mirror of
https://github.com/EvotecIT/GPOZaurr.git
synced 2026-08-28 11:16:49 +00:00
Added or improved help on all functions.
This commit is contained in:
@@ -1,4 +1,48 @@
|
||||
function Get-PermissionsAnalysis {
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Analyzes permissions for a specified Group Policy Object (GPO) based on provided criteria.
|
||||
|
||||
.DESCRIPTION
|
||||
This function analyzes permissions for a specified Group Policy Object (GPO) based on the given criteria. It checks for specific administrative groups, standard users, and well-known administrative groups to determine the type of permissions assigned.
|
||||
|
||||
.PARAMETER GPOPermissions
|
||||
An array of GPO permissions to analyze.
|
||||
|
||||
.PARAMETER Type
|
||||
Specifies the type of permissions to analyze. Valid values are 'WellKnownAdministrative', 'Administrative', 'AuthenticatedUsers', or 'Default'.
|
||||
|
||||
.PARAMETER PermissionType
|
||||
The specific permission type to include in the analysis.
|
||||
|
||||
.PARAMETER Forest
|
||||
Target different Forest, by default current forest is used.
|
||||
|
||||
.PARAMETER ExcludeDomains
|
||||
Exclude domain from search, by default whole forest is scanned.
|
||||
|
||||
.PARAMETER IncludeDomains
|
||||
Include only specific domains, by default whole forest is scanned.
|
||||
|
||||
.PARAMETER ExtendedForestInformation
|
||||
Ability to provide Forest Information from another command to speed up processing.
|
||||
|
||||
.PARAMETER ADAdministrativeGroups
|
||||
Specifies the Active Directory administrative groups to consider.
|
||||
|
||||
.EXAMPLE
|
||||
Get-PermissionsAnalysis -GPOPermissions $GPOPermissions -Type 'Administrative' -PermissionType 'Read' -Forest 'Contoso' -IncludeDomains 'DomainA', 'DomainB'
|
||||
|
||||
Description:
|
||||
Analyzes permissions for the specified GPOPermissions array, focusing on administrative groups with 'Read' permission in the 'Contoso' forest for 'DomainA' and 'DomainB'.
|
||||
|
||||
.EXAMPLE
|
||||
Get-PermissionsAnalysis -GPOPermissions $GPOPermissions -Type 'WellKnownAdministrative' -PermissionType 'Write'
|
||||
|
||||
Description:
|
||||
Analyzes permissions for the specified GPOPermissions array, targeting well-known administrative groups with 'Write' permission.
|
||||
|
||||
#>
|
||||
[cmdletBinding()]
|
||||
param(
|
||||
[PSCustomObject] $GPOPermissions,
|
||||
|
||||
Reference in New Issue
Block a user