Added some help

This commit is contained in:
Przemyslaw Klys
2020-12-06 10:29:10 +01:00
parent ff276966ad
commit 24cb6dbf99
+24
View File
@@ -1,4 +1,28 @@
function Set-GPOOwner {
<#
.SYNOPSIS
Used within Invoke-GPOZaurrPermission only. Set new group policy owner.
.DESCRIPTION
Used within Invoke-GPOZaurrPermission only. Set new group policy owner.
.PARAMETER Type
Choose Owner Type. When chosing Administrative Type, owner will be set to Domain Admins for current GPO domain. When Default is set Owner will be set to Principal given in another parameter.
.PARAMETER Principal
Choose Owner Name to set for Group Policy
.EXAMPLE
Invoke-GPOZaurrPermission -Verbose -SearchBase 'OU=Computers,OU=Production,DC=ad,DC=evotec,DC=xyz' {
Set-GPOOwner -Type Administrative
Remove-GPOPermission -Type NotAdministrative, NotWellKnownAdministrative -IncludePermissionType GpoEdit, GpoEditDeleteModifySecurity
Add-GPOPermission -Type Administrative -IncludePermissionType GpoEditDeleteModifySecurity
Add-GPOPermission -Type WellKnownAdministrative -IncludePermissionType GpoEditDeleteModifySecurity
} -WhatIf
.NOTES
General notes
#>
[cmdletBinding()]
param(
[validateset('Administrative', 'Default')][string] $Type = 'Default',