0

We have a SharePoint 2016 On- Premises environment in which we have 2 Web Front end servers, 2 Application servers and 2 DB servers.

Every month we are downloading & installing the Latest SharePoint updates released by Microsoft in all the servers and we will run the PS config wizard in a order ( APP 1 => APP 2 => WFE 1 => WFE 2 ).

So i want to know that is there any way that we can automate this process using PowerShell or any other means, or at lease if we could reduce some of the manual work that will be better.

hope i can get some solution .!

1

Here is a complete PowerShell script to automate the SharePoint update installation in all servers but post-execution of this script at least an hour you need to spend time verifying the update.

<#
    Updated for SharePoint Server 2016 and 2019 by Trevor Seward (https://thesharepointfarm.com). Original 
    script provided by Russ Maxwell, available for SharePoint 2013 from 
    https://blog.russmax.com/why-sharepoint-2013-cumulative-update-takes-5-hours-to-install/.
    This script supports both SharePoint 2013, SharePoint Server 2016, and SharePoint Server 2019. SharePoint Server 2016/2019 supports both the
    sts*.exe and wssloc*.exe in the same directory.

    License: MIT (https://github.com/Nauplius/SharePoint-Patch-Script/blob/master/LICENSE)
#>

Add-PSSnapin Microsoft.SharePoint.PowerShell -EA Continue

<#
    .SYNOPSIS
        Get-SPPatchInfo retrieves information about a knowledge base article or build number.
    .DESCRIPTION
        Get-SPPatch retreives the patch metadata from https://sharepointupdates.com/patches from the supplied knowledge base article number 
        or SharePoint patch build number. Additional information can be found at https://github.com/Nauplius.
    .PARAMETER Build
        The build number to retrieve metadata for.
    .PARAMETER KnowledgeBaseArticle
        The knowledge base article to retrieve metadata for.
    .EXAMPLE
        Get-SPPatchInfo -Build 16.0.10354.20001
        Retrieves the patch information for build number 16.0.10354.20001.
    .EXAMPLE
        Get-SPPatchInfo -KnowledgeBaseArticle 4484224
        Retrieves the patch information for the knowledge base article 4484224.
    .NOTES
        Author: Trevor Seward
        Date: 01/16/2020
    .LINK
        https://thesharepointfarm.com
    .LINK
        https://github.com/Nauplius
    .LINK
        https://sharepointupdates.com
#>

Function Get-SPPatchInfo {
    [CmdletBinding()]
    param (
        [string]
        [Parameter(Mandatory = $true, ParameterSetName = "Build")]
        $Build,
        [string]
        [Parameter(Mandatory = $true, ParameterSetName = "KnowledgeBaseArticle")]
        $KnowledgeBaseArticle
    )
$service = 'https://sharepointupdates.com/api/Articles/'

switch ($PSCmdlet.ParameterSetName) {
    "Build" {
        if ($Build -notmatch "[0-9]{2}.[0-9]{1}.[0-9]{4,5}.[0-9]{4,5}") {
            throw 'Invalid build number.'
        }

        try {
            Invoke-WebRequest "$($service)/$Build" | ConvertFrom-Json
        }
        catch {
            throw 'Unable to find build.'
        }
    }
    "KnowledgeBaseArticle" {
        $KnowledgeBaseArticle = [regex]::Replace($KnowledgeBaseArticle, "[^0-9]", "")

        try {
            Invoke-WebRequest "$($service)/$KnowledgeBaseArticle" | ConvertFrom-Json
        }
        catch {
            throw 'Unable to find article.'
        }  
    }
    }
}

<#
    .SYNOPSIS
        Get-SPPatch
    .DESCRIPTION
        Get-SPPatch retreives the patch metadata from https://sharepointupdates.com/patches and then downloads the patch file(s) to the specified directory. Additional information
        can be found at https://github.com/Nauplius.
    .PARAMETER Path
        The folder where the patch file(s) will be downloaded to. Must be an existing folder to which the account performing the download has write permissions.
    .PARAMETER KBs
        The knowledge base article(s) to look up the patch file(s), separated by a comma. Only specify the KB article number.
    .PARAMETER ShowDownloadProgress
        Set to false by default, displaying download progress may significantly reduce download performance.
    .EXAMPLE
        Get-SPPatch -Path 'C:\Temp' -KBs 4484176,4484177
        Downloads the knowledge base articles to C:\Temp.
    .EXAMPLE
        Get-SPPatch -Path 'C:\Temp' -KBs 4484176,4484177 -ShowDownloadProgress $true
        Downloads the knowledge base articles to C:\Temp and displays the download progress.
    .NOTES
        When downloading SharePoint Server 2013 or Project Server 2013 Cumulative Updates, do not specify more than one Cumulative Update a time. 
        Cumulative Updates for these products have two cab files, 'ubersrv_1.cab' and 'ubersrv_2.cab' which are not unqiuely named 
        between different knowledge base articles.
        Files will be automatically overwritten when downloading a file of the same name.
        Author: Trevor Seward
        Date: 01/16/2020
    .LINK
        https://thesharepointfarm.com
    .LINK
        https://github.com/Nauplius
    .LINK
        https://sharepointupdates.com
#>

Function Get-SPPatch {
    [CmdletBinding()]
    param (
        [string]
        [Parameter(Mandatory = $true)]
        $Path,
        [string[]]
        [Parameter(Mandatory = $true)]
        $KBs,
        [bool]
        [Parameter(Mandatory = $false)]
        $ShowDownloadProgress = $false
    )

    $service = 'https://sharepointupdates.com/api/Articles/'

    if ($ShowDownloadProgress) {
        $ProgressPreference = 'Continue'
        Write-Host -ForegroundColor Yellow 'Download progress will be displayed which may significantly reduce download performance.'
    }
    else {
        $ProgressPreference = 'SilentlyContinue'
        Write-Host -ForegroundColor Yellow 'Download progress will not be displayed to improve download performance.'
    }   

    if (-not (Test-Path -Path $Path)) {
        throw "Path $($Path) does not exist."
    }

    foreach ($KB in $KBs) {
        $KB = [regex]::Replace($KB, "[^0-9]", "")

        try {
            $json = Invoke-WebRequest "$($service)/$KB" | ConvertFrom-Json
            if ($json.PatchUrl1.Length -ne 0) {
                $file = Split-Path $json.PatchUrl1 -Leaf
                Invoke-WebRequest $json.PatchUrl1 -OutFile "$($Path)\$($file)"
                Unblock-File -Path "$($Path)\$($file)" -Confirm:$false
            }
            else {
                throw 'Patch file not found.'
            }

            if ($json.PatchUrl2.Length -ne 0) {
                $file = Split-Path $json.PatchUrl2 -Leaf
                Invoke-WebRequest $json.PatchUrl2 -OutFile "$($Path)\$($file)"
                Unblock-File -Path "$($Path)\$($file)" -Confirm:$false
            }

            if ($json.PatchUrl3.Length -ne 0) {
                $file = Split-Path $json.PatchUrl3 -Leaf
                Invoke-WebRequest $json.PatchUrl3 -OutFile "$($Path)\$($file)"
                Unblock-File -Path "$($Path)\$($file)" -Confirm:$false
            }           
        }
        catch {
            throw 'Unable to find the specified Knowledge Base article.'
        }
    }
}

<#
    .SYNOPSIS
        Install-SPPatch
    .DESCRIPTION
        Install-SPPatch reduces the amount of time it takes to install SharePoint patches. This cmdlet supports SharePoint 2013 and above. Additional information
        can be found at https://github.com/Nauplius.
    .PARAMETER Path
        The folder where the patch file(s) reside.
    .PARAMETER Pause
        Pauses the Search Service Application(s) prior to stopping the SharePoint Search Services.
    .PARAMETER Stop
        Stop the SharePoint Search Services without pausing the Search Service Application(s).
    .PARAMETER SilentInstall
        Silently installs the patches without user input. Not specifying this parameter will cause each patch to prompt to install.
    .PARAMETER KeepSearchPaused
        Keeps the Search Service Application(s) in a paused state after the installation of the patch has completed. Useful for when applying the patch to multiple
        servers in the farm. Default to false.
    .PARAMETER OnlySTS
        Only apply the STS (non-language dependent) patch. This switch may be used when only an STS patch is available.
    .EXAMPLE
        Install-SPPatch -Path C:\Updates -Pause -SilentInstall
        Install the available patches in C:\Updates, pauses the Search Service Application(s) on the farm, and performs a silent installation.
    .EXAMPLE
        Install-SPPatch -Path C:\Updates -Pause -KeepSearchPaused:$true -SilentInstall
        Install the available patches in C:\Updates, pauses the Search Service Application(s) on the farm, 
        does not resume the Search Service Application(s) after the installation is complete, and performs a silent installation.
    .NOTES
        Author: Trevor Seward
        Date: 01/16/2020
    .LINK
        https://thesharepointfarm.com
    .LINK
        https://github.com/Nauplius
    .LINK
        https://sharepointupdates.com
#>

Function Install-SPPatch {
    param
    (
        [string]
        [Parameter(Mandatory = $true)]
        [ValidateNotNullOrEmpty()]
        $Path,
        [switch]
        [Parameter(Mandatory = $true, ParameterSetName = "PauseSearch")]
        $Pause,
        [switch]
        [Parameter(Mandatory = $true, ParameterSetName = "StopSearch")]
        $Stop,
        [switch]
        [Parameter(Mandatory = $false, ParameterSetName = "PauseSearch")]
        $KeepSearchPaused = $false,
        [switch]
        [Parameter(Mandatory = $false)]
        $SilentInstall,
        [switch]
        [Parameter(Mandatory = $false)]
        $OnlySTS
    )

    $version = (Get-SPFarm).BuildVersion
    $majorVersion = $version.Major
    $startTime = Get-Date
    $exitRebootCodes = @(3010, 17022)
    $searchSvcRunning = $false

    Write-Host -ForegroundColor Green "Current build: $version"

    ########################### 
    ##Ensure Patch is Present## 
    ###########################

    if ($majorVersion -eq '16') {
        $sts = Get-ChildItem -LiteralPath $Path  -Filter *.exe | ? { $_.Name -match 'sts([A-Za-z0-9\-]+).exe' }
        $wssloc = Get-ChildItem -LiteralPath $Path  -Filter *.exe | ? { $_.Name -match 'wssloc([A-Za-z0-9\-]+).exe' }

        if ($OnlySTS) {
            if ($sts -eq $null) {
                Write-Host 'Missing the sts patch. Please make sure the sts patch present in the specified directory.' -ForegroundColor Red
                return            
            }
        }
        else {
            if ($sts -eq $null -and $wssloc -eq $null) {
                Write-Host 'Missing the sts and wssloc patch. Please make sure both patches are present in the specified directory.' -ForegroundColor Red
                return
            }

            if ($sts -eq $null -or $wssloc -eq $null) {
                Write-Host '[Warning] Either the sts and wssloc patch is not available. Please make sure both patches are present in the same directory or safely ignore if only single patch is available.' -ForegroundColor Yellow
                return
            }
        }

        if ($OnlySTS) {
            $patchfiles = $sts
            Write-Host -for Yellow "Installing $sts"
        }
        else {
            $patchfiles = $sts, $wssloc
            Write-Host -for Yellow "Installing $sts and $wssloc"
        }
    }
    elseif ($majorVersion -eq '15') {
        $patchfiles = Get-ChildItem -LiteralPath $Path  -Filter *.exe | ? { $_.Name -match '([A-

    Za-z0-9\-]+)2013-kb([A-Za-z0-9\-]+)glb.exe' }

            if ($patchfiles -eq $null) { 
                Write-Host 'Unable to retrieve the file(s).  Exiting Script' -ForegroundColor Red 
                return 
            }

            Write-Host -ForegroundColor Yellow "Installing $patchfiles"
        }
        elseif ($majorVersion -lt '15') {
            throw 'This cmdlet supports SharePoint 2013 and above.'
        }

        ######################## 
        ##Stop Search Services## 
        ######################## 
        ##Checking Search services## 

        $oSearchSvc = Get-Service "OSearch$majorVersion" 
        $sPSearchHCSvc = Get-Service "SPSearchHostController"

        if (($oSearchSvc.status -eq 'Running') -or ($sPSearchHCSvc.status -eq 'Running')) { 
            $searchSvcRunning = $true
            if ($Pause) { 
                $ssas = Get-SPEnterpriseSearchServiceApplication

                foreach ($ssa in $ssas) {
                    Write-Host -ForegroundColor Yellow "Pausing the Search Service Application: $($ssa.DisplayName)"
                    Write-Host  -ForegroundColor Yellow  '    This could take a few minutes...'
                    Suspend-SPEnterpriseSearchServiceApplication -Identity $ssa | Out-Null
                }
            }
            elseif ($Stop) { 
                Write-Host -ForegroundColor Cyan '    Continuing without pausing the Search Service Application'
            }
        }

        #We don't need to stop SharePoint Services for 2016 and above
        if ($majorVersion -lt '16') {
            Write-Host -ForegroundColor Yellow 'Stopping Search Services if they are running'

            if ($oSearchSvc.status -eq 'Running') { 
                Set-Service -Name "OSearch$majorVersion" -StartupType Disabled 
                Stop-Service "OSearch$majorVersion" -WA 0
            }

            if ($sPSearchHCSvc.status -eq 'Running') { 
                Set-Service 'SPSearchHostController' -StartupType Disabled 
                Stop-Service 'SPSearchHostController' -WA 0
            }

            Write-Host -ForegroundColor Green 'Search Services are Stopped'
            Write-Host

            ####################### 
            ##Stop Other Services## 
            ####################### 
            Set-Service -Name 'IISADMIN' -StartupType Disabled 
            Set-Service -Name 'SPTimerV4' -StartupType Disabled

            Write-Host -ForegroundColor Green 'Gracefully stopping IIS...'
            Write-Host 
            iisreset -stop -noforce 
            Write-Host -ForegroundColor Yellow 'Stopping SPTimerV4'
            Write-Host

            $sPTimer = Get-Service 'SPTimerV4' 
            if ($sPTimer.Status -eq 'Running') {
                Stop-Service 'SPTimerV4'
            }

            Write-Host -ForegroundColor Green 'Services are Stopped'
            Write-Host 
            Write-Host
        }

        ################## 
        ##Start patching## 
        ################## 
        Write-Host -ForegroundColor Yellow 'Working on it... Please keep this PowerShell window open...'
        Write-Host

        $patchStartTime = Get-Date

        foreach ($patchfile in $patchfiles) {
            $filename = $patchfile.Fullname
            #unblock the file, to get rid of the prompts
            Unblock-File -Path $filename -Confirm:$false

            if ($SilentInstall) {
                $process = Start-Process $filename -ArgumentList '/passive /quiet' -PassThru -Wait
            }
            else {
                $process = Start-Process $filename -ArgumentList '/norestart' -PassThru -Wait
            }

            if ($exitRebootCodes.Contains($process.ExitCode)) {
                $reboot = $true
            }

            Write-Host -ForegroundColor Yellow "Patch $patchfile installed with Exit Code $($process.ExitCode)"
        }

        $patchEndTime = Get-Date

        Write-Host 
        Write-Host -ForegroundColor Yellow ('Patch installation completed in {0:g}' -f ($patchEndTime - $patchStartTime))
        Write-Host

        if ($majorVersion -lt '16') {
            ################## 
            ##Start Services## 
            ################## 
            Write-Host -ForegroundColor Yellow 'Starting Services'
            Set-Service -Name 'SPTimerV4' -StartupType Automatic 
            Set-Service -Name 'IISADMIN' -StartupType Automatic

            Start-Service 'SPTimerV4'
            Start-Service 'IISAdmin'

            ###Ensuring Search Services were stopped by script before Starting" 
            if ($searchSvcRunning = $true) { 
                Set-Service -Name "OSearch$majorVersion" -StartupType Manual 
                Start-Service "OSearch$majorVersion" -WA 0
                Set-Service 'SPSearchHostController' -StartupType Automatic 
                Start-Service 'SPSearchHostController' -WA 0
            }
        }

        ###Resuming Search Service Application if paused### 
        if ($Pause -and $KeepSearchPaused -eq $false) { 
            $ssas = Get-SPEnterpriseSearchServiceApplication

            foreach ($ssa in $ssas) {
                Write-Host -ForegroundColor Yellow "Resuming the Search Service Application: $($ssa.DisplayName)"
                Write-Host -ForegroundColor Yellow '    This could take a few minutes...'
                Resume-SPEnterpriseSearchServiceApplication -Identity $ssa | Out-Null
            }
        }
        elseif ($pause -and $KeepSearchPaused -eq $true) {
            Write-Host -ForegroundColor Yellow 'Not resuming the Search Service Application(s)'
        }

        ###Resuming IIS###
        iisreset -start

        $endTime = Get-Date
        Write-Host -ForegroundColor Green 'Services are Started'
        Write-Host 
        Write-Host 
        Write-Host -ForegroundColor Yellow ('Script completed in {0:g}' -f ($endTime - $startTime))
        Write-Host -ForegroundColor Yellow 'Started:'  $startTime 
        Write-Host -ForegroundColor Yellow 'Finished:'  $endTime 

        if ($reboot) {
            Write-Host -ForegroundColor Yellow 'A reboot is required'
        }
    }

    <#
        .SYNOPSIS
            Invoke-SPConfigWizard
        .DESCRIPTION
            Invoke-SPConfigWizard runs psconfig.exe on the local server with the necessary parameters to update the local server. 
            This must be run on all servers in the farm after all servers in the farm have been patched. Additional information
            can be found at https://github.com/Nauplius.
        .EXAMPLE
            Invoke-SPConfigWizard
            Runs the Config Wizard with all the necessary switches to update the local server.
        .NOTES
            Author: Trevor Seward
            Date: 01/16/2020
        .LINK
            https://thesharepointfarm.com
        .LINK
            https://github.com/Nauplius
        .LINK
            https://sharepointupdates.com
    #>
    Function Invoke-SPConfigWizard {
        PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
    }

Script location:

https://github.com/Nauplius/SharePoint-Patch-Script/blob/master/SharePointPatchScript.psm1

Details execution steps:

How to install SharePoint Cumulative Updates In Less Than An Hour in a SharePoint Farm Step by Step

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.