vn-ansible/playbooks/windows-update.yml

- hosts: all
  serial: 1
  tasks:
    - block:
        - name: Check if there are missing updates
          win_updates: state=searched
          register: update_count
    - block:
        - name: Install missing updates only if at least one is missing
          win_updates:
            category_names: '*'
              #- Application
              #- Connectors
              #- DefinitionUpdates
              #- DeveloperKits
              #- FeaturePacks
              #- Guidance
              #- ServicePacks
              #- Tools
              #- UpdateRollups
              #- CriticalUpdates
              #- SecurityUpdates
            log_path: C:\Win_Template_Patch.log
          register: update_result
        - name: Reboot, if needed.
          win_reboot:
          when: update_result.reboot_required
      when: update_count.found_update_count|int >= 1