The original blog and documentation can be found HERE
All my other blogs can be found HERE and HERE
(The version number can be found in the lower left corner of the dashboard. No version number means v1.0)
- Changed update compliance definition and removed the dependency on "LastInstallTime"
- Added more possible error fix actions
- Added logic to hide zero values in diagrams based on feedback from original blog: HERE
- Fixed minor issues
- Fixed a sub-report link problem for WSUS error and install error list
- Added parameter to show data based on current or previous month. The previous month setting is only applicable if updates are deployed with a month delay and does not rely on historical data
- Changed the way compliance for update rollups are shown between first day of month and second Tuesday based on: #11
- Changed the "exclude future deployments" parameter to be able to filter out deployments in one of the following states: Deployed as available, deployment disabled, start time or deadline in the future
- Changed the column "Missing updated approved" to only show missing updates if the corresponding deployment has not been filtered out via the new exclude parameter. The "per device" report still shows all updates no matter the deployment selection
- Added the new deployment exclude parameter also to the "Per device deployments" report. The report will now exclude deployments based on the parameter.
- Added cumulative update prefix like "2022-04" to the dashboard for each rollup bar graph
- Added systems domain name column to each list report
- Added switch "TryOverwrite" to import script. If set, the script will try to overwrite existing report items. Might not work in every case. If successful subscriptions will also be kept.
- Added new filter to the "Per device" report called: "All missing Security and Critical updates deployed or not"
- Removed Security Update requirement in QFE query to improve QFE detection accuracy
- Fixed typo in "Per device" report based on: #9
- Fixes typo in import script
- Fixed sorting issue in "per device" report
- Fixed sorting issue in "per device deployments" report
- Fixed "uncompliant" typo in "compliance list" report via: #15
- Fixed typo in "compare update compliance" via: #14
- Fixed an issue with parameters not correctly handled between the dashboard and most of the sub-reports
- Added "Cumulative Update for Microsoft server operating system" string for server 2022 updates
- Changed the overall compliance state from "all approved and missing updates" + "a security update installation happend within one month" to "All deployments are compliant" + "either the last or the current cumulative update is installed" + "a security update installation happend within one month"
- Added help text to all report column headers
- Added Update install errors bar graph to dashboard (below WSUS scan errors)
- Changed filter for top 10 systems on dashboard to be more accurate
- Added top 10 update install errors to dashboard
- Added new report with details about install errors and WSUS scan errors
- Contains around 400 common windows update related errors with possible actions on how to fix them
- Added new parameter to exclude deployments containing Microsoft Defender and System Center Endpoint Protection updates
- Was previously part of the SQL query and not easily changeable nor visible to the report user
- Removed Server 2008 specific parts
- Added new filter to "per device" report called: "Missing updates with errors" and “All missing updates deployed or not”
- Added more details about errors to "per device" report
- Added update collection and maintenance window list to “per device” report
- Added column: “Earliest Deadline” to “per device” report
- Changed first sub-report name from “all uncompliant” to “compliance list”
- Changed default sort order from "count of missing updates" to "month since last update install"
- Changed "WSUS version" to "OS build version". Easier to determine actual OS version and patch level
- Changed "Defender Pattern Version" to "Defender Pattern Age" to be able to spot systems with older pattern more easily
- Added column "WSUS scan error" to system list
- Added column count of "Updates with install error" to system list
- Added column number of "Deployments non compliant" to system list
- Helps to determine any problems with deployments when all updates are installed, but deployments are still marked as uncompliant
- Added new report to list all update deployments and their states per device
- Made "Per device" and “compliance list" report visible to be able to schedule subscriptions without the dashboard
- Fixed several minor issues with each report
- Changed SQL query for deployed updates to work better in larger environments
- Changed import script to also handle SSRS folder path with spaces in it
- Changed import script to delete existing contents of "work" folder from a previous run
- Changed import script parameter name "Upload" to "DoNotUpload". Function is the same.
- Removed import script parameter "UseViewForDataset". (To much work to keep the view consistent with regular query)
- Added new import script parameters: "ForceLegacyCardinalitySQL2016SP1AndHigher" and "ForceLegacyCardinalityOlderThanSQL2016SP1" Read more about it here
- Fixed language and QFE problem
- Added new parameter -ForceLegacyFormat,
- Fixed minor issues and linked all reports to the per device sub-report
- Fixed wrong parameter name, updated repository with several fixes