From d8e0548900207d8623dbb52e4b1630389751445c Mon Sep 17 00:00:00 2001
From: Przemyslaw Klys <przemyslaw.klys@evotec.pl>
Date: Sun, 22 Nov 2020 18:55:50 +0100
Subject: [PATCH] Improvement

---
 Private/Invoke.GPOZaurrPermissionsAdministrative.ps1 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Private/Invoke.GPOZaurrPermissionsAdministrative.ps1 b/Private/Invoke.GPOZaurrPermissionsAdministrative.ps1
index a2fd986..4b7fc6c 100644
--- a/Private/Invoke.GPOZaurrPermissionsAdministrative.ps1
+++ b/Private/Invoke.GPOZaurrPermissionsAdministrative.ps1
@@ -53,6 +53,7 @@
         New-HTMLText -FontSize 10pt -TextBlock {
             "When GPO is created by default it gets Domain Admins and Enterprise Admins with Edit/Delete/Modify Security permissions. "
             "For some reason, some Administrators remove those permissions or modify them when they shouldn't touch those at all. "
+            "Since having Edit/Delete/Modify Security permissions doesn't affect GPOApply permissions there's no reason to remove Domain Admins or Enterprise Admins from permissions, or limit their rights. "
         } -LineBreak
         New-HTMLText -FontSize 10pt -Text "Assesment results: " -FontWeight bold
         New-HTMLList -Type Unordered {