????
Your IP : 216.73.216.152
# Copyright � 2017, Microsoft Corporation. All rights reserved.
# =============================================================
# Load Utilities
#=================================================================================
. .\CL_Utility.ps1
. .\CL_SetupEnv.ps1
. .\CL_Service.ps1
#=================================================================================
# Get-DateLastWeek
# Function gets the last week starting from midnight
#=================================================================================
function Get-DateLastWeek()
{
$lastweek = (Get-Date) - (New-Timespan -day 8)
$lastweek = $lastweek.addminutes(-($lastweek.minute))
$lastweek = $lastweek.addhours(-($lastweek.hour))
$lastweek = $lastweek.addseconds(-($lastweek.second))
return $lastweek
}
#=================================================================================
# Get-ComponentAndErrorCode
#=================================================================================
function Get-ComponentAndErrorCode([string]$msg)
{
$codes=[regex]::matches($msg, "0x[a-f0-9a-f0-9A-F0-9A-F0-9]{6,8}")
if($codes.count -gt 1)
{
$codeList = ""
# there can be more than one error code can be returned for the same component at once
foreach($code in $codes)
{
$codeList += "_" + $code
}
return $codeList
}
else
{
return $codes[0].Value
}
}
#=================================================================================
# Get-DatedEvents
# Gets the dated events from given date to present date
#=================================================================================
function Get-DatedEvents($eventlog)
{
$datedEvents = @()
if($eventlog -eq $null)
{
return $null
}
foreach($event in $eventlog)
{
#$eventMsg = $event.Message
$datedEvents += $event.Message
}
return $datedEvents
}
#=================================================================================
# Get-SystemEvents
# Function to get the Windows Event logs
#=================================================================================
function Get-SystemEvents($eventSrc,$time)
{
$events = Get-WinEvent -ProviderName $eventsSrc -ErrorAction 0 | ?{($_.LevelDisplayName -ne "Information") -and (($_.Id -eq 20) -or ($_.Id -eq 25)) -and ($_.TimeCreated -gt $time)}
return $events
}
#=================================================================================
# HasWinUpdateErrorInLastWeek
#=================================================================================
function HasWinUpdateErrorInLastWeek([switch]$allLastWeekError)
{
$events = @()
$eventsSrc = "Microsoft-Windows-WindowsUpdateClient"
$startTime = (Get-Date) - (New-TimeSpan -Day 8)
$wuEvents = Get-SystemEvents $eventsSrc $startTime
if($wuEvents -eq $null)
{
return $null
}
$events += Get-DatedEvents $wuEvents
$latestError = Get-ComponentAndErrorCode $events[0]
$errorList = @{}
$errorList.add("latest",$latestError)
if($allLastWeekError)
{
foreach($str in $events)
{
$ecode = Get-ComponentAndErrorCode $str
if($ecode -ne $null -and !$errorList.ContainsValue($ecode))
{
$errorList.add($ecode,$ecode)
}
}
}
return $errorList
}
#*=================================================================================
# Get-AllErrorCodes
#*=================================================================================
function Get-AllErrorCodes()
{
return (HasWinUpdateErrorInLastWeek -AllLastWeekError)
}
function Test-ServiceStarted($serviceName)
{
<#
.DESCRIPTION:
Function that checks whether a service is started or not
.ARGUMENT:
ServiceName - Name of the service
.RETURNS:
<True> if service started otherwise <false>
#>
if($serviceName -eq $null)
{
return $false
}
$service=get-service $serviceName
if($service.status -ieq "running")
{
return $true
}
return $false
}
function Test-PostBack
{
[CmdletBinding()]
PARAM
(
[Alias('S')]
[Parameter(Position = 1, Mandatory = $true, ValueFromPipeline = $true, ValueFromPipelineByPropertyName = $true)]
[string] $CurrentScriptName
)
PROCESS
{
# Writing the trace to current directory
$CurrentScriptName = ("{0}.temp" -f [System.IO.Path]::GetFileNameWithoutExtension($CurrentScriptName))
if(Test-Path($CurrentScriptName))
{
return $true
}
'Executed' >> $CurrentScriptName
return $false
}
}
function Test-ConnectedToInternet
{
$NLMType = [Type]::GetTypeFromCLSID('DCB00C01-570F-4A9B-8D69-199FDBA5723B')
$INetworkListManager = [Activator]::CreateInstance($NLMType)
return ($INetworkListManager.IsConnectedToInternet -eq $true)
}
function Test-UpdateAvailable
{
# Default value to return in case we fail to search for updates
$results = $false
try
{
$PowerShell = [PowerShell]::Create()
[void]$PowerShell.AddScript({
$updateSession = New-Object -ComObject Microsoft.Update.Session
$updateSearcher = $updateSession.CreateUpdateSearcher()
$searchResult = $updateSearcher.Search("IsInstalled = 0")
return ($searchResult.Updates.Count -gt 0)
})
# Start executing the script block asynchronously in a separate thread in the current runspace
$AsyncTask = $PowerShell.BeginInvoke()
# Wait till IsCompleted is signalled or timeout expires
$AsyncTask.AsyncWaitHandle.WaitOne(60000) | Out-Null
if ($AsyncTask.IsCompleted -eq $false)
{
# If the async activity was not complete then terminate it. You will not have access to the results of the asynchronous invoke.
$PowerShell.Stop() | Out-Null
}
else
{
#Async activity completed before timeout. Retrieve the results.
$AsyncResultCollection = $PowerShell.EndInvoke($AsyncTask)
if (($AsyncResultCollection.Count -eq 1) -and ($AsyncResultCollection[0] -is [System.Boolean]))
{
$results = $AsyncResultCollection[0]
}
}
$PowerShell.Dispose() | Out-Null
}
catch
{}
return $results
}
function Get-PendingReboot
{
<#
SYNOPSIS:
Gets the pending reboot status on a local computer.
DESCRIPTION:
This function will query the registry on a local or remote computer and determine if the
system is pending a reboot, from Microsoft updates, Configuration Manager Client SDK, Pending Computer
Rename, Domain Join or Pending File Rename Operations. For Windows 2008+ the function will query the
CBS registry key as another factor in determining pending reboot state. "PendingFileRenameOperations"
and "Auto Update\RebootRequired" are observed as being consistent across Windows Server 2003 & 2008.
CBServicing : Component Based Servicing (Windows 2008+)
WindowsUpdate : Windows Update / Auto Update (Windows 2003+)
CCMClientSDK : SCCM 2012 Clients only (DetermineIfRebootPending method) otherwise $null value
PendingComputerRename : Detects either a computer rename or domain join operation (Windows 2003+)
PendingFileRename : PendingFileRenameOperations (Windows 2003+)
PendingFileRenameValue : PendingFileRenameOperations registry value; used to filter if needed, some Anti-Virus
leverage this key for def/dat removal, giving a false positive PendingReboot
EXAMPLE:
PS C:\> Get-PendingReboot
CBServicing : False
WindowsUpdate : True
CCMClient : False
PendingComputerRename : False
PendingFileRename : False
PendingFileRenameValue : {\??\C:\Users\Administrator\AppData\Local\Temp\nsz994B.tmp\p\syschk.dll, , \??\C:\Users\Administrator\AppData\Local\Temp\nsz994B.tmp\p\, ...}
RebootPending : True
This example will query the local machine for pending reboot information.
LINK:
Component-Based Servicing:
http://technet.microsoft.com/en-us/library/cc756291(v=WS.10).aspx
PendingFileRename/Auto Update:
http://support.microsoft.com/kb/2723674
http://technet.microsoft.com/en-us/library/cc960241.aspx
http://blogs.msdn.com/b/hansr/archive/2006/02/17/patchreboot.aspx
SCCM 2012/CCM_ClientSDK:
http://msdn.microsoft.com/en-us/library/jj902723.aspx
#>
try
{
$Computer = $env:COMPUTERNAME
# Setting pending values to false
$CBSRebootPending = $PendingComputerRename = $PendingFileRename = $SCCM = $Pending = $false
# Making registry connection to the computer
$HKLM = [UInt32] "0x80000002"
$WmiRegistryConnection = [WMIClass] "\\$Computer\root\default:StdRegProv"
# Querying the CBS Registry Key
$RegSubKeysCBS = $WmiRegistryConnection.EnumKey($HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\")
$CBSRebootPending = $RegSubKeysCBS.sNames -contains "RebootPending"
# Query WUAU from the registry
$RegWUAURebootRequired = $WmiRegistryConnection.EnumKey($HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\")
$WUAURebootRequired = $RegWUAURebootRequired.sNames -contains "RebootRequired"
# Query PendingFileRenameOperations from the registry
$RegSubKeySM = $WmiRegistryConnection.GetMultiStringValue($HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\","PendingFileRenameOperations")
$RegValuePFRO = $RegSubKeySM.sValue
# Query JoinDomain key from the registry - These keys are present if pending a reboot from a domain join operation
$Netlogon = $WmiRegistryConnection.EnumKey($HKLM,"SYSTEM\CurrentControlSet\Services\Netlogon").sNames
$PendingDomainJoin = ($Netlogon -contains 'JoinDomain') -or ($Netlogon -contains 'AvoidSpnSet')
# Query ComputerName and ActiveComputerName from the registry
$ActiveComputerName = $WmiRegistryConnection.GetStringValue($HKLM,"SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName\","ComputerName")
$ComputerName = $WmiRegistryConnection.GetStringValue($HKLM,"SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\","ComputerName")
if (($ActiveComputerName -ne $ComputerName) -or $PendingDomainJoin)
{
$PendingComputerRename = $true
}
# If PendingFileRenameOperations has a value set $RegValuePFRO variable to $true
if ($RegValuePFRO)
{
$PendingFileRename = $true
}
# Determine SCCM 2012 Client Reboot Pending Status
# To avoid nested 'if' statements and unneeded WMI calls to determine if the CCM_ClientUtilities class exist, setting EA = 0
$CCMClientSDK = $null
$CCMSplat = @{
NameSpace = 'ROOT\ccm\ClientSDK'
Class = 'CCM_ClientUtilities'
Name = 'DetermineIfRebootPending'
ComputerName = $Computer
ErrorAction = 'Stop'
}
try
{
$CCMClientSDK = Invoke-WmiMethod @CCMSplat
}
catch [System.UnauthorizedAccessException]
{
$CcmStatus = Get-Service -Name CcmExec -ComputerName $Computer -ErrorAction SilentlyContinue
if ($CcmStatus.Status -ne 'Running')
{
Write-Warning "$Computer`: Error - CcmExec service is not running."
$CCMClientSDK = $null
}
}
catch
{
$CCMClientSDK = $null
}
if ($CCMClientSDK)
{
if ($CCMClientSDK.ReturnValue -ne 0)
{
Write-Warning "Error: DetermineIfRebootPending returned error code $($CCMClientSDK.ReturnValue)"
}
if ($CCMClientSDK.IsHardRebootPending -or $CCMClientSDK.RebootPending)
{
$SCCM = $true
}
}
else
{
$SCCM = $null
}
# Creating Custom PSObject and Select-Object Splat
$SelectSplat = @{
Property = (
'CBServicing',
'WindowsUpdate',
'CCMClientSDK',
'PendingComputerRename',
'PendingFileRename',
'PendingFileRenameValue',
'RebootPending'
)}
New-Object -TypeName PSObject -Property @{
CBServicing = $CBSRebootPending
WindowsUpdate = $WUAURebootRequired
CCMClientSDK = $SCCM
PendingComputerRename = $PendingComputerRename
PendingFileRename = $PendingFileRename
PendingFileRenameValue = $RegValuePFRO
RebootPending = ($PendingComputerRename -or $CBSRebootPending -or $WUAURebootRequired -or $SCCM -or $PendingFileRename)
} | Select-Object @SelectSplat
}
catch
{
Write-Warning "$Computer`: $_"
# Updating diagnostics report
if ($ErrorLog) {
Out-File -InputObject "$Computer`,$_" -FilePath $ErrorLog -Append
}
}
}
function Get-PendingRebootOfflineUpdates
{
$updateSession = New-Object -ComObject "Microsoft.Update.Session"
$updateSession.ClientApplicationID = "Script to query updates"
$updateSearcher = $updateSession.CreateUpdateSearcher()
$updateSearcher.Online = 0
[array]$searchResult = [array]($updateSearcher.Search("IsPresent=1 and RebootRequired=1"))
[int]$result = ($searchResult.Updates).Count
if($result -ge 1)
{
return $true
}
return $false
}