Add-CauClusterRole

Add-CauClusterRole

Adds the Cluster-Aware Updating (CAU) clustered role that provides the self-updating functionality to the specified cluster.

Syntax

Parameter Set: MonthlyDayOfWeek
Add-CauClusterRole [[-ClusterName] <String> ] [[-Credential] <PSCredential> ] [-CauPluginArguments <Hashtable[]> ] [-CauPluginName <String[]> ] [-ConfigurationName <String> ] [-DaysOfWeek <Weekdays> ] [-EnableFirewallRules] [-Force] [-GroupName <String> ] [-MaxFailedNodes <Int32> ] [-MaxRetriesPerNode <Int32> ] [-NodeOrder <String[]> ] [-PostUpdateScript <String> ] [-PreUpdateScript <String> ] [-RebootTimeoutMinutes <Int32> ] [-RequireAllNodesOnline] [-RunPluginsSerially] [-SeparateReboots] [-StartDate <DateTime> ] [-StopAfter <TimeSpan> ] [-StopOnPluginFailure] [-VirtualComputerObjectName <String> ] [-WarnAfter <TimeSpan> ] [-WeeksOfMonth <Int32[]> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: Weekly
Add-CauClusterRole [[-ClusterName] <String> ] [[-Credential] <PSCredential> ] [-CauPluginArguments <Hashtable[]> ] [-CauPluginName <String[]> ] [-ConfigurationName <String> ] [-DaysOfWeek <Weekdays> ] [-EnableFirewallRules] [-Force] [-GroupName <String> ] [-IntervalWeeks <Int32> ] [-MaxFailedNodes <Int32> ] [-MaxRetriesPerNode <Int32> ] [-NodeOrder <String[]> ] [-PostUpdateScript <String> ] [-PreUpdateScript <String> ] [-RebootTimeoutMinutes <Int32> ] [-RequireAllNodesOnline] [-RunPluginsSerially] [-SeparateReboots] [-StartDate <DateTime> ] [-StopAfter <TimeSpan> ] [-StopOnPluginFailure] [-VirtualComputerObjectName <String> ] [-WarnAfter <TimeSpan> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Detailed Description

The Add-CauClusterRole cmdlet adds the Cluster-Aware Updating (CAU) clustered role that provides the self-updating functionality to the specified cluster. When the CAU clustered role has been added to a cluster, the failover cluster can update itself on the schedule that is specified by the user, without requiring an external computer to coordinate the cluster updating process.

Note: To run this cmdlet, Windows PowerShell® remoting must be enabled on each node. To do this, run the Enable-PSRemoting cmdlet. In addition, ensure that the Windows Remote Management - Compatibility Mode (HTTP-In) firewall exception is enabled on each node.

Parameters

-CauPluginArguments<Hashtable[]>

Passes a set of name=value pairs (arguments) for each updating plug-in to use. For example, to specify a Domain argument for one plug-in:
- @{Domain=Domain.local}
You can specify multiple pairs in a set separated with semicolons. For example:
- @{name1=value1;name2=value2;name3=value3}
These name=value pairs must be meaningful to the CauPluginName that you specify.
If you specify arguments for more than one plug-in, provide the sets of name=value pairs in the order that you pass values in CauPluginName, separated by commas. For example:
- @{name1=value1;name2=value2;name3=value3},@{name4=value4;name5=value5}

For the default Microsoft.WindowsUpdatePlugin plug-in, no arguments are needed. The following arguments are optional:
- 'IncludeRecommendedUpdates'='<Value>': Boolean value to indicate that recommended updates will be applied in addition to important updates on each node. If not specified, the default value is 'False'.
- A standard Windows Update Agent query string that specifies criteria used by the Windows Update Agent to filter the updates that will be applied to each node. For a name, use QueryString and for a value, enclose the full query in quotation marks.
If not specified, then the Microsoft.WindowsUpdatePlugin plug-in by default uses the following argument:
- QueryString="IsInstalled=0 and Type='Software' and IsHidden=0 and IsAssigned=1" and IsAssigned=1
For more information about query strings for the default Microsoft.WindowsUpdatePlugin plug-in and the criteria such as IsInstalled that can be included in the query strings, see the topic about search criteria in the Windows Update Agent (WUA) API Reference.

For the Microsoft.HotfixPlugin plug-in. the following argument is required:
- HotfixRootFolderPath=<Path>: The UNC path to a hotfix root folder in an SMB share with a structure that contains the updates to apply and that contains the hotfix configuration file

The following arguments are optional for the Microsoft.HotfixPlugin plug-in:
- RequireSmbEncryption=<Value>: Boolean value to indicate that SMB Encryption will be enforced for accessing data from the SMB share. If not specified, the default value is 'False'. To ensure the integrity of the data accessed from the SMB share, the plug-in requires that the share is enabled for either SMB signing or SMB Encryption.
- DisableAclChecks=<Value>: Boolean value to indicate that the plug-in will check for sufficient permissions on the hotfix root folder and the hotfix configuration file. If not specified, the default value is 'False'.
- HotfixInstallerTimeoutMinutes=<Integer>: The length of time in minutes that the plug-in allows the hotfix installer process to return. If not specified, the default value is 30 minutes.
- HotfixConfigFileName=<name>: Name for the hotfix configuration file. If not specified, the default name DefaultHotfixConfigFile.xml is used.
For more information about required and optional arguments for the Microsoft.HotfixPlugin plug-in, see the content about Cluster-Aware Updating plug-ins.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-CauPluginName<String[]>

Specifies one or more plug-ins to use when performing scans or updates. You can specify multiple values separated with commas. The default is the Microsoft.WindowsUpdatePlugin plug-in. This plug-in coordinates the Windows Update Agent software resident on each cluster node, the same software that is used when updates are downloaded from Windows Update or Microsoft Update, or from a Windows Server Update Services (WSUS) server. For more information about how plug-ins work with CAU, see the content about Cluster-Aware Updating plug-ins.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-ClusterName<String>

Specifies the name of the cluster on which to create the CAU clustered role. This parameter is only required when this cmdlet is not run on a failover cluster node, or this cmdlet is used to reference a failover cluster different from where the cmdlet is run.

Aliases	none
Required?	false
Position?	1
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-ConfigurationName<String>

Specifies the Windows PowerShell session configuration that defines the session in which scripts (specified by PreUpdateScript and PostUpdateScript) and cmdlets are run, and can limit the cmdlets that are available to be run. If either a pre-update or post-update script is specified but a configuration name is not specified, then the default session configuration that is built into Windows PowerShell® ("Microsoft.PowerShell") is used.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-Credential<PSCredential>

Specifies the administrative credentials for the target cluster.

Aliases	none
Required?	false
Position?	2
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-DaysOfWeek<Weekdays>

Specifies the days of the week on which the updating task will be triggered. Multiple values can be specified either separated with commas or as a hexadecimal sum.
- Sunday: (0x01)
- Monday: (0x02)
- Tuesday: (0x04)
- Wednesday: (0x08)
- Thursday: (0x10)
- Friday: (0x20)
- Saturday: (0x40)
Examples:
- –DaysOfWeek: Monday, Wednesday, Friday
- –DaysOfWeek: 0x02, 0x08, 0x20
- –DaysOfWeek: 0x2A

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-EnableFirewallRules

Enables the Remote Shutdown Windows Firewall rule group on each cluster node, if it is not already enabled. If the EnableFirewallRules parameter is specified, CAU will also automatically re-enable the Remote Shutdown rule group each time the CAU clustered role performs an Updating Run, in case the rules are disabled manually in the intervening time. Enabling this rule group permits inbound communication to each cluster node during each Updating Run that allows CAU to shut down and restart the node remotely (if the installation of an update requires a restart). If Windows Firewall is in use on the cluster nodes and the rule group is not enabled, the Updating Run will fail. The Remote Shutdown Windows Firewall rule group is not enabled when it will conflict with Group Policy settings that are configured for Windows Firewall.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-Force

Runs the cmdlet without prompting for confirmation. By default the cmdlet will ask for confirmation from the user before proceeding.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-GroupName<String>

The NetBIOS name of the resource group for the CAU clustered role.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-IntervalWeeks<Int32>

Specifies the interval between weeks when the task will be triggered. An interval of 1 produces a weekly schedule. An interval of 2 produces an every-other week schedule.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-MaxFailedNodes<Int32>

Specifies the maximum number of nodes on which updating can fail. If one more than this number of nodes fails, then the Updating Run is stopped. The range is from zero (0) through 1 less than the number of cluster nodes. The default for most clusters is approximately one-third of the number of nodes.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-MaxRetriesPerNode<Int32>

Specifies the maximum number of times that the update process (including any pre-update and post-update scripts) will be retried per node. The maximum is 64 and the default is 3.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-NodeOrder<String[]>

Specifies the names of the cluster nodes in the order that they should be updated.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-PostUpdateScript<String>

Specifies the path and file name for a Windows PowerShell script to run on each node after updating finishes, and just after the node is brought out of Maintenance mode. The file name extension must be .ps1 and the total length of the path plus the file name must be no longer than 260 characters. As a best practice, the script should be located on a disk in cluster storage, or at a highly available network share, to ensure that the script is always accessible to all of the cluster nodes.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-PreUpdateScript<String>

Specifies the path and file name for a Windows PowerShell script to run on each node before updating begins, and before the node is put into Maintenance mode. The file name extension must be .ps1 and the total length of the path plus the file name must be no longer than 260 characters. As a best practice, the script should be located on a disk in cluster storage, or at a highly available network share, to ensure that the script is always accessible to all of the cluster nodes. If a pre-update script fails, the node is not updated.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-RebootTimeoutMinutes<Int32>

Specifies the time in minutes that CAU will allow for the restarting of a node (if a restart is necessary). If the restart does not complete within this time, then the Updating Run on that node will be marked as failed.

Aliases	none
Required?	false
Position?	named
Default Value	15
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-RequireAllNodesOnline

Specifies that all cluster nodes must be online and reachable before updating begins.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-RunPluginsSerially

When multiple plug-ins are used during an Updating Run, specifies that CAU will scan each cluster node for applicable updates and stage the updates for each plug-in in the plug-in order passed in CauPluginName. By default, CAU scans and stages the applicable updates for all plug-ins in parallel. Regardless of the configuration of this parameter, CAU installs the applicable updates for each plug-in sequentially.
Note: The parameter is valid only when multiple plug-ins are specified in CauPluginName. If a single plug-in is specified, a warning appears.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-SeparateReboots

When multiple plug-ins are used during an Updating Run, specifies that CAU will shut down and restart a cluster node after each plug-in installs updates on the node, if the installation of an update by a plug-in requires a restart. By default, during an Updating Run, all plug-ins complete the installation of updates on a cluster node before the node restarts one time (if a restart is necessary).
Note: The parameter is valid only when multiple plug-ins are specified in CauPluginName. If a single plug-in is specified, a warning appears.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-StartDate<DateTime>

Specifies the earliest date on which the Updating Run can be triggered.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-StopAfter<TimeSpan>

Specifies the time in minutes after which the Updating Run will be canceled if it has not completed. The time span can be expressed in the standard ways available in Windows PowerShell, for example, 01:30:00 represents one hour and thirty minutes. By default, the Updating Run is allowed an unlimited amount of time to complete.
Note: If pre-update or post-update scripts are specified, then the entire process of running scripts and performing updates must be complete within this time limit.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-StopOnPluginFailure

When multiple plug-ins are used during an Updating Run, specifies that if a failure occurs during the application of updates on a node by any plug-in, subsequent updates on the node that are coordinated by the remaining plug-ins are stopped. By default, a failure by one plug-in does not affect the application of updates on a node by other plug-ins.
Note: The parameter is valid only when multiple plug-ins are specified in CauPluginName. If a single plug-in is specified, a warning appears.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-VirtualComputerObjectName<String>

Specifies the name of a prestaged virtual computer object that is used by the CAU clustered role. For more information, see the Steps to create computer objects in Active Directory. If not specified, then a virtual computer object is created using a generated name. Generating a name automatically requires the cluster name object to have permissions to create the virtual computer object in Active Directory.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-WarnAfter<TimeSpan>

Specifies the time in minutes after which a warning will be logged if the Updating Run (including any pre-update and post-update scripts) has not completed. By default, no warning will be logged, regardless of the time taken by the Updating Run.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-WeeksOfMonth<Int32[]>

Specifies the weeks of the month when the Updating Run should be run. The value 5 represents the last week of the month.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-Confirm

Prompts you for confirmation before running the cmdlet.

Required?	false
Position?	named
Default Value	false
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Required?	false
Position?	named
Default Value	false
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

• None

Outputs

The output type is the type of the objects that the cmdlet emits.

• None

Examples

EXAMPLE 1

This example adds the CAU clustered role, using a default name, on the cluster called CONTOSO-FC1. The CAU clustered role is configured to perform Updating Runs on Tuesdays and Saturdays on the second and fourth weeks of each month. In an Updating Run, the maximum number of failed nodes is two and the maximum number of retries per node is two. A script called verifyupdatesinstalled.ps1 runs on each node after it has been fully updated. Before an Updating Run can begin, all the nodes of that cluster must be running. If it is not already enabled, the Remote Shutdown Windows Firewall rule group will be enabled on each cluster node. The cmdlet runs without displaying confirmation prompts.

PS C:\> Add-CauClusterRole -ClusterName CONTOSO-FC1 -DaysOfWeek Tuesday,Saturday -WeeksOfMonth 2,4 -MaxFailedNodes 2 -MaxRetriesPerNode 2 -PostUpdateScript \\CONTOSOFileShare\scripts\verifyupdatesinstalled.ps1 -RequireAllNodesOnline –EnableFirewallRules -Force

EXAMPLE 2

This example adds the CAU clustered role, using a default name, on the cluster called CONTOSO-FC1. The CAU clustered role is configured to perform Updating Runs on Tuesdays and Saturdays at an interval of every three weeks. In an Updating Run, the maximum number of failed nodes is two and the maximum number of retries per node is two. Updating Runs can begin even when the nodes of the cluster are not all running (as long as the cluster itself has quorum and is running). If it is not already enabled, the Remote Shutdown Windows Firewall rule group will be enabled on each cluster node. The cmdlet runs without displaying confirmation prompts.

PS C:\> Add-CauClusterRole -ClusterName CONTOSO-FC1 -DaysOfWeek Tuesday,Saturday -WeeksInterval 3 -MaxFailedNodes 2 -MaxRetriesPerNode 2 –EnableFirewallRules -Force

EXAMPLE 3

This example adds the CAU clustered role, using a default name, on the cluster called CONTOSO-FC1. The CAU clustered role is configured to perform updates using the Microsoft.WindowsUpdatePlugin plug-in with the optional 'IncludeRecommendedUpdates' parameter set to 'True', and using the Microsoft.HotfixPlugin plug-in using the hotfix root folder \\CauHotfixSrv\shareName and the default hotfix configuration file. If a failure occurs during the installation of updates on a node by Microsoft.WindowsUpdatePlugin, updates will not be applied by Microsoft.HotfixPlugin plug-in. If it is not already enabled, the Remote Shutdown Windows Firewall rule group will be enabled on each cluster node. The cmdlet runs without displaying confirmation prompts.

PS C:\> Add-CauClusterRole -ClusterName CONTOSO-FC1 -CauPluginName Microsoft.WindowsUpdatePlugin, Microsoft.HotfixPlugin -CauPluginArguments @{ 'IncludeRecommendedUpdates' = 'True' }, @{ 'HotfixRootFolderPath' = '\\CauHotfixSrv\shareName' } -StopOnPluginFailure -EnableFirewallRules -Force

Related topics

Disable-CauClusterRole

Enable-CauClusterRole

Get-CauClusterRole

Remove-CauClusterRole

Set-CauClusterRole