mirror of
https://github.com/EvotecIT/GPOZaurr.git
synced 2026-08-18 06:23:13 +00:00
Fix for Invoke-GPOZaurrPermission
This commit is contained in:
@@ -195,7 +195,7 @@
|
||||
} elseif ($Rule.Action -eq 'Remove') {
|
||||
$GPOPermissions = Get-GPOZaurrPermission -GPOGuid $GPO.GUID -IncludeDomains $GPO.DomainName -IncludePermissionType $Rule.IncludePermissionType -ExcludePermissionType $Rule.ExcludePermissionType -Type $Rule.Type -IncludeGPOObject -PermitType $Rule.PermitType -Principal $Rule.Principal -PrincipalType $Rule.PrincipalType -ExcludePrincipal $Rule.ExcludePrincipal -ExcludePrincipalType $Rule.ExcludePrincipalType -ADAdministrativeGroups $ADAdministrativeGroups
|
||||
foreach ($Permission in $GPOPermissions) {
|
||||
Remove-PrivPermission -Principal $Permission.Sid -PrincipalType Sid -GPOPermission $Permission -IncludePermissionType $Permission.Permission
|
||||
Remove-PrivPermission -Principal $Permission.PrincipalSid -PrincipalType Sid -GPOPermission $Permission -IncludePermissionType $Permission.Permission
|
||||
}
|
||||
} elseif ($Rule.Action -eq 'Add') {
|
||||
# Initially we were askng for same domain as user requested, but in fact we need to apply GPODomain as it can be linked to different domain
|
||||
|
||||
@@ -62,6 +62,7 @@ That's it. Whenever there's a new version, you run the command, and you can enjo
|
||||
- [x] Type `GPOList` - added more data, added Optimization Step
|
||||
- [x] Added `Set-GPOZaurrStatus`
|
||||
- [x] Added `Optimize-GPOZaurr`
|
||||
- [x] Fixed `Invoke-GPOZaurrPermission` which would not remove permission due to internal changes earlier on
|
||||
- 0.0.95 - 04.12.2020
|
||||
- [x] Fix for too big int - [#4](https://github.com/EvotecIT/GPOZaurr/issues/4) - tnx neztach
|
||||
- [x] Improved `Invoke-GPOZaurr`
|
||||
|
||||
Reference in New Issue
Block a user