Automating Windows Updates using PowerShell

Scenario : Windows Server Operating Systems (2008 R2, 2012, 2012 R2, 2016)

Issue : Managing the Windows Updates for multiple servers is a complex task. This can be simplified using PowerShell.

Michal Gajda from Microsoft forum has done a wonderful job by creating custom PowerShell Module for Managing windows updates thru PowerShell.

Link for the Module : https://goo.gl/qJHorX

Description : The PSWindowsUpdate module allow you to manage Windows Update on your computer. Module contain set of function to check, download and install or remove update from local machine. Especially useful on machines in core edition like Windows Server 2008 R2 or later.

Steps :

1. Download : Download the ZIP from above link ( https://goo.gl/qJHorX).
2. Module can be installed manually by downloading Zip file and extract in two places:
• %USERPROFILE%\Documents\WindowsPowerShell\Modules
• %WINDIR%\System32\WindowsPowerShell\v1.0\Modules

3. Importing the module
   PS > Import-Module PSWindowsUpdate

4. Enable RemoteExecution on Servers where you are going to Deploy Updates using following PowerShell Command
   Set-ExecutionPolicy RemoteSigned
   

5. Invoke following command to Initiate the Installation of Tool on Remote Computer and Install the Latest available updates.
   Invoke-WUInstall -ComputerName encxenlic.encnet.com -Script {ipmo PSWindowsUpdate; Get-WUInstall -AcceptAll -Force | Out-File -Append C:\PerfLogs\PSWindowsUpdate.log } -Confirm:$false –Verbose
   
   Above command will copy module files on Remote Computer.
   It will remotely install the PSWindowsUpdate module
   Execute Download and Update the Windows Update command
   It will NOT Restart the Windows Server
   It will save/append log file on the Path C:\PerfLogs\PSWindowsUpdate.log

6. You can check the Windows Update status after sometime.

7. Only Issue which I encountered is, it will not produce any log in the Event Log (System) and in Recently Installed updates.

Hope that it will save your valuable time.

Let me know if it helped you and if you have any query in comment.

Resolved | Windows Server 2008 R2 SP1 Update Fails

Issue: Windows Server 2008 R2 SP1 Installation fails

Environment: Windows Server 2008 R2 Operating System OS

Solution:

1) Open Windows Explorer and navigate to C:\Windows\Inf folder

2) Cut and Paste following files starting with name USB in another safe location:

3) Install the SP1 Update

4) After successful installation, place those files back.

Comment if this solution works for you.

Fixed | WSUS 2016 | Error Code 0x8024401c | Windows 10 | Windows Server 2016

Scenario :

Server : Windows WSUS Server 2016
Client : Windows 10, Windows Server 2016

Error Code :  0x8024401c on Windows 10 or Windows Server 2016


Solution :
1) Go to IIS Manager on WSUS Server


2) Goto Advance Settings of  WsusPool.


3) Make sure following settings are present/configured on the Pool, if not change it to below:
Queue Length: 25000
Limit Interval (minutes): 15
"Service Unavailable" Response: TcpLevel
Private Memory Limit (KB): 0

4) Make sure, the WSUS Entry in the Registry is having fully qualified domain name of WSUS Server.

5) Stop the IIS

6) Edit the web.config located at following location on WSUS Server :
C:\Program Files\Update Services\WebServices\ClientWebService\web.config

Replace
<httpRuntime maxRequestLength="4096" />
with
<httpRuntime maxRequestLength="204800" executionTimeout="7200"/>

7) Start the IIS

8) Retry updating clients.

Done!

Let me know if it has helped to you.

Source : https://community.spiceworks.com/topic/1970827-wsus-on-server-2016-windows-10-1607-client-0x8024401c-error