Home
Join

Windows update Ansible script

Posted by sth88
Needs answer
IT Programming Imaging, Deployment, & Patching

I have an ansible script that installs windows updates (See below)

---
- hosts: all
  gather_facts: no
  tasks:
    - name: Install all security, critical, and rollup updates
      become: True
      win_updates:
        category_names:
        - SecurityUpdates
        - CriticalUpdates
        server_selection: windows_update
        reboot: no

When I run the script it will fail if there are no updates to be installed. How can I get around this so that the script will run successfully if there are no updates pending to be installed.

Spice (5) Reply (4)
sth88

Enter to win a

Contest ends 2022-08-31 Contest Details View all contests

4 Replies

  • What is the actual error you are getting from Ansible (if you run Ansible in verbose mode)?

    You might be able to use the state attribute. If the search finds anything, it may then look at its state to see if it is installed or not based on the search. Wiki link and reference below: 

    https://docs.ansible.com/ansible/2.5/modules/win_updates_module.html

    Text
    state

Choices:
installed ←
searched

Controls whether found updates are returned as a list or actually installed.
This module also supports Ansible check mode, which has the same effect as setting state=searched

    The only other thing I can think of is running a play that does the search for the updates, putting the results into a register, and then using another play to reference the registered results checking if their state is installed. 

    Was this post helpful? thumb_up thumb_down

  • When running in verbos mode I get the below

    The full traceback is:
    Exception from HRESULT: 0x80072EE2
    At line:503 char:21
    +                   throw $exp
    +                   ~~~~~~~~~~
        + CategoryInfo         : OperationStopped: (:) [], COMException
        + FullyQualifiedErrorId : Exception from HRESULT: 0x80072EE2



    at Invoke-AsyncMethod, <No file>: line 503
    at <ScriptBlock>, <No file>: line 735
    fatal: [SERVER NAME]: FAILED! => {
        "changed": false,
        "failed_update_count": 0,
        "filtered_updates": [],
        "found_update_count": 0,
        "installed_update_count": 0,
        "invocation": {
            "module_args": {
                "accept_list": null,
                "category_names": [
                    "SecurityUpdates",
                    "CriticalUpdates"
                ],
                "log_path": null,
                "reboot": false,
                "reboot_timeout": 1200,
                "reject_list": null,
                "server_selection": "windows_update",
                "skip_optional": false,
                "state": "installed",
                "use_scheduled_task": false
            }
        },
        "msg": "Searching for updates: Exception from HRESULT: 0x80072EE2 - Unknown WUA HRESULT 2147954402 (UNKNOWN 80072EE2)",
        "reboot_required": false,
        "updates": []
    }
    <SERVERNAME> Received final progress result from update task
    EXEC (via pipeline wrapper)
    The full traceback is:
    Exception from HRESULT: 0x80072EE2
    At line:503 char:21
    +                   throw $exp
    +                   ~~~~~~~~~~
        + CategoryInfo         : OperationStopped: (:) [], COMException
        + FullyQualifiedErrorId : Exception from HRESULT: 0x80072EE2



    at Invoke-AsyncMethod, <No file>: line 503
    at <ScriptBlock>, <No file>: line 735
    fatal: [SERVERNAME]: FAILED! => {
        "changed": false,
        "failed_update_count": 0,
        "filtered_updates": [],
        "found_update_count": 0,
        "installed_update_count": 0,
        "invocation": {
            "module_args": {
                "accept_list": null,
                "category_names": [
                    "SecurityUpdates",
                    "CriticalUpdates"
                ],
                "log_path": null,
                "reboot": false,
                "reboot_timeout": 1200,
                "reject_list": null,
                "server_selection": "windows_update",
                "skip_optional": false,
                "state": "installed",
                "use_scheduled_task": false
            }
        },
        "msg": "Searching for updates: Exception from HRESULT: 0x80072EE2 - Unknown WUA HRESULT 2147954402 (UNKNOWN 80072EE2)",
        "reboot_required": false,
        "updates": []
    }

    Was this post helpful? thumb_up thumb_down

  • It looks like the Windows OS is passing back the following error to Ansible:

    Text
    Searching for updates: Exception from HRESULT: 0x80072EE2 - Unknown WUA HRESULT 2147954402 (UNKNOWN 80072EE2)

    I would recommend tracking down that error to see if it gives any clues. Some other questions as well:

    • If you manually run the Windows update from the Windows client, does it give any errors when searching for updates? 
    • What are the OS versions of the Windows clients you are trying to update?
    • How are the Windows client WUAs configured (WSUS, directly to Microsoft, SCCM, etc.)?
    1 found this helpful thumb_up thumb_down

  • If we manually run the updates they install without issue. The client is Windows Server 2019, the client is set to get the updates from WSUS.

    Was this post helpful? thumb_up thumb_down

or sign up to reply to this topic.

Didn't find what you were looking for? Search the forums for similar questions or check out the IT Programming forum.

Read these next...

  • No Network Access

    No Network Access

    Networking

    Hello,Suddenly, my Windows 2012R server has NO network access through either of its two nic cards; it is a DELL PE T430. It is configured to get IP info from DHCP, and that works ok; both NICs can get an IP just fine, but after I get the IP address,  I am...

  • Understanding VPNs

    Understanding VPNs

    Security

    Hello I'm trying to learn the concept of VPN's and there's some aspect of VPN's I'm not sure about. When I configure a remote access VPN on a Fortigate, I configure the following client range 192.168.3.10-192.168.3.40When the client connects and I do a ro...

  • Snap! Outlook crashes, getting phished, supermoon, CyberOne, DALL·E 2 + SpiceRex

    Snap! Outlook crashes, getting phished, supermoon, CyberOne, DALL·E 2 + SpiceRex

    Spiceworks Originals

    Your daily dose of tech news, in brief. We made it to Friday! Before we consider our weekend plans, let's look back in time. While not the storage we're accustomed to, back on August 12, 1877 (although there appears to be some debate on the actual ...

  • Spark! Pro series – 12th August 2022

    Spark! Pro series – 12th August 2022

    Spiceworks Originals

    I want my… I want my…. Spark!    Just a reminder, if you are reading the Spark!, Spice it up. We like it spicy here! Today in History: The IBM PC Introduced August 12, 1981 IBM introduces its ...

  • Repeated Attacks on my Firewall - What to Do ??

    Repeated Attacks on my Firewall - What to Do ??

    Security

    I've got a UTM Firewall and I'm constantly getting notifications that someone is trying to gain access through an SSL-VPN. The attacking IP address is almost always different, so blocking the IP every time is not a sustainable solution. They haven't got t...