Install-LabWSUS.ps1

<#
     .SYNOPSIS
     This script will install Windows Server Update Services (WSUS) in your lab

     .NOTES
     You need a Windows Server 2012 R2 for this script to work.
     This script is part of a series to automate your lab on www.dominikbritz.com
#>

#Requires -Version 3
#Requires -RunAsAdministrator

###
### Variables
###
$WSUSPartition = 'E:'
$WSUSFolder = 'WSUS'
$Products = @("Windows Server 2012 R2")

###
### Script
###
Try
{
    If (-not (Test-Path $(Join-Path $WSUSPartition $WSUSFolder)))
    {
        New-Item -Path $WSUSPartition -Name $WSUSFolder -ItemType Directory
    }
    Write-Output "Start WSUS installation"
    Install-WindowsFeature -Name UpdateServices -IncludeManagementTools
    Start-Process $(Join-Path $env:ProgramFiles 'Update Services\Tools\wsusutil.exe') -Argumentlist "postinstall CONTENT_DIR=$(Join-Path $WSUSPartition $WSUSFolder)" -Wait

    Write-Output "Start WSUS configuration"
    $WSUS = Get-WSUSServer
    $WSUSConfig = $WSUS.GetConfiguration()
    Set-WsusServerSynchronization -SyncFromMU
    $WSUSConfig.AllUpdateLanguagesEnabled = $false
    $WSUSConfig.SetEnabledUpdateLanguages("en")
    $WSUSConfig.Save()
    $Subscription = $WSUS.GetSubscription()
    $Subscription.StartSynchronizationForCategoryOnly()

    While ($Subscription.GetSynchronizationStatus() -ne 'NotProcessing') {
        Write-Host "." -NoNewline
        Start-Sleep -Seconds 5
    }

    Get-WsusServer | Get-WsusProduct | Where-Object -FilterScript {$_.product.title -match "Office"} | Set-WsusProduct -Disable
    Get-WsusServer | Get-WsusProduct | Where-Object -FilterScript {$_.product.title -match "Windows"} | Set-WsusProduct -Disable

    Foreach ($Product in $Products)
    {
        Get-WsusServer | Get-WsusProduct | Where-Object -FilterScript {$_.product.title -match $Product} | Set-WsusProduct
    }

    Get-WsusClassification | Where-Object {
        $_.Classification.Title -in (
        'Critical Updates',
        'Definition Updates',
        'Feature Packs',
        'Security Updates',
        'Service Packs',
        'Update Rollups',
        'Updates',
        'Upgrades')
    } | Set-WsusClassification

    $Subscription.SynchronizeAutomatically=$true

    Write-Output "Set synchronization scheduled for midnight each night"
    $Subscription.SynchronizeAutomaticallyTimeOfDay= (New-TimeSpan -Hours 0)
    $Subscription.NumberOfSynchronizationsPerDay=1
    $Subscription.Save()

    Write-Output "Kick Off Synchronization"
    $Subscription.StartSynchronization()
    Write-Output "Sleep a minute"
    Start-Sleep -Seconds 60

    Write-Output "Monitor Progress of Synchronisation"
    While ($Subscription.GetSynchronizationProgress().ProcessedItems -ne $Subscription.GetSynchronizationProgress().TotalItems) {
	    Write-Host "." -NoNewline
        Start-Sleep -Seconds 5
    }

    Write-Output "Load .NET assembly"
    [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
    $count = 0

    Write-Output "Connect to WSUS Server"
    $updateServer = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($env:COMPUTERNAME,$false,8530)

    Write-Output "Decline superseded updates"

    $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
    $Updates=$updateServer.GetUpdates($updatescope)

    foreach ($Update in $Updates )
    {
        if ($Update.IsSuperseded -eq 'True')
        {
            $Update.Decline()
            $count=$count + 1
        }
    }
    Write-Output "Total Declined Updates : $count"

    Write-Output "Configure and run default approvalrule"
    [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
    $rule = $WSUS.GetInstallApprovalRules() | Where-Object {
        $_.Name -eq "Default Automatic Approval Rule"}
    $class = $WSUS.GetUpdateClassifications() | Where-Object {$_.Title -In (
        'Critical Updates',
        'Definition Updates',
        'Feature Packs',
        'Security Updates',
        'Service Packs',
        'Update Rollups',
        'Updates',
        'Upgrades')}
    $class_coll = New-Object Microsoft.UpdateServices.Administration.UpdateClassificationCollection
    $class_coll.AddRange($class)
    $rule.SetUpdateClassifications($class_coll)
    $rule.Enabled = $True
    $rule.Save()
    $rule.ApplyRule()

    Write-Output "Finished"
}
Catch
{
    Throw $_
}