Posts made by siringo

siringo

Eeek, i've lost control of my thread!

siringo

As i've mentioned, i'd not setup a wsus server before that i put into production. I had setup wsus servers before, but never had any joy with them so never released them to production and never used one.

I looked at wsus alternatives and I perceived that there was going to be just as much work installing, learning and maintaining the alternatives as there was going to be with wsus.

Then I thought, wsus will give me another MS skill and/or increase my MS knowledge base, it's also free, so went with that.

we have to remember it's the stuff that doesn't work all the time that keeps us in jobs, if everything just worked out of the box, you could Mary from accounts to put it all together and we'd be out of a job.

siringo

@scottalanmiller said in What Are You Doing Right Now:

@dashrender said in What Are You Doing Right Now:

@momurda said in What Are You Doing Right Now:

@scottalanmiller How so? Kake means cake, just in German. Honestly, not sure how none of you have had tastykake before.

Who said we haven't?

Because you kan't have your kake and eat it, too.

Reminds me of that old country song about a guy who couldn't decide between two pretty girls, "You can't have your Kate & Edith too".

siringo

Thinking of getting a tablet for support work, maybe run 1 VM, surfing, music, maybe a few videos.

I'd need 8GB, a headphone jack, USB3, touch.

Any suggestions?

siringo

home early. went for a walk at lunch time and got saturated, damn storms that come from no where.

siringo

@travisdh1 said in What Are You Doing Right Now:

Playing EVE and looking at how to hookup a short string of Neopixel LEDs to an Adafruit Huzzah ESP32 board.

Who's playing Adam?

I have no idea what any of that is that you mentioned, oh, I do know what an LED is.

siringo

sitting down after driving 1.75 hours to get parts to resurrect a 9 year old server that died last night.
server 0 - me 1.

siringo

@black3dynamite said in WSUS Help:

@siringo That was definitely difficult to followed from my iPhone.

hahaha. I bet.

siringo

Stumbled across this script, I'm no powershell expert, my limit is spelling it correctly. Anyone want to have a look at this?

From here:
https://www.powershellgallery.com/packages/PSWsusSpringClean/0.4.0/Content/PSWsusSpringClean.psm1

Function Invoke-WsusSpringClean {
<#
.SYNOPSIS
Performs additional WSUS server clean-up beyond the capabilities of the built-in tools.
.DESCRIPTION
Adds the ability to decline numerous additional commonly unneeded updates as well as discover potentially incorrectly declined updates.
.PARAMETER RunDefaultTasks
Performs all clean-up tasks except for declining any unneeded updates as defined in the included update catalogue CSV file.

    You can disable one or more of the default clean-up tasks by setting the associated switch parameter to false (e.g. -CompressUpdates:$false). 

    You can perform a clean-up of unneeded updates by specifying the DeclineCategoriesInclude or DeclineCategoriesExclude parameter with your chosen categories. 

    Also note that this does not perform a server synchronisation before clean-up or find suspect declined updates. These tasks can be included via their respective parameters. 
    .PARAMETER SynchroniseServer 
    Perform a synchronisation against the upstream server before running cleanup. 
    .PARAMETER FindSuspectDeclines 
    Scan all declined updates for any that may have been inadvertently declined. 

    The returned suspect updates are those which: 
     - Are not superseded or expired 
     - Are not cluster or farm updates (if set to decline) 
     - Are not in the filtered list of updates to decline from the bundled catalogue 
    .PARAMETER DeclineClusterUpdates 
    Decline any updates which are exclusively for failover clustering installations. 
    .PARAMETER DeclineFarmUpdates 
    Decline any updates which are exclusively for farm deployment installations. 
    .PARAMETER DeclinePrereleaseUpdates 
    Decline any updates which are exclusively for pre-release products (e.g. betas). 
    .PARAMETER DeclineSecurityOnlyUpdates 
    Decline any Security Only updates. 
    .PARAMETER DeclineArchitectures 
    Array of update architectures to decline. 

    Valid options are: x64, ia64, arm64 

    We don't support declining x86 updates as there's no mechanism to determine which updates are x86 specific versus multi-architecture. 
    .PARAMETER DeclineCategoriesExclude 
    Array of update categories in the bundled updates catalogue to not decline. 
    .PARAMETER DeclineCategoriesInclude 
    Array of update categories in the bundled updates catalogue to decline. 
    .PARAMETER DeclineLanguagesExclude 
    Array of update language codes to not decline. 
    .PARAMETER DeclineLanguagesInclude 
    Array of update language codes to decline. 
    .PARAMETER CleanupObsoleteComputers 
    Specifies that the cmdlet deletes obsolete computers from the database. 
    .PARAMETER CleanupObsoleteUpdates 
    Specifies that the cmdlet deletes obsolete updates from the database. 
    .PARAMETER CleanupUnneededContentFiles 
    Specifies that the cmdlet deletes unneeded update files. 
    .PARAMETER CompressUpdates 
    Specifies that the cmdlet deletes obsolete revisions to updates from the database. 
    .PARAMETER DeclineExpiredUpdates 
    Specifies that the cmdlet declines expired updates. 
    .PARAMETER DeclineSupersededUpdates 
    Specifies that the cmdlet declines superseded updates. 
    .EXAMPLE 
    PS C:\>$SuspectDeclines = Invoke-WsusSpringClean -RunDefaultTasks -FindSuspectDeclines 

    Runs the default clean-up tasks & checks for declined updates that may not be intentional. 
    .EXAMPLE 
    PS C:\>Invoke-WsusSpringClean -DeclineCategoriesInclude @('Region - US', 'Superseded') 

    Declines all unneeded updates in the "Region - US" & "Superseded" categories. 
    .EXAMPLE 
    PS C:\>Invoke-WsusSpringClean -DeclineLanguagesExclude @('en-AU') 

    Declines all language specific updates excluding those for English (Australia). 
    .EXAMPLE 
    PS C:\>Invoke-WsusSpringClean -DeclineArchitectures @('arm64', 'ia64') 

    Declines all architecture specific updates for ARM64 & IA64 (Itanium) systems. 
    .NOTES 
    The script intentionally avoids usage of most WSUS cmdlets provided by the UpdateServices module as many are extremely slow. This is particularly true of the Get-WsusUpdate cmdlet. 

    The efficiency of the update declining logic could be substantially improved. That said, this script is not typically run frequently (~monthly), so this isn't a major priority. 
    .LINK 
    https://github.com/ralish/PSWsusSpringClean 
#>

[CmdletBinding(DefaultParameterSetName='Default',SupportsShouldProcess)]
Param(
    [Switch]$RunDefaultTasks,
    [Switch]$SynchroniseServer,
    [Switch]$FindSuspectDeclines,

    [Switch]$DeclineClusterUpdates,
    [Switch]$DeclineFarmUpdates,
    [Switch]$DeclinePrereleaseUpdates,
    [Switch]$DeclineSecurityOnlyUpdates,

    [String[]]$DeclineCategoriesExclude,
    [String[]]$DeclineCategoriesInclude,

    [ValidateScript({Test-WsusSpringCleanArchitectures -Architectures $_})]
    [String[]]$DeclineArchitectures,

    [ValidateScript({Test-WsusSpringCleanLanguageCodes -LanguageCodes $_})]
    [String[]]$DeclineLanguagesExclude,

    [ValidateScript({Test-WsusSpringCleanLanguageCodes -LanguageCodes $_})]
    [String[]]$DeclineLanguagesInclude,

    # Wrapping of Invoke-WsusServerCleanup
    [Switch]$CleanupObsoleteComputers,
    [Switch]$CleanupObsoleteUpdates,
    [Switch]$CleanupUnneededContentFiles,
    [Switch]$CompressUpdates,
    [Switch]$DeclineExpiredUpdates,
    [Switch]$DeclineSupersededUpdates
)

# Ensure that any errors we receive are considered fatal
$ErrorActionPreference = 'Stop'

if ($PSBoundParameters.ContainsKey('DeclineCategoriesExclude') -and $PSBoundParameters.ContainsKey('DeclineCategoriesInclude')) {
    throw 'Can only specify one of DeclineCategoriesExclude and DeclineCategoriesInclude.'
}

if ($PSBoundParameters.ContainsKey('DeclineLanguagesExclude') -and $PSBoundParameters.ContainsKey('DeclineLanguagesInclude')) {
    throw 'Can only specify one of DeclineLanguagesExclude and DeclineLanguagesInclude.'
}

if (!$script:WscMetadata) {
    Import-WsusSpringCleanMetadata
}

if ($RunDefaultTasks) {
    $DefaultTasks = @(
        'DeclineClusterUpdates',
        'DeclineFarmUpdates',
        'DeclinePrereleaseUpdates',
        'DeclineSecurityOnlyUpdates',

        'CleanupObsoleteComputers',
        'CleanupObsoleteUpdates',
        'CleanupUnneededContentFiles',
        'CompressUpdates',
        'DeclineExpiredUpdates',
        'DeclineSupersededUpdates'
    )

    foreach ($Task in $DefaultTasks) {
        if ($PSBoundParameters.ContainsKey($Task)) {
            Set-Variable -Name $Task -Value (Get-Variable -Name $Task).Value -WhatIf:$false
        } else {
            Set-Variable -Name $Task -Value $true -WhatIf:$false
        }
    }
}

# Regular expressions for declining certain types of updates
$script:RegExClusterUpdates = ' Failover Clustering '
$script:RegExFarmUpdates = ' Farm[- ]'
$script:RegExPrereleaseUpdates = ' (Beta|Preview|RC1|Release Candidate) '
$script:RegExSecurityOnlyUpdates = ' Security Only (Quality )?Update '

# Determine which categories of updates to decline (if any)
if ($PSBoundParameters.ContainsKey('DeclineCategoriesExclude') -or $PSBoundParameters.ContainsKey('DeclineCategoriesInclude')) {
    Import-WsusSpringCleanCatalogue
    $CatalogueCategories = $script:WscCatalogue.Category | Sort-Object | Get-Unique

    if ($PSBoundParameters.ContainsKey('DeclineCategoriesExclude')) {
        $DeclineCategories = $CatalogueCategories | Where-Object { $_ -notin $DeclineCategoriesExclude }
    } else {
        $DeclineCategories = $CatalogueCategories | Where-Object { $_ -in $DeclineCategoriesInclude }
    }
}

# Fetch the metadata for any architectures we're going to decline
if ($PSBoundParameters.ContainsKey('DeclineArchitectures')) {
    $DeclineArchitecturesMetadata = @()
    foreach ($Architecture in $DeclineArchitectures) {
        $DeclineArchitecturesMetadata += $script:WscMetadata.SelectSingleNode('//Architectures/Architecture[@name="{0}"]' -f $Architecture)
    }
}

# Fetch the metadata for any languages we're going to decline
if ($PSBoundParameters.ContainsKey('DeclineLanguagesExclude')) {
    $DeclineLanguagesMetadata = $script:WscMetadata.Languages.Language | Where-Object { $_.code -notin $DeclineLanguagesExclude }
} elseif ($PSBoundParameters.ContainsKey('DeclineLanguagesInclude')) {
    $DeclineLanguagesMetadata = $script:WscMetadata.Languages.Language | Where-Object { $_.code -in $DeclineLanguagesInclude }
}

if ($SynchroniseServer) {
    Write-Host -ForegroundColor Green "`r`nStarting WSUS server synchronisation ..."
    Invoke-WsusServerSynchronisation
}

Write-Host -ForegroundColor Green "`r`nBeginning WSUS server cleanup (Phase 1) ..."
$CleanupWrapperParams = @{
    CleanupObsoleteUpdates=$CleanupObsoleteUpdates
    CompressUpdates=$CompressUpdates
    DeclineExpiredUpdates=$DeclineExpiredUpdates
    DeclineSupersededUpdates=$DeclineSupersededUpdates
}
Invoke-WsusServerCleanupWrapper @CleanupWrapperParams

Write-Host -ForegroundColor Green "`r`nBeginning WSUS server cleanup (Phase 2) ..."
$SpringCleanParams = @{
    DeclineClusterUpdates=$DeclineClusterUpdates
    DeclineFarmUpdates=$DeclineFarmUpdates
    DeclinePrereleaseUpdates=$DeclinePrereleaseUpdates
    DeclineSecurityOnlyUpdates=$DeclineSecurityOnlyUpdates
}

if ($DeclineCategories) {
    $SpringCleanParams += @{DeclineCategories=$DeclineCategories}
}

if ($DeclineArchitecturesMetadata) {
    $SpringCleanParams += @{DeclineArchitectures=$DeclineArchitecturesMetadata}
}

if ($DeclineLanguagesMetadata) {
    $SpringCleanParams += @{DeclineLanguages=$DeclineLanguagesMetadata}
}

Invoke-WsusServerSpringClean @SpringCleanParams

Write-Host -ForegroundColor Green "`r`nBeginning WSUS server cleanup (Phase 3) ..."
$CleanupWrapperParams = @{
    CleanupObsoleteComputers=$CleanupObsoleteComputers
    CleanupUnneededContentFiles=$CleanupUnneededContentFiles
}
Invoke-WsusServerCleanupWrapper @CleanupWrapperParams

if ($FindSuspectDeclines) {
    Get-WsusSuspectDeclines @SpringCleanParams
}

}

Function Get-WsusSuspectDeclines {
[CmdletBinding()]
Param(
[Switch]$DeclineClusterUpdates,
[Switch]$DeclineFarmUpdates,
[Switch]$DeclinePrereleaseUpdates,
[Switch]$DeclineSecurityOnlyUpdates,

    [String[]]$DeclineCategories,
    [Xml.XmlElement[]]$DeclineArchitectures,
    [Xml.XmlElement[]]$DeclineLanguages
)

$WsusServer = Get-WsusServer
$UpdateScope = New-Object -TypeName Microsoft.UpdateServices.Administration.UpdateScope

Write-Host -ForegroundColor Green '[*] Retrieving declined updates ...'
$UpdateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::Declined
$WsusDeclined = $WsusServer.GetUpdates($UpdateScope)

# Ignore all updates corresponding to architectures, categories or languages we declined
$IgnoredCatalogueCategories = $script:WscCatalogue | Where-Object { $_.Category -in $DeclineCategories }
$IgnoredArchitecturesRegEx = ' ({0})' -f [String]::Join('|', $DeclineArchitectures.regex)
$IgnoredLanguagesRegEx = ' [\[]?({0})(_LP|_LIP)?[\]]?' -f [String]::Join('|', $DeclineLanguages.code)

Write-Host -ForegroundColor Green '[*] Finding suspect declined updates ...'
$SuspectDeclines = @()
foreach ($Update in $WsusDeclined) {
    # Ignore superseded and expired updates
    if ($Update.IsSuperseded -or $Update.PublicationState -eq 'Expired') {
        continue
    }

    # Ignore cluster updates if they were declined
    if ($DeclineClusterUpdates -and $Update.Title -match $RegExClusterUpdates) {
        continue
    }

    # Ignore farm updates if they were declined
    if ($DeclineFarmUpdates -and $Update.Title -match $RegExFarmUpdates) {
        continue
    }

    # Ignore pre-release updates if they were declined
    if ($DeclinePrereleaseUpdates -and $Update.Title -match $RegExPrereleaseUpdates) {
        continue
    }

    # Ignore Security Only Quality updates if they were declined
    if ($DeclineSecurityOnlyUpdates -and $Update.Title -match $RegExSecurityOnlyUpdates) {
        continue
    }

    # Ignore any update categories which were declined
    if ($Update.Title -in $IgnoredCatalogueCategories.Title) {
        continue
    }

    # Ignore any update architectures which were declined
    if ($Update.Title -match $IgnoredArchitecturesRegEx) {
        continue
    }

    # Ignore any update languages which were declined
    if ($Update.Title -match $IgnoredLanguagesRegEx) {
        continue
    }

    $SuspectDeclines += $Update
}

return $SuspectDeclines

}

Function Import-WsusSpringCleanMetadata {
[CmdletBinding()]
Param()

Write-Verbose -Message '[*] Importing module metadata ...'
$MetadataPath = Join-Path -Path $PSScriptRoot -ChildPath 'PSWsusSpringClean.xml'
$script:WscMetadata = ([Xml](Get-Content -Path $MetadataPath)).PSWsusSpringClean

}

Function Invoke-WsusDeclineUpdatesByCatalogue {
[CmdletBinding(SupportsShouldProcess)]
Param(
[Parameter(Mandatory)]
[Microsoft.UpdateServices.Internal.BaseApi.Update[]]$Updates,

    [Parameter(Mandatory)]
    [ValidateNotNullOrEmpty()]
    [String]$Category
)

Write-Host -ForegroundColor Green ('[*] Declining updates in category: {0}' -f $Category)
$UpdatesToDecline = $script:WscCatalogue | Where-Object { $_.Category -eq $Category }
$MatchingUpdates = $Updates | Where-Object { $_.Title -in $UpdatesToDecline.Title }

foreach ($Update in $MatchingUpdates) {
    if ($PSCmdlet.ShouldProcess($Update.Title, 'Decline')) {
        Write-Host -ForegroundColor Cyan ('[-] Declining update: {0}' -f $Update.Title)
        $Update.Decline()
    }
}

}

Function Invoke-WsusDeclineUpdatesByRegEx {
[CmdletBinding(SupportsShouldProcess)]
Param(
[Parameter(Mandatory)]
[Microsoft.UpdateServices.Internal.BaseApi.Update[]]$Updates,

    [Parameter(Mandatory)]
    [ValidateNotNullOrEmpty()]
    [String]$RegEx
)

foreach ($Update in $Updates) {
    if ($Update.Title -match $RegEx) {
        if ($PSCmdlet.ShouldProcess($Update.Title, 'Decline')) {
            Write-Host -ForegroundColor Cyan ('[-] Declining update: {0}' -f $Update.Title)
            $Update.Decline()
        }
    }
}

}

Function Invoke-WsusServerCleanupWrapper {
[CmdletBinding(SupportsShouldProcess)]
Param(
[Switch]$CleanupObsoleteComputers,
[Switch]$CleanupObsoleteUpdates,
[Switch]$CleanupUnneededContentFiles,
[Switch]$CompressUpdates,
[Switch]$DeclineExpiredUpdates,
[Switch]$DeclineSupersededUpdates
)

if ($CleanupObsoleteComputers) {
    Write-Host -ForegroundColor Green '[*] Deleting obsolete computers ...'
    Write-Host (Invoke-WsusServerCleanup -CleanupObsoleteComputers)
}

if ($CleanupObsoleteUpdates) {
    Write-Host -ForegroundColor Green '[*] Deleting obsolete updates ...'
    Write-Host (Invoke-WsusServerCleanup -CleanupObsoleteUpdates)
}

if ($CleanupUnneededContentFiles) {
    Write-Host -ForegroundColor Green '[*] Deleting unneeded update files ...'
    Write-Host (Invoke-WsusServerCleanup -CleanupUnneededContentFiles)
}

if ($CompressUpdates) {
    Write-Host -ForegroundColor Green '[*] Deleting obsolete update revisions ...'
    Write-Host (Invoke-WsusServerCleanup -CompressUpdates)
}

if ($DeclineExpiredUpdates) {
    Write-Host -ForegroundColor Green '[*] Declining expired updates ...'
    Write-Host (Invoke-WsusServerCleanup -DeclineExpiredUpdates)
}

if ($DeclineSupersededUpdates) {
    Write-Host -ForegroundColor Green '[*] Declining superseded updates ...'
    Write-Host (Invoke-WsusServerCleanup -DeclineSupersededUpdates)
}

}

Function Invoke-WsusServerSynchronisation {
[CmdletBinding(SupportsShouldProcess)]
Param()

$WsusServer = Get-WsusServer

if ($PSCmdlet.ShouldProcess($env:COMPUTERNAME, 'WSUS synchronization')) {
    $SyncStatus = $WsusServer.GetSubscription().GetSynchronizationStatus()
    if ($SyncStatus -eq 'NotProcessing') {
        $WsusServer.GetSubscription().StartSynchronization()
    } elseif ($SyncStatus -eq 'Running') {
        Write-Warning -Message "[!] A synchronisation appears to already be running! We'll wait for this one to complete ..."
    } else {
        throw ('WSUS server returned unknown synchronisation status: {0}' -f $SyncStatus)
    }

    do {
        Start-Sleep -Seconds 5
    } while ($WsusServer.GetSubscription().GetSynchronizationStatus() -eq 'Running')

    $SyncResult = $WsusServer.GetSubscription().GetLastSynchronizationInfo().Result
    if ($SyncResult -ne 'Succeeded') {
        throw ('WSUS server synchronisation completed with unexpected result: {0}' -f $SyncResult)
    }
}

}

Function Invoke-WsusServerSpringClean {
[CmdletBinding(SupportsShouldProcess)]
Param(
[Switch]$DeclineClusterUpdates,
[Switch]$DeclineFarmUpdates,
[Switch]$DeclinePrereleaseUpdates,
[Switch]$DeclineSecurityOnlyUpdates,

    [String[]]$DeclineCategories,
    [Xml.XmlElement[]]$DeclineArchitectures,
    [Xml.XmlElement[]]$DeclineLanguages
)

$WsusServer = Get-WsusServer
$UpdateScope = New-Object -TypeName Microsoft.UpdateServices.Administration.UpdateScope

Write-Host -ForegroundColor Green '[*] Retrieving approved updates ...'
$UpdateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::LatestRevisionApproved
$WsusApproved = $WsusServer.GetUpdates($UpdateScope)

Write-Host -ForegroundColor Green '[*] Retrieving unapproved updates ...'
$UpdateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::NotApproved
$WsusUnapproved = $WsusServer.GetUpdates($UpdateScope)

$WsusAnyExceptDeclined = $WsusApproved + $WsusUnapproved

if ($DeclineClusterUpdates) {
    Write-Host -ForegroundColor Green '[*] Declining cluster updates ...'
    Invoke-WsusDeclineUpdatesByRegEx -Updates $WsusAnyExceptDeclined -RegEx $script:RegExClusterUpdates
}

if ($DeclineFarmUpdates) {
    Write-Host -ForegroundColor Green '[*] Declining farm updates ...'
    Invoke-WsusDeclineUpdatesByRegEx -Updates $WsusAnyExceptDeclined -RegEx $script:RegExFarmUpdates
}

if ($DeclinePrereleaseUpdates) {
    Write-Host -ForegroundColor Green '[*] Declining pre-release updates ...'
    Invoke-WsusDeclineUpdatesByRegEx -Updates $WsusAnyExceptDeclined -RegEx $script:RegExPrereleaseUpdates
}

if ($DeclineSecurityOnlyUpdates) {
    Write-Host -ForegroundColor Green '[*] Declining Security Only updates ...'
    Invoke-WsusDeclineUpdatesByRegEx -Updates $WsusAnyExceptDeclined -RegEx $script:RegExSecurityOnlyUpdates
}

if ($PSBoundParameters.ContainsKey('DeclineCategories')) {
    foreach ($Category in $DeclineCategories) {
        Invoke-WsusDeclineUpdatesByCatalogue -Updates $WsusAnyExceptDeclined -Category $Category
    }
}

if ($PSBoundParameters.ContainsKey('DeclineArchitectures')) {
    foreach ($Architecture in $DeclineArchitectures) {
        Write-Host -ForegroundColor Green ('[*] Declining updates with architecture: {0}' -f $Architecture.name)
        $ArchitectureRegEx = ' ({0})' -f $Architecture.regex
        Invoke-WsusDeclineUpdatesByRegEx -Updates $WsusAnyExceptDeclined -RegEx $ArchitectureRegEx
    }
}

if ($PSBoundParameters.ContainsKey('DeclineLanguages')) {
    foreach ($Language in $DeclineLanguages) {
        Write-Host -ForegroundColor Green ('[*] Declining updates with language: {0}' -f $Language.code)
        $LanguageRegEx = ' [\[]?{0}(_LP|_LIP)?[\]]?' -f $Language.code
        Invoke-WsusDeclineUpdatesByRegEx -Updates $WsusAnyExceptDeclined -RegEx $LanguageRegEx
    }
}

}

Function Test-WsusSpringCleanArchitectures {
Param(
[Parameter(Mandatory)]
[String[]]$Architectures
)

if (!$script:WscMetadata) {
    Import-WsusSpringCleanMetadata
}

$KnownArchitectures = $script:WscMetadata.Architectures.Architecture.name
foreach ($Architecture in $Architectures) {
    if ($Architecture -notin $KnownArchitectures) {
        throw 'Unknown architecture specified: {0}' -f $Architecture
    }
}

return $true

}

Function Test-WsusSpringCleanLanguageCodes {
Param(
[Parameter(Mandatory)]
[String[]]$LanguageCodes
)

if (!$script:WscMetadata) {
    Import-WsusSpringCleanMetadata
}

$KnownLanguageCodes = $script:WscMetadata.Languages.Language.code
foreach ($LanguageCode in $LanguageCodes) {
    if ($LanguageCode -notin $KnownLanguageCodes) {
        throw 'Unknown language code specified: {0}' -f $LanguageCode
    }
}

return $true

}

Function ConvertTo-WsusSpringCleanCatalogue {
Param(
[Parameter(Mandatory,ValueFromPipeline)]
[Microsoft.UpdateServices.Internal.BaseApi.Update[]]$Updates
)

Process {
    foreach ($Update in $Updates) {
        [String[]]$ProductTitles = @()
        foreach ($ProductTitle in $Update.ProductTitles) {
            $ProductTitles += $ProductTitle
        }

        [PSCustomObject]@{
            'Category'      = 'Unknown'
            'Title'         = $Update.Title
            'ProductTitles' = [String]::Join(', ', $ProductTitles)
        }
    }
}

}

Function Import-WsusSpringCleanCatalogue {
[CmdletBinding()]
Param(
[ValidateNotNullOrEmpty()]
[String]$CataloguePath
)

if (!$CataloguePath) {
    $CataloguePath = Join-Path -Path $PSScriptRoot -ChildPath 'PSWsusSpringClean.csv'
}

Write-Verbose -Message '[*] Importing update catalogue ...'
$script:WscCatalogue = Import-Csv -Path $CataloguePath

}

Function Test-WsusSpringCleanCatalogue {
[CmdletBinding()]
Param(
[ValidateNotNullOrEmpty()]
[String]$CataloguePath
)

Import-WsusSpringCleanCatalogue @PSBoundParameters

Write-Host -ForegroundColor Green '[*] Retrieving all updates ...'
$WsusServer = Get-WsusServer
$WsusUpdateScope = New-Object -TypeName Microsoft.UpdateServices.Administration.UpdateScope
$WsusUpdateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::Any
$WsusUpdates = $WsusServer.GetUpdates($WsusUpdateScope)

Write-Host -ForegroundColor Green '[*] Scanning for updates only present in catalogue ...'
$CatalogueOnly = @()
foreach ($Update in $script:WscCatalogue) {
    if ($Update.Title -notin $WsusUpdates.Title) {
        $CatalogueOnly += $Update
    }
}

return $CatalogueOnly

}

Looks like it pasted in stupidly, sorry.

siringo

@obsolesce said in WSUS Help:

I'd rather just move away from Windows, mainly because of their update issues.

Yep. Read just this morning that MS are working on some type of AI to work out if you're using your PC or not. Have you gone to get coffee or gone for a walk and if the AI thinks you're away for long enough it'll install updates & reboot your PC.

Why not just do as they always had in the past and ask the user, do you want to install this now Y/N? & leave it up to the user.

I know it's about patching because patching is a good thing and plug holes, increase security etc etc, but ....

siringo

sitting at the squeekiest desk in the staff room as there's something dead under the floor in the office.

siringo

@pmoncho said in WSUS Help:

@siringo said in WSUS Help:

Finally setup wsus on a 2016 server. All went well except I told it I wanted updates for Windows 7, which I've decided I don't want.

I told it I want updates for Windows 10 and it's downloading updates for all flavours of Windows 10, we only run Pro. So far it's filled up the 200GBs I set aside for it only 3 days ago.

I can uninstall wsus and start again, that's not a problem, is that the quickest and easiest way to get some of my 200GBs back and start over?

And, how can I tell it I only want updates for W10 Pro?

And, if anyone has a link to a 'I don't want to think too much' guide for setting up wsus, I'd be keen to take a look.

Thanks for any help.

You may want to check out for Clean-WSUS. Excellent script to help clean up WSUS.

Yep, I've looked at that. I may even subscribe to get the script as it's not a big $$$ outlay. I was prepared to pay $$$ for a WSUS alternative, but decided against it, so the small amount of $$$ for that script per annum is peanuts compared to what I was considering paying.

With W10 getting updates like we've never seen before for other versions of the OS, I reckon it's a good time to get WSUS sorted out and included in my knowledge base.

siringo

@jmoore said in What Are You Doing Right Now:

This was on my way home a few min ago

Yep, that can happen.

siringo

Thanks guys that's a great help, much appreciated.

I'm installing my WSUS servers in preparation for when we move to W10. I can get office PCs setup OK, but people will wander in with different versions of W10 on laptops etc, so I'm setting up the WSUS servers to be able to offer updates for most builds.

Thanks again.

siringo

@obsolesce said in WSUS Help:

@siringo said in WSUS Help:

Do you guys download all the Flash Player updates in your WSUS's?

Flash player is incredibly important to keep updated.

OK, so that's a yes, thanks.

I went through my updates manually and removed alot of garbage, got it down from 200GBs to 97GBs.

I only want updates for W10 Pro x64 and 2016, does around 100GBs sound right for those 2 OSs or am I asking a pretty open ended question?

siringo

Do you guys download all the Flash Player updates in your WSUS's?

siringo

What am I doing right now?

siringo

getting into some acid techno while whitelisting sites on the network's firewall.

siringo

@dbeato said in What Are You Doing Right Now:

@scottalanmiller said in What Are You Doing Right Now:

Nearly four years of growth trend on ML.

Steady growth:)

It is isn't it, fairly linear.

siringo

I've SCWD which isn't as hard.

Oh, snap chatted while driving. Down here they tell us it's illegal to text and drive, they don't say anything about snap chatting.