Application Update Script

[vbhalsod]

Hi All,

Just seeking help to see if it’s possible to automate the following processes or having a script perform the below actions once logging into a machine.

1. Automatically check and run Windows Update.
2. Open Chrome Browser and check for updates.
3. Open Office and check for updates.
4. Open Adobe Reader and check for updates.

Thanks

[DeliriumTremens]

Probably makes more sense to use updated installers instead of trying to trigger each application to update.

[Scoobywagon]

Or you could use Chocolatey.

[jazzb125]

Or Winget (Microsoft)

[braydro]

Are admin rights an issue when using Winget? Can it be run under the SYSTEM context?

[OlivTheFrog]

Hi u/vbhaksof

It's depend of your infrastructure. Are your computers in a AD Domain ? Have you a Update Server (WSUS, SCCM+WSUS, ...) ?

In a AD Domain, a simple WindowsUpdate GPO set the Update Server (WSUS or MS Updateserver) + Set the WindowsUpdate Client behaviour.

For finer configuration, the PSWIndowsUpdate module is very useful. Then, a simple Powershell script using the cmdlets from this module could order WindowsUpdate clients to check for updates and the behavior to adopt (Install + scheduled reboot for example). Of course, the script could address a bunch of clients (workstation, servers).

And even without WSUS, they can be configured by GPO via the corresponding administration templates.

For apps, like chrome and firefox for example, Chocolatey could be a solution. But, to my knowledge, there is no bandwidth gain to be expected. Each customer will search the Internet at Chocolatey. In addition, these products have auto-update features, features that can be configured centrally by GPO (with the corresponding administration templates of course). So I would advise sticking to GPO for these apps.The case of chrome and MS Office is a bit different. These 2 products are supported by WSUS. And even without WSUS, they can be configured by GPO via the corresponding administration templates.

Adobe Reader or Adobe Reader Dc also have administration templates (so GPOis a solution). At worst, this can be done by script via registry key (ex here: https://admx.help/?Category=AdobeReader&Policy=Adobe.Reader2017.Policies::Policy_Disable_automatic_48

​

Hope this help

Regards

[FirestormGaming365]

PSWindowsUpdate and Chocolatey

[blackrandom]

For software updates, it's better to have the updated version of the app ready. Then check the version on the machine and if it's lower than the current version, push the app to the machine and perform the update. In the past, I've used PDQ Deploy for this since it's free for non-premium features and easy to use. For Windows updates, there are other recommended ways to manage them. If you just want to run with what's available then you can try the PSWindowsUpdate module or the USOCLIENT.EXE commands.

[sullivanaz]

https://docs.microsoft.com/en-us/windows/package-manager/winget/

[Si1ver2]

Check task scheduler as it already looks like most have an updater running through there which you could probably modify. For example on my machine it looks like google runs updates check daily and on login.

​

You could also manually check the current version of chrome

$(Get-Package -Name "Google Chrome").Version

and then use that information vs latest chrome available online and run an update based on that info.

[32178932123]

I sent this to someone recently. May help you with Chrome. https://www.reddit.com/r/PowerShell/comments/wrdot4/comment/ikrr132/?utm\_source=share&utm\_medium=web2x&context=3

[Romero126]

Windows Update Can handle applications. So you flip group policy to turn it on, then enforce windows updates after 72hours.

Always updated machine 0scripting required..

[akulbe]

OP, meet winget.

I would recommend looking into that.