Fixlet | Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)

Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)
Log In or Register to download the BES file, and more.

2 Votes

Versioning - This is the latest version.

1	Windows Update - Download modules and trigger run via PowerShell	6/13/2018 2:46:37 PM
2	Windows Update - Download modules and run via PowerShell	6/13/2018 3:00:00 PM
3	Windows Update - Execute Windows Update via modules and PowerShell	6/13/2018 3:09:41 PM
4	Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)	6/18/2018 11:20:04 AM
5	Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)	6/18/2018 12:07:16 PM
6	Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)	4/11/2019 12:43:27 PM

Description

This installs the latest Windows updates.

Last tested on Windows 10 v1803 with PowerShell 5.1. This version requires PS 5.0+ due to module usage.

Checks for existing scripting policy LGPO registry item (cannot override GPO)
If exists, back up and disable existing policy
Install prerequisite: NuGet 2.8.5.201+
Install Windows Update PowerShell Module v2.0.0.4 (tested, feel free to drop that requirement)
Run Windows Update via newly added module
Action 6 is a separate action to uninstall Windows Update PowerShell Module "PSWindowsUpdate" if you would like to scrub the environment.

It will not ask questions, and not provide options - it will simply install everything it is able to install in one round.

This version will NOT install Windows Feature Updates, such as Windows 10 version 1803 to version 1809.

By running this task you accept the Microsoft TechNet terms of use.

Module Credit Michal Gajda, source: https://gallery.technet.microsoft.com/scriptcenter/2d191bcd-3308-4edd-9de2-88dff796b0bc/

Property Details

ID	26617
Status	Production - Fully Tested and Ready for Production
Title	Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)
Source	Internal
Source Release Date	6/13/2018 12:00:00 AM
Keywords	Windows Update Powershell Module MichalGajda
Is Task	True
Added by	rdshift on 4/11/2019 12:43:27 PM
Last Modified by	rdshift on 4/16/2019 7:13:02 AM
Counters	10874 Views / 76 Downloads
User Rating	* Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Relevance 266

Used in 11 fixlets and 5 analyses

* Results in a true/false

exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1" whose (value "Install" of it as integer = 1) of registry

Relevance 384

Used in 382 fixlets and 2 analyses

* Results in a true/false

x64 of operating system

isWindows (Relevance 1172)

Used in 1155 fixlets and 538 analyses

* Results in a true/false

windows of operating system

Relevance 3021605

Used in 3 fixlets

* Results in a true/false

exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\3" whose (value "Install" of it as integer = 1) of registry

Relevance 3021606

Used in 3 fixlets

* Results in a true/false

exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\3\PowerShellEngine" whose (value "PowerShellVersion" of it as string as version >= "5.0") of registry

Actions

Action 1 (default)

Action Link Click here to install Windows + Microsoft Updates without rebooting or notifying the user.

Script Type BigFix Action Script

// Set Powershell
parameter "PowerShellexe"="{value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of x64 registry}"
// Disable script protection
if {exist (value "EnableScripts" of it = "0") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /t REG_DWORD /d 00000001 /f
endif

// Disable execution policy in scope of current user (system)
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted -Force"

// Install PowerShell Modules from PSGallery
waithidden "{parameter "PowerShellexe"}" -Command "Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Install-Module -Name PSWindowsUpdate -RequiredVersion 2.0.0.4 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Import-Module -Name PSWindowsUpdate -Force"

// Check for and install Windows Updates
waithidden "{parameter "PowerShellexe"}" -Command "Get-WindowsUpdate -Install -MicrosoftUpdate -AcceptAll -IgnoreReboot -Confirm:$false"

// Restrict execution policy
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Restricted -Force"

// Re-enable script protection
if {exist (value "EnableScriptsbackup" of it = "1") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /t REG_DWORD /d 00000000 /f
endif

Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 2

Action Link Click here to install Windows + Microsoft Updates and automatically reboot without asking to reboot.

Script Type BigFix Action Script

// Set Powershell
parameter "PowerShellexe"="{value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of x64 registry}"
// Disable script protection
if {exist (value "EnableScripts" of it = "0") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /t REG_DWORD /d 00000001 /f
endif

// Disable execution policy in scope of current user (system)
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted -Force"

// Install PowerShell Modules from PSGallery
waithidden "{parameter "PowerShellexe"}" -Command "Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Install-Module -Name PSWindowsUpdate -RequiredVersion 2.0.0.4 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Import-Module -Name PSWindowsUpdate -Force"

// Check for and install Windows Updates
waithidden "{parameter "PowerShellexe"}" -Command "Get-WindowsUpdate -Install -MicrosoftUpdate -AcceptAll -AutoReboot -Confirm:$false"

// Restrict execution policy
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Restricted -Force"

// Re-enable script protection
if {exist (value "EnableScriptsbackup" of it = "1") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /t REG_DWORD /d 00000000 /f
endif

Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 3

Action Link Click here to install Windows Updates and automatically reboot without asking to reboot.

Script Type BigFix Action Script

// Set Powershell
parameter "PowerShellexe"="{value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of x64 registry}"
// Disable script protection
if {exist (value "EnableScripts" of it = "0") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /t REG_DWORD /d 00000001 /f
endif

// Disable execution policy in scope of current user (system)
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted -Force"

// Install PowerShell Modules from PSGallery
waithidden "{parameter "PowerShellexe"}" -Command "Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Install-Module -Name PSWindowsUpdate -RequiredVersion 2.0.0.4 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Import-Module -Name PSWindowsUpdate -Force"

// Check for and install Windows Updates
waithidden "{parameter "PowerShellexe"}" -Command "Get-WindowsUpdate -Install -AcceptAll -AutoReboot -Confirm:$false"

// Restrict execution policy
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Restricted -Force"

// Re-enable script protection
if {exist (value "EnableScriptsbackup" of it = "1") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /t REG_DWORD /d 00000000 /f
endif

Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 4

Action Link Click here to install Windows Updates without rebooting or notifying the user.

Script Type BigFix Action Script

// Set Powershell
parameter "PowerShellexe"="{value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of x64 registry}"
// Disable script protection
if {exist (value "EnableScripts" of it = "0") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /t REG_DWORD /d 00000001 /f
endif

// Disable execution policy in scope of current user (system)
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted -Force"

// Install PowerShell Modules from PSGallery
waithidden "{parameter "PowerShellexe"}" -Command "Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Install-Module -Name PSWindowsUpdate -RequiredVersion 2.0.0.4 -Force"
waithidden "{parameter "PowerShellexe"}" -Command "Import-Module -Name PSWindowsUpdate -Force"

// Check for and install Windows Updates
waithidden "{parameter "PowerShellexe"}" -Command "Get-WindowsUpdate -Install -AcceptAll -IgnoreReboot -Confirm:$false"

// Restrict execution policy
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Restricted -Force"

// Re-enable script protection
if {exist (value "EnableScriptsbackup" of it = "1") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /t REG_DWORD /d 00000000 /f
endif

Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 5

Action Link Click here to go to the TechNet page on this PowerShell module.

Script Type URL

https://gallery.technet.microsoft.com/scriptcenter/2d191bcd-3308-4edd-9de2-88dff796b0bc/

Action 6

Action Link Click here to uninstall the PowerShell module.

Script Type BigFix Action Script

// Set Powershell
parameter "PowerShellexe"="{value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of x64 registry}"
// Disable script protection
if {exist (value "EnableScripts" of it = "0") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /t REG_DWORD /d 00000001 /f
endif

// Disable execution policy in scope of current user (system)
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted -Force"

// Install PowerShell Modules from PSGallery
waithidden "{parameter "PowerShellexe"}" -Command "Uninstall-Module -Name PSWindowsUpdate -Force"

// Restrict execution policy
waithidden "{parameter "PowerShellexe"}" -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Restricted -Force"

// Re-enable script protection
if {exist (value "EnableScriptsbackup" of it = "1") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}
wait cmd /c reg delete "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScriptsBackup" /f
wait cmd /c reg add "HKLM\Software\Policies\Microsoft\Windows\PowerShell" /v "EnableScripts" /t REG_DWORD /d 00000000 /f
endif

Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 7

Action Link Click here to review this task in the bigfix.me Content Database.

Script Type URL

https://bigfix.me/cdb/fixlet/25528

Sharing

Social Media:

Comments

	mbartosh - 8/25/2021 11:30:00 AM
	These scripts appear to work. exists key "HKLM\Software\Policies\Microsoft\Windows\PowerShell" whose (value "EnableScripts" of it = "0") of native registry exists key "HKLM\Software\Policies\Microsoft\Windows\PowerShell" whose (value "EnableScriptsbackup" of it = "1") of native registry

	mbartosh - 8/25/2021 10:49:04 AM
	I am getting a relevance substitution error from the if statement. In fixlet debugger the relevance returns "Error: Singular expression refers to nonexistent object." if {exist (value "EnableScripts" of it = "0") of keys "HKLM\Software\Policies\Microsoft\Windows\PowerShell" of native registry}

	roniley - 9/21/2020 3:00:53 PM
	Adding additional details for others wanting to test on Win7 PCs. The action was hanging due to it failing to download the files from PSGallery. Even after adding the repository to force download (Install-Module -Name PSWindowsUpdate -Repository PSGallery -Force), I discovered this module will not install automatically on Windows 7 PCs and must be installed manually.

	roniley - 9/21/2020 11:15:06 AM
	Thank you for the update. I have tested on two PCs (Win7 32-bit) and the action hangs on the "Install-Module -Name PSWindowsUpdate -Force". I tried with and without the specified version. I will test on a 64-bit PC to see if I get a better result.

	rdshift - 9/18/2020 12:23:16 PM
	@roniley, I did not. I encourage you to or to reach out to others to test, as I'm not too active here these days.

	roniley - 9/18/2020 10:53:32 AM
	I notice this will only be relevant to 64-bit PCs. Has it been tested on 32-bit? The PowerShell page does not state this as a requirement other than PowerShell 2.0.The action script would need to be changed to native registry for the powershell path.

	rdshift - 4/11/2019 12:50:03 PM (from another version)
	An older version of this task improperly used the singular "key" instead of "keys" in an exists statement, leading to a failure when executing where the key/value did not exist. Unfortunately, we have had this as a policy for quite some time, so all of our workstations had this value. It has since been corrected and retested.

Search for:	Relevance	Fixlets/Tasks
	Analyses	BFI Signatures
	Dashboard/Wizard

Title	Keywords	Description
Relevance	Domain	ActionScript
Mime	Signature Content	(clear all)


Content Search Share Learn Projects	Utilities View SCM Scripts Base64 Converter Shell to Action Script	About About Us Tour FAQ Terms Contact Us	BigFix Resources Download BigFix Support Forum Github/Bigfix

Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version) Log In or Register to download the BES file, and more.

Versioning - This is the latest version.

Description

Property Details

Relevance

Actions

Action 1 (default)

Action 2

Action 3

Action 4

Action 5

Action 6

Action 7

Sharing

Comments

Content

Utilities

About

BigFix Resources

Windows Update - Execute Windows Update via PowerShell Install-Module (PS 5.0+ version)
Log In or Register to download the BES file, and more.