install-win-updates.ps1 6.01 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
param($global:RestartRequired=0,
      $global:MoreUpdates=0,
			$global:MaxCycles=5)

function Check-ContinueRestartOrEnd() {
	$RegistryKey = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
	$RegistryEntry = "InstallWindowsUpdates"
  switch ($global:RestartRequired) {
    0 {			
			$prop = (Get-ItemProperty $RegistryKey).$RegistryEntry
			if ($prop) {
			   Write-Host "Restart Registry Entry Exists - Removing It"
				 Remove-ItemProperty -Path $RegistryKey -Name $RegistryEntry -ErrorAction SilentlyContinue
			}
      Write-Host "No Restart Required"
			Check-WindowsUpdates
			if (($global:MoreUpdates -eq 1) -and ($script:Cycles -le $global:MaxCycles)) {
			  Stop-Service $script:ServiceName -Force
19
			  Set-Service -Name $script:ServiceName -StartupType Disabled -Status Stopped
20
21
22
			  Install-WindowsUpdates
			} else {
  			Write-Host "Done Installing Windows Updates"
23
			  Set-Service -Name $script:ServiceName -StartupType Automatic -Status Running
24
25
26
27
28
29
			}
    }
    1 {
	    $prop = (Get-ItemProperty $RegistryKey).$RegistryEntry
		  if (-not $prop) {
		    Write-Host "Restart Registry Entry Does Not Exist - Creating It"
30
			  Set-ItemProperty -Path $RegistryKey -Name $RegistryEntry -Value "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\install-win-updates.ps1"
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
      } else {
			  Write-Host "Restart Registry Entry Exists Already"
			}
			Write-Host "Restart Required - Restarting..."
      Restart-Computer
    }
    default { 
      Write-Host "Unsure If A Restart Is Required"; 
      break; 
    }
  }
}

function Install-WindowsUpdates() {
  $script:Cycles++
  Write-Host 'Evaluating Available Updates:'
  $UpdatesToDownload = New-Object -ComObject 'Microsoft.Update.UpdateColl'
  foreach ($Update in $SearchResult.Updates) {
	  if (($Update -ne $null) -and (!$Update.IsDownloaded)) {
	    [bool]$addThisUpdate = $false
	    if ($Update.InstallationBehavior.CanRequestUserInput) {
	      Write-Host "> Skipping: $($Update.Title) because it requires user input"
	    }
	    else {
	      if (!($Update.EulaAccepted)) {
	        Write-Host "> Note: $($Update.Title) has a license agreement that must be accepted. Accepting the license."
	        $Update.AcceptEula()
	        [bool]$addThisUpdate = $true
	      }
	      else {
	        [bool]$addThisUpdate = $true
	      }
	    }
	    if ([bool]$addThisUpdate) {
	      Write-Host "Adding: $($Update.Title)"
	      $UpdatesToDownload.Add($Update) |Out-Null
	    }
		}
  }
  if ($UpdatesToDownload.Count -eq 0) {
  	Write-Host "No Updates To Download..."
  } else {
	  Write-Host 'Downloading Updates...'
	  $Downloader = $UpdateSession.CreateUpdateDownloader()
	  $Downloader.Updates = $UpdatesToDownload
	  $Downloader.Download()
  }
	
  $UpdatesToInstall = New-Object -ComObject 'Microsoft.Update.UpdateColl'
  [bool]$rebootMayBeRequired = $false
  Write-Host 'The following updates are downloaded and ready to be installed:'
  foreach ($Update in $SearchResult.Updates) {
    if (($Update.IsDownloaded)) {
      Write-Host "> $($Update.Title)"
      $UpdatesToInstall.Add($Update) |Out-Null
              
      if ($Update.InstallationBehavior.RebootBehavior -gt 0){
        [bool]$rebootMayBeRequired = $true
      }
    }
  }
  if ($UpdatesToInstall.Count -eq 0) {
    Write-Host 'No updates available to install...'
		$global:MoreUpdates=0
		$global:RestartRequired=0
		break
  }

  if ($rebootMayBeRequired) {
    Write-Host 'These updates may require a reboot'
		$global:RestartRequired=1
  }
	
  Write-Host 'Installing updates...'
  
  $Installer = $UpdateSession.CreateUpdateInstaller()
  $Installer.Updates = $UpdatesToInstall
  $InstallationResult = $Installer.Install()
  
  Write-Host "Installation Result: $($InstallationResult.ResultCode)"
  Write-Host "Reboot Required: $($InstallationResult.RebootRequired)"
  Write-Host 'Listing of updates installed and individual installation results:'
  if ($InstallationResult.RebootRequired) {
	  $global:RestartRequired=1
	} else {
	  $global:RestartRequired=0
	}
  for($i=0; $i -lt $UpdatesToInstall.Count; $i++) {
    New-Object -TypeName PSObject -Property @{
        Title = $UpdatesToInstall.Item($i).Title
        Result = $InstallationResult.GetUpdateResult($i).ResultCode
        }
  }
	
	Check-ContinueRestartOrEnd
}
function Check-WindowsUpdates() {
  Write-Host "Checking For Windows Updates"
  $Username = $env:USERDOMAIN + "\" + $env:USERNAME
 
  New-EventLog -Source $ScriptName -LogName 'Windows Powershell' -ErrorAction SilentlyContinue
 
  $Message = "Script: " + $ScriptPath + "`nScript User: " + $Username + "`nStarted: " + (Get-Date).toString()

  Write-EventLog -LogName 'Windows Powershell' -Source $ScriptName -EventID "104" -EntryType "Information" -Message $Message
  Write-Host $Message

  $script:UpdateSearcher = $script:UpdateSession.CreateUpdateSearcher()
  $script:SearchResult = $script:UpdateSearcher.Search("IsInstalled=0 and Type='Software' and IsHidden=0")      
  if ($SearchResult.Updates.Count -ne 0) {
    $script:SearchResult.Updates |Select-Object -Property Title, Description, SupportUrl, UninstallationNotes, RebootRequired, EulaAccepted |Format-List
    $global:MoreUpdates=1
  }
  else {
    Write-Host 'There are no applicable updates'
    $global:RestartRequired=0
    $global:MoreUpdates=0
  }
}

$script:ScriptName = $MyInvocation.MyCommand.ToString()
$script:ScriptPath = $MyInvocation.MyCommand.Path
$script:UpdateSession = New-Object -ComObject 'Microsoft.Update.Session'
$script:UpdateSession.ClientApplicationID = 'Packer Windows Update Installer'
$script:UpdateSearcher = $script:UpdateSession.CreateUpdateSearcher()
$script:SearchResult = New-Object -ComObject 'Microsoft.Update.UpdateColl'
$script:Cycles = 0

$script:ServiceName = "sshd"

Stop-Service $script:ServiceName -Force
162
Set-Service -Name $script:ServiceName -StartupType Disabled -Status Stopped
163
164
165
166
167
168
169
Check-WindowsUpdates
if ($global:MoreUpdates -eq 1) {
  Install-WindowsUpdates
} else {
  Check-ContinueRestartOrEnd
}