Install All Windows Updates

Installs all applicable updates from the Windows Update Client, including optional driver updates unless you disable them. If pending reboot is detected, the brick exits with retry later.

Parameters

Reboot Action

Optional — Default: Reboot If No User Is Signed In

What the brick does when Windows Update needs a restart to finish installing.\n\nReboot: restarts the workstation.\nReboot If No User Is Signed In: restarts only when nobody is signed in. If a user is signed in, or it cannot be determined, the workstation is not restarted.\nNothing: never restarts the workstation.\n\nIn all three cases the brick ends with retry later, so it runs again after the restart and installs the remaining updates. Without a restart it keeps retrying until the workstation has been restarted. Allowed values: Nothing, Reboot, Reboot If No User Is Signed In.

Include Optional Drivers

Optional — Default: True

Enable to also install the driver updates that Windows Update lists under Optional updates, the same way they are installed from Settings. Disable to skip them, for example if an optional driver has replaced a newer driver on your devices.\n\nPolicies that keep drivers out of Windows Update still apply.

Temporarily Bypass WSUS

Optional — Default: True

Enable to let the workstation fetch updates directly from Microsoft Update for the duration of this brick, and restore the WSUS setting afterwards. Disable to install only the updates approved on your WSUS server. Has no effect on workstations that are not pointed at a WSUS server.

Details

Category: Provisioning
Brick ID: Windows-Update-Install-All

{
  "category": "provisioning",
  "description": "Installs all applicable updates from the Windows Update Client, including optional driver updates unless you disable them. If pending reboot is detected, the brick exits with retry later.",
  "developerVendor": "CapaSystems A/S",
  "displayName": null,
  "id": "Windows-Update-Install-All",
  "name": "Install All Windows Updates",
  "parameters": [
    {
      "allowManualInput": false,
      "defaultValue": null,
      "defaultValueObject": {
        "id": "RebootIfNoUserSignedIn",
        "name": "Reboot If No User Is Signed In"
      },
      "description": "What the brick does when Windows Update needs a restart to finish installing.\\n\\nReboot: restarts the workstation.\\nReboot If No User Is Signed In: restarts only when nobody is signed in. If a user is signed in, or it cannot be determined, the workstation is not restarted.\\nNothing: never restarts the workstation.\\n\\nIn all three cases the brick ends with retry later, so it runs again after the restart and installs the remaining updates. Without a restart it keeps retrying until the workstation has been restarted.",
      "id": "AllowReboot",
      "name": "Reboot Action",
      "regExValidation": "",
      "required": false,
      "type": "ComboBox",
      "value": null,
      "values": [],
      "valuesObject": [
        {
          "id": "Nothing",
          "name": "Nothing"
        },
        {
          "id": "Reboot",
          "name": "Reboot"
        },
        {
          "id": "RebootIfNoUserSignedIn",
          "name": "Reboot If No User Is Signed In"
        }
      ]
    },
    {
      "allowManualInput": false,
      "defaultValue": "True",
      "defaultValueObject": null,
      "description": "Enable to also install the driver updates that Windows Update lists under Optional updates, the same way they are installed from Settings. Disable to skip them, for example if an optional driver has replaced a newer driver on your devices.\\n\\nPolicies that keep drivers out of Windows Update still apply.",
      "id": "IncludeOptionalDrivers",
      "name": "Include Optional Drivers",
      "regExValidation": "",
      "required": false,
      "type": "Boolean",
      "value": null,
      "values": [],
      "valuesObject": null
    },
    {
      "allowManualInput": false,
      "defaultValue": "True",
      "defaultValueObject": null,
      "description": "Enable to let the workstation fetch updates directly from Microsoft Update for the duration of this brick, and restore the WSUS setting afterwards. Disable to install only the updates approved on your WSUS server. Has no effect on workstations that are not pointed at a WSUS server.",
      "id": "TemporarilyDisableWsus",
      "name": "Temporarily Bypass WSUS",
      "regExValidation": "",
      "required": false,
      "type": "Boolean",
      "value": null,
      "values": [],
      "valuesObject": null
    }
  ],
  "powershell": {
    "base64Encoded": true,
    "function": "ZnVuY3Rpb2..."
  },
  "type": "powerbrick",
  "version": "2026.10.14.1"
}