Update

GPOZaurr.psd1

@@ -8,7 +8,7 @@
     Description          = 'Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.'
     FunctionsToExport    = @('Add-GPOPermission', 'Add-GPOZaurrPermission', 'Backup-GPOZaurr', 'Clear-GPOZaurrSysvolDFSR', 'ConvertFrom-CSExtension', 'Find-CSExtension', 'Get-GPOZaurr', 'Get-GPOZaurrAD', 'Get-GPOZaurrBackupInformation', 'Get-GPOZaurrBroken', 'Get-GPOZaurrDictionary', 'Get-GPOZaurrFiles', 'Get-GPOZaurrFilesPolicyDefinition', 'Get-GPOZaurrFolders', 'Get-GPOZaurrInheritance', 'Get-GPOZaurrLegacyFiles', 'Get-GPOZaurrLink', 'Get-GPOZaurrLinkSummary', 'Get-GPOZaurrNetLogon', 'Get-GPOZaurrOwner', 'Get-GPOZaurrPassword', 'Get-GPOZaurrPermission', 'Get-GPOZaurrPermissionConsistency', 'Get-GPOZaurrPermissionRoot', 'Get-GPOZaurrPermissionSummary', 'Get-GPOZaurrSysvolDFSR', 'Get-GPOZaurrWMI', 'Invoke-GPOZaurr', 'Invoke-GPOZaurrPermission', 'Invoke-GPOZaurrSupport', 'New-GPOZaurrWMI', 'Remove-GPOPermission', 'Remove-GPOZaurr', 'Remove-GPOZaurrBroken', 'Remove-GPOZaurrFolders', 'Remove-GPOZaurrLegacyFiles', 'Remove-GPOZaurrPermission', 'Remove-GPOZaurrWMI', 'Repair-GPOZaurrPermissionConsistency', 'Restore-GPOZaurr', 'Save-GPOZaurrFiles', 'Set-GPOOwner', 'Set-GPOZaurrOwner', 'Show-GPOZaurr')
     GUID                 = 'f7d4c9e4-0298-4f51-ad77-e8e3febebbde'
-    ModuleVersion        = '0.0.64'
+    ModuleVersion        = '0.0.65'
     PowerShellVersion    = '5.1'
     PrivateData          = @{
         PSData = @{

Public/Get-GPOZaurr.ps1

@@ -29,9 +29,13 @@
         if (-not $GPOPath) {
             foreach ($Domain in $ForestInformation.Domains) {
                 $QueryServer = $ForestInformation.QueryServers[$Domain]['HostName'][0]
+                $Count = 0
                 if ($GPOName) {
-                    Get-GPO -Name $GPOName -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object {
-                        Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                    $GroupPolicies = Get-GPO -Name $GPOName -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue
+                    $GroupPolicies | ForEach-Object {
+                        $Count++
+                        #Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                        Write-Verbose "Get-GPOZaurr - Processing [$($_.DomainName)]($Count/$($GroupPolicies.Count)) $($_.DisplayName)"
                         if (-not $Limited) {
                             try {
                                 $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain -ErrorAction Stop
@@ -45,8 +49,11 @@
                         }
                     }
                 } elseif ($GPOGuid) {
-                    Get-GPO -Guid $GPOGuid -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue | ForEach-Object {
-                        Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                    $GroupPolicies = Get-GPO -Guid $GPOGuid -Domain $Domain -Server $QueryServer -ErrorAction SilentlyContinue
+                    $GroupPolicies | ForEach-Object {
+                        $Count++
+                        #Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                        Write-Verbose "Get-GPOZaurr - Processing [$($_.DomainName)]($Count/$($GroupPolicies.Count)) $($_.DisplayName)"
                         if (-not $Limited) {
                             try {
                                 $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain -ErrorAction Stop
@@ -60,8 +67,11 @@
                         }
                     }
                 } else {
-                    Get-GPO -All -Server $QueryServer -Domain $Domain -ErrorAction SilentlyContinue | ForEach-Object {
-                        Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                    $GroupPolicies = Get-GPO -All -Server $QueryServer -Domain $Domain -ErrorAction SilentlyContinue
+                    $GroupPolicies | ForEach-Object {
+                        $Count++
+                        #Write-Verbose "Get-GPOZaurr - Getting GPO $($_.DisplayName) / ID: $($_.ID) from $Domain"
+                        Write-Verbose "Get-GPOZaurr - Processing [$($_.DomainName)]($Count/$($GroupPolicies.Count)) $($_.DisplayName)"
                         if (-not $Limited) {
                             try {
                                 $XMLContent = Get-GPOReport -ID $_.ID -ReportType XML -Server $ForestInformation.QueryServers[$Domain].HostName[0] -Domain $Domain -ErrorAction Stop
@@ -78,11 +88,13 @@
             }
         } else {
             foreach ($Path in $GPOPath) {
+                Write-Verbose "Get-GPOZaurr - Getting GPO content from XML files"
                 Get-ChildItem -LiteralPath $Path -Recurse -Filter *.xml | ForEach-Object {
                     $XMLContent = [XML]::new()
                     $XMLContent.Load($_.FullName)
                     Get-XMLGPO -OwnerOnly:$OwnerOnly.IsPresent -XMLContent $XMLContent -PermissionsOnly:$PermissionsOnly.IsPresent
                 }
+                Write-Verbose "Get-GPOZaurr - Finished GPO content from XML files"
             }
         }
     }

Public/Get-GPOZaurrPermissionConsistency.ps1

@@ -39,7 +39,11 @@
                     ErrorAction = 'SilentlyContinue'
                 }
             }
-            Get-GPO @getGPOSplat | ForEach-Object -Process {
+            $GroupPolicies = Get-GPO @getGPOSplat
+            $Count = 0
+            $GroupPolicies | ForEach-Object -Process {
+                $Count++
+                Write-Verbose "Get-GPOZaurrPermissionConsistency - Processing [$($_.DomainName)]($Count/$($GroupPolicies.Count)) $($_.DisplayName)"
                 try {
                     $IsConsistent = $_.IsAclConsistent()
                     $ErrorMessage = ''
@@ -50,7 +54,7 @@
                 }
                 $SysVolpath = -join ('\\', $Domain, '\sysvol\', $Domain, '\Policies\{', $_.ID.GUID, '}')
                 if ($VerifyInheritance) {
-                    $FolderPermissions = Get-WinADSharePermission -Path $SysVolpath
+                    $FolderPermissions = Get-WinADSharePermission -Path $SysVolpath -Verbose:$false
                     if ($FolderPermissions) {
                         [Array] $NotInheritedPermissions = foreach ($File in $FolderPermissions) {
                             if ($File.Path -ne $SysVolpath -and $File.IsInherited -eq $false) {

Public/Get-GPOZaurrPermissionRoot.ps1

@@ -56,44 +56,6 @@
                         DomainName           = $Domain
                     }
                 }
-
-                <#
-
-                if ($Permission.ActiveDirectoryRights | ForEach-Object {
-                        $_
-                    }) {
-
-                    [PSCustomObject] @{
-                        PrincipalName        = $Permission.Principal
-                        Permission           = 'GpoCustomOwner'
-                        PermissionType       = $Permission.AccessControlType
-                        PrincipalSidType     = $Permission.PrincipalType
-                        PrincipalObjectClass = $Permission.PrincipalObjectType
-                        PrincipalDomainName  = $Permission.PrincipalObjectDomain
-                        PrincipalSid         = $Permission.PrincipalObjectSid
-                        GPOCount             = 'N/A'
-                        GPONames             = -join ("All-", $Domain.ToUpper())
-                        DomainName           = $Domain
-                    }
-                }
-                if ($Permission.ActiveDirectoryRights | ForEach-Object {
-                        $_ -in 'CreateChild', 'GenericAll'
-                    }) {
-                    [PSCustomObject] @{
-                        PrincipalName        = $Permission.Principal
-                        Permission           = 'GpoCustomCreate'
-                        PermissionType       = $Permission.AccessControlType
-                        PrincipalSidType     = $Permission.PrincipalType
-                        PrincipalObjectClass = $Permission.PrincipalObjectType
-                        PrincipalDomainName  = $Permission.PrincipalObjectDomain
-                        PrincipalSid         = $Permission.PrincipalObjectSid
-                        GPOCount             = 'N/A'
-                        GPONames             = -join ("All-", $Domain.ToUpper())
-                        DomainName           = $Domain
-                    }
-
-                }
-                #>
             }
         }
     }

Public/Show-GPOZaurr.ps1

@@ -8,6 +8,7 @@
         )][string[]] $Type
     )
     if ($Type -contains 'GPOList' -or $null -eq $Type) {
+        #Write-Color -Text "[Info] ", "Processing GPO List" -Color Yellow, White
         Write-Verbose -Message "Show-GPOZaurr - Processing GPO List"
         $GPOSummary = Get-GPOZaurr
         $GPOLinked = $GPOSummary.Where( { $_.Linked -eq $true }, 'split')
@@ -15,6 +16,7 @@
         $GPOTotal = $GPOSummary.Count
     }
     if ($Type -contains 'GPOOrphans' -or $null -eq $Type) {
+        #Write-Color -Text "[Info] ", "Processing GPOOrphans" -Color Yellow, White
         Write-Verbose -Message "Show-GPOZaurr - Processing GPO Sysvol"
         $GPOOrphans = Get-GPOZaurrBroken
 
@@ -32,6 +34,7 @@
         }
     }
     if ($Type -contains 'GPOPermissions' -or $null -eq $Type) {
+        #Write-Color -Text "[Info] ", "Processing GPOPermissions" -Color Yellow, White
         Write-Verbose -Message "Show-GPOZaurr - Processing GPO Permissions"
         $GPOPermissions = Get-GPOZaurrPermission -Type All -IncludePermissionType GpoEditDeleteModifySecurity, GpoEdit, GpoCustom -IncludeOwner
     }
@@ -41,7 +44,7 @@
         [Array] $Inconsistent = $GPOPermissionsConsistency.Where( { $_.ACLConsistent -eq $true } , 'split' )
         [Array] $InconsistentInside = $GPOPermissionsConsistency.Where( { $_.ACLConsistentInside -eq $true }, 'split' )
     }
-    if ($Type -contains 'GPOConsistency' -or $null -eq $Type) {
+    if ($Type -contains 'GPOPermissionsRoot' -or $null -eq $Type) {
         Write-Verbose -Message "Show-GPOZaurr - Processing GPO Permissions Root"
         $GPOPermissionsRoot = Get-GPOZaurrPermissionRoot
     }

README.md

@@ -49,6 +49,8 @@ That's it. Whenever there's a new version, you run the command, and you can enjo
 
 ## Changelog
 
+- 0.0.65 - 22.10.2020
+  - Improved `Show-GPOZaurr` (WIP)
 - 0.0.64 - 21.10.2020
   - Renamed `Remove-GPOZaurrOrphaned` to `Remove-GPOZaurrBroken` keeping it as an alias
   - Renamed `Get-GPOZaurrSysvol` to `Get-GPOZaurrBroken` keeping it as an alias