Join Brien Posey for an in-depth discussion in this video Use reports to identify required updates in WSUS, part of Windows 10: Plan and Implement Software Updates.
- [Instructor] If you use the Windows Server Update Services to apply updates to the computers on your network, then it's important to be able to find out which updates have been applied and which have not. Thankfully, the Windows Server Update Services have a really good reporting engine. So I want to show you how the reporting function works. Now before I get started, it's worth noting that there are two prerequisite components that you'll need. I've already installed the prerequisites in the interest of time, but you're going to need to download and install two components.
First, you're going to need the Microsoft Systems CLR Type Option and that's found in the SQL Server 2012 feature pack. You can go out to Microsoft, search on the SQL Server 2012 feature pack and download that component. The other component you're going to need is the Microsoft Report Viewer 2012 redistributable. Again, you can perform a simple web search on Microsoft Report Viewer 2012 Redistributable and download and install that update, it's really easy. So, with that said let's take a look at the recording function.
Within the WSUS console you can see that we have a container called Reports and when I click on that we have a lot of different reports that are available. So let's take a look at a couple of these reports. We'll start with the Computer Status Summary report. I'll go ahead and click on that now. So now I'm taken into the report and we have a number of options here. Right now this is creating a summary report, but we could create a detailed report or a tabular report instead. I'm going to stick with the summary report.
We can also include what types of information are included in the report. For this particular report, we could base the report around classifications, products, computers, and status. So right now this report is pretty wide open, but let's narrow it down a little bit. Let's take a look at a specific computer group. So I'm going to click on all computers, and I'm going to only include my Windows Server 2016 computer group, so I'm going to deselect WSUS and I'm going to deselect Unassigned Computers and click OK.
And the individual updates that I'm going to look at are Needed, Failed, and No Status. So let's go ahead and run the report and see what comes back. We can run the report by clicking on run report. And it's worth noting that some of these reports finish quickly like this one just did, but other reports can take a while to complete. So as we look at this report we can see that we're looking at the server wsus srv 1, and for this particular machine we have three updates that have an unknown status.
And if I come up here, I can click the next, and I can look at server in dash wsus dash srv 2, and we can see that this server has one update that has an unknown status. But we also have 70,362 updates that have been installed or aren't applicable. So the server's in pretty good shape, aside from one update that wsus isn't completely sure about. And we can keep going through the list by clicking on the next page button but rather than do that I want to go ahead and close out this report and take a look at another type of report.
The next type of report that I want to look at is the update status summary. So I'm going to click on this, and the options here are really similar to what you've seen in the other report. We can create a summary report, or we could create a detailed report or a tabular report. I'm going to stick with the summary report option. And what we can do, is we can control what types of updates are included via selecting Classifications. We can look at updates for specific products, or for specific computer groups.
And we can look at specific statuses. So, what I'm going to do is I'm going to do the same thing that I did with the other report, I'm going to look at one specific computer group. My Windows Server 2016 group, so I'll click OK here. And I want to look at updates that are either needed, updates that have failed to be applied, or updates that don't have status information because as you'll recall that last report showed us that there were some updates for which no status information was available and I'd really like to know what those updates are. So, now that I've got my options set, I'm going to click run report.
And this one takes a little bit longer to run in most cases. Okay, so the report is complete. And if you look, now we're not looking at individual servers. Instead we're looking at individual updates. So in this case we have a dynamic update for Windows 10 version Next for x64 based systems. And we can see all kinds of information about this particular update. We can see that this is a critical update, it's for Windows 10 dynamic updates. The severity rating is unspecified. And we have a link that we can use to go find out more information about the update.
So we can see that this particular update was approved for installation and we can see that the update has no status on four different computers. Well there are four computers in my Windows Server 2016 computer group. And if I click the next page icon, then I'm taken to another update. This one is a dynamic update for Windows 10 version Next for x86 systems. And we have the same types of information, but if I look down at the status summary information we can see that the update is either installed or it's not applicable on three computers and that there's one computer for which no information is available.
And we can keep going. We can click next page. And now we see that there's a Surface firmware update. And here we can see that once again, the update is either already installed or it's not applicable for three computers and we have one computer for which no information is available right now. So that's how you go about creating reports for the Windows Server Update Services.
- Deploying updates manually
- Monitoring deployments
- Configuring automatic deployment rules
- Analyzing log files
- Approving and declining updates in Intune
- Deploying software from SCCM, WSUS, and Intune