| ## WUSUS post-deplpyment yapilandirma ayarlari |
| . “C:\Program Files\Update Services\Tools\WsusUtil.exe” postinstall CONTENT_DIR=C:\WSUS |
| ### WSUS nesnesinin tanımlanması |
| $wsus = Get-WSUSServer |
| ### WSUS yapilandirma tanimlamasi |
| $wsusConfig = $wsus.GetConfiguration() |
| ### Microsoft güncellemelerinin yapilandirilamsi |
| Set-WsusServerSynchronization –SyncFromMU |
| ### Güncelleme paketi dil tanımlaması sadece ingilizce yapilandirilmisiti bu bölümde istediğiniz dilleri virgul ekleyerek kısa kodunu yazabilirsiniz. |
| $wsusConfig.AllUpdateLanguagesEnabled = $false |
| $wsusConfig.SetEnabledUpdateLanguages(“en”) |
| $wsusConfig.Save() |
| ### WSUS ve Microsoft güncelleme SYNC tanimlamasi |
| $wsus.GetSubscription().StartSynchronizationForCategoryOnly() |
| start-sleep 15 |
| ### SYNC tanimlamasi |
| while ($wsus.GetSubscription().GetSynchronizationStatus() -ne “NotProcessing”) { |
| $time = get-date -UFormat “%H:%M:%S” |
| $total = $wsus.GetSubscription().getsynchronizationprogress().totalitems |
| $processed = $wsus.GetSubscription().getsynchronizationprogress().processeditems |
| $process = $processed/$total |
| $progress = “{0:P0}” -f $process |
| Write-Host “” |
| Write-Host “The first synchronization isn’t completed yet $time” |
| Write-Host “Kindly have patience, the progress is $progress” |
| Start-Sleep 10 |
| } |
| Write-Host “The synchronization has completed at $time” -ForegroundColor Green |
| Write-Host “The WSUS Configuration will now continue” -ForegroundColor Green |
| ### Guncelleme urunlerinin tanimlanmasi, bu bolumu genisletebilrisiniz. Ben örnek için sadece Windows Server 2019 ekledim scritpti genisleterek diger urunleride ekleyebilirsiniz. |
| write-host ‘Setting WSUS Products’ |
| Get-WsusProduct | where-Object { |
| $_.Product.Title -in ( |
| ‘Windows Server 2019’) |
| } | Set-WsusProduct |
| ### Guncelleme sinfilarinin tanimlanmasi yine bu bolumde de siniflari arttirabilir yada azaltabilirsiniz. |
| write-host ‘Setting WSUS Classifications’ |
| Get-WsusClassification | Where-Object { |
| $_.Classification.Title -in ( |
| ‘Critical Updates’, |
| ‘Definition Updates’, |
| ‘Feature Packs’, |
| ‘Security Updates’, |
| ‘Service Packs’, |
| ‘Update Rollups’, |
| ‘Updates’) |
| } | Set-WsusClassification |
| ### SYNC yapilandirmasi |
| write-host ‘Enabling WSUS Automatic Synchronisation’ |
| $subscription = $wsus.GetSubscription() |
| $subscription.SynchronizeAutomatically=$true |
| ### otomatik sync yapilandirmasi |
| $subscription.SynchronizeAutomaticallyTimeOfDay= (New-TimeSpan -Hours 0) |
| $subscription.NumberOfSynchronizationsPerDay=1 |
| $subscription.Save() |
| ### Guncellenecek hedef grubun belirlenmesi |
| $wsus.CreateComputerTargetGroup(“Updates”) |
| ### Guncelleme paketlerinin onaylanmasi |
| write-host ‘Configuring default automatic approval rule’ |
| [void][reflection.assembly]::LoadWithPartialName(“Microsoft.UpdateServices.Administration”) |
| $rule = $wsus.GetInstallApprovalRules() | Where { |
| $_.Name -eq “Default Automatic Approval Rule”} |
| $class = $wsus.GetUpdateClassifications() | ? {$_.Title -In ( |
| ‘Critical Updates’, |
| ‘Security Updates’)} |
| $class_coll = New-Object Microsoft.UpdateServices.Administration.UpdateClassificationCollection |
| $class_coll.AddRange($class) |
| $rule.SetUpdateClassifications($class_coll) |
| $rule.Enabled = $True |
| $rule.Save() |
| ### Computer groupların güncelleme islemi |
| $wsusConfig.OobeInitialized = $true |
| $wsusConfig.Save() |
| ### SYNC baslamasi |
$wsus.GetSubscription().StartSynchronization()
