Added or improved help on all functions.

This commit is contained in:
neztach
2024-07-05 13:00:03 -05:00
parent bd103a513b
commit 92f3fcb692
97 changed files with 3074 additions and 35 deletions
+44
View File
@@ -1,4 +1,48 @@
function Get-PermissionsAnalysis {
<#
.SYNOPSIS
Analyzes permissions for a specified Group Policy Object (GPO) based on provided criteria.
.DESCRIPTION
This function analyzes permissions for a specified Group Policy Object (GPO) based on the given criteria. It checks for specific administrative groups, standard users, and well-known administrative groups to determine the type of permissions assigned.
.PARAMETER GPOPermissions
An array of GPO permissions to analyze.
.PARAMETER Type
Specifies the type of permissions to analyze. Valid values are 'WellKnownAdministrative', 'Administrative', 'AuthenticatedUsers', or 'Default'.
.PARAMETER PermissionType
The specific permission type to include in the analysis.
.PARAMETER Forest
Target different Forest, by default current forest is used.
.PARAMETER ExcludeDomains
Exclude domain from search, by default whole forest is scanned.
.PARAMETER IncludeDomains
Include only specific domains, by default whole forest is scanned.
.PARAMETER ExtendedForestInformation
Ability to provide Forest Information from another command to speed up processing.
.PARAMETER ADAdministrativeGroups
Specifies the Active Directory administrative groups to consider.
.EXAMPLE
Get-PermissionsAnalysis -GPOPermissions $GPOPermissions -Type 'Administrative' -PermissionType 'Read' -Forest 'Contoso' -IncludeDomains 'DomainA', 'DomainB'
Description:
Analyzes permissions for the specified GPOPermissions array, focusing on administrative groups with 'Read' permission in the 'Contoso' forest for 'DomainA' and 'DomainB'.
.EXAMPLE
Get-PermissionsAnalysis -GPOPermissions $GPOPermissions -Type 'WellKnownAdministrative' -PermissionType 'Write'
Description:
Analyzes permissions for the specified GPOPermissions array, targeting well-known administrative groups with 'Write' permission.
#>
[cmdletBinding()]
param(
[PSCustomObject] $GPOPermissions,