From e49541171489dc0bbe4a49412339acb5e7967a5a Mon Sep 17 00:00:00 2001
From: Przemyslaw Klys <przemyslaw.klys@evotec.pl>
Date: Thu, 5 Nov 2020 19:44:48 +0100
Subject: [PATCH] Update

---
 Private/Invoke.GPOZaurrOrphans.ps1 | 24 +++++++++++++++++++++---
 1 file changed, 21 insertions(+), 3 deletions(-)

diff --git a/Private/Invoke.GPOZaurrOrphans.ps1 b/Private/Invoke.GPOZaurrOrphans.ps1
index 796e126..0e056d0 100644
--- a/Private/Invoke.GPOZaurrOrphans.ps1
+++ b/Private/Invoke.GPOZaurrOrphans.ps1
@@ -29,6 +29,16 @@
     }
     Overview   = {
         New-HTMLPanel {
+            New-HTMLText -TextBlock {
+                "Group Policies are stored in two places - Active Directory (metadata) and SYSVOL (content)."
+                "Since those are managed in different ways, replicated in different ways it's possible because of different issues they get out of sync."
+            }
+            New-HTMLText -Text "For example:"
+            New-HTMLList -Type Unordered {
+                New-HTMLListItem -Text 'USN Rollback in AD could cause group policies to reappar in Active Directory, yet SYSVOL data would be unavailable'
+                New-HTMLListItem -Text 'Group Policy deletion failing to delete GPO content'
+                New-HTMLListItem -Text 'DFSR replication failing between DCs'
+            }
             New-HTMLText -Text 'Following chart presents ', 'Broken / Orphaned Group Policies' -FontSize 10pt -FontWeight normal, bold
             New-HTMLList -Type Unordered {
                 New-HTMLListItem -Text 'Group Policies on SYSVOL, but no details in AD: ', $GPOZaurrOrphans['Variables']['NotAvailableInAD'] -FontWeight normal, bold
@@ -47,15 +57,23 @@
         New-HTMLSection -Invisible {
             New-HTMLPanel {
                 New-HTMLText -TextBlock {
-                    "Following table shows list of all group policies and their status in AD and SYSVOL. Due to different reasons it's "
-                    "possible that "
+                    "Group Policies are stored in two places - Active Directory (metadata) and SYSVOL (content)."
+                    "Since those are managed in different ways, replicated in different ways it's possible because of different issues they get out of sync."
                 } -FontSize 10pt
+                New-HTMLText -Text "For example:" -FontSize 10pt -FontWeight bold
+                New-HTMLList -Type Unordered {
+                    New-HTMLListItem -Text 'USN Rollback in AD could cause already deleted Group Policies to reapper in Active Directory, yet SYSVOL data would be unavailable'
+                    New-HTMLListItem -Text 'Group Policy deletion failing to delete GPO content'
+                    New-HTMLListItem -Text 'Permission issue preventing deletion of GPO content'
+                    New-HTMLListItem -Text 'Failing DFSR replication between DCs'
+                } -FontSize 10pt
+                New-HTMLText -Text 'Following problems were detected:' -FontSize 10pt -FontWeight bold
                 New-HTMLList -Type Unordered {
                     New-HTMLListItem -Text 'Group Policies on SYSVOL, but no details in AD: ', $GPOZaurrOrphans['Variables']['NotAvailableInAD'] -FontWeight normal, bold
                     New-HTMLListItem -Text 'Group Policies in AD, but no content on SYSVOL: ', $GPOZaurrOrphans['Variables']['NotAvailableOnSysvol'] -FontWeight normal, bold
                     New-HTMLListItem -Text "Group Policies which couldn't be assed due to permissions issue: ", $GPOZaurrOrphans['Variables']['NotAvailablePermissionIssue'] -FontWeight normal, bold
                 } -FontSize 10pt
-                New-HTMLText -Text "Follow the steps below table to get Active Directory Group Policies in healthy state." -FontSize 10pt
+                New-HTMLText -Text "Please review output in table and follow the steps below table to get Active Directory Group Policies in healthy state." -FontSize 10pt
             }
             New-HTMLPanel {
                 New-HTMLChart {