Windows Update Monitoring

Use this SAM template to check the status of Windows updates, including:

  • How many updates are available.
  • How many updates were installed.
  • If a reboot is required, before or after installing updates.
  • The number of days that passed since the last update.

Note the following details about the Windows Update Monitoring template:

  • This template was designed to be applied to your Windows servers that receive Windows updates, either from Microsoft directly or though a Windows Server Update Services (WSUS) server. It functions the same either way. For example, If your server is managed by WSUS, you'll see how many critical, warning, etc. updates were approved on the WSUS server vs, what's available via Windows Update.
  • The PowerShell component monitors must execute remotely; otherwise the resulting information displayed is from the Orion server itself. If you have trouble applying this application monitor template to a remote server, make sure PowerShell 2.0 or later is installed on the remotely monitored server, and that Windows Remote Management (WinRM) is enabled, as described below. See also Use PowerShell in SAM.

Check THWACK periodically for template updates. With the exception of AppInsight templates, SAM templates are not updated automatically when you upgrade SAM, to avoid overwriting any custom changes made to existing templates. The latest templates are posted on THWACK. To learn more, see Import and export SAM templates.

Prerequisites

WinRM is installed and properly configured on target servers.

Credentials

Administrator privileges on target servers.

Configure WinRM

To configure WinRM:

  1. Install PowerShell 2.0 or later and WinRM on the Orion server and target servers. See Use PowerShell in SAM.
  2. On the Orion server, open a command prompt as an Administrator. To do this, go to the Start menu, right-click cmd.exe and then select Run as Administrator.
  3. At the command prompt on the Orion server, type:
    winrm quickconfig winrm set winrm/config/client @{TrustedHosts="*"}
  4. On the target server, open a command prompt as an Administrator and type:
    winrm quickconfig winrm set winrm/config/client @{TrustedHosts="IP_ADDRESS"}
  5. where IP address is the IP address of your Orion server.

Component monitors

For details on monitors, see SAM component monitors.

Available hidden updates

Returns the number of available hidden updates.

Available critical updates

Returns the number of available critical updates. This should always be zero.

Available optional updates

Returns the number of available optional updates.

Installed updates

Returns the number of installed updates.

Days passed from last Windows Update

Returns the number of days that passed since the last Windows update installation, along with the name of the last installed update.

Windows Updates activity status

Returns the installation status of Windows update.

Possible values:

  • 0 – Windows currently is not installing updates.
  • 1 – Windows currently is installing updates.

Machine restart status before installing Windows Updates

Returns the restart status before installing Windows updates.

Possible values:

  • 0 – No reboot required.
  • 1 – Reboot required before installing updates.

Machine restart status after installing Windows Updates

Returns the restart status after installing Windows updates.

Possible values:

  • 0 – No reboot requires.
  • 1 – Updates installed. Reboot required.

Service: Windows Updates

Monitors the Windows Update service that enables detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer cannot perform Windows updates or use the automatic update feature. If this service is down, programs cannot access the Windows Update Agent (WUA) API.