Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

View on GitHub Releases Get package
Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Repair-GPOZaurrPermission

Namespace GPOZaurr

Repairs permissions for Group Policy Objects (GPOs) based on specified criteria.

Remarks

The Repair-GPOZaurrPermission function repairs permissions for GPOs based on the specified criteria. It analyzes the permissions of GPOs and adds necessary permissions if they are missing.

Guides & Samples

Authored walkthroughs and practical samples linked to this API.

Examples

Authored help example

EXAMPLE 1

PS >


Repair-GPOZaurrPermission -Type 'All' -Forest 'ContosoForest' -IncludeDomains @('Domain1', 'Domain2') -ExcludeDomains @('Domain3') -ExtendedForestInformation $info -LimitProcessing 100
Repairs permissions for all types of users in the 'ContosoForest' forest, including only 'Domain1' and 'Domain2' while excluding 'Domain3', with extended forest information and processing a maximum of 100 GPOs.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Repair-GPOZaurrPermission [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-IncludeDomains <String[]>] [-LimitProcessing <Int32>] -Type <AuthenticatedUsers|Unknown|System|Administrative|All> [<CommonParameters>]
#
Parameter set: All Parameter Sets

Parameters

ExcludeDomains String[] optionalposition: 2pipeline: False
Specifies an array of domains to exclude from the analysis.
ExtendedForestInformation IDictionary optionalposition: 4pipeline: False
Specifies additional information about the forest.
Forest String optionalposition: 1pipeline: Falsealiases: ForestName
Specifies the forest name to analyze GPO permissions.
IncludeDomains String[] optionalposition: 3pipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the analysis.
LimitProcessing Int32 optionalposition: 5pipeline: False
Specifies the maximum number of GPOs to process.
Type String[] requiredposition: 0pipeline: Falsevalues: 5
Specifies the type of permissions to repair. Valid values are 'AuthenticatedUsers', 'Unknown', 'System', 'Administrative', and 'All'.
Possible values: AuthenticatedUsers, Unknown, System, Administrative, All