bat一键给windows server 2012 打补丁_server2012 补丁

流程图

脚本

install.bat

主脚本，整体实现逻辑都在这

 
@ECHO OFF 
REM 自动判断权限问题，主动获取管理员权限
 
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" 
 
if '%errorlevel%' NEQ '0' (  
    goto UACPrompt  
) else ( goto gotAdmin )  
   
:UACPrompt  
    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" 
    echo UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%temp%\getadmin.vbs" 
    "%temp%\getadmin.vbs" 
    exit /B  
   
:gotAdmin  
    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )  
    pushd "%CD%" 
    CD /D "%~dp0" 
 
:begin
 
chcp 65001
 
echo 开始安装补丁，期间会重启服务器，请耐心等待...
 
@REM 安装KB2919442补丁
wusa.exe %~dp0Windows8.1-KB2919442-x64.msu /quiet /norestart
echo KB2919442安装完成
 
@REM ---------------修改任务信息------------------
@REM 获取脚本路径
 
set dir_tmp=%~dp0
set dir=%dir_tmp:\=\\\\%
 
 
@REM 修改系统任务文件
sed -i '79d' .\test.xml
sed -i "78a\      <Command>%dir%install_left.bat</Command>"  .\test.xml
sed -i '81d' .\test.xml
sed -i "80a\      <WorkingDirectory>%dir%</WorkingDirectory>"  .\test.xml
@REM ---------------修改任务信息------------------
 
@REM 重新导入(覆盖旧任务)
schtasks.exe /create /tn test /xml test.xml /f 
 
@REM clearcompressionflag
clearcompressionflag.exe
@REM KB2919355补丁安装，安装完成必须重启，安装时间会有点长，请耐心等待
wusa.exe %~dp0Windows8.1-KB2919355-x64.msu  /quiet /norestart
echo KB2919355安装完成
@REM @REM 设置自启动任务，系统重启之后自动运行install_left.bat
@REM schtasks /create /tn test /f /z /tr "%~dp0install.vbs" /sc onstart /ru system 
 
 
echo 准备重启服务器
@REM 设置超时时间，让客户看到提示
 
REM 重启服务器
shutdown -r -f -t 5
pause
 

install_left.bat

安装不需要重启的补丁，放到最后去安装

主脚本会添加一个计划任务，服务器开机之后会启动脚本去安装

该脚本执行完成之后会删除计划任务

 
@ECHO OFF 
REM 自动判断权限问题，主动获取管理员权限
 
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" 
 
if '%errorlevel%' NEQ '0' (  
    goto UACPrompt  
) else ( goto gotAdmin )  
   
:UACPrompt  
    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" 
    echo UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%temp%\getadmin.vbs" 
    "%temp%\getadmin.vbs" 
    exit /B  
   
:gotAdmin  
    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )  
    pushd "%CD%" 
    CD /D "%~dp0" 
 
:begin
 
@REM 安装重启之后剩下的不定
wusa.exe %~dp0Windows8.1-KB2932046-x64.msu  /quiet /norestart
wusa.exe %~dp0Windows8.1-KB2934018-x64.msu  /quiet /norestart
wusa.exe %~dp0Windows8.1-KB2937592-x64.msu  /quiet /norestart
wusa.exe %~dp0Windows8.1-KB2938439-x64.msu  /quiet /norestart
wusa.exe %~dp0Windows8.1-KB2959977-x64.msu  /quiet /norestart
 
@REM 删除任务
schtasks /delete /tn "test" /f
 

 test.xml

计划任务相关配置文件

<?xml version="1.0" encoding="UTF-16"?>
 
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
 
  <RegistrationInfo>
 
    <Date>2023-10-15T13:12:22</Date>
 
    <Author>Administrator</Author>
 
  </RegistrationInfo>
 
  <Triggers>
 
    <BootTrigger>
 
      <StartBoundary>2023-10-15T13:12:00</StartBoundary>
 
      <Enabled>true</Enabled>
 
    </BootTrigger>
 
  </Triggers>
 
  <Principals>
 
    <Principal id="Author">
 
      <RunLevel>LeastPrivilege</RunLevel>
 
      <UserId>S-1-5-18</UserId>
 
    </Principal>
 
  </Principals>
 
  <Settings>
 
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
 
    <DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
 
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
 
    <AllowHardTerminate>true</AllowHardTerminate>
 
    <StartWhenAvailable>false</StartWhenAvailable>
 
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
 
    <IdleSettings>
 
      <StopOnIdleEnd>true</StopOnIdleEnd>
 
      <RestartOnIdle>false</RestartOnIdle>
 
    </IdleSettings>
 
    <AllowStartOnDemand>true</AllowStartOnDemand>
 
    <Enabled>true</Enabled>
 
    <Hidden>false</Hidden>
 
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
 
    <WakeToRun>false</WakeToRun>
 
    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
 
    <Priority>7</Priority>
 
  </Settings>
 
  <Actions Context="Author">
 
    <Exec>
 
      <Command>E:\git_code\windows_server_2012_patch\install_left.bat</Command>
 
      <WorkingDirectory>E:\git_code\windows_server_2012_patch\</WorkingDirectory>
 
    </Exec>
 
  </Actions>
 
</Task>