在较大的网络中,您将需要使用WSUS,如DanBig所指出的那样.但是,如果您希望阻止单个Hot Fix,则可以使用此脚本使用Hotfix ID执行此操作:
If Wscript.Arguments.Count = 0 Then WScript.Echo "Syntax: HideWindowsUpdate.vbs [Hotfix Article ID]" & vbCRLF & _ "Examples:" & vbCRLF & _ " - Hide KB940157: HideWindowsUpdate.vbs 940157" WScript.Quit 1 End If Dim hotfixId hotfixId = WScript.Arguments(0) Dim updateSession,updateSearcher Set updateSession = CreateObject("Microsoft.Update.Session") Set updateSearcher = updateSession.CreateUpdateSearcher() Wscript.Stdout.Write "Searching for pending updates..." Dim searchResult Set searchResult = updateSearcher.Search("IsInstalled=0") Dim update,kbArticleId,index,index2 WScript.Echo CStr(searchResult.Updates.Count) & " found." For index = 0 To searchResult.Updates.Count - 1 Set update = searchResult.Updates.Item(index) For index2 = 0 To update.KBArticleIDs.Count - 1 kbArticleId = update.KBArticleIDs(index2) If kbArticleId = hotfixId Then WScript.Echo "Hiding update: " & update.Title update.IsHidden = True End If Next Next
Dim updateSession,index2 WScript.Echo CStr(searchResult.Updates.Count) & " found." For index = 0 To searchResult.Updates.Count - 1 Set update = searchResult.Updates.Item(index) WScript.Echo update.Identity.UpdateID & ": " & update.Title Next
并使用此脚本阻止它:
If Wscript.Arguments.Count = 0 Then WScript.Echo "Syntax: HideWindowsUpdateById.vbs [Update ID]" & vbCRLF & _ "Examples:" & vbCRLF & _ " - Hide KB940157: HideWindowsUpdateById.vbs 2ba85467-deaf-44a1-a035-697742efab0f" WScript.Quit 1 End If Dim updateId updateId = WScript.Arguments(0) Dim updateSession,updateSearcher Set updateSession = CreateObject("Microsoft.Update.Session") Set updateSearcher = updateSession.CreateUpdateSearcher() Wscript.Stdout.Write "Searching for pending updates..." Dim searchResult Set searchResult = updateSearcher.Search("UpdateID = '" & updateId & "'") Dim update,index WScript.Echo CStr(searchResult.Updates.Count) & " found." For index = 0 To searchResult.Updates.Count - 1 Set update = searchResult.Updates.Item(index) WScript.Echo "Hiding update: " & update.Title update.IsHidden = True Next
您也可以在Windows PowerShell中执行上述所有操作.我最初在VBScript中创建了脚本,因为我想在安装PoSH之前与Windows Update代理进行交互. Windows Update API是documented on MSDN.