One-Liner: Domain Controller Patch Levels

Before performing work against your Active Directoy, it's prudent to complete a few checks, e.g. is replication healthy, are my FSMOs up, do I have up-to-date, verified backups etc?

Here's a one-liner to give you a view of whether your patch levels are consistent:

Get-ADDomainController -Filter * | ForEach-Object {

$HotFixes = (Get-HotFix -ComputerName $_.Name).Count

Write-Host "$($_.Name): $($_.OperatingSystem) : $HotFixes HotFixes"

}

 

Remember, this is only a view, a starting point for further analysis...

 
"...One foot in sea, and one on shore,
To one thing constant never..."