Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,256

Forks 120

Open issues 15

PowerShell Gallery downloads 421,558

Release v1.1.11

Language: PowerShell Updated: 2026-10-30

Command

Get-GPOZaurrPermissionRoot

Module: GPOZaurr

Retrieves the root permissions of Group Policy Objects (GPOs) based on specified criteria.

Syntax

Get-GPOZaurrPermissionRoot
[[-ExcludeDomains] <String[]>]
[[-ExcludePermissionType] <GpoRootCreate|GpoRootOwner>]
[[-ExtendedForestInformation] <IDictionary>]
[[-Forest] <String>]
[[-IncludeDomains] <String[]>]
[[-IncludePermissionType] <GpoRootCreate|GpoRootOwner>]
[-SkipNames]
[<CommonParameters>]

Parameter set: All Parameter Sets

Description

Retrieves the root permissions of GPOs based on the specified criteria, including filtering by permission types, forest, domains, and more.

Examples

Example 1

Get-GPOZaurrPermissionRoot -IncludePermissionType 'GpoRootCreate' -ExcludePermissionType 'GpoRootOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -SkipNames

Example 2

Get-GPOZaurrPermissionRoot -IncludePermissionType 'GpoRootOwner' -ExcludePermissionType 'GpoRootCreate' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -SkipNames

Parameters

-ExcludeDomains String[] optionalposition: 3: Specifies domains to exclude from the search.
-ExcludePermissionType String[] optionalposition: 1: Specifies the root permission types to exclude from the search.; Possible values: GpoRootCreate, GpoRootOwner
-ExtendedForestInformation IDictionary optionalposition: 5: Provides additional forest information to speed up processing.
-Forest String optionalposition: 2aliases: ForestName: Specifies the target forest. By default, the current forest is used.
-IncludeDomains String[] optionalposition: 4aliases: Domain, Domains: Specifies domains to include in the search.
-IncludePermissionType String[] optionalposition: 0: Specifies the root permission types to include in the search.; Possible values: GpoRootCreate, GpoRootOwner
-SkipNames SwitchParameter optional: Skips processing names during the operation.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.