#Region VARIABLES

# WSUS Connection Parameters:
## Change settings below to your situation. ##
# FQDN of the WSUS server
[String]$parentServer = "Change me"
# Use secure connection $True or $False
[Boolean]$useSecureConnection = $False
[Int32]$portNumber = 80
# From address for email notifications. You can name it to whatever you want.
[String]$emailFromAddress = "Change me"
# To address for email notifications. The recipient whom needs to receive emails upon the cleanup completion.
[String]$emailToAddress = "Change me"
# Subject of email notification
[String]$emailSubject = "WSUS Cleanup Results"
# Exchange server
[String]$emailMailserver = "Change me"


# Cleanup Parameters:
## Set to $True or $False ##
# Decline updates that have not been approved for 30 days or more, are not currently needed by any clients, and are superseded by an aproved update.
[Boolean]$supersededUpdates = $True
# Decline updates that aren't approved and have been expired my Microsoft.
[Boolean]$expiredUpdates = $True
# Delete updates that are expired and have not been approved for 30 days or more.
[Boolean]$obsoleteUpdates = $True
# Delete older update revisions that have not been approved for 30 days or more.
[Boolean]$compressUpdates = $True
# Delete computers that have not contacted the server in 30 days or more.
[Boolean]$obsoleteComputers = $True
# Delete update files that aren't needed by updates or downstream servers.
[Boolean]$unneededContentFiles = $True

#EndRegion VARIABLES

#Region SCRIPT

# Load .NET assembly
[void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration");

# Connect to WSUS Server
$wsusParent = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($parentServer,$useSecureConnection,$portNumber);

# Log the date first
$DateNow = Get-Date

# Perform Cleanup
$Body += "$parentServer ($DateNow ) :" | Out-String 
$CleanupManager = $wsusParent.GetCleanupManager();
$CleanupScope = New-Object Microsoft.UpdateServices.Administration.CleanupScope($supersededUpdates,$expiredUpdates,$obsoleteUpdates,$compressUpdates,$obsoleteComputers,$unneededContentFiles);
$Body += $CleanupManager.PerformCleanup($CleanupScope) | Out-String 

#Get list of downstream servers
$wsusDownstreams = [Microsoft.UpdateServices.Administration.AdminProxy]::DownstreamServerCollection;
$wsusDownstreams = $wsusParent.GetDownstreamServers();

#Clean each downstream server
$wsusDownstreams | ForEach-Object {
			$ping = New-Object System.Net.NetworkInformation.Ping
			$DSServer = $_.FullDomainName
			Try{
				$Reply = $ping.send($DSServer)
				$ReplyStatus = $Reply.Status
				Write-Host $ReplyStatus
			}
			catch{
				$ReplyStatus = "False"
				Write-Host $ReplyStatus
			}
			if ($ReplyStatus -eq "Success")
			{
				# Log the date first
				$DateNow = Get-Date
				$Body += $DSServer + " ($DateNow ) : " | Out-String
				$wsusReplica = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($_.FullDomainName,$useSecureConnection,$portNumber);
				$CleanupManager = $wsusReplica.GetCleanupManager();
				$CleanupScope = New-Object Microsoft.UpdateServices.Administration.CleanupScope($supersededUpdates,$expiredUpdates,$obsoleteUpdates,$compressUpdates,$obsoleteComputers,$unneededContentFiles);
				$Body += $CleanupManager.PerformCleanup($CleanupScope) | Out-String
			}else{
				# Log the date first
				$DateNow = Get-Date
				$Body += $DSServer + " ($DateNow ) : not pingable`n" | Out-String 
			}
}

# Send the results in an email
#Send-MailMessage -From $emailFromAddress -To $emailToAddress -Subject $emailSubject -Body $Body -SmtpServer $emailMailserver

# Mail the report...
$message = new-object Net.Mail.MailMessage
$mailer = new-object Net.Mail.SmtpClient($emailMailserver)
# From address for email notifications. You can name it to whatever you want.
$message.From = "Change me"
# To address for email notifications. The recipient whom needs to receive emails upon the cleanup completion.
$message.To.Add("Change me")
$message.Subject = "Windows Update - Server Clean-Up Wizard"
$message.Body = ($Body)
# To address for email notifications. The recipient whom needs to receive emails upon the cleanup completion.
$mailer.Send($message)

#EndRegion SCRIPT