Evotec

Project

GPOZaurr

GPOZaurr helps inspect, report on, and remediate Group Policy environments with PowerShell.

Stars 1,166
Forks 115
Open issues 16
PowerShell Gallery downloads 417,764
Release v1.1.9
Language: PowerShell Updated: 2026-04-11

API Reference

Function

Set-GPOZaurrOwner

Namespace GPOZaurr

Sets GPO Owner to Domain Admins or other choosen account

Remarks

Sets GPO Owner to Domain Admins or other choosen account. GPO Owner is set in AD and SYSVOL unless specified otherwise. If account doesn't require change, no change is done.

Examples

Authored help example

EXAMPLE 1

PS >


Set-GPOZaurrOwner -Type All -Verbose -WhatIf -LimitProcessing 2
        

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Set-GPOZaurrOwner [-Action <OnlyAD|OnlyFileSystem>] [-ApprovedOwner <String[]>] [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Force] [-Forest <String>] [-IncludeDomains <String[]>] [-LimitProcessing <Int32>] [-Principal <String>] [-SkipSysvol] -Type <Unknown|NotAdministrative|NotMatching|Inconsistent|All> [<CommonParameters>]
#
Parameter set: Type

Parameters

Action String optionalposition: namedpipeline: Falsevalues: 2
Possible values: OnlyAD, OnlyFileSystem
ApprovedOwner String[] optionalposition: namedpipeline: Falsealiases: Exclusion, Exclusions
ExcludeDomains String[] optionalposition: namedpipeline: False
Exclude domain from search, by default whole forest is scanned
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Ability to provide Forest Information from another command to speed up processing
Force SwitchParameter optionalposition: namedpipeline: False
Pushes new owner regardless if it's already set or not
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Target different Forest, by default current forest is used
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Include only specific domains, by default whole forest is scanned
LimitProcessing Int32 optionalposition: namedpipeline: False
Allows to specify maximum number of items that will be fixed in a single run. It doesn't affect amount of GPOs processed
Principal String optionalposition: namedpipeline: False
Parameter description
SkipSysvol SwitchParameter optionalposition: namedpipeline: False
Set GPO Owner only in Active Directory. By default GPO Owner is being set in both places
Type String requiredposition: namedpipeline: Falsevalues: 5
Unknown - finds unknown Owners and sets them to Administrative (Domain Admins) or chosen principal NotMatching - find administrative groups only and if sysvol and gpo doesn't match - replace with chosen principal or Domain Admins if not specified Inconsistent - same as not NotMatching NotAdministrative - combination of Unknown/NotMatching and NotAdministrative - replace with chosen principal or Domain Admins if not specified All - if Owner is known it checks if it's Administrative, if it sn't it fixes that. If owner is unknown it fixes it
Possible values: Unknown, NotAdministrative, NotMatching, Inconsistent, All
Set-GPOZaurrOwner [-Action <OnlyAD|OnlyFileSystem>] [-ApprovedOwner <String[]>] [-ExcludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] [-Force] [-Forest <String>] [-GPOGuid <String>] [-GPOName <String>] [-IncludeDomains <String[]>] [-LimitProcessing <Int32>] [-Principal <String>] [-SkipSysvol] [<CommonParameters>]
#
Parameter set: Named

Parameters

Action String optionalposition: namedpipeline: Falsevalues: 2
Possible values: OnlyAD, OnlyFileSystem
ApprovedOwner String[] optionalposition: namedpipeline: Falsealiases: Exclusion, Exclusions
ExcludeDomains String[] optionalposition: namedpipeline: False
Exclude domain from search, by default whole forest is scanned
ExtendedForestInformation IDictionary optionalposition: namedpipeline: False
Ability to provide Forest Information from another command to speed up processing
Force SwitchParameter optionalposition: namedpipeline: False
Pushes new owner regardless if it's already set or not
Forest String optionalposition: namedpipeline: Falsealiases: ForestName
Target different Forest, by default current forest is used
GPOGuid String optionalposition: namedpipeline: Falsealiases: GPOID, GUID
GUID of GPO. By default all GPOs are targetted
GPOName String optionalposition: namedpipeline: False
Name of GPO. By default all GPOs are targetted
IncludeDomains String[] optionalposition: namedpipeline: Falsealiases: Domain, Domains
Include only specific domains, by default whole forest is scanned
LimitProcessing Int32 optionalposition: namedpipeline: False
Allows to specify maximum number of items that will be fixed in a single run. It doesn't affect amount of GPOs processed
Principal String optionalposition: namedpipeline: False
Parameter description
SkipSysvol SwitchParameter optionalposition: namedpipeline: False
Set GPO Owner only in Active Directory. By default GPO Owner is being set in both places