mgajda83 / PSWindowsUpdate

This module contain cmdlets to manage Windows Update Client.
MIT License
253 stars 24 forks source link

Enforce WUfB DS Driver Approvals #24

Open nkasco opened 1 month ago

nkasco commented 1 month ago

WU client is great at figuring out what drivers are applicable for your device. However, IT Professionals now use WUfB DS (most often managed through Intune, but it's an entirely separate product and set of APIs in the Cloud)

Need a way to seamlessly replicate what the native WU client does when it determines which drivers are both applicable and approved. This allows maintained control for what is allowed to install, instead of blindly installing anything available.

I haven't found anything noteworthy in IUpdateSearcher to do this, so I'm going out on a limb and guessing that native WU client is also making an API call when it checks and comparing it's returned list of compliance changes against what the API says is approved to install. If true, this is still possible to do in PS, but gets much more tricky UX wise to run asynchronously due to needing to authenticate to the Graph API (client secret or certificate would be easiest). Interactively also would suffer slightly as you'd get an authentication popup.