update
This commit is contained in:
58
WSUS/Maintenace.ps1
Normal file
58
WSUS/Maintenace.ps1
Normal file
@ -0,0 +1,58 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
<Overview of script>
|
||||
|
||||
.NOTES
|
||||
Version: 1.0
|
||||
Author: Hubert CORNET
|
||||
Creation Date: <Date>
|
||||
Purpose/Change: Initial script development
|
||||
|
||||
.LINK
|
||||
https://www.tips-of-mine.fr
|
||||
|
||||
.EXEMPLE
|
||||
<Example goes here. Repeat this attribute for more than one example>
|
||||
|
||||
.DESCRIPTION
|
||||
<Brief description of script>
|
||||
|
||||
.PARAMETER <Parameter_Name>
|
||||
<Brief description of parameter input required. Repeat this attribute if required>
|
||||
|
||||
.INPUTS
|
||||
<Inputs if any, otherwise state None>
|
||||
|
||||
.OUTPUTS
|
||||
<Outputs if any, otherwise state None - example: Log file stored in C:\Windows\Temp\<name>.log>
|
||||
#>
|
||||
|
||||
#---------------------------------------------------------[Initialisations]--------------------------------------------------------
|
||||
# Définir l'action d'erreur pour continuer silencieusement
|
||||
$ErrorActionPreference = "SilentlyContinue"
|
||||
|
||||
# Bibliothèques de fonctions requises
|
||||
|
||||
#----------------------------------------------------------[Declarations]----------------------------------------------------------
|
||||
# Version Script
|
||||
$sScriptVersion = "1.0"
|
||||
|
||||
#Log File Info
|
||||
$sLogPath = "C:\Tmp"
|
||||
$sLogName = "<script_name>.log"
|
||||
$sLogFile = Join-Path -Path $sLogPath -ChildPath $sLogName
|
||||
|
||||
#-----------------------------------------------------------[Functions]------------------------------------------------------------
|
||||
|
||||
#------------------------------------------------------------[Script]--------------------------------------------------------------
|
||||
|
||||
cls
|
||||
|
||||
Invoke-WsusServerCleanup -CleanupObsoleteUpdates
|
||||
Invoke-WsusServerCleanup -CleanupUnneededContentFiles
|
||||
Invoke-WsusServerCleanup -DeclineExpiredUpdates
|
||||
Invoke-WsusServerCleanup -DeclineSupersededUpdates
|
||||
|
||||
Invoke-WsusServerCleanup -CompressUpdates
|
||||
|
||||
Dism.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase
|
||||
0
WSUS/README.md
Normal file
0
WSUS/README.md
Normal file
85
WSUS/Update-Approuve-Crit.ps1
Normal file
85
WSUS/Update-Approuve-Crit.ps1
Normal file
@ -0,0 +1,85 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
<Overview of script>
|
||||
|
||||
.NOTES
|
||||
Version: 1.0
|
||||
Author: Hubert CORNET
|
||||
Creation Date: <Date>
|
||||
Purpose/Change: Initial script development
|
||||
|
||||
.LINK
|
||||
https://www.tips-of-mine.fr
|
||||
|
||||
.EXEMPLE
|
||||
<Example goes here. Repeat this attribute for more than one example>
|
||||
|
||||
.DESCRIPTION
|
||||
<Brief description of script>
|
||||
|
||||
.PARAMETER <Parameter_Name>
|
||||
<Brief description of parameter input required. Repeat this attribute if required>
|
||||
|
||||
.INPUTS
|
||||
<Inputs if any, otherwise state None>
|
||||
|
||||
.OUTPUTS
|
||||
<Outputs if any, otherwise state None - example: Log file stored in C:\Windows\Temp\<name>.log>
|
||||
#>
|
||||
|
||||
#---------------------------------------------------------[Initialisations]--------------------------------------------------------
|
||||
|
||||
# Argument à définir au lancement du script pour la sélection des serveurs
|
||||
Param(
|
||||
[string]$group
|
||||
)
|
||||
|
||||
# Définir l'action d'erreur pour continuer silencieusement
|
||||
$ErrorActionPreference = "SilentlyContinue"
|
||||
|
||||
# Bibliothèques de fonctions requises
|
||||
|
||||
#----------------------------------------------------------[Declarations]----------------------------------------------------------
|
||||
# Version Script
|
||||
$sScriptVersion = "1.0"
|
||||
|
||||
#Log File Info
|
||||
$sLogPath = "C:\Tmp"
|
||||
$sLogName = "<script_name>.log"
|
||||
$sLogFile = Join-Path -Path $sLogPath -ChildPath $sLogName
|
||||
|
||||
# Définition du Timestamp du fichier de log
|
||||
$Timestamp = Get-Date -Format FileDate
|
||||
|
||||
# Définition du fichier de log
|
||||
$log = "C:\Exploit\Logs\Approved_Updates_$group.$Timestamp.txt"
|
||||
|
||||
$date = Get-Date
|
||||
|
||||
#-----------------------------------------------------------[Functions]------------------------------------------------------------
|
||||
|
||||
#------------------------------------------------------------[Script]--------------------------------------------------------------
|
||||
|
||||
cls
|
||||
|
||||
# Connection au serveur WSUS
|
||||
$wsusserver = "SWADMAPPP01.fr.dgs.group"
|
||||
[void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
|
||||
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($wsusserver,$False,8530)
|
||||
|
||||
# Définition des updates a approuver
|
||||
$updates = $wsus.GetUpdates() | ? {($_.Title -notmatch "Itanium" -and $_.Title -notmatch ".net Framework" -and $_.PublicationState -ne "Expired" ) -and ($_.ProductFamilyTitles -eq "Windows") -and ($_.UpdateClassificationTitle -eq "Critical Updates")}
|
||||
|
||||
# Approbation des packages pour la sélection de serveur
|
||||
$wgroup = $wsus.GetComputerTargetGroups() | where {$_.Name -eq $group}
|
||||
foreach ($update in $updates)
|
||||
{
|
||||
$update.Approve(“Install”,$wgroup)
|
||||
}
|
||||
|
||||
# Ecriture du fichier de log
|
||||
"Approved updates on $date : " | Out-File $log -append
|
||||
"Updates have been approved for following groups: (" + $group + ")" | Out-File $log -append
|
||||
"Following updates have been approved:" | Out-File $log -append
|
||||
$updates | Select Title,ProductTitles,KnowledgebaseArticles,CreationDate | Out-File $log –append
|
||||
|
||||
77
WSUS/Update-Approuve-Prod.ps1
Normal file
77
WSUS/Update-Approuve-Prod.ps1
Normal file
@ -0,0 +1,77 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
<Overview of script>
|
||||
|
||||
.NOTES
|
||||
Version: 1.0
|
||||
Author: Hubert CORNET
|
||||
Creation Date: <Date>
|
||||
Purpose/Change: Initial script development
|
||||
|
||||
.LINK
|
||||
https://www.tips-of-mine.fr
|
||||
|
||||
.EXEMPLE
|
||||
<Example goes here. Repeat this attribute for more than one example>
|
||||
|
||||
.DESCRIPTION
|
||||
<Brief description of script>
|
||||
|
||||
.PARAMETER <Parameter_Name>
|
||||
<Brief description of parameter input required. Repeat this attribute if required>
|
||||
|
||||
.INPUTS
|
||||
<Inputs if any, otherwise state None>
|
||||
|
||||
.OUTPUTS
|
||||
<Outputs if any, otherwise state None - example: Log file stored in C:\Windows\Temp\<name>.log>
|
||||
#>
|
||||
|
||||
#---------------------------------------------------------[Initialisations]--------------------------------------------------------
|
||||
# Définir l'action d'erreur pour continuer silencieusement
|
||||
$ErrorActionPreference = "SilentlyContinue"
|
||||
|
||||
# Bibliothèques de fonctions requises
|
||||
|
||||
#----------------------------------------------------------[Declarations]----------------------------------------------------------
|
||||
# Version Script
|
||||
$sScriptVersion = "1.0"
|
||||
|
||||
#Log File Info
|
||||
$sLogPath = "C:\Tmp"
|
||||
$sLogName = "<script_name>.log"
|
||||
$sLogFile = Join-Path -Path $sLogPath -ChildPath $sLogName
|
||||
|
||||
$WsusServerFqdn='SWADMAPPP01'
|
||||
$WsusSourceGroup = 'ServersPREPRD'
|
||||
$WsusTargetGroup = 'ServersPRD'
|
||||
$LOG = 'C:\Exploit\Logs\Approved_Updates_ServersPRD'
|
||||
$Timestamp = Get-Date -Format FileDate
|
||||
$LOGFILE = "$LOG.$Timestamp.log"
|
||||
$i = 0
|
||||
|
||||
#-----------------------------------------------------------[Functions]------------------------------------------------------------
|
||||
|
||||
#------------------------------------------------------------[Script]--------------------------------------------------------------
|
||||
|
||||
cls
|
||||
|
||||
[void][reflection.assembly]::LoadWithPartialName( “Microsoft.UpdateServices.Administration”)
|
||||
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer( $WsusServerFqdn, $False, ‘8530’)
|
||||
$Groups = $wsus.GetComputerTargetGroups()
|
||||
$WsusSourceGroupObj = $Groups | Where {$_.Name -eq $WsusSourceGroup}
|
||||
$WsusTargemtGroupObj = $Groups | Where {$_.Name -eq $WsusTargetGroup}
|
||||
|
||||
$Updates = $wsus.GetUpdates()
|
||||
|
||||
ForEach ($Update in $Updates) {
|
||||
If ($Update.GetUpdateApprovals($WsusSourceGroupObj).Count -ne 0 -and $Update.GetUpdateApprovals($WsusTargetGroupObj).Count -eq 0) {
|
||||
$i ++
|
||||
Write-Output (“Approving ” + $Update.Title) | Out-File $LOGFILE -Append
|
||||
$Update.Approve(‘Install’,$WsusTargetGroupObj) | Out-Null
|
||||
}
|
||||
}
|
||||
|
||||
Write-Output (“Approved {0} updates for target group {1}” -f $i, $WsusTargetGroup)
|
||||
|
||||
|
||||
200
WSUS/Update-MailReport.ps1
Normal file
200
WSUS/Update-MailReport.ps1
Normal file
@ -0,0 +1,200 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
<Overview of script>
|
||||
|
||||
.NOTES
|
||||
Version: 1.0
|
||||
Author: Hubert CORNET
|
||||
Creation Date: <Date>
|
||||
Purpose/Change: Initial script development
|
||||
|
||||
.LINK
|
||||
https://www.tips-of-mine.fr
|
||||
|
||||
.EXEMPLE
|
||||
<Example goes here. Repeat this attribute for more than one example>
|
||||
|
||||
.DESCRIPTION
|
||||
<Brief description of script>
|
||||
|
||||
.PARAMETER <Parameter_Name>
|
||||
<Brief description of parameter input required. Repeat this attribute if required>
|
||||
|
||||
.INPUTS
|
||||
<Inputs if any, otherwise state None>
|
||||
|
||||
.OUTPUTS
|
||||
<Outputs if any, otherwise state None - example: Log file stored in C:\Windows\Temp\<name>.log>
|
||||
#>
|
||||
|
||||
#---------------------------------------------------------[Initialisations]--------------------------------------------------------
|
||||
|
||||
Param (
|
||||
# Nom du serveur
|
||||
[string]$UpdateServer = 'SWADMAPPP01',
|
||||
# Port TCP WSUS, par défaut 8530
|
||||
[int]$Port = 8530,
|
||||
[bool]$Secure = $False # Set this to TRUE if you use HTTPS to access WSUS service.
|
||||
)
|
||||
|
||||
# Définir l'action d'erreur pour continuer silencieusement
|
||||
$ErrorActionPreference = "SilentlyContinue"
|
||||
|
||||
# Bibliothèques de fonctions requises
|
||||
|
||||
#----------------------------------------------------------[Declarations]----------------------------------------------------------
|
||||
# Version Script
|
||||
$sScriptVersion = "1.0"
|
||||
|
||||
#Log File Info
|
||||
$sLogPath = "C:\Tmp"
|
||||
$sLogName = "<script_name>.log"
|
||||
$sLogFile = Join-Path -Path $sLogPath -ChildPath $sLogName
|
||||
|
||||
#-----------------------------------------------------------[Functions]------------------------------------------------------------
|
||||
|
||||
#------------------------------------------------------------[Script]--------------------------------------------------------------
|
||||
|
||||
cls
|
||||
|
||||
# Variable pour l'envoi de mail
|
||||
|
||||
# Adresse du serveur SMTP
|
||||
$smtp = "relaissmtp.fr.dgs.group"
|
||||
# Destinataire 1
|
||||
$to1 = "vianney.lavoillotte-ext@saint-maclou.com"
|
||||
# Destinataire 1
|
||||
$to2 = "production@saint-maclou.com"
|
||||
# Adresse de l'émeteur, définit par le nom du serveur
|
||||
$from = $UpdateServer + "<" + $UpdateServer + "@saint-maclou.com>"
|
||||
|
||||
$MsgBody = "<HTML>"
|
||||
$MsgBody = $MsgBody + "<HEAD>"
|
||||
$MsgBody = $MsgBody + "<title>Rapport des machines du serveur WSUS :" + $UpdateServer + "</title>"
|
||||
$MsgBody = $MsgBody + "</HEAD>"
|
||||
$MsgBody = $MsgBody + "<BODY style=""font-family:'Courier New', Courier, monospace"">"
|
||||
|
||||
$MsgBody= $MsgBody + "<h1>Rapport des machines du serveur WSUS : " + $UpdateServer + "</h1>"
|
||||
$intLineCounter = 0 # To count computers.
|
||||
|
||||
Remove-Item -force PcStatusReport.txt # This is a small log file to keep track of the last run results. It needs to be removed before start reading the list.
|
||||
|
||||
If (-Not (Import-Module UpdateServices -PassThru)) {
|
||||
Add-Type -Path "$Env:ProgramFiles\Update Services\Api\Microsoft.UpdateServices.Administration.dll" -PassThru
|
||||
}
|
||||
|
||||
$Wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($UpdateServer,$Secure,$Port) # With this we get connected to the WSUS server.
|
||||
|
||||
$CTScope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope #This will the our scope, it includes all computers registered in the WSUS server.
|
||||
|
||||
|
||||
# Now, lets write the HTML table headers.
|
||||
$MsgBody = $MsgBody + "<table border=""1"" cellspacing=""2"" cellpadding=""2"" style=""font-family:'Courier New', Courier, monospace"">"
|
||||
$MsgBody = $MsgBody + "<tr>"
|
||||
$MsgBody = $MsgBody + "<th>Index</th>"
|
||||
$MsgBody = $MsgBody + "<th>Status</th>"
|
||||
$MsgBody = $MsgBody + "<th>Computer Name</th>"
|
||||
$MsgBody = $MsgBody + "<th>IP Address</th>"
|
||||
$MsgBody = $MsgBody + "<th>Last Contact</th>"
|
||||
$MsgBody = $MsgBody + "<th>Total updates</th>"
|
||||
$MsgBody = $MsgBody + "<th bgcolor=""LightSalmon "">Awaiting reboot</th>"
|
||||
$MsgBody = $MsgBody + "<th bgcolor=""Cyan"">Ready to install</th>"
|
||||
$MsgBody = $MsgBody + "<th bgcolor=""Yellow"">Download pending</th>"
|
||||
$MsgBody = $MsgBody + "<th bgcolor=""IndianRed"">Failed</th>"
|
||||
$MsgBody = $MsgBody + "<th bgcolor=""Silver"">Unknown State</th>"
|
||||
$MsgBody = $MsgBody + "</tr>"
|
||||
|
||||
|
||||
# This is the main part: Here we will sort the list of computers by name, and get details for each one of them.
|
||||
|
||||
$wsus.GetComputerTargets($CTScope) | Sort -Property FullDomainName | ForEach {
|
||||
|
||||
$objSummary = $_.GetUpdateInstallationSummary() # This is an intermediate object that contains the details.
|
||||
$Down = $objSummary.DownloadedCount # This is the amount of updates that has been downloaded already.
|
||||
$Fail = $objSummary.FailedCount # This is the count for the failed updates.
|
||||
$Pend = $objSummary.InstalledPendingRebootCount # This is the number of updates that need to reboot to complete installation.
|
||||
$NotI = $objSummary.NotInstalledCount # These are the needed updates for this computer.
|
||||
$Unkn = $objSummary.UnknownCount # These are the updates that are waiting for detection on the first search.
|
||||
$Total = $Down + $Fail + $Pend + $NotI + $Unkn # Total amount of updates for this computer.
|
||||
|
||||
$intLineCounter = $intLineCounter + 1 # Increase the table line counter.
|
||||
$IntStr = [Convert]::ToString($intLineCounter) # convert it to string to put it on the HTML code.
|
||||
|
||||
if ($Total -eq 0) {$Estado="OK"; $bgcolor="LightGreen"}
|
||||
elseif ($Pend -ne 0) {$Estado="Reboot needed"; $bgcolor="LightSalmon"}
|
||||
elseif ($Down -ne 0) {$Estado="Ready to install"; $bgcolor="Cyan"}
|
||||
elseif ($NotI -ne 0) {$Estado="Pending"; $bgcolor="Yellow"}
|
||||
elseif ($Fail -ne 0) {$Estado="Error"; $bgcolor="IndianRed"}
|
||||
elseif ($Unkn -ne 0) {$Estado="Not reported yet"; $bgcolor="Silver"}
|
||||
else {$Estado=""; $bgcolor="White"}
|
||||
|
||||
Write-Verbose ($IntStr + " : " + $_.FullDomainName) -Verbose # Show task progress on screen.
|
||||
|
||||
$LastContact = $_.LastReportedStatusTime # This is the last time when the computer reported to the wsus.
|
||||
$days = [Math]::Ceiling((New-TimeSpan -Start $LastContact).TotalDays) # This is the number of days since last time.
|
||||
|
||||
if ($days -gt 14) {$Color="Red"} # Computer is away for too long.
|
||||
elseif ($days -gt 7) {$Color="Orange"} # Computer may be in trouble.
|
||||
elseif ($days -gt 2) {$Color="Yellow"} # Computer may be off.
|
||||
else {$Color="White"} # Computer is ok.
|
||||
|
||||
# Reformat days to a more human-readable form.
|
||||
if ($days -eq 0) {$Dias="Today"}
|
||||
elseif ($days -eq 1) {$Dias="Yesterday"}
|
||||
else {$Dias="Since " + $days + " days."}
|
||||
|
||||
if ($LastContact -eq [DateTime]::MinValue) {$Dias="Never"; $Color="Silver"}
|
||||
|
||||
# Now write the table row with all the info.
|
||||
$MsgBody = $MsgBody + " <tr>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle""> " + $IntStr +" </td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"" bgcolor=""" + $bgcolor + """> " + $Estado + " </td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle""> " + $_.FullDomainName+ " </td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle""> " + $_.IPAddress + " </td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"" bgcolor=""" + $Color + """> " + $Dias +"</td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"">" + $Total + "</td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"">" + $Pend + "</td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"">" + $Down + "</td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"">" + $NotI + "</td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"">" + $Fail + "</td>"
|
||||
$MsgBody = $MsgBody + "<td align=""center"" valign=""middle"">" + $Unkn + "</td>"
|
||||
$MsgBody = $MsgBody + "</tr>"
|
||||
|
||||
$_.FullDomainName >> PcStatusReport.txt # And append a new line on the log file.
|
||||
}
|
||||
|
||||
$MsgBody = $MsgBody + "</table><br>" # Finish the HTML table.
|
||||
|
||||
if ($intLineCounter -eq 0) {
|
||||
Write-Verbose ("You must run this script from as administrator to read WSUS database.") -Verbose # Display a warning if not run with admin privileges.
|
||||
$MsgBody = $MsgBody + " You must run this script from as administrator to read WSUS database. <hr>"
|
||||
} else {
|
||||
$MsgBody = $MsgBody + "<hr>"
|
||||
}
|
||||
|
||||
#This is a footnote for the report readers.
|
||||
$MsgBody = $MsgBody + "<p><h2>Note: </h2>The updates are applied in a sequential three-steps process: Search, Download and Install.<br> Each computer has to go through these three stages to be updated.<ul>"
|
||||
$MsgBody = $MsgBody + "<li>Before the first time a search is run, it is unknown whether the computer will need some updating, thats why in this case all updates appear in <strong>Unknown State</strong>.</li>"
|
||||
$MsgBody = $MsgBody + "<li>Once the search is complete, the updates appear as <strong>Download pending</strong>, which are the updates that the computer specifically needs.</li>"
|
||||
$MsgBody = $MsgBody + "<li>When the computer has downloaded pending updates, these are counted as <strong>Ready to install</strong>.</li>"
|
||||
$MsgBody = $MsgBody + "<li>At the end of the installation stage you can get one of these results:</li><ul>"
|
||||
$MsgBody = $MsgBody + "<li><strong>OK</strong>: All necessary updates were installed correctly.</li>"
|
||||
$MsgBody = $MsgBody + "<li><strong>ERROR</strong>: One or more required updates were not installed correctly.</li>"
|
||||
$MsgBody = $MsgBody + "<li><strong>Reboot needed</strong>: The installation ended the first part, but you must restart the computer to complete the second part.</li>"
|
||||
$MsgBody = $MsgBody + "</ul></ul></p>"
|
||||
$MsgBody = $MsgBody + "If a computer is not connected to the server for more than 14 days is highlighted with color <font style=""background-color:red"">red</font>.<br>"
|
||||
$MsgBody = $MsgBody + "If a computer is not connected to the server from 7 to 14 days is highlighted with color <font style=""background-color:orange"">orange</font>.<br>"
|
||||
$MsgBody = $MsgBody + "If a computer is not connected to the server from 2 to 6 days is highlighted with color <font style=""background-color:yellow"">yellow</font>.<br>"
|
||||
$MsgBody = $MsgBody + "<hr>"
|
||||
|
||||
$MsgBody = $MsgBody + "<center><strong>" + [System.DateTime]::Now + "</strong></center>" # This is a timestamp at the end of the message, taking into account the SMTP delivery delay.
|
||||
|
||||
$IntStr = [Convert]::ToString($intLineCounter) # convert the line counter to string
|
||||
$subject = $IntStr + " ordinateurs enregistres sur le serveur WSUS " + $UpdateServer # This will be the subject of the message.
|
||||
|
||||
# Closing Body and HTML tags
|
||||
$MsgBody = $MsgBody + "</BODY>"
|
||||
$MsgBody = $MsgBody + "</HTML>"
|
||||
|
||||
# Now send the email message and thats all.
|
||||
send-MailMessage -SmtpServer $smtp -To $to1, $to2 -From $from -Subject $subject -Body $MsgBody -BodyAsHtml -Priority high
|
||||
84
WSUS/update-Approuve.ps1
Normal file
84
WSUS/update-Approuve.ps1
Normal file
@ -0,0 +1,84 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
<Overview of script>
|
||||
|
||||
.NOTES
|
||||
Version: 1.0
|
||||
Author: Hubert CORNET
|
||||
Creation Date: <Date>
|
||||
Purpose/Change: Initial script development
|
||||
|
||||
.LINK
|
||||
https://www.tips-of-mine.fr
|
||||
|
||||
.EXEMPLE
|
||||
<Example goes here. Repeat this attribute for more than one example>
|
||||
|
||||
.DESCRIPTION
|
||||
<Brief description of script>
|
||||
|
||||
.PARAMETER <Parameter_Name>
|
||||
<Brief description of parameter input required. Repeat this attribute if required>
|
||||
|
||||
.INPUTS
|
||||
<Inputs if any, otherwise state None>
|
||||
|
||||
.OUTPUTS
|
||||
<Outputs if any, otherwise state None - example: Log file stored in C:\Windows\Temp\<name>.log>
|
||||
#>
|
||||
|
||||
#---------------------------------------------------------[Initialisations]--------------------------------------------------------
|
||||
|
||||
# Argument à définir au lancement du script pour la sélection des serveurs
|
||||
Param(
|
||||
[string]$group
|
||||
)
|
||||
|
||||
# Définir l'action d'erreur pour continuer silencieusement
|
||||
$ErrorActionPreference = "SilentlyContinue"
|
||||
|
||||
# Bibliothèques de fonctions requises
|
||||
|
||||
#----------------------------------------------------------[Declarations]----------------------------------------------------------
|
||||
# Version Script
|
||||
$sScriptVersion = "1.0"
|
||||
|
||||
#Log File Info
|
||||
$sLogPath = "C:\Tmp"
|
||||
$sLogName = "<script_name>.log"
|
||||
$sLogFile = Join-Path -Path $sLogPath -ChildPath $sLogName
|
||||
|
||||
# Définition du Timestamp du fichier de log
|
||||
$Timestamp = Get-Date -Format FileDate
|
||||
|
||||
# Définition du fichier de log
|
||||
$log = "C:\Exploit\Logs\Approved_Updates_$group.$Timestamp.txt"
|
||||
|
||||
$date = Get-Date
|
||||
|
||||
#-----------------------------------------------------------[Functions]------------------------------------------------------------
|
||||
|
||||
#------------------------------------------------------------[Script]--------------------------------------------------------------
|
||||
|
||||
cls
|
||||
|
||||
# Connection au serveur WSUS
|
||||
$wsusserver = "SWADMAPPP01.fr.dgs.group"
|
||||
[void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
|
||||
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($wsusserver,$False,8530)
|
||||
|
||||
# Définition des updates a approuver
|
||||
$updates = $wsus.GetUpdates() | ? {($_.Title -notmatch "Itanium" -and $_.PublicationState -ne "Expired" ) -and ($_.ProductFamilyTitles -eq "Windows") -and ($_.UpdateClassificationTitle -eq "Security Updates" -or $_.UpdateClassificationTitle -eq "Critical Updates" -or $_.UpdateClassificationTitle -eq "Updates" -or $_.UpdateClassificationTitle -eq "Update Rollups")}
|
||||
|
||||
# Approbation des packages pour la sélection de serveur
|
||||
$wgroup = $wsus.GetComputerTargetGroups() | where {$_.Name -eq $group}
|
||||
Foreach ($update in $updates) {
|
||||
$update.Approve(“Install”,$wgroup)
|
||||
}
|
||||
|
||||
# Ecriture du fichier de log
|
||||
"Approved updates on $date : " | Out-File $log -append
|
||||
"Updates have been approved for following groups: (" + $group + ")" | Out-File $log -append
|
||||
"Following updates have been approved:" | Out-File $log -append
|
||||
$updates | Select Title,ProductTitles,KnowledgebaseArticles,CreationDate | Out-File $log –append
|
||||
|
||||
Reference in New Issue
Block a user