- Improve HTML reports with
ScrollX
- Improve HTML reports by hiding some unnesecary columns
- Added
SizeMB
andSize
to reports around files/GPOs which could help analyze performance issues - Other minor HTML fixes
- Fixed typo "Unfortunetly" -> "Unfortunately" by @davidmwilliams in #61
- Minor typo correction "incosistent" -> "inconsistent" by @davidmwilliams in #60
- Update Invoke.GPOZaurrDuplicate.ps1 by @SamErde in #63
- Fix typo and grammar by @SamErde in #64
Full Changelog: https://github.com/EvotecIT/GPOZaurr/compare/v1.1.5...v1.1.6
- Added or improved help on all functions. by @neztach in #56
- @neztach made their first contribution in #56
- Small improvements & fixes
- Fixes report showing unessecary
WhatIf
#53
- Fixes
Forest
parameter for GPOAnalysis #54
- Force specific DC for
Invoke-GPOZaurrContent
- Update to Duplicate Object detection for error handling #52
- Improve
Invoke-GPOZaurr
- by addingGPOName
andGPOGUID
parameters, providing ability to analyse single/multiple GPOs- Those parameters are only applicable to
GPOAnalysis
,GPOBrokenPartially
for now (need to be expanded further)
- Those parameters are only applicable to
- Improve
Invoke-GPOZaurrContent
by allowingGPOName
andGPOGUID
parameters, providing ability to analyse single/multiple GPOs - Small verbose message improvement for
Export-GPOZaurrContent
- Added
Get-GPOZaurrMissingFiles
to detect missing files for GPOs - Added
Invoke-GPOZaurr
- typeGPOBrokenPartially
to detect missing files for GPOs - Improve detection of empty GPOs by including check for GPF files
- Added
FilesCount
toGet-GPOZaurr
to detect number of files in GPO
Get-GPOZaurrUpdates
fix small typoGet-GPOZaurrAD
improve performance a bitGet-GPOZaurrAD
changed pipeline into standard foreach to improve performance and potential problems for large domains- Added
Get-GPOZaurrRedirect
to detect if GPO path was redirected (security issue) - Added
GPORedirect
report type toInvoke-GPOZaurr
to detect if GPO path was redirected (security issue)
- Fixes
Remove-GPOZaurr
limit processing feature which would not stop in some cases
- Improve detection of empty OUs by including AD printers.
- Resolves Group Policy Content - GPO Subfolders for Google Chrome #38
- Resolves Filename processing issue #37
- Fixes
Get-LocalComputerSid - Error: You cannot call a method on a null-valued expression
in some rare cases #34
- Fixes
Invoke-GPOZaurr
SplitReports functionality (again! and again!) #35
- Fixes
Invoke-GPOZaurr
SplitReports functionality (again!) #33 - Fixes Sysvol property in object returned by Get-GPOZaurrPermissionConsistency contains whitespace #31
- Fixes
Invoke-GPOZaurr
SplitReports functionality that would generate main report anyways.
- ℹ️ Improved
Invoke-GPOZaurr
- disable deprecated reports if user doesn't ask for them but asks for all reports to be generated. Those reports are now disabled by default: GPOPermissionsAdministrative,GPOPermissionsRead,GPOPermissionsRoot,GPOPermissionsUnknown - ℹ️ Improved
Invoke-GPOZaurr
SplitReports functionality to start creating HTML reports every report - Add
Export-GPOZaurrContent
to simplify quick export of all XML/HTML reports from GPO
- ℹ️ Improved
Invoke-GPOZaurr
by addingSplitReports
functionality. This will allow you to split the reports into multiple files with a single request. - ℹ️ Improved
Get-GPOZaurrInheritance
with some error handling
- ℹ️ Improves
GPOUpdates
report fromInvoke-GPOZaurr
- additional property
- ℹ️ Improved docs
- ☑ Improved
Invoke-GPOZaurr
- typeGPOOrganizationalUnit
- excludes default redirected computers/users OUs #30 - ☑ Improved
Get-GPOZaurrOrganizationalUnit
- excludes default redirected computers/users OUs as per #30
- 📃 Updates documentation
- ℹ️ Improves
GPOUpdates
report fromInvoke-GPOZaurr
- should be 7 days, not 14 days
- ℹ️ Improves
GPOUpdates
report fromInvoke-GPOZaurr
by fixing conditional formatting
- ℹ️ Improves
Get-GPOZaurrUpdates
- Adds
GPOUpdates
report toInvoke-GPOZaurr
- ℹ️ Improves
Get-GPOZaurrUpdates
with more verbose messages
- 🐛 Fixes
Get-GPOZaurrUpdates
when GPO is not linked
- 🛑 Removed property from
Get-GPOZaurrAD
-FunctionalityVersion
- ➕ Added property to
Get-GPOZaurrAD
-Owner
- ➕ Added ability to choose date ranges for
Get-GPOZaurrAD
- ➕ Added
Get-GPOZaurrUpdates
which shows last gpos added to forest
- ☑ Improved
Invoke-GPOZaurr
- typeGPOAnalysis
- added folder redirection type - tnx PatrickOnGit
- ☑ Improved
Invoke-GPOZaurr
- typeGPOOrganizationalUnit
- adding RootLevel information
- 🐛 Fix for exclusions using GUID with brackets for Invoke-GPOZaurr
GPOList
and related options
- ☑ Improved
Invoke-GPOZaurr
- typeGPOOrganizationalUnit
- moving delete of OU as non-mandatory option
- ☑ Improved wording
- ☑ Improved exclusions
- ☑ Improved exclusions for email use
- ☑ Improved exclusions for email use
- ☑ Improved exclusions for email use
- ☑ Improved exclusions for email use
-
💡 Updated HTML to new version of
PSWriteHTML
that fixes complains aboutSearchBuilder
option -
☑ Improved
Invoke-GPOZaurr
- typeGPOOrganizationalUnit
with exclusionsInvoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @( '*OU=Production,DC=ad,DC=evotec,DC=pl' '*OU=Production,DC=ad,DC=evotec,DC=pl' '*DC=ad,DC=evotec,DC=pl' )
-
☑ Improved
Get-GPOZaurrOrganizationalUnit
with exclusionsGet-GPOZaurrOrganizationalUnit -Verbose -ExcludeOrganizationalUnit @( '*,OU=Production,DC=ad,DC=evotec,DC=pl' ) | Format-Table
-
☑ Improved
Remove-GPOZaurrLinkEmptyOU
with exclusions$Exclude = @( "OU=Groups,OU=Production,DC=ad,DC=evotec,DC=pl" "OU=Test \, OU,OU=ITR02,DC=ad,DC=evotec,DC=xyz" ) Remove-GPOZaurrLinkEmptyOU -Verbose -LimitProcessing 3 -WhatIf -ExcludeOrganizationalUnit $Exclude
-
☑ Improved
Invoke-GPOZaurr
- typeGPOOwners
with exclusionsInvoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurrGPOOwners.html -Type GPOOwners -Online -Exclusions @( 'EVOTEC\przemyslaw.klys' )
-
☑ Improved
Set-GPOZaurrOwner
with exclusions/approved ownersSet-GPOZaurrOwner -Type All -Verbose -LimitProcessing 2 -WhatIf -IncludeDomains 'ad.evotec.xyz' -ApprovedOwner @( 'EVOTEC\przemyslaw.klys' )
-
☑ Improved
Get-GPOZaurrOwner
with exclusions/approved owners$T = Get-GPOZaurrOwner -Verbose -IncludeSysvol -ApprovedOwner @('EVOTEC\przemyslaw.klys') $T | Format-Table *
-
☑ Improved
Get-GPOZaurr
with exclusions and support for GUID, strings$GPOS = Get-GPOZaurr -ExcludeGroupPolicies { Skip-GroupPolicy -Name 'de14_usr_std' Skip-GroupPolicy -Name 'de14_usr_std' -DomaiName 'ad.evotec.xyz' Skip-GroupPolicy -Name 'All | Trusted Websites' #-DomaiName 'ad.evotec.xyz' '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}' 'COMPUTERS | Enable Sets' } $GPOS | Format-Table -AutoSize *
-
☑ Improved
Invoke-GPOZaurr
with exclusions and support for GUID, stringsInvoke-GPOZaurr -Type GPOList -Exclusions { Skip-GroupPolicy -Name 'All | Trusted Websites' -DomaiName 'ad.evotec.xyz' '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}' 'COMPUTERS | Enable Sets' }
- Added
Get-GPOZaurrOrganizationalUnit
and addedGPOOrganizationalUnit
inInvoke-GPOZaurr
(preview) - Added
Remove-GPOZaurrLinkEmptyOU
which allows removing links from Empty OUs (preview) - Small update to parameter sets for
Set-GPOZaurrOwner
- ☑ Improved
Invoke-GPOZaurrContent
- typePublicKeyPoliciesCertificates
- added more certificate information - ☑ Improved
Invoke-GPOZaurr
- typeGPOAnalysis
- added more certificate information
- 🐛 Fixes errors when normalizing properties #17
- ☑ Improved
Invoke-GPOZaurr
- ☑ Report
GPOList
- moved description closer to statuses
- ☑ Report
- ☑ Improved
Get-GPOZaurr
- moved description closer to statuses
- ☑ Improved
Invoke-GPOZaurr
- ☑ Report
GPOBlockedInheritance
- hidden DistinguishedName, fixed some small typos
- ☑ Report
- ☑ Improved
Invoke-GPOZaurr
- ☑ Report
GPOBlockedInheritance
- small fixes
- ☑ Report
- ☑ Added
SearchBuilder
to all tables - ☑ Automatically joins arrays in tables in
Invoke-GPOZaurr
- ☑ Improved
Get-GPOZaurrInheritance
with Exclusions and some help information - ☑ Improved
Invoke-GPOZaurr
with some Exclusions - ☑ Improved
Invoke-GPOZaurr
- 🔥 Report
GPOBlockedInheritance
- heavily improved functionality and data
- 🔥 Report
- ☑ Fixes
Get-GPOZaurrLinkSummary
- ☑ Improved
Invoke-GPOZaurr
- ☑ Report
GPOAnalysis
- addedWindowsFirewallRules
,WindowsFirewallProfiles
,WindowsFirewallConnectionSecurityAuthentication
,WindowsFirewallConnectionSecurityRules
- ☑ Report
- ☑ Improved
Invoke-GPOZaurrContent
as mentioned above forGPOAnalysis
- ☑ Improvement to
Get-GPOZaurr
- added description #13 - ☑ Improvement to
Invoke-GPOZaurr -Type GPOList
- added description #13 - ☑ Improved
Invoke-GPOZaurr
- ☑ Report GPOAnalysis - added
FolderRedirection
- ☑ Report GPOAnalysis - renamed
FolderRedirection
toFolderRedirectionPolicy
- ☑ Report GPOAnalysis - added
- ☑ Improved
Invoke-GPOZaurrContent
as mentioned above forGPOAnalysis
- ☑ Improvement to
Get-GPOZaurr
to warn if there is potential issue with EMPTY (which can happen on non-english system)- ☑ In such case GPOZaurr will asses EMPTY or not using old method which doesn't detect all EMPTY cases but shouldn't provide false positives
- Broken release - weird
- ☑ Added information where the report is saved
- ☑ Small improvement to
Get-GPOZaurr
to exlicitly define variable types
- ☑ Small fix to
Get-GPOZaurr
to exclude GPOList.xml which is used in offline mode bySave-GPOZaurrFiles
- ☑ Improved
Remove-GPOZaurrBroken
to handle ObjectClass problem, and removed reduntant check
- ☑ Improved
Invoke-GPOZaurr
- ☑
GPOList
- clarified some texts, changed 7 days to 30 days as default - ☑
NetLogonPermissions
- fixed missing text
- ☑
- ☑ Fixes
Get-GPOZaurrNetLogon
error on empty Owner - #9
- ☑ Improved
Invoke-GPOZaurr
- ☑ HTML now uses offline mode by default (no CDN) - increase in size of HTML up to 3MB
- ☑ Using Online switch forces use of CDN - smaller files. For example
Invoke-GPOZaurr -Type GPOList -Online
- Improved
Invoke-GPOZaurrSupport
- ☑ HTML now uses offline mode by default (no CDN) - increase in size of HTML up to 3MB
- ☑ Using Online switch forces use of CDN - smaller files. For example
Invoke-GPOZaurrSupport -Online
- ☑ Removed parameter Offline, added parameter Online
- ☑ The cmdlet is not really production ready. It's work in progress
- ☑ Improved
Invoke-GPOZaurr
- ☑ Report GPOAnalysis - added WindowsTimeService
- ☑ Improved
Invoke-GPOZaurrContent
- ☑ Added
WindowsTimeService
type
- ☑ Added
- ☑ Improved
Invoke-GPOZaurr
- ☑ Improved
Invoke-GPOZaurr
- ☑ Improved
Invoke-GPOZaurr
- ☑ Improved
Invoke-GPOZaurr
- ☑ Improved
Invoke-GPOZaurr
- ☑ Improved
GPOConsistency
- ☑ Improved
- ☑ Improved
Invoke-GPOZaurr
- ☑ Improved
Invoke-GPOZaurrContent
- ☑ Improved
Get-GPOZaurr
- ☑ Improved report
GPOBrokenLink
- ☑ Improved report
- ☑ Improved
Get-GPOZaurrBrokenLink
- ☑ Improved
Repair-GPOZaurrBrokenLink
- ☑ Improved
Get-GPOZaurr
- ☑ Improved report
GPOBrokenLink
- ☑ Improved report
- ☑ Improved
Get-GPOZaurr
- ☑ Added new report
GPOBrokenLink
- ☑ Added new report
- ☑ Added
Get-GPOZaurrBrokenLink
- ☑ Added
Repair-GPOZaurrBrokenLink
- ☑ Improved
Get-GPOZaurrLink
- ☑ Supports all links across forest
- ☑ Renamed Linked validate set from
Other
toOrganizationalUnit
- ☑ Improved
Get-GPOZaurrLinkSummary
- ☑ Improved/BugFix
Get-GPOZaurr
to properly detect linked GPOs in sites/cross-domain - ☑ Improved
Invoke-GPOZaurrPermission
- ☑ Renamed Linked validate set from
Other
toOrganizationalUnit
- ☑ Renamed Linked validate set from
- ☑ Improved
Invoke-GPOZaurr
- ☑ Added
GPOLinks
basic list
- ☑ Added
- ☑ Improved
Get-GPOZaurrBroken
- ☑ It now detects
ObjectClass Issue
- ☑ Heavily improved performance
- ☑ Removed some useless properties for this particular cmdlet
- ☑ All states:
Not available on SYSVOL
,Not available in AD
,Exists
,Permissions Issue
,ObjectClass Issue
- ☑ Improved help
- ☑ It now detects
- ☑ Improved
Remove-GPOZaurrBroken
- ☑ It now deals with
ObjectClass Issue
- ☑ Heavily improved performance
- ☑ Removed some useless properties for this particular cmdlet
- ☑ Now requires manual type insert AD, SYSVOL or ObjectClass (or all of them). Before it was auto using AD/SYSVOL.
- ☑ Improved help
- ☑ It now deals with
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
- ☑ Renamed
GPOOrphans
toGPOBroken
- ☑ Improved
GPOBroken
withObjectClass issue
- ☑ Type
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOPermissionsRead
- ☑ Type
GPOPermissions
- ☑ Type
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
- require GPO to be 7 days old for deletion to be proposed - ☑ Type
GPOPermissions
- one stop for permissions - ☑ Allows Steps to be chosen via their menu and out-of-order
- ☑ Type
- ☑ Improved
Remove-GPOZaurr
- addedRequireDays
parameter to prevent deletion of just modified GPOs - ☑ Added
Get-GPOZaurrPermissionAnalysis
- ☑ Added
Repair-GPOZaurrPermission
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
- fixed unexpected ending of cmdlet when error occurs (for example deleted GPO while script is running) which could impact results - ☑ Other types - small color adjustment
- ☑ Type
- ☑ Fixed/Improved
Get-GPOZaurr
- fixed unexpected ending of cmdlet when error occurs (for example deleted GPO while script is running), improved code base - ☑ Improved
Invoke-GPOZaurrSupport
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
- added more data, did small reorganization
- ☑ Type
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
- added more data, added Optimization Step
- ☑ Type
- ☑ Added
Set-GPOZaurrStatus
- ☑ Added
Optimize-GPOZaurr
- ☑ Fixed
Invoke-GPOZaurrPermission
which would not remove permission due to internal changes earlier on - ☑ Small change to
Backup-GPOZaurr
- ☑ Added support for
Disabled
. It's now possbile to backupAll
(default),Empty
,Unlinked
,Disabled
or a mix of them - ☑ Removed useless
GPOPath
parameter
- ☑ Added support for
- ☑ Fix for too big int - #4 - tnx neztach
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
- added ability for Exclusions - ☑ All other types, small improvements
- ☑ Added HideSteps, ShowError, ShowWarning -> Disabled Warnings/Errors by default as they tend to show too much information
- ☑ Type
- ☑ Improved
Remove-GPOZaurr
- added Exclusions
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
reverted charts colors for entries to match colors - Added
Skip-GroupPolicy
to use withinInvoke-GPOZaurr
- ☑ Type
- ☑ Improved
Invoke-GPOZaurr
with basic support for Exclusions - ☑ Improved
Get-GPOZaurr
with basic support for Exclusions - ☑ Improved
Remove-GPOZaurrPermission
error handling
- ☑ Improved
Invoke-GPOZaurrSupport
- ☑ Improved
Invoke-GPOZaurr
- ☑ Type
GPOList
improved with more data, more problems and clearer information
- ☑ Type
- ☑ Improved
Remove-GPOZaurr
- ☑ Added ability do remove disabed GPO
- ☑ Improved
Get-GPOZaurr
detecting more issues, delivering more data
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Improve Type
GPOPermissionsUnknown
- ☑ Improve Type
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Improves Type
GPODuplicates
- ☑ Fix for chart color to be RED
- ☑ Add Type
GPOPermissionsUnknown
- ☑ Improves logic for Data with 0/1 element
- ☑ Improves Type
- ☑ Improves
Remove-GPOZaurrDuplicateObject
- removedConfirm
requirement - ☑ Improves
Get-GPOZaurrNetLogon
with more verbose - ☑ Improves
Repair-GPOZaurrNetLogonOwner
with more verbose and fix forLimitProcessing
- ☑ Small update
Add-GPOZaurrPermission
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Added Type
GPOPermissionsAdministrative
- ☑ Added Type
- ☑ Fix for
Add-GPOZaurrPermission
- ☑ Improve error handling
Remove-GPOZaurrBroken
- ☑ Improve error handling
Remove-GPOZaurrBroken
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Split
NetLogonPermissions
intoNetLogonPermissions
andNetLogonOwners
- ☑ Improved type
NetLogonPermissions
- ☑ Improved type
NetLogonOwners
- ☑ Split
- ☑ Improves
Get-GPOZaurrFiles
- ☑ Improves
Get-GPOZaurrNetLogon
- ☑ Fix for
Get-GPOZaurrNetLogon
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Type
NetLogonPermissions
- ☑ Type
- ☑ Fix for
Get-GPOZaurrNetLogon
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Fix for wrong ActionRequired count
- ☑ Added
Get-GPOZaurrPermissionIssue
to detect permission issue with no rights - ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Type
GPOPermissionsRead
improved detection of problems with low permissions
- ☑ Type
- ☑ Fix for
Set-GPOZaurrOwner
in case of missing permissions to not throw errors - ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Type
GPOPermissionsRead
added
- ☑ Type
- ☑ Improves
Invoke-GPOZaurr
(WIP)- ☑ Type
GPOOrphans
clearer options, updated texts, split per domain - ☑ Type
GPOOwners
clearer options, updated texts, split per domain
- ☑ Type
- ☑ Improves
Add-GPOZaurrPermission
- ☑ Fixes LimitProcessing to work correctly
- ☑ Added
All
to process all GPOs
- ☑ Fixes
Remove-GPOZaurrPermission
- ☑ Improves
Set-GPOZaurrOwner
- ☑ Added
Force
to forceGPO Owner
to any principal (normally only Domain Admins)
- ☑ Added
- Improved
Invoke-GPOZaurr
- typeGPOOrphans
- Improved
Remove-GPOZaurrBroken
more verbose - Improved
Get-GPOZaurrBroken
more verbose - Improved
Invoke-GPOZaurr
- typeGPOOrphans
- Improved
Invoke-GPOZaurr
- typeGPOList
- needs more work - Improved
Get-GPOZaurr
with better detection of Empty Policies (needs testing)
- Improved
Invoke-GPOZaurr
(WIP)
- Improved
Get-GPOZaurrNetLogon
to better handle errors
- Improved
Get-GPOZaurrPermissionConsistency
to stop checking consistency if path doesn't exists
- Improved
Invoke-GPOZaurr
(WIP)
- Improved
Invoke-GPOZaurr
(WIP) - Improved
Get-GPOZaurr
- Improved
Invoke-GPOZaurr
(WIP)
- Improved
Invoke-GPOZaurr
(WIP)
- Added
Get-GPOZaurrDuplicateObject
- Added
Remove-GPOZaurrDuplicateObject
- Improved
Invoke-GPOZaurr
(WIP) - Improved
Get-GPOZaurrNetLogon
- Improved
Get-GPOZaurrOwner
- Improved
Set-GPOZaurrOwner
- Added
Repair-GPOZaurrNetLogonOwner
- Improved
Invoke-GPOZaurr
(WIP)
- Renamed
Show-GPOZaurr
toInvoke-GPOZaurr
- Renamed
Invoke-GPOZaurr
toInvoke-GPOZaurrContent
- Improvements to
Get-GPOZaurrPermissionConsistency
- don't check for inherited permissions if top level ones are inconsistent - Improved
Invoke-GPOZaurr
(WIP)
- Improved
Show-GPOZaurr
(WIP)
- Improved
Show-GPOZaurr
(WIP)
- Improved
Show-GPOZaurr
(WIP)
- Renamed
Remove-GPOZaurrOrphaned
toRemove-GPOZaurrBroken
keeping it as an alias - Renamed
Get-GPOZaurrSysvol
toGet-GPOZaurrBroken
keeping it as an alias - Improved
Show-GPOZaurr
(WIP)
- Renamed
Invoke-GPOZaurrContent
back toInvoke-GPOZaurr
- Added
Show-GPOZaurr
(WIP) - Added
OutputType
,OutputType
,Open
,Online
parameters toInvoke-GPOZaurr
- Added
Get-GPOZaurrNetLogon
- Improved
Get-GPOZaurrOwner
- Fixes
Get-GPOZaurrSysvol
- Renamed
Invoke-GPOZaurr
toInvoke-GPOZaurrContent
- I want to useInvoke-GPOZaurr
for something else - Improvements to
Get-GPOZaurrPermissionConsistency
for GPOs without SYSVOL to be reported properly - Added
Get-GPOZaurrPermissionRoot
- Renamed
Remove-GPOZaurrOrphanedSysvolFolders
toRemove-GPOZaurrOrphaned
- Improved
Remove-GPOZaurrOrphaned
to deal with orphaned folders but also orphaned AD GPO (No sysvol data) - Improved
Get-GPOZaurrSysVol
to detect orphaned SYSVOL or AD GPO objects - Improved
Get-GPOZaurrSysVol
to detect permissions issue when reading AD GPO objects - Added
Get-GPOZaurrPermissionRoot
to show which users/groups have control over all GPOs (allowed to create/modify) - Improved
Get-GPOZaurrPermissionSummary
to includeGet-GPOZaurrPermissionRoot
custom permissions - Updated
Remove-GPOZaurrPermission
- Updated
Get-GpoZaurrPermission
- Updated
Get-GPOZaurrFiles
to better handle access issue - Reversed parameters
Get-GPOZaurrFiles
fromLimited
toExtendedMetaData
and fixed missing columns
- Improvement to
Get-GPOZaurrPermissionSummary
- Fixes to
ConvertFrom-CSExtension
- Fixes to
Find-CSExtension
- Improvement to
Get-GPOZaurrPermissionSummary
- Improvement to
Get-GPOZaurrPermissionSummary
- Improvement to
Get-GPOZaurrPermissionSummary
- Added
Get-GPOZaurrPermissionSummary
- Improved
Get-GPOZaurrInheritance
- Added
Invoke-GPOZaurrSupport
(WIP) - Added
ConvertFrom-CSExtension
- Added
Find-CSExtension
- Added
Get-GPOZaurrInheritance
- Bad release
- Bad release
- Updates to
Invoke-GPOZaurr
- still work in progress - Added
Get-GPOZaurrSysvolDFSR
- Added
Clear-GPOZaurrSysvolDFSR
(requires testing)
- Updates to couple of commands
- Hidden files were skipped - and people do crazy things with them
- Added
Get-GPOZaurrFilesPolicyDefinition
- Updates to
Invoke-GPOZaurr
- still work in progress - Updates to
Get-GPOZaurrFiles
- still work in progress - Updates to
Remove-GPOZaurrOrphanedSysvolFolders
with backup and support for domains - Module will now be signed
- Update to
Get-GPOZaurrAD
for better error reporting - Updates to
Invoke-GPOZaurr
- still work in progress
- Additional protection for
Get-GPOZaurrAD
for CNF duplicates - Update to
Save-GPOZaurrFiles
- Added
Invoke-GPOZaurr
(alias:Find-GPO
) (heavy work in progress)
- During publishing ADEssentials required functions are now merged to prevent cyclic dependency bug Using ModuleSpec syntax in RequiredModules causes incorrect "cyclic dependency" failures
- Improvement to
Get-GPOZaurrLinkSummary
- Added
Get-GPOZaurrFiles
to list files on NETLOGON/SYSVOL shares with a lot of details
- Fix for
Get-GPOZaurrLink
andSearchBase
parameter - Fix for
Get-GPOZaurrLink
- canonical link Trim() throwing errors if empty
- Added paramerter
SkipDuplicates
toInvoke-GPOZaurrPermission
which prevents applying permissions over and over again if 1 GPO is linked to a multiple OU's within another OU
- Fix for error
Get-GPOZaurrLink
- same issue as described on my earlier blog - Get-ADObject : The server has returned the following error: invalid enumeration context..WARNING: Get-GPOZaurrLink - Processing error The server has returned the following error: invalid enumeration context.
WARNING: Get-GPOZaurrLink - Processing error A referral was returned from the server
- Added
SkipDuplicates
forGet-GPOZaurrLink
- Updates to
Invoke-GPOZaurrPermission
with new parameterLimitAdministrativeGroupsToDomain
- This will get administrative based on IncludeDomains if given. It means that if GPO has Domain admins added from multiple domains it will only find one, and remove all other Domain Admins (if working with Domain Admins that is)
- Update to Get-PrivGPOZaurrLink which would cause problems to
Invoke-GPOZaurrPermission
if it would be run without Administrative permission and GPO wouldn't be accessible for that user
- Updates to
Invoke-GPOZaurrPermission
with new parametersetLevel
- Updates to
Get-GPOZaurrLinkSummary
- Initial release