Update changelog

- Simplify code by using a hashtable to create PSCustomObject for GPO details in "Get-GPOZaurrAD.ps1" script.

.gitignore

@@ -0,0 +1,8 @@
+Ignore/*
+.vs/*
+.vscode/*
+Releases/*
+ReleasesUnpacked/*
+*.log
+*.html
+Artefacts/*

Build/Manage-Module.ps1

@@ -1,287 +1,221 @@
 Clear-Host
 
-$Configuration = @{
-    Information = @{
-        ModuleName        = 'GPOZaurr'
-        DirectoryProjects = 'C:\Support\GitHub'
+Import-Module "PSPublishModule" -Force
 
-        FunctionsToExport = 'Public'
-        AliasesToExport   = 'Public'
+Invoke-ModuleBuild -ModuleName 'GPOZaurr' {
+    # Usual defaults as per standard module
+    $Manifest = @{
+        # Version number of this module.
+        ModuleVersion        = '1.X.0'
+        # Supported PSEditions
+        CompatiblePSEditions = @('Desktop')
+        # ID used to uniquely identify this module
+        GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
+        # Author of this module
+        Author               = 'Przemyslaw Klys'
+        # Company or vendor of this module
+        CompanyName          = 'Evotec'
+        # Copyright statement for this module
+        Copyright            = "(c) 2011 - $((Get-Date).Year) Przemyslaw Klys @ Evotec. All rights reserved."
+        # Description of the functionality provided by this module
+        Description          = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
+        # Minimum version of the Windows PowerShell engine required by this module
+        PowerShellVersion    = '5.1'
+        # Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
+        Tags                 = @('Windows', 'ActiveDirectory', 'GPO', 'GroupPolicy')
+        #IconUri              = 'https://evotec.xyz/wp-content/uploads/2019/02/PSPublishModule.png'
 
-        Manifest          = @{
-            # Version number of this module.
-            ModuleVersion              = '0.0.X'
-            # Supported PSEditions
-            CompatiblePSEditions       = @('Desktop')
-            # ID used to uniquely identify this module
-            GUID                       = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-            # Author of this module
-            Author                     = 'Przemyslaw Klys'
-            # Company or vendor of this module
-            CompanyName                = 'Evotec'
-            # Copyright statement for this module
-            Copyright                  = "(c) 2011 - $((Get-Date).Year) Przemyslaw Klys @ Evotec. All rights reserved."
-            # Description of the functionality provided by this module
-            Description                = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
-            # Minimum version of the Windows PowerShell engine required by this module
-            PowerShellVersion          = '5.1'
-            # Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
-            Tags                       = @('Windows', 'ActiveDirectory', 'GPO', 'GroupPolicy')
-            #IconUri              = 'https://evotec.xyz/wp-content/uploads/2019/02/PSPublishModule.png'
-
-            ProjectUri                 = 'https://github.com/EvotecIT/GPOZaurr'
-
-            RequiredModules            = @(
-                @{ ModuleName = 'PSSharedGoods'; ModuleVersion = 'Latest'; Guid = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe' }
-                @{ ModuleName = 'ADEssentials'; ModuleVersion = 'Latest'; Guid = '9fc9fd61-7f11-4f4b-a527-084086f1905f' }
-                @{ ModuleName = 'PSWriteHTML'; ModuleVersion = "Latest"; Guid = 'a7bdf640-f5cb-4acf-9de0-365b322d245c' }
-            )
-            ExternalModuleDependencies = @(
-                #"ActiveDirectory"
-                #"GroupPolicy"
-                "CimCmdlets"
-                'Microsoft.PowerShell.Management'
-                'Microsoft.PowerShell.Utility'
-                'Microsoft.PowerShell.Security'
-            )
-            CommandModuleDependencies  = @{
-                ActiveDirectory = @(
-                    'Add-GPOPermission'
-                    'Add-GPOZaurrPermission'
-                    'Backup-GPOZaurr'
-                    'Clear-GPOZaurrSysvolDFSR'
-                    'ConvertFrom-CSExtension'
-                    'Find-CSExtension'
-                    'Get-GPOZaurr'
-                    'Get-GPOZaurrAD'
-                    'Get-GPOZaurrBackupInformation'
-                    'Get-GPOZaurrBroken'
-                    'Get-GPOZaurrDictionary'
-                    'Get-GPOZaurrDuplicateObject'
-                    'Get-GPOZaurrFiles'
-                    'Get-GPOZaurrFilesPolicyDefinition'
-                    'Get-GPOZaurrFolders'
-                    'Get-GPOZaurrInheritance'
-                    'Get-GPOZaurrLegacyFiles'
-                    'Get-GPOZaurrLink'
-                    'Get-GPOZaurrLinkSummary'
-                    'Get-GPOZaurrNetLogon'
-                    'Get-GPOZaurrOwner'
-                    'Get-GPOZaurrPassword'
-                    'Get-GPOZaurrPermission'
-                    'Get-GPOZaurrPermissionConsistency'
-                    'Get-GPOZaurrPermissionRoot'
-                    'Get-GPOZaurrPermissionSummary'
-                    'Get-GPOZaurrSysvolDFSR'
-                    'Get-GPOZaurrWMI'
-                    'Invoke-GPOZaurr'
-                    #'Invoke-GPOZaurrContent'
-                    'Invoke-GPOZaurrPermission'
-                    'Invoke-GPOZaurrSupport'
-                    'New-GPOZaurrWMI'
-                    'Optimize-GPOZaurr'
-                    'Remove-GPOPermission'
-                    'Remove-GPOZaurr'
-                    'Remove-GPOZaurrBroken'
-                    'Remove-GPOZaurrDuplicateObject'
-                    'Remove-GPOZaurrFolders'
-                    'Remove-GPOZaurrLegacyFiles'
-                    'Remove-GPOZaurrPermission'
-                    'Remove-GPOZaurrWMI'
-                    'Repair-GPOZaurrNetLogonOwner'
-                    'Repair-GPOZaurrPermissionConsistency'
-                    'Restore-GPOZaurr'
-                    'Save-GPOZaurrFiles'
-                    'Set-GPOOwner'
-                    'Set-GPOZaurrOwner'
-                    'Find-GPO'
-                    'Get-GPOZaurrFilesPolicyDefinitions'
-                    'Get-GPOZaurrSysvol'
-                    'Remove-GPOZaurrOrphaned'
-                    'Show-GPO'
-                    'Show-GPOZaurr'
-                )
-                GroupPolicy     = @(
-                    'Add-GPOPermission'
-                    'Add-GPOZaurrPermission'
-                    'Backup-GPOZaurr'
-                    'Clear-GPOZaurrSysvolDFSR'
-                    'ConvertFrom-CSExtension'
-                    'Find-CSExtension'
-                    'Get-GPOZaurr'
-                    'Get-GPOZaurrAD'
-                    'Get-GPOZaurrBackupInformation'
-                    'Get-GPOZaurrBroken'
-                    'Get-GPOZaurrDictionary'
-                    'Get-GPOZaurrDuplicateObject'
-                    'Get-GPOZaurrFiles'
-                    'Get-GPOZaurrFilesPolicyDefinition'
-                    'Get-GPOZaurrFolders'
-                    'Get-GPOZaurrInheritance'
-                    'Get-GPOZaurrLegacyFiles'
-                    'Get-GPOZaurrLink'
-                    'Get-GPOZaurrLinkSummary'
-                    'Get-GPOZaurrNetLogon'
-                    'Get-GPOZaurrOwner'
-                    'Get-GPOZaurrPassword'
-                    'Get-GPOZaurrPermission'
-                    'Get-GPOZaurrPermissionConsistency'
-                    'Get-GPOZaurrPermissionRoot'
-                    'Get-GPOZaurrPermissionSummary'
-                    'Get-GPOZaurrSysvolDFSR'
-                    'Get-GPOZaurrWMI'
-                    'Invoke-GPOZaurr'
-                    #'Invoke-GPOZaurrContent'
-                    'Invoke-GPOZaurrPermission'
-                    'Invoke-GPOZaurrSupport'
-                    'New-GPOZaurrWMI'
-                    'Optimize-GPOZaurr'
-                    'Remove-GPOPermission'
-                    'Remove-GPOZaurr'
-                    'Remove-GPOZaurrBroken'
-                    'Remove-GPOZaurrDuplicateObject'
-                    'Remove-GPOZaurrFolders'
-                    'Remove-GPOZaurrLegacyFiles'
-                    'Remove-GPOZaurrPermission'
-                    'Remove-GPOZaurrWMI'
-                    'Repair-GPOZaurrNetLogonOwner'
-                    'Repair-GPOZaurrPermissionConsistency'
-                    'Restore-GPOZaurr'
-                    'Save-GPOZaurrFiles'
-                    'Set-GPOOwner'
-                    'Set-GPOZaurrOwner'
-                    'Find-GPO'
-                    'Get-GPOZaurrFilesPolicyDefinitions'
-                    'Get-GPOZaurrSysvol'
-                    'Remove-GPOZaurrOrphaned'
-                    'Show-GPO'
-                    'Show-GPOZaurr'
-                )
-            }
-        }
+        ProjectUri           = 'https://github.com/EvotecIT/GPOZaurr'
     }
-    Options     = @{
-        Merge             = @{
-            Sort           = 'None'
-            FormatCodePSM1 = @{
-                Enabled           = $true
-                RemoveComments    = $false
-                FormatterSettings = @{
-                    IncludeRules = @(
-                        'PSPlaceOpenBrace',
-                        'PSPlaceCloseBrace',
-                        'PSUseConsistentWhitespace',
-                        'PSUseConsistentIndentation',
-                        'PSAlignAssignmentStatement',
-                        'PSUseCorrectCasing'
-                    )
+    New-ConfigurationManifest @Manifest
 
-                    Rules        = @{
-                        PSPlaceOpenBrace           = @{
-                            Enable             = $true
-                            OnSameLine         = $true
-                            NewLineAfter       = $true
-                            IgnoreOneLineBlock = $true
-                        }
+    New-ConfigurationModule -Type RequiredModule -Name 'PSWriteColor', 'PSSharedGoods', 'ADEssentials' -Guid Auto -Version Latest
+    #New-ConfigurationModule -Type ExternalModule -Name 'Microsoft.PowerShell.Utility', 'Microsoft.PowerShell.Management','Microsoft.PowerShell.Security'
+    New-ConfigurationModule -Type ApprovedModule -Name 'PSWriteColor', 'Connectimo', 'PSUnifi', 'PSWebToolbox', 'PSMyPassword'
 
-                        PSPlaceCloseBrace          = @{
-                            Enable             = $true
-                            NewLineAfter       = $false
-                            IgnoreOneLineBlock = $true
-                            NoEmptyLineBefore  = $false
-                        }
+    New-ConfigurationModule -Type ExternalModule -Name @(
+        "CimCmdlets"
+        'Microsoft.PowerShell.Management'
+        'Microsoft.PowerShell.Utility'
+        'Microsoft.PowerShell.Security'
+    )
 
-                        PSUseConsistentIndentation = @{
-                            Enable              = $true
-                            Kind                = 'space'
-                            PipelineIndentation = 'IncreaseIndentationAfterEveryPipeline'
-                            IndentationSize     = 4
-                        }
+    New-ConfigurationModuleSkip -IgnoreModuleName @(
+        # this are builtin into PowerShell, so not critical
+        'powershellget'
+        'GroupPolicy'
+        'ActiveDirectory'
+    ) -IgnoreFunctionName @(
 
-                        PSUseConsistentWhitespace  = @{
-                            Enable          = $true
-                            CheckInnerBrace = $true
-                            CheckOpenBrace  = $true
-                            CheckOpenParen  = $true
-                            CheckOperator   = $true
-                            CheckPipe       = $true
-                            CheckSeparator  = $true
-                        }
+    )
 
-                        PSAlignAssignmentStatement = @{
-                            Enable         = $true
-                            CheckHashtable = $true
-                        }
+    New-ConfigurationCommand -ModuleName 'ActiveDirectory' -CommandName @(
+        'Add-GPOPermission'
+        'Add-GPOZaurrPermission'
+        'Backup-GPOZaurr'
+        'Clear-GPOZaurrSysvolDFSR'
+        'ConvertFrom-CSExtension'
+        'Find-CSExtension'
+        'Get-GPOZaurr'
+        'Get-GPOZaurrAD'
+        'Get-GPOZaurrBackupInformation'
+        'Get-GPOZaurrBroken'
+        'Get-GPOZaurrDictionary'
+        'Get-GPOZaurrDuplicateObject'
+        'Get-GPOZaurrFiles'
+        'Get-GPOZaurrFilesPolicyDefinition'
+        'Get-GPOZaurrFolders'
+        'Get-GPOZaurrInheritance'
+        'Get-GPOZaurrLegacyFiles'
+        'Get-GPOZaurrLink'
+        'Get-GPOZaurrLinkSummary'
+        'Get-GPOZaurrNetLogon'
+        'Get-GPOZaurrOwner'
+        'Get-GPOZaurrPassword'
+        'Get-GPOZaurrPermission'
+        'Get-GPOZaurrPermissionConsistency'
+        'Get-GPOZaurrPermissionRoot'
+        'Get-GPOZaurrPermissionSummary'
+        'Get-GPOZaurrSysvolDFSR'
+        'Get-GPOZaurrWMI'
+        'Invoke-GPOZaurr'
+        #'Invoke-GPOZaurrContent'
+        'Invoke-GPOZaurrPermission'
+        'Invoke-GPOZaurrSupport'
+        'New-GPOZaurrWMI'
+        'Optimize-GPOZaurr'
+        'Remove-GPOPermission'
+        'Remove-GPOZaurr'
+        'Remove-GPOZaurrBroken'
+        'Remove-GPOZaurrDuplicateObject'
+        'Remove-GPOZaurrFolders'
+        'Remove-GPOZaurrLegacyFiles'
+        'Remove-GPOZaurrPermission'
+        'Remove-GPOZaurrWMI'
+        'Repair-GPOZaurrNetLogonOwner'
+        'Repair-GPOZaurrPermissionConsistency'
+        'Restore-GPOZaurr'
+        'Save-GPOZaurrFiles'
+        'Set-GPOOwner'
+        'Set-GPOZaurrOwner'
+        'Find-GPO'
+        'Get-GPOZaurrFilesPolicyDefinitions'
+        'Get-GPOZaurrSysvol'
+        'Remove-GPOZaurrOrphaned'
+        'Show-GPO'
+        'Show-GPOZaurr'
+    )
+    New-ConfigurationCommand -ModuleName 'GroupPolicy' -CommandName @(
+        'Add-GPOPermission'
+        'Add-GPOZaurrPermission'
+        'Backup-GPOZaurr'
+        'Clear-GPOZaurrSysvolDFSR'
+        'ConvertFrom-CSExtension'
+        'Find-CSExtension'
+        'Get-GPOZaurr'
+        'Get-GPOZaurrAD'
+        'Get-GPOZaurrBackupInformation'
+        'Get-GPOZaurrBroken'
+        'Get-GPOZaurrDictionary'
+        'Get-GPOZaurrDuplicateObject'
+        'Get-GPOZaurrFiles'
+        'Get-GPOZaurrFilesPolicyDefinition'
+        'Get-GPOZaurrFolders'
+        'Get-GPOZaurrInheritance'
+        'Get-GPOZaurrLegacyFiles'
+        'Get-GPOZaurrLink'
+        'Get-GPOZaurrLinkSummary'
+        'Get-GPOZaurrNetLogon'
+        'Get-GPOZaurrOwner'
+        'Get-GPOZaurrPassword'
+        'Get-GPOZaurrPermission'
+        'Get-GPOZaurrPermissionConsistency'
+        'Get-GPOZaurrPermissionRoot'
+        'Get-GPOZaurrPermissionSummary'
+        'Get-GPOZaurrSysvolDFSR'
+        'Get-GPOZaurrWMI'
+        'Invoke-GPOZaurr'
+        #'Invoke-GPOZaurrContent'
+        'Invoke-GPOZaurrPermission'
+        'Invoke-GPOZaurrSupport'
+        'New-GPOZaurrWMI'
+        'Optimize-GPOZaurr'
+        'Remove-GPOPermission'
+        'Remove-GPOZaurr'
+        'Remove-GPOZaurrBroken'
+        'Remove-GPOZaurrDuplicateObject'
+        'Remove-GPOZaurrFolders'
+        'Remove-GPOZaurrLegacyFiles'
+        'Remove-GPOZaurrPermission'
+        'Remove-GPOZaurrWMI'
+        'Repair-GPOZaurrNetLogonOwner'
+        'Repair-GPOZaurrPermissionConsistency'
+        'Restore-GPOZaurr'
+        'Save-GPOZaurrFiles'
+        'Set-GPOOwner'
+        'Set-GPOZaurrOwner'
+        'Find-GPO'
+        'Get-GPOZaurrFilesPolicyDefinitions'
+        'Get-GPOZaurrSysvol'
+        'Remove-GPOZaurrOrphaned'
+        'Show-GPO'
+        'Show-GPOZaurr'
+    )
 
-                        PSUseCorrectCasing         = @{
-                            Enable = $true
-                        }
-                    }
-                }
-            }
-            FormatCodePSD1 = @{
-                Enabled        = $true
-                RemoveComments = $false
-            }
-            Integrate      = @{
-                ApprovedModules = 'PSSharedGoods', 'PSWriteColor', 'Connectimo', 'PSUnifi', 'PSWebToolbox', 'PSMyPassword', 'ADEssentials'
-            }
-        }
-        Standard          = @{
-            FormatCodePSM1 = @{
 
-            }
-            FormatCodePSD1 = @{
-                Enabled = $true
-                #RemoveComments = $true
-            }
-        }
-        PowerShellGallery = @{
-            ApiKey   = 'C:\Support\Important\PowerShellGalleryAPI.txt'
-            FromFile = $true
-        }
-        GitHub            = @{
-            ApiKey   = 'C:\Support\Important\GithubAPI.txt'
-            FromFile = $true
-            UserName = 'EvotecIT'
-            #RepositoryName = 'PSPublishModule' # not required, uses project name
-        }
-        Documentation     = @{
-            Path       = 'Docs'
-            PathReadme = 'Docs\Readme.md'
-        }
-        Style             = @{
-            PSD1 = 'Minimal' # Native
-        }
+    $ConfigurationFormat = [ordered] @{
+        RemoveComments                              = $true
+        RemoveEmptyLines                            = $true
+
+        PlaceOpenBraceEnable                        = $true
+        PlaceOpenBraceOnSameLine                    = $true
+        PlaceOpenBraceNewLineAfter                  = $true
+        PlaceOpenBraceIgnoreOneLineBlock            = $false
+
+        PlaceCloseBraceEnable                       = $true
+        PlaceCloseBraceNewLineAfter                 = $true
+        PlaceCloseBraceIgnoreOneLineBlock           = $false
+        PlaceCloseBraceNoEmptyLineBefore            = $true
+
+        UseConsistentIndentationEnable              = $true
+        UseConsistentIndentationKind                = 'space'
+        UseConsistentIndentationPipelineIndentation = 'IncreaseIndentationAfterEveryPipeline'
+        UseConsistentIndentationIndentationSize     = 4
+
+        UseConsistentWhitespaceEnable               = $true
+        UseConsistentWhitespaceCheckInnerBrace      = $true
+        UseConsistentWhitespaceCheckOpenBrace       = $true
+        UseConsistentWhitespaceCheckOpenParen       = $true
+        UseConsistentWhitespaceCheckOperator        = $true
+        UseConsistentWhitespaceCheckPipe            = $true
+        UseConsistentWhitespaceCheckSeparator       = $true
+
+        AlignAssignmentStatementEnable              = $true
+        AlignAssignmentStatementCheckHashtable      = $true
+
+        UseCorrectCasingEnable                      = $true
     }
-    Steps       = @{
-        BuildModule        = @{  # requires Enable to be on to process all of that
-            Enable           = $true
-            DeleteBefore     = $false
-            Merge            = $true
-            MergeMissing     = $true
-            SignMerged       = $true
-            Releases         = $true
-            ReleasesUnpacked = $false
-            RefreshPSD1Only  = $false
-        }
-        BuildDocumentation = @{
-            Enable        = $true # enables documentation processing
-            StartClean    = $true # always starts clean
-            UpdateWhenNew = $true # always updates right after new
-        }
-        ImportModules      = @{
-            Self            = $true
-            RequiredModules = $false
-            Verbose         = $false
-        }
-        PublishModule      = @{  # requires Enable to be on to process all of that
-            Enabled      = $false
-            Prerelease   = ''
-            RequireForce = $false
-            GitHub       = $false
-        }
-    }
-}
+    # format PSD1 and PSM1 files when merging into a single file
+    # enable formatting is not required as Configuration is provided
+    New-ConfigurationFormat -ApplyTo 'OnMergePSM1', 'OnMergePSD1' -Sort None @ConfigurationFormat
+    # format PSD1 and PSM1 files within the module
+    # enable formatting is required to make sure that formatting is applied (with default settings)
+    New-ConfigurationFormat -ApplyTo 'DefaultPSD1', 'DefaultPSM1' -EnableFormatting -Sort None
+    # when creating PSD1 use special style without comments and with only required parameters
+    New-ConfigurationFormat -ApplyTo 'DefaultPSD1', 'OnMergePSD1' -PSD1Style 'Minimal'
+    # configuration for documentation, at the same time it enables documentation processing
+    New-ConfigurationDocumentation -Enable:$false -StartClean -UpdateWhenNew -PathReadme 'Docs\Readme.md' -Path 'Docs'
 
-New-PrepareModule -Configuration $Configuration
+    New-ConfigurationImportModule -ImportSelf
+
+    New-ConfigurationBuild -Enable:$true -SignModule -MergeModuleOnBuild -MergeFunctionsFromApprovedModules -CertificateThumbprint '483292C9E317AA13B07BB7A96AE9D1A5ED9E7703'
+
+    # New-ConfigurationTest -TestsPath "$PSScriptRoot\..\Tests" -Enable
+
+    New-ConfigurationArtefact -Type Unpacked -Enable -Path "$PSScriptRoot\..\Artefacts\Unpacked" -AddRequiredModules
+    New-ConfigurationArtefact -Type Packed -Enable -Path "$PSScriptRoot\..\Artefacts\Packed" -ArtefactName '<ModuleName>.v<ModuleVersion>.zip'
+
+    # options for publishing to github/psgallery
+    #New-ConfigurationPublish -Type PowerShellGallery -FilePath 'C:\Support\Important\PowerShellGalleryAPI.txt' -Enabled:$true
+    #New-ConfigurationPublish -Type GitHub -FilePath 'C:\Support\Important\GitHubAPI.txt' -UserName 'EvotecIT' -Enabled:$true
+} -ExitCode

CHANGELOG.MD

@@ -1,5 +1,32 @@
 # GPOZaurr Release History
 
+## 1.0.0 - 2023.09.17
+- `Get-GPOZaurrUpdates` fix small typo
+- `Get-GPOZaurrAD` improve performance a bit
+- `Get-GPOZaurrAD` changed pipeline into standard foreach to improve performance and potential problems for large domains
+- Added `Get-GPOZaurrRedirect` to detect if GPO path was redirected (security issue)
+- Added `GPORedirect` report type to `Invoke-GPOZaurr` to detect if GPO path was redirected (security issue)
+
+## 0.0.160 - 2023.05.26
+- Fixes `Remove-GPOZaurr` limit processing feature which would not stop in some cases
+
+## 0.0.159
+- Fixes [#44 Extra spaces in property name 'Id' in Get-GPOZaurrPermissionConsistency?](https://github.com/EvotecIT/GPOZaurr/issues/44)
+- Fixes typos [#43](https://github.com/EvotecIT/GPOZaurr/pull/43)
+
+## 0.0.158 - 2023.03.07
+ - Improve detection of empty OUs by including AD printers.
+
+## 0.0.157 - 2022.12.16
+ - Resolves *Group Policy Content - GPO Subfolders for Google Chrome* [#38](https://github.com/EvotecIT/GPOZaurr/issues/38)
+ - Resolves *Filename processing issue* [#37](https://github.com/EvotecIT/GPOZaurr/issues/37)
+
+## 0.0.156 - 2022.12.04
+  - Fixes `Get-LocalComputerSid - Error: You cannot call a method on a null-valued expression` in some rare cases [#34](https://github.com/EvotecIT/GPOZaurr/issues/34)
+
+## 0.0.155 - 2022.10.27
+  - Fixes `Invoke-GPOZaurr` SplitReports functionality (again! and again!) [#35](https://github.com/EvotecIT/GPOZaurr/issues/35)
+
 ## 0.0.154 - 2022.10.20
   - Fixes `Invoke-GPOZaurr` SplitReports functionality (again!) [#33](https://github.com/EvotecIT/GPOZaurr/issues/33)
   - Fixes Sysvol property in object returned by Get-GPOZaurrPermissionConsistency contains whitespace [#31](https://github.com/EvotecIT/GPOZaurr/issues/31)

Examples/Example-02-RemoveEmptyAndUnlinkedGPOs.ps1

@@ -1,7 +1,11 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
-# Remove GPOS
-Remove-GPOZaurr -Type Empty, Unlinked -BackupPath "$Env:UserProfile\Desktop\GPO" -BackupDated -LimitProcessing 2 -Verbose -WhatIf
+# Remove GPOS, but don't touch 2 defined exclusions
+$ExcludeGroupPolicies = {
+    'TEST | Drive Mapping 1',
+    'TEST | Drive Mapping 2'
+}
+Remove-GPOZaurr -Type Empty -BackupPath "$Env:UserProfile\Desktop\GPO" -BackupDated -LimitProcessing 3 -Verbose -WhatIf -ExcludeGroupPolicies $ExcludeGroupPolicies
 
 # Remove GPOS, but don't touch 2 defined exclusions
 Remove-GPOZaurr -Type Empty, Unlinked -BackupPath "$Env:UserProfile\Desktop\GPO" -BackupDated -LimitProcessing 2 -Verbose -WhatIf {

Examples/Example-09-RemovingGPOPermissionUnknown.ps1

@@ -1,3 +1,3 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 #Clear-Host
-Remove-GPOZaurrPermission -Verbose -Type Unknown -LimitProcessing 1 #-WhatIf
+Remove-GPOZaurrPermission -Verbose -Type Unknown -LimitProcessing 5 -GPOName 'CA TEST'

Examples/Example-55-GPORedirects.ps1

@@ -0,0 +1,4 @@
+Import-Module .\GPoZaurr.psd1 -Force
+
+$Data = Invoke-GPOZaurr -Online -FilePath $PSScriptRoot\Reports\GPOZaurr.html -Type GPORedirect -PassThru
+$Data.GPORedirect

GPOZaurr.psd1

@@ -4,31 +4,31 @@
     CmdletsToExport      = @()
     CompanyName          = 'Evotec'
     CompatiblePSEditions = @('Desktop')
-    Copyright            = '(c) 2011 - 2022 Przemyslaw Klys @ Evotec. All rights reserved.'
+    Copyright            = '(c) 2011 - 2023 Przemyslaw Klys @ Evotec. All rights reserved.'
     Description          = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
-    FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Export-GPOZaurrContent', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrBrokenLink', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrDuplicateObject', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOrganizationalUnit', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionAnalysis', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionIssue', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrUpdates', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrContent', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Optimize-GPOZaurr', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrDuplicateObject', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrLinkEmptyOU', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrBrokenLink', 'Repair-GPOZaurrNetLogonOwner', 'Repair-GPOZaurrPermission', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Set-GPOZaurrStatus', 'Skip-GroupPolicy')
+    FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Export-GPOZaurrContent', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrBrokenLink', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrDuplicateObject', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOrganizationalUnit', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionAnalysis', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionIssue', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrRedirect', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrUpdates', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrContent', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Optimize-GPOZaurr', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrDuplicateObject', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrLinkEmptyOU', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrBrokenLink', 'Repair-GPOZaurrNetLogonOwner', 'Repair-GPOZaurrPermission', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Set-GPOZaurrStatus', 'Skip-GroupPolicy')
     GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-    ModuleVersion        = '0.0.154'
+    ModuleVersion        = '1.0.0'
     PowerShellVersion    = '5.1'
     PrivateData          = @{
         PSData = @{
-            Tags                       = @('Windows', 'ActiveDirectory', 'GPO', 'GroupPolicy')
-            ProjectUri                 = 'https://github.com/EvotecIT/GPOZaurr'
             ExternalModuleDependencies = @('CimCmdlets', 'Microsoft.PowerShell.Management', 'Microsoft.PowerShell.Utility', 'Microsoft.PowerShell.Security')
+            ProjectUri                 = 'https://github.com/EvotecIT/GPOZaurr'
+            Tags                       = @('Windows', 'ActiveDirectory', 'GPO', 'GroupPolicy')
         }
     }
     RequiredModules      = @(@{
-            ModuleVersion = '0.0.248'
-            ModuleName    = 'PSSharedGoods'
+            Guid          = '0b0ba5c5-ec85-4c2b-a718-874e55a8bc3f'
+            ModuleName    = 'PSWriteColor'
+            ModuleVersion = '1.0.1'
+        }, @{
             Guid          = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe'
+            ModuleName    = 'PSSharedGoods'
+            ModuleVersion = '0.0.266'
         }, @{
-            ModuleVersion = '0.0.148'
-            ModuleName    = 'ADEssentials'
             Guid          = '9fc9fd61-7f11-4f4b-a527-084086f1905f'
-        }, @{
-            ModuleVersion = '0.0.179'
-            ModuleName    = 'PSWriteHTML'
-            Guid          = 'a7bdf640-f5cb-4acf-9de0-365b322d245c'
+            ModuleName    = 'ADEssentials'
+            ModuleVersion = '0.0.165'
         }, 'CimCmdlets', 'Microsoft.PowerShell.Management', 'Microsoft.PowerShell.Utility', 'Microsoft.PowerShell.Security')
     RootModule           = 'GPOZaurr.psm1'
 }

Private/Get-ADOrganizationalUnitObject.ps1

@@ -106,7 +106,7 @@
 
     foreach ($OU in $ListOU) {
         $Domain = ConvertFrom-DistinguishedName -ToDomainCN -DistinguishedName $OU
-        $ObjectsInOu = Get-ADObject -LDAPFilter "(|(ObjectClass=user)(ObjectClass=contact)(ObjectClass=computer)(ObjectClass=group)(objectClass=inetOrgPerson))" -SearchBase $OU -Server $ForestInformation['QueryServers'][$Domain]['hostname'][0]
+        $ObjectsInOu = Get-ADObject -LDAPFilter "(|(ObjectClass=user)(ObjectClass=contact)(ObjectClass=computer)(ObjectClass=group)(objectClass=inetOrgPerson)(ObjectClass=PrintQueue))" -SearchBase $OU -Server $ForestInformation['QueryServers'][$Domain]['hostname'][0]
         #Write-Verbose "Get-GPOZaurrOrganizationalUnit - Processing $($Domain) / $($TOPOU.DistinguishedName) [$CountTop/$($TopOrganizationalUnits.Count)], found $($ObjectsInOu.Count) objects to process."
         if (-not $CachedOu[$OU]) {
             $CachedOu[$OU] = [ordered] @{

Private/Get-XMLGPO.ps1

@@ -133,7 +133,7 @@
         # in some cases GPResult seems to return an error - this was first noticed by user when using Dutch based system
         # I am not sure if it's possible to fix this error for users, but once that happens checking if GPO is empty fails using the method below
         # therefore we will use the old method of assuming something is empty or not empty in such case
-        Write-Warning "Get-XMLGPO - Reading GPO content [$DisplayName/$DomainName] returned an error. This may be because of non-english language. Assesing EMPTY using old method which can report false positives. Be careful please."
+        Write-Warning "Get-XMLGPO - Reading GPO content [$DisplayName/$DomainName] returned an error. This may be because of non-english language. Assessing EMPTY using old method which can report false positives. Be careful please."
         $OutputUser = @()
         $OutputComputer = @()
     } else {
@@ -223,7 +223,7 @@
         } elseif ($ADAdministrativeGroups) {
             $OwnerType = 'Unknown'
         } else {
-            $OwnerType = 'Unable to asses (local files?)'
+            $OwnerType = 'Unable to assess (local files?)'
         }
     }
     # Mark GPO as excluded
@@ -398,4 +398,4 @@
             }
         }
     }
-}
+}

Private/Invoke.GPOZaurrGPORedirects.ps1

@@ -0,0 +1,79 @@
+$GPOZaurrGPORedirects = [ordered] @{
+    Name       = 'Group Policies With Redirected SYSVOL'
+    Enabled    = $false
+    ActionRequired     = $null
+    Data       = $null
+    Execute    = {
+        Get-GPOZaurrRedirect -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains
+    }
+    Processing = {
+        foreach ($GPO in $Script:Reporting['GPORedirect']['Data']) {
+            $Script:Reporting['GPORedirect']['Variables']['GPOTotal']++
+            if ($GPO.IsCorrect -eq $true) {
+                $Script:Reporting['GPORedirect']['Variables']['GPOIsCorrect']++
+            } else {
+                $Script:Reporting['GPORedirect']['Variables']['GPOIsNotCorrect']++
+            }
+        }
+        if ($Script:Reporting['GPORedirect']['Variables']['GPOIsNotCorrect'] -gt 0) {
+            $Script:Reporting['GPORedirect']['ActionRequired'] = $true
+        } else {
+            $Script:Reporting['GPORedirect']['ActionRequired'] = $false
+        }
+    }
+    Variables  = @{
+        GPOTotal        = 0
+        GPOIsCorrect    = 0
+        GPOIsNotCorrect = 0
+    }
+    Overview   = {
+
+    }
+    Summary    = {
+        New-HTMLText -TextBlock {
+            "Group Policies are stored in Active Directory and SYSVOL. SYSVOL is a folder shared by the domain controllers to hold its logon scripts, "
+            "group policy data, and other domain-wide data which needs to be available anywhere there is a domain controller. "
+            "SYSVOL provides a default location for files that must be shared for common access throughout a domain. "
+            "However it is possible to redirect SYSVOL to a different location by modifying "
+            "gPCFileSysPath "
+            "attribute of a GPO. "
+            "This is not recommended and should be avoided, but it can also be a sign of compromise."
+            "This report shows which GPOs are redirected and which are not. "
+        } -FontSize 10pt -LineBreak -FontWeight normal, normal, normal, normal, bold, normal, normal, normal -Color None, None, None, None, RedBerry, None, None, None
+        New-HTMLList -Type Unordered {
+            New-HTMLListItem -Text 'Group Policies in total: ', $Script:Reporting['GPORedirect']['Variables']['GPOTotal'] -FontWeight normal, bold
+            New-HTMLListItem -Text 'Group Policies without redirects: ', $Script:Reporting['GPORedirect']['Variables']['GPOIsCorrect'] -FontWeight normal, bold -Color None, MintGreen
+            New-HTMLListItem -Text 'Group Policies with redirects: ', $Script:Reporting['GPORedirect']['Variables']['GPOIsNotCorrect'] -FontWeight normal, bold -Color None, RedBerry
+        } -FontSize 10pt
+        New-HTMLText -TextBlock {
+            "If you notice any GPO with redirect, you should investigate it. "
+        } -FontSize 10pt -LineBreak
+    }
+    Solution   = {
+        New-HTMLSection -Invisible {
+            New-HTMLPanel {
+                & $Script:GPOConfiguration['GPORedirect']['Summary']
+            }
+            New-HTMLPanel {
+                New-HTMLChart {
+                    New-ChartBarOptions -Type barStacked
+                    New-ChartLegend -Name 'No redirects', 'With redirects' -Color MintGreen, MediumOrchid
+                    New-ChartBar -Name 'No redirection' -Value $Script:Reporting['GPORedirect']['Variables']['GPOIsCorrect'], $Script:Reporting['GPORedirect']['Variables']['GPOIsNotCorrect']
+                } -Title 'Group Policies with redirects' -TitleAlignment center
+            }
+        }
+        New-HTMLSection -Name 'Group Policies showing redirects (if any)' {
+            New-HTMLTable -DataTable $Script:Reporting['GPORedirect']['Data'] -Filtering {
+                New-HTMLTableCondition -Name 'IsCorrect' -Value $false -BackgroundColor Salmon -ComparisonType bool -FailBackgroundColor MintGreen -HighlightHeaders 'IsCorrect', 'Path', 'ExpectedPath'
+            }
+        }
+        if ($Script:Reporting['GPORedirect']['WarningsAndErrors']) {
+            New-HTMLSection -Name 'Warnings & Errors to Review' {
+                New-HTMLTable -DataTable $Script:Reporting['GPORedirect']['WarningsAndErrors'] -Filtering {
+                    New-HTMLTableCondition -Name 'Type' -Value 'Warning' -BackgroundColor SandyBrown -ComparisonType string -Row
+                    New-HTMLTableCondition -Name 'Type' -Value 'Error' -BackgroundColor Salmon -ComparisonType string -Row
+                }
+            }
+        }
+    }
+}

Private/Script.GPOConfiguration.ps1

@@ -13,6 +13,7 @@
     GPOPermissionsRead           = $GPOZaurrPermissionsRead
     GPOPermissionsRoot           = $GPOZaurrPermissionsRoot
     GPOPermissionsUnknown        = $GPOZaurrPermissionsUnknown
+    GPORedirect                  = $GPOZaurrGPORedirects
     GPOFiles                     = $GPOZaurrFiles
     GPOBlockedInheritance        = $GPOZaurrBlockedInheritance
     GPOAnalysis                  = $GPOZaurrAnalysis

Private/Script.GPODictionary.ps1

@@ -380,6 +380,23 @@
             ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'FSLogix' -SingleObject
         }
     }
+    Firefox                                    = @{
+        Types      = @(
+            @{
+                Category = 'RegistrySettings'
+                Settings = 'Policy'
+            }
+        )
+        GPOPath    = @(
+            'Policies -> Administrative Templates -> Mozilla -> Firefox'
+        )
+        Code       = {
+            ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'Mozilla\Firefox*'
+        }
+        CodeSingle = {
+            ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'Mozilla\Firefox*' -SingleObject
+        }
+    }
     GoogleChrome                                    = @{
         Types      = @(
             @{
@@ -393,10 +410,10 @@
             'Policies -> Administrative Templates -> Google Chrome - Default Settings (users can override)'
         )
         Code       = {
-            ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'Google Chrome', 'Google/Google Chrome', 'Google Chrome - Default Settings (users can override)'
+            ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'Google Chrome*', 'Google/Google Chrome*', 'Google Chrome - Default Settings (users can override)'
         }
         CodeSingle = {
-            ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'Google Chrome', 'Google/Google Chrome', 'Google Chrome - Default Settings (users can override)' -SingleObject
+            ConvertTo-XMLGenericPolicy -GPO $GPO -Category 'Google Chrome*', 'Google/Google Chrome*', 'Google Chrome - Default Settings (users can override)' -SingleObject
         }
     }
     GroupPolicy                                     = @{

Public/Get-GPOZaurrAD.ps1

@@ -85,26 +85,27 @@
             }
 
             Write-Verbose -Message "Get-GPOZaurrAD - Searching domain $Domain with filter $($Splat['Filter'])"
-            Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, ntSecurityDescriptor, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName | ForEach-Object -Process {
-                $DomainCN = ConvertFrom-DistinguishedName -DistinguishedName $_.DistinguishedName -ToDomainCN
-                $GUID = $_.Name -replace '{' -replace '}'
+            $Objects = Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, ntSecurityDescriptor, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName
+            foreach ($Object in $Objects) {
+                $DomainCN = ConvertFrom-DistinguishedName -DistinguishedName $Object.DistinguishedName -ToDomainCN
+                $GUID = $Object.Name -replace '{' -replace '}'
                 if (($GUID).Length -ne 36) {
-                    Write-Warning "Get-GPOZaurrAD - GPO GUID ($($($GUID.Replace("`n",' ')))) is incorrect. Skipping $($_.DisplayName) / Domain: $($DomainCN)"
+                    Write-Warning "Get-GPOZaurrAD - GPO GUID ($($($GUID.Replace("`n",' ')))) is incorrect. Skipping $($Object.DisplayName) / Domain: $($DomainCN)"
                 } else {
-                    $Output = [ordered]@{ }
-                    $Output['DisplayName'] = $_.DisplayName
-                    $Output['DomainName'] = $DomainCN
-                    $Output['Description'] = $_.Description
-                    $Output['GUID'] = $GUID
-                    $Output['Path'] = $_.gPCFileSysPath
-                    #$Output['FunctionalityVersion'] = $_.gPCFunctionalityVersion
-                    $Output['Created'] = $_.Created
-                    $Output['Modified'] = $_.Modified
-                    $Output['Owner'] = $_.ntSecurityDescriptor.Owner
-                    $Output['GPOCanonicalName'] = $_.CanonicalName
-                    $Output['GPODomainDistinguishedName'] = ConvertFrom-DistinguishedName -DistinguishedName $_.DistinguishedName -ToDC
-                    $Output['GPODistinguishedName'] = $_.DistinguishedName
-                    [PSCustomObject] $Output
+                    [PSCustomObject]@{
+                        'DisplayName'                = $Object.DisplayName
+                        'DomainName'                 = $DomainCN
+                        'Description'                = $Object.Description
+                        'GUID'                       = $GUID
+                        'Path'                       = $Object.gPCFileSysPath
+                        #$Output['FunctionalityVersion'] = $Object.gPCFunctionalityVersion
+                        'Created'                    = $Object.Created
+                        'Modified'                   = $Object.Modified
+                        'Owner'                      = $Object.ntSecurityDescriptor.Owner
+                        'GPOCanonicalName'           = $Object.CanonicalName
+                        'GPODomainDistinguishedName' = ConvertFrom-DistinguishedName -DistinguishedName $Object.DistinguishedName -ToDC
+                        'GPODistinguishedName'       = $Object.DistinguishedName
+                    }
                 }
             }
         }

Public/Get-GPOZaurrOrganizationalUnit.ps1

@@ -69,7 +69,7 @@
                 }
             }
             # Find all objects in those OUs
-            $ObjectsInOu = Get-ADObject -LDAPFilter "(|(ObjectClass=user)(ObjectClass=contact)(ObjectClass=computer)(ObjectClass=group)(objectClass=inetOrgPerson))" -SearchBase $TopOU.distinguishedName -Server $ForestInformation['QueryServers'][$Domain]['hostname'][0]
+            $ObjectsInOu = Get-ADObject -LDAPFilter "(|(ObjectClass=user)(ObjectClass=contact)(ObjectClass=computer)(ObjectClass=group)(objectClass=inetOrgPerson)(ObjectClass=PrintQueue))" -SearchBase $TopOU.distinguishedName -Server $ForestInformation['QueryServers'][$Domain]['hostname'][0]
             Write-Verbose "Get-GPOZaurrOrganizationalUnit - Processing $($Domain) / $($TOPOU.DistinguishedName) [$CountTop/$($TopOrganizationalUnits.Count)], found $($ObjectsInOu.Count) objects to process."
             foreach ($Object in $ObjectsInOu) {
                 $Place = ConvertFrom-DistinguishedName -ToOrganizationalUnit -DistinguishedName $Object.DistinguishedName

Public/Get-GPOZaurrPermissionConsistency.ps1

@@ -96,7 +96,7 @@
                 $Object['Owner'] = $_.Owner           # : EVOTEC\Enterprise Admins
                 $Object['Path'] = $_.Path
                 $Object['SysVolPath'] = $SysvolPath
-                $Object['Id       '] = $_.Id              # : 8a7bc515-d7fd-4d1f-90b8-e47c15f89295
+                $Object['Id'] = $_.Id              # : 8a7bc515-d7fd-4d1f-90b8-e47c15f89295
                 $Object['GpoStatus'] = $_.GpoStatus       # : AllSettingsEnabled
                 $Object['Description'] = $_.Description     # :
                 $Object['CreationTime'] = $_.CreationTime    # : 04.03.2020 17:19:42

Public/Get-GPOZaurrRedirect.ps1

@@ -0,0 +1,164 @@
+function Get-GPOZaurrRedirect {
+    <#
+    .SYNOPSIS
+    Command to detect if GPOs have correct path in SYSVOL, or someone changed it manually.
+
+    .DESCRIPTION
+    Command to detect if GPOs have correct path in SYSVOL, or someone changed it manually.
+
+    .PARAMETER GPOName
+    Provide GPO name to search for. By default command returns all GPOs
+
+    .PARAMETER GPOGuid
+    Provide GPO GUID to search for. By default command returns all GPOs
+
+    .PARAMETER Forest
+    Target different Forest, by default current forest is used
+
+    .PARAMETER ExcludeDomains
+    Exclude domain from search, by default whole forest is scanned
+
+    .PARAMETER IncludeDomains
+    Include only specific domains, by default whole forest is scanned
+
+    .PARAMETER DateFrom
+    Provide a date from which to start the search, by default the last X days are used
+
+    .PARAMETER DateTo
+    Provide a date to which to end the search, by default the last X days are used
+
+    .PARAMETER DateRange
+    Provide a date range to search for, by default the last X days are used
+
+    .PARAMETER DateProperty
+    Choose a date property. It can be WhenCreated or WhenChanged or both. By default whenCreated is used for comparison purposes
+
+    .PARAMETER ExtendedForestInformation
+    Ability to provide Forest Information from another command to speed up processing
+
+    .EXAMPLE
+    Get-GPOZaurrRedirect | Format-Table
+
+    .NOTES
+    General notes
+    #>
+    [cmdletbinding(DefaultParameterSetName = 'Default')]
+    param(
+        [Parameter(ParameterSetName = 'GPOName')]
+        [string] $GPOName,
+
+        [Parameter(ParameterSetName = 'GPOGUID')]
+        [alias('GUID', 'GPOID')][string] $GPOGuid,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+
+        [DateTime] $DateFrom,
+        [DateTime] $DateTo,
+        [ValidateSet('PastHour', 'CurrentHour', 'PastDay', 'CurrentDay', 'PastMonth', 'CurrentMonth', 'PastQuarter', 'CurrentQuarter', 'Last14Days', 'Last21Days', 'Last30Days', 'Last7Days', 'Last3Days', 'Last1Days')][string] $DateRange,
+        [ValidateSet('WhenCreated', 'WhenChanged')][string[]] $DateProperty = 'WhenCreated',
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    Begin {
+        $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    }
+    Process {
+        foreach ($Domain in $ForestInformation.Domains) {
+            if ($PSCmdlet.ParameterSetName -eq 'GPOGUID') {
+                if ($GPOGuid) {
+                    if ($GPOGUID -notlike '*{*') {
+                        $GUID = -join ("{", $GPOGUID, '}')
+                    } else {
+                        $GUID = $GPOGUID
+                    }
+                    $Splat = @{
+                        Filter = "(objectClass -eq 'groupPolicyContainer') -and (Name -eq '$GUID')"
+                        Server = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                    }
+                } else {
+                    Write-Warning "Get-GPOZaurrRedirect - GPOGUID parameter is empty. Provide name and try again."
+                    continue
+                }
+            } elseif ($PSCmdlet.ParameterSetName -eq 'GPOName') {
+                if ($GPOName) {
+                    $Splat = @{
+                        Filter = "(objectClass -eq 'groupPolicyContainer') -and (DisplayName -eq '$GPOName')"
+                        Server = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                    }
+                } else {
+                    Write-Warning "Get-GPOZaurrRedirect - GPOName parameter is empty. Provide name and try again."
+                    continue
+                }
+            } else {
+                $Splat = @{
+                    Filter = "(objectClass -eq 'groupPolicyContainer')"
+                    Server = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                }
+            }
+            # allows to only get GPOs from a specific date range
+            if ($PSBoundParameters.ContainsKey('DateRange')) {
+                $Dates = Get-ChoosenDates -DateRange $DateRange
+                $DateFrom = $($Dates.DateFrom)
+                $DateTo = $($Dates.DateTo)
+
+                if ($DateProperty -contains 'WhenChanged' -and $DateProperty -contains 'WhenCreated') {
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ((WhenChanged -ge $DateFrom -and WhenChanged -le $DateTo) -or (WhenCreated -ge $DateFrom -and WhenCreated -le $DateTo))')
+                } elseif ($DateProperty -eq 'WhenChanged' -or $DateProperty -eq 'WhenCreated') {
+                    $Property = $DateProperty[0]
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ($Property -ge $DateFrom -and $Property -le $DateTo)')
+                } else {
+                    Write-Warning -Message "Get-GPOZaurrRedirect - DateProperty parameter is empty. Provide name and try again."
+                    continue
+                }
+            } elseif ($PSBoundParameters.ContainsKey('DateFrom') -and $PSBoundParameters.ContainsKey('DateTo')) {
+                # already set $DateFrom,DateTo
+                #$Splat['Filter'] = -join ($Splat['Filter'], '-and ($DateProperty -ge $DateFrom -and $DateProperty -le $DateTo)')
+                if ($DateProperty -contains 'WhenChanged' -and $DateProperty -contains 'WhenCreated') {
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ((WhenChanged -ge $DateFrom -and WhenChanged -le $DateTo) -or (WhenCreated -ge $DateFrom -and WhenCreated -le $DateTo))')
+                } elseif ($DateProperty -eq 'WhenChanged' -or $DateProperty -eq 'WhenCreated') {
+                    $Property = $DateProperty[0]
+                    $Splat['Filter'] = -join ($Splat['Filter'], ' -and ($Property -ge $DateFrom -and $Property -le $DateTo)')
+                } else {
+                    Write-Warning -Message "Get-GPOZaurrRedirect - DateProperty parameter is empty. Provide name and try again."
+                    continue
+                }
+            } else {
+                # not needed
+            }
+
+            Write-Verbose -Message "Get-GPOZaurrRedirect - Searching domain $Domain with filter $($Splat['Filter'])"
+            $Objects = Get-ADObject @Splat -Properties DisplayName, Name, Created, Modified, ntSecurityDescriptor, gPCFileSysPath, gPCFunctionalityVersion, gPCWQLFilter, gPCMachineExtensionNames, Description, CanonicalName, DistinguishedName
+            foreach ($Object in $Objects) {
+                $DomainCN = ConvertFrom-DistinguishedName -DistinguishedName $Object.DistinguishedName -ToDomainCN
+                $GUID = $Object.Name -replace '{' -replace '}'
+                if (($GUID).Length -ne 36) {
+                    Write-Warning "Get-GPOZaurrRedirect - GPO GUID ($($($GUID.Replace("`n",' ')))) is incorrect. Skipping $($Object.DisplayName) / Domain: $($DomainCN)"
+                } else {
+                    $Path = $Object.gPCFileSysPath
+                    $ExpectedPath = "\\$($DomainCN)\SYSVOL\$($DomainCN)\Policies\{$($GUID)}"
+                    $Compare = if ($Path -eq $ExpectedPath) { $true } else { $false }
+                    [PSCustomObject]@{
+                        'DisplayName'                = $Object.DisplayName
+                        'DomainName'                 = $DomainCN
+                        'Description'                = $Object.Description
+                        'IsCorrect'                  = $Compare
+                        'GUID'                       = $GUID
+                        'Path'                       = $Path
+                        'ExpectedPath'               = $ExpectedPath
+                        #$Output['FunctionalityVersion'] = $Object.gPCFunctionalityVersion
+                        'Created'                    = $Object.Created
+                        'Modified'                   = $Object.Modified
+                        'Owner'                      = $Object.ntSecurityDescriptor.Owner
+                        'GPOCanonicalName'           = $Object.CanonicalName
+                        'GPODomainDistinguishedName' = ConvertFrom-DistinguishedName -DistinguishedName $Object.DistinguishedName -ToDC
+                        'GPODistinguishedName'       = $Object.DistinguishedName
+                    }
+                }
+            }
+        }
+    }
+    End {
+
+    }
+}

Public/Get-GPOZaurrUpdates.ps1

@@ -14,7 +14,7 @@
 
     .PARAMETER IncludeDomains
     Include only specific domains, by default whole forest is scanned
-ą
+
     .PARAMETER DateFrom
     Provide a date from which to start the search, by default the last X days are used
 

Public/Invoke-GPOZaurr.ps1

@@ -195,20 +195,14 @@
         }
     }
 
-    if ( -not $SplitReports) {
+    if (-not $SplitReports) {
         # Generate pretty HTML
         $TimeLogHTML = Start-TimeLog
         if (-not $FilePath) {
             $FilePath = Get-FileName -Extension 'html' -Temporary
         }
 
-        # Split reports are handled above so we skip if this was set
-        if ($Type.Count -gt 1) {
-            New-HTMLReportAll -FilePath $FilePath -Online:$Online -HideHTML:$HideHTML -Type $Type
-        } else {
-            New-HTMLReportWithSplit -FilePath $FilePath -Online:$Online -HideHTML:$HideHTML
-        }
-
+        New-HTMLReportAll -FilePath $FilePath -Online:$Online -HideHTML:$HideHTML -Type $Type
 
         $TimeLogEndHTML = Stop-TimeLog -Time $TimeLogHTML -Option OneLiner
         Write-Color -Text '[i]', '[HTML ] ', 'Generating HTML report', " [Time to execute: $TimeLogEndHTML]" -Color Yellow, DarkGray, Yellow, DarkGray

Public/Remove-GPOZaurr.ps1

@@ -22,11 +22,11 @@
                 $BackupFinalPath = $BackupPath
             }
             Write-Verbose "Remove-GPOZaurr - Backing up to $BackupFinalPath"
-            $null = New-Item -ItemType Directory -Path $BackupFinalPath -Force
+            $null = New-Item -ItemType Directory -Path $BackupFinalPath -Force -WhatIf:$false
         } else {
             $BackupRequired = $false
         }
-        $Count = 0
+        $CountProcessedGPO = 0
     }
     Process {
         $getGPOZaurrSplat = @{
@@ -39,6 +39,11 @@
         }
 
         Get-GPOZaurr @getGPOZaurrSplat | ForEach-Object {
+            if ($LimitProcessing -ne 0 -and $CountProcessedGPO -ge $LimitProcessing) {
+                Write-Warning -Message "Remove-GPOZaurr - LimitProcessing ($CountProcessedGPO / $LimitProcessing) reached. Stopping processing"
+                break
+            }
+
             $DeleteRequired = $false
 
             if ($Type -contains 'Empty') {
@@ -89,10 +94,7 @@
                         Write-Warning "Remove-GPOZaurr - Removing GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
                     }
                 }
-                $Count++
-                if ($LimitProcessing -eq $Count) {
-                    break
-                }
+                $CountProcessedGPO++
             }
         }
     }