Windows/Update

wuauctl - deprecated

Update now: (doesn't seem to do anything)

wuauclt.exe /updatenow

Detect updates:

C:\Windows\system32\wuauclt.exe /detectnow

# then read %systemroot%\WindowsUpdate.log

DEPRECATED:

Windows Update logs are now generated using ETW (Event Tracing for Windows).
Please run the Get-WindowsUpdateLog PowerShell command to convert ETW traces into a readable WindowsUpdate.log.

For more information, please visit https://go.microsoft.com/fwlink/?LinkId=518345

Powershell

Get-PendingUpdate Script

This function will allow you to query local or remote computer/s and determine if there are pending WSUS updates that need to be installed.

Download Get-PendingUpdate

Get-PendingUpdate -Computer DC1

ref: Script Get-PendingUpdate [1]

wuInstall - Paid Solution

Price is about $400 for 100 machines per year. Price reduces per bucket count.

Download at https://wuinstall.com/

Search for updates

wuInstall /search

Download:

wuInstall /download

Install:

wuInstall /install

# other options:
 /quiet, /disableprompt or /autoaccepteula, /rebootcycle

ref: WuInstall - How to force Windows 10 updates to install using the command line [2]

Registry Settings

Default:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001

Sample corp policy:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"UseUpdateClassPolicySource"=dword:00000000
"SetProxyBehaviorForUpdateDetection"=dword:00000000
"DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection"=dword:00000000
"WUServer"="http://cmsup01.corp.example.co:8530"
"WUStatusServer"="http://cmsup01.corp.example.com:8530"
"UpdateServiceUrlAlternate"="http://localhost:8005"
"FillEmptyContentUrls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001