Automating WSUS Patch Assignment

Assign Patch to Pilot Group

Every day: WSUS Patch Available – After WSUS synchronization, a new WSUS patch is assigned to the Pilot group.

Assign Patch to Other Targets

Script

On GitHub, a script is available to automate the change of the target group.

• In this script, you can change the target group name and the minimum number of days before switching to the next target group.

Assigned to Global1 Group: After a set period, the patch is assigned to the Global1 group using the script.

Assigned to Global2 Group: After another delay, the patch is moved to the Global2 group with the same script.

Schedule Task

Create a scheduled task to run the script on a specific schedule, such as every Monday or daily, depending on your needs.

• Run the task under the System Account.

• In labs, run it daily; in production, consider weekly (e.g., every Monday).

• Use the PS1 script in the “Action” section of the scheduled task.