Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Get-GPOZaurr

Namespace GPOZaurr

Gets information about all Group Policies. Similar to what Get-GPO provides by default.

Remarks

Gets information about all Group Policies. Similar to what Get-GPO provides by default.

Guides & Samples

Authored walkthroughs and practical samples linked to this API.

Examples

Authored help example

EXAMPLE 1

PS >


$GPOs = Get-GPOZaurr
$GPOs | Format-Table DisplayName, Owner, OwnerSID, OwnerType

EXAMPLE 2

PS >


$GPO = Get-GPOZaurr -GPOName 'ALL | Allow use of biometrics'
$GPO | Format-List *

EXAMPLE 3

PS >


$GPOS = Get-GPOZaurr -ExcludeGroupPolicies {
    Skip-GroupPolicy -Name 'de14_usr_std'
    Skip-GroupPolicy -Name 'de14_usr_std' -DomaiName 'ad.evotec.xyz'
    Skip-GroupPolicy -Name 'All | Trusted Websites' #-DomaiName 'ad.evotec.xyz'
    '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
    'COMPUTERS | Enable Sets'
}
$GPOS | Format-Table -AutoSize *

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-GPOZaurr [-ADAdministrativeGroups <IDictionary>] [-ExcludeDomains <String[]>] [-ExcludeGroupPolicies <ScriptBlock>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-GPOGuid <String>] [-GPOName <String>] [-GPOPath <String[]>] [-IncludeDomains <String[]>] [-Limited] [-OwnerOnly] [-PermissionsOnly] [-Type <Empty|Unlinked|Disabled|NoApplyPermission|All>] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Parameters

ADAdministrativeGroups IDictionary optionalposition: 9pipeline: False
Ability to provide ADAdministrativeGroups from different function to speed up processing
ExcludeDomains String[] optionalposition: 5pipeline: False
Exclude domain from search, by default whole forest is scanned
ExcludeGroupPolicies ScriptBlock optionalposition: 0pipeline: False
Marks the GPO as excluded from the list.
ExtendedForestInformation IDictionary optionalposition: 7pipeline: False
Ability to provide Forest Information from another command to speed up processing
Forest String optionalposition: 4pipeline: Falsealiases: ForestName
Target different Forest, by default current forest is used
GPOGuid String optionalposition: 2pipeline: Falsealiases: GPOID, GUID
Provide a GPOGuid to get information about a specific GPO.
GPOName String optionalposition: 1pipeline: False
Provide a GPOName to get information about a specific GPO.
GPOPath String[] optionalposition: 8pipeline: False
Define GPOPath where the XML files are located to be analyzed instead of asking Active Directory
IncludeDomains String[] optionalposition: 6pipeline: Falsealiases: Domain, Domains
Include only specific domains, by default whole forest is scanned
Limited SwitchParameter optionalposition: namedpipeline: False
Provide limited output without analyzing XML data
OwnerOnly SwitchParameter optionalposition: namedpipeline: False
only show owner information, by default all information is shown
PermissionsOnly SwitchParameter optionalposition: namedpipeline: False
Only show permissions, by default all information is shown
Type String[] optionalposition: 3pipeline: Falsevalues: 5
Choose a specific type of GPO. Options are: 'Empty', 'Unlinked', 'Disabled', 'NoApplyPermission', 'All'. Default is All.
Possible values: Empty, Unlinked, Disabled, NoApplyPermission, All