Use Power. Shell to Perform Basic Administrative Tasks on WSUS Hey, Scripting Guy Blog. Summary Learn how to use Windows Power. Shell to automate basic administrative tasks on a WSUS server. How To Remove Approved Updates From Wsus Ports' title='How To Remove Approved Updates From Wsus Ports' />If youre using Group Policy to configure your updates, you can query the registry for the Target Group and WSUS server values C REG QUERY HKLMSoftwarePolicies. How To Remove Approved Updates From Wsus ClientMicrosoft Scripting Guy, Ed Wilson, is here. Today we have the second blog post by Boe Prox about WSUS and Windows Power. Shell. See yesterdays blog for the introduction to WSUS and to learn more about Boe. Take it away, BoeIn yesterdays blog, I showed you how to install a WSUS server and configure your clients via Group Policy andor registry modifications, and I briefly introduced you to the steps taken to make your first connection to a WSUS server by using Windows Power. Shell and the assemblies that are available after you install the Administration Console. Today, we start looking at some of the basic administration steps for managing your WSUS server. I recently added Windows 10 to my WSUS Product and Classifications and got very surprised by the 100 GB of updates that was queued for download Lets learn how to clean. Deep Freeze Enterprise is the market leader of reboot to restore technology. Protect your Windows systems reduce IT tickets by up to 63. Start your 30 Day Free Trial. There are multiple posts online, discuss about how to uninstall Windows updates if something goes wrong with deployed patches, but I did not find anything. I am not able to get the upgrade to the Windows 10 Creators UpdateUpgrade v1703 on machines running v1607, neither via WSUS or by checking online for updates. How To Remove Approved Updates From Wsus RegistrySome of the steps I plan to discuss work with clients and target groups. Avs Video Converter Crack Keygen Pes here. To step back one day, here are the steps for making your initial connection to the server. Note that you must have the WSUS Administration Console installed to access the required assemblies. I covered installing the WSUS Administration Console in yesterdays blog. Load. With. Partial. NameMicrosoft. Update. Services. Administrationwsus Microsoft. Update. Services. Administration. Admin. Proxy get. Update. Serverdc. 1,Falsewsus. OK, we now have a connection to the WSUS server and we are ready to dive into some Windows Power. Shell fun The first thing I do, is see what I have available to me in the form of methods on this object. Get Member Type Method. The output is shown in the following image. Yes, that is quite a number of available methods to use. Depending on what methods you use, they will return objects that have more methods within them Therefore, there are many possibilities for exploration within your WSUS server from which to pull information. Finding WSUS clients. You can quickly query and identify one or all of the clients that are currently using the WSUS server with a couple of commands. Each query returns a Microsoft. Update. Services. Internal. Base. Api. Computer. Target object that you can use for other commands within the WSUS server, and it has its own set of methods that you can utilize. Before we dig into those, let us look at the possible commands that we can use to locate a client in WSUS. Get. Computer. Target. By. Namewsus. Get. Computer. Target. By. Namedc. 1. rivendell. As you can see in the following image, this command requires the full domain name of the system that you are going to query. Anything less than the full name will result in the command throwing an error also shown in the following image. Search. Computer. Targetswsus. Search. Computer. TargetsDC1This command allows you to specify a shorter name to query the client on the WSUS server. This can also be used for performing a wildcard search for clients, such as in the following example. Search. Computer. TargetsDAs you can see, I can pull up all clients that start with the letter D. Get. Computer. TargetThis method is a little tougher to use in that you have to know the client ID, which you probably wont be able to locate unless you use on of the methods listed previously to query for a client. In the example that follows, I already located a client ID from a previous query. Get. Computer. Targetguid db. Get. Computer. TargetsThis method has a couple of uses that are great to use for searching clients. The first way to use is method is to call it as it is. This will perform a complete dump of all of the clients in WSUS. Get. Computer. TargetsThe second way to use this method is to supply a computer scope object to use for the query, which is my favorite way to look for clients. This example will have to wait a couple more days when I discuss working with the computer scope object for reporting. So with that, we have covered a few different ways to query the WSUS server for clients, and now lets look at a couple of useful methods within the computer object that can help us with our administration. An important computer object gotcha There is one little thing that I have yet to mention about the computer object that you get from each of these queries. Even if you return only one object from your query without using Select Object First 1 or anything else along those lines, that object will actually be part of a collection Microsoft. Update. Services. Administration. Computer. Target. Collection that you will have to work with to actually be able to use that objects methods. Client wsus. Search. Computer. TargetsDC1Client. Get. Type. To. StringTo use the methods, you need to step through each member of the collectionor in the case of only one member of the collection being returned, by slicing into the array as shown in the following example. Get. Type. To. StringNow that is more like it Now we can start playing with some of the fun methods of this object. Getting a clients target group membership. This method is useful for pulling all of the groups that a client is a member of Get. Computer. Target. GroupsClient wsus. Search. Computer. TargetsDC1client0. Get. Computer. Target. GroupsRemoving a client from the WSUS server. This method is pretty self explanatory DeleteIt will delete the current computer object that is calling this method. This is a great way to remove stale computers that are off the domain or have not checked in for an extended period for other reasons. DeleteThere are two more methods that are great to use however, I am going to leave those hanging until later in the week because they require the Update Scope object, which I will go into more detail about then. The two methods that I am talking about are Get. Update. Installation. Info. Per. UpdateGet. Update. Installation. SummarySo stay tuned until later in the week and I will show you what you can do with these methods Target groups. Next on the list are target groups in WSUS and how we can use Windows Power. Shell to manage these. Luckily, there are only two methods that we can use to query for the target groups. Each of these methods used will return the following type of Target Group object Microsoft. Update. Services. Internal. Base. Api. Computer. Target. Group.  The first method to look at is Get. Google Chrome For Windows Ce 6.0.. Computer. Target. GroupsThis method returns all the target groups that exist on the WSUS server. It is an all or nothing approach, and you can then filter that collection for the group you are looking for. Get. Computer. Target. GroupsAs you can see, I only have two groups at this time that also happen to be the default groups you get with the WSUS installation. I used this one first so I can transition more easily into the next method. This works great, but it has a small prerequisite You have to know the ID of the group. Get. Computer. Target. GroupAs I mentioned, this method requires the ID of the WSUS target group. It is not the most useful method if you have no idea what that group ID is without first using the Get. Computer. Target. Groups method. wsus. Get. Computer. Target. Groupguid a. 0a. Creating a new target group. We now have a couple of ways to get our target groups from WSUS, but it would be great if we could also create our own groups. This can be done very easily by using the following method from the WSUS server object that we created with our initial connection Create. How to Setup WSUS on 2. R2 Server. 20. 082. R2 Server. Install the Microsoft Report Viewer Redistributable 2. MBAdd the WSUS role. This will automatically add the IIS role and will also download the right WSUS version for your server, so theres no need to download it manually from Microsoft. Note If you have problems downloading WSUS, please make sure you have no WSUS policies set on your Default Domain Policy or your Default Domain Controllers Policy. You can check this by opening up Group Policy Management Computer Config Policies Admin Templates Windows Components Windows Update. All should be Not Configured. If you need to make changes, either reboot the server and re add the WSUS role or run gpupdate force and re add the WSUS role. When the installation window appears, choose Full server installation including Administrative Console Next. Accept the Terms Next. WSUS Setup will choose the volume with the most space. You can change this to D WSUS or E WSUS as required Next. Use the built in Windows Internal Database Next. Use the existing IIS Default Web site Recommended Next. Note If you do not choose the Default IIS Web site, youll need to specify the Microsoft update service location slightly differently as follows for example Specify intranet Microsoft update service location Enabledhttp SERVERNAME 8. SERVERNAME 8. 08. When setup completes, cancel the Configuration Wizard that appears. Open WSUS by navigating to Administrative Tools Windows Server Update Services. On the left, expand SERVERNAME Computers All Computers. You can create computer groups, such as Workstations, Servers and Notebooks. When your workstations report to WSUS, theyll appear in the All Computers group, but can be moved as required. Click on Options Source and Proxy Server Proxy Server tab. Enter your proxy and port, then click OK. Products and Classifications. By default few products are displayed, but dont worry. Choose Windows Server 2. Server in your domain. Click the Classifications tab and enable Critical Updates Definition Updates Security Updates Update Rollups Updates, then click OK. Update Files and Languages Update Languages tab Download updates only in these languages. Tick English, then click OK. Synchronization Schedule Synchronize Automatically. Specify 0. 4 0. 0 0. Synchronizations per day. Click OK. Automatic Approvals. Tick to enable Default Automatic Approval Rule. Just below this, click the Critical Updates link. Tick to enable Critical Updates Definition Updates Security Updates Update Rollups Updates, click OK, and OK. E Mail Notifications. Tick to enable Send e mail notification when new updates are synchronized. Enter your e mail address. Tick to enable Send Status Reports. Specify Frequency Weekly. Send reports at 1. Recipients Enter your e mail address. Click the E mail Server tab. Specify your SMTP server. If you do not know this, enquire with your LA or ISP. Sender name WSUSE mail address WSUSyourdomain. OK. Click Synchronizations near the top left, then near the top right click Synchronize Now. Wait for the synchronization process to complete, then return back to Options Products and Classifications. This will now be fully populated. Click additional products such as Windows 7, Windows Server 2. R2 and Office 2. 01. Click OK, return back to Synchronizations then click Synchronize Now. To enable your workstations to report to your WSUS server, navigate to Computer Config Policies Admin Templates Windows Components Windows Update. Specify the following policies Do not display Install Updates and Shutdown option in Shutdown Windows dialogue box Not Configured. Do not adjust default option to Install Updates and Shutdown in Shutdown Windows dialogue box Not Configured. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates Not Configured. Configure Automatic Updates Enabled 4 Auto download and schedule the install. Everyday. 11 0. 0Specify intranet Microsoft update service location Enabledhttp SERVERNAMEhttp SERVERNAMEAutomatic Updates detection frequency Enabled. HoursAllow non administrators to receive update notifications Disabled. Turn on Software Notifications Not Configured. Allow Automatic Updates immediate installation Enabled. Turn on recommended updates via Automatic Updates Disabled. No auto restart with logged on users for scheduled automatic updates installations Enabled. Re prompt for restart with scheduled installations Not Configured. Delay restart for scheduled installations Not Configured. Reschedule Automatic Updates scheduled installations Enabled. Minutes. Enable client side targeting Not Configured. Allow signed updates from an Intranet Microsoft Update service location Disabled. Your workstations will then start reporting to your WSUS console.