Get the update status of the Registered computer from WSUS. Only Security Patches are Approved in this WSUS.

Anusha D 1 Reputation point
2022-06-07T11:41:38.27+00:00

Hello,

Myself Anusha, I have a query on listing the computer status that is registered to WSUS.

We have a WSUS where we approve only Security Patches, and these patches flow down to the registered computers from WSUS.
How can we get the computer status (like whether it is up to date or not or even if it is in pending state for installation) using WSUS API.

The scope of the Patches that flow down to the registered computer is:

  1. Patch should be under security updates.
  2. That patch should be approved in WSUS.

Hope I can get some solution on this.

Thank you,
Anusha.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,705 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Limitless Technology 39,811 Reputation points
    2022-06-08T07:33:22.36+00:00

    Hi there,

    You can use the WSUS console to view and manage updates and can get the computer status. Viewing and Managing Updates https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/viewing-and-managing-updates

    If you are comfortable with Powershell then I would suggest looking into this article. Get Windows Update Status Information by Using PowerShell https://devblogs.microsoft.com/scripting/get-windows-update-status-information-by-using-powershell/

    ----------------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer–


  2. Rita Hu -MSFT 9,646 Reputation points
    2022-06-10T06:18:55.85+00:00

    @Anusha D
    Thanks for your posting on Q&A.

    I found a related blog and I want to share with you to confirm whether it is helpful.
    https://devblogs.microsoft.com/scripting/get-windows-update-status-information-by-using-powershell/

    $computerscope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope  
      
    $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope  
      
    $wsus.GetSummariesPerComputerTarget($updatescope,$computerscope) |  
      
        Format-Table @{L=’ComputerTarget’;E={($wsus.GetComputerTarget([guid]$_.ComputerTargetId)).FullDomainName}},  
      
            @{L=’NeededCount’;E={($_.DownloadedCount + $_.NotInstalledCount)}},DownloadedCount,NotApplicableCount,NotInstalledCount,InstalledCount,FailedCount  
    

    Reference screenshot in my lab:
    210047-17.png

    Best regards,
    Rita


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.