Microsoft Update for PowerShell FAQ

Beginning with PowerShell 7.2, when you install using the MSI package you have the option of enabling Microsoft Update support for PowerShell.

General Information

What is the Microsoft Update feature in PowerShell?

The Microsoft Update feature of PowerShell allows you to get the latest PowerShell 7 updates in your traditional Microsoft Update (MU) management flow, whether that's with Windows Update for Business, WSUS, Microsoft Endpoint Configuration Manager, or the interactive MU dialog in Settings. Microsoft Update and the related services enable you to deploy updates:

  • On your schedule
  • After testing for your environment
  • At scale across your enterprise

How soon after release are updates advertised by Microsoft Update?

When a new version of PowerShell is released, it can take up to two weeks for that version to become available through Microsoft Update. Updates are delivered as optional software updates, even if the update contains a security fix.

If you need to deploy the update before it becomes available in Microsoft Update, download the update from the Releases page on GitHub.

Configuration

What version of Windows is required to support the Microsoft Update feature?

You must have Windows Version 1709 or newer installed on an x64-based system. Version 1709 is the Windows 10 Fall Creators Update or the October update of Windows Server 2016. Versions prior to 1709 do not support Microsoft Update for PowerShell.

Do I need to check both boxes in the setup dialog?

While the two options on the dialog are independent, in most cases, it's best to check both boxes.

PowerShell setup - Microsoft Update dialog

What does each checkbox do?

The first checkbox enables updates for PowerShell. These updates can be delivered by Microsoft Update, a WSUS server, or SCCM. If this checkbox is unchecked, you cannot receive updates through any of these channels.

The second checkbox enables Microsoft Update on your system. This allows you to receive updates for any supported Microsoft software, not just Windows. If the box is unchecked, you will not receive the update from Microsoft Update, but you can receive updates from WSUS or SCCM.

What if I want to opt-out later?

If you want to opt-out of updates later, you can run the MSI install package and uncheck the first checkbox. Unchecking the second checkbox has no effect.

Can I enable these update options from the command line or in a script?

Yes. The MSI package includes two new MSI options for enabling the update features:

  • USE_MU - This property has two possible values:
  • 1 (default) - Opts into updating through Microsoft Update, WSUS, or SCCM
  • 0 - Do not opt into updating through Microsoft Update, WSUS, or SCCM
  • ENABLE_MU
    • 1 (default) - Opts into using Microsoft Update for Automatic Updates
    • 0 - Do not opt into using Microsoft Update

Note

Setting ENABLE_MU=0 does not disable Microsoft Update.

Troubleshooting

I haven't received an update for the new release. Why not?

There can be several reasons for not receiving the update:

  • We may not have published the update yet. Our goal is to make the update available to Microsoft Update within two weeks of release, but there is no guarantee for that availability.

  • There are group policy settings that control Microsoft Update. Your system administrator may have policies set that prevent you from using Microsoft Update. The checkbox in the installer cannot override the Group Policy.

  • Make sure you have checked both checkboxes. The following command does a repair installation of the MSI from the command line:

    msiexec.exe /fmu .\PowerShell-7.2.5-win-x64.msi USE_MU=1 ENABLE_MU=1
    

    For more information about running msiexec.exe from the command line, see msiexec.