Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package

Stars 1,166

Forks 115

Open issues 16

PowerShell Gallery downloads 417,764

Release v1.1.9

Language: PowerShell Updated: 2026-04-11

API Reference

Function

Get-GPOZaurrPermissionAnalysis

Namespace GPOZaurr

Analyzes permissions for Group Policy Objects (GPOs) and administrative groups.

Remarks

This function analyzes permissions for Group Policy Objects (GPOs) and identifies administrative groups with specific permissions.

Examples

Authored help example

EXAMPLE 1

PS >


Get-GPOZaurrPermissionAnalysis -Forest "ContosoForest" -IncludeDomains @("Domain1", "Domain2") -ExcludeDomains @("Domain3") -Permissions $PermissionsArray
Analyzes permissions for GPOs in the "ContosoForest" forest, including "Domain1" and "Domain2" while excluding "Domain3", using the specified permissions array.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-GPOZaurrPermissionAnalysis [-ExcludeDomains <String[]>] [-Forest <String>] [-IncludeDomains <String[]>] [-Permissions <Array>] [<CommonParameters>]

Parameter set: All Parameter Sets

Parameters

ExcludeDomains String[] optionalposition: 1pipeline: False: Specifies an array of domains to exclude from the analysis.
Forest String optionalposition: 0pipeline: Falsealiases: ForestName: Specifies the name of the forest to analyze.
IncludeDomains String[] optionalposition: 2pipeline: Falsealiases: Domain, Domains: Specifies an array of domains to include in the analysis.
Permissions Array optionalposition: 3pipeline: False: Specifies an array of permissions to analyze.