Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Invoke-GPOZaurr

Aliases: Show-GPO, Show-GPOZaurr
Namespace GPOZaurr
Aliases
Show-GPO Show-GPOZaurr

Single cmdlet that provides 360 degree overview of Group Policies in Active Directory Forest.

Remarks

Single cmdlet that provides 360 degree overview of Group Policies in Active Directory Forest with ability to pick reports and export to HTML.

Guides & Samples

Authored walkthroughs and practical samples linked to this API.

Examples

Authored help example

EXAMPLE 1

PS >


Invoke-GPOZaurr

EXAMPLE 2

PS >


Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @(
    '*OU=Production,DC=ad,DC=evotec,DC=pl'
)

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Invoke-GPOZaurr [-ExcludeDomains <String[]>] [-Exclusions <Object>] [-FilePath <String>] [-Forest <String>] [-GPOGUID <String[]>] [-GPOName <String[]>] [-HideHTML] [-HideSteps] [-IncludeDomains <String[]>] [-Online] [-PassThru] [-ShowError] [-ShowWarning] [-SplitReports] [-Type <String[]>] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Exclude domain from search, by default whole forest is scanned
Exclusions Object optionalposition: 1pipeline: Falsealiases: ExcludeGroupPolicies, ExclusionsCode
Allows to mark as excluded some Group Policies or Organizational Units depending on type. Can be a scriptblock or array depending on supported way by underlying report. Not every report support exclusions. Not every report support exclusions the same way. Exclusions should be used only if there is single report being asked for.
FilePath String optionalposition: namedpipeline: False
Path to the file where the report will be saved.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Target different Forest, by default current forest is used
GPOGUID String[] optionalposition: namedpipeline: Falsealiases: GUID
GPOName String[] optionalposition: namedpipeline: Falsealiases: Name
HideHTML SwitchParameter optionalposition: namedpipeline: False
Do not auto open HTML report in default browser
HideSteps SwitchParameter optionalposition: namedpipeline: False
Do not show steps in report
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Include only specific domains, by default whole forest is scanned
Online SwitchParameter optionalposition: namedpipeline: False
Forces report to use online resources in HTML (using CDN most of the time), by default it is run offline, and inlines all CSS/JS code.
PassThru SwitchParameter optionalposition: namedpipeline: False
Returns created objects after the report is done
ShowError SwitchParameter optionalposition: namedpipeline: False
Show errors in HTML report. Useful in case the report is being run as Scheduled Task
ShowWarning SwitchParameter optionalposition: namedpipeline: False
Show warnings in HTML report. Useful in case the report is being run as Scheduled Task
SplitReports SwitchParameter optionalposition: namedpipeline: False
Split report into multiple files, one for each report. This can be useful for large domains with huge reports.
Type String[] optionalposition: 0pipeline: False
Type of report to be generated from a list of available reports.