IT Automation: Windows Server Update Service

# WSUS Server Configuration and Automation
Import-Module UpdateServices

# Configure WSUS Server Settings
function Configure-WSUSServer {
    param(
        [string]$ServerName,
        [string]$DatabaseName,
        [string]$ContentPath
    )
    
    try {
        # Install WSUS role
        Install-WindowsFeature -Name UpdateServices -IncludeManagementTools
        
        # Configure WSUS with SQL Server
        $wsusConfig = Get-WsusServer
        $wsusConfig.SetDatabaseConnectionString("Server=$ServerName;Database=$DatabaseName;Integrated Security=true")
        
        # Set content path
        $wsusConfig.SetContentPath($ContentPath)
        
        # Configure synchronization settings
        $wsusConfig.SetSynchronizationSchedule("Daily", "02:00")
        
        # Set update languages
        $wsusConfig.SetUpdateLanguages(@("en"))
        
        Write-Host "WSUS Server configured successfully" -ForegroundColor Green
    }
    catch {
        Write-Error "Failed to configure WSUS server: $($_.Exception.Message)"
    }
}

# Automated update approval script
function Approve-UpdatesAutomatically {
    param(
        [string]$ServerName,
        [string[]]$UpdateClassifications = @("SecurityUpdates", "CriticalUpdates"),
        [int]$DaysOld = 7
    )
    
    try {
        $wsus = Get-WsusServer -ComputerName $ServerName
        
        # Get updates that meet criteria
        $updates = Get-WsusUpdate -UpdateServer $wsus | Where-Object {
            $_.UpdateClassificationTitle -in $UpdateClassifications -and
            $_.ArrivalDate -gt (Get-Date).AddDays(-$DaysOld) -and
            $_.ApprovalState -eq "NotApproved"
        }
        
        # Approve updates for all computer groups
        $computerGroups = Get-WsusComputerGroup -UpdateServer $wsus
        
        foreach ($update in $updates) {
            foreach ($group in $computerGroups) {
                $update.Approve("Install", $group)
            }
        }
        
        Write-Host "Approved $($updates.Count) updates automatically" -ForegroundColor Green
    }
    catch {
        Write-Error "Failed to approve updates: $($_.Exception.Message)"
    }
}

# Staged deployment and rollback automation
function Start-StagedDeployment {
    param(
        [string]$UpdateName,
        [string]$ServerName,
        [string[]]$Stages = @("Test", "Pilot", "Production")
    )
    
    try {
        $wsus = Get-WsusServer -ComputerName $ServerName
        
        # Get update
        $update = Get-WsusUpdate -UpdateServer $wsus | Where-Object { $_.Title -like "*$UpdateName*" }
        
        if (-not $update) {
            throw "Update not found: $UpdateName"
        }
        
        # Stage 1: Test Environment
        Write-Host "Stage 1: Deploying to test environment..." -ForegroundColor Yellow
        $testGroup = Get-WsusComputerGroup -UpdateServer $wsus -Name "Test-Servers"
        $update.Approve("Install", $testGroup)
        
        # Wait for test completion
        Start-Sleep -Seconds 300
        
        # Check test results
        $testStatus = Get-UpdateDeploymentStatus -ServerName $ServerName -ComputerGroup "Test-Servers"
        
        if ($testStatus.Failed -gt 0) {
            Write-Host "Test deployment failed. Stopping deployment." -ForegroundColor Red
            return $false
        }
        
        # Stage 2: Pilot Environment
        Write-Host "Stage 2: Deploying to pilot environment..." -ForegroundColor Yellow
        $pilotGroup = Get-WsusComputerGroup -UpdateServer $wsus -Name "Pilot-Servers"
        $update.Approve("Install", $pilotGroup)
        
        # Wait for pilot completion
        Start-Sleep -Seconds 600
        
        # Check pilot results
        $pilotStatus = Get-UpdateDeploymentStatus -ServerName $ServerName -ComputerGroup "Pilot-Servers"
        
        if ($pilotStatus.Failed -gt 0) {
            Write-Host "Pilot deployment failed. Initiating rollback..." -ForegroundColor Red
            Start-RollbackProcedure -UpdateName $UpdateName -ServerName $ServerName
            return $false
        }
        
        # Stage 3: Production Environment
        Write-Host "Stage 3: Deploying to production environment..." -ForegroundColor Yellow
        $prodGroup = Get-WsusComputerGroup -UpdateServer $wsus -Name "Production-Servers"
        $update.Approve("Install", $prodGroup)
        
        Write-Host "Staged deployment completed successfully" -ForegroundColor Green
        return $true
    }
    catch {
        Write-Error "Staged deployment failed: $($_.Exception.Message)"
        return $false
    }
}