--- external help file: GPOZaurr-help.xml Module Name: GPOZaurr online version: schema: 2.0.0 --- # Get-GPOZaurrBroken ## SYNOPSIS Detects broken or otherwise damaged Group Policies ## SYNTAX ``` Get-GPOZaurrBroken [[-Forest] ] [[-ExcludeDomains] ] [[-ExcludeDomainControllers] ] [[-IncludeDomains] ] [[-IncludeDomainControllers] ] [-SkipRODC] [[-ExtendedForestInformation] ] [-VerifyDomainControllers] [] ``` ## DESCRIPTION Detects broken or otherwise damaged Group Policies providing insight whether GPO exists in both AD and SYSVOL. It provides few statuses: - Permissions issue - means account couldn't read GPO due to permissions - ObjectClass issue - means that ObjectClass is of type Container, rather than expected groupPolicyContainer - Not available on SYSVOL - means SYSVOL data is missing, yet AD metadata is available - Not available in AD - means AD metadata is missing, yet SYSVOL data is available - Exists - means AD metadata and SYSVOL data are available ## EXAMPLES ### EXAMPLE 1 ``` Get-GPOZaurrBroken -Verbose | Format-Table ``` ## PARAMETERS ### -Forest Target different Forest, by default current forest is used ```yaml Type: String Parameter Sets: (All) Aliases: ForestName Required: False Position: 1 Default value: None Accept pipeline input: False Accept wildcard characters: False ``` ### -ExcludeDomains Exclude domain from search, by default whole forest is scanned ```yaml Type: String[] Parameter Sets: (All) Aliases: Required: False Position: 2 Default value: None Accept pipeline input: False Accept wildcard characters: False ``` ### -ExcludeDomainControllers Exclude specific domain controllers, by default there are no exclusions, as long as VerifyDomainControllers switch is enabled. Otherwise this parameter is ignored. ```yaml Type: String[] Parameter Sets: (All) Aliases: Required: False Position: 3 Default value: None Accept pipeline input: False Accept wildcard characters: False ``` ### -IncludeDomains Include only specific domains, by default whole forest is scanned ```yaml Type: String[] Parameter Sets: (All) Aliases: Domain, Domains Required: False Position: 4 Default value: None Accept pipeline input: False Accept wildcard characters: False ``` ### -IncludeDomainControllers Include only specific domain controllers, by default all domain controllers are included, as long as VerifyDomainControllers switch is enabled. Otherwise this parameter is ignored. ```yaml Type: String[] Parameter Sets: (All) Aliases: DomainControllers Required: False Position: 5 Default value: None Accept pipeline input: False Accept wildcard characters: False ``` ### -SkipRODC Skip Read-Only Domain Controllers. By default all domain controllers are included. ```yaml Type: SwitchParameter Parameter Sets: (All) Aliases: Required: False Position: Named Default value: False Accept pipeline input: False Accept wildcard characters: False ``` ### -ExtendedForestInformation Ability to provide Forest Information from another command to speed up processing ```yaml Type: IDictionary Parameter Sets: (All) Aliases: Required: False Position: 6 Default value: None Accept pipeline input: False Accept wildcard characters: False ``` ### -VerifyDomainControllers Forces cmdlet to check GPO Existance on Domain Controllers rather then per domain ```yaml Type: SwitchParameter Parameter Sets: (All) Aliases: Required: False Position: Named Default value: False Accept pipeline input: False Accept wildcard characters: False ``` ### CommonParameters This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216). ## INPUTS ## OUTPUTS ## NOTES General notes ## RELATED LINKS