Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,250
Forks 119
Open issues 15
PowerShell Gallery downloads 421,558
Release v1.1.11
Language: PowerShell Updated: 2026-10-09
Command

Get-GPOZaurrPermissionRoot

Module GPOZaurr

Retrieves the root permissions of Group Policy Objects (GPOs) based on specified criteria.

Syntax

Get-GPOZaurrPermissionRoot [[-ExcludeDomains] <String[]>] [[-ExcludePermissionType] <GpoRootCreate|GpoRootOwner>] [[-ExtendedForestInformation] <IDictionary>] [[-Forest] <String>] [[-IncludeDomains] <String[]>] [[-IncludePermissionType] <GpoRootCreate|GpoRootOwner>] [-SkipNames] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Description

Retrieves the root permissions of GPOs based on the specified criteria, including filtering by permission types, forest, domains, and more.

Examples

Authored help example

EXAMPLE 1

Get-GPOZaurrPermissionRoot -IncludePermissionType 'GpoRootCreate' -ExcludePermissionType 'GpoRootOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -SkipNames

EXAMPLE 2

Get-GPOZaurrPermissionRoot -IncludePermissionType 'GpoRootOwner' -ExcludePermissionType 'GpoRootCreate' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -SkipNames

Parameters

-ExcludeDomains String[] optionalposition: 3
Specifies domains to exclude from the search.
-ExcludePermissionType String[] optionalposition: 1
Specifies the root permission types to exclude from the search.
Possible values: GpoRootCreate, GpoRootOwner
-ExtendedForestInformation IDictionary optionalposition: 5
Provides additional forest information to speed up processing.
-Forest String optionalposition: 2aliases: ForestName
Specifies the target forest. By default, the current forest is used.
-IncludeDomains String[] optionalposition: 4aliases: Domain, Domains
Specifies domains to include in the search.
-IncludePermissionType String[] optionalposition: 0
Specifies the root permission types to include in the search.
Possible values: GpoRootCreate, GpoRootOwner
-SkipNames SwitchParameter optional
Skips processing names during the operation.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.