GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,166

Forks 115

Open issues 16

PowerShell Gallery downloads 417,764

Release v1.1.9

Language: PowerShell Updated: 2026-04-11

API Reference

Function

Set-GPOOwner

Namespace GPOZaurr

Used within Invoke-GPOZaurrPermission only. Set new group policy owner.

Remarks

Used within Invoke-GPOZaurrPermission only. Set new group policy owner.

Examples

Authored help example

EXAMPLE 1

PS >


Invoke-GPOZaurrPermission -Verbose -SearchBase 'OU=Computers,OU=Production,DC=ad,DC=evotec,DC=xyz' {
    Set-GPOOwner -Type Administrative
    Remove-GPOPermission -Type NotAdministrative, NotWellKnownAdministrative -IncludePermissionType GpoEdit, GpoEditDeleteModifySecurity
    Add-GPOPermission -Type Administrative -IncludePermissionType GpoEditDeleteModifySecurity
    Add-GPOPermission -Type WellKnownAdministrative -IncludePermissionType GpoEditDeleteModifySecurity
} -WhatIf

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Set-GPOOwner [-Principal <String>] [-Type <Administrative|Default>] [<CommonParameters>]

Parameter set: All Parameter Sets

Parameters

Principal String optionalposition: 1pipeline: False: Choose Owner Name to set for Group Policy
Type String optionalposition: 0pipeline: Falsevalues: 2: Choose Owner Type. When chosing Administrative Type, owner will be set to Domain Admins for current GPO domain. When Default is set Owner will be set to Principal given in another parameter.; Possible values: Administrative, Default