# Statik IP ayarlama
New-NetIPAddress -IPAddress "192.168.31.100" -PrefixLength 24 -DefaultGateway "192.168.31.1" -InterfaceAlias "Ethernet"

# DNS sunucusu ayarlama
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses "127.0.0.1"

# Sunucu ismini ayarlama
Rename-Computer -NewName "WSUS-SERVER" -Restart

# WSUS rolünü tüm bağımlılıklarıyla kurma
Install-WindowsFeature -Name UpdateServices -IncludeManagementTools

# WID ile WSUS kurulumu
Install-WindowsFeature -Name UpdateServices -IncludeManagementTools

# WSUS content klasörü oluşturma
New-Item -Path "C:\WSUS" -ItemType Directory -Force

# NTFS izinleri ayarlama
$acl = Get-Acl "C:\WSUS"
$permission = "NT AUTHORITY\NETWORK SERVICE","FullControl","ContainerInherit,ObjectInherit","None","Allow"
$accessRule = New-Object System.Security.AccessControl.FileSystemAccessRule $permission
$acl.SetAccessRule($accessRule)
Set-Acl "C:\WSUS" $acl

# Mevcut kurulu özellikleri kontrol et
Get-WindowsFeature | Where-Object {$_.InstallState -eq "Installed"}

# Disk alanı kontrolü
Get-Volume -DriveLetter C | Select-Object DriveLetter, SizeRemaining

# WSUS servis durumunu kontrol et
Get-Service -Name WsusService | Select-Object Name, Status, StartType

# IIS durumu kontrolü
Get-Service -Name W3SVC | Select-Object Name, Status, StartType

# WSUS web sitesi kontrolü
Get-Website -Name "WSUS Administration"

# Post-installation task durumu
Get-WsusServer | Select-Object Name, PortNumber, ServerProtocolVersion

# IIS application pool durumu
Get-IISAppPool -Name "WsusPool"

# Post-installation logları kontrol et
Get-Content "C:\Program Files\Update Services\LogFiles\SoftwareDistribution.log" -Tail 50

# Güvenlik duvarı kurallarını kontrol et
New-NetFirewallRule -DisplayName "WSUS HTTP" -Direction Inbound -LocalPort 8530 -Protocol TCP -Action Allow
New-NetFirewallRule -DisplayName "WSUS HTTPS" -Direction Inbound -LocalPort 8531 -Protocol TCP -Action Allow

# Mevcut güvenlik duvarı kurallarını listele
Get-NetFirewallRule -DisplayName "WSUS*" | Select-Object DisplayName, Enabled, Direction

# İnternet bağlantısı kontrolü
Test-NetConnection -ComputerName "www.update.microsoft.com" -Port 443

# Proxy ayarlarını kontrol et
Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" | Select-Object ProxyEnable, ProxyServer

# Microsoft Update'e bağlanma ayarı
Set-WsusServerSynchronization -SyncFromMU

# Proxy ayarları (gerekiyorsa)
$proxy = New-Object System.Net.WebProxy("http://proxy.domain.com:8080")
$proxy.Credentials = [System.Net.CredentialCache]::DefaultCredentials
[System.Net.WebRequest]::DefaultWebProxy = $proxy

# Senkronizasyonu PowerShell ile başlatma
$wsus = Get-WsusServer
$subscription = $wsus.GetSubscription()
$subscription.StartSynchronization()

# Senkronizasyon durumunu izleme
$subscription.GetSynchronizationStatus()

# Sadece İngilizce güncellemeleri indir
$wsus = Get-WsusServer
$config = $wsus.GetConfiguration()
$config.AllUpdateLanguagesEnabled = $false
$config.SetEnabledUpdateLanguages("en")
$config.Save()

# Türkçe eklemek için
$config.SetEnabledUpdateLanguages("en","tr")
$config.Save()

# Mevcut dil ayarlarını kontrol et
$wsus.GetConfiguration().GetEnabledUpdateLanguages()

# Tüm ürünleri listele
Get-WsusProduct | Select-Object Title, ProductState

# Tüm ürünleri devre dışı bırak
Get-WsusProduct | Set-WsusProduct -Disable

# Sadece belirli ürünleri etkinleştir
Get-WsusProduct | Where-Object {$_.Product.Title -like "*Windows 10*"} | Set-WsusProduct

# Windows 11 ürünlerini etkinleştir
Get-WsusProduct | Where-Object {$_.Product.Title -eq "Windows 11"} | Set-WsusProduct

# Sadece temel Windows 11 güncellemelerini al
Get-WsusProduct | Where-Object {
    $_.Product.Title -eq "Windows 11" -and
    $_.Product.Title -notlike "*Driver*"
} | Set-WsusProduct

# Mevcut seçili ürünleri görüntüle
Get-WsusProduct | Where-Object {$_.Product.ProductState -eq "Enabled"} | Select-Object -ExpandProperty Title

# Kritik güncellemeleri etkinleştir
Get-WsusClassification | Where-Object {
    $_.Classification.Title -eq "Critical Updates"
} | Set-WsusClassification

# Güvenlik güncellemelerini etkinleştir
Get-WsusClassification | Where-Object {
    $_.Classification.Title -eq "Security Updates"
} | Set-WsusClassification

# Tanım güncellemelerini etkinleştir
Get-WsusClassification | Where-Object {
    $_.Classification.Title -eq "Definition Updates"
} | Set-WsusClassification

# Tüm seçili sınıflandırmaları listele
Get-WsusClassification | Where-Object {
    $_.Classification.IsSubscribed -eq $true
} | Select-Object -ExpandProperty Title

# Günlük otomatik senkronizasyon (02:00)
$wsus = Get-WsusServer
$subscription = $wsus.GetSubscription()
$subscription.SynchronizeAutomatically = $true
$subscription.SynchronizeAutomaticallyTimeOfDay = (New-TimeSpan -Hours 2)
$subscription.NumberOfSynchronizationsPerDay = 1
$subscription.Save()

# Manuel senkronizasyon
$subscription.SynchronizeAutomatically = $false
$subscription.Save()

# Hemen senkronizasyon başlat
$subscription.StartSynchronization()

# Senkronizasyon durumunu kontrol et
$subscription.GetSynchronizationStatus()

# Son senkronizasyon zamanı
$wsus.GetSubscription().LastSynchronizationTime

# Sonraki zamanlanmış senkronizasyon
$wsus.GetSubscription().GetNextScheduledSync()

# Senkronizasyon geçmişi
Get-WsusServer | Get-WsusSubscription | Select-Object LastSynchronizationTime, LastSynchronizationResult

# Update kaynağını ayarlama
Set-WsusServerSynchronization -SyncFromMU

# Proxy ayarları
$wsus = Get-WsusServer
$config = $wsus.GetConfiguration()
$config.ProxyName = "proxy.domain.com"
$config.ProxyServerPort = 8080
$config.Save()

# Seçili ürünleri görüntüle
Get-WsusProduct | Where-Object {$_.Product.ProductState -eq "Enabled"}

# Yeni ürün ekle
Get-WsusProduct -TitleIncludes "Windows Server 2025" | Set-WsusProduct

# Content dizinini değiştirme
$wsus = Get-WsusServer
$config = $wsus.GetConfiguration()
$config.LocalContentCachePath = "D:\WSUS"
$config.Save()

# Dil ayarları
$config.AllUpdateLanguagesEnabled = $false
$config.SetEnabledUpdateLanguages("en", "tr")
$config.Save()

# Senkronizasyon zamanlaması
$subscription = $wsus.GetSubscription()
$subscription.SynchronizeAutomatically = $true
$subscription.SynchronizeAutomaticallyTimeOfDay = (New-TimeSpan -Hours 2)
$subscription.NumberOfSynchronizationsPerDay = 1
$subscription.Save()

# Otomatik onay kuralı oluşturma
$rule = $wsus.GetInstallApprovalRules() | Where-Object {$_.Name -eq "Test Group Auto Approval"}
if (-not $rule) {
    $rule = $wsus.CreateInstallApprovalRule("Test Group Auto Approval")
    $rule.SetUpdateClassifications(@("Critical Updates", "Security Updates"))
    $rule.SetComputerTargetGroups(@("Test Computers"))
    $rule.Enabled = $true
    $rule.Save()
}

# Bilgisayar grubu oluşturma
$wsus.CreateComputerTargetGroup("Production Servers")
$wsus.CreateComputerTargetGroup("Test Computers")
$wsus.CreateComputerTargetGroup("Workstations")

# Grupları listele
$wsus.GetComputerTargetGroups() | Select-Object Name, Id

# Server Cleanup Wizard işlemleri
$cleanupScope = New-Object Microsoft.UpdateServices.Administration.CleanupScope

# Eski bilgisayarları temizle
$cleanupScope.CleanupObsoleteComputers = $true

# Kullanılmayan güncellemeleri temizle
$cleanupScope.CleanupUnneededContentFiles = $true

# Eski güncelleme revizyonlarını temizle
$cleanupScope.DeclineExpiredUpdates = $true

# Temizleme işlemini başlat
$wsus.GetCleanupManager().PerformCleanup($cleanupScope)

# Rapor toplama ayarları
$config = $wsus.GetConfiguration()
$config.ServerId = [Guid]::NewGuid()
$config.UpstreamWsusServerName = "upstream-wsus.domain.com"
$config.Save()

# E-posta bildirim ayarları
$notification = $wsus.GetEmailNotificationConfiguration()
$notification.SmtpHostName = "smtp.domain.com"
$notification.SenderEmailAddress = "wsus@domain.com"
$notification.SenderDisplayName = "WSUS Server"
$notification.Save()

# Bildirim gönder
$notification.SendTestEmail("admin@domain.com")

# İlk senkronizasyonu manuel başlat
$wsus = Get-WsusServer
$subscription = $wsus.GetSubscription()
$subscription.StartSynchronization()

# Senkronizasyon ilerlemesini izle
while ($subscription.GetSynchronizationStatus() -eq "Running") {
    Write-Host "Senkronizasyon devam ediyor..."
    Start-Sleep -Seconds 30
    $progress = $subscription.GetSynchronizationProgress()
    Write-Host "İlerleme: $($progress.TotalItems) / $($progress.ProcessedItems)"
}

# WSUS sunucu adresini registry'ye yazma
$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"
$wsusServer = "http://wsus-server:8530"

New-ItemProperty -Path $registryPath -Name "WUServer" -Value $wsusServer -Force
New-ItemProperty -Path $registryPath -Name "WUStatusServer" -Value $wsusServer -Force

# Otomatik güncelleme ayarları
$auPath = "$registryPath\AU"
New-ItemProperty -Path $auPath -Name "UseWUServer" -Value 1 -Force
New-ItemProperty -Path $auPath -Name "AUOptions" -Value 4 -Force

# İstemci tarafında grup hedefleme
New-ItemProperty -Path $registryPath -Name "TargetGroup" -Value "Production Servers" -Force
New-ItemProperty -Path $registryPath -Name "TargetGroupEnabled" -Value 1 -Force

# Ayarları uygula
gpupdate /force
wuauclt /detectnow /reportnow

# Kritik güncellemeleri test grubuna onayla
$wsus = Get-WsusServer
$testGroup = $wsus.GetComputerTargetGroups() | Where-Object {$_.Name -eq "Test Computers"}

Get-WsusUpdate -Approval Unapproved -Classification "Critical Updates" | 
    ForEach-Object {
        $_.Approve("Install", $testGroup)
    }

# Güvenlik güncellemelerini onayla
Get-WsusUpdate -Approval Unapproved -Classification "Security Updates" | 
    ForEach-Object {
        $_.Approve("Install", $testGroup)
    }

# Güncelleme özet raporu
$wsus = Get-WsusServer
$wsus.GetUpdateSummary() | Format-Table

# Bilgisayar durumu raporu
$wsus.GetComputerTargets() | 
    Select-Object FullDomainName, LastReportedStatusTime, LastSyncTime |
    Format-Table -AutoSize

# Başarısız güncellemeleri listele
Get-WsusUpdate -Approval Approved | 
    Where-Object {$_.GetUpdateInstallationInfoPerComputerTarget().FailedCount -gt 0} |
    Select-Object Title, @{N="FailedCount";E={$_.GetUpdateInstallationInfoPerComputerTarget().FailedCount}}

# WSUS servisini yeniden başlat
Restart-Service WsusService

# IIS uygulama havuzunu geri dönüştür
Restart-WebAppPool -Name "WsusPool"

# Server Cleanup Wizard çalıştır
$cleanupScope = New-Object Microsoft.UpdateServices.Administration.CleanupScope
$cleanupScope.CleanupObsoleteComputers = $true
$cleanupScope.CleanupObsoleteUpdates = $true
$cleanupScope.CleanupUnneededContentFiles = $true
$cleanupScope.CompressUpdates = $true
$cleanupScope.DeclineExpiredUpdates = $true
$cleanupScope.DeclineSupersededUpdates = $true

$wsus = Get-WsusServer
$cleanupManager = $wsus.GetCleanupManager()
$cleanupResults = $cleanupManager.PerformCleanup($cleanupScope)

Write-Host "Temizleme Sonuçları:"
Write-Host "Silinen eski bilgisayarlar: $($cleanupResults.ObsoleteComputersDeleted)"
Write-Host "Silinen güncellemeler: $($cleanupResults.ObsoleteUpdatesDeleted)"
Write-Host "Kaldırılan dosyalar: $($cleanupResults.DiskSpaceFreed) MB"

# Veritabanı indeksleme
wsusutil.exe deleteunneededrevisions

# Veritabanı sıkıştırma
$wsus = Get-WsusServer
$database = $wsus.GetDatabase()
$database.Reindex()

# Veritabanı indekslerini yeniden oluştur
wsusutil.exe deleteunneededrevisions

# Veritabanı bakımını çalıştır
$wsus = Get-WsusServer
$database = $wsus.GetDatabase()
$database.PerformMaintenance([Microsoft.UpdateServices.Administration.MaintenanceOperation]::ReIndexDatabase)

# SQL Server sorgu optimizasyonu (WID için)
sqlcmd -S np:\\.\pipe\MICROSOFT##WID\tsql\query -E -Q "USE SUSDB; EXEC sp_updatestats;"

# IIS application pool memory limitini artır
Import-Module WebAdministration
Set-ItemProperty -Path "IIS:\AppPools\WsusPool" -Name recycling.periodicRestart.memory -Value 0
Set-ItemProperty -Path "IIS:\AppPools\WsusPool" -Name processModel.maxProcesses -Value 4

# Disk alanını kontrol et
Get-Volume -DriveLetter C | Select-Object DriveLetter, SizeRemaining

# Server Cleanup Wizard çalıştır
$cleanupScope = New-Object Microsoft.UpdateServices.Administration.CleanupScope
$cleanupScope.CleanupObsoleteComputers = $true
$cleanupScope.CleanupObsoleteUpdates = $true
$cleanupScope.CleanupUnneededContentFiles = $true
$cleanupScope.DeclineExpiredUpdates = $true
$cleanupScope.DeclineSupersededUpdates = $true

$wsus = Get-WsusServer
$cleanupManager = $wsus.GetCleanupManager()
$cleanupResults = $cleanupManager.PerformCleanup($cleanupScope)

# Eski güncelleme dosyalarını temizle
Remove-Item "C:\WSUS\WsusContent\*" -Recurse -Force -ErrorAction SilentlyContinue

# Gereksiz ürünleri kaldır
Get-WsusProduct | Where-Object {$_.Product.Title -like "*Windows 7*"} | Set-WsusProduct -Disable

# Express installation files'ı devre dışı bırak
$config = $wsus.GetConfiguration()
$config.DownloadExpressPackages = $false
$config.Save()

# Self-signed sertifika oluştur
$cert = New-SelfSignedCertificate -DnsName "wsus-server.domain.com" `
    -CertStoreLocation "cert:\LocalMachine\My" `
    -NotAfter (Get-Date).AddYears(5)

# Sertifikayı IIS'e bağla
$binding = Get-WebBinding -Name "WSUS Administration" -Protocol https
if ($null -eq $binding) {
    New-WebBinding -Name "WSUS Administration" -Protocol https -Port 8531
}
$binding = Get-WebBinding -Name "WSUS Administration" -Protocol https -Port 8531
$binding.AddSslCertificate($cert.GetCertHashString(), "my")

# İstemcilere sertifikayı dağıt (GPO ile)
Export-Certificate -Cert $cert -FilePath "C:\WSUS-Cert.cer"

# Update durumunu kontrol et
$wsus = Get-WsusServer
Get-WsusUpdate -Approval Approved | 
    Select-Object Title, ApprovalCount, InstalledCount, NotInstalledCount |
    Format-Table -AutoSize

# İstemci tarafında güncelleme kontrolü tetikle
Invoke-WUJob -ComputerName "Client-PC" -Script {
    wuauclt /detectnow
    wuauclt /reportnow
}

# Onayları yenile
Get-WsusUpdate -Approval Approved | ForEach-Object {
    $_.Refresh()
}

# IIS Application Pool ayarlarını optimize et
Import-Module WebAdministration

# Queue Length artır
Set-ItemProperty -Path "IIS:\AppPools\WsusPool" -Name queueLength -Value 2000

# Idle Timeout artır
Set-ItemProperty -Path "IIS:\AppPools\WsusPool" -Name processModel.idleTimeout -Value "00:20:00"

# Recycling ayarları
Set-ItemProperty -Path "IIS:\AppPools\WsusPool" -Name recycling.periodicRestart.time -Value "00:00:00"
Set-ItemProperty -Path "IIS:\AppPools\WsusPool" -Name recycling.periodicRestart.requests -Value 0

# WsusPool restart
Restart-WebAppPool -Name "WsusPool"

# Veritabanı optimizasyonu
$wsus = Get-WsusServer
$database = $wsus.GetDatabase()
$database.Reindex()

$wsus = Get-WsusServer
$computerScope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope
$updateScope = New-Object Microsoft.UpdateServices.Administration.UpdateScope

Write-Host "=== WSUS Server Durumu ===" -ForegroundColor Cyan
Write-Host "Sunucu Adı: $($wsus.Name)"
Write-Host "Port: $($wsus.PortNumber)"
Write-Host "Versiyon: $($wsus.Version)"

Write-Host "`n=== Bilgisayar İstatistikleri ===" -ForegroundColor Cyan
$computers = $wsus.GetComputerTargets($computerScope)
Write-Host "Toplam Bilgisayar: $($computers.Count)"
Write-Host "Online: $(($computers | Where-Object {$_.LastReportedStatusTime -gt (Get-Date).AddDays(-7)}).Count)"
Write-Host "Offline: $(($computers | Where-Object {$_.LastReportedStatusTime -lt (Get-Date).AddDays(-7)}).Count)"

Write-Host "`n=== Güncelleme İstatistikleri ===" -ForegroundColor Cyan
$updates = $wsus.GetUpdates($updateScope)
Write-Host "Toplam Güncelleme: $($updates.Count)"
Write-Host "Onaylanan: $(($updates | Where-Object {$_.IsApproved}).Count)"
Write-Host "Declined: $(($updates | Where-Object {$_.IsDeclined}).Count)"

Write-Host "`n=== Son Senkronizasyon ===" -ForegroundColor Cyan
$subscription = $wsus.GetSubscription()
Write-Host "Son Senkronizasyon: $($subscription.LastSynchronizationTime)"
Write-Host "Sonraki Senkronizasyon: $($subscription.GetNextScheduledSync())"
Write-Host "Durum: $($subscription.GetSynchronizationStatus())"

$wsus = Get-WsusServer
$computers = $wsus.GetComputerTargets()

$report = foreach ($computer in $computers) {
    $summary = $computer.GetUpdateInstallationSummary()
    [PSCustomObject]@{
        'Computer Name' = $computer.FullDomainName
        'Last Sync' = $computer.LastSyncTime
        'OS' = $computer.OSDescription
        'Needed' = $summary.NotInstalledCount
        'Installed' = $summary.InstalledCount
        'Failed' = $summary.FailedCount
        'Downloaded' = $summary.DownloadedCount
        'Compliance %' = [math]::Round(($summary.InstalledCount / ($summary.InstalledCount + $summary.NotInstalledCount)) * 100, 2)
    }
}

$report | Format-Table -AutoSize
$report | Export-Csv -Path "C:\WSUS-Reports\Compliance-$(Get-Date -Format 'yyyy-MM-dd').csv" -NoTypeInformation

$wsus = Get-WsusServer
$updateScope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
$updateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::LatestRevisionApproved

$failedUpdates = $wsus.GetUpdates($updateScope) | Where-Object {
    $installInfo = $_.GetUpdateInstallationInfoPerComputerTarget()
    $installInfo.FailedCount -gt 0
}

$report = foreach ($update in $failedUpdates) {
    $installInfo = $update.GetUpdateInstallationInfoPerComputerTarget()
    [PSCustomObject]@{
        'Update Title' = $update.Title
        'Classification' = $update.UpdateClassificationTitle
        'Failed Count' = $installInfo.FailedCount
        'KB Article' = $update.KnowledgebaseArticles -join ', '
        'Release Date' = $update.CreationDate
    }
}

$report | Sort-Object 'Failed Count' -Descending | Format-Table -AutoSize

# Sadece belirli ağlardan erişim izni
New-NetFirewallRule -DisplayName "WSUS HTTP - LAN Only" `
    -Direction Inbound `
    -LocalPort 8530 `
    -Protocol TCP `
    -Action Allow `
    -RemoteAddress 192.168.31.0/24

New-NetFirewallRule -DisplayName "WSUS HTTPS - LAN Only" `
    -Direction Inbound `
    -LocalPort 8531 `
    -Protocol TCP `
    -Action Allow `
    -RemoteAddress 192.168.31.0/24

# HTTP'yi devre dışı bırak, sadece HTTPS kullan
$wsus = Get-WsusServer
$config = $wsus.GetConfiguration()
$config.UseSSL = $true
$config.Save()

# İstemcilerde HTTPS kullanımını zorla (GPO)
$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"
New-ItemProperty -Path $registryPath -Name "WUServer" -Value "https://wsus-server:8531" -Force

# WSUS yöneticileri için özel grup oluştur
New-ADGroup -Name "WSUS-Admins" -GroupScope Global -GroupCategory Security

# Kullanıcıları ekle
Add-ADGroupMember -Identity "WSUS-Admins" -Members "user1", "user2"

# WSUS Console erişimi için izin ver
$wsus = Get-WsusServer
$wsus.GetConfiguration().ServerRole = "UpdateServer"

# WID veritabanı yedeği
$backupPath = "D:\Backups\WSUS"
New-Item -Path $backupPath -ItemType Directory -Force

# Veritabanını dışa aktar
$date = Get-Date -Format "yyyy-MM-dd"
sqlcmd -S np:\\.\pipe\MICROSOFT##WID\tsql\query -E `
    -Q "BACKUP DATABASE SUSDB TO DISK='$backupPath\SUSDB-$date.bak' WITH FORMAT"

# Content klasörünü yedekle
$contentBackup = "$backupPath\Content-$date"
robocopy "C:\WSUS\WsusContent" $contentBackup /MIR /Z /R:3 /W:10

# WSUS yapılandırmasını dışa aktar
$wsus = Get-WsusServer
$config = $wsus.GetConfiguration()

$configBackup = @{
    UpdateSource = $config.SyncFromMicrosoftUpdate
    ProxySettings = $config.ProxyName
    ContentPath = $config.LocalContentCachePath
    Languages = $config.GetEnabledUpdateLanguages()
    Products = (Get-WsusProduct | Where-Object {$_.Product.ProductState -eq "Enabled"}).Product.Title
    Classifications = (Get-WsusClassification | Where-Object {$_.Classification.IsSubscribed}).Classification.Title
}

$configBackup | ConvertTo-Json | Out-File "D:\Backups\WSUS\Config-$(Get-Date -Format 'yyyy-MM-dd').json"

Import-Module WebAdministration

# Connection limits artır
Set-WebConfigurationProperty -PSPath "MACHINE/WEBROOT/APPHOST" `
    -Filter "system.applicationHost/sites/site[@name='WSUS Administration']/limits" `
    -Name "maxConnections" -Value 4294967295

# Request timeout artır
Set-WebConfigurationProperty -PSPath "MACHINE/WEBROOT/APPHOST/WSUS Administration" `
    -Filter "system.web/httpRuntime" `
    -Name "executionTimeout" -Value 7200

# Max request length artır
Set-WebConfigurationProperty -PSPath "MACHINE/WEBROOT/APPHOST/WSUS Administration" `
    -Filter "system.web/httpRuntime" `
    -Name "maxRequestLength" -Value 4194304

# Veritabanı bakım planı
$maintenanceScript = @"
USE SUSDB;
-- İndeks yeniden oluşturma
EXEC sp_MSforeachtable 'ALTER INDEX ALL ON ? REBUILD';
-- İstatistik güncelleme
EXEC sp_updatestats;
-- Log dosyası temizliği
DBCC SHRINKFILE (SUSDB_log, 1);
"@

sqlcmd -S np:\\.\pipe\MICROSOFT##WID\tsql\query -E -Q $maintenanceScript

# Content klasörü için disk önbelleğini optimize et
fsutil behavior set disablelastaccess 1

# WSUS klasörü için 8.3 adlandırmayı devre dışı bırak
fsutil 8dot3name set C:\WSUS 1

# Disk tamlama işlemi
Optimize-Volume -DriveLetter C -Defrag -Verbose

# Microsoft Update'ten güncelleme al
$wsus = Get-WsusServer
$subscription = $wsus.GetSubscription()
$subscription.SyncFromMicrosoftUpdate = $true
$subscription.Save()

# Upstream WSUS'tan güncelleme al
$wsus = Get-WsusServer
$subscription = $wsus.GetSubscription()
$subscription.SyncFromMicrosoftUpdate = $false
$subscription.SetUpstreamWsusServer("upstream-wsus.domain.com", $false, 8530)
$subscription.Save()

# Replica mode (tam kopya)
$config = $wsus.GetConfiguration()
$config.IsReplicaServer = $true
$config.Save()

# DailyWSUSMaintenance.ps1
[CmdletBinding()]
param(
    [string]$LogPath = "C:\WSUS-Logs\Maintenance-$(Get-Date -Format 'yyyy-MM-dd').log"
)

function Write-Log {
    param([string]$Message)
    $timestamp = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
    "$timestamp - $Message" | Tee-Object -FilePath $LogPath -Append
}

try {
    Write-Log "=== WSUS Günlük Bakım Başlıyor ==="
    
    # 1. Senkronizasyon durumu kontrol
    Write-Log "Senkronizasyon durumu kontrol ediliyor..."
    $wsus = Get-WsusServer
    $subscription = $wsus.GetSubscription()
    $syncStatus = $subscription.GetSynchronizationStatus()
    Write-Log "Senkronizasyon Durumu: $syncStatus"
    
    # 2. Veritabanı bakımı
    Write-Log "Veritabanı bakımı başlıyor..."
    wsusutil.exe deleteunneededrevisions
    Write-Log "Gereksiz revizyonlar silindi"
    
    # 3. IIS App Pool recycle
    Write-Log "IIS Application Pool yeniden başlatılıyor..."
    Restart-WebAppPool -Name "WsusPool"
    Write-Log "WsusPool yeniden başlatıldı"
    
    # 4. Disk alanı kontrolü
    Write-Log "Disk alanı kontrol ediliyor..."
    $volume = Get-Volume -DriveLetter C
    $freeSpaceGB = [math]::Round($volume.SizeRemaining / 1GB, 2)
    Write-Log "Boş Disk Alanı: $freeSpaceGB GB"
    
    if ($freeSpaceGB -lt 20) {
        Write-Log "UYARI: Düşük disk alanı! Temizlik yapılıyor..."
        $cleanupScope = New-Object Microsoft.UpdateServices.Administration.CleanupScope
        $cleanupScope.DeclineSupersededUpdates = $true
        $cleanupScope.CleanupUnneededContentFiles = $true
        $cleanupManager = $wsus.GetCleanupManager()
        $cleanupResults = $cleanupManager.PerformCleanup($cleanupScope)
        Write-Log "Temizlik tamamlandı. Kazanılan alan: $($cleanupResults.DiskSpaceFreed) MB"
    }
    
    Write-Log "=== WSUS Günlük Bakım Tamamlandı ==="
    
} catch {
    Write-Log "HATA: $($_.Exception.Message)"
}

# Scheduled Task oluştur
$action = New-ScheduledTaskAction -Execute "PowerShell.exe" `
    -Argument "-ExecutionPolicy Bypass -File C:\Scripts\DailyWSUSMaintenance.ps1"

$trigger = New-ScheduledTaskTrigger -Daily -At "03:00AM"

$principal = New-ScheduledTaskPrincipal -UserId "SYSTEM" -LogonType ServiceAccount -RunLevel Highest

Register-ScheduledTask -TaskName "WSUS Daily Maintenance" `
    -Action $action `
    -Trigger $trigger `
    -Principal $principal `
    -Description "WSUS günlük bakım işlemleri"

# Send-WSUSReport.ps1
param(
    [string]$SmtpServer = "smtp.domain.com",
    [string]$From = "wsus@domain.com",
    [string[]]$To = @("admin@domain.com"),
    [string]$Subject = "WSUS Günlük Rapor - $(Get-Date -Format 'dd.MM.yyyy')"
)

$wsus = Get-WsusServer
$computers = $wsus.GetComputerTargets()
$updates = $wsus.GetUpdates()

$htmlBody = @"
<html>
<head>
    <style>
        body { font-family: Arial, sans-serif; }
        table { border-collapse: collapse; width: 100%; }
        th, td { border: 1px solid #ddd; padding: 8px; text-align: left; }
        th { background-color: #4CAF50; color: white; }
        .warning { background-color: #ff9800; color: white; }
        .error { background-color: #f44336; color: white; }
    </style>
</head>
<body>
    <h2>WSUS Günlük Durum Raporu</h2>
    <h3>Sunucu Bilgileri</h3>
    <table>
        <tr><th>Özellik</th><th>Değer</th></tr>
        <tr><td>Sunucu Adı</td><td>$($wsus.Name)</td></tr>
        <tr><td>Port</td><td>$($wsus.PortNumber)</td></tr>
        <tr><td>Son Senkronizasyon</td><td>$($wsus.GetSubscription().LastSynchronizationTime)</td></tr>
    </table>
    
    <h3>Bilgisayar İstatistikleri</h3>
    <table>
        <tr><th>Durum</th><th>Sayı</th></tr>
        <tr><td>Toplam Bilgisayar</td><td>$($computers.Count)</td></tr>
        <tr><td>Güncelleme Bekleyen</td><td>$(($computers | Where-Object {$_.GetUpdateInstallationSummary().NotInstalledCount -gt 0}).Count)</td></tr>
        <tr class="error"><td>Başarısız Güncelleme</td><td>$(($computers | Where-Object {$_.GetUpdateInstallationSummary().FailedCount -gt 0}).Count)</td></tr>
    </table>
    
    <h3>Güncelleme İstatistikleri</h3>
    <table>
        <tr><th>Kategori</th><th>Sayı</th></tr>
        <tr><td>Onaylanan Güncellemeler</td><td>$(($updates | Where-Object {$_.IsApproved}).Count)</td></tr>
        <tr><td>Bekleyen Güncellemeler</td><td>$(($updates | Where-Object {-not $_.IsApproved -and -not $_.IsDeclined}).Count)</td></tr>
    </table>
</body>
</html>
"@

Send-MailMessage -SmtpServer $SmtpServer -From $From -To $To -Subject $Subject -Body $htmlBody -BodyAsHtml