Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,250
Forks 119
Open issues 15
PowerShell Gallery downloads 421,558
Release v1.1.11
Language: PowerShell Updated: 2026-10-09
Command

Get-GPOZaurr

Module GPOZaurr

Gets information about all Group Policies. Similar to what Get-GPO provides by default.

Syntax

Get-GPOZaurr [[-ADAdministrativeGroups] <IDictionary>] [[-ExcludeDomains] <String[]>] [[-ExcludeGroupPolicies] <ScriptBlock>] [[-ExtendedForestInformation] <IDictionary>] [[-Forest] <String>] [[-GPOGuid] <String>] [[-GPOName] <String>] [[-GPOPath] <String[]>] [[-IncludeDomains] <String[]>] [-Limited] [-OwnerOnly] [-PermissionsOnly] [[-Type] <Empty|Unlinked|Disabled|NoApplyPermission|All>] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Examples

Authored help example

EXAMPLE 1

$GPOs = Get-GPOZaurr
$GPOs | Format-Table DisplayName, Owner, OwnerSID, OwnerType

EXAMPLE 2

$GPO = Get-GPOZaurr -GPOName 'ALL | Allow use of biometrics'
$GPO | Format-List *

EXAMPLE 3

$GPOS = Get-GPOZaurr -ExcludeGroupPolicies {
    Skip-GroupPolicy -Name 'de14_usr_std'
    Skip-GroupPolicy -Name 'de14_usr_std' -DomaiName 'ad.evotec.xyz'
    Skip-GroupPolicy -Name 'All | Trusted Websites' #-DomaiName 'ad.evotec.xyz'
    '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
    'COMPUTERS | Enable Sets'
}
$GPOS | Format-Table -AutoSize *

Parameters

-ADAdministrativeGroups IDictionary optionalposition: 9
Ability to provide ADAdministrativeGroups from different function to speed up processing
-ExcludeDomains String[] optionalposition: 5
Exclude domain from search, by default whole forest is scanned
-ExcludeGroupPolicies ScriptBlock optionalposition: 0
Marks the GPO as excluded from the list.
-ExtendedForestInformation IDictionary optionalposition: 7
Ability to provide Forest Information from another command to speed up processing
-Forest String optionalposition: 4aliases: ForestName
Target different Forest, by default current forest is used
-GPOGuid String optionalposition: 2aliases: GPOID, GUID
Provide a GPOGuid to get information about a specific GPO.
-GPOName String optionalposition: 1
Provide a GPOName to get information about a specific GPO.
-GPOPath String[] optionalposition: 8
Define GPOPath where the XML files are located to be analyzed instead of asking Active Directory
-IncludeDomains String[] optionalposition: 6aliases: Domain, Domains
Include only specific domains, by default whole forest is scanned
-Limited SwitchParameter optional
Provide limited output without analyzing XML data
-OwnerOnly SwitchParameter optional
only show owner information, by default all information is shown
-PermissionsOnly SwitchParameter optional
Only show permissions, by default all information is shown
-Type String[] optionalposition: 3
Choose a specific type of GPO. Options are: 'Empty', 'Unlinked', 'Disabled', 'NoApplyPermission', 'All'. Default is All.
Possible values: Empty, Unlinked, Disabled, NoApplyPermission, All

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.