ComObject 'Microsoft.Update.Session' 省略 WSUS？

Question

我正在尝试获取有关 windows 系统的最新信息。来自 systemstatus 或 wmic qfe list 的信息有时不会提供已安装主机修复的完整列表。所以我想制作 powershell 脚本来检查系统是否有可用的更新。我的脚本如下所示：

[CmdletBinding()]
Param ()

Begin {
    $UpdateSession = New-Object -ComObject 'Microsoft.Update.Session'
}   

Process {
    $UpdateSearcher = $UpdateSession.CreateUpdateSearcher()
    $SearchResult = $UpdateSearcher.Search("IsInstalled=0 and Type='Software' and IsHidden=0")

    if ($SearchResult.Updates.Count -ne 0) {
        $SearchResult.Updates |Select-Object -Property Title, Description |Format-List
    }   
    else {
        Write-Host 'There are no applicable updates'
    }   
}

我的问题是：此脚本是否检查来自本地 WSUS 或 Microsoft 服务器的新更新？我的目标是：检查来自微软服务器的更新以忽略这种情况，这时 WSUS 的管理员会丢弃一些重要的更新。

Answer 1

经过像您这样的搜索，我找到了这个...如果它有帮助的话

Function Get-PendingUpdate { 
<#    
  .SYNOPSIS   
    Retrieves the updates waiting to be installed from WSUS   
  .DESCRIPTION   
    Retrieves the updates waiting to be installed from WSUS  
  .PARAMETER Computername 
    Computer or computers to find updates for.   
  .EXAMPLE   
   Get-PendingUpdates 

   Description 
   ----------- 
   Retrieves the updates that are available to install on the local system 
  .NOTES 
  Author: Boe Prox                                           

#> 

#Requires -version 3.0   
[CmdletBinding( 
    DefaultParameterSetName = 'computer' 
    )] 
param( 
    [Parameter(ValueFromPipeline = $True)] 
        [string[]]$Computername = $env:COMPUTERNAME
    )     
Process { 
    ForEach ($computer in $Computername) { 
        If (Test-Connection -ComputerName $computer -Count 1 -Quiet) { 
            Try { 
            #Create Session COM object 
                Write-Verbose "Creating COM object for WSUS Session" 
                $updatesession =  [activator]::CreateInstance([type]::GetTypeFromProgID("Microsoft.Update.Session",$computer)) 
                } 
            Catch { 
                Write-Warning "$($Error[0])" 
                Break 
                } 

            #Configure Session COM Object 
            Write-Verbose "Creating COM object for WSUS update Search" 
            $updatesearcher = $updatesession.CreateUpdateSearcher() 

            #Configure Searcher object to look for Updates awaiting installation 
            Write-Verbose "Searching for WSUS updates on client" 
            $searchresult = $updatesearcher.Search("IsInstalled=0")     

            #Verify if Updates need installed 
            Write-Verbose "Verifing that updates are available to install" 
            If ($searchresult.Updates.Count -gt 0) { 
                #Updates are waiting to be installed 
                Write-Verbose "Found $($searchresult.Updates.Count) update\s!" 
                #Cache the count to make the For loop run faster 
                $count = $searchresult.Updates.Count 

                #Begin iterating through Updates available for installation 
                Write-Verbose "Iterating through list of updates" 
                For ($i=0; $i -lt $Count; $i++) { 
                    #Create object holding update 
                    $Update = $searchresult.Updates.Item($i)
                    [pscustomobject]@{
                        #Computername = $Computer
                        KB = $($Update.KBArticleIDs)
                        Title = $Update.Title
                        Categories = ($Update.Categories | Select-Object -ExpandProperty Name)
                        SecurityBulletin = $($Update.SecurityBulletinIDs)
                        MsrcSeverity = $Update.MsrcSeverity
                        IsDownloaded = $Update.IsDownloaded
                        Url = $($Update.MoreInfoUrls)
                        BundledUpdates = @($Update.BundledUpdates)|ForEach{
                           [pscustomobject]@{
                                Title = $_.Title
                                DownloadUrl = @($_.DownloadContents).DownloadUrl
                            }
                        }
                    } 
                }
            } 
            Else { 
                #Nothing to install at this time 
                Write-Verbose "No updates to install." 
            }
        } 
        Else { 
            #Nothing to install at this time 
            Write-Warning "$($c): Offline" 
        }  
    }
}

}

感谢 Boe Prox...这是一个很棒的脚本！

ComObject 'Microsoft.Update.Session' 省略 WSUS？

ComObject 'Microsoft.Update.Session' omit WSUS?

windows

powershell

windows-update