Update changelog

GPOZaurr.psd1

@@ -6,9 +6,9 @@
     CompatiblePSEditions = @('Desktop')
     Copyright            = '(c) 2011 - 2021 Przemyslaw Klys @ Evotec. All rights reserved.'
     Description          = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
-    FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrBrokenLink', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrDuplicateObject', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOrganizationalUnit', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionAnalysis', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionIssue', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrContent', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Optimize-GPOZaurr', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrDuplicateObject', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrLinkEmptyOU', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrBrokenLink', 'Repair-GPOZaurrNetLogonOwner', 'Repair-GPOZaurrPermission', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Set-GPOZaurrStatus', 'Skip-GroupPolicy')
+    FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrBrokenLink', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrDuplicateObject', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOrganizationalUnit', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionAnalysis', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionIssue', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrUpdates', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrContent', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Optimize-GPOZaurr', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrDuplicateObject', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrLinkEmptyOU', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrBrokenLink', 'Repair-GPOZaurrNetLogonOwner', 'Repair-GPOZaurrPermission', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Set-GPOZaurrStatus', 'Skip-GroupPolicy')
     GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-    ModuleVersion        = '0.0.140'
+    ModuleVersion        = '0.0.141'
     PowerShellVersion    = '5.1'
     PrivateData          = @{
         PSData = @{
@@ -18,11 +18,11 @@
         }
     }
     RequiredModules      = @(@{
-            ModuleVersion = '0.0.210'
+            ModuleVersion = '0.0.212'
             ModuleName    = 'PSSharedGoods'
             Guid          = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe'
         }, @{
-            ModuleVersion = '0.0.130'
+            ModuleVersion = '0.0.134'
             ModuleName    = 'ADEssentials'
             Guid          = '9fc9fd61-7f11-4f4b-a527-084086f1905f'
         }, @{

Private/Get-ADOrganizationalUnitObject.ps1

@@ -0,0 +1,220 @@
+function Get-ADOrganizationalUnitObject {
+    <#
+    .SYNOPSIS
+    Gets number of objects in a given OU/OUs with ability to find only those being affected by GPOs.
+
+    .DESCRIPTION
+    Gets number of objects in a given OU/OUs with ability to find only those being affected by GPOs.
+
+    .PARAMETER OrganizationalUnit
+    One or more organizational units to get the number of objects in.
+
+    .PARAMETER Extended
+    Adds all objects affected for better understanding
+
+    .PARAMETER Summary
+    Returns only summary for given OU/OUs
+
+    .PARAMETER IncludeAffectedOnly
+    Ignores any object types that are not Users or Computers
+
+    .PARAMETER Forest
+    Target different Forest, by default current forest is used
+
+    .PARAMETER ExcludeDomains
+    Exclude domain from search, by default whole forest is scanned
+
+    .PARAMETER IncludeDomains
+    Include only specific domains, by default whole forest is scanned
+
+    .PARAMETER AsHashTable
+    Returns results in form of hashtable
+
+    .PARAMETER ExtendedForestInformation
+    Ability to provide Forest Information from another command to speed up processing
+
+    .EXAMPLE
+    $OUs = @(
+        'OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=US,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=Users,OU=User,OU=SE1,OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+    )
+
+    Get-ADOrganizationalUnitObject -OrganizationalUnit $OUs -IncludeAffectedOnly | Format-Table
+
+    .EXAMPLE
+    $OUs = @(
+        'OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=US,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=Users,OU=User,OU=SE1,OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+    )
+
+    Get-ADOrganizationalUnitObject -OrganizationalUnit $OUs | Format-Table
+
+    .EXAMPLE
+    $OUs = @(
+        #'OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        #'OU=US,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=Users,OU=User,OU=SE1,OU=SE,OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+        'OU=ITR01,DC=ad,DC=evotec,DC=xyz'
+    )
+
+    Get-ADOrganizationalUnitObject -OrganizationalUnit $OUs -Summary -IncludeAffectedOnly | Format-List
+
+    .NOTES
+    General notes
+    #>
+    [cmdletBinding()]
+    param(
+        [parameter(Mandatory)][Array] $OrganizationalUnit,
+        [switch] $Extended,
+        [switch] $Summary,
+        [switch] $IncludeAffectedOnly,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [switch] $AsHashTable,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+
+    $CachedOu = [ordered] @{}
+    $ListOU = @(
+        foreach ($OU in $OrganizationalUnit) {
+            if ($OU.DistinguishedName) {
+                $OU.DistinguishedName
+            } else {
+                $OU
+            }
+        }
+    )
+    $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    $OUCache = Get-GPOBlockedInheritance -AsHashTable -ExtendedForestInformation $ForestInformation
+
+    if ($Summary) {
+        $SummaryData = [ordered] @{
+            ObjectsClasses                 = [ordered] @{}
+            ObjectsTotalCount              = 0
+            ObjectsBlockedInheritanceCount = 0
+            ObjectsTotal                   = [ordered] @{}
+            ObjectsBlockedInheritance      = [ordered] @{}
+            DistinguishedName              = [System.Collections.Generic.List[string]]::new()
+        }
+    }
+
+    foreach ($OU in $ListOU) {
+        $Domain = ConvertFrom-DistinguishedName -ToDomainCN -DistinguishedName $OU
+        $ObjectsInOu = Get-ADObject -LDAPFilter "(|(ObjectClass=user)(ObjectClass=contact)(ObjectClass=computer)(ObjectClass=group)(objectClass=inetOrgPerson))" -SearchBase $OU -Server $ForestInformation['QueryServers'][$Domain]['hostname'][0]
+        #Write-Verbose "Get-GPOZaurrOrganizationalUnit - Processing $($Domain) / $($TOPOU.DistinguishedName) [$CountTop/$($TopOrganizationalUnits.Count)], found $($ObjectsInOu.Count) objects to process."
+        if (-not $CachedOu[$OU]) {
+            $CachedOu[$OU] = [ordered] @{
+                DistinguishedName                   = $OU
+                Domain                              = $Domain
+                'ObjectsClasses'                    = [ordered] @{} # only direct, indirect, but not with blocked inheritance
+                'ObjectsDirectCount'                = 0
+                'ObjectsIndirectCount'              = 0
+                'ObjectsTotalCount'                 = 0
+                'ObjectsTotalIncludingBlockedCount' = 0
+                'ObjectsBlockedInheritanceCount'    = 0
+            }
+            if ($Extended) {
+                $CachedOu[$OU]['ObjectsDirect'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsIndirect'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsTotal'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsTotalIncludingBlocked'] = [ordered] @{}
+                $CachedOu[$OU]['ObjectsBlockedInheritance'] = [ordered] @{}
+            }
+        }
+        foreach ($Object in $ObjectsInOu) {
+            if ($IncludeAffectedOnly) {
+                if ($Object.ObjectClass -notin 'User', 'computer') {
+                    continue
+                }
+            }
+
+            $Place = ConvertFrom-DistinguishedName -ToOrganizationalUnit -DistinguishedName $Object.DistinguishedName
+            if (-not $Place) {
+                # Write-Verbose -Message "Get-OrganizationalUnitObject - Processing object in container/root $($Object.DistinguishedName)"
+            }
+
+            if ($Place -and $OUCache[$Place]) {
+                $BlockedInheritance = $OUCache[$Place].BlockedInheritance
+            } else {
+                $BlockedInheritance = $false
+            }
+
+            if ($Summary) {
+                $SummaryData['DistinguishedName'].Add($OU)
+                $SummaryData['ObjectsClasses'][$Object.ObjectClass] = ''
+                if (-not $Place -or $Place -eq $OU) {
+                    $SummaryData['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                } else {
+                    if ($BlockedInheritance) {
+                        $SummaryData['ObjectsBlockedInheritance'][$Object.DistinguishedName] = $Object
+                    } else {
+                        $SummaryData['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                    }
+                }
+            } else {
+                # This is standard way of finding OU's
+                if (-not $Place -or $Place -eq $OU) {
+                    $CachedOu[$OU]['ObjectsDirectCount']++
+                    $CachedOu[$OU]['ObjectsTotalCount']++
+                    # using hashtable to avoid duplicates
+                    $CachedOu[$OU]['ObjectsClasses'][$Object.ObjectClass] = ''
+                    # adding all objects to the list, excluding blocked inheritance
+                    if ($Extended) {
+                        $CachedOu[$OU]['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                        $CachedOu[$OU]['ObjectsDirect'][$Object.DistinguishedName] = $Object
+                    }
+                } else {
+                    if ($BlockedInheritance) {
+                        # We only check for blocked inheritance if the object is not in the same OU
+                        $CachedOu[$OU]['ObjectsBlockedInheritanceCount']++
+                        if ($Extended) {
+                            $CachedOu[$OU]['ObjectsBlockedInheritance'][$Object.DistinguishedName] = $Object
+                        }
+                    } else {
+                        $CachedOu[$OU]['ObjectsIndirectCount']++
+                        $CachedOu[$OU]['ObjectsTotalCount']++
+
+                        # using hashtable to avoid duplicates
+                        $CachedOu[$OU]['ObjectsClasses'][$Object.ObjectClass] = ''
+                        # adding all objects to the list excluding blocked inheritance
+                        if ($Extended) {
+                            $CachedOu[$OU]['ObjectsTotal'][$Object.DistinguishedName] = $Object
+                            $CachedOu[$OU]['ObjectsIndirect'][$Object.DistinguishedName] = $Object
+                        }
+                    }
+                }
+                $CachedOu[$OU]['ObjectsTotalIncludingBlockedCount']++
+                if ($Extended) {
+                    $CachedOu[$OU]['ObjectsTotalIncludingBlocked'][$Object.DistinguishedName] = $Object
+                }
+            }
+        }
+
+    }
+    if ($Summary) {
+        foreach ($ObjectDistinguishedName in [string[]] $SummaryData['ObjectsBlockedInheritance'].Keys) {
+            if ($SummaryData['ObjectsTotal'][$ObjectDistinguishedName]) {
+                $SummaryData['ObjectsBlockedInheritance'].Remove($ObjectDistinguishedName)
+            }
+        }
+        $SummaryData['ObjectsTotalCount'] = $SummaryData['ObjectsTotal'].Count
+        $SummaryData['ObjectsBlockedInheritanceCount'] = $SummaryData['ObjectsBlockedInheritance'].Count
+        if (-not $Extended) {
+            $SummaryData.Remove('ObjectsTotal')
+            $SummaryData.Remove('ObjectsBlockedInheritance')
+        }
+        [PSCustomObject] $SummaryData
+    } else {
+        if ($AsHashTable) {
+            $CachedOu
+        } else {
+            $CachedOu.Values | ForEach-Object { [PSCustomObject] $_ }
+        }
+    }
+}

Private/Get-ChoosenDates.ps1

@@ -0,0 +1,94 @@
+function Get-ChoosenDates {
+    [CmdletBinding()]
+    param(
+        [ValidateSet('Everything', 'PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange
+    )
+    #$Dates = @(
+    # Report Per Hour
+    if ($DateRange -eq 'PastHour') {
+        $DatesPastHour = Find-DatesPastHour
+        if ($DatesPastHour) {
+            $DatesPastHour
+        }
+    }
+    if ($DateRange -eq 'CurrentHour') {
+        $DatesCurrentHour = Find-DatesCurrentHour
+        if ($DatesCurrentHour) {
+            $DatesCurrentHour
+        }
+    }
+    # Report Per Day
+    if ($DateRange -eq 'PastDay') {
+        $DatesDayPrevious = Find-DatesDayPrevious
+        if ($DatesDayPrevious) {
+            $DatesDayPrevious
+        }
+    }
+    if ($DateRange -eq 'CurrentDay') {
+        $DatesDayToday = Find-DatesDayToday
+        if ($DatesDayToday) {
+            $DatesDayToday
+        }
+    }
+    # Report Per Month
+    if ($DateRange -eq 'PastMonth') {
+        # Find-DatesMonthPast runs only on 1st of the month unless -Force is used
+        $DatesMonthPrevious = Find-DatesMonthPast -Force $true
+        if ($DatesMonthPrevious) {
+            $DatesMonthPrevious
+        }
+    }
+    if ($DateRange -eq 'CurrentMonth') {
+        $DatesMonthCurrent = Find-DatesMonthCurrent
+        if ($DatesMonthCurrent) {
+            $DatesMonthCurrent
+        }
+    }
+    # Report Per Quarter
+    if ($DateRange -eq 'PastQuarter') {
+        # Find-DatesMonthPast runs only on 1st of the quarter unless -Force is used
+        $DatesQuarterLast = Find-DatesQuarterLast -Force $true
+        if ($DatesQuarterLast) {
+            $DatesQuarterLast
+        }
+    }
+    if ($DateRange -eq 'CurrentQuarter') {
+        $DatesQuarterCurrent = Find-DatesQuarterCurrent
+        if ($DatesQuarterCurrent) {
+            $DatesQuarterCurrent
+        }
+    }
+    if ($DateRange -eq 'Everything') {
+        $DatesEverything = @{
+            DateFrom = Get-Date -Year 1900 -Month 1 -Day 1
+            DateTo   = Get-Date -Year 2300 -Month 1 -Day 1
+        }
+        $DatesEverything
+    }
+    if ($DateRange -eq 'Last1days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 1
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last3days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 3
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last7days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 7
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    if ($DateRange -eq 'Last14days') {
+        $DatesCurrentDayMinusDaysX = Find-DatesCurrentDayMinuxDaysX -days 14
+        if ($DatesCurrentDayMinusDaysX) {
+            $DatesCurrentDayMinusDaysX
+        }
+    }
+    #)
+    #$Dates
+}

Private/Get-GPOBlockedInheritance.ps1

@@ -0,0 +1,30 @@
+function Get-GPOBlockedInheritance {
+    [cmdletBinding()]
+    param(
+        [string] $Filter = '*',
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [switch] $AsHashTable,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    $OUCache = [ordered] @{}
+
+    $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+
+    foreach ($Domain in $ForestInformation.Domains) {
+        $OrganizationalUnits = Get-ADOrganizationalUnit -Filter $Filter -Properties gpOptions, canonicalName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0] #-SearchScope Subtree
+        foreach ($OU in $OrganizationalUnits) {
+            $OUCache[$OU.DistinguishedName] = [PSCustomObject] @{
+                DistinguishedName  = $OU.DistinguishedName
+                BlockedInheritance = if ($OU.gpOptions -eq 1) { $true } else { $false } # blocked inheritance
+            }
+        }
+    }
+    if ($AsHashTable) {
+        $OUCache
+    } else {
+        $OUCache.Values
+    }
+}

Public/Get-GPOZaurrAD.ps1

@@ -10,6 +10,11 @@
         [alias('ForestName')][string] $Forest,
         [string[]] $ExcludeDomains,
         [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+
+        [DateTime] $DateFrom,
+        [DateTime] $DateTo,
+        [ValidateSet('PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange,
+        [ValidateSet('WhenCreated', 'WhenChanged')][string] $DateProperty = 'WhenCreated',
         [System.Collections.IDictionary] $ExtendedForestInformation
     )
     Begin {
@@ -48,7 +53,21 @@
                     Server = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
                 }
             }
-            Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName | ForEach-Object -Process {
+            # allows to only get GPOs from a specific date range
+            if ($PSBoundParameters.ContainsKey('DateRange')) {
+                $Dates = Get-ChoosenDates -DateRange $DateRange
+                $DateFrom = $($Dates.DateFrom)
+                $DateTo = $($Dates.DateTo)
+                $Splat['Filter'] = -join ($Splat['Filter'], '-and ($DateProperty -ge $DateFrom -and $DateProperty -le $DateTo)')
+            } elseif ($PSBoundParameters.ContainsKey('DateFrom') -and $PSBoundParameters.ContainsKey('DateTo')) {
+                # already set $DateFrom,DateTo
+                $Splat['Filter'] = -join ($Splat['Filter'], '-and ($DateProperty -ge $DateFrom -and $DateProperty -le $DateTo)')
+            } else {
+                # not needed
+            }
+
+
+            Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, ntSecurityDescriptor, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName | ForEach-Object -Process {
                 $DomainCN = ConvertFrom-DistinguishedName -DistinguishedName $_.DistinguishedName -ToDomainCN
                 $GUID = $_.Name -replace '{' -replace '}'
                 if (($GUID).Length -ne 36) {
@@ -60,9 +79,10 @@
                     $Output['Description'] = $_.Description
                     $Output['GUID'] = $GUID
                     $Output['Path'] = $_.gPCFileSysPath
-                    $Output['FunctionalityVersion'] = $_.gPCFunctionalityVersion
+                    #$Output['FunctionalityVersion'] = $_.gPCFunctionalityVersion
                     $Output['Created'] = $_.Created
                     $Output['Modified'] = $_.Modified
+                    $Output['Owner'] = $_.ntSecurityDescriptor.Owner
                     $Output['GPOCanonicalName'] = $_.CanonicalName
                     $Output['GPODomainDistinguishedName'] = ConvertFrom-DistinguishedName -DistinguishedName $_.DistinguishedName -ToDC
                     $Output['GPODistinguishedName'] = $_.DistinguishedName

Public/Get-GPOZaurrOwner.ps1

@@ -84,7 +84,7 @@
         foreach ($_ in $Objects) {
             $Count++
             Write-Verbose "Get-GPOZaurrOwner - Processing GPO [$Count/$($Objects.Count)]: $($_.DisplayName) from domain: $($_.DomainName)"
-            $ACL = Get-ADACLOwner -ADObject $_.GPODistinguishedName -Resolve -ADAdministrativeGroups $ADAdministrativeGroups -Verbose:$false
+            $ACL = Get-ADACLOwner -ADObject $_.GPODistinguishedName -Resolve -Verbose:$false
             $Object = [ordered] @{
                 DisplayName = $_.DisplayName
                 DomainName  = $_.DomainName

Public/Get-GPOZaurrUpdates.ps1

@@ -0,0 +1,64 @@
+function Get-GPOZaurrUpdates {
+    [cmdletBinding()]
+    param(
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [DateTime] $DateFrom,
+        [DateTime] $DateTo,
+        [ValidateSet('PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange,
+        [ValidateSet('WhenCreated', 'WhenChanged')][string] $DateProperty = 'WhenCreated',
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    $getGPOZaurrADSplat = @{
+        Forest                    = $Forest
+        IncludeDomains            = $IncludeDomains
+        ExcludeDomains            = $ExcludeDomains
+        ExtendedForestInformation = $ExtendedForestInformation
+        DateFrom                  = $DateFrom
+        DateTo                    = $DateTo
+        DateRange                 = $DateRange
+        DateProperty              = $DateProperty
+    }
+    Remove-EmptyValue -Hashtable $getGPOZaurrADSplat
+    # lets get all the links including sites
+
+    Write-Verbose -Message "Get-GPOZaurrUpdates - Get group policies for defined ranges"
+    $LinksSummaryCache = Get-GPOZaurrLink -AsHashTable -Summary -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+
+    $OUCache = [ordered] @{}
+    foreach ($Domain in $ForestInformation.Domains) {
+        $OrganizationalUnits = Get-ADOrganizationalUnit -Filter * -Properties gpOptions, canonicalName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        $OUCache[$OrganizationalUnits.DistinguishedName] = if ($OrganizationalUnits.gpOptions -eq 1) { $true } else { $false } # blocked inheritance
+    }
+
+
+    $GPOs = Get-GPOZaurrAD @getGPOZaurrADSplat
+    foreach ($GPO in $GPOs) {
+        $GPOLinkData = $LinksSummaryCache["$($GPO.DomainName)$($GPO.GUID)"]
+        #$GPOLinkData
+        [Array] $LinksDN = if ($GPOLinkData.Links.Count -gt 0) {
+            foreach ($Link in $GPOLinkData.LinksObjects) {
+                If ($Link.Enabled -eq $true) {
+                    $Link.DistinguishedName
+                }
+            }
+        }
+
+        $OrganizationalUnitsObjects = Get-ADOrganizationalUnitObject -OrganizationalUnit $LinksDN -Summary -IncludeAffectedOnly
+
+        [PSCustomObject] @{
+            DisplayName             = $GPO.DisplayName
+            DomainName              = $GPO.DomainName
+            Owner                   = $GPO.Owner
+            LinksCount              = if ($GPOLinkData) { $GPOLinkData.LinksCount } else { 0 }
+            LinksEnabledCount       = if ($GPOLinkData) { $GPOLinkData.LinksEnabledCount } else { 0 }
+            AffectedCount           = $OrganizationalUnitsObjects.ObjectsTotalCount
+            BlockedInheritanceCount = $OrganizationalUnitsObjects.ObjectsBlockedInheritanceCount
+            AffectedClasses         = $OrganizationalUnitsObjects.ObjectsClasses
+            Created                 = $GPO.Created
+            Changed                 = $GPO.Modified
+            LinksEnabled            = $LinksDN
+        }
+    }
+}

README.md

@@ -55,6 +55,11 @@ To understand the usage I've created blog post you may find useful
 
 ## Changelog
 
+- 0.0.141 - 2021.10.17
+  - Removed property from `Get-GPOZaurrAD` - `FunctionalityVersion`
+  - Added property to `Get-GPOZaurrAD` - `Owner`
+  - Added ability to choose date ranges for `Get-GPOZaurrAD`
+  - Added `Get-GPOZaurrUpdates` which shows last gpos added to forest
 - 0.0.140 - 2021.08.24
   - ☑ Improved `Invoke-GPOZaurr` - type `GPOAnalysis` - added folder redirection type - [tnx PatrickOnGit](https://github.com/EvotecIT/GPOZaurr/pull/24)
 - 0.0.139 - 2021.08.19