Improvements to Find-GPO

2026-08-28 19:27:28 +00:00 · 2020-06-27 17:04:19 +02:00
parent 570b1cbc83
commit d94bf27669
6 changed files with 245 additions and 0 deletions
@@ -0,0 +1,43 @@
+function Get-XMLStandard {
+    [cmdletBinding()]
+    param(
+        [PSCustomObject] $GPO,
+        [System.Xml.XmlElement[]] $GPOOutput,
+        [string] $Splitter = [System.Environment]::NewLine,
+        [switch] $FullObjects
+    )
+    $LinksInformation = Get-LinksFromXML -GPOOutput $GPOOutput -Splitter $Splitter -FullObjects:$FullObjects
+    foreach ($Type in @('User', 'Computer')) {
+        if ($GPOOutput.$Type.ExtensionData.Extension) {
+            foreach ($ExtensionType in $GPOOutput.$Type.ExtensionData.Extension) {
+                $GPOSettingType = ($ExtensionType.type -split ':')[1]
+                Write-Warning $GPOSettingType
+                foreach ($Key in $ExtensionType.Account) {
+                    [PSCustomObject] @{
+                        DisplayName    = $GPO.DisplayName
+                        DomainName     = $GPO.DomainName
+                        GUID           = $GPO.Guid
+                        Linked         = $LinksInformation.Linked
+                        LinksCount     = $LinksInformation.LinksCount
+                        Links          = $LinksInformation.Links
+                        GpoType        = $Type
+                        Name           = $Key.Name
+                        Type           = $Key.Type
+                        SettingNumber  = $Key.SettingNumber
+                        SettingBoolean = if ($Key.SettingBoolean -eq 'true') { $true } elseif ($Key.SettingBoolean -eq 'false') { $false } else { $null }
+                    }
+                }
+            }
+        }
+    }
+}
+
+<#
+q1              : http://www.microsoft.com/GroupPolicy/Settings/Security
+type            : q1:SecuritySettings
+Account         : {ClearTextPassword, LockoutBadCount, LockoutDuration, MaximumPasswordAge...}
+SecurityOptions : SecurityOptions
+SystemServices  : SystemServices
+#>
+
+#$GPOSettingType = ($ExtensionType.type -split ':')[1]