I recently lost the only team member knowledgeable in script writing, and now I'm looking to automate our process for installing updates on our network. Currently, I approve updates through WSUS and then manually remote into each machine to apply those updates one by one. What I'm hoping to do is write a PowerShell script that can send a command to all the machines after approving updates in WSUS, allowing them to run the updates automatically without needing to log into each one. I can't install any additional tools, so I'd appreciate seeing a simple example of how this might work and an explanation of the code.
2 Answers
If you have administrative access to the client machines, you can create a script that leverages the administrative shares to execute the installations silently. This way, you won't need to manually copy the update files, as WSUS should have already staged the updates on these machines. You'll just need to make sure your script tells them to run the updates directly from the system folder where the updates reside.
If your environment uses a domain, you can actually set up Group Policy (GPO) to point your Windows updates to the WSUS server. This means that once you approve an update, the PCs will automatically download it and, depending on your settings, reboot after installation. However, I get that you mentioned you can't control the GPOs, so in that case, your only option is using PowerShell ISE to script the installations directly.
Related Questions
How To: Running Codex CLI on Windows with Azure OpenAI
Set Wordpress Featured Image Using Javascript
How To Fix PHP Random Being The Same
Why no WebP Support with Wordpress
Replace Wordpress Cron With Linux Cron
Customize Yoast Canonical URL Programmatically