https://github.com/dpo007/wsus-approver
This PowerShell script automates the approval and declination of updates in a WSUS (Windows Server Update Services) server.
https://github.com/dpo007/wsus-approver
powershell windows-update wsus
Last synced: 2 months ago
JSON representation
This PowerShell script automates the approval and declination of updates in a WSUS (Windows Server Update Services) server.
- Host: GitHub
- URL: https://github.com/dpo007/wsus-approver
- Owner: dpo007
- Created: 2025-02-12T22:39:45.000Z (4 months ago)
- Default Branch: main
- Last Pushed: 2025-03-12T21:54:47.000Z (3 months ago)
- Last Synced: 2025-03-12T22:30:54.434Z (3 months ago)
- Topics: powershell, windows-update, wsus
- Language: PowerShell
- Homepage:
- Size: 20.5 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: ReadMe.md
Awesome Lists containing this project
README
# WSUS Automatic Approval/Declination
## Overview
This PowerShell script automates the approval and declination of updates in a **WSUS (Windows Server Update Services)** server. It builds upon the original script **`wsus-approval.ps1`**, acquired from [this GitHub repository](https://github.com/hkbakke/wsus-helpers), and introduces several key improvements.
### **Original Script Source:**
- **File Name:** `wsus-approval.ps1`
- **Repository:** [hkbakke/wsus-helpers](https://github.com/hkbakke/wsus-helpers)
- **Purpose:** Automate WSUS update approvals and declinations
## 🚀 Key Enhancements & New Features
### **1️⃣ Improved Documentation & Code Structure**
✅ Added **structured help comments** (`.SYNOPSIS`, `.DESCRIPTION`, `.PARAMETER`, `.EXAMPLE`, `.NOTES`)
✅ Introduced **debug values section** for easier testing
✅ Enhanced code readability with **better modularization**
### **2️⃣ New & Improved Parameters**
| Parameter | Description |
|------------|----------------|
| `-DeclineOnly` | Skips approvals, only declines updates |
| `-IncludeUpgrades` | Optionally includes "Upgrades" classification in approvals |
| `-RestrictToLanguages` | Limits updates to specific languages/locales (default: en-us, en-gb). If empty, all language versions of an update will be approved. |
### **3️⃣ Enhanced Logging System**
✅ **Timestamped logging** with **colored console output** for better readability
✅ Logs written to a **rotating log file** (`wsus-approver_Day_Hour.log`)
✅ More structured logging for **debugging and traceability**
### **4️⃣ Smarter Update Filtering & Approval Process**
✅ **New function:** `TestUpdateTitleLanguageMatch` - identifies language-specific updates.
✅ **Replaced inefficient `if-else` conditions** with a **PowerShell `switch` statement** for better performance
✅ **Declines superseded/expired updates only after approving new ones**
✅ **Handles license agreement acceptance more explicitly** before approving updates
### **5️⃣ Optimized Execution & Error Handling**
✅ Sets **default error action to `Stop`** to ensure failures are caught
✅ **Prevents unnecessary processing** on deselected updates
✅ **More modular functions** for better maintenance
## 🛠️ Available Parameters
| **Parameter** | **Description** |
|--------------|----------------|
| `-WsusServer` | Specifies the WSUS server to connect to (default: `localhost`) |
| `-Port` | Sets the port to use for WSUS (default: `8530`) |
| `-UseSSL` | Enables SSL for WSUS connection |
| `-NoSync` | Prevents synchronization before processing updates |
| `-Reset` | Resets the update list before processing |
| `-DryRun` | Runs in dry-run mode (no actual changes made) |
| `-DeclineOnly` | Only declines updates, skipping approvals |
| `-IncludeUpgrades` | Includes "Upgrades" classification in approvals |
| `-DeclineIA64` | Declines IA64 updates (default: `true`) |
| `-DeclineARM64` | Declines ARM64 updates (default: `true`) |
| `-DeclineX86` | Declines x86 updates (default: `true`) |
| `-DeclineX64` | Declines x64 updates (default: `false`) |
| `-DeclinePreview` | Declines preview updates (default: `true`) |
| `-DeclineBeta` | Declines beta updates (default: `true`) |
| `-RestrictToLanguages` | Limits updates to specific languages/locales (default: en-us, en-gb). If empty, all language versions of an update will be approved. |
## 🔧 How to Use
### **Basic Example:**
```powershell
# Connects to WSUS and runs a dry run without making any changes
.\WSUS-Approver.ps1 -DeclineOnly -DryRun
```
### **Advanced Example:**
```powershell
# Approve updates including upgrades, decline non-English (US) updates, and perform real changes
.\WSUS-Approver.ps1 -IncludeUpgrades -RestrictToLanguages @("en-us")
```