Solved

WSUS 3.0 - Report showing success rates of workstation patches,

Posted on 2014-11-25
8
460 Views
Last Modified: 2016-02-20
Hi Experts,
I've been tasked with providing management with a report showing success rates of WSUS patches for our desktop fleet (3000 workstations)
What is the best/closet report I can provide them with using the WSUS reporting feature that can highlight this,
Many thanks in advance
0
Comment
Question by:craigleenz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 

Author Comment

by:craigleenz
ID: 40464941
anything guys?
0
 
LVL 64

Expert Comment

by:btan
ID: 40465924
See if this help - After 24 hours, you can use the WSUS reporting feature to determine whether the updates have been deployed to the computers. To check the status of an update section (on "Update Status Summary report") from below
http://technet.microsoft.com/en-us/library/cc708475(v=ws.10).aspx

For accessing reporting feature of WSUS, you are required to install report viewer from Microsoft, not sure they have changed though as it is based on .net still @ http://www.microsoft.com/downloads/details.aspx?FamilyID=a941c6b2-64dd-4d03-9ca7-4017a0d164fd&displaylang=en
0
 

Author Comment

by:craigleenz
ID: 40465980
thanks for you response, however, I don't believe (based on articles I've been reading) that the report I'm wanting to produce for our client in possible using the native built in reporting in WSUS
probably a 3rd party tool or PowerShell could get me close,
I need a report summary showing a pie chart of how compliant all our workstations are, makes sense?
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 64

Expert Comment

by:btan
ID: 40466091
In forum, it shared that if you have Office Web Components installed on the reporting point, you can modify our reports to create those management graphs
https://social.technet.microsoft.com/Forums/systemcenter/en-US/866c686b-9662-4f1b-99f4-08922f7c84e3/snazzy-and-useful-patch-reports-lacking-in-sccm

This one used the script to crawl out the compliance check against update if you are interested
http://blogs.technet.com/b/wsus/archive/2008/06/20/baseline-compliance-report-using-public-wsus-views.aspx

then probably I suggest Solarwinds which has quite nice reporting stats which is useful for overall summary awareness http://www.solarwinds.com/patch-manager.aspx
OR Nessus is another candidate http://www.tenable.com/sc-dashboards/wsus-monitoring
0
 

Author Comment

by:craigleenz
ID: 40474855
sorry, none of these suggestion helped me,
0
 

Accepted Solution

by:
craigleenz earned 0 total points
ID: 40474863
the following power shell script resolved the issue for me
_________________________________________________________________________________________________________________________
function Connect-WSUS{
      param(
            [Parameter(Mandatory=$True,Position=1)] [string]$server
      )
      
      [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
      $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($server,$False)
      $wsus
}

$wsus_server = "%servername%"
$wsus_target_group = "All_Workstations"
$report_file = "C:\scripts\wsus-ALL_Workstations_ByUpdate_Summaries.csv"

if (Test-Path $report_file) {Remove-Item -Path $report_file -Force}

$wsus = Connect-WSUS($wsus_server)

$group = $wsus.getcomputertargetgroups() | where-object {$_.Name -eq $wsus_target_group}

#build a new update scope, and limit our scope to only updates released to our target group.
$updatescope = New-Object "Microsoft.UpdateServices.Administration.UpdateScope"
$updatescope.ApprovedComputerTargetGroups.add($group)

write-host "getting updates approved for target group $wsus_target_group"
$updates = $wsus.getupdates($updatescope)

write-host "retrieved $($updates.count) updates"
write-host "Getting summaries " -NoNewline
$i = 0
$summaries = @()
foreach ($update in $updates) {
    $summary = $update.getsummaryforcomputertargetgroup($group)

    $properties = @{
        "UpdateID"=$update.Id.updateid;
        "Title"=$update.Title;
        "IsSuperseded"=$update.IsSuperseded;
        "KB"=$update.KnowledgeBaseArticles -join ';';
        "CreationDate"=$update.CreationDate;
        "NACount"=$summary.NotApplicableCount;
        "InstalledCount"=$summary.InstalledCount;
        "DownloadedCount"=$summary.DownloadedCount;
        "InstalledPendingRebootCount"=$summary.InstalledPendingRebootCount;
        "FailedCount"=$summary.FailedCount;
        "UnknownCount"=$summary.UnknownCount
    }
    $summaryobject = New-Object –TypeName PSObject –Prop $properties
    $summaryobject = $summaryobject | select Updateid,Title,IsSuperseded,KB,CreationDate,NACount,InstalledCount,DownloadedCount,InstalledPendingRebootCount,FailedCount,UnknownCount
    $i++
    write-host "." -NoNewline
    if ($i % 20 -eq 0) {write-host "$i/$($updates.count) done"}
    $summaries += $summaryobject
}

write-host "Now Outputting file : $report_file"
$summaries | export-csv $report_file -NoTypeInformation
0
 
LVL 64

Expert Comment

by:btan
ID: 40475026
thanks for sharing. on related for your interest, you can find PS script samples for
- Find Last Installed Update via Windows Update Using WSUS
- Find Last Installed Update via Windows Update Using Remote COM or PSRemoting

For further fields to extract from summaryobject, you can check out this blog too
0
 

Author Closing Comment

by:craigleenz
ID: 40484407
none of the suggestion offered by other experts helped me,
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question