Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,250
Forks 119
Open issues 15
PowerShell Gallery downloads 421,558
Release v1.1.11
Language: PowerShell Updated: 2026-10-09
Command

Invoke-GPOZaurr

Module GPOZaurr

Single cmdlet that provides 360 degree overview of Group Policies in Active Directory Forest.

Syntax

Invoke-GPOZaurr [-ExcludeDomains <String[]>] [[-Exclusions] <Object>] [-FilePath <String>] [-Forest <String>] [-GPOGUID <String[]>] [-GPOName <String[]>] [-HideHTML] [-HideSteps] [-IncludeDomains <String[]>] [-Online] [-PassThru] [-ShowError] [-ShowWarning] [-SplitReports] [[-Type] <String[]>] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Description

Single cmdlet that provides 360 degree overview of Group Policies in Active Directory Forest with ability to pick reports and export to HTML.

Guides & Samples

Authored walkthroughs and practical samples linked to this command.

Examples

Authored help example

EXAMPLE 1

Invoke-GPOZaurr

EXAMPLE 2

Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @(
    '*OU=Production,DC=ad,DC=evotec,DC=pl'
)

Parameters

-ExcludeDomains String[] optional
Exclude domain from search, by default whole forest is scanned
-Exclusions Object optionalposition: 1aliases: ExcludeGroupPolicies, ExclusionsCode
Allows to mark as excluded some Group Policies or Organizational Units depending on type. Can be a scriptblock or array depending on supported way by underlying report. Not every report support exclusions. Not every report support exclusions the same way. Exclusions should be used only if there is single report being asked for.
-FilePath String optional
Path to the file where the report will be saved.
-Forest String optionalaliases: ForestName
Target different Forest, by default current forest is used
-GPOGUID String[] optionalaliases: GUID
Specifies one or more values for gpoguid.
-GPOName String[] optionalaliases: Name
Specifies one or more values for gpo name.
-HideHTML SwitchParameter optional
Do not auto open HTML report in default browser
-HideSteps SwitchParameter optional
Do not show steps in report
-IncludeDomains String[] optionalaliases: Domain, Domains
Include only specific domains, by default whole forest is scanned
-Online SwitchParameter optional
Forces report to use online resources in HTML (using CDN most of the time), by default it is run offline, and inlines all CSS/JS code.
-PassThru SwitchParameter optional
Returns created objects after the report is done
-ShowError SwitchParameter optional
Show errors in HTML report. Useful in case the report is being run as Scheduled Task
-ShowWarning SwitchParameter optional
Show warnings in HTML report. Useful in case the report is being run as Scheduled Task
-SplitReports SwitchParameter optional
Split report into multiple files, one for each report. This can be useful for large domains with huge reports.
-Type String[] optionalposition: 0
Type of report to be generated from a list of available reports.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.