gsadmin/GPOZaurr
1
0
Fork 0
mirror of https://github.com/EvotecIT/GPOZaurr.git synced 2026-08-31 04:37:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added or improved help on all functions.

Browse Source
This commit is contained in:
neztach
2024-07-05 13:00:03 -05:00
parent bd103a513b
commit 92f3fcb692
97 changed files with 3074 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Private/Remove-PrivPermission.ps1
+29
View File
@@ -1,4 +1,33 @@
function Remove-PrivPermission {
<#
.SYNOPSIS
Removes a specified permission from a Group Policy Object (GPO).
.DESCRIPTION
This function removes a specified permission from a GPO based on the provided Principal and PrincipalType. It supports removing permissions by DistinguishedName or SID. It also provides the option to include specific permission types.
.PARAMETER Principal
Specifies the principal for which the permission needs to be removed.
.PARAMETER PrincipalType
Specifies the type of the principal. Valid values are 'DistinguishedName', 'Name', or 'Sid'.
.PARAMETER GPOPermission
Specifies the GPO permission object to remove.
.PARAMETER IncludePermissionType
Specifies the permission type to include in the removal process.
.EXAMPLE
Remove-PrivPermission -Principal "CN=User1,OU=Users,DC=Contoso,DC=com" -PrincipalType "DistinguishedName" -GPOPermission $PermissionObject -IncludePermissionType "Read"
This example removes the "Read" permission for the user with the specified DistinguishedName from the GPO.
.EXAMPLE
Remove-PrivPermission -Principal "S-1-5-21-3623811015-3361044348-30300820-1013" -PrincipalType "Sid" -GPOPermission $PermissionObject -IncludePermissionType "Write"
This example removes the "Write" permission for the user with the specified SID from the GPO.
#>
[cmdletBinding(SupportsShouldProcess)]
param(
[string] $Principal,