From 24cb6dbf99ed7a8240ba62204a79601f3ad5ff97 Mon Sep 17 00:00:00 2001 From: Przemyslaw Klys Date: Sun, 6 Dec 2020 10:29:10 +0100 Subject: [PATCH] Added some help --- Public/Set-GPOOwner.ps1 | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/Public/Set-GPOOwner.ps1 b/Public/Set-GPOOwner.ps1 index e1e9973..f000f3a 100644 --- a/Public/Set-GPOOwner.ps1 +++ b/Public/Set-GPOOwner.ps1 @@ -1,4 +1,28 @@ function Set-GPOOwner { + <# + .SYNOPSIS + Used within Invoke-GPOZaurrPermission only. Set new group policy owner. + + .DESCRIPTION + Used within Invoke-GPOZaurrPermission only. Set new group policy owner. + + .PARAMETER Type + Choose Owner Type. When chosing Administrative Type, owner will be set to Domain Admins for current GPO domain. When Default is set Owner will be set to Principal given in another parameter. + + .PARAMETER Principal + Choose Owner Name to set for Group Policy + + .EXAMPLE + Invoke-GPOZaurrPermission -Verbose -SearchBase 'OU=Computers,OU=Production,DC=ad,DC=evotec,DC=xyz' { + Set-GPOOwner -Type Administrative + Remove-GPOPermission -Type NotAdministrative, NotWellKnownAdministrative -IncludePermissionType GpoEdit, GpoEditDeleteModifySecurity + Add-GPOPermission -Type Administrative -IncludePermissionType GpoEditDeleteModifySecurity + Add-GPOPermission -Type WellKnownAdministrative -IncludePermissionType GpoEditDeleteModifySecurity + } -WhatIf + + .NOTES + General notes + #> [cmdletBinding()] param( [validateset('Administrative', 'Default')][string] $Type = 'Default',