Version bump

Update changelog
File rename, fix of condition
2026-07-26 20:00:09 +00:00 · 2021-11-02 11:12:33 +01:00 · 2021-11-02 11:12:22 +01:00 · 2021-11-02 11:11:02 +01:00 · 2021-10-24 16:10:56 +02:00 · 2021-10-24 16:08:02 +02:00
25 changed files with 1260 additions and 556 deletions
@@ -0,0 +1,483 @@
+# GPOZaurr Release History
+
+## 0.0.145 - 2021.11.02
+  - Improves `GPOUpdates` report from `Invoke-GPOZaurr` by fixing conditional formatting
+## 0.0.144 - 2021.10.24
+  - Improves `Get-GPOZaurrUpdates`
+  - Adds `GPOUpdates` report to `Invoke-GPOZaurr`
+## 0.0.143 - 2021.10.19
+  - Improves `Get-GPOZaurrUpdates` with more verbose messages
+## 0.0.142 - 2021.10.18
+  - Fixes `Get-GPOZaurrUpdates` when GPO is not linked
+## 0.0.141 - 2021.10.17
+  - Removed property from `Get-GPOZaurrAD` - `FunctionalityVersion`
+  - Added property to `Get-GPOZaurrAD` - `Owner`
+  - Added ability to choose date ranges for `Get-GPOZaurrAD`
+  - Added `Get-GPOZaurrUpdates` which shows last gpos added to forest
+## 0.0.140 - 2021.08.24
+  - ☑ Improved `Invoke-GPOZaurr` - type `GPOAnalysis` - added folder redirection type - [tnx PatrickOnGit](https://github.com/EvotecIT/GPOZaurr/pull/24)
+## 0.0.139 - 2021.08.19
+  - ☑ Improved `Invoke-GPOZaurr` - type `GPOOrganizationalUnit` - adding RootLevel information
+## 0.0.138 - 2021.08.18
+  - 🐛 Fix for exclusions using GUID with brackets for Invoke-GPOZaurr `GPOList` and related options
+## 0.0.137 - 2021.08.17
+  - ☑ Improved `Invoke-GPOZaurr` - type `GPOOrganizationalUnit` - moving delete of OU as non-mandatory option
+## 0.0.136 - 2021.08.17
+  - ☑ Improved wording
+## 0.0.135 - 2021.08.17
+  - ☑ Improved exclusions
+## 0.0.134 - 2021.08.16
+  - ☑ Improved exclusions for email use
+## 0.0.133 - 2021.08.16
+  - ☑ Improved exclusions for email use
+## 0.0.132 - 2021.08.16
+  - ☑ Improved exclusions for email use
+## 0.0.131 - 2021.08.16
+  - ☑ Improved exclusions for email use
+## 0.0.130 - 2021.08.13
+  - 💡 Updated HTML to new version of `PSWriteHTML` that fixes complains about `SearchBuilder` option
+  - ☑ Improved `Invoke-GPOZaurr` - type `GPOOrganizationalUnit` with exclusions
+
+    ```powershell
+    Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @(
+        '*OU=Production,DC=ad,DC=evotec,DC=pl'
+        '*OU=Production,DC=ad,DC=evotec,DC=pl'
+        '*DC=ad,DC=evotec,DC=pl'
+    )
+    ```
+
+  - ☑ Improved `Get-GPOZaurrOrganizationalUnit` with exclusions
+
+      ```powershell
+      Get-GPOZaurrOrganizationalUnit -Verbose -ExcludeOrganizationalUnit @(
+        '*,OU=Production,DC=ad,DC=evotec,DC=pl'
+      ) | Format-Table
+      ```
+
+  - ☑ Improved `Remove-GPOZaurrLinkEmptyOU` with exclusions
+
+    ```powershell
+    $Exclude = @(
+        "OU=Groups,OU=Production,DC=ad,DC=evotec,DC=pl"
+        "OU=Test \, OU,OU=ITR02,DC=ad,DC=evotec,DC=xyz"
+    )
+
+    Remove-GPOZaurrLinkEmptyOU -Verbose -LimitProcessing 3 -WhatIf -ExcludeOrganizationalUnit $Exclude
+    ```
+
+  - ☑ Improved `Invoke-GPOZaurr` - type `GPOOwners` with exclusions
+
+    ```powershell
+    Invoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurrGPOOwners.html -Type GPOOwners -Online -Exclusions @(
+        'EVOTEC\przemyslaw.klys'
+    )
+    ```
+
+  - ☑ Improved `Set-GPOZaurrOwner` with exclusions/approved owners
+
+    ```powershell
+    Set-GPOZaurrOwner -Type All -Verbose -LimitProcessing 2 -WhatIf -IncludeDomains 'ad.evotec.xyz' -ApprovedOwner @(
+        'EVOTEC\przemyslaw.klys'
+    )
+    ```
+
+  - ☑ Improved `Get-GPOZaurrOwner` with exclusions/approved owners
+
+    ```powershell
+    $T = Get-GPOZaurrOwner -Verbose -IncludeSysvol -ApprovedOwner @('EVOTEC\przemyslaw.klys')
+    $T | Format-Table *
+    ```
+
+  - ☑ Improved `Get-GPOZaurr` with exclusions and support for GUID, strings
+
+    ```powershell
+    $GPOS = Get-GPOZaurr -ExcludeGroupPolicies {
+        Skip-GroupPolicy -Name 'de14_usr_std'
+        Skip-GroupPolicy -Name 'de14_usr_std' -DomaiName 'ad.evotec.xyz'
+        Skip-GroupPolicy -Name 'All | Trusted Websites' #-DomaiName 'ad.evotec.xyz'
+        '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
+        'COMPUTERS | Enable Sets'
+    }
+    $GPOS | Format-Table -AutoSize *
+    ```
+
+  - ☑ Improved `Invoke-GPOZaurr` with exclusions and support for GUID, strings
+
+    ```powershell
+    Invoke-GPOZaurr -Type GPOList -Exclusions {
+        Skip-GroupPolicy -Name 'All | Trusted Websites' -DomaiName 'ad.evotec.xyz'
+        '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
+        'COMPUTERS | Enable Sets'
+    }
+    ```
+
+## 0.0.129 - 2021.08.06
+  - Added `Get-GPOZaurrOrganizationalUnit` and added `GPOOrganizationalUnit` in `Invoke-GPOZaurr` (preview)
+  - Added `Remove-GPOZaurrLinkEmptyOU` which allows removing links from Empty OUs (preview)
+  - Small update to parameter sets for `Set-GPOZaurrOwner`
+## 0.0.128 - 2021.05.26
+  - ☑ Improved `Invoke-GPOZaurrContent` - type `PublicKeyPoliciesCertificates` - added more certificate information
+  - ☑ Improved `Invoke-GPOZaurr` - type `GPOAnalysis` - added more certificate information
+## 0.0.128 Alpha 1 - 2021.05.17
+  - 🐛 Fixes errors when normalizing properties [#17](https://github.com/EvotecIT/GPOZaurr/issues/17)
+## 0.0.127 - 2021.04.15
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Report `GPOList` - moved description closer to statuses
+  - ☑ Improved `Get-GPOZaurr` - moved description closer to statuses
+## 0.0.126 - 2021.04.12
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Report `GPOBlockedInheritance` - hidden DistinguishedName, fixed some small typos
+## 0.0.125 - 2021.04.11
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Report `GPOBlockedInheritance` - small fixes
+## 0.0.124 - 2021.04.11
+  - ☑ Added `SearchBuilder` to all tables
+  - ☑ Automatically joins arrays in tables in `Invoke-GPOZaurr`
+  - ☑ Improved `Get-GPOZaurrInheritance` with Exclusions and some help information
+  - ☑ Improved `Invoke-GPOZaurr` with some Exclusions
+  - ☑ Improved `Invoke-GPOZaurr`
+    - 🔥 Report `GPOBlockedInheritance` - heavily improved functionality and data
+## 0.0.123 - 2021.03.21
+  - ☑ Fixes `Get-GPOZaurrLinkSummary`
+## 0.0.122 - 2021.02.11
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Report `GPOAnalysis` - added `WindowsFirewallRules`,`WindowsFirewallProfiles`,`WindowsFirewallConnectionSecurityAuthentication`,`WindowsFirewallConnectionSecurityRules`
+  - ☑ Improved `Invoke-GPOZaurrContent` as mentioned above for `GPOAnalysis`
+## 0.0.121 - 2021.02.10
+  - ☑ Improvement to `Get-GPOZaurr` - added description [#13](https://github.com/EvotecIT/GPOZaurr/issues/13)
+  - ☑ Improvement to `Invoke-GPOZaurr -Type GPOList` - added description [#13](https://github.com/EvotecIT/GPOZaurr/issues/13)
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Report GPOAnalysis - added `FolderRedirection`
+    - ☑ Report GPOAnalysis - renamed `FolderRedirection` to `FolderRedirectionPolicy`
+  - ☑ Improved `Invoke-GPOZaurrContent` as mentioned above for `GPOAnalysis`
+## 0.0.120 - 2021.02.10
+  - ☑ Improvement to `Get-GPOZaurr` to warn if there is potential issue with EMPTY (which can happen on non-english system)
+    - ☑ In such case GPOZaurr will asses EMPTY or not using old method which doesn't detect all EMPTY cases but shouldn't provide false positives
+## 0.0.119
+  - Broken release - weird
+## 0.0.118 - 2021.02.09
+  - ☑ Added information where the report is saved
+  - ☑ Small improvement to `Get-GPOZaurr` to exlicitly define variable types
+## 0.0.117 - 2021.02.09
+  - ☑ Small fix to `Get-GPOZaurr` to exclude GPOList.xml which is used in offline mode by `Save-GPOZaurrFiles`
+## 0.0.116 - 2021.02.08
+  - ☑ Improved `Remove-GPOZaurrBroken` to handle ObjectClass problem, and removed reduntant check
+## 0.0.115 - 2021.02.07
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ `GPOList` - clarified some texts, changed 7 days to 30 days as default
+    - ☑ `NetLogonPermissions` - fixed missing text
+  - ☑ Fixes `Get-GPOZaurrNetLogon` error on empty Owner - [#9](https://github.com/EvotecIT/GPOZaurr/issues/9)
+## 0.0.114 - 2021.01.27
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ HTML now uses offline mode by default (no CDN) - increase in size of HTML up to 3MB
+    - ☑ Using Online switch forces use of CDN - smaller files. For example `Invoke-GPOZaurr -Type GPOList -Online`
+  - [ ] Improved `Invoke-GPOZaurrSupport`
+    - ☑ HTML now uses offline mode by default (no CDN) - increase in size of HTML up to 3MB
+    - ☑ Using Online switch forces use of CDN - smaller files. For example `Invoke-GPOZaurrSupport -Online`
+    - ☑ Removed parameter Offline, added parameter Online
+    - ☑ The cmdlet is not really production ready. It's work in progress
+## 0.0.113 - 2021.01.25
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Report GPOAnalysis - added WindowsTimeService
+  - ☑ Improved `Invoke-GPOZaurrContent`
+    - ☑ Added `WindowsTimeService` type
+## 0.0.112 - 2021.01.25
+  - ☑ Improved `Invoke-GPOZaurr`
+## 0.0.111 - 2021.01.24
+  - ☑ Improved `Invoke-GPOZaurr`
+## 0.0.110 - 2021.01.22
+  - ☑ Improved `Invoke-GPOZaurr`
+## 0.0.109 - 2021.01.11
+  - ☑ Improved `Invoke-GPOZaurr`
+## 0.0.108 - 2021.01.11
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Improved `GPOConsistency`
+## 0.0.107 - 2021.01.11
+  - ☑ Improved `Invoke-GPOZaurr`
+## 0.0.106 - 2021.01.11
+  - ☑ Improved `Invoke-GPOZaurrContent`
+## 0.0.105 - 2021.01.05
+  - ☑ Improved `Get-GPOZaurr`
+    - ☑ Improved report `GPOBrokenLink`
+## 0.0.104 - 2021.01.04
+  - ☑ Improved `Get-GPOZaurrBrokenLink`
+  - ☑ Improved `Repair-GPOZaurrBrokenLink`
+  - ☑ Improved `Get-GPOZaurr`
+    - ☑ Improved report `GPOBrokenLink`
+## 0.0.103 - 2021.01.04
+  - ☑ Improved `Get-GPOZaurr`
+    - ☑ Added new report `GPOBrokenLink`
+  - ☑ Added `Get-GPOZaurrBrokenLink`
+  - ☑ Added `Repair-GPOZaurrBrokenLink`
+## 0.0.102 - 2021.01.02
+  - ☑ Improved `Get-GPOZaurrLink`
+    - ☑ Supports all links across forest
+    - ☑ Renamed Linked validate set from `Other` to `OrganizationalUnit`
+  - ☑ Improved `Get-GPOZaurrLinkSummary`
+  - ☑ Improved/BugFix `Get-GPOZaurr` to properly detect linked GPOs in sites/cross-domain
+  - ☑ Improved `Invoke-GPOZaurrPermission`
+    - ☑ Renamed Linked validate set from `Other` to `OrganizationalUnit`
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Added `GPOLinks` basic list
+## 0.0.101 - 23.12.2020
+  - ☑ Improved `Get-GPOZaurrBroken`
+    - ☑ It now detects `ObjectClass Issue`
+    - ☑ Heavily improved performance
+    - ☑ Removed some useless properties for this particular cmdlet
+    - ☑ All states: `Not available on SYSVOL`, `Not available in AD`, `Exists`, `Permissions Issue`, `ObjectClass Issue`
+    - ☑ Improved help
+  - ☑ Improved `Remove-GPOZaurrBroken`
+    - ☑ It now deals with `ObjectClass Issue`
+    - ☑ Heavily improved performance
+    - ☑ Removed some useless properties for this particular cmdlet
+    - ☑ Now requires manual type insert AD, SYSVOL or ObjectClass (or all of them). Before it was auto using AD/SYSVOL.
+    - ☑ Improved help
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList`
+    - ☑ Renamed `GPOOrphans` to `GPOBroken`
+    - ☑ Improved `GPOBroken` with `ObjectClass issue`
+## 0.0.100 - 21.12.2020
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOPermissionsRead`
+    - ☑ Type `GPOPermissions`
+## 0.0.99 - 13.12.2020
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` - require GPO to be 7 days old for deletion to be proposed
+    - ☑ Type `GPOPermissions` - one stop for permissions
+    - ☑ Allows Steps to be chosen via their menu and out-of-order
+  - ☑ Improved `Remove-GPOZaurr` - added `RequireDays` parameter to prevent deletion of just modified GPOs
+  - ☑ Added `Get-GPOZaurrPermissionAnalysis`
+  - ☑ Added `Repair-GPOZaurrPermission`
+## 0.0.98 - 10.12.2020
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` - fixed unexpected ending of cmdlet when error occurs (for example deleted GPO while script is running) which could impact results
+    - ☑ Other types - small color adjustment
+  - ☑ Fixed/Improved `Get-GPOZaurr` - fixed unexpected ending of cmdlet when error occurs (for example deleted GPO while script is running), improved code base
+  - ☑ Improved `Invoke-GPOZaurrSupport`
+## 0.0.97 - 07.12.2020
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` - added more data, did small reorganization
+## 0.0.96 - 07.12.2020
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` - added more data, added Optimization Step
+  - ☑ Added `Set-GPOZaurrStatus`
+  - ☑ Added `Optimize-GPOZaurr`
+  - ☑ Fixed `Invoke-GPOZaurrPermission` which would not remove permission due to internal changes earlier on
+  - ☑ Small change to `Backup-GPOZaurr`
+    - ☑ Added support for `Disabled`. It's now possbile to backup `All` (default), `Empty`,`Unlinked`,`Disabled` or a mix of them
+    - ☑ Removed useless `GPOPath` parameter
+## 0.0.95 - 04.12.2020
+  - ☑ Fix for too big int - [#4](https://github.com/EvotecIT/GPOZaurr/issues/4) - tnx neztach
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` - added ability for Exclusions
+    - ☑ All other types, small improvements
+    - ☑ Added HideSteps, ShowError, ShowWarning -> Disabled Warnings/Errors by default as they tend to show too much information
+  - ☑ Improved `Remove-GPOZaurr` - added Exclusions
+## 0.0.93 - 03.12.2020
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` reverted charts colors for entries to match colors
+    - [ ] Added `Skip-GroupPolicy` to use within `Invoke-GPOZaurr`
+  - ☑ Improved `Invoke-GPOZaurr` with basic support for Exclusions
+  - ☑ Improved `Get-GPOZaurr` with basic support for Exclusions
+  - ☑ Improved `Remove-GPOZaurrPermission` error handling
+## 0.0.92 - 01.12.2020
+  - ☑ Improved `Invoke-GPOZaurrSupport`
+  - ☑ Improved `Invoke-GPOZaurr`
+    - ☑ Type `GPOList` improved with more data, more problems and clearer information
+  - ☑ Improved `Remove-GPOZaurr`
+    - ☑ Added ability do remove disabed GPO
+  - ☑ Improved `Get-GPOZaurr` detecting more issues, delivering more data
+## 0.0.91 - 24.11.2020
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Improve Type `GPOPermissionsUnknown`
+## 0.0.90 - 23.11.2020
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Improves Type `GPODuplicates`
+      - ☑ Fix for chart color to be RED
+    - ☑ Add Type `GPOPermissionsUnknown`
+    - ☑ Improves logic for Data with 0/1 element
+  - ☑ Improves `Remove-GPOZaurrDuplicateObject` - removed `Confirm` requirement
+  - ☑ Improves `Get-GPOZaurrNetLogon` with more verbose
+  - ☑ Improves `Repair-GPOZaurrNetLogonOwner` with more verbose and fix for `LimitProcessing`
+## 0.0.89 - 22.11.2020
+  - ☑ Small update `Add-GPOZaurrPermission`
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Added Type `GPOPermissionsAdministrative`
+## 0.0.88 - 18.11.2020
+  - ☑ Fix for `Add-GPOZaurrPermission`
+## 0.0.87 - 18.11.2020
+  - ☑ Improve error handling `Remove-GPOZaurrBroken`
+## 0.0.86 - 18.11.2020
+  - ☑ Improve error handling `Remove-GPOZaurrBroken`
+## 0.0.85 - 17.11.2020
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Split `NetLogonPermissions` into `NetLogonPermissions` and `NetLogonOwners`
+    - ☑ Improved type `NetLogonPermissions`
+    - ☑ Improved type `NetLogonOwners`
+  - ☑ Improves `Get-GPOZaurrFiles`
+  - ☑ Improves `Get-GPOZaurrNetLogon`
+  - ☑ Fix for `Get-GPOZaurrNetLogon`
+## 0.0.84 - 16.11.2020
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Type `NetLogonPermissions`
+  - ☑ Fix for `Get-GPOZaurrNetLogon`
+## 0.0.83 - 14.11.2020
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Fix for wrong ActionRequired count
+## 0.0.82 - 14.11.2020
+  - ☑ Added `Get-GPOZaurrPermissionIssue` to detect permission issue with no rights
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Type `GPOPermissionsRead` improved detection of problems with low permissions
+## 0.0.81 - 12.11.2020
+  - ☑ Fix for `Set-GPOZaurrOwner` in case of missing permissions to not throw errors
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Type `GPOPermissionsRead` added
+## 0.0.80 - 12.11.2020
+  - ☑ Improves `Invoke-GPOZaurr` (WIP)
+    - ☑ Type `GPOOrphans` clearer options, updated texts, split per domain
+    - ☑ Type `GPOOwners` clearer options, updated texts, split per domain
+  - ☑ Improves `Add-GPOZaurrPermission`
+    - ☑ Fixes LimitProcessing to work correctly
+    - ☑ Added `All` to process all GPOs
+  - ☑ Fixes `Remove-GPOZaurrPermission`
+  - ☑ Improves `Set-GPOZaurrOwner`
+    - ☑ Added `Force` to force `GPO Owner` to any principal (normally only Domain Admins)
+## 0.0.79 - 10.11.2020
+  - Improved `Invoke-GPOZaurr` - type `GPOOrphans`
+## 0.0.78 - 10.11.2020
+  - Improved `Remove-GPOZaurrBroken` more verbose
+  - Improved `Get-GPOZaurrBroken` more verbose
+  - Improved `Invoke-GPOZaurr` - type `GPOOrphans`
+  - Improved `Invoke-GPOZaurr` - type `GPOList` - needs more work
+  - Improved `Get-GPOZaurr` with better detection of Empty Policies (needs testing)
+## 0.0.77 - 9.11.2020
+  - Improved `Invoke-GPOZaurr` (WIP)
+## 0.0.76 - 8.11.2020
+  - Improved `Get-GPOZaurrNetLogon` to better handle errors
+## 0.0.75 - 8.11.2020
+  - Improved `Get-GPOZaurrPermissionConsistency` to stop checking consistency if path doesn't exists
+## 0.0.74 - 8.11.2020
+  - Improved `Invoke-GPOZaurr` (WIP)
+## 0.0.73 - 7.11.2020
+  - Improved `Invoke-GPOZaurr` (WIP)
+  - Improved `Get-GPOZaurr`
+## 0.0.72 - 6.11.2020
+  - Improved `Invoke-GPOZaurr` (WIP)
+## 0.0.71 - 3.11.2020
+  - Improved `Invoke-GPOZaurr` (WIP)
+## 0.0.70 - 29.10.2020
+  - Added `Get-GPOZaurrDuplicateObject`
+  - Added `Remove-GPOZaurrDuplicateObject`
+## 0.0.69 - 29.10.2020
+  - Improved `Invoke-GPOZaurr` (WIP)
+  - Improved `Get-GPOZaurrNetLogon`
+  - Improved `Get-GPOZaurrOwner`
+  - Improved `Set-GPOZaurrOwner`
+  - Added `Repair-GPOZaurrNetLogonOwner`
+  - Improved `Invoke-GPOZaurr` (WIP)
+## 0.0.68 - 28.10.2020
+  - Renamed `Show-GPOZaurr` to `Invoke-GPOZaurr`
+  - Renamed `Invoke-GPOZaurr` to `Invoke-GPOZaurrContent`
+  - Improvements to `Get-GPOZaurrPermissionConsistency` - don't check for inherited permissions if top level ones are inconsistent
+  - Improved `Invoke-GPOZaurr` (WIP)
+## 0.0.67 - 22.10.2020
+  - Improved `Show-GPOZaurr` (WIP)
+## 0.0.66 - 22.10.2020
+  - Improved `Show-GPOZaurr` (WIP)
+## 0.0.65 - 22.10.2020
+  - Improved `Show-GPOZaurr` (WIP)
+## 0.0.64 - 21.10.2020
+  - Renamed `Remove-GPOZaurrOrphaned` to `Remove-GPOZaurrBroken` keeping it as an alias
+  - Renamed `Get-GPOZaurrSysvol` to `Get-GPOZaurrBroken` keeping it as an alias
+  - Improved `Show-GPOZaurr` (WIP)
+## 0.0.63 - 19.10.2020
+  - Renamed `Invoke-GPOZaurrContent` back to `Invoke-GPOZaurr`
+  - Added `Show-GPOZaurr` (WIP)
+  - Added `OutputType`,`OutputType`,`Open`,`Online` parameters to `Invoke-GPOZaurr`
+  - Added `Get-GPOZaurrNetLogon`
+  - Improved `Get-GPOZaurrOwner`
+  - Fixes `Get-GPOZaurrSysvol`
+## 0.0.62 - 14.10.2020
+  - Renamed `Invoke-GPOZaurr` to `Invoke-GPOZaurrContent` - I want to use `Invoke-GPOZaurr` for something else
+  - Improvements to `Get-GPOZaurrPermissionConsistency` for GPOs without SYSVOL to be reported properly
+  - Added `Get-GPOZaurrPermissionRoot`
+  - Renamed `Remove-GPOZaurrOrphanedSysvolFolders` to `Remove-GPOZaurrOrphaned`
+  - Improved `Remove-GPOZaurrOrphaned` to deal with orphaned folders but also orphaned AD GPO (No sysvol data)
+  - Improved `Get-GPOZaurrSysVol` to detect orphaned SYSVOL or AD GPO objects
+  - Improved `Get-GPOZaurrSysVol` to detect permissions issue when reading AD GPO objects
+  - Added `Get-GPOZaurrPermissionRoot` to show which users/groups have control over all GPOs (allowed to create/modify)
+  - Improved `Get-GPOZaurrPermissionSummary` to include `Get-GPOZaurrPermissionRoot` custom permissions
+  - Updated `Remove-GPOZaurrPermission`
+  - Updated `Get-GpoZaurrPermission`
+  - Updated `Get-GPOZaurrFiles` to better handle access issue
+  - Reversed parameters `Get-GPOZaurrFiles` from `Limited` to `ExtendedMetaData` and fixed missing columns
+## 0.0.61 - 31.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+  - Fixes to `ConvertFrom-CSExtension`
+  - Fixes to `Find-CSExtension`
+## 0.0.59 - 26.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+## 0.0.58 - 26.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+## 0.0.57 - 26.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+## 0.0.56 - 26.08.2020
+  - Added `Get-GPOZaurrPermissionSummary`
+## 0.0.55 - 17.08.2020
+  - Improved `Get-GPOZaurrInheritance`
+## 0.0.54 - 16.08.2020
+  - Added `Invoke-GPOZaurrSupport` (WIP)
+  - Added `ConvertFrom-CSExtension`
+  - Added `Find-CSExtension`
+  - Added `Get-GPOZaurrInheritance`
+## 0.0.53 - 16.08.2020
+  - Bad release
+## 0.0.52 - 16.08.2020
+  - Bad release
+## 0.0.51 - 2.08.2020
+  - Updates to `Invoke-GPOZaurr` - still work in progress
+  - Added `Get-GPOZaurrSysvolDFSR`
+  - Added `Clear-GPOZaurrSysvolDFSR` (requires testing)
+## 0.0.50 - 29.07.2020
+  - Updates to couple of commands
+## 0.0.49 - 23.07.2020
+  - Hidden files were skipped - and people do crazy things with them
+## 0.0.48 - 21.07.2020
+  - Added `Get-GPOZaurrFilesPolicyDefinition`
+  - Updates to `Invoke-GPOZaurr` - still work in progress
+  - Updates to `Get-GPOZaurrFiles` - still work in progress
+  - Updates to `Remove-GPOZaurrOrphanedSysvolFolders` with backup and support for domains
+  - Module will now be signed
+## 0.0.47 - 29.06.2020
+  - Update to `Get-GPOZaurrAD` for better error reporting
+  - Updates to `Invoke-GPOZaurr` - still work in progress
+## 0.0.46 - 28.06.2020
+  - Additional protection for `Get-GPOZaurrAD` for CNF duplicates
+  - Update to `Save-GPOZaurrFiles`
+  - Added `Invoke-GPOZaurr` (alias: `Find-GPO`) (heavy work in progress)
+## 0.0.45 - 26.06.2020
+  - During publishing ADEssentials required functions are now merged to prevent cyclic dependency bug [Using ModuleSpec syntax in RequiredModules causes incorrect "cyclic dependency" failures](https://github.com/PowerShell/PowerShell/issues/2607)
+## 0.0.44 - 24.06.2020
+  - Improvement to `Get-GPOZaurrLinkSummary`
+## 0.0.43 - 21.06.2020
+  - Added `Get-GPOZaurrFiles` to list files on NETLOGON/SYSVOL shares with a lot of details
+## 0.0.42 - 19.06.2020
+  - Fix for `Get-GPOZaurrLink` and `SearchBase` parameter
+  - Fix for `Get-GPOZaurrLink` - canonical link Trim() throwing errors if empty
+## 0.0.41 - 18.06.2020
+  - Added paramerter `SkipDuplicates` to `Invoke-GPOZaurrPermission` which prevents applying permissions over and over again if 1 GPO is linked to a multiple OU's within another OU
+## 0.0.40 - 18.06.2020
+  - Fix for error `Get-GPOZaurrLink` - same issue as described on my [earlier blog - Get-ADObject : The server has returned the following error: invalid enumeration context.](https://evotec.xyz/get-adobject-the-server-has-returned-the-following-error-invalid-enumeration-context/).
+    - `WARNING: Get-GPOZaurrLink - Processing error The server has returned the following error: invalid enumeration context.`
+    - `WARNING: Get-GPOZaurrLink - Processing error A referral was returned from the server`
+  - Added `SkipDuplicates` for `Get-GPOZaurrLink`
+## 0.0.39 - 17.06.2020
+  - Updates to `Invoke-GPOZaurrPermission` with new parameter `LimitAdministrativeGroupsToDomain`
+    - This will get administrative based on IncludeDomains if given. It means that if GPO has Domain admins added from multiple domains it will only find one, and remove all other Domain Admins (if working with Domain Admins that is)
+## 0.0.38 - 17.06.2020
+  - Update to Get-PrivGPOZaurrLink which would cause problems to `Invoke-GPOZaurrPermission` if it would be run without Administrative permission and GPO wouldn't be accessible for that user
+## 0.0.37 - 16.06.2020
+  - Updates to `Invoke-GPOZaurrPermission` with new parameterset `Level`
+  - Updates to `Get-GPOZaurrLinkSummary`
+## 0.0.36 - 15.06.2020
+  - Initial release
@@ -1,16 +1,19 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force

-#$Output = Invoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurr.html -PassThru -Type GPOConsistency, GPOList, GPODuplicates, GPOBroken, GPOOwners, NetLogonOwners, GPOPermissionsRead, GPOPermissionsAdministrative,GPOPermissionsUnknown
+Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurr.html

 # Shows how to use exclusions (supported only in GPOBlockedInheritance)
 Invoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurr.html -Type GPOBlockedInheritance -Online -Exclusions @(
    'OU=Test,OU=ITR02,DC=ad,DC=evotec,DC=xyz'
 )

-<#
+# different approach to query multiple reports or just one
+Invoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurr.html -PassThru -Type GPOConsistency, GPOList, GPODuplicates, GPOBroken, GPOOwners, NetLogonOwners, GPOPermissionsRead, GPOPermissionsAdministrative,GPOPermissionsUnknown
+
+Invoke-GPOZaurr -Type GPOOwners -Online -FilePath $PSScriptRoot\Reports\GPOZaurr.html
+
 # Shows how to use exclusions for GPOList (different way)
 Invoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurr.html -Type GPOList -Online -Exclusions {
    Skip-GroupPolicy -Name 'de14_usr_std'
    Skip-GroupPolicy -Name 'ALL | Enable RDP' -DomaiName 'ad.evotec.xyz'
-}
-#>
+}
@@ -9,8 +9,14 @@ $GPOS = Get-GPOZaurr -ExcludeGroupPolicies {
 }
 $GPOS | Format-Table -AutoSize *

-Invoke-GPOZaurr -Type GPOList -Exclusions {
+$Output = Invoke-GPOZaurr -Type GPOList -Exclusions {
    Skip-GroupPolicy -Name 'All | Trusted Websites' -DomaiName 'ad.evotec.xyz'
    '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
+    "104da6a7-c7d2-48da-b24b-8fa584f7b0b6"
+    "{087b4f69-c541-429f-8dfd-0eb3ed133910}"
    'COMPUTERS | Enable Sets'
-}
+    '24194523-bb82-439c-a533-abf4f30fa2c4'
+    '{31b2f340-016d-11d2-945f-00c04fb984f9 } '
+} -PassThru
+
+$Output.GPOList
@@ -0,0 +1,3 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Invoke-GPOZaurr -Type GPOUpdates -Online -Verbose #-IncludeDomains 'ad.evotec.pl'
@@ -1,5 +1,9 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force

+
+$OUs = Get-GPOZaurrOrganizationalUnit
+$Ous | Format-Table
+
 Get-GPOZaurrOrganizationalUnit -Verbose -Option Unlink -Exclusions @(
   'OU=Groups,OU=Production,DC=ad,DC=evotec,DC=pl'
 ) | Format-Table
@@ -8,9 +12,6 @@ Get-GPOZaurrOrganizationalUnit -Verbose -ExcludeOrganizationalUnit @(
   '*,OU=Production,DC=ad,DC=evotec,DC=pl'
 ) | Format-Table

-
 Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @(
-    '*OU=Production,DC=ad,DC=evotec,DC=pl'
-    '*OU=Production,DC=ad,DC=evotec,DC=pl'
-    '*OU=Production,DC=ad,DC=evotec,DC=pl'
+   #'*OU=Production,DC=ad,DC=evotec,DC=pl'
 )
@@ -0,0 +1,4 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Get-GPOZaurrUpdates -DateRange Last14Days -DateProperty WhenCreated, WhenChanged -Verbose -IncludeDomains 'ad.evotec.pl' | Format-List
+Get-GPOZaurrUpdates -DateRange Last14Days -DateProperty WhenCreated -Verbose | Format-Table
@@ -6,9 +6,9 @@
    CompatiblePSEditions = @('Desktop')
    Copyright            = '(c) 2011 - 2021 Przemyslaw Klys @ Evotec. All rights reserved.'
    Description          = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
-    FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrBrokenLink', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrDuplicateObject', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOrganizationalUnit', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionAnalysis', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionIssue', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrContent', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Optimize-GPOZaurr', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrDuplicateObject', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrLinkEmptyOU', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrBrokenLink', 'Repair-GPOZaurrNetLogonOwner', 'Repair-GPOZaurrPermission', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Set-GPOZaurrStatus', 'Skip-GroupPolicy')
+    FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrBrokenLink', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrDuplicateObject', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOrganizationalUnit', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionAnalysis', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionIssue', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrUpdates', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrContent', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Optimize-GPOZaurr', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrDuplicateObject', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrLinkEmptyOU', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrBrokenLink', 'Repair-GPOZaurrNetLogonOwner', 'Repair-GPOZaurrPermission', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Set-GPOZaurrStatus', 'Skip-GroupPolicy')
    GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-    ModuleVersion        = '0.0.133'
+    ModuleVersion        = '0.0.145'
    PowerShellVersion    = '5.1'
    PrivateData          = @{
        PSData = @{
@@ -18,11 +18,11 @@
        }
    }
    RequiredModules      = @(@{
-            ModuleVersion = '0.0.210'
+            ModuleVersion = '0.0.214'
            ModuleName    = 'PSSharedGoods'
            Guid          = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe'
        }, @{
-            ModuleVersion = '0.0.130'
+            ModuleVersion = '0.0.135'
            ModuleName    = 'ADEssentials'
            Guid          = '9fc9fd61-7f11-4f4b-a527-084086f1905f'
        }, @{
@@ -4,6 +4,22 @@
        [PSCustomObject] $GPO,
        [switch] $SingleObject
    )
+    # Redirection types a stored as GUID in GPOs. This hash is used to translate into readable text.
+    $FolderID = @{
+        "{1777F761-68AD-4D8A-87BD-30B759FA33DD}" = "Favorites"
+        "{FDD39AD0-238F-46AF-ADB4-6C85480369C7}" = "Documents"
+        "{33E28130-4E1E-4676-835A-98395C3BC3BB}" = "Pictures"
+        "{4BD8D571-6D19-48D3-BE97-422220080E43}" = "Music"
+        "{18989B1D-99B5-455B-841C-AB7C74E4DDFC}" = "Videos"
+        "{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}" = "AppDataRoaming"
+        "{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}" = "Desktop"
+        "{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}" = "StartMenu"
+        "{374DE290-123F-4565-9164-39C4925E467B}" = "Downloads"
+        "{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}" = "Saved Games"
+        "{56784854-C6CB-462B-8169-88E350ACB882}" = "Contacts"
+        "{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}" = "Searches"
+        "{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}" = "Links"
+    }
    if ($SingleObject) {
        $CreateGPO = [ordered]@{
            DisplayName = $GPO.DisplayName
@@ -18,6 +34,8 @@
        [Array] $CreateGPO['Settings'] = foreach ($Folder in $GPO.DataSet) {
            foreach ($Location in $Folder.Location) {
                [PSCustomObject] @{
+                    ID                        = $Folder.ID
+                    FolderType                = $FolderID[$Folder.Id]
                    DestinationPath           = $Location.DestinationPath
                    SecuritySID               = $Location.SecurityGroup.SID.'#text'
                    SecurityName              = $Location.SecurityGroup.Name.'#text'
@@ -47,6 +65,7 @@
                    GUID                      = $GPO.GUID
                    GpoType                   = $GPO.GpoType
                    Id                        = $Folder.Id
+                    FolderType                = $FolderID[$Folder.Id]
                    DestinationPath           = $Location.DestinationPath
                    SecuritySID               = $Location.SecurityGroup.SID.'#text'
                    SecurityName              = $Location.SecurityGroup.Name.'#text'
@@ -0,0 +1,220 @@
+function Get-ADOrganizationalUnitObject {
+    <#
+    .SYNOPSIS
+    Gets number of objects in a given OU/OUs with ability to find only those being affected by GPOs.
+
+    .DESCRIPTION
+    Gets number of objects in a given OU/OUs with ability to find only those being affected by GPOs.
+
+    .PARAMETER OrganizationalUnit
+    One or more organizational units to get the number of objects in.
+
+    .PARAMETER Extended
+    Adds all objects affected for better understanding
+
+    .PARAMETER Summary
+    Returns only summary for given OU/OUs
+
+    .PARAMETER IncludeAffectedOnly
+    Ignores any object types that are not Users or Computers
+
+    .PARAMETER Forest
+    Target different Forest, by default current forest is used
+
+    .PARAMETER ExcludeDomains
+    Exclude domain from search, by default whole forest is scanned
+
+    .PARAMETER IncludeDomains
+    Include only specific domains, by default whole forest is scanned
+
+    .PARAMETER AsHashTable
+    Returns results in form of hashtable
+
+    .PARAMETER ExtendedForestInformation
+    Ability to provide Forest Information from another command to speed up processing
+
+    .EXAMPLE
+    $OUs = @(
+        'OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=US,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=Users,OU=User,OU=SE1,OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+    )
+
+    Get-ADOrganizationalUnitObject -OrganizationalUnit $OUs -IncludeAffectedOnly | Format-Table
+
+    .EXAMPLE
+    $OUs = @(
+        'OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=US,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=Users,OU=User,OU=SE1,OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+    )
+
+    Get-ADOrganizationalUnitObject -OrganizationalUnit $OUs | Format-Table
+
+    .EXAMPLE
+    $OUs = @(
+        #'OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        #'OU=US,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=Users,OU=User,OU=SE1,OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+    )
+
+    Get-ADOrganizationalUnitObject -OrganizationalUnit $OUs -Summary -IncludeAffectedOnly | Format-List
+
+    .NOTES
+    General notes
+    #>
+    [cmdletBinding()]
+    param(
+        [parameter(Mandatory)][Array] $OrganizationalUnit,
+        [switch] $Extended,
+        [switch] $Summary,
+        [switch] $IncludeAffectedOnly,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [switch] $AsHashTable,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+
+    $CachedOu = [ordered] @{}
+    $ListOU = @(
+        foreach ($OU in $OrganizationalUnit) {
+            if ($OU.DistinguishedName) {
+                $OU.DistinguishedName
+            } else {
+                $OU
+            }
+        }
+    )
+    $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    $OUCache = Get-GPOBlockedInheritance -AsHashTable -ExtendedForestInformation $ForestInformation
+
+    if ($Summary) {
+        $SummaryData = [ordered] @{
+            ObjectsClasses                 = [ordered] @{}
+            ObjectsTotalCount              = 0
+            ObjectsBlockedInheritanceCount = 0
+            ObjectsTotal                   = [ordered] @{}
+            ObjectsBlockedInheritance      = [ordered] @{}
+            DistinguishedName              = [System.Collections.Generic.List[string]]::new()
+        }
+    }
+
+    foreach ($OU in $ListOU) {
+        $Domain = ConvertFrom-DistinguishedName -ToDomainCN -DistinguishedName $OU
+        $ObjectsInOu = Get-ADObject -LDAPFilter "(|(ObjectClass=user)(ObjectClass=contact)(ObjectClass=computer)(ObjectClass=group)(objectClass=inetOrgPerson))" -SearchBase $OU -Server $ForestInformation['QueryServers'][$Domain]['hostname'][0]
+        #Write-Verbose "Get-GPOZaurrOrganizationalUnit - Processing $($Domain) / $($TOPOU.DistinguishedName) [$CountTop/$($TopOrganizationalUnits.Count)], found $($ObjectsInOu.Count) objects to process."
+        if (-not $CachedOu[$OU]) {
+            $CachedOu[$OU] = [ordered] @{
+                DistinguishedName                   = $OU
+                Domain                              = $Domain
+                'ObjectsClasses'                    = [ordered] @{} # only direct, indirect, but not with blocked inheritance
+                'ObjectsDirectCount'                = 0
+                'ObjectsIndirectCount'              = 0
+                'ObjectsTotalCount'                 = 0
+                'ObjectsTotalIncludingBlockedCount' = 0
+                'ObjectsBlockedInheritanceCount'    = 0
+            }
+            if ($Extended) {
+                $CachedOu[$OU]['ObjectsDirect'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsIndirect'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsTotal'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsTotalIncludingBlocked'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsBlockedInheritance'] = [ordered] @{}
+            }
+        }
+        foreach ($Object in $ObjectsInOu) {
+            if ($IncludeAffectedOnly) {
+                if ($Object.ObjectClass -notin 'User', 'computer') {
+                    continue
+                }
+            }
+
+            $Place = ConvertFrom-DistinguishedName -ToOrganizationalUnit -DistinguishedName $Object.DistinguishedName
+            if (-not $Place) {
+                # Write-Verbose -Message "Get-OrganizationalUnitObject - Processing object in container/root $($Object.DistinguishedName)"
+            }
+
+            if ($Place -and $OUCache[$Place]) {
+                $BlockedInheritance = $OUCache[$Place].BlockedInheritance
+            } else {
+                $BlockedInheritance = $false
+            }
+
+            if ($Summary) {
+                $SummaryData['DistinguishedName'].Add($OU)
+                $SummaryData['ObjectsClasses'][$Object.ObjectClass] = ''
+                if (-not $Place -or $Place -eq $OU) {
+                    $SummaryData['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                } else {
+                    if ($BlockedInheritance) {
+                        $SummaryData['ObjectsBlockedInheritance'][$Object.DistinguishedName] = $Object
+                    } else {
+                        $SummaryData['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                    }
+                }
+            } else {
+                # This is standard way of finding OU's
+                if (-not $Place -or $Place -eq $OU) {
+                    $CachedOu[$OU]['ObjectsDirectCount']++
+                    $CachedOu[$OU]['ObjectsTotalCount']++
+                    # using hashtable to avoid duplicates
+                    $CachedOu[$OU]['ObjectsClasses'][$Object.ObjectClass] = ''
+                    # adding all objects to the list, excluding blocked inheritance
+                    if ($Extended) {
+                        $CachedOu[$OU]['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                        $CachedOu[$OU]['ObjectsDirect'][$Object.DistinguishedName] = $Object
+                    }
+                } else {
+                    if ($BlockedInheritance) {
+                        # We only check for blocked inheritance if the object is not in the same OU
+                        $CachedOu[$OU]['ObjectsBlockedInheritanceCount']++
+                        if ($Extended) {
+                            $CachedOu[$OU]['ObjectsBlockedInheritance'][$Object.DistinguishedName] = $Object
+                        }
+                    } else {
+                        $CachedOu[$OU]['ObjectsIndirectCount']++
+                        $CachedOu[$OU]['ObjectsTotalCount']++
+
+                        # using hashtable to avoid duplicates
+                        $CachedOu[$OU]['ObjectsClasses'][$Object.ObjectClass] = ''
+                        # adding all objects to the list excluding blocked inheritance
+                        if ($Extended) {
+                            $CachedOu[$OU]['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                            $CachedOu[$OU]['ObjectsIndirect'][$Object.DistinguishedName] = $Object
+                        }
+                    }
+                }
+                $CachedOu[$OU]['ObjectsTotalIncludingBlockedCount']++
+                if ($Extended) {
+                    $CachedOu[$OU]['ObjectsTotalIncludingBlocked'][$Object.DistinguishedName] = $Object
+                }
+            }
+        }
+
+    }
+    if ($Summary) {
+        foreach ($ObjectDistinguishedName in [string[]] $SummaryData['ObjectsBlockedInheritance'].Keys) {
+            if ($SummaryData['ObjectsTotal'][$ObjectDistinguishedName]) {
+                $SummaryData['ObjectsBlockedInheritance'].Remove($ObjectDistinguishedName)
+            }
+        }
+        $SummaryData['ObjectsTotalCount'] = $SummaryData['ObjectsTotal'].Count
+        $SummaryData['ObjectsBlockedInheritanceCount'] = $SummaryData['ObjectsBlockedInheritance'].Count
+        if (-not $Extended) {
+            $SummaryData.Remove('ObjectsTotal')
+            $SummaryData.Remove('ObjectsBlockedInheritance')
+        }
+        [PSCustomObject] $SummaryData
+    } else {
+        if ($AsHashTable) {
+            $CachedOu
+        } else {
+            $CachedOu.Values | ForEach-Object { [PSCustomObject] $_ }
+        }
+    }
+}
@@ -0,0 +1,103 @@
+function Get-ChoosenDates {
+    [CmdletBinding()]
+    param(
+        [ValidateSet('Everything', 'PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last21Days', 'Last30Days' , 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange
+    )
+    # Report Per Hour
+    if ($DateRange -eq 'PastHour') {
+        $DatesPastHour = Find-DatesPastHour
+        if ($DatesPastHour) {
+            $DatesPastHour
+        }
+    }
+    if ($DateRange -eq 'CurrentHour') {
+        $DatesCurrentHour = Find-DatesCurrentHour
+        if ($DatesCurrentHour) {
+            $DatesCurrentHour
+        }
+    }
+    # Report Per Day
+    if ($DateRange -eq 'PastDay') {
+        $DatesDayPrevious = Find-DatesDayPrevious
+        if ($DatesDayPrevious) {
+            $DatesDayPrevious
+        }
+    }
+    if ($DateRange -eq 'CurrentDay') {
+        $DatesDayToday = Find-DatesDayToday
+        if ($DatesDayToday) {
+            $DatesDayToday
+        }
+    }
+    # Report Per Month
+    if ($DateRange -eq 'PastMonth') {
+        # Find-DatesMonthPast runs only on 1st of the month unless -Force is used
+        $DatesMonthPrevious = Find-DatesMonthPast -Force $true
+        if ($DatesMonthPrevious) {
+            $DatesMonthPrevious
+        }
+    }
+    if ($DateRange -eq 'CurrentMonth') {
+        $DatesMonthCurrent = Find-DatesMonthCurrent
+        if ($DatesMonthCurrent) {
+            $DatesMonthCurrent
+        }
+    }
+    # Report Per Quarter
+    if ($DateRange -eq 'PastQuarter') {
+        # Find-DatesMonthPast runs only on 1st of the quarter unless -Force is used
+        $DatesQuarterLast = Find-DatesQuarterLast -Force $true
+        if ($DatesQuarterLast) {
+            $DatesQuarterLast
+        }
+    }
+    if ($DateRange -eq 'CurrentQuarter') {
+        $DatesQuarterCurrent = Find-DatesQuarterCurrent
+        if ($DatesQuarterCurrent) {
+            $DatesQuarterCurrent
+        }
+    }
+    if ($DateRange -eq 'Everything') {
+        $DatesEverything = @{
+            DateFrom = Get-Date -Year 1900 -Month 1 -Day 1
+            DateTo   = Get-Date -Year 2300 -Month 1 -Day 1
+        }
+        $DatesEverything
+    }
+    if ($DateRange -eq 'Last1days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 1
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last3days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 3
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last7days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 7
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last14days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 14
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last21days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 21
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last30Days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 30
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+}
@@ -0,0 +1,30 @@
+function Get-GPOBlockedInheritance {
+    [cmdletBinding()]
+    param(
+        [string] $Filter = '*',
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [switch] $AsHashTable,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    $OUCache = [ordered] @{}
+
+    $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+
+    foreach ($Domain in $ForestInformation.Domains) {
+        $OrganizationalUnits = Get-ADOrganizationalUnit -Filter $Filter -Properties gpOptions, canonicalName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0] #-SearchScope Subtree
+        foreach ($OU in $OrganizationalUnits) {
+            $OUCache[$OU.DistinguishedName] = [PSCustomObject] @{
+                DistinguishedName  = $OU.DistinguishedName
+                BlockedInheritance = if ($OU.gpOptions -eq 1) { $true } else { $false } # blocked inheritance
+            }
+        }
+    }
+    if ($AsHashTable) {
+        $OUCache
+    } else {
+        $OUCache.Values
+    }
+}
@@ -31,13 +31,13 @@ function Get-GPOZaurrLinkInheritance {
    Parameter description

    .PARAMETER Forest
-    Parameter description
+    Target different Forest, by default current forest is used

    .PARAMETER ExcludeDomains
-    Parameter description
+    Exclude domain from search, by default whole forest is scanned

    .PARAMETER IncludeDomains
-    Parameter description
+    Include only specific domains, by default whole forest is scanned

    .PARAMETER ExtendedForestInformation
    Parameter description
@@ -123,9 +123,13 @@ function Get-GPOZaurrLinkInheritance {
            # While initially we used $ForestInformation.Domains but the thing is GPOs can be linked to other domains so we need to get them all so we can use cache of it later on even if we're processing just one domain
            # That's why we use $ForestInformation.Forest.Domains instead
            foreach ($Domain in $ForestInformation.Forest.Domains) {
-                $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
-                Get-GPO -All -DomainName $Domain -Server $QueryServer | ForEach-Object {
-                    $GPOCache["$Domain$($_.ID.Guid)"] = $_
+                if ($ForestInformation['QueryServers'][$Domain]) {
+                    $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                    Get-GPO -All -DomainName $Domain -Server $QueryServer | ForEach-Object {
+                        $GPOCache["$Domain$($_.ID.Guid)"] = $_
+                    }
+                } else {
+                    Write-Warning -Message "Get-GPOZaurrLinkInheritance - Couldn't get query server for $Domain. Skipped."
                }
            }
        }
@@ -230,9 +230,18 @@
    # Mark GPO as excluded
    $Exclude = $false
    if ($ExcludeGroupPolicies) {
+        $GUID = $XMLContent.GPO.Identifier.Identifier.'#text'
+        $GUIDWithOutBrackets = $GUID.Replace('{', '').Replace('}', '')
        $PolicyWithDomain = -join ($XMLContent.GPO.Identifier.Domain.'#text', $XMLContent.GPO.Name)
-        $PolicyWithDomainID = -join ($XMLContent.GPO.Identifier.Domain.'#text', $XMLContent.GPO.Identifier.Identifier.'#text')
-        if ($ExcludeGroupPolicies[$XMLContent.GPO.Name] -or $ExcludeGroupPolicies[$PolicyWithDomain] -or $ExcludeGroupPolicies[$PolicyWithDomainID] -or $ExcludeGroupPolicies[$XMLContent.GPO.Identifier.Identifier.'#text']) {
+        $PolicyWithDomainID = -join ($XMLContent.GPO.Identifier.Domain.'#text', $GUID)
+        $PolicyWithDomainIDWithoutBrackets = -join ($XMLContent.GPO.Identifier.Domain.'#text', $GUIDWithOutBrackets)
+        if ($ExcludeGroupPolicies[$XMLContent.GPO.Name] -or
+            $ExcludeGroupPolicies[$PolicyWithDomain] -or
+            $ExcludeGroupPolicies[$PolicyWithDomainID] -or
+            $ExcludeGroupPolicies[$GUID] -or
+            $ExcludeGroupPolicies[$GUIDWithOutBrackets] -or
+            $ExcludeGroupPolicies[$PolicyWithDomainIDWithoutBrackets]
+        ) {
            $Exclude = $true
        }
    }
@@ -116,9 +116,9 @@
            New-HTMLText -Text @(
                "While preparing this report following exclusions were defined. "
                "Please make sure that when you execute your steps to include those exclusions to prevent any issues. "
-            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None
+            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None -LineBreak

-            New-HTMLText -Text "Code to use: " -FontSize 10pt -FontWeight bold
+            New-HTMLText -Text "Code to use for exclusions: " -FontSize 10pt -FontWeight bold -LineBreak

            $Code = New-GPOZaurrExclusions -ExclusionsArray $Script:Reporting['GPOBlockedInheritance']['Exclusions']

@@ -0,0 +1,82 @@
+$GPOZaurrGPOUpdates = [ordered] @{
+    Name       = 'Group Policies added last 7 days'
+    Enabled    = $false
+    Action     = $null
+    Data       = $null
+    Execute    = {
+        Get-GPOZaurrUpdates -DateRange Last14Days -DateProperty WhenCreated -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains
+    }
+    Processing = {
+        foreach ($GPO in $Script:Reporting['GPOUpdates']['Data']) {
+
+            $Script:Reporting['GPOUpdates']['Variables']['GPOTotal']++
+
+            if ($GPO.LinksEnabledCount -eq 0) {
+                $Script:Reporting['GPOUpdates']['Variables']['GPOWithoutEnabledLinks']++
+            } else {
+                $Script:Reporting['GPOUpdates']['Variables']['GPOWithEnabledLinks']++
+            }
+            if ($GPO.AffectedCount -eq 0) {
+                $Script:Reporting['GPOUpdates']['Variables']['GPOWithoutAffectedObjects']++
+            }
+        }
+    }
+    Variables  = @{
+        GPOTotal                  = 0
+        GPOWithoutEnabledLinks    = 0
+        GPOWithEnabledLinks       = 0
+        GPOWithoutAffectedObjects = 0
+    }
+    Overview   = {
+
+    }
+    Summary    = {
+        New-HTMLText -TextBlock {
+            "Group Policies are important part of Active Directory. Knowing when those are created and what they affect is important part of admins work."
+            "This report shows which GPOs were created in last 7 days and how many objects those are affecting."
+        } -FontSize 10pt -LineBreak
+        New-HTMLList -Type Unordered {
+            New-HTMLListItem -Text 'Group Policies added in last 7 days: ', $Script:Reporting['GPOUpdates']['Variables']['GPOTotal'] -FontWeight normal, bold
+            New-HTMLListItem -Text 'Group Policies without enabled links: ', $Script:Reporting['GPOUpdates']['Variables']['GPOWithoutEnabledLinks'] -FontWeight normal, bold
+            New-HTMLListItem -Text 'Group Policies with enabled links: ', $Script:Reporting['GPOUpdates']['Variables']['GPOWithEnabledLinks'] -FontWeight normal, bold
+            New-HTMLListItem -Text 'Group Policies without affected objects: ', $Script:Reporting['GPOUpdates']['Variables']['GPOWithoutAffectedObjects'] -FontWeight normal, bold
+
+        } -FontSize 10pt
+        New-HTMLText -TextBlock {
+            "If you notice any GPO that is not working or against best practices please reach out to your collegues to confirm whether this is as expected."
+        } -FontSize 10pt -LineBreak
+    }
+    Solution   = {
+        New-HTMLSection -Invisible {
+            New-HTMLPanel {
+                & $Script:GPOConfiguration['GPOUpdates']['Summary']
+            }
+            New-HTMLPanel {
+                New-HTMLChart {
+                    New-ChartBarOptions -Type barStacked
+                    New-ChartLegend -Name 'No enabled links', 'Enabled links' -Color Crimson, MediumOrchid
+                    New-ChartBar -Name 'Links enabled' -Value $Script:Reporting['GPOUpdates']['Variables']['GPOWithoutEnabledLinks'], $Script:Reporting['GPOUpdates']['Variables']['GPOWithEnabledLinks']
+                } -Title 'Group Policies created last 7 days' -TitleAlignment center
+            }
+        }
+        New-HTMLSection -Name 'Group Policies added in last 7 days' {
+            New-HTMLTable -DataTable $Script:Reporting['GPOUpdates']['Data'] -Filtering {
+                #New-HTMLTableCondition -Name 'LinksCount' -Value 0 -BackgroundColor Salmon -ComparisonType number
+                #New-HTMLTableCondition -Name 'LinksEnabledCount' -Value 0 -BackgroundColor Salmon -ComparisonType number
+                New-HTMLTableCondition -Name 'AffectedCount' -Value 0 -BackgroundColor Salmon -ComparisonType number -FailBackgroundColor Goldenrod
+                New-HTMLTableConditionGroup {
+                    New-HTMLTableCondition -Name 'LinksCount' -Value 0 -ComparisonType number
+                    New-HTMLTableCondition -Name 'LinksEnabledCount' -Value 0 -ComparisonType number
+                } -BackgroundColor Salmon -FailBackgroundColor Goldenrod -Logic OR -HighlightHeaders 'LinksCount', 'LinksEnabledCount', 'DisplayName', 'DomainName'
+            }
+        }
+        if ($Script:Reporting['GPOUpdates']['WarningsAndErrors']) {
+            New-HTMLSection -Name 'Warnings & Errors to Review' {
+                New-HTMLTable -DataTable $Script:Reporting['GPOUpdates']['WarningsAndErrors'] -Filtering {
+                    New-HTMLTableCondition -Name 'Type' -Value 'Warning' -BackgroundColor SandyBrown -ComparisonType string -Row
+                    New-HTMLTableCondition -Name 'Type' -Value 'Error' -BackgroundColor Salmon -ComparisonType string -Row
+                }
+            }
+        }
+    }
+}
@@ -51,9 +51,17 @@
                # Skip GPOS that are younger than 30 days
                $Script:Reporting['GPOList']['Variables']['GPOSkip']++
            }
-            if (($GPO.Enabled -eq $false -or $GPO.Empty -eq $true -or $GPO.Linked -eq $false -or $GPO.ApplyPermission -eq $false) -and $GPO.Days -le $Script:Reporting['GPOList']['Variables']['GPOOlderThan']) {
+            if ($GPO.Exclude -eq $true) {
+                # Skip GPOS that are excluded
+                $Script:Reporting['GPOList']['Variables']['GPOSkipExcluded']++
+            }
+            if (($GPO.Enabled -eq $false -or $GPO.Empty -eq $true -or $GPO.Linked -eq $false -or $GPO.ApplyPermission -eq $false) -and $GPO.Exclude -eq $true) {
+                $Script:Reporting['GPOList']['Variables']['GPONotValidButExcluded']++
+                $Script:Reporting['GPOList']['Variables']['GPONotValidButSkippedOrExcluded']++
+            } elseif (($GPO.Enabled -eq $false -or $GPO.Empty -eq $true -or $GPO.Linked -eq $false -or $GPO.ApplyPermission -eq $false) -and $GPO.Days -le $Script:Reporting['GPOList']['Variables']['GPOOlderThan']) {
                # Skip GPOS that are younger than 30 days
                $Script:Reporting['GPOList']['Variables']['GPONotValidButSkip']++
+                $Script:Reporting['GPOList']['Variables']['GPONotValidButSkippedOrExcluded']++
            }
            if (($GPO.Enabled -eq $false -or $GPO.Empty -eq $true -or $GPO.Linked -eq $false -or $GPO.ApplyPermission -eq $false) -and $GPO.Days) {
                $Script:Reporting['GPOList']['Variables']['GPONotValid']++
@@ -141,52 +149,55 @@
            }
        }
        $Script:Reporting['GPOList']['Variables']['GPOTotal'] = $Script:Reporting['GPOList']['Data'].Count
-        if ($Script:Reporting['GPOList']['Variables']['GPONotValid'] -gt 0 -and $Script:Reporting['GPOList']['Variables']['GPONotValidButSkip'] -ne $Script:Reporting['GPOList']['Variables']['GPONotValid']) {
+        if ($Script:Reporting['GPOList']['Variables']['GPONotValid'] -gt 0 -and $Script:Reporting['GPOList']['Variables']['GPONotValidButSkippedOrExcluded'] -ne $Script:Reporting['GPOList']['Variables']['GPONotValid']) {
            $Script:Reporting['GPOList']['ActionRequired'] = $true
        } else {
            $Script:Reporting['GPOList']['ActionRequired'] = $false
        }
    }
    Variables  = @{
-        GPOOlderThan                   = 30
-        GPONotValidPerDomain           = $null
-        GPOValidPerDomain              = $null
-        GPONotOptimizedPerDomain       = $null
-        GPOOptimizedPerDomain          = $null
-        GPOProblemPerDomain            = $null
-        GPONoProblemPerDomain          = $null
-        GPOApplyPermissionYesPerDomain = $null
-        GPOApplyPermissionNoPerDomain  = $null
-        GPOWithProblems                = 0
-        ComputerOptimizedYes           = 0
-        ComputerOptimizedNo            = 0
-        ComputerProblemYes             = 0
-        ComputerProblemNo              = 0
-        UserOptimizedYes               = 0
-        UserOptimizedNo                = 0
-        UserProblemYes                 = 0
-        UserProblemNo                  = 0
-        GPOOptimized                   = 0
-        GPONotOptimized                = 0
-        GPOProblem                     = 0
-        GPONoProblem                   = 0
-        GPONotLinked                   = 0
-        GPOLinked                      = 0
-        GPOEmpty                       = 0
-        GPONotEmpty                    = 0
-        GPOEmptyAndUnlinked            = 0
-        GPOEmptyOrUnlinked             = 0
-        GPOLinkedButEmpty              = 0
-        GPOEnabled                     = 0
-        GPODisabled                    = 0
-        GPOSkip                        = 0
-        GPOValid                       = 0
-        GPONotValid                    = 0
-        GPONotValidButSkip             = 0
-        GPOLinkedButLinkDisabled       = 0
-        GPOTotal                       = 0
-        ApplyPermissionYes             = 0
-        ApplyPermissionNo              = 0
+        GPOOlderThan                    = 30
+        GPONotValidPerDomain            = $null
+        GPOValidPerDomain               = $null
+        GPONotOptimizedPerDomain        = $null
+        GPOOptimizedPerDomain           = $null
+        GPOProblemPerDomain             = $null
+        GPONoProblemPerDomain           = $null
+        GPOApplyPermissionYesPerDomain  = $null
+        GPOApplyPermissionNoPerDomain   = $null
+        GPOWithProblems                 = 0
+        ComputerOptimizedYes            = 0
+        ComputerOptimizedNo             = 0
+        ComputerProblemYes              = 0
+        ComputerProblemNo               = 0
+        UserOptimizedYes                = 0
+        UserOptimizedNo                 = 0
+        UserProblemYes                  = 0
+        UserProblemNo                   = 0
+        GPOOptimized                    = 0
+        GPONotOptimized                 = 0
+        GPOProblem                      = 0
+        GPONoProblem                    = 0
+        GPONotLinked                    = 0
+        GPOLinked                       = 0
+        GPOEmpty                        = 0
+        GPONotEmpty                     = 0
+        GPOEmptyAndUnlinked             = 0
+        GPOEmptyOrUnlinked              = 0
+        GPOLinkedButEmpty               = 0
+        GPOEnabled                      = 0
+        GPODisabled                     = 0
+        GPOSkip                         = 0
+        GPOSkipExcluded                 = 0
+        GPOValid                        = 0
+        GPONotValid                     = 0
+        GPONotValidButSkip              = 0
+        GPONotValidButExcluded          = 0
+        GPONotValidButSkippedOrExcluded = 0
+        GPOLinkedButLinkDisabled        = 0
+        GPOTotal                        = 0
+        ApplyPermissionYes              = 0
+        ApplyPermissionNo               = 0
    }
    Overview   = {

@@ -202,6 +213,7 @@
        New-HTMLList -Type Unordered {
            New-HTMLListItem -Text 'Group Policies total: ', $Script:Reporting['GPOList']['Variables']['GPOTotal'] -FontWeight normal, bold
            New-HTMLListItem -Text "Group Policies valid: ", $Script:Reporting['GPOList']['Variables']['GPOValid'] -FontWeight normal, bold
+            New-HTMLListItem -Text "Group Policies exclusions defined: ", $Script:Reporting['GPOList']['Variables']['GPOSkipExcluded'] -FontWeight normal, bold -Color None, DeepSkyBlue
            New-HTMLListItem -Text "Group Policies ", "NOT", " valid: ", $Script:Reporting['GPOList']['Variables']['GPONotValid'] -FontWeight normal, bold, normal, bold {
                New-HTMLList -Type Unordered {
                    New-HTMLListItem -Text 'Group Policies that are unlinked (are not doing anything currently): ', $Script:Reporting['GPOList']['Variables']['GPONotLinked'] -FontWeight normal, bold
@@ -213,7 +225,10 @@
                }
            } -Color Black, Red, Black, Red, Black
            New-HTMLListItem -Text @(
-                "Group Policies ", "NOT", " valid, to skip: ", $Script:Reporting['GPOList']['Variables']['GPONotValidButSkip'], " (modified less than $($Script:Reporting['GPOList']['Variables']['GPOOlderThan']) days ago)"
+                "Group Policies ", "NOT", " valid, to skip (because of age): ", $Script:Reporting['GPOList']['Variables']['GPONotValidButSkip'], " (modified less than $($Script:Reporting['GPOList']['Variables']['GPOOlderThan']) days ago)"
+            ) -FontWeight 'normal', 'bold', 'normal', 'bold', 'normal' -Color 'Black', 'Red', 'Black', 'Red', 'Black'
+            New-HTMLListItem -Text @(
+                "Group Policies ", "NOT", " valid, to skip (because of exclusions): ", $Script:Reporting['GPOList']['Variables']['GPONotValidButExcluded']
            ) -FontWeight 'normal', 'bold', 'normal', 'bold', 'normal' -Color 'Black', 'Red', 'Black', 'Red', 'Black'
            New-HTMLListItem -Text "Group Policies recently modified: ", $Script:Reporting['GPOList']['Variables']['GPOSkip'], " (modified less than $($Script:Reporting['GPOList']['Variables']['GPOOlderThan']) days ago)" -FontWeight normal, bold
        } -FontSize 10pt
@@ -304,9 +319,9 @@
            New-HTMLText -Text @(
                "While preparing this report following exclusions were defined. "
                "Please make sure that when you execute your steps to include those exclusions to prevent any issues. "
-            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None
+            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None -LineBreak

-            New-HTMLText -Text "Code to use: " -FontSize 10pt -FontWeight bold
+            New-HTMLText -Text "Code to use for exclusions: " -FontSize 10pt -FontWeight bold -LineBreak

            $Code = New-GPOZaurrExclusions -ExclusionsArray $Script:Reporting['GPOList']['Exclusions']

@@ -21,7 +21,7 @@
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFixPerDomain'][$OU.DomainName] = 0
            }
            if ($OU.Status -contains 'Unlink GPO' -and $OU.Status -contains 'Delete OU') {
-                $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPODeleteOU']++
+                $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPOEmpty']++
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFix']++
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFixPerDomain'][$OU.DomainName]++
            } elseif ($OU.Status -contains 'Unlink GPO') {
@@ -30,8 +30,8 @@
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFixPerDomain'][$OU.DomainName]++
            } elseif ($OU.Status -contains 'Delete OU') {
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['DeleteOU']++
-                $Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFix']++
-                $Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFixPerDomain'][$OU.DomainName]++
+                #$Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFix']++
+                #$Script:Reporting['GPOOrganizationalUnit']['Variables']['WillFixPerDomain'][$OU.DomainName]++
            } elseif ($OU.Status -contains 'Excluded') {
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['Excluded']++
                $Script:Reporting['GPOOrganizationalUnit']['Variables']['ExcludedOU'].Add($OU.Organizationalunit)
@@ -46,15 +46,15 @@
        }
    }
    Variables      = @{
-        TotalOU           = 0
-        UnlinkGPO         = 0
-        UnlinkGPODeleteOU = 0
-        DeleteOU          = 0
-        Legitimate        = 0
-        Excluded          = 0
-        ExcludedOU        = [System.Collections.Generic.List[string]]::new()
-        WillFix           = 0
-        WillFixPerDomain  = $null
+        TotalOU          = 0
+        UnlinkGPO        = 0
+        UnlinkGPOEmpty   = 0
+        DeleteOU         = 0
+        Legitimate       = 0
+        Excluded         = 0
+        ExcludedOU       = [System.Collections.Generic.List[string]]::new()
+        WillFix          = 0
+        WillFixPerDomain = $null
    }
    Overview       = {

@@ -69,8 +69,8 @@
        New-HTMLText -FontSize 10pt -Text "Following can happen: " -FontWeight bold
        New-HTMLList -Type Unordered {
            New-HTMLListItem -Text 'Organizational Units that can have Group Policies unlinked (objects exists): ', $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPO'] -FontWeight normal, bold
-            New-HTMLListItem -Text 'Organizational Units that can have Group Policies unlinked and OU removed (be careful!) (no objects): ', $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPODeleteOU'] -FontWeight normal, bold
-            New-HTMLListItem -Text "Organizational Units that can be deleted (no objects/no gpos): ", $Script:Reporting['GPOOrganizationalUnit']['Variables']['DeleteOU'] -FontWeight normal, bold
+            New-HTMLListItem -Text 'Organizational Units that can have Group Policies unlinked (no applicable objects): ', $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPOEmpty'] -FontWeight normal, bold
+            New-HTMLListItem -Text "Organizational Units that can be deleted (no objects/no gpos) - ", "optional", ": ", $Script:Reporting['GPOOrganizationalUnit']['Variables']['DeleteOU'] -FontWeight normal, bold, normal, bold -Color None, red, None, None
        } -FontSize 10pt
        New-HTMLText -Text 'Following domains require actions (permissions required):' -FontSize 10pt -FontWeight bold
        New-HTMLList -Type Unordered {
@@ -105,9 +105,9 @@
            New-HTMLText -Text @(
                "While preparing this report following exclusions were defined. "
                "Please make sure that when you execute your steps to include those exclusions to prevent any issues. "
-            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None
+            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None -LineBreak

-            New-HTMLText -Text "Code to use: " -FontSize 10pt -FontWeight bold
+            New-HTMLText -Text "Code to use for exclusions: " -FontSize 10pt -FontWeight bold -LineBreak

            $Code = New-GPOZaurrExclusions -ExclusionsArray $Script:Reporting['GPOOrganizationalUnit']['Exclusions']

@@ -126,7 +126,7 @@
                    New-ChartBarOptions -Type bar -Distributed
                    New-ChartAxisY -LabelMaxWidth 200 -LabelAlign left -Show
                    New-ChartBar -Name "Unlink GPO ($($Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPO']))" -Value $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPO']
-                    New-ChartBar -Name "Unlink GPO Delete OU ($($Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPODeleteOU']))" -Value $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPODeleteOU']
+                    New-ChartBar -Name "Unlink GPO Delete OU ($($Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPOEmpty']))" -Value $Script:Reporting['GPOOrganizationalUnit']['Variables']['UnlinkGPOEmpty']
                    New-ChartBar -Name "Delete OU ($($Script:Reporting['GPOOrganizationalUnit']['Variables']['DeleteOU']))" -Value $Script:Reporting['GPOOrganizationalUnit']['Variables']['DeleteOU']
                } -Title 'Organizational Units' -TitleAlignment center
            }
@@ -146,9 +146,9 @@
            New-HTMLText -Text @(
                "While preparing this report following exclusions were defined. "
                "Please make sure that when you execute your steps to include those exclusions to prevent any issues. "
-            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None
+            ) -FontSize 10pt -FontWeight bold, normal -Color Red, None -LineBreak

-            New-HTMLText -Text "Code to use: " -FontSize 10pt -FontWeight bold
+            New-HTMLText -Text "Code to use for exclusions: " -FontSize 10pt -FontWeight bold -LineBreak

            $Code = New-GPOZaurrExclusions -ExclusionsArray $Script:Reporting['GPOOwners']['Exclusions']

@@ -16,6 +16,7 @@
    GPOFiles                     = $GPOZaurrFiles
    GPOBlockedInheritance        = $GPOZaurrBlockedInheritance
    GPOAnalysis                  = $GPOZaurrAnalysis
+    GPOUpdates                   = $GPOZaurrGPOUpdates
    NetLogonOwners               = $GPOZaurrNetLogonOwners
    NetLogonPermissions          = $GPOZaurrNetLogonPermissions
    SysVolLegacyFiles            = $GPOZaurrSysVolLegacyFiles
@@ -10,6 +10,11 @@
        [alias('ForestName')][string] $Forest,
        [string[]] $ExcludeDomains,
        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+
+        [DateTime] $DateFrom,
+        [DateTime] $DateTo,
+        [ValidateSet('PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last21Days', 'Last30Days', 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange,
+        [ValidateSet('WhenCreated', 'WhenChanged')][string[]] $DateProperty = 'WhenCreated',
        [System.Collections.IDictionary] $ExtendedForestInformation
    )
    Begin {
@@ -48,7 +53,39 @@
                    Server = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
                }
            }
-            Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName | ForEach-Object -Process {
+            # allows to only get GPOs from a specific date range
+            if ($PSBoundParameters.ContainsKey('DateRange')) {
+                $Dates = Get-ChoosenDates -DateRange $DateRange
+                $DateFrom = $($Dates.DateFrom)
+                $DateTo = $($Dates.DateTo)
+
+                if ($DateProperty -contains 'WhenChanged' -and $DateProperty -contains 'WhenCreated') {
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ((WhenChanged -ge $DateFrom -and WhenChanged -le $DateTo) -or (WhenCreated -ge $DateFrom -and WhenCreated -le $DateTo))')
+                } elseif ($DateProperty -eq 'WhenChanged' -or $DateProperty -eq 'WhenCreated') {
+                    $Property = $DateProperty[0]
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ($Property -ge $DateFrom -and $Property -le $DateTo)')
+                } else {
+                    Write-Warning -Message "Get-GPOZaurrAD - DateProperty parameter is empty. Provide name and try again."
+                    continue
+                }
+            } elseif ($PSBoundParameters.ContainsKey('DateFrom') -and $PSBoundParameters.ContainsKey('DateTo')) {
+                # already set $DateFrom,DateTo
+                #$Splat['Filter'] = -join ($Splat['Filter'], '-and ($DateProperty -ge $DateFrom -and $DateProperty -le $DateTo)')
+                if ($DateProperty -contains 'WhenChanged' -and $DateProperty -contains 'WhenCreated') {
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ((WhenChanged -ge $DateFrom -and WhenChanged -le $DateTo) -or (WhenCreated -ge $DateFrom -and WhenCreated -le $DateTo))')
+                } elseif ($DateProperty -eq 'WhenChanged' -or $DateProperty -eq 'WhenCreated') {
+                    $Property = $DateProperty[0]
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ($Property -ge $DateFrom -and $Property -le $DateTo)')
+                } else {
+                    Write-Warning -Message "Get-GPOZaurrAD - DateProperty parameter is empty. Provide name and try again."
+                    continue
+                }
+            } else {
+                # not needed
+            }
+
+            Write-Verbose -Message "Get-GPOZaurrAD - Searching domain $Domain with filter $($Splat['Filter'])"
+            Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, ntSecurityDescriptor, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName | ForEach-Object -Process {
                $DomainCN = ConvertFrom-DistinguishedName -DistinguishedName $_.DistinguishedName -ToDomainCN
                $GUID = $_.Name -replace '{' -replace '}'
                if (($GUID).Length -ne 36) {
@@ -60,9 +97,10 @@
                    $Output['Description'] = $_.Description
                    $Output['GUID'] = $GUID
                    $Output['Path'] = $_.gPCFileSysPath
-                    $Output['FunctionalityVersion'] = $_.gPCFunctionalityVersion
+                    #$Output['FunctionalityVersion'] = $_.gPCFunctionalityVersion
                    $Output['Created'] = $_.Created
                    $Output['Modified'] = $_.Modified
+                    $Output['Owner'] = $_.ntSecurityDescriptor.Owner
                    $Output['GPOCanonicalName'] = $_.CanonicalName
                    $Output['GPODomainDistinguishedName'] = ConvertFrom-DistinguishedName -DistinguishedName $_.DistinguishedName -ToDC
                    $Output['GPODistinguishedName'] = $_.DistinguishedName
@@ -72,9 +72,13 @@
            # That's why we use $ForestInformation.Forest.Domains instead
            foreach ($Domain in $ForestInformation.Forest.Domains) {
                Write-Verbose "Get-GPOZaurrLink - Building GPO cache for domain $Domain"
-                $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
-                Get-GPO -All -DomainName $Domain -Server $QueryServer | ForEach-Object {
-                    $GPOCache["$Domain$($_.ID.Guid)"] = $_
+                if ($ForestInformation['QueryServers'][$Domain]) {
+                    $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                    Get-GPO -All -DomainName $Domain -Server $QueryServer | ForEach-Object {
+                        $GPOCache["$Domain$($_.ID.Guid)"] = $_
+                    }
+                } else {
+                    Write-Warning -Message "Get-GPOZaurrLink - Couldn't get query server for $Domain. Skipped."
                }
            }
        }
@@ -39,6 +39,7 @@
                'ObjectsCountIndirect'     = 0
                'ObjectsCountTotal'        = 0
                'Level'                    = 'Top'
+                'RootLevel'                = $TopOU.Name
                'Domain'                   = $Domain
            }

@@ -61,6 +62,7 @@
                        'ObjectsCountIndirect'     = 0
                        'ObjectsCountTotal'        = 0
                        'Level'                    = 'Child'
+                        'RootLevel'                = $TopOU.Name
                        'Domain'                   = $Domain
                    }
                }
@@ -132,6 +134,7 @@
        [PSCustomObject] @{
            Organizationalunit  = $OU
            Level               = $CachedOu[$OU]['Level']
+            RootLevel           = $CachedOu[$OU]['RootLevel']
            DomainName          = $CachedOu[$OU]['Domain']
            Status              = $Status
            GPOCount            = $CachedOu[$OU]['LinkedGroupPolicyObjects'].Count
@@ -84,7 +84,7 @@
        foreach ($_ in $Objects) {
            $Count++
            Write-Verbose "Get-GPOZaurrOwner - Processing GPO [$Count/$($Objects.Count)]: $($_.DisplayName) from domain: $($_.DomainName)"
-            $ACL = Get-ADACLOwner -ADObject $_.GPODistinguishedName -Resolve -ADAdministrativeGroups $ADAdministrativeGroups -Verbose:$false
+            $ACL = Get-ADACLOwner -ADObject $_.GPODistinguishedName -Resolve -Verbose:$false
            $Object = [ordered] @{
                DisplayName = $_.DisplayName
                DomainName  = $_.DomainName
@@ -0,0 +1,104 @@
+function Get-GPOZaurrUpdates {
+    [cmdletBinding(DefaultParameterSetName = 'DateRange')]
+    param(
+        [parameter(ParameterSetName = 'Dates')]
+        [parameter(ParameterSetName = 'DateRange')]
+        [alias('ForestName')][string] $Forest,
+        [parameter(ParameterSetName = 'Dates')]
+        [parameter(ParameterSetName = 'DateRange')]
+        [string[]] $ExcludeDomains,
+        [parameter(ParameterSetName = 'Dates')]
+        [parameter(ParameterSetName = 'DateRange')]
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [parameter(Mandatory, ParameterSetName = 'Dates')][DateTime] $DateFrom,
+        [parameter(Mandatory, ParameterSetName = 'Dates')][DateTime] $DateTo,
+        [parameter(Mandatory, ParameterSetName = 'DateRange')][ValidateSet('PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last21Days', 'Last30Days', 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange,
+        [parameter(ParameterSetName = 'Dates')]
+        [parameter(ParameterSetName = 'DateRange')]
+        [ValidateSet('WhenCreated', 'WhenChanged')][string[]] $DateProperty = 'WhenCreated',
+        [parameter(ParameterSetName = 'Dates')]
+        [parameter(ParameterSetName = 'DateRange')]
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    $getGPOZaurrADSplat = @{
+        Forest                    = $Forest
+        IncludeDomains            = $IncludeDomains
+        ExcludeDomains            = $ExcludeDomains
+        ExtendedForestInformation = $ExtendedForestInformation
+        DateFrom                  = $DateFrom
+        DateTo                    = $DateTo
+        DateRange                 = $DateRange
+        DateProperty              = $DateProperty
+    }
+    Remove-EmptyValue -Hashtable $getGPOZaurrADSplat
+    # lets get all the links including sites
+
+    if ($DateRange) {
+        Write-Verbose -Message "Get-GPOZaurrUpdates - Get group policies for defined range $DateRange"
+    } elseif ($DateFrom -and $DateTo) {
+        Write-Verbose -Message "Get-GPOZaurrUpdates - Get group policies for defined range $DateFrom to $DateTo"
+    } else {
+        Write-Warning -Message "Get-GPOZaurrUpdates - No range is selected. Try again."
+        return
+    }
+    $LinksSummaryCache = Get-GPOZaurrLink -AsHashTable -Summary -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+
+    $OUCache = [ordered] @{}
+    foreach ($Domain in $ForestInformation.Domains) {
+        Write-Verbose -Message "Get-GPOZaurrUpdates - Getting OU's for $Domain"
+        $OrganizationalUnits = Get-ADOrganizationalUnit -Filter * -Properties gpOptions, canonicalName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        $OUCache[$OrganizationalUnits.DistinguishedName] = if ($OrganizationalUnits.gpOptions -eq 1) { $true } else { $false } # blocked inheritance
+    }
+
+    $CurrentCount = 0
+    Write-Verbose -Message "Get-GPOZaurrUpdates - Getting GPO information"
+    [Array] $GPOs = Get-GPOZaurrAD @getGPOZaurrADSplat
+    foreach ($GPO in $GPOs) {
+        $CurrentCount++
+        Write-Verbose -Message "Get-GPOZaurrUpdates - Processing $($GPO.DisplayName) / $($GPO.DomainName) [$CurrentCount/$($GPOs.Count)]"
+        $GPOLinkData = $LinksSummaryCache["$($GPO.DomainName)$($GPO.GUID)"]
+        #$GPOLinkData
+        [Array] $LinksDN = if ($GPOLinkData.Links.Count -gt 0) {
+            foreach ($Link in $GPOLinkData.LinksObjects) {
+                If ($Link.Enabled -eq $true) {
+                    $Link.DistinguishedName
+                }
+            }
+        }
+        if ($LinksDN.Count -gt 0) {
+            $OrganizationalUnitsObjects = Get-ADOrganizationalUnitObject -OrganizationalUnit $LinksDN -Summary -IncludeAffectedOnly
+        } else {
+            # GPO is not linked
+            $OrganizationalUnitsObjects = [PSCUstomObject] @{
+                ObjectsTotalCount              = 0
+                ObjectsBlockedInheritanceCount = 0
+                ObjectsClasses                 = @()
+            }
+        }
+        if ($GPO.Owner) {
+            $Owner = Get-WinADObject -Identity $GPO.Owner -AddType
+        } else {
+            $Owner = [PSCustomObject] @{
+                Name        = 'Unknown'
+                Type        = 'Unknown'
+                ObjectClass = 'Unknown'
+            }
+        }
+        [PSCustomObject] @{
+            DisplayName             = $GPO.DisplayName
+            DomainName              = $GPO.DomainName
+            Owner                   = $GPO.Owner
+            OwnerName               = $Owner.Name
+            OwnerType               = $Owner.Type
+            OwnerClass              = $Owner.ObjectClass
+            LinksCount              = if ($GPOLinkData) { $GPOLinkData.LinksCount } else { 0 }
+            LinksEnabledCount       = if ($GPOLinkData) { $GPOLinkData.LinksEnabledCount } else { 0 }
+            AffectedCount           = $OrganizationalUnitsObjects.ObjectsTotalCount
+            BlockedInheritanceCount = $OrganizationalUnitsObjects.ObjectsBlockedInheritanceCount
+            AffectedClasses         = $OrganizationalUnitsObjects.ObjectsClasses.GetEnumerator().Name
+            Created                 = $GPO.Created
+            Changed                 = $GPO.Modified
+            LinksEnabled            = $LinksDN
+        }
+    }
+}
@@ -19,6 +19,40 @@

 # GPOZaurr

+Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.
+**GPOZaurr** provides 360 degrees of information about Group Policies and their settings.
+
+Just a single command (`Invoke-GPOZaurr`) provides following reports:
+
+- GPOBroken
+- GPOBrokenLink
+- GPOOwners
+- GPOConsistency
+- GPODuplicates
+- GPOOrganizationalUnit
+- GPOList
+- GPOLinks
+- GPOPassword
+- GPOPermissions
+- GPOPermissionsAdministrative
+- GPOPermissionsRead
+- GPOPermissionsRoot
+- GPOPermissionsUnknown
+- GPOFiles
+- GPOBlockedInheritance
+- GPOAnalysis
+- GPOUpdates
+- NetLogonOwners
+- NetLogonPermissions
+- SysVolLegacyFiles
+
+But that's not all.
+There are over 50 other commands available that make it even more powerful helping with day to day tasks to manage Group Policies.
+
+To understand the usage of `Invoke-GPOZaurr` I've created blog post you may find useful
+
+- [The only command you will ever need to understand and fix your Group Policies (GPO)](https://evotec.xyz/the-only-command-you-will-ever-need-to-understand-and-fix-your-group-policies-gpo/)
+
 ## Installing

 GPOZaurr requires `RSAT` installed to provide results. If you don't have them you can install them as below. Keep in mind it also installs GUI tools so it shouldn't be installed on user workstations.
@@ -45,466 +79,4 @@ Update-Module -Name GPOZaurr

 That's it. Whenever there's a new version, you run the command, and you can enjoy it. Remember that you may need to close, reopen PowerShell session if you have already used module before updating it.

-**The essential thing** is if something works for you on production, keep using it till you test the new version on a test computer. I do changes that may not be big, but big enough that auto-update may break your code. For example, small rename to a parameter and your code stops working! Be responsible!
-
-## Resources
-
-To understand the usage I've created blog post you may find useful
-
- [The only command you will ever need to understand and fix your Group Policies (GPO)](https://evotec.xyz/the-only-command-you-will-ever-need-to-understand-and-fix-your-group-policies-gpo/)
-
-## Changelog
-
- 0.0.133 - 2021.08.16
-  - ☑ Improved exclusions for email use
- 0.0.132 - 2021.08.16
-  - ☑ Improved exclusions for email use
- 0.0.131 - 2021.08.16
-  - ☑ Improved exclusions for email use
- 0.0.130 - 2021.08.13
-  - 💡 Updated HTML to new version of `PSWriteHTML` that fixes complains about `SearchBuilder` option
-  - ☑ Improved `Invoke-GPOZaurr` - type `GPOOrganizationalUnit` with exclusions
-
-    ```powershell
-    Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @(
-        '*OU=Production,DC=ad,DC=evotec,DC=pl'
-        '*OU=Production,DC=ad,DC=evotec,DC=pl'
-        '*DC=ad,DC=evotec,DC=pl'
-    )
-    ```
-
-  - ☑ Improved `Get-GPOZaurrOrganizationalUnit` with exclusions
-
-      ```powershell
-      Get-GPOZaurrOrganizationalUnit -Verbose -ExcludeOrganizationalUnit @(
-        '*,OU=Production,DC=ad,DC=evotec,DC=pl'
-      ) | Format-Table
-      ```
-
-  - ☑ Improved `Remove-GPOZaurrLinkEmptyOU` with exclusions
-
-    ```powershell
-    $Exclude = @(
-        "OU=Groups,OU=Production,DC=ad,DC=evotec,DC=pl"
-        "OU=Test \, OU,OU=ITR02,DC=ad,DC=evotec,DC=xyz"
-    )
-
-    Remove-GPOZaurrLinkEmptyOU -Verbose -LimitProcessing 3 -WhatIf -ExcludeOrganizationalUnit $Exclude
-    ```
-
-  - ☑ Improved `Invoke-GPOZaurr` - type `GPOOwners` with exclusions
-
-    ```powershell
-    Invoke-GPOZaurr -FilePath $PSScriptRoot\Reports\GPOZaurrGPOOwners.html -Type GPOOwners -Online -Exclusions @(
-        'EVOTEC\przemyslaw.klys'
-    )
-    ```
-
-  - ☑ Improved `Set-GPOZaurrOwner` with exclusions/approved owners
-
-    ```powershell
-    Set-GPOZaurrOwner -Type All -Verbose -LimitProcessing 2 -WhatIf -IncludeDomains 'ad.evotec.xyz' -ApprovedOwner @(
-        'EVOTEC\przemyslaw.klys'
-    )
-    ```
-
-  - ☑ Improved `Get-GPOZaurrOwner` with exclusions/approved owners
-
-    ```powershell
-    $T = Get-GPOZaurrOwner -Verbose -IncludeSysvol -ApprovedOwner @('EVOTEC\przemyslaw.klys')
-    $T | Format-Table *
-    ```
-
-  - ☑ Improved `Get-GPOZaurr` with exclusions and support for GUID, strings
-
-    ```powershell
-    $GPOS = Get-GPOZaurr -ExcludeGroupPolicies {
-        Skip-GroupPolicy -Name 'de14_usr_std'
-        Skip-GroupPolicy -Name 'de14_usr_std' -DomaiName 'ad.evotec.xyz'
-        Skip-GroupPolicy -Name 'All | Trusted Websites' #-DomaiName 'ad.evotec.xyz'
-        '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
-        'COMPUTERS | Enable Sets'
-    }
-    $GPOS | Format-Table -AutoSize *
-    ```
-
-  - ☑ Improved `Invoke-GPOZaurr` with exclusions and support for GUID, strings
-
-    ```powershell
-    Invoke-GPOZaurr -Type GPOList -Exclusions {
-        Skip-GroupPolicy -Name 'All | Trusted Websites' -DomaiName 'ad.evotec.xyz'
-        '{D39BF08A-87BF-4662-BFA0-E56240EBD5A2}'
-        'COMPUTERS | Enable Sets'
-    }
-    ```
-
- 0.0.129 - 2021.08.06
-  - Added `Get-GPOZaurrOrganizationalUnit` and added `GPOOrganizationalUnit` in `Invoke-GPOZaurr` (preview)
-  - Added `Remove-GPOZaurrLinkEmptyOU` which allows removing links from Empty OUs (preview)
-  - Small update to parameter sets for `Set-GPOZaurrOwner`
- 0.0.128 - 2021.05.26
-  - ☑ Improved `Invoke-GPOZaurrContent` - type `PublicKeyPoliciesCertificates` - added more certificate information
-  - ☑ Improved `Invoke-GPOZaurr` - type `GPOAnalysis` - added more certificate information
- 0.0.128 Alpha 1 - 2021.05.17
-  - 🐛 Fixes errors when normalizing properties [#17](https://github.com/EvotecIT/GPOZaurr/issues/17)
- 0.0.127 - 2021.04.15
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Report `GPOList` - moved description closer to statuses
-  - ☑ Improved `Get-GPOZaurr` - moved description closer to statuses
- 0.0.126 - 2021.04.12
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Report `GPOBlockedInheritance` - hidden DistinguishedName, fixed some small typos
- 0.0.125 - 2021.04.11
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Report `GPOBlockedInheritance` - small fixes
- 0.0.124 - 2021.04.11
-  - ☑ Added `SearchBuilder` to all tables
-  - ☑ Automatically joins arrays in tables in `Invoke-GPOZaurr`
-  - ☑ Improved `Get-GPOZaurrInheritance` with Exclusions and some help information
-  - ☑ Improved `Invoke-GPOZaurr` with some Exclusions
-  - ☑ Improved `Invoke-GPOZaurr`
-    - 🔥 Report `GPOBlockedInheritance` - heavily improved functionality and data
- 0.0.123 - 2021.03.21
-  - ☑ Fixes `Get-GPOZaurrLinkSummary`
- 0.0.122 - 2021.02.11
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Report `GPOAnalysis` - added `WindowsFirewallRules`,`WindowsFirewallProfiles`,`WindowsFirewallConnectionSecurityAuthentication`,`WindowsFirewallConnectionSecurityRules`
-  - ☑ Improved `Invoke-GPOZaurrContent` as mentioned above for `GPOAnalysis`
- 0.0.121 - 2021.02.10
-  - ☑ Improvement to `Get-GPOZaurr` - added description [#13](https://github.com/EvotecIT/GPOZaurr/issues/13)
-  - ☑ Improvement to `Invoke-GPOZaurr -Type GPOList` - added description [#13](https://github.com/EvotecIT/GPOZaurr/issues/13)
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Report GPOAnalysis - added `FolderRedirection`
-    - ☑ Report GPOAnalysis - renamed `FolderRedirection` to `FolderRedirectionPolicy`
-  - ☑ Improved `Invoke-GPOZaurrContent` as mentioned above for `GPOAnalysis`
- 0.0.120 - 2021.02.10
-  - ☑ Improvement to `Get-GPOZaurr` to warn if there is potential issue with EMPTY (which can happen on non-english system)
-    - ☑ In such case GPOZaurr will asses EMPTY or not using old method which doesn't detect all EMPTY cases but shouldn't provide false positives
- 0.0.119
-  - Broken release - weird
- 0.0.118 - 2021.02.09
-  - ☑ Added information where the report is saved
-  - ☑ Small improvement to `Get-GPOZaurr` to exlicitly define variable types
- 0.0.117 - 2021.02.09
-  - ☑ Small fix to `Get-GPOZaurr` to exclude GPOList.xml which is used in offline mode by `Save-GPOZaurrFiles`
- 0.0.116 - 2021.02.08
-  - ☑ Improved `Remove-GPOZaurrBroken` to handle ObjectClass problem, and removed reduntant check
- 0.0.115 - 2021.02.07
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ `GPOList` - clarified some texts, changed 7 days to 30 days as default
-    - ☑ `NetLogonPermissions` - fixed missing text
-  - ☑ Fixes `Get-GPOZaurrNetLogon` error on empty Owner - [#9](https://github.com/EvotecIT/GPOZaurr/issues/9)
- 0.0.114 - 2021.01.27
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ HTML now uses offline mode by default (no CDN) - increase in size of HTML up to 3MB
-    - ☑ Using Online switch forces use of CDN - smaller files. For example `Invoke-GPOZaurr -Type GPOList -Online`
-  - [ ] Improved `Invoke-GPOZaurrSupport`
-    - ☑ HTML now uses offline mode by default (no CDN) - increase in size of HTML up to 3MB
-    - ☑ Using Online switch forces use of CDN - smaller files. For example `Invoke-GPOZaurrSupport -Online`
-    - ☑ Removed parameter Offline, added parameter Online
-    - ☑ The cmdlet is not really production ready. It's work in progress
- 0.0.113 - 2021.01.25
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Report GPOAnalysis - added WindowsTimeService
-  - ☑ Improved `Invoke-GPOZaurrContent`
-    - ☑ Added `WindowsTimeService` type
- 0.0.112 - 2021.01.25
-  - ☑ Improved `Invoke-GPOZaurr`
- 0.0.111 - 2021.01.24
-  - ☑ Improved `Invoke-GPOZaurr`
- 0.0.110 - 2021.01.22
-  - ☑ Improved `Invoke-GPOZaurr`
- 0.0.109 - 2021.01.11
-  - ☑ Improved `Invoke-GPOZaurr`
- 0.0.108 - 2021.01.11
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Improved `GPOConsistency`
- 0.0.107 - 2021.01.11
-  - ☑ Improved `Invoke-GPOZaurr`
- 0.0.106 - 2021.01.11
-  - ☑ Improved `Invoke-GPOZaurrContent`
- 0.0.105 - 2021.01.05
-  - ☑ Improved `Get-GPOZaurr`
-    - ☑ Improved report `GPOBrokenLink`
- 0.0.104 - 2021.01.04
-  - ☑ Improved `Get-GPOZaurrBrokenLink`
-  - ☑ Improved `Repair-GPOZaurrBrokenLink`
-  - ☑ Improved `Get-GPOZaurr`
-    - ☑ Improved report `GPOBrokenLink`
- 0.0.103 - 2021.01.04
-  - ☑ Improved `Get-GPOZaurr`
-    - ☑ Added new report `GPOBrokenLink`
-  - ☑ Added `Get-GPOZaurrBrokenLink`
-  - ☑ Added `Repair-GPOZaurrBrokenLink`
- 0.0.102 - 2021.01.02
-  - ☑ Improved `Get-GPOZaurrLink`
-    - ☑ Supports all links across forest
-    - ☑ Renamed Linked validate set from `Other` to `OrganizationalUnit`
-  - ☑ Improved `Get-GPOZaurrLinkSummary`
-  - ☑ Improved/BugFix `Get-GPOZaurr` to properly detect linked GPOs in sites/cross-domain
-  - ☑ Improved `Invoke-GPOZaurrPermission`
-    - ☑ Renamed Linked validate set from `Other` to `OrganizationalUnit`
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Added `GPOLinks` basic list
- 0.0.101 - 23.12.2020
-  - ☑ Improved `Get-GPOZaurrBroken`
-    - ☑ It now detects `ObjectClass Issue`
-    - ☑ Heavily improved performance
-    - ☑ Removed some useless properties for this particular cmdlet
-    - ☑ All states: `Not available on SYSVOL`, `Not available in AD`, `Exists`, `Permissions Issue`, `ObjectClass Issue`
-    - ☑ Improved help
-  - ☑ Improved `Remove-GPOZaurrBroken`
-    - ☑ It now deals with `ObjectClass Issue`
-    - ☑ Heavily improved performance
-    - ☑ Removed some useless properties for this particular cmdlet
-    - ☑ Now requires manual type insert AD, SYSVOL or ObjectClass (or all of them). Before it was auto using AD/SYSVOL.
-    - ☑ Improved help
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList`
-    - ☑ Renamed `GPOOrphans` to `GPOBroken`
-    - ☑ Improved `GPOBroken` with `ObjectClass issue`
- 0.0.100 - 21.12.2020
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOPermissionsRead`
-    - ☑ Type `GPOPermissions`
- 0.0.99 - 13.12.2020
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` - require GPO to be 7 days old for deletion to be proposed
-    - ☑ Type `GPOPermissions` - one stop for permissions
-    - ☑ Allows Steps to be chosen via their menu and out-of-order
-  - ☑ Improved `Remove-GPOZaurr` - added `RequireDays` parameter to prevent deletion of just modified GPOs
-  - ☑ Added `Get-GPOZaurrPermissionAnalysis`
-  - ☑ Added `Repair-GPOZaurrPermission`
- 0.0.98 - 10.12.2020
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` - fixed unexpected ending of cmdlet when error occurs (for example deleted GPO while script is running) which could impact results
-    - ☑ Other types - small color adjustment
-  - ☑ Fixed/Improved `Get-GPOZaurr` - fixed unexpected ending of cmdlet when error occurs (for example deleted GPO while script is running), improved code base
-  - ☑ Improved `Invoke-GPOZaurrSupport`
- 0.0.97 - 07.12.2020
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` - added more data, did small reorganization
- 0.0.96 - 07.12.2020
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` - added more data, added Optimization Step
-  - ☑ Added `Set-GPOZaurrStatus`
-  - ☑ Added `Optimize-GPOZaurr`
-  - ☑ Fixed `Invoke-GPOZaurrPermission` which would not remove permission due to internal changes earlier on
-  - ☑ Small change to `Backup-GPOZaurr`
-    - ☑ Added support for `Disabled`. It's now possbile to backup `All` (default), `Empty`,`Unlinked`,`Disabled` or a mix of them
-    - ☑ Removed useless `GPOPath` parameter
- 0.0.95 - 04.12.2020
-  - ☑ Fix for too big int - [#4](https://github.com/EvotecIT/GPOZaurr/issues/4) - tnx neztach
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` - added ability for Exclusions
-    - ☑ All other types, small improvements
-    - ☑ Added HideSteps, ShowError, ShowWarning -> Disabled Warnings/Errors by default as they tend to show too much information
-  - ☑ Improved `Remove-GPOZaurr` - added Exclusions
- 0.0.93 - 03.12.2020
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` reverted charts colors for entries to match colors
-    - [ ] Added `Skip-GroupPolicy` to use within `Invoke-GPOZaurr`
-  - ☑ Improved `Invoke-GPOZaurr` with basic support for Exclusions
-  - ☑ Improved `Get-GPOZaurr` with basic support for Exclusions
-  - ☑ Improved `Remove-GPOZaurrPermission` error handling
- 0.0.92 - 01.12.2020
-  - ☑ Improved `Invoke-GPOZaurrSupport`
-  - ☑ Improved `Invoke-GPOZaurr`
-    - ☑ Type `GPOList` improved with more data, more problems and clearer information
-  - ☑ Improved `Remove-GPOZaurr`
-    - ☑ Added ability do remove disabed GPO
-  - ☑ Improved `Get-GPOZaurr` detecting more issues, delivering more data
- 0.0.91 - 24.11.2020
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Improve Type `GPOPermissionsUnknown`
- 0.0.90 - 23.11.2020
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Improves Type `GPODuplicates`
-      - ☑ Fix for chart color to be RED
-    - ☑ Add Type `GPOPermissionsUnknown`
-    - ☑ Improves logic for Data with 0/1 element
-  - ☑ Improves `Remove-GPOZaurrDuplicateObject` - removed `Confirm` requirement
-  - ☑ Improves `Get-GPOZaurrNetLogon` with more verbose
-  - ☑ Improves `Repair-GPOZaurrNetLogonOwner` with more verbose and fix for `LimitProcessing`
- 0.0.89 - 22.11.2020
-  - ☑ Small update `Add-GPOZaurrPermission`
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Added Type `GPOPermissionsAdministrative`
- 0.0.88 - 18.11.2020
-  - ☑ Fix for `Add-GPOZaurrPermission`
- 0.0.87 - 18.11.2020
-  - ☑ Improve error handling `Remove-GPOZaurrBroken`
- 0.0.86 - 18.11.2020
-  - ☑ Improve error handling `Remove-GPOZaurrBroken`
- 0.0.85 - 17.11.2020
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Split `NetLogonPermissions` into `NetLogonPermissions` and `NetLogonOwners`
-    - ☑ Improved type `NetLogonPermissions`
-    - ☑ Improved type `NetLogonOwners`
-  - ☑ Improves `Get-GPOZaurrFiles`
-  - ☑ Improves `Get-GPOZaurrNetLogon`
-  - ☑ Fix for `Get-GPOZaurrNetLogon`
- 0.0.84 - 16.11.2020
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Type `NetLogonPermissions`
-  - ☑ Fix for `Get-GPOZaurrNetLogon`
- 0.0.83 - 14.11.2020
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Fix for wrong ActionRequired count
- 0.0.82 - 14.11.2020
-  - ☑ Added `Get-GPOZaurrPermissionIssue` to detect permission issue with no rights
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Type `GPOPermissionsRead` improved detection of problems with low permissions
- 0.0.81 - 12.11.2020
-  - ☑ Fix for `Set-GPOZaurrOwner` in case of missing permissions to not throw errors
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Type `GPOPermissionsRead` added
- 0.0.80 - 12.11.2020
-  - ☑ Improves `Invoke-GPOZaurr` (WIP)
-    - ☑ Type `GPOOrphans` clearer options, updated texts, split per domain
-    - ☑ Type `GPOOwners` clearer options, updated texts, split per domain
-  - ☑ Improves `Add-GPOZaurrPermission`
-    - ☑ Fixes LimitProcessing to work correctly
-    - ☑ Added `All` to process all GPOs
-  - ☑ Fixes `Remove-GPOZaurrPermission`
-  - ☑ Improves `Set-GPOZaurrOwner`
-    - ☑ Added `Force` to force `GPO Owner` to any principal (normally only Domain Admins)
- 0.0.79 - 10.11.2020
-  - Improved `Invoke-GPOZaurr` - type `GPOOrphans`
- 0.0.78 - 10.11.2020
-  - Improved `Remove-GPOZaurrBroken` more verbose
-  - Improved `Get-GPOZaurrBroken` more verbose
-  - Improved `Invoke-GPOZaurr` - type `GPOOrphans`
-  - Improved `Invoke-GPOZaurr` - type `GPOList` - needs more work
-  - Improved `Get-GPOZaurr` with better detection of Empty Policies (needs testing)
- 0.0.77 - 9.11.2020
-  - Improved `Invoke-GPOZaurr` (WIP)
- 0.0.76 - 8.11.2020
-  - Improved `Get-GPOZaurrNetLogon` to better handle errors
- 0.0.75 - 8.11.2020
-  - Improved `Get-GPOZaurrPermissionConsistency` to stop checking consistency if path doesn't exists
- 0.0.74 - 8.11.2020
-  - Improved `Invoke-GPOZaurr` (WIP)
- 0.0.73 - 7.11.2020
-  - Improved `Invoke-GPOZaurr` (WIP)
-  - Improved `Get-GPOZaurr`
- 0.0.72 - 6.11.2020
-  - Improved `Invoke-GPOZaurr` (WIP)
- 0.0.71 - 3.11.2020
-  - Improved `Invoke-GPOZaurr` (WIP)
- 0.0.70 - 29.10.2020
-  - Added `Get-GPOZaurrDuplicateObject`
-  - Added `Remove-GPOZaurrDuplicateObject`
- 0.0.69 - 29.10.2020
-  - Improved `Invoke-GPOZaurr` (WIP)
-  - Improved `Get-GPOZaurrNetLogon`
-  - Improved `Get-GPOZaurrOwner`
-  - Improved `Set-GPOZaurrOwner`
-  - Added `Repair-GPOZaurrNetLogonOwner`
-  - Improved `Invoke-GPOZaurr` (WIP)
- 0.0.68 - 28.10.2020
-  - Renamed `Show-GPOZaurr` to `Invoke-GPOZaurr`
-  - Renamed `Invoke-GPOZaurr` to `Invoke-GPOZaurrContent`
-  - Improvements to `Get-GPOZaurrPermissionConsistency` - don't check for inherited permissions if top level ones are inconsistent
-  - Improved `Invoke-GPOZaurr` (WIP)
- 0.0.67 - 22.10.2020
-  - Improved `Show-GPOZaurr` (WIP)
- 0.0.66 - 22.10.2020
-  - Improved `Show-GPOZaurr` (WIP)
- 0.0.65 - 22.10.2020
-  - Improved `Show-GPOZaurr` (WIP)
- 0.0.64 - 21.10.2020
-  - Renamed `Remove-GPOZaurrOrphaned` to `Remove-GPOZaurrBroken` keeping it as an alias
-  - Renamed `Get-GPOZaurrSysvol` to `Get-GPOZaurrBroken` keeping it as an alias
-  - Improved `Show-GPOZaurr` (WIP)
- 0.0.63 - 19.10.2020
-  - Renamed `Invoke-GPOZaurrContent` back to `Invoke-GPOZaurr`
-  - Added `Show-GPOZaurr` (WIP)
-  - Added `OutputType`,`OutputType`,`Open`,`Online` parameters to `Invoke-GPOZaurr`
-  - Added `Get-GPOZaurrNetLogon`
-  - Improved `Get-GPOZaurrOwner`
-  - Fixes `Get-GPOZaurrSysvol`
- 0.0.62 - 14.10.2020
-  - Renamed `Invoke-GPOZaurr` to `Invoke-GPOZaurrContent` - I want to use `Invoke-GPOZaurr` for something else
-  - Improvements to `Get-GPOZaurrPermissionConsistency` for GPOs without SYSVOL to be reported properly
-  - Added `Get-GPOZaurrPermissionRoot`
-  - Renamed `Remove-GPOZaurrOrphanedSysvolFolders` to `Remove-GPOZaurrOrphaned`
-  - Improved `Remove-GPOZaurrOrphaned` to deal with orphaned folders but also orphaned AD GPO (No sysvol data)
-  - Improved `Get-GPOZaurrSysVol` to detect orphaned SYSVOL or AD GPO objects
-  - Improved `Get-GPOZaurrSysVol` to detect permissions issue when reading AD GPO objects
-  - Added `Get-GPOZaurrPermissionRoot` to show which users/groups have control over all GPOs (allowed to create/modify)
-  - Improved `Get-GPOZaurrPermissionSummary` to include `Get-GPOZaurrPermissionRoot` custom permissions
-  - Updated `Remove-GPOZaurrPermission`
-  - Updated `Get-GpoZaurrPermission`
-  - Updated `Get-GPOZaurrFiles` to better handle access issue
-  - Reversed parameters `Get-GPOZaurrFiles` from `Limited` to `ExtendedMetaData` and fixed missing columns
- 0.0.61 - 31.08.2020
-  - Improvement to `Get-GPOZaurrPermissionSummary`
-  - Fixes to `ConvertFrom-CSExtension`
-  - Fixes to `Find-CSExtension`
- 0.0.59 - 26.08.2020
-  - Improvement to `Get-GPOZaurrPermissionSummary`
- 0.0.58 - 26.08.2020
-  - Improvement to `Get-GPOZaurrPermissionSummary`
- 0.0.57 - 26.08.2020
-  - Improvement to `Get-GPOZaurrPermissionSummary`
- 0.0.56 - 26.08.2020
-  - Added `Get-GPOZaurrPermissionSummary`
- 0.0.55 - 17.08.2020
-  - Improved `Get-GPOZaurrInheritance`
- 0.0.54 - 16.08.2020
-  - Added `Invoke-GPOZaurrSupport` (WIP)
-  - Added `ConvertFrom-CSExtension`
-  - Added `Find-CSExtension`
-  - Added `Get-GPOZaurrInheritance`
- 0.0.53 - 16.08.2020
-  - Bad release
- 0.0.52 - 16.08.2020
-  - Bad release
- 0.0.51 - 2.08.2020
-  - Updates to `Invoke-GPOZaurr` - still work in progress
-  - Added `Get-GPOZaurrSysvolDFSR`
-  - Added `Clear-GPOZaurrSysvolDFSR` (requires testing)
- 0.0.50 - 29.07.2020
-  - Updates to couple of commands
- 0.0.49 - 23.07.2020
-  - Hidden files were skipped - and people do crazy things with them
- 0.0.48 - 21.07.2020
-  - Added `Get-GPOZaurrFilesPolicyDefinition`
-  - Updates to `Invoke-GPOZaurr` - still work in progress
-  - Updates to `Get-GPOZaurrFiles` - still work in progress
-  - Updates to `Remove-GPOZaurrOrphanedSysvolFolders` with backup and support for domains
-  - Module will now be signed
- 0.0.47 - 29.06.2020
-  - Update to `Get-GPOZaurrAD` for better error reporting
-  - Updates to `Invoke-GPOZaurr` - still work in progress
- 0.0.46 - 28.06.2020
-  - Additional protection for `Get-GPOZaurrAD` for CNF duplicates
-  - Update to `Save-GPOZaurrFiles`
-  - Added `Invoke-GPOZaurr` (alias: `Find-GPO`) (heavy work in progress)
- 0.0.45 - 26.06.2020
-  - During publishing ADEssentials required functions are now merged to prevent cyclic dependency bug [Using ModuleSpec syntax in RequiredModules causes incorrect "cyclic dependency" failures](https://github.com/PowerShell/PowerShell/issues/2607)
- 0.0.44 - 24.06.2020
-  - Improvement to `Get-GPOZaurrLinkSummary`
- 0.0.43 - 21.06.2020
-  - Added `Get-GPOZaurrFiles` to list files on NETLOGON/SYSVOL shares with a lot of details
- 0.0.42 - 19.06.2020
-  - Fix for `Get-GPOZaurrLink` and `SearchBase` parameter
-  - Fix for `Get-GPOZaurrLink` - canonical link Trim() throwing errors if empty
- 0.0.41 - 18.06.2020
-  - Added paramerter `SkipDuplicates` to `Invoke-GPOZaurrPermission` which prevents applying permissions over and over again if 1 GPO is linked to a multiple OU's within another OU
- 0.0.40 - 18.06.2020
-  - Fix for error `Get-GPOZaurrLink` - same issue as described on my [earlier blog - Get-ADObject : The server has returned the following error: invalid enumeration context.](https://evotec.xyz/get-adobject-the-server-has-returned-the-following-error-invalid-enumeration-context/).
-    - `WARNING: Get-GPOZaurrLink - Processing error The server has returned the following error: invalid enumeration context.`
-    - `WARNING: Get-GPOZaurrLink - Processing error A referral was returned from the server`
-  - Added `SkipDuplicates` for `Get-GPOZaurrLink`
- 0.0.39 - 17.06.2020
-  - Updates to `Invoke-GPOZaurrPermission` with new parameter `LimitAdministrativeGroupsToDomain`
-    - This will get administrative based on IncludeDomains if given. It means that if GPO has Domain admins added from multiple domains it will only find one, and remove all other Domain Admins (if working with Domain Admins that is)
- 0.0.38 - 17.06.2020
-  - Update to Get-PrivGPOZaurrLink which would cause problems to `Invoke-GPOZaurrPermission` if it would be run without Administrative permission and GPO wouldn't be accessible for that user
- 0.0.37 - 16.06.2020
-  - Updates to `Invoke-GPOZaurrPermission` with new parameterset `Level`
-  - Updates to `Get-GPOZaurrLinkSummary`
- 0.0.36 - 15.06.2020
-  - Initial release
+**The essential thing** is if something works for you on production, keep using it till you test the new version on a test computer. I do changes that may not be big, but big enough that auto-update may break your code. For example, small rename to a parameter and your code stops working! Be responsible!
Author	SHA1	Message	Date
Przemyslaw Klys	fe2ff87120	Version bump	2021-11-02 11:12:33 +01:00
Przemyslaw Klys	0c756b6f0d	Update changelog	2021-11-02 11:12:22 +01:00
Przemyslaw Klys	3dc5dc7be4	File rename, fix of condition	2021-11-02 11:11:02 +01:00
Przemyslaw Klys	d75172e6b1	Version bump	2021-10-24 16:10:56 +02:00
Przemyslaw Klys	ee12a4f619	Update readme	2021-10-24 16:08:02 +02:00
Przemyslaw Klys	c96c8285bf	Added example	2021-10-24 16:01:47 +02:00
Przemyslaw Klys	8c3ed61142	added new date ranges	2021-10-24 16:01:19 +02:00
Przemyslaw Klys	2934acafeb	Improved report	2021-10-24 16:01:07 +02:00
Przemyslaw Klys	7203b7f544	Added additional dates	2021-10-24 16:00:59 +02:00
Przemyslaw Klys	d22e79b657	Added date filtering	2021-10-24 16:00:50 +02:00
Przemyslaw Klys	e07c2dae9a	Update readme	2021-10-24 16:00:20 +02:00
Przemyslaw Klys	8b1b225ce1	Updated changelog/moved out of readme	2021-10-24 16:00:12 +02:00
Przemyslaw Klys	1a54d62b2e	Fix example	2021-10-24 15:46:20 +02:00
Przemyslaw Klys	352ddc18f3	added report	2021-10-24 15:32:36 +02:00
Przemyslaw Klys	017007d8c9	Added gpozaurr updates report	2021-10-24 15:32:20 +02:00
Przemyslaw Klys	4803d3e183	Improvements	2021-10-24 14:51:19 +02:00
Przemyslaw Klys	92fcb80005	Update example	2021-10-22 12:17:16 +02:00
Przemyslaw Klys	4985a114dc	Added example	2021-10-22 12:16:39 +02:00
Przemyslaw Klys	3ad4a92c66	Small improvement to prevent detection of domain errors	2021-10-22 12:15:42 +02:00
Przemyslaw Klys	e78db61695	Version bump	2021-10-19 17:09:41 +02:00
Przemyslaw Klys	781e95d042	Adding verbose messages	2021-10-19 17:07:36 +02:00
Przemyslaw Klys	4e1f35f433	Version bump	2021-10-18 08:34:47 +02:00
Przemyslaw Klys	74eb14753e	Fix when GPO is not linked	2021-10-18 08:33:42 +02:00
Przemyslaw Klys	1a7bb0273f	Update changelog	2021-10-17 17:59:29 +02:00
Przemyslaw Klys	65eea07b6f	Version bump	2021-10-17 15:08:48 +02:00
Przemyslaw Klys	fe917d70b0	Support for new version of ADEssentials	2021-10-17 15:08:25 +02:00
Przemyslaw Klys	9786186a59	Added new function	2021-10-17 14:56:08 +02:00
Przemyslaw Klys	b6fc7a676b	Internal function	2021-10-17 14:55:59 +02:00
Przemyslaw Klys	46e6815314	internal function to find dates	2021-10-17 14:55:38 +02:00
Przemyslaw Klys	b3e9ddeb64	New function, for now internal use	2021-10-17 14:55:27 +02:00
Przemyslaw Klys	e5f67d8f2e	Update changelog	2021-10-17 14:55:14 +02:00
Przemyslaw Klys	24f81647fa	Version bump	2021-10-17 14:55:06 +02:00
Przemyslaw Klys	cdeb2b4a2d	Added search by dates	2021-10-17 14:54:54 +02:00
Przemyslaw Klys	f7cf18500d	Version bump	2021-08-24 18:32:48 +02:00
Przemyslaw Klys	1becfbca60	Added changelog entry	2021-08-24 18:32:11 +02:00
Przemysław Kłys	82c21edcc2	Merge pull request #24 from PatrickOnGit/FolderRedirectionType Added folder redirection type	2021-08-24 18:30:23 +02:00
Przemyslaw Klys	e56cf3bde3	Moved ID, added ID to SingleObject	2021-08-24 18:29:11 +02:00
patrick-sczepanski	996139ab4a	Added folder redirection type	2021-08-23 11:12:56 +02:00
Przemyslaw Klys	5590e3bf31	Version bump	2021-08-19 11:25:19 +02:00
Przemyslaw Klys	9db54b338b	Changelog update	2021-08-19 11:25:12 +02:00
Przemyslaw Klys	e79d95c0fd	Added root level	2021-08-19 11:24:22 +02:00
Przemyslaw Klys	8c1f95b1b8	Version bump	2021-08-18 19:44:21 +02:00
Przemyslaw Klys	4d9f1e7fba	Changelog update	2021-08-18 19:44:13 +02:00
Przemyslaw Klys	88fb1651a9	Fix for exclusions using GUID with brackets	2021-08-18 19:42:57 +02:00
Przemyslaw Klys	9696fb0cab	Update example	2021-08-17 10:20:50 +02:00
Przemyslaw Klys	bb77785ea8	Update example	2021-08-17 10:20:30 +02:00
Przemyslaw Klys	168919d7d9	BUmp new version	2021-08-17 10:20:06 +02:00
Przemyslaw Klys	5effe5face	Make delete OU non-mandatatory	2021-08-17 10:19:57 +02:00
Przemyslaw Klys	6d15363caa	bump version	2021-08-17 10:14:22 +02:00
Przemyslaw Klys	6c62a11767	Updated wording	2021-08-17 10:13:46 +02:00
Przemyslaw Klys	61bfe5bd4d	Bump version, new release	2021-08-17 08:51:22 +02:00
Przemyslaw Klys	5043767e8d	Small adjustment of texts	2021-08-17 08:50:42 +02:00
Przemyslaw Klys	e4ecafaea5	Improvements to GPOList to not trigger require changes when excluding GPOs	2021-08-17 08:50:28 +02:00
Przemyslaw Klys	154e3428e6	More changes	2021-08-16 16:39:41 +02:00