Updates to all commands

Update to psd1
Updates to examples
2026-07-26 20:00:09 +00:00 · 2020-04-21 09:11:37 +02:00 · 2020-04-21 09:11:12 +02:00 · 2020-04-21 09:10:48 +02:00 · 2020-04-19 16:38:29 +02:00 · 2020-04-19 16:36:41 +02:00
59 changed files with 4134 additions and 179 deletions
@@ -0,0 +1,214 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Backup-GPOZaurr
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Backup-GPOZaurr [[-LimitProcessing] <Int32>] [[-Type] <String[]>] [[-Forest] <String>]
+ [[-ExcludeDomains] <String[]>] [[-IncludeDomains] <String[]>] [[-ExtendedForestInformation] <IDictionary>]
+ [[-GPOPath] <String[]>] [[-BackupPath] <String>] [-BackupDated] [-WhatIf] [-Confirm] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -BackupDated
+{{ Fill BackupDated Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -BackupPath
+{{ Fill BackupPath Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 7
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Confirm
+Prompts you for confirmation before running the cmdlet.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: cf
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOPath
+{{ Fill GPOPath Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 6
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -LimitProcessing
+{{ Fill LimitProcessing Description }}
+
+```yaml
+Type: Int32
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Type
+{{ Fill Type Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+Accepted values: All, Empty, Unlinked
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -WhatIf
+Shows what would happen if the cmdlet runs.
+The cmdlet is not run.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: wi
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,197 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Get-GPOZaurr
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Get-GPOZaurr [[-GPOName] <String>] [[-GPOGuid] <String>] [[-Forest] <String>] [[-ExcludeDomains] <String[]>]
+ [[-IncludeDomains] <String[]>] [[-ExtendedForestInformation] <IDictionary>] [[-GPOPath] <String[]>]
+ [-PermissionsOnly] [-OwnerOnly] [-Limited] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOGuid
+{{ Fill GPOGuid Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: GUID, GPOID
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOName
+{{ Fill GPOName Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOPath
+{{ Fill GPOPath Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 6
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Limited
+{{ Fill Limited Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -OwnerOnly
+{{ Fill OwnerOnly Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -PermissionsOnly
+{{ Fill PermissionsOnly Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,60 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Get-GPOZaurrBackupInformation
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Get-GPOZaurrBackupInformation [[-BackupFolder] <String[]>] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -BackupFolder
+{{ Fill BackupFolder Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,152 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Get-GPOZaurrLink
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Get-GPOZaurrLink [[-ADObject] <ADObject[]>] [-Limited] [[-GPOCache] <IDictionary>] [[-Forest] <String>]
+ [[-ExcludeDomains] <String[]>] [[-IncludeDomains] <String[]>] [[-ExtendedForestInformation] <IDictionary>]
+ [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -ADObject
+{{ Fill ADObject Description }}
+
+```yaml
+Type: ADObject[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: True (ByPropertyName, ByValue)
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOCache
+{{ Fill GPOCache Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Limited
+{{ Fill Limited Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### Microsoft.ActiveDirectory.Management.ADObject[]
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,121 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Get-GPOZaurrPassword
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Get-GPOZaurrPassword [[-Forest] <String>] [[-ExcludeDomains] <String[]>] [[-IncludeDomains] <String[]>]
+ [[-ExtendedForestInformation] <IDictionary>] [[-GPOPath] <String[]>] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOPath
+{{ Fill GPOPath Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,280 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Get-GPOZaurrPermission
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+### GPO (Default)
+```
+Get-GPOZaurrPermission [-Type <String[]>] [-SkipWellKnown] [-SkipAdministrative] [-ResolveAccounts]
+ [-IncludeOwner] [-IncludePermissionType <GPPermissionType[]>] [-ExcludePermissionType <GPPermissionType[]>]
+ [-IncludeGPOObject] [-Forest <String>] [-ExcludeDomains <String[]>] [-IncludeDomains <String[]>]
+ [-ExtendedForestInformation <IDictionary>] [<CommonParameters>]
+```
+
+### GPOName
+```
+Get-GPOZaurrPermission [-GPOName <String>] [-Type <String[]>] [-SkipWellKnown] [-SkipAdministrative]
+ [-ResolveAccounts] [-IncludeOwner] [-IncludePermissionType <GPPermissionType[]>]
+ [-ExcludePermissionType <GPPermissionType[]>] [-IncludeGPOObject] [-Forest <String>]
+ [-ExcludeDomains <String[]>] [-IncludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>]
+ [<CommonParameters>]
+```
+
+### GPOGUID
+```
+Get-GPOZaurrPermission [-GPOGuid <String>] [-Type <String[]>] [-SkipWellKnown] [-SkipAdministrative]
+ [-ResolveAccounts] [-IncludeOwner] [-IncludePermissionType <GPPermissionType[]>]
+ [-ExcludePermissionType <GPPermissionType[]>] [-IncludeGPOObject] [-Forest <String>]
+ [-ExcludeDomains <String[]>] [-IncludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>]
+ [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludePermissionType
+{{ Fill ExcludePermissionType Description }}
+
+```yaml
+Type: GPPermissionType[]
+Parameter Sets: (All)
+Aliases:
+Accepted values: None, GpoApply, GpoRead, GpoEdit, GpoEditDeleteModifySecurity, GpoCustom, WmiFilterEdit, WmiFilterFullControl, WmiFilterCustom, StarterGpoRead, StarterGpoEdit, StarterGpoFullControl, StarterGpoCustom, SomCreateWmiFilter, SomWmiFilterFullControl, SomCreateGpo, SomCreateStarterGpo, SomLogging, SomPlanning, SomLink
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOGuid
+{{ Fill GPOGuid Description }}
+
+```yaml
+Type: String
+Parameter Sets: GPOGUID
+Aliases: GUID, GPOID
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOName
+{{ Fill GPOName Description }}
+
+```yaml
+Type: String
+Parameter Sets: GPOName
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeGPOObject
+{{ Fill IncludeGPOObject Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeOwner
+{{ Fill IncludeOwner Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludePermissionType
+{{ Fill IncludePermissionType Description }}
+
+```yaml
+Type: GPPermissionType[]
+Parameter Sets: (All)
+Aliases:
+Accepted values: None, GpoApply, GpoRead, GpoEdit, GpoEditDeleteModifySecurity, GpoCustom, WmiFilterEdit, WmiFilterFullControl, WmiFilterCustom, StarterGpoRead, StarterGpoEdit, StarterGpoFullControl, StarterGpoCustom, SomCreateWmiFilter, SomWmiFilterFullControl, SomCreateGpo, SomCreateStarterGpo, SomLogging, SomPlanning, SomLink
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ResolveAccounts
+{{ Fill ResolveAccounts Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -SkipAdministrative
+{{ Fill SkipAdministrative Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -SkipWellKnown
+{{ Fill SkipWellKnown Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Type
+{{ Fill Type Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+Accepted values: Unknown, All
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,136 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Get-GPOZaurrWMI
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Get-GPOZaurrWMI [[-Guid] <Guid[]>] [[-Name] <String[]>] [[-Forest] <String>] [[-ExcludeDomains] <String[]>]
+ [[-IncludeDomains] <String[]>] [[-ExtendedForestInformation] <IDictionary>] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Guid
+{{ Fill Guid Description }}
+
+```yaml
+Type: Guid[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Name
+{{ Fill Name Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,213 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# New-GPOZaurrWMI
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+New-GPOZaurrWMI [-Name] <String> [[-Description] <String>] [-Query] <String> [-SkipQueryCheck] [-Force]
+ [[-Forest] <String>] [[-ExcludeDomains] <String[]>] [[-IncludeDomains] <String[]>]
+ [[-ExtendedForestInformation] <IDictionary>] [-WhatIf] [-Confirm] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -Confirm
+Prompts you for confirmation before running the cmdlet.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: cf
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Description
+{{ Fill Description Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 6
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Force
+{{ Fill Force Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Name
+{{ Fill Name Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: True
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Query
+{{ Fill Query Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: True
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -SkipQueryCheck
+{{ Fill SkipQueryCheck Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -WhatIf
+Shows what would happen if the cmdlet runs.
+The cmdlet is not run.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: wi
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,52 @@
+---
+Module Name: GPOZaurr
+Module Guid: f7d4c9e4-0298-4f51-ad77-e8e3febebbde
+Download Help Link: {{ Update Download Link }}
+Help Version: {{ Please enter version of help manually (X.X.X.X) format }}
+Locale: en-US
+---
+
+# GPOZaurr Module
+## Description
+{{ Fill in the Description }}
+
+## GPOZaurr Cmdlets
+### [Backup-GPOZaurr](Backup-GPOZaurr.md)
+{{ Fill in the Description }}
+
+### [Get-GPOZaurr](Get-GPOZaurr.md)
+{{ Fill in the Description }}
+
+### [Get-GPOZaurrBackupInformation](Get-GPOZaurrBackupInformation.md)
+{{ Fill in the Description }}
+
+### [Get-GPOZaurrLink](Get-GPOZaurrLink.md)
+{{ Fill in the Description }}
+
+### [Get-GPOZaurrPassword](Get-GPOZaurrPassword.md)
+{{ Fill in the Description }}
+
+### [Get-GPOZaurrPermission](Get-GPOZaurrPermission.md)
+{{ Fill in the Description }}
+
+### [Get-GPOZaurrWMI](Get-GPOZaurrWMI.md)
+{{ Fill in the Description }}
+
+### [New-GPOZaurrWMI](New-GPOZaurrWMI.md)
+{{ Fill in the Description }}
+
+### [Remove-GPOZaurr](Remove-GPOZaurr.md)
+{{ Fill in the Description }}
+
+### [Remove-GPOZaurrWMI](Remove-GPOZaurrWMI.md)
+{{ Fill in the Description }}
+
+### [Restore-GPOZaurr](Restore-GPOZaurr.md)
+{{ Fill in the Description }}
+
+### [Save-GPOZaurrFiles](Save-GPOZaurrFiles.md)
+{{ Fill in the Description }}
+
+### [Set-GPOZaurrOwner](Set-GPOZaurrOwner.md)
+{{ Fill in the Description }}
+
@@ -0,0 +1,214 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Remove-GPOZaurr
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Remove-GPOZaurr [-Type] <String[]> [[-LimitProcessing] <Int32>] [[-Forest] <String>]
+ [[-ExcludeDomains] <String[]>] [[-IncludeDomains] <String[]>] [[-ExtendedForestInformation] <IDictionary>]
+ [[-GPOPath] <String[]>] [[-BackupPath] <String>] [-BackupDated] [-WhatIf] [-Confirm] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -BackupDated
+{{ Fill BackupDated Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -BackupPath
+{{ Fill BackupPath Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 7
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Confirm
+Prompts you for confirmation before running the cmdlet.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: cf
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOPath
+{{ Fill GPOPath Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 6
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -LimitProcessing
+{{ Fill LimitProcessing Description }}
+
+```yaml
+Type: Int32
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Type
+{{ Fill Type Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+Accepted values: Empty, Unlinked
+
+Required: True
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -WhatIf
+Shows what would happen if the cmdlet runs.
+The cmdlet is not run.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: wi
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,168 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Remove-GPOZaurrWMI
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Remove-GPOZaurrWMI [[-Guid] <Guid[]>] [[-Name] <String[]>] [[-Forest] <String>] [[-ExcludeDomains] <String[]>]
+ [[-IncludeDomains] <String[]>] [[-ExtendedForestInformation] <IDictionary>] [-WhatIf] [-Confirm]
+ [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -Confirm
+Prompts you for confirmation before running the cmdlet.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: cf
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 5
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Guid
+{{ Fill Guid Description }}
+
+```yaml
+Type: Guid[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Name
+{{ Fill Name Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -WhatIf
+Shows what would happen if the cmdlet runs.
+The cmdlet is not run.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: wi
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,121 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Restore-GPOZaurr
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Restore-GPOZaurr [-BackupFolder] <String> [[-DisplayName] <String>] [[-NewDisplayName] <String>]
+ [[-Domain] <String>] [-SkipBackupSummary] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -BackupFolder
+{{ Fill BackupFolder Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: True
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -DisplayName
+{{ Fill DisplayName Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: Name
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Domain
+{{ Fill Domain Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -NewDisplayName
+{{ Fill NewDisplayName Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -SkipBackupSummary
+{{ Fill SkipBackupSummary Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,136 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Save-GPOZaurrFiles
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Save-GPOZaurrFiles [[-Forest] <String>] [[-ExcludeDomains] <String[]>] [[-IncludeDomains] <String[]>]
+ [[-ExtendedForestInformation] <IDictionary>] [[-GPOPath] <String[]>] [-DeleteExisting] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -DeleteExisting
+{{ Fill DeleteExisting Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 1
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 3
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: 0
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOPath
+{{ Fill GPOPath Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: 4
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: 2
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,222 @@
+---
+external help file: GPOZaurr-help.xml
+Module Name: GPoZaurr
+online version:
+schema: 2.0.0
+---
+
+# Set-GPOZaurrOwner
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+### Type (Default)
+```
+Set-GPOZaurrOwner -Type <String[]> [-Forest <String>] [-ExcludeDomains <String[]>] [-IncludeDomains <String[]>]
+ [-ExtendedForestInformation <IDictionary>] [-LimitProcessing <Int32>] [-WhatIf] [-Confirm]
+ [<CommonParameters>]
+```
+
+### Named
+```
+Set-GPOZaurrOwner [-GPOName <String>] [-GPOGuid <String>] [-Forest <String>] [-ExcludeDomains <String[]>]
+ [-IncludeDomains <String[]>] [-ExtendedForestInformation <IDictionary>] -Principal <String>
+ [-LimitProcessing <Int32>] [-WhatIf] [-Confirm] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -Confirm
+Prompts you for confirmation before running the cmdlet.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: cf
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExcludeDomains
+{{ Fill ExcludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExtendedForestInformation
+{{ Fill ExtendedForestInformation Description }}
+
+```yaml
+Type: IDictionary
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Forest
+{{ Fill Forest Description }}
+
+```yaml
+Type: String
+Parameter Sets: (All)
+Aliases: ForestName
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOGuid
+{{ Fill GPOGuid Description }}
+
+```yaml
+Type: String
+Parameter Sets: Named
+Aliases: GUID, GPOID
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -GPOName
+{{ Fill GPOName Description }}
+
+```yaml
+Type: String
+Parameter Sets: Named
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IncludeDomains
+{{ Fill IncludeDomains Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases: Domain, Domains
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -LimitProcessing
+{{ Fill LimitProcessing Description }}
+
+```yaml
+Type: Int32
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Principal
+{{ Fill Principal Description }}
+
+```yaml
+Type: String
+Parameter Sets: Named
+Aliases:
+
+Required: True
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -Type
+{{ Fill Type Description }}
+
+```yaml
+Type: String[]
+Parameter Sets: Type
+Aliases:
+Accepted values: EmptyOrUnknown, NonAdministrative
+
+Required: True
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -WhatIf
+Shows what would happen if the cmdlet runs.
+The cmdlet is not run.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases: wi
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS
@@ -0,0 +1,24 @@
+$GPPermissions = [ordered] @{
+    GpoApply                    = 'The trustee can apply the GPO; corresponds to the READ and APPLY Group Policy access rights being set to "Allow" for a user.'
+    GpoCustom                   = 'The trustee has custom permissions for the GPO.'
+    GpoEdit                     = 'The trustee can read and edit the policy settings for the GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user.'
+    GpoEditDeleteModifySecurity = 'The trustee can read, edit and delete the permissions for the GPO; corresponds to the Group Policy access rights specified by GpoEdit plus the DELETE, MODIFY PERMISSIONS, and MODIFY OWNER access rights set to "Allow" for a user.'
+    GpoRead                     = 'The trustee can read the GPO; corresponds to the READ Group Policy access right set to "Allow" for a user.'
+    None                        = 'This value is reserved for internal use by the Group Policy Windows PowerShell cmdlets.'
+    SomCreateGpo                = 'The trustee can create GPOs in the domain. Applies to domains only.'
+    SomCreateStarterGpo         = 'The trustee can create Starter GPOs in the domain. Applies to domains only.'
+    SomCreateWmiFilter          = 'The trustee can create WMI filters in the domain. Applies to domains only.'
+    SomLink                     = 'The trustee can link GPOs to the SOM. Applies to sites, domains and OUs.'
+    SomLogging                  = 'The trustee can generate RSoP logging data for the SOM. Applies to domains and OUs.'
+    SomPlanning                 = 'The trustee can generate RSoP planning data for the SOM. Applies to domains and OUs.'
+    SomWmiFilterFullControl     = 'The trustee has full control over all WMI filters in the domain. Applies to domains only.'
+    StarterGpoCustom            = 'The trustee has custom permissions for the Starter GPO.'
+    StarterGpoEdit              = 'The trustee can read and edit the administrative template policy settings for the Starter GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user.'
+    StarterGpoFullControl       = 'The trustee has full control for the Starter GPO. Applies to domains only.'
+    StarterGpoRead              = 'The trustee can read the Starter GPO; corresponds to the READ Group Policy access right set to "Allow" for a user.'
+    WmiFilterCustom             = 'The trustee has custom permissions for the WMI filter.'
+    WmiFilterEdit               = 'The trustee can edit the WMI filter.'
+    WmiFilterFullControl        = 'The trustee has full control over the WMI filter.'
+}
+
+$GPPermissions | Format-Table
@@ -0,0 +1,9 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# Backup GPOs
+$BackupPath = "$Env:UserProfile\Desktop\GPO"
+$GPOSummary = Backup-GPOZaurr -BackupPath $BackupPath -Verbose -Type Unlinked -BackupDated #-LimitProcessing 1
+$GPOSummary | Format-Table -AutoSize
+
+# Confirm GPOs are backed up properly
+Get-GPOZaurrBackupInformation -BackupFolder $GPOSummary[0].BackupDirectory | Format-Table -a
@@ -0,0 +1,5 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# Remove GPOS
+$BackupPath = "$Env:UserProfile\Desktop\GPO"
+Remove-GPOZaurr -Type Empty, Unlinked -BackupPath $BackupPath -BackupDated -LimitProcessing 2 -Verbose
@@ -0,0 +1,14 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$RestoreFrom = 'C:\Users\przemyslaw.klys\Desktop\GPO\2020-04-20_15_51_00'
+
+$BackupInformation = Get-GPOZaurrBackupInformation -BackupFolder $RestoreFrom
+$BackupInformation | Format-Table -a
+
+# restore all gpos
+$RestoredGPOs = Restore-GPOZaurr -BackupFolder $RestoreFrom -Verbose
+$RestoredGPOs | Format-Table -AutoSize
+
+# restore just one Gpo
+#$RestoredGPOs = Restore-GPOZaurr -BackupFolder $RestoreFrom -Verbose -DisplayName 'Users | Synced Office 365 Users'
+#$RestoredGPOs | Format-Table -AutoSize
@@ -0,0 +1,12 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$GPOS = Get-GPOZaurr
+$GPOS | Format-Table -AutoSize
+
+$GPOS[0] | Format-List
+
+$GPOs[0].ACL | Format-Table -AutoSize
+
+$GPOs.Links | Format-Table -AutoSize
+
+$GPOS | Format-Table -AutoSize DisplayName, WmiFilter, WMIDescription
@@ -0,0 +1,3 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Get-GPOZaurrWMI | Format-Table -AutoSize *
@@ -0,0 +1,7 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# By default it deletes WMI filter in $Env:USERDNSDOMAIN if no Forest/IncludeDomains/ExcludeDomains are specified
+Remove-GPOZaurrWMI -Name 'Test' -WhatIf
+
+# If we want to remove it from all domains within forest
+Remove-GPOZaurrWMI -Name 'Test' -Forest 'ad.evotec.xyz' -WhatIf
@@ -0,0 +1,10 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# By default it creates WMI filter in $Env:USERDNSDOMAIN if no Forest/IncludeDomains/ExcludeDomains are specified
+New-GPOZaurrWMI -Query 'select * from Win32_OperatingSystem where Version like "6.0%" and ProductType = "3"' -Name 'Test' -Verbose #-Force
+
+# If you want to force creation of same filter in all domains of a forest (this overwrites set value)
+#New-GPOZaurrWMI -Query 'select * from Win32_OperatingSystem where Version like "6.0%" and ProductType = "3"' -Name 'Test' -Verbose -Forest 'ad.evotec.xyz' -WhatIf
+
+# this will target different forest
+#New-GPOZaurrWMI -Query 'select * from Win32_OperatingSystem where Version like "6.0%" and ProductType = "3"' -Name 'Test' -Verbose -Forest 'test.evotec.pl' -WhatIf
@@ -0,0 +1,7 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$T = Get-GPOZaurrPermission -GPOName 'DC | PowerShell Logging' -Type Unknown
+
+#$T = Get-GPOZaurrPermission -ResolveAccounts -IncludeOwner #-ExcludePermissionType GpoRead,GpoApply #-Type All #-SkipWellKnown -SkipAdministrative # -ExcludePermissionType GpoRead,GpoApply #| Out-HtmlView
+$T | Format-Table -AutoSize *
+#$T | Out-HtmlView -ScrollX -Filtering -Online -DisablePaging
@@ -0,0 +1,4 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+$T | Format-Table -AutoSize *
@@ -0,0 +1,3 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Remove-GPOZaurrPermission -Verbose -Type Unknown -WhatIf
@@ -0,0 +1,13 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$Named = @(
+    'S-1-5-21-853615985-2870445339-3163598659-1105'
+)
+
+# Using exclude permission types (it may not be good idea to delete GPORead/GPOApply)
+#Remove-GPOZaurrPermission -Verbose -Type Named -WhatIf -LimitProcessing 2 -NamedObjects $Named -ExcludePermissionType GpoRead,GpoApply
+
+# But
+#Remove-GPOZaurrPermission -Type Named -NamedObjects $Named -IncludePermissionType GpoEditDeleteModifySecurity -SkipWellKnown -SkipAdministrative -Verbose -WhatIf
+
+Remove-GPOZaurrPermission -Type Named -NamedObjects $Named -SkipWellKnown -SkipAdministrative -Verbose #-WhatIf
@@ -0,0 +1,13 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# This Example shows how to deal with GPOs that have owner that doesn't exists anymore (deleted userr or diff domain) - EmptyOrUnknown
+# And also can fix at the same time NonAdministrative - this basically looks for users/groups that are not Domain Admins or Enterprise Admins
+# regardless if current user is still Domain Admin or not
+
+$GPOs = Get-GPOZaurr #-GPOName 'New Group Policy Object'
+$GPOs | Format-Table DisplayName, Owner, OwnerSID, OwnerType
+
+Set-GPOZaurrOwner -Type 'EmptyOrUnknown' -Verbose -LimitProcessing 1 -WhatIf
+
+$GPOs = Get-GPOZaurr #-GPOName 'New Group Policy Object'
+$GPOs | Format-Table DisplayName, Owner, OwnerSID
@@ -0,0 +1,22 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# You can set owner per guid if you want to have more control.
+$LImitProcessing = 2
+
+# check what is there now
+$GPOs = Get-GPOZaurr #-GPOName 'New Group Policy Object'
+$GPOs | Format-Table DisplayName, Owner, OwnerSID
+$Count = 0
+
+# loop thru all GPOS (or use LimitProcessing)
+foreach ($GPO in $GPOS) {
+    $Count++
+    Set-GPOZaurrOwner -GPOID $GPO.GUID -Verbose -Principal 'przemyslaw.klys@evotec.pl' #-WhatIf
+    if ($Count -eq $LImitProcessing) {
+        break
+    }
+}
+
+# Confirm what changed
+$GPOs = Get-GPOZaurr #-GPOName 'New Group Policy Object'
+$GPOs | Format-Table DisplayName, Owner, OwnerSID
@@ -0,0 +1,15 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# this example shows how to replace owner of a single GPO
+
+$GPOs = Get-GPOZaurr #-GPOName 'New Group Policy Object'
+$GPOs | Format-Table DisplayName, Owner, OwnerSID, OwnerType
+
+# If Principal is not provided Domain Admins are set as default principal
+Set-GPOZaurrOwner -GPOName 'ALL | Enable RDP' -WhatIf
+
+# If principal is given it is set (of course if it exits). Otherwise warning is returned.
+Set-GPOZaurrOwner -GPOName 'ALL | Enable RDP' -Principal 'przemyslaw.klys' #-WhatIf
+
+$GPOs = Get-GPOZaurr #-GPOName 'New Group Policy Object'
+$GPOs | Format-Table DisplayName, Owner, OwnerSID, OwnerType
@@ -0,0 +1,9 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$GPOS = Get-GPOZaurr -PermissionsOnly
+# to screen
+$GPOS | Format-Table -AutoSize
+# to html
+#$GPOS | Out-HtmlView
+# to excel
+#$GPOS | ConvertTo-Excel -FilePath $Env:UserProfile\Desktop\GPOExport.xlsx -ExcelWorkSheetName 'Permissions' -AutoFit -AutoFilter
@@ -0,0 +1,4 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$Owners = Get-GPOZaurr -OwnerOnly
+$Owners | Format-Table
@@ -0,0 +1,3 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Get-GPOZaurrLink | Format-Table -AutoSize
@@ -0,0 +1,7 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Get-GPOZaurrLink -SearchBase 'OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz' | Format-Table -AutoSize
+
+Get-GPOZaurrLink -SearchBase 'OU=Computers,OU=Production,DC=ad,DC=evotec,DC=xyz' | Format-Table -AutoSize
+
+Get-GPOZaurrLink -SearchBase 'DC=ad,DC=evotec,DC=xyz' -SearchScope Base | Format-Table -AutoSize
@@ -0,0 +1,5 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Get-ADOrganizationalUnit -Filter * -Properties distinguishedName, LinkedGroupPolicyObjects | Get-GPOZaurrLink | Format-Table
+Get-ADObject -Filter * -Properties distinguishedName, gplink -Server 'ad.evotec.pl' | Get-GPOZaurrLink | Format-Table -AutoSize
+Get-GPOZaurrLink | Format-Table -AutoSize
@@ -0,0 +1,3 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Get-GPOZaurrLink | Format-Table -AutoSize
@@ -0,0 +1,17 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Clear-Host
+
+$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-IncludeGPOObject #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+$T | Format-Table -AutoSize *
+
+Add-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoApply -Principal 'przemyslaw.klys' -Verbose
+
+$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+$T | Format-Table -AutoSize *
+
+Add-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoEditDeleteModifySecurity -Principal 'Domain Admins' -Verbose
+Remove-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoApply -Principal 'przemyslaw.klys' -PrincipalType Name -Verbose
+
+$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+$T | Format-Table -AutoSize *
@@ -0,0 +1,19 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Clear-Host
+
+$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-IncludeGPOObject #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+$T | Format-Table -AutoSize *
+
+Add-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoEditDeleteModifySecurity -Principal 'Domain Admins' -Verbose
+Add-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoApply -Principal 'przemyslaw.klys' -Verbose
+Add-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoEditDeleteModifySecurity -Principal 'przemyslaw.klys' -Verbose
+Add-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoEdit -Principal 'przemyslaw.klys' -Verbose
+
+$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+$T | Format-Table -AutoSize *
+
+#Remove-GPOZaurrPermission -GPOName 'ALL | Enable RDP' -PermissionType GpoApply -Principal 'przemyslaw.klys' -PrincipalType Name -Verbose
+
+#$T = Get-GPOZaurrPermission -GPOName 'ALL | Enable RDP' #-ExcludePermissionType GpoApply,GpoRead -IncludeGPOObject
+#$T | Format-Table -AutoSize *
@@ -1,122 +1,29 @@
-#
-# Module manifest for module 'GPOZaurr'
-#
-# Generated by: Przemyslaw Klys
-#
-# Generated on: 24.02.2020
-#
-
-@{
-
-    # Script module or binary module file associated with this manifest.
-    RootModule           = 'GPOZaurr.psm1'
-
-    # Version number of this module.
-    ModuleVersion        = '0.0.4'
-
-    # Supported PSEditions
-    CompatiblePSEditions = 'Desktop'
-
-    # ID used to uniquely identify this module
-    GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-
-    # Author of this module
+@{
+    AliasesToExport      = ''
    Author               = 'Przemyslaw Klys'
-
-    # Company or vendor of this module
    CompanyName          = 'Evotec'
-
-    # Copyright statement for this module
+    CompatiblePSEditions = 'Desktop'
    Copyright            = '(c) 2011 - 2020 Przemyslaw Klys @ Evotec. All rights reserved.'
-
-    # Description of the functionality provided by this module
    Description          = 'Group Policy Eater'
-
-    # Minimum version of the Windows PowerShell engine required by this module
+    FunctionsToExport    = 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Get-GPOZaurr', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrLink', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrWMI', 'New-GPOZaurrWMI', 'Remove-GPOZaurr', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOZaurrOwner'
+    GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
+    ModuleVersion        = '0.0.19'
    PowerShellVersion    = '5.1'
-
-    # Name of the Windows PowerShell host required by this module
-    # PowerShellHostName = ''
-
-    # Minimum version of the Windows PowerShell host required by this module
-    # PowerShellHostVersion = ''
-
-    # Minimum version of Microsoft .NET Framework required by this module. This prerequisite is valid for the PowerShell Desktop edition only.
-    # DotNetFrameworkVersion = ''
-
-    # Minimum version of the common language runtime (CLR) required by this module. This prerequisite is valid for the PowerShell Desktop edition only.
-    # CLRVersion = ''
-
-    # Processor architecture (None, X86, Amd64) required by this module
-    # ProcessorArchitecture = ''
-
-    # Modules that must be imported into the global environment prior to importing this module
-    RequiredModules      = @(@{ModuleName = 'PSSharedGoods'; GUID = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe'; ModuleVersion = '0.0.123'; })
-
-    # Assemblies that must be loaded prior to importing this module
-    # RequiredAssemblies = @()
-
-    # Script files (.ps1) that are run in the caller's environment prior to importing this module.
-    # ScriptsToProcess = @()
-
-    # Type files (.ps1xml) to be loaded when importing this module
-    # TypesToProcess = @()
-
-    # Format files (.ps1xml) to be loaded when importing this module
-    # FormatsToProcess = @()
-
-    # Modules to import as nested modules of the module specified in RootModule/ModuleToProcess
-    # NestedModules = @()
-
-    # Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
-    FunctionsToExport    = 'Get-GPOZaurr', 'Get-GPOZaurrPassword', 'Save-GPOZaurrFiles'
-
-    # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
-    CmdletsToExport      = @()
-
-    # Variables to export from this module
-    # VariablesToExport = @()
-
-    # Aliases to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no aliases to export.
-    AliasesToExport      = @()
-
-    # DSC resources to export from this module
-    # DscResourcesToExport = @()
-
-    # List of all modules packaged with this module
-    # ModuleList = @()
-
-    # List of all files packaged with this module
-    # FileList = @()
-
-    # Private data to pass to the module specified in RootModule/ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell.
    PrivateData          = @{
-
        PSData = @{
-
-            # Tags applied to this module. These help with module discovery in online galleries.
-            Tags       = 'Windows', 'ActiveDirectory', 'GPO'
-
-            # A URL to the license for this module.
-            # LicenseUri = ''
-
-            # A URL to the main website for this project.
-            ProjectUri = 'https://github.com/EvotecIT/GPOZaurr'
-
-            # A URL to an icon representing this module.
-            # IconUri = ''
-
-            # ReleaseNotes of this module
-            # ReleaseNotes = ''
-
-        } # End of PSData hashtable
-
-    } # End of PrivateData hashtable
-
-    # HelpInfo URI of this module
-    # HelpInfoURI = ''
-
-    # Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.
-    # DefaultCommandPrefix = ''
-
+            Tags                       = 'Windows', 'ActiveDirectory', 'GPO'
+            ProjectUri                 = 'https://github.com/EvotecIT/GPOZaurr'
+            ExternalModuleDependencies = 'ActiveDirectory', 'GroupPolicy', 'CimCmdlets', 'Microsoft.PowerShell.Management', 'Microsoft.PowerShell.Utility'
+        }
+    }
+    RequiredModules      = @{
+        ModuleVersion = '0.0.135'
+        ModuleName    = 'PSSharedGoods'
+        Guid          = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe'
+    }, @{
+        ModuleVersion = '0.0.48'
+        ModuleName    = 'ADEssentials'
+        Guid          = '9fc9fd61-7f11-4f4b-a527-084086f1905f'
+    }, 'ActiveDirectory', 'GroupPolicy', 'CimCmdlets', 'Microsoft.PowerShell.Management', 'Microsoft.PowerShell.Utility'
+    RootModule           = 'GPOZaurr.psm1'
 }
@@ -0,0 +1,74 @@
+
+function Get-ADADministrativeGroups {
+    <#
+    .SYNOPSIS
+    Short description
+
+    .DESCRIPTION
+    Long description
+
+    .PARAMETER Type
+    Parameter description
+
+    .PARAMETER Forest
+    Parameter description
+
+    .PARAMETER ExcludeDomains
+    Parameter description
+
+    .PARAMETER IncludeDomains
+    Parameter description
+
+    .PARAMETER ExtendedForestInformation
+    Parameter description
+
+    .EXAMPLE
+    Get-ADADministrativeGroups -Type DomainAdmins, EnterpriseAdmins
+
+    Output (Where VALUE is Get-ADGroup output):
+    Name                           Value
+    ----                           -----
+    ByNetBIOS                      {EVOTEC\Domain Admins, EVOTEC\Enterprise Admins, EVOTECPL\Domain Admins}
+    ad.evotec.xyz                  {DomainAdmins, EnterpriseAdmins}
+    ad.evotec.pl                   {DomainAdmins}
+
+    .NOTES
+    General notes
+    #>
+    [cmdletBinding()]
+    param(
+        [parameter(Mandatory)][validateSet('DomainAdmins', 'EnterpriseAdmins')][string[]] $Type,
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    $ADDictionary = [ordered] @{ }
+    $ADDictionary['ByNetBIOS'] = [ordered] @{ }
+    $ADDictionary['BySID'] = [ordered] @{ }
+
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    foreach ($Domain in $ForestInformation.Domains) {
+        $ADDictionary[$Domain] = [ordered] @{ }
+        $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        $DomainInformation = Get-ADDomain -Server $QueryServer
+
+        if ($Type -contains 'DomainAdmins') {
+            Get-ADGroup -Filter "SID -eq '$($DomainInformation.DomainSID)-512'" -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object {
+                $ADDictionary['ByNetBIOS']["$($DomainInformation.NetBIOSName)\$($_.Name)"] = $_
+                $ADDictionary[$Domain]['DomainAdmins'] = "$($DomainInformation.NetBIOSName)\$($_.Name)"
+                $ADDictionary['BySID'][$_.SID.Value] = $_
+            }
+        }
+        if ($Type -contains 'EnterpriseAdmins') {
+            Get-ADGroup -Filter "SID -eq '$($DomainInformation.DomainSID)-519'" -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object {
+                $ADDictionary['ByNetBIOS']["$($DomainInformation.NetBIOSName)\$($_.Name)"] = $_
+                $ADDictionary[$Domain]['EnterpriseAdmins'] = "$($DomainInformation.NetBIOSName)\$($_.Name)"
+                $ADDictionary['BySID'][$_.SID.Value] = $_ #"$($DomainInformation.NetBIOSName)\$($_.Name)"
+            }
+        }
+    }
+    return $ADDictionary
+}
+
+#Get-ADADministrativeGroups -Type DomainAdmins, EnterpriseAdmins
@@ -0,0 +1,53 @@
+function Get-PrivGPOZaurrLink {
+    [cmdletBinding()]
+    param(
+        [Microsoft.ActiveDirectory.Management.ADObject] $Object,
+        [switch] $Limited,
+        [System.Collections.IDictionary] $GPOCache
+    )
+    if ($Object.GpLink -and $Object.GpLink.Trim() -ne '') {
+        $Object.GpLink -split { $_ -eq '[' -or $_ -eq ']' } -replace ';0' -replace 'LDAP://' | ForEach-Object {
+            if ($_) {
+                $Output = [ordered] @{
+                    DistinguishedName = $Object.DistinguishedName
+                    CanonicalName     = $Object.CanonicalName
+                    Guid              = [Regex]::Match( $_, '(?={)(.*)(?<=})').Value -replace '{' -replace '}'
+                }
+                if ($GPOCache -and -not $Limited) {
+                    $Output['Name'] = $GPOCache[$Output['Guid']].DisplayName
+                    $Output['DomainName'] = $GPOCache[$Output['Guid']].DomainName
+                    $Output['Owner'] = $GPOCache[$Output['Guid']].Owner
+                    $Output['GpoStatus'] = $GPOCache[$Output['Guid']].GpoStatus
+                    $Output['Description'] = $GPOCache[$Output['Guid']].Description
+                    $Output['CreationTime'] = $GPOCache[$Output['Guid']].CreationTime
+                    $Output['ModificationTime'] = $GPOCache[$Output['Guid']].ModificationTime
+                }
+                $Output['GPODomainDistinguishedName'] = ConvertFrom-DistinguishedName -DistinguishedName $_ -ToDC
+                $Output['GPOLink'] = $_
+                [PSCustomObject] $Output
+            }
+        }
+    } elseif ($Object.LinkedGroupPolicyObjects -and $Object.LinkedGroupPolicyObjects.Trim() -ne '') {
+        $Object.LinkedGroupPolicyObjects -split { $_ -eq '[' -or $_ -eq ']' } -replace ';0' -replace 'LDAP://' | ForEach-Object {
+            if ($_) {
+                $Output = [ordered] @{
+                    DistinguishedName = $Object.DistinguishedName
+                    CanonicalName     = $Object.CanonicalName
+                    Guid              = [Regex]::Match( $_, '(?={)(.*)(?<=})').Value -replace '{' -replace '}'
+                }
+                if ($GPOCache -and -not $Limited) {
+                    $Output['Name'] = $GPOCache[$Output['Guid']].DisplayName
+                    $Output['DomainName'] = $GPOCache[$Output['Guid']].DomainName
+                    $Output['Owner'] = $GPOCache[$Output['Guid']].Owner
+                    $Output['GpoStatus'] = $GPOCache[$Output['Guid']].GpoStatus
+                    $Output['Description'] = $GPOCache[$Output['Guid']].Description
+                    $Output['CreationTime'] = $GPOCache[$Output['Guid']].CreationTime
+                    $Output['ModificationTime'] = $GPOCache[$Output['Guid']].ModificationTime
+                }
+                $Output['GPODomainDistinguishedName'] = ConvertFrom-DistinguishedName -DistinguishedName $_ -ToDC
+                $Output['GPOLink'] = $_
+                [PSCustomObject] $Output
+            }
+        }
+    }
+}
@@ -0,0 +1,172 @@
+function Get-PrivPermission {
+    [cmdletBinding()]
+    param(
+        [Microsoft.GroupPolicy.Gpo] $GPO,
+        [switch] $SkipWellKnown,
+        [switch] $SkipAdministrative,
+        [switch] $IncludeOwner,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $IncludePermissionType,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $ExcludePermissionType,
+        [switch] $IncludeGPOObject,
+        [System.Collections.IDictionary] $ADAdministrativeGroups,
+        [string[]] $Type,
+        [System.Collections.IDictionary] $Accounts
+    )
+    Write-Verbose "Get-GPOZaurrPermission - Processing $($GPO.DisplayName) from $($GPO.DomainName)"
+    $SecurityRights = $GPO.GetSecurityInfo()
+    $Index = 0
+    $SecurityRights | ForEach-Object -Process {
+        #Get-GPPermissions -Guid $GPO.ID -DomainName $GPO.DomainName -All -Server $QueryServer | ForEach-Object -Process {
+        $GPOPermission = $_
+        if ($ExcludePermissionType -contains $GPOPermission.Permission) {
+            $Index++
+            return
+        }
+        if ($IncludePermissionType) {
+            if ($IncludePermissionType -notcontains $GPOPermission.Permission) {
+                $Index++
+                return
+            }
+        }
+        if ($SkipWellKnown.IsPresent) {
+            if ($GPOPermission.Trustee.SidType -eq 'WellKnownGroup') {
+                $Index++
+                return
+            }
+        }
+        if ($SkipAdministrative.IsPresent) {
+            $IsAdministrative = $ADAdministrativeGroups['BySID'][$GPOPermission.Trustee.Sid.Value]
+            if ($IsAdministrative) {
+                $Index++
+                return
+            }
+        }
+        if ($Type -contains 'Unknown' -and $Type -notcontains 'All') {
+            # May need updates if there's more types
+            if ($GPOPermission.Trustee.SidType -ne 'Unknown') {
+                $Index++
+                return
+            }
+        }
+        $ReturnObject = [ordered] @{
+            DisplayName       = $GPO.DisplayName #      : ALL | Enable RDP
+            GUID              = $GPO.ID
+            DomainName        = $GPO.DomainName  #      : ad.evotec.xyz
+            Enabled           = $GPO.GpoStatus
+            Description       = $GPO.Description
+            CreationDate      = $GPO.CreationTime
+            ModificationTime  = $GPO.ModificationTime
+            Permission        = $GPOPermission.Permission  # : GpoEditDeleteModifySecurity
+            Inherited         = $GPOPermission.Inherited   # : False
+            Domain            = $GPOPermission.Trustee.Domain  #: EVOTEC
+            DistinguishedName = $GPOPermission.Trustee.DSPath  #: CN = Domain Admins, CN = Users, DC = ad, DC = evotec, DC = xyz
+            Name              = $GPOPermission.Trustee.Name    #: Domain Admins
+            Sid               = $GPOPermission.Trustee.Sid.Value     #: S - 1 - 5 - 21 - 853615985 - 2870445339 - 3163598659 - 512
+            SidType           = $GPOPermission.Trustee.SidType #: Group
+        }
+        if ($Accounts) {
+            $A = -join ($GPOPermission.Trustee.Domain, '\', $GPOPermission.Trustee.Name)
+            if ($A -and $Accounts[$A]) {
+                $ReturnObject['UserPrincipalName'] = $Accounts[$A].UserPrincipalName
+                $ReturnObject['AccountEnabled'] = $Accounts[$A].Enabled
+                $ReturnObject['DistinguishedName'] = $Accounts[$A].DistinguishedName
+                $ReturnObject['PasswordLastSet'] = if ($Accounts[$A].PasswordLastSet) { $Accounts[$A].PasswordLastSet } else { '' }
+                $ReturnObject['LastLogonDate'] = if ($Accounts[$A].LastLogonDate ) { $Accounts[$A].LastLogonDate } else { '' }
+                if (-not $ReturnObject['Sid']) {
+                    $ReturnObject['Sid'] = $Accounts[$A].Sid.Value
+                }
+                if ($Accounts[$A].ObjectClass -eq 'group') {
+                    $ReturnObject['SidType'] = 'Group'
+                } elseif ($Accounts[$A].ObjectClass -eq 'user') {
+                    $ReturnObject['SidType'] = 'User'
+                } elseif ($Accounts[$A].ObjectClass -eq 'computer') {
+                    $ReturnObject['SidType'] = 'Computer'
+                } else {
+                    $ReturnObject['SidType'] = 'EmptyOrUnknown'
+                }
+            } else {
+                $ReturnObject['UserPrincipalName'] = ''
+                $ReturnObject['AccountEnabled'] = ''
+                $ReturnObject['PasswordLastSet'] = ''
+                $ReturnObject['LastLogonDate'] = ''
+            }
+        }
+        if ($IncludeGPOObject) {
+            $ReturnObject['GPOObject'] = $GPO
+            $ReturnObject['GPOSecurity'] = $SecurityRights
+            $ReturnObject['GPOSecurityPermissionIndex'] = $Index
+        }
+        [PSCustomObject] $ReturnObject
+        $Index++
+    }
+    if ($IncludeOwner.IsPresent) {
+        if ($GPO.Owner) {
+            $SplittedOwner = $GPO.Owner.Split('\')
+            $DomainOwner = $SplittedOwner[0]  #: EVOTEC
+            $DomainUserName = $SplittedOwner[1]   #: Domain Admins
+            $SID = $ADAdministrativeGroups['ByNetBIOS']["$($GPO.Owner)"].Sid.Value
+            if ($SID) {
+                $SIDType = 'Group'
+                $DistinguishedName = $ADAdministrativeGroups['ByNetBIOS']["$($GPO.Owner)"].DistinguishedName
+            } else {
+                $SIDType = ''
+                $DistinguishedName = ''
+            }
+        } else {
+            $DomainOwner = $GPO.Owner
+            $DomainUserName = ''
+            $SID = ''
+            $SIDType = 'EmptyOrUnknown'
+            $DistinguishedName = ''
+        }
+        $ReturnObject = [ordered] @{
+            DisplayName       = $GPO.DisplayName #      : ALL | Enable RDP
+            GUID              = $GPO.Id
+            DomainName        = $GPO.DomainName  #      : ad.evotec.xyz
+            Enabled           = $GPO.GpoStatus
+            Description       = $GPO.Description
+            CreationDate      = $GPO.CreationTime
+            ModificationTime  = $GPO.ModificationTime
+            Permission        = 'GpoOwner'  # : GpoEditDeleteModifySecurity
+            Inherited         = $false  # : False
+            Domain            = $DomainOwner
+            DistinguishedName = $DistinguishedName  #: CN = Domain Admins, CN = Users, DC = ad, DC = evotec, DC = xyz
+            Name              = $DomainUserName
+            Sid               = $SID     #: S - 1 - 5 - 21 - 853615985 - 2870445339 - 3163598659 - 512
+            SidType           = $SIDType #  #: Group
+        }
+        if ($Accounts) {
+            $A = $GPO.Owner
+            if ($A -and $Accounts[$A]) {
+                $ReturnObject['UserPrincipalName'] = $Accounts[$A].UserPrincipalName
+                $ReturnObject['AccountEnabled'] = $Accounts[$A].Enabled
+                $ReturnObject['DistinguishedName'] = $Accounts[$A].DistinguishedName
+                $ReturnObject['PasswordLastSet'] = if ($Accounts[$A].PasswordLastSet) { $Accounts[$A].PasswordLastSet } else { '' }
+                $ReturnObject['LastLogonDate'] = if ($Accounts[$A].LastLogonDate ) { $Accounts[$A].LastLogonDate } else { '' }
+                if (-not $ReturnObject['Sid']) {
+                    $ReturnObject['Sid'] = $Accounts[$A].Sid.Value
+                }
+                if ($Accounts[$A].ObjectClass -eq 'group') {
+                    $ReturnObject['SidType'] = 'Group'
+                } elseif ($Accounts[$A].ObjectClass -eq 'user') {
+                    $ReturnObject['SidType'] = 'User'
+                } elseif ($Accounts[$A].ObjectClass -eq 'computer') {
+                    $ReturnObject['SidType'] = 'Computer'
+                } else {
+                    $ReturnObject['SidType'] = 'EmptyOrUnknown'
+                }
+            } else {
+                $ReturnObject['UserPrincipalName'] = ''
+                $ReturnObject['AccountEnabled'] = ''
+                $ReturnObject['PasswordLastSet'] = ''
+                $ReturnObject['LastLogonDate'] = ''
+            }
+        }
+        if ($IncludeGPOObject) {
+            $ReturnObject['GPOObject'] = $GPO
+            $ReturnObject['GPOSecurity'] = $SecurityRights
+            $ReturnObject['GPOSecurityPermissionIndex'] = $null
+        }
+        [PSCustomObject] $ReturnObject
+    }
+}
@@ -1,7 +1,11 @@
 function Get-XMLGPO {
    [cmdletBinding()]
    param(
-        [XML] $XMLContent
+        [XML] $XMLContent,
+        [Microsoft.GroupPolicy.Gpo] $GPO,
+        [switch] $PermissionsOnly,
+        [switch] $OwnerOnly,
+        [System.Collections.IDictionary] $ADAdministrativeGroups
    )
    if ($XMLContent.GPO.LinksTo) {
        $Linked = $true
@@ -27,48 +31,134 @@
        $Enabled = 'Enabled'
    } elseif ($UserEnabled -eq $false -and $ComputerEnabled -eq $false) {
        $Enabled = 'All settings disabled'
-    }elseif ($UserEnabled -eq $true -and $ComputerEnabled -eq $false) {
+    } elseif ($UserEnabled -eq $true -and $ComputerEnabled -eq $false) {
        $Enabled = 'Computer configuration settings disabled'
-    }elseif ($UserEnabled -eq $false -and $ComputerEnabled -eq $true) {
+    } elseif ($UserEnabled -eq $false -and $ComputerEnabled -eq $true) {
        $Enabled = 'User configuration settings disabled'
    }
-
-    [PsCustomObject] @{
-        'Name'                              = $XMLContent.GPO.Name
-        'Domain'                            = $XMLContent.GPO.Identifier.Domain.'#text'
-        'GUID'                              = $XMLContent.GPO.Identifier.Identifier.InnerText
-        'Linked'                            = $Linked
-        'LinksCount'                        = $LinksCount
-        'Enabled'                           = $Enabled
-        'ComputerEnabled'                   = $ComputerEnabled
-        'UserEnabled'                       = $UserEnabled
-        'ComputerSettingsAvailable'         = if ($null -eq $XMLContent.GPO.Computer.ExtensionData) { $false } else { $true }
-        'UserSettingsAvailable'             = if ($null -eq $XMLContent.GPO.User.ExtensionData) { $false } else { $true }
-        'ComputerSettingsStatus'            = if ($XMLContent.GPO.Computer.VersionDirectory -eq 0 -and $XMLContent.GPO.Computer.VersionSysvol -eq 0) { "NeverModified" } else { "Modified" }
-        'ComputerSetttingsVersionIdentical' = if ($XMLContent.GPO.Computer.VersionDirectory -eq $XMLContent.GPO.Computer.VersionSysvol) { $true } else { $false }
-        'ComputerSettings'                  = $XMLContent.GPO.Computer.ExtensionData.Extension
-        'UserSettingsStatus'                = if ($XMLContent.GPO.User.VersionDirectory -eq 0 -and $XMLContent.GPO.User.VersionSysvol -eq 0) { "NeverModified" } else { "Modified" }
-        'UserSettingsVersionIdentical'      = if ($XMLContent.GPO.User.VersionDirectory -eq $XMLContent.GPO.User.VersionSysvol) { $true } else { $false }
-        'UserSettings'                      = $XMLContent.GPO.User.ExtensionData.Extension
-
-        'CreationTime'                      = [DateTime] $XMLContent.GPO.CreatedTime
-        'ModificationTime'                  = [DateTime] $XMLContent.GPO.ModifiedTime
-        'ReadTime'                          = [DateTime] $XMLContent.GPO.ReadTime
-
-        'WMIFilter'                         = $GPO.WmiFilter.name
-        'WMIFilterDescription'              = $GPO.WmiFilter.Description
-        'Path'                              = $GPO.Path
-        #'SDDL'                      = if ($Splitter -ne '') { $XMLContent.GPO.SecurityDescriptor.SDDL.'#text' -join $Splitter } else { $XMLContent.GPO.SecurityDescriptor.SDDL.'#text' }
-        'ACL'                               = $XMLContent.GPO.SecurityDescriptor.Permissions.TrusteePermissions | ForEach-Object -Process {
-            [PsCustomObject] @{
-                'User'            = $_.trustee.name.'#Text'
-                'Permission Type' = $_.type.PermissionType
-                'Inherited'       = $_.Inherited
-                'Permissions'     = $_.Standard.GPOGroupedAccessEnum
+    if (-not $PermissionsOnly) {
+        if ($XMLContent.GPO.SecurityDescriptor.Owner.Name.'#text') {
+            $AdministrativeGroup = $ADAdministrativeGroups['ByNetBIOS']["$($XMLContent.GPO.SecurityDescriptor.Owner.Name.'#text')"]
+            $WellKnown = ConvertFrom-SID -SID $XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text' -OnlyWellKnown
+            if ($AdministrativeGroup) {
+                $OwnerType = 'Administrative'
+            } elseif ($WellKnown.Name) {
+                $OwnerType = 'WellKnown'
+            } else {
+                $OwnerType = 'NonAdministrative'
+            }
+        } else {
+            $OwnerType = 'EmptyOrUnknown'
+        }
+    }
+    if ($PermissionsOnly) {
+        [PsCustomObject] @{
+            'DisplayName'    = $XMLContent.GPO.Name
+            'DomainName'     = $XMLContent.GPO.Identifier.Domain.'#text'
+            'GUID'           = $XMLContent.GPO.Identifier.Identifier.InnerText
+            'Enabled'        = $Enabled
+            'Name'           = $XMLContent.GPO.SecurityDescriptor.Owner.Name.'#text'
+            'Sid'            = $XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text'
+            #'SidType'        = if (($XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text').Length -le 10) { 'WellKnown' } else { 'Other' }
+            'PermissionType' = 'Allow'
+            'Inherited'      = $false
+            'Permissions'    = 'Owner'
+        }
+        $XMLContent.GPO.SecurityDescriptor.Permissions.TrusteePermissions | ForEach-Object -Process {
+            if ($_) {
+                [PsCustomObject] @{
+                    'DisplayName'    = $XMLContent.GPO.Name
+                    'DomainName'     = $XMLContent.GPO.Identifier.Domain.'#text'
+                    'GUID'           = $XMLContent.GPO.Identifier.Identifier.InnerText
+                    'Enabled'        = $Enabled
+                    'Name'           = $_.trustee.name.'#Text'
+                    'Sid'            = $_.trustee.SID.'#Text'
+                    #'SidType'        = if (($XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text').Length -le 10) { 'WellKnown' } else { 'Other' }
+                    'PermissionType' = $_.type.PermissionType
+                    'Inherited'      = if ($_.Inherited -eq 'false') { $false } else { $true }
+                    'Permissions'    = $_.Standard.GPOGroupedAccessEnum
+                }
            }
        }
-        'Links'                             = $XMLContent.GPO.LinksTo #| Select-Object -ExpandProperty SOMPath
+    } elseif ($OwnerOnly) {
+        [PsCustomObject] @{
+            'DisplayName' = $XMLContent.GPO.Name
+            'DomainName'  = $XMLContent.GPO.Identifier.Domain.'#text'
+            'GUID'        = $XMLContent.GPO.Identifier.Identifier.InnerText
+            'Enabled'     = $Enabled
+            'Owner'       = $XMLContent.GPO.SecurityDescriptor.Owner.Name.'#text'
+            'OwnerSID'    = $XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text'
+            'OwnerType'   = $OwnerType
+        }
+    } else {
+        [PsCustomObject] @{
+            'DisplayName'                       = $XMLContent.GPO.Name
+            'DomainName'                        = $XMLContent.GPO.Identifier.Domain.'#text'
+            'GUID'                              = $XMLContent.GPO.Identifier.Identifier.InnerText
+            'Linked'                            = $Linked
+            'LinksCount'                        = $LinksCount
+            'Enabled'                           = $Enabled
+            'ComputerEnabled'                   = $ComputerEnabled
+            'UserEnabled'                       = $UserEnabled
+            'ComputerSettingsAvailable'         = if ($null -eq $XMLContent.GPO.Computer.ExtensionData) { $false } else { $true }
+            'UserSettingsAvailable'             = if ($null -eq $XMLContent.GPO.User.ExtensionData) { $false } else { $true }
+            'ComputerSettingsStatus'            = if ($XMLContent.GPO.Computer.VersionDirectory -eq 0 -and $XMLContent.GPO.Computer.VersionSysvol -eq 0) { "NeverModified" } else { "Modified" }
+            'ComputerSetttingsVersionIdentical' = if ($XMLContent.GPO.Computer.VersionDirectory -eq $XMLContent.GPO.Computer.VersionSysvol) { $true } else { $false }
+            'ComputerSettings'                  = $XMLContent.GPO.Computer.ExtensionData.Extension
+            'UserSettingsStatus'                = if ($XMLContent.GPO.User.VersionDirectory -eq 0 -and $XMLContent.GPO.User.VersionSysvol -eq 0) { "NeverModified" } else { "Modified" }
+            'UserSettingsVersionIdentical'      = if ($XMLContent.GPO.User.VersionDirectory -eq $XMLContent.GPO.User.VersionSysvol) { $true } else { $false }
+            'UserSettings'                      = $XMLContent.GPO.User.ExtensionData.Extension

+            'CreationTime'                      = [DateTime] $XMLContent.GPO.CreatedTime
+            'ModificationTime'                  = [DateTime] $XMLContent.GPO.ModifiedTime
+            'ReadTime'                          = [DateTime] $XMLContent.GPO.ReadTime
+
+            'WMIFilter'                         = $GPO.WmiFilter.name
+            'WMIFilterDescription'              = $GPO.WmiFilter.Description
+            'DistinguishedName'                 = $GPO.Path
+            'SDDL'                              = if ($Splitter -ne '') { $XMLContent.GPO.SecurityDescriptor.SDDL.'#text' -join $Splitter } else { $XMLContent.GPO.SecurityDescriptor.SDDL.'#text' }
+            'Owner'                             = $XMLContent.GPO.SecurityDescriptor.Owner.Name.'#text'
+            'OwnerSID'                          = $XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text'
+            'OwnerType'                         = $OwnerType
+            'ACL'                               = @(
+                [PsCustomObject] @{
+                    'Name'           = $XMLContent.GPO.SecurityDescriptor.Owner.Name.'#text'
+                    'Sid'            = $XMLContent.GPO.SecurityDescriptor.Owner.SID.'#text'
+                    'PermissionType' = 'Allow'
+                    'Inherited'      = $false
+                    'Permissions'    = 'Owner'
+                }
+                $XMLContent.GPO.SecurityDescriptor.Permissions.TrusteePermissions | ForEach-Object -Process {
+                    if ($_) {
+                        [PsCustomObject] @{
+                            'Name'           = $_.trustee.name.'#Text'
+                            'Sid'            = $_.trustee.SID.'#Text'
+                            'PermissionType' = $_.type.PermissionType
+                            'Inherited'      = if ($_.Inherited -eq 'false') { $false } else { $true }
+                            'Permissions'    = $_.Standard.GPOGroupedAccessEnum
+                        }
+                    }
+                }
+            )
+            'Auditing'                          = if ($XMLContent.GPO.SecurityDescriptor.AuditingPresent.'#text' -eq 'true') { $true } else { $false }
+            'Links'                             = $XMLContent.GPO.LinksTo | ForEach-Object -Process {
+                if ($_) {
+                    [PSCustomObject] @{
+                        CanonicalName = $_.SOMPath
+                        Enabled       = $_.Enabled
+                        NoOverride    = $_.NoOverride
+                    }
+                }
+            }
+            <#
+        SOMName SOMPath       Enabled NoOverride
+        ------- -------       ------- ----------
+        ad      ad.evotec.xyz true    false
+        #>
+
+            #| Select-Object -ExpandProperty SOMPath
+
+        }
    }
    #break
 }
@@ -1,6 +0,0 @@
-function Invoke-GPOZaurr {
-    [cmdletBinding()]
-    param(
-
-    )
-}
@@ -0,0 +1,56 @@
+function New-ADForestDrives {
+    [cmdletbinding()]
+    param(
+        [string] $ForestName,
+        [string] $ObjectDN
+    )
+    if (-not $Global:ADDrivesMapped) {
+        if ($ForestName) {
+            $Forest = Get-ADForest -Identity $ForestName
+        } else {
+            $Forest = Get-ADForest
+        }
+        if ($ObjectDN) {
+            # This doesn't work because no Domain and no $Server
+            $DNConverted = (ConvertFrom-Distinguishedname -DistinguishedName $ObjectDN -ToDC) -replace '=' -replace ','
+            if (-not(Get-PSDrive -Name $DNConverted -ErrorAction SilentlyContinue)) {
+                try {
+
+                    if ($Server) {
+                        $null = New-PSDrive -Name $DNConverted -Root '' -PsProvider ActiveDirectory -Server $Server.Hostname[0] -Scope Global -WhatIf:$false
+                        Write-Verbose "New-ADForestDrives - Mapped drive $Domain / $($Server.Hostname[0])"
+                    } else {
+                        $null = New-PSDrive -Name $DNConverted -Root '' -PsProvider ActiveDirectory -Server $Domain -Scope Global -WhatIf:$false
+                    }
+                } catch {
+                    Write-Warning "New-ADForestDrives - Couldn't map new AD psdrive for $Domain / $($Server.Hostname[0])"
+                }
+            }
+        } else {
+            foreach ($Domain in $Forest.Domains) {
+                try {
+                    $Server = Get-ADDomainController -Discover -DomainName $Domain
+                    $DomainInformation = Get-ADDomain -Server $Server.Hostname[0]
+                } catch {
+                    Write-Warning "New-ADForestDrives - Can't process domain $Domain - $($_.Exception.Message)"
+                    continue
+                }
+                $ObjectDN = $DomainInformation.DistinguishedName
+                $DNConverted = (ConvertFrom-Distinguishedname -DistinguishedName $ObjectDN -ToDC) -replace '=' -replace ','
+                if (-not(Get-PSDrive -Name $DNConverted -ErrorAction SilentlyContinue)) {
+                    try {
+                        if ($Server) {
+                            $null = New-PSDrive -Name $DNConverted -Root '' -PsProvider ActiveDirectory -Server $Server.Hostname[0] -Scope Global -WhatIf:$false
+                            Write-Verbose "New-ADForestDrives - Mapped drive $Domain / $Server"
+                        } else {
+                            $null = New-PSDrive -Name $DNConverted -Root '' -PsProvider ActiveDirectory -Server $Domain -Scope Global -WhatIf:$false
+                        }
+                    } catch {
+                        Write-Warning "New-ADForestDrives - Couldn't map new AD psdrive for $Domain / $Server $($_.Exception.Message)"
+                    }
+                }
+            }
+        }
+        $Global:ADDrivesMapped = $true
+    }
+}
@@ -0,0 +1,108 @@
+function Add-GPOZaurrPermission {
+    [cmdletBinding(SupportsShouldProcess, DefaultParameterSetName = 'GPOGUID')]
+    param(
+        [Parameter(ParameterSetName = 'GPOName', Mandatory)]
+        [string] $GPOName,
+
+        [Parameter(ParameterSetName = 'GPOGUID', Mandatory)]
+        [alias('GUID', 'GPOID')][string] $GPOGuid,
+
+        [Parameter(ParameterSetName = 'ADObject', Mandatory)]
+        [alias('OrganizationalUnit', 'DistinguishedName')][Microsoft.ActiveDirectory.Management.ADObject[]] $ADObject,
+
+        [string] $Principal,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $PermissionType,
+        [switch] $Inheritable,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+
+        [int] $LimitProcessing
+    )
+    Begin {
+        $Count = 0
+    }
+    Process {
+
+        if ($GPOName) {
+            $Splat = @{
+                GPOName = $GPOName
+            }
+        } elseif ($GPOGUID) {
+            $Splat = @{
+                GPOGUID = $GPOGUID
+            }
+        } else {
+            $Splat = @{
+
+            }
+        }
+
+        $Splat['IncludeGPOObject'] = $true
+        $Splat['Forest'] = $Forest
+        $Splat['IncludeDomains'] = $IncludeDomains
+        $Splat['ExcludeDomains'] = $ExcludeDomains
+        $Splat['ExtendedForestInformation'] = $ExtendedForestInformation
+        #$Splat['ExcludePermissionType'] = $ExcludePermissionType
+        #$Splat['IncludePermissionType'] = $PermissionType-
+        $Splat['SkipWellKnown'] = $SkipWellKnown.IsPresent
+        $Splat['SkipAdministrative'] = $SkipAdministrative.IsPresent
+
+        # Get-GPOZaurrPermission @Splat
+
+        #Set-GPPermission -PermissionLevel $PermissionType -TargetName $Principal -TargetType Group -Verbose -DomainName 'ad.evotec.xyz' -Name $GPOName -Replace #-WhatIf
+
+        #continue
+        [Array] $GPOPermissions = Get-GPOZaurrPermission @Splat
+        [Array] $LimitedPermissions = foreach ($GPOPermission in $GPOPermissions) {
+            #$GPOPermission = $_
+            # continue
+            if ($GPOPermission.Name -eq $Principal -and $GPOPermission.Permission -eq $PermissionType) {
+                Write-Verbose "Add-GPOZaurrPermission - Permission $PermissionType already set for $($GPOPermission.Name) / $($GPOPermission.DomainName)"
+                $GPOPermission
+                #break
+            }
+            # Write-Verbose "Test"
+            # $GPOPermission
+
+
+
+
+            #$GPOPermission.GPOSecurity.Add
+            #void Add(Microsoft.GroupPolicy.GPPermission item)
+            #void ICollection[GPPermission].Add(Microsoft.GroupPolicy.GPPermission item)
+            #int IList.Add(System.Object value)
+
+
+            # $GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+        }
+
+        if ($LimitedPermissions.Count -gt 0) {
+            #$LimitedPermissions
+        } else {
+            try {
+                Write-Verbose "Add-GPOZaurrPermission - Adding permission $PermissionType for $($Principal)"
+                $AddPermission = [Microsoft.GroupPolicy.GPPermission]::new($Principal, $PermissionType, $Inheritable.IsPresent)
+                $GPOPermissions[0].GPOSecurity.Add($AddPermission)
+                $GPOPermissions[0].GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+            } catch {
+                Write-Warning "Add-GPOZaurrPermission - Adding permission $PermissionType failed for $($Principal) with error: $($_.Exception.Message)"
+            }
+
+            <#
+            [Microsoft.GroupPolicy.GPPermission]::new
+
+            OverloadDefinitions
+            -------------------
+            Microsoft.GroupPolicy.GPPermission new(string trustee, Microsoft.GroupPolicy.GPPermissionType rights, bool inheritable)
+            Microsoft.GroupPolicy.GPPermission new(System.Security.Principal.IdentityReference identity, Microsoft.GroupPolicy.GPPermissionType rights, bool inheritable)
+
+            #>
+        }
+    }
+    End {
+
+    }
+}
@@ -0,0 +1,74 @@
+function Backup-GPOZaurr {
+    [cmdletBinding(SupportsShouldProcess)]
+    param(
+        [int] $LimitProcessing,
+        [validateset('All', 'Empty', 'Unlinked')][string[]] $Type = 'All',
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+        [string[]] $GPOPath,
+        [string] $BackupPath,
+        [switch] $BackupDated
+    )
+    Begin {
+        if ($BackupDated) {
+            $BackupFinalPath = "$BackupPath\$((Get-Date).ToString('yyyy-MM-dd_HH_mm_ss'))"
+        } else {
+            $BackupFinalPath = $BackupPath
+        }
+        Write-Verbose "Backup-GPOZaurr - Backing up to $BackupFinalPath"
+        $null = New-Item -ItemType Directory -Path $BackupFinalPath -Force
+        $Count = 0
+    }
+    Process {
+        Get-GPOZaurr -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation -GPOPath $GPOPath | ForEach-Object {
+            if ($Type -contains 'All') {
+                Write-Verbose "Backup-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName)"
+                $Count++
+                try {
+                    $BackupInfo = Backup-GPO -Guid $_.GUID -Domain $_.DomainName -Path $BackupFinalPath -ErrorAction Stop #-Server $QueryServer
+                    $BackupInfo
+                } catch {
+                    Write-Warning "Backup-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                }
+                if ($LimitProcessing -eq $Count) {
+                    break
+                }
+            }
+            if ($Type -notcontains 'All' -and $Type -contains 'Empty') {
+                if ($_.ComputerSettingsAvailable -eq $false -and $_.UserSettingsAvailable -eq $false) {
+                    Write-Verbose "Backup-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName)"
+                    $Count++
+                    try {
+                        $BackupInfo = Backup-GPO -Guid $_.GUID -Domain $_.DomainName -Path $BackupFinalPath -ErrorAction Stop #-Server $QueryServer
+                        $BackupInfo
+                    } catch {
+                        Write-Warning "Backup-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                    }
+                    if ($LimitProcessing -eq $Count) {
+                        break
+                    }
+                }
+            }
+            if ($Type -notcontains 'All' -and $Type -contains 'Unlinked') {
+                if ($_.Linked -eq $false) {
+                    Write-Verbose "Backup-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName)"
+                    $Count++
+                    try {
+                        $BackupInfo = Backup-GPO -Guid $_.GUID -Domain $_.DomainName -Path $BackupFinalPath -ErrorAction Stop #-Server $QueryServer
+                        $BackupInfo
+                    } catch {
+                        Write-Warning "Backup-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                    }
+                    if ($LimitProcessing -eq $Count) {
+                        break
+                    }
+                }
+            }
+        }
+    }
+    End {
+
+    }
+}
@@ -1,32 +1,87 @@
 function Get-GPOZaurr {
    [cmdletBinding()]
    param(
+        [string] $GPOName,
+        [alias('GUID', 'GPOID')][string] $GPOGuid,
+
        [alias('ForestName')][string] $Forest,
        [string[]] $ExcludeDomains,
        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
        [System.Collections.IDictionary] $ExtendedForestInformation,
-        [string[]] $GPOPath
-    )
-    if (-not $GPOPath) {
-        if (-not $ExtendedForestInformation) {
-            $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains
-        } else {
-            $ForestInformation = $ExtendedForestInformation
-        }
+        [string[]] $GPOPath,

-        foreach ($Domain in $ForestInformation.Domains) {
-            Get-GPO -All -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain | ForEach-Object {
-                $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain
-                Get-XMLGPO -XMLContent $XMLContent
-            }
+        [switch] $PermissionsOnly,
+        [switch] $OwnerOnly,
+        [switch] $Limited
+    )
+    Begin {
+        $ADAdministrativeGroups = Get-ADADministrativeGroups -Type DomainAdmins, EnterpriseAdmins -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+        if (-not $GPOPath) {
+            $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
        }
-    } else {
-        foreach ($Path in $GPOPath) {
-            Get-ChildItem -LiteralPath $Path -Recurse -Filter *.xml | ForEach-Object {
-                $XMLContent = [XML]::new()
-                $XMLContent.Load($_.FullName)
-                Get-XMLGPO -XMLContent $XMLContent
+    }
+    Process {
+        if (-not $GPOPath) {
+            foreach ($Domain in $ForestInformation.Domains) {
+                $QueryServer = $ForestInformation.QueryServers[$Domain]['HostName'][0]
+                if ($GPOName) {
+                    Get-GPO -Name $GPOName -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object {
+                        Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                        if (-not $Limited) {
+                            try {
+                                $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain -ErrorAction Stop
+                            } catch {
+                                Write-Warning "Get-GPOZaurr - Failed to ger GPOReport: $($_.Exception.Message). Skipping."
+                                continue
+                            }
+                            Get-XMLGPO -OwnerOnly:$OwnerOnly.IsPresent -XMLContent $XMLContent -GPO $_ -PermissionsOnly:$PermissionsOnly.IsPresent -ADAdministrativeGroups $ADAdministrativeGroups
+                        } else {
+                            $_
+                        }
+                    }
+                } elseif ($GPOGuid) {
+                    Get-GPO -Guid $GPOGuid -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object {
+                        Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                        if (-not $Limited) {
+                            try {
+                                $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain -ErrorAction Stop
+                            } catch {
+                                Write-Warning "Get-GPOZaurr - Failed to ger GPOReport: $($_.Exception.Message). Skipping."
+                                continue
+                            }
+                            Get-XMLGPO -OwnerOnly:$OwnerOnly.IsPresent -XMLContent $XMLContent -GPO $_ -PermissionsOnly:$PermissionsOnly.IsPresent -ADAdministrativeGroups $ADAdministrativeGroups
+                        } else {
+                            $_
+                        }
+                    }
+                } else {
+                    Get-GPO -All -Server $QueryServer -Domain $Domain -ErrorAction SilentlyContinue | ForEach-Object {
+                        Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                        if (-not $Limited) {
+                            try {
+                                $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain -ErrorAction Stop
+                            } catch {
+                                Write-Warning "Get-GPOZaurr - Failed to ger GPOReport: $($_.Exception.Message). Skipping."
+                                continue
+                            }
+                            Get-XMLGPO -OwnerOnly:$OwnerOnly.IsPresent -XMLContent $XMLContent -GPO $_ -PermissionsOnly:$PermissionsOnly.IsPresent -ADAdministrativeGroups $ADAdministrativeGroups
+                        } else {
+                            $_
+                        }
+                    }
+                }
+            }
+        } else {
+            foreach ($Path in $GPOPath) {
+                Get-ChildItem -LiteralPath $Path -Recurse -Filter *.xml | ForEach-Object {
+                    $XMLContent = [XML]::new()
+                    $XMLContent.Load($_.FullName)
+                    Get-XMLGPO -OwnerOnly:$OwnerOnly.IsPresent -XMLContent $XMLContent -PermissionsOnly:$PermissionsOnly.IsPresent
+                }
            }
        }
    }
-}
+    End {
+
+    }
+}
@@ -0,0 +1,35 @@
+function Get-GPOZaurrBackupInformation {
+    [cmdletBinding()]
+    param(
+        [string[]] $BackupFolder
+    )
+    Begin {
+
+    }
+    Process {
+        foreach ($Folder in $BackupFolder) {
+            if ($Folder) {
+                if ((Test-Path -LiteralPath "$Folder\manifest.xml")) {
+                    [xml] $Xml = Get-Content -LiteralPath "$Folder\manifest.xml"
+                    $Xml.Backups.BackupInst | ForEach-Object {
+                        [PSCustomObject] @{
+                            DisplayName      = $_.GPODisplayName.'#cdata-section'
+                            DomainName       = $_.GPODomain.'#cdata-section'
+                            Guid             = $_.GPOGUid.'#cdata-section'
+                            DomainGuid       = $_.GPODomainGuid.'#cdata-section'
+                            DomainController = $_.GPODomainController.'#cdata-section'
+                            BackupTime       = $_.BackupTime.'#cdata-section'
+                            ID               = $_.ID.'#cdata-section'
+                            Comment          = $_.Comment.'#cdata-section'
+                        }
+                    }
+                } else {
+                    Write-Warning "Get-GPOZaurrBackupInformation - No backup information available"
+                }
+            }
+        }
+    }
+    End {
+
+    }
+}
@@ -0,0 +1,64 @@
+function Get-GPOZaurrLink {
+    [cmdletbinding()]
+    param(
+        [parameter(ValueFromPipeline, ValueFromPipelineByPropertyName)][Microsoft.ActiveDirectory.Management.ADObject[]] $ADObject,
+        [switch] $Limited,
+        [System.Collections.IDictionary] $GPOCache,
+
+        [string] $Filter = '*',
+        [string] $SearchBase,
+        [Microsoft.ActiveDirectory.Management.ADSearchScope] $SearchScope,
+
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    Begin {
+        $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+        if (-not $GPOCache -and -not $Limited) {
+            $GPOCache = @{ }
+            foreach ($Domain in $ForestInformation.Domains) {
+                $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                Get-GPO -All -DomainName $Domain -Server $QueryServer | ForEach-Object {
+                    $GPOCache[$_.ID.Guid] = $_
+                }
+            }
+        }
+    }
+    Process {
+        if (-not $ADObject) {
+            foreach ($Domain in $ForestInformation.Domains) {
+                $Splat = @{
+                    Filter     = $Filter
+                    Properties = 'distinguishedName', 'gplink', 'CanonicalName'
+                    Server     = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                }
+                if ($PSBoundParameters.ContainsKey('SearchBase')) {
+                    $DomainDistinguishedName = $ForestInformation['DomainsExtended'][$Domain]['DistinguishedName']
+                    if ($SearchBase -notlike "*$DomainDistinguishedName") {
+                        # we check if SearchBase is part of domain distinugishname. If it isn't we skip
+                        continue
+                    }
+                    $Splat['SearchBase'] = $SearchBase
+
+                }
+                if ($PSBoundParameters.ContainsKey('SearchScope')) {
+                    $Splat['SearchScope'] = $SearchScope
+                }
+
+                Get-ADObject @Splat | ForEach-Object {
+                    Get-PrivGPOZaurrLink -Object $_ -Limited:$Limited.IsPresent -GPOCache $GPOCache
+                }
+            }
+        } else {
+            foreach ($Object in $ADObject) {
+                Get-PrivGPOZaurrLink -Object $Object -Limited:$Limited.IsPresent -GPOCache $GPOCache
+            }
+        }
+    }
+    End {
+
+    }
+}
@@ -14,7 +14,7 @@
            $ForestInformation = $ExtendedForestInformation
        }

-        $GPOPath = foreach ($Domain in $ForestInformation.Domains) {
+        [Array] $GPOPath = foreach ($Domain in $ForestInformation.Domains) {
            -join ('\\', $Domain, '\SYSVOL\', $Domain, '\Policies')
        }
    }
@@ -0,0 +1,74 @@
+function Get-GPOZaurrPermission {
+    [cmdletBinding(DefaultParameterSetName = 'GPO' )]
+    param(
+        [Parameter(ParameterSetName = 'GPOName')]
+        [string] $GPOName,
+
+        [Parameter(ParameterSetName = 'GPOGUID')]
+        [alias('GUID', 'GPOID')][string] $GPOGuid,
+
+        [validateSet('Unknown', 'All')][string[]] $Type = 'All',
+
+        [switch] $SkipWellKnown,
+        [switch] $SkipAdministrative,
+        [switch] $ResolveAccounts,
+
+        [switch] $IncludeOwner,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $IncludePermissionType,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $ExcludePermissionType,
+        [switch] $IncludeGPOObject,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    Begin {
+        $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+        $ADAdministrativeGroups = Get-ADADministrativeGroups -Type DomainAdmins, EnterpriseAdmins -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+        if ($Type -eq 'Unknown') {
+            if ($SkipAdministrative -or $SkipWellKnown) {
+                Write-Warning "Get-GPOZaurrPermission - Using SkipAdministrative or SkipWellKnown while looking for Unknown doesn't make sense as only Unknown will be displayed."
+            }
+        }
+        if ($ResolveAccounts) {
+            $Accounts = @{ }
+            foreach ($Domain in $ForestInformation.Domains) {
+                $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+                $DomainInformation = Get-ADDomain -Server $QueryServer
+                $Users = Get-ADUser -Filter * -Server $QueryServer -Properties PasswordLastSet, LastLogonDate, UserPrincipalName
+                foreach ($User in $Users) {
+                    $U = -join ($DomainInformation.NetBIOSName, '\', $User.SamAccountName)
+                    $Accounts[$U] = $User
+                }
+                $Groups = Get-ADGroup -Filter * -Server $QueryServer
+                foreach ($Group in $Groups) {
+                    $G = -join ($DomainInformation.NetBIOSName, '\', $Group.SamAccountName)
+                    $Accounts[$G] = $Group
+                }
+            }
+        }
+
+    }
+    Process {
+        foreach ($Domain in $ForestInformation.Domains) {
+            $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+            if ($GPOName) {
+                Get-GPO -Name $GPOName -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object -Process {
+                    Get-PrivPermission -Accounts $Accounts -Type $Type -GPO $_ -SkipWellKnown:$SkipWellKnown.IsPresent -SkipAdministrative:$SkipAdministrative.IsPresent -IncludeOwner:$IncludeOwner.IsPresent -IncludeGPOObject:$IncludeGPOObject.IsPresent -IncludePermissionType $IncludePermissionType -ExcludePermissionType $ExcludePermissionType -ADAdministrativeGroups $ADAdministrativeGroups
+                }
+            } elseif ($GPOGuid) {
+                Get-GPO -Guid $GPOGuid -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object -Process {
+                    Get-PrivPermission -Accounts $Accounts -Type $Type -GPO $_ -SkipWellKnown:$SkipWellKnown.IsPresent -SkipAdministrative:$SkipAdministrative.IsPresent -IncludeOwner:$IncludeOwner.IsPresent -IncludeGPOObject:$IncludeGPOObject.IsPresent -IncludePermissionType $IncludePermissionType -ExcludePermissionType $ExcludePermissionType -ADAdministrativeGroups $ADAdministrativeGroups
+                }
+            } else {
+                Get-GPO -All -Domain $Domain -Server $QueryServer | ForEach-Object -Process {
+                    Get-PrivPermission -Accounts $Accounts -Type $Type -GPO $_ -SkipWellKnown:$SkipWellKnown.IsPresent -SkipAdministrative:$SkipAdministrative.IsPresent -IncludeOwner:$IncludeOwner.IsPresent -IncludeGPOObject:$IncludeGPOObject.IsPresent -IncludePermissionType $IncludePermissionType -ExcludePermissionType $ExcludePermissionType -ADAdministrativeGroups $ADAdministrativeGroups
+                }
+            }
+        }
+    }
+    End {
+
+    }
+}
@@ -0,0 +1,125 @@
+function Get-GPOZaurrWMI {
+    [cmdletBinding()]
+    Param(
+        [Guid[]] $Guid,
+        [string[]] $Name,
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    $wmiFilterAttr = "msWMI-Name", "msWMI-Parm1", "msWMI-Parm2", "msWMI-Author", "msWMI-ID", 'CanonicalName', 'Created', 'Modified'
+
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    foreach ($Domain in $ForestInformation.Domains) {
+        $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        if ($Guid -or $Name) {
+            foreach ($N in $Name) {
+                try {
+                    $ldapFilter = "(&(objectClass=msWMI-Som)(msWMI-Name=$N))"
+                    Get-ADObject -LDAPFilter $ldapFilter -Properties $wmiFilterAttr -Server $QueryServer | ForEach-Object -Process {
+                        $WMI = $_.'msWMI-Parm2' -split ';'
+                        [PSCustomObject] @{
+                            DisplayName       = $_.'msWMI-Name'
+                            Description       = $_.'msWMI-Parm1'
+                            DomainName        = $Domain
+                            NameSpace         = $WMI[5]
+                            Query             = $WMI[6]
+                            Author            = $_.'msWMI-Author'
+                            ID                = $_.'msWMI-ID'
+                            Created           = $_.Created
+                            Modified          = $_.Modified
+                            ObjectGUID        = $_.'ObjectGUID'
+                            CanonicalName     = $_.CanonicalName
+                            DistinguishedName = $_.'DistinguishedName'
+                        }
+                    }
+                } catch {
+                    Write-Warning "Get-GPOZaurrWMI - Error processing WMI for $Domain`: $($_.Error.Exception)"
+                }
+            }
+            foreach ($G in $GUID) {
+                $ldapFilter = "(&(objectClass=msWMI-Som)(Name={$G}))"
+                try {
+                    Get-ADObject -LDAPFilter $ldapFilter -Properties $wmiFilterAttr -Server $QueryServer | ForEach-Object -Process {
+                        $WMI = $_.'msWMI-Parm2' -split ';'
+                        [PSCustomObject] @{
+                            DisplayName       = $_.'msWMI-Name'
+                            Description       = $_.'msWMI-Parm1'
+                            DomainName        = $Domain
+                            NameSpace         = $WMI[5]
+                            Query             = $WMI[6]
+                            Author            = $_.'msWMI-Author'
+                            ID                = $_.'msWMI-ID'
+                            Created           = $_.Created
+                            Modified          = $_.Modified
+                            ObjectGUID        = $_.'ObjectGUID'
+                            CanonicalName     = $_.CanonicalName
+                            DistinguishedName = $_.'DistinguishedName'
+                        }
+                    }
+                } catch {
+                    Write-Warning "Get-GPOZaurrWMI - Error processing WMI for $Domain`: $($_.Error.Exception)"
+                }
+            }
+        } else {
+            $ldapFilter = "(objectClass=msWMI-Som)"
+            try {
+                Get-ADObject -LDAPFilter $ldapFilter -Properties $wmiFilterAttr -Server $QueryServer | ForEach-Object -Process {
+                    $WMI = $_.'msWMI-Parm2' -split ';'
+                    [PSCustomObject] @{
+                        DisplayName       = $_.'msWMI-Name'
+                        Description       = $_.'msWMI-Parm1'
+                        DomainName        = $Domain
+                        NameSpace         = $WMI[5]
+                        Query             = $WMI[6]
+                        Author            = $_.'msWMI-Author'
+                        ID                = $_.'msWMI-ID'
+                        Created           = $_.Created
+                        Modified          = $_.Modified
+                        ObjectGUID        = $_.'ObjectGUID'
+                        CanonicalName     = $_.CanonicalName
+                        DistinguishedName = $_.'DistinguishedName'
+                    }
+                }
+            } catch {
+                Write-Warning "Get-GPOZaurrWMI - Error processing WMI for $Domain`: $($_.Error.Exception)"
+            }
+        }
+    }
+}
+<#
+CanonicalName                   : ad.evotec.xyz/System/WMIPolicy/SOM/{E988C890-BDBC-4946-87B5-BF70F39F4686}
+CN                              : {E988C890-BDBC-4946-87B5-BF70F39F4686}
+Created                         : 08.04.2020 19:04:06
+createTimeStamp                 : 08.04.2020 19:04:06
+Deleted                         :
+Description                     :
+DisplayName                     :
+DistinguishedName               : CN={E988C890-BDBC-4946-87B5-BF70F39F4686},CN=SOM,CN=WMIPolicy,CN=System,DC=ad,DC=evotec,DC=xyz
+dSCorePropagationData           : {01.01.1601 01:00:00}
+instanceType                    : 4
+isDeleted                       :
+LastKnownParent                 :
+Modified                        : 08.04.2020 19:04:06
+modifyTimeStamp                 : 08.04.2020 19:04:06
+msWMI-Author                    : przemyslaw.klys@evotec.pl
+msWMI-ChangeDate                : 20200408170406.280000-000
+msWMI-CreationDate              : 20200408170406.280000-000
+msWMI-ID                        : {E988C890-BDBC-4946-87B5-BF70F39F4686}
+msWMI-Name                      : Virtual Machines
+msWMI-Parm1                     : Oh my description
+msWMI-Parm2                     : 1;3;10;66;WQL;root\CIMv2;SELECT * FROM Win32_ComputerSystem WHERE Model = "Virtual Machine";
+Name                            : {E988C890-BDBC-4946-87B5-BF70F39F4686}
+nTSecurityDescriptor            : System.DirectoryServices.ActiveDirectorySecurity
+ObjectCategory                  : CN=ms-WMI-Som,CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz
+ObjectClass                     : msWMI-Som
+ObjectGUID                      : c1ee708d-7a67-46e2-b13f-d11a573d2597
+ProtectedFromAccidentalDeletion : False
+sDRightsEffective               : 15
+showInAdvancedViewOnly          : True
+uSNChanged                      : 12785589
+uSNCreated                      : 12785589
+whenChanged                     : 08.04.2020 19:04:06
+whenCreated                     : 08.04.2020 19:04:06
+#>
@@ -0,0 +1,81 @@
+function New-GPOZaurrWMI {
+    [cmdletBinding(SupportsShouldProcess)]
+    param(
+        [parameter(Mandatory)][string] $Name,
+        [string] $Description = ' ',
+        [parameter(Mandatory)][string] $Query,
+        [switch] $SkipQueryCheck,
+        [switch] $Force,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    if (-not $Forest -and -not $ExcludeDomains -and -not $IncludeDomains -and -not $ExtendedForestInformation) {
+        $IncludeDomains = $Env:USERDNSDOMAIN
+    }
+
+    if (-not $SkipQueryCheck) {
+        try {
+            $null = Get-CimInstance -Query $Query -ErrorAction Stop -Verbose:$false
+        } catch {
+            Write-Warning "New-GPOZaurrWMI - Query error $($_.Exception.Message). Terminating."
+            return
+        }
+    }
+
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    foreach ($Domain in $ForestInformation.Domains) {
+        $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        $DomainInformation = Get-ADDomain -Server $QueryServer
+        $defaultNamingContext = $DomainInformation.DistinguishedName
+        #$defaultNamingContext = (Get-ADRootDSE).defaultnamingcontext
+        [string] $Author = (([ADSI]"LDAP://<SID=$([System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value)>").UserPrincipalName).ToString()
+        [string] $GUID = "{" + ([System.Guid]::NewGuid()) + "}"
+
+        [string] $DistinguishedName = -join ("CN=", $GUID, ",CN=SOM,CN=WMIPolicy,CN=System,", $defaultNamingContext)
+        $CurrentTime = (Get-Date).ToUniversalTime()
+        [string] $CurrentDate = -join (
+            ($CurrentTime.Year).ToString("0000"),
+            ($CurrentTime.Month).ToString("00"),
+            ($CurrentTime.Day).ToString("00"),
+            ($CurrentTime.Hour).ToString("00"),
+            ($CurrentTime.Minute).ToString("00"),
+            ($CurrentTime.Second).ToString("00"),
+            ".",
+            ($CurrentTime.Millisecond * 1000).ToString("000000"),
+            "-000"
+        )
+
+        [Array] $ExistingWmiFilter = Get-GPOZaurrWMI -ExtendedForestInformation $ForestInformation -IncludeDomains $Domain -Name $Name
+        if ($ExistingWmiFilter.Count -eq 0) {
+            [string] $WMIParm2 = -join ("1;3;10;", $Query.Length.ToString(), ";WQL;root\CIMv2;", $Query , ";")
+            $OtherAttributes = @{
+                "msWMI-Name"             = $Name
+                "msWMI-Parm1"            = $Description
+                "msWMI-Parm2"            = $WMIParm2
+                "msWMI-Author"           = $Author
+                "msWMI-ID"               = $GUID
+                "instanceType"           = 4
+                "showInAdvancedViewOnly" = "TRUE"
+                "distinguishedname"      = $DistinguishedName
+                "msWMI-ChangeDate"       = $CurrentDate
+                "msWMI-CreationDate"     = $CurrentDate
+            }
+            $WMIPath = -join ("CN=SOM,CN=WMIPolicy,CN=System,", $defaultNamingContext)
+
+            try {
+                Write-Verbose "New-GPOZaurrWMI - Creating WMI filter $Name in $Domain"
+                New-ADObject -name $GUID -type "msWMI-Som" -Path $WMIPath -OtherAttributes $OtherAttributes -Server $QueryServer
+            } catch {
+                Write-Warning "New-GPOZaurrWMI - Creating GPO filter error $($_.Exception.Message). Terminating."
+                return
+            }
+        } else {
+            foreach ($_ in $ExistingWmiFilter) {
+                Write-Warning "New-GPOZaurrWMI - Skipping creation of GPO because name: $($_.DisplayName) guid: $($_.ID) for $($_.DomainName) already exists."
+            }
+        }
+    }
+}
@@ -0,0 +1,90 @@
+function Remove-GPOZaurr {
+    [cmdletBinding(SupportsShouldProcess)]
+    param(
+        [parameter(Mandatory)][validateset('Empty', 'Unlinked')][string[]] $Type,
+        [int] $LimitProcessing,
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+        [string[]] $GPOPath,
+        [string] $BackupPath,
+        [switch] $BackupDated
+    )
+    Begin {
+        if ($BackupPath) {
+            $BackupRequired = $true
+            if ($BackupDated) {
+                $BackupFinalPath = "$BackupPath\$((Get-Date).ToString('yyyy-MM-dd_HH_mm_ss'))"
+            } else {
+                $BackupFinalPath = $BackupPath
+            }
+            Write-Verbose "Remove-GPOZaurr - Backing up to $BackupFinalPath"
+            $null = New-Item -ItemType Directory -Path $BackupFinalPath -Force
+        } else {
+            $BackupRequired = $false
+        }
+        $Count = 0
+    }
+    Process {
+        Get-GPOZaurr -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation -GPOPath $GPOPath | ForEach-Object {
+            if ($Type -contains 'Empty') {
+                if ($_.ComputerSettingsAvailable -eq $false -and $_.UserSettingsAvailable -eq $false) {
+                    if ($BackupRequired) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName)"
+                            $BackupInfo = Backup-GPO -Guid $_.Guid -Domain $_.DomainName -Path $BackupFinalPath -ErrorAction Stop #-Server $QueryServer
+                            $BackupInfo
+                            $BackupOK = $true
+                        } catch {
+                            Write-Warning "Remove-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                            $BackupOK = $false
+                        }
+                    }
+                    if (($BackupRequired -and $BackupOK) -or (-not $BackupRequired)) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurr - Removing GPO $($_.DisplayName) from $($_.DomainName)"
+                            Remove-GPO -Domain $_.DomainName -Guid $_.Guid -ErrorAction Stop #-Server $QueryServer
+                        } catch {
+                            Write-Warning "Remove-GPOZaurr - Removing GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                        }
+                    }
+                    $Count++
+                    if ($LimitProcessing -eq $Count) {
+                        break
+                    }
+                }
+            }
+            if ($Type -contains 'Unlinked') {
+                if ($_.Linked -eq $false) {
+                    if ($BackupRequired) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName)"
+                            $BackupInfo = Backup-GPO -Guid $_.Guid -Domain $_.DomainName -Path $BackupFinalPath -ErrorAction Stop #-Server $QueryServer
+                            $BackupInfo
+                            $BackupOK = $true
+                        } catch {
+                            Write-Warning "Remove-GPOZaurr - Backing up GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                            $BackupOK = $false
+                        }
+                    }
+                    if (($BackupRequired -and $BackupOK) -or (-not $BackupRequired)) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurr - Removing GPO $($_.DisplayName) from $($_.DomainName)"
+                            Remove-GPO -Domain $_.DomainName -Guid $_.Guid -ErrorAction Stop #-Server $QueryServer
+                        } catch {
+                            Write-Warning "Remove-GPOZaurr - Removing GPO $($_.DisplayName) from $($_.DomainName) failed: $($_.Exception.Message)"
+                        }
+                    }
+                    $Count++
+                    if ($LimitProcessing -eq $Count) {
+                        break
+                    }
+                }
+            }
+        }
+    }
+    End {
+
+    }
+}
@@ -0,0 +1,167 @@
+function Remove-GPOZaurrPermission {
+    [cmdletBinding(SupportsShouldProcess, DefaultParameterSetName = 'Global')]
+    param(
+        [Parameter(ParameterSetName = 'GPOName', Mandatory)]
+        [string] $GPOName,
+
+        [Parameter(ParameterSetName = 'GPOGUID', Mandatory)]
+        [alias('GUID', 'GPOID')][string] $GPOGuid,
+
+        [string] $Principal,
+        [validateset('DistinguishedName', 'Name', 'Sid')][string] $PrincipalType = 'DistinguishedName',
+
+        [validateset('Unknown', 'Named', 'NonAdministrative', 'Default')][string[]] $Type = 'Default',
+
+        [alias('PermissionType')][Microsoft.GroupPolicy.GPPermissionType[]] $IncludePermissionType,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $ExcludePermissionType,
+        [switch] $SkipWellKnown,
+        [switch] $SkipAdministrative,
+
+        [string[]]$NamedObjects,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+
+        [int] $LimitProcessing
+    )
+    Begin {
+        $Count = 0
+    }
+    Process {
+        if ($Type -contains 'Named' -and $NamedObjects.Count -eq 0) {
+            Write-Warning "Remove-GPOZaurrPermission - When using type Named you need to provide names to remove. Terminating."
+            return
+        }
+        if ($GPOName) {
+            $Splat = @{
+                GPOName = $GPOName
+            }
+        } elseif ($GPOGUID) {
+            $Splat = @{
+                GPOGUID = $GPOGUID
+            }
+        } else {
+            $Splat = @{
+
+            }
+        }
+
+        $Splat['IncludeGPOObject'] = $true
+        $Splat['Forest'] = $Forest
+        $Splat['IncludeDomains'] = $IncludeDomains
+        $Splat['ExcludeDomains'] = $ExcludeDomains
+        $Splat['ExtendedForestInformation'] = $ExtendedForestInformation
+        $Splat['ExcludePermissionType'] = $ExcludePermissionType
+        $Splat['IncludePermissionType'] = $IncludePermissionType
+        $Splat['SkipWellKnown'] = $SkipWellKnown.IsPresent
+        $Splat['SkipAdministrative'] = $SkipAdministrative.IsPresent
+
+
+        # $GPOPermission.GPOSecurity.RemoveTrustee($GPOPermission.Sid)
+        #void RemoveTrustee(string trustee)
+        #void RemoveTrustee(System.Security.Principal.IdentityReference identity)
+        #$GPOPermission.GPOSecurity.Remove
+        #void RemoveAt(int index)
+        #void IList[GPPermission].RemoveAt(int index)
+        #void IList.RemoveAt(int index)
+
+        Get-GPOZaurrPermission @Splat | ForEach-Object -Process {
+            $GPOPermission = $_
+            if ($Type -contains 'Unknown') {
+                if ($GPOPermission.SidType -eq 'Unknown') {
+                    #Write-Verbose "Remove-GPOZaurrPermission - Removing $($GPOPermission.Sid) from $($GPOPermission.DisplayName) at $($GPOPermission.DomainName)"
+                    if ($PSCmdlet.ShouldProcess($GPOPermission.DisplayName, "Removing $($GPOPermission.Sid) from $($GPOPermission.DisplayName) at $($GPOPermission.DomainName)")) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurrPermission - Removing permission $($GPOPermission.Permission) for $($GPOPermission.Sid)"
+                            $GPOPermission.GPOSecurity.RemoveTrustee($GPOPermission.Sid)
+                            $GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+                            #$GPOPermission.GPOSecurity.RemoveAt($GPOPermission.GPOSecurityPermissionIndex)
+                            #$GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+                        } catch {
+                            Write-Warning "Remove-GPOZaurrPermission - Removing permission $($GPOPermission.Permission) for $($GPOPermission.Sid) with error: $($_.Exception.Message)"
+                        }
+                        # Set-GPPPermission doesn't work on Unknown Accounts
+                    }
+                    $Count++
+                    if ($Count -eq $LimitProcessing) {
+                        # skipping skips per removed permission not per gpo.
+                        break
+                    }
+                }
+            }
+            if ($Type -contains 'Named') {
+                <#
+                if ($PrincipalType -eq 'DistinguishedName') {
+
+                } elseif ($PrincipalType -eq 'Sid') {
+                    if ($GPOPermission.Sid -eq $Principal -and $GPOPermission.Permission -eq $IncludePermissionType) {
+
+                    }
+                } elseif ($PrincipalType -eq 'Name') {
+                    if ($GPOPermission.Name -eq $Principal -and $GPOPermission.Permission -eq $IncludePermissionType) {
+
+                    }
+                }
+                if ($NamedObjects -contains $GPOPermission.Sid) {
+                    #Write-Verbose "Remove-GPOZaurrPermission - Removing $($GPOPermission.Sid) from $($GPOPermission.DisplayName) at $($GPOPermission.DomainName)"
+                    if ($PSCmdlet.ShouldProcess($GPOPermission.DisplayName, "Removing $($GPOPermission.Sid) from $($GPOPermission.DisplayName) at $($GPOPermission.DomainName)")) {
+                        $GPOPermission.GPOSecurity.RemoveTrustee($GPOPermission.Sid)
+                        $GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+                        # Set-GPPPermission doesn't work on Unknown Accounts
+                    }
+                    $Count++
+                    if ($Count -eq $LimitProcessing) {
+                        # skipping skips per removed permission not per gpo.
+                        break
+                    }
+                }
+                #>
+            }
+            if ($Type -contains 'NonAdministrative') {
+
+            }
+            if ($Type -contains 'Default') {
+                if ($PrincipalType -eq 'DistinguishedName') {
+                    if ($GPOPermission.DistinguishedName -eq $Principal -and $GPOPermission.Permission -eq $IncludePermissionType) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurrPermission - Removing permission $IncludePermissionType for $($Principal)"
+                            $GPOPermission.GPOSecurity.RemoveAt($GPOPermission.GPOSecurityPermissionIndex)
+                            $GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+                        } catch {
+                            Write-Warning "Remove-GPOZaurrPermission - Adding permission $IncludePermissionType failed for $($Principal) with error: $($_.Exception.Message)"
+                        }
+                    }
+                } elseif ($PrincipalType -eq 'Sid') {
+                    if ($GPOPermission.Sid -eq $Principal -and $GPOPermission.Permission -eq $IncludePermissionType) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurrPermission - Removing permission $IncludePermissionType for $($Principal)"
+                            $GPOPermission.GPOSecurity.RemoveAt($GPOPermission.GPOSecurityPermissionIndex)
+                            $GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+                        } catch {
+                            Write-Warning "Remove-GPOZaurrPermission - Adding permission $IncludePermissionType failed for $($Principal) with error: $($_.Exception.Message)"
+                        }
+                    }
+                } elseif ($PrincipalType -eq 'Name') {
+                    if ($GPOPermission.Name -eq $Principal -and $GPOPermission.Permission -eq $IncludePermissionType) {
+                        try {
+                            Write-Verbose "Remove-GPOZaurrPermission - Removing permission $IncludePermissionType for $($Principal)"
+                            $GPOPermission.GPOSecurity.RemoveAt($GPOPermission.GPOSecurityPermissionIndex)
+                            $GPOPermission.GPOObject.SetSecurityInfo($GPOPermission.GPOSecurity)
+                        } catch {
+                            Write-Warning "Remove-GPOZaurrPermission - Adding permission $IncludePermissionType failed for $($Principal) with error: $($_.Exception.Message)"
+                        }
+                    }
+                }
+
+            }
+            #Set-GPPermission -PermissionLevel None -TargetName $GPOPermission.Sid -Verbose -DomainName $GPOPermission.DomainName -Guid $GPOPermission.GUID #-WhatIf
+            #Set-GPPermission -PermissionLevel GpoRead -TargetName 'Authenticated Users' -TargetType Group -Verbose -DomainName $Domain -Guid $_.GUID -WhatIf
+
+        }
+    }
+    End {
+
+    }
+}
@@ -0,0 +1,33 @@
+function Remove-GPOZaurrWMI {
+    [CmdletBinding(SupportsShouldProcess)]
+    Param (
+        [Guid[]] $Guid,
+        [string[]] $Name,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    if (-not $Forest -and -not $ExcludeDomains -and -not $IncludeDomains -and -not $ExtendedForestInformation) {
+        $IncludeDomains = $Env:USERDNSDOMAIN
+    }
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    foreach ($Domain in $ForestInformation.Domains) {
+        $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        [Array] $Objects = @(
+            if ($Guid) {
+                Get-GPOZaurrWMI -Guid $Guid -ExtendedForestInformation $ForestInformation -IncludeDomains $Domain
+            }
+            if ($Name) {
+                Get-GPOZaurrWMI -Name $Name -ExtendedForestInformation $ForestInformation -IncludeDomains $Domain
+            }
+        )
+        $Objects | ForEach-Object -Process {
+            if ($_.DistinguishedName) {
+                Write-Verbose "Remove-GPOZaurrWMI - Removing WMI Filter $($_.DistinguishedName)"
+                Remove-ADObject $_.DistinguishedName -Confirm:$false -Server $QueryServer
+            }
+        }
+    }
+}
@@ -0,0 +1,64 @@
+function Restore-GPOZaurr {
+    [cmdletBinding()]
+    param(
+        [parameter(Mandatory)][string] $BackupFolder,
+        [alias('Name')][string] $DisplayName,
+        [string] $NewDisplayName,
+        [string] $Domain,
+        [switch] $SkipBackupSummary
+    )
+    if ($BackupFolder) {
+        if (Test-Path -LiteralPath $BackupFolder) {
+            if ($DisplayName) {
+                if (-not $SkipBackupSummary) {
+                    $BackupSummary = Get-GPOZaurrBackupInformation -BackupFolder $BackupFolder
+                    if ($Domain) {
+                        [Array] $FoundGPO = $BackupSummary | Where-Object { $_.DisplayName -eq $DisplayName -and $_.DomainName -eq $Domain }
+                    } else {
+                        [Array] $FoundGPO = $BackupSummary | Where-Object { $_.DisplayName -eq $DisplayName }
+                    }
+                    foreach ($GPO in $FoundGPO) {
+                        if ($NewDisplayName) {
+                            Import-GPO -Path $BackupFolder -BackupID $GPO.ID -Domain $GPO.Domain -TargetName $NewDisplayName -CreateIfNeeded
+                        } else {
+                            Write-Verbose "Restore-GPOZaurr - Restoring GPO $($GPO.DisplayName) from $($GPO.DomainName) / BackupId: $($GPO.ID)"
+                            try {
+                                Restore-GPO -Path $BackupFolder -BackupID $GPO.ID -Domain $GPO.DomainName
+                            } catch {
+                                Write-Warning "Restore-GPOZaurr - Restoring GPO $($GPO.DisplayName) from $($GPO.DomainName) failed: $($_.Exception.Message)"
+                            }
+                        }
+                    }
+                } else {
+                    if ($Domain) {
+                        Write-Verbose "Restore-GPOZaurr - Restoring GPO $($Name) from $($Domain)"
+                        try {
+                            Restore-GPO -Path $BackupFolder -Name $Name -Domain $Domain
+                        } catch {
+                            Write-Warning "Restore-GPOZaurr - Restoring GPO $($Name) from $($Domain) failed: $($_.Exception.Message)"
+                        }
+                    } else {
+                        Write-Verbose "Restore-GPOZaurr - Restoring GPO $($Name)"
+                        try {
+                            Restore-GPO -Path $BackupFolder -Name $Name
+                        } catch {
+                            Write-Warning "Restore-GPOZaurr - Restoring GPO $($Name) failed: $($_.Exception.Message)"
+                        }
+                    }
+                }
+            } else {
+                $BackupSummary = Get-GPOZaurrBackupInformation -BackupFolder $BackupFolder
+                foreach ($GPO in $BackupSummary) {
+                    Write-Verbose "Restore-GPOZaurr - Restoring GPO $($GPO.DisplayName) from $($GPO.DomainName) / BackupId: $($GPO.ID)"
+                    try {
+                        Restore-GPO -Path $BackupFolder -Domain $GPO.DomainName -BackupId $GPO.ID
+                    } catch {
+                        Write-Warning "Restore-GPOZaurr - Restoring GPO $($GPO.DisplayName) from $($GPO.DomainName) failed: $($_.Exception.Message)"
+                    }
+                }
+            }
+        } else {
+            Write-Warning "Restore-GPOZaurr - BackupFolder incorrect ($BackupFolder)"
+        }
+    }
+}
@@ -5,7 +5,8 @@
        [string[]] $ExcludeDomains,
        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
        [System.Collections.IDictionary] $ExtendedForestInformation,
-        [string[]] $GPOPath
+        [string[]] $GPOPath,
+        [switch] $DeleteExisting
    )
    if ($GPOPath) {
        if (-not $ExtendedForestInformation) {
@@ -13,8 +14,18 @@
        } else {
            $ForestInformation = $ExtendedForestInformation
        }
+
+        if ($DeleteExisting) {
+            $Test = Test-Path -LiteralPath $GPOPath
+            if ($Test) {
+                Write-Verbose "Save-GPOZaurrFiles - Removing existing content in $GPOPath"
+                Remove-Item -LiteralPath $GPOPath -Recurse
+            }
+        }
+
        $null = New-Item -ItemType Directory -Path $GPOPath -Force
        foreach ($Domain in $ForestInformation.Domains) {
+            Write-Verbose "Save-GPOZaurrFiles - Processing GPO for $Domain"
            Get-GPO -All -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain | ForEach-Object {
                $XMLContent = Get-GPOReport -ID $_.ID.Guid -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain
                $Path = [io.path]::Combine($GPOPath, "$($_.ID.Guid).xml")
@@ -0,0 +1,114 @@
+function Set-GPOZaurrOwner {
+    [cmdletBinding(SupportsShouldProcess, DefaultParameterSetName = 'Type')]
+    param(
+        [Parameter(ParameterSetName = 'Type', Mandatory)]
+        [validateset('EmptyOrUnknown', 'NonAdministrative', 'All')][string[]] $Type,
+
+        [Parameter(ParameterSetName = 'Named')][string] $GPOName,
+        [Parameter(ParameterSetName = 'Named')][alias('GUID', 'GPOID')][string] $GPOGuid,
+
+        [Parameter(ParameterSetName = 'Type')]
+        [Parameter(ParameterSetName = 'Named')]
+        [alias('ForestName')][string] $Forest,
+
+        [Parameter(ParameterSetName = 'Type')]
+        [Parameter(ParameterSetName = 'Named')]
+        [string[]] $ExcludeDomains,
+
+        [Parameter(ParameterSetName = 'Type')]
+        [Parameter(ParameterSetName = 'Named')]
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+
+        [Parameter(ParameterSetName = 'Type')]
+        [Parameter(ParameterSetName = 'Named')]
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+
+        [Parameter(ParameterSetName = 'Type')]
+        [Parameter(ParameterSetName = 'Named')]
+        [string] $Principal,
+
+        [Parameter(ParameterSetName = 'Type')]
+        [Parameter(ParameterSetName = 'Named')]
+        [int] $LimitProcessing
+    )
+    Begin {
+        $ADAdministrativeGroups = Get-ADADministrativeGroups -Type DomainAdmins, EnterpriseAdmins -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+        $Count = 0
+    }
+    Process {
+        if ($Type) {
+            Get-GPOZaurr -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation -Verbose:$false | ForEach-Object -Process {
+                $GPO = $_
+                if ($Type -contains 'All') {
+                    # Regardless who is the owner it is overwritten
+                    if ($Principal) {
+                        Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner $($GPO.Owner)/$($GPO.OwnerSID) to $Principal"
+                        Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                    } else {
+                        $DefaultPrincipal = $ADAdministrativeGroups["$($GPO.DomainName)"]['DomainAdmins']
+                        Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner $($GPO.Owner)/$($GPO.OwnerSID) to $DefaultPrincipal"
+                        Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                        $Count++
+                        if ($Count -eq $LimitProcessing) {
+                            break
+                        }
+                    }
+                }
+                if ($Type -contains 'NonAdministrative' -and $Type -notcontains 'All') {
+                    if ($GPO.Owner) {
+                        $AdministrativeGroup = $ADAdministrativeGroups['ByNetBIOS']["$($GPO.Owner)"]
+                        if (-not $AdministrativeGroup) {
+                            if ($Principal) {
+                                Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner $($GPO.Owner)/$($GPO.OwnerSID) to $Principal"
+                                Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                            } else {
+                                $DefaultPrincipal = $ADAdministrativeGroups["$($GPO.DomainName)"]['DomainAdmins']
+                                Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner $($GPO.Owner)/$($GPO.OwnerSID) to $DefaultPrincipal"
+                                Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                                $Count++
+                                if ($Count -eq $LimitProcessing) {
+                                    break
+                                }
+                            }
+                        }
+                    }
+                }
+                if ($Type -contains 'EmptyOrUnknown' -and $Type -notcontains 'All') {
+                    if ($null -eq $GPO.Owner) {
+                        if ($Principal) {
+                            Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner NULL/$($GPO.OwnerSID) to $Principal"
+                            Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                        } else {
+                            $DefaultPrincipal = $ADAdministrativeGroups["$($GPO.DomainName)"]['DomainAdmins']
+                            Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner NULL/$($GPO.OwnerSID) to $DefaultPrincipal"
+                            Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                        }
+                        $Count++
+                        if ($Count -eq $LimitProcessing) {
+                            break
+                        }
+                    }
+                }
+            }
+        } else {
+            Get-GPOZaurr -GPOName $GPOName -GPOGuid $GPOGUiD -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation -Verbose:$false | ForEach-Object -Process {
+                $GPO = $_
+                if ($Principal) {
+                    Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner $($GPO.Owner)/$($GPO.OwnerSID) to $Principal"
+                    Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $Principal -Verbose:$false -WhatIf:$WhatIfPreference
+                } else {
+                    $DefaultPrincipal = $ADAdministrativeGroups["$($GPO.DomainName)"]['DomainAdmins']
+                    Write-Verbose "Set-GPOZaurrOwner - Changing GPO: $($GPO.DisplayName) from domain: $($GPO.DomainName) from owner $($GPO.Owner)/$($GPO.OwnerSID) to $DefaultPrincipal"
+                    Set-ADACLOwner -ADObject $GPO.DistinguishedName -Principal $DefaultPrincipal -Verbose:$false -WhatIf:$WhatIfPreference
+                }
+                $Count++
+                if ($Count -eq $LimitProcessing) {
+                    break
+                }
+            }
+        }
+    }
+    End {
+
+    }
+}
Author	SHA1	Message	Date
Przemysław Kłys	f0f2b51c7d	Updates to all commands	2020-04-21 09:11:37 +02:00
Przemysław Kłys	b513acc29f	Update to psd1	2020-04-21 09:11:12 +02:00
Przemysław Kłys	2107d52eed	Updates to examples	2020-04-21 09:10:48 +02:00
Przemysław Kłys	905cbf44e1	Update examples	2020-04-19 16:38:29 +02:00
Przemysław Kłys	8e86b91350	Update docs	2020-04-19 16:36:41 +02:00
Przemysław Kłys	3e7fd7b5b7	Update	2020-04-14 12:16:55 +02:00
Przemysław Kłys	b19e2108ed	Update	2020-04-14 12:03:27 +02:00
Przemysław Kłys	7dc64c484f	Update	2020-04-13 20:51:56 +02:00
Przemysław Kłys	5af51e8022	Update	2020-04-12 19:19:01 +02:00
Przemysław Kłys	4a1fa30e7d	Update	2020-04-12 19:18:54 +02:00
Przemysław Kłys	02dcbdac9d	Update	2020-04-12 16:37:38 +02:00
Przemysław Kłys	82e0e16019	Updates	2020-04-12 10:31:49 +02:00
Przemysław Kłys	3821a38b32	Update	2020-04-10 18:06:17 +02:00
Przemysław Kłys	7fbb65107c	update	2020-04-10 16:58:44 +02:00
Przemysław Kłys	0d12bb9b05	Update	2020-04-10 16:48:15 +02:00
Przemysław Kłys	cfdd544491	Update	2020-04-09 20:15:35 +02:00
Przemysław Kłys	7394c7b5cc	Update	2020-04-09 19:55:46 +02:00
Przemysław Kłys	9a1e445083	Update	2020-04-09 11:05:16 +02:00
Przemysław Kłys	238f84309b	Update 0.0.6	2020-04-08 20:23:08 +02:00
Przemysław Kłys	7dfe5b0e41	Update	2020-04-07 20:27:03 +02:00
Przemysław Kłys	3fce54e75a	Update	2020-04-07 20:26:28 +02:00
Przemysław Kłys	1241cf3680	Update	2020-04-03 11:17:07 +02:00