windows_patching.yml

---
- name: Patch Windows server(s)
  gather_facts: "no"
  vars_files:
    - vars/winrm.yml
  hosts:
  #  - "{{ windows_patch_hosts }}"
    - windows
  tasks:
# Check if there are missing updates
    - block:
        - name: Check for missing updates.
          win_updates:
           state: searched
          register: update_count

    #Install missing updates only if at least one is missing
    - block:
        - name: Install missing updates.
          win_updates:
            category_names:
              - Application
              - Connectors
              - DefinitionUpdates
              - DeveloperKits
              - FeaturePacks
              - Guidance
              - ServicePacks
              - Tools
              - UpdateRollups
              - CriticalUpdates
              - SecurityUpdates
            reboot: yes
          register: update_result