{"id":54233,"date":"2009-03-09T21:20:00","date_gmt":"2009-03-09T21:20:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2009\/03\/09\/hey-scripting-guy-how-can-i-list-all-updates-that-have-been-added-to-a-computer\/"},"modified":"2009-03-09T21:20:00","modified_gmt":"2009-03-09T21:20:00","slug":"hey-scripting-guy-how-can-i-list-all-updates-that-have-been-added-to-a-computer","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/hey-scripting-guy-how-can-i-list-all-updates-that-have-been-added-to-a-computer\/","title":{"rendered":"Hey, Scripting Guy! How Can I List All Updates That Have Been Added to a Computer?"},"content":{"rendered":"

\"Hey, <\/H2>\n

Hey, Scripting Guy! We have Windows Update configured on all our workstations at work. Automatically, the workstations check for new updates, and download and install the updates that are required. This happens without user intervention, or from intervention on the part of our small and overworked IT department. Here is the problem. The pointy-headed boss<\/A> (PHB) came floating into our office late Friday afternoon and asked “How do you know all the workstations are up to date?” I said, because we have Windows Update configured on all the workstations<\/A>.” He said, “Can you display a list of all the updates that have ever been applied to that computer?” I said, “D\u2019oh!” So, Scripting Guy, can you hook me up with a script to list all the updates that have been added to a computer?

– JU<\/P>\"Spacer\"\"Hey, \n

Hi JU,<\/P>\n

I just hate not having an answer when the PHB comes floating by. Usually, I just make something up, because I figure he will not really know the difference anyway. Luckily, Windows Update has an API we can use to obtain information regarding updates that have been applied to the system.<\/P>\n\n<\/THEAD>\n\n\n
\n

This week we will be looking at using the Windows Update API to work with Windows Update. The Windows Update API is documented on MSDN<\/A>. There is also a good collection of VBScripts that use the Windows Update API in the Script Center Script Repository<\/A>. For information about manually configuring Windows Update on workstations, refer to this page<\/A>. These scripts use Windows PowerShell. The Windows PowerShell getting started page<\/A> has basic information for learning about Windows PowerShell and about downloading Windows PowerShell.<\/P><\/TD><\/TR><\/TBODY><\/TABLE>\n

<\/DIV>\n

The script we wrote is called Get-MicrosoftUpdates.ps1<\/B> and it is seen here (you can also see a VBScript version of today’s script<\/A>):.<\/P>

Function Get-MicrosoftUpdates\n{ \n  Param(\n        $NumberOfUpdates,\n        [switch]$all\n       )\n  $Session = New-Object -ComObject Microsoft.Update.Session\n  $Searcher = $Session.CreateUpdateSearcher()\n  if($all)\n    {\n      $HistoryCount = $Searcher.GetTotalHistoryCount()\n      $Searcher.QueryHistory(1,$HistoryCount)\n    }\n  Else { $Searcher.QueryHistory(1,$NumberOfUpdates) }\n} #end Get-MicrosoftUpdates<\/p>\n
Get-MicrosoftUpdates\n<\/PRE>\n
The first thing we do in the script is create a function named Get-MicrosoftUpdates<\/B>. To create a function in Windows PowerShell, we use the Function<\/B> keyword, assign a name, and open and close the script block by using two curly brackets. The basic pattern is seen here:<\/P>
Function FunctionName\n{\n# Function code goes here\n} #end of the function\n<\/PRE>\n
Here is the portion of our script that creates the function and assigns a name to it:<\/P>
Function Get-MicrosoftUpdates\n{\n<\/PRE>\n
Now we create two command parameters. To do this, we use the Param<\/B> keyword. The pattern we use to include parameters in a function is the same pattern as the one we use for a script. We use the Param<\/B> keyword, open a set of parentheses, separate each parameter with a comma, and then close the set of parentheses. This pattern is seen here:<\/P>
Param(Parametername, additionalParameterName)\n<\/PRE>\n
In this script we use two parameters. The first parameter is called \u2013NumberOfUpdates<\/B>. The value supplied to this parameter when calling the function will be stored in the $NumberOfUpdates<\/B> variable. The second parameter is a switched parameter named \u2013all<\/B>. A switched parameter does not receive a value when it is used\u2014rather, it only has effect when it is present. When the \u2013all<\/B> parameter is not present, the script does not return all the updates. The parameter section of the Get-MicrosoftUpdates<\/B> function is seen here:<\/P>
Param(\n        $NumberOfUpdates,\n        [switch]$all\n       )\n<\/PRE>\n
It is time to create an instance of the Microsoft Update Session<\/B> object (technically known as the IUpdateSession interface<\/A>). The Microsoft Update Session<\/B> object is a COM object, and can be created by using the New-Object<\/B> cmdlet with the \u2013ComObject<\/B> parameter. It is not necessary to place quotation marks around the program ID Microsoft.Update.Session<\/B> when using the New-Object<\/B> cmdlet. We store the returned object in the $session<\/B> variable, as seen here:<\/P>
$Session = New-Object -ComObject Microsoft.Update.Session<\/PRE>\n
The Session<\/B> object has a number of methods and properties available, which are listed in Table 1<\/B>.<\/P>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Table 1 Members of the Microsoft Update Session object <\/TD><\/TR>\n
Name<\/TD>\nType<\/TD>\nDefinition<\/TD><\/TR><\/THEAD>\n
\n
CreateUpdateDownloader<\/P><\/TD>\n
\n
Method<\/P><\/TD>\n
\n
IUpdateDownloader CreateUpdateDownload<\/P><\/TD><\/TR>\n
\n
CreateUpdateInstaller<\/P><\/TD>\n
\n
Method<\/P><\/TD>\n
\n
IUpdateInstaller CreateUpdateInstaller ()<\/P><\/TD><\/TR>\n
\n
CreateUpdateSearcher<\/P><\/TD>\n
\n
Method<\/P><\/TD>\n
\n
IUpdateSearcher CreateUpdateSearcher ()<\/P><\/TD><\/TR>\n
\n
CreateUpdateServiceManager<\/P><\/TD>\n
\n
Method<\/P><\/TD>\n
\n
IUpdateServiceManager2 CreateUpdateSer<\/P><\/TD><\/TR>\n
\n
QueryHistory<\/P><\/TD>\n
\n
Method<\/P><\/TD>\n
\n
IUpdateHistoryEntryCollection QueryHis<\/P><\/TD><\/TR>\n
\n
ClientApplicationID<\/P><\/TD>\n
\n
Property<\/P><\/TD>\n
\n
string ClientApplicationID () {get} {s<\/P><\/TD><\/TR>\n
\n
ReadOnly<\/P><\/TD>\n
\n
Property<\/P><\/TD>\n
\n
bool ReadOnly () {get}<\/P><\/TD><\/TR>\n
\n
UserLocale<\/P><\/TD>\n
\n
Property<\/P><\/TD>\n
\n
uint UserLocale () {get} {set}<\/P><\/TD><\/TR>\n
\n
WebProxy<\/P><\/TD>\n
\n
Property<\/P><\/TD>\n
\n
IWebProxy WebProxy () {get} {set}<\/P><\/TD><\/TR><\/TBODY><\/TABLE>\n
<\/DIV>\n
Now we need to create an U<\/B>pdate<\/B>S<\/B>earcher<\/B> object. To create an U<\/B>pdate <\/B>S<\/B>earcher<\/B> object, we use the CreateUpdateSearcher<\/B> method from the S<\/B>ession<\/B> object. We store the Searcher<\/B> object in the variable $Searcher<\/B> as seen here:<\/P>
$Searcher = $Session.CreateUpdateSearcher()<\/PRE>\n
Then we need to determine if the function was called with the \u2013all<\/B> switch or not. If the function was called with the \u2013all<\/B> switch, the $all <\/B>variable will be present. If it was not used, the $all<\/B> variable will not exist. We use the if<\/B> statement to determine if the $all<\/B> variable is present. An example of using the if<\/B> statement to test for the presence of a variable is seen here:<\/P>
PS C:\\> $all = $true\nPS C:\\> if($all) {‘$all was found’}\n$all was found\n<\/PRE>\n
If we want to see if the $all<\/B> variable is not present, we can use the not (!) <\/B>operator as shown here:<\/P>
PS C:\\> $all = $false\nPS C:\\> if(!$all) {‘$all was not found’}\n$all was not found\n<\/PRE>\n
In our script, we use the if<\/B> statement and look for the $all<\/B> variable. If we find it, we use the GetTotalHistoryCount<\/B> property from the Searcher<\/B> object to retrieve the total number of updates that have been applied to the system. We need this information because the QueryHistory<\/B> method of the Searcher<\/B> object needs a starting point and an ending point. If we want to get all the updates, we start at one and go until we have reached the total number of updates applied to the system. This is seen here:<\/P>
if($all)\n    {\n      $HistoryCount = $Searcher.GetTotalHistoryCount()\n      $Searcher.QueryHistory(1,$HistoryCount)\n    }\n<\/PRE>\n
If the script was not run with the \u2013all<\/B> switched parameter, we will be retrieving a specific number of updates from the system. The total number of updates to be retrieved is passed to the function via the \u2013NumberOfUpdates<\/B> parameter and will be stored in the $NumberOfUpdates<\/B> variable. This section of the script is seen here:<\/P>
Else { $Searcher.QueryHistory(1,$NumberOfUpdates) }\n} #end Get-MicrosoftUpdates\n<\/PRE>\n
To retrieve all the update information, you call the Get-MicrosoftUpdates<\/B> function with the \u2013all<\/B> parameter:<\/P>
Get-MicrosoftUpdates \u2013all<\/PRE>\n
When we call the function with the \u2013all<\/B> parameter, we are treated with an output similar to the one seen here:<\/P>\"Image \n
 <\/P>\n
If we call the function with the \u2013NumberOfUpdates<\/B> parameter set to 1, we retrieve the most recent update that was applied to the system. The syntax for this is seen here:<\/P>
Get-MicrosoftUpdates \u2013NumberOfUpdates 1<\/PRE>\n
When we do this, we are treated with the output seen here:<\/P>\"Image \n
 <\/P>\n
If we decide we would like to have a text file that contains all of the update information, we only need to use the redirection arrows as shown here when we call the function:<\/P>
Get-MicrosoftUpdates -all >> c:\\fso\\updates.txt ; notepad c:\\fso\\updates.txt<\/PRE>\n
Well, JU, that is all there is to querying the update history for Windows Update. If you were to compare the VBScript version and the Windows PowerShell version, you would notice we receive a nice bonus when using Windows PowerShell in that we do not need to use a wscript.echo<\/B> kind of line for each of the properties in which we are interested. We used the extra lines of code to create a function and to allow the ability to choose how many updates to report. Hope you have a great day, and we will see you tomorrow as Windows Update Week continues. Until then, peace.<\/P>\n
 <\/P>\n
Ed Wilson and Craig Liebendorfer, Scripting Guys<\/B><\/P><\/p>\n","protected":false},"excerpt":{"rendered":"
Hey, Scripting Guy! We have Windows Update configured on all our workstations at work. Automatically, the workstations check for new updates, and download and install the updates that are required. This happens without user intervention, or from intervention on the part of our small and overworked IT department. Here is the problem. The pointy-headed boss […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[36,3,45,380],"class_list":["post-54233","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-client-side-management","tag-scripting-guy","tag-windows-powershell","tag-windows-update"],"acf":[],"blog_post_summary":"
Hey, Scripting Guy! We have Windows Update configured on all our workstations at work. Automatically, the workstations check for new updates, and download and install the updates that are required. This happens without user intervention, or from intervention on the part of our small and overworked IT department. Here is the problem. The pointy-headed boss […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/54233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=54233"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/54233\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=54233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=54233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=54233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}