API Reference
Function
Get-GPOZaurrPermissionSummary
Retrieves a summary of Group Policy Object (GPO) permissions based on specified criteria.
Remarks
Retrieves a summary of GPO permissions based on the specified criteria, including filtering by permission types, permit types, and more.
Examples
EXAMPLE 1
PS >
Get-GPOZaurrPermissionSummary -Type 'All' -PermitType 'Allow' -IncludePermissionType 'GpoApply', 'GpoEdit' -ExcludePermissionType 'GpoOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -Separator '|'
EXAMPLE 2
PS >
Get-GPOZaurrPermissionSummary -Type 'Administrative' -PermitType 'All' -IncludePermissionType 'GpoRead' -ExcludePermissionType 'GpoRootOwner' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -Separator ','
Common Parameters
This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.
For more information, see about_CommonParameters.
Syntax
Get-GPOZaurrPermissionSummary [-ExcludeDomains <String[]>] [-ExcludePermissionType <GpoApply>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-IncludeDomains <String[]>] [-IncludePermissionType <GpoApply>] [-PermitType <Allow|Deny|All>] [-Separator <String>] [-Type <AuthenticatedUsers>] [<CommonParameters>]
#
Parameter set:
All Parameter SetsParameters
- ExcludeDomains String[]
- Specifies domains to exclude from the search.
- ExcludePermissionType String[]
- Specifies the permission types to exclude from the summary.
- Possible values:
GpoApply,GpoEdit,GpoCustom,GpoEditDeleteModifySecurity,GpoRead,GpoOwner,GpoRootCreate,GpoRootOwner - ExtendedForestInformation IDictionary
- Provides additional forest information to speed up processing.
- Forest String
- Specifies the target forest. By default, the current forest is used.
- IncludeDomains String[]
- Specifies domains to include in the search.
- IncludePermissionType String[]
- Specifies the permission types to include in the summary.
- Possible values:
GpoApply,GpoEdit,GpoCustom,GpoEditDeleteModifySecurity,GpoRead,GpoOwner,GpoRootCreate,GpoRootOwner - PermitType String
- Specifies the type of permission to permit. Options include 'Allow', 'Deny', and 'All'.
- Possible values:
Allow,Deny,All - Separator String
- Specifies the separator to use in the output.
- Type String[]
- Specifies the type of permissions to include. Options include 'AuthenticatedUsers', 'DomainComputers', 'Unknown', 'WellKnownAdministrative', 'NotWellKnown', 'NotWellKnownAdministrative', 'NotAdministrative', 'Administrative', and 'All'.
- Possible values:
AuthenticatedUsers,DomainComputers,Unknown,WellKnownAdministrative,NotWellKnown,NotWellKnownAdministrative,NotAdministrative,Administrative,All