Check latest approved windows updates on each windows server

Hi Guys,

I am looking for someone who can help me out with a powershell script. I want to check 3 things on all servers (around 100) for three things the next day after updates are approved on the WSUS server.

  1. Check if Servers have rebooted
  2. Check if all approved updates are installed on the servers
  3. Check if all automatic services are in running mode
    Any Servers which don’t satisfy any of the conditions should be exported with server name and reason. I think I can manage the powershell for condition 1 and 3. But I need some help to get my head around condition 2

I want the powershell to check the latest approved updates on the WSUS server and compare the valid ones with each server in the list depending on whether it is Windows 2008 R2/Windows 2012R2/Windows 2016.

Might want to start here and customize for your needs.

Powershell script to query a particular patch is installed on remote computers