gsadmin/GPOZaurr
1
0
Fork 0
mirror of https://github.com/EvotecIT/GPOZaurr.git synced 2026-08-30 20:29:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updates to Remove-Permissions

Browse Source
This commit is contained in:
Przemyslaw Klys
2020-05-11 14:38:27 +02:00
parent 9f7bdd287e
commit 0f9ed02a04
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Public/Remove-GPOZaurrPermission.ps1
+4 -4
View File
@@ -26,8 +26,6 @@
)
Begin {
$Count = 0
$StopMe = $false
$ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
$ADAdministrativeGroups = Get-ADADministrativeGroups -Type DomainAdmins, EnterpriseAdmins -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
if ($Type -eq 'Unknown') {
@@ -89,8 +87,10 @@
ADAdministrativeGroups = $ADAdministrativeGroups
}
[Array] $GPOPermissions = Get-PrivPermission @getPrivPermissionSplat
foreach ($Permission in $GPOPermissions) {
Remove-PrivPermission -Principal $Permission.Sid -PrincipalType Sid -GPOPermission $Permission -IncludePermissionType $Permission.Permission #-IncludeDomains $GPO.DomainName
if ($GPOPermissions.Count -gt 0) {
foreach ($Permission in $GPOPermissions) {
Remove-PrivPermission -Principal $Permission.Sid -PrincipalType Sid -GPOPermission $Permission -IncludePermissionType $Permission.Permission #-IncludeDomains $GPO.DomainName
}
$Count++
if ($Count -eq $LimitProcessing) {
# skipping skips per removed permission not per gpo.