Running Updates via SSH

[MaKaNu]

I connected via SSH on my remote clients and tried to update the system. While Reading

Get-WUList

works, the installation of given update don't:

Get-WindowsUpdate -KBArticleID KB5034441 -Hide -Verbose

After questioned if I want to execute the upgrade the script fails with permission issues:

Get-WindowsUpdate : COM001: You don't have permission to perform this task.
In Zeile:1 Zeichen:1
+ Get-WindowsUpdate -KBArticleID KB5034441 -Hide -Verbose
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : CloseError: (:) [Get-WindowsUpdate], Exception
    + FullyQualifiedErrorId : 0x80240044,PSWindowsUpdate.GetWindowsUpdate

Since the SSH Connection is estabilshed via admin-authorized keys I already thought I have elevated rights.

[mgajda83]

This is a limitation of the Windows Update API itself. It must be run locally. Any remote session will return error.

[MaKaNu]

Wow, the windows world is similar restrictive as Apple as it comes to maintenance. I have a few hundred system to maintain, all different and my recent approach via ansible was only partial successful. Either somebody takes huge bite out of their budget or we should switch to a more maintainable system. Sorry for the rant but I had to write it down.