PowerShell

PowerShell: Collect information about installed Updates (Hotfixes) on all Domain Computers

With WSUS you are able to document the updates status of your computers. But what to do if there is no WSUS available? In this article I describe how to get a list of all installed updates of all Domain Computers using PowerShell.

Get-Hotfix

With this useful command you can show all installed Updates on the localhost.


Get-Hotfix

Unbenannt.PNG

To display only hotfixes you are looking for you can limit the result using Where-Object.


Get-Hotfix | Where-Object HotfixID -like KB31*

Unbenannt.PNG


Get-Hotfix | Where-Object HotfixID -eq "KB3186568"

Unbenannt.PNG

Getting a list of all installed Hotfixes on all Domain Computers

For this, we need a list of all Domain Computers by name. We can achieve this by using Get-ADComputer. Note: The disadvantage of this method is that we do not know whether the computers are turned on or not. If you want to know which computers are not reachable remove the parameter ErrorAction SilentlyContinue. To make it more user-friendly, I recommend to use Out-GridView.


Invoke-Command -ComputerName (Get-ADComputer -Filter *).Name {Get-HotFix} -ErrorAction SilentlyContinue | Select-Object PSComputername, HotfixID, InstalledOn | Out-GridView

Unbenannt.PNG

Finding Computers that haven’t installed a special Hotfix

Make sure that all computers are turned on. To find all Computers, which haven’t installed hotfix KB4444 run


(Get-ADComputer -Filter *).Name | Foreach-Object {If (!(Get-Hotfix -ID "KB4444" -ComputerName $_ -ErrorAction SilentlyContinue)) {Add-Content $_ -Path C:\Temp\missing4444.txt}}

Unbenannt.PNG

Once completed run notepad and review your list.

Unbenannt.PNG

Related Links

Find more about Get-Hotfix in the Microsoft Docs: https://docs.microsoft.com/de-de/powershell/module/Microsoft.PowerShell.Management/Get-HotFix?view=powershell-5.1

See also

For documenting and managing your remote systems see also my articles:

PowerShell: Documenting your environment by running systeminfo on all Domain-Computers

How to schedule software installation with PowerShell

Windows Server: List all installed Roles and Features using PowerShell

PowerShell: My top 10 commands for documenting and monitoring Active Directory

Restart all Domain Computers by using PowerShell

1 reply »

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s