mirror of
https://github.com/EvotecIT/GPOZaurr.git
synced 2026-08-06 09:00:35 +00:00
Przemysław Kłys
21 lines
915 B
PowerShell
21 lines
915 B
PowerShell
#Clear-Host
|
|
Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
|
|
|
|
$ApprovedGroups = @(
|
|
'GDS-TestGroup10'
|
|
)
|
|
$RootGroups = @(
|
|
#'przemyslaw.klys'
|
|
)
|
|
|
|
|
|
|
|
Invoke-GPOZaurrPermission -Linked Root -Verbose { #-IncludePermissionType GpoEdit, GpoEditDeleteModifySecurity -Type NotAdministrative, NotWellKnownAdministrative -Verbose {
|
|
Set-GPOOwner -Type Administrative
|
|
#Set-GPOOwner -Principal 'EVOTEC\Enterprise Admins'
|
|
#Set-GPOOwner -Principal 'Domain Admins'
|
|
Remove-GPOPermission -Type Administrative -IncludePermissionType GPOCustom
|
|
Remove-GPOPermission -Type NotAdministrative, NotWellKnownAdministrative -IncludePermissionType GpoEdit, GpoEditDeleteModifySecurity
|
|
Add-GPOPermission -Type Administrative -IncludePermissionType GpoEditDeleteModifySecurity
|
|
#Add-GPOPermission -Type WellKnownAdministrative -IncludePermissionType GpoEditDeleteModifySecurity
|
|
} #-WhatIf #| Format-Table * |