Windows Security Patch - apply via Powershell or alternate

Razzi29 226 Reputation points

Hello, I hope someone here can provide me with guidance... I have 4 Windows Servers that are configured with SQL Always On and we want to be able to have full control of their monthly patching; right now we are doing them manually just cause they are sensitive and cannot be rebooted easily nor just apply any patch. Is there a way I can at minimum automate via Powershell script to download security patches and apply them , but not to reboot the server. We have other servers that are getting patch via automation Qualys and those are good; is just these 4 we want to be very careful.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
10,546 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,084 questions
Microsoft Configuration Manager Updates
Microsoft Configuration Manager Updates
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Updates: Broadly released fixes addressing specific issue(s) or related bug(s). Updates may also include new or modified features (i.e. changing default behavior).
810 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Simon Ren-MSFT 22,581 Reputation points Microsoft Vendor


    Thank you for posting in Microsoft Q&A forum.

    You can refer to below blog to automate security patches via Powershell script and use –IgnoreReboot parameter to disable reboot. After the installation process is complete, you will see the following message in the PowerShell console: ‘Reboot is required but do it manually’. Thus, you are still required to restart the system, but you can do it at the time which best suits your schedule.

    How to Automate Windows Updates Using PowerShell: Short Overview

    Note: This is non-Microsoft link, just for your reference. Always test scripts in a controlled environment before applying them to production servers.

    Thanks for your time. Have a nice day!

    Best regards,


    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments