# windows patching playbook

**URL:** <https://forum.ansible.com/t/windows-patching-playbook/34828>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [March 22, 2021, 6:06pm UTC](https://forum.ansible.com/t/windows-patching-playbook/34828 "2021-03-22T18:06:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [March 22, 2021, 6:06pm UTC](https://forum.ansible.com/t/windows-patching-playbook/34828/1 "2021-03-22T18:06:52Z")

</div>

i need a windows patching playbook to patch mostly windows servers

need to install al critical and security updates and auto reboot

also need a report status back on which host failed or what was installed and not installed

any idea?

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [March 22, 2021, 9:52pm UTC](https://forum.ansible.com/t/windows-patching-playbook/34828/2 "2021-03-22T21:52:48Z")

</div>

this is a good starting point - [https://github.com/ansible/workshops/tree/master/exercises/ansible\_windows/7-win-patch](https://github.com/ansible/workshops/tree/master/exercises/ansible_windows/7-win-patch)

---

<div class="post-metadata">

**Author:** ![Jitendra\_Ingale](https://avatars.discourse-cdn.com/v4/letter/j/5fc32e/32.png) [@Jitendra\_Ingale](https://forum.ansible.com/u/Jitendra_Ingale)\
**Post date:** [October 18, 2021, 3:17pm UTC](https://forum.ansible.com/t/windows-patching-playbook/34828/3 "2021-10-18T15:17:36Z")

</div>

In context of this. I would like to ask if I can use Ansible controller to automate Windows hosts patching ?

I am trying to understand what all steps I need to consider and if it can be done without any 3rd party tool (WSUS, Patch Manager Plus etc.) than Ansible ?

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [October 18, 2021, 3:19pm UTC](https://forum.ansible.com/t/windows-patching-playbook/34828/4 "2021-10-18T15:19:28Z")

</div>

i like to know too

---

<div class="post-metadata">

**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\
**Post date:** [October 18, 2021, 3:21pm UTC](https://forum.ansible.com/t/windows-patching-playbook/34828/5 "2021-10-18T15:21:15Z")

</div>

Yes you can. I created a custom ansible module that handles windows patching as scaling in Windows patching can be a pain especially on long duration times.

Which ever way you choose ansible has an answer for it