How to Pull Windows Update Report from JumpCloud

Overview

This guide explains how to pull Windows Update reports from all connected devices using JumpCloud Commands and PowerShell. It helps administrators monitor update status, detect failed patches, and maintain compliance visibility across their Windows environment.

Step 1 – Run Script via JumpCloud Commands

To begin, execute a PowerShell script on all your Windows devices to gather update data.

PowerShell Script to Fetch Windows Updates

$updates = Get-WmiObject -Class Win32_ReliabilityRecords | Where-Object { $_.SourceName -eq "Microsoft-Windows-WindowsUpdateClient" -and $_.Message -like "*Update for*" }

foreach ($update in $updates) {
    $date = $update.TimeGenerated
    $message = $update.Message
    $status = $null

    if ($message -match "Update for .* installed successfully") {
        $status = "Installed"
    } elseif ($message -match "Update for .* failed to install") {
        $status = "Failed"
    }

    Write-Output "Date: $date"
    Write-Output "Message: $message"
    Write-Output "Status: $status"
    Write-Output "---------------------------------------------------"
}

Execution Steps

1. Log in to your JumpCloud Admin Portal.
2. Navigate to Devices → Commands → + Add Command.
3. Select Windows as the platform and paste the above script.
4. From the Device Group section, select all Windows devices or the specific group you want to audit.
5. Save and Run the command.
6. Wait approximately 10 minutes to allow execution across all online systems.

Note:

This script runs only on online devices. Offline systems will not report update data until they reconnect and re-execute the command.

Step 2 – Export Results from PowerShell

After running the JumpCloud command, connect PowerShell to your JumpCloud environment to export the report data.

Connect to JumpCloud

Connect-JCOnline

(If you haven’t installed JumpCloud PowerShell yet, follow the official installation instructions or reach out to support@netnxt.com

.)

Export the Windows Update Report

Run the command below to export the results to a CSV file:

Get-JCCommandResult | Where-Object Name -eq "NAME OF THE COMMAND" | Get-JCCommandResult -ByID | Select-Object system, exitCode, requestTime, output | Export-CSV "WinUpdatesReport.csv"

• Replace NAME OF THE COMMAND with the exact name you used when saving the JumpCloud script.
• The exported report will be saved as WinUpdatesReport.csv in your *C:* drive or current directory.

This file provides a consolidated view of all Windows update statuses (Installed / Failed) across devices managed by JumpCloud.

Step 3 – Verify and Analyze the Report

Once exported:

• Open the CSV file in Excel or any CSV viewer.
• Review the system names, update messages, and status fields.
• Use filters to quickly identify failed or pending updates.

This report helps IT administrators ensure patch compliance and identify systems requiring manual intervention.