WSUS reporting with PowerShell

I would like to fill the $MS17010 = “4012212”,”4012598″,”4012215″,”4012213″,”4012216″,”4012214″,”4012217″,”4012606″,”4013198″

line from a text file

How would i do this ?

Hello Alex,

Great job, but how can I use it to have the report of my 2 WSUS servers (upstream+downstream)?

When I ran it from th upstream I got only results about machines linked to it, in my case 2. and when I ran from the downstream server i got only machines linked to it too.

Thansk for your help

Hi Alex,

Great work on this script. i’ve implemented this recently to look for an Outlook Security update that broke some functionality with Enterprise Vault.

I’m looking for a way to automate the Synchronization Report that will give the result for the last 30 days. Do you know how to accomplish that?

Thanks.

hello all

i am beginner of the poweshell and wsus, i got the error when run the script. since i can success once but after restart the powershell and run again the error occur, please advice, many thanks

ERROR SCREEN

PS C:\Users\Administrator> C:\scripts\wsusSearchReport.ps1
Exception calling “GetUpdates” with “1” argument(s): “The operation has timed out”
At C:\scripts\wsusSearchReport.ps1:13 char:4
+ $updates = $wsus.GetUpdates($updateScope) | ?{$_.Title -match $kb} …
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : WebException

COMMAND SCRIPT

Function GetUpdateState {
param([string[]]$kbnumber,
[string]$wsusserver,
[string]$port
)
$report = @()
[void][reflection.assembly]::LoadWithPartialName(“Microsoft.UpdateServices.Administration”)
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($wsusserver,$False,80)
$CompSc = new-object Microsoft.UpdateServices.Administration.ComputerTargetScope
$updateScope = new-object Microsoft.UpdateServices.Administration.UpdateScope;
$updateScope.UpdateApprovalActions = [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Install
foreach ($kb in $kbnumber){ #Loop against each KB number passed to the GetUpdateState function
$updates = $wsus.GetUpdates($updateScope) | ?{$_.Title -match $kb} #Getting every update where the title matches the $kbnumber
foreach($update in $updates){ #Loop against the list of updates I stored in $updates in the previous step
$update.GetUpdateInstallationInfoPerComputerTarget($CompSc) | ?{$_.UpdateApprovalAction -eq “Install”} | % { #for the current update
#Getting the list of computer object IDs where this update is supposed to be installed ($_.UpdateApprovalAction -eq “Install”)
$Comp = $wsus.GetComputerTarget($_.ComputerTargetId)# using #Computer object ID to retrieve the computer object properties (Name, #IP address)

$info = “” | select UpdateTitle, LegacyName, SecurityBulletins, Computername, OS ,IpAddress, UpdateInstallationStatus, UpdateApprovalAction #Creating a custom PowerShell object to store the information
$info.UpdateTitle = $update.Title
$info.LegacyName = $update.LegacyName
$info.SecurityBulletins = ($update.SecurityBulletins -join ‘;’)
$info.Computername = $Comp.FullDomainName
$info.OS = $Comp.OSDescription
$info.IpAddress = $Comp.IPAddress
$info.UpdateInstallationStatus = $_.UpdateInstallationState
$info.UpdateApprovalAction = $_.UpdateApprovalAction
$report+=$info # Storing the information into the $report variable
}
}
}
#$report | ?{$_.UpdateInstallationStatus -ne ‘NotApplicable’ -and $_.UpdateInstallationStatus -ne ‘Unknown’ -and $_.UpdateInstallationStatus -ne ‘Installed’ } | Export-Csv -Path c:\temp\rep_wsus.csv -Append -NoTypeInformation
$report | ?{$_.UpdateInstallationStatus -ne ‘NotApplicable’ -and $_.UpdateInstallationStatus -ne ‘Unknown’ } | Export-Csv -Path c:\temp\rep_wsus.csv -Append -NoTypeInformation
} #Filtering the report to list only computers where the updates are not installed

#$MS17010 = “4012212”,”4012598″,”4012215″,”4012213″,”4012216″,”4012214″,”4012217″,”4012606″,”4013198″,”4013429″
$MS17010 = “4041693”
$CVE20170162 = “4015221”,”4015219″,”4015217″,”4015583″,”4015550″,”4015547″
$CVE20170261 = “3118310”,”3172458″,”3114375″

GetUpdateState -kbnumber $MS17010 -wsusserver wsus02 -port 80

With psexcel you can easily create a readable excel report with the csvs generated

{$Date = (Get-Date -f yyyyMMddHHmm)
Import-Module PSExcel
Import-Csv C:\script\wsus\compliance\convert\updates_rollup.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates_rollup
Import-Csv C:\script\wsus\compliance\convert\updates_office_2013.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates_office_2013
Import-Csv C:\script\wsus\compliance\convert\updates_office_2010.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates_office_2010
Import-Csv C:\script\wsus\compliance\convert\updates_office_2016.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates_office_2016
Import-Csv C:\script\wsus\compliance\convert\updates-Windows-2016.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates-Windows-2016
Import-Csv C:\script\wsus\compliance\convert\updates-server-software.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates-server-software
Import-Csv C:\script\wsus\compliance\convert\updates_ie11_flashplayer.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName updates_ie11_flashplayer
Import-Csv C:\script\wsus\compliance\convert\Dot_Net.csv | Export-XLSX -Path C:\script\wsus\compliance\convert\$Date-Updates.xlsx -WorksheetName Dot_Net
Start-Sleep -s 60
New-Item -Path C:\script\wsus\reports\$Date-csv-files -ItemType directory
New-Item -Path C:\script\wsus\reports\$Date-Compliance-Report -ItemType directory
send-MailMessage -SmtpServer {mail server} -To {receiver adress}  -From {sender address} -Subject “rapportage monthly install status” -Body “rapportage monthly install status” -Attachment “c:\script\wsus\compliance\convert\$Date-Updates.xlsx”
Move-Item -Force “C:\script\wsus\compliance\convert\*.xlsx” “C:\script\wsus\reports\$Date-Compliance-Report\”
Move-Item -Force “C:\script\wsus\compliance\convert\*.csv” “C:\script\wsus\reports\$Date-csv-files\”}

Then its simply a matter of putting the powershell scripts together under one script like this

{.\dotnet.ps1
.\updates-ie11-Flashplayer.ps1
.\updates-office-2010.ps1
.\updates-office-2013.ps1
.\updates-office-2016.ps1
.\updates-rollup
.\updates-Windows-2008.ps1
.\updates-Windows-2016.ps1
.\updates-server-software.ps1
Start-Sleep -s 120
.\convert.ps1}

Thanks for sharing this, it's the best WSUS report tool I've run into. For a compliance request I needed to prove a hotfix was installed. A small change to the report line saved me countless time.

Where is the script?

This is very helpful.  Thank you so much.  Stock Microsoft WSUS reporting will make you cry.

Exception calling “GetUpdateServer” with “3” argument(s): “The remote name could not be resolved: ‘wsus'”