1

Trying to uninstall a Windows Update that has caused issues for me, I have managed to get a Powershell script together that does it however it doesn’t do it silently. I have tried multiple techniques to get the Windows Update removed silently and none seems to work. Please see below what I have already tried.

Set-ExecutionPolicy RemoteSigned | Write-Output A
Install-Module PSWindowsUpdate
Import-Module PSWindowsUpdate
Write-Output Y
Remove-WindowsUpdate -KBArticleID KB*******
Write-Output Y
Hide-WindowsUpdate -KBArticleID KB*******
Write-Output Y

and I have I tried this
Set-ExecutionPolicy RemoteSigned | Write-Output A
wusa /uninstall /kb:******* /quiet
Install-Module PSWindowsUpdate
Import-Module PSWindowsUpdate
Write-Output Y
Hide-WindowsUpdate -KBArticleID KB*******

Any advice would be greatly appreciated

6 Spice ups
2

I did it by using the confirm switch

Hide-WindowsUpdate -KBArticleID KBXXXXXX -confirm:$false
3

Alternatively, you can use wusa too

C:\Windows\System32\wusa.exe" /uninstall /kb:XXXXXXX /quiet /norestart
1 Spice up
4

Hi,

I did try wusa /uninstall /kb******* /quiet /norestart

This hasn’t done anything, I had left the machine for a few hours and performed a restart as well and the windows update was still installed.

5

I just saw another user with the same complaint. The only difference is that: wusa /uninstall /kb******* /quiet /norestart : caused the update to be visible so you can delete it the standard way. Have you gone back in to see if the update is visible now?

6

The update being visible isn’t the problem, I need there to be no visibilty of the update being un-installed however when I tried wusa /uninstall /kb******* /quiet /norestart it doesn’t actually do anything, I go into the Installed updates section and it is still showing as an installed update even following a restart

7

I have just tried using the below as well and get this now

Remove-WindowsUpdate -KBArticleID KB******* -Confirm:$false

HResult RebootRequired ResultCode

-2145124318 False 4

1 Spice up
8

HRESULT -2145124318 => hex of FDBFFDE => 2’s complement of 80240022:

0x80240022	WU_E_ALL_UPDATES_FAILED	Operation failed for all the updates.

You’ll have to search this one as there are a lot of ‘fixes’ for this HRESULT ranging from a WSUS issue, firewall issue, or if the KB packing is related to Windows Defender.

Could also run Get-WindowsUpdateLog to convert (combine?) the Windows Update trace logs (.etl) to a single readable log which outputs by default to the running user’s Desktop as “WindowsUpdate.log” - maybe that has some answers in there for you.

One simple thing: are you running the script in an elevated PowerShell console?

9

I will take a look at that and yes I’m running it with elevated privileges (domain administrator)