Update

2026-08-27 10:46:49 +00:00 · 2020-11-05 11:28:58 +01:00
parent 981e71483a
commit b5e4fd07dc
10 changed files with 482 additions and 496 deletions
@@ -0,0 +1,65 @@
+$GPOZaurrNetLogonPermissions = [ordered] @{
+    Name       = 'NetLogon Permissions'
+    Enabled    = $true
+    Data       = $null
+    Execute    = {  }
+    Processing = {
+
+    }
+    Variables  = @{
+
+    }
+    Overview   = {
+        New-HTMLPanel {
+            New-HTMLText -Text 'Following chart presents ', 'NetLogon Summary' -FontSize 10pt -FontWeight normal, bold
+            New-HTMLList -Type Unordered {
+                & $Script:GPOConfiguration['NetLogon']['List']
+            } -FontSize 10pt
+            #New-HTMLText -FontSize 10pt -Text 'Those problems must be resolved before doing other clenaup activities.'
+            New-HTMLChart {
+                New-ChartPie -Name 'Correct Owners' -Value $NetLogonOwnersAdministrators.Count -Color LightGreen
+                New-ChartPie -Name 'Incorrect Owners' -Value $NetLogonOwnersToFix.Count -Color Crimson
+            } -Title 'NetLogon Owners' -TitleAlignment center
+        }
+        New-HTMLPanel {
+
+        }
+    }
+    Solution   = {
+        New-HTMLTab -Name 'NetLogon Owners' {
+            New-HTMLPanel {
+                New-HTMLText -TextBlock {
+                    "Following table shows NetLogon file owners. It's important that NetLogon file owners are set to BUILTIN\Administrators (SID: S-1-5-32-544). "
+                    "Owners have full control over the file object. Current owner of the file may be an Administrator but it doesn't guarentee that he will be in the future. "
+                    "That's why as a best-practice it's recommended to change any non-administrative owners to BUILTIN\Administrators, and even Administrative accounts should be replaced with it. "
+                } -FontSize 10pt
+                New-HTMLList -Type Unordered {
+                    & $Script:GPOConfiguration['NetLogon']['List']
+                } -FontSize 10pt
+                New-HTMLText -Text "Follow the steps below table to get NetLogon Owners into compliant state." -FontSize 10pt
+            }
+            New-HTMLSection -Name 'NetLogon Files List' {
+                New-HTMLTable -DataTable $NetLogonOwners -Filtering {
+                    New-HTMLTableCondition -Name 'PrincipalSid' -Value "S-1-5-32-544" -BackgroundColor LightGreen -ComparisonType string
+                    New-HTMLTableCondition -Name 'PrincipalSid' -Value "S-1-5-32-544" -BackgroundColor Salmon -ComparisonType string -Operator ne
+                    New-HTMLTableCondition -Name 'PrincipalType' -Value "WellKnownAdministrative" -BackgroundColor LightGreen -ComparisonType string -Operator eq
+                }
+            }
+            New-HTMLSection -Name 'Steps to fix NetLogon Owners ' {
+                New-HTMLContainer {
+                    New-HTMLSpanStyle -FontSize 10pt {
+                        New-HTMLText -Text 'Following steps will guide you how to fix NetLogon Owners and make them compliant.'
+                        New-HTMLWizard {
+                            & $Script:GPOConfiguration['NetLogon']['Wizard']
+                        } -RemoveDoneStepOnNavigateBack -Theme arrows -ToolbarButtonPosition center
+                    }
+                }
+            }
+        }
+        New-HTMLTab -Name 'NetLogon Permissions' {
+            New-HTMLSection -Name 'NetLogon Files List' {
+                New-HTMLTable -DataTable $Netlogon -Filtering
+            }
+        }
+    }
+}