Unified Update Manager

Summary

This script installs updates for Dell, HP, Lenovo, and Windows based on the parameters selected. It uses agnostic scripts Initialize-DellCommandUpdate, Initialize-HPImageAssistant, Install-LenovoUpdates and Install-WindowsUpdates for updates.

Note :

• If no parameter is set, the script will not install any updates
• The script is designed to handle a single update source at a time, either Dell, Lenovo, HP, or Windows Update.
• If Dell is selected for a dell machine, script will only execute dell updates and not windows updates. Same goes for HP and lenovo.

Sample Run

Example 1

• Set the below parameters to install Driver updates on Lenovo machines and to not reboot the machine after updates.
  • Lenovo to Yes
  • Lenovo_Update_Type to Driver
  • Reboot to Yes
    

Example 2

• Set below parameters to install all types of windows updates and immediately reboot the machine after windows updates.
  • Windows_Update to Yes
  • Windows_Update_Type to ALL
  • Reboot to Yes
    

Example 3

• Set the below parameters to install all types of Dell updates on Dell machines and to not reboot the machine after updates.
  • Dell to Yes
  • Dell_Update_Type to All
  • Reboot to No
    

Example 4

• Set the below parameters to install all types of Dell updates on Dell machines and to install just bios and firmware updates on HP machines without rebooting the machine after updates. This combination can be used to schedule the script on a group where HP and Dell machine are available.
  • Dell to Yes
  • Dell_Update_Type to All
  • HP to Yes
  • HP_Update_Type to Bios,Firmware
  • Reboot to No
    

Dependencies

• Solution - Unified System Update Orchestrator
• Agnostic - Initialize-DellCommandUpdate
• Agnostic - Initialize-HPImageAssistant
• Agnostic - Install-LenovoUpdates
• Agnostic - Install-WindowsUpdates

User Parameters

Name	Example	Accepted Values	Required	Default	Type	Description
Dell	Yes	Yes No	False		Flag	Set it to Yes to enable updates on dell machines.
Dell_Update_Type	Scan All Bios,Firmware	Scan All Bios Firmware Driver Application	False		Text	Define the type of update to install on the Dell machine. Setting it to Scan will scan the updates. All will install all the updates. Define multiple updates by separating them with a comma i.e bios,firmware,application. It runs the Agnostic - Initialize-DellCommandUpdate for installing the updates. If left blank, it will install driver updates on the machine. It will only work if Dell parameter is selected.
HP	Yes	Yes No	False		Flag	Set it to Yes to enable updates on HP machines.
HP_Update_Type	Scan All Bios,firmware	Scan All Bios Firmware Driver Application	False		Text	Define the type of update to install on the HP machine. Setting it to Scan will scan the updates. All will install all the updates. Define multiple updates by separating them with a comma i.e bios,firmware,application. It runs the Agnostic script - Initialize-HPImageAssistant for installing the updates. If left blank, it will install driver updates on the machine. It will only work if HP parameter is selected.
Lenovo	Yes	Yes No	False		Flag	Set it to Yes to enable updates on Lenovo machines.
Lenovo_Update_Type	Scan All Bios,Firmware	Scan All Bios Firmware Driver Application	False		Text	Define the type of update to install on the Lenovo machine. Setting it to Scan will scan the updates. All will install all the updates. Define multiple updates by separating them with a comma i.e bios,firmware,application. It runs the Agnostic Script - Install-LenovoUpdates for installing the updates. If left blank, it will install driver updates on the machine. It will only work if Lenovo parameter is selected.
Windows_Update	Yes	Yes No	False		Flag	Set it to Yes to enable windows updates on machines.
Windows_Update_Type	All Critical Updates,drivers,tools	All Critical Updates Security Updates Update Rollups Feature Packs Service Packs Definition Updates Drivers Tools Updates	False		Text	Define the type of windows update to install. All will install all the updates. Define multiple updates by separating them with a comma i.e Critical Updates,drivers,tools. It runs the Agnostic Script - Install-WindowsUpdates for installing the updates. If left blank, it will install windows driver updates on the machine.
Reboot	Yes	Yes No	False		Flag	Set it to Yes to reboot the machine after installing the updates. It applies to all Dell, HP, Lenovo and windows updates.

Task Creation

Script Details

Step 1

Navigate to Automation ➞ Tasks

Step 2

Create a new Script Editor style task by choosing the Script Editor option from the Add dropdown menu

The New Script page will appear on clicking the Script Editor button:

Step 3

Fill in the following details in the Description section:

• Name: Unified Update Manager
• Description: This script installs updates for Dell, HP, Lenovo, and Windows based on the parameters selected. It uses agnostic scripts 'Initialize-DellCommandUpdate', 'Initialize-HPImageAssistant', 'Install-LenovoUpdates' and 'Install-WindowsUpdates' for updates.
• Category: Custom

Parameters

Locate the Add Parameter button on the right-hand side of the screen and click on it to create a new parameter.

The Add New Script Parameter page will appear on clicking the Add Parameter button.

Dell

• Set Dell in the Parameter Name field.
• Select Flag from the Parameter Type dropdown menu.
• Click the Save button.

Dell_Update_Type

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set Dell_Update_Type in the Parameter Name field.
• Select Text String from the Parameter Type dropdown menu.
• Click the Save button.

HP

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set HP in the Parameter Name field.
• Select Flag from the Parameter Type dropdown menu.
• Click the Save button.

HP_Update_Type

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set HP_Update_Type in the Parameter Name field.
• Select Text String from the Parameter Type dropdown menu.
• Click the Save button.

Lenovo

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set Lenovo in the Parameter Name field.
• Select Flag from the Parameter Type dropdown menu.
• Click the Save button.

Lenovo_Update_Type

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set Lenovo_Update_Type in the Parameter Name field.
• Select Text String from the Parameter Type dropdown menu.
• Click the Save button.

Windows_Update

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set Windows_Update in the Parameter Name field.
• Select Flag from the Parameter Type dropdown menu.
• Click the Save button.

Windows_Update_Type

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set Windows_Update_Type in the Parameter Name field.
• Select Text String from the Parameter Type dropdown menu.
• Click the Save button.

Reboot

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

• Set Reboot in the Parameter Name field.
• Select Flag from the Parameter Type dropdown menu.
• Set False as Default Value
• Click the Save button.

Script Editor

Click the Add Row button in the Script Editor section to start creating the script

A blank function will appear:

Row 1 Function: PowerShell Script

Search and select the PowerShell Script function.

The following function will pop up on the screen:

Paste in the following PowerShell script and set the Expected time of script execution in seconds to 600 seconds. Click the Save button.

$Dell = '@Dell@'
$HP = '@HP@'
$Lenovo = '@Lenovo@'
$Reboot = '@Reboot@'
$Dell_Update_Type = '@Dell_Update_Type@'
$HP_Update_Type = '@HP_Update_Type@'
$Lenovo_Update_Type = '@Lenovo_Update_Type@'
$Windows_Update = '@Windows_Update@'
$windows_Update_Type = "@windows_Update_Type@"

$manufacturer = (Get-CimInstance Win32_ComputerSystem).Manufacturer
$ProjectName = switch -Regex ($manufacturer) {
    'Dell' {
        if ($Dell -match '1|Yes|True|Y') {
            'Initialize-DellCommandUpdate'
        }
        else {
            'Install-WindowsUpdates'
        }
    }
    'HP|Hewlett' {
        if ($HP -match '1|Yes|True|Y' ) {
            'Initialize-HPImageAssistant'
        }
        else {
            'Install-WindowsUpdates'
        }
    }
    'Lenovo' {
        if ($Lenovo -match '1|Yes|True|Y' ) {
            'Install-LenovoUpdates'
        }
        else {
            'Install-WindowsUpdates'
        }
    }
    default { 'Install-WindowsUpdates' }
}

$IsWindowsUpdateEnabled = $Windows_Update -match '^(1|Yes|True|Y)$'

if (($ProjectName -eq 'Install-WindowsUpdates') -and (-not $IsWindowsUpdateEnabled)) {
    return 'No update option selected.'
}

switch ($ProjectName) {
    'Initialize-DellCommandUpdate' {
        # Special case: Scan
        if ($Dell_Update_Type -match 'scan') {
            $Parameters = @{
                Argument = '/scan -silent'
            }
            break
        }

        # Build UpdateType
        if ($Dell_Update_Type -eq 'All') {
            $typeString = 'bios,firmware,driver,application'
        }
        else {
            $types = @()

            if ($Dell_Update_Type -match 'bios')        { $types += 'bios' }
            if ($Dell_Update_Type -match 'firmware')    { $types += 'firmware' }
            if ($Dell_Update_Type -match 'driver')      { $types += 'driver' }
            if ($Dell_Update_Type -match 'application') { $types += 'application' }

            if (-not $types) {
                $types = @('driver')  # fallback
            }

            $typeString = ($types -join ',')
        }

        # Build Reboot parameter
        $rebootArg = ''
        if ($Reboot -notmatch '1|Yes|True|Y') {
            $rebootArg = ' -reboot=disable'
        }

        # Final Argument
        $Parameters = @{
            Argument = "/applyUpdates -updateType=$typeString $rebootArg -silent -forceupdate=enable"
        }
    }

    'Initialize-HPImageAssistant' {

        # Special case: Scan (Analyze only, no install)
        if ($HP_Update_Type -match 'scan') {
            $Parameters = @{
                Argument = ''
            }
            break
        }

        # Build Category
        if ($HP_Update_Type -eq 'All') {
            $typeString = 'BIOS,Drivers,Firmware,Software'
        }
        else {
            $types = @()

            if ($HP_Update_Type -match 'bios')        { $types += 'BIOS' }
            if ($HP_Update_Type -match 'firmware')    { $types += 'Firmware' }
            if ($HP_Update_Type -match 'driver')      { $types += 'Drivers' }
            if ($HP_Update_Type -match 'application') { $types += 'Software' }

            if (-not $types) {
                $types = @('Drivers')  # fallback
            }

            $typeString = ($types -join ',')
        }

        $Parameters = @{
            Argument = "/Operation:Analyze /Category:$typeString /Selection:Recommended /Action:Install /Silent /AutoCleanup /ReportFilePath:`"C:\ProgramData\_Automation\App\HPImageAssistant\InstallReport`""
        }
    }

    'Install-LenovoUpdates' {

        # Special case: Scan
        if ($Lenovo_Update_Type -match 'scan') {
            $Parameters = @{
            }
            break
        }

        # Build UpdateType
        if ($Lenovo_Update_Type -eq 'All') {
            $typeString = 'bios,firmware,driver,application'
        }
        else {
            $types = @()

            if ($Lenovo_Update_Type -match 'bios')        { $types += 'bios' }
            if ($Lenovo_Update_Type -match 'firmware')    { $types += 'firmware' }
            if ($Lenovo_Update_Type -match 'driver')      { $types += 'driver' }
            if ($Lenovo_Update_Type -match 'application') { $types += 'application' }

            if (-not $types) {
                $types = @('driver')
            }

            $typeString = ($types -join ',')
        }

        # Build Reboot parameter
        $rebootArg = ''
        if ($Reboot -notmatch '1|Yes|True|Y') {
            $rebootArg = 'True'
        }

        # Final Argument
        $Parameters = @{
            Type = $typeString
            NoReboot = $rebootArg

        }
    }

    default {

        # Build UpdateType
        if ($windows_Update_Type -eq 'All') {
            $types = @(
                'Critical Updates','Security Updates','Update Rollups','Feature Packs',
                'Service Packs','Definition Updates','Drivers','Tools','Updates'
            )
        }
        else {
            $validTypes = @(
                'Critical Updates','Security Updates','Update Rollups','Feature Packs',
                'Service Packs','Definition Updates','Drivers','Tools','Updates'
            )

            $inputTypes = $windows_Update_Type -split ',' | ForEach-Object { $_.Trim() }

            $types = $validTypes | Where-Object { $inputTypes -contains $_ }

            if (-not $types) {
                $types = @('Drivers')
            }
        }

        # Build Reboot parameter
        $NoReboot = $true
        if ($Reboot -match '1|Yes|True|Y'){
            $NoReboot = $false
        }

        # Final Parameters (IMPORTANT FIX)
        $Parameters = @{
            Category = $types        # <-- array, NOT string, NOT quoted
            AllowReboot = $NoReboot
        }
    }
}

#region globals
$ProgressPreference = 'SilentlyContinue'
$WarningPreference = 'SilentlyContinue'
#endRegion

#region variables
$workingDirectory = '{0}\_Automation\Script\{1}' -f $env:ProgramData, $projectName
$scriptPath = '{0}\{1}.ps1' -f $workingDirectory, $projectName
$logPath = '{0}\{1}-log.txt' -f $workingDirectory, $projectName
$errorLogPath = '{0}\{1}-error.txt' -f $workingDirectory, $projectName
$baseUrl = 'https://contentrepo.net/repo'
$scriptUrl = '{0}/script/{1}.ps1' -f $baseUrl, $projectName
#endRegion

#region working Directory
if (!(Test-Path -Path $workingDirectory)) {
    try {
        New-Item -Path $workingDirectory -ItemType Directory -Force -ErrorAction Stop | Out-Null
    } catch {
        throw ('Failed to Create working directory {0}. Reason: {1}' -f $workingDirectory, $($Error[0].Exception.Message))
    }
}


#region set tls policy
$supportedTLSversions = [enum]::GetValues('Net.SecurityProtocolType')
if (($supportedTLSversions -contains 'Tls13') -and ($supportedTLSversions -contains 'Tls12')) {
    [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::Tls13 -bor [System.Net.SecurityProtocolType]::Tls12
} elseif ($supportedTLSversions -contains 'Tls12') {
    [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12
} else {
    Write-Information 'TLS 1.2 and/or TLS 1.3 are not supported on this system. This download may fail!' -InformationAction Continue
    if ($PSVersionTable.PSVersion.Major -lt 3) {
        Write-Information 'PowerShell 2 / .NET 2.0 doesn''t support TLS 1.2.' -InformationAction Continue
    }
}
#endRegion

#region download script
try {
    Invoke-WebRequest -Uri $scriptUrl -OutFile $scriptPath -UseBasicParsing -ErrorAction Stop
} catch {
    if (!(Test-Path -Path $scriptPath)) {
        throw ('Failed to download the script from ''{0}'', and no local copy of the script exists on the machine. Reason: {1}' -f $scriptUrl, $($Error[0].Exception.Message))
    }
}
#endRegion

#region execute script
if ($parameters) {
    & $scriptPath @parameters
} else {
    & $scriptPath
}
#endRegion

#region log verification
if (!(Test-Path -Path $logPath )) {
    throw ('Failed to run the agnostic script ''{0}''. A security application seems to have interrupted the script.' -f $scriptPath)
} else {
    $content = Get-Content -Path $logPath
    $logContent = $content[ $($($content.IndexOf($($content -match "$($projectName)$")[-1])) + 1)..$($content.length - 1) ]
    Write-Information ('Log Content: {0}' -f ($logContent | Out-String)) -InformationAction Continue
}

if ((Test-Path -Path $errorLogPath)) {
    $errorLogContent = Get-Content -Path $errorLogPath -ErrorAction SilentlyContinue
    throw ('Error log Content: {0}' -f ($errorLogContent | Out-String -ErrorAction SilentlyContinue))
}
#endRegion

Row 2 Function: Script Log

Add a new row by clicking the Add Row button.

A blank function will appear.

Search and select the Script Log function.

In the script log message, simply type %output% and click the Save button.

Save Task

Click the Save button at the top-right corner of the screen to save the script.

Completed Task

Output

• Script Output

Schedule Task

Task Details

• Name: Unified Update Manager
• Description: This script installs updates for Dell, HP, Lenovo, and Windows based on the parameters selected. It uses agnostic scripts 'Initialize-DellCommandUpdate', 'Initialize-HPImageAssistant', 'Install-LenovoUpdates' and 'Install-WindowsUpdates' for updates.
• Category: Custom

Parameters

• Select the parameters as per requirement. For more details on parameters refer User parameter section in this document

Schedule

• Schedule Type: Schedule
• Timezone: Local Machine Time
• Start: <Current Date>
• Trigger: Time At <Current Time>
• Recurrence: Every Day
• Execute at next agent check-in Not selected

Targeted Resource

Device Group: Deploy All Updates

Completed Scheduled Task

Changelog

2026-04-29

• Initial version of the document