Command

Get-GPOZaurrPermissionSummary

Module GPOZaurr

Retrieves a summary of Group Policy Object (GPO) permissions based on specified criteria.

Syntax

Get-GPOZaurrPermissionSummary [[-ExcludeDomains] <String[]>] [[-ExcludePermissionType] <String[]>] [[-ExtendedForestInformation] <IDictionary>] [[-Forest] <String>] [[-IncludeDomains] <String[]>] [[-IncludePermissionType] <String[]>] [[-PermitType] <Allow|Deny|All>] [[-Separator] <String>] [[-Type] <String[]>] [<CommonParameters>]

Parameter set: All Parameter Sets

Description

Retrieves a summary of GPO permissions based on the specified criteria, including filtering by permission types, permit types, and more.

Examples

Authored help example

EXAMPLE 1

Get-GPOZaurrPermissionSummary -Type 'All' -PermitType 'Allow' -IncludePermissionType 'GpoApply', 'GpoEdit' -ExcludePermissionType 'GpoOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -Separator '|'

EXAMPLE 2

Get-GPOZaurrPermissionSummary -Type 'Administrative' -PermitType 'All' -IncludePermissionType 'GpoRead' -ExcludePermissionType 'GpoRootOwner' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -Separator ','

Parameters

-ExcludeDomains String[] optionalposition: 5: Specifies domains to exclude from the search.
-ExcludePermissionType String[] optionalposition: 3: Specifies the permission types to exclude from the summary.; Possible values: GpoApply, GpoEdit, GpoCustom, GpoEditDeleteModifySecurity, GpoRead, GpoOwner, GpoRootCreate, GpoRootOwner
-ExtendedForestInformation IDictionary optionalposition: 7: Provides additional forest information to speed up processing.
-Forest String optionalposition: 4aliases: ForestName: Specifies the target forest. By default, the current forest is used.
-IncludeDomains String[] optionalposition: 6aliases: Domain, Domains: Specifies domains to include in the search.
-IncludePermissionType String[] optionalposition: 2: Specifies the permission types to include in the summary.; Possible values: GpoApply, GpoEdit, GpoCustom, GpoEditDeleteModifySecurity, GpoRead, GpoOwner, GpoRootCreate, GpoRootOwner
-PermitType String optionalposition: 1: Specifies the type of permission to permit. Options include 'Allow', 'Deny', and 'All'.; Possible values: Allow, Deny, All
-Separator String optionalposition: 8: Specifies the separator to use in the output.
-Type String[] optionalposition: 0: Specifies the type of permissions to include. Options include 'AuthenticatedUsers', 'DomainComputers', 'Unknown', 'WellKnownAdministrative', 'NotWellKnown', 'NotWellKnownAdministrative', 'NotAdministrative', 'Administrative', and 'All'.; Possible values: AuthenticatedUsers, DomainComputers, Unknown, WellKnownAdministrative, NotWellKnown, NotWellKnownAdministrative, NotAdministrative, Administrative, All

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.