win-updates.ps1 6.15 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
param($global:RestartRequired=0,
      $global:MoreUpdates=0,
			$global:MaxCycles=5)

function Check-ContinueRestartOrEnd() {
	$RegistryKey = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
	$RegistryEntry = "InstallWindowsUpdates"
  switch ($global:RestartRequired) {
    0 {			
			$prop = (Get-ItemProperty $RegistryKey).$RegistryEntry
			if ($prop) {
			   Write-Host "Restart Registry Entry Exists - Removing It"
				 Remove-ItemProperty -Path $RegistryKey -Name $RegistryEntry -ErrorAction SilentlyContinue
			}
      Write-Host "No Restart Required"
			Check-WindowsUpdates
			if (($global:MoreUpdates -eq 1) -and ($script:Cycles -le $global:MaxCycles)) {
18
19
        Stop-Service $script:ServiceName -Force
        Set-Service -Name $script:ServiceName -StartupType Disabled -Status Stopped 
20
			  Install-WindowsUpdates
21
22
			} elseif ($script:Cycles -gt $global:MaxCycles) {
			  Write-Host "Exceeded Cycle Count - Stopping"
23
24
			} else {
  			Write-Host "Done Installing Windows Updates"
25
        Set-Service -Name $script:ServiceName -StartupType Automatic -Status Running         
26
27
28
29
30
31
			}
    }
    1 {
	    $prop = (Get-ItemProperty $RegistryKey).$RegistryEntry
		  if (-not $prop) {
		    Write-Host "Restart Registry Entry Does Not Exist - Creating It"
Joe Fitzgerald's avatar
Joe Fitzgerald committed
32
			  Set-ItemProperty -Path $RegistryKey -Name $RegistryEntry -Value "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File $($script:ScriptPath)"
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
      } else {
			  Write-Host "Restart Registry Entry Exists Already"
			}
			Write-Host "Restart Required - Restarting..."
      Restart-Computer
    }
    default { 
      Write-Host "Unsure If A Restart Is Required"; 
      break; 
    }
  }
}

function Install-WindowsUpdates() {
  $script:Cycles++
  Write-Host 'Evaluating Available Updates:'
  $UpdatesToDownload = New-Object -ComObject 'Microsoft.Update.UpdateColl'
  foreach ($Update in $SearchResult.Updates) {
	  if (($Update -ne $null) -and (!$Update.IsDownloaded)) {
	    [bool]$addThisUpdate = $false
	    if ($Update.InstallationBehavior.CanRequestUserInput) {
	      Write-Host "> Skipping: $($Update.Title) because it requires user input"
	    }
	    else {
	      if (!($Update.EulaAccepted)) {
	        Write-Host "> Note: $($Update.Title) has a license agreement that must be accepted. Accepting the license."
	        $Update.AcceptEula()
	        [bool]$addThisUpdate = $true
	      }
	      else {
	        [bool]$addThisUpdate = $true
	      }
	    }
	    if ([bool]$addThisUpdate) {
	      Write-Host "Adding: $($Update.Title)"
	      $UpdatesToDownload.Add($Update) |Out-Null
	    }
		}
  }
  if ($UpdatesToDownload.Count -eq 0) {
  	Write-Host "No Updates To Download..."
  } else {
	  Write-Host 'Downloading Updates...'
	  $Downloader = $UpdateSession.CreateUpdateDownloader()
	  $Downloader.Updates = $UpdatesToDownload
	  $Downloader.Download()
  }
	
  $UpdatesToInstall = New-Object -ComObject 'Microsoft.Update.UpdateColl'
  [bool]$rebootMayBeRequired = $false
  Write-Host 'The following updates are downloaded and ready to be installed:'
  foreach ($Update in $SearchResult.Updates) {
    if (($Update.IsDownloaded)) {
      Write-Host "> $($Update.Title)"
      $UpdatesToInstall.Add($Update) |Out-Null
              
      if ($Update.InstallationBehavior.RebootBehavior -gt 0){
        [bool]$rebootMayBeRequired = $true
      }
    }
  }
  if ($UpdatesToInstall.Count -eq 0) {
    Write-Host 'No updates available to install...'
		$global:MoreUpdates=0
		$global:RestartRequired=0
		break
  }

  if ($rebootMayBeRequired) {
    Write-Host 'These updates may require a reboot'
		$global:RestartRequired=1
  }
	
  Write-Host 'Installing updates...'
  
108
  $Installer = $script:UpdateSession.CreateUpdateInstaller()
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
  $Installer.Updates = $UpdatesToInstall
  $InstallationResult = $Installer.Install()
  
  Write-Host "Installation Result: $($InstallationResult.ResultCode)"
  Write-Host "Reboot Required: $($InstallationResult.RebootRequired)"
  Write-Host 'Listing of updates installed and individual installation results:'
  if ($InstallationResult.RebootRequired) {
	  $global:RestartRequired=1
	} else {
	  $global:RestartRequired=0
	}
  for($i=0; $i -lt $UpdatesToInstall.Count; $i++) {
    New-Object -TypeName PSObject -Property @{
        Title = $UpdatesToInstall.Item($i).Title
        Result = $InstallationResult.GetUpdateResult($i).ResultCode
        }
  }
	
	Check-ContinueRestartOrEnd
}
function Check-WindowsUpdates() {
  Write-Host "Checking For Windows Updates"
  $Username = $env:USERDOMAIN + "\" + $env:USERNAME
 
  New-EventLog -Source $ScriptName -LogName 'Windows Powershell' -ErrorAction SilentlyContinue
 
  $Message = "Script: " + $ScriptPath + "`nScript User: " + $Username + "`nStarted: " + (Get-Date).toString()

  Write-EventLog -LogName 'Windows Powershell' -Source $ScriptName -EventID "104" -EntryType "Information" -Message $Message
  Write-Host $Message

  $script:UpdateSearcher = $script:UpdateSession.CreateUpdateSearcher()
  $script:SearchResult = $script:UpdateSearcher.Search("IsInstalled=0 and Type='Software' and IsHidden=0")      
  if ($SearchResult.Updates.Count -ne 0) {
    $script:SearchResult.Updates |Select-Object -Property Title, Description, SupportUrl, UninstallationNotes, RebootRequired, EulaAccepted |Format-List
    $global:MoreUpdates=1
  }
  else {
    Write-Host 'There are no applicable updates'
    $global:RestartRequired=0
    $global:MoreUpdates=0
  }
}

$script:ScriptName = $MyInvocation.MyCommand.ToString()
$script:ScriptPath = $MyInvocation.MyCommand.Path
$script:UpdateSession = New-Object -ComObject 'Microsoft.Update.Session'
$script:UpdateSession.ClientApplicationID = 'Packer Windows Update Installer'
$script:UpdateSearcher = $script:UpdateSession.CreateUpdateSearcher()
$script:SearchResult = New-Object -ComObject 'Microsoft.Update.UpdateColl'
$script:Cycles = 0

161
162
163
164
165
$script:ServiceName = "OpenSSHd"

Stop-Service $script:ServiceName -Force
Set-Service -Name $script:ServiceName -StartupType Disabled -Status Stopped 

166
167
168
169
170
Check-WindowsUpdates
if ($global:MoreUpdates -eq 1) {
  Install-WindowsUpdates
} else {
  Check-ContinueRestartOrEnd
dylanmei's avatar
dylanmei committed
171
172
173
}