...
There are three basic switches. Exactly one of them must be specified in order for wuInstall WuInstall to do something. It makes no sense to specify more than one of those switches (e.g. wuInstall /search /install), because download automatically includes a search and install automatically includes search and download.
...
WuInstall /search
It lists all update, which are available updates. It either searches on the Windows Update Server in the internet, or, if configured, on your WSUS. It has no impact on your system at all. In that this case it just performs a search and lists what was found.
...
Does exactly the same as WuInstall /download, but afterwards it copies the contents of the downloaded updates (usually .exe or .msi-files) for example to c:\updates_download, from where they can be installed manually or copied and used for patching other machines.
1.4. Installing updates
To install the updates, you use:
wuInstall /install
It again searches the updates, downloads them (if they have not already been downloaded by a previous WuInstall /download command already) and then installs them.
...
With various switches, you can narrow the results of the search for updates and therefore also the updates, which are downloaded and installed. You can use criteria queries, search updates, which match certain names, severities, products or classifications.
Tip: In subsequent examples, we only use the /search option to illustrate how to select updates. This option is ideal to test certain switches, because it just lists the updates and has no further impact on the system. Of course, also the /download or /install switch can be used with all following the examples. |
2.1. Specifying criteria
...
You can, for example search for updates, which are already installed:
...
Furthermore you can also just select Driversdrivers:
wuInstall /search /criteria "IsInstalled=0 and Type='Driver'"
or Drivers drivers and Softwaresoftware:
wuInstall /search /alltypes
...
With the /match option, you can get updates of which the title matches all updates with titles matching a specific search string.
...
In the WuInstall Pro Version, there is, corresponding to the /match-switch also a /nomatch-switch For example, search all Updates updates which do NOT match "SQL" OR "Windows" OR "KB"
...
/match and /nomatch can, of course, also be used in combination, for example search all Updates updates which match "SQL" OR "Office" but do not Match "KB" or "Microsoft"
...
There is also a /nomatchfile switch, which does the opposite, which excludes updates matching one of the search terms in the file.
...
- Critical (C): A security issue whose exploitation could allow the propagation of an Internet worm without user action.
- Important (I): A security issue whose exploitation could result in compromise of the confidentiality, integrity, or availability of users' data, or of the integrity or availability of processing resources.
- Moderate (M): Exploitation is mitigated to a significant degree by factors such as default configuration, auditing, or difficulty of exploitation.
- Low (L): A security issue whose exploitation is extremely difficult, or whose impact is minimal.
- Unknown (U): No information about the severity is available.
In The letter the in brackets is the code for the /severity - option. Just put the letters together to select multiple severities.
...
Just put the letters in the bracket together to select multiple severities. For example, select all security updates, critical updates and Updatesupdates:
WuInstall /search /classification SCU
Tip: High priority updates can best be found with the classification CRS (Critical, Security and Update Rollups), however sometimes also U (Updates) can be high priority. Generally speaking, selecting which updates are high priority and which are not, is up to the administrator, there . There is no general rule how to automatically match the high priority categorization on the Microsoft update Update website. |
2.7. Product
Each update belongs to a Microsoft product, for example Office 2003, Windows XP, Visual Studio 2008, Silverlight, ...
...
With this option complete cumulative updating of windows systems becomes possible. That means installing updates, rebooting and installing further updates will be automated. After performing an update and rebooting afterwards, WuInstall starts again before the Windows Logon and executes the same command again, which that was done before the reboot. The /rebootcycle option uses the Windows Task Scheduler to restart WuInstall.
...
Quite the opposite of the bypass_wsus option is the /use_wsus option. If you want to choose another WSUS, or if you have no WSUS configured at the machine and want to get updates from a certain WSUS, the use_wsus option can force WuInstall to use a certain WSUS
...
Tip: If WuInstall fails for some reason, or is aborted before it finishes, the registry keys HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWuServer, HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer, HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUStatusServer have to be reset manually to the initial state. |
3.6. Accepting EULAs
Some updates require the user to accept an EULA in order to install. To automate this, the /autoaccepteula option automatically accepts all EULAs for updates which require this, without any user interaction or interruption.
...