#$cred = Get-Credential
# または
#（事前に Get-Credential | Export-Clixml $HOME\vm01-cred.xml でXMLを作成）
#$cred = Import-Clixml $HOME\vm01-cred.xml
# または
$username = ".\Administrator"
$password = "P@ssw0rd!"
$securePassword = ConvertTo-SecureString $password -AsPlainText -Force
$cred = [PSCredential]::new($username, $securePassword)

$vmName = "vm01"
# https://www.say-tech.co.jp/contents/blog/yamanxworld/2025vol124
$updateScriptPath = "E:\Tools\WUA_SearchDownloadInstall.ps1"
$guestTargetPath = "C:\"

$vm = Get-VM -Name $vmName -ErrorAction Stop

# チェックポイントの作成
$vm | CheckPoint-VM -SnapshotName "Pre Update"

# ゲスト サービスの現在の設定の退避と有効化
$guestSvcDefault = (Get-VMIntegrationService -VMName $vm.Name "ゲスト サービス インターフェイス").Enabled
if (!$guestSvcDefault) {
  Enable-VMIntegrationService -VMName $vm.Name "ゲスト サービス インターフェイス"
}

# VMの開始（ゲスト起動まで待機）
$vm | Start-VM -ErrorAction Stop
Write-Host "`r$($vm.Name) is Starting...        " -NoNewLine
While ($vm.Heartbeat -notlike "Ok*") {
   Start-Sleep 1
}
Write-Host "`r$($vm.Name) is Online              " -NoNewLine

# Windows Update Scriptをゲストにコピー
Write-Host "`rStart Windows Update...            " -NoNewLine
Copy-VMFile -Name $vm.Name -SourcePath $updateScriptPath -DestinationPath $guestTargetPath -FileSource Host -Force

# ゲスト サービスを以前の設定に戻す
if (!$guestSvcDefault) {
  Disable-VMIntegrationService -VMName $vm.Name "ゲスト サービス インターフェイス"
}

# Windows Update スクリプトの実行
$updateScript = Join-Path "C:\" (Split-Path $updateScriptPath -Leaf)
Invoke-Command -VMName $vm.Name -Credential $cred -ScriptBlock { & $using:updateScript -Automate }

# 再起動待ち？
$rebootReq = Invoke-Command -VMName $vm.Name -Credential $cred -ScriptBlock {if ((Test-Path "HKLM:SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired") -or (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending")) { return $true } else { return $false } }

# 再起動待ちなら再起動
if ($rebootReq) {
    Write-Host "`rReboot required to complete update." -NoNewLine
    Invoke-Command -VMName $vm.Name -Credential $cred -ScriptBlock {Restart-Computer -Force}
    # Wait until "NoConnect"
    while ($vm.HeartBeat -like "Ok*") {
        Write-Host "`rConfiguring Windows Update...         " -NoNewLine
        start-sleep 1
    }
    Write-Host "`r$($vm.Name) is Restarting...        " -NoNewLine

    # Wait "Ok*" 900 seconds in a row
    $countdown = 900
    while ($countdown -gt 0) {
        if ($vm.HeartBeat -like "Ok*") {
            Write-Host "`rPlease wait $($countdown) sec...       " -NoNewLine
            $countdown--
        } else {
            Write-Host "`r$($vm.Name) is Restarting...              " -NoNewLine
               if ($countdown -ne 900) {
               $countdown = 900
            }
        }
        start-sleep 1
    }
}

# VMのシャットダウン
Write-Host "`r$($vm.Name) is Stopping...              " -NoNewLine
$vm | Stop-VM -Force -ErrorAction Stop
While ($vm.State -ne "Off") {
    Start-Sleep 1
}
Write-Host "`r$($vm.Name) is Off                      " -NoNewLine