Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Repair-GPOZaurrPermissionConsistency

Namespace GPOZaurr

Repairs permission consistency for Group Policy Objects (GPOs) in a specified domain or forest.

Remarks

The Repair-GPOZaurrPermissionConsistency function repairs permission consistency for GPOs in a specified domain or forest. It checks for inconsistencies in GPO permissions and attempts to make them consistent.

Examples

Authored help example

EXAMPLE 1

PS >


Repair-GPOZaurrPermissionConsistency -GPOName "ExampleGPO" -Forest "example.com"
Repairs permission consistency for the GPO named "ExampleGPO" in the "example.com" forest.
        

EXAMPLE 2

PS >


Repair-GPOZaurrPermissionConsistency -GPOGuid "12345678-1234-1234-1234-1234567890AB" -ExcludeDomains @("domain1", "domain2") -LimitProcessing 5
Repairs permission consistency for the GPO with the specified GUID, excluding domains "domain1" and "domain2", and processing a maximum of 5 GPOs.
        

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Repair-GPOZaurrPermissionConsistency [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-IncludeDomains <String[]>] [-LimitProcessing <Int32>] [<CommonParameters>]
#
Parameter set: Default

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Specifies an array of domains to exclude from the repair process.
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Specifies additional information about the forest.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Specifies the forest where the GPOs are located.
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the repair process.
LimitProcessing Int32 optionalposition: namedpipeline: False
Specifies the maximum number of GPOs to process.
Repair-GPOZaurrPermissionConsistency [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-GPOName <String>] [-IncludeDomains <String[]>] [-LimitProcessing <Int32>] [<CommonParameters>]
#
Parameter set: GPOName

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Specifies an array of domains to exclude from the repair process.
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Specifies additional information about the forest.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Specifies the forest where the GPOs are located.
GPOName String optionalposition: namedpipeline: False
Specifies the name of the GPO to repair.
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the repair process.
LimitProcessing Int32 optionalposition: namedpipeline: False
Specifies the maximum number of GPOs to process.
Repair-GPOZaurrPermissionConsistency [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Forest <String>] [-GPOGuid <String>] [-IncludeDomains <String[]>] [-LimitProcessing <Int32>] [<CommonParameters>]
#
Parameter set: GPOGUID

Parameters

ExcludeDomains String[] optionalposition: namedpipeline: False
Specifies an array of domains to exclude from the repair process.
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Specifies additional information about the forest.
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Specifies the forest where the GPOs are located.
GPOGuid String optionalposition: namedpipeline: Falsealiases: GPOID, GUID
Specifies the GUID of the GPO to repair.
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Specifies an array of domains to include in the repair process.
LimitProcessing Int32 optionalposition: namedpipeline: False
Specifies the maximum number of GPOs to process.