You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When more than one computer is supplied, background jobs will be used to speed up the process. If you use the `-AllNeeded` switch, all needed patches will be installed.
90
90
91
91
```powershell
92
-
# Install all needed updates and use the computer's current source as the Windows Update database checker
92
+
# Install all needed updates and use the computer's Windows Update Agent configured source to scan against
Checks the target machines for needed updates. If Windows Update does not have access to WSUS or Microsoft's update catalog, a [local copy of the catalog](#Save-KbScanFile) can be provided.
102
+
Checks the target machines for needed updates. If the Windows Update Agent (WUA) does not have access to WSUS or Windows Update (cloud service), a [local copy of the catalog](#Save-KbScanFile) can be provided.
103
103
104
+
The local catalog is the Windows Update offline scan file, `wsusscn2.cab` - [see Microsoft documentation for more information](https://learn.microsoft.com/en-us/windows/win32/wua_sdk/using-wua-to-scan-for-updates-offline).
104
105
105
106
```powershell
106
-
# Get all the updates needed on the local machine using whatever upstream is set by Windows Update
107
+
# Get all the updates needed on the local machine using whatever upstream is set by the Windows Update Agent (WUA)
107
108
Get-KbNeededUpdate
108
109
110
+
# Same as above, but instead the upstream is Windows Update (cloud service) regardless if the device is configured to use a WSUS server
111
+
Get-KbNeededUpdate -UseWindowsUpdate
112
+
109
113
# Get all the updates needed on server01 using the locally saved cab file
Windows Update Agent (WUA) plus [the wsusscn2.cab catalog file](https://learn.microsoft.com/en-us/windows/win32/wua_sdk/using-wua-to-scan-for-updates-offline) can be used to scan computers for security updates without connecting to Windows Update or to a Windows Server Update Services (WSUS) server, which enables computers that are not connected to the Internet to be scanned for security updates.
167
+
This downloads the [Windows Update offline scan file](https://learn.microsoft.com/en-us/windows/win32/wua_sdk/using-wua-to-scan-for-updates-offline), `wsusscn2.cab`.
168
+
169
+
The scan file `wsusscn2.cab` can be used to scan for missing updates without connecting to Windows Update or a Windows Server Update Services (WSUS). This is especially helpful for devices which are not connected to the Internet.
164
170
165
-
This file is used by `Get-KbNeededUpdate` when the `-ScanFilePath` is used and `Install-KbUpdate` when the `-AllNeeded` and `-ScanFilePath` parameters are used.
171
+
This file is used by `Get-KbNeededUpdate` when the `-ScanFilePath` is used and `Install-KbUpdate` when the `-AllNeeded` and `-ScanFilePath` parameters are used.
166
172
167
173
```powershell
168
174
# Saves the cab file to a temporary directory and returns the results of Get-ChildItem for the cab file
Copy file name to clipboardExpand all lines: public/Get-KbNeededUpdate.ps1
+39-23
Original file line number
Diff line number
Diff line change
@@ -1,21 +1,32 @@
1
1
functionGet-KbNeededUpdate {
2
2
<#
3
3
.SYNOPSIS
4
-
Checks for needed updates.
4
+
Scan for missing Windows updates.
5
5
6
6
.DESCRIPTION
7
-
Checks for needed updates.
7
+
This cmdlet scans for missing Windows updates. It can scan against:
8
+
9
+
- Windows Server Update Service (WSUS) server
10
+
- Windows Update (cloud service)
11
+
- Windows Update offline scan file (wsusscn2.cab - see https://learn.microsoft.com/windows/win32/wua_sdk/using-wua-to-scan-for-updates-offline)
12
+
13
+
The offline scan file can be downloaded using Save-KbScanFile from an internet-connected computer.
8
14
9
15
.PARAMETERComputerName
10
16
Used to connect to a remote host. Connects to localhost by default -- if scanning the local computer, the command must be run as administrator.
11
17
12
18
.PARAMETERCredential
13
19
The optional alternative credential to be used when connecting to ComputerName
14
20
21
+
.PARAMETERUseWindowsUpdate
22
+
This optional parameter will force the Windows Update Agent (WUA) to scan for needed updates against Windows Update (cloud service) instead of WSUS, regardless if the device is configured to use a WSUS server.
23
+
15
24
.PARAMETERScanFilePath
16
-
If Windows Update does not have access to WSUS or Microsoft's update catalog, a local copy of the catalog can be provided.
25
+
If the Windows Update Agent (WUA) does not have access to WSUS or Windows Update a local copy of the catalog can be provided.
26
+
27
+
The local copy of the catalog is the Windows Update offline scan file (wsusscn2.cab - see https://learn.microsoft.com/windows/win32/wua_sdk/using-wua-to-scan-for-updates-offline).
17
28
18
-
This optional parameter will force the command to use a local update database instead of WSUS or Microsoft's online update catalog.
29
+
This optional parameter will force the command to use a local update database instead of WSUS or Windows Update.
19
30
20
31
The scan file catalog/database can be downloaded using Save-KbScanFile from an internet-connected computer.
21
32
@@ -52,13 +63,16 @@ function Get-KbNeededUpdate {
52
63
53
64
Saves all the updates needed on the local machine to C:\temp
Copy file name to clipboardExpand all lines: public/Install-KbUpdate.ps1
+14-2
Original file line number
Diff line number
Diff line change
@@ -37,8 +37,13 @@ function Install-KbUpdate {
37
37
.PARAMETERAllNeeded
38
38
Installs all needed updates
39
39
40
+
.PARAMETERUseWindowsUpdate
41
+
This optional parameter will force the Windows Update Agent (WUA) to scan for needed updates against Windows Update (cloud service) instead of WSUS, regardless if the device is configured to use a WSUS server.
42
+
40
43
.PARAMETERScanFilePath
41
-
This optional parameter can be passed along with AllNeeded to use a local update database instead of WSUS or Microsoft's online update catalog.
44
+
This optional parameter can be passed along with AllNeeded to use a local copy of the catalogue instead of WSUS or Windows Update (cloud service.)
45
+
46
+
The local copy of the catalog is the Windows Update offline scan file (wsusscn2.cab - see https://learn.microsoft.com/windows/win32/wua_sdk/using-wua-to-scan-for-updates-offline).
42
47
43
48
The local copy can be downloaded using Save-KbScanFile from an internet-connected computer.
$null=Get-Job-ChildJobState Completed |Where-Object Name -in$ComputerName.ComputerName|Remove-Job-Force
142
+
$null=Get-Job-ChildJobState Completed |Where-Object Name -In$ComputerName.ComputerName|Remove-Job-Force
137
143
}
138
144
process {
139
145
if (-not$PSBoundParameters.HotfixId-and-not$PSBoundParameters.FilePath-and-not$PSBoundParameters.InputObject-and-not$AllNeeded) {
140
146
Stop-PSFFunction-EnableException:$EnableException-Message "You must specify either HotfixId or FilePath or AllNeeded or pipe in the results from Get-KbUpdate"
141
147
return
142
148
}
143
149
150
+
if ($ScanFilePath-and$UseWindowsUpdate) {
151
+
Stop-PSFFunction-EnableException:$EnableException-Message "You can not use -ScanFilePath and -UseWindowsUpdate together"
152
+
return
153
+
}
154
+
144
155
if ($IsLinux-or$IsMacOs) {
145
156
Stop-PSFFunction-Message "This command using remoting and only supports Windows at this time"-EnableException:$EnableException
0 commit comments