer 1

像您这样的搜索后，我发现了这个...如果有帮助

Function Get-PendingUpdate { 
<#    
  .SYNOPSIS   
    Retrieves the updates waiting to be installed from WSUS   
  .DESCRIPTION   
    Retrieves the updates waiting to be installed from WSUS  
  .PARAMETER Computername 
    Computer or computers to find updates for.   
  .EXAMPLE   
   Get-PendingUpdates 

   Description 
   ----------- 
   Retrieves the updates that are available to install on the local system 
  .NOTES 
  Author: Boe Prox                                           

#> 

#Requires -version 3.0   
[CmdletBinding( 
    DefaultParameterSetName = 'computer' 
    )] 
param( 
    [Parameter(ValueFromPipeline = $True)] 
        [string[]]$Computername = $env:COMPUTERNAME
    )     
Process { 
    ForEach ($computer in $Computername) { 
        If (Test-Connection -ComputerName $computer -Count 1 -Quiet) { 
            Try { 
            #Create Session COM object 
                Write-Verbose "Creating COM object for WSUS Session" 
                $updatesession =  [activator]::CreateInstance([type]::GetTypeFromProgID("Microsoft.Update.Session",$computer)) 
                } 
            Catch { 
                Write-Warning "$($Error[0])" 
                Break 
                } 

            #Configure Session COM Object 
            Write-Verbose "Creating COM object for WSUS update Search" 
            $updatesearcher = $updatesession.CreateUpdateSearcher() 

            #Configure Searcher object to look for Updates awaiting installation 
            Write-Verbose "Searching for WSUS updates on client" 
            $searchresult = $updatesearcher.Search("IsInstalled=0")     

            #Verify if Updates need installed 
            Write-Verbose "Verifing that updates are available to install" 
            If ($searchresult.Updates.Count -gt 0) { 
                #Updates are waiting to be installed 
                Write-Verbose "Found $($searchresult.Updates.Count) update\s!" 
                #Cache the count to make the For loop run faster 
                $count = $searchresult.Updates.Count 

                #Begin iterating through Updates available for installation 
                Write-Verbose "Iterating through list of updates" 
                For ($i=0; $i -lt $Count; $i++) { 
                    #Create object holding update 
                    $Update = $searchresult.Updates.Item($i)
                    [pscustomobject]@{
                        #Computername = $Computer
                        KB = $($Update.KBArticleIDs)
                        Title = $Update.Title
                        Categories = ($Update.Categories | Select-Object -ExpandProperty Name)
                        SecurityBulletin = $($Update.SecurityBulletinIDs)
                        MsrcSeverity = $Update.MsrcSeverity
                        IsDownloaded = $Update.IsDownloaded
                        Url = $($Update.MoreInfoUrls)
                        BundledUpdates = @($Update.BundledUpdates)|ForEach{
                           [pscustomobject]@{
                                Title = $_.Title
                                DownloadUrl = @($_.DownloadContents).DownloadUrl
                            }
                        }
                    } 
                }
            } 
            Else { 
                #Nothing to install at this time 
                Write-Verbose "No updates to install." 
            }
        } 
        Else { 
            #Nothing to install at this time 
            Write-Warning "$($c): Offline" 
        }  
    }
}

}

感谢Boe Prox ...这是一个很棒的脚本！

ComObject'Microsoft.Update.Session'省略了WSUS？

1 个答案: