Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Get-GPOZaurrPermissionConsistency

Namespace GPOZaurr

Retrieves information about Group Policy Objects (GPOs) and checks permission consistency across domains.

Remarks

The Get-GPOZaurrPermissionConsistency function retrieves information about GPOs and checks permission consistency across domains. It can filter by GPO name, GPO GUID, or type of consistency. It also provides options to include/exclude specific domains and verify inheritance.

Examples

Authored help example

EXAMPLE 1

PS >


Get-GPOZaurrPermissionConsistency -GPOName "TestGPO" -Forest "Contoso" -IncludeDomains @("DomainA", "DomainB") -Type "Consistent"
Retrieves permission consistency information for the GPO named "TestGPO" in the forest "Contoso" for domains "DomainA" and "DomainB" with consistent permissions.
        

EXAMPLE 2

PS >


Get-GPOZaurrPermissionConsistency -GPOGuid "12345678-1234-1234-1234-1234567890AB" -Forest "Fabrikam" -Type "Inconsistent" -VerifyInheritance
Retrieves permission consistency information for the GPO with GUID "12345678-1234-1234-1234-1234567890AB" in the forest "Fabrikam" for all domains with inconsistent permissions and verifies inheritance.
        

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-GPOZaurrPermissionConsistency [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-IncludeDomains <String[]>] [-IncludeGPOObject] [-Type <Consistent|Inconsistent|All>] [-VerifyInheritance] [<CommonParameters>]
#
Parameter set: Type

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Specifies an array of domains to exclude from the search.
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Specifies additional information about the forest.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Specifies the forest name to retrieve GPO information from.
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the search.
IncludeGPOObject SwitchParameter optionalposition: namedpipeline: False
Indicates whether to include the GPO object in the output.
Type String[] optionalposition: namedpipeline: Falsevalues: 3
Specifies the type of consistency to check. Valid values are 'Consistent', 'Inconsistent', or 'All'.
Possible values: Consistent, Inconsistent, All
VerifyInheritance SwitchParameter optionalposition: namedpipeline: False
Indicates whether to verify inheritance of permissions.
Get-GPOZaurrPermissionConsistency [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-GPOName <String>] [-IncludeDomains <String[]>] [-IncludeGPOObject] [-VerifyInheritance] [<CommonParameters>]
#
Parameter set: GPOName

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Specifies an array of domains to exclude from the search.
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Specifies additional information about the forest.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Specifies the forest name to retrieve GPO information from.
GPOName String optionalposition: namedpipeline: False
Specifies the name of the GPO to retrieve.
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the search.
IncludeGPOObject SwitchParameter optionalposition: namedpipeline: False
Indicates whether to include the GPO object in the output.
VerifyInheritance SwitchParameter optionalposition: namedpipeline: False
Indicates whether to verify inheritance of permissions.
Get-GPOZaurrPermissionConsistency [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-GPOGuid <String>] [-IncludeDomains <String[]>] [-IncludeGPOObject] [-VerifyInheritance] [<CommonParameters>]
#
Parameter set: GPOGUID

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Specifies an array of domains to exclude from the search.
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Specifies additional information about the forest.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Specifies the forest name to retrieve GPO information from.
GPOGuid String optionalposition: namedpipeline: Falsealiases: GPOID, GUID
Specifies the GUID of the GPO to retrieve.
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the search.
IncludeGPOObject SwitchParameter optionalposition: namedpipeline: False
Indicates whether to include the GPO object in the output.
VerifyInheritance SwitchParameter optionalposition: namedpipeline: False
Indicates whether to verify inheritance of permissions.