Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,256
Forks 120
Open issues 15
PowerShell Gallery downloads 421,558
Release v1.1.11
Language: PowerShell Updated: 2026-10-30
Command

Repair-GPOZaurrPermissionConsistency

Module
GPOZaurr

Repairs permission consistency for Group Policy Objects (GPOs) in a specified domain or forest.

Syntax

Repair-GPOZaurrPermissionConsistency
[-ExcludeDomains <String[]>]
[-ExtendedForestInformation <IDictionary>]
[-Forest <String>]
[-IncludeDomains <String[]>]
[-LimitProcessing <Int32>]
[<CommonParameters>]
#
Parameter set: Default
Repair-GPOZaurrPermissionConsistency
[-ExcludeDomains <String[]>]
[-ExtendedForestInformation <IDictionary>]
[-Forest <String>]
[-GPOName <String>]
[-IncludeDomains <String[]>]
[-LimitProcessing <Int32>]
[<CommonParameters>]
#
Parameter set: GPOName
Repair-GPOZaurrPermissionConsistency
[-ExcludeDomains <String[]>]
[-ExtendedForestInformation <IDictionary>]
[-Forest <String>]
[-GPOGuid <String>]
[-IncludeDomains <String[]>]
[-LimitProcessing <Int32>]
[<CommonParameters>]
#
Parameter set: GPOGUID

Description

The Repair-GPOZaurrPermissionConsistency function repairs permission consistency for GPOs in a specified domain or forest. It checks for inconsistencies in GPO permissions and attempts to make them consistent.

Examples

Example 1

Repair-GPOZaurrPermissionConsistency -GPOName "ExampleGPO" -Forest "example.com"
Repairs permission consistency for the GPO named "ExampleGPO" in the "example.com" forest.

Example 2

Repair-GPOZaurrPermissionConsistency -GPOGuid "12345678-1234-1234-1234-1234567890AB" -ExcludeDomains @("domain1", "domain2") -LimitProcessing 5
Repairs permission consistency for the GPO with the specified GUID, excluding domains "domain1" and "domain2", and processing a maximum of 5 GPOs.

Parameters

-ExcludeDomains String[] optional
Specifies an array of domains to exclude from the repair process.
-ExtendedForestInformation IDictionary optional
Specifies additional information about the forest.
-Forest String optionalaliases: ForestName
Specifies the forest where the GPOs are located.
-IncludeDomains String[] optionalaliases: Domain, Domains
Specifies an array of domains to include in the repair process.
-LimitProcessing Int32 optional
Specifies the maximum number of GPOs to process.
-GPOName String optionalsets: GPOName
Specifies the name of the GPO to repair.
-GPOGuid String optionalaliases: GPOID, GUIDsets: GPOGUID
Specifies the GUID of the GPO to repair.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.