Command

Get-GPOZaurr

Module: GPOZaurr

Gets information about all Group Policies. Similar to what Get-GPO provides by default.

Syntax

Get-GPOZaurr
[[-ADAdministrativeGroups] <IDictionary>]
[[-ExcludeDomains] <String[]>]
[[-ExcludeGroupPolicies] <ScriptBlock>]
[[-ExtendedForestInformation] <IDictionary>]
[[-Forest] <String>]
[[-GPOGuid] <String>]
[[-GPOName] <String>]
[[-GPOPath] <String[]>]
[[-IncludeDomains] <String[]>]
[-Limited]
[-OwnerOnly]
[-PermissionsOnly]
[[-Type] <Empty|Unlinked|Disabled|NoApplyPermission|All>]
[<CommonParameters>]

Parameter set: All Parameter Sets

Examples

Example 1

$GPOs = Get-GPOZaurr
$GPOs | Format-Table DisplayName, Owner, OwnerSID, OwnerType

Example 2

$GPO = Get-GPOZaurr -GPOName 'ALL | Allow use of biometrics'
$GPO | Format-List *

Example 3

$GPOS = Get-GPOZaurr -ExcludeGroupPolicies {
    Skip-GroupPolicy -Name 'de14_usr_std'
    Skip-GroupPolicy -Name 'de14_usr_std' -DomaiName 'ad.evotec.xyz'
    Skip-GroupPolicy -Name 'All | Trusted Websites' #-DomaiName 'ad.evotec.xyz'
    '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
    'COMPUTERS | Enable Sets'
}
$GPOS | Format-Table -AutoSize *

Parameters

-ADAdministrativeGroups IDictionary optionalposition: 9: Ability to provide ADAdministrativeGroups from different function to speed up processing
-ExcludeDomains String[] optionalposition: 5: Exclude domain from search, by default whole forest is scanned
-ExcludeGroupPolicies ScriptBlock optionalposition: 0: Marks the GPO as excluded from the list.
-ExtendedForestInformation IDictionary optionalposition: 7: Ability to provide Forest Information from another command to speed up processing
-Forest String optionalposition: 4aliases: ForestName: Target different Forest, by default current forest is used
-GPOGuid String optionalposition: 2aliases: GPOID, GUID: Provide a GPOGuid to get information about a specific GPO.
-GPOName String optionalposition: 1: Provide a GPOName to get information about a specific GPO.
-GPOPath String[] optionalposition: 8: Define GPOPath where the XML files are located to be analyzed instead of asking Active Directory
-IncludeDomains String[] optionalposition: 6aliases: Domain, Domains: Include only specific domains, by default whole forest is scanned
-Limited SwitchParameter optional: Provide limited output without analyzing XML data
-OwnerOnly SwitchParameter optional: only show owner information, by default all information is shown
-PermissionsOnly SwitchParameter optional: Only show permissions, by default all information is shown
-Type String[] optionalposition: 3: Choose a specific type of GPO. Options are: 'Empty', 'Unlinked', 'Disabled', 'NoApplyPermission', 'All'. Default is All.; Possible values: Empty, Unlinked, Disabled, NoApplyPermission, All

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.