Command
Get-GPOZaurrPermissionSummary
Retrieves a summary of Group Policy Object (GPO) permissions based on specified criteria.
Syntax
Get-GPOZaurrPermissionSummary
[[-ExcludeDomains] <String[]>]
[[-ExcludePermissionType] <String[]>]
[[-ExtendedForestInformation] <IDictionary>]
[[-Forest] <String>]
[[-IncludeDomains] <String[]>]
[[-IncludePermissionType] <String[]>]
[[-PermitType] <Allow| Deny| All>]
[[-Separator] <String>]
[[-Type] <String[]>]
[<CommonParameters>]#Parameter set:
All Parameter SetsDescription
Retrieves a summary of GPO permissions based on the specified criteria, including filtering by permission types, permit types, and more.
Examples
Example 1
Get-GPOZaurrPermissionSummary -Type 'All' -PermitType 'Allow' -IncludePermissionType 'GpoApply', 'GpoEdit' -ExcludePermissionType 'GpoOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -Separator '|'Example 2
Get-GPOZaurrPermissionSummary -Type 'Administrative' -PermitType 'All' -IncludePermissionType 'GpoRead' -ExcludePermissionType 'GpoRootOwner' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -Separator ','Parameters
- -ExcludeDomains String[]
- Specifies domains to exclude from the search.
- -ExcludePermissionType String[]
- Specifies the permission types to exclude from the summary.
- Possible values:
GpoApply,GpoEdit,GpoCustom,GpoEditDeleteModifySecurity,GpoRead,GpoOwner,GpoRootCreate,GpoRootOwner - -ExtendedForestInformation IDictionary
- Provides additional forest information to speed up processing.
- -Forest String
- Specifies the target forest. By default, the current forest is used.
- -IncludeDomains String[]
- Specifies domains to include in the search.
- -IncludePermissionType String[]
- Specifies the permission types to include in the summary.
- Possible values:
GpoApply,GpoEdit,GpoCustom,GpoEditDeleteModifySecurity,GpoRead,GpoOwner,GpoRootCreate,GpoRootOwner - -PermitType String
- Specifies the type of permission to permit. Options include 'Allow', 'Deny', and 'All'.
- Possible values:
Allow,Deny,All - -Separator String
- Specifies the separator to use in the output.
- -Type String[]
- Specifies the type of permissions to include. Options include 'AuthenticatedUsers', 'DomainComputers', 'Unknown', 'WellKnownAdministrative', 'NotWellKnown', 'NotWellKnownAdministrative', 'NotAdministrative', 'Administrative', and 'All'.
- Possible values:
AuthenticatedUsers,DomainComputers,Unknown,WellKnownAdministrative,NotWellKnown,NotWellKnownAdministrative,NotAdministrative,Administrative,All
Common Parameters
This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.
For more information, see about_CommonParameters.