Update

Examples/Example-22-RemoveLegacyADMFiles.ps1

@@ -1,3 +1,3 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
-Remove-GPOZaurrLegacyFiles -Verbose -BackupPath $Env:USERPROFILE\Desktop\BackupADM1 -BackupDated -RemoveEmptyFolders #-WhatIf #-LimitProcessing 2 -WhatIf
+Remove-GPOZaurrLegacyFiles -Verbose -BackupPath $Env:USERPROFILE\Desktop\BackupADM1 -BackupDated -RemoveEmptyFolders -WhatIf -LimitProcessing 2

Examples/Example-26-Files.ps1

@@ -1,10 +0,0 @@
-Clear-Host
-Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
-
-$Output = Get-GPOZaurrSysvol | ForEach-Object {
-    $Path = $_.Path
-    Get-ChildItem -Path $Path -ErrorAction SilentlyContinue -Recurse -ErrorVariable err -File | ForEach-Object {
-        Get-FileMetaData -File $_ -Signature -HashAlgorithm 'SHA256'
-    }
-}
-$Output | Format-Table

Examples/Example-26-ListInvokeGpozaurrTypes.ps1

@@ -0,0 +1,6 @@
+Clear-Host
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+$Dictionary = Get-GPOZaurrDictionary #-Splitter '; '
+$Dictionary | Format-Table
+$Dictionary | Out-HtmlView

Examples/Example-28-SaveGPO.ps1

@@ -1,4 +1,4 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
 #Save-GPOZaurrFiles -GPOPath $ENV:USERPROFILE\Desktop\GPOExport -DeleteExisting
-Save-GPOZaurrFiles -GPOPath 'C:\Support\GitHub\GpoZaurr\Ignore\GPOExport' #-DeleteExisting
+Save-GPOZaurrFiles -GPOPath 'C:\Support\GitHub\GpoZaurr\Ignore\GPOExportEvotec' #-DeleteExisting

Examples/Example-29-FindGPO0.ps1

@@ -1,4 +1,4 @@
-#Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
 # Asses GPO based on exported data
 $Output = Invoke-GPOZaurr -GPOPath $Env:USERPROFILE\Desktop\GPOExport -Verbose

Examples/Example-29-FindGPO1.ps1

@@ -1,7 +1,9 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
-$Output = Invoke-GPOZaurr
+$Output = Invoke-GPOZaurr -GPOPath 'C:\Support\GitHub\GpoZaurr\Ignore\GPOExportEvotec1'
 $Output | Format-Table
+$Output.Reports.RegistrySettings | Format-Table *
+$Output.Reports.InternetExplorerZones | Format-Table *
 
 # Report to Excel of translated reports
 foreach ($Key in $Output.Reports.Keys) {
@@ -12,7 +14,7 @@ foreach ($Key in $Output.Reports.Keys) {
 New-HTML {
     foreach ($Key in $Output.Reports.Keys) {
         New-HTMLTab -Name $Key {
-            New-HTMLTable -DataTable $Output.Reports[$Key]  -Filtering
+            New-HTMLTable -DataTable $Output.Reports[$Key] -Filtering
         }
     }
 } -FilePath $Env:USERPROFILE\Desktop\GPOAnalysis.html -ShowHTML -Online

Examples/Example-30-FindPolicyDefinitions.ps1

@@ -1,6 +1,6 @@
 Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
-$Policies = Get-GPOZaurrFilesPolicyDefinitions -Signature
+$Policies = Get-GPOZaurrFilesPolicyDefinition -Signature
 $Policies | Format-Table
 #$Policies.FilesToDelete | Format-Table *
 $Policies['ad.evotec.xyz'] | Format-Table *

Examples/Example-33-CleanupPrivateDFSR.ps1

@@ -4,7 +4,7 @@ Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
 
 # Get dfsr information
 $DFSR = Get-GPOZaurrSysvolDFSR
-$DFSR | Format-Table
+$DFSR | Format-Table *
 
 # Cleanup DFSR Conflict Path
 Clear-GPOZaurrSysvolDFSR -WhatIf

Examples/Example-34-GPOSupport.ps1

@@ -0,0 +1,5 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+Invoke-GPOZaurrSupport -ComputerName 'AD1' -UserName 'przemyslaw.klys' -Type HTML
+#$Support
+# $Support.ComputerResults.GPO | select name, @{LABEL=”LinkOrder“;EXPRESSION={$_.link.linkorder}} | sort linkorder

Examples/Example-35-FindCSE.ps1

@@ -0,0 +1,21 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# Extracts CSE from registry
+$AllRegistryExtensions = Find-CSExtension
+$AllRegistryExtensions | Format-Table
+
+# Uses Hashtable - similar to above but much faster
+$AllRegistryExtensionsFaster = foreach ($CSE in $AllRegistryExtensions) {
+    ConvertFrom-CSExtension -CSE $CSE.CSE
+}
+$AllRegistryExtensionsFaster | Format-Table
+
+# With this we can find out if we're missing anything in hashtable so we can update code if nessecary
+$MissingEntries = foreach ($CSE in $AllRegistryExtensions) {
+    $Output = ConvertFrom-CSExtension -CSE $CSE.CSE
+    if ($Output.CSE -eq $Output.Description) {
+        # THis means the value in hashtable is missing this entry and we should add it
+        $CSE
+    }
+}
+$MissingEntries | Format-Table

Examples/Example-36-FindBlockedInheritance.ps1

@@ -0,0 +1,10 @@
+Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
+
+# Get basic output DN, CanonicalName, BlockInheritance (True/False)
+#$Objects = Get-GPOZaurrInheritance
+#$Objects | Format-Table
+
+# Get same output DN, CanonicalName, BlockInheritance (True/False) + Users/Computers + UsersCount/ComputerCount for those with Blocked Inhertiance
+# This is so you can have a list what machines are affected
+$Objects = Get-GPOZaurrInheritance -IncludeBlockedObjects -OnlyBlockedInheritance
+$Objects | Format-Table

GPOZaurr.psd1

@@ -1,13 +1,13 @@
 @{
-    AliasesToExport      = 'Find-GPO'
+    AliasesToExport      = 'Get-GPOZaurrFilesPolicyDefinitions', 'Find-GPO'
     Author               = 'Przemyslaw Klys'
     CompanyName          = 'Evotec'
     CompatiblePSEditions = 'Desktop'
     Copyright            = '(c) 2011 - 2020 Przemyslaw Klys @ Evotec. All rights reserved.'
     Description          = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
-    FunctionsToExport    = 'Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinitions', 'Get-GPOZaurrFolders', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrSysvol', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrPermission', 'New-GPOZaurrWMI', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrOrphanedSysvolFolders', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner'
+    FunctionsToExport    = 'Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvol', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrOrphanedSysvolFolders', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner'
     GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-    ModuleVersion        = '0.0.51'
+    ModuleVersion        = '0.0.59'
     PowerShellVersion    = '5.1'
     PrivateData          = @{
         PSData = @{
@@ -17,11 +17,11 @@
         }
     }
     RequiredModules      = @{
-        ModuleVersion = '0.0.165'
+        ModuleVersion = '0.0.168'
         ModuleName    = 'PSSharedGoods'
         Guid          = 'ee272aa8-baaa-4edf-9f45-b6d6f7d844fe'
     }, @{
-        ModuleVersion = '0.0.65'
+        ModuleVersion = '0.0.67'
         ModuleName    = 'ADEssentials'
         Guid          = '9fc9fd61-7f11-4f4b-a527-084086f1905f'
     }, 'ActiveDirectory', 'GroupPolicy', 'CimCmdlets', 'Microsoft.PowerShell.Management', 'Microsoft.PowerShell.Utility'

Private/ConvertFrom-XMLRSOP.ps1

@@ -0,0 +1,243 @@
+function ConvertFrom-XMLRSOP {
+    [cmdletBinding()]
+    param(
+        [System.Xml.XmlElement]$Content,
+        [string] $ResultsType,
+        [Microsoft.GroupPolicy.GPRsop] $ResultantSetPolicy,
+        [string] $Splitter = [System.Environment]::NewLine
+    )
+    $GPOPrimary = [ordered] @{
+        Summary              = $null
+        SummaryDetails       = [System.Collections.Generic.List[PSCustomObject]]::new()
+        SummaryDownload      = $null
+        ResultantSetPolicy   = $ResultantSetPolicy
+
+        GroupPolicies        = $null
+        GroupPoliciesLinks   = $null
+        GroupPoliciesApplied = $null
+        GroupPoliciesDenied  = $null
+        Results              = [ordered]@{}
+    }
+
+    $Object = [ordered] @{
+        ReadTime           = [DateTime] $Content.ReadTime
+        ComputerName       = $Content.$ResultsType.Name
+        DomainName         = $Content.$ResultsType.Domain
+        OrganizationalUnit = $Content.$ResultsType.SOM
+        Site               = $Content.$ResultsType.Site
+        GPOTypes           = $Content.$ResultsType.ExtensionData.Name.'#text' -join $Splitter
+        SlowLink           = if ($Content.$ResultsType.SlowLink -eq 'true') { $true } else { $false };
+    }
+
+    $GPOPrimary['Summary'] = $Object
+    [Array] $GPOPrimary['SecurityGroups'] = foreach ($Group in $Content.$ResultsType.SecurityGroup) {
+        [PSCustomObject] @{
+            Name = $Group.Name.'#Text'
+            SID  = $Group.SID.'#Text'
+        }
+    }
+    [Array] $GPOPrimary['GroupPolicies'] = foreach ($GPO in $Content.$ResultsType.GPO) {
+
+        <#
+        $EventsReason = @{
+            'NOTAPPLIED-EMPTY' = 'Not Applied (Empty)'
+            'DENIED-WMIFILTER' = 'Denied (WMI Filter)'
+            'DENIED-SECURITY'  = 'Denied (Security)'
+        }
+        #>
+        # Lets translate CSE extensions as some didn't translate automatically
+        $ExtensionName = $GPO.ExtensionName | ForEach-Object {
+            ConvertFrom-CSExtension -CSE $_ -Limited
+        }
+        $GPOObject = [PSCustomObject] @{
+            Name           = $GPO.Name
+            #Path             = $GPO.Path
+            GUID           = $GPO.Path.Identifier.'#text'
+            DomainName     = if ($GPO.Path.Domain.'#text') { $GPO.Path.Domain.'#text' } else { 'Local Policy' };
+            #VersionDirectory = $GPO.VersionDirectory
+            #VersionSysvol    = $GPO.VersionSysvol
+            Revision       = -join ('AD (', $GPO.VersionDirectory, '), SYSVOL (', $GPO.VersionSysvol, ')')
+            IsValid        = if ($GPO.IsValid -eq 'true') { $true } else { $false };
+            Status         = if ($GPO.FilterAllowed -eq 'true' -and $GPO.AccessDenied -eq 'false') { 'Applied' } else { 'Denied' };
+            FilterAllowed  = if ($GPO.FilterAllowed -eq 'true') { $true } else { $false };
+            AccessAllowed  = if ($GPO.AccessDenied -eq 'true') { $false } else { $true };
+            FilterName     = $GPO.FilterName  # : Test
+            ExtensionName  = ($ExtensionName | Sort-Object -Unique) -join '; '
+            # This isn't really pretty for large amount of links but can be useful for assesing things
+            SOMOrder       = $GPO.Link.SOMOrder -join '; '
+            AppliedOrder   = $GPO.Link.AppliedOrder -join '; '
+            LinkOrder      = $GPO.Link.LinkOrder -join '; '
+            Enabled        = ($GPO.Link.Enabled | ForEach-Object { if ($_ -eq 'true') { $true } else { $false }; }) -join '; '
+            Enforced       = ($GPO.Link.NoOverride | ForEach-Object { if ($_ -eq 'true') { $true } else { $false }; }) -join '; ' # : true
+            SecurityFilter = $GPO.SecurityFilter -join '; ' # SecurityFilter   : {NT AUTHORITY\Authenticated Users, EVOTEC\GDS-TestGroup3}
+            FilterId       = $GPO.FilterID #   : MSFT_SomFilter.ID="{ff08bc72-dae6-4890-b4cf-85a9c3b00056}",Domain="ad.evotec.xyz"
+            Links          = $GPO.Link.SOMPath -join '; '
+        }
+        $GPOObject
+    }
+    [Array] $GPOPrimary['GroupPoliciesLinks'] = foreach ($GPO in $Content.$ResultsType.GPO) {
+        foreach ($Link in $GPO.Link) {
+            [PSCustomObject] @{
+                DisplayName  = $GPO.Name
+                DomainName   = $GPO.Path.Domain.'#text'
+                GUID         = $GPO.Path.Identifier.'#text'
+                SOMPath      = $Link.SOMPath      # : ad.evotec.xyz
+                SOMOrder     = $Link.SOMOrder     # : 2
+                AppliedOrder = $Link.AppliedOrder # : 0
+                LinkOrder    = $Link.LinkOrder    # : 4
+                Enabled      = if ($Link.Enabled -eq 'true') { $true } else { $false }; # : true
+                Enforced     = if ($Link.NoOverride -eq 'true') { $true } else { $false }; # : true
+            }
+        }
+    }
+
+    [Array] $GPOPrimary['ScopeOfManagement'] = foreach ($SOM in $Content.$ResultsType.SearchedSOM) {
+        [PSCustomObject] @{
+            Path              = $SOM.Path
+            Type              = $SOM.Type
+            Order             = $SOM.Order
+            BlocksInheritance = if ($SOM.BlocksInheritance -eq 'true') { $true } else { $false };
+            Blocked           = if ($SOM.Blocked -eq 'true') { $true } else { $false };
+            Reason            = if ($SOM.Reason -eq 'true') { $true } else { $false };
+        }
+    }
+    [Array] $GPOPrimary['ExtensionStatus'] = foreach ($Details in $Content.$ResultsType.ExtensionStatus) {
+        [PSCustomObject] @{
+            Name          = $Details.Name          # : Registry
+            Identifier    = $Details.Identifier    # : {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
+            BeginTime     = $Details.BeginTime     # : 2020-04-02T12:05:10
+            EndTime       = $Details.EndTime       # : 2020-04-02T12:05:10
+            LoggingStatus = $Details.LoggingStatus # : Complete
+            Error         = $Details.Error         # : 0
+        }
+    }
+    [Array] $GPOPrimary['ExtensionData'] = $Content.$ResultsType.ExtensionData.Extension
+
+
+    foreach ($Single in $Content.$ResultsType.EventsDetails.SinglePassEventsDetails) {
+        $GPOPrimary['Results']["$($Single.ActivityId)"] = [ordered] @{}
+
+        $GPOPrimary['Results']["$($Single.ActivityId)"]['SummaryDetails'] = [Ordered] @{
+            ActivityId                      = $Single.ActivityId                      # : {6400d0bf-ac88-4ee6-b2c2-ca2cbbab0695}
+            ProcessingTrigger               = $Single.ProcessingTrigger               # : Periodic
+            ProcessingAppMode               = $Single.ProcessingAppMode               # : Background
+            LinkSpeedInKbps                 = $Single.LinkSpeedInKbps                 # : 0
+            SlowLinkThresholdInKbps         = $Single.SlowLinkThresholdInKbps         # : 500
+            DomainControllerName            = $Single.DomainControllerName            # : AD1.ad.evotec.xyz
+            DomainControllerIPAddress       = $Single.DomainControllerIPAddress       # : 192.168.240.189
+            PolicyProcessingMode            = $Single.PolicyProcessingMode            # : None
+            PolicyElapsedTimeInMilliseconds = $Single.PolicyElapsedTimeInMilliseconds # : 1202
+            ErrorCount                      = $Single.ErrorCount                      # : 0
+            WarningCount                    = $Single.WarningCount                    # : 0
+        }
+
+        $GPOPrimary['SummaryDetails'].Add([PSCustomObject] $GPOPrimary['Results']["$($Single.ActivityId)"]['SummaryDetails'])
+
+        [Array] $GPOPrimary['Results']["$($Single.ActivityId)"]['ProcessingTime'] = foreach ($Details in $Single.ExtensionProcessingTime) {
+            [PSCustomObject] @{
+                ExtensionName             = $Details.ExtensionName
+                ExtensionGuid             = $Details.ExtensionGuid
+                ElapsedTimeInMilliseconds = $Details.ElapsedTimeInMilliseconds
+                ProcessedTimeStamp        = $Details.ProcessedTimeStamp
+            }
+        }
+
+
+        $EventsLevel = @{
+            '5' = 'Verbose'
+            '4' = 'Informational'
+            '3' = 'Warning'
+            '2' = 'Error'
+            '1' = 'Critical'
+            '0' = 'LogAlways'
+        }
+        $EventsReason = @{
+            'NOTAPPLIED-EMPTY' = 'Not Applied (Empty)'
+            'DENIED-WMIFILTER' = 'Denied (WMI Filter)'
+            'DENIED-SECURITY'  = 'Denied (Security)'
+        }
+
+        [Array] $GPOPrimary['Results']["$($Single.ActivityId)"]['Events'] = foreach ($Event in $Single.EventRecord) {
+            [xml] $EventDetails = $Event.EventXML
+            $EventInformation = [ordered] @{
+                Description   = $Event.EventDescription
+                Provider      = $EventDetails.Event.System.Provider.Name      # : Provider
+                ProviderGUID  = $EventDetails.Event.System.Provider.Guid
+                EventID       = $EventDetails.Event.System.EventID       # : 4006
+                Version       = $EventDetails.Event.System.Version       # : 1
+                Level         = $EventsLevel[$EventDetails.Event.System.Level]        # : 4
+                Task          = $EventDetails.Event.System.Task          # : 0
+                Opcode        = $EventDetails.Event.System.Opcode        # : 1
+                Keywords      = $EventDetails.Event.System.Keywords      # : 0x4000000000000000
+                TimeCreated   = [DateTime] $EventDetails.Event.System.TimeCreated.SystemTime   # : TimeCreated, 2020-08-09T20:16:44.5668052Z
+                EventRecordID = $EventDetails.Event.System.EventRecordID # : 10641325
+                Correlation   = $EventDetails.Event.System.Correlation.ActivityID   # : Correlation
+                Execution     = -join ("ProcessID: ", $EventDetails.Event.System.Execution.ProcessID, " ThreadID: ", $EventDetails.Event.System.Execution.ThreadID)       # : Execution
+                Channel       = $EventDetails.Event.System.Channel       # : Microsoft-Windows-GroupPolicy / Operational
+                Computer      = $EventDetails.Event.System.Computer      # : AD1.ad.evotec.xyz
+                Security      = $EventDetails.Event.System.Security.UserID      # : Security
+            }
+            foreach ($Entry in $EventDetails.Event.EventData.Data) {
+                $EventInformation["$($Entry.Name)"] = $Entry.'#text'
+            }
+            [PSCustomObject] $EventInformation
+        }
+
+        # Lets build events by ID, this will be useful for better/easier processing
+        $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID'] = [ordered] @{}
+        $GroupedEvents = $GPOPrimary['Results']["$($Single.ActivityId)"]['Events'] | Group-Object -Property EventId
+        foreach ($Events in $GroupedEvents) {
+            $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID'][$Events.Name] = $Events.Group
+        }
+
+        $GPOPrimary['Results']["$($Single.ActivityId)"]['GroupPoliciesApplied'] = & {
+            if ($GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5312']) {
+                [xml] $GPODetailsApplied = -join ('<Details>', $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5312'].GPOinfoList, '</Details>')
+                foreach ($GPO in $GPODetailsApplied.Details.GPO) {
+                    $ReturnObject = [ordered] @{
+                        GUID        = $GPO.ID         # : { 4E1F9C70-1DDB-4AB6-BBA3-14A8E07F0B4B }
+                        DisplayName = $GPO.Name       # : DC | Event Log Settings
+                        Version     = $GPO.Version    # : 851981
+                        Link        = $GPO.SOM        # : LDAP: / / OU = Domain Controllers, DC = ad, DC = evotec, DC = xyz
+                        SysvolPath  = $GPO.FSPath     # : \\ad.evotec.xyz\SysVol\ad.evotec.xyz\Policies\ { 4E1F9C70-1DDB-4AB6-BBA3-14A8E07F0B4B }\Machine
+                        #GPOTypes    = $GPO.Extensions -join '; ' # : [ { 35378EAC-683F-11D2-A89A-00C04FBBCFA2 } { D02B1F72 - 3407 - 48AE-BA88-E8213C6761F1 }]
+                    }
+                    $TranslatedExtensions = foreach ($Extension in $GPO.Extensions) {
+                        ConvertFrom-CSExtension -CSE $Extension -Limited
+                    }
+                    $ReturnObject['GPOTypes'] = $TranslatedExtensions -join '; '
+                    [PSCustomObject] $ReturnObject
+                }
+            }
+        }
+        $GPOPrimary['Results']["$($Single.ActivityId)"]['GroupPoliciesDenied'] = & {
+            if ($GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5312']) {
+                [xml] $GPODetailsDenied = -join ('<Details>', $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5313'].GPOinfoList, '</Details>')
+                foreach ($GPO in $GPODetailsDenied.Details.GPO) {
+                    [PSCustomObject] @{
+                        GUID        = $GPO.ID      #: { 6AC1786C-016F-11D2-945F-00C04fB984F9 }
+                        DisplayName = $GPO.Name    #: Default Domain Controllers Policy
+                        Version     = $GPO.Version #: 131074
+                        Link        = $GPO.SOM     #: LDAP: / / OU = Domain Controllers, DC = ad, DC = evotec, DC = xyz
+                        SysvolPath  = $GPO.FSPath  #: \\ad.evotec.xyz\sysvol\ad.evotec.xyz\Policies\ { 6AC1786C-016F-11D2-945F-00C04fB984F9 }\Machine
+                        Reason      = $EventsReason["$($GPO.Reason)"]  #: DENIED-WMIFILTER
+                    }
+                }
+            }
+        }
+
+        $GPOPrimary['Results']["$($Single.ActivityId)"]['SummaryDownload'] = & {
+            if ($GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5126']) {
+                [PSCustomObject] @{
+                    IsBackgroundProcessing  = if ($GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5126'].IsBackgroundProcessing -eq 'true') { $true } else { $false }; # : true
+                    IsAsyncProcessing       = if ($GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5126'].IsAsyncProcessing -eq 'true') { $true } else { $false }; # : false
+                    Downloaded              = $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5126'].NumberOfGPOsDownloaded               # : 7
+                    Applicable              = $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5126'].NumberOfGPOsApplicable               # : 6
+                    DownloadTimeMiliseconds = $GPOPrimary['Results']["$($Single.ActivityId)"]['EventsByID']['5126'].GPODownloadTimeElapsedInMilliseconds # : 375
+                }
+
+            }
+        }
+    }
+    $GPOPrimary
+}

Private/ConvertTo-XMLGenericPolicy.ps1

@@ -17,7 +17,6 @@ function ConvertTo-XMLGenericPolicy {
     [Array] $Policies = foreach ($Cat in $Category) {
         $GPO.DataSet | Where-Object { $_.Category -like $Cat }
     }
-    #if ($GPO.DataSet.Category -like $Category) {
     if ($Policies.Count -gt 0) {
         foreach ($Policy in $Policies) {
             #if ($Policy.Category -notlike $Category) {
@@ -87,26 +86,4 @@ function ConvertTo-XMLGenericPolicy {
         [PSCustomObject] $CreateGPO
         #}
     }
-}
-
-<# ListBox - $Value
-Name          : Items to run at logon
-State         : Enabled
-ExplicitValue : false
-Additive      : false
-ValuePrefix   :
-Value         : Value
-
-ListBox - $Value.Value
-
-Element
--------
-Element
-
-ListBox - $Value.Value.Element
-
-Data
-----
-C:\Program Files (x86)\NetPhone Client\NetPhone Client.exe
-
-#>
+}

Private/ConvertTo-XMLGenericPublicKey.ps1

@@ -0,0 +1,74 @@
+function ConvertTo-XMLGenericPublicKey {
+    [cmdletBinding()]
+    param(
+        [PSCustomObject] $GPO,
+        [string[]] $Category
+    )
+
+    $SkipNames = ('Name', 'LocalName', 'NamespaceURI', 'Prefix', 'NodeType', 'ParentNode', 'OwnerDocument', 'IsEmpty', 'Attributes', 'HasAttributes', 'SchemaInfo', 'InnerXml', 'InnerText', 'NextSibling', 'PreviousSibling', 'ChildNodes', 'FirstChild', 'LastChild', 'HasChildNodes', 'IsReadOnly', 'OuterXml', 'BaseURI', 'PreviousText')
+    foreach ($Setting in $GPO.DataSet) {
+        $CreateGPO = [ordered]@{
+            DisplayName = $GPO.DisplayName
+            DomainName  = $GPO.DomainName
+            GUID        = $GPO.GUID
+            GpoType     = $GPO.GpoType
+            #GpoCategory = $GPOEntry.GpoCategory
+            #GpoSettings = $GPOEntry.GpoSettings
+        }
+        $SettingName = $Setting.Name -split ":"
+        $CreateGPO['CreatedTime'] = $GPO.CreatedTime         # : 06.06.2020 18:03:36
+        $CreateGPO['ModifiedTime'] = $GPO.ModifiedTime        # : 17.06.2020 16:08:10
+        $CreateGPO['ReadTime'] = $GPO.ReadTime            # : 13.08.2020 10:15:37
+        $CreateGPO['SecurityDescriptor'] = $GPO.SecurityDescriptor  # : SecurityDescriptor
+        $CreateGPO['FilterDataAvailable'] = $GPO.FilterDataAvailable # : True
+
+        $Name = $SettingName[1]
+        #$Name = Format-ToTitleCase -Text $Setting.Name -RemoveWhiteSpace -RemoveChar ',', '-', "'", '\(', '\)', ':'
+        $CreateGPO['Name'] = $Name # $Setting.Name
+        #$CreateGPO['GPOSettingOrder'] = $Setting.GPOSettingOrder
+
+        #foreach ($Property in ($Setting.Properties | Get-Member -MemberType Properties).Name) {
+
+        ConvertTo-XMLNested -CreateGPO $CreateGPO -Setting $Setting -SkipNames $SkipNames #-Name $Name
+        <#
+        $Properties = $Setting.PSObject.Properties.Name | Where-Object { $_ -notin $SkipNames }
+        foreach ($Property in $Properties) {
+            If ($Property -eq 'Value') {
+                if ($Setting.$Property) {
+                    #$SubProperties = $Setting.$Property.PSObject.Properties.Name
+                    if ($Setting.$Property.Name) {
+                        $Name = $Setting.$Property.Name
+                    } else {
+                        $Name = 'Value'
+                    }
+                    if ($Setting.$Property.Number) {
+                        $CreateGPO[$Name] = $Setting.$Property.Number
+                    } elseif ($Setting.$Property.String) {
+                        $CreateGPO[$Name] = $Setting.$Property.String
+                    } else {
+                        throw
+                    }
+                }
+            } else {
+                $Name = Format-CamelCaseToDisplayName -Text $Property #-RemoveWhiteSpace -RemoveChar ',', '-', "'", '\(', '\)', ':'
+                if ($Setting.$Property -is [System.Xml.XmlElement]) {
+                    $SubPropeties = $Setting.$Property.PSObject.Properties.Name | Where-Object { $_ -notin $SkipNames }
+
+
+
+                } else {
+                    $CreateGPO[$Name] = $Setting.$Property
+                }
+            }
+        }
+        #>
+
+
+        $CreateGPO['Filters'] = $Setting.Filters
+
+        $CreateGPO['Linked'] = $GPO.Linked
+        $CreateGPO['LinksCount'] = $GPO.LinksCount
+        $CreateGPO['Links'] = $GPO.Links
+        [PSCustomObject] $CreateGPO
+    }
+}

Private/ConvertTo-XMLGenericSecuritySettings.ps1

@@ -0,0 +1,45 @@
+function ConvertTo-XMLGenericSecuritySettings {
+    [cmdletBinding()]
+    param(
+        [PSCustomObject] $GPO,
+        [string[]] $Category
+    )
+    $SkipNames = ('Name', 'LocalName', 'NamespaceURI', 'Prefix', 'NodeType', 'ParentNode', 'OwnerDocument', 'IsEmpty', 'Attributes', 'HasAttributes', 'SchemaInfo', 'InnerXml', 'InnerText', 'NextSibling', 'PreviousSibling', 'Value', 'ChildNodes', 'FirstChild', 'LastChild', 'HasChildNodes', 'IsReadOnly', 'OuterXml', 'BaseURI', 'PreviousText')
+    $UsedNames = [System.Collections.Generic.List[string]]::new()
+    [Array] $Settings = foreach ($Cat in $Category) {
+        $GPO.DataSet | Where-Object { $null -ne $_.$Cat }
+    }
+
+    if ($Settings.Count -gt 0) {
+        foreach ($Cat in $Category) {
+            foreach ($Setting in $Settings.$Cat) {
+                $CreateGPO = [ordered]@{
+                    DisplayName = $GPO.DisplayName
+                    DomainName  = $GPO.DomainName
+                    GUID        = $GPO.GUID
+                    GpoType     = $GPO.GpoType
+                    #GpoCategory = $GPOEntry.GpoCategory
+                    #GpoSettings = $GPOEntry.GpoSettings
+                }
+                #$Name = Format-ToTitleCase -Text $Setting.Name -RemoveWhiteSpace -RemoveChar ',', '-', "'", '\(', '\)', ':'
+                $CreateGPO['Name'] = $Setting.Name
+                $CreateGPO['GPOSettingOrder'] = $Setting.GPOSettingOrder
+                #foreach ($Property in ($Setting.Properties | Get-Member -MemberType Properties).Name) {
+
+                $Properties = $Setting.Properties.PSObject.Properties.Name | Where-Object { $_ -notin $SkipNames }
+                foreach ($Property in $Properties) {
+
+                    $Name = Format-CamelCaseToDisplayName -Text $Property #-RemoveWhiteSpace -RemoveChar ',', '-', "'", '\(', '\)', ':'
+                    $CreateGPO[$Name] = $Setting.Properties.$Property
+                }
+                $CreateGPO['Filters'] = $Setting.Filters
+
+                $CreateGPO['Linked'] = $GPO.Linked
+                $CreateGPO['LinksCount'] = $GPO.LinksCount
+                $CreateGPO['Links'] = $GPO.Links
+                [PSCustomObject] $CreateGPO
+            }
+        }
+    }
+
+}

Private/ConvertTo-XMLNested.ps1

@@ -0,0 +1,49 @@
+function ConvertTo-XMLNested {
+    [cmdletBinding()]
+    param(
+        [System.Collections.IDictionary] $CreateGPO,
+        [System.Xml.XmlElement] $Setting,
+        [string[]] $SkipNames,
+        [string] $Name
+    )
+
+    $Properties = $Setting.PSObject.Properties.Name | Where-Object { $_ -notin $SkipNames }
+    $TempName = $Name
+    foreach ($Property in $Properties) {
+        If ($Property -eq 'Value') {
+            if ($Setting.$Property) {
+                #$SubProperties = $Setting.$Property.PSObject.Properties.Name
+                if ($Setting.$Property.Name) {
+                    $Name = $Setting.$Property.Name
+                } else {
+                    if (-not $Name) {
+                        $Name = 'Value'
+                    }
+                }
+                if ($Setting.$Property.Number) {
+                    $CreateGPO[$Name] = $Setting.$Property.Number
+                } elseif ($Setting.$Property.String) {
+                    $CreateGPO[$Name] = $Setting.$Property.String
+                } else {
+                    $CreateGPO[$Name] = $Setting.$Property
+
+                    #throw
+                }
+            }
+        } else {
+            $Name = -join ($Name, $Property)
+            $Name = Format-CamelCaseToDisplayName -Text $Name #-RemoveWhiteSpace -RemoveChar ',', '-', "'", '\(', '\)', ':'
+            if ($Setting.$Property -is [System.Xml.XmlElement]) {
+                #$SubPropeties = $Setting.$Property.PSObject.Properties.Name | Where-Object { $_ -notin $SkipNames }
+
+
+                ConvertTo-XMLNested -Setting $Setting.$Property -CreateGPO $CreateGPO -Name $Name -SkipNames $SkipNames
+
+
+            } else {
+                $CreateGPO[$Name] = $Setting.$Property
+            }
+        }
+        $Name = $TempName
+    }
+}

Private/ConvertTo-XMLRegistryAutologonOnReport.ps1

@@ -41,9 +41,9 @@ function ConvertTo-XMLRegistryAutologonOnReport {
         $null -ne $CreateGPO['DefaultUserName'] -or
         $null -ne $CreateGPO['DefaultPassword']
     ) {
-        $CreateGPO['Linked'] = $GPOEntry.Linked        #: True
-        $CreateGPO['LinksCount'] = $GPOEntry.LinksCount    #: 1
-        $CreateGPO['Links'] = $GPOEntry.Links         #: area1.local
+        $CreateGPO['Linked'] = $GPO.Linked        #: True
+        $CreateGPO['LinksCount'] = $GPO.LinksCount    #: 1
+        $CreateGPO['Links'] = $GPO.Links         #: area1.local
         [PSCustomObject] $CreateGPO
     }
 }

Private/ConvertTo-XMLRegistryInternetExplorerZones.ps1

@@ -0,0 +1,76 @@
+function ConvertTo-XMLRegistryInternetExplorerZones {
+    [cmdletBinding()]
+    param(
+        [PSCustomObject] $GPO
+    )
+    foreach ($Registry in $GPO.Settings) {
+        $Keys = @(
+            'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\'
+            'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\'
+        )
+        $Found = $false
+        foreach ($Key in $Keys) {
+            if ($Registry.Key -like "$Key*") {
+                $Found = $true
+            }
+        }
+        if ($Found -eq $false) {
+            continue
+        }
+        # https://support.microsoft.com/en-us/help/182569/internet-explorer-security-zones-registry-entries-for-advanced-users
+        if ($Registry.Key -like 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\*') {
+            $CreateGPO = [ordered]@{
+                DisplayName = $GPO.DisplayName
+                DomainName  = $GPO.DomainName
+                GUID        = $GPO.GUID
+                GpoType     = $GPO.GpoType
+                #GpoCategory = $GPOEntry.GpoCategory
+                #GpoSettings = $GPOEntry.GpoSettings
+            }
+            $CreateGPO['Disabled'] = $Registry.Disabled
+            if ($Registry.Key -like '*EscDomains*') {
+                $CreateGPO['Configuration'] = 'Enhanced Security Configuration (ESC)'
+            } else {
+                $CreateGPO['Configuration'] = 'Domains'
+            }
+            if ($Registry.Hive -eq 'HKEY_CURRENT_USER') {
+                $CreateGPO['Type'] = 'User Policy'
+            } elseif ($Registry.Hive -eq 'HKEY_LOCAL_MACHINE') {
+                $CreateGPO['Type'] = 'Computer Policy'
+            } else {
+                $CreateGPO['Type'] = $Registry.Hive
+            }
+            if ($Registry.Value -eq '00000000') {
+                $CreateGPO['Zone'] = 'My Computer (0)'
+            } elseif ($Registry.Value -eq '00000001') {
+                $CreateGPO['Zone'] = 'Local Intranet Zone (1)'
+            } elseif ($Registry.Value -eq '00000002') {
+                $CreateGPO['Zone'] = 'Trusted Sites Zone (2)'
+            } elseif ($Registry.Value -eq '00000003') {
+                $CreateGPO['Zone'] = 'Internet Zone (3)'
+            } elseif ($Registry.Value -eq '00000004') {
+                $CreateGPO['Zone'] = 'Restricted Sites Zone (4)'
+            } else {
+                $CreateGPO['Zone'] = $Registry.Value
+            }
+            [string] $FullKey = foreach ($Key in $Keys) {
+                if ($Registry.Key -like "$Key*") {
+                    $Registry.Key.Replace($Key, '')
+                }
+            }
+            $DomainSplit = $FullKey.Split('\')
+            $Reversed = for ($i = $DomainSplit.Count - 1; $i -ge 0; $i--) {
+                $DomainSplit[$i]
+            }
+            if ($Registry.Name -eq '*') {
+                $CreateGPO['DomainZone'] = $Reversed -join '.'
+            } else {
+                $CreateGPO['DomainZone'] = -join ($Registry.Name, '://', ($Reversed -join '.'))
+            }
+            $CreateGPO['Linked'] = $GPO.Linked
+            $CreateGPO['LinksCount'] = $GPO.LinksCount
+            $CreateGPO['Links'] = $GPO.Links
+            [PSCustomObject] $CreateGPO
+        }
+    }
+}

Private/Format-CamelCaseToDisplayName.ps1

@@ -0,0 +1,27 @@
+function Format-CamelCaseToDisplayName {
+    [cmdletBinding()]
+    param(
+        [string[]] $Text,
+        [string] $AddChar
+    )
+    foreach ($string in $Text) {
+        $newString = ''
+        $stringChars = $string.GetEnumerator()
+        $charIndex = 0
+        foreach ($char in $stringChars) {
+            # If upper and not first character, add a space
+            if ([char]::IsUpper($char) -eq 'True' -and $charIndex -gt 0) {
+                $newString = $newString + $AddChar + $char.ToString()
+            } elseif ($charIndex -eq 0) {
+                # If the first character, make it a capital always
+                $newString = $newString + $char.ToString().ToUpper()
+            } else {
+                $newString = $newString + $char.ToString()
+            }
+            $charIndex++
+        }
+        $newString
+    }
+}
+
+#Format-CamelCaseToDisplayName -Text 'Test1', 'TestingMyAss', 'OtherTest', 'otherTEst'

Private/Get-XMLNestedRegistry.ps1

@@ -15,6 +15,7 @@ function Get-XMLNestedRegistry {
                         Collection      = $Collection
                         Description     = $Registry.descr
                         Changed         = try { [DateTime] $Registry.changed } catch { $Registry.changed };
+                        Disabled        = if ($Registry.disabled -eq '1') { $true } else { $false };
                         GPOSettingOrder = [int] $Registry.GPOSettingOrder
                         Action          = $Script:Actions[$Registry.Properties.action]
                         DisplayDecimal  = if ($Registry.Properties.displayDecimal -eq '1') { $true } else { $false };
@@ -38,6 +39,7 @@ function Get-XMLNestedRegistry {
                         Collection      = $Collection
                         Description     = $Registry.descr
                         Changed         = try { [DateTime] $Registry.changed } catch { $Registry.changed };
+                        Disabled        = if ($Registry.disabled -eq '1') { $true } else { $false };
                         GPOSettingOrder = [int] $Registry.GPOSettingOrder
                         Action          = $Script:Actions[$Registry.Properties.action]
                         DisplayDecimal  = if ($Registry.Properties.displayDecimal -eq '1') { $true } else { $false };
@@ -66,6 +68,7 @@ function Get-XMLNestedRegistry {
                         Collection      = $Collection
                         Description     = $Registry.descr
                         Changed         = try { [DateTime] $Registry.changed } catch { $Registry.changed };
+                        Disabled        = if ($Registry.disabled -eq '1') { $true } else { $false };
                         GPOSettingOrder = [int] $Registry.GPOSettingOrder
                         Action          = $Script:Actions[$Registry.Properties.action]
                         DisplayDecimal  = if ($Registry.Properties.displayDecimal -eq '1') { $true } else { $false };
@@ -89,6 +92,7 @@ function Get-XMLNestedRegistry {
                         Collection      = $Collection
                         Description     = $Registry.descr
                         Changed         = try { [DateTime] $Registry.changed } catch { $Registry.changed };
+                        Disabled        = if ($Registry.disabled -eq '1') { $true } else { $false };
                         GPOSettingOrder = [int] $Registry.GPOSettingOrder
                         Action          = $Script:Actions[$Registry.Properties.action]
                         DisplayDecimal  = if ($Registry.Properties.displayDecimal -eq '1') { $true } else { $false }; ;

Private/New-GPOZaurrReportConsole.ps1

@@ -0,0 +1,52 @@
+function New-GPOZaurrReportConsole {
+    param(
+        [System.Collections.IDictionary] $Results
+    )
+    Begin {
+        $GPODeny = @{
+            Color       = 'Yellow', 'Red', 'Yellow', 'Red'
+            StartSpaces = 6
+        }
+        $GPOSuccess = @{
+            Color       = 'Yellow', 'Green', 'Yellow', 'Green'
+            StartSpaces = 6
+        }
+        $WriteSummary = @{
+            Color       = 'Yellow', 'Blue'
+            StartSpaces = 3
+        }
+        $ComputerWhereApplied = ($Results.ComputerResults.GroupPolicies | Sort-Object -Property DomainName, Name).Where( { $_.Status -eq 'Applied' }, 'split')
+        $UserWhereApplied = ($Results.UserResults.GroupPolicies | Sort-Object -Property Name).Where( { $_.Status -eq 'Applied' }, 'split')
+    }
+    Process {
+        Write-Color -Text 'Computer Settings' -Color White -LinesBefore 1
+        Write-Color -Text '[>] Last time Group Policy was applied: ', $Results.ComputerResults.Summary.ReadTime @WriteSummary
+        Write-Color -Text '[>] Computer Name: ', $Results.ComputerResults.Summary.ComputerName @WriteSummary
+        Write-Color -Text '[>] Domain Name: ', $Results.ComputerResults.Summary.DomainName @WriteSummary
+        Write-Color -Text '[>] Organizational Unit: ', $Results.ComputerResults.Summary.OrganizationalUnit @WriteSummary
+        Write-Color -Text '[>] Site: ', $Results.ComputerResults.Summary.Site @WriteSummary
+        Write-Color -Text '[>] GPO Types: ', ($Results.ComputerResults.Summary.GPOTypes -replace [System.Environment]::NewLine, ', ') @WriteSummary
+        Write-Color -Text '[>] Slow link: ', ($Results.ComputerResults.Summary.SlowLink) @WriteSummary
+
+        Write-Color -Text 'Applied Group Policy Objects' -StartSpaces 3 -LinesBefore 1
+        foreach ($GPO in $ComputerWhereApplied[0]) {
+            Write-Color -Text '[+] [', $GPO.DomainName, '] ', $GPO.Name @GPOSuccess
+        }
+
+        Write-Color -Text 'Denied Group Policy Objects' -StartSpaces 3
+        foreach ($GPO in $ComputerWhereApplied[1]) {
+            Write-Color -Text '[-] [', $GPO.DomainName, '] ', $GPO.Name @GPODeny
+        }
+
+        Write-Color -Text 'User Settings' -Color Yellow -LinesBefore 1
+        Write-Color -Text 'Applied Group Policy Objects' -StartSpaces 3
+        foreach ($GPO in $UserWhereApplied[0] ) {
+            Write-Color -Text '[+] [', $GPO.DomainName, '] ', $GPO.Name @GPOSuccess
+        }
+
+        Write-Color -Text 'Denied Group Policy Objects' -StartSpaces 3
+        foreach ($GPO in $UserWhereApplied[1]) {
+            Write-Color -Text '[-] [', $GPO.DomainName, '] ', $GPO.Name @GPODeny
+        }
+    }
+}

Private/New-GPOZaurrReportHTML.ps1

@@ -0,0 +1,138 @@
+function New-GPOZaurrReportHTML {
+    [cmdletBinding()]
+    param(
+        [System.Collections.IDictionary] $Support,
+        [string] $Path,
+        [switch] $Offline,
+        [switch] $Open
+    )
+    $PSDefaultParameterValues = @{
+        "New-HTMLTable:WarningAction" = 'SilentlyContinue'
+    }
+    if (-not $Path) {
+        $Path = [io.path]::GetTempFileName().Replace('.tmp', ".html")
+    }
+    $ComputerName = $($Support.ResultantSetPolicy.LoggingComputer)
+    #$UserName = $($Support.ResultantSetPolicy.UserName)
+    #$LoggingMode = $($Support.ResultantSetPolicy.LoggingMode)
+    New-HTML -TitleText "Group Policy Report - $ComputerName" {
+        #New-HTMLTabOptions -SlimTabs -Transition -LinearGradient -SelectorColor Akaroa
+        New-HTMLTabOptions -SlimTabs `
+            -BorderBottomStyleActive solid -BorderBottomColorActive LightSkyBlue -BackgroundColorActive none `
+            -TextColorActive Black -Align left -BorderRadius 0px -RemoveShadow -TextColor Grey -TextTransform capitalize
+        New-HTMLTab -Name 'Information' {
+            New-HTMLTable -DataTable $Support.ResultantSetPolicy -HideFooter
+        }
+        foreach ($Key in $Support.Keys) {
+            if ($Key -eq 'ResultantSetPolicy') {
+                continue
+            }
+            New-HTMLTab -Name $Key {
+                New-HTMLTab -Name 'Summary' {
+                    New-HTMLSection -Invisible {
+                        New-HTMLSection -HeaderText 'Summary' {
+                            New-HTMLTable -DataTable $Support.$Key.Summary -Filtering -PagingOptions @(7, 14 )
+                            New-HTMLTable -DataTable $Support.$Key.SummaryDetails -Filtering -PagingOptions @(7, 14)
+                        }
+                        New-HTMLSection -HeaderText 'Part of Security Groups' {
+                            New-HTMLTable -DataTable $Support.$Key.SecurityGroups -Filtering -PagingOptions @(7, 14)
+                        }
+                    }
+                    <#
+                    New-HTMLSection -HeaderText 'Summary Downloads' {
+                        New-HTMLTable -DataTable $Support.$Key.SummaryDownload -HideFooter
+                    }
+                    #>
+                    New-HTMLSection -HeaderText 'Resultant Set Policy' {
+                        New-HTMLTable -DataTable $Support.$Key.ResultantSetPolicy -HideFooter
+                    }
+                }
+                New-HTMLTab -Name 'Group Policies' {
+                    New-HTMLSection -Invisible {
+                        <#
+                        New-HTMLSection -HeaderText 'Processing Time' {
+                            New-HTMLTable -DataTable $Support.$Key.ProcessingTime -Filtering
+                        }
+                        #>
+                        New-HTMLSection -HeaderText 'ExtensionStatus' {
+                            New-HTMLTable -DataTable $Support.$Key.ExtensionStatus -Filtering
+                        }
+                    }
+                    New-HTMLSection -HeaderText 'Group Policies' {
+                        New-HTMLTable -DataTable $Support.$Key.GroupPolicies -Filtering
+                    }
+                    New-HTMLSection -HeaderText 'Group Policies Links' {
+                        New-HTMLTable -DataTable $Support.$Key.GroupPoliciesLinks -Filtering
+                    }
+                    <#
+                    New-HTMLSection -HeaderText 'Group Policies Applied' {
+                        New-HTMLTable -DataTable $Support.$Key.GroupPoliciesApplied -Filtering
+                    }
+                    New-HTMLSection -HeaderText 'Group Policies Denied' {
+                        New-HTMLTable -DataTable $Support.$Key.GroupPoliciesDenied -Filtering
+                    }
+                    #>
+                }
+                New-HTMLTab -Name 'Extension Data' {
+                    New-HTMLSection -HeaderText 'Extension Data' {
+                        New-HTMLTable -DataTable $Support.$Key.ExtensionData -Filtering
+                    }
+                }
+                New-HTMLTab -Name 'Scope of Management' {
+                    New-HTMLSection -HeaderText 'Scope of Management' {
+                        New-HTMLTable -DataTable $Support.$Key.ScopeOfManagement -Filtering
+                    }
+                }
+                <#
+                New-HTMLTab -Name 'Events By ID' {
+                    foreach ($ID in $Support.$Key.EventsByID.Keys) {
+                        New-HTMLSection -HeaderText "Event ID $ID" {
+                            New-HTMLTable -DataTable $Support.$Key.EventsByID[$ID] -Filtering -AllProperties
+                        }
+                    }
+                }
+                New-HTMLTab -Name 'Events' {
+                    New-HTMLSection -HeaderText 'Events' {
+                        New-HTMLTable -DataTable $Support.$Key.Events -Filtering -AllProperties
+                    }
+                }
+                #>
+            }
+        }
+        if ($Support.ComputerResults.Results) {
+            New-HTMLTab -Name 'Details' {
+                foreach ($Detail in $Support.ComputerResults.Results.Keys) {
+                    $ShortDetails = $Support.ComputerResults.Results[$Detail]
+                    New-HTMLTab -Name $Detail {
+                        New-HTMLTab -Name 'Test' {
+                            New-HTMLSection -HeaderText 'Summary Downloads' {
+                                New-HTMLTable -DataTable $ShortDetails.SummaryDownload -HideFooter
+                            }
+                            New-HTMLSection -HeaderText 'Processing Time' {
+                                New-HTMLTable -DataTable $ShortDetails.ProcessingTime -Filtering
+                            }
+                            New-HTMLSection -HeaderText 'Group Policies Applied' {
+                                New-HTMLTable -DataTable $ShortDetails.GroupPoliciesApplied -Filtering
+                            }
+                            New-HTMLSection -HeaderText 'Group Policies Denied' {
+                                New-HTMLTable -DataTable $ShortDetails.GroupPoliciesDenied -Filtering
+                            }
+                        }
+                        New-HTMLTab -Name 'Events By ID' {
+                            foreach ($ID in $ShortDetails.EventsByID.Keys) {
+                                New-HTMLSection -HeaderText "Event ID $ID" {
+                                    New-HTMLTable -DataTable $ShortDetails.EventsByID[$ID] -Filtering -AllProperties
+                                }
+                            }
+                        }
+                        New-HTMLTab -Name 'Events' {
+                            New-HTMLSection -HeaderText 'Events' {
+                                New-HTMLTable -DataTable $ShortDetails.Events -Filtering -AllProperties
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    } -Online:(-not $Offline.IsPresent) -Open:$Open.IsPresent -FilePath $Path
+}

Public/Clear-GPOZaurrSysvolDFSR.ps1

@@ -3,8 +3,12 @@ function Clear-GPOZaurrSysvolDFSR {
     param(
         [alias('ForestName')][string] $Forest,
         [string[]] $ExcludeDomains,
+        [string[]] $ExcludeDomainControllers,
         [alias('Domain', 'Domains')][string[]] $IncludeDomains,
-        [System.Collections.IDictionary] $ExtendedForestInformation
+        [alias('DomainControllers')][string[]] $IncludeDomainControllers,
+        [switch] $SkipRODC,
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+        [int] $LimitProcessing = [int32]::MaxValue
     )
     # Based on https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/manually-clearing-the-conflictanddeleted-folder-in-dfsr/ba-p/395711
     $StatusCodes = @{
@@ -21,12 +25,17 @@ function Clear-GPOZaurrSysvolDFSR {
     #WMIC.EXE /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo where "replicatedfolderguid='70bebd41-d5ae-4524-b7df-4eadb89e511e'" call cleanupconflictdirectory
 
     # https://docs.microsoft.com/en-us/previous-versions/windows/desktop/dfsr/dfsrreplicatedfolderinfo
-    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
-    foreach ($Domain in $ForestInformation.Domains) {
-        Write-Verbose "Clear-GPOZaurrSysvolDFSR - Processing $Domain"
-        $QueryServer = $ForestInformation['QueryServers']["$Domain"].HostName[0]
-        $DFSR = Get-GPOZaurrSysvolDFSR -IncludeDomains $Domain -ExtendedForestInformation $ForestInformation
-        $Executed = Invoke-CimMethod -InputObject $DFSR.DFSR -MethodName 'cleanupconflictdirectory' -CimSession $QueryServer
+    $getGPOZaurrSysvolDFSRSplat = @{
+        Forest                    = $Forest
+        IncludeDomains            = $IncludeDomains
+        ExcludeDomains            = $ExcludeDomains
+        ExtendedForestInformation = $ExtendedForestInformation
+        ExcludeDomainControllers  = $ExcludeDomainControllers
+        IncludeDomainControllers  = $IncludeDomainControllers
+        SkipRODC                  = $SkipRODC
+    }
+    Get-GPOZaurrSysvolDFSR @getGPOZaurrSysvolDFSRSplat | Select-Object -First $LimitProcessing | ForEach-Object {
+        $Executed = Invoke-CimMethod -InputObject $_.DFSR -MethodName 'cleanupconflictdirectory' -CimSession $_.ComputerName
         if ($Executed) {
             [PSCustomObject] @{
                 Status       = $StatusCodes["$($Executed.ReturnValue)"]

Public/ConvertFrom-CSExtension.ps1

@@ -0,0 +1,89 @@
+function ConvertFrom-CSExtension {
+    [cmdletBinding()]
+    param(
+        [string[]] $CSE,
+        [switch] $Limited
+    )
+    $GUIDs = @{
+        # https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gpreg/f0dba6b8-704f-45d5-999f-1a0a694a6df9
+        '{35378EAC-683F-11D2-A89A-00C04FBBCFA2}' = 'Client-side extension GUID (CSE GUID)'
+        '{0F6B957E-509E-11D1-A7CC-0000F87571E3}' = 'Tool Extension GUID (User Policy Settings)'
+        '{D02B1F73-3407-48AE-BA88-E8213C6761F1}' = 'Tool Extension GUID (User Policy Settings)'
+        '{0F6B957D-509E-11D1-A7CC-0000F87571E3}' = 'Tool Extension GUID (Computer Policy Settings)'
+        '{D02B1F72-3407-48AE-BA88-E8213C6761F1}' = 'Tool Extension GUID (Computer Policy Settings)'
+        '{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}' = 'Wireless Group Policy'
+        '{0E28E245-9368-4853-AD84-6DA3BA35BB75}' = 'Group Policy Environment'
+        '{16be69fa-4209-4250-88cb-716cf41954e0}' = 'Central Access Policy Configuration'
+        '{17D89FEC-5C44-4972-B12D-241CAEF74509}' = 'Group Policy Local Users and Groups'
+        '{1A6364EB-776B-4120-ADE1-B63A406A76B5}' = 'Group Policy Device Settings'
+        '{25537BA6-77A8-11D2-9B6C-0000F8080861}' = 'Folder Redirection'
+        '{2A8FDC61-2347-4C87-92F6-B05EB91A201A}' = 'MitigationOptions'
+        '{346193F5-F2FD-4DBD-860C-B88843475FD3}' = 'ConfigMgr User State Management Extension.'
+        '{3610eda5-77ef-11d2-8dc5-00c04fa31a66}' = 'Microsoft Disk Quota'
+        '{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}' = 'Group Policy Network Options'
+        '{426031c0-0b47-4852-b0ca-ac3d37bfcb39}' = 'QoS Packet Scheduler'
+        '{42B5FAAE-6536-11d2-AE5A-0000F87571E3}' = 'Scripts'
+        '{4bcd6cde-777b-48b6-9804-43568e23545d}' = 'Remote Desktop USB Redirection'
+        '{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}' = 'Internet Explorer Zonemapping'
+        '{4D2F9B6F-1E52-4711-A382-6A8B1A003DE6}' = 'RADCProcessGroupPolicyEx'
+        '{4d968b55-cac2-4ff5-983f-0a54603781a3}' = 'Work Folders'
+        '{5794DAFD-BE60-433f-88A2-1A31939AC01F}' = 'Group Policy Drive Maps'
+        '{6232C319-91AC-4931-9385-E70C2B099F0E}' = 'Group Policy Folders'
+        '{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}' = 'Group Policy Network Shares'
+        '{7150F9BF-48AD-4da4-A49C-29EF4A8369BA}' = 'Group Policy Files'
+        '{728EE579-943C-4519-9EF7-AB56765798ED}' = 'Group Policy Data Sources'
+        '{74EE6C03-5363-4554-B161-627540339CAB}' = 'Group Policy Ini Files'
+        '{7933F41E-56F8-41d6-A31C-4148A711EE93}' = 'Windows Search Group Policy Extension'
+        '{7B849a69-220F-451E-B3FE-2CB811AF94AE}' = 'Internet Explorer User Accelerators'
+        '{827D319E-6EAC-11D2-A4EA-00C04F79F83A}' = 'Security'
+        '{8A28E2C5-8D06-49A4-A08C-632DAA493E17}' = 'Deployed Printer Connections'
+        '{91FBB303-0CD5-4055-BF42-E512A681B325}' = 'Group Policy Services'
+        '{A3F3E39B-5D83-4940-B954-28315B82F0A8}' = 'Group Policy Folder Options'
+        '{AADCED64-746C-4633-A97C-D61349046527}' = 'Group Policy Scheduled Tasks'
+        '{B087BE9D-ED37-454f-AF9C-04291E351182}' = 'Group Policy Registry'
+        '{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}' = '802.3 Group Policy'
+        '{BA649533-0AAC-4E04-B9BC-4DBAE0325B12}' = 'Windows To Go Startup Options'
+        '{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}' = 'Group Policy Printers'
+        '{C34B2751-1CF4-44F5-9262-C3FC39666591}' = 'Windows To Go Hibernate Options'
+        '{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' = 'Group Policy Shortcuts'
+        '{C631DF4C-088F-4156-B058-4375F0853CD8}' = 'Microsoft Offline Files'
+        '{c6dc5466-785a-11d2-84d0-00c04fb169f7}' = 'Software Installation'
+        '{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}' = 'TCPIP'
+        '{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}' = 'Internet Explorer Machine Accelerators'
+        '{e437bc1c-aa7d-11d2-a382-00c04f991e27}' = 'IP Security'
+        '{E47248BA-94CC-49c4-BBB5-9EB7F05183D0}' = 'Group Policy Internet Settings'
+        '{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}' = 'Group Policy Start Menu Settings'
+        '{E5094040-C46C-4115-B030-04FB2E545B00}' = 'Group Policy Regional Options'
+        '{E62688F0-25FD-4c90-BFF5-F508B9D2E31F}' = 'Group Policy Power Options'
+        '{F312195E-3D9D-447A-A3F5-08DFFA24735E}' = 'ProcessVirtualizationBasedSecurityGroupPolicy'
+        '{f3ccc681-b74c-4060-9f26-cd84525dca2a}' = 'Audit Policy Configuration'
+        '{F9C77450-3A41-477E-9310-9ACD617BD9E3}' = 'Group Policy Applications'
+        '{FB2CA36D-0B40-4307-821B-A13B252DE56C}' = 'Enterprise QoS'
+        '{fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}' = 'CP'
+        '{FC491EF1-C4AA-4CE1-B329-414B101DB823}' = 'ProcessConfigCIPolicyGroupPolicy'
+        '{169EBF44-942F-4C43-87CE-13C93996EBBE}' = 'UEV Policy'
+        '{2BFCC077-22D2-48DE-BDE1-2F618D9B476D}' = 'AppV Policy'
+        '{4B7C3B0F-E993-4E06-A241-3FBE06943684}' = 'Per-process Mitigation Options'
+        '{7909AD9E-09EE-4247-BAB9-7029D5F0A278}' = 'MDM Policy'
+        '{CFF649BD-601D-4361-AD3D-0FC365DB4DB7}' = 'Delivery Optimization GP extension'
+        '{D76B9641-3288-4f75-942D-087DE603E3EA}' = 'AdmPwd'
+        '{9650FDBC-053A-4715-AD14-FC2DC65E8330}' = 'Unknown'
+        '{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}' = 'EFS Recovery'
+        '{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}' = 'Internet Explorer Settings'
+    }
+    foreach ($C in $CSE) {
+        if (-not $Limited) {
+            if ($GUIDs[$C]) {
+                [PSCustomObject] @{ Name = $C; Description = $GUIDs[$C] }
+            } else {
+                [PSCustomObject] @{ Name = $C; Description = $C }
+            }
+        } else {
+            if ($GUIDs[$C]) {
+                $GUIDs[$C]
+            } else {
+                $CSE
+            }
+        }
+    }
+}

Public/Find-CSExtension.ps1

@@ -0,0 +1,21 @@
+function Find-CSExtension {
+    [cmdletBinding()]
+    param(
+        [string[]] $CSE,
+        [string] $ComputerName
+    )
+    #List Group Policy Client Side Extensions, CSEs, from Windows 10
+    $Keys = Get-PSRegistry -RegistryPath "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions" -ComputerName $ComputerName
+    foreach ($Key in $Keys.PSSubKeys) {
+        $RegistryKey = Get-PSRegistry -RegistryPath "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\$Key" -ComputerName $ComputerName
+        if ($CSE) {
+            foreach ($C in CSE) {
+                if ($RegistryKey.DefaultKey -eq $Key) {
+                    [PSCustomObject] @{ Name = $Key; Description = $RegistryKey.DefaultKey }
+                }
+            }
+        } else {
+            [PSCustomObject] @{ CSE = $Key; Description = $RegistryKey.DefaultKey }
+        }
+    }
+}

Public/Get-GPOZaurrFilesPolicyDefinition.ps1

@@ -1,4 +1,5 @@
-function Get-GPOZaurrFilesPolicyDefinitions {
+function Get-GPOZaurrFilesPolicyDefinition {
+    [alias('Get-GPOZaurrFilesPolicyDefinitions')]
     [cmdletbinding()]
     param(
         [alias('ForestName')][string] $Forest,
@@ -55,7 +56,7 @@ function Get-GPOZaurrFilesPolicyDefinitions {
                     if ($FilesCache[$Domain][$FileLanguage.BaseName]) {
                         $FilesCache[$Domain][$FileLanguage.BaseName][$Directory.Name] = $true
                     } else {
-                        #Write-Warning "Get-GPOZaurrFilesPolicyDefinitions - File $($FileLanguage.FullName) doesn't have a match."
+                        #Write-Warning "Get-GPOZaurrFilesPolicyDefinition - File $($FileLanguage.FullName) doesn't have a match."
                         $Output.FilesToDelete.Add(
                             [PSCustomobject] @{
                                 Name           = $FileLanguage.BaseName

Public/Get-GPOZaurrInheritance.ps1

@@ -0,0 +1,68 @@
+function Get-GPOZaurrInheritance {
+    [cmdletBinding()]
+    param(
+        [switch] $IncludeBlockedObjects,
+        [switch] $OnlyBlockedInheritance,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    Begin {
+        $ForestInformation = Get-WinADForestDetails -Extended -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    }
+    Process {
+        foreach ($Domain in $ForestInformation.Domains) {
+            $OrganizationalUnits = Get-ADOrganizationalUnit -Filter * -Properties gpOptions, canonicalName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+            foreach ($OU in $OrganizationalUnits) {
+                $InheritanceInformation = [Ordered] @{
+                    CanonicalName      = $OU.canonicalName
+                    BlockedInheritance = if ($OU.gpOptions -eq 1) { $true } else { $false }
+                }
+                if (-not $IncludeBlockedObjects) {
+                    if ($OnlyBlockedInheritance) {
+                        if ($InheritanceInformation.BlockedInheritance -eq $true) {
+                            [PSCustomObject] $InheritanceInformation
+                        }
+                    } else {
+                        [PSCustomObject] $InheritanceInformation
+                    }
+                } else {
+                    if ($InheritanceInformation) {
+                        if ($InheritanceInformation.BlockedInheritance -eq $true) {
+                            $InheritanceInformation['UsersCount'] = $null
+                            $InheritanceInformation['ComputersCount'] = $null
+                            [Array] $InheritanceInformation['Users'] = (Get-ADUser -SearchBase $OU.DistinguishedName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0] -Filter *).SamAccountName
+                            [Array] $InheritanceInformation['Computers'] = (Get-ADComputer -SearchBase $OU.DistinguishedName -Server $ForestInformation['QueryServers'][$Domain]['HostName'][0] -Filter *).SamAccountName
+                            $InheritanceInformation['UsersCount'] = $InheritanceInformation['Users'].Count
+                            $InheritanceInformation['ComputersCount'] = $InheritanceInformation['Computers'].Count
+                        } else {
+                            $InheritanceInformation['UsersCount'] = $null
+                            $InheritanceInformation['ComputersCount'] = $null
+                            $InheritanceInformation['Users'] = $null
+                            $InheritanceInformation['Computers'] = $null
+                        }
+                    }
+                    if ($OnlyBlockedInheritance) {
+                        if ($InheritanceInformation.BlockedInheritance -eq $true) {
+                            [PSCustomObject] $InheritanceInformation
+                        }
+                    } else {
+                        [PSCustomObject] $InheritanceInformation
+                    }
+                }
+                $InheritanceInformation['DistinguishedName'] = $OU.DistinguishedName
+            }
+        }
+    }
+}
+
+<#
+
+$OrganizationalUnits = Get-ADOrganizationalUnit -Filter *
+$Output = foreach ($OU in $OrganizationalUnits) {
+    Get-GPInheritance -Target $OU.DistinguishedName
+}
+$Output | Format-Table
+#>

Public/Get-GPOZaurrPermissionSummary.ps1

@@ -0,0 +1,66 @@
+function Get-GPOZaurrPermissionSummary {
+    [cmdletBinding()]
+    param(
+        [validateSet('AuthenticatedUsers', 'DomainComputers', 'Unknown', 'WellKnownAdministrative', 'NotWellKnown', 'NotWellKnownAdministrative', 'NotAdministrative', 'Administrative', 'All')][string[]] $Type = 'All',
+        [validateSet('Allow', 'Deny', 'All')][string] $PermitType = 'All',
+        [Microsoft.GroupPolicy.GPPermissionType[]] $IncludePermissionType,
+        [Microsoft.GroupPolicy.GPPermissionType[]] $ExcludePermissionType,
+        [switch] $IncludeOwner,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+
+        [string] $Separator
+    )
+
+    $Permissions = Get-GPOZaurrPermission -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation -IncludePermissionType $IncludePermissionType -ExcludePermissionType $ExcludePermissionType -Type $Type -PermitType $PermitType -IncludeOwner:$IncludeOwner
+    $Entries = foreach ($Permission in $Permissions) {
+        [PSCustomObject] @{
+            Name           = $Permission.Name
+            Permission     = $Permission.Permission
+            PermissionType = $Permission.PermissionType
+            Sid            = $Permission.Sid
+            SidType        = $Permission.SidType
+            DisplayName    = $Permission.DisplayName
+            DomainName     = $Permission.DomainName
+            Domain         = $Domain
+        }
+    }
+    $Entries | Group-Object -Property Permission, SidType, Name, DomainName, PermissionType | ForEach-Object {
+        $Property = $_.Name -split ', '
+
+        if ($Property[0] -eq 'GpoOwner') {
+            [PSCustomObject] @{
+                Permission     = $Property[0]
+                Type           = $Property[1]
+                Name           = $Property[2]
+                DomainName     = $Property[3]
+                PermissionType = 'Allow'
+                GPOCount       = $_.Count
+                GPONames       = if ($Separator) { $_.Group.DisplayName -join $Separator } else { $_.Group.DisplayName }
+            }
+        } elseif ($Property.Count -eq 5) {
+            [PSCustomObject] @{
+                Permission     = $Property[0]
+                Type           = $Property[1]
+                Name           = $Property[2]
+                DomainName     = $Property[3]
+                PermissionType = if ($Property[4]) { $Property[4] } else { 'Owner' }
+                GPOCount       = $_.Count
+                GPONames       = if ($Separator) { $_.Group.DisplayName -join $Separator } else { $_.Group.DisplayName }
+            }
+        } else {
+            [PSCustomObject] @{
+                Permission     = $Property[0]
+                Type           = $Property[1]
+                Name           = ''
+                DomainName     = $Property[2]
+                PermissionType = if ($Property[3]) { $Property[3] } else { 'Owner' }
+                GPOCount       = $_.Count
+                GPONames       = if ($Separator) { $_.Group.DisplayName -join $Separator } else { $_.Group.DisplayName }
+            }
+        }
+    }
+}

Public/Get-GPOZaurrSysvolDFSR.ps1

@@ -3,31 +3,38 @@ function Get-GPOZaurrSysvolDFSR {
     param(
         [alias('ForestName')][string] $Forest,
         [string[]] $ExcludeDomains,
+        [string[]] $ExcludeDomainControllers,
         [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [alias('DomainControllers')][string[]] $IncludeDomainControllers,
+        [switch] $SkipRODC,
         [System.Collections.IDictionary] $ExtendedForestInformation,
         [string] $SearchDFSR = 'SYSVOL Share'
     )
-    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExcludeDomainControllers $ExcludeDomainControllers -IncludeDomainControllers $IncludeDomainControllers -SkipRODC:$SkipRODC -ExtendedForestInformation $ExtendedForestInformation
     foreach ($Domain in $ForestInformation.Domains) {
         Write-Verbose "Get-GPOZaurrSysvolDFSR - Processing $Domain"
-        $QueryServer = $ForestInformation['QueryServers']["$Domain"].HostName[0]
-
-        $DFSRConfig = Get-CimInstance -Namespace 'root\microsoftdfs' -Class 'dfsrreplicatedfolderconfig' -ComputerName $QueryServer | Where-Object { $_.ReplicatedFolderName -eq $SearchDFSR }
-        $DFSR = Get-CimInstance -Namespace 'root\microsoftdfs' -Class 'dfsrreplicatedfolderinfo' -ComputerName $QueryServer | Where-Object { $_.ReplicatedFolderName -eq $SearchDFSR }
-        if ($DFSR -and $DFSRConfig -and ($DFSR.ReplicatedFolderGuid -eq $DFSRConfig.ReplicatedFolderGuid)) {
-            [PSCustomObject] @{
-                ComputerName             = $DFSR.PSComputerName
-                DomainName               = $Domain
-                ConflictPath             = $DFSRConfig.ConflictPath
-                LastConflictCleanupTime  = $DFSR.LastConflictCleanupTime
-                CurrentConflictSizeInMb  = $DFSR.CurrentConflictSizeInMb
-                MaximumConflictSizeInMb  = $DFSRConfig.ConflictSizeInMb
-                LastErrorCode            = $DFSR.LastErrorCode
-                LastErrorMessageId       = $DFSR.LastErrorMessageId
-                LastTombstoneCleanupTime = $DFSR.LastTombstoneCleanupTime
-                ReplicatedFolderGuid     = $DFSR.ReplicatedFolderGuid
-                DFSRConfig               = $DFSRConfig
-                DFSR                     = $DFSR
+        foreach ($DC in $ForestInformation.DomainDomainControllers[$Domain]) {
+            Write-Verbose "Get-GPOZaurrSysvolDFSR - Processing $Domain \ $($DC.HostName)"
+            #$QueryServer = $ForestInformation['QueryServers']["$Domain"].HostName[0]
+            $DFSRConfig = Get-CimInstance -Namespace 'root\microsoftdfs' -Class 'dfsrreplicatedfolderconfig' -ComputerName $($DC.HostName) | Where-Object { $_.ReplicatedFolderName -eq $SearchDFSR }
+            $DFSR = Get-CimInstance -Namespace 'root\microsoftdfs' -Class 'dfsrreplicatedfolderinfo' -ComputerName $($DC.HostName) | Where-Object { $_.ReplicatedFolderName -eq $SearchDFSR }
+            if ($DFSR -and $DFSRConfig -and ($DFSR.ReplicatedFolderGuid -eq $DFSRConfig.ReplicatedFolderGuid)) {
+                [PSCustomObject] @{
+                    ComputerName             = $DFSR.PSComputerName
+                    DomainName               = $Domain
+                    ConflictPath             = $DFSRConfig.ConflictPath
+                    LastConflictCleanupTime  = $DFSR.LastConflictCleanupTime
+                    CurrentConflictSizeInMb  = $DFSR.CurrentConflictSizeInMb
+                    MaximumConflictSizeInMb  = $DFSRConfig.ConflictSizeInMb
+                    LastErrorCode            = $DFSR.LastErrorCode
+                    LastErrorMessageId       = $DFSR.LastErrorMessageId
+                    LastTombstoneCleanupTime = $DFSR.LastTombstoneCleanupTime
+                    ReplicatedFolderGuid     = $DFSR.ReplicatedFolderGuid
+                    DFSRConfig               = $DFSRConfig
+                    DFSR                     = $DFSR
+                }
+            } else {
+                Write-Warning "Get-GPOZaurrSysvolDFSR - Couldn't process $($DC.HostName). Conditions not met."
             }
         }
     }

Public/Get-GPOZaurrWmi.ps1

@@ -6,10 +6,11 @@
         [alias('ForestName')][string] $Forest,
         [string[]] $ExcludeDomains,
         [alias('Domain', 'Domains')][string[]] $IncludeDomains,
-        [System.Collections.IDictionary] $ExtendedForestInformation
+        [System.Collections.IDictionary] $ExtendedForestInformation,
+        [switch] $AsHashtable
     )
+    $Dictionary = [ordered] @{}
     $wmiFilterAttr = 'msWMI-Name', 'msWMI-Parm1', 'msWMI-Parm2', 'msWMI-Author', 'msWMI-ID', 'CanonicalName', 'Created', 'Modified'
-
     $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
     foreach ($Domain in $ForestInformation.Domains) {
         $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
@@ -52,7 +53,7 @@
                     -join ($WMI[$i + 5], ';' , $WMI[$i + 6])
                 }
             }
-            [PSCustomObject] @{
+            $WMIObject = [PSCustomObject] @{
                 DisplayName       = $_.'msWMI-Name'
                 Description       = $_.'msWMI-Parm1'
                 DomainName        = $Domain
@@ -68,9 +69,17 @@
                 CanonicalName     = $_.CanonicalName
                 DistinguishedName = $_.'DistinguishedName'
             }
+            if (-not $AsHashtable) {
+                $WMIObject
+            } else {
+                $Dictionary[$WMIObject.ID] = $WMIObject
+            }
         }
 
     }
+    if ($AsHashtable) {
+        $Dictionary
+    }
 }
 <#
 CanonicalName                   : ad.evotec.xyz/System/WMIPolicy/SOM/{E988C890-BDBC-4946-87B5-BF70F39F4686}

Public/Get-GpoZaurrDictionary.ps1

@@ -0,0 +1,26 @@
+function Get-GPOZaurrDictionary {
+    [cmdletBinding()]
+    param(
+        [string] $Splitter = [System.Environment]::NewLine
+    )
+    foreach ($Policy in $Script:GPODitionary.Keys) {
+
+        if ($Script:GPODitionary[$Policy].ByReports) {
+            [Array] $Type = foreach ($T in  $Script:GPODitionary[$Policy].ByReports ) {
+                $T.Report
+            }
+
+        } else {
+            [Array]$Type = foreach ($T in $Script:GPODitionary[$Policy].Types) {
+                ( -join ($T.Category, '/', $T.Settings))
+            }
+        }
+
+        [PSCustomObject] @{
+            Name  = $Policy
+            Types = $Type -join $Splitter
+            Path  = $Script:GPODitionary[$Policy].GPOPath -join $Splitter
+            #Details = $Script:GPODitionary[$Policy]
+        }
+    }
+}

Public/Invoke-GPOZaurr.ps1

@@ -192,13 +192,15 @@
     # to make sure all objects are having same (even empty) properties we "normalize" it
     if (-not $SkipNormalize) {
         foreach ($Report in [string[]] $Output['Reports'].Keys) {
-            $Properties = $Output['Reports'][$Report] | Select-Properties -ExcludeProperty DisplayName, DomainName, GUID, GpoType, Linked, LinksCount, Links -AllProperties -WarningAction SilentlyContinue
+            $FirstProperties = 'DisplayName', 'DomainName', 'GUID', 'GpoType'
+            $EndProperties = 'CreatedTime', 'ModifiedTime', 'ReadTime', 'Filters', 'Linked', 'LinksCount', 'Links'
+            $Properties = $Output['Reports'][$Report] | Select-Properties -ExcludeProperty ($FirstProperties + $EndProperties) -AllProperties -WarningAction SilentlyContinue
             $DisplayProperties = @(
-                'DisplayName', 'DomainName', 'GUID', 'GpoType'
+                $FirstProperties
                 foreach ($Property in $Properties) {
                     $Property
                 }
-                'Linked', 'LinksCount', 'Links'
+                $EndProperties
             )
             $Output['Reports'][$Report] = $Output['Reports'][$Report] | Select-Object -Property $DisplayProperties
         }

Public/Invoke-GPOZaurrSupport.ps1

@@ -0,0 +1,112 @@
+function Invoke-GPOZaurrSupport {
+    [cmdletBinding()]
+    param(
+        [ValidateSet('NativeHTML', 'HTML', 'XML', 'Object')][string] $Type = 'HTML',
+        [alias('Server')][string] $ComputerName,
+        [alias('User')][string] $UserName,
+        [string] $Path,
+        [string] $Splitter = [System.Environment]::NewLine,
+        [switch] $PreventShow,
+        [switch] $Offline
+    )
+    # if user didn't choose anything, lets run as currently logged in user locally
+    if (-not $UserName -and -not $ComputerName) {
+        $UserName = $Env:USERNAME
+
+        # we can also check if the session is Administrative and if so request computer policies
+        if (([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) {
+            $ComputerName = $Env:COMPUTERNAME
+        }
+    }
+
+    If ($Type -eq 'HTML') {
+        $Exists = Get-Command -Name 'New-HTML' -ErrorAction SilentlyContinue
+        if (-not $Exists) {
+            Write-Warning "Request-GPOZaurr - PSWriteHTML module is required for HTML functionality. Use XML, Object or NativeHTML option instead."
+            return
+        }
+    }
+
+
+    $SplatPolicy = @{}
+    if ($Type -in 'Object', 'XML', 'HTML') {
+        if ($Path) {
+            $SplatPolicy['Path'] = $Path
+        } else {
+            $SplatPolicy['Path'] = [io.path]::GetTempFileName().Replace('.tmp', ".xml")
+        }
+        $SplatPolicy['ReportType'] = 'xml'
+    } elseif ($Type -eq 'NativeHTML') {
+        if ($Path) {
+            $SplatPolicy['Path'] = $Path
+        } else {
+            $SplatPolicy['Path'] = [io.path]::GetTempFileName().Replace('.tmp', ".html")
+        }
+        $SplatPolicy['ReportType'] = 'html'
+    }
+    if ($ComputerName) {
+        $SplatPolicy['Computer'] = $ComputerName
+    }
+    if ($UserName) {
+        $SplatPolicy['User'] = $UserName
+    }
+    try {
+        #Write-Verbose "Request-GPOZaurr - ComputerName: $($SplatPolicy['Computer']) UserName: $($SplatPolicy['User'])"
+        $ResultantSetPolicy = Get-GPResultantSetOfPolicy @SplatPolicy -ErrorAction Stop
+    } catch {
+        if ($_.Exception.Message -eq 'Exception from HRESULT: 0x80041003') {
+            Write-Warning "Request-GPOZaurr - Are you running as admin? $($_.Exception.Message)"
+            return
+        } else {
+            $ErrorMessage = $($_.Exception.Message).Replace([Environment]::NewLine, ' ')
+            Write-Warning "Request-GPOZaurr - Error: $ErrorMessage"
+            return
+        }
+    }
+    if ($Type -eq 'NativeHTML') {
+        if (-not $PreventShow) {
+            Write-Verbose "Invoke-GPOZaurrSupport - Opening up file $SplatPolicy['Path']"
+            Start-Process -FilePath $SplatPolicy['Path']
+        }
+        return
+    }
+    # Loads created XML by resultant Output
+    if ($SplatPolicy.Path -and (Test-Path -LiteralPath $SplatPolicy.Path)) {
+        [xml] $PolicyContent = Get-Content -LiteralPath $SplatPolicy.Path
+        if ($PolicyContent) {
+            # lets remove temporary XML file
+            Remove-Item -LiteralPath $SplatPolicy.Path
+        } else {
+            Write-Warning "Request-GPOZaurr - Couldn't load XML file from drive $($SplatPolicy.Path). Terminating."
+            return
+        }
+    } else {
+        Write-Warning "Request-GPOZaurr - Couldn't find XML file on drive $($SplatPolicy.Path). Terminating."
+        return
+    }
+    if ($ComputerName) {
+        if (-not $PolicyContent.Rsop.'ComputerResults'.EventsDetails) {
+            Write-Warning "Request-GPOZaurr - Windows Events for Group Policy are missing. Amount of data will be limited. Firewall issue?"
+        }
+    }
+    if ($Type -eq 'XML') {
+        $PolicyContent.Rsop
+    } else {
+        $Output = [ordered] @{
+            ResultantSetPolicy = $ResultantSetPolicy
+        }
+        if ($PolicyContent.Rsop.ComputerResults) {
+            $Output.ComputerResults = ConvertFrom-XMLRSOP -Content $PolicyContent.Rsop -ResultantSetPolicy $ResultantSetPolicy -ResultsType 'ComputerResults' -Splitter $Splitter
+        }
+        if ($PolicyContent.Rsop.UserResults) {
+            $Output.UserResults = ConvertFrom-XMLRSOP -Content $PolicyContent.Rsop -ResultantSetPolicy $ResultantSetPolicy -ResultsType 'UserResults' -Splitter $Splitter
+        }
+
+        New-GPOZaurrReportConsole -Results $Output
+        if ($Type -contains 'Object') {
+            $Output
+        } elseif ($Type -contains 'HTML') {
+            New-GPOZaurrReportHTML -Path $Path -Offline:$Offline -Open:(-not $PreventShow) -Support $Output
+        }
+    }
+}

README.md

@@ -21,6 +21,16 @@
 
 ## To install
 
+GPOZaurr requires `RSAT` installed to provide results. If you don't have them you can install them as below. Keep in mind it also installs GUI tools so it shouldn't be installed on user workstations.
+
+```powershell
+# Windows 10 Latest
+Add-WindowsCapability -Online -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0'
+Add-WindowsCapability -Online -Name 'Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0'
+```
+
+Finally just install module:
+
 ```powershell
 Install-Module -Name GPOZaurr -AllowClobber -Force
 ```
@@ -39,6 +49,25 @@ That's it. Whenever there's a new version, you run the command, and you can enjo
 
 ## Changelog
 
+- 0.0.59 - 26.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+- 0.0.58 - 26.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+- 0.0.57 - 26.08.2020
+  - Improvement to `Get-GPOZaurrPermissionSummary`
+- 0.0.56 - 26.08.2020
+  - Added `Get-GPOZaurrPermissionSummary`
+- 0.0.55 - 17.08.2020
+  - Improved `Get-GPOZaurrInheritance`
+- 0.0.54 - 16.08.2020
+  - Added `Invoke-GPOZaurrSupport` (WIP)
+  - Added `ConvertFrom-CSExtension`
+  - Added `Find-CSExtension`
+  - Added `Get-GPOZaurrInheritance`
+- 0.0.53 - 16.08.2020
+  - Bad release
+- 0.0.52 - 16.08.2020
+  - Bad release
 - 0.0.51 - 2.08.2020
   - Updates to `Invoke-GPOZaurr` - still work in progress
   - Added `Get-GPOZaurrSysvolDFSR`
@@ -48,7 +77,7 @@ That's it. Whenever there's a new version, you run the command, and you can enjo
 - 0.0.49 - 23.07.2020
   - Hidden files were skipped - and people do crazy things with them
 - 0.0.48 - 21.07.2020
-  - Added `Get-GPOZaurrFilesPolicyDefinitions`
+  - Added `Get-GPOZaurrFilesPolicyDefinition`
   - Updates to `Invoke-GPOZaurr` - still work in progress
   - Updates to `Get-GPOZaurrFiles` - still work in progress
   - Updates to `Remove-GPOZaurrOrphanedSysvolFolders` with backup and support for domains