Try our new Certificate Revocation List Check Tool
CRLcheck.exe is a tool developed to verify digital signatures of executable files. It collects files from known paths on your client, checks their signature, and checks Certificate Revocation Lists (CRL) and OCSP download. This helps avoid delays in launching files.
Category published:  WSUS   Click on the Category button to get more articles regarding that product.

WSUS, Automatic get rid of Itanium Updates nobody needs in 2013

Posted by admin on 05.07.2013

WSUS-Admins who take care of their WSUS Server and run the box over a few years know why to sort

Out updates which you don’t need. Esp. when you run on SQL Express. Yes you can shrink, yes you can migrate

But it gets slow. So best practive is to decline the “superseded updates” or updates which are quite old.

Also the “Itanium” updates which some guy at a university and bill gates in his garage still use.

If you run the script without chaning the Signung policy of your 2008R2 or maybe also 2012?
File C:\batch\lab_wsus_decline_itaniunm.ps1 cannot be loaded because running
scripts is disabled on this system. For more information, see about_Execution_Policies at
At line:1 char:1
+ .\lab_wsus_decline_itaniunm.ps1
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : SecurityError: (:) [], PSSecurityException
    + FullyQualifiedErrorId : UnauthorizedAccess
To get rid of the "unsigned PS error" > Please read in Technet what this does (Opens security!)
PS C:\batch> Set-ExecutionPolicy RemoteSigned
PS C:\batch> .\batch\ lab_wsus_decline_itaniunm.ps1

(Notice the .\scriptname!)

Change the red parameters to your WSUS-Server, Check in IIS (Internet Information Server) which Port your WSUS uses

$WsusServer = “”

$UseSSL = $false

$PortNumber = 8530

$TrialRun = $true

# $TrialRun = $false (To actually do it)

[reflection.assembly]::LoadWithPartialName(“Microsoft.UpdateServices.Administration”) | out-null

$WsusServerAdminProxy = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer($WsusServer,$UseSSL,$PortNumber);

#$itanium = $WsusServerAdminProxy.SearchUpdates(‘Itanium’) | ?{-not $_.IsDeclined}

#$itanium += $WsusServerAdminProxy.SearchUpdates(‘ia64’) | ?{-not $_.IsDeclined}

#Although the above seems faster it also seaches in the description of the update so use the below just to search the title!

$itanium = $WsusServerAdminProxy.GetUpdates() | ?{-not $_.IsDeclined -and $_.Title -match “ia64|itanium”}

If ($TrialRun)

{$MessageSubject += ” Trial Run”}


{$itanium | %{$_.Decline()}}

 Category published:  WSUS   Click on the Category button to get more articles regarding that product.