Windows Update – Getting Windows Ready

๐Ÿ”’ Secure Bits ๐Ÿ’ก
โ€œ๐—š๐—ฒ๐˜๐˜๐—ถ๐—ป๐—ด ๐—ช๐—ถ๐—ป๐—ฑ๐—ผ๐˜„๐˜€ ๐—ฅ๐—ฒ๐—ฎ๐—ฑ๐˜†. ๐——๐—ผ๐—ปโ€™๐˜ ๐˜๐˜‚๐—ฟ๐—ป ๐—ผ๐—ณ๐—ณ ๐˜†๐—ผ๐˜‚๐—ฟ ๐—ฐ๐—ผ๐—บ๐—ฝ๐˜‚๐˜๐—ฒ๐—ฟ.โ€

Weโ€™ve all been thereโ€”stuck for what feels like forever. ๐—ช๐—ต๐—ฎ๐˜ ๐—ฐ๐—ฎ๐—ป ๐˜†๐—ผ๐˜‚ ๐—ฑ๐—ผ?
โœ… Wait (sometimes works, but usually max ~1 hour after updates, or ~5โ€“10 min without updates)
โœ… Hard reset (risk of data loss, especially with things like databases)
โœ… Orโ€ฆ a smarter option: ๐—ฟ๐—ฒ๐—บ๐—ผ๐˜๐—ฒ ๐˜๐—ฟ๐—ผ๐˜‚๐—ฏ๐—น๐—ฒ๐˜€๐—ต๐—ผ๐—ผ๐˜๐—ถ๐—ป๐—ด.

Recently, I had to use this in a customer environment and realizedโ€”many people donโ€™t know this trick.

Even when RDP and the local GUI are unavailable, you often still have management paths open:
๐Ÿ’ฅ ๐—ฅ๐—ฃ๐—–: Get-Service -ComputerName โ€ฆ, Get-Process -ComputerName โ€ฆ
๐Ÿ’ฅ ๐—š๐—จ๐—œ (RPC): compmgmt.msc โ†’ connect to the stuck machine
๐Ÿ’ฅ ๐—ช๐—ถ๐—ป๐—ฅ๐— : Enter-PSSession, Invoke-Command

๐—›๐—ฒ๐—ฟ๐—ฒโ€™๐˜€ ๐—บ๐˜† ๐—ด๐—ผ-๐˜๐—ผ ๐—บ๐—ฒ๐˜๐—ต๐—ผ๐—ฑ:
1๏ธโƒฃ Enter-PSSession to the machine
2๏ธโƒฃ Check services for anything in StopPending
3๏ธโƒฃ Identify the related process (often TrustedInstaller in my cases)
4๏ธโƒฃ Kill the process
5๏ธโƒฃ Watch the system recover and finish shutdown/reboot โœจ

โš  Yes, thereโ€™s some risk, but in practice, this has saved me from resets without impact.

Whatโ€™s your go-to move when you hit this situation?