Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package

Stars 1,166

Forks 115

Open issues 16

PowerShell Gallery downloads 417,764

Release v1.1.9

Language: PowerShell Updated: 2026-04-11

API Reference

Function

Get-GPOZaurrPermissionRoot

Namespace GPOZaurr

Retrieves the root permissions of Group Policy Objects (GPOs) based on specified criteria.

Remarks

Retrieves the root permissions of GPOs based on the specified criteria, including filtering by permission types, forest, domains, and more.

Examples

Authored help example

EXAMPLE 1

PS >


Get-GPOZaurrPermissionRoot -IncludePermissionType 'GpoRootCreate' -ExcludePermissionType 'GpoRootOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -SkipNames

EXAMPLE 2

PS >


Get-GPOZaurrPermissionRoot -IncludePermissionType 'GpoRootOwner' -ExcludePermissionType 'GpoRootCreate' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -SkipNames

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-GPOZaurrPermissionRoot [-ExcludeDomains <String[]>] [-ExcludePermissionType <GpoRootCreate|GpoRootOwner>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-IncludeDomains <String[]>] [-IncludePermissionType <GpoRootCreate|GpoRootOwner>] [-SkipNames] [<CommonParameters>]

Parameter set: All Parameter Sets

Parameters

ExcludeDomains String[] optionalposition: 3pipeline: False: Specifies domains to exclude from the search.
ExcludePermissionType String[] optionalposition: 1pipeline: Falsevalues: 2: Specifies the root permission types to exclude from the search.; Possible values: GpoRootCreate, GpoRootOwner
ExtendedForestInformation IDictionary optionalposition: 5pipeline: False: Provides additional forest information to speed up processing.
Forest String optionalposition: 2pipeline: Falsealiases: ForestName: Specifies the target forest. By default, the current forest is used.
IncludeDomains String[] optionalposition: 4pipeline: Falsealiases: Domain, Domains: Specifies domains to include in the search.
IncludePermissionType String[] optionalposition: 0pipeline: Falsevalues: 2: Specifies the root permission types to include in the search.; Possible values: GpoRootCreate, GpoRootOwner
SkipNames SwitchParameter optionalposition: namedpipeline: False: Skips processing names during the operation.