In a workgroup environment, no domain, no group policy, cannot configure registry key on the client.

From my management machine I want to run a powershell script to download patches from a specific patch group in wsus onto this new machine and install the patches.

How can I achieve this with Powershell?
How do I approve patches using powershell.

• Edited by VicVmware Wednesday, March 25, 2015 4:02 AM

Hi VicVmware,

In my expression, you want to download patches from WSUS server to a workgroup hasn't configured WSUS client.

We can approve patches on WSUS server with Powershell script in this thread:

Approve patches in WSUS by powershell

$updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
$updatescope.FromCreationDate = [datetime]"3/13/2012 5:00:00 PM"
$Group = $wsus.GetComputerTargetGroups() | where {$_.Name -eq 'TestGroup'}
$wsus.GetUpdates($UpdateScope) | ForEach {
    Write-Host ("Approving {0} for {1}" -f $_.Title,$Group.Name) -Fore Green -Back Black
    $_.Approve('Install',$Group)
}

However, if you haven't configured the WSUS client, it's also difficult to download patches from WSUS server via script.

In addition, for a workgroup you can try to manually download patches from here:

http://catalog.update.microsoft.com/v7/site/Home.aspx

If there is anything else regarding this issue, please feel free to post back.

Best Regards,

Anna Wang