Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,256
Forks 120
Open issues 15
PowerShell Gallery downloads 421,558
Release v1.1.11
Language: PowerShell Updated: 2026-10-30
Command

Get-GPOZaurrPermissionAnalysis

Module
GPOZaurr

Analyzes permissions for Group Policy Objects (GPOs) and administrative groups.

Syntax

Get-GPOZaurrPermissionAnalysis
[[-ExcludeDomains] <String[]>]
[[-Forest] <String>]
[[-IncludeDomains] <String[]>]
[[-Permissions] <Array>]
[<CommonParameters>]
#
Parameter set: All Parameter Sets

Description

This function analyzes permissions for Group Policy Objects (GPOs) and identifies administrative groups with specific permissions.

Examples

Example 1

Get-GPOZaurrPermissionAnalysis -Forest "ContosoForest" -IncludeDomains @("Domain1", "Domain2") -ExcludeDomains @("Domain3") -Permissions $PermissionsArray
Analyzes permissions for GPOs in the "ContosoForest" forest, including "Domain1" and "Domain2" while excluding "Domain3", using the specified permissions array.

Parameters

-ExcludeDomains String[] optionalposition: 1
Specifies an array of domains to exclude from the analysis.
-Forest String optionalposition: 0aliases: ForestName
Specifies the name of the forest to analyze.
-IncludeDomains String[] optionalposition: 2aliases: Domain, Domains
Specifies an array of domains to include in the analysis.
-Permissions Array optionalposition: 3
Specifies an array of permissions to analyze.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.