diff --git a/Examples/Example-08-ListingPermissions.ps1 b/Examples/Example-08-ListingPermissions.ps1 index 5f806f8..fbdfeb9 100644 --- a/Examples/Example-08-ListingPermissions.ps1 +++ b/Examples/Example-08-ListingPermissions.ps1 @@ -10,7 +10,7 @@ #Get-GPOZaurrPermissions | Format-Table -AutoSize $T = Get-GPOZaurrPermissions #| Out-HtmlView #$T[0] | Format-List * -$T | Format-Table -AutoSize +$T | Format-Table -AutoSize * #$T[0].Trustee #$T[0].Permission #$T[0] \ No newline at end of file diff --git a/GPOZaurr.psd1 b/GPOZaurr.psd1 index 2b9b898..a8e04a9 100644 --- a/GPOZaurr.psd1 +++ b/GPOZaurr.psd1 @@ -7,7 +7,7 @@ Description = 'Group Policy Eater' FunctionsToExport = 'Backup-GPOZaurr', 'Get-GPOZaurr', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermissions', 'Get-GPOZaurrWMI', 'New-GPOZaurrWMI', 'Remove-GPOZaurr', 'Remove-GPOZaurrWMI', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles' GUID = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde' - ModuleVersion = '0.0.7' + ModuleVersion = '0.0.9' PowerShellVersion = '5.1' PrivateData = @{ PSData = @{ diff --git a/Public/Get-GPOZaurrPermissions.ps1 b/Public/Get-GPOZaurrPermissions.ps1 index d5f5a58..edb31cd 100644 --- a/Public/Get-GPOZaurrPermissions.ps1 +++ b/Public/Get-GPOZaurrPermissions.ps1 @@ -26,7 +26,7 @@ ComputerVersion : AD Version: 1, SysVol Version: 1 WmiFilter : #> - Get-GPPermissions -Name $GPO.DisplayName -DomainName $GPO.DomainName -All -Server $QueryServer | ForEach-Object -Process { + Get-GPPermissions -Guid $GPO.ID -DomainName $GPO.DomainName -All -Server $QueryServer | ForEach-Object -Process { $GPOPermission = $_ #$GPOPermissionFormatted = ConvertTo-TableFormat -InputObject $_ [PSCustomObject] @{ @@ -49,7 +49,15 @@ SidType = $GPOPermission.Trustee.SidType #: Group } } - $SplittedOwner = $GPO.Owner.Split('\') + + if ($GPO.Owner) { + $SplittedOwner = $GPO.Owner.Split('\') + $DomainOwner = $SplittedOwner[0] #: EVOTEC + $DomainUserName = $SplittedOwner[1] #: Domain Admins + } else { + $DomainOwner = $GPO.Owner + $DomainUserName = '' + } [PSCustomObject] @{ DisplayName = $GPO.DisplayName # : ALL | Enable RDP GUID = $GPO.GUID @@ -64,9 +72,9 @@ Permission = 'Owner' # : GpoEditDeleteModifySecurity Inherited = $false # : False - Domain = $SplittedOwner[0] #: EVOTEC + Domain = $DomainOwner DistinguishedName = '' #: CN = Domain Admins, CN = Users, DC = ad, DC = evotec, DC = xyz - Name = $SplittedOwner[1] #: Domain Admins + Name = $DomainUserName Sid = '' #: S - 1 - 5 - 21 - 853615985 - 2870445339 - 3163598659 - 512 SidType = '' #: Group }