<#
.SYNOPSIS
Windows Update と再起動を自動実行します

<CommonParameters> はサポートしていません

.DESCRIPTION
・フルアップデート(-Option Full)
    全ての更新プログラムを適用します

・ミニマムアップデート(-Option Minimum)
    重要な更新プログラムのみを適用します
    オプションを省略した場合はこのモードになります

.EXAMPLE
PS C:\WindowsUpdate> .\AutoWindowsUpdate.ps1 Full

全ての更新プログラムを適用

.EXAMPLE
PS C:\WindowsUpdate> .\AutoWindowsUpdate.ps1

重要な更新プログラムのみを適用

.PARAMETER Option
操作モード
    Full: 全ての更新プログラムを適用
    Minimum: 重要な更新プログラムのみを適用
    省略: 重要な更新プログラムのみを適用

<CommonParameters> はサポートしていません

.LINK
http://www.vwnet.jp/Windows/PowerShell/FullAutoWU.htm
#>

##########################################################################
#
# Windows Update PowerShell
#
#  C:\WindowsUpdate にスクリプトを置いて実行する
#
#   参考サイト: http://yamanxworld.blogspot.jp/2010/07/windows-scripting-windows-update_05.html
#
##########################################################################
param (
        [ValidateSet("Full", "Minimum")][string]$Option # アップデートオプション
    )

# スクリプトの配置場所
$G_MyName = "C:\WindowsUpdate\AutoWindowsUpdate.ps1"

# 最大適用更新数
$G_MaxUpdateNumber = 100

$G_LogPath = "C:\WU_Log"
$G_LogName = "WU_Log.txt"
##########################################################################
# ログ出力
##########################################################################
function Log(
            $LogString
            ){

    $Now = Get-Date

    $Log = "{0:0000}-{1:00}-{2:00} " -f $Now.Year, $Now.Month, $Now.Day
    $Log += "{0:00}:{1:00}:{2:00}.{3:000} " -f $Now.Hour, $Now.Minute, $Now.Second, $Now.Millisecond
    $Log += $LogString

    if( $G_LogName -eq $null ){
        $G_LogName = "LOG"
    }

    $LogFile = $G_LogName +"_{0:0000}-{1:00}-{2:00}.log" -f $Now.Year, $Now.Month, $Now.Day

    # ログフォルダーがなかったら作成
    if( -not (Test-Path $G_LogPath) ) {
        New-Item $G_LogPath -Type Directory
    }

    $LogFileName = Join-Path $G_LogPath $LogFile

    Write-Output $Log | Out-File -FilePath $LogFileName -Encoding Default -append

    Return $Log
}

##########################################################################
# レジストリ追加/更新
##########################################################################
function RegSet( $RegPath, $RegKey, $RegKeyType, $RegKeyValue ){
    # レジストリそのものの有無確認
    $Elements = $RegPath -split "\\"
    $RegPath = ""
    $FirstLoop = $True
    foreach ($Element in $Elements ){
        if($FirstLoop){
            $FirstLoop = $False
        }
        else{
            $RegPath += "\"
        }
        $RegPath += $Element
        if( -not (test-path $RegPath) ){
            Log "Add Registry : $RegPath"
            md $RegPath
        }
    }

    # Key有無確認
    $Result = Get-ItemProperty $RegPath -name $RegKey -ErrorAction SilentlyContinue
    # キーがあった時
    if( $Result -ne $null ){
        Set-ItemProperty $RegPath -name $RegKey -Value $RegKeyValue
    }
    # キーが無かった時
    else{
        # キーを追加する
        New-ItemProperty $RegPath -name $RegKey -PropertyType $RegKeyType -Value $RegKeyValue
    }
    Get-ItemProperty $RegPath -name $RegKey
}

##########################################################################
# Autoexec.ps1 有効
##########################################################################
function EnableAutoexec( $ScriptName, $Option ){
    if( -not (Test-Path $ScriptName)){
        Log "[FAIL] $ScriptName not found !!"
        exit
    }

    ### boot 時に autoexec.ps1 を自動実行するレジストリ設定

    $RegPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup\0"
    $RegKey = "FileSysPath"
    $RegKeyType = "String"
    $RegKeyValue = "C:\\Windows\\System32\\GroupPolicy\\Machine"
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegKey = "PSScriptOrder"
    $RegKeyType = "DWord"
    $RegKeyValue = 3
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup\0\0"
    $RegKey = "Script"
    $RegKeyType = "String"
    $RegKeyValue = "autoexec.ps1"
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegKey = "Parameters"
    $RegKeyType = "String"
    $RegKeyValue = "$Option"
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegKey = "IsPowershell"
    $RegKeyType = "DWord"
    $RegKeyValue = 1
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Scripts\Startup\0"
    $RegKey = "FileSysPath"
    $RegKeyType = "String"
    $RegKeyValue = "C:\\Windows\\System32\\GroupPolicy\\Machine"
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegKey = "PSScriptOrder"
    $RegKeyType = "DWord"
    $RegKeyValue = 3
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Scripts\Startup\0\0"
    $RegKey = "Script"
    $RegKeyType = "String"
    $RegKeyValue = "autoexec.ps1"
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    $RegKey = "Parameters"
    $RegKeyType = "String"
    $RegKeyValue = "$Option"
    RegSet $RegPath $RegKey $RegKeyType $RegKeyValue

    ### 自動実行するスクリプトを autoexec.ps1 に上書きコピー
    $TergetPath = "C:\Windows\System32\GroupPolicy\Machine\Scripts\Startup"
    $TergetFile = Join-Path $TergetPath "autoexec.ps1"
    Log "$ScriptName → $TergetFile"
    if( -not (Test-Path $TergetPath)){
        md $TergetPath
        Log "md $TergetPath"
    }
    copy $ScriptName $TergetFile -Force

    Log "[INFO] $ScriptName → $TergetFile copied"

    if( -not (Test-Path $TergetFile)){
        Log "[FAIL] autoexec.ps1 copy failed !!"
        exit
    }
}

##########################################################################
# Autoexec.ps1 無効
##########################################################################
function DisableAutoexec(){
    $RegPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup\0"
    if(Test-Path $RegPath){
        Remove-Item $RegPath -Recurse -Force -Confirm:$false
    }

    $RegPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Scripts\Startup\0"
    if(Test-Path $RegPath){
        Remove-Item $RegPath -Recurse -Force -Confirm:$false
    }

    $Terget = "c:\Windows\System32\GroupPolicy\Machine\Scripts\Startup\autoexec.ps1"
    if(Test-Path $Terget){
        del $Terget -Force
    }
    Log "[INFO] Autoexec Disabled."}


##########################################################################
#
# main
#
##########################################################################
if (-not(([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator"))) {
    Log "実行には管理権限が必要です"
    exit
}

# 自動起動スクリプト停止
DisableAutoexec

# バージョン確認
$OSData = Get-WmiObject Win32_OperatingSystem
$BuildNumber = $OSData.BuildNumber
$strVersion = $OSData.Version
$strVersion = $strVersion.Replace( ".$BuildNumber", "" )
$Version = [decimal]$strVersion
if( $Version -lt 6.1 ){
    Log "Windows Server 2008 R2 / Windows 7 以降しかサポートしていません"
    exit
}

# スクリプト存在確認
if( -not(Test-Path $G_MyName )){
    Log "スクリプトを $G_MyName に置いて実行してください"
    exit
}

# 既知の問題(KB2962824)対応
if(($Version -ge 6.3) -and ($Version -lt 6.4)){
    $OSData = Get-WmiObject Win32_OperatingSystem
    if( $OSData.Caption -match "Windows Server 2012 R2" ){
        Log "Windows Server 2012 R2"
        $OriginalProgressPreference = $ProgressPreference
        $ProgressPreference="SilentlyContinue"
        $BitLocker = Get-WindowsFeature BitLocker
        if( $BitLocker.Installed -eq $false ){
            Log "BitLocker がインストールされていないのでインストール & 再起動"
            EnableAutoexec $G_MyName $Option
            Add-WindowsFeature BitLocker -Restart
        }
        $ProgressPreference = $OriginalProgressPreference
    }
}

Log "--- Running Windows Update ---"
Log "Searching for updates..."
$updateSession = new-object -com "Microsoft.Update.Session"

$updateSearcher = $updateSession.CreateupdateSearcher()

# アップデートタイプコントロール
if( $Option -match "ful" ){
    Log "Full Update"
    $Option = "Full"
    $searchResult = $updateSearcher.Search("IsInstalled=0 and Type='Software'")
}
else{
    Log "Minimum Update"
    $Option = "Minimum"
    $searchResult = $updateSearcher.Search("IsInstalled=0 and Type='Software' and AutoSelectOnWebSites=1")
}


Log "List of applicable items on the machine:"
if ($searchResult.Updates.Count -eq 0) {
    Log "There are no applicable updates."
    Log "=-=-=-=-=- Windows Update finished -=-=-=-=-="
}
else{
    $downloadReq = $False
    $i = 0
    foreach ($update in $searchResult.Updates){
        $i++
        if ( $update.IsDownloaded ) {
            $UpdateTitol = $update.Title
            Log "$i : $UpdateTitol (downloaded)"
        }
        else
        {
            $downloadReq = $true
            $UpdateTitol = $update.Title
            Log "$i : $UpdateTitol (not downloaded)"
        }
    }
    if ( $downloadReq ) {
        Log "Creating collection of updates to download..."
        $updatesToDownload = new-object -com "Microsoft.Update.UpdateColl"
        foreach ($update in $searchResult.Updates){
            $updatesToDownload.Add($update) | out-null
        }
        Log "Downloading updates..."
        $downloader = $updateSession.CreateUpdateDownloader()
        $downloader.Updates = $updatesToDownload
        $downloader.Download()
        Log "List of downloaded updates:"
        $i = 0
        foreach ($update in $searchResult.Updates){
            $i++
            if ( $update.IsDownloaded ) {
                $UpdateTitol = $update.Title
                Log "$i : $UpdateTitol (downloaded)"
            }
            else
            {
                $UpdateTitol = $update.Title
                Log "$i : $UpdateTitol (not downloaded)"
            }
        }
    }
    else
    {
        Log "All updates are already downloaded."
    }
    $updatesToInstall = new-object -com "Microsoft.Update.UpdateColl"
    Log "Creating collection of downloaded updates to install..."
    $i = 0
    foreach ($update in $searchResult.Updates){
        if ( $update.IsDownloaded ) {
            $updatesToInstall.Add($update) | out-null
            $i++
            $UpdateTitol = $update.Title
            Log "$i / $G_MaxUpdateNumber : $UpdateTitol (Install)"
            if( $i -ge $G_MaxUpdateNumber ){
                Log "Break max update $G_MaxUpdateNumber"
                break
            }
        }
    }
    if ( $updatesToInstall.Count -eq 0 ) {
        Log "Not ready for installation."
        Log "=-=-=-=-=- Windows Update Abnormal End -=-=-=-=-="
    }
    else
    {
        $InstallCount = $updatesToInstall.Count
        Log "Installing $InstallCount updates..."
        $installer = $updateSession.CreateUpdateInstaller()
        $installer.Updates = $updatesToInstall
        $installationResult = $installer.Install()
        if ( $installationResult.ResultCode -eq 2 ) {
            Log "All updates installed successfully."
        }
        else
        {
            Log "Some updates could not installed."
        }
        if ( $installationResult.RebootRequired ) {
            Log "One or more updates are requiring reboot."

            Log "[INFO] Autoexec Enabled"
            EnableAutoexec $G_MyName $Option
            sleep 30
            Log "Reboot system now !!"
            Restart-Computer -Force
        }
        else
        {
            Log "Finished. Reboot are not required."
            Log "=-=-=-=-=- Windows Update finished -=-=-=-=-="
        }
    }
}