New Post: Using PoshPAIG without using PSEXEC

May 24, 2014, 4:12 pm

≫ Next: New Post: Using PoshPAIG without using PSEXEC

Hi,

Is there a way using PoshPAIG without using PSEXEC? Since PSEXEC have security disadvantage because it transmit username/password in clear text across network.

↧

New Post: Using PoshPAIG without using PSEXEC

June 3, 2014, 5:38 am

≫ Next: New Post: PoshPAIG not updating LastInstallationSuccessDate

≪ Previous: New Post: Using PoshPAIG without using PSEXEC

Unfortunately, there is not way to install patches without using PSExec at this time. I have been working on a variety of workarounds but none have worked so far. I have not been allowing passwords to be used in PoshPAIG as that was a known issue with PSExec. There is a newer version of PSExec that has been released that apparently encrypts the password that I am looking at using to allow non-domain installations.

↧

New Post: PoshPAIG not updating LastInstallationSuccessDate

June 25, 2014, 10:24 pm

≫ Next: New Post: Does not install all updates + other issue with updates.

≪ Previous: New Post: Using PoshPAIG without using PSEXEC

Hi,

Great program however I have one issue. When I use the latest version to update Windows 2012 R2 servers the LastInstallationSuccessDate is not created so the servers report that they're never updated when I run a script to check the LastInstallationSuccessDate.

Is this to be expected with the current version or is this particular to my environment?

Thanks

↧

New Post: Does not install all updates + other issue with updates.

August 18, 2014, 2:00 am

≫ Next: New Post: PoshPAIG not updating LastInstallationSuccessDate

≪ Previous: New Post: PoshPAIG not updating LastInstallationSuccessDate

Issue 3: I have the same problem. It seems to me, it occur if the update is an application. We have several application (msi and exe files) which will be deployed through WSUS. It work normally without problem by using Windows Update GUI.

If I want to use PoshPAIG 2.1.5, it shows me one update after auditing patches. That's for example a MSI file, which updates an already installed MSI file (both are the same application with different version number - the newer MSI file updates the older MSI file). If I run "Install Patch" through PoshPAIG, it show me after some time "Completed". If I look to that computer it shows me still that update/application as missing. I'm able to try again with PoshPAIG with the same result.

Another example for with a different computer shows me four updates after auditing patches. One patch is the same MSI file from above and three patches are hotfixes from Microsoft. If I use "Install Patch" through PoshPAIG it shows me again "Completed" and through a check on that computer I'm able to see that the three hotfixes are installed, but not the MSI file.

Please for help. How to fix that strange problem? It seems to me that something is wrong with PoshPAIG and update script. Some more details: I use PsExec v2.11 and Windows Server 2012

edit: if I run "PsExec.exe \computername cscript.exe c:\update.vbs", then the msi file will be installed without problem. "update.vbs" was created by PoshPAIG during "Install Patches"...

best regards, Andyt

↧

New Post: PoshPAIG not updating LastInstallationSuccessDate

August 18, 2014, 2:25 am

≫ Next: New Post: Using PoshPAIG without using PSEXEC

≪ Previous: New Post: Does not install all updates + other issue with updates.

I found the same problem. Our environment: most Windows Server 2012 R2 and there is still an old Windows Server 2008 R2. If I use PoshPAIG, LastInstallationSuccessDate isn't changed. If I use Windows Update GUI, LastInstallationSuccessDate is changed.

best regards, Andyt

↧

New Post: Using PoshPAIG without using PSEXEC

September 16, 2014, 12:49 pm

≫ Next: New Post: Does not install all updates + other issue with updates.

≪ Previous: New Post: PoshPAIG not updating LastInstallationSuccessDate

Shouldn't it be possible to use PowerShell Remoting?

↧

New Post: Does not install all updates + other issue with updates.

September 22, 2014, 12:06 am

≫ Next: New Post: Way to hide CScript/WScript window that shows up on the machines when installing patches?

≪ Previous: New Post: Using PoshPAIG without using PSEXEC

Hello,

i have the same Problem with my update procedure.
Any solution for?

best regards

Torsten

↧

New Post: Way to hide CScript/WScript window that shows up on the machines when installing patches?

December 5, 2014, 7:56 am

≫ Next: New Post: Using PoshPAIG without using PSEXEC

≪ Previous: New Post: Does not install all updates + other issue with updates.

I've looked around everywhere and can't seem to find an easy or even workable solution to hide the black shell window that pops up on the primary logged in session on the machines. This is a major issue for me because I need to install these patches while users are on the machines but there is mass confusion, questions, people closing things, and other issues from a random window popping up.

What can I do to hide the CScript/WScript window that pops up when initiating an install?

Thanks!

↧

New Post: Using PoshPAIG without using PSEXEC

December 12, 2014, 11:50 am

≫ Next: New Post: patches not installing because they are not downloaded

≪ Previous: New Post: Way to hide CScript/WScript window that shows up on the machines when installing patches?

Shouldn't it be possible to use PowerShell Remoting?

Not nearly as easily. You can't access the Update over PS remoting. The CreateUpdateDownloader() and CreateUpdateInstaller() methods can't be called from a remote computer. You get E_ACCESSDENIED.

Some other Powershell modules handle this by using Powershell create a scheduled task on the remote system. A scheduled task isn't great though, because it makes it difficult to get notified when it completed, and the results of the tasks.

↧

New Post: patches not installing because they are not downloaded

February 20, 2015, 8:41 am

≫ Next: New Post: Using PoshPAIG without using PSEXEC

≪ Previous: New Post: Using PoshPAIG without using PSEXEC

Hi - Thanks for this great project. I have validated the above code and found it fixed an issue where I was seeing the error
"COMAPI FATAL: Unable to perform synchronous installation successfully. (hr=80240024)"
In the windowsupdate.log

This turns out to be the issue where the updates are not downloaded.

This was especially annoying after an installation installed say 30 patches as part of a scheduled install, then audit reported say 6 more updates. This is where this tool really has helped me, and I needed this fix.

I also added the following which I think also fixes an issue with prompts on a system where a user may be logged on.

installer.AllowSourcePrompts = False
installer.ForceQuiet = True

from a discussion at:
force-wu-install-remotely-via-vbs

so the whole vbs script now reads:

ON ERROR RESUME NEXT
CONST ForAppending = 8
CONST ForWriting = 2
CONST ForReading = 1
strlocalhost = "."
Set oShell = CreateObject("WScript.Shell") 
Set updatesToDownload = CreateObject("Microsoft.Update.UpdateColl")
set ofso = createobject("scripting.filesystemobject")
Set updateSession = CreateObject("Microsoft.Update.Session")
Set updateSearcher = updateSession.CreateupdateSearcher()
Set updatesToInstall = CreateObject("Microsoft.Update.UpdateColl")
Set searchResult = updateSearcher.Search("IsInstalled=0 and Type='Software'")
Set objWMI = GetObject("winmgmts:\\" & strlocalhost & "\root\CIMV2")
set colitems = objWMI.ExecQuery("SELECT Name FROM Win32_ComputerSystem")
    For Each objcol in colitems
        strcomputer = objcol.Name
    Next
set objtextfile = ofso.createtextfile("C:\" & strcomputer & "_patchlog.csv", True)
objtextfile.writeline "Computer" & vbTab & "Title" & vbTab & "KB" & vbTab & "IsDownloaded" & vbTab & "Notes"
If searchresult.updates.count = 0 Then
    Wscript.echo "No updates to install."
    objtextfile.writeline strcomputer & vbTab & "NA" & vbTab & "NA" & vbTab & "NA" & vbTab & "NA"
    Wscript.Quit
Else
For I = 0 To searchResult.Updates.Count-1
    set update = searchResult.Updates.Item(I)
        If update.IsDownloaded = false Then
            updatesToDownload.Add(update)   
        End If
Next
Set downloader = updateSession.CreateUpdateDownloader() 
downloader.Updates = updatesToDownload
downloader.Download()

For I = 0 To searchResult.Updates.Count-1
    set update = searchResult.Updates.Item(I)
        If update.IsDownloaded = true Then
            updatesToInstall.Add(update)    
        End If
Next
End If
err.clear
Wscript.Echo "Installing Updates"
Set installer = updateSession.CreateUpdateInstaller()
installer.Updates = updatesToInstall
installer.AllowSourcePrompts = False
installer.ForceQuiet = True
Set installationResult = installer.Install()
    If err.number <> 0 Then
        objtextfile.writeline strcomputer & "," & update.Title & "," & err.number
    Else        
        For I = 0 to updatesToInstall.Count - 1
        objtextfile.writeline strcomputer & vbTab & updatesToInstall.Item(i).Title & vbTab & "NA" & vbTab & "NA" & vbTab & installationResult.GetUpdateResult(i).ResultCode 
        Next
    End If
Wscript.Quit

↧

New Post: Using PoshPAIG without using PSEXEC

April 20, 2015, 5:53 am

≫ Next: New Post: How do I Exclude/Exempt a single update

≪ Previous: New Post: patches not installing because they are not downloaded

Use the latest version of PsExec, which currently is v2.11:
https://msdn.microsoft.com/en-us/library/bb897553.aspx
From that page:
"Note that the password and command are encrypted in transit to the remote system."

So, as long as the latest version of psexec is used (maybe make a note in the release notes?), then this isn't an issue, which means that specifying creds would be secure.

↧

New Post: How do I Exclude/Exempt a single update

April 21, 2015, 11:02 am

≫ Next: New Post: Install and restart in one task

≪ Previous: New Post: Using PoshPAIG without using PSEXEC

Hi, is there a way to exclude a single, or a list of updates? What can I add to the script to create a list of updates I don't want to install?

Thanks

↧

New Post: Install and restart in one task

April 24, 2015, 7:34 am

≫ Next: New Post: Error on installing patches

≪ Previous: New Post: How do I Exclude/Exempt a single update

Is it possible to initiate an install and restart in the same task? I have servers that I would patch in a group and would rather have them initiate the restart immediately after finishing the patch install instead of waiting for everything in the list to install the patches and specifically initiating the restart.

↧

New Post: Error on installing patches

May 27, 2015, 1:41 am

≫ Next: New Post: Error on installing patches

≪ Previous: New Post: Install and restart in one task

hi

got a lot of errors in the report on installation of patches.

any ideas?

        $uiHash.CancelImage.Source = "$pwd\Images\Stop.jpg"                 Ausnahme beim Festlegen von "Source"        PropertyAssignmentException InvalidOperation    System.Management.Automation.ErrorRecord    RuntimeException    33  381 


            $uiHash.Listview.Items.CommitEdit() CommitEdit  Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "CommitEdit" enthält.

bei System.Management.Automation.ParserOps.CallMethod(Token token, Object target, String methodName, Object[] paramArray, Boolean callStatic, Object valueToSet)
bei System.Management.Automation.MethodCallNode.InvokeMethod(Object target, Object[] arguments, Object value)
bei System.Management.Automation.MethodCallNode.Execute(Array input, Pipe outputPipe, ExecutionContext context)
bei System.Management.Automation.ParseTreeNode.Execute(Array input, Pipe outputPipe, ArrayList& resultList, ExecutionContext context)
bei System.Management.Automation.StatementListNode.ExecuteStatement(ParseTreeNode statement, Array input, Pipe outputPipe, ArrayList& resultList, ExecutionContext context) MethodNotFound InvalidOperation System.Management.Automation.ErrorRecord RuntimeException 50 358

            $uiHash.Listview.Items.EditItem($Computer)  EditItem    Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "EditItem" enthält.

        $uiHash.CancelImage.Source = "$pwd\Images\Stop.jpg"                 Ausnahme beim Festlegen von "Source"        PropertyAssignmentException InvalidOperation    System.Management.Automation.ErrorRecord    RuntimeException    33  297 
        $uiHash.StartImage.Source = "$pwd\Images\Start_locked.jpg"      Ausnahme beim Festlegen von "Source"        PropertyAssignmentException InvalidOperation    System.Management.Automation.ErrorRecord    RuntimeException    32  295 
            $uiHash.Listview.Items.CommitEdit() CommitEdit  Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "CommitEdit" enthält.

            $uiHash.Listview.Items.EditItem($Computer)  EditItem    Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "EditItem" enthält.

            $uiHash.Listview.Items.CommitEdit() CommitEdit  Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "CommitEdit" enthält.

            $uiHash.Listview.Items.EditItem($Computer)  EditItem    Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "EditItem" enthält.

            $uiHash.Listview.Items.CommitEdit() CommitEdit  Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "CommitEdit" enthält.

            $uiHash.Listview.Items.EditItem($Computer)  EditItem    Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "EditItem" enthält.

            $uiHash.Listview.Items.CommitEdit() CommitEdit  Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "CommitEdit" enthält.

↧

New Post: Error on installing patches

May 27, 2015, 1:57 am

≫ Next: New Post: install patches not possible after audit patches

≪ Previous: New Post: Error on installing patches

hi

just found the error. the gui has problems if the script is called from a network share like \xyz\dfs$\abc or similar. just copied it on my local workstations hdd and it works

:-)

thx tom

↧

New Post: install patches not possible after audit patches

May 28, 2015, 1:40 am

≫ Next: New Post: nonExisting methods

≪ Previous: New Post: Error on installing patches

hi

just found out that if i open the gui, do an audit (about 25 servers), the audit works, but if i would like to install the patches afterwards, it does not work. i get errors:

__$uiHash.Listview.Items.CommitEdit() CommitEdit Fehler beim Aufrufen der Methode, da [System.Windows.Controls.ItemCollection] keine Methode mit dem Namen "CommitEdit" enthält.
bei System.Management.Automation.ParserOps.CallMethod(Token token, Object target, String methodName, Object[] paramArray, Boolean callStatic, Object valueToSet)
bei System.Management.Automation.MethodCallNode.InvokeMethod(Object target, Object[] arguments, Object value)
bei System.Management.Automation.MethodCallNode.Execute(Array input, Pipe outputPipe, ExecutionContext context)
bei System.Management.Automation.ParseTreeNode.Execute(Array input, Pipe outputPipe, ArrayList& resultList, ExecutionContext context)
bei System.Management.Automation.StatementListNode.ExecuteStatement(ParseTreeNode statement, Array input, Pipe outputPipe, ArrayList& resultList, ExecutionContext context) MethodNotFound InvalidOperation System.Management.Automation.ErrorRecord RuntimeException 50 358

after a restart of the gui the install patches works as a charm. any ideas?

thx tom

__

↧

New Post: nonExisting methods

June 11, 2015, 10:12 am

≫ Next: New Post: Error with Audit

≪ Previous: New Post: install patches not possible after audit patches

Hi
I'm running this script and I'm getting errors about non-existing methods EditItem at Start-PoshPAIG.ps1 :449 char48
CommitEdit at Start-PoshPAIG.ps1 :451 char50
EditItelm at Start-PoshPAIG.ps1 :9 char52
and couple of more lines containing this methods

↧

New Post: Error with Audit

June 17, 2015, 5:32 am

≫ Next: New Post: Warning: Exception calling "create instance"

≪ Previous: New Post: nonExisting methods

hi
I'm getting the following error

WARNING: Exception calling "CreateInstance" with "1" argument(s): "Retrieving the COM class factory for remote
component with CLSID {4CB43D7F-7EEE-4906-8698-60DA1C38F2FE} from machine 12.1.1.207 failed due to the following error:
80070005 12.1.1.207."

↧

New Post: Warning: Exception calling "create instance"

June 18, 2015, 8:22 am

≫ Next: New Post: PoshPAIG Tool

≪ Previous: New Post: Error with Audit

Warning: Exception calling "create instance" with "1" argument(s):"Retrieving" the com class factory from remote component with clsid{4CB43D7F-7EEE-4906-8698-60DA1C38F2FE} from machine MYSERVER failed due to the following error:8007005 MYSERVER

↧

New Post: PoshPAIG Tool

August 24, 2015, 8:48 am

≫ Next: New Post: Nothing is getting installed

≪ Previous: New Post: Warning: Exception calling "create instance"

Hello Everyone,

I am in the process of patching our environment, I found the perfect tool to this ( Posh Paig Tool) the only problem is that i need the option to choose which updates to install. I cannot figure out how to do this. Any help will be great, let me know if you need the link to download the script.

Thanks,

Adrian

↧