DSCResources/MSFT_UpdateServicesServer/MSFT_UpdateServicesServer.psm1
|
# DSC resource to initialize and configure WSUS Server. # Classifications ID reference... # # Applications = 5C9376AB-8CE6-464A-B136-22113DD69801 # Connectors = 434DE588-ED14-48F5-8EED-A15E09A991F6 # Critical Updates = E6CF1350-C01B-414D-A61F-263D14D133B4 # Definition Updates = E0789628-CE08-4437-BE74-2495B842F43B # Developer Kits = E140075D-8433-45C3-AD87-E72345B36078 # Feature Packs = B54E7D24-7ADD-428F-8B75-90A396FA584F # Guidance = 9511D615-35B2-47BB-927F-F73D8E9260BB # Security Updates = 0FA1201D-4330-4FA8-8AE9-B877473B6441 # Service Packs = 68C5B0A3-D1A6-4553-AE49-01D3A7827828 # Tools = B4832BD8-E735-4761-8DAF-37F882276DAB # Update Rollups = 28BC880E-0592-4CBF-8F95-C79B17911D5F # Updates = CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83 # Load Common Module $script:resourceHelperModulePath = Join-Path -Path $PSScriptRoot -ChildPath '..\..\Modules\DscResource.Common' Import-Module -Name $script:resourceHelperModulePath $script:localizedData = Get-LocalizedData -DefaultUICulture 'en-US' <# .SYNOPSIS Returns the current configuration of WSUS .PARAMETER Ensure Determines if the configuration should be added or removed #> function Get-TargetResource { [CmdletBinding()] [OutputType([System.Collections.Hashtable])] param ( [Parameter(Mandatory = $true)] [ValidateSet('Present', 'Absent')] [System.String] $Ensure ) Write-Verbose -Message $script:localizedData.GettingWsusServer try { if ($WsusServer = Get-WsusServer) { $Ensure = 'Present' } else { $Ensure = 'Absent' } } catch { $Ensure = 'Absent' } Write-Verbose -Message ($script:localizedData.WsusEnsureValue -f $Ensure) if ($Ensure -eq 'Present') { Write-Verbose -Message $script:localizedData.GettingWsusConfig $WsusConfiguration = $WsusServer.GetConfiguration() Write-Verbose -Message $script:localizedData.GettingWsusSubscription $WsusSubscription = $WsusServer.GetSubscription() Write-Verbose -Message $script:localizedData.GettingWsusSQLServer $SQLServer = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Update Services\Server\Setup' ` -Name 'SQLServerName').SQLServerName Write-Verbose -Message ($script:localizedData.SQLServerName -f $SQLServer) Write-Verbose -Message $script:localizedData.GetWSUSContentDir $ContentDir = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Update Services\Server\Setup' ` -Name 'ContentDir').ContentDir Write-Verbose -Message ($script:localizedData.WsusContentDir -f $ContentDir) Write-Verbose -Message $script:localizedData.GetWsusImproveProgram $UpdateImprovementProgram = $WsusConfiguration.MURollupOptin Write-Verbose -Message ($script:localizedData.ImprovementProgram -f $UpdateImprovementProgram) if (-not $WsusConfiguration.SyncFromMicrosoftUpdate) { Write-Verbose -Message $script:localizedData.GetUpstreamServer $UpstreamServerName = $WsusConfiguration.UpstreamWsusServerName $UpstreamServerPort = $WsusConfiguration.UpstreamWsusServerPortNumber $UpstreamServerSSL = $WsusConfiguration.UpstreamWsusServerUseSsl $UpstreamServerReplica = $WsusConfiguration.IsReplicaServer Write-Verbose -Message ($script:localizedData.UpstreamServer -f ` $UpstreamServerName, $UpstreamServerPort, $UpstreamServerSSL, $UpstreamServerReplica) } else { $UpstreamServerName = '' $UpstreamServerPort = $null $UpstreamServerSSL = $null $UpstreamServerReplica = $null } if ($WsusConfiguration.UseProxy) { Write-Verbose -Message $script:localizedData.GetWsusProxyServer $ProxyServerName = $WsusConfiguration.ProxyName $ProxyServerPort = $WsusConfiguration.ProxyServerPort $ProxyServerBasicAuthentication = $WsusConfiguration.AllowProxyCredentialsOverNonSsl if (-not ($WsusConfiguration.AnonymousProxyAccess)) { $ProxyServerCredentialUsername = "$($WsusConfiguration.ProxyUserDomain)\ ` $($WsusConfiguration.ProxyUserName)".Trim('\') } Write-Verbose -Message ($script:localizedData.WsusProxyServer -f $ProxyServerName, $ProxyServerPort, $ProxyServerBasicAuthentication) } else { $ProxyServerName = '' $ProxyServerPort = $null $ProxyServerBasicAuthentication = $null } Write-Verbose -Message $script:localizedData.GettingWsusLanguage if ($WsusConfiguration.AllUpdateLanguagesEnabled) { $Languages = @('*') } else { $Languages = ($WsusConfiguration.GetEnabledUpdateLanguages()) -join ',' } Write-Verbose -Message ($script:localizedData.WsusLanguages -f $Languages) Write-Verbose -Message $script:localizedData.GettingWsusClassifications if ($Classifications = @($WsusSubscription.GetUpdateClassifications().ID.Guid)) { if ($null -eq (Compare-Object -ReferenceObject ($Classifications | Sort-Object -Unique) -DifferenceObject ` (($WsusServer.GetUpdateClassifications().ID.Guid) | Sort-Object -Unique) -SyncWindow 0)) { $Classifications = @('*') } } else { $Classifications = @('*') } Write-Verbose -Message ($script:localizedData.WsusClassifications -f $Classifications) Write-Verbose -Message $script:localizedData.GettingWsusProducts if ($Products = @($WsusSubscription.GetUpdateCategories().Title) | Sort-Object -Unique) { if ($null -eq (Compare-Object -ReferenceObject $Products -DifferenceObject ` (($WsusServer.GetUpdateCategories().Title) | Sort-Object -Unique) -SyncWindow 0)) { $Products = @('*') } } else { $Products = @('*') } Write-Verbose -Message ($script:localizedData.WsusProducts -f $($Products -join '; ')) Write-Verbose -Message $script:localizedData.GettingWsusSyncConfig $SynchronizeAutomatically = $WsusSubscription.SynchronizeAutomatically Write-Verbose -Message ($script:localizedData.WsusSyncAuto -f $SynchronizeAutomatically) $SynchronizeAutomaticallyTimeOfDay = $WsusSubscription.SynchronizeAutomaticallyTimeOfDay Write-Verbose -Message ($script:localizedData.WsusSyncAutoTimeOfDay -f $SynchronizeAutomaticallyTimeOfDay ) $SynchronizationsPerDay = $WsusSubscription.NumberOfSynchronizationsPerDay Write-Verbose -Message ($script:localizedData.WsusSyncPerDay -f $SynchronizationsPerDay) $ClientTargetingMode = $WsusConfiguration.TargetingMode Write-Verbose -Message ($script:localizedData.WsusClientTargetingMode -f $ClientTargetingMode) } $returnValue = @{ Ensure = $Ensure SQLServer = $SQLServer ContentDir = $ContentDir UpdateImprovementProgram = $UpdateImprovementProgram UpstreamServerName = $UpstreamServerName UpstreamServerPort = $UpstreamServerPort UpstreamServerSSL = $UpstreamServerSSL UpstreamServerReplica = $UpstreamServerReplica ProxyServerName = $ProxyServerName ProxyServerPort = $ProxyServerPort ProxyServerCredentialUsername = $ProxyServerCredentialUsername ProxyServerBasicAuthentication = $ProxyServerBasicAuthentication Languages = $Languages Products = $Products Classifications = $Classifications SynchronizeAutomatically = $SynchronizeAutomatically SynchronizeAutomaticallyTimeOfDay = $SynchronizeAutomaticallyTimeOfDay SynchronizationsPerDay = $SynchronizationsPerDay ClientTargetingMode = $ClientTargetingMode } $returnValue } <# .SYNOPSIS Configures a WSUS server instance .PARAMETER Ensure Determines if the task should be created or removed. Accepts 'Present'(default) or 'Absent'. .PARAMETER SetupCredential Credential to use when running setup. Applicable when using SQL as data store. .PARAMETER SQLServer Optionally specify a SQL instance to store WSUS data .PARAMETER ContentDir Location to store WSUS content files .PARAMETER UpdateImprovementProgram Provide feedback to Microsoft to help improve WSUS .PARAMETER UpstreamServerName Name of another WSUS server to retrieve content from .PARAMETER UpstreamServerPort If getting content from another server, port for traffic .PARAMETER UpstreamServerSSL If getting content from another server, whether to encrypt the traffic .PARAMETER UpstreamServerReplica Boolean to specify whether to retrieve content from another server .PARAMETER ProxyServerName Host name of proxy server .PARAMETER ProxyServerPort Port of proxy server .PARAMETER ProxyServerCredential Credential to use when authenticating to proxy server .PARAMETER ProxyServerBasicAuthentication Use basic auth for proxy .PARAMETER Languages Specify list of languages for content, or '*' for all .PARAMETER Products List of products to include when synchronizing, by default Windows and Office .PARAMETER Classifications List of content classifications to synchronize to the WSUS server .PARAMETER SynchronizeAutomatically Automatically synchronize the WSUS instance .PARAMETER SynchronizeAutomaticallyTimeOfDay Time of day to schedule an automatic synchronization .PARAMETER SynchronizationsPerDay Number of automatic synchronizations per day .PARAMETER Synchronize Run a synchronization immediately when running Set .PARAMETER ClientTargetingMode An enumerated value that describes if how the Target Groups are populated. Accepts 'Client'(default) or 'Server'. #> function Set-TargetResource { [CmdletBinding()] param ( [Parameter(Mandatory = $true)] [ValidateSet('Present', 'Absent')] [System.String] $Ensure, [Parameter()] [System.Management.Automation.PSCredential] $SetupCredential, [Parameter()] [System.String] $SQLServer, [Parameter()] [System.String] $ContentDir = '%SystemDrive%\WSUS', [Parameter()] [System.Boolean] $UpdateImprovementProgram, [Parameter()] [System.String] $UpstreamServerName, [Parameter()] [System.UInt16] $UpstreamServerPort = 8530, [Parameter()] [System.Boolean] $UpstreamServerSSL, [Parameter()] [System.Boolean] $UpstreamServerReplica, [Parameter()] [System.String] $ProxyServerName, [Parameter()] [System.UInt16] $ProxyServerPort = 80, [Parameter()] [System.Management.Automation.PSCredential] $ProxyServerCredential, [Parameter()] [System.Boolean] $ProxyServerBasicAuthentication, [Parameter()] [System.String[]] $Languages = @('*'), [Parameter()] [System.String[]] $Products = @('Windows', 'Office'), [Parameter()] [System.String[]] $Classifications = @('E6CF1350-C01B-414D-A61F-263D14D133B4', 'E0789628-CE08-4437-BE74-2495B842F43B', '0FA1201D-4330-4FA8-8AE9-B877473B6441'), [Parameter()] [System.Boolean] $SynchronizeAutomatically, [Parameter()] [System.String] $SynchronizeAutomaticallyTimeOfDay, [Parameter()] [System.UInt16] $SynchronizationsPerDay = 1, [Parameter()] [System.Boolean] $Synchronize, [Parameter()] [ValidateSet('Client', 'Server')] [System.String] $ClientTargetingMode ) # Is WSUS configured? try { if ($WsusServer = Get-WsusServer) { $PostInstall = $false } } catch { $PostInstall = $true } # Complete initial configuration if ($PostInstall) { Write-Verbose -Message $script:localizedData.RunningWsusPostInstall Import-Module $PSScriptRoot\..\..\Modules\PDT\PDT.psm1 $Path = "$($env:ProgramFiles)\Update Services\Tools\WsusUtil.exe" $Path = Invoke-ResolvePath $Path Write-Verbose -Message ($script:localizedData.ResolveWsusUtilExePath -f $Path) $Arguments = 'postinstall ' if ($PSBoundParameters.ContainsKey('SQLServer')) { $Arguments += "SQL_INSTANCE_NAME=$SQLServer " } $Arguments += "CONTENT_DIR=$([Environment]::ExpandEnvironmentVariables($ContentDir))" Write-Verbose -Message ($script:localizedData.WsusUtilArgs -f $Arguments) if ($SetupCredential) { $Process = Start-Win32Process -Path $Path -Arguments $Arguments -Credential $SetupCredential Write-Verbose -Message [string]$Process Wait-Win32ProcessEnd -Path $Path -Arguments $Arguments } else { $Process = Start-Win32Process -Path $Path -Arguments $Arguments Write-Verbose -Message [string]$Process Wait-Win32ProcessEnd -Path $Path -Arguments $Arguments } } # Get WSUS server try { if ($WsusServer = Get-WsusServer) { $Wsus = $true } } catch { $Wsus = $false New-InvalidOperationException -Message $script:localizedData.WSUSConfigurationFailed -ErrorRecord $_ } # Configure WSUS if ($Wsus) { Write-Verbose -Message $script:localizedData.ConfiguringWsus # Get configuration and make sure that the configuration can be saved before continuing $WsusConfiguration = $WsusServer.GetConfiguration() $WsusSubscription = $WsusServer.GetSubscription() Write-Verbose -Message $script:localizedData.CheckPreviousConfig SaveWsusConfiguration # Configure Update Improvement Program Write-Verbose -Message $script:localizedData.ConfiguringUpdateImprove $WsusConfiguration.MURollupOptin = $UpdateImprovementProgram # Configure Upstream Server if ($PSBoundParameters.ContainsKey('UpstreamServerName')) { Write-Verbose -Message $script:localizedData.ConfiguringUpstreamServer $WsusConfiguration.SyncFromMicrosoftUpdate = $false $WsusConfiguration.UpstreamWsusServerName = $UpstreamServerName $WsusConfiguration.UpstreamWsusServerPortNumber = $UpstreamServerPort $WsusConfiguration.UpstreamWsusServerUseSsl = $UpstreamServerSSL $WsusConfiguration.IsReplicaServer = $UpstreamServerReplica } else { Write-Verbose -Message $script:localizedData.ConfiguringWsusMsftUpdates $WsusConfiguration.SyncFromMicrosoftUpdate = $true } # Configure Proxy Server if ($PSBoundParameters.ContainsKey('ProxyServerName')) { Write-Verbose -Message $script:localizedData.ConfiguringWsusProxy $WsusConfiguration.UseProxy = $true $WsusConfiguration.ProxyName = $ProxyServerName $WsusConfiguration.ProxyServerPort = $ProxyServerPort if ($PSBoundParameters.ContainsKey('ProxyServerCredential')) { Write-Verbose -Message $script:localizedData.ConfiguringProxyCred $WsusConfiguration.ProxyUserDomain = $ProxyServerCredential.GetNetworkCredential().Domain $WsusConfiguration.ProxyUserName = $ProxyServerCredential.GetNetworkCredential().UserName $WsusConfiguration.SetProxyPassword($ProxyServerCredential.GetNetworkCredential().Password) $WsusConfiguration.AllowProxyCredentialsOverNonSsl = $ProxyServerBasicAuthentication $WsusConfiguration.AnonymousProxyAccess = $false } else { Write-Verbose -Message $script:localizedData.RemovingProxyCred $WsusConfiguration.AnonymousProxyAccess = $true } } else { Write-Verbose -Message $script:localizedData.ConfiguringNoProxy $WsusConfiguration.UseProxy = $false } #Languages Write-Verbose -Message $script:localizedData.ConfiguringLanguages if ($Languages -eq '*') { $WsusConfiguration.AllUpdateLanguagesEnabled = $true } else { $WsusConfiguration.AllUpdateLanguagesEnabled = $false $WsusConfiguration.SetEnabledUpdateLanguages($Languages) } #ClientTargetingMode if ($PSBoundParameters.ContainsKey('ClientTargetingMode')) { Write-Verbose -Message $script:localizedData.ConfiguringClientTargetMode $WsusConfiguration.TargetingMode = $ClientTargetingMode } # Save configuration before initial sync SaveWsusConfiguration # Post Install if ($PostInstall) { Write-Verbose -Message $script:localizedData.RemovingDefaultInit # remove default products & classification foreach ($Product in ($WsusServer.GetSubscription().GetUpdateCategories().Title)) { Get-WsusProduct | Where-Object -FilterScript { $_.Product.Title -eq $Product } | ` Set-WsusProduct -Disable } foreach ($Classification in ` ($WsusServer.GetSubscription().GetUpdateClassifications().ID.Guid)) { Get-WsusClassification | Where-Object -FilterScript { $_.Classification.ID -eq $Classification } | ` Set-WsusClassification -Disable } if ($Synchronize) { Write-Verbose -Message $script:localizedData.RunningInitSync $WsusServer.GetSubscription().StartSynchronizationForCategoryOnly() while ($WsusServer.GetSubscription().GetSynchronizationStatus() -eq 'Running') { Start-Sleep -Seconds 1 } if ($WsusServer.GetSubscription().GetSynchronizationHistory()[0].Result -eq 'Succeeded') { Write-Verbose -Message $script:localizedData.InitSyncSuccess $WsusConfiguration.OobeInitialized = $true SaveWsusConfiguration } else { Write-Verbose -Message $script:localizedData.InitSyncFailure } } else { Write-Verbose -Message $script:localizedData.RunningInitOfflineSync $TempFile = [IO.Path]::GetTempFileName() $CABPath = Join-Path -Path $PSScriptRoot -ChildPath '\WSUS.cab' $Arguments = 'import ' $Arguments += "`"$CABPath`" $TempFile" Write-Verbose -Message ($script:localizedData.WsusUtilArgs -f $Arguments) if ($SetupCredential) { $Process = Start-Win32Process -Path $Path -Arguments $Arguments -Credential $SetupCredential Write-Verbose -Message [string]$Process Wait-Win32ProcessEnd -Path $Path -Arguments $Arguments } else { $Process = Start-Win32Process -Path $Path -Arguments $Arguments Write-Verbose -Message [string]$Process Wait-Win32ProcessEnd -Path $Path -Arguments $Arguments } $WsusConfiguration.OobeInitialized = $true SaveWsusConfiguration } } # Configure WSUS subscription if ($WsusConfiguration.OobeInitialized) { $wsusSubscription = $WsusServer.GetSubscription() # Products Write-Verbose -Message $script:localizedData.ConfiguringProducts $productCollection = New-Object Microsoft.UpdateServices.Administration.UpdateCategoryCollection $allWsusProducts = $WsusServer.GetUpdateCategories() switch ($Products) { # All Products '*' { Write-Verbose -Message $script:localizedData.ConfiguringAllProducts foreach ($prdct in $AllWsusProducts) { $null = $productCollection.Add($WsusServer.GetUpdateCategory($prdct.Id)) } continue } # if Products property contains wildcard like "Windows*" {[System.Management.Automation.WildcardPattern]::ContainsWildcardCharacters($_)} { $wildcardPrdct = $_ Write-Verbose -Message $($script:localizedData.ConfiguringWildcardProducts -f $wildcardPrdct) if ($wsusProduct = $allWsusProducts | Where-Object -FilterScript { $_.Title -like $wildcardPrdct }) { foreach ($prdct in $wsusProduct) { $null = $productCollection.Add($WsusServer.GetUpdateCategory($prdct.Id)) } } else { Write-Verbose -Message $script:localizedData.NoWildcardProductFound } continue } <# We can try to add GUID support for product with : $StringGuid ="077e4982-4dd1-4d1f-ba18-d36e419971c1" $ObjectGuid = [System.Guid]::New($StringGuid) $IsEmptyGUID = $ObjectGuid -eq [System.Guid]::empty Maybe with function #> default { Write-Verbose -Message $($script:localizedData.ConfiguringNameProduct -f $_) $prdct = $_ if ($WsusProduct = $allWsusProducts | Where-Object -FilterScript { $_.Title -eq $prdct }) { foreach ($pdt in $WsusProduct) { $null = $productCollection.Add($WsusServer.GetUpdateCategory($pdt.Id)) } } else { Write-Verbose -Message $script:localizedData.NoNameProductFound } } } $wsusSubscription.SetUpdateCategories($ProductCollection) # Classifications Write-Verbose -Message $script:localizedData.ConfiguringClassifications $ClassificationCollection = New-Object Microsoft.UpdateServices.Administration.UpdateClassificationCollection $AllWsusClassifications = $WsusServer.GetUpdateClassifications() if ($Classifications -eq '*') { foreach ($Classification in $AllWsusClassifications) { $null = $ClassificationCollection.Add($WsusServer.GetUpdateClassification($Classification.Id)) } } else { foreach ($Classification in $Classifications) { if ($WsusClassification = $AllWsusClassifications | Where-Object -FilterScript { $_.ID.Guid -eq $Classification }) { $null = $ClassificationCollection.Add( $WsusServer.GetUpdateClassification($WsusClassification.Id) ) } else { Write-Verbose -Message ($script:localizedData.ClassificationNotFound -f $Classification) } } } $WsusSubscription.SetUpdateClassifications($ClassificationCollection) #Synchronization Schedule Write-Verbose -Message $script:localizedData.ConfiguringSyncSchedule $WsusSubscription.SynchronizeAutomatically = $SynchronizeAutomatically if ($PSBoundParameters.ContainsKey('SynchronizeAutomaticallyTimeOfDay')) { $WsusSubscription.SynchronizeAutomaticallyTimeOfDay = $SynchronizeAutomaticallyTimeOfDay } $WsusSubscription.NumberOfSynchronizationsPerDay = $SynchronizationsPerDay $WsusSubscription.Save() if ($Synchronize) { Write-Verbose -Message $script:localizedData.SynchronizingWsus $WsusServer.GetSubscription().StartSynchronization() while ($WsusServer.GetSubscription().GetSynchronizationStatus() -eq 'Running') { Start-Sleep -Seconds 1 } if ($WsusServer.GetSubscription().GetSynchronizationHistory()[0].Result -eq 'Succeeded') { Write-Verbose -Message $script:localizedData.InitSyncSuccess } else { Write-Verbose -Message $script:localizedData.InitSyncFailure } } } } if (-not (Test-TargetResource @PSBoundParameters)) { $errorMessage = $script:localizedData.TestFailedAfterSet New-InvalidResultException -Message $errorMessage } } <# .SYNOPSIS Configures a WSUS server instance .PARAMETER Ensure Determines if the task should be created or removed. Accepts 'Present'(default) or 'Absent'. .PARAMETER SetupCredential Credential to use when running setup. Applicable when using SQL as data store. .PARAMETER SQLServer Optionally specify a SQL instance to store WSUS data .PARAMETER ContentDir Location to store WSUS content files .PARAMETER UpdateImprovementProgram Provide feedback to Microsoft to help improve WSUS .PARAMETER UpstreamServerName Name of another WSUS server to retrieve content from .PARAMETER UpstreamServerPort If getting content from another server, port for traffic .PARAMETER UpstreamServerSSL If getting content from another server, whether to encrypt the traffic .PARAMETER UpstreamServerReplica Boolean to specify whether to retrieve content from another server .PARAMETER ProxyServerName Host name of proxy server .PARAMETER ProxyServerPort Port of proxy server .PARAMETER ProxyServerCredential Credential to use when authenticating to proxy server .PARAMETER ProxyServerBasicAuthentication Use basic auth for proxy .PARAMETER Languages Specify list of languages for content, or '*' for all .PARAMETER Products List of products to include when synchronizing, by default Windows and Office .PARAMETER Classifications List of content classifications to synchronize to the WSUS server .PARAMETER SynchronizeAutomatically Automatically synchronize the WSUS instance .PARAMETER SynchronizeAutomaticallyTimeOfDay Time of day to schedule an automatic synchronization .PARAMETER SynchronizationsPerDay Number of automatic synchronizations per day .PARAMETER Synchronize Run a synchronization immediately when running Set .PARAMETER ClientTargetingMode An enumerated value that describes if how the Target Groups are populated. Accepts 'Client'(default) or 'Server'. #> function Test-TargetResource { [CmdletBinding()] [OutputType([System.Boolean])] param ( [Parameter(Mandatory = $true)] [ValidateSet('Present', 'Absent')] [System.String] $Ensure, [Parameter()] [System.Management.Automation.PSCredential] $SetupCredential, [Parameter()] [System.String] $SQLServer, [Parameter()] [System.String] $ContentDir, [Parameter()] [System.Boolean] $UpdateImprovementProgram, [Parameter()] [System.String] $UpstreamServerName, [Parameter()] [System.UInt16] $UpstreamServerPort = 8530, [Parameter()] [System.Boolean] $UpstreamServerSSL, [Parameter()] [System.Boolean] $UpstreamServerReplica, [Parameter()] [System.String] $ProxyServerName, [Parameter()] [System.UInt16] $ProxyServerPort = 80, [Parameter()] [System.Management.Automation.PSCredential] $ProxyServerCredential, [Parameter()] [System.Boolean] $ProxyServerBasicAuthentication, [Parameter()] [System.String[]] $Languages = @('*'), [Parameter()] [System.String[]] $Products = @('Windows', 'Office'), [Parameter()] [System.String[]] $Classifications = @('E6CF1350-C01B-414D-A61F-263D14D133B4', 'E0789628-CE08-4437-BE74-2495B842F43B', '0FA1201D-4330-4FA8-8AE9-B877473B6441'), [Parameter()] [System.Boolean] $SynchronizeAutomatically, [Parameter()] [System.String] $SynchronizeAutomaticallyTimeOfDay, [Parameter()] [System.UInt16] $SynchronizationsPerDay = 1, [Parameter()] [System.Boolean] $Synchronize, [Parameter()] [ValidateSet('Client', 'Server')] [System.String] $ClientTargetingMode ) $Wsus = Get-TargetResource -Ensure $Ensure # Test Ensure if ($Wsus.Ensure -ne $Ensure) { Write-Verbose -Message $script:localizedData.EnsureTestFailed return $false } # Test Update Improvement Program if ($Wsus.UpdateImprovementProgram -ne $UpdateImprovementProgram) { Write-Verbose -Message $script:localizedData.ImproveProgramTestFailed return $false } # Test Upstream Server if ($Wsus.UpstreamServerName -ne $UpstreamServerName) { Write-Verbose -Message $script:localizedData.UpstreamNameTestFailed return $false } if ($PSBoundParameters.ContainsKey('UpstreamServerName')) { if ($Wsus.UpstreamServerPort -ne $UpstreamServerPort) { Write-Verbose -Message $script:localizedData.UpstreamPortTestFailed return $false } if ($Wsus.UpstreamServerSSL -ne $UpstreamServerSSL) { Write-Verbose -Message $script:localizedData.UpstreamSSLTestFailed return $false } if ($Wsus.UpstreamServerReplica -ne $UpstreamServerReplica) { Write-Verbose -Message $script:localizedData.UpstreamReplicaTestFailed return $false } } # Test Proxy Server if ($Wsus.ProxyServerName -ne $ProxyServerName) { Write-Verbose -Message $script:localizedData.ProxyNameTestFailed return $false } if ($PSBoundParameters.ContainsKey('ProxyServerName')) { if ($Wsus.ProxyServerPort -ne $ProxyServerPort) { Write-Verbose -Message $script:localizedData.ProxyPortTestFailed return $false } if ($PSBoundParameters.ContainsKey('ProxyServerCredential')) { if ( ($null -eq $Wsus.ProxyServerCredentialUserName) -or ($Wsus.ProxyServerCredentialUserName -ne $ProxyServerCredential.UserName) ) { Write-Verbose -Message $script:localizedData.ProxyCredTestFailed return $false } if ($Wsus.ProxyServerBasicAuthentication -ne $ProxyServerBasicAuthentication) { Write-Verbose -Message $script:localizedData.ProxyBasicAuthTestFailed return $false } } else { if ($null -ne $Wsus.ProxyServerCredentialUserName) { Write-Verbose -Message $script:localizedData.ProxyCredSetTestFailed return $false } } } # Test Languages if ($Wsus.Languages.count -le 1 -and $Languages.count -le 1 -and $Languages -ne '*') { if ($Wsus.Languages -notmatch $Languages) { Write-Verbose -Message $script:localizedData.LanguageAsStrTestFailed return $false } } else { if ($null -ne (Compare-Object -ReferenceObject ($Wsus.Languages | Sort-Object -Unique) ` -DifferenceObject ($Languages | Sort-Object -Unique) -SyncWindow 0)) { Write-Verbose -Message $script:localizedData.LanguageSetTestFailed return $false } } # Test Products try { $wsusServer = Get-WsusServer -ErrorAction Stop } catch { Write-Verbose -Message $script:localizedData.TestGetWsusServer return $false } $allWsusProducts = $wsusServer.GetUpdateCategories() [System.Collections.ArrayList]$productCollection = @() switch ($Products) { # All Products '*' { Write-Verbose -Message $script:localizedData.GetAllProductForTest foreach ($prdct in $allWsusProducts) { $null = $productCollection.Add($prdct.Title) } continue } # if Products property contains wild card like "Windows*" {[System.Management.Automation.WildcardPattern]::ContainsWildcardCharacters($_)} { $wildcardPrdct = $_ Write-Verbose -Message $($script:localizedData.GetWildCardProductForTest -f $wildcardPrdct) if ($wsusProduct = $allWsusProducts | Where-Object -FilterScript { $_.Title -like $wildcardPrdct }) { foreach ($pdt in $wsusProduct) { $null = $productCollection.Add($pdt.Title) } } else { Write-Verbose -Message $script:localizedData.NoWildcardProductFound } continue } <# We can try to add GUID support for product with : $StringGuid ="077e4982-4dd1-4d1f-ba18-d36e419971c1" $ObjectGuid = [System.Guid]::New($StringGuid) $IsEmptyGUID = $ObjectGuid -eq [System.Guid]::empty Maybe with function #> default { $prdct = $_ Write-Verbose -Message $($script:localizedData.GetNameProductForTest -f $prdct) if ($wsusProduct = $allWsusProducts | Where-Object -FilterScript { $_.Title -eq $prdct }) { foreach ($pdt in $wsusProduct) { $null = $ProductCollection.Add($pdt.Title) } } else { Write-Verbose -Message $script:localizedData.NoNameProductFound } } } if ($null -ne (Compare-Object -ReferenceObject ($Wsus.Products | Sort-Object -Unique) ` -DifferenceObject ($productCollection | Sort-Object -Unique) -SyncWindow 0)) { Write-Verbose -Message $script:localizedData.ProductTestFailed return $false } # Test Classifications if ($null -ne (Compare-Object -ReferenceObject ($Wsus.Classifications | Sort-Object -Unique) ` -DifferenceObject ($Classifications | Sort-Object -Unique) -SyncWindow 0)) { Write-Verbose -Message $script:localizedData.ClassificationsTestFailed return $false } # Test Synchronization Schedule if ($SynchronizeAutomatically) { if ($PSBoundParameters.ContainsKey('SynchronizeAutomaticallyTimeOfDay')) { if ($Wsus.SynchronizeAutomaticallyTimeOfDay -ne $SynchronizeAutomaticallyTimeOfDay) { Write-Verbose -Message $script:localizedData.SyncTimeOfDayTestFailed return $false } } if ($Wsus.SynchronizationsPerDay -ne $SynchronizationsPerDay) { Write-Verbose -Message $script:localizedData.SyncPerDayTestFailed return $false } } # Test Client Targeting Mode if ($ClientTargetingMode) { if ($PSBoundParameters.ContainsKey('ClientTargetingMode')) { if ($Wsus.ClientTargetingMode -ne $ClientTargetingMode) { Write-Verbose -Message $script:localizedData.ClientTargetingModeTestFailed return $false } } } return $true } <# .SYNOPSIS Saves the WSUS configuration #> function SaveWsusConfiguration { do { try { $WsusConfiguration.Save() $WsusConfigurationReady = $true } catch { $WsusConfigurationReady = $false Start-Sleep -Seconds 1 } } until ($WsusConfigurationReady) } Export-ModuleMember -Function *-TargetResource |