gsadmin/GPOZaurr
1
0
Fork 0
mirror of https://github.com/EvotecIT/GPOZaurr.git synced 2026-08-28 11:16:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Improved function

Browse Source
This commit is contained in:
Przemyslaw Klys
2020-05-25 18:03:44 +02:00
parent 30660a9097
commit ca030b5fee
3 changed files with 20 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Examples/Example-19-TestSysvolDomainControllers.ps1
+1 -1
View File
@@ -1,3 +1,3 @@
Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
Get-GPOZaurrSysvol -VerifyDomainControllers -Verbose | Format-Table Get-GPOZaurrSysvol -VerifyDomainControllers -Verbose | Format-Table *
GPOZaurr.psd1
+1 -1
View File
@@ -7,7 +7,7 @@
Description = 'Group Policy Eater' Description = 'Group Policy Eater'
FunctionsToExport = 'Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrLink', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrSysvol', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurrPermission', 'New-GPOZaurrWMI', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner' FunctionsToExport = 'Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrLink', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrSysvol', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurrPermission', 'New-GPOZaurrWMI', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner'
GUID = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde' GUID = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
ModuleVersion = '0.0.28' ModuleVersion = '0.0.29'
PowerShellVersion = '5.1' PowerShellVersion = '5.1'
PrivateData = @{ PrivateData = @{
PSData = @{ PSData = @{
Private/Test-SysvolFolders.ps1
+18 -8
View File
@@ -39,9 +39,13 @@
if ($null -ne $SysvolHash[$GPO.Id.GUID].FullName) { if ($null -ne $SysvolHash[$GPO.Id.GUID].FullName) {
try { try {
$ACL = Get-Acl -Path $SysvolHash[$GPO.Id.GUID].FullName -ErrorAction Stop $ACL = Get-Acl -Path $SysvolHash[$GPO.Id.GUID].FullName -ErrorAction Stop
$Owner = $ACL.Owner
$ErrorMessage = ''
} catch { } catch {
Write-Warning "Get-WinADGPOSysvolFolders - ACL reading failed for $($SysvolHash[$GPO.Id.GUID].FullName) with error: $($_.Exception.Message)" Write-Warning "Get-GPOZaurrSysvol - ACL reading failed for $($SysvolHash[$GPO.Id.GUID].FullName) with error: $($_.Exception.Message)"
$ACL = $null $ACL = $null
$Owner = ''
$ErrorMessage = $_.Exception.Message
} }
} else { } else {
$ACL = $null $ACL = $null
@@ -58,7 +62,7 @@
SysvolServer = $Server SysvolServer = $Server
SysvolStatus = $SysVolStatus SysvolStatus = $SysVolStatus
Owner = $GPO.Owner Owner = $GPO.Owner
FileOwner = $ACL.Owner FileOwner = $Owner
Id = $GPO.Id.Guid Id = $GPO.Id.Guid
GpoStatus = $GPO.GpoStatus GpoStatus = $GPO.GpoStatus
Description = $GPO.Description Description = $GPO.Description
@@ -67,17 +71,22 @@
UserVersion = $GPO.UserVersion UserVersion = $GPO.UserVersion
ComputerVersion = $GPO.ComputerVersion ComputerVersion = $GPO.ComputerVersion
WmiFilter = $GPO.WmiFilter WmiFilter = $GPO.WmiFilter
Error = $ErrorMessage
} }
} }
# Now we need to list thru Sysvol files and fine those that do not exists as GPO and create dummy GPO objects to show orphaned gpos # Now we need to list thru Sysvol files and fine those that do not exists as GPO and create dummy GPO objects to show orphaned gpos
foreach ($_ in $Differences.Keys) { foreach ($_ in $Differences.Keys) {
if ($Differences[$_] -eq 'Orphaned GPO') { if ($Differences[$_] -eq 'Orphaned GPO') {
if ($SysvolHash[$_].BaseName -notcontains 'PolicyDefinitions') { if ($SysvolHash[$_].BaseName -notcontains 'PolicyDefinitions') {
try {
if ($null -ne $SysvolHash[$_].FullName) { $ACL = Get-Acl -Path $SysvolHash[$_].FullName -ErrorAction Stop
$ACL = Get-Acl -Path $SysvolHash[$_].FullName -ErrorAction SilentlyContinue $Owner = $ACL.Owner
} else { $ErrorMessage = ''
} catch {
Write-Warning "Get-GPOZaurrSysvol - ACL reading failed for $($SysvolHash[$_].FullName) with error: $($_.Exception.Message)"
$ACL = $null $ACL = $null
$Owner = $null
$ErrorMessage = $_.Exception.Message
} }
[PSCustomObject] @{ [PSCustomObject] @{
@@ -86,8 +95,8 @@
DomainName = $Domain DomainName = $Domain
SysvolServer = $Server SysvolServer = $Server
SysvolStatus = $Differences[$GPO.Id.Guid] SysvolStatus = $Differences[$GPO.Id.Guid]
Owner = $ACL.Owner Owner = ''
FileOwner = $ACL.Owner FileOwner = $Owner
Id = $_ Id = $_
GpoStatus = 'Orphaned' GpoStatus = 'Orphaned'
Description = $null Description = $null
@@ -96,6 +105,7 @@
UserVersion = $null UserVersion = $null
ComputerVersion = $null ComputerVersion = $null
WmiFilter = $null WmiFilter = $null
Error = $ErrorMessage
} }
} }
} }