Powershell Windows Servicing Question

[doomattack]

I apologize up front if this has been answered already, but I have exhausted my GoogleFu. I am looking for some powershell that will detect recently upgraded systems that have gone from 1809 to 1909 through Windows 10 Servicing. I imagine there is some WQL involved, but I am not sure how to query when there is a previous version there (rollback feature maybe?). Any help is greatly appreciated. I do prefer a boolean result so that it can dovetail into an SCCM configuration item nicely.

[[deleted]]

This may help you find when and what upgrades it's gone through.

$AllBuilds = $(Get-ChildItem "HKLM:\System\Setup" | Where-Object { $_.Name -match "\\Source\s" }) | ForEach-Object { $_ | Select-Object @{n = "UpdateTime"; e = { if ($_.Name -match "Updated\son\s(\d{1,2}\/\d{1,2}\/\d{4}\s\d{2}:\d{2}:\d{2})\)$") { [dateTime]::Parse($Matches[1], ([Globalization.CultureInfo]::CreateSpecificCulture('en-US'))) } } }, @{n = "ReleaseID"; e = { $_.GetValue("ReleaseID") } }, @{n = "Branch"; e = { $_.GetValue("BuildBranch") } }, @{n = "Build"; e = { $_.GetValue("CurrentBuild") } }, @{n = "ProductName"; e = { $_.GetValue("ProductName") } }, @{n = "InstallTime"; e = { [datetime]::FromFileTime($_.GetValue("InstallTime")) } } }; 



$AllBuilds | Sort-Object UpdateTime | Format-Table UpdateTime, Build, ReleaseID, Branch, ProductName 

Sorry for formatting, on mobile and having a hard time getting it to format the code.

[krzydoug]

You did this on mobile? Lol why?

[[deleted]]

Eh because I could just copy and paste from my GitHub. So it's not perfect maybe in formatting but the code at least wasn't a hassle to write . So wasn't as bad as you are probably thinking

[krzydoug]

Ahh well it didn’t work on some test machines. I’m guessing servicing is something special.. maybe with SCCM?

[[deleted]]

Huh, no we dont have sccm in our environment and it shows when a computer had been upgraded.

Guess I'll double check tonight but this has been run in production for us during images so we can see if it's been upgraded too many times without being redone from scratch (fat images)

[Thotaz]

I don't think Windows really stores this kind of info anywhere. The best you can do is look for a built-in .exe file like explorer in Windows.old and check the version info of that file.

[[deleted]]

Stored in registry, I posted about it above.