mirror of
https://github.com/EvotecIT/GPOZaurr.git
synced 2026-09-01 13:18:03 +00:00
65 lines
3.3 KiB
PowerShell
65 lines
3.3 KiB
PowerShell
$GPOZaurrNetLogonPermissions = [ordered] @{
|
|
Name = 'NetLogon Permissions'
|
|
Enabled = $true
|
|
Data = $null
|
|
Execute = { }
|
|
Processing = {
|
|
|
|
}
|
|
Variables = @{
|
|
|
|
}
|
|
Overview = {
|
|
New-HTMLPanel {
|
|
New-HTMLText -Text 'Following chart presents ', 'NetLogon Summary' -FontSize 10pt -FontWeight normal, bold
|
|
New-HTMLList -Type Unordered {
|
|
& $Script:GPOConfiguration['NetLogon']['List']
|
|
} -FontSize 10pt
|
|
#New-HTMLText -FontSize 10pt -Text 'Those problems must be resolved before doing other clenaup activities.'
|
|
New-HTMLChart {
|
|
New-ChartPie -Name 'Correct Owners' -Value $NetLogonOwnersAdministrators.Count -Color LightGreen
|
|
New-ChartPie -Name 'Incorrect Owners' -Value $NetLogonOwnersToFix.Count -Color Crimson
|
|
} -Title 'NetLogon Owners' -TitleAlignment center
|
|
}
|
|
New-HTMLPanel {
|
|
|
|
}
|
|
}
|
|
Solution = {
|
|
New-HTMLTab -Name 'NetLogon Owners' {
|
|
New-HTMLPanel {
|
|
New-HTMLText -TextBlock {
|
|
"Following table shows NetLogon file owners. It's important that NetLogon file owners are set to BUILTIN\Administrators (SID: S-1-5-32-544). "
|
|
"Owners have full control over the file object. Current owner of the file may be an Administrator but it doesn't guarentee that he will be in the future. "
|
|
"That's why as a best-practice it's recommended to change any non-administrative owners to BUILTIN\Administrators, and even Administrative accounts should be replaced with it. "
|
|
} -FontSize 10pt
|
|
New-HTMLList -Type Unordered {
|
|
& $Script:GPOConfiguration['NetLogon']['List']
|
|
} -FontSize 10pt
|
|
New-HTMLText -Text "Follow the steps below table to get NetLogon Owners into compliant state." -FontSize 10pt
|
|
}
|
|
New-HTMLSection -Name 'NetLogon Files List' {
|
|
New-HTMLTable -DataTable $NetLogonOwners -Filtering {
|
|
New-HTMLTableCondition -Name 'PrincipalSid' -Value "S-1-5-32-544" -BackgroundColor LightGreen -ComparisonType string
|
|
New-HTMLTableCondition -Name 'PrincipalSid' -Value "S-1-5-32-544" -BackgroundColor Salmon -ComparisonType string -Operator ne
|
|
New-HTMLTableCondition -Name 'PrincipalType' -Value "WellKnownAdministrative" -BackgroundColor LightGreen -ComparisonType string -Operator eq
|
|
}
|
|
}
|
|
New-HTMLSection -Name 'Steps to fix NetLogon Owners ' {
|
|
New-HTMLContainer {
|
|
New-HTMLSpanStyle -FontSize 10pt {
|
|
New-HTMLText -Text 'Following steps will guide you how to fix NetLogon Owners and make them compliant.'
|
|
New-HTMLWizard {
|
|
& $Script:GPOConfiguration['NetLogon']['Wizard']
|
|
} -RemoveDoneStepOnNavigateBack -Theme arrows -ToolbarButtonPosition center
|
|
}
|
|
}
|
|
}
|
|
}
|
|
New-HTMLTab -Name 'NetLogon Permissions' {
|
|
New-HTMLSection -Name 'NetLogon Files List' {
|
|
New-HTMLTable -DataTable $Netlogon -Filtering
|
|
}
|
|
}
|
|
}
|
|
} |