Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Get-GPOZaurrPermissionSummary

Namespace GPOZaurr

Retrieves a summary of Group Policy Object (GPO) permissions based on specified criteria.

Remarks

Retrieves a summary of GPO permissions based on the specified criteria, including filtering by permission types, permit types, and more.

Examples

Authored help example

EXAMPLE 1

PS >


Get-GPOZaurrPermissionSummary -Type 'All' -PermitType 'Allow' -IncludePermissionType 'GpoApply', 'GpoEdit' -ExcludePermissionType 'GpoOwner' -Forest 'ExampleForest' -IncludeDomains 'Domain1', 'Domain2' -ExtendedForestInformation $ForestInfo -Separator '|'
        

EXAMPLE 2

PS >


Get-GPOZaurrPermissionSummary -Type 'Administrative' -PermitType 'All' -IncludePermissionType 'GpoRead' -ExcludePermissionType 'GpoRootOwner' -Forest 'AnotherForest' -ExcludeDomains 'Domain3' -Separator ','
        

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-GPOZaurrPermissionSummary [-ExcludeDomains <String[]>] [-ExcludePermissionType <GpoApply>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-IncludeDomains <String[]>] [-IncludePermissionType <GpoApply>] [-PermitType <Allow|Deny|All>] [-Separator <String>] [-Type <AuthenticatedUsers>] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Parameters

ExcludeDomains String[] optionalposition: 5pipeline: False
Specifies domains to exclude from the search.
ExcludePermissionType String[] optionalposition: 3pipeline: Falsevalues: 8
Specifies the permission types to exclude from the summary.
Possible values: GpoApply, GpoEdit, GpoCustom, GpoEditDeleteModifySecurity, GpoRead, GpoOwner, GpoRootCreate, GpoRootOwner
ExtendedForestInformation IDictionary optionalposition: 7pipeline: False
Provides additional forest information to speed up processing.
Forest String optionalposition: 4pipeline: Falsealiases: ForestName
Specifies the target forest. By default, the current forest is used.
IncludeDomains String[] optionalposition: 6pipeline: Falsealiases: Domain, Domains
Specifies domains to include in the search.
IncludePermissionType String[] optionalposition: 2pipeline: Falsevalues: 8
Specifies the permission types to include in the summary.
Possible values: GpoApply, GpoEdit, GpoCustom, GpoEditDeleteModifySecurity, GpoRead, GpoOwner, GpoRootCreate, GpoRootOwner
PermitType String optionalposition: 1pipeline: Falsevalues: 3
Specifies the type of permission to permit. Options include 'Allow', 'Deny', and 'All'.
Possible values: Allow, Deny, All
Separator String optionalposition: 8pipeline: False
Specifies the separator to use in the output.
Type String[] optionalposition: 0pipeline: Falsevalues: 9
Specifies the type of permissions to include. Options include 'AuthenticatedUsers', 'DomainComputers', 'Unknown', 'WellKnownAdministrative', 'NotWellKnown', 'NotWellKnownAdministrative', 'NotAdministrative', 'Administrative', and 'All'.
Possible values: AuthenticatedUsers, DomainComputers, Unknown, WellKnownAdministrative, NotWellKnown, NotWellKnownAdministrative, NotAdministrative, Administrative, All