check_win_updates

Check for Updates

To check for updates, this script creates an update searcher of an Microsoft.Update.Session object and filters for updates, which are

• assigned to the machine (IsAssigned=1)
• are not hidden to the users (IsHidden=0)
• are not yet installed (IsInstalled=0)

In case of matches, it outputs the number of uninstalled updates and list the details as performance data.

Check for Reboot

The check for required reboots is performed using an Microsoft.Update.SystemInfo object.

Installation

The installation of course depends on your infrastructure. For example, if your running your checks using the NSClient++, you may save the script as C:Program FilesNSClient++scriptscheck_win_updates.wsf and then add something like that to your C:Program FilesNSClient++nsclient.ini:

[/settings/default]
timeout = 90

[/settings/external scripts/wrappings]
wsf=cscript.exe //T:90 //NoLogo scripts%SCRIPT% %ARGS%

[/settings/external scripts/wrapped scripts]
check_updates = check_win_updates.wsf

The timeout of 90 seconds is primarily for Windows 7 systems, which actually need a lot of time to search through installed updates... Also make sure that your call of the nrpe tool at the monitoring server waits long enough for the answer! (.../check_nrpe3 [...] -t 90 [...]) To properly parse the details about pending updates, you may also need to add

[/settings/external scripts/scripts/default]
ignore perfdata = true

This line tells the NSClient++ to not interprete the update details as performance data, and instead just forwards the details.